Thursday, 2014-06-05

*** bandarji has quit IRC00:01
*** jorgem has quit IRC00:01
*** bandarji has joined #openstack-dns00:02
*** vinod1 has joined #openstack-dns00:03
*** sbfox has quit IRC00:07
*** dtx00ff has quit IRC00:13
*** vinod1 has quit IRC00:18
*** vinod1 has joined #openstack-dns00:20
*** nkinder has joined #openstack-dns00:20
*** vinod1 has quit IRC00:23
*** rmoe has quit IRC00:31
*** mwagner_lap has joined #openstack-dns00:40
*** rmoe has joined #openstack-dns00:47
*** rmoe has quit IRC01:08
*** rmoe has joined #openstack-dns01:20
*** crc32 has quit IRC01:25
*** sbfox has joined #openstack-dns01:37
*** msisk has quit IRC01:45
*** nosnos has joined #openstack-dns01:46
*** yidclare has quit IRC02:01
*** sbfox has quit IRC02:04
*** bandarji has quit IRC02:10
*** richm has quit IRC02:17
*** yidclare has joined #openstack-dns02:35
*** yidclare has quit IRC02:48
*** dtx00ff has joined #openstack-dns03:01
*** sballe has joined #openstack-dns03:11
*** sballe has quit IRC03:26
*** sballe has joined #openstack-dns03:27
*** dtx00ff has quit IRC03:34
*** nosnos has quit IRC03:43
*** sballe has quit IRC03:43
*** vinod1 has joined #openstack-dns04:05
*** vinod1 has quit IRC04:06
*** vinod1 has joined #openstack-dns04:12
*** vinod1 has quit IRC04:13
*** sballe has joined #openstack-dns04:25
*** sballe has quit IRC04:32
*** matsuhashi has joined #openstack-dns04:39
*** vinod1 has joined #openstack-dns04:40
*** nosnos has joined #openstack-dns04:41
*** dtx00ff has joined #openstack-dns04:43
*** sbfox has joined #openstack-dns04:54
*** vinod1 has quit IRC04:57
*** dtx00ff_ has joined #openstack-dns04:59
*** dtx00ff has quit IRC05:03
*** CaptTofu has quit IRC06:04
*** harmw has quit IRC06:06
*** simonmcc has quit IRC06:06
*** CaptTofu has joined #openstack-dns06:06
*** harmw has joined #openstack-dns06:07
*** simonmcc has joined #openstack-dns06:08
*** ytwu has joined #openstack-dns06:12
*** dtx00ff has joined #openstack-dns06:13
*** dtx00ff_ has quit IRC06:16
*** ttrumm has joined #openstack-dns06:32
*** sbfox has quit IRC06:42
*** sbfox has joined #openstack-dns06:44
*** dtx00ff_ has joined #openstack-dns07:47
*** dtx00ff has quit IRC07:50
*** dtx00ff_ has quit IRC08:00
*** amarao has joined #openstack-dns08:56
*** sbfox has quit IRC09:25
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure designte-sink does not exit when no handlers are enabled  https://review.openstack.org/9807109:42
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure designte-sink does not exit when no handlers are enabled  https://review.openstack.org/9807109:46
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Sync with global-requirements  https://review.openstack.org/9807309:55
*** matsuhashi has quit IRC10:31
*** matsuhashi has joined #openstack-dns10:34
*** matsuhashi has quit IRC11:06
*** matsuhashi has joined #openstack-dns11:06
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure DevStack gate passes  https://review.openstack.org/9807111:07
*** matsuhashi has quit IRC11:10
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure DevStack gate passes  https://review.openstack.org/9807111:15
*** nosnos has quit IRC11:20
*** matsuhashi has joined #openstack-dns11:24
*** matsuhashi has quit IRC11:24
*** matsuhashi has joined #openstack-dns11:24
*** matsuhashi has quit IRC11:29
*** ttrumm has quit IRC11:45
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure DevStack gate passes  https://review.openstack.org/9807112:11
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Revert "add sink support to designate devstack"  https://review.openstack.org/9809312:21
Kiallmugsie: 2014-06-05 12:22:32.813 | Finished: SUCCESS12:22
mugsiesweet12:22
KiallNeed to revert Rich's patch though :'(12:23
mugsiethe sink?12:23
KiallI can't see a way to fix it otherwise :'(12:23
Kiallyea12:23
KiallAnd the revert fails to merge :'(12:23
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Revert "add sink support to designate devstack"  https://review.openstack.org/9809312:27
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Revert "add sink support to designate devstack"  https://review.openstack.org/9809312:41
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure designte-sink does not exit when no handlers are enabled  https://review.openstack.org/9809512:41
*** eankutse has joined #openstack-dns12:57
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Revert "add sink support to designate devstack"  https://review.openstack.org/9809312:59
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Switch stop_designate to use screen_stop rather than `kill`  https://review.openstack.org/9810112:59
*** vinod1 has joined #openstack-dns13:00
*** jmcbride has joined #openstack-dns13:06
*** nkinder has quit IRC13:10
*** jmcbride1 has joined #openstack-dns13:22
*** jmcbride has quit IRC13:23
*** vinod1 has quit IRC13:31
*** vinod1 has joined #openstack-dns13:33
*** vinod1 has quit IRC13:37
*** vinod1 has joined #openstack-dns13:41
*** jmcbride1 has quit IRC13:43
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure our DevStack plugin cleans up services it starts  https://review.openstack.org/9811113:44
*** vinod1 has quit IRC13:48
*** vinod1 has joined #openstack-dns13:51
*** vinod1 has quit IRC13:52
*** sballe has joined #openstack-dns13:55
*** jmcbride has joined #openstack-dns13:58
*** crc32 has joined #openstack-dns14:00
*** nkinder has joined #openstack-dns14:01
*** jaycaz has joined #openstack-dns14:01
*** nkinder has quit IRC14:05
*** jorgem has joined #openstack-dns14:08
*** tmc3inphilly has joined #openstack-dns14:12
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure our DevStack plugin cleans up services it starts  https://review.openstack.org/9811114:13
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Revert "add sink support to designate devstack"  https://review.openstack.org/9809314:13
KiallDevstack will kill me -_-14:13
*** tmc3inphilly has quit IRC14:14
*** tmc3inphilly has joined #openstack-dns14:14
*** tmc3inphilly has quit IRC14:15
*** tmc3inphilly has joined #openstack-dns14:16
*** nkinder has joined #openstack-dns14:18
*** yidclare has joined #openstack-dns14:23
*** vinod1 has joined #openstack-dns14:26
openstackgerritEndre Karlson proposed a change to stackforge/designate: Switch to oslo.db  https://review.openstack.org/9812214:28
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure our DevStack plugin cleans up services it starts  https://review.openstack.org/9811114:31
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Revert "add sink support to designate devstack"  https://review.openstack.org/9809314:31
*** rmoe has quit IRC14:31
*** yidclare has quit IRC14:33
*** vinod1 has quit IRC14:37
*** msisk has joined #openstack-dns14:39
*** betsy has joined #openstack-dns14:40
*** rmoe has joined #openstack-dns14:45
eankutseKiall: heya14:53
Kialleankutse: heya14:58
eankutsequestion14:58
eankutseIn the mdns dependency graph here (#link https://blueprints.launchpad.net/designate/+spec/mdns-master), the item labeled 'mdns-designate-mdns-functional' which has three other task below it - Is that item just place holder for the items below it or is it a deliverable in itself?14:58
*** jmcbride has quit IRC15:00
eankutseKiall: brb15:00
Kialleankutse: sorry, just dialed into a call15:01
*** ytwu has quit IRC15:06
*** ytwu has joined #openstack-dns15:07
*** jmcbride has joined #openstack-dns15:12
*** jmcbride has quit IRC15:16
*** jmcbride has joined #openstack-dns15:17
*** jmcbride has quit IRC15:19
*** vinod1 has joined #openstack-dns15:20
*** bandarji has joined #openstack-dns15:23
*** rmoe has quit IRC15:25
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Revert "add sink support to designate devstack"  https://review.openstack.org/9809315:26
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure we configure all keystone middleware options  https://review.openstack.org/9815115:26
jaycazHello openstack-dns!  My name is Jordan and I'm the new intern on the Cloud DNS team at Rackspace.  I was looking into features to implement and was told that Designate was in need of a more comprehensive logging system...15:26
jaycazFirst, for anyone particularly familiar with the logging system, where should I look to first to understand the internals?15:28
*** jmcbride has joined #openstack-dns15:28
jaycazSecond, for anyone, what kind of information do you think the logging system is missing, or it has already but could be removed?15:29
mugsiejaycaz: it depends on what your definition of logging is ;)15:31
Kialljaycaz: I think it's biggest failings are lack of consistency (some debug messages should be warnings, some warnings should be info), combined with just not putting enough info out without having debug enabled15:31
KiallHi BTW :)15:31
jaycazHi Kiall!  I see you're a big contributor to the Designate repo15:32
KiallYep - You could say that :D15:32
mugsieI think there is a requirement for an Audit Trail from within RAX - was that what was being talked about?15:32
*** richm has joined #openstack-dns15:32
eankutseKiall is the Tech Lead for Designate :-)15:32
jaycazoh, makes sense then :P15:33
Kialljaycaz: So, you're tsimmons replacement after he graduated? :)15:33
jaycaz#link https://blueprints.launchpad.net/designate/+spec/standardize-logging15:34
jaycazactually, it's related to this blueprint that vinod1 posted15:34
jaycazand yes, I'm the replacement intern.  tsimmons has already been a great help15:35
mugsiejaycaz: ah yes15:35
mugsiethat is 100% needed15:36
jaycazGreat!  I'd be glad to help improve it then.15:36
mugsiei dont think the logging system itself needs replaceing15:36
mugsieit is what we log that is the problem15:37
mugsiewe dont have a standardise level (aka what is info, debug etc)15:37
mugsieand the logs are all formated inconsistantly15:37
richmrjrjr: In your bind9 delete testing, do you have allow-update set in your bind9 config?15:37
jaycazmugsie: good to know; maybe defining these groups more clearly would be a good place to start15:38
mugsieyes - i think that would help alright15:41
jaycazI found the designate/openstack/common/log.py file. Are there any more files responsible for the logging?15:41
mugsiefor implemeting it? no15:42
mugsiefor actually logging, pretty much all files will import that one15:42
mugsie(we can't change that file - it is a common logging lib from upstream openstack)15:43
jaycazokay, good to know. then I have a good place to start!15:43
jaycazThanks all! I'll probably be back with more questions soon :P15:44
mugsiecool15:44
*** rmoe has joined #openstack-dns15:45
mugsiejust shout out in here15:45
mugsieyou based in austin as well?15:45
jaycazyup! I'm sitting right between msisk and eankutse15:45
jaycazthey've both been invaluable15:45
jaycazas well as the rest of the team15:46
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Testing  https://review.openstack.org/9816315:55
KiallDevStack will literally kill me15:55
richmKiall: why all of the changes to lib/designate?15:58
Kiallrichm: I've been suspecting designate-sink is part of the failure, or the stop/start done in there for sink, or ..15:58
KiallHonestly clutching at straws right now ;)15:59
richmWhat failure?15:59
*** vinod1 has quit IRC15:59
mugsierichm: gate job15:59
mugsie(the one we need to get incubated ;) )15:59
richmcan you post a link to the failure?15:59
KiallThe new devstack gate job refuses to pass, or give enough enough to debug -_-15:59
mugsierichm: http://logs.openstack.org/93/98093/7/check/gate-designate-devstack-dsvm/a5c2dfd16:00
*** sbfox has joined #openstack-dns16:00
*** vinod1 has joined #openstack-dns16:04
*** tmc3inphilly has quit IRC16:05
richmcentral fails16:06
richmhttp://logs.openstack.org/93/98093/7/check/gate-designate-devstack-dsvm/a5c2dfd/logs/screen-designate-central.txt.gz16:07
richmAttributeError: 'Connection' object has no attribute 'connection_errors'16:07
Kiallrichm: I think that was unrelated, more recent failures: http://logs.openstack.org/63/98163/1/check/gate-designate-devstack-dsvm/4fbdcb6/logs/screen-designate-central.txt.gz16:08
Kiallrichm: I have a series of fixes BTW, not of which fix the gate: https://review.openstack.org/#/q/status:open+project:stackforge/designate+branch:master+topic:devstack-gate,n,z16:11
KiallThe revert can most likely be dropped16:11
KiallIt was an earlier suspicion which seems to have no panned out16:11
*** vinod1 has quit IRC16:12
*** rossk has joined #openstack-dns16:14
*** bandarji has quit IRC16:14
*** bandarji has joined #openstack-dns16:16
Kiallhttp://paste.openstack.org/show/82977/16:17
KiallL8516:17
Kialllooks relavant16:17
KiallERROR: HTTPConnectionPool(host='172.16.1.8', port=9001): Max retries exceeded with url: /v1//servers (Caused by <class 'socket.error'>: [Errno 111] Connection refused)16:19
richmlooks like api is not running16:20
*** openstackgerrit has quit IRC16:20
*** openstackgerrit has joined #openstack-dns16:20
*** ChanServ sets mode: +v openstackgerrit16:20
*** nkinder has quit IRC16:21
*** nkinder has joined #openstack-dns16:23
*** sballe has quit IRC16:26
Kiallyea, I'm wondering if it's a race condition16:27
richmI've had to put in strategic sleeps when running devstack on slow VMs16:28
KiallIt also only happens with USE_SCREEN=false (like the gate)16:31
Kiallnice.16:32
richmok - I'll try a test on my slow vm with USE_SCREEN=false16:33
*** jaycaz has quit IRC16:46
*** sballe has joined #openstack-dns16:46
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Testing  https://review.openstack.org/9816316:52
*** ytwu has quit IRC16:53
*** ytwu has joined #openstack-dns16:54
*** sbfox has quit IRC17:00
*** jmcbride has quit IRC17:02
*** jmcbride has joined #openstack-dns17:03
*** sbfox has joined #openstack-dns17:03
*** nkinder has quit IRC17:04
*** jmcbride has quit IRC17:07
*** amarao has quit IRC17:10
richmKiall: in stop_designate - try using screen_stop $serv instead of using "screen" directly17:11
Kiallrichm: https://review.openstack.org/#/c/98101/ :)17:11
KiallThere is 4 or 5 issues I've found  :P17:12
*** jaycaz has joined #openstack-dns17:12
Kiallhttps://review.openstack.org/#/c/98163/17:12
Kiallthat patch suceeded :D17:12
*** jaycaz has quit IRC17:12
*** jaycaz has joined #openstack-dns17:12
KiallI'd like to un-revert your change from it, and see if it still suceeds next17:12
*** sbfox has quit IRC17:13
richmok17:13
*** jaycaz has quit IRC17:15
rjrjrrichm: allow-update is set in my bind9 configuration.17:16
richmIs the purpose of allow-update to allow rndc or nsupdate to work?17:17
*** dtx00ff has joined #openstack-dns17:19
rjrjrit allows dynamic updates, so it is there for nsupdate.  i'm not 100% sure about rndc.17:19
*** bandarji has quit IRC17:19
openstackgerritKiall Mac Innes proposed a change to stackforge/designate: Ensure we configure all keystone middleware options  https://review.openstack.org/9815117:20
*** bandarji has joined #openstack-dns17:20
*** nkinder has joined #openstack-dns17:20
richmdo we support using nsupdate with designate?17:23
richmafaict, if you use nsupdate directly against bind9, designate will not know about that change17:24
rjrjryou are correct.  but my bind is not just used for Designate managed zones ...17:24
richmcan we config something like "allow-update only for zones not managed by Designate"?17:25
*** sballe has quit IRC17:25
rjrjryou can move allow-update to the zone specific section of a configuration file.17:25
richmThe reason I'm asking - I tried your patch on my setup - it failed because rndc freeze/thaw are only allowed when allow-update is on17:26
rjrjrwell, then you answered the question about it being needed for rndc. 8^)17:26
richmI do not have allow-update in my config, because I do not want to allow updates to designate managed zones17:27
*** yidclare has joined #openstack-dns17:27
rjrjrso, your thinking is drop the freeze/thaw and have the allow-update moved to the zone specific portion of the config file.  or, keep the freeze/thaw and document the allow-update.17:27
richmor, 3rd option, can the bind9 backend figure out if the zone is dynamic, and use freeze/thaw if so, otherwise, skip the freeze/thaw?17:28
*** eankutse has quit IRC17:28
richmOtherwise, it seems to me that, since we do not allow dynamic updates to designate managed zones, we should document that (if not already), and do not use freeze/thaw17:29
rjrjrwe could do that.17:29
rjrjrlet me take a look and provide another patch. 8^)17:30
richmok17:30
rjrjrwhich option do you prefer?17:30
richmI prefer 1 - drop freeze/thaw and assume no dynamic update17:30
rjrjrokay.  that is the approach i will take.17:30
*** jaycaz has joined #openstack-dns17:30
*** msisk_ has joined #openstack-dns17:31
richmAnyone else care to chime in?17:31
*** vinod1 has joined #openstack-dns17:31
*** msisk has quit IRC17:31
rjrjrwhen mdns comes in Juno, we'll be putting it back. 8^)17:31
*** eankutse has joined #openstack-dns17:32
*** eankutse has quit IRC17:32
*** eankutse has joined #openstack-dns17:32
*** vinod1 has quit IRC17:32
richmpossibly, but I thought that mdns would remove the need for it17:33
*** sbfox has joined #openstack-dns17:33
rjrjrsorry, you are correct. the nsupdate tools will work against mdns, not the DNS server being provisioned.17:33
rjrjrmy bad. 8^(17:34
richmno worries17:34
rjrjrokay, give me about an hour.  i'll fix this up and test.17:34
richmarg - using screen_stop in stop_designate, with USE_SCREEN=false - screen_stop designate-api will kill the entire devstack process :-P17:35
*** jmcbride has joined #openstack-dns17:36
rjrjrrichm: the more i think about this, the more i like option 3.  my problem is we have thousands of zones.  not keen on updating all of them. 8^(17:37
richmok, that will be more difficult to code, but certainly much more flexible17:38
rjrjrit seems if we can provide the flexibility for Designate to know how this is configured, it would be better.17:38
*** vinod1 has joined #openstack-dns17:38
richmyes17:39
richmThen the bind9 backend will need to have a full fledged bind config/zone file parser17:40
richmwell, probably just config file17:41
richmI'm assuming we can leverage zoneextractor.py17:41
richmor, another approach17:41
richmwhen rndc freeze fails, because the zone is not dynamic, does it return a unique error code?17:42
rjrjri'm going to revert the code in the fix (i.e. go with 1)  i'll create a new bug and fix for this.17:42
rjrjrmy approach will be to add a configuration to Designate which defaults to no allow-update.  it can be overridden.  in the code, we can try the default and if that fails with the expected error, try the other way.  this way, if you don't have allow-update configured globally, no changes needed.  if you do, add the option to Designate config.  in either case, a failure will cause the other method to be tried.17:44
richmok, sounds good17:44
rjrjrthe default will more or less be a shortcut to which method to try first.17:45
*** msisk_ has quit IRC17:45
rjrjrreload only or freeze, reload, thaw.17:45
*** msisk has joined #openstack-dns17:45
*** spiffxp_ has quit IRC17:45
rjrjrsorry default = configuration - the default with be reload only17:45
*** spiffxp has joined #openstack-dns17:48
*** jmcbride1 has joined #openstack-dns17:51
*** jmcbride has quit IRC17:52
*** msisk_ has joined #openstack-dns17:52
*** msisk has quit IRC17:53
*** msisk_ has quit IRC17:55
*** msisk has joined #openstack-dns17:56
Kiallmugsie / betsy / vinod1 - can I get some reviews on this lot: https://review.openstack.org/#/q/status:open+project:stackforge/designate+branch:master+topic:devstack-gate,n,z17:57
*** sbfox has quit IRC17:57
Kiallthey should all be good, and are blockers to the DevStack gate a few of the TC are waiting on17:58
KiallStill not a complete fix though17:58
vinod1i will look at them shortly17:58
openstackgerritRon Rickard proposed a change to stackforge/designate: Bug #1261894: Deleting Record With BIND 9 Driver Fails  https://review.openstack.org/9620417:58
Kiall(Except the revert one, please don't approve that - It's marked as WIP ;))17:59
*** sbfox has joined #openstack-dns18:02
*** dtx00ff has quit IRC18:14
*** dtx00ff has joined #openstack-dns18:14
rjrjrrichm: what error were you seeing with the freeze, reload, thaw in your configuration?18:17
betsykiall: I’ll look at them now18:24
Kiallthanks18:28
KiallReally annoying, I can't reproduce the failure locally anymore :(18:28
rjrjrrichm?18:29
rjrjri took out the allow-update in my configuration and the freeze, reload, thaw is still working.18:30
richmrjrjr: ok - I'm testing the latest patch now18:32
*** tmc3inphilly has joined #openstack-dns18:33
*** jaycaz1 has joined #openstack-dns18:33
rjrjrno.  i'm wondering what the error was with the freeze, reload, thaw code.  i have allow-update disabled in my configuration and i'm having no problems with the code.18:33
*** tmc3inphilly has left #openstack-dns18:33
richmrjrjr: hmm - not sure - perhaps a Fedora 20 only thing?  The docs say that rdnc freeze is not allowed if the zone is not dynamic18:33
*** jaycaz has quit IRC18:34
rjrjrwhat version of BIND9 are you using?18:34
rjrjryou didn't actually get an error during your testing?18:34
richm9.9.4-12.P2.f2018:34
richmI did get an error18:34
richmrndc: 'freeze' failed: not dynamic18:35
*** jaycaz1 has quit IRC18:37
*** jaycaz has joined #openstack-dns18:37
openstackgerritA change was merged to stackforge/designate: Ensure designte-sink does not exit when no handlers are enabled  https://review.openstack.org/9809518:40
openstackgerritA change was merged to stackforge/designate: Switch stop_designate to use screen_stop rather than `kill`  https://review.openstack.org/9810118:40
*** jmcbride has joined #openstack-dns18:41
richmrjrjr: with your latest patch - delete record works - delete domain does not - domain is still in DNS18:41
richmthe domain is still listed in the zones.config file18:41
*** jmcbride1 has quit IRC18:41
rjrjri just tested and the zones.config file is empty18:43
rjrjrare the logs showing anything?18:43
richmno18:43
richmthe .zone file for the domain is gone18:43
openstackgerritA change was merged to stackforge/designate: Ensure our DevStack plugin cleans up services it starts  https://review.openstack.org/9811118:44
richmIn my case, stack.sh will create a zone18:44
richmso there is always at least 1 zone18:44
rjrjrrichm: i just tried a few more tests.  in every case, the zone file is removed and also removed from the zones.config file.18:48
richmok - I am going to debug central and see what's going on here18:49
rjrjris designate domain-list showing the domain?18:49
*** jaycaz has quit IRC18:49
rjrjrhow about dig @localhost <domain>?18:49
rjrjrjust wondering if all the other activities are being completed except for the zones.config file.18:49
richmdesignate domain-list does not show the domain18:50
richmdig @localhost domain shows the domain18:50
rjrjrfor this to be true, the domain_sync would have failed.18:51
*** jaycaz has joined #openstack-dns18:51
rjrjrsorry, _sync_delete_domain in the bind9 driver.18:52
*** sbfox1 has joined #openstack-dns18:52
*** eankutse has quit IRC18:52
rjrjrdid you see the 'rndc delzone' command in the central logs?18:52
*** vinod1 has quit IRC18:53
richmno18:54
rjrjrbut yet the *.zone is missing?  this is very strange...18:54
*** sbfox has quit IRC18:54
richmsorry, the .zone is there18:55
richmsorry, not there18:55
richmhowever18:55
*** jmcbride has quit IRC18:56
richmnever mind - the .nzf file is the same as the zones.config file18:56
*** jaycaz has quit IRC18:56
rjrjrand it is pointing to a non-existing file, correct?18:57
rjrjrdo you have 'root_helper = sudo' in /etc/designate/designate.conf?18:57
*** jmcbride has joined #openstack-dns18:57
*** jaycaz has joined #openstack-dns18:58
rjrjrsorry, asking if the zones.config has an entry for the zone but pointing at the *.zone file that was removed.18:58
*** jaycaz has quit IRC18:58
*** vinod1 has joined #openstack-dns18:59
rjrjrit really looks like the _sync_delete_domain method in the impl_bind9 driver is what messed up here.  it looks like it did somethings, but not others.18:59
richmyes18:59
richmthe zones.config file has an entry for the zone but the .zone file was removed18:59
*** vinod1 has quit IRC18:59
*** vinod1 has joined #openstack-dns18:59
rjrjri'm assuming you have debug turned on for logging?  did you see the message 'Delete Domain: <domain-id> _sync_delete_domain'19:01
*** jmcbride has quit IRC19:02
richmno, I don't have debug on19:02
rjrjrthe _sync_delete_domain method - 1) deletes the zone file 2) runs the rndc delzone command 3) syncs the zones.config file with the *.nzf file.19:02
richmI'm running central in pdb now19:02
*** jmcbride has joined #openstack-dns19:04
rjrjri will quit bugging you until you have a chance to diagnose.19:04
