Bug 1793975
Summary: | Passing IPA to undercloud.conf/certificate_generation_ca generates a certificate from the local CA | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Andrea Veri <averi> |
Component: | openstack-tripleo-heat-templates | Assignee: | Ade Lee <alee> |
Status: | CLOSED ERRATA | QA Contact: | Jeremy Agee <jagee> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | 16.0 (Train) | CC: | acanan, alee, jjoyce, jschluet, mburns, rmascena, slinaber, tvignaud |
Target Milestone: | z2 | Keywords: | Triaged, ZStream |
Target Release: | 16.0 (Train on RHEL 8.1) | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | openstack-tripleo-heat-templates-11.3.2-0.20200318124138.30bfeec.el8ost | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2020-05-14 12:15:29 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Andrea Veri
2020-01-22 12:12:07 UTC
For now we landed a workaround (certmonger_ca: IPA on our custom hiera key value pairs), that helped fixing the director build out. In addition to that seems we had a wrong value on another key on undercloud.conf, that messed up certificate generation as templates were correctly referencing IPA as the CA to use when issue the public endpoint certificate but then the local CA was kickin in and generating the cert. Cleaning that value helped fixing that as well and we now have a working OSP 16 director. We're working on inspections right now and then on the overcloud templates. Thanks! Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2114 |