yahoo-eng-team team mailing list archive

[Dolph Mathews <1589993@xxxxxxxxxxxxxxxxxx>]

I imagine this will be addressed by (or nearly addressed by) having
concrete role assignments for federated users in keystone:
https://review.openstack.org/#/c/284943/

** Also affects: keystone
   Importance: Undecided
       Status: New

** Changed in: keystone
     Assignee: (unassigned) => Ron De Rose (ronald-de-rose)

** Changed in: keystone
   Importance: Undecided => Wishlist

** Changed in: keystone
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1589993

Title:
  Murano cannot deploy with federated user

Status in OpenStack Identity (keystone):
  Triaged
Status in Murano:
  New

Bug description:
  Deploying with federated user throws an exception in murano-engine
  with:

  Exception Could not find role: 9fe2ff9ee4384b1894a90878d3e92bab (HTTP
  404)

  The mentioned role is _member_

  The full trace:

  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/murano/common/engine.py", line 159, in execute
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     self._create_trust()
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/murano/common/engine.py", line 282, in _create_trust
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     self._session.token, self._session.project_id)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/murano/common/auth_utils.py", line 98, in create_trust
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     project=project)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/contrib/trusts.py", line 75, in create
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 75, in func
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return f(*args, **new_kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 339, in create
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     self.key)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 171, in _post
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     resp, body = self.client.post(url, body=body, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 179, in post
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return self.request(url, 'POST', **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 331, in request
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 98, in request
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return self.session.request(url, method, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/positional/__init__.py", line 94, in inner
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return func(*args, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/session.py", line 420, in request
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     raise exceptions.from_response(resp, method, url)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine NotFound: Could not find role: 9fe2ff9ee4384b1894a90878d3e92bab (HTTP 404) (Request-ID: req-760d033b-e456-4915-b197-e450d4c8a405)

  
  Seems something wrong with creating a trust.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1589993/+subscriptions