Bug 1808466
Summary: | HAProxy error during overcloud deploy '/etc/pki/CA/crl/overcloud-crl.pem' | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | v.vinci |
Component: | puppet-haproxy | Assignee: | RHOS Maint <rhos-maint> |
Status: | CLOSED NOTABUG | QA Contact: | nlevinki <nlevinki> |
Severity: | high | Docs Contact: | |
Priority: | medium | ||
Version: | 16.0 (Train) | CC: | bperkins, jjoyce, jschluet, lmiccini, slinaber, tvignaud |
Target Milestone: | --- | Keywords: | Triaged |
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2020-03-03 19:56:00 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
v.vinci
2020-02-28 15:16:01 UTC
that CRL error seems to be coming from: https://opendev.org/openstack/tripleo-heat-templates/src/branch/master/deployment/haproxy/haproxy-container-puppet.yaml InternalTLSCRLPEMFile: default: '/etc/pki/CA/crl/overcloud-crl.pem' type: string description: Specifies the default CRL PEM file to use for revocation if TLS is used for services in the internal network. but through the implicit injection of https://opendev.org/openstack/tripleo-heat-templates/src/branch/master/environments/docker-ha.yaml OS::TripleO::Services::HAproxy: ../deployment/haproxy/haproxy-pacemaker-puppet.yaml https://opendev.org/openstack/tripleo-heat-templates/src/branch/master/deployment/haproxy/haproxy-pacemaker-puppet.yaml # disable the use CRL file until we can restart the container when the file expires tripleo::haproxy::crl_file: null we should bypass the crl completely. Can you please check if you don't override OS::TripleO::Services::HAproxy by mistake and/or your plan-environment.yaml file (openstack overcloud plan export <stackname>) contains: - path: environments/docker-ha.yaml thanks. Hi, Thanks for your support. After adding the doker-ha.yaml the deploy complete succesfully. Many thanks. The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days |