[magnum] Installations fails in Rocky while creating trustee user

[Gilles Mocellin]

Hello,

Im'trying to install magnum on my lab, but it fails here :

TASK [os_magnum : Add trustee domain] *********************************************************************************************************************
ok: [fidcllabs-oct-02_magnum_container-1bd6f9b4 -> localhost]

TASK [os_magnum : Add trustee user] ***********************************************************************************************************************
FAILED - RETRYING: Add trustee user (5 retries left).
FAILED - RETRYING: Add trustee user (4 retries left).
FAILED - RETRYING: Add trustee user (3 retries left).
FAILED - RETRYING: Add trustee user (2 retries left).
FAILED - RETRYING: Add trustee user (1 retries left).
fatal: [fidcllabs-oct-02_magnum_container-1bd6f9b4]: FAILED! => {"attempts": 5, "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}

It's the same problem as with Heat here :
https://bugs.launchpad.net/openstack-ansible/+bug/1807346

I have 3 domains, one LDAP/AD for internal use, another internal (SQL) for clients, and the Default one (for admin and service users).

It seems that the ansible module os_user user for Rocky does not handle domain correctly.
https://github.com/ansible/ansible/issues/42901

[Mikael Loaec (mloaec)]

I 've got the same problem with heat.
I've got an LDAP domain and the default one (SQL) and the heat one.

 (item={u'project': u'admin', u'role': u'admin', u'user': u'stack_domain_admin'}) => {"attempts": 5, "changed": false, "item": {"project": "admin", "role": "admin", "user": "stack_domain_admin"}, "msg": "User stack_domain_admin is not valid"}

It try do give role admin to user stack_domain_admin in default domain. But as heat uses its own domain the user stack_domain_admin does not exist in the default domain.

[Dmitriy Rabotyagov (noonedeadpunk)]

I believe this issue should have been fixed for a while (presumably since https://opendev.org/openstack/openstack-ansible-os_heat/commit/7858df55c30e619338e59796c5faef073d5c79bb), as we do define and provision domain for heat stack_domain_admin explicitly now, so assignment should not fail.

But please feel free to bump or open a new report if you still experience issues.