Tuesday, 2018-11-20

*** chrizl has quit IRC00:00
*** Chaserjim has quit IRC00:03
*** hrw has joined #openstack-kolla00:03
*** chrizl has joined #openstack-kolla00:05
*** Chaserjim has joined #openstack-kolla00:06
*** Chaserjim has quit IRC00:15
*** chrizl has quit IRC00:19
*** chrizl has joined #openstack-kolla00:33
*** chrizl has quit IRC00:47
*** Chaserjim has joined #openstack-kolla00:49
*** chrizl has joined #openstack-kolla01:01
*** chrizl has quit IRC01:11
*** Sravan has quit IRC01:12
*** Chaserjim has quit IRC01:16
*** chrizl has joined #openstack-kolla01:16
*** chrizl has joined #openstack-kolla01:17
*** Sravan has joined #openstack-kolla01:17
*** Sravan_ has joined #openstack-kolla01:19
*** Sravan has quit IRC01:22
*** Sravan_ has quit IRC01:24
*** chrizl has quit IRC01:26
*** Chaserjim has joined #openstack-kolla01:33
*** chrizl has joined #openstack-kolla01:33
*** phuoc has joined #openstack-kolla01:41
*** chrizl has quit IRC01:46
*** chrizl has joined #openstack-kolla01:47
*** chrizl has quit IRC02:01
*** Chaserjim has quit IRC02:06
*** chrizl has joined #openstack-kolla02:19
*** chrizl has quit IRC02:23
*** chrizl has joined #openstack-kolla02:24
*** chrizl has quit IRC02:31
*** Chaserjim has joined #openstack-kolla02:34
*** chrizl has joined #openstack-kolla02:40
*** chrizl has quit IRC02:45
*** Chaserjim has quit IRC02:46
*** chrizl has joined #openstack-kolla02:49
*** chrizl has quit IRC02:56
openstackgerritcaoyuan proposed openstack/kolla-ansible master: [WIP]Add neutron metering role into kolla-ansible  https://review.openstack.org/45700602:57
*** hongbin has joined #openstack-kolla02:58
openstackgerritcaoyuan proposed openstack/kolla-ansible master: [WIP]Add neutron metering role into kolla-ansible  https://review.openstack.org/45700602:59
*** chrizl has joined #openstack-kolla03:01
*** chrizl has quit IRC03:15
*** chrizl has joined #openstack-kolla03:15
*** partlycloudy has joined #openstack-kolla03:22
*** Chaserjim has joined #openstack-kolla03:23
*** partlycloudy has left #openstack-kolla03:24
*** Chaserjim has quit IRC03:31
*** Sravan has joined #openstack-kolla03:33
*** chrizl has quit IRC03:34
*** chrizl has joined #openstack-kolla03:38
*** Chaserjim has joined #openstack-kolla03:38
*** chrizl has quit IRC03:43
*** Chaserjim has quit IRC03:45
*** Chaserjim has joined #openstack-kolla03:49
*** Chaserjim has quit IRC03:54
*** chrizl has joined #openstack-kolla03:59
*** Chaserjim has joined #openstack-kolla04:02
*** chrizl has quit IRC04:03
*** Chaserjim has quit IRC04:07
*** chrizl has joined #openstack-kolla04:08
*** chrizl has quit IRC04:13
*** masber has quit IRC04:16
*** chrizl has joined #openstack-kolla04:19
*** hjensas has quit IRC04:19
*** Chaserjim has joined #openstack-kolla04:21
*** chrizl has quit IRC04:23
*** janki has joined #openstack-kolla04:30
*** Chaserjim has quit IRC04:35
*** chrizl has joined #openstack-kolla04:35
*** ivve has joined #openstack-kolla04:41
*** chrizl has quit IRC04:49
*** chrizl has joined #openstack-kolla04:54
*** Chaserjim has joined #openstack-kolla04:55
*** chrizl has quit IRC05:00
*** chrizl has joined #openstack-kolla05:05
*** hongbin has quit IRC05:07
*** Chaserjim has quit IRC05:08
*** chrizl has quit IRC05:10
*** chrizl has joined #openstack-kolla05:10
*** chrizl has quit IRC05:24
*** chrizl has joined #openstack-kolla05:26
*** phuoc_ has joined #openstack-kolla05:32
*** phuoc has quit IRC05:33
*** chrizl has quit IRC05:35
*** chrizl has joined #openstack-kolla05:36
*** k_mouza has joined #openstack-kolla05:43
*** chrizl has quit IRC05:45
*** pvc has quit IRC05:47
*** k_mouza has quit IRC05:48
*** chrizl has joined #openstack-kolla05:49
*** links has joined #openstack-kolla05:56
*** radeks_ has joined #openstack-kolla05:59
*** radeks_ has quit IRC06:00
*** radeks_ has joined #openstack-kolla06:02
*** chrizl has quit IRC06:17
*** PrinzElvis has joined #openstack-kolla06:19
*** chrizl has joined #openstack-kolla06:22
*** hjensas has joined #openstack-kolla06:26
*** chrizl has quit