cinder-csi-plugin TLS handshake timeout
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Openstack Integrator Charm |
Incomplete
|
Undecided
|
Unassigned |
Bug Description
When I deploy Charmed Kubernetes on OpenStack with the OpenStack Integrator Charm I have not been able to get the cinder storage backend working for a while now. I have tried using revision 81, 85, 87 and 89 of the charm, all of which give the same error. I'm guessing there is something I am not doing correctly; however, I have tried setting the root-ca.crt manually in both the creds.json as well as directly in the charm configuration and I can't seem to fix the issue. The csi-attacher, csi-provisioner and csi-snapshotter all show:
W0913 11:59:50.461167 1 connection.go:170] Still connecting to unix://
While cinder-csi-plugin logs show:
=== cinder-csi-plugin ===
I0913 12:03:23.298030 1 driver.go:57] Driver: cinder.
I0913 12:03:23.298134 1 driver.go:90] Enabling controller service capability: LIST_VOLUMES
I0913 12:03:23.298146 1 driver.go:90] Enabling controller service capability: CREATE_
I0913 12:03:23.298152 1 driver.go:90] Enabling controller service capability: PUBLISH_
I0913 12:03:23.298159 1 driver.go:90] Enabling controller service capability: CREATE_
I0913 12:03:23.298165 1 driver.go:90] Enabling controller service capability: LIST_SNAPSHOTS
I0913 12:03:23.298171 1 driver.go:90] Enabling controller service capability: EXPAND_VOLUME
I0913 12:03:23.298202 1 driver.go:102] Enabling volume access mode: SINGLE_NODE_WRITER
I0913 12:03:23.298219 1 driver.go:112] Enabling node service capability: STAGE_UNSTAGE_
I0913 12:03:23.298231 1 driver.go:112] Enabling node service capability: EXPAND_VOLUME
I0913 12:03:23.299459 1 openstack.go:81] Block storage opts: {0}
W0913 12:03:33.305305 1 main.go:121] Failed to GetOpenStackPro
Can you provide reproduction steps for this? We need to know what charms you're using, the charm revisions, the version of Kubernetes, and the version of OpenStack.
> W0913 12:03:33.305305 1 main.go:121] Failed to GetOpenStackPro vider: Post https:/ /10.50. 0.5:5000/ v3/auth/ tokens: net/http: TLS handshake timeout
I assume 10.50.0.5 is a reasonable address to reach Keystone? I would check keystone logs to see if it's logging anything about this.