[Openstack] [Devstack] Enabling services in HTTPS mode
Rob Crittenden
rcritten at redhat.com
Fri Jan 23 15:21:15 UTC 2015
Parikshit Manur wrote:
> Hi All,
>
>
>
> I am trying to install the devstack with services being enabled in
> HTTPS mode.
>
> During devstack installation,the neutron-server fails to start. Throws
> the following error.
>
>
>
> 2015-01-21 19:57:04.932 | + screen -S stack -p q-svc -X stuff 'python
> /usr/local/bin/neutron-server --config-file /etc/neutron/neutron.conf
> --config-file /etc/neutron/plugins/ml'/ml2_conf.ini & echo $!
>>/opt/stack/status/stack/q-svc.pid; fg || echo "q-svc failed to start" |
> tee "/opt/stack/status/stack/q-svc.failure"
>
> 2015-01-21 19:57:04.936 | + echo 'Waiting for Neutron to start...'
>
> 2015-01-21 19:57:04.937 | Waiting for Neutron to start...
>
> 2015-01-21 19:57:04.937 | + is_ssl_enabled_service neutron
>
> 2015-01-21 19:57:04.937 | + local services=neutron
>
> 2015-01-21 19:57:04.937 | + local service=
>
> 2015-01-21 19:57:04.937 | + '[' True == False ']'
>
> 2015-01-21 19:57:04.937 | + for service in '${services}'
>
> 2015-01-21 19:57:04.937 | + [[ ,key,nova,cinder,glance,s-proxy,neutron,
> =~ ,neutron, ]]
>
> 2015-01-21 19:57:04.937 | + return 0
>
> 2015-01-21 19:57:04.937 | +
> ssl_ca=--ca-certificate=/opt/stack/data/ca-bundle.pem
>
> 2015-01-21 19:57:04.937 | + timeout 60 sh -c 'while ! wget
> --ca-certificate=/opt/stack/data/ca-bundle.pem --no-proxy -q -O-
> https://10.102.118.24:9696; do sleep 1; done'
>
> 2015-01-21 19:58:04.939 | + die 643 'Neutron did not start'
>
> 2015-01-21 19:58:04.940 | + local exitcode=0
>
> 2015-01-21 19:58:04.940 | [Call Trace]
>
> 2015-01-21 19:58:04.940 | ./stack.sh:1254:start_neutron_service_and_check
>
> 2015-01-21 19:58:04.940 | /opt/stack/devstack/lib/neutron:643:die
>
> 2015-01-21 19:58:04.945 | [ERROR] /opt/stack/devstack/lib/neutron:643
> Neutron did not start
>
> 2015-01-21 19:58:05.949 | Error on exit
>
>
>
> Below is the configuration in localrc file :
>
>
>
> RECLONE=yes
>
> DEST=/opt/stack
>
> SCREEN_LOGDIR=/opt/stack/new/screen-logs
>
> LOGFILE=/opt/stack/new/devstacklog.txt
>
>
>
> DATABASE_PASSWORD=password
>
> RABBIT_PASSWORD= password
>
> SERVICE_TOKEN= password
>
> SERVICE_PASSWORD= password
>
> ADMIN_PASSWORD= password
>
> MYSQL_PASSWORD= password
>
>
>
> disable_service n-net
>
> enable_service q-svc
>
> enable_service q-agt
>
> enable_service q-dhcp
>
> enable_service q-l3
>
> enable_service q-meta
>
> enable_service q-lbaas
>
> enable_service neutron
>
> # Optional, to enable tempest configuration as part of devstack
>
> enable_service tempest
>
>
>
> *USE_SSL=True*
>
> *SSL_ENABLE_SERVICES=key,nova,neutron,glance*
>
>
>
> Q_PLUGIN=ml2
>
> Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch
>
> Q_ML2_PLUGIN_TYPE_DRIVERS=vlan,flat
>
> Q_ML2_TENANT_NETWORK_TYPE=vlan
>
> ML2_VLAN_RANGES=physnet1:1500:1600
>
> ENABLE_TENANT_VLANS=True
>
> PHYSICAL_NETWORK=physnet1
>
> OVS_PHYSICAL_BRIDGE=br-eth1
>
>
>
>
>
> Are there any other options which needs to be passed in localrc.
No, that should do it.
I'd attach to screen and see whether neutron is running or what it has
logged.
It is a running battle keeping SSL (directly and using tls-proxy)
working in devstack. It is very possible that some unrelated patch has
broken something. That said, I haven't seen any neutron problems (others
yes, but not neutron)
rob
More information about the Openstack
mailing list