Bug 1817628

Summary:	octavia.py needs smarter role guessing
Product:	Red Hat OpenStack	Reporter:	Attila Fazekas <afazekas>
Component:	python-tempestconf	Assignee:	Chandan Kumar <chkumar>
Status:	CLOSED ERRATA	QA Contact:	Martin Kopec <mkopec>
Severity:	high	Docs Contact:
Priority:	high
Version:	16.0 (Train)	CC:	cgoncalves, shrjoshi, udesale
Target Milestone:	---	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	python-tempestconf-2.4.0-0.20200331083751.6a616e5.el8ost	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-05-14 12:18:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Attila Fazekas 2020-03-26 16:46:45 UTC

Description of problem:
_member_ named role is deprecated, it should not be on a new deployment for a while.

Keystone does not have option for member role name anymore,
even the config tools stopped using it in Horizon.


_member_  is hard-coded default for this option
https://github.com/openstack/python-tempestconf/blob/6a616e5db26a18e9e9d842e3979de2ad3e394219/config_tempest/services/octavia.py#L26,

tempest_roles option has a little smarter logic:

https://github.com/openstack/python-tempestconf/blob/6a616e5db26a18e9e9d842e3979de2ad3e394219/doc/source/user/default.rst
; if _member_ role is not present in the system, python-tempestconf
; looks for member role and if the member is also not present
; tempest_roles option is not set


I would say , unless the user specifies something else
the first role from tempest_roles should be used as  'load_balancer'/'member_role' .

It it is still not perfect, but working in more cases.
(In practice almost all.)

Comment 1 Martin Kopec 2020-03-26 17:59:17 UTC

While the proper change gets to python-tempestconf package, you may want to use overrides and make python-tempestconf to set whatever value you need.

Comment 5 Martin Kopec 2020-03-31 18:50:25 UTC

Octavia role will be by default derived from auth.tempest_roles. This is a better default behavior as python-tempestconf checks if a particular role exists in the system before it's set to auth.tempest_roles.
The change which improves role setting is part of the Fixed in version package, so moving this to VERIFIED.

Comment 9 errata-xmlrpc 2020-05-14 12:18:28 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:2155