Hello Anastasia,
thanks for the feedback and your hard work.
I will clone the new master and try to build it again and let you know
of my findings.
Warmest regards,
George
Hi Georgios,
The difference was caused by the presence of caching metadata in nova
and the lack of caching in ec2-api.
We’ve fixed it in ec2-api in master.
Thank you for your assistance.
Regards,
Anastasia
On 21 Apr 2017, at 09:12, Andrey Pavlov wrote:
Also it will be very helpful for us if you describe the cloud where
this happens.
How many projects/users. How many instances at all and in the tenant
where you try to list it. How many networks/subnets/ports.
Regards,
Andrey.
On Thu, Apr 20, 2017 at 11:50 PM, Georgios Dimitrakakis wrote:
Hello,
I will try to provide you with the logs in the next few days...
Best,
G.
Hello Georgios,
We will test it on our site, but for more careful
investigations could
you please turn on debug = True in ec2api.conf and send us the
ec2api
logs during problem.
Any additional information you can provide is welcome.
Thank you,
BR,
Anastasia
On 18 Apr 2017, at 10:22, Georgios Dimitrakakis wrote:
Hello Anastasia!
Yes, 'nova list' is fast and I 've already given the
requested
information by replying to Jay's post.
Jay asked someone from the the EC2 API team to look at it but
so far
no one has appeared...
Best,
G.
Hello Georgios,
We’ll update the doc in the near future.
Did you see the question of Jay Pipes in the thread about
slow
performance? Did you try to run ’nova list’ and compare
the
time?
Thank you
Best regards,
Anastasia Kravets
Hello Alexandre,
thank you very much for your time. I have a rough guide
of what
I
did in order to have it working in case you need it to
update
the
docs so please let me know if I can be of any assistance.
By the way could you please check the following thread
and let
me
know if you have any idea?
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[49]
[19]
[21]
All the best,
G.
Thank you Georgios,
We'll definitely update the doc. We were away all of us
so
couldn't
help you with your initial problems. Glad you'd figured
them
out.
Sorry about your troubles.
Best regards,
Alex Levine
On 4/1/17 12:00 PM, Georgios Dimitrakakis wrote:
For people dealing with the same problem I was able to
overcome
the problem by installing the "openstack-ec2-api"
package
from
the centos-openstack-ocata repository.
Although the binaries were exactly the same as mine
(did a
checksum) installing the package revealed a much more
detailed
configuration file, which helped a lot.
In there I found that the "metadata_shared_secret"
should be
under the "[metadata]" section instead of just
putting it in
the
default as I was doing since there was no
configuration.
I believe that the documentation on EC2-API should be
definitely updated for two reasons: 1) To instruct
users to
install the available package instead of letting them
to
build
everything manually and 2) To inform them on the
settings
that
should be present in the configuration file in order
for it
to
work with the current OpenStack specifications and
requirements.
Regards,
G.
On Mon, 20 Mar 2017 00:27:35 +0200, Georgios
Dimitrakakis
wrote:
Just to post an update.
These are two different issues.
The first one
# aws --endpoint-url http://controller:8788 [1] [1]
[9] ec2
describe-images
An error occurred (AuthFailure) when calling the
DescribeImages
operation: Not Found
was because of this line
keystone_ec2_tokens_url =
http://nefelus-controller:35357/v3/v3/ec2token [2]
[2] [10]
in the "ec2api.conf" file.
Obviously they shouldn't be two "v3" there.
This is coming from the "install.sh" script because
of
this:
iniset $CONF_FILE DEFAULT keystone_ec2_tokens_url
"$OS_AUTH_URL/v3/ec2tokens"
but in the new versions of OpenStack (I am on
Ocata) the
recommended
way for "admin.rc" is to have
OS_AUTH_URL=http://controller:35357/v3 [3] [3] [11]
So there is already a "v3" plus another from
"install.sh"
you
have two.
This sounds like a bug to me or at least is not
compatible
with the
latest versions.
What does the community think? Should I file a bug?
The second one although not solved yet I believe is
coming
from the
incorrect usage of "metadata_shared_secret" but I
am not
quiet sure
yet how to make it work.
I would really like some help here people......
Looking forward for your answers and help.
All the best,
G.
Furthermore,
now all my instances FAIL to get their metadata!
This is the error in "ec2-metadata-api.log"
2017-03-19 17:04:16.689 13635 WARNING
ec2api.metadata
[-]
X-Instance-ID-Signature:
b80302f1bd7d744c40cabc35908d8f70f49093d5cd07763cdd769d90b925db62
does
not match the expected value:
5188ed2e0813d6cfc007ed8695c8684ba2bbd18ee3e4376187f2ba82d17297dc
for
id: 2d632701-7ae7-45cc-9cdd-9cea382b3342. Request From:
172.16.1.11
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata [-]
Unexpected error.
