<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Hi all</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Thank you for the assistance.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
checking octavia.conf I found that this:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">[service_auth]</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">auth_section = keystone_authtoken</span></p>
<p class="p2" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0); min-height: 13px;">
<span class="s1" style="font-variant-ligatures:no-common-ligatures"></span><br>
</p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">[keystone_authtoken]</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">auth_uri = https://10.0.143.28:5000</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">auth_url = https://10.0.143.28:35357</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">auth_type = password</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">project_domain_name = service_domain</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">user_domain_name = service_domain</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">project_name = services</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">username = octavia</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">password = FN9BztN8tYcWrtxbHYPR2myrpz5HgSJ4T7479ynkCNFyWPhbcfgdbfc5xSCxkPH6</span></p>
<p class="p1" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0);"><span class="s1" style="font-variant-ligatures:no-common-ligatures">memcached_servers = inet6:[::1]:11211</span></p>
<p class="p2" style="margin: 0px; font: 11px Menlo; color: rgb(0, 0, 0); min-height: 13px;">
<span class="s1" style="font-variant-ligatures:no-common-ligatures"></span><br>
</p>
So I rebult the security groups and put them in the services project.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
All working fine now. Thanks so much!</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Russell</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Michael Johnson <johnsomor@gmail.com><br>
<b>Sent:</b> 09 June 2022 22:49<br>
<b>To:</b> Russell Stather <Russell.Stather@ignitiongroup.co.za><br>
<b>Cc:</b> Brendan Shephard <bshephar@redhat.com>; openstack-discuss@lists.openstack.org <openstack-discuss@lists.openstack.org><br>
<b>Subject:</b> Re: Error creating octavia amphora</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div dir="ltr">This isn't an issue with how you are creating the load balancer. It's a nova error booting a VM, and most likely a configuration issue in the deployment. It sounds like it is a charms bug.
<div><br>
</div>
<div>At boot time, we only plug the lb-mgmt-network in the amphora instance. All of the required settings for this are in the octavia.conf.</div>
<div><br>
</div>
<div>First thing to check is the security group Octavia is configured to used:</div>
<div>[controller_worker]</div>
<div>amp_secgroup_list<br>
</div>
<div><br>
</div>
<div>For each security group ID in that list, do an "openstack security group show <ID>" and note the project ID that owns the group.</div>
<div><br>
</div>
<div>Then, also in the octavia.conf, check the project ID used to create the amphora instances in nova:</div>
<div>[service_auth]</div>
<div>project_id</div>
<div><br>
</div>
<div>If project_id is not specified, then look up the project_name with "openstack project show <name>".</div>
<div><br>
</div>
<div>All of these project IDs must match.</div>
<div><br>
</div>
<div>You can also lookup the project IDs of the amphora VM "openstack server show" while it's attempting to boot and compare that to the security group project ID, just to make sure the current running configuration is also correct (as mentioned in a previous
email).</div>
<div><br>
</div>
<div>I haven't seen this error before, but I also don't use charms to deploy OpenStack.</div>
</div>
<div><br>
</div>
<div>Michael</div>
<br>
<div class="x_gmail_quote">
<div dir="ltr" class="x_gmail_attr">On Thu, Jun 9, 2022 at 7:37 AM Russell Stather <<a href="mailto:Russell.Stather@ignitiongroup.co.za">Russell.Stather@ignitiongroup.co.za</a>> wrote:<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
Hi</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
I've built new security groups to make sure they are in the correct project. I can start a new server manually using these security groups.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
The error is coming from the nova compute node. Same error can't find security group.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
I am creating the load balancer and specifying the project on the command line even.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
openstack loadbalancer create --name lb25 --vip-subnet-id admin_subnet1 --project 5e168b652a374a02aff855a5e250b7f8<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
Kind of running out of ideas.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div id="x_gmail-m_-1035440802183533697appendonsend"></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr style="display:inline-block; width:98%">
<div id="x_gmail-m_-1035440802183533697divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Brendan Shephard <<a href="mailto:bshephar@redhat.com" target="_blank">bshephar@redhat.com</a>><br>
<b>Sent:</b> 09 June 2022 13:16<br>
<b>To:</b> Russell Stather <<a href="mailto:Russell.Stather@ignitiongroup.co.za" target="_blank">Russell.Stather@ignitiongroup.co.za</a>><br>
