sts-sponsors team mailing list archive

Thread
Date
[Bug 1831181] [NEW] [aodh.notifier] Not setting user_domain_id raises keystone error: The resource could not be found.

To: sts-sponsors@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1831181@xxxxxxxxxxxxxxxxxx>
Date: Tue, 06 Aug 2019 20:07:50 -0000
Reply-to: Bug 1831181 <1831181@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
You have been subscribed to a public bug by Dan Streetman (ddstreet):

[Environment]

Xenial/Queens

[Description]

If no user_domain_id is provided then, the following exception will be raised by the
aodh-notifier component:

$ openstack alarm-history show 1424b6fb-1d9d-4d69-b00a-ad455aad0ecb

==> /var/log/aodh/aodh-notifier.log <==
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier   File "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/generic/base.py", line 201, in get_auth_ref
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier     return self._plugin.get_auth_ref(session, **kwargs)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier   File "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/v2.py", line 63, in get_auth_ref
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier     authenticated=False, log=False)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier   File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 848, in post
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier     return self.request(url, 'POST', **kwargs)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier   File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 737, in request
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier     raise exceptions.from_response(resp, method, url)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier NotFound: (http://10.5.0.36:35357/v2.0/tokens): The resource could not be found. (HTTP 404) (Request-ID: req-50d54903-d2af-4fd1-be68-a92498d91b85)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier

Domain configuration for the aodh service is as follows:

root@juju-95497c-controller-1:/home/ubuntu# grep domain /etc/aodh/aodh.conf
gnocchi_external_domain_name = service_domain
project_domain_name = service_domain
user_domain_name = service_domain

[Test Case]

1) Configure aodh service with the following configuration

root@juju-95497c-controller-1:/home/ubuntu# grep domain /etc/aodh/aodh.conf
gnocchi_external_domain_name = service_domain
project_domain_name = service_domain
user_domain_name = service_domain

2) Check the alarm history

ubuntu@niedbalski-bastion:~/cases/229352$ openstack alarm-history show
1424b6fb-1d9d-4d69-b00a-ad455aad0ecb

==> /var/log/aodh/aodh-notifier.log <==
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier File "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/generic/base.py", line 201, in get_auth_ref
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier return self._plugin.get_auth_ref(session, **kwargs)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier File "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/v2.py", line 63, in get_auth_ref
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier authenticated=False, log=False)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 848, in post
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier return self.request(url, 'POST', **kwargs)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 737, in request
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier raise exceptions.from_response(resp, method, url)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier NotFound: (http://10.5.0.36:35357/v2.0/tokens): The resource could not be found. (HTTP 404) (Request-ID: req-50d54903-d2af-4fd1-be68-a92498d91b85)
2019-05-31 02:07:26.663 15274 ERROR aodh.notifier

*** With the patch applied the latest traceback doesn't gets generated.


[Regression Potential] 

 * None has been identified


### Explanation

The following line https://github.com/openstack/aodh/blob/master/aodh/keystone_client.py#L51
enforces the existence of the user_domain_id for getting the authenticated keystone session.

[Proposed Solution]

* Use user_domain_name as a fallback if no user_domain_id is provided.
* The charm templates should provide only user_domain_id if provided orelse
fallback to user_domain_name.

** Affects: aodh
     Importance: Undecided
     Assignee: Jorge Niedbalski (niedbalski)
         Status: New

** Affects: charm-aodh
     Importance: Undecided
     Assignee: Jorge Niedbalski (niedbalski)
         Status: Fix Committed

** Affects: charm-interface-keystone
     Importance: Undecided
     Assignee: Jorge Niedbalski (niedbalski)
         Status: Fix Released

** Affects: cloud-archive
     Importance: Medium
         Status: Triaged

** Affects: cloud-archive/mitaka
     Importance: Medium
         Status: Triaged

** Affects: cloud-archive/ocata
     Importance: Medium
         Status: Triaged

** Affects: cloud-archive/queens
     Importance: Medium
         Status: Triaged

** Affects: cloud-archive/rocky
     Importance: Medium
         Status: Triaged

** Affects: cloud-archive/stein
     Importance: Medium
         Status: Triaged

** Affects: cloud-archive/train
     Importance: Medium
         Status: Fix Released

** Affects: aodh (Ubuntu)
     Importance: Medium
         Status: Fix Committed

** Affects: aodh (Ubuntu Bionic)
     Importance: Medium
         Status: Triaged

** Affects: aodh (Ubuntu Disco)
     Importance: Medium
         Status: Fix Committed

** Affects: aodh (Ubuntu Eoan)
     Importance: Medium
         Status: Fix Committed


** Tags: patch sts-sru-needed verification-done verification-done-disco
-- 
[aodh.notifier] Not setting user_domain_id raises keystone error: The resource could not be found.
https://bugs.launchpad.net/bugs/1831181
You received this bug notification because you are a member of STS Sponsors, which is subscribed to the bug report.