gss relies on service_host (public api) endpoints ignoring ingress-address for the identity endpoint
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
glance-simplestreams-sync (Juju Charms Collection) |
New
|
Undecided
|
Unassigned |
Bug Description
ingress address provided by keystone is 10.232.6.200 (oam-space) while service_host is 10.232.45.236 (public space)
The LXD container used by GSS will only have an oam interface causing a silent connection failure as gss doesn't report anything via its status:
juju deploy cs:bionic/
File "./glance-
main()
File "./glance-
ksc = get_keystone_
File "./glance-
project_
File "/usr/lib/
self.
File "/usr/lib/
resp = self.get_
File "/usr/lib/
_('
keystoneauth1.
juju run --unit glance-
admin_domain_id: 24eecdf281e544b
admin_token: Cg36p9Z2VVY8kXx
api_version: "3"
auth_host: 10.232.6.200
auth_port: "35357"
auth_protocol: http
egress-subnets: 10.232.6.200/32
ingress-address: 10.232.6.200
private-address: 10.232.6.200
service_domain: service_domain
service_domain_id: 2510a9c3f898421
service_host: 10.232.45.236
service_password: sKXt8VJkTwG8sxL
service_port: "5000"
service_protocol: http
service_tenant: services
service_tenant_id: 451a055f18b84f1
service_username: image-stream