maybe kolla-ansible changed the way for verifing ssl in the haproxy in 2023.1, it turns out that it didn't make it perfectly. Then we'll post issue for this in kolla-ansible.
And now the tmp resolution for you is that
1. add the following 2 lines into /etc/kolla/skyline-apiserver/gunicorn.py
(these two files should be in skyline_apiserver container, generated by kolla-ansible.)
```
keyfile = "/etc/skyline/certs/skyline-key.pem"
certfile = "/etc/skyline/certs/skyline-cert.pem"
```
then /etc/kolla/skyline-apiserver/gunicorn.py is like
# something
bind = "172.16.150.185:9998"
workers = 5
worker_class = "uvicorn.workers.UvicornWorker"
timeout = 300
keepalive = 5
reuse_port = True
proc_name = "skyline"
keyfile = "/etc/skyline/certs/skyline-key.pem"
certfile = "/etc/skyline/certs/skyline-cert.pem"
# something
we found the reason causes the issue.
maybe kolla-ansible changed the way for verifing ssl in the haproxy in 2023.1, it turns out that it didn't make it perfectly. Then we'll post issue for this in kolla-ansible.
And now the tmp resolution for you is that skyline- apiserver/ gunicorn. py certs/skyline- key.pem" certs/skyline- cert.pem" skyline- apiserver/ gunicorn. py is like 150.185: 9998" workers. UvicornWorker" certs/skyline- key.pem" certs/skyline- cert.pem"
1. add the following 2 lines into /etc/kolla/
(these two files should be in skyline_apiserver container, generated by kolla-ansible.)
```
keyfile = "/etc/skyline/
certfile = "/etc/skyline/
```
then /etc/kolla/
# something
bind = "172.16.
workers = 5
worker_class = "uvicorn.
timeout = 300
keepalive = 5
reuse_port = True
proc_name = "skyline"
keyfile = "/etc/skyline/
certfile = "/etc/skyline/
# something
2. restart skyline-apiserver container.