#8454 [tracker] Nightly test failure in test_ipahealthcheck.py::TestIpaHealthCheck::test_ipa_healthcheck_no_errors
Closed: fixed 20 days ago by frenaud. Opened 3 months ago by frenaud.

The nightly test test_ipahealthcheck.py::TestIpaHealthCheck::test_ipa_healthcheck_no_errors is failing in [testing_master_pki] (= fedora 32 + nightly copr for pki).

See the report:

self = <ipatests.test_integration.test_ipahealthcheck.TestIpaHealthCheck object at 0x7f9a63208d30>

    def test_ipa_healthcheck_no_errors(self):
        """
        Ensure that on a default installation with KRA and DNS
        installed ipa-healthcheck runs with no errors.
        """
        cmd = tasks.install_kra(self.master)
        assert cmd.returncode == 0
        returncode, _unused = run_healthcheck(
            self.master,
            failures_only=True
        )
>       assert returncode == 0
E       assert 1 == 0
E         +1
E         -0

The issue happens because pki.server.healthcheck returns errors on a clean KRA install:

RUN ['ipa-healthcheck', '--output-type', 'json', '--failures-only']
[
  {
    "source": "pki.server.healthcheck.meta.csconfig",
    "check": "KRADogtagCertsConfigCheck",
    "result": "ERROR",
    "uuid": "6c6bc8f1-889f-420e-a61c-09a52dca5962",
    "when": "20200810015730Z",
    "duration": "0.052823",
    "kw": {
      "key": "kra_sslserver",
      "nickname": "Server-Cert cert-pki-ca",
      "directive": "kra.sslserver.cert",
      "configfile": "/var/lib/pki/pki-tomcat/kra/conf/CS.cfg",
      "msg": "Certificate 'Server-Cert cert-pki-ca' does not match the value of kra.sslserver.cert in /var/lib/pki/pki-tomcat/kra/conf/CS.cfg"
    }
  },
  {
    "source": "pki.server.healthcheck.meta.csconfig",
    "check": "KRADogtagCertsConfigCheck",
    "result": "ERROR",
    "uuid": "be72cfed-e710-4457-ad1f-3d84497d9a13",
    "when": "20200810015730Z",
    "duration": "0.101471",
    "kw": {
      "key": "kra_subsystem",
      "nickname": "subsystemCert cert-pki-ca",
      "directive": "kra.subsystem.cert",
      "configfile": "/var/lib/pki/pki-tomcat/kra/conf/CS.cfg",
      "msg": "Certificate 'subsystemCert cert-pki-ca' does not match the value of kra.subsystem.cert in /var/lib/pki/pki-tomcat/kra/conf/CS.cfg"
    }
  }
]
Exit code: 1

Corrsponding dogtagpki issue #3202


Metadata Update from @frenaud:
- Issue tagged with: test-failure, tests, tracker

3 months ago

dogtagpki issue has been moved from pagure to github: https://github.com/dogtagpki/pki/issues/3319 and was fixed.

Checked in PR #511, with the following report.

Closing as fixed.

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

20 days ago

Login to comment on this ticket.

Metadata