On Tue, Feb 23, 2016 at 3:49 AM, Gyorgy Szombathelyi < gyorgy.szombathe...@doclerholding.com> wrote:
> Hi! > > Just noticed by a failing > tempest.api.compute.test_versions.TestVersions.test_get_version_details > test: > The versions answer of the components always return the listen address of > the corresponding daemon. > Is this the intended behavior? I think it should tell the public endpoint, > the listening address in a HA cluster > cannot nor should be reached from the outside. > > E.g. we have a setup, where every service have an apache proxy in front > of it, so getting the versions returns: > > # curl http://192.168.168.100:8774 > > {"versions": [{"status": "SUPPORTED", "updated": "2011-01-21T11:33:21Z", > "links": [{"href": "http://127.0.0.1:8774/v2/", "rel": "self"}], > "min_version": "", "version": "", "id": "v2.0"}, {"status": "CURRENT", > "updated": "2013-07-23T11:33:21Z", "links": [{"href": " > http://127.0.0.1:8774/v2.1/", "rel": "self"}], "min_version": "2.1", > "version": "2.12", "id": "v2.1"}]} > > Notice the href: "http://127.0.0.1:8774/xxx" answer. > > Or the reason is to not return the public endpoint that it would require a > keystone session, and the versions API must be lightweight? > > Br, > György > > > The endpoints are also generally not aware of their URL, and therefore try to determine via introspection. It would be a good change to make the endpoints aware of their URLs and/or handle the appropriate (not sure which HTTP header, or a specific one needs to be defined) to indicate the Apache/stunnel/nginx/HAProxy/etc front. --Morgan
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev