[kolla][ssl] Deploy third-party SSL for HAProxy

Satish Patel satish.txt at gmail.com
Thu Sep 29 09:32:04 UTC 2022


Hi Radosław,

Following error encounter if i turn on above 3 lines to implement SSL. if i
remove then the error disappears.
https://paste.opendev.org/show/bOqOAQyqni0nJcWbUuv9/

TASK [nova-cell : Waiting for nova-compute services to register
themselves] ******************************************************************************************************
skipping: [kolla-comp-2]
skipping: [kolla-infra-1]
fatal: [kolla-comp-1 -> kolla-infra-1]: FAILED! => {"msg": "The
conditional check '(nova_compute_services.stdout | from_json |
map(attribute='Host') | list) is
superset(expected_compute_service_hosts)' failed. The error was:
Expecting value: line 1 column 1 (char 0)"}

TASK [nova-cell : Fail if nova-compute service failed to register]
***************************************************************************************************************
fatal: [kolla-comp-2]: FAILED! => {"msg": "The conditional check
'any_failed_services or (nova_compute_registration_fatal | bool and\n
failed_compute_service_hosts | length > 0)' failed. The error was:
error while evaluating conditional (any_failed_services or
(nova_compute_registration_fatal | bool and\n
failed_compute_service_hosts | length > 0)): {{ ansible_facts.nodename
in failed_compute_service_hosts or\n   (ansible_facts.hostname ~
\"-ironic\") in failed_compute_service_hosts }}: {{
expected_compute_service_hosts |
difference(nova_compute_service_hosts) | list }}: {{
hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n
from_json |\n   map(attribute='Host') |\n   list }}: Unable to look up
a name or access an attribute in template string ({{
hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n
from_json |\n   map(attribute='Host') |\n   list }}).\nMake sure your
variable name does not contain invalid characters like '-': the JSON
object must be str, bytes or bytearray, not AnsibleUndefined\n\nThe
error appears to be in
'/root/venv-kolla/share/kolla-ansible/ansible/roles/nova-cell/tasks/wait_discover_computes.yml':
line 46, column 7, but may\nbe elsewhere in the file depending on the
exact syntax problem.\n\nThe offending line appears to be:\n\n    #
that failed to register.\n    - name: Fail if nova-compute service
failed to register\n      ^ here\n"}
fatal: [kolla-infra-1]: FAILED! => {"msg": "The conditional check
'any_failed_services or (nova_compute_registration_fatal | bool and\n
failed_compute_service_hosts | length > 0)' failed. The error was:
error while evaluating conditional (any_failed_services or
(nova_compute_registration_fatal | bool and\n
failed_compute_service_hosts | length > 0)): {{ ansible_facts.nodename
in failed_compute_service_hosts or\n   (ansible_facts.hostname ~
\"-ironic\") in failed_compute_service_hosts }}: {{
expected_compute_service_hosts |
difference(nova_compute_service_hosts) | list }}: {{
hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n
from_json |\n   map(attribute='Host') |\n   list }}: Unable to look up
a name or access an attribute in template string ({{
hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n
from_json |\n   map(attribute='Host') |\n   list }}).\nMake sure your
variable name does not contain invalid characters like '-': the JSON
object must be str, bytes or bytearray, not AnsibleUndefined\n\nThe
error appears to be in
'/root/venv-kolla/share/kolla-ansible/ansible/roles/nova-cell/tasks/wait_discover_computes.yml':
line 46, column 7, but may\nbe elsewhere in the file depending on the
exact syntax problem.\n\nThe offending line appears to be:\n\n    #
that failed to register.\n    - name: Fail if nova-compute service
failed to register\n      ^ here\n"}

PLAY RECAP ***********************************************************************************************************************************************************************
kolla-comp-1               : ok=46   changed=9    unreachable=0
failed=1    skipped=14   rescued=0    ignored=0
kolla-comp-2               : ok=42   changed=9    unreachable=0
failed=1    skipped=13   rescued=0    ignored=0
kolla-infra-1              : ok=214  changed=51   unreachable=0
failed=1    skipped=133  rescued=0    ignored=0
localhost                  : ok=4    changed=0    unreachable=0
failed=0    skipped=0    rescued=0    ignored=0

Command failed ansible-playbook -i multinode -e
@/etc/kolla/globals.yml  -e @/etc/kolla/passwords.yml -e
CONFIG_DIR=/etc/kolla  -e kolla_action=deploy
/root/venv-kolla/share/kolla-ansible/ansible/site.yml


On Thu, Sep 29, 2022 at 5:26 AM Radosław Piliszek <
radoslaw.piliszek at gmail.com> wrote:

> On Thu, 29 Sept 2022 at 11:22, Satish Patel <satish.txt at gmail.com> wrote:
> > I did the following in global.yml and ran "deploy" but it stuck
> somewhere in nova. I am looking for errors to find out what happened. Am I
> missing something in the following configuration?
>
> It looks correct at first glance. You need to be more specific about
> the issue at hand. The error message, circumstances...
>
> > kolla_enable_tls_internal: "yes"
> > kolla_certificates_dir: "/etc/kolla/certificates"
> > kolla_internal_fqdn_cert: "{{ kolla_certificates_dir
> }}/my_company_certificate.pem"
> >
> > Is the above going to enable SSL for all communications or just horizon
> web GUI?
>
> All communications via haproxy.
>
> Radek
> -yoctozepto
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.openstack.org/pipermail/openstack-discuss/attachments/20220929/d9b9d305/attachment.htm>


More information about the openstack-discuss mailing list