openstack-integrator charm blocked with invalid value for credentials config

Bug #1889079 reported by Calvin Hartwell
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Openstack Integrator Charm
Fix Released
High
Cory Johns

Bug Description

Hi all,

It seems that my bug may be a duplicate of (1867097) but I will explain my issue anyway as that bug does not go into detail about what was attempted to resolve the issue.

Overview:

I am deploying Charmed Kubernetes on a third-party Openstack, specifically the T-Systems OTC Cloud.
I have managed to bootstrap and deploy the solution but I am hitting issues with the Openstack Integrator charm where it is stuck in a "invalid value for credentials config" blocked state.Deploying load-balancers or storage using Cinder CSI driver does not work.

My bundle is fairly standard, I have used Kubernetes-Core with the integrator deployed on either node 0 or 1.

Fixes Attempted:

* First I tried the standard method of co-locating integrator charm on host 0/1 with Juju provided credentials configured via juju trust. This did not work, despite the fact I used the credentials to deploy the cluster.

* I then tried to configure the credentials by base64 encoding the config as json and using the credentials parameter, but that gives me the same invalid error. I.E this json fed into base64 tool and then passed to Juju via juju config command:

{
  "auth-url"":'https://iam.eu-de.otc.t-systems.com/v3',
  "username": 'doggo',
  "password": 'woof',
  "tenant-id": doggo-internal-network-id,
  "domain-id": doggo-external-network-id
}

* After this failed, I then tried to manually specify the username, password, and domain/tenant ID(s) as charm options in the bundle. This also did not work and gave the same error.

* I also tried to put the the integrator charm onto LXD on node 0/1 to see if this made any difference, but did nothing.

* Finally I tried to create the cloud conf manually and got further, it deployed the csi plugin but storage and load-balancers were still blocked. I might have to retry this route if all else fails.

I couldn't find anything meaningful in the juju logs or in any of the other logs to lead me to why the credentials are invalid.

Happy to provide direct access to the Openstack or any extra information as required.

Cheers,

- Calvin

Revision history for this message
George Kraft (cynerva) wrote :

This is subscribed field-critical.

Calvin, when subscribing field SLA to issues, you need to comment on the issue with something like "subscribed ~field-critical". It is part of the escalation process documented in https://wiki.canonical.com/engineering/FieldSLA and if you don't do it, then we don't get notified.

Revision history for this message
George Kraft (cynerva) wrote :

Did you see Cory's comment about this on Mattermost yesterday?

> It seems that region is also required[1] and is missing from the docs.

In other words, can you use the required fields documented in the credentials config description, but add "region" as well? The full list should be:

auth-url
username
password
project-name
user-domain-name
project-domain-name
region

[1]: https://github.com/juju-solutions/charm-openstack-integrator/blob/master/lib/charms/layer/openstack.py#L48

George Kraft (cynerva)
Changed in charm-openstack-integrator:
importance: Undecided → Critical
Revision history for this message
Cory Johns (johnsca) wrote :

Yes, I'm pretty sure it's the region field that is causing the issue, but the charm should be able to report that in either the status or logs (as well as documenting it in the config description).

Changed in charm-openstack-integrator:
assignee: nobody → Cory Johns (johnsca)
status: New → Triaged
Revision history for this message
Tim Van Steenburgh (tvansteenburgh) wrote :

Downgrading to field-high since a workaround exists.

Cory Johns (johnsca)
Changed in charm-openstack-integrator:
status: Triaged → In Progress
Revision history for this message
Cory Johns (johnsca) wrote :

I also noticed that the JSON snippet provided is invalid. It has an extra quote after the first key, and uses single quotes in some places and is missing quotes in others. Some of that is surely copy-paste errors, but you should double check and ensure that your JSON is well-formed.

Changed in charm-openstack-integrator:
importance: Critical → High
Revision history for this message
Cory Johns (johnsca) wrote :
tags: added: review-needed
Changed in charm-openstack-integrator:
milestone: none → 1.18+ck2
Cory Johns (johnsca)
Changed in charm-openstack-integrator:
milestone: 1.18+ck2 → 1.19
Cory Johns (johnsca)
Changed in charm-openstack-integrator:
status: In Progress → Fix Committed
milestone: 1.19 → 1.18+ck2
Cory Johns (johnsca)
tags: added: backport-needed
removed: review-needed
Revision history for this message
Cory Johns (johnsca) wrote :
tags: removed: backport-needed
Changed in charm-openstack-integrator:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.