Comment 2 for bug 1883842

20201 Wallaby
@>juju run-action --wait glance-simplestreams-sync/2 sync-images
unit-glance-simplestreams-sync-2:
  UnitId: glance-simplestreams-sync/2
  id: "69"
  message: exit status 1
  results:
    ReturnCode: 1
    Stderr: |
      /usr/share/glance-simplestreams-sync/glance_simplestreams_sync.py:109: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.
        confobj = yaml.load(f)
      Traceback (most recent call last):
        File "/usr/lib/python3/dist-packages/urllib3/contrib/pyopenssl.py", line 485, in wrap_socket
          cnx.do_handshake()
        File "/usr/lib/python3/dist-packages/OpenSSL/SSL.py", line 1915, in do_handshake
          self._raise_ssl_error(self._ssl, result)
        File "/usr/lib/python3/dist-packages/OpenSSL/SSL.py", line 1647, in _raise_ssl_error
          _raise_current_error()
        File "/usr/lib/python3/dist-packages/OpenSSL/_util.py", line 54, in exception_from_error_queue
          raise exception_type(errors)
      OpenSSL.SSL.Error: [('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')]

      During handling of the above exception, another exception occurred:

      Traceback (most recent call last):
        File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 665, in urlopen
          httplib_response = self._make_request(
        File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 376, in _make_request
          self._validate_conn(conn)
        File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 996, in _validate_conn
          conn.connect()
        File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 366, in connect
          self.sock = ssl_wrap_socket(
        File "/usr/lib/python3/dist-packages/urllib3/util/ssl_.py", line 383, in ssl_wrap_socket
          return context.wrap_socket(sock)
        File "/usr/lib/python3/dist-packages/urllib3/contrib/pyopenssl.py", line 491, in wrap_socket
          raise ssl.SSLError("bad handshake: %r" % e)
      ssl.SSLError: ("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])",)

      During handling of the above exception, another exception occurred:

      Traceback (most recent call last):
        File "/usr/lib/python3/dist-packages/requests/adapters.py", line 439, in send
          resp = conn.urlopen(
        File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 719, in urlopen
          retries = retries.increment(
        File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 436, in increment
          raise MaxRetryError(_pool, url, error or ResponseError(cause))
      urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='10.0.0.35', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

      During handling of the above exception, another exception occurred:

      Traceback (most recent call last):
        File "/usr/lib/python3/dist-packages/keystoneclient/session.py", line 462, in _send_request
          resp = self.session.request(method, url, **kwargs)
        File "/usr/lib/python3/dist-packages/keystoneclient/httpclient.py", line 96, in request
          return requests.request(*args, **kwargs)
        File "/usr/lib/python3/dist-packages/requests/api.py", line 60, in request
          return session.request(method=method, url=url, **kwargs)
        File "/usr/lib/python3/dist-packages/requests/sessions.py", line 533, in request
          resp = self.send(prep, **send_kwargs)
        File "/usr/lib/python3/dist-packages/requests/sessions.py", line 646, in send
          r = adapter.send(request, **kwargs)
        File "/usr/lib/python3/dist-packages/requests/adapters.py", line 514, in send
          raise SSLError(e, request=request)
      requests.exceptions.SSLError: HTTPSConnectionPool(host='10.0.0.35', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

      During handling of the above exception, another exception occurred:

      Traceback (most recent call last):
        File "/usr/lib/python3/dist-packages/keystoneclient/v3/client.py", line 343, in get_raw_token_from_identity_service
          return plugin.get_auth_ref(self.session)
        File "/usr/lib/python3/dist-packages/keystoneclient/auth/identity/v3/base.py", line 188, in get_auth_ref
          resp = session.post(token_url, json=body, headers=headers,
        File "/usr/lib/python3/dist-packages/keystoneclient/session.py", line 543, in post
          return self.request(url, 'POST', **kwargs)
        File "/usr/lib/python3/dist-packages/keystoneclient/session.py", line 428, in request
          resp = send(**kwargs)
        File "/usr/lib/python3/dist-packages/keystoneclient/session.py", line 466, in _send_request
          raise exceptions.SSLError(msg)
      keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://10.0.0.35:5000/v3/auth/tokens: HTTPSConnectionPool(host='10.0.0.35', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

      During handling of the above exception, another exception occurred:

      Traceback (most recent call last):
        File "/usr/share/glance-simplestreams-sync/glance_simplestreams_sync.py", line 458, in <module>
          main()
        File "/usr/share/glance-simplestreams-sync/glance_simplestreams_sync.py", line 405, in main
          ksc = get_keystone_client(id_conf['api_version'])
        File "/usr/share/glance-simplestreams-sync/glance_simplestreams_sync.py", line 192, in get_keystone_client
          return ksc_class(**ksc_vars)
        File "/usr/lib/python3/dist-packages/keystoneclient/v3/client.py", line 267, in __init__
          self.authenticate()
        File "/usr/lib/python3/dist-packages/keystoneclient/httpclient.py", line 583, in authenticate
          resp = self.get_raw_token_from_identity_service(**kwargs)
        File "/usr/lib/python3/dist-packages/keystoneclient/v3/client.py", line 352, in get_raw_token_from_identity_service
          raise exceptions.AuthorizationFailure(
      keystoneauth1.exceptions.auth.AuthorizationFailure: Authorization failed: SSL exception connecting to https://10.0.0.35:5000/v3/auth/tokens: HTTPSConnectionPool(host='10.0.0.35', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))
  status: failed
  timing:
    completed: 2021-07-23 23:40:06 +0000 UTC
    enqueued: 2021-07-23 23:40:05 +0000 UTC
    started: 2021-07-23 23:40:05 +0000 UTC