Juniper Openstack

Bug #1607289
Comment #2

Comment 2 for bug 1607289

Revision history for this message

Deepinder Setia (dsetia) wrote on 2016-07-29: Re: [Bug 1607289] [NEW] keystone v3 :: nova and glance cli failing with error after configuring v3.

What errors glance and neutron returning? Have you tried “openstack” client? I know keystone client doesn’t handle V3 well (keystone tenant-list would fail, for example) but not sure about glance/neutron.

I have also seen assigning “admin” user “admin” role in default domain (in addition to admin tenant) also helps.

—
Deepinder

OOO 8/31

On 7/29/16, 12:31 AM, "Ritam Gangopadhyay" <email address hidden> wrote:

>Thanks,
>
> It works with following set of parameters set in openstackrc file
>
>export OS_USERNAME=admin
>export OS_PASSWORD=contrail123
>export OS_AUTH_URL=http://192.168.100.10:5000/v3/
>export OS_NO_CACHE=1
>export OS_DEFAULT_DOMAIN=default
>export OS_PROJECT_NAME=admin
>export OS_IDENTITY_API_VERSION=3
>
>
>but glance and neutron api's are still running into authentication errors
>
>
>root@nodeg34:~# glance image-list
>You must provide a project_id or project_name (with project_domain_name or project_domain_id) via --os-project-id (env[OS_PROJECT_ID]) --os-project-name (env[OS_PROJECT_NAME]), --os-project-domain-id (env[OS_PROJECT_DOMAIN_ID]) --os-project-domain-name (env[OS_PROJECT_DOMAIN_NAME])
>root@nodeg34:~# glance --os-project-id admin image-list
>The request you have made requires authentication. (HTTP 401) (Request-ID: req-5e17092e-979a-461d-87ef-4ddabc2ff2b7)
>root@nodeg34:~# glance --debug --os-project-id admin image-list
>Traceback (most recent call last):
> File "/usr/local/lib/python2.7/dist-packages/glanceclient/shell.py", line 668, in main
> OpenStackImagesShell().main(argv)
> File "/usr/local/lib/python2.7/dist-packages/glanceclient/shell.py", line 552, in main
> client = self._get_versioned_client('2', args)
> File "/usr/local/lib/python2.7/dist-packages/glanceclient/shell.py", line 447, in _get_versioned_client
> region_name=args.os_region_name)
> File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 679, in get_endpoint
> return auth.get_endpoint(self, **kwargs)
> File "/usr/local/lib/python2.7/dist-packages/keystoneclient/auth/identity/base.py", line 329, in get_endpoint
> service_catalog = self.get_access(session).service_catalog
> File "/usr/local/lib/python2.7/dist-packages/keystoneclient/auth/identity/base.py", line 254, in get_access
> self.auth_ref = self.get_auth_ref(session)
> File "/usr/local/lib/python2.7/dist-packages/keystoneclient/auth/identity/v3/base.py", line 191, in get_auth_ref
> authenticated=False, log=False, **rkwargs)
> File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 519, in post
> return self.request(url, 'POST', **kwargs)
> File "/usr/local/lib/python2.7/dist-packages/wrapt/wrappers.py", line 561, in __call__
> args, kwargs)
> File "/usr/local/lib/python2.7/dist-packages/positional/__init__.py", line 101, in inner
> return wrapped(*args, **kwargs)
> File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 419, in request
> raise exceptions.from_response(resp, method, url)
>Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-2d4f1526-1f74-467e-9fbc-ad481e1542c7)
>The request you have made requires authentication. (HTTP 401) (Request-ID: req-2d4f1526-1f74-467e-9fbc-ad481e1542c7)
>root@nodeg34:~#
>
>
>Regards,
>Ritam.
>
>
>
>
>-----Original Message-----
>From: Senthilnathan Murugappan
>Sent: Friday, July 29, 2016 11:47 AM
>To: Bug 1607289 <email address hidden>; Ritam Gangopadhyay <email address hidden>; Deepinder Singh Setia <email address hidden>
>Subject: RE: [Bug 1607289] [NEW] keystone v3 :: nova and glance cli failing with error after configuring v3.
>
>Please refer https://bugs.launchpad.net/python-novaclient/+bug/1522402
>This I believe is expected. Do correct me if I am wrong.
>
>Thanks,
>Senthil
>
>-----Original Message-----
>From: <email address hidden> [mailto:<email address hidden>] On Behalf Of Ritam Gangopadhyay
>Sent: Thursday, July 28, 2016 2:59 AM
>To: Senthilnathan Murugappan
>Subject: [Bug 1607289] [NEW] keystone v3 :: nova and glance cli failing with error after configuring v3.
>
>Private bug reported:
>
>
>build 3 kilo setup - multi node HA
>
>
>root@nodeg34:~# nova list
>ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-b887a077-111b-4e3a-8be8-c933aee1cc39)
>root@nodeg34:~# nova service-list
>ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-d0dcceef-8322-4065-a69e-f3bd242abe05)
>root@nodeg34:~# glance image-list
>Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-bce4655b-6f51-4cba-a400-a1a3fe964e40)
>root@nodeg34:~#
>
>
>
>Setup:-
>
>host1 = 'root@10.204.221.24'
>host2 = 'root@10.204.221.27'
>host3 = 'root@10.204.221.28'
>host4 = 'root@10.204.221.25'
>host5 = 'root@10.204.221.26'
>
>env.roledefs = {
>
> 'all': [host1, host2, host3, host4, host5],
> 'cfgm': [host1, host2, host3],
> 'openstack':[host1, host2, host3],
> 'control':[host1, host2, host3],
> 'compute': [host4, host5],
> 'collector': [host1, host2, host3],
> 'webui': [host1, host2, host3],
> 'database': [host1, host2, host3],
> 'build': [host_build],
>
>
>}
>env.hostnames ={
> 'all': ['nodeg34', 'nodec48', 'nodec49', 'nodec51', 'nodec63'] }
>
>env.ha = {
> 'internal_vip' : '192.168.100.10',
> 'external_vip' : '10.204.221.17',
>}
>
>** Affects: juniperopenstack
> Importance: Critical
> Status: New
>
>
>** Tags: blocker keystone keystonev3
>
>--
>You received this bug notification because you are a member of Contrail Systems engineering, which is subscribed to Juniper Openstack.
>https://bugs.launchpad.net/bugs/1607289
>
>Title:
> keystone v3 :: nova and glance cli failing with error after
> configuring v3.
>
>Status in Juniper Openstack:
> New
>
>Bug description:
>
> build 3 kilo setup - multi node HA
>
>
> root@nodeg34:~# nova list
> ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-b887a077-111b-4e3a-8be8-c933aee1cc39)
> root@nodeg34:~# nova service-list
> ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-d0dcceef-8322-4065-a69e-f3bd242abe05)
> root@nodeg34:~# glance image-list
> Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-bce4655b-6f51-4cba-a400-a1a3fe964e40)
> root@nodeg34:~#
>
>
>
>
> Setup:-
>
> host1 = 'root@10.204.221.24'
> host2 = 'root@10.204.221.27'
> host3 = 'root@10.204.221.28'
> host4 = 'root@10.204.221.25'
> host5 = 'root@10.204.221.26'
>
> env.roledefs = {
>
> 'all': [host1, host2, host3, host4, host5],
> 'cfgm': [host1, host2, host3],
> 'openstack':[host1, host2, host3],
> 'control':[host1, host2, host3],
> 'compute': [host4, host5],
> 'collector': [host1, host2, host3],
> 'webui': [host1, host2, host3],
> 'database': [host1, host2, host3],
> 'build': [host_build],
>
>
> }
> env.hostnames ={
> 'all': ['nodeg34', 'nodec48', 'nodec49', 'nodec51', 'nodec63']
> }
>
> env.ha = {
> 'internal_vip' : '192.168.100.10',
> 'external_vip' : '10.204.221.17',
> }
>
>To manage notifications about this bug go to:
>https://bugs.launchpad.net/juniperopenstack/+bug/1607289/+subscriptions

I have also seen assigning “admin” user “admin” role in default domain (in addition to admin tenant) also helps.

