Bug 2130109

Summary: ceph inventory linking fails with permission issues
Product: Red Hat OpenStack Reporter: Attila Fazekas <afazekas>
Component: tripleo-ansibleAssignee: Francesco Pantano <fpantano>
Status: CLOSED ERRATA QA Contact: Alfredo <alfrgarc>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 16.2 (Train)CC: bshephar, fpantano, fpiccion, gfidente, jmitterm, johfulto, jparoly, jschluet, ravsingh, tdoucet, tkajinam
Target Milestone: asyncKeywords: Triaged
Target Release: 16.2 (Train on RHEL 8.4)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: tripleo-ansible-0.8.1-2.20220930034734.f251fee.el8ost, openstack-tripleo-heat-templates-11.6.1-2.20220930074730.e0d438c.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 2130598 (view as bug list) Environment:
Last Closed: 2022-10-17 10:20:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2130598    

Description Attila Fazekas 2022-09-27 08:42:54 UTC
Description of problem:
Probably 72dbd1e102375398cec0605d011f82e087134e84 (Reduce permission of config-download files)  made the source more restive.


2022-09-27 07:42:35.187351 | 5254003c-fe4d-ad38-1195-000000005791 |       TASK | symbolic link to tripleo inventory from ceph-ansible work directory
2022-09-27 07:42:35.446265 | 5254003c-fe4d-ad38-1195-000000005791 |      FATAL | symbolic link to tripleo inventory from ceph-ansible work directory | undercloud | error={"changed": false, "msg": "Error while linking: [Errno 13] Permission denied: b'/var/lib/mistral/overcloud/tripleo-ansible-inventory.yaml' -> b'/var/lib/mistral/overcloud/ceph-ansible/inventory.yml'", "path": "/var/lib/mistral/overcloud/ceph-ansible/inventory.yml"}
2022-09-27 07:42:35.447419 | 5254003c-fe4d-ad38-1195-000000005791 |     TIMING | tripleo-ceph-work-dir : symbolic link to tripleo inventory from ceph-ansible work directory | undercloud | 0:05:15.003505 | 0.26s

That play also in the tripleo-ansible repo.

Comment 2 Attila Fazekas 2022-09-27 08:59:38 UTC
The ansible change looks like file permission, however /var/lib/mistral/ not accessible by stack.

Comment 17 errata-xmlrpc 2022-10-17 10:20:51 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat OpenStack Platform (tripleo-ansible) security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:6969

Comment 20 Francesco Pantano 2022-11-02 12:28:37 UTC
*** Bug 2139138 has been marked as a duplicate of this bug. ***