Bug 1106394 - heat.conf auth_uri is incorrectly set leading to api-cfn authentication errors.
Summary: heat.conf auth_uri is incorrectly set leading to api-cfn authentication errors.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-packstack
Version: 5.0 (RHEL 7)
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: rc
: 5.0 (RHEL 7)
Assignee: Martin Magr
QA Contact: Amit Ugol
URL:
Whiteboard:
: 1106850 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-06-09 08:54 UTC by Lee Yarwood
Modified: 2018-12-06 16:47 UTC (History)
7 users (show)

Fixed In Version: openstack-packstack-2014.1.1-0.25.dev1149.el7ost
Doc Type: Bug Fix
Doc Text:
Previously, Red Hat OpenStack environments deployed using the PackStack all-in-one installation process would not be able to perform autoscaling under certain conditions. This was caused by the default value of the 'keystone_ec2_uri' configuration key being written to the the heat.conf file during the installation process, which would prevent Heat from authenticating against Keystone correctly. With this update, the correct value required by Heat is now explicitly specified and written to the heat.conf file, making it possible for Heat to authenticate correctly against Keystone.
Clone Of:
Environment:
Last Closed: 2014-07-08 15:39:07 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1318599 0 None None None Never
OpenStack gerrit 99629 0 None None None Never
Red Hat Product Errata RHEA-2014:0846 0 normal SHIPPED_LIVE Red Hat Enterprise Linux OpenStack Platform Enhancement - Packstack 2014-07-08 19:23:14 UTC

Description Lee Yarwood 2014-06-09 08:54:20 UTC 
Description of problem:
The auth_uri option within heat.conf defaults to auth_uri=http://127.0.0.1:5000/v2.0/ec2tokens in packstack deployed environments. This leads to the following authentication errors in api-cfn.log :

~~~
2014-06-04 03:52:12.346 1178 INFO heat.api.aws.ec2token [-] Checking AWS credentials..
2014-06-04 03:52:12.347 1178 INFO heat.api.aws.ec2token [-] AWS credentials found, checking against keystone.
2014-06-04 03:52:12.348 1178 INFO heat.api.aws.ec2token [-] Authenticating with http://127.0.0.1:5000/v2.0/ec2tokens/ec2tokens
2014-06-04 03:52:12.350 1178 INFO urllib3.connectionpool [-] Starting new HTTP connection (1): 127.0.0.1
2014-06-04 03:52:12.356 1178 INFO heat.api.aws.ec2token [-] AWS authentication failure.
~~~

This error then leads to no autoscaling taking place. Switching this to auth_uri=http://127.0.0.1:5000/v2.0 removes these errors and allows stacks to autoscale.

Version-Release number of selected component (if applicable):
openstack-packstack-2014.1.1-0.11.1.dev1055.el7ost.noarch.rpm
openstack-packstack-puppet-2014.1.1-0.11.1.dev1055.el7ost.noarch.rpm

How reproducible:
Always

Steps to Reproduce:
1. Install Heat using packstack.


Actual results:
Errors in api-cfn.api result in no autoscaling of deployed stacks.

Expected results:
No errors present in api-cfn.api, deployed stacks autoscale as required.

Additional info:

Attaching an upstream RDO Icehouse bug that appears to be the same issue :

https://bugs.launchpad.net/heat/+bug/1318599
Comment 1 Martin Magr 2014-06-10 12:44:06 UTC 
*** Bug 1106850 has been marked as a duplicate of this bug. ***
Comment 7 errata-xmlrpc 2014-07-08 15:39:07 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2014-0846.html
Note You need to log in before you can comment on or make changes to this bug.