[openstack-dev] Compute endpoint auth problem.

Wainer, Gabriel (Brazil R&D-ECL) gabriel.wainer at hp.com
Thu Mar 21 13:45:35 UTC 2013


Hello folks,

I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.

I have two devstacks running and  I'm using  one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:

$ keystone endpoint-list

Id 		| 5824302b5b844e5a8e90b236c96fc3f4 
region		| RegionOne
publicURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
internalURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
adminURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
service_id	| 8ae8f03c2e1f452cb22e6a7acf70480f |


Id 		| 6a3e1123d2924048acec4bd06009413e 
region 		| RegionTwo 
publicURL 	| http://172.16.103.231:8774/v2/admin          
internalURL 	| http://172.16.103.231:8774/v2/admin           
adminURL 	| http://172.16.103.231:8774/v2/admin           
service_id 	| 8ae8f03c2e1f452cb22e6a7acf70480f |

So in this case the RegionOne endpoint works as seen below:

stack at regions:/opt/stack/devstack$ nova --os-region-name RegionOne image-list
+--------------------------------------+---------------------------------+--------+--------+
| ID                                   | Name                            | Status | Server |
+--------------------------------------+---------------------------------+--------+--------+
| 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec         | ACTIVE |        |
| 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel  | ACTIVE |        |
| 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE |        |
+--------------------------------------+---------------------------------+--------+--------+

But using the RegionTwo gives me a http 401:

stack at regions:/opt/stack/devstack$ nova --os-region-name RegionTwo image-list
ERROR: n/a (HTTP 401)


I noticed that the working endpoint is the one from the devstack install which I am using the keystone.

Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.

Thanks,
Gabriel.



More information about the OpenStack-dev mailing list