Bug 1949667

Summary: TLS Everywhere overcloud deployment fails due to undefined ansible_fqdn
Product: Red Hat OpenStack Reporter: Dave Wilde <dwilde>
Component: openstack-tripleo-heat-templatesAssignee: Dave Wilde <dwilde>
Status: CLOSED ERRATA QA Contact: Jeremy Agee <jagee>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 16.1 (Train)CC: acanan, mburns, michele, mkrcmari, nweinber, sbekkerm, spower
Target Milestone: z6Keywords: Triaged
Target Release: 16.1 (Train on RHEL 8.2)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-11.3.2-1.20210408163449.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-05-26 13:52:43 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Dave Wilde 2021-04-14 18:23:24 UTC
Description of problem:
TLS-E Overcloud fails to deploy due to undefined ansible_fqdn in the tripleo-ipa registration play.

Version-Release number of selected component (if applicable):
16.1.6

How reproducible:
Always with tls-e enabled

Steps to Reproduce:
1. Enable tls-e
2. Deploy overcloud

Actual results:
    PLAY [External deployment step 1] **********************************************
     
    TASK [External deployment step 1] **********************************************
    Wednesday 14 April 2021  13:44:52 -0400 (0:00:00.088)       0:03:48.509 *******
    ok: [undercloud] => {
        "msg": "Use --start-at-task \"External deployment step 1\" to resume from this task"
    }
     
    TASK [include_tasks] ***********************************************************
    Wednesday 14 April 2021  13:44:53 -0400 (0:00:00.059)       0:03:48.569 *******
    included: /var/lib/mistral/overcloud/external_deploy_steps_tasks_step1.yaml for undercloud
     
    TASK [tripleo-container-image-prepare : Create temp file for prepare parameter] ***
    Wednesday 14 April 2021  13:44:53 -0400 (0:00:00.097)       0:03:48.667 *******
    changed: [undercloud] => {"changed": true, "gid": 0, "group": "root", "mode": "0600", "owner": "root", "path": "/tmp/ansible.doo1hx4e-prepare-param", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 0, "state": "file", "uid": 0}
     
    TASK [tripleo-container-image-prepare : Write ContainerImagePrepare parameter file] ***
    Wednesday 14 April 2021  13:44:53 -0400 (0:00:00.315)       0:03:48.982 *******
    changed: [undercloud] => {"changed": true, "checksum": "231886849cc77070ee3661e49136240e4cd491e4", "dest": "/tmp/ansible.doo1hx4e-prepare-param", "gid": 0, "group": "root", "md5sum": "0186e8e9ee47a369458c06461cc7e0e6", "mode": "0600", "owner": "root", "secontext": "un$onfined_u:object_r:user_tmp_t:s0", "size": 5992, "src": "/tmp/ansible-tripleo-admin/ansible-tmp-1618422293.4468637-2988-69747811516590/source", "state": "file", "uid": 0}
     
    TASK [tripleo-container-image-prepare : Create temp file for role data] ********
    Wednesday 14 April 2021  13:44:54 -0400 (0:00:00.825)       0:03:49.808 *******
    changed: [undercloud] => {"changed": true, "gid": 0, "group": "root", "mode": "0600", "owner": "root", "path": "/tmp/ansible.s9b4f679-role-data", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 0, "state": "file", "uid": 0}
     
    TASK [tripleo-container-image-prepare : Write role data file] ******************
    Wednesday 14 April 2021  13:44:54 -0400 (0:00:00.371)       0:03:50.180 *******
    changed: [undercloud] => {"changed": true, "checksum": "754e8b05f9b194f36aa7e412c5219268764701c2", "dest": "/tmp/ansible.s9b4f679-role-data", "gid": 0, "group": "root", "md5sum": "e87085798f041d807680d5daf5a9c62f", "mode": "0600", "owner": "root", "secontext": "unconf$ned_u:object_r:user_tmp_t:s0", "size": 7405, "src": "/tmp/ansible-tripleo-admin/ansible-tmp-1618422294.651381-3000-127740545336581/source", "state": "file", "uid": 0}
     
     
    TASK [Run tripleo-container-image-prepare logged to: /var/log/tripleo-container-image-prepare.log] ***
    Wednesday 14 April 2021  13:44:55 -0400 (0:00:00.843)       0:03:51.023 *******
    changed: [undercloud] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true}
     
     
    TASK [tripleo-container-image-prepare : Delete param file] *********************
    Wednesday 14 April 2021  13:45:03 -0400 (0:00:08.370)       0:03:59.393 *******
    [WARNING]: Consider using the file module with state=absent rather than running
    'rm'.  If you need to use command because file is insufficient you can add
    'warn: false' to this command task or set 'command_warnings=False' in
    ansible.cfg to get rid of this message.
    changed: [undercloud] => {"changed": true, "cmd": ["rm", "-rf", "/tmp/ansible.doo1hx4e-prepare-param"], "delta": "0:00:00.003253", "end": "2021-04-14 13:45:04.119684", "rc": 0, "start": "2021-04-14 13:45:04.116431", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}
     
    TASK [tripleo-container-image-prepare : Delete role file] **********************
    Wednesday 14 April 2021  13:45:04 -0400 (0:00:00.363)       0:03:59.756 *******
    changed: [undercloud] => {"changed": true, "cmd": ["rm", "-rf", "/tmp/ansible.s9b4f679-role-data"], "delta": "0:00:00.002681", "end": "2021-04-14 13:45:04.428845", "rc": 0, "start": "2021-04-14 13:45:04.426164", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}
     
    TASK [get IPA conf file] *******************************************************
    Wednesday 14 April 2021  13:45:04 -0400 (0:00:00.312)       0:04:00.069 *******
    changed: [undercloud] => {"changed": true, "checksum": "38cfb4455c8fd374e32f0048deff337f34a60e3f", "dest": "/tmp/ansible/undercloud/etc/ipa/default.conf", "md5sum": "63524428cdd21e000bfd1ca47cb21312", "remote_checksum": "38cfb4455c8fd374e32f0048deff337f34a60e3f", "remote_md5sum": null}
     
    TASK [read IPA server name] ****************************************************
    Wednesday 14 April 2021  13:45:04 -0400 (0:00:00.320)       0:04:00.390 *******
    ok: [undercloud] => {"ansible_facts": {"ipa_server_name": "freeipa-0.redhat.local"}, "changed": false}
     
    TASK [include_role : tripleo_ipa_registration] *********************************
    Wednesday 14 April 2021  13:45:04 -0400 (0:00:00.059)       0:04:00.450 *******
     
    TASK [tripleo_ipa_registration : set main facts] *******************************
    Wednesday 14 April 2021  13:45:04 -0400 (0:00:00.095)       0:04:00.545 *******
    fatal: [undercloud]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'ansible_fqdn' is undefined\n\nThe error appears to be in '/usr/share/ansible/roles/tripleo_ipa_registration/tasks/main.yml': line 27, column 3, but may\nbe
    elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: set main facts\n  ^ here\n"}
     
    NO MORE HOSTS LEFT *************************************************************
     
    PLAY RECAP *********************************************************************
    compute-0                  : ok=148  changed=83   unreachable=0    failed=0    skipped=76   rescued=0    ignored=0
    controller-0               : ok=166  changed=101  unreachable=0    failed=0    skipped=73   rescued=0    ignored=0
    undercloud                 : ok=22   changed=13   unreachable=0    failed=1    skipped=0    rescued=0    ignored=0
     
    Wednesday 14 April 2021  13:45:05 -0400 (0:00:00.057)       0:04:00.602 *******
    ===============================================================================
    tripleo-network-config : Run NetworkConfig script ---------------------- 37.19s
    Run puppet on the host to apply IPtables rules ------------------------- 25.37s
    Run tripleo-container-image-prepare logged to: /var/log/tripleo-container-image-prepare.log --- 8.37s
    ensure qemu group is present on the host -------------------------------- 6.83s
    ensure qemu group is present on the host -------------------------------- 6.61s
    tripleo-hieradata : Render hieradata from template ---------------------- 6.26s
    Run async deployment CADeployment --------------------------------------- 4.21s
    tripleo-kernel : Set extra sysctl options ------------------------------- 3.57s
    install needed packages ------------------------------------------------- 3.09s
    install needed packages ------------------------------------------------- 3.04s
    create libvirt persistent data directories ------------------------------ 2.11s
    tripleo-kernel : Remove dracut-config-generic --------------------------- 1.77s
    enable virt_sandbox_use_netlink for healthcheck ------------------------- 1.74s
    tripleo-bootstrap : Create empty ruleset in /etc/sysconfig/iptables and /etc/sysconfig/ip6tables --- 1.60s
    tripleo-bootstrap : Deploy required packages to bootstrap TripleO ------- 1.54s
    enable virt_sandbox_use_netlink for healthcheck ------------------------- 1.50s
    Enable tuned profile ---------------------------------------------------- 1.50s
    Enable tuned profile ---------------------------------------------------- 1.47s
    Enable tuned profile ---------------------------------------------------- 1.37s
    Gathering Facts --------------------------------------------------------- 1.34s
     
    Ansible failed, check log at /var/lib/mistral/overcloud/ansible.log.
    Overcloud Endpoint: https://overcloud.redhat.local:13000
    Overcloud Horizon Dashboard URL: https://overcloud.redhat.local:443/dashboard
    Overcloud rc file: /home/stack/overcloudrc
    Overcloud Deployed with error
    Overcloud configuration failed.


Expected results:
Successful deployment

Additional info:

Comment 11 Michele Baldessari 2021-04-24 06:49:14 UTC
*** Bug 1953124 has been marked as a duplicate of this bug. ***

Comment 19 errata-xmlrpc 2021-05-26 13:52:43 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 16.1.6 bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:2097