CI: ovb ha oooq job fails to install undercloud with SSL: CERTIFICATE_VERIFY_FAILED

Bug #1694191 reported by Sagi (Sergey) Shnaidman
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Critical
Emilien Macchi

Bug Description

ovb ha and containers job fails to install undercloud with SSL: CERTIFICATE_VERIFY_FAILED

http://logs.openstack.org/32/468732/3/check-tripleo/gate-tripleo-ci-centos-7-ovb-ha-oooq/ea6bb99/logs/undercloud/home/jenkins/undercloud_install.log.txt.gz#_2017-05-29_01_17_09

2017-05-29 01:17:09 | 2017-05-29 01:17:09,583 INFO: Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could not evaluate: Execution of '/bin/openstack token issue --format value' returned 1: SSL exception connecting to https://192.168.24.2:13000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) (tried 29, for a total of 170 seconds)

http://logs.openstack.org/32/468732/3/check-tripleo/gate-tripleo-ci-centos-7-ovb-containers-oooq-nv/12d1630/logs/oooq/undercloud/home/jenkins/undercloud_install.log.txt.gz#_2017-05-29_01_16_18
2017-05-29 01:16:18 | 2017-05-29 01:16:18,903 INFO: Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could not evaluate: Execution of '/bin/openstack token issue --format value' returned 1: SSL exception connecting to https://192.168.24.2:13000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) (tried 29, for a total of 170 seconds)

AFAIK the certificate is issued for 192.168.24.1 (undercloud ip), but here it tries to connect to 192.168.24.2. If it's correct, then this is the problem.

Tags: ci
Changed in tripleo:
importance: Undecided → Critical
status: New → Triaged
Revision history for this message
Emilien Macchi (emilienm) wrote :

192.168.24.2 is the correct IP to connect to, it was like this 2 days ago and it was working.

See:
http://logs.openstack.org/06/466306/6/check-tripleo/gate-tripleo-ci-centos-7-ovb-ha-oooq/7f5ce69/logs/undercloud/home/jenkins/undercloud_install.log.txt.gz#_2017-05-27_16_08_37

/Stage[main]/Tripleo::Profile::Base::Certmonger_user/Tripleo::Certmonger::Haproxy[undercloud-haproxy-public]/Concat[/etc/pki/tls/certs/undercloud-192.168.24.2.pem]/File[/etc/pki/tls/certs/undercloud-192.168.24.2.pem]/content: content changed '{md5}2476deb5be8e1f78f0577d6ae67223c7' to '{md5}082a416e47d9370ea98b970e1bd36f6d'

I'm investigating now.

Changed in tripleo:
milestone: none → pike-2
Changed in tripleo:
assignee: nobody → Emilien Macchi (emilienm)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to puppet-tripleo (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/468810

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-tripleo (master)

Change abandoned by Emilien Macchi (<email address hidden>) on branch: master
Review: https://review.openstack.org/468810
Reason: https://review.openstack.org/#/c/468877/

Revision history for this message
Alfredo Moralejo (amoralej) wrote :

Note that fix in base image has been pushed in https://review.openstack.org/#/c/468872/

Changed in tripleo:
status: Triaged → Fix Released
tags: removed: alert
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.