resolv.conf in containers set too late

Bug #1758144 reported by Damian Cikowski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack-Ansible
In Progress
Medium
Jesse Pretorius

Bug Description

OSA 17.0.0 (Ubuntu)

I have `internal_lb_vip_address` variable set to FQDN which is resolved by Unbound - additional record set using `unbound_records` variable:

unbound_records:
  - name: 'internal'
    records:
      - { host: internal.cloud.company.com, val: "{{ haproxy_keepalived_internal_vip_cidr | ipaddr('address') }}", type: A }

I'm running infrastructure playbooks in default order: Unbound -> Repo install -> Haproxy and then `repo-use.yml` which is failing because resolvers addresses isn't yet set and load balancer internal address can't be resolved. It looks like resolv.conf should be set in all containers earlier.

Revision history for this message
Damian Cikowski (dcdamien) wrote :

It looks like `repo-use.yml` isn't compatible with JIT configuration of Unbound clients introduced in https://github.com/openstack/openstack-ansible/commit/b3c670faeba53eb00212deb1e197499959c40561

Changed in openstack-ansible:
assignee: nobody → Logan V (loganv)
Changed in openstack-ansible:
assignee: Logan V (loganv) → nobody
Changed in openstack-ansible:
assignee: nobody → Jesse Pretorius (jesse-pretorius)
Changed in openstack-ansible:
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible (master)

Fix proposed to branch: master
Review: https://review.openstack.org/571178

Changed in openstack-ansible:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on openstack-ansible (master)

Change abandoned by Jesse Pretorius (odyssey4me) (<email address hidden>) on branch: master
Review: https://review.opendev.org/571178
Reason: No longer working on this. Please restore this patch if it is still required.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.