<div dir="ltr"><div dir="ltr"><div dir="ltr">Hi,<div><br></div><div><br></div><div>I've been recently working on separating management and client traffic onto different endpoints. We have different endpoint URLs configured for "public", "admin" and "internal".</div><div><br></div><div>For openstack itself, this is working well. However, puppet providers don't seem to cater for this.</div><div><br></div><div>Particularly, right now, I'm looking at the neutron providers, but they may be mostly the same. It always uses the public endpoint, and doesn't seem configurable [ unless I'm missing something ].</div><div>All the client config for auth etc is sourced from neutron.conf, and I can't see a way of specifying endpoint type via that mechanism.</div><div><br></div><div>I can change the provider like this, and it all works:</div><div><br></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><div><div><font face="monospace, monospace">diff --git a/lib/puppet/provider/neutron.rb b/lib/puppet/provider/neutron.rb</font></div></div></div><div><div><div><font face="monospace, monospace">index a55fa0b..786e64d 100644</font></div></div></div><div><div><div><font face="monospace, monospace">--- a/lib/puppet/provider/neutron.rb</font></div></div></div><div><div><div><font face="monospace, monospace">+++ b/lib/puppet/provider/neutron.rb</font></div></div></div><div><div><div><font face="monospace, monospace">@@ -75,14 +75,16 @@ correctly configured.")</font></div></div></div><div><div><div><font face="monospace, monospace"> :OS_AUTH_URL => q['identity_uri'],</font></div></div></div><div><div><div><font face="monospace, monospace"> :OS_USERNAME => q['admin_user'],</font></div></div></div><div><div><div><font face="monospace, monospace"> :OS_TENANT_NAME => q['admin_tenant_name'],</font></div></div></div><div><div><div><font face="monospace, monospace">- :OS_PASSWORD => q['admin_password']</font></div></div></div><div><div><div><font face="monospace, monospace">+ :OS_PASSWORD => q['admin_password'],</font></div></div></div><div><div><div><font face="monospace, monospace">+ :OS_ENDPOINT_TYPE => 'internal',</font></div></div></div><div><div><div><font face="monospace, monospace"> }</font></div></div></div><div><div><div><font face="monospace, monospace"> else</font></div></div></div><div><div><div><font face="monospace, monospace"> authenv = {</font></div></div></div><div><div><div><font face="monospace, monospace"> :OS_AUTH_URL => q['auth_url'],</font></div></div></div><div><div><div><font face="monospace, monospace"> :OS_USERNAME => q['username'],</font></div></div></div><div><div><div><font face="monospace, monospace"> :OS_TENANT_NAME => q['tenant_name'],</font></div></div></div><div><div><div><font face="monospace, monospace">- :OS_PASSWORD => q['password']</font></div></div></div><div><div><div><font face="monospace, monospace">+ :OS_PASSWORD => q['password'],</font></div></div></div><div><div><div><font face="monospace, monospace">+ :OS_ENDPOINT_TYPE => 'internal',</font></div></div></div><div><div><div><font face="monospace, monospace"> }</font></div></div></div><div><div><div><font face="monospace, monospace"> end</font></div></div></div><div><div><div><font face="monospace, monospace"> if q.key?('nova_region_name')</font></div></div></div></blockquote><div dir="ltr"><div><br></div><div>Notice, I'm adding OS_ENDPOINT_TYPE to control the endpoint that selected from the catalogue.<br></div><div><br></div><div>I want to keep the "public" endpoints for external clients only on the external network, the "internal" endpoints for inter service API comms on the management network, and the "admin" endpoints for admin operations on the management network.</div><div><br></div><div>In particular, I want to be able to stop advertising the public endpoints during maintenance windows, and still be able to run puppet!</div><div><br></div><div><br></div><div>Can anyone think of a way of overcoming this?</div><div><br></div><div><div dir="ltr" class="gmail_signature"><div>If it's not possible through config, is there some way I can drop in my own provider version with the same name safely ?<br></div><div><br></div><div>Anything else I'm missing?</div><div><br></div><div>Thanks!</div><div><br></div><div><br></div><div><br></div>Cheers,<div>Just</div></div></div></div></div></div>
<br>
<p style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em;margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px">Notice: This email is confidential and may contain copyright material of members of the Ocado Group. Opinions and views expressed in this message may not necessarily reflect the opinions and views of the members of the Ocado Group. </span></font></p><p style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em;margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px"> </span></font></p><p style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em;margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px">If you are not the intended recipient, please notify us immediately and delete all copies of this message. Please note that it is your responsibility to scan this message for viruses. </span></font></p><p style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em;margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px"> </span></font></p><p style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em;margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px">Fetch and Sizzle are trading names of Speciality Stores Limited and Fabled is a trading name of Marie Claire Beauty Limited, both members of the Ocado Group.</span></font></p><p style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em;margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px"> </span></font></p><p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif" style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><span style="font-size:14.6667px">References to the “Ocado Group” are to Ocado Group plc (registered in England and Wales with number 7098618) and its subsidiary undertakings (as that expression is defined in the Companies Act 2006) from time to time. The registered office of Ocado Group plc is </span></font><font color="#aeaaaa" face="calibri, sans-serif"><span style="font-size:14.6667px">Buildings One & Two, Trident Place, Mosquito Way, Hatfield, Hertfordshire, AL10 9UL</span></font><span style="font-family:Arial,Helvetica,sans-serif;font-size:14.6667px;color:rgb(174,170,170)"><font face="Calibri, sans-serif">.</font></span></p>