{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/844","labels_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/844/labels{/name}","comments_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/844/comments","events_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/844/events","html_url":"https://github.com/openshift/openshift-ansible/issues/844","id":115740180,"number":844,"title":"ansible-playbook installation failed with etcd_client_flannel_certs_missing","user":{"login":"detiber","id":915544,"avatar_url":"https://avatars.githubusercontent.com/u/915544?v=3","gravatar_id":"","url":"https://api.github.com/users/detiber","html_url":"https://github.com/detiber","followers_url":"https://api.github.com/users/detiber/followers","following_url":"https://api.github.com/users/detiber/following{/other_user}","gists_url":"https://api.github.com/users/detiber/gists{/gist_id}","starred_url":"https://api.github.com/users/detiber/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/detiber/subscriptions","organizations_url":"https://api.github.com/users/detiber/orgs","repos_url":"https://api.github.com/users/detiber/repos","events_url":"https://api.github.com/users/detiber/events{/privacy}","received_events_url":"https://api.github.com/users/detiber/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-11-08T15:42:41Z","updated_at":"2015-11-09T15:58:30Z","closed_at":null,"body":"\r\nIt looks like etc_client_flannel_certs_missing is only defined when use_flannel is true, but in the later check that sets etcd_needing_client_certs does not have a conditional on use_flannel or take into account that etc_client_flannel_certs_missing may not be set on a host.\r\n\r\nAs a workaround, you could change line 72 of https://github.com/openshift/openshift-ansible/blob/master/playbooks/common/openshift-node/config.yml to set etcd_needing_client_certs to []\r\n\r\n​\r\n[OSEv3:children]\r\nmasters\r\nnodes\r\netcd\r\n\r\n# Set variables common for all OSEv3 hosts\r\n[OSEv3:vars]\r\nansible_ssh_user=root\r\nproduct_type=openshift\r\ndeployment_type=enterprise\r\n\r\n# uncomment the following to enable htpasswd authentication; defaults to DenyAllPasswordIdentityProvider\r\nopenshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider', 'filename': '/etc/openshift/openshift-passwd'}]\r\n\r\n# host group for masters\r\n[masters]\r\nose3-master1.oseinternal.priv\r\n\r\n# host group for etcd\r\n[etcd]\r\nose3-master1.oseinternal.priv\r\n\r\n# host group for nodes, includes region info\r\n[nodes]\r\nose3-master1.oseinternal.priv\r\nose3-infra1.oseinternal.priv openshift_node_labels=\"{'region': 'infra', 'zone': 'default'}\"\r\nose3-node01.oseinternal.priv openshift_node_labels=\"{'region': 'primary', 'zone': 'odd'}\"\r\nose3-node02.oseinternal.priv openshift_node_labels=\"{'region': 'primary', 'zone': 'even'}\"\r\n\r\n\r\n\r\n\r\n\r\nTASK: [etcd_certificates | Ensure generated_certs directory present] **********\r\nfatal: [ose3-master1.oseinternal.priv] => Traceback (most recent call last):\r\n  File \"/usr/lib/python2.7/site-packages/ansible/runner/__init__.py\", line 586, in _executor\r\n    exec_rc = self._executor_internal(host, new_stdin)\r\n  File \"/usr/lib/python2.7/site-packages/ansible/runner/__init__.py\", line 815, in _executor_internal\r\n    complex_args=complex_args\r\n  File \"/usr/lib/python2.7/site-packages/ansible/runner/__init__.py\", line 869, in _executor_internal_inner\r\n    if not utils.check_conditional(cond, self.basedir, inject, fail_on_undefined=self.error_on_undefined_vars):\r\n  File \"/usr/lib/python2.7/site-packages/ansible/utils/__init__.py\", line 269, in check_conditional\r\n    conditional = template.template(basedir, presented, inject)\r\n  File \"/usr/lib/python2.7/site-packages/ansible/utils/template.py\", line 124, in template\r\n    varname = template_from_string(basedir, varname, templatevars, fail_on_undefined)\r\n  File \"/usr/lib/python2.7/site-packages/ansible/utils/template.py\", line 382, in template_from_string\r\n    res = jinja2.utils.concat(rf)\r\n  File \"<template>\", line 6, in root\r\n  File \"/usr/lib/python2.7/site-packages/jinja2/runtime.py\", line 153, in resolve\r\n    return self.parent[key]\r\n  File \"/usr/lib/python2.7/site-packages/ansible/utils/template.py\", line 205, in __getitem__\r\n    return template(self.basedir, var, self.vars, fail_on_undefined=self.fail_on_undefined)\r\n  File \"/usr/lib/python2.7/site-packages/ansible/utils/template.py\", line 124, in template\r\n    varname = template_from_string(basedir, varname, templatevars, fail_on_undefined)\r\n  File \"/usr/lib/python2.7/site-packages/ansible/utils/template.py\", line 382, in template_from_string\r\n    res = jinja2.utils.concat(rf)\r\n  File \"<template>\", line 11, in root\r\n  File \"/root/openshift-ansible/filter_plugins/oo_filters.py\", line 278, in oo_filter_list\r\n    return [x for x in data if x[filter_attr]]\r\nKeyError: 'etcd_client_flannel_certs_missing'\r\n\r\n\r\nFATAL: all hosts have already failed -- aborting\r\n\r\nPLAY RECAP ********************************************************************\r\n           to retry, use: --limit @/root/config.retry\r\n\r\nlocalhost                  : ok=12   changed=0    unreachable=0    failed=0\r\nose3-infra1.oseinternal.priv : ok=8    changed=1    unreachable=0    failed=0\r\nose3-master1.oseinternal.priv : ok=237  changed=9    unreachable=1    failed=0\r\nose3-node01.oseinternal.priv : ok=8    changed=1    unreachable=0    failed=0\r\nose3-node02.oseinternal.priv : ok=8    changed=1    unreachable=0    failed=0\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/comments/155104261","html_url":"https://github.com/openshift/openshift-ansible/issues/844#issuecomment-155104261","issue_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/844","id":155104261,"user":{"login":"abutcher","id":47003,"avatar_url":"https://avatars.githubusercontent.com/u/47003?v=3","gravatar_id":"","url":"https://api.github.com/users/abutcher","html_url":"https://github.com/abutcher","followers_url":"https://api.github.com/users/abutcher/followers","following_url":"https://api.github.com/users/abutcher/following{/other_user}","gists_url":"https://api.github.com/users/abutcher/gists{/gist_id}","starred_url":"https://api.github.com/users/abutcher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/abutcher/subscriptions","organizations_url":"https://api.github.com/users/abutcher/orgs","repos_url":"https://api.github.com/users/abutcher/repos","events_url":"https://api.github.com/users/abutcher/events{/privacy}","received_events_url":"https://api.github.com/users/abutcher/received_events","type":"User","site_admin":false},"created_at":"2015-11-09T15:58:30Z","updated_at":"2015-11-09T15:58:30Z","body":"@brenton This one can be closed"}}