Bug 1712922

Summary: QDR needs SSL to correctly communicate with SAF server side containers [openstack-15]
Product: Red Hat OpenStack Reporter: Ryan McCabe <rmccabe>
Component: openstack-tripleo-heat-templatesAssignee: Martin Magr <mmagr>
Status: CLOSED ERRATA QA Contact: Leonid Natapov <lnatapov>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 15.0 (Stein)CC: apannu, lmadsen, lnatapov, mburns, mmagr, mschuppe, pkilambi, rmccabe, shdunne, slinaber, ssmolyak, vkapalav
Target Milestone: asyncKeywords: TestOnly, Triaged, ZStream
Target Release: 15.0 (Stein)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-10.6.2-0.20190927170449.49defb0.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1700918 Environment:
Last Closed: 2020-03-05 11:59:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1700918, 1704976, 1731517    
Bug Blocks: 1701020    

Comment 6 Leonid Natapov 2020-02-27 23:07:49 UTC
tested according to 

[root@controller-0 metrics-qdr]# cat cat /var/lib/config-data/puppet-generated/metrics-qdr/etc/qpid-dispatch/qdrouterd.conf
cat: cat: No such file or directory
##
## Licensed to the Apache Software Foundation (ASF) under one
## or more contributor license agreements.  See the NOTICE file
## distributed with this work for additional information
## regarding copyright ownership.  The ASF licenses this file
## to you under the Apache License, Version 2.0 (the
## "License"); you may not use this file except in compliance
## with the License.  You may obtain a copy of the License at
##
##   http://www.apache.org/licenses/LICENSE-2.0
##
## Unless required by applicable law or agreed to in writing,
## software distributed under the License is distributed on an
## "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
## KIND, either express or implied.  See the License for the
## specific language governing permissions and limitations
## under the License
##

# See the qdrouterd.conf (5) manual page for information about this
# file's format and options.

router {
    mode: edge
    id: Router.controller-0.redhat.local
    workerThreads: 4
    debugDump: /var/log/qdrouterd
    saslConfigPath: /etc/sasl2
    saslConfigName: qdrouterd
}


sslProfile{
    name: tlsProfile
}


listener {
    host: 172.17.1.59
    port: 5666
    authenticatePeer: no
    saslMechanisms: ANONYMOUS
}


connector {
    host: qdr-white-port-5671-sa-telemetry.apps.dev7.nfvpe.site
    port: 443
    role: edge
    sslProfile: tlsProfile
    verifyHostname: false
}


address {
    prefix: unicast
    distribution: closest
}

address {
    prefix: exclusive
    distribution: closest
}

address {
    prefix: broadcast
    distribution: multicast
}

address {
    distribution: multicast
    prefix: collectd/notify
}

address {
    distribution: multicast
    prefix: collectd/telemetry
}

address {
    distribution: multicast
    prefix: ceilometer/metering.sample
}

address {
    distribution: multicast
    prefix: ceilometer/event.sample
}



log {
   module: DEFAULT
   enable: info+
   timestamp: true
   output: /var/log/qdrouterd/metrics-qdr.log
}
[root@controller-0 metrics-qdr]# 




2020-02-27 22:19:29.932684 +0000 SERVER (info) Container Name: Router.controller-0.redhat.local
2020-02-27 22:19:29.932808 +0000 ROUTER (info) Router started in Edge mode
2020-02-27 22:19:29.932836 +0000 ROUTER (info) Version: Red Hat AMQ Interconnect 1.5.0 (qpid-dispatch 1.8.0)
2020-02-27 22:19:29.943754 +0000 AGENT (info) Activating management agent on $_management_internal
2020-02-27 22:19:29.943931 +0000 ROUTER (info) Core module enabled: edge_router
2020-02-27 22:19:29.943970 +0000 ROUTER (info) Core module present but disabled: core_test_hooks
2020-02-27 22:19:29.943990 +0000 ROUTER (info) Core module present but disabled: edge_addr_tracking
2020-02-27 22:19:29.944014 +0000 ROUTER (info) Core module present but disabled: address_lookup_server
2020-02-27 22:19:29.944031 +0000 ROUTER (info) Core module enabled: address_lookup_client
2020-02-27 22:19:29.944040 +0000 ROUTER (info) Router Core thread running. 0/Router.controller-0.redhat.local
2020-02-27 22:19:29.944054 +0000 ROUTER (info) In-process subscription M/$management
2020-02-27 22:19:29.944068 +0000 ROUTER (info) In-process subscription L/$management
2020-02-27 22:19:29.944079 +0000 ROUTER (info) In-process subscription L/$_management_internal
2020-02-27 22:19:29.946207 +0000 POLICY (info) Policy configured maxConnections: 65535, policyDir: '',access rules enabled: 'false', use hostname patterns: 'false'
2020-02-27 22:19:29.947276 +0000 POLICY (info) Policy fallback defaultVhost is defined: '$default'
2020-02-27 22:19:29.947419 +0000 CONN_MGR (info) Created SSL Profile with name tlsProfile 
2020-02-27 22:19:29.948128 +0000 CONN_MGR (info) Configured Listener: 172.17.1.59:5666 proto=any, role=normal
2020-02-27 22:19:29.949644 +0000 CONN_MGR (info) Configured Connector: qdr-white-port-5671-sa-telemetry.apps.dev7.nfvpe.site:443 proto=any, role=edge, sslProfile=tlsProfile
2020-02-27 22:19:29.954219 +0000 SERVER (notice) Operational, 4 Threads Running (process ID 7)
2020-02-27 22:19:29.954613 +0000 SERVER (notice) Listening on 172.17.1.59:5666
2020-02-27 22:37:00.015665 +0000 SERVER (info) [C46] Accepted connection to 172.17.1.59:5666 from 172.17.1.59:43758
2020-02-27 22:37:00.027304 +0000 ROUTER (info) [C46] Connection Opened: dir=in host=172.17.1.59:43758 vhost= encrypted=no auth=ANONYMOUS user=anonymous container_id=metrics props=
2020-02-27 22:37:00.027567 +0000 ROUTER (info) [C46][L8] Link attached: dir=in source={<none> expire:sess} target={<none> expire:sess}

Comment 8 errata-xmlrpc 2020-03-05 11:59:04 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0643