Page MenuHomePhabricator

400 or 404 when calling magnum cert functions
Closed, ResolvedPublic

Description

I'm seeing periodic errors when trying to call cert functions for magnum. I'm seeing this in both codfw1dev and eqiad

root@cloudcontrol2001-dev:~# openstack coe cluster config k8s-dev-123 --dir /tmp/k8s-dev-123
Cluster 166f296c-f5db-4a96-8b91-7ad2b45dd04f could not be found (HTTP 404) (Request-ID: req-0fb9be84-9be9-446b-ab93-125b86e12512)
root@cloudcontrol2001-dev:~# openstack coe ca sign k8s-dev-123 client.csr > cert.pem
Cluster 166f296c-f5db-4a96-8b91-7ad2b45dd04f could not be found (HTTP 400) (Request-ID: req-050f29fd-301e-479b-88bb-1b8996a3254e)

The errors come and go, though while they are there they block the creation of certs to access clusters.

Event Timeline

This is an effect of the OS_PROJECT_ID not being set to the project containing the cluster

root@cloudcontrol2001-dev:~# openstack coe cluster config k8s-dev-123 --dir /tmp/k8s-dev-123

This is failing on

GET /v1/certificates/166f296c-f5db-4a96-8b91-7ad2b45dd04f => generated 232 bytes in 600 msecs (HTTP/1.1 404) 7 headers in 322 bytes
root@cloudcontrol2001-dev:~# openstack coe ca sign k8s-dev-123 client.csr > cert.pem

This is failing on

POST /v1/certificates => generated 232 bytes in 456 msecs (HTTP/1.1 400) 7 headers in 324 bytes