Mirantis OpenStack

  1. Bug #1568171
  2. Comment #0

Comment 0 for bug 1568171

Revision history for this message
Serg Melikyan (smelikyan) wrote : Murano does not support TLS with cert for engine<>agent communication

Detailed bug description:
Murano does support specifying certificate for SSL connectivity between murano-engine and murano-agent, but this value (along side with certificate) is not passed to the murano-agent during first VM boot through cloud-init.

Steps to reproduce:
1. Configure SSL for Murano RabbitMQ
2. Configure SSL in Murano:
    vi /etc/murano/murano.conf
    [rabbitmq]
    ...
    ssl=True
    ca_certs=<path-to-cert>
3. Deploy any application

Expected results:
Environment with application deployed successfully

Actual result:
 Environment with application hangs during deployment, murano-agent configuration of VM does not anything related to cert configured

Reproducibility:
  Always

Workaround:
  Update core-library, example for stable/kilo - https://review.openstack.org/301365

Impact:
  Murano does not work on any environment which requires certificates used for SSL connectivity