{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/7252","repository_url":"https://api.github.com/repos/openshift/openshift-ansible","labels_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/7252/labels{/name}","comments_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/7252/comments","events_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/7252/events","html_url":"https://github.com/openshift/openshift-ansible/issues/7252","id":299516068,"number":7252,"title":"curl: (35) You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.","user":{"login":"dyasny","id":787957,"avatar_url":"https://avatars3.githubusercontent.com/u/787957?v=4","gravatar_id":"","url":"https://api.github.com/users/dyasny","html_url":"https://github.com/dyasny","followers_url":"https://api.github.com/users/dyasny/followers","following_url":"https://api.github.com/users/dyasny/following{/other_user}","gists_url":"https://api.github.com/users/dyasny/gists{/gist_id}","starred_url":"https://api.github.com/users/dyasny/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dyasny/subscriptions","organizations_url":"https://api.github.com/users/dyasny/orgs","repos_url":"https://api.github.com/users/dyasny/repos","events_url":"https://api.github.com/users/dyasny/events{/privacy}","received_events_url":"https://api.github.com/users/dyasny/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-02-22T21:33:15Z","updated_at":"2018-04-02T22:45:07Z","closed_at":null,"author_association":"NONE","body":"#### Description\r\n\r\nTrying to install 3.9.0.0.42, I am receiving the error in $subj:\r\n```\r\nFAILED - RETRYING: wait for api server to be ready (3 retries left).\r\nFAILED - RETRYING: wait for api server to be ready (2 retries left).\r\nFAILED - RETRYING: wait for api server to be ready (1 retries left).\r\nfatal: [osmaster-0]: FAILED! => {\"attempts\": 120, \"changed\": false, \"cmd\": [\"curl\", \"-k\", \"https://apiserver.kube-service-catalog.svc/healthz\"], \"delta\": \"0:00:00.138025\", \"end\": \"2018-02-22 21:03:33.127629\", \"msg\": \"non-zero return code\", \"rc\": 35, \"start\": \"2018-02-22 21:03:32.989604\", \"stderr\": \"  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current\\n                                 Dload  Upload   Total   Spent    Left  Speed\\n\\r  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0\\r  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0\\r  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0\\ncurl: (35) You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.\", \"stderr_lines\": [\"  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current\", \"                                 Dload  Upload   Total   Spent    Left  Speed\", \"\", \"  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0\", \"  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0\", \"  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0\", \"curl: (35) You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.\"], \"stdout\": \"\", \"stdout_lines\": []}\r\n...\r\nINSTALLER STATUS **************************************************************************************************************************************************************************************************\r\nInitialization             : Complete (0:00:25)\r\nHealth Check               : Complete (0:00:01)\r\netcd Install               : Complete (0:03:35)\r\nMaster Install             : Complete (0:06:30)\r\nMaster Additional Install  : Complete (0:01:21)\r\nNode Install               : Complete (0:09:36)\r\nHosted Install             : Complete (0:02:30)\r\nWeb Console Install        : Complete (0:00:51)\r\nService Catalog Install    : In Progress (0:06:42)\r\n        This phase can be restarted by running: playbooks/openshift-service-catalog/config.yml\r\n\r\nThursday 22 February 2018  16:03:33 -0500 (0:04:43.085)       0:31:34.031 *****\r\n===============================================================================\r\nopenshift_service_catalog : wait for api server to be ready ---------------------------------------------------------------------------------------------------------------------------------------------- 283.09s\r\nopenshift_node : Pre-pull node image when containerized --------------------------------------------------------------------------------------------------------------------------------------------------- 45.97s\r\nopenshift_hosted : Ensure OpenShift pod correctly rolls out (best-effort today) --------------------------------------------------------------------------------------------------------------------------- 43.99s\r\nopenshift_cli : Pull CLI Image ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 39.81s\r\ntuned : Ensure files are populated from templates --------------------------------------------------------------------------------------------------------------------------------------------------------- 30.22s\r\ntuned : Ensure files are populated from templates --------------------------------------------------------------------------------------------------------------------------------------------------------- 28.63s\r\netcd : Pull etcd container -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 27.77s\r\nopenshift_node : Install iSCSI storage plugin dependencies ------------------------------------------------------------------------------------------------------------------------------------------------ 21.77s\r\nopenshift_node : Install iSCSI storage plugin dependencies ------------------------------------------------------------------------------------------------------------------------------------------------ 20.29s\r\nopenshift_web_console : Copy web console templates to temp directory -------------------------------------------------------------------------------------------------------------------------------------- 19.39s\r\nopenshift_master : Update journald setup ------------------------------------------------------------------------------------------------------------------------------------------------------------------ 17.18s\r\nopenshift_manageiq : Configure role/user permissions ------------------------------------------------------------------------------------------------------------------------------------------------------ 16.82s\r\nopenshift_service_catalog : oc_process -------------------------------------------------------------------------------------------------------------------------------------------------------------------- 15.31s\r\nopenshift_node : Pre-pull node image when containerized --------------------------------------------------------------------------------------------------------------------------------------------------- 14.73s\r\nopenshift_master : Create the ha systemd unit files ------------------------------------------------------------------------------------------------------------------------------------------------------- 14.63s\r\nopenshift_hosted : Ensure OpenShift pod correctly rolls out (best-effort today) --------------------------------------------------------------------------------------------------------------------------- 14.29s\r\nopenshift_master_certificates : Check status of master certificates --------------------------------------------------------------------------------------------------------------------------------------- 13.00s\r\nopenshift_web_console : Verify that the web console is running -------------------------------------------------------------------------------------------------------------------------------------------- 12.79s\r\nopenshift_node : Install GlusterFS storage plugin dependencies -------------------------------------------------------------------------------------------------------------------------------------------- 12.40s\r\nopenshift_master : Start and enable master api on first master -------------------------------------------------------------------------------------------------------------------------------------------- 11.70s\r\n\r\n\r\nFailure summary:\r\n\r\n\r\n  1. Hosts:    osmaster-0\r\n     Play:     Service Catalog\r\n     Task:     wait for api server to be ready\r\n     Message:  non-zero return code\r\n\r\n```\r\n\r\n\r\n##### Version\r\n\r\n\r\n```\r\nansible 2.4.3.0\r\n\r\nopenshift-ansible-3.9.0-0.42.0\r\n\r\n```\r\n\r\n##### Steps To Reproduce\r\n1. Provision 1 master and 3 nodes with CentOS7, updated to latest versions\r\n2. git clone openshift-ansible && git checkout openshift-ansible-3.9.0-0.42.0\r\n\r\n\r\n##### Expected Results\r\nComplete and working deployment. This worked for me just last week, so something must have changed\r\n\r\n##### Observed Results\r\nSee outputs above. I also get the same results when I manually run curl -k https://apiserver.kube-service-catalog.svc/healthz\r\n\r\n```\r\n#curl -k https://apiserver.kube-service-catalog.svc/healthz\r\ncurl: (35) You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert\r\n```\r\n\r\n\r\n##### Additional Information\r\n\r\n```\r\nInventory:\r\nosmaster-0 ansible_ssh_host=172.16.0.2 ansible_connection=ssh ansible_ssh_user=cloud-user ansible_ssh_private_key_file=/root/venv/infrared/.workspaces/workspace_2018-02-19_15-16-35/id_rsa ansible_ssh_common_args=' -o ForwardAgent=yes -o ServerAliveInterval=30 -o ControlMaster=auto -o ControlPersist=30m -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand=\"ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -W %h:%p -i /root/.ssh/id_rsa root@localhost\"' ansible_become=true\r\nceph-0 ansible_ssh_host=172.16.0.3 ansible_connection=ssh ansible_ssh_user=cloud-user ansible_ssh_private_key_file=/root/venv/infrared/.workspaces/workspace_2018-02-19_15-16-35/id_rsa ansible_ssh_common_args=' -o ForwardAgent=yes -o ServerAliveInterval=30 -o ControlMaster=auto -o ControlPersist=30m -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand=\"ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -W %h:%p -i /root/.ssh/id_rsa root@localhost\"' ansible_become=true\r\nceph-1 ansible_ssh_host=172.16.0.4 ansible_connection=ssh ansible_ssh_user=cloud-user ansible_ssh_private_key_file=/root/venv/infrared/.workspaces/workspace_2018-02-19_15-16-35/id_rsa ansible_ssh_common_args=' -o ForwardAgent=yes -o ServerAliveInterval=30 -o ControlMaster=auto -o ControlPersist=30m -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand=\"ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -W %h:%p -i /root/.ssh/id_rsa root@localhost\"' ansible_become=true\r\nceph-2 ansible_ssh_host=172.16.0.5 ansible_connection=ssh ansible_ssh_user=cloud-user ansible_ssh_private_key_file=/root/venv/infrared/.workspaces/workspace_2018-02-19_15-16-35/id_rsa