[Openstack-operators] [OCTAVIA][KOLLA] - Self signed CA/CERTS
Flint WALRUS
gael.therond at gmail.com
Tue Aug 14 17:52:09 UTC 2018
Hi Michael, thanks a lot for your quick response once again!
Le mar. 14 août 2018 à 18:21, Michael Johnson <johnsomor at gmail.com> a
écrit :
> Hi there Flint.
>
> Octavia fully supports using self-signed certificates and we use those
> in our gate tests.
> We do not allow non-TLS authenticated connections in the code, even
> for lab setups.
>
> This is a configuration issue or certificate file format issue. When
> the controller is attempting to access the controller local
> certificate file (likely the one we use to prove we are a valid
> controller to the amphora agent) it is finding a file without the
> required PEM format header. Check that your certificate files have the
> "-----BEGIN CERTIFICATE-----" line (maybe they are in binary DER
> format and just need to be converted).
>
> Also for reference, here are the minimal steps we use in our gate
> tests to setup the TLS certificates:
>
> https://github.com/openstack/octavia/blob/master/devstack/plugin.sh#L295-L305
>
> Michael
> On Tue, Aug 14, 2018 at 4:54 AM Flint WALRUS <gael.therond at gmail.com>
> wrote:
> >
> >
> > Hi guys,
> >
> > I continue to work on my Octavia integration using Kolla-Ansible and I'm
> facing a strange behavior.
> >
> > As for now I'm working on a POC using restricted HW and SW Capacities,
> I'm facing a strange issue when trying to launch a new load-balancer.
> >
> > When I create a new LB, would it be using CLI or WebUI, the amphora
> immediately disappear and the LB status switch to ERROR.
> >
> > When looking at logs and especially Worker logs, I see that the error
> seems to be related to the fact that the worker can't connect to the
> amphora because of a TLS Handshake issue which so trigger the contact
> timeout and rollback the amphora creation.
> >
> > Here is the worker.log relevant trace:
> >
> > 2018-08-07 07:33:57.108 24 INFO octavia.controller.queue.endpoint [-]
> Creating load balancer 'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'...
> > 2018-08-07 07:33:57.220 24 INFO
> octavia.controller.worker.tasks.database_tasks [-] Created Amphora in DB
> with id c20af002-1576-446e-b99f-7af607b8d885
> > 2018-08-07 07:33:57.285 24 INFO octavia.certificates.generator.local [-]
> Signing a certificate request using OpenSSL locally.
> > 2018-08-07 07:33:57.285 24 INFO octavia.certificates.generator.local [-]
> Using CA Certificate from config.
> > 2018-08-07 07:33:57.285 24 INFO octavia.certificates.generator.local [-]
> Using CA Private Key from config.
> > 2018-08-07 07:33:57.286 24 INFO octavia.certificates.generator.local [-]
> Using CA Private Key Passphrase from config.
> > 2018-08-07 07:34:04.074 24 INFO
> octavia.controller.worker.tasks.database_tasks [-] Mark ALLOCATED in DB for
> amphora: c20af002-1576-446e-b99f-7af607b8d885 with compute id
> 3bbabfa6-366f-46a4-8fb2-1ec7158e19f1 for load balancer:
> bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e
> > 2018-08-07 07:34:04.253 24 INFO
> octavia.network.drivers.neutron.allowed_address_pairs [-] Port
> a7bae53e-0bc6-4830-8c75-646a8baf2885 already exists. Nothing to be done.
