LDAP Adoption tests #970

xek · 2025-06-16T08:36:43Z

IPA is enabled on OSP17 when testing TLS-E adoption. Since
it contains an LDAP server, we can use it to run additional
LDAP adoption tests.

Depends-On: openstack-k8s-operators/install_yamls#1079
Jira: https://issues.redhat.com/browse/OSPRH-6861

openshift-ci · 2025-06-16T08:36:48Z

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

openshift-ci · 2025-06-16T08:36:50Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign sathlan for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

klgill

Hi @xek . This procedure should be cut and pasted into its own file. In modular documentation, we need to avoid multiple headings in one file.

I restructured this procedure so that it includes the necessary metadata to be pasted into its own file. After you commit these changes, all you should have to do is the following:

Copy all of the content (including the :mod-docs-content-type: PROCEDURE
[id='configuring-ldap-with-domain-specific-drivers{context}'] at the top), cut, and paste into a new file.
Name the file "proc_configuring-ldap-with-domain-specific-drivers.adoc".
In the main.adoc, add the file after the "Adopting the Identity service" procedure as follows:

include::../modules/proc_configuring-ldap-with-domain-specific-drivers.adoc[leveloffset=+1]

Please let me know if you have questions.

docs_user/modules/proc_adopting-the-identity-service.adoc

xek · 2025-06-25T12:19:35Z

Hi @xek . This procedure should be cut and pasted into its own file. In modular documentation, we need to avoid multiple headings in one file.

Thanks! I applied all the changes and moved the docs to a separate pull request #980

softwarefactory-project-zuul · 2025-06-25T16:28:28Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/1790c017fa824c82a5b578774055ab40

✔️ noop SUCCESS in 0s
❌ adoption-standalone-to-crc-ceph FAILURE in 1h 27m 48s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 09m 06s

softwarefactory-project-zuul · 2025-06-25T16:43:07Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/e54df99a37a54af386290a38ec5a1e58

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 02m 20s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 08m 47s

xek · 2025-07-01T12:38:52Z

recheck

softwarefactory-project-zuul · 2025-07-01T16:50:32Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/b231e422d0544fbeb2cc97aa31c0bb2c

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 00m 33s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 08m 53s

xek · 2025-07-02T10:37:50Z

recheck no status reported

softwarefactory-project-zuul · 2025-07-02T14:48:24Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/32becf0597e6421fa3856af7aa2a6d10

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 06m 36s
❌ adoption-standalone-to-crc-no-ceph TIMED_OUT in 4h 08m 46s

tests/roles/keystone_adoption/defaults/main.yaml

tests/roles/keystone_adoption/tasks/run_ipa_test.yml

tests/roles/keystone_adoption/tasks/main.yaml

- Restructure test_minimal.yaml and test_with_ceph.yaml for better execution flow - Group services by dependencies to enable future parallelization: * Group 1: Barbican, Swift, Horizon, Heat, Telemetry (Keystone dependencies) * Group 2: Glance, Placement (Neutron dependencies) * Group 3: Nova, Cinder, Octavia, Manila (Placement/Glance dependencies) - Maintain logical dependency ordering while preparing for parallel execution - Addresses CI timeout issues in GitHub PR openstack-k8s-operators#970 by improving service ordering - Enables future external orchestration for true parallelization

afaranha · 2025-09-24T09:36:45Z

recheck

softwarefactory-project-zuul · 2025-09-24T12:43:29Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/4dcb5b6c0eb049deaa49823162ffcd84

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 05m 42s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 52m 15s

softwarefactory-project-zuul · 2025-09-24T16:42:29Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/e5dbcab2b9284147bcaa202b3505d2ae

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 05m 49s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 48m 32s

millevy · 2025-09-25T11:53:50Z

recheck

softwarefactory-project-zuul · 2025-09-25T15:04:37Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/2dd06f38616d49a9b151637a5abbb6f7

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 09m 06s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 46m 27s

softwarefactory-project-zuul · 2025-09-26T15:32:13Z

Merge Failed.

