API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Aug 12th, 2015
297
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.29 KB | None | 0 0
raw download clone embed print report
  1. * An OPNFV prototype for multi region deployment using docker containers
  2. * two regions, "Kista" and "Solna"
  3. * Openstack Kilo except keystone server running latest master
  4. * Fernet tokens
  5. * only two services, keystone and glance, endpoint list:
  6.  
  7. root@3e842d81ac03:~# openstack endpoint list
  8. +----------------------------------+--------+--------------+--------------+---------+-----------+--------------------------+
  9. | ID | Region | Service Name | Service Type | Enabled | Interface | URL |
  10. +----------------------------------+--------+--------------+--------------+---------+-----------+--------------------------+
  11. | 36ad2bf798a24381bc6f07e4d13c4aa6 | Kista | glance | image | True | public | http://172.17.0.18:9292 |
  12. | 60598b753ae3442a8ae4d2099ede0642 | Kista | keystone | identity | True | admin | http://172.17.0.12:35357 |
  13. | 69fbb6c8122546e09a3b18981788c77e | Solna | glance | image | True | public | http://172.17.0.31:9292 |
  14. | 6dff5fdc31174d19902a7e790feee891 | Kista | keystone | identity | True | internal | http://172.17.0.12:5000 |
  15. | 7287a6f7b16f4f12a26725d452a3ce62 | Kista | glance | image | True | internal | http://172.17.0.18:9292 |
  16. | 87c9dc128a9b4ca3bec6a5aded6cbc6d | Solna | keystone | identity | True | admin | http://172.17.0.28:35357 |
  17. | 8be0efcc784d46fa811a3d01699f8d5a | Kista | glance | image | True | admin | http://172.17.0.18:9292 |
  18. | 8c330b85280a4cd1a37e6bf37e825e1c | Solna | glance | image | True | internal | http://172.17.0.31:9292 |
  19. | ab2f3ff8a53d4bcab64ab5c250f4cf75 | Kista | keystone | identity | True | public | http://172.17.0.12:5000 |
  20. | f8940f442701434c816e0dfbbdb8202e | Solna | glance | image | True | admin | http://172.17.0.31:9292 |
  21. +----------------------------------+--------+--------------+--------------+---------+-----------+--------------------------+
  22.  
  23. * Goal is for user to authenticate with keystone in region "Kista" and use
  24. glance in region "Solna", with local keystone token validation in region "Solna"
  25.  
  26. * This does not work since keystoneclient (in context of glance-api) decides to
  27. ask keystone in "Kista" for token validation despite being configured with the local
  28. keystone in "Solna"
  29.  
  30. Logs from glance-api in region "Solna"
  31.  
  32. 2015-08-12 12:23:08.130 239 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: GET /v1/images/detail Accept: */* process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:47
  33. 2015-08-12 12:23:08.131 239 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:60
  34. 2015-08-12 12:23:08.131 239 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v1 process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:72
  35. 2015-08-12 12:23:08.131 239 DEBUG glance.api.middleware.version_negotiation [-] new path /v1/images/detail process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:73
  36. 2015-08-12 12:23:08.132 239 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://172.17.0.28:35357 -H "Accept: application/json" -H "User-Agent: python-keystoneclient" _http_log_request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
  37. 2015-08-12 12:23:08.151 239 DEBUG keystoneclient.session [-] RESP: [300] date: Wed, 12 Aug 2015 12:23:08 GMT vary: X-Auth-Token content-length: 593 content-type: application/json connection: keep-alive
  38. RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "http://172.17.0.28:35357/v3/", "rel": "self"}]}, {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "http://172.17.0.28:35357/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}]}}
  39. _http_log_response /usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
  40.  
  41. 2015-08-12 12:23:08.152 239 DEBUG keystoneclient.auth.identity.v3 [-] Making authentication request to http://172.17.0.28:35357/v3/auth/tokens get_auth_ref /usr/lib/python2.7/dist-packages/keystoneclient/auth/identity/v3.py:125
  42.  
  43. =====> keystone URL above is correct and is the local keystone, below it is the remote keystone, what happened? <============
  44.  
