{"action":"created","issue":{"url":"https://api.github.com/repos/apache/cloudstack/issues/2930","repository_url":"https://api.github.com/repos/apache/cloudstack","labels_url":"https://api.github.com/repos/apache/cloudstack/issues/2930/labels{/name}","comments_url":"https://api.github.com/repos/apache/cloudstack/issues/2930/comments","events_url":"https://api.github.com/repos/apache/cloudstack/issues/2930/events","html_url":"https://github.com/apache/cloudstack/issues/2930","id":374432961,"node_id":"MDU6SXNzdWUzNzQ0MzI5NjE=","number":2930,"title":"HA for Management Server - roundrobin: Certificate ownership","user":{"login":"DennisKonrad","id":33484272,"node_id":"MDQ6VXNlcjMzNDg0Mjcy","avatar_url":"https://avatars0.githubusercontent.com/u/33484272?v=4","gravatar_id":"","url":"https://api.github.com/users/DennisKonrad","html_url":"https://github.com/DennisKonrad","followers_url":"https://api.github.com/users/DennisKonrad/followers","following_url":"https://api.github.com/users/DennisKonrad/following{/other_user}","gists_url":"https://api.github.com/users/DennisKonrad/gists{/gist_id}","starred_url":"https://api.github.com/users/DennisKonrad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DennisKonrad/subscriptions","organizations_url":"https://api.github.com/users/DennisKonrad/orgs","repos_url":"https://api.github.com/users/DennisKonrad/repos","events_url":"https://api.github.com/users/DennisKonrad/events{/privacy}","received_events_url":"https://api.github.com/users/DennisKonrad/received_events","type":"User","site_admin":false},"labels":[{"id":584074680,"node_id":"MDU6TGFiZWw1ODQwNzQ2ODA=","url":"https://api.github.com/repos/apache/cloudstack/labels/security","name":"security","color":"bfdadc","default":false}],"state":"open","locked":false,"assignee":{"login":"rhtyd","id":95203,"node_id":"MDQ6VXNlcjk1MjAz","avatar_url":"https://avatars0.githubusercontent.com/u/95203?v=4","gravatar_id":"","url":"https://api.github.com/users/rhtyd","html_url":"https://github.com/rhtyd","followers_url":"https://api.github.com/users/rhtyd/followers","following_url":"https://api.github.com/users/rhtyd/following{/other_user}","gists_url":"https://api.github.com/users/rhtyd/gists{/gist_id}","starred_url":"https://api.github.com/users/rhtyd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rhtyd/subscriptions","organizations_url":"https://api.github.com/users/rhtyd/orgs","repos_url":"https://api.github.com/users/rhtyd/repos","events_url":"https://api.github.com/users/rhtyd/events{/privacy}","received_events_url":"https://api.github.com/users/rhtyd/received_events","type":"User","site_admin":false},"assignees":[{"login":"rhtyd","id":95203,"node_id":"MDQ6VXNlcjk1MjAz","avatar_url":"https://avatars0.githubusercontent.com/u/95203?v=4","gravatar_id":"","url":"https://api.github.com/users/rhtyd","html_url":"https://github.com/rhtyd","followers_url":"https://api.github.com/users/rhtyd/followers","following_url":"https://api.github.com/users/rhtyd/following{/other_user}","gists_url":"https://api.github.com/users/rhtyd/gists{/gist_id}","starred_url":"https://api.github.com/users/rhtyd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rhtyd/subscriptions","organizations_url":"https://api.github.com/users/rhtyd/orgs","repos_url":"https://api.github.com/users/rhtyd/repos","events_url":"https://api.github.com/users/rhtyd/events{/privacy}","received_events_url":"https://api.github.com/users/rhtyd/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/apache/cloudstack/milestones/4","html_url":"https://github.com/apache/cloudstack/milestone/4","labels_url":"https://api.github.com/repos/apache/cloudstack/milestones/4/labels","id":3009550,"node_id":"MDk6TWlsZXN0b25lMzAwOTU1MA==","number":4,"title":"4.12.0.0","description":"Milestone for PRs targetted for the next major 4.12.0.0 release. PRs should be sent for master