- Users - oVirt List Archives

Re: Is it possible to add CPU Profiles?
by Jean-Louis Dupond 15 May '25

15 May '25

Hi Domien, Good to see some Belgian's here ;) Afaik Oracle added CPU types (like the AMD Genoa) based on our patch upstream: https://github.com/oVirt/ovirt-engine/pull/978/files So you should be able to select AMD Genoa as CPU type within oVirt. What error you have when choosing that CPU type? Or you can't choose it or ? Jean-Louis On 5/14/25 08:45, Domien Van Rompaey via Users wrote: > > Hi there > > We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on > Oracle Linux (oVirt 4.5.5-1.42.el8). > For now the only (recent) CPU profile that works is AMD EPYC-MILAN. > > We have the libvirt/cpu_map XML file and know to place it in the > /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how > oVirt will react to this. > > Does anyone have any experience with this? > > Met vriendelijke groeten, > > *Domien Van Rompaey*** > > Security Engineer > > Cloud & ICT‑infrastructure | Security > > Tel +32 51 76 00 00 > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.christiaens.net%2F&…> > > www.dynamate.be > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.dynamate.be%2F&tena…> > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.instagram.com%2Fwea…> > > > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.facebook.com%2Fwear…> > > > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcomp…> > > > _______________________________________________ > Users mailing list --users(a)ovirt.org > To unsubscribe send an email tousers-leave(a)ovirt.org > Privacy Statement:https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ > List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/EV5S…

2 1

Is it safe to install bitdefender on ovirt and nodes ?
by Cyril VINH-TUNG 14 May '25

14 May '25

Hello everyone Has anybody already installed bitdefender or some EDR agent onto ovirt and nodes ? What would you recommand ? Pros and cons Thanks in advance Best regards -------------------------------- Cyril VINH-TUNG INVITU Computer & Network Engineering BP 32 - 98713 Papeete - French Polynesia Tél: +689 40 46 11 99 contact(a)invitu.com

2 1

Is it possible to add CPU Profiles?
by Domien Van Rompaey 14 May '25

14 May '25

Hi there We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on Oracle Linux (oVirt 4.5.5-1.42.el8). For now the only (recent) CPU profile that works is AMD EPYC-MILAN. We have the libvirt/cpu_map XML file and know to place it in the /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how oVirt will react to this. Does anyone have any experience with this? Met vriendelijke groeten, Domien Van Rompaey Security Engineer Cloud & ICT‑infrastructure | Security Tel +32 51 76 00 00 [https://website-api.dynamate.be/public/E-mailhandtekening/DYNAMATE-handteke…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.christiaens.net%2F&…> www.dynamate.be<https://eu.content.exclaimer.net?url=https%3A%2F%2Fwww.dynamate.be%2F&tenan…> [https://website-api.dynamate.be/public/E-mailhandtekening/instagram-60-150.…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.instagram.com%2Fwea…> [https://website-api.dynamate.be/public/E-mailhandtekening/facebook-60-150.p…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.facebook.com%2Fwear…> [https://website-api.dynamate.be/public/E-mailhandtekening/linkedin-60-150-2…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcomp…>

1 0

Re: [External] : build ovirt in docker container
by Jorge Visentini 13 May '25

13 May '25

So... I don't know where this link comes from and if it is being used for any functionality or purpose. https://quay.io/organization/ovirt Regarding orchestration, I think it is too early to decide. It could even be ansible with docker or podman... similar to kolla-ansible for osp. Anyway, these are just my ramblings. Em sex., 9 de mai. de 2025 às 01:58, Marcos Sungaila via Users < users(a)ovirt.org> escreveu: > Hi Jorge, > > > > This is a great initiative and I believe it is worth enough for the > challenge you have ahead. > > > > A solid first step in this process is to work with small, dedicated > containers, each tailored to a specific application or service. This > approach ensures modularity, reduces complexity, and facilitates > troubleshooting when needed. > > > > Once you have the basic containerization structure, the next step involves > modularizing the application by breaking down the engine monolithic > application into multiple independent containers. This will offer enhanced > scalability, flexibility, and efficiency in managing updates and > deployments. > > > > For such a project, using a container orchestration platform such as > Kubernetes is recommended. Helm, a package manager for Kubernetes, can > streamline deployment by managing configurations and automating complex > processes. Using Helm to run an Engine server ensures smoother deployment > and operational consistency. > > > > Do you already have a path in mind? > > > > Marcos > > > > *From:* Jorge Visentini <jorgevisentini(a)gmail.com> > *Sent:* Wednesday, May 7, 2025 5:26 PM > *To:* users <users(a)ovirt.org> > *Subject:* [External] : [ovirt-users] build ovirt in docker container > > > > hey... > > > > Is it crazy of me to try to compile everything in a single (big) > container, or at least divide the closest services into containers? > > Is there any initiative in this direction? > I swear, I didn't smoke anything to have this idea 🙏🤣 > > > > I ask this because I'm in the initial process of creating a build in rocky > linux 9. > By the way, if anyone has basic documentation for this porting from centos > 9 stream to rl9, it would be very welcome. > Here we use Mellanox 3 and 4, and Emulex, so I need to standardize the > kernel to compile the drivers lol > > > > many thanks > > -- > > Att, > > Jorge Visentini > +55 55 98432-9868 > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/HGYNNFC5XPBED… > -- Att, Jorge Visentini +55 55 98432-9868

