tripleo

barbican-api and octavia-api fail to deploy when TLS everywhere is enabled

Bug #1782392 reported by Andrew Austin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Medium
Andrew Austin
tripleo rocky-rc1

Bug Description

When deploying a fresh overcloud using either Barbican API or Octavia API along with TLS everywhere, the deployment fails with a MySQL authentication error due to a missing my.cnf.d file inside the db_sync container.

See original description
Andrew Austin (marbindrakon)
Changed in tripleo:
assignee: nobody → Andrew Austin (marbindrakon)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.openstack.org/583653

Andrew Austin (marbindrakon)
summary: - barbican-api fails to deploy when TLS everywhere is enabled
+ barbican-api and octavia-api fail to deploy when TLS everywhere is
+ enabled
description: updated
Emilien Macchi (emilienm)
Changed in tripleo:
importance: Undecided → Medium
milestone: none → rocky-3
Emilien Macchi (emilienm)
Changed in tripleo:
milestone: rocky-3 → rocky-rc1
Emilien Macchi (emilienm)
Changed in tripleo:
milestone: rocky-rc1 → stein-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/586621

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.openstack.org/583653
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=d10ba6f84ad5a25cea7d7ebc415d0f7c6e9f14d4
Submitter: Zuul
Branch: master

commit d10ba6f84ad5a25cea7d7ebc415d0f7c6e9f14d4
Author: Andrew Austin <email address hidden>
Date: Wed Jul 18 15:58:12 2018 +0000

    Mount my.cnf.d into the db_sync container for Barbican and Octavia.

    This ensures that the generated my.cnf.d configurations are present
    in the Barbican and Octavia db_sync containers. Without these settings,
    a MySQL authentication error stops the db sync when TLS is enabled for
    MySQL.

    Change-Id: I8aaabf013b50b963e9a973b2ccedcbd4f6a9197d
    Closes-Bug: 1782392

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (stable/queens)

Reviewed: https://review.openstack.org/586621
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=ce074d32878599aa92f4bf58c4950a9a84924aa0
Submitter: Zuul
Branch: stable/queens

commit ce074d32878599aa92f4bf58c4950a9a84924aa0
Author: Andrew Austin <email address hidden>
Date: Wed Jul 18 15:58:12 2018 +0000

    Mount my.cnf.d into the db_sync container for Barbican and Octavia.

    This ensures that the generated my.cnf.d configurations are present
    in the Barbican and Octavia db_sync containers. Without these settings,
    a MySQL authentication error stops the db sync when TLS is enabled for
    MySQL.

    Change-Id: I8aaabf013b50b963e9a973b2ccedcbd4f6a9197d
    Closes-Bug: 1782392
    (cherry picked from commit d10ba6f84ad5a25cea7d7ebc415d0f7c6e9f14d4)

tags: added: in-stable-queens
Emilien Macchi (emilienm)
Changed in tripleo:
milestone: stein-1 → rocky-rc1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 8.0.5

This issue was fixed in the openstack/tripleo-heat-templates 8.0.5 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 9.0.0.0rc1

This issue was fixed in the openstack/tripleo-heat-templates 9.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.