由于无法获取本地签发者证书,内部 Ansible Services Catalog 无法与 Ansible Automation Controller 同步
Issue
-
当将 Automation Controller 的自签名证书改为由外部CA 签名的证书后,服务目录(Services Catalog)无法与控制器(Controller)同步,在Web UI 中的
Platforms > Automation Controller > Summary > Availability部分包括以下错误信息:Error: HTTPSConnectionPool(host='ansibletower.example.local', port=443): Max retries exceeded with url: /api/v2/ping/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) -
在 Web UI 的
Platforms视图中,Automation Controller 的状态为Unavailable,如下图所示:
Environment
- Red Hat Ansible Automation Platform (AAP)
- 2.1
- 2.2
- Ansible Automation Platform Controller
- 4.2.0
- Ansible Automation Services Catalog
- 4.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
