Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1982764

Summary: Potential SSL issues after qdrouterd image update
Product: Red Hat OpenStack Reporter: Martin Magr <mmagr>
Component: puppet-tripleoAssignee: Martin Magr <mmagr>
Status: CLOSED ERRATA QA Contact: David Rosenfeld <drosenfe>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 16.2 (Train)CC: jbadiapa, jjoyce, joflynn, jschluet, lmadsen, lnatapov, m.andre, mmagr, mrunge, slinaber, spower, swilber, tvignaud
Target Milestone: z1Keywords: Documentation, Regression, Triaged, ZStream
Target Release: 16.2 (Train on RHEL 8.4)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: puppet-tripleo-11.6.2-2.20210603175726.el8ost.2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1949168 Environment:
Last Closed: 2021-12-09 20:41:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1934440, 1949168    
Bug Blocks: 1949169, 2040605    

Comment 13 Leonid Natapov 2021-10-11 12:46:33 UTC 
Failed QA. Moving back to assign.
A new puppet brakes the overcloud deployment.

ERROR configuring metrics_qdr
puppet-user[107758]: Error: Validation of File[/etc/pki/tls/certs/CA_sslProfile.pem] failed: You cannot specify more than one of content, source, target (file: /etc/puppet/modules/tripleo/manifests/profile/base/metrics/qdr.pp, line: 226)
Comment 14 Martin Magr 2021-10-11 13:28:23 UTC 
We are hitting [1]. Older Puppet versions were allowing invalid values in "ensure" parameter of File resource and unfortunately we had a invalid value there (exists vs present).

[1] https://tickets.puppetlabs.com/browse/PUP-3885
Comment 19 Leonid Natapov 2021-10-25 16:42:33 UTC 
successful deployment with specified SSL cerficiate.
Comment 30 errata-xmlrpc 2021-12-09 20:41:21 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 16.2.1 (Train)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:5067