create volume backup failed when enable TLS

Bug #1888378 reported by Jie Li
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Cinder
In Progress
Undecided
Jie Li

Bug Description

Condition:
1.Cinder backup driver: swift
2.backup_swift_auth mode: single_user
3.Cinder service and swift service are enable TLS
4.cinder.conf is
  backup_swift_auth = single_user

We create volume backup failed when we enable TLS.
The reason is that we can't set the swift endpoint type, and default is PUBLIC endpoint type[1].
For more security, we should set the swift endpoint type is internal when the OpenStack enable TLS.
So we should let the operator set the swift endpoint type.

[1]:https://github.com/openstack/python-swiftclient/blob/master/swiftclient/client.py#L623

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to cinder (master)

Fix proposed to branch: master
Review: https://review.opendev.org/742136

Changed in cinder:
assignee: nobody → Jie Li (ramboman)
status: New → In Progress
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.