Use inet6-aware memcached_servers for [keystone_authtoken] in nova.conf - #1217
yushoyamaguchi wants to merge 1 commit into
Conversation
Replace 'MemcachedServers' with 'MemcachedServersWithInet' in nova.conf for IPv6 usecase. Signed-off-by: Yusho Yamaguchi <ysh.824@outlook.jp>
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: yushoyamaguchi The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Hi @yushoyamaguchi. Thanks for your PR. I'm waiting for a openstack-k8s-operators member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
Navigate logical layers of code changes, visualize relationships, and explore their blast radius. No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Central YAML (base), Organization UI (inherited) Review profile: CHILL Plan: Advanced Run ID: 📒 Files selected for processing (2)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📝 SummarySummary by CodeRabbit
WalkthroughThe Nova configuration template now uses ChangesMemcached server configuration
Estimated code review effort: 2 (Simple) | ~5 minutes Suggested reviewers: Merge Risk: ⚪ Minimal · up to No actionable merge risk is established in the changed configuration or its TLS and non-TLS assertions. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
Build succeeded (check pipeline). ✔️ openstack-meta-content-provider SUCCESS in 3h 47m 15s |
fix #1216
[cache]'s non-TLS branch already renders memcache_servers with the inet6: prefix (.MemcachedServersWithInet), required by python-memcached on IPv6 deployments — otherwise it defaults to AF_INET and DNS resolution fails outright. [keystone_authtoken] was still using the plain .MemcachedServers variable, so token cache lookups never connect and every authenticated request falls through to a live Keystone call after ~30s of failed lookups (3 servers × ~2 failed A-record attempts each).