From 418143f3e487269e917f9709e8f5701180e5e5a6 Mon Sep 17 00:00:00 2001 From: Tin Lam Date: Fri, 24 Sep 2021 12:15:27 -0500 Subject: [PATCH] fix(gate): disable ssl job This patch sets temporary disables the ssl gate job and makes the check job non-voting to unblock osh-infra. The certificate hardcoded in [0] has expired. Certificate: Data: Version: 3 (0x2) Serial Number: 5f:61:31:9d:0f:ff:99:81:ba:6d:50:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN = libvirt.org Validity Not Before: Sep 15 21:26:53 2020 GMT Not After : Sep 15 21:26:53 2021 GMT This will need to be updated or better, unhardcode this at the gate. [0] https://opendev.org/openstack/openstack-helm-infra/src/branch/master/tools/deployment/openstack-support/051-libvirt-ssl.sh#L27-L51 Signed-off-by: Tin Lam Change-Id: I5ea58490c4fe4b65fec7bd3f11b4684cdc1a3e8b --- zuul.d/jobs.yaml | 3 +++ zuul.d/project.yaml | 4 +++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml index accc487b7..404485e84 100644 --- a/zuul.d/jobs.yaml +++ b/zuul.d/jobs.yaml @@ -531,6 +531,9 @@ # Use libvirt ssl - job: name: openstack-helm-infra-openstack-support-ssl + # NOTE(lamt): making non-voting due to an expired hard-coded cert. + # This can be removed once that is addressed. + voting: false parent: openstack-helm-infra-functional timeout: 7200 pre-run: playbooks/osh-infra-upgrade-host.yaml diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml index a50863a92..408436df8 100644 --- a/zuul.d/project.yaml +++ b/zuul.d/project.yaml @@ -40,7 +40,9 @@ - openstack-helm-infra-aio-logging - openstack-helm-infra-aio-monitoring - openstack-helm-infra-openstack-support - - openstack-helm-infra-openstack-support-ssl + # NOTE(lamt): disabling this due to an expired hard-coded cert. This can be + # re-enabled once that is addressed. + # - openstack-helm-infra-openstack-support-ssl post: jobs: - publish-openstack-helm-charts