Hi Holywine,

Yes, it appears your host is encountering issues verifying the Let's Encrypt certificate, which I assume is currently used by both GitHub and OpenDev.

Based on your output, `infra1-repo-container` does delegate tasks to `localhost`. However, regardless of whether the file already exists, Ansible needs to check the remote URL to ensure the content is up-to-date.

Therefore, the core issue seems to be with certificate verification on your host(s). I would suggest starting by checking that the `ca-certificates` package is installed and updated to its latest version.

Then I would also try to debug the issue using openssl client, ie:
openssl s_client -showcerts -servername releases.openstack.org -connect releases.openstack.org:443 </dev/null

Best regards,
Dmitriy

On Mon, 6 Oct 2025, 03:12 , <holywine@outlook.com> wrote:
Hi Dmitriy,

Thanks for reply!

As your instruction 1) change the source to github 2) add user_requirements_git_url in user_variables.
The issue is the same.

I checked the folder /etc/openstack_deploy/upper-constraints/ the constraints file is acutally there.
Running the curl command it reports some error looks to be related to certificate. Not sure if this is related...
The console trace is as below:

...
EXIT NOTICE [Playbook execution failure] **************************************
===============================================================================
root@Server-05:/opt/openstack-ansible/playbooks# cd /etc/openstack_deploy/upper-constraints/
root@Server-05:/etc/openstack_deploy/upper-constraints# ls
upper_constraints_bfd91c04caf498be2bfda0732a2a0f9fa9306e07.txt
root@Server-05:/etc/openstack_deploy/upper-constraints# curl -I -L
https://releases.openstack.org/constraints/upper/bfd91c04caf498be2bfda0732a2a0f9fa9306e07
curl: (2) no URL specified
curl: try 'curl --help' or 'curl --manual' for more information
-bash: https://releases.openstack.org/constraints/upper/bfd91c04caf498be2bfda0732a2a0f9fa9306e07: No such file or directory
root@Server-05:/etc/openstack_deploy/upper-constraints# https://releases.openstack.org/constraints/upper/bfd91c04caf498be2bfda0732a2a0f9fa9306e07.txt
-bash: https://releases.openstack.org/constraints/upper/bfd91c04caf498be2bfda0732a2a0f9fa9306e07.txt: No such file or directory
root@Server-05:/etc/openstack_deploy/upper-constraints# curl -I -L https://releases.openstack.org/constraints/upper/bfd91c04caf498be2bfda0732a2a0f9fa9306e07.txt
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
root@Server-05:/etc/openstack_deploy/upper-constraints#

Does this imply a certifcate issue or network connection issue, since it seems infra1-repo-container did not get the file which is ready in the place?

Thanks!