> > 2018-08-07 07:34:19.656 24 WARNING
> octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to
> instance. Retrying.: ConnectTimeout:
> HTTPSConnectionPool(host='10.1.56.103', port=9443): Max retries exceeded
> with url: /0.5/plug/vip/192.168.56.100 (Caused by
> ConnectTimeoutError(<requests.packages.urllib3.connection.VerifiedHTTPSConnection
> object at 0x7f4c28415c50>, 'Connection to 10.1.56.103 timed out. (connect
> timeout=10.0)'))
> > 2018-08-07 07:34:24.673 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.amphora_driver_tasks.AmphoraePostVIPPlug'
> (c86bbab6-87d5-4930-8832-5511d42efe3e) transitioned into state 'FAILURE'
> from state 'RUNNING'
> > 34 predecessors (most recent first):
> > Atom
> 'octavia.controller.worker.tasks.network_tasks.GetAmphoraeNetworkConfigs'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'loadbalancer':
> <octavia.common.data_models.LoadBalancer object at 0x7f4c28478d90>},
> 'provides': {u'c20af002-1576-446e-b99f-7af607b8d885':
> <octavia.network.data_models.AmphoraNetworkConfig object at
> 0x7f4c284786d0>}}
> > |__Atom 'reload-lb-after-plug-vip' {'intention': 'EXECUTE', 'state':
> 'SUCCESS', 'requires': {'loadbalancer_id':
> u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> <octavia.common.data_models.LoadBalancer object at 0x7f4c28478d90>}
> > |__Atom
> 'octavia.controller.worker.tasks.database_tasks.UpdateAmphoraVIPData'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amps_data':
> [<octavia.common.data_models.Amphora object at 0x7f4c285165d0>]},
> 'provides': None}
> > |__Atom 'octavia.controller.worker.tasks.network_tasks.ApplyQos'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amps_data':
> [<octavia.common.data_models.Amphora object at 0x7f4c285165d0>],
> 'loadbalancer': <octavia.common.data_models.LoadBalancer object at
> 0x7f4c2845fe10>, 'update_dict': {'topology': 'SINGLE'}}, 'provides': None}
> > |__Atom
> 'octavia.controller.worker.tasks.network_tasks.PlugVIP' {'intention':
> 'EXECUTE', 'state': 'SUCCESS', 'requires': {'loadbalancer':
> <octavia.common.data_models.LoadBalancer object at 0x7f4c2845fe10>},
> 'provides': [<octavia.common.data_models.Amphora object at 0x7f4c285165d0>]}
> > |__Atom
> 'octavia.controller.worker.tasks.database_tasks.UpdateVIPAfterAllocation'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'vip':
> <octavia.common.data_models.Vip object at 0x7f4c284956d0>,
> 'loadbalancer_id': u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> <octavia.common.data_models.LoadBalancer object at 0x7f4c2845fe10>}
> > |__Atom
> 'octavia.controller.worker.tasks.network_tasks.AllocateVIP' {'intention':
> 'EXECUTE', 'state': 'SUCCESS', 'requires': {'loadbalancer':
> <octavia.common.data_models.LoadBalancer object at 0x7f4c28478110>},
> 'provides': <octavia.common.data_models.Vip object at 0x7f4c284956d0>}
> > |__Flow 'octavia-new-loadbalancer-net-subflow'
> > |__Atom
> 'octavia-post-loadbalancer-amp_association-subflow-octavia-post-loadbalancer-amp_association-subflow-reload-lb-after-amp-assoc'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires':
> {'loadbalancer_id': u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> <octavia.common.data_models.LoadBalancer object at 0x7f4c28478110>}
> > |__Flow
> 'octavia-post-loadbalancer-amp_association-subflow-octavia-post-loadbalancer-amp_association-subflow'
> > |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-mark-amp-standalone-indb'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora':
> <octavia.common.data_models.Amphora object at 0x7f4c28478190>}, 'provides':
> None}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-reload-amphora'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora_id':
> u'c20af002-1576-446e-b99f-7af607b8d885'}, 'provides':
> <octavia.common.data_models.Amphora object at 0x7f4c28478190>}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-mark-amphora-allocated-indb'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora':
> <octavia.common.data_models.Amphora object at 0x7f4c28478a50>,
> 'loadbalancer_id': u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> None}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-amphora-finalize'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora':
> <octavia.common.data_models.Amphora object at 0x7f4c28478a50>}, 'provides':
> None}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-update-amphora-info'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora_id':
> u'c20af002-1576-446e-b99f-7af607b8d885', 'compute_obj':
> <octavia.common.data_models.Amphora object at 0x7f4c2845fa10>}, 'provides':
> <octavia.common.data_models.Amphora object at 0x7f4c28478a50>}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-compute-wait'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora_id':
> u'c20af002-1576-446e-b99f-7af607b8d885', 'compute_id':
> u'3bbabfa6-366f-46a4-8fb2-1ec7158e19f1'}, 'provides':
> <octavia.common.data_models.Amphora object at 0x7f4c2845fa10>}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-mark-amphora-booting-indb'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora_id':
> u'c20af002-1576-446e-b99f-7af607b8d885', 'compute_id':
> u'3bbabfa6-366f-46a4-8fb2-1ec7158e19f1'}, 'provides': None}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-update-amphora-computeid'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'amphora_id':
