Heat playbook error

Bug #1810961 reported by YG Kumar
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
openstack-ansible
New
Undecided
Unassigned

Bug Description

Hi,

I am trying to run the os-heat playbook and it is reporting the following error:
-----------

TASK [os_heat : Add service user to roles] ******************************************************************************************************************
changed: [c1b_heat_api_container-45a01df4 -> localhost] => (item={u'project': u'service', u'role': u'admin', u'user': u'heat'})
changed: [c1b_heat_api_container-45a01df4 -> localhost] => (item={u'project': u'service', u'role': u'heat_stack_owner', u'user': u'heat'})
changed: [c1b_heat_api_container-45a01df4 -> localhost] => (item={u'project': u'service', u'role': u'heat_stack_owner', u'user': u'admin'})
FAILED - RETRYING: Add service user to roles (5 retries left).
FAILED - RETRYING: Add service user to roles (4 retries left).
FAILED - RETRYING: Add service user to roles (3 retries left).
FAILED - RETRYING: Add service user to roles (2 retries left).
FAILED - RETRYING: Add service user to roles (1 retries left).
failed: [c1b_heat_api_container-45a01df4 -> localhost] (item={u'project': u'admin', u'role': u'admin', u'user': u'stack_domain_admin'}) => {"attempts": 5, "$
hanged": false, "item": {"project": "admin", "role": "admin", "user": "stack_domain_admin"}, "msg": "User stack_domain_admin is not valid"}

PLAY RECAP *************************************************************************************************************************************************$
c1b_heat_api_container-45a01df4 : ok=56 changed=6 unreachable=0 failed=1
----------------------

How to solve this ?

Revision history for this message
Jean-Philippe Evrard (jean-philippe-evrard) wrote :

Could you give us your overrides? (user_*.yml files, and maybe your openstack_user_config?)

It seems to run fine in gates, so it must be a local configuration issue.

Revision history for this message
YG Kumar (ygk-kmr) wrote :

Hi,

I have attached the files.

Revision history for this message
YG Kumar (ygk-kmr) wrote :

Added the other config file as well

Revision history for this message
YG Kumar (ygk-kmr) wrote :

Hi All,

The culprit seems to be the LDAP config in the user_variable.yml file. Removing the LDAP config fixed the issue. Please note down this bug. Somehow creating a LDAP keystone domain is not working well with the heat playbook.

Revision history for this message
Guilherme Steinmuller Pimentel (guilhermesp) wrote :

coud you try to cherry pick that change and run the playbook with your LDAP config?
https://review.openstack.org/#/c/636630/

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.