Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1283414

Summary:	rhel-osp-director: 8.0 - not possible to deploy undercloud with SSL.
Product:	Red Hat OpenStack	Reporter:	Alexander Chuzhoy <sasha>
Component:	instack-undercloud	Assignee:	James Slagle <jslagle>
Status:	CLOSED ERRATA	QA Contact:	Alexander Chuzhoy <sasha>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	8.0 (Liberty)	CC:	bnemec, emacchi, jcoufal, mburns, mcornea, rhallise, rhel-osp-director-maint, vcojot
Target Milestone:	ga	Keywords:	Reopened
Target Release:	8.0 (Liberty)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	instack-undercloud-2.2.2-1.el7ost	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-04-07 21:43:07 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Alexander Chuzhoy 2015-11-18 22:04:36 UTC

rhel-osp-director: 8.0 - not possible to deploy undercloud with SSL.
Environment:
instack-undercloud-2.1.3-1.el7ost.noarch

Need to add the ability to deploy undercloud with SSL.

Comment 3 Ryan Hallisey 2015-11-20 17:17:04 UTC

allow dnsmasq_t default_t:dir read;

You need to relabel tftpboot.

`restorecon -Rv /tftpboot`

Comment 4 Jaromir Coufal 2016-01-04 16:49:46 UTC

Should be part of global SSL work targeted for OSP8.

Comment 5 Ryan Hallisey 2016-01-04 17:16:11 UTC

The labeling here will be fixed by bz#1280083.  It needs to be handled in puppet.

*** This bug has been marked as a duplicate of bug 1280083 ***

Comment 6 chris alfonso 2016-01-04 17:58:15 UTC

Let's keep this open and have the two different scenarios tested, even though the fix is the same.

Comment 7 Marius Cornea 2016-01-06 12:42:11 UTC

There is no undercloud_service_certificate directive in undercloud.conf.

Comment 8 Ben Nemec 2016-01-06 18:00:47 UTC

Undercloud ssl is merged to upstream master.  Needs a backport to stable/liberty, and then will need a new downstream package build to pick up the changes for OSP 8.

Comment 9 Emilien Macchi 2016-02-23 13:42:20 UTC

Ben, can we update this BZ maybe? It seems your upstream patch has been merged.

Comment 10 Ben Nemec 2016-02-24 22:16:55 UTC

It looks like the fixed build is available in the latest puddle, so this should be ready for QA.

Comment 13 Alexander Chuzhoy 2016-02-25 20:47:42 UTC

Verified:
Environment:
instack-undercloud-2.2.2-2.el7ost.noarch

Was able to deploy undercloud with SSL.

Comment 15 errata-xmlrpc 2016-04-07 21:43:07 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0604.html