admin_address cannot be configured independently of internal_address

Bug #1535333 reported by Paul Bourke on 2016-01-18
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Dave McCowan

Bug Description

Some administrators want to configure the management endpoint to be on a separate interface to the internal address.

Steven Dake (sdake) on 2016-02-18
Changed in kolla:
milestone: none → mitaka-3
assignee: nobody → Dave McCowan (dave-mccowan)
importance: Undecided → Critical
status: New → Invalid

Fix proposed to branch: master

Changed in kolla:
status: Invalid → In Progress

Submitter: Jenkins
Branch: master

commit 34c2cb8e64c4758ec9e834dc3fabc9f5835fe9ac
Author: Dave McCowan <email address hidden>
Date: Thu Feb 18 13:50:39 2016 -0500

    Implement Option for Two VIPs to separate API traffic

    To improve security, operators have asked for two VIPs for
    their cloud.

    VIP 1 is the internal VIP that can reach internal and admin endpoints.
    In addition, the internal VIP can also reach other internal services,
    such as the database and message services.
    VIP 2 is the external VIP that can only reach public endpoints.

    With one VIP only, all services are reached at the same address.

    To add a second VIP, this patch adds two new configuration parameters.

    kolla_external_vip_address: is an IPv4 address to use for created VIP
    kolla_external_vip_interface: is the network interface to use for VIP
    In this scenario, the first VIP (the internal VIP), is defined by
    the original parameters (kolla_internal address and network_interface).

    When using two VIPs, the existing kolla_external_address parameter
    should be/point to/resolve to the kolla_external_vip_address.

    Closes-bug: 1535333

    Change-Id: I5bfcefaf7899298455cdade8209c34324aebfecb

Changed in kolla:
status: In Progress → Fix Released

Change abandoned by Paul Bourke (<email address hidden>) on branch: master

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers