<html><head><title></title></head><body><!-- rte-version 0.2 9947551637294008b77bce25eb683dac --><div class="rte-style-maintainer" style="white-space: pre-wrap; font-size: small; font-family: 'Courier New', Courier; color: rgb(0, 0, 0);"data-color="global-default" bbg-color="default" data-bb-font-size="medium" bbg-font-size="medium" bbg-font-family="fixed-width">I am working on our Kilo->Liberty upgrade path at present, and when upgrading existing test Kilo controller nodes to Liberty, Keystone gets extremely weird. When evaluating token timestamps for revocation, it looks like sometimes the timestamps are processed as datetime.datetime objects and other times as strings. When Keystone gets a string, it explodes (lines shortened for readability):<div><br></div><div>[req-12f88024-cc71-429e-aea1-19dec45ac804 - - - - -] 'str' object has no attribute 'strftime'</div><div>Traceback (most recent call last):</div><div> File "/usr/lib/python2.7/dist-packages/keystone/common/wsgi.py", line 248, in __call__</div><div> result = method(context, **params)</div><div> File "/usr/lib/python2.7/dist-packages/keystone/common/controller.py", line 163, in inner</div><div> return f(self, context, *args, **kwargs)</div><div> File "/usr/lib/python2.7/dist-packages/keystone/auth/controllers.py", line 560, in revocation_list</div><div> t['expires'] = utils.isotime(expires)</div><div> File "/usr/lib/python2.7/dist-packages/keystone/common/utils.py", line 501, in isotime</div><div> st = at.strftime(_ISO8601_TIME_FORMAT</div><div>AttributeError: 'str' object has no attribute 'strftime'</div><div><br></div><div>I have no idea what is causing it to sometimes be strings and sometimes not. When it does happen, anything trying to authenticate to Keystone gets back a 401, so it renders the entire cluster useless. Flushing memcached seemed to fix it but now does not.</div><div><br></div><div>Has anyone else seen anything like this? <a spellcheck="false"bbg-destination="rte:bind" href="https://review.openstack.org/#/c/302904/" data-destination="rte:bind">https://review.openstack.org/#/c/302904/</a> seems to be a related subject, but this is Neutron-specific.</div></div></body></html>