Bug 1054498 - Horizon SSL is disabled by Nagios configuration via packstack
Summary: Horizon SSL is disabled by Nagios configuration via packstack
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-packstack
Version: 4.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: z2
: 4.0
Assignee: Ivan Chavero
QA Contact: Attila Darazs
URL:
Whiteboard:
Depends On: 966094
Blocks: 1061689
TreeView+ depends on / blocked
 
Reported: 2014-01-16 23:19 UTC by Lon Hohberger
Modified: 2022-07-09 06:33 UTC (History)
5 users (show)

Fixed In Version: openstack-packstack-2013.2.1-0.23.dev979.el6ost
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1061689 (view as bug list)
Environment:
Last Closed: 2014-03-04 19:15:02 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 68557 0 None None None Never
Red Hat Issue Tracker OSP-16416 0 None None None 2022-07-09 06:33:20 UTC
Red Hat Product Errata RHSA-2014:0233 0 normal SHIPPED_LIVE Important: openstack-packstack security and bug fix update 2014-03-05 00:10:57 UTC

Description Lon Hohberger 2014-01-16 23:19:12 UTC
Description of problem:

Nagios puppet modules disable SSL after the Horizon module enables it.


Version-Release number of selected component (if applicable): openstack-packstack-2013.2.1-0.22.dev956.el6ost.noarch


How reproducible: 100%

Steps to Reproduce:
1. packstack --os-horizon-ssl=y --allinone
2. (wait)

Actual results:

After completion, SSL for Apache is disabled - thus, Horizon SSL does not work.


Expected results:

Unknown.  The Nagios module reset the Apache configuration to largely default, clearing out the Apache SSL configuration performed by the Horizon module.


Additional info:

packstack --os-horizon-ssl=y --nagios-install=n --allinone

...works fine...

Comment 1 Ivan Chavero 2014-01-20 18:42:38 UTC
Modifying the nagios template so it uses the SSL configuration given by horizon.

Comment 2 Ivan Chavero 2014-01-24 21:56:14 UTC
patch submitted to gerrit code review: https://review.openstack.org/#/c/68557/

The nagios template uses the apache class, this
class overwrites the current configuration thus
deleting the horizon configurations. By checking
if horizon is installed this patch avoids the use
of the apache puppeet class in the nagios template.

Comment 3 Ivan Chavero 2014-01-27 07:16:31 UTC
The nagios template uses the apache class, this
class overwrites the current configuration thus
deleting the horizon configurations. By checking
if horizon is installed this patch avoids the use
of the apache puppeet class in the nagios template.

Comment 5 Attila Darazs 2014-02-20 16:09:56 UTC
Installed it with both nagios and horizon ssl enabled, and it resulted in a working https installation. Verified.

Comment 9 errata-xmlrpc 2014-03-04 19:15:02 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2014-0233.html


Note You need to log in before you can comment on or make changes to this bug.