Bug 1511044 – Ansible service broker etcd certs are read using a file lookup, which only works if the installer is running on the first master.

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1511044 - Ansible service broker etcd certs are read using a file lookup, which only works if the installer is running on the first master.

Summary:	Ansible service broker etcd certs are read using a file lookup, which only wo...

Status:	CLOSED CURRENTRELEASE

Aliases:	None

Product:	OpenShift Container Platform
Classification:	Red Hat
Component:	Installer (Show other bugs)
Sub Component:
Version:	3.7.0
Hardware:	Unspecified Unspecified

Priority	high Severity high
Target Milestone:	---
Target Release:	3.7.0
Assigned To:	Fabian von Feilitzsch
QA Contact:	Weihua Meng
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-11-08 10:29 EST by Fabian von Feilitzsch
Modified:	2017-11-28 03:28 EST (History)
CC List:	5 users (show)

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-11-10 16:01:57 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2017:3188	normal	SHIPPED_LIVE	Moderate: Red Hat OpenShift Container Platform 3.7 security, bug, and enhancement update	2017-11-28 21:34:54 EST

Groups: None (edit)

Description Fabian von Feilitzsch 2017-11-08 10:29:25 EST

Description of problem:
The etcd certs are created on the first master, but then read with a file lookup, which only looks on localhost. This means installs will only success if the playbook is being run on the first master

How reproducible:
Always

Steps to Reproduce:
1. Deploy openshift-ansible, with the ansible runner on a remote machine and the catalog and broker enabled

Actual results:
Playbook errors because it fails to find the asb-etcd certs

Expected results:
No errors

Additional info:
Please attach logs from ansible-playbook with the -vvv flag

Comment 1 openshift-github-bot 2017-11-08 12:52:29 EST

Commits pushed to master at https://github.com/openshift/openshift-ansible

https://github.com/openshift/openshift-ansible/commit/40aa9376dbb05b531dde8357adc1292055d199e3
Bug 1511044- Slurp the etcd certs instead of using the lookup

https://github.com/openshift/openshift-ansible/commit/2ccdd880216bb88afe92a78d24a01f81ab5d6e1b
Merge pull request #6059 from fabianvf/1511044-fix-asb-cert-lookup

Bug 1511044- Slurp the etcd certs instead of using the lookup

Comment 3 Weihua Meng 2017-11-10 03:24:39 EST

Fixed.
openshift-ansible-3.7.5-1.git.0.7900f45.el7.noarch.rpm

Installation succeed without error.
asb-etcd works fine.

Note You need to log in before you can comment on or make changes to this bug.