Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-26321

Red Hat Satellite 6.16 on RHEL-9.4 (Plow) fails with the Puppet/Candlepin Certificate errors during the configuration stage.

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • 0
    • Important
    • None

      Description of problem:
      --------------------------------

      When the "satellite-installer" command is executed to configure Red Hat Satellite 6.16, it fails with the following Puppet/Candlepin Certificate errors -

      [root@sat616testrhel9 ~]# satellite-installer --scenario satellite
      2024-07-09 21:31:02 [NOTICE] [root] Loading installer configuration. This will take some time.
      2024-07-09 21:31:10 [NOTICE] [root] Running installer with log based terminal output at level NOTICE.
      2024-07-09 21:31:10 [NOTICE] [root] Use -l to set the terminal output log level to ERROR, WARN, NOTICE, INFO, or DEBUG. See --full-help for definitions.
      2024-07-09 21:32:51 [NOTICE] [configure] Starting system configuration.
      2024-07-09 21:33:40 [NOTICE] [configure] 250 configuration steps out of 1532 steps complete.
      2024-07-09 21:34:23 [NOTICE] [configure] 500 configuration steps out of 1534 steps complete.
      2024-07-09 21:35:11 [NOTICE] [configure] 750 configuration steps out of 1536 steps complete.
      2024-07-09 21:35:55 [NOTICE] [configure] 1000 configuration steps out of 1562 steps complete.
      2024-07-09 21:36:28 [NOTICE] [configure] 1250 configuration steps out of 1562 steps complete.
      2024-07-09 21:38:36 [NOTICE] [configure] 1500 configuration steps out of 1562 steps complete.
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for keystore
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for truststore
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for truststore_certificate
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for keystore_certificate
      2024-07-09 21:39:26 [NOTICE] [configure] System configuration has finished.

      Error 1: Puppet Keystore resource '/etc/candlepin/certs/keystore' failed. Logs:
        /Stage[main]/Certs::Candlepin/Keystore[/etc/candlepin/certs/keystore]/before
          before to File[/etc/candlepin/certs/keystore]
        /Stage[main]/Certs::Candlepin/Keystore[/etc/candlepin/certs/keystore]
          Adding autorequire relationship with File[/etc/pki/katello/keystore_password-file]
      Error 2: Puppet Truststore resource '/etc/candlepin/certs/truststore' failed. Logs:
        /Stage[main]/Certs::Candlepin/Truststore[/etc/candlepin/certs/truststore]/before
          before to File[/etc/candlepin/certs/truststore]
        /Stage[main]/Certs::Candlepin/Truststore[/etc/candlepin/certs/truststore]
          Adding autorequire relationship with File[/etc/pki/katello/truststore_password-file]
      Error 3: Puppet Truststore_certificate resource '/etc/candlepin/certs/truststore:candlepin-ca' failed. Logs:
        /Stage[main]/Certs::Candlepin/Truststore_certificate[/etc/candlepin/certs/truststore:candlepin-ca]
          Adding autorequire relationship with File[/etc/pki/katello/truststore_password-file]
          Adding autorequire relationship with File[/etc/candlepin/certs/candlepin-ca.crt]
          Adding autonotify relationship with File[/etc/candlepin/certs/truststore]
      Error 4: Puppet Truststore_certificate resource '/etc/candlepin/certs/truststore:artemis-client' failed. Logs:
        /Stage[main]/Certs::Candlepin/Truststore_certificate[/etc/candlepin/certs/truststore:artemis-client]
          Adding autorequire relationship with File[/etc/pki/katello/truststore_password-file]
          Adding autorequire relationship with File[/etc/foreman/client_cert.pem]
          Adding autonotify relationship with File[/etc/candlepin/certs/truststore]
      Error 5: Puppet Keystore_certificate resource '/etc/candlepin/certs/keystore:tomcat' failed. Logs:
        /Stage[main]/Certs::Candlepin/Keystore_certificate[/etc/candlepin/certs/keystore:tomcat]
          Adding autorequire relationship with File[/etc/pki/katello/keystore_password-file]
          Adding autorequire relationship with File[/etc/candlepin/certs/candlepin-ca.crt]
          Adding autorequire relationship with File[/etc/candlepin/certs/keystore]

      5 errors were detected.
      Please address the errors and re-run the installer to ensure the system is properly configured.
      Failing to do so is likely to result in broken functionality.

      The full log is at /var/log/foreman-installer/satellite.log
      Package versions are being locked.
      [root@sat616testrhel9 ~]

       

      Version-Release number of selected component (if applicable):
      --------------------------------------------------------------------------------------

      [root@sat616testrhel9 ~]# cat /etc/redhat-release 
      Red Hat Enterprise Linux release 9.4 (Plow)

       

      [root@sat616testrhel9 ~]# rpm -qa satellite
      satellite-6.16.0-0.5.stream.el9sat.noarch

       

      [root@sat616testrhel9 ~]# dnf repolist
      Updating Subscription Management repositories.

