Add ca_path for module uri in opensearch

Bug #2073224 reported by Petr Slavchenkov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Status tracked in Dalmatian
Antelope
In Progress
Medium
Unassigned
Bobcat
In Progress
Medium
Unassigned
Caracal
In Progress
Medium
Unassigned
Dalmatian
Fix Released
Medium
Petr Slavchenkov

Bug Description

Installation of opensearch when internal TLS is enabled fails with an error:

**Environment**:
* OS Ubuntu 22.04
* Kolla-Ansible version stable/2023.1

* globals.yml
kolla_enable_tls_external: "yes"
kolla_enable_tls_internal: "yes"
kolla_enable_tls_backend: "no"
kolla_copy_ca_into_containers: "yes"

Running kolla-ansible -i /etc/kolla/inventory deploy -t opensearch

output is:

TASK [opensearch : Wait for OpenSearch to become ready] ************************
Wednesday 10 July 2024 10:23:09 +0000 (0:00:00.643) 0:20:02.649 ********
FAILED - RETRYING: [ctrl-01]: Wait for OpenSearch to become ready (30 retries left).

fatal: [ctrl-01]: FAILED! => changed=false
  action: uri
  attempts: 30
  elapsed: 0
  msg: 'Status code was -1 and not [200]: Request failed: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1007)>'
  redirected: false
  status: -1
  url: https://10.10.10.10:9200/_cluster/stats

Changed in kolla-ansible:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/924197
Committed: https://opendev.org/openstack/kolla-ansible/commit/aed500c1405b17f1991333c5fe4d2faf11b213c4
Submitter: "Zuul (22348)"
Branch: master

commit aed500c1405b17f1991333c5fe4d2faf11b213c4
Author: Petr Slavchenkov <email address hidden>
Date: Tue Jul 16 04:58:13 2024 +0000

    Add ca_path for module uri in opensearch role

    Fixes an deploy opensearch whith enable TLS on the internal VIP

    Closes-Bug: #2073224
    Change-Id: I50ce48c4e3c645e2f3aeee4913a9bc9ee506040a

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/2024.1)

Fix proposed to branch: stable/2024.1
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/924320

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/2023.2)

Fix proposed to branch: stable/2023.2
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/924321

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/2023.1)

Fix proposed to branch: stable/2023.1
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/924322

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.