Bug 1535415

Summary: fence_compute/fence_evacuate: add support for Keystone v3 authentication [rhel-7.4.z]
Product: Red Hat Enterprise Linux 7 Reporter: Oneata Mircea Teodor <toneata>
Component: fence-agentsAssignee: Oyvind Albrigtsen <oalbrigt>
Status: CLOSED ERRATA QA Contact: Udi Shkalim <ushkalim>
Severity: unspecified Docs Contact:
Priority: high    
Version: 7.4CC: agk, aherr, cfeist, cluster-maint, cluster-qe, fdinitto, michele, mjuricek, oalbrigt, ushkalim
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: fence-agents-4.0.11-66.el7_4.4 Doc Type: If docs needed, set a value
Doc Text:
The fence_compute agent adds support for the Keystone identity service version 3. With this update, fence_compute can now authenticate with OpenStack using the Keystone version 3 API in addition to version 2.
Story Points: ---
Clone Of: 1533170 Environment:
Last Closed: 2018-03-06 21:43:47 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1533170, 1559902, 1559960    
Bug Blocks:    

Description Oneata Mircea Teodor 2018-01-17 10:52:06 UTC
This bug has been copied from bug #1533170 and has been proposed to be backported to 7.4 z-stream (EUS).

Comment 5 Udi Shkalim 2018-02-27 12:21:29 UTC
Verified on: fence-agents-4.0.11-66.el7_4.4

fence_compute -o list -k https://overcloud.tripleodomain.example.com:13000/v3 -l admin -t admin -p tdVGrAyAjCVUJBAkHqQ47x4Me -v --insecure
Running list
REQ: curl -g -i -X GET https://overcloud.tripleodomain.example.com:13000/v3 -H "Accept: application/json" -H "User-Agent: python-keystoneclient"
Starting new HTTPS connection (1): overcloud.tripleodomain.example.com
"GET /v3 HTTP/1.1" 200 211
RESP: [200] Date: Tue, 27 Feb 2018 12:17:17 GMT Server: Apache Vary: X-Auth-Token,Accept-Encoding x-openstack-request-id: req-31388fef-6890-4ba3-ac95-52ce006dcc8b Content-Encoding: gzip Content-Length: 211 Content-Type: application/json
RESP BODY: {"version": {"status": "stable", "updated": "2017-02-22T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.8", "links": [{"href": "https://overcloud.tripleodomain.example.com:13000/v3/", "rel": "self"}]}}

found extension EntryPoint.parse('aodh-noauth = aodhclient.noauth:AodhNoAuthLoader')
found extension EntryPoint.parse('v1password = swiftclient.authv1:PasswordLoader')
found extension EntryPoint.parse('v2token = keystoneauth1.loading._plugins.identity.v2:Token')
found extension EntryPoint.parse('none = keystoneauth1.loading._plugins.noauth:NoAuth')
found extension EntryPoint.parse('v3oauth1 = keystoneauth1.extras.oauth1._loading:V3OAuth1')
found extension EntryPoint.parse('admin_token = keystoneauth1.loading._plugins.admin_token:AdminToken')
found extension EntryPoint.parse('v3oidcauthcode = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectAuthorizationCode')
found extension EntryPoint.parse('v2password = keystoneauth1.loading._plugins.identity.v2:Password')
found extension EntryPoint.parse('v3samlpassword = keystoneauth1.extras._saml2._loading:Saml2Password')
found extension EntryPoint.parse('v3password = keystoneauth1.loading._plugins.identity.v3:Password')

Comment 8 errata-xmlrpc 2018-03-06 21:43:47 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:0405