If the CC and CLC are on different machines, meta-data service is unreachable by nodes

Bug #444838 reported by Daniel Nurmi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Eucalyptus
Fix Released
Medium
Daniel Nurmi
1.6
Fix Released
Undecided
Unassigned
eucalyptus (Ubuntu)
Fix Released
Low
Thierry Carrez

Bug Description

The CC has been setting a redirect for the metadata service to the machine that is being assigned 169.254.169.254 (the CC has been assigning itself this IP). Thus, if the CLC is on a different machine from the CC, the re-direct does not work without manual intervention (pre-setting iptables rules with an appropriate re-direct). revno 914 contains a way for the admin to override the re-direct endpoint by specifying VNET_CLOUDIP in eucalyptus.conf (if the option is unset, the default is still to use the local machine).

Changed in eucalyptus (Ubuntu):
status: New → In Progress
importance: Undecided → Low
assignee: nobody → Dustin Kirkland (kirkland)
Changed in eucalyptus (Ubuntu):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package eucalyptus - 1.6~bzr916-0ubuntu1

---------------
eucalyptus (1.6~bzr916-0ubuntu1) karmic; urgency=low

  * Merge upstream revision 916
  * This snapshot is expected to fix the following bugs:
    - LP: #443314 - fix system address selection
    - LP: #443325 - fix regression in heartbeat, fix NPE in system mode
    - LP: #444838 - fix meta-data service in multi-cluster
    - LP: #444908 - fix running instances on multi-cluster
    - LP: #445206 - fix remote bootstrap on walrus+sc
  * debian/eucalyptus-cc.eucalyptus-cc-publication.upstart,
    debian/local/euca_find_cluster.c: when doing the avahi-publish, use
    $CC_IP_ADDR rather than $(hostname) for the "name" of the service;
    use this ip address in the case where euca_find_cluster gets the
    link-local 169.254.169.254 address, LP: #445738

 -- Dustin Kirkland <email address hidden> Wed, 07 Oct 2009 20:01:56 -0500

Changed in eucalyptus (Ubuntu):
status: Fix Committed → Fix Released
Revision history for this message
Thierry Carrez (ttx) wrote :

Fix is incomplete, per upstream, and fully fixed in rev923

Changed in eucalyptus (Ubuntu):
assignee: Dustin Kirkland (kirkland) → nobody
status: Fix Released → Triaged
Thierry Carrez (ttx)
Changed in eucalyptus (Ubuntu):
assignee: nobody → Thierry Carrez (ttx)
status: Triaged → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (3.6 KiB)

This bug was fixed in the package eucalyptus - 1.6~bzr930-0ubuntu1

---------------
eucalyptus (1.6~bzr930-0ubuntu1) karmic; urgency=low

  [ Dustin Kirkland ]
  * debian/eucalyptus-url, debian/eucalyptus-cc.install,
    debian/eucalyptus-cc.links, debian/eucalyptus-cc.postinst::
    - fix whitespace, to match other update-motd urls LP: #450449
    - link to ubuntu.com/cloud, which links to our documentation,
      necessary for new UEC admins
    - ensure that it gets installed with executable permissions,
      LP: #444970
  * debian/eucalyptus-udeb.finish-install: fix typo; fix breakage of
    /etc/network/interfaces when nodes are configured with static IP
    addresses, LP: #446023
  * eucalyptus-cc.upstart,
    eucalyptus-cloud.eucalyptus-cc-registration.upstart,
    eucalyptus-cloud.eucalyptus-sc-registration.upstart,
    eucalyptus-cloud.eucalyptus-walrus-registration.upstart,
    eucalyptus-sc.upstart, eucalyptus-walrus.upstart, rules, control:
    - registration of cc/sc/walrus should *only* ever occur on the CLC,
      so these scripts should be moved to the eucalyptus-cloud package,
      LP: #450815
    - starting cc/sc/walrus should *not* depend on eucalyptus-cloud
      running, since these components can be installed on separate
      machines, LP: #450777
    - but if cc/sc/walrus are on a system doing registration, ensure that
      these jobs kick off when "starting" registration
    - allow for whitespace separated list of $CC_IP_ADDR and $SC_IP_ADDR,
      as there can be more than one of these, and admins in multi-cluster
      or multi-component mode would need to register a list
    - use Replaces to ensure upgrades work properly
  * debian/eucalyptus-ipaddr.conf: update inline documentation accordingly
  * debian/eucalyptus-cc.templates: update public_ips instructions in the
    installer to match the new upstream implementation, LP: #438565
  * eucalyptus-common.eucalyptus.upstart: fix unclean package purging,
    which hangs on stopping eucalyptus service

  [ Upstream ]
  * Merge upstream revision 930
  * This snapshot is expected to fix the following bugs:
    - LP: #449944 - fixes remote component bootstrap issue
    - LP: #430852, #401996 - fix handling of security groups for the admin
    - LP: #449948 - fix issues with network index and address recovery after
      a system restart
    - LP: #398867 - fix storing VLAN tag info from web ui
    - LP: #430266 - fix setting of HTTP error codes
    - LP: #449948 - part of fix to LP:#449948 the CC now correctly sets the
      networkIndex field in the reponse message of describeInstances
    - LP: #438565 - allowing a range of IPs to be specified in the
      VNET_PUBLICIPS field of eucalyptus.conf
    - LP: #449143 - Add the 169.254.169.254 address to eth0 as 'scope link'
      in order to avoid conflict with the UEC avahi-publish mechanism
    - LP: #449135 - Prevents a segfault in CC during client connection to NC
      on describeInstances, when number of instances is high (> 20 or so).
      The number of bytes sent to 'malloc' was being calculated incorrectly.
    - LP: #444838 - fix to fully allow VMs to access meta-data service in
      MANAGED-NOVLAN, when ...

Read more...

Changed in eucalyptus (Ubuntu):
status: In Progress → Fix Released
Andy Grimm (agrimm)
Changed in eucalyptus:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.