[skyline] possible bug in OIDC usage with skyline
Hi We are testing kolla-ansible 2025.2 and we have found a possible bug in skyline. When using OIDC and trying to log in we get an error that looks like this: { "detail": [ { "type": "string_pattern_mismatch", "loc": [ "header", "X-Openstack-Request-Id" ], "msg": "String should match pattern '^req-\\w{8}(-\\w{4}){3}-\\w{12}'", "input": "", "ctx": { "pattern": "^req-\\w{8}(-\\w{4}){3}-\\w{12}" } } ] } Any help or guidance is appreciated :) -- ---- Taavi Ansper taavi.ansper@cyber.ee
Created an bugreport for this: https://bugs.launchpad.net/skyline-apiserver/+bug/2133859 Hope somebody sees this! :))
Hi Taavi, Our team experienced this recently, as well, and there’s now a patch that might help. https://review.opendev.org/c/openstack/skyline-apiserver/+/969759 As always, reviews are welcomed! -- James Denton Principal Architect Rackspace Private Cloud james.denton@rackspace.com From: Taavi Ansper <taavi.ansper@cyber.ee> Date: Wednesday, December 3, 2025 at 8:07 AM To: openstack-discuss@lists.openstack.org <openstack-discuss@lists.openstack.org> Subject: [skyline] possible bug in OIDC usage with skyline [You don't often get email from taavi.ansper@cyber.ee. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] CAUTION: This message originated externally, please use caution when clicking on links or opening attachments! Hi We are testing kolla-ansible 2025.2 and we have found a possible bug in skyline. When using OIDC and trying to log in we get an error that looks like this: { "detail": [ { "type": "string_pattern_mismatch", "loc": [ "header", "X-Openstack-Request-Id" ], "msg": "String should match pattern '^req-\\w{8}(-\\w{4}){3}-\\w{12}'", "input": "", "ctx": { "pattern": "^req-\\w{8}(-\\w{4}){3}-\\w{12}" } } ] } Any help or guidance is appreciated :) -- ---- Taavi Ansper taavi.ansper@cyber.ee
Hi I saw the proposed fix yes. Thanks for the update! I am still not sure though why on 2025.1 the request header is not set, but it still works, even though the regex is the same. ---- Taavi Ansper taavi.ansper@cyber.ee On 12/4/25 15:47, James Denton wrote:
Hi Taavi,
Our team experienced this recently, as well, and there’s now a patch that might help.
https://review.opendev.org/c/openstack/skyline-apiserver/+/969759
As always, reviews are welcomed!
-- James Denton Principal Architect Rackspace Private Cloud james.denton@rackspace.com *From: *Taavi Ansper <taavi.ansper@cyber.ee> *Date: *Wednesday, December 3, 2025 at 8:07 AM *To: *openstack-discuss@lists.openstack.org <openstack-discuss@lists.openstack.org> *Subject: *[skyline] possible bug in OIDC usage with skyline
[You don't often get email from taavi.ansper@cyber.ee. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
CAUTION: This message originated externally, please use caution when clicking on links or opening attachments!
Hi
We are testing kolla-ansible 2025.2 and we have found a possible bug in skyline.
When using OIDC and trying to log in we get an error that looks like this:
{ "detail": [ { "type": "string_pattern_mismatch", "loc": [ "header", "X-Openstack-Request-Id" ], "msg": "String should match pattern '^req-\\w{8}(-\\w{4}){3}-\\w{12}'", "input": "", "ctx": { "pattern": "^req-\\w{8}(-\\w{4}){3}-\\w{12}" } } ] }
Any help or guidance is appreciated :)
-- ---- Taavi Ansper taavi.ansper@cyber.ee
Hi The Fix got merged into master, woohoo! https://review.opendev.org/c/openstack/skyline-apiserver/+/969759 What is the process do backport it into 2025.2? Best regards ---- Taavi Ansper taavi.ansper@cyber.ee On 12/4/25 15:56, Taavi Ansper wrote:
Hi
I saw the proposed fix yes. Thanks for the update!
I am still not sure though why on 2025.1 the request header is not set, but it still works, even though the regex is the same.
---- Taavi Ansper taavi.ansper@cyber.ee
On 12/4/25 15:47, James Denton wrote:
Hi Taavi,
Our team experienced this recently, as well, and there’s now a patch that might help.
https://review.opendev.org/c/openstack/skyline-apiserver/+/969759
As always, reviews are welcomed!
