Bug 1659479

Summary: [OSP14] neutron/auth_url has admin endpoint URL in nova.conf
Product: Red Hat OpenStack Reporter: Martin Schuppert <mschuppe>
Component: openstack-tripleo-heat-templatesAssignee: Martin Schuppert <mschuppe>
Status: CLOSED DUPLICATE QA Contact: Gurenko Alex <agurenko>
Severity: medium Docs Contact:
Priority: medium    
Version: 13.0 (Queens)CC: agurenko, aschultz, knoha, mburns, mschuppe
Target Milestone: ---Keywords: Triaged, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1656690 Environment:
Last Closed: 2019-01-08 07:37:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Martin Schuppert 2018-12-14 13:57:23 UTC
+++ This bug was initially created as a clone of Bug #1656690 +++

Description of problem:
neutron/auth_url has public endpoint URL in nova.conf.

In my KVM lab, an auth_url parameter in nova.conf has different value from others.

~~~
[root@controller-0 ~]# grep -e ^auth_url /var/lib/config-data/puppet-generated/*/etc/*/*.conf
/var/lib/config-data/puppet-generated/aodh/etc/aodh/aodh.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/aodh/etc/aodh/aodh.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/ceilometer/etc/ceilometer/ceilometer.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/cinder/etc/cinder/cinder.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/glance_api/etc/glance/glance-api.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/gnocchi/etc/gnocchi/gnocchi.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api_cfn/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api_cfn/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/neutron/etc/neutron/neutron.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/neutron/etc/neutron/neutron.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf:auth_url=http://192.168.24.12:35357/v3 <--- HERE
/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova_placement/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova_placement/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/panko/etc/panko/panko.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/swift/etc/swift/proxy-server.conf:auth_url=http://172.17.1.20:5000
~~~
NOTE: Please see the line pointed by 'HERE'

The assignment comes from following line in puppet/services/nova-base.yaml.
~~~
    226           nova::network::neutron::neutron_auth_url: {get_param: [EndpointMap, KeystoneV3Admin, uri]}
~~~
Upstream T-H-T also has the same templates.
It looks that the option should align to other components.

Version-Release number of selected component (if applicable):
Current T-H-T

How reproducible:
Every deployment.

Steps to Reproduce:
1. Deploy overcloud.
2. Check the configuration with grep -e ^auth_url /var/lib/config-data/puppet-generated/*/etc/*/*.conf
3.

Actual results:
auth_url in neutron section has a admin endpoint value.

Expected results:
auth_url in neutron section has a internal api endpoint value.

Additional info:

--- Additional comment from Keigo Noha on 2018-12-06 05:42:23 UTC ---

Correction
Wrong: neutron/auth_url has public endpoint URL in nova.conf.
Correct: neutron/auth_url has admin endpoint URL in nova.conf.

Comment 1 Martin Schuppert 2019-01-08 07:37:48 UTC

*** This bug has been marked as a duplicate of bug 1663448 ***