Loading...

XML

Word

Printable

Type: Bug
Resolution: Done-Errata
Priority: Major
Fix Version/s: rhos-17.1.6
Affects Version/s: rhos-17.1.5
Component/s: openstack-tripleo-heat-templates
Labels:
None

Story Points:
3
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Docs Approval:
?
Fixed in Build:
openstack-tripleo-heat-templates-14.3.1-17.1.20250403151008.e7c7ce3.el9ost
Regression:
None
Intelligence Requested:
Market:
Errata Link:
https://errata.engineering.redhat.com/advisory/148328
Target Version:

rhos-17.1.6

Sprint:
PIDONE 18.0.7, PIDONE 18.0.8
sprint_count:
2
Severity:
Important

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

To fix a non-reproducible issue we downgraded rabbitmq to use tls1.2 only.

Unfortunately this doesn't work in fips mode.

Workaround:

     ExtraConfig:
       rabbitmq::ssl_versions: ['tlsv1.3', 'tlsv1.2']

links to

https://gitlab.cee.redhat.com/eng/openstack/openstack-tripleo-heat-templates/-/merge_requests/20

openstack-k8s-operators/infra-operator#455: Force RabbitMQ to stick to TLSv1.2

RHBA-2025:148328 Red Hat OpenStack Platform 17.1 bug fix and enhancement advisory

Assignee:: Luca Miccini

Reporter:: Luca Miccini

Team:: rhos-dfg-pidone

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Created:: 2025/04/01 1:43 PM

Updated:: 2025/09/26 4:37 PM

Resolved:: 2025/05/07 4:00 PM