LDAP Adoption tests by xek · Pull Request #970 · openstack-k8s-operators/data-plane-adoption

xek · 2025-06-16T08:36:43Z

IPA is enabled on OSP17 when testing TLS-E adoption. Since
it contains an LDAP server, we can use it to run additional
LDAP adoption tests.

Depends-On: openstack-k8s-operators/install_yamls#1079
Jira: https://issues.redhat.com/browse/OSPRH-6861

openshift-ci · 2025-06-16T08:36:48Z

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

openshift-ci · 2025-06-16T08:36:50Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign sathlan for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

klgill

Hi @xek . This procedure should be cut and pasted into its own file. In modular documentation, we need to avoid multiple headings in one file.

I restructured this procedure so that it includes the necessary metadata to be pasted into its own file. After you commit these changes, all you should have to do is the following:

Copy all of the content (including the :mod-docs-content-type: PROCEDURE
[id='configuring-ldap-with-domain-specific-drivers{context}'] at the top), cut, and paste into a new file.
Name the file "proc_configuring-ldap-with-domain-specific-drivers.adoc".
In the main.adoc, add the file after the "Adopting the Identity service" procedure as follows:

include::../modules/proc_configuring-ldap-with-domain-specific-drivers.adoc[leveloffset=+1]

Please let me know if you have questions.

xek · 2025-06-25T12:19:35Z

Hi @xek . This procedure should be cut and pasted into its own file. In modular documentation, we need to avoid multiple headings in one file.

Thanks! I applied all the changes and moved the docs to a separate pull request #980

softwarefactory-project-zuul · 2025-06-25T16:28:28Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/1790c017fa824c82a5b578774055ab40

✔️ noop SUCCESS in 0s
❌ adoption-standalone-to-crc-ceph FAILURE in 1h 27m 48s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 09m 06s

softwarefactory-project-zuul · 2025-06-25T16:43:07Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/e54df99a37a54af386290a38ec5a1e58

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 02m 20s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 08m 47s

xek · 2025-07-01T12:38:52Z

recheck

softwarefactory-project-zuul · 2025-07-01T16:50:32Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/b231e422d0544fbeb2cc97aa31c0bb2c

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 00m 33s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 08m 53s

xek · 2025-07-02T10:37:50Z

recheck no status reported

softwarefactory-project-zuul · 2025-07-02T14:48:24Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/32becf0597e6421fa3856af7aa2a6d10

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 06m 36s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 08m 46s

- Restructure test_minimal.yaml and test_with_ceph.yaml for better execution flow - Group services by dependencies to enable future parallelization: * Group 1: Barbican, Swift, Horizon, Heat, Telemetry (Keystone dependencies) * Group 2: Glance, Placement (Neutron dependencies) * Group 3: Nova, Cinder, Octavia, Manila (Placement/Glance dependencies) - Maintain logical dependency ordering while preparing for parallel execution - Addresses CI timeout issues in GitHub PR openstack-k8s-operators#970 by improving service ordering - Enables future external orchestration for true parallelization

softwarefactory-project-zuul · 2025-09-30T17:12:38Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/12305f246da2450796a718c49daea977

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 13m 15s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 52m 45s

…adoption into ldap-adoption

softwarefactory-project-zuul · 2025-10-09T10:16:37Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/329671fe6b9b416aac822a880de1d381

✔️ noop SUCCESS in 0s
❌ adoption-standalone-to-crc-ceph NODE_FAILURE Node request 100-0008050975 failed in 0s
❌ adoption-standalone-to-crc-no-ceph NODE_FAILURE Node request 100-0008050976 failed in 0s

afaranha · 2025-10-17T12:30:51Z

recheck

softwarefactory-project-zuul · 2025-10-17T15:46:40Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/30d8b00d47c14b1687da074ccb8b99b9

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 05m 56s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 49m 36s

github-actions · 2025-11-02T03:04:48Z

This PR is stale because it has been for over 15 days with no activity.
Remove stale label or comment or this PR will be closed in 7 days.

afaranha · 2025-11-10T16:20:06Z

recheck

softwarefactory-project-zuul · 2025-11-10T19:21:36Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/c9003cf675bc4c9db0e05f21c9f3b194

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 00m 33s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 47m 14s

ciecierski · 2025-11-12T12:40:26Z

Job with tlse adoption-standalone-to-crc-no-ceph failed on

TASK [keystone_adoption : Test IPA user authentication] ************************
fatal: [localhost]: FAILED! => {"changed": true, "cmd": "set -euxo pipefail\n\n\noc exec -t openstackclient -- bash -c \"\n  source /home/cloud-admin/ipauser &&\n  export OS_IDENTITY_API_VERSION=3 &&\n  openstack token issue -f value -c id > /dev/null &&\n  echo 'IPA user authentication successful' ||\n  echo 'IPA user authentication failed'\"\n", "delta": "0:01:01.683601", "end": "2025-11-10 17:57:05.362443", "failed_when_result": true, "msg": "", "rc": 0, "start": "2025-11-10 17:56:03.678842", "stderr": "+ oc exec -t openstackclient -- bash -c '\n  source /home/cloud-admin/ipauser &&\n  export OS_IDENTITY_API_VERSION=3 &&\n  openstack token issue -f value -c id > /dev/null &&\n  echo '\\''IPA user authentication successful'\\'' ||\n  echo '\\''IPA user authentication failed'\\'''\nGateway Timeout (HTTP 504)", "stderr_lines": ["+ oc exec -t openstackclient -- bash -c '", "  source /home/cloud-admin/ipauser &&", "  export OS_IDENTITY_API_VERSION=3 &&", "  openstack token issue -f value -c id > /dev/null &&", "  echo '\\''IPA user authentication successful'\\'' ||", "  echo '\\''IPA user authentication failed'\\'''", "Gateway Timeout (HTTP 504)"], "stdout": "IPA user authentication failed", "stdout_lines": ["IPA user authentication failed"]}

softwarefactory-project-zuul · 2025-11-12T15:37:48Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/29f4a3cf54664f03b4ec2c6b467eabee

✔️ noop SUCCESS in 0s
❌ adoption-standalone-to-crc-ceph FAILURE in 2h 57m 47s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 47m 22s

github-actions · 2025-11-29T02:56:52Z

This PR is stale because it has been for over 15 days with no activity.
Remove stale label or comment or this PR will be closed in 7 days.

softwarefactory-project-zuul · 2025-12-17T15:25:08Z

This change depends on a change that failed to merge.

