Page MenuHomePhabricator

New OpenStack control-plane nodes can't talk to novaproxy
Closed, ResolvedPublic


Whenever a VM or project is deleted, we have hooks in designate-sink and keystone to delete any proxies associated with the VM or project.

To do that cleanup, services on cloudcontrol and cloudservices nodes need to be able to talk to the nova-proxy nodes on port 5668. If that port is blocked, the services will hang, timeout, and generally cause ugly races.