when using PKI, nova api is not compatible with EC2 list volume and list images API

[Yaguang Tang]

using keystone PKI with the latest devstack, euca-describe-images and euca-describe-volumes fails .

detail logs

2013-07-02 03:47:21.463 TRACE nova.api.ec2 Traceback (most recent call last):
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/nova/nova/api/ec2/__init__.py", line 486, in __call__
2013-07-02 03:47:21.463 TRACE nova.api.ec2 result = api_request.invoke(context)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/nova/nova/api/ec2/apirequest.py", line 79, in invoke
2013-07-02 03:47:21.463 TRACE nova.api.ec2 result = method(context, **args)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/nova/nova/api/ec2/cloud.py", line 794, in describe_volumes
2013-07-02 03:47:21.463 TRACE nova.api.ec2 volumes = self.volume_api.get_all(context)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/nova/nova/volume/cinder.py", line 218, in get_all
2013-07-02 03:47:21.463 TRACE nova.api.ec2 items = cinderclient(context).volumes.list(detailed=True)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/python-cinderclient/cinderclient/v1/volumes.py", line 182, in l
ist
2013-07-02 03:47:21.463 TRACE nova.api.ec2 "volumes")
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/python-cinderclient/cinderclient/base.py", line 66, in _list
2013-07-02 03:47:21.463 TRACE nova.api.ec2 resp, body = self.api.client.get(url)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/python-cinderclient/cinderclient/client.py", line 203, in get
2013-07-02 03:47:21.463 TRACE nova.api.ec2 return self._cs_request(url, 'GET', **kwargs)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/python-cinderclient/cinderclient/client.py", line 171, in _cs_request
2013-07-02 03:47:21.463 TRACE nova.api.ec2 **kwargs)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/openstack/opt/stack/python-cinderclient/cinderclient/client.py", line 141, in request
2013-07-02 03:47:21.463 TRACE nova.api.ec2 **kwargs)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/usr/lib/python2.7/dist-packages/requests/api.py", line 44, in request
2013-07-02 03:47:21.463 TRACE nova.api.ec2 return session.request(method=method, url=url, **kwargs)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 279, in request
2013-07-02 03:47:21.463 TRACE nova.api.ec2 resp = self.send(prep, stream=stream, timeout=timeout, verify=verify, cert=cert, proxies=proxies)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 374, in send
2013-07-02 03:47:21.463 TRACE nova.api.ec2 r = adapter.send(request, **kwargs)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 File "/usr/lib/python2.7/dist-packages/requests/adapters.py", line 206, in send
2013-07-02 03:47:21.463 TRACE nova.api.ec2 raise ConnectionError(sockerr)
2013-07-02 03:47:21.463 TRACE nova.api.ec2 ConnectionError: [Errno 111] ECONNREFUSED
2013-07-02 03:47:21.463 TRACE nova.api.ec2

[Chuck Short (zulcss)]

Which version of nova?

[Sean Dague (sdague)]

moving to Opinion as it's an extremely old ec2 issue