openstack: eqiad1: review DB grants for new network setup
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	aborrero
	Sep 18 2023, 8:49 AM

Description

I'm seeing errors like these:

Sep 18 08:47:31 cloudcontrol1005 keystone-wsgi-public[771419]: 2023-09-18 08:47:31.759 771419 ERROR keystone.server.flask.request_processing.middleware.auth_context [None req-5ab047f3-c8bd-498d-89fa-42c0a8ef5bfd novaadmin admin - - default default] (pymysql.err.OperationalError) (1045, "Access denied for user 'keysto>
                                                               (Background on this error at: https://sqlalche.me/e/14/e3q8): sqlalchemy.exc.OperationalError: (pymysql.err.OperationalError) (1045, "Access denied for user 'keystone'@'172.20.1.2' (using password: YES)")
                                                               (Background on this error at: https://sqlalche.me/e/14/e3q8)

The address 172.20.1.2 is cloudlb1001.private.eqiad.wikimedia.cloud

Details

	Subject	Repo	Branch	Lines +/-
	dbutils: introduce statement define	operations/puppet	production	+64 -10

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	aborrero	T296411 cloud: decide on general idea for having cloud-dedicated hardware provide service in the cloud realm & the internet
Resolved	aborrero	T297596 have cloud hardware servers in the cloud realm using a dedicated LB layer
Resolved	taavi	T341060 openstack eqiad1: introduce cloud-private and cloudlb
Resolved	aborrero	T346441 openstack eqiad1: verify new control plane works with cloudlb
Resolved	aborrero	T346603 openstack: eqiad1: review DB grants for new network setup

Event Timeline

aborrero changed the task status from Open to In Progress.Sep 18 2023, 8:49 AM

aborrero triaged this task as High priority.

aborrero created this task.

aborrero moved this task from Backlog to In progress on the cloud-services-team (FY2023/2024-Q1-Q2) board.

aborrero moved this task from Backlog to Doing on the User-aborrero board.

The templates were already in place:

root@cloudcontrol1005:~# find /etc/ -name *_grants.mysql
/etc/keystone/keystone_grants.mysql
/etc/nova/nova_cell_grants.mysql
/etc/nova/nova_grants.mysql
/etc/nova/nova_api_grants.mysql
/etc/cinder/cinder_grants.mysql
/etc/prometheus/prometheus_grants.mysql
/etc/prometheus/prometheus_performance_grants.mysql
/etc/heat/heat_grants.mysql
/etc/neutron/neutron_grants.mysql
/etc/magnum/magnum_grants.mysql
/etc/glance/glance_grants.mysql
/etc/trove/trove_grants.mysql
/etc/placement/placement_grants.mysql
root@cloudcontrol1005:~# for i in $(find /etc/ -name *_grants.mysql) ; do mysql -u root < $i ; done