| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2017-03-20 | |||
| 19:52:54 | mriedem | you have signing_dir=/var/cache/nova but signing_dir is deprecated | |
| 19:53:03 | mriedem | and you don't have access to /var/cache/nova anyway | |
| 19:53:11 | mriedem | s/you/the user running the placement service/ | |
| 19:53:27 | wally | is this igning_dir=/var/cache/nova in the nova.conf | |
| 19:54:14 | openstackgerrit | Sarafraj Singh proposed openstack/nova-specs master: Spec to add per instance timeout for LM https://review.openstack.org/442809 | |
| 19:56:50 | coreycb | cdent, that's a good point, thanks. we'll take a look at changing that. | |
| 19:59:15 | rfolco | cdent, can you please see if all good for another +2 on https://review.openstack.org/#/c/416669/ please ? | |
| 19:59:38 | openstackgerrit | Anusha Unnam proposed openstack/nova master: Add descripiton to policies in virtual_interfaces.py https://review.openstack.org/445652 | |
| 20:01:50 | EmilienM | mriedem: nova Ron broke in RDO because a new rep related to tooz, we are working on it | |
| 20:01:55 | wally | now i got this error root@compute1:~# curl http://controller:8778 {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}root@compute1:~# | |
| 20:02:18 | cfriesen | Hi cores...https://review.openstack.org/#/c/265282/ (spec for flavor information in the instance details) has one +2...anyone up for giving it another? I'm happy to fix johnthetubaguy's nit if that pushes it over. :) | |
| 20:02:19 | EmilienM | Sorry, nova I'm RDO ( on my phone) | |
| 20:02:25 | wally | 2017-03-20 13:01:37.065 25869 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Please set this to True. | |
| 20:02:32 | wally | where to set this | |
| 20:04:31 | efried | claudiub If you're still in a fixing-holes-in-mock mood: https://github.com/testing-cabal/mock/issues/398 | |
| 20:04:52 | mriedem | rfolco: it's on my list | |
| 20:05:00 | mriedem | cfriesen: on my list too | |
| 20:05:39 | rfolco | mriedem, thanks | |
| 20:09:32 | wally | hi mriedem i getting this erro now | |
| 20:09:41 | wally | root@compute1:~# curl http://controller:8778 {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | |
| 20:09:44 | wally | any idea? | |
| 20:16:14 | mriedem | wally: pass a token | |
| 20:16:45 | wally | how | |
| 20:16:49 | openstackgerrit | Sarafraj Singh proposed openstack/nova-specs master: Spec to add per instance timeout for LM https://review.openstack.org/442809 | |
| 20:16:52 | wally | from compute node? | |
| 20:16:59 | mriedem | wally: https://developer.openstack.org/api-guide/quick-start/api-quick-start.html#openstack-api-quick-guide | |
| 20:17:26 | mriedem | well, the nova-compute service will be using keystone, and use the credentials for the placement service user setup in the [placement] section of nova.conf | |
| 20:17:32 | mriedem | you can test manually though with curl | |
| 20:17:50 | mriedem | OS_TOKEN=$(openstack token issue -f value -c id) | |
| 20:18:12 | mriedem | curl -s -H "X-Auth-Token: $OS_TOKEN" http://controller:8778/ | |
| 20:20:22 | wally | what can i get the $OS_TOKEN? | |
| 20:20:32 | wally | how can i get the $OS_TOKEN | |
| 20:21:33 | claudiub | efried: hm, that's rather surprising. the mock.patch stuff with autospec is kinda' broken, which is probably why it doesn't have the assert_called_with / assert_not_called methods. it creates NonCallableMagicMock objects, which are not callable, so it would make sense it doesn't have those assert methods. | |
| 20:21:42 | wally | [placement] auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = placement password = conalab os_region_name = RegionOne | |
| 20:21:59 | wally | this is my [placement] in nova.conf | |
| 20:22:05 | wally | is this correct | |
| 20:22:26 | claudiub | efried: i've addressed the mock.patch issue here: https://github.com/testing-cabal/mock/pull/397 . it might also solve the issue you linked. | |
| 20:22:57 | efried | claudiub Looking.. | |
| 20:24:14 | mriedem | wally: project_domain_name = default user_domain_name = default | |
| 20:24:19 | mriedem | i think default is supposed to be Default | |
| 20:24:22 | mriedem | https://review.openstack.org/#/c/438328/13/doc/install-guide/source/nova-compute-install.rst | |
| 20:24:37 | mriedem | auth_url = http://controller:35357/v3 | |
| 20:24:49 | wally | ok let me try | |
| 20:24:49 | mriedem | you don't have the v3 suffix | |
| 20:25:00 | mriedem | you will have to restart the nova-compute process after making those changes | |
| 20:25:07 | wally | yeah | |
