RegionOne exists but does not have any supported versions.

my cloud certificates expired on the 22 of this month so I reissue the certificates today with

geoint@MAAS-01:~$ juju run-action vault/leader --wait reissue-certificates
unit-vault-1:
  UnitId: vault/1
  id: "1522"
  results:
    Stdout: |
      lxc
      lxc
      active
      active
      active
      lxc
  status: completed
  timing:
    completed: 2024-03-25 18:25:55 +0000 UTC
    enqueued: 2024-03-25 18:25:30 +0000 UTC
    started: 2024-03-25 18:25:31 +0000 UTC

But all my compute services are down ant it seams that placement is not working properly

mchc@ubuntu:/data/git/openstack-cfg/client$ openstack compute service list
+--------------------------------------+----------------+---------------------+----------+---------+-------+----------------------------+
| ID                                   | Binary         | Host                | Zone     | Status  | State | Updated At                 |
+--------------------------------------+----------------+---------------------+----------+---------+-------+----------------------------+
| 4224d70a-f8af-4b09-b5d5-ccb45287761d | nova-scheduler | juju-5025f7-1-lxd-4 | internal | enabled | down  | 2024-03-25T17:24:49.000000 |
| 5fdbb26b-7a2a-49e3-9cb1-e0ab9d50744d | nova-scheduler | juju-5025f7-2-lxd-4 | internal | enabled | down  | 2024-03-25T17:24:50.000000 |
| 5f465bb4-edfc-4499-b69c-4d208d5e2aae | nova-conductor | juju-5025f7-2-lxd-4 | internal | enabled | down  | 2024-03-25T17:24:50.000000 |
| 402b43ae-3ead-40b4-87af-c2bdc7392808 | nova-conductor | juju-5025f7-0-lxd-4 | internal | enabled | down  | 2024-03-25T17:24:51.000000 |
| d351d86f-87e7-4a7b-a8d3-df1c616229bf | nova-scheduler | juju-5025f7-0-lxd-4 | internal | enabled | down  | 2024-03-25T17:24:50.000000 |
| eaceda27-a46b-4b2e-911c-cf6c99dda28b | nova-conductor | juju-5025f7-1-lxd-4 | internal | enabled | down  | 2024-03-25T17:24:48.000000 |
| 8ec65e3e-9f74-4936-8612-335a446b7292 | nova-compute   | key-ox.maas         | MID-PCTY | enabled | down  | 2024-03-25T17:24:44.000000 |
| 23241ad8-a77a-408e-b291-baf957cc3bea | nova-compute   | stable-liger.maas   | MID-PCTY | enabled | down  | 2024-03-25T17:24:52.000000 |
| ec2cebd4-65e3-4c4d-84d8-135022727c8d | nova-compute   | star-koala.maas     | MID-PCTY | enabled | down  | 2024-03-25T17:24:51.000000 |
| bc29c17b-ad85-4d09-b7a4-1493b0601c24 | nova-compute   | liked-hermit.maas   | MID-PCTY | enabled | down  | 2024-03-25T17:24:45.000000 |
| ce6c5a79-3174-4b47-b365-a63a7b473428 | nova-compute   | exotic-goblin.maas  | MID-PCTY | enabled | down  | 2024-03-25T17:24:51.000000 |
| 3d42d217-daa3-4582-aabc-d5b3f3b47c98 | nova-compute   | clean-hog.maas      | MID-PCTY | enabled | down  | 2024-03-25T17:24:46.000000 |
| 4e022854-1511-4928-bdd5-920826069c12 | nova-compute   | calm-stag.maas      | MID-PCTY | enabled | down  | 2024-03-25T17:24:45.000000 |
| 967ea90e-417c-4d1d-9e5a-f25128a45ef6 | nova-compute   | pure-rabbit.maas    | MID-PCTY | enabled | down  | 2024-03-25T17:24:47.000000 |
| 385901eb-5237-448a-9db9-17a89498e2cf | nova-compute   | immune-mite.maas    | MID-PCTY | enabled | down  | 2024-03-25T17:24:47.000000 |
| 4d63ec87-378f-4e85-8ca0-d1e2960d91db | nova-compute   | vital-iguana.maas   | MID-PCTY | enabled | down  | 2024-03-25T17:24:50.000000 |
| 2b68b268-433e-4174-b175-2a3662de8808 | nova-compute   | loyal-glider.maas   | MID-PCTY | enabled | down  | 2024-03-25T17:24:49.000000 |
| 033ab76a-7436-422b-b0ea-9f044c563318 | nova-compute   | sure-pony.maas      | MID-PCTY | enabled | down  | 2024-03-25T17:24:49.000000 |
+--------------------------------------+----------------+---------------------+----------+---------+-------+----------------------------+
geoint@MAAS-01:~$ juju ssh nova-cloud-controller/1
ubuntu@juju-5025f7-1-lxd-4:~$ tail /var/log/nova/nova-conductor.log

2024-03-25 19:10:54.597 71943 ERROR nova openstack.exceptions.NotSupported: The placement service for keystone.openstack.maas:RegionOne exists but does not have any supported versions.

the juju status output is here: https://pastebin.ubuntu.com/p/zFphRDZqxg/

I check the certificate of each service and it seams only placement does not have the new certificate is there a way to send the certificate just to placement?

> Neutron: OK
> echo | openssl s_client -showcerts -connect 10.2.101.148:9696  2>/dev/null | openssl x509 -inform pem -noout -text | grep Validity -A2
> keystone: OK
> echo | openssl s_client -showcerts -connect 10.2.101.160:5000  2>/dev/null | openssl x509 -inform pem -noout -text | grep Validity -A2
> glance: OK
> echo | openssl s_client -showcerts -connect 10.2.101.150:9292  2>/dev/null | openssl x509 -inform pem -noout -text | grep Validity -A2
> Nova: OK
> echo | openssl s_client -showcerts -connect 10.2.101.157:8774  2>/dev/null | openssl x509 -inform pem -noout -text | grep Validity -A2
> cinder: OK
> echo | openssl s_client -showcerts -connect 10.2.101.156:8776 2>/dev/null | openssl x509 -inform pem -noout -text | grep Validity -A2
> placement: ERROR
> echo | openssl s_client -showcerts -connect 10.2.101.155:8778 2>/dev/null | openssl x509 -inform pem -noout -text | grep Validity -A2