[Yahoo-eng-team] [Bug 1638368] Re: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1
It's not clear what is the pending item on puppet-keystone, and as I no longer see the problem in recent versions, I'll mark this as won't fix from our side. ** Changed in: puppet-keystone Status: New => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1638368 Title: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1 Status in OpenStack Identity (keystone): Fix Released Status in puppet-keystone: Won't Fix Bug description: Upgrade Process Docs: http://docs.openstack.org/developer/keystone/upgrading.html#upgrading- without-downtime The new keystone upgrade features (keystone-manage db_sync --expand) require either that the keystone user has SUPER or that set global log_bin_trust_function_creators=1; is run. I'm not sure which is the better option but logging this anyway. Without that you get this error: root@dev01-keystone-001:/var/log/mysql# keystone-manage db_sync --expand 2016-11-01 19:56:17.803 1 INFO migrate.versioning.api [-] 97 -> 98... 2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] 98 -> 99... 2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] 99 -> 100... 2016-11-01 19:56:17.855 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.856 1 INFO migrate.versioning.api [-] 100 -> 101... 2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] 101 -> 102... 2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] 102 -> 103... 2016-11-01 19:56:18.108 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.109 1 INFO migrate.versioning.api [-] 103 -> 104... 2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] 104 -> 105... 2016-11-01 19:56:18.454 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.455 1 INFO migrate.versioning.api [-] 105 -> 106... 2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] 106 -> 107... 2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] 107 -> 108... 2016-11-01 19:56:19.324 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.325 1 INFO migrate.versioning.api [-] 108 -> 109... 2016-11-01 19:56:19.477 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.534 1 INFO migrate.versioning.api [-] 0 -> 1... 2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] 1 -> 2... 2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] 2 -> 3... 2016-11-01 19:56:19.881 1 CRITICAL keystone [-] OperationalError: (_mysql_exceptions.OperationalError) (1419, 'You do not have the SUPER privilege and binary logging is enabled (you *might* want to use the less safe log_bin_trust_function_creators variable)') [SQL: "\nCREATE TRIGGER credential_insert_read_only BEFORE INSERT ON credential\nFOR EACH ROW\nBEGIN\n SIGNAL SQLSTATE '45000'\nSET MESSAGE_TEXT = 'Credential migration in progress. Cannot perform writes to credential table.';\nEND;\n"] 2016-11-01 19:56:19.881 1 ERROR keystone Traceback (most recent call last): 2016-11-01 19:56:19.881 1 ERROR keystone File "/usr/bin/keystone-manage", line 10, in 2016-11-01 19:56:19.881 1 ERROR keystone sys.exit(main()) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/manage.py", line 44, in main 2016-11-01 19:56:19.881 1 ERROR keystone cli.main(argv=sys.argv, config_files=config_files) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 1254, in main 2016-11-01 19:56:19.881 1 ERROR keystone CONF.command.cmd_class.main() 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 438, in main 2016-11-01 19:56:19.881 1 ERROR keystone migration_helpers.expand_schema() 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py", line 233, in expand_schema 2016-11-01 19:56:19.881 1 ERROR keystone _sync_repo(repo_name='expand_repo') 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py", line 144, in _sync_repo 2016-11-01 19:56:19.881 1 ERROR keystone init_version=init_version, sanity_ch
[Yahoo-eng-team] [Bug 1638368] Re: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1
Reviewed: https://review.openstack.org/394603 Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=52f58eb4df23706a17ee08052360f3973a93ef69 Submitter: Jenkins Branch:master commit 52f58eb4df23706a17ee08052360f3973a93ef69 Author: Richard Avelar Date: Mon Nov 7 19:50:57 2016 + Doc warning for keystone db migration The new keystone upgrade features (keystone-manage db_sync --expand) requires for MySQL deployments that the keystone user is granted SUPER privilege or that set global log_bin_trust function_creators=1; is run. Adding a warning message to notify reader. Change-Id: I78738a335d14c6ad824c348a7385bb1ee8ad75bf Closes-Bug: 1638368 ** Changed in: keystone Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1638368 Title: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1 Status in OpenStack Identity (keystone): Fix Released Status in puppet-keystone: New Bug description: Upgrade Process Docs: http://docs.openstack.org/developer/keystone/upgrading.html#upgrading- without-downtime The new keystone upgrade features (keystone-manage db_sync --expand) require either that the keystone user has SUPER or that set global log_bin_trust_function_creators=1; is run. I'm not sure which is the better option but logging this anyway. Without that you get this error: root@dev01-keystone-001:/var/log/mysql# keystone-manage db_sync --expand 2016-11-01 19:56:17.803 1 INFO migrate.versioning.api [-] 97 -> 98... 2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] 98 -> 99... 2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] 99 -> 100... 2016-11-01 19:56:17.855 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.856 1 INFO migrate.versioning.api [-] 100 -> 101... 2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] 101 -> 102... 2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] 102 -> 103... 2016-11-01 19:56:18.108 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.109 1 INFO migrate.versioning.api [-] 103 -> 104... 