[Master, API LB] VIP hostname does not get propagated to kubeconfig

If I set extra_sans on both kubernetes-master & api loadbalancer to have:

extra_sans: <VIP> <HOSTNAME>

Then it works.
I believe an alternative is to fix keepalived README to advise to include both on extra_sans parameter.

For me, this is a work-around. I still think we should ditch VIP if we have a hostname configured for it. That will spare deployments where we have, for example, OpenStack provider and the VIP changes every time since ports get created and destroyed on-demand.

Can we see your bundle, or output from `juju status --format yaml`? We'll need to see what kubernetes-master:loadbalancer is related to.

@cynerva, this is the bundle I use to reproduce the issue https://paste.ubuntu.com/p/tjSgkmQ7SZ/ , I ended up with this bundle following the set of commands described in keepalived charm's readme.

ubuntu@juju-04930e-5:~$ export KUBECONFIG=config
ubuntu@juju-04930e-5:~$ kubectl get pods
Unable to connect to the server: x509: certificate is valid for 192.168.10.211, 192.168.10.211, not 192.168.10.34
ubuntu@juju-04930e-5:~$ grep server config
    server: https://192.168.10.34:443
ubuntu@juju-04930e-5:~$ sed -i s/192.168.10.34/loadbalancer.lan/g config
ubuntu@juju-04930e-5:~$ grep server config
    server: https://loadbalancer.lan:443
ubuntu@juju-04930e-5:~$ host loadbalancer.lan
loadbalancer.lan has address 192.168.10.34
ubuntu@juju-04930e-5:~$ kubectl get pods
No resources found in default namespace.
ubuntu@juju-04930e-5:~$ kubectl get componentstatuses
Unable to connect to the server: x509: certificate is valid for 192.168.10.211, 192.168.10.211, not 192.168.10.34
ubuntu@juju-04930e-5:~$ grep server config
    server: https://192.168.10.34:443
ubuntu@juju-04930e-5:~$ sed -i s/192.168.10.34/loadbalancer.lan/g config
ubuntu@juju-04930e-5:~$ kubectl get componentstatuses
NAME STATUS MESSAGE ERROR
scheduler Healthy ok
controller-manager Healthy ok
etcd-2 Healthy {"health":"true"}
etcd-1 Healthy {"health":"true"}
etcd-0 Healthy {"health":"true"}

Thanks for the details. Indeed, it looks like the keepalived charm sends the VIP, not the hostname, over the loadbalancer relation: https://github.com/juju-solutions/charm-keepalived/blob/b1facc0f540d98f9cf4c8ccfea4c8abd9ce796f1/src/reactive/keepalived.py#L100

Hi @cynerva, hacluster also has the same effect and we orientation is to use hacluster instead of keepalived.

When we look for OpenStack bundles, each openstack service has a os-*-hostname option (where * is public, private or admin).
That is set on the charms themselves. Maybe, that should be the approach for k8s charms as well.

@pguimaraes Can you provide more details on the issue with hacluster?

Were you using hacluster with or without kubeapi-load-balancer?

Did you configure ha-cluster-vip, ha-cluster-dns, or both?

Are you able to work around it with extra_sans?