kolla-ansible

rabbitmq openstack user tags is removed during nova-cell role

Bug #1875786 reported by Jeffrey Zhang
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Medium
Mark Goddard
kolla-ansible 10.0.0 "ussuri"
Train
Fix Released
Medium
Mark Goddard
kolla-ansible 9.2.0 "Train"
Ussuri
Fix Released
Medium
Mark Goddard
kolla-ansible 10.0.0 "ussuri"

Bug Description

nova-cell role will re-configure the rabbitmq openstack user info, where the default administrator tags is un-configured.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/train)

Fix proposed to branch: stable/train
Review: https://review.opendev.org/724324

Changed in kolla-ansible:
assignee: nobody → Jeffrey Zhang (jeffrey4l)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/724325

Revision history for this message
Mark Goddard (mgoddard) wrote :

To add some more detail, from https://www.rabbitmq.com/access-control.html it looks like the tags are used by the management UI for access control, so removal of these tags would break it.

OpenStack Infra (hudson-openstack)
Changed in kolla-ansible:
assignee: Jeffrey Zhang (jeffrey4l) → Mark Goddard (mgoddard)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/724325
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=869e3f21c2e929c8d6731a09e0283ced92cdbf6a
Submitter: Zuul
Branch: master

commit 869e3f21c2e929c8d6731a09e0283ced92cdbf6a
Author: Jeffrey Zhang <email address hidden>
Date: Wed Apr 29 13:34:45 2020 +0800

    Configure RabbitMQ user tags in nova-cell role

    The RabbitMQ 'openstack' user has the 'administrator' tag assigned via
    the RabbitMQ definitions.json file.

    Since the Train release, the nova-cell role also configures the RabbitMQ
    user, but omits the tag. This causes the tag to be removed from the
    user, which prevents it from accessing the management UI and API.

    This change adds support for configuring user tags to the
    service-rabbitmq role, and sets the administrator tag by default.

    Change-Id: I7a5d6fe324dd133e0929804d431583e5b5c1853d
    Closes-Bug: #1875786

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/train)

Reviewed: https://review.opendev.org/724324
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=c31b2505c2eba147ea73fa20d7b0db6c456474b9
Submitter: Zuul
Branch: stable/train

commit c31b2505c2eba147ea73fa20d7b0db6c456474b9
Author: Jeffrey Zhang <email address hidden>
Date: Wed Apr 29 13:34:45 2020 +0800

    Configure RabbitMQ user tags in nova-cell role

    The RabbitMQ 'openstack' user has the 'administrator' tag assigned via
    the RabbitMQ definitions.json file.

    Since the Train release, the nova-cell role also configures the RabbitMQ
    user, but omits the tag. This causes the tag to be removed from the
    user, which prevents it from accessing the management UI and API.

    This change adds support for configuring user tags to the
    service-rabbitmq role, and sets the administrator tag by default.

    Change-Id: I7a5d6fe324dd133e0929804d431583e5b5c1853d
    Closes-Bug: #1875786
    (cherry picked from commit 869e3f21c2e929c8d6731a09e0283ced92cdbf6a)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.