| *** hoangcx has joined #openstack-dns | 00:43 | |
| *** cuongnv has joined #openstack-dns | 01:07 | |
| *** trugnvfet has joined #openstack-dns | 01:19 | |
| *** zhurong has joined #openstack-dns | 01:30 | |
| *** khushbu has joined #openstack-dns | 02:20 | |
| *** trugnvfet has quit IRC | 02:49 | |
| *** khushbu has quit IRC | 02:58 | |
| *** khushbu has joined #openstack-dns | 03:08 | |
| *** khushbu has quit IRC | 03:13 | |
| *** sonuk has joined #openstack-dns | 03:21 | |
| *** tdink has quit IRC | 03:46 | |
| *** tdink has joined #openstack-dns | 04:04 | |
| *** khushbu has joined #openstack-dns | 04:36 | |
| *** tdink has quit IRC | 04:44 | |
| sonuk | timsim mugsie : Hi. does designate contain OCF resource agent for HA deployment? | 05:05 |
|---|---|---|
| *** cuongnv has quit IRC | 05:27 | |
| *** cuongnv has joined #openstack-dns | 05:28 | |
| *** richm has quit IRC | 05:43 | |
| *** castlemilk has quit IRC | 05:57 | |
| *** faizy has joined #openstack-dns | 06:35 | |
| *** pcaruana has joined #openstack-dns | 07:50 | |
| *** castlemilk has joined #openstack-dns | 08:35 | |
| ftpd | Hi all. I'm trying to use infoblox backend and changed listen= for my mdns service from 5354 to 53. | 09:12 |
| ftpd | And the service can't go up, because 'permission denied'. Why, as it's run by root? | 09:13 |
| *** yee379 has quit IRC | 09:20 | |
| *** yee379 has joined #openstack-dns | 09:20 | |
| *** haplo37 has quit IRC | 09:21 | |
| *** haplo37 has joined #openstack-dns | 09:30 | |
| *** abalutoiu_ has quit IRC | 09:34 | |
| *** kiall has quit IRC | 09:53 | |
| *** zhurong has quit IRC | 09:54 | |
| *** kiall has joined #openstack-dns | 09:56 | |
| *** kiall has quit IRC | 09:56 | |
| *** kiall has joined #openstack-dns | 09:56 | |
| *** cuongnv has quit IRC | 10:07 | |
| *** richm has joined #openstack-dns | 10:13 | |
| *** hoangcx has quit IRC | 10:24 | |
| *** kiall has quit IRC | 10:26 | |
| *** kiall has joined #openstack-dns | 10:35 | |
| *** abalutoiu has joined #openstack-dns | 10:44 | |
| mugsie | ftpd: it sounds like something is blocking it - apparmour or selinux maybe? | 10:51 |
| mugsie | sonuk: no, we are active / active HA, so we don't need pacemaker / corosync | 10:51 |
| sonuk | mugsie: can we start all the services of designate (api, mdns, central etc) in active/ active HA ? | 11:00 |
| mugsie | yeap | 11:00 |
| mugsie | pool-mamager needs zookeeper to do it properly | 11:00 |
| sonuk | mugsie: how can i test it ? | 11:00 |
| mugsie | but the new worker / producer is fully active active HA | 11:00 |
| mugsie | test the HA ness? | 11:01 |
| sonuk | yes | 11:01 |
| mugsie | boot 2 or 3 VMs, run the serviuces on them, and then power off a VM ? | 11:01 |
| sonuk | mugsie: ok, ill try that, but no special configuration is needed for active/active HA right? | 11:04 |
| mugsie | nope | 11:06 |
| sonuk | mugsie:ok thanks. let me try that. | 11:08 |
| *** abalutoiu has quit IRC | 11:15 | |
| ftpd | mugsie: selinux is disabled. As I've checked, mdns service runs from user designate, which is not allowed to bind ports < 1024. | 11:31 |
| ftpd | TBH I would like to learn more about infoblox backend, as documentation (https://docs.openstack.org/developer/designate/backends/infoblox.html) is kinda poor. If someone of you guys would spare some time to discuss my setup, it would be great. No rush, the next time window when I can test it is 48h ahead ;-) | 11:36 |
| ftpd | But I assume I will have many stupid and obvious questions :/ | 11:36 |
| mugsie | ftpd: I do not know a huge amount about it - we never had access to an Infoblox server to test it | 11:36 |
| mugsie | it was written by infoblox | 11:36 |
| mugsie | but, ask away - if I dont know I can find out | 11:37 |
