Bug 1231965
| Summary: | Undercloud heat should use stack domain users | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Steven Hardy <shardy> |
| Component: | rhosp-director | Assignee: | Derek Higgins <derekh> |
| Status: | CLOSED ERRATA | QA Contact: | Amit Ugol <augol> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | augol, calfonso, derekh, gmollett, hbrock, jslagle, markmc, mburns, mcornea, morazi, rrosa, security-response-team, shardy, vkaigoro, yeylon |
| Target Milestone: | ga | Keywords: | Security, Triaged |
| Target Release: | Director | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | os-cloud-config-0.2.8-3.el7ost, instack-undercloud-2.1.2-6.el7ost | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-08-05 13:53:38 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Comment 7
chris alfonso
2015-06-19 17:36:37 UTC
I've pushed a patch to configure use of domains in the undercloud heat here https://review.gerrithub.io/#/c/237503/ It also requires a fix that has been merged into os-cloud-config https://review.openstack.org/#/c/180563/2 but this fix hasn't mad it into the downstream packaging os-cloud-config-0.2.8-1.el7ost.noarch os-cloud-config patch merged downstream: https://code.engineering.redhat.com/gerrit/#/c/51516/ i tested the instack-undercloud patch, and it lgtm so I applied it downstream: https://code.engineering.redhat.com/gerrit/#/c/51530/ built into: instack-undercloud-2.1.2-6.el7ost Looking in the current heat-engine.log in the controller node: 2015-07-05 16:24:48.810 8917 WARNING heat.common.config [-] stack_user_domain_ id or stack_user_domain_name not set in heat.conf falling back to using default And the above parameters are not set in /etc/heat/heat.conf @Amit: Can you please confirm if that log is from the undercloud heat (e.g the logs on the instack node, not the deployed cloud)? There is a separate bug for the overcloud heat configuration, bz#1235748, this is only about configuring the undercloud heat service correctly. Note another way to validate this is to look at the users in the "heat" domain on the undercloud keystone, e.g via python-openstackclient. Without this fix, there will be no "heat" domain or users in it, with it the domain will exist and several users will exist after a successful overcloud deployment. After testing this one with Steven I can verify the fix for the undercloud installation. Please see https://bugzilla.redhat.com/show_bug.cgi?id=1235748 to monitor the same issue on the overcloud environement Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2015:1549 |