нейтрон-сервер возвращает "Ошибка: 503" после обновления для королев

Я обновил свою среду openstack с Newton до Queens. Поскольку я не нашел лучшего практического решения для прогресса обновления, я использовал apt для обновления пакеты для королев. Я обнаружил несколько ошибок, связанных с keystone, glance и nova, и все смог исправить их с помощью некоторых изменений в базе данных и файлах конфигурации (специально я изменил метод аутентификации с v2 на v3). Но, к сожалению, я не обнаружил проблемы с моей нейтронной конфигурацией. Каждый раз, когда я пытаюсь составить список своих сетей, я получаю следующую ошибку:

******@ctrl:~$ openstack network list
HttpException: 503: Server Error for url: http://ctrl:9696/v2.0/networks, Service Unavailable 

/var/log/neutron-server.log

2019-02-05 09:37:09.263 21087 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}: Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-a7c96551-ca90-48e8-af95-297acc82bd23)
    2019-02-05 09:37:09.287 21087 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}: Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-beed4c2e-1c65-4adf-bb3c-17b6b7170e64)
    2019-02-05 09:37:09.288 21087 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data: ServiceError: Identity server rejected authorization necessary to fetch token data
    2019-02-05 09:37:09.289 21087 INFO neutron.wsgi [-] 192.168.0.2 "GET /v2.0/ports?tenant_id=885ea3ee676b41c6a2ef1d15b76e1ff0&device_id=286b1b13-cba6-45f7-8934-421f675778d4 HTTP/1.1" status: 503  len: 386 time: 0.0506890

/var/log/apache2/keystone_access.log

192.168.0.1 - - [05/Feb/2019:09:37:09 +0000] "POST /v3/auth/tokens HTTP/1.1" 401 482 "-"
"neutron/12.0.5 keystonemiddleware.auth_token/4.21.0 keystoneauth1/3.4.0 python-requests/
2.18.4 CPython/2.7.12"
192.168.0.1 - - [05/Feb/2019:09:37:09 +0000] "POST /v3/auth/tokens HTTP/1.1" 401 481 "-"
"neutron/12.0.5 keystonemiddleware.auth_token/4.21.0 keystoneauth1/3.4.0 python-requests/
2.18.4 CPython/2.7.12"
192.168.0.1 - - [05/Feb/2019:09:37:11 +0000] "GET /v3/auth/tokens HTTP/1.1" 200 4982 "-"
"python-keystoneclient"
192.168.0.1 - - [05/Feb/2019:09:37:20 +0000] "POST /v3/auth/tokens HTTP/1.1" 401 482 "-"
"neutron/12.0.5 keystonemiddleware.auth_token/4.21.0 keystoneauth1/3.4.0 python-requests/
2.18.4 CPython/2.7.12"
192.168.0.1 - - [05/Feb/2019:09:37:20 +0000] "POST /v3/auth/tokens HTTP/1.1" 401 481 "-"
"neutron/12.0.5 keystonemiddleware.auth_token/4.21.0 keystoneauth1/3.4.0 python-requests/
2.18.4 CPython/2.7.12"

Я проверяю настроенный пароль в / etc / нейтрон и / etc / nova для [keystone_auth] несколько раз, и это правильно!

Мои файлы конфигурации для нейтрона: / etc / нейтрон / нейтрон.conf

  [DEFAULT]
# ...
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = true
transport_url = rabbit://openstack:<passwordRemoved>@ctrl
auth_strategy = keystone
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true

[keystone_authtoken]
# ...
auth_uri = http://ctrl:5000
auth_url = http://ctrl:5000
memcached_servers = ctrl:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = <passwordRemoved>

[database]
# ...
connection = mysql+pymysql://neutron:<passwordRemoved>@ctrl/neutron

[nova]
# ...
auth_url = http://ctrl:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = <passwordRemoved>

/etc/neutron/api-paste.ini

[composite:neutron]
use = egg:Paste#urlmap
/: neutronversions_composite
/v2.0: neutronapi_v2_0

[composite:neutronapi_v2_0]
use = call:neutron.auth:pipeline_factory
noauth = cors http_proxy_to_wsgi request_id catch_errors extensions neutronapiapp_v2_0
keystone = cors http_proxy_to_wsgi request_id catch_errors authtoken keystonecontext extensions neutronapiapp_v2_0

[composite:neutronversions_composite]
use = call:neutron.auth:pipeline_factory
noauth = cors http_proxy_to_wsgi neutronversions
keystone = cors http_proxy_to_wsgi neutronversions

