Bug 1919200
| Summary: | http proxy shouldn't be applied for ironic-conductor container which needs http access to overcloud nodes | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Takashi Kajinami <tkajinam> |
| Component: | openstack-tripleo-heat-templates | Assignee: | RHOS Maint <rhos-maint> |
| Status: | CLOSED DUPLICATE | QA Contact: | Joe H. Rahme <jhakimra> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 16.1 (Train) | CC: | aschultz, mburns |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-01-22 15:52:39 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Takashi Kajinami
2021-01-22 11:43:19 UTC
The usage of /etc/environment is not recommended. Is there a specific set of services that need proxy access? *** This bug has been marked as a duplicate of bug 1916070 *** @Alex AS I mentioned in bz 1916070, we need to use /etc/environment in undercloud so that the node can pull containers from our CDN via http proxy. IIUC we have two points (standalone deployment to install undercloud, and mistral workflow execution to install overcloud) when we run container prepare workflow and these 2 needs proper settings about http proxy. Note that usage of /etc/environment is what is exactly described in our current documentation as the way to set up http proxy for undercloud. https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/director_installation_and_usage/installing-the-undercloud#considerations-when-running-the-undercloud-with-a-proxy You don't though. You can use the http proxy for the undercloud installation but to pre-load all the containers for the overcloud deployment, you can use the `openstack tripleo container image prepare` manually to by pass this and use push_destination: true to load them on the undercloud. $ openstack tripleo container image prepare default --local-push-destination >container-image-prepare.yaml $ modify container-image-prepare.yaml as needed $ export http_proxy=x.x.x.x:3128 $ export https_proxy=$http_proxy $ openstack tripleo container image prepare -e container-image-prepare.yaml This should result in the containers being fetched via proxy and loaded on the undercloud for use in the overcloud deployment. In 16.1.2 and onward, if you use zstream tag (eg tag: 16.x.x) the deployment will skip the tag look ups on the overcloud deployment and won't need to query the registry. |