Open Stack

How do I tell quickstart to generate certs and enable tls?

From: Juan Antonio Osorio [mailto:jaosorior at gmail.com]
Sent: Wednesday, December 6, 2017 5:24 PM
To: OpenStack Development Mailing List (not for usage questions) <openstack-dev at lists.openstack.org>
Subject: Re: [openstack-dev] [tripleo] overcloud keystone error "Could not determine a suitable URL for the plugin"



On 6 Dec 2017 16:58, "Moshe Levi" <moshele at mellanox.com<mailto:moshele at mellanox.com>> wrote:
I have the access to 10.0.0.0 network
I remove the
-e /home/stack/enable-tls.yaml -e ~/heat-templates/environments/tls-endpoints-public-ip.yaml -e /home/stack/inject-trust-anchor.yaml
Form the ./overcloud-deploy.sh and now it working
The issue you posted wasn't a TLS issue, but it might be that it was being hidden by nova. You could truly to access keystone directly and that will be more revealing.

My /home/stack/enable-tls.yaml and /home/stack/inject-trust-anchor.yaml  were taken from

wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/master/test-environments/enable-tls.yaml<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Fenable-tls.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=MBqec8H5KjiEIPJDT%2F1UxxBntYERIfT6EykQNKCIaIA%3D&reserved=0>

wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/master/test-environments/inject-trust-anchor.yaml<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Finject-trust-anchor.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=SBRviDdKz1OGlrfqyDHVGPWvyKwz4eLxB%2BuxfCKIEj0%3D&reserved=0>
This will only work if you use the exact same fixed IP as we use in CI. So i don't recommend using that. Rather generate your own certs or tell quickstart to do it for you by using the appropriate flag.

So maybe the is an issue with tripleo or just these config files

From: Juan Antonio Osorio [mailto:jaosorior at gmail.com<mailto:jaosorior at gmail.com>]
Sent: Wednesday, December 6, 2017 12:36 PM
To: OpenStack Development Mailing List (not for usage questions) <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>
Subject: Re: [openstack-dev] [tripleo] overcloud keystone error "Could not determine a suitable URL for the plugin"

From the node you're running the nova command, do you have access to the 10.0.0.0 network (external)?

In virtual environments, quickstart will leave an overcloud-prep-network.sh script that will create a vlan interface that gives the undercloud access to that network. So, if it's a virtual environment and you're running that command from the undercloud (which from the log you sent it seems that's the case) you need to run that. Note that you need to run that every time you update your undercloud.

BR


On 6 Dec 2017 09:06, "Moshe Levi" <moshele at mellanox.com<mailto:moshele at mellanox.com>> wrote:
Hi all,

We deploy tripleo master using quickstart.
We this delorean repo:
name=delorean
baseurl=https://trunk.rdoproject.org/centos7-master/ac/82/ac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7/<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftrunk.rdoproject.org%2Fcentos7-master%2Fac%2F82%2Fac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=R6s6CvAGGAB97GYgCsCsT%2BxU0PQ1fZ89xAuUQFM5tL8%3D&reserved=0>

The undercloud and overcloud deployment were successfully, but we I try to run command on the overcloud
I am getting the  keystone error "Could not determine a suitable URL for the plugin"
See nova-list with debug info [1]
Do you know how to resolve this? Help in troubleshooting this issue will be appreciated.


[1]  http://paste.openstack.org/show/628240/<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpaste.openstack.org%2Fshow%2F628240%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=o4nTXxk826W8ys1W1DvZUelSLS5uTT9McwazErh3wOY%3D&reserved=0>





__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=Zv8CbJlDuv3ZEiLbp%2BHX%2FQEqTDd%2Fndh4wd700hNdW8I%3D&reserved=0>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=T7Tc%2FtBAv1zl4X3TbTJIqQQ5ZW2PtSrvxVACYChEa40%3D&reserved=0>

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=7CRrtWDEFDtfqgTVxlVueVp8G5im5J6sdSGXs6%2BDzQE%3D&reserved=0>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=hjUEAdmU%2Bv%2BXqrVgRRZ2hFoCgmu9ZjDJ1Qkry%2FV3YI8%3D&reserved=0>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20171206/59e8419e/attachment.html>