Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

calico role is unable to unblock openstack ports

See original GitHub issue

Attempting to proceed with calico deployment in openstack i get the following error when try to unblock the neutron ports. Could you please advise ?

failed: [mi-worker-003] => (item=mi-worker-003) => {"changed": false, "cmd": "/usr/local/bin/neutron_port_update.py \"192.168.0.0/16\" \"fa:16:3e:a6:94:7d\"", "delta": "0:00:20.117342", "end":
"2016-01-08 10:03:28.770773", "failed": true, "failed_when_result": true, "item": "mi-worker-003", "rc": 1, "start": "2016-01-08 10:03:08.653431", "stdout_lines": [], "warnings": []}
stderr: Traceback (most recent call last):
  File "/usr/local/bin/neutron_port_update.py", line 125, in <module>
    catalog = get_catalog()
  File "/usr/local/bin/neutron_port_update.py", line 56, in get_catalog
    r = requests.post(auth_url, headers=headers, data=json.dumps(payload))
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 108, in post
    return request('post', url, data=data, json=json, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 50, in request
    response = session.request(method=method, url=url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 464, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 415, in send
    raise ConnectionError(err, request=request)
requests.exceptions.ConnectionError: ('Connection aborted.', gaierror(-2, 'Name or service not known'))
failed: [mi-worker-003] => (item=mi-worker-002) => {"changed": false, "cmd": "/usr/local/bin/neutron_port_update.py \"192.168.0.0/16\" \"fa:16:3e:1d:c1:42\"", "delta": "0:00:20.117476", "end":
"2016-01-08 10:03:49.056929", "failed": true, "failed_when_result": true, "item": "mi-worker-002", "rc": 1, "start": "2016-01-08 10:03:28.939453", "stdout_lines": [], "warnings": []}
stderr: Traceback (most recent call last):
  File "/usr/local/bin/neutron_port_update.py", line 125, in <module>
    catalog = get_catalog()
  File "/usr/local/bin/neutron_port_update.py", line 56, in get_catalog
    r = requests.post(auth_url, headers=headers, data=json.dumps(payload))
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 108, in post
    return request('post', url, data=data, json=json, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 50, in request
    response = session.request(method=method, url=url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 464, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 415, in send
    raise ConnectionError(err, request=request)
requests.exceptions.ConnectionError: ('Connection aborted.', gaierror(-2, 'Name or service not known'))
failed: [mi-worker-003] => (item=mi-worker-001) => {"changed": false, "cmd": "/usr/local/bin/neutron_port_update.py \"192.168.0.0/16\" \"fa:16:3e:aa:6f:44\"", "delta": "0:00:20.104057", "end":
"2016-01-08 10:04:09.325214", "failed": true, "failed_when_result": true, "item": "mi-worker-001", "rc": 1, "start": "2016-01-08 10:03:49.221157", "stdout_lines": [], "warnings": []}
stderr: Traceback (most recent call last):
  File "/usr/local/bin/neutron_port_update.py", line 125, in <module>
    catalog = get_catalog()
  File "/usr/local/bin/neutron_port_update.py", line 56, in get_catalog
    r = requests.post(auth_url, headers=headers, data=json.dumps(payload))
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 108, in post
    return request('post', url, data=data, json=json, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 50, in request
    response = session.request(method=method, url=url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 464, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 415, in send
    raise ConnectionError(err, request=request)
requests.exceptions.ConnectionError: ('Connection aborted.', gaierror(-2, 'Name or service not known'))
failed: [mi-worker-003] => (item=mi-edge-01) => {"changed": false, "cmd": "/usr/local/bin/neutron_port_update.py \"192.168.0.0/16\" \"fa:16:3e:4d:1d:3c\"", "delta": "0:00:20.108533", "end": "20
16-01-08 10:04:29.581687", "failed": true, "failed_when_result": true, "item": "mi-edge-01", "rc": 1, "start": "2016-01-08 10:04:09.473154", "stdout_lines": [], "warnings": []}
stderr: Traceback (most recent call last):
  File "/usr/local/bin/neutron_port_update.py", line 125, in <module>
    catalog = get_catalog()
  File "/usr/local/bin/neutron_port_update.py", line 56, in get_catalog
    r = requests.post(auth_url, headers=headers, data=json.dumps(payload))
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 108, in post
    return request('post', url, data=data, json=json, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 50, in request
    response = session.request(method=method, url=url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 464, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 415, in send
    raise ConnectionError(err, request=request)
requests.exceptions.ConnectionError: ('Connection aborted.', gaierror(-2, 'Name or service not known'))
failed: [mi-worker-003] => (item=mi-edge-02) => {"changed": false, "cmd": "/usr/local/bin/neutron_port_update.py \"192.168.0.0/16\" \"fa:16:3e:b6:c6:50\"", "delta": "0:00:20.106809", "end": "20
16-01-08 10:04:49.842076", "failed": true, "failed_when_result": true, "item": "mi-edge-02", "rc": 1, "start": "2016-01-08 10:04:29.735267", "stdout_lines": [], "warnings": []}
stderr: Traceback (most recent call last):
  File "/usr/local/bin/neutron_port_update.py", line 125, in <module>
    catalog = get_catalog()
  File "/usr/local/bin/neutron_port_update.py", line 56, in get_catalog
    r = requests.post(auth_url, headers=headers, data=json.dumps(payload))
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 108, in post
    return request('post', url, data=data, json=json, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 50, in request
    response = session.request(method=method, url=url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 464, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 415, in send
    raise ConnectionError(err, request=request)
requests.exceptions.ConnectionError: ('Connection aborted.', gaierror(-2, 'Name or service not known'))

Issue Analytics

State:
Created 8 years ago
Comments:10 (6 by maintainers)

Top GitHub Comments

1reaction

ghostcommented, Jan 21, 2016

@ipolyzos, sorry for long delay in my reply. I think I was able to reproduce this problem. In some environments Neutron public URL in Keystone catalog can contain a trailing slash which may result in such issues with the script run. You can check the Neutron public URL with:

 openstack catalog show neutron

Do you mind testing my patch https://github.com/CiscoCloud/microservices-infrastructure/commit/a612b3deccdc6fc366629b1b6770b90c4581ee08 and see if it fixes this issue for you? With this patch it doesn’t matter if the URL contains the trailing slash or not.

0reactions

langston-barrettcommented, Jul 6, 2016

This was closed in #1167. I’ll make a new issue for tracking using terraform to unblock the ports.

Top Results From Across the Web

Get started with Calico network policy for OpenStack - Tigera

Calico network policy is always enforced before OpenStack security groups, and cannot be overridden by user-level security group configuration.

Managing port level security in OpenStack - Superuser

All incoming and outgoing traffic is blocked for ports connected to virtual machine instances. (Unless a 'Security Group' has been applied.) ...

2020-December.txt - Mailing Lists - OpenStack

As a workaround to unblock the gate, Elod proposed to cap the pip in devstack for ... Scenario 001 and 004 failing with...

3.3. Methodology for Containerized Openstack Monitoring

masters: Calico, Kubernetes API services; nodes: Calico, ... Create store success/fail ... node[1-3]: Kubernetes node([4-6])$: # 4-6 roles: - controller ...

Firewalls and default ports — Installation Guide documentation

On some deployments, such as ones where restrictive firewalls are in place, you might need to manually configure a firewall to permit OpenStack...