1. Check the url in the robot values.yaml or your override.yaml. It may have
a trailing “/” (//v3/auth/tokens)
2. In casablanca , robot supports keystone v3 but SO does not out of the box
(there is a work around available from the SO team but not widely used)
* I would switch to Dublin in all honesty.
3. You need to put the certificate inside the pod not just on the host – for
robot you can “kubectl -n onap exec -it <robot_pod> bash” and you will be
inside the container and can put the certificate in a spot that python/robot
can find it but the url for keystone is what sets ssl or non-ssl.
Here is the v3 form of integration-override.yaml from oom/docs repository.
Casablanca supports v2.0 for SO but v2.0 and v3 for robot (not that that helps
much)
Multivim can also act as a v2.0 to v3 proxy for SO for some openstack versions.
7 robot:
8 enabled: true
9 flavor: large
10 appcUsername: "[email protected]"
11 appcPassword: "demo123456!"
12 # KEYSTONE Version 3 Required for Rocky and beyond
13 openStackKeystoneAPIVersion: "v3"
14 # OS_AUTH_URL without the /v3 from the openstack .RC file
15 openStackKeyStoneUrl: "http://10.12.25.2:5000";
16 # OS_PROJECT_ID from the openstack .RC file
17 openStackTenantId: "09d8566ea45e43aa974cf447ed591d77"
18 # OS_USERNAME from the openstack .RC file
19 openStackUserName: "OS_USERNAME_HERE"
20 # OS_PROJECT_DOMAIN_ID from the openstack .RC file
21 # in some environments it is a string but in other environmens it may
be a numeric
22 openStackDomainId: "default"
23 # OS_USER_DOMAIN_NAME from the openstack .RC file
24 openStackUserDomain: "Default"
25 openStackProjectName: "OPENSTACK_PROJECT_NAME_HERE"
26 ubuntu14Image: "ubuntu-14-04-cloud-amd64"
27 ubuntu16Image: "ubuntu-16-04-cloud-amd64"
28 openStackPublicNetId: "971040b2-7059-49dc-b220-4fab50cb2ad4"
29 openStackPrivateNetId: "83c84b68-80be-4990-8d7f-0220e3c6e5c8"
30 openStackPrivateSubnetId: "e571c1d1-8ac0-4744-9b40-c3218d0a53a0"
31 openStackPrivateNetCidr: "10.0.0.0/16"
32 openStackOamNetworkCidrPrefix: "10.0"
33 openStackSecurityGroup: "bbe028dc-b64f-4f11-a10f-5c6d8d26dc89"
34 dcaeCollectorIp: "10.12.6.109"
35 vnfPubKey: "ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAABAQDKXDgoo3+WOqcUG8/5uUbk81+yczgwC4Y8ywTmuQqbNxlY1oQ0YxdMUqUnhitSXs5S/yRuAVOYHwGg2mCs20oAINrP+mxBI544AMIb9itPjCtgqtE2EWo6MmnFGbHB4Sx3XioE7F4VPsh7japsIwzOjbrQe+Mua1TGQ5d4nfEOQaaglXLLPFfuc7WbhbJbK6Q7rHqZfRcOwAMXgDoBqlyqKeiKwnumddo2RyNT8ljYmvB6buz7KnMinzo7qB0uktVT05FH9Rg0CTWH5norlG5qXgP2aukL0gk1ph8iAt7uYLf1ktp+LJI2gaF6L0/qli9EmVCSLr1uJ38Q8CBflhkh"
36 demoArtifactsVersion: "1.4.0"
37 demoArtifactsRepoUrl:
"https://nexus.onap.org/content/repositories/releases";
38 scriptVersion: "1.4.0"
39 rancherIpAddress: "10.12.6.160"
40 config:
41 # use the python utility to encrypt the OS_PASSWORD for the OS_USERNAME
42 openStackEncryptedPasswordHere:
"XXXXXXXXXXXXXXXXXXXXXXXX_OPENSTACK_PYTHON_PASSWORD_HERE_XXXXXXXXXXXXXXXX"
43 openStackSoEncryptedPassword:
"YYYYYYYYYYYYYYYYYYYYYYYY_OPENSTACK_JAVA_PASSWORD_HERE_YYYYYYYYYYYYYYYY"
From: [email protected] <[email protected]> On Behalf Of
[email protected]
Sent: Monday, September 02, 2019 7:05 AM
To: [email protected]
Subject: [onap-discuss] demo-k8s.sh onap init SSLError #robot
Hi,
I am trying to deploy a instance on Openstack using ONAP. I am using casablanca
version of ONAP. I am trying to run "./demo-k8s.sh onap init" but I am getting
a SSLError. Output of this command is following:
root@sb4-k8s-1-1:~/oom/kubernetes/robot# ./demo-k8s.sh onap init
Number of parameters:
2
KEY:
init
++ kubectl --namespace onap get pods
++ sed 's/ .*//'
++ grep robot
+ POD=dev-robot-robot-646785574-ws5hq
+ ETEHOME=/var/opt/OpenECOMP_ETE
++ kubectl --namespace onap exec dev-robot-robot-646785574-ws5hq -- bash -c 'ls
-1q /share/logs/ | wc -l'
+ export GLOBAL_BUILD_NUMBER=5
+ GLOBAL_BUILD_NUMBER=5
++ printf %04d 5
+ OUTPUT_FOLDER=0005_demo_init
+ DISPLAY_NUM=95
+ VARIABLEFILES='-V /share/config/vm_properties.py -V
/share/config/integration_robot_properties.py -V
/share/config/integration_preload_parameters.py'
+ kubectl --namespace onap exec dev-robot-robot-646785574-ws5hq --
/var/opt/OpenECOMP_ETE/runTags.sh -V /share/config/vm_properties.py -V
/share/config/integration_robot_properties.py -V
/share/config/integration_preload_parameters.py -d /share/logs/0005_demo_init
-i InitDemo --display 95
Starting Xvfb on display :95 with res 1280x1024x24
Executing robot tests at log level TRACE
==============================================================================
Testsuites
==============================================================================
Testsuites.Demo :: Executes the VNF Orchestration Test cases including setu...
==============================================================================
Initialize Customer And Models | FAIL |
SSLError: HTTPSConnectionPool(host='hvlcloud.5ghvl.local', port=13000): Max
retries exceeded with url: //v3/auth/tokens (Caused by SSLError(SSLError("bad
handshake: Error([('SSL routines', 'tls_process_server_certificate',
'certificate verify failed')],)",),))
------------------------------------------------------------------------------
Testsuites.Demo :: Executes the VNF Orchestration Test cases inclu... | FAIL |
1 critical test, 0 passed, 1 failed
1 test total, 0 passed, 1 failed
==============================================================================
Testsuites | FAIL |
1 critical test, 0 passed, 1 failed
1 test total, 0 passed, 1 failed
==============================================================================
Output: /share/logs/0005_demo_init/output.xml
Log: /share/logs/0005_demo_init/log.html
Report: /share/logs/0005_demo_init/report.html
I installed ssl certificate of my openstack in ONAP NFS instance but it didnt
worked. Is there a way to disable SSL in ONAP or is there a way to attach my
SSL certificate on ONAP. I would be so happy if someone help me on this issue.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#18799): https://lists.onap.org/g/onap-discuss/message/18799
Mute This Topic: https://lists.onap.org/mt/33127268/21656
Mute #robot: https://lists.onap.org/mk?hashtag=robot&subid=2740164
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
