openstack queens octavia security group not found
Ignazio Cassano
ignaziocassano at gmail.com
Tue Jan 8 14:17:57 UTC 2019
Solved hanshake error commenting in amphora_agent section the following
lines:
#agent_server_ca = /etc/octavia/certs/ca_01.pem
#agent_server_cert = /etc/octavia/certs/client_ca.pem
Il giorno mar 8 gen 2019 alle ore 15:03 Ignazio Cassano <
ignaziocassano at gmail.com> ha scritto:
> Hello,
> I solved firewall issues.
> Now controllers can access amphora instance on 9443 port but worker.log
> reports:
> Could not connect to instance. Retrying.: SSLError: ("bad handshake:
> SysCallError(-1, 'Unexpected EOF')",)
> :-(
>
>
> Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <
> dev.faz at gmail.com> ha scritto:
>
>> Well, more logs are always better ;)
>>
>> Am 08.01.19 um 13:05 schrieb Ignazio Cassano:
>> > Yes, I can connect to amphora instance for a short time because it is
>> > removed automatically.
>> > For the amphora instance which log do you need?
>> > For octavia worker log is enough?
>> >
>> > Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz at gmail.com
>> > <mailto:dev.faz at gmail.com>> ha scritto:
>> >
>> > Hi,
>> >
>> > are you able to connect to the amphora via ssh?
>> >
>> > Could you paste your octavia.log and the log of the amphora
>> somewhere?
>> >
>> > Fabian
>> >
>> > Am 08.01.19 um 11:24 schrieb Ignazio Cassano:
>> > > PS
>> > > on the amphore instance there is nothng on port 9443
>> > >
>> > > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann
>> > > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
>> > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>> ha scritto:
>> > >
>> > > Hi,
>> > >
>> > > in which project should octavia start its amphora instances?
>> > >
>> > > In this project you should create a suitable sg.
>> > >
>> > > Fabian
>> > >
>> > > Am 08.01.19 um 10:39 schrieb Ignazio Cassano:
>> > > > Hello, I do not have an octavia project but only a service
>> > project.
>> > > > Octavia user belongs to admin and service project :-(
>> > > > Documentation does not seem clear about it
>> > > >
>> > > > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann
>> > > > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
>> > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>
>> > > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>
>> > <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>>> ha scritto:
>> > > >
>> > > > Hi,
>> > > >
>> > > > did you create the security group in the octavia
>> project?
>> > > >
>> > > > Can you see the sg if you login with the octavia
>> > credentials?
>> > > >
>> > > >
>> > > > Fabian
>> > > >
>> > > > Am 08.01.19 um 09:11 schrieb Ignazio Cassano:
>> > > > > Hello everyone,
>> > > > > I installed octavia with centos 7 queens.
>> > > > > When I crreate a load balancer the amphora instance
>> > is not
>> > > created
>> > > > > because nova conductor cannot find the security
>> group
>> > > specified in
>> > > > > octavia.conf.
>> > > > > I am sure the security group id is correct but the
>> nova
>> > > condictor
>> > > > reports:
>> > > > >
>> > > > > 2019-01-08 09:06:06.803 11872 ERROR
>> > nova.scheduler.utils
>> > > > > [req-75df2561-4bc3-4bde-86d0-40469058250c
>> > > > > 62ed0b7f336b479ebda6f8587c4dd608
>> > > 2a33760772ab4b0381a27735443ec4bd -
>> > > > > default default] [instance:
>> > > 83f2fd75-8069-47a5-9572-8949ec9b5cee]
>> > > > Error
>> > > > > from last host: tst2-kvm02 (node tst2-kvm02):
>> > [u'Traceback
>> > > (most
>> > > > recent
>> > > > > call last):\n', u' File
>> > > > >
>> > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
>> line
>> > > > 1828,
>> > > > > in _do_build_and_run_instance\n
>> filter_properties,
>> > > > request_spec)\n',
>> > > > > u' File
>> > > "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
>> > > > > line 2108, in _build_and_run_instance\n
>> > > > instance_uuid=instance.uuid,
>> > > > > reason=six.text_type(e))\n',
>> > u'RescheduledException: Build of
>> > > > instance
>> > > > > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
>> re-scheduled:
>> > > Security
>> > > > group
>> > > > > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n']
>> > > > >
>> > > > > Please, what is wrong ?
>> > > > >
>> > > > > Regards
>> > > > > Ignazio
>> > > >
>> > >
>> >
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20190108/daa6a525/attachment-0001.html>
More information about the openstack-discuss
mailing list