| *** openstack has joined #openstack-ansible | 00:24 | |
| *** ChanServ sets mode: +o openstack | 00:24 | |
| *** prometheanfire has quit IRC | 00:34 | |
| *** prometheanfire has joined #openstack-ansible | 00:34 | |
| *** MrClayPole_ has quit IRC | 01:07 | |
| *** MrClayPole has joined #openstack-ansible | 01:18 | |
| *** d34dh0r53 has quit IRC | 01:40 | |
| *** gyee has quit IRC | 02:31 | |
| *** rohit02 has joined #openstack-ansible | 03:26 | |
| *** rohit02 has quit IRC | 03:32 | |
| *** rohit02 has joined #openstack-ansible | 03:32 | |
| *** rohit02 has quit IRC | 03:41 | |
| *** rohit02 has joined #openstack-ansible | 04:02 | |
| *** rohit02 has quit IRC | 04:04 | |
| *** miloa has joined #openstack-ansible | 04:33 | |
| *** miloa has quit IRC | 04:38 | |
| sakharkar | noonedeadpunk: Deployed OSA Ussuri with all endpoints on ssl successfully. All features are working as expected except cinder. nova-api failed to attach cinder volume 'ssl-handshake error'. Tried to curl from nova-api container and curl is working fine | 04:58 |
|---|---|---|
| sakharkar | noonedeadpunk: logs http://paste.openstack.org/show/805505/ | 04:58 |
| *** jawad_axd has joined #openstack-ansible | 05:01 | |
| jrosser | sakharkar: can you show how you have made this work? From your paste the error is coming still from the python requests library | 05:15 |
| *** jbadiapa has joined #openstack-ansible | 06:15 | |
| sakharkar | jrosser: http://paste.openstack.org/show/805506/ | 06:29 |
| zbr | noonedeadpunk: let me know if you need more help with the linter upgrade | 06:32 |
| jrosser | sakharkar: i gave you a bunch of tips already about how to make python services trust your CA - how did you get on with that? | 06:55 |
| jrosser | putting your cert and CA on haproxy though those variables only deals with making haproxy use that certificate | 06:56 |
| jrosser | it does nothing for making the clients (like nova/cinder/...) trust that CA | 06:57 |
| noonedeadpunk | mornign | 06:59 |
| jrosser | morning | 06:59 |
| noonedeadpunk | linters seems to work on tests repo, but feels like it's not smth we can depends-on :( | 06:59 |
| jrosser | iirc there is complexity that the tests repo picks up some stuff out of the openstack-ansible repo | 07:00 |
| jrosser | i think this got kind of messy last time we updated the linter | 07:00 |
| noonedeadpunk | yep | 07:09 |
| *** ioni has joined #openstack-ansible | 07:12 | |
| jrosser | noonedeadpunk: do we need to merge the tests repo change then fix up whatever breaks elsewhere | 07:15 |
| jrosser | i'm kind of wary of how much that will be :( | 07:16 |
| noonedeadpunk | I checked that and it should be super minimal | 07:17 |
| noonedeadpunk | just bird, murano, octavia and sahara | 07:18 |
| jrosser | hmm well ok, so maybe we just merge and move on? | 07:18 |
| noonedeadpunk | and I already posted "pathces" for octavia and sahara | 07:18 |
| noonedeadpunk | Yeah, I think that's the best we can do anyway | 07:18 |
| noonedeadpunk | But a bit worried about status of linters on other branches, like V | 07:19 |
| *** dpawlik8 is now known as dpawlik | 07:20 | |
| noonedeadpunk | not sure if we should also update linter there as well, probably worth just working around with adjusting requirements (adding ansible<3.0.0) | 07:20 |
| *** rpittau|afk is now known as rpittau | 07:24 | |
| sakharkar | jrosser: Tried the steps you provided. logs http://paste.openstack.org/show/805507/ | 07:27 |
| sakharkar | jrosser: Is there any way to overcome this error? | 07:27 |
| jrosser | and did you try what i suggested with setting REQUESTS_CA_BUNDLE environment variable | 07:28 |
| noonedeadpunk | not use self-signed certificate is one of the ways ) | 07:28 |
| jrosser | or just disable validation | 07:28 |
| noonedeadpunk | yeah | 07:28 |
| jrosser | lots of ways here, really need to understand that this is a problem of https client trust, nothing really to do with haproxy | 07:28 |
| jrosser | so the client must either ignore the cert validation | 07:28 |
| jrosser | to be taught how to trust it | 07:29 |
| jrosser | and becasue it's python-requests thats not as simple as just adding to the local CA trust store | 07:29 |
| jrosser | ^ sakharkar this is the key point really | 07:29 |
| *** cyberpear has quit IRC | 07:34 | |
| *** fyx has quit IRC | 07:34 | |
| *** gouthamr has quit IRC | 07:34 | |
| sakharkar | jrosser: How we can disable certificate validation so that client should ignore the cert validation? | 07:35 |
| *** mnaser has quit IRC | 07:36 | |
