Bug 1106394

Summary:	heat.conf auth_uri is incorrectly set leading to api-cfn authentication errors.
Product:	Red Hat OpenStack	Reporter:	Lee Yarwood <lyarwood>
Component:	openstack-packstack	Assignee:	Martin Magr <mmagr>
Status:	CLOSED ERRATA	QA Contact:	Amit Ugol <augol>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5.0 (RHEL 7)	CC:	adahms, aortega, augol, derekh, mmagr, shardy, yeylon
Target Milestone:	rc
Target Release:	5.0 (RHEL 7)
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	openstack-packstack-2014.1.1-0.25.dev1149.el7ost	Doc Type:	Bug Fix
Doc Text:	Previously, Red Hat OpenStack environments deployed using the PackStack all-in-one installation process would not be able to perform autoscaling under certain conditions. This was caused by the default value of the 'keystone_ec2_uri' configuration key being written to the the heat.conf file during the installation process, which would prevent Heat from authenticating against Keystone correctly. With this update, the correct value required by Heat is now explicitly specified and written to the heat.conf file, making it possible for Heat to authenticate correctly against Keystone.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-07-08 15:39:07 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Lee Yarwood 2014-06-09 08:54:20 UTC

Description of problem:
The auth_uri option within heat.conf defaults to auth_uri=http://127.0.0.1:5000/v2.0/ec2tokens in packstack deployed environments. This leads to the following authentication errors in api-cfn.log :

~~~
2014-06-04 03:52:12.346 1178 INFO heat.api.aws.ec2token [-] Checking AWS credentials..
2014-06-04 03:52:12.347 1178 INFO heat.api.aws.ec2token [-] AWS credentials found, checking against keystone.
2014-06-04 03:52:12.348 1178 INFO heat.api.aws.ec2token [-] Authenticating with http://127.0.0.1:5000/v2.0/ec2tokens/ec2tokens
2014-06-04 03:52:12.350 1178 INFO urllib3.connectionpool [-] Starting new HTTP connection (1): 127.0.0.1
2014-06-04 03:52:12.356 1178 INFO heat.api.aws.ec2token [-] AWS authentication failure.
~~~

This error then leads to no autoscaling taking place. Switching this to auth_uri=http://127.0.0.1:5000/v2.0 removes these errors and allows stacks to autoscale.

Version-Release number of selected component (if applicable):
openstack-packstack-2014.1.1-0.11.1.dev1055.el7ost.noarch.rpm
openstack-packstack-puppet-2014.1.1-0.11.1.dev1055.el7ost.noarch.rpm

How reproducible:
Always

Steps to Reproduce:
1. Install Heat using packstack.


Actual results:
Errors in api-cfn.api result in no autoscaling of deployed stacks.

Expected results:
No errors present in api-cfn.api, deployed stacks autoscale as required.

Additional info:

Attaching an upstream RDO Icehouse bug that appears to be the same issue :

https://bugs.launchpad.net/heat/+bug/1318599

Comment 1 Martin Magr 2014-06-10 12:44:06 UTC

*** Bug 1106850 has been marked as a duplicate of this bug. ***

Comment 7 errata-xmlrpc 2014-07-08 15:39:07 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2014-0846.html