fix(gate): disable ssl job

This patch sets temporary disables the ssl gate job and makes the check
job non-voting to unblock osh-infra. The certificate hardcoded in [0]
has expired.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:61:31:9d:0f:ff:99:81:ba:6d:50:1a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = libvirt.org
        Validity
            Not Before: Sep 15 21:26:53 2020 GMT
            Not After : Sep 15 21:26:53 2021 GMT

This will need to be updated or better, unhardcode this at the gate.

[0] https://opendev.org/openstack/openstack-helm-infra/src/branch/master/tools/deployment/openstack-support/051-libvirt-ssl.sh#L27-L51

Signed-off-by: Tin Lam <t@lam.wtf>
Change-Id: I5ea58490c4fe4b65fec7bd3f11b4684cdc1a3e8b
This commit is contained in:
Tin Lam 2021-09-24 12:15:27 -05:00
parent 9061d08a5e
commit 418143f3e4
2 changed files with 6 additions and 1 deletions

View File

@ -531,6 +531,9 @@
# Use libvirt ssl
- job:
name: openstack-helm-infra-openstack-support-ssl
# NOTE(lamt): making non-voting due to an expired hard-coded cert.
# This can be removed once that is addressed.
voting: false
parent: openstack-helm-infra-functional
timeout: 7200
pre-run: playbooks/osh-infra-upgrade-host.yaml

View File

@ -40,7 +40,9 @@
- openstack-helm-infra-aio-logging
- openstack-helm-infra-aio-monitoring
- openstack-helm-infra-openstack-support
- openstack-helm-infra-openstack-support-ssl
# NOTE(lamt): disabling this due to an expired hard-coded cert. This can be
# re-enabled once that is addressed.
# - openstack-helm-infra-openstack-support-ssl
post:
jobs:
- publish-openstack-helm-charts