Bug 1491606 - [Doc] - ansible playbook needs to be run as ansible user
Summary: [Doc] - ansible playbook needs to be run as ansible user
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: Documentation
Version: 3.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: rc
: 3.0
Assignee: Erin Donnelly
QA Contact: ceph-qe-bugs
URL:
Whiteboard:
Depends On:
Blocks: 1496210
TreeView+ depends on / blocked
 
Reported: 2017-09-14 09:10 UTC by Vasishta
Modified: 2017-12-26 03:41 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-12-26 03:41:43 UTC
Embargoed:


Attachments (Terms of Use)

Description Vasishta 2017-09-14 09:10:40 UTC
Description of problem:
ansible-playbook must be run using ansible user as it has been suggested to copy ssh-key as ansible user. Running ansible-playbook as root user after copying ssh-key as ansible user will result in denial of permission.

How reproducible:
Always

Steps to Reproduce:
1. Follow docs to configure ceph-ansible to set-up a cluster.
2. Run ansible-playbook as mentioned in Step 5 of 3.2.6 (example)

Given - 

# ansible-playbook site.yml [-u <user_name>]

Appropriate version -

$ ansible-playbook site.yml [-u <user_name>]


Actual results:

TASK [check for python2] ****************************************************************************************************************************************************
fatal: [magna097]: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Warning: Permanently added 'magna097,10.8.128.97' (ECDSA) to the list of known hosts.\r\nPermission denied (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n", "unreachable": true}
 


Expected results:
anisble-playbook must be able to reach all other nodes to carry on expected job.

Additional info:
Same change has to be made in all places where ansible-playbook is expected be used.
Other examples - 
1) step 5, Section 4.1 - Install doc
2) step 3, Section 6.3 - Install doc
3) step 6 in Procedure: Installing Red Hat Ceph Storage as a Container Image by Using Ansible section of 'Deploying Red Hat Ceph Storage 2 as a Container Image' 
4) step 4, Section 6.1.2 - Admin doc
5) step 5, Section 6.3.2 - Admin doc

Comment 5 Vasishta 2017-10-20 12:40:58 UTC
Hi Erin,

In 3.x Doc, We are suggesting user to create ssh key as admin@admin, but suggesting user to run playbook as user@admin,

1) Shall we follow a single convention ? I think it would increase the usability of the doc.

2) I had listed out some other scenarios in Description where the changes were needed, apart from cluster initialization. Can you please take a look at it ?


Please let me know if there are any concerns.

Regards,
Vasishta

Comment 10 Vasishta 2017-10-25 16:44:10 UTC
Hi Erin, 

I VERIFIED changes in all above commits, Looks good to me, Thanks.
Moving to VERIFIED state.

Regards,
Vasishta


Note You need to log in before you can comment on or make changes to this bug.