Cannot SSH to seed VM after bootstrapping Bifrost

[priteau]

This is due to a change in Bifrost which was backported to Ussuri. See upstream story for details.

[priteau]

An incomplete fix is to configure Bifrost to use the public zone:

diff --git a/etc/kayobe/kolla/config/bifrost/bifrost.yml b/etc/kayobe/kolla/config/bifrost/bifrost.yml
index 9a4ca8a..c899c7c 100644
--- a/etc/kayobe/kolla/config/bifrost/bifrost.yml
+++ b/etc/kayobe/kolla/config/bifrost/bifrost.yml
@@ -6,3 +6,5 @@ download_ipa: true
 # Use a locally hosted CentOS8 cloud image.
 use_cirros: true
 cirros_deploy_image_upstream_url: https://cloud.centos.org/centos/8/x86_64/images/CentOS-8-GenericCloud-8.1.1911-20200113.3.x86_64.qcow2
+
+firewalld_internal_zone: public

This fixes the SSH issue. However, the Docker registry deployed on the seed is unreachable, which prevents from deploying overcloud services.

[priteau]

Fix proposed upstream: https://review.opendev.org/#/c/756541/

I managed to run successfully up to launching an instance using stable/ussuri with this patch.

[priteau]

Fixed in master and stable/ussuri (earlier branches are not affected): https://review.opendev.org/#/q/I80f9d95f02e11fda5916f9a9dd257b688a9db7e2