{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes-incubator/kubespray/issues/2343","repository_url":"https://api.github.com/repos/kubernetes-incubator/kubespray","labels_url":"https://api.github.com/repos/kubernetes-incubator/kubespray/issues/2343/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes-incubator/kubespray/issues/2343/comments","events_url":"https://api.github.com/repos/kubernetes-incubator/kubespray/issues/2343/events","html_url":"https://github.com/kubernetes-incubator/kubespray/issues/2343","id":297209543,"number":2343,"title":"etcd : Gen_certs | run cert generation script fails on SSL","user":{"login":"matq007","id":3359239,"avatar_url":"https://avatars3.githubusercontent.com/u/3359239?v=4","gravatar_id":"","url":"https://api.github.com/users/matq007","html_url":"https://github.com/matq007","followers_url":"https://api.github.com/users/matq007/followers","following_url":"https://api.github.com/users/matq007/following{/other_user}","gists_url":"https://api.github.com/users/matq007/gists{/gist_id}","starred_url":"https://api.github.com/users/matq007/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/matq007/subscriptions","organizations_url":"https://api.github.com/users/matq007/orgs","repos_url":"https://api.github.com/users/matq007/repos","events_url":"https://api.github.com/users/matq007/events{/privacy}","received_events_url":"https://api.github.com/users/matq007/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2018-02-14T19:04:34Z","updated_at":"2018-03-12T08:40:19Z","closed_at":null,"author_association":"NONE","body":"<!-- Thanks for filing an issue! Before hitting the button, please answer these questions.-->\r\n\r\n**Is this a BUG REPORT or FEATURE REQUEST?** (choose one):\r\nBUG\r\n\r\n<!--\r\nIf this is a BUG REPORT, please:\r\n  - Fill in as much of the template below as you can.  If you leave out\r\n    information, we can't help you as well.\r\n\r\nIf this is a FEATURE REQUEST, please:\r\n  - Describe *in detail* the feature/behavior/change you'd like to see.\r\n\r\nIn both cases, be ready for followup questions, and please respond in a timely\r\nmanner.  If we can't reproduce a bug or think a feature already exists, we\r\nmight close your issue.  If we're wrong, PLEASE feel free to reopen it and\r\nexplain why.\r\n-->\r\n\r\n**Environment**:\r\n- **Cloud provider or hardware configuration:**\r\nhardware\r\n\r\n- **OS (`printf \"$(uname -srm)\\n$(cat /etc/os-release)\\n\"`):**\r\nLinux 3.10.0-693.2.2.el7.x86_64 x86_64\r\nNAME=\"CentOS Linux\"\r\nVERSION=\"7 (Core)\"\r\nID=\"centos\"\r\nID_LIKE=\"rhel fedora\"\r\nVERSION_ID=\"7\"\r\nPRETTY_NAME=\"CentOS Linux 7 (Core)\"\r\nANSI_COLOR=\"0;31\"\r\nCPE_NAME=\"cpe:/o:centos:centos:7\"\r\nHOME_URL=\"https://www.centos.org/\"\r\nBUG_REPORT_URL=\"https://bugs.centos.org/\"\r\n\r\nCENTOS_MANTISBT_PROJECT=\"CentOS-7\"\r\nCENTOS_MANTISBT_PROJECT_VERSION=\"7\"\r\nREDHAT_SUPPORT_PRODUCT=\"centos\"\r\nREDHAT_SUPPORT_PRODUCT_VERSION=\"7\"\r\n\r\n- **Version