You launch a volume-backed instance. The volume can't be attached, so the instance can't be launched. The volume can't be attached because iSCSI authentication fails. Either it's not set up correctly in cinder.conf on the controller, or you hit a bug. When you google for /iscsi authentication /and /Cinder /or /Nova/, you get plenty of hits, such as https://ask.openstack.org/en/question/92482/unable-to-attach-cinder-volume-iscsi-require-authentication/. This is the command that fails on the controller. The IP address or target might be incorrect, or the credentials, which are set by earlier iscsiadm commands. > iscsiadm -m node -T iqn.2010-10.org.openstack:volume-9ae59d83-ec09-4fd5-aa2c-5049a29bed5e -p 172.23.29.118:3260 --login Bernd -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack/attachments/20181114/e8ecf8bb/attachment.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3609 bytes Desc: S/MIME Cryptographic Signature URL: <http://lists.openstack.org/pipermail/openstack/attachments/20181114/e8ecf8bb/attachment.bin>