Description of problem: Overcloud deployment failure with tls-everywhere enabled fails with 2020-03-29 16:21:00Z [overcloud.AllNodesDeploySteps.ComputeDeployment_Step3.1]: CREATE_COMPLETE state changed 2020-03-29 16:21:00Z [overcloud.AllNodesDeploySteps.ComputeDeployment_Step3]: CREATE_COMPLETE Stack CREATE completed successfully 2020-03-29 16:21:00Z [overcloud.AllNodesDeploySteps.ComputeDeployment_Step3]: CREATE_COMPLETE state changed 2020-03-29 16:22:20Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3.0]: SIGNAL_IN_PROGRESS Signal: deployment b039ae8f-8dd6-434b-b2bb-267a96773b00 failed (2) 2020-03-29 16:22:20Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3.0]: CREATE_FAILED Error: resources[0]: Deployment to server failed: deploy_status_code : Deployment exited with non-zero status code: 2 2020-03-29 16:22:20Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3]: CREATE_FAILED Resource CREATE failed: Error: resources[0]: Deployment to server failed: deploy_status_code : Deployment exited with non-zero status code: 2 2020-03-29 16:22:21Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3]: CREATE_FAILED Error: resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2 2020-03-29 16:22:21Z [overcloud.AllNodesDeploySteps]: CREATE_FAILED Resource CREATE failed: Error: resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2 2020-03-29 16:22:22Z [overcloud.AllNodesDeploySteps]: CREATE_FAILED Error: resources.AllNodesDeploySteps.resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2 2020-03-29 16:22:22Z [overcloud]: CREATE_FAILED Resource CREATE failed: Error: resources.AllNodesDeploySteps.resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2 Stack overcloud CREATE_FAILED overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3.0: resource_type: OS::Heat::StructuredDeployment physical_resource_id: b039ae8f-8dd6-434b-b2bb-267a96773b00 status: CREATE_FAILED status_reason: | Error: resources[0]: Deployment to server failed: deploy_status_code : Deployment exited with non-zero status code: 2 deploy_stdout: | ... "d7fa141e5bae3c71dffb079dbfa9b512eb8ced8df47f016eb4ed1a3b34380d35", "Completed $ docker run --name keystone_cron --label config_id=tripleo_step3 --label container_name=keyHeat Stack create failed. Heat Stack create failed. stone_cron --label managed_by=paunch --label config_data={\"start_order\": 4, \"image\": \"192.168.24.1:8787/rh-osbs/rhosp13-openstack-keystone:20200325.1\", \"environment\": [\"KOLLA_CONFIG_STRATEGY=COPY_ALWAYS\", \"TRIPLEO_CONFIG_HASH=a33c72115bab9c1112ea37ff3ea9704e\"], \"command\": [\"/bin/bash\", \"-c\", \"/usr/local/bin/kolla_set_configs && /usr/sbin/crond -n\"], \"user\": \"root\", \"volumes\": [\"/etc/hosts:/etc/hosts:ro\", \"/etc/localtime:/etc/localtime:ro\", \"/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro\", \"/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro\", \"/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro\", \"/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro\", \"/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro\", \"/dev/log:/dev/log\", \"/etc/ipa/ca.crt:/etc/ipa/ca.crt:ro\", \"/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro\", \"/etc/puppet:/etc/puppet:ro\", \"/var/log/containers/keystone:/var/log/keystone\", \"/var/log/containers/httpd/keystone:/var/log/httpd\", \"/var/lib/kolla/config_files/keystone_cron.json:/var/lib/kolla/config_files/config.json:ro\", \"/var/lib/config-data/puppet-generated/keystone/:/var/lib/kolla/config_files/src:ro\"], \"net\": \"host\", \"privileged\": false, \"restart\": \"always\"} --detach=true --env=KOLLA_CONFIG_STRATEGY=COPY_ALWAYS --env=TRIPLEO_CONFIG_HASH=a33c72115bab9c1112ea37ff3ea9704e --net=host --privileged=false --restart=always --user=root --volume=/etc/hosts:/etc/hosts:ro --volume=/etc/localtime:/etc/localtime:ro --volume=/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro --volume=/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro --volume=/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro --volume=/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro --volume=/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro --volume=/dev/log:/dev/log --volume=/etc/ipa/ca.crt:/etc/ipa/ca.crt:ro --volume=/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro --volume=/etc/puppet:/etc/puppet:ro --volume=/var/log/containers/keystone:/var/log/keystone --volume=/var/log/containers/httpd/keystone:/var/log/httpd --volume=/var/lib/kolla/config_files/keystone_cron.json:/var/lib/kolla/config_files/config.json:ro --volume=/var/lib/config-data/puppet-generated/keystone/:/var/lib/kolla/config_files/src:ro --cpuset-cpus=0,1,2,3,4,5,6,7 192.168.24.1:8787/rh-osbs/rhosp13-openstack-keystone:20200325.1 /bin/bash -c /usr/local/bin/kolla_set_configs && /usr/sbin/crond -n", "stdout: d7fa141e5bae3c71dffb079dbfa9b512eb8ced8df47f016eb4ed1a3b34380d35" ] } to retry, use: --limit @/var/lib/heat-config/heat-config-ansible/2d418edf-18dd-4c08-a18b-48b05783a01c_playbook.retry PLAY RECAP ********************************************************************* localhost : ok=14 changed=8 unreachable=0 failed=1 Version-Release number of selected component (if applicable): core_puddle: 2020-03-25.1
*** Bug 1819781 has been marked as a duplicate of this bug. ***
In the end, this is really Sahara-related, sorry for that (I've internally suggested otherwise initially). As TLS-Everywhere support is not available for Sahara (see bug 1510144 ): - this bug is going to be closed as WONTFIX - the affected environment does not deploy Sahara anymore.