<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='border:none;padding:0in'><b>From: </b><a href="mailto:vinhducnguyen1708@gmail.com">Vinh Nguyen Duc</a><br><b>Sent: </b>Tuesday, August 25, 2020 11:00 AM<br><b>To: </b><a href="mailto:community@lists.openstack.org">community@lists.openstack.org</a><br><b>Subject: </b>Error add member to pool ( OCTAVIA ) when using SSL to verify<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Dear Openstack community,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My name is Duc Vinh, I am newer in Openstack<o:p></o:p></p><p class=MsoNormal>I am deploy Openstack Ussuri on Centos8 , I am using three nodes controller with High <span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#4D5156;background:white'>Availability topology and using HAproxy to verify cert for connect HTTPS,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#4D5156;background:white'>I have trouble with project Octavia, I cannot add member in a pool after created Loadbalancer, listener, pool ( everything is fine).<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#4D5156;background:white'>Here is my log and configuration file:<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>LOGS: <o:p></o:p></b></p><p class=MsoNormal><b><o:p> </o:p></b></p><p class=MsoNormal>2020-08-25 10:55:42.872 226250 DEBUG octavia.network.drivers.neutron.base [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Neutron extension security-group found enabled _check_extension_enabled /usr/lib/python3.6/site-packages/octavia/network/drivers/neutron/base.py:66<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:42.892 226250 DEBUG octavia.network.drivers.neutron.base [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Neutron extension dns-integration is not enabled _check_extension_enabled /usr/lib/python3.6/site-packages/octavia/network/drivers/neutron/base.py:70<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:42.911 226250 DEBUG octavia.network.drivers.neutron.base [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Neutron extension qos found enabled _check_extension_enabled /usr/lib/python3.6/site-packages/octavia/network/drivers/neutron/base.py:66<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:42.933 226250 DEBUG octavia.network.drivers.neutron.base [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Neutron extension allowed-address-pairs found enabled _check_extension_enabled /usr/lib/python3.6/site-packages/octavia/network/drivers/neutron/base.py:66<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.068 226250 WARNING keystoneauth.identity.generic.base [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Failed to discover available identity versions when contacting https://192.168.10.150:5000. Attempting to parse version from URL.: keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://192.168.10.150:5000: HTTPSConnectionPool(host='192.168.10.150', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Error retrieving subnet (subnet id: 035f3183-f469-415f-b536-b4a81364e814.: keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://192.168.10.150:5000: HTTPSConnectionPool(host='192.168.10.150', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base Traceback (most recent call last):<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 600, in urlopen<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base chunked=chunked)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 343, in _make_request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base self._validate_conn(conn)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 839, in _validate_conn<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base conn.connect()<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/urllib3/connection.py", line 344, in connect<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base ssl_context=context)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/urllib3/util/ssl_.py", line 367, in ssl_wrap_socket<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base return context.wrap_socket(sock)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib64/python3.6/ssl.py", line 365, in wrap_socket<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base _context=self, _session=session)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib64/python3.6/ssl.py", line 776, in __init__<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base self.do_handshake()<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib64/python3.6/ssl.py", line 1036, in do_handshake<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base self._sslobj.do_handshake()<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib64/python3.6/ssl.py", line 648, in do_handshake<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base self._sslobj.do_handshake()<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base During handling of the above exception, another exception occurred:<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base Traceback (most recent call last):<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/requests/adapters.py", line 449, in send<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base timeout=timeout<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 638, in urlopen<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base _stacktrace=sys.exc_info()[2])<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/urllib3/util/retry.py", line 399, in increment<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base raise MaxRetryError(_pool, url, error or ResponseError(cause))<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='192.168.10.150', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base During handling of the above exception, another exception occurred:<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base Traceback (most recent call last):<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/session.py", line 1004, in _send_request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base resp = self.session.request(method, url, **kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/requests/sessions.py", line 533, in request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base resp = self.send(prep, **send_kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/requests/sessions.py", line 646, in send<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base r = adapter.send(request, **kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/requests/adapters.py", line 514, in send<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base raise SSLError(e, request=request)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base requests.exceptions.SSLError: HTTPSConnectionPool(host='192.168.10.150', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base During handling of the above exception, another exception occurred:<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base Traceback (most recent call last):<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py", line 138, in _do_create_plugin<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base authenticated=False)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py", line 610, in get_discovery<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base authenticated=authenticated)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/discover.py", line 1452, in get_discovery<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base disc = Discover(session, url, authenticated=authenticated)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/discover.py", line 536, in __init__<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base authenticated=authenticated)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/discover.py", line 102, in get_version_data<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base resp = session.get(url, headers=headers, authenticated=authenticated)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/session.py", line 1123, in get<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base return self.request(url, 'GET', **kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/session.py", line 913, in request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base resp = send(**kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/session.py", line 1008, in _send_request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base raise exceptions.SSLError(msg)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://192.168.10.150:5000: HTTPSConnectionPool(host='192.168.10.150', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base During handling of the above exception, another exception occurred:<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base Traceback (most recent call last):<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/octavia/network/drivers/neutron/base.py", line 193, in _get_resource<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base resource_type)(resource_id)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/neutronclient/v2_0/client.py", line 869, in show_subnet<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base return self.get(self.subnet_path % (subnet), params=_params)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/neutronclient/v2_0/client.py", line 354, in get<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base headers=headers, params=params)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/neutronclient/v2_0/client.py", line 331, in retry_request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base headers=headers, params=params)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/neutronclient/v2_0/client.py", line 282, in do_request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base headers=headers)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/neutronclient/client.py", line 339, in do_request<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base self._check_uri_length(url)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/neutronclient/client.py", line 332, in _check_uri_length<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base uri_len = len(self.endpoint_url) + len(url)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/neutronclient/client.py", line 346, in endpoint_url<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base return self.get_endpoint()<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 282, in get_endpoint<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base return self.session.get_endpoint(auth or self.auth, **kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/session.py", line 1225, in get_endpoint<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base return auth.get_endpoint(self, **kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py", line 380, in get_endpoint<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base allow_version_hack=allow_version_hack, **kwargs)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py", line 271, in get_endpoint_data<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base service_catalog = self.get_access(session).service_catalog<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py", line 134, in get_access<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base self.auth_ref = self.get_auth_ref(session)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py", line 206, in get_auth_ref<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base self._plugin = self._do_create_plugin(session)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base File "/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py", line 161, in _do_create_plugin<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base 'auth_url is correct. %s' % e)<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://192.168.10.150:5000: HTTPSConnectionPool(host='192.168.10.150', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.070 226250 ERROR octavia.network.drivers.neutron.base<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.074 226250 DEBUG wsme.api [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Client-side error: Subnet 035f3183-f469-415f-b536-b4a81364e814 not found. format_exception /usr/lib/python3.6/site-packages/wsme/api.py:222<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.076 226250 DEBUG octavia.common.keystone [req-57c5b37c-e50f-4d50-b535-b0a3d19db1d5 - 8259463ce052437396afa845933afe4b - default default] Request path is / and it does not require keystone authentication process_request /usr/lib/python3.6/site-packages/octavia/common/keystone.py:77<o:p></o:p></p><p class=MsoNormal>2020-08-25 10:55:43.080 226250 DEBUG octavia.common.keystone [req-5091d326-0cb4-4ae1-bf4b-9ef6b9313dca - - - - -] Request path is / and it does not require keystone authentication process_request /usr/lib/python3.6/site-packages/octavia/common/keystone.py:77<o:p></o:p></p><p class=MsoNormal><b><o:p> </o:p></b></p><p class=MsoNormal><b>Configuration:<o:p></o:p></b></p><p class=MsoNormal>[root@controller01 ~]# cat /etc/octavia/octavia.conf<o:p></o:p></p><p class=MsoNormal>[DEFAULT]<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>log_dir = /var/log/octavia<o:p></o:p></p><p class=MsoNormal>debug = True<o:p></o:p></p><p class=MsoNormal>transport_url = rabbit://openstack:4ychZAT5VrWlk6KFfgAmpXvGdzfdV8hEpIgOLhyF@192.168.10.178:5672,openstack:4ychZAT5VrWlk6KFfgAmpXvGdzfdV8hEpIgOLhyF@192.168.10.179:5672,openstack:4ychZAT5VrWlk6KFfgAmpXvGdzfdV8hEpIgOLhyF@192.168.10.28:5672<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[api_settings]<o:p></o:p></p><p class=MsoNormal>api_base_uri = https://192.168.10.150:9876<o:p></o:p></p><p class=MsoNormal>bind_host = 192.168.10.178<o:p></o:p></p><p class=MsoNormal>bind_port = 9876<o:p></o:p></p><p class=MsoNormal>auth_strategy = keystone<o:p></o:p></p><p class=MsoNormal>healthcheck_enabled = True<o:p></o:p></p><p class=MsoNormal>allow_tls_terminated_listeners = True<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[database]<o:p></o:p></p><p class=MsoNormal>connection = mysql+pymysql://octavia:FUkbii8AY4G6H9LxbJ2RRlOzHN61X8PI8FrMcuXQ@192.168.10.150/octavia<o:p></o:p></p><p class=MsoNormal>max_retries = -1<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[health_manager]<o:p></o:p></p><p class=MsoNormal>bind_port = 5555<o:p></o:p></p><p class=MsoNormal>bind_ip = 192.168.10.178<o:p></o:p></p><p class=MsoNormal>controller_ip_port_list = 192.168.10.178:5555, 192.168.10.179:5555, 192.168.10.28:5555<o:p></o:p></p><p class=MsoNormal>heartbeat_key = insecure<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[keystone_authtoken]<o:p></o:p></p><p class=MsoNormal>service_token_roles_required = True<o:p></o:p></p><p class=MsoNormal>www_authenticate_uri = https://192.168.10.150:5000<o:p></o:p></p><p class=MsoNormal>auth_url = https://192.168.10.150:5000<o:p></o:p></p><p class=MsoNormal>region_name = Hanoi<o:p></o:p></p><p class=MsoNormal>memcached_servers = 192.168.10.178:11211,192.168.10.179:11211,192.168.10.28:11211<o:p></o:p></p><p class=MsoNormal>auth_type = password<o:p></o:p></p><p class=MsoNormal>project_domain_name = Default<o:p></o:p></p><p class=MsoNormal>user_domain_name = Default<o:p></o:p></p><p class=MsoNormal>project_name = service<o:p></o:p></p><p class=MsoNormal>username = octavia<o:p></o:p></p><p class=MsoNormal>password = esGn3rN3iJOAD2HXmqznFPI9oAY2wQNDWYwqJaCH<o:p></o:p></p><p class=MsoNormal>cafile = /etc/ssl/private/haproxy.pem<o:p></o:p></p><p class=MsoNormal>insecure = false<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[certificates]<o:p></o:p></p><p class=MsoNormal>cert_generator = local_cert_generator<o:p></o:p></p><p