tripleo-create-admin failing to retrieve public key

Bug #1824326 reported by Jose Luis Franco
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Medium
Kamil Sambor

Bug Description

The job networking-ovn-tripleo-c7-s003-oooq-containers used to gate neutron-ovn changes is failing in the following task:

2019-04-09 13:41:04 | TASK [tripleo-create-admin : append tripleo-admin public key to authorized_keys] ***
2019-04-09 13:41:04 | task path: /usr/share/ansible/roles/tripleo-create-admin/tasks/create_user.yml:25
2019-04-09 13:41:04 | Tuesday 09 April 2019 13:41:03 +0000 (0:00:00.504) 0:05:20.920 *********
2019-04-09 13:41:04 | [WARNING]: Unable to find '/home/tripleo-admin/.ssh/id_rsa.pub' in expected
2019-04-09 13:41:04 | paths (use -vvvvv to see paths)
2019-04-09 13:41:04 | fatal: [centos-7-rax-iad-0004944854]: FAILED! => {}
2019-04-09 13:41:04 |
2019-04-09 13:41:04 | MSG:
2019-04-09 13:41:04 |
2019-04-09 13:41:08 | An unhandled exception occurred while running the lookup plugin 'file'. Error was a <class 'ansible.errors.AnsibleError'>, original messException occured while running the command
2019-04-09 13:41:08 | Traceback (most recent call last):
2019-04-09 13:41:08 | File "/usr/lib/python2.7/site-packages/tripleoclient/command.py", line 30, in run
2019-04-09 13:41:08 | super(Command, self).run(parsed_args)
2019-04-09 13:41:08 | File "/usr/lib/python2.7/site-packages/osc_lib/command/command.py", line 41, in run
2019-04-09 13:41:08 | return super(Command, self).run(parsed_args)
2019-04-09 13:41:08 | File "/usr/lib/python2.7/site-packages/cliff/command.py", line 184, in run
2019-04-09 13:41:08 | return_code = self.take_action(parsed_args) or 0
2019-04-09 13:41:08 | File "/usr/lib/python2.7/site-packages/tripleoclient/v1/overcloud_deploy.py", line 949, in take_action
2019-04-09 13:41:08 | verbosity=self.app_args.verbose_level)
2019-04-09 13:41:08 | File "/usr/lib/python2.7/site-packages/tripleoclient/workflows/deployment.py", line 327, in config_download
2019-04-09 13:41:08 | raise exceptions.DeploymentError("Overcloud configuration failed.")
2019-04-09 13:41:08 | DeploymentError: Overcloud configuration failed.
2019-04-09 13:41:08 | Overcloud configuration failed.
2019-04-09 13:41:08 | END return value: 1
2019-04-09 13:41:08 | age: could not locate file in lookup: /home/tripleo-admin/.ssh/id_rsa.pub

Log: http://logs.openstack.org/17/651217/1/check/networking-ovn-tripleo-c7-s003-oooq-containers/07b97ae/logs/undercloud/home/zuul/overcloud_deploy.log.txt.gz#_2019-04-09_13_41_04

Job logs: http://logs.openstack.org/17/651217/1/check/networking-ovn-tripleo-c7-s003-oooq-containers/07b97ae/

Changed in tripleo:
status: Triaged → New
assignee: Jose Luis Franco (jfrancoa) → nobody
Changed in tripleo:
assignee: nobody → Steve Baker (steve-stevebaker)
Changed in tripleo:
status: New → Triaged
Revision history for this message
Jose Luis Franco (jfrancoa) wrote :

It looks to me that the issue is that even though the tripleo-admin user exist on the undercloud, it's not created in the mistral_executor container. Therefore, when binding the undercloud's /home/tripleo-admin to /home/tripleo-admin in the container the folder will be owned by the user 1002 group 1003. As the Ansible deployment tasks are executed from mistral_executor as the mistral user and the lookup is done locally, the mistral user can't access to /home/tripleo-admin/.ssh/id_rsa.pub and the task fails.

Revision history for this message
Jose Luis Franco (jfrancoa) wrote :
Changed in tripleo:
milestone: stein-rc1 → train-1
Kamil Sambor (ksambor)
Changed in tripleo:
assignee: Steve Baker (steve-stevebaker) → Kamil Sambor (ksambor)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-common (master)

Fix proposed to branch: master
Review: https://review.opendev.org/655846

Changed in tripleo:
status: Triaged → In Progress
Revision history for this message
Andreas Jaeger (jaegerandi) wrote :

Note that this bug is blocking networking-ovn stable/stein merges like https://review.opendev.org/#/c/654575/ .

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-common (master)

Reviewed: https://review.opendev.org/655846
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=136d8c752cf5255474981b94b8f0c0f2d82b9c8b
Submitter: Zuul
Branch: master

commit 136d8c752cf5255474981b94b8f0c0f2d82b9c8b
Author: Kamil Sambor <email address hidden>
Date: Fri Apr 26 11:16:01 2019 +0200

    Fix privileges in task fro tripleo-admin

    Change-Id: I9024cfff5c6fb3b7fad6d39992dc1e9bb3128b0b
    Closes-Bug: 1824326

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-common (stable/stein)

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/657407

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on tripleo-common (stable/stein)

Change abandoned by Emilien Macchi (<email address hidden>) on branch: stable/stein
Review: https://review.opendev.org/657407

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-common (master)

Fix proposed to branch: master
Review: https://review.opendev.org/657430

Revision history for this message
Andreas Jaeger (jaegerandi) wrote :

https://review.opendev.org/#/c/654575/ is still failing networking-ovn-tripleo-c7-s003-oooq-containers on stable/stein

