[SRU] glance sync: need keystone v3 auth support
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
simplestreams |
Fix Released
|
High
|
Unassigned | ||
simplestreams (Ubuntu) |
Fix Released
|
Medium
|
Unassigned | ||
Xenial |
Won't Fix
|
Medium
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Cosmic |
Fix Released
|
Undecided
|
Unassigned | ||
Disco |
Fix Released
|
Medium
|
Unassigned |
Bug Description
[Impact]
simplestreams can't sync images when keystone is configured to use v3, keystone v2 is deprecated since mitaka[0] (the version shipped with xenial)
The OpenStack Keystone charm supports v3 only since Queens and later[1]
[Test Case]
* deploy a openstack environment with keystone v3 enabled
- get a copy of the bundle available at http://
Expected result:
- "glance image-list" lists trusty and xenial images
- the file glance-
Actual result:
- "glance image-list" is empty
- the file glance-
INFO * 04-09 22:04:06 [PID:14571] * root * Calling DryRun mirror to get item list
ERROR * 04-09 22:04:06 [PID:14571] * root * Exception during syncing:
Traceback (most recent call last):
File "/usr/share/
do_
File "/usr/share/
objectstore
File "/usr/lib/
super(
File "/usr/lib/
self.
File "/usr/lib/
raise ValueError(
ValueError: (tenant_id or tenant_name)
[Regression Potential]
* A possible regression will manifest itself figuring out if v2 or v3 should be used, after the connection is made there are no further changes introduced by this SRU
[Other Info]
When trying to test my changes for bug 1686086, I was unable to auth
to keystone, which means glance image sync just doesn't work with
a v3 keystone.
Related bugs:
* bug 1719879: swift client needs to use v1 auth prior to ocata
* bug 1728982: openstack mirror with keystone v3 always imports new images
* bug 1611987: glance-
[0] https:/
[1] https:/
Related branches
- Scott Moser (community): Approve
- Server Team CI bot: Approve (continuous-integration)
- Alex Kavanagh (community): Approve
-
Diff: 209 lines (+106/-16)3 files modifiedsimplestreams/mirrors/glance.py (+7/-2)
simplestreams/objectstores/swift.py (+5/-1)
simplestreams/openstack.py (+94/-13)
- Rafael David Tinoco (community): Disapprove
- Bryce Harrington (community): Approve
- Felipe Reyes (community): Approve
- Edward Hope-Morley: Pending requested
-
Diff: 1851 lines (+1732/-11)10 files modifieddebian/changelog (+15/-0)
debian/patches/428-do-not-require-that-hypervisor_config-be-present.patch (+23/-0)
debian/patches/433-glance-ignore-inactive-images.patch (+42/-0)
debian/patches/435-glance-refactor-for-testing.patch (+853/-0)
debian/patches/436-glance-fix-race-conditions.patch (+479/-0)
debian/patches/450-453-454-keystone-v3-support.patch (+13/-10)
debian/patches/455-nova-lxd-support-squashfs-images.patch (+230/-0)
debian/patches/460-glance-handle-v2-auth-with-sessions.patch (+33/-0)
debian/patches/series (+8/-1)
debian/patches/skip-openstack-tests-if-no-libs.patch (+36/-0)
- Rafael David Tinoco (community): Disapprove
- Billy Olsen (community): Approve
- Scott Moser (community): Needs Resubmitting
- Felipe Reyes (community): Approve
- Eric Desrochers: Pending requested
-
Diff: 1845 lines (+1729/-11)10 files modifieddebian/changelog (+12/-0)
debian/patches/428-do-not-require-that-hypervisor_config-be-present.patch (+23/-0)
debian/patches/433-glance-ignore-inactive-images.patch (+42/-0)
debian/patches/435-glance-refactor-for-testing.patch (+853/-0)
debian/patches/436-glance-fix-race-conditions.patch (+479/-0)
debian/patches/450-453-454-keystone-v3-support.patch (+13/-10)
debian/patches/455-nova-lxd-support-squashfs-images.patch (+230/-0)
debian/patches/460-glance-handle-v2-auth-with-sessions.patch (+33/-0)
debian/patches/series (+8/-1)
debian/patches/skip-openstack-tests-if-no-libs.patch (+36/-0)
Changed in simplestreams: | |
status: | New → Confirmed |
importance: | Undecided → High |
Changed in simplestreams (Ubuntu): | |
importance: | Undecided → Medium |
status: | New → In Progress |
assignee: | nobody → Scott Moser (smoser) |
tags: | added: sts |
Changed in simplestreams (Ubuntu Xenial): | |
status: | New → Confirmed |
Changed in simplestreams (Ubuntu Zesty): | |
status: | New → Confirmed |
Changed in simplestreams (Ubuntu Xenial): | |
importance: | Undecided → Medium |
Changed in simplestreams (Ubuntu Zesty): | |
importance: | Undecided → Medium |
Changed in simplestreams: | |
status: | Confirmed → Fix Committed |
description: | updated |
tags: | added: sts-sru-needed |
tags: | removed: sts-sru-needed |
description: | updated |
description: | updated |
Changed in simplestreams (Ubuntu Zesty): | |
status: | Confirmed → Won't Fix |
description: | updated |
description: | updated |
summary: |
- glance sync: need keystone v3 auth support + [SRU] glance sync: need keystone v3 auth support |
Changed in simplestreams (Ubuntu): | |
assignee: | Scott Moser (smoser) → nobody |
Changed in simplestreams (Ubuntu Xenial): | |
assignee: | nobody → Eric Desrochers (slashd) |
Changed in simplestreams (Ubuntu Xenial): | |
assignee: | Eric Desrochers (slashd) → Felipe Reyes (freyes) |
Changed in simplestreams (Ubuntu Disco): | |
status: | Fix Released → New |
Changed in simplestreams (Ubuntu Xenial): | |
assignee: | nobody → Rafael David Tinoco (rafaeldtinoco) |
status: | New → Confirmed |
Changed in simplestreams (Ubuntu Xenial): | |
status: | Confirmed → In Progress |
Changed in simplestreams (Ubuntu Bionic): | |
status: | Fix Released → In Progress |
Changed in simplestreams (Ubuntu Xenial): | |
status: | In Progress → Won't Fix |
assignee: | Rafael David Tinoco (rafaeldtinoco) → nobody |
Changed in simplestreams (Ubuntu Bionic): | |
assignee: | nobody → Rafael David Tinoco (rafaeldtinoco) |
Changed in simplestreams (Ubuntu Bionic): | |
status: | In Progress → Fix Released |
assignee: | Rafael David Tinoco (rafaeldtinoco) → nobody |
i've linked a work-in-progress branch. /code.launchpad .net/~smoser/ simplestreams/ trunk.openstack -v3-auth
https:/
there i had keystone auth working.