kolla-ansible

CloudKitty requests returning incorrect Location header

Bug #1888544 reported by Pierre Riteau on 2020-07-22

This bug affects 1 person

	Status	Importance	Assigned to	Milestone
kolla-ansible	Fix Released	Medium	Pierre Riteau	kolla-ansible 11.0.0 "victoria"
Stein	Fix Released	Medium	Mark Goddard
Train	Fix Released	Medium	Mark Goddard
Ussuri	Fix Released	Medium	Mark Goddard
Victoria	Fix Released	Medium	Pierre Riteau	kolla-ansible 11.0.0 "victoria"

Bug Description

I see this error message when calling `openstack rating module enable hashmap` against a train-centos8 (source) deployment with external TLS, although the change is enacted.

Unable to establish connection to http://<external_api_fqdn>:8889/v1/rating/modules/hashmap: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))

This is because the response from CloudKitty includes a Location header using http instead of https. This can be fixed by setting:

[oslo_middleware]
enable_proxy_headers_parsing = True

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-22: Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/742488

Changed in kolla-ansible:
assignee:	nobody → Pierre Riteau (priteau)
status:	New → In Progress

Mark Goddard (mgoddard) on 2020-07-23

Changed in kolla-ansible:
importance:	Undecided → Medium

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-24: Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/742488
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=cd55c8f4b22947348e6947ff93a6d66f836363a3
Submitter: Zuul
Branch: master

commit cd55c8f4b22947348e6947ff93a6d66f836363a3
Author: Pierre Riteau <email address hidden>
Date: Wed Jul 22 18:59:36 2020 +0200

Fix some CloudKitty API responses when behind SSL

Some CloudKitty API responses include a Location header using http
instead of https. Seen with `openstack rating module enable hashmap`.

Change-Id: I11158bbfd2006e3574e165b6afc9c223b018d4bc
Closes-Bug: #1888544

Changed in kolla-ansible:
status:	In Progress → Fix Released

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-24: Fix proposed to kolla-ansible (stable/ussuri)

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/742899

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-24: Fix proposed to kolla-ansible (stable/train)

Fix proposed to branch: stable/train
Review: https://review.opendev.org/742900

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-24: Fix proposed to kolla-ansible (stable/stein)

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/742901

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-26: Fix merged to kolla-ansible (stable/ussuri)

Reviewed: https://review.opendev.org/742899
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=b973ff7d83430b0d8ab8f7ed9d34a940afc446a0
Submitter: Zuul
Branch: stable/ussuri

commit b973ff7d83430b0d8ab8f7ed9d34a940afc446a0
Author: Pierre Riteau <email address hidden>
Date: Wed Jul 22 18:59:36 2020 +0200

Fix some CloudKitty API responses when behind SSL

Some CloudKitty API responses include a Location header using http
instead of https. Seen with `openstack rating module enable hashmap`.

    Change-Id: I11158bbfd2006e3574e165b6afc9c223b018d4bc
    Closes-Bug: #1888544
    (cherry picked from commit cd55c8f4b22947348e6947ff93a6d66f836363a3)

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-26: Fix merged to kolla-ansible (stable/train)

Reviewed: https://review.opendev.org/742900
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=5433cbd8cebd433551a63e5369a757d23fd1af3f
Submitter: Zuul
Branch: stable/train

commit 5433cbd8cebd433551a63e5369a757d23fd1af3f
Author: Pierre Riteau <email address hidden>
Date: Wed Jul 22 18:59:36 2020 +0200

Fix some CloudKitty API responses when behind SSL

Some CloudKitty API responses include a Location header using http
instead of https. Seen with `openstack rating module enable hashmap`.

    Change-Id: I11158bbfd2006e3574e165b6afc9c223b018d4bc
    Closes-Bug: #1888544
    (cherry picked from commit cd55c8f4b22947348e6947ff93a6d66f836363a3)

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-07-26: Fix merged to kolla-ansible (stable/stein)

Reviewed: https://review.opendev.org/742901
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=07d1a44434f6589c09806ed4ab1066f5a746790c
Submitter: Zuul
Branch: stable/stein

commit 07d1a44434f6589c09806ed4ab1066f5a746790c
Author: Pierre Riteau <email address hidden>
Date: Wed Jul 22 18:59:36 2020 +0200

Fix some CloudKitty API responses when behind SSL

Some CloudKitty API responses include a Location header using http
instead of https. Seen with `openstack rating module enable hashmap`.

    Change-Id: I11158bbfd2006e3574e165b6afc9c223b018d4bc
    Closes-Bug: #1888544
    (cherry picked from commit cd55c8f4b22947348e6947ff93a6d66f836363a3)