Description of problem: Meteringconfig failed during ansible setup with Openshift having FIPS enabled. This is related to https://bugzilla.redhat.com/show_bug.cgi?id=1782104 Version-Release number of selected component (if applicable): 4.3.x How reproducible: always Steps to Reproduce: 1. install openshift on Openstack with FIPS enabled 2. run ./hack/openshift-install.sh 3. Actual results: TASK [meteringconfig : Generate a RSA private key for the CA] ****************** task path: /opt/ansible/roles/meteringconfig/tasks/configure_root_ca.yml:45 Saturday 04 January 2020 22:45:22 +0000 (0:00:00.367) 0:00:18.541 ****** An exception occurred during task execution. To see the full traceback, use -vvv. The error was: ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips fatal: [localhost]: FAILED! => {"changed": false, "module_stderr": "Traceback (most recent call last):\n File \"/tmp/.ansible-/tmp/ansible-tmp-1578177923.0-157257680349580/AnsiballZ_openssl_privatekey.py\", line 114, in <module>\n _ansiballz_main()\n File \"/tmp/.ansible-/tmp/ansible-tmp-1578177923.0-157257680349580/AnsiballZ_openssl_privatekey.py\", line 106, in _ansiballz_main\n invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)\n File \"/tmp/.ansible-/tmp/ansible-tmp-1578177923.0-157257680349580/AnsiballZ_openssl_privatekey.py\", line 49, in invoke_module\n imp.load_module('__main__', mod, module, MOD_DESC)\n File \"/tmp/ansible_openssl_privatekey_payload_8broM6/__main__.py\", line 703, in <module>\n File \"/tmp/ansible_openssl_privatekey_payload_8broM6/__main__.py\", line 687, in main\n File \"/tmp/ansible_openssl_privatekey_payload_8broM6/__main__.py\", line 318, in generate\n File \"/tmp/ansible_openssl_privatekey_payload_8broM6/__main__.py\", line 559, in _get_fingerprint\n File \"/tmp/ansible_openssl_privatekey_payload_8broM6/ansible_openssl_privatekey_payload.zip/ansible/module_utils/crypto.py\", line 86, in get_fingerprint_of_bytes\nValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1} Expected results: Additional info:
verified with imageID: quay.io/openshift/origin-metering-ansible-operator@sha256:d8eb8c604066c5fd1b398456f274217cc2907cedd6fddeda72691945979d1196 I can install successfully and get report data back.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:0581