Bug 2154887

Summary: Designate DNS – All designate-tempest-plugin tests fail on "TLS everywhere" setup
Product: Red Hat OpenStack Reporter: Lilach Avraham <lavraham>
Component: puppet-tripleoAssignee: Brent Eagles <beagles>
Status: CLOSED ERRATA QA Contact: David Rosenfeld <drosenfe>
Severity: high Docs Contact:
Priority: high    
Version: 17.0 (Wallaby)CC: ashtempl, beagles, gthiemon, jjoyce, jschluet, oschwart, ralonsoh, rhos-maint, scohen, slinaber, tvignaud
Target Milestone: AlphaKeywords: Reopened, Triaged
Target Release: 17.1   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: puppet-tripleo-14.2.3-1.20230517011016.20a162c.el9ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-08-16 01:13:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Lilach Avraham 2022-12-19 14:20:10 UTC 
I've tried to run the existing Designate Ci job with the changes needed to support TLS (--tls-everywhere e.t.c.) [1].
Unfortunately, the job failed on the Finally staps stage and all our APIs get the same error[2]:

   Unexpected response code received
   Details: 503

It seems like Designate API doesn't listen on HTTPS [3].

I've tried also to run the tempest tests locally in my host - and they've failed with the same error.


[1] - https://rhos-ci-staging-jenkins.lab.eng.tlv2.redhat.com/view/DFG/view/network/view/openstack-designate/job/DFG-network-openstack-designate-17.0_director-rhel-virthost-3cont_2comp_1ipa-ipv4-geneve-tls/5/
[2] - https://rhos-ci-staging-jenkins.lab.eng.tlv2.redhat.com/job/DFG-network-openstack-designate-17.0_director-rhel-virthost-3cont_2comp_1ipa-ipv4-geneve-tls/5//artifact/tempest-results/tempest-results-designate.1.htmlipv4-geneve-tls/5/test_results/tempest-results-designate.1.html
[3] - https://paste.openstack.org/show/b9lTgPfWtiR1Cm73gvSx/
Comment 2 Gregory Thiemonge 2023-01-03 15:45:09 UTC 

*** This bug has been marked as a duplicate of bug 2121634 ***
Comment 7 Brent Eagles 2023-01-04 13:46:03 UTC 
The haproxy config for designate is missing a few tls related values when tls is enabled.
Comment 9 Brent Eagles 2023-05-09 12:39:23 UTC 
*** Bug 2193092 has been marked as a duplicate of this bug. ***
Comment 21 errata-xmlrpc 2023-08-16 01:13:07 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:4577
Comment 22 Red Hat Bugzilla 2024-01-23 04:25:02 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days