Bug 1363888

Summary:	aodh fails to get a trust with heat
Product:	Red Hat OpenStack	Reporter:	Amit Ugol <augol>
Component:	openstack-aodh	Assignee:	Eoghan Glynn <eglynn>
Status:	CLOSED DUPLICATE	QA Contact:	Yurii Prokulevych <yprokule>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	9.0 (Mitaka)	CC:	apevec, jschluet, lhh, mburns, rhel-osp-director-maint, sbaker, shardy, srevivo, zbitter
Target Milestone:	async	Keywords:	ZStream
Target Release:	9.0 (Mitaka)
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-08-05 13:18:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Amit Ugol 2016-08-03 20:20:19 UTC

copied from the online tracker:
The keystone methods to get a client with a trust is broken, and simply
use service credentials while ignoring the trust. We can't load the
options directly from the configuration, we need to build a auth plugin
manually.

This bug is needed in 9 as well because OSPD 9 OOB aodh is calling heat auto-scaling and is failing with a 403 error:

2016-08-03 16:11:24.391 15266 INFO eventlet.wsgi.server [req-a2fe33c9
-13e9-46cc-9502-7460752aaf49 - service - default default] 192.0.2.11 -
- [03/Aug/2016 16:11:24] "POST
/v1/48883bc5421f4d8396962c049b04f03b/stacks/AutoScaling/d1a63061-6af9
-4258-a308-8fe773da076d/resources/web_server_scaleup_policy/signal
HTTP/1.1" 403 391 0.582715

This was tested in the latest rhos9 core bits (puddle 2016-08-01), so it will probably need to be added in 9 0-day. The online bug is merged to 10.

Comment 1 Eoghan Glynn 2016-08-05 13:18:53 UTC


*** This bug has been marked as a duplicate of bug 1364052 ***