By using the ssl_overcloud flag in your configuration and setting it to true.
On 6 Dec 2017 17:33, "Moshe Levi" <[email protected]> wrote: > How do I tell quickstart to generate certs and enable tls? > > > > *From:* Juan Antonio Osorio [mailto:[email protected]] > *Sent:* Wednesday, December 6, 2017 5:24 PM > *To:* OpenStack Development Mailing List (not for usage questions) < > [email protected]> > *Subject:* Re: [openstack-dev] [tripleo] overcloud keystone error "Could > not determine a suitable URL for the plugin" > > > > > > > > On 6 Dec 2017 16:58, "Moshe Levi" <[email protected]> wrote: > > I have the access to 10.0.0.0 network > > I remove the > > -e /home/stack/enable-tls.yaml -e > ~/heat-templates/environments/tls-endpoints-public-ip.yaml > -e /home/stack/inject-trust-anchor.yaml > > Form the ./overcloud-deploy.sh and now it working > > The issue you posted wasn't a TLS issue, but it might be that it was being > hidden by nova. You could truly to access keystone directly and that will > be more revealing. > > > > My /home/stack/enable-tls.yaml and /home/stack/inject-trust-anchor.yaml > were taken from > > wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/ > master/test-environments/enable-tls.yaml > <https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Fenable-tls.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=MBqec8H5KjiEIPJDT%2F1UxxBntYERIfT6EykQNKCIaIA%3D&reserved=0> > > wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/ > master/test-environments/inject-trust-anchor.yaml > <https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Finject-trust-anchor.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=SBRviDdKz1OGlrfqyDHVGPWvyKwz4eLxB%2BuxfCKIEj0%3D&reserved=0> > > This will only work if you use the exact same fixed IP as we use in CI. So > i don't recommend using that. Rather generate your own certs or tell > quickstart to do it for you by using the appropriate flag. > > > > So maybe the is an issue with tripleo or just these config files > > > > *From:* Juan Antonio Osorio [mailto:[email protected]] > *Sent:* Wednesday, December 6, 2017 12:36 PM > *To:* OpenStack Development Mailing List (not for usage questions) < > [email protected]> > *Subject:* Re: [openstack-dev] [tripleo] overcloud keystone error "Could > not determine a suitable URL for the plugin" > > > > From the node you're running the nova command, do you have access to the > 10.0.0.0 network (external)? > > > > In virtual environments, quickstart will leave an > overcloud-prep-network.sh script that will create a vlan interface that > gives the undercloud access to that network. So, if it's a virtual > environment and you're running that command from the undercloud (which from > the log you sent it seems that's the case) you need to run that. Note that > you need to run that every time you update your undercloud. > > > > BR > > > > > > On 6 Dec 2017 09:06, "Moshe Levi" <[email protected]> wrote: > > Hi all, > > > > We deploy tripleo master using quickstart. > > We this delorean repo: > > name=delorean > > baseurl=https://trunk.rdoproject.org/centos7-master/ac/82/ > ac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7/ > <https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftrunk.rdoproject.org%2Fcentos7-master%2Fac%2F82%2Fac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=R6s6CvAGGAB97GYgCsCsT%2BxU0PQ1fZ89xAuUQFM5tL8%3D&reserved=0> > > > > The undercloud and overcloud deployment were successfully, but we I try to > run command on the overcloud > > I am getting the keystone error "Could not determine a suitable URL for > the plugin" > > See nova-list with debug info [1] > > Do you know how to resolve this? Help in troubleshooting this issue will > be appreciated. > > > > > > [1] http://paste.openstack.org/show/628240/ > <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpaste.openstack.org%2Fshow%2F628240%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=o4nTXxk826W8ys1W1DvZUelSLS5uTT9McwazErh3wOY%3D&reserved=0> > > > > > > > > > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: [email protected]?subject:unsubscribe > <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=Zv8CbJlDuv3ZEiLbp%2BHX%2FQEqTDd%2Fndh4wd700hNdW8I%3D&reserved=0> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=T7Tc%2FtBAv1zl4X3TbTJIqQQ5ZW2PtSrvxVACYChEa40%3D&reserved=0> > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: [email protected]?subject:unsubscribe > <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=7CRrtWDEFDtfqgTVxlVueVp8G5im5J6sdSGXs6%2BDzQE%3D&reserved=0> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=hjUEAdmU%2Bv%2BXqrVgRRZ2hFoCgmu9ZjDJ1Qkry%2FV3YI8%3D&reserved=0> > > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: [email protected]?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > >
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: [email protected]?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
