From defab6a934da309826a4e0206637a3f3708ace64 Mon Sep 17 00:00:00 2001 From: John Fulton Date: Mon, 31 Aug 2026 17:07:49 -0400 Subject: [PATCH] Fix BGP setup in reproducer deployments The BGP preparation hook delegated libvirt tasks to the literal hypervisor host. Generated reproducer inventories identify that host through controller-0.cifmw_hypervisor_host, typically as hypervisor-1. This caused the hook to fail with: Could not resolve hostname hypervisor Use the inventory's recorded hypervisor name for both delegated tasks. Fabric nodes also tried to download rhos-release before trusting the Red Hat internal CA, causing: CERTIFICATE_VERIFY_FAILED: self-signed certificate in chain Install the internal CA before downloading rhos-release so FRR can be installed on the leaf, spine, and router nodes. Co-authored-by: Codex (GPT-5) Signed-off-by: John Fulton --- playbooks/bgp/prepare-bgp-spines-leaves.yaml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/playbooks/bgp/prepare-bgp-spines-leaves.yaml b/playbooks/bgp/prepare-bgp-spines-leaves.yaml index f75595e92..c14ef9da9 100644 --- a/playbooks/bgp/prepare-bgp-spines-leaves.yaml +++ b/playbooks/bgp/prepare-bgp-spines-leaves.yaml @@ -17,7 +17,7 @@ fabric_list: "{{ leafs_list + spines_list + routers_list }}" tasks: - name: Start spine and leaf VMs - delegate_to: hypervisor + delegate_to: "{{ hostvars['controller-0'].cifmw_hypervisor_host }}" become: true community.libvirt.virt: name: "cifmw-{{ item }}" @@ -46,7 +46,7 @@ loop: "{{ routers_list }}" - name: Check SSH connectivity - delegate_to: hypervisor + delegate_to: "{{ hostvars['controller-0'].cifmw_hypervisor_host }}" ansible.builtin.wait_for: port: 22 host: "{{ item }}.utility" @@ -123,6 +123,12 @@ state: present reload: true + - name: Install internal CA + vars: + cifmw_install_ca_url_validate_certs: false + ansible.builtin.include_role: + name: install_ca + - name: Check installed packages ansible.builtin.package_facts: manager: auto