glance-scrubber does not work using SSL

Bug #1736468 reported by Maximiliano
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Glance
Fix Released
Low
Unassigned

Bug Description

Using glance registry and glance api over SSL, glance-scrubber doe not work in Ocata.

This is the error i'm getting :

glance-scrubber --config-file /etc/glance/glance-scrubber.conf

Option "verbose" from group "DEFAULT" is deprecated for removal. Its value may be silently ignored in the future.
2017-12-05 10:17:15.870 950 DEBUG glance_store.backend [-] Attempting to import store cinder _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.871 950 DEBUG glance_store.backend [-] Attempting to import store file _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.871 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.cinder.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.872 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.filesystem.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.872 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.http.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.872 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.rbd.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.873 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.sheepdog.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.873 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.swift.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.873 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.vmware_datastore.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.874 950 DEBUG glance_store.backend [-] Attempting to import store http _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.874 950 DEBUG glance_store.backend [-] Attempting to import store no_conf _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.874 950 DEBUG glance_store.backend [-] Attempting to import store rbd _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.875 950 DEBUG glance_store.backend [-] Attempting to import store sheepdog _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.875 950 DEBUG glance_store.backend [-] Attempting to import store swift _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.876 950 DEBUG glance_store.backend [-] Attempting to import store vmware _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.876 950 DEBUG glance_store.backend [-] Registering options for group glance_store register_opts /usr/lib/python2.7/site-packages/glance_store/backend.py:160
2017-12-05 10:17:15.876 950 DEBUG glance_store.backend [-] Registering options for group glance_store register_opts /usr/lib/python2.7/site-packages/glance_store/backend.py:160
2017-12-05 10:17:15.877 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.filesystem.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.878 950 DEBUG glance_store.capabilities [-] Store glance_store._drivers.filesystem.Store doesn't support updating dynamic storage capabilities. Please overwrite 'update_capabilities' method of the store to implement updating logics if needed. update_capabilities /usr/lib/python2.7/site-packages/glance_store/capabilities.py:97
2017-12-05 10:17:15.878 950 DEBUG glance_store.backend [-] Registering store glance.store.filesystem.Store with schemes ('file', 'filesystem') create_stores /usr/lib/python2.7/site-packages/glance_store/backend.py:278
2017-12-05 10:17:15.879 950 DEBUG glance_store.driver [-] Late loading location class glance_store._drivers.filesystem.StoreLocation get_store_location_class /usr/lib/python2.7/site-packages/glance_store/driver.py:89
2017-12-05 10:17:15.879 950 DEBUG glance_store.location [-] Registering scheme file with {'location_class': <class 'glance_store._drivers.filesystem.StoreLocation'>, 'store': <glance_store._drivers.filesystem.Store object at 0x4285910>, 'store_entry': 'glance.store.filesystem.Store'} register_scheme_map /usr/lib/python2.7/site-packages/glance_store/location.py:88
2017-12-05 10:17:15.879 950 DEBUG glance_store.location [-] Registering scheme filesystem with {'location_class': <class 'glance_store._drivers.filesystem.StoreLocation'>, 'store': <glance_store._drivers.filesystem.Store object at 0x4285910>, 'store_entry': 'glance.store.filesystem.Store'} register_scheme_map /usr/lib/python2.7/site-packages/glance_store/location.py:88
2017-12-05 10:17:15.880 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.rbd.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.880 950 DEBUG glance_store.capabilities [-] Store glance_store._drivers.rbd.Store doesn't support updating dynamic storage capabilities. Please overwrite 'update_capabilities' method of the store to implement updating logics if needed. update_capabilities /usr/lib/python2.7/site-packages/glance_store/capabilities.py:97
2017-12-05 10:17:15.881 950 DEBUG glance_store.backend [-] Registering store glance.store.rbd.Store with schemes ('rbd',) create_stores /usr/lib/python2.7/site-packages/glance_store/backend.py:278
2017-12-05 10:17:15.881 950 DEBUG glance_store.driver [-] Late loading location class glance_store._drivers.rbd.StoreLocation get_store_location_class /usr/lib/python2.7/site-packages/glance_store/driver.py:89
2017-12-05 10:17:15.881 950 DEBUG glance_store.location [-] Registering scheme rbd with {'location_class': <class 'glance_store._drivers.rbd.StoreLocation'>, 'store': <glance_store._drivers.rbd.Store object at 0x4290910>, 'store_entry': 'glance.store.rbd.Store'} register_scheme_map /usr/lib/python2.7/site-packages/glance_store/location.py:88
2017-12-05 10:17:15.882 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.http.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.882 950 DEBUG glance_store.capabilities [-] Store glance_store._drivers.http.Store doesn't support updating dynamic storage capabilities. Please overwrite 'update_capabilities' method of the store to implement updating logics if needed. update_capabilities /usr/lib/python2.7/site-packages/glance_store/capabilities.py:97
2017-12-05 10:17:15.882 950 DEBUG glance_store.backend [-] Registering store glance.store.http.Store with schemes ('http', 'https') create_stores /usr/lib/python2.7/site-packages/glance_store/backend.py:278
2017-12-05 10:17:15.883 950 DEBUG glance_store.driver [-] Late loading location class glance_store._drivers.http.StoreLocation get_store_location_class /usr/lib/python2.7/site-packages/glance_store/driver.py:89
2017-12-05 10:17:15.883 950 DEBUG glance_store.location [-] Registering scheme http with {'location_class': <class 'glance_store._drivers.http.StoreLocation'>, 'store': <glance_store._drivers.http.Store object at 0x30ea190>, 'store_entry': 'glance.store.http.Store'} register_scheme_map /usr/lib/python2.7/site-packages/glance_store/location.py:88
