Bug 1331847

Summary:	Packstack fails if --os-horizon-ssl=y
Product:	Red Hat OpenStack	Reporter:	Forrest Taylor <ftaylor>
Component:	openstack-packstack	Assignee:	Ivan Chavero <ichavero>
Status:	CLOSED ERRATA	QA Contact:	Shai Revivo <srevivo>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.0 (Liberty)	CC:	aortega, apevec, derekh, ichavero, jpena, morgado.santos, mrugesh.raval, nlevinki, srevivo
Target Milestone:	async	Keywords:	Triaged, ZStream
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-packstack-7.0.0-0.17.dev1702.g490e674.el7ost	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	1326887	Environment:
Last Closed:	2016-06-29 13:58:33 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1326887
Bug Blocks:

Description Forrest Taylor 2016-04-29 19:21:11 UTC

+++ This bug was initially created as a clone of Bug #1326887 +++

Description of problem:

When SSL for horizon is enabled, the Packstack installation fails, because httpd cant get restarted. 


Version-Release number of selected component (if applicable):
openstack-packstack.noarch       1:7.0.0-0.14.dev1702.g490e674.el7ost @OpenStack
openstack-packstack-puppet.noarch
                                 1:7.0.0-0.14.dev1702.g490e674.el7ost @OpenStack


How reproducible: 100%


Steps to Reproduce:
1. sudo yum install -y openstack-packstack
2. packstack --allinone --os-horizon-ssl=y

Actual results:

ERROR : Error appeared during Puppet run: 10.0.0.3_horizon.pp
Error: /Stage[main]/Apache::Service/Service[httpd]: Failed to call refresh: Could not restart Service[httpd]: Execution of '/usr/bin/systemctl restart httpd' returned 1: Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details


Workarounds:

/etc/httpd/conf.d/ssl.conf has: Listen 443 https
Comment the line in /etc/httpd/conf.d/ssl.conf and run packstack again


The problem here is that puppet-horizon originally did not enable port 443 by default, so we created a workaround for this [1]. Recent versions now set the port correctly [2], so the workaround has to be removed from PackStack.

[1] https://github.com/openstack/packstack/blob/master/packstack/puppet/templates/horizon.pp#L55
[2] https://github.com/puppetlabs/puppetlabs-apache/blob/b14c238eecb4e90d03b3c4cb841fe9b035df80c2/manifests/init.pp#L399

Comment 3 Ivan Chavero 2016-05-06 19:30:51 UTC

This has been fixed upstream, creating package

Comment 6 Ivan Chavero 2016-05-24 06:29:43 UTC

Backport ready: https://review.openstack.org/#/c/320184/

Comment 7 Ivan Chavero 2016-05-30 18:48:04 UTC

Correct backport: https://review.openstack.org/#/c/320556/

Comment 11 nlevinki 2016-06-28 07:20:21 UTC

automation passed
https://rhos-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/rhos-jenkins-rhos-8.0-puddle-rhel-7.2-multi-node-packstack-neutron-ml2-gre-rabbitmq-tempest-rpm-all/16/

Comment 13 errata-xmlrpc 2016-06-29 13:58:33 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1354