[Bug 1508428] Re: nova image-list failing with SSL enabled on Juno

[Launchpad Bug Tracker]

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: nova (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1508428

Title:
  nova image-list failing with SSL enabled on Juno

Status in nova package in Ubuntu:
  Confirmed

Bug description:
  I have a client setup with OS_CACERT set. All endpoints registered in
  keystone are https. I can query neutron, glance, cinder and keystone
  but the second and subsequent nova  image-list always fails. I can
  'fix' it by restarting nova-api-os-compute and one  image-list will
  work but then failure again. In the nova-api-os-compute.log I see:

  
  2015-10-21 11:27:35.518 16818 WARNING keystoneclient.middleware.auth_token [req-64b4bab0-3b47-4326-b2e5-3bd457b3c797 ] Retrying on HTTP connection exception: 'HTTPSConnectionPool' object has no attribute 'insecure'
  2015-10-21 11:27:36.021 16818 WARNING keystoneclient.middleware.auth_token [req-64b4bab0-3b47-4326-b2e5-3bd457b3c797 ] Retrying on HTTP connection exception: 'HTTPSConnectionPool' object has no attribute 'insecure'
  2015-10-21 11:27:37.024 16818 WARNING keystoneclient.middleware.auth_token [req-64b4bab0-3b47-4326-b2e5-3bd457b3c797 ] Retrying on HTTP connection exception: 'HTTPSConnectionPool' object has no attribute 'insecure'

  
  Reproduce:
  $ env | grep OS
  OS_REGION_NAME=RegionOne
  OS_PASSWORD=openstack
  OS_AUTH_URL=https://10.5.55.4:5000/v2.0
  OS_USERNAME=admin
  OS_TENANT_NAME=admin
  OS_AUTH_PROTOCOL=https
  OS_CACERT=/tmp/ca_cert.pem

  $ neutron net-list
  +--------------------------------------+---------+------------------------------------------------------+
  | id                                   | name    | subnets                                              |
  +--------------------------------------+---------+------------------------------------------------------+
  | 3acfbdb6-6895-48cf-9603-d09ea7007aa4 | ext_net | e9ddba73-96d0-4036-927e-4b99b8c457ee 10.5.0.0/16     |
  | 711f199b-0d8c-4e3a-beff-d8edffff8a1f | private | cd730f70-a032-4784-b4dd-3c20d0335c6f 192.168.21.0/24 |
  +--------------------------------------+---------+------------------------------------------------------+

  $ glance image-list
  +--------------------------------------+---------+-------------+------------------+-----------+--------+
  | ID                                   | Name    | Disk Format | Container Format | Size      | Status |
  +--------------------------------------+---------+-------------+------------------+-----------+--------+
  | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros  | qcow2       | bare             | 13200896  | active |
  | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | qcow2       | bare             | 263389696 | active |
  +--------------------------------------+---------+-------------+------------------+-----------+--------+

  $  nova image-list
  +--------------------------------------+---------+--------+--------+
  | ID                                   | Name    | Status | Server |
  +--------------------------------------+---------+--------+--------+
  | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros  | ACTIVE |        |
  | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | ACTIVE |        |
  +--------------------------------------+---------+--------+--------+

  $ nova image-list
  ERROR (ClientException): Unknown Error (HTTP 503)

  $ nova image-list
  ERROR (ClientException): Unknown Error (HTTP 503)

  Other commands still work:

  $ neutron net-list
  +--------------------------------------+---------+------------------------------------------------------+
  | id                                   | name    | subnets                                              |
  +--------------------------------------+---------+------------------------------------------------------+
  | 3acfbdb6-6895-48cf-9603-d09ea7007aa4 | ext_net | e9ddba73-96d0-4036-927e-4b99b8c457ee 10.5.0.0/16     |
  | 711f199b-0d8c-4e3a-beff-d8edffff8a1f | private | cd730f70-a032-4784-b4dd-3c20d0335c6f 192.168.21.0/24 |
  +--------------------------------------+---------+------------------------------------------------------+

  $ glance image-list
  +--------------------------------------+---------+-------------+------------------+-----------+--------+
  | ID                                   | Name    | Disk Format | Container Format | Size      | Status |
  +--------------------------------------+---------+-------------+------------------+-----------+--------+
  | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros  | qcow2       | bare             | 13200896  | active |
  | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | qcow2       | bare             | 263389696 | active |
  +--------------------------------------+---------+-------------+------------------+-----------+--------+

  Fix nova commands for one run:
  $ service nova-api-os-compute restart
  nova-api-os-compute stop/waiting
  nova-api-os-compute start/running, process 16910

  $ nova image-list                                                                                                                                                +--------------------------------------+---------+--------+--------+
  | ID                                   | Name    | Status | Server |
  +--------------------------------------+---------+--------+--------+
  | f791dcef-4b13-42b3-aca8-eb56e35a2879 | cirros  | ACTIVE |        |
  | ec738ebf-5c44-4a34-94e2-396d617af079 | precise | ACTIVE |        |
  +--------------------------------------+---------+--------+--------+
  $ nova image-list
  ERROR (Unauthorized): Unauthorized (HTTP 401)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1508428/+subscriptions