[ostf] Ostf tests which use Aodh fail because ostf api proxy does not have access to query aodh endpoint

[Artem Minasyan]

All OSTF tests which have connection to the Aodh API during the testing failed. The general error for these tests is *ConnectionError: HTTPSConnectionPool(host='public.fuel.local', port=8042): Max retries exceeded with url: /v2/alarms (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Proxy Error',)))*

We think it is caused by lack of AODH port on the Allow ports for the apache proxy which is used for the OSTF. This parameters is configured in /etc/apache2/sites-available/25-apache_api_proxy.conf. Also lack of iptables rules for this port on master node could cause an error.

Proposed fix: to add port "8042" (it's an Aodh port) in Allow ports and add rules for 8042 using into iptables on the master node if it is needed.

Traces:
fuel_health.common.test_mixins: INFO: STEP:2, verify action: 'getting list of alarms'
fuel_health.common.test_mixins: DEBUG: Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/fuel_health/common/test_mixins.py", line 177, in verify
    result = func(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/ceilometerclient/v2/alarms.py", line 83, in list
    return self._list(options.build_url(self._path(), q))
  File "/usr/lib/python2.7/site-packages/ceilometerclient/common/base.py", line 63, in _list
    resp = self.api.get(url)
  File "/usr/lib/python2.7/site-packages/ceilometerclient/openstack/common/apiclient/client.py", line 355, in get
    return self.client_request("GET", url, **kwargs)
  File "/usr/lib/python2.7/site-packages/ceilometerclient/openstack/common/apiclient/client.py", line 345, in client_request
    self, method, url, **kwargs)
  File "/usr/lib/python2.7/site-packages/ceilometerclient/openstack/common/apiclient/client.py", line 261, in client_request
    method, self.concat_url(endpoint, url), **kwargs)
  File "/usr/lib/python2.7/site-packages/ceilometerclient/openstack/common/apiclient/client.py", line 189, in request
    resp = self.http.request(method, url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 468, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 597, in send
    history = [resp for resp in gen] if allow_redirects else []
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 195, in resolve_redirects
    **adapter_kwargs
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 423, in send
    raise ConnectionError(e, request=request)
ConnectionError: HTTPSConnectionPool(host='public.fuel.local', port=8042): Max retries exceeded with url: /v2/alarms (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Proxy Error',)))

[Ilya Tyaptin (ityaptin)]

This issue ruined SWARM tests which uses deployed Ceilometer and Aodh.

[Bug Checker Bot (bug-checker)]

(This check performed automatically)
Please, make sure that bug description contains the following sections filled in with the appropriate data related to the bug you are describing:

actual result

version

expected result

steps to reproduce

For more detailed information on the contents of each of the listed sections see https://wiki.openstack.org/wiki/Fuel/How_to_contribute#Here_is_how_you_file_a_bug

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/301769

[Andrey Maximov (maximov)]

Removing fuel-library and adding mos-area since it affects deployment openstack components

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/301769
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=66323c18e6394b0aff330d11e985d6dae24d625f
Submitter: Jenkins
Branch: master

commit 66323c18e6394b0aff330d11e985d6dae24d625f
Author: iberezovskiy <email address hidden>
Date: Tue Apr 5 18:36:31 2016 +0300

    Allow connections to Aodh API

    * Add Aodh API port to list of opened for connections
      from master node.
    * Add ability to override this list from hiera.

    Closes-bug: #1566371

    Change-Id: Ia9c0e141c340e63147f5f3123eaca2a487361cbc

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/302668

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/302668
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=7171603f6bacdd8435c6632865c2daf5d161d96e
Submitter: Jenkins
Branch: stable/mitaka

commit 7171603f6bacdd8435c6632865c2daf5d161d96e
Author: iberezovskiy <email address hidden>
Date: Tue Apr 5 18:36:31 2016 +0300

    Allow connections to Aodh API

    * Add Aodh API port to list of opened for connections
      from master node.
    * Add ability to override this list from hiera.

    Closes-bug: #1566371

    Change-Id: Ia9c0e141c340e63147f5f3123eaca2a487361cbc
    (cherry picked from commit 66323c18e6394b0aff330d11e985d6dae24d625f)

[Volodymyr Shypyguzov (vshypyguzov)]

Reproduced again on iso #188

[Ivan Berezovskiy (iberezovskiy)]

188 ISO doesn't contain this fix

[Artem Minasyan (aminasyan)]

Verified for 9.0 on ISO(193). https://product-ci.infra.mirantis.net/view/9.0_swarm/job/9.0.system_test.ubuntu.services_ha.ceilometer/76/

[Ekaterina Shutova (eshutova)]

Verified on on 10.0 snapshot #1435.
https://product-ci.infra.mirantis.net/view/10.0_swarm/job/10.0.system_test.ubuntu.services_ha.ceilometer/201/
Most OSFTs are passed only 1 OSTF test is failed with another error. So original issue is fixed.