<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I am trying to set up Tripleo for Newton (why Newton you ask? The
RHCSA/RHOSP exam is based on Newton). Unexpectedly, I run into a
brick wall when deploying the undercloud. <b>Any suggestions how
to troubleshoot this?</b><br>
</p>
<p>The last messages are:<tt><br>
</tt></p>
<blockquote>
<p><tt>puppet apply exited with exit code 6<br>
+ '[' 6 '!=' 2 -a 6 '!=' 0 ']'<br>
+ exit 6<br>
[2018-11-05 00:47:13,779] (os-refresh-config) [ERROR] during
configure phase. [Command '['dib-run-parts',
'/usr/libexec/os-refresh-config/configure.d']' returned
non-zero exit status 1]<br>
<br>
[2018-11-05 00:47:13,779] (os-refresh-config) [ERROR]
Aborting...<br>
Traceback (most recent call last):<br>
File "<string>", line 1, in <module><br>
File
"/usr/lib/python2.7/site-packages/instack_undercloud/undercloud.py",
line 1258, in install<br>
_run_orc(instack_env)<br>
File
"/usr/lib/python2.7/site-packages/instack_undercloud/undercloud.py",
line 1022, in _run_orc<br>
_run_live_command(args, instack_env, 'os-refresh-config')<br>
File
"/usr/lib/python2.7/site-packages/instack_undercloud/undercloud.py",
line 522, in _run_live_command<br>
raise RuntimeError('%s failed. See log for details.' %
name)<br>
RuntimeError: os-refresh-config failed. See log for details.<br>
</tt></p>
</blockquote>
<p>Neither /var/log nor /opt have any trace of os-refresh-config. <b>Where
should I look for log? </b>And<b> </b><b>where do I find more
information about the </b><b><i>puppet apply </i></b><b>error?
/var/log/puppet is empty.</b> </p>
<p>~/.instack/install-undercloud.log contains one other message
labeled with "error". Not sure if it's relevant<tt>:</tt><tt><br>
</tt></p>
<blockquote><tt>Error:
/Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could
not evaluate: Execution of '/bin/openstack token issue --format
value' returned 1: Certificate did not match expected hostname:
192.168.126.2. Certificate: {'subjectAltName': (('DNS',
'192.168.126.2'),), 'notBefore': u'Nov 4 15:04:13 2018 GMT',
'serialNumber': u'03553ED8BBF040FEAF44FE8C95A45CB2', 'notAfter':
'Nov 4 14:58:20 2019 GMT', 'version': 3L, 'subject':
((('commonName', u'192.168.126.2'),),), 'issuer':
((('commonName', u'Local Signing Authority'),), (('commonName',
u'03553ed8-bbf040fe-af44fe8c-95a45cb1'),))}<br>
SSL exception connecting to
<a class="moz-txt-link-freetext" href="https://192.168.126.2:13000/v3/auth/tokens">https://192.168.126.2:13000/v3/auth/tokens</a>: <b>hostname
'192.168.126.2' doesn't match '192.168.126.2'</b> (tried 21,
for a total of 170 seconds)^[[0m<br>
</tt></blockquote>
<p>So it seems that hostname 192.168.126.2 doesn't match
192.168.126.2. <b>How can I convince SSL that they do actually
match?</b> <br>
</p>
<p>To get to this point, I followed the steps in the <a
moz-do-not-send="true"
href="http://tripleo.org/install/installation/installation.html#installing-the-undercloud">Tripleo
install guide</a>. The undercloud.conf is almost verbatim from <a
moz-do-not-send="true"
href="https://keithtenzer.com/2017/04/20/red-hat-openstack-platform-10-newton-installation-and-configuration-guide/">Keith
Tenzer's blog</a>:</p>
<blockquote>
<p><tt>[DEFAULT]</tt><tt><br>
</tt><tt><br>
</tt><tt># local interface is connected to the provisioning
network</tt><tt><br>
</tt><tt># which is used to PXE-install the overcloud nodes</tt><tt><br>
</tt><tt>local_interface = eth0</tt><tt><br>
</tt><tt>local_ip = 192.168.126.1/24</tt><tt><br>
</tt><tt>undercloud_public_vip = 192.168.126.2</tt><tt><br>
</tt><tt>undercloud_admin_vip = 192.168.126.3</tt><tt><br>
</tt><tt><br>
</tt><tt>masquerade_network = 192.168.126.0/24</tt><tt><br>
</tt><tt>dhcp_start = 192.168.126.100</tt><tt><br>
</tt><tt>dhcp_end = 192.168.126.150</tt><tt><br>
</tt><tt>network_cidr = 192.168.126.0/24</tt><tt><br>
</tt><tt>network_gateway = 192.168.126.1</tt><tt><br>
</tt><tt>inspection_iprange = 192.168.126.30,192.168.126.99</tt><tt><br>
</tt><tt>generate_service_certificate = true</tt><tt><br>
</tt><tt>certificate_generation_ca = local</tt><br>
<br>
</p>
</blockquote>
</body>
</html>