From 5d3235f5606722a217ca200ac0c6ebf503453241 Mon Sep 17 00:00:00 2001 From: Daniel Lawton Date: Mon, 24 Aug 2026 12:37:43 +0100 Subject: [PATCH] shiftstack/liveliness: skip TLS verify for dev-install CA workaround Python 3.14 in shiftstack/tooling:scripts enforces strict CA validation, breaking liveliness on clouds with pre-dev-install#238 simpleca certs. Set verify: false on clouds.yaml in the liveliness step only until certs are regenerated. Signed-off-by: Daniel Lawton --- .../shiftstack/liveliness/shiftstack-liveliness-commands.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ci-operator/step-registry/shiftstack/liveliness/shiftstack-liveliness-commands.sh b/ci-operator/step-registry/shiftstack/liveliness/shiftstack-liveliness-commands.sh index f319a1bfff0af..65f55c70c9e55 100755 --- a/ci-operator/step-registry/shiftstack/liveliness/shiftstack-liveliness-commands.sh +++ b/ci-operator/step-registry/shiftstack/liveliness/shiftstack-liveliness-commands.sh @@ -27,6 +27,9 @@ then source "${SHARED_DIR}/proxy-conf.sh" fi +# TODO: Remove once dev-install clouds have Python 3.13+ compatible CA certs (shiftstack/dev-install#238). +yq --yaml-output --in-place ".clouds[\"${OS_CLOUD}\"].verify = false" "${SHARED_DIR}/clouds.yaml" + set +e echo "DEBUG: Running liveliness check script..." ./server.sh -d -t -l -f ${TESTING_FLAVOR} -i ${TESTING_IMAGE} -e ${OPENSTACK_EXTERNAL_NETWORK} ${AZ_ARG} shiftstack-ci-${CLUSTER_NAME}