Similar issue is seen in openstack cluster also:

2017-03-14 20:35:31:393150: [root@10.87.119.12] out: [localhost] local: setup-quantum-in-keystone --ks_server_ip     192.16.7.28 --quant_server_ip  192.16.7.27 --tenant           admin --user             admin --password         c0ntrail123 --svc_password     c0ntrail123 --svc_tenant_name  service --root_password    None --auth_protocol    https --insecure --region_name RegionOne
2017-03-14 20:35:31:400578: [root@10.87.119.12] out: /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:315: SNIMissingWarning: An HTTPS request has been made, but the SNI (Subject Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#snimissingwarning.
2017-03-14 20:35:32:102125: [root@10.87.119.12] out:   SNIMissingWarning
2017-03-14 20:35:32:102320: [root@10.87.119.12] out: /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:120: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
2017-03-14 20:35:32:102364: [root@10.87.119.12] out:   InsecurePlatformWarning
2017-03-14 20:35:32:102400: [root@10.87.119.12] out: /usr/lib/python2.7/dist-packages/urllib3/connectionpool.py:794: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
2017-03-14 20:35:32:102430: [root@10.87.119.12] out:   InsecureRequestWarning)
2017-03-14 20:35:32:102465: [root@10.87.119.12] out: Authorization Failed: Bad Gateway (HTTP 502)
2017-03-14 20:35:32:467432: [root@10.87.119.12] out: Traceback (most recent call last):
2017-03-14 20:35:32:467605: [root@10.87.119.12] out:   File "/usr/bin/setup-quantum-in-keystone", line 9, in <module>
2017-03-14 20:35:32:467662: [root@10.87.119.12] out:     load_entry_point('ContrailProvisioning==0.1dev', 'console_scripts', 'setup-quantum-in-keystone')()
2017-03-14 20:35:32:467713: [root@10.87.119.12] out:   File "/usr/local/lib/python2.7/dist-packages/contrail_provisioning/config/quantum_in_keystone_setup.py", line 306, in main
2017-03-14 20:35:32:467771: [root@10.87.119.12] out:     quant_obj = QuantumSetup(args_str)
2017-03-14 20:35:32:467832: [root@10.87.119.12] out:   File "/usr/local/lib/python2.7/dist-packages/contrail_provisioning/config/quantum_in_keystone_setup.py", line 72, in __init__
2017-03-14 20:35:32:467893: [root@10.87.119.12] out:     raise e
2017-03-14 20:35:32:467966: [root@10.87.119.12] out: keystoneauth1.exceptions.auth.AuthorizationFailure: Authorization Failed: Bad Gateway (HTTP 502)
2017-03-14 20:35:32:468015: [root@10.87.119.12] out: 
2017-03-14 20:35:32:471683: [root@10.87.119.12] out: Fatal error: local() encountered an error (return code 1) while executing 'setup-quantum-in-keystone --ks_server_ip     192.16.7.28 --quant_server_ip  192.16.7.27 --tenant           admin --user             admin --password         c0ntrail123 --svc_password     c0ntrail123 --svc_tenant_name  service --root_password    None --auth_protocol    https --insecure --region_name RegionOne'
2017-03-14 20:35:32:471862: [root@10.87.119.12] out: 
2017-03-14 20:35:32:471933: [root@10.87.119.12] out: Aborting.
2017-03-14 20:35:32:471982: [root@10.87.119.12] out: 
2017-03-14 20:35:32:535963: 

2017-03-14 20:35:32:537028: Fatal error: sudo() received nonzero return code 1 while executing!
2017-03-14 20:35:32:537028: 
2017-03-14 20:35:32:537028: Requested: setup-vnc-config --self_ip 192.16.7.2 --cfgm_index 1 --collector_ip 192.16.7.4 --cassandra_ip_list 192.16.7.2 192.16.7.6 192.16.7.10 --zookeeper_ip_list 192.16.7.2 192.16.7.6 192.16.7.10 --control_ip_list 192.16.7.3 192.16.7.7 192.16.7.11 --quantum_port 9697 --nworkers 1 --service_token 3f29ba50ce6d85ec71a4 --amqp_ip_list 192.16.7.2 192.16.7.6 192.16.7.10 --amqp_port 5672 --apiserver_insecure False --apiserver_certfile /etc/contrail/ssl/certs/contrail.pem --apiserver_keyfile /etc/contrail/ssl/private/contrail.key --apiserver_cafile /etc/contrail/ssl/certs/contrail_ca.pem --first_cfgm_ip 192.16.7.2 --orchestrator openstack --seed_list 192.16.7.2,192.16.7.6 --data_dir /var/lib/cassandra/data --manage_db --cloud_admin_role admin --aaa_mode cloud-admin --keystone_ip 192.16.7.28 --keystone_version v3 --keystone_admin_passwd c0ntrail123 --keystone_service_tenant_name service --neutron_password c0ntrail123 --keystone_auth_protocol https --keystone_auth_port 35357 --keystone_insecure False --keystone_certfile /etc/keystone/ssl/certs/keystone.pem --keystone_keyfile /etc/keystone/ssl/private/keystone.key --keystone_cafile /etc/keystone/ssl/certs/keystone_ca.pem --region_name RegionOne --internal_vip 192.16.7.28 --contrail_internal_vip 192.16.7.27 --cloud_admin_role admin
2017-03-14 20:35:32:537028: Executed: sudo -S -p 'sudo password:'  /bin/bash -l -c "cd /opt/contrail/bin && setup-vnc-config --self_ip 192.16.7.2 --cfgm_index 1 --collector_ip 192.16.7.4 --cassandra_ip_list 192.16.7.2 192.16.7.6 192.16.7.10 --zookeeper_ip_list 192.16.7.2 192.16.7.6 192.16.7.10 --control_ip_list 192.16.7.3 192.16.7.7 192.16.7.11 --quantum_port 9697 --nworkers 1 --service_token 3f29ba50ce6d85ec71a4 --amqp_ip_list 192.16.7.2 192.16.7.6 192.16.7.10 --amqp_port 5672 --apiserver_insecure False --apiserver_certfile /etc/contrail/ssl/certs/contrail.pem --apiserver_keyfile /etc/contrail/ssl/private/contrail.key --apiserver_cafile /etc/contrail/ssl/certs/contrail_ca.pem --first_cfgm_ip 192.16.7.2 --orchestrator openstack --seed_list 192.16.7.2,192.16.7.6 --data_dir /var/lib/cassandra/data --manage_db --cloud_admin_role admin --aaa_mode cloud-admin --keystone_ip 192.16.7.28 --keystone_version v3 --keystone_admin_passwd c0ntrail123 --keystone_service_tenant_name service --neutron_password c0ntrail123 --keystone_auth_protocol https --keystone_auth_port 35357 --keystone_insecure False --keystone_certfile /etc/keystone/ssl/certs/keystone.pem --keystone_keyfile /etc/keystone/ssl/private/keystone.key --keystone_cafile /etc/keystone/ssl/certs/keystone_ca.pem --region_name RegionOne --internal_vip 192.16.7.28 --contrail_internal_vip 192.16.7.27 --cloud_admin_role admin"
2017-03-14 20:35:32:537028: 
2017-03-14 20:35:32:537100: Aborting.
2017-03-14 20:35:32:537100: 2017-03-14 20:35:32:536779: Disconnecting from 10.87.119.21... done.