diff --git a/docker_config_scripts/nova_wait_for_placement_service.py b/docker_config_scripts/nova_wait_for_placement_service.py index 37126cc913..522b144ee3 100755 --- a/docker_config_scripts/nova_wait_for_placement_service.py +++ b/docker_config_scripts/nova_wait_for_placement_service.py @@ -55,7 +55,7 @@ if __name__ == '__main__': project_name=config.get('placement', 'project_name'), project_domain_name=config.get('placement', 'user_domain_name'), auth_url=config.get('placement', 'auth_url')+'/v3') - sess = session.Session(auth=auth) + sess = session.Session(auth=auth, verify=False) keystone = client.Client(session=sess) iterations_endpoint = iterations diff --git a/releasenotes/notes/nova_wait_for_placement_service_disable_cert_verify-45f532d7a924df86.yaml b/releasenotes/notes/nova_wait_for_placement_service_disable_cert_verify-45f532d7a924df86.yaml new file mode 100644 index 0000000000..57badbb405 --- /dev/null +++ b/releasenotes/notes/nova_wait_for_placement_service_disable_cert_verify-45f532d7a924df86.yaml @@ -0,0 +1,9 @@ +--- +fixes: + - | + With tls-everywhere enabled connecting to keystone endpoint fails + to retrieve the URL for the placement endpoint as the certificate + can not be verified. While verification is disabled to check the + placement endpoint later, it is not to communicate with keystone. + This disables certificate verification for communication with + keystone.