fatal: [os_infra1_keystone_container-5999bd47]: FAILED! => {"attempts": 5, "changed": false, "msg": "No package matching 'libcurl3' is available"}

[PerToft]

When keystone federation is configured and ubuntu 20.04 is used, the play fails.

https://github.com/openstack/openstack-ansible-os_keystone/blob/eed5eb1fa1d52452bce72467530a1c86633e538e/vars/debian.yml#L59

TASK [os_keystone : Install distro packages] *********************************************************************************************************************************************************************************************************************************************************************************
FAILED - RETRYING: Install distro packages (5 retries left).
FAILED - RETRYING: Install distro packages (4 retries left).
FAILED - RETRYING: Install distro packages (3 retries left).
FAILED - RETRYING: Install distro packages (2 retries left).
FAILED - RETRYING: Install distro packages (1 retries left).
fatal: [os_infra1_keystone_container-5999bd47]: FAILED! => {"attempts": 5, "changed": false, "msg": "No package matching 'libcurl3' is available"}

PLAY RECAP *******************************************************************************************************************************************************************************************************************************************************************************************************************
localhost : ok=3 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
os_infra1_keystone_container-5999bd47 : ok=22 changed=0 unreachable=0 failed=1 skipped=12 rescued=0 ignored=0

EXIT NOTICE [Playbook execution failure] **************************************
===============================================================================
root@ansible-master-staging-ussuri:/opt/openstack-ansible/playbooks# openstack-ansible os-keystone-install.yml -vv

user_variables.yml:
horizon_session_timeout: 86400
horizon_websso_initial_choice: saml2
keystone_public_endpoint: https://vip.example.com:5000
keystone_service_publicuri_proto: https

keystone_web_server: apache
keystone_sp:
  cert_duration_years: 5
  trusted_dashboard_list:
    - "https://{{ external_lb_vip_address }}/auth/websso/"
  trusted_idp_list:
    - name: 'testshib-idp'
      entity_ids:
        - 'https://saml2.com'
      metadata_uri: https://metadata.saml2.com/metadata.xml
      metadata_file: metadata.xml
      metadata_reload: 1800
      federated_identities:
      - domain: Default
        group: wayf
        project: wayf
        role: _member_
      protocols:
        - name: saml2
          attributes:
          - id: openstack_user
            name: eduPersonPrincipalName
            nameFormat: urn:oasis:names:tc:SAML:2.0:attrname-format:basic
          mapping:
            name: keystone-idp-mapping
            rules:
            - remote:
                - type: openstack_user
                - any_one_of:
                  - .*@example.com
                  regex: true
                  type: openstack_user
            local:
              - user:
                  name: '{0}'
              - projects:
                - name: '{0}'
                  roles:
                  - name: _member_

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/758845

[Jonathan Rosser (jrosser)]

Hi Per,

Could you please test the proposed fix, we don't run CI jobs for federation so it would be great to get some feedback on this.

Thanks,
Jonathan.

[PerToft (per-minfejl)]

The proposed fix http://paste.openstack.org/show/799198/ works.

Great job!

Den man. 19. okt. 2020 kl. 19.01 skrev Jonathan Rosser <
<email address hidden>>:

> Hi Per,
>
> Could you please test the proposed fix, we don't run CI jobs for
> federation so it would be great to get some feedback on this.
>
> Thanks,
> Jonathan.
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1900410
>
> Title:
> fatal: [os_infra1_keystone_container-5999bd47]: FAILED! =>
> {"attempts": 5, "changed": false, "msg": "No package matching
> 'libcurl3' is available"}
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/openstack-ansible/+bug/1900410/+subscriptions
>

--
Med venlig hilsen

M.Sc.Eng. Per N. Toft
Kærhavebakken 80
DK-9270 Klarup
Tlf. 25320861
E-mail. <email address hidden>

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/758845
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_keystone/commit/?id=6a5c958dd8872875bc8fa51bc500543ba8e48b77
Submitter: Zuul
Branch: master

commit 6a5c958dd8872875bc8fa51bc500543ba8e48b77
Author: Jonathan Rosser <email address hidden>
Date: Mon Oct 19 17:48:47 2020 +0100

    Shibboleth and OIDC apache modules are co-installable on Focal

    For ubuntu bionic there was a difference in dependancies between
    these two libraries on libcurl3 and libcurl4 which mean they were
    not co-installable.

    For Focal we should be able to install both as the version of
    the shibboleth library is now > 3.0

    Closes-Bug: 1900410
    Change-Id: Ia135870e45cc32ddfdad61476fe9ce12f61a6df7

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_keystone yoga-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_keystone victoria-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_keystone wallaby-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_keystone xena-eom release.