hook failed: "certificates-relation-changed" - interface_tls_certificates.ca_client.CAClientError

Bug #2040351 reported by Nobuto Murata
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Ceph iSCSI Charm
New
Undecided
Unassigned

Bug Description

When adding the "ceph-iscsi:certificates vault:certificates" relation, the unit status of ceph-iscsi turns into error although it's eventually recovered by retries of the failed hook.

25 Oct 2023 02:37:23Z juju-unit executing running certificates-relation-created hook
25 Oct 2023 02:37:23Z juju-unit executing running certificates-relation-joined hook for vault/0
25 Oct 2023 02:37:24Z juju-unit executing running certificates-relation-changed hook for vault/0
25 Oct 2023 02:37:25Z juju-unit idle
25 Oct 2023 02:37:25Z juju-unit executing running certificates-relation-changed hook for vault/0
25 Oct 2023 02:37:25Z juju-unit error hook failed: "certificates-relation-changed"
25 Oct 2023 02:37:30Z juju-unit executing running certificates-relation-changed hook for vault/0
25 Oct 2023 02:37:35Z workload active Unit is ready
25 Oct 2023 02:37:35Z juju-unit idle

unit-ceph-iscsi-0: 02:37:25 DEBUG unit.ceph-iscsi/0.juju-log certificates:17: Emitting Juju event certificates_relation_changed.
unit-ceph-iscsi-0: 02:37:25 INFO unit.ceph-iscsi/0.juju-log certificates:17: A CA has not yet processed requests: app_data
unit-ceph-iscsi-0: 02:37:25 ERROR unit.ceph-iscsi/0.juju-log certificates:17: Uncaught exception while in charm code:
Traceback (most recent call last):
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/./src/charm.py", line 589, in <module>
    main(ops_openstack.core.get_charm_class_for_release())
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/main.py", line 438, in main
    _emit_charm_event(charm, dispatcher.event_name)
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/main.py", line 150, in _emit_charm_event
    event_to_emit.emit(*args, **kwargs)
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 355, in emit
    framework._emit(event) # noqa
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 856, in _emit
    self._reemit(event_path)
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 931, in _reemit
    custom_handler(event)
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/interface_tls_certificates/ca_client.py", line 687, in _on_relation_changed
    self.ready_events[request_type].emit()
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 355, in emit
    framework._emit(event) # noqa
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 856, in _emit
    self._reemit(event_path)
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 931, in _reemit
    custom_handler(event)
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/./src/charm.py", line 440, in on_tls_app_config_ready
    self.ca_client.application_key.private_bytes(
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/interface_tls_certificates/ca_client.py", line 440, in application_key
    return self._get_certs_and_keys('application')['default']['key']
  File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/interface_tls_certificates/ca_client.py", line 282, in _get_certs_and_keys
    raise CAClientError(
interface_tls_certificates.ca_client.CAClientError
unit-ceph-iscsi-0: 02:37:25 ERROR juju.worker.uniter.operation hook "certificates-relation-changed" (via hook dispatching script: dispatch) failed: exit status 1
unit-ceph-iscsi-0: 02:37:25 INFO juju.worker.uniter awaiting error resolution for "relation-changed" hook

Revision history for this message
Nobuto Murata (nobuto) wrote :
tags: added: field-ceph-dashboard
Revision history for this message
Nobuto Murata (nobuto) wrote :

Sounds similar to https://bugs.launchpad.net/charm-octavia/+bug/2028683, but I didn't look into the code.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.