Bug 2154887 - Designate DNS – All designate-tempest-plugin tests fail on "TLS everywhere" setup
Summary: Designate DNS – All designate-tempest-plugin tests fail on "TLS everywhere" s...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: puppet-tripleo
Version: 17.0 (Wallaby)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: Alpha
: 17.1
Assignee: Brent Eagles
QA Contact: David Rosenfeld
URL:
Whiteboard:
: 2193092 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-12-19 14:20 UTC by Lilach Avraham
Modified: 2024-01-23 04:25 UTC (History)
11 users (show)

Fixed In Version: puppet-tripleo-14.2.3-1.20230517011016.20a162c.el9ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-08-16 01:13:07 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 881208 0 None NEW Add missing member options for designate 2023-04-26 12:48:31 UTC
Red Hat Issue Tracker OSP-20949 0 None None None 2022-12-19 14:32:06 UTC
Red Hat Product Errata RHEA-2023:4577 0 None None None 2023-08-16 01:13:30 UTC

Description Lilach Avraham 2022-12-19 14:20:10 UTC 
I've tried to run the existing Designate Ci job with the changes needed to support TLS (--tls-everywhere e.t.c.) [1].
Unfortunately, the job failed on the Finally staps stage and all our APIs get the same error[2]:

   Unexpected response code received
   Details: 503

It seems like Designate API doesn't listen on HTTPS [3].

I've tried also to run the tempest tests locally in my host - and they've failed with the same error.


[1] - https://rhos-ci-staging-jenkins.lab.eng.tlv2.redhat.com/view/DFG/view/network/view/openstack-designate/job/DFG-network-openstack-designate-17.0_director-rhel-virthost-3cont_2comp_1ipa-ipv4-geneve-tls/5/
[2] - https://rhos-ci-staging-jenkins.lab.eng.tlv2.redhat.com/job/DFG-network-openstack-designate-17.0_director-rhel-virthost-3cont_2comp_1ipa-ipv4-geneve-tls/5//artifact/tempest-results/tempest-results-designate.1.htmlipv4-geneve-tls/5/test_results/tempest-results-designate.1.html
[3] - https://paste.openstack.org/show/b9lTgPfWtiR1Cm73gvSx/
Comment 2 Gregory Thiemonge 2023-01-03 15:45:09 UTC 

*** This bug has been marked as a duplicate of bug 2121634 ***
Comment 7 Brent Eagles 2023-01-04 13:46:03 UTC 
The haproxy config for designate is missing a few tls related values when tls is enabled.
Comment 9 Brent Eagles 2023-05-09 12:39:23 UTC 
*** Bug 2193092 has been marked as a duplicate of this bug. ***
Comment 21 errata-xmlrpc 2023-08-16 01:13:07 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:4577
Comment 22 Red Hat Bugzilla 2024-01-23 04:25:02 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days
Note You need to log in before you can comment on or make changes to this bug.