IRC06:31
*** pvc has joined #openstack-kolla06:33
*** Chaserjim has joined #openstack-kolla06:36
*** chrizl has joined #openstack-kolla06:36
*** spsurya has joined #openstack-kolla06:39
*** Chaserjim has quit IRC06:41
*** Luzi has joined #openstack-kolla06:42
*** lemko has joined #openstack-kolla06:44
*** chrizl has quit IRC06:50
*** chrizl has joined #openstack-kolla06:52
*** chrizl has quit IRC06:57
*** Chaserjim has joined #openstack-kolla06:59
*** ramishra has joined #openstack-kolla07:00
*** chrizl has joined #openstack-kolla07:01
*** gkadam has joined #openstack-kolla07:02
*** Chaserjim has quit IRC07:04
*** pcaruana has joined #openstack-kolla07:20
*** chrizl has quit IRC07:20
*** chrizl has joined #openstack-kolla07:25
*** chrizl has quit IRC07:29
*** chrizl has joined #openstack-kolla07:32
*** cah_link has joined #openstack-kolla07:33
*** pcaruana has quit IRC07:34
*** cah_link has quit IRC07:36
*** skramaja has joined #openstack-kolla07:36
*** Sravan has quit IRC07:37
*** cah_link has joined #openstack-kolla07:40
*** pcaruana has joined #openstack-kolla07:40
*** chrizl has quit IRC07:41
*** chrizl has joined #openstack-kolla07:46
ramishramandre: Hi! Would you re-review https://review.openstack.org/#/c/612887/ please? I'm hoping to backport it to Rocky soon for use in Tripleo.07:52
*** shardy has joined #openstack-kolla07:55
*** chrizl has quit IRC07:55
*** chrizl has joined #openstack-kolla08:02
openstackgerritDat Le proposed openstack/kolla-ansible master: Fix "Error: Connection activation failed: Failed to find a compatible device for this connection"  https://review.openstack.org/61896008:05
*** chrizl has quit IRC08:11
*** chrizl has joined #openstack-kolla08:13
*** tis_at_teuto_net has joined #openstack-kolla08:18
*** cah_link has quit IRC08:24
*** chrizl has quit IRC08:34
*** tolisbar has joined #openstack-kolla08:35
*** chrizl has joined #openstack-kolla08:38
*** cah_link has joined #openstack-kolla08:46
*** ktibi has joined #openstack-kolla08:47
*** chrizl has quit IRC08:47
*** tolisbar has quit IRC08:48
*** cah_link has quit IRC08:50
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: DNM: Test Opendaylight  https://review.openstack.org/59861208:51
ktibiHi egonzalez, will you add blueprint from the etherpad created in kolla feedback session ?08:51
egonzalezktibi things are WIP already have one blueprint, spec or is not needed because a simple change08:53
egonzalezktibi if feel some feature request need a blueprint, please create it08:53
ktibiok ;)08:53
egonzalezhttps://etherpad.openstack.org/p/berlin-2018-kolla-user-feedback as reference for others whiling to find something to work08:54
*** chrizl has joined #openstack-kolla08:57
*** dasTor has joined #openstack-kolla09:03
*** dougsz has joined #openstack-kolla09:04
*** chrizl has quit IRC09:06
*** chrizl has joined #openstack-kolla09:07
mandreramishra: sure09:08
*** ghorio has joined #openstack-kolla09:08
*** hamzaachi has joined #openstack-kolla09:09
openstackgerritEduardo Gonzalez proposed openstack/kolla master: Suppress log copy output in gates  https://review.openstack.org/61878109:09
ghorioHi guys, looking for some help. So I have just run kolla-ansible using Rocky docker images as well as kolla-ansible rocky git branch, ansible tasks run just fine with no errors, but when I try to access dashboard, it just shows a big openstack logo with message Sorry, the page you were looking for does not exist09:10
*** chrizl has quit IRC09:11
ghorioin horizong logs it shows some Not Found: /horizon/static/dashboard/css/361cca58bb99.css messages for css and js09:11
ghoriowhen trying to access /auth/login/?next=/ and log in with keystone admin password, it throws - Unable to establish connection to keystone endpoint.09:12
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: Suppress log copy output in gates  https://review.openstack.org/61897309:12
ghorioany idea why Rocky release is so broken? I tried also with master tag and that works just fine out of the box09:13
*** chrizl has joined #openstack-kolla09:15
ghoriooh and I forgot to mention - this happens when using ubuntu images09:16
egonzalezivve around? reading about the mistral bug, have some questions09:18
openstackgerritRabi Mishra proposed openstack/kolla master: Use dumb-init with --single-child  https://review.openstack.org/61288709:18
*** k_mouza has joined #openstack-kolla09:19
*** k_mouza has quit IRC09:20
ramishramandre: thanks! ^^ Duh editing from the UI and u don't remember earlier changes:/09:20
*** k_mouza has joined #openstack-kolla09:20
*** links has quit IRC09:26
*** chrizl has quit IRC09:30
*** chrizl has joined #openstack-kolla09:31
*** gfidente has joined #openstack-kolla09:35
*** chrizl has quit IRC09:36
mgoddardmchlumsky: morning09:36
*** chrizl has joined #openstack-kolla09:37
egonzalezghorio any service enabled except the core?09:39
egonzalezghorio using SSL?09:39
ghorioegonzalez: only the default services enabled, like it comes from github. Not using SSL09:40
mgoddardghorio: are you using the tagged release of kolla-ansible from PyPI, or the stable/rocky branch?09:41
openstackgerritMerged openstack/kolla-ansible master: Support custom monasca-notification templates  https://review.openstack.org/60899109:41
mgoddardghorio: there might be fixes on the branch09:41
egonzalezghorio could you try running this commands from the horizon container? https://github.com/openstack/kolla/blob/master/docker/horizon/extend_start.sh#L343 if using binary images are the 2 previous commands09:41
*** chrizl has quit IRC09:41
egonzalezghorio might be related to this as well https://github.com/openstack/kolla/commit/21065510e3a7f00c2f6bc48f83b78dcfa8775e8109:42
ghorioegonzalez: I am using stable/rocky branch for kolla-ansible and ubuntu-binary images. I will go through your suggestions and let you know, thanks!09:43
*** chrizl has joined #openstack-kolla09:43
*** chrizl has quit IRC09:45
*** chrizl has joined #openstack-kolla09:46
ghorioegonzalez: I have run both commands for binary on all 3 horizon containers (running multinode setup) and its now stuck for some time on Compressing... https://pastebin.com/y4uDEzqP09:51
ghorioegonzalez: ok now it finished - Compressed 8 block(s) from 4 template(s) for 3 context(s).09:52
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: [wip] Test zun container creation in gates  https://review.openstack.org/61734109:53
egonzalezghorio works the CSS now?09:54
*** gfidente has quit IRC09:54
ghorioegonzalez: still compressing on 2 other containers, will wait for finishing09:55
*** gfidente has joined #openstack-kolla09:57
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: DNM: Test Opendaylight  https://review.openstack.org/59861210:08
*** cah_link has joined #openstack-kolla10:14
*** pvc has quit IRC10:16
*** cah_link has quit IRC10:18
openstackgerritMerged openstack/kolla stable/pike: Change secret var in publish.yml job / fix collectd build  https://review.openstack.org/61685810:22
*** hamzaachi has quit IRC10:26
*** k_mouza has quit IRC10:27
*** k_mouza has joined #openstack-kolla10:28
*** tolisbar has joined #openstack-kolla10:33
*** k_mouza has quit IRC10:33
*** gfidente has quit IRC10:39
*** gfidente has joined #openstack-kolla10:40
openstackgerritcaoyuan proposed openstack/kolla-ansible master: [WIP]Add neutron metering role into kolla-ansible  https://review.openstack.org/45700610:40
openstackgerritMerged openstack/kolla-ansible master: Fix "Error: Connection activation failed: Failed to find a compatible device for this connection"  https://review.openstack.org/61896010:41
ktibiHi guys, I try to deploy kolla with vagrant but without success... http://paste.openstack.org/show/735715/10:42
*** chrizl has quit IRC10:49
*** sshnaidm has quit IRC10:50
*** k_mouza has joined #openstack-kolla10:51
*** chrizl has joined #openstack-kolla10:54
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: Bind ODL ports to specific IP address  https://review.openstack.org/60576710:56