class=MsoNormal>#server_certs_key_passphrase = insecure-key-do-not-use-this-key<o:p></o:p></p><p class=MsoNormal>ca_private_key_passphrase = esGn3rN3iJOAD2HXmqznFPI9oAY2wQNDWYwqJaCH<o:p></o:p></p><p class=MsoNormal>ca_private_key = /etc/octavia/certs/server_ca.key.pem<o:p></o:p></p><p class=MsoNormal>ca_certificate = /etc/octavia/certs/server_ca.cert.pem<o:p></o:p></p><p class=MsoNormal>region_name = Hanoi<o:p></o:p></p><p class=MsoNormal>ca_certificates_file = /etc/ssl/private/haproxy.pem<o:p></o:p></p><p class=MsoNormal>endpoint_type = internal<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[networking]<o:p></o:p></p><p class=MsoNormal>#allow_vip_network_id = True<o:p></o:p></p><p class=MsoNormal>#allow_vip_subnet_id = True<o:p></o:p></p><p class=MsoNormal>#allow_vip_port_id = True<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[haproxy_amphora]<o:p></o:p></p><p class=MsoNormal>#bind_port = 9443<o:p></o:p></p><p class=MsoNormal>server_ca = /etc/octavia/certs/server_ca.cert.pem<o:p></o:p></p><p class=MsoNormal>client_cert = /etc/octavia/certs/client.cert-and-key.pem<o:p></o:p></p><p class=MsoNormal>base_path = /var/lib/octavia<o:p></o:p></p><p class=MsoNormal>base_cert_dir = /var/lib/octavia/certs<o:p></o:p></p><p class=MsoNormal>connection_max_retries = 1500<o:p></o:p></p><p class=MsoNormal>connection_retry_interval = 1<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[controller_worker]<o:p></o:p></p><p class=MsoNormal>amp_image_tag = amphora<o:p></o:p></p><p class=MsoNormal>amp_ssh_key_name = octavia<o:p></o:p></p><p class=MsoNormal>amp_secgroup_list = 80f44b73-dc9f-48aa-a0b8-8b78e5c6585c<o:p></o:p></p><p class=MsoNormal>amp_boot_network_list = 04425cb2-5963-48f5-a229-b89b7c6036bd<o:p></o:p></p><p class=MsoNormal>amp_flavor_id = 200<o:p></o:p></p><p class=MsoNormal>network_driver = allowed_address_pairs_driver<o:p></o:p></p><p class=MsoNormal>compute_driver = compute_nova_driver<o:p></o:p></p><p class=MsoNormal>amphora_driver = amphora_haproxy_rest_driver<o:p></o:p></p><p class=MsoNormal>client_ca = /etc/octavia/certs/client_ca.cert.pem<o:p></o:p></p><p class=MsoNormal>loadbalancer_topology = SINGLE<o:p></o:p></p><p class=MsoNormal>amp_active_retries = 9999<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[task_flow]<o:p></o:p></p><p class=MsoNormal>[oslo_messaging]<o:p></o:p></p><p class=MsoNormal>topic = octavia_prov<o:p></o:p></p><p class=MsoNormal>rpc_thread_pool_size = 2<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[house_keeping]<o:p></o:p></p><p class=MsoNormal>[amphora_agent]<o:p></o:p></p><p class=MsoNormal>[keepalived_vrrp]<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[service_auth]<o:p></o:p></p><p class=MsoNormal>auth_url = https://192.168.10.150:5000<o:p></o:p></p><p class=MsoNormal>auth_type = password<o:p></o:p></p><p class=MsoNormal>project_domain_name = default<o:p></o:p></p><p class=MsoNormal>user_domain_name = default<o:p></o:p></p><p class=MsoNormal>project_name = admin<o:p></o:p></p><p class=MsoNormal>username = admin<o:p></o:p></p><p class=MsoNormal>password = F35sXAYW5qDlMGfQbhmexIx12DqrQdpw6ixAseTd<o:p></o:p></p><p class=MsoNormal>cafile = /etc/ssl/private/haproxy.pem<o:p></o:p></p><p class=MsoNormal>region_name = Hanoi<o:p></o:p></p><p class=MsoNormal>memcached_servers = 192.168.10.178:11211,192.168.10.179:11211,192.168.10.28:11211<o:p></o:p></p><p class=MsoNormal>#insecure = true<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[glance]<o:p></o:p></p><p class=MsoNormal>ca_certificates_file = /etc/ssl/private/haproxy.pem<o:p></o:p></p><p class=MsoNormal>region_name = Hanoi<o:p></o:p></p><p class=MsoNormal>endpoint_type = internal<o:p></o:p></p><p class=MsoNormal>insecure = false<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[neutron]<o:p></o:p></p><p class=MsoNormal>ca_certificates_file = /etc/ssl/private/haproxy.pem<o:p></o:p></p><p class=MsoNormal>region_name = Hanoi<o:p></o:p></p><p class=MsoNormal>endpoint_type = internal<o:p></o:p></p><p class=MsoNormal>insecure = false<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[cinder]<o:p></o:p></p><p class=MsoNormal>ca_certificates_file = /etc/ssl/private/haproxy.pem<o:p></o:p></p><p class=MsoNormal>region_name = Hanoi<o:p></o:p></p><p class=MsoNormal>endpoint_type = internal<o:p></o:p></p><p class=MsoNormal>insecure = false<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[nova]<o:p></o:p></p><p class=MsoNormal>ca_certificates_file = /etc/ssl/private/haproxy.pem<o:p></o:p></p><p class=MsoNormal>region_name = Hanoi<o:p></o:p></p><p class=MsoNormal>endpoint_type = internal<o:p></o:p></p><p class=MsoNormal>insecure = false<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[oslo_policy]<o:p></o:p></p><p class=MsoNormal>#policy_file = /etc/octavia/policy.json<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[oslo_messaging_notifications]<o:p></o:p></p><p class=MsoNormal>transport_url = rabbit://openstack:4ychZAT5VrWlk6KFfgAmpXvGdzfdV8hEpIgOLhyF@192.168.10.178:5672,openstack:4ychZAT5VrWlk6KFfgAmpXvGdzfdV8hEpIgOLhyF@192.168.10.179:5672,openstack:4ychZAT5VrWlk6KFfgAmpXvGdzfdV8hEpIgOLhyF@192.168.10.28:5672<o:p></o:p></p><p class=MsoNormal><b><o:p> </o:p></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>