Recent changes in the mwopenstackclients library seem to have broken the auth part of the ensure_zone function as it is called in wmcs-wikireplica-dns.py.
It looks like the issue is https://github.com/wikimedia/puppet/blob/production/modules/openstack/files/util/wmcs-wikireplica-dns.py#L104 where it uses 'noauth-project'. This may have been broken by https://gerrit.wikimedia.org/r/c/operations/puppet/+/522196
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Urbanecm | T257672 Create Wikisource Ligurian | |||
| Resolved | • Bstorm | T258389 Prepare and check storage layer for lijwikisource | |||
| Resolved | Urbanecm | T257674 Create Moroccan Arabic Wikipedia | |||
| Resolved | • Bstorm | T257725 Prepare and check storage layer for arywiki | |||
| Resolved | Ladsgroup | T253029 Create Shan Wiktionary | |||
| Resolved | • Bstorm | T256010 Prepare and check storage layer for shnwiktionary | |||
| Resolved | Andrew | T258973 wmcs-wikireplica-dns isn't authing right |
I tried to set up a limited unit test for this pathway but can't reproduce the failure.
Can you tell me where you're running this, how you're running it, and if it's safe for me to run repeatedly?
bstorm> Brooke Storm cloudcontrol1003 after sourcing the novaenv file with the --aliases arg. With and without a --shard s3 arg
Change 617475 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] mwopenstackclient: Fix designate client auth confusion with no-auth project
Change 617475 merged by Andrew Bogott:
[operations/puppet@production] mwopenstackclient: Fix designate client auth confusion with no-auth project