Bug 1412721 - Upgrade From RHEL OSP 8 to RHEL OSP 9 with SSL on RHEL 7.2 Fails on Final Step of Upgrade
Summary: Upgrade From RHEL OSP 8 to RHEL OSP 9 with SSL on RHEL 7.2 Fails on Final Ste...
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: rhosp-director
Version: 9.0 (Mitaka)
Hardware: x86_64
OS: Linux
Target Milestone: ---
: ---
Assignee: Angus Thomas
QA Contact: Omri Hochman
Depends On:
TreeView+ depends on / blocked
Reported: 2017-01-12 15:50 UTC by Chris Paquin
Modified: 2017-02-08 22:17 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Last Closed: 2017-02-08 22:17:54 UTC
Target Upstream Version:

Attachments (Terms of Use)

Description Chris Paquin 2017-01-12 15:50:40 UTC
Description of problem:

Upgrade fails on the step below.
3.4.9. Finalizing the Upgrade

Which includes -e /usr/share/openstack-tripleo-heat-templates/environments/major-upgrade-pacemaker-converge.yaml

Error from deployment output show is shown below - Please see BZ (1387378) as the error message is the same, and we have added notes to this BZ.

Error: /Stage[main]/Neutron/Resources[neutron_config]: Failed to generate additional resources using 'generate': OpenStackConfig only support collecting instances when a file path is hard coded
Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could not evaluate: Execution of '/usr/bin/openstack token issue --format value' returned 1: SSL exception connecting to [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765) (tried 41, for a total of 170 seconds)

Per the BZ we have upgraded openstack-puppet-modules-8.1.8-2.el7ost to openstack-puppet-modules-8.1.8-3.el7ost. This supposedly fixes the issue, however, we are still seeing the error and are unable to complete the upgrade.

Version-Release number of selected component (if applicable):

How reproducible:
Attempt to run final step of deploy - we have reproduced this error many times

Steps to Reproduce:
1. Start with RHEL OSP 8 Environment running on RHEL 7.2
2. Start upgrade process to upgrade to RHEL OSP 9 using repos that do not require RHEL 7.3
3. Fail on final step of upgrade

Actual results:
Upgrade fails to complete without error

Expected results:
Upgrade completes without error

Additional info:
See BZ (1387378), as we have added notes to this existing bug. Bug was closed so we have opened a new bug.

Comment 1 Chris Paquin 2017-02-08 22:17:54 UTC
I am going to close this ticket - I believe that the error was related to a format issue in the enable-tls.yaml which caused the keys not to be pushed to the overcloud.

Note You need to log in before you can comment on or make changes to this bug.