Ubuntu
barbican package

/etc/barbican/policy.json is missing from barbican package

Bug #1526655 reported by Liam Young
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
barbican (Ubuntu)
Fix Released
High
Unassigned
Wily
Fix Released
High
Unassigned
Xenial
Fix Released
High
Unassigned

Bug Description

[Impact]
Unable to store secrets in a barbican deployment due to missing policy file.

[Test Case]
Install and configure barbican-api
Attempt to store secret

[Regression Potential]
Minimal, just including a missing conf file in the package barbican-api.

[Original Bug Report]
Package version 1:1.0.0-0ubuntu1~cloud0

Attempting to store a secret results in:

{address space usage: 184709120 bytes/176MB} {rss usage: 60383232 bytes/57MB} [pid: 13191|app: 0|req: 2/2] 10.5.17.29 () {26 vars in 308 bytes} [Wed Dec 16 08:02:14 2015] GET / => generated 349 bytes in 1 msecs (HTTP/1.1 300) 3 headers in 120 bytes (1 switches on core 0)
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers [req-e702b11d-53c0-4f4f-93f7-63790ef3a347 93ea090b69a1473ca42ecae7135fefad 7f29e1638b0741d48b5f165debf06ea5 - 2c69724608b642fab66de0d6df0b6fc7 2c69724608b642fab66de0d6df0b6fc7] Secret creation failure seen - please contact site administrator.
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers Traceback (most recent call last):
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers File "/usr/lib/python2.7/dist-packages/barbican/api/controllers/__init__.py", line 104, in handler
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers return fn(inst, *args, **kwargs)
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers File "/usr/lib/python2.7/dist-packages/barbican/api/controllers/__init__.py", line 85, in enforcer
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers _do_enforce_rbac(inst, pecan.request, action_name, ctx, **kwargs)
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers File "/usr/lib/python2.7/dist-packages/barbican/api/controllers/__init__.py", line 68, in _do_enforce_rbac
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers credentials, do_raise=True)
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers File "/usr/lib/python2.7/dist-packages/oslo_policy/policy.py", line 488, in enforce
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers self.load_rules()
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers File "/usr/lib/python2.7/dist-packages/oslo_policy/policy.py", line 393, in load_rules
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers self.policy_path = self._get_policy_path(self.policy_file)
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers File "/usr/lib/python2.7/dist-packages/oslo_policy/policy.py", line 461, in _get_policy_path
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers raise cfg.ConfigFilesNotFoundError((path,))
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers ConfigFilesNotFoundError: Failed to find some config files: /etc/barbican/policy.json
2015-12-16 08:02:32.754 13191 ERROR barbican.api.controllers
2015-12-16 08:02:32.757 13191 INFO barbican.api.middleware.context [req-e702b11d-53c0-4f4f-93f7-63790ef3a347 93ea090b69a1473ca42ecae7135fefad 7f29e1638b0741d48b5f165debf06ea5 - 2c69724608b642fab66de0d6df0b6fc7 2c69724608b642fab66de0d6df0b6fc7] Processed request: 500 Internal Server Error - POST http://10.5.60.138:9311/v1/secrets/
{address space usage: 184709120 bytes/176MB} {rss usage: 60395520 bytes/57MB} [pid: 13191|app: 0|req: 3/3] 10.5.17.29 () {34 vars in 474 bytes} [Wed Dec 16 08:02:32 2015] POST /v1/secrets/ => generated 131 bytes in 52 msecs (HTTP/1.1 500) 4 headers in 191 bytes (1 switches on core 0)

See original description
James Page (james-page)
Changed in barbican (Ubuntu Wily):
status: New → Triaged
Changed in barbican (Ubuntu Xenial):
status: New → Triaged
Changed in barbican (Ubuntu Wily):
importance: Undecided → High
Changed in barbican (Ubuntu Xenial):
importance: Undecided → High
James Page (james-page)
description: updated
Revision history for this message
Brian Murray (brian-murray) wrote : Please test proposed package

Hello Liam, or anyone else affected,

Accepted barbican into wily-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/barbican/1:1.0.0-0ubuntu1.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in barbican (Ubuntu Wily):
status: Triaged → Fix Committed
tags: added: verification-needed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package barbican - 1:2.0.0~b1-0ubuntu1

---------------
barbican (1:2.0.0~b1-0ubuntu1) xenial; urgency=medium

  [ Corey Bryant ]
  * New upstream milestone for OpenStack Mitaka.
  * d/control: Align (build-)depends with upstream.

  [ James Page ]
  * d/barbican-api.install: Install missing policy.json (LP: #1526655).
  * d/control: Add Recommends on python-pymysql (LP: #1526659).
  * d/control: Add missing runtime dependency on uwsgi-plugin-python
    (LP: #1526654).
  * d/barbican-api.upstart.in: Provide full upstart configuration as
    generation using openstack-pkg-tools is not supported for uwsgi
    applications (LP: #1526654).
  * d/barbican-{api,common}.install,control: Move configuration files to
    common package to support use across all barbican packages and with
    Apache WSGI.

 -- Corey Bryant <email address hidden> Tue, 15 Dec 2015 09:57:35 -0500

Changed in barbican (Ubuntu Xenial):
status: Triaged → Fix Released
James Page (james-page)
tags: added: verification-done
removed: verification-needed
Revision history for this message
Chris J Arges (arges) wrote : Update Released

The verification of the Stable Release Update for barbican has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package barbican - 1:1.0.0-0ubuntu1.1

---------------
barbican (1:1.0.0-0ubuntu1.1) wily; urgency=medium

  * d/barbican-api.install: Install missing policy.json (LP: #1526655).
  * d/control: Add Recommends on python-pymysql (LP: #1526659).
  * d/control: Add missing runtime dependency on uwsgi-plugin-python
    (LP: #1526654).
  * d/barbican-api.upstart.in: Provide full upstart configuration as
    generation using openstack-pkg-tools is not supported for uwsgi
    applications (LP: #1526654).

 -- James Page <email address hidden> Wed, 16 Dec 2015 14:38:09 +0000

Changed in barbican (Ubuntu Wily):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.