Received error response from Keystone server at http://192.168.0.17:5000/v3/tokens: Not Found

Bug #1445422 reported by Anastasia Palkina
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Igor Yozhikov

Bug Description

"build_id": "2015-04-15_23-18-33",
"ostf_sha": "90f232a25d10f98db9d5531a3b133319529f57aa",
"build_number": "314",
"release_versions": {"2014.2-6.1": {"VERSION": {"build_id": "2015-04-15_23-18-33", "ostf_sha": "90f232a25d10f98db9d5531a3b133319529f57aa", "build_number": "314", "api": "1.0", "nailgun_sha": "24b56283fb4caaba6b6414056dad30e503a7c30f", "openstack_version": "2014.2-6.1", "production": "docker", "python-fuelclient_sha": "ff186de358cbda489a320723de47a9e61ae23364", "astute_sha": "36a3d54baf86480326866279778b867086aa4b05", "feature_groups": ["mirantis"], "release": "6.1", "fuelmain_sha": "d3aa72d814c3f18799b566363004a22591161cef", "fuellib_sha": "ab6dbba825a5e54f3183ed8582921a0328b211c7"}}}, "auth_required": true,
"api": "1.0",
"nailgun_sha": "24b56283fb4caaba6b6414056dad30e503a7c30f",
"openstack_version": "2014.2-6.1",
"production": "docker",
"python-fuelclient_sha": "ff186de358cbda489a320723de47a9e61ae23364",
"astute_sha": "36a3d54baf86480326866279778b867086aa4b05",
"feature_groups": ["mirantis"],
"release": "6.1",
"fuelmain_sha": "d3aa72d814c3f18799b566363004a22591161cef",
"fuellib_sha": "ab6dbba825a5e54f3183ed8582921a0328b211c7"

1. Create new environment (Ubuntu)
2. Choose Neutron, Vlan
3. Choose Sahara, Ceilometer
4. Add 3 controller+mongo, 1 compute+cinder
5. Start deployment. It was successful
6. Start OSTF tests. Most of them has failed
7. There is error on primary controller in puppet.log (node-9):

2015-04-16 16:49:36 ERR

 (/Stage[main]/Heat::Keystone::Domain/Heat_domain_id_setter[heat_domain_id]/ensure) change from absent to present failed: Received error response from Keystone server at http://192.168.0.17:5000/v3/tokens: Not Found

root@node-9:~# keystone user-list
Authorization Failed: Gateway Timeout (HTTP 504)

Logs are here: https://drive.google.com/a/mirantis.com/file/d/0B6SjzarTGFxaTlZYQ2ZjcU1BdDg/view?usp=sharing

Tags: heat
description: updated
description: updated
Changed in fuel:
assignee: Fuel Library Team (fuel-library) → Igor Yozhikov (iyozhikov)
status: New → Confirmed
ruhe (ruhe)
tags: added: heat
Vasyl Saienko (vsaienko)
Changed in fuel:
assignee: Igor Yozhikov (iyozhikov) → Vasyl Saienko (vsaienko)
Revision history for this message
Dmitry Ilyin (idv1985) wrote :

It looks like Keystone have broken for some reason? Why would it return Gateway Timeout (HTTP 504)?
Can anyone reproduce this?

Revision history for this message
Vasyl Saienko (vsaienko) wrote :
Download full text (29.4 KiB)

According to provided logs servers were overloaded, 2GB is not enough for normal MOS work, especially on controller nodes.
Rabbit/mysql were down during ostf tests.

root@node-9:~# free -m
             total used free shared buffers cached
Mem: 2001 1917 84 58 3 124
-/+ buffers/cache: 1789 212
Swap: 4015 1310 2705

There is logs from cluster_6_smoke.log:

urllib3.connectionpool: DEBUG: "POST http://172.16.0.14:5000/v2.0/tokens HTTP/1.1" 504 None
keystoneclient.session: DEBUG: Request returned failure status: 504
fuel_health.nmanager: DEBUG: Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/fuel_health/nmanager.py", line 81, in __init__
    self.identity_client = self._get_identity_client()
  File "/usr/lib/python2.6/site-packages/fuel_health/nmanager.py", line 216, in _get_identity_client
    insecure=dscv)
  File "/usr/lib/python2.6/site-packages/keystoneclient/v2_0/client.py", line 147, in __init__
    self.authenticate()
  File "/usr/lib/python2.6/site-packages/keystoneclient/utils.py", line 318, in inner
    return func(*args, **kwargs)
  File "/usr/lib/python2.6/site-packages/keystoneclient/httpclient.py", line 425, in authenticate
    resp = self.get_raw_token_from_identity_service(**kwargs)
  File "/usr/lib/python2.6/site-packages/keystoneclient/v2_0/client.py", line 190, in get_raw_token_from_identity_service
    "%s" % e)
AuthorizationFailure: Authorization Failed: Gateway Timeout (HTTP 504)

