Page MenuHomePhabricator

CloudVPS: keystone may need update in hardware servers running Buster
Closed, ResolvedPublic

Description

I just noticed this cronspam from cloudmetrics1002 which is running Debian Buster now:

Subject: Cron <_graphite@cloudmetrics1002> /usr/local/bin/archive-instances

/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py:200: UserWarning: Using keystoneclient sessions has been deprecated. Please update your software to use keystoneauth1.
  warnings.warn('Using keystoneclient sessions has been deprecated. '

Event Timeline

aborrero created this task.
aborrero moved this task from Inbox to Soon! on the cloud-services-team (Kanban) board.
Andrew subscribed.

I don't think this is a package upgrade, rather a change in our custom code to use the newer library. I've been chipping away at those, will look at this one soon.

Change 663662 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] archive-instances.py: move to python3 and update to use keystoneauth1

https://gerrit.wikimedia.org/r/663662

Change 663662 merged by Andrew Bogott:
[operations/puppet@production] archive-instances.py: move to python3 and update to use keystoneauth1

https://gerrit.wikimedia.org/r/663662

Change 663666 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] Replace remaining uses of keystoneclient.session

https://gerrit.wikimedia.org/r/663666

Change 663688 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] archive-instances.py: fix use of keystoneauth1

https://gerrit.wikimedia.org/r/663688

Change 663688 merged by Andrew Bogott:
[operations/puppet@production] archive-instances.py: fix use of keystoneauth1

https://gerrit.wikimedia.org/r/663688

Change 663666 merged by Bstorm:
[operations/puppet@production] Replace remaining uses of keystoneclient.session

https://gerrit.wikimedia.org/r/663666

Just a note that we may also want to remove the keystoneclient.auth.identity.v3.Password class in favor of keystoneauth1.identity.v3.Password, which is the one the docs call for. It might not hurt to replace exceptions for auth with keystoneauth1.exceptions versions as well so we don't run into any complications trying to catch the exceptions.

Change 663691 had a related patch set uploaded (by Bstorm; owner: Bstorm):
[operations/puppet@production] keystone: Stay in keystoneauth1 for auth classes

https://gerrit.wikimedia.org/r/663691

There are 15 of keystoneclient.auth.identity import generic in our scripts which is to use generic.Password(). That's probably what we should change to keystoneclient.auth.identity.v3.Password in most of what remains.

Change 663691 merged by Andrew Bogott:
[operations/puppet@production] keystone: Stay in keystoneauth1 for auth classes

https://gerrit.wikimedia.org/r/663691

Change 663853 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] wmcs-cold-migrate.py: use keystoneauth1 instead of keystoneclient for auth

https://gerrit.wikimedia.org/r/663853

Change 663854 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] wmcs-region-migrate.py: use keystoneauth1 instead of keystoneclient for auth

https://gerrit.wikimedia.org/r/663854

Change 663855 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] wmcs-region-migrate-security-groups.py: use keystoneauth1 instead of keystoneclient for auth

https://gerrit.wikimedia.org/r/663855

Change 663856 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] wmf_sink: use password class from keystoneauth1 instead of keystoneclient

https://gerrit.wikimedia.org/r/663856

Change 663856 merged by Andrew Bogott:
[operations/puppet@production] wmf_sink: use password class from keystoneauth1 instead of keystoneclient

https://gerrit.wikimedia.org/r/663856

Change 663869 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] nova_fullstack_test: Replace another use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663869

Change 663870 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] labs-ip-alias-dump.py: Replace another use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663870

Change 663871 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] mwopenstackclients: Replace another use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663871

Change 663872 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] prometheus-labs-targets: Replace use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663872

Change 663871 merged by Andrew Bogott:
[operations/puppet@production] mwopenstackclients: Replace another use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663871

Change 663853 merged by Andrew Bogott:
[operations/puppet@production] wmcs-cold-migrate.py: use keystoneauth1 instead of keystoneclient for auth

https://gerrit.wikimedia.org/r/663853

Change 663854 merged by Andrew Bogott:
[operations/puppet@production] wmcs-region-migrate.py: use keystoneauth1 instead of keystoneclient for auth

https://gerrit.wikimedia.org/r/663854

Change 663855 merged by Andrew Bogott:
[operations/puppet@production] wmcs-region-migrate-security-groups: use keystoneauth1 for password class

https://gerrit.wikimedia.org/r/663855

Change 663869 merged by Andrew Bogott:
[operations/puppet@production] nova_fullstack_test: Replace another use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663869

Change 663870 merged by Andrew Bogott:
[operations/puppet@production] labs-ip-alias-dump.py: Replace another use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663870

Change 663872 merged by Andrew Bogott:
[operations/puppet@production] prometheus-labs-targets: Replace use of keystoneclient with keystoneauth1

https://gerrit.wikimedia.org/r/663872

We've updated all the cases that I know to update.