Hawkular Metrics installation fails when OpenShift nodes are configured with FIPS.
Issue
- Unable to install Hawakular metrics on FIPS enabled nodes.
- Installation fails at
TASK [openshift_metrics : generate htpasswd file for hawkular metrics
.
"TASK [openshift_metrics : generate htpasswd file for hawkular metrics] **********************************************************************************************
**********
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_
ex:disabled for fips
fatal: [master.com-> localhost]: FAILED! => {"changed": false, "module_stderr": "Traceback (most recent call last):\n File \"/t
mp/ansible_t3ib7G/ansible_module_htpasswd.py\", line 102, in <module>\n from passlib.apache import HtpasswdFile, htpasswd_context\n File \"/usr/lib/python2.7/sit
e-packages/passlib/apache.py\", line 16, in <module>\n from passlib.hash import htdigest\n File \"/usr/lib/python2.7/site-packages/passlib/registry.py\", line 43
, in __getattr__\n handler = get_crypt_handler(attr, None)\n File \"/usr/lib/python2.7/site-packages/passlib/registry.py\", line 350, in get_crypt_handler\n m
od = __import__(modname, fromlist=[modattr], level=0)\n File \"/usr/lib/python2.7/site-packages/passlib/handlers/digests.py\", line 72, in <module>\n hex_md5
= create_hex_hash(\"md5\")\n File \"/usr/lib/python2.7/site-packages/passlib/handlers/digests.py\", line 55, in create_hex_hash\n info = lookup_hash(digest)\n
File \"/usr/lib/python2.7/site-packages/passlib/crypto/digest.py\", line 298, in lookup_hash\n info = HashInfo(const, name_list)\n File \"/usr/lib/python2.7/site
-packages/passlib/crypto/digest.py\", line 403, in __init__\n hash = const()\nValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for
fips\n", "module_stdout": "", "msg": "MODULE FAILURE", "rc": 1}
Environment
- Openshift Container Platform (OCP)
- v3.11
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.