在ocp-master-1本機執行ansible-playbook安裝時，ansible報權限錯誤:

原因：

解決方案：在/etc/ansible/hosts主機組中，增加ansible_connection=local，避免ssh本機。
如下

#host group for masters
[masters]
ocp-master-1.dpbg.lh.com ansible_connection=local
ocp-master-2.dpbg.lh.com
ocp-master-3.dpbg.lh.com

#host group for etcd
[etcd]
ocp-master-1.dpbg.lh.com ansible_connection=local
ocp-master-2.dpbg.lh.com
ocp-master-3.dpbg.lh.com

systemctl restart docker.service
Job for docker.service failed because the control process exited with error code. See "systemctl status docker.service" and "journalctl -xe" for details.

systemctl status docker.service
● docker.service - Docker Application Container Engine
Loaded: loaded (/lib/systemd/system/docker.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Mon 2017-02-06 12:16:57 CST; 13s ago
Docs: https://docs.docker.com
Process: 21952 ExecStart=/usr/bin/dockerd -H fd:// (code=exited, status=1/FAILURE)
Main PID: 21952 (code=exited, status=1/FAILURE)

Feb 06 12:16:57 xsl systemd[1]: Starting Docker Application Container Engine...
Feb 06 12:16:57 xsl dockerd[21952]: unable to configure the Docker daemon with file /etc/docker/daemon.json: the following directives are specified both as a flag and in the configuration file: hosts: (from flag: [fd://], from file: [tcp://0.0.0.0:2375, unix:///var/run/docker.socket])
Feb 06 12:16:57 xsl systemd[1]: docker.service: Main process exited, code=exited, status=1/FAILURE
Feb 06 12:16:57 xsl systemd[1]: Failed to start Docker Application Container Engine.
Feb 06 12:16:57 xsl systemd[1]: docker.service: Unit entered failed state.
Feb 06 12:16:57 xsl systemd[1]: docker.service: Failed with result 'exit-code'.

TASK [openshift_hosted : Create OpenShift router] ******************************************************************************************************************************************************************************
Monday 29 January 2018 10:18:57 +0800 (0:00:01.111) 0:23:22.808 ********
[WARNING]: Module did not set no_log for stats_password

[WARNING]: Module did not set no_log for external_host_password

failed: [ocp-master-1.dpbg.lh.com] (item={u'name': u'router', u'certificate': {u'keyfile': u'/etc/origin/master/openshift-router.key', u'certfile': u'/etc/origin/master/openshift-router.crt', u'cafile': u'/etc/origin/master/ca.crt'}, u'replicas': u'2', u'serviceaccount': u'router', u'namespace': u'default', u'stats_port': 1936, u'edits': [{u'action': u'put', u'value': 1, u'key': u'spec.strategy.rollingParams.intervalSeconds'}, {u'action': u'put', u'value': 1, u'key': u'spec.strategy.rollingParams.updatePeriodSeconds'}, {u'action': u'put', u'value': 21600, u'key': u'spec.strategy.activeDeadlineSeconds'}], u'images': u'openshift/origin-${component}:${version}', u'selector': u'region=infra', u'ports': [u'80:80', u'443:443']}) => {"changed": false, "failed": true, "item": {"certificate": {"cafile": "/etc/origin/master/ca.crt", "certfile": "/etc/origin/master/openshift-router.crt", "keyfile": "/etc/origin/master/openshift-router.key"}, "edits": [{"action": "put", "key": "spec.strategy.rollingParams.intervalSeconds", "value": 1}, {"action": "put", "key": "spec.strategy.rollingParams.updatePeriodSeconds", "value": 1}, {"action": "put", "key": "spec.strategy.activeDeadlineSeconds", "value": 21600}], "images": "openshift/origin-${component}:${version}", "name": "router", "namespace": "default", "ports": ["80:80", "443:443"], "replicas": "2", "selector": "region=infra", "serviceaccount": "router", "stats_port": 1936}, "msg": {"results": [{"cmd": "/usr/bin/oc create -f /tmp/SecretrfP8PS -n default", "results": {}, "returncode": 1, "stderr": "Error from server: error when creating "/tmp/SecretrfP8PS": timeout\n", "stdout": ""}, {"cmd": "/usr/bin/oc create -f /tmp/ClusterRoleBindingQhYEOV -n default", "results": {}, "returncode": 0}, {"cmd": "/usr/bin/oc create -f /tmp/ServiceDvmTpS -n default", "results": {}, "returncode": 0}, {"cmd": "/usr/bin/oc create -f /tmp/DeploymentConfighYQ7i7 -n default", "results": {}, "returncode": 0}], "returncode": 1}}

