encoded slashes being blocked by Apache
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Charm Helpers |
Invalid
|
Undecided
|
Unassigned | ||
OpenStack Heat |
Invalid
|
Undecided
|
Unassigned | ||
OpenStack Heat Charm |
Invalid
|
Undecided
|
Unassigned | ||
Ubuntu Cloud Archive |
Fix Released
|
High
|
Unassigned | ||
Mitaka |
Fix Released
|
High
|
Unassigned | ||
Newton |
Fix Released
|
High
|
Unassigned | ||
Ocata |
Fix Released
|
High
|
Unassigned | ||
python-heatclient (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Xenial |
Fix Released
|
High
|
Unassigned | ||
Zesty |
Fix Released
|
High
|
Unassigned |
Bug Description
[Impact]
We came across a situation where we were unable to view resources in a stack inside Horizon. We traced it down to a communication problem with the Heat Apache frontend and Heat. After adjusting the log level for Apache, we came across the following error in the logs:
[client 213.173.
As a workaround, we currently added the following line to the /etc/apache/
AllowEncodedSlashes On
It is worth noting we tried to use the NoDecode option as well and that is didn't resolve the problem.
[Test Case]
1. Deploy OpenStack with Juju
2. Enable Keystone v3: juju config keystone preferred-
3. Enable SSL: juju config keystone https-service-
4. Add heat:
- juju deploy heat
- juju add-relation heat keystone
- juju add-relation heat percona-cluster
- juju add-relation heat rabbitmq-server
- juju run-action heat/0 domain-setup
5. Deploy a stack:
openstack stack create --parameter admin_pass=Ubuntu \
6. Verify that it deploys: openstack stack list
7. Verify that heat works in OpenStack Dashboard
8. Verify that displaying Heat resources tab in OpenStack Dashboard does
NOT work.
[Regression Potential]
Low. The patch being backported is from the upstream stable/pike branch. There were some minor adjustments required to apply the patch to earlier releases, but the patches are nearly identical.
tags: | added: canonical-sysadmin |
tags: |
added: canonical-bootstack removed: canonical-sysadmin |
affects: | cloud-archive → charm-helpers |
no longer affects: | cloud-archive/pike |
Changed in cloud-archive: | |
status: | New → Invalid |
status: | Invalid → Fix Released |
Changed in charm-helpers: | |
status: | New → Invalid |
Changed in heat: | |
status: | New → Invalid |
Changed in charm-heat: | |
status: | Triaged → Invalid |
importance: | High → Undecided |
Changed in cloud-archive: | |
importance: | Undecided → High |
description: | updated |
description: | updated |
The OpenStack infra team appear to have hit the same issue: http:// lists.openstack .org/pipermail/ openstack- dev/2017- May/117312. html