Commit Graph

5 Commits

Author SHA1 Message Date
taylanbakircioglu 09157e8be1 Fix: HAProxy validation failure - Change verify to none when ca-file removed
CRITICAL HAProxy Validation Fix:
Bulk import was creating configs that fail HAProxy validation

HAProxy Validation Error:
  server es1 ... ssl verify required
  ALERT: verify is enabled but no CA file specified

Root Cause:
  Original config: ssl verify required ca-file /path/cert.pem
  After parse: ssl verify required (ca-file removed)
  Result: HAProxy validation FAILS

HAProxy Requirement:
  verify required → MUST have ca-file
  verify none → Can work without ca-file
  ssl (no verify) → Uses default verification

Fix Applied (Line 677-704):
When parsing server with both verify AND ca-file:
  1. Detect: verify=required + ca-file exists
  2. Remove ca-file (as planned)
  3. Change verify to 'none' (NEW - prevents validation error)
  4. Warning: Explain user needs to reconfigure after import

Three Scenarios Handled:
  1. verify + ca-file → verify=none, remove ca-file, warn user
  2. verify only → keep verify as-is
  3. ca-file only → set verify=none, remove ca-file, warn user

Generated Config Now:
  Before: server es1 ... ssl verify required (FAILS validation)
  After: server es1 ... ssl verify none (PASSES validation)

User Workflow:
  1. Bulk import → Servers created with verify=none
  2. HAProxy validation → PASSES
  3. User edits server → Selects SSL cert → Sets verify=required
  4. Apply → Config generated with ca-file path
  5. HAProxy validation → PASSES (has ca-file)

Warning Message:
  'verify required' changed to 'none' to pass HAProxy validation
  After import, select SSL certificate and set verify to 'required'

Impact: Bulk import now creates HAProxy-valid configurations
2025-11-07 11:51:15 +03:00
taylanbakircioglu 86298b911f Hotfix: Fix list.strip() error in config parser validation
🐛 Critical Bug Fix:
- Fixed 'list' object has no attribute 'strip' error
- Error occurred in _validate_parsed_config() at line 847
- use_backend_rules is now a list, not a string

🔧 Technical Details:
- Changed from: frontend.use_backend_rules.strip()
- Changed to: bool(frontend.use_backend_rules)
- Simple boolean check works for both list and None types

 Impact:
- Bulk import parsing now works without errors
- Config validation properly handles list-based use_backend_rules
- All warning messages display correctly

Error was:
  'list' object has no attribute 'strip'
  at _validate_parsed_config line 847

Fix applied:
  Line 847-848: Use bool() instead of .strip() for list validation
2025-11-07 11:51:14 +03:00
taylanbakircioglu 1158e5f2b1 Fix: HAProxy validation - ACL and use_backend parsing improvements
🐛 Critical Bug Fixes:
- Fixed duplicate 'acl' prefix in generated config (was: 'acl acl Name ...')
- Fixed duplicate 'use_backend' prefix in generated config
- Added use_backend directive parsing from bulk import configs
- Fixed redirect_rules list handling (was causing .strip() error)

🔧 Parser Improvements:
- Added use_backend rules parsing (stored as list like ACL rules)
- Changed use_backend_rules field from str to list for consistency
- Parser now captures all use_backend directives with conditions

🎯 Config Generation Improvements:
- Smart prefix detection: only add 'acl' if not already present
- Smart prefix detection: only add 'use_backend' if not already present
- Support both legacy (string) and new (list) format for rules
- Proper JSON parsing with fallback to newline-separated format

 HAProxy Validation:
- Generated config now passes HAProxy validation (haproxy -c -f)
- ACL and use_backend directives in correct HAProxy format
- Routing rules properly linked with ACL conditions

Example parsed config:
  acl Elasticsearch hdr(host) -i baremetal-elastic.burgan.com.tr
  use_backend Elasticsearch if Elasticsearch

Tested with full config including multiple ACLs and routing rules.
2025-11-07 11:51:14 +03:00
taylanbakircioglu 704a0c0022 Fix: Bulk import parsing and entity status management improvements
🐛 Bug Fixes:
- Fixed http-response capture directive parsing with improved regex pattern
- Fixed ACL rules display in Frontend UI (array to multi-line string conversion)
- Added SSL certificate dropdown to Backend Server edit when ssl_enabled=true
- Fixed rejected entity config status remaining after apply operation

🔧 Improvements:
- Enhanced SSL ca-file detection with user-friendly warnings
- Apply operation now correctly updates both PENDING and REJECTED entities to APPLIED
- Added dynamic SSL certificate selection for backend servers with validation
- Improved bulk import warnings for SSL management workflow

📝 Technical Details:
- Parser: Enhanced capture pattern matching for flexible http-response directives
- UI: Added conditional SSL certificate select field in BackendServers component
- Backend: Updated apply cleanup to handle REJECTED status in addition to PENDING
- Frontend: Fixed ACL/redirect rules formatting for proper textarea display

 All changes tested and verified with scenario analysis
2025-11-07 11:51:14 +03:00
taylanbakircioglu 6aae0f4309 Initial commit 2025-10-27 12:14:03 +03:00