yahoo-eng-team team mailing list archive

[OpenStack Infra <1514424@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/245945
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=7a306e2918775ebb94d9e1408aaa2b7c3ed26fc6
Submitter: Jenkins
Branch:    master

commit 7a306e2918775ebb94d9e1408aaa2b7c3ed26fc6
Author: Vincent Untz <vuntz@xxxxxxxx>
Date:   Tue Nov 17 17:47:56 2015 +0100

    Ensure metadata agent doesn't use SSL for UNIX socket
    
    The communication between the ns metadata proxy and the metadata agent
    is pure HTTP, and should not switch to HTTPS when neutron is using SSL.
    
    We're therefore telling wsgi.Server to forcefully disable SSL in that
    case.
    
    Change-Id: I2cb9fa231193bcd5c721c4d5cf0eb9c16e842349
    Closes-Bug: #1514424


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1514424

Title:
  neutron metadata ns proxy does not support ssl

Status in neutron:
  Fix Released

Bug description:
  When SSL is enabled in the neutron metadata agent the neutron metadata
  ns proxy isn't able to communicate to the neutron metadata agent via
  the unix domain socket and every request results in a BadStatusLine
  error:

  2015-11-06 16:30:44.060 269669 INFO neutron.wsgi [-] 192.168.0.2 - - [06/Nov/2015 16:30:44] "GET /2009-04-04/meta-data/instance-id HTTP/1.1" 500 343 12.021586
  2015-11-06 16:30:56.064 269669 INFO neutron.wsgi [-] (269669) accepted ('192.168.0.2', 50879)
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy [-] Unexpected error.
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy Traceback (most recent call last):
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/dist-packages/neutron/agent/metadata/namespace_proxy.py", line 56, in __call__
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     req.body)
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/dist-packages/neutron/agent/metadata/namespace_proxy.py", line 88, in _proxy_request
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     connection_type=agent_utils.UnixDomainHTTPConnection)
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/dist-packages/httplib2/__init__.py", line 1569, in request
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     (response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/dist-packages/httplib2/__init__.py", line 1316, in _request
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/dist-packages/httplib2/__init__.py", line 1285, in _conn_request
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     response = conn.getresponse()
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/httplib.py", line 1051, in getresponse
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     response.begin()
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/httplib.py", line 415, in begin
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     version, status, reason = self._read_status()
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy   File "/usr/lib/python2.7/httplib.py", line 379, in _read_status
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy     raise BadStatusLine(line)
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy BadStatusLine: ''
  2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy 

  It seems that the neutron metadata ns proxy does not support SSL for
  the communication.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1514424/+subscriptions