Bug 1687494 - Metrics store installation fails on ovirt_auth
Summary: Metrics store installation fails on ovirt_auth
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine-metrics
Classification: oVirt
Component: Generic
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ovirt-4.3.3
: ---
Assignee: Shirly Radco
QA Contact: Ivana Saranova
URL:
Whiteboard:
Depends On:
Blocks: 1631193
TreeView+ depends on / blocked
 
Reported: 2019-03-11 15:40 UTC by Ivana Saranova
Modified: 2019-04-16 13:58 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2019-04-16 13:58:09 UTC
oVirt Team: Metrics
Embargoed:
sradco: ovirt-4.3?
sradco: blocker?
lleistne: testing_ack+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 98303 0 None None None 2019-03-13 14:11:09 UTC

Description Ivana Saranova 2019-03-11 15:40:55 UTC
Description of problem:
When installation metrics according to the new installation: https://gerrit.ovirt.org/#/c/97643/
a problem with missing ca.pem occurs.

Version-Release number of selected component (if applicable):
ovirt-engine-metrics-1.2.1-0.0.master.20190306140206.el7.noarch

How reproducible:
Always

Steps to Reproduce:
1. Edit /etc/ovirt-engine-metrics/config.yml.d/metrics-store-config.yml
2. Go to ovirt-engine-metrics cd /usr/share/ovirt-engine-metrics
3. Run ANSIBLE_JINJA2_EXTENSIONS="jinja2.ext.do" ./configure_ovirt_machines_for_metrics.sh --playbook=ovirt-metrics-store-installation.yml

Actual results:

TASK [/usr/share/ansible/roles/oVirt.metrics/roles/oVirt.origin-on-ovirt : ovirt_auth] ****************************************************************************************************************************
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: Error: Error while sending HTTP request: (60, "Peer's certificate issuer has been marked as not trusted by the user.")
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Error while sending HTTP request: (60, \"Peer's certificate issuer has been marked as not trusted by the user.\")"}

PLAY RECAP ********************************************************************************************************************************************************************************************************
localhost                  : ok=46   changed=8    unreachable=0    failed=1   


Expected results:
Playbook does not fail on the task.

Additional info:
Problem seems to be in role oVirt origin on ovirt in create_openshift_bastion_vm.yml, where engine_ca is generated from engine_username.

Comment 1 Sandro Bonazzola 2019-03-14 07:50:11 UTC
Shirly I see referenced patch has been merged, can this move to modified?

Comment 2 Ivana Saranova 2019-04-04 09:27:03 UTC
Steps to Reproduce:
1. Edit /etc/ovirt-engine-metrics/config.yml.d/metrics-store-config.yml
2. Go to ovirt-engine-metrics cd /usr/share/ovirt-engine-metrics
3. Run ANSIBLE_JINJA2_EXTENSIONS="jinja2.ext.do" ./configure_ovirt_machines_for_metrics.sh --playbook=ovirt-metrics-store-installation.yml

Results:
No error on the certificate verification task, playbook finishes successfully.

Verified in: 
ovirt-engine-4.2.8.5-0.1.el7ev.noarch
ovirt-engine-metrics-1.2.1.3-1.el7ev.noarch

Verified tested in:
ovirt-engine-4.3.3.1-0.1.el7.noarch
ovirt-engine-metrics-1.2.1.3-1.el7ev.noarch

Comment 3 Sandro Bonazzola 2019-04-16 13:58:09 UTC
This bugzilla is included in oVirt 4.3.3 release, published on April 16th 2019.

Since the problem described in this bug report should be
resolved in oVirt 4.3.3 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.