ceph ssl radosgw port is closed for tempest

[Giulio Fidente]

When ssl setup is requested with ceph object storage the firewall on the controller node does not opens the public ssl port

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/806727

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/806733

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/806727
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/c69733bb652fa4bb546cd1dbf4cd40a4f157467d
Submitter: "Zuul (22348)"
Branch: master

commit c69733bb652fa4bb546cd1dbf4cd40a4f157467d
Author: Giulio Fidente <email address hidden>
Date: Tue Aug 31 13:24:11 2021 +0200

    Enable Ceph RGW public port into firewall when using SSL

    Adds CephRgwPublic endpoint port to firewall rule because it does
    not match the CephRgwInternal endpoint port when using SSL

    Change-Id: Ia08b3d9b0fc96511e5a9202fa5e5a09487263e5b
    Closes-Bug: 1942198

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/806733
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/e3073243bd6c6bc61f3a805d6e3f028f6ea8ce6d
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit e3073243bd6c6bc61f3a805d6e3f028f6ea8ce6d
Author: Giulio Fidente <email address hidden>
Date: Tue Aug 31 13:24:11 2021 +0200

    Enable Ceph RGW public port into firewall when using SSL

    Adds CephRgwPublic endpoint port to firewall rule because it does
    not match the CephRgwInternal endpoint port when using SSL

    In wallaby we need to fix the ceph-ansible templates too

    Change-Id: Ia08b3d9b0fc96511e5a9202fa5e5a09487263e5b
    (cherry picked from commit c69733bb652fa4bb546cd1dbf4cd40a4f157467d)
    Closes-Bug: 1942198

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/806893

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/806893
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/530668d031eddfcd9fab39e4a4124cc35dcadc2f
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit 530668d031eddfcd9fab39e4a4124cc35dcadc2f
Author: Giulio Fidente <email address hidden>
Date: Tue Aug 31 13:24:11 2021 +0200

    Enable Ceph RGW public port into firewall when using SSL

    Adds CephRgwPublic endpoint port to firewall rule because it does
    not match the CephRgwInternal endpoint port when using SSL

    In train/ussuri/victoria we do not need the cephadm fix because it wasn't supported then.

    Change-Id: Ia08b3d9b0fc96511e5a9202fa5e5a09487263e5b
    (cherry picked from commit c69733bb652fa4bb546cd1dbf4cd40a4f157467d)
    Closes-Bug: 1942198
    (cherry picked from commit e3073243bd6c6bc61f3a805d6e3f028f6ea8ce6d)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/807259

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/807259
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/da30175061840bf3d1768ad52fc33336a45c93ce
Submitter: "Zuul (22348)"
Branch: stable/ussuri

commit da30175061840bf3d1768ad52fc33336a45c93ce
Author: Giulio Fidente <email address hidden>
Date: Tue Aug 31 13:24:11 2021 +0200

    Enable Ceph RGW public port into firewall when using SSL

    Adds CephRgwPublic endpoint port to firewall rule because it does
    not match the CephRgwInternal endpoint port when using SSL

    In train/ussuri/victoria we do not need the cephadm fix because it wasn't supported then.

    Change-Id: Ia08b3d9b0fc96511e5a9202fa5e5a09487263e5b
    (cherry picked from commit c69733bb652fa4bb546cd1dbf4cd40a4f157467d)
    Closes-Bug: 1942198
    (cherry picked from commit e3073243bd6c6bc61f3a805d6e3f028f6ea8ce6d)
    (cherry picked from commit 530668d031eddfcd9fab39e4a4124cc35dcadc2f)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/train
Review: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/811558

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/811558
Committed: https://opendev.org/openstack/tripleo-heat-templates/commit/5575c42bd628cff7cafca716807f2934f4f5318f
Submitter: "Zuul (22348)"
Branch: stable/train

commit 5575c42bd628cff7cafca716807f2934f4f5318f
Author: Giulio Fidente <email address hidden>
Date: Tue Aug 31 13:24:11 2021 +0200

    Enable Ceph RGW public port into firewall when using SSL

    Adds CephRgwPublic endpoint port to firewall rule because it does
    not match the CephRgwInternal endpoint port when using SSL

    In train/ussuri/victoria we do not need the cephadm fix because it wasn't supported then.

    Change-Id: Ia08b3d9b0fc96511e5a9202fa5e5a09487263e5b
    (cherry picked from commit c69733bb652fa4bb546cd1dbf4cd40a4f157467d)
    Closes-Bug: 1942198
    (cherry picked from commit e3073243bd6c6bc61f3a805d6e3f028f6ea8ce6d)
    (cherry picked from commit 530668d031eddfcd9fab39e4a4124cc35dcadc2f)
    (cherry picked from commit da30175061840bf3d1768ad52fc33336a45c93ce)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 15.1.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 12.4.6 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 13.6.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates train-eol release.