Ask Your Question
1

horizon image list breaks when glance is https'd

asked 2016-03-06 22:59:56 -0500

yee379 gravatar image

Hi, i am attempting to put all of my rdo kilo openstack services behind a reverse proxy (haproxy) in order to ssl terminate all of the openstack services. I have keystone working fine and i'm attempting to move onto glance.

[root@controller ~(keystonerc_admin:admin)]# keystone --insecure endpoint-list
/usr/lib/python2.7/site-packages/keystoneclient/shell.py:65: DeprecationWarning: The keystone CLI is deprecated in favor of python-openstackclient. For a Python library, continue using python-keystoneclient.
  'python-keystoneclient.', DeprecationWarning)
/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:769: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
  InsecureRequestWarning)
+----------------------------------+-----------+--------------------------------------------+--------------------------------------------+--------------------------------------------+----------------------------------+
|                id                |   region  |                 publicurl                  |                internalurl                 |                  adminurl                  |            service_id            |
+----------------------------------+-----------+--------------------------------------------+--------------------------------------------+--------------------------------------------+----------------------------------+
| 15ffdc3d176a4db485d8e8d04d1f6a0b | RegionOne |        http://192.168.33.11:8000/v1        |        http://192.168.33.11:8000/v1        |        http://192.168.33.11:8000/v1        | d446348a5cf54ce8a707ab2f4f24b601 |
| 228d9b5baade40bba497cb647424aabc | RegionOne | http://192.168.33.11:8776/v2/%(tenant_id)s | http://192.168.33.11:8776/v2/%(tenant_id)s | http://192.168.33.11:8776/v2/%(tenant_id)s | 625ca425c2c1458aa41498560da68a9c |
| 3feb14f1c3d34e6f83854b245cd4c2f1 | RegionOne |         http://192.168.33.11:9696          |         http://192.168.33.11:9696          |         http://192.168.33.11:9696          | 1bbf008ee2fc4f9da4029b23fdf2e816 |
| 67e3801626b54b5f85e0f5fb9559e0a9 | RegionOne | http://192.168.33.11:8776/v2/%(tenant_id)s | http://192.168.33.11:8776/v2/%(tenant_id)s | http://192.168.33.11:8776/v2/%(tenant_id)s | c21dd42658684fbf9c6430c49c068345 |
| 81fead2cc4ac4e3d86b6145466d6a860 | RegionOne | http://192.168.33.11:8004/v1/%(tenant_id)s | http://192.168.33.11:8004/v1/%(tenant_id)s | http://192.168.33.11:8004/v1/%(tenant_id)s | 9a9dec9cad244c02b8a8fbefa2c6ed99 |
| 8b8c02c788b24a01bfdfc16a2734bec4 | RegionOne |      https://192.168.33.11:5000/v2.0       |      https://192.168.33.11:5000/v2.0       |      https://192.168.33.11:35357/v2.0      | a75985a1b0fe4673a11865a81777ffdf |
| ad9b92f0327848fdaef3338a031ae2a9 | RegionOne | http://192.168.33.11:8774/v2/%(tenant_id)s | http://192.168.33.11:8774/v2/%(tenant_id)s | http://192.168.33.11:8774/v2/%(tenant_id)s | d663bf021fab4ff2b2289680a2a2868d |
| fa107943220b40cab0d52ffc8236d3b9 | RegionOne |         https://192.168.33.11:9292         |         https://192.168.33.11:9292         |         https://192.168.33.11:9292         | 93b83a24427f48fd9889a52fe5f6c0be |
+----------------------------------+-----------+--------------------------------------------+--------------------------------------------+--------------------------------------------+----------------------------------+

and i can even do an image-list from the CLI:

[root@controller ~(keystonerc_admin:admin)]# glance --insecure image-list
/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:769: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
  InsecureRequestWarning)
+--------------------------------------+---------------------+
| ID                                   | Name                |
+--------------------------------------+---------------------+
| 98a2aff4-0676-4e19-b8bf-d3562b1ae77a | cirros-0.3.4-x86_64 |
+--------------------------------------+---------------------+

However, when i log on with the same credentials on the horizon dashboard, and goto System -> Images, i get

Error: Unable to retrieve image list.

Error logs:

# /var/log/httpd/error_log
[Mon Mar 07 04:50:35.007989 2016] [:error] [pid 9720] Recoverable error: HTTPInternalServerError (HTTP 500)


 # /var/log/glance/glance-api.log
  2016-03-06 23:50:35.005 7691 ERROR glance.registry.client.v1.client [req-e4766f89-e5e3-4ffa-831f-160d458af853 c060e01cec2b46c9961dab693cf7267e da0664c145ee4176ab503f861358326b - - -] Registry client request GET /images/detail raised ClientConnectionError
  2016-03-06 23:50:35.005 7691 TRACE glance.registry.client.v1.client Traceback (most recent call last):
  2016-03-06 23:50:35.005 7691 TRACE glance.registry.client.v1.client   File "/usr/lib/python2.7/site-packages/glance/registry/client/v1/client.py", line 117 ...
(more)
edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2016-03-10 02:36:55 -0500

yee379 gravatar image

so it turned out that the cli uses glance v2... which doesn't require the glance registry... which lead me basically identify that i had misconfigured the registry_* entries in cinder.conf (i had specified that it should be https, when if fact it wasn't).

removed those entries and voila! it worked.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-03-06 22:59:56 -0500

Seen: 532 times

Last updated: Mar 10 '16