Enabling SSL on all the components is a requirement in many deployments. RabbitMQ, MariaDB and the API endpoints should support SSL out of the box. Currently I've tried in two different ways: Option 1: During deployment Modifying the Host Group for the Controller with Ssl="true" and setting Ssl true in "Advanced Configuration" at Neutron (Controller) and Neutron compute err Puppet Could not start Service[httpd]: Execution of '/usr/bin/systemctl start httpd' returned 1: Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details. Wrapped exception: Execution of '/usr/bin/systemctl start httpd' returned 1: Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details. err /Stage[main]/Apache::Service/Service[httpd]/ensure change from stopped to running failed: Could not start Service[httpd]: Execution of '/usr/bin/systemctl start httpd' returned 1: Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details. err Puppet Could not start Service[neutron-server]: Execution of '/usr/bin/systemctl start neutron-server' returned 1: Job for neutron-server.service failed. See 'systemctl status neutron-server.service' and 'journalctl -xn' for details. Wrapped exception: Execution of '/usr/bin/systemctl start neutron-server' returned 1: Job for neutron-server.service failed. See 'systemctl status neutron-server.service' and 'journalctl -xn' for details. err /Stage[main]/Neutron::Server/Service[neutron-server]/ensure change from stopped to running failed: Could not start Service[neutron-server]: Execution of '/usr/bin/systemctl start neutron-server' returned 1: Job for neutron-server.service failed. See 'systemctl status neutron-server.service' and 'journalctl -xn' for details. Option 2: After deployment. I just get this: err /Stage[main]/Neutron::Server/Service[neutron-server] Could not restart Service[neutron-server]: Execution of '/usr/bin/systemctl restart neutron-server' returned 1: Job for neutron-server.service failed. See 'systemctl status neutron-server.service' and 'journalctl -xn' for details. Wrapped exception: Execution of '/usr/bin/systemctl restart neutron-server' returned 1: Job for neutron-server.service failed. See 'systemctl status neutron-server.service' and 'journalctl -xn' for details. err /Stage[main]/Neutron::Server/Service[neutron-server] Failed to call refresh: Could not restart Service[neutron-server]: Execution of '/usr/bin/systemctl restart neutron-server' returned 1: Job for neutron-server.service failed. See 'systemctl status neutron-server.service' and 'journalctl -xn' for details. err /Stage[main]/Apache::Service/Service[httpd] Could not restart Service[httpd]: Execution of '/usr/bin/systemctl restart httpd' returned 1: Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details. Wrapped exception: Execution of '/usr/bin/systemctl restart httpd' returned 1: Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details. err /Stage[main]/Apache::Service/Service[httpd] Failed to call refresh: Could not restart Service[httpd]: Execution of '/usr/bin/systemctl restart httpd' returned 1: Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details. Versions: openstack-foreman-installer-2.0.21-1.el6ost.noarch rhel-osp-installer-0.1.10-2.el6ost.noarch openstack-puppet-modules-2014.1-20.2.el6ost.noarch
Arthur, Can you set priority for this? Is this something we want configurable?
(In reply to Mike Burns from comment #3) > Arthur, > > Can you set priority for this? > Is this something we want configurable? We do want it configurable in services' wizard, I'm tracking this request in Trello so we should plan this in one of the upcomming sprints. Until we add this to services' Wizard we should document how to enable/configure SSL via Advanced options.
*** This bug has been marked as a duplicate of bug 998623 ***