Comment 19 for bug 1952414

Revision history for this message
Nobuto Murata (nobuto) wrote :

This FQDN vs hostname may not be the root source of the issue. I did see the tendency multiple times in a row but there were some cases where one of some services failed even without having the difference on FQDN vs hostname.

In the following case, cinder failed to create a symlink of a cert while glance worked. But I don't see much difference in the relation data.

Anyway, hope I offered enough data by now to reproduce the issue so someone familiar with the logic of this HTTPS setup code can take a look.

  - relation-id: 73
    endpoint: certificates
    related-endpoint: certificates
    application-data: {}
    related-units:
      cinder/0:
        in-scope: true
        data:
          cert_requests: '{"juju-fe03b8-1-lxd-2.maas": {"sans": ["192.168.151.123"]}}'
          egress-subnets: 192.168.151.123/32
          ingress-address: 192.168.151.123
          private-address: 192.168.151.123
          unit_name: cinder_0
  - relation-id: 74
    endpoint: certificates
    related-endpoint: certificates
    application-data: {}
    related-units:
      glance/0:
        in-scope: true
        data:
          cert_requests: '{"juju-fe03b8-2-lxd-2.maas": {"sans": ["192.168.151.108"]}}'
          egress-subnets: 192.168.151.108/32
          ingress-address: 192.168.151.108
          private-address: 192.168.151.108
          unit_name: glance_0

ubuntu@quick-maas:~$ juju ssh cinder/0 -- ls -alF /etc/apache2/ssl/cinder/
total 16
dr-xr-xr-x 2 root root 4096 Mar 24 00:51 ./
drwxr-xr-x 3 root root 4096 Mar 24 00:32 ../
-rw-r----- 1 root root 1492 Mar 24 00:51 cert_juju-fe03b8-1-lxd-2.maas
-rw-r----- 1 root root 1678 Mar 24 00:51 key_juju-fe03b8-1-lxd-2.maas
Connection to 192.168.151.123 closed.

ubuntu@quick-maas:~$ juju ssh glance/0 -- ls -alF /etc/apache2/ssl/glance/
total 16
dr-xr-xr-x 2 root root 4096 Mar 24 00:51 ./
drwxr-xr-x 3 root root 4096 Mar 24 00:32 ../
lrwxrwxrwx 1 root root 53 Mar 24 00:51 cert_192.168.151.108 -> /etc/apache2/ssl/glance/cert_juju-fe03b8-2-lxd-2.maas
-rw-r----- 1 root root 1492 Mar 24 00:51 cert_juju-fe03b8-2-lxd-2.maas
lrwxrwxrwx 1 root root 52 Mar 24 00:51 key_192.168.151.108 -> /etc/apache2/ssl/glance/key_juju-fe03b8-2-lxd-2.maas
-rw-r----- 1 root root 1674 Mar 24 00:51 key_juju-fe03b8-2-lxd-2.maas
Connection to 192.168.151.108 closed.