Bug 2207941

Description of problem:
On a HA control plane deployed on VMs, we are seeing a high number of healthchecks failure in HAProxy logs for all services, but most of them impact the mysql service. 

[WARNING]  (730596) : Health check for backup server mysql/controller-1.internalapi.redhat.local failed, reason: Socket error, check duration: 1ms, status: 2/3 UP.                                                  
[WARNING]  (730596) : Health check for backup server mysql/controller-1.internalapi.redhat.local succeeded, reason: Layer7 check passed, code: 200, check duration: 89ms, status: 3/3 UP.                            

This seems to be a systemic issue on the environment, which is consuming a lot of sys time (from 10 to 30 sys time in top).

We have identified that under this situation, the galera service itself is working, but the healthcheck are incorrectly parsed by HAProxy, due to what seems to be a race condition in socket closure. 

Version-Release number of selected component (if applicable):


How reproducible:
Happens very often.

Steps to Reproduce:
1. Deploy a VM control plane with FIPS enabled 

Actual results:
Some health check fails in HAProxy logs, which might impact availability of the mysql service sporadically.

Expected results:
No healthcheck should fail on the FIPS-enabled env because the galera service is working fine.

Additional info: