Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1615295

Summary: Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/ca.crt
Product: Red Hat OpenStack Reporter: Filip Hubík <fhubik>
Component: openstack-tripleo-heat-templatesAssignee: Emilien Macchi <emacchi>
Status: CLOSED ERRATA QA Contact: Filip Hubík <fhubik>
Severity: high Docs Contact:
Priority: high    
Version: 14.0 (Rocky)CC: emacchi, mburns, rmascena, tvignaud
Target Milestone: betaKeywords: Automation, AutomationBlocker, Triaged
Target Release: 14.0 (Rocky)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-9.0.0-0.20180804083744.el7ost,python-tripleoclient-10.4.1-0.20180803113705.1e3bb6e.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-01-11 11:51:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
detail of install-undercloud.log
none
undercloud.conf none

Description Filip Hubík 2018-08-13 09:24:40 UTC
Created attachment 1475535 [details]
detail of install-undercloud.log

Description of problem:

Undercloud install step fails with error:

WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] TASK [Output for UndercloudPostDeployment] *************************************
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] fatal: [undercloud-0]: FAILED! => {
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]     "msg": [
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         {
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]             "stderr": [
...
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ OS_USER_DOMAIN_NAME=Default",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export OS_CACERT=/etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ OS_CACERT=/etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ '[' -z '' ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export PS1=",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ PS1=",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export 'PS1=${OS_CLOUDNAME:+($OS_CLOUDNAME)} '",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ PS1='${OS_CLOUDNAME:+($OS_CLOUDNAME)} '",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export CLOUDPROMPT_ENABLED=1",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ CLOUDPROMPT_ENABLED=1",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export 'PYTHONWARNINGS=ignore:Certificate has no, ignore:A true SSLContext object is not available'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ PYTHONWARNINGS='ignore:Certificate has no, ignore:A true SSLContext object is not available'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ '[' '!' -f /home/stack/.ssh/authorized_keys ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ '[' '!' -f /home/stack/.ssh/id_rsa ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ cat /home/stack/.ssh/id_rsa.pub",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ grep 'ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoilfFFTGFASMZXm8pOuj3W7TmDltehxTcPRXEdOnkh7RMUKU0gNEaNvdR4VPjVk6BIZ9XHaCxvLxGryYbED2s8iCXl0rYGe9qPM1E1WE0ZUL00BL3gmFOVozvr5Denf+Stb9cZXxHsaOBWOi5R+GRuIwjmLmNlGZcvkfV4R4bA8y2lNifxi0LBoY65vvWSymL5ZxptxzBPEZpoDk+/3tavx55dZ8L8ibbMIILl8RhS7eqj0VTtP4Z591w61x/Q7nOufCcSXuyY76KvGz1xaLG9h0CpLKbc1k8/9bGEmBABOIbvuajiKKN/a/vv0XewwyehhjtcKssoJSbOoXa/wskQ==' /home/stack/.ssh/authorized_keys",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ chown -R stack:stack /home/stack/.ssh",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ hiera nova_api_enabled",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ '[' true = true ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ openstack project show admin",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ awk '$2==\"id\" {print $4}'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "/usr/lib/python2.7/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.21.1) or chardet (2.2.1) doesn't match a supported version!",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "  RequestsDependencyWarning)",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ openstack quota set --cores -1 --instances -1 --ram -1",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "/usr/lib/python2.7/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.21.1) or chardet (2.2.1) doesn't match a supported version!",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "  RequestsDependencyWarning)",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,272] (heat-config) [ERROR] Error running /var/lib/heat-config/heat-config-script/15c325a0-4666-48ec-b979-0d93f2d0c008. [1]",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,276] (heat-config) [INFO] Completed /usr/libexec/heat-config/hooks/script",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,277] (heat-config) [DEBUG] Running heat-config-notify /var/lib/heat-config/deployed/15c325a0-4666-48ec-b979-0d93f2d0c008.json < /var/lib/heat-config/deployed/15c325a0-4666-48ec-b979-0d93f2d0c008.notify.json",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,792] (heat-config) [INFO] ",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,792] (heat-config) [DEBUG] /usr/lib/python2.7/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.21.1) or chardet (2.2.1) doesn't match a supported version!",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "  RequestsDependencyWarning)"
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]             ]
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         },
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         {
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]             "status_code": "1"
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         }
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]     ]
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] }
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] 
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] NO MORE HOSTS LEFT *************************************************************
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] 
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] PLAY RECAP *********************************************************************
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] undercloud-0               : ok=237  changed=115  unreachable=0    failed=1
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] 
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] Install artifact is located at /home/stack/undercloud-install-20180813083010.tar.bzip2
ERROR tripleoclient.v1.tripleo_deploy.Deploy [  ] 
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Version-Release number of selected component (if applicable):
Puddle 2018-08-10.2

How reproducible:
100%

Steps to Reproduce:
1. Deploy OSP14 using InfraRed, topology 1:1:1:1
2. Undercloud install stage deployment fails

Additional info:
puppet-ipaclient.noarch 2.5.2-0.20180216000114.b086731.el7ost
instack-undercloud.noarch 9.2.1-0.20180803181448.be5fa97.el7ost
puppet-heat.noarch 13.2.0-0.20180725004428.ec5d55c.el7ost
python-heat-agent.noatch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-ansible.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-apply-config.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-docker-cmd.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost
python-heat-agent-hiera.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-json-file.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-puppet.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost

Comment 1 Filip Hubík 2018-08-13 09:25:42 UTC
Created attachment 1475536 [details]
undercloud.conf

Comment 3 Juan Antonio Osorio 2018-08-13 11:52:16 UTC
Are these two commits included?

https://review.openstack.org/#/c/588245/

https://review.openstack.org/#/c/588246/

Those should have fixed the issue.

Comment 7 Filip Hubík 2018-08-21 12:39:44 UTC
Verified using 2018-08-10.2 puddle as base and bumping to requested versions of packages.

Comment 10 errata-xmlrpc 2019-01-11 11:51:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:0045