How do I tell quickstart to generate certs and enable tls? From: Juan Antonio Osorio [mailto:jaosor...@gmail.com] Sent: Wednesday, December 6, 2017 5:24 PM To: OpenStack Development Mailing List (not for usage questions) <openstack-dev@lists.openstack.org> Subject: Re: [openstack-dev] [tripleo] overcloud keystone error "Could not determine a suitable URL for the plugin"
On 6 Dec 2017 16:58, "Moshe Levi" <mosh...@mellanox.com<mailto:mosh...@mellanox.com>> wrote: I have the access to 10.0.0.0 network I remove the -e /home/stack/enable-tls.yaml -e ~/heat-templates/environments/tls-endpoints-public-ip.yaml -e /home/stack/inject-trust-anchor.yaml Form the ./overcloud-deploy.sh and now it working The issue you posted wasn't a TLS issue, but it might be that it was being hidden by nova. You could truly to access keystone directly and that will be more revealing. My /home/stack/enable-tls.yaml and /home/stack/inject-trust-anchor.yaml were taken from wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/master/test-environments/enable-tls.yaml<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Fenable-tls.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=MBqec8H5KjiEIPJDT%2F1UxxBntYERIfT6EykQNKCIaIA%3D&reserved=0> wget https://raw.githubusercontent.com/openstack-infra/tripleo-ci/master/test-environments/inject-trust-anchor.yaml<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fopenstack-infra%2Ftripleo-ci%2Fmaster%2Ftest-environments%2Finject-trust-anchor.yaml&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=SBRviDdKz1OGlrfqyDHVGPWvyKwz4eLxB%2BuxfCKIEj0%3D&reserved=0> This will only work if you use the exact same fixed IP as we use in CI. So i don't recommend using that. Rather generate your own certs or tell quickstart to do it for you by using the appropriate flag. So maybe the is an issue with tripleo or just these config files From: Juan Antonio Osorio [mailto:jaosor...@gmail.com<mailto:jaosor...@gmail.com>] Sent: Wednesday, December 6, 2017 12:36 PM To: OpenStack Development Mailing List (not for usage questions) <openstack-dev@lists.openstack.org<mailto:openstack-dev@lists.openstack.org>> Subject: Re: [openstack-dev] [tripleo] overcloud keystone error "Could not determine a suitable URL for the plugin" From the node you're running the nova command, do you have access to the 10.0.0.0 network (external)? In virtual environments, quickstart will leave an overcloud-prep-network.sh script that will create a vlan interface that gives the undercloud access to that network. So, if it's a virtual environment and you're running that command from the undercloud (which from the log you sent it seems that's the case) you need to run that. Note that you need to run that every time you update your undercloud. BR On 6 Dec 2017 09:06, "Moshe Levi" <mosh...@mellanox.com<mailto:mosh...@mellanox.com>> wrote: Hi all, We deploy tripleo master using quickstart. We this delorean repo: name=delorean baseurl=https://trunk.rdoproject.org/centos7-master/ac/82/ac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7/<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftrunk.rdoproject.org%2Fcentos7-master%2Fac%2F82%2Fac82ea9271a4ae3860528eaf8a813da7209e62a6_28eeb6c7%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=R6s6CvAGGAB97GYgCsCsT%2BxU0PQ1fZ89xAuUQFM5tL8%3D&reserved=0> The undercloud and overcloud deployment were successfully, but we I try to run command on the overcloud I am getting the keystone error "Could not determine a suitable URL for the plugin" See nova-list with debug info [1] Do you know how to resolve this? Help in troubleshooting this issue will be appreciated. [1] http://paste.openstack.org/show/628240/<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpaste.openstack.org%2Fshow%2F628240%2F&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=o4nTXxk826W8ys1W1DvZUelSLS5uTT9McwazErh3wOY%3D&reserved=0> __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=Zv8CbJlDuv3ZEiLbp%2BHX%2FQEqTDd%2Fndh4wd700hNdW8I%3D&reserved=0> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7C4ae1221315a84cee96a708d53c9544bd%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481534161188454&sdata=T7Tc%2FtBAv1zl4X3TbTJIqQQ5ZW2PtSrvxVACYChEa40%3D&reserved=0> __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2FOpenStack-dev-request%40lists.openstack.org%3Fsubject%3Aunsubscribe&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=7CRrtWDEFDtfqgTVxlVueVp8G5im5J6sdSGXs6%2BDzQE%3D&reserved=0> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openstack.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fopenstack-dev&data=02%7C01%7Cmoshele%40mellanox.com%7Cadfadec5a9aa40e0d56508d53cbd6053%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636481706419069326&sdata=hjUEAdmU%2Bv%2BXqrVgRRZ2hFoCgmu9ZjDJ1Qkry%2FV3YI8%3D&reserved=0>
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
