Comment 5 for bug 1896719

Revision history for this message
Oliver Nixon (onixon) wrote :

I have found a workaround for this bug.

You need to disable SSL on the influxdb frontend by modifying the HAProxy config on your controllers in /etc/kolla/haproxy/services.d/influxdb.cfg

On the line that starts with 'bind', remove everything after the ':8086'

Also modify the http-request set-header rule to look like this: http-request set-header X-Forwarded-Proto https

Once you've done the above your configuration should look like below:

frontend influxdb_http_front
    mode http
    http-request del-header X-Forwarded-Proto
    option httplog
    option forwardfor
    http-request set-header X-Forwarded-Proto https
    bind VIP-IP-HERE:8086
    default_backend influxdb_http_back

backend influxdb_http_back
    mode http
    server control-server-1 control-ip-1:8086 check inter 2000 rise 2 fall 5
    server control-server-2-ip-2:8086 check inter 2000 rise 2 fall 5
    server control-server-3 control-server-ip-34:8086 check inter 2000 rise 2 fall 5
    server monitoring-server-1 monitoring-server-ip-:8086 check inter 2000 rise 2 fall 5

To ensure this configuration persists on any subsequent kolla-ansible actions, be sure to place it on your kolla-ansible server in /etc/kolla/config/haproxy/services.d/influxdb.cfg (you'll need to create this directory first)