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
Traceback (most
recent call last):
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata File
line 90,
in __call__
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
requester =
self._get_requester(req)
2017-03-19 17:04:16.690 13635 ERROR ec2
ome/giorgis/EC2-GIT/ec2-api/ec2api/metadata/__init__.py",
line 182,
in _get_requester
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
self._unpack_neutron_request(req))
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
File
"/home/giorgis/EC2-GIT/ec2-api/ec2api/metadata/__init__.py",
line 223,
in _unpack_neutron_request
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
self._validate_signature(signature, os_instance_id,
remote_ip)
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
File
"/home/giorgis/EC2-GIT/ec2-api/ec2api/metadata/__init__.py",
line 263,
in _validate_signature
2017-03-19 17:04:16.690
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
HTTPForbidden:
Invalid proxy request signature.
2017-03-19 17:04:16.690 13635 ERROR ec2api.metadata
2017-03-19 17:04:16.691 13635 INFO ec2api.api [-]
0.1595s
10.140.6.181 GET /2009-04-04/meta-data/instance-id
None
500
[Python-httplib2/0.9.2 (gzip)] text/plain text/plain
2017-03-19 17:04:16.691 13635 INFO ec2api.wsgi.server
[-]
172.16.1.11,10.140.6.181 "GET
/2009-04-04/meta-data/instance-id
HTTP/1.1" status: 500 len: 229 time: 0.0022879
while in the Dashboard LOG I see:
checking MAILSCANNER WARNING: NUMERICAL LINKS ARE
OFTEN
MALICIOUS: MAILSCANNER WARNING: NUMERICAL LINKS ARE
OFTEN
MALICIOUS: MAILSCANNER WARNING: NUMERICAL LINKS ARE
OFTEN MALICIOUS:
http://169.254.169.254/2009-04-04/instance-id [5]
[7] [5]
failed 1/20: up 0.81. request failed
failed 2/20: up 3.05. request failed
failed 3/20: up 5.25. request failed
failed 4/20: up 7.27. request failed
failed 5/20: up 9.49. request failed
failed 6/20: up 11.51. request failed
failed 7/20: up 13.54. request failed
failed 8/20: up 15.92. request failed
failed 9/20: up 17.94. request failed
failed 10/20: up 20.36. request failed
failed 11/20: up 22.69. request failed
failed 12/20: up 24.72. request failed
failed 13/20: up 26.97. request failed
failed 14/20: up 29.00. request failed
failed 15/20: up 31.25. request failed
failed 16/20: up 33.57. request failed
failed 17/20: up 35.73. request failed
failed 18/20: up 38.00. request failed
failed 19/20: up 40.21. request failed
failed 20/20: up 42.54. request failed
failed to read iid from metadata. tried 20
no results found for mode=net. up 44.98. searched:
nocloud
configdrive ec2
failed to get instance-id of datasource
Could you please help??
Regards,
George
Hello,
I desperately need your help in order to set up
EC2-API
in Ocata.
I have installed and started the services but I am
not
sure how to
configure the endpoints since the manual is
refering to
ports as XXXX
and to version as Y.
I have guessed that these are XXXX=8788 and Y=2 but
without success.
When I am trying to check the configuration I am
getting
this:
# aws --endpoint-url http://controller:8788 [4] [4]
[1] ec2
describe-images
An error occurred (AuthFailure) when calling the
DescribeImages
operation: Not Found
I am 100% that the /root/.aws/config file has the
correct
credentials.
In the logs there aren't any information worthing
except
this:
2017-03-18 20:26:44.299 6717 INFO ec2api.api [-]
0.18514s
10.140.6.181 POST / None 404 [aws-cli/1.11.63
Python/2.7.5
Linux/3.10.0-514.10.2.el7.x86_64 botocore/1.5.26]
application/x-www-form-urlencoded text/xml
2017-03-18 20:26:44.300 6717 INFO
ec2api.wsgi.server [-]
10.140.6.181
"POST / HTTP/1.1" status: 404 len: 298 time:
0.0193572
I desperately looking for your help...So please
help!
