yahoo-eng-team team mailing list archive

[sean mooney <2091936@xxxxxxxxxxxxxxxxxx>]

that not eeactly correct.

wether its https://controller/identity";  or  http://controller:5000/identity 
depend on how you install keystone, what port its on and if your using tls.


** Changed in: nova
       Status: New => Opinion

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/2091936

Title:
  nova service_user wrong auth_url

Status in OpenStack Compute (nova):
  Opinion

Bug description:
  Dalmatian 2024.2

  Using auth_url in service_user section in nova.conf (for both control
  and compute nodes) from official docs will lead to critical errors
  while launching an instance:

  2024-12-17 13:26:16.285 1484138 ERROR nova.api.openstack.wsgi [None
  req-3fd1a91a-b6df-46b4-a197-5154ffe1a0f3
  39ef1840d2d14de49ba16ac7e11ec2c4 b6f178e22d304f99a905c31f0e374587 - -
  default default] Unexpected exception in API method:
  keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find
  versioned identity endpoints when attempting to authenticate. Please
  check that your auth_url is correct. Unable to establish connection to
  https://controller/identity: HTTPSConnectionPool(host='controller',
  port=443): Max retries exceeded with url: /identity (Caused by
  NewConnectionError('<urllib3.connection.HTTPSConnection object at
  0x7f741764cd90>: Failed to establish a new connection: [Errno 111]
  ECONNREFUSED'))

  The workaround for this is to define port and http protocol for
  keystone authentication:

  Instead of "auth_url = https://controller/identity"; should be used:

  auth_url = http://controller:5000/identity

  OS: AlmaLinux 9.5

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/2091936/+subscriptions