Re: [openstack-dev] [ocata] [nova-api] Nova api stopped working after a yum update

2017-09-29 Thread Avery Rozar 
So I was able to get things working, I added the following config options
to all configs requiring [keystone_authtoken]:

I added '/v3' to:

auth_uri = https://host.domain.com:5000
auth_url = https://host.domain.com:35357

and then had to add:

cafile = /etc/pki/tls/certs/gd_bundle-g2-g1.crt

After these changes it's working again.

Thanks,
Avery

On Fri, Sep 29, 2017 at 9:49 AM, Ben Nemec  wrote:

> You may want to ask this on rdo-list, assuming RDO is where you got your
> packages: https://www.redhat.com/mailman/listinfo/rdo-list
>
> Generally speaking, a minor update like that should not bring in any new
> required configuration options.
>
> On 09/27/2017 04:51 AM, Avery Rozar wrote:
>
>> Hello all,
>> I ran "yum update" on my OpenStack controller and now any request to the
>> nova.api service (port 8774) results in an error in
>> "/var/log/nova/nova-api.log".
>>
>> A simple get request,
>>
>> GET /v2.1/os-hypervisors/detail HTTP/1.1
>> Host: host.domain.com <http://host.domain.com/>:8774
>>
>> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0)
>> Gecko/20100101 Firefox/54.0
>> X-Auth-Token: 
>> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
>> Accept-Language: en-US,en;q=0.5
>> Content-Type: application/json
>> Content-Length: 0
>> DNT: 1
>> Connection: close
>> Upgrade-Insecure-Requests: 1
>>
>>
>> Results in and error logged to "/var/log/nova/nova-api.log
>>
>> WARNING keystoneauth.identity.generic.base [-] Discovering versions from
>> the identity service failed when creating the password plugin. Attempting
>> to determine version from URL.
>> ERROR nova.api.openstack [-] Caught error: Could not determine a suitable
>> URL for the plugin
>> ERROR nova.api.openstack Traceback (most recent call last):
>> ERROR nova.api.openstack   File "/usr/lib/python2.7/site-packa
>> ges/nova/api/openstack/__init__.py", line 88, in __call__
>> ERROR nova.api.openstack return req.get_response(self.application)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/request.py",
>> line 1299, in send
>> ERROR nova.api.openstack application, catch_exc_info=False)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/request.py",
>> line 1263, in call_application
>> ERROR nova.api.openstack app_iter = application(self.environ,
>> start_response)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/dec.py",
>> line 144, in __call__
>> ERROR nova.api.openstack return resp(environ, start_response)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/dec.py",
>> line 130, in __call__
>> ERROR nova.api.openstack resp = self.call_func(req, *args,
>> **self.kwargs)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/dec.py",
>> line 195, in call_func
>> ERROR nova.api.openstack return self.func(req, *args, **kwargs)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/osprofiler/web.py",
>> line 108, in __call__
>> ERROR nova.api.openstack return request.get_response(self.appl
>> ication)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/request.py",
>> line 1299, in send
>> ERROR nova.api.openstack application, catch_exc_info=False)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/request.py",
>> line 1263, in call_application
>> ERROR nova.api.openstack app_iter = application(self.environ,
>> start_response)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/dec.py",
>> line 130, in __call__
>> ERROR nova.api.openstack resp = self.call_func(req, *args,
>> **self.kwargs)
>> ERROR nova.api.openstack   File 
>> "/usr/lib/python2.7/site-packages/webob/dec.py",
>> line 195, in call_func
>> ERROR nova.api.openstack return self.func(req, *args, **kwargs)
>> ERROR nova.api.openstack   File "/usr/lib/python2.7/site-packa
>> ges/keystonemiddleware/auth_token/__init__.py", line 332, in __call__
>> ERROR nova.api.openstack response = self.process_request(req)
>> ERROR nova.api.openstack   File "/usr/lib/python2.7/site-packa
>> ges/keystonemiddleware/auth_token/__init__.py", line 623, in
>> process_request
>>

[openstack-dev] [ocata] [nova-api] Nova api stopped working after a yum update

2017-09-27 Thread Avery Rozar 
Hello all,
I ran "yum update" on my OpenStack controller and now any request to the
nova.api service (port 8774) results in an error in
"/var/log/nova/nova-api.log".

A simple get request,

GET /v2.1/os-hypervisors/detail HTTP/1.1
Host: host.domain.com:8774
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0)
Gecko/20100101 Firefox/54.0
X-Auth-Token: 
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Content-Type: application/json
Content-Length: 0
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1


Results in and error logged to "/var/log/nova/nova-api.log

WARNING keystoneauth.identity.generic.base [-] Discovering versions from
the identity service failed when creating the password plugin. Attempting
to determine version from URL.
ERROR nova.api.openstack [-] Caught error: Could not determine a suitable
URL for the plugin
ERROR nova.api.openstack Traceback (most recent call last):
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/nova/api/openstack/__init__.py", line 88, in __call__
ERROR nova.api.openstack return req.get_response(self.application)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/request.py",
line 1299, in send
ERROR nova.api.openstack application, catch_exc_info=False)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/request.py",
line 1263, in call_application
ERROR nova.api.openstack app_iter = application(self.environ,
start_response)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/dec.py",
line 144, in __call__
ERROR nova.api.openstack return resp(environ, start_response)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/dec.py",
line 130, in __call__
ERROR nova.api.openstack resp = self.call_func(req, *args,
**self.kwargs)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/dec.py",
line 195, in call_func
ERROR nova.api.openstack return self.func(req, *args, **kwargs)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/osprofiler/web.py",
line 108, in __call__
ERROR nova.api.openstack return request.get_response(self.application)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/request.py",
line 1299, in send
ERROR nova.api.openstack application, catch_exc_info=False)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/request.py",
line 1263, in call_application
ERROR nova.api.openstack app_iter = application(self.environ,
start_response)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/dec.py",
line 130, in __call__
ERROR nova.api.openstack resp = self.call_func(req, *args,
**self.kwargs)
ERROR nova.api.openstack   File
"/usr/lib/python2.7/site-packages/webob/dec.py",
line 195, in call_func
ERROR nova.api.openstack return self.func(req, *args, **kwargs)
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/__init__.py", line 332, in __call__
ERROR nova.api.openstack response = self.process_request(req)
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/__init__.py", line 623, in
process_request
ERROR nova.api.openstack resp = super(AuthProtocol,
self).process_request(request)
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/__init__.py", line 405, in
process_request
ERROR nova.api.openstack allow_expired=allow_expired)
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/__init__.py", line 435, in
_do_fetch_token
ERROR nova.api.openstack data = self.fetch_token(token, **kwargs)
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/__init__.py", line 762, in
fetch_token
ERROR nova.api.openstack allow_expired=allow_expired)
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/_identity.py", line 217, in
verify_token
ERROR nova.api.openstack auth_ref = self._request_strategy.verify_token(
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/_identity.py", line 168, in
_request_strategy
ERROR nova.api.openstack strategy_class = self._get_strategy_class()
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystonemiddleware/auth_token/_identity.py", line 190, in
_get_strategy_class
ERROR nova.api.openstack if self._adapter.get_endpoint(
version=klass.AUTH_VERSION):
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystoneauth1/adapter.py", line 176, in get_endpoint
ERROR nova.api.openstack return self.session.get_endpoint(auth or
self.auth, **kwargs)
ERROR nova.api.openstack   File "/usr/lib/python2.7/site-
packages/keystoneauth1/session.py", line 856, in get_endpoint
ERROR nova.ap

[openstack-dev] Is it possible to configure ssl options for glance-api?

2017-06-22 Thread Avery Rozar 
It does not appear that the glance-api.conf file has any SSL or WSGI
options. I'd like to disable sslv2, and tls1/tls1.1 but the options do not
appear to be available. Is this something that can be done?

Thanks
Avery
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev