[keystone] [keystonemiddleware] [neutron] [keystone_authtoken] auth_url not available via oslo_config
Justin Cattle
j at ocado.com
Thu Feb 20 20:55:48 UTC 2020
Hi,
I'm reaching out for help with a strange issue I've found. Running
openstack queens, on ubuntu xenial.
We have a bunch of different sites with the same set-up, recently upgraded
from mitaka to queens. However, on this one site, after the upgrade, we
cannot start neutron-server. The reason is, that the ml2 plugin throws an
error because it can't find auth_url from the keystone_authtoken section of
neutron.conf. However, it is there in the file.
The ml2 plugin is calico, it fails with this error:
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico [-] Exception in
function %s: TypeError: expected string or buffer
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico Traceback (most
recent call last):
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico File
"/usr/lib/python2.7/dist-packages/networking_calico/logutils.py", line 21,
in wrapped
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico return
fn(*args, **kwargs)
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico File
"/usr/lib/python2.7/dist-packages/networking_calico/plugins/ml2/drivers/calico/mech_calico.py",
line 347, in _post_fork_init
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico
auth_url=re.sub(r'/v3/?$', '', auth_url) +
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico File
"/usr/lib/python2.7/re.py", line 155, in sub
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico return
_compile(pattern, flags).sub(repl, string, count)
2020-02-20 20:14:22.495 2964911 ERROR
networking_calico.plugins.ml2.drivers.calico.mech_calico TypeError:
expected string or buffer
When you look at the code, this is because neither auth_url or is found
in cfg.CONF.keystone_authtoken. The config defintely exists.
I have copied the neutron.conf config from a working site, same error. I
have copied the entire /etc/neutron directory from a working site, same
error.
I have check with strace, and /etc/neutron/neutron.conf is the
only neutron.conf being parsed.
Here is the keystone_authtoken part of the config:
[keystone_authtoken]
auth_uri=https://api-srv-cloud.host.domain:5000
region_name=openstack
memcached_servers=1.2.3.4:11211
auth_type=password
auth_url=https://api-srv-cloud.host.domain:5000
username=neutron
password=xxxxxxxxxxxxxxxxxxxxxxxxx
user_domain_name=Default
project_name=services
project_domain_name=Default
I'm struggling to understand how the auth_url config is really registered
in via oslo_config.
I found an excellent exchagne on the ML here:
https://openstack.nimeyo.com/115150/openstack-keystone-devstack-confusion-auth_url-middleware
This seems to indicate auth_url is only registered if a particular auth
plugin requires it. But I can't find the plugin code that does it, so I'm
not sure how/where to debug it properly.
If anyone has any ideas, I would really appreciate some input or pointers.
Thanks!
Cheers,
Just
--
Notice:
This email is confidential and may contain copyright material of
members of the Ocado Group. Opinions and views expressed in this message
may not necessarily reflect the opinions and views of the members of the
Ocado Group.
If you are not the intended recipient, please notify us
immediately and delete all copies of this message. Please note that it is
your responsibility to scan this message for viruses.
References to the
"Ocado Group" are to Ocado Group plc (registered in England and Wales with
number 7098618) and its subsidiary undertakings (as that expression is
defined in the Companies Act 2006) from time to time. The registered office
of Ocado Group plc is Buildings One & Two, Trident Place, Mosquito Way,
Hatfield, Hertfordshire, AL10 9UL.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20200220/9ac888f8/attachment-0001.html>
More information about the openstack-discuss
mailing list