github-actions[bot] commented on issue #13422: URL: https://github.com/apache/cloudstack/issues/13422#issuecomment-5356775331
## ๐ฏ Triage report Intermittent console-proxy connection failures on a 4.22.1.0 multi-management-server deployment fronted by a load balancer. The reporter has isolated the issue to `console_endpoint_creator_address` in `cloud.console_session` being recorded as the load balancer or client IP rather than the actual management server IP, causing the CPVM to reject token validation for those sessions. ### ๐ Assessment | Dimension | Value | Reasoning | |---|---|---| | **Type** | type:bug | Clear defect in console session creator-address recording | | **Component** | component:console-proxy | Root cause is in console session/token validation (PR #7094 area) | | **Severity** | Severity:Major | Intermittent console access failures in multi-MS deployments, no full outage but disrupts a core admin/user workflow | | **Labels** | type:bug, component:console-proxy, Severity:Major | See above | | **Coding agent** | Needs more info | Root cause area is well isolated (creator-address recording), but requires investigation into why the LB/client IP is captured instead of the MS IP, and any design decision on how that address should be derived behind a reverse proxy | ### ๐ Similar issues No closely matching open issues were found in a search of console-proxy/session/load-balancer related reports. <details><summary>๐ก Notes and suggestions</summary> The report is already very detailed with ruled-out causes, DB row evidence, and exact log lines. A good next step for a maintainer/contributor would be to locate where `console_endpoint_creator_address` is set (likely in the console access/`ConsoleProxyManager` or `ConsoleAccessManager` code handling `createConsoleEndpoint`) and confirm whether it derives from the HTTP request's remote address rather than `cluster.node.IP` / the management server's own configured management IP โ this would need to be corrected to always use the local MS management IP regardless of how the request arrived (direct or via LB). </details> > Generated by [Daily Issue Triage](https://github.com/apache/cloudstack/actions/runs/32375697891) ยท sonnet50 224.8K ยท [โท](https://github.com/search?q=repo%3Aapache%2Fcloudstack+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-issue-triage%22&type=issues) > <details> <summary>Add this agentic workflows to your repo</summary> To install this agentic workflow, run ``` gh aw add githubnext/agentics/workflows/daily-issue-triage.md@d7c1dc4b72b00607a67caaffdcc216cb64379cf9 ``` </details> <!-- gh-aw-agentic-workflow: Daily Issue Triage, engine: copilot, version: 1.0.52, model: claude-sonnet-5, id: 32375697891, workflow_id: daily-issue-triage, run: https://github.com/apache/cloudstack/actions/runs/32375697891 --> <!-- gh-aw-workflow-call-id: apache/cloudstack/daily-issue-triage --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
