Bug 2259175 - [RHOSP16][RabbitMQ]Requesting heat parameter support changing ssl version
Summary: [RHOSP16][RabbitMQ]Requesting heat parameter support changing ssl version
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: puppet-tripleo
Version: 16.2 (Train)
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: async
: 16.2 (Train on RHEL 8.4)
Assignee: Luca Miccini
QA Contact: Nobody
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-01-19 10:33 UTC by jiehuang
Modified: 2024-03-26 12:26 UTC (History)
8 users (show)

Fixed In Version: puppet-tripleo-11.7.1-2.20230628015222.el8ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2024-03-26 12:26:00 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-31221 0 None None None 2024-01-19 10:36:03 UTC
Red Hat Product Errata RHBA-2024:1519 0 None None None 2024-03-26 12:26:03 UTC

Description jiehuang 2024-01-19 10:33:51 UTC 
Description of problem:
Requesting heat parameter support changing ssl version

Version-Release number of selected component (if applicable):
16.2

How reproducible:
N/A

Steps to Reproduce:
1. 
2.
3.

Actual results:
N/A

Expected results:
can have a parameter to change ssl versions to use tlsv1.2 only

Additional info:
/var/lib/config-data/puppet-generated/rabbitmq/etc/rabbitmq/rabbitmq.config
Comment 1 Luca Miccini 2024-01-19 16:40:08 UTC 
you should be able to use a hiera override like 

parameter_defaults:
  ExtraConfig:
    tripleo::profile::base::rabbitmq::ssl_versions: ['tlsv1.2']

we found a small typo in the puppet-tripleo rabbitmq manifest so currently this does not work, we are fixing it via https://code.engineering.redhat.com/gerrit/c/puppet-tripleo/+/449477
Comment 3 jiehuang 2024-01-22 10:37:56 UTC 
Hi Luca

You are right,I tried the yaml you provided, but it doesn't work on my lab.

the deployment without error, but the whole line of tls has been removed.

Best Regards
Jimmy Huang
Comment 14 errata-xmlrpc 2024-03-26 12:26:00 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 16.2.6 bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2024:1519
Note You need to log in before you can comment on or make changes to this bug.