Bug 1992646
| Summary: | STF | FFU | User should remove certificate value from TripleO environment template before FFU | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Leonid Natapov <lnatapov> |
| Component: | documentation | Assignee: | Leif Madsen <lmadsen> |
| Status: | CLOSED WONTFIX | QA Contact: | Leonid Natapov <lnatapov> |
| Severity: | high | Docs Contact: | Joanne O'Flynn <joflynn> |
| Priority: | high | ||
| Version: | 16.2 (Train) | CC: | lmadsen |
| Target Milestone: | z4 | Keywords: | Documentation, Triaged |
| Target Release: | 16.2 (Train on RHEL 8.4) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-10-11 14:26:22 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2116323 | ||
| Bug Blocks: | |||
If we get https://bugzilla.redhat.com/show_bug.cgi?id=2116323 landed (along with another issue I will try and find which was forward porting the initial THT changes to allow the caCertFile configuration for QDR), then I think this issue is a non-issue and we can happily allow the customer to upgrade to 16.2 with the parameter enabled, since THT will be aware of it, and won't balk at it like it does currently. The preferred fix is to just get everything consistent and not have the customer perform workarounds that could be resolved in code. |
STF | FFU | User should remove certificate value from TripleO environment template before FFU. Before upgrading overcloud during the FFU (from OSP13 to OSP16.x) user must remove certificate value from TripleO environment template. Scenario: OSP13 deployed with STF and configured to use certificates to connect to STF server. Currently OSP16.x does not support certificates to connect to the server side STF. In order to keep metrics_qdr container working and connect to the server side STF,user must remove caCertFileContent from the THT template where it defined (usually stf-connectors.yaml) Example: ------- parameter_defaults: MetricsQdrConnectors: - host: default-interconnect-5671-service-telemetry.apps.infra.watch port: 443 role: edge sslProfile: sslProfile verifyHostname: false MetricsQdrSSLProfiles: - name: sslProfile caCertFileContent: | ----BEGIN CERTIFICATE---- <snip> ----END CERTIFICATE---- --------- caCertFileContent must be removed prior upgrading overcloud. |