Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1687494

Summary:	Metrics store installation fails on ovirt_auth
Product:	[oVirt] ovirt-engine-metrics	Reporter:	Ivana Saranova <isaranov>
Component:	Generic	Assignee:	Shirly Radco <sradco>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Ivana Saranova <isaranov>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	bugs, lleistne, sradco
Target Milestone:	ovirt-4.3.3	Flags:	sradco: ovirt-4.3? sradco: blocker? lleistne: testing_ack+
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-04-16 13:58:09 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Metrics	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1631193

Description Ivana Saranova 2019-03-11 15:40:55 UTC

Description of problem:
When installation metrics according to the new installation: https://gerrit.ovirt.org/#/c/97643/
a problem with missing ca.pem occurs.

Version-Release number of selected component (if applicable):
ovirt-engine-metrics-1.2.1-0.0.master.20190306140206.el7.noarch

How reproducible:
Always

Steps to Reproduce:
1. Edit /etc/ovirt-engine-metrics/config.yml.d/metrics-store-config.yml
2. Go to ovirt-engine-metrics cd /usr/share/ovirt-engine-metrics
3. Run ANSIBLE_JINJA2_EXTENSIONS="jinja2.ext.do" ./configure_ovirt_machines_for_metrics.sh --playbook=ovirt-metrics-store-installation.yml

Actual results:

TASK [/usr/share/ansible/roles/oVirt.metrics/roles/oVirt.origin-on-ovirt : ovirt_auth] ****************************************************************************************************************************
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: Error: Error while sending HTTP request: (60, "Peer's certificate issuer has been marked as not trusted by the user.")
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Error while sending HTTP request: (60, \"Peer's certificate issuer has been marked as not trusted by the user.\")"}

PLAY RECAP ********************************************************************************************************************************************************************************************************
localhost                  : ok=46   changed=8    unreachable=0    failed=1   


Expected results:
Playbook does not fail on the task.

Additional info:
Problem seems to be in role oVirt origin on ovirt in create_openshift_bastion_vm.yml, where engine_ca is generated from engine_username.

Comment 1 Sandro Bonazzola 2019-03-14 07:50:11 UTC

Shirly I see referenced patch has been merged, can this move to modified?

Comment 2 Ivana Saranova 2019-04-04 09:27:03 UTC

Steps to Reproduce:
1. Edit /etc/ovirt-engine-metrics/config.yml.d/metrics-store-config.yml
2. Go to ovirt-engine-metrics cd /usr/share/ovirt-engine-metrics
3. Run ANSIBLE_JINJA2_EXTENSIONS="jinja2.ext.do" ./configure_ovirt_machines_for_metrics.sh --playbook=ovirt-metrics-store-installation.yml

Results:
No error on the certificate verification task, playbook finishes successfully.

Verified in: 
ovirt-engine-4.2.8.5-0.1.el7ev.noarch
ovirt-engine-metrics-1.2.1.3-1.el7ev.noarch

Verified tested in:
ovirt-engine-4.3.3.1-0.1.el7.noarch
ovirt-engine-metrics-1.2.1.3-1.el7ev.noarch

Comment 3 Sandro Bonazzola 2019-04-16 13:58:09 UTC

This bugzilla is included in oVirt 4.3.3 release, published on April 16th 2019.

Since the problem described in this bug report should be
resolved in oVirt 4.3.3 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.