Problem with PNDA 5.0 creation on OpenStack

17 views
Skip to first unread message

Rafael Zanetti

unread,
Dec 3, 2018, 2:40:28 PM12/3/18
to PNDA Users
Hello!

I'm following the http://pnda.io/guide to create PNDA 5.0 on OpenStack and I'm having some issues.

I got through all the steps and reached the final one, but when I run the pnda-cli script, after the stack creation is completed, the script tries to connect to one of the created instances and times out after 10 minutes.

I went to the OpenStack dashboard and checked that five instances were created (anion-hadoop-mgr-1, anion-kafka-0, anion-hadoop-edge, anion-gateway, anion-hadoop-dn-0), but I can't connect to any of those, even from an instance created on the same subnet. I checked some of the logs of the OpenStack machine, but couldn't find any helpful information.

I've attached the logs and the pnda_env.yaml configuration file.

Can anyone help me fix the issue or give any advice on how to troubleshoot it? 

Thanks,
Rafael


anion.1543856744.run
pnda-cli.1543856740.11.log
pnda_env.yaml

Donald Hunter

unread,
Dec 4, 2018, 4:18:09 AM12/4/18
to PNDA Users
Hi Rafael,

I have looked at your logs and I think the problem may be the "connectivity" section of pnda_env.yaml

connectivity:
  # Deploy an iptables ruleset to every node preventing outbound access to all hosts except the PNDA_MIRROR, NTP_SERVER and specified CLIENT_IP. Specify YES to enable.
  REJECT_OUTBOUND: "YES"
  # If using REJECT_OUTBOUND, the IP address of the client that created PNDA
  CLIENT_IP: 1.1.1.1

The log shows successful connection to 192.168.253.75 followed by configuring iptables and then failure. The iptables configuration is driven by setting REJECT_OUTBOUND: "YES". When configured like this, CLIENT_IP must be set to the IP address of the machine where you are running pnda-cli.py.

My recommendation is to try again with REJECT_OUTBOUND: "NO" and see if that works.

Cheers,
Donald.

Rafael Zanetti

unread,
Dec 4, 2018, 6:42:39 AM12/4/18
to PNDA Users
Hi Donald!

It worked, thanks a lot! I'll continue with the creation process.
Reply all
Reply to author
Forward
0 new messages