Bug 1615295 - Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/ca.crt
Summary: Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/c...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 14.0 (Rocky)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: beta
: 14.0 (Rocky)
Assignee: Emilien Macchi
QA Contact: Filip Hubík
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-08-13 09:24 UTC by Filip Hubík
Modified: 2019-01-11 11:51 UTC (History)
4 users (show)

Fixed In Version: openstack-tripleo-heat-templates-9.0.0-0.20180804083744.el7ost,python-tripleoclient-10.4.1-0.20180803113705.1e3bb6e.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-01-11 11:51:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
detail of install-undercloud.log (1.77 MB, text/plain)
2018-08-13 09:24 UTC, Filip Hubík
no flags Details
undercloud.conf (764 bytes, text/plain)
2018-08-13 09:25 UTC, Filip Hubík
no flags Details


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 588245 0 None MERGED undercloud-post: Discard CA usage if not set 2020-09-29 12:11:06 UTC
OpenStack gerrit 588246 0 None MERGED undercloud: Disable CA path if user-provided cert is used 2020-09-29 12:11:05 UTC
Red Hat Product Errata RHEA-2019:0045 0 None None None 2019-01-11 11:51:42 UTC

Description Filip Hubík 2018-08-13 09:24:40 UTC
Created attachment 1475535 [details]
detail of install-undercloud.log

Description of problem:

Undercloud install step fails with error:

WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] TASK [Output for UndercloudPostDeployment] *************************************
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] fatal: [undercloud-0]: FAILED! => {
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]     "msg": [
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         {
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]             "stderr": [
...
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ OS_USER_DOMAIN_NAME=Default",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export OS_CACERT=/etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ OS_CACERT=/etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ '[' -z '' ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export PS1=",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ PS1=",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export 'PS1=${OS_CLOUDNAME:+($OS_CLOUDNAME)} '",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ PS1='${OS_CLOUDNAME:+($OS_CLOUDNAME)} '",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export CLOUDPROMPT_ENABLED=1",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ CLOUDPROMPT_ENABLED=1",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ export 'PYTHONWARNINGS=ignore:Certificate has no, ignore:A true SSLContext object is not available'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ PYTHONWARNINGS='ignore:Certificate has no, ignore:A true SSLContext object is not available'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ '[' '!' -f /home/stack/.ssh/authorized_keys ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ '[' '!' -f /home/stack/.ssh/id_rsa ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ cat /home/stack/.ssh/id_rsa.pub",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ grep 'ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoilfFFTGFASMZXm8pOuj3W7TmDltehxTcPRXEdOnkh7RMUKU0gNEaNvdR4VPjVk6BIZ9XHaCxvLxGryYbED2s8iCXl0rYGe9qPM1E1WE0ZUL00BL3gmFOVozvr5Denf+Stb9cZXxHsaOBWOi5R+GRuIwjmLmNlGZcvkfV4R4bA8y2lNifxi0LBoY65vvWSymL5ZxptxzBPEZpoDk+/3tavx55dZ8L8ibbMIILl8RhS7eqj0VTtP4Z591w61x/Q7nOufCcSXuyY76KvGz1xaLG9h0CpLKbc1k8/9bGEmBABOIbvuajiKKN/a/vv0XewwyehhjtcKssoJSbOoXa/wskQ==' /home/stack/.ssh/authorized_keys",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ chown -R stack:stack /home/stack/.ssh",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ hiera nova_api_enabled",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ '[' true = true ']'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ openstack project show admin",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "++ awk '$2==\"id\" {print $4}'",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "/usr/lib/python2.7/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.21.1) or chardet (2.2.1) doesn't match a supported version!",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "  RequestsDependencyWarning)",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "+ openstack quota set --cores -1 --instances -1 --ram -1",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "/usr/lib/python2.7/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.21.1) or chardet (2.2.1) doesn't match a supported version!",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "  RequestsDependencyWarning)",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/ca.crt",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,272] (heat-config) [ERROR] Error running /var/lib/heat-config/heat-config-script/15c325a0-4666-48ec-b979-0d93f2d0c008. [1]",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,276] (heat-config) [INFO] Completed /usr/libexec/heat-config/hooks/script",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,277] (heat-config) [DEBUG] Running heat-config-notify /var/lib/heat-config/deployed/15c325a0-4666-48ec-b979-0d93f2d0c008.json < /var/lib/heat-config/deployed/15c325a0-4666-48ec-b979-0d93f2d0c008.notify.json",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,792] (heat-config) [INFO] ",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "[2018-08-13 04:30:10,792] (heat-config) [DEBUG] /usr/lib/python2.7/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.21.1) or chardet (2.2.1) doesn't match a supported version!",
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]                 "  RequestsDependencyWarning)"
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]             ]
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         },
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         {
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]             "status_code": "1"
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]         }
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ]     ]
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] }
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] 
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] NO MORE HOSTS LEFT *************************************************************
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] 
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] PLAY RECAP *********************************************************************
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] undercloud-0               : ok=237  changed=115  unreachable=0    failed=1
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] 
WARNING tripleoclient.v1.tripleo_deploy.Deploy [  ] Install artifact is located at /home/stack/undercloud-install-20180813083010.tar.bzip2
ERROR tripleoclient.v1.tripleo_deploy.Deploy [  ] 
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Version-Release number of selected component (if applicable):
Puddle 2018-08-10.2

How reproducible:
100%

Steps to Reproduce:
1. Deploy OSP14 using InfraRed, topology 1:1:1:1
2. Undercloud install stage deployment fails

Additional info:
puppet-ipaclient.noarch 2.5.2-0.20180216000114.b086731.el7ost
instack-undercloud.noarch 9.2.1-0.20180803181448.be5fa97.el7ost
puppet-heat.noarch 13.2.0-0.20180725004428.ec5d55c.el7ost
python-heat-agent.noatch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-ansible.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-apply-config.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-docker-cmd.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost
python-heat-agent-hiera.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-json-file.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost    
python-heat-agent-puppet.noarch 1.6.1-0.20180709100740.fdd6a5f.el7ost

Comment 1 Filip Hubík 2018-08-13 09:25:42 UTC
Created attachment 1475536 [details]
undercloud.conf

Comment 3 Juan Antonio Osorio 2018-08-13 11:52:16 UTC
Are these two commits included?

https://review.openstack.org/#/c/588245/

https://review.openstack.org/#/c/588246/

Those should have fixed the issue.

Comment 7 Filip Hubík 2018-08-21 12:39:44 UTC
Verified using 2018-08-10.2 puddle as base and bumping to requested versions of packages.

Comment 10 errata-xmlrpc 2019-01-11 11:51:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:0045


Note You need to log in before you can comment on or make changes to this bug.