The Ironic composable role can't split Ironic API and Ironic conductor. If a user tries to use OS::TripleO::Services::IronicConductor without OS::TripleO::Services::IronicApi then ironic-conductor will fail when trying to talk to Keystone.
Master patches approved, will submit backports: https://review.openstack.org/446037 and https://review.openstack.org/446074
Started proposing backports.
All the patches have merged upstream.
Environment: puppet-tripleo-6.3.0-6.el7ost.noarch openstack-tripleo-heat-templates-6.0.0-0.9.el7ost.noarch Checking ironic services on controller and ironic nodes: [stack@undercloud-0 ~]$ . stackrc [stack@undercloud-0 ~]$ nova list -admin+--------------------------------------+-------------------------+--------+------------+-------------+------------------------+ | ID | Name | Status | Task State | Power State | Networks | +--------------------------------------+-------------------------+--------+------------+-------------+------------------------+ | 16123fc9-b9d4-43b0-9091-905076b29237 | overcloud-cephstorage-0 | ACTIVE | - | Running | ctlplane=192.168.24.7 | | e73a67fe-0cb2-4157-b81a-4f33bbd884d4 | overcloud-cephstorage-1 | ACTIVE | - | Running | ctlplane=192.168.24.18 | | 66ab4a52-f98f-4f1e-a0d4-1ed08128ab1d | overcloud-controller-0 | ACTIVE | - | Running | ctlplane=192.168.24.16 | | 619a1b4b-c530-4644-8a27-1630fb1e3ede | overcloud-controller-1 | ACTIVE | - | Running | ctlplane=192.168.24.8 | | b7d3b05a-a605-4811-82ed-af2ccd727ff3 | overcloud-controller-2 | ACTIVE | - | Running | ctlplane=192.168.24.15 | | db683530-9d5d-4548-a310-c95ffa7efe13 | overcloud-ironic-0 | ACTIVE | - | Running | ctlplane=192.168.24.14 | | 72bc3252-4278-4fc9-9d46-f83aa466fe0d | overcloud-ironic-1 | ACTIVE | - | Running | ctlplane=192.168.24.6 | | 2d29bb50-98e2-4751-b699-cae123026adb | overcloud-novacompute-0 | ACTIVE | - | Running | ctlplane=192.168.24.17 | +--------------------------------------+-------------------------+--------+------------+-------------+------------------------+ [stack@undercloud-0 ~]$ ssh heat-admin.24.14 [heat-admin@overcloud-ironic-0 ~]$ sudo -i [root@overcloud-ironic-0 ~]# systemctl |grep ironic openstack-ironic-conductor.service loaded active running OpenStack Ironic Conductor service [root@overcloud-ironic-0 ~]# logout [heat-admin@overcloud-ironic-0 ~]$ logout Connection to 192.168.24.14 closed. [stack@undercloud-0 ~]$ ssh heat-admin.24.8 [heat-admin@overcloud-controller-1 ~]$ sudo systemctl|grep ironic openstack-ironic-api.service loaded active running OpenStack Ironic API service Was able to boot BM instances in overcloud: [stack@undercloud-0 ~]$ . overcloudrc [stack@undercloud-0 ~]$ nova list +--------------------------------------+-----------+--------+------------+-------------+--------------------------+ | ID | Name | Status | Task State | Power State | Networks | +--------------------------------------+-----------+--------+------------+-------------+--------------------------+ | 66b9dbf7-95a5-4899-bb8f-b98723b2bc83 | instance1 | ACTIVE | - | Running | baremetal=192.168.100.44 | | 7efbb7c8-1234-4624-81b1-e412b967d1d5 | instance2 | ACTIVE | - | Running | baremetal=192.168.100.49 | +--------------------------------------+-----------+--------+------------+-------------+--------------------------+ [stack@undercloud-0 ~]$ ping 192.168.100.49 PING 192.168.100.49 (192.168.100.49) 56(84) bytes of data. 64 bytes from 192.168.100.49: icmp_seq=1 ttl=64 time=0.270 ms --- 192.168.100.49 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.270/0.270/0.270/0.000 ms
