Re: [Openstack] Horizon Keystone Nova miscommunication
reinstalled my environment this week and I have the same problem
I believe the error is in the horizon, as it only happens with
2013/2/17 Gabriel Hurley gabriel.hur...@nebula.com:
That particular “endpoint not found” log message is a red herring. It’s been
removed in keystoneclient trunk because it was logging an *expected* error.
There isn’t supposed to be a service catalog available at the point at which
it logged that message, and it lead to confusion just like this.
However, as for your actual problem, I’ve got a couple broad ideas:
Since you’re able to log in that means Keystone is working. And since you’re
not seeing any error messages indicating that the data couldn’t be retrieved
from Nova, that means Nova is working and is truly believes that the tenant
you’re requesting data for has no instances, etc.
What that sounds like to me is that you’re creating things in Nova with one
tenant, and then looking for them in Horizon with a different tenant. The
easiest way to check for that would be to log into horizon with a user who
has the “admin” role on a project, navigate to the Instances panel in the
Admin dashboard, and see if you can see the missing instances there. The
admin instances panel shows *all* running instances across all tenants, so
if the instances exist and Nova is returning data then they’ll show up
there.
The other (much less likely) possibility is that you somehow have two Nova
services running which are unaware of each other, and you’re managing to
talk to different ones via the client vs. Horizon. I have to think you’d
know if you were running two Nova’s, however.
The last option would be that Keystone’s service catalog is misconfigured
and you’re not actually communicating with Nova, but if that were the case
you should be seeing errors all over the place, so I find that highly
unlikely.
Hope something there helps.
- Gabriel
From: openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net
[mailto:openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net] On
Behalf Of Greg Chavez
Sent: Saturday, February 16, 2013 11:54 PM
To: openstack@lists.launchpad.net
Subject: [Openstack] Horizon Keystone Nova miscommunication
It seems that nova and horizon are not communicating on my controller node.
Acces and security objects created with nova are not seen by Horizon and
vice versa. This includes key pairs and secgroup rules. For example, if I
create a keypair with the nova client, it isn't visible in horizon, and if I
create one in horizon it is not visible via the nova client.
Possibly related: VMs that I create, whether via the nova client or Horizon,
are not shown with I run nova list. The nova-api.log shows a successful
servers-detail query, but it comes back empty.
Also possibly related: Although I have all my services and endpoints
configured correctly, I can't get individual endpoint detail with
endpoint-get. What's more, I see this error in Horizon's error log:
[Sun Feb 17 07:02:50 2013] [error] EndpointNotFound: Endpoint not found.
[Sun Feb 17 07:06:55 2013] [error] unable to retrieve service catalog with
token
This matches what I get when I run:
$ keystone endpoint-get --service nova
Endpoint not found.
But that can't be because endpoint-list shows all six endpoints I created
and all the information seems correct in the database:
mysql select * from endpoint where service_id
='9e40d355b49342f8ac6947c497df76d2'\G
*** 1. row ***
id: 922baafde75f4cffa7dbe7f57cddb951
region: RegionOne
service_id: 9e40d355b49342f8ac6947c497df76d2
extra: {adminurl: http://192.168.241.100:35357/v2.0;, internalurl:
http://192.168.241.100:5000/v2.0;, publicurl:
http://10.21.164.75:5000/v2.0}
1 row in set (0.00 sec)
mysql select * from service where id ='9e40d355b49342f8ac6947c497df76d2'\G
*** 1. row ***
id: 9e40d355b49342f8ac6947c497df76d2
type: identity
extra: {description: OpenStack Identity, name: keystone}
1 row in set (0.00 sec)
Please please please help me. My boss is giving my project the ax on Monday
if I can't get this to work.
--
\*..+.-
--Greg Chavez
+//..;};
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Horizon Keystone Nova miscommunication
That particular endpoint not found log message is a red herring. It's been
removed in keystoneclient trunk because it was logging an *expected* error.
There isn't supposed to be a service catalog available at the point at which it
logged that message, and it lead to confusion just like this.
However, as for your actual problem, I've got a couple broad ideas:
Since you're able to log in that means Keystone is working. And since you're
not seeing any error messages indicating that the data couldn't be retrieved
from Nova, that means Nova is working and is truly believes that the tenant
you're requesting data for has no instances, etc.
What that sounds like to me is that you're creating things in Nova with one
tenant, and then looking for them in Horizon with a different tenant. The
easiest way to check for that would be to log into horizon with a user who has
the admin role on a project, navigate to the Instances panel in the Admin
dashboard, and see if you can see the missing instances there. The admin
instances panel shows *all* running instances across all tenants, so if the
instances exist and Nova is returning data then they'll show up there.
The other (much less likely) possibility is that you somehow have two Nova
services running which are unaware of each other, and you're managing to talk
to different ones via the client vs. Horizon. I have to think you'd know if you
were running two Nova's, however.
The last option would be that Keystone's service catalog is misconfigured and
you're not actually communicating with Nova, but if that were the case you
should be seeing errors all over the place, so I find that highly unlikely.
Hope something there helps.
- Gabriel
From: openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net
[mailto:openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net] On
Behalf Of Greg Chavez
Sent: Saturday, February 16, 2013 11:54 PM
To: openstack@lists.launchpad.net
Subject: [Openstack] Horizon Keystone Nova miscommunication
It seems that nova and horizon are not communicating on my controller node.
Acces and security objects created with nova are not seen by Horizon and vice
versa. This includes key pairs and secgroup rules. For example, if I create a
keypair with the nova client, it isn't visible in horizon, and if I create one
in horizon it is not visible via the nova client.
Possibly related: VMs that I create, whether via the nova client or Horizon,
are not shown with I run nova list. The nova-api.log shows a successful
servers-detail query, but it comes back empty.
Also possibly related: Although I have all my services and endpoints configured
correctly, I can't get individual endpoint detail with endpoint-get. What's
more, I see this error in Horizon's error log:
[Sun Feb 17 07:02:50 2013] [error] EndpointNotFound: Endpoint not found.
[Sun Feb 17 07:06:55 2013] [error] unable to retrieve service catalog with token
This matches what I get when I run:
$ keystone endpoint-get --service nova
Endpoint not found.
But that can't be because endpoint-list shows all six endpoints I created and
all the information seems correct in the database:
mysql select * from endpoint where service_id
='9e40d355b49342f8ac6947c497df76d2'\G
*** 1. row ***
id: 922baafde75f4cffa7dbe7f57cddb951
region: RegionOne
service_id: 9e40d355b49342f8ac6947c497df76d2
extra: {adminurl: http://192.168.241.100:35357/v2.0;, internalurl:
http://192.168.241.100:5000/v2.0;, publicurl:
http://10.21.164.75:5000/v2.0}
1 row in set (0.00 sec)
mysql select * from service where id ='9e40d355b49342f8ac6947c497df76d2'\G
*** 1. row ***
id: 9e40d355b49342f8ac6947c497df76d2
type: identity
extra: {description: OpenStack Identity, name: keystone}
1 row in set (0.00 sec)
Please please please help me. My boss is giving my project the ax on Monday if
I can't get this to work.
--
\*..+.-
--Greg Chavez
+//..;};
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] Horizon Keystone Nova miscommunication
It seems that nova and horizon are not communicating on my controller node.
Acces and security objects created with nova are not seen by Horizon and
vice versa. This includes key pairs and secgroup rules. For example, if I
create a keypair with the nova client, it isn't visible in horizon, and if
I create one in horizon it is not visible via the nova client.
Possibly related: VMs that I create, whether via the nova client or
Horizon, are not shown with I run nova list. The nova-api.log shows a
successful servers-detail query, but it comes back empty.
Also possibly related: Although I have all my services and endpoints
configured correctly, I can't get individual endpoint detail with
endpoint-get. What's more, I see this error in Horizon's error log:
[Sun Feb 17 07:02:50 2013] [error] EndpointNotFound: Endpoint not found.
[Sun Feb 17 07:06:55 2013] [error] unable to retrieve service catalog with
token
This matches what I get when I run:
$ keystone endpoint-get --service nova
Endpoint not found.
But that can't be because endpoint-list shows all six endpoints I created
and all the information seems correct in the database:
mysql select * from endpoint where service_id
='9e40d355b49342f8ac6947c497df76d2'\G
*** 1. row ***
id: 922baafde75f4cffa7dbe7f57cddb951
region: RegionOne
service_id: 9e40d355b49342f8ac6947c497df76d2
extra: {adminurl: http://192.168.241.100:35357/v2.0;,
internalurl: http://192.168.241.100:5000/v2.0;, publicurl:
http://10.21.164.75:5000/v2.0}
1 row in set (0.00 sec)
mysql select * from service where id ='9e40d355b49342f8ac6947c497df76d2'\G
*** 1. row ***
id: 9e40d355b49342f8ac6947c497df76d2
type: identity
extra: {description: OpenStack Identity, name: keystone}
1 row in set (0.00 sec)
Please please please help me. My boss is giving my project the ax on
Monday if I can't get this to work.
--
\*..+.-
--Greg Chavez
+//..;};
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
