Description of problem:
Deployment with TLS fails.
Ansible failed on all controllers
tail -n 10 ansible.log
2020-01-26 08:53:13,746 p=756 u=mistral | NO MORE HOSTS LEFT *************************************************************
2020-01-26 08:53:13,748 p=756 u=mistral | PLAY RECAP *********************************************************************
2020-01-26 08:53:13,748 p=756 u=mistral | compute-0 : ok=170 changed=95 unreachable=0 failed=0 skipped=90 rescued=0 ignored=1
2020-01-26 08:53:13,748 p=756 u=mistral | compute-1 : ok=165 changed=93 unreachable=0 failed=0 skipped=90 rescued=0 ignored=1
2020-01-26 08:53:13,748 p=756 u=mistral | controller-0 : ok=223 changed=137 unreachable=0 failed=1 skipped=84 rescued=0 ignored=0
2020-01-26 08:53:13,748 p=756 u=mistral | controller-1 : ok=208 changed=137 unreachable=0 failed=1 skipped=84 rescued=0 ignored=0
2020-01-26 08:53:13,748 p=756 u=mistral | controller-2 : ok=208 changed=137 unreachable=0 failed=1 skipped=84 rescued=0 ignored=0
2020-01-26 08:53:13,749 p=756 u=mistral | undercloud : ok=11 changed=7 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
2020-01-26 08:53:13,819 p=756 u=mistral | Sunday 26 January 2020 08:53:13 +0000 (0:01:42.458) 0:10:10.548 ********
2020-01-26 08:53:13,819 p=756 u=mistral | ===============================================================================
cat ansible-errors.json | sed 's/Jan/\nJan/g' | grep -i error
Jan 26 08:51:36 puppet-user: Debug: Facter: Error: unable to get cib\n<13>
Jan 26 08:51:45 puppet-user: Debug: /Stage[main]/Pacemaker::Corosync/Exec[wait-for-settle]/unless: Error: cluster is not currently running on this node\n<13>
Jan 26 08:52:41 puppet-user: Error: Could not find group qemu\n<13>
Jan 26 08:52:41 puppet-user: Error: /Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Libvirt_vnc[libvirt-vnc-client-cert]/File[/etc/pki/libvirt-vnc/client-key.pem]/group: change from 'root' to 'qemu' failed: Could not find group qemu\n<13>
Jan 26 08:51:36 puppet-user: Debug: Facter: Error: unable to get cib", "<13>
Jan 26 08:51:45 puppet-user: Debug: /Stage[main]/Pacemaker::Corosync/Exec[wait-for-settle]/unless: Error: cluster is not currently running on this node", "<13>
Jan 26 08:52:41 puppet-user: Error: Could not find group qemu", "<13>
Jan 26 08:52:41 puppet-user: Error: /Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Libvirt_vnc[libvirt-vnc-client-cert]/File[/etc/pki/libvirt-vnc/client-key.pem]/group: change from 'root' to 'qemu' failed: Could not find group qemu", "<13>
Jan 26 08:51:36 puppet-user: Debug: Facter: Error: unable to get cib\n<13>
Jan 26 08:51:38 puppet-user: error: Could not connect to cluster (is it running?)\n<13>
Jan 26 08:52:42 puppet-user: Error: Could not find group qemu\n<13>
Jan 26 08:52:42 puppet-user: Error: /Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Libvirt_vnc[libvirt-vnc-client-cert]/File[/etc/pki/libvirt-vnc/client-key.pem]/group: change from 'root' to 'qemu' failed: Could not find group qemu\n<13>
Jan 26 08:51:36 puppet-user: Debug: Facter: Error: unable to get cib", "<13>
Jan 26 08:51:38 puppet-user: error: Could not connect to cluster (is it running?)", "<13>
Jan 26 08:52:42 puppet-user: Error: Could not find group qemu", "<13>
Jan 26 08:52:42 puppet-user: Error: /Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Libvirt_vnc[libvirt-vnc-client-cert]/File[/etc/pki/libvirt-vnc/client-key.pem]/group: change from 'root' to 'qemu' failed: Could not find group qemu", "<13>
Jan 26 08:51:36 puppet-user: Debug: Facter: Error: unable to get cib\n<13>
Jan 26 08:51:45 puppet-user: Debug: /Stage[main]/Pacemaker::Corosync/Exec[wait-for-settle]/unless: Error: cluster is not currently running on this node\n<13>
Jan 26 08:52:52 puppet-user: Error: Could not find group qemu\n<13>
Jan 26 08:52:52 puppet-user: Error: /Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Libvirt_vnc[libvirt-vnc-client-cert]/File[/etc/pki/libvirt-vnc/client-key.pem]/group: change from 'root' to 'qemu' failed: Could not find group qemu\n<13>
Jan 26 08:51:36 puppet-user: Debug: Facter: Error: unable to get cib", "<13>
Jan 26 08:51:45 puppet-user: Debug: /Stage[main]/Pacemaker::Corosync/Exec[wait-for-settle]/unless: Error: cluster is not currently running on this node", "<13>
Jan 26 08:52:52 puppet-user: Error: Could not find group qemu", "<13>
Jan 26 08:52:52 puppet-user: Error: /Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Libvirt_vnc[libvirt-vnc-client-cert]/File[/etc/pki/libvirt-vnc/client-key.pem]/group: change from 'root' to 'qemu' failed: Could not find group qemu", "<13>
Fix proposed to branch: master /review. opendev. org/704303
Review: https:/