octavia housekeeping require certification files when enabled spare_amphora_pool_size feature

Bug #1719063 reported by Jeffrey Zhang
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Undecided
Unassigned
Ocata
Fix Released
Undecided
Unassigned
Pike
Fix Released
Undecided
Unassigned

Bug Description

Got following error message

  Atom 'octavia.controller.worker.tasks.lifecycle_tasks.AmphoraIDToErrorOnRevertTask' {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora_id': u'51aee610-463a-4aec-bff8-834cb2d1e84d'}, 'provides': None}
  |__Atom 'octavia.controller.worker.tasks.database_tasks.CreateAmphoraInDB' {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {}, 'provides': u'51aee610-463a-4aec-bff8-834cb2d1e84d'}
     |__Flow 'octavia-create-amphora-flow'
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker Traceback (most recent call last):
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker File "/var/lib/kolla/venv/lib/python2.7/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker result = task.execute(**arguments)
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/controller/worker/tasks/cert_task.py", line 46, in execute
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker validity=CERT_VALIDITY)
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/certificates/generator/local.py", line 238, in generate_cert_key_pair
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker cert = cls.sign_cert(csr, validity, **kwargs)
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/certificates/generator/local.py", line 97, in sign_cert
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker cls._validate_cert(ca_cert, ca_key, ca_key_pass)
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/certificates/generator/local.py", line 54, in _validate_cert
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker .format(CONF.certificates.ca_certificate)
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker CertificateGenerationException: Could not sign the certificate request: Failed to load CA Certificate /etc/octavia/certs/ca_01.pem.
2017-09-23 14:34:45.184 7 ERROR octavia.controller.worker.controller_worker

Changed in kolla-ansible:
milestone: none → queens-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.openstack.org/506832
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=ef85df2335f21b82c04e752e039b30d45b4483ab
Submitter: Jenkins
Branch: master

commit ef85df2335f21b82c04e752e039b30d45b4483ab
Author: Jeffrey Zhang <email address hidden>
Date: Sat Sep 23 14:58:23 2017 +0800

    Copy certifications info octavia housekeeping and health manager container

    octavia-housekeeping container need certifications to create spare
    amphore instances.

    octavia-health-manager container need certifications to create stable
    amphore instances.

    Change-Id: I90b9c4c39f6542bb1ee5f40a8d0a39ae8d0ab2b0
    Closes-Bug: #1719063

Changed in kolla-ansible:
status: New → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 6.0.0.0b2

This issue was fixed in the openstack/kolla-ansible 6.0.0.0b2 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/pike)

Reviewed: https://review.openstack.org/508363
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=440fc456c9a92d4a526265b8346dab99a5a19681
Submitter: Zuul
Branch: stable/pike

commit 440fc456c9a92d4a526265b8346dab99a5a19681
Author: Jeffrey Zhang <email address hidden>
Date: Sat Sep 23 14:58:23 2017 +0800

    Copy certifications info octavia housekeeping and health manager container

    octavia-housekeeping container need certifications to create spare
    amphore instances.

    octavia-health-manager container need certifications to create stable
    amphore instances.

    Change-Id: I90b9c4c39f6542bb1ee5f40a8d0a39ae8d0ab2b0
    Closes-Bug: #1719063
    (cherry picked from commit ef85df2335f21b82c04e752e039b30d45b4483ab)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 5.0.2

This issue was fixed in the openstack/kolla-ansible 5.0.2 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/ocata)

Reviewed: https://review.openstack.org/508364
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=dc2dfc65ac03d56f26a9a426f6017d032080ed2f
Submitter: Zuul
Branch: stable/ocata

commit dc2dfc65ac03d56f26a9a426f6017d032080ed2f
Author: Jeffrey Zhang <email address hidden>
Date: Sat Sep 23 14:58:23 2017 +0800

    Copy certifications info octavia housekeeping and health manager container

    octavia-housekeeping container need certifications to create spare
    amphore instances.

    octavia-health-manager container need certifications to create stable
    amphore instances.

    Change-Id: I90b9c4c39f6542bb1ee5f40a8d0a39ae8d0ab2b0
    Closes-Bug: #1719063
    (cherry picked from commit ef85df2335f21b82c04e752e039b30d45b4483ab)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 4.0.5

This issue was fixed in the openstack/kolla-ansible 4.0.5 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.