search

kubernetes / cloud-provider-openstack

Apache License 2.0
619 stars 610 forks source link

gate failure: devstack not able to install #1663

Closed jichenjc closed 3 years ago

jichenjc commented 3 years ago

Is this a BUG REPORT or FEATURE REQUEST?:

Uncomment only one, leave it on its own line:

/kind bug /kind feature

What happened:

https://storage.googleapis.com/kubernetes-jenkins/pr-logs/pull/cloud-provider-openstack/1585/openstack-cloud-csi-cinder-e2e-test/1447442829453299712/build-log.txt

TASK [install-devstack : Git checkout devstack] ********************************
fatal: [34.150.152.244]: FAILED! => {
    "changed": false,
    "cmd": "/usr/bin/git ls-remote https://opendev.org/openstack/devstack -h refs/heads/stable/wallaby",
    "rc": 128
}

STDERR:

fatal: unable to access 'https://opendev.org/openstack/devstack/': server certificate verification failed. CAfile: none CRLfile: none

What you expected to happen:

How to reproduce it:

Anything else we need to know?:

Environment:

jichenjc commented 3 years ago

trying to follow GIT_SSL_NO_VERIFY=1 to skip verification through #1664 now

ramineni commented 3 years ago

trying to follow GIT_SSL_NO_VERIFY=1 to skip verification through #1664 now

@jichenjc Ideally it should work without this flag. And also Im not sure , skip ssl verification in CI is a good idea. Im wondering it was working fine before , what changed suddenly.

jichenjc commented 3 years ago

I think the skip is only for clone the code ... not the test itself 

root@jjtest1:~# git clone https://opendev.org/openstack/devstack
Cloning into 'devstack'...
fatal: unable to access 'https://opendev.org/openstack/devstack/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

I agree it should be something wrong and google this seems related to cert file expire.. so this is a workaround in case we can't find a reasonable solution soon

lingxiankong commented 3 years ago

Seems it's related to opendev.org, I changed to github.com in https://github.com/kubernetes/cloud-provider-openstack/pull/1668, it is working fine.

lingxiankong commented 3 years ago

@ramineni @jichenjc which approach do you prefer?

jichenjc commented 3 years ago

opendev.org is official website, github is mirror so I prefer official site ...

lingxiankong commented 3 years ago

opendev.org is official website, github is mirror so I prefer official site ...

Well, I agree with you. I would suggest we go for #1664 as a temporary workaround.

jichenjc commented 3 years ago

@lingxiankong can you help to merge #1664 ? thanks

ramineni commented 3 years ago

@jichenjc @lingxiankong well, I prefer using github.com :) but lets go with majority agreement . Thanks for digging further .

jichenjc commented 3 years ago

fatal: unable to access 'https://opendev.org/openstack/neutron.git/': server certificate verification failed. CAfile: none CRLfile: none

see this error again in #1664 , not sure what happened, so , I think it's flaky and the faster the better, so I am ok to merge github.com one if it can fix problem fast