Broken CI: python-pysaml2 is always re-installed

[Sofer Athlan-Guyot]

During keystone server running with Apache/WSGI as Identity Provider acceptance test for centos-7, the python-pysaml2 seems to be re-installed twice!

The relevent logs are there:

    http://logs.openstack.org/10/335910/1/check/gate-puppet-keystone-puppet-beaker-rspec-centos-7/d6543a7/console.html#_2016-06-30_10_04_55_690162

    http://logs.openstack.org/10/335910/1/check/gate-puppet-keystone-puppet-beaker-rspec-centos-7/d6543a7/console.html#_2016-06-30_10_06_44_927686

[Sofer Athlan-Guyot (sofer-athlan-guyot)]

We can see the package installed there:

    http://logs.openstack.org/10/335910/1/check/gate-puppet-keystone-puppet-beaker-rspec-centos-7/d6543a7/logs/syslog.txt.gz#_Jun_30_10_01_45

[Sofer Athlan-Guyot (sofer-athlan-guyot)]

From #rdo channel, it seems that something is weird we the repo and python-setuptools has kind of the same issue.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/336048
Committed: https://git.openstack.org/cgit/openstack/puppet-keystone/commit/?id=84e6682312a5e6f2b67066b7f3d78d73a0d955cd
Submitter: Jenkins
Branch: master

commit 84e6682312a5e6f2b67066b7f3d78d73a0d955cd
Author: Sofer Athlan-Guyot <email address hidden>
Date: Thu Jun 30 16:19:13 2016 +0200

    Allow virtual package for python-pysaml2

    python-pysaml2 has become a virtual package. Force it to true.

    Change-Id: Ia3aaa6fb62ca1b78f113bfe76cf701ca162a4383
    Closes-Bug: 1597753

[Sofer Athlan-Guyot (sofer-athlan-guyot)]

For the record, RDO packaging provides virtual packages. Puppet 3 is
setting allow_virtual to False. This cause idempotency problem and
raises this kind of error

     1) keystone server running with Apache/WSGI as Identity Provider default parameters should work with no errors
        Failure/Error: apply_manifest(pp, :catch_changes => true)
        Beaker::Host::CommandFailure:
          Host 'centos-70-x64' exited with 2 running:
           puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest.pp.7Lg1Xu
          Last 10 lines of output were:
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [mNotice: Compiled catalog for centos-7-rax-dfw-2116183 in environment production in 5.55 seconds[0m
           [0;32mInfo: Applying configuration version '1467281188'[0m
           [mNotice: /Stage[main]/Keystone::Federation::Identity_provider/Package[python-pysaml2]/ensure: created[0m
           [mNotice: Finished catalog run in 57.53 seconds[0m

where the package is installed again.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/puppet-keystone 9.1.0 release.