Description of problem: https://github.com/openshift/openshift-ansible/blob/master/inventory/byo/hosts.ose.example has: # Enable API service auditing, available as of 3.2 #openshift_master_audit_config={"basicAuditEnabled": true} Version-Release number of selected component (if applicable): The correct parameter would be "enabled" . It also seem to be impossible to provide more than one parameter in the inventory file, they are not expanded properly but instead appear as-is in the result master-config.yaml.
Had this issue as well in 3.3/3.4, I had to change to Enabled to get it working. However a coworker used "basicAuditEnabled" and that worked fine for him.
opened a PR: https://github.com/openshift/openshift-ansible/pull/4130
Verify this bug with openshift-ansible-3.6.68-1.git.0.9cbe2b7.el7.noarch.rpm [root@gpei-test-ansible installer-master]# grep "openshift_master_audit_config" /usr/share/doc/openshift-ansible-docs-3.6.68/docs/example-inventories/* /usr/share/doc/openshift-ansible-docs-3.6.68/docs/example-inventories/hosts.origin.example:#openshift_master_audit_config={"enabled": true} /usr/share/doc/openshift-ansible-docs-3.6.68/docs/example-inventories/hosts.ose.example:#openshift_master_audit_config={"enabled": true} When set openshift_master_audit_config={"enabled": true} in ansible inventory file for ha master env installation, all masters would have the following options configured in /etc/origin/master/master-config.yaml auditConfig: enabled: true
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1716