> u'c20af002-1576-446e-b99f-7af607b8d885', 'compute_id':
> u'3bbabfa6-366f-46a4-8fb2-1ec7158e19f1'}, 'provides': None}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-cert-compute-create'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'server_pem':
> '-----BEGIN CERTIFICATE-----\n REDACTED \n-----END RSA PRIVATE KEY-----\n',
> 'amphora_id': u'c20af002-1576-446e-b99f-7af607b8d885',
> 'build_type_priority': 40}, 'provides':
> u'3bbabfa6-366f-46a4-8fb2-1ec7158e19f1'}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-update-cert-expiration'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {'server_pem':
> '-----BEGIN CERTIFICATE-----\n REDACTED \n-----END RSA PRIVATE KEY-----\n',
> 'amphora_id': u'c20af002-1576-446e-b99f-7af607b8d885'}, 'provides': None}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-generate-serverpem'
> {'intention': 'EXECUTE', 'state': 'SUCCESS'}
> > | |__Atom
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-create-amphora-indb'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {}, 'provides':
> u'c20af002-1576-446e-b99f-7af607b8d885'}
> > | |__Flow
> 'STANDALONE-octavia-create-amp-for-lb-subflow'
> > |
> |__Atom
> 'STANDALONE-octavia-get-amphora-for-lb-subflow-octavia-mapload-balancer-to-amphora'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires':
> {'loadbalancer_id': u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> None}
> > |
> |__Flow 'STANDALONE-octavia-get-amphora-for-lb-subflow'
> > |
> |__Atom
> 'octavia.controller.worker.tasks.lifecycle_tasks.LoadBalancerIDToErrorOnRevertTask'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires':
> {'loadbalancer_id': u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> None}
> > |
> |__Flow 'octavia-create-loadbalancer-flow'
> > |__Atom
> 'STANDALONE-octavia-post-map-amp-to-lb-subflow-octavia-mark-amp-standalone-indb'
> {'intention': 'IGNORE', 'state': 'IGNORE'}
> > |__Atom
> 'STANDALONE-octavia-post-map-amp-to-lb-subflow-octavia-reload-amphora'
> {'intention': 'IGNORE', 'state': 'IGNORE', 'requires': {'amphora_id': None}}
> > |__Flow
> 'STANDALONE-octavia-post-map-amp-to-lb-subflow'
> > |__Atom
> 'STANDALONE-octavia-get-amphora-for-lb-subflow-octavia-mapload-balancer-to-amphora'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires':
> {'loadbalancer_id': u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> > None}
> > |__Flow
> 'STANDALONE-octavia-get-amphora-for-lb-subflow'
> > |__Atom
> 'octavia.controller.worker.tasks.lifecycle_tasks.LoadBalancerIDToErrorOnRevertTask'
> {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires':
> {'loadbalancer_id': u'bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e'}, 'provides':
> None}
> > |__Flow
> 'octavia-create-loadbalancer-flow': Error: [('PEM routines',
> 'PEM_read_bio', 'no start line'), ('SSL routines',
> 'SSL_CTX_use_certificate_file', 'PEM lib')]
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker Traceback (most recent call
> last):
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/taskflow/engines/action_engine/executor.py",
> line 53, in _execute_task
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker result =
> task.execute(**arguments)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/octavia/controller/worker/tasks/amphora_driver_tasks.py",
> line 240, in execute
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker amphorae_network_config)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/octavia/controller/worker/tasks/amphora_driver_tasks.py",
> line 219, in execute
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker amphora, loadbalancer,
> amphorae_network_config)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py",
> line 137, in post_vip_plug
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker net_info)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py",
> line 388, in plug_vip
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker json=net_info)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py",
> line 277, in request
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker r = _request(**reqargs)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/sessions.py", line 565, in post
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker return self.request('POST',
> url, data=data, json=json, **kwargs)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/sessions.py", line 518, in
> request
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker resp = self.send(prep,
> **send_kwargs)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/sessions.py", line 639, in send
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker r = adapter.send(request,
> **kwargs)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/adapters.py", line 438, in send
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker timeout=timeout
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py",
> line 600, in urlopen
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker chunked=chunked)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py",
> line 345, in _make_request
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker self._validate_conn(conn)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py",
> line 844, in _validate_conn
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker conn.connect()
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connection.py",
> line 326, in connect
