Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-12456

[RHOS 17.1.z] rotate-fernet-keys.yaml playbook is not working

XMLWordPrintable

    • 8
    • Moderate

      Hi Team,

      while waiting for a doc update on https://bugzilla.redhat.com/show_bug.cgi?id=2266071 and now https://issues.redhat.com/browse/RHOSPDOC-2194, we found out that probably the playbook might be broken.

       

       

      1) lunch ephemeral heat (otherwise we'll get [0])

       

      $ openstack tripleo launch heat --heat-dir /home/stack/overcloud-deploy/overcloud/heat-launcher --restore-db
      $ export OS_CLOUD=heat
      

       

       

      2) run the playbook fails with [1]

       

      (heat) [stack@undercloud-0 ~]$ ansible-playbook -e 'hide_sensitive_logs=false' -i ./tripleo-deploy/undercloud/tripleo-ansible-inventory.yaml /usr/share/ansible/tripleo-playbooks/rotate-fernet-keys.yaml 
      [WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details
      
      
      PLAY [Rotate fernet keys] ****************************************************************************************************************************************************************************************************
      
      
      TASK [Set fernet_keys_environment_path] **************************************************************************************************************************************************************************************
      ok: [undercloud-0]
      
      
      TASK [Rotate keys] ***********************************************************************************************************************************************************************************************************
      ok: [undercloud-0]
      
      
      TASK [Create fernet_keys parameter fact] *************************************************************************************************************************************************************************************
      ok: [undercloud-0]
      
      
      TASK [Write fernet_keys environment file] ************************************************************************************************************************************************************************************
      changed: [undercloud-0]
      
      
      PLAY [keystone] **************************************************************************************************************************************************************************************************************
      
      
      TASK [Gathering Facts] *******************************************************************************************************************************************************************************************************
      ok: [undercloud-0]
      
      
      TASK [Check for containerized keystone fernet repository] ********************************************************************************************************************************************************************
      fatal: [undercloud-0]: FAILED! => {"changed": false, "msg": "Permission denied"}
      
      
      PLAY RECAP *******************************************************************************************************************************************************************************************************************
      undercloud-0               : ok=5    changed=1    unreachable=0    failed=1    skipped=0    rescued=0    ignored=0  

       

      Is there any other way to run the playbook successfully? 

       

      [0]

      fatal: [undercloud-0]: FAILED! => {"changed": false, "error": "public endpoint for orchestration service not found", "fernet_keys": {}, "msg": "Error rotating fernet keys for plan overcloud: public endpoint for orchestration service not found", "success": false} 

      [1]

      The full traceback is:
        File "/tmp/ansible_stat_payload_5r6p9h2y/ansible_stat_payload.zip/ansible/modules/stat.py", line 485, in main
      fatal: [undercloud-0]: FAILED! => {
          "changed": false,
          "invocation": {
              "module_args": {
                  "checksum_algorithm": "sha1",
                  "follow": false,
                  "get_attributes": true,
                  "get_checksum": true,
                  "get_md5": false,
                  "get_mime": true,
                  "path": "/var/lib/config-data/puppet-generated/keystone/etc/keystone/fernet-keys/"
              }
          },
          "msg": "Permission denied"
      } 

       

              rhn-support-ramishra Rabi Mishra
              rh-ee-fpiccion Flavio Piccioni
              rhos-dfg-df
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: