Ironic section keystone auth should NOT be versioned

Bug #1908458 reported by Michael Quiniola
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Nova Compute Charm
New
Undecided
Unassigned

Bug Description

During the deployment of nova-compute as nova-ironic in order to deploy ironic using charms:
cs:~gabriel-samfira/ironic-conductor-1
cs:~gabriel-samfira/ironic-api-1
cs:nova-compute-323

Nova would not register any new baremetal nodes.

Looking into nova.conf log in nova-ironic charm:

`Failed to discover available identity versions when contacting https://<KEYSTONE DOMAIN/IP>:35357/v2.0. Attempting to parse version from URL.: keystoneauth1.exceptions.http.NotFound: Not Found (HTTP 404) (Request-ID: req-be790f25-b20c-47e8-95da-f6cfa4f249fa)
2020-12-16 00:00:39.621 260285 ERROR nova.virt.ironic.driver [req-a6f3800e-912b-4425-bfe5-5d7e967390f1 - - - - -] An unknown error has occurred when trying to get the list of nodes from the Ironic inventory. Error: Cannot use v2 authentication with domain scope: keystoneauth1.exceptions.discovery.DiscoveryFailure: Cannot use v2 authentication with domain scope`

The section for ironic in the /etc/nova/nova.conf file has a versioned auth_url option. It SHOULD be unversioned.

Bad:
`auth_url = https://<KEYSTONE DOMAIN/IP>:35357/v2.0`

Good:
`auth_url = https://<KEYSTONE DOMAIN/IP>:35357`

Removing the `/{{auth_ver}}` from the end of the auth_url line in templates/parts/section-ironic solves this problem

Revision history for this message
Gabriel Samfira (gabriel-samfira) wrote :
Revision history for this message
Gabriel Samfira (gabriel-samfira) wrote :

For now, it is recommended to deploy the charms in openstack-charmers-next when deploying Ironic, nova-compute included.

I recommend you use one of the bundles from here as a base for a test deployment:

https://opendev.org/openstack/charm-ironic-api/src/branch/master/src/tests/bundles

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.