-- James Denton Principal Architect Rackspace Private Cloud james.denton@rackspace.com *From: *Taavi Ansper <taavi.ansper@cyber.ee> *Date: *Wednesday, December 3, 2025 at 8:07 AM *To: *openstack-discuss@lists.openstack.org <openstack-discuss@lists.openstack.org> *Subject: *[skyline] possible bug in OIDC usage with skyline
[You don't often get email from taavi.ansper@cyber.ee. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
CAUTION: This message originated externally, please use caution when clicking on links or opening attachments!
Hi
We are testing kolla-ansible 2025.2 and we have found a possible bug in skyline.
When using OIDC and trying to log in we get an error that looks like this:
{ "detail": [ { "type": "string_pattern_mismatch", "loc": [ "header", "X-Openstack-Request-Id" ], "msg": "String should match pattern '^req-\\w{8}(-\\w{4}){3}-\\w{12}'", "input": "", "ctx": { "pattern": "^req-\\w{8}(-\\w{4}){3}-\\w{12}" } } ] }
Any help or guidance is appreciated :)
-- ---- Taavi Ansper taavi.ansper@cyber.ee
You can cherry-pick the patch to a specific branch. I went ahead and did this for 2025.2: https://review.opendev.org/c/openstack/skyline-apiserver/+/971481 It will need to pass tests and be reviewed and +2'd just like the original. -- James Denton Principal Architect Rackspace Private Cloud james.denton@rackspace.com From: Taavi Ansper <taavi.ansper@cyber.ee> Date: Thursday, December 18, 2025 at 3:44 AM To: James Denton <james.denton@rackspace.com>, openstack-discuss@lists.openstack.org <openstack-discuss@lists.openstack.org> Subject: Re: [**EXTERNAL**] Re: [skyline] possible bug in OIDC usage with skyline [You don't often get email from taavi.ansper@cyber.ee. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] CAUTION: This message originated externally, please use caution when clicking on links or opening attachments! Hi The Fix got merged into master, woohoo! https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Freview.opendev.org%2Fc%2Fopenstack%2Fskyline-apiserver%2F%2B%2F969759&data=05%7C02%7Cjames.denton%40rackspace.com%7Ceff368f7150d4c50f5f308de3e1a0774%7C570057f473ef41c8bcbb08db2fc15c2b%7C0%7C0%7C639016478677498796%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=iUip3XheeM2KGvTLLLza6AFblPVIRon1w4DSrm2taFM%3D&reserved=0<https://review.opendev.org/c/openstack/skyline-apiserver/+/969759> What is the process do backport it into 2025.2? Best regards ---- Taavi Ansper taavi.ansper@cyber.ee On 12/4/25 15:56, Taavi Ansper wrote:
Hi
I saw the proposed fix yes. Thanks for the update!
I am still not sure though why on 2025.1 the request header is not set, but it still works, even though the regex is the same.
---- Taavi Ansper taavi.ansper@cyber.ee
On 12/4/25 15:47, James Denton wrote:
Hi Taavi,
Our team experienced this recently, as well, and there’s now a patch that might help.
As always, reviews are welcomed!
-- James Denton Principal Architect Rackspace Private Cloud james.denton@rackspace.com *From: *Taavi Ansper <taavi.ansper@cyber.ee> *Date: *Wednesday, December 3, 2025 at 8:07 AM *To: *openstack-discuss@lists.openstack.org <openstack-discuss@lists.openstack.org> *Subject: *[skyline] possible bug in OIDC usage with skyline
[You don't often get email from taavi.ansper@cyber.ee. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
CAUTION: This message originated externally, please use caution when clicking on links or opening attachments!
Hi
We are testing kolla-ansible 2025.2 and we have found a possible bug in skyline.
When using OIDC and trying to log in we get an error that looks like this:
{ "detail": [ { "type": "string_pattern_mismatch", "loc": [ "header", "X-Openstack-Request-Id" ], "msg": "String should match pattern '^req-\\w{8}(-\\w{4}){3}-\\w{12}'", "input": "", "ctx": { "pattern": "^req-\\w{8}(-\\w{4}){3}-\\w{12}" } } ] }
Any help or guidance is appreciated :)
-- ---- Taavi Ansper taavi.ansper@cyber.ee
participants (3)
-
James Denton
-
Taavi Ansper
-
taavi.ansper＠cyber.ee