Bug 2406166
| Summary: | [HA Proxy] Container Image 9.0 Failing to deploy haproxy on QAT with Ingress Feature | ||
|---|---|---|---|
| Product: | [Red Hat Storage] Red Hat Ceph Storage | Reporter: | sohan singh <sohsingh> |
| Component: | Build | Assignee: | Hector Delgado <hneveu> |
| Status: | CLOSED UPSTREAM | QA Contact: | sohan singh <sohsingh> |
| Severity: | urgent | Docs Contact: | Rivka Pollack <rpollack> |
| Priority: | urgent | ||
| Version: | 9.0 | CC: | cephqe-warriors, gatre, jcaratza, kdeb, mkasturi, racpatel, rpollack, vereddy |
| Target Milestone: | --- | Keywords: | TestBlocker |
| Target Release: | 9.0z1 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Known Issue | |
| Doc Text: |
.HAProxy deployment fails when QAT is enabled with ingress
Deploying HAProxy with the QAT feature enabled fails on Red Hat Ceph Storage 9.0 container images when using the ingress feature.
This occurs because HAProxy no longer supports `ssl_engine` in default builds. In addition, newer OpenSSL versions have removed the legacy engine used by QAT, making them incompatible. Attempts to use older OpenSSL versions or build a QAT provider for newer versions also lead to compatibility issues.
As a result, HAProxy cannot run with QAT enabled, and deployment fails.
There is no way to enable QAT with HAProxy. To continue using HAProxy without QAT, update the HAProxy configuration file (typically located at `/var/lib/haproxy/haproxy.cfg`) as follows:
```
haproxy_qat_support: false
ssl: true
```
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2026-03-04 09:56:22 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2388233 | ||
|
Comment 9
Red Hat Bugzilla
2026-03-04 09:56:22 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days or the product is inactive and locked |