Provisioning scripts do not support Contrail API using SSL

Bug #1538120 reported by Iain Billett
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R2.21.x
Fix Committed
High
Sanju Abraham
R2.22.x
Fix Committed
High
Sanju Abraham
Trunk
Fix Committed
High
Sanju Abraham

Bug Description

The provisioning scripts (provision_vrouter.py, provision_encap.py, etc) do not appear to support SSL. The VncApi class supports SSL via the api_server_use_ssl optional constructor parameter. However, when the class is instantiated in the scripts the parameter is not passed so the default (False) is used. Also, this value does not appear to be read from the config file. Ideally, there would be a cli flag to toggle api_server_use_ssl or this would be read from the config file.

Tags: provisioning
tags: added: provisioning
summary: - Provisioning scripts do not support SSL
+ Provisioning scripts do not support Contrail API using SSL
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R2.21.x

Review in progress for https://review.opencontrail.org/17422
Submitter: Sanju (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R2.22.x

Review in progress for https://review.opencontrail.org/17425
Submitter: Sanju (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/17428
Submitter: Sanju (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/17422
Committed: http://github.org/Juniper/contrail-controller/commit/4555f8239cfa681ba1ffd1ba9b5970bc0fa94c4b
Submitter: Zuul
Branch: R2.21.x

commit 4555f8239cfa681ba1ffd1ba9b5970bc0fa94c4b
Author: Sanju Abraham <email address hidden>
Date: Fri Feb 19 02:02:03 2016 -0800

Closes-Bug:1538120. Support for calling API over SSL. As part of provisionig /etc/contrail/vnc_api_lib.ini should be configured on compute such that vnc_api client will read the config for certs.

Change-Id: Idc02195812aebd8e24c4afbc4e01ed327670c61e

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/17428
Committed: http://github.org/Juniper/contrail-controller/commit/8904029c2aec34ea735607053be8ebef3c1da1cd
Submitter: Zuul
Branch: master

commit 8904029c2aec34ea735607053be8ebef3c1da1cd
Author: Sanju Abraham <email address hidden>
Date: Fri Feb 19 02:22:55 2016 -0800

Closes-Bug:1538120. Support for calling API over SSL. As part of provisionig /etc/contrail/vnc_api_lib.ini should be configured on compute such that vnc_api client will read the config for certs.

Change-Id: I60dbbb72943b692ece94a04695f3e0fc350b4ae4

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/17425
Committed: http://github.org/Juniper/contrail-controller/commit/24b109d7a23afb0504ae88f95fe3a79d290ebcc4
Submitter: Zuul
Branch: R2.22.x

commit 24b109d7a23afb0504ae88f95fe3a79d290ebcc4
Author: Sanju Abraham <email address hidden>
Date: Fri Feb 19 02:17:31 2016 -0800

Closes-Bug:1538120. Support for calling API over SSL. As part of provisionig /etc/contrail/vnc_api_lib.ini should be configured on compute such that vnc_api client will read the config for certs.

Change-Id: If4b565edd10ce66918c3f6d054c3387555a27ef0

information type: Proprietary → Public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.