— 
Deepinder

OOO 8/31

On 7/29/16, 12:31 AM, "Ritam Gangopadhyay" <ritam@juniper.net> wrote:

>Thanks,
>
> It works with following set of parameters set in openstackrc file
>
>export OS_USERNAME=admin
>export OS_PASSWORD=contrail123
>export OS_AUTH_URL=http://192.168.100.10:5000/v3/
>export OS_NO_CACHE=1
>export OS_DEFAULT_DOMAIN=default
>export OS_PROJECT_NAME=admin
>export OS_IDENTITY_API_VERSION=3
>
>
>but glance and neutron api's are still running into authentication errors
>
>
>root@nodeg34:~# glance image-list
>You must provide a project_id or project_name (with project_domain_name or project_domain_id) via   --os-project-id (env[OS_PROJECT_ID])  --os-project-name (env[OS_PROJECT_NAME]),  --os-project-domain-id (env[OS_PROJECT_DOMAIN_ID])  --os-project-domain-name (env[OS_PROJECT_DOMAIN_NAME])
>root@nodeg34:~# glance --os-project-id admin image-list
>The request you have made requires authentication. (HTTP 401) (Request-ID: req-5e17092e-979a-461d-87ef-4ddabc2ff2b7)
>root@nodeg34:~# glance --debug --os-project-id admin image-list
>Traceback (most recent call last):
>  File "/usr/local/lib/python2.7/dist-packages/glanceclient/shell.py", line 668, in main
>    OpenStackImagesShell().main(argv)
>  File "/usr/local/lib/python2.7/dist-packages/glanceclient/shell.py", line 552, in main
>    client = self._get_versioned_client('2', args)
>  File "/usr/local/lib/python2.7/dist-packages/glanceclient/shell.py", line 447, in _get_versioned_client
>    region_name=args.os_region_name)
>  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 679, in get_endpoint
>    return auth.get_endpoint(self, **kwargs)
>  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/auth/identity/base.py", line 329, in get_endpoint
>    service_catalog = self.get_access(session).service_catalog
>  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/auth/identity/base.py", line 254, in get_access
>    self.auth_ref = self.get_auth_ref(session)
>  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/auth/identity/v3/base.py", line 191, in get_auth_ref
>    authenticated=False, log=False, **rkwargs)
>  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 519, in post
>    return self.request(url, 'POST', **kwargs)
>  File "/usr/local/lib/python2.7/dist-packages/wrapt/wrappers.py", line 561, in __call__
>    args, kwargs)
>  File "/usr/local/lib/python2.7/dist-packages/positional/__init__.py", line 101, in inner
>    return wrapped(*args, **kwargs)
>  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 419, in request
>    raise exceptions.from_response(resp, method, url)
>Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-2d4f1526-1f74-467e-9fbc-ad481e1542c7)
>The request you have made requires authentication. (HTTP 401) (Request-ID: req-2d4f1526-1f74-467e-9fbc-ad481e1542c7)
>root@nodeg34:~#
>
>
>Regards,
>Ritam.
>
>
>
>
>-----Original Message-----
>From: Senthilnathan Murugappan 
>Sent: Friday, July 29, 2016 11:47 AM
>To: Bug 1607289 <1607289@bugs.launchpad.net>; Ritam Gangopadhyay <ritam@juniper.net>; Deepinder Singh Setia <dsetia@juniper.net>
>Subject: RE: [Bug 1607289] [NEW] keystone v3 :: nova and glance cli failing with error after configuring v3.
>
>Please refer https://bugs.launchpad.net/python-novaclient/+bug/1522402
>This I believe is expected. Do correct me if I am wrong.
>
