[Bug 1717615] Re: encoded slashes being blocked by Apache

[Corey Bryant]

Regression testing has completed successfully.

xenial-newton proposed with dev charms:

======
Totals
======
Ran: 102 tests in 1453.8196 sec.
 - Passed: 93
 - Skipped: 9
 - Expected Fail: 0
 - Unexpected Success: 0
 - Failed: 0
Sum of execute time for each test: 787.9013 sec.

xenial-newton proposed with stable charms:

======
Totals
======
Ran: 102 tests in 1571.3430 sec.
 - Passed: 93
 - Skipped: 9
 - Expected Fail: 0
 - Unexpected Success: 0
 - Failed: 0
Sum of execute time for each test: 832.8255 sec.


** Tags removed: verification-newton-needed
** Tags added: verification-newton-done

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1717615

Title:
  encoded slashes being blocked by Apache

Status in OpenStack heat charm:
  Invalid
Status in Charm Helpers:
  Invalid
Status in Ubuntu Cloud Archive:
  Fix Released
Status in Ubuntu Cloud Archive mitaka series:
  Fix Released
Status in Ubuntu Cloud Archive newton series:
  Fix Released
Status in Ubuntu Cloud Archive ocata series:
  Fix Released
Status in OpenStack Heat:
  Invalid
Status in python-heatclient package in Ubuntu:
  Fix Released
Status in python-heatclient source package in Xenial:
  Fix Released
Status in python-heatclient source package in Zesty:
  Fix Released

Bug description:
  [Impact]
  We came across a situation where we were unable to view resources in a stack inside Horizon. We traced it down to a communication problem with the Heat Apache frontend and Heat. After adjusting the log level for Apache, we came across the following error in the logs:

  [client 213.173.193.177:33920] AH00026: found %2f (encoded '/') in URI
  (decoded='/v1/c064a39d602d4f42bc49e09057c97683/stacks/heat_test_foo/b5c125a3-d452-49a1-
  a12e-03e098fbb38c/resources/foo_vm-01'), returning 404

  As a workaround, we currently added the following line to the
  /etc/apache/sites-enabled/openstack-https_frontend.conf on our Heat
  instance:

  AllowEncodedSlashes On

  It is worth noting we tried to use the NoDecode option as well and
  that is didn't resolve the problem.

  [Test Case]
  1. Deploy OpenStack with Juju
  2. Enable Keystone v3: juju config keystone preferred-api-version=3
  3. Enable SSL:         juju config keystone https-service-endpoints=True
  4. Add heat:
     - juju deploy heat
     - juju add-relation heat keystone
     - juju add-relation heat percona-cluster
     - juju add-relation heat rabbitmq-server
     - juju run-action heat/0 domain-setup
  5. Deploy a stack: 
      openstack stack create --parameter admin_pass=Ubuntu \
                             --parameter image=cirros-0.4.0 \
                             --parameter key_name=test \
                             --parameter network=network \
                             -t heat-basic.yaml heat_basic
  6. Verify that it deploys: openstack stack list
  7. Verify that heat works in OpenStack Dashboard
  8. Verify that displaying Heat resources tab in OpenStack Dashboard does
     NOT work.

  [Regression Potential]
  Low. The patch being backported is from the upstream stable/pike branch. There were some minor adjustments required to apply the patch to earlier releases, but the patches are nearly identical.

To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-heat/+bug/1717615/+subscriptions