openstack queens octavia security group not found

Ignazio Cassano ignaziocassano at gmail.com
Tue Jan 8 14:17:57 UTC 2019


Solved hanshake error commenting in amphora_agent section the following
lines:
#agent_server_ca = /etc/octavia/certs/ca_01.pem
#agent_server_cert = /etc/octavia/certs/client_ca.pem



Il giorno mar 8 gen 2019 alle ore 15:03 Ignazio Cassano <
ignaziocassano at gmail.com> ha scritto:

> Hello,
> I solved firewall issues.
> Now controllers can access amphora instance on 9443 port but worker.log
> reports:
> Could not connect to instance. Retrying.: SSLError: ("bad handshake:
> SysCallError(-1, 'Unexpected EOF')",)
> :-(
>
>
> Il giorno mar 8 gen 2019 alle ore 13:06 Fabian Zimmermann <
> dev.faz at gmail.com> ha scritto:
>
>> Well, more logs are always better ;)
>>
>> Am 08.01.19 um 13:05 schrieb Ignazio Cassano:
>> > Yes, I can connect to amphora instance for a short time because it is
>> > removed automatically.
>> > For the amphora instance which log do you need?
>> > For octavia worker log is enough?
>> >
>> > Il giorno Mar 8 Gen 2019 12:32 Fabian Zimmermann <dev.faz at gmail.com
>> > <mailto:dev.faz at gmail.com>> ha scritto:
>> >
>> >     Hi,
>> >
>> >     are you able to connect to the amphora via ssh?
>> >
>> >     Could you paste your octavia.log and the log of the amphora
>> somewhere?
>> >
>> >        Fabian
>> >
>> >     Am 08.01.19 um 11:24 schrieb Ignazio Cassano:
>> >      > PS
>> >      > on the amphore instance there is nothng on port 9443
>> >      >
>> >      > Il giorno mar 8 gen 2019 alle ore 10:44 Fabian Zimmermann
>> >      > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
>> >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>> ha scritto:
>> >      >
>> >      >     Hi,
>> >      >
>> >      >     in which project should octavia start its amphora instances?
>> >      >
>> >      >     In this project you should create a suitable sg.
>> >      >
>> >      >        Fabian
>> >      >
>> >      >     Am 08.01.19 um 10:39 schrieb Ignazio Cassano:
>> >      >      > Hello, I do not have an octavia project but only a service
>> >     project.
>> >      >      > Octavia user belongs to admin and service project :-(
>> >      >      > Documentation  does not seem clear about it
>> >      >      >
>> >      >      > Il giorno mar 8 gen 2019 alle ore 10:30 Fabian Zimmermann
>> >      >      > <dev.faz at gmail.com <mailto:dev.faz at gmail.com>
>> >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>
>> >      >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>
>> >     <mailto:dev.faz at gmail.com <mailto:dev.faz at gmail.com>>>> ha scritto:
>> >      >      >
>> >      >      >     Hi,
>> >      >      >
>> >      >      >     did you create the security group in the octavia
>> project?
>> >      >      >
>> >      >      >     Can you see the sg if you login with the octavia
>> >     credentials?
>> >      >      >
>> >      >      >
>> >      >      >        Fabian
>> >      >      >
>> >      >      >     Am 08.01.19 um 09:11 schrieb Ignazio Cassano:
>> >      >      >      > Hello everyone,
>> >      >      >      > I installed octavia with centos 7 queens.
>> >      >      >      > When I crreate a load balancer the amphora instance
>> >     is not
>> >      >     created
>> >      >      >      > because nova conductor cannot find the security
>> group
>> >      >     specified in
>> >      >      >      > octavia.conf.
>> >      >      >      > I am sure the security group id is correct but the
>> nova
>> >      >     condictor
>> >      >      >     reports:
>> >      >      >      >
>> >      >      >      > 2019-01-08 09:06:06.803 11872 ERROR
>> >     nova.scheduler.utils
>> >      >      >      > [req-75df2561-4bc3-4bde-86d0-40469058250c
>> >      >      >      > 62ed0b7f336b479ebda6f8587c4dd608
>> >      >     2a33760772ab4b0381a27735443ec4bd -
>> >      >      >      > default default] [instance:
>> >      >     83f2fd75-8069-47a5-9572-8949ec9b5cee]
>> >      >      >     Error
>> >      >      >      > from last host: tst2-kvm02 (node tst2-kvm02):
>> >     [u'Traceback
>> >      >     (most
>> >      >      >     recent
>> >      >      >      > call last):\n', u'  File
>> >      >      >      >
>> >      >     "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
>> line
>> >      >      >     1828,
>> >      >      >      > in _do_build_and_run_instance\n
>> filter_properties,
>> >      >      >     request_spec)\n',
>> >      >      >      > u'  File
>> >      >     "/usr/lib/python2.7/site-packages/nova/compute/manager.py",
>> >      >      >      > line 2108, in _build_and_run_instance\n
>> >      >      >     instance_uuid=instance.uuid,
>> >      >      >      > reason=six.text_type(e))\n',
>> >     u'RescheduledException: Build of
>> >      >      >     instance
>> >      >      >      > 83f2fd75-8069-47a5-9572-8949ec9b5cee was
>> re-scheduled:
>> >      >     Security
>> >      >      >     group
>> >      >      >      > fdd1ab71-bcd2-4b65-b5f2-f4c110b65602 not found.\n']
>> >      >      >      >
>> >      >      >      > Please, what is wrong ?
>> >      >      >      >
>> >      >      >      > Regards
>> >      >      >      > Ignazio
>> >      >      >
>> >      >
>> >
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20190108/daa6a525/attachment-0001.html>


More information about the openstack-discuss mailing list