Bug 2227012
| Summary: | rhc fails to retrieve the system profile | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Alba Hita <ahitacat> | |
| Component: | rhc | Assignee: | Alba Hita <ahitacat> | |
| Status: | VERIFIED --- | QA Contact: | CSI Client Tools Bugs <csi-client-tools-bugs> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 9.3 | CC: | arpandey, cmarinea, qianzhan, zpetrace | |
| Target Milestone: | rc | Keywords: | Triaged | |
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | rhc-0.2.4-1.el9 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2227019 (view as bug list) | Environment: | ||
| Last Closed: | Type: | Bug | ||
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2227019 | |||
|
Description
Alba Hita
2023-07-27 12:53:03 UTC
Pre-verification: 1. Provision RHEL-9.3.0-20230801.0-BaseOS-x86_64 in beaker. 2. Update rhc: [root@ibm-x3650m4-01-vm-15 ~]# rpm -qa | grep rhc rhc-0.2.2-1.el9.x86_64 [root@ibm-x3650m4-01-vm-15 ~]# dnf update -y --repoid=copr:copr.devel.redhat.com:ahitacat:rhc … … Installed products updated. Upgraded: rhc-1:0.2.4-0.3.git.4dc7e38.el9.x86_64 Complete! [root@ibm-x3650m4-01-vm-15 ~]# rpm -qa | grep rhc rhc-0.2.4-0.3.git.4dc7e38.el9.x86_64 3. Configure rhc to connect stage CRC [root@ibm-x3650m4-01-vm-15 ~]# cat /etc/rhc/config.toml # yggdrasil global configuration settings broker = ["wss://connect.cloud.stage.redhat.com:443"] data-host = "cert.cloud.stage.redhat.com" log-level = "debug" cert-file = "/etc/pki/consumer/cert.pem" key-file = "/etc/pki/consumer/key.pem" [root@ibm-x3650m4-01-vm-15 ~]# subscription-manager config --server.hostname=subscription.rhsm.stage.redhat.com 4. To reproduce the ‘x509: certificate signed by unknown authority’ issue, make sure no base_url specified. [root@ibm-x3650m4-01-vm-15 ~]# cat /etc/insights-client/insights-client.conf | grep base_url #base_url=cert-api.access.redhat.com:443/r/insights 5. Connect Stage CRC by rhc: [root@ibm-x3650m4-01-vm-15 ~]# rhc connect Connecting ibm-x3650m4-01-vm-15.ibm2.lab.eng.bos.redhat.com to Red Hat. This might take a few seconds. Username: insights-q-a Password: ● Connected to Red Hat Subscription Management ● Connected to Red Hat Insights ● Activated the rhc daemon Successfully connected to Red Hat! Manage your connected systems: https://red.ht/connector STEP DURATION rhsm 13.709s insights 34.072s rhc 25ms The following errors were encountered during connect: TYPE STEP ERROR WARN rhc cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": tls: failed to verify certificate: x509: certificate signed by unknown authority [root@ibm-x3650m4-01-vm-15 ~]# echo $? 0 As per step 5, return code is 0 when the system is connected to both RHSM and insights. So set the bug verified:tested. [root@kvm-02-guest09 ~]# rpm -qa | grep rhc
rhc-0.2.4-1.el9.x86_64
[root@kvm-02-guest09 ~]# subscription-manager config --server.hostname=subscription.rhsm.stage.redhat.com
[root@kvm-02-guest09 ~]# subscription-manager register
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Username: zpetracek
Password:
The system has been registered with ID: a37eb3fe-fc1a-458b-b107-7eeb815c3dfd
The registered system name is: kvm-02-guest09.rhts.eng.brq.redhat.com
[root@kvm-02-guest09 ~]# subscription-manager repos --list-enabled
+----------------------------------------------------------+
Available Repositories in /etc/yum.repos.d/redhat.repo
+----------------------------------------------------------+
Repo ID: rhel-9-for-x86_64-baseos-beta-rpms
Repo Name: Red Hat Enterprise Linux 9 for x86_64 - BaseOS Beta (RPMs)
Repo URL: https://cdn.redhat.com/content/beta/rhel9/9/x86_64/baseos/os
Enabled: 1
Repo ID: rhel-9-for-x86_64-appstream-beta-rpms
Repo Name: Red Hat Enterprise Linux 9 for x86_64 - AppStream Beta (RPMs)
Repo URL: https://cdn.redhat.com/content/beta/rhel9/9/x86_64/appstream/os
Enabled: 1
[root@kvm-02-guest09 ~]# dnf -y update
[root@kvm-02-guest09 ~]# dnf -y install rhc-worker-playbook
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:32 ago on Thu 10 Aug 2023 02:59:31 PM CEST.
Dependencies resolved.
===========================================================================================================================
Package Architecture Version Repository Size
===========================================================================================================================
Installing:
rhc-worker-playbook x86_64 0.1.8-6.el9 beaker-AppStream 9.9 M
Installing dependencies:
...
Installed:
ansible-core-1:2.14.7-1.el9.x86_64 git-core-2.39.3-1.el9_2.x86_64 python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-4.el9.x86_64 python3-packaging-20.9-5.el9.noarch python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch python3-pyparsing-2.4.7-9.el9.noarch python3-resolvelib-0.5.4-5.el9.noarch
rhc-worker-playbook-0.1.8-6.el9.x86_64 sshpass-1.09-4.el9.x86_64
Complete!
[root@kvm-02-guest09 ~]# cat /etc/rhc/config.toml
# rhc global configuration settings
broker = ["wss://connect.cloud.stage.redhat.com:443"]
data-host = "cert.cloud.stage.redhat.com"
log-level = "debug" # optional
cert-file = "/etc/pki/consumer/cert.pem"
key-file = "/etc/pki/consumer/key.pem"
[root@kvm-02-guest09 ~]# systemctl cat rhcd.service | grep Environment
Environment="HTTP_PROXY=http://squid.corp.redhat.com:3128"
Environment="HTTPS_PROXY=http://squid.corp.redhat.com:3128"
[root@kvm-02-guest09 ~]# cat /etc/insights-client/insights-client.conf | egrep 'proxy=|base_url'
proxy=http://squid.corp.redhat.com:3128
[root@kvm-02-guest09 ~]# rhc connect
Connecting kvm-02-guest09.rhts.eng.brq.redhat.com to Red Hat.
This might take a few seconds.
Username: zpetracek
Password:
● Connected to Red Hat Subscription Management
● Connected to Red Hat Insights
● Activated the Remote Host Configuration daemon
Successfully connected to Red Hat!
^^
Manage your connected systems: https://red.ht/connector
STEP DURATION
rhsm 2m25.998s
insights 46.913s
Remote Host Configuration 27ms
The following errors were encountered during connect:
TYPE STEP ERROR
WARN Remote Host Configuration cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": tls: failed to verify certificate: x509: certificate signed by unknown authority
[root@kvm-02-guest09 ~]# echo $?
0
^^ Error message was present and exit code is 0 --> VERIFICATION PASSED
|