Bug 1503860

Created attachment 1340412 [details]
installer log

Description of problem:

I'm trying to use the system container install w/ CRI-O and there seems to be some issues recognizing the system container variables.

CRI-O & container-engine images pull and run fine.

The installer fails on `docker run --rm openshift3/ose:v3.7 version` which doesn't make any sense because this container needs to be pulled w/ atomic pull to store in ostree.   


Version-Release number of the following components:

commit 8ef9ee879216d3ce0309daf980f06817a8489f30 (HEAD -> master, origin/master, origin/HEAD)

same result on rhel & fedora

rpm -q openshift-ansible
rpm -q ansible
ansible-2.4.0.0-1.fc26.noarch

ansible --version
ansible 2.4.0.0
  config file = /home/bbreard/src/atomic_demo/openshift-ansible/ansible.cfg
  configured module search path = [u'/home/bbreard/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python2.7/site-packages/ansible
  executable location = /usr/bin/ansible
  python version = 2.7.13 (default, Sep  5 2017, 08:53:59) [GCC 7.1.1 20170622 (Red Hat 7.1.1-3)]



ansible-2.3.2.0-2.el7.noarch
ansible --version
ansible 2.3.2.0
  config file = /root/openshift-ansible/ansible.cfg
  configured module search path = Default w/o overrides
  python version = 2.7.5 (default, May  3 2017, 07:55:04) [GCC 4.8.5 20150623 (Red Hat 4.8.5-14)]



How reproducible:

Steps to Reproduce:
1. 2x rhel atomic host VMs (1 master 1 node)
2. use the following inventory:
# Create an OSEv3 group that contains the masters and nodes groups
[OSEv3:children]
masters
nodes

# Set variables common for all OSEv3 hosts
[OSEv3:vars]
# SSH user, this user should allow ssh based auth without requiring a password
ansible_ssh_user=root

# If ansible_ssh_user is not root, ansible_become must be set to true
#ansible_become=true
openshift_release=v3.7
openshift_disable_check=disk_availability,memory_availability,docker_storage
#openshift_deployment_type=origin
deployment_type=openshift-enterprise
openshift_deployment_type=openshift-enterprise

containerized=False

openshift_docker_insecure_registries="brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888"
openshift_use_system_containers=True
openshift_crio_systemcontainer_image_override="brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888/openshift3/cri-o:1.0.0"
system_images_registry="brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888"
openshift_use_crio=True
openshift_use_etcd_system_container=True
openshift_use_openvswitch_system_container=True
openshift_use_node_system_container=True
openshift_use_master_system_container=True
openshift_docker_use_system_container=True
openshift_docker_systemcontainer_image_override="brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888/openshift3/container-engine:v3.7"

openshift_router_selector='region=primary'
openshift_registry_selector='region=primary'

# uncomment the following to enable htpasswd authentication; defaults to DenyAllPasswordIdentityProvider
#openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider', 'filename': '/etc/origin/master/htpasswd'}]
[etcd]
atomic-node0.example.com

# host group for masters
[masters]
atomic-node0.example.com

# host group for nodes, includes region info
[nodes]
atomic-node0.example.com schedulable=True
atomic-node1.example.com openshift_node_labels="{'region': 'primary', 'zone': 'east'}"


3. fails 



Actual results:

fatal: [atomic-node0.example.com]: FAILED! => {
    "changed": true, 
    "cmd": [
        "docker", 
        "run", 
        "--rm", 
        "openshift3/ose:v3.7", 
        "version"
    ], 
    "delta": "0:00:00.984461", 
    "end": "2017-10-18 21:48:12.220495", 
    "failed": true, 
    "invocation": {
        "module_args": {
            "_raw_params": "docker run --rm openshift3/ose:v3.7 version", 
            "_uses_shell": false, 
            "chdir": null, 
            "creates": null, 
            "executable": null, 
            "removes": null, 
            "stdin": null, 
            "warn": true
        }
    }, 
    "msg": "non-zero return code", 
    "rc": 125, 
    "start": "2017-10-18 21:48:11.236034", 
    "stderr": "Unable to find image 'openshift3/ose:v3.7' locally\nTrying to pull repository docker.io/openshift3/ose ... \n/usr/bin/docker-current: unauthorized: authentication required.\nSee '/usr/bin/docker-current run --help'.", 
    "stderr_lines": [
        "Unable to find image 'openshift3/ose:v3.7' locally", 
        "Trying to pull repository docker.io/openshift3/ose ... ", 
        "/usr/bin/docker-current: unauthorized: authentication required.", 
        "See '/usr/bin/docker-current run --help'."
    ], 
    "stdout": "", 
    "stdout_lines": []
}

Expected results:

atomic pull should be used and the image should pull from the system_images_registry defined in the inventory file. 

What am I missing?

Additional info:
Please attach logs from ansible-playbook with the -vvv flag