Apache API proxy doesn’t allow connections to GLARE for OSTF

Bug #1589739 reported by Victor Ryzhenkin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Committed
High
Maksim Malchuk
Mitaka
Fix Released
High
Maksim Malchuk

Bug Description

Detailed bug description:
 During test developing was discovered, that Apache api proxy doesn't allow connections to GLARE. It blocking OSTF tests for Murano+GLARE setups.
Steps to reproduce:
 1. Deploy MOS 9.0 with Murano and GLARE
 2. Use https://review.openstack.org/#/c/305951/ to allow Murano tests operate with GLARE backend
 3. Run OSTF
Expected results:
 Tests passed
Actual result:
 Tests failed with 403 proxy error

CommunicationError: Error finding address for https://public.fuel.local:9494/v0.1/artifacts/murano/v1?&limit=20&enabled=True&sort=name:asc: HTTPSConnectionPool(host='public.fuel.local', port=9494): Max retries exceeded with url: /v0.1/artifacts/murano/v1?&limit=20&enabled=True&sort=name:asc (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Proxy Error',)))

Reproducibility:
 Always
Workaround:
 Add port 9494 to /etc/apache2/sites-available/25-apache_api_proxy.conf
Impact:
 Test impact. Blocking development of fixes for Murano OSTF
Description of the environment:
 Operation system: Ubuntu
 Versions of components: downstream mitaka
 Network model: VXLAN
 Related projects installed: Murano with GLARE
Additional information:
 File located on controllers in path /etc/apache2/sites-available/25-apache_api_proxy.conf

 We should add port 9494 to this line > AllowCONNECT 443 563 5000 6385 8000 8003 8004 8042 8080 8082 8386 8773 8774 8776 8777 9292 9696

summary: - Apache API proxy doesn’t allow connections to GLARE from OSTF
+ Apache API proxy doesn’t allow connections to GLARE for OSTF
Changed in fuel:
assignee: nobody → Fuel Sustaining (fuel-sustaining-team)
Changed in fuel:
assignee: Fuel Sustaining (fuel-sustaining-team) → Maksim Malchuk (mmalchuk)
tags: added: area-library team-bugfix
removed: area-puppet
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/326402

Changed in fuel:
status: Confirmed → In Progress
Changed in fuel:
milestone: 9.0 → 10.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/mitaka)

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/326675

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/326402
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=5952972eca70eecff6ebef363f9453a34fbb856f
Submitter: Jenkins
Branch: master

commit 5952972eca70eecff6ebef363f9453a34fbb856f
Author: Maksim Malchuk <email address hidden>
Date: Tue Jun 7 14:51:58 2016 +0300

    Allow api-proxy to connect glare-api port 9494 for OSTF

    Change-Id: Idb5e573371a620ab5ec64b8bd2332d3b6f608acc
    Closes-Bug: #1589739
    Signed-off-by: Maksim Malchuk <email address hidden>

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/mitaka)

Reviewed: https://review.openstack.org/326675
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=4940f67bd3e0f31627ed2c0b89b19838a870c468
Submitter: Jenkins
Branch: stable/mitaka

commit 4940f67bd3e0f31627ed2c0b89b19838a870c468
Author: Maksim Malchuk <email address hidden>
Date: Tue Jun 7 14:51:58 2016 +0300

    Allow api-proxy to connect glare-api port 9494 for OSTF

    Change-Id: Idb5e573371a620ab5ec64b8bd2332d3b6f608acc
    Closes-Bug: #1589739
    Signed-off-by: Maksim Malchuk <email address hidden>
    (cherry picked from commit 5952972eca70eecff6ebef363f9453a34fbb856f)

Revision history for this message
Volodymyr Shypyguzov (vshypyguzov) wrote :

Verified on 9.0 iso #458
Port is present in the /etc/apache2/sites-available/25-apache_api_proxy.conf

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.