Composable Networks + Internal TLS fails with yaql error: No function "concat" matches supplied arguments"

[Harald Jensås]

2019-05-21 08:51:04Z [overcloud]: UPDATE_FAILED Resource UPDATE failed: resources.ControllerServiceChain: Resource UPDATE failed: resources.ServiceServerMetadataHook: No function "concat" matches supplied arguments

 Stack overcloud UPDATE_FAILED

overcloud.ControllerServiceChain.ServiceServerMetadataHook:
  resource_type: OS::TripleO::ServiceServerMetadataHook
  physical_resource_id: a8eca8a5-71cd-4b20-960b-99ef6587b49c
  status: UPDATE_FAILED
  status_reason: |
    resources.ServiceServerMetadataHook: No function "concat" matches supplied arguments
~~~

The deployment uses several composable networks with no VIP, for example:

- name: CustomNetwork
  name_lower: custom_network
  vip: false
  ip_subnet: 192.168.1.0/24
  allocation_pools: [{'start': '192.168.1.2', 'end': '192.168.1.3'}]
  vlan: 12

The 'tenant' network is filtered[1].
I belive this should actually filter all networks without a VIP?

[1] https://github.com/openstack/tripleo-heat-templates/blob/stable/stein/deployment/apache/apache-baremetal-puppet.j2.yaml#L66

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/661603

[OpenStack Infra (hudson-openstack)]

Change abandoned by Harald Jensås (<email address hidden>) on branch: master
Review: https://review.opendev.org/661603
Reason: This is wrong, we actually may want to issue certs for services in networks without a VIP.

[Harald Jensås (harald-jensas)]

This issue turned out to be invalid metadata_settings in a third party service.