oslo-messaging-rpc with rabbitmq is broken with TLS everywhere

Bug #1771744 reported by Juan Antonio Osorio Robles
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Juan Antonio Osorio Robles

Bug Description

Given that the new default for rabbitmq is using the OsloMessagingRpc resource, we now ended up with a broken TLS everywhere setup. This is due to the fact that the metadata info given in those services ir wrong. It points to oslo_messaging_rpc, while we never get a certificate for that principal.

Changed in tripleo:
status: New → Incomplete
status: Incomplete → Triaged
importance: Undecided → High
milestone: none → rocky-2
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.openstack.org/569033

Changed in tripleo:
assignee: nobody → Juan Antonio Osorio Robles (juan-osorio-robles)
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.openstack.org/569033
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=4b39b19d1955c503ee0fdff7d2b519d4ec3be2d1
Submitter: Zuul
Branch: master

commit 4b39b19d1955c503ee0fdff7d2b519d4ec3be2d1
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Thu May 17 09:38:52 2018 +0300

    Use rabbitmq service principal in metadata settings

    We don't request a certificate for oslo_messaging_rpc, so we use
    rabbitmq (the one we used to use) instead.

    Closes-Bug: #1771744
    Change-Id: I05ef290215fa0303b3be6ddb4462e7ca02b2d71b

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 9.0.0.0b3

This issue was fixed in the openstack/tripleo-heat-templates 9.0.0.0b3 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.