Bug 1832804
| Summary: | Failed to create a container when using Ceph RGW - Unauthorized | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Itzik Brown <itbrown> |
| Component: | openstack-tripleo-heat-templates | Assignee: | Giulio Fidente <gfidente> |
| Status: | CLOSED ERRATA | QA Contact: | Yogev Rabl <yrabl> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 16.1 (Train) | CC: | asimonel, fpantano, gcharot, gfidente, johfulto, mbultel, mburns, yrabl |
| Target Milestone: | beta | Keywords: | Triaged |
| Target Release: | 16.1 (Train on RHEL 8.2) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | openstack-tripleo-heat-templates-11.3.2-0.20200603183438.7b2c249.el8ost | Doc Type: | No Doc Update |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-07-29 07:52:21 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1812079 | ||
| Bug Blocks: | |||
If this bug requires doc text for errata release, please set the 'Doc Type' and provide draft text according to the template in the 'Doc Text' field. The documentation team will review, edit, and approve the text. If this bug does not require doc text, please set the 'requires_doc_text' flag to '-'. Verified: RHOS-16.1-RHEL-8-20200616.n.0 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:3148 The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days |
Description of problem: When running $ source ~/shiftstackrc ; openstack object store account set --property Temp-URL-Key=superkey I get: Unauthorized (HTTP 401) (Request-ID: tx000000000000000014999-005eb3a710-12a4-default) (overcloud) [stack@undercloud-0 ~]$ openstack project list +----------------------------------+------------+ | ID | Name | +----------------------------------+------------+ | 28a4afff65cd4eebba31315925766193 | admin | | a7b0a5e63c9349b38f4e4f57118c166e | shiftstack | | c57c6333fcc341009ef8491bbad46602 | service | +----------------------------------+------------+ (overcloud) [stack@undercloud-0 ~]$ openstack role assignment list --user e7b5267d1b0c4bf19578773adda4d5a0 --project a7b0a5e63c9349b38f4e4f57118c166e --names +---------------+-------------------------+-------+--------------------+--------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +---------------+-------------------------+-------+--------------------+--------+--------+-----------+ | swiftoperator | shiftstack_user@Default | | shiftstack@Default | | | False | | member | shiftstack_user@Default | | shiftstack@Default | | | False | +---------------+-------------------------+-------+--------------------+--------+--------+-----------+ In Version openstack-tripleo-heat-templates-11.3.2-0.20200405044624.ec9970c.el8ost.noarch we have the following in /usr/share/openstack-tripleo-heat-templates/deployment/ceph-ansible/ceph-base.yaml: DefaultCephConfigOverrides: type: OS::Heat::Value properties: type: json value: global: osd_pool_default_size: {get_param: CephPoolDefaultSize} osd_pool_default_pg_num: {get_param: CephPoolDefaultPgNum} osd_pool_default_pgp_num: {get_param: CephPoolDefaultPgNum} rgw_keystone_api_version: 3 rgw_keystone_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]} rgw_keystone_accepted_roles: 'member, Member, admin' rgw_keystone_accepted_admin_roles: ResellerAdmin, swiftoperator rgw_keystone_admin_domain: default rgw_keystone_admin_project: service rgw_keystone_admin_user: swift rgw_keystone_admin_password: {get_param: SwiftPassword} rgw_keystone_implicit_tenants: 'true' rgw_keystone_revocation_interval: '0' rgw_s3_auth_use_keystone: 'true' rgw_swift_versioning_enabled: 'true' rgw_swift_account_in_url: 'true' rgw_trust_forwarded_https: 'true' However openstack-tripleo-heat-templates-11.3.2-0.20200429083427.2a67c80.el8ost.noarch has: DefaultCephConfigOverrides: type: OS::Heat::Value properties: type: json value: vars: global: osd_pool_default_size: {get_param: CephPoolDefaultSize} osd_pool_default_pg_num: {get_param: CephPoolDefaultPgNum} osd_pool_default_pgp_num: {get_param: CephPoolDefaultPgNum} Version-Release number of selected component (if applicable): openstack-tripleo-heat-templates-11.3.2-0.20200429083427.2a67c80.el8ost.noarch How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: