Analytics-api is down if we enabled SSL for keystone and API

Bug #1644508 reported by musharani
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R3.2
Fix Committed
Critical
Ignatious Johnson Christopher
Trunk
Fix Committed
High
Ignatious Johnson Christopher

Bug Description

After fresh installation of R3.2-build 5 ubuntu kilo, analytics api server is showing down if we enabled ssl for keystone and api in testbed.py

Due to this issue UI page is getting logged out immediately after login.

setup details:
SingleNode/nodel10 - root/c0ntrail123. Setup in the same state.

testbed.py:
env.hostnames = {
    'all': ['nodel10']
}
env.ostypes = {
     host1: 'ubuntu'
}
env.keystone = {
    'auth_protocol' : 'https'
}
env.cfgm = {
    'auth_protocol' : 'https'
}

== Contrail Analytics ==
supervisor-analytics: active
contrail-alarm-gen:0 active
contrail-analytics-api initializing (ApiServer connection down)
contrail-analytics-nodemgr active
contrail-collector active
contrail-query-engine active
contrail-snmp-collector active
contrail-topology active

Logs from contrail-analytics-api.log
11/24/2016 01:13:49 PM [contrail-analytics-api]: SANDESH: [DROP: NoSession] __default__ [SYS_INFO]: discClientLog: query resp => {"Collector": [{"partcount": "{ \"1\":[0,1], \"2\":[1,3], \"3\":[4,8], \"4\":[12,8], \"5\":[20,10]}", "@publisher-id": "nodel10", "pid": "3529", "ip-address": "10.204.217.247", "redis-gen": "1", "port": "8086"}], "ttl": 9}
11/24/2016 01:13:49 PM [contrail-analytics-api]: SANDESH: [DROP: WrongClientSMState] NodeStatusUVE: data = << name = nodel10 process_status = [ << module_id = contrail-analytics-api instance_id = 0 state = Non-Functional connection_infos = [ << type = Collector name = server_addrs = [ 10.204.217.247:8086, ] status = Initializing description = Disconnect to Connect on EvCollectorChange >>, << type = ApiServer name = server_addrs = [ 10.204.217.247:8082, ] status = Down description = >>, << type = UvePartitions name = UVE-Aggregation server_addrs = [ ] status = Up description = Partitions:30 >>, << type = Discovery name = AlarmGenerator server_addrs = [ 10.204.217.247:5998, ] status = Up description = Subscribe Response >>, << type = Redis-UVE name = 10.204.217.247:6379 server_addrs = [ ] status = Up >>, << type = Discovery name = Collector server_addrs = [ 10.204.217.247:5998, ] status = Up description = Subscribe Response >>, << type = Redis-UVE name = LOCAL server_addrs = [ ] status = Up >>, << type = Discovery name = OpServer server_addrs = [ 10.204.217.247:5998, ] status = Up description = Publish Success >>, ] description = Collector, ApiServer connection down >>, ] >>
11/24/2016 01:14:07 PM [contrail-analytics-api]: VNC Config API Client NOT FOUND
11/24/2016 01:14:07 PM [contrail-analytics-api]: Token info for 6659fb6e8bfc42e88ea4590bf391752e NOT FOUND
11/24/2016 01:14:07 PM [contrail-analytics-api]: VNC Config API Client NOT FOUND
11/24/2016 01:14:07 PM [contrail-analytics-api]: Token info for 66ad5da1b2a142dfa229f0c5bf36064a NOT FOUND
11/24/2016 01:15:07 PM [contrail-analytics-api]: VNC Config API Client NOT FOUND
11/24/2016 01:15:07 PM [contrail-analytics-api]: Token info for a543d2e191424d8d97b20ebb57016674 NOT FOUND

Tags: provisioning
Revision history for this message
Ignatious Johnson Christopher (ijohnson-x) wrote :

Following commit is not present in R3.2/mainline,

https://github.com/Juniper/contrail-controller/commit/cbcb83c4e9c68d60abbc091fb11591533afff01f

Need to port it.

Jeba Paulaiyan (jebap)
tags: added: provisioning
Revision history for this message
Sachin Bansal (sbansal) wrote :
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/26469
Committed: http://github.org/Juniper/contrail-controller/commit/f409b43664f7643485b2fe5f29219035452cceee
Submitter: Zuul (<email address hidden>)
Branch: R3.2

commit f409b43664f7643485b2fe5f29219035452cceee
Author: Megh Bhatt <email address hidden>
Date: Mon Aug 8 10:48:28 2016 -0700

Add api_server_use_ssl option to contrail-analytics-api

Change-Id: Id0d782286aaa5a4bf9b2c3db82790d86a2eee117
Partial-Bug: #1547965
Closes-Bug: 1644508
(cherry picked from commit cbcb83c4e9c68d60abbc091fb11591533afff01f)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/26467
Committed: http://github.org/Juniper/contrail-controller/commit/3093e3ec413994e5f8e35e44ebe9717e413846c6
Submitter: Zuul (<email address hidden>)
Branch: master

commit 3093e3ec413994e5f8e35e44ebe9717e413846c6
Author: Megh Bhatt <email address hidden>
Date: Mon Aug 8 10:48:28 2016 -0700

Add api_server_use_ssl option to contrail-analytics-api

Change-Id: Id0d782286aaa5a4bf9b2c3db82790d86a2eee117
Partial-Bug: #1547965
Closes-Bug: 1644508
(cherry picked from commit cbcb83c4e9c68d60abbc091fb11591533afff01f)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.