[HELP-2689] FIWARE.Request.Tech.Cloud.CloudPortal.accessVM - JIRA

Details

Type: extRequest
Status: Closed
Priority: Major
Resolution: Done
Fix Version/s: 2021
Component/s: FIWARE-TECH-HELP
Labels:
None

Sender Email:
filab@atleta.hu
HD-Chapter:
Cloud
HD-Enabler:
Cloud Portal

Description

Hi,

I've created a few VM instances on the Budapest node and access them from
the outside (tried to do so in other regions as well, with less success)
without any luck. Here's what I did:

1., created a security group with port 22 open (among others)
2., launched an instance using one of the images, adding it to the above
security group
3., associated a floating IP to one of the internal interfaces (tried both
10.10.xxx and 10.20.xxx)
4., tried to connect from my machine, and received a "no route to host"
error

I also tried setting up my own network (it's not clear whether it's
necessary or not):
1., create a new network (192.168.x.x/24)
2., create a router and set the external network to the one that contains
my public IP ( public-ext-net-01)
3., launch a new VM instance and the network created in step 1 to it
4., associate floating IP
5., try to ssh -> no route to host

My filab user id is the same as I'm sending this email from (I don't know
if it's a requirement for getting a feedback for the reports or not).

Thanks,
Laszlo

_______________________________________________
Fiware-lab-help mailing list
Fiware-lab-help@lists.fi-ware.org
https://lists.fi-ware.org/listinfo/fiware-lab-help

[Created via e-mail received from: =?UTF-8?B?TMOhc3psw7MgTcOhcmFp?= <filab@atleta.hu>]

Activity

Ascending order - Click to sort in descending order

Hide

Permalink

Marco Cipriani added a comment - 07/May/15 4:17 PM

My reply to the user Lazlo Marai (filab@atleta.hu):

Dear Laszlo,
please could you provide us your project ID (your email account is not enough)? It can be found selecting your project name and looking at the info bar in the bottom of the page, something like <project-name> (ID 00000000000000000000000000000xyz).

Meanwhile, I will forward your request to the Budapest support team.

Best regards
Marco

Show

Marco Cipriani added a comment - 07/May/15 4:17 PM My reply to the user Lazlo Marai (filab@atleta.hu): Dear Laszlo, please could you provide us your project ID (your email account is not enough)? It can be found selecting your project name and looking at the info bar in the bottom of the page, something like <project-name> (ID 00000000000000000000000000000xyz). Meanwhile, I will forward your request to the Budapest support team. Best regards Marco

4 older comments

Hide

Permalink

Marco Cipriani added a comment - 07/May/15 7:35 PM

Dear Laszlo,
there is again some problem on FIWARE platform: the installation and configuration of the new Idm component is still on-going. As soon as the installation will be complete, your problems should be resolved.
Anyway I have just forwarded your request to the second level helpdesk.

Best regards
Marco

Da: atleta@atleta.hu atleta@atleta.hu Per conto di László Márai
Inviato: giovedì 7 maggio 2015 17:56
A: Cipriani Marco
Cc: fiware-lab-help
Oggetto: Re: [Fiware-lab-help] Can't access VM from outside

Dear Marco,
Well, this is pretty unfortunate. I wonder whoever thought it was a good idea to launch an email just 36 hours before finally destroying the users' data, basically leaving a single work day to move things around. (Also, with such an innocent an unsuggesting subject line and the threat buried in a huge gob of text.)
Whatever, I didn't have a lot to lose, so it's just some feedback you can forward to whomever it may concern. (As far as I understand, this is the exact reason for the CEED Tech programme, we're participating in.)
Now the problem is, that my status might have been downgraded from being a community member, because I got access to the Budapest region (as well as the others) but know I don't. The resources I get in the Spain2 region are less, than what I had earlier.
Another problem is, that I'm still wrestling with the original issue. But this time I'm not able to create a new subnet in the network I've created, because whatever I come up with gets rejected with the error: {"NeutronError": {"message": "Invalid input for operation: Requested subnet with cidr: 10.0.0.0/8<http://10.0.0.0/8> for network: bc8e492b-c014-40f9-b32a-9114abd4c05a overlaps with another subnet.", "type": "InvalidInput", "detail": ""}}
I don't see any networks that overlap with this one defined in the networks section.
BTW, one more thing, I get constantly kicked out and re-authenticated through account.lab.fiware.org<http://account.lab.fiware.org> (which is down at the moment), but I guess you are already aware of this.
Thanks for your time & help,
Laszlo

