<div dir="ltr">Wondering, have you guys figured out this issue? I am seeing the same problem that Jiahao is getting. <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 4, 2016 at 9:53 AM, Adam Harwell <span dir="ltr"><<a href="mailto:adam.harwell@rackspace.com" target="_blank">adam.harwell@rackspace.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr" style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Could you provide your neutron-lbaas.conf? Depending on what version you're using, barbican may not be the default secret backend (I believe this has been fixed). Alternatively, it depends on what user accounts are involved -- this should definitely work
if you are using only the single admin account, but we haven't done a lot of testing around the ACLs yet to make sure they are working (and I believe there is still an outstanding bug in Barbican that would cause the ACLs to not function properly in our use-case).<br>
</p>
<p><br>
</p>
<p> --Adam<br>
</p>
<p><br>
</p>
<div style="color:rgb(33,33,33)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Jiahao Liang <<a href="mailto:jiahao.liang@oneconvergence.com" target="_blank">jiahao.liang@oneconvergence.com</a>><br>
<b>Sent:</b> Thursday, January 28, 2016 12:18 AM<br>
<b>To:</b> <a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a><br>
<b>Subject:</b> [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div><div><div class="h5">
<div>
<div dir="ltr"><span style="font-size:12.8px">Hi community,</span>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I was going through <a href="https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer" target="_blank">https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer</a> with devstack.
I was stuck at a point when I tried to create a listener within a loadbalancer with this command:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;padding:9.5px;font-family:Monaco,Menlo,Consolas,'Courier New',monospace;font-size:13px;color:rgb(51,51,51);margin-top:0px;margin-bottom:10px;line-height:20px;word-wrap:break-word;background-color:rgb(245,245,245)">neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container=$(barbican secret container list | awk '/ tls_container / {print $2}')</pre>
</div>
<div style="font-size:12.8px">But the command failed with output:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;padding:9.5px;margin-top:0px;margin-bottom:10px;word-wrap:break-word;background-color:rgb(245,245,245)"><font face="Monaco, Menlo, Consolas, Courier New, monospace" color="#333333"><span style="font-size:13px;line-height:20px">TLS container <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> could not be found<br></span></font></pre>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">When I run:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;font-size:13px;padding:9.5px;font-family:Monaco,Menlo,Consolas,'Courier New',monospace;color:rgb(51,51,51);margin-top:0px;margin-bottom:10px;line-height:20px;word-wrap:break-word;background-color:rgb(245,245,245)">barbican secret container list</pre>
</div>
<div style="font-size:12.8px">I was able to see the corresponding container in the list and the status is active.</div>
<div style="font-size:12.8px">(Sorry, the format is a little bit ugly.....)</div>
<div style="font-size:12.8px">
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| Container href | Name | Created | Status | Type | Secrets | Consumers |</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> | tls_container | 2016-01-28 04:58:42+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd" target="_blank">http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe" target="_blank">http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe</a> |
|</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee" target="_blank">http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee</a> | tls_container2 | 2016-01-28 04:59:05+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10" target="_blank">http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698" target="_blank">http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698</a> |
|</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Also, if I did a GET method from a RESTful client with correct X-Auth-Token to the url: <span style="font-size:13px;line-height:20px;white-space:pre-wrap;color:rgb(51,51,51);font-family:Monaco,Menlo,Consolas,'Courier New',monospace;background-color:rgb(245,245,245)"><a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3</a></span>,
I was able to receive the JSON information of the TLS container.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><br>
</div>
<div>Anybody could give some advice on how to fix this problem?</div>
<div><br>
</div>
<div>Thank you in advance! </div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Best,</div>
<div style="font-size:12.8px">Jiahao Liang</div>
</div>
</div>
</div></div></div>
</div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div>