*** gfidente has quit IRC10:59
*** Chaserjim has joined #openstack-kolla11:01
*** Chaserjim has quit IRC11:06
*** admin0 has quit IRC11:09
*** chrizl has quit IRC11:10
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: Suppress log copy output in gates  https://review.openstack.org/61897311:14
*** chrizl has joined #openstack-kolla11:14
*** chrizl has quit IRC11:22
*** chrizl has joined #openstack-kolla11:23
*** murphyslawbbs has joined #openstack-kolla11:24
*** chrizl has quit IRC11:24
*** murphyslawbbs has quit IRC11:25
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: DNM: Test Opendaylight  https://review.openstack.org/59861211:26
*** k_mouza has quit IRC11:26
*** k_mouza has joined #openstack-kolla11:29
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: DNM: Test Opendaylight  https://review.openstack.org/59861211:30
*** k_mouza has quit IRC11:34
*** k_mouza has joined #openstack-kolla11:34
openstackgerritKien Nguyen proposed openstack/kolla master: Add Masakari container images  https://review.openstack.org/61546911:40
openstackgerritKien Nguyen proposed openstack/kolla-ansible master: Add Ansible Role Masakari  https://review.openstack.org/61571511:41
openstackgerritKien Nguyen proposed openstack/kolla-ansible master: [DNM]Testing Masakari role in gate  https://review.openstack.org/61605011:41
*** sshnaidm has joined #openstack-kolla11:41
openstackgerritKien Nguyen proposed openstack/kolla-ansible master: Replace merge_configs with merge_yaml  https://review.openstack.org/61406711:45
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: Test zun container creation in gates  https://review.openstack.org/61734111:47
*** gkadam has quit IRC11:56
*** Luzi has quit IRC12:07
*** janki has quit IRC12:10
*** gkadam has joined #openstack-kolla12:14
*** gfidente has joined #openstack-kolla12:22
*** Luzi has joined #openstack-kolla12:22
*** murphyslawbbs has joined #openstack-kolla12:40
*** murphyslawbbs has quit IRC12:41
*** ocaner has joined #openstack-kolla12:42
*** ocaner has quit IRC12:42
*** ocaner has joined #openstack-kolla12:44
gary_perkinsHi! I have a Queens deployment in production. I want to change a policy attribute in Nova. Specifically, "os_compute_api:servers:create:zero_disk_flavor". From the kolla-ansible documentation, I should provide a complete policy.json file with my changed attribute in /etc/kolla/config/nova/policy.json then kolla-ansible reconfigure. The sample policy.json I have from https://docs.openstack.org/nova/queens/configuration/sample-policy.html has12:45
gary_perkins all attributes commented out. My question is: can I just uncomment the attribute I want to change? Would kolla-ansible use it's current defaults for the other commented attributes? or would I need to uncomment all the attributes?12:45
*** k3nny0ne has joined #openstack-kolla12:58
*** jrist has quit IRC13:11
*** jrist has joined #openstack-kolla13:13
egonzalezgary_perkins your policy.json file will override defaults nova policy, will need to have every attribute enabled by default as well your owns13:18
*** k_mouza has quit IRC13:19
gary_perkinsthanks egonzalez, I'll do that :)13:19
*** k_mouza has joined #openstack-kolla13:19
*** k_mouza has quit IRC13:23
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: Fix fluentd input log parser for OpenDaylight  https://review.openstack.org/61899913:26
*** k_mouza has joined #openstack-kolla13:26
*** k_mouza_ has joined #openstack-kolla13:30
openstackgerritEduardo Gonzalez proposed openstack/kolla-ansible master: DNM: Test Opendaylight  https://review.openstack.org/59861213:31
*** k_mouza has quit IRC13:32
*** cah_link has joined #openstack-kolla13:33
openstackgerritMark Goddard proposed openstack/kolla-ansible master: WIP: Add CI job for ironic  https://review.openstack.org/56882913:37
openstackgerritcaoyuan proposed openstack/kolla-ansible master: Add neutron metering role into kolla-ansible  https://review.openstack.org/45700613:38
