-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
None
-
2
-
False
-
-
False
-
?
-
openstack-barbican-12.0.3-17.1.20250603070901.6ee5ad9.el9osttrunk openstack-tripleo-common-15.4.1-17.1.20250527161411.e5b18f2.el9osttrunk ansible-role-lunasa-hsm-1.1.1-17.1.20250603180833.5b8127c.el9osttrunk
-
openstack-barbican-12.0.3-17.1.20250603070901.6ee5ad9.el9osttrunk openstack-tripleo-common-15.4.1-17.1.20250527161411.e5b18f2.el9osttrunk ansible-role-lunasa-hsm-1.1.1-17.1.20250603180833.5b8127c.el9osttrunk
-
rhos-ops-platform-services-security
-
None
-
-
-
DFG Security: Test Sprint 2, DFG Security: Test Sprint 3, DFG Security: Test Sprint 4, DFG Security: Test Sprint 5, DFG Security: Test Sprint 6, DFG Security: Test Sprint 7
-
6
-
Important
On RHOSP17.1, Luna HSM Integration Failing at deployment with "ERROR: Must supply non-Blank name argument for SecretStores entry.":
++ cat /run_command
+ CMD='/usr/bin/bootstrap_host_exec barbican_api su barbican -s /bin/bash -c '\''/usr/bin/barbican-manage db sync_secret_stores --verbose '\'''
+ ARGS=
+ [[ ! -n '' ]]
+ . kolla_extend_start
+ echo 'Running command: '\''/usr/bin/bootstrap_host_exec barbican_api su barbican -s /bin/bash -c '\''/usr/bin/barbican-manage db sync_secret_stores --verbose '\'''\'''
+ umask 0022
+ exec /usr/bin/bootstrap_host_exec barbican_api su barbican -s /bin/bash -c ''\''/usr/bin/barbican-manage' db sync_secret_stores --verbose \'
ERROR: Must supply non-Blank name argument for SecretStores entry.
as well as this one:
+ CMD='/usr/bin/bootstrap_host_exec barbican_api su barbican -s /bin/bash -c '\''/usr/bin/barbican-manage db sync_sec ret_stores --verbose '\''' + ARGS= + [[ ! -n '' ]] + . kolla_extend_start + echo 'Running command: '\''/usr/bin/bootstrap_host_exec barbican_api su barbican -s /bin/bash -c '\''/usr/bin/barbic an-manage db sync_secret_stores --verbose '\'''\''' + umask 0022 + exec /usr/bin/bootstrap_host_exec barbican_api su barbican -s /bin/bash -c ''\''/usr/bin/barbican-manage' db sync_se cret_stores --verbose \' ERROR: Must supply non-Blank name argument for SecretStores entry.
and finally this one:
+ exec /usr/bin/bootstrap_host_exec barbican_api su barbican -s /bin/bash -c ''\''/usr/bin/barbican-manage' hsm check_ hmac --label barbican_hmac_0 '||' /usr/bin/barbican-manage hsm gen_hmac --label barbican_hmac_0 \' ERROR: No token was found in slot 0 ERROR: No token was found in slot 0
This could be similar to https://bugs.launchpad.net/barbican/+bug/2036506 or it's a template/configuration issue ... given I've found this upstream bug, I'm wondering if working on the template side is the way to go unless it's because barbican is configured with unsupported features with LUNA in 17.1 .
- links to
-
RHBA-2025:149893 Red Hat OpenStack Platform 17.1 bug fix and enhancement advisory
- mentioned on