Juniper Openstack

tempest-RHOSP10:Keystone v3 not supported

  1. Series trunk
  2. Bug #1686236
Bug #1686236 reported by shajuvk
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R3.2
Fix Released
Medium
Michael Henkel
Juniper Openstack r3.2.6.0
R4.0
Fix Released
Medium
alexey-mr
Juniper Openstack r4.0.2.0
R4.1
Fix Committed
Medium
alexey-mr
Juniper Openstack r4.1.0.0-fcs "r4.1"
Trunk
Fix Committed
Medium
alexey-mr
Juniper Openstack r5.0.0

Bug Description

This is a tracking bug for the feature Keystone V3 on redhat openstack. Contrail not supporting keystone v3 with Redhat OSP10. Tempest test case are failing due to this.

shajuvk (shajuvk)
information type: Proprietary → Public
Jeba Paulaiyan (jebap)
tags: added: config
tags: added: feature-parity
Jeba Paulaiyan (jebap)
tags: added: blocker
Revision history for this message
Deepinder Setia (dsetia) wrote :

What is needed to support keystone v3 with Redhat OSP10? Openstack V3 is supported in Fab and Server Manager. Does Redhat OSP10 need its own provisioning changes?

Revision history for this message
Jeba Paulaiyan (jebap) wrote :

Release-notes: Provisioning Keystone v3 support in RHOSP10 deployment with Contrail is not implemented.

tags: added: releasenote
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.0

Review in progress for https://review.opencontrail.org/36333
Submitter: alexey-mr (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.1

Review in progress for https://review.opencontrail.org/36334
Submitter: alexey-mr (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/36335
Submitter: alexey-mr (<email address hidden>)

Revision history for this message
alexey-mr (alexey-morlang) wrote :

contrail-tripleo-heat-temlates:
master: https://github.com/Juniper/contrail-tripleo-heat-templates/pull/38
ocata: https://github.com/Juniper/contrail-tripleo-heat-templates/pull/37
newton: https://github.com/Juniper/contrail-tripleo-heat-templates/pull/36

Revision history for this message
alexey-mr (alexey-morlang) wrote :

contrail-tripleo-puppet:
master: https://github.com/Juniper/contrail-tripleo-puppet/pull/12
ocata: https://github.com/Juniper/contrail-tripleo-puppet/pull/13
newton: https://github.com/Juniper/contrail-tripleo-puppet/pull/14

Revision history for this message
alexey-mr (alexey-morlang) wrote :

Needs to be built with changes for: https://bugs.launchpad.net/juniperopenstack/+bug/1716430

tags: added: dependent-on-1716430
tags: removed: dependent-on-1716430
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/36333
Committed: http://github.com/Juniper/puppet-contrail/commit/bff657c1d7a9ed03227ad2ce39c5198d1e1fedf8
Submitter: Zuul (<email address hidden>)
Branch: R4.0

commit bff657c1d7a9ed03227ad2ce39c5198d1e1fedf8
Author: alexey-mr <email address hidden>
Date: Fri Sep 29 19:24:58 2017 +0300

Keystone v3 support

Change-Id: I2365c311fb22ca00a4b0a6fb8fdbfddd1051f48d
Partial-Bug: #1686236

Revision history for this message
alexey-mr (alexey-morlang) wrote :

Contrail uses domain scoped auth, but after deployment default domain has no role assigned for user admin, that cause domain scoped auth fails. So it is needed manually add that role after deployment:
source overcloudrc.v3
if ! openstack role assignment list --domain default --user admin | grep -qi default ; then
    openstack role add --domain default --user admin admin
fi

Revision history for this message
alexey-mr (alexey-morlang) wrote :

And by default T-H-T uses version 2, to configure stack to use V3 set T-H-T parameter ContrailAuthVersion: 3.

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/36335
Committed: http://github.com/Juniper/puppet-contrail/commit/5b44a1181b09be23e7d4343f77fe9d712394fbfd
Submitter: Zuul (<email address hidden>)
Branch: master

commit 5b44a1181b09be23e7d4343f77fe9d712394fbfd
Author: alexey-mr <email address hidden>
Date: Fri Sep 29 19:24:58 2017 +0300

Keystone v3 support

Change-Id: I2365c311fb22ca00a4b0a6fb8fdbfddd1051f48d
Partial-Bug: #1686236

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/36334
Committed: http://github.com/Juniper/puppet-contrail/commit/8a6c16c98cccd8d0310c0adb6b8fa3267ffe1055
Submitter: Zuul (<email address hidden>)
Branch: R4.1

commit 8a6c16c98cccd8d0310c0adb6b8fa3267ffe1055
Author: alexey-mr <email address hidden>
Date: Fri Sep 29 19:24:58 2017 +0300

Keystone v3 support

Change-Id: I2365c311fb22ca00a4b0a6fb8fdbfddd1051f48d
Partial-Bug: #1686236

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.