Description of problem: Minor update from 16.2 z5 to 16.2 z6 failed on PSI stage with certificate verification error: 2023-11-13 14:07:20.091 953596 ERROR tripleoclient.v1.overcloud_external_update.ExternalUpdateRun urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='10.0.55.152', port=13989): Max retries exceeded with url: /v2/executions (Caused by SSLError(SSLError(1, '[SSL: CE RTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),)) Version-Release number of selected component (if applicable): openstack-tripleo-heat-templates-11.6.1-2.20230320130753.el8ost.noarch How reproducible: We encountered the problem during OSP 16.2.5 -> 16.2.6 upgrade on PSI stage. Steps to Reproduce: 1. Run minor update (note the previous UC certificate likely expired as has been renewed by a certmonger) 2. Update fails with certificate verification error 3. Actual results: 2023-11-13 14:07:20.091 953596 ERROR tripleoclient.v1.overcloud_external_update.ExternalUpdateRun urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='10.0.55.152', port=13989): Max retries exceeded with url: /v2/executions (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),)) Expected results: Minor update passes Additional info: The problem could be tricky to reproduce as it apparently affects only the mistral client Proposed (and confirmed) fix https://review.opendev.org/c/openstack/tripleo-heat-templates/+/900634
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenStack Platform 16.2.6 bug fix and enhancement advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2024:1519