Admin-openrc.sh downloaded from horizon should have OS_AUTH_URL point to RegionOne keystone public endpoint

Bug #1892090 reported by Yuxing
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Medium
Yuxing

Bug Description

Brief Description
-----------------
The admin-openrc.sh downloaded from Horizon should have OS_AUTH_URL point to RegionOne keystone public endpoint, instead of SystemController region keystone.

Severity
--------
Minor

Steps to Reproduce
------------------
1 Open Horizon, choose "central cloud" as "SystemController"
2 Navigate to Project > API Access > Download Openstack RC file > Select Openstack RC file

Expected Behavior
------------------
In admin-openrc.sh, export OS_AUTH_URL=http://10.10.40.2:5000/v3

Actual Behavior
----------------
export OS_AUTH_URL=http://10.10.40.2:25000/v3

Reproducibility
---------------
100% producible

System Configuration
--------------------
DC

Branch/Pull Time/Commit
-----------------------
Build date 2020-08-07_20-00-00

Last Pass
---------
NA

Timestamp/Logs
--------------
na

Test Activity
-------------
Developer Testing

Workaround
----------
In system controller, manually set the env variable:
export OS_AUTH_URL=http://10.10.40.2:5000/v3

Yuxing (yuxing)
Changed in starlingx:
assignee: nobody → Yuxing (yuxing)
Bill Zvonar (billzvonar)
tags: added: stx.5.0
Changed in starlingx:
status: New → Triaged
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to upstream (master)

Fix proposed to branch: master
Review: https://review.opendev.org/748500

Changed in starlingx:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to gui (master)

Fix proposed to branch: master
Review: https://review.opendev.org/748776

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on upstream (master)

Change abandoned by Yuxing Jiang (<email address hidden>) on branch: master
Review: https://review.opendev.org/748500
Reason: Fix will go to project GUI, the new change id: I1f43f79364f5cc7bff382c1ae90a7f8f801abedb

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to gui (master)

Reviewed: https://review.opendev.org/748776
Committed: https://git.openstack.org/cgit/starlingx/gui/commit/?id=ed99d3960c67c6671a2f55b4bf2e6756128f9f4e
Submitter: Zuul
Branch: master

commit ed99d3960c67c6671a2f55b4bf2e6756128f9f4e
Author: Yuxing Jiang <email address hidden>
Date: Fri Aug 28 21:36:27 2020 -0400

    Align OS_AUTH_URL in admin-openrc.sh

    The admin-openrc.sh can be downloaded from Horizon. This file can be
    used for authentication as sysadmin in system controllers. However,
    as the keystone public endpoint of region SystemController differs
    from the RegionOne. If a user download an RC file of SystemController
    and use the OS_AUTH_URL to authenticate, a HTTP 401 Error(The request
    you have made requires authentication) will be produced.

    In the upstream project, the OS_AUTH_URL is got according to the
    "Central Cloud Region" and shown in the view. This commit overwrites
    the openrc template, aligns the OS_AUTH_URL in the admin-openrc.sh of
    region SystemController with the RegionOne by port replacement. As it
    is a specific usage for starlingx rather than a generic usage, it will
    not go to the Horizon project.

    Test:
    1. Choose the "Central Cloud Region" in Horizon as "SystemController"
    2. Download the admin-openrc.sh via API Access -> Download OpenStack
    RC File
    3. Check the OS_AUTH_URL is pointing to then keystone pulic endpoint
    of RegionOne
    4. Check the keystone pulic endpoint is still correct in the web page

    Change-Id: I1f43f79364f5cc7bff382c1ae90a7f8f801abedb
    Closes-Bug: 1892090
    Signed-off-by: Yuxing Jiang <email address hidden>

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
tags: added: stx.gui
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to gui (f/centos8)

Fix proposed to branch: f/centos8
Review: https://review.opendev.org/c/starlingx/gui/+/792252

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to gui (f/centos8)
Download full text (16.7 KiB)

Reviewed: https://review.opendev.org/c/starlingx/gui/+/792252
Committed: https://opendev.org/starlingx/gui/commit/63d6de4701a7f21779ad9ea4060fce9ed85bc71f
Submitter: "Zuul (22348)"
Branch: f/centos8

commit e05e1a43531499d94cfb1e538683ee36eea92b43
Author: Teresa Ho <email address hidden>
Date: Thu May 13 23:04:04 2021 -0400

    Do not display primary_reselect if not specified

    If the attribute 'primary_reselect' is not specified, the sysinv API
    will leave it as null and GUI will not display the attribute.

    Closes-Bug: 1928461

    Change-Id: I5b8ef8b29fb7775dde8607bb14cd733015269f82
    Signed-off-by: Teresa Ho <email address hidden>

commit f1a4d30eca91c7a239ebd7479a56fef7870a4b2e
Author: Pablo Bovina <email address hidden>
Date: Fri May 7 16:59:50 2021 -0300

    Display DataNetworks list

    DataNetworks are listed for pci-sriov
    under Create/Edit Interface forms.

    Closes-bug: 1927782
    Signed-off-by: Pablo Bovina <email address hidden>
    Change-Id: If927bb0facdec9e587a13354bef56eca5df08785

commit 7973677a3d7d518c31757b36037373d2c4ac769c
Author: Andre Fernando Zanella Kantek <email address hidden>
Date: Thu May 6 07:32:59 2021 -0400

    In AIO-SX, interface edit rejected with Host administrative unlocked

    It was detected the edit rejection when the user, on an unlocked
    host, tries to convert an ethernet non-SRIOV to an SRIOV-PF
    interface, with the server responding "Host 'controller-0' is
    administrative 'unlocked'".

    This is caused because UpdateInterface.handle() executes first the
    datanetwork assignment and then modifies the interface. Since the
    assignment, on an unlocked host, is only possible for SRIOV
    interfaces, the order of execution matters, we need to have the
    interface modified and then assigned. The correction consists of
    altering the order (first modify then assign) to do the described.

    Tests:
    To ensure the continuous operation of the other types of conversion
    the following combinations were tested (all were done adding the
    interface to a network or datanetwork, depending on the class):

    Unlocked state:
    ethernet/[none,data,pci-pt,platform] to pci-sriov: accepted
    modify parameters of a pci-sriov: rejected
    conversion to other than pci-sriov: rejected

    Locked state:
    all conversions (with network/datanetwork assignment) are accepted

    Closes-Bug: 1925183

    Signed-off-by: Andre Fernando Zanella Kantek <email address hidden>
    Change-Id: Ib124bf7222e07966becbb81198f65f5bc55715ce

commit ddcc4fd3ccb4c02580c71414345993252b089761
Author: Enzo Candotti <email address hidden>
Date: Tue May 4 11:08:57 2021 -0300

    Enable add/edit Worker personality on DC AIO-DX's GUI

    This update is to allow the option to add a new host with Worker
    personality on Distributed Cloud mode.

    Closes-Bug: 1927107

    Signed-off-by: Enzo Candotti <email address hidden>
    Change-Id: Idfed9352c7c6467014a2ed2cf10b70f6b470c28c

commit de43c019c0b7f038d0184d10aab2bf61b6c5e147
Author: Andre Fer...

tags: added: in-f-centos8
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on gui (f/centos8)

Change abandoned by "Bart Wensley <email address hidden>" on branch: f/centos8
Review: https://review.opendev.org/c/starlingx/gui/+/765064
Reason: This patch has been idle for more than six months. I am abandoning it to keep the review queue sane. If you are still interested in working on this patch, please unabandon it and upload a new patchset.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.