DCN nodes cannot access glance-api endpoint when deployed with TLS-everywhere

[Alan Bishop]

Nova and cinder services running at a DCN/Edge site are expected to access a glance-api service running at the same edge site. However, the services are configured to use an endpoint URI that always uses the g-api node's IP address, and this will not work when using TLS everywhere.

When deployed with TLS-everywhere, the glance-api endpoint used by DCN nodes needs to use a FQDN.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/748736

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/748736
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=2035b88f5b9eb1c86391c995f768f9ecc45855a4
Submitter: Zuul
Branch: master

commit 2035b88f5b9eb1c86391c995f768f9ecc45855a4
Author: Alan Bishop <email address hidden>
Date: Thu Aug 27 12:22:02 2020 -0700

    DCN: use FQDN in glance endpoint with internal TLS

    Fix the glance-api endpoint used by cinder and nova services at DCN
    sites. When internal TLS is enabled, the URI must use a FQDN and not
    an IP address.

    Closes-Bug: #1893453
    Change-Id: I386a035f9688c54d617e714888c9c0fa14f34a1e

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/749422

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/749422
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=9471eb030f21d425cb049ada3b91935d4b1bdea7
Submitter: Zuul
Branch: stable/ussuri

commit 9471eb030f21d425cb049ada3b91935d4b1bdea7
Author: Alan Bishop <email address hidden>
Date: Thu Aug 27 12:22:02 2020 -0700

    DCN: use FQDN in glance endpoint with internal TLS

    Fix the glance-api endpoint used by cinder and nova services at DCN
    sites. When internal TLS is enabled, the URI must use a FQDN and not
    an IP address.

    Closes-Bug: #1893453
    Change-Id: I386a035f9688c54d617e714888c9c0fa14f34a1e
    (cherry picked from commit 2035b88f5b9eb1c86391c995f768f9ecc45855a4)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/train
Review: https://review.opendev.org/749625

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/749625
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=ca3bd9c3dd9ab75f085f66122f63a6dcd607f59b
Submitter: Zuul
Branch: stable/train

commit ca3bd9c3dd9ab75f085f66122f63a6dcd607f59b
Author: Alan Bishop <email address hidden>
Date: Thu Aug 27 12:22:02 2020 -0700

    DCN: use FQDN in glance endpoint with internal TLS

    Fix the glance-api endpoint used by cinder and nova services at DCN
    sites. When internal TLS is enabled, the URI must use a FQDN and not
    an IP address.

    Closes-Bug: #1893453
    Change-Id: I386a035f9688c54d617e714888c9c0fa14f34a1e
    (cherry picked from commit 2035b88f5b9eb1c86391c995f768f9ecc45855a4)
    (cherry picked from commit 9471eb030f21d425cb049ada3b91935d4b1bdea7)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 11.4.0 release.