yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1939350] [NEW] Keystone protection tests are broken

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Lance Bragstad <1939350@xxxxxxxxxxxxxxxxxx>
Date: Mon, 09 Aug 2021 21:42:08 -0000
Reply-to: Bug 1939350 <1939350@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
Public bug reported:

The keystone functional protection tests that use tempest are failing
during Neutron setup:

+ functions-common:is_service_enabled:1965 :   return 1
+ functions-common:run_process:1575        :   time_stop run_process
+ functions-common:time_stop:2309          :   local name
+ functions-common:time_stop:2310          :   local end_time
+ functions-common:time_stop:2311          :   local elapsed_time
+ functions-common:time_stop:2312          :   local total
+ functions-common:time_stop:2313          :   local start_time
+ functions-common:time_stop:2315          :   name=run_process
+ functions-common:time_stop:2316          :   start_time=1628535788991
+ functions-common:time_stop:2318          :   [[ -z 1628535788991 ]]
++ functions-common:time_stop:2321          :   date +%s%3N
+ functions-common:time_stop:2321          :   end_time=1628535789042
+ functions-common:time_stop:2322          :   elapsed_time=51
+ functions-common:time_stop:2323          :   total=5353
+ functions-common:time_stop:2325          :   _TIME_START[$name]=
+ functions-common:time_stop:2326          :   _TIME_TOTAL[$name]=5404
+ ./stack.sh:main:1297                     :   is_service_enabled q-svc
+ functions-common:is_service_enabled:1965 :   return 0
+ ./stack.sh:main:1297                     :   [[ True == \T\r\u\e ]]
+ ./stack.sh:main:1298                     :   echo_summary 'Creating initial neutron network elements'
+ ./stack.sh:echo_summary:426              :   [[ -t 3 ]]
+ ./stack.sh:echo_summary:432              :   echo -e Creating initial neutron network elements
+ ./stack.sh:main:1301                     :   type -p neutron_plugin_create_initial_networks
+ ./stack.sh:main:1304                     :   create_neutron_initial_network
+ lib/neutron_plugins/services/l3:create_neutron_initial_network:164 :   local project_id
++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   oscwrap project list
++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   grep ' demo '
++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   get_field 1
++ functions-common:get_field:726           :   local data field
++ functions-common:get_field:727           :   read data
++ functions-common:oscwrap:2349            :   return 0
+ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   project_id=
+ lib/neutron_plugins/services/l3:create_neutron_initial_network:166 :   die_if_not_set 166 project_id 'Failure retrieving project_id for demo'
+ functions-common:die_if_not_set:216      :   local exitcode=0

and

/usr/lib/python3/dist-packages/secretstorage/dhcrypto.py:15: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
  from cryptography.utils import int_from_bytes
/usr/lib/python3/dist-packages/secretstorage/util.py:19: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
  from cryptography.utils import int_from_bytes
You are not authorized to perform the requested action: identity:get_service. (HTTP 403) (Request-ID: req-1fcb0513-4511-48cf-ac80-34c241ddb211)
++functions-common:oscwrap:2349             return 1
+lib/glance:configure_glance_quotas:298    iniset /etc/glance/glance-api.conf oslo_limit endpoint_id
+lib/glance:configure_glance_quotas:302    openstack role add --user glance --user-domain Default --system all reader
/usr/lib/python3/dist-packages/secretstorage/dhcrypto.py:15: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
  from cryptography.utils import int_from_bytes
/usr/lib/python3/dist-packages/secretstorage/util.py:19: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
  from cryptography.utils import int_from_bytes
You are not authorized to perform the requested action: identity:list_roles. (HTTP 403) (Request-ID: req-cab7850c-d24b-4bc7-9068-9153f2af0955)
[1191190 Async create_glance_accounts:1239951]: finished create_glance_accounts with result 1 in 23 seconds

There appears to be 403s when using keystone tokens to setup things in
devstack, so the tests don't even run.

I was able to reproduce this locally using:

DEVSTACK_PARALLEL=True
KEYSTONE_ENFORCE_SCOPE=True
enable_plugin keystone https://opendev.org/openstack/keystone

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1939350

Title:
  Keystone protection tests are broken

Status in OpenStack Identity (keystone):
  New

Bug description:
  The keystone functional protection tests that use tempest are failing
  during Neutron setup:

  + functions-common:is_service_enabled:1965 :   return 1
  + functions-common:run_process:1575        :   time_stop run_process
  + functions-common:time_stop:2309          :   local name
  + functions-common:time_stop:2310          :   local end_time
  + functions-common:time_stop:2311          :   local elapsed_time
  + functions-common:time_stop:2312          :   local total
  + functions-common:time_stop:2313          :   local start_time
  + functions-common:time_stop:2315          :   name=run_process
  + functions-common:time_stop:2316          :   start_time=1628535788991
  + functions-common:time_stop:2318          :   [[ -z 1628535788991 ]]
  ++ functions-common:time_stop:2321          :   date +%s%3N
  + functions-common:time_stop:2321          :   end_time=1628535789042
  + functions-common:time_stop:2322          :   elapsed_time=51
  + functions-common:time_stop:2323          :   total=5353
  + functions-common:time_stop:2325          :   _TIME_START[$name]=
  + functions-common:time_stop:2326          :   _TIME_TOTAL[$name]=5404
  + ./stack.sh:main:1297                     :   is_service_enabled q-svc
  + functions-common:is_service_enabled:1965 :   return 0
  + ./stack.sh:main:1297                     :   [[ True == \T\r\u\e ]]
  + ./stack.sh:main:1298                     :   echo_summary 'Creating initial neutron network elements'
  + ./stack.sh:echo_summary:426              :   [[ -t 3 ]]
  + ./stack.sh:echo_summary:432              :   echo -e Creating initial neutron network elements
  + ./stack.sh:main:1301                     :   type -p neutron_plugin_create_initial_networks
  + ./stack.sh:main:1304                     :   create_neutron_initial_network
  + lib/neutron_plugins/services/l3:create_neutron_initial_network:164 :   local project_id
  ++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   oscwrap project list
  ++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   grep ' demo '
  ++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   get_field 1
  ++ functions-common:get_field:726           :   local data field
  ++ functions-common:get_field:727           :   read data
  ++ functions-common:oscwrap:2349            :   return 0
  + lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   project_id=
  + lib/neutron_plugins/services/l3:create_neutron_initial_network:166 :   die_if_not_set 166 project_id 'Failure retrieving project_id for demo'
  + functions-common:die_if_not_set:216      :   local exitcode=0

  and

  /usr/lib/python3/dist-packages/secretstorage/dhcrypto.py:15: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  /usr/lib/python3/dist-packages/secretstorage/util.py:19: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  You are not authorized to perform the requested action: identity:get_service. (HTTP 403) (Request-ID: req-1fcb0513-4511-48cf-ac80-34c241ddb211)
  ++functions-common:oscwrap:2349             return 1
  +lib/glance:configure_glance_quotas:298    iniset /etc/glance/glance-api.conf oslo_limit endpoint_id
  +lib/glance:configure_glance_quotas:302    openstack role add --user glance --user-domain Default --system all reader
  /usr/lib/python3/dist-packages/secretstorage/dhcrypto.py:15: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  /usr/lib/python3/dist-packages/secretstorage/util.py:19: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  You are not authorized to perform the requested action: identity:list_roles. (HTTP 403) (Request-ID: req-cab7850c-d24b-4bc7-9068-9153f2af0955)
  [1191190 Async create_glance_accounts:1239951]: finished create_glance_accounts with result 1 in 23 seconds

  There appears to be 403s when using keystone tokens to setup things in
  devstack, so the tests don't even run.

  I was able to reproduce this locally using:

  DEVSTACK_PARALLEL=True
  KEYSTONE_ENFORCE_SCOPE=True
  enable_plugin keystone https://opendev.org/openstack/keystone

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1939350/+subscriptions
Follow ups

[Bug 1939350] Re: Keystone protection tests are broken
From: David Wilde, 2022-12-16
[Bug 1939350] Re: Keystone protection tests are broken
From: Ghanshyam Mann, 2021-08-11