Keystone admin port exposure change broke backwards compatibility

Bug #1748872 reported by Juan Antonio Osorio Robles
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Juan Antonio Osorio Robles

Bug Description

The following series of commits https://review.openstack.org/#/q/I79563f62fd49a4f7654779157ebda3c239d6dd22 broke backwards compatibility for the newton branch which some folks were using in production. It did so since some folks had external plugins that relied on the keystone admin port being exposed to the public network. In order to keep these use-cases working, while folks migrate to using keytone v3, we need to re-expose the keystone admin endpoint.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-tripleo (stable/newton)

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/543431

Changed in tripleo:
status: New → Triaged
importance: Undecided → High
milestone: none → queens-rc1
Changed in tripleo:
status: Triaged → In Progress
assignee: nobody → Juan Antonio Osorio Robles (juan-osorio-robles)
Changed in tripleo:
milestone: queens-rc1 → rocky-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-tripleo (stable/newton)

Reviewed: https://review.openstack.org/543431
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=5618a274179bc6497d2a4478ce763eb91ecacf0b
Submitter: Zuul
Branch: stable/newton

commit 5618a274179bc6497d2a4478ce763eb91ecacf0b
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Mon Feb 12 13:26:15 2018 +0200

    Make exposing the keystone admin port optional

    A recent commit [1] removed the exposure of the keystone admin port for
    the public interface. While this removal was intended, it was not ideal
    to backport it to stable/newton as some folks were relying on this port
    being available.

    This commit then adds a flag to expose or hide the keystone admin
    endpoint from the public network. It's on by default to keep the
    functionality that folks with newton were seeing; but it lets folks opt
    out of it if needed (as is the case is some deployments).

    [1] I79563f62fd49a4f7654779157ebda3c239d6dd22

    Closes-Bug: #1748872
    Change-Id: I865aff9d54ebbe6acc44ffca41c951a05da71218

tags: added: in-stable-newton
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/puppet-tripleo 5.6.9

This issue was fixed in the openstack/puppet-tripleo 5.6.9 release.

Changed in tripleo:
milestone: rocky-1 → rocky-2
Changed in tripleo:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.