← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1505930] [NEW] Fix key manager service endpoints in devstack Nova ephemeral

 

Public bug reported:

Using a Devstack setup to configure Nova ephemeral with Barbican key
manager failed, when creating an instance.

Detailed description:

1. Version of Nova/Barbican we are using:

   - stable/Liberty

2. Relevant log files:

    - n-api.log  Relevant section of the log file is attached with the
bug report.

3. Reproduce steps:
    a) Install via devstack, with following nova post-configuration in local.conf (complete local.conf is attached)

       #...
       [[post-config|$NOVA_CONF]]
       [keymgr]
       api_class = nova.keymgr.barbican.BarbicanKeyManager

       [libvirt]
       images_type = lvm
       images_volume_group = stack-volumes-default

        [ephemeral_storage_encryption]
        cipher = aes-xts-plain64
        enabled = True
       key_size = 256
       #...

     b) Launch an instance from Horizon or using the following command line:
         <prompt>$ nova boot --flavor m1.tiny --image cirros-0.3.4-x86_64-uec --nic net-id=YOUR_NET_ID --security-group default  demo-instance1

     c) Launch instance failed with following error:
         ERROR (ClientException): Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach...
         <class 'barbicanclient.exceptions.HTTPClientError'> (HTTP 500) (Request-ID: req-3be2a530-9df3-4e34-...)

4) Possible issue:
     -After analyzing the log files, the issue seems to be in nova key manager version discovery.

** Affects: nova
     Importance: Undecided
         Status: New

** Attachment added: "nova api log file"
   https://bugs.launchpad.net/bugs/1505930/+attachment/4494150/+files/n-api.log

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1505930

Title:
  Fix key manager service endpoints in devstack Nova ephemeral

Status in OpenStack Compute (nova):
  New

Bug description:
  Using a Devstack setup to configure Nova ephemeral with Barbican key
  manager failed, when creating an instance.

  Detailed description:

  1. Version of Nova/Barbican we are using:

     - stable/Liberty

  2. Relevant log files:

      - n-api.log  Relevant section of the log file is attached with the
  bug report.

  3. Reproduce steps:
      a) Install via devstack, with following nova post-configuration in local.conf (complete local.conf is attached)

         #...
         [[post-config|$NOVA_CONF]]
         [keymgr]
         api_class = nova.keymgr.barbican.BarbicanKeyManager

         [libvirt]
         images_type = lvm
         images_volume_group = stack-volumes-default

          [ephemeral_storage_encryption]
          cipher = aes-xts-plain64
          enabled = True
         key_size = 256
         #...

       b) Launch an instance from Horizon or using the following command line:
           <prompt>$ nova boot --flavor m1.tiny --image cirros-0.3.4-x86_64-uec --nic net-id=YOUR_NET_ID --security-group default  demo-instance1

       c) Launch instance failed with following error:
           ERROR (ClientException): Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach...
           <class 'barbicanclient.exceptions.HTTPClientError'> (HTTP 500) (Request-ID: req-3be2a530-9df3-4e34-...)

  4) Possible issue:
       -After analyzing the log files, the issue seems to be in nova key manager version discovery.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1505930/+subscriptions


Follow ups