<div dir="auto"><div><br><div class="gmail_extra"><br><div class="gmail_quote">On 6 Dec 2017 16:58, "Moshe Levi" <<a href="mailto:moshele@mellanox.com">moshele@mellanox.com</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">





<div lang="EN-US" link="blue" vlink="purple">
<div class="m_2804688370085286069WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I have the access to 10.0.0.0 network<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I remove the
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">-e /home/stack/enable-tls.yaml -e ~/heat-templates/environments/<wbr>tls-endpoints-public-ip.yaml -e /home/stack/inject-trust-<wbr>anchor.yaml <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Form the ./overcloud-deploy.sh and now it working</span></p></div></div></blockquote></div></div></div><div dir="auto">The issue you posted wasn't a TLS issue, but it might be that it was being hidden by nova. You could truly to access keystone directly and that will be more revealing.</div><div dir="auto"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div class="m_2804688370085286069WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">My /home/stack/enable-tls.yaml and /home/stack/inject-trust-<wbr>anchor.yaml  were taken from
<u></u><u></u></span></p>
<p style="margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;background:white">
<span style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">wget <a href="https://raw.githubusercontent.com/openstack-infra/tripleo-ci/master/test-environments/enable-tls.yaml" target="_blank"><span style="color:#0c68c3;text-decoration:none">https://raw.<wbr>githubusercontent.com/<wbr>openstack-infra/tripleo-ci/<wbr>master/test-environments/<wbr>enable-tls.yaml</span></a><u></u><u></u></span></p>
<p style="margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333">wget <a href="https://raw.githubusercontent.com/openstack-infra/tripleo-ci/master/test-environments/inject-trust-anchor.yaml" target="_blank"><span style="color:#0c68c3;text-decoration:none">https://raw.<wbr>githubusercontent.com/<wbr>openstack-infra/tripleo-ci/<wbr>master/test-environments/<wbr>inject-trust-anchor.yaml</span></a></span></p></div></div></blockquote></div></div></div><div dir="auto">This will only work if you use the exact same fixed IP as we use in CI. So i don't recommend using that. Rather generate your own certs or tell quickstart to do it for you by using the appropriate flag. </div><div dir="auto"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div class="m_2804688370085286069WordSection1"><p style="margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px"><span style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#333333"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">So maybe the is an issue with tripleo or just these config files
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Juan Antonio Osorio [mailto:<a href="mailto:jaosorior@gmail.com" target="_blank">jaosorior@gmail.com</a>]
<br>
<b>Sent:</b> Wednesday, December 6, 2017 12:36 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions) <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.<wbr>openstack.org</a>><br>
<b>Subject:</b> Re: [openstack-dev] [tripleo] overcloud keystone error "Could not determine a suitable URL for the plugin"<u></u><u></u></span></p>
</div>
</div><div class="elided-text">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">From the node you're running the nova command, do you have access to the 10.0.0.0 network (external)?<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">In virtual environments, quickstart will leave an overcloud-prep-network.sh script that will create a vlan interface that gives the undercloud access to that network. So, if it's a virtual environment and you're running that command from
 the undercloud (which from the log you sent it seems that's the case) you need to run that. Note that you need to run that every time you update your undercloud.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">BR<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On 6 Dec 2017 09:06, "Moshe Levi" <<a href="mailto:moshele@mellanox.com" target="_blank">moshele@mellanox.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal">Hi all,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">We deploy tripleo master using quickstart.
<u></u><u></u></p>
<p class="MsoNormal">We this delorean repo:<u></u><u></u></p>
<p class="MsoNormal">name=delorean<u></u><u></u></p>
<p class="MsoNormal">baseurl=<a href="https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftrunk.rdoproject.org%2Fcentos7-master%2Fac%2F82%2Fac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=R6s6CvAGGAB97GYgCsCsT%2BxU0PQ1fZ89xAuUQFM5tL8%3D&reserved=0" target="_blank">https://trunk.<wbr>rdoproject.org/centos7-master/<wbr>ac/82/<wbr>ac82ea9271a4ae3860528eaf8a813d<wbr>a7209e62a6_28eeb6c7/</a><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">The undercloud and overcloud deployment were successfully, but we I try to run command on the overcloud
<u></u><u></u></p>
<p class="MsoNormal">I am getting the  keystone error "Could not determine a suitable URL for the plugin"<u></u><u></u></p>
<p class="MsoNormal">See nova-list with debug info [1]
<u></u><u></u></p>
<p class="MsoNormal">Do you know how to resolve this? Help in troubleshooting this issue will be appreciated.
<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">[1]  <a href="https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpaste.openstack.org%2Fshow%2F628240%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=o4nTXxk826W8ys1W1DvZUelSLS5uTT9McwazErh3wOY%3D&reserved=0" target="_blank"><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#3366cc;background:white;text-decoration:none">http://paste.openstack.org/<wbr>show/628240/</span></a><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><br>
______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=Zv8CbJlDuv3ZEiLbp%2BHX%2FQEqTDd%2Fndh4wd700hNdW8I%3D&reserved=0" target="_blank">
OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
<a href="https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=T7Tc%2FtBAv1zl4X3TbTJIqQQ5ZW2PtSrvxVACYChEa40%3D&reserved=0" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
</div></div>
</div>
</div>

<br>______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
<br></blockquote></div><br></div></div></div>