Re: [openstack-dev] [heat] change in behavior from Mitaka to Newton, is this a bug ?

2017-04-13 Thread Saverio Proto 
Hello,

I confirm that setting:

[oslo_middleware]
enable_proxy_headers_parsing = true

Fixes the problem, and the 'links' property when I create new stacks
gets again the https:// URL.

THANK YOU !!! :)

Anyway we should document this change in the Release notes for people
upgrading to Newton.

I never had:
secure_proxy_ssl_header=X-Forwarded-Proto

in my Mitaka config, because that was the default setting, it was not
necessary to set it explicit.

Also according to:
https://docs.openstack.org/newton/config-reference/orchestration/api.html
the setting is deprecated but not removed.

Adding the enable_proxy_headers_parsing parameter we are also changing
the default behavior, and this is bad if it is not written in the heat
release notes.

https://docs.openstack.org/releasenotes/heat/liberty.html
https://docs.openstack.org/releasenotes/heat/mitaka.html
https://docs.openstack.org/releasenotes/heat/newton.html

Please correct me if I am wrong. But I cannot find anything in the
release (upgrade) notes that warns you should flag this to true if you
are running behind a proxy.

Is it possible to integrate the release notes for Newton now adding a
file in releasenotes/notes/ ? How does it work ?

thank you

Saverio



On 13/04/17 09:52, Rabi Mishra wrote:
> On Thu, Apr 13, 2017 at 1:04 PM, Saverio Proto  > wrote:
> 
> Hello,
> 
> I am looking at a strange change in default behavior in heat, after the
> upgrade from Mitaka to Newton.
> 
> when you do
> 
> openstack stack show uuid
> 
> you get a table, and there is a property called 'links'
> 
> In Mitaka the value was something like
> 
> - href: https://URL
>   rel: self
> 
> After I upgraded to Newton the 'links' field changed to
> 
> http://URL (self)
> 
> Also in the process the 's' from https went missing.
> 
> 
> Though not sure, may be related to http_proxy_to_wsgi middleware related
> change as mentioned here[1] in newton?
> 
> [1] https://bugs.launchpad.net/heat/+bug/1630778
> 
> May be add the below in heat.conf and check.
> 
> [oslo_middleware]
> enable_proxy_headers_parsing = true
> 
>  
> 
> This broke first of all our rally tests, that now fail with "Prohibited
> endpoint redirect"
> 
> It also broke Horizon, because if I click on the stack name, I am not
> able to get to the page with the stack property, but I get a red box
> "Error: Unable to retrieve stack.".
> 
> Before opening a strange bug that will be marked as "Invalid" I would
> like to understand better what is this 'links' property of the stack,
> and why it changed from Mitaka to Newton ? Is possible this is a
> regression bug ?
> 
> Thank you
> 
> Saverio
> 
> 
> 
> 
> 
> --
> SWITCH
> Saverio Proto, Peta Solutions
> Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
> phone +41 44 268 15 15, direct +41 44 268 1573
> saverio.pr...@switch.ch ,
> http://www.switch.ch
> 
> http://www.switch.ch/stories
> 
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe:
> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> 
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> 
> 
> 
> -- 
> Regards,
> Rabi Misra
> 
> 
> 
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 


-- 
SWITCH
Saverio Proto, Peta Solutions
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 15, direct +41 44 268 1573
saverio.pr...@switch.ch, http://www.switch.ch

http://www.switch.ch/stories

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [heat] change in behavior from Mitaka to Newton, is this a bug ?

2017-04-13 Thread Rabi Mishra 
On Thu, Apr 13, 2017 at 1:04 PM, Saverio Proto 
wrote:

> Hello,
>
> I am looking at a strange change in default behavior in heat, after the
> upgrade from Mitaka to Newton.
>
> when you do
>
> openstack stack show uuid
>
> you get a table, and there is a property called 'links'
>
> In Mitaka the value was something like
>
> - href: https://URL
>   rel: self
>
> After I upgraded to Newton the 'links' field changed to
>
> http://URL (self)
>
> Also in the process the 's' from https went missing.
>
>
Though not sure, may be related to http_proxy_to_wsgi middleware related
change as mentioned here[1] in newton?

[1] https://bugs.launchpad.net/heat/+bug/1630778

May be add the below in heat.conf and check.

[oslo_middleware]
enable_proxy_headers_parsing = true



> This broke first of all our rally tests, that now fail with "Prohibited
> endpoint redirect"
>
> It also broke Horizon, because if I click on the stack name, I am not
> able to get to the page with the stack property, but I get a red box
> "Error: Unable to retrieve stack.".
>
> Before opening a strange bug that will be marked as "Invalid" I would
> like to understand better what is this 'links' property of the stack,
> and why it changed from Mitaka to Newton ? Is possible this is a
> regression bug ?
>
> Thank you
>
> Saverio
>
>
>
>
>
> --
> SWITCH
> Saverio Proto, Peta Solutions
> Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
> phone +41 44 268 15 15, direct +41 44 268 1573
> saverio.pr...@switch.ch, http://www.switch.ch
>
> http://www.switch.ch/stories
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 
Regards,
Rabi Misra
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] [heat] change in behavior from Mitaka to Newton, is this a bug ?

2017-04-13 Thread Saverio Proto 
Hello,

I am looking at a strange change in default behavior in heat, after the
upgrade from Mitaka to Newton.

when you do

openstack stack show uuid

you get a table, and there is a property called 'links'

In Mitaka the value was something like

- href: https://URL
  rel: self

After I upgraded to Newton the 'links' field changed to

http://URL (self)

Also in the process the 's' from https went missing.

This broke first of all our rally tests, that now fail with "Prohibited
endpoint redirect"

It also broke Horizon, because if I click on the stack name, I am not
able to get to the page with the stack property, but I get a red box
"Error: Unable to retrieve stack.".

Before opening a strange bug that will be marked as "Invalid" I would
like to understand better what is this 'links' property of the stack,
and why it changed from Mitaka to Newton ? Is possible this is a
regression bug ?

Thank you

Saverio





-- 
SWITCH
Saverio Proto, Peta Solutions
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 15, direct +41 44 268 1573
saverio.pr...@switch.ch, http://www.switch.ch

http://www.switch.ch/stories

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev