Description of problem: When rhc cannot retrieve the profile it will debug this failure, but the execution will fail without any error. rhc should not end with a 1 status if it is connected to rhsm and insights. Version-Release number of selected component (if applicable): rhc-0.2.2-1.el9 How reproducible: Always Actual results: >>> rhc connect Connecting localhost.localdomain to Red Hat. This might take a few seconds. ● Connected to Red Hat Subscription Management ● Connected to Red Hat Insights ● Activated the Remote Host Configuration daemon Successfully connected to Red Hat! Manage your connected systems: https://red.ht/connector The following errors were encountered during connect: STEP ERROR Remote Host Configuration Cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": x509: certificate signed by unknown authority echo $? 1 Expected results: >>> rhc connect Connecting localhost.localdomain to Red Hat. This might take a few seconds. ● Connected to Red Hat Subscription Management ● Connected to Red Hat Insights ● Activated the Remote Host Configuration daemon Successfully connected to Red Hat! Manage your connected systems: https://red.ht/connector The following errors were encountered during connect: STEP ERROR Remote Host Configuration Cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": x509: certificate signed by unknown authority echo $? 0
Pre-verification: 1. Provision RHEL-9.3.0-20230801.0-BaseOS-x86_64 in beaker. 2. Update rhc: [root@ibm-x3650m4-01-vm-15 ~]# rpm -qa | grep rhc rhc-0.2.2-1.el9.x86_64 [root@ibm-x3650m4-01-vm-15 ~]# dnf update -y --repoid=copr:copr.devel.redhat.com:ahitacat:rhc … … Installed products updated. Upgraded: rhc-1:0.2.4-0.3.git.4dc7e38.el9.x86_64 Complete! [root@ibm-x3650m4-01-vm-15 ~]# rpm -qa | grep rhc rhc-0.2.4-0.3.git.4dc7e38.el9.x86_64 3. Configure rhc to connect stage CRC [root@ibm-x3650m4-01-vm-15 ~]# cat /etc/rhc/config.toml # yggdrasil global configuration settings broker = ["wss://connect.cloud.stage.redhat.com:443"] data-host = "cert.cloud.stage.redhat.com" log-level = "debug" cert-file = "/etc/pki/consumer/cert.pem" key-file = "/etc/pki/consumer/key.pem" [root@ibm-x3650m4-01-vm-15 ~]# subscription-manager config --server.hostname=subscription.rhsm.stage.redhat.com 4. To reproduce the ‘x509: certificate signed by unknown authority’ issue, make sure no base_url specified. [root@ibm-x3650m4-01-vm-15 ~]# cat /etc/insights-client/insights-client.conf | grep base_url #base_url=cert-api.access.redhat.com:443/r/insights 5. Connect Stage CRC by rhc: [root@ibm-x3650m4-01-vm-15 ~]# rhc connect Connecting ibm-x3650m4-01-vm-15.ibm2.lab.eng.bos.redhat.com to Red Hat. This might take a few seconds. Username: insights-q-a Password: ● Connected to Red Hat Subscription Management ● Connected to Red Hat Insights ● Activated the rhc daemon Successfully connected to Red Hat! Manage your connected systems: https://red.ht/connector STEP DURATION rhsm 13.709s insights 34.072s rhc 25ms The following errors were encountered during connect: TYPE STEP ERROR WARN rhc cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": tls: failed to verify certificate: x509: certificate signed by unknown authority [root@ibm-x3650m4-01-vm-15 ~]# echo $? 0 As per step 5, return code is 0 when the system is connected to both RHSM and insights. So set the bug verified:tested.
