Glance-api not starting when VMWare vSphere is choosen as storage.

This document (7018784) is provided subject to the disclaimer at the end of this document.

Environment

SUSE OpenStack Cloud 7

Situation

When using VMware vCenter for glance as storage, the following error occurs when performing barclamp changes :

2017-04-04 18:05:47.563 10337 ERROR glance   File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 488, in get
2017-04-04 18:05:47.563 10337 ERROR glance     return self.request('GET', url, **kwargs)
2017-04-04 18:05:47.563 10337 ERROR glance   File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 475, in request
2017-04-04 18:05:47.563 10337 ERROR glance     resp = self.send(prep, **send_kwargs)
2017-04-04 18:05:47.563 10337 ERROR glance   File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 596, in send
2017-04-04 18:05:47.563 10337 ERROR glance     r = adapter.send(request, **kwargs)
2017-04-04 18:05:47.563 10337 ERROR glance   File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 495, in send
2017-04-04 18:05:47.563 10337 ERROR glance     raise SSLError(e, request=request)
2017-04-04 18:05:47.563 10337 ERROR glance SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)

Resolution

To workaround this issue a separate config file can be created as chef-client would overwrite changes made in the default one.

Create "/etc/glance/glance-api.conf.d/900-suse-fix-bug.conf" with the following content to allow insecure connections :

[glance_store]
vmware_insecure = true

Afterwards, a restart of the service is required., e.g. in a cluster:

crm resource restart cl-glance-api

Cause

vCenter SSL Certificate is insecure e.g. self-signed.

Additional Information

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.