openstack_https_frontend.conf was created, but a2ensite and a2enmod ssl,proxy were not executed

[Nobuto Murata]

After passing ssl_cert,key and ssl_ca(bug 1713922) and setting os-*-network option (bug 1711422), expected /etc/apache2/sites-available/openstack_https_frontend.conf was created. However, the openstack_https_frontend was not enabled.

I had to run the commands manually:

a2ensite openstack_https_frontend
a2enmod ssl
a2enmod proxy
service apache2 restart

[Nobuto Murata (nobuto)]

Even after commands below, I still get Proxy error from Apache2. So needs to look into more when I have some time.

a2ensite openstack_https_frontend
a2enmod ssl
a2enmod proxy
service apache2 restart

[Ryan Beisner (1chb1n)]

Please provide the charm revision information, juju status, and the charm config from the bundle.

Was this the stable/17.02 stable AODH charm? Or was it some other newer or older revision?

[Ryan Beisner (1chb1n)]

We will need to repro with current charms and target for next release, possibly a stable backport/update if it meets those requirements. Thank you.

[Jason Hobbs (jason-hobbs)]

I was able to reproduce this using the current -next version of the aodh charm - 9d7aa38.

Here is my aodh config, using self signed cert:
http://paste.ubuntu.com/25481013/

juju status:
http://paste.ubuntu.com/25481026/

[Jason Hobbs (jason-hobbs)]

I was able to get things working by using Nobuto's workaround with the addition of this command:

a2enmod proxy_http

[Ryan Beisner (1chb1n)]

Thanks for the repro.

This appears to be a bug which existed in 16.10 and 17.02 (hence not a new bug). It may similarly impact other reactive charms (which are only the newer greenfield charms).

The bulk of the OpenStack charms are classic (not reactive), and as such there is no new risk over stable/17.02. Based on that, and this not being a regression, I don't see this alone as a blocker to a release which does resolve other issues.

I would like for us to address this and backport the fix ASAP, however.

[Jason Hobbs (jason-hobbs)]

I'd like to add that I had to work around bug 1709475 to reproduce that; perhaps it could be fixed and back ported at the same time, along with the bugs Nobuto mentioned in the description.

[Ryan Beisner (1chb1n)]

This fix should be batched with fixes for bug 1709475, bug 1713922 and bug 1711422, based on input from the engineers who reproduced.

[Liam Young (gnuoy)]

Marking as duplicate of 1719331