metadata proxy not support Https Metadata-api
Bug #1263872 reported by
Liping Mao
This bug affects 4 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
Fix Released
|
Low
|
Xiaolin Zhang |
Bug Description
In neutron/
url = urlparse.
'http',
'%s:%s' % (self.conf.
''))
This means we can only use http to access metadata api server. and if we have loadbalance for metadata api server and has enabled the SSL on Loadbalance VIP, it can't work.
I think we need something like metadata_protocal to config http or https.
Changed in neutron: | |
status: | New → Confirmed |
Changed in neutron: | |
status: | Confirmed → In Progress |
Changed in neutron: | |
importance: | Undecided → Low |
Changed in neutron: | |
milestone: | none → icehouse-3 |
Changed in neutron: | |
status: | Fix Committed → Fix Released |
Changed in neutron: | |
milestone: | icehouse-3 → 2014.1 |
To post a comment you must log in.
We've encountered the same issue that metadata agent failed with supporting https Keystone authentication. /192.168. 8.101:5000/ v2.0
When we configured Keystone to use https, and modified metadata_agent.ini to
auth_url = https:/
then restart metadata-agent.
The newly started VM thereafter would not get its metadata: 169.254. 169.254/ 2009-04- 04/meta- data/instance- id' failed [0/120s]: http error [500]
in console we saw:
2014-01-08 13:50:24,592 - util.py[WARNING]: 'http://
in metadata-agent.log we saw: client [-] /192.168. 8.101:5000/ v2.0/tokens -X POST -H "Content-Type: application/json" -H "Accept: application/json" -H "User-Agent: python- neutronclient" -d '{"auth": {"tenantName": "ser tials": {"username": "neutron", "password": "REDACTED"}}}' python2. 7/dist- packages/ neutronclient/ common/ utils.py: 173 agent.metadata. agent [-] Unexpected error. agent.metadata. agent Traceback (most recent call last): agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutron/ agent/metadata/ agent.py" , line 94, in __call__ agent.metadata. agent instance_id = self._get_ instance_ id(req) agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutron/ agent/metadata/ agent.py" , line 118, in _get_instance_id agent.metadata. agent device_ owner=DEVICE_ OWNER_ROUTER_ INTF)[' ports'] agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutronclient/ v2_0/client. py", line 108, in with_params agent.metadata. agent ret = self.function( instance, *args, **kwargs) agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutronclient/ v2_0/client. py", line 298, in list_ports agent.metadata. agent **_params) agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutronclient/ v2_0/client. py", line 1197, in list agent.metadata. agent for r in self._paginatio n(collection, path, **params): agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutronclient/ v2_0/client. py", line 1210, in _pagination agent.metadata. agent res = self.get(path, params=params) agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutronclient/ v2_0/client. py", line 1183, in get agent.metadata. agent headers=headers, params=params) agent.metadata. agent File "/usr/lib/ python2. 7/dist- packages/ neutronclient/ v2_0/client. py", line 1168, in retry_request agent.metadata. agen...
2014-01-08 21:50:25.453 1774 DEBUG neutronclient.
REQ: curl -i https:/
vice", "passwordCreden
http_log_req /usr/lib/
2014-01-08 21:50:25.492 1774 ERROR neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.
2014-01-08 21:50:25.492 1774 TRACE neutron.