Bug 1663448 - [OSP14] neutron/auth_url has admin endpoint URL in nova.conf
Summary: [OSP14] neutron/auth_url has admin endpoint URL in nova.conf
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 13.0 (Queens)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: z1
: 14.0 (Rocky)
Assignee: Martin Schuppert
QA Contact: Archit Modi
URL:
Whiteboard:
: 1659479 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-01-04 11:27 UTC by Martin Schuppert
Modified: 2019-03-18 13:03 UTC (History)
5 users (show)

Fixed In Version: openstack-tripleo-heat-templates-9.0.1-0.20181013060915.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1656690
Environment:
Last Closed: 2019-03-18 13:03:25 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 628402 0 None None None 2019-01-04 11:27:31 UTC
Red Hat Product Errata RHBA-2019:0446 0 None None None 2019-03-18 13:03:35 UTC

Description Martin Schuppert 2019-01-04 11:27:32 UTC
+++ This bug was initially created as a clone of Bug #1656690 +++

Description of problem:
neutron/auth_url has public endpoint URL in nova.conf.

In my KVM lab, an auth_url parameter in nova.conf has different value from others.

~~~
[root@controller-0 ~]# grep -e ^auth_url /var/lib/config-data/puppet-generated/*/etc/*/*.conf
/var/lib/config-data/puppet-generated/aodh/etc/aodh/aodh.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/aodh/etc/aodh/aodh.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/ceilometer/etc/ceilometer/ceilometer.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/cinder/etc/cinder/cinder.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/glance_api/etc/glance/glance-api.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/gnocchi/etc/gnocchi/gnocchi.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api_cfn/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api_cfn/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat_api/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/heat/etc/heat/heat.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/neutron/etc/neutron/neutron.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/neutron/etc/neutron/neutron.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf:auth_url=http://192.168.24.12:35357/v3 <--- HERE
/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova_placement/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/nova_placement/etc/nova/nova.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/panko/etc/panko/panko.conf:auth_url=http://172.17.1.20:5000
/var/lib/config-data/puppet-generated/swift/etc/swift/proxy-server.conf:auth_url=http://172.17.1.20:5000
~~~
NOTE: Please see the line pointed by 'HERE'

The assignment comes from following line in puppet/services/nova-base.yaml.
~~~
    226           nova::network::neutron::neutron_auth_url: {get_param: [EndpointMap, KeystoneV3Admin, uri]}
~~~
Upstream T-H-T also has the same templates.
It looks that the option should align to other components.

Version-Release number of selected component (if applicable):
Current T-H-T

How reproducible:
Every deployment.

Steps to Reproduce:
1. Deploy overcloud.
2. Check the configuration with grep -e ^auth_url /var/lib/config-data/puppet-generated/*/etc/*/*.conf
3.

Actual results:
auth_url in neutron section has a admin endpoint value.

Expected results:
auth_url in neutron section has a internal api endpoint value.

Additional info:

--- Additional comment from Keigo Noha on 2018-12-06 05:42:23 UTC ---

Correction
Wrong: neutron/auth_url has public endpoint URL in nova.conf.
Correct: neutron/auth_url has admin endpoint URL in nova.conf.

Comment 1 Martin Schuppert 2019-01-08 07:37:48 UTC
*** Bug 1659479 has been marked as a duplicate of this bug. ***

Comment 3 Mikey Ariel 2019-02-20 12:44:29 UTC
If this bug requires doc text for errata release, please set the 'Doc Type' and provide draft text according to the template in the 'Doc Text' field. The documentation team will review, edit, and approve the text.

If this bug does not require doc text, please set the 'requires_doc_text' flag to -.

Comment 6 errata-xmlrpc 2019-03-18 13:03:25 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0446


Note You need to log in before you can comment on or make changes to this bug.