Hi Harald,

Thanks for the response.

we have CLI working perfectly.

For Query:

"Did you set the parameter MemcachedIPv6 to true in your environment files?"

we have passed this in our environment defaults, so yes this is getting passed.

About the Deployment:

3 Node Controller + 1 Compute for the Triple of Stein.

it is working perfectly in the ipv4 segment but when we change the Networking to ipv6 we start seeing this error as reported.

Please find the attached :

network_data.yaml
roles_data.yaml

using these YAML files we are rendering the remaining config files and are using bond-with-vlan configs.

Also for your reference please find the keystone end point details:

# sudo pcs status :

[heat-admin@overcloud-controller-2 ~]$ sudo pcs status
Cluster name: tripleo_cluster
Cluster Summary:
* Stack: corosync
* Current DC: overcloud-controller-1 (version 2.1.2-1.el8-ada5c3b36e2) - partition with quorum
* Last updated: Mon Jan 24 12:39:04 2022
* Last change: Mon Jan 24 11:20:45 2022 by root via cibadmin on overcloud-controller-0
* 15 nodes configured
* 46 resource instances configured

Node List:
* Online: [ overcloud-controller-0 overcloud-controller-1 overcloud-controller-2 ]
* GuestOnline: [ galera-bundle-0@overcloud-controller-2 galera-bundle-1@overcloud-controller-0 galera-bundle-2@overcloud-controller-1 ovn-dbs-bundle-0@overcloud-controller-2 ovn-dbs-bundle-1@overcloud-controller-0 ovn-dbs-bundle-2@overcloud-controller-1 rabbitmq-bundle-0@overcloud-controller-2 rabbitmq-bundle-1@overcloud-controller-0 rabbitmq-bundle-2@overcloud-controller-1 redis-bundle-0@overcloud-controller-2 redis-bundle-1@overcloud-controller-0 redis-bundle-2@overcloud-controller-1 ]

Full List of Resources:
* ip-10.10.30.213 (ocf::heartbeat:IPaddr2): Started overcloud-controller-0
* ip-fd00.fd00.fd00.9900..351 (ocf::heartbeat:IPaddr2): Started overcloud-controller-1
* ip-fd00.fd00.fd00.2000..3a0 (ocf::heartbeat:IPaddr2): Started overcloud-controller-2
* ip-fd00.fd00.fd00.2000..7d (ocf::heartbeat:IPaddr2): Started overcloud-controller-0
* ip-fd80.fd00.fd00.2000..6d (ocf::heartbeat:IPaddr2): Started overcloud-controller-1
* Container bundle set: haproxy-bundle [cluster.common.tag/centos-binary-haproxy:pcmklatest]:
* haproxy-bundle-podman-0 (ocf::heartbeat:podman): Started overcloud-controller-2
* haproxy-bundle-podman-1 (ocf::heartbeat:podman): Started overcloud-controller-0
* haproxy-bundle-podman-2 (ocf::heartbeat:podman): Started overcloud-controller-1
* Container bundle set: galera-bundle [cluster.common.tag/centos-binary-mariadb:pcmklatest]:
* galera-bundle-0 (ocf::heartbeat:galera): Master overcloud-controller-2
* galera-bundle-1 (ocf::heartbeat:galera): Master overcloud-controller-0
* galera-bundle-2 (ocf::heartbeat:galera): Master overcloud-controller-1
* Container bundle set: rabbitmq-bundle [cluster.common.tag/centos-binary-rabbitmq:pcmklatest]:
* rabbitmq-bundle-0 (ocf::heartbeat:rabbitmq-cluster): Started overcloud-controller-2
* rabbitmq-bundle-1 (ocf::heartbeat:rabbitmq-cluster): Started overcloud-controller-0
* rabbitmq-bundle-2 (ocf::heartbeat:rabbitmq-cluster): Started overcloud-controller-1
* Container bundle set: redis-bundle [cluster.common.tag/centos-binary-redis:pcmklatest]:
* redis-bundle-0 (ocf::heartbeat:redis): Master overcloud-controller-2
* redis-bundle-1 (ocf::heartbeat:redis): Slave overcloud-controller-0
* redis-bundle-2 (ocf::heartbeat:redis): Slave overcloud-controller-1
* Container bundle set: ovn-dbs-bundle [cluster.common.tag/centos-binary-ovn-northd:pcmklatest]:
* ovn-dbs-bundle-0 (ocf::ovn:ovndb-servers): Master overcloud-controller-2
* ovn-dbs-bundle-1 (ocf::ovn:ovndb-servers): Slave overcloud-controller-0
* ovn-dbs-bundle-2 (ocf::ovn:ovndb-servers): Slave overcloud-controller-1
* ip-fd00.fd00.fd00.2000..ea (ocf::heartbeat:IPaddr2): Started overcloud-controller-2
* Container bundle: openstack-cinder-volume [cluster.common.tag/centos-binary-cinder-volume:pcmklatest]:
* openstack-cinder-volume-podman-0 (ocf::heartbeat:podman): Started overcloud-controller-0

Failed Resource Actions:
* ovndb_servers_monitor_30000 on ovn-dbs-bundle-2 'not running' (7): call=23, status='complete', last-rc-change='Mon Jan 24 11:17:07 2022', queued=0ms, exec=0ms

Daemon Status:
corosync: active/enabled
pacemaker: active/enabled
pcsd: active/enabled

please check and let me know in case it can help us somehow.

On Fri, Jan 21, 2022 at 10:44 PM Harald Jensas <hjensas@redhat.com> wrote:

On 1/21/22 10:34, Anirudh Gupta wrote:
> Hi Team,
>
> We are trying to deploy the Tripleo Train with IPv6.
> All the overcloud control plane networks - internal, management etc are
> also on the IPv6 subnet.
>
> Upon successful completion of overcloud, when I am trying to open the
> page, it does open.
> But when I enter the correct login credentials, it says something went
> wrong.
>
> image.png
>
>
> Upon looking into error logs, I found
> 2022-01-21 12:33:34.825 324 WARNING keystone.server.flask.application
> [req-0660e62c-dff7-4609-89fe-225e177a84f8
> f908417368a24cc685818bb5fc54fe12 - - default -] *Authorization failed.
> The request you have made requires authentication. from
> fd00:fd00:fd00:2000::359: keystone.exception.Unauthorized: The request
> you have made requires authentication.***
> *
> *
> where *fd00:fd00:fd00:2000::359 is my internal IP address which is
> reachable.*
>
> Regards
> Anirudh Gupta

Can you share more details from the deployment?
Maby open a bug in Launcpad against TripleO and attach logs, templates
used for deployment, and config files for Horizon?

Did you set the parameter MemcachedIPv6 to true in your environment files?

Does the CLI work?

Regards,
Harald