yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #95963
[Bug 2111148] Re: Unable to create instance
Hi, and thanks for reporting this issue.
Based on the logs, the problem appears to be related to authentication
and endpoint discovery in Keystone, or a configuration issue, not a bug
in Nova itself.
The following error is particularly telling:
keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find
versioned identity endpoints when attempting to authenticate.
Looking at your nova.conf files, it seems that your auth_url settings
point to different formats of Keystone endpoints, including:
http://controller:5000
http://controller:5000/v3
http://controller/identity
This looks highly suspicious.
As an example here what I have on my env for all services:
stack@openstack:~$ grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
We suggest reaching out on IRC channel #openstack on OFTC for support with authentication or deployment configuration issues like this.
Since this doesn’t appear to be a Nova bug, we will close this report as Invalid.
If you believe there is still a bug in Nova itself, feel free to reopen it and provide further clarification.
Thanks!
** Changed in: nova
Status: New => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/2111148
Title:
Unable to create instance
Status in OpenStack Compute (nova):
Invalid
Bug description:
I am currently using OpenStack 2024.1 Caracal for Ubuntu 22.04 LTS.
Scenario One:
The dashboard is currently installed, and when I create an instance from the dashboard,When I look at the log of apache2.
[Sat May 17 19:06:52.078837 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "" unsupported by glance
[Sat May 17 19:06:52.078902 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "docker" unsupported by glance
[Sat May 17 19:06:52.078930 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "ova" unsupported by glance
[Sat May 17 19:06:52.079199 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "ploop" unsupported by glance
[Sat May 17 19:07:03.047688 2025] [authz_core:error] [pid 15443:tid 140307479897664] [client 10.0.0.10:34646] AH01630: client denied by server configuration: /usr/bin/keystone-wsgi-public
[Sat May 17 19:07:03.059594 2025] [wsgi:error] [pid 15430:tid 140307610232384] [remote 10.0.0.1:45143] ERROR django.request Internal Server Error: /horizon/api/nova/servers/
When I look at the log of nova-api.
2025-05-17 19:07:03.049 20876 ERROR nova.api.openstack.wsgi keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. Forbidden (HTTP 403)
2025-05-17 19:07:03.049 20876 ERROR nova.api.openstack.wsgi
2025-05-17 19:07:03.057 20876 INFO nova.api.openstack.wsgi [None req-0a62b83e-4fff-47a7-979f-c51576990b65 ee82f85d22494286b25db5cd255901dd 884e923218aa447a9f39903087dde287 - - default default] HTTP exception thrown: Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
<class 'keystoneauth1.exceptions.discovery.DiscoveryFailure'>
All url configurations in the/etc/nova/nova.conf file of the controller node
grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
api_servers = http://controller:9292
www_authenticate_uri = http://controller:5000/v3
auth_url = http://controller:5000/v3
auth_url = http://controller:5000
auth_url = http://controller:5000/v3
auth_url = http://controller/identity
All url configurations in the/etc/nova/nova.conf file of the compute01 node
root@compute01:/var/log/nova# grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
api_servers = http://controller:9292
www_authenticate_uri = http://controller:5000/
auth_url = http://controller:5000/
auth_url = http://controller:5000
auth_url = http://controller:5000/v3
auth_url = http://controller:5000/v3
novncproxy_base_url = http://controller:6080/vnc_auto.html
All url configurations in the/etc/nova/nova.conf file of the compute02 node
root@compute01:/var/log/nova# grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
api_servers = http://controller:9292
www_authenticate_uri = http://controller:5000/
auth_url = http://controller:5000/
auth_url = http://controller:5000
auth_url = http://controller:5000/v3
auth_url = http://controller:5000/v3
novncproxy_base_url = http://controller:6080/vnc_auto.html
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/2111148/+subscriptions
References