Bug 1217555

Summary:	[RFE][HC] Configure TLS (1.2 or above) for gluster volume access from oVirt UI
Product:	[oVirt] ovirt-engine	Reporter:	Sahina Bose <sabose>
Component:	RFEs	Assignee:	Gobinda Das <godas>
Status:	CLOSED NOTABUG	QA Contact:	SATHEESARAN <sasundar>
Severity:	high	Docs Contact:
Priority:	medium
Version:	---	CC:	bugs, lsurette, mgoldboi, sabose, sasundar, srevivo, ykaul
Target Milestone:	ovirt-4.4.1	Keywords:	FutureFeature, Reopened
Target Release:	---	Flags:	rule-engine: ovirt-4.4? ylavi: planning_ack? ylavi: devel_ack? ylavi: testing_ack?
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-03-05 09:42:55 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Gluster	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1596034

Description Sahina Bose 2015-04-30 15:54:53 UTC

Description of problem:

SSL needs to be configured per gluster volume as well as on nodes to allow secure access to data for clients. This configuration needs to be supported from oVirt UI

Comment 1 Red Hat Bugzilla Rules Engine 2015-10-19 10:58:56 UTC

Target release should be placed once a package build is known to fix a issue. Since this bug is not modified, the target version has been reset. Please use target milestone to plan a fix for a oVirt release.

Comment 2 Sahina Bose 2016-07-28 10:50:37 UTC

There's an RFE opened in gdeploy for this feature - Bug 1360980. Since gdeploy will be used to prepare HC environment, priority for this is lowered - pushing this out of 4.1.0

Comment 3 Yaniv Kaul 2018-03-01 09:00:05 UTC

Raising to HIGH - rest of our encryption (in 4.2) is already using TLS 1.2.

Comment 4 Sahina Bose 2018-11-21 15:19:56 UTC

The volume configuration via cockpit handles this. Not a high priority, hence deferring this

Comment 7 Sahina Bose 2018-11-29 05:44:52 UTC

We can reuse the gluster-ansible role to setup TLS for the volume. Would this be a possibility to integrate to Cockpit and engine?

Comment 8 Gobinda Das 2020-03-05 09:42:55 UTC

We have features in gluster ansible for this.Now we don't have plan to integrate with cockpit.Closing this for now and will create one once will have plan.