kolla-ansible

octavia failed to create loadbalancer when using self-sign cert

Bug #1872404 reported by 李学海
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Medium
Radosław Piliszek
kolla-ansible 10.0.0 "ussuri"
Ussuri
Fix Released
Medium
Radosław Piliszek
kolla-ansible 10.0.0 "ussuri"

Bug Description

2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server Traceback (most recent call last):
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/oslo_messaging/rpc/server.py", line 165, in _process_incoming
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server res = self.dispatcher.dispatch(message)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 274, in dispatch
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server return self._do_dispatch(endpoint, method, ctxt, args)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 194, in _do_dispatch
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server result = func(ctxt, **new_args)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/controller/queue/v1/endpoints.py", line 55, in delete_load_balancer
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self.worker.delete_load_balancer(load_balancer_id, cascade)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/controller/worker/v1/controller_worker.py", line 367, in delete_load_balancer
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server delete_lb_tf.run()
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/taskflow/engines/action_engine/engine.py", line 247, in run
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server for _state in self.run_iter(timeout=timeout):
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/taskflow/engines/action_engine/engine.py", line 340, in run_iter
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server failure.Failure.reraise_if_any(er_failures)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/taskflow/types/failure.py", line 339, in reraise_if_any
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server failures[0].reraise()
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/taskflow/types/failure.py", line 346, in reraise
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server six.reraise(*self._exc_info)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server result = task.execute(**arguments)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/controller/worker/v1/tasks/network_tasks.py", line 465, in execute
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self.network_driver.deallocate_vip(vip)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/controller/worker/v1/tasks/network_tasks.py", line 43, in network_driver
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self._network_driver = utils.get_network_driver()
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/common/utils.py", line 56, in get_network_driver
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server invoke_on_load=True
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/stevedore/driver.py", line 61, in __init__
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server warn_on_missing_entrypoint=warn_on_missing_entrypoint
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/stevedore/named.py", line 81, in __init__
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server verify_requirements)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/stevedore/extension.py", line 203, in _load_plugins
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self._on_load_failure_callback(self, ep, err)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/stevedore/extension.py", line 195, in _load_plugins
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server verify_requirements,
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/stevedore/named.py", line 158, in _load_one_plugin
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server verify_requirements,
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/stevedore/extension.py", line 227, in _load_one_plugin
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server obj = plugin(*invoke_args, **invoke_kwds)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/network/drivers/neutron/allowed_address_pairs.py", line 46, in __init__
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server super(AllowedAddressPairsDriver, self).__init__()
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/network/drivers/neutron/base.py", line 47, in __init__
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self.sec_grp_enabled = self._check_extension_enabled(SEC_GRP_EXT_ALIAS)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/octavia/network/drivers/neutron/base.py", line 64, in _check_extension_enabled
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self.neutron_client.show_extension(extension_alias)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 789, in show_extension
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server return self.get(self.extension_path % ext_alias, params=_params)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 354, in get
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server headers=headers, params=params)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 331, in retry_request
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server headers=headers, params=params)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 282, in do_request
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server headers=headers)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutronclient/client.py", line 339, in do_request
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self._check_uri_length(url)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutronclient/client.py", line 332, in _check_uri_length
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server uri_len = len(self.endpoint_url) + len(url)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutronclient/client.py", line 346, in endpoint_url
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server return self.get_endpoint()
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 282, in get_endpoint
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server return self.session.get_endpoint(auth or self.auth, **kwargs)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/session.py", line 1200, in get_endpoint
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server return auth.get_endpoint(self, **kwargs)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 380, in get_endpoint
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server allow_version_hack=allow_version_hack, **kwargs)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 271, in get_endpoint_data
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server service_catalog = self.get_access(session).service_catalog
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 134, in get_access
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self.auth_ref = self.get_auth_ref(session)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 206, in get_auth_ref
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server self._plugin = self._do_create_plugin(session)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 161, in _do_create_plugin
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server 'auth_url is correct. %s' % e)
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://cloud2.internal.99cloud.com.cn:35357: HTTPSConnectionPool(host='cloud2.internal.99cloud.com.cn', port=35357): Max retries exceeded with url: / (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))
2020-04-10 16:40:47.768 40 ERROR oslo_messaging.rpc.server

李学海 (lixuehai)
Changed in kolla-ansible:
assignee: nobody → 李学海 (lixuehai)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/719396

Changed in kolla-ansible:
status: New → In Progress
OpenStack Infra (hudson-openstack)
Changed in kolla-ansible:
assignee: 李学海 (lixuehai) → Radosław Piliszek (yoctozepto)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/719396
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=ea4505f17a83f517f0f6e00d6583accf23051bfe
Submitter: Zuul
Branch: master

commit ea4505f17a83f517f0f6e00d6583accf23051bfe
Author: lixuehai <li.xuehai@99cloud.net>
Date: Mon Apr 13 14:11:29 2020 +0800

    Fix Octavia CA cert paths

    This fixes Octavia in scenarios requiring providing
    CA cert (self-signed, internally-signed).

    Change-Id: I60b7ec85f4fd8bbacf5df0ab7ed9a00658c91871
    Closes-Bug: #1872404

Changed in kolla-ansible:
status: In Progress → Fix Released
Mark Goddard (mgoddard)
Changed in kolla-ansible:
importance: Undecided → Medium
no longer affects: kolla-ansible/train
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.