Help in configuring OCCI API for OpenStack

[hemanttgm]

Hello All,

I am new to this list.

I am trying to start OCCI API in devstack. I am following

1. https://wiki.openstack.org/wiki/Occi#Creating_a_devstack_Environment
2. https://wiki.openstack.org/wiki/Occi,
3. https://github.com/tmetsch/occi-os/blob/master/README.md

When I create a keystone service (keystone service-create --name nova --type occi --description 'Nova OCCI Service') it displays its ID. But when I try to get list of keystone service than some time there is no service and at some other time it display the service. Moreover when I try to create end point it says " No service with name or ID of ....... .... exists". Again sometime it displays error "Could not find service: ......ID given..... (HTTP 404)"

Please help me to setup openstack with OCCI API.

Thanks,
Hemant Kumar Mehta

[tmetsch]

so could it be an issue of credentials?

also note that you will need to redo the keystone command every time you unstack and stack again.

Also note that the addition of the service in a dev environment is not strictly needed.

[hemanttgm]

Ok, so can you please suggest me how to resolve the problem.

[tmetsch]

not with the information I have - sorry. I suspect it has something to do on how you add the OCCI service to keystone. If you provide more details I might be able to help.

Try testing the OCCI calls - they should work regardless.

[hemanttgm]

Thanks a lot for prompt response again and sorry for delay in response from my side. My installation is very simple. I installed devstack in a virtualbox VM having ubuntu12.04 desktop. I took help from

1. https://wiki.openstack.org/wiki/Occi#Creating_a_devstack_Environment
2. https://github.com/tmetsch/occi-os

I executed following commands :

1. Install pyssf
   pip install pyssf

2. Install devstack

   git clone git://github.com/openstack-dev/devstack.git

3. Install OCCI
   git clone https://github.com/tmetsch/occi-os
   Install dependencies: pip install pyssf
   Install this egg: python setup.py install

Set the contents of local.conf. I have following lines in this file

    [[local|localrc]]
    DEST=/opt/stack
    FIXED_RANGE=10.254.1.0/24
    NETWORK_GATEWAY=10.254.1.1
    LIBS_FROM_GIT=python-keystoneclient,oslo.config
    LOGFILE=$DEST/logs/stack.sh.log
    LOGDAYS=1
    LOGFILE=$DEST/logs/stack.sh.log
    SCREEN_LOGDIR=$DEST/logs/screen
    ADMIN_PASSWORD=quiet
    DATABASE_PASSWORD=$ADMIN_PASSWORD
    RABBIT_PASSWORD=$ADMIN_PASSWORD
    SERVICE_PASSWORD=$ADMIN_PASSWORD
    SERVICE_TOKEN=a682f596-76f3-11e3-b3b2-e716f9080d50
    SYSLOG=True
    SYSLOG_HOST=$HOST_IP
    SYSLOG_PORT=516
    KEYSTONE_CATALOG_BACKEND=template
    VOLUME_GROUP="stack-volumes"
    VOLUME_NAME_PREFIX="volume-"
    VOLUME_BACKING_FILE_SIZE=10250M
    API_RATE_LIMIT=True
    IP_VERSION=4

    [[post-config|$NOVA_CONF]]
        [DEFAULT]
        api_rate_limit = False
        allow_resize_to_same_host=True
        libvirt_inject_password=True
        enabled_apis=ec2,occiapi,osapi_compute,metadata

1. Run devstack

   ./stack.sh

2. Now when I run this command keystone service-create --name nova --type occi --description 'Nova OCCI Service'. It will display output like:

+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | OCCI service |
| id | 8e6de5d0d7624584bed6bec9bef7c9e0 |
| name | nova |
| type | occi |
+-------------+----------------------------------+

Different ID each time.
Now when I run following command with proper ID:
6. $ keystone endpoint-create --service_id 8e6de5d0d7624584bed6bec9bef7c9e0 --region RegionOne --publicurl http://10.0.2.15:8787/ --internalurl http://10.0.2.15:8787/ --adminurl http://10.0.2.15:8787/

It always gives one of the following two errors
1. " No service with name or ID of 8e6de5d0d7624584bed6bec9bef7c9e0 exists".
2. " Could not find service: 8e6de5d0d7624584bed6bec9bef7c9e0 (HTTP 404)"
7. At this moment if I run command "keystone service-list" command some times it display the service or sometime its displays nothing.

