Hi all,
I'm a total newbie to openstack, and I'm trying to install a testing
environment to study it.
I installed Openstack Juno on CentOS 7 following "Openstack
Installation Guide for Red Hat 7, CentOS 7 and Fedora 20" - I'm working
on CentOS 7
I'm not able to launch the CirrOS instance: here is what I got in logs
in the compute node:
==> nova/nova-compute.log <==
2015-10-31 10:10:56.066 923 INFO oslo.messaging._drivers.impl_rabbit [-]
Connecting to AMQP server on l1host001.mgmt.carcano.local:5672
2015-10-31 10:10:56.082 923 INFO oslo.messaging._drivers.impl_rabbit [-]
Connected to AMQP server on l1host001.mgmt.carcano.local:5672
2015-10-31 10:10:56.841 923 ERROR nova.network.neutronv2.api [-]
[instance: d69de1bf-4d74-424f-ad7e-573d082f4174] Neutron error creating
port on network 59cef3db-9548-47db-9b18-486e8796e45e
...
2015-10-31 10:10:56.841 923 TRACE nova.network.neutronv2.api [instance:
d69de1bf-4d74-424f-ad7e-573d082f4174] BadRequest: Specifying 'tenant_id'
other than authenticated tenant in request requires admin privileges
2015-10-31 10:10:56.841 923 TRACE nova.network.neutronv2.api [instance:
d69de1bf-4d74-424f-ad7e-573d082f4174]
2015-10-31 10:10:56.855 923 ERROR nova.compute.manager [-] Instance
failed network setup after 1 attempt(s)
...
2015-10-31 10:10:56.855 923 TRACE nova.compute.manager BadRequest:
Specifying 'tenant_id' other than authenticated tenant in request
requires admin privileges
2015-10-31 10:10:56.855 923 TRACE nova.compute.manager
2015-10-31 10:12:45.702 923 WARNING nova.virt.disk.vfs.guestfs [-]
Failed to close augeas aug_close: do_aug_close: you must call 'aug-init'
first to initialize Augeas
2015-10-31 10:12:45.783 923 ERROR nova.compute.manager [-] [instance:
d69de1bf-4d74-424f-ad7e-573d082f4174] Instance failed to spawn
...
2015-10-31 10:12:45.783 923 TRACE nova.compute.manager [instance:
d69de1bf-4d74-424f-ad7e-573d082f4174] BadRequest: Specifying 'tenant_id'
other than authenticated tenant in request requires admin privileges
2015-10-31 10:12:45.783 923 TRACE nova.compute.manager [instance:
d69de1bf-4d74-424f-ad7e-573d082f4174]
2015-10-31 10:12:45.813 923 WARNING nova.virt.libvirt.driver [-]
[instance: d69de1bf-4d74-424f-ad7e-573d082f4174] During wait destroy,
instance disappeared.
2015-10-31 10:18:36.886 923 WARNING nova.compute.manager [-] While
synchronizing instance power states, found 1 instances in the database
and 0 instances on the hypervisor.
OK, it is a user privilege related error, but as I told you I'm a
totally newbie to openstack and I've no idea on how to solve it - by the
way I'm just wondering where I went wrong, since I followed the
mentioned guide, .. probably I forgot something or wrote something
wrong, but there're lots of steps and although I tried two times to redo
I've not been able to got my mistake.
By the way the involved users (nova and neutron) seems to have the right
role (admin) on the involved tenant (service):
6f89f3a64d424fd98683591916c6ea5b is user "nova",
d16691642f54471880f3405c5223a06e is tenant "service"
keystone user-role-list --user-id 6f89f3a64d424fd98683591916c6ea5b
--tenant-id d16691642f54471880f3405c5223a06e
+----------------------------------+-------+----------------------------------+----------------------------------+
| id | name | user_id
| tenant_id |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 396f0d18b6904ce7aa70fbd3b13b289b | admin |
6f89f3a64d424fd98683591916c6ea5b | d16691642f54471880f3405c5223a06e |
+----------------------------------+-------+----------------------------------+----------------------------------+
so user "nova" has role "admin" for tenant "service"
and e4e3d46b099a42bf8dbb73e7b22666f8 is user "neutron"
keystone user-role-list --user-id e4e3d46b099a42bf8dbb73e7b22666f8
--tenant-id d16691642f54471880f3405c5223a06e
+----------------------------------+-------+----------------------------------+----------------------------------+
| id | name | user_id
| tenant_id |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 396f0d18b6904ce7aa70fbd3b13b289b | admin |
e4e3d46b099a42bf8dbb73e7b22666f8 | d16691642f54471880f3405c5223a06e |
+----------------------------------+-------+----------------------------------+----------------------------------+
so user "neutron" has role "admin" for tenant "service"
May someone of you help me, please? I really have not idea on how todeal
with this.
Here are some other info:
keystone tenant-list
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| c9cbc3bf3ca34418b61a3f210693b67c | admin | True |
| 180d36a7b5de4d3b90b33ae35ca29ca5 | demo | True |
| d16691642f54471880f3405c5223a06e | service | True |
+----------------------------------+---------+---------+
keystone user-list
+----------------------------------+---------+---------+------------------+
| id | name | enabled | email |
+----------------------------------+---------+---------+------------------+
| 1c42cc834b344eb69dbd5d0efb300ea2 | admin | True | me@foo.local|
| b2cbb39f8d96463e85637d5abe541867 | cinder | True | |
| d2443d423e434337845d07f7706cea6d | demo | True | me@foo.local |
| bbb1b9da6f8148be9468c8f4ca85b66e | glance | True | |
| a1f0348557dd4c97bb79b208dc1aa721 | heat | True | |
| e4e3d46b099a42bf8dbb73e7b22666f8 | neutron | True | |
| 6f89f3a64d424fd98683591916c6ea5b | nova | True | |
| c2a7cc93d3094035bb641d99d9c69a53 | swift | True | |
+----------------------------------+---------+---------+------------------+
keystone role-list
+----------------------------------+------------------+
| id | name |
+----------------------------------+------------------+
| ddc70e0694a04f30914a0e6ea17b0875 | _member_ |
| 396f0d18b6904ce7aa70fbd3b13b289b | admin |
| 659b46a8516b49379debc2cb8b1ebc73 | heat_stack_owner |
| 6fac7371dc404e6391f98d0513b72502 | heat_stack_user |
+----------------------------------+------------------+
Kind regards
Marco
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
