Description of problem: Puppet deploys a complete ceph.client.volumes.keyring file on the OSP compute nodes. Only the key value is needed to complete the configuration of libvirt. The ceph command is not available on the OSP compute nodes. Recommend changing puppet to call virsh and feed it the value of the generated volumes key. /usr/bin/virsh secret-set-value --secret ${rbd_secret_uuid} --base64 ${volumes_key} Version-Release number of selected component (if applicable): foreman-installer-1.6.0-0.3.RC1.el7ost.noarch How reproducible: 100% Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Patch posted: https://github.com/redhat-openstack/astapor/pull/487
+1
I'm certain the pre-patch behaviour was such that a puppet run would never display an error (esp. if the ceph cluster wasn't set up yet). I'm not certain this is the case with patch (do we care?). The advantage to the patch (as everybody is probably aware) is that ceph admin is not required on the compute node.
*** Bug 1197603 has been marked as a duplicate of this bug. ***
Does this patch stop the deployment of the /etc/ceph/ceph.volumes.keyring file?
No, it does not. /etc/ceph/ceph.client.volumes.keyring will still be there.
To correct my earlier Comment 7, a puppet run on a compute node with this patch will not cause a puppet error if the ceph cluster is not yet set up (good!).
RE Comment 7: the old code will produce Puppet errors in some cases too: Mar 10 15:44:31 compute01 puppet-agent[12959]: Could not set 'file' on ensure: No such file or directory - /etc/nova/secret.xml20150310-12959-1wqjr2a at 127:/etc/puppet/environments/production/modules/quickstack/manifests/compute_common.pp Mar 10 15:44:31 compute01 puppet-agent[12959]: Could not set 'file' on ensure: No such file or directory - /etc/nova/secret.xml20150310-12959-1wqjr2a at 127:/etc/puppet/environments/production/modules/quickstack/manifests/compute_common.pp Mar 10 15:44:31 compute01 puppet-agent[12959]: Wrapped exception: Mar 10 15:44:31 compute01 puppet-agent[12959]: No such file or directory - /etc/nova/secret.xml20150310-12959-1wqjr2a Mar 10 15:44:31 compute01 puppet-agent[12959]: (/Stage[main]/Quickstack::Compute_common/File[/etc/nova/secret.xml]/ensure) change from absent to file failed: Could not set 'file' on ensure: No such file or directory - /etc/nova/secret.xml20150310-12959-1wqjr2a at 127:/etc/puppet/environments/production/modules/quickstack/manifests/compute_common.pp (This being a special case somewhat, as the CEPH cluster used was not set-up by the installer but by-hand before the OSP deployment)
Merged
verified in version ruby193-rubygem-staypuft-0.5.21-1.el7ost.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0791.html