Minimal rocky installation: creation of instances fails with keystoneauth1.exceptions.http.Unauthorized

asked 2019-02-20 08:16:23 -0500

Marco Schuster gravatar image

On a Debian Testing setup consisting of one controller node and one compute node (set up per https://docs.openstack.org/install-guide/openstack-services.html#minimal-deployment-for-rocky (https://docs.openstack.org/install-gu...)) I have the problem that creation of instances fails with a keystone unauthorized error, no matter if running with admin or demo credentials.

All four installed services (keystone, glance, nova, neutron) pass the respective checks in the "Verify operation" part of their installation guidelines, but a simple openstack server create --flavor 0 --image cirros --nic net-id=xxxxx --debug provider-instance1 (or creating an instance in the horizon UI) fails with:

novaclient.exceptions.ClientException: Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
<class 'keystoneauth1.exceptions.http.Unauthorized'> (HTTP 500) (Request-ID: req-456d1aff-a3a4-428b-8e0b-b2b14bdefd97)

The call that fails is:

curl -g -i -X POST http://10.161.14.20:8774/v2.1/servers -H "Accept: application/json" -H "Content-Type: application/json" -H "User-Agent: python-novaclient" -H "X-Auth-Token: {SHA1}32169a085723fd18387e910054fc13850461498c" -d '{"server": {"name": "provider-instance1", "imageRef": "4c2761a0-0d04-4ded-9ba5-8bf58ddcc05c", "flavorRef": "0", "min_count": 1, "max_count": 1, "networks": [{"uuid": "d80a8a4c-16b6-4f7f-ab2e-0720e0b6ab9e"}]}}'

What is broken here?

The nova-api.log:

2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi [req-456d1aff-a3a4-428b-8e0b-b2b14bdefd97 cc77fa29ff2f40aa81cab569859d6f99 ad5fd5c572aa41aea707e9bcc82ce03a - default default] Unexpected exception in API method: keystoneauth1.exceptions.http.Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8c2b9d6-41f1-4eed-a65f-2360efa1b831)
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi Traceback (most recent call last):
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi   File "/usr/lib/python3/dist-packages/nova/api/openstack/wsgi.py", line 801, in wrapped
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi     return f(*args, **kwargs)
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi   File "/usr/lib/python3/dist-packages/nova/api/validation/__init__.py", line 110, in wrapper
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi     return func(*args, **kwargs)
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi   File "/usr/lib/python3/dist-packages/nova/api/validation/__init__.py", line 110, in wrapper
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi     return func(*args, **kwargs)
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi   File "/usr/lib/python3/dist-packages/nova/api/validation/__init__.py", line 110, in wrapper
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi     return func(*args, **kwargs)
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi   [Previous line repeated 7 more times]
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi   File "/usr/lib/python3/dist-packages/nova/api/openstack/compute/servers.py", line 576, in create
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi     **create_kwargs)
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi   File "/usr/lib/python3/dist-packages/nova/hooks.py", line 154, in inner
2019-02-20 15:08:06.798 15816 ERROR nova.api.openstack.wsgi     rv = f(*args, **kwargs)
2019-02-20 15:08:06.798 15816 ERROR nova ...
(more)
edit retag flag offensive close merge delete

Comments

The stack trace indicates that Nova requests a service (e.g., network list) from Neutron but can't get authenticated. Note that Nova acts as an OpenStack user here and needs authentication like everybody else.

My guess: You misconfigured authentication in the neutron section in nova.conf.

Bernd Bausch gravatar imageBernd Bausch ( 2019-02-21 17:48:24 -0500 )edit