From 895e59237efb17f8d46763e58210dae96f772d7c Mon Sep 17 00:00:00 2001 From: "wu.chunyang" Date: Thu, 16 Nov 2023 22:50:28 +0800 Subject: [PATCH] Fix guest agent failed to use swiftclient over TLS This commit adds insecure=True parameter to swiftclient. Story: #2010674 Task: #47748 Change-Id: I6156b289659dc9130effb1666c3cd2e14366bffe --- backup/storage/swift.py | 4 +++- .../notes/fix-swift-connect-over-tls-c4e62213a8d38fe2.yaml | 6 ++++++ zuul.d/jobs.yaml | 2 +- 3 files changed, 10 insertions(+), 2 deletions(-) create mode 100644 releasenotes/notes/fix-swift-connect-over-tls-c4e62213a8d38fe2.yaml diff --git a/backup/storage/swift.py b/backup/storage/swift.py index a3226a1e24..e06c120152 100644 --- a/backup/storage/swift.py +++ b/backup/storage/swift.py @@ -43,7 +43,9 @@ def _get_service_client(auth_url, token, tenant_id, region_name=None): os_options = { 'region_name': region_name } - return swiftclient.Connection(session=sess, os_options=os_options) + return swiftclient.Connection(session=sess, + os_options=os_options, + insecure=True) def _set_attr(original): diff --git a/releasenotes/notes/fix-swift-connect-over-tls-c4e62213a8d38fe2.yaml b/releasenotes/notes/fix-swift-connect-over-tls-c4e62213a8d38fe2.yaml new file mode 100644 index 0000000000..c3be91d57a --- /dev/null +++ b/releasenotes/notes/fix-swift-connect-over-tls-c4e62213a8d38fe2.yaml @@ -0,0 +1,6 @@ +--- +fixes: + - | + Fix a bug where swift client in the trove guest instance failed to verify + certification against the self-signed certificate authority. + `Story 2010674 `__ \ No newline at end of file diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml index a0d0004bf2..0bbe5a8ec1 100644 --- a/zuul.d/jobs.yaml +++ b/zuul.d/jobs.yaml @@ -82,7 +82,7 @@ s-container: true s-object: true s-proxy: true - tls-proxy: false + tls-proxy: true tempest: true q-svc: true q-agt: true