branch.","creator":{"login":"rhtyd","id":95203,"node_id":"MDQ6VXNlcjk1MjAz","avatar_url":"https://avatars0.githubusercontent.com/u/95203?v=4","gravatar_id":"","url":"https://api.github.com/users/rhtyd","html_url":"https://github.com/rhtyd","followers_url":"https://api.github.com/users/rhtyd/followers","following_url":"https://api.github.com/users/rhtyd/following{/other_user}","gists_url":"https://api.github.com/users/rhtyd/gists{/gist_id}","starred_url":"https://api.github.com/users/rhtyd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rhtyd/subscriptions","organizations_url":"https://api.github.com/users/rhtyd/orgs","repos_url":"https://api.github.com/users/rhtyd/repos","events_url":"https://api.github.com/users/rhtyd/events{/privacy}","received_events_url":"https://api.github.com/users/rhtyd/received_events","type":"User","site_admin":false},"open_issues":36,"closed_issues":128,"state":"open","created_at":"2018-01-03T08:46:42Z","updated_at":"2018-10-29T10:05:22Z","due_on":null,"closed_at":null},"comments":6,"created_at":"2018-10-26T15:23:50Z","updated_at":"2018-10-29T11:09:51Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"<!--\r\nVerify first that your issue/request is not already reported on GitHub.\r\nAlso test if the latest release and master branch are affected too.\r\nAlways add information AFTER of these HTML comments, but no need to delete the comments.\r\n-->\r\n\r\n##### ISSUE TYPE\r\n<!-- Pick one below and delete the rest -->\r\n * Bug Report\r\n\r\n##### COMPONENT NAME\r\n<!--\r\nCategorize the issue, e.g. API, VR, VPN, UI, etc.\r\n-->\r\n\r\nManagement Server HA\r\n\r\n##### CLOUDSTACK VERSION\r\n<!--\r\nNew line separated list of affected versions, commit ID for issues on master branch.\r\n-->\r\nmaster \r\n\r\n\r\n##### CONFIGURATION\r\n<!--\r\nInformation about the configuration if relevant, e.g. basic network, advanced networking, etc.  N/A otherwise\r\n-->\r\nindirect.agent.lb.algorithm = roundrobin\r\nhost = 10.24.48.46,10.24.48.47\r\n\r\n##### SUMMARY\r\n<!-- Explain the problem/feature briefly -->\r\nWhen trying to use the CS Management in roundrobin loadbalanced mode we get errors creating a\r\nVPC for example.\r\n\r\nIf we use `indirect.agent.lb.algorithm = static` it works like a charm for both managementservers.\r\n\r\nThe log states it has something todo with the certificates issued:\r\n\r\n![image](https://user-images.githubusercontent.com/33484272/47575735-084b7800-d943-11e8-811d-5ac2bffbdcfd.png)\r\n\r\nIt's not really clear what the error message itself is trying to say or how I can debug this further.\r\n\r\n##### STEPS TO REPRODUCE\r\nas stated above\r\n##### EXPECTED RESULTS\r\n<!-- What did you expect to happen when running the steps above? -->\r\n\r\n##### ACTUAL RESULTS\r\n<!-- What actually happened? -->\r\n\r\n<!-- Paste verbatim command output between quotes below -->\r\n"},"comment":{"url":"https://api.github.com/repos/apache/cloudstack/issues/comments/433872021","html_url":"https://github.com/apache/cloudstack/issues/2930#issuecomment-433872021","issue_url":"https://api.github.com/repos/apache/cloudstack/issues/2930","id":433872021,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMzg3MjAyMQ==","user":{"login":"rhtyd","id":95203,"node_id":"MDQ6VXNlcjk1MjAz","avatar_url":"https://avatars0.githubusercontent.com/u/95203?v=4","gravatar_id":"","url":"https://api.github.com/users/rhtyd","html_url":"https://github.com/rhtyd","followers_url":"https://api.github.com/users/rhtyd/followers","following_url":"https://api.github.com/users/rhtyd/following{/other_user}","gists_url":"https://api.github.com/users/rhtyd/gists{/gist_id}","starred_url":"https://api.github.com/users/rhtyd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rhtyd/subscriptions","organizations_url":"https://api.github.com/users/rhtyd/orgs","repos_url":"https://api.github.com/users/rhtyd/repos","events_url":"https://api.github.com/users/rhtyd/events{/privacy}","received_events_url":"https://api.github.com/users/rhtyd/received_events","type":"User","site_admin":false},"created_at":"2018-10-29T11:09:51Z","updated_at":"2018-10-29T11:09:51Z","author_association":"MEMBER","body":"@DennisKonrad I've already replied to you how cert generation works, tl;dr - each mgmt server generates its own cert on startup based on keypair/ca-cert from the db, the alt names are obtained by mgmt server by reading ips on network interfaces. The certs of mgmt server are only used when they peer/cluster with other mgmt servers, if you re-generated core keypair/ca-cert then kvm hosts certs will need to be re-provisioned. Please go figure: https://github.com/apache/cloudstack/blob/master/plugins/ca/root-ca/src/main/java/org/apache/cloudstack/ca/provider/RootCAProvider.java#L409"}}
{"actor":{"display_login":"rhtyd"}}