FreeIPA failed to connect LDAP server

https://github.com/openstack/tripleo-quickstart-extras/blob/master/roles/freeipa-setup/templates/deploy_freeipa.sh.j2#L60
and
https://github.com/openstack/tripleo-quickstart-extras/blob/master/roles/ipa-multinode/tasks/ipaserver-subnode-install.yml#L86

both run ' ipa-server-install' but with different options.

The multinode one does not fail intermittently like the OVB one.

Latest failure on master

https://logserver.rdoproject.org/openstack-periodic-integration-main/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-master/23a8417/job-output.txt

~~~
2022-11-21 21:25:50.997134 | primary | TASK [freeipa-setup : Deploy FreeIPA] ******************************************
2022-11-21 21:25:50.997151 | primary | Monday 21 November 2022 21:25:50 -0500 (0:00:02.349) 0:05:17.157 *******
2022-11-21 21:31:01.705750 | primary | fatal: [supplemental]: FAILED! => {"changed": true, "cmd": "~cloud-user/deploy_freeipa.sh &> ~cloud-user/deploy_freeipa.log", "delta": "0:05:08.151002", "end": "2022-11-21 21:31:00.196060", "msg": "non-zero return code", "rc": 1, "start": "2022-11-21 21:25:52.045058", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}
2022-11-21 21:31:01.707110 | primary |
~~~

https://logserver.rdoproject.org/openstack-periodic-integration-main/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-master/23a8417/logs/supplemental/home/cloud-user/deploy_freeipa.log.txt.gz
~~~
  [17/30]: requesting RA certificate from CA
  [error] RuntimeError: Certificate issuance failed (CA_UNREACHABLE: Error 7 connecting to http://ipa.ooo.test:8080/ca/ee/ca//profileSubmit: Couldn't connect to server.)
Certificate issuance failed (CA_UNREACHABLE: Error 7 connecting to http://ipa.ooo.test:8080/ca/ee/ca//profileSubmit: Couldn't connect to server.)
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
~~~~

Zed is also failing on the same error:

https://logserver.rdoproject.org/openstack-periodic-integration-zed-centos9/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-zed/7648fa0/logs/supplemental/home/cloud-user/deploy_freeipa.log.txt.gz

Considering two jobs from one buildset:

Multinode-ipa job:

https://logserver.rdoproject.org/openstack-periodic-integration-main/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-standalone-on-multinode-ipa-master/a783e4d/logs/38.102.83.198/var/log/extra/package-list-installed.txt.gz

fs064:

https://logserver.rdoproject.org/openstack-periodic-integration-main/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-master/23a8417/logs/supplemental/var/log/extra/package-list-installed.txt.gz

rpmlist diff of the same jobs above:

https://www.diffchecker.com/gFzb2RGA

The issue appears to be OOM killer:

https://logserver.rdoproject.org/openstack-periodic-integration-main/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-master/23a8417/logs/supplemental/var/log/extra/journal_errors.txt.gz

java is pki-ca (dogtag) and ns-ldap is directory server. Both are killed about the same time that the ipa installer fails to connect and bails out.

My guess is that multinode supplemental node is defined to be bigger.

https://bugs.launchpad.net/tripleo/+bug/1997539 was merged. Watching to see if results improve here.

As per fs039/64 build history, No more ipa deploy failure since [1] merged in last 24 hours, closing this bug for now.

[0]

~~~
https://review.rdoproject.org/zuul/builds?job_name=periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset035-master&skip=0
https://review.rdoproject.org/zuul/builds?job_name=periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset035-zed&skip=0
https://review.rdoproject.org/zuul/builds?job_name=periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-master&skip=0
https://review.rdoproject.org/zuul/builds?job_name=periodic-tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset064-zed&skip=0
~~~

[1] https://review.rdoproject.org/r/c/config/+/46173