Horizon placement API calls don't use SSL option from local_settings

Bug #2054108 reported by Michal Wyszkowski
16
This bug affects 3 people
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
New
Undecided
Unassigned

Bug Description

Since commit "Use Placement API along with the hypervisor stats" Horizon displays
"Error: Unable to retrieve providers information." (with SSLError) and does not load Resource Provider table and host-based usage data in webgui Hypervisors tab.

Issue occurs when custom RootCA is used for api certs and Horizon is installed in venv (so python use CA certs provided by certifi).

Setting OPENSTACK_SSL_NO_VERIFY or OPENSTACK_SSL_CACERT in local_settings does not resolve this issue, like this options were omitted during placement api calls.

Revision history for this message
Przemysław Kuczyński (przemekkuczynski) wrote :

Same error here on kolla-ansible 2023.2

In gui click on admin -> compute -> hypervisor we see

Error: Unable to retrieve providers information. Details

Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://xxx:5000: HTTPSConnectionPool(host='xxx', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1007)')))

Error: Unable to retrieve providers statistics. Details

Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://xxx:5000: HTTPSConnectionPool(host='xxx', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1007)')))

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.