mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-10-21 19:56:33 +00:00
joshsiv-mulga
1ce9981c1a
Internal-scheme LBs on single-node have no dedicated mgmt-bind IP on br-mgmt, so resolveMgmtRoute falls back to routing the agent to the advertised WAN IP via the mgmt NIC. That advertised IP lives on a different bridge than the agent's mgmt NIC, and the cross-bridge return path never delivers — the agent never heartbeats and the LB hangs in provisioning (normal single-node dodges this entirely via dev_networking slirp at 10.0.2.2; bare-metal external-mode is the first real exercise of this path). Point the agent at the br-mgmt host IP, which shares its mgmt L2 — no cross-bridge hop — mirroring the multi-node datapath. Requires AWSGW to listen on br-mgmt (bind 0.0.0.0); the server cert already SANs that IP.