      This system is registered with an entitlement server, but is not receiving updates. You can use subscription-manager to assign subscriptions.

      repo id                                                                                             repo name
      Satellite_Engineering_Satellite_stream_Composes_Satellite_Maintenance_stream_RHEL9                  Satellite Maintenance Stream RHEL9
      Satellite_Engineering_Satellite_stream_Composes_Satellite_stream_RHEL9                              Satellite Stream RHEL9
      rhel-9-for-x86_64-appstream-rpms                                                                    Red Hat Enterprise Linux 9 for x86_64 - AppStream (RPMs)
      rhel-9-for-x86_64-baseos-rpms                                                                       Red Hat Enterprise Linux 9 for x86_64 - BaseOS (RPMs)

       

      Actual results:
      -------------------

      [root@sat616testrhel9 ~]# satellite-installer --scenario satellite
      2024-07-09 21:31:02 [NOTICE] [root] Loading installer configuration. This will take some time.
      2024-07-09 21:31:10 [NOTICE] [root] Running installer with log based terminal output at level NOTICE.
      2024-07-09 21:31:10 [NOTICE] [root] Use -l to set the terminal output log level to ERROR, WARN, NOTICE, INFO, or DEBUG. See --full-help for definitions.
      2024-07-09 21:32:51 [NOTICE] [configure] Starting system configuration.
      2024-07-09 21:33:40 [NOTICE] [configure] 250 configuration steps out of 1532 steps complete.
      2024-07-09 21:34:23 [NOTICE] [configure] 500 configuration steps out of 1534 steps complete.
      2024-07-09 21:35:11 [NOTICE] [configure] 750 configuration steps out of 1536 steps complete.
      2024-07-09 21:35:55 [NOTICE] [configure] 1000 configuration steps out of 1562 steps complete.
      2024-07-09 21:36:28 [NOTICE] [configure] 1250 configuration steps out of 1562 steps complete.
      2024-07-09 21:38:36 [NOTICE] [configure] 1500 configuration steps out of 1562 steps complete.
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for keystore
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for truststore
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for truststore_certificate
      2024-07-09 21:39:18 [ERROR ] [configure] Could not find a suitable provider for keystore_certificate
      2024-07-09 21:39:26 [NOTICE] [configure] System configuration has finished.

      Error 1: Puppet Keystore resource '/etc/candlepin/certs/keystore' failed. Logs:
        /Stage[main]/Certs::Candlepin/Keystore[/etc/candlepin/certs/keystore]/before
          before to File[/etc/candlepin/certs/keystore]
        /Stage[main]/Certs::Candlepin/Keystore[/etc/candlepin/certs/keystore]
          Adding autorequire relationship with File[/etc/pki/katello/keystore_password-file]
      Error 2: Puppet Truststore resource '/etc/candlepin/certs/truststore' failed. Logs:
        /Stage[main]/Certs::Candlepin/Truststore[/etc/candlepin/certs/truststore]/before
          before to File[/etc/candlepin/certs/truststore]
        /Stage[main]/Certs::Candlepin/Truststore[/etc/candlepin/certs/truststore]
          Adding autorequire relationship with File[/etc/pki/katello/truststore_password-file]
      Error 3: Puppet Truststore_certificate resource '/etc/candlepin/certs/truststore:candlepin-ca' failed. Logs:
        /Stage[main]/Certs::Candlepin/Truststore_certificate[/etc/candlepin/certs/truststore:candlepin-ca]
          Adding autorequire relationship with File[/etc/pki/katello/truststore_password-file]
          Adding autorequire relationship with File[/etc/candlepin/certs/candlepin-ca.crt]
          Adding autonotify relationship with File[/etc/candlepin/certs/truststore]
      Error 4: Puppet Truststore_certificate resource '/etc/candlepin/certs/truststore:artemis-client' failed. Logs:
        /Stage[main]/Certs::Candlepin/Truststore_certificate[/etc/candlepin/certs/truststore:artemis-client]
          Adding autorequire relationship with File[/etc/pki/katello/truststore_password-file]
          Adding autorequire relationship with File[/etc/foreman/client_cert.pem]
          Adding autonotify relationship with File[/etc/candlepin/certs/truststore]
      Error 5: Puppet Keystore_certificate resource '/etc/candlepin/certs/keystore:tomcat' failed. Logs:
        /Stage[main]/Certs::Candlepin/Keystore_certificate[/etc/candlepin/certs/keystore:tomcat]
          Adding autorequire relationship with File[/etc/pki/katello/keystore_password-file]
          Adding autorequire relationship with File[/etc/candlepin/certs/candlepin-ca.crt]
          Adding autorequire relationship with File[/etc/candlepin/certs/keystore]

      5 errors were detected.
      Please address the errors and re-run the installer to ensure the system is properly configured.
      Failing to do so is likely to result in broken functionality.

      The full log is at /var/log/foreman-installer/satellite.log
      Package versions are being locked.
      [root@sat616testrhel9 ~]

       

      Expected results:
      -----------------------

      Configuration to complete successfully and to provide the Satellite Server URL with credentials to access it.

       

      Additional Info:
      -----------------------

      • Attached the satellite.log file for further review.
      • Attached the screenshot of the error message.

              Unassigned Unassigned
              rhn-support-ajambhul Anand Jambhulkar
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: