cinderclient service catalog lookup fails
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Compute (nova) |
Fix Released
|
High
|
clayg |
Bug Description
If your auth system isn't adding the service_catalog in the request headers, you get an unhandled exception in cinderclient.
2012-09-10 14:44:55 INFO nova.api.
2012-09-10 14:44:55 AUDIT nova.api.
2012-09-10 14:44:55 DEBUG nova.openstack.
2012-09-10 14:44:55 DEBUG nova.openstack.
2012-09-10 14:44:55 ERROR nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 TRACE nova.api.
2012-09-10 14:44:55 INFO nova.api.
2012-09-10 14:44:55 INFO nova.osapi_
I'd actually prefer to be able to set the cinder endpoint via a flag for two reasons.
1) if you're using a reverse proxy, or another auth system, it may not be convenient or even make sense to add a copy of the service catalog to the request headers/context - the KeystoneContext middleware certainly seems to support the idea that it may not always be there. Plus, glance uses flags afaict, and that works ok.
2) There may be good reasons for the management endpoint that nova uses to talk to cinder to be different than the public endpoint, so the users catalog may not really help. (e.g. public endpoint has os-volume_actions ext disabled to prevent user calling detach directly without updating nova)
The attached patch also happens to support noauth just cause it was "right there"
Changed in nova: | |
milestone: | none → folsom-rc1 |
assignee: | nobody → clayg (clay-gerrard) |
importance: | Undecided → High |
status: | New → In Progress |
Changed in nova: | |
status: | Fix Committed → Fix Released |
Changed in nova: | |
milestone: | folsom-rc1 → 2012.2 |
Fix proposed to branch: master /review. openstack. org/12748
Review: https:/