[Openstack] Key Injection not working after upgrading from Grizzly to Havana

Robert Collins robertc at robertcollins.net
Tue Oct 29 05:51:38 UTC 2013

On 29 October 2013 18:31, Bill Owen <billowen at us.ibm.com> wrote:
> No - looking at that now.
> Thanks,
> Bill Owen

Ok, so you're still on nova-network.

That means you don't have namespaced networks and don't need a
namespace-escaping metadata agent.

So what you should have is regular 'ip route' inspectable routing from
the hypervisor out to through to the network, and an iptables DNAT
rule picking up the traffic.

Firstly, it looks like the default route the instance is picking up is
via, is that correct?

Secondly, on your hypervisor itself, please gather and attach the output from
ip route
ip address

[feel free to mask out any private info]

If is the correct default route for the VM, and it's not
present on the hypervisor's ip address list, then it's probably your
nova network node, so can you log in to it and also gather
ip route
ip address

What we're looking for in this info is the path a packet from the VM
going to port 80 will take. Thats the magic IP address
for the metadata service.

It should intecepted somewhere on the default route out from the VM.


Robert Collins <rbtcollins at hp.com>
Distinguished Technologist
HP Converged Cloud

More information about the Openstack mailing list