self = <ipatests.test_integration.test_ipahealthcheck.TestIpaHealthCheck object at 0x7f9a63208d30>

    def test_ipa_healthcheck_no_errors(self):
        """
        Ensure that on a default installation with KRA and DNS
        installed ipa-healthcheck runs with no errors.
        """
        cmd = tasks.install_kra(self.master)
        assert cmd.returncode == 0
        returncode, _unused = run_healthcheck(
            self.master,
            failures_only=True
        )
>       assert returncode == 0
E       assert 1 == 0
E         +1
E         -0

RUN ['ipa-healthcheck', '--output-type', 'json', '--failures-only']
[
  {
    "source": "pki.server.healthcheck.meta.csconfig",
    "check": "KRADogtagCertsConfigCheck",
    "result": "ERROR",
    "uuid": "6c6bc8f1-889f-420e-a61c-09a52dca5962",
    "when": "20200810015730Z",
    "duration": "0.052823",
    "kw": {
      "key": "kra_sslserver",
      "nickname": "Server-Cert cert-pki-ca",
      "directive": "kra.sslserver.cert",
      "configfile": "/var/lib/pki/pki-tomcat/kra/conf/CS.cfg",
      "msg": "Certificate 'Server-Cert cert-pki-ca' does not match the value of kra.sslserver.cert in /var/lib/pki/pki-tomcat/kra/conf/CS.cfg"
    }
  },
  {
    "source": "pki.server.healthcheck.meta.csconfig",
    "check": "KRADogtagCertsConfigCheck",
    "result": "ERROR",
    "uuid": "be72cfed-e710-4457-ad1f-3d84497d9a13",
    "when": "20200810015730Z",
    "duration": "0.101471",
    "kw": {
      "key": "kra_subsystem",
      "nickname": "subsystemCert cert-pki-ca",
      "directive": "kra.subsystem.cert",
      "configfile": "/var/lib/pki/pki-tomcat/kra/conf/CS.cfg",
      "msg": "Certificate 'subsystemCert cert-pki-ca' does not match the value of kra.subsystem.cert in /var/lib/pki/pki-tomcat/kra/conf/CS.cfg"
    }
  }
]
Exit code: 1