[system-tests] Failed to initialize SSL connection to OS keystone from tests

Bug #1491020 reported by Dennis Dmitriev
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
New
High
Fuel QA Team

Bug Description

ISO#260
Reproduced on CI: https://product-ci.infra.mirantis.net/view/7.0_swarm/job/7.0.system_test.ubuntu.thread_2/78/

When a cluster is deployed, some system tests initialize connection to OpenStack services using public__vip and enabled SSL, for example:

        os_conn = os_actions.OpenStackActions(
            self.fuel_web.get_public_vip(cluster_id),
            data['user'], data['password'], data['tenant'])

After SSL was enabled for system tests, keystone client failed to initialize SSL connection:

======================================================================
ERROR: Deploy cluster in HA mode (one controller) with neutron
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/jenkins/venv-nailgun-tests-2.9/local/lib/python2.7/site-packages/proboscis/case.py", line 296, in testng_method_mistake_capture_func
    compatability.capture_type_error(s_func)
  File "/home/jenkins/venv-nailgun-tests-2.9/local/lib/python2.7/site-packages/proboscis/compatability/exceptions_2_6.py", line 27, in capture_type_error
    func()
  File "/home/jenkins/venv-nailgun-tests-2.9/local/lib/python2.7/site-packages/proboscis/case.py", line 350, in func
    func(test_case.state.get_state())
  File "/home/jenkins/workspace/7.0.system_test.ubuntu.thread_2/fuelweb_test/helpers/decorators.py", line 80, in wrapper
    result = func(*args, **kwargs)
  File "/home/jenkins/workspace/7.0.system_test.ubuntu.thread_2/fuelweb_test/tests/test_ha_one_controller.py", line 110, in deploy_ha_one_controller_neutron
    snapshot_name="deploy_ha_one_controller_neutron")
  File "/home/jenkins/workspace/7.0.system_test.ubuntu.thread_2/fuelweb_test/tests/test_ha_one_controller_base.py", line 52, in deploy_ha_one_controller_neutron_base
    data['user'], data['password'], data['tenant'])
  File "/home/jenkins/workspace/7.0.system_test.ubuntu.thread_2/fuelweb_test/helpers/os_actions.py", line 33, in __init__
    tenant)
  File "/home/jenkins/workspace/7.0.system_test.ubuntu.thread_2/fuelweb_test/helpers/common.py", line 66, in __init__
    ca_cert=path_to_cert)
  File "/home/jenkins/workspace/7.0.system_test.ubuntu.thread_2/fuelweb_test/helpers/common.py", line 177, in _get_keystoneclient
    cacert=ca_cert)
  File "/home/jenkins/venv-nailgun-tests-2.9/local/lib/python2.7/site-packages/keystoneclient/v2_0/client.py", line 152, in __init__
    self.authenticate()
  File "/home/jenkins/venv-nailgun-tests-2.9/local/lib/python2.7/site-packages/keystoneclient/utils.py", line 336, in inner
    return func(*args, **kwargs)
  File "/home/jenkins/venv-nailgun-tests-2.9/local/lib/python2.7/site-packages/keystoneclient/httpclient.py", line 507, in authenticate
    resp = self.get_raw_token_from_identity_service(**kwargs)
  File "/home/jenkins/venv-nailgun-tests-2.9/local/lib/python2.7/site-packages/keystoneclient/v2_0/client.py", line 196, in get_raw_token_from_identity_service
    _("Authorization Failed: %s") % e)
AuthorizationFailure: Authorization Failed: SSL exception connecting to https://10.109.6.3:5000/v2.0/tokens: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

ISO version: {
 "build_id": "260",
 "build_number": "260",
 "auth_required": true,
 "fuel-ostf_sha": "582a81ccaa1e439a3aec4b8b8f6994735de840f4",
 "fuel-library_sha": "e055af9dee6fbaf84cb8e86a9ebff9b25b07792e",
 "nailgun_sha": "3de0f32fe9e09fbeee8a695d738f31fe2347e55a",
 "openstack_version": "2015.1.0-7.0",
 "fuel-nailgun-agent_sha": "d7027952870a35db8dc52f185bb1158cdd3d1ebd",
 "fuel-agent_sha": "082a47bf014002e515001be05f99040437281a2d",
 "api": "1.0",
 "python-fuelclient_sha": "9643fa07f1290071511066804f962f62fe27b512",
 "astute_sha": "53c86cba593ddbac776ce5a3360240274c20738c",
 "fuelmain_sha": "994bb9a8a2a3c4ab1f16e57b479d052abe45f921",
 "feature_groups": [
  "mirantis"
 ],
 "release": "7.0",
 "release_versions": {
  "2015.1.0-7.0": {
   "VERSION": {
    "build_id": "260",
    "build_number": "260",
    "fuel-library_sha": "e055af9dee6fbaf84cb8e86a9ebff9b25b07792e",
    "nailgun_sha": "3de0f32fe9e09fbeee8a695d738f31fe2347e55a",
    "fuel-ostf_sha": "582a81ccaa1e439a3aec4b8b8f6994735de840f4",
    "fuel-nailgun-agent_sha": "d7027952870a35db8dc52f185bb1158cdd3d1ebd",
    "fuel-agent_sha": "082a47bf014002e515001be05f99040437281a2d",
    "api": "1.0",
    "python-fuelclient_sha": "9643fa07f1290071511066804f962f62fe27b512",
    "astute_sha": "53c86cba593ddbac776ce5a3360240274c20738c",
    "fuelmain_sha": "994bb9a8a2a3c4ab1f16e57b479d052abe45f921",
    "feature_groups": [
     "mirantis"
    ],
    "release": "7.0",
    "openstack_version": "2015.1.0-7.0",
    "production": "docker"
   }
  }
 },
 "production": "docker"
}

Tags: system-tests
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.