openstack queens octavia security group not found
Ignazio Cassano
ignaziocassano at gmail.com
Tue Jan 8 13:06:36 UTC 2019
I am becoming crazy.
Amphora agent in amphora instance search /etc/octavia/certs/client.pem but
in /etc/octavia/certs there is client_ca.pem :-(
Probably must I modify the amphora_agent section ?
Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <dev.faz at gmail.com>
ha scritto:
> Well, more logs are always better ;)
>
> Am 08.01.19 um 13:05 schrieb Ignazio Cassano:
> > Yes, I can connect to amphora instance for a short time because it is
> > removed automatically.
> > For the amphora instance which log do you need?
> > For octavia worker log is enough?
> >
> > Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz at gmail.com
> > <mailto:dev.faz at gmail.com>> ha scritto:
> >
> > Hi,
> >
> > are you able to connect to the amphora via ssh?
> >
> > Could you paste your octavia.log and the log of the amphora
> somewhere?
> >
> > Fabian
> >
> > Am 08.01.19 um 11:24 schrieb Ignazio Cassano:
> > > PS
> > > on the amphore instance there is nothng on port 9443
> > >
> > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann
> > > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
> > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>> ha scritto:
> > >
> > > Hi,
> > >
> > > in which project should octavia start its amphora instances?
> > >
> > > In this project you should create a suitable sg.
> > >
> > > Fabian
> > >
> > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano:
> > > > Hello, I do not have an octavia project but only a service
> > project.
> > > > Octavia user belongs to admin and service project :-(
> > > > Documentation does not seem clear about it
> > > >
> > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann
> > > > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
> > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>
> > > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>
> > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>>> ha scritto:
> > > >
> > > > Hi,
> > > >
> > > > did you create the security group in the octavia
> project?
> > > >
> > > > Can you see the sg if you login with the octavia
> > credentials?
> > > >
> > > >
> > > > Fabian
> > > >
> > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano:
> > > > > Hello everyone,
> > > > > I installed octavia with centos 7 queens.
> > > > > When I crreate a load balancer the amphora instance
> > is not
> > > created
> > > > > because nova conductor cannot find the security
> group
> > > specified in
> > > > > octavia.conf.
> > > > > I am sure the security group id is correct but the
> nova
> > > condictor
> > > > reports:
> > > > >
> > > > > 2019-01-08 09:06:06.803 11872 ERROR
> > nova.scheduler.utils
> > > > > [req-75df2561-4bc3-4bde-86d0-40469058250c
> > > > > 62ed0b7f336b479ebda6f8587c4dd608
> > > 2a33760772ab4b0381a27735443ec4bd -
> > > > > default default] [instance:
> > > 83f2fd75-8069-47a5-9572-8949ec9b5cee]
> > > > Error
> > > > > from last host: tst2-kvm02 (node tst2-kvm02):
> > [u'Traceback
> > > (most
> > > > recent
> > > > > call last):\n', u' File
> > > > >
> > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
> line
> > > > 1828,
> > > > > in _do_build_and_run_instance\n
> filter_properties,
> > > > request_spec)\n',
> > > > > u' File
> > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
> > > > > line 2108, in _build_and_run_instance\n
> > > > instance_uuid=instance.uuid,
> > > > > reason=six.text_type(e))\n',
> > u'RescheduledException: Build of
> > > > instance
> > > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
> re-scheduled:
> > > Security
> > > > group
> > > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n']
> > > > >
> > > > > Please, what is wrong ?
> > > > >
> > > > > Regards
> > > > > Ignazio
> > > >
> > >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20190108/c1f22af6/attachment.html>
More information about the openstack-discuss
mailing list