| *** mlavalle has quit IRC | 00:31 | |
| *** hoangcx has joined #openstack-dns | 00:38 | |
| *** EricGonc_ has quit IRC | 00:43 | |
| *** cuongnv has joined #openstack-dns | 01:00 | |
| iggy | hey guys, having a problem with designate where when I delete an instance, the first time it errors out, but the second time it goes through fine | 01:03 |
|---|---|---|
| iggy | 2017-02-17 00:40:26.312 93154 ERROR neutron.api.v2.resource [req-2d293d04-86b3-43ce-ac45-ab2817433e24 e56614194e504e709d46e74d0272cc39 927d1e83056743a1b1a309013c35b8a9 - - -] delete failed | 01:03 |
| iggy | 2017-02-17 00:40:26.293 93154 ERROR neutron.callbacks.manager [req-2d293d04-86b3-43ce-ac45-ab2817433e24 e56614194e504e709d46e74d0272cc39 927d1e83056743a1b1a309013c35b8a9 - - -] Error during notification for neutron.plugins.ml2.extensions.dns_integration._delete_port_in_external_dns_service port, before_delete | 01:04 |
| *** gatuus_ has quit IRC | 01:04 | |
| *** gatuus has quit IRC | 01:04 | |
| iggy | I see those log lines along with a traceback spread out over a ton of log lines | 01:05 |
| *** catintheroof has quit IRC | 01:13 | |
| *** cuongnv_ has joined #openstack-dns | 02:06 | |
| *** cuongnv has quit IRC | 02:06 | |
| *** tdink has quit IRC | 02:24 | |
| *** cuongnv_ is now known as cuong | 02:29 | |
| *** cuong is now known as cuongnv | 02:29 | |
| *** EricGonczer_ has joined #openstack-dns | 02:32 | |
| *** EricGonc_ has joined #openstack-dns | 02:39 | |
| *** EricGonczer_ has quit IRC | 02:40 | |
| *** EricGonc_ has quit IRC | 03:03 | |
| *** cuongnv has quit IRC | 03:05 | |
| *** ducttape_ has quit IRC | 03:24 | |
| *** deepbook5broo has joined #openstack-dns | 03:47 | |
| *** deepbook5broo has left #openstack-dns | 03:47 | |
| *** cuongnv has joined #openstack-dns | 03:52 | |
| *** faizy has joined #openstack-dns | 05:32 | |
| *** richm has quit IRC | 06:42 | |
| *** hoangcx_ has joined #openstack-dns | 06:57 | |
| *** hoangcx has quit IRC | 06:59 | |
| *** amoralej|off is now known as amoralej | 07:46 | |
| *** hoangcx has joined #openstack-dns | 07:59 | |
| *** hoangcx_ has quit IRC | 08:00 | |
| *** fandi has joined #openstack-dns | 08:14 | |
| *** pcaruana has joined #openstack-dns | 08:22 | |
| *** sonuk has quit IRC | 08:37 | |
| *** stanzgy has joined #openstack-dns | 09:16 | |
| *** sonuk has joined #openstack-dns | 09:17 | |
| *** cuongnv has quit IRC | 10:00 | |
| *** hoangcx has quit IRC | 10:02 | |
| *** haplo37_ has quit IRC | 10:03 | |
| *** haplo37_ has joined #openstack-dns | 10:03 | |
| *** faizy has quit IRC | 10:12 | |
| *** faizy has joined #openstack-dns | 10:13 | |
| *** sonuk has quit IRC | 10:16 | |
| *** sonuk has joined #openstack-dns | 10:42 | |
| *** Andrew_jedi has joined #openstack-dns | 11:09 | |
| Andrew_jedi | Hello Folks! | 11:10 |
| Andrew_jedi | I have just installed designate (Newton) and facing an issue. | 11:10 |
| Andrew_jedi | Designate complains that "zones" table is absent DB but it is present inthe DB. http://paste.openstack.org/show/599377/ | 11:10 |
| *** richm has joined #openstack-dns | 11:11 | |
| *** dmellado has joined #openstack-dns | 11:37 | |
| *** agarciam has joined #openstack-dns | 11:49 | |
| agarciam | ey there... quick question about neutron-designate integration... hopefully someone here can provide an answer. The documentation (https://docs.openstack.org/mitaka/networking-guide/config-dns-int.html) says you can set a dns_name on the neutron network that will be used to create the dns_name of the neutron port (and therefore, provisioned on designate). But the truth is that neutron gets the dns_name from neutron.conf. | 11:52 |
| agarciam | .. so I don't fully get what's the purpose of setting the domain name on the network if it's going to be ignored unless it is a subdomain of the one defined on configuration. Is that the expected behaviour (being able to have a single domain for the whole platform and rely on subdomains)? | 11:52 |
| *** ducttape_ has joined #openstack-dns | 12:00 | |
| *** haplo37 has quit IRC | 12:13 | |
| *** fandi has quit IRC | 12:14 | |
| Kiall | agarciam: you can set a dns_domain in neutron.conf, if you do, it's used.. | 12:16 |
