Jesse Haka

so which one I should really use in order to get certs to working? I am trying `v3.0` tag and using `traefik.io` crds. However, it will not work. So should...

blah finally, it was needed to delete crd once and create it again.

afaik, its not bug. Its missing feature

the original PR which breaks this https://github.com/kubernetes/kops/pull/15993 we should add 8443 rules to nlb security group as well (if needed)

/ok-to-test

you need to define annotations to instancegroups https://github.com/kubernetes/kops/blob/a913d3c0dba757653761ee8d2f0b16bedab0d34a/pkg/model/openstackmodel/servergroup.go#L119-L125 for instance ``` apiVersion: kops.k8s.io/v1alpha2 kind: InstanceGroup metadata: annotations: openstack.kops.io/osVolumeBoot: "true" openstack.kops.io/osVolumeSize: "10" name: nodes spec: ... ```

this feature was created in https://github.com/kubernetes/kops/pull/7652 However, I have never used it because I have no need for that. I cannot say is it working correctly or not

kOps is using 100% gophercloud library to do any queries against OpenStack APIs. All queries towards openstack floatingip apis is available in https://github.com/kubernetes/kops/blob/master/upup/pkg/fi/cloudup/openstack/floatingip.go so in short: we cannot fix this...

I cannot reproduce this with current master. I have added debug to Openstack library that it will print ALL raw http request calls and the result is. https://gist.github.com/zetaab/d6c609c8373772357e9975831e8ca21d ``` doRequest:...

all http requests in gophercloud library is going through this function https://github.com/gophercloud/gophercloud/blob/master/provider_client.go#L392 and when its not adding the `/`, you have perhaps something else in your system that adds that...