[openstack-dev] Compute endpoint auth problem.
Vishvananda Ishaya
vishvananda at gmail.com
Thu Mar 21 15:55:29 UTC 2013
Your endpoint is wrong in region two.
It looks like you hardcoded admin as the tenant_id in region two which is never correct. Tenant_id
in keystone is usually a long uuid string without dashes.
You likely need to replace the '8774' with $(compute_port)s and the 'admin' with '$(tenant_id)s'
Vish
On Mar 21, 2013, at 6:45 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer at hp.com> wrote:
> Hello folks,
>
> I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.
>
> I have two devstacks running and I'm using one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:
>
> $ keystone endpoint-list
>
> Id | 5824302b5b844e5a8e90b236c96fc3f4
> region | RegionOne
> publicURL | http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s
> internalURL | http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s
> adminURL | http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s
> service_id | 8ae8f03c2e1f452cb22e6a7acf70480f |
>
>
> Id | 6a3e1123d2924048acec4bd06009413e
> region | RegionTwo
> publicURL | http://172.16.103.231:8774/v2/admin
> internalURL | http://172.16.103.231:8774/v2/admin
> adminURL | http://172.16.103.231:8774/v2/admin
> service_id | 8ae8f03c2e1f452cb22e6a7acf70480f |
>
> So in this case the RegionOne endpoint works as seen below:
>
> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionOne image-list
> +--------------------------------------+---------------------------------+--------+--------+
> | ID | Name | Status | Server |
> +--------------------------------------+---------------------------------+--------+--------+
> | 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec | ACTIVE | |
> | 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel | ACTIVE | |
> | 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE | |
> +--------------------------------------+---------------------------------+--------+--------+
>
> But using the RegionTwo gives me a http 401:
>
> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionTwo image-list
> ERROR: n/a (HTTP 401)
>
>
> I noticed that the working endpoint is the one from the devstack install which I am using the keystone.
>
> Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.
>
> Thanks,
> Gabriel.
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
More information about the OpenStack-dev
mailing list