sc000 upgrade job failing on haproxy TLS config during initial deployment

[Jiří Stránský]

scenario000 upgrade job failing on trying to generate config for haproxy during initial deployment:

            "Error: Execution of '/usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg20180516-12-znnnvk -c' returned 1: [ALERT] 135/115556 (247) : Proxy 'keystone_public': no SSL certificate specified for bind '192.168.24.7:13000' at [/etc/haproxy/haproxy.cfg20180516-12-znnnvk:42] (use 'crt').",
            "[ALERT] 135/115556 (247) : Fatal errors found in configuration.",
            "Error: /Stage[main]/Haproxy/Haproxy::Instance[haproxy]/Haproxy::Config[haproxy]/Concat[/etc/haproxy/haproxy.cfg]/File[/etc/haproxy/haproxy.cfg]/content: change from {md5}1f337186b0e1ba5ee82760cb437fb810 to {md5}e7396616ce0913ad5f9e543618240dee failed: Execution of '/usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg20180516-12-znnnvk -c' returned 1: [ALERT] 135/115556 (247) : Proxy 'keystone_public': no SSL certificate specified for bind '192.168.24.7:13000' at [/etc/haproxy/haproxy.cfg20180516-12-znnnvk:42] (use 'crt').",

This is likely due to discrepancy between Rocky undercloud with tls-by-default client, and non-tls-by-default templates of Queens.

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.openstack.org/568843

[Jiří Stránský (jistr)]

http://logs.openstack.org/25/558425/8/experimental/tripleo-ci-centos-7-scenario000-multinode-oooq-container-upgrades/a9c6f73/logs/

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/569136

[OpenStack Infra (hudson-openstack)]

Change abandoned by Jiri Stransky (<email address hidden>) on branch: stable/queens
Review: https://review.openstack.org/569136

[OpenStack Infra (hudson-openstack)]

Change abandoned by Jiri Stransky (<email address hidden>) on branch: master
Review: https://review.openstack.org/568843