Bug 1353971
Summary: | 'Failed to expunge metric: PermissionError: Failed to remove metric' with ceph backend | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Yurii Prokulevych <yprokule> |
Component: | openstack-puppet-modules | Assignee: | Giulio Fidente <gfidente> |
Status: | CLOSED ERRATA | QA Contact: | Yurii Prokulevych <yprokule> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | 9.0 (Mitaka) | CC: | apevec, ddomingo, eglynn, fbaudin, gfidente, jjoyce, johfulto, jschluet, lbezdick, lhh, mburns, pkilambi, srevivo, tvignaud |
Target Milestone: | ga | Keywords: | Reopened |
Target Release: | 9.0 (Mitaka) | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | openstack-puppet-modules-8.1.7-2.el7ost | Doc Type: | Bug Fix |
Doc Text: |
The Ceph puppet module (puppet-ceph) did not update CephX keyrings when the caps parameter for a key were changed. This caused overcloud upgrades to fail, as caps to operate on the new 'metrics' pool were not added to the CephX keyring.
With this update, puppet-ceph regenerates the virsh secret or updates its key if either 'rbd_keyring' or 'linvirt_rbd_secret_uuid' change. This ensures that the CephX keyring is updated as required when secrets or caps change.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2016-08-15 07:19:01 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1356107 |
Description
Yurii Prokulevych
2016-07-08 14:49:51 UTC
Turns out the issue is in puppet-ceph where if the secret is already there we dont update the acls and hence the key. See https://github.com/openstack/puppet-ceph/blob/master/manifests/key.pp#L145 gfidente will push a fix upstream. The puppet-ceph submission is now merged, the puppet-nova submission is still failing on unrelated CI issues. Gnocchi is working with ceph backend after the upgrade. Package: openstack-puppet-modules-8.1.7-2.el7ost.noarch Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHEA-2016-1597.html |