[Openstack] DiscoveryFailure: Could not determine a suitable URL for the plugin

2016-07-30 Thread William Josefsson
Hi list, I get this error on centos 7 and liberty when I try to boot a
small vm. Anyone who can share what may be causing this? Will


$ nova boot --image Cirros --flavor m1.tiny --nic
net-id=e8e69f4d-d650-4f08-1252-bd8adfc192cb \
--security-group default --key-name mykey myinstance

ERROR (ClientException): Unexpected API Error. Please report this at
http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
 (HTTP 500)
(Request-ID: req-1343e5c3-62d3-4818-a7fb-26f5c61da381)


# NOVA-API.LOG ON CONTROLLER

2016-07-30 23:05:11.678 3358 WARNING oslo_config.cfg
[req-1343e5c3-62d3-4818-a7fb-26f5c61da381 f722963394d74760947e297bd1f7e794
03f3af397b254c1980f51cf41a9503ee - - -] Option "username" from group
"neutron" is deprecated. Use option "user-name" from group "neutron".
*2016-07-30 23:05:11.703 3358 WARNING
keystoneclient.auth.identity.generic.base
[req-1343e5c3-62d3-4818-a7fb-26f5c61da381 f722963394d74760947e297bd1f7e794
03f3af397b254c1980f51cf41a9503ee - - -] Discovering versions from the
identity service failed when creating the password plugin. Attempting to
determine version from URL.*
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
[req-1343e5c3-62d3-4818-a7fb-26f5c61da381 f722963394d74760947e297bd1f7e794
03f3af397b254c1980f51cf41a9503ee - - -] Unexpected exception in API method
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions Traceback
(most recent call last):
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/api/openstack/extensions.py", line
478, in wrapped
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions return
f(*args, **kwargs)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/api/validation/__init__.py", line
73, in wrapper
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions return
func(*args, **kwargs)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/api/validation/__init__.py", line
73, in wrapper
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions return
func(*args, **kwargs)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/api/openstack/compute/servers.py",
line 611, in create
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
**create_kwargs)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/hooks.py", line 149, in inner
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions rv =
f(*args, **kwargs)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/compute/api.py", line 1587, in create
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
check_server_group_quota=check_server_group_quota)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/compute/api.py", line 1187, in
_create_instance
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
auto_disk_config, reservation_id, max_count)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/compute/api.py", line 961, in
_validate_and_build_base_options
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
pci_request_info, requested_networks)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line
1092, in create_pci_requests_for_sriov_ports
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
neutron = get_client(context, admin=True)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 237,
in get_client
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
auth_token = _ADMIN_AUTH.get_token(_SESSION)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/keystoneclient/auth/identity/base.py",
line 200, in get_token
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions return
self.get_access(session).auth_token
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/keystoneclient/auth/identity/base.py",
line 240, in get_access
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
self.auth_ref = self.get_auth_ref(session)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/python2.7/site-packages/keystoneclient/auth/identity/generic/base.py",
line 184, in get_auth_ref
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
self._plugin = self._do_create_plugin(session)
2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
"/usr/lib/p

Re: [Openstack] DiscoveryFailure: Could not determine a suitable URL for the plugin

2016-07-30 Thread William Josefsson
I found a typo for auth_url in nova.conf [neutron] that caused this error!

On Sat, Jul 30, 2016 at 11:13 PM, William Josefsson <
william.josef...@gmail.com> wrote:

> Hi list, I get this error on centos 7 and liberty when I try to boot a
> small vm. Anyone who can share what may be causing this? Will
>
>
> $ nova boot --image Cirros --flavor m1.tiny --nic
> net-id=e8e69f4d-d650-4f08-1252-bd8adfc192cb \
> --security-group default --key-name mykey myinstance
>
> ERROR (ClientException): Unexpected API Error. Please report this at
> http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
>  (HTTP 500)
> (Request-ID: req-1343e5c3-62d3-4818-a7fb-26f5c61da381)
>
>
> # NOVA-API.LOG ON CONTROLLER
>
> 2016-07-30 23:05:11.678 3358 WARNING oslo_config.cfg
> [req-1343e5c3-62d3-4818-a7fb-26f5c61da381 f722963394d74760947e297bd1f7e794
> 03f3af397b254c1980f51cf41a9503ee - - -] Option "username" from group
> "neutron" is deprecated. Use option "user-name" from group "neutron".
> *2016-07-30 23:05:11.703 3358 WARNING
> keystoneclient.auth.identity.generic.base
> [req-1343e5c3-62d3-4818-a7fb-26f5c61da381 f722963394d74760947e297bd1f7e794
> 03f3af397b254c1980f51cf41a9503ee - - -] Discovering versions from the
> identity service failed when creating the password plugin. Attempting to
> determine version from URL.*
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> [req-1343e5c3-62d3-4818-a7fb-26f5c61da381 f722963394d74760947e297bd1f7e794
> 03f3af397b254c1980f51cf41a9503ee - - -] Unexpected exception in API method
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions Traceback
> (most recent call last):
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/api/openstack/extensions.py", line
> 478, in wrapped
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> return f(*args, **kwargs)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/api/validation/__init__.py", line
> 73, in wrapper
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> return func(*args, **kwargs)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/api/validation/__init__.py", line
> 73, in wrapper
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> return func(*args, **kwargs)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/api/openstack/compute/servers.py",
> line 611, in create
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> **create_kwargs)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/hooks.py", line 149, in inner
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions rv =
> f(*args, **kwargs)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/compute/api.py", line 1587, in create
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> check_server_group_quota=check_server_group_quota)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/compute/api.py", line 1187, in
> _create_instance
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> auto_disk_config, reservation_id, max_count)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/compute/api.py", line 961, in
> _validate_and_build_base_options
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> pci_request_info, requested_networks)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line
> 1092, in create_pci_requests_for_sriov_ports
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> neutron = get_client(context, admin=True)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 237,
> in get_client
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> auth_token = _ADMIN_AUTH.get_token(_SESSION)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/keystoneclient/auth/identity/base.py",
> line 200, in get_token
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> return self.get_access(session).auth_token
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions   File
> "/usr/lib/python2.7/site-packages/keystoneclient/auth/identity/base.py",
> line 240, in get_access
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openstack.extensions
> self.auth_ref = self.get_auth_ref(session)
> 2016-07-30 23:05:11.704 3358 ERROR nova.api.openst

[Openstack] (no subject)

2016-07-30 Thread Farhad Sunavala
Yes, this was intentionally done.The logical-source-port is important only at 
the point of classification.All successive classifications rely only on the 5 
tuple and MPLS label (chain ID).
Consider an extension of the scenario you mention below.
Sources: (similar to your case)a b
Port-pairs: (added ppe and ppf)ppcppdppeppf
Port-pair-groups: (added ppge and ppgf)ppgcppgdppgeppgf
Flow-classifiers:fc1: logical-source-port of a && tcpfc2: logical-source-port 
of b && tcp
Port-chains:pc1: fc1 && (ppgc + ppge)pc2: fc2 && (ppgd + ppgc + ppgf)


The flow-classifier has logical-src-port and protocol=tcpThe logical-src-port 
has no relevance in the middle of the chain.
In the middle of the chain, the only relevant flow-classifier is protocol=tcp.
If we allow it, we cannot distinguish TCP traffic coming out of ppgc (and 
subsequently ppc) as to whether to mark it with the label for pc1 or the label 
for pc2.
In other words, within a tenant the flow-classifiers need to be unique wrt the 
5 tuples.
thanks,Farhad.
Date: Fri, 29 Jul 2016 18:01:05 +0300
From: Artem Plakunov 
To: openstack@lists.openstack.org
Subject: [Openstack] [networking-sfc] Flow classifier conflict logic
Message-ID: <579b6fb1.3030...@lvk.cs.msu.su>
Content-Type: text/plain; charset="utf-8"; Format="flowed"

Hello.
We have two deployments with networking-sfc:
mirantis 8.0 (liberty) and mirantis 9.0 (mitaka).

