tripleo

Enable TLS in the internal network for Octavia API

Bug #1789303 reported by Carlos Goncalves
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Carlos Goncalves
tripleo stein-1

Bug Description

It should be possible to optionally enable TLS in the internal network for Octavia API.

Carlos Goncalves (cgoncalves)
Changed in tripleo:
assignee: nobody → Carlos Goncalves (cgoncalves)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-tripleo (master)

Fix proposed to branch: master
Review: https://review.openstack.org/597038

Changed in tripleo:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.openstack.org/597039

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to tripleo-common (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/603220

OpenStack Infra (hudson-openstack)
Changed in tripleo:
assignee: Carlos Goncalves (cgoncalves) → Brent Eagles (beagles)
Brent Eagles (beagles)
Changed in tripleo:
importance: Undecided → High
milestone: none → rocky-rc2
Alex Schultz (alex-schultz)
Changed in tripleo:
milestone: rocky-rc2 → stein-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-tripleo (master)

Change abandoned by Alex Schultz (<email address hidden>) on branch: master
Review: https://review.openstack.org/597038
Reason: the unit jobs are currently broken, kicking this out of the gate until those are fixed

OpenStack Infra (hudson-openstack)
Changed in tripleo:
assignee: Brent Eagles (beagles) → Carlos Goncalves (cgoncalves)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-tripleo (master)

Reviewed: https://review.openstack.org/597038
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=de28e026cda308e638c0075f506f72eecc0689ab
Submitter: Zuul
Branch: master

commit de28e026cda308e638c0075f506f72eecc0689ab
Author: Carlos Goncalves <email address hidden>
Date: Mon Aug 27 23:27:20 2018 +0200

    Enable TLS in the internal network for Octavia API

    Partial-Bug: #1789303
    Co-Authored-By: Kellen Gattis <email address hidden>
    Change-Id: I38a71f28667ad0c50ebabd24cfbd148d52fe398b

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.openstack.org/597039
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=0e6087d93a30f8a3a2db6a64c5c1ebb19599bd8c
Submitter: Zuul
Branch: master

commit 0e6087d93a30f8a3a2db6a64c5c1ebb19599bd8c
Author: Carlos Goncalves <email address hidden>
Date: Tue Aug 28 11:59:18 2018 +0200

    Pass parameters for TLS proxy in front of Octavia-API

    If TLS in the internal network is enabled, we run octavia-api behind a
    TLS proxy.This passes the necessary hieradata.

    Depends-On: https://review.openstack.org/597038

    Closes-Bug: #1789303
    Co-Authored-By: Kellen Gattis <email address hidden>
    Change-Id: I735f701c90492fa0cf09417c8c71c2868ca85d08

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/rocky)

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/607318

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-tripleo (stable/rocky)

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/607319

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-tripleo (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/607322

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/607329

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to tripleo-common (master)

Reviewed: https://review.openstack.org/603220
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=96687674ddaf4ceab326b6ffc12ddac47a094169
Submitter: Zuul
Branch: master

commit 96687674ddaf4ceab326b6ffc12ddac47a094169
Author: Brent Eagles <email address hidden>
Date: Mon Sep 17 17:11:56 2018 -0230

    Add httpd and mod_ssl packages to octavia api image

    Add httpd and mod_ssl packages to the octavia api container image to
    support configuring the TLS proxy.

    Change-Id: I6170b1f7256a4805dafefd82ed6c06d8c2c2a358
    Related-Bug: #1789303

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to tripleo-common (stable/rocky)

Related fix proposed to branch: stable/rocky
Review: https://review.openstack.org/608721

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to tripleo-common (stable/queens)

Related fix proposed to branch: stable/queens
Review: https://review.openstack.org/608722

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 10.0.0

This issue was fixed in the openstack/tripleo-heat-templates 10.0.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to tripleo-common (stable/rocky)

Reviewed: https://review.openstack.org/608721
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=e2c12d402deae88543f8277d96ba9bf9864d06fe
Submitter: Zuul
Branch: stable/rocky

commit e2c12d402deae88543f8277d96ba9bf9864d06fe
Author: Brent Eagles <email address hidden>
Date: Mon Sep 17 17:11:56 2018 -0230

    Add httpd and mod_ssl packages to octavia api image

    Add httpd and mod_ssl packages to the octavia api container image to
    support configuring the TLS proxy.

