Hi, Can you please share path to get the – 1) cert + 2) integration-override.yaml (as couldn’t see this in oom/docs of Dublin)? Thanks.
Regards, Kuldeep From: [email protected] <[email protected]> On Behalf Of Brian Freeman via Lists.Onap.Org Sent: Tuesday, September 3, 2019 8:26 PM To: [email protected]; [email protected] Subject: Re: [onap-discuss] demo-k8s.sh onap init SSLError #robot 1. Check the url in the robot values.yaml or your override.yaml. It may have a trailing “/” (//v3/auth/tokens) 2. In casablanca , robot supports keystone v3 but SO does not out of the box (there is a work around available from the SO team but not widely used) * I would switch to Dublin in all honesty. 3. You need to put the certificate inside the pod not just on the host – for robot you can “kubectl -n onap exec -it <robot_pod> bash” and you will be inside the container and can put the certificate in a spot that python/robot can find it but the url for keystone is what sets ssl or non-ssl. Here is the v3 form of integration-override.yaml from oom/docs repository. Casablanca supports v2.0 for SO but v2.0 and v3 for robot (not that that helps much) Multivim can also act as a v2.0 to v3 proxy for SO for some openstack versions. 7 robot: 8 enabled: true 9 flavor: large 10 appcUsername: "[email protected]<mailto:[email protected]>" 11 appcPassword: "demo123456!" 12 # KEYSTONE Version 3 Required for Rocky and beyond 13 openStackKeystoneAPIVersion: "v3" 14 # OS_AUTH_URL without the /v3 from the openstack .RC file 15 openStackKeyStoneUrl: "http://10.12.25.2:5000"; 16 # OS_PROJECT_ID from the openstack .RC file 17 openStackTenantId: "09d8566ea45e43aa974cf447ed591d77" 18 # OS_USERNAME from the openstack .RC file 19 openStackUserName: "OS_USERNAME_HERE" 20 # OS_PROJECT_DOMAIN_ID from the openstack .RC file 21 # in some environments it is a string but in other environmens it may be a numeric 22 openStackDomainId: "default" 23 # OS_USER_DOMAIN_NAME from the openstack .RC file 24 openStackUserDomain: "Default" 25 openStackProjectName: "OPENSTACK_PROJECT_NAME_HERE" 26 ubuntu14Image: "ubuntu-14-04-cloud-amd64" 27 ubuntu16Image: "ubuntu-16-04-cloud-amd64" 28 openStackPublicNetId: "971040b2-7059-49dc-b220-4fab50cb2ad4" 29 openStackPrivateNetId: "83c84b68-80be-4990-8d7f-0220e3c6e5c8" 30 openStackPrivateSubnetId: "e571c1d1-8ac0-4744-9b40-c3218d0a53a0" 31 openStackPrivateNetCidr: "10.0.0.0/16" 32 openStackOamNetworkCidrPrefix: "10.0" 33 openStackSecurityGroup: "bbe028dc-b64f-4f11-a10f-5c6d8d26dc89" 34 dcaeCollectorIp: "10.12.6.109" 35 vnfPubKey: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKXDgoo3+WOqcUG8/5uUbk81+yczgwC4Y8ywTmuQqbNxlY1oQ0YxdMUqUnhitSXs5S/yRuAVOYHwGg2mCs20oAINrP+mxBI544AMIb9itPjCtgqtE2EWo6MmnFGbHB4Sx3XioE7F4VPsh7japsIwzOjbrQe+Mua1TGQ5d4nfEOQaaglXLLPFfuc7WbhbJbK6Q7rHqZfRcOwAMXgDoBqlyqKeiKwnumddo2RyNT8ljYmvB6buz7KnMinzo7qB0uktVT05FH9Rg0CTWH5norlG5qXgP2aukL0gk1ph8iAt7uYLf1ktp+LJI2gaF6L0/qli9EmVCSLr1uJ38Q8CBflhkh" 36 demoArtifactsVersion: "1.4.0" 37 demoArtifactsRepoUrl: "https://nexus.onap.org/content/repositories/releases"; 38 scriptVersion: "1.4.0" 39 rancherIpAddress: "10.12.6.160" 40 config: 41 # use the python utility to encrypt the OS_PASSWORD for the OS_USERNAME 42 openStackEncryptedPasswordHere: "XXXXXXXXXXXXXXXXXXXXXXXX_OPENSTACK_PYTHON_PASSWORD_HERE_XXXXXXXXXXXXXXXX" 43 openStackSoEncryptedPassword: "YYYYYYYYYYYYYYYYYYYYYYYY_OPENSTACK_JAVA_PASSWORD_HERE_YYYYYYYYYYYYYYYY" From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> On Behalf Of [email protected]<mailto:[email protected]> Sent: Monday, September 02, 2019 7:05 AM To: [email protected]<mailto:[email protected]> Subject: [onap-discuss] demo-k8s.sh onap init SSLError #robot Hi, I am trying to deploy a instance on Openstack using ONAP. I am using casablanca version of ONAP. I am trying to run "./demo-k8s.sh onap init" but I am getting a SSLError. Output of this command is following: root@sb4-k8s-1-1:~/oom/kubernetes/robot# ./demo-k8s.sh onap init Number of parameters: 2 KEY: init ++ kubectl --namespace onap get pods ++ sed 's/ .*//' ++ grep robot + POD=dev-robot-robot-646785574-ws5hq + ETEHOME=/var/opt/OpenECOMP_ETE ++ kubectl --namespace onap exec dev-robot-robot-646785574-ws5hq -- bash -c 'ls -1q /share/logs/ | wc -l' + export GLOBAL_BUILD_NUMBER=5 + GLOBAL_BUILD_NUMBER=5 ++ printf %04d 5 + OUTPUT_FOLDER=0005_demo_init + DISPLAY_NUM=95 + VARIABLEFILES='-V /share/config/vm_properties.py -V /share/config/integration_robot_properties.py -V /share/config/integration_preload_parameters.py' + kubectl --namespace onap exec dev-robot-robot-646785574-ws5hq -- /var/opt/OpenECOMP_ETE/runTags.sh -V /share/config/vm_properties.py -V /share/config/integration_robot_properties.py -V /share/config/integration_preload_parameters.py -d /share/logs/0005_demo_init -i InitDemo --display 95 Starting Xvfb on display :95 with res 1280x1024x24 Executing robot tests at log level TRACE ============================================================================== Testsuites ============================================================================== Testsuites.Demo :: Executes the VNF Orchestration Test cases including setu... ============================================================================== Initialize Customer And Models | FAIL | SSLError: HTTPSConnectionPool(host='hvlcloud.5ghvl.local', port=13000): Max retries exceeded with url: //v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),)) ------------------------------------------------------------------------------ Testsuites.Demo :: Executes the VNF Orchestration Test cases inclu... | FAIL | 1 critical test, 0 passed, 1 failed 1 test total, 0 passed, 1 failed ============================================================================== Testsuites | FAIL | 1 critical test, 0 passed, 1 failed 1 test total, 0 passed, 1 failed ============================================================================== Output: /share/logs/0005_demo_init/output.xml Log: /share/logs/0005_demo_init/log.html Report: /share/logs/0005_demo_init/report.html I installed ssl certificate of my openstack in ONAP NFS instance but it didnt worked. Is there a way to disable SSL in ONAP or is there a way to attach my SSL certificate on ONAP. I would be so happy if someone help me on this issue. ::DISCLAIMER:: ________________________________ The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. ________________________________ -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#19057): https://lists.onap.org/g/onap-discuss/message/19057 Mute This Topic: https://lists.onap.org/mt/33127268/21656 Mute #robot: https://lists.onap.org/mk?hashtag=robot&subid=2740164 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
