{"id":428,"sha1":"190050838e6e56b4d7d3d07240c667d3fbbb8154","playbook":{"id":4,"items":{"plays":32,"tasks":1505,"results":1497,"hosts":12,"files":487,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":4,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-openstack.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:57:07.871967Z","ended":"2025-12-08T14:21:54.049657Z","duration":"00:24:46.177690","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.11","server_version":"1.7.4","status":"failed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2014, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n- name: Create keystone dir\n  ansible.builtin.file:\n    path: \"{{ item.path }}\"\n    state: directory\n    owner: \"{{ item.owner | default(keystone_system_user_name) }}\"\n    group: \"{{ item.group | default(keystone_system_group_name) }}\"\n    mode: \"{{ item.mode | default('0755') }}\"\n  with_items:\n    - { path: \"/var/lock/keystone\", mode: \"2755\" }\n  when:\n    - ansible_facts['pkg_mgr'] == 'dnf'\n\n- name: Create system links\n  ansible.builtin.file:\n    src: \"{{ item.src }}\"\n    dest: \"{{ item.dest }}\"\n    state: \"link\"\n  with_items:\n    - { src: \"/var/log/httpd\", dest: \"/var/log/apache2\" }\n  when:\n    - ansible_facts['pkg_mgr'] == 'dnf'\n\n- name: Add shibboleth repo\n  ansible.builtin.yum_repository:\n    name: \"shibboleth\"\n    description: \"shibboleth Repo\"\n    baseurl: \"{{ keystone_centos_shibboleth_mirror }}\"\n    gpgkey: \"{{ keystone_centos_shibboleth_key }}\"\n    gpgcheck: true\n  when:\n    - ansible_facts['pkg_mgr'] == 'dnf'\n    - keystone_sp != {}\n\n- name: Install distro packages\n  ansible.builtin.package:\n    name: \"{{ keystone_package_list }}\"\n    state: \"{{ keystone_package_state }}\"\n    update_cache: \"{{ (ansible_facts['pkg_mgr'] == 'apt') | ternary('yes', omit) }}\"\n    cache_valid_time: \"{{ (ansible_facts['pkg_mgr'] == 'apt') | ternary(cache_timeout, omit) }}\"\n  register: install_packages\n  until: install_packages is success\n  retries: 5\n  delay: 2\n  notify:\n    - Restart uWSGI\n\n- name: Install the python venv\n  ansible.builtin.import_role:\n    name: \"python_venv_build\"\n  vars:\n    venv_python_executable: \"{{ keystone_venv_python_executable }}\"\n    venv_build_constraints: \"{{ keystone_git_constraints }}\"\n    venv_build_distro_package_list: \"{{ keystone_devel_distro_packages }}\"\n    venv_install_destination_path: \"{{ keystone_bin | dirname }}\"\n    venv_pip_install_args: \"{{ keystone_pip_install_args }}\"\n    venv_pip_packages: \"{{ keystone_pip_packages | union(keystone_user_pip_packages) }}\"\n    venv_facts_when_changed:\n      - section: \"keystone\"\n        option: \"need_db_expand\"\n        value: \"True\"\n      - section: \"keystone\"\n        option: \"need_db_contract\"\n        value: \"True\"\n      - section: \"keystone\"\n        option: \"venv_tag\"\n        value: \"{{ keystone_venv_tag }}\"\n      - section: \"keystone\"\n        option: \"install_method\"\n        value: \"{{ keystone_install_method }}\"\n  when: keystone_install_method == 'source'\n\n# TODO(hwoarang): We need to have a venv_tag local fact deployed since we use it in the\n# integration repo to determine if keystone software is the same across all nodes in the\n# keystone_all group so we can safely run the DB migration. See\n# https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-keystone-install.yml\n- name: Record local facts for distro path\n  when: keystone_install_method == 'distro'\n  block:\n    - name: Record the osa version deployed\n      community.general.ini_file:\n        dest: \"/etc/ansible/facts.d/openstack_ansible.fact\"\n        section: keystone\n        option: venv_tag\n        value: \"{{ keystone_venv_tag }}\"\n        mode: \"0644\"\n\n    # NOTE(noonedeadpunk): Ubuntu packages does recursively chmod all files\n    #                      for keystone user $HOME:\n    #                      https://bugs.launchpad.net/cloud-archive/+bug/2060235\n    - name: Ensure SSH keys has right permissions\n      ansible.builtin.file:\n        path: \"{{ keystone_system_user_home }}/.ssh/id_rsa\"\n        mode: \"0600\"\n      when:\n        - install_packages is changed\n        - ansible_facts['distribution'] | lower == 'ubuntu'\n\n    - name: Initialise the upgrade facts\n      community.general.ini_file:\n        dest: \"/etc/ansible/facts.d/openstack_ansible.fact\"\n        section: keystone\n        option: \"{{ item.name }}\"\n        value: \"{{ item.state }}\"\n        mode: \"0644\"\n      with_items:\n        - name: \"need_db_expand\"\n          state: \"True\"\n        - name: \"need_db_contract\"\n          state: \"True\"\n        - name: \"install_method\"\n          state: \"{{ keystone_install_method }}\"\n      when: (install_packages is changed) or\n            (ansible_local is not defined) or\n            ('openstack_ansible' not in ansible_local) or\n            ('keystone' not in ansible_local['openstack_ansible']) or\n            ('need_db_expand' not in ansible_local['openstack_ansible']['keystone']) or\n            ('need_db_contract' not in ansible_local['openstack_ansible']['keystone'])\n\n- name: Create WSGI symlinks\n  ansible.builtin.file:\n    src: \"{{ keystone_bin }}/keystone-wsgi-public\"\n    dest: \"/var/www/cgi-bin/keystone/main\"\n    state: link\n    force: true\n","created":"2025-12-08T13:57:09.061404Z","updated":"2025-12-08T13:57:09.061416Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible-os_keystone/tasks/keystone_install.yml"}