yahoo-eng-team team mailing list archive

[Tony Breeds <tony@xxxxxxxxxxxxxxxxxx>]

** Changed in: nova/pike
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1751349

Title:
  Keystone auth parameters cannot be configured in [keystone] section

Status in OpenStack Compute (nova):
  Invalid
Status in OpenStack Compute (nova) pike series:
  Invalid

Bug description:
  I am seeing nova-api attempting to use the keystone public endpoint
  when /v2.1/os-quota-sets is called on my Pike deployment. This is not
  valid in my environment; the API must use the internal endpoint to
  reach keystone. When the public endpoint is used, the connection sits
  in SYN_SENT state in netstat until it times out after a minute or two.

  Hacking the endpoint_filter at
  https://github.com/openstack/nova/blob/d536bec9fc098c9db8d46f39aab30feb0783e428/nova/api/openstack/identity.py#L43-L46
  to include interface=internal fixes the issue.

  Unless I am mistaken this issue still exists in master:
  https://github.com/openstack/nova/blob/ef4000a0d326deb004843ee51d18030224c5630f/nova/api/openstack/identity.py#L33-L35

  Something similar to the [placement] section should be implemented
  allowing os_interface to be configured.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1751349/+subscriptions