The command:
sudo rbac-playbook groups/retrace.yml -l retrace-stg.aws.fedoraproject.org
fails for me because (see bellow full output) of missing /srv/private/ansible/files/vpn/pki/private/retrace-stg.aws.fedoraproject.org.key file. Since I do not have have access to /srv/private I cannot fix this. I will appreciate it if someone can fix it, so I can finish the run of this PB.
TASK [openvpn/client : Install configuration files (rhel7 and fedora)] ******************************************************* Wednesday 30 September 2020 09:01:13 +0000 (0:00:00.682) 0:02:39.564 *** Wednesday 30 September 2020 09:01:13 +0000 (0:00:00.682) 0:02:39.564 *** An exception occurred during task execution. To see the full traceback, use -vvv. The error was: If you are using a module and expect the file to exist on the remote, see the remote_src option failed: [retrace-stg.aws.fedoraproject.org] (item={'file': '/srv/private/ansible/files/vpn/pki/issued/retrace-stg.aws.fedoraproject.org.crt', 'dest': '/etc/openvpn/client/client.crt', 'mode': '0600'}) => {"ansible_loop_var": "item", "changed": false, "item": {"dest": "/etc/openvpn/client/client.crt", "file": "/srv/private/ansible/files/vpn/pki/issued/retrace-stg.aws.fedoraproject.org.crt", "mode": "0600"}, "msg": "Could not find or access '/srv/private/ansible/files/vpn/pki/issued/retrace-stg.aws.fedoraproject.org.crt' on the Ansible Controller.\nIf you are using a module and expect the file to exist on the remote, see the remote_src option"} An exception occurred during task execution. To see the full traceback, use -vvv. The error was: If you are using a module and expect the file to exist on the remote, see the remote_src option failed: [retrace-stg.aws.fedoraproject.org] (item={'file': '/srv/private/ansible/files/vpn/pki/private/retrace-stg.aws.fedoraproject.org.key', 'dest': '/etc/openvpn/client/client.key', 'mode': '0600'}) => {"ansible_loop_var": "item", "changed": false, "item": {"dest": "/etc/openvpn/client/client.key", "file": "/srv/private/ansible/files/vpn/pki/private/retrace-stg.aws.fedoraproject.org.key", "mode": "0600"}, "msg": "Could not find or access '/srv/private/ansible/files/vpn/pki/private/retrace-stg.aws.fedoraproject.org.key' on the Ansible Controller.\nIf you are using a module and expect the file to exist on the remote, see the remote_src option"}
Metadata Update from @pingou: - Issue assigned to pingou - Issue priority set to: Waiting on Assignee (was: Needs Review) - Issue tagged with: low-trouble, medium-gain, ops
Certs generated following the instructions at: https://pagure.io/fedora-infra/howtos/blob/master/f/generate_openvpn_keys.md
Let us know if you need anything else! :)
Metadata Update from @pingou: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.