Bug 2190364
| Summary: | The ansible-tripleo-ipa has a python3-ipaserver dependency | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Juan Badia Payno <jbadiapa> |
| Component: | ansible-tripleo-ipa | Assignee: | Dave Wilde <dwilde> |
| Status: | CLOSED DUPLICATE | QA Contact: | Jeremy Agee <jagee> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 17.1 (Wallaby) | CC: | amoralej, dwilde, jpretori, jschluet, pgrist, pweeks |
| Target Milestone: | ga | Keywords: | Triaged |
| Target Release: | 17.1 | Flags: | ifrangs:
needinfo?
(dwilde) |
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2023-06-20 16:53:16 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2214972 | ||
| Bug Blocks: | 2121387, 2214309 | ||
I've proposed https://bugzilla.redhat.com/show_bug.cgi?id=2190364 however this introduces an issue as python3-ipaserver is in idm appstream module which is disabled by default so it fails to install: [root@e914504f60d1 /]# dnf install https://logserver.rdoproject.org/77/48677/1/check/DLRN-rpmbuild-centos8/100fd47/buildset/centos8/repos/ef/dc/efdc9022e3b71ac87a37f64a638980b9352c2d49_dev/ansible-tripleo-ipa-0.3.1-0.20230519085619.efdc902.el8.noarch.rpm CentOS-8 - Advanced Virtualization 455 kB/s | 207 kB 00:00 CentOS-8 - Ceph Nautilus 308 kB/s | 110 kB 00:00 CentOS-8 - RabbitMQ 38 212 kB/s | 80 kB 00:00 CentOS-8 - NFV OpenvSwitch 3.8 kB/s | 240 kB 01:02 CentOS-8 - OpenStack wallaby 11 MB/s | 4.1 MB 00:00 ansible-tripleo-ipa-0.3.1-0.20230519085619.efdc902.el8.noarch.rpm 50 kB/s | 31 kB 00:00 Error: Problem: package ansible-tripleo-ipa-0.3.1-0.20230519085619.efdc902.el8.noarch requires python3-ipaserver, but none of the providers can be installed - conflicting requests - package python3-ipaserver-4.9.10-6.module_el8.7.0+1209+42bcbcde.noarch is filtered out by modular filtering - package python3-ipaserver-4.9.11-3.module_el8.8.0+1250+3691c525.noarch is filtered out by modular filtering - package python3-ipaserver-4.9.2-3.module_el8.5.0+750+c59b186b.noarch is filtered out by modular filtering - package python3-ipaserver-4.9.3-1.module_el8.5.0+836+f9e1ecc9.noarch is filtered out by modular filtering - package python3-ipaserver-4.9.6-4.module_el8.5.0+921+2b5d5825.noarch is filtered out by modular filtering - package python3-ipaserver-4.9.6-6.module_el8.5.0+948+b8187ba6.noarch is filtered out by modular filtering - package python3-ipaserver-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch is filtered out by modular filtering - package python3-ipaserver-4.9.8-7.module_el8.6.0+1103+a004f6a8.noarch is filtered out by modular filtering (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) Module enablement can not be done from the rpm itself but needs to be done before by deployment tooling. Does tripleo enables the idm module in those cases?, couldn't be python3-ipaserver be installed as part of the ansible execution after enabling the module? Note that, apparently, python3-ipaserver is only required in the rhel8 case (in the upgrade case) as the non-upgrade job is passing without python3-ipaserver installed. My guess is that, that's related to the version of ansible-freeipa included in RHEL 8.4, which is much older that the one in 9.2. Actually, more recent RHEL8 brings a much newer version of ansible-freeipa, it'd be good to know if that works without python3-ipaserver installed. I meant I've proposed https://review.rdoproject.org/r/c/openstack/tripleo-ipa-distgit/+/48677 (In reply to Alfredo Moralejo from comment #7) > I've proposed https://bugzilla.redhat.com/show_bug.cgi?id=2190364 however > this introduces