undercloud: autogenerated certificate takes precedence over user-provided one

Bug #1755497 reported by Juan Antonio Osorio Robles
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Medium
Juan Antonio Osorio Robles

Bug Description

If we set both generate_service_certificate and the undercloud_service_certificate options, one would usually expect that the user-provided certificate takes precedence, however, this is not the case.

Changed in tripleo:
assignee: nobody → Juan Antonio Osorio Robles (juan-osorio-robles)
status: New → In Progress
Changed in tripleo:
importance: Undecided → Medium
milestone: none → rocky-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to instack-undercloud (master)

Reviewed: https://review.openstack.org/552381
Committed: https://git.openstack.org/cgit/openstack/instack-undercloud/commit/?id=9fc6b985902561a33370fd3e4f53081491ccf0ae
Submitter: Zuul
Branch: master

commit 9fc6b985902561a33370fd3e4f53081491ccf0ae
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Tue Mar 13 09:17:22 2018 +0200

    Make user-provided cert take priority over autogenerated one

    It used to be the case that if you give both a user-provided
    certificate, and set the flag for instack to autogenerate the
    certificate, the autogenerated one took precedence. This is not ideal
    since it might not be what the user expects (especially if we switch to
    using TLS by default).

    Closes-Bug: #1755497
    Change-Id: Ia8aa52d80999ad278501ca8ecf0638ef8de6ca19

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/instack-undercloud 9.0.0

This issue was fixed in the openstack/instack-undercloud 9.0.0 release.

Revision history for this message
Juan Antonio Osorio Robles (juan-osorio-robles) wrote :

This issue is now present in the containerized undercloud: https://bugzilla.redhat.com/show_bug.cgi?id=1610246

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (master)

Fix proposed to branch: master
Review: https://review.openstack.org/587370

Changed in tripleo:
status: Fix Released → Triaged
milestone: rocky-1 → rocky-rc1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-tripleoclient (master)

Reviewed: https://review.openstack.org/587370
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=ff7200630dbe05b0f6b2cd3dfc1f1cabfd26e383
Submitter: Zuul
Branch: master

commit ff7200630dbe05b0f6b2cd3dfc1f1cabfd26e383
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Tue Jul 31 13:01:14 2018 +0300

    Make undercloud user-provided cert take precedence

    The user-provided cert should take precedence over the user-provided
    certificate.

    Closes-Bug: #1755497
    Change-Id: I336fa7df39f6f20f50879a42e08e018249323829

Changed in tripleo:
status: Triaged → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-tripleoclient 10.5.0

This issue was fixed in the openstack/python-tripleoclient 10.5.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.