Public bug reported: I have a client setup with OS_CACERT set. All endpoints registered in keystone are https. I can query neutron, glance, cinder and keystone but the second and subsequent nova image-list always fails. I can 'fix' it by restarting nova-api-os-compute and one image-list will work but then failure again. In the nova-api-os-compute.log I see:
2015-10-21 11:27:35.518 16818 WARNING keystoneclient.middleware.auth_token [req-64b4bab0-3b47-4326-b2e5-3bd457b3c797 ] Retrying on HTTP connection exception: 'HTTPSConnectionPool' object has no attribute 'insecure' 2015-10-21 11:27:36.021 16818 WARNING keystoneclient.middleware.auth_token [req-64b4bab0-3b47-4326-b2e5-3bd457b3c797 ] Retrying on HTTP connection exception: 'HTTPSConnectionPool' object has no attribute 'insecure' 2015-10-21 11:27:37.024 16818 WARNING keystoneclient.middleware.auth_token [req-64b4bab0-3b47-4326-b2e5-3bd457b3c797 ] Retrying on HTTP connection exception: 'HTTPSConnectionPool' object has no attribute 'insecure' Reproduce: $ env | grep OS OS_REGION_NAME=RegionOne OS_PASSWORD=openstack OS_AUTH_URL=https://10.5.55.4:5000/v2.0 OS_USERNAME=admin OS_TENANT_NAME=admin OS_AUTH_PROTOCOL=https OS_CACERT=/tmp/ca_cert.pem $ neutron net-list +--------------------------------------+---------+------------------------------------------------------+ | id | name | subnets | +--------------------------------------+---------+------------------------------------------------------+ | 3acfbdb6-6895-48cf-9603-d09ea7007aa4 | ext_net | e9ddba73-96d0-4036-927e-4b99b8c457ee 10.5.0.0/16 | | 711f199b-0d8c-4e3a-beff-d8edffff8a1f | private | cd730f70-a032-4784-b4dd-3c20d0335c6f 192.168.21.0/24 | +--------------------------------------+---------+------------------------------------------------------+ $ glance image-list +--------------------------------------+---------+-------------+------------------+-----------+--------+ | ID | Name | Disk Format | Container Format | Size | Status | +--------------------------------------+---------+-------------+------------------+-----------+--------+ | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros | qcow2 | bare | 13200896 | active | | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | qcow2 | bare | 263389696 | active | +--------------------------------------+---------+-------------+------------------+-----------+--------+ $ nova image-list +--------------------------------------+---------+--------+--------+ | ID | Name | Status | Server | +--------------------------------------+---------+--------+--------+ | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros | ACTIVE | | | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | ACTIVE | | +--------------------------------------+---------+--------+--------+ $ nova image-list ERROR (ClientException): Unknown Error (HTTP 503) $ nova image-list ERROR (ClientException): Unknown Error (HTTP 503) Other commands still work: $ neutron net-list +--------------------------------------+---------+------------------------------------------------------+ | id | name | subnets | +--------------------------------------+---------+------------------------------------------------------+ | 3acfbdb6-6895-48cf-9603-d09ea7007aa4 | ext_net | e9ddba73-96d0-4036-927e-4b99b8c457ee 10.5.0.0/16 | | 711f199b-0d8c-4e3a-beff-d8edffff8a1f | private | cd730f70-a032-4784-b4dd-3c20d0335c6f 192.168.21.0/24 | +--------------------------------------+---------+------------------------------------------------------+ $ glance image-list +--------------------------------------+---------+-------------+------------------+-----------+--------+ | ID | Name | Disk Format | Container Format | Size | Status | +--------------------------------------+---------+-------------+------------------+-----------+--------+ | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros | qcow2 | bare | 13200896 | active | | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | qcow2 | bare | 263389696 | active | +--------------------------------------+---------+-------------+------------------+-----------+--------+ Fix nova commands for one run: $ service nova-api-os-compute restart nova-api-os-compute stop/waiting nova-api-os-compute start/running, process 16910 $ nova image-list +--------------------------------------+---------+--------+--------+ | ID | Name | Status | Server | +--------------------------------------+---------+--------+--------+ | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros | ACTIVE | | | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | ACTIVE | | +--------------------------------------+---------+--------+--------+ $ nova image-list ERROR (Unauthorized): Unauthorized (HTTP 401) ** Affects: nova (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to nova in Ubuntu. https://bugs.launchpad.net/bugs/1508428 Title: nova image-list failing with SSL enabled on Juno To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1508428/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