an issue as python3-ipaserver is in idm appstream module > which is disabled by default so it fails to install: > > [root@e914504f60d1 /]# dnf install > https://logserver.rdoproject.org/77/48677/1/check/DLRN-rpmbuild-centos8/ > 100fd47/buildset/centos8/repos/ef/dc/ > efdc9022e3b71ac87a37f64a638980b9352c2d49_dev/ansible-tripleo-ipa-0.3.1-0. > 20230519085619.efdc902.el8.noarch.rpm > CentOS-8 - Advanced Virtualization > 455 kB/s | 207 kB 00:00 > CentOS-8 - Ceph Nautilus > 308 kB/s | 110 kB 00:00 > CentOS-8 - RabbitMQ 38 > 212 kB/s | 80 kB 00:00 > CentOS-8 - NFV OpenvSwitch > 3.8 kB/s | 240 kB 01:02 > CentOS-8 - OpenStack wallaby > 11 MB/s | 4.1 MB 00:00 > ansible-tripleo-ipa-0.3.1-0.20230519085619.efdc902.el8.noarch.rpm > 50 kB/s | 31 kB 00:00 > Error: > Problem: package > ansible-tripleo-ipa-0.3.1-0.20230519085619.efdc902.el8.noarch requires > python3-ipaserver, but none of the providers can be installed > - conflicting requests > - package python3-ipaserver-4.9.10-6.module_el8.7.0+1209+42bcbcde.noarch > is filtered out by modular filtering > - package python3-ipaserver-4.9.11-3.module_el8.8.0+1250+3691c525.noarch > is filtered out by modular filtering > - package python3-ipaserver-4.9.2-3.module_el8.5.0+750+c59b186b.noarch is > filtered out by modular filtering > - package python3-ipaserver-4.9.3-1.module_el8.5.0+836+f9e1ecc9.noarch is > filtered out by modular filtering > - package python3-ipaserver-4.9.6-4.module_el8.5.0+921+2b5d5825.noarch is > filtered out by modular filtering > - package python3-ipaserver-4.9.6-6.module_el8.5.0+948+b8187ba6.noarch is > filtered out by modular filtering > - package python3-ipaserver-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch is > filtered out by modular filtering > - package python3-ipaserver-4.9.8-7.module_el8.6.0+1103+a004f6a8.noarch is > filtered out by modular filtering > (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to > use not only best candidate packages) > > > Module enablement can not be done from the rpm itself but needs to be done > before by deployment tooling. > > Does tripleo enables the idm module in those cases?, couldn't be > python3-ipaserver be installed as part of the ansible execution after > enabling the module? > > Note that, apparently, python3-ipaserver is only required in the rhel8 case > (in the upgrade case) as the non-upgrade job is passing without > python3-ipaserver installed. My guess is that, that's related to the version > of ansible-freeipa included in RHEL 8.4, which is much older that the one in > 9.2. Actually, more recent RHEL8 brings a much newer version of > ansible-freeipa, it'd be good to know if that works without > python3-ipaserver installed. *** This bug has been marked as a duplicate of bug 2214972 *** |
Using the component on the openstack upgrade process the following lines were shown. 2023-04-27 00:25:33 | 2023-04-27 00:25:33.207162 | 525400c2-6bee-dadf-7605-00000000ff1e | TIMING | tripleo_ipa_registration : set the principal | undercloud | 0:20:25.962070 | 0.04s 2023-04-27 00:25:33 | 2023-04-27 00:25:33.221710 | 525400c2-6bee-dadf-7605-00000000ff20 | TASK | add new host with one-time password 2023-04-27 00:25:34 | 2023-04-27 00:25:34.297387 | | WARNING | Module did not set no_log for update_password 2023-04-27 00:25:34 | 2023-04-27 00:25:34.298800 | 525400c2-6bee-dadf-7605-00000000ff20 | FATAL | add new host with one-time password | undercloud | error={"changed": false, "failed_when_result": true, "msg": "No module named 'ipaserver'"} Once the python3-ipaserver rpm was installed, this error stopped showing.