2 1

Barebone Hosted Engine Deployment fails
by kevin＠kllmnn.de 12 May '25

12 May '25

Hey people, I hope someone can help me identify if there's something I'm doing wrong or if there's a bug. Originally I wanted to re-deploy my self-hosted engine, as it is still on version 4.5.5 with CentOS 8, and therefore can't be updated anymore. To get a fresh backup of the currently running config I did the following: 1. On physical host `hosted-engine --set-maintenance --mode=global` 2. On engine VM `systemctl stop ovirt-engine` and then 3. `engine-backup --scope=all --mode=backup --file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck --log=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.log` (where `/mnt/ovirt-engine-backup/` is a NFS share) 4. On physical host `hosted-engine --vm-shutdown` Then I set up a new physical host with CentOS 9 Stream (Build 20250320), enabled and installed the oVirt repository as mentioned at https://www.ovirt.org/download/install_on_rhel.html, then ran: `hosted-engine --deploy --4 --restore-from-file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck` (of course mounting the NFS share prior to this). But after giving it all the information it needed it fails after 15-20 minutes with several errors in the logfile, which I cannot identify the primary/root cause of. The first error that appears is this one: ``` 2025-03-25 11:19:35,427+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Include after engine-setup custom tasks files for the engine VM] 2025-03-25 11:19:36,730+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Wait for the engine to reach a stable condition] 2025-03-25 11:19:37,431+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:38,133+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Configure LibgfApi support] 2025-03-25 11:19:38,835+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:39,536+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Save original OvfUpdateIntervalInMinutes] 2025-03-25 11:19:42,041+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 changed: [localhost -> 192.168.222.170] 2025-03-25 11:19:42,742+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Set OVF update interval to 1 minute] 2025-03-25 11:19:45,147+0100 DEBUG otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:109 {'changed': True, 'stdout': 'Index 1 out of bounds for length 1', 'stderr': 'Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false', 'rc': 1, 'cmd': ['engine-config', '-s', 'OvfUpdateIntervalInMinutes=1'], 'start': '2025-03-25 11:19:43.872322', 'end': '2025-03-25 11:19:44.941216', 'delta': '0:00:01.068894', 'msg': 'non-zero return code', 'invocation': {'module_args': {'_raw_params': 'engine-config -s OvfUpdateIntervalInMinutes=1', '_uses_shell': False, 'stdin_add_newline': True, 'strip_empty_ends': True, 'argv': None, 'chdir': None, 'executable': None, 'creates': None, 'removes': None, 'stdin': None}}, 'stdout_lines': ['Index 1 out of bounds for length 1'], 'stderr_lines': ['Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false'], '_ansible_no_log': False, '_ansible_delegated_vars': {'ansible_host': '192.168.222.170', 'ansible_port': None, 'ansible_user': 'root', 'ansible_ connection': 'smart'}} 2025-03-25 11:19:45,248+0100 ERROR otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:113 fatal: [localhost -> 192.168.222.170]: FAILED! => {"changed": true, "cmd": ["engine-config", "-s", "OvfUpdateIntervalInMinutes=1"], "delta": "0:00:01.068894", "end": "2025-03-25 11:19:44.941216", "msg": "non-zero return code", "rc": 1, "start": "2025-03-25 11:19:43.872322", "stderr": "Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false", "stderr_lines": ["Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false"], "stdout": "Index 1 out of bounds for length 1", "stdout_lines": ["Index 1 out of bounds for length 1"]} ``` The full log is available here: https://filebin.net/dimi5g2o6q20t4aj I also tried with a completely clean deployment, without restoring from backup (once without and once with using `ovirt-hosted-engine-cleanup` in between). The errors in the log are completely the same. Also I tried to use the oVirt Node master experimental ISO (`ovirt-node-ng-installer-4.5.6-2025031111.c9s.iso`), same issue. Does the problem lie somewhere in my answers for the questions asked by the tool? I cannot identify giving any wrong info. Can someone maybe reproduce the issue?

