Certificates are not created
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ceph RADOS Gateway Charm |
Fix Released
|
Critical
|
David Ames | ||
Charm Helpers |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Ceilometer Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Cinder Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Dashboard Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Glance Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Heat Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Keystone Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Neutron API Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Nova Cloud Controller Charm |
Fix Released
|
Critical
|
David Ames | ||
OpenStack Placement Charm |
Fix Released
|
Critical
|
David Ames | ||
vault-charm |
Invalid
|
Undecided
|
Unassigned |
Bug Description
Discourse post [0] shows a bug in nova-cloud-
"""
ubuntu@
● apache2.service - The Apache HTTP Server
Loaded: loaded (/lib/systemd/
Active: failed (Result: exit-code) since Tue 2020-09-01 16:33:18 UTC; 1min 19s ago
Docs: https:/
Sep 01 16:33:18 juju-e9be94-
Sep 01 16:33:18 juju-e9be94-
Sep 01 16:33:18 juju-e9be94-
Sep 01 16:33:18 juju-e9be94-
Sep 01 16:33:18 juju-e9be94-
Sep 01 16:33:18 juju-e9be94-
Sep 01 16:33:18 juju-e9be94-
Sep 01 16:33:18 juju-e9be94-
ubuntu@
total 8.0K
dr-xr-xr-x 2 root root 4.0K Aug 31 22:33 .
drwxr-xr-x 3 root root 4.0K Aug 31 22:33 ..
ubuntu@
EDIT: I should mention that running juju run-action --wait vault/leader reissue-
"""
A similar fix to [2][3] may help but this needs testing.
[0] https:/
[1] https:/
[2] https:/
[3] https:/
[4] https:/
summary: |
- Certerifictes are not created + Certificates are not created |
Changed in charm-helpers: | |
status: | New → Triaged |
status: | Triaged → Won't Fix |
status: | Won't Fix → In Progress |
importance: | Undecided → Critical |
assignee: | nobody → David Ames (thedac) |
Changed in charm-ceilometer: | |
importance: | Undecided → Critical |
assignee: | nobody → David Ames (thedac) |
milestone: | none → 21.01 |
Changed in charm-heat: | |
status: | New → Fix Committed |
importance: | Undecided → Critical |
assignee: | nobody → David Ames (thedac) |
milestone: | none → 21.01 |
Changed in charm-neutron-api: | |
importance: | Undecided → Critical |
assignee: | nobody → David Ames (thedac) |
milestone: | none → 21.01 |
Changed in charm-nova-cloud-controller: | |
importance: | Undecided → Critical |
assignee: | nobody → David Ames (thedac) |
milestone: | none → 21.01 |
Changed in vault-charm: | |
status: | New → Invalid |
Changed in charm-placement: | |
status: | New → Fix Committed |
importance: | Undecided → Critical |
assignee: | nobody → David Ames (thedac) |
milestone: | none → 21.01 |
Changed in charm-glance: | |
importance: | Undecided → Critical |
assignee: | nobody → David Ames (thedac) |
milestone: | none → 21.01 |
Changed in charm-ceph-radosgw: | |
assignee: | nobody → David Ames (thedac) |
importance: | Undecided → Critical |
milestone: | none → 21.01 |
status: | New → Fix Committed |
Changed in charm-nova-cloud-controller: | |
status: | In Progress → Fix Committed |
Changed in charm-nova-cloud-controller: | |
status: | Fix Committed → Fix Released |
Changed in charm-heat: | |
status: | Fix Committed → Fix Released |
Changed in charm-openstack-dashboard: | |
status: | Fix Committed → Fix Released |
Changed in charm-neutron-api: | |
status: | Fix Committed → Fix Released |
Changed in charm-placement: | |
status: | Fix Committed → Fix Released |
Changed in charm-ceilometer: | |
status: | Fix Committed → Fix Released |
Changed in charm-glance: | |
status: | Fix Committed → Fix Released |
Changed in charm-ceph-radosgw: | |
status: | Fix Committed → Fix Released |
Changed in charm-cinder: | |
status: | Fix Committed → Fix Released |
Changed in charm-keystone: | |
status: | Fix Committed → Fix Released |
fyi, bundle attached, also it's not only a nova-cloud- controller issue I think it's more down to how vault is creating certs and restarting services as most of the time I had this issue with placement service, another issue is that when you do a reissue certs it not always restarting all Apache services on every unit and therefore had issues where HTTPS is talking to HTTP. Unfortunately, I don't have logs or can re-create the issue as I've already resolved the issue locally.