Incorrect configuration file: /etc/ironic-inspector/rootwrap.conf

[Waldemar Znoinski]

docker logs ironic_inspector complains:

2016-09-18 09:40:54.764 67 WARNING oslo_config.cfg [-] Option "identity_uri" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-18 09:40:54.765 67 WARNING oslo_config.cfg [-] Option "os_auth_url" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-18 09:40:54.765 67 WARNING oslo_config.cfg [-] Option "os_password" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-18 09:40:54.765 67 WARNING oslo_config.cfg [-] Option "os_tenant_name" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-18 09:40:54.768 67 WARNING oslo_config.cfg [-] Option "os_username" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-18 09:40:55.376 67 WARNING ironic_inspector.main [-] Introspection data will not be stored. Change "[processing] store_data" option if this is not the desired behavior
2016-09-18 09:40:55.407 67 INFO ironic_inspector.main [-] Enabled processing hooks: ['ramdisk_error', 'root_disk_selection', 'scheduler', 'validate_interfaces', 'capabilities']
2016-09-18 09:40:55.829 67 WARNING ironic_inspector.firewall [-] iptables does not support -w flag, please update it to at least version 1.4.21
2016-09-18 09:40:57.867 67 ERROR ironic_inspector.firewall [-] iptables ('-N', 'ironic-inspector') failed: /var/lib/kolla/venv/bin/ironic-inspector-rootwrap: Incorrect configuration file: /etc/ironic-inspector/rootwrap.conf.
2016-09-18 09:40:57.868 67 CRITICAL ironic_inspector [-] CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-N', 'ironic-inspector')' returned non-zero exit status 97
2016-09-18 09:40:57.868 67 ERROR ironic_inspector Traceback (most recent call last):
2016-09-18 09:40:57.868 67 ERROR ironic_inspector File "/var/lib/kolla/venv/bin/ironic-inspector", line 11, in <module>
2016-09-18 09:40:57.868 67 ERROR ironic_inspector sys.exit(main())
2016-09-18 09:40:57.868 67 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 465, in main
2016-09-18 09:40:57.868 67 ERROR ironic_inspector service.run(args, app)
2016-09-18 09:40:57.868 67 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 456, in run
2016-09-18 09:40:57.868 67 ERROR ironic_inspector self.init()
2016-09-18 09:40:57.868 67 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 423, in init
2016-09-18 09:40:57.868 67 ERROR ironic_inspector firewall.init()
2016-09-18 09:40:57.868 67 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 86, in init
2016-09-18 09:40:57.868 67 ERROR ironic_inspector _iptables('-N', CHAIN)
2016-09-18 09:40:57.868 67 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 45, in _iptables
2016-09-18 09:40:57.868 67 ERROR ironic_inspector subprocess.check_output(cmd, **kwargs)
2016-09-18 09:40:57.868 67 ERROR ironic_inspector File "/usr/lib/python2.7/subprocess.py", line 574, in check_output
2016-09-18 09:40:57.868 67 ERROR ironic_inspector raise CalledProcessError(retcode, cmd, output=output)
2016-09-18 09:40:57.868 67 ERROR ironic_inspector CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-N', 'ironic-inspector')' returned non-zero exit status 97
2016-09-18 09:40:57.868 67 ERROR ironic_inspector

how to reproduce
1. checkout current master kolla (commit: f9956f2)
2. apply fix and it's deps:
https://review.openstack.org/#/c/372085/

3. enable_haproxy = "no"
4. build images and deploy all-in-one

it looks like the /etc/ironic-inspector/rootwrap.conf should actually be /etc/ironic/rootwrap.conf

[Waldemar Znoinski (wznoinsk)]

it looks to be expected (ironic-inspector) behavior as per
https://github.com/openstack/ironic-inspector/blob/master/ironic_inspector/conf.py#L218

compared to the ironic(api,conductor... itself) that does:
https://github.com/openstack/ironic/blob/decb34f1c12cd7f10370e5a68e8d9e04fce340ac/ironic/conf/default.py#L193

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/372093

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/374727

[OpenStack Infra (hudson-openstack)]

Change abandoned by Waldemar Znoinski (<email address hidden>) on branch: master
Review: https://review.openstack.org/372093
Reason: abandoning in favor of https://review.openstack.org/374727

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/374727
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=326327acbaeb30ddfab34148ffcb9c3f64485deb
Submitter: Jenkins
Branch: master

commit 326327acbaeb30ddfab34148ffcb9c3f64485deb
Author: Waldemar Znoinski <email address hidden>
Date: Sun Sep 18 09:15:22 2016 +0000

    fix ironic-inspector setup

    * add ironic-inspector(-archive) source to docker image
    * pip install from above source code
    * move in-container config files to /etc/ironic-inspector
    * add sudoers file to allow ironic-rootwrap
    * copy rootwrap conf and filters from source repo

    Change-Id: Ie3cce19810b9940d06bb636b28015160fea6ddfb
    Closes-bug: #1624457
    Closes-bug: #1624833
    Closes-bug: #1624845

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kolla 3.0.0.0rc2 release candidate.