Bug 1624335
Summary: | In Horizon, SSL related options are not configured properly | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Keigo Noha <knoha> |
Component: | openstack-tripleo-heat-templates | Assignee: | Radomir Dopieralski <rdopiera> |
Status: | CLOSED ERRATA | QA Contact: | Udi Kalifon <ukalifon> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 13.0 (Queens) | CC: | hrybacki, jrist, mburns, rdopiera |
Target Milestone: | z5 | Keywords: | Triaged, ZStream |
Target Release: | 13.0 (Queens) | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | openstack-tripleo-heat-templates-8.0.7-32.el7ost.src.rpm | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2019-03-14 13:54:51 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Keigo Noha
2018-08-31 08:58:11 UTC
I think that the reason for this setting having no effect is that it is being overriden here: https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/horizon.yaml#L70 Looking at the history, it has been always there, since the file was created. Hello Radomir, Do we have a launchpad or gerrit in upstream for this issue? I don't have we do. I will create one: https://storyboard.openstack.org/#!/story/2004254 Hello Radomir, Could you ask upstream to look at the story board to move it forward? Best Regards, Keigo Noha I will ask at today's tripleo meeting. We are not sure why this was introduced in the first place, probably to work around some transient problems we had initially at the time. I'm going to remove it and test if everything still works, and then backport it. Hello Radomir, Thank you for your work on this bugzilla. In the upstream gerrit, the gerrit is bloced by 'Blocked on Workflow Label' status. Do you need a launchpad for this issue? or could you proceed the gerrit if you can? Best Regards, Keigo Noha It looks like removing that line makes Horizon stop working in the containerized environment — the CSRF token cookie is no longer created and that makes it impossible to log in. I suspect this is some problem with haproxy configuration, I will investigate this further. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0448 |