OpenContrail

Support for SSL in contrail-heat plugin

Bug #1693049 reported by Piyush Srivastava
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R3.2
Fix Committed
Undecided
Piyush Srivastava
Juniper Openstack r3.2.4.0
R4.0
Fix Committed
Undecided
Piyush Srivastava
Juniper Openstack r4.0.1.0 "r4.0.1.0"
Trunk
Fix Committed
Undecided
Piyush Srivastava
Juniper Openstack r4.1.0.0-fcs "r4.1"
OpenContrail
Fix Committed
Undecided
Piyush Srivastava

Bug Description

Contrail version: 3.2.0-33

Presently, contrail.py within contrail-heat project does not take in authentication protocol as a parameter. This causes the vnc_api to use the default authentication protocol which is http. There is no way to override it to use https.

Simple fix would be to allow auth_protocol attribute in /etc/heat/heat.conf under the [clients_contrail] section and make the supporting change in contrail.py

Config of /etc/heat/heat.conf with the added parameter:

[clients_contrail]
user = admin
password = *****
tenant = admin
api_server = contrail-controller
api_port = 7072
api_base_url = /
use_ssl = True
auth_protocol = https

Piyush Srivastava (piyush0101)
Changed in opencontrail:
assignee: nobody → Piyush Srivastava (piyush0101)
status: New → In Progress
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/32112
Submitter: Piyush Srivastava (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/32112
Committed: http://github.com/Juniper/contrail-heat/commit/e552020141174a893c845d1015fd80b8e1223d76
Submitter: Zuul (<email address hidden>)
Branch: master

commit e552020141174a893c845d1015fd80b8e1223d76
Author: Piyush Srivastava <email address hidden>
Date: Tue May 23 16:51:16 2017 -0700

SSL support in contrail-heat plugins

Adding a parameter that can be used in /etc/heat/heat.conf
to override the default auth protocol. Useful for users who
need https connection to the contrail api server from heat.

Change-Id: I7f19982513e0c96a5a6b0c4809baa7c02c6f714c
Closes-bug: #1693049

Vineet Gupta (vineetrf)
tags: added: wpc
Jeba Paulaiyan (jebap)
tags: added: heat-support
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.0

Review in progress for https://review.opencontrail.org/32720
Submitter: Sachin Bansal (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.2

Review in progress for https://review.opencontrail.org/32721
Submitter: Sachin Bansal (<email address hidden>)

Sachin Bansal (sbansal)
Changed in opencontrail:
status: In Progress → Fix Committed
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/32720
Committed: http://github.com/Juniper/contrail-heat/commit/7ad8a1551670ece3e23d85d75b47884a8fcb10cf
Submitter: Zuul (<email address hidden>)
Branch: R4.0

commit 7ad8a1551670ece3e23d85d75b47884a8fcb10cf
Author: Piyush Srivastava <email address hidden>
Date: Tue May 23 16:51:16 2017 -0700

SSL support in contrail-heat plugins

Adding a parameter that can be used in /etc/heat/heat.conf
to override the default auth protocol. Useful for users who
need https connection to the contrail api server from heat.

Change-Id: I7f19982513e0c96a5a6b0c4809baa7c02c6f714c
Closes-bug: #1693049
(cherry picked from commit e552020141174a893c845d1015fd80b8e1223d76)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/32721
Committed: http://github.com/Juniper/contrail-heat/commit/49c4280fa1c641c3c202c81a73b606d356e7c000
Submitter: Zuul (<email address hidden>)
Branch: R3.2

commit 49c4280fa1c641c3c202c81a73b606d356e7c000
Author: Piyush Srivastava <email address hidden>
Date: Tue May 23 16:51:16 2017 -0700

SSL support in contrail-heat plugins

Adding a parameter that can be used in /etc/heat/heat.conf
to override the default auth protocol. Useful for users who
need https connection to the contrail api server from heat.

Change-Id: I7f19982513e0c96a5a6b0c4809baa7c02c6f714c
Closes-bug: #1693049
(cherry picked from commit e552020141174a893c845d1015fd80b8e1223d76)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.