Deployment fails when Keystone and Heat services are deployed on different roles nodes

[Marius Cornea]

I'm doing a deployment with the following service assignment per roles:

http://paste.openstack.org/show/584723/

The deployment fails with the following error:

openstack stack failures list overcloud
overcloud.AllNodesDeploySteps.ServiceApiDeployment_Step5.0:
  resource_type: OS::Heat::StructuredDeployment
  physical_resource_id: 2b34a4cd-bb54-4ba4-b186-7c377d75e719
  status: CREATE_FAILED
  status_reason: |
    Error: resources[0]: Deployment to server failed: deploy_status_code : Deployment exited with non-zero status code: 1
  deploy_stdout: |
    Matching apachectl 'Server version: Apache/2.4.6 (Red Hat Enterprise Linux)
    Server built: Aug 3 2016 08:33:27'
  deploy_stderr: |
    ...
    Warning: Scope(Class[Gnocchi::Api]): gnocchi:api::keystone_identity_uri is deprecated, use gnocchi::keystone::authtoken::auth_url instead
    Warning: Scope(Class[Gnocchi::Api]): gnocchi::api::keystone_auth_uri is deprecated, use gnocchi::keystone::authtoken::auth_uri instead
    Warning: Scope(Class[Mongodb::Server]): Replset specified, but no replset_members or replset_config provided.
    Warning: Not collecting exported resources without storeconfigs
    Warning: Not collecting exported resources without storeconfigs
    Warning: Not collecting exported resources without storeconfigs
    Warning: Not collecting exported resources without storeconfigs
    Warning: Not collecting exported resources without storeconfigs
    Error: Could not find resource 'Class[Keystone::Roles::Admin]' for relationship on 'Class[Heat::Keystone::Domain]' on node overcloud-serviceapi-0.localdomain
    Error: Could not find resource 'Class[Keystone::Roles::Admin]' for relationship on 'Class[Heat::Keystone::Domain]' on node overcloud-serviceapi-0.localdomain
    (truncated, view all with --long)

[Steven Hardy (shardy)]

I can confirm this - the heat manifests try to create a keystone domain and user, so we'll need to wire that in via service_config_settings I think, like the keystone service users we previously fixed.

[Steven Hardy (shardy)]

https://review.openstack.org/386115 posted to puppet-tripleo

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/386118

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/386118
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=4e98b29572c9cfad837c6a367e4a187bd2cb7d5f
Submitter: Jenkins
Branch: master

commit 4e98b29572c9cfad837c6a367e4a187bd2cb7d5f
Author: Steven Hardy <email address hidden>
Date: Thu Oct 13 19:00:09 2016 +0100

    Pass heat domain admin password to keystone

    This is needed to create the user/domain/project in the
    keystone profile on whatever role is running the keystone service.

    Change-Id: I115ead005974080e0a35e3675d9b37828c8934b1
    Closes-Bug: #1631130
    Depends-On: Ib088a572b384b479f51d56555734d78ab840a1f3

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/387289

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/387289
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=5f34ec65f6567174c63afe5ce8d5e8643a83cf0b
Submitter: Jenkins
Branch: stable/newton

commit 5f34ec65f6567174c63afe5ce8d5e8643a83cf0b
Author: Steven Hardy <email address hidden>
Date: Thu Oct 13 19:00:09 2016 +0100

    Pass heat domain admin password to keystone

    This is needed to create the user/domain/project in the
    keystone profile on whatever role is running the keystone service.

    Change-Id: I115ead005974080e0a35e3675d9b37828c8934b1
    Closes-Bug: #1631130
    Depends-On: Ib088a572b384b479f51d56555734d78ab840a1f3
    (cherry picked from commit 4e98b29572c9cfad837c6a367e4a187bd2cb7d5f)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 5.1.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 6.0.0.0b1 development milestone.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 5.1.0 release.