CI: ovb ha oooq job fails to install undercloud with SSL: CERTIFICATE_VERIFY_FAILED

[Sagi (Sergey) Shnaidman]

ovb ha and containers job fails to install undercloud with SSL: CERTIFICATE_VERIFY_FAILED

http://logs.openstack.org/32/468732/3/check-tripleo/gate-tripleo-ci-centos-7-ovb-ha-oooq/ea6bb99/logs/undercloud/home/jenkins/undercloud_install.log.txt.gz#_2017-05-29_01_17_09

2017-05-29 01:17:09 | 2017-05-29 01:17:09,583 INFO: Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could not evaluate: Execution of '/bin/openstack token issue --format value' returned 1: SSL exception connecting to https://192.168.24.2:13000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) (tried 29, for a total of 170 seconds)

http://logs.openstack.org/32/468732/3/check-tripleo/gate-tripleo-ci-centos-7-ovb-containers-oooq-nv/12d1630/logs/oooq/undercloud/home/jenkins/undercloud_install.log.txt.gz#_2017-05-29_01_16_18
2017-05-29 01:16:18 | 2017-05-29 01:16:18,903 INFO: Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could not evaluate: Execution of '/bin/openstack token issue --format value' returned 1: SSL exception connecting to https://192.168.24.2:13000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) (tried 29, for a total of 170 seconds)

AFAIK the certificate is issued for 192.168.24.1 (undercloud ip), but here it tries to connect to 192.168.24.2. If it's correct, then this is the problem.

[Emilien Macchi (emilienm)]

192.168.24.2 is the correct IP to connect to, it was like this 2 days ago and it was working.

See:
http://logs.openstack.org/06/466306/6/check-tripleo/gate-tripleo-ci-centos-7-ovb-ha-oooq/7f5ce69/logs/undercloud/home/jenkins/undercloud_install.log.txt.gz#_2017-05-27_16_08_37

/Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Haproxy[undercloud-haproxy-public]/Concat[/etc/pki/tls/certs/undercloud-192.168.24.2.pem]/File[/etc/pki/tls/certs/undercloud-192.168.24.2.pem]/content: content changed '{md5}2476deb5be8e1f78f0577d6ae67223c7' to '{md5}082a416e47d9370ea98b970e1bd36f6d'

I'm investigating now.

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.openstack.org/468810

[OpenStack Infra (hudson-openstack)]

Change abandoned by Emilien Macchi (<email address hidden>) on branch: master
Review: https://review.openstack.org/468810
Reason: https://review.openstack.org/#/c/468877/

[Alfredo Moralejo (amoralej)]

Note that fix in base image has been pushed in https://review.openstack.org/#/c/468872/