Heat playbook error

[YG Kumar]

Hi,

I am trying to run the os-heat playbook and it is reporting the following error:
-----------

TASK [os_heat : Add service user to roles] ******************************************************************************************************************
changed: [c1b_heat_api_container-45a01df4 -> localhost] => (item={u'project': u'service', u'role': u'admin', u'user': u'heat'})
changed: [c1b_heat_api_container-45a01df4 -> localhost] => (item={u'project': u'service', u'role': u'heat_stack_owner', u'user': u'heat'})
changed: [c1b_heat_api_container-45a01df4 -> localhost] => (item={u'project': u'service', u'role': u'heat_stack_owner', u'user': u'admin'})
FAILED - RETRYING: Add service user to roles (5 retries left).
FAILED - RETRYING: Add service user to roles (4 retries left).
FAILED - RETRYING: Add service user to roles (3 retries left).
FAILED - RETRYING: Add service user to roles (2 retries left).
FAILED - RETRYING: Add service user to roles (1 retries left).
failed: [c1b_heat_api_container-45a01df4 -> localhost] (item={u'project': u'admin', u'role': u'admin', u'user': u'stack_domain_admin'}) => {"attempts": 5, "$
hanged": false, "item": {"project": "admin", "role": "admin", "user": "stack_domain_admin"}, "msg": "User stack_domain_admin is not valid"}

PLAY RECAP *************************************************************************************************************************************************$
c1b_heat_api_container-45a01df4 : ok=56 changed=6 unreachable=0 failed=1
----------------------

How to solve this ?

[Jean-Philippe Evrard (jean-philippe-evrard)]

Could you give us your overrides? (user_*.yml files, and maybe your openstack_user_config?)

It seems to run fine in gates, so it must be a local configuration issue.

[YG Kumar (ygk-kmr)]

Hi,

I have attached the files.

[YG Kumar (ygk-kmr)]

Added the other config file as well

[YG Kumar (ygk-kmr)]

Hi All,

The culprit seems to be the LDAP config in the user_variable.yml file. Removing the LDAP config fixed the issue. Please note down this bug. Somehow creating a LDAP keystone domain is not working well with the heat playbook.

[Guilherme Steinmuller Pimentel (guilhermesp)]

coud you try to cherry pick that change and run the playbook with your LDAP config?
https://review.openstack.org/#/c/636630/