| *** guilhermesp has quit IRC | 07:36 | |
| *** vkmc has quit IRC | 07:36 | |
| *** gmann has quit IRC | 07:36 | |
| *** nicolasbock has quit IRC | 07:36 | |
| noonedeadpunk | there're variables keystone_service_internaluri_insecure and keystone_service_adminuri_insecure | 07:37 |
| *** fyx has joined #openstack-ansible | 07:37 | |
| *** vkmc has joined #openstack-ansible | 07:37 | |
| *** nicolasbock has joined #openstack-ansible | 07:37 | |
| *** mnaser has joined #openstack-ansible | 07:37 | |
| *** gouthamr has joined #openstack-ansible | 07:37 | |
| *** cyberpear has joined #openstack-ansible | 07:38 | |
| *** guilhermesp has joined #openstack-ansible | 07:38 | |
| sakharkar | noonedeadpunk: we have set the same as suggested. For reference : http://paste.openstack.org/show/805506/ | 07:38 |
| *** gmann has joined #openstack-ansible | 07:38 | |
| noonedeadpunk | hm, that's interesting. then we might miss somewhere to add insecure option in configs... | 07:39 |
| sakharkar | noonedeadpunk: deployment is successful and all the components are working except attaching cinder volume to instances | 07:39 |
| sakharkar | noonedeadpunk: error while attaching cinder volume to instance : http://paste.openstack.org/show/805505/ | 07:41 |
| noonedeadpunk | try to set smth like that just to test http://paste.openstack.org/show/805508/ | 07:43 |
| sakharkar | noonedeadpunk: You mean to set these variables in user_variable.yaml? | 07:45 |
| noonedeadpunk | yep | 07:45 |
| sakharkar | ok will give a try and let you know the output | 07:46 |
| *** tosky has joined #openstack-ansible | 07:46 | |
| *** jbadiapa has quit IRC | 08:06 | |
| *** macz_ has joined #openstack-ansible | 08:10 | |
| openstackgerrit | Merged openstack/ansible-role-python_venv_build stable/train: Do not drop all wheels with venv_rebuild https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/773973 | 08:13 |
| *** macz_ has quit IRC | 08:14 | |
| *** jnamdar has joined #openstack-ansible | 08:33 | |
| *** andrewbonney has joined #openstack-ansible | 08:34 | |
| jnamdar | o/ | 08:39 |
| noonedeadpunk | o/ | 08:39 |
| jnamdar | no luck for me yesterday on my sahara haproxy '=( | 08:40 |
| jnamdar | keep getting 300 multiple choices on sahara backend, which seem to bring haproxy down for sahara | 08:40 |
| jnamdar | hence the 503 code | 08:41 |
| noonedeadpunk | um, but patch I made is making haproxy to expect 300 as return code? | 08:41 |
| noonedeadpunk | https://review.opendev.org/c/openstack/openstack-ansible/+/791999/1/inventory/group_vars/haproxy/haproxy.yml | 08:41 |
| jnamdar | would youu have a link for that? :D | 08:41 |
| jnamdar | thx | 08:41 |
| jnamdar | trying it rn | 08:42 |
| noonedeadpunk | you won't be able to just cherry-pick it for U though, but you can manually apply I think | 08:42 |
| jnamdar | yeah i'll try to add it to /etc/haproxy/conf.d/sahara_api directly | 08:43 |
| noonedeadpunk | I think worth adjusting config and re-run haproxy rle | 08:44 |
| noonedeadpunk | /opt/openstack-ansible/inventory/group_vars/haproxy/haproxy.yml | 08:45 |
| *** jbadiapa has joined #openstack-ansible | 09:06 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_manila master: Remove ceph-fuse requirement https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/787737 | 09:17 |
| jnamdar | noonedeadpunk alright so it made the CLI work, horizon is giving me a bunch of SSL exceptions `certificate verify failed` on the sahara dahsboard though | 09:18 |
| jnamdar | the cli is already more than enough though so thanks for that | 09:22 |
| jnamdar | Btw does anyone know where I can find built sahara images? | 09:46 |
| jnamdar | oh it's just a basic ubuntu image, my bad | 09:49 |
| jnamdar | for vanilla at leasr | 09:49 |
| *** macz_ has joined #openstack-ansible | 10:11 | |
| *** macz_ has quit IRC | 10:16 | |
| *** mgariepy has quit IRC | 10:49 | |
| noonedeadpunk | can I summon another vote for https://review.opendev.org/c/openstack/openstack-ansible-tests/+/784751 ? | 10:52 |
| *** mathlin has joined #openstack-ansible | 11:20 | |
| *** jnamdar has quit IRC | 11:37 | |
| *** d34dh0r53 has joined #openstack-ansible | 11:38 | |
| *** mgariepy has joined #openstack-ansible | 12:16 | |
| *** dwilde has joined #openstack-ansible | 12:19 | |
| *** d34dh0r53 has quit IRC | 12:48 | |
| openstackgerrit | Merged openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version https://review.opendev.org/c/openstack/openstack-ansible-tests/+/784751 | 12:51 |
| tosky | does it mean the recheck on the os-sahara module is going to work for real now? | 12:56 |
