ovb-3ctlr_1comp_1supp-featureset039 failing overcloud deploy "Failed to connect to NOVA_API database "

[Marios Andreou]

in periodic-tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039-master [1] and also check tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039 [2] overcloud deploy fails with trace like:

        2019-05-16 11:43:54 | "stdout: Failed to connect to NOVA_API database",
        2019-05-16 11:43:54 | "ERROR 1045 (28000): Access denied for user 'nova_api'@'172.17.0.193' (using password: YES)",
        2019-05-16 11:43:54 | "Failed to connect to PLACEMENT database",
        2019-05-16 11:43:54 | "ERROR 1045 (28000): Access denied for user 'placement'@'172.17.0.193' (using password: YES)",
        2019-05-16 11:43:54 | "Unable to proceed without connection to nova database",

NOTE: AFAICS this does not block promotions since we don't have it in criteria [3] it is already commented out

[1] https://logs.rdoproject.org/openstack-periodic-master/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039-master/66e9030/logs/undercloud/home/zuul/overcloud_deploy.log.txt.gz#_2019-05-16_08_30_15
[2] http://logs.rdoproject.org/14/658814/3/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039/fb9c432/logs/undercloud/home/zuul/overcloud_deploy.log.txt.gz
[3] https://github.com/rdo-infra/ci-config/blob/e9071a51cfee09f4b77f3c4963b1b3db5034e8ea/ci-scripts/dlrnapi_promoter/config/CentOS-7/master.ini#L27

[Martin Schuppert (mschuppert)]

the issue us that in tls-everywhere scenario we don't have a mysql.cnf, which has a [client] section which tells the mysql client triggered in /usr/share/placement/mysql-migrate-db.sh [1] to use ssl.

After initial discussion, seems we should add a [client] section to either triplo.cnf or another mysql config file to let the client know ssl needs to be used.

[1] https://github.com/openstack/tripleo-heat-templates/blob/master/deployment/placement/placement-api-container-puppet.yaml#L247

[Martin Schuppert (mschuppert)]

https://bugs.launchpad.net/tripleo/+bug/1829758 is the LP to track adding [client] section to /etc/my.cnf.d/tripleo.cnf .

Patch: https://review.opendev.org/#/c/660143/

[Marios Andreou (marios-b)]

@Martin so hopefully once your patch merges this should be fixed? so connections will be using ssl as they should be in this scenario . means possible duplicate bug but no biggie will be happy to close it - waiting on https://review.opendev.org/#/c/660143/ to merge

[Marios Andreou (marios-b)]

the fix from comment #2 merged but didn't get a green run today yet at https://review.rdoproject.org/zuul/builds?job_name=periodic-tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039-master

holding fix-released for now

[Rafael Folco (rafaelfolco)]

green run
http://logs.rdoproject.org/openstack-periodic-master/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039-master/7124a01/

closing.