Comment 28 for bug 1998417

Revision history for this message
Shuai Qian (iauhsnaiq) wrote :

we found the reason causes the issue.

maybe kolla-ansible changed the way for verifing ssl in the haproxy in 2023.1, it turns out that it didn't make it perfectly. Then we'll post issue for this in kolla-ansible.

And now the tmp resolution for you is that
1. add the following 2 lines into /etc/kolla/skyline-apiserver/gunicorn.py
(these two files should be in skyline_apiserver container, generated by kolla-ansible.)
```
keyfile = "/etc/skyline/certs/skyline-key.pem"
certfile = "/etc/skyline/certs/skyline-cert.pem"
```
then /etc/kolla/skyline-apiserver/gunicorn.py is like
# something
bind = "172.16.150.185:9998"
workers = 5
worker_class = "uvicorn.workers.UvicornWorker"
timeout = 300
keepalive = 5
reuse_port = True
proc_name = "skyline"
keyfile = "/etc/skyline/certs/skyline-key.pem"
certfile = "/etc/skyline/certs/skyline-cert.pem"
# something

2. restart skyline-apiserver container.