Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

metal3 - plain-http configuration broken in 0.9.0 #171

Open
hardys opened this issue Nov 25, 2024 · 0 comments
Open

metal3 - plain-http configuration broken in 0.9.0 #171

hardys opened this issue Nov 25, 2024 · 0 comments

Comments

@hardys
Copy link
Contributor

hardys commented Nov 25, 2024

#165 was a major update to the metal3 chart, and included a number of configuration changes to align us better with the upstream ironic-image.

The scenarios tested so far with TLS enabled (the default) work OK, but it's been noted that the configuration with auth/tls disabled is not working with the new chart version:

global:
  enable_basicAuth: false
  enable_tls: false
  enable_vmedia_tls: false
  ironicIP: 192.168.123.123
  provisioningInterface: eth0

The ironic container is restarting with errors like this, which I think is related to TLS being disabled:

::ffff:127.0.0.1 - - [25/Nov/2024 09:29:37] code 400, message Bad request syntax ('\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01ü\\x03\\x03\\x8e\\x9f\\x87p·\\x14E')
::ffff:127.0.0.1 - - [25/Nov/2024 09:29:37] "\x16\x03\x01\x02\x00\x01\x00\x01ü\x03\x03\x8e\x9f\x87p·\x14E" 400 -
::ffff:127.0.0.1 - - [25/Nov/2024 09:29:37] code 400, message Bad request version ("\\x88kÎÃ\\x8eÅî?#óÉ`ÀæN¡ëéÉ\\x00H\\x13\\x02\\x13\\x03\\x13\\x01\\x13\\x04À,À0̨̩À\\xadÀ+À/À¬À#À'À")

Outside of developer scenarios I'm not sure we have any use-cases which require tls or auth to be disabled, but it would be good to fix this so previously working configurations do not fail.

In future we may want to consider deprecating/removing the enable_tls and enable_basicAuth values so we can limit the number of corner cases and focus on the production-ready configuration instead

Thanks to @ipetrov117 for spotting this issue!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant