Lon hit this issue and I can reproduce it:
2021-10-19 18:12:02.562474 | | WARNING | ERROR: Can't run container container-puppet-rabbitmq
stderr: + /usr/bin/puppet apply --summarize --detailed-exitcodes --color=false --modulepath=/etc/puppet/modules:/usr/share/openstack-puppet/modules --tags '"file,file_line,concat,augeas,cron"' /etc/config.pp
+ logger -s -t puppet-user
<13>Oct 19 18:11:57 puppet-user: Warning: /etc/puppet/hiera.yaml: Use of 'hiera.yaml' version 3 is deprecated. It should be converted to version 5
<13>Oct 19 18:12:02 puppet-user: (file: /etc/puppet/hiera.yaml)
<13>Oct 19 18:12:02 puppet-user: Warning: Undefined variable '::deploy_config_name';
<13>Oct 19 18:12:02 puppet-user: (file & line not available)
<13>Oct 19 18:12:02 puppet-user: Warning: The function 'hiera' is deprecated in favor of using 'lookup'. See https://puppet.com/docs/puppet/7.10/deprecated_language.html
<13>Oct 19 18:12:02 puppet-user: (file & line not available)
<13>Oct 19 18:12:02 puppet-user: Error: Evaluation Error: Error while evaluating a Resource Statement, Class[Rabbitmq]:
<13>Oct 19 18:12:02 puppet-user: parameter 'ssl_cacert' expects a Stdlib::Absolutepath = Variant[Stdlib::Windowspath = Pattern[/\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\
\/]+)).*\z/], Stdlib::Unixpath = Pattern[/\A\/([^\n\/\0]+\/*)*\z/]] value, got String
<13>Oct 19 18:12:02 puppet-user: parameter 'ssl_management_cacert' expects a Stdlib::Absolutepath = Variant[Stdlib::Windowspath = Pattern[/\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\
?[\\\/][^\\\/]+)).*\z/], Stdlib::Unixpath = Pattern[/\A\/([^\n\/\0]+\/*)*\z/]] value, got String (file: /etc/puppet/modules/tripleo/manifests/profile/base/rabbitmq.pp, line: 243, column: 7) on node undercloud-0.ho
me.arpa
+ rc=1
+ '[' false = false ']'
+ set +x
2021-10-19 18:12:02.563524 | 52540085-7238-d687-4d49-0000000010cd | FATAL | Manage Puppet containers (generate config) for step 1 | undercloud-0 | error={"changed": false, "msg": "Failed containers: container
-puppet-rabbitmq"}
2021-10-19 18:12:02.564039 | 52540085-7238-d687-4d49-0000000010cd | TIMING | Manage Puppet containers (generate config) for step 1 | undercloud-0 | 0:03:58.858023 | 15.44s
The undercloud.conf that triggers this issue is:
[DEFAULT]
overcloud_domain_name = home.arpa
undercloud_hostname = undercloud-0.home.arpa
undercloud_ntp_servers=clock1.rdu2.redhat.com
undercloud_timezone = UTC
container_images_file=/home/stack/containers-prepare-parameter.yaml
undercloud_service_certificate = /etc/pki/instack-certs/undercloud.pem
local_interface = enp2s0
local_ip = 192.168.24.1/24
undercloud_public_host = 192.168.24.2
undercloud_admin_host = 192.168.24.3
subnets = ctlplane-subnet
local_subnet = ctlplane-subnet
[ctlplane-subnet]
local_subnet = ctlplane-subnet
cidr = 192.168.24.0/24
dhcp_start = 192.168.24.160
dhcp_end = 192.168.24.170
gateway = 192.168.24.1
inspection_iprange = 192.168.24.171,192.168.24.175
masquerade = true
The issue is that v1/undercloud_
env_data[
This then gets passed to the rabbitmq.yaml file:
rabbitmq:
rabbitmq:
and so we have the the following hiera keys:
/etc/puppet/
/etc/puppet/
/etc/puppet/
/etc/puppet/
/etc/puppet/
/etc/puppet/
/etc/puppet/
Which then confuses the puppet-rabbitmq module. So fundamentally we always pushed a configuration that only now fails since we started using the proper ca, because the empty cacert does not validate in puppet-rabbitmq.