<b>Cc:</b> <a href="mailto:openstack-discuss@lists.openstack.org" target="_blank">
openstack-discuss@lists.openstack.org</a> <<a href="mailto:openstack-discuss@lists.openstack.org" target="_blank">openstack-discuss@lists.openstack.org</a>><br>
<b>Subject:</b> Re: Error creating octavia amphora</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hey Russell,
<div><br>
</div>
<div>Are you able to share the outputs from:</div>
<div><font face="monospace">$ openstack server show <span style="color:rgb(0,0,0)">524ae27b-1542-4c2d-9118-</span><span style="color:rgb(0,0,0)">138d9e7f3770</span> -c id -c project_id -c security_groups -c status -f yaml</font></div>
<div><br>
</div>
<div>And:</div>
<div><font face="monospace">$ openstack security group show<span style="color:rgb(0,0,0)">0b683c75-d900-4e45-acb2-</span><span style="color:rgb(0,0,0)">8bc321580666</span> -c id -c project_id -f yaml</font><br>
</div>
<div><font face="monospace"><br>
</font></div>
<div><font face="arial, sans-serif">I agree with James, my assumption would be that we will find they aren't in the same project, so Nova can't use that security group for the Amphorae. I'm not familiar with charmed openstack though, but it does look like James
is from Canonical and might be able to advise on the specifics. </font></div>
<div><font face="arial, sans-serif"><br>
</font></div>
<div><font face="arial, sans-serif">All the best,</font></div>
<div><br clear="all">
<div>
<div dir="ltr">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<p style="font-weight:bold; margin:0px; padding:0px; font-size:14px; text-transform:capitalize; font-family:RedHatText,sans-serif">
<span>Brendan</span> <span>Shephard</span><span style="color:rgb(170,170,170); margin:0px"></span>
</p>
<p style="font-weight:normal; font-size:12px; margin:0px; text-transform:capitalize; font-family:RedHatText,sans-serif">
<span>Software Engineer</span> </p>
<p style="font-weight:normal; margin:0px 0px 4px; font-size:12px; font-family:RedHatText,sans-serif">
<a href="https://www.redhat.com" target="_blank" style="color:rgb(0,136,206); font-size:12px; margin:0px; text-decoration:none; font-family:RedHatText,sans-serif">Red Hat
<span>APAC</span></a> </p>
<div style="margin-bottom:4px"><span>
<p style="font-size:12px; margin:0px; font-family:RedHatText,sans-serif">193 N Quay</p>
</span><span>
<p style="font-size:12px; margin:0px; font-family:RedHatText,sans-serif">Brisbane City QLD 4000</p>
</span></div>
<div style="font-weight:normal; font-size:12px; font-family:RedHatText,sans-serif; margin-bottom:8px">
<div><a href="https://twitter.com/redhat" title="twitter" target="_blank" style="text-decoration:none; color:rgb(0,0,0); display:inline-block; line-height:20px; padding-left:13px"><span style="margin-left:2px">@RedHat</span>
</a> <a href="https://www.linkedin.com/company/red-hat" title="LinkedIn" target="_blank" style="text-decoration:none; color:rgb(0,0,0); display:inline-block; line-height:20px; padding-left:12px; margin:0px 4px 0px 3px; padding-top:1px">
<span style="margin-left:4px">Red Hat</span> </a> <a href="https://www.facebook.com/RedHatInc" title="Facebook" target="_blank" style="text-decoration:none; color:rgb(0,0,0); display:inline-block; line-height:20px; padding-left:13px">
<span>Red Hat</span> </a></div>
</div>
<div style="margin-top:12px">
<table border="0">
<tbody>
<tr>
<td width="100px"><a href="https://red.ht/sig" target="_blank"><img width="90" height="auto"></a>
</td>
<td style="font-weight:normal; font-size:12px">
<div><a href="https://redhat.com/summit" target="_blank" style="text-decoration:none"><img width="53px" height="auto" style="outline:currentcolor none 0px"></a></div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<span></span></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
<br>
<div>
<div dir="ltr">On Thu, Jun 9, 2022 at 8:48 PM Russell Stather <<a href="mailto:Russell.Stather@ignitiongroup.co.za" target="_blank">Russell.Stather@ignitiongroup.co.za</a>> wrote:<br>
</div>
<blockquote style="margin:0px 0px 0px 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
Hi</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
I am seeing the below error when creating a load balancer. The security group does exist, and it is the correct group (tagged with charm-octavia)</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
What am I missing here to resolve this?</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
2022-06-09 10:10:03.789 678859 ERROR oslo_messaging.rpc.server octavia.common.exceptions.ComputeBuildException: Failed to build compute instance due to: {'code': 500, 'created': '2022-06-09T10:09:59Z', 'message': 'Exceeded maximum number of retries. Exceeded
max scheduling attempts 3 for instance 524ae27b-1542-4c2d-9118-138d9e7f3770. Last exception: Security group 0b683c75-d900-4e45-acb2-8bc321580666 not found.', 'details': 'Traceback (most recent call last):\n File "/usr/lib/python3/dist-packages/nova/conductor/manager.py",
line 654, in build_instances\n scheduler_utils.populate_retry(\n File "/usr/lib/python3/dist-packages/nova/scheduler/utils.py", line 989, in populate_retry\n raise exception.MaxRetriesExceeded(reason=msg)\nnova.exception.MaxRetriesExceeded: Exceeded
maximum number of retries. Exceeded max scheduling attempts 3 for instance 524ae27b-1542-4c2d-9118-138d9e7f3770. Last exception: Security group 0b683c75-d900-4e45-acb2-8bc321580666 not found.\n'}
<div>2022-06-09 10:10:03.789 678859 ERROR oslo_messaging.rpc.server</div>
<br>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</body>
</html>