openstack magnum conductor authorization failed mitaka

asked 2016-12-29 03:51:01 -0500

Prateek K gravatar image

updated 2016-12-29 07:11:39 -0500

I am using Mitaka version of opestack and I have configured Magnum on it.

  1. Magnum baymodel gets created
  2. Magnum Bay commands gets accepted however the bay status is stuck in CREATE_IN_PROGRESS state.

After checking the logs magnum conductor reports that the service is unable to fetch state as authorization failed:-


 log_http_response /usr/lib/python2.7/dist-packages/heatclient/common/http.py:142
2016-12-29 01:43:55.289 24881 DEBUG oslo_service.periodic_task [-] Running periodic task MagnumPeriodicTasks.sync_bay_status run_periodic_tasks /usr/local/lib/python2.7/dist-packages/oslo_service/periodic_task.py:215
2016-12-29 01:43:55.290 24881 DEBUG magnum.service.periodic [req-695a33ec-39f8-4685-bc85-d9ffd4f3809a - - - - -] Starting to sync up bay status sync_bay_status /usr/lib/python2.7/dist-packages/magnum/service/periodic.py:71
2016-12-29 01:43:55.298 24881 DEBUG keystoneclient.v3.client [req-695a33ec-39f8-4685-bc85-d9ffd4f3809a - - - - -] Authorization failed. get_raw_token_from_identity_service /usr/lib/python2.7/dist-packages/keystoneclient/v3/client.py:303
2016-12-29 01:43:55.298 24881 WARNING magnum.service.periodic [req-695a33ec-39f8-4685-bc85-d9ffd4f3809a - - - - -] Ignore error [reason: A user and password or token is required.] when syncing up bay status.
2016-12-29 01:43:55.298 24881 ERROR magnum.service.periodic Traceback (most recent call last):
2016-12-29 01:43:55.298 24881 ERROR magnum.service.periodic   File "/usr/lib/python2.7/dist-packages/magnum/service/periodic.py", line 82, in sync_bay_status
2016-12-29 01:43:55.298 24881 ERROR magnum.service.periodic     stacks = osc.heat().stacks.list(global_tenant=True,
2016-12-29 01:43:55.298 24881 ERROR magnum.service.periodic   File "/usr/lib/python2.7/dist-packages/magnum/common/exception.py", line 173, in wrapped
2016-12-29 01:43:55.298 24881 ERROR magnum.service.periodic     client=func.__name__, message="reason: %s" % sys.exc_info()[1])
2016-12-29 01:43:55.298 24881 ERROR magnum.service.periodic AuthorizationFailure: reason: A user and password or token is required.
2016-12-29 01:43:55.298 24881 ERROR magnum.service.periodic
2016-12-29 01:43:55.388 24881 DEBUG heatclient.common.http [-] curl -g -i -X GET -H 'X-Auth-Token: {SHA1}9294feeaee720d16a772e0843e796fd74a101421' -H 'Content-Type: application/json' -H 'X-Auth-Url: http://A1-39978-controller:5000/v3' -H 'Accept: application/json' -H 'User-Agent: python-heatclient' http://A1-39978-controller:8004/v1/1f4ff4d2c3684ffab7d983f3740e7411/stacks/d7c36067-0f9a-48f0-8b16-aeea3f8e2bb0 log_curl_request /usr/lib/python2.7/dist-packages/heatclient/common/http.py:129
2016-12-29 01:43:55.440 24881 DEBUG heatclient.common.http [-]
HTTP/1.1 302 Found
Location: http://controller:8004/v1/1f4ff4d2c3684ffab7d983f3740e7411/stacks/k8sbay-uf7z6n3omt4j/d7c36067-0f9a-48f0-8b16-aeea3f8e2bb0
Content-Length: 211
-----------------------------

Any clue ?

here is the magnum.conf file

[DEFAULT]
transport_url = rabbit://openstack:password@controller
debug=true
verbose=true
periodic_global_stack_list= True
pybasedir = /usr/lib/python2.7/dist-packages/magnum
bindir = /usr/bin
state_path = /var/lib/magnum
periodic_enable = true
run_external_periodic_tasks = true

[api]
host = 10.10.10.10

[certificates]
cert_manager_type = local


[cinder_client]
region_name = RegionOne


[database]
connection = mysql+pymysql://magnum:password@controller/magnum


[keystone_authtoken]
auth_uri = http://controller:5000/v3
auth_url = http://controller:35357/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = magnum
password = password


[oslo_concurrency]

lock_path = /var/lock/magnum


[oslo_messaging_notifications]
driver = messaging





[oslo_messaging_rabbit]
rabbit_host = localhost
rabbit_userid = guest
rabbit_password = guest




[trust]
trustee_domain_name=magnum
trustee_domain_id=8b673a7e21f74588b8edb28541bb0877
trustee_domain_admin_name=magnum_domain_admin
trustee_domain_admin_id=c95849d2d09a4b718f7bb5d2aee77dd5
trustee_domain_admin_password=password
edit retag flag offensive close merge delete

Comments

1

What reports $ openstack endpoint list | grep magnum ? (RegionOne or regionOne )

dbaxps gravatar imagedbaxps ( 2016-12-29 07:29:47 -0500 )edit

RegionOne it gives

Prateek K gravatar imagePrateek K ( 2016-12-29 07:37:57 -0500 )edit