The password has to be encrypted using the SO java utility – did you do that step ?
https://gerrit.onap.org/r/gitweb?p=oom.git;a=blob;f=docs/oom_quickstart_guide.rst;h=501deda7e48ccff497694e55e3d57ece1facb697;hb=refs/heads/master https://gerrit.onap.org/r/gitweb?p=integration.git;a=blob;f=deployment/heat/onap-rke/scripts/Crypto.java;h=a9bad509ac2010884697f4ea21c3f9617864573b;hb=refs/heads/master From: MALINCONICO ANIELLO PAOLO <[email protected]> Sent: Wednesday, June 05, 2019 7:45 AM To: FREEMAN, BRIAN D <[email protected]>; [email protected] Subject: Re: [onap-discuss] [master branch] v3 openstack configuration Hi Brian, into my onap/values.yaml, I have setted the *_THREE values: openStackKeyStoneUrl: "http://163.162.95.137:5000<https://urldefense.proofpoint.com/v2/url?u=http-3A__163.162.95.137-3A5000&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=4VpSkyamn3N4VD9yelaVF92zCk_cQH_ZmuSaYX75hps&e=>" openStackPublicNetId: "2c921f24-7e22-40f0-af62-e6801bff0ae1" openStackTenantId: "34f1fe41d1a0483dbd1aa94c26dc5545" openStackUserName: "dc1" openStackKeystoneAPIVersion: "v3" openStackProjectName: "datacenter1" openStackDomainId: "default" openStackRegionRegionThree: "RegionOne" ->> CUSTOM NAME? openStackKeyStoneUrlRegionThree: "http://163.162.95.137:5000<https://urldefense.proofpoint.com/v2/url?u=http-3A__163.162.95.137-3A5000&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=4VpSkyamn3N4VD9yelaVF92zCk_cQH_ZmuSaYX75hps&e=>" openStackKeystoneAPIVersionRegionThree: "v3" openStackUserNameRegionThree: "dc1" #openStackPasswordRegionThree: "xxx" -> WHAT MEANS? # this is the java encrypted password that is needed for SO openSackMsoEncryptdPasswordRegionThree: "3655cd5e12c709880970515188cca460" -> note that it is openSack , not openSTACK by default openStackMsoEncryptdPasswordRegionThree: "3655cd5e12c709880970515188cca460" openStackTenantIdRegionThree: "34f1fe41d1a0483dbd1aa94c26dc5545" openStackProjectNameRegionThree: "datacenter1" openStackDomainIdRegionThree: "Default" After redeployed Robot, I have executed: root@control-plane-1:~/oom_master/kubernetes/robot# ./ete-k8s.sh onap cloudconfigv3 ... Executing robot tests at log level TRACE ============================================================================== Testsuites ============================================================================== Testsuites.Create-Cloud-Config :: SO Cloud Config Test Cases ============================================================================== Create Cloud Config RegionThree V3 Test :: Create Keystone V3 in R... | PASS | ------------------------------------------------------------------------------ Testsuites.Create-Cloud-Config :: SO Cloud Config Test Cases | PASS | 1 critical test, 1 passed, 0 failed 1 test total, 1 passed, 0 failed ============================================================================== Testsuites | PASS | 1 critical test, 1 passed, 0 failed 1 test total, 1 passed, 0 failed ============================================================================== Output: /share/logs/0000_ete_cloudconfigv3/output.xml Log: /share/logs/0000_ete_cloudconfigv3/log.html Report: /share/logs/0000_ete_cloudconfigv3/report.html Here my tables: MariaDB [catalogdb]> select * from cloud_sites; +-------------------+-----------+-----------------------+---------------+-------------+-------------+----------+--------------+-----------------+---------------------+---------------------+ | ID | REGION_ID | IDENTITY_SERVICE_ID | CLOUD_VERSION | CLLI | CLOUDIFY_ID | PLATFORM | ORCHESTRATOR | LAST_UPDATED_BY | CREATION_TIMESTAMP | UPDATE_TIMESTAMP | +-------------------+-----------+-----------------------+---------------+-------------+-------------+----------+--------------+-----------------+---------------------+---------------------+ | Chicago | ORD | RAX_KEYSTONE | 2.5 | ORD | NULL | NULL | NULL | FLYWAY | 2019-06-03 16:01:15 | 2019-06-03 16:01:15 | | Dallas | DFW | RAX_KEYSTONE | 2.5 | DFW | NULL | NULL | NULL | FLYWAY | 2019-06-03 16:01:15 | 2019-06-03 16:01:15 | | DEFAULT | RegionOne | DEFAULT_KEYSTONE | 2.5 | RegionOne | NULL | NULL | NULL | FLYWAY | 2019-06-03 16:01:15 | 2019-06-03 16:01:15 | | Northern Virginia | IAD | RAX_KEYSTONE | 2.5 | IAD | NULL | NULL | NULL | FLYWAY | 2019-06-03 16:01:15 | 2019-06-03 16:01:15 | | RegionOne | RegionOne | REGION_THREE_KEYSTONE | 2.5 | RegionOne | NULL | NULL | NULL | NULL | 2019-06-05 10:13:48 | 2019-06-05 10:13:48 | +-------------------+-----------+-----------------------+---------------+-------------+-------------+----------+--------------+-----------------+---------------------+---------------------+ NOTE: THE COLUMN ID should be a custom name (regionOnev3) while the CLLI should be the (region on openstack associated to the tenant (RegionOne). But both refers to openStackRegionRegionThree: "RegionOne" value into onap/values.yaml. Right? MariaDB [catalogdb]> select * from identity_services; +-----------------------+----------------------------------------------+----------------------+----------------------------------+----------------------------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+ | ID | IDENTITY_URL | MSO_ID | MSO_PASS | ADMIN_TENANT | MEMBER_ROLE | TENANT_METADATA | IDENTITY_SERVER_TYPE | IDENTITY_AUTHENTICATION_TYPE | LAST_UPDATED_BY | CREATION_TIMESTAMP | UPDATE_TIMESTAMP | PROJECT_DOMAIN_NAME | USER_DOMAIN_NAME | +-----------------------+----------------------------------------------+----------------------+----------------------------------+----------------------------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+ | DEFAULT_KEYSTONE | http://163.162.95.137:5000/v3 <https://urldefense.proofpoint.com/v2/url?u=http-3A__163.162.95.137-3A5000_v3-25A0&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=Og8XHv5Wq6inHosGr7J3L51ENdzTCF8azt2SkK9uga8&e=> | dc1 | 3655cd5e12c709880970515188cca460 | service | admin | 1 | KEYSTONE | USERNAME_PASSWORD | FLYWAY | 2019-06-03 16:01:15 | 2019-06-03 16:01:15 | NULL | NULL | | RAX_KEYSTONE | https://identity.api.rackspacecloud.com/v2.0<https://urldefense.proofpoint.com/v2/url?u=https-3A__identity.api.rackspacecloud.com_v2.0&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=sohNXpzF1vk1afvzLvziH4Lb1Wj5IOV9Z8ImyEnDHPY&e=> | RACKSPACE_ACCOUNT_ID | RACKSPACE_ACCOUNT_APIKEY | service | admin | 1 | KEYSTONE | RACKSPACE_APIKEY | FLYWAY | 2019-06-03 16:01:15 | 2019-06-03 16:01:15 | NULL | NULL | | REGION_THREE_KEYSTONE | http://163.162.95.137:5000/v3 <https://urldefense.proofpoint.com/v2/url?u=http-3A__163.162.95.137-3A5000_v3-25A0&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=Og8XHv5Wq6inHosGr7J3L51ENdzTCF8azt2SkK9uga8&e=> | dc1 | 3655cd5e12c709880970515188cca460 | 34f1fe41d1a0483dbd1aa94c26dc5545 | admin | NULL | KEYSTONE_V3 | USERNAME_PASSWORD | NULL | 2019-06-05 10:13:48 | 2019-06-05 10:13:48 | datacenter1 | Default | +-----------------------+----------------------------------------------+----------------------+----------------------------------+----------------------------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+----------------- NOTE: THE COLUMN ADMIN_TENANT SHOULD BE service instead of the tenantID . It is retrieved by the "openStackTenantIdRegionThree: "34f1fe41d1a0483dbd1aa94c26dc5545" " into the values.yaml file. AND finally , the test ./ete-k8s.sh instantiateVFW fails at the end during the vf-module deploying. Here openstack-so-adpter log: 2019-06-05T10:45:47.559Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - URI : http://so-catalog-db-adapter.onap:8082/cloudSite/RegionOne<https://urldefense.proofpoint.com/v2/url?u=http-3A__so-2Dcatalog-2Ddb-2Dadapter.onap-3A8082_cloudSite_RegionOne&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=vhJY3frNb6m-9EV3Dk-zSOFBqJgTyf22qSBH1jdVlv0&e=> 2019-06-05T10:45:47.559Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Method : GET 2019-06-05T10:45:47.559Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Headers : {Accept=[application/hal+json], Content-Length=[0], Content-Type=[application/hal+json], X-ONAP-RequestID=[464aef92-8b23-4b97-b7bf-f77eede526b0], X-ONAP-InvocationID=[d6ca97ee-1011-4ff1-a123-b0009c3d535f], X-ONAP-PartnerName=[SO]} 2019-06-05T10:45:47.560Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Request body: 2019-06-05T10:45:47.560Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ==========================request end================================================ 2019-06-05T10:45:47.611Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ============================response begin========================================== 2019-06-05T10:45:47.612Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Status code : 200 2019-06-05T10:45:47.612Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Status text : 2019-06-05T10:45:47.612Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Type=[application/hal+json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 05 Jun 2019 10:45:49 GMT]} 2019-06-05T10:45:47.612Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Response body: { "id" : "RegionOne", "identityService" : { "id" : "REGION_THREE_KEYSTONE", "handler" : { }, "hibernateLazyInitializer" : { }, "identityServerTypeAsString" : "KEYSTONE_V3", "identity_url" : "http://163.162.95.137:5000/v3<https://urldefense.proofpoint.com/v2/url?u=http-3A__163.162.95.137-3A5000_v3&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=wbMb9PdN7A_UVks0l0AlJn3kWy8LOHozCYbQ5d0DAO0&e=>", "mso_id" : "dc1", "mso_pass" : "3655cd5e12c709880970515188cca460", "project_domain_name" : "datacenter1", "user_domain_name" : "Default", "admin_tenant" : "34f1fe41d1a0483dbd1aa94c26dc5545", "member_role" : "admin", "tenant_metadata" : null, "identity_server_type" : "KEYSTONE_V3", "identity_authentication_type" : "USERNAME_PASSWORD", "last_updated_by" : null, "creation_timestamp" : "2019-06-05T10:38:19.000+0000", "update_timestamp" : "2019-06-05T10:38:19.000+0000" }, "uri" : null, "region_id" : "RegionOne", "aic_version" : "2.5", "clli" : "RegionOne", "platform" : null, "orchestrator" : null, "cloudify_id" : null, "identity_service_id" : "REGION_THREE_KEYSTONE", "last_updated_by" : null, "creation_timestamp" : "2019-06-05T10:38:19.000+0000", "update_timestamp" : "2019-06-05T10:38:19.000+0000", "_links" : { "self" : { "href" : "http://so-catalog-db-adapter.onap:8082/cloudSite/RegionOne<https://urldefense.proofpoint.com/v2/url?u=http-3A__so-2Dcatalog-2Ddb-2Dadapter.onap-3A8082_cloudSite_RegionOne&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=vhJY3frNb6m-9EV3Dk-zSOFBqJgTyf22qSBH1jdVlv0&e=>" }, "cloudSite" : { "href" : "http://so-catalog-db-adapter.onap:8082/cloudSite/RegionOne<https://urldefense.proofpoint.com/v2/url?u=http-3A__so-2Dcatalog-2Ddb-2Dadapter.onap-3A8082_cloudSite_RegionOne&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=vhJY3frNb6m-9EV3Dk-zSOFBqJgTyf22qSBH1jdVlv0&e=>" } } } 