This is all the information I have.
Please suggest me how to proceed to setup OCCI API with openStack/ devstack. I want to write some program using occi to handle OpenStack/DevStack.

Thanks,
Hemant

[tmetsch]

can you try (change pwd etc):

export KID=python -c 'from keystoneclient import client; client = client.Client(username="admin", password="mypass", tenant_name="demo", auth_url="http://localhost:35357/v2.0/"); print client.auth_token'

and then:

curl -v -H 'X-Auth-Token: '$KID -X GET localhost:8787/-/

[hemanttgm]

I also tried the commands: First commands returns nothing even the KID env variable is having none for auth url i tried both ports 35357 or 5000. while second command returns connection refused error as follows:

hemant@hemant-VirtualBox:~/Desktop/devstack$ export KID=python -c 'from keystoneclient import client; client = client.Client(username="admin", password="test123", tenant_name="demo", auth_url="http://10.0.2.15:35357/v2.0/"); print client.auth_token'

hemant@hemant-VirtualBox:~/Desktop/devstack$ curl -v -H 'X-Auth-Token: '$KID -X GET 10.0.2.15:8787/-/* About to connect() to 10.0.2.15 port 8787 (#0)

• Trying 10.0.2.15... Connection refused
• couldn't connect to host
• Closing connection #0
  curl: (7) couldn't connect to host

[tmetsch]

so with ignoring OCCI for a second - does the devstack environment work in general?

[dizz]

Is there a NAT rule setup to forward traffic to the occi python process?

[hemanttgm]

Sorry for late reply,
Besides the OCCI, I thing devstack is working fine, it started successfully, I have access to horizon as admin. Although when I try to launch an instance then instance gets launched successfully but finally its status is ERROR with the message in log "no host found".

Regarding NAT, I have not configured any rule. I am working on Ubuntu 12 Desktop.

[hemanttgm]

There is one positive update from my side, Today I performed a fresh install.
This time I downloaded OCCI master branch and then performed the installation.
Now the 1. keystone service-create and 2. keystone endpoint-create commands worked properly. I
can see this service in the list in horizon as

Now the Problem is : The commands sets the value of KID as none.
export KID=python -c 'from keystoneclient import client; client = client.Client(username="admin", password="test123", tenant_name="demo", auth_url="http://10.0.2.15:35357/v2.0/"); print client.auth_token'

And the command curl -v -H 'X-Auth-Token: '$KID -X GET 10.0.2.15:8787/-/*
Gives following error
About to connect() to 10.0.2.15 port 8787 (#0)

Trying 10.0.2.15... Connection refused
couldn't connect to host
Closing connection #0 curl: (7) couldn't connect to host

Please suggest what to do now to be able to call occi API
Thanks,
Hemant

[tmetsch]

try getting a auth token using the keystone cli.

[hemanttgm]

Thanks a lot for your response.
I tried to get auth token from:
curl -d '{"auth":{"passwordCredentials":{"username": "admin", "password": "admin"}}}' -H "Content-type: application/json" http://10.0.2.15:35357/v2.0/tokens

As it was given in a demo video http://occi-wg.org/2012/04/17/occi-openstack-demo/
Then exported KID to the token.
Still getting connection refused error.

[tmetsch]

but you did add OCCI to the api-paste file?

[hemanttgm]

Yes I added the following to api-paste.ini, and I enabled occiapi in nova.conf then tried to occi call using curl.

########

OCCI

########

[composite:occiapi]
use = egg:Paste#urlmap
/: occiapppipe

[pipeline:occiapppipe]
pipeline = authtoken keystonecontext occiapp

with request body size limiting and rate limiting

pipeline = sizelimit authtoken keystonecontext ratelimit occiapp

[app:occiapp]
use = egg:openstackocci-havana#occi_app

[tmetsch]

but the port 8787 is reachable?