Manila endpoints not https

[Vern Hart]

With ssl_cert, ssl_key, and ssl_ca set, we're not getting https endpoints in keystone.

Checking apache config, I don't see the openstack_https_frontend.conf in /etc/apache2/sites-available like other openstack services.

I added manila_charm.configure_tls() to render_stuff() in reactive/manila.handlers.py to write the tls configuration and after a config change, we now have openstack_https_frontend.conf in apache.

However, we still have http for manila in keystone's endpoint list.

$ openstack endpoint list | grep manila
| 05b623c8b6b84c4a89249900418b2211 | RegionOne | manilav2 | sharev2 | True | public | http://manila.foo.com:8786/v2/%(tenant_id)s |
| 22794078fe804a9faf3fc91af8eb9474 | RegionOne | manila | share | True | public | http://manila.foo.com:8786/v1/%(tenant_id)s |
| 5542abf5dcd74d0383526a8b30e0c46f | RegionOne | manila | share | True | internal | http://manila-i.foo.com:8786/v1/%(tenant_id)s |
| 684c8dfab32540bfa0163343a1717643 | RegionOne | manila | share | True | admin | http://manila-i.foo.com:8786/v1/%(tenant_id)s |
| a1a168df51864d4faac9bf88ceb21021 | RegionOne | manilav2 | sharev2 | True | admin | http://manila-i.foo.com:8786/v2/%(tenant_id)s |
| e65773c11bb84b5bbb312bff9a680ca5 | RegionOne | manilav2 | sharev2 | True | internal | http://manila-i.foo.com:8786/v2/%(tenant_id)s |

I tried changing os-admin-hostname to something else but the endpoint didn't update.

I ended up manually changing the endpoints with openstack cli and the charm has not reverted my manual chang.

[Billy Olsen (billy-olsen)]

I believe this is fixed in the -next branch of the charm when the sync included this change here https://github.com/openstack/charms.openstack/commit/69eb753b02adb5d5a589fdded49094df38e086d3

[Vern Hart (vern)]

Awesome. Will test.

[Vern Hart (vern)]

Doesn't appear to have solved it. Or else I'm not testing this correctly.

Upgraded to the -next charm (revision 92) and tested changing os-admin-hostname:

ubuntu@iadaz01sinf01:~/preprod$ openstack endpoint list | grep manila
| 05b623c8b6b84c4a89249900418b2211 | RegionOne | manilav2 | sharev2 | True | public | https://manila.foo.com:8786/v2/%(tenant_id)s |
| 22794078fe804a9faf3fc91af8eb9474 | RegionOne | manila | share | True | public | https://manila.foo.com:8786/v1/%(tenant_id)s |
| 5542abf5dcd74d0383526a8b30e0c46f | RegionOne | manila | share | True | internal | https://manila-i.foo.com:8786/v1/%(tenant_id)s |
| 684c8dfab32540bfa0163343a1717643 | RegionOne | manila | share | True | admin | https://manila-i.foo.com:8786/v1/%(tenant_id)s |
| a1a168df51864d4faac9bf88ceb21021 | RegionOne | manilav2 | sharev2 | True | admin | https://manila-i.foo.com:8786/v2/%(tenant_id)s |
| e65773c11bb84b5bbb312bff9a680ca5 | RegionOne | manilav2 | sharev2 | True | internal | https://manila-i.foo.com:8786/v2/%(tenant_id)s |
ubuntu@iadaz01sinf01:~/preprod$ juju config manila os-admin-hostname
manila-i.foo.com
ubuntu@iadaz01sinf01:~/preprod$ juju config manila os-admin-hostname=manila.foo.com
ubuntu@iadaz01sinf01:~/preprod$ juju wait -w 2>/dev/null
ubuntu@iadaz01sinf01:~/preprod$ openstack endpoint list | grep manila
| 05b623c8b6b84c4a89249900418b2211 | RegionOne | manilav2 | sharev2 | True | public | https://manila.foo.com:8786/v2/%(tenant_id)s |
| 22794078fe804a9faf3fc91af8eb9474 | RegionOne | manila | share | True | public | https://manila.foo.com:8786/v1/%(tenant_id)s |
| 5542abf5dcd74d0383526a8b30e0c46f | RegionOne | manila | share | True | internal | https://manila-i.foo.com:8786/v1/%(tenant_id)s |
| 684c8dfab32540bfa0163343a1717643 | RegionOne | manila | share | True | admin | https://manila-i.foo.com:8786/v1/%(tenant_id)s |
| a1a168df51864d4faac9bf88ceb21021 | RegionOne | manilav2 | sharev2 | True | admin | https://manila-i.foo.com:8786/v2/%(tenant_id)s |
| e65773c11bb84b5bbb312bff9a680ca5 | RegionOne | manilav2 | sharev2 | True | internal | https://manila-i.foo.com:8786/v2/%(tenant_id)s |

I even tried manually changing one of the endpoints to http and ran the config-changed hook but nothing changed.

[Felipe Reyes (freyes)]

Hi Vern,

The endpoints listed in comment #3 are https://manila... versus the ones in the bug description that are not. Was curl showing that the services weren't correctly configured to use https?

Best,

[Vern Hart (vern)]

Hi freyes,

You are correct. It would seem I was complaining that changing os_admin_hostname had no effect in the last comment.

I don't recall that continuing to be a problem with this deployment.

It seems safe to close this Fix Released.

[Launchpad Janitor (janitor)]

[Expired for OpenStack Manila Charm because there has been no activity for 60 days.]