yahoo-eng-team team mailing list archive

[David Wilde <1939350@xxxxxxxxxxxxxxxxxx>]

This looks to have been fixed with the changes to devstack.  Feel free
to re-open if you feel this is still an issue that needs fixing in
Keystone.

** Changed in: keystone
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1939350

Title:
  Keystone protection tests are broken

Status in devstack:
  Fix Released
Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  The keystone functional protection tests that use tempest are failing
  during Neutron setup:

  + functions-common:is_service_enabled:1965 :   return 1
  + functions-common:run_process:1575        :   time_stop run_process
  + functions-common:time_stop:2309          :   local name
  + functions-common:time_stop:2310          :   local end_time
  + functions-common:time_stop:2311          :   local elapsed_time
  + functions-common:time_stop:2312          :   local total
  + functions-common:time_stop:2313          :   local start_time
  + functions-common:time_stop:2315          :   name=run_process
  + functions-common:time_stop:2316          :   start_time=1628535788991
  + functions-common:time_stop:2318          :   [[ -z 1628535788991 ]]
  ++ functions-common:time_stop:2321          :   date +%s%3N
  + functions-common:time_stop:2321          :   end_time=1628535789042
  + functions-common:time_stop:2322          :   elapsed_time=51
  + functions-common:time_stop:2323          :   total=5353
  + functions-common:time_stop:2325          :   _TIME_START[$name]=
  + functions-common:time_stop:2326          :   _TIME_TOTAL[$name]=5404
  + ./stack.sh:main:1297                     :   is_service_enabled q-svc
  + functions-common:is_service_enabled:1965 :   return 0
  + ./stack.sh:main:1297                     :   [[ True == \T\r\u\e ]]
  + ./stack.sh:main:1298                     :   echo_summary 'Creating initial neutron network elements'
  + ./stack.sh:echo_summary:426              :   [[ -t 3 ]]
  + ./stack.sh:echo_summary:432              :   echo -e Creating initial neutron network elements
  + ./stack.sh:main:1301                     :   type -p neutron_plugin_create_initial_networks
  + ./stack.sh:main:1304                     :   create_neutron_initial_network
  + lib/neutron_plugins/services/l3:create_neutron_initial_network:164 :   local project_id
  ++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   oscwrap project list
  ++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   grep ' demo '
  ++ lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   get_field 1
  ++ functions-common:get_field:726           :   local data field
  ++ functions-common:get_field:727           :   read data
  ++ functions-common:oscwrap:2349            :   return 0
  + lib/neutron_plugins/services/l3:create_neutron_initial_network:165 :   project_id=
  + lib/neutron_plugins/services/l3:create_neutron_initial_network:166 :   die_if_not_set 166 project_id 'Failure retrieving project_id for demo'
  + functions-common:die_if_not_set:216      :   local exitcode=0

  and

  /usr/lib/python3/dist-packages/secretstorage/dhcrypto.py:15: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  /usr/lib/python3/dist-packages/secretstorage/util.py:19: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  You are not authorized to perform the requested action: identity:get_service. (HTTP 403) (Request-ID: req-1fcb0513-4511-48cf-ac80-34c241ddb211)
  ++functions-common:oscwrap:2349             return 1
  +lib/glance:configure_glance_quotas:298    iniset /etc/glance/glance-api.conf oslo_limit endpoint_id
  +lib/glance:configure_glance_quotas:302    openstack role add --user glance --user-domain Default --system all reader
  /usr/lib/python3/dist-packages/secretstorage/dhcrypto.py:15: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  /usr/lib/python3/dist-packages/secretstorage/util.py:19: CryptographyDeprecationWarning: int_from_bytes is deprecated, use int.from_bytes instead
    from cryptography.utils import int_from_bytes
  You are not authorized to perform the requested action: identity:list_roles. (HTTP 403) (Request-ID: req-cab7850c-d24b-4bc7-9068-9153f2af0955)
  [1191190 Async create_glance_accounts:1239951]: finished create_glance_accounts with result 1 in 23 seconds

  There appears to be 403s when using keystone tokens to setup things in
  devstack, so the tests don't even run.

  I was able to reproduce this locally using:

  DEVSTACK_PARALLEL=True
  KEYSTONE_ENFORCE_SCOPE=True
  enable_plugin keystone https://opendev.org/openstack/keystone

To manage notifications about this bug go to:
https://bugs.launchpad.net/devstack/+bug/1939350/+subscriptions