Back to bug 2214328

Who When What Removed Added
Brent Eagles 2023-06-12 16:19:27 UTC Assignee rhos-maint beagles
Keywords Triaged
Target Milestone --- beta
Link ID OpenStack gerrit 885599 OpenStack gerrit 885291
Priority unspecified urgent
Status NEW ON_DEV
Target Release --- 17.1
RHEL Program Management 2023-06-12 16:19:37 UTC Target Release 17.1 --- --- 17.1
Gregory Thiemonge 2023-06-12 16:22:51 UTC CC gthiemon
Nate Johnston 2023-06-12 16:29:03 UTC CC njohnston
Keywords AutomationBlocker
Red Hat One Jira (issues.redhat.com) 2023-06-12 18:13:00 UTC Link ID Red Hat Issue Tracker OSP-25755
Bruna Bonguardo 2023-06-13 08:30:21 UTC CC bbonguar
Blocks 2124618
Paul Grist 2023-06-13 13:08:32 UTC CC pgrist
Target Milestone beta ga
Paul Grist 2023-06-13 15:44:24 UTC Flags needinfo?(beagles)
Doc Type If docs needed, set a value Known Issue
Gregory Thiemonge 2023-06-13 16:05:56 UTC Doc Text Cause:
Designate is misconfigured when secure RBAC is enabled

Consequence:
The deployment of OSP with both Designate and secure RBAC fails

Workaround (if any):
Applying the following patches on the undercloud server is a workaround:
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885291
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885599

Result:
Deployment is successful
Jenny-Anne Lynch 2023-06-14 14:11:10 UTC CC jelynch
Doc Text Cause:
Designate is misconfigured when secure RBAC is enabled

Consequence:
The deployment of OSP with both Designate and secure RBAC fails

Workaround (if any):
Applying the following patches on the undercloud server is a workaround:
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885291
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885599

Result:
Deployment is successful
Currently, DNS-as-a-Service (designate) is misconfigured when secure role-based access control (SRBAC) is enabled. If you configure both SRBAC and DNS-as-a-Service, the RHOSP deployment fails. Workaround: For a successful deployment, apply the following patches on the undercloud server:

* https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885291
* https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885599
Brent Eagles 2023-06-21 11:55:56 UTC Status ON_DEV POST
Brent Eagles 2023-06-21 11:56:25 UTC Flags needinfo?(beagles)
Status POST ON_DEV
Brent Eagles 2023-06-21 15:32:58 UTC Status ON_DEV POST
Miguel Garcia 2023-06-27 07:41:45 UTC Fixed In Version openstack-tripleo-heat-templates-14.3.1-1.20230519151015.el9ost
Status POST MODIFIED
errata-xmlrpc 2023-06-28 13:02:22 UTC Status MODIFIED ON_QA
Lilach Avraham 2023-07-02 08:17:47 UTC QA Contact jhakimra lavraham
Status ON_QA VERIFIED
CC lavraham
Jenny-Anne Lynch 2023-07-19 15:08:19 UTC CC jelynch
Ian Frangs 2023-08-03 15:46:23 UTC Flags needinfo?(beagles)
Brent Eagles 2023-08-07 14:24:22 UTC Flags needinfo?(beagles)
Jenny-Anne Lynch 2023-08-15 18:35:22 UTC CC jelynch
Doc Text Currently, DNS-as-a-Service (designate) is misconfigured when secure role-based access control (SRBAC) is enabled. If you configure both SRBAC and DNS-as-a-Service, the RHOSP deployment fails. Workaround: For a successful deployment, apply the following patches on the undercloud server:

* https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885291
* https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885599
Before this update, DNS-as-a-Service (designate) was misconfigured when secure role-based access control (SRBAC) was enabled. With this update, DNS-as-a-Service is correctly configured and you can successfully deploy RHOSP with secure role-based access control (SRBAC) enabled.
Flags needinfo?(beagles)
Doc Type Known Issue Bug Fix
James Smith 2023-08-15 23:08:29 UTC CC gregraka, jamsmith
Flags needinfo?(beagles) needinfo?(gregraka)
errata-xmlrpc 2023-08-16 00:03:33 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2023-08-16 01:15:43 UTC Resolution --- ERRATA
Status RELEASE_PENDING CLOSED
Last Closed 2023-08-16 01:15:43 UTC
errata-xmlrpc 2023-08-16 01:16:19 UTC Link ID Red Hat Product Errata RHEA-2023:4577
James Smith 2023-08-17 16:11:30 UTC Doc Type Bug Fix Known Issue
Doc Text Before this update, DNS-as-a-Service (designate) was misconfigured when secure role-based access control (SRBAC) was enabled. With this update, DNS-as-a-Service is correctly configured and you can successfully deploy RHOSP with secure role-based access control (SRBAC) enabled. Currently, DNS-as-a-Service (designate) is misconfigured when secure role-based access control (SRBAC) is enabled. If you configure both SRBAC and DNS-as-a-Service, the RHOSP deployment fails. Workaround: For a successful deployment, apply the following patches on the undercloud server:

* https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885291
* https://review.opendev.org/c/openstack/tripleo-heat-templates/+/885599

Back to bug 2214328