wget custom app failed by unable to establish SSL connection with

Bug #1843908 reported by Peng Peng
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Invalid
Low
Andy

Bug Description

Brief Description
-----------------
Applying a custom app, like hello-kitty. After apply completed, try to wget app from external failed. The error msg shows,
"OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Unable to establish SSL connection."

Severity
--------
Major

Steps to Reproduce
------------------
upload test app tar file
apply test app
wget <oam_ip>:<app_targetPort> from remote host

TC-name: z_containers/test_custom_containers.py::test_launch_app_via_sysinv

Expected Behavior
------------------
wget return properly with custom app downloaded to remote host

Actual Behavior
----------------
wget failed

Reproducibility
---------------
Seen once

System Configuration
--------------------
One node system

Lab-name: WCP_112

Branch/Pull Time/Commit
-----------------------
stx master as of 20190913T013000Z

Last Pass
---------
2019-09-09_00-10-00

Timestamp/Logs
--------------
[2019-09-13 08:18:06,962] 301 DEBUG MainThread ssh.send :: Send 'system --os-username 'admin' --os-password 'Li69nux*' --os-project-name admin --os-auth-url http://192.168.204.2:5000/v3 --os-user-domain-name Default --os-project-domain-name Default --os-endpoint-type internalURL --os-region-name RegionOne application-apply hello-kitty'

[2019-09-13 08:18:31,978] 301 DEBUG MainThread ssh.send :: Send 'system --os-username 'admin' --os-password 'Li69nux*' --os-project-name admin --os-auth-url http://192.168.204.2:5000/v3 --os-user-domain-name Default --os-project-domain-name Default --os-endpoint-type internalURL --os-region-name RegionOne application-list'
[2019-09-13 08:18:33,468] 423 DEBUG MainThread ssh.expect :: Output:
+---------------------+--------------------------------+-------------------------------+--------------------+---------+-----------+
| application | version | manifest name | manifest file | status | progress |
+---------------------+--------------------------------+-------------------------------+--------------------+---------+-----------+
| hello-kitty | 1.0 | hello-kitty | manifest.yaml | applied | completed |
| platform-integ-apps | 1.0-7 | platform-integration-manifest | manifest.yaml | applied | completed |
| stx-openstack | 1.0-18-centos-stable-versioned | armada-manifest | stx-openstack.yaml | applied | completed |
+---------------------+--------------------------------+-------------------------------+--------------------+---------+-----------+

[2019-09-13 08:18:52,492] 301 DEBUG MainThread ssh.send :: Send 'wget https://128.224.150.148:30300 -O /sandbox/AUTOMATION_LOGS/wcp_112/201909130354/tmp_files//hello-kitty.html'
[2019-09-13 08:18:52,618] 423 DEBUG MainThread ssh.expect :: Output:
--2019-09-13 04:18:52-- https://128.224.150.148:30300/
Connecting to 128.224.150.148:30300... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Unable to establish SSL connection.
]0;svc-cgcsauto@yow-cgcs-test:/home/svc-cgcsautosvc-cgcsauto@yow-cgcs-test$

Test Activity
-------------
Sanity

Revision history for this message
Peng Peng (ppeng) wrote :
Revision history for this message
Peng Peng (ppeng) wrote :
Revision history for this message
Ghada Khalil (gkhalil) wrote :

@Peng, Is this issue reproducible? If reproducible, does it happen on multiple labs or only wcp112?

Changed in starlingx:
status: New → Incomplete
Revision history for this message
Peng Peng (ppeng) wrote :

Issue reproduced on WCP_112 again but did not see it on another lab.
Lab: WCP_112
Load: 20190920T013000Z

Changed in starlingx:
status: Incomplete → Confirmed
Revision history for this message
Ghada Khalil (gkhalil) wrote :

Assigning to Andy to triage this issue; possibly a networking connectivity issue resulting in ssl failing

Changed in starlingx:
assignee: nobody → Andy (andy.wrs)
Revision history for this message
Ghada Khalil (gkhalil) wrote :

As per Yang, she indicated that this an https lab

Revision history for this message
Andy (andy.wrs) wrote :

I believe this is not a valid test. The test sending 'wget https://128.224.150.148:30300" after turned platform https on, expecting the hello-kitty containerized app has https on as well. This is not the case. Enabling platform https will not turn https on for containerized apps automatically, the app itself has to be reconfigured (such as create secret from certificate, create ingress for https requests etc). As a comparison, when https is to be enabled for stx-openstack (as q containerized app), there are configuration steps to follow after platform https is enabled.

I would suggest that the test is updated to 'wget http://128.224.150.148:30300" after platform https is enabled, to ensure the app is not broken and still accessible by http.

Changed in starlingx:
status: Confirmed → Invalid
Ghada Khalil (gkhalil)
tags: added: stx.containers
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → Low
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.