Looks like setting:
enable_proxy_headers_parsing=true
in nova,conf helped.
Actually it still doesn't work, but for other reasons (Expecting to find
domain in project. The server could not comply with the request since it is
either malformed or otherwise incorrect. The client is assumed to be in
Are you using a tls proxy in front of Nova API? if so, you need to
adjust the osapi compute_link_prefix -
https://docs.openstack.org/ocata/config-reference/compute/api.html to be
the https url, otherwise it will autodetect as http. The ec2-service (or
novaclient) is probably doing link following fr
