Enabled the below flags:- [root@nodec28 ~]# cat contrail-ansible-deployer/config/instances.yaml | grep SSL SSL_ENABLE: True [root@nodec28 ~]# cat contrail-ansible-deployer/config/instances.yaml | grep metadata_ss metadata_ssl_enable: yes [root@nodec28 ~]# Provisioning failed while searching for cert/key files under contrail_smgr directory. 1. Looks like the path needs to be changed in the task. 2. Cert/Key file copy should happen before openstack provisioning is done because copy code is part of contrail provisioning right now which happens after openstack provisioning. 3. I am not sure who needs to look into it, whether from contrail side or openstack side so moving it back to triage. Here is the ansible task failure seen on my setup, setup is nodec28 and available. ********************************** ********************************** ********************************** ********************************** 2018-04-15 10:15:14,534 p=26013 u=root | TASK [nova : Copy ssl certs for metadata if required] ********************************************************************************************************************************************** 2018-04-15 10:15:14,679 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei19.pem' 2018-04-15 10:15:14,679 p=26013 u=root | failed: [10.204.217.131] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodei19.pem', u'dst': u'/etc/nova/ssl/certs/nova.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/nova.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodei19.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei19.pem'"} 2018-04-15 10:15:14,746 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodeg37.pem' 2018-04-15 10:15:14,747 p=26013 u=root | failed: [10.204.217.77] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodeg37.pem', u'dst': u'/etc/nova/ssl/certs/nova.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/nova.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodeg37.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodeg37.pem'"} 2018-04-15 10:15:14,748 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem' 2018-04-15 10:15:14,748 p=26013 u=root | failed: [10.204.217.131] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/ca-cert.pem', u'dst': u'/etc/nova/ssl/certs/ca.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/ca.pem", "src": "/etc/contrail_smgr/puppet/ssl/ca-cert.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem'"} 2018-04-15 10:15:14,749 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem' 2018-04-15 10:15:14,749 p=26013 u=root | failed: [10.204.217.77] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/ca-cert.pem', u'dst': u'/etc/nova/ssl/certs/ca.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/ca.pem", "src": "/etc/contrail_smgr/puppet/ssl/ca-cert.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem'"} 2018-04-15 10:15:14,750 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec33.pem' 2018-04-15 10:15:14,750 p=26013 u=root | failed: [10.204.217.168] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodec33.pem', u'dst': u'/etc/nova/ssl/certs/nova.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/nova.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodec33.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec33.pem'"} 2018-04-15 10:15:14,751 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei19-privkey.pem' 2018-04-15 10:15:14,761 p=26013 u=root | failed: [10.204.217.131] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodei19-privkey.pem', u'dst': u'/etc/nova/ssl/private/novakey.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/private/novakey.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodei19-privkey.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei19-privkey.pem'"} 2018-04-15 10:15:14,773 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodeg37-privkey.pem' 2018-04-15 10:15:14,774 p=26013 u=root | failed: [10.204.217.77] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodeg37-privkey.pem', u'dst': u'/etc/nova/ssl/private/novakey.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/private/novakey.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodeg37-privkey.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodeg37-privkey.pem'"} 2018-04-15 10:15:14,783 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei20.pem' 2018-04-15 10:15:14,783 p=26013 u=root | failed: [10.204.217.132] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodei20.pem', u'dst': u'/etc/nova/ssl/certs/nova.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/nova.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodei20.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei20.pem'"} 2018-04-15 10:15:14,792 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei17.pem' 2018-04-15 10:15:14,792 p=26013 u=root | failed: [10.204.217.129] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodei17.pem', u'dst': u'/etc/nova/ssl/certs/nova.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/nova.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodei17.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei17.pem'"} 2018-04-15 10:15:14,803 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem' 2018-04-15 10:15:14,804 p=26013 u=root | failed: [10.204.217.168] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/ca-cert.pem', u'dst': u'/etc/nova/ssl/certs/ca.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/ca.pem", "src": "/etc/contrail_smgr/puppet/ssl/ca-cert.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem'"} 2018-04-15 10:15:14,823 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem' 2018-04-15 10:15:14,823 p=26013 u=root | failed: [10.204.217.132] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/ca-cert.pem', u'dst': u'/etc/nova/ssl/certs/ca.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/ca.pem", "src": "/etc/contrail_smgr/puppet/ssl/ca-cert.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem'"} 2018-04-15 10:15:14,837 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem' 2018-04-15 10:15:14,837 p=26013 u=root | failed: [10.204.217.129] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/ca-cert.pem', u'dst': u'/etc/nova/ssl/certs/ca.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/ca.pem", "src": "/etc/contrail_smgr/puppet/ssl/ca-cert.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem'"} 2018-04-15 10:15:14,860 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec33-privkey.pem' 2018-04-15 10:15:14,860 p=26013 u=root | failed: [10.204.217.168] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodec33-privkey.pem', u'dst': u'/etc/nova/ssl/private/novakey.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/private/novakey.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodec33-privkey.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec33-privkey.pem'"} 2018-04-15 10:15:14,863 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec50.pem' 2018-04-15 10:15:14,864 p=26013 u=root | failed: [10.204.217.153] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodec50.pem', u'dst': u'/etc/nova/ssl/certs/nova.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/nova.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodec50.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec50.pem'"} 2018-04-15 10:15:14,873 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei20-privkey.pem' 2018-04-15 10:15:14,874 p=26013 u=root | failed: [10.204.217.132] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodei20-privkey.pem', u'dst': u'/etc/nova/ssl/private/novakey.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/private/novakey.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodei20-privkey.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei20-privkey.pem'"} 2018-04-15 10:15:14,889 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei17-privkey.pem' 2018-04-15 10:15:14,889 p=26013 u=root | failed: [10.204.217.129] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodei17-privkey.pem', u'dst': u'/etc/nova/ssl/private/novakey.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/private/novakey.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodei17-privkey.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodei17-privkey.pem'"} 2018-04-15 10:15:14,896 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem' 2018-04-15 10:15:14,897 p=26013 u=root | failed: [10.204.217.153] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/ca-cert.pem', u'dst': u'/etc/nova/ssl/certs/ca.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/certs/ca.pem", "src": "/etc/contrail_smgr/puppet/ssl/ca-cert.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/ca-cert.pem'"} 2018-04-15 10:15:14,943 p=26013 u=root | An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec50-privkey.pem' 2018-04-15 10:15:14,943 p=26013 u=root | failed: [10.204.217.153] (item={u'src': u'/etc/contrail_smgr/puppet/ssl/nodec50-privkey.pem', u'dst': u'/etc/nova/ssl/private/novakey.pem'}) => {"changed": false, "item": {"dst": "/etc/nova/ssl/private/novakey.pem", "src": "/etc/contrail_smgr/puppet/ssl/nodec50-privkey.pem"}, "msg": "Could not find or access '/etc/contrail_smgr/puppet/ssl/nodec50-privkey.pem'"} 2018-04-15 10:15:14,946 p=26013 u=root | to retry, use: --limit @/root/contrail-ansible-deployer/playbooks/install_contrail.retry 2018-04-15 10:15:14,946 p=26013 u=root | PLAY RECAP *****************************************************************************************************************************************************************************************