Sahara-engine container non functional

[Martin André]

Sahara-engine container fails over a bad DB schema:

http://logs.openstack.org/82/462682/10/check-tripleo/gate-tripleo-ci-centos-7-ovb-containers-oooq-nv/1326721/logs/oooq/overcloud-controller-0/var/log/containers/sahara/sahara-engine.log.txt.gz#_2017-06-14_10_11_17_350

It is possibly missing a DB initialization step, or the container image is too old.

[Martin André (mandre)]

We found thanks to tosky and jistr that the sahara_db_sync container was failing to read from hieradata.

  Failed to start Hiera: Errno::EACCES: Permission denied - /etc/puppet/hiera.yaml

We needs to switch the container user to root when using bootstrap_host_exec.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/478530

[Bogdan Dobrelya (bogdando)]

raised to critical as it blocks HA upgrades it seems, see the dupicating bug details

[Martin André (mandre)]

The HA upgrade thing was different. Here the bug really just impacted sahara.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/478530
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=425c9d4e47898221832f01287ad165833ceab3cd
Submitter: Jenkins
Branch: master

commit 425c9d4e47898221832f01287ad165833ceab3cd
Author: Martin André <email address hidden>
Date: Wed Jun 28 17:10:27 2017 +0200

    Ensure boostrap_host_exec runs as root

    This is necessary for accessing the bind mounted hieradata in the
    container in order to determine if the node is the primary node.

    With the new validation added to yaml-validate.py, we could spot
    potential issues in sahara-api and keystone bootstrap tasks.

    The keystone one is a false positive, as the image defaults to the root
    user in order to be able to run apache. Still, it is better to be
    consistent here and specify the root user nonetheless.

    Change-Id: Ib0ff9748d5406f507261e506c19b96750b10e846
    Closes-Bug: #1697917

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 7.0.0.0b3 development milestone.