Comment 2 for bug 1971856

Revision history for this message
Juan Pablo Suazo (jsuazo) wrote :

Sorry for the confusion, let me clarify. We are working wit Victoria and deploying with kolla-ansible in docker containers.

Looking closer, we identified the bug to be in the `designate/designate/backend/impl_pdns4.py` file when trying to make requests to powerdns.

Here the requests are done in the following way:

86 try:
87 requests.post(
88 self._build_url(),
89 json=data,
90 headers=self.headers
91 ).raise_for_status()

Without using the `verify` parameter to provide certificates. This makes `requests` default to using environment variables, but, as variables as `REQUESTS_CA_BUNDLE` are not set within the containers, this requests return a ssl verification error.

Something like what is done on designate/designate/backend/impl_infoblox/connector.py could be done:

176 r = self.session.post(url,
177 data=jsonutils.dump_as_bytes(payload),
178 verify=self.sslverify,
179 headers=headers)