*** devep has joined #openstack-kolla13:39
*** cah_link has quit IRC13:42
*** skramaja has quit IRC13:43
*** cah_link has joined #openstack-kolla13:59
*** cah_link has quit IRC14:04
*** pbourke has quit IRC14:06
*** pbourke has joined #openstack-kolla14:08
mchlumskymgoddard, good morning!14:08
mgoddardmchlumsky: hi14:08
openstackgerritcaoyuan proposed openstack/kolla-ansible master: Add neutron metering role into kolla-ansible  https://review.openstack.org/45700614:09
mchlumskymgoddard, so should we go with a bp or a bug for https://review.openstack.org/#/c/618029/ ?14:09
mgoddardmchlumsky: it seems more like a feature to me, but once we start down that route it makes me think we need documentation about switching to kolla-ansible14:11
mgoddardthe new flags could be part of those docs14:11
mgoddardso I suppose the question is whether you are willing/able to write those docs :)14:11
openstackgerritMark Goddard proposed openstack/kolla-ansible master: WIP: Add CI job for ironic  https://review.openstack.org/56882914:14
openstackgerritcaoyuan proposed openstack/kolla-ansible master: Add neutron metering role into kolla-ansible  https://review.openstack.org/45700614:19
*** k_mouza has joined #openstack-kolla14:20
*** k_mouza_ has quit IRC14:23
openstackgerritMark Goddard proposed openstack/kolla-ansible master: Add jmespath to requirements.txt  https://review.openstack.org/61900614:24
*** kiennt26 has joined #openstack-kolla14:26
openstackgerritKien Nguyen proposed openstack/kolla-ansible master: [DNM]Testing Masakari role in gate  https://review.openstack.org/61605014:31
*** emccormick has joined #openstack-kolla14:43
*** munimeha1 has joined #openstack-kolla14:53
ivveegonzalez: now i am!14:55
*** ktibi has quit IRC14:55
ghorioegonzalez: I have tried out compressing on all horizon nodes and as well as re-deployed vagrant with checkedout commit you pasted here earlier, still nothing, same errors on missing css and js on horizon logs https://pastebin.com/hfPi0ssR14:56
ghoriohorizon containers*14:56
mchlumskymgoddard, so we're talking about turning spsurya's presentation (https://youtu.be/HKJd5EZmaLs) into a document?14:57
*** kiennt26 has quit IRC14:58
openstackgerritcaoyuan proposed openstack/kolla-ansible master: Update image's tag to master rather than 6.0.0  https://review.openstack.org/58364115:00
*** ktibi has joined #openstack-kolla15:02
mgoddardmchlumsky: interesting: haven't seen that video15:07
mgoddardare you using https://github.com/confi-surya/kollaMigrator?15:11
*** Luzi has quit IRC15:14
*** ktibi has quit IRC15:17
*** ocaner has quit IRC15:19
*** gfidente has quit IRC15:21
*** k_mouza_ has joined #openstack-kolla15:25
*** gfidente has joined #openstack-kolla15:26
openstackgerritMark Goddard proposed openstack/kolla-ansible master: Support Ironic Inspector dnsmasq PXE filter  https://review.openstack.org/58791515:26
*** k_mouza has quit IRC15:29
mchlumsky@mgoddard, no. we dont use ceilometer15:35
mgoddardI don't know if we necessarily need to describe the entire process of migrating to kolla, but given that we are adding options that help, they ought to be documented15:36
mgoddardif we have a page in the docs, we can always improve it later15:36
openstackgerritcaoyuan proposed openstack/kolla-ansible master: Add neutron metering role into kolla-ansible  https://review.openstack.org/45700615:37
*** k_mouza_ has quit IRC15:39
*** k_mouza has joined #openstack-kolla15:40
*** dave-mccowan has joined #openstack-kolla15:41
mchlumskymgoddard, I'm willing. We are currently migrating to kolla-ansible from an rdo-based installation so it's quite fresh.15:41
openstackgerritMerged openstack/kolla-ansible stable/queens: Restructure the vpnaas roles  https://review.openstack.org/61351915:41
*** hamzaachi has joined #openstack-kolla15:43
*** k_mouza has quit IRC15:44
*** ktibi has joined #openstack-kolla15:45
*** k_mouza has joined #openstack-kolla15:45
mgoddardmchlumsky: great, I think it could be useful for people in a similar position15:48
mgoddardso, back to bug/bp: please create a general migration bp that covers as much of this as you are happy to take on15:49