  45. 2015-08-12 12:23:08.816 239 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://172.17.0.12:35357 -H "Accept: application/json" -H "User-Agent: python-keystoneclient" _http_log_request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
  46. 2015-08-12 12:23:08.819 239 DEBUG keystoneclient.session [-] RESP: [300] date: Wed, 12 Aug 2015 12:23:08 GMT vary: X-Auth-Token content-length: 593 content-type: application/json connection: keep-alive
  47. RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "http://172.17.0.12:35357/v3/", "rel": "self"}]}, {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "http://172.17.0.12:35357/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}]}}
  48. _http_log_response /usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
  49. 2015-08-12 12:23:08.819 239 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://172.17.0.12:35357/v3/auth/tokens -H "X-Subject-Token: {SHA1}9a2859ba59b1994ad146ee416d78bd841d4c67c3" -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}118425ba0c14e3cc99cb78cb65c052cf817588cb" _http_log_request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
  50. 2015-08-12 12:23:08.891 239 DEBUG keystoneclient.session [-] RESP: [200] content-length: 2192 x-subject-token: {SHA1}9a2859ba59b1994ad146ee416d78bd841d4c67c3 vary: X-Auth-Token connection: keep-alive date: Wed, 12 Aug 2015 12:23:08 GMT content-type: application/json x-openstack-request-id: req-34b96ad7-acc9-4c73-83bf-5c77eb9b9d4e
  51. RESP BODY: {"token": {"methods": ["password"], "roles": [{"id": "feafa6ef8e524da68d204c613ea2921d", "name": "user"}], "expires_at": "2015-08-12T13:23:08.124827Z", "project": {"domain": {"id": "f4e8a5d1f76e49d599a47d57070b9983", "name": "acme"}, "id": "dd8b6e87b24d4769bff21cc335be03fc", "name": "demo"}, "catalog": "<removed>", "extras": {}, "user": {"domain": {"id": "f4e8a5d1f76e49d599a47d57070b9983", "name": "acme"}, "id": "fff9637335cb5f2c4e73c040f44e1ad8b9a6f7531d001a46b630274e92fd025c", "name": "john"}, "audit_ids": ["JuJVhGpiT2yqx_fbv7WlbA"], "issued_at": "2015-08-12T12:23:08.000000Z"}}
  52. _http_log_response /usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
  53. 2015-08-12 12:23:08.893 239 DEBUG oslo_policy.openstack.common.fileutils [req-48617a30-8df4-4a35-a07e-0adb5e01c24e fff9637335cb5f2c4e73c040f44e1ad8b9a6f7531d001a46b630274e92fd025c dd8b6e87b24d4769bff21cc335be03fc - - -] Reloading cached file /etc/glance/policy.json read_cached_file /usr/lib/python2.7/dist-packages/oslo_policy/openstack/common/fileutils.py:64
  54. 2015-08-12 12:23:08.893 239 DEBUG oslo_policy.policy [req-48617a30-8df4-4a35-a07e-0adb5e01c24e fff9637335cb5f2c4e73c040f44e1ad8b9a6f7531d001a46b630274e92fd025c dd8b6e87b24d4769bff21cc335be03fc - - -] Reloaded policy file: /etc/glance/policy.json _load_policy_file /usr/lib/python2.7/dist-packages/oslo_policy/policy.py:403
  55. 2015-08-12 12:23:08.897 239 DEBUG oslo_policy.policy [req-48617a30-8df4-4a35-a07e-0adb5e01c24e fff9637335cb5f2c4e73c040f44e1ad8b9a6f7531d001a46b630274e92fd025c dd8b6e87b24d4769bff21cc335be03fc - - -] Reloaded policy file: /etc/glance/policy.json _load_policy_file /usr/lib/python2.7/dist-packages/oslo_policy/policy.py:403
  56. 2015-08-12 12:23:08.898 239 DEBUG glance.common.client [req-48617a30-8df4-4a35-a07e-0adb5e01c24e fff9637335cb5f2c4e73c040f44e1ad8b9a6f7531d001a46b630274e92fd025c dd8b6e87b24d4769bff21cc335be03fc - - -] Constructed URL: http://172.17.0.30:9191/images/detail?sort_key=name&sort_dir=asc&limit=20 _construct_url /usr/lib/python2.7/dist-packages/glance/common/client.py:401
  57. 2015-08-12 12:23:09.053 239 DEBUG glance.registry.client.v1.client [req-48617a30-8df4-4a35-a07e-0adb5e01c24e fff9637335cb5f2c4e73c040f44e1ad8b9a6f7531d001a46b630274e92fd025c dd8b6e87b24d4769bff21cc335be03fc - - -] Registry request GET /images/detail HTTP 200 request id req-req-d9d5aa11-3385-4d6f-a390-a55ee17f1a8e do_request /usr/lib/python2.7/dist-packages/glance/registry/client/v1/client.py:124
  58. 2015-08-12 12:23:09.054 239 INFO eventlet.wsgi.server [req-48617a30-8df4-4a35-a07e-0adb5e01c24e fff9637335cb5f2c4e73c040f44e1ad8b9a6f7531d001a46b630274e92fd025c dd8b6e87b24d4769bff21cc335be03fc - - -] 172.17.0.32 - - [12/Aug/2015 12:23:09] "GET /v1/images/detail?sort_key=name&sort_dir=asc&limit=20 HTTP/1.1" 200 231 0.924583
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!