yahoo-eng-team team mailing list archive

[Uggla <2111148@xxxxxxxxxxxxxxxxxx>]

Hi, and thanks for reporting this issue.

Based on the logs, the problem appears to be related to authentication
and endpoint discovery in Keystone, or a configuration issue, not a bug
in Nova itself.

The following error is particularly telling:

keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find
versioned identity endpoints when attempting to authenticate.

Looking at your nova.conf files, it seems that your auth_url settings
point to different formats of Keystone endpoints, including:

    http://controller:5000

    http://controller:5000/v3

    http://controller/identity


This looks highly suspicious.

As an example here what I have on my env for all services:
stack@openstack:~$ grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity
auth_url = http://192.168.122.78/identity


We suggest reaching out on IRC channel #openstack on OFTC for support with authentication or deployment configuration issues like this.

Since this doesn’t appear to be a Nova bug, we will close this report as Invalid.
If you believe there is still a bug in Nova itself, feel free to reopen it and provide further clarification.

Thanks!

** Changed in: nova
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/2111148

Title:
  Unable to create instance

Status in OpenStack Compute (nova):
  Invalid

Bug description:
  I am currently using OpenStack 2024.1 Caracal for Ubuntu 22.04 LTS.

  Scenario One：
  The dashboard is currently installed, and when I create an instance from the dashboard,When I look at the log of apache2.

  [Sat May 17 19:06:52.078837 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "" unsupported by glance
  [Sat May 17 19:06:52.078902 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "docker" unsupported by glance
  [Sat May 17 19:06:52.078930 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "ova" unsupported by glance
  [Sat May 17 19:06:52.079199 2025] [wsgi:error] [pid 15430:tid 140307601839680] [remote 10.0.0.1:45138] WARNING openstack_dashboard.api.glance OPENSTACK_IMAGE_BACKEND has a format "ploop" unsupported by glance
  [Sat May 17 19:07:03.047688 2025] [authz_core:error] [pid 15443:tid 140307479897664] [client 10.0.0.10:34646] AH01630: client denied by server configuration: /usr/bin/keystone-wsgi-public
  [Sat May 17 19:07:03.059594 2025] [wsgi:error] [pid 15430:tid 140307610232384] [remote 10.0.0.1:45143] ERROR django.request Internal Server Error: /horizon/api/nova/servers/

  When I look at the log of nova-api.

  2025-05-17 19:07:03.049 20876 ERROR nova.api.openstack.wsgi keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. Forbidden (HTTP 403)
  2025-05-17 19:07:03.049 20876 ERROR nova.api.openstack.wsgi
  2025-05-17 19:07:03.057 20876 INFO nova.api.openstack.wsgi [None req-0a62b83e-4fff-47a7-979f-c51576990b65 ee82f85d22494286b25db5cd255901dd 884e923218aa447a9f39903087dde287 - - default default] HTTP exception thrown: Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
  <class 'keystoneauth1.exceptions.discovery.DiscoveryFailure'>

  All url configurations in the/etc/nova/nova.conf file of the controller node
  grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
  api_servers = http://controller:9292
  www_authenticate_uri = http://controller:5000/v3
  auth_url = http://controller:5000/v3
  auth_url = http://controller:5000
  auth_url = http://controller:5000/v3
  auth_url = http://controller/identity

  All url configurations in the/etc/nova/nova.conf file of the compute01 node
  root@compute01:/var/log/nova# grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
  api_servers = http://controller:9292
  www_authenticate_uri = http://controller:5000/
  auth_url = http://controller:5000/
  auth_url = http://controller:5000
  auth_url = http://controller:5000/v3
  auth_url = http://controller:5000/v3
  novncproxy_base_url = http://controller:6080/vnc_auto.html

  All url configurations in the/etc/nova/nova.conf file of the compute02 node
  root@compute01:/var/log/nova# grep -i "http" /etc/nova/nova.conf | grep -Ev "#.*"
  api_servers = http://controller:9292
  www_authenticate_uri = http://controller:5000/
  auth_url = http://controller:5000/
  auth_url = http://controller:5000
  auth_url = http://controller:5000/v3
  auth_url = http://controller:5000/v3
  novncproxy_base_url = http://controller:6080/vnc_auto.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/2111148/+subscriptions