HAProxy error during overcloud deploy '/etc/pki/CA/crl/overcloud-crl.pem'

asked 2020-02-25 16:26:49 -0500

valvi gravatar image

updated 2020-02-28 08:57:35 -0500

Hi All,

I've a problem during the deploy of my Train version of overcloud, below the command to deploy it:

openstack overcloud deploy --stack cloud0 --templates \
-p /usr/share/openstack-tripleo-heat-templates/plan-samples/plan-environment-derived-params.yaml \
-r /home/stack/templates/roles_data.yaml \
-e /home/stack/templates/layout.yaml \
-e /usr/share/openstack-tripleo-heat-templates/environments/ceph-ansible/ceph-ansible.yaml \
-e /home/stack/templates/storage-config.yaml \
-e /home/stack/templates/network.yaml \
-e /home/stack/templates/ssh_banner.yaml \
-e /usr/share/openstack-tripleo-heat-templates/environments/auditd.yaml \
-e /usr/share/openstack-tripleo-heat-templates/environments/ssl/enable-internal-tls.yaml \
-e /usr/share/openstack-tripleo-heat-templates/environments/ssl/tls-everywhere-endpoints-dns.yaml \
-e /usr/share/openstack-tripleo-heat-templates/environments/services/haproxy-public-tls-certmonger.yaml \
--log-file overcloud_deployment.log --verbose

I've correctly installed a freeIPA istance and the undercloud with novajoin, under the deployment the undercloud create succesfully all the instance on FreeIPA; no error during STACK creation but during the deploy I got an error. The only error found in the log files is on the Controller nodes regarding HAProxy:

in /var/log/containers/stdouts/container-puppet-haproxy.log:

2020-02-25T23:05:37.989259433+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'nova_novncproxy', server 'cloud0-controller-1.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:184] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989259433+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'nova_novncproxy', server 'cloud0-controller-0.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:185] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989278089+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'nova_novncproxy', server 'cloud0-controller-2.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:186] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989278089+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'nova_osapi', server 'cloud0-controller-1.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:199] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989304724+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'nova_osapi', server 'cloud0-controller-0.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:200] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989304724+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'nova_osapi', server 'cloud0-controller-2.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:201] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989304724+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'placement', server 'cloud0-controller-1.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:242] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989321500+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'placement', server 'cloud0-controller-0.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:243] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989321500+01:00 stderr F puppet-user: [ALERT] 055/230537 (52) : Proxy 'placement', server 'cloud0-controller-2.internalapi.localdomail.local' [/etc/haproxy/haproxy.cfg20200225-16-1vk3ret:244] unable to configure CRL file '/etc/pki/CA/crl/overcloud-crl.pem'.
2020-02-25T23:05:37.989337237+01:00 stderr F puppet-user: [ALERT ...
(more)
edit retag flag offensive close merge delete