build shaker image step is failing on undercloud created by undercloud

[chandan kumar]

I am installing browbeat on undercloud which is deployed using tripleo-quickstart on centos 7 using Mitaka release on 32 GB machine.

While running this step: ansible-playbook -i hosts install/shaker_build.yml

TASK [build shaker image] ******************************************************
fatal: [undercloud]: FAILED! => {"changed": true, "cmd": "source /home/stack/overcloudrc; source /home/stack/shaker-venv/bin/activate; shaker-image-builder --flavor-name m1.small --image-builder-template /home/stack/shaker-venv/lib/python2.7/site-packages/shaker/resources/image_builder_templates/centos.yaml --dns-nameservers 8.8.8.8 --os-region-name regionOne", "delta": "0:00:00.697416", "end": "2016-11-15 07:14:25.424351", "failed": true, "failed_when_result": true, "rc": 1, "start": "2016-11-15 07:14:24.726935", "stderr": "", "stdout": "2016-11-15 07:14:25.249 16176 INFO shaker.engine.utils [-] Logging enabled\n2016-11-15 07:14:25.385 16176 WARNING keystoneauth.identity.generic.base [-] Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.\n2016-11-15 07:14:25.400 16176 ERROR shaker.engine.image_builder [-] Failed to connect to OpenStack: SSL exception connecting to https://10.0.0.5:13000/v2.0/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765). Please verify parameters: {'os_insecure': False, 'os_cacert': None, 'auth': {'username': 'admin', 'tenant_name': 'admin', 'password': 'KWAQj8HCH7kqxCcZt88NR6VJ6', 'auth_url': 'https://10.0.0.5:13000/v2.0'}, 'os_region_name': 'regionOne'}", "stdout_lines": ["2016-11-15 07:14:25.249 16176 INFO shaker.engine.utils [-] Logging enabled", "2016-11-15 07:14:25.385 16176 WARNING keystoneauth.identity.generic.base [-] Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.", "2016-11-15 07:14:25.400 16176 ERROR shaker.engine.image_builder [-] Failed to connect to OpenStack: SSL exception connecting to https://10.0.0.5:13000/v2.0/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765). Please verify parameters: {'os_insecure': False, 'os_cacert': None, 'auth': {'username': 'admin', 'tenant_name': 'admin', 'password': 'KWAQj8HCH7kqxCcZt88NR6VJ6', 'auth_url': 'https://10.0.0.5:13000/v2.0'}, 'os_region_name': 'regionOne'}"], "warnings": []}
 to retry, use: --limit @/home/stack/ops/browbeat/ansible/install/shaker_build.retry

PLAY RECAP *********************************************************************
undercloud : ok=1 changed=0 unreachable=0 failed=1

Any pointer to fix it?

[Justin Kilpatrick (jkilpatr)]

are you using ssl endpoints?

On Tue, Nov 15, 2016 at 2:47 AM, chandan kumar <email address hidden> wrote:

> Public bug reported:
>
> I am installing browbeat on undercloud which is deployed using tripleo-
> quickstart on centos 7 using Mitaka release on 32 GB machine.
>
> While running this step: ansible-playbook -i hosts
> install/shaker_build.yml
>
> TASK [build shaker image] ******************************
> ************************
> fatal: [undercloud]: FAILED! => {"changed": true, "cmd": "source
> /home/stack/overcloudrc; source /home/stack/shaker-venv/bin/activate;
> shaker-image-builder --flavor-name m1.small --image-builder-template
> /home/stack/shaker-venv/lib/python2.7/site-packages/
> shaker/resources/image_builder_templates/centos.yaml --dns-nameservers
> 8.8.8.8 --os-region-name regionOne", "delta": "0:00:00.697416", "end":
> "2016-11-15 07:14:25.424351", "failed": true, "failed_when_result": true,
> "rc": 1, "start": "2016-11-15 07:14:24.726935", "stderr": "", "stdout":
> "2016-11-15 07:14:25.249 16176 INFO shaker.engine.utils [-] Logging
> enabled\n2016-11-15 07:14:25.385 16176 WARNING
> keystoneauth.identity.generic.base [-] Discovering versions from the
> identity service failed when creating the password plugin. Attempting to
> determine version from URL.\n2016-11-15 07:14:25.400 16176 ERROR
> shaker.engine.image_builder [-] Failed to connect to OpenStack: SSL
> exception connecting to https://10.0.0.5:13000/v2.0/tokens: [SSL:
> CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765). Please
> verify parameters: {'os_insecure': False, 'os_cacert': None, 'auth':
> {'username': 'admin', 'tenant_name': 'admin', 'password':
> 'KWAQj8HCH7kqxCcZt88NR6VJ6', 'auth_url': 'https://10.0.0.5:13000/v2.0'},
> 'os_region_name': 'regionOne'}", "stdout_lines": ["2016-11-15 07:14:25.249
> 16176 INFO shaker.engine.utils [-] Logging enabled", "2016-11-15 07:14:25.385
> 16176 WARNING keystoneauth.identity.generic.base [-] Discovering versions
> from the identity service failed when creating the password plugin.
> Attempting to determine version from URL.", "2016-11-15 07:14:25.400 16176
> ERROR shaker.engine.image_builder [-] Failed to connect to OpenStack: SSL
> exception connecting to https://10.0.0.5:13000/v2.0/tokens: [SSL:
> CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765). Please
> verify parameters: {'os_insecure': False, 'os_cacert': None, 'auth':
> {'username': 'admin', 'tenant_name': 'admin', 'password':
> 'KWAQj8HCH7kqxCcZt88NR6VJ6', 'auth_url': 'https://10.0.0.5:13000/v2.0'},
> 'os_region_name': 'regionOne'}"], "warnings": []}
> to retry, use: --limit @/home/stack/ops/browbeat/
> ansible/install/shaker_build.retry
>
> PLAY RECAP ************************************************************
> *********
> undercloud : ok=1 changed=0 unreachable=0 failed=1
>
>
> Any pointer to fix it?
>
> ** Affects: openstack-browbeat
> Importance: Undecided
> Status: New
>
> --
> You received this bug notification because you are subscribed to
> openstack-browbeat.
> Matching subscriptions: Browbeat
> https://bugs.launchpad.net/bugs/1641860
>
> Title:
> build shaker image st...

[Leif Madsen (leifmadsen)]

Is your openstack network operational as well and able to resolve domains via 8.8.8.8? Typically the shake-image build fails because the virtual machine that is instantiated for browbeat needs to have external network access.