Bug 1289191

Summary: Create stats socket for haproxy
Product: Red Hat OpenStack Reporter: Ryan O'Hara <rohara>
Component: puppet-tripleoAssignee: RHOS Maint <rhos-maint>
Status: CLOSED ERRATA QA Contact: nlevinki <nlevinki>
Severity: unspecified Docs Contact:
Priority: medium    
Version: 8.0 (Liberty)CC: bperkins, fdinitto, jcoufal, jjoyce, jschluet, mburns, mcornea, michele, nlevinki, rhel-osp-director-maint, rohara, sclewis, slinaber, tvignaud, ushkalim
Target Milestone: Upstream M3Keywords: FutureFeature, InstallerIntegration, Triaged
Target Release: 11.0 (Ocata)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: puppet-tripleo-6.1.0-0.20170128003046.875a9f9.el7ost Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-05-17 19:25:22 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ryan O'Hara 2015-12-07 16:06:12 UTC
RHEL OSP Director should configue haproxy such that a UNIX domain socket (stats socket) is available to collect information about haproxy. This would be useful for sosreports.

To do this, simply add two lines to the "global" section of haproxy.cfg:

global
    ....
    stats socket /var/run/haproxy.sock mode 600 level user
    stats timeout 2m

Note that this socket is set to "user" level, so this socket is limited to read-only. The "stats timeout" line is optional, but since the default timeout of the stats socket is 10s, we should set this higher.

Comment 2 Mike Burns 2015-12-07 16:10:59 UTC
*** Bug 1289192 has been marked as a duplicate of this bug. ***

Comment 4 Mike Burns 2016-04-07 21:00:12 UTC
This bug did not make the OSP 8.0 release.  It is being deferred to OSP 10.

Comment 6 Michele Baldessari 2016-10-22 08:06:40 UTC
Hi Ryan,

so the review attached here produces the following global section:
global
  daemon  
  group  haproxy
  log  /dev/log local0
  maxconn  20480
  pidfile  /var/run/haproxy.pid
  ssl-default-bind-ciphers  !SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES
  ssl-default-bind-options  no-sslv3
  stats  socket /var/run/haproxy.sock mode 600 level user
  stats  timeout 2m
  user  haproxy

Do we need to add any docs in tripleo as to how to use this or anything else at all? What do you think?

Thanks,
Michele

Comment 8 Thierry Vignaud 2017-02-14 17:25:43 UTC
The change is in puppet-tripleo-6.1.0-0.20170128003046.875a9f9.el7ost

Comment 10 Udi Shkalim 2017-02-20 12:28:28 UTC
Verified: puppet-tripleo-6.1.0-0.20170213204914.bb53435.el7ost.noarch

Comment 12 errata-xmlrpc 2017-05-17 19:25:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:1245

Comment 13 Red Hat Bugzilla 2023-09-14 03:14:28 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days