Bug 1389848 - OpenStack identity.authenticate should be filtered by CloudForms
Summary: OpenStack identity.authenticate should be filtered by CloudForms
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Providers
Version: 5.7.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: GA
: 5.8.0
Assignee: Greg Blomquist
QA Contact: Omri Hochman
URL:
Whiteboard:
Depends On:
Blocks: 1391720 1391721
TreeView+ depends on / blocked
 
Reported: 2016-10-28 22:39 UTC by Greg Blomquist
Modified: 2018-06-15 13:56 UTC (History)
8 users (show)

Fixed In Version: 5.8.0.0
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1391720 1391721 (view as bug list)
Environment:
Last Closed: 2017-06-12 16:26:32 UTC
Category: ---
Cloudforms Team: Openstack
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Greg Blomquist 2016-10-28 22:39:34 UTC
Description of problem:

As of OSP 9, Keystone emits many "identity.authenticate" events.  These are internal auditing events that should be ignored by CloudForms.

Comment 2 Greg Blomquist 2016-10-28 22:41:33 UTC
Related (and probably fixes) https://bugzilla.redhat.com/show_bug.cgi?id=1370242

Comment 5 CFME Bot 2016-10-31 17:41:11 UTC
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/1a7f3ecef75f66a6be9352ca9a1bb01c6590c110

commit 1a7f3ecef75f66a6be9352ca9a1bb01c6590c110
Author:     Greg Blomquist <gblomqui>
AuthorDate: Fri Oct 28 23:27:39 2016 -0400
Commit:     Greg Blomquist <gblomqui>
CommitDate: Fri Oct 28 23:43:19 2016 -0400

    Add identity.authenticate to filtered events
    
    Since OSP 9, Keystone emits a new `identity.authenticate` event in high
    volume.  The event is an internal audit event used by Keystone, and
    ManageIQ should ignore the event.
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1389848

 app/models/manageiq/providers/openstack/cloud_manager.rb | 1 +
 1 file changed, 1 insertion(+)

Comment 6 CFME Bot 2016-10-31 17:41:16 UTC
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/430610f12ebd35d84d6af457c7d2637b4de10163

commit 430610f12ebd35d84d6af457c7d2637b4de10163
Author:     Greg Blomquist <gblomqui>
AuthorDate: Fri Oct 28 23:24:23 2016 -0400
Commit:     Greg Blomquist <gblomqui>
CommitDate: Fri Oct 28 23:42:18 2016 -0400

    Fix Openstack Event Filtering
    
    The Openstack event catcher was looking up the event type by using a
    symbol key to the event payload hash.  But, the event payload hash is
    keyed with strings.
    
    Changing the lookup to use strings.
    
    Additionally, skipping the event logs at debug level now to avoid
    filling the log with potentially 100,000s of log lines indicating events
    were skipped.
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1389848

 app/models/manageiq/providers/openstack/event_catcher_mixin.rb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Comment 7 CFME Bot 2016-11-01 17:36:04 UTC
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/18d56382144dbea962b821f18b961bea74c158ab

commit 18d56382144dbea962b821f18b961bea74c158ab
Author:     Joe Rafaniello <jrafanie.github.com>
AuthorDate: Mon Oct 31 13:36:41 2016 -0400
Commit:     Oleg Barenboim <chessbyte>
CommitDate: Tue Nov 1 13:34:12 2016 -0400

    Merge pull request #12291 from blomquisg/fix_openstack_event_filtering
    
    Fix OpenStack event filtering
    (cherry picked from commit 4e2aad5d099286473af212a9d55c8b2be6eb0d30)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1389848

 app/models/manageiq/providers/openstack/cloud_manager.rb       | 1 +
 app/models/manageiq/providers/openstack/event_catcher_mixin.rb | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

Comment 10 Ronnie Rasouli 2017-05-11 12:05:47 UTC
tested on RHOS10 and RHOS11 the idnetity.authenticate does not appear on CFME logs, tested 5.8.0.13/14


Note You need to log in before you can comment on or make changes to this bug.