Bug 1288475

Summary:	SSL enabled undercloud doesn't set the Ceilometer URL to https protocol
Product:	Red Hat OpenStack	Reporter:	Marius Cornea <mcornea>
Component:	os-cloud-config	Assignee:	Ben Nemec <bnemec>
Status:	CLOSED ERRATA	QA Contact:	Marius Cornea <mcornea>
Severity:	high	Docs Contact:
Priority:	urgent
Version:	8.0 (Liberty)	CC:	achernet, ddomingo, emacchi, hbrock, kbasil, mburns, rhel-osp-director-maint
Target Milestone:	ga	Keywords:	Triaged
Target Release:	8.0 (Liberty)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	os-cloud-config-0.3.0-4.el7ost	Doc Type:	Bug Fix
Doc Text:	A bug in the Identity service's endpoint registration code failed to mark the Telemetry service as SSL-enabled. This prevented the Telemetry service endpoint from being registered as HTTPS. This update fixes the bug: the Identity service now correctly registers Telemetry, and Telemetry traffic is now encrypted as expected.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-04-07 21:43:31 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Marius Cornea 2015-12-04 11:14:23 UTC

Description of problem:
When deploying an SSL enabled undercloud all the Ceilometer endpoint URLs are using http protocol.

Version-Release number of selected component (if applicable):
instack-undercloud-2.1.2-29.el7ost.noarch

How reproducible:
100%

Steps to Reproduce:
1. Deploy undercloud with SSL 
2. keystone endpoint-list | grep 8777

Actual results:
| 2bb46bd274fa41ef88e5e42af7d69432 | regionOne |             http://192.0.2.2:8777/            |            http://192.0.2.1:8777/           |         http://192.0.2.1:8777/         | 4e228453b4bd41b2b9a8b6acf63e3197 |

Expected results:
I'd expect the public endpoint to be set to https as the other endpoints are set.

Comment 2 Ben Nemec 2016-01-05 19:51:39 UTC

This should be fixed in 8.0.  The latest ssl undercloud change isn't using os-cloud-config to set the endpoints (which is why they were wrong in 7.0) and it does set ceilometer to https.

Comment 4 Marius Cornea 2016-02-29 12:03:25 UTC

os-cloud-config-0.3.0-4.el7ost.noarch

| 5c419b0958664c45a755b147e9cf5ffe | regionOne |            https://192.0.2.2:13777            |            http://192.0.2.1:8777            |         http://192.0.2.1:8777          | e145d23ec38c4e60a60d9a190d1e89ac |

Comment 6 errata-xmlrpc 2016-04-07 21:43:31 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0604.html