{"action":"closed","issue":{"url":"https://api.github.com/repos/pivotal-cf/pcf-pipelines/issues/127","repository_url":"https://api.github.com/repos/pivotal-cf/pcf-pipelines","labels_url":"https://api.github.com/repos/pivotal-cf/pcf-pipelines/issues/127/labels{/name}","comments_url":"https://api.github.com/repos/pivotal-cf/pcf-pipelines/issues/127/comments","events_url":"https://api.github.com/repos/pivotal-cf/pcf-pipelines/issues/127/events","html_url":"https://github.com/pivotal-cf/pcf-pipelines/issues/127","id":237355579,"number":127,"title":"vsphere install-pcf got stuck at deploy-ert with cert pem and private key errors","user":{"login":"beibeiyang","id":256903,"avatar_url":"https://avatars2.githubusercontent.com/u/256903?v=3","gravatar_id":"","url":"https://api.github.com/users/beibeiyang","html_url":"https://github.com/beibeiyang","followers_url":"https://api.github.com/users/beibeiyang/followers","following_url":"https://api.github.com/users/beibeiyang/following{/other_user}","gists_url":"https://api.github.com/users/beibeiyang/gists{/gist_id}","starred_url":"https://api.github.com/users/beibeiyang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beibeiyang/subscriptions","organizations_url":"https://api.github.com/users/beibeiyang/orgs","repos_url":"https://api.github.com/users/beibeiyang/repos","events_url":"https://api.github.com/users/beibeiyang/events{/privacy}","received_events_url":"https://api.github.com/users/beibeiyang/received_events","type":"User","site_admin":false},"labels":[{"id":572382795,"url":"https://api.github.com/repos/pivotal-cf/pcf-pipelines/labels/unscheduled","name":"unscheduled","color":"D9D9D9","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-06-20T21:49:26Z","updated_at":"2017-07-10T17:25:26Z","closed_at":"2017-07-10T17:25:26Z","body":"Using latest commit [ea6eda5](https://github.com/pivotal-cf/pcf-pipelines/commit/ea6eda5d40f5b51797608915a0708e4cd063a61d), running install-pcf on vsphere on concourse 3.1.1 was fine until `deploy-ert`, where it throws the following error at the configure step:\r\n\r\n```\r\n>_ configure\r\nStatus: 404 Not Found\r\nConnection: keep-alive\r\nContent-Length: 0\r\nContent-Type: text/html; charset=utf-8\r\nDate: Tue, 20 Jun 2017 20:46:46 GMT\r\nServer: nginx/1.4.6 (Ubuntu)\r\nStrict-Transport-Security: max-age=31536000\r\nX-Request-Id: ed082166-d986-47b9-b3df-3dd3ca760da9\r\nX-Runtime: 0.003033\r\nStatus: 404 Not Found\r\nConnection: keep-alive\r\nContent-Length: 0\r\nContent-Type: text/html; charset=utf-8\r\nDate: Tue, 20 Jun 2017 20:46:46 GMT\r\nServer: nginx/1.4.6 (Ubuntu)\r\nStrict-Transport-Security: max-age=31536000\r\nX-Request-Id: 733319bf-2cf5-47c1-bcb9-e3824f1eb9d4\r\nX-Runtime: 0.001802\r\nconfiguring product...\r\nsetting properties\r\ncould not execute \"configure-product\": failed to configure product: request failed: unexpected response:\r\nHTTP/1.1 422 Unprocessable Entity\r\nTransfer-Encoding: chunked\r\nCache-Control: no-cache\r\nConnection: keep-alive\r\nContent-Type: application/json; charset=utf-8\r\nDate: Tue, 20 Jun 2017 20:46:48 GMT\r\nServer: nginx/1.4.6 (Ubuntu)\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Request-Id: 6cfc962f-4d76-4cdf-9c98-add07adcc533\r\nX-Runtime: 0.494804\r\nX-Xss-Protection: 1; mode=block\r\n\r\n158\r\n{\"errors\":{\".properties.networking_point_of_entry.haproxy.ssl_rsa_certificate\":[\"Cert pem can't be blank\",\"Cert pem is invalid\",\"Private key pem can't be blank\",\"Private key pem is invalid\"],\".uaa.service_provider_key_credentials\":[\"Cert pem can't be blank\",\"Cert pem is invalid\",\"Private key pem can't be blank\",\"Private key pem is invalid\"]}}\r\n0\r\n```\r\nIn my vsphere params.yml, I have:\r\n\r\n```\r\n## Wildcard domain certs go here\r\n# Optional. Will be generated if blank using ssl_termination_point below.\r\nssl_cert:\r\n# Optional. Will be generated if blank using ssl_termination_point below.\r\nssl_private_key:\r\nssl_termination_point: haproxy # (external_ssl|external_non_ssl|haproxy)\r\n\r\ndisable_http_proxy: false\r\nsecurity_acknowledgement: X  # Must be set to 'X'. See explanation here: https://docs.pivotal.io/pivotalcf/latest/customizing/config-er-vmware.html#app-security\r\n\r\n## TCP routing and routing services\r\ntcp_routing: disable                    # Enable/disable TCP routing (enable|disable)\r\ntcp_routing_ports:                   # A comma-separated list of ports and hyphen-separated port ranges, e.g. 52135,34000-35000,23478\r\nroute_services: enable                 # Enable/disable route services (enable|disable)\r\nignore_ssl_cert_verification: true     # Whether to disable SSL cert verification for this environment\r\ngarden_network_pool_cidr: 10.254.0.0/22  # Only change this if you need to avoid address collision with a third-party service on the same subnet.\r\ngarden_network_mtu: 1454                # Applications Network Maximum Transmission Unit bytes\r\n```\r\n\r\nHow come it's not generating the SSL certificate for HAProxy?\r\n\r\nPCF: 1.9"}}
{"actor":{"display_login":"ryanpei"}}