IPA may advertise a wrong IP address for its API

Bug #1558956 reported by Dmitry Tantsur
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
ironic-python-agent
Fix Released
High
Sam Betts

Bug Description

IPA currently advertises IP address of the first NIC that has an IP address. It's not guaranteed that Ironic can actually reach this IP address at all, see for example https://bugzilla.redhat.com/show_bug.cgi?id=1308981.

Changed in ironic-python-agent:
assignee: Dmitry Tantsur (divius) → Sam Betts (sambetts)
Revision history for this message
Sam Betts (sambetts) wrote :

Ironic Python Agent patch:
https://review.openstack.org/#/c/294162/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ironic-python-agent (master)

Reviewed: https://review.openstack.org/294162
Committed: https://git.openstack.org/cgit/openstack/ironic-python-agent/commit/?id=6829d34c150fa1cd41064786e76d41dfccef3ef3
Submitter: Jenkins
Branch: master

commit 6829d34c150fa1cd41064786e76d41dfccef3ef3
Author: Dmitry Tantsur <email address hidden>
Date: Thu Mar 17 17:49:36 2016 +0100

    Bind to interface routable to the ironic host, not a random one

    Binding to the first interface that has an IP address is error-prone: there is
    no guarantee that ironic can reach us via this inteface. It is much safer to
    detect the interface facing ironic and bind to it.

    Unused LookupAgentInterfaceError exception is deleted.

    The TinyIPA build also requires iptables dependency at build time to insert the
    required kernel modules.

    Closes-Bug: #1558956
    Change-Id: I9586805e6c7f52a50834bc03efeb72d1faa6cb65

Changed in ironic-python-agent:
status: In Progress → Fix Released
Revision history for this message
Davanum Srinivas (DIMS) (dims-v) wrote : Fix included in openstack/ironic-python-agent 1.2.0

This issue was fixed in the openstack/ironic-python-agent 1.2.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.