Bug 1496912

Summary:	Proxy configuration does not work in restricted IPV6 only environment
Product:	Red Hat CloudForms Management Engine	Reporter:	Satoe Imaishi <simaishi>
Component:	Appliance	Assignee:	Bo Yao <boyao>
Status:	CLOSED ERRATA	QA Contact:	Pavol Kotvan <pakotvan>
Severity:	high	Docs Contact:
Priority:	high
Version:	5.8.0	CC:	abellott, boyao, cpelland, dajohnso, jhardy, jkrocil, lcouzens, ncarboni, obarenbo, pakotvan, saali, simaishi, smallamp
Target Milestone:	GA	Keywords:	ZStream
Target Release:	5.8.2
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	proxy
Fixed In Version:	5.8.2.2	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1475954	Environment:
Last Closed:	2017-10-24 00:41:44 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	CFME Core	Target Upstream Version:
Embargoed:
Bug Depends On:	1475954
Bug Blocks:

Comment 2 CFME Bot 2017-09-29 13:26:20 UTC

New commit detected on ManageIQ/manageiq/fine:
https://github.com/ManageIQ/manageiq/commit/0bd48e2171b2a3037232e6416f2e428a07041964

commit 0bd48e2171b2a3037232e6416f2e428a07041964
Author:     Nick Carboni <ncarboni>
AuthorDate: Mon Sep 25 09:49:53 2017 -0400
Commit:     Satoe Imaishi <simaishi>
CommitDate: Fri Sep 29 09:21:47 2017 -0400

    Merge pull request #15762 from ailisp/proxy-not-work
    
    Proxy support for cloning ansible repo and add provider
    (cherry picked from commit 2526eb7300ee8e0ac0c44e4cb6950f095241fe53)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1496912

 config/settings.yml               |  8 ++++++++
 lib/embedded_ansible.rb           | 17 +++++++++++++++++
 spec/lib/embedded_ansible_spec.rb | 31 +++++++++++++++++++++++++++++++
 3 files changed, 56 insertions(+)

Comment 6 Nick Carboni 2017-10-09 17:42:36 UTC

With a new environment I was able to verify the fix using the following steps:

1. Deploy appliance
2. Configure hostname + additional networking (IPv6 specific), configure database
3. Created SSH tunnels for proxy
4. Configure cfme http proxy
5. Enable, Disable, Enable Embedded Ansible
6. Add repo (successfully).


The enable, disable, enable dance was needed because of a chicken/egg problem with the settings file that we need to add the proxy information to.

/etc/tower/settings.yml doesn't exist until the tower installation is up and running. This is the file we need to edit. Tower also requires a restart for the changes in the file to take effect. So the following timeline should explain why we need a restart:

1. Enable Embedded Ansible
 - This starts embedded ansible which creates the settings.yml file for the first time.
2. Restart Embedded Ansible (disable/enable)
 - Before start we see that settings.yml is present, so we set the proxy settings
 - Start embedded ansible

Given this, I think that the solution could use some improvement, but this should not hold up the release. Ideally I would like it if we could set the proxy settings in the inventory file when we first configure embedded ansible. That way there would be no need for the restart. Unfortunately I was not able to find any documentation on the tower side to indicate that this is possible.

I have created bug 1500034 to track improving this fix.

Comment 11 errata-xmlrpc 2017-10-24 00:41:44 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:3005