of Ansible** (`ansible --version`):\r\nansible 2.4.2.0\r\n\r\n**Kubespray version (commit) (`git rev-parse --short HEAD`):**\r\nv2.4.0\r\n\r\n**Network plugin used**:\r\ncalico\r\n\r\n**Copy of your inventory file:**\r\n\r\nnc-kub-m01 ansible_ssh_host=10.0.55.165 ip=10.0.55.165\r\nnc-kub-s01 ansible_ssh_host=10.0.55.163 ip=10.0.55.163\r\n\r\n[kube-master]\r\nnc-kub-m01\r\n\r\n[etcd]\r\nnc-kub-m01\r\n\r\n[kube-node]\r\nnc-kub-s01\r\n\r\n[k8s-cluster:children]\r\nkube-node\r\nkube-master\r\n\r\n**Command used to invoke ansible**:\r\nansible-playbook -i inventory/hosts.ini cluster.yml -b -K -v --user=kubernetes --private-key=~/.ssh/kubernetes.pem --ask-sudo-pass\r\n\r\n**Output of ansible run**:\r\n<!-- We recommend using snippets services like https://gist.github.com/ etc. -->\r\n```json\r\n{\r\n\t\"changed\": true,\r\n\t\"cmd\": [\r\n\t\t\"bash\",\r\n\t\t\"-x\",\r\n\t\t\"/usr/local/bin/etcd-scripts/make-ssl-etcd.sh\",\r\n\t\t\"-f\",\r\n\t\t\"/etc/ssl/etcd/openssl.conf\",\r\n\t\t\"-d\",\r\n\t\t\"/etc/ssl/etcd/ssl\"\r\n\t],\r\n\t\"delta\": \"0:00:00.403411\",\r\n\t\"end\": \"2018-02-14 19:53:14.477595\",\r\n\t\"msg\": \"non-zero return code\",\r\n\t\"rc\": 1,\r\n\t\"start\": \"2018-02-14 19:53:14.074184\",\r\n\t\"stderr\": \"+ set -o errexit\\n+ set -o pipefail\\n+ (( 4 ))\\n+ case \\\"$1\\\" in\\n+ CONFIG=/etc/ssl/etcd/openssl.conf\\n+ shift 2\\n+ (( 2 ))\\n+ case \\\"$1\\\" in\\n+ SSLDIR=/etc/ssl/etcd/ssl\\n+ shift 2\\n+ (( 0 ))\\n+ '[' -z /etc/ssl/etcd/openssl.conf ']'\\n+ '[' -z /etc/ssl/etcd/ssl ']'\\n++ mktemp -d /tmp/etcd_cacert.XXXXXX\\n+ tmpdir=/tmp/etcd_cacert.Vfkpq5\\n+ trap 'rm -rf \\\"${tmpdir}\\\"' EXIT\\n+ cd /tmp/etcd_cacert.Vfkpq5\\n+ mkdir -p /etc/ssl/etcd/ssl\\n+ '[' -e /etc/ssl/etcd/ssl/ca-key.pem ']'\\n+ cp /etc/ssl/etcd/ssl/ca.pem /etc/ssl/etcd/ssl/ca-key.pem .\\n+ '[' -n '  ' ']'\\n+ '[' -n '  nc-kub-s01    ' ']'\\n+ for host in '$HOSTS'\\n+ cn=nc-kub-s01\\n+ openssl genrsa -out node-nc-kub-s01-key.pem 2048\\n+ openssl req -new -key node-nc-kub-s01-key.pem -out node-nc-kub-s01.csr -subj /CN=etcd-node-nc-kub-s01\\n+ openssl x509 -req -in node-nc-kub-s01.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out node-nc-kub-s01.pem -days 3650 -extensions ssl_client -extfile /etc/ssl/etcd/openssl.conf\\n+ rm -rf /tmp/etcd_cacert.Vfkpq5\",\r\n\t\"stderr_lines\": [\r\n\t\t\"+ set -o errexit\",\r\n\t\t\"+ set -o pipefail\",\r\n\t\t\"+ (( 4 ))\",\r\n\t\t\"+ case \\\"$1\\\" in\",\r\n\t\t\"+ CONFIG=/etc/ssl/etcd/openssl.conf\",\r\n\t\t\"+ shift 2\",\r\n\t\t\"+ (( 2 ))\",\r\n\t\t\"+ case \\\"$1\\\" in\",\r\n\t\t\"+ SSLDIR=/etc/ssl/etcd/ssl\",\r\n\t\t\"+ shift 2\",\r\n\t\t\"+ (( 0 ))\",\r\n\t\t\"+ '[' -z /etc/ssl/etcd/openssl.conf ']'\",\r\n\t\t\"+ '[' -z /etc/ssl/etcd/ssl ']'\",\r\n\t\t\"++ mktemp -d /tmp/etcd_cacert.XXXXXX\",\r\n\t\t\"+ tmpdir=/tmp/etcd_cacert.Vfkpq5\",\r\n\t\t\"+ trap 'rm -rf \\\"${tmpdir}\\\"' EXIT\",\r\n\t\t\"+ cd /tmp/etcd_cacert.Vfkpq5\",\r\n\t\t\"+ mkdir -p /etc/ssl/etcd/ssl\",\r\n\t\t\"+ '[' -e /etc/ssl/etcd/ssl/ca-key.pem ']'\",\r\n\t\t\"+ cp /etc/ssl/etcd/ssl/ca.pem /etc/ssl/etcd/ssl/ca-key.pem .\",\r\n\t\t\"+ '[' -n '  ' ']'\",\r\n\t\t\"+ '[' -n '  nc-kub-s01    ' ']'\",\r\n\t\t\"+ for host in '$HOSTS'\",\r\n\t\t\"+ cn=nc-kub-s01\",\r\n\t\t\"+ openssl genrsa -out node-nc-kub-s01-key.pem 2048\",\r\n\t\t\"+ openssl req -new -key node-nc-kub-s01-key.pem -out node-nc-kub-s01.csr -subj /CN=etcd-node-nc-kub-s01\",\r\n\t\t\"+ openssl x509 -req -in node-nc-kub-s01.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out node-nc-kub-s01.pem -days 3650 -extensions ssl_client -extfile /etc/ssl/etcd/openssl.conf\",\r\n\t\t\"+ rm -rf /tmp/etcd_cacert.Vfkpq5\"\r\n\t],\r\n\t\"stdout\": \"\",\r\n\t\"stdout_lines\": []\r\n}\r\n```\r\n\r\n**Anything else do we need to know**:\r\n<!-- By running scripts/collect-info.yaml you can get a lot of useful informations.\r\nScript can be started by:\r\nansible-playbook -i <inventory_file_path> -u <ssh_user> -e ansible_ssh_user=<ssh_user> -b --become-user=root -e dir=`pwd` scripts/collect-info.yaml\r\n(If you using CoreOS remember to add '-e ansible_python_interpreter=/opt/bin/python').\r\nAfter running this command you can find logs in `pwd`/logs.tar.gz. You can even upload somewhere entire file and paste link here.-->\r\n\r\nAlso related to issue #1445.\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes-incubator/kubespray/issues/comments/372231005","html_url":"https://github.com/kubernetes-incubator/kubespray/issues/2343#issuecomment-372231005","issue_url":"https://api.github.com/repos/kubernetes-incubator/kubespray/issues/2343","id":372231005,"user":{"login":"woopstar","id":2997782,"avatar_url":"https://avatars1.githubusercontent.com/u/2997782?v=4","gravatar_id":"","url":"https://api.github.com/users/woopstar","html_url":"https://github.com/woopstar","followers_url":"https://api.github.com/users/woopstar/followers","following_url":"https://api.github.com/users/woopstar/following{/other_user}","gists_url":"https://api.github.com/users/woopstar/gists{/gist_id}","starred_url":"https://api.github.com/users/woopstar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/woopstar/subscriptions","organizations_url":"https://api.github.com/users/woopstar/orgs","repos_url":"https://api.github.com/users/woopstar/repos","events_url":"https://api.github.com/users/woopstar/events{/privacy}","received_events_url":"https://api.github.com/users/woopstar/received_events","type":"User","site_admin":false},"created_at":"2018-03-12T08:40:19Z","updated_at":"2018-03-12T08:40:19Z","author_association":"CONTRIBUTOR","body":"How did you configure \r\n\r\n```\r\n#loadbalancer_apiserver:\r\n#  address: 1.2.3.4\r\n#  port: 1234\r\n```\r\n\r\n?"}}
{"actor":{"display_login":"woopstar"}}