Open Stack

Hi Harald,
Thanks for the response.

we have CLI working perfectly.

For Query:
"Did you set the parameter MemcachedIPv6 to true in your environment files?"
we have passed this in our environment defaults, so yes this is getting
passed.

About the Deployment:
3 Node Controller + 1 Compute for the Triple of Stein.
it is working perfectly in the ipv4 segment but when we change the
Networking to ipv6 we start seeing this error as reported.
Please find the attached :

   1. network_data.yaml
   2. roles_data.yaml

 using these YAML files we are rendering the remaining config files and are
using bond-with-vlan configs.

Also for your reference please find the keystone end point details:
(overcloud) [stack at undercloud ~]$ openstack endpoint list | grep "keystone"
| 5ab65d3322654c3eaa9a868c547eec1e | regionOne | keystone         |
identity                | True    | public    |
http://[fd00:fd00:fd00:9900::351]:5000
                      |
| d31bd34d0ac942a59eb086c4a5d3079f | regionOne | keystone         |
identity                | True    | internal  |
http://[fd00:fd00:fd00:2000::7d]:5000
                       |
| e27f7195a48045d0ab14ceb065c67512 | regionOne | keystone         |
identity                | True    | admin     | http://10.10.0.213:35357



# sudo pcs status :

[heat-admin at overcloud-controller-2 ~]$ sudo pcs status
Cluster name: tripleo_cluster
Cluster Summary:
  * Stack: corosync
  * Current DC: overcloud-controller-1 (version 2.1.2-1.el8-ada5c3b36e2) -
partition with quorum
  * Last updated: Mon Jan 24 12:39:04 2022
  * Last change:  Mon Jan 24 11:20:45 2022 by root via cibadmin on
overcloud-controller-0
  * 15 nodes configured
  * 46 resource instances configured

Node List:
  * Online: [ overcloud-controller-0 overcloud-controller-1
overcloud-controller-2 ]
  * GuestOnline: [ galera-bundle-0 at overcloud-controller-2
galera-bundle-1 at overcloud-controller-0
galera-bundle-2 at overcloud-controller-1
ovn-dbs-bundle-0 at overcloud-controller-2
ovn-dbs-bundle-1 at overcloud-controller-0
ovn-dbs-bundle-2 at overcloud-controller-1
rabbitmq-bundle-0 at overcloud-controller-2
rabbitmq-bundle-1 at overcloud-controller-0
rabbitmq-bundle-2 at overcloud-controller-1
redis-bundle-0 at overcloud-controller-2 redis-bundle-1 at overcloud-controller-0
redis-bundle-2 at overcloud-controller-1 ]

