When ceph cluster is deployed in overcloud and manila is configured to use it as a backend, then users can create cephfs shares and mount them from inside user instances. The problem is that to mount a ceph share access to ceph public network (which is mapped to Overcloud StorageNetwork) is required. This works without network isolation but when network isolation is enabled, then user instances running in overcloud can not access StorageNetwork through which ceph is accessible.
steps to reproduce:
1) deploy OC with anila and ceph, quickstart config:
# Define a controller node, a compute node, and a ceph node.
overcloud_nodes:
- name: control_0
flavor: control
virtualbmc_port: 6230
- name: compute_0
flavor: compute
virtualbmc_port: 6231
- name: ceph_0
flavor: ceph
virtualbmc_port: 6232
# Tell tripleo which nodes to deploy.
topology: >-
--ceph-storage-scale 1
-e {{overcloud_templates_path}}/environments/storage-environment.yaml
-e {{overcloud_templates_path}}/environments/services/ceph-mds.yaml
-e {{overcloud_templates_path}}/environments/manila-cephfsnative-config.yaml
-e {{overcloud_templates_path}}/environments/puppet-pacemaker.yaml
network_isolation: true
network_isolation_type: 'single-nic-vlans'
2) create a testing stack in OC which includes manila share:
openstack stack create test1 --template /usr/share/openstack-tripleo-heat-templates/ci/pingtests/scenario004-multinode.yaml
3) get share export location with "manila show <share_id>"
4) try to access the export host/port from inside the running instance
Fix proposed to branch: master
Review: https:/