So I was able to get things working, I added the following config options to all configs requiring [keystone_authtoken]:
I added '/v3' to: auth_uri = https://host.domain.com:5000 auth_url = https://host.domain.com:35357 and then had to add: cafile = /etc/pki/tls/certs/gd_bundle-g2-g1.crt After these changes it's working again. Thanks, Avery On Fri, Sep 29, 2017 at 9:49 AM, Ben Nemec <openst...@nemebean.com> wrote: > You may want to ask this on rdo-list, assuming RDO is where you got your > packages: https://www.redhat.com/mailman/listinfo/rdo-list > > Generally speaking, a minor update like that should not bring in any new > required configuration options. > > On 09/27/2017 04:51 AM, Avery Rozar wrote: > >> Hello all, >> I ran "yum update" on my OpenStack controller and now any request to the >> nova.api service (port 8774) results in an error in >> "/var/log/nova/nova-api.log". >> >> A simple get request, >> >> GET /v2.1/os-hypervisors/detail HTTP/1.1 >> Host: host.domain.com <http://host.domain.com/>:8774 >> >> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0) >> Gecko/20100101 Firefox/54.0 >> X-Auth-Token: XXXXXXXXXXXX >> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 >> Accept-Language: en-US,en;q=0.5 >> Content-Type: application/json >> Content-Length: 0 >> DNT: 1 >> Connection: close >> Upgrade-Insecure-Requests: 1 >> >> >> Results in and error logged to "/var/log/nova/nova-api.log >> >> WARNING keystoneauth.identity.generic.base [-] Discovering versions from >> the identity service failed when creating the password plugin. Attempting >> to determine version from URL. >> ERROR nova.api.openstack [-] Caught error: Could not determine a suitable >> URL for the plugin >> ERROR nova.api.openstack Traceback (most recent call last): >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/nova/api/openstack/__init__.py", line 88, in __call__ >> ERROR nova.api.openstack return req.get_response(self.application) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/request.py", >> line 1299, in send >> ERROR nova.api.openstack application, catch_exc_info=False) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/request.py", >> line 1263, in call_application >> ERROR nova.api.openstack app_iter = application(self.environ, >> start_response) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/dec.py", >> line 144, in __call__ >> ERROR nova.api.openstack return resp(environ, start_response) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/dec.py", >> line 130, in __call__ >> ERROR nova.api.openstack resp = self.call_func(req, *args, >> **self.kwargs) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/dec.py", >> line 195, in call_func >> ERROR nova.api.openstack return self.func(req, *args, **kwargs) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/osprofiler/web.py", >> line 108, in __call__ >> ERROR nova.api.openstack return request.get_response(self.appl >> ication) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/request.py", >> line 1299, in send >> ERROR nova.api.openstack application, catch_exc_info=False) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/request.py", >> line 1263, in call_application >> ERROR nova.api.openstack app_iter = application(self.environ, >> start_response) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/dec.py", >> line 130, in __call__ >> ERROR nova.api.openstack resp = self.call_func(req, *args, >> **self.kwargs) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/webob/dec.py", >> line 195, in call_func >> ERROR nova.api.openstack return self.func(req, *args, **kwargs) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/__init__.py", line 332, in __call__ >> ERROR nova.api.openstack response = self.process_request(req) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/__init__.py", line 623, in >> process_request >> ERROR nova.api.openstack resp = super(AuthProtocol, >> self).process_request(request) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/__init__.py", line 405, in >> process_request >> ERROR nova.api.openstack allow_expired=allow_expired) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/__init__.py", line 435, in >> _do_fetch_token >> ERROR nova.api.openstack data = self.fetch_token(token, **kwargs) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/__init__.py", line 762, in fetch_token >> ERROR nova.api.openstack allow_expired=allow_expired) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/_identity.py", line 217, in >> verify_token >> ERROR nova.api.openstack auth_ref = self._request_strategy.verify_ >> token( >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/_identity.py", line 168, in >> _request_strategy >> ERROR nova.api.openstack strategy_class = self._get_strategy_class() >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystonemiddleware/auth_token/_identity.py", line 190, in >> _get_strategy_class >> ERROR nova.api.openstack if self._adapter.get_endpoint(ver >> sion=klass.AUTH_VERSION): >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/keystoneauth1/adapter.py", >> line 176, in get_endpoint >> ERROR nova.api.openstack return self.session.get_endpoint(auth or >> self.auth, **kwargs) >> ERROR nova.api.openstack File >> "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", >> line 856, in get_endpoint >> ERROR nova.api.openstack return auth.get_endpoint(self, **kwargs) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystoneauth1/identity/base.py", line 212, in get_endpoint >> ERROR nova.api.openstack service_catalog = >> self.get_access(session).service_catalog >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystoneauth1/identity/base.py", line 136, in get_access >> ERROR nova.api.openstack self.auth_ref = self.get_auth_ref(session) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystoneauth1/identity/generic/base.py", line 196, in get_auth_ref >> ERROR nova.api.openstack self._plugin = self._do_create_plugin(session >> ) >> ERROR nova.api.openstack File "/usr/lib/python2.7/site-packa >> ges/keystoneauth1/identity/generic/base.py", line 191, in >> _do_create_plugin >> ERROR nova.api.openstack raise exceptions.DiscoveryFailure('Could >> not determine a suitable URL ' >> ERROR nova.api.openstack DiscoveryFailure: Could not determine a suitable >> URL for the plugin >> ERROR nova.api.openstack >> >> All nova requests seem to result in a smiler error. Am I possibly missing >> a "new" configuration option in nova.conf or api-paste.in < >> http://api-paste.in/>? >> >> >> Here is a list of packages that where updated via yum update. >> >> ---> Package openstack-cinder.noarch 1:10.0.1-1.el7 will be updated >> ---> Package openstack-cinder.noarch 1:10.0.5-1.el7 will be an update >> ---> Package openstack-dashboard.noarch 1:11.0.1-2.el7 will be updated >> ---> Package openstack-dashboard.noarch 1:11.0.3-1.el7 will be an update >> ---> Package openstack-heat-api.noarch 1:8.0.1-1.el7 will be updated >> ---> Package openstack-heat-api.noarch 1:8.0.4-1.el7 will be an update >> ---> Package openstack-heat-api-cfn.noarch 1:8.0.1-1.el7 will be updated >> ---> Package openstack-heat-api-cfn.noarch 1:8.0.4-1.el7 will be an update >> ---> Package openstack-heat-common.noarch 1:8.0.1-1.el7 will be updated >> ---> Package openstack-heat-common.noarch 1:8.0.4-1.el7 will be an update >> ---> Package openstack-heat-engine.noarch 1:8.0.1-1.el7 will be updated >> ---> Package openstack-heat-engine.noarch 1:8.0.4-1.el7 will be an update >> ---> Package openstack-keystone.noarch 1:11.0.0-1.el7 will be updated >> ---> Package openstack-keystone.noarch 1:11.0.3-1.el7 will be an update >> ---> Package openstack-magnum-api.noarch 0:4.1.0-2.el7 will be updated >> ---> Package openstack-magnum-api.noarch 0:4.1.3-1.el7 will be an update >> ---> Package openstack-magnum-common.noarch 0:4.1.0-2.el7 will be updated >> ---> Package openstack-magnum-common.noarch 0:4.1.3-1.el7 will be an >> update >> ---> Package openstack-magnum-conductor.noarch 0:4.1.0-2.el7 will be >> updated >> ---> Package openstack-magnum-conductor.noarch 0:4.1.3-1.el7 will be an >> update >> ---> Package openstack-neutron.noarch 1:10.0.1-1.el7 will be updated >> ---> Package openstack-neutron.noarch 1:10.0.3-1.el7 will be an update >> ---> Package openstack-neutron-common.noarch 1:10.0.1-1.el7 will be >> updated >> ---> Package openstack-neutron-common.noarch 1:10.0.3-1.el7 will be an >> update >> ---> Package openstack-neutron-fwaas.noarch 1:10.0.1-1.el7 will be updated >> ---> Package openstack-neutron-fwaas.noarch 1:10.1.0-1.el7 will be an >> update >> ---> Package openstack-neutron-ml2.noarch 1:10.0.1-1.el7 will be updated >> ---> Package openstack-neutron-ml2.noarch 1:10.0.3-1.el7 will be an update >> ---> Package openstack-neutron-openvswitch.noarch 1:10.0.1-1.el7 will be >> updated >> ---> Package openstack-neutron-openvswitch.noarch 1:10.0.3-1.el7 will be >> an update >> ---> Package openstack-nova-api.noarch 1:15.0.3-2.el7 will be updated >> ---> Package openstack-nova-api.noarch 1:15.0.7-1.el7 will be an update >> ---> Package openstack-nova-common.noarch 1:15.0.3-2.el7 will be updated >> ---> Package openstack-nova-common.noarch 1:15.0.7-1.el7 will be an update >> ---> Package openstack-nova-conductor.noarch 1:15.0.3-2.el7 will be >> updated >> ---> Package openstack-nova-conductor.noarch 1:15.0.7-1.el7 will be an >> update >> ---> Package openstack-nova-console.noarch 1:15.0.3-2.el7 will be updated >> ---> Package openstack-nova-console.noarch 1:15.0.7-1.el7 will be an >> update >> ---> Package openstack-nova-novncproxy.noarch 1:15.0.3-2.el7 will be >> updated >> ---> Package openstack-nova-novncproxy.noarch 1:15.0.7-1.el7 will be an >> update >> ---> Package openstack-nova-placement-api.noarch 1:15.0.3-2.el7 will be >> updated >> ---> Package openstack-nova-placement-api.noarch 1:15.0.7-1.el7 will be >> an update >> ---> Package openstack-nova-scheduler.noarch 1:15.0.3-2.el7 will be >> updated >> ---> Package openstack-nova-scheduler.noarch 1:15.0.7-1.el7 will be an >> update >> ---> Package openstack-selinux.noarch 0:0.7.13-2.el7 will be updated >> ---> Package openstack-selinux.noarch 0:0.8.7-1.el7 will be an update >> >> Thanks, >> Avery >> >> >> ____________________________________________________________ >> ______________ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscrib >> e >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >>
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev