Comment 25 for bug 1884312

Revision history for this message
Corey Bryant (corey.bryant) wrote :

Jeff, here's what I'm seeing in my local deployment. This is with the attached focal-ussuri bundle I know you're using bionic-stein. I'm not sure the openstack release matters. All services are active but it seems as if I'm getting similar relation-get data that you were seeing; only getting role_id and token from the vault leader.

$ juju status --format short nova-compute vault

- nova-compute/0: 10.5.0.21 (agent:idle, workload:active)
  - ovn-chassis/0: 10.5.0.21 (agent:idle, workload:active)
- nova-compute/1: 10.5.0.184 (agent:idle, workload:active)
  - ovn-chassis/2: 10.5.0.184 (agent:idle, workload:active)
- nova-compute/2: 10.5.0.164 (agent:idle, workload:active)
  - ovn-chassis/1: 10.5.0.164 (agent:idle, workload:active)
- vault/0: 10.5.0.8 (agent:idle, workload:active) 8200/tcp
  - vault-mysql-router/1: 10.5.0.8 (agent:idle, workload:active)
- vault/1: 10.5.0.29 (agent:idle, workload:active) 8200/tcp
  - vault-mysql-router/2: 10.5.0.29 (agent:idle, workload:active)
- vault/2: 10.5.0.185 (agent:idle, workload:active) 8200/tcp
  - vault-mysql-router/0: 10.5.0.185 (agent:idle, workload:active)

$ juju run --unit nova-compute/0 'relation-get -r secrets-storage:63 - vault/0'
egress-subnets: 10.5.0.8/32
ingress-address: 10.5.0.8
private-address: 10.5.0.8
vault_url: '"http://10.5.0.8:8200"'

$ juju run --unit nova-compute/0 'relation-get -r secrets-storage:63 - vault/1'
egress-subnets: 10.5.0.29/32
ingress-address: 10.5.0.29
nova-compute/0_role_id: '"ef15b909-efb8-607c-dc34-77ff094e4fc9"'
nova-compute/0_token: '"s.TfCNHSO8lzDUgkZ7jFiNN6el"'
nova-compute/1_role_id: '"65063d25-5e31-a6c4-0d67-9fc7b2f0d136"'
nova-compute/1_token: '"s.j2cO4M12GavhyXQjKsekA8fB"'
nova-compute/2_role_id: '"57b9af31-2003-6950-d824-1803e304bec2"'
nova-compute/2_token: '"s.KJWpuoXbpTbOJOewJdXjZWqh"'
private-address: 10.5.0.29
vault_url: '"http://10.5.0.29:8200"'

$ juju run --unit nova-compute/0 'relation-get -r secrets-storage:63 - vault/2'
egress-subnets: 10.5.0.185/32
ingress-address: 10.5.0.185
private-address: 10.5.0.185
vault_url: '"http://10.5.0.185:8200"'

$ juju run --unit vault/1 'is-leader'
True