Bug 1537598
Summary: | Director deployment of keystone integration with LDAP broken | |||
---|---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Ken Holden <kholden> | |
Component: | openstack-tripleo-heat-templates | Assignee: | Emilien Macchi <emacchi> | |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Jeremy Agee <jagee> | |
Severity: | high | Docs Contact: | ||
Priority: | urgent | |||
Version: | 12.0 (Pike) | CC: | acanan, coldford, hrybacki, jagee, jjoyce, jschluet, mburns, pkesavar, rhel-osp-director-maint, rmascena, scohen, slinaber, tvignaud | |
Target Milestone: | z2 | Keywords: | TestOnly, Triaged, ZStream | |
Target Release: | 13.0 (Queens) | |||
Hardware: | Unspecified | |||
OS: | Linux | |||
Whiteboard: | ||||
Fixed In Version: | openstack-tripleo-heat-templates-8.0.2-0.20180410061339.b937f35.el7ost | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | ||
Clone Of: | ||||
: | 1579023 (view as bug list) | Environment: | ||
Last Closed: | 2018-07-27 10:36:10 UTC | Type: | Bug | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Embargoed: | ||||
Bug Depends On: | ||||
Bug Blocks: | 1579023 |
Description
Ken Holden
2018-01-23 15:08:23 UTC
Just did a fresh OSP12 deploy and AD users were returned immediately after deploy without any restart of keystone services, however, like previous versions of OSP, i would get inconsistent responses (i.e. group or user lists would sometimes respond with users / groups and sometimes just empty results). Once I did docker restart keystone on controllers, my list results are 100% consistent. We verified that in a non-containerized deployment we have that keystone-restart command: https://github.com/openstack/puppet-keystone/blob/a55b9e4efe956fded7030baddc0f6a342be1d76d/manifests/ldap_backend.pp#L610 but that same command missing in the keystone docker script https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/keystone.yaml#L195, we may need to re-run the part that generates the md5 of the config and start the containers with paunch if we expect docker_puppet_tasks to modify the config files *** Bug 1572219 has been marked as a duplicate of this bug. *** According to our records, this should be resolved by openstack-tripleo-heat-templates-8.0.2-38.el7ost. This build is available now. |