I noticed a difference in how flow classifiers conflict with each other 
which I do not understand. I'm not sure if it is a bug or not.

I did the following on mitaka:
1. Create tenant 1 and network 1
2. Launch vms A and B in network 1
3. Create tenant 2, share network 1 to it with RBAC policy, launch vm C 
in network 1
4. Create tenant 3, share network 1 to it with RBAC policy, launch vm D 
in network 1
5. Setup sfc:
    create two port pairs for vm C and vm D with a bidirectional port
    create two port pair groups with these pairs (one pair in one group)
    create flow classifier 1: logical-source-port = vm A port, protocol 
= tcp
    create flow classifier 2: logical-source-port = vm B port, protocol 
= tcp
    create chain with group 1 and classifier 1
    create chain with group 2 and classifier 2 - this step gives the 
following error:

Flow Classifier 7f37c1ba-abe6-44a0-9507-5b982c51028b conflicts with Flow 
Classifier 4e97a8a5-cb22-4c21-8e30-65758859f501 in port chain 
d1070955-fae9-4483-be9e-0e30f2859282.
Neutron server returns request_ids: 
['req-9d0eecec-2724-45e8-84b4-7ccf67168b03']

The only thing neutron logs have is this from server.log:
2016-07-29 14:15:57.889 18917 INFO neutron.api.v2.resource 
[req-9d0eecec-2724-45e8-84b4-7ccf67168b03 
0b807c8616614b84a4b16a318248d28c 9de9dcec18424398a75a518249707a61 - - -] 
create failed (client error): Flow Classifier 
7f37c1ba-abe6-44a0-9507-5b982c51028b conflicts with Flow Classifier 
4e97a8a5-cb22-4c21-8e30-65758859f501 in port chain 
d1070955-fae9-4483-be9e-0e30f2859282.

I tried the same in liberty and it works and sfc successfully routes 
traffic from both vms to their respective port groups

Liberty setup:
neutron version 7.0.4
neutronclient version 3.1.1
networking-sfc version 1.0.0 (from pip package)

Mitaka setup:
neutron version 8.1.1
neutronclient version 5.0.0 (tried using 3.1.1 with same outcome)
networking-sfc version 1.0.1.dev74 (from master branch commit 
6730b6810355761cf55f04a40cd645f065f15752)

I'll attach the output of commands neutron port-list, port-pair-list, 
port-pair-group-list, flow-classifier-list and port-chain-list.

Is this an intended flow classifier behavior? If so, why? The port 
chains and all their participants are different.
-- next part --
root@node-8:~# neutron port-list
+--+--+---+--+
| id                                  | name | mac_address      | fixed_ips     
                                                                       |
+--+--+---+--+
| 0a75ef50-3d06-467b-8321-a0b9dc406a2b |      | fa:16:3e:e0:48:81 | 
{"subnet_id": "533598bc-0bfd-4e92-9133-33ffe5043d57", "ip_address": 
"172.20.2.168"}  |
| 0c88fc4a-83f7-4194-bb9c-1b5864795e18 |      | fa:16:3e:f3:e9:ea | 
{"subnet_id": "69838436-ff18-40c4-bc62-8811e4ef6c7c", "ip_address": 
"192.168.44.2"}  |
| 0f6bddbb-a5a6-459a-a9b3-d4ae0806e5a6 |      | fa:16:3e:f7:27:1f | 
{"subnet_id": "1e69d4a3-9696-49c0-a5b7-5de71d7db0b5", "ip_address": 
"10.0.40.3"}    |
| 1731aae5-cd3a-4373-b9b9-6bca775ea4c6 |      | fa:16:3e:d7:0f:87 | 
{"subnet_id": "69838436-ff18-40c4-bc62-8811e4ef6c7c", "ip_address": 
"192.168.44.6"}  |
| 1c15d87e-78dd-40b8-ba68-13f55017be01 |      | fa:16:3e:a8:fe:ca | 
{"subnet_id": "533598bc-0bfd-4e92-9133-33ffe5043d57", "ip_address": 
"172.20.2.130"}  |
| 1e707e4c-e75a-475a-b166-7d4e4