Bug 1981269

Summary:	Federation with OpenID Connect disables some default auth methods in Keystone
Product:	Red Hat OpenStack	Reporter:	Takashi Kajinami <tkajinam>
Component:	openstack-tripleo-heat-templates	Assignee:	Dave Wilde <dwilde>
Status:	CLOSED ERRATA	QA Contact:	Joe H. Rahme <jhakimra>
Severity:	low	Docs Contact:
Priority:	low
Version:	16.1 (Train)	CC:	dcaspin, dsedgmen, dwilde, jhajyahy, jschluet, mburns, pweeks, ramishra
Target Milestone:	z2	Keywords:	Triaged, ZStream
Target Release:	17.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-tripleo-heat-templates-14.3.1-17.1.20231103010821.e7c7ce3.el9ost	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-01-16 14:31:50 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Takashi Kajinami 2021-07-12 08:46:19 UTC

Description of problem:

When environments/enable-federation-openidc.yaml is included to use federation with OpenID Connect, keystone accepts the following auth methods
 - password
 - token
 - openid

However the list doesn't include some methods which are enabled by default and results in disabling some methods like application_credential.


Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Deploy overcloud with OpenID Connect Federation enabled
2. Check keystone.conf

Actual results:
Some of the defualt auth methods like application_credential are disabled

Expected results:
Defualt auth methods are kept enabled

Additional info:

Comment 20 errata-xmlrpc 2024-01-16 14:31:50 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 17.1.2 bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2024:0209

Comment 21 Red Hat Bugzilla 2024-05-16 04:25:04 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days