Bug 1472859 - keystone catalog should not have entries for disabled api (cinder v1)
Summary: keystone catalog should not have entries for disabled api (cinder v1)
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 12.0 (Pike)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: z7
: 13.0 (Queens)
Assignee: Alan Bishop
QA Contact: Tzach Shefi
URL:
Whiteboard:
: 1504190 1718225 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-07-19 14:36 UTC by Attila Fazekas
Modified: 2019-08-01 10:42 UTC (History)
10 users (show)

Fixed In Version: openstack-tripleo-heat-templates-8.3.1-54.el7ost
Doc Type: Bug Fix
Doc Text:
Cause: TripleO continued to create a keystone catalog entry for cinder's v1 API long after the v1 API was deprecated; even after cinder removed v1 support during the Queens cycle. Consequence: TripleO would create a cinder a keystone service and endpoint for a cinder API version that cinder no longer supports. Fix: TripleO no longer creates a keystone catalog entry for cinder's v1 API. Result: The v1 catalog entry is not created. However, any existing catalog entry for the v1 API is not automatically deleted. The cloud admin is responsible for deleting an existing cinder v1 API catalog entries.
Clone Of:
Environment:
Last Closed: 2019-08-01 10:42:38 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 644550 0 None MERGED Don't create service or endpoint for cinder API v1 2020-09-25 17:32:15 UTC
OpenStack gerrit 649084 0 None MERGED Fix tempest volume tests on queens 2020-09-25 17:32:20 UTC

Description Attila Fazekas 2017-07-19 14:36:23 UTC 
Description of problem:

enable_v1_api defaults to false in the /etc/cinder/cinder.conf
however the keystone catalog still has an v1 endpoint for cinder.  


Version-Release number of selected component (if applicable):
openstack-packstack-puppet-10.1.0-0.20170711115345.335f91a.el7ost.noarch

How reproducible:
always


Expected results:
The keystone catalog does not have not follow-able link.


Additional info:
python-tempestconf is trying to list the available extensions when it it sees it in the catalog.
Comment 1 Attila Fazekas 2017-07-20 06:25:55 UTC 
The devstack gate does not likes the idea:
https://review.openstack.org/#/c/485232/

ATM not a good idea to just remove it.
Comment 3 Alan Bishop 2017-09-15 17:33:01 UTC 
https://review.openstack.org/496858 is another change that needs to land before starting the puppet/TripleO changes. I'll update this BZ to ON_DEV when I begin my portion of the work.
Comment 5 Sean Cohen 2018-02-07 14:33:43 UTC 
*** Bug 1504190 has been marked as a duplicate of this bug. ***
Comment 6 Alan Bishop 2018-12-13 20:13:56 UTC 
I think there's still activity upstream, so marking this for 13z so this isn't closed when 12 goes EOL.
Comment 7 Alan Bishop 2019-02-13 17:02:30 UTC 
Tempest was updated to use the prior API version(s), and work resumed on https://review.openstack.org/485232 to remove the v1 endpoint from devstack.
Comment 8 Alan Bishop 2019-06-07 15:38:35 UTC 
*** Bug 1718225 has been marked as a duplicate of this bug. ***
Comment 9 Lon Hohberger 2019-07-25 10:42:01 UTC 
According to our records, this should be resolved by openstack-tripleo-heat-templates-8.3.1-54.el7ost.  This build is available now.
Comment 10 Tzach Shefi 2019-07-31 14:00:42 UTC 
Verified on:
openstack-tripleo-heat-templates-8.3.1-54.el7ost

No cinder v1 seen here:

(overcloud) [stack@undercloud-0 ~]$ openstack endpoint list | grep cinder
| 000956431b58444b8b0a3285149397f7 | regionOne | cinderv2     | volumev2       | True    | public    | http://10.0.0.102:8776/v2/%(tenant_id)s       |
| 08239ca2d4f848caa67c80d8edec91ec | regionOne | cinderv3     | volumev3       | True    | admin     | http://172.17.1.21:8776/v3/%(tenant_id)s      |
| 09f28a6703c44c70b78e561933d3c14e | regionOne | cinderv3     | volume         | True    | admin     | http://172.17.1.21:8776/v3/%(tenant_id)s      |
| 17713fae48f246ad875c265a982c14a8 | regionOne | cinderv2     | volumev2       | True    | internal  | http://172.17.1.21:8776/v2/%(tenant_id)s      |
| 6ca02ddf3dce42f49bc2a4d562d9b5e8 | regionOne | cinderv2     | volumev2       | True    | admin     | http://172.17.1.21:8776/v2/%(tenant_id)s      |
| 870ae06fc47040be9dc65f6c86ac173c | regionOne | cinderv3     | volume         | True    | public    | http://10.0.0.102:8776/v3/%(tenant_id)s       |
| af1b372a45ba474f850e83bcb991eeab | regionOne | cinderv3     | volumev3       | True    | public    | http://10.0.0.102:8776/v3/%(tenant_id)s       |
| b55449a9eef54ec9a5e27b9a77004e36 | regionOne | cinderv3     | volume         | True    | internal  | http://172.17.1.21:8776/v3/%(tenant_id)s      |
| c001186535534d62a76e48bdab383d34 | regionOne | cinderv3     | volumev3       | True    | internal  | http://172.17.1.21:8776/v3/%(tenant_id)s      |

or here: 

(overcloud) [stack@undercloud-0 ~]$ openstack catalog list | grep cinder
| cinderv2   | volumev2       | regionOne                                                                    |
| cinderv3   | volumev3       | regionOne                                                                    |
| cinderv3   | volume         | regionOne    

looks good to verify.
Note You need to log in before you can comment on or make changes to this bug.