Unexpected warning messages seen during config_controller execution

[Maria Yousaf]

Brief Description
-----------------
There's some unexpected 'skip checking server certificate' warning messages that appear during config_controller execution.

Severity
--------
Minor. Warnings appear 8 times. No negative impact to installation observed.

Steps to Reproduce
------------------
1. Run config_controller and you'll see the following reported:

...
05/08: Creating system configuration ... 2019-05-03 06:50:22,351 WARNING ceph_client skip checking server certificate
sysinv 2019-05-03 06:50:22.351 74653 WARNING ceph_client [-] skip checking server certificate
2019-05-03 06:50:22,724 WARNING ceph_client skip checking server certificate
sysinv 2019-05-03 06:50:22.724 74653 WARNING ceph_client [-] skip checking server certificate
2019-05-03 06:50:22,758 WARNING ceph_client skip checking server certificate
...
DONE
06/08: Applying controller manifest ... DONE

Expected Behavior
------------------
No unexpected warnings reported during config_controller

Actual Behavior
----------------
Unexpected warnings reported during config_controller

Reproducibility
---------------
Reproducible

System Configuration
--------------------
Any

Branch/Pull Time/Commit
-----------------------
20190503T013000Z

Last Pass
---------
Warnings are the result of the ceph mimic merge

Timestamp/Logs
--------------
N/A. Easy to reproduce

Test Activity
-------------
Installation

[Ghada Khalil (gkhalil)]

Marking as Invalid as this will not be an issue once StarlingX transitions from config_controller to Ansible. Re-test is needed when Ansible is available. If the issue is still there, please open a new LP

[Daniel Badea (daniel.badea)]

This warning was explicitly added in python-cephclient ( https://opendev.org/starlingx/integ/src/branch/master/ceph/python-cephclient/python-cephclient/cephclient/client.py#L79 ) because it allows making unverified HTTPS requests in the entire application that's using this library by calling:

  urllib3.disable_warnings()

The proper way to fix this is to remove disable_warnings() from python-cephclient and properly load/trust ceph-mgr certificate before making any REST API request.

[Wendy Mitchell (wmitchellwr)]

still see these warnings on storage lab (wcp 92-98)
BUILD_ID="2019-06-03_18-34-53"

for example sysinv.log
2019-06-05 16:51:13.410 199026 INFO sysinv.conductor.kube_app [-] Image registry.local:9001/docker.io/port/ceph-config-helper:v1.10.3 download started from local registry
2019-06-05 16:51:13.935 199026 INFO sysinv.conductor.kube_app [-] Image registry.local:9001/docker.io/port/ceph-config-helper:v1.10.3 download succeeded in 0 seconds
2019-06-05 18:49:21.507 1252245 WARNING ceph_client [-] skip checking server certificate
2019-06-05 18:49:21.797 1252059 WARNING ceph_client [-] skip checking server certificate
2019-06-05 18:49:21.994 1252245 WARNING ceph_client [-] skip checking server certificate
2019-06-05 18:49:22.034 1252245 WARNING ceph_client [-] skip checking server certificate
2019-06-05 18:49:22.037 1252245 WARNING ceph_client [-] skip checking server certificate
2019-06-05 18:49:22.442 1252059 WARNING ceph_client [-] skip checking server certificate

[Ovidiu Poncea (ovidiuponcea)]

Imho the idea is for the warning to not appear in the console & since we no longer use config_controller user will no longer see the warning.
The sysinv log will be dealt with in https://bugs.launchpad.net/starlingx/+bug/1828470, I'm going to mark this as duplicate.