| admin0 | checking if anyone here has faced an issue where they had accidently renamed a compute host and all instances disappeared from reporting, and also unable ot migrate instances off that compute node | 13:02 |
| admin0 | new instances are reported ( in the cup.disk usage) ... .. old insances keep running, can be start/shutdown etc | 13:02 |
| admin0 | jut that they cannot be migrated or are being reported for resource calculation | 13:03 |
| *** snapdeal has joined #openstack-ansible | 13:07 | |
| *** pcaruana has quit IRC | 13:28 | |
| *** schwicht has joined #openstack-ansible | 13:33 | |
| *** jawad_axd has quit IRC | 13:43 | |
| *** spatel_ has joined #openstack-ansible | 13:44 | |
| *** spatel_ is now known as spatel | 13:44 | |
| *** schwicht has quit IRC | 13:44 | |
| *** schwicht has joined #openstack-ansible | 13:44 | |
| *** snapdeal has quit IRC | 13:47 | |
| spatel | jamesdenton are you around? | 13:48 |
| noonedeadpunk | tosky: it should | 13:49 |
| spatel | jamesdenton I am seeing still issue with this patch - https://bugs.launchpad.net/openstack-ansible/+bug/1805626 | 13:59 |
| openstack | Launchpad bug 1805626 in openstack-ansible "ML2 OVN port binding failures due to hostname mismatch" [Undecided,Fix released] - Assigned to James Denton (james-denton) | 13:59 |
| *** jawad_axd has joined #openstack-ansible | 14:00 | |
| spatel | http://paste.openstack.org/show/805518/ | 14:03 |
| *** jawad_axd has quit IRC | 14:06 | |
| *** macz_ has joined #openstack-ansible | 14:13 | |
| jamesdenton | spatel i will try to address that today | 14:17 |
| *** macz_ has quit IRC | 14:17 | |
| spatel | +1 | 14:17 |
| spatel | i believe we should use FQDN whatever your Linux OS giving you | 14:18 |
| jamesdenton | i think the fix may be just removing that task completely | 14:18 |
| spatel | I have file bug also - https://bugs.launchpad.net/openstack-ansible/+bug/1929080 | 14:18 |
| openstack | Launchpad bug 1929080 in openstack-ansible "OVN still seeing mismatch hostname issue " [Undecided,New] | 14:18 |
| jamesdenton | but we'll see | 14:18 |
| *** jawad_axd has joined #openstack-ansible | 14:20 | |
| *** ioni has quit IRC | 14:21 | |
| *** ioni has joined #openstack-ansible | 14:22 | |
| *** ioni has quit IRC | 14:26 | |
| *** ioni has joined #openstack-ansible | 14:26 | |
| *** mgariepy has quit IRC | 14:31 | |
| *** jawad_axd has quit IRC | 14:44 | |
| *** jawad_axd has joined #openstack-ansible | 14:44 | |
| *** jawad_axd has quit IRC | 14:44 | |
| *** macz_ has joined #openstack-ansible | 15:02 | |
| *** mgariepy has joined #openstack-ansible | 15:17 | |
| *** rpittau is now known as rpittau|afk | 15:50 | |
| *** pcaruana has joined #openstack-ansible | 17:18 | |
| *** andrewbonney has quit IRC | 17:48 | |
| *** ioni has quit IRC | 18:12 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Add role-name lint check to warnings https://review.opendev.org/c/openstack/openstack-ansible-tests/+/792469 | 18:20 |
| noonedeadpunk | jrosser: this one is also needed in regards to the linters ^ | 18:21 |
| jrosser | noonedeadpunk: the link in the commit message is 404 | 18:32 |
| noonedeadpunk | doh | 18:33 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Add role-name lint check to warnings https://review.opendev.org/c/openstack/openstack-ansible-tests/+/792469 | 18:34 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Set manila_backends to empty dict by default https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/787354 | 18:52 |
| *** jawad_axd has joined #openstack-ansible | 20:01 | |
| *** oleksandry has joined #openstack-ansible | 20:05 | |
| *** jawad_axd has quit IRC | 20:06 | |
| *** oleksandry has quit IRC | 20:13 | |
| *** spatel has quit IRC | 20:22 | |
| *** jbadiapa has quit IRC | 22:03 | |
| fridtjof[m] | ...i think i found a bug | 23:02 |
| fridtjof[m] | Is the part that creates all the infrastructure containers supposed to exclude your internal lb vip address? | 23:04 |
| fridtjof[m] | because it didn't and now I have a nice IP conflict between that VIP on my 1st infra host and an rsyslog container on the 2nd infra host | 23:05 |
| fridtjof[m] | you can ping the lb vip from the 2nd host, but it will always end up with that container | 23:05 |
| fridtjof[m] | guess i'll just redeploy again for now and hope the dice are cast in my favor this time... | 23:06 |
| *** macz_ has quit IRC | 23:17 | |
| *** tosky has quit IRC | 23:52 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!