Re: Failed to setup certificates for system vm error on 2nd Zone after upgrading to 4.17.2

You can destroy these old systemvms or do a stop and start on them. Regards. From: Antoine Boucher Sent: Tuesday, February 21, 2023 10:40:46 AM To: users Subject: Failed to setup certificates for system vm error on 2nd Zone after upgrading to 4.17.2 After

Re: Expired Libvirt certificate on CentOS 7 KVM host.

For newer ACS version the Libvirt certificate is same as used by the CloudStack agent on the kvm host. The global setting values you configure and as you run the provision certificate API will generate certificate and provision then to the KVM host for use by both libvirt and CloudStack agent.

Re: Expired Libvirt certificate on CentOS 7 KVM host.

My ca.framework.cert.validity.period is set to 365 days. If assume that the Libvirt certificate expires in a year should I set ca.framework.cert.validity.period to be less than 365, say 360? Regards, Antoine > On Feb 20, 2023, at 11:54 PM, Rohit Yadav wrote: > > You can configure them

Failed to setup certificates for system vm error on 2nd Zone after upgrading to 4.17.2

After upgrading my two zone ACS from 4.16.2 to 4.17.2, the system VM (and VRs) of the first zone upgraded without issues but the system VMs (s-318-VM and v-317-VM) of the second zone (Kitchener1) are no longer able to establish connection with the management server. I have rebooted the host

Re: Expired Libvirt certificate on CentOS 7 KVM host.

You can configure them using the available global settings ca.framework.cert.validity.period By default the auto renewal is set to true. Read more here https://www.shapeblue.com/cloudstack-ca-framework/ and http://docs.cloudstack.apache.org/en/latest/adminguide/hosts.html#security Regards.

Re: Expired Libvirt certificate on CentOS 7 KVM host.

Excellent Wei, I set listen_tls to 0, started Libirtd and cloudstack-agent. The host connected as unsecured, I did a “Provision Host Security Keys” and all is well. Thanks again, Antoine Confidentiality Warning: This message and any attachments are intended only for the use of the intended

Expired Libvirt certificate on CentOS 7 KVM host.

You can refer to this code block https://github.com/apache/cloudstack/blob/main/scripts/util/keystore-setup#L54-L61 if [ -f "$LIBVIRTD_FILE" ]; then echo "Reverting libvirtd to not listen on TLS" sed -i "s,^listen_tls=1,listen_tls=0,g" $LIBVIRTD_FILE systemctl restart

Re: Expired Libvirt certificate on CentOS 7 KVM host.

Thank you Wei, My ca.plugin.root.auth.strictness was already set to false The cloud-stack agent refused to run because Libvirt is not running because of the expired Libvirt certs. Is there a way to turn off the secure connection requirement on libbvirt. Or at least to allow to connect and

Re: Kubernetes load balancer service

Hello, Is it futile to configure Cloudstack advanced networking with systems with only one NIC and a dumb switch? Thanks, -Stu From: Stuart Whitman Sent: Sunday, February 19, 2023 4:25 PM To: users@cloudstack.apache.org Subject: Re: Kubernetes load balancer

Re: Expired Libvirt certificate on CentOS 7 KVM host.

Agree. For the cloudstack agent which can not be started, update global setting `ca.plugin.root.auth.strictness` to `false` and retry. -Wei On Mon, 20 Feb 2023 at 20:21, Aditya Sharma wrote: > > Hello, > > Yes it can be done simply by forcing “provision host security keys“ from > the Web UI.

Re: Expired Libvirt certificate on CentOS 7 KVM host.

Ok, from the webui for connected KVM hosts, and manually for hosts that non longer are able to connect to the management server because of the expired certs? Thank you, Antoine Antoine Boucher antoi...@haltondc.com [o] +1-226-505-9734 www.haltondc.com “Data security made simple and

Re: Expired Libvirt certificate on CentOS 7 KVM host.

Hello, Yes it can be done simply by forcing “provision host security keys“ from the Web UI. Regards, Aditya Sharma > On 21-Feb-2023, at 00:01, Antoine Boucher wrote: > > Hello, > > I have just upgraded from 4.16.2 to 4.17.2 all went well. > > However, probably unrelated to the upgrade,

Expired Libvirt certificate on CentOS 7 KVM host.

Hello, I have just upgraded from 4.16.2 to 4.17.2 all went well. However, probably unrelated to the upgrade, I needed to do maintenance on on of my Centos 7 kvm host. When I rebooted the host CloudStack agent can not start, complaining about expired libvirt certificated. I read that the

Re: Using terraform to spin custom instances?

Thank you Kiran! On Mon, Feb 20, 2023 at 10:12 AM Kiran Chavala wrote: > Hi Jordan > > Currently it's not possible to select the host id using the terraform > provider > > > https://registry.terraform.io/providers/cloudstack/cloudstack/latest/docs/resources/instance > > There is no argument for

Re: Using terraform to spin custom instances?

Hi Jordan Currently it's not possible to select the host id using the terraform provider https://registry.terraform.io/providers/cloudstack/cloudstack/latest/docs/resources/instance There is no argument for hostid in terraform code for Cloudstack Regards Kiran

Re: [ANNOUNCE] Ivet Petrova has joined the PMC

Congratulations Ivet, very well deserved... Regards, Suresh On Tue, Feb 14, 2023 at 9:31 PM Simon Weller wrote: > > Hi everyone, > > It gives me great pleasure to announce that Ivet has been invited to join > the > CloudStack PMC and she has accepted. > > Please join me in congratulating Ivet!