Back to bug 1029576

Who When What Removed Added
Mike Orazi 2013-11-12 16:21:42 UTC CC morazi
Mike Orazi 2013-11-12 16:26:34 UTC Blocks 1029579
RHEL Program Management 2013-11-12 16:30:38 UTC Target Release --- 4.0
Alvaro Lopez Ortega 2013-11-15 13:29:21 UTC Keywords Triaged
CC aortega
Assignee rhos-maint bnemec
Severity unspecified medium
Alvaro Lopez Ortega 2013-12-04 17:14:29 UTC Assignee bnemec ichavero
Perry Myers 2013-12-05 18:56:45 UTC CC pmyers
Target Milestone --- async
Scott Lewis 2013-12-13 18:16:24 UTC Keywords ZStream
Alvaro Lopez Ortega 2014-01-07 17:32:03 UTC Whiteboard mid-Jan
Scott Lewis 2014-01-08 19:44:01 UTC Target Milestone async A1
Scott Lewis 2014-01-08 19:53:18 UTC Whiteboard mid-Jan
Ivan Chavero 2014-01-10 19:41:40 UTC Status NEW POST
Link ID OpenStack gerrit 65636
Ivan Chavero 2014-01-10 21:40:02 UTC Status POST MODIFIED
Fixed In Version openstack-packstack-2013.2.1-0.21.dev948.el6ost
Ami Jeain 2014-01-12 15:13:27 UTC CC ajeain
Martin Magr 2014-01-12 22:05:18 UTC CC mmagr
Fixed In Version openstack-packstack-2013.2.1-0.21.dev948.el6ost openstack-puppet-modules-2013.2-5.el6ost
John Skeoch 2014-01-13 01:07:11 UTC CC hateya
errata-xmlrpc 2014-01-13 15:13:29 UTC Status MODIFIED ON_QA
Nir Magnezi 2014-01-15 13:46:24 UTC CC ichavero
Flags needinfo?(ichavero)
Ivan Chavero 2014-01-15 15:17:52 UTC Flags needinfo?(ichavero)
Nir Magnezi 2014-01-15 15:24:22 UTC Status ON_QA VERIFIED
Rob Crittenden 2014-01-16 19:38:47 UTC Doc Text Cause: There were no options to configure qpid, mysql and horizon with SSL using puppet.

Consequence: It was difficult if not impossible to configure SSL to encrypt backend communication.

Fix: New options were added to puppet-qpid, including two new modules, puppet-nssdb and puppet-certmonger. The former is used to manage NSS-based security libraries and the later is used for handing automatic issuance of SSL certificates from an IdM server. New options were also added to mysql. The top-level mysql module had support for SSL but the OpenStack module did not. Horizon had an option to enable SSL but it didn't actually do that.

Result: The lower level puppet modules now support enabling SSL. This will provide the building blocks for securing services with SSL.
Bruce Reeler 2014-01-20 01:56:47 UTC CC breeler
Flags needinfo?(ichavero)
errata-xmlrpc 2014-01-22 16:07:52 UTC Status VERIFIED RELEASE_PENDING
Scott Lewis 2014-01-23 14:23:50 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2014-01-23 09:23:50 UTC
Ivan Chavero 2014-06-09 15:33:12 UTC Flags needinfo?(ichavero)
Perry Myers 2016-04-26 23:40:22 UTC CC pmyers

Back to bug 1029576