Glance

Doc for "Configuring SSL Support" outdated in glance

Bug #1930597 reported by Jean Chorin on 2021-06-02

This bug affects 2 people

	Status	Importance	Assigned to
Glance	Fix Released	High	Erno Kuvaja
Ussuri	Fix Committed	High	Erno Kuvaja
Victoria	Fix Committed	High	Erno Kuvaja
Wallaby	Fix Committed	High	Erno Kuvaja
Xena	Fix Released	High	Erno Kuvaja

Bug Description

The "Configuring SSL Support" states that `cert_file`, `key_file` and `ca_file` can be set to enable TLS.

But on the [changelog of Ussuri](https://docs.openstack.org/releasenotes/glance/ussuri.html) it is mentioned that:

> If upgrade is conducted from PY27 where ssl connections has been terminated into glance-api, the termination needs to happen externally from now on.

So the `cert_file`, `key_file` and `ca_file` configuration options should be removed from the documentation.

-----------------------------------
Release: 22.0.0.0rc2.dev2 on 2020-05-24 10:41:41
SHA: b5437773b20db3d6ef20d449a8a43171c8fc7f69
Source: https://opendev.org/openstack/glance/src/doc/source/configuration/configuring.rst
URL: https://docs.openstack.org/glance/wallaby/configuration/configuring.html

Tags:

Revision history for this message

Erno Kuvaja (jokke) wrote on 2021-07-29:

Thanks Jean!

I noticed this today too and filed a bug tracking it as I missed yours.

Changed in glance:
status:	New → Triaged
importance:	Undecided → High
assignee:	nobody → Erno Kuvaja (jokke)

OpenStack Infra (hudson-openstack) on 2021-07-29

Changed in glance:
status:	Triaged → In Progress

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-05: Fix merged to glance (master)

Reviewed: https://review.opendev.org/c/openstack/glance/+/802868
Committed: https://opendev.org/openstack/glance/commit/652780d0299d5734cbc6d21eea74c4fd11797cd1
Submitter: "Zuul (22348)"
Branch: master

commit 652780d0299d5734cbc6d21eea74c4fd11797cd1
Author: Erno Kuvaja <email address hidden>
Date: Thu Jul 29 13:02:20 2021 +0100

Remove SSL configuration section from docs

    Since supporting only PY3 (Ussuri) Glance has not been supporting
    termination of encrypted connection to the service [0]. The
    section was left behind on the configuring doc.

[0] https://docs.openstack.org/releasenotes/glance/ussuri.html#security-issues

Change-Id: I9356bceb914327f526da7b727fa58522ae18856e
Closes-Bug: #1930597

Changed in glance:
status:	In Progress → Fix Released

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-05: Fix proposed to glance (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/glance/+/803618

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-05: Fix proposed to glance (stable/victoria)

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/glance/+/803619

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-05: Fix proposed to glance (stable/ussuri)

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/c/openstack/glance/+/803620

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-05: Change abandoned on glance (stable/ussuri)

Change abandoned by "Erno Kuvaja <email address hidden>" on branch: stable/ussuri
Review: https://review.opendev.org/c/openstack/glance/+/803620
Reason: need to redo the backport

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-05: Change abandoned on glance (stable/victoria)

Change abandoned by "Erno Kuvaja <email address hidden>" on branch: stable/victoria
Review: https://review.opendev.org/c/openstack/glance/+/803619
Reason: need to redo the backport

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-09-09: Fix included in openstack/glance 23.0.0.0b3

This issue was fixed in the openstack/glance 23.0.0.0b3 development milestone.

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-09-09: Fix merged to glance (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/glance/+/803618
Committed: https://opendev.org/openstack/glance/commit/62e921ecd9ba2cd33404347ddffcacd345a5ca74
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit 62e921ecd9ba2cd33404347ddffcacd345a5ca74
Author: Erno Kuvaja <email address hidden>
Date: Thu Jul 29 13:02:20 2021 +0100

Remove SSL configuration section from docs

    Since supporting only PY3 (Ussuri) Glance has not been supporting
    termination of encrypted connection to the service [0]. The
    section was left behind on the configuring doc.

[0] https://docs.openstack.org/releasenotes/glance/ussuri.html#security-issues

    Change-Id: I9356bceb914327f526da7b727fa58522ae18856e
    Closes-Bug: #1930597
    (cherry picked from commit 652780d0299d5734cbc6d21eea74c4fd11797cd1)

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-09-09: Fix merged to glance (stable/victoria)

#10

Reviewed: https://review.opendev.org/c/openstack/glance/+/803619
Committed: https://opendev.org/openstack/glance/commit/2d77038b2da039c1a56d00fc46a62295c93b7f98
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit 2d77038b2da039c1a56d00fc46a62295c93b7f98
Author: Erno Kuvaja <email address hidden>
Date: Thu Jul 29 13:02:20 2021 +0100

Remove SSL configuration section from docs

    Since supporting only PY3 (Ussuri) Glance has not been supporting
    termination of encrypted connection to the service [0]. The
    section was left behind on the configuring doc.

[0] https://docs.openstack.org/releasenotes/glance/ussuri.html#security-issues

    Change-Id: I9356bceb914327f526da7b727fa58522ae18856e
    Closes-Bug: #1930597
    (cherry picked from commit 652780d0299d5734cbc6d21eea74c4fd11797cd1)
    (cherry picked from commit 62e921ecd9ba2cd33404347ddffcacd345a5ca74)

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-09-13: Fix merged to glance (stable/ussuri)

#11

Reviewed: https://review.opendev.org/c/openstack/glance/+/803620
Committed: https://opendev.org/openstack/glance/commit/e7915489ddf25a4e7db35df09cca128e790e47a2
Submitter: "Zuul (22348)"
Branch: stable/ussuri

commit e7915489ddf25a4e7db35df09cca128e790e47a2
Author: Erno Kuvaja <email address hidden>
Date: Thu Jul 29 13:02:20 2021 +0100

Remove SSL configuration section from docs

    Since supporting only PY3 (Ussuri) Glance has not been supporting
    termination of encrypted connection to the service [0]. The
    section was left behind on the configuring doc.

[0] https://docs.openstack.org/releasenotes/glance/ussuri.html#security-issues