VMCreateSSH.yml is giving subscription not valid error about ansible-playbooks HOT 18 CLOSED

@yungezz

from ansible-playbooks.

@tanvirahmed2707 thanks for reporting the issue. We'll take a look at the issue. Since you're using AzureUSGovernment azure cloud environment except for public one, it's high suspiciously to related to this.

from ansible-playbooks.

@yungezz ... Thanks a lot for looking into it! I also thought that it's an issue with "AzureUSGovernement", but then first three tasks worked very good in the same environment. It's only failing at the Security Group creation task.

from ansible-playbooks.

let me check is there any bug in security group to work in non-public azure cloud.

from ansible-playbooks.

@yungezz were you able to find the issue with it?

from ansible-playbooks.

@tanvirahmed2707 sorry for late response. This is a bug in azure_rm_securitygroup module. I'm working on fixing it in ansible repo. Before the fixing is released in official release, you could use same fix in azure_preview_modules role to unblock now.

ansible-galaxy  install git+https://github.com/Azure/azure_preview_modules.git,fix-securitygroup

then in your playbook, reference this role

roles:
  - Azure.azure_preview_modules

let me know if you met any other issue.

from ansible-playbooks.

@yungezz thanks a lot for the fix! I'll try it out and let you know.

from ansible-playbooks.

hi @tanvirahmed2707 , the issue was fixed in upstream 2.7 release ansible/ansible#41123 and 2.5.x release ansible/ansible#41073. Please let us know if any furthur issue met.

from ansible-playbooks.

close the issue since fix is released in official ansible.

from ansible-playbooks.

Hi,
I am using ansible 2.7.4 with 'AzureUSGovernment' cloud, with Service Principal as authentication method. But, I am still facing the same issue. Could you please help.

Ansible version: 2.7.4
Python: 2.7.12

from ansible-playbooks.

@bhardwahnitish19 could you pls share the error message? thanks

from ansible-playbooks.

@yungezz Thanks for a quick response. It's the same error which is mentioned in the Issue description.

` PLAY [Get start timestamp] ******************************************************************************************************************************************************************

TASK [Gathering Facts] **********************************************************************************************************************************************************************
ok: [cloud]

TASK [set_fact] *****************************************************************************************************************************************************************************
ok: [cloud]

PLAY [Prepare to run the workload] **********************************************************************************************************************************************************

TASK [Gathering Facts] **********************************************************************************************************************************************************************
ok: [cloud]

TASK [include_tasks] ************************************************************************************************************************************************************************
included: /home/cello/cello/src/operator-dashboard/agent/ansible/roles/cloud_azure/prepare/tasks/apply.yml for cloud

TASK [Setup env specific variables] *********************************************************************************************************************************************************
ok: [cloud]

TASK [Retrieve azure specific image details] ************************************************************************************************************************************************
ok: [cloud]

TASK [Print azure image results] ************************************************************************************************************************************************************
ok: [cloud] => {
    "found_images": {
    "ansible_facts": {
        "azure_vmimages": []
    },
    "changed": false,
    "failed": false
    }
}

TASK [Create azure resource group] **********************************************************************************************************************************************************
fatal: [cloud]: FAILED! => {"changed": false, "msg": "Error creating or updating resource group myresourceGroup - Azure Error: SubscriptionNotFound\nMessage: The subscription '********' could not be found."}
    to retry, use: --limit @/home/cello/cello/src/operator-dashboard/agent/ansible/provcluster.retry

PLAY RECAP **********************************************************************************************************************************************************************************
cloud                      : ok=7    changed=0    unreachable=0    failed=1`

from ansible-playbooks.

thanks. I'll double check. just to double confirm, you have the azure_cloud setting to AzureUSGovernment in configuration already?

from ansible-playbooks.

@yungezz Yes, I have an AzureUSGovernment cloud. I am using Service Principal for authentication. I am trying to create some VMs with ansible with an existing resource group.
Please let me know if you need some more inputs.

Thanks for looking into this.

from ansible-playbooks.

just checked the code, the fix was in 2.7.4 release. @bhardwahnitish19 do you have environment variable AZURE_CLOUD_ENVIRONMENT set to AzureUSGovernment or cloud_environment set to AzureUSGovernment in credential file?

from ansible-playbooks.

I think I am missing it. Could you please tell me the name of the config file which needs this parameter. Do you have any reference document for it?

from ansible-playbooks.

https://docs.ansible.com/ansible/latest/scenario_guides/guide_azure.html

you can use either environment variable or configuration file. file name ~/.azure/credentials

from ansible-playbooks.

Thanks for sharing this. It worked perfectly after setting up cloud_environment really appreciate your help and quick response.

from ansible-playbooks.