Service tokens do not work on cinder-volume charm
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
OpenStack Cinder Charm | Status tracked in Trunk | |||||
2023.1 |
Fix Released
|
Undecided
|
Unassigned | |||
Trunk |
Fix Committed
|
Undecided
|
Unassigned | |||
Yoga |
Fix Released
|
Undecided
|
Unassigned | |||
Zed |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
There is a bug with the service token configuration when cinder is separated between cinder and cinder-volume.
Plain cinder uses the identity-service relation with keystone while cinder-volume uses identity-
Cinder-volume can't create a token with the credentials obtained from identity-
I can reproduce this on a focal/yoga openstack installation using cinder-volume and cinder-ceph but it also happens with pure-storage. Using the default service token configuration cinder-volume can not create a volume based on an image because it can't create the service token. This can be fixed by removing the [service-user] section on cinder-volume or by using the same credentials as those obtained by the identity-service relation.
This is the exception shown on the cinder-volume.log:
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
2023-06-22 14:24:28.231 544373 ERROR oslo_messaging.
description: | updated |
description: | updated |
tags: | added: sts |
description: | updated |
summary: |
- Service tokens do not work on cider-volume charm + Service tokens do not work on cinder-volume charm |
https:/ /review. opendev. org/c/openstack /charm- cinder/ +/887009