Red Hat Bugzilla – Bug 1548102
[3.7] A route with host 'localhost' can freeze router reloads under some circumstances
Last modified: 2018-04-29 10:37:19 EDT
Description of problem: We have found out that creating a route with host 'localhost' can freeze subsequent router reloads IF AND ONLY IF the environment variable ROUTER_USE_PROXY_PROTOCOL is not set. Version-Release number of selected component (if applicable): v3.6.173.0.96 How reproducible: always if ROUTER_USE_PROXY_PROTOCOL is not set Steps to Reproduce: - Ensure your router does not have ROUTER_USE_PROXY_PROTOCOL environment variable set - Create a route with 'localhost' hostname that can be admitted on routers. For instance, the one issued by this command: oc create route edge localhost-route --hostname=localhost --service=internetcheck --insecure-policy=Allow - Try to create/delete other routes so that a reload is forced. You will see errors and reloads will fail. Actual results: Errors seen at logs are like the following: E0131 16:00:58.114791 1 ratelimiter.go:52] error reloading router: exit status 1 [WARNING] 030/160028 (360) : parsing [/var/lib/haproxy/conf/haproxy.config:35] : 'option httplog' not usable with frontend 'public_ssl' (needs 'mode http'). Falling back to 'option tcplog'. - Checking http://localhost:2080 ... - Exceeded max wait time (30) in health check - 58 retry attempt(s). Expected results: Something (safety checks?) to prevent this situation from happening. Additional info: 3.9 bug: https://bugzilla.redhat.com/show_bug.cgi?id=1542612
Fixed by https://github.com/openshift/ose/pull/1078
Hi Ravi, The pull URL is not working for me, can you please give me an update on the status of this? Thanks!
This is the actual Origin PR https://github.com/openshift/origin/pull/18539 that got back ported to 3.8 and 3.7 releases (you should be able to access this pr). 3.7 back-port https://github.com/openshift/ose/pull/1078 got merged and should be available in the next 3.7.z release.
Verified this bug on v3.7.44 steps: Create service: #oc create -f https://raw.githubusercontent.com/openshift-qe/v3-testfiles/master/routing/unsecure/service_unsecure.json #oc create -f https://raw.githubusercontent.com/openshift-qe/v3-testfiles/master/routing/caddy-docker.json #oc create route edge localhost-route --hostname=localhost --service=service-unsecure --insecure-policy=Allow #oc expose svc service-unsecure ###check the last route can be accessed and make the router has been reloaded # check the router logs and no above logs
Verified this bug, see comment 5 for more detail
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:1231