juju blocked in installing agent using default space: juju.worker.httpserver http: TLS handshake error

[macchese]

when I try to deploy a lxd unit with a single network interface on the default space, it remains blocked.

I set up an openstack bundle (2023.2) but then I didn't succeed in deploying by juju a new machine as simple lxd container on my default space. I have 3 HA juju controllers
My env:

juju/snap:
ubuntu@juju:~$ snap list
Name Version Rev Tracking Publisher Notes
core18 20240416 2823 latest/stable canonical✓ base
core20 20240416 2318 latest/stable canonical✓ base
core22 20240408 1380 latest/stable canonical✓ base
juju 3.5.0 27049 3/stable canonical✓ -
juju-db 4.4.24 178 4.4/stable juju-qa -
lxd 5.0.3-d921d2e 28373 5.0/stable/… canonical✓ -
openstackclients yoga 338 yoga/stable canonical✓ -
snapd 2.62 21465 latest/stable canonical✓ snapd
vault 1.15.6 2226 1.15/stable canonical✓ -
yq v4.40.5 2450 latest/stable mikefarah -

maas spaces:
https://paste.ubuntu.com/p/BrFCPSfYcw/

controllers:
https://paste.ubuntu.com/p/YBzKRMKdtq/

controllers model's config:
https://paste.ubuntu.com/p/BVvCCzR995/

controller/0 ip conf:
https://paste.ubuntu.com/p/X8wwGHgm5r/

openstack bundle:
https://paste.ubuntu.com/p/bKFnbTrdww/

openstack model config:
https://paste.ubuntu.com/p/prRRTpTRrN/

how I did:
$ juju deploy ubuntu --to lxd:7
Located charm "ubuntu" in charm-hub, revision 24
Deploying "ubuntu" from charm-hub charm "ubuntu", revision 24 in channel stable on ubuntu@22.04/stable

from now it remains "pending"
https://paste.ubuntu.com/p/sj4zvQjvHv/

logging into the new container, the network is ok
https://paste.ubuntu.com/p/cGPSBjGMNn/

but it cannot download tools/3.2.4-ubuntu-amd64/tools.tar.gz from any of the controllers
https://paste.ubuntu.com/p/HkR2wtSZ8W/

and the logs from the controller say:
machine-0: 17:34:43 WARNING juju.worker.httpserver http: TLS handshake error from 192.168.70.190:41782: EOF

If I deploy the container on a non-default space, it works:

$juju deploy ubuntu ub-alt --bind op-cluster-space --to lxd:7

status:
https://paste.ubuntu.com/p/hsXDn48yMj/

[macchese (max-liccardo)]

another strange behavior is that if I try to download directly tools/3.2.4-ubuntu-amd64/tools.tar.gz using wget or curl, it works only if my source network is not in the default space.

[macchese (max-liccardo)]

The problem was a docker bridge on the controller: removed it, now it works