On Thu, May 7, 2015 at 5:24 PM, Cipriani Marco <marco2.cipriani@telecomitalia.it<marco2.cipriani@telecomitalia.it>> wrote:
Dear Laszlo,
about the password issue, as reported in the mail sent to all users to remind the installation of the new Idm component (scheduled for today), “during the deployment of the new IdM GE, we have to reset all the user passwords. So please, in order to continue using your account, you have to use the “Forgot password” option in the log in page of the FIWARE Lab Account Portal".

About the other points, the same mail sent to the FIWARE users said:
“On the official FIWARE Lab cloud environment based on the new IdM GE deployed on May 7th, only the "default" organization linked to a given FIWARE account will be visible as "projects" (i.e., tenants) in the cloud environment. Organizations created through the Account Portal of the FIWARE Lab will not be mapped into "projects" in the cloud of the FIWARE Lab. The name of the default organization linked to your account will be "<your username> cloud" (for instance “user1 cloud") although you will be able to modify it. Take into account that other organizations will not be mapped to "projects" on the Cloud Portal anymore and, in their case, this will mean that the associated resources will be lost. Therefore, VERY IMPORTANT, you should migrate all the cloud resources (VMs, etc) you may have defined linked to organizations different than the organization linked as default to your account and do it before May 7 (name of the default organization linked to your account should currently map to your account user name). After that date, FIWARE Lab providers will not be responsible for the loss of any data.”

So, it seems exactly the behavior that you are experiencing.
I’m very sorry for the inconvenience.

Best regards
Marco

Da: atleta@atleta.hu<atleta@atleta.hu> atleta@atleta.hu<mailto:atleta@atleta.hu> Per conto di László Márai
Inviato: giovedì 7 maggio 2015 16:37
A: Cipriani Marco
Cc: fiware-lab-help
Oggetto: Re: [Fiware-lab-help] Can't access VM from outside

Hi Marco,
Something really strange happened. When trying to log in to my account to get my project ID, the website was asking for a password again (I should have had a valid session). Then it didn't accept my password (the password was saved in both the browser and my password manager, so no way I have 'forgotten it'). Then after changing my password and logging in it asked in I authorize the cloud application (which I have used before), then I'm not seeing my instances and the only region I see is Spain2. Also, I can't see our organization (PsychAsk) I created before (like months ago). Now I'm only member of a project that is the same as my name ( project laszlo-marai cloud (ID 00000000000000000000000000009481) ). I don't know what it is, but it doesn't look right.
Thanks for your help,
Laszlo

On Thu, May 7, 2015 at 4:11 PM, Cipriani Marco <marco2.cipriani@telecomitalia.it<marco2.cipriani@telecomitalia.it>> wrote:
Dear Laszlo,
please could you provide us your project ID (your email account is not enough)? It can be found selecting your project name and looking at the info bar in the bottom of the page, something like <project-name> (ID 00000000000000000000000000000xyz).

Meanwhile, I will forward your request to the Budapest support team.

