Ask Your Question
0

glance flavor-keystone not working Need Help!!!

asked 2015-03-13 13:54:56 -0600

bobyakov gravatar image

updated 2015-03-13 14:07:34 -0600

Hi Guys,

Environment: 2 HAproxy's 2 IceHouse Controllers 3 maria DB 3 Swift storage Ubuntu 14.04 OS

Having issue with being able to view private images in horizon. No issues with public images or uploading images.

Read that glance needs to be reconfigured with keystone, which I thought it already was. Also read I have to add flavor=keystone, but when I do everything stops working for glance and get below error. If I leave it blank everything works except private images. I'm at a complete loss Need help...

Without flavor=

glance image-list returns only public images.

nova image-list returns all images

With flavor =keystone

glance --debug image-list

Error:

curl -i -X GET -H 'X-Auth-Token: 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-ay8f+my0Lnn+bji1ltV8r6Gc2XBF+fkVv8bWxseXPFGQSVxr56LceB1d13Sd4chkwnatbKK1U6B41fCP+bG0DcXDpsnTivuSRbUEGiJzUdu1k0-GLI5ToV-dz7j73Uqh8z2un97vwEO7rTtkt3PlJnswzUUxASjsuPkNuCD-Kxkd-WEpJ6UXArdQ4Ag7lGdRceaQAQy+ASgyhO4iY0+-bdRNC6EQ48+l94gkAJ4lcc0Sjw5CLbv2wbT2mq3ZGUSOx6K5Mf7cdYNCSz-D21VjE+24UxLUsm9qYQxr2AXBZ2ut30Gxs-jJfbSwesrkk3ffcG-IHeMhzu9r-ZCOak' -H 'Content-Type: application/json' -H 'User-Agent: python-glanceclient' http://24.246.120.231:9292/v1/images/detail?sort_key=name&sort_dir=asc&limit=20

HTTP/1.1 500 Internal Server Error
date: Fri, 13 Mar 2015 18:30:57 GMT
content-length: 0
content-type: text/plain
connection: close

Request returned failure status.
HTTPInternalServerError (HTTP 500)

glance-api.conf and glance-registry.conf ( Which section of the config should this be in?)

[keystone_authtoken]
auth_uri = http://HaproxyVIP:5000/v2.0
auth_host = HaproxyVIP
auth_port = 35357
auth_protocol = http
identity_uri = http://HaproxyVIP:35357
admin_tenant_name = service
admin_user = glance
admin_password = password

glance-api-paste.ini and glance-registry-paste.ini

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
delay_auth_decision = true
identity_uri = http://HaproxyVIP:35357
admin_tenant_name = service
admin_user = glance
admin_password = password
edit retag flag offensive close merge delete

Comments

So I think I figured out why I was getting error 500. The registry_host was set to a vip and was erroring out when flavor= is set Registry_host set to VIP did work when flavor= was blank, (weird). Anyway Although I am not getting errors I still can not see private images.

bobyakov gravatar imagebobyakov ( 2015-03-13 15:39:54 -0600 )edit

So once I updated registry_host to specific server rather than VIP, Any new private snapshot was now visible to owner. Still have to figure out how to load balance this.

bobyakov gravatar imagebobyakov ( 2015-03-13 16:00:19 -0600 )edit

Hi, same problem with me! registry_host if changed to some specific server, it works without any issue. How did you figure it out?

zekken gravatar imagezekken ( 2016-02-17 05:23:17 -0600 )edit

I found something where the registry_host looks for meta data, and I knew where the metadata is stored so I tried pointing it directly there rather than the VIP on the HA proxy.

bobyakov gravatar imagebobyakov ( 2016-02-18 14:38:45 -0600 )edit

1 answer

Sort by ยป oldest newest most voted
0

answered 2015-03-13 16:01:59 -0600

bobyakov gravatar image

Determined Issue related to registry_host in glance-api.conf Was set to a VIP on haproxy.. Even though I have a forwarder in place it was looking for a token from haproxy. Pointed registry_host to controller directly and new private snapshots are visible.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-03-13 13:54:56 -0600

Seen: 343 times

Last updated: Mar 13 '15