yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1717918] [NEW] Failed to create sahara cluster if reauthentication_auth_method =trusts

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Wang Bo <bo.wang@xxxxxxxxxxxx>
Date: Mon, 18 Sep 2017 12:42:26 -0000
Reply-to: Bug 1717918 <1717918@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Public bug reported:

set reauthentication_auth_method =trusts

heat stack-create sahara_cluster -f sahara_cluster.yaml

sahara-engine came into error when to get image, with following error:
Forbidden: You are not authorized to perform the requested action: Using trust-scoped token to create another token. Create a new trust-scoped token instead. (HTTP 403)

The error log is very clear, heat passed trust scoped token to sahara.
Setting "reauthentication_auth_method =trusts" works well for other components but sahara.


sahara_cluster.yaml:
heat_template_version: 2015-04-30

resources:
  sahara_cluster:
    type: OS::Sahara::Cluster
    properties:
      name: rdo
      plugin_name: spark
      hadoop_version: 1.6.0
      default_image_id: 4ae3ae1a-ca7f-428b-ae2b-782fb81a9dd2
      cluster_template_id: 7c8f8453-0934-4270-917f-7e3188320a9a
      key_name: stack
      neutron_management_network: private
      use_autoconfig: true

** Affects: heat
     Importance: Undecided
         Status: New

** Affects: keystone
     Importance: Undecided
         Status: New

** Affects: sahara
     Importance: Undecided
         Status: New

** Also affects: sahara
   Importance: Undecided
       Status: New

** Also affects: keystone
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1717918

Title:
  Failed to create sahara cluster if reauthentication_auth_method
  =trusts

Status in OpenStack Heat:
  New
Status in OpenStack Identity (keystone):
  New
Status in Sahara:
  New

Bug description:
  set reauthentication_auth_method =trusts

  heat stack-create sahara_cluster -f sahara_cluster.yaml

  sahara-engine came into error when to get image, with following error:
  Forbidden: You are not authorized to perform the requested action: Using trust-scoped token to create another token. Create a new trust-scoped token instead. (HTTP 403)

  The error log is very clear, heat passed trust scoped token to sahara.
  Setting "reauthentication_auth_method =trusts" works well for other components but sahara.

  
  sahara_cluster.yaml:
  heat_template_version: 2015-04-30

  resources:
    sahara_cluster:
      type: OS::Sahara::Cluster
      properties:
        name: rdo
        plugin_name: spark
        hadoop_version: 1.6.0
        default_image_id: 4ae3ae1a-ca7f-428b-ae2b-782fb81a9dd2
        cluster_template_id: 7c8f8453-0934-4270-917f-7e3188320a9a
        key_name: stack
        neutron_management_network: private
        use_autoconfig: true

To manage notifications about this bug go to:
https://bugs.launchpad.net/heat/+bug/1717918/+subscriptions