Description of problem: In a default Director installation with Octavia: * On the controller, Octavia logs are world readable, where /var/log/containers/octavia and /var/log/containers/httpd/octavia-api are both 755 and the logs themselves are 644. * The /var/log/containers/octavia/worker.log has private key data (see attachment). Version-Release number of selected component (if applicable): How reproducible: The octavia.yaml file was not modified in the deployment: openstack overcloud deploy --templates -e /home/stack/templates/node-info.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services-docker/octavia.yaml -e /home/stack/templates/overcloud_images.yaml --libvirt-type qemu --ntp-server clock.redhat.com Actual results: Log files containing sensitive data are world readable. Expected results: Log files must not be world readable if sensitive data is included. Ideally, make all log files non-world-readable. Additional info: The default debug level was not changed, and was set to: debug=False Additional info: https://bugzilla.redhat.com/show_bug.cgi?id=1633019 sos report http://rhos-release.virt.bos.redhat.com/log/bz1676467
Work well on SINGLE octavia topology
Active-standby is community supported only. Could you please file a story upstream?
https://storyboard.openstack.org/#!/story/2005128
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:1680