[openstack-dev] Compute endpoint auth problem.
    Wainer, Gabriel (Brazil R&D-ECL) 
    gabriel.wainer at hp.com
       
    Thu Mar 21 13:45:35 UTC 2013
    
    
  
Hello folks,
I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.
I have two devstacks running and  I'm using  one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:
$ keystone endpoint-list
Id 		| 5824302b5b844e5a8e90b236c96fc3f4 
region		| RegionOne
publicURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
internalURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
adminURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
service_id	| 8ae8f03c2e1f452cb22e6a7acf70480f |
Id 		| 6a3e1123d2924048acec4bd06009413e 
region 		| RegionTwo 
publicURL 	| http://172.16.103.231:8774/v2/admin          
internalURL 	| http://172.16.103.231:8774/v2/admin           
adminURL 	| http://172.16.103.231:8774/v2/admin           
service_id 	| 8ae8f03c2e1f452cb22e6a7acf70480f |
So in this case the RegionOne endpoint works as seen below:
stack at regions:/opt/stack/devstack$ nova --os-region-name RegionOne image-list
+--------------------------------------+---------------------------------+--------+--------+
| ID                                   | Name                            | Status | Server |
+--------------------------------------+---------------------------------+--------+--------+
| 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec         | ACTIVE |        |
| 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel  | ACTIVE |        |
| 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE |        |
+--------------------------------------+---------------------------------+--------+--------+
But using the RegionTwo gives me a http 401:
stack at regions:/opt/stack/devstack$ nova --os-region-name RegionTwo image-list
ERROR: n/a (HTTP 401)
I noticed that the working endpoint is the one from the devstack install which I am using the keystone.
Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.
Thanks,
Gabriel.
    
    
More information about the OpenStack-dev
mailing list