Haproxy is running on contrail nodes

Bug #1614863 reported by Stanislav Kolenkin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel Contrail plugin
Fix Released
Low
Unassigned

Bug Description

I have found that haproxy is running on contrail nodes.
And haproxy has default configuration and not used by any service.

fuel plugins| grep contrail
contrail | 4.0.0 | 4.0.0

ps axuwww |grep haprox
root 14287 0.0 0.0 10432 668 pts/11 S+ 07:49 0:00 grep --color=auto haprox
haproxy 21369 0.0 0.0 28988 920 ? Ss Jul27 0:46 /usr/sbin/haproxy -f /etc/haproxy/haproxy.cfg -D -p /var/run/haproxy.pid

 ls -la /etc/haproxy/
errors/ haproxy.cfg

/etc/haproxy/haproxy.cfg
global
        log /dev/log local0
        log /dev/log local1 notice
        chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin
        stats timeout 30s
        user haproxy
        group haproxy
        daemon

        # Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

        # Default ciphers to use on SSL-enabled listening sockets.
        # For more information, see ciphers(1SSL).
        ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL

defaults
        log global
        mode http
        option httplog
        option dontlognull
        timeout connect 5000
        timeout client 50000
        timeout server 50000
        errorfile 400 /etc/haproxy/errors/400.http
        errorfile 403 /etc/haproxy/errors/403.http
        errorfile 408 /etc/haproxy/errors/408.http
        errorfile 500 /etc/haproxy/errors/500.http
        errorfile 502 /etc/haproxy/errors/502.http
        errorfile 503 /etc/haproxy/errors/503.http
        errorfile 504 /etc/haproxy/errors/504.http

Tags: contrail
Revision history for this message
Oleksandr Martsyniuk (omartsyniuk) wrote :

After a quick check it was found that haproxy service was running, but not listening any port.
The haproxy package was installed as a dependency of contrail-openstack-config package.
Since plugin uses haproxy on OpenStack controllers as load balancer for Contrail services, the haproxy service can be disabled on Contrail nodes.

Changed in fuel-plugin-contrail:
status: New → Confirmed
importance: Undecided → Low
assignee: nobody → Oleksandr Martsyniuk (omartsyniuk)
milestone: none → 5.0.0
status: Confirmed → In Progress
status: In Progress → Fix Committed
assignee: Oleksandr Martsyniuk (omartsyniuk) → nobody
tags: added: contrail
okosse (okosse)
Changed in fuel-plugin-contrail:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.