| Kiall | If you don't - it'll pick the name from the Neutron network/subnet | 12:16 |
| Kiall | (at least, that's how I remember it...) | 12:16 |
| agarciam | Kiall I tried with the config param empty... and it didn't work | 12:17 |
| agarciam | Kiall but... worth to try it out again... just in case I missed something | 12:17 |
| *** haplo37 has joined #openstack-dns | 12:22 | |
| *** catintheroof has joined #openstack-dns | 12:23 | |
| *** Andrew_jedi has quit IRC | 12:36 | |
| *** faizy has quit IRC | 12:45 | |
| *** Andrew_jedi has joined #openstack-dns | 13:03 | |
| agarciam | Kiall it doesn't work... if you remove the config then the dns_name is not even constructed when you create a port | 13:08 |
| *** stanzgy has quit IRC | 13:11 | |
| *** EricGonczer_ has joined #openstack-dns | 13:16 | |
| *** EricGonc_ has joined #openstack-dns | 13:23 | |
| *** EricGonczer_ has quit IRC | 13:24 | |
| *** faizy has joined #openstack-dns | 13:41 | |
| *** EricGonc_ has quit IRC | 13:47 | |
| *** trondham has joined #openstack-dns | 13:51 | |
| Andrew_jedi | folks, i am running into this error "ERROR oslo_messaging.rpc.server NoServersConfigured". Can someone point me towards good documentation on configuring designate please ? | 13:51 |
| *** chlong has joined #openstack-dns | 14:15 | |
| timsim | Andrew_jedi: https://docs.openstack.org/developer/designate/pools.html | 14:18 |
| *** gatuus has joined #openstack-dns | 14:29 | |
| *** gatuus has quit IRC | 14:37 | |
| *** amoralej is now known as amoralej|lunch | 14:41 | |
| *** tdink has joined #openstack-dns | 14:44 | |
| *** Andrew_jedi has quit IRC | 15:00 | |
| *** agarciam has quit IRC | 15:01 | |
| *** nkinder has joined #openstack-dns | 15:05 | |
| *** agarciam has joined #openstack-dns | 15:11 | |
| *** sonuk has quit IRC | 15:16 | |
| *** amoralej|lunch is now known as amoralej | 15:18 | |
| *** faizy has quit IRC | 15:22 | |
| *** EricGonczer_ has joined #openstack-dns | 15:31 | |
| *** faizy has joined #openstack-dns | 15:32 | |
| *** mlavalle has joined #openstack-dns | 15:37 | |
| *** databus23_ has joined #openstack-dns | 15:39 | |
| *** kbyrne has joined #openstack-dns | 15:52 | |
| *** kbyrne has quit IRC | 16:04 | |
| *** kbyrne has joined #openstack-dns | 16:07 | |
| *** tdink has quit IRC | 16:11 | |
| *** tdink has joined #openstack-dns | 16:11 | |
| *** pcaruana has quit IRC | 16:21 | |
| *** shewless has joined #openstack-dns | 16:23 | |
| shewless | Hello. Is there a way to make a "domain" accessible to all projects? | 16:23 |
| *** Andrew_jedi has joined #openstack-dns | 16:26 | |
| *** tdink has quit IRC | 16:26 | |
| *** tdink has joined #openstack-dns | 16:27 | |
| *** gatuus has joined #openstack-dns | 16:40 | |
| *** shewless has quit IRC | 16:51 | |
| *** faizy has quit IRC | 16:54 | |
| *** shewless has joined #openstack-dns | 16:54 | |
| *** EricGonczer_ has quit IRC | 17:05 | |
| timsim | shewless: Currently there isn't a way to share domains between tenants without being kind of hacky. You can allow all domains to be accessible to all tenants by always passing the all-tenants flag, and having everyone be an admin for example. | 17:06 |
| timsim | What you might also do is if you're having certain tenants working on certain subdomains, you can create sub.example.com from the original tenant, and then transfer sub.example.com to the tenant who needs to do things on it. Think labs.mycompany.com or something. | 17:07 |
| *** EricGonczer_ has joined #openstack-dns | 17:08 | |
| *** Andrew_jedi has quit IRC | 17:09 | |
| *** Andrew_jedi has joined #openstack-dns | 17:11 | |
| openstackgerrit | Merged openstack/designate-tempest-plugin master: Remove tempest tests for APIv1 as smoke tests https://review.openstack.org/434761 | 17:42 |
| *** Andrew_jedi has quit IRC | 17:51 | |
| shewless | timsim: how do you "transfer" domains? | 17:54 |
| shewless | timsim: could I add a policy or something that would all all users to see all domains? | 17:55 |
| shewless | otherwise.. I suppose I could create a "sub domain" for every user on their behalf | 17:55 |
| shewless | kind of sketchy though | 17:56 |
| shewless | I see in policy.json: "admin": "role:admin or is_admin:True", | 17:57 |
| shewless | Could I just change that to role:user or role:admin? | 17:58 |
| shewless | I will try | 17:58 |
| timsim | shewless: https://developer.openstack.org/api-ref/dns/#zone-ownership-transfers-requests | 17:58 |
| timsim | Yeah you can try that, it's just that everyone will be an admin | 17:58 |
| timsim | I'm blanking on whether "admins" can just by default see other tenants zones. | 17:58 |
| timsim | I don't think so. | 17:58 |
| timsim | I guess if you supply the sudo tenant id maybe. | 17:59 |
| shewless | timsim: thanks for the link. What do you mean by "sudo tenant id"? | 18:01 |
| timsim | yeah no admins can't just see other tenants zones without passing the all-projects flag | 18:04 |
| shewless | wow thanks for checking | 18:05 |
| shewless | I hadn't gotten to it yet | 18:05 |
| timsim | If you check the headers under here https://developer.openstack.org/api-ref/dns/?expanded=create-zone-detail you can see all of them | 18:05 |
| timsim | They're http headers that you can pass that will (if you're an admin usually) give you some extra powers. | 18:05 |
| timsim | I'm assuming you're using keystone, if you're not using keystone, it's even easier to impersonate. Just pass 'x-auth-project-id: tenantname' | 18:06 |
| shewless | timsim: interesting.. I am using keystone but I don't "have" to use keystone | 18:06 |
| shewless | not sure I could do that x-auth trick from heat though.. which I guess is my end goal | 18:07 |
| shewless | timsim: is designate designed to support only 1 project/tenant? | 18:19 |
| timsim | The opposite | 18:19 |
| timsim | But it's designed to have a zone belong to a tenant | 18:20 |
| shewless | timsim: by zone do you mean "designate domain-create" ? | 18:21 |
| timsim | Ah. | 18:21 |
| timsim | Domain is the "old, deprecated" term for zone. Using the v1 API, you'll see domains. You really should try to use v2 (and the openstackclient) | 18:22 |
| *** mlavalle has quit IRC | 18:22 | |
| timsim | They map to the same thing but the v1 API and the "designate" Cli are deprecated | 18:22 |
| shewless | timsim: cool.. I didn't know which openstack commands to use.. I assume they are the "zone" subset now that you have clarified :) | 18:25 |
| shewless | Oddly enough when I try and use the openstack cli it says it can't find the endpoint | 18:25 |
| timsim | Yeah it's not super intuitive | 18:26 |
| timsim | There's some docs for it in the python-designate client docs | 18:26 |
| timsim | The designate stuff is a plugin you have to install. | 18:26 |
| shewless | I have en endpoint like so: https://designate.foo.com:9001 | 18:27 |
| shewless | I have designate installed and working from the command line | 18:27 |
| timsim | It uses keystone to find the endpoint so it has to be created in there right. | 18:27 |
| timsim | Or I think you can supply it | 18:27 |
| timsim | Ok, next week is an openstack event, I'm going to write some good docs for all of this crap. That's like all I'm gonna do. That's what we're doing next week mugsie | 18:28 |
| timsim | 1. Find new contributors. 2. Write docs. | 18:29 |
| shewless | :) | 18:29 |
| shewless | I feel like I'm so close to having it work | 18:29 |
| shewless | it works from "designate" but not from openstack zone :( | 18:29 |
| shewless | maybe that means v1 works but not v2? | 18:29 |
| shewless | Do I have to specify v2 in the name of the endpoint? | 18:29 |
| *** EricGonc_ has joined #openstack-dns | 18:32 | |
| * mugsie_ agrees with timsim | 18:34 | |
| *** EricGonczer_ has quit IRC | 18:34 | |
| mugsie_ | But will read ^ when I get off this plane | 18:34 |
| shewless | timsim: do I need to explicity set "enabled_extensions_v2" or can I leave it blank? | 18:36 |
| shewless | timsim: man.. if I explicitly set enabled_api_v2 to True then it works! weird that it was commented out as True so I assumed that was the default | 18:37 |
| timsim | What version of designate are you using? | 18:37 |
| shewless | 2.0.0 - default for ubuntu 16.04 | 18:38 |
| timsim | Hm | 18:39 |
| timsim | Well. I'm glad it works anyway | 18:39 |
| shewless | timsim: still need to figure out how I'm going to provide this service to my users | 18:40 |
| shewless | I could ask them to manually create a zone | 18:41 |
| shewless | and then manually create records for each of their instances in that zone | 18:41 |
| timsim | What exactly is it that you want? Can you describe the whole use case? | 18:41 |
| shewless | timsim: We have some predefined heat templates. When a user launches a stack I want the instances in that stack to have a DNS name pointing to the floating IP. I want the DNS name to be unique so I was thinking of including the project name as part of the dns (either as a zone or a record) | 18:42 |
| shewless | I can't think of a good way to do that automatically | 18:44 |
| shewless | I know I could tie it into neutron but I don't know how it would ensure uniqueness.. since you can only specify one domain/zone in the config | 18:48 |
| mugsie_ | Heat can create domains and records | 18:48 |
| mugsie_ | You can also assign a zone to each neutron network | 18:49 |
| shewless | mugsie_ yes heat can do domains and records.. but I would need to know the project name to create both I guess | 18:58 |
| shewless | mugsie_ any info on how to assign a zone to each neutron network? not sure how that would work | 18:58 |
| -openstackstatus- NOTICE: Restarting gerrit due to performance problems | 19:02 | |
| *** mlavalle has joined #openstack-dns | 19:27 | |
| *** stanzgy has joined #openstack-dns | 19:42 | |
| shewless | when using OS::Designate::Record: | 20:16 |
| shewless | can the "domain" specified by the "name" of the domain instead of the ID? | 20:16 |
| shewless | Otherwise this is just getting crazy | 20:16 |
| *** Andrew_jedi has joined #openstack-dns | 20:17 | |
| shewless | I'm getting this error which is worrisome: ERROR: Property error: : resources.device_dns.properties.domain: : NotFound | 20:18 |
| shewless | but I have created a domain which is accessible for this project. | 20:18 |
| shewless | hmm.. If I try and reference the domain by ID instead I still get the same error.. so I guess the problem is not with the name vs id.. but somewhere else | 20:20 |
| shewless | I think heat is defaulting to v1 api instead of v2 :( | 20:21 |
| shewless | is there anyway to change that? | 20:21 |
| shewless | For now I re-enabled the v1 API in designate.. now my heat seems to be happier with me | 20:23 |
| *** amoralej is now known as amoralej|off | 20:37 | |
| shewless | Thanks for the help mugsie_ and timsim: Right now I have a "working" solution. It assumes that each user will have a zone created in their project and that they will pass their project name as a parameter in the heat template. | 20:39 |
| shewless | It's a start | 20:40 |
| *** stanzgy has quit IRC | 20:40 | |
| shewless | I may try and expose the project name somehow in the heat template. I think that will make it simpler | 20:40 |
| *** ducttape_ has quit IRC | 20:57 | |
| *** ducttape_ has joined #openstack-dns | 20:57 | |
| *** haplo37 has quit IRC | 21:06 | |
| *** ducttape_ has quit IRC | 21:09 | |
| *** haplo37_ has quit IRC | 21:09 | |
| *** haplo37 has joined #openstack-dns | 21:18 | |
| *** haplo37_ has joined #openstack-dns | 21:19 | |
| *** ducttape_ has joined #openstack-dns | 21:56 | |
| *** ducttape_ has quit IRC | 22:56 | |
| *** ftpd has quit IRC | 23:02 | |
| *** gatuus has quit IRC | 23:04 | |
| *** ducttape_ has joined #openstack-dns | 23:06 | |
| *** catintheroof has quit IRC | 23:21 | |
| *** catintheroof has joined #openstack-dns | 23:22 | |
| mugsie | shewless: sorry, just saw this (finally landed and away from airports for a day of two :( ) | 23:24 |
| mugsie | yeah - heat is v1 only right now | 23:25 |
| mugsie | and needs an id | 23:25 |
| mugsie | but, we will need to implment v2 in heat this cycle | 23:25 |
| mugsie | and allow for name based look up - which is kind of done already in the client | 23:26 |
| *** ducttape_ has quit IRC | 23:26 | |
| *** catintheroof has quit IRC | 23:26 | |
| *** ducttape_ has joined #openstack-dns | 23:38 | |
| *** chlong has quit IRC | 23:46 | |
| *** tdink has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!