Actions
Bug #47799
openrgw/crypt suite with Barbican fails with "Cannot create secret"
Status:
Pending Backport
Priority:
High
Assignee:
Or Friedmann
Target version:
-
% Done:
0%
Source:
Tags:
barbican backport_processed
Backport:
quincy
Regression:
No
Severity:
3 - minor
Reviewed:
Description
2020-10-08T16:56:16.988 INFO:teuthology.orchestra.run.smithi164:> cd /home/ubuntu/cephtest/barbican && . .barbicanenv/bin/activate && sleep 15 2020-10-08T16:56:17.138 INFO:tasks.barbican.client.0.smithi164.stderr:/home/ubuntu/cephtest/barbican/.barbicanenv/local/lib/python2.7/site-packages/OpenSSL/crypto.py:12: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release. 2020-10-08T16:56:17.138 INFO:tasks.barbican.client.0.smithi164.stderr: from cryptography import x509 2020-10-08T16:56:17.980 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:17.985 25156 INFO barbican.model.repositories [-] Setting up database engine and session factory[00m 2020-10-08T16:56:18.012 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:18.017 25156 INFO barbican.model.repositories [-] Auto-creating barbican registry DB[00m 2020-10-08T16:56:21.610 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.615 25156 WARNING barbican.model.migration.commands [-] !!! Limited support for migration commands using sqlite databases; This operation may not succeed.[00m 2020-10-08T16:56:21.618 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.622 25156 INFO alembic.runtime.migration [-] Context impl SQLiteImpl.[00m 2020-10-08T16:56:21.619 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.624 25156 INFO alembic.runtime.migration [-] Will assume non-transactional DDL.[00m 2020-10-08T16:56:21.707 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.712 25156 INFO alembic.runtime.migration [-] Running stamp_revision -> 39cf2e645cba[00m 2020-10-08T16:56:21.763 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.768 25156 WARNING barbican.api.controllers.cas [-] Deprecated: Certificate Authorities API has been deprecated in the Newton release. It will be removed in the Pike release.[00m 2020-10-08T16:56:21.862 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.868 25156 INFO barbican.api.app [-] Barbican app created and initialized[00m 2020-10-08T16:56:21.865 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.870 25156 WARNING keystonemiddleware._common.config [-] The option "username" is not known to keystonemiddleware[00m 2020-10-08T16:56:21.865 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.870 25156 WARNING keystonemiddleware._common.config [-] The option "user_domain_name" is not known to keystonemiddleware[00m 2020-10-08T16:56:21.865 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.870 25156 WARNING keystonemiddleware._common.config [-] The option "auth_url" is not known to keystonemiddleware[00m 2020-10-08T16:56:21.866 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.871 25156 WARNING keystonemiddleware._common.config [-] The option "password" is not known to keystonemiddleware[00m 2020-10-08T16:56:21.866 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:21.871 25156 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Please set this to True.[00m 2020-10-08T16:56:31.998 INFO:tasks.barbican:barbican_url=http://smithi164.front.sepia.ceph.com:9311 2020-10-08T16:56:32.578 INFO:tasks.barbican.client.0.smithi164.stdout:serving on 0.0.0.0:9311 view at http://127.0.0.1:9311 2020-10-08T16:56:32.578 INFO:tasks.barbican.client.0.smithi164.stdout:2020-10-08 16:56:32.583 25156 WARNING keystonemiddleware.auth_token [-] Using the in-process token cache is deprecated as of the 4.2.0 release and may be removed in the 5.0.0 release or the 'O' development cycle. The in-process cache causes inconsistent results and high memory usage. When the feature is removed the auth_token middleware will not cache tokens by default which may result in performance issues. It is recommended to use memcache for the auth_token token cache by setting the memcached_servers option.[00m 2020-10-08T16:56:32.886 ERROR:teuthology.contextutil:Saw exception from nested tasks Traceback (most recent call last): File "/home/teuthworker/src/git.ceph.com_git_teuthology_master/teuthology/contextutil.py", line 31, in nested vars.append(enter()) File "/usr/lib/python3.6/contextlib.py", line 81, in __enter__ return next(self.gen) File "/home/teuthworker/src/git.ceph.com_ceph-c_wip-cbodley-testing/qa/tasks/barbican.py", line 360, in create_secrets raise Exception("Cannot create secret") Exception: Cannot create secret
Updated by Matthew Oliver over 3 years ago
Having a look at the qa/tasks/barbican.py script, this seems to trigger when creating the secrets in barbican. So this might have more to do with the keystone and barbican setup rather then something in RGW specifically. I'll have a go at setting up barbican the way the script does and see if I can recreate.
Updated by Or Friedmann over 3 years ago
- Status changed from In Progress to Fix Under Review
Updated by Casey Bodley over 3 years ago
- Status changed from Fix Under Review to Resolved
Updated by Backport Bot 11 months ago
- Copied to Backport #61568: quincy: rgw/crypt suite with Barbican fails with "Cannot create secret" added
Updated by Backport Bot 11 months ago
- Tags changed from barbican to barbican backport_processed
Actions