"Unauthorized" Unable to create a volume from image with ceph

asked 2017-01-23 21:00:46 -0500

shev gravatar image

updated 2017-01-24 12:00:44 -0500

Hello,

I have installed ceph on three nodes. I configured those three nodes as cinder and nova nodes. I have another node which contains glance, neutron, keystone, and horizon services. I am able to create a volume, an instance, and upload an image file. I am unable to create a volume from an image. I am able to list the images using cinder. Thank you in advance for your help. Let me know if anyone needs more information.

Here is the error while issues the --debug option.

cinder --debug create --image-id ab919cdf-187b-4047-8a7b-de4a25c3011b  --display_name=bootable-cirros-0.3.4 1                                 DEBUG:keystoneauth.session:REQ: curl -g -i -X GET http://controller:35357/v3 -H "Accept: application/json" -H "User-Agent: cinder keystoneauth1/2.12.2 python-requests/2.10.0 CPython/2.7.5"
DEBUG:keystoneauth.session:RESP: [200] Date: Tue, 24 Jan 2017 02:26:44 GMT Server: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 Vary: X-Auth-Token x-openstack-request-id: req-619d8989-7a99-4321-91b4-4a973629630e Content-Length: 255 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/json
RESP BODY: {"version": {"status": "stable", "updated": "2016-10-06T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.7", "links": [{"href": "http://controller:35357/v3/", "rel": "self"}]}}

DEBUG:keystoneauth.identity.v3.base:Making authentication request to http://controller:35357/v3/auth/tokens
DEBUG:keystoneauth.identity.v3.base:{"token": {"is_domain": false, "methods": ["password"], "roles": [{"id": "5a36727a8f044de882a605cf105b2899", "name": "admin"}], "expires_at": "2017-01-24T03:26:44.000000Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "0f7284da6fa54341901244b654699bf6", "name": "admin"}, "catalog": [{"endpoints": [{"url": "http://controller:9292", "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "099194fbe75945bea75883d33ed6ed94"}, {"url": "http://controller:9292", "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "14e864dcab284d6ca7c417f053db008a"}, {"url": "http://controller:9292", "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "e648693275ed4f088d8d337eb7d9e968"}], "type": "image", "id": "3245168e03e94ff299255df5cc080d8f", "name": "glance"}, {"endpoints": [{"url": "http://controller:8776/v1/0f7284da6fa54341901244b654699bf6", "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "2783c3acbb4e42b280782b0bbc5240d4"}, {"url": "http://controller:8776/v1/0f7284da6fa54341901244b654699bf6", "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "a32e03c6fb384b08bf6d9216abfeaa2d"}, {"url": "http://controller:8776/v1/0f7284da6fa54341901244b654699bf6", "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "afb2d5f74568423690d40bb7056688ca"}], "type": "volume", "id": "7a16a87c93d140178d34158d43541370", "name": "cinder"}, {"endpoints": [{"url": "http://controller:8776/v2/0f7284da6fa54341901244b654699bf6", "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "1b48e3bf56084dd0a2371b6dcec91cb5"}, {"url": "http://controller:8776/v2/0f7284da6fa54341901244b654699bf6", "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "598fd04cd11f4861987b78731e06aabb"}, {"url": "http://controller:8776/v2/0f7284da6fa54341901244b654699bf6", "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "c92371bfd74444d1a77f4f95a1f6b9a5"}], "type": "volumev2", "id": "ac4dda5394ab41d9ba8b9197236b7832", "name": "cinderv2"}, {"endpoints": [{"url": "http://controller:8774/v2.1/0f7284da6fa54341901244b654699bf6", "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "5c54df0803f04627be8cd29b3a211df6"}, {"url": "http://controller:8774/v2.1/0f7284da6fa54341901244b654699bf6", "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "897ad18dac3046ab97e0ff17c83da077"}, {"url": "http://controller:8774/v2.1/0f7284da6fa54341901244b654699bf6", "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "c51c21e3a4b74453a39e49bfc1f1918d"}], "type": "compute", "id": "c75551eb77144588bba0372702e3f60c", "name": "nova"}, {"endpoints": [{"url": "http://controller:35357/v3/", "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "1489a4c153f84f6e8e4df911326d9f0f"}, {"url": "http://controller:5000/v3/", "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "39465a8ded914beaa32ace61588326b1"}, {"url": "http://controller:35357/v3/", "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "805dca80e3b84e199ce600b9799117bb"}], "type": "identity", "id": "d341a345733340bcb9143f33c953e5cb", "name": "keystone"}, {"endpoints": [{"url": "http://controller:9696", "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "1d47a94c30f040a3a4fff386e8a79e6e ...
(more)
edit retag flag offensive close merge delete

Comments

Does glance image-download work? What's in the glance API log and the cinder logs?

Bernd Bausch gravatar imageBernd Bausch ( 2017-01-24 11:08:52 -0500 )edit

Thank you for your assistance. I added the requested information above. Both openstack image save and glance image-download worked

shev gravatar imageshev ( 2017-01-24 12:01:53 -0500 )edit

The request you have made requires authentication means that Glance refuses Cinder's image request. Cinder can't talk to Glance because something is wrong with your authentication. Perhaps the hostname controller can't be resolved on some nodes?

Bernd Bausch gravatar imageBernd Bausch ( 2017-01-28 19:03:05 -0500 )edit