Project

General

Profile

Actions

Bug #47799

open

rgw/crypt suite with Barbican fails with "Cannot create secret"

Added by Casey Bodley over 3 years ago. Updated 11 months ago.

Status:
Pending Backport
Priority:
High
Assignee:
Or Friedmann
Target version:
-
% Done:

0%

Source:
Tags:
barbican backport_processed
Backport:
quincy
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

2020-10-08T16:56:16.988 INFO:teuthology.orchestra.run.smithi164:> cd /home/ubuntu/cephtest/barbican && . .barbicanenv/bin/activate && sleep 15
2020-10-08T16:56:17.138 INFO:tasks.barbican.client.0.smithi164.stderr:/home/ubuntu/cephtest/barbican/.barbicanenv/local/lib/python2.7/site-packages/OpenSSL/crypto.py:12: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release.
2020-10-08T16:56:17.138 INFO:tasks.barbican.client.0.smithi164.stderr:  from cryptography import x509
2020-10-08T16:56:17.980 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:17.985 25156 INFO barbican.model.repositories [-] Setting up database engine and session factory[00m
2020-10-08T16:56:18.012 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:18.017 25156 INFO barbican.model.repositories [-] Auto-creating barbican registry DB[00m
2020-10-08T16:56:21.610 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.615 25156 WARNING barbican.model.migration.commands [-] !!! Limited support for migration commands using sqlite databases; This operation may not succeed.[00m
2020-10-08T16:56:21.618 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.622 25156 INFO alembic.runtime.migration [-] Context impl SQLiteImpl.[00m
2020-10-08T16:56:21.619 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.624 25156 INFO alembic.runtime.migration [-] Will assume non-transactional DDL.[00m
2020-10-08T16:56:21.707 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.712 25156 INFO alembic.runtime.migration [-] Running stamp_revision  -> 39cf2e645cba[00m
2020-10-08T16:56:21.763 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.768 25156 WARNING barbican.api.controllers.cas [-] Deprecated: Certificate Authorities API has been deprecated in the Newton release. It will be removed in the Pike release.[00m
2020-10-08T16:56:21.862 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.868 25156 INFO barbican.api.app [-] Barbican app created and initialized[00m
2020-10-08T16:56:21.865 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.870 25156 WARNING keystonemiddleware._common.config [-] The option "username" is not known to keystonemiddleware[00m
2020-10-08T16:56:21.865 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.870 25156 WARNING keystonemiddleware._common.config [-] The option "user_domain_name" is not known to keystonemiddleware[00m
2020-10-08T16:56:21.865 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.870 25156 WARNING keystonemiddleware._common.config [-] The option "auth_url" is not known to keystonemiddleware[00m
2020-10-08T16:56:21.866 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.871 25156 WARNING keystonemiddleware._common.config [-] The option "password" is not known to keystonemiddleware[00m
2020-10-08T16:56:21.866 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.871 25156 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Please set this to True.[00m
2020-10-08T16:56:31.998 INFO:tasks.barbican:barbican_url=http://smithi164.front.sepia.ceph.com:9311
2020-10-08T16:56:32.578 INFO:tasks.barbican.client.0.smithi164.stdout:serving on 0.0.0.0:9311 view at http://127.0.0.1:9311
2020-10-08T16:56:32.578 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:32.583 25156 WARNING keystonemiddleware.auth_token [-] Using the in-process token cache is deprecated as of the 4.2.0 release and may be removed in the 5.0.0 release or the 'O' development cycle. The in-process cache causes inconsistent results and high memory usage. When the feature is removed the auth_token middleware will not cache tokens by default which may result in performance issues. It is recommended to use  memcache for the auth_token token cache by setting the memcached_servers option.[00m
2020-10-08T16:56:32.886 ERROR:teuthology.contextutil:Saw exception from nested tasks
Traceback (most recent call last):
  File "/home/teuthworker/src/git.ceph.com_git_teuthology_master/teuthology/contextutil.py", line 31, in nested
    vars.append(enter())
  File "/usr/lib/python3.6/contextlib.py", line 81, in __enter__
    return next(self.gen)
  File "/home/teuthworker/src/git.ceph.com_ceph-c_wip-cbodley-testing/qa/tasks/barbican.py", line 360, in create_secrets
    raise Exception("Cannot create secret")
Exception: Cannot create secret

ex: http://qa-proxy.ceph.com/teuthology/cbodley-2020-10-08_16:39:10-rgw-wip-cbodley-testing-distro-basic-smithi/5506914/teuthology.log


Related issues 1 (1 open0 closed)

Copied to rgw - Backport #61568: quincy: rgw/crypt suite with Barbican fails with "Cannot create secret"NewShilpa MJActions
Actions #1

Updated by Casey Bodley over 3 years ago

  • Priority changed from Normal to High
Actions #2

Updated by Matthew Oliver over 3 years ago

Having a look at the qa/tasks/barbican.py script, this seems to trigger when creating the secrets in barbican. So this might have more to do with the keystone and barbican setup rather then something in RGW specifically. I'll have a go at setting up barbican the way the script does and see if I can recreate.

Actions #3

Updated by Or Friedmann over 3 years ago

  • Assignee set to Or Friedmann
Actions #4

Updated by Or Friedmann over 3 years ago

  • Status changed from New to In Progress
Actions #5

Updated by Or Friedmann over 3 years ago

  • Status changed from In Progress to Fix Under Review
Actions #6

Updated by Or Friedmann over 3 years ago

  • Pull request ID set to 38105
Actions #7

Updated by Casey Bodley over 3 years ago

  • Status changed from Fix Under Review to Resolved
Actions #8

Updated by Shilpa MJ 11 months ago

  • Status changed from Resolved to Pending Backport
  • Backport set to quincy
Actions #9

Updated by Backport Bot 11 months ago

  • Copied to Backport #61568: quincy: rgw/crypt suite with Barbican fails with "Cannot create secret" added
Actions #10

Updated by Backport Bot 11 months ago

  • Tags changed from barbican to barbican backport_processed
Actions

Also available in: Atom PDF