Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1936560

Summary:	OSP13z15 openstack-qdrouterd-container fails to connect to STF
Product:	Red Hat OpenStack	Reporter:	Leif Madsen <lmadsen>
Component:	openstack-containers	Assignee:	Leif Madsen <lmadsen>
Status:	CLOSED DUPLICATE	QA Contact:	Leonid Natapov <lnatapov>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	13.0 (Queens)	CC:	m.andre, mmagr, pkilambi
Target Milestone:	z16	Keywords:	Triaged, ZStream
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-03-23 11:15:14 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Leif Madsen 2021-03-08 18:16:18 UTC

Description of problem:

openstack-qdrouterd-container image in OSP13z15 results in the qdrouterd version bumping to 1.14.0 which is currently incompatible with the way the QDR is configured to connect, resulting in SSL connection errors.


Version-Release number of selected component (if applicable):

openstack-qdrouterd-container as shipped with OSP13z15 (not yet available).


How reproducible:

Consistently (always)


Additional info:

Work around -- deploy an older version of OSP13 qdrouterd container image.

Proper fix -- allow CA cert from STF to be installed / mounted in the qdrouterd image on OSP, and add the `caCertFile` parameter to the `sslProfile` configuration.

See: https://access.redhat.com/documentation/en-us/red_hat_amq/2021.q1/html/using_amq_interconnect/securing-network-connections-router-rhel#securing-outgoing-connections-router-rhel

Comment 2 Martin Magr 2021-03-23 11:15:14 UTC


*** This bug has been marked as a duplicate of bug 1934440 ***