<div dir="ltr">So I was able to get things working, I added the following config options to all configs requiring [keystone_authtoken]:<br><br>I added '/v3' to:<br><br>auth_uri = <a href="https://host.domain.com:5000">https://host.domain.com:5000</a><br>auth_url = <a href="https://host.domain.com:35357">https://host.domain.com:35357</a><br><br>and then had to add:<br><br>cafile = /etc/pki/tls/certs/gd_bundle-g2-g1.crt<br><br>After these changes it's working again.<br><br>Thanks,<br>Avery<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Sep 29, 2017 at 9:49 AM, Ben Nemec <span dir="ltr"><<a href="mailto:openstack@nemebean.com" target="_blank">openstack@nemebean.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">You may want to ask this on rdo-list, assuming RDO is where you got your packages: <a href="https://www.redhat.com/mailman/listinfo/rdo-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman<wbr>/listinfo/rdo-list</a><br>
<br>
Generally speaking, a minor update like that should not bring in any new required configuration options.<span class=""><br>
<br>
On 09/27/2017 04:51 AM, Avery Rozar wrote:<br>
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
Hello all,<br>
I ran "yum update" on my OpenStack controller and now any request to the nova.api service (port 8774) results in an error in "/var/log/nova/nova-api.log".<br>
<br>
A simple get request,<br>
<br>
GET /v2.1/os-hypervisors/detail HTTP/1.1<br></span>
Host: <a href="http://host.domain.com" rel="noreferrer" target="_blank">host.domain.com</a> <<a href="http://host.domain.com/" rel="noreferrer" target="_blank">http://host.domain.com/</a>>:8774<div><div class="h5"><br>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0) Gecko/20100101 Firefox/54.0<br>
X-Auth-Token: XXXXXXXXXXXX<br>
Accept: text/html,application/xhtml+xm<wbr>l,application/xml;q=0.9,*/*;q=<wbr>0.8<br>
Accept-Language: en-US,en;q=0.5<br>
Content-Type: application/json<br>
Content-Length: 0<br>
DNT: 1<br>
Connection: close<br>
Upgrade-Insecure-Requests: 1<br>
<br>
<br>
Results in and error logged to "/var/log/nova/nova-api.log<br>
<br>
WARNING keystoneauth.identity.generic.<wbr>base [-] Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.<br>
ERROR nova.api.openstack [-] Caught error: Could not determine a suitable URL for the plugin<br>
ERROR nova.api.openstack Traceback (most recent call last):<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/nova/api/openstack/__init_<wbr>_.py", line 88, in __call__<br>
ERROR nova.api.openstack return req.get_response(self.applicat<wbr>ion)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/request.py", line 1299, in send<br>
ERROR nova.api.openstack application, catch_exc_info=False)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/request.py", line 1263, in call_application<br>
ERROR nova.api.openstack app_iter = application(self.environ, start_response)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/dec.py", line 144, in __call__<br>
ERROR nova.api.openstack return resp(environ, start_response)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/dec.py", line 130, in __call__<br>
ERROR nova.api.openstack resp = self.call_func(req, *args, **self.kwargs)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/dec.py", line 195, in call_func<br>
ERROR nova.api.openstack return self.func(req, *args, **kwargs)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/osprofiler/web.py", line 108, in __call__<br>
ERROR nova.api.openstack return request.get_response(self.appl<wbr>ication)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/request.py", line 1299, in send<br>
ERROR nova.api.openstack application, catch_exc_info=False)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/request.py", line 1263, in call_application<br>
ERROR nova.api.openstack app_iter = application(self.environ, start_response)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/dec.py", line 130, in __call__<br>
ERROR nova.api.openstack resp = self.call_func(req, *args, **self.kwargs)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/webob/dec.py", line 195, in call_func<br>
ERROR nova.api.openstack return self.func(req, *args, **kwargs)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/__init__.py", line 332, in __call__<br>
ERROR nova.api.openstack response = self.process_request(req)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/__init__.py", line 623, in process_request<br>
ERROR nova.api.openstack resp = super(AuthProtocol, self).process_request(request)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/__init__.py", line 405, in process_request<br>
ERROR nova.api.openstack allow_expired=allow_expired)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/__init__.py", line 435, in _do_fetch_token<br>
ERROR nova.api.openstack data = self.fetch_token(token, **kwargs)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/__init__.py", line 762, in fetch_token<br>
ERROR nova.api.openstack allow_expired=allow_expired)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/_identity.py", line 217, in verify_token<br>
ERROR nova.api.openstack auth_ref = self._request_strategy.verify_<wbr>token(<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/_identity.py", line 168, in _request_strategy<br>
ERROR nova.api.openstack strategy_class = self._get_strategy_class()<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystonemiddleware/auth_<wbr>token/_identity.py", line 190, in _get_strategy_class<br>