List of services used in controller in ironic roles: - name: Controller # the 'primary' role goes first CountDefault: 1 ServicesDefault: - OS::TripleO::Services::CACerts - OS::TripleO::Services::CephMds - OS::TripleO::Services::CephMon - OS::TripleO::Services::CephExternal - OS::TripleO::Services::CephRbdMirror - OS::TripleO::Services::CephRgw - OS::TripleO::Services::CinderApi - OS::TripleO::Services::CinderBackup - OS::TripleO::Services::CinderScheduler - OS::TripleO::Services::CinderVolume - OS::TripleO::Services::Kernel - OS::TripleO::Services::Keystone - OS::TripleO::Services::GlanceApi - OS::TripleO::Services::HeatApi - OS::TripleO::Services::HeatApiCfn - OS::TripleO::Services::HeatApiCloudwatch - OS::TripleO::Services::HeatEngine - OS::TripleO::Services::MySQL - OS::TripleO::Services::NeutronDhcpAgent - OS::TripleO::Services::NeutronL3Agent - OS::TripleO::Services::NeutronMetadataAgent - OS::TripleO::Services::NeutronApi - OS::TripleO::Services::NeutronCorePlugin - OS::TripleO::Services::NeutronOvsAgent - OS::TripleO::Services::RabbitMQ - OS::TripleO::Services::HAproxy - OS::TripleO::Services::Keepalived - OS::TripleO::Services::Memcached - OS::TripleO::Services::Pacemaker - OS::TripleO::Services::Redis - OS::TripleO::Services::NovaConductor - OS::TripleO::Services::MongoDb - OS::TripleO::Services::NovaApi - OS::TripleO::Services::NovaPlacement - OS::TripleO::Services::NovaMetadata - OS::TripleO::Services::NovaScheduler - OS::TripleO::Services::NovaConsoleauth - OS::TripleO::Services::NovaVncProxy - OS::TripleO::Services::Ec2Api - OS::TripleO::Services::Ntp - OS::TripleO::Services::SwiftProxy - OS::TripleO::Services::SwiftStorage - OS::TripleO::Services::SwiftRingBuilder - OS::TripleO::Services::Snmp - OS::TripleO::Services::Timezone - OS::TripleO::Services::CeilometerApi - OS::TripleO::Services::CeilometerCollector - OS::TripleO::Services::CeilometerExpirer - OS::TripleO::Services::CeilometerAgentCentral - OS::TripleO::Services::CeilometerAgentNotification - OS::TripleO::Services::Horizon - OS::TripleO::Services::GnocchiApi - OS::TripleO::Services::GnocchiMetricd - OS::TripleO::Services::GnocchiStatsd - OS::TripleO::Services::ManilaApi - OS::TripleO::Services::ManilaScheduler - OS::TripleO::Services::ManilaBackendGeneric - OS::TripleO::Services::ManilaBackendNetapp - OS::TripleO::Services::ManilaBackendCephFs - OS::TripleO::Services::ManilaShare - OS::TripleO::Services::AodhApi - OS::TripleO::Services::AodhEvaluator - OS::TripleO::Services::AodhNotifier - OS::TripleO::Services::AodhListener - OS::TripleO::Services::SaharaApi - OS::TripleO::Services::SaharaEngine - OS::TripleO::Services::IronicApi - OS::TripleO::Services::NovaIronic - OS::TripleO::Services::TripleoPackages - OS::TripleO::Services::TripleoFirewall - OS::TripleO::Services::OpenDaylightApi - OS::TripleO::Services::OpenDaylightOvs - OS::TripleO::Services::SensuClient - OS::TripleO::Services::FluentdClient - OS::TripleO::Services::BarbicanApi - OS::TripleO::Services::PankoApi - OS::TripleO::Services::Zaqar - OS::TripleO::Services::OVNDBs - OS::TripleO::Services::NeutronML2FujitsuCfab - OS::TripleO::Services::NeutronML2FujitsuFossw - OS::TripleO::Services::CinderHPELeftHandISCSI - OS::TripleO::Services::Etcd - name: Compute CountDefault: 1 HostnameFormatDefault: '%stackname%-novacompute-%index%' disable_upgrade_deployment: True ServicesDefault: - OS::TripleO::Services::CACerts - OS::TripleO::Services::CephClient - OS::TripleO::Services::CephExternal - OS::TripleO::Services::Timezone - OS::TripleO::Services::Ntp - OS::TripleO::Services::Snmp - OS::TripleO::Services::NovaCompute - OS::TripleO::Services::NovaLibvirt - OS::TripleO::Services::Kernel - OS::TripleO::Services::ComputeNeutronCorePlugin - OS::TripleO::Services::ComputeNeutronOvsAgent - OS::TripleO::Services::ComputeCeilometerAgent - OS::TripleO::Services::ComputeNeutronL3Agent - OS::TripleO::Services::ComputeNeutronMetadataAgent - OS::TripleO::Services::TripleoPackages - OS::TripleO::Services::TripleoFirewall - OS::TripleO::Services::NeutronSriovAgent - OS::TripleO::Services::OpenDaylightOvs - OS::TripleO::Services::SensuClient - OS::TripleO::Services::FluentdClient - name: Ironic CountDefault: 1 HostnameFormatDefault: '%stackname%-ironic-%index%' disable_upgrade_deployment: True ServicesDefault: - OS::TripleO::Services::IronicConductor - OS::TripleO::Services::CACerts - OS::TripleO::Services::Timezone - OS::TripleO::Services::Ntp - OS::TripleO::Services::Snmp - OS::TripleO::Services::Kernel - OS::TripleO::Services::TripleoPackages - OS::TripleO::Services::TripleoFirewall - OS::TripleO::Services::SensuClient - OS::TripleO::Services::FluentdClient
Verified based on comment #5 and comment #6
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1245