Canonical Juju

juju's simplestreams doesn't understand custom CAs

Bug #1856860 reported by Chris MacNaughton
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical Juju
Fix Released
High
Heather Lanigan
Canonical Juju 2.8-beta1
2.7
Fix Released
High
Heather Lanigan
Canonical Juju 2.7.3

Bug Description

When trying to bootstrap a Juju controller on an openstack that defines a custom product-streams endpoint and uses a custom CA for TLS, Juju can't find images to use:

14:28:39 TRACE juju.environs.simplestreams datasource.go:128 Got error requesting "https://object.stack.karyon.io:443/swift/v1/simplestreams/data/streams/v1/index.sjson": Get https://object.stack.karyon.io:443/swift/v1/simplestreams/data/streams/v1/index.sjson: x509: certificate signed by unknown authority

Revision history for this message
Chris MacNaughton (chris.macnaughton) wrote :

This juju client is configured with the CA in the clouds.yaml

Revision history for this message
Heather Lanigan (hmlanigan) wrote :

https://github.com/juju/juju/blob/develop/environs/simplestreams/datasource.go#L122

The client for simplestreams is created without certificate.

Changed in juju:
status: New → Triaged
Richard Harding (rharding)
Changed in juju:
importance: Undecided → High
milestone: none → 2.8-beta1
Heather Lanigan (hmlanigan)
Changed in juju:
assignee: nobody → Heather Lanigan (hmlanigan)
status: Triaged → In Progress
Revision history for this message
Heather Lanigan (hmlanigan) wrote :

https://github.com/juju/juju/pull/11094

Changed in juju:
status: In Progress → Fix Committed
Revision history for this message
Heather Lanigan (hmlanigan) wrote :

@chris.macnaughton, if you can verify this fix in the edge snap, I'll back port it for 2.7.3.

Revision history for this message
Chris MacNaughton (chris.macnaughton) wrote :

I can confirm that the edge snap can bootstrap and deploy instances on a cloud with a custom CA. Simplestreams works, yay!

Revision history for this message
Heather Lanigan (hmlanigan) wrote :

2.7: https://github.com/juju/juju/pull/11231

Harry Pidcock (hpidcock)
Changed in juju:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.