PLAY RECAP *********************************************************************************************************************************************************************************************************************
localhost : ok=13 changed=0 unreachable=0 failed=0
ocp-master-1.dpbg.lh.com : ok=336 changed=46 unreachable=0 failed=1
ocp-master-2.dpbg.lh.com : ok=253 changed=29 unreachable=0 failed=0
ocp-master-3.dpbg.lh.com : ok=253 changed=29 unreachable=0 failed=0
ocp-nfs-1.dpbg.lh.com : ok=61 changed=3 unreachable=0 failed=0
ocp-node-1.dpbg.lh.com : ok=173 changed=35 unreachable=0 failed=0
ocp-node-2.dpbg.lh.com : ok=171 changed=35 unreachable=0 failed=0

INSTALLER STATUS ***************************************************************************************************************************************************************************************************************
Initialization : Complete
Health Check : Complete
etcd Install : Complete
NFS Install : Complete
Master Install : Complete
Master Additional Install : Complete
Node Install : Complete
Hosted Install : In Progress
This phase can be restarted by running: playbooks/byo/openshift-cluster/openshift-hosted.yml

Monday 29 January 2018 10:19:17 +0800 (0:00:19.786) 0:23:42.594 ********

openshift_hosted_facts : Set hosted facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 77.41s
openshift_hosted_facts : Set hosted facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 77.13s
openshift_hosted_facts : Set hosted facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 76.43s
openshift_node : Install Node package ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 48.30s
Run health checks (install) - EL --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 39.53s
openshift_docker_facts : Set docker facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 30.72s
openshift_docker_facts : Set docker facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 30.62s
openshift_hosted_facts : Set hosted facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 27.75s
openshift_node_facts : Set node facts ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 20.97s
openshift_hosted : Create OpenShift router ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 19.79s
Gather Cluster facts and set is_containerized if needed ---------------------------------------------------------------------------------------------------------------------------------------------------------------- 17.70s
openshift_facts -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 16.03s
openshift_docker_facts : Set docker facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 15.91s
Set fact of no_proxy_internal_hostnames -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 15.74s
openshift_named_certificates : openshift_facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 15.68s
openshift_master_facts : Set master facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 15.54s
openshift_master_facts : Set master facts ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 15.53s
openshift_master : Set fact of all etcd host IPs ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- 15.48s
openshift_facts -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 15.43s
openshift_etcd_facts : openshift_facts --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 15.40s

Failure summary:

1. Hosts: ocp-master-1.dpbg.lh.com
   Play: Create Hosted Resources - router
   Task: Create OpenShift router
   Message: All items completed

