openstack queens octavia security group not found

Ignazio Cassano ignaziocassano at gmail.com
Tue Jan 8 12:42:59 UTC 2019


Doing a journactl -u on amphora instance it gives:

gen 08 12:40:12 amphora-1e35a2d5-c3ab-4016-baf6-e6bf1dd061ac.novalocal
amphora-agent[2884]: 2019-01-08 12:40:12.013 2884 ERROR octavia     raise
ValueError('certfile "%s" does not exist' % conf.certfile)
gen 08 12:40:12 amphora-1e35a2d5-c3ab-4016-baf6-e6bf1dd061ac.novalocal
amphora-agent[2884]: 2019-01-08 12:40:12.013 2884 ERROR octavia ValueError:
certfile "/etc/octavia/certs/client.pem" does not exist

Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <dev.faz at gmail.com>
ha scritto:

> Well, more logs are always better ;)
>
> Am 08.01.19 um 13:05 schrieb Ignazio Cassano:
> > Yes, I can connect to amphora instance for a short time because it is
> > removed automatically.
> > For the amphora instance which log do you need?
> > For octavia worker log is enough?
> >
> > Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz at gmail.com
> > <mailto:dev.faz at gmail.com>> ha scritto:
> >
> >     Hi,
> >
> >     are you able to connect to the amphora via ssh?
> >
> >     Could you paste your octavia.log and the log of the amphora
> somewhere?
> >
> >        Fabian
> >
> >     Am 08.01.19 um 11:24 schrieb Ignazio Cassano:
> >      > PS
> >      > on the amphore instance there is nothng on port 9443
> >      >
> >      > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann
> >      > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
> >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>> ha scritto:
> >      >
> >      >     Hi,
> >      >
> >      >     in which project should octavia start its amphora instances?
> >      >
> >      >     In this project you should create a suitable sg.
> >      >
> >      >        Fabian
> >      >
> >      >     Am 08.01.19 um 10:39 schrieb Ignazio Cassano:
> >      >      > Hello, I do not have an octavia project but only a service
> >     project.
> >      >      > Octavia user belongs to admin and service project :-(
> >      >      > Documentation  does not seem clear about it
> >      >      >
> >      >      > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann
> >      >      > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
> >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>
> >      >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>
> >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>>> ha scritto:
> >      >      >
> >      >      >     Hi,
> >      >      >
> >      >      >     did you create the security group in the octavia
> project?
> >      >      >
> >      >      >     Can you see the sg if you login with the octavia
> >     credentials?
> >      >      >
> >      >      >
> >      >      >        Fabian
> >      >      >
> >      >      >     Am 08.01.19 um 09:11 schrieb Ignazio Cassano:
> >      >      >      > Hello everyone,
> >      >      >      > I installed octavia with centos 7 queens.
> >      >      >      > When I crreate a load balancer the amphora instance
> >     is not
> >      >     created
> >      >      >      > because nova conductor cannot find the security
> group
> >      >     specified in
> >      >      >      > octavia.conf.
> >      >      >      > I am sure the security group id is correct but the
> nova
> >      >     condictor
> >      >      >     reports:
> >      >      >      >
> >      >      >      > 2019-01-08 09:06:06.803 11872 ERROR
> >     nova.scheduler.utils
> >      >      >      > [req-75df2561-4bc3-4bde-86d0-40469058250c
> >      >      >      > 62ed0b7f336b479ebda6f8587c4dd608
> >      >     2a33760772ab4b0381a27735443ec4bd -
> >      >      >      > default default] [instance:
> >      >     83f2fd75-8069-47a5-9572-8949ec9b5cee]
> >      >      >     Error
> >      >      >      > from last host: tst2-kvm02 (node tst2-kvm02):
> >     [u'Traceback
> >      >     (most
> >      >      >     recent
> >      >      >      > call last):\n', u'  File
> >      >      >      >
> >      >     "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
> line
> >      >      >     1828,
> >      >      >      > in _do_build_and_run_instance\n
> filter_properties,
> >      >      >     request_spec)\n',
> >      >      >      > u'  File
> >      >     "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
> >      >      >      > line 2108, in _build_and_run_instance\n
> >      >      >     instance_uuid=instance.uuid,
> >      >      >      > reason=six.text_type(e))\n',
> >     u'RescheduledException: Build of
> >      >      >     instance
> >      >      >      > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
> re-scheduled:
> >      >     Security
> >      >      >     group
> >      >      >      > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n']
> >      >      >      >
> >      >      >      > Please, what is wrong ?
> >      >      >      >
> >      >      >      > Regards
> >      >      >      > Ignazio
> >      >      >
> >      >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20190108/ad773024/attachment.html>


More information about the openstack-discuss mailing list