Bug 1289191 - Create stats socket for haproxy
Summary: Create stats socket for haproxy
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: puppet-tripleo
Version: 8.0 (Liberty)
Hardware: Unspecified
OS: Unspecified
medium
unspecified
Target Milestone: Upstream M3
: 11.0 (Ocata)
Assignee: RHOS Maint
QA Contact: nlevinki
URL:
Whiteboard:
: 1289192 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-12-07 16:06 UTC by Ryan O'Hara
Modified: 2023-09-14 03:14 UTC (History)
15 users (show)

Fixed In Version: puppet-tripleo-6.1.0-0.20170128003046.875a9f9.el7ost
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-05-17 19:25:22 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 387093 0 'None' MERGED Enable haproxy statistics unix socket 2020-06-12 03:16:08 UTC
Red Hat Product Errata RHEA-2017:1245 0 normal SHIPPED_LIVE Red Hat OpenStack Platform 11.0 Bug Fix and Enhancement Advisory 2017-05-17 23:01:50 UTC

Description Ryan O'Hara 2015-12-07 16:06:12 UTC
RHEL OSP Director should configue haproxy such that a UNIX domain socket (stats socket) is available to collect information about haproxy. This would be useful for sosreports.

To do this, simply add two lines to the "global" section of haproxy.cfg:

global
    ....
    stats socket /var/run/haproxy.sock mode 600 level user
    stats timeout 2m

Note that this socket is set to "user" level, so this socket is limited to read-only. The "stats timeout" line is optional, but since the default timeout of the stats socket is 10s, we should set this higher.

Comment 2 Mike Burns 2015-12-07 16:10:59 UTC
*** Bug 1289192 has been marked as a duplicate of this bug. ***

Comment 4 Mike Burns 2016-04-07 21:00:12 UTC
This bug did not make the OSP 8.0 release.  It is being deferred to OSP 10.

Comment 6 Michele Baldessari 2016-10-22 08:06:40 UTC
Hi Ryan,

so the review attached here produces the following global section:
global
  daemon  
  group  haproxy
  log  /dev/log local0
  maxconn  20480
  pidfile  /var/run/haproxy.pid
  ssl-default-bind-ciphers  !SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES
  ssl-default-bind-options  no-sslv3
  stats  socket /var/run/haproxy.sock mode 600 level user
  stats  timeout 2m
  user  haproxy

Do we need to add any docs in tripleo as to how to use this or anything else at all? What do you think?

Thanks,
Michele

Comment 8 Thierry Vignaud 2017-02-14 17:25:43 UTC
The change is in puppet-tripleo-6.1.0-0.20170128003046.875a9f9.el7ost

Comment 10 Udi Shkalim 2017-02-20 12:28:28 UTC
Verified: puppet-tripleo-6.1.0-0.20170213204914.bb53435.el7ost.noarch

Comment 12 errata-xmlrpc 2017-05-17 19:25:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:1245

Comment 13 Red Hat Bugzilla 2023-09-14 03:14:28 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days


Note You need to log in before you can comment on or make changes to this bug.