rjrjr8^)19:04
*** eankutse has joined #openstack-dns19:11
rjrjrrichm: so, i have the following in my configuration - allow-update { none; }; and i can still run a 'rndc freeze <zone>' without any error.  the BIND version I am using is 9.8.1-P1.19:15
*** yidclare has quit IRC19:15
*** vinod1 has quit IRC19:15
*** vinod1 has joined #openstack-dns19:16
*** vinod2 has joined #openstack-dns19:21
*** dtx00ff has quit IRC19:21
*** vinod1 has quit IRC19:22
*** sbfox1 has quit IRC19:24
*** jaycaz has joined #openstack-dns19:31
richmhmm19:32
rjrjrwhat's up?19:34
betsyrjrjr: You’re latest patch worked for me19:34
betsyIt’s now correctly deleting the record from the zone file19:34
rjrjrcan you verify it deletes domains correctly too?  richm is having a problem i cannot reproduce.19:35
betsyOk. I’ll try delete recordsets and domains next19:35
rjrjrthanks!19:35
richmyeah, record deletion works for me, domain/zone deletion does  not19:35
*** vinod2 has quit IRC19:38
*** sbfox has joined #openstack-dns19:38
*** RaginBaj_ has quit IRC19:41
*** jaycaz has joined #openstack-dns19:41
rjrjrrichm: were the debug logs any help?19:45
betsyWhen I deleted a recordset that contained 2 records, it correctly deleted the 2 records19:46
richmstill trying to debug19:46
betsyWhen I delieted a zone, it correctly deleted it from the zones.config file19:46
rjrjrso, betsy, this is working for you?19:46
betsyHowever, as far as the zone file itself in bind, there were 4 of them all with different serial numbers19:47
betsySeems like every time I added a new recordset or record it updated the serial number, but created a new zone file, like:19:47
betsy-rw-r--r-- 1 vagrant vagrant  267 Jun  5 18:55 example33.com._04f4a9ce-c685-44d5-b391-25c7834186dc.zone19:48
betsy-rw-r--r-- 1 vagrant vagrant  267 Jun  5 18:56 example33.com._5112a787-3994-4c7f-8664-db91103518c2.zone19:48
betsy-rw-r--r-- 1 vagrant vagrant  267 Jun  5 18:58 example33.com._7f8e0059-519b-4619-9759-caf1ba922d22.zone19:48
betsyIt did delete the latest zone file, but left these 319:48
betsyIs it supposed to do that? Are y’all seeing that?19:48
rjrjrthe ._<domain-id>.zone is interesting.  the domain-id kept changing?19:49
betsybut the zones.config file was correct19:49
betsyWell, actually, I didn’t check to see if it kept changing the domain-id in the zones.config file19:50
rjrjrhow about deleting those, creating a new zone, adding records, etc.  when you run a 'designate domain-list' the ID should match the ID in the file name.  see if it keeps changing.19:50
rjrjrhonestly, i only touched code dealing with deleting objects in storage. <gulp>19:51
betsyrjrjr: Actually, I’ve seen this before, but I thought it was because my bind9 was old and corrupted19:51
rjrjrrichm/betsy, are you working off the latest code in master with this patch applied?19:51
betsyI just created this box before I started testing so it was empty19:51
betsyI am19:51
rjrjrstrange.19:52
richmyes, latest code in master, with my other commits for devstack/bind919:52
rjrjrthose *.zone files are managed by Designate, not BIND.19:52
betsyThe zone id couldn’t have changed because I was using the same one the whole time to get the recordsets and records19:52
rjrjrthe zone-id matched the *.zone file that was deleted.  then what are these other files?19:53
betsyIt’s only that bind kept writing the files — hmm let me check if any of those ending numbers were the recordset id19:53
richmso what exactly is rndc delzone supposed to do?19:53
richmI can run it multiple times with no errors19:53
richmdig still shows the SOA record19:53
rjrjrit deletes the zone dynamically from bind.  the *.nzf file should be updated when you run it to remove an existing zone.19:54
rjrjrso, if you zone is example.com 'rndc delzone example.com' removes it from bind, including updating the *.nzf file.19:54
richmnope - not happening19:54
richmis allow-update required for this?19:55
rjrjryou have allow-new-zones yes; in your bind configuration?  you must or the zone wouldn't have been added.19:55
richmyes19:56
rjrjrrichm: i removed allow-update from my configuration and i can add/delete zones.19:56
rjrjryou can try it though and see.19:56
richmIs there an "allow-del-zones"?19:56
richmI can add zones/records just fine, and delete records19:56
richmI just can't delete zones19:56
betsyI can delete zones19:57
rjrjrseems like a config issue if the rndc delzone isn't working.  try adding zones using rndc addzone and deleting them.19:57
betsyI just seem to have extra files hanging around19:57
rjrjrbetsy, is it creating new files while you work with it?19:57
richmthe file xxxxx.nzf - does "nzf" stand for "new zone file"?19:58
rjrjrrichm: <shrug> i just know that file deals with dynamically adding zones.  your guess sounds good.20:00
richmI get this error in /var/log/messages deleted zone exercise-xxx.com. was missing from the new zone file20:01
openstackgerritA change was merged to stackforge/designate: Ensure we configure all keystone middleware options  https://review.openstack.org/9815120:02
rjrjrdoes *.nzf or zones.config show that zone?20:02
richmxxx.nzf shows the zone20:04
richmand so does zones.config20:04
rjrjrand it is giving that error?  try restarting bind and doing it again.20:04
richmok - upon restart, bind complains that the .zone file is mentioned in the .nfz/zones.config file - now, domain is missing from dig20:06
rjrjrbetsy: the code that creates the zone file is in the _sync_domain method in impl_bind9.py.  the code reads: output_path = os.path.join(output_folder, '%s.zone' % "_".join([domain['name'], domain['id']]))20:06
rjrjrrichm: i would clean this up and retest.  remove the *.nzf file, *.config file, delete the domains from designate, and restart bind.20:07
richmok20:07
betsyYes. It seems to be working correctly20:07
betsyThe zone is definitely deleted correctly20:07
*** vinod1 has joined #openstack-dns20:07
rjrjrthen you can add a zone, then delete the zone.  you can try using 'rndc' first.20:08
rjrjrbetsy: cool. 8^)20:08
richmbetsy: do you have allow-update in your bind config?20:09
betsylet me look. I know I have ‘allow-new-zones yes;’20:10
betsyWell, that’s in the named.conf.options20:11
richmright20:11
richmunless you have set allow-update per-zone20:11
rjrjrrichm: i have about 20 minutes before i'm sucked up into a meeting for the afternoon.  i'll keep monitoring this chat and responding as you go, but my response time might slow down depending upon what is being talked about in the meeting. 8^)20:12
richmok - I'll keep debugging20:12
rjrjryou're problem is definitely more interesting. 8^)20:12
betsyIs that the .conf you’re asking about or is it another one?20:12
richmbetsy: yes, I guess - not sure how to set allow-update per-zone, if that would be in a zone file or somewhere else20:13
betsyI know. So many places to configure things20:13
rjrjrbetsy: richm is using RedHat.  you are probably ubuntu.  run a 'grep allow-update' from the /etc/bind directory.20:14
richmyeah, and it could be a platform problem20:14
rjrjrrichm, one problem might be where bind expects the *.nzf and where designate expects it.20:14
rjrjrdesignate expects the *.nzf file to reside in /var/cache/bind20:15
rjrjrbetsy that should read 'grep allow-update *' in the /etc/bind directory.20:16
richmI think that's it20:17
richmnot setting nzf_path20:17
richmand of course, neither designate nor bind seems to be complaining that the path doesn't exist :P20:17
betsyDidn’t find anything20:17
richmok - I think it's my problem20:18
rjrjrLOL - Designate Jenkins never ran.  man, i'm never going to get this code release. 8^(20:20
*** richm1 has joined #openstack-dns20:21
rjrjrdoes anyone know if a way to tell Gerrit to rerun the Designate Jenkins job?  (or in this case, run it?)20:21
*** richm1 has left #openstack-dns20:21
richmhttps://wiki.openstack.org/wiki/GerritJenkinsGit20:21
richmTest Failures20:21
richmyou may leave a comment with the text "recheck no bug"20:22
*** dtx00ff has joined #openstack-dns20:22
*** richm1 has joined #openstack-dns20:24
*** richm1 has left #openstack-dns20:24
rjrjrrichm: thanks.  kicked it off again. <fingers crossed>20:25
rjrjrrichm: so are things working now?20:26
betsyI’ll +2 it once it passes Jenkins20:27
*** vinod1 has quit IRC20:27
rjrjrbetsy, thanks!20:28
*** vinod1 has joined #openstack-dns20:32
richmno, not working :P20:33
richmIt may be a permissions problem20:35
richmFedora wants bind to run as named:named20:35
richmI'm running designate as my user id20:35
richmI've added my user id to the named group20:36
richmbut some files are not being created with named group ownership, nor group write permission20:36
rjrjrhmmm... another thing to look at is the value of the directory option in bind.  that is where it is expecting the *.nzf file to be located.20:37
richmright - that is correct20:37
*** yidclare has joined #openstack-dns20:39
rjrjron ubuntu, the bind user owns bind and files are all root:bind20:39
*** nkinder has quit IRC20:40
*** vinod1 has quit IRC20:40
richmarg20:46
richmdelzone works if you omit the trailing "."20:46
*** yidclare has quit IRC20:47
richmwhat the ...?20:49
rjrjr?20:49
richmin the xxx.nzf, the zone is listed without the trailing dot20:50
richmI guess named is looking for an exact match :P20:50
richme.g. I have20:51
richmzone "my.zone.tld" { type master; file "/path/to/my.zone.tld.zone"; };20:51
richmso, rndc delzone my.zone.tld. does not work20:51
richmbut rndc delzone my.zone.tld does work20:52
richmmy man page for rndc shows an example for addzone like this: rndc addzone example.com '{....20:54
richmso, no trailing dot20:55
*** jmcbride has quit IRC20:56
*** betsy has quit IRC20:56
richmhow does it work on ubuntu?20:57
rjrjrtrailing . works fine.20:59
rjrjrrichm: i added and deleted a zone manually using 'rndc' with a trailing dot and it worked fine.21:02
rjrjrDesignate will use the trailing dot.21:03