ansible_ssh_common_args=' -o ForwardAgent=yes -o ServerAliveInterval=30 -o ControlMaster=auto -o ControlPersist=30m -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand=\"ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -W %h:%p -i /root/.ssh/id_rsa root@localhost\"' ansible_become=true\r\nosnode-0 ansible_ssh_host=172.16.0.6 ansible_connection=ssh ansible_ssh_user=cloud-user ansible_ssh_private_key_file=/root/venv/infrared/.workspaces/workspace_2018-02-19_15-16-35/id_rsa ansible_ssh_common_args=' -o ForwardAgent=yes -o ServerAliveInterval=30 -o ControlMaster=auto -o ControlPersist=30m -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand=\"ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -W %h:%p -i /root/.ssh/id_rsa root@localhost\"' ansible_become=true\r\nosnode-1 ansible_ssh_host=172.16.0.7 ansible_connection=ssh ansible_ssh_user=cloud-user ansible_ssh_private_key_file=/root/venv/infrared/.workspaces/workspace_2018-02-19_15-16-35/id_rsa ansible_ssh_common_args=' -o ForwardAgent=yes -o ServerAliveInterval=30 -o ControlMaster=auto -o ControlPersist=30m -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand=\"ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -W %h:%p -i /root/.ssh/id_rsa root@localhost\"' ansible_become=true\r\nosnode-2 ansible_ssh_host=172.16.0.8 ansible_connection=ssh ansible_ssh_user=cloud-user ansible_ssh_private_key_file=/root/venv/infrared/.workspaces/workspace_2018-02-19_15-16-35/id_rsa ansible_ssh_common_args=' -o ForwardAgent=yes -o ServerAliveInterval=30 -o ControlMaster=auto -o ControlPersist=30m -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ProxyCommand=\"ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -W %h:%p -i /root/.ssh/id_rsa root@localhost\"' ansible_become=true\r\nlocalhost ansible_connection=local ansible_python_interpreter=python\r\nhypervisor ansible_ssh_host=localhost ansible_connection=ssh ansible_ssh_user=root ansible_ssh_private_key_file=/root/.ssh/id_rsa\r\n\r\n[mgrs]\r\nceph-0\r\nceph-2\r\nceph-1\r\n\r\n[mons]\r\nceph-0\r\nceph-2\r\nceph-1\r\n\r\n[hypervisor]\r\nhypervisor\r\n\r\n[osds]\r\nceph-0\r\nceph-2\r\nceph-1\r\n\r\n[osnodes]\r\nosnode-2\r\nosnode-1\r\nosnode-0\r\n\r\n[osmasters]\r\nosmaster-0\r\n\r\n[local]\r\nlocalhost\r\n\r\n[ceph]\r\nceph-0\r\nceph-2\r\nceph-1\r\n\r\n[OSEv3:children]\r\nmasters\r\nnodes\r\netcd\r\n\r\n[OSEv3:vars]\r\nansible_ssh_user=root\r\nansible_ssh_pass=redhat\r\ndeployment_type=origin\r\nopenshift_deployment_type=origin\r\nopenshift_clock_enabled=true\r\nopenshift_master_identity_providers=[{'name': 'allow_all_auth', 'login': 'true', 'challenge': 'true', 'kind': 'AllowAllPasswordIdentityProvider'}]\r\nopenshift_disable_check=memory_availability,disk_availability,docker_storage,package_availability,docker_image_availability\r\nopenshift_repos_enable_testing=True\r\nopenshift_image_tag=latest\r\ncontainerized=true\r\nenable_excluders=false\r\n\r\n[masters]\r\nosmaster-0 openshift_ip=172.16.0.2\r\n\r\n[etcd]\r\nosmaster-0 openshift_ip=172.16.0.2\r\n\r\n[nodes]\r\nosmaster-0 openshift_node_labels=\"{'region': 'infra','zone': 'default'}\" openshift_schedulable=true openshift_ip=172.16.0.2\r\nosnode-0 openshift_node_labels=\"{'region': 'infra','zone': 'default'}\" openshift_schedulable=true openshift_ip=172.16.0.6\r\nosnode-1 openshift_node_labels=\"{'region': 'infra','zone': 'default'}\" openshift_schedulable=true openshift_ip=172.16.0.7\r\nosnode-2 openshift_node_labels=\"{'region': 'infra','zone': 'default'}\" openshift_schedulable=true openshift_ip=172.16.0.8\r\n\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/comments/378070027","html_url":"https://github.com/openshift/openshift-ansible/issues/7252#issuecomment-378070027","issue_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/7252","id":378070027,"user":{"login":"stephanosbacon","id":16373936,"avatar_url":"https://avatars0.githubusercontent.com/u/16373936?v=4","gravatar_id":"","url":"https://api.github.com/users/stephanosbacon","html_url":"https://github.com/stephanosbacon","followers_url":"https://api.github.com/users/stephanosbacon/followers","following_url":"https://api.github.com/users/stephanosbacon/following{/other_user}","gists_url":"https://api.github.com/users/stephanosbacon/gists{/gist_id}","starred_url":"https://api.github.com/users/stephanosbacon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stephanosbacon/subscriptions","organizations_url":"https://api.github.com/users/stephanosbacon/orgs","repos_url":"https://api.github.com/users/stephanosbacon/repos","events_url":"https://api.github.com/users/stephanosbacon/events{/privacy}","received_events_url":"https://api.github.com/users/stephanosbacon/received_events","type":"User","site_admin":false},"created_at":"2018-04-02T22:45:07Z","updated_at":"2018-04-02T22:45:07Z","author_association":"NONE","body":"I'm seeing the same problem, using the latest and greatest openshift-ansible release-3.9 branch (which looks like 3.9.16-1).\r\n\r\nHere are what I think are relevant variables:\r\n[OSEv3:vars]\r\nansible_ssh_user=centos\r\nansible_sudo=true\r\nansible_become=true\r\n\r\ndeployment_type=origin\r\nopenshift_deployment_type=origin\r\nopenshift_release=v3.9\r\nopenshift_cloudprovider_kind=aws\r\nopenshift_repos_enable_testing=True\r\n"}}
{"actor":{"display_login":"stephanosbacon"}}