Bug 1511044

Summary: Ansible service broker etcd certs are read using a file lookup, which only works if the installer is running on the first master.
Product: OpenShift Container Platform Reporter: Fabian von Feilitzsch <fabian>
Component: InstallerAssignee: Fabian von Feilitzsch <fabian>
Status: CLOSED CURRENTRELEASE QA Contact: Weihua Meng <wmeng>
Severity: high Docs Contact:
Priority: high    
Version: 3.7.0CC: aos-bugs, chezhang, jokerman, mmccomas, wmeng
Target Milestone: ---   
Target Release: 3.7.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-11-10 21:01:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Fabian von Feilitzsch 2017-11-08 15:29:25 UTC 
Description of problem:
The etcd certs are created on the first master, but then read with a file lookup, which only looks on localhost. This means installs will only success if the playbook is being run on the first master

How reproducible:
Always

Steps to Reproduce:
1. Deploy openshift-ansible, with the ansible runner on a remote machine and the catalog and broker enabled

Actual results:
Playbook errors because it fails to find the asb-etcd certs

Expected results:
No errors

Additional info:
Please attach logs from ansible-playbook with the -vvv flag
Comment 1 openshift-github-bot 2017-11-08 17:52:29 UTC 
Commits pushed to master at https://github.com/openshift/openshift-ansible

https://github.com/openshift/openshift-ansible/commit/40aa9376dbb05b531dde8357adc1292055d199e3
Bug 1511044- Slurp the etcd certs instead of using the lookup

https://github.com/openshift/openshift-ansible/commit/2ccdd880216bb88afe92a78d24a01f81ab5d6e1b
Merge pull request #6059 from fabianvf/1511044-fix-asb-cert-lookup

Bug 1511044- Slurp the etcd certs instead of using the lookup
Comment 3 Weihua Meng 2017-11-10 08:24:39 UTC 
Fixed.
openshift-ansible-3.7.5-1.git.0.7900f45.el7.noarch.rpm

Installation succeed without error.
asb-etcd works fine.