Bug 1712922 - QDR needs SSL to correctly communicate with SAF server side containers [openstack-15]
Summary: QDR needs SSL to correctly communicate with SAF server side containers [opens...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 15.0 (Stein)
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: async
: 15.0 (Stein)
Assignee: Martin Magr
QA Contact: Leonid Natapov
URL:
Whiteboard:
Depends On: 1700918 1704976 1731517
Blocks: 1701020
TreeView+ depends on / blocked
 
Reported: 2019-05-22 13:31 UTC by Ryan McCabe
Modified: 2020-03-05 11:59 UTC (History)
12 users (show)

Fixed In Version: openstack-tripleo-heat-templates-10.6.2-0.20190927170449.49defb0.el8ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1700918
Environment:
Last Closed: 2020-03-05 11:59:04 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2020:0643 0 None None None 2020-03-05 11:59:49 UTC

Comment 6 Leonid Natapov 2020-02-27 23:07:49 UTC
tested according to 

[root@controller-0 metrics-qdr]# cat cat /var/lib/config-data/puppet-generated/metrics-qdr/etc/qpid-dispatch/qdrouterd.conf
cat: cat: No such file or directory
##
## Licensed to the Apache Software Foundation (ASF) under one
## or more contributor license agreements.  See the NOTICE file
## distributed with this work for additional information
## regarding copyright ownership.  The ASF licenses this file
## to you under the Apache License, Version 2.0 (the
## "License"); you may not use this file except in compliance
## with the License.  You may obtain a copy of the License at
##
##   http://www.apache.org/licenses/LICENSE-2.0
##
## Unless required by applicable law or agreed to in writing,
## software distributed under the License is distributed on an
## "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
## KIND, either express or implied.  See the License for the
## specific language governing permissions and limitations
## under the License
##

# See the qdrouterd.conf (5) manual page for information about this
# file's format and options.

router {
    mode: edge
    id: Router.controller-0.redhat.local
    workerThreads: 4
    debugDump: /var/log/qdrouterd
    saslConfigPath: /etc/sasl2
    saslConfigName: qdrouterd
}


sslProfile{
    name: tlsProfile
}


listener {
    host: 172.17.1.59
    port: 5666
    authenticatePeer: no
    saslMechanisms: ANONYMOUS
}


connector {
    host: qdr-white-port-5671-sa-telemetry.apps.dev7.nfvpe.site
    port: 443
    role: edge
    sslProfile: tlsProfile
    verifyHostname: false
}


address {
    prefix: unicast
    distribution: closest
}

address {
    prefix: exclusive
    distribution: closest
}

address {
    prefix: broadcast
    distribution: multicast
}

address {
    distribution: multicast
    prefix: collectd/notify
}

address {
    distribution: multicast
    prefix: collectd/telemetry
}

address {
    distribution: multicast
    prefix: ceilometer/metering.sample
}

address {
    distribution: multicast
    prefix: ceilometer/event.sample
}



log {
   module: DEFAULT
   enable: info+
   timestamp: true
   output: /var/log/qdrouterd/metrics-qdr.log
}
[root@controller-0 metrics-qdr]# 




2020-02-27 22:19:29.932684 +0000 SERVER (info) Container Name: Router.controller-0.redhat.local
2020-02-27 22:19:29.932808 +0000 ROUTER (info) Router started in Edge mode
2020-02-27 22:19:29.932836 +0000 ROUTER (info) Version: Red Hat AMQ Interconnect 1.5.0 (qpid-dispatch 1.8.0)
2020-02-27 22:19:29.943754 +0000 AGENT (info) Activating management agent on $_management_internal
2020-02-27 22:19:29.943931 +0000 ROUTER (info) Core module enabled: edge_router
2020-02-27 22:19:29.943970 +0000 ROUTER (info) Core module present but disabled: core_test_hooks
2020-02-27 22:19:29.943990 +0000 ROUTER (info) Core module present but disabled: edge_addr_tracking
2020-02-27 22:19:29.944014 +0000 ROUTER (info) Core module present but disabled: address_lookup_server
2020-02-27 22:19:29.944031 +0000 ROUTER (info) Core module enabled: address_lookup_client
2020-02-27 22:19:29.944040 +0000 ROUTER (info) Router Core thread running. 0/Router.controller-0.redhat.local
2020-02-27 22:19:29.944054 +0000 ROUTER (info) In-process subscription M/$management
2020-02-27 22:19:29.944068 +0000 ROUTER (info) In-process subscription L/$management
2020-02-27 22:19:29.944079 +0000 ROUTER (info) In-process subscription L/$_management_internal
2020-02-27 22:19:29.946207 +0000 POLICY (info) Policy configured maxConnections: 65535, policyDir: '',access rules enabled: 'false', use hostname patterns: 'false'
2020-02-27 22:19:29.947276 +0000 POLICY (info) Policy fallback defaultVhost is defined: '$default'
2020-02-27 22:19:29.947419 +0000 CONN_MGR (info) Created SSL Profile with name tlsProfile 
2020-02-27 22:19:29.948128 +0000 CONN_MGR (info) Configured Listener: 172.17.1.59:5666 proto=any, role=normal
2020-02-27 22:19:29.949644 +0000 CONN_MGR (info) Configured Connector: qdr-white-port-5671-sa-telemetry.apps.dev7.nfvpe.site:443 proto=any, role=edge, sslProfile=tlsProfile
2020-02-27 22:19:29.954219 +0000 SERVER (notice) Operational, 4 Threads Running (process ID 7)
2020-02-27 22:19:29.954613 +0000 SERVER (notice) Listening on 172.17.1.59:5666
2020-02-27 22:37:00.015665 +0000 SERVER (info) [C46] Accepted connection to 172.17.1.59:5666 from 172.17.1.59:43758
2020-02-27 22:37:00.027304 +0000 ROUTER (info) [C46] Connection Opened: dir=in host=172.17.1.59:43758 vhost= encrypted=no auth=ANONYMOUS user=anonymous container_id=metrics props=
2020-02-27 22:37:00.027567 +0000 ROUTER (info) [C46][L8] Link attached: dir=in source={<none> expire:sess} target={<none> expire:sess}

Comment 8 errata-xmlrpc 2020-03-05 11:59:04 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0643


Note You need to log in before you can comment on or make changes to this bug.