{"action":"created","issue":{"url":"https://api.github.com/repos/IshentRas/cookbook-openshift3/issues/32","repository_url":"https://api.github.com/repos/IshentRas/cookbook-openshift3","labels_url":"https://api.github.com/repos/IshentRas/cookbook-openshift3/issues/32/labels{/name}","comments_url":"https://api.github.com/repos/IshentRas/cookbook-openshift3/issues/32/comments","events_url":"https://api.github.com/repos/IshentRas/cookbook-openshift3/issues/32/events","html_url":"https://github.com/IshentRas/cookbook-openshift3/issues/32","id":196291898,"number":32,"title":"Certificate validation issues when provisioning with version > v1.10.18 of this cookbook","user":{"login":"jperville","id":834791,"avatar_url":"https://avatars.githubusercontent.com/u/834791?v=3","gravatar_id":"","url":"https://api.github.com/users/jperville","html_url":"https://github.com/jperville","followers_url":"https://api.github.com/users/jperville/followers","following_url":"https://api.github.com/users/jperville/following{/other_user}","gists_url":"https://api.github.com/users/jperville/gists{/gist_id}","starred_url":"https://api.github.com/users/jperville/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jperville/subscriptions","organizations_url":"https://api.github.com/users/jperville/orgs","repos_url":"https://api.github.com/users/jperville/repos","events_url":"https://api.github.com/users/jperville/events{/privacy}","received_events_url":"https://api.github.com/users/jperville/received_events","type":"User","site_admin":false},"labels":[{"id":338104261,"url":"https://api.github.com/repos/IshentRas/cookbook-openshift3/labels/bug","name":"bug","color":"fc2929","default":true}],"state":"open","locked":false,"assignee":{"login":"IshentRas","id":8207879,"avatar_url":"https://avatars.githubusercontent.com/u/8207879?v=3","gravatar_id":"","url":"https://api.github.com/users/IshentRas","html_url":"https://github.com/IshentRas","followers_url":"https://api.github.com/users/IshentRas/followers","following_url":"https://api.github.com/users/IshentRas/following{/other_user}","gists_url":"https://api.github.com/users/IshentRas/gists{/gist_id}","starred_url":"https://api.github.com/users/IshentRas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IshentRas/subscriptions","organizations_url":"https://api.github.com/users/IshentRas/orgs","repos_url":"https://api.github.com/users/IshentRas/repos","events_url":"https://api.github.com/users/IshentRas/events{/privacy}","received_events_url":"https://api.github.com/users/IshentRas/received_events","type":"User","site_admin":false},"assignees":[{"login":"IshentRas","id":8207879,"avatar_url":"https://avatars.githubusercontent.com/u/8207879?v=3","gravatar_id":"","url":"https://api.github.com/users/IshentRas","html_url":"https://github.com/IshentRas","followers_url":"https://api.github.com/users/IshentRas/followers","following_url":"https://api.github.com/users/IshentRas/following{/other_user}","gists_url":"https://api.github.com/users/IshentRas/gists{/gist_id}","starred_url":"https://api.github.com/users/IshentRas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IshentRas/subscriptions","organizations_url":"https://api.github.com/users/IshentRas/orgs","repos_url":"https://api.github.com/users/IshentRas/repos","events_url":"https://api.github.com/users/IshentRas/events{/privacy}","received_events_url":"https://api.github.com/users/IshentRas/received_events","type":"User","site_admin":false}],"milestone":null,"comments":2,"created_at":"2016-12-18T18:51:55Z","updated_at":"2016-12-19T08:08:38Z","closed_at":null,"body":"Hello @IshentRas and @ianmiell ,\r\n\r\nAs promised in https://github.com/IshentRas/cookbook-openshift3/pull/29#issuecomment-266832976 , here is the bug report for the issue I'm having with this cookbook since v1.10.19. This is becoming critical, since I now have to chose between staying on v1.10.18 (and backporting my fixes by hand) and enjoying the new features added since v1.10.20.\r\n\r\nI have a Vagrantfile featuring several VMs (master and minion); the ipaddress of the openshift master and nodes are stored in role attributes as needed by this cookbook (see demo project Vagrantfile below). Before v1.10.18, I could provision just fine (even if the first run would fail because origin-master service not restarted yet after configuring, a second chef-run finishes the job). Since v1.10.19, I run into certificate validation issues which makes the origin-node service on the master VM fail forever with the following message in the journal:\r\n\r\n```\r\nDec 18 18:36:18 master systemd[1]: Starting Origin Node...\r\nDec 18 18:36:18 master origin-node[24838]: F1218 18:36:18.150550   24838 start_node.go:126] cannot fetch \"default\" cluster network: Get https://192.168.33.220.xip.io:8443/oapi/v1/clusternetworks/default: x509: certificate signed by unknown authority\r\nDec 18 18:36:18 master systemd[1]: origin-node.service: main process exited, code=exited, status=255/n/a\r\nDec 18 18:36:18 master systemd[1]: Failed to start Origin Node.\r\nDec 18 18:36:18 master systemd[1]: Unit origin-node.service entered failed state.\r\nDec 18 18:36:18 master systemd[1]: origin-node.service failed.\r\n```\r\n\r\nThe origin-master journal is spammed with messages like this:\r\n```\r\nDec 18 18:50:10 master origin-master[24505]: I1218 18:50:10.486666   24505 nodecontroller.go:609] NodeController is entering network segmentation mode.\r\nDec 18 18:50:13 master origin-master[24505]: I1218 18:50:13.262304   24505 server.go:2161] http: TLS handshake error from 192.168.33.220:38170: remote error: bad certificate\r\n```\r\n\r\nThis problem is 100% reproducible. I have prepared a demo project to reproduce the issue here: https://github.com/PerfectMemory/origin-provision-bug-demo  .. Just git clone and then run `vagrant provision master` (I assume that you have the tool installed). I use the latest stable version of Vagrant, Virtualbox and chef-dk.\r\n\r\nI also included a full log of `vagrant up master` on my system here: https://github.com/PerfectMemory/origin-provision-bug-demo/blob/master/vagrant-master.log\r\n\r\nThank you in advance."},"comment":{"url":"https://api.github.com/repos/IshentRas/cookbook-openshift3/issues/comments/267904764","html_url":"https://github.com/IshentRas/cookbook-openshift3/issues/32#issuecomment-267904764","issue_url":"https://api.github.com/repos/IshentRas/cookbook-openshift3/issues/32","id":267904764,"user":{"login":"jperville","id":834791,"avatar_url":"https://avatars.githubusercontent.com/u/834791?v=3","gravatar_id":"","url":"https://api.github.com/users/jperville","html_url":"https://github.com/jperville","followers_url":"https://api.github.com/users/jperville/followers","following_url":"https://api.github.com/users/jperville/following{/other_user}","gists_url":"https://api.github.com/users/jperville/gists{/gist_id}","starred_url":"https://api.github.com/users/jperville/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jperville/subscriptions","organizations_url":"https://api.github.com/users/jperville/orgs","repos_url":"https://api.github.com/users/jperville/repos","events_url":"https://api.github.com/users/jperville/events{/privacy}","received_events_url":"https://api.github.com/users/jperville/received_events","type":"User","site_admin":false},"created_at":"2016-12-19T08:08:38Z","updated_at":"2016-12-19T08:08:38Z","body":"Thanks for investigating my issue @IshentRas .\r\n\r\nAfter merging your PR, I tried to provision my VM and still ran into the certificate issue, then I found a suspicious line in my squid log (TCP_REFRESH_FAIL_OLD for http://192.168.33.220:9999/node/generated-configs/master.tgz ) which made me add 192.168.33.220 to `ENV[no_proxy]`.\r\n\r\nAfter making sure that chef is not passing through the proxy to talk to the master VM, I was able to provision both master and minions, without having to manually restart the chef-run in between.\r\n\r\nThank you very much again for the quick and efficient troubleshooting."}}
{"actor":{"display_login":"jperville"}}