#10640 cross-ticket : unable to request TLS cert on fasjson.fedoraproject.org
Closed: Fixed 2 years ago by pingou. Opened 2 years ago by arrfab.

Requester created ticket on centos-infra tracker but component is on fedora-infra.
Details : https://pagure.io/centos-infra/issue/750


forgot to mention that requester is @pingou

Metadata Update from @kevin:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: medium-gain, medium-trouble, ops

2 years ago

ok, in cca5130e024022d0c28f9e4764f9c2f51018a0a0 @abompard switched fasjson to use poetry to install...

however, somehow, it's not getting requests-gssapi:

[Mon Apr 18 15:31:01.621639 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948] [2022-04-18 15:31:01,619] ERROR in app: Exception on /v1/certs/ [POST]                                     
[Mon Apr 18 15:31:01.621672 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948] Traceback (most recent call last):                                                                         
[Mon Apr 18 15:31:01.621675 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   File "/opt/venv/lib64/python3.9/site-packages/flask/app.py", line 1516, in full_dispatch_request         
[Mon Apr 18 15:31:01.621679 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     rv = self.dispatch_request()                                                                           
[Mon Apr 18 15:31:01.621681 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   File "/opt/venv/lib64/python3.9/site-packages/flask/app.py", line 1502, in dispatch_request              
[Mon Apr 18 15:31:01.621684 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     return self.ensure_sync(self.view_functions[rule.endpoint])(**req.view_args)                           
[Mon Apr 18 15:31:01.621687 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   File "/opt/venv/lib64/python3.9/site-packages/flask_restx/api.py", line 403, in wrapper                  
[Mon Apr 18 15:31:01.621689 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     resp = resource(*args, **kwargs)                                                                       
[Mon Apr 18 15:31:01.621692 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   File  "/opt/venv/lib64/python3.9/site-packages/flask/views.py", line 84, in view                          
[Mon Apr 18 15:31:01.621694 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     return current_app.ensure_sync(self.dispatch_request)(*args, **kwargs)                                 
[Mon Apr 18 15:31:01.621697 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   File "/opt/venv/lib64/python3.9/site-packages/flask_restx/resource.py", line 49, in dispatch_request     
[Mon Apr 18 15:31:01.621711 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     resp = meth(*args, **kwargs)                                                                           
[Mon Apr 18 15:31:01.621735 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   File "/opt/venv/lib64/python3.9/site-packages/flask_restx/marshalling.py", line 248, in wrapper         
[Mon Apr 18 15:31:01.621746 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     r$sp = f(*args, **kwargs)                                                                             
[Mon Apr 18 15:31:01.621757 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   Fil$ "/fasjson/fasjson/web/resources/certs.py", line 62, in post                                        
[Mon Apr 18 15:31:01.621767 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     c$ient = rpc_client()                                                                                 
[Mon Apr 18 15:31:01.621778 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   Fil$ "/fasjson/fasjson/web/utils/ipa.py", line 26, in rpc_client                                        
[Mon Apr 18 15:31:01.621788 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     c$ient.login_kerberos()
[Mon Apr 18 15:31:01.621798 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   Fil$ "/opt/venv/lib64/python3.9/site-packages/python_freeipa/client.py", line 247, in login_kerberos    
[Mon Apr 18 15:31:01.621807 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     r$turn self._wrap_in_dns_discovery(self._login_kerberos)                                              
[Mon Apr 18 15:31:01.621809 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   Fil$ "/opt/venv/lib64/python3.9/site-packages/python_freeipa/client.py", line 176, in _wrap_in_dns_disco$ery                                                                                                 
[Mon Apr 18 15:31:01.621812 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     r$turn function(*args, **kwargs)
[Mon Apr 18 15:31:01.621814 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   Fil$ "/opt/venv/lib64/python3.9/site-packages/python_freeipa/client.py", line 254, in _login_kerberos   
[Mon Apr 18 15:31:01.621817 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     r$ise requests_gssapi                                                                                 
[Mon Apr 18 15:31:01.621826 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]   Fil$ "/opt/venv/lib64/python3.9/site-packages/python_freeipa/client.py", line 23, in <module>           
[Mon Apr 18 15:31:01.621836 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948]     i$port requests_gssapi                                                                                
[Mon Apr 18 15:31:01.621846 2022] [wsgi:error] [pid 12044:tid 12047] [remote 10.131.0.1:35948] Modul$
NotFoundError: No module named 'requests_gssapi' 

I have no idea how poetry works, but it seems to not be importing requests_gssapi which is needed for certs. ;(

OK, I fixed it and FASJSON seems to be reasonably working in staging. Can I just update prod or do I need a FBR?

I'd say just update it. It's causing an outage and we never really decided if fasjson was frozen. ;)

OK, will do right now. It's the only change so it should not break anything (famous last words).

The new version is up, could you test @arrfab & @pingou please?

I can confirm this works now, thanks!

Metadata Update from @pingou:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog