Ask Your Question
0

docker network create with kuryr

asked 2019-04-27 09:48:40 -0500

arbermejo gravatar image

updated 2019-04-29 15:26:32 -0500

Hi i've installed Openstack Queens on Ubuntu 18.04 and i'm following the Zun Installation Guide to deploy a container infrastructure. I'm following the steps to install kuryr-libnetwork (I've already installed docker on the compute node and it's working fine). The kuryr installation process had no errors but when i try to verify the operation as it's said in the guide

docker network create --driver kuryr --ipam-driver kuryr \ --subnet 10.10.0.0/16 --gateway=10.10.0.1 test_net

I'm Getting this error Errorresponse from daemon: legacy plugin: Post http://10.8.9.54:23750/Plugin.Activate: dial tcp 10.8.9.54:23750: connect: connection refused

I tryed to find the error wit journalctl -u kuryr-libnetwork

Apr 27 13:11:12 compute systemd[1]: Started Kuryr-libnetwork - Docker network plugin for Neutron.

Apr 27 13:11:13 compute kuryr-server[10736]: 2019-04-27 13:11:13.273 10736 WARNINGkeystoneauth.identity.generic.base [-] Failed to discover available identity versions when contacting http://controller:35357. Attempting to parse version from URL.: ConnectFailure: Unable to establish connection to http://controller:35357: HTTPConnectionPool(host='controller', port=35357): MTTPConnectionPool(host='controller', port=35357): Max retries exceeded with url: / (Caused by NewConnectionError('<urllib3.connection.httpconnection 0x7fecef1a8090="" at="" object="">: Failed to establish a new connection: [Errno 111] Connection refused',))</urllib3.connection.httpconnection>

Apr 27 13:11:13 compute kuryr-server[10736]: 2019-04-27 13:11:13.274 10736 CRITICAL kuryr [-] Unhandled error: DiscoveryFailure: Could not determine a suitable URL for the plugin

Apr 27 13:11:13 compute kuryr-server[10736]: 2019-04-27 13:11:13.274 10736 ERROR kuryr Traceback (most recent call last):

This is the relevant content of my /etc/kuryr/kuryr.conf

[DEFAULT]

bindir = /usr/local/libexec/kuryr

[neutron]

www_authenticate_uri = http://controller:5000

auth_url = http://controller:35357

username = kuryr

user_domain_name = default

password = 123

project_name = service

project_domain_name = default

auth_type = password

And this is the one at /usr/lib/docker/plugins/kuryr/kuryr.spec:

http://conrtoller:23750

Btw compute node have connectivity with controller. I already have worked with the environment and launched kvm VMs on it

Can someone help troubleshoot this error??

UPDATE2

I tried the recommendations given by hongbin034 and confirm that i had a problem with Keystone. when i run openstack token issue after exporting the neutron environment varibles i get the following output

Failed to discover available identity versions when contacting http://controller:35357. Attempting to parse version from URL. Could not determine a suitable URL for the plugin

I checked and the port 35357 isn't even open at the controller node. But at the controller node installation there isn't any step configuring such port

UPDATE1

I checked open ports on controller node and 23750 isn't open. I followed the directions at the guide, any recommendation?

Also in the compute node when i run systemctl status kuryr-libnetwork this is the output

● kuryr-libnetwork.service - Kuryr-libnetwork - Docker network plugin for Neutron Loaded: loaded (/etc/systemd/system/kuryr-libnetwork.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code ... (more)

edit retag flag offensive close merge delete

Comments

The error message said kuryr failed to authenticate itself with Keystone. You might want to check the credential in kuryr config file under "[neutron]" session.

hongbin034 gravatar imagehongbin034 ( 2019-04-27 12:32:11 -0500 )edit

2 answers

Sort by » oldest newest most voted
1

answered 2019-04-27 12:41:52 -0500

hongbin034 gravatar image

updated 2019-04-27 12:45:40 -0500

Hi,

First, you might want to verify if the credential you provided (in kuryr config file under [neutron]) is authenticatable with Keystone. For example, you can do this:

  $ export OS_PROJECT_DOMAIN_ID=default

  $ export OS_USER_DOMAIN_ID=default

  $ export OS_PROJECT_NAME=service 

  $ export OS_IDENTITY_API_VERSION=3

  $ export OS_PASSWORD=123

  $ export OS_AUTH_TYPE=password

  $ export OS_AUTH_URL=http://controller:35357

  $ export OS_USERNAME=kuryr

  $ openstack token issue

The last command should succeed if the credential is valid. Otherwise, it is invalid.

Several other remarks:

  • The error message said the kuryr process didn't start successfully so the port 23750 is not open.
  • If you can get kuryr process running, port 23750 should be automatically open in compute node (not controller node).
edit flag offensive delete link more

Comments

ok i runned the command and this is the output: Failed to discover available identity versions when contacting http://controller:35357. Attempting to parse version from URL. Could not determine a suitable URL for the plugin

I checked at the controller node and that port isn't open either

arbermejo gravatar imagearbermejo ( 2019-04-29 11:21:15 -0500 )edit

Will it work if you change the kuryr config file to use port 5000?

[neutron]

auth_url = http://controller:5000

hongbin034 gravatar imagehongbin034 ( 2019-04-29 17:11:32 -0500 )edit
0

answered 2019-04-30 07:53:39 -0500

arbermejo gravatar image

updated 2019-04-30 07:54:30 -0500

Thanks to hongobin034 for giving me the solution. I'll add it here in case someone have the same porblem. I had indeed a problem with the kuryr authentication in keystone. I changed the param auth_url in /etc/kuryr/kuryr.conf

[neutron]

auth_url = http://controller:5000

After i changed the port kuryr was able to start correctly

root@compute /h/team# systemctl status kuryr-libnetwork
● kuryr-libnetwork.service - Kuryr-libnetwork - Docker network plugin for Neutron
   Loaded: loaded (/etc/systemd/system/kuryr-libnetwork.service; enabled; vendor preset: enabled)
   Active: active (running) since Mon 2019-04-29 22:14:05 UTC; 5s ago
 Main PID: 9341 (kuryr-server)
    Tasks: 1 (limit: 4915)
   CGroup: /system.slice/kuryr-libnetwork.service
           └─9341 /usr/bin/python /usr/local/bin/kuryr-server --config-file /etc/kuryr/kuryr.conf

Apr 29 22:14:05 compute systemd[1]: Started Kuryr-libnetwork - Docker network plugin for Neutron.
Apr 29 22:14:08 compute kuryr-server[9341]: 2019-04-29 22:14:08.690 9341 INFO werkzeug [-]  * Running on http://127.0.0.1:23750/ (Press CTRL+C to quit)

As a result of this i could create the new docker network

root@compute /h/team# docker network create --driver kuryr --ipam-driver kuryr \
                            --subnet 10.10.0.0/16 --gateway=10.10.0.1 test_net
14c05b18623eb3cac3d6fe20ae90b4603e3eb89cc2230eaf487be116e9b66288
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2019-04-27 09:48:40 -0500

Seen: 125 times

Last updated: Apr 30