Description of problem:
When a host is rebooted with a LUKSv1 encrypted volume, the instance will fail with the error:
Failure attaching encryptor; rolling back volume connection: keystoneauth1.exceptions.catalog.EmptyCatalog: The service catalog is empty.
Version-Release number of selected component (if applicable):
openstack-nova-compute-20.4.1-1.20201114041747.el8ost.noarch.rpm
openstack-nova-common-20.4.1-1.20201114041747.el8ost.noarch.rpm
How reproducible:
Reboot node using LUKs volume
Actual results:
Instance goes into ERROR state
Expected results:
Instance should boot normally
Additional info:
Barbican is in use in the environment
The version of Nova in use already includes the fixes from BZ 1905016 (errata RHBA-2021:0817).
This issues appears to be related to upstream bug https://bugs.launchpad.net/nova/+bug/1905701
That upstream bug is fixed in openstack-nova-23.
Requesting that this upstream bug be backported to OSP16.1.
I just learned that the customer manually applied the change in this upstream bug [1] and it resolved the issue.
So it looks like we just need a backport of that piece of code to OSP16.1.
[1] https://review.opendev.org/c/openstack/nova/+/793463
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Release of components for Red Hat OpenStack Platform 17.0 (Wallaby)), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHEA-2022:6543