search

vexxhost / keystone-keycloak-backend

Keycloak backend for OpenStack Keystone
13 stars 4 forks source link

Random user lookup errors #22

Closed gtirloni closed 3 months ago

gtirloni commented 6 months ago

I've noticed random failures when querying users in a domain backed by Keybloak.

Sometimes the user list will come empty (openstack user list --domain domainX).

Other times, some automation (e.g. Heat) will fail to find the user and break.

Opening a ticket to investigate this. I'll update with more debugging data.

mnaser commented 4 months ago

@etimmons-sp wanted to get your feedback if you've seen similar issues?

etimmons commented 4 months ago

We have not seen any issues similar to this. The only thing I can think this may be related to is when we had issues before normalizing the UUID: https://github.com/vexxhost/atmosphere/issues/673

It's also important to make sure the mappings are set up and working correctly: https://github.com/vexxhost/atmosphere/blob/main/roles/keystone/tasks/main.yml#L128-L145

gtirloni commented 4 months ago

Relevant: https://bugs.launchpad.net/keystone/+bug/2053297