Description of problem: [stack@undercloud-0 ~]$ cat core_puddle_version RHOS-17.1-RHEL-9-20230131.n.2 Controller error in keystone pod: + exec /usr/sbin/httpd -DFOREGROUND AH00526: Syntax error on line 55 of /etc/httpd/conf.d/10-keystone_wsgi.conf: Invalid command 'AuthType', perhaps misspelled or defined by a module not included in the server configuration Controller config in keystone pod for line 55: conf.d/10-keystone_wsgi.conf <LocationMatch "/v3/auth/OS-FEDERATION/websso/openid"> AuthType openid-connect Require valid-user </LocationMatch> The openidc modules is loaded before the line 55 error. ## WSGI configuration WSGIApplicationGroup %{GLOBAL} WSGIDaemonProcess keystone display-name=keystone group=keystone processes=8 threads=1 user=keystone WSGIProcessGroup keystone WSGIScriptAlias / "/var/www/cgi-bin/keystone/keystone" WSGIPassAuthorization On LoadModule auth_openidc_module modules/mod_auth_openidc.so apache inside the keystone pod has the following versions: httpd-core-2.4.53-10.el9.x86_64 httpd-2.4.53-10.el9.x86_64 mod_auth_openidc-2.4.9.4-1.el9.x86_64 How reproducible: Always Steps to Reproduce: 1. deploy overcloud with keystone openidc tripleo template Actual results: Deploy fails when the keystone container fails Expected results: deploy succeeds
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2023:4577