[root@kvm-02-guest09 ~]# rpm -qa | grep rhc rhc-0.2.4-1.el9.x86_64 [root@kvm-02-guest09 ~]# subscription-manager config --server.hostname=subscription.rhsm.stage.redhat.com [root@kvm-02-guest09 ~]# subscription-manager register Registering to: subscription.rhsm.stage.redhat.com:443/subscription Username: zpetracek Password: The system has been registered with ID: a37eb3fe-fc1a-458b-b107-7eeb815c3dfd The registered system name is: kvm-02-guest09.rhts.eng.brq.redhat.com [root@kvm-02-guest09 ~]# subscription-manager repos --list-enabled +----------------------------------------------------------+ Available Repositories in /etc/yum.repos.d/redhat.repo +----------------------------------------------------------+ Repo ID: rhel-9-for-x86_64-baseos-beta-rpms Repo Name: Red Hat Enterprise Linux 9 for x86_64 - BaseOS Beta (RPMs) Repo URL: https://cdn.redhat.com/content/beta/rhel9/9/x86_64/baseos/os Enabled: 1 Repo ID: rhel-9-for-x86_64-appstream-beta-rpms Repo Name: Red Hat Enterprise Linux 9 for x86_64 - AppStream Beta (RPMs) Repo URL: https://cdn.redhat.com/content/beta/rhel9/9/x86_64/appstream/os Enabled: 1 [root@kvm-02-guest09 ~]# dnf -y update [root@kvm-02-guest09 ~]# dnf -y install rhc-worker-playbook Updating Subscription Management repositories. Last metadata expiration check: 0:00:32 ago on Thu 10 Aug 2023 02:59:31 PM CEST. Dependencies resolved. =========================================================================================================================== Package Architecture Version Repository Size =========================================================================================================================== Installing: rhc-worker-playbook x86_64 0.1.8-6.el9 beaker-AppStream 9.9 M Installing dependencies: ... Installed: ansible-core-1:2.14.7-1.el9.x86_64 git-core-2.39.3-1.el9_2.x86_64 python3-cffi-1.14.5-5.el9.x86_64 python3-cryptography-36.0.1-4.el9.x86_64 python3-packaging-20.9-5.el9.noarch python3-ply-3.11-14.el9.noarch python3-pycparser-2.20-6.el9.noarch python3-pyparsing-2.4.7-9.el9.noarch python3-resolvelib-0.5.4-5.el9.noarch rhc-worker-playbook-0.1.8-6.el9.x86_64 sshpass-1.09-4.el9.x86_64 Complete! [root@kvm-02-guest09 ~]# cat /etc/rhc/config.toml # rhc global configuration settings broker = ["wss://connect.cloud.stage.redhat.com:443"] data-host = "cert.cloud.stage.redhat.com" log-level = "debug" # optional cert-file = "/etc/pki/consumer/cert.pem" key-file = "/etc/pki/consumer/key.pem" [root@kvm-02-guest09 ~]# systemctl cat rhcd.service | grep Environment Environment="HTTP_PROXY=http://squid.corp.redhat.com:3128" Environment="HTTPS_PROXY=http://squid.corp.redhat.com:3128" [root@kvm-02-guest09 ~]# cat /etc/insights-client/insights-client.conf | egrep 'proxy=|base_url' proxy=http://squid.corp.redhat.com:3128 [root@kvm-02-guest09 ~]# rhc connect Connecting kvm-02-guest09.rhts.eng.brq.redhat.com to Red Hat. This might take a few seconds. Username: zpetracek Password: ● Connected to Red Hat Subscription Management ● Connected to Red Hat Insights ● Activated the Remote Host Configuration daemon Successfully connected to Red Hat! ^^ Manage your connected systems: https://red.ht/connector STEP DURATION rhsm 2m25.998s insights 46.913s Remote Host Configuration 27ms The following errors were encountered during connect: TYPE STEP ERROR WARN Remote Host Configuration cannot get the user profile: Get "https://subscription.rhsm.stage.redhat.com/redhat_access/r/insights/platform/config-manager/v2/profiles/current": tls: failed to verify certificate: x509: certificate signed by unknown authority [root@kvm-02-guest09 ~]# echo $? 0 ^^ Error message was present and exit code is 0 --> VERIFICATION PASSED