This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset.
Warning:
Error merging github.com/openstack-k8s-operators/data-plane-adoption for 970,dce1529ae5c514ad5107b0f25d205c0f5c8690ae

softwarefactory-project-zuul · 2025-09-26T19:05:50Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/e0d905cabae14e838b2eef3944e5815f

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 11m 18s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 50m 05s

softwarefactory-project-zuul · 2025-09-30T17:12:38Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/12305f246da2450796a718c49daea977

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 13m 15s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 52m 45s

…adoption into ldap-adoption

softwarefactory-project-zuul · 2025-10-09T10:16:37Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/329671fe6b9b416aac822a880de1d381

✔️ noop SUCCESS in 0s
❌ adoption-standalone-to-crc-ceph NODE_FAILURE Node request 100-0008050975 failed in 0s
❌ adoption-standalone-to-crc-no-ceph NODE_FAILURE Node request 100-0008050976 failed in 0s

afaranha · 2025-10-17T12:30:51Z

recheck

softwarefactory-project-zuul · 2025-10-17T15:46:40Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/30d8b00d47c14b1687da074ccb8b99b9

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 05m 56s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 49m 36s

github-actions · 2025-11-02T03:04:48Z

This PR is stale because it has been for over 15 days with no activity.
Remove stale label or comment or this PR will be closed in 7 days.

afaranha · 2025-11-10T16:20:06Z

recheck

softwarefactory-project-zuul · 2025-11-10T19:21:36Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/c9003cf675bc4c9db0e05f21c9f3b194

✔️ noop SUCCESS in 0s
✔️ adoption-standalone-to-crc-ceph SUCCESS in 3h 00m 33s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 47m 14s

ciecierski · 2025-11-12T12:40:26Z

Job with tlse adoption-standalone-to-crc-no-ceph failed on

TASK [keystone_adoption : Test IPA user authentication] ************************
fatal: [localhost]: FAILED! => {"changed": true, "cmd": "set -euxo pipefail\n\n\noc exec -t openstackclient -- bash -c \"\n  source /home/cloud-admin/ipauser &&\n  export OS_IDENTITY_API_VERSION=3 &&\n  openstack token issue -f value -c id > /dev/null &&\n  echo 'IPA user authentication successful' ||\n  echo 'IPA user authentication failed'\"\n", "delta": "0:01:01.683601", "end": "2025-11-10 17:57:05.362443", "failed_when_result": true, "msg": "", "rc": 0, "start": "2025-11-10 17:56:03.678842", "stderr": "+ oc exec -t openstackclient -- bash -c '\n  source /home/cloud-admin/ipauser &&\n  export OS_IDENTITY_API_VERSION=3 &&\n  openstack token issue -f value -c id > /dev/null &&\n  echo '\\''IPA user authentication successful'\\'' ||\n  echo '\\''IPA user authentication failed'\\'''\nGateway Timeout (HTTP 504)", "stderr_lines": ["+ oc exec -t openstackclient -- bash -c '", "  source /home/cloud-admin/ipauser &&", "  export OS_IDENTITY_API_VERSION=3 &&", "  openstack token issue -f value -c id > /dev/null &&", "  echo '\\''IPA user authentication successful'\\'' ||", "  echo '\\''IPA user authentication failed'\\'''", "Gateway Timeout (HTTP 504)"], "stdout": "IPA user authentication failed", "stdout_lines": ["IPA user authentication failed"]}

softwarefactory-project-zuul · 2025-11-12T15:37:48Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/29f4a3cf54664f03b4ec2c6b467eabee

✔️ noop SUCCESS in 0s
❌ adoption-standalone-to-crc-ceph FAILURE in 2h 57m 47s
❌ adoption-standalone-to-crc-no-ceph FAILURE in 1h 47m 22s

openshift-ci bot added the do-not-merge/work-in-progress label Jun 16, 2025

xek force-pushed the ldap-adoption branch 2 times, most recently from e74e02e to 9228428 Compare June 17, 2025 09:17

xek requested a review from klgill June 18, 2025 13:02

klgill requested changes Jun 18, 2025

View reviewed changes

xek force-pushed the ldap-adoption branch from 0f59ed9 to 5e17162 Compare June 25, 2025 12:18

openstack-k8s-operators deleted a comment from softwarefactory-project-zuul bot Jun 25, 2025

