Description of problem: Over an OpenStack 7.0 installed by OSP-D, the heat tempest tests with unauthorized error due to the wrong value being parsed at the creation of tempest.conf file Version-Release number of selected component (if applicable): Director How reproducible: Create the tempest.conf file using --deployer-input provided from deployment. It'd contain a wrong value of stack_owner_role = heat_stack_user when it should be stack_owner_role = heat_stack_owner. This is created by: https://github.com/rdo-management/python-rdomanager-oscplugin/blob/master/rdomanager_oscplugin/v1/overcloud_deploy.py#L656 Steps to Reproduce: 1. Run orchestration tempest tests with provided tempest.conf Actual results: The test fails with the following error: Traceback (most recent call last): File "/home/stack/tempest/tempest/api/orchestration/stacks/test_environment.py", line 36, in test_environment_parameter environment=environment) File "/home/stack/tempest/tempest/api/orchestration/base.py", line 75, in create_stack files=files) File "/home/stack/tempest/tempest/services/orchestration/json/orchestration_client.py", line 56, in create_stack resp, body = self.post(uri, headers=headers, body=body) File "/usr/lib/python2.7/site-packages/tempest_lib/common/rest_client.py", line 252, in post return self.request('POST', url, extra_headers, headers, body) File "/usr/lib/python2.7/site-packages/tempest_lib/common/rest_client.py", line 629, in request resp, resp_body) File "/usr/lib/python2.7/site-packages/tempest_lib/common/rest_client.py", line 672, in _error_checker raise exceptions.Forbidden(resp_body) Forbidden: Forbidden Expected results: The test should pass, they do with this line in tempest.conf: [orchestration] stack_owner_role = heat_stack_owner Additional info:
Proposed fix attached.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2015:2650