ports left open on port config changes

Bug #1921131 reported by Mauricio Faria de Oliveira
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ceph RADOS Gateway Charm
Fix Released
Undecided
Mauricio Faria de Oliveira

Bug Description

When the charm config option `port` is changed, the previously opened port is not closed.

This leads to leaks of open ports (potential security issue), and long status on tests:

$ juju config ceph-radosgw port=1111
$ juju config ceph-radosgw port=2222
$ juju config ceph-radosgw port=3333

$ juju status ceph-radosgw
...
Unit Workload Agent Machine Public address Ports Message
ceph-radosgw/1* blocked idle 3 10.5.2.210 80/tcp,1111/tcp,2222/tcp,3333/tcp Missing relations: mon
...

$ juju run --unit ceph-radosgw/1 'opened-ports'
80/tcp
1111/tcp
2222/tcp
3333/tcp

Changed in charm-ceph-radosgw:
status: New → In Progress
assignee: nobody → Mauricio Faria de Oliveira (mfo)
Revision history for this message
Mauricio Faria de Oliveira (mfo) wrote :
Revision history for this message
Mauricio Faria de Oliveira (mfo) wrote :
Changed in charm-ceph-radosgw:
status: In Progress → Fix Committed
Changed in charm-ceph-radosgw:
milestone: none → 21.04
Revision history for this message
Mauricio Faria de Oliveira (mfo) wrote :

The previous patch introduces a regression/needs an additional fix:

https://review.opendev.org/c/openstack/charm-ceph-radosgw/+/784785

Revision history for this message
Mauricio Faria de Oliveira (mfo) wrote :
Changed in charm-ceph-radosgw:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.