openstackgerritMark Goddard proposed openstack/kolla-ansible master: Load configfs kernel module for iscsid  https://review.openstack.org/61902615:53
*** itlinux has quit IRC15:57
*** ocaner has joined #openstack-kolla16:03
*** tis_at_teuto_net has quit IRC16:03
openstackgerritMark Goddard proposed openstack/kolla-ansible master: WIP: Add CI job for ironic  https://review.openstack.org/56882916:04
mchlumsky@mgoddard, sounds good.16:04
*** k_mouza has quit IRC16:11
*** Chaserjim has joined #openstack-kolla16:12
*** hamzy has quit IRC16:14
*** Chaserjim has quit IRC16:17
*** k_mouza has joined #openstack-kolla16:18
egonzalezivve is mistral not working on anything or while creating some task in some other service like nova?16:21
egonzalezivve i mean mistral service-list works?16:22
egonzalezsome custom config?16:22
ivveusing: openstack workflow list didn't work16:22
*** ocaner has quit IRC16:22
ivve(using python-mistralclient)16:23
ivveand via horizon i got the same error16:24
ivve--insecure directly to the hosts didn't work either16:24
*** devep_ has joined #openstack-kolla16:34
*** devep has quit IRC16:36
*** itlinux has joined #openstack-kolla16:43
*** hamzaachi has quit IRC16:47
*** gkadam has quit IRC16:50
*** ktibi has quit IRC17:07
*** hamzaachi has joined #openstack-kolla17:10
*** ktibi has joined #openstack-kolla17:11
*** Chaserjim has joined #openstack-kolla17:12
*** ktibi has quit IRC17:14
*** Chaserjim has quit IRC17:17
*** devep_ has quit IRC17:21
*** tolisbar has quit IRC17:22
*** chrizl has joined #openstack-kolla17:24
*** chrizl has quit IRC17:29
*** chrizl has joined #openstack-kolla17:34
*** shardy has quit IRC17:36
*** chrizl has quit IRC17:38
*** chrizl has joined #openstack-kolla17:39
*** chrizl has quit IRC17:47
*** chrizl has joined #openstack-kolla17:48
ivveegonzalez: did my answers help?17:49
ivveegonzalez: i mean didn't work is a pretty bad answer.. i guess. the correct one would be running "openstack workflow list" while using self-signed certs and tls enabled mistral api did not accept ssl connections either via haproxy nor directly. i also did some openssl debugging but to be honest i didn't become much wiser17:51
ivvemy first though was that it tried to verify and that insecure flags weren't working but while debugging with openssl the answers looked a bit different from other api services. certs and ssl/tls isn't my strong suite17:52
egonzalezfrom kolla, mistral is not using ssl at all, haproxy does ssl termination17:52
ivvei ran all involved services in debugmode but couldn't really correlate the issue.. at one point i thought haproxy was at fault17:53
ivveyes, i think thats how i wrote the bug17:53
ivvethat kolla-ansible sets it up as ssl, but kolla setup the container to not work with ssl17:53
ivvei mean if tls is "activated" through globals.yml17:54
ivveso my "solution" was to remove ssl in haproxy and recreate the endpoint to non-ssl17:54
egonzalezivve if you point to the internal endpoint, mistral works?17:54
ivvebut then again, i want ssl :D17:54
ivveassuming haproxy does point to internal, yes17:54
egonzalezhaproxy have 2 endpoint, one internal without ssl and one public with ssl17:55
ivvei mean i haven't tried, but basically it should, ssl isn't setup in mistral so it should only answer to non-ssl traffic17:55
ivveaye, im aware17:55
ivveim fairly sure it works on the internal.. i mean it should be the exact same thing17:56
*** chrizl has quit IRC17:57
ivvethe only difference is external endpoint https vs http so pointing to it another ip shouldn't make any difference, well of the haproxy settings on forwarding is without ssl unless you have already tampered with it17:57
ivvebut what i did was change the endpoint to external ip without ssl and removed the ssl appended config to the haproxy part17:58
ivve(basically so that horizon would work)17:58
*** tolisbar has joined #openstack-kolla17:59
ivvei can run reconfigure and verify it if you think its important :)17:59
