Bug 1699046
Summary: | TLS Everywhere: ceph-nfs ganesha service fails to start after tripleo deployment | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Sadique Puthen <sputhenp> |
Component: | openstack-tripleo-heat-templates | Assignee: | Goutham Pacha Ravi <gouthamr> |
Status: | CLOSED ERRATA | QA Contact: | Jason Grosso <jgrosso> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | 13.0 (Queens) | CC: | gouthamr, jappleii, mburns, michele, pgrist, tbarron |
Target Milestone: | z7 | Keywords: | Triaged, ZStream |
Target Release: | 13.0 (Queens) | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | openstack-tripleo-heat-templates-8.3.1-39.el7ost | Doc Type: | Bug Fix |
Doc Text: |
Cause: NFS gateway (Ganesha) endpoint for the Shared File Systems service's (Manila) CephFS back end was being misconfigured when deploying with TLS Everywhere.
Consequence: TLS everywhere deployment with Manila and the CephFS via NFS back end fails.
Fix: The environment file pertaining to the NFS gateway endpoint has been fixed to use the Virtual IP address rather than the DNS name.
Result: TLS everywhere deployment with Manila and the CephFS via NFS back end succeeds.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2019-07-10 13:05:11 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Sadique Puthen
2019-04-11 15:52:33 UTC
Thanks, confirming this is a bug, since the BindAddr must be a valid IPv4 or IPv6 address [1], and shouldn't be a hostname/fqdn as configured. [1] https://github.com/nfs-ganesha/nfs-ganesha/blob/af26bf4/src/config_samples/config.txt#L43 after deploying OSP 13z7 build I see the following info about ceph-nfs-pacemaker ceph-nfs (systemd:ceph-nfs@pacemaker): Started controller-0 full output of command 2019-06-20.1 [heat-admin@controller-0 ~]$ sudo pcs status Cluster name: tripleo_cluster Stack: corosync Current DC: controller-2 (version 1.1.19-8.el7_6.5-c3c624ea3d) - partition with quorum Last updated: Sun Jun 23 13:04:03 2019 Last change: Fri Jun 21 03:38:12 2019 by root via cibadmin on controller-0 12 nodes configured 40 resources configured Online: [ controller-0 controller-1 controller-2 ] GuestOnline: [ galera-bundle-0@controller-1 galera-bundle-1@controller-2 galera-bundle-2@controller-0 rabbitmq-bundle-0@controller-1 rabbitmq-bundle-1@controller-2 rabbitmq-bundle-2@controller-0 redis-bundle-0@controller-1 redis-bundle-1@controller-2 redis-bundle-2@controller-0 ] Full list of resources: ip-172.17.5.13 (ocf::heartbeat:IPaddr2): Started controller-0 Docker container set: rabbitmq-bundle [192.168.24.1:8787/rhosp13/openstack-rabbitmq:pcmklatest] rabbitmq-bundle-0 (ocf::heartbeat:rabbitmq-cluster): Started controller-1 rabbitmq-bundle-1 (ocf::heartbeat:rabbitmq-cluster): Started controller-2 rabbitmq-bundle-2 (ocf::heartbeat:rabbitmq-cluster): Started controller-0 Docker container set: galera-bundle [192.168.24.1:8787/rhosp13/openstack-mariadb:pcmklatest] galera-bundle-0 (ocf::heartbeat:galera): Master controller-1 galera-bundle-1 (ocf::heartbeat:galera): Master controller-2 galera-bundle-2 (ocf::heartbeat:galera): Master controller-0 Docker container set: redis-bundle [192.168.24.1:8787/rhosp13/openstack-redis:pcmklatest] redis-bundle-0 (ocf::heartbeat:redis): Master controller-1 redis-bundle-1 (ocf::heartbeat:redis): Slave controller-2 redis-bundle-2 (ocf::heartbeat:redis): Slave controller-0 ip-192.168.24.101 (ocf::heartbeat:IPaddr2): Started controller-1 ip-10.0.0.101 (ocf::heartbeat:IPaddr2): Started controller-2 ip-172.17.1.102 (ocf::heartbeat:IPaddr2): Started controller-0 ip-172.17.1.101 (ocf::heartbeat:IPaddr2): Started controller-1 ip-172.17.3.101 (ocf::heartbeat:IPaddr2): Started controller-2 ip-172.17.4.101 (ocf::heartbeat:IPaddr2): Started controller-0 Docker container set: haproxy-bundle [192.168.24.1:8787/rhosp13/openstack-haproxy:pcmklatest] haproxy-bundle-docker-0 (ocf::heartbeat:docker): Started controller-1 haproxy-bundle-docker-1 (ocf::heartbeat:docker): Started controller-2 haproxy-bundle-docker-2 (ocf::heartbeat:docker): Started controller-0 ceph-nfs (systemd:ceph-nfs@pacemaker): Started controller-0 Docker container: openstack-cinder-volume [192.168.24.1:8787/rhosp13/openstack-cinder-volume:pcmklatest] openstack-cinder-volume-docker-0 (ocf::heartbeat:docker): Started controller-1 Docker container: openstack-manila-share [192.168.24.1:8787/rhosp13/openstack-manila-share:pcmklatest] openstack-manila-share-docker-0 (ocf::heartbeat:docker): Started controller-0 Daemon Status: corosync: active/enabled pacemaker: active/enabled pcsd: active/enabled Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:1738 |