Errors in keystone setup in install docs

[Philippe Berthault]

I've installed the latest official release of nova, glance, kestone on Ubuntu 12.04.

Then I've followed the instructions of the "OpenStack Install and Deploy Manual" (so glance is configured to use keystone) but I have an error when I try to add an image to glance.

glance add name=oneiric is_public=true container_format=ovf disk_format=qcow2 < /data/images_cloud/oneiric-server-cloudimg-amd64-disk1.img
Uploading image 'oneiric'
======================================================[ 86%] 378.608539M/s, ETA 0h 0m 0s
Failed to add image. Got error:
An object with the specified identifier was not found.
Details: 404 Not Found

The resource could not be found.

Note: Your image metadata may still be in the registry, but the image's status will likely be 'killed'.
===============================================================[100%] 365.193442M/s, ETA 0h 0m 0s

I've no error in the /var/log/glance/api.log, nor in registry.log and the keystone log file is empty.

[Jay Pipes (jaypipes)]

Hi Philippe! could you try running with the --silent-upload option and seeing if you get the same error? I'm trying to determine if this has to do with the progressbar or not...

Thanks!
-jay

[Philippe Berthault (philippe-berthault-deactivatedaccount)]

There is the same error with the --silent-upload option.

For the information, it seems the problem come from the interaction between glance and keystone.
Without using keystone, the glance add is OK.

Here my keystone configuration:

# keystone service-list
+----------------------------------+----------+----------+-------------+
| id | name | type | description |
+----------------------------------+----------+----------+-------------+
| 0cf014d3fbd14a76b73a81476dc50429 | glance | image | None |
| 365f125d787b4ce0af30c076fbc21d2d | nova | compute | None |
| 8a519cc5b2a14b3f968408c6e8bc7cdc | ec2 | ec2 | None |
| d7446c41e59d4253854b7a20c56a85c0 | keystone | identity | None |
| e0a71931f3cc43e195e8abcfa6440e25 | volume | image | None |
+----------------------------------+----------+----------+-------------+

# keystone endpoint-list
+----------------------------------+---------+-----------------------------------------+-----------------------------------------+-----------------------------------------+
| id | region | publicurl | internalurl | adminurl |
+----------------------------------+---------+-----------------------------------------+-----------------------------------------+-----------------------------------------+
| 23c36f42259b46758161f91545aa866a | region1 | http://172.31.70.87:35357/v2.0 | http://172.31.70.87:35357/v2.0 | http://172.31.70.87:5000/v2.0 |
| 2914155a94ec4ffaa5325be81642d27f | region1 | http://172.31.70.87:9292/v1 | http://172.31.70.87:9292/v1 | http://172.31.70.87:9292/v1 |
| 5f7ae291f38a4fb0a4963c5ff2d9c5f2 | region1 | http://172.31.70.87:8773/services/Cloud | http://172.31.70.87:8773/services/Cloud | http://172.31.70.87:8773/services/Admin |
| e979d46f0e2c497b82e74b141ba939b4 | region1 | http://172.31.70.87:8776/v1 | http://172.31.70.87:8776/v1 | http://172.31.70.87:8776/v1 |
| f46bc014cfb74e8ba805d023bb545196 | region1 | http://172.31.70.87:8774/v2 | http://172.31.70.87:8774/v2 | http://172.31.70.87:8774/v2 |
+----------------------------------+---------+-----------------------------------------+-----------------------------------------+-----------------------------------------+

[Philippe Berthault (philippe-berthault-deactivatedaccount)]

The problem is closed.

There is two errors in the chapter "Defining Services" of the "OpenStack Install and Deploy Manual":
 - the first one on the "keystone service-create" of the volume service (bad type),
 - the second one on the "keystone endpoint-create" of the identity service (bad ports).

After correcting these two errors, the "glance add" command is OK.

[Anne Gentle (annegentle)]

Hi Philippe, could you check

http://docs.openstack.org/trunk/openstack-compute/install/content/keystone-service-endpoint-create.html

and let me know if the port values are correct for the identity service now?

This merge from yesterday:
https://review.openstack.org/#change,6085

fixed the problem with the bad type on the volume service for certain, but I'm not sure about the port values.

Thanks!
Anne

Thanks,
Anne

[Philippe Berthault (philippe-berthault-deactivatedaccount)]

Hi Anne,

I've checked the keystone-service-endpoint-create.html page and it's OK for me.

In fact, the port numbers of the keystone endpoint must be in accordance with the keystone.conf configuration file. In this file, the default values are:
public_port = 5000
admin_port = 35357

So the --publicurl option must refer the port 5000 and the --adminurl option must refer to the port 35357.

For the --internalurl option, I don't know if the correct port number is 5000 or 35357.
In my configuration, I'm using the port 5000.

Salutation.
Philippe.

[Kiall Mac Innes (kiall)]

All the internalurl's should use the public port (ie 5000)

[Lorin Hochstein (lorinh)]

Based on Philippe's comment #5 (it's OK for me), can we close this bug out now? Or do we still need to make changes to the docs?

[Tom Fifield (fifieldt)]

@lorinh I think so, marking "fix released"