<div dir="ltr">As Adam stated, it could be any of those reasons. Mainly look for the credentials defined under [service_auth] section of lbaas conf file. Most importantly the credentials, tenant (or project) name should be the same as the user that created the container. This is assuming you aren't using ACLs'.</div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Feb 29, 2016 at 2:07 PM, Phillip Toohill <span dir="ltr"><<a href="mailto:phillip.toohill@rackspace.com" target="_blank">phillip.toohill@rackspace.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Is the create LB happening on a different user than the one that created the barbican container? Maybe im not looking at it right, but cant tell from this. </p><span class="">
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin:0px;padding:0px;border:0px;font-family:Arial,sans-serif;font-size:10px;line-height:10px;vertical-align:top;outline:none;max-width:100%;text-align:right;color:rgb(102,102,102)" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
</span><div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Madhusudhan Kandadai <<a href="mailto:madhusudhan.openstack@gmail.com" target="_blank">madhusudhan.openstack@gmail.com</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:47 PM<div><div class="h5"><br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</div></div></font>
<div> </div>
</div><div><div class="h5">
<div>
<div dir="ltr">Is what I can see the error logs in barbican svc screen while I create TLS listener like this:
<a href="http://paste.openstack.org/show/xVl9iuJtGW03fCGetDm3/" target="_blank">http://paste.openstack.org/show/xVl9iuJtGW03fCGetDm3/</a><br>
<br>
2016-02-29 13:42:55.222 INFO barbican.api.middleware.context [req-65fd0f08-4c1e-4b2f-9cbd-64f186365077 afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Processed request: 404 Not Found - POST
<a href="http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/" target="_blank">
http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/</a><br>
{address space usage: 220770304 bytes/210MB} {rss usage: 101371904 bytes/96MB} [pid: 52558|app: 0|req: 75/75] 192.168.109.129 () {34 vars in 598 bytes} [Mon Feb 29 13:42:55 2016] POST /v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/ => generated
111 bytes in 214 msecs (HTTP/1.1 404) 4 headers in 179 bytes (1 switches on core 0)<br>
2016-02-29 13:43:17.397 ERROR barbican.model.repositories [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Not found for d96dccd5-0d39-4f67-ba3a-366a84cfd371<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories Traceback (most recent call last):<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories File "/opt/stack/barbican/barbican/model/repositories.py", line 354, in get<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories entity = query.one()<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/orm/query.py", line 2699, in one<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories raise orm_exc.NoResultFound("No row was found for one()")<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories NoResultFound: No row was found for one()<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories <br>
2016-02-29 13:43:17.398 ERROR barbican.api.controllers [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Webob error seen<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers Traceback (most recent call last):<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 104, in handler<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 90, in enforcer<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 146, in content_types_enforcer<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 143, in on_post<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers controllers.containers.container_not_found()<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/containers.py", line 36, in container_not_found<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers pecan.abort(404, u._('Not Found. Sorry but your container is in '<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/usr/local/lib/python2.7/dist-packages/pecan/core.py", line 141, in abort<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers exec('raise webob_exception, None, traceback')<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 141, in on_post<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers external_project_id)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/model/repositories.py", line 360, in get<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers _raise_entity_not_found(self._do_entity_name(), entity_id)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/model/repositories.py", line 2173, in _raise_entity_not_found<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers id=entity_id))<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers HTTPNotFound: Not Found. Sorry but your container is in another castle.<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers <br>
2016-02-29 13:43:17.403 INFO barbican.api.middleware.context [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Processed request: 404 Not Found - POST
<a href="http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/" target="_blank">
http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/</a><br>
{address space usage: 220770304 bytes/210MB} {rss usage: 101371904 bytes/96MB} [pid: 52558|app: 0|req: 76/76] 192.168.109.129 () {34 vars in 598 bytes} [Mon Feb 29 13:43:17 2016] POST /v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/ => generated
111 bytes in 63 msecs (HTTP/1.1 404) 4 headers in 179 bytes (1 switches on core 0)<br>
<br>
<br>
<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Feb 29, 2016 at 1:40 PM, Phillip Toohill <span dir="ltr">
<<a href="mailto:phillip.toohill@rackspace.com" target="_blank">phillip.toohill@rackspace.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>To further my thoughts, as Adam mentioned, it could be a user issue, which to me is what it sounds like. So being able to view the config and have other information is pertinent to solving the issue. </p>
<span>
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin:0px;padding:0px;border:0px;font-family:Arial,sans-serif;font-size:10px;line-height:10px;vertical-align:top;outline:none;max-width:100%;text-align:right;color:rgb(102,102,102)" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
</span>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Phillip Toohill <<a href="mailto:phillip.toohill@RACKSPACE.COM" target="_blank">phillip.toohill@RACKSPACE.COM</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:33 PM
<div>
<div><br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</div>
</div>
</font>
<div> </div>
</div>
<div>
<div>
<div>
<div style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>We could use some more information. </p>
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin:0px;padding:0px;border:0px;font-family:Arial,sans-serif;font-size:10px;line-height:10px;vertical-align:top;outline:none;max-width:100%;text-align:right;color:rgb(102,102,102)" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Madhusudhan Kandadai <<a href="mailto:madhusudhan.openstack@gmail.com" target="_blank">madhusudhan.openstack@gmail.com</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:21 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div dir="ltr">Wondering, have you guys figured out this issue? I am seeing the same problem that Jiahao is getting.
