[Kolla-ansible][Trove][2023.2] Unable to create datastore when using self-signed certificate
Hi, I am trying to complete trove configuration, by creating a datastore. I am using a self-signed certificate in my deployment. When trying to create a datastore I got : ble but deprecated behaviour. Please set this to True. 2024-03-18 12:26:20.245 35 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Please set this to True. 2024-03-18 12:26:20.249 35 WARNING keystonemiddleware.auth_token [-] Using the in-process token cache is deprecated as of the 4.2.0 release and may be removed in the 5.0.0 release or the 'O' development cycle. The in-process cache causes inconsistent results and high memory usage. When the feature is removed the auth_token middleware will not cache tokens by default which may result in performance issues. It is recommended to use memcache for the auth_token token cache by setting the memcached_servers option. 2024-03-18 12:26:20.685 35 INFO trove.extensions.mgmt.datastores.service [None req-ef8a2f03-8500-40e0-88fe-4fac6ac5c9cb 85c09dd86fc846f98c3b4add7f64d76f 54589053b612438ab9c4d3f800c75000 - - - -] Tenant: '54589053b612438ab9c4d3f800c75000' is adding the datastore version: '5.7.29' to datastore: 'mysql' *2024-03-18 12:26:20.719 35 WARNING keystoneauth.identity.generic.base [None req-ef8a2f03-8500-40e0-88fe-4fac6ac5c9cb 85c09dd86fc846f98c3b4add7f64d76f 54589053b612438ab9c4d3f800c75000 - - - -] Failed to discover available identity versions when contacting https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>. Attempting to parse version from URL.: keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>: HTTPSConnectionPool(host='dashint.cdn.example.com <http://dashint.cdn.example.com>', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))* *2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi [None req-ef8a2f03-8500-40e0-88fe-4fac6ac5c9cb 85c09dd86fc846f98c3b4add7f64d76f 54589053b612438ab9c4d3f800c75000 - - - -] e85a7be5-6d90-456e-8c24-4125098a6228: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>: HTTPSConnectionPool(host='dashint.cdn.example.com <http://dashint.cdn.example.com>', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))): keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>: HTTPSConnectionPool(host='dashint.cdn.example.com <http://dashint.cdn.example.com>', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))* 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 703, in urlopen 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi httplib_response = self._make_request( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 386, in _make_request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self._validate_conn(conn) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 1042, in _validate_conn 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi conn.connect() 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connection.py", line 419, in connect 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self.sock = ssl_wrap_socket( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/util/ssl_.py", line 449, in ssl_wrap_socket 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi ssl_sock = _ssl_wrap_socket_impl( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/util/ssl_.py", line 493, in _ssl_wrap_socket_impl 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return ssl_context.wrap_socket(sock, server_hostname=server_hostname) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 446, in wrap_socket 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return GreenSSLSocket(sock, *a, _context=self, **kw) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 140, in __init__ 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self.do_handshake() 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 312, in do_handshake 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return self._call_trampolining( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 162, in _call_trampolining 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return func(*a, **kw) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/usr/lib64/python3.9/ssl.py", line 1343, in do_handshake 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self._sslobj.do_handshake() 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi During handling of the above exception, another exception occurred: 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/adapters.py", line 489, in send 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = conn.urlopen( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 787, in urlopen 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi retries = retries.increment( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/util/retry.py", line 592, in increment 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi raise MaxRetryError(_pool, url, error or ResponseError(cause)) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host=' dashint.cdn.example.com', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi During handling of the above exception, another exception occurred: 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 1014, in _send_request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = self.session.request(method, url, **kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/sessions.py", line 587, in request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = self.send(prep, **send_kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/sessions.py", line 701, in send 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi r = adapter.send(request, **kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/adapters.py", line 563, in send 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi raise SSLError(e, request=request) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi requests.exceptions.SSLError: HTTPSConnectionPool(host=' dashint.cdn.example.com', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi During handling of the above exception, another exception occurred: 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/identity/generic/base.py", line 133, in _do_create_plugin 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi disc = self.get_discovery(session, 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/identity/base.py", line 605, in get_discovery 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return discover.get_discovery(session=session, url=url, 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/discover.py", line 1459, in get_discovery 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi disc = Discover(session, url, authenticated=authenticated) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/discover.py", line 539, in __init__ 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self._data = get_version_data(session, url, 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/discover.py", line 106, in get_version_data 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = session.get(url, headers=headers, authenticated=authenticated) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 1133, in get 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return self.request(url, 'GET', **kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 923, in request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = send(**kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 1018, in _send_request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi raise exceptions.SSLError(msg) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://dashint.cdn.example.com:5000: HTTPSConnectionPool(host=' dashint.cdn.example.com', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) Regards.
participants (1)
-
wodel youchi