wget custom app failed by unable to establish SSL connection with

[Peng Peng]

Brief Description
-----------------
Applying a custom app, like hello-kitty. After apply completed, try to wget app from external failed. The error msg shows,
"OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Unable to establish SSL connection."

Severity
--------
Major

Steps to Reproduce
------------------
upload test app tar file
apply test app
wget <oam_ip>:<app_targetPort> from remote host

TC-name: z_containers/test_custom_containers.py::test_launch_app_via_sysinv

Expected Behavior
------------------
wget return properly with custom app downloaded to remote host

Actual Behavior
----------------
wget failed

Reproducibility
---------------
Seen once

System Configuration
--------------------
One node system

Lab-name: WCP_112

Branch/Pull Time/Commit
-----------------------
stx master as of 20190913T013000Z

Last Pass
---------
2019-09-09_00-10-00

Timestamp/Logs
--------------
[2019-09-13 08:18:06,962] 301 DEBUG MainThread ssh.send :: Send 'system --os-username 'admin' --os-password 'Li69nux*' --os-project-name admin --os-auth-url http://192.168.204.2:5000/v3 --os-user-domain-name Default --os-project-domain-name Default --os-endpoint-type internalURL --os-region-name RegionOne application-apply hello-kitty'

[2019-09-13 08:18:31,978] 301 DEBUG MainThread ssh.send :: Send 'system --os-username 'admin' --os-password 'Li69nux*' --os-project-name admin --os-auth-url http://192.168.204.2:5000/v3 --os-user-domain-name Default --os-project-domain-name Default --os-endpoint-type internalURL --os-region-name RegionOne application-list'
[2019-09-13 08:18:33,468] 423 DEBUG MainThread ssh.expect :: Output:
+---------------------+--------------------------------+-------------------------------+--------------------+---------+-----------+
| application | version | manifest name | manifest file | status | progress |
+---------------------+--------------------------------+-------------------------------+--------------------+---------+-----------+
| hello-kitty | 1.0 | hello-kitty | manifest.yaml | applied | completed |
| platform-integ-apps | 1.0-7 | platform-integration-manifest | manifest.yaml | applied | completed |
| stx-openstack | 1.0-18-centos-stable-versioned | armada-manifest | stx-openstack.yaml | applied | completed |
+---------------------+--------------------------------+-------------------------------+--------------------+---------+-----------+

[2019-09-13 08:18:52,492] 301 DEBUG MainThread ssh.send :: Send 'wget https://128.224.150.148:30300 -O /sandbox/AUTOMATION_LOGS/wcp_112/201909130354/tmp_files//hello-kitty.html'
[2019-09-13 08:18:52,618] 423 DEBUG MainThread ssh.expect :: Output:
--2019-09-13 04:18:52-- https://128.224.150.148:30300/
Connecting to 128.224.150.148:30300... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Unable to establish SSL connection.
]0;svc-cgcsauto@yow-cgcs-test:/home/svc-cgcsautosvc-cgcsauto@yow-cgcs-test$

Test Activity
-------------
Sanity

[Ghada Khalil (gkhalil)]

@Peng, Is this issue reproducible? If reproducible, does it happen on multiple labs or only wcp112?

[Peng Peng (ppeng)]

Issue reproduced on WCP_112 again but did not see it on another lab.
Lab: WCP_112
Load: 20190920T013000Z

[Ghada Khalil (gkhalil)]

Assigning to Andy to triage this issue; possibly a networking connectivity issue resulting in ssl failing

[Ghada Khalil (gkhalil)]

As per Yang, she indicated that this an https lab

[Andy (andy.wrs)]

I believe this is not a valid test. The test sending 'wget https://128.224.150.148:30300" after turned platform https on, expecting the hello-kitty containerized app has https on as well. This is not the case. Enabling platform https will not turn https on for containerized apps automatically, the app itself has to be reconfigured (such as create secret from certificate, create ingress for https requests etc). As a comparison, when https is to be enabled for stx-openstack (as q containerized app), there are configuration steps to follow after platform https is enabled.

I would suggest that the test is updated to 'wget http://128.224.150.148:30300" after platform https is enabled, to ensure the app is not broken and still accessible by http.