<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Feb 4, 2016 at 9:53 AM, Adam Harwell <span dir="ltr">
<<a href="mailto:adam.harwell@rackspace.com" target="_blank">adam.harwell@rackspace.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr" style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Could you provide your neutron-lbaas.conf? Depending on what version you're using, barbican may not be the default secret backend (I believe this has been fixed). Alternatively, it depends on what user accounts are involved -- this should definitely work
if you are using only the single admin account, but we haven't done a lot of testing around the ACLs yet to make sure they are working (and I believe there is still an outstanding bug in Barbican that would cause the ACLs to not function properly in our use-case).<br>
</p>
<p><br>
</p>
<p> --Adam<br>
</p>
<p><br>
</p>
<div style="color:rgb(33,33,33)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Jiahao Liang <<a href="mailto:jiahao.liang@oneconvergence.com" target="_blank">jiahao.liang@oneconvergence.com</a>><br>
<b>Sent:</b> Thursday, January 28, 2016 12:18 AM<br>
<b>To:</b> <a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a><br>
<b>Subject:</b> [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div>
<div>
<div dir="ltr"><span style="font-size:12.8px">Hi community,</span>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I was going through <a href="https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer" target="_blank">https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer</a> with devstack.
I was stuck at a point when I tried to create a listener within a loadbalancer with this command:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;padding:9.5px;font-family:Monaco,Menlo,Consolas,'Courier New',monospace;font-size:13px;color:rgb(51,51,51);margin-top:0px;margin-bottom:10px;line-height:20px;word-wrap:break-word;background-color:rgb(245,245,245)">neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container=$(barbican secret container list | awk '/ tls_container / {print $2}')</pre>
</div>
<div style="font-size:12.8px">But the command failed with output:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;padding:9.5px;margin-top:0px;margin-bottom:10px;word-wrap:break-word;background-color:rgb(245,245,245)"><font face="Monaco, Menlo, Consolas, Courier New, monospace" color="#333333"><span style="font-size:13px;line-height:20px">TLS container <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> could not be found<br></span></font></pre>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">When I run:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;font-size:13px;padding:9.5px;font-family:Monaco,Menlo,Consolas,'Courier New',monospace;color:rgb(51,51,51);margin-top:0px;margin-bottom:10px;line-height:20px;word-wrap:break-word;background-color:rgb(245,245,245)">barbican secret container list</pre>
</div>
<div style="font-size:12.8px">I was able to see the corresponding container in the list and the status is active.</div>
<div style="font-size:12.8px">(Sorry, the format is a little bit ugly.....)</div>
<div style="font-size:12.8px">
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| Container href | Name | Created | Status | Type | Secrets | Consumers |</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> | tls_container | 2016-01-28 04:58:42+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd" target="_blank">http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe" target="_blank">http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe</a> |
|</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee" target="_blank">http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee</a> | tls_container2 | 2016-01-28 04:59:05+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10" target="_blank">http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698" target="_blank">http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698</a> |
|</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Also, if I did a GET method from a RESTful client with correct X-Auth-Token to the url: <span style="font-size:13px;line-height:20px;white-space:pre-wrap;color:rgb(51,51,51);font-family:Monaco,Menlo,Consolas,'Courier New',monospace;background-color:rgb(245,245,245)"><a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3</a></span>,
I was able to receive the JSON information of the TLS container.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><br>
</div>
<div>Anybody could give some advice on how to fix this problem?</div>
<div><br>
</div>
<div>Thank you in advance! </div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Best,</div>
<div style="font-size:12.8px">Jiahao Liang</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div></div></div>
</div>
</div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div>