ironic-neutron-agent attempts to use public endpoint

Bug #1990675 reported by Pierre Riteau
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Undecided
Pierre Riteau

Bug Description

ironic-neutron-agent logs were showing the following messages:

2022-09-23 14:39:15.867 7 WARNING keystoneauth.discover [req-4d313f9d-9e42-4b11-9387-32681152259a - - - - -] Failed to contact the endpoint at https://<external_fqdn>:6385 for discovery. Fallback to using that endpoint as the base url.
2022-09-23 14:40:15.878 7 WARNING keystoneauth.discover [req-4d313f9d-9e42-4b11-9387-32681152259a - - - - -] Failed to contact the endpoint at https://<external_fqdn>:6385 for discovery. Fallback to using that endpoint as the base url.
2022-09-23 14:40:15.880 7 ERROR networking_baremetal.ironic_client [req-4d313f9d-9e42-4b11-9387-32681152259a - - - - -] Ironic API might not be running, failed to establish a connection with ironic, reason: The baremetal service for <internal_vip>:RegionOne exists but does not have any supported versions.. Retrying ...: openstack.exceptions.NotSupported: The baremetal service for 172.23.20.1:RegionOne exists but does not have any supported versions.

External, internal and backend TLS are in use, with a private CA for internal and backend TLS.

With tcpdump I could occasionally see attempts to connect to the Ironic API with HTTP instead of HTTPS generating 400 errors, however I am not sure that they were coming from ironic-neutron-agent.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)
Changed in kolla-ansible:
status: New → In Progress
Pierre Riteau (priteau)
Changed in kolla-ansible:
assignee: nobody → Pierre Riteau (priteau)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/859113
Committed: https://opendev.org/openstack/kolla-ansible/commit/39eafd068b46991494684f5880a8873d288f9ccb
Submitter: "Zuul (22348)"
Branch: master

commit 39eafd068b46991494684f5880a8873d288f9ccb
Author: Pierre Riteau <email address hidden>
Date: Mon Sep 26 10:52:38 2022 +0200

    Fix interface option for ironic-neutron-agent

    The correct option to use is valid_interfaces [1], not os_endpoint_type.

    [1] https://docs.openstack.org/networking-baremetal/latest/configuration/ironic-neutron-agent/config.html#ironic

    Closes-Bug: #1990675
    Change-Id: I35e7d3072c6340f4ecbe02f8961158bcb663954e

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/yoga)

Fix proposed to branch: stable/yoga
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/860134

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/xena)

Fix proposed to branch: stable/xena
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/860135

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/860136

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/victoria)

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/860137

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/xena)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/860135
Committed: https://opendev.org/openstack/kolla-ansible/commit/685d4545d890743fb274c41659d66571a5cd2ab9
Submitter: "Zuul (22348)"
Branch: stable/xena

commit 685d4545d890743fb274c41659d66571a5cd2ab9
Author: Pierre Riteau <email address hidden>
Date: Mon Sep 26 10:52:38 2022 +0200

    Fix interface option for ironic-neutron-agent

    The correct option to use is valid_interfaces [1], not os_endpoint_type.

    [1] https://docs.openstack.org/networking-baremetal/latest/configuration/ironic-neutron-agent/config.html#ironic

    Closes-Bug: #1990675
    Change-Id: I35e7d3072c6340f4ecbe02f8961158bcb663954e
    (cherry picked from commit 39eafd068b46991494684f5880a8873d288f9ccb)

tags: added: in-stable-xena
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/victoria)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/860137
Committed: https://opendev.org/openstack/kolla-ansible/commit/009520215f4c0d4d04dc5db7c27bb71b29f4c4b9
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit 009520215f4c0d4d04dc5db7c27bb71b29f4c4b9
Author: Pierre Riteau <email address hidden>
Date: Mon Sep 26 10:52:38 2022 +0200

    Fix interface option for ironic-neutron-agent

    The correct option to use is valid_interfaces [1], not os_endpoint_type.

    [1] https://docs.openstack.org/networking-baremetal/latest/configuration/ironic-neutron-agent/config.html#ironic

    Closes-Bug: #1990675
    Change-Id: I35e7d3072c6340f4ecbe02f8961158bcb663954e
    (cherry picked from commit 39eafd068b46991494684f5880a8873d288f9ccb)

tags: added: in-stable-victoria
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 13.5.0

This issue was fixed in the openstack/kolla-ansible 13.5.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/yoga)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/860134
Committed: https://opendev.org/openstack/kolla-ansible/commit/986ff77c146e8d93b371eb3ae884cdaec9a75177
Submitter: "Zuul (22348)"
Branch: stable/yoga

commit 986ff77c146e8d93b371eb3ae884cdaec9a75177
Author: Pierre Riteau <email address hidden>
Date: Mon Sep 26 10:52:38 2022 +0200

    Fix interface option for ironic-neutron-agent

    The correct option to use is valid_interfaces [1], not os_endpoint_type.