Best regards
Marco

Da: fiware-lab-help-bounces@lists.fi-ware.org<fiware-lab-help-bounces@lists.fi-ware.org> fiware-lab-help-bounces@lists.fi-ware.org<mailto:fiware-lab-help-bounces@lists.fi-ware.org> Per conto di László Márai
Inviato: giovedì 7 maggio 2015 15:51
A: fiware-lab-help
Oggetto: [Fiware-lab-help] Can't access VM from outside

Hi,

I've created a few VM instances on the Budapest node and access them from the outside (tried to do so in other regions as well, with less success) without any luck. Here's what I did:
1., created a security group with port 22 open (among others)
2., launched an instance using one of the images, adding it to the above security group
3., associated a floating IP to one of the internal interfaces (tried both 10.10.xxx and 10.20.xxx)
4., tried to connect from my machine, and received a "no route to host" error
I also tried setting up my own network (it's not clear whether it's necessary or not):
1., create a new network (192.168.x.x/24)
2., create a router and set the external network to the one that contains my public IP ( public-ext-net-01)
3., launch a new VM instance and the network created in step 1 to it
4., associate floating IP
5., try to ssh -> no route to host
My filab user id is the same as I'm sending this email from (I don't know if it's a requirement for getting a feedback for the reports or not).

Thanks,
Laszlo
Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie.

This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks.
Rispetta l'ambiente. Non stampare questa mail se non è necessario.

Show

Marco Cipriani added a comment - 07/May/15 7:35 PM Dear Laszlo, there is again some problem on FIWARE platform: the installation and configuration of the new Idm component is still on-going. As soon as the installation will be complete, your problems should be resolved. Anyway I have just forwarded your request to the second level helpdesk. Best regards Marco Da: atleta@atleta.hu atleta@atleta.hu Per conto di László Márai Inviato: giovedì 7 maggio 2015 17:56 A: Cipriani Marco Cc: fiware-lab-help Oggetto: Re: [Fiware-lab-help] Can't access VM from outside Dear Marco, Well, this is pretty unfortunate. I wonder whoever thought it was a good idea to launch an email just 36 hours before finally destroying the users' data, basically leaving a single work day to move things around. (Also, with such an innocent an unsuggesting subject line and the threat buried in a huge gob of text.) Whatever, I didn't have a lot to lose, so it's just some feedback you can forward to whomever it may concern. (As far as I understand, this is the exact reason for the CEED Tech programme, we're participating in.) Now the problem is, that my status might have been downgraded from being a community member, because I got access to the Budapest region (as well as the others) but know I don't. The resources I get in the Spain2 region are less, than what I had earlier. Another problem is, that I'm still wrestling with the original issue. But this time I'm not able to create a new subnet in the network I've created, because whatever I come up with gets rejected with the error: {"NeutronError": {"message": "Invalid input for operation: Requested subnet with cidr: 10.0.0.0/8< http://10.0.0.0/8 > for network: bc8e492b-c014-40f9-b32a-9114abd4c05a overlaps with another subnet.", "type": "InvalidInput", "detail": ""}} I don't see any networks that overlap with this one defined in the networks section. BTW, one more thing, I get constantly kicked out and re-authenticated through account.lab.fiware.org< http://account.lab.fiware.org > (which is down at the moment), but I guess you are already aware of this. Thanks for your time & help, Laszlo On Thu, May 7, 2015 at 5:24 PM, Cipriani Marco <marco2.cipriani@telecomitalia.it< marco2.cipriani@telecomitalia.it >> wrote: Dear Laszlo, about the password issue, as reported in the mail sent to all users to remind the installation of the new Idm component (scheduled for today), “during the deployment of the new IdM GE, we have to reset all the user passwords. So please, in order to continue using your account, you have to use the “Forgot password” option in the log in page of the FIWARE Lab Account Portal". About the other points, the same mail sent to the FIWARE users said: “On the official FIWARE Lab cloud environment based on the new IdM GE deployed on May 7th, only the "default" organization linked to a given FIWARE account will be visible as "projects" (i.e., tenants) in the cloud environment. Organizations created through the Account Portal of the FIWARE Lab will not be mapped into "projects" in the cloud of the FIWARE Lab. The name of the default organization linked to your account will be "<your username> cloud" (for instance “user1 cloud") although you will be able to modify it. Take into account that other organizations will not be mapped to "projects" on the Cloud Portal anymore and, in their case, this will mean that the associated resources will be lost. Therefore, VERY IMPORTANT, you should migrate all the cloud resources (VMs, etc) you may have defined linked to organizations different than the organization linked as default to your account and do it before May 7 (name of the default organization linked to your account should currently map to your account user name). After that date, FIWARE Lab providers will not be responsible for the loss of any data.” So, it seems exactly the behavior that you are experiencing. I’m very sorry for the inconvenience. Best regards Marco Da: atleta@atleta.hu< atleta@atleta.hu > atleta@atleta.hu<mailto:atleta@atleta.hu> Per conto di László Márai Inviato: giovedì 7 maggio 2015 16:37 A: Cipriani Marco Cc: fiware-lab-help Oggetto: Re: [Fiware-lab-help] Can't access VM from outside Hi Marco, Something really strange happened. When trying to log in to my account to get my project ID, the website was asking for a password again (I should have had a valid session). Then it didn't accept my password (the password was saved in both the browser and my password manager, so no way I have 'forgotten it'). Then after changing my password and logging in it asked in I authorize the cloud application (which I have used before), then I'm not seeing my instances and the only region I see is Spain2. Also, I can't see our organization (PsychAsk) I created before (like months ago). Now I'm only member of a project that is the same as my name ( project laszlo-marai cloud (ID 00000000000000000000000000009481) ). I don't know what it is, but it doesn't look right. Thanks for your help, Laszlo On Thu, May 7, 2015 at 4:11 PM, Cipriani Marco <marco2.cipriani@telecomitalia.it< marco2.cipriani@telecomitalia.it >> wrote: Dear Laszlo, please could you provide us your project ID (your email account is not enough)? It can be found selecting your project name and looking at the info bar in the bottom of the page, something like <project-name> (ID 00000000000000000000000000000xyz). Meanwhile, I will forward your request to the Budapest support team. Best regards Marco Da: fiware-lab-help-bounces@lists.fi-ware.org< fiware-lab-help-bounces@lists.fi-ware.org > fiware-lab-help-bounces@lists.fi-ware.org<mailto:fiware-lab-help-bounces@lists.fi-ware.org> Per conto di László Márai Inviato: giovedì 7 maggio 2015 15:51 A: fiware-lab-help Oggetto: [Fiware-lab-help] Can't access VM from outside Hi, I've created a few VM instances on the Budapest node and access them from the outside (tried to do so in other regions as well, with less success) without any luck. Here's what I did: 1., created a security group with port 22 open (among others) 2., launched an instance using one of the images, adding it to the above security group 3., associated a floating IP to one of the internal interfaces (tried both 10.10.xxx and 10.20.xxx) 4., tried to connect from my machine, and received a "no route to host" error I also tried setting up my own network (it's not clear whether it's necessary or not): 1., create a new network (192.168.x.x/24) 2., create a router and set the external network to the one that contains my public IP ( public-ext-net-01) 3., launch a new VM instance and the network created in step 1 to it 4., associate floating IP 5., try to ssh -> no route to host My filab user id is the same as I'm sending this email from (I don't know if it's a requirement for getting a feedback for the reports or not). Thanks, Laszlo Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie. This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks. Rispetta l'ambiente. Non stampare questa mail se non è necessario.

Hide

Permalink

FW External User added a comment - 07/May/15 8:06 PM

Dear Marco,

Thanks again. How does one know that the configuration has been
successfully finished and it's not a waste of time to try using the
platform and reporting the issues?

Regards,
Laszlo

On Thu, May 7, 2015 at 7:34 PM, Cipriani Marco <

_______________________________________________
Fiware-lab-help mailing list
Fiware-lab-help@lists.fi-ware.org
https://lists.fi-ware.org/listinfo/fiware-lab-help

Show

FW External User added a comment - 07/May/15 8:06 PM Dear Marco, Thanks again. How does one know that the configuration has been successfully finished and it's not a waste of time to try using the platform and reporting the issues? Regards, Laszlo On Thu, May 7, 2015 at 7:34 PM, Cipriani Marco < _______________________________________________ Fiware-lab-help mailing list Fiware-lab-help@lists.fi-ware.org https://lists.fi-ware.org/listinfo/fiware-lab-help

Hide

Permalink

Marco Cipriani added a comment - 08/May/15 3:54 PM

My reply to the user:

Dear Laszlo,
unfortunately, the installation of the new IDM has not been completed yet due to some problems. Our colleagues are working to solve the issues.
I'm sorry for the inconvenience. Please be patient.

Best regards
Marco

Show

Marco Cipriani added a comment - 08/May/15 3:54 PM My reply to the user: Dear Laszlo, unfortunately, the installation of the new IDM has not been completed yet due to some problems. Our colleagues are working to solve the issues. I'm sorry for the inconvenience. Please be patient. Best regards Marco

Hide

Permalink

Marco Cipriani added a comment - 08/May/15 3:55 PM

Reply to the user from Sandor:

Dear Laszlo,
A comment: If you are going to use the Budapest region, please choose "Budapest2" which is our new environment. All the VMs from the old Budapest region will be moved to this one after IdM is back again.

Best regards,
Sandor

Show

Marco Cipriani added a comment - 08/May/15 3:55 PM Reply to the user from Sandor: Dear Laszlo, A comment: If you are going to use the Budapest region, please choose "Budapest2" which is our new environment. All the VMs from the old Budapest region will be moved to this one after IdM is back again. Best regards, Sandor

Hide

Permalink

Sándor Laki added a comment - 20/May/15 10:17 AM

Dear Laszlo,

After the change in the IdM, we had some instability issues, but now
Budapest2 is fully functional, and much more stable then the old
Budapest environment was.
If you experience any problems or need more resources than what are
provided by the default quota, please do not hesitate to contact us.

Best regards,
Sandor

–
Sándor Laki
EU FP7 FI-PPP XIFI project,
Wigner Research Centre for Physics,
Hungarian Academy of Sciences
Konkoly Thege Miklós út 29-33.
H-1121, Budapest, Hungary
Cell: +36 70 374 2646
Skype: sandor.laki

XIFI: https://fi-xifi.eu/home.html
FI-PPP: http://www.fi-ppp.eu/

_______________________________________________
Fiware-lab-help mailing list
Fiware-lab-help@lists.fi-ware.org
https://lists.fi-ware.org/listinfo/fiware-lab-help

Show

Sándor Laki added a comment - 20/May/15 10:17 AM Dear Laszlo, After the change in the IdM, we had some instability issues, but now Budapest2 is fully functional, and much more stable then the old Budapest environment was. If you experience any problems or need more resources than what are provided by the default quota, please do not hesitate to contact us. Best regards, Sandor – Sándor Laki EU FP7 FI-PPP XIFI project, Wigner Research Centre for Physics, Hungarian Academy of Sciences Konkoly Thege Miklós út 29-33. H-1121, Budapest, Hungary Cell: +36 70 374 2646 Skype: sandor.laki XIFI: https://fi-xifi.eu/home.html FI-PPP: http://www.fi-ppp.eu/ _______________________________________________ Fiware-lab-help mailing list Fiware-lab-help@lists.fi-ware.org https://lists.fi-ware.org/listinfo/fiware-lab-help

People

Assignee:

Alvaro Alonso

Reporter:

FW External User

Votes:

0 Vote for this issue

Watchers:

3 Start watching this issue

Dates

Created:

07/May/15 3:51 PM

Updated:

27/May/21 10:59 AM

Resolved:

14/May/15 4:08 PM

Agile

View on Board