openstack queens octavia security group not found
Hello everyone, I installed octavia with centos 7 queens. When I crreate a load balancer the amphora instance is not created because nova conductor cannot find the security group specified in octavia.conf. I am sure the security group id is correct but the nova condictor reports: 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils [req-75df2561-4bc3-4bde-86d0-40469058250c 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd - default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] Error from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most recent call last):\n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1828, in _do_build_and_run_instance\n filter_properties, request_spec)\n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2108, in _build_and_run_instance\n instance_uuid=instance.uuid, reason=six.text_type(e))\n', u'RescheduledException: Build of instance 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security group fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] Please, what is wrong ? Regards Ignazio
Hi, did you create the security group in the octavia project? Can you see the sg if you login with the octavia credentials? Fabian Am 08.01.19 um 09:11 schrieb Ignazio Cassano:
Hello everyone, I installed octavia with centos 7 queens. When I crreate a load balancer the amphora instance is not created because nova conductor cannot find the security group specified in octavia.conf. I am sure the security group id is correct but the nova condictor reports:
2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils [req-75df2561-4bc3-4bde-86d0-40469058250c 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd - default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] Error from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most recent call last):\n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1828, in _do_build_and_run_instance\n filter_properties, request_spec)\n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2108, in _build_and_run_instance\n instance_uuid=instance.uuid, reason=six.text_type(e))\n', u'RescheduledException: Build of instance 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security group fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n']
Please, what is wrong ?
Regards Ignazio
Hello, I do not have an octavia project but only a service project. Octavia user belongs to admin and service project :-( Documentation does not seem clear about it Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Hi,
did you create the security group in the octavia project?
Can you see the sg if you login with the octavia credentials?
Fabian
Am 08.01.19 um 09:11 schrieb Ignazio Cassano:
Hello everyone, I installed octavia with centos 7 queens. When I crreate a load balancer the amphora instance is not created because nova conductor cannot find the security group specified in octavia.conf. I am sure the security group id is correct but the nova condictor reports:
2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils [req-75df2561-4bc3-4bde-86d0-40469058250c 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd - default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] Error from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most recent call last):\n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1828, in _do_build_and_run_instance\n filter_properties, request_spec)\n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2108, in _build_and_run_instance\n instance_uuid=instance.uuid, reason=six.text_type(e))\n', u'RescheduledException: Build of instance 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security group fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n']
Please, what is wrong ?
Regards Ignazio
Hi, in which project should octavia start its amphora instances? In this project you should create a suitable sg. Fabian Am 08.01.19 um 10:39 schrieb Ignazio Cassano:
Hello, I do not have an octavia project but only a service project. Octavia user belongs to admin and service project :-( Documentation does not seem clear about it
Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
did you create the security group in the octavia project?
Can you see the sg if you login with the octavia credentials?
Fabian
Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > Hello everyone, > I installed octavia with centos 7 queens. > When I crreate a load balancer the amphora instance is not created > because nova conductor cannot find the security group specified in > octavia.conf. > I am sure the security group id is correct but the nova condictor reports: > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > [req-75df2561-4bc3-4bde-86d0-40469058250c > 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd - > default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] Error > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most recent > call last):\n', u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1828, > in _do_build_and_run_instance\n filter_properties, request_spec)\n', > u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > line 2108, in _build_and_run_instance\n instance_uuid=instance.uuid, > reason=six.text_type(e))\n', u'RescheduledException: Build of instance > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security group > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > Please, what is wrong ? > > Regards > Ignazio
It started in service project but service project not read securty groups that I created in admin project. So I modified /etc/octavia.conf secitons service_auth and keystone_authoken and I put project_name = admin instead of project_name = service With the above modifications the amphora instance starts in admin projects abd can read from it the security group id. But the load balancer remains in pending and then the ambora instance is automatically deleted. Another problem is that in both cases it does not start to create the amphra instance when I specify amp_ssh_key_name in octavia.conf In admin project case it shoud read it, because this key is in the admin project :-( So I started without ssh_key. Could you help me with my wrong configuration,please ? Regards Ignazio Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Hi,
in which project should octavia start its amphora instances?
In this project you should create a suitable sg.
Fabian
Hello, I do not have an octavia project but only a service project. Octavia user belongs to admin and service project :-( Documentation does not seem clear about it
Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
did you create the security group in the octavia project?
Can you see the sg if you login with the octavia credentials?
Fabian
Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > Hello everyone, > I installed octavia with centos 7 queens. > When I crreate a load balancer the amphora instance is not created > because nova conductor cannot find the security group specified in > octavia.conf. > I am sure the security group id is correct but the nova condictor reports: > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > [req-75df2561-4bc3-4bde-86d0-40469058250c > 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd
Am 08.01.19 um 10:39 schrieb Ignazio Cassano: -
> default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] Error > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most recent > call last):\n', u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1828, > in _do_build_and_run_instance\n filter_properties, request_spec)\n', > u' File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py",
> line 2108, in _build_and_run_instance\n instance_uuid=instance.uuid, > reason=six.text_type(e))\n', u'RescheduledException: Build of instance > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security group > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > Please, what is wrong ? > > Regards > Ignazio
PS Now I added the ssh key to octavia user and it assignes it to amphora instance. Still load balancer remains in pending create and after 3 minutes the amphora instance is automatically deleted. Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Hi,
in which project should octavia start its amphora instances?
In this project you should create a suitable sg.
Fabian
Hello, I do not have an octavia project but only a service project. Octavia user belongs to admin and service project :-( Documentation does not seem clear about it
Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
did you create the security group in the octavia project?
Can you see the sg if you login with the octavia credentials?
Fabian
Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > Hello everyone, > I installed octavia with centos 7 queens. > When I crreate a load balancer the amphora instance is not created > because nova conductor cannot find the security group specified in > octavia.conf. > I am sure the security group id is correct but the nova condictor reports: > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > [req-75df2561-4bc3-4bde-86d0-40469058250c > 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd
Am 08.01.19 um 10:39 schrieb Ignazio Cassano: -
> default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] Error > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most recent > call last):\n', u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1828, > in _do_build_and_run_instance\n filter_properties, request_spec)\n', > u' File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py",
> line 2108, in _build_and_run_instance\n instance_uuid=instance.uuid, > reason=six.text_type(e))\n', u'RescheduledException: Build of instance > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security group > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > Please, what is wrong ? > > Regards > Ignazio
PS on the amphore instance there is nothng on port 9443 Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Hi,
in which project should octavia start its amphora instances?
In this project you should create a suitable sg.
Fabian
Hello, I do not have an octavia project but only a service project. Octavia user belongs to admin and service project :-( Documentation does not seem clear about it
Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
did you create the security group in the octavia project?
Can you see the sg if you login with the octavia credentials?
Fabian
Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > Hello everyone, > I installed octavia with centos 7 queens. > When I crreate a load balancer the amphora instance is not created > because nova conductor cannot find the security group specified in > octavia.conf. > I am sure the security group id is correct but the nova condictor reports: > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > [req-75df2561-4bc3-4bde-86d0-40469058250c > 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd
Am 08.01.19 um 10:39 schrieb Ignazio Cassano: -
> default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] Error > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most recent > call last):\n', u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1828, > in _do_build_and_run_instance\n filter_properties, request_spec)\n', > u' File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py",
> line 2108, in _build_and_run_instance\n instance_uuid=instance.uuid, > reason=six.text_type(e))\n', u'RescheduledException: Build of instance > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security group > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > Please, what is wrong ? > > Regards > Ignazio
Hi, are you able to connect to the amphora via ssh? Could you paste your octavia.log and the log of the amphora somewhere? Fabian Am 08.01.19 um 11:24 schrieb Ignazio Cassano:
PS on the amphore instance there is nothng on port 9443
Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
in which project should octavia start its amphora instances?
In this project you should create a suitable sg.
Fabian
Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > Hello, I do not have an octavia project but only a service project. > Octavia user belongs to admin and service project :-( > Documentation does not seem clear about it > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > did you create the security group in the octavia project? > > Can you see the sg if you login with the octavia credentials? > > > Fabian > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > Hello everyone, > > I installed octavia with centos 7 queens. > > When I crreate a load balancer the amphora instance is not created > > because nova conductor cannot find the security group specified in > > octavia.conf. > > I am sure the security group id is correct but the nova condictor > reports: > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd - > > default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] > Error > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most > recent > > call last):\n', u' File > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line > 1828, > > in _do_build_and_run_instance\n filter_properties, > request_spec)\n', > > u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > line 2108, in _build_and_run_instance\n > instance_uuid=instance.uuid, > > reason=six.text_type(e))\n', u'RescheduledException: Build of > instance > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security > group > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > Please, what is wrong ? > > > > Regards > > Ignazio >
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough? Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
PS on the amphore instance there is nothng on port 9443
Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
in which project should octavia start its amphora instances?
