Open Stack

By using the ssl_overcloud flag in your configuration and setting it to
true.

On 6 Dec 2017 17:33, "Moshe Levi" <moshele at mellanox.com> wrote:

> How do I tell quickstart to generate certs and enable tls?
>
>
>
> *From:* Juan Antonio Osorio [mailto:jaosorior at gmail.com]
> *Sent:* Wednesday, December 6, 2017 5:24 PM
> *To:* OpenStack Development Mailing List (not for usage questions) <
> openstack-dev at lists.openstack.org>
> *Subject:* Re: [openstack-dev] [tripleo] overcloud keystone error "Could
> not determine a suitable URL for the plugin"
>
>
>
>
>
>
>
> On 6 Dec 2017 16:58, "Moshe Levi" <moshele at mellanox.com> wrote:
>
> I have the access to 10.0.0.0 network
>
> I remove the
>
> -e /home/stack/enable-tls.yaml -e ~/heat-templates/environments/tls-endpoints-public-ip.yaml
> -e /home/stack/inject-trust-anchor.yaml
>
> Form the ./overcloud-deploy.sh and now it working
>
> The issue you posted wasn't a TLS issue, but it might be that it was being
> hidden by nova. You could truly to access keystone directly and that will
> be more revealing.
>
>
>
> My /home/stack/enable-tls.yaml and /home/stack/inject-trust-anchor.yaml
> were taken from
>
> wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/
> master/test-environments/enable-tls.yaml
> <https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Fenable-tls.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=MBqec8H5KjiEIPJDT%2F1UxxBntYERIfT6EykQNKCIaIA%3D&reserved=0>
>
> wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/
> master/test-environments/inject-trust-anchor.yaml
> <https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Finject-trust-anchor.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=SBRviDdKz1OGlrfqyDHVGPWvyKwz4eLxB%2BuxfCKIEj0%3D&reserved=0>
>
> This will only work if you use the exact same fixed IP as we use in CI. So
> i don't recommend using that. Rather generate your own certs or tell
> quickstart to do it for you by using the appropriate flag.
>
>
>
> So maybe the is an issue with tripleo or just these config files
>
>
>
> *From:* Juan Antonio Osorio [mailto:jaosorior at gmail.com]
> *Sent:* Wednesday, December 6, 2017 12:36 PM
> *To:* OpenStack Development Mailing List (not for usage questions) <
> openstack-dev at lists.openstack.org>
> *Subject:* Re: [openstack-dev] [tripleo] overcloud keystone error "Could
> not determine a suitable URL for the plugin"
>
>
>
> From the node you're running the nova command, do you have access to the
> 10.0.0.0 network (external)?
>
>
>
> In virtual environments, quickstart will leave an
> overcloud-prep-network.sh script that will create a vlan interface that
> gives the undercloud access to that network. So, if it's a virtual
> environment and you're running that command from the undercloud (which from
> the log you sent it seems that's the case) you need to run that. Note that
> you need to run that every time you update your undercloud.
>
>
>
> BR
>
>
>
>
>
> On 6 Dec 2017 09:06, "Moshe Levi" <moshele at mellanox.com> wrote:
>
> Hi all,
>
>
>
> We deploy tripleo master using quickstart.
>
> We this delorean repo:
>
> name=delorean
>
> baseurl=https://trunk.rdoproject.org/centos7-master/ac/82/
> ac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7/
> <https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftrunk.rdoproject.org%2Fcentos7-master%2Fac%2F82%2Fac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=R6s6CvAGGAB97GYgCsCsT%2BxU0PQ1fZ89xAuUQFM5tL8%3D&reserved=0>
>
>
>
> The undercloud and overcloud deployment were successfully, but we I try to
> run command on the overcloud
>
> I am getting the  keystone error "Could not determine a suitable URL for
> the plugin"
>
> See nova-list with debug info [1]
>
> Do you know how to resolve this? Help in troubleshooting this issue will
> be appreciated.
>
>
>
>
>
> [1]  http://paste.openstack.org/show/628240/
> <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpaste.openstack.org%2Fshow%2F628240%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=o4nTXxk826W8ys1W1DvZUelSLS5uTT9McwazErh3wOY%3D&reserved=0>
>
>
>
>
>
>
>
>
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=Zv8CbJlDuv3ZEiLbp%2BHX%2FQEqTDd%2Fndh4wd700hNdW8I%3D&reserved=0>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=T7Tc%2FtBAv1zl4X3TbTJIqQQ5ZW2PtSrvxVACYChEa40%3D&reserved=0>
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=7CRrtWDEFDtfqgTVxlVueVp8G5im5J6sdSGXs6%2BDzQE%3D&reserved=0>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=hjUEAdmU%2Bv%2BXqrVgRRZ2hFoCgmu9ZjDJ1Qkry%2FV3YI8%3D&reserved=0>
>
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20171206/6002d751/attachment.html>