Bug 1832804 - Failed to create a container when using Ceph RGW - Unauthorized
Summary: Failed to create a container when using Ceph RGW - Unauthorized
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.1 (Train)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: beta
: 16.1 (Train on RHEL 8.2)
Assignee: Giulio Fidente
QA Contact: Yogev Rabl
URL:
Whiteboard:
Depends On: 1812079
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-05-07 10:12 UTC by Itzik Brown
Modified: 2023-09-14 05:57 UTC (History)
8 users (show)

Fixed In Version: openstack-tripleo-heat-templates-11.3.2-0.20200603183438.7b2c249.el8ost
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-07-29 07:52:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1879938 0 None None None 2020-05-21 11:40:42 UTC
OpenStack gerrit 729941 0 None MERGED Include tripleo_ceph_workdir role on rgw variables override 2021-01-03 13:02:45 UTC
OpenStack gerrit 730453 0 None MERGED Include tripleo_ceph_workdir role on rgw variables override 2021-01-03 13:02:45 UTC
Red Hat Product Errata RHBA-2020:3148 0 None None None 2020-07-29 07:52:42 UTC

Description Itzik Brown 2020-05-07 10:12:09 UTC
Description of problem:
When running
$ source ~/shiftstackrc ; openstack object store account set --property Temp-URL-Key=superkey

I get:
Unauthorized (HTTP 401) (Request-ID: tx000000000000000014999-005eb3a710-12a4-default)


(overcloud) [stack@undercloud-0 ~]$ openstack project list
+----------------------------------+------------+
| ID                               | Name       |
+----------------------------------+------------+
| 28a4afff65cd4eebba31315925766193 | admin      |
| a7b0a5e63c9349b38f4e4f57118c166e | shiftstack |
| c57c6333fcc341009ef8491bbad46602 | service    |
+----------------------------------+------------+
(overcloud) [stack@undercloud-0 ~]$ openstack role assignment list --user e7b5267d1b0c4bf19578773adda4d5a0 --project a7b0a5e63c9349b38f4e4f57118c166e --names
+---------------+-------------------------+-------+--------------------+--------+--------+-----------+
| Role          | User                    | Group | Project            | Domain | System | Inherited |
+---------------+-------------------------+-------+--------------------+--------+--------+-----------+
| swiftoperator | shiftstack_user@Default |       | shiftstack@Default |        |        | False     |
| member        | shiftstack_user@Default |       | shiftstack@Default |        |        | False     |
+---------------+-------------------------+-------+--------------------+--------+--------+-----------+

In Version openstack-tripleo-heat-templates-11.3.2-0.20200405044624.ec9970c.el8ost.noarch we have the following in /usr/share/openstack-tripleo-heat-templates/deployment/ceph-ansible/ceph-base.yaml:
  DefaultCephConfigOverrides:
    type: OS::Heat::Value
    properties:
      type: json
      value:
        global:
          osd_pool_default_size: {get_param: CephPoolDefaultSize}
          osd_pool_default_pg_num: {get_param: CephPoolDefaultPgNum}
          osd_pool_default_pgp_num: {get_param: CephPoolDefaultPgNum}
          rgw_keystone_api_version: 3
          rgw_keystone_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
          rgw_keystone_accepted_roles: 'member, Member, admin'
          rgw_keystone_accepted_admin_roles: ResellerAdmin, swiftoperator
          rgw_keystone_admin_domain: default
          rgw_keystone_admin_project: service
          rgw_keystone_admin_user: swift
          rgw_keystone_admin_password: {get_param: SwiftPassword}
          rgw_keystone_implicit_tenants: 'true'
          rgw_keystone_revocation_interval: '0'
          rgw_s3_auth_use_keystone: 'true'
          rgw_swift_versioning_enabled: 'true'
          rgw_swift_account_in_url: 'true'
          rgw_trust_forwarded_https: 'true'

However openstack-tripleo-heat-templates-11.3.2-0.20200429083427.2a67c80.el8ost.noarch has:
  DefaultCephConfigOverrides:
    type: OS::Heat::Value
    properties:
      type: json
      value:
        vars:
          global:
            osd_pool_default_size: {get_param: CephPoolDefaultSize}
            osd_pool_default_pg_num: {get_param: CephPoolDefaultPgNum}
            osd_pool_default_pgp_num: {get_param: CephPoolDefaultPgNum}




Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-11.3.2-0.20200429083427.2a67c80.el8ost.noarch

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 11 Alex McLeod 2020-06-16 12:30:55 UTC
If this bug requires doc text for errata release, please set the 'Doc Type' and provide draft text according to the template in the 'Doc Text' field. The documentation team will review, edit, and approve the text.

If this bug does not require doc text, please set the 'requires_doc_text' flag to '-'.

Comment 13 Itzik Brown 2020-06-17 08:30:06 UTC
Verified:
RHOS-16.1-RHEL-8-20200616.n.0

Comment 15 errata-xmlrpc 2020-07-29 07:52:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:3148

Comment 16 Red Hat Bugzilla 2023-09-14 05:57:36 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days


Note You need to log in before you can comment on or make changes to this bug.