In this project you should create a suitable sg.
Fabian
Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > Hello, I do not have an octavia project but only a service
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: project.
> Octavia user belongs to admin and service project :-( > Documentation does not seem clear about it > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > did you create the security group in the octavia project? > > Can you see the sg if you login with the octavia credentials? > > > Fabian > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > Hello everyone, > > I installed octavia with centos 7 queens. > > When I crreate a load balancer the amphora instance is not created > > because nova conductor cannot find the security group specified in > > octavia.conf. > > I am sure the security group id is correct but the nova condictor > reports: > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd - > > default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] > Error > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most > recent > > call last):\n', u' File > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line > 1828, > > in _do_build_and_run_instance\n filter_properties, > request_spec)\n', > > u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > line 2108, in _build_and_run_instance\n > instance_uuid=instance.uuid, > > reason=six.text_type(e))\n', u'RescheduledException: Build
of
> instance > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security > group > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > Please, what is wrong ? > > > > Regards > > Ignazio >
Well, more logs are always better ;) Am 08.01.19 um 13:05 schrieb Ignazio Cassano:
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough?
Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: > PS > on the amphore instance there is nothng on port 9443 > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > in which project should octavia start its amphora instances? > > In this project you should create a suitable sg. > > Fabian > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > > Hello, I do not have an octavia project but only a service project. > > Octavia user belongs to admin and service project :-( > > Documentation does not seem clear about it > > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>> > <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>>> ha scritto: > > > > Hi, > > > > did you create the security group in the octavia project? > > > > Can you see the sg if you login with the octavia credentials? > > > > > > Fabian > > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > > Hello everyone, > > > I installed octavia with centos 7 queens. > > > When I crreate a load balancer the amphora instance is not > created > > > because nova conductor cannot find the security group > specified in > > > octavia.conf. > > > I am sure the security group id is correct but the nova > condictor > > reports: > > > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > > 62ed0b7f336b479ebda6f8587c4dd608 > 2a33760772ab4b0381a27735443ec4bd - > > > default default] [instance: > 83f2fd75-8069-47a5-9572-8949ec9b5cee] > > Error > > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback > (most > > recent > > > call last):\n', u' File > > > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line > > 1828, > > > in _do_build_and_run_instance\n filter_properties, > > request_spec)\n', > > > u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > > line 2108, in _build_and_run_instance\n > > instance_uuid=instance.uuid, > > > reason=six.text_type(e))\n', u'RescheduledException: Build of > > instance > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: > Security > > group > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > > > Please, what is wrong ? > > > > > > Regards > > > Ignazio > > >
Hi, attached here there are logs. As you can see the amphora messages reports that amphora-agent service fails. Thanks a lot for your help Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Well, more logs are always better ;)
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough?
Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: > PS > on the amphore instance there is nothng on port 9443 > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > in which project should octavia start its amphora instances? > > In this project you should create a suitable sg. > > Fabian > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > > Hello, I do not have an octavia project but only a service project. > > Octavia user belongs to admin and service project :-( > > Documentation does not seem clear about it > > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>> > <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>>> ha scritto: > > > > Hi, > > > > did you create the security group in the octavia
Am 08.01.19 um 13:05 schrieb Ignazio Cassano: project?
> > > > Can you see the sg if you login with the octavia credentials? > > > > > > Fabian > > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > > Hello everyone, > > > I installed octavia with centos 7 queens. > > > When I crreate a load balancer the amphora instance is not > created > > > because nova conductor cannot find the security
group
> specified in > > > octavia.conf. > > > I am sure the security group id is correct but the
nova
> condictor > > reports: > > > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > > 62ed0b7f336b479ebda6f8587c4dd608 > 2a33760772ab4b0381a27735443ec4bd - > > > default default] [instance: > 83f2fd75-8069-47a5-9572-8949ec9b5cee] > > Error > > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback > (most > > recent > > > call last):\n', u' File > > > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
line
> > 1828, > > > in _do_build_and_run_instance\n
filter_properties,
> > request_spec)\n', > > > u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > > line 2108, in _build_and_run_instance\n > > instance_uuid=instance.uuid, > > > reason=six.text_type(e))\n', u'RescheduledException: Build of > > instance > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
re-scheduled:
> Security > > group > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > > > Please, what is wrong ? > > > > > > Regards > > > Ignazio > > >
Doing a journactl -u on amphora instance it gives: gen 08 12:40:12 amphora-1e35a2d5-c3ab-4016-baf6-e6bf1dd061ac.novalocal amphora-agent[2884]: 2019-01-08 12:40:12.013 2884 ERROR octavia raise ValueError('certfile "%s" does not exist' % conf.certfile) gen 08 12:40:12 amphora-1e35a2d5-c3ab-4016-baf6-e6bf1dd061ac.novalocal amphora-agent[2884]: 2019-01-08 12:40:12.013 2884 ERROR octavia ValueError: certfile "/etc/octavia/certs/client.pem" does not exist Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Well, more logs are always better ;)
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough?
Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: > PS > on the amphore instance there is nothng on port 9443 > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > in which project should octavia start its amphora instances? > > In this project you should create a suitable sg. > > Fabian > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > > Hello, I do not have an octavia project but only a service project. > > Octavia user belongs to admin and service project :-( > > Documentation does not seem clear about it > > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>> > <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>>> ha scritto: > > > > Hi, > > > > did you create the security group in the octavia
Am 08.01.19 um 13:05 schrieb Ignazio Cassano: project?
> > > > Can you see the sg if you login with the octavia credentials? > > > > > > Fabian > > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > > Hello everyone, > > > I installed octavia with centos 7 queens. > > > When I crreate a load balancer the amphora instance is not > created > > > because nova conductor cannot find the security
group
> specified in > > > octavia.conf. > > > I am sure the security group id is correct but the
nova
> condictor > > reports: > > > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > > 62ed0b7f336b479ebda6f8587c4dd608 > 2a33760772ab4b0381a27735443ec4bd - > > > default default] [instance: > 83f2fd75-8069-47a5-9572-8949ec9b5cee] > > Error > > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback > (most > > recent > > > call last):\n', u' File > > > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
line
> > 1828, > > > in _do_build_and_run_instance\n
filter_properties,
> > request_spec)\n', > > > u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > > line 2108, in _build_and_run_instance\n > > instance_uuid=instance.uuid, > > > reason=six.text_type(e))\n', u'RescheduledException: Build of > > instance > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
re-scheduled:
> Security > > group > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > > > Please, what is wrong ? > > > > > > Regards > > > Ignazio > > >
Probably I must set client_ca.pem in octavia.conf end not client.pem in section haproxy_amphora Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Well, more logs are always better ;)
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough?
Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: > PS > on the amphore instance there is nothng on port 9443 > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > in which project should octavia start its amphora instances? > > In this project you should create a suitable sg. > > Fabian > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > > Hello, I do not have an octavia project but only a service project. > > Octavia user belongs to admin and service project :-( > > Documentation does not seem clear about it > > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>> > <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>>> ha scritto: > > > > Hi, > > > > did you create the security group in the octavia
Am 08.01.19 um 13:05 schrieb Ignazio Cassano: project?
> > > > Can you see the sg if you login with the octavia credentials? > > > > > > Fabian > > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > > Hello everyone, > > > I installed octavia with centos 7 queens. > > > When I crreate a load balancer the amphora instance is not > created > > > because nova conductor cannot find the security
group
> specified in > > > octavia.conf. > > > I am sure the security group id is correct but the
nova
> condictor > > reports: > > > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > > 62ed0b7f336b479ebda6f8587c4dd608 > 2a33760772ab4b0381a27735443ec4bd - > > > default default] [instance: > 83f2fd75-8069-47a5-9572-8949ec9b5cee] > > Error > > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback > (most > > recent > > > call last):\n', u' File > > > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
line
> > 1828, > > > in _do_build_and_run_instance\n
filter_properties,
> > request_spec)\n', > > > u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > > line 2108, in _build_and_run_instance\n > > instance_uuid=instance.uuid, > > > reason=six.text_type(e))\n', u'RescheduledException: Build of > > instance > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
re-scheduled:
> Security > > group > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > > > Please, what is wrong ? > > > > > > Regards > > > Ignazio > > >
I am becoming crazy. Amphora agent in amphora instance search /etc/octavia/certs/client.pem but in /etc/octavia/certs there is client_ca.pem :-( Probably must I modify the amphora_agent section ? Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Well, more logs are always better ;)
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough?
Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: > PS > on the amphore instance there is nothng on port 9443 > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > in which project should octavia start its amphora instances? > > In this project you should create a suitable sg. > > Fabian > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > > Hello, I do not have an octavia project but only a service project. > > Octavia user belongs to admin and service project :-( > > Documentation does not seem clear about it > > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>> > <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>>> ha scritto: > > > > Hi, > > > > did you create the security group in the octavia
Am 08.01.19 um 13:05 schrieb Ignazio Cassano: project?
> > > > Can you see the sg if you login with the octavia credentials? > > > > > > Fabian > > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > > Hello everyone, > > > I installed octavia with centos 7 queens. > > > When I crreate a load balancer the amphora instance is not > created > > > because nova conductor cannot find the security
group
> specified in > > > octavia.conf. > > > I am sure the security group id is correct but the
nova
> condictor > > reports: > > > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > > 62ed0b7f336b479ebda6f8587c4dd608 > 2a33760772ab4b0381a27735443ec4bd - > > > default default] [instance: > 83f2fd75-8069-47a5-9572-8949ec9b5cee] > > Error > > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback > (most > > recent > > > call last):\n', u' File > > > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
line
> > 1828, > > > in _do_build_and_run_instance\n
filter_properties,
> > request_spec)\n', > > > u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > > line 2108, in _build_and_run_instance\n > > instance_uuid=instance.uuid, > > > reason=six.text_type(e))\n', u'RescheduledException: Build of > > instance > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
re-scheduled:
> Security > > group > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > > > Please, what is wrong ? > > > > > > Regards > > > Ignazio > > >
Hello, I solved firewall issues. Now controllers can access amphora instance on 9443 port but worker.log reports: Could not connect to instance. Retrying.: SSLError: ("bad handshake: SysCallError(-1, 'Unexpected EOF')",) :-( Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Well, more logs are always better ;)
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough?
Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: > PS > on the amphore instance there is nothng on port 9443 > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > in which project should octavia start its amphora instances? > > In this project you should create a suitable sg. > > Fabian > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > > Hello, I do not have an octavia project but only a service project. > > Octavia user belongs to admin and service project :-( > > Documentation does not seem clear about it > > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>> > <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>>> ha scritto: > > > > Hi, > > > > did you create the security group in the octavia
Am 08.01.19 um 13:05 schrieb Ignazio Cassano: project?
> > > > Can you see the sg if you login with the octavia credentials? > > > > > > Fabian > > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > > Hello everyone, > > > I installed octavia with centos 7 queens. > > > When I crreate a load balancer the amphora instance is not > created > > > because nova conductor cannot find the security
group
> specified in > > > octavia.conf. > > > I am sure the security group id is correct but the
nova
> condictor > > reports: > > > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > > 62ed0b7f336b479ebda6f8587c4dd608 > 2a33760772ab4b0381a27735443ec4bd - > > > default default] [instance: > 83f2fd75-8069-47a5-9572-8949ec9b5cee] > > Error > > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback > (most > > recent > > > call last):\n', u' File > > > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
line
> > 1828, > > > in _do_build_and_run_instance\n
filter_properties,
> > request_spec)\n', > > > u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > > line 2108, in _build_and_run_instance\n > > instance_uuid=instance.uuid, > > > reason=six.text_type(e))\n', u'RescheduledException: Build of > > instance > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
re-scheduled:
> Security > > group > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > > > Please, what is wrong ? > > > > > > Regards > > > Ignazio > > >
Solved hanshake error commenting in amphora_agent section the following lines: #agent_server_ca = /etc/octavia/certs/ca_01.pem #agent_server_cert = /etc/octavia/certs/client_ca.pem Il giorno mar 8 gen 2019 alle ore 15:03 Ignazio Cassano < ignaziocassano@gmail.com> ha scritto:
Hello, I solved firewall issues. Now controllers can access amphora instance on 9443 port but worker.log reports: Could not connect to instance. Retrying.: SSLError: ("bad handshake: SysCallError(-1, 'Unexpected EOF')",) :-(
Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann < dev.faz@gmail.com> ha scritto:
Well, more logs are always better ;)
Yes, I can connect to amphora instance for a short time because it is removed automatically. For the amphora instance which log do you need? For octavia worker log is enough?
Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: > PS > on the amphore instance there is nothng on port 9443 > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > in which project should octavia start its amphora instances? > > In this project you should create a suitable sg. > > Fabian > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > > Hello, I do not have an octavia project but only a service project. > > Octavia user belongs to admin and service project :-( > > Documentation does not seem clear about it > > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>> > <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>>> ha scritto: > > > > Hi, > > > > did you create the security group in the octavia
Am 08.01.19 um 13:05 schrieb Ignazio Cassano: project?
> > > > Can you see the sg if you login with the octavia credentials? > > > > > > Fabian > > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > > Hello everyone, > > > I installed octavia with centos 7 queens. > > > When I crreate a load balancer the amphora instance is not > created > > > because nova conductor cannot find the security
group
> specified in > > > octavia.conf. > > > I am sure the security group id is correct but the
nova
> condictor > > reports: > > > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > > 62ed0b7f336b479ebda6f8587c4dd608 > 2a33760772ab4b0381a27735443ec4bd - > > > default default] [instance: > 83f2fd75-8069-47a5-9572-8949ec9b5cee] > > Error > > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback > (most > > recent > > > call last):\n', u' File > > > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
line
> > 1828, > > > in _do_build_and_run_instance\n
filter_properties,
> > request_spec)\n', > > > u' File > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > > line 2108, in _build_and_run_instance\n > > instance_uuid=instance.uuid, > > > reason=six.text_type(e))\n', u'RescheduledException: Build of > > instance > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
re-scheduled:
> Security > > group > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > > > Please, what is wrong ? > > > > > > Regards > > > Ignazio > > >
OK I solved the certificate issue modifying the right section . Now amphora agent starts in the instance but controller canno reach it on 9443 port. I think this is a firewall problem on our network. I am going to check Il giorno mar 8 gen 2019 alle ore 12:32 Fabian Zimmermann <dev.faz@gmail.com> ha scritto:
Hi,
are you able to connect to the amphora via ssh?
Could you paste your octavia.log and the log of the amphora somewhere?
Fabian
PS on the amphore instance there is nothng on port 9443
Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann <dev.faz@gmail.com <mailto:dev.faz@gmail.com>> ha scritto:
Hi,
in which project should octavia start its amphora instances?
In this project you should create a suitable sg.
Fabian
Am 08.01.19 um 10:39 schrieb Ignazio Cassano: > Hello, I do not have an octavia project but only a service
Am 08.01.19 um 11:24 schrieb Ignazio Cassano: project.
> Octavia user belongs to admin and service project :-( > Documentation does not seem clear about it > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann > <dev.faz@gmail.com <mailto:dev.faz@gmail.com> <mailto:dev.faz@gmail.com <mailto:dev.faz@gmail.com>>> ha scritto: > > Hi, > > did you create the security group in the octavia project? > > Can you see the sg if you login with the octavia credentials? > > > Fabian > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano: > > Hello everyone, > > I installed octavia with centos 7 queens. > > When I crreate a load balancer the amphora instance is not created > > because nova conductor cannot find the security group specified in > > octavia.conf. > > I am sure the security group id is correct but the nova condictor > reports: > > > > 2019-01-08 09:06:06.803 11872 ERROR nova.scheduler.utils > > [req-75df2561-4bc3-4bde-86d0-40469058250c > > 62ed0b7f336b479ebda6f8587c4dd608 2a33760772ab4b0381a27735443ec4bd - > > default default] [instance: 83f2fd75-8069-47a5-9572-8949ec9b5cee] > Error > > from last host: tst2-kvm02 (node tst2-kvm02): [u'Traceback (most > recent > > call last):\n', u' File > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line > 1828, > > in _do_build_and_run_instance\n filter_properties, > request_spec)\n', > > u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", > > line 2108, in _build_and_run_instance\n > instance_uuid=instance.uuid, > > reason=six.text_type(e))\n', u'RescheduledException: Build
of
> instance > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was re-scheduled: Security > group > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n'] > > > > Please, what is wrong ? > > > > Regards > > Ignazio >
participants (2)
-
Fabian Zimmermann
-
Ignazio Cassano