2017-12-05 10:17:15.884 950 DEBUG glance_store.location [-] Registering scheme https with {'location_class': <class 'glance_store._drivers.http.StoreLocation'>, 'store': <glance_store._drivers.http.Store object at 0x30ea190>, 'store_entry': 'glance.store.http.Store'} register_scheme_map /usr/lib/python2.7/site-packages/glance_store/location.py:88
2017-12-05 10:17:15.884 950 DEBUG glance_store.backend [-] Attempting to import store glance.store.rbd.Store _load_store /usr/lib/python2.7/site-packages/glance_store/backend.py:231
2017-12-05 10:17:15.885 950 DEBUG glance_store.capabilities [-] Store glance_store._drivers.rbd.Store doesn't support updating dynamic storage capabilities. Please overwrite 'update_capabilities' method of the store to implement updating logics if needed. update_capabilities /usr/lib/python2.7/site-packages/glance_store/capabilities.py:97
2017-12-05 10:17:15.885 950 DEBUG glance_store.driver [-] Late loading location class glance_store._drivers.rbd.StoreLocation get_store_location_class /usr/lib/python2.7/site-packages/glance_store/driver.py:89
2017-12-05 10:17:15.886 950 DEBUG glance_store.location [-] Registering scheme rbd with {'location_class': <class 'glance_store._drivers.rbd.StoreLocation'>, 'store': <glance_store._drivers.rbd.Store object at 0x512bbd0>, 'store_entry': 'glance.store.rbd.Store'} register_scheme_map /usr/lib/python2.7/site-packages/glance_store/location.py:88
2017-12-05 10:17:15.886 950 INFO glance.scrubber [-] Initializing scrubber with configuration: {'registry_host': '10.54.132.10', 'registry_port': 9191}
2017-12-05 10:17:15.887 950 WARNING oslo_config.cfg [-] Option "use_user_token" from group "DEFAULT" is deprecated for removal. Its value may be silently ignored in the future.
2017-12-05 10:17:15.888 950 WARNING oslo_config.cfg [-] Option "auth_url" from group "DEFAULT" is deprecated for removal. Its value may be silently ignored in the future.
2017-12-05 10:17:15.888 950 WARNING oslo_config.cfg [-] Option "admin_user" from group "DEFAULT" is deprecated for removal. Its value may be silently ignored in the future.
2017-12-05 10:17:15.889 950 WARNING oslo_config.cfg [-] Option "admin_password" from group "DEFAULT" is deprecated for removal. Its value may be silently ignored in the future.
2017-12-05 10:17:15.889 950 WARNING oslo_config.cfg [-] Option "admin_tenant_name" from group "DEFAULT" is deprecated for removal. Its value may be silently ignored in the future.
2017-12-05 10:17:15.891 950 DEBUG oslo_policy._cache_handler [req-27c9a13f-9731-4f4b-9335-88cc8654d561 - - - - -] Reloading cached file /etc/glance/policy.json read_cached_file /usr/lib/python2.7/site-packages/oslo_policy/_cache_handler.py:40
2017-12-05 10:17:15.892 950 DEBUG oslo_policy.policy [req-27c9a13f-9731-4f4b-9335-88cc8654d561 - - - - -] Reloaded policy file: /etc/glance/policy.json _load_policy_file /usr/lib/python2.7/site-packages/oslo_policy/policy.py:666
2017-12-05 10:17:15.894 950 DEBUG oslo_policy._cache_handler [req-358bbeea-e848-4a53-a5e4-37680d7182f3 glance service - - -] Reloading cached file /etc/glance/policy.json read_cached_file /usr/lib/python2.7/site-packages/oslo_policy/_cache_handler.py:40
2017-12-05 10:17:15.896 950 DEBUG oslo_policy.policy [req-358bbeea-e848-4a53-a5e4-37680d7182f3 glance service - - -] Reloaded policy file: /etc/glance/policy.json _load_policy_file /usr/lib/python2.7/site-packages/oslo_policy/policy.py:666
2017-12-05 10:17:15.898 950 DEBUG oslo_policy._cache_handler [req-3c963f92-9f4a-45a9-94d7-00c638d744b9 - - - - -] Reloading cached file /etc/glance/policy.json read_cached_file /usr/lib/python2.7/site-packages/oslo_policy/_cache_handler.py:40
2017-12-05 10:17:15.899 950 DEBUG oslo_policy.policy [req-3c963f92-9f4a-45a9-94d7-00c638d744b9 - - - - -] Reloaded policy file: /etc/glance/policy.json _load_policy_file /usr/lib/python2.7/site-packages/oslo_policy/policy.py:666
2017-12-05 10:17:15.901 950 DEBUG oslo_policy._cache_handler [req-c7088b44-2e8c-44a5-8ca7-8d20cb5eca42 glance service - - -] Reloading cached file /etc/glance/policy.json read_cached_file /usr/lib/python2.7/site-packages/oslo_policy/_cache_handler.py:40
2017-12-05 10:17:15.903 950 DEBUG oslo_policy.policy [req-c7088b44-2e8c-44a5-8ca7-8d20cb5eca42 glance service - - -] Reloaded policy file: /etc/glance/policy.json _load_policy_file /usr/lib/python2.7/site-packages/oslo_policy/policy.py:666
2017-12-05 10:17:16.192 950 DEBUG glance.common.client [req-c7088b44-2e8c-44a5-8ca7-8d20cb5eca42 glance service - - -] Constructed URL: https://10.54.132.10:9191/images/detail?deleted=True&is_public=none&status=pending_delete _construct_url /usr/lib/python2.7/site-packages/glance/common/client.py:402
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client [req-c7088b44-2e8c-44a5-8ca7-8d20cb5eca42 glance service - - -] Registry client request GET /images/detail raised ClientConnectionError
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client Traceback (most recent call last):
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client File "/usr/lib/python2.7/site-packages/glance/registry/client/v1/client.py", line 124, in do_request
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client **kwargs)
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client File "/usr/lib/python2.7/site-packages/glance/common/client.py", line 71, in wrapped
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client return func(self, *args, **kwargs)
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client File "/usr/lib/python2.7/site-packages/glance/common/client.py", line 374, in do_request
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client headers=copy.deepcopy(headers))
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client File "/usr/lib/python2.7/site-packages/glance/common/client.py", line 88, in wrapped
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client return func(self, method, url, body, headers)
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client File "/usr/lib/python2.7/site-packages/glance/common/client.py", line 551, in _do_request
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client raise exception.ClientConnectionError(e)
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client ClientConnectionError: [SSL: UNKNOWN_PROTOCOL] unknown protocol (_ssl.c:579)
2017-12-05 10:17:16.206 950 ERROR glance.registry.client.v1.client
2017-12-05 10:17:16.208 950 ERROR glance.scrubber [req-c7088b44-2e8c-44a5-8ca7-8d20cb5eca42 glance service - - -] Can not get scrub jobs from queue: [SSL: UNKNOWN_PROTOCOL] unknown protocol (_ssl.c:579)

