Can you confirm that you did set metadata_proxy_shared_secret consistently in nova.conf and neutron/metadata_agent.ini on the controller and network nodes?
Can you confirm that you did set metadata_ proxy_shared_ secret consistently in nova.conf and neutron/ metadata_ agent.ini on the controller and network nodes?