From 3639ee4ce3bf0f265b6a479fb3a3546b2ac4d977 Mon Sep 17 00:00:00 2001 From: Oyvind Albrigtsen Date: Mon, 15 Jun 2026 12:03:23 +0200 Subject: [PATCH] - fence_ibm_vpc: set proxy when token has expired as well Resolves: RHEL-183892 --- ...-proxy-when-token-is-expired-as-well.patch | 21 +++++++++++++++++++ fence-agents.spec | 8 ++++++- 2 files changed, 28 insertions(+), 1 deletion(-) create mode 100644 RHEL-183892-fence_ibm_vpc-set-proxy-when-token-is-expired-as-well.patch diff --git a/RHEL-183892-fence_ibm_vpc-set-proxy-when-token-is-expired-as-well.patch b/RHEL-183892-fence_ibm_vpc-set-proxy-when-token-is-expired-as-well.patch new file mode 100644 index 0000000..6b4ecff --- /dev/null +++ b/RHEL-183892-fence_ibm_vpc-set-proxy-when-token-is-expired-as-well.patch @@ -0,0 +1,21 @@ +From 267cfcefb5830c4d4cc02c4d28ba3f4489a9c427 Mon Sep 17 00:00:00 2001 +From: Oyvind Albrigtsen +Date: Mon, 15 Jun 2026 11:23:31 +0200 +Subject: [PATCH] fence_ibm_vpc: set proxy when token has expired as well + +--- + agents/ibm_vpc/fence_ibm_vpc.py | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/agents/ibm_vpc/fence_ibm_vpc.py b/agents/ibm_vpc/fence_ibm_vpc.py +index 1acab72e6..69bd72146 100755 +--- a/agents/ibm_vpc/fence_ibm_vpc.py ++++ b/agents/ibm_vpc/fence_ibm_vpc.py +@@ -198,6 +198,7 @@ def send_command(conn, options, command, method="GET", action=None, expected_rc= + # auth if token has expired + if rc in [400, 401, 415]: + tokenconn = pycurl.Curl() ++ tokenconn.setopt(pycurl.PROXY, "{}".format(opt["--proxy"])) + token = get_bearer_token(tokenconn, options) + tokenconn.close() + conn = set_bearer_token(conn, token) diff --git a/fence-agents.spec b/fence-agents.spec index 255541a..f7e1009 100644 --- a/fence-agents.spec +++ b/fence-agents.spec @@ -47,7 +47,7 @@ Name: fence-agents Summary: Set of unified programs capable of host isolation ("fencing") Version: 4.10.0 -Release: 114%{?alphatag:.%{alphatag}}%{?dist} +Release: 115%{?alphatag:.%{alphatag}}%{?dist} License: GPLv2+ and LGPLv2+ URL: https://github.com/ClusterLabs/fence-agents Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz @@ -219,6 +219,7 @@ Patch74: RHEL-128926-1-fence_gce-make-zone-parameter-optional.patch Patch75: RHEL-128926-2-fence_gce-fix-node-list-limit.patch Patch76: RHEL-145088-fence_ibm_vpc-fix-missing-statuses.patch Patch77: RHEL-146216-fence_kubevirt-report-Succeeded-and-Failed-as-OFF.patch +Patch78: RHEL-183892-fence_ibm_vpc-set-proxy-when-token-is-expired-as-well.patch ### HA support libs/utils ### # all archs @@ -420,6 +421,7 @@ BuildRequires: %{systemd_units} %patch -p1 -P 75 %patch -p1 -P 76 %patch -p1 -P 77 +%patch -p1 -P 78 # prevent compilation of something that won't get used anyway sed -i.orig 's|FENCE_ZVM=1|FENCE_ZVM=0|' configure.ac @@ -1518,6 +1520,10 @@ are located on corosync cluster nodes. %endif %changelog +* Mon Jun 15 2026 Oyvind Albrigtsen - 4.10.0-115 +- fence_ibm_vpc: set proxy when token has expired as well + Resolves: RHEL-183892 + * Mon Jun 8 2026 Oyvind Albrigtsen - 4.10.0-114 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182311