>Thanks,
>Senthil
>
>-----Original Message-----
>From: bounces@canonical.com [mailto:bounces@canonical.com] On Behalf Of Ritam Gangopadhyay
>Sent: Thursday, July 28, 2016 2:59 AM
>To: Senthilnathan Murugappan
>Subject: [Bug 1607289] [NEW] keystone v3 :: nova and glance cli failing with error after configuring v3.
>
>Private bug reported:
>
>
>build 3 kilo setup - multi node HA
>
>
>root@nodeg34:~# nova list
>ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-b887a077-111b-4e3a-8be8-c933aee1cc39)
>root@nodeg34:~# nova service-list
>ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-d0dcceef-8322-4065-a69e-f3bd242abe05)
>root@nodeg34:~# glance image-list
>Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-bce4655b-6f51-4cba-a400-a1a3fe964e40)
>root@nodeg34:~#
>
>
>
>Setup:-
>
>host1 = 'root@10.204.221.24'
>host2 = 'root@10.204.221.27'
>host3 = 'root@10.204.221.28'
>host4 = 'root@10.204.221.25'
>host5 = 'root@10.204.221.26'
>
>env.roledefs = {
>
>    'all': [host1, host2, host3, host4, host5],
>    'cfgm': [host1, host2, host3],
>    'openstack':[host1, host2, host3],
>    'control':[host1, host2, host3],
>    'compute': [host4, host5],
>    'collector': [host1, host2, host3],
>    'webui': [host1, host2, host3],
>    'database': [host1, host2, host3],
>    'build': [host_build],
>
>
>}
>env.hostnames ={
>    'all': ['nodeg34', 'nodec48', 'nodec49', 'nodec51', 'nodec63'] }
>
>env.ha = {
>    'internal_vip' : '192.168.100.10',
>    'external_vip' : '10.204.221.17',
>}
>
>** Affects: juniperopenstack
>     Importance: Critical
>         Status: New
>
>
>** Tags: blocker keystone keystonev3
>
>--
>You received this bug notification because you are a member of Contrail Systems engineering, which is subscribed to Juniper Openstack.
>https://bugs.launchpad.net/bugs/1607289
>
>Title:
>  keystone v3 :: nova and glance cli failing with error after
>  configuring v3.
>
>Status in Juniper Openstack:
>  New
>
>Bug description:
>  
>  build 3 kilo setup - multi node HA
>
>  
>  root@nodeg34:~# nova list
>  ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-b887a077-111b-4e3a-8be8-c933aee1cc39)
>  root@nodeg34:~# nova service-list
>  ERROR (BadRequest): Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-d0dcceef-8322-4065-a69e-f3bd242abe05)
>  root@nodeg34:~# glance image-list
>  Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-bce4655b-6f51-4cba-a400-a1a3fe964e40)
>  root@nodeg34:~#
>
>
>
>
>  Setup:-
>
>  host1 = 'root@10.204.221.24'
>  host2 = 'root@10.204.221.27'
>  host3 = 'root@10.204.221.28'
>  host4 = 'root@10.204.221.25'
>  host5 = 'root@10.204.221.26'
>
>  env.roledefs = {
>
>      'all': [host1, host2, host3, host4, host5],
>      'cfgm': [host1, host2, host3],
>      'openstack':[host1, host2, host3],
>      'control':[host1, host2, host3],
>      'compute': [host4, host5],
>      'collector': [host1, host2, host3],
>      'webui': [host1, host2, host3],
>      'database': [host1, host2, host3],
>      'build': [host_build],
>
>  
>  }
>  env.hostnames ={
>      'all': ['nodeg34', 'nodec48', 'nodec49', 'nodec51', 'nodec63']
>  }
>
>  env.ha = {
>      'internal_vip' : '192.168.100.10',
>      'external_vip' : '10.204.221.17',
>  }
>
>To manage notifications about this bug go to:
>https://bugs.launchpad.net/juniperopenstack/+bug/1607289/+subscriptions