Hi everyone, I've set up a Kolla-Ansilbe OpenStack 2025.2 test installation with three all-in-one nodes based on Rocky Linux 10. I recently created my first Mistral test workflow. I now wanted to create an event trigger for this workflow. First, I listed the workflow with its ID: [1] Then I tried to create the event trigger, but it failed with the error "Authorization failed: Not Found (HTTP 404)": [2] I'm trying to run the command from an Ansible host. I created the entire deployment from there and can also run all other OpenStack commands via the OpenStack client, so I don't understand how the "Authorization failed" error could occur. The mistral-server.log file for the mistral-api container shows the following when the "openstack event trigger create" is triggered: [3] Does anyone have any idea what exactly I did wrong? Or is there a known bug that causes the error described? Unfortunately, I'm still very new to OpenStack and at this point, I'm really lost on how to proceed. [1] # openstack workflow list +--------------------------------------+------+-----------+----------------------------------+--------+-------+--------+---------------------+---------------------+ | ID | Name | Namespace | Project ID | Tags | Input | Scope | Created at | Updated at | +--------------------------------------+------+-----------+----------------------------------+--------+-------+--------+---------------------+---------------------+ | e2f39063-0160-4629-a266-d3a3eb73ab4c | echo | | b6f8310739a84e54a0ccfd85456a92be | <none> | data | public | 2026-03-24 13:48:14 | 2026-03-25 09:06:34 | +--------------------------------------+------+-----------+----------------------------------+--------+-------+--------+---------------------+---------------------+ [2] # openstack event trigger create first_event_trigger e2f39063-0160-4629-a266-d3a3eb73ab4c cinder notifications.info volume.create.end '{"data":"my first trigger"}' Authorization failed: Not Found (HTTP 404) (Request-ID: req-50e21758-ad86-4420-9b47-f0348d319296) [3] 2026-03-25 11:03:22.311 31 DEBUG keystoneclient.auth.identity.v3.base [None req-f826c10c-8399-4ff3-bfd4-809b36a87c55 e37f0a38743d48c9bd5333b8b66edfa0 b6f8310739a84e54a0ccfd85456a92be - - default default] Making authentication request to http://openstack.mycompany.de:5000/auth/tokens get_auth_ref /var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/auth/identity/v3/base.py:185 2026-03-25 11:03:22.330 31 DEBUG keystoneclient.session [None req-f826c10c-8399-4ff3-bfd4-809b36a87c55 e37f0a38743d48c9bd5333b8b66edfa0 b6f8310739a84e54a0ccfd85456a92be - - default default] Request returned failure status: 404 request /var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/session.py:440 2026-03-25 11:03:22.332 31 ERROR wsme.api [None req-f826c10c-8399-4ff3-bfd4-809b36a87c55 e37f0a38743d48c9bd5333b8b66edfa0 b6f8310739a84e54a0ccfd85456a92be - - default default] Server-side error: "Authorization failed: Not Found (HTTP 404) (Request-ID: req-29671654-e62f-4437-8d51-f13dd95eb4a5)". Detail: Traceback (most recent call last): File "/var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/v3/client.py", line 343, in get_raw_token_from_identity_service return plugin.get_auth_ref(self.session) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/auth/identity/v3/base.py", line 186, in get_auth_ref resp = session.post(token_url, json=body, headers=headers, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/session.py", line 542, in post return self.request(url, 'POST', **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/session.py", line 442, in request raise exceptions.from_response(resp, method, url) keystoneauth1.exceptions.http.NotFound: Not Found (HTTP 404) (Request-ID: req-29671654-e62f-4437-8d51-f13dd95eb4a5) During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/var/lib/kolla/venv/lib64/python3.12/site-packages/wsmeext/pecan.py", line 82, in callfunction result = f(self, *args, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/api/controllers/v2/event_trigger.py", line 75, in post db_model = rest_utils.rest_retry_on_db_error( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/db/utils.py", line 111, in decorate return retry(_with_auth_context, auth_ctx, func, *args, **kw) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/utils/rest_utils.py", line 271, in __call__ return super(MistralRetrying, self).__call__(fn, *args, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/tenacity/__init__.py", line 477, in __call__ do = self.iter(retry_state=retry_state) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/tenacity/__init__.py", line 378, in iter result = action(retry_state) ^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/tenacity/__init__.py", line 400, in <lambda> self._add_action_func(lambda rs: rs.outcome.result()) ^^^^^^^^^^^^^^^^^^^ File "/usr/lib64/python3.12/concurrent/futures/_base.py", line 449, in result return self.__get_result() ^^^^^^^^^^^^^^^^^^^ File "/usr/lib64/python3.12/concurrent/futures/_base.py", line 401, in __get_result raise self._exception File "/var/lib/kolla/venv/lib64/python3.12/site-packages/tenacity/__init__.py", line 480, in __call__ result = fn(*args, **kwargs) ^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/db/utils.py", line 59, in _with_auth_context return func(*args, **kw) ^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/services/triggers.py", line 185, in create_event_trigger security.add_trust_id(values) File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/services/security.py", line 110, in add_trust_id trust = create_trust() ^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/services/security.py", line 41, in create_trust client = keystone.client() ^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/mistral/utils/openstack/keystone.py", line 29, in client cl = ks_client.Client( ^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/v3/client.py", line 267, in __init__ self.authenticate() File "/var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/httpclient.py", line 594, in authenticate resp = self.get_raw_token_from_identity_service(**kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/lib/kolla/venv/lib64/python3.12/site-packages/keystoneclient/v3/client.py", line 352, in get_raw_token_from_identity_service raise exceptions.AuthorizationFailure( keystoneauth1.exceptions.auth.AuthorizationFailure: Authorization failed: Not Found (HTTP 404) (Request-ID: req-29671654-e62f-4437-8d51-f13dd95eb4a5) : keystoneauth1.exceptions.auth.AuthorizationFailure: Authorization failed: Not Found (HTTP 404) (Request-ID: req-29671654-e62f-4437-8d51-f13dd95eb4a5)