So, I'm suspecting some bad configuration on the Nova side for Keystone admin authentication from neutronclient called in the metadata API service.
Since Nova recreates a new auth token for the metadata calls, we need to have the right opts in nova.conf for using the keystone strategy.
Check out nova.conf on your nova-metadata-api service and look at [keystone_authtoken] section.
Marking the bug as Invalid as I'm suspecting some configuration issue.
So, I'm suspecting some bad configuration on the Nova side for Keystone admin authentication from neutronclient called in the metadata API service.
Since Nova recreates a new auth token for the metadata calls, we need to have the right opts in nova.conf for using the keystone strategy.
Check out nova.conf on your nova-metadata-api service and look at [keystone_ authtoken] section.
Marking the bug as Invalid as I'm suspecting some configuration issue.