Bug 2227012
| Summary: | rhc fails to retrieve the system profile | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Alba Hita <ahitacat> | |
| Component: | rhc | Assignee: | Alba Hita <ahitacat> | |
| Status: | CLOSED ERRATA | QA Contact: | CSI Client Tools Bugs <csi-client-tools-bugs> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 9.3 | CC: | arpandey, cmarinea, qianzhan, zpetrace | |
| Target Milestone: | rc | Keywords: | Triaged | |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
|
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | rhc-0.2.4-1.el9 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2227019 (view as bug list) | Environment: | ||
| Last Closed: | 2023-11-07 08:36:45 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2227019 | |||
|
Description
Alba Hita
2023-07-27 12:53:03 UTC
Pre-verification: 1. Provision RHEL-9.3.0-20230801.0-BaseOS-x86_64 in beaker. 2. Update rhc: [root@ibm-x3650m4-01-vm-15 ~]# rpm -qa | grep rhc rhc-0.2.2-1.el9.x86_64 [root@ibm-x3650m4-01-vm-15 ~]# dnf update -y --repoid=copr:copr.devel.redhat.com:ahitacat:rhc … … Installed products updated. Upgraded: rhc-1:0.2.4-0.3.git.4dc7e38.el9.x86_64 Complete! [root@ibm-x3650m4-01-vm-15 ~]# rpm -qa | grep rhc rhc-0.2.4-0.3.git.4dc7e38.el9.x86_64 3. Configure rhc to connect stage CRC [root@ibm-x3650m4-01-vm-15 ~]# cat /etc/rhc/config.toml # yggdrasil global configuration settings broker = ["wss://connect.cloud.stage.redhat.com:443"] data-host = "cert.cloud.stage.redhat.com" log-level = "debug" cert-file = "/etc/pki/consumer/cert.pem" key-file = "/etc/pki/consumer/key.pem" [root@ibm-x3650m4-01-vm-15 ~]# subscription-manager config --server.hostname=subscription.rhsm.stage.redhat.com 4. To reproduce the ‘x509: certificate signed by unknown authority’ issue, make sure no base_url specified. [root@ibm-x3650m4-01-vm-15 ~]# cat /etc/insights-client/insights-client.conf | grep base_url #base_url=cert-api.access.redhat.com:443/r/insights 5. Connect Stage CRC by rhc: [root@ibm-x3650m4-01-vm-15 ~]# rhc connect Connecting ibm-x3650m4-01-vm-15.ibm2.lab.eng.bos.redhat.com to Red Hat. This might take a few seconds. Username: insights-q-a Password: ● Connected to Red Hat Subscription Management ● Connected to Red Hat Insights ● Activated the rhc daemon Successfully connected to Red Hat! Manage your connected systems: https://red.ht/connector STEP DURATION rhsm 13.709s insights 34.072s rhc 25ms The following errors were encountered during connect: TYPE STEP ERROR WARN rhc cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": tls: failed to verify certificate: x509: certificate signed by unknown authority [root@ibm-x3650m4-01-vm-15 ~]# echo $? 0 As per step 5, return code is 0 when the system is connected to both RHSM and insights. So set the bug verified:tested. [root@kvm-02-guest09 ~]# rpm -qa | grep rhc
rhc-0.2.4-1.el9.x86_64
[root@kvm-02-guest09 ~]# subscription-manager config --server.hostname=subscription.rhsm.stage.redhat.com
[root@kvm-02-guest09 ~]# subscription-manager register
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Username: zpetracek
Password:
The system has been registered with ID: a37eb3fe-fc1a-458b-b107-7eeb815c3dfd
The registered system name is: kvm-02-guest09.rhts.eng.brq.redhat.com
[root@kvm-02-guest09 ~]# subscription-manager repos --list-enabled
+----------------------------------------------------------+
Available Repositories in /etc/yum.repos.d/redhat.repo
+----------------------------------------------------------+
Repo ID: rhel-9-for-x86_64-baseos-beta-rpms
Repo Name: Red Hat Enterprise Linux 9 for x86_64 - BaseOS Beta (RPMs)
Repo URL: https://cdn.redhat.com/content/beta/rhel9/9/x86_64/baseos/os
Enabled: 1
Repo ID: rhel-9-for-x86_64-appstream-beta-rpms
Repo Name: Red Hat Enterprise Linux 9 for x86_64 - AppStream Beta (RPMs)
Repo URL: https://cdn.redhat.com/content/beta/rhel9/9/x86_64/appstream/os
Enabled: 1
[root@kvm-02-guest09 ~]# dnf -y update
[root@kvm-02-guest09 ~]# dnf -y install rhc-worker-playbook
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:32 ago on Thu 10 Aug 2023 02:59:31 PM CEST.
Dependencies resolved.
===========================================================================================================================
Package Architecture Version Repository Size
===========================================================================================================================
Installing:
rhc-worker-playbook x86_64 0.1.8-6.el9 beaker-AppStream 9.9 M
Installing dependencies:
...
Installed:
ansible-core-1:2.14.7-1.el9.x86_64 git-core-2.39.3-1.el9_2.x86_64 python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-4.el9.x86_64 python3-packaging-20.9-5.el9.noarch python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch python3-pyparsing-2.4.7-9.el9.noarch python3-resolvelib-0.5.4-5.el9.noarch
rhc-worker-playbook-0.1.8-6.el9.x86_64 sshpass-1.09-4.el9.x86_64
Complete!
[root@kvm-02-guest09 ~]# cat /etc/rhc/config.toml
# rhc global configuration settings
broker = ["wss://connect.cloud.stage.redhat.com:443"]
data-host = "cert.cloud.stage.redhat.com"
log-level = "debug" # optional
cert-file = "/etc/pki/consumer/cert.pem"
key-file = "/etc/pki/consumer/key.pem"
[root@kvm-02-guest09 ~]# systemctl cat rhcd.service | grep Environment
Environment="HTTP_PROXY=http://squid.corp.redhat.com:3128"
Environment="HTTPS_PROXY=http://squid.corp.redhat.com:3128"
[root@kvm-02-guest09 ~]# cat /etc/insights-client/insights-client.conf | egrep 'proxy=|base_url'
proxy=http://squid.corp.redhat.com:3128
[root@kvm-02-guest09 ~]# rhc connect
Connecting kvm-02-guest09.rhts.eng.brq.redhat.com to Red Hat.
This might take a few seconds.
Username: zpetracek
Password:
● Connected to Red Hat Subscription Management
● Connected to Red Hat Insights
● Activated the Remote Host Configuration daemon
Successfully connected to Red Hat!
^^
Manage your connected systems: https://red.ht/connector
STEP DURATION
rhsm 2m25.998s
insights 46.913s
Remote Host Configuration 27ms
The following errors were encountered during connect:
TYPE STEP ERROR
WARN Remote Host Configuration cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": tls: failed to verify certificate: x509: certificate signed by unknown authority
[root@kvm-02-guest09 ~]# echo $?
0
^^ Error message was present and exit code is 0 --> VERIFICATION PASSED
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (rhc bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:6541 |