subcloud openstack application applied failed

[Austin Sun]

Brief Description
-----------------
Subcloud openstack application can not be applied
Severity
--------
<Major: System/Feature is usable but degraded>

Steps to Reproduce
------------------
1) deploy dist-cloud
2) apply openstack application on subcloud
Expected Behavior
------------------
the openstack application is applied successfully

Actual Behavior
----------------

it failed . and

Reproducibility
---------------
100%

System Configuration
--------------------
dist-cloud on virtual

Branch/Pull Time/Commit
-----------------------
20200414T173402Z

Last Pass
---------
stx.3.0
Timestamp/Logs
--------------
detail info/logs are in
http://lists.starlingx.io/pipermail/starlingx-discuss/2020-April/008439.html

Test Activity
-------------
Feature test

 Workaround
 ----------
 Describe workaround if available

[Austin Sun (sunausti)]

in additional , there are no svc named as keystone-admin
controller-0:~$ kubectl get svc -n openstack | grep keystone
keystone ClusterIP 10.111.249.224 <none> 80/TCP,443/TCP 46h
keystone-api ClusterIP 10.103.107.145 <none> 5000/TCP 46h

[yong hu (yhu6)]

@Dan, are you working on this issue? or any support is needed?

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/735088

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/735088
Committed: https://git.openstack.org/cgit/starlingx/openstack-armada-app/commit/?id=ce81e5bceaeaba230a0ab0822a5e9cd2bc8a8a31
Submitter: Zuul
Branch: master

commit ce81e5bceaeaba230a0ab0822a5e9cd2bc8a8a31
Author: Dan Voiculeasa <email address hidden>
Date: Thu Jun 11 12:09:13 2020 +0300

    Change stx-openstack services token validation endpoint

    If no interface is set, the default is the admin interface.
    In a normal deployment both openstack-keystone admin and internal
    endpoints are exposed on the same URL.

    In case of Distributed Cloud openstack-keystone URL for admin is
    overriden to something different than internal URL.

    Due to lack of interface, the default `admin` is used, yet the URL is
    set to the interal one. The config doesn't point to a valid Keystone
    service. Thus Cinder, Nova and Nova-api-proxy cannot validate tokens.

    Modify configs for services to point to the internal keystone service.

    Closes-Bug: 1875914
    Change-Id: I19385f1fe27cf8f20f5ee7b43abf86b220c9d8d6
    Signed-off-by: Dan Voiculeasa <email address hidden>

[Frank Miller (sensfan22)]

Re-opening this LP as an additional change is required.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/746189

[Dan Voiculeasa (dvoicule)]

Also launching VMs using openstack on subcloud fails.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/746344

[OpenStack Infra (hudson-openstack)]

Change abandoned by Dan Voiculeasa (<email address hidden>) on branch: master
Review: https://review.opendev.org/746189

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/746344
Committed: https://git.openstack.org/cgit/starlingx/openstack-armada-app/commit/?id=260378f6debadd645e1480ddd039ea3b6ba23c9c
Submitter: Zuul
Branch: master

commit 260378f6debadd645e1480ddd039ea3b6ba23c9c
Author: Dan Voiculeasa <email address hidden>
Date: Fri Aug 14 20:11:39 2020 +0300

    Remove subcloud openstack overrides

    VMs fail to launch using openstack on subclouds.
    Remove openstack admin endpoint overrides as they are not used
    currently and they cause openstack services interaction.

    Closes-Bug: 1875914
    Change-Id: I2ad12ff9b10adb9f3838bca348856ce152a45b21
    Signed-off-by: Dan Voiculeasa <email address hidden>