Bug 2113948 - Cannot find config file: /etc/puppet/hiera.yaml
Summary: Cannot find config file: /etc/puppet/hiera.yaml
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.2 (Train)
Hardware: x86_64
OS: Linux
high
urgent
Target Milestone: ---
: ---
Assignee: Cédric Jeanneret
QA Contact: Joe H. Rahme
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-08-02 11:59 UTC by bshewale@redhat.com
Modified: 2022-08-03 14:54 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-08-03 14:54:39 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-17961 0 None None None 2022-08-02 12:01:51 UTC

Description bshewale@redhat.com 2022-08-02 11:59:08 UTC
Description of problem: Cannot find config file: /etc/puppet/hiera.yaml


Version-Release number of selected component (if applicable): rhos16.2 on rhel8 common component

Error log:

Cannot find config file: /etc/puppet/hiera.yaml

Actual results: Cannot find config file: /etc/puppet/hiera.yaml


Expected results: Config file should be there.


Additional info:

Affected jobs:

periodic-tripleo-ci-rhel-8-containers-multinode-common-rhos-16.2
periodic-tripleo-ci-rhel-8-scenario001-standalone-common-rhos-16.2
periodic-tripleo-ci-rhel-8-scenario002-standalone-common-rhos-16.2
periodic-tripleo-ci-rhel-8-scenario004-standalone-common-rhos-16.2

Comment 3 Cédric Jeanneret 2022-08-02 12:54:24 UTC
Hello there,

Care to check the denials in /var/log/audit/audit.log? I'm wondering if we're not facing something where selinux prevents the access to the whole directory - it may lead to a "file not found" in some conditions.

Cheers,

C.

Comment 4 Cédric Jeanneret 2022-08-02 13:05:13 UTC
OK, after checking the audit.log and related, there's nothing showing selinux preventing that specific access - though there are some others, related to the PKI, and this sounds weird enough to trigger some more digging.. Wondering if selinux related packages (openstack-selinux, container-selinux) are properly installed....

Would it be possible to get a hand on a broken node? That would help with the investigations.

Comment 7 Cédric Jeanneret 2022-08-03 11:23:53 UTC
Hello there,

Is it better now that we should get a newer, corrected openstack-selinux package?

Cheers,

C.

Comment 10 Cédric Jeanneret 2022-08-03 14:54:39 UTC
currentrelease as there's an actual patch that is included now.


Note You need to log in before you can comment on or make changes to this bug.