horizon swift containers is broken with tls and ssl enabled on fuel 11 ocata

Bug #1688267 reported by Zoltan Langi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
In Progress
High
Michael Polenchuk

Bug Description

Description:
If you install fuel 11 Ocata with SSL and TLS enabled, in horizon the containers section is completely broken.
If you open up the: https://yourhostname/horizon/project/containers/
You immediately get: Error: Unable to get the Swift container listing.
If you try to make a new container: Error: Unable to create the container.

If you change your deployment to not to use TLS and HTTPS, it all works fine. You can list and create containers.

To reproduce:
Default install, add the following options:
In storage:
Ceph RBD for volumes (Cinder)
Ceph RBD for images (Glance)
Ceph RBD for ephemeral volumes (Nova)
Ceph RadosGW for objects (Swift API)

In security:
TLS for OpenStack public endpoints
HTTPS for Horizon

Workaround:
Switch off TLS for OpenStack public endpoints and HTTPS for Horizon and the problem disappears, all working fine.

Impact:
Can't manage containers and upload objects into the containers from horizon.

Description of the environment:
Fuel 11 with Ocata and Ubuntu 16.04

Tags: area-library
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/ocata)

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/462833

Changed in fuel:
milestone: none → 11.x-updates
assignee: nobody → Michael Polenchuk (mpolenchuk)
status: New → Confirmed
importance: Undecided → High
status: Confirmed → In Progress
Revision history for this message
Zoltan Langi (zlangi) wrote :

Hello Michael, any update on this bug? Do you know when exactly can I expect a fix for this bug?

Thank you!

Revision history for this message
Michael Polenchuk (mpolenchuk) wrote :

Zoltan, please review the patch (https://review.openstack.org/462833).
This patch could be applied on fuel master (needed only manifests from deployment/ dir).

Revision history for this message
Zoltan Langi (zlangi) wrote :

Hello Michael,

I've tried your patch and I can confirm it works! Thank you!

tags: added: area-library
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on fuel-library (stable/ocata)

Change abandoned by Andreas Jaeger (<email address hidden>) on branch: stable/ocata
Review: https://review.opendev.org/462833
Reason: This repo is retired now, no further work will get merged.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.