Red Hat Bugzilla – Bug 1015995
packstack shouldn't set api_paste_config for nova
Last modified: 2016-04-26 16:03:00 EDT
Description of problem:
In RHOS 4.0 and RDO havana we will move the api-paste.ini from /etc/nova/ to /usr/share/nova. We do this because users don't need to modify its contents and will allow us to update the file without having to preoccupy about local changes.
The new location will be set from the package provided nova-dist.conf under the key api_paste_config, but right now packstack already sets this key in the nova configuration file pointing to /etc/nova/api-paste.ini.
Could we update the nova puppet module to not add this key in the configuration file? This is the location in nova puppet module where this key is set:
Note that we'll have the same problem with cinder but I see that packstack modifies its api-paste.ini. I don't know how we should proceed with that.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
Since using nova_paste_api_ini resource in the puppet class "nova::api" modifies api-paste.ini file we would also need to change https://github.com/stackforge/puppet-nova/blob/master/lib/puppet/provider/nova_paste_api_ini/ini_setting.rb#L19 ... so that would need to make it modifiable I guess.
I think that packstack shouldn't modify api-paste-dist.ini at all (becase it will be overiden by a new package).
Right now packstack will update the authtoken configuration under api-paste.ini. What if we moved those keys to nova.conf?
Packstack (or puppet-nova module) is not modifying api-paste-dist.ini at all.
Patch waiting for review: https://review.openstack.org/#/c/59956/
Adding OtherQA for bugs in MODIFIED
This was present in api-paste.ini but not nova.conf after installation on my test run using openstack-packstack-2013.1.1-0.37.dev705.el6ost.noarch:
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
The following is present in /etc/nova/nova.conf but were not present in api-paste.ini in the filter:authtoken section after an installation using openstack-packstack-2013.2.1-0.14.dev919.el6ost.noarch:
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.