[Yahoo-eng-team] [Bug 1638368] Re: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1

2023-01-11 Thread Takashi Kajinami 
It's not clear what is the pending item on puppet-keystone, and as I no
longer see the problem in recent versions, I'll mark this as won't fix
from our side.

** Changed in: puppet-keystone
   Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1638368

Title:
  new keystone db migrations require either SUPER or
  log_bin_trust_function_creators=1

Status in OpenStack Identity (keystone):
  Fix Released
Status in puppet-keystone:
  Won't Fix

Bug description:
  Upgrade Process Docs:
  http://docs.openstack.org/developer/keystone/upgrading.html#upgrading-
  without-downtime

  The new keystone upgrade features (keystone-manage db_sync --expand)
  require either that the keystone user has SUPER or that

  set global log_bin_trust_function_creators=1; is run.

  I'm not sure which is the better option but logging this anyway.

  Without that you get this error:

  root@dev01-keystone-001:/var/log/mysql# keystone-manage db_sync --expand
  2016-11-01 19:56:17.803 1 INFO migrate.versioning.api [-] 97 -> 98...
  2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] 98 -> 99...
  2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] 99 -> 100...
  2016-11-01 19:56:17.855 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.856 1 INFO migrate.versioning.api [-] 100 -> 101...
  2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] 101 -> 102...
  2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] 102 -> 103...
  2016-11-01 19:56:18.108 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.109 1 INFO migrate.versioning.api [-] 103 -> 104...
  2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] 104 -> 105...
  2016-11-01 19:56:18.454 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.455 1 INFO migrate.versioning.api [-] 105 -> 106...
  2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] 106 -> 107...
  2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] 107 -> 108...
  2016-11-01 19:56:19.324 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.325 1 INFO migrate.versioning.api [-] 108 -> 109...
  2016-11-01 19:56:19.477 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.534 1 INFO migrate.versioning.api [-] 0 -> 1...
  2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] 1 -> 2...
  2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] 2 -> 3...
  2016-11-01 19:56:19.881 1 CRITICAL keystone [-] OperationalError: 
(_mysql_exceptions.OperationalError) (1419, 'You do not have the SUPER 
privilege and binary logging is enabled (you *might* want to use the less safe 
log_bin_trust_function_creators variable)') [SQL: "\nCREATE TRIGGER 
credential_insert_read_only BEFORE INSERT ON credential\nFOR EACH ROW\nBEGIN\n  
SIGNAL SQLSTATE '45000'\nSET MESSAGE_TEXT = 'Credential migration in 
progress. Cannot perform writes to credential table.';\nEND;\n"]
  2016-11-01 19:56:19.881 1 ERROR keystone Traceback (most recent call last):
  2016-11-01 19:56:19.881 1 ERROR keystone   File "/usr/bin/keystone-manage", 
line 10, in 
  2016-11-01 19:56:19.881 1 ERROR keystone sys.exit(main())
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/manage.py", line 44, in 
main
  2016-11-01 19:56:19.881 1 ERROR keystone cli.main(argv=sys.argv, 
config_files=config_files)
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 1254, in 
main
  2016-11-01 19:56:19.881 1 ERROR keystone CONF.command.cmd_class.main()
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 438, in main
  2016-11-01 19:56:19.881 1 ERROR keystone migration_helpers.expand_schema()
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py",
 line 233, in expand_schema
  2016-11-01 19:56:19.881 1 ERROR keystone 
_sync_repo(repo_name='expand_repo')
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py",
 line 144, in _sync_repo
  2016-11-01 19:56:19.881 1 ERROR keystone init_version=init_version,

[Yahoo-eng-team] [Bug 1638368] Re: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1

2016-11-08 Thread OpenStack Infra 
Reviewed:  https://review.openstack.org/394603
Committed: 
https://git.openstack.org/cgit/openstack/keystone/commit/?id=52f58eb4df23706a17ee08052360f3973a93ef69
Submitter: Jenkins
Branch:master

commit 52f58eb4df23706a17ee08052360f3973a93ef69
Author: Richard Avelar 
Date:   Mon Nov 7 19:50:57 2016 +

Doc warning for keystone db migration

The new keystone upgrade features (keystone-manage db_sync --expand)
requires for MySQL deployments that the keystone user is granted SUPER
privilege or that set global log_bin_trust function_creators=1; is run.
Adding a warning message to notify reader.

