Bug 1142256

Summary: remote engine-reports-setup does not write conf file to allow accessing reports from engine
Product: [Retired] oVirt Reporter: Yedidyah Bar David <didi>
Component: ovirt-engine-reportsAssignee: Yedidyah Bar David <didi>
Status: CLOSED CURRENTRELEASE QA Contact: Pavel Stehlik <pstehlik>
Severity: high Docs Contact:
Priority: high    
Version: 3.5CC: aberezin, bazulay, bugs, ecohen, gklein, iheim, movciari, rbalakri, redhat.bugzilla, sbonazzo, sherold, sradco, yeylon, ylavi
Target Milestone: ---   
Target Release: 3.5.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: integration
Fixed In Version: oVirt-3.5 GA ovirt-engine-reports-3.5.0-1.fc19.noarch.rpm Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1144079 (view as bug list) Environment:
Last Closed: 2014-10-17 12:35:31 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1144079    

Description Yedidyah Bar David 2014-09-16 12:57:51 UTC
Description of problem:

Following bug #1116851 , the engine expects in its configuration files a new setting ENGINE_REPORTS_BASE_URL, and other related settings, instead of a row in vdc_options.

The engine now also expects the certificate of reports to be in its truststore.

engine-setup, if running engine and reports on same host, should create such a file and update the truststore, and if not, ask the user to do that.

Comment 1 Yedidyah Bar David 2014-09-16 13:01:47 UTC
workaound: do this manually after setup. E.g.:

Create a file /etc/ovirt-engine/engine.conf.d/10-my-reports.conf with this content:

ENGINE_REPORTS_BASE_URL=https://REPORTS_FQDN/ovirt-engine-reports
ENGINE_REPORTS_DASHBOARD_URL=${ENGINE_REPORTS_BASE_URL}/flow.html?viewAsDashboardFrame=true
ENGINE_REPORTS_PROXY_URL=${ENGINE_REPORTS_BASE_URL}/ovirt/reports-interface
ENGINE_REPORTS_VERIFY_HOST=true
ENGINE_REPORTS_VERIFY_CHAIN=true
ENGINE_REPORTS_READ_TIMEOUT=

replace above REPORTS_FQDN with the fqdn of the reports server (same as engine if on same server).

Imported reports cert to truststore with the following command:

keytool -importcert -alias reportscacert -file /etc/pki/ovirt-engine/certs/reports.cer -keystore /etc/pki/ovirt-engine/.truststore -storepass mypass

If on remote host, replace above '/etc/pki/ovirt-engine/certs/reports.cer' with a file name containing the reports cert.

service ovirt-engine restart

Comment 2 Yedidyah Bar David 2014-09-16 13:03:51 UTC
(In reply to Yedidyah Bar David from comment #1)
> workaound: do this manually after setup. E.g.:
> 
> Create a file /etc/ovirt-engine/engine.conf.d/10-my-reports.conf with this
> content:
> 
> ENGINE_REPORTS_BASE_URL=https://REPORTS_FQDN/ovirt-engine-reports
> ENGINE_REPORTS_DASHBOARD_URL=${ENGINE_REPORTS_BASE_URL}/flow.
> html?viewAsDashboardFrame=true

Sorry, this should be:

ENGINE_REPORTS_DASHBOARD_URL=${ENGINE_REPORTS_BASE_URL}/flow.html?viewReportFlow=true

> ENGINE_REPORTS_PROXY_URL=${ENGINE_REPORTS_BASE_URL}/ovirt/reports-interface
> ENGINE_REPORTS_VERIFY_HOST=true
> ENGINE_REPORTS_VERIFY_CHAIN=true
> ENGINE_REPORTS_READ_TIMEOUT=
> 
> replace above REPORTS_FQDN with the fqdn of the reports server (same as
> engine if on same server).
> 
> Imported reports cert to truststore with the following command:
> 
> keytool -importcert -alias reportscacert -file
> /etc/pki/ovirt-engine/certs/reports.cer -keystore
> /etc/pki/ovirt-engine/.truststore -storepass mypass
> 
> If on remote host, replace above '/etc/pki/ovirt-engine/certs/reports.cer'
> with a file name containing the reports cert.
> 
> service ovirt-engine restart

Comment 3 Shirly Radco 2014-09-16 13:32:01 UTC
Barak, Arthur,

This means that 3.5 will require the workaround in order to setup reports in local and remote installations.

Do you approve?

Comment 4 Barak 2014-09-16 13:44:54 UTC
This should definitely make it to 3.5.1,
From my point of view this is a must.

Comment 5 Yedidyah Bar David 2014-09-17 05:51:28 UTC
Current http://gerrit.ovirt.org/32989 is on engine side, works only if both are on same host. Another patch will be required on reports side when it's remote.

Comment 6 Shirly Radco 2014-09-18 19:19:16 UTC
*** Bug 1142750 has been marked as a duplicate of this bug. ***

Comment 7 Sandro Bonazzola 2014-09-22 08:09:37 UTC
Not blocking 3.5.0 GA since it has been targeted for 3.5.1 only

Comment 8 Yedidyah Bar David 2014-09-23 12:18:31 UTC
Eventually solved both this one and bug 1144079 with a single patch, leaving open for qe verification.

Comment 9 Shirly Radco 2014-09-29 10:26:47 UTC
*** Bug 1147435 has been marked as a duplicate of this bug. ***

Comment 10 Sandro Bonazzola 2014-10-17 12:35:31 UTC
oVirt 3.5 has been released and should include the fix for this issue.