ERROR nova.api.openstack if self._adapter.get_endpoint(ver<wbr>sion=klass.AUTH_VERSION):<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystoneauth1/adapter.py", line 176, in get_endpoint<br>
ERROR nova.api.openstack return self.session.get_endpoint(auth or self.auth, **kwargs)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystoneauth1/session.py", line 856, in get_endpoint<br>
ERROR nova.api.openstack return auth.get_endpoint(self, **kwargs)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystoneauth1/identity/<wbr>base.py", line 212, in get_endpoint<br>
ERROR nova.api.openstack service_catalog = self.get_access(session).servi<wbr>ce_catalog<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystoneauth1/identity/<wbr>base.py", line 136, in get_access<br>
ERROR nova.api.openstack self.auth_ref = self.get_auth_ref(session)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystoneauth1/identity/<wbr>generic/base.py", line 196, in get_auth_ref<br>
ERROR nova.api.openstack self._plugin = self._do_create_plugin(session<wbr>)<br>
ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa<wbr>ges/keystoneauth1/identity/<wbr>generic/base.py", line 191, in _do_create_plugin<br>
ERROR nova.api.openstack raise exceptions.DiscoveryFailure('C<wbr>ould not determine a suitable URL '<br>
ERROR nova.api.openstack DiscoveryFailure: Could not determine a suitable URL for the plugin<br>
ERROR nova.api.openstack<br>
<br></div></div>
All nova requests seem to result in a smiler error. Am I possibly missing a "new" configuration option in nova.conf or <a href="http://api-paste.in" rel="noreferrer" target="_blank">api-paste.in</a> <<a href="http://api-paste.in/" rel="noreferrer" target="_blank">http://api-paste.in/</a>>?<div><div class="h5"><br>
<br>
Here is a list of packages that where updated via yum update.<br>
<br>
---> Package openstack-cinder.noarch 1:10.0.1-1.el7 will be updated<br>
---> Package openstack-cinder.noarch 1:10.0.5-1.el7 will be an update<br>
---> Package openstack-dashboard.noarch 1:11.0.1-2.el7 will be updated<br>
---> Package openstack-dashboard.noarch 1:11.0.3-1.el7 will be an update<br>
---> Package openstack-heat-api.noarch 1:8.0.1-1.el7 will be updated<br>
---> Package openstack-heat-api.noarch 1:8.0.4-1.el7 will be an update<br>
---> Package openstack-heat-api-cfn.noarch 1:8.0.1-1.el7 will be updated<br>
---> Package openstack-heat-api-cfn.noarch 1:8.0.4-1.el7 will be an update<br>
---> Package openstack-heat-common.noarch 1:8.0.1-1.el7 will be updated<br>
---> Package openstack-heat-common.noarch 1:8.0.4-1.el7 will be an update<br>
---> Package openstack-heat-engine.noarch 1:8.0.1-1.el7 will be updated<br>
---> Package openstack-heat-engine.noarch 1:8.0.4-1.el7 will be an update<br>
---> Package openstack-keystone.noarch 1:11.0.0-1.el7 will be updated<br>
---> Package openstack-keystone.noarch 1:11.0.3-1.el7 will be an update<br>
---> Package openstack-magnum-api.noarch 0:4.1.0-2.el7 will be updated<br>
---> Package openstack-magnum-api.noarch 0:4.1.3-1.el7 will be an update<br>
---> Package openstack-magnum-common.noarch 0:4.1.0-2.el7 will be updated<br>
---> Package openstack-magnum-common.noarch 0:4.1.3-1.el7 will be an update<br>
---> Package openstack-magnum-conductor.noa<wbr>rch 0:4.1.0-2.el7 will be updated<br>
---> Package openstack-magnum-conductor.noa<wbr>rch 0:4.1.3-1.el7 will be an update<br>
---> Package openstack-neutron.noarch 1:10.0.1-1.el7 will be updated<br>
---> Package openstack-neutron.noarch 1:10.0.3-1.el7 will be an update<br>
---> Package openstack-neutron-common.noarc<wbr>h 1:10.0.1-1.el7 will be updated<br>
---> Package openstack-neutron-common.noarc<wbr>h 1:10.0.3-1.el7 will be an update<br>
---> Package openstack-neutron-fwaas.noarch 1:10.0.1-1.el7 will be updated<br>
---> Package openstack-neutron-fwaas.noarch 1:10.1.0-1.el7 will be an update<br>
---> Package openstack-neutron-ml2.noarch 1:10.0.1-1.el7 will be updated<br>
---> Package openstack-neutron-ml2.noarch 1:10.0.3-1.el7 will be an update<br>
---> Package openstack-neutron-openvswitch.<wbr>noarch 1:10.0.1-1.el7 will be updated<br>
---> Package openstack-neutron-openvswitch.<wbr>noarch 1:10.0.3-1.el7 will be an update<br>
---> Package openstack-nova-api.noarch 1:15.0.3-2.el7 will be updated<br>
---> Package openstack-nova-api.noarch 1:15.0.7-1.el7 will be an update<br>
---> Package openstack-nova-common.noarch 1:15.0.3-2.el7 will be updated<br>
---> Package openstack-nova-common.noarch 1:15.0.7-1.el7 will be an update<br>
---> Package openstack-nova-conductor.noarc<wbr>h 1:15.0.3-2.el7 will be updated<br>
---> Package openstack-nova-conductor.noarc<wbr>h 1:15.0.7-1.el7 will be an update<br>
---> Package openstack-nova-console.noarch 1:15.0.3-2.el7 will be updated<br>
---> Package openstack-nova-console.noarch 1:15.0.7-1.el7 will be an update<br>
---> Package openstack-nova-novncproxy.noar<wbr>ch 1:15.0.3-2.el7 will be updated<br>
---> Package openstack-nova-novncproxy.noar<wbr>ch 1:15.0.7-1.el7 will be an update<br>
---> Package openstack-nova-placement-api.n<wbr>oarch 1:15.0.3-2.el7 will be updated<br>
---> Package openstack-nova-placement-api.n<wbr>oarch 1:15.0.7-1.el7 will be an update<br>
---> Package openstack-nova-scheduler.noarc<wbr>h 1:15.0.3-2.el7 will be updated<br>
---> Package openstack-nova-scheduler.noarc<wbr>h 1:15.0.7-1.el7 will be an update<br>
---> Package openstack-selinux.noarch 0:0.7.13-2.el7 will be updated<br>
---> Package openstack-selinux.noarch 0:0.8.7-1.el7 will be an update<br>
<br>
Thanks,<br>
Avery<br>
<br>
<br></div></div>
______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
<br>
</blockquote>
</blockquote></div><br></div>