glance-simplestreams-sync service added to the catalog, but no daemon is listening (API not available)

Bug #1836018 reported by Alvaro Uria
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Keystone Charm
Triaged
Wishlist
Unassigned

Bug Description

Keystone and glance-simplestreams-sync (g-ss-s) get related so the latter can upload cloud images to the Glance service.

Any identity-service-relation-joined will share that information for Keystone to add the service to its endpoints database:
https://github.com/openstack/charm-glance-simplestreams-sync/blob/master/hooks/hooks.py#L210

It seems that such keymap needs to be shared with Keystone or g-ss-s won't be able to authenticate against the Identity service. But it also looks wrong that an API endpoint exists when it is not reachable.

= Steps to reproduce
juju deploy cs:glance-simplestreams-sync
juju add-relation keystone glance-simplestreams-sync
$ openstack endpoint list --service image-stream -fjson
[
  {
    "Service Type": "product-streams",
    "URL": "http://10.66.111.32",
    "Region": "RegionOne",
    "Enabled": true,
    "Interface": "public",
    "Service Name": "image-stream",
    "ID": "7de458d262ae4af2a9ed3941843edb0c"
  },
  {
    "Service Type": "product-streams",
    "URL": "http://10.66.111.32",
    "Region": "RegionOne",
    "Enabled": true,
    "Interface": "internal",
    "Service Name": "image-stream",
    "ID": "a8ad1dd520b64f0bb01ca659a994e153"
  },
  {
    "Service Type": "product-streams",
    "URL": "http://10.66.111.32",
    "Region": "RegionOne",
    "Enabled": true,
    "Interface": "admin",
    "Service Name": "image-stream",
    "ID": "dc276ee252314d778bcfbf6f0d263957"
  }
]

Revision history for this message
Frode Nordahl (fnordahl) wrote :

This appears to be used by the juju openstack provider in some way:
https://github.com/juju/juju/blob/fb537d3034cd713ab6b39e4cd14cb34eb40f96e2/provider/openstack/provider.go#L992

It may be that this needs to be cleaned up, but I suspect there is a bit of cross project untangling to be done before we make any changes to this.

Changed in charm-keystone:
status: New → Triaged
importance: Undecided → Wishlist
Revision history for this message
Alvaro Uria (aluria) wrote :

FWIW, the reason I hit this was that charm-openstack-service-checks monitors all endpoints available, but glance-simplestreams-sync endpoint when use_swift=False (aka. product-stream is not pointing to the Swift API, but to the g-ss-s container IP) makes check_http return "connection refused" because nothing is listening on ports 80 or 443 (depending if http(s) is in use).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.