<div dir="ltr">You won't be able to use the metadata service using an IP that isn't in the fixed_ips list for a port. The way the metadata service associates a request with an instance is only based on that field.<div><br></div><div>So if you want an IP to work with metadata, you'll have to add it to the fixed_ips field for the port with a port-update.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Apr 3, 2017 at 3:43 PM, Robson Ramos Barreto <span dir="ltr"><<a href="mailto:robson.rbarreto@gmail.com" target="_blank">robson.rbarreto@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>Hello Guys<br><br></div>I'm facing a metadata issue just when using allowed address pairs and static ip address.<br><br></div><div>Steps:<br></div><div>1. Create new instance<br></div><div>2. Allow the IP address on neutron port: neutron port-update <port-uuid> --allowed-address-pairs type=dict list=true mac_address=<mac_address>,ip_<wbr>address=<ip_cidr><br></div><div>3. Inside the instance, configure the static IP address allowed on step before.<br></div><div>4. Create static route to metadata service: ip ro add <a href="http://169.254.169.254/32" target="_blank">169.254.169.254/32</a> via << metadata service IP >><br><br>------------------</div><div><br></div><div>From cloud-init log:<br><br>url_helper.py[WARNING]: Calling '<a href="http://169.254.169.254/latest/meta-data/instance-id" target="_blank">http://169.254.169.254/<wbr>latest/meta-data/instance-id</a>' failed [114/120s]: bad status code [404]<br><br>------------------<br><br></div><div>From curl command:<br><br># curl -vvv <a href="http://169.254.169.254/latest/meta-data/instance-id" target="_blank">http://169.254.169.254/latest/<wbr>meta-data/instance-id</a><br>* About to connect() to 169.254.169.254 port 80 (#0)<br>* Trying 169.254.169.254...<br>* Connected to 169.254.169.254 (169.254.169.254) port 80 (#0)<br>> GET /latest/meta-data/instance-id HTTP/1.1<br>> User-Agent: curl/7.29.0<br>> Host: 169.254.169.254<br>> Accept: */*<br>> <br>< HTTP/1.1 404 Not Found<br>< Content-Length: 154<br>< Content-Type: text/html; charset=UTF-8<br>< Date: Mon, 03 Apr 2017 22:13:29 GMT<br>< <br><html><br> <head><br> <title>404 Not Found</title><br> </head><br> <body><br> <h1>404 Not Found</h1><br> The resource could not be found.<br /><br /><br><br><br><br> </body><br>* Connection #0 to host 169.254.169.254 left intact<br><br></div><div>------------------<br><br></div><div>From controllers logs:<br><br>/var/log/neutron/metadata-<wbr>agent.log: 2017-04-03 17:21:10.895 4793 INFO eventlet.wsgi.server [-] << INSTANCE_IP >>,<local> - - [03/Apr/2017 17:21:10] "GET //latest/meta-data/ HTTP/1.1<br>" 404 176 0.079642<br>/var/log/neutron/neutron-ns-<wbr>metadata-proxy-32307540-a5ef-<wbr>4cf0-9ef7-9760d4f11ffe.log:<wbr>2017-04-03 17:17:13.812 5791 INFO neutron.wsgi [-] (5791) accepted ('<< INSTANCE_IP >>', 58852)<br>/var/log/neutron/neutron-ns-<wbr>metadata-proxy-32307540-a5ef-<wbr>4cf0-9ef7-9760d4f11ffe.log:<wbr>2017-04-03 17:17:13.896 5791 INFO neutron.wsgi [-] << INSTANCE_IP >> - - [03/Apr/2017 17:17:13] "GET //latest/meta-data/instance-id HTTP/1.1" 404 302 0.082646<br><br></div><div>------------------<br><br></div><div>From step 3, everything works fine like external access, dns resolver, and so on.<br><br></div><div>I think that it isn't a network issue because the allowed IP address and the metadata service IP are in the same subnet.<br><br>Any help would be greatly appreciated.<br></div><div><br></div><div>Thank you<br><br></div><div>Regards <br><span class="HOEnZb"><font color="#888888"><br></font></span></div><span class="HOEnZb"><font color="#888888"><div>Robson<br></div><div><br><br></div><div><br><br><br><br><br><br><br><br></div><br></font></span></div>
<br>______________________________<wbr>_________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
<br></blockquote></div><br></div>