Change-Id: I78738a335d14c6ad824c348a7385bb1ee8ad75bf
Closes-Bug: 1638368


** Changed in: keystone
   Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1638368

Title:
  new keystone db migrations require either SUPER or
  log_bin_trust_function_creators=1

Status in OpenStack Identity (keystone):
  Fix Released
Status in puppet-keystone:
  New

Bug description:
  Upgrade Process Docs:
  http://docs.openstack.org/developer/keystone/upgrading.html#upgrading-
  without-downtime

  The new keystone upgrade features (keystone-manage db_sync --expand)
  require either that the keystone user has SUPER or that

  set global log_bin_trust_function_creators=1; is run.

  I'm not sure which is the better option but logging this anyway.

  Without that you get this error:

  root@dev01-keystone-001:/var/log/mysql# keystone-manage db_sync --expand
  2016-11-01 19:56:17.803 1 INFO migrate.versioning.api [-] 97 -> 98...
  2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] 98 -> 99...
  2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] 99 -> 100...
  2016-11-01 19:56:17.855 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.856 1 INFO migrate.versioning.api [-] 100 -> 101...
  2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] 101 -> 102...
  2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] 102 -> 103...
  2016-11-01 19:56:18.108 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.109 1 INFO migrate.versioning.api [-] 103 -> 104...
  2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] 104 -> 105...
  2016-11-01 19:56:18.454 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.455 1 INFO migrate.versioning.api [-] 105 -> 106...
  2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] 106 -> 107...
  2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] 107 -> 108...
  2016-11-01 19:56:19.324 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.325 1 INFO migrate.versioning.api [-] 108 -> 109...
  2016-11-01 19:56:19.477 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.534 1 INFO migrate.versioning.api [-] 0 -> 1...
  2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] 1 -> 2...
  2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] 2 -> 3...
  2016-11-01 19:56:19.881 1 CRITICAL keystone [-] OperationalError: 
(_mysql_exceptions.OperationalError) (1419, 'You do not have the SUPER 
privilege and binary logging is enabled (you *might* want to use the less safe 
log_bin_trust_function_creators variable)') [SQL: "\nCREATE TRIGGER 
credential_insert_read_only BEFORE INSERT ON credential\nFOR EACH ROW\nBEGIN\n  
SIGNAL SQLSTATE '45000'\nSET MESSAGE_TEXT = 'Credential migration in 
progress. Cannot perform writes to credential table.';\nEND;\n"]
  2016-11-01 19:56:19.881 1 ERROR keystone Traceback (most recent call last):
  2016-11-01 19:56:19.881 1 ERROR keystone   File "/usr/bin/keystone-manage", 
line 10, in 
  2016-11-01 19:56:19.881 1 ERROR keystone sys.exit(main())
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/manage.py", line 44, in 
main
  2016-11-01 19:56:19.881 1 ERROR keystone cli.main(argv=sys.argv, 
config_files=config_files)
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 1254, in 
main
  2016-11-01 19:56:19.881 1 ERROR keystone CONF.command.cmd_class.main()
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 438, in

[Yahoo-eng-team] [Bug 1638368] Re: new keystone db migrations require either SUPER or log_bin_trust_function_creators=1

2016-11-01 Thread Matt Fischer 
** Also affects: keystone
   Importance: Undecided
   Status: New

** Description changed:

+ Upgrade Process Docs:
+ http://docs.openstack.org/developer/keystone/upgrading.html#upgrading-
+ without-downtime
+ 
  The new keystone upgrade features (keystone-manage db_sync --expand)
  require either that the keystone user has SUPER or that
  
  set global log_bin_trust_function_creators=1; is run.
  