| ftpd | The basic question si: how the workflow is done. For bind, as I've learned, it is something like: <user> -> <api instance> -> <central instance> -> (rndc, tcp 953) -> <backend bind9 servers> -> (zone transfer, tcp 53) -> <mdns instance>. | 11:38 |
| ftpd | And what with infoblox? | 11:38 |
| ftpd | Admins of my backed doesn't allow any rndc control commands. Any control commands at all. They want just simple zone transfer. | 11:39 |
| ftpd | Is it even possible? They servers would be main esolvers for user later. | 11:39 |
| mugsie | infoblox calls the API | 11:39 |
| mugsie | it is possible, but designate needs to create the zone some how | 11:40 |
| ftpd | So users need to create record(s) in designate and have it somehow pushed to inflobox servers. | 11:40 |
| mugsie | yeah, so infoblox does zone transfer from us | 11:40 |
| *** faizy has quit IRC | 11:40 | |
| mugsie | so, flow is designate -> infoblox api -> zone transfer -> minidns | 11:40 |
| mugsie | we just call the zone create and delete APIs on the infoblox server | 11:41 |
| mugsie | (we do not use the rndc interface) | 11:41 |
| ftpd | Is there any example of working pools.yaml? I don't have any idea what to put there as masters and nameservers. | 11:41 |
| ftpd | I belive the 3 infobloxes would be ns_servers. | 11:41 |
| mugsie | masters == miniDNS (but it has to be port 53 AFAIK) | 11:42 |
| ftpd | Ok. | 11:42 |
| ftpd | So all 'options:' section with rndc is not needed? | 11:42 |
| mugsie | no, in the option we need the following | 11:43 |
| mugsie | wapi_url | 11:43 |
| mugsie | username | 11:43 |
| mugsie | password | 11:43 |
| mugsie | https://github.com/openstack/designate/blob/master/designate/backend/impl_infoblox/config.py | 11:44 |
| mugsie | is the list | 11:44 |
| mugsie | but they should be in the options block of the pools.yaml | 11:44 |
| ftpd | And can I talk to more than one wapi_url? | 11:45 |
| mugsie | I dont think so | 11:47 |
| ftpd | So somethink like it: http://pastebin.com/j49HEYkH | 11:47 |
| ftpd | But what with 'nameservers' section? | 11:47 |
| mugsie | it should be the IP addresses of the 3 servers | 11:47 |
| mugsie | we use that to check if the zone or records have been published | 11:48 |
| ftpd | Ok. | 11:48 |
| ftpd | By simple dns query? | 11:48 |
| mugsie | yeah | 11:49 |
| mugsie | it just does a check on the serial number | 11:49 |
| ftpd | Ok. | 11:50 |
| ftpd | So now I need to have wapi_url, username and password from infoblox admins | 11:50 |
| ftpd | And here: https://pypi.python.org/pypi/designate-infoblox/0.0.1.dev13 there is some example configuration from designate.conf, but nameservers are by uids. it's in the case nameservers are also in openstack and there are uids of instances? | 11:52 |
| ftpd | Oh, no. It's just some generated string. | 11:52 |
| mugsie | yeah, that is the old config | 11:53 |
| mugsie | it was terrible | 11:53 |
| ftpd | ;-) | 11:53 |
| ftpd | So the best option is to use pools.yaml and designate-manage pool update? | 11:53 |
| mugsie | yes | 11:53 |
| ftpd | Ok, will do. | 11:53 |
| ftpd | And still, the zone have to be created on designate and later transfered (via api) to infoblox? | 11:55 |
| ftpd | Like in bind9, but api instead of rndc. | 11:55 |
| mugsie | yeah | 11:56 |
| ftpd | It might be a problem, inflobox admins won't agree to any controlling commands via any method from anywhere. | 11:56 |
| ftpd | But it's my internal problem and my internal little battle ;-) | 11:56 |
| * mugsie is running to grab some equipement - will be back in a few | 11:56 | |
| ftpd | Thanks again (I can't count, how many times now) for your support. I wish every opensource project have so helpfull maintainers. | 11:56 |
| ftpd | Also, Im thinking about that: https://docs.openstack.org/developer/designate/howtos/secondary-zones.html | 11:59 |
