[openstack-dev] Compute endpoint auth problem.
Wainer, Gabriel (Brazil R&D-ECL)
gabriel.wainer at hp.com
Thu Mar 21 13:45:35 UTC 2013
Hello folks,
I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.
I have two devstacks running and I'm using one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:
$ keystone endpoint-list
Id | 5824302b5b844e5a8e90b236c96fc3f4
region | RegionOne
publicURL | http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s
internalURL | http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s
adminURL | http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s
service_id | 8ae8f03c2e1f452cb22e6a7acf70480f |
Id | 6a3e1123d2924048acec4bd06009413e
region | RegionTwo
publicURL | http://172.16.103.231:8774/v2/admin
internalURL | http://172.16.103.231:8774/v2/admin
adminURL | http://172.16.103.231:8774/v2/admin
service_id | 8ae8f03c2e1f452cb22e6a7acf70480f |
So in this case the RegionOne endpoint works as seen below:
stack at regions:/opt/stack/devstack$ nova --os-region-name RegionOne image-list
+--------------------------------------+---------------------------------+--------+--------+
| ID | Name | Status | Server |
+--------------------------------------+---------------------------------+--------+--------+
| 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec | ACTIVE | |
| 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel | ACTIVE | |
| 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE | |
+--------------------------------------+---------------------------------+--------+--------+
But using the RegionTwo gives me a http 401:
stack at regions:/opt/stack/devstack$ nova --os-region-name RegionTwo image-list
ERROR: n/a (HTTP 401)
I noticed that the working endpoint is the one from the devstack install which I am using the keystone.
Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.
Thanks,
Gabriel.
More information about the OpenStack-dev
mailing list