    Change-Id: I6170b1f7256a4805dafefd82ed6c06d8c2c2a358
    Related-Bug: #1789303
    (cherry picked from commit 96687674ddaf4ceab326b6ffc12ddac47a094169)

tags: added: in-stable-rocky
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-tripleo (stable/rocky)

Reviewed: https://review.openstack.org/607319
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=afef5413d0dc3dada1e4e8112998e0f5360e8b09
Submitter: Zuul
Branch: stable/rocky

commit afef5413d0dc3dada1e4e8112998e0f5360e8b09
Author: Carlos Goncalves <email address hidden>
Date: Mon Aug 27 23:27:20 2018 +0200

    Enable TLS in the internal network for Octavia API

    Partial-Bug: #1789303
    Co-Authored-By: Kellen Gattis <email address hidden>
    Change-Id: I38a71f28667ad0c50ebabd24cfbd148d52fe398b
    (cherry picked from commit de28e026cda308e638c0075f506f72eecc0689ab)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-tripleo (stable/queens)

Reviewed: https://review.openstack.org/607322
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=7a255f8b1d7fad246f019a85099b1b129c0a81a4
Submitter: Zuul
Branch: stable/queens

commit 7a255f8b1d7fad246f019a85099b1b129c0a81a4
Author: Carlos Goncalves <email address hidden>
Date: Mon Aug 27 23:27:20 2018 +0200

    Enable TLS in the internal network for Octavia API

    Partial-Bug: #1789303
    Co-Authored-By: Kellen Gattis <email address hidden>
    Change-Id: I38a71f28667ad0c50ebabd24cfbd148d52fe398b
    (cherry picked from commit de28e026cda308e638c0075f506f72eecc0689ab)

tags: added: in-stable-queens
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (stable/rocky)

Reviewed: https://review.openstack.org/607318
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=668a628ef5b6c11dd6f06af725662d491f117c6f
Submitter: Zuul
Branch: stable/rocky

commit 668a628ef5b6c11dd6f06af725662d491f117c6f
Author: Carlos Goncalves <email address hidden>
Date: Tue Aug 28 11:59:18 2018 +0200

    Pass parameters for TLS proxy in front of Octavia-API

    If TLS in the internal network is enabled, we run octavia-api behind a
    TLS proxy.This passes the necessary hieradata.

    Depends-On: https://review.openstack.org/597038

    Closes-Bug: #1789303
    Co-Authored-By: Kellen Gattis <email address hidden>
    Change-Id: I735f701c90492fa0cf09417c8c71c2868ca85d08
    (cherry picked from commit 0e6087d93a30f8a3a2db6a64c5c1ebb19599bd8c)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (stable/queens)

Reviewed: https://review.openstack.org/607329
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=416ab20d1b6e715b54814017ff54841385079cbf
Submitter: Zuul
Branch: stable/queens

commit 416ab20d1b6e715b54814017ff54841385079cbf
Author: Carlos Goncalves <email address hidden>
Date: Tue Aug 28 11:59:18 2018 +0200

    Pass parameters for TLS proxy in front of Octavia-API

    If TLS in the internal network is enabled, we run octavia-api behind a
    TLS proxy.This passes the necessary hieradata.

    Conflicts:
        puppet/services/octavia-api.yaml

    Depends-On: https://review.openstack.org/597038

    Closes-Bug: #1789303
    Co-Authored-By: Kellen Gattis <email address hidden>
    Change-Id: I735f701c90492fa0cf09417c8c71c2868ca85d08
    (cherry picked from commit 0e6087d93a30f8a3a2db6a64c5c1ebb19599bd8c)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to tripleo-common (stable/queens)

Reviewed: https://review.openstack.org/608722
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=91da000b5e711e8f34b6f187878b0554da3ddc25
Submitter: Zuul
Branch: stable/queens

commit 91da000b5e711e8f34b6f187878b0554da3ddc25
Author: Brent Eagles <email address hidden>
Date: Mon Sep 17 17:11:56 2018 -0230

    Add httpd and mod_ssl packages to octavia api image

    Add httpd and mod_ssl packages to the octavia api container image to
    support configuring the TLS proxy.

    Change-Id: I6170b1f7256a4805dafefd82ed6c06d8c2c2a358
    Related-Bug: #1789303
    (cherry picked from commit 96687674ddaf4ceab326b6ffc12ddac47a094169)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 9.2.0

This issue was fixed in the openstack/tripleo-heat-templates 9.2.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 8.3.0

This issue was fixed in the openstack/tripleo-heat-templates 8.3.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.