| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2017-03-20 | |||
| 20:51:53 | wally | is there any different? | |
| 20:51:58 | mriedem | what roles does your placement user have? | |
| 20:52:21 | wally | openstack role add --project service --user placement admin | |
| 20:52:21 | cdent | wally: are you sending an x-auth-token header? | |
| 20:52:48 | wally | not sure, how to check sending an x-auth-token header? | |
| 20:53:30 | cdent | is that 401 error happening when you do curl? or is it showing up somewhere else? | |
| 20:53:43 | wally | when i do the curl on the compute node | |
| 20:54:03 | wally | only for this endpoint, all the other endpoint are good | |
| 20:54:13 | openstackgerrit | Diana Clarke proposed openstack/nova master: Fix rest_api_version_history (2.40) https://review.openstack.org/447688 | |
| 20:54:41 | mriedem | wally: what does your curl request look like? | |
| 20:54:50 | mriedem | if you aren't specifying the x-auth-token header, then you're not sending a token | |
| 20:54:54 | cdent | does that curl statement include the phrase "x-auth-token", a bit like `curl -H "x-auth-token: |
|
| 20:54:58 | wally | root@compute1:~# curl http://controller:8778 {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}root@compute1:~# root@compute1:~# | |
| 20:54:59 | mriedem | OS_TOKEN=$(openstack token issue -f value -c id) | |
| 20:55:04 | cdent | yeah, what mriedem just said | |
| 20:55:06 | mriedem | curl -s -H "X-Auth-Token: $OS_TOKEN" http://controller:8778/ | |
| 20:55:07 | openstackgerrit | Eric Fried proposed openstack/nova master: PowerVM Driver: power_on/off and reboot https://review.openstack.org/427380 | |
| 20:55:15 | efried | adreznec esberglu ^ | |
| 20:55:16 | mriedem | wally: you aren't sending a token | |
| 20:55:42 | esberglu | efried: ack | |
| 20:55:44 | mriedem | wally: create an rc file using the same credentials that you have in the [placement] section of nova.conf, source that rc file, then run "OS_TOKEN=$(openstack token issue -f value -c id)" | |
| 20:55:46 | mriedem | to get the token | |
| 20:55:52 | mriedem | and then: curl -s -H "X-Auth-Token: $OS_TOKEN" http://controller:8778/ | |
| 20:56:12 | wally | ok let me try again | |
| 20:56:43 | wally | root@controller:/var/log/apache2# curl -s -H "X-Auth-Token: $OS_TOKEN" http://controller:8778/ {"versions": [{"min_version": "1.0", "max_version": "1.4", "id": "v1.0"}]} | |
| 20:56:47 | wally | yeah, now is that correct? | |
| 20:56:53 | wally | is the correct respone | |
| 20:57:13 | mriedem | yes | |
| 20:57:18 | mriedem | f yes | |
| 20:57:38 | wally | so mean my placement api is working? | |
| 20:57:50 | mriedem | yes | |
| 20:58:01 | cdent | nice teamwork wally and mriedem | |
| 20:58:40 | wally | but then why i ran this command root@controller:/var/log/apache2# nova-status upgrade check | |
| 20:59:03 | wally | still show this http://paste.openstack.org/show/603499/ | |
| 20:59:06 | wally | could you please check | |
| 20:59:44 | mriedem | that's reading from nova.conf and using keystoneauth | |
| 20:59:44 | wally | must have somehing not config right | |
| 20:59:53 | wally | OH | |
| 21:00:00 | wally | so how to fix this keystoneauth | |
| 21:00:03 | wally | in nova.conf | |
| 21:00:26 | wally | [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = nova password = conalab | |
| 21:00:37 | wally | anything wrong? | |
| 21:00:38 | mriedem | well, it's just the credentials from the [placement] section in nova.conf | |
| 21:00:57 | wally | [placement] auth_uri = http://controller:5000 auth_url = http://controller:35357/v3 memcached_servers = controller:11211 auth_type = password project_domain_name = Default user_domain_name = Default project_name = service username = placement password = conalab os_region_name = RegionOne | |
| 21:01:08 | wally | so there much be something wrong with my [placement] | |
| 21:01:24 | wally | do i need to add : $OS_TOKEN" | |
| 21:01:49 | openstackgerrit | Matt Riedemann proposed openstack/python-novaclient master: Remove deprecated floating IP DNS domain/entry APIs https://review.openstack.org/447690 | |
| 21:01:54 | wally | this is my controller node nova.conf | |
| 21:02:03 | mriedem | wally: you have to pass a token with the curl command | |
| 21:02:10 | mriedem | oops nvm | |
| 21:02:13 | mriedem | was reading something old | |
| 21:02:58 | wally | in the curl, it working, but when i run nova-status upgrade check, not working | |
| 21:03:10 | mriedem | right, what's your nova.conf look like? | |
| 21:03:11 | wally | mean something woring with nova.conf right? | |
| 21:03:14 | mriedem | yes | |
| 21:03:35 | wally | in the [placement] right | |
| 21:04:09 | wally | can u please check this http://paste.openstack.org/show/603505/ | |
| 21:04:28 | wally | how can i pass the token in the nova.conf | |
| 21:04:53 | mriedem | the request goes through the keystoneauth library, | |
| 21:05:01 | mriedem | provided the credentials in nova.conf, | |
| 21:05:06 | mriedem | ksa generates the token | |
| 21:05:35 | mriedem | compare with nova.conf from a CI run | |
| 21:05:35 | mriedem | http://logs.openstack.org/77/447577/1/check/gate-tempest-dsvm-neutron-full-ubuntu-xenial/f6ccfe1/logs/etc/nova/nova.conf.txt.gz | |
| 21:06:24 | wally | u maen company my nova.conf with your nova.conf | |
| 21:06:34 | wally | compare my nova.conf with your nova.conf | |
| 21:07:16 | mriedem | wally: what's the OS_AUTH_URL value in your localrc? | |
| 21:08:14 | wally | you mean the admin.rc | |
| 21:08:14 | wally | export OS_PROJECT_DOMAIN_NAME=default export OS_USER_DOMAIN_NAME=default export OS_PROJECT_NAME=admin export OS_USERNAME=admin export OS_PASSWORD=conalab export OS_AUTH_URL=http://controller:35357/v3 export OS_IDENTITY_API_VERSION=3 export OS_IMAGE_API_VERSION=2 | |
| 21:08:27 | wally | this is my admin-openrc.sh | |
| 21:09:28 | mriedem | i think you can remove the auth_uri option, that's deprecated | |
| 21:10:17 | wally | u mean in the nova.conf [placement]? | |
| 21:10:56 | mriedem | right | |
| 21:11:05 | mriedem | it looks like auth_uri is only set in the [keystone_authtoken] section | |
| 21:11:10 | mriedem | what does your [keystone_authtoken] section look like? | |
| 21:11:32 | wally | [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = nova password = conalab | |
| 21:11:40 | wally | this is the keysotne-auth | |
| 21:12:09 | mriedem | are you using keystone v3? | |
| 21:12:36 | wally | i think so | |
| 21:12:37 | mriedem | devstack sets this up like | |
| 21:12:38 | mriedem | auth_uri = https://15.184.65.44/identity | |
| 21:12:42 | mriedem | auth_url = https://15.184.65.44/identity_admin | |
| 21:13:03 | wally | in where? | |
| 21:13:07 | wally | [placement]? | |
| 21:13:18 | mriedem | in [keystone_authtoken] | |
| 21:13:21 | mriedem | see http://logs.openstack.org/77/447577/1/check/gate-tempest-dsvm-neutron-full-ubuntu-xenial/f6ccfe1/logs/etc/nova/nova.conf.txt.gz | |
| 21:14:26 | wally | i see, but i am not sure devstack, | |
| 21:14:36 | wally | not use devstack | |
| 21:14:59 | wally | so i should change to this? | |
| 21:15:01 | mriedem | i realize, | |
| 21:15:10 | mriedem | i'm trying to show an example of a config that is known to work | |
| 21:15:15 | mriedem | so you can compare to yours | |
| 21:15:23 | wally | please | |
| 21:15:35 | mriedem | which is ^ | |
| 21:15:39 | wally | oh | |
| 21:15:41 | wally | i see | |
| 21:15:57 | wally | let me try yours | |
| 21:16:13 | mriedem | it's not "mine", it's from a devstack CI test run | |
| 21:17:40 | openstackgerrit | Matt Riedemann proposed openstack/python-novaclient master: Remove deprecated floating_ips_bulk API https://review.openstack.org/447695 | |
| 21:18:06 | openstackgerrit | Christopher Brown proposed openstack/nova master: Add lan9118 as valid nic for hw_vif_model property for qemu https://review.openstack.org/393489 | |
| 21:18:29 | openstackgerrit | Sujitha proposed openstack/nova master: Add description to policies in attach_interfaces.py https://review.openstack.org/447696 | |