ceph inventory linking fails with permission issues

[Francesco Pantano]

Review [1] reduced permissions on config-download workdir, and files manipulation is performed on that target dir when a ceph-ansible execution environment is prepared.

The overcloud deployment fails with the following:

2022-09-27 07:42:35.187351 | 5254003c-fe4d-ad38-1195-000000005791 | TASK | symbolic link to tripleo inventory from ceph-ansible work directory
2022-09-27 07:42:35.446265 | 5254003c-fe4d-ad38-1195-000000005791 | FATAL | symbolic link to tripleo inventory from ceph-ansible work directory | undercloud | error={"changed": false, "msg": "Error while linking: [Errno 13] Permission denied: b'/var/lib/mistral/overcloud/tripleo-ansible-inventory.yaml' -> b'/var/lib/mistral/overcloud/ceph-ansible/inventory.yml'", "path": "/var/lib/mistral/overcloud/ceph-ansible/inventory.yml"}
2022-09-27 07:42:35.447419 | 5254003c-fe4d-ad38-1195-000000005791 | TIMING | tripleo-ceph-work-dir : symbolic link to tripleo inventory from ceph-ansible work directory | undercloud | 0:05:15.003505 | 0.26s

[1] https://review.opendev.org/q/topic:bug%252F1990226

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-ansible/+/859443
Committed: https://opendev.org/openstack/tripleo-ansible/commit/f251fee3289fcb814b82377721628f07fbe5543a
Submitter: "Zuul (22348)"
Branch: stable/train

commit f251fee3289fcb814b82377721628f07fbe5543a
Author: Francesco Pantano <email address hidden>
Date: Tue Sep 27 16:56:01 2022 +0200

    [TRAIN-ONLY] - Fix ceph-ansible permissions when workdir is created

    When config-download process is executed by mistral some ceph-ansible related
    files and variables are rendered within {{ playbook_dir}}/ceph-ansible.
    According to bug [0], we need to fix privileges when files manipulation
    is performed to prepare the ceph-ansible execution environment.

    [0] https://bugs.launchpad.net/tempest/+bug/1990226

    Closes-Bug: #1990988
    Change-Id: I1da470157870b2dea5dec3a732d16943272e9499

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/859444
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/25561e06b2e8928a681483195a4c301a4589156f
Submitter: "Zuul (22348)"
Branch: stable/train

commit 25561e06b2e8928a681483195a4c301a4589156f
Author: Francesco Pantano <email address hidden>
Date: Tue Sep 27 17:03:18 2022 +0200

    [TRAIN-ONLY] - Fix ceph-ansible group_vars/ permissions

    When config-download process is executed by mistral some ceph-ansible related
    files and variables are rendered within {{ playbook_dir}}/ceph-ansible.
    According to bug [0], we need to fix privileges when files are rendered.
    This patch adds missing privileges where required.

    [0] https://bugs.launchpad.net/tempest/+bug/1990226

    Closes-Bug: #1990988
    Depends-On: I1da470157870b2dea5dec3a732d16943272e9499
    Change-Id: Ibf58b4e2c1f9ed9e3be496ce6327958a97e96881

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: stable/train
Review: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/861945

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/861945
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/7e83852ca5b15f25867e7c42d311866b2b5fb3e3
Submitter: "Zuul (22348)"
Branch: stable/train

commit 7e83852ca5b15f25867e7c42d311866b2b5fb3e3
Author: rabi <email address hidden>
Date: Thu Oct 20 13:17:19 2022 +0530

    [TRAIN-ONLY] Fix file permissions for octavia

    This is a regression from [1]. We need allow
    writing these files in config-dowlad directory.

    Related-Bug: #1990988
    [1] https://review.opendev.org/q/topic:bug%252F1990226

    Change-Id: Ie347d87e59189c0e27f20bb9424f74dc2c8ac858

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: stable/train
Review: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/862662

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/862662
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/c5fa588b2be3e6f89afc9412407052861b46d856
Submitter: "Zuul (22348)"
Branch: stable/train

commit c5fa588b2be3e6f89afc9412407052861b46d856
Author: Takashi Kajinami <email address hidden>
Date: Wed Oct 26 08:57:50 2022 +0900

    [Train-only] Fix permission error when checking ssh key

    This fixes the further regression caused by [1], and fixes
    the permission error in octavia deployment when checking the ssh key
    to login overcloud nodes.

    [1] https://review.opendev.org/q/topic:bug%252F1990226

    Related-Bug: #1990988
    Change-Id: I4679313d3a40cc7d14da0b8409391b81e670b869

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-ansible train-eol release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates train-eol release.