Join Log in
Score:0
jmhal avatar Server

Installing OpenStack with Ansible fails during Keystone playbook on TASK openstack.osa.db_setup

fj flag
jmhal

I am trying to create a two machine deployment following Openstack Ansible Deployment Guide. The two machines are named targethost01 and targethost02, and I am running Ansible from deploymenthost. Every machine has 4-Core CPUs, 8 GB of RAM, and 240 GB SSD. I am using Ubuntu 22.04.1 LTS.

The machine targethost01 has the following network configuration:

network:
  version: 2
  ethernets:
    enp5s0:
      dhcp4: true
    enp6s0: {}
    enp7s0: {}
    enp8s0: {}
    enp9s0: {}
  vlans:
    vlan.10:
        id: 10
        link: enp6s0
        addresses: [ ]
    vlan.20:
        id: 20
        link: enp7s0
        addresses: [ ]
    vlan.30:
        id: 30
        link: enp8s0
        addresses: [ ]
    vlan.40:
        id: 40
        link: enp9s0
        addresses: [ ]
  bridges:
    br-mgmt:
      addresses: [ 172.29.236.101/22  ]
      mtu: 1500
      interfaces:
        - vlan.10
        
    br-storage:
      addresses: [ 172.29.244.101/22  ]
      mtu: 1500
      interfaces:
        - vlan.20
    br-vlan:
      addresses: []
      mtu: 1500
      interfaces:
        - vlan.30
    br-vxlan:
      addresses: [ 172.29.240.101/22  ]
      mtu: 1500
      interfaces:
        - vlan.40

And targethost02 has the following network configuration:

network:
  version: 2
  ethernets:
    enp5s0:
      dhcp4: true
    enp6s0: {}
    enp7s0: {}
    enp8s0: {}
    enp9s0: {}
  vlans:
    vlan.10:
        id: 10
        link: enp6s0
        addresses: [ ]
    vlan.20:
        id: 20
        link: enp7s0
        addresses: [ ]
    vlan.30:
        id: 30
        link: enp8s0
        addresses: [ ]
    vlan.40:
        id: 40
        link: enp9s0
        addresses: [ ]
  bridges:
    br-mgmt:
      addresses: [ 172.29.236.102/22  ]
      mtu: 1500
      interfaces:
        - vlan.10
    br-storage:
      addresses: [ 172.29.244.102/22  ]
      mtu: 1500
      interfaces:
        - vlan.20
    br-vlan:
      addresses: []
      mtu: 1500
      interfaces:
        - vlan.30
    br-vxlan:
      addresses: [ 172.29.240.102/22  ]
      mtu: 1500
      interfaces:
        - vlan.40

On the deploymenthost, /etc/openstack_deploy/openstack_user_config.yml has the following:

---
cidr_networks:
   container: 172.29.236.0/22
   tunnel: 172.29.240.0/22
   storage: 172.29.244.0/22

used_ips:
   - 172.29.236.1
   - "172.29.236.100,172.29.236.200"
   - "172.29.240.100,172.29.240.200"
   - "172.29.244.100,172.29.244.200"

global_overrides:
  internal_lb_vip_address: 172.29.236.101
  external_lb_vip_address: "{{ bootstrap_host_public_address | default(ansible_facts['default_ipv4']['address']) }}"
  management_bridge: "br-mgmt"

  provider_networks:
    - network:
        group_binds:
          - all_containers
          - hosts
        type: "raw"
        container_bridge: "br-mgmt"
        container_interface: "eth1"
        container_type: "veth"
        ip_from_q: "container"
        is_container_address: true
    - network:
        group_binds:
          - glance_api
          - cinder_api
          - cinder_volume
          - nova_compute
        type: "raw"
        container_bridge: "br-storage"
        container_type: "veth"
        container_interface: "eth2"
        container_mtu: "9000"
        ip_from_q: "storage"
    - network:
        group_binds:
          - neutron_linuxbridge_agent
        container_bridge: "br-vxlan"
        container_type: "veth"
        container_interface: "eth10"
        container_mtu: "9000"
        ip_from_q: "tunnel"
        type: "vxlan"
        range: "1:1000"
        net_name: "vxlan"
    - network:
        group_binds:
          - neutron_linuxbridge_agent
        container_bridge: "br-vlan"
        container_type: "veth"
        container_interface: "eth11"
        type: "vlan"
        range: "101:200,301:400"
        net_name: "vlan"
    - network:
         group_binds:
           - neutron_linuxbridge_agent
         container_bridge: "br-vlan"
         container_type: "veth"
         container_interface: "eth12"
         host_bind_override: "eth12"
         type: "flat"
         net_name: "flat"