fuel_health.nmanager: DEBUG: Unable to initialize Keystone client: Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/fuel_health/nmanager.py", line 81, in __init__
    self.identity_client = self._get_identity_client()
  File "/usr/lib/python2.6/site-packages/fuel_health/nmanager.py", line 216, in _get_identity_client
    insecure=dscv)
  File "/usr/lib/python2.6/site-packages/keystoneclient/v2_0/client.py", line 147, in __init__
    self.authenticate()
  File "/usr/lib/python2.6/site-packages/keystoneclient/utils.py", line 318, in inner
    return func(*args, **kwargs)
  File "/usr/lib/python2.6/site-packages/keystoneclient/httpclient.py", line 425, in authenticate
    resp = self.get_raw_token_from_identity_service(**kwargs)
  File "/usr/lib/python2.6/site-packages/keystoneclient/v2_0/client.py", line 190, in get_raw_token_from_identity_service
    "%s" % e)
AuthorizationFailure: Authorization Failed: Gateway Timeout (HTTP 504)

[root@fuel ostf]# ls -lah cluster_6_smoke.log
-rw-r--r-- 1 root root 129K Apr 17 09:37 cluster_6_smoke.log

Rabbit was down in that period of time:

<45>Apr 17 09:35:51 node-11 rabbitmq-sasl pid: <0.9446.6>
<45>Apr 17 09:35:51 node-11 rabbitmq-sasl registered_name: []
<45>Apr 17 09:35:51 node-11 rabbitmq-sasl exception exit: channel_termination_timeout
<45>Apr 17 09:35:51 node-11 rabbitmq-sasl in function rabbit_reader:wait_for_channel_termination/3 (src/rabbit_reader.erl, line 568)
<45>Apr 17 09:35:51 node-11 rabbitmq-sasl in call from rabbit_reader:handle_exception/3 (src/rabbit_reader.erl, line 596)
<45>Apr 17 09:35:51 node-11 rabbitmq-sasl ...

Changed in fuel:
status: Confirmed → Invalid
Revision history for this message
Dmitry Pyzhov (dpyzhov) wrote :

Then we have incorrect settings in virtualbox scripts and bug needs to be fixed with increasing of it. What is the minimal requirement for controllers?

Changed in fuel:
status: Invalid → New
importance: Critical → High
Revision history for this message
Anastasia Palkina (apalkina) wrote :

I want to add that earlier such deployments were successful in the same amount of resources on controllers (2 GB). I can try to use 3 GB on controllers for Ubuntu HA deployment.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to fuel-web (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/174912

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to fuel-library (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/174913

Revision history for this message
Vasyl Saienko (vsaienko) wrote :

for example in fuel-devops default RAM allocation for Ubuntu is 2.5G

https://github.com/stackforge/fuel-devops/blob/master/devops/settings.py#L185-L188

Revision history for this message
Vasyl Saienko (vsaienko) wrote :

what exactly virtualbox scripts you are using?

Revision history for this message
Anastasia Palkina (apalkina) wrote :
Revision history for this message
Vasyl Saienko (vsaienko) wrote :

Anastasia,

 I see 12 running slaves + 1 fuel = 13 total, 13*2Gb = 26Gb what is RAM capacity of your server? How many VMs were running at the moment when you performed tests?

Even if we change default RAM allocation to slaves there is no guerantee that hardware server is not run out of memory or overloaded by CPU/HDD.
As improvement I think that it make sense to add some check of load on Compute/Controller before running test, and produce warning if load avarage is to high.

[root@fuel ~]# fuel nodes
DEPRECATION WARNING: file /etc/fuel/client/config.yaml is found and will be used as a source for settings. However, it deprecated and will not be used by default in the ongoing version of python-fuelclient.
id | status | name | cluster | ip | mac | roles | pending_roles | online | group_id
---|-----------|------------------|---------|------------|-------------------|-------------------|---------------|--------|---------
10 | ready | Untitled (03:03) | 6 | 10.20.0.10 | 02:4a:01:6a:3d:52 | controller, mongo | | True | 6
11 | ready | Untitled (f6:a1) | 6 | 10.20.0.14 | 08:00:27:8f:f6:a1 | controller, mongo | | True | 6
12 | ready | Untitled (71:30) | 6 | 10.20.0.13 | 08:00:27:b0:71:30 | cinder, compute | | True | 6
9 | ready | Untitled (7d:02) | 6 | 10.20.0.9 | 08:00:27:bd:7d:02 | controller, mongo | | True | 6
13 | deploying | Untitled (19:78) | 7 | 10.20.0.16 | 08:00:27:ab:19:78 | controller | | True | 7
14 | deploying | Untitled (d8:c0) | 8 | 10.20.0.15 | 08:00:27:31:d8:c0 | controller | | True | 8
20 | discover | Untitled (d3:e9) | None | 10.20.0.18 | 08:00:27:cd:d3:e9 | | | True | None
17 | discover | Untitled (b8:0a) | None | 10.20.0.20 | 08:00:27:37:b8:0a | | | True | None
18 | discover | Untitled (43:2b) | None | 10.20.0.19 | 08:00:27:93:43:2b | | | True | None
15 | discover | Untitled (71:3f) | None | 10.20.0.17 | 08:00:27:c8:71:3f | | | True | None
19 | discover | Untitled (4a:87) | None | 10.20.0.21 | 08:00:27:15:4a:87 | | | True | None
16 | discover | Untitled (5a:89) | None | 10.20.0.4 | 08:00:27:4f:5a:89 | | | True | None
[root@fuel ~]#

