Description of problem: It was found that the [keystone_authtoken] www_authenticate_uri parameter points to 127.0.0.1 instead of the actual endpoint url with vip. /var/lib/config-data/puppet-generated/glance_api/etc/glance/glance-api.conf ~~~ [keystone_authtoken] www_authenticate_uri=http://127.0.0.1:5000 ~~~ Version-Release number of selected component (if applicable): This issue was initially found in RHOSP16.1.6 How reproducible: Always Steps to Reproduce: 1. Deploy overcloud 2. Check glance-api.conf in overcloud controllers Actual results: www_authenticate_uri points to 127.0.0.1 Expected results: www_authenticate_url points to vip of internal_api network Additional info:
It seems we should backport https://review.opendev.org/c/openstack/tripleo-heat-templates/+/704238 to stable/train and RHOSP16.1. I've proposed stable/train backport as https://review.opendev.org/c/openstack/tripleo-heat-templates/+/822243 .
It turned out usage of internal endpoint is still incorrect and we should use public endpoint. I've reported a different bug for that. https://bugzilla.redhat.com/show_bug.cgi?id=2034203 Maybe we should close this and continue in the above bug.
www_authenticate_uri points to vip of internal network. Below is found in: /var/lib/config-data/puppet-generated/glance_api/etc/glance/glance-api.conf www_authenticate_uri=http://192.168.24.3:5000
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenStack Platform 16.1.8 bug fix and enhancement advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:0986