openshift-ansible: Can not deploy Origin 3.10 with packages from CBS repository

Description

I am trying to deploy OpenShift origin with packages from CBS repository(https://cbs.centos.org/repos/paas7-openshift-origin310-candidate/x86_64/os/), but deployment fails on

TASK [openshift_service_catalog : wait for api server to be ready] *************
FAILED - RETRYING: wait for api server to be ready (60 retries left).
FAILED - RETRYING: wait for api server to be ready (59 retries left).
...

I checked the cluster and I can see that apiserver-5t2n4 fails to run

# oc get pods --all-namespaces
NAMESPACE               NAME                          READY     STATUS             RESTARTS   AGE
default                 docker-registry-1-lg6x6       1/1       Running            0          4m
default                 registry-console-1-m2xms      1/1       Running            0          3m
default                 router-1-5hmdq                1/1       Running            0          4m
kube-service-catalog    apiserver-5t2n4               0/1       CrashLoopBackOff   4          2m
kube-service-catalog    controller-manager-psjmp      0/1       CrashLoopBackOff   4          2m
openshift-web-console   webconsole-5b4d568df4-dd4dd   1/1       Running            0          3m

Under the apiserver-5t2n4 log I can see:

# oc -n kube-service-catalog logs apiserver-5t2n4
Error: unknown flag: --admission-control

Version

[root@node01 ~]# rpm -qa | grep origin
centos-release-openshift-origin-1-1.el7.centos.noarch
origin-docker-excluder-3.10.0-0.alpha.0.el7.git.0.42168f5.noarch
origin-excluder-3.10.0-0.alpha.0.el7.git.0.42168f5.noarch
origin-3.10.0-0.alpha.0.el7.git.0.42168f5.x86_64
origin-master-3.10.0-0.alpha.0.el7.git.0.42168f5.x86_64
origin-node-3.10.0-0.alpha.0.el7.git.0.42168f5.x86_64
origin-sdn-ovs-3.10.0-0.alpha.0.el7.git.0.42168f5.x86_64
origin-clients-3.10.0-0.alpha.0.el7.git.0.42168f5.x86_64

[root@node01 ~]# rpm -qa | grep ansible
openshift-ansible-3.10.0-0.1.0.git.1.0b52cf9.el7.noarch
openshift-ansible-playbooks-3.10.0-0.1.0.git.1.0b52cf9.el7.noarch
openshift-ansible-docs-3.10.0-0.1.0.git.1.0b52cf9.el7.noarch
ansible-2.4.2.0-2.el7.noarch
openshift-ansible-roles-3.10.0-0.1.0.git.1.0b52cf9.el7.noarch


# oc version
oc v3.10.0-alpha.0+42168f5-81
kubernetes v1.9.1+a0ce1bc657
features: Basic-Auth GSSAPI Kerberos SPNEGO

Server https://node01:8443
openshift v3.10.0-alpha.0+42168f5-81
kubernetes v1.9.1+a0ce1bc657

Steps To Reproduce

1. Install relevant package from the above repository
2. Use inventory

[OSEv3:children]
masters
nodes

[OSEv3:vars]
ansible_ssh_user=root
ansible_ssh_pass=vagrant
deployment_type=origin
openshift_deployment_type=origin
openshift_clock_enabled=true
openshift_master_identity_providers=[{'name': 'allow_all_auth', 'login': 'true', 'challenge': 'true', 'kind': 'AllowAllPasswordIdentityProvider'}]
openshift_disable_check=memory_availability,disk_availability,docker_storage,package_availability,docker_image_availability
openshift_image_tag=v3.10.0
ansible_service_broker_registry_whitelist=['.*-apb$']
openshift_hosted_etcd_storage_kind=nfs
openshift_hosted_etcd_storage_nfs_options="*(rw,root_squash,sync,no_wdelay)"
openshift_hosted_etcd_storage_nfs_directory=/opt/etcd-vol
openshift_hosted_etcd_storage_volume_name=etcd-vol
openshift_hosted_etcd_storage_access_modes=["ReadWriteOnce"]
openshift_hosted_etcd_storage_volume_size=1G
openshift_hosted_etcd_storage_labels={'storage': 'etcd'}
openshift_node_kubelet_args={'max-pods': ['40'], 'pods-per-core': ['40']}
openshift_master_admission_plugin_config={"ValidatingAdmissionWebhook":{"configuration":{"kind": "DefaultAdmissionConfig","apiVersion": "v1","disable": false}},"MutatingAdmissionWebhook":{"configuration":{"kind": "DefaultAdmissionConfig","apiVersion": "v1","disable": false}}}

[nfs]
node01 openshift_ip=node01_ip

[masters]
node01 openshift_ip=node01_ip

[etcd]
node01 openshift_ip=node01_ip

[nodes]
node01 openshift_node_labels="{'region': 'infra','zone': 'default'}" openshift_schedulable=true openshift_ip=node01_ip

1. Run command

ansible-playbook -i $inventory_file /usr/share/ansible/openshift-ansible/playbooks/prerequisites.yml
ansible-playbook -i $inventory_file /usr/share/ansible/openshift-ansible/playbooks/deploy_cluster.yml

Expected Results

Deployment succeeds without any errors

Observed Results

Deployment fails

TASK [openshift_service_catalog : wait for api server to be ready] *************
FAILED - RETRYING: wait for api server to be ready (60 retries left).
FAILED - RETRYING: wait for api server to be ready (59 retries left).
FAILED - RETRYING: wait for api server to be ready (58 retries left).

# oc -n kube-service-catalog logs apiserver-5t2n4
Error: unknown flag: --admission-control

Additional Information

I checked that the problem that I have solved under commit https://github.com/openshift/openshift-ansible/commit/2fba65157b47a0ff48a34f2bad4e91f87f96364a#diff-f5c4b4675369f72d180a86be3772fe87

So puting updated packages under the repository can be enough to solve the issue. I think that it can be a good approach to run nighty builds and put generate packages under the relevant repository.