Seen at least twice on https://review.openstack.org/#/c/462480/
For example:
http://logs.openstack.org/80/462480/1/check/gate-tripleo-ci-centos-7-multinode-upgrades/b78ee4c/
We see on the controller node:
'#033[0mMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: #033[mNotice: /Stage[main]/Pacemaker::Corosync/Exec[wait-for-settle]/returns: executed successfully#033[0mMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: #033[mNotice: /Firewall[998 log all]: Dependency Pcmk_property[property--stonith-enabled] has failures: true#033[0mMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: #033[mNotice: /Firewall[999 drop all]: Dependency Pcmk_property[property--stonith-enabled] has failures: true#033[0mMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: #033[mNotice: Finished catalog run in 67.86 seconds#033[0mMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: [2017-05-04 13:46:44,430] (heat-config) [INFO] exception: connect failedMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: #033[1;31mWarning: Scope(Haproxy::Config[haproxy]): haproxy: The $merge_options parameter will default to true in the next major release. Please review the documentation regarding the implications.#033[0m
May 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: Error: unable to get cib
May 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: Error: /Stage[main]/Pacemaker::Stonith/Pacemaker::Property[Disable STONITH]/Pcmk_property[property--stonith-enabled]: Could not evaluate: backup_cib: Running: /usr/sbin/pcs cluster cib /var/lib/pacemaker/cib/puppet-cib-backup20170504-29225-fetp7k failed with code: 1 -> #033[0mMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: #033[1;31mWarning: /Firewall[998 log all]: Skipping because of failed dependencies#033[0mMay 4 13:46:44 centos-7-2-node-osic-cloud1-s3500-8719947-570244 os-collect-config: #033[1;31mWarning: /Firewall[999 drop all]: Skipping because of failed dependencies#033[0m
I wonder if some recent firewall changes changed the dependency chain and now pcs can't talk to pcsd
Or maybe the updated pin for newton/ocata is triggering this problem: https:/ /review. rdoproject. org/r/# /c/6519/
Looking at the changelog I can't really see why that would be though