| ftpd | But no, it won't solve my problem, as the idea is to manage records by users on designate, not external dns (infoblox). | 12:00 |
| ftpd | One more thing: what is 'also_notifies' used for? | 12:15 |
| ftpd | I'm still thinking how to deal with multiple infobloxes and just one wapi_url. | 12:16 |
| *** faizy has joined #openstack-dns | 12:25 | |
| *** abalutoiu has joined #openstack-dns | 12:26 | |
| openstackgerrit | zhongshengping proposed openstack/designate master: Add bindep support https://review.openstack.org/445469 | 12:32 |
| *** faizy has quit IRC | 12:34 | |
| openstackgerrit | zhongshengping proposed openstack/designate master: Add bindep support https://review.openstack.org/445469 | 12:40 |
| *** khushbu has quit IRC | 12:41 | |
| *** khushbu has joined #openstack-dns | 12:44 | |
| mugsie | ftpd: sorry, got distracted | 12:53 |
| * mugsie is moving company so setting up new workstations etc | 12:53 | |
| mugsie | also notifies is for a small sub set of backends, not releated to infoblox unfortunately | 12:53 |
| mugsie | what you could do for multiple urls, is have multiple targets in the pool | 12:54 |
| *** abalutoiu has quit IRC | 12:57 | |
| *** catintheroof has joined #openstack-dns | 12:58 | |
| *** catintheroof has quit IRC | 12:59 | |
| *** catintheroof has joined #openstack-dns | 12:59 | |
| *** chlong has joined #openstack-dns | 13:05 | |
| ftpd | mugsie: Great, will check it on Thursday (during my next meeting with infoblox team). | 13:09 |
| *** abalutoiu has joined #openstack-dns | 13:21 | |
| *** khushbu has quit IRC | 13:21 | |
| *** faizy has joined #openstack-dns | 13:21 | |
| *** vcn has joined #openstack-dns | 13:27 | |
| *** vcn is now known as cuongnv | 13:28 | |
| -openstackstatus- NOTICE: Gerrit is going to be restarted due to performance problems | 13:38 | |
| *** ChanServ changes topic to "Gerrit is going to be restarted due to performance problems" | 13:38 | |
| *** catinthe_ has joined #openstack-dns | 13:41 | |
| *** khushbu has joined #openstack-dns | 13:41 | |
| *** catintheroof has quit IRC | 13:41 | |
| -openstackstatus- NOTICE: Gerrit has been successfully restarted | 13:44 | |
| *** ChanServ changes topic to "Gerrit has been successfully restarted" | 13:44 | |
| *** catintheroof has joined #openstack-dns | 13:45 | |
| *** catinthe_ has quit IRC | 13:45 | |
| *** khushbu has quit IRC | 13:46 | |
| *** ChanServ changes topic to "OpenStack Designate - Logged @ http://eavesdrop.openstack.org/irclogs/%23openstack-dns | Review Dashboard @ http://graham.hayes.ie/designate/dashboard | Bugs Dashboard @ http://ham.ie/designate-bugs" | 13:50 | |
| -openstackstatus- NOTICE: Gerrit has been successfully restarted | 13:50 | |
| *** tdink has joined #openstack-dns | 13:57 | |
| *** mlavalle has joined #openstack-dns | 13:57 | |
| ftpd | mugsie: I've just learned, that 'backend' is needed _only_ for creating/deleting zones. Am I right? If so, could I just create zone (manually) on infoblox (with minidns as hidden master) and create it in designate and later just work with the records, which should be exchanged by simple notify mechanism, which is simple dns fuctionality, backend-unaware? | 14:22 |
| ftpd | (I don't need to create/delete/change zones in the future, the full idea of my solution is to delegate one zone on existing dns infrastructure to be managed by cloud users.) | 14:27 |
| *** tdink has quit IRC | 14:35 | |
| *** sonuk has quit IRC | 14:37 | |
| *** faizy_ has joined #openstack-dns | 14:58 | |
| *** faizy has quit IRC | 15:00 | |
| mugsie | ftpd: designate will get a bit wierd about it | 15:00 |
| mugsie | you may have to update the DB mamually | 15:00 |
| *** tdink has joined #openstack-dns | 15:02 | |
