Comment 0 for bug 2035180

Revision history for this message
David Negreira (dnegreira) wrote :

[Impact]

* Users cannot add an HTTPS endpoint with octavia/barbican when using application credentials as it returns http error 500 when trying to do so.

[Test Case]

* Full details of commands here [1], summary below.
* Add a user in a project
* Add the admin role to the user in the project
* Create application credentials
* Create a barbican certificate store
* Create octavia loadbalancer and listener with the application credentials

[Where problems could occur]

 * Users might not be able to create load balancers or attach a listener to a load balancer.

[Other Info]

 * Upstream fix and backports: https://review.opendev.org/q/Id77ce36f59b71d309f153e5c1d44059f162ee440
 * Current upstream fix for octavia/Ussuri: https://review.opendev.org/c/openstack/octavia/+/894548
 * Current upstream fix for octavia/Victoria:https://review.opendev.org/c/openstack/octavia/+/894547
 * Currently waiting on upstream merges to proceed with SRU.

[1] https://pastebin.ubuntu.com/p/458fsc9ffz/