nova-api/metadata container can't access novajoin's cloud-init script

[Juan Antonio Osorio Robles]

The novajoin cloud-init script isn't accessible for the nova-api/metadata container to use. We also shouldn't assume that novajoin is in the same node as nova-api (even though it's still just the undercloud... but for good practice). So the ideal case would be that the nova-api container would have the novajoin package installed and use the cloud-init script directly from its own filesystem.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/588136

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/588136
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=46b4c027f968edb9bcb739f1c5d17cebd156d239
Submitter: Zuul
Branch: master

commit 46b4c027f968edb9bcb739f1c5d17cebd156d239
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Thu Aug 2 07:50:18 2018 +0300

    Add python-novajoin to nova-api packages

    This is meant for TLS everywhere; This way the nova-metadata and
    nova-api containers will have access to the cloud-init script that the
    novajoin package provides.

    Change-Id: I04bc17e4568047d949b5c398d714a4a1afaa7172
    Closes-Bug: #1784991

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.openstack.org/589352

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589352
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=12f61b59a8c84fb4e37884014dee2491c844d21a
Submitter: Zuul
Branch: master

commit 12f61b59a8c84fb4e37884014dee2491c844d21a
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Tue Aug 7 07:56:56 2018 +0300

    Add novajoin package to nova-compute image

    There is a code-path where the compute node needs to access the
    cloud-init script provided by novajoin. Thus, the package is needed for
    TLS everywhere.

    Change-Id: I176ba747224e4465de9c5745d394d4bbc9864232
    Related-Bug: #1784991

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/592280

[OpenStack Infra (hudson-openstack)]

Change abandoned by Alex Schultz (<email address hidden>) on branch: master
Review: https://review.openstack.org/592280
Reason: ci is broken and i asked for no approvals. I will restore when ci is fixed

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/592280
Committed: https://git.openstack.org/cgit/openstack/tripleo-common/commit/?id=7cf28ce37d3a09793f3038d0cca89dcf045a5499
Submitter: Zuul
Branch: master

commit 7cf28ce37d3a09793f3038d0cca89dcf045a5499
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Thu Aug 16 09:17:03 2018 +0300

    Move python-novajoin package to nova-compute-ironic

    nova-compute-ironic is what's actually used in the undercloud for
    the compute image. I had initially thought that it inherited packages
    from nova-compute, but instead it inherits from nova-base. So the error
    related to TLS everywhere is still there since the package is missing.

    Change-Id: Ibee640693626366b062fa872af805f4f9073d096
    Closes-Bug: #1784991

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-common 9.3.0 release.