[filter:request_id]
paste.filter_factory = oslo_middleware:RequestId.factory

[filter:catch_errors]
paste.filter_factory = oslo_middleware:CatchErrors.factory

[filter:cors]
paste.filter_factory = oslo_middleware.cors:filter_factory
oslo_config_project = neutron

[filter:http_proxy_to_wsgi]
paste.filter_factory = oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory

[filter:keystonecontext]
paste.filter_factory = neutron.auth:NeutronKeystoneContext.factory

[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory

auth_plugin = password
auth_url = http://ctrl:5000
username = neutron
password = <passwordRemoved>
project_name = services
user_domain_name = Default
project_domain_name = Default
auth_uri = http://ctrl:5000


[filter:extensions]
paste.filter_factory = neutron.api.extensions:plugin_aware_extension_middleware_factory

[app:neutronversions]
paste.app_factory = neutron.pecan_wsgi.app:versions_factory

[app:neutronapiapp_v2_0]
paste.app_factory = neutron.api.v2.router:APIRouter.factory

[filter:osprofiler]
paste.filter_factory = osprofiler.web:WsgiMiddleware.factory

/etc/neutron/plugins/ml2/ml2_conf.ini

[DEFAULT]
core_plugin = ml2
service_plugins =
transport_url = rabbit://openstack:<passwordRemoved>@ctrl
auth_strategy = keystone
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true

[database]
# ...
connection = mysql+pymysql://neutron:<passwordRemoved>@ctrl/neutron

[keystone_authtoken]
# ...
auth_uri = http://ctrl:5000
auth_url = http://ctrl:5000
memcached_servers = ctrl:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = <passwordRemoved>

[nova]
# ...
auth_url = http://ctrl:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = <passwordRemoved>
<---------</snipped>--------->

Статус для Neutron-server и rabbitmq-server:

*******@ctrl:~$ sudo service neutron-server status
● neutron-server.service - OpenStack Neutron Server
   Loaded: loaded (/lib/systemd/system/neutron-server.service; enabled; vendor preset: ena
   Active: active (running) since Tue 2019-02-05 08:56:50 UTC; 1h 7min ago
 Main PID: 21070 (neutron-server)
    Tasks: 8
   Memory: 349.7M
      CPU: 20.526s
   CGroup: /system.slice/neutron-server.service
           ├─21070 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu
           ├─21085 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu
           ├─21086 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu
           ├─21087 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu
           ├─21088 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu
           ├─21089 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu
           ├─21090 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu
           └─21091 /usr/bin/python2 /usr/bin/neutron-server --config-file=/etc/neutron/neu

Feb 05 08:56:50 ctrl systemd[1]: Started OpenStack Neutron Server.

******@ctrl:~$ sudo service rabbitmq-server status
● rabbitmq-server.service - RabbitMQ Messaging Server
   Loaded: loaded (/lib/systemd/system/rabbitmq-server.service; enabled; vendor preset: en
   Active: active (running) since Fri 2019-02-01 12:20:31 UTC; 3 days ago
 Main PID: 1304 (rabbitmq-server)
    Tasks: 78
   Memory: 53.1M
      CPU: 54min 47.360s
   CGroup: /system.slice/rabbitmq-server.service
           ├─1304 /bin/sh /usr/sbin/rabbitmq-server
           ├─1337 /bin/sh /usr/lib/rabbitmq/bin/rabbitmq-server
           ├─1717 /usr/lib/erlang/erts-7.3/bin/epmd -daemon
           ├─2219 /usr/lib/erlang/erts-7.3/bin/beam.smp -W w -A 64 -P 1048576 -t 5000000 -
           ├─2482 inet_gethost 4
           └─2483 inet_gethost 4

Feb 01 12:20:04 ctrl systemd[1]: Starting RabbitMQ Messaging Server...
Feb 01 12:20:21 ctrl rabbitmq[1305]: Waiting for rabbit@ctrl
Feb 01 12:20:21 ctrl rabbitmq[1305]: pid is 1337
Feb 01 12:20:31 ctrl systemd[1]: Started RabbitMQ Messaging Server.

Не могли бы вы прислать мне обратную связь, что еще я мог бы проверить, или если я пропустил некоторые параметры конфигурации? заранее спасибо и С уважением, Люк

0
задан 5 February 2019 в 04:20

1 ответ

можно присвоить Администраторскую Роль нейтронному Пользователю, следуют за командой:

openstack role add --project service --user neutron admin
0
ответ дан 26 October 2019 в 09:04

Другие вопросы по тегам:

Похожие вопросы: