Error uploading tools into openstack: 401 Unauth

Bug #1183446 reported by David Britton
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
juju-core
Fix Released
Medium
Unassigned

Bug Description

dpb@helo:juju-core$ juju bootstrap -v --upload-tools
2013/05/23 10:09:07 INFO environs/openstack: opening environment "cstack"
2013/05/23 10:09:07 WARNING config attribute "default-image-id" (54139fc1-83cc-4d83-8bbb-f268ac747d8e) is deprecated and ignored, use simplestreams metadata instead
2013/05/23 10:09:07 WARNING config attribute "default-instance-type" (m1.small) is deprecated and ignored
2013/05/23 10:09:10 INFO environs/tools: built 1.11.0.1-raring-amd64 (2314kB)
2013/05/23 10:09:10 INFO environs/tools: uploading 1.11.0.1-precise-amd64
2013/05/23 10:09:16 INFO environs/tools: uploading 1.11.0.1-raring-amd64
2013/05/23 10:09:22 WARNING config attribute "default-image-id" (54139fc1-83cc-4d83-8bbb-f268ac747d8e) is deprecated and ignored, use simplestreams metadata instead
2013/05/23 10:09:22 WARNING config attribute "default-instance-type" (m1.small) is deprecated and ignored
2013/05/23 10:09:22 INFO environs/openstack: bootstrapping environment "cstack"
2013/05/23 10:09:32 INFO environs: reading tools with major version 1
2013/05/23 10:09:32 INFO environs: filtering tools by series: precise
2013/05/23 10:09:32 INFO environs: filtering tools by version: 1.11.0.1
2013/05/23 10:09:33 ERROR command failed: cannot start bootstrap instance: cannot read index data, cannot access URL "https://swift.canonistack.canonical.com/v1/AUTH_e8231fcc9d9546c9961caf858676ea4e/juju-dist/streams/v1/index.json", "401 Unauthorized"
error: cannot start bootstrap instance: cannot read index data, cannot access URL "https://swift.canonistack.canonical.com/v1/AUTH_e8231fcc9d9546c9961caf858676ea4e/juju-dist/streams/v1/index.json", "401 Unauthorized"
dpb@helo:juju-core$

default: cstack

environments:
  aws:
    type: ec2
    admin-secret: xxx
    control-bucket: juju-8781932b235e5c70b47fea29b8d463a1
    default-series: precise
    secret-key: "xxx/xxx"
    access-key: "xxx"

  cstack:
    type: openstack
    # use-floating-ip: false
    admin-secret: xxx
    control-bucket: 1d41169c-bccb-11e2-8bdd-2bf267dcbfb1
    auth-url: https://keystone.canonistack.canonical.com:443/v2.0/
    default-series: precise
    default-image-id: 54139fc1-83cc-4d83-8bbb-f268ac747d8e
    default-instance-type: m1.small
    auth-mode: userpass
    username: dpb
    password: xxx
    tenant-name: dpb_project
    region: lcy01

+-------------+----------------------------------------------------------------------------------+
| nova | Value |
+-------------+----------------------------------------------------------------------------------+
| adminURL | http://10.55.58.1:8774/v2/e8231fcc9d9546c9961caf858676ea4e |
| region | lcy01 |
| id | 72b6fb73834242efb06b91d553000557 |
| serviceName | nova |
| internalURL | http://10.55.58.1:8774/v2/e8231fcc9d9546c9961caf858676ea4e |
| publicURL | https://nova-lcy01.canonistack.canonical.com/v2/e8231fcc9d9546c9961caf858676ea4e |
+-------------+----------------------------------------------------------------------------------+
+-------------+----------------------------------------------------------------------------------+
| swift3 | Value |
+-------------+----------------------------------------------------------------------------------+
| adminURL | https://swift.canonistack.canonical.com/v1 |
| region | lcy01 |
| publicURL | https://swift.canonistack.canonical.com/v1/AUTH_e8231fcc9d9546c9961caf858676ea4e |
| internalURL | https://swift.canonistack.canonical.com/v1/AUTH_e8231fcc9d9546c9961caf858676ea4e |
| id | f7036662bcb2472995a100a03226c8ab |
+-------------+----------------------------------------------------------------------------------+
+-------------+----------------------------------+
| glance | Value |
+-------------+----------------------------------+
| adminURL | http://10.55.58.1:9292/v1 |
| region | lcy01 |
| publicURL | http://10.55.58.1:9292/v1 |
| internalURL | http://10.55.58.1:9292/v1 |
| id | 0951f70d0543490c84bb4574df0c3f1a |
+-------------+----------------------------------+
+-------------+------------------------------------------------------------------------------------+
| cinder | Value |
+-------------+------------------------------------------------------------------------------------+
| adminURL | http://10.55.58.1:8776/v1/e8231fcc9d9546c9961caf858676ea4e |
| region | lcy01 |
| publicURL | https://cinder-lcy01.canonistack.canonical.com/v1/e8231fcc9d9546c9961caf858676ea4e |
| internalURL | http://10.55.58.1:8776/v1/e8231fcc9d9546c9961caf858676ea4e |
| id | a60223bd41df4cdf8fb28dcdffe5adad |
+-------------+------------------------------------------------------------------------------------+
+-------------+------------------------------------------------------------+
| ec2 | Value |
+-------------+------------------------------------------------------------+
| adminURL | http://10.55.58.1:8773/services/Admin |
| region | lcy01 |
| publicURL | https://ec2-lcy01.canonistack.canonical.com/services/Cloud |
| internalURL | http://10.55.58.1:8773/services/Cloud |
| id | d2dc2db6f4444bb2a9782dffc7fb2b04 |
+-------------+------------------------------------------------------------+
+-------------+------------------------------------------------------------------------------------+
| fakecinder | Value |
+-------------+------------------------------------------------------------------------------------+
| adminURL | http://10.55.62.1:8776/v1/e8231fcc9d9546c9961caf858676ea4e |
| region | lcy02 |
| publicURL | https://cinder-lcy02.canonistack.canonical.com/v1/e8231fcc9d9546c9961caf858676ea4e |
| internalURL | http://10.55.62.1:8776/v1/e8231fcc9d9546c9961caf858676ea4e |
| id | b3848c25441346f3bd347c1f3f74f78c |
+-------------+------------------------------------------------------------------------------------+
+-------------+----------------------------------------------------------------------------------+
| swift | Value |
+-------------+----------------------------------------------------------------------------------+
| adminURL | https://swift.canonistack.canonical.com/v1 |
| region | lcy01 |
| publicURL | https://swift.canonistack.canonical.com/v1/AUTH_e8231fcc9d9546c9961caf858676ea4e |
| internalURL | https://swift.canonistack.canonical.com/v1/AUTH_e8231fcc9d9546c9961caf858676ea4e |
| id | 57156bc99dd0471db1081007ba4f0aa5 |
+-------------+----------------------------------------------------------------------------------+
+-----------------+------------------------------------------------------------------------------------------------------+
| product-streams | Value |
+-----------------+------------------------------------------------------------------------------------------------------+
| adminURL | https://swift.canonistack.canonical.com/v1/AUTH_a48765cc0e864be980ee21ae26aaaed4/simplestreams/data/ |
| region | lcy01 |
| publicURL | https://swift.canonistack.canonical.com/v1/AUTH_a48765cc0e864be980ee21ae26aaaed4/simplestreams/data/ |
| internalURL | https://swift.canonistack.canonical.com/v1/AUTH_a48765cc0e864be980ee21ae26aaaed4/simplestreams/data/ |
| id | db3cb46f5d704ff4a4f834b969ccbe76 |
+-----------------+------------------------------------------------------------------------------------------------------+
+-------------+-------------------------------------------------+
| keystone | Value |
+-------------+-------------------------------------------------+
| adminURL | http://10.55.58.1:35357/v2.0 |
| region | lcy01 |
| publicURL | https://keystone.canonistack.canonical.com/v2.0 |
| internalURL | http://10.55.58.1:5000/v2.0 |
| id | 8b4d3ac9a11246f682f54b3706af8562 |
+-------------+-------------------------------------------------+

A workaround of setting the following gets me around the issue:

public-bucket-url: https://swift.canonistack.canonical.com/v1/AUTH_526ad877f3e3464589dc1145dfeaac60

David Britton (dpb)
summary: - Error uploading tools into openstack
+ Error uploading tools into openstack: 401 Unauth
Revision history for this message
Ian Booth (wallyworld) wrote :

The use of the public-bucket-url setting is not a work around - it's recommended to have this properly set.
Having said that, there's another issue which has already been fixed in trunk. Juju now treats 401 errors like 404 when trying to find the metadata which defines which image id to use. So marking this as Fix Committed.

Changed in juju-core:
status: New → Fix Committed
Mark Ramm (mark-ramm)
Changed in juju-core:
milestone: none → 1.11.1
importance: Undecided → Medium
Changed in juju-core:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.