3 5

Standalone Engine restore to Rocky Linux 9
by KSNull Zero 12 May '25

12 May '25

Hello! There are a lot of errors regarding legacy cipher while restoring engine backup to RL9 during our migration to 4.5. 2025-04-22 08:35:48,773+0300 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.pki.ca plugin.execute:923 execute-output: ('/usr/bin/openssl', 'pkcs12', '-in', '/etc/pki/ovirt-engine/keys/engine.p12', '-passin', 'pass:**FILTERED**', '-nokeys') stderr: Error outputting keys and certificates 00CE347D1F7F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:355:Global default library context, Algorithm (RC2-40-CBC : 0), Properties () RHEL/RL 9 disables the legacy provider for security reasons. What is the best way to solve this problem ? Should i just enable legacy provider in OpenSSL config or re-sign all certs with new ciper (where can i find more information about this) ? Thank you.

5 11

Re: [External] : How to modify the MAC address of a bonding interface after changing the nic card
by luc.lalonde＠polymtl.ca 09 May '25

09 May '25

We've had a similar experience after changing a network card our hypervisor nodes. If you use NMCLI to affect the changes like mentioned above, the hosted-engine will revert to the old settings upon a reboot of the nodes... The only way to get around this in my experience is to make the networking changes from the hosted engine web interface: Compute, Host, Node, Setup Host Networks. If done this way, the changes become persistent... Hope this helps!

1 0

build ovirt in docker container
by Jorge Visentini 08 May '25

08 May '25

hey... Is it crazy of me to try to compile everything in a single (big) container, or at least divide the closest services into containers? Is there any initiative in this direction? I swear, I didn't smoke anything to have this idea 🙏🤣 I ask this because I'm in the initial process of creating a build in rocky linux 9. By the way, if anyone has basic documentation for this porting from centos 9 stream to rl9, it would be very welcome. Here we use Mellanox 3 and 4, and Emulex, so I need to standardize the kernel to compile the drivers lol many thanks -- Att, Jorge Visentini +55 55 98432-9868

2 1

oVirt 4.5: Ansible Self-hosted deployment never created ovirtmgmt bridge
by Pham, Alex 06 May '25

06 May '25

Hello Everyone, I am attempting to install a oVirt Self-hosted engine deployment on a HPE G10 DL360 Server. I am running into a strange issue where the ovirtmgmt bridge is not being created successfully, I have attempted to install around 8 times now and it always gets stuck at the same point: 1. oVirt deploy attempts to create the ovirtmgmt bridge. 2. ovirtmgmt bridge is not created. 3. Deployment fails while waiting for VM to be up. I am attempting the deployment using the ovirt.ovirt collection and the hosted_engine_setup role where the host is set to localhost. The strange thing is I have used this same ansible script and it's accompanying configurations to install oVirt Successfully on this server previously but it is failing after I have performed a cleanup and attempted a reinstallation. Components: HPE G10 DL360 -> Almalinux 8.10 ovirt-ansible-collection.noarch 3.2.0-1.el8 ovirt-engine-appliance.x86_64 4.5-20231201120252.1.el8 I can post the entire engine.log if required but I see the following error that might be relevant 2025-05-06 16:47:08,922-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Running command: UpdateNetworkCommand internal: false. Entities affected : ID: 00000000-0000-0000-0000-000000000009 Type: NetworkAction group CONFIGURE_STORAGE_POOL_NETWORK with role type ADMIN 2025-05-06 16:47:08,958-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE(11,291), Update to network ovirtmgmt was not applied to virtual network interfaces [<UNKNOWN>]. The actual configuration on the interfaces may differ from the displayed one. 2025-05-06 16:47:08,981-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NOTHING_TO_DO(11,143), Start Network ovirtmgmt update on Data Center: Default; no hosts affected 2025-05-06 16:47:09,168-04 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-3) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Command 'UpdateNetwork' id: 'e78f0c08-5b95-483a-afeb-d9b1a8f8c1b3' child commands '[]' executions were completed, status 'SUCCEEDED' 2025-05-06 16:47:10,229-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Ending command 'org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand' successfully. 2025-05-06 16:47:10,267-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NETWORK(1,114), Finished Network ovirtmgmt update on Data Center: Default 2025-05-06 16:47:16,181-04 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-1) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged out 2025-05-06 16:47:16,284-04 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-3) [74b80a72] Running command: TerminateSessionsForTokenCommand internal: true. 2025-05-06 16:47:16,581-04 INFO [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] No permission found for user '467363ac-bd4d-48c7-9ca1-9b7e7d81470a' or one of the groups he is member of, when running action 'AddVds', Required permissions are: Action type: 'ADMIN' Action group: 'CREATE_HOST' Object type: 'Cluster' Object ID: '9bdf3276-2aba-11f0-aebc-4c7e5dafee16'. 2025-05-06 16:47:16,581-04 WARN [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] Validation of action 'AddVds' failed for user admin@ovirt@internalkeycloak-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server ac5conbtafsnatgw01.gw.beta.fsn.nadops.net,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2025-05-06 16:47:16,592-04 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-4) [] Operation Failed: [User is not authorized to perform this action.] 2025-05-06 16:47:19,307-04 INFO [org.ovirt.engine.core.sso.service.ExternalOIDCService] (default task-4) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged into external OP with scopes: ovirt Any help diagnosing this issue would be appreciated. My assumption is that VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE is what is causing the issue but I'm not sure how to get the networks in sync since everything is being done via the internal ovirt ansible collection. Thanks!

1 0

oVirt 4.5: Ansible Self-hosted deployment never created ovirtmgmt bridge
by alex.pham＠hughes.com 06 May '25

06 May '25

Hello Everyone, I am attempting to install a oVirt Self-hosted engine deployment on a HPE G10 DL360 Server. I am running into a strange issue where the ovirtmgmt bridge is not being created successfully, I have attempted to install around 8 times now and it always gets stuck at the same point: 1. oVirt deploy attempts to create the ovirtmgmt bridge. 2. ovirtmgmt bridge is not created. 3. Deployment fails while waiting for VM to be up. I am attempting the deployment using the ovirt.ovirt collection and the hosted_engine_setup role where the host is set to localhost. The strange thing is I have used this same ansible script and it’s accompanying configurations to install oVirt Successfully on this server previously but it is failing after I have performed a cleanup and attempted a reinstallation. Components: HPE G10 DL360 -> Almalinux 8.10 ovirt-ansible-collection.noarch 3.2.0-1.el8 ovirt-engine-appliance.x86_64 4.5-20231201120252.1.el8 I can post the entire engine.log if required but I see the following error that might be relevant 2025-05-06 16:47:08,922-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Running command: UpdateNetworkCommand internal: false. Entities affected : ID: 00000000-0000-0000-0000-000000000009 Type: NetworkAction group CONFIGURE_STORAGE_POOL_NETWORK with role type ADMIN 2025-05-06 16:47:08,958-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE(11,291), Update to network ovirtmgmt was not applied to virtual network interfaces [<UNKNOWN>]. The actual configuration on the interfaces may differ from the displayed one. 2025-05-06 16:47:08,981-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NOTHING_TO_DO(11,143), Start Network ovirtmgmt update on Data Center: Default; no hosts affected 2025-05-06 16:47:09,168-04 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-3) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Command 'UpdateNetwork' id: 'e78f0c08-5b95-483a-afeb-d9b1a8f8c1b3' child commands '[]' executions were completed, status 'SUCCEEDED' 2025-05-06 16:47:10,229-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Ending command 'org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand' successfully. 2025-05-06 16:47:10,267-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NETWORK(1,114), Finished Network ovirtmgmt update on Data Center: Default 2025-05-06 16:47:16,181-04 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-1) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged out 2025-05-06 16:47:16,284-04 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-3) [74b80a72] Running command: TerminateSessionsForTokenCommand internal: true. 2025-05-06 16:47:16,581-04 INFO [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] No permission found for user '467363ac-bd4d-48c7-9ca1-9b7e7d81470a' or one of the groups he is member of, when running action 'AddVds', Required permissions are: Action type: 'ADMIN' Action group: 'CREATE_HOST' Object type: 'Cluster' Object ID: '9bdf3276-2aba-11f0-aebc-4c7e5dafee16'. 2025-05-06 16:47:16,581-04 WARN [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] Validation of action 'AddVds' failed for user admin@ovirt@internalkeycloak-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server ac5conbtafsnatgw01.gw.beta.fsn.nadops.net,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2025-05-06 16:47:16,592-04 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-4) [] Operation Failed: [User is not authorized to perform this action.] 2025-05-06 16:47:19,307-04 INFO [org.ovirt.engine.core.sso.service.ExternalOIDCService] (default task-4) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged into external OP with scopes: ovirt Any help diagnosing this issue would be appreciated. My assumption is that VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE is what is causing the issue but I’m not sure how to get the networks in sync since everything is being done via the internal ovirt ansible collection. Thanks!

1 0