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.opendev.org/657541

tags: added: stein-backport-potential
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.opendev.org/657541
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=d2fae913d9ec15ba9272077e370a95595335abf9
Submitter: Zuul
Branch: master

commit d2fae913d9ec15ba9272077e370a95595335abf9
Author: Kamil Sambor <email address hidden>
Date: Tue May 7 10:01:18 2019 +0200

    Copy keys for tripleo-admin user

    Change-Id: Iab64473d2b5ccc910d226fc6bec06c73f43515b8
    Partial-Bug: #1824326

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/stein)

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/657642

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.opendev.org/657742

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Fix proposed to branch: master
Review: https://review.opendev.org/657744

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on tripleo-heat-templates (master)

Change abandoned by Kamil Sambor (<email address hidden>) on branch: master
Review: https://review.opendev.org/657742

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (master)

Fix proposed to branch: master
Review: https://review.opendev.org/657831

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (stable/stein)

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/658140

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/stein)

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/658141

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-tripleoclient (master)

Reviewed: https://review.opendev.org/657831
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=0228a39e157ee5fa8fbdfa057c713783cf502fc6
Submitter: Zuul
Branch: master

commit 0228a39e157ee5fa8fbdfa057c713783cf502fc6
Author: Kamil Sambor <email address hidden>
Date: Wed May 8 16:42:44 2019 +0200

    Increase max_nested_stack_depth for heat

    As a folow up patch we probably should add posibilities
    to configure heat launcher via client

    Change-Id: I229ed532870b8729c4933665c8ca15ad34998ff9
    Partial-Bug: #1824326

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.opendev.org/657744
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=485b3c96446af98ba6fd06fd863de4930823aacf
Submitter: Zuul
Branch: master

commit 485b3c96446af98ba6fd06fd863de4930823aacf
Author: Kamil Sambor <email address hidden>
Date: Wed May 8 09:25:44 2019 +0200

    Remove hardcoded RabbitMQService

    Change-Id: I42f99eb17520b8e04fe85fa69df4cdee753bf6af
    Depends-On: https://review.opendev.org/#/c/657831/
    Partial-Bug: #1824326

tags: added: in-stable-stein
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (stable/stein)

Reviewed: https://review.opendev.org/657642
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=5715c98b54ad5b305429b22cc82c10e2def55524
Submitter: Zuul
Branch: stable/stein

commit 5715c98b54ad5b305429b22cc82c10e2def55524
Author: Kamil Sambor <email address hidden>
Date: Tue May 7 10:01:18 2019 +0200

    Copy keys for tripleo-admin user

    Change-Id: Iab64473d2b5ccc910d226fc6bec06c73f43515b8
    Partial-Bug: #1824326
    (cherry picked from commit d2fae913d9ec15ba9272077e370a95595335abf9)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-common (master)

Reviewed: https://review.opendev.org/657430
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=228fadca37cc7ba1418ccf3b53dc063781fd2ad2
Submitter: Zuul
Branch: master

commit 228fadca37cc7ba1418ccf3b53dc063781fd2ad2
Author: Kamil Sambor <email address hidden>
Date: Mon May 6 20:43:52 2019 +0200

    Add task to read remote pub key

    Lookups occur on the local machine, not on the remote.
    This is reasone why we need to read first key

    Depends-On: https://review.opendev.org/#/c/657541/
    Change-Id: I80074cad76d989c3a6c2fa1615b621c08503855f
    Closes-Bug: 1824326

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on tripleo-heat-templates (stable/stein)

Change abandoned by Kamil Sambor (<email address hidden>) on branch: stable/stein
Review: https://review.opendev.org/658141
Reason: this changes already applied in stein branch

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-common (stable/stein)

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/658745

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-tripleoclient (stable/stein)

Reviewed: https://review.opendev.org/658140
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=94645382b1d0868d66f6a33b72f51a6ec99cd1de
Submitter: Zuul
Branch: stable/stein

commit 94645382b1d0868d66f6a33b72f51a6ec99cd1de
Author: Kamil Sambor <email address hidden>
Date: Wed May 8 16:42:44 2019 +0200

    Increase max_nested_stack_depth for heat

    As a folow up patch we probably should add posibilities
    to configure heat launcher via client

    Change-Id: I229ed532870b8729c4933665c8ca15ad34998ff9
    Partial-Bug: #1824326
    (cherry picked from commit 0228a39e157ee5fa8fbdfa057c713783cf502fc6)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-common (stable/stein)

Reviewed: https://review.opendev.org/658745
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=4ed868852e44fbb44d1c6afa9e4f81221f497f82
Submitter: Zuul
Branch: stable/stein

commit 4ed868852e44fbb44d1c6afa9e4f81221f497f82
Author: Kamil Sambor <email address hidden>
Date: Mon May 6 20:43:52 2019 +0200

    Add task to read remote pub key

    Lookups occur on the local machine, not on the remote.
    This is reasone why we need to read first key

    Depends-On: https://review.opendev.org/#/c/657541/
    Change-Id: I80074cad76d989c3a6c2fa1615b621c08503855f
    Closes-Bug: 1824326
    (cherry picked from commit 228fadca37cc7ba1418ccf3b53dc063781fd2ad2)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-common 11.0.0

This issue was fixed in the openstack/tripleo-common 11.0.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-common 10.8.0

This issue was fixed in the openstack/tripleo-common 10.8.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.