tripleo

/jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-minimal are failing deploy with CertificateError(\"hostname '192.168.24.12' doesn't match '10.0.0.5'\"

Bug #1946600 reported by Ronelle Landy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Critical
Unassigned
tripleo xena-3

Bug Description

jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-minimal are failing when deploying the overcloud on step step 4 - TASK | Clean up legacy Cinder keystone catalog entries - with the following error:

FATAL | Clean up legacy Cinder keystone catalog entries | undercloud | error={"changed": false, "module_stderr": "Failed to discover available identity versions when
...

Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://192.168.24.12:13000: HTTPSConnectionPool(host='192.168.24.12', port=13000): Max retries exceeded with url: / (Caused by SSLError(CertificateError(\"hostname '192.168.24.12' doesn't match '10.0.0.5'\",),))\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1}

Full deploy log is below:

https://artifacts.ci.centos.org/rdo/jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-minimal-30/undercloud/home/stack/overcloud_deploy.log

These jobs are running with ssl_overcloud: true

https://github.com/openstack/tripleo-quickstart/blob/master/config/general_config/minimal.yml#L11

See original description
Revision history for this message
Ronelle Landy (rlandy) wrote :

The cert log is below:

https://artifacts.ci.centos.org/rdo/jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-minimal-30/undercloud/home/stack/overcloud_create_ssl_cert.log

Revision history for this message
Ronelle Landy (rlandy) wrote :

A similar error is showing up in train:

https://artifacts.ci.centos.org/rdo/jenkins-tripleo-quickstart-promote-train-current-tripleo-delorean-minimal-36/undercloud/home/stack/overcloud_deploy.log

Changed in tripleo:
milestone: none → xena-3
importance: Undecided → Critical
status: New → Triaged
tags: added: ci promotion-blocker
Ronelle Landy (rlandy)
description: updated
Revision history for this message
Ronelle Landy (rlandy) wrote :

gfidente: fmount:

related to https://github.com/openstack/tripleo-heat-templates/commit/da30175061840bf3d1768ad52fc33336a45c93ce??

Ronelle Landy (rlandy)
summary: /jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-
- minimal rea failing deploy with CertificateError(\"hostname
+ minimal are failing deploy with CertificateError(\"hostname
'192.168.24.12' doesn't match '10.0.0.5'\"
Revision history for this message
yatin (yatinkarel) wrote :

https://review.opendev.org/c/openstack/tripleo-quickstart/+/812423 has caused the issues as network isolation args not getting passed in overcloud deploy for releases before victoria and thus network-environment.yaml not getting used and raising the ip related errors post that patch, this might be hitting victoria as well.
before patch:- https://artifacts.ci.centos.org/rdo/jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-minimal-23/undercloud/home/stack/overcloud_deploy.log
after patch:- https://artifacts.ci.centos.org/rdo/jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-minimal-26/undercloud/home/stack/overcloud_deploy.log

Revision history for this message
Rabi Mishra (rabi) wrote :

Hmm.. overcloud-deploy role from tqe[1] should network_isolation_args when network_provision is false? I guess it's overwritten.

I'll propose a patch.

[1] https://github.com/openstack/tripleo-quickstart-extras/blob/master/roles/overcloud-deploy/tasks/pre-deploy.yml#L13-L21

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-quickstart (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/tripleo-quickstart/+/813438

Changed in tripleo:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to tripleo-quickstart (master)

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/tripleo-quickstart/+/813531

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-quickstart (master)

Reviewed: https://review.opendev.org/c/openstack/tripleo-quickstart/+/813438
Committed: https://opendev.org/openstack/tripleo-quickstart/commit/a4a51ce91c11d20ef2aaaf37c2a6a25ed4f6ff5e
Submitter: "Zuul (22348)"
Branch: master

commit a4a51ce91c11d20ef2aaaf37c2a6a25ed4f6ff5e
Author: rabi <email address hidden>
Date: Mon Oct 11 19:33:20 2021 +0530

    Fix minimal featureset for < wallaby

    Looks like we're overriding with no environments
    by setting the var empty.

    Closes-Bug: #1946600
    Change-Id: I3c8df05c5e7230ba43b9e5a3b519af0020c01ff5

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on tripleo-quickstart (master)

Change abandoned by "Ronelle Landy <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/tripleo-quickstart/+/813531

Revision history for this message
yatin (yatinkarel) wrote :

So this cleared previous issue in Train:- https://jenkins-cloudsig-ci.apps.ocp.ci.centos.org/job/tripleo-quickstart-promote-train-current-tripleo-delorean-minimal/38/console

Ussuri got new issue[1] with https://review.opendev.org/c/openstack/tripleo-quickstart/+/812638/2/config/general_config/minimal.yml#70.

[1] Error: The --deployed-server cannot be used without the --disable-validations
https://artifacts.ci.centos.org/rdo/jenkins-tripleo-quickstart-promote-ussuri-current-tripleo-delorean-minimal-31/undercloud/home/stack/overcloud_deploy.log

Revision history for this message
Rabi Mishra (rabi) wrote :

 https://review.opendev.org/c/openstack/tripleo-quickstart/+/812638/2/config/general_config/minimal.yml#70 did not change the existing condition.

We were not using metalsmith in this featureset for ussuri (don't know why) and we changed it to use like other featuresets, hence the issue.

https://review.opendev.org/c/openstack/tripleo-quickstart/+/813595 should fix it.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.