| 20:25:13 | efried | claudiub That one might entail a serious behavior change | |
| 20:25:50 | claudiub | true, but only if autospec=True, which never really worked anyways. | |
| 20:26:03 | claudiub | or from what i've noticed at least. | |
| 20:27:37 | wally | in the controller node, nova.conf. do i need to do the same thing | |
| 20:27:43 | mriedem | yes | |
| 20:34:20 | openstackgerrit | Eric Fried proposed openstack/nova master: PowerVM Driver: spawn/delete #1: no-ops https://review.openstack.org/438119 | |
| 20:34:51 | openstackgerrit | Eric Fried proposed openstack/nova master: PowerVM Driver: spawn/destroy #2: functional https://review.openstack.org/438598 | |
| 20:35:29 | efried | adreznec esberglu ^^ ready for in-house re-+1 | |
| 20:36:11 | openstackgerrit | Matt Riedemann proposed openstack/python-novaclient master: Remove deprecated tenant network APIs https://review.openstack.org/447678 | |
| 20:37:02 | openstackgerrit | Matt Riedemann proposed openstack/python-novaclient master: Remove deprecated tenant network APIs https://review.openstack.org/447678 | |
| 20:51:09 | wally | hi mriedem, i still got the error "message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | |
| 20:51:28 | wally | after i change the nova.conf. | |
| 20:51:44 | wally | i used ubunt 1604 desktop, should I use Ubuntu 1604 server? | |
| 20:51:53 | wally | is there any different? | |
| 20:51:58 | mriedem | what roles does your placement user have? | |
| 20:52:21 | cdent | wally: are you sending an x-auth-token header? | |
| 20:52:21 | wally | openstack role add --project service --user placement admin | |
| 20:52:48 | wally | not sure, how to check sending an x-auth-token header? | |
| 20:53:30 | cdent | is that 401 error happening when you do curl? or is it showing up somewhere else? | |
| 20:53:43 | wally | when i do the curl on the compute node | |
| 20:54:03 | wally | only for this endpoint, all the other endpoint are good | |
| 20:54:13 | openstackgerrit | Diana Clarke proposed openstack/nova master: Fix rest_api_version_history (2.40) https://review.openstack.org/447688 | |
| 20:54:41 | mriedem | wally: what does your curl request look like? | |
| 20:54:50 | mriedem | if you aren't specifying the x-auth-token header, then you're not sending a token | |
| 20:54:54 | cdent | does that curl statement include the phrase "x-auth-token", a bit like `curl -H "x-auth-token: |
|
| 20:54:58 | wally | root@compute1:~# curl http://controller:8778 {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}root@compute1:~# root@compute1:~# | |
| 20:54:59 | mriedem | OS_TOKEN=$(openstack token issue -f value -c id) | |
| 20:55:04 | cdent | yeah, what mriedem just said | |
| 20:55:06 | mriedem | curl -s -H "X-Auth-Token: $OS_TOKEN" http://controller:8778/ | |
| 20:55:07 | openstackgerrit | Eric Fried proposed openstack/nova master: PowerVM Driver: power_on/off and reboot https://review.openstack.org/427380 | |
| 20:55:15 | efried | adreznec esberglu ^ | |
| 20:55:16 | mriedem | wally: you aren't sending a token | |
| 20:55:42 | esberglu | efried: ack | |
| 20:55:44 | mriedem | wally: create an rc file using the same credentials that you have in the [placement] section of nova.conf, source that rc file, then run "OS_TOKEN=$(openstack token issue -f value -c id)" | |
| 20:55:46 | mriedem | to get the token | |
| 20:55:52 | mriedem | and then: curl -s -H "X-Auth-Token: $OS_TOKEN" http://controller:8778/ | |
| 20:56:12 | wally | ok let me try again | |
| 20:56:43 | wally | root@controller:/var/log/apache2# curl -s -H "X-Auth-Token: $OS_TOKEN" http://controller:8778/ {"versions": [{"min_version": "1.0", "max_version": "1.4", "id": "v1.0"}]} | |
| 20:56:47 | wally | yeah, now is that correct? | |
| 20:56:53 | wally | is the correct respone | |
| 20:57:13 | mriedem | yes | |
| 20:57:18 | mriedem | f yes | |
| 20:57:38 | wally | so mean my placement api is working? | |
| 20:57:50 | mriedem | yes | |
| 20:58:01 | cdent | nice teamwork wally and mriedem | |
| 20:58:40 | wally | but then why i ran this command root@controller:/var/log/apache2# nova-status upgrade check | |
| 20:59:03 | wally | still show this http://paste.openstack.org/show/603499/ | |
| 20:59:06 | wally | could you please check | |
| 20:59:44 | wally | must have somehing not config right | |
| 20:59:44 | mriedem | that's reading from nova.conf and using keystoneauth | |
| 20:59:53 | wally | OH | |
| 21:00:00 | wally | so how to fix this keystoneauth | |
| 21:00:03 | wally | in nova.conf | |
| 21:00:26 | wally | [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = nova password = conalab | |