Bug 2073491
| Summary: | Octavia cannot reload haproxy because of selinux policies | |||
|---|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Gregory Thiemonge <gthiemon> | |
| Component: | openstack-octavia | Assignee: | Gregory Thiemonge <gthiemon> | |
| Status: | CLOSED ERRATA | QA Contact: | Bruna Bonguardo <bbonguar> | |
| Severity: | high | Docs Contact: | ||
| Priority: | high | |||
| Version: | 17.0 (Wallaby) | CC: | cjeanner, ihrachys, jpichon, lhh, lpeer, lvrabec, majopela, oschwart, scohen, wznoinsk | |
| Target Milestone: | Alpha | Keywords: | AutomationBlocker, Triaged | |
| Target Release: | 17.0 | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | openstack-octavia-8.0.2-0.20220422120539.1329b57.el9ost | Doc Type: | No Doc Update | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2078539 (view as bug list) | Environment: | ||
| Last Closed: | 2022-09-21 12:20:36 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2078539, 2136558 | |||
|
Description
Gregory Thiemonge
2022-04-08 15:33:41 UTC
hi Gregory can this problem be seen/retested when running tests from one of the tempest/rally/tobiko frameworks do you know? (In reply to Waldemar Znoinski from comment #3) > hi Gregory > > can this problem be seen/retested when running tests from one of the > tempest/rally/tobiko frameworks do you know? Yes, we can use the octavia-tempest-plugin to test it. Sadly it is complicated to detect the issues because the selinux problems occur in a service VM created by Octavia and we don't have direct access or export to audit.log Backport proposed on stable/wallaby The Octavia OSP17 jobs run on RHEL9, so as the following build https://rhos-ci-jenkins.lab.eng.tlv2.redhat.com/view/DFG/view/network/view/octavia/job/DFG-network-octavia-17.0_director-rhel-virthost-3cont_3comp-ipv4-geneve-actstby/36/testReport/ which was run with the RHOS-17.0-RHEL-9-20220511.n.1 puddle, contains tests which show that the fix works, I am moving this BZ to VERIFIED. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 17.0 (Wallaby)), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2022:6543 |