    [1] https://docs.openstack.org/networking-baremetal/latest/configuration/ironic-neutron-agent/config.html#ironic

    Closes-Bug: #1990675
    Change-Id: I35e7d3072c6340f4ecbe02f8961158bcb663954e
    (cherry picked from commit 39eafd068b46991494684f5880a8873d288f9ccb)

tags: added: in-stable-yoga
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/860136
Committed: https://opendev.org/openstack/kolla-ansible/commit/d5bb7a362cf6339d6f04b91ed0ccd958b9b9323d
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit d5bb7a362cf6339d6f04b91ed0ccd958b9b9323d
Author: Pierre Riteau <email address hidden>
Date: Mon Sep 26 10:52:38 2022 +0200

    Fix interface option for ironic-neutron-agent

    The correct option to use is valid_interfaces [1], not os_endpoint_type.

    [1] https://docs.openstack.org/networking-baremetal/latest/configuration/ironic-neutron-agent/config.html#ironic

    Closes-Bug: #1990675
    Change-Id: I35e7d3072c6340f4ecbe02f8961158bcb663954e
    (cherry picked from commit 39eafd068b46991494684f5880a8873d288f9ccb)

tags: added: in-stable-wallaby
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to kolla-ansible (master)

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/863026

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/863026
Committed: https://opendev.org/openstack/kolla-ansible/commit/fa96fd1a2f85c8286467ba11d0177df638550e8a
Submitter: "Zuul (22348)"
Branch: master

commit fa96fd1a2f85c8286467ba11d0177df638550e8a
Author: Mark Goddard <email address hidden>
Date: Mon Oct 31 09:40:40 2022 +0000

    Fix ironic interface option for ironic-inspector

    The correct option to use is valid_interfaces [1], not os_endpoint_type.
    The os_endpoint_type option was removed in Train.

    [1] https://docs.openstack.org/ironic-inspector/wallaby/configuration/sample-config.html

    Change-Id: I3906d7b9a2bebfe5c323cba5f80add3e932468c8
    Closes-Bug: #1995246
    Related-Bug: #1990675

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to kolla-ansible (stable/yoga)

Related fix proposed to branch: stable/yoga
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/863248

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to kolla-ansible (stable/xena)

Related fix proposed to branch: stable/xena
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/863249

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to kolla-ansible (stable/wallaby)

Related fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/863270

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 14.6.0

This issue was fixed in the openstack/kolla-ansible 14.6.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to kolla-ansible (stable/xena)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/863249
Committed: https://opendev.org/openstack/kolla-ansible/commit/4d8224658dee3d406e2252563d38d7423136004b
Submitter: "Zuul (22348)"
Branch: stable/xena

commit 4d8224658dee3d406e2252563d38d7423136004b
Author: Mark Goddard <email address hidden>
Date: Mon Oct 31 09:40:40 2022 +0000

    Fix ironic interface option for ironic-inspector

    The correct option to use is valid_interfaces [1], not os_endpoint_type.
    The os_endpoint_type option was removed in Train.

    [1] https://docs.openstack.org/ironic-inspector/wallaby/configuration/sample-config.html

    Change-Id: I3906d7b9a2bebfe5c323cba5f80add3e932468c8
    Closes-Bug: #1995246
    Related-Bug: #1990675
    (cherry picked from commit fa96fd1a2f85c8286467ba11d0177df638550e8a)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to kolla-ansible (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/863270
Committed: https://opendev.org/openstack/kolla-ansible/commit/5beeef9458924af574488a5f158ab2850b4fae50
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit 5beeef9458924af574488a5f158ab2850b4fae50
Author: Mark Goddard <email address hidden>
Date: Mon Oct 31 09:40:40 2022 +0000

    Fix ironic interface option for ironic-inspector

    The correct option to use is valid_interfaces [1], not os_endpoint_type.
    The os_endpoint_type option was removed in Train.

    [1] https://docs.openstack.org/ironic-inspector/wallaby/configuration/sample-config.html

    Change-Id: I3906d7b9a2bebfe5c323cba5f80add3e932468c8
    Closes-Bug: #1995246
    Related-Bug: #1990675
    (cherry picked from commit fa96fd1a2f85c8286467ba11d0177df638550e8a)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to kolla-ansible (stable/yoga)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/863248
Committed: https://opendev.org/openstack/kolla-ansible/commit/232ec4e72de0363406759e14b252f4a7081987b2
Submitter: "Zuul (22348)"
Branch: stable/yoga

commit 232ec4e72de0363406759e14b252f4a7081987b2
Author: Mark Goddard <email address hidden>
Date: Mon Oct 31 09:40:40 2022 +0000

    Fix ironic interface option for ironic-inspector

    The correct option to use is valid_interfaces [1], not os_endpoint_type.
    The os_endpoint_type option was removed in Train.

    [1] https://docs.openstack.org/ironic-inspector/wallaby/configuration/sample-config.html

    Change-Id: I3906d7b9a2bebfe5c323cba5f80add3e932468c8
    Closes-Bug: #1995246
    Related-Bug: #1990675
    (cherry picked from commit fa96fd1a2f85c8286467ba11d0177df638550e8a)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 15.0.0.0rc1

This issue was fixed in the openstack/kolla-ansible 15.0.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible victoria-eol

This issue was fixed in the openstack/kolla-ansible victoria-eol release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible wallaby-eol

This issue was fixed in the openstack/kolla-ansible wallaby-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.