Including Harald's update on 3/19 to rhos-prio: I just tested a config similar to what Emilien suggests: [DEFAULT] enable_routed_networks = true enable_tempest = false inspection_interface = br-ctlplane ipxe_enabled = true local_interface = eth1 local_mtu = 1500 local_subnet = ctlplane-subnet overcloud_domain_name = localdomain scheduler_max_attempts = 2 subnets = ctlplane-subnet,leaf1,leaf2 undercloud_debug = true undercloud_hostname = leafs.lab.example.com undercloud_nameservers = 172.20.0.254 undercloud_ntp_servers = 0.se.pool.ntp.org undercloud_admin_host = 172.20.0.2 local_ip = 172.20.0.1/26 undercloud_public_host = 192.168.122.254 enable_ui = true enable_validations = true generate_service_certificate = true certificate_generation_ca = local [ctlplane-subnet] cidr = 172.20.0.0/26 dhcp_start = 172.20.0.10 dhcp_end = 172.20.0.19 inspection_iprange = 172.20.0.20,172.20.0.29 gateway = 172.20.0.62 masquerade = true [leaf1] cidr = 172.20.0.64/26 dhcp_start = 172.20.0.70 dhcp_end = 172.20.0.79 inspection_iprange = 172.20.0.80,172.20.0.89 gateway = 172.20.0.126 masquerade = true [leaf2] cidr = 172.20.0.128/26 dhcp_start = 172.20.0.130 dhcp_end = 172.20.0.139 inspection_iprange = 172.20.0.140,172.20.0.149 gateway = 172.20.0.190 masquerade = true Results: -------- - The undercloud installer overrides the default api_url. (i.e it is'nt the public endpoint in keystone catalog, not the default.) /etc/ironic/ironic.conf on Queens have: [conductor] api_url=http://172.20.0.2:6385 - The ironic enpoints in catalog: (undercloud) [stack@leafs ~]$ openstack catalog show ironic +-----------+-----------------------------------------+ | Field | Value | +-----------+-----------------------------------------+ | endpoints | regionOne | | | internal: http://172.20.0.2:638585 | | | regionOne | | | admin: http://172.20.0.2:638585 | | | regionOne | | | public: https://192.168.122.254:13385 | | | | | id | f79113061bbc4006830e3efff6fe5671 | | name | ironic | | type | baremetal | +-----------+-----------------------------------------+ - The TripleO UI is available on: https://192.168.122.254 curl -k https://192.168.122.254 <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>TripleO</title> <link rel="shortcut icon" href="/owl.png"></head> <body> <div id="react-app-index"></div> <script src="/tripleo_ui_config.js"></script> <script type="text/javascript" src="/tripleo_ui.js"></script> </body> </html> - I can successfully deploy a server: (undercloud) [stack@leafs ~]$ openstack server list -f yaml - Flavor: baremetal ID: e94b3802-0d7a-400c-b284-b1368b161d2d Image: cirros Name: test-server Networks: ctlplane=172.20.0.13 Status: ACTIVE (undercloud) [stack@leafs ~]$ openstack baremetal node list -f yaml - Instance UUID: e94b3802-0d7a-400c-b284-b1368b161d2d Maintenance: false Name: os-ctl0 Power State: power on Provisioning State: active UUID: 89456656-5fb9-4db9-843d-d10015ab6fa3 ========================================== Nilesh - it looks like the case has been closed, can we close this bug?