xek force-pushed the ldap-adoption branch from 5e17162 to 44dad4b Compare June 25, 2025 12:32

xek mentioned this pull request Jun 25, 2025

LDAP adoption documentation #980

Merged

xek marked this pull request as ready for review July 1, 2025 12:37

openshift-ci bot removed the do-not-merge/work-in-progress label Jul 1, 2025

ciecierski reviewed Jul 4, 2025

View reviewed changes

tests/roles/keystone_adoption/defaults/main.yaml Show resolved Hide resolved

ciecierski reviewed Jul 4, 2025

View reviewed changes

tests/roles/keystone_adoption/tasks/run_ipa_test.yml Show resolved Hide resolved

ciecierski reviewed Jul 4, 2025

View reviewed changes

tests/roles/keystone_adoption/tasks/run_ipa_test.yml Outdated Show resolved Hide resolved

ciecierski reviewed Jul 4, 2025

View reviewed changes

tests/roles/keystone_adoption/tasks/main.yaml Show resolved Hide resolved

ciecierski reviewed Jul 4, 2025

View reviewed changes

tests/roles/keystone_adoption/tasks/main.yaml Outdated Show resolved Hide resolved

xek mentioned this pull request Jul 10, 2025

[AI experiment] Optimize service adoption ordering for CI performance #1006

Closed

Add retry and delay on the Test IPA user authentication task

7351ba4

github-actions bot removed the Stale label Sep 25, 2025

Configure ldap to use svc-ldap instead of admin user

dce1529

openshift-merge-robot added the needs-rebase label Sep 26, 2025

Merge branch 'main' into ldap-adoption

0a0f14f

openshift-merge-robot removed the needs-rebase label Sep 26, 2025

Use ldaps instead of ldap

ceeaf36

afaranha added 2 commits September 30, 2025 13:10

Fix lint

ec6aba7

Fix lint

6385a0e

Merge branch 'main' of github.com:openstack-k8s-operators/data-plane-…

7410e0b

…adoption into ldap-adoption

github-actions bot added the Stale label Nov 2, 2025

github-actions bot closed this Nov 10, 2025

ciecierski reopened this Nov 12, 2025

github-actions bot removed the Stale label Nov 13, 2025

LDAP Adoption tests #970

Are you sure you want to change the base?

LDAP Adoption tests #970

Conversation

xek commented Jun 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

openshift-ci bot commented Jun 16, 2025

Uh oh!

openshift-ci bot commented Jun 16, 2025

Uh oh!

klgill left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

xek commented Jun 25, 2025

Uh oh!

softwarefactory-project-zuul bot commented Jun 25, 2025

Uh oh!

softwarefactory-project-zuul bot commented Jun 25, 2025

Uh oh!

xek commented Jul 1, 2025

Uh oh!

softwarefactory-project-zuul bot commented Jul 1, 2025

Uh oh!

xek commented Jul 2, 2025

Uh oh!

softwarefactory-project-zuul bot commented Jul 2, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

afaranha commented Sep 24, 2025

Uh oh!

softwarefactory-project-zuul bot commented Sep 24, 2025

Uh oh!

softwarefactory-project-zuul bot commented Sep 24, 2025

Uh oh!

millevy commented Sep 25, 2025

Uh oh!

softwarefactory-project-zuul bot commented Sep 25, 2025

Uh oh!

softwarefactory-project-zuul bot commented Sep 26, 2025

Uh oh!

softwarefactory-project-zuul bot commented Sep 26, 2025

Uh oh!

softwarefactory-project-zuul bot commented Sep 30, 2025

Uh oh!

softwarefactory-project-zuul bot commented Oct 9, 2025

Uh oh!

afaranha commented Oct 17, 2025

Uh oh!

softwarefactory-project-zuul bot commented Oct 17, 2025

Uh oh!

github-actions bot commented Nov 2, 2025

Uh oh!

afaranha commented Nov 10, 2025

Uh oh!

softwarefactory-project-zuul bot commented Nov 10, 2025

Uh oh!

ciecierski commented Nov 12, 2025

Uh oh!

softwarefactory-project-zuul bot commented Nov 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

xek commented Jun 16, 2025 •

edited

Loading