Bug 1389848

Summary: OpenStack identity.authenticate should be filtered by CloudForms
Product: Red Hat CloudForms Management Engine Reporter: Greg Blomquist <gblomqui>
Component: ProvidersAssignee: Greg Blomquist <gblomqui>
Status: CLOSED CURRENTRELEASE QA Contact: Omri Hochman <ohochman>
Severity: high Docs Contact:
Priority: high    
Version: 5.7.0CC: cpelland, dajohnso, jfrey, jhardy, jmarc, kmorey, nstephan, obarenbo
Target Milestone: GAKeywords: TestOnly
Target Release: 5.8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 5.8.0.0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1391720 1391721 (view as bug list) Environment:
Last Closed: 2017-06-12 16:26:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: Openstack Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1391720, 1391721    

Description Greg Blomquist 2016-10-28 22:39:34 UTC
Description of problem:

As of OSP 9, Keystone emits many "identity.authenticate" events.  These are internal auditing events that should be ignored by CloudForms.

Comment 2 Greg Blomquist 2016-10-28 22:41:33 UTC
Related (and probably fixes) https://bugzilla.redhat.com/show_bug.cgi?id=1370242

Comment 5 CFME Bot 2016-10-31 17:41:11 UTC
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/1a7f3ecef75f66a6be9352ca9a1bb01c6590c110

commit 1a7f3ecef75f66a6be9352ca9a1bb01c6590c110
Author:     Greg Blomquist <gblomqui>
AuthorDate: Fri Oct 28 23:27:39 2016 -0400
Commit:     Greg Blomquist <gblomqui>
CommitDate: Fri Oct 28 23:43:19 2016 -0400

    Add identity.authenticate to filtered events
    
    Since OSP 9, Keystone emits a new `identity.authenticate` event in high
    volume.  The event is an internal audit event used by Keystone, and
    ManageIQ should ignore the event.
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1389848

 app/models/manageiq/providers/openstack/cloud_manager.rb | 1 +
 1 file changed, 1 insertion(+)

Comment 6 CFME Bot 2016-10-31 17:41:16 UTC
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/430610f12ebd35d84d6af457c7d2637b4de10163

commit 430610f12ebd35d84d6af457c7d2637b4de10163
Author:     Greg Blomquist <gblomqui>
AuthorDate: Fri Oct 28 23:24:23 2016 -0400
Commit:     Greg Blomquist <gblomqui>
CommitDate: Fri Oct 28 23:42:18 2016 -0400

    Fix Openstack Event Filtering
    
    The Openstack event catcher was looking up the event type by using a
    symbol key to the event payload hash.  But, the event payload hash is
    keyed with strings.
    
    Changing the lookup to use strings.
    
    Additionally, skipping the event logs at debug level now to avoid
    filling the log with potentially 100,000s of log lines indicating events
    were skipped.
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1389848

 app/models/manageiq/providers/openstack/event_catcher_mixin.rb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Comment 7 CFME Bot 2016-11-01 17:36:04 UTC
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/18d56382144dbea962b821f18b961bea74c158ab

commit 18d56382144dbea962b821f18b961bea74c158ab
Author:     Joe Rafaniello <jrafanie.github.com>
AuthorDate: Mon Oct 31 13:36:41 2016 -0400
Commit:     Oleg Barenboim <chessbyte>
CommitDate: Tue Nov 1 13:34:12 2016 -0400

    Merge pull request #12291 from blomquisg/fix_openstack_event_filtering
    
    Fix OpenStack event filtering
    (cherry picked from commit 4e2aad5d099286473af212a9d55c8b2be6eb0d30)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1389848

 app/models/manageiq/providers/openstack/cloud_manager.rb       | 1 +
 app/models/manageiq/providers/openstack/event_catcher_mixin.rb | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

Comment 10 Ronnie Rasouli 2017-05-11 12:05:47 UTC
tested on RHOS10 and RHOS11 the idnetity.authenticate does not appear on CFME logs, tested 5.8.0.13/14