Full List of Resources:
  * ip-10.10.30.213     (ocf::heartbeat:IPaddr2):        Started
overcloud-controller-0
  * ip-fd00.fd00.fd00.9900..351 (ocf::heartbeat:IPaddr2):        Started
overcloud-controller-1
  * ip-fd00.fd00.fd00.2000..3a0 (ocf::heartbeat:IPaddr2):        Started
overcloud-controller-2
  * ip-fd00.fd00.fd00.2000..7d  (ocf::heartbeat:IPaddr2):        Started
overcloud-controller-0
  * ip-fd80.fd00.fd00.2000..6d  (ocf::heartbeat:IPaddr2):        Started
overcloud-controller-1
  * Container bundle set: haproxy-bundle
[cluster.common.tag/centos-binary-haproxy:pcmklatest]:
    * haproxy-bundle-podman-0   (ocf::heartbeat:podman):         Started
overcloud-controller-2
    * haproxy-bundle-podman-1   (ocf::heartbeat:podman):         Started
overcloud-controller-0
    * haproxy-bundle-podman-2   (ocf::heartbeat:podman):         Started
overcloud-controller-1
  * Container bundle set: galera-bundle
[cluster.common.tag/centos-binary-mariadb:pcmklatest]:
    * galera-bundle-0   (ocf::heartbeat:galera):         Master
overcloud-controller-2
    * galera-bundle-1   (ocf::heartbeat:galera):         Master
overcloud-controller-0
    * galera-bundle-2   (ocf::heartbeat:galera):         Master
overcloud-controller-1
  * Container bundle set: rabbitmq-bundle
[cluster.common.tag/centos-binary-rabbitmq:pcmklatest]:
    * rabbitmq-bundle-0 (ocf::heartbeat:rabbitmq-cluster):       Started
overcloud-controller-2
    * rabbitmq-bundle-1 (ocf::heartbeat:rabbitmq-cluster):       Started
overcloud-controller-0
    * rabbitmq-bundle-2 (ocf::heartbeat:rabbitmq-cluster):       Started
overcloud-controller-1
  * Container bundle set: redis-bundle
[cluster.common.tag/centos-binary-redis:pcmklatest]:
    * redis-bundle-0    (ocf::heartbeat:redis):  Master
overcloud-controller-2
    * redis-bundle-1    (ocf::heartbeat:redis):  Slave
overcloud-controller-0
    * redis-bundle-2    (ocf::heartbeat:redis):  Slave
overcloud-controller-1
  * Container bundle set: ovn-dbs-bundle
[cluster.common.tag/centos-binary-ovn-northd:pcmklatest]:
    * ovn-dbs-bundle-0  (ocf::ovn:ovndb-servers):        Master
overcloud-controller-2
    * ovn-dbs-bundle-1  (ocf::ovn:ovndb-servers):        Slave
overcloud-controller-0
    * ovn-dbs-bundle-2  (ocf::ovn:ovndb-servers):        Slave
overcloud-controller-1
  * ip-fd00.fd00.fd00.2000..ea  (ocf::heartbeat:IPaddr2):        Started
overcloud-controller-2
  * Container bundle: openstack-cinder-volume
[cluster.common.tag/centos-binary-cinder-volume:pcmklatest]:
    * openstack-cinder-volume-podman-0  (ocf::heartbeat:podman):
Started overcloud-controller-0

Failed Resource Actions:
  * ovndb_servers_monitor_30000 on ovn-dbs-bundle-2 'not running' (7):
call=23, status='complete', last-rc-change='Mon Jan 24 11:17:07 2022',
queued=0ms, exec=0ms

Daemon Status:
  corosync: active/enabled
  pacemaker: active/enabled
  pcsd: active/enabled


please check and let me know in case it can help us somehow.

On Fri, Jan 21, 2022 at 10:44 PM Harald Jensas <hjensas at redhat.com> wrote:

> On 1/21/22 10:34, Anirudh Gupta wrote:
> > Hi Team,
> >
> > We are trying to deploy the Tripleo Train with IPv6.
> > All the overcloud control plane networks - internal, management etc are
> > also on the IPv6 subnet.
> >
> > Upon successful completion of overcloud, when I am trying to open the
> > page, it does open.
> > But when I enter the correct login credentials, it says something went
> > wrong.
> >
> > image.png
> >
> >
> > Upon looking into error logs, I found
> > 2022-01-21 12:33:34.825 324 WARNING keystone.server.flask.application
> > [req-0660e62c-dff7-4609-89fe-225e177a84f8
> > f908417368a24cc685818bb5fc54fe12 - - default -] *Authorization failed.
> > The request you have made requires authentication. from
> > fd00:fd00:fd00:2000::359: keystone.exception.Unauthorized: The request
> > you have made requires authentication.***
> > *
> > *
> > where *fd00:fd00:fd00:2000::359 is my internal IP address which is
> > reachable.*
> >
> > Regards
> > Anirudh Gupta
>
> Can you share more details from the deployment?
> Maby open a bug in Launcpad against TripleO and attach logs, templates
> used for deployment, and config files for Horizon?
>
> Did you set the parameter MemcachedIPv6 to true in your environment files?
>
> Does the CLI work?
>
>
> Regards,
> Harald
>
>
>

-- 
~ Lokendra
www.inertiaspeaks.com
www.inertiagroups.com
skype: lokendrarathour
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220124/a7709101/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: network_data.yaml
Type: application/octet-stream
Size: 7208 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220124/a7709101/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: roles_data.yaml
Type: application/octet-stream
Size: 11626 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220124/a7709101/attachment-0003.obj>