Container gnocchi-metricd failed when TLS and Swift enabled

Bug #2051731 reported by Maksim Malchuk
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Medium
Maksim Malchuk
Antelope
Fix Released
Medium
Maksim Malchuk
Bobcat
Fix Released
Medium
Maksim Malchuk
Caracal
Fix Released
Medium
Maksim Malchuk
Yoga
Fix Committed
Medium
Maksim Malchuk
Zed
Fix Released
Medium
Maksim Malchuk

Bug Description

2024-01-30 22:12:50,853 [1072] CRITICAL gnocchi.utils: Unexpected error while calling SwiftStorage._get_or_create_unaggregated_timeseries_unbatched: Authorization Failure. Authorization failed: SSL exception connecting to https://192.168.44.40:5000/v3/auth/tokens: HTTPSConnectionPool(host='192.168.44.40', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))
Traceback (most recent call last):
  File "/var/lib/kolla/venv/lib/python3.8/site-packages/urllib3/connectionpool.py", line 699, in urlopen
    httplib_response = self._make_request(
  File "/var/lib/kolla/venv/lib/python3.8/site-packages/urllib3/connectionpool.py", line 382, in _make_request
    self._validate_conn(conn)
  File "/var/lib/kolla/venv/lib/python3.8/site-packages/urllib3/connectionpool.py", line 1010, in _validate_conn
    conn.connect()
  File "/var/lib/kolla/venv/lib/python3.8/site-packages/urllib3/connection.py", line 411, in connect
    self.sock = ssl_wrap_socket(
  File "/var/lib/kolla/venv/lib/python3.8/site-packages/urllib3/util/ssl_.py", line 453, in ssl_wrap_socket
    ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls)
  File "/var/lib/kolla/venv/lib/python3.8/site-packages/urllib3/util/ssl_.py", line 495, in _ssl_wrap_socket_impl
    return ssl_context.wrap_socket(sock)
  File "/usr/lib/python3.8/ssl.py", line 500, in wrap_socket
    return self.sslsocket_class._create(
  File "/usr/lib/python3.8/ssl.py", line 1069, in _create
    self.do_handshake()
  File "/usr/lib/python3.8/ssl.py", line 1338, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)

To fix the issue the [storage] section should have swift_cacert variable set.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)
Changed in kolla-ansible:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/907254
Committed: https://opendev.org/openstack/kolla-ansible/commit/c0f84c068d3013be18b5f6302b31e14d6d471b2b
Submitter: "Zuul (22348)"
Branch: master

commit c0f84c068d3013be18b5f6302b31e14d6d471b2b
Author: Maksim Malchuk <email address hidden>
Date: Tue Jan 30 23:38:11 2024 +0300

    Fix gnocchi-metricd when TLS and Swift enabled

    Closes-Bug: #2051731
    Change-Id: Idf035bacbf5c2195d813ec4702362897f2ff907d
    Signed-off-by: Maksim Malchuk <email address hidden>

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/2023.2)

Fix proposed to branch: stable/2023.2
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/909556

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/2023.1)

Fix proposed to branch: stable/2023.1
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/909557

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/zed)

Fix proposed to branch: stable/zed
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/909558

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (unmaintained/yoga)

Fix proposed to branch: unmaintained/yoga
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/909784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (unmaintained/yoga)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/909784
Committed: https://opendev.org/openstack/kolla-ansible/commit/645273510751f8e437de54b17188a84914620a14
Submitter: "Zuul (22348)"
Branch: unmaintained/yoga

commit 645273510751f8e437de54b17188a84914620a14
Author: Maksim Malchuk <email address hidden>
Date: Tue Jan 30 23:38:11 2024 +0300

    Fix gnocchi-metricd when TLS and Swift enabled

    Closes-Bug: #2051731
    Change-Id: Idf035bacbf5c2195d813ec4702362897f2ff907d
    Signed-off-by: Maksim Malchuk <email address hidden>
    (cherry picked from commit c0f84c068d3013be18b5f6302b31e14d6d471b2b)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/2023.2)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/909556
Committed: https://opendev.org/openstack/kolla-ansible/commit/fc84fa51a52d59650157c7c5e9e4564b2f79f6e9
Submitter: "Zuul (22348)"
Branch: stable/2023.2

commit fc84fa51a52d59650157c7c5e9e4564b2f79f6e9
Author: Maksim Malchuk <email address hidden>
Date: Tue Jan 30 23:38:11 2024 +0300

    Fix gnocchi-metricd when TLS and Swift enabled

    Closes-Bug: #2051731
    Change-Id: Idf035bacbf5c2195d813ec4702362897f2ff907d
    Signed-off-by: Maksim Malchuk <email address hidden>
    (cherry picked from commit c0f84c068d3013be18b5f6302b31e14d6d471b2b)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/zed)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/909558
Committed: https://opendev.org/openstack/kolla-ansible/commit/7fb7d4c6cfb6825f47b2108221835276389b3273
Submitter: "Zuul (22348)"
Branch: stable/zed

commit 7fb7d4c6cfb6825f47b2108221835276389b3273
Author: Maksim Malchuk <email address hidden>
Date: Tue Jan 30 23:38:11 2024 +0300

    Fix gnocchi-metricd when TLS and Swift enabled

    Closes-Bug: #2051731
    Change-Id: Idf035bacbf5c2195d813ec4702362897f2ff907d
    Signed-off-by: Maksim Malchuk <email address hidden>
    (cherry picked from commit c0f84c068d3013be18b5f6302b31e14d6d471b2b)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/2023.1)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/909557
Committed: https://opendev.org/openstack/kolla-ansible/commit/1a15012d4e9d20894cd862ce226df5020726e5b7
Submitter: "Zuul (22348)"
Branch: stable/2023.1

commit 1a15012d4e9d20894cd862ce226df5020726e5b7
Author: Maksim Malchuk <email address hidden>
Date: Tue Jan 30 23:38:11 2024 +0300

    Fix gnocchi-metricd when TLS and Swift enabled

    Closes-Bug: #2051731
    Change-Id: Idf035bacbf5c2195d813ec4702362897f2ff907d
    Signed-off-by: Maksim Malchuk <email address hidden>
    (cherry picked from commit c0f84c068d3013be18b5f6302b31e14d6d471b2b)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 16.5.0

This issue was fixed in the openstack/kolla-ansible 16.5.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 17.3.0

This issue was fixed in the openstack/kolla-ansible 17.3.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 15.6.0

This issue was fixed in the openstack/kolla-ansible 15.6.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 18.0.0.0rc1

This issue was fixed in the openstack/kolla-ansible 18.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.