Barbican

  1. Bug #1592612
  2. Comment #6

Comment 6 for bug 1592612

Revision history for this message
Jiahao liang (jiahao.liang) wrote : Re: TLS container could not be found

q-svc.log:

2016-09-20 18:16:07.544 25054 WARNING oslo_config.cfg [req-82cbc8b5-70af-496c-8e37-e74275567452 admin -] Option "policy_dirs" from group "DEFAULT" is deprecated. Use option "policy_dirs" from group "oslo_policy".
2-b890-48c4-9926-3c53f167b5e1 admin -] Request body: {u'listener': {u'protocol': u'TERMINATED_HTTPS', u'name': u'listener1', u'default_tls_container_ref': u'http://192.168.200.43:9311/v1/containers/2817e144-9f11-4bed-a14e-0390edf89659', u'admin_state_up': True, u'protocol_port': u'443', u'loadbalancer_id': u'40e04e16-4d84-46d8-8dcd-6717a734d37e'}} prepare_request_body /opt/stack/neutron/neutron/api/v2/base.py:660
2016-09-20 18:16:08.070 25054 INFO neutron.quota [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Loaded quota_driver: <neutron.db.quota.driver.DbQuotaDriver object at 0x7ffd1042d190>.
2016-09-20 18:16:08.078 25054 DEBUG neutron.db.quota.driver [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Resources network_service_policy,external_policy,policy_target,policy_rule_set,vpnservice,servicechain_spec,port,subnet,external_segment,network,ipsec_site_connection,floatingip,security_group_rule,service_profile,policy_rule,endpoint_group,ikepolicy,ipsecpolicy,policy_classifier,l7policy,subnetpool,servicechain_node,listener,nat_pool,policy_target_group,l3_policy,policy_action,servicechain_instance,healthmonitor,security_group,router,l2_policy have unlimited quota limit. It is not required to calculated headroom make_reservation /opt/stack/neutron/neutron/db/quota/driver.py:170016-09-20 18:16:08.078 25054 DEBUG neutron.db.quota.driver [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Resources network_service_policy,external_policy,policy_target,policy_rule_set,vpnservice,servicechain_spec,port,subnet,external_segment,network,ipsec_site_connection,floatingip,security_group_rule,service_profile,policy_rule,endpoint_group,ikepolicy,ipsecpolicy,policy_classifier,l7policy,subnetpool,servicechain_node,listener,nat_pool,policy_target_group,l3_policy,policy_action,servicechain_instance,healthmonitor,security_group,router,l2_policy have unlimited quota limit. It is not required to calculated headroom make_reservation /opt/stack/neutron/neutron/db/quota/driver.py:170
2016-09-20 18:16:08.246 25054 DEBUG barbicanclient.client [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Creating Client object get_barbican_client /opt/stack/neutron-lbaas/neutron_lbaas/common/cert_manager/barbican_auth/barbican_acl.py:43
2016-09-20 18:16:08.247 25054 INFO neutron_lbaas.common.cert_manager.barbican_cert_manager [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Loading certificate container http://192.168.200.43:9311/v1/containers/2817e144-9f11-4bed-a14e-0390edf89659 from Barbican.
2016-09-20 18:16:08.248 25054 DEBUG barbicanclient.containers [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Creating consumer registration for container http://192.168.200.43:9311/v1/containers/2817e144-9f11-4bed-a14e-0390edf89659 as lbaas: lbaas://RegionOne/loadbalancer/40e04e16-4d84-46d8-8dcd-6717a734d37e get_cert /opt/stack/neutron-lbaas/neutron_lbaas/common/cert_manager/barbican_cert_manager.py:180
2016-09-20 18:16:08.645 25054 DEBUG barbicanclient.client [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Response status 200 request /usr/local/lib/python2.7/dist-packages/barbicanclient/client.py:65
2016-09-20 18:16:08.645 25054 DEBUG barbicanclient.client [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Response status 200 request /usr/local/lib/python2.7/dist-packages/barbicanclient/client.py:65
2016-09-20 18:16:08.646 25054 DEBUG barbicanclient.secrets [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Getting secret - Secret href: http://192.168.200.43:9311/v1/secrets/c44baa18-3964-455e-b7a1-e7467a245119 <genexpr> /usr/local/lib/python2.7/dist-packages/barbicanclient/containers.py:118
2016-09-20 18:16:08.646 25054 DEBUG barbicanclient.secrets [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Getting secret - Secret href: http://192.168.200.43:9311/v1/secrets/469fe858-44cc-431d-9c7c-a6d7936ed56c <genexpr> /usr/local/lib/python2.7/dist-packages/barbicanclient/containers.py:118
2016-09-20 18:16:08.685 25054 DEBUG barbicanclient.client [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Response status 200 request /usr/local/lib/python2.7/dist-packages/barbicanclient/client.py:65
