Bug 1412721

Summary:	Upgrade From RHEL OSP 8 to RHEL OSP 9 with SSL on RHEL 7.2 Fails on Final Step of Upgrade
Product:	Red Hat OpenStack	Reporter:	Chris Paquin <cpaquin>
Component:	rhosp-director	Assignee:	Angus Thomas <athomas>
Status:	CLOSED NOTABUG	QA Contact:	Omri Hochman <ohochman>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	9.0 (Mitaka)	CC:	aschultz, dbecker, mburns, morazi, rhel-osp-director-maint, sbaker, shardy, srevivo
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-02-08 22:17:54 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Chris Paquin 2017-01-12 15:50:40 UTC

Description of problem:

Upgrade fails on the step below.
3.4.9. Finalizing the Upgrade

Which includes -e /usr/share/openstack-tripleo-heat-templates/environments/major-upgrade-pacemaker-converge.yaml

Error from deployment output show is shown below - Please see BZ (1387378) as the error message is the same, and we have added notes to this BZ.

Error: /Stage[main]/Neutron/Resources[neutron_config]: Failed to generate additional resources using 'generate': OpenStackConfig only support collecting instances when a file path is hard coded
Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could not evaluate: Execution of '/usr/bin/openstack token issue --format value' returned 1: SSL exception connecting to https://10.75.6.130:13000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765) (tried 41, for a total of 170 seconds)

Per the BZ we have upgraded openstack-puppet-modules-8.1.8-2.el7ost to openstack-puppet-modules-8.1.8-3.el7ost. This supposedly fixes the issue, however, we are still seeing the error and are unable to complete the upgrade.

Version-Release number of selected component (if applicable):
OSP 9

How reproducible:
Attempt to run final step of deploy - we have reproduced this error many times

Steps to Reproduce:
1. Start with RHEL OSP 8 Environment running on RHEL 7.2
2. Start upgrade process to upgrade to RHEL OSP 9 using repos that do not require RHEL 7.3
3. Fail on final step of upgrade

Actual results:
Upgrade fails to complete without error

Expected results:
Upgrade completes without error

Additional info:
See BZ (1387378), as we have added notes to this existing bug. Bug was closed so we have opened a new bug.

Comment 1 Chris Paquin 2017-02-08 22:17:54 UTC

I am going to close this ticket - I believe that the error was related to a format issue in the enable-tls.yaml which caused the keys not to be pushed to the overcloud.