yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1589993] Re: cannot use trusts with federated users

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: David Wilde <1589993@xxxxxxxxxxxxxxxxxx>
Date: Fri, 16 Dec 2022 20:31:59 -0000
Reply-to: Bug 1589993 <1589993@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
Based on my testing this is now working in master due to the switch to
Secure RBAC.  Please let me know if this continues to be an issue and we
can revisit with fresh logs.

** Changed in: keystone
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1589993

Title:
  cannot use trusts with federated users

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  Deploying with federated user throws an exception in murano-engine
  with:

  Exception Could not find role: 9fe2ff9ee4384b1894a90878d3e92bab (HTTP
  404)

  The mentioned role is _member_

  The full trace:

  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/murano/common/engine.py", line 159, in execute
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     self._create_trust()
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/murano/common/engine.py", line 282, in _create_trust
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     self._session.token, self._session.project_id)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/murano/common/auth_utils.py", line 98, in create_trust
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     project=project)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/contrib/trusts.py", line 75, in create
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 75, in func
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return f(*args, **new_kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 339, in create
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     self.key)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 171, in _post
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     resp, body = self.client.post(url, body=body, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 179, in post
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return self.request(url, 'POST', **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 331, in request
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 98, in request
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return self.session.request(url, method, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/positional/__init__.py", line 94, in inner
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     return func(*args, **kwargs)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine   File "/usr/lib/python2.7/dist-packages/keystoneclient/session.py", line 420, in request
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine     raise exceptions.from_response(resp, method, url)
  2016-06-07 15:08:05.732 8194 ERROR murano.common.engine NotFound: Could not find role: 9fe2ff9ee4384b1894a90878d3e92bab (HTTP 404) (Request-ID: req-760d033b-e456-4915-b197-e450d4c8a405)

  
  Seems something wrong with creating a trust.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1589993/+subscriptions