2016-09-20 18:16:08.726 25054 DEBUG barbicanclient.client [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Response status 403 request /usr/local/lib/python2.7/dist-packages/barbicanclient/client.py:65
2016-09-20 18:16:08.726 25054 ERROR barbicanclient.client [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] 4xx Client error: Forbidden
2016-09-20 18:16:08.727 25054 INFO neutron_lbaas.common.cert_manager.barbican_cert_manager [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Deregistering as a consumer of http://192.168.200.43:9311/v1/containers/2817e144-9f11-4bed-a14e-0390edf89659 in Barbican.
2016-09-20 18:16:08.727 25054 DEBUG barbicanclient.containers [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Deleting consumer registration for container http://192.168.200.43:9311/v1/containers/2817e144-9f11-4bed-a14e-0390edf89659 as lbaas: lbaas://RegionOne/loadbalancer/40e04e16-4d84-46d8-8dcd-6717a734d37e delete_cert /opt/stack/neutron-lbaas/neutron_lbaas/common/cert_manager/barbican_cert_manager.py:206
2016-09-20 18:16:08.837 25054 DEBUG barbicanclient.client [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] Response status 200 request /usr/local/lib/python2.7/dist-packages/barbicanclient/client.py:65
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] create failed
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource Traceback (most recent call last):
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/opt/stack/neutron/neutron/api/v2/resource.py", line 84, in resource
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource result = method(request=request, **args)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/opt/stack/neutron/neutron/api/v2/base.py", line 410, in create
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource return self._create(request, body, **kwargs)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/usr/local/lib/python2.7/dist-packages/oslo_db/api.py", line 148, in wrapper
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource ectxt.value = e.inner_exc
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/usr/local/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 220, in __exit__
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource self.force_reraise()
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/usr/local/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 196, in force_reraise
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource six.reraise(self.type_, self.value, self.tb)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/usr/local/lib/python2.7/dist-packages/oslo_db/api.py", line 138, in wrapper
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource return f(*args, **kwargs)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/opt/stack/neutron/neutron/api/v2/base.py", line 521, in _create
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource obj = do_create(body)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/opt/stack/neutron/neutron/api/v2/base.py", line 503, in do_create
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource request.context, reservation.reservation_id)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/usr/local/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 220, in __exit__
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource self.force_reraise()
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/usr/local/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 196, in force_reraise
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource six.reraise(self.type_, self.value, self.tb)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/opt/stack/neutron/neutron/api/v2/base.py", line 496, in do_create
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource return obj_creator(request.context, **kwargs)
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource File "/opt/stack/neutron-lbaas/neutron_lbaas/services/loadbalancer/plugin.py", line 735, in create_listener
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource raise exc
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource TLSContainerInvalid: TLS container http://192.168.200.43:9311/v1/containers/2817e144-9f11-4bed-a14e-0390edf89659 is invalid. Forbidden
2016-09-20 18:16:08.930 25054 ERROR neutron.api.v2.resource
2016-09-20 18:16:08.933 25054 INFO neutron.wsgi [req-9ca04dda-b890-48c4-9926-3c53f167b5e1 admin -] 192.168.200.43 - - [20/Sep/2016 18:16:08] "POST /v2.0/lbaas/listeners.json HTTP/1.1" 500 424 0.943050