sts-sponsors team mailing list archive

[Launchpad Bug Tracker <1686437@xxxxxxxxxxxxxxxxxx>]

You have been subscribed to a public bug by Felipe Reyes (freyes):

[Impact]

simplestreams can't sync images when keystone is configured to use v3,
keystone v2 is deprecated since mitaka[0] (the version shipped with
xenial)

The OpenStack Keystone charm supports v3 only since Queens and later[1]

[Test Case]

* deploy a openstack environment with keystone v3 enabled
  - get a copy of the bundle available at http://paste.ubuntu.com/p/hkhsHKqt4h/ , this bundle deploys a minimal version of xenial-mitaka.

Expected result:

- "glance image-list" lists trusty and xenial images
- the file glance-simplestreams-sync/0:/var/log/glance-simplestreams-sync.log  contains details of the images pulled from cloud-images.u.c (example: https://pastebin.ubuntu.com/p/RWG8QrkVDz/ )

Actual result:

- "glance image-list" is empty
- the file glance-simplestreams-sync/0:/var/log/glance-simplestreams-sync.log  contains the following stacktrace
INFO      * 04-09 22:04:06 [PID:14571] * root * Calling DryRun mirror to get item list
ERROR     * 04-09 22:04:06 [PID:14571] * root * Exception during syncing:
Traceback (most recent call last):
  File "/usr/share/glance-simplestreams-sync/glance-simplestreams-sync.py", line 471, in main
    do_sync(charm_conf, status_exchange)
  File "/usr/share/glance-simplestreams-sync/glance-simplestreams-sync.py", line 232, in do_sync
    objectstore=store)
  File "/usr/lib/python2.7/dist-packages/simplestreams/mirrors/glance.py", line 374, in __init__
    super(ItemInfoDryRunMirror, self).__init__(config, objectstore)
  File "/usr/lib/python2.7/dist-packages/simplestreams/mirrors/glance.py", line 126, in __init__
    self.keystone_creds = openstack.load_keystone_creds()
  File "/usr/lib/python2.7/dist-packages/simplestreams/openstack.py", line 61, in load_keystone_creds
    raise ValueError("(tenant_id or tenant_name)")
ValueError: (tenant_id or tenant_name)


[Regression Potential]

* A possible regression will manifest itself figuring out if v2 or v3
should be used, after the connection is made there are no further
changes introduced by this SRU


[Other Info]

When trying to test my changes for bug 1686086, I was unable to auth
to keystone, which means glance image sync just doesn't work with
a v3 keystone.

Related bugs:
 * bug 1719879: swift client needs to use v1 auth prior to ocata
 * bug 1728982: openstack mirror with keystone v3 always imports new images
 * bug 1611987: glance-simplestreams-sync charm doesn't support keystone v3

[0] https://docs.openstack.org/releasenotes/keystone/mitaka.html#deprecation-notes
[1] https://docs.openstack.org/charm-guide/latest/1802.html#keystone-support-is-v3-only-for-queens-and-later

** Affects: simplestreams
     Importance: High
         Status: Fix Committed

** Affects: simplestreams (Ubuntu)
     Importance: Medium
         Status: Fix Released

** Affects: simplestreams (Ubuntu Xenial)
     Importance: Medium
     Assignee: Eric Desrochers (slashd)
         Status: Confirmed

** Affects: simplestreams (Ubuntu Zesty)
     Importance: Medium
         Status: Won't Fix


** Tags: sts
-- 
[SRU] glance sync: need keystone v3 auth support
https://bugs.launchpad.net/bugs/1686437
You received this bug notification because you are a member of STS Sponsors, which is subscribed to the bug report.