Open Stack

On 1/30/21 1:11 PM, Dmitriy Rabotyagov wrote:
> Yeah, they do:
> [root at centos-distro openstack-ansible]# rpm -qa | egrep "amqp|kombu" 
> python3-kombu-5.0.2-1.el8.noarch 
> python3-amqp-5.0.3-1.el8.noarch 
> [root at centos-distro openstack-ansible]#
> 
> But not sure about keystoneauth1 since I see this at the point in oslo.messaging. Full error in systemd looks like this:
> Jan 30 11:51:04 aio1 nova-conductor[97314]: 2021-01-30 11:51:04.543 97314 ERROR oslo.messaging._drivers.impl_rabbit [req-61609624-b577-475d-996e-bc8f9899eae0 - - - - -] Connection failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)

If I'm not mistaking (it's hard to remember, because of the amount of
brokenness...), this happens with Eventlet 0.30.0, but not with the
patched version of 0.26.1 in Sid/Testing.

Are you using a self-signed certificate for the RabbitMQ cluster,
meaning having a root CA set in the configuration file, like I do? (my
installer maintains a PKI internal to the deployed clusters)

Cheers,

Thomas Goirand (zigo)