[Openstack] [Devstack] Enabling services in HTTPS mode

Rob Crittenden rcritten at redhat.com
Fri Jan 23 15:21:15 UTC 2015


Parikshit Manur wrote:
> Hi All,
> 
>  
> 
> I am trying to install the devstack  with services being enabled in
> HTTPS mode.
> 
> During devstack installation,the neutron-server fails to start. Throws
> the following error.
> 
>  
> 
> 2015-01-21 19:57:04.932 | + screen -S stack -p q-svc -X stuff 'python
> /usr/local/bin/neutron-server --config-file /etc/neutron/neutron.conf
> --config-file /etc/neutron/plugins/ml'/ml2_conf.ini & echo $!
>>/opt/stack/status/stack/q-svc.pid; fg || echo "q-svc failed to start" |
> tee "/opt/stack/status/stack/q-svc.failure"
> 
> 2015-01-21 19:57:04.936 | + echo 'Waiting for Neutron to start...'
> 
> 2015-01-21 19:57:04.937 | Waiting for Neutron to start...
> 
> 2015-01-21 19:57:04.937 | + is_ssl_enabled_service neutron
> 
> 2015-01-21 19:57:04.937 | + local services=neutron
> 
> 2015-01-21 19:57:04.937 | + local service=
> 
> 2015-01-21 19:57:04.937 | + '[' True == False ']'
> 
> 2015-01-21 19:57:04.937 | + for service in '${services}'
> 
> 2015-01-21 19:57:04.937 | + [[ ,key,nova,cinder,glance,s-proxy,neutron,
> =~ ,neutron, ]]
> 
> 2015-01-21 19:57:04.937 | + return 0
> 
> 2015-01-21 19:57:04.937 | +
> ssl_ca=--ca-certificate=/opt/stack/data/ca-bundle.pem
> 
> 2015-01-21 19:57:04.937 | + timeout 60 sh -c 'while ! wget
> --ca-certificate=/opt/stack/data/ca-bundle.pem --no-proxy -q -O-
> https://10.102.118.24:9696; do sleep 1; done'
> 
> 2015-01-21 19:58:04.939 | + die 643 'Neutron did not start'
> 
> 2015-01-21 19:58:04.940 | + local exitcode=0
> 
> 2015-01-21 19:58:04.940 | [Call Trace]
> 
> 2015-01-21 19:58:04.940 | ./stack.sh:1254:start_neutron_service_and_check
> 
> 2015-01-21 19:58:04.940 | /opt/stack/devstack/lib/neutron:643:die
> 
> 2015-01-21 19:58:04.945 | [ERROR] /opt/stack/devstack/lib/neutron:643
> Neutron did not start
> 
> 2015-01-21 19:58:05.949 | Error on exit
> 
>  
> 
> Below is the  configuration in localrc file :
> 
>  
> 
> RECLONE=yes
> 
> DEST=/opt/stack
> 
> SCREEN_LOGDIR=/opt/stack/new/screen-logs
> 
> LOGFILE=/opt/stack/new/devstacklog.txt
> 
>  
> 
> DATABASE_PASSWORD=password
> 
> RABBIT_PASSWORD= password
> 
> SERVICE_TOKEN= password
> 
> SERVICE_PASSWORD= password
> 
> ADMIN_PASSWORD= password
> 
> MYSQL_PASSWORD= password
> 
>  
> 
> disable_service n-net
> 
> enable_service q-svc
> 
> enable_service q-agt
> 
> enable_service q-dhcp
> 
> enable_service q-l3
> 
> enable_service q-meta
> 
> enable_service q-lbaas
> 
> enable_service neutron
> 
> # Optional, to enable tempest configuration as part of devstack
> 
> enable_service tempest
> 
>  
> 
> *USE_SSL=True*
> 
> *SSL_ENABLE_SERVICES=key,nova,neutron,glance*
> 
>  
> 
> Q_PLUGIN=ml2
> 
> Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch
> 
> Q_ML2_PLUGIN_TYPE_DRIVERS=vlan,flat
> 
> Q_ML2_TENANT_NETWORK_TYPE=vlan
> 
> ML2_VLAN_RANGES=physnet1:1500:1600
> 
> ENABLE_TENANT_VLANS=True
> 
> PHYSICAL_NETWORK=physnet1
> 
> OVS_PHYSICAL_BRIDGE=br-eth1
> 
>  
> 
>                                              
> 
> Are there any other options which needs to be passed in localrc.

No, that should do it.

I'd attach to screen and see whether neutron is running or what it has
logged.

It is a running battle keeping SSL (directly and using tls-proxy)
working in devstack. It is very possible that some unrelated patch has
broken something. That said, I haven't seen any neutron problems (others
yes, but not neutron)

rob




More information about the Openstack mailing list