Revision history for this message
Vasyl Saienko (vsaienko) wrote :
Dmitry Ilyin (idv1985)
Changed in fuel:
status: New → Confirmed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/175615

Changed in fuel:
assignee: Vasyl Saienko (vsaienko) → Igor Yozhikov (iyozhikov)
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/175615
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=c0893e6f14a03f1791fc9d2f7f1f038669bbb86b
Submitter: Jenkins
Branch: master

commit c0893e6f14a03f1791fc9d2f7f1f038669bbb86b
Author: Igor Yozhikov <email address hidden>
Date: Tue Apr 21 02:54:07 2015 +0300

    Update in heat_domain_id_setter

    * add keystone api version reset in auth_url
    * changed used keystone api port 5000 -> 35357

    Change-Id: I4c0df7600e10d57429eda854cd8aa6208e1c6539
    Closes-Bug: #1445422

Changed in fuel:
status: In Progress → Fix Committed
tags: added: on-verification
Revision history for this message
Anastasia Palkina (apalkina) wrote :

Verified on ISO #338

"build_id": "2015-04-22_22-54-31", "build_number": "338", "release_versions": {"2014.2.2-6.1": {"VERSION": {"build_id": "2015-04-22_22-54-31", "build_number": "338", "api": "1.0", "fuel-library_sha": "9b26cb98e7ceb905fe85b744eee2f808f7e4737b", "nailgun_sha": "4972120d5a5d41efe9be2d10b81329adf3258a78", "feature_groups": ["mirantis"], "openstack_version": "2014.2.2-6.1", "production": "docker", "python-fuelclient_sha": "2b311b3b82a1e2df1dc3484a0f37e282273cd988", "astute_sha": "5be3506e6a4f8b7f0a858db2e162dabcc07347df", "fuel-ostf_sha": "dcda5a869d1780efc265b6f6b7b8c14c8324a68b", "release": "6.1", "fuelmain_sha": "2f8be90209e709810674f73abb02bb54a700ce5e"}}}, "auth_required": true, "api": "1.0", "fuel-library_sha": "9b26cb98e7ceb905fe85b744eee2f808f7e4737b", "nailgun_sha": "4972120d5a5d41efe9be2d10b81329adf3258a78", "feature_groups": ["mirantis"], "openstack_version": "2014.2.2-6.1", "production": "docker", "python-fuelclient_sha": "2b311b3b82a1e2df1dc3484a0f37e282273cd988", "astute_sha": "5be3506e6a4f8b7f0a858db2e162dabcc07347df", "fuel-ostf_sha": "dcda5a869d1780efc265b6f6b7b8c14c8324a68b", "release": "6.1", "fuelmain_sha": "2f8be90209e709810674f73abb02bb54a700ce5e"

Changed in fuel:
status: Fix Committed → Fix Released
tags: removed: on-verification
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/174913
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=c4e052529ce1b6d3aae467c943aa05bb854c91c4
Submitter: Jenkins
Branch: master

commit c4e052529ce1b6d3aae467c943aa05bb854c91c4
Author: Dmitry Ilyin <email address hidden>
Date: Fri Apr 17 18:02:53 2015 +0300

    Install generated horizon secret key

    * Taken from horizon config hash

    Change-Id: I321ba3acfa9efe3a4feedb12a68d6dd2cd6dd814
    Related-Bug: 1445422

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to fuel-web (master)

Reviewed: https://review.openstack.org/174912
Committed: https://git.openstack.org/cgit/stackforge/fuel-web/commit/?id=fda6850ebb3c20249d28e81a6f2f06fedb14c90e
Submitter: Jenkins
Branch: master

commit fda6850ebb3c20249d28e81a6f2f06fedb14c90e
Author: Dmitry Ilyin <email address hidden>
Date: Fri Apr 17 18:00:44 2015 +0300

    Add horizon block with secret_key generator

    * It will be used to encrypt cookies

    Change-Id: If94cf4193473854658ca25201f4aff5f99760608
    Related-Bug: 1445422

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.