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker ssl_context=context)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/packages/urllib3/util/ssl_.py",
> line 323, in ssl_wrap_socket
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker
> context.load_cert_chain(certfile, keyfile)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/requests/packages/urllib3/contrib/pyopenssl.py",
> line 418, in load_cert_chain
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker
> self._ctx.use_certificate_file(certfile)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/OpenSSL/SSL.py", line 817, in
> use_certificate_file
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker _raise_current_error()
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker File
> "/usr/lib/python2.7/site-packages/OpenSSL/_util.py", line 54, in
> exception_from_error_queue
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker raise exception_type(errors)
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker Error: [('PEM routines',
> 'PEM_read_bio', 'no start line'), ('SSL routines',
> 'SSL_CTX_use_certificate_file', 'PEM lib')]
> > 2018-08-07 07:34:24.673 24 ERROR
> octavia.controller.worker.controller_worker
> > 2018-08-07 07:34:24.684 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.amphora_driver_tasks.AmphoraePostVIPPlug'
> (c86bbab6-87d5-4930-8832-5511d42efe3e) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:24.687 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.network_tasks.GetAmphoraeNetworkConfigs'
> (1e329fa2-b7c3-4fe2-93f0-d565a18cdbba) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:24.691 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'reload-lb-after-plug-vip' (842fb766-dd6f-4b3c-936a-7a5baa82c64f)
> transitioned into state 'REVERTED' from state 'REVERTING'
> > 2018-08-07 07:34:24.694 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.database_tasks.UpdateAmphoraVIPData'
> (761da17b-4655-46a9-9d67-cb7816c7ea0c) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:24.716 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.network_tasks.ApplyQos'
> (fb40f555-1f0a-48fc-b377-f9e791077f65) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:24.719 24 WARNING
> octavia.controller.worker.tasks.network_tasks [-] Unable to plug VIP for
> loadbalancer id bf7ab6e4-081a-4b4d-b7a0-c176a9cb995e
> > 2018-08-07 07:34:26.413 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.network_tasks.PlugVIP'
> (ae486972-6e98-4036-9e20-85f335058074) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:26.420 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.database_tasks.UpdateVIPAfterAllocation'
> (79391dee-6011-4145-b544-499e0a632ca1) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:26.425 24 WARNING
> octavia.controller.worker.tasks.network_tasks [-] Deallocating vip
> 192.168.56.100
> > 2018-08-07 07:34:26.577 24 INFO
> octavia.network.drivers.neutron.allowed_address_pairs [-] Removing security
> group 3d84ee39-1db9-475f-b048-9fe0f87201c1 from port
> a7bae53e-0bc6-4830-8c75-646a8baf2885
> > 2018-08-07 07:34:27.187 24 INFO
> octavia.network.drivers.neutron.allowed_address_pairs [-] Deleted security
> group 3d84ee39-1db9-475f-b048-9fe0f87201c1
> > 2018-08-07 07:34:27.803 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia.controller.worker.tasks.network_tasks.AllocateVIP'
> (7edf30ee-4338-4725-a86e-e45c0aa0aa58) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:27.807 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'octavia-post-loadbalancer-amp_association-subflow-octavia-post-loadbalancer-amp_association-subflow-reload-lb-after-amp-assoc'
> (64ac1f84-f8ec-4cc1-b3c8-f18ac8474d73) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:27.810 24 WARNING
> octavia.controller.worker.tasks.database_tasks [-] Reverting amphora role
> in DB for amp id c20af002-1576-446e-b99f-7af607b8d885
> > 2018-08-07 07:34:27.816 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-mark-amp-standalone-indb'
> (2db823a7-c4ac-4622-824b-b709c96b554a) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:27.819 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-reload-amphora'
> (86219bac-efd2-4d1f-8141-818f1a5bc6f5) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:27.821 24 WARNING
> octavia.controller.worker.tasks.database_tasks [-] Reverting mark amphora
> ready in DB for amp id c20af002-1576-446e-b99f-7af607b8d885 and compute id
> 3bbabfa6-366f-46a4-8fb2-1ec7158e19f1
> > 2018-08-07 07:34:27.826 24 WARNING
> octavia.controller.worker.controller_worker [-] Task
> 'STANDALONE-octavia-create-amp-for-lb-subflow-octavia-mark-amphora-allocated-indb'
> (baf58e71-eef6-41e0-9bf3-ab9f9554ace2) transitioned into state 'REVERTED'
> from state 'REVERTING'
> > 2018-08-07 07:34:27.828 24 WARNING
> octavia.controller.worker.tasks.amphora_driver_tasks [-] Reverting amphora
> finalize.
> >
> > Is this a problem if I use self-signed CAcert ?
> > Is their a way to tell octavia to ignore SSL Error while working on a
> LAB environment?
> >
> > As usual, if you need further information feel free to ask.
> >
> > Thanks a lot guys.
> >
> >
> > _______________________________________________
> > OpenStack-operators mailing list
> > OpenStack-operators at lists.openstack.org
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20180814/67bdef9a/attachment-0001.html>
More information about the OpenStack-operators
mailing list