Change openstack-k8s-operators/install_yamls#1079 is needed.

millevy · 2025-12-21T08:51:17Z

recheck

softwarefactory-project-zuul · 2025-12-21T11:53:31Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/dfcfe0e8a6604de58c388e4c3929a5bb

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 01m 16s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 45m 57s

Use edpm_node_hostname variable instead of IP address to avoid TLS certificate hostname mismatch error when keystone connects to LDAP server. The IP address (192.168.122.100) in the LDAP URL caused: 'ldap.SERVER_DOWN: TLS: hostname does not match name in peer certificate' This fix ensures the LDAP URL uses the hostname (ipa.ooo.test) which matches the certificate CN/SAN. Fixes: OSPRH-6861 Related: PR openstack-k8s-operators#970

github-actions · 2026-01-06T03:17:08Z

This PR is stale because it has been for over 15 days with no activity.
Remove stale label or comment or this PR will be closed in 7 days.

github-actions · 2026-01-25T03:30:46Z

This PR is stale because it has been for over 15 days with no activity.
Remove stale label or comment or this PR will be closed in 7 days.

openshift-ci Bot added the do-not-merge/work-in-progress label Jun 16, 2025

xek force-pushed the ldap-adoption branch 2 times, most recently from e74e02e to 9228428 Compare June 17, 2025 09:17

xek requested a review from klgill June 18, 2025 13:02

klgill requested changes Jun 18, 2025

View reviewed changes

xek force-pushed the ldap-adoption branch from 0f59ed9 to 5e17162 Compare June 25, 2025 12:18

openstack-k8s-operators deleted a comment from softwarefactory-project-zuul Bot Jun 25, 2025

xek force-pushed the ldap-adoption branch from 5e17162 to 44dad4b Compare June 25, 2025 12:32

xek mentioned this pull request Jun 25, 2025

LDAP adoption documentation #980

Merged

xek marked this pull request as ready for review July 1, 2025 12:37

openshift-ci Bot removed the do-not-merge/work-in-progress label Jul 1, 2025

ciecierski reviewed Jul 4, 2025

View reviewed changes

Comment thread tests/roles/keystone_adoption/defaults/main.yaml

ciecierski reviewed Jul 4, 2025

View reviewed changes

Comment thread tests/roles/keystone_adoption/tasks/run_ipa_test.yml

ciecierski reviewed Jul 4, 2025

View reviewed changes

Comment thread tests/roles/keystone_adoption/tasks/run_ipa_test.yml Outdated

ciecierski reviewed Jul 4, 2025

View reviewed changes

Comment thread tests/roles/keystone_adoption/tasks/main.yaml

ciecierski reviewed Jul 4, 2025

View reviewed changes

Comment thread tests/roles/keystone_adoption/tasks/main.yaml Outdated

xek mentioned this pull request Jul 10, 2025

[AI experiment] Optimize service adoption ordering for CI performance #1006

Closed

Fix lint

6385a0e

Merge branch 'main' of github.com:openstack-k8s-operators/data-plane-…

7410e0b

…adoption into ldap-adoption

github-actions Bot added the Stale label Nov 2, 2025

github-actions Bot closed this Nov 10, 2025

ciecierski reopened this Nov 12, 2025

github-actions Bot removed the Stale label Nov 13, 2025

github-actions Bot added the Stale label Nov 29, 2025

github-actions Bot closed this Dec 7, 2025

millevy reopened this Dec 17, 2025

github-actions Bot removed the Stale label Dec 18, 2025

github-actions Bot added the Stale label Jan 6, 2026

jistr removed the Stale label Jan 9, 2026

github-actions Bot added the Stale label Jan 25, 2026

github-actions Bot closed this Feb 1, 2026

Uh oh!

Conversation

xek commented Jun 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

openshift-ci Bot commented Jun 16, 2025

Uh oh!

openshift-ci Bot commented Jun 16, 2025

Uh oh!

klgill left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

xek commented Jun 25, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Jun 25, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Jun 25, 2025

Uh oh!

xek commented Jul 1, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Jul 1, 2025

Uh oh!

xek commented Jul 2, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Jul 2, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

softwarefactory-project-zuul Bot commented Sep 30, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Oct 9, 2025

Uh oh!

afaranha commented Oct 17, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Oct 17, 2025

Uh oh!

github-actions Bot commented Nov 2, 2025

Uh oh!

afaranha commented Nov 10, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Nov 10, 2025

Uh oh!

ciecierski commented Nov 12, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Nov 12, 2025

Uh oh!

github-actions Bot commented Nov 29, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Dec 17, 2025

Uh oh!

millevy commented Dec 21, 2025

Uh oh!

softwarefactory-project-zuul Bot commented Dec 21, 2025

Uh oh!

github-actions Bot commented Jan 6, 2026

Uh oh!

github-actions Bot commented Jan 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

xek commented Jun 16, 2025 •

edited

Loading