Bug 2165527
Summary: | Upgrade [OSP16.2 -> OSP17.1] overcloud prepare containers failed with 401 client error UNAUTHORIZED | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Juan Badia Payno <jbadiapa> |
Component: | tripleo-ansible | Assignee: | Lukas Bezdicka <lbezdick> |
Status: | CLOSED ERRATA | QA Contact: | Khomesh Thakre <kthakre> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | 17.1 (Wallaby) | CC: | aromito, jpretori, jslagle, kthakre, lbezdick, lmiccini, mtomaska, ramishra, sbaker, sgolovat, tkajinam |
Target Milestone: | beta | Keywords: | Triaged |
Target Release: | 17.1 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | tripleo-ansible-3.3.1-1.20230224221431.6976f3f.el9ost openstack-tripleo-common-15.4.1-1.20230330012250.0cdddae.el9ost | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2023-08-16 01:13:42 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Juan Badia Payno
2023-01-30 11:19:45 UTC
Root cause is: with session.get(source_blob_url, stream=True, timeout=30, allow_redirects=False) as blob_req: timeout seems to be too small, session gets closed. Nope, that is not the cause. Notice in uploaded logs Auth: where Bearer token gets lost. Do we know version of the tripleo-common package installed in undercloud ? I'm not sure what is used to provide that internal registry, but I'd like to check whether https://review.opendev.org/c/openstack/tripleo-common/+/865247 is included. If this is being triggered by the tripleo_container_image_prepare ansible module, it is using the ProcessLock[1], which results in a ProcessPoolExecutor. Process based concurrency was only added to support python2 and Mistral[2] so it would be worth checking with Rabi to see if there is a requirement that ansible use it. It might be worth trying removing the line in [1] to use the default thread based lock. [1] https://opendev.org/openstack/tripleo-ansible/src/branch/stable/wallaby/tripleo_ansible/ansible_plugins/modules/tripleo_container_image_prepare.py#L147 [2] https://opendev.org/openstack/tripleo-common/commit/60afc0eec44f698dd95d9d6ec80dad94a4b07329 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2023:4577 The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days |