Bug 1054498 – Horizon SSL is disabled by Nagios configuration via packstack

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1054498 - Horizon SSL is disabled by Nagios configuration via packstack

Summary:	Horizon SSL is disabled by Nagios configuration via packstack

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	openstack-packstack (Show other bugs)
Sub Component:
Version:	4.0
Hardware:	Unspecified Unspecified

Priority	medium Severity medium
Target Milestone:	z2
Target Release:	4.0
Assigned To:	Ivan Chavero
QA Contact:	Attila Darazs
Docs Contact:

URL:
Whiteboard:
Keywords:	ZStream

Depends On:	966094
Blocks:	1061689
	Show dependency tree / graph

Reported:	2014-01-16 18:19 EST by Lon Hohberger
Modified:	2014-03-04 14:15 EST (History)
CC List:	5 users (show)

See Also:
Fixed In Version:	openstack-packstack-2013.2.1-0.23.dev979.el6ost
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Clones:	1061689 (view as bug list)
Environment:
Last Closed:	2014-03-04 14:15:02 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
OpenStack gerrit	68557	None	None	None	Never
Red Hat Product Errata	RHSA-2014:0233	normal	SHIPPED_LIVE	Important: openstack-packstack security and bug fix update	2014-03-04 19:10:57 EST

Groups: None (edit)

Description Lon Hohberger 2014-01-16 18:19:12 EST

Description of problem:

Nagios puppet modules disable SSL after the Horizon module enables it.


Version-Release number of selected component (if applicable): openstack-packstack-2013.2.1-0.22.dev956.el6ost.noarch


How reproducible: 100%

Steps to Reproduce:
1. packstack --os-horizon-ssl=y --allinone
2. (wait)

Actual results:

After completion, SSL for Apache is disabled - thus, Horizon SSL does not work.


Expected results:

Unknown.  The Nagios module reset the Apache configuration to largely default, clearing out the Apache SSL configuration performed by the Horizon module.


Additional info:

packstack --os-horizon-ssl=y --nagios-install=n --allinone

...works fine...

Comment 1 Ivan Chavero 2014-01-20 13:42:38 EST

Modifying the nagios template so it uses the SSL configuration given by horizon.

Comment 2 Ivan Chavero 2014-01-24 16:56:14 EST

patch submitted to gerrit code review: https://review.openstack.org/#/c/68557/

The nagios template uses the apache class, this
class overwrites the current configuration thus
deleting the horizon configurations. By checking
if horizon is installed this patch avoids the use
of the apache puppeet class in the nagios template.

Comment 3 Ivan Chavero 2014-01-27 02:16:31 EST

The nagios template uses the apache class, this
class overwrites the current configuration thus
deleting the horizon configurations. By checking
if horizon is installed this patch avoids the use
of the apache puppeet class in the nagios template.

Comment 5 Attila Darazs 2014-02-20 11:09:56 EST

Installed it with both nagios and horizon ssl enabled, and it resulted in a working https installation. Verified.

Comment 9 errata-xmlrpc 2014-03-04 14:15:02 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2014-0233.html

Note You need to log in before you can comment on or make changes to this bug.