CloudKitty keystone fetcher authentication fails with internal TLS

Bug #2000096 reported by Pierre Riteau
18
This bug affects 4 people
Affects Status Importance Assigned to Milestone
kolla-ansible
Confirmed
Undecided
Unassigned

Bug Description

When internal TLS is enabled with a local CA, CloudKitty's keystone fetcher fails with authenticate with Keystone:

WARNING keystoneauth.identity.generic.base [-] Failed to discover available identity versions when contacting https://<VIP>:35357. Attempting to parse version from URL.: keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://<VIP>:35357: HTTPSConnectionPool(host='<VIP>', port=35357): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))

Noticed on Wallaby but likely to apply to all versions.

Gaël THEROND (gtherond)
Changed in kolla-ansible:
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.