<div dir="ltr">I have installed a new pulp instance using pulp.pulp_installer 3.8.1 and the below ansible play, which mostly uses defaults. The containing playbook runs to completion with no errors, but I get the following error trying to access the api status endpoint with httpie:<div><br></div><div><font face="monospace">[tblack-stretch]cmm/ansible/projects/pulp > http <a href="https://pulp.mydomain.com/pulp/api/v3/status" target="_blank">https://pulp.biamp.com/pulp/api/v3/status</a> <br><br>http: error: SSLError: HTTPSConnectionPool(host='<a href="http://pulp.mydomain.com" target="_blank">pulp.biamp.com</a>', port=443): Max retries exceeded with url: /pulp/api/v3/status (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),)) while doing GET request to URL: <a href="https://pulp.mydomain.com/pulp/api/v3/status" target="_blank">https://pulp.biamp.com/pulp/api/v3/status</a></font></div><div><font face="monospace"><br></font></div><div>It says it failed to verify the certificate. I've read <a href="https://docs.pulpproject.org/pulpcore/installation/instructions.html#ssl">the docs about ssl configuration</a>, and I have copied both the pulp-generated self-signed root CA and webserver certs from `/etc/pulp/certs/` to the client (tblack-stretch) I'm running httpie from. There, I imported the certs by placing them in
<font face="monospace">/usr/local/share/ca-certificates/extra</font> and running
<font face="monospace">update-ca-certificates</font>, but still got the same error. </div><div><br></div><div>Here is my play that invokes
pulp.pulp_installer.pulp_all_services. Any help would be appreciated. Thanks.</div><div><br></div><div><font face="monospace">- name: Install Pulp<br> hosts: pulp_cluster<br> vars:<br> # Pulp Installer Variables Documentation: <a href="https://pulp-installer.readthedocs.io/en/3.8.1/#variables" target="_blank">https://pulp-installer.readthedocs.io/en/3.8.1/#variables</a><br> pulp_install_plugins:<br> # IMPORTANT! Compatibility Between Pulpcore and Pulp Plugins Must be Manually Confirmed/Specified!<br> # <a href="https://pulp-installer.readthedocs.io/en/3.8.1/#note-on-plugin-version-compatibility-with-pulpcore" target="_blank">https://pulp-installer.readthedocs.io/en/3.8.1/#note-on-plugin-version-compatibility-with-pulpcore</a><br> # There is a tool that helps you find the compatible plugin versions.<br> # <a href="https://github.com/fao89/pdc" target="_blank">https://github.com/fao89/pdc</a><br> pulp-ansible:<br> version: 0.5.0<br> pulp-container:<br> version: 2.1.0<br> pulp-deb:<br> version: 2.7.0<br> pulp-file:<br> version: 1.3.0<br> pulp-python:<br> version: 3.0.0b11<br> pulp_default_admin_password: "{{ pulp_admin_password }}"<br> pulp_settings:<br> secret_key: "{{ pulp_django_secret_key }}"<br> content_origin: "https://{{ ansible_fqdn }}"<br></font></div><div><font face="monospace"> pre_tasks:<br> # The version string below is the highest of all those in roles' metadata:<br> # "min_ansible_version". It needs to be kept manually up-to-date.<br> - name: Verify Ansible meets min required version<br> assert:<br> that: "ansible_version.full is version_compare('2.8', '>=')"<br> msg: ><br> "You must update Ansible to at least 2.8 to use this version of Pulp 3 Installer."<br> roles:<br> - pulp.pulp_installer.pulp_all_services<br> environment:<br> DJANGO_SETTINGS_MODULE: pulpcore.app.settings<br></font></div><div><br></div></div>