TASK [openshift_master : Wait for API to become available] **********************************************************************************************************************************************************************************
Tuesday 05 December 2017 11:49:43 +0100 (0:00:00.330) 0:23:09.159 ******
FAILED - RETRYING: Wait for API to become available (120 retries left).
FAILED - RETRYING: Wait for API to become available (119 retries left).
FAILED - RETRYING: Wait for API to become available (118 retries left).
FAILED - RETRYING: Wait for API to become available (117 retries left).
FAILED - RETRYING: Wait for API to become available (116 retries left).
FAILED - RETRYING: Wait for API to become available (115 retries left).
FAILED - RETRYING: Wait for API to become available (114 retries left).
FAILED - RETRYING: Wait for API to become available (113 retries left).
FAILED - RETRYING: Wait for API to become available (112 retries left).
FAILED - RETRYING: Wait for API to become available (111 retries left).
FAILED - RETRYING: Wait for API to become available (110 retries left).
FAILED - RETRYING: Wait for API to become available (109 retries left).
FAILED - RETRYING: Wait for API to become available (108 retries left).
FAILED - RETRYING: Wait for API to become available (107 retries left).
FAILED - RETRYING: Wait for API to become available (106 retries left).
FAILED - RETRYING: Wait for API to become available (105 retries left).
FAILED - RETRYING: Wait for API to become available (104 retries left).
FAILED - RETRYING: Wait for API to become available (103 retries left).
FAILED - RETRYING: Wait for API to become available (102 retries left).
FAILED - RETRYING: Wait for API to become available (101 retries left).
FAILED - RETRYING: Wait for API to become available (100 retries left).
FAILED - RETRYING: Wait for API to become available (99 retries left).
FAILED - RETRYING: Wait for API to become available (98 retries left).
FAILED - RETRYING: Wait for API to become available (97 retries left).
FAILED - RETRYING: Wait for API to become available (96 retries left).
FAILED - RETRYING: Wait for API to become available (95 retries left).
FAILED - RETRYING: Wait for API to become available (94 retries left).
FAILED - RETRYING: Wait for API to become available (93 retries left).
FAILED - RETRYING: Wait for API to become available (92 retries left).
FAILED - RETRYING: Wait for API to become available (91 retries left).
FAILED - RETRYING: Wait for API to become available (90 retries left).
FAILED - RETRYING: Wait for API to become available (89 retries left).
FAILED - RETRYING: Wait for API to become available (88 retries left).
FAILED - RETRYING: Wait for API to become available (87 retries left).
FAILED - RETRYING: Wait for API to become available (86 retries left).
FAILED - RETRYING: Wait for API to become available (85 retries left).
FAILED - RETRYING: Wait for API to become available (84 retries left).
FAILED - RETRYING: Wait for API to become available (83 retries left).
FAILED - RETRYING: Wait for API to become available (82 retries left).
FAILED - RETRYING: Wait for API to become available (81 retries left).
FAILED - RETRYING: Wait for API to become available (80 retries left).
FAILED - RETRYING: Wait for API to become available (79 retries left).
FAILED - RETRYING: Wait for API to become available (78 retries left).
FAILED - RETRYING: Wait for API to become available (77 retries left).
FAILED - RETRYING: Wait for API to become available (76 retries left).
FAILED - RETRYING: Wait for API to become available (75 retries left).
FAILED - RETRYING: Wait for API to become available (74 retries left).
FAILED - RETRYING: Wait for API to become available (73 retries left).
FAILED - RETRYING: Wait for API to become available (72 retries left).
FAILED - RETRYING: Wait for API to become available (71 retries left).
FAILED - RETRYING: Wait for API to become available (70 retries left).
FAILED - RETRYING: Wait for API to become available (69 retries left).
FAILED - RETRYING: Wait for API to become available (68 retries left).
FAILED - RETRYING: Wait for API to become available (67 retries left).
FAILED - RETRYING: Wait for API to become available (66 retries left).
FAILED - RETRYING: Wait for API to become available (65 retries left).
FAILED - RETRYING: Wait for API to become available (64 retries left).
FAILED - RETRYING: Wait for API to become available (63 retries left).
FAILED - RETRYING: Wait for API to become available (62 retries left).
FAILED - RETRYING: Wait for API to become available (61 retries left).
FAILED - RETRYING: Wait for API to become available (60 retries left).
FAILED - RETRYING: Wait for API to become available (59 retries left).
FAILED - RETRYING: Wait for API to become available (58 retries left).
FAILED - RETRYING: Wait for API to become available (57 retries left).
FAILED - RETRYING: Wait for API to become available (56 retries left).
FAILED - RETRYING: Wait for API to become available (55 retries left).
FAILED - RETRYING: Wait for API to become available (54 retries left).
FAILED - RETRYING: Wait for API to become available (53 retries left).
FAILED - RETRYING: Wait for API to become available (52 retries left).
FAILED - RETRYING: Wait for API to become available (51 retries left).
FAILED - RETRYING: Wait for API to become available (50 retries left).
FAILED - RETRYING: Wait for API to become available (49 retries left).
FAILED - RETRYING: Wait for API to become available (48 retries left).
FAILED - RETRYING: Wait for API to become available (47 retries left).
FAILED - RETRYING: Wait for API to become available (46 retries left).
FAILED - RETRYING: Wait for API to become available (45 retries left).
FAILED - RETRYING: Wait for API to become available (44 retries left).
FAILED - RETRYING: Wait for API to become available (43 retries left).
FAILED - RETRYING: Wait for API to become available (42 retries left).
FAILED - RETRYING: Wait for API to become available (41 retries left).
FAILED - RETRYING: Wait for API to become available (40 retries left).
FAILED - RETRYING: Wait for API to become available (39 retries left).
FAILED - RETRYING: Wait for API to become available (38 retries left).
FAILED - RETRYING: Wait for API to become available (37 retries left).
FAILED - RETRYING: Wait for API to become available (36 retries left).
FAILED - RETRYING: Wait for API to become available (35 retries left).
FAILED - RETRYING: Wait for API to become available (34 retries left).
FAILED - RETRYING: Wait for API to become available (33 retries left).
FAILED - RETRYING: Wait for API to become available (32 retries left).
FAILED - RETRYING: Wait for API to become available (31 retries left).
FAILED - RETRYING: Wait for API to become available (30 retries left).
FAILED - RETRYING: Wait for API to become available (29 retries left).
FAILED - RETRYING: Wait for API to become available (28 retries left).
FAILED - RETRYING: Wait for API to become available (27 retries left).
FAILED - RETRYING: Wait for API to become available (26 retries left).
FAILED - RETRYING: Wait for API to become available (25 retries left).
FAILED - RETRYING: Wait for API to become available (24 retries left).
FAILED - RETRYING: Wait for API to become available (23 retries left).
FAILED - RETRYING: Wait for API to become available (22 retries left).
FAILED - RETRYING: Wait for API to become available (21 retries left).
FAILED - RETRYING: Wait for API to become available (20 retries left).
FAILED - RETRYING: Wait for API to become available (19 retries left).
FAILED - RETRYING: Wait for API to become available (18 retries left).
FAILED - RETRYING: Wait for API to become available (17 retries left).
FAILED - RETRYING: Wait for API to become available (16 retries left).
FAILED - RETRYING: Wait for API to become available (15 retries left).
FAILED - RETRYING: Wait for API to become available (14 retries left).
FAILED - RETRYING: Wait for API to become available (13 retries left).
FAILED - RETRYING: Wait for API to become available (12 retries left).
FAILED - RETRYING: Wait for API to become available (11 retries left).
FAILED - RETRYING: Wait for API to become available (10 retries left).
FAILED - RETRYING: Wait for API to become available (9 retries left).
FAILED - RETRYING: Wait for API to become available (8 retries left).
FAILED - RETRYING: Wait for API to become available (7 retries left).
FAILED - RETRYING: Wait for API to become available (6 retries left).
FAILED - RETRYING: Wait for API to become available (5 retries left).
FAILED - RETRYING: Wait for API to become available (4 retries left).
FAILED - RETRYING: Wait for API to become available (3 retries left).
FAILED - RETRYING: Wait for API to become available (2 retries left).
FAILED - RETRYING: Wait for API to become available (1 retries left).
[WARNING]: Consider using get_url or uri module rather than running curl