2019-06-05T10:45:47.612Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - =======================response end================================================= 2019-06-05T10:45:47.626Z|| org.onap.so.openstack.utils.MsoHeatUtils - Found: CloudSite_.._jvsta2e_3c[regionId=RegionOne,identityServiceId=REGION_THREE_KEYSTONE,cloudVersion=2.5,clli=RegionOne,cloudifyId=<null>,platform=<null>,orchestrator=<null>] 2019-06-05T10:45:47.626Z|| org.onap.so.openstack.utils.MsoHeatUtils - Found: CloudIdentity[id=REGION_THREE_KEYSTONE,identityUrl=http://163.162.95.137:5000/v3,msoId=dc1,projectDomain=datacenter1,userDomain=Default,adminTenant=34f1fe41d1a0483dbd1aa94c26dc5545,memberRole=admin,tenantMetadata=<null>,identityServerType=KEYSTONE_V3,identityAuthenticationType=USERNAME_PASSWORD<https://urldefense.proofpoint.com/v2/url?u=http-3A__163.162.95.137-3A5000_v3-2CmsoId-3Ddc1-2CprojectDomain-3Ddatacenter1-2CuserDomain-3DDefault-2CadminTenant-3D34f1fe41d1a0483dbd1aa94c26dc5545-2CmemberRole-3Dadmin-2CtenantMetadata-3D-253Cnull-253E-2CidentityServerType-3DKEYSTONE-5FV3-2CidentityAuthenticationType-3DUSERNAME-5FPASSWORD&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=4YMWN_L1RKMdCZk51bkOx4IxdZ0S1ORoONVLB49RPGw&e=>] 2019-06-05T10:45:47.626Z|| org.onap.so.openstack.utils.MsoHeatUtils - keystoneUrl=http://163.162.95.137:5000/v3<https://urldefense.proofpoint.com/v2/url?u=http-3A__163.162.95.137-3A5000_v3&d=DwQFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=e3d1ehx3DI5AoMgDmi2Fzw&m=GTmD5KdZXnigSTA05V2zKe1_HjOisjHmbHU44GydgMY&s=wbMb9PdN7A_UVks0l0AlJn3kWy8LOHozCYbQ5d0DAO0&e=> 2019-06-05T10:45:47.627Z|| org.onap.so.utils.CryptoUtils - RA_GENERAL_EXCEPTION 500 Exception in encryptPassword javax.crypto.AEADBadTagException: Input too short - need tag ... ava.lang.Thread.run(Thread.java:748) 2019-06-05T10:45:47.716Z|| org.onap.so.openstack.utils.MsoHeatUtils - RA_CONNECTION_EXCEPTION 200 Openstack Exception on Token request: org.onap.so.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=34f1fe41d1a0483dbd1aa94c26dc5545,cloud=REGION_THREE_KEYSTONE at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:871) ... 2019-06-05T10:45:47.716Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - RA_QUERY_VNF_ERR Vfmodule_Ete_vFW_84d6e446_0 CloudOwner RegionOne 34f1fe41d1a0483dbd1aa94c26dc5545 OpenStack queryStack 300 Exception - queryStack org.onap.so.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=34f1fe41d1a0483dbd1aa94c26dc5545,cloud=REGION_THREE_KEYSTONE at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:871) at org.onap.so.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:502) The error still survive. Can u helm me to solve this issue? Thanks a lot, Aniello Paolo Malinconico -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#17437): https://lists.onap.org/g/onap-discuss/message/17437 Mute This Topic: https://lists.onap.org/mt/31925775/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
