Bug 1668936 - [OSP14] [THT] THT deploys manila.conf with deprecated settings for neutron and nova
Summary: [OSP14] [THT] THT deploys manila.conf with deprecated settings for neutron an...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 14.0 (Rocky)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: z3
: 14.0 (Rocky)
Assignee: vhariria
QA Contact: vhariria
URL:
Whiteboard:
Depends On:
Blocks: 1684619
TreeView+ depends on / blocked
 
Reported: 2019-01-23 21:52 UTC by Victoria Martinez de la Cruz
Modified: 2019-07-02 20:08 UTC (History)
13 users (show)

Fixed In Version: openstack-tripleo-heat-templates-9.2.1-0.20190119154867.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1688322 (view as bug list)
Environment:
Last Closed: 2019-07-02 20:08:26 UTC
Target Upstream Version:
Embargoed:
vimartin: needinfo-


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1802393 0 None None None 2019-03-13 21:44:07 UTC
Launchpad 1818828 0 None None None 2019-03-13 21:44:07 UTC
OpenStack gerrit 629484 0 None stable/rocky: MERGED tripleo-heat-templates: Update auth parameters (I29df069bd90eacdd01c9c600cfaebce22fe15731) 2019-03-07 20:17:54 UTC
OpenStack gerrit 642810 0 None None None 2019-03-13 21:44:07 UTC
Red Hat Product Errata RHBA-2019:1672 0 None None None 2019-07-02 20:08:44 UTC

Description Victoria Martinez de la Cruz 2019-01-23 21:52:39 UTC
This BZ is a clone of RHBZ#1648114 but for OSP 14

Description
===========

Since this commit [1], keystone doesn't support v2.0 requests anymore. When deployed with THT, manila.conf is configured with neutron_admin_* and nova_admin_* which are not supporting the use of a domain for keystone v3 auth.

[1] https://review.openstack.org/#/c/504465/

Steps to reproduce
==================
Deploy manila-share
Create a manila-share

Expected result
===============
We should have a share

Actual result
=============
Manila-share is getting a 404 on keystone /v2.0/tokens

Environment
===========
Queens

Fix
===

When using these settings, it works:

~~~
[nova]
catalog_info=compute:nova:publicURL
catalog_admin_info=compute:nova:adminURL
api_insecure=False
username=nova
password=xxx
project_name=service
project_domain_name=Default
user_domain_name=Default
auth_url=http://192.168.1.6:5000/

[neutron]
auth_type=password
url=http://192.168.1.6:9696
url_timeout=30
username=neutron
password=xxx
project_name=service
project_domain_name=Default
user_domain_name=Default
auth_url=http://192.168.1.6:5000/
api_insecure=False
auth_strategy=keystone
~~~

Comment 9 Victoria Martinez de la Cruz 2019-03-13 14:15:56 UTC
*** Bug 1684619 has been marked as a duplicate of this bug. ***

Comment 10 Jason Joyce 2019-06-07 18:02:43 UTC
According to our records, this should be resolved by openstack-tripleo-heat-templates-9.3.1-0.20190314162760.d0a6cb1.el7ost.  This build is available now.

Comment 11 vhariria 2019-06-10 17:16:50 UTC
Verification steps, Manila deployment with NetApp backend, OSP14z3  (sealusa13)

