cinder-csi-plugin TLS handshake timeout

[David van der Spek]

When I deploy Charmed Kubernetes on OpenStack with the OpenStack Integrator Charm I have not been able to get the cinder storage backend working for a while now. I have tried using revision 81, 85, 87 and 89 of the charm, all of which give the same error. I'm guessing there is something I am not doing correctly; however, I have tried setting the root-ca.crt manually in both the creds.json as well as directly in the charm configuration and I can't seem to fix the issue. The csi-attacher, csi-provisioner and csi-snapshotter all show:
W0913 11:59:50.461167 1 connection.go:170] Still connecting to unix:///var/lib/csi/sockets/pluginproxy/csi.sock

While cinder-csi-plugin logs show:

=== cinder-csi-plugin ===
I0913 12:03:23.298030 1 driver.go:57] Driver: cinder.csi.openstack.org version: 1.2.0
I0913 12:03:23.298134 1 driver.go:90] Enabling controller service capability: LIST_VOLUMES
I0913 12:03:23.298146 1 driver.go:90] Enabling controller service capability: CREATE_DELETE_VOLUME
I0913 12:03:23.298152 1 driver.go:90] Enabling controller service capability: PUBLISH_UNPUBLISH_VOLUME
I0913 12:03:23.298159 1 driver.go:90] Enabling controller service capability: CREATE_DELETE_SNAPSHOT
I0913 12:03:23.298165 1 driver.go:90] Enabling controller service capability: LIST_SNAPSHOTS
I0913 12:03:23.298171 1 driver.go:90] Enabling controller service capability: EXPAND_VOLUME
I0913 12:03:23.298202 1 driver.go:102] Enabling volume access mode: SINGLE_NODE_WRITER
I0913 12:03:23.298219 1 driver.go:112] Enabling node service capability: STAGE_UNSTAGE_VOLUME
I0913 12:03:23.298231 1 driver.go:112] Enabling node service capability: EXPAND_VOLUME
I0913 12:03:23.299459 1 openstack.go:81] Block storage opts: {0}
W0913 12:03:33.305305 1 main.go:121] Failed to GetOpenStackProvider: Post https://10.50.0.5:5000/v3/auth/tokens: net/http: TLS handshake timeout

[George Kraft (cynerva)]

Can you provide reproduction steps for this? We need to know what charms you're using, the charm revisions, the version of Kubernetes, and the version of OpenStack.

> W0913 12:03:33.305305 1 main.go:121] Failed to GetOpenStackProvider: Post https://10.50.0.5:5000/v3/auth/tokens: net/http: TLS handshake timeout

I assume 10.50.0.5 is a reasonable address to reach Keystone? I would check keystone logs to see if it's logging anything about this.