Keystone certs need to sync during ha cluster

Bug #1317782 reported by Xiang Hui
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
keystone (Juju Charms Collection)
Fix Released
Critical
Edward Hope-Morley

Bug Description

Version : icehouse
Location : http://bazaar.launchpad.net/~openstack-charmers/charms/precise/keystone/icehouse/

Set up two keystone vms with Vip/SSL using juju commands, after instances are started, keystone request could get success results every few times.

after investigating, the reason is due to every keystone server generate different certificates from peers including root_ca/intermediate_ca/signed_ca, but the keystone client could specified only one ca_bundle, so when the correct signed certificate by this ca_bundle verified, the keystone request can get OK.

Tags: openstack cts

Related branches

Xiang Hui (xianghui)
Changed in keystone (Juju Charms Collection):
assignee: nobody → Xiang Hui (xianghui)
description: updated
summary: - Keystone certs need to be sync during ha cluster
+ Keystone certs need to sync during ha cluster
Xiang Hui (xianghui)
description: updated
Xiang Hui (xianghui)
Changed in keystone (Juju Charms Collection):
status: New → In Progress
tags: added: openstack
tags: added: cts
Xiang Hui (xianghui)
Changed in keystone (Juju Charms Collection):
importance: Undecided → High
Changed in keystone (Juju Charms Collection):
importance: High → Critical
Changed in keystone (Juju Charms Collection):
assignee: Xiang Hui (xianghui) → Edward Hope-Morley (hopem)
Changed in keystone (Juju Charms Collection):
status: In Progress → Fix Committed
James Page (james-page)
Changed in keystone (Juju Charms Collection):
milestone: none → 15.01
James Page (james-page)
Changed in keystone (Juju Charms Collection):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.