2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] 104 -> 105... 2016-11-01 19:56:18.454 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.455 1 INFO migrate.versioning.api [-] 105 -> 106... 2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] 106 -> 107... 2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] 107 -> 108... 2016-11-01 19:56:19.324 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.325 1 INFO migrate.versioning.api [-] 108 -> 109... 2016-11-01 19:56:19.477 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.534 1 INFO migrate.versioning.api [-] 0 -> 1... 2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] 1 -> 2... 2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] 2 -> 3... 2016-11-01 19:56:19.881 1 CRITICAL keystone [-] OperationalError: (_mysql_exceptions.OperationalError) (1419, 'You do not have the SUPER privilege and binary logging is enabled (you *might* want to use the less safe log_bin_trust_function_creators variable)') [SQL: "\nCREATE TRIGGER credential_insert_read_only BEFORE INSERT ON credential\nFOR EACH ROW\nBEGIN\n SIGNAL SQLSTATE '45000'\nSET MESSAGE_TEXT = 'Credential migration in progress. Cannot perform writes to credential table.';\nEND;\n"] 2016-11-01 19:56:19.881 1 ERROR keystone Traceback (most recent call last): 2016-11-01 19:56:19.881 1 ERROR keystone File "/usr/bin/keystone-manage", line 10, in 2016-11-01 19:56:19.881 1 ERROR keystone sys.exit(main()) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/manage.py", line 44, in main 2016-11-01 19:56:19.881 1 ERROR keystone cli.main(argv=sys.argv, config_files=config_files) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 1254, in main 2016-11-01 19:56:19.881 1 ERROR keystone CONF.command.cmd_class.main() 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 438, in main 2016-11-01 19:5
[Yahoo-eng-team] [Bug 1638368] Re: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1
** Also affects: keystone Importance: Undecided Status: New ** Description changed: + Upgrade Process Docs: + http://docs.openstack.org/developer/keystone/upgrading.html#upgrading- + without-downtime + The new keystone upgrade features (keystone-manage db_sync --expand) require either that the keystone user has SUPER or that set global log_bin_trust_function_creators=1; is run. I'm not sure which is the better option but logging this anyway. Without that you get this error: root@dev01-keystone-001:/var/log/mysql# keystone-manage db_sync --expand 2016-11-01 19:56:17.803 1 INFO migrate.versioning.api [-] 97 -> 98... 2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] 98 -> 99... 2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] 99 -> 100... 2016-11-01 19:56:17.855 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.856 1 INFO migrate.versioning.api [-] 100 -> 101... 2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] 101 -> 102... 2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] 102 -> 103... 2016-11-01 19:56:18.108 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.109 1 INFO migrate.versioning.api [-] 103 -> 104... 2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] 104 -> 105... 2016-11-01 19:56:18.454 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.455 1 INFO migrate.versioning.api [-] 105 -> 106... 2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] 106 -> 107... 2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] 107 -> 108... 2016-11-01 19:56:19.324 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.325 1 INFO migrate.versioning.api [-] 108 -> 109... 2016-11-01 19:56:19.477 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.534 1 INFO migrate.versioning.api [-] 0 -> 1... 2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] 1 -> 2... 2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] done 2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] 2 -> 3... 2016-11-01 19:56:19.881 1 CRITICAL keystone [-] OperationalError: (_mysql_exceptions.OperationalError) (1419, 'You do not have the SUPER privilege and binary logging is enabled (you *might* want to use the less safe log_bin_trust_function_creators variable)') [SQL: "\nCREATE TRIGGER credential_insert_read_only BEFORE INSERT ON credential\nFOR EACH ROW\nBEGIN\n SIGNAL SQLSTATE '45000'\nSET MESSAGE_TEXT = 'Credential migration in progress. Cannot perform writes to credential table.';\nEND;\n"] 2016-11-01 19:56:19.881 1 ERROR keystone Traceback (most recent call last): 2016-11-01 19:56:19.881 1 ERROR keystone File "/usr/bin/keystone-manage", line 10, in 2016-11-01 19:56:19.881 1 ERROR keystone sys.exit(main()) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/manage.py", line 44, in main 2016-11-01 19:56:19.881 1 ERROR keystone cli.main(argv=sys.argv, config_files=config_files) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 1254, in main 2016-11-01 19:56:19.881 1 ERROR keystone CONF.command.cmd_class.main() 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 438, in main 2016-11-01 19:56:19.881 1 ERROR keystone migration_helpers.expand_schema() 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py", line 233, in expand_schema 2016-11-01 19:56:19.881 1 ERROR keystone _sync_repo(repo_name='expand_repo') 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py", line 144, in _sync_repo 2016-11-01 19:56:19.881 1 ERROR keystone init_version=init_version, sanity_check=False) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/oslo_db/sqlalchemy/migration.py", line 78, in db_sync 2016-11-01 19:56:19.881 1 ERROR keystone migration = versioning_api.upgrade(engine, repository, version) 2016-11-01 19:56:19.881 1 ERROR keystone File "/venv/local/lib/python2.7/site-packages/migrate/versioning/api.py", line 186, in upgrade 2016-11-01 19:56:19.881 1 ERROR keystone return _migrate(url, repository, version, upgrade=True