Incorrect OS_AUTH_URL in subcloud openrc downloaded from Horizon

Bug #2056782 reported by Davi Frossard
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Low
Davi Frossard

Bug Description

Brief Description
-----------------
Incorrect OS_AUTH_URL in subcloud openrc downloaded from Horizon:
export OS_AUTH_URL=https://[2607:f160:10:924c:ce:40a::]:5001/v3/v3

Severity
--------
Minor

Steps to Reproduce
------------------
1. Download one of the subcloud's admin-openrc.sh from Horizon

2. The OS_AUTH_URL is incorrect. (/v3 is doubled). Not only the "/v3/v3" is incorrect, but also "[2607:f160:10:924c:ce:40a::]:5001" is the admin interface for keystone, and the default "controller-mgmt-if-gnp" network policy only allows access to that port on mgmt interface from the CC, and not from an outside client. (that's why we got a timeout. if only the /v3/v3 were the problem, we'd have gotten a 404 from Keystone)

Request to review/fix the admin-openrc.sh file were "/v3/v3" is doubled and incorrect

Reproducibility
---------------
100% reproducible

System Configuration
--------------------
Subcloud

Workaround
----------
Manually correct endpoint on downloaded file (admin-openrc.sh) from Horizon

Changed in starlingx:
status: New → In Progress
Davi Frossard (dbarrosf)
Changed in starlingx:
assignee: nobody → Davi Frossard (dbarrosf)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to gui (master)

Reviewed: https://review.opendev.org/c/starlingx/gui/+/912306
Committed: https://opendev.org/starlingx/gui/commit/fea758753b65a723232e59de2789e0a7271b2e5b
Submitter: "Zuul (22348)"
Branch: master

commit fea758753b65a723232e59de2789e0a7271b2e5b
Author: Davi Frossard <email address hidden>
Date: Fri Mar 8 17:39:58 2024 -0300

    Remove "/v3" duplicate from OS_AUTH_URL

    The filter "align_auth_url" is appending an extra (and hardcoded) "/v3".
    This is causing wrong url for region == 'SystemController' at
    starlingx-openrc.sh

    TEST PLAN:
    [PASS] Build, install
    [PASS] Check if downloaded file shows correct endpoint for OS_AUTH_URL

    Closes-Bug: 2056782

    Change-Id: Ifb3c537e87573b7c710b8d94cd28ae232a14d2c9
    Signed-off-by: Davi Frossard <email address hidden>

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → Low
tags: added: stx.10.0 stx.gui
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to gui (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/gui/+/916799

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to gui (master)

Reviewed: https://review.opendev.org/c/starlingx/gui/+/916799
Committed: https://opendev.org/starlingx/gui/commit/d6f2a27d42968be0352c2a608419c45504281adf
Submitter: "Zuul (22348)"
Branch: master

commit d6f2a27d42968be0352c2a608419c45504281adf
Author: Davi Frossard <email address hidden>
Date: Tue Apr 23 11:45:34 2024 -0300

    Fix OS_AUTH_URL for subcloud case

    Expected IP in OS_AUTH_URL is the public interface of keystone
    identity, not the admin interface.

    TEST PLAN:
    [PASS] Build, install
    [PASS] Check if downloaded file shows correct endpoint for subcloud
    OS_AUTH_URL

    Closes-Bug: 2056782

    Change-Id: I5c6b24cedf97cac3f58ddd2e78fa5d52b4e45ae0
    Signed-off-by: Davi Frossard <email address hidden>

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.