  I'm not sure which is the better option but logging this anyway.
  
  Without that you get this error:
  
  root@dev01-keystone-001:/var/log/mysql# keystone-manage db_sync --expand
  2016-11-01 19:56:17.803 1 INFO migrate.versioning.api [-] 97 -> 98...
  2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.821 1 INFO migrate.versioning.api [-] 98 -> 99...
  2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.839 1 INFO migrate.versioning.api [-] 99 -> 100...
  2016-11-01 19:56:17.855 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.856 1 INFO migrate.versioning.api [-] 100 -> 101...
  2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.897 1 INFO migrate.versioning.api [-] 101 -> 102...
  2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:17.961 1 INFO migrate.versioning.api [-] 102 -> 103...
  2016-11-01 19:56:18.108 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.109 1 INFO migrate.versioning.api [-] 103 -> 104...
  2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.132 1 INFO migrate.versioning.api [-] 104 -> 105...
  2016-11-01 19:56:18.454 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.455 1 INFO migrate.versioning.api [-] 105 -> 106...
  2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.680 1 INFO migrate.versioning.api [-] 106 -> 107...
  2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:18.968 1 INFO migrate.versioning.api [-] 107 -> 108...
  2016-11-01 19:56:19.324 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.325 1 INFO migrate.versioning.api [-] 108 -> 109...
  2016-11-01 19:56:19.477 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.534 1 INFO migrate.versioning.api [-] 0 -> 1...
  2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.550 1 INFO migrate.versioning.api [-] 1 -> 2...
  2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] done
  2016-11-01 19:56:19.569 1 INFO migrate.versioning.api [-] 2 -> 3...
  2016-11-01 19:56:19.881 1 CRITICAL keystone [-] OperationalError: 
(_mysql_exceptions.OperationalError) (1419, 'You do not have the SUPER 
privilege and binary logging is enabled (you *might* want to use the less safe 
log_bin_trust_function_creators variable)') [SQL: "\nCREATE TRIGGER 
credential_insert_read_only BEFORE INSERT ON credential\nFOR EACH ROW\nBEGIN\n  
SIGNAL SQLSTATE '45000'\nSET MESSAGE_TEXT = 'Credential migration in 
progress. Cannot perform writes to credential table.';\nEND;\n"]
  2016-11-01 19:56:19.881 1 ERROR keystone Traceback (most recent call last):
  2016-11-01 19:56:19.881 1 ERROR keystone   File "/usr/bin/keystone-manage", 
line 10, in 
  2016-11-01 19:56:19.881 1 ERROR keystone sys.exit(main())
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/manage.py", line 44, in 
main
  2016-11-01 19:56:19.881 1 ERROR keystone cli.main(argv=sys.argv, 
config_files=config_files)
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 1254, in 
main
  2016-11-01 19:56:19.881 1 ERROR keystone CONF.command.cmd_class.main()
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/cmd/cli.py", line 438, in main
  2016-11-01 19:56:19.881 1 ERROR keystone migration_helpers.expand_schema()
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py",
 line 233, in expand_schema
  2016-11-01 19:56:19.881 1 ERROR keystone 
_sync_repo(repo_name='expand_repo')
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/keystone/common/sql/migration_helpers.py",
 line 144, in _sync_repo
  2016-11-01 19:56:19.881 1 ERROR keystone init_version=init_version, 
sanity_check=False)
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/oslo_db/sqlalchemy/migration.py", line 
78, in db_sync
  2016-11-01 19:56:19.881 1 ERROR keystone migration = 
versioning_api.upgrade(engine, repository, version)
  2016-11-01 19:56:19.881 1 ERROR keystone   File 
"/venv/local/lib/python2.7/site-packages/migrate/versioning/api.py", line 186, 
in upgrade
  2016-11-01 19:56:19.881 1 ERROR keystone return _migrate(url, repository, 
version,