Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1496912 - Proxy configuration does not work in restricted IPV6 only environment
Proxy configuration does not work in restricted IPV6 only environment
Status: CLOSED ERRATA
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance (Show other bugs)
5.8.0
Unspecified Unspecified
high Severity high
: GA
: 5.8.2
Assigned To: Bo Yao
Pavol Kotvan
proxy
: ZStream
Depends On: 1475954
Blocks:
  Show dependency treegraph
 
Reported: 2017-09-28 14:25 EDT by Satoe Imaishi
Modified: 2017-10-23 20:41 EDT (History)
13 users (show)

See Also:
Fixed In Version: 5.8.2.2
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1475954
Environment:
Last Closed: 2017-10-23 20:41:44 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2017:3005 normal SHIPPED_LIVE Important: Red Hat CloudForms security, bug fix, and enhancement update 2017-10-24 00:15:49 EDT

  None (edit)
Comment 2 CFME Bot 2017-09-29 09:26:20 EDT
New commit detected on ManageIQ/manageiq/fine:
https://github.com/ManageIQ/manageiq/commit/0bd48e2171b2a3037232e6416f2e428a07041964

commit 0bd48e2171b2a3037232e6416f2e428a07041964
Author:     Nick Carboni <ncarboni@redhat.com>
AuthorDate: Mon Sep 25 09:49:53 2017 -0400
Commit:     Satoe Imaishi <simaishi@redhat.com>
CommitDate: Fri Sep 29 09:21:47 2017 -0400

    Merge pull request #15762 from ailisp/proxy-not-work
    
    Proxy support for cloning ansible repo and add provider
    (cherry picked from commit 2526eb7300ee8e0ac0c44e4cb6950f095241fe53)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1496912

 config/settings.yml               |  8 ++++++++
 lib/embedded_ansible.rb           | 17 +++++++++++++++++
 spec/lib/embedded_ansible_spec.rb | 31 +++++++++++++++++++++++++++++++
 3 files changed, 56 insertions(+)
Comment 6 Nick Carboni 2017-10-09 13:42:36 EDT
With a new environment I was able to verify the fix using the following steps:

1. Deploy appliance
2. Configure hostname + additional networking (IPv6 specific), configure database
3. Created SSH tunnels for proxy
4. Configure cfme http proxy
5. Enable, Disable, Enable Embedded Ansible
6. Add repo (successfully).


The enable, disable, enable dance was needed because of a chicken/egg problem with the settings file that we need to add the proxy information to.

/etc/tower/settings.yml doesn't exist until the tower installation is up and running. This is the file we need to edit. Tower also requires a restart for the changes in the file to take effect. So the following timeline should explain why we need a restart:

1. Enable Embedded Ansible
 - This starts embedded ansible which creates the settings.yml file for the first time.
2. Restart Embedded Ansible (disable/enable)
 - Before start we see that settings.yml is present, so we set the proxy settings
 - Start embedded ansible

Given this, I think that the solution could use some improvement, but this should not hold up the release. Ideally I would like it if we could set the proxy settings in the inventory file when we first configure embedded ansible. That way there would be no need for the restart. Unfortunately I was not able to find any documentation on the tower side to indicate that this is possible.

I have created bug 1500034 to track improving this fix.
Comment 11 errata-xmlrpc 2017-10-23 20:41:44 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:3005

Note You need to log in before you can comment on or make changes to this bug.