Ask Your Question

Keystone Service Unavailable 503

asked 2014-11-24 06:49:10 -0500

neel-basu-z gravatar image

In other machines packstack have been installed properly with --allinone option though I have problems with networking there.I was trying to do a fresh installation of openstack with packstack without --allinone in one seperate machine. however I accepted all default options. and used default password everywhere. This is the error I got

ERROR : Error appeared during Puppet run:
Error: /Stage[main]/Neutron::Keystone::Auth/Keystone_service[neutron]: Could not evaluate: Execution of '/usr/bin/keystone --os-endpoint service-list' returned 1: Service Unavailable (HTTP 503)
You will find full trace in log /var/tmp/packstack/20141124-175811-c0aCHN/manifests/

This is not a big issue as packstack has not yet completed and I can reinstall fedora and start from scratch again, also I've other bigger issues with neutron network setup in other working machines (in other questions). But I'd like to fix it and avoid reinstallation. Also attaching the log file reffered

`cat /var/tmp/packstack/20141124-175811-c0aCHN/manifests/`

Warning: Config file /etc/puppet/hiera.yaml not found, using Hiera defaults
Warning: Scope(Class[Keystone]): The mysql_module parameter is deprecated. The latest 2.x mysql module will be used.
Warning: Scope(Class[Keystone]): The sql_connection parameter is deprecated, use database_connection instead.
Warning: Scope(Class[Keystone]): token_format parameter is deprecated. Use token_provider instead.
Warning: Scope(Class[Keystone::Endpoint]): The public_address parameter is deprecated, use public_url instead.
Warning: Scope(Class[Keystone::Endpoint]): The internal_address parameter is deprecated, use internal_url instead.
Warning: Scope(Class[Keystone::Endpoint]): The admin_address parameter is deprecated, use admin_url instead.
Warning: Scope(Class[Nova::Keystone::Auth]): The cinder parameter is deprecated and has no effect.
Notice: Compiled catalog for localhost.localdomain in environment production in 1.39 seconds
Notice: /Stage[main]/Keystone/Keystone_config[DEFAULT/admin_token]/value: value changed '[old secret redacted]' to '[new secret redacted]'
Notice: /Stage[main]/Keystone::Db::Sync/Exec[keystone-manage db_sync]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Keystone/Exec[keystone-manage pki_setup]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Keystone::Service/Service[keystone]: Triggered 'refresh' from 4 events
Error: /Stage[main]/Neutron::Keystone::Auth/Keystone_service[neutron]: Could not evaluate: Execution of '/usr/bin/keystone --os-endpoint service-list' returned 1: Service Unavailable (HTTP 503)

Error: /Stage[main]/Ceilometer::Keystone::Auth/Keystone_service[ceilometer]: Could not evaluate: Execution of '/usr/bin/keystone --os-endpoint service-list' returned 1: Service Unavailable (HTTP 503)

Error: /Stage[main]/Keystone::Roles::Admin/Keystone_tenant[admin]: Could not evaluate: Execution of '/usr/bin/keystone --os-endpoint tenant-list' returned 1: Service Unavailable (HTTP 503)

Error: /Stage[main]/Ceilometer::Keystone::Auth/Keystone_role[ResellerAdmin]: Could not evaluate: Execution of '/usr/bin/keystone --os-endpoint http://127.0 ...
edit retag flag offensive close merge delete


I've suggested you to read my updated answer in thread
Your private network had tag 4095. What means that tap-interface of created vlan is dead
It's known issue , has known workaround.

dbaxps gravatar imagedbaxps ( 2014-11-24 07:07:41 -0500 )edit

3 answers

Sort by ยป oldest newest most voted

answered 2015-01-03 06:46:02 -0500

VedprakashNnimbalkar gravatar image

Unset the http_proxy & https_proxy

edit flag offensive delete link more


this really works, but why?

fcn11 gravatar imagefcn11 ( 2015-02-11 20:01:10 -0500 )edit

it may be related to keystoneclient trying to connect to keystone over proxy (where it shouldn't), in this case set no_proxy = NO_PROXY = <ip_keystone_is_listening_on> along with http_proxy variables

wznoinsk gravatar imagewznoinsk ( 2015-08-06 09:33:17 -0500 )edit

Hi This works for me , I had similar issue of having "Service Unavailable (HTTP 503)" error as soon as I start running openstack command ( openstack service list..) on Centos7. I commented the environment which was for http_proxy server location . Then reboot the Controller and started working.

subratsahoo gravatar imagesubratsahoo ( 2017-01-08 20:35:55 -0500 )edit

answered 2014-12-03 01:08:09 -0500

wren gravatar image


How's the (HTTP 503) problem come out? What's the steps to fix it?

edit flag offensive delete link more

answered 2015-07-24 09:04:19 -0500

gavin gravatar image

I got the similar error when install Kilo on KVM RH7, has anyone any idea for it?

ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null root@ tar -C /var/tmp/packstack/213da798ac51484aa025fba08721ed5a/modules -xpzf - 2015-07-23 16:34:09::ERROR::run_setup::1018::root:: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/packstack/installer/", line 1013, in main _main(options, confFile, logFile) File "/usr/lib/python2.7/site-packages/packstack/installer/", line 655, in _main runSequences() File "/usr/lib/python2.7/site-packages/packstack/installer/", line 626, in runSequences controller.runAllSequences() File "/usr/lib/python2.7/site-packages/packstack/installer/", line 81, in runAllSequences, messages=self.MESSAGES) File "/usr/lib/python2.7/site-packages/packstack/installer/core/", line 109, in run, messages=messages) File "/usr/lib/python2.7/site-packages/packstack/installer/core/", line 50, in run self.function(config, messages) File "/usr/lib/python2.7/site-packages/packstack/plugins/", line 210, in apply_puppet_manifest wait_for_puppet(currently_running, messages) File "/usr/lib/python2.7/site-packages/packstack/plugins/", line 124, in wait_for_puppet validate_logfile(log) File "/usr/lib/python2.7/site-packages/packstack/modules/", line 107, in validate_logfile raise PuppetError(message) PuppetError: Error appeared during Puppet run: Error: Could not prefetch keystone_service provider 'openstack': Execution of '/usr/bin/openstack service list --quiet --format csv --long' returned 1: ERROR: openstack Service Unavailable (HTTP 503)^[[0m You will find full trace in log /var/tmp/packstack/20150723-162942-cWZrMf/manifests/

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-11-24 06:49:10 -0500

Seen: 4,185 times

Last updated: Nov 24 '14