tripleo

Octavia certs don't update across all nodes

Bug #1939445 reported by Brent Eagles
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Brent Eagles
tripleo xena-3

Bug Description

Updates to CA and service certs were only happening on the bootstrap node because of name collision in ansible.

Originally reported https://bugzilla.redhat.com/show_bug.cgi?id=1985999.

Brent Eagles (beagles)
Changed in tripleo:
status: New → Triaged
milestone: none → xena-3
assignee: nobody → Brent Eagles (beagles)
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/tripleo-ansible/+/804132

Changed in tripleo:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/tripleo-ansible/+/804132
Committed: https://opendev.org/openstack/tripleo-ansible/commit/6d4ee79d28c63cb61d6aabb0854f2d3fc3bfc48a
Submitter: "Zuul (22348)"
Branch: master

commit 6d4ee79d28c63cb61d6aabb0854f2d3fc3bfc48a
Author: Brent Eagles <email address hidden>
Date: Tue Aug 10 16:56:34 2021 -0230

    Use different name to distinguish between facts and vars in octavia

    ansible facts take precedence over vars in ansible apparently so octavia
    controller configuration did not properly update certificates on hosts.

    Closes-Bug: #1939445
    Change-Id: I42e8993825c9ed956543755daf8cb6e414b1d790

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-ansible (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/tripleo-ansible/+/804297

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-ansible (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/tripleo-ansible/+/804297
Committed: https://opendev.org/openstack/tripleo-ansible/commit/836fc3389c96f98b8c736922de48441f3494a91e
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit 836fc3389c96f98b8c736922de48441f3494a91e
Author: Brent Eagles <email address hidden>
Date: Tue Aug 10 16:56:34 2021 -0230

    Use different name to distinguish between facts and vars in octavia

    ansible facts take precedence over vars in ansible apparently so octavia
    controller configuration did not properly update certificates on hosts.

    Closes-Bug: #1939445
    Change-Id: I42e8993825c9ed956543755daf8cb6e414b1d790
    (cherry picked from commit 6d4ee79d28c63cb61d6aabb0854f2d3fc3bfc48a)

tags: added: in-stable-wallaby
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-ansible (stable/ussuri)

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/c/openstack/tripleo-ansible/+/805692

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-ansible (stable/train)

Fix proposed to branch: stable/train
Review: https://review.opendev.org/c/openstack/tripleo-ansible/+/805693

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-ansible (stable/ussuri)

Reviewed: https://review.opendev.org/c/openstack/tripleo-ansible/+/805692
Committed: https://opendev.org/openstack/tripleo-ansible/commit/1f3173778a6f41f06c73c0ab4e223da89455102d
Submitter: "Zuul (22348)"
Branch: stable/ussuri

commit 1f3173778a6f41f06c73c0ab4e223da89455102d
Author: Brent Eagles <email address hidden>
Date: Tue Aug 10 16:56:34 2021 -0230

    Use different name to distinguish between facts and vars in octavia

    ansible facts take precedence over vars in ansible apparently so octavia
    controller configuration did not properly update certificates on hosts.

    Closes-Bug: #1939445
    Change-Id: I42e8993825c9ed956543755daf8cb6e414b1d790
    (cherry picked from commit 6d4ee79d28c63cb61d6aabb0854f2d3fc3bfc48a)
    (cherry picked from commit 836fc3389c96f98b8c736922de48441f3494a91e)

tags: added: in-stable-ussuri
tags: added: in-stable-train
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-ansible (stable/train)

Reviewed: https://review.opendev.org/c/openstack/tripleo-ansible/+/805693
Committed: https://opendev.org/openstack/tripleo-ansible/commit/31d6df195c4f2b550927b5310aef04f8fe6d5fc6
Submitter: "Zuul (22348)"
Branch: stable/train

commit 31d6df195c4f2b550927b5310aef04f8fe6d5fc6
Author: Brent Eagles <email address hidden>
Date: Tue Aug 10 16:56:34 2021 -0230

    Use different name to distinguish between facts and vars in octavia

    ansible facts take precedence over vars in ansible apparently so octavia
    controller configuration did not properly update certificates on hosts.

    Closes-Bug: #1939445
    Change-Id: I42e8993825c9ed956543755daf8cb6e414b1d790
    (cherry picked from commit 6d4ee79d28c63cb61d6aabb0854f2d3fc3bfc48a)
    (cherry picked from commit 836fc3389c96f98b8c736922de48441f3494a91e)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-ansible 4.1.0

This issue was fixed in the openstack/tripleo-ansible 4.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-ansible 1.5.6

This issue was fixed in the openstack/tripleo-ansible 1.5.6 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-ansible train-eol

This issue was fixed in the openstack/tripleo-ansible train-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.