Re: [Rdo-list] [rdo-manager] Authentication required during overcloud deployment

From: "Erming Pei" <erming(a)ualberta.ca&gt; To: "Sasha Chuzhoy" <sasha(a)redhat.com&gt; Cc: rdo-list(a)redhat.com Sent: Wednesday, October 14, 2015 6:43:11 PM Subject: Re: [Rdo-list] [rdo-manager] Authentication required during overcloud deployment Hi Sasha, Thanks for the useful information. I can access the nodes in the way you indicated. (Just in case you have any comment on this) Before that I tried to verify the overcloud as shown in the guide (step after depolyment): $openstack overcloud validate --overcloud-auth-url $OS_AUTH_URL --overcloud-admin-password $OS_PASSWORD --network-id fe427999-d1ee-4bc1-b765-8cb91dbb4db7 All I got are the "Invalid credentials" errors in each test: / setUpClass (tempest.thirdparty.boto.test_s3_ec2_images.S3ImagesTest) -------------------------------------------------------------------- Captured traceback: ~~~~~~~~~~~~~~~~~~~ Traceback (most recent call last): File "/home/stack/tempest/tempest/test.py", line 272, in setUpClass six.reraise(etype, value, trace) File "/home/stack/tempest/tempest/test.py", line 260, in setUpClass cls.setup_credentials() File "/home/stack/tempest/tempest/test.py", line 351, in setup_credentials credential_type=credentials_type) File "/home/stack/tempest/tempest/test.py", line 474, in get_client_manager cred_provider = cls._get_credentials_provider() File "/home/stack/tempest/tempest/test.py", line 452, in _get_credentials_provider identity_version=identity_version) File "/home/stack/tempest/tempest/common/credentials.py", line 39, in get_isolated_credentials identity_version=identity_version) File "/home/stack/tempest/tempest/common/isolated_creds.py", line 149, in __init__ identity_version=self.identity_version) File "/home/stack/tempest/tempest/common/cred_provider.py", line 67, in get_configured_credentials identity_version=identity_version, **params) File "/home/stack/tempest/tempest/common/cred_provider.py", line 96, in get_credentials **params) File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line 481, in get_credentials ca_certs=ca_certs, trace_requests=trace_requests) File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line 182, in __init__ super(KeystoneAuthProvider, self).__init__(credentials) File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line 45, in __init__ raise TypeError("Invalid credentials") TypeError: Invalid credentials/ Besides, I logged into each node and checked the services but most of them are not running. Not sure if it's normal. But I will try to re-deploy again as you suggested with adding the HEAT_INCLUDE_PASSWORD=1 option. Thanks, Erming On 10/14/15, 4:20 PM, Sasha Chuzhoy wrote: > Hi, > So by default, when things work as expected, you should be able to login to > your overcloud nodes as heat-admin (i.e. ssh heat-admin@<IP>). > > I haven't seen this error, did you source the /home/stack/stackrc file > prior to attempting the deployment? > > I'd recomment you to remove the running/failed deployment and re-attempt to > deploy again. > > Best regards, > Sasha Chuzhoy. > > ----- Original Message ----- >> From: "Erming Pei" <erming(a)ualberta.ca&gt; >> To: rdo-list(a)redhat.com >> Sent: Wednesday, October 14, 2015 6:03:50 PM >> Subject: [Rdo-list] [rdo-manager] Authentication required during overcloud >> deployment >> >> Hi, >> >> I am deploying the overcloud in baremetal way and after a couple of >> hours, it showed: >> >> $ openstack overcloud deploy --templates >> Deploying templates in the directory >> /usr/share/openstack-tripleo-heat-templates >> ^[[A^[[BERROR: openstack ERROR: Authentication failed. Please try again >> with option --include-password or export HEAT_INCLUDE_PASSWORD=1 >> Authentication required >> >> >> But I checked the nodes are now running: >> >> [stack@gcloudcon-3 ~]$ nova list >> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+ >> | ID | Name | >> Status | Task State | Power State | Networks | >> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+ >> | 1ba04ac0-fe2b-4318-aa31-2e5f4d8422a6 | overcloud-controller-0 | >> ACTIVE | - | Running | ctlplane=10.0.6.60 | >> | c152ba59-3aed-4fb0-81fa-e3fed7e35cf6 | overcloud-novacompute-0 | >> ACTIVE | - | Running | ctlplane=10.0.6.61 | >> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+ >> >> 1. Should I re-deploy the nodes or there is a way to do update/makeup >> for the authentication issue? >> >> 2. >> I don't know how to access to the nodes. >> There is not an overcloudrc file produced. >> >> $ ls overcloud* >> overcloud-env.json overcloud-full.initrd overcloud-full.qcow2 >> overcloud-full.vmlinuz >> >> overcloud-full.d: >> dib-manifests >> >> Is it via ssh key or password? Should I set the authentication method >> somewhere? >> >> >> >> Thanks, >> >> Erming >> >> >> _______________________________________________ >> Rdo-list mailing list >> Rdo-list(a)redhat.com >> https://www.redhat.com/mailman/listinfo/rdo-list >> >> To unsubscribe: rdo-list-unsubscribe(a)redhat.com >> -- --------------------------------------------- Erming Pei, Ph.D Senior System Analyst; Grid/Cloud Specialist Research Computing Group Information Services & Technology University of Alberta, Canada Tel: +1 7804929914 Fax: +1 7804921729 ---------------------------------------------