Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1819781

Summary: Overcloud deployment failure: barbican and tls-everywhere
Product: Red Hat OpenStack Reporter: David Sariel <dsariel>
Component: openstack-tripleoAssignee: James Slagle <jslagle>
Status: CLOSED DUPLICATE QA Contact: Arik Chernetsky <achernet>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 13.0 (Queens)CC: aschultz, lbragsta, lkuchlan, ltoscano, mburns, rmascena, vhariria
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-04-13 12:10:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description David Sariel 2020-04-01 14:41:49 UTC
Description of problem:

Description of problem:

Overcloud deployment fails when barbican is one of the composable roles and tls-everywhere is enabled. When tls-everywhere is not enabled, there is no problem.

Error description from the overcloud-install.log

2020-03-24 03:30:11Z [overcloud.AllNodesDeploySteps.ComputeDeployment_Step3]: CREATE_COMPLETE  Stack CREATE completed successfully
2020-03-24 03:30:12Z [overcloud.AllNodesDeploySteps.ComputeDeployment_Step3]: CREATE_COMPLETE  state changed
2020-03-24 03:31:47Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3.0]: SIGNAL_IN_PROGRESS  Signal: deployment 14039ccc-95f2-4429-aa25-bafd0e384973 failed (2)
2020-03-24 03:31:48Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3.0]: CREATE_FAILED  Error: resources[0]: Deployment to server failed: deploy_status_code : Deployment exited with non-zero status code: 2
2020-03-24 03:31:48Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3]: CREATE_FAILED  Resource CREATE failed: Error: resources[0]: Deployment to server failed: deploy_status_code : Deployment exited with non-zero status code: 2
2020-03-24 03:31:49Z [overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3]: CREATE_FAILED  Error: resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2
2020-03-24 03:31:49Z [overcloud.AllNodesDeploySteps]: CREATE_FAILED  Resource CREATE failed: Error: resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2
2020-03-24 03:31:49Z [overcloud.AllNodesDeploySteps]: CREATE_FAILED  Error: resources.AllNodesDeploySteps.resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2
2020-03-24 03:31:49Z [overcloud]: CREATE_FAILED  Resource CREATE failed: Error: resources.AllNodesDeploySteps.resources.ControllerStorageNfsDeployment_Step3.resources[0]: Deployment to server failed: deploy_status_code: Deployment exited with non-zero status code: 2

 Stack overcloud CREATE_FAILED 

overcloud.AllNodesDeploySteps.ControllerStorageNfsDeployment_Step3.0:
  resource_type: OS::Heat::StructuredDeployment
  physical_resource_id: 14039ccc-95f2-4429-aa25-bafd0e384973
  status: CREATE_FAILED
  status_reason: |
    Error: resources[0]: Deployment to server failed: deploy_status_code : Deployment exited with non-zero status code: 2
  deploy_stdout: |
    ...
            "515deacbd6e84b2057a9148c9943ab4545ec1e579d45f844431867ec96fe170f", 
            "Completed $ docker run --name barbican_worker --label config_id=tripleo_step3 --label container_name=barbican_worker --label managed_by=paunch --label config_data={\"start_order\": 7, \"healthcheck\": {\"test\": \"/openstack/healthcheck 5672\"}, \"image\": \"192.168.24.1:8787/rh-osbs/rhosp13-openstack-barbican-worker:20200303.1\", \"environment\": [\"KOLLA_CONFIG_STRATEGY=COPY_ALWAYS\", \"TRIPLEO_CONFIG_HASH=bccc01715bfbbcbaa33841e20c7a49fa\"], \"user\": \"barbican\", \"volumes\": [\"/etc/hosts:/etc/hosts:ro\", \"/etc/localtime:/etc/localtime:ro\", \"/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro\", \"/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro\", \"/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro\", \"/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro\", \"/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro\", \"/dev/log:/dev/log\", \"/etc/ipa/ca.crt:/etc/ipa/ca.crt:ro\", \"/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro\", \"/etc/puppet:/etc/puppet:ro\", \"/var/log/containers/barbican:/var/log/barbican\", \"/var/log/containers/httpd/barbican-api:/var/log/httpd\", \"/var/lib/kolla/config_files/barbican_worker.json:/var/lib/kolla/config_files/config.json:ro\", \"/var/lib/config-data/puppet-generated/barbican/:/var/lib/kolla/config_files/src:ro\"], \"net\": \"host\", \"privileged\": false, \"restart\": \"always\"} --detach=true --env=KOLLA_CONFIG_STRATEGY=COPY_ALWAYS --env=TRIPLEO_CONFIG_HASH=bccc01715bfbbcbaa33841e20c7a49fa --net=host --health-cmd=/openstack/healthcheck 5672 --privileged=false --restart=always --user=barbican --volume=/etc/hosts:/etc/hosts:ro --volume=/etc/localtime:/etc/localtime:ro --volume=/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro --volume=/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro --volume=/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro --volume=/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro --volume=/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro --volume=/dev/log:/dev/log --volume=/etc/ipa/ca.crt:/etc/ipa/ca.crt:ro --volume=/eHeat Stack create failed.
Heat Stack create failed.
tc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro --volume=/etc/puppet:/etc/puppet:ro --volume=/var/log/containers/barbican:/var/log/barbican --volume=/var/log/containers/httpd/barbican-api:/var/log/httpd --volume=/var/lib/kolla/config_files/barbican_worker.json:/var/lib/kolla/config_files/config.json:ro --volume=/var/lib/config-data/puppet-generated/barbican/:/var/lib/kolla/config_files/src:ro --cpuset-cpus=0,1,2,3,4,5,6,7 192.168.24.1:8787/rh-osbs/rhosp13-openstack-barbican-worker:20200303.1", 
            "stdout: 515deacbd6e84b2057a9148c9943ab4545ec1e579d45f844431867ec96fe170f"
        ]
    }
    	to retry, use: --limit @/var/lib/heat-config/heat-config-ansible/fba15698-bb1a-4ac6-8fa5-9e71b35c3791_playbook.retry
    
    PLAY RECAP *********************************************************************
    localhost                  : ok=14   changed=8    unreachable=0    failed=1

Comment 3 Raildo Mascena de Sousa Filho 2020-04-13 12:10:26 UTC

*** This bug has been marked as a duplicate of bug 1818846 ***