shared-infra_hosts:
  targethost01:
    ip: 172.29.236.101

repo-infra_hosts:
  targethost01:
    ip: 172.29.236.101

coordination_hosts:
  targethost01:
    ip: 172.29.236.101

os-infra_hosts:
  targethost01:
    ip: 172.29.236.101

identity_hosts:
  targethost01:
    ip: 172.29.236.101

network_hosts:
  targethost01:
    ip: 172.29.236.101

compute_hosts:
   targethost01:
    ip: 172.29.236.101
   targethost02:
     ip: 172.29.236.102

storage-infra_hosts:
  targethost01:
    ip: 172.29.236.101

storage_hosts:
  targethost01:
    ip: 172.29.236.101

Also on the deploymenthost, /etc/openstack_deploy/conf.d/haproxy.yml has the following:

haproxy_hosts:
  targethost01:
    ip: 172.29.236.101

The following two Ansible commands return with unreachable=0 failed=0:

  • # openstack-ansible setup-hosts.yml
  • # openstack-ansible setup-infrastructure.yml

And verifying the database also returns no error:

root@deploymenthost:/opt/openstack-ansible/playbooks# ansible galera_container -m shell \
  -a "mysql -h localhost -e 'show status like \"%wsrep_cluster_%\";'"
Variable files: "-e @/etc/openstack_deploy/user_secrets.yml -e @/etc/openstack_deploy/user_variables.yml "
[WARNING]: Unable to parse /etc/openstack_deploy/inventory.ini as an inventory source
targethost01_galera_container-5aa8474a | CHANGED | rc=0 >>
Variable_name   Value
wsrep_cluster_weight    1
wsrep_cluster_capabilities
wsrep_cluster_conf_id   1
wsrep_cluster_size      1
wsrep_cluster_state_uuid        e7a0c332-97fe-11ed-b0d4-26b30049826d
wsrep_cluster_status    Primary

But when I execute openstack-ansible setup-openstack.yml, I get this:

TASK [os_keystone : Fail if our required secrets are not present] **************
skipping: [targethost01_keystone_container-76e9b31b] => (item=keystone_auth_admin_password)
skipping: [targethost01_keystone_container-76e9b31b] => (item=keystone_container_mysql_password)
skipping: [targethost01_keystone_container-76e9b31b] => (item=keystone_oslomsg_rpc_password)
skipping: [targethost01_keystone_container-76e9b31b] => (item=keystone_oslomsg_notify_password)
skipping: [targethost01_keystone_container-76e9b31b] => (item=keystone_rabbitmq_password)

TASK [os_keystone : Fail if service was deployed using a different installation method] ***

TASK [os_keystone : Gather variables for each operating system] ****************
ok: [targethost01_keystone_container-76e9b31b]

TASK [os_keystone : Gather variables for installation method] ******************
ok: [targethost01_keystone_container-76e9b31b]

TASK [os_keystone : Fact for apache module shibboleth to be installed] *********
ok: [targethost01_keystone_container-76e9b31b]

TASK [os_keystone : Fact for apache module mod_auth_openidc to be installed] ***
ok: [targethost01_keystone_container-76e9b31b]

TASK [include_role : openstack.osa.db_setup] ***********************************

TASK [openstack.osa.db_setup : Create database for service] ********************
failed: [targethost01_keystone_container-76e9b31b -> targethost01_utility_container-dc05dc90(172.29.238.59)] (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}
fatal: [targethost01_keystone_container-76e9b31b -> {{ _oslodb_setup_host }}]: FAILED! => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false}

PLAY RECAP *********************************************************************
targethost01_keystone_container-76e9b31b : ok=33   changed=0    unreachable=0    failed=1    skipped=8    rescued=0    ignored=0
targethost01_utility_container-dc05dc90 : ok=3    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0



EXIT NOTICE [Playbook execution failure] **************************************
===============================================================================

First, how can I disable the "censored" warning? I wonder if the uncensored running could give me more clues. Second, it appears to be a problem creating the database (keystone db sync?) How can I test the database execution inside the LXC containers? I tried to log into one of containers and ping the hosts IP and it works, so they have connectivity. I set up the passwords with:

# cd /opt/openstack-ansible
# ./scripts/pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml

Any help?

Best Regards.

263
0 + 1
us flag
eblock
The error message is quite clear, somewhere you have `no_log: true` which prevents more detailed information.
0
Reply
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.