Verified in fuel version: [root@nailgun ~]# cat /etc/fuel/version.yaml VERSION: feature_groups: - mirantis production: "docker" release: "8.0" api: "1.0" build_number: "570" build_id: "570" fuel-nailgun_sha: "558ca91a854cf29e395940c232911ffb851899c1" python-fuelclient_sha: "4f234669cfe88a9406f4e438b1e1f74f1ef484a5" fuel-agent_sha: "658be72c4b42d3e1436b86ac4567ab914bfb451b" fuel-nailgun-agent_sha: "b2bb466fd5bd92da614cdbd819d6999c510ebfb1" astute_sha: "b81577a5b7857c4be8748492bae1dec2fa89b446" fuel-library_sha: "c2a335b5b725f1b994f78d4c78723d29fa44685a" fuel-ostf_sha: "3bc76a63a9e7d195ff34eadc29552f4235fa6c52" fuel-mirror_sha: "fb45b80d7bee5899d931f926e5c9512e2b442749" fuelmenu_sha: "78ffc73065a9674b707c081d128cb7eea611474f" shotgun_sha: "63645dea384a37dde5c01d4f8905566978e5d906" network-checker_sha: "a43cf96cd9532f10794dce736350bf5bed350e9d" fuel-upgrade_sha: "616a7490ec7199f69759e97e42f9b97dfc87e85b" fuelmain_sha: "d605bcbabf315382d56d0ce8143458be67c53434
Steps: 1. Deploy cluster with 1 controller, 1 compute + cinder 2. Check haproxy config have param $haproxy_ssl_default_dh_param = '2048' cat /etc/haproxy/haproxy.cfg ... tune.ssl.default-dh-param 2048 3. Restart haproxy Check output for restart. It must be without any errors about dh group length. root@node-1:~# service haproxy restart * Restarting haproxy haproxy [ALERT] 049/135745 (32584) : Starting proxy nova-metadata-api: cannot bind socket [10.109.1.3:8775]
Verified in fuel version: version. yaml 9e395940c232911 ffb851899c1" fuelclient_ sha: "4f234669cfe88a 9406f4e438b1e1f 74f1ef484a5" e1436b86ac4567a b914bfb451b" nailgun- agent_sha: "b2bb466fd5bd92 da614cdbd819d69 99c510ebfb1" 4be8748492bae1d ec2fa89b446" b994f78d4c78723 d29fa44685a" 95ff34eadc29552 f4235fa6c52" 99d931f926e5c95 12e2b442749" 4b707c081d128cb 7eea611474f" dde5c01d4f89055 66978e5d906" checker_ sha: "a43cf96cd9532f 10794dce736350b f5bed350e9d" f69759e97e42f9b 97dfc87e85b" 82d56d0ce814345 8be67c53434
[root@nailgun ~]# cat /etc/fuel/
VERSION:
feature_groups:
- mirantis
production: "docker"
release: "8.0"
api: "1.0"
build_number: "570"
build_id: "570"
fuel-nailgun_sha: "558ca91a854cf2
python-
fuel-agent_sha: "658be72c4b42d3
fuel-
astute_sha: "b81577a5b7857c
fuel-library_sha: "c2a335b5b725f1
fuel-ostf_sha: "3bc76a63a9e7d1
fuel-mirror_sha: "fb45b80d7bee58
fuelmenu_sha: "78ffc73065a967
shotgun_sha: "63645dea384a37
network-
fuel-upgrade_sha: "616a7490ec7199
fuelmain_sha: "d605bcbabf3153
Steps: ssl_default_ dh_param = '2048' haproxy. cfg default- dh-param 2048
1. Deploy cluster with 1 controller, 1 compute + cinder
2. Check haproxy config have param $haproxy_
cat /etc/haproxy/
...
tune.ssl.
3. Restart haproxy
Check output for restart. It must be without any errors about dh group length.
root@node-1:~# service haproxy restart
* Restarting haproxy haproxy [ALERT] 049/135745 (32584) : Starting proxy nova-metadata-api: cannot bind socket [10.109.1.3:8775]