From 22a630ee0ed3541eef4e0a507de2259f0c3dbc99 Mon Sep 17 00:00:00 2001 From: Hemanth Nakkina Date: Mon, 1 Jun 2026 15:36:47 +0530 Subject: [PATCH] loadbalancer: pass amphora image url to glance During sunbeam loadbalancer configure, terraform tries to download amphora test image and fails with tls error. Pass the image url directly to the glance so that glance will handle image download directly. Signed-off-by: Hemanth Nakkina --- .../loadbalancer/etc/deploy-loadbalancer-setup/main.tf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sunbeam-python/sunbeam/features/loadbalancer/etc/deploy-loadbalancer-setup/main.tf b/sunbeam-python/sunbeam/features/loadbalancer/etc/deploy-loadbalancer-setup/main.tf index 69e3d4ca2..cbd6290e8 100644 --- a/sunbeam-python/sunbeam/features/loadbalancer/etc/deploy-loadbalancer-setup/main.tf +++ b/sunbeam-python/sunbeam/features/loadbalancer/etc/deploy-loadbalancer-setup/main.tf @@ -70,12 +70,15 @@ locals { lb_mgmt_icmp_proto = can(regex(":", local.lb_mgmt_cidr)) ? "ipv6-icmp" : "icmp" } -# Amphora image - downloaded from upstream URL and uploaded to Glance +# Amphora image - imported via Glance web-download from upstream URL. +# Using web_download=true so Glance fetches the image server-side, avoiding +# terraform's HTTP client which only trusts the internal CA (not public CAs). # Skipped when create-amphora-image = false (user provides an existing image). resource "openstack_images_image_v2" "amphora" { count = var.create-amphora-image ? 1 : 0 name = var.amphora-image-name image_source_url = var.amphora-image-url + web_download = true container_format = "bare" disk_format = "qcow2" visibility = "public"