rndc.key in designate-bind's application units is different from rndc.key in designate's units
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Designate-Bind Charm |
New
|
Undecided
|
Unassigned |
Bug Description
Hello,
In a charmed Openstack Yoga with the following designate/
-1 designate application (3 units) (14.0.1, yoga/stable, revision 88)
-1 designate-bind application A (2 units) (9.16.1, yoga/stable, revision 69)
-1 designate-bind application B (2 units) (9.16.1, yoga/stable, revision 69)
-1 designate-bind application C (2 units) (9.16.1, yoga/stable, revision 69)
the /etc/designate/
However, the /etc/bind/rndc.key files for designate-bind applications B and C are different.
This fact leads to the following error in designate logs when creating a zone in the B or C space:
=======
Exit code: 1
Stdout: ''
Stderr: 'rndc: connection to remote host closed\nThis may indicate that\n* the remote server is using an older version of the command protocol,\n* this host is not authorized to connect,\n* the clocks are not synchronized,\n* the key signing algorithm is incorrect, or\n* the key is invalid.\n': designate.
2022-10-20 09:40:54.100 297 INFO designate.
Command: sudo designate-rootwrap /etc/designate/
=======
Steps to reproduce it:
juju deploy -n 3 designate
juju deploy mysql
juju deploy rabbitmq-server
juju deploy keystone
juju deploy memcached
juju add-relation designate memcached
juju add-relation designate mysql
juju add-relation designate rabbitmq-server
juju add-relation designate keystone
juju deploy -n 2 designate-bind designate-bind-A
juju add-relation designate designate-bind-A
juju deploy -n 2 designate-bind designate-bind-B
juju add-relation designate designate-bind-B
juju deploy -n 2 designate-bind designate-bind-C
juju add-relation designate designate-bind-C
juju run --app designate -- "ls -l /etc/designate/
juju run --app designate-bind-A -- "ls -l /etc/bind/rndc.key && cat /etc/bind/rndc.key"
juju run --app designate-bind-B -- "ls -l /etc/bind/rndc.key && cat /etc/bind/rndc.key"
juju run --app designate-bind-C -- "ls -l /etc/bind/rndc.key && cat /etc/bind/rndc.key"
The workaround to this issue is to manually set the contents of /etc/designate/
Thank you,
Jorge R.
description: | updated |
I'd like to add that just changing the rndc.key (and not the rndc.key charm's template) is not enough since it will be overriden by juju.