vhost rendering for openstack_https_frontend.conf is not network space aware, still requires obsolete os-*-network configs

Bug #1769973 reported by Nobuto Murata
24
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Gnocchi Charm
Fix Released
High
Frode Nordahl
OpenStack AODH Charm
Fix Released
High
Frode Nordahl
OpenStack Designate Charm
Fix Released
High
Frode Nordahl

Bug Description

This may be a dup of LP: #1745389 and worth to try the patchset: https://review.openstack.org/#/c/549134/
However, I'm not 100% sure so opening another one just to be safe and attach my test case.

Charm revision:
https://api.jujucharms.com/charmstore/v5/aodh-12/archive/repo-info
commit-sha-1: d7caff3b148cabf003f5307983eb988f847ea871
commit-short: d7caff3
branch: HEAD
remote: https://github.com/openstack/charm-aodh

How to reproduce:
1. prepare multiple network spaces in MAAS

 $ juju spaces
Space Subnets
space-first 192.168.151.0/24
space-second 192.168.152.0/24
undefined 10.0.8.0/24
              192.168.122.0/24

2. deploy OpenStack reactive charm (e.g. aodh) with multiple spaces and SSL

 $ juju deploy ./bundle.yaml (attached)

3. Check the rendered /etc/apache2/sites-enabled/openstack_https_frontend.conf file to see if it has multiple vhosts from each network space.

 $ juju ssh aodh/0 -- cat /etc/apache2/sites-enabled/openstack_https_frontend.conf

[expected]
Listen 8032
<VirtualHost 192.168.151.X:8032>
...
</VirtualHost>
<VirtualHost 192.168.152.X:8032>
...
</VirtualHost>

[actual]
Listen 8032
<VirtualHost 192.168.151.X:8032>
...
</VirtualHost>
<VirtualHost 192.168.151.X:8032>
...
</VirtualHost>

^^^ no binding for space-second=192.168.152.0/24

WORKAROUND:
set obsolete os-public-network, os-internal-network, os-admin-network explicitly in charm config.

Revision history for this message
Nobuto Murata (nobuto) wrote :
Revision history for this message
Nobuto Murata (nobuto) wrote :

Subscribing Canonical's ~field-high.

While it has a workaround, setting os-*-network config in charms are deprecated AFAIU. This bug affects all deployments with SSL + multiple network bindings in OpenStack reactive charms. I'd like to request accelerating the gerrit review[1] from engineering side, and if it requires some modifications, I'd like to ask engineering team takes over writing another round of patchsets.

[1] https://review.openstack.org/#/c/549134/

Xav Paice (xavpaice)
tags: added: canonical-bootstack
Revision history for this message
Chris Gregan (cgregan) wrote :

Field High SLA now requires that a estimated date for a fix is listed in the comments. Please provide this estimate for the open tasks.

Revision history for this message
Ryan Beisner (1chb1n) wrote :

CI is failing on the proposed patch; current status of the bug is that we are triaging. There is no way to give an estimated date at this time. We will update as soon as we know more. Thank you.

Ryan Beisner (1chb1n)
Changed in charm-gnocchi:
assignee: nobody → Frode Nordahl (fnordahl)
Changed in charm-aodh:
assignee: nobody → Frode Nordahl (fnordahl)
Changed in charm-designate:
assignee: nobody → Frode Nordahl (fnordahl)
Changed in charms.openstack:
assignee: nobody → Frode Nordahl (fnordahl)
Revision history for this message
Ryan Beisner (1chb1n) wrote :

Patchset CI issues are resolved. The proposed change is ready for review.

Revision history for this message
Ryan Beisner (1chb1n) wrote :

Next step is to reproduce and confirm the bug, also to review the proposed patch.

Changed in charm-designate:
milestone: none → 18.05
Changed in charm-aodh:
milestone: none → 18.05
Changed in charm-gnocchi:
milestone: none → 18.05
Revision history for this message
James Page (james-page) wrote :

I provided some feedback on the review. I can see exactly how the reactive charms don't honor the network space bindings if used.

