<div dir="ltr">Following my problem, it was missing FQDN. Now everything is working fine. Thanks for the help. <div><br></div><div>kolla_internal_vip_address: "10.73.0.180"<br>kolla_external_vip_address: "{{ kolla_internal_vip_address }}"<br>kolla_external_fqdn: "<a href="http://openstack-kolla.mycompany.com">openstack-kolla.mycompany.com</a>"<br>kolla_internal_fqdn: "<a href="http://openstack-kolla.mycompany.com">openstack-kolla.mycompany.com</a>"<br></div><div><br></div><div>kolla_enable_tls_internal: "yes"<br>kolla_certificates_dir: "/etc/kolla/certificates"<br>kolla_internal_fqdn_cert: "{{ kolla_certificates_dir }}/mycompany.pem"<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Sep 29, 2022 at 5:38 AM Satish Patel <<a href="mailto:satish.txt@gmail.com">satish.txt@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Looking into nova-compute logs looks like it's trying to talk to keystone using http instead of https. Do i need to tell exclusive somewhere to use SSL for keystone service or it should be default when you turn on SSL?<div><br></div><div>2022-09-29 11:29:09.562 7 ERROR nova.compute.manager keystoneauth1.exceptions.connection.ConnectFailure: Unable to establish connection to <a href="http://10.73.0.180:8780/resource_providers?in_tree=a3163bbf-a97b-4162-89c7-5adfbae4febd" target="_blank">http://10.73.0.180:8780/resource_providers?in_tree=a3163bbf-a97b-4162-89c7-5adfbae4febd</a>: ('Connection aborted.', RemoteDisconnected('Remote end closed connection without response'))<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Sep 29, 2022 at 5:32 AM Satish Patel <<a href="mailto:satish.txt@gmail.com" target="_blank">satish.txt@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Radosław,<div><br></div><div>Following error encounter if i turn on above 3 lines to implement SSL. if i remove then the error disappears. <a href="https://paste.opendev.org/show/bOqOAQyqni0nJcWbUuv9/" target="_blank">https://paste.opendev.org/show/bOqOAQyqni0nJcWbUuv9/</a> </div><div><br></div><div><div style="background:rgb(240,240,240);color:rgb(0,0,0);font-family:"Trebuchet MS",sans-serif;font-size:15px"><pre style="line-height:16.25px;margin-top:0px;margin-bottom:0px;padding:5px 0px;font-family:"Bitstream Vera Sans Mono",monospace;font-size:13px">TASK [nova-cell : Waiting for nova-compute services to register themselves] ******************************************************************************************************
skipping: [kolla-comp-2]
skipping: [kolla-infra-1]
fatal: [kolla-comp-1 -> kolla-infra-1]: FAILED! => {"msg": "The conditional check '(nova_compute_services.stdout | from_json | map(attribute='Host') | list) is superset(expected_compute_service_hosts)' failed. The error was: Expecting value: line 1 column 1 (char 0)"}
TASK [nova-cell : Fail if nova-compute service failed to register] ***************************************************************************************************************
fatal: [kolla-comp-2]: FAILED! => {"msg": "The conditional check 'any_failed_services or (nova_compute_registration_fatal | bool and\n failed_compute_service_hosts | length > 0)' failed. The error was: error while evaluating conditional (any_failed_services or (nova_compute_registration_fatal | bool and\n failed_compute_service_hosts | length > 0)): {{ ansible_facts.nodename in failed_compute_service_hosts or\n (ansible_facts.hostname ~ \"-ironic\") in failed_compute_service_hosts }}: {{ expected_compute_service_hosts | difference(nova_compute_service_hosts) | list }}: {{ hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n from_json |\n map(attribute='Host') |\n list }}: Unable to look up a name or access an attribute in template string ({{ hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n from_json |\n map(attribute='Host') |\n list }}).\nMake sure your variable name does not contain invalid characters like '-': the JSON object must be str, bytes or bytearray, not AnsibleUndefined\n\nThe error appears to be in '/root/venv-kolla/share/kolla-ansible/ansible/roles/nova-cell/tasks/wait_discover_computes.yml': line 46, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n # that failed to register.\n - name: Fail if nova-compute service failed to register\n ^ here\n"}
fatal: [kolla-infra-1]: FAILED! => {"msg": "The conditional check 'any_failed_services or (nova_compute_registration_fatal | bool and\n failed_compute_service_hosts | length > 0)' failed. The error was: error while evaluating conditional (any_failed_services or (nova_compute_registration_fatal | bool and\n failed_compute_service_hosts | length > 0)): {{ ansible_facts.nodename in failed_compute_service_hosts or\n (ansible_facts.hostname ~ \"-ironic\") in failed_compute_service_hosts }}: {{ expected_compute_service_hosts | difference(nova_compute_service_hosts) | list }}: {{ hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n from_json |\n map(attribute='Host') |\n list }}: Unable to look up a name or access an attribute in template string ({{ hostvars[all_computes_in_batch[0]].nova_compute_services.stdout |\n from_json |\n map(attribute='Host') |\n list }}).\nMake sure your variable name does not contain invalid characters like '-': the JSON object must be str, bytes or bytearray, not AnsibleUndefined\n\nThe error appears to be in '/root/venv-kolla/share/kolla-ansible/ansible/roles/nova-cell/tasks/wait_discover_computes.yml': line 46, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n # that failed to register.\n - name: Fail if nova-compute service failed to register\n ^ here\n"}
PLAY RECAP ***********************************************************************************************************************************************************************
kolla-comp-1 : ok=46 changed=9 unreachable=0 failed=1 skipped=14 rescued=0 ignored=0
kolla-comp-2 : ok=42 changed=9 unreachable=0 failed=1 skipped=13 rescued=0 ignored=0
kolla-infra-1 : ok=214 changed=51 unreachable=0 failed=1 skipped=133 rescued=0 ignored=0
localhost : ok=4 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
Command failed ansible-playbook -i multinode -e @/etc/kolla/globals.yml -e @/etc/kolla/passwords.yml -e CONFIG_DIR=/etc/kolla -e kolla_action=deploy /root/venv-kolla/share/kolla-ansible/ansible/site.yml
</pre></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Sep 29, 2022 at 5:26 AM Radosław Piliszek <<a href="mailto:radoslaw.piliszek@gmail.com" target="_blank">radoslaw.piliszek@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Thu, 29 Sept 2022 at 11:22, Satish Patel <<a href="mailto:satish.txt@gmail.com" target="_blank">satish.txt@gmail.com</a>> wrote:<br>
> I did the following in global.yml and ran "deploy" but it stuck somewhere in nova. I am looking for errors to find out what happened. Am I missing something in the following configuration?<br>
<br>
It looks correct at first glance. You need to be more specific about<br>
the issue at hand. The error message, circumstances...<br>
<br>
> kolla_enable_tls_internal: "yes"<br>
> kolla_certificates_dir: "/etc/kolla/certificates"<br>
> kolla_internal_fqdn_cert: "{{ kolla_certificates_dir }}/my_company_certificate.pem"<br>
><br>
> Is the above going to enable SSL for all communications or just horizon web GUI?<br>
<br>
All communications via haproxy.<br>
<br>
Radek<br>
-yoctozepto<br>
</blockquote></div>
</blockquote></div>
</blockquote></div>