| *** mhen_ is now known as mhen | 01:53 | |
| *** __ministry is now known as Guest1136 | 09:00 | |
| *** melwitt is now known as jgwentworth | 19:38 | |
| *** jgwentworth is now known as melwitt | 19:38 | |
| bhola | Hi. Looking for some help with Openstack installation issues. I have already installed it on multiple nodes. openstack volume service list returns HTTP 503 error saying "The Keystone service is temporarily unavailable." | 19:58 |
|---|---|---|
| bhola | but it available Dashboard showing all services up and running. | 19:58 |
| bhola | What I am missing? | 19:58 |
| Mc- | does cinder conf has the right auth_url stuff ? | 20:15 |
| DeHackEd | all services need to have an admin account in keystone | 20:16 |
| DeHackEd | it's a requirement for them to identify the user details | 20:16 |
| bhola | Mc- Yes it has auth_url and got correct credentials and endpoint address | 20:27 |
| bhola | DeHackEd all services got admin account. But just to get confirmed, what commands do I need? I issued relevant command to add default users of all services to admin | 20:30 |
| DeHackEd | there's a tenant/project named 'admin', and a role named 'admin'... so you have to assign cinder, nova, etc to the admin project with the admin role | 20:30 |
| bhola | DeHackEd Yes I did when installing openstack | 20:31 |
| DeHackEd | you might want to also check with `openstack --debug [...]` to see what request is getting the error. the openstack client must login to keystone first, both to login and because the URL to the cinder service comes from keystone as well. | 20:32 |
| bhola | like this openstack role add --project service --user <service user> admin | 20:32 |
| DeHackEd | oops, right, the "service" project, but "admin" role.. | 20:33 |
| bhola | just a sec let me check it | 20:36 |
| bhola | DeHackEd Yes I can see admin role in Dashboard user Identity->Roles | 20:41 |
| bhola | under* | 20:42 |
| bhola | openstack role list also shows admin role | 20:45 |
| DeHackEd | role assignment list --names | 20:47 |
| bhola | DeHackEd admin is assigned to nova, cinder, neutron, glance and placement for project "service" | 20:50 |
| bhola | it is also assigned to "admin" user for project "admin" | 20:52 |
| DeHackEd | okay, good.... so then what's wrong? it sounds like cinder can't authenticate to keystone itself... wrong auth_url/auth_uri (check the docs to see what is correct...), right username and password, and service name ("service") | 20:55 |
| bhola | checked it gain. It is correct. cinder --dubug list returned an error. | 20:57 |
| bhola | curl -g -i -X GET http://cinder:8776/v3/5bc8f7bdf0da41eb9dfa2d4ae82f7818/volumes/detail -H "Accept: application/json" -H "User-Agent: python-cinderclient" -H "X-Auth-Token: {SHA256}3c8102413607fd29f88ebe45b0625e8646b14354451de6bba5c3d5faa6ac8584" | 20:58 |
| bhola | DEBUG:keystoneauth:REQ: curl -g -i -X GET http://cinder:8776/v3/5bc8f7bdf0da41eb9dfa2d4ae82f7818/volumes/detail -H "Accept: application/json" -H "User-Agent: python-cinderclient" -H "X-Auth-Token: {SHA256}3c8102413607fd29f88ebe45b0625e8646b14354451de6bba5c3d5faa6ac8584" | 20:59 |
| DeHackEd | then there's still something wrong here... have you made config changes and not restarted cinder or something? | 20:59 |
| bhola | DEBUG:keystoneauth:RESP: [503] Connection: close Content-Length: 218 Content-Type: application/json Date: Thu, 22 Aug 2024 20:55:02 GMT Server: Apache/2.4.52 (Ubuntu) x-openstack-request-id: req-211e3139-4d2d-4117-8ecc-70d72741b838 | 20:59 |
| bhola | DEBUG:keystoneauth:RESP BODY: {"message": "The server is currently unavailable. Please try again at a later time.<br /><br />\nThe Keystone service is temporarily unavailable.\n\n", "code": "503 Service Unavailable", "title": "Service Unavailable"} | 21:00 |
| bhola | I ma sorry but I am new to openstack. These errors give some hints? | 21:00 |
| DeHackEd | check cinder's own logs... maybe /var/log/cinder or such ? | 21:01 |
| bhola | DeHackEd No changes made other than adding a new hdd for cinder-volumes. created voulme group and applied filter. Then restarted cinder-scheduler service | 21:02 |
| bhola | DeHackEd I don't see cinder-api service on cinder host. Has it been replaced with cinder-sheduler? | 21:05 |
| DeHackEd | no. you need cinder-api. but they don't need to be run on the same host... just that the service catalog lists a working URL | 21:05 |
| bhola | openstack service list shows 6 services placement, neutron, cinderv3, glance, keystone and nova | 21:10 |
| bhola | I don't see cinder-api service running on any host | 21:11 |
| bhola | I installed cinder-api cinder-scheduler packages on cinder host but it didn't create cinder-api service. It only created cinder-scheduler service | 21:12 |
| bhola | openstack calaog list shows 3 endpoints public, internal and admin for admin project only. Is this correct? | 21:17 |
| bhola | should there be separate endpoints for service project as well? | 21:18 |
| DeHackEd | sorry, i'm running out of ideas. but "cinder" in your URL.. is that literal? are you using /etc/hosts for DNS shenanigans? are the same entries on any remote hosts running openstack services? | 21:51 |
| bhola | DeHackEd yes I have installed all 6 services on separate nodes. cinder host name is "cinder" and its entry with corresponding ip address is in /etc/hosts file and this file is available on all nodes | 21:54 |
| bhola | All other services are running perfect and communicating with each other but cinder. can't figure out what is wrong. | 21:56 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!