Changed in charm-gnocchi:
status: New → Triaged
Changed in charm-aodh:
status: New → Triaged
Changed in charm-designate:
status: New → Triaged
Changed in charms.openstack:
status: New → Triaged
Changed in charm-gnocchi:
importance: Undecided → High
Changed in charm-aodh:
importance: Undecided → High
Changed in charm-designate:
importance: Undecided → High
Changed in charms.openstack:
importance: Undecided → High
Revision history for this message
Seyeong Kim (seyeongkim) wrote :

I confirmed that this [1] patch fixes
VirtualHost issue mentioned in desc.

Revision history for this message
Seyeong Kim (seyeongkim) wrote :
Revision history for this message
Seyeong Kim (seyeongkim) wrote :

sorry for seprated comment.

I tested this with aodh charm

Revision history for this message
Frode Nordahl (fnordahl) wrote :

Removed charms.openstack target as that was fixed in bug #1745389

no longer affects: charms.openstack
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-gnocchi (master)

Fix proposed to branch: master
Review: https://review.openstack.org/567748

Changed in charm-gnocchi:
status: Triaged → In Progress
Changed in charm-aodh:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-aodh (master)

Fix proposed to branch: master
Review: https://review.openstack.org/567749

Changed in charm-designate:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-designate (master)

Fix proposed to branch: master
Review: https://review.openstack.org/567750

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to charm-designate (master)

Reviewed: https://review.openstack.org/567750
Committed: https://git.openstack.org/cgit/openstack/charm-designate/commit/?id=a07f38d0b8798d1f7f9596ebeb06f8aac6c7c25d
Submitter: Zuul
Branch: master

commit a07f38d0b8798d1f7f9596ebeb06f8aac6c7c25d
Author: Frode Nordahl <email address hidden>
Date: Fri May 11 08:08:48 2018 +0200

    Rebuild to pull in charms.openstack

    Pull in fix for rendering Apache VirtualHost correctly
    when charm is bound to network spaces.

    Change-Id: Ibffa77f8cde39114dc990b345120f55ff83d63d3
    Related-Bug: #1745389
    Closes-Bug: #1769973

Changed in charm-designate:
status: In Progress → Fix Committed
Changed in charm-gnocchi:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to charm-gnocchi (master)

Reviewed: https://review.openstack.org/567748
Committed: https://git.openstack.org/cgit/openstack/charm-gnocchi/commit/?id=6307620743a3ea4634d30d10ddd61a82455f333c
Submitter: Zuul
Branch: master

commit 6307620743a3ea4634d30d10ddd61a82455f333c
Author: Frode Nordahl <email address hidden>
Date: Fri May 11 08:03:13 2018 +0200

    Rebuild to pull in charms.openstack

    Pull in fix for rendering Apache VirtualHost correctly
    when charm is bound to network spaces.

    Change-Id: I5c754feff3f0e9babc9a41ab70d3546c44db0ab9
    Related-Bug: #1745389
    Closes-Bug: #1769973

Changed in charm-aodh:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to charm-aodh (master)

Reviewed: https://review.openstack.org/567749
Committed: https://git.openstack.org/cgit/openstack/charm-aodh/commit/?id=f500c7869efd8a701866843b8ddfc39561e51efb
Submitter: Zuul
Branch: master

commit f500c7869efd8a701866843b8ddfc39561e51efb
Author: Frode Nordahl <email address hidden>
Date: Fri May 11 08:08:29 2018 +0200

    Rebuild to pull in charms.openstack

    Pull in fix for rendering Apache VirtualHost correctly
    when charm is bound to network spaces.

    Change-Id: If6ff6897b54a13a4777480a4240e3f814d3f22d8
    Related-Bug: #1745389
    Closes-Bug: #1769973

Revision history for this message
Nobuto Murata (nobuto) wrote :

https://docs.openstack.org/charm-guide/latest/release-schedule.html#stable-charm-release
> 18.05 Stable Charm Release
> Freeze Tue, May 15, 2018
> Release Thu, May 24, 2018

In case it does not happen on that date, please consider a stable backport separately.

David Ames (thedac)
Changed in charm-aodh:
status: Fix Committed → Fix Released
Changed in charm-gnocchi:
status: Fix Committed → Fix Released
Changed in charm-designate:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.