Bug 1816648

Summary: upgrade from 4.3 to 4.4 fails on pg_restore
Product: [oVirt] ovirt-engine Reporter: Petr Matyáš <pmatyas>
Component: Backend.CoreAssignee: Eli Mesika <emesika>
Status: CLOSED CURRENTRELEASE QA Contact: Petr Matyáš <pmatyas>
Severity: high Docs Contact:
Priority: high    
Version: 4.4.0CC: aoconnor, bugs, dholler, emesika, mburman, michal.skrivanek, mperina, msheena
Target Milestone: ovirt-4.4.0Flags: pm-rhel: ovirt-4.4+
aoconnor: blocker+
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovirt-engine-4.4.0_beta4 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-05-20 20:03:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1785364, 1817467    
Attachments:
Description Flags
engine log none

Description Petr Matyáš 2020-03-24 13:06:23 UTC
Created attachment 1673070 [details]
engine log

Description of problem:
I upgrade my 4.3 engine to 4.4 and when I try to login I always get error:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
There are issues for both engine and vdsm connection all with the same error.

Version-Release number of selected component (if applicable):
ovirt-engine-4.4.0-0.26.master.el8ev.noarch

How reproducible:
always

Steps to Reproduce:
1. backup engine on 4.3
2. restore (upgrade) on el8 to 4.4
3.

Actual results:
unable to log in with PKIX error

Expected results:
login works

Additional info:

Comment 3 Eli Mesika 2020-04-13 11:46:11 UTC
Please attach pg_backup log for the restore operation

Comment 4 Sandro Bonazzola 2020-04-14 14:06:39 UTC
Martin, shouldn't this block oVirt 4.4.0 GA? Upgrading from 4.3 won't work without this fixed right?

Comment 6 Eli Mesika 2020-04-16 08:30:13 UTC
(In reply to Petr Matyáš from comment #0)
> Created attachment 1673070 [details]
> How reproducible:
> always
> 
> Steps to Reproduce:
> 1. backup engine on 4.3
> 2. restore (upgrade) on el8 to 4.4
> 3.
> 
> Actual results:
> unable to log in with PKIX error

Not related , pg_restore fails and PKIX issue is side effect of that 

pg_restore: error: could not execute query: ERROR:  schema "public" already exists
pg_restore: error: could not execute query: ERROR:  must be owner of schema public


> 
> Expected results:
> login works

pg_restore works 


This is actually a PG BUG in restoring databases backed up by PG <= 10.x on PG >= 11.x 

Please recheck the login issue after the patch to this bug is merged and open a new one if needed

Comment 7 Petr Matyáš 2020-04-20 09:33:42 UTC
Verified on ovirt-engine-4.4.0-0.33.master.el8ev.noarch and ovirt-engine-tools-backup-4.4.0-0.33.master.el8ev.noarch

Upgrade works without issues and there are no PKIX error messages

Comment 8 Sandro Bonazzola 2020-05-20 20:03:08 UTC
This bugzilla is included in oVirt 4.4.0 release, published on May 20th 2020.

Since the problem described in this bug report should be
resolved in oVirt 4.4.0 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.