I'm experiencing `network-get` returning fan network IP address as well on vSphere substrate. I'd expect network-get always to return non-fan address. $ juju --version 2.9-beta1-bionic-amd64 I'm deploying vault and mysql. Both in other vmware VMs. When I run `network-get shared-db` on mysql unit (deployed on VM1), it returns IP from primary network. But when I run `network-get shared-db` on vault unit (deployed on VM2), I get the IP address from the fan network. As a result, vault unit stays blocked and reports "Error initializing storage of type mysql: failed to check mysql schema exist: Error 1130: Host '10.38.0.251' is not allowed to connect to this MySQL server". I checked the mysql.user table on mysql unit and in fact the value for 'Host' is incorrect. It holds the IP address from the fan network range, instead of the IP address of the "physical" NIC. ubuntu@juju-7f9018-15:~$ journalctl -u vault [...] Sep 15 11:18:43 juju-7f9018-15 systemd[1]: Started HashiCorp Vault. Sep 15 11:18:44 juju-7f9018-15 vault[8855]: Error initializing storage of type mysql: failed to check mysql schema exist: Error 1130: Host '10.38.0.251' is not allowed to connect to this MySQL server ubuntu@infra-1:~/deploy$ juju run -m lma -u vault/0 'network-get shared-db --primary-address' 10.1.15.177 ubuntu@infra-1:~/deploy$ juju ssh -m lma vault/0 ip -o -4 a 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever 2: ens192 inet 10.38.0.251/24 brd 10.38.0.255 scope global dynamic ens192\ valid_lft 464sec preferred_lft 464sec 2: ens192 inet 10.38.0.17/24 brd 10.38.0.255 scope global secondary ens192\ valid_lft forever preferred_lft forever 3: fan-10-1 inet 10.1.15.177/20 scope global fan-10-1\ valid_lft forever preferred_lft forever 5: lxdbr0 inet 10.112.216.1/24 scope global lxdbr0\ valid_lft forever preferred_lft forever Connection to 10.38.0.251 closed. Interestingly, on mysql unit, `network-get` returns correct IP address: ubuntu@infra-1:~/deploy$ juju run -m lma -u mysql/0 'network-get shared-db --primary-address' 10.38.0.250 ubuntu@infra-1:~/deploy$ juju run -m lma -u mysql/0 'ip -o -4 a' 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever 2: ens192 inet 10.38.0.250/24 brd 10.38.0.255 scope global dynamic ens192\ valid_lft 513sec preferred_lft 513sec 2: ens192 inet 10.38.0.16/24 brd 10.38.0.255 scope global secondary ens192\ valid_lft forever preferred_lft forever 3: fan-10-1 inet 10.1.15.161/20 scope global fan-10-1\ valid_lft forever preferred_lft forever juju ssh -m lma mysql/0 ubuntu@juju-7f9018-21:~$ mysql -u root -p Enter password: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 2715 Server version: 5.7.20-18-18-log Percona XtraDB Cluster (GPL), Release rel18, Revision e19a6b7, WSREP version 29.24, wsrep_29.24 Copyright (c) 2000, 2020, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. mysql> select Host,User FROM mysql.user; +---------------+---------------+ | Host | User | +---------------+---------------+ | 10.1.15.177 | vault | | 10.1.15.209 | vault | | 10.1.15.81 | vault | | ip6-localhost | sstuser | | localhost | mysql.session | | localhost | mysql.sys | | localhost | root | | localhost | sstuser | +---------------+---------------+ 8 rows in set (0.00 sec)