kolla ansible octavia deployment on existing openstack xena

[Debasis]

I was trying to add octavia on my openstack xena and the installation errored with the following. I'm using ubuntu images on ubuntu servers.

[WARNING]: conditional statements should not include jinja2 templating delimiters such as {{ }} or {% %}. Found: {{item.enabled | bool}}
fatal: [controller1 -> {{ groups['octavia-api'][0] }}]: FAILED! => {}

MSG:

The conditional check '{{item.enabled | bool}}' failed. The error was: error while evaluating conditional ({{item.enabled | bool}}): 'dict object' has no attribute 'enabled'

The error appears to be in '/home/openstack/venv/share/kolla-ansible/ansible/roles/octavia/tasks/prepare.yml': line 54, column 3, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

- name: Create security groups for octavia
  ^ here

[Christian Stelter (stelterlab)]

+1 for yoga

When you add an enabled: "true" to the config in globals.yml it will continue. I assume this check has been added unintentional or the documentation/example is just incomplete.

--- cut ---

octavia_amp_security_groups:
    mgmt-sec-grp:
      enabled: "true"
      name: "lb-mgmt-sec-grp"
      rules:
        - protocol: icmp
        - protocol: tcp
          src_port: 22
          dst_port: 22
        - protocol: tcp
          src_port: "{{ octavia_amp_listen_port }}"
          dst_port: "{{ octavia_amp_listen_port }}"

--- cut ---

[Christian Stelter (stelterlab)]

and +1 for zed - the behavior is unchanged

[Christian Stelter (stelterlab)]

Found the defaults:

https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/octavia/defaults/main.yml#L301

Now it does make more sense.

There are currently two sec groups. The mgmt-sec-grp (needed for the amphora instances) and health-mgr-sec-grp which is needed for the health-manager nodes when used with network type "tenant".