horizon swift containers is broken with tls and ssl enabled on fuel 11 ocata

[Zoltan Langi]

Description:
If you install fuel 11 Ocata with SSL and TLS enabled, in horizon the containers section is completely broken.
If you open up the: https://yourhostname/horizon/project/containers/
You immediately get: Error: Unable to get the Swift container listing.
If you try to make a new container: Error: Unable to create the container.

If you change your deployment to not to use TLS and HTTPS, it all works fine. You can list and create containers.

To reproduce:
Default install, add the following options:
In storage:
Ceph RBD for volumes (Cinder)
Ceph RBD for images (Glance)
Ceph RBD for ephemeral volumes (Nova)
Ceph RadosGW for objects (Swift API)

In security:
TLS for OpenStack public endpoints
HTTPS for Horizon

Workaround:
Switch off TLS for OpenStack public endpoints and HTTPS for Horizon and the problem disappears, all working fine.

Impact:
Can't manage containers and upload objects into the containers from horizon.

Description of the environment:
Fuel 11 with Ocata and Ubuntu 16.04

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/462833

[Zoltan Langi (zlangi)]

Hello Michael, any update on this bug? Do you know when exactly can I expect a fix for this bug?

Thank you!

[Michael Polenchuk (mpolenchuk)]

Zoltan, please review the patch (https://review.openstack.org/462833).
This patch could be applied on fuel master (needed only manifests from deployment/ dir).

[Zoltan Langi (zlangi)]

Hello Michael,

I've tried your patch and I can confirm it works! Thank you!

[OpenStack Infra (hudson-openstack)]

Change abandoned by Andreas Jaeger (<email address hidden>) on branch: stable/ocata
Review: https://review.opendev.org/462833
Reason: This repo is retired now, no further work will get merged.