diff options
| author | Zuul <zuul@review.opendev.org> | 2026-09-15 10:58:03 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2026-09-15 10:58:03 +0000 |
| commit | fab0967e3f737ebf78f3c1de897bdf1b837c0b83 (patch) | |
| tree | 15ac9bd1bbebb3b6b6b8433ae084bec8ff8e5a34 | |
| parent | 4a7ecdf3496d8f920eb0214b10d6bc64394b96de (diff) | |
| parent | d2f3fa49db3a7ac69382cae1a0019665bfea4eb2 (diff) | |
| download | kolla-ansible-fab0967e3f737ebf78f3c1de897bdf1b837c0b83.tar.gz kolla-ansible-fab0967e3f737ebf78f3c1de897bdf1b837c0b83.zip | |
Merge "Register keystoneauth options for [glance] config group" into stable/2026.1
| -rw-r--r-- | ansible/roles/cinder/templates/cinder.conf.j2 | 12 | ||||
| -rw-r--r-- | releasenotes/notes/bug-2161971-1f167e47f9740326.yaml | 9 |
2 files changed, 21 insertions, 0 deletions
diff --git a/ansible/roles/cinder/templates/cinder.conf.j2 b/ansible/roles/cinder/templates/cinder.conf.j2 index 5e9fb5337..106091073 100644 --- a/ansible/roles/cinder/templates/cinder.conf.j2 +++ b/ansible/roles/cinder/templates/cinder.conf.j2 @@ -107,6 +107,18 @@ username = {{ nova_keystone_user }} password = {{ nova_keystone_password }} cafile = {{ openstack_cacert }} +[glance] +interface = internal +auth_url = {{ keystone_internal_url }} +auth_type = password +project_domain_id = {{ default_project_domain_id }} +user_domain_id = {{ default_user_domain_id }} +region_name = {{ openstack_region_name }} +project_name = service +username = {{ cinder_keystone_user }} +password = {{ cinder_keystone_password }} +cafile = {{ openstack_cacert }} + [database] connection = mysql+pymysql://{{ cinder_database_user }}:{{ cinder_database_password }}@{{ cinder_database_address }}/{{ cinder_database_name }}{{ '?ssl_ca=' ~ openstack_cacert if cinder_database_enable_tls_internal | bool }} connection_recycle_time = {{ database_connection_recycle_time }} diff --git a/releasenotes/notes/bug-2161971-1f167e47f9740326.yaml b/releasenotes/notes/bug-2161971-1f167e47f9740326.yaml new file mode 100644 index 000000000..e57a8a0bf --- /dev/null +++ b/releasenotes/notes/bug-2161971-1f167e47f9740326.yaml @@ -0,0 +1,9 @@ +--- +fixes: + - | + Fixes service-to-service authentication between Cinder and + Glance. This resolves ``HTTP 403 Forbidden`` errors during + ``fetch_image_location`` and restores fast volume cloning + (Copy-on-Write) for backends like RBD, preventing an + unnecessary fallback to slow image downloads. + `LP#2161971 <https://launchpad.net/bugs/2161971>`__ |