Best regards,
George
_______________________________________________
Mailing list:
http://lists.openstack.org/cgi
-bin/mailman/listinfo/openstack
[8]
[9]
[4]
_______________________________________________
Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[8]
[10]
[6]
Post to : [email protected] [9] [7]
Unsubscribe :
nstack.org/cgi-bin/mailman/listinfo/openstack [10]"
class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[50]
[8]
_______________________________________________
Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listin [12]
Post to : [email protected] [11] [6] [13]
Unsubscribe :
ack.org/cgi-bin/mailman/listinfo/openstack [13]"
class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[14]
gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex"> [14]
_______________________________________________
Mailing list:
[email protected] [51] [11] [16]
Unsubscribe :
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[52]
[12]
[17]
_______________________________________________
Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstac g"
target="_blank" class="">[email protected] [14]
[19]
Unsubscribe :
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[18]
[15] [20]
_______________________________________________
Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[19]
[16] [22]
Post to : [email protected] [20] [17] [23]
Unsubscribe :
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[21]
[18] [24]
Links:
------
[1] http://controller:8788/ [22] [20]
[2]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[23]
[21]
[3] mailto:[email protected] [24] [22]
[4]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[25]
[23]
[5] MAILSCANNER WARNING: NUMERICAL LINKS ARE OFTEN MALICIOUS:
MAILSCANNER WARNING: NUMERICAL LINKS ARE OFTEN MALICIOUS:
http://169.254.169.254/2009-04-04/instance-id [26] [24]
[6]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[27]
[25]
[7] mailto:[email protected] [28] [26]
[8]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[29]
[27]
[9] http://controller:8788/ [30] [28]
[10] http://nefelus-controller:35357/v3/v3/ec2token [31] [29]
[11] http://controller:35357/v3 [32] [30]
[12]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[33]
[31]
[13] mailto:[email protected] [34] [32]
[14]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[35]
[33]
[15]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[36]
[34]
[16] mailto:[email protected] [37] [35]
[17]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[38]
[36]
[18]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[39]
[37]
[19] mailto:[email protected] [40] [38]
[20]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[41]
[39]
[21]
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[42]
[40]
[22]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[15]
[41]
[23] mailto:[email protected] [16] [42]
[24]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[17]
[43]
Links:
------
[1] http://controller:8788/ [43]
[2] http://nefelus-controller:35357/v3/v3/ec2token [44]
[3] http://controller:35357/v3 [45]
[4] http://controller:8788/ [46]
mailto:[email protected] [53]
[6] mailto:[email protected] [54]
[7] MAILSCANNER WARNING: NUMERICAL LINKS ARE OFTEN MALICIOUS:
http://169.254.169.254/2009-04-04/instance-id [55]
[8]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[56]
[9]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[57]
[10]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[58]
[11] http://lists [59]
info/openstack
tp://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[47]
[15]
Post to :
=""> [14] mailto:[email protected] [60]
[15]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[61]
[16]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[62]
[17] mailto:[email protected] [63]
[18]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[64]
[19]
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[65]
[20] http://controller:8788/ [66]
[21]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[67]
[22] mailto:[email protected] [68]
[23]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[69]
[24] MAILSCANNER WARNING: NUMERICAL LINKS ARE OFTEN MALICIOUS:
http://169.254.169.254/2009-04-04/instance-id [70]
[25]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[71]
[26] mailto:[email protected] [72]
[27]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[73]
[28] http://controller:8788/ [74]
[29] http://nefelus-controller:35357/v3/v3/ec2token [75]
[30] http://controller:35357/v3 [76]
[31]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[77]
[32] mailto:[email protected] [78]
[33]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[79]
[34]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[80]
[35] mailto:[email protected] [81]
[36]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[82]
[37]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[83]
[38] mailto:[email protected] [84]
[39]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[85]
[40]
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[86]
[41]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[87]
[42] mailto:[email protected] [88]
[43]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[89]
[44] mailto:[email protected] [90]
--
Kind regards,
Andrey Pavlov.
Links:
------
[1] http://controller:8788/
[2] http://nefelus-controller:35357/v3/v3/ec2token
[3] http://controller:35357/v3
[4] http://controller:8788/
[5] http://169.254.169.254/2009-04-04/instance-id
[6] mailto:[email protected]
[7] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[8] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[9] mailto:[email protected]
[10] http://nstack.org/cgi-bin/mailman/listinfo/openstack
[11] mailto:[email protected]
[12] http://lists.openstack.org/cgi-bin/mailman/listin
[13] http://ack.org/cgi-bin/mailman/listinfo/openstack
[14] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[15] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[16] mailto:[email protected]
[17] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[18] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[19] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[20] mailto:[email protected]
[21] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[22] http://controller:8788/
[23] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[24] mailto:[email protected]
[25] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[26] http://169.254.169.254/2009-04-04/instance-id
[27] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[28] mailto:[email protected]
[29] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[30] http://controller:8788/
[31] http://nefelus-controller:35357/v3/v3/ec2token
[32] http://controller:35357/v3
[33] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[34] mailto:[email protected]
[35] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[36] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[37] mailto:[email protected]
[38] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[39] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[40] mailto:[email protected]
[41] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[42]
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[43] http://controller:8788/
[44] http://nefelus-controller:35357/v3/v3/ec2token
[45] http://controller:35357/v3
[46] http://controller:8788/
[47] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[48] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[49]
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[50] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[51] mailto:[email protected]
[52] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[53] mailto:[email protected]
[54] mailto:[email protected]
[55] http://169.254.169.254/2009-04-04/instance-id
[56] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[57] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[58] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[59] http://lists/
[60] mailto:[email protected]
[61] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[62] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[63] mailto:[email protected]
[64] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[65]
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[66] http://controller:8788/
[67] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[68] mailto:[email protected]
[69] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[70] http://169.254.169.254/2009-04-04/instance-id
[71] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[72] mailto:[email protected]
[73] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[74] http://controller:8788/
[75] http://nefelus-controller:35357/v3/v3/ec2token
[76] http://controller:35357/v3
[77] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[78] mailto:[email protected]
[79] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[80] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[81] mailto:[email protected]
[82] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[83] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[84] mailto:[email protected]
[85] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[86]
http://lists.openstack.org/pipermail/openstack/2017-March/018972.html
[87] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[88] mailto:[email protected]
[89] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[90] mailto:[email protected]
[91] mailto:[email protected]
[92] mailto:[email protected]
--
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : [email protected]
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
