The VIO status is in a DEGRADED state

Products

VMware Integrated OpenStack

Issue/Introduction

The nova-conductor and nova-scheduler pods are in a CrashLoop.
You should see a traceback error similar to the one below: "pods/openstack/controller-#########/nova".

nova-conductor.log

Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova Traceback (most recent call last):
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova   File "/usr/lib/python3.7/site-packages/keystoneauth1/session.py", line 997, in _send_request
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova     resp = self.session.request(method, url, **kwargs)
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova   File "/usr/lib/python3.7/site-packages/requests/sessions.py", line 533, in request
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova     resp = self.send(prep, **send_kwargs)
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova   File "/usr/lib/python3.7/site-packages/requests/sessions.py", line 646, in send
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova     r = adapter.send(request, **kwargs)
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova   File "/usr/lib/python3.7/site-packages/requests/adapters.py", line 514, in send
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova     raise SSLError(e, request=request)
Mar 24 07:33:14 controller-######### nova-conductor[900]: 2025-03-24 07:33:14.252 1 ERROR nova requests.exceptions.SSLError: HTTPSConnectionPool(host='##.#.#.##', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

nova-scheduler.log

Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova Traceback (most recent call last):
Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova   File "/usr/lib/python3.7/site-packages/requests/adapters.py", line 449, in send
Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova     timeout=timeout
Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova   File "/usr/lib/python3.7/site-packages/urllib3/connectionpool.py", line 641, in urlopen
Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova     _stacktrace=sys.exc_info()[2])
Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova   File "/usr/lib/python3.7/site-packages/urllib3/util/retry.py", line 399, in increment
Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova     raise MaxRetryError(_pool, url, error or ResponseError(cause))
Mar 24 08:10:34 controller-######### nova-scheduler[900]: 2025-03-24 08:10:34.484 1 ERROR nova urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='XX.X.X.XX', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

Environment

7.3

Cause

The issue is due to an expired certificate.

Resolution

Instructions for custom certificates:

Update the new certificate to vio.crt.
```
# vi vio.crt
```
Replace the existing content with the new certificate.
Run the following command to import the new certificate.
```
# viocli import certificate -d crt
```

Restart the services.

# viocli stop services

# viocli start services

Additional Information

Note: Ensure you always have a proper backup of your environment and renew the certificates before they expire.