Bug 1709209 - RHOSP13z5 or later prevent to access haproxy stats because of commit 3f8ce6fd96bc4f28a052b4c87a19b4b152734091
Summary: RHOSP13z5 or later prevent to access haproxy stats because of commit 3f8ce6fd...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 13.0 (Queens)
Hardware: x86_64
OS: Unspecified
high
high
Target Milestone: z7
: 13.0 (Queens)
Assignee: Michele Baldessari
QA Contact: pkomarov
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-05-13 08:03 UTC by Keigo Noha
Modified: 2023-03-24 14:48 UTC (History)
5 users (show)

Fixed In Version: puppet-tripleo-8.4.1-8.el7ost openstack-tripleo-heat-templates-8.3.1-32.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-07-10 13:05:27 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1829338 0 None None None 2019-05-16 07:20:24 UTC
OpenStack gerrit 662137 0 None None None 2019-05-30 06:32:43 UTC
OpenStack gerrit 662138 0 None None None 2019-05-30 06:32:43 UTC
Red Hat Product Errata RHBA-2019:1738 0 None None None 2019-07-10 13:05:48 UTC

Description Keigo Noha 2019-05-13 08:03:43 UTC
Description of problem:
RHOSP13z5 or later prevent to access haproxy stats because of commit 3f8ce6fd96bc4f28a052b4c87a19b4b152734091.

The commit overwrites tripleo.haproxy.firewall_rules.
However, the parameter is also used at puppet/services/haproxy.yaml.

~~~
outputs:
  role_data:
    description: Role data for the HAproxy role.
    value:
      service_name: haproxy
      monitoring_subscription: {get_param: MonitoringSubscriptionHaproxy}
      config_settings:
        map_merge:
          - tripleo.haproxy.firewall_rules:
              '107 haproxy stats':
                dport: 1993
~~~

By the commit, users cannot access to haproxy stats.

Version-Release number of selected component (if applicable):
Current T-H-T.

How reproducible:
Every deployment

Steps to Reproduce:
1.
2.
3.

Actual results:
'iptables -nvL' doesn't contain 107 proxy stats rules for ipv4 and ipv6.

Expected results:
'iptables -nvL' contains 107 proxy stats rules for ipv4 and ipv6.

Additional info:

Comment 11 errata-xmlrpc 2019-07-10 13:05:27 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:1738


Note You need to log in before you can comment on or make changes to this bug.