tripleo

decouple ceilometer user creation from ceilometer api

Bug #1677354 reported by Pradeep Kilambi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Medium
Pradeep Kilambi
tripleo pike-1 "pike-1"

Bug Description

When we deploy overcloud with disbale-ceilometer-api.yaml , it skips the cceilometer-api service. But that ties in with ceilometer user. So ceilometer user is not created in keystone. But since we still configure ceilometer.conf with ceilometer user, keystone auth fails when ceilometer-upgrade is run to talk to gnocchi.

Need to figure out how we can decouple ceilometer user creation from ceilometer API.

This seems to be in puppet-tripleo

https://github.com/openstack/puppet-tripleo/blob/master/manifests/profile/base/keystone.pp#L249-L251

Pradeep Kilambi (pkilambi)
Changed in tripleo:
assignee: nobody → Pradeep Kilambi (pkilambi)
importance: Undecided → Medium
status: New → Triaged
milestone: none → pike-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.openstack.org/451532

Changed in tripleo:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-tripleo (master)

Fix proposed to branch: master
Review: https://review.openstack.org/451533

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.openstack.org/451532
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=0d04302abd19f98df3cd700f9cc4ec47273e5dac
Submitter: Jenkins
Branch: master

commit 0d04302abd19f98df3cd700f9cc4ec47273e5dac
Author: Pradeep Kilambi <email address hidden>
Date: Wed Mar 29 15:20:40 2017 -0400

    Set auth flag so ceilometer auth is enabled

    Ceilometer Auth should be enabled even if ceilometer api
    is not. Lets decouple these, this flag will be used in
    puppet-tripleo where ceilometer::keystone::auth class
    is initialized.

    Change-Id: Iffebd40752eafb1d30b5962da8b5624fb9df7d48
    Closes-bug: #1677354

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-tripleo (master)

Reviewed: https://review.openstack.org/451533
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=38e4976b7b80487e26c75ece20bab631597240a3
Submitter: Jenkins
Branch: master

commit 38e4976b7b80487e26c75ece20bab631597240a3
Author: Pradeep Kilambi <email address hidden>
Date: Wed Mar 29 15:07:36 2017 -0400

    Decouple ceilometer user create from API

    Ceilometer user is needed for other ceilometer services to
    authenticate with keystone even when API is not present.
    So the data can be dispatched to gnocchi. Lets keep these
    separate so user always exists even when api is not.

    Depends-On: Iffebd40752eafb1d30b5962da8b5624fb9df7d48

    Closes-bug: #1677354

    Change-Id: I8f4e543a7cef5e50a35a191fe20e276d518daf20

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/ocata)

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/452540

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-tripleo (stable/ocata)

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/452541

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (stable/ocata)

Reviewed: https://review.openstack.org/452540
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=b8855022563dda29aa78590a67386db35c5c6687
Submitter: Jenkins
Branch: stable/ocata

commit b8855022563dda29aa78590a67386db35c5c6687
Author: Pradeep Kilambi <email address hidden>
Date: Wed Mar 29 15:20:40 2017 -0400

    Set auth flag so ceilometer auth is enabled

    Ceilometer Auth should be enabled even if ceilometer api
    is not. Lets decouple these, this flag will be used in
    puppet-tripleo where ceilometer::keystone::auth class
    is initialized.

    Change-Id: Iffebd40752eafb1d30b5962da8b5624fb9df7d48
    Closes-bug: #1677354
    (cherry picked from commit 0d04302abd19f98df3cd700f9cc4ec47273e5dac)

tags: added: in-stable-ocata
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-tripleo (stable/ocata)

Reviewed: https://review.openstack.org/452541
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=12e6b07527a9d9c3b1c36b15805a6a1dcced6f5b
Submitter: Jenkins
Branch: stable/ocata

commit 12e6b07527a9d9c3b1c36b15805a6a1dcced6f5b
Author: Pradeep Kilambi <email address hidden>
Date: Wed Mar 29 15:07:36 2017 -0400

    Decouple ceilometer user create from API

    Ceilometer user is needed for other ceilometer services to
    authenticate with keystone even when API is not present.
    So the data can be dispatched to gnocchi. Lets keep these
    separate so user always exists even when api is not.

    Depends-On: Iffebd40752eafb1d30b5962da8b5624fb9df7d48

    Closes-bug: #1677354

    Change-Id: I8f4e543a7cef5e50a35a191fe20e276d518daf20
    (cherry picked from commit 38e4976b7b80487e26c75ece20bab631597240a3)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/puppet-tripleo 7.0.0

This issue was fixed in the openstack/puppet-tripleo 7.0.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 7.0.0.0b1

This issue was fixed in the openstack/tripleo-heat-templates 7.0.0.0b1 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/puppet-tripleo 6.4.0

This issue was fixed in the openstack/puppet-tripleo 6.4.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 6.1.0

This issue was fixed in the openstack/tripleo-heat-templates 6.1.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.