My glance-scrubber config file :

[DEFAULT]
verbose = true
debug = true
log_file = /var/log/glance/scrubber.log

daemon = False
wakeup_time = 300
scrub_time = 86400
scrub_pool_size = 1

registry_host = x.x.x.10
registry_port = 9191
enable_v2_api = true
enable_v2_registry = true
enable_v1_registry = false
enable_v1_api = false

https_ca_certificates_file = https_insecure
https_insecure = true
insecure = true
registry_client_protocol = https
registry_client_insecure = true

auth_uri = https://x.x.x.200:5000/v2.0/
auth_url = https://x.x.x.200:5000/v2.0/
identity_uri = https://x.x.x.200:35357
admin_tenant_name = service
use_user_token = true
auth_strategy = keystone
auth_type = password
admin_user = glance
admin_password = xxxx

[glance_store]
insecure = true
rbd_store_ceph_conf = /etc/ceph/ceph.conf
rbd_store_chunk_size = 8
rbd_store_user = glance.nubeliu
rbd_store_pool = nubeliu_images
default_store = rbd
stores = glance.store.filesystem.Store,
               glance.store.http.Store,
               glance.store.rbd.Store

[database]

sql_connection = mysql+pymysql://glance:xxxx@x.x.x.200/glance
sql_idle_timeout = 3600
use_db_reconnect = True

Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

As of Queens, the scrubber no longer contacts the glance registry (which required keystone authentication), but instead goes directly to the database.

Fixed by Change-Id: I26f570b85617200880543b7114730a1ac76d3fb1

Changed in glance:
importance: Undecided → Low
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.