1641825 – RFE: Populate authentication information in [nova] section in cinder.conf enabling migration of in-use bootable volumes between Cinder backends

Bug 1641825 - RFE: Populate authentication information in [nova] section in cinder.conf enabling migration of in-use bootable volumes between Cinder backends

Summary: RFE: Populate authentication information in [nova] section in cinder.conf ena...

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	openstack-tripleo-heat-templates
Sub Component:
Version:	13.0 (Queens)
Hardware:	Unspecified
OS:	Unspecified
Priority:	high
Severity:	medium
Target Milestone:	z4
Target Release:	13.0 (Queens)
Assignee:	Alan Bishop
QA Contact:	Avi Avraham
Docs Contact:	Kim Nylander
URL:
Whiteboard:
Duplicates (2):	1559505 1624744 (view as bug list)
Depends On:
Blocks:	1559505
TreeView+	depends on / blocked

Reported:	2018-10-22 21:38 UTC by Mark Jones
Modified:	2023-10-06 17:57 UTC (History)
CC List:	14 users (show)
Fixed In Version:	openstack-tripleo-heat-templates-8.0.7-15.el7ost puppet-tripleo-8.3.6-5.el7ost puppet-cinder-12.4.1-0.20180628102254.el7ost
Doc Type:	Bug Fix
Doc Text:	Previously, the OpenStack Platform Director did not configure authentication for Block Storage (Cinder) to access volumes that use the Nova privileged API. This caused operations on these volumes, such as migrating an in-use volume, to fail. This bug fix adds the capability to configure Cinder with the Nova authentication data, which allows you to perform operations on volumes that use the privileged API with these credentials.
Clone Of:
Environment:
Last Closed:	2019-01-16 17:55:05 UTC
Target Upstream Version:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Launchpad	1802347	None	None	None	2018-11-16 13:50:41 UTC
OpenStack gerrit	600559	None	MERGED	Add cinder::nova class to configure nova section	2020-12-23 21:27:21 UTC
OpenStack gerrit	616666	None	MERGED	Include ::cinder::nova in cinder's configuration	2020-12-23 21:27:53 UTC
OpenStack gerrit	616669	None	MERGED	Configure cinder's access to the nova API	2020-12-23 21:27:53 UTC
OpenStack gerrit	618047	None	MERGED	Improve cinder::nova support for auth_type password	2020-12-23 21:27:20 UTC
OpenStack gerrit	620093	None	MERGED	Add cinder::nova class to configure nova section	2020-12-23 21:27:54 UTC
OpenStack gerrit	620094	None	MERGED	Improve cinder::nova support for auth_type password	2020-12-23 21:27:22 UTC
OpenStack gerrit	620097	None	MERGED	Include ::cinder::nova in cinder's configuration	2020-12-23 21:27:22 UTC
OpenStack gerrit	620209	None	MERGED	Configure cinder's access to the nova API	2020-12-23 21:27:22 UTC
Red Hat Bugzilla	1624744	unspecified	CLOSED	NFS assisted snapshot fails	2023-10-06 17:56:32 UTC
Red Hat Bugzilla	1640443	high	CLOSED	volume_extend while attached - Policy doesn't allow os_compute_api:os-server-external-events:create	2023-10-06 18:03:59 UTC
Red Hat Issue Tracker	OSP-11725	None	None	None	2021-12-10 18:12:50 UTC
Red Hat Knowledge Base (Solution)	3675991	None	None	None	2018-11-21 15:04:43 UTC
Red Hat Product Errata	RHBA-2019:0068	None	None	None	2019-01-16 17:55:20 UTC

Internal Links: 1624744 1640443

Description Mark Jones 2018-10-22 21:38:32 UTC

Description of problem:

In OSP13, the [nova] section is not populated with the appropriate authentication information. Without this information being populated, migration of in-use bootable volumes between backends will fail.


Version-Release number of selected component (if applicable):
OSP13

How reproducible:
Every time

Steps to Reproduce:
1. Attempt to retype a volume attached to an instance

Actual results:
Migration will fail

Expected results:
Migration works

Additional info:

Also see BZ#1559505

Comment 2 Mark Jones 2018-10-22 21:47:01 UTC

*** Bug 1559505 has been marked as a duplicate of this bug. ***

Comment 5 Alan Bishop 2018-11-16 13:54:22 UTC

Patches have merged on upstream master, and are currently proposed for stable/rocky. Once they merge I'll propose to stable/queens.

Comment 6 Alan Bishop 2018-11-16 13:55:03 UTC

Clearing needs-info.

Comment 7 Alan Bishop 2018-11-21 15:04:44 UTC

*** Bug 1624744 has been marked as a duplicate of this bug. ***

Comment 16 Tzach Shefi 2018-12-11 16:46:55 UTC

Verified on:
openstack-tripleo-heat-templates-8.0.7-15.el7ost.noarch
puppet-tripleo-8.3.6-5.el7ost.noarch
puppet-cinder-12.4.1-0.20180628102254.el7ost.noarch

Booted an instance, created an LVM backed volume, attached to instance

cinder list
+--------------------------------------+--------+--------------+------+-------------+----------+--------------------------------------+
| ID                                   | Status | Name         | Size | Volume Type | Bootable | Attached to                          |
+--------------------------------------+--------+--------------+------+-------------+----------+--------------------------------------+
| c56f6628-9320-4199-b6ce-532fb4630466 | in-use | Pansible_vol | 1    | -           | true     | e07f6fcb-f21a-434e-a258-800290a06a59 |
+--------------------------------------+--------+--------------+------+-------------+----------+--------------------------------------+


Added second backend netapp, retype the attached volume from lvm to netapp 
#cinder retype --migration-policy on-demand c56f6628-9320-4199-b6ce-532fb4630466 netapp

An attached volume migrated successfully:

cinder show c56f6628-9320-4199-b6ce-532fb4630466
+--------------------------------+-------------------------------------------------------------------------------------------------+
| Property                       | Value                                                                                           |
+--------------------------------+-------------------------------------------------------------------------------------------------+
| attached_servers               | ['e07f6fcb-f21a-434e-a258-800290a06a59']                                                        |
| attachment_ids                 | ['4fdb0cc0-65f4-43e4-bd23-c91e1c5a9ed4']                                                        |
| availability_zone              | nova                                                                                            |
| bootable                       | true                                                                                            |
| consistencygroup_id            | None                                                                                            |
| created_at                     | 2018-12-11T16:25:38.000000                                                                      |
| description                    | None                                                                                            |
| encrypted                      | False                                                                                           |
| id                             | c56f6628-9320-4199-b6ce-532fb4630466                                                            |
| metadata                       | attached_mode : rw                                                                              |
| migration_status               | success                                                                                         |
| multiattach                    | False                                                                                           |
| name                           | Pansible_vol                                                                                    |
| os-vol-host-attr:host          | hostgroup@tripleo_netapp#rhos_cinder                                                            |
| os-vol-mig-status-attr:migstat | success                                                                                         |
| os-vol-mig-status-attr:name_id | 37a0a967-7957-4d65-84a5-04abe702559a                                                            |
| os-vol-tenant-attr:tenant_id   | 275a1555b13a4316b09c9f02597e5129    

Looks good to verify, retype of an attached volume worked.

Comment 20 errata-xmlrpc 2019-01-16 17:55:05 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0068

Note You need to log in before you can comment on or make changes to this bug.