| ftpd | I'm trying to test it currently. | 15:04 |
| *** brad[] has quit IRC | 15:07 | |
| *** brad[] has joined #openstack-dns | 15:19 | |
| *** cuongnv has quit IRC | 15:19 | |
| *** tdink has quit IRC | 15:27 | |
| ftpd | The zone is still in 'pending' state. | 15:29 |
| timsim | Check the poolmgr/worker logs | 15:32 |
| timsim | mdns too. To see what's happening. | 15:32 |
| *** khushbu has joined #openstack-dns | 15:34 | |
| *** khushbu has quit IRC | 15:34 | |
| *** khushbu has joined #openstack-dns | 15:35 | |
| *** khushbu has quit IRC | 15:48 | |
| *** tdink has joined #openstack-dns | 15:48 | |
| *** khushbu has joined #openstack-dns | 16:39 | |
| *** khushbu has quit IRC | 16:51 | |
| *** kiall has quit IRC | 17:29 | |
| *** kiall has joined #openstack-dns | 17:29 | |
| *** kiall has quit IRC | 17:29 | |
| *** kiall has joined #openstack-dns | 17:29 | |
| *** kiall has quit IRC | 17:40 | |
| *** kiall has joined #openstack-dns | 17:43 | |
| *** kiall has joined #openstack-dns | 17:43 | |
| *** faizy_ has quit IRC | 18:00 | |
| *** kiall has quit IRC | 18:02 | |
| *** pcaruana has quit IRC | 18:03 | |
| *** kiall has joined #openstack-dns | 18:06 | |
| *** kiall has quit IRC | 18:06 | |
| *** kiall has joined #openstack-dns | 18:06 | |
| *** abalutoiu has quit IRC | 18:19 | |
| *** kiall has quit IRC | 19:33 | |
| *** kiall has joined #openstack-dns | 19:33 | |
| *** kiall has quit IRC | 19:33 | |
| *** kiall has joined #openstack-dns | 19:33 | |
| eandersson | mugsie, ftpd pretty sure that is a pretty common scenario for enterpise | 20:31 |
| eandersson | We have always used the fake backend. | 20:31 |
| eandersson | Worked without an issue for us for years | 20:32 |
| mugsie | hummm... fake could work | 20:32 |
| mugsie | good idea eandersson | 20:32 |
| *** EricGonczer_ has joined #openstack-dns | 20:33 | |
| eandersson | We have one master domain that is used by the sink. | 20:33 |
| ftpd | eandersson: Do you have any pools.yaml example to share? I have some problems with my testing env. | 20:33 |
| eandersson | Never tried Infoblox unfortunately | 20:34 |
| ftpd | I mean fake backend. | 20:35 |
| ftpd | With fake backend openstack zone create should just work. | 20:35 |
| ftpd | For me it doesn't. | 20:35 |
| mugsie | oh? | 20:36 |
| eandersson | Sure | 20:36 |
| ftpd | Don't have vpn connection now, can't check/show logs. | 20:36 |
| eandersson | http://paste.openstack.org/show/cXqlM8yhnN8WreCOBxSi/ | 20:37 |
| ftpd | Ok, and how do you tell mdns what is a slave for a zone to initiate transfer? | 20:38 |
| timsim | ftpd: Those are the targets. | 20:38 |
| eandersson | We just set up the slave dns server to point at designate | 20:38 |
| eandersson | e.g. for powerdns we add the designate dns servers as the target | 20:39 |
| eandersson | manually add the SOA record | 20:39 |
| ftpd | When creating zone on powerdns side? | 20:39 |
| eandersson | Yea | 20:39 |
| ftpd | Ok. | 20:39 |
| ftpd | So in my case I want my infoblox as ns_server on designate's side and just proper slave in it. | 20:41 |
| ftpd | I'll try that tomorrow morning, will share my results. | 20:41 |
| openstackgerrit | Tim Simmons proposed openstack/designate master: Make Pools documentation better https://review.openstack.org/445651 | 20:51 |
| *** abalutoiu has joined #openstack-dns | 21:20 | |
| *** catintheroof has quit IRC | 21:46 | |
| *** tdink has quit IRC | 22:07 | |
| *** EricGonczer_ has quit IRC | 22:33 | |
| *** EricGonczer_ has joined #openstack-dns | 22:33 | |
| *** EricGonczer_ has quit IRC | 22:38 | |
| *** a7ndrew has quit IRC | 22:52 | |
| *** EricGonczer_ has joined #openstack-dns | 23:42 | |
| *** mlavalle has quit IRC | 23:43 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!