Bug 2103738 - Openshift route URLs starting with double slashes stopped working after update to 4.8.33 - curl version problems
Summary: Openshift route URLs starting with double slashes stopped working after upda...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Networking
Version: 4.8
Hardware: All
OS: Linux
high
medium
Target Milestone: ---
: 4.8.z
Assignee: Andrew McDermott
QA Contact: Arvind iyengar
URL:
Whiteboard:
: 2103731 (view as bug list)
Depends On: 2088539
Blocks: 2103732
TreeView+ depends on / blocked
 
Reported: 2022-07-04 16:27 UTC by OpenShift BugZilla Robot
Modified: 2022-08-24 08:06 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-08-24 08:05:46 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2022:6099 0 None None None 2022-08-24 08:05:59 UTC

Comment 4 Andrew McDermott 2022-07-13 10:08:46 UTC 
*** Bug 2103731 has been marked as a duplicate of this bug. ***
Comment 5 Andrew McDermott 2022-07-13 10:24:10 UTC 
Brew build:

Task info: https://brewweb.engineering.redhat.com/brew/taskinfo?taskID=46516312
Comment 6 Andrew McDermott 2022-07-13 10:36:05 UTC 
CI smoke test https://github.com/openshift/router/pull/409
Comment 8 Arvind iyengar 2022-08-10 09:39:49 UTC 
Verified in the latest "4.8.47" release payload. With this version containing the fixed haproxy package, the route appears to work properly when testing with http2 enabled as well in disabled state:
-----
oc get clusterversion
NAME      VERSION   AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.8.47    True        False         104m    Cluster version is 4.8.47

oc -n openshift-ingress rsh router-default-5994bdcddd-29z2j
sh-4.4$ rpm -qa | grep -i haproxy
haproxy22-2.2.13-4.el8.x86_64


Deploy resources:
oc get all                                                     
NAME                             READY   STATUS    RESTARTS   AGE
pod/hello-app-6c899f86df-4vq9m   1/1     Running   0          61m

NAME                 TYPE           CLUSTER-IP       EXTERNAL-IP                            PORT(S)    AGE
service/hello-app    ClusterIP      172.30.246.144   <none>                                 8080/TCP   61m


NAME                        READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/hello-app   1/1     1            1           61m

NAME                                   DESIRED   CURRENT   READY   AGE
replicaset.apps/hello-app-6c899f86df   1         1         1       61m

NAME                                  HOST/PORT                                                        PATH   SERVICES    PORT   TERMINATION     WILDCARD
route.route.openshift.io/hello-edge   hello-edge.apps.aiyengar48bz.qe.azure.devcluster.openshift.com          hello-app   8080   edge/Redirect   None


With https2 disabled:

oc -n openshift-ingress-operator annotate --overwrite ingresscontrollers/default ingress.operator.openshift.io/default-enable-http2=false
ingresscontroller.operator.openshift.io/default annotated

oc rollout status deployment -n openshift-ingress router-default --timeout=120s
deployment "router-default" successfully rolled out

curl -k -L  hello-edge.apps.aiyengar48bz.qe.azure.devcluster.openshift.com
Hello OpenShift!

curl --http1.1 -k -L hello-edge.apps.aiyengar48bz.qe.azure.devcluster.openshift.com
Hello OpenShift!

curl --http2 -k -L hello-edge.apps.aiyengar48bz.qe.azure.devcluster.openshift.com
Hello OpenShift!


With http2 enabled:
oc -n openshift-ingress-operator annotate --overwrite ingresscontrollers/default ingress.operator.openshift.io/default-enable-http2=true
ingresscontroller.operator.openshift.io/default annotated

oc rollout status deployment -n openshift-ingress router-default --timeout=120s
deployment "router-default" successfully rolled out

curl -k -L  hello-edge.apps.aiyengar48bz.qe.azure.devcluster.openshift.com
Hello OpenShift!

curl --http1.1 -k -L hello-edge.apps.aiyengar48bz.qe.azure.devcluster.openshift.com
Hello OpenShift!

curl --http2 -k -L hello-edge.apps.aiyengar48bz.qe.azure.devcluster.openshift.com         
Hello OpenShift!
-----
Comment 11 errata-xmlrpc 2022-08-24 08:05:46 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.8.48 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:6099
Note You need to log in before you can comment on or make changes to this bug.