*** dougsz has quit IRC18:00
egonzalezivve maybe something like secure_proxy_ssl_headers option18:01
egonzalezis missing in mistral. conf18:01
ivveegonzalez: sounds interesting18:01
ivvei really tried to look for more documentation regarding mistral.conf and asked in channels but i couldn't find anything other than what i pasted in the bug18:02
ivveand i tried adding the [api] and [ssl] settings with the same certs that haproxy uses but with no avail18:02
ivveso you're saying that secure_proxy_ssl_headers is a mistral.conf option? in which stanza?18:03
egonzalezivve just random idea, nova conf have it under wsgi section18:04
ivvealrite18:04
egonzalezbut mistral is not using wsgi yet18:05
ivvetbh one thing i didn't try was download latest from git and run the tox genconfig18:05
ivvei will do that, just gonna spawn an instnace18:05
*** k_mouza_ has joined #openstack-kolla18:07
*** k_mouza has quit IRC18:10
*** Sravan has joined #openstack-kolla18:10
ivvealmost there :D18:10
*** k_mouza_ has quit IRC18:12
*** Sravan_ has joined #openstack-kolla18:12
*** Sravan_ has quit IRC18:13
*** Sravan_ has joined #openstack-kolla18:13
*** Chaserjim has joined #openstack-kolla18:13
ivverepos so slow18:14
*** Sravan has quit IRC18:15
egonzalezivve deploying now18:15
ivvekk18:15
ivvehmm interface_driver is no longer default in an openstack-ansible deployment. odd18:16
ivvein neutron18:16
ivvehow silly :D18:17
*** Chaserjim has quit IRC18:18
openstackgerritMerged openstack/kolla-ansible master: Suppress log copy output in gates  https://review.openstack.org/61897318:21
*** chrizl has joined #openstack-kolla18:22
*** jrist has quit IRC18:22
*** tolisbar has quit IRC18:26
*** chrizl has quit IRC18:26
*** chrizl has joined #openstack-kolla18:27
ivvethis could be something18:29
ivveunder [ssl] stanza there is ssl versions18:29
ivveand under [api] there is: #enable_ssl_api = false18:32
ivvei've tried this but only in combination with adding the certs in [ssl], not by itself. which might have been a stupid test18:33
ivvewell, the insecure flags are only listed under keystone18:35
ivvebut thats ok i guess, its just listening on api18:36
egonzalezivve btw, master or previous releases, haproxy config changed18:40
*** chrizl has quit IRC18:40
*** chrizl has joined #openstack-kolla18:41
ivvei was testing rocky18:41
egonzalezivve as for example most of the headers part and tls v 1.1 was disabled18:41
*** devep has joined #openstack-kolla18:42
ivvei can check my current version18:42
ivve(of haproxy)18:42
egonzalezivve in rocky only the tls v 1.1 changed (except added new services)18:43
egonzalezivve have you tried with export MISTRALCLIENT_INSECURE=True18:43
ivveyes18:44
ivvethe rocky (kolla-ansible) doesn't add any haproxy header options at all18:44
* egonzalez just saying random ideas until deployment finish18:44
ivvei have tried the two most common header options18:45
ivve(from other service-configs)18:45
ivveyeah :)18:45
ivvei thought about the mistralclient being broken as well18:45
egonzalezivve this are what master is adding now http://paste.openstack.org/show/735828/18:45
ivvehttp-request del-header X-Forwarded-Proto + http-request set-header X-Forwarded-Proto https if { ssl_fc }18:46
ivvei have tested these together and the first one separately18:46
ivvewill confirm, sec18:46
*** pcaruana has quit IRC18:47
*** chrizl has quit IRC18:50
*** chrizl has joined #openstack-kolla18:59
egonzalezivve in master, after exporting MISTRALCLIENT_INSECURE=True works19:00
ivveah19:00
ivvemaster mistralclient or just mistral in general?19:00
ivve3.7.0 i think is the version i used19:00
ivve(cliet)19:00
ivveclient*19:00
egonzalezivve  3.6.0 will try to use 3.7.019:01
ivveaha, i would try to deploy just master mistral container into my rocky deploy19:01
ivvecould*19:01
egonzalezstill working with 3.719:03
egonzalezusing openstack client or mistralclient?19:03
*** chrizl has quit IRC19:04
*** jrist has joined #openstack-kolla19:10
egonzalezivve nervermind, was using internal interface19:17
ivvepython-openstackclient no longer contains workflow commands, its separated into python-mistralclient19:17
ivveor well, python-mistralclient is sortofa plugin i guess19:18
*** chrizl has joined #openstack-kolla19:18
ivveroughly speaking :)19:18
egonzalezyep, need to install mistralclient to commands appear in osc19:22
egonzalezdoenst works for me with openstackclient19:22
*** chrizl has quit IRC19:22
*** zul has quit IRC19:22
egonzalezit does with mistralclient and with mistral_insecure19:23
*** hamzy has joined #openstack-kolla19:25
*** jrist has quit IRC19:27
*** chrizl has joined #openstack-kolla19:27
*** sshnaidm has quit IRC19:32
egonzalezivve i think is a bug in mistralclient<->openstackclient19:32
ivveoh19:32
ivveversions that mismatch?19:32
egonzalezivve using latest for both within a virtualenv pip install -U python-mistralclient --no-cache19:34
ivvewith MISTRALCLIENT_INSECURE=True set in env?19:35
openstackgerritMark Goddard proposed openstack/kolla-ansible master: WIP: Support Docker CE in bootstrap-servers  https://review.openstack.org/58261219:35
ivveinside mistral-api19:35
ivveguess i could build one to check19:35
*** chrizl has quit IRC19:36
*** sshnaidm has joined #openstack-kolla19:40
*** sshnaidm is now known as sshnaidm|afk19:40
mlozaHello, I have deployed kolla-ansible all-in-one version rocky and when I try to visit the horizon page, the css and js are missing.19:41
mlozaI can't seem to figure out how to fix this19:42
egonzalezivve tried a fresh env, still not working with osc http://paste.openstack.org/show/735834/19:45
egonzalezother services works fine, just mistral not19:45
ivve:(19:46
ivveonce i get my domain up n running i could try a proper certificate19:50
ivvejust to see if its a pure verification error or something else19:50
*** tolisbar has joined #openstack-kolla19:51
*** chrizl has joined #openstack-kolla19:52
egonzalezivve added mistralclient as affected project to the bug, lets wait to some answer from them19:55
ivveegonzalez: ok, thanks a bunch!19:56
ivvein the meantime there is the workaround without tls19:57
egonzalezmistralclient works fine, can keep ssl but not using openstackclient19:58
egonzalezmaybe adding os_cacert env also works19:59
*** chrizl has quit IRC20:02
*** tolisbar1 has joined #openstack-kolla20:06
*** chrizl has joined #openstack-kolla20:06
*** tolisbar has quit IRC20:10
*** tolisbar1 is now known as tolisbar20:10
*** chrizl has quit IRC20:20
*** jrist has joined #openstack-kolla20:23
*** Chaserjim has joined #openstack-kolla20:23
*** chrizl has joined #openstack-kolla20:25
*** chrizl has quit IRC20:29
*** chrizl has joined #openstack-kolla20:30
*** murphyslawbbs has joined #openstack-kolla20:36
*** itlinux has quit IRC20:39
*** Chaserjim has quit IRC20:41
*** murphyslawbbs has quit IRC20:42
*** chrizl has quit IRC20:48
*** chrizl has joined #openstack-kolla20:57
*** chrizl has quit IRC21:02
*** tolisbar has quit IRC21:08
*** itlinux has joined #openstack-kolla21:13
*** hamzaachi has quit IRC21:21
*** dave-mccowan has quit IRC21:28
*** Chaserjim has joined #openstack-kolla21:31
*** chrizl has joined #openstack-kolla21:40
*** hamzy has quit IRC21:42
*** chrizl has quit IRC21:48
*** chrizl has joined #openstack-kolla21:55
*** k_mouza has joined #openstack-kolla21:57
*** chrizl has quit IRC22:00
*** mchlumsky has quit IRC22:00
*** chrizl has joined #openstack-kolla22:00
*** k_mouza has quit IRC22:01
*** devep has quit IRC22:04
*** chrizl has quit IRC22:04
*** chrizl has joined #openstack-kolla22:09
*** mchlumsky has joined #openstack-kolla22:11
*** chrizl has quit IRC22:18
*** owalsh has quit IRC22:23
*** chrizl has joined #openstack-kolla22:24
*** gfidente has quit IRC22:28
*** Chaserjim has quit IRC22:33
*** chrizl has quit IRC22:37
*** owalsh has joined #openstack-kolla22:39
*** chrizl has joined #openstack-kolla22:42
*** itlinux has quit IRC22:44
*** gfidente has joined #openstack-kolla22:44
*** chrizl has quit IRC22:46
*** owalsh has quit IRC22:49
*** munimeha1 has quit IRC22:49
*** chrizl has joined #openstack-kolla22