n-cert was disabled by default but we still call cert related things

Bug #1441348 reported by Adam Gandelman
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
devstack
Invalid
Undecided
Unassigned

Bug Description

https://review.openstack.org/#/c/169709/ disabled n-crt service by default

create_userrc.sh still calls x509-get-root-cert in all cases, ending in a non-fatal error after a nova RPC timeout (~1 min):

2015-04-07 20:41:39.139 | + mv /opt/stack/devstack/accrc/cacert.pem /opt/stack/devstack/accrc/cacert.pem.old
2015-04-07 20:41:39.140 | + nova x509-get-root-cert /opt/stack/devstack/accrc/cacert.pem
2015-04-07 20:42:40.004 | ERROR (ClientException): The server has either erred or is incapable of performing the requested operation. (HTTP 500) (Request-ID: req-f1f3345b-2081-49e9-8c8e-83f8c9e82bb4)
2015-04-07 20:42:40.023 | + echo 'Failed to update the root certificate: /opt/stack/devstack/accrc/cacert.pem'
2015-04-07 20:42:40.023 | Failed to update the root certificate: /opt/stack/devstack/accrc/cacert.pem
2015-04-07 20:42:40.023 | + '[' -e /opt/stack/devstack/accrc/cacert.pem.old ']'

This big delay can break some time sensitive stuff that happens later, causing timeouts to expire (ie, ironic)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to devstack (master)

Fix proposed to branch: master
Review: https://review.openstack.org/171406

Changed in devstack:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on devstack (master)

Change abandoned by Adam Gandelman (<email address hidden>) on branch: master
Review: https://review.openstack.org/171406

Revision history for this message
Sean Dague (sdague) wrote :

This devstack bug was last updated over 180 days ago, as devstack
is a fast moving project and we'd like to get the tracker down to
currently actionable bugs, this is getting marked as Invalid. If the
issue still exists, please feel free to reopen it.

Changed in devstack:
status: In Progress → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.