fatal: [achernar.domain.com]: FAILED! => {"attempts": 120, "changed": false, "cmd": ["curl", "--silent", "--tlsv1.2", "--cacert", "/etc/origin/master/ca-bundle.crt", "https://ocp.dpbg.lh.com:8443/healthz/ready"], "delta": "0:00:00.010739", "end": "2018-01-27 11:52:38.182175", "failed": true, "msg": "non-zero return code", "rc": 7, "start": "2018-01-27 11:52:38.171436", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}

方案一：
sed -i 's#Environment="KUBELET_KUBECONFIG_ARGS=-.*#Environment="KUBELET_KUBECONFIG_ARGS=--kubeconfig=/etc/kubernetes/kubelet.conf --require-kubeconfig=true --cgroup-driver=systemd"#g' /etc/systemd/system/kubelet.service.d/10-kubeadm.conf

方案二：
The unit file in my case, that works

vi /usr/lib/systemd/system/docker.service
[Service]
ExecStart=
ExecStart=/usr/bin/dockerd --exec-opt native.cgroupdriver=systemd

[Service]
# Allow maximum number of containers to run.
TasksMax=infinity

openshift在部署到node節點時，出現如下錯誤：

{"changed": false, "failed": true, "msg": "Currently, NetworkManager must be installed and enabled prior to installation."}

error_pic