Public bug reported:

set reauthentication_auth_method =trusts

heat stack-create sahara_cluster -f sahara_cluster.yaml

sahara-engine came into error when to get image, with following error:
Forbidden: You are not authorized to perform the requested action: Using 
trust-scoped token to create another token. Create a new trust-scoped token 
instead. (HTTP 403)

The error log is very clear, heat passed trust scoped token to sahara.
Setting "reauthentication_auth_method =trusts" works well for other components 
but sahara.


sahara_cluster.yaml:
heat_template_version: 2015-04-30

resources:
  sahara_cluster:
    type: OS::Sahara::Cluster
    properties:
      name: rdo
      plugin_name: spark
      hadoop_version: 1.6.0
      default_image_id: 4ae3ae1a-ca7f-428b-ae2b-782fb81a9dd2
      cluster_template_id: 7c8f8453-0934-4270-917f-7e3188320a9a
      key_name: stack
      neutron_management_network: private
      use_autoconfig: true

** Affects: heat
     Importance: Undecided
         Status: New

** Affects: keystone
     Importance: Undecided
         Status: New

** Affects: sahara
     Importance: Undecided
         Status: New

** Also affects: sahara
   Importance: Undecided
       Status: New

** Also affects: keystone
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1717918

Title:
  Failed to create sahara cluster if reauthentication_auth_method
  =trusts

Status in OpenStack Heat:
  New
Status in OpenStack Identity (keystone):
  New
Status in Sahara:
  New

Bug description:
  set reauthentication_auth_method =trusts

  heat stack-create sahara_cluster -f sahara_cluster.yaml

  sahara-engine came into error when to get image, with following error:
  Forbidden: You are not authorized to perform the requested action: Using 
trust-scoped token to create another token. Create a new trust-scoped token 
instead. (HTTP 403)

  The error log is very clear, heat passed trust scoped token to sahara.
  Setting "reauthentication_auth_method =trusts" works well for other 
components but sahara.

  
  sahara_cluster.yaml:
  heat_template_version: 2015-04-30

  resources:
    sahara_cluster:
      type: OS::Sahara::Cluster
      properties:
        name: rdo
        plugin_name: spark
        hadoop_version: 1.6.0
        default_image_id: 4ae3ae1a-ca7f-428b-ae2b-782fb81a9dd2
        cluster_template_id: 7c8f8453-0934-4270-917f-7e3188320a9a
        key_name: stack
        neutron_management_network: private
        use_autoconfig: true

To manage notifications about this bug go to:
https://bugs.launchpad.net/heat/+bug/1717918/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to