(undercloud) [stack@undercloud-0 ~]$ cat core_puddle_version 
2019-05-31.1

(undercloud) [stack@undercloud-0 ~]$ openstack server list
+--------------------------------------+--------------+--------+------------------------+----------------+------------+
| ID                                   | Name         | Status | Networks               | Image          | Flavor     |
+--------------------------------------+--------------+--------+------------------------+----------------+------------+
| 6951ab96-ba85-4dcd-8027-bfd0d5cfc0b8 | controller-0 | ACTIVE | ctlplane=192.168.24.7  | overcloud-full | controller |
| 83a0dd1d-de13-4bff-aef5-f15f6f2375cb | controller-2 | ACTIVE | ctlplane=192.168.24.14 | overcloud-full | controller |
| c7c20a53-c100-42cd-9111-dc774aef82a3 | controller-1 | ACTIVE | ctlplane=192.168.24.10 | overcloud-full | controller |
| a8e88108-14cd-4cbc-b364-c9ce5e6269f5 | compute-0    | ACTIVE | ctlplane=192.168.24.8  | overcloud-full | compute    |
| 57ad819e-ca35-44ff-b4fc-b404916aee6f | compute-1    | ACTIVE | ctlplane=192.168.24.6  | overcloud-full | compute    |
+--------------------------------------+--------------+--------+------------------------+----------------+------------+


(undercloud) [stack@undercloud-0 ~]$ ssh heat-admin.24.10
Warning: Permanently added '192.168.24.10' (ECDSA) to the list of known hosts.
Last login: Mon Jun 10 13:43:35 2019 from 192.168.24.1
[heat-admin@controller-1 ~]$ sudo docker ps | grep manila
e0b5b705c948        192.168.24.1:8787/rhosp14/openstack-manila-share:pcmklatest                  "/bin/bash /usr/lo..."   2 days ago          Up 2 days                                   openstack-manila-share-docker-0
ae1ea945b1da        192.168.24.1:8787/rhosp14/openstack-manila-api:2019-05-31.1                  "kolla_start"            2 days ago          Up 2 days                                   manila_api
d1efad699854        192.168.24.1:8787/rhosp14/openstack-manila-scheduler:2019-05-31.1            "kolla_start"            2 days ago          Up 2 days (unhealthy)                       manila_scheduler

[heat-admin@controller-1 ~]$ sudo docker exec -it e0b5b705c948 /bin/bash
()[root@controller-1 /]# sudo grep -v '^$\|^\s*\#' /etc/manila/manila.conf
..
[neutron]
auth_url=http://172.17.1.13:5000
auth_type=password
password=5HWIxfPpNFpRi18tjTynpQqLB
project_domain_name=Default
project_name=service
user_domain_name=Default
username=manila

[nova]
auth_url=http://172.17.1.13:5000
auth_type=password
password=5HWIxfPpNFpRi18tjTynpQqLB
project_domain_name=Default
project_name=service
user_domain_name=Default
username=manila

#Verified neutron and nova settings are correct

#Extended verification steps -  verify manila share successful creation

()[root@controller-1 /]# exit
exit
[heat-admin@controller-1 ~]$ logout
Connection to 192.168.24.10 closed.

(undercloud) [stack@undercloud-0 ~]$ source overcloudrc
(overcloud) [stack@undercloud-0 ~]$ manila list
+----+------+------+-------------+--------+-----------+-----------------+------+-------------------+
| ID | Name | Size | Share Proto | Status | Is Public | Share Type Name | Host | Availability Zone |
+----+------+------+-------------+--------+-----------+-----------------+------+-------------------+
+----+------+------+-------------+--------+-----------+-----------------+------+-------------------+

(overcloud) [stack@undercloud-0 ~]$ source demorc

(demo-overcloud) [stack@undercloud-0 ~]$ manila list
+--------------------------------------+-----------+------+-------------+-----------+-----------+-----------------+------+-------------------+
| ID                                   | Name      | Size | Share Proto | Status    | Is Public | Share Type Name | Host | Availability Zone |
+--------------------------------------+-----------+------+-------------+-----------+-----------+-----------------+------+-------------------+
| 7728ff12-dc16-4aa1-81f1-730a716dc5c6 | default   | 1    | NFS         | available | False     | default         |      | nova              |
+--------------------------------------+-----------+------+-------------+-----------+-----------+-----------------+------+-------------------+

Comment 12 vhariria 2019-06-10 18:27:48 UTC
Verified, Manila deployment with NetApp backend, OSP14z3  (sealusa13)

Comment 14 errata-xmlrpc 2019-07-02 20:08:26 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:1672


Note You need to log in before you can comment on or make changes to this bug.