kolla-ansible

Masakari instance monitor connection to libvirt lacks SASL authentication

Bug #1965754 reported by Mark Goddard
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Medium
Unassigned

Bug Description

Since enabling libvirt SASL authentication, the masakari instance monitor fails to connect to libvirt. We see the following error in logs:

libvirt.libvirtError: authentication failed: Failed to start SASL negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs found)

We need to install the cyrus SASL packages in the container image, and configure authentication.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/834459

Changed in kolla-ansible:
status: New → In Progress
Mark Goddard (mgoddard)
Changed in kolla-ansible:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/834459
Committed: https://opendev.org/openstack/kolla-ansible/commit/5d28a7c89bbac4a15f7d8f7a64c3767ea988efbd
Submitter: "Zuul (22348)"
Branch: master

commit 5d28a7c89bbac4a15f7d8f7a64c3767ea988efbd
Author: Mark Goddard <email address hidden>
Date: Mon Mar 21 12:17:41 2022 +0000

    masakari: support libvirt SASL in instance monitor

    Since enabling libvirt SASL authentication, the masakari instance
    monitor fails to connect to libvirt. We see the following error in logs:

        libvirt.libvirtError: authentication failed: Failed to start SASL
        negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
        found)

    This change adds support for SASL authentication in Masakari instance
    monitor.

    Depends-On: https://review.opendev.org/c/openstack/kolla/+/834456
    Closes-Bug: #1965754
    Change-Id: I974046662b383a12ac6281b725523760a96657bd

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/yoga)

Fix proposed to branch: stable/yoga
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/842740

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/xena)

Fix proposed to branch: stable/xena
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/842741

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/842742

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/yoga)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/842740
Committed: https://opendev.org/openstack/kolla-ansible/commit/166a4e5fe5aaf9547f0bb0255b41ef500cd3de89
Submitter: "Zuul (22348)"
Branch: stable/yoga

commit 166a4e5fe5aaf9547f0bb0255b41ef500cd3de89
Author: Mark Goddard <email address hidden>
Date: Mon Mar 21 12:17:41 2022 +0000

    masakari: support libvirt SASL in instance monitor

    Since enabling libvirt SASL authentication, the masakari instance
    monitor fails to connect to libvirt. We see the following error in logs:

        libvirt.libvirtError: authentication failed: Failed to start SASL
        negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
        found)

    This change adds support for SASL authentication in Masakari instance
    monitor.

    Depends-On: https://review.opendev.org/c/openstack/kolla/+/834456
    Closes-Bug: #1965754
    Change-Id: I974046662b383a12ac6281b725523760a96657bd
    (cherry picked from commit 5d28a7c89bbac4a15f7d8f7a64c3767ea988efbd)

tags: added: in-stable-yoga
tags: added: in-stable-xena
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/xena)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/842741
Committed: https://opendev.org/openstack/kolla-ansible/commit/5a613d64c193e7d3bfcfa368757f7dbe8506e5b8
Submitter: "Zuul (22348)"
Branch: stable/xena

commit 5a613d64c193e7d3bfcfa368757f7dbe8506e5b8
Author: Mark Goddard <email address hidden>
Date: Mon Mar 21 12:17:41 2022 +0000

    masakari: support libvirt SASL in instance monitor

    Since enabling libvirt SASL authentication, the masakari instance
    monitor fails to connect to libvirt. We see the following error in logs:

        libvirt.libvirtError: authentication failed: Failed to start SASL
        negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
        found)

    This change adds support for SASL authentication in Masakari instance
    monitor.

    Depends-On: https://review.opendev.org/c/openstack/kolla/+/834456
    Closes-Bug: #1965754
    Change-Id: I974046662b383a12ac6281b725523760a96657bd
    (cherry picked from commit 5d28a7c89bbac4a15f7d8f7a64c3767ea988efbd)

tags: added: in-stable-wallaby
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/842742
Committed: https://opendev.org/openstack/kolla-ansible/commit/59f46c2489181ae07bb3f40a647206a9c89fb7f3
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit 59f46c2489181ae07bb3f40a647206a9c89fb7f3
Author: Mark Goddard <email address hidden>
Date: Mon Mar 21 12:17:41 2022 +0000

    masakari: support libvirt SASL in instance monitor

    Since enabling libvirt SASL authentication, the masakari instance
    monitor fails to connect to libvirt. We see the following error in logs:

        libvirt.libvirtError: authentication failed: Failed to start SASL
        negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
        found)

    This change adds support for SASL authentication in Masakari instance
    monitor.

    Depends-On: https://review.opendev.org/c/openstack/kolla/+/834456
    Closes-Bug: #1965754
    Change-Id: I974046662b383a12ac6281b725523760a96657bd
    (cherry picked from commit 5d28a7c89bbac4a15f7d8f7a64c3767ea988efbd)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/victoria)

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/843638

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/victoria)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/843638
Committed: https://opendev.org/openstack/kolla-ansible/commit/158615c60fb6b616ce30f2fe813b78ea3a61a30f
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit 158615c60fb6b616ce30f2fe813b78ea3a61a30f
Author: Mark Goddard <email address hidden>
Date: Mon Mar 21 12:17:41 2022 +0000

    masakari: support libvirt SASL in instance monitor

    Since enabling libvirt SASL authentication, the masakari instance
    monitor fails to connect to libvirt. We see the following error in logs:

        libvirt.libvirtError: authentication failed: Failed to start SASL
        negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs
        found)

    This change adds support for SASL authentication in Masakari instance
    monitor.

    Depends-On: https://review.opendev.org/c/openstack/kolla/+/843637
    Closes-Bug: #1965754
    Change-Id: I974046662b383a12ac6281b725523760a96657bd
    (cherry picked from commit 5d28a7c89bbac4a15f7d8f7a64c3767ea988efbd)
    (cherry picked from commit 59f46c2489181ae07bb3f40a647206a9c89fb7f3)

tags: added: in-stable-victoria
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 12.4.0

This issue was fixed in the openstack/kolla-ansible 12.4.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 13.1.0

This issue was fixed in the openstack/kolla-ansible 13.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 14.1.0

This issue was fixed in the openstack/kolla-ansible 14.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 15.0.0.0rc1

This issue was fixed in the openstack/kolla-ansible 15.0.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible victoria-eol

This issue was fixed in the openstack/kolla-ansible victoria-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.