[Heat] Heat Stack Create Authorization Failed
Zane Bitter
zbitter at redhat.com
Thu May 21 15:34:14 UTC 2020
On 21/05/20 10:07 am, İzzettin Erdem wrote:
> Hi David,
>
> I inspected keystone and heat but there is not any wrong configuration
> at these services. I think Sahara causes this, because I can create heat
> stack manually and Murano service can create too. I shared the latest
> sahara-engine journal below.
>
> http://paste.openstack.org/show/793840/
The resource that's failing is a WaitConditionHandle. This relies on a
user created (by Heat) in a separate domain (known, confusingly, as the
stack_user).[1] Heat is failing to get a token for this user using the
username and password that it assigned when it created the user.
This suggests a configuration problem with Heat, or with the setup of
the domain that Heat needs in Keystone.[2] You can reproduce outside of
Sahara by creating a stack with an OS::Heat::WaitConditionHandle resource.
cheers,
Zane.
[1]
https://hardysteven.blogspot.com/2014/04/heat-auth-model-updates-part-2-stack.html
[2] Prerequisite #5 in one of these install guides:
https://docs.openstack.org/heat/latest/install/install.html
> Thanks,
> İzzettin
>
> David Peacock <dpeacock at redhat.com <mailto:dpeacock at redhat.com>>, 15 May
> 2020 Cum, 20:22 tarihinde şunu yazdı:
>
> Hi izzettin,
>
> That seems pretty fundamental; are you sure you're trying to
> authenticate this with the correct user? I'd be checking keystone
> configuration and logs to see what's going on.
>
> Thanks,
> David
>
> On Fri, May 15, 2020 at 10:27 AM İzzettin Erdem <root.mch at gmail.com
> <mailto:root.mch at gmail.com>> wrote:
>
> Hello everyone,
>
> When I launch a cluster on Sahara, it gives a heat stack
> authorization error. I also use Murano service and it is working
> with heat. I could not find the solution and I discuss this
> error with the Sahara-devel team. They are also searching for
> this. Could you help me, please?
>
> Both the error log of Sahara and Heat are below.
>
> Sahara-engine:
> http://paste.openstack.org/show/793671/
>
> Heat-engine:
> http://paste.openstack.org/show/793673/
>
> Thanks. Regards.
>
More information about the openstack-discuss
mailing list