[Rdo-list] [rdo-manager] Authentication required during overcloud deployment

[Erming Pei]

Hi Sasha,

   Thanks for the useful information. I can access the nodes in the way 
you indicated.

(Just in case you have any comment on this)
   Before that I tried to verify the overcloud as shown in the guide 
(step after depolyment):

$openstack overcloud validate --overcloud-auth-url $OS_AUTH_URL 
--overcloud-admin-password $OS_PASSWORD --network-id 
fe427999-d1ee-4bc1-b765-8cb91dbb4db7

All I got are the "Invalid credentials" errors in each test:
/
setUpClass (tempest.thirdparty.boto.test_s3_ec2_images.S3ImagesTest)
--------------------------------------------------------------------

Captured traceback:
~~~~~~~~~~~~~~~~~~~
     Traceback (most recent call last):
       File "/home/stack/tempest/tempest/test.py", line 272, in setUpClass
         six.reraise(etype, value, trace)
       File "/home/stack/tempest/tempest/test.py", line 260, in setUpClass
         cls.setup_credentials()
       File "/home/stack/tempest/tempest/test.py", line 351, in 
setup_credentials
         credential_type=credentials_type)
       File "/home/stack/tempest/tempest/test.py", line 474, in 
get_client_manager
         cred_provider = cls._get_credentials_provider()
       File "/home/stack/tempest/tempest/test.py", line 452, in 
_get_credentials_provider
         identity_version=identity_version)
       File "/home/stack/tempest/tempest/common/credentials.py", line 
39, in get_isolated_credentials
         identity_version=identity_version)
       File "/home/stack/tempest/tempest/common/isolated_creds.py", line 
149, in __init__
         identity_version=self.identity_version)
       File "/home/stack/tempest/tempest/common/cred_provider.py", line 
67, in get_configured_credentials
         identity_version=identity_version, **params)
       File "/home/stack/tempest/tempest/common/cred_provider.py", line 
96, in get_credentials
         **params)
       File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line 
481, in get_credentials
         ca_certs=ca_certs, trace_requests=trace_requests)
       File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line 
182, in __init__
         super(KeystoneAuthProvider, self).__init__(credentials)
       File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line 
45, in __init__
         raise TypeError("Invalid credentials")
     TypeError: Invalid credentials/


Besides, I logged into each node and checked the services but most of 
them are not running.
  Not sure if it's normal.



But I will try to re-deploy again as you suggested with adding the 
HEAT_INCLUDE_PASSWORD=1 option.



Thanks,

Erming

On 10/14/15, 4:20 PM, Sasha Chuzhoy wrote:
> Hi,
> So by default, when things work as expected, you should be able to login to your overcloud nodes as heat-admin (i.e. ssh heat-admin@<IP>).
>
> I haven't seen this error, did you source the /home/stack/stackrc file prior to attempting the deployment?
>
> I'd recomment you to remove the running/failed deployment and re-attempt to deploy again.
>
> Best regards,
> Sasha Chuzhoy.
>
> ----- Original Message -----
>> From: "Erming Pei" <erming at ualberta.ca>
>> To: rdo-list at redhat.com
>> Sent: Wednesday, October 14, 2015 6:03:50 PM
>> Subject: [Rdo-list] [rdo-manager] Authentication required during overcloud	deployment
>>
>> Hi,
>>
>>     I am deploying the overcloud in baremetal way and after a couple of
>> hours, it showed:
>>
>> $ openstack overcloud deploy --templates
>> Deploying templates in the directory
>> /usr/share/openstack-tripleo-heat-templates
>> ^[[A^[[BERROR: openstack ERROR: Authentication failed. Please try again
>> with option --include-password or export HEAT_INCLUDE_PASSWORD=1
>> Authentication required
>>
>>
>> But I checked the nodes are now running:
>>
>> [stack at gcloudcon-3 ~]$ nova list
>> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+
>> | ID                                   | Name                    |
>> Status | Task State | Power State | Networks           |
>> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+
>> | 1ba04ac0-fe2b-4318-aa31-2e5f4d8422a6 | overcloud-controller-0  |
>> ACTIVE | -          | Running     | ctlplane=10.0.6.60 |
>> | c152ba59-3aed-4fb0-81fa-e3fed7e35cf6 | overcloud-novacompute-0 |
>> ACTIVE | -          | Running     | ctlplane=10.0.6.61 |
>> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+
>>
>> 1. Should I re-deploy the nodes or there is a way to do update/makeup
>> for the authentication issue?
>>
>> 2.
>> I don't know how to access to the nodes.
>> There is not an overcloudrc file produced.
>>
>> $ ls overcloud*
>> overcloud-env.json  overcloud-full.initrd  overcloud-full.qcow2
>> overcloud-full.vmlinuz
>>
>> overcloud-full.d:
>> dib-manifests
>>
>> Is it via ssh key or password? Should I set the authentication method
>> somewhere?
>>
>>
>>
>> Thanks,
>>
>> Erming
>>
>>
>> _______________________________________________
>> Rdo-list mailing list
>> Rdo-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/rdo-list
>>
>> To unsubscribe: rdo-list-unsubscribe at redhat.com
>>


-- 
---------------------------------------------
  Erming Pei, Ph.D
  Senior System Analyst; Grid/Cloud Specialist

  Research Computing Group
  Information Services & Technology
  University of Alberta, Canada

  Tel: +1 7804929914        Fax: +1 7804921729
---------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rdoproject.org/pipermail/dev/attachments/20151014/353d118c/attachment.html>