richmevery example I've been able to find shows addzone used without a trailing dot21:04
*** eankutse has quit IRC21:04
richmso - bug in fedora bind/rndc?  "feature" of ubuntu bind/rndc?21:05
richmcan one of you guys who use ubuntu confirm that the xxx.nzf file contains the domain with the trailing dot, or not?21:16
*** sbfox has quit IRC21:18
*** RandeepJalli has joined #openstack-dns21:21
RandeepJalliDoes anyone by chance have a link to the videos for the third talk by  Kiall from the atlanta summit? about the DNS loadbalancer ?21:22
RandeepJallior the powerpoint?21:22
KiallRandeepJalli: I don't think I gave a full talk in Atlanta? ;)21:23
RandeepJallioh ok21:23
RandeepJalliit was on the wiki21:23
RandeepJalliso I just thought maybe there was a video or something floating around21:23
KiallOh - That was a discussion about potential talks21:23
RandeepJalliAHHHHHH21:23
RandeepJalliok that makes sense21:23
RandeepJallilol21:23
RandeepJalliso to be clear that's code that isn't currently a part of designate ? (the loadbalancer)21:24
RandeepJallior is it? and if so do you have a pointer or perhaps a link?21:24
Kiallno, it's not :)21:25
RandeepJalliunderstood!21:25
RandeepJalliI'm just getting started! thanks for your help! I'd love to contribute and/or help you guys make that! it sounds like a fun project!21:25
*** msisk has quit IRC21:29
rjrjrrichm: the *.nzf files are using the trailing dot.21:36
rjrjrkiall: the Designate Jenkins job is not running for https://review.openstack.org/#/c/96204/21:36
KiallI disabled it in favor of gate-designate-devstack-dsvm - prematurely it seems.21:37
rjrjrokay.  so the fix can be +2'd then. 8^)21:38
KiallCan I look at it in the morning? Doing final prep for a deploy tomorrow :(21:40
rjrjrsure.  betsy said she would +2 it.  just not sure if she knows Designate Jenkins is disabled.21:40
*** nkinder has joined #openstack-dns21:42
*** sbfox has joined #openstack-dns21:45
richmI have an ubuntu system - bind9 9.9.5.dfsg - I did an addzone junk.local.21:46
richmthe .nzf file _does not_ have the trailing dot21:47
richmrndc delzone junk.local. does not work21:47
*** yidclare has joined #openstack-dns21:47
richmcould this be a "bug" in bind 9.9?  rjrjr - you said you were using bind 9.8?21:48
rjrjrrichm: when Designate performs the 'addzone' it uses a trailing dot.21:52
richmright21:52
rjrjrdid you use Designate for the addzone or did you do it manually?  i suspect it will work either way, as long as you are consistent.21:52
richmmanually - so on Fedora 20, and ubuntu latest (bind 9.9.5), addzone (or bind) will silently strip the trailing dot when it puts it in the .nzf file21:53
richmthen delzone domain.tld. will fail21:53
richmthis is all manually, no designate21:54
richmare all of you guys using bind9 9.8?21:54
rjrjrthat's interesting.  it also seems to enforce a 'rndc freeze' on only dynamic zones.21:54
rjrjranother issue i wasn't able to reproduce.21:54
rjrjri'll have to build a server with the latest BIND and test in the future.21:56
richmI opened a bug against Fedora - https://bugzilla.redhat.com/show_bug.cgi?id=110532921:59
richmrjrjr: you are using bind9 9.8, right?22:00
rjrjryes, BIND 9.8.1-P1 on ubuntu 12.0422:01
rjrjrrichm: if you manually add a zone to your configuration using a trailing dot, does bind complain?22:05
rjrjr(i.e. don't use 'rndc addzone' but add the zone to the configuration file(s).)22:05
richmnot sure - but I will note that all of the default zones (e.g. zones.rfc1918) _do not_ have a trailing dot22:09
richmzone "10.in-addr.arpa"      { type master; file "/etc/bind/db.empty"; }22:09
richmetc.22:09
richmthe only zone with a trailing dot is zone "." in named.conf.default-zones22:11
*** jorgem has quit IRC22:12
rjrjrsame here.22:12
* richm is getting the feeling that bind (not zone file) configuration does not want the trailing dot22:16
rjrjra fix for this would be to have the bind9 driver strip the trailing dot for the rndc commands.  i've verified this will work on the version of BIND I'm using.  it seems to work with or without trailing dots, as long as you are consistent.22:16
rjrjrbut, that is a different bug than the one i was fixing. 8^)22:17
rjrjrrichm: want me to open a Designate bug for this?22:19
richmsure22:20
richmthanks22:20
rjrjri can fix it once my other fix is accepted.  8^)22:21
richmok22:21
richmheh - take a look at impl_powerdns/__init__.py create_domain():22:22
richm        domain_m.update({22:22
richm            'designate_id': domain['id'],22:22
richm            'name': domain['name'].rstrip('.'),22:22
richmlooks like powerdns also does not like the trailing dot22:23
rjrjrhttps://bugs.launchpad.net/designate/+bug/132698422:25
*** jaycaz has quit IRC23:03
*** msisk has joined #openstack-dns23:05
*** sbfox has quit IRC23:23
*** spiffxp has quit IRC23:28
*** yidclare has quit IRC23:38
*** betsy has joined #openstack-dns23:47
*** vinod1 has joined #openstack-dns23:52

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!