Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2034095

Summary:	Deployment fails while authenticating for nova and glance during TASK [tripleo-keystone-resources : Check Keystone public endpoint status]
Product:	Red Hat OpenStack	Reporter:	Shailesh Chhabdiya <schhabdi>
Component:	openstack-tripleo-heat-templates	Assignee:	OSP Team <rhos-maint>
Status:	CLOSED ERRATA	QA Contact:	David Rosenfeld <drosenfe>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	16.1 (Train)	CC:	bcafarel, bshephar, dwilde, jamsmith, jelynch, joflynn, mburns, oblaut, rhos-maint, tkajinam
Target Milestone:	z9	Keywords:	Triaged
Target Release:	16.1 (Train on RHEL 8.2)
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:	openstack-tripleo-heat-templates-11.3.2-1.20220117163413.29a02c1.el8ost	Doc Type:	Bug Fix
Doc Text:	Before this update, NTP validation did not occur during deployments. Some users reported issues with cloud authentication failing with invalid tokens due to time not being synchronized between nodes. With this update, NTP synchronization validation during deployment has been re-enabled. Hosts must be able to connect to the defined NTP server list. If you previously performed a deployment with invalid or unreachable NTP servers, after update, the deployment might fail when NTP is validated. Ensure that you have valid and reachable NTP servers before updating.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-12-07 20:29:17 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2034189
Bug Blocks:

Description Shailesh Chhabdiya 2021-12-20 05:45:48 UTC

Description of problem:
Deployment fails while authenticating for nova and glance during TASK [tripleo-keystone-resources : Check Keystone public endpoint status]

Rest services are fine

Version-Release number of selected component (if applicable):
RHOSP 16.1.6

How reproducible:
Always

Actual results:
Deployment fails 

Expected results:
Deployment should go ahead

Additional info:
Deployment is having public network on Ipv4 and internal on Ipv6

Comment 5 Brendan Shephard 2022-01-05 00:56:30 UTC

I believe this should resolve the issue moving forward:
https://review.opendev.org/c/openstack/tripleo-heat-templates/+/822948

Just needs to be merged first and the backported to Train.

Comment 6 Alex Schultz 2022-01-05 14:46:32 UTC

This likely needs to be marked as duplicate of Bug 2034189

Comment 7 Alex Schultz 2022-01-06 16:02:45 UTC

So we'll use this bz to track NTP validation for 16.1 and use Bug 2034189 for 16.2 to ensure we get it fixed there as well.

Comment 13 David Rosenfeld 2022-11-14 13:41:12 UTC

Deployed an overcloud that included --ntp-server {unreachable ntp server} in the deploy command. The deploy failed with this in log:

"try: 26, refid: 00000000, correction: 0.000000003, skew: 0.000", "try: 27, refid: 00000000, correction: 0.000000003, skew: 0.000", "try: 28, refid: 00000000, correction: 0.000000003, skew: 0.000", "try: 29, refid: 00000000, correction: 0.000000004, skew: 0.000", "try: 30, refid: 00000000, correction: 0.000000004, skew: 0.000"]}

above shows that chronyc waitsync has been added for unreachable ntp servers.

Comment 22 errata-xmlrpc 2022-12-07 20:29:17 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Red Hat OpenStack 16.1.9 (openstack-tripleo-heat-templates) security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:8796

Comment 23 Red Hat Bugzilla 2023-09-18 04:29:32 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days