Bug 2034095 - Deployment fails while authenticating for nova and glance during TASK [tripleo-keystone-resources : Check Keystone public endpoint status]
Summary: Deployment fails while authenticating for nova and glance during TASK [triple...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.1 (Train)
Hardware: All
OS: All
urgent
urgent
Target Milestone: z9
: 16.1 (Train on RHEL 8.2)
Assignee: OSP Team
QA Contact: David Rosenfeld
URL:
Whiteboard:
Depends On: 2034189
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-12-20 05:45 UTC by Shailesh Chhabdiya
Modified: 2023-09-18 04:29 UTC (History)
10 users (show)

Fixed In Version: openstack-tripleo-heat-templates-11.3.2-1.20220117163413.29a02c1.el8ost
Doc Type: Bug Fix
Doc Text:
Before this update, NTP validation did not occur during deployments. Some users reported issues with cloud authentication failing with invalid tokens due to time not being synchronized between nodes. With this update, NTP synchronization validation during deployment has been re-enabled. Hosts must be able to connect to the defined NTP server list. If you previously performed a deployment with invalid or unreachable NTP servers, after update, the deployment might fail when NTP is validated. Ensure that you have valid and reachable NTP servers before updating.
Clone Of:
Environment:
Last Closed: 2022-12-07 20:29:17 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-11889 0 None None None 2021-12-20 05:47:56 UTC
Red Hat Product Errata RHSA-2022:8796 0 None None None 2022-12-07 20:29:37 UTC

Description Shailesh Chhabdiya 2021-12-20 05:45:48 UTC 
Description of problem:
Deployment fails while authenticating for nova and glance during TASK [tripleo-keystone-resources : Check Keystone public endpoint status]

Rest services are fine

Version-Release number of selected component (if applicable):
RHOSP 16.1.6

How reproducible:
Always

Actual results:
Deployment fails 

Expected results:
Deployment should go ahead

Additional info:
Deployment is having public network on Ipv4 and internal on Ipv6
Comment 5 Brendan Shephard 2022-01-05 00:56:30 UTC 
I believe this should resolve the issue moving forward:
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/822948

Just needs to be merged first and the backported to Train.
Comment 6 Alex Schultz 2022-01-05 14:46:32 UTC 
This likely needs to be marked as duplicate of Bug 2034189
Comment 7 Alex Schultz 2022-01-06 16:02:45 UTC 
So we'll use this bz to track NTP validation for 16.1 and use Bug 2034189 for 16.2 to ensure we get it fixed there as well.
Comment 13 David Rosenfeld 2022-11-14 13:41:12 UTC 
Deployed an overcloud that included --ntp-server {unreachable ntp server} in the deploy command. The deploy failed with this in log:

"try: 26, refid: 00000000, correction: 0.000000003, skew: 0.000", "try: 27, refid: 00000000, correction: 0.000000003, skew: 0.000", "try: 28, refid: 00000000, correction: 0.000000003, skew: 0.000", "try: 29, refid: 00000000, correction: 0.000000004, skew: 0.000", "try: 30, refid: 00000000, correction: 0.000000004, skew: 0.000"]}

above shows that chronyc waitsync has been added for unreachable ntp servers.
Comment 22 errata-xmlrpc 2022-12-07 20:29:17 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Red Hat OpenStack 16.1.9 (openstack-tripleo-heat-templates) security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:8796
Comment 23 Red Hat Bugzilla 2023-09-18 04:29:32 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days
Note You need to log in before you can comment on or make changes to this bug.