yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1594320] Re: Can't create security group

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Turbo Fredriksson <1594320@xxxxxxxxxxxxxxxxxx>
Date: Mon, 20 Jun 2016 11:23:50 -0000
Reply-to: Bug 1594320 <1594320@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Apparently the problem was me. I had removed "auth_host" and
"auth_protocol" (and not set "auth_uri" or "identity_uri") which
apparently made it default to "https://127.0.0.1:35357";.

** Changed in: nova
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1594320

Title:
  Can't create security group

Status in OpenStack Compute (nova):
  Invalid

Bug description:
  ----- s n i p -----
  bladeA01b:~# openstack security group create --description "Allow incoming ICMP connections." icmp
  Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
  <class 'neutronclient.common.exceptions.InternalServerError'> (HTTP 500) (Request-ID: req-e6ea8936-e20a-4b47-854c-bae4d881fc89)
  ----- s n i p -----

  ----- s n i p -----
  ==> /var/log/nova/nova-api.log <==
  2016-06-20 11:40:36.204 16023 WARNING keystonemiddleware.auth_token [-] Using the in-process token cache is deprecated as of the 4.2.0 release and may be removed in the 5.0.0 release or the 'O' development cycle. The in-process cache causes inconsistent results and high memory usage. When the feature is removed the auth_token middleware will not cache tokens by default which may result in performance issues. It is recommended to use  memcache for the auth_token token cache by setting the memcached_servers option.
  2016-06-20 11:40:36.205 16023 WARNING oslo_config.cfg [-] Option "memcached_servers" from group "DEFAULT" is deprecated for removal.  Its value may be silently ignored in the future.
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver [req-e6ea8936-e20a-4b47-854c-bae4d881fc89 9a2b35cadef54b24a231c4f47f07b371 db39ce688efb4a5bba1e0d3dd682cce6 - - -] Neutron Error creating security group icmp
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver Traceback (most recent call last):
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver   File "/usr/lib/python2.7/dist-packages/nova/network/security_group/neutron_driver.py", line 52, in create_security_group
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver     body).get('security_group')
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 97, in with_params
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver     ret = self.function(instance, *args, **kwargs)
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 853, in create_security_group
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver     return self.post(self.security_groups_path, body=body)
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 363, in post
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver     headers=headers, params=params)
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 298, in do_request
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver     self._handle_fault_response(status_code, replybody, resp)
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 273, in _handle_fault_response
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver     exception_handler_v20(status_code, error_body)
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 84, in exception_handler_v20
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver     request_ids=request_ids)
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver InternalServerError: The server has either erred or is incapable of performing the requested operation.<br /><br />
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver Neutron server returns request_ids: ['req-4bfbf32a-1bf0-4336-bd56-ddb80ca1098a']
  2016-06-20 11:40:37.960 16023 ERROR nova.network.security_group.neutron_driver
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions [req-e6ea8936-e20a-4b47-854c-bae4d881fc89 9a2b35cadef54b24a231c4f47f07b371 db39ce688efb4a5bba1e0d3dd682cce6 - - -] Unexpected exception in API method
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions Traceback (most recent call last):
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/api/openstack/extensions.py", line 478, in wrapped
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     return f(*args, **kwargs)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/api/openstack/compute/security_groups.py", line 190, in create
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     context, group_name, group_description)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/network/security_group/neutron_driver.py", line 66, in create_security_group
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     six.reraise(*exc_info)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/network/security_group/neutron_driver.py", line 52, in create_security_group
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     body).get('security_group')
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 97, in with_params
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     ret = self.function(instance, *args, **kwargs)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 853, in create_security_group
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     return self.post(self.security_groups_path, body=body)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 363, in post
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     headers=headers, params=params)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 298, in do_request
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     self._handle_fault_response(status_code, replybody, resp)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 273, in _handle_fault_response
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     exception_handler_v20(status_code, error_body)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 84, in exception_handler_v20
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions     request_ids=request_ids)
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions InternalServerError: The server has either erred or is incapable of performing the requested operation.<br /><br />
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions Neutron server returns request_ids: ['req-4bfbf32a-1bf0-4336-bd56-ddb80ca1098a']
  2016-06-20 11:40:37.963 16023 ERROR nova.api.openstack.extensions
  2016-06-20 11:40:37.966 16023 INFO nova.api.openstack.wsgi [req-e6ea8936-e20a-4b47-854c-bae4d881fc89 9a2b35cadef54b24a231c4f47f07b371 db39ce688efb4a5bba1e0d3dd682cce6 - - -] HTTP exception thrown: Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
  <class 'neutronclient.common.exceptions.InternalServerError'>
  2016-06-20 11:40:37.968 16023 INFO nova.osapi_compute.wsgi.server [req-e6ea8936-e20a-4b47-854c-bae4d881fc89 9a2b35cadef54b24a231c4f47f07b371 db39ce688efb4a5bba1e0d3dd682cce6 - - -] 10.0.4.1 "POST /v2/db39ce688efb4a5bba1e0d3dd682cce6/os-security-groups HTTP/1.1" status: 500 len: 456 time: 1.7656932
  ----- s n i p -----

  My nova.config file:

  ----- s n i p -----
  [DEFAULT]
  dmz_net = 10.99.0.0
  dmz_mask = 255.255.255.0
  my_ip = 10.0.4.1
  my_block_storage_ip = $my_ip
  notify_on_state_change = vm_and_task_state
  pybasedir = /usr/lib/python2.7/dist-packages
  state_path = /var/lib/nova
  enabled_apis = osapi_compute,metadata
  instance_usage_audit_period = Hour
  memcached_servers = 127.0.0.1:11211
  instance_usage_audit = True
  block_device_allocate_retries = 300
  block_device_allocate_retries_interval = 10
  internal_service_availability_zone = internal
  default_availability_zone = nova
  default_schedule_zone = nova
  baremetal_scheduler_default_filters = RetryFilter,AvailabilityZoneFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ExactRamFilter,ExactDiskFilter,ExactCoreFilter
  scheduler_default_filters = RetryFilter,AvailabilityZoneFilter,RamFilter,DiskFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter
  firewall_driver = nova.virt.firewall.NoopFirewallDriver
  network_api_class = nova.network.neutronv2.api.API
  use_neutron = True
  default_floating_pool = ext-nat
  routing_source_ip = $my_ip
  linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver
  metadata_host = $my_ip
  security_group_api = neutron
  rpc_backend = rabbit
  [api_database]
  connection = mysql+pymysql://novaapi:NOVAAPI_PASSWD@control/novaapi
  [barbican]
  [cells]
  [cinder]
  cross_az_attach = True
  [conductor]
  [cors]
  [cors.subdomain]
  [database]
  connection = mysql+pymysql://nova:NOVA_PASSWD@control/nova
  [ephemeral_storage_encryption]
  [glance]
  [guestfs]
  [hyperv]
  [image_file_url]
  [ironic]
  [keymgr]
  [keystone_authtoken]
  http_connect_timeout = 5
  http_request_max_retries = 3
  region_name = europe-london
  auth_host = 10.0.4.1
  auth_protocol = http
  admin_user = admin
  admin_password = ADMIN_PASSWD
  admin_tenant_name = admin
  [libvirt]
  [matchmaker_redis]
  [metrics]
  [neutron]
  service_metadata_proxy = true
  metadata_proxy_shared_secret = META_SECRET
  url = http://127.0.0.1:9696
  auth_url = http://10.0.4.1:5000/v3
  auth_type = v3password
  password = NEUTRON_ADMIN_PASSWD
  project_domain_name = default
  project_name = admin
  tenant_name = admin
  user_domain_id = default
  user_domain_name = default
  username = admin
  [osapi_v21]
  [oslo_concurrency]
  lock_path = /var/lock/nova
  [oslo_messaging_amqp]
  [oslo_messaging_notifications]
  [oslo_messaging_rabbit]
  rabbit_host = openstack.bayour.com
  rabbit_userid = openstack
  rabbit_password = RABBIT_PASSWD
  [oslo_middleware]
  [oslo_policy]
  [rdp]
  [serial_console]
  [spice]
  server_listen = 0.0.0.0
  server_proxyclient_address = $my_ip
  enabled = true
  [ssl]
  [trusted_computing]
  [upgrade_levels]
  [vmware]
  [vnc]
  [workarounds]
  [xenserver]
  ----- s n i p -----

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1594320/+subscriptions
References

[Bug 1594320] [NEW] Can't create security group
From: Turbo Fredriksson, 2016-06-20