<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Could you provide your neutron-lbaas.conf? Depending on what version you're using, barbican may not be the default secret backend (I believe this has been fixed). Alternatively, it depends on what user accounts are involved -- this should definitely work
if you are using only the single admin account, but we haven't done a lot of testing around the ACLs yet to make sure they are working (and I believe there is still an outstanding bug in Barbican that would cause the ACLs to not function properly in our use-case).<br>
</p>
<p><br>
</p>
<p> --Adam<br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Jiahao Liang <jiahao.liang@oneconvergence.com><br>
<b>Sent:</b> Thursday, January 28, 2016 12:18 AM<br>
<b>To:</b> openstack-dev@lists.openstack.org<br>
<b>Subject:</b> [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div dir="ltr"><span style="font-size:12.8px">Hi community,</span>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I was going through <a href="https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer" target="_blank">https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer</a> with devstack.
I was stuck at a point when I tried to create a listener within a loadbalancer with this command:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap; padding:9.5px; font-family:Monaco,Menlo,Consolas,'Courier New',monospace; font-size:13px; color:rgb(51,51,51); margin-top:0px; margin-bottom:10px; line-height:20px; word-wrap:break-word; background-color:rgb(245,245,245)">neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container=$(barbican secret container list | awk '/ tls_container / {print $2}')</pre>
</div>
<div style="font-size:12.8px">But the command failed with output:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap; padding:9.5px; margin-top:0px; margin-bottom:10px; word-wrap:break-word; background-color:rgb(245,245,245)"><font color="#333333" face="Monaco, Menlo, Consolas, Courier New, monospace"><span style="font-size:13px; line-height:20px">TLS container <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> could not be found<br></span></font></pre>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">When I run:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap; font-size:13px; padding:9.5px; font-family:Monaco,Menlo,Consolas,'Courier New',monospace; color:rgb(51,51,51); margin-top:0px; margin-bottom:10px; line-height:20px; word-wrap:break-word; background-color:rgb(245,245,245)">barbican secret container list</pre>
</div>
<div style="font-size:12.8px">I was able to see the corresponding container in the list and the status is active.</div>
<div style="font-size:12.8px">(Sorry, the format is a little bit ugly.....)</div>
<div style="font-size:12.8px">
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| Container href | Name | Created | Status | Type | Secrets | Consumers |</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> | tls_container | 2016-01-28 04:58:42+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd" target="_blank">http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe" target="_blank">http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe</a> |
|</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee" target="_blank">http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee</a> | tls_container2 | 2016-01-28 04:59:05+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10" target="_blank">http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698" target="_blank">http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698</a> |
|</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Also, if I did a GET method from a RESTful client with correct X-Auth-Token to the url: <span style="font-size:13px; line-height:20px; white-space:pre-wrap; color:rgb(51,51,51); font-family:Monaco,Menlo,Consolas,'Courier New',monospace; background-color:rgb(245,245,245)"><a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3</a></span>,
I was able to receive the JSON information of the TLS container.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><br>
</div>
<div>Anybody could give some advice on how to fix this problem?</div>
<div><br>
</div>
<div>Thank you in advance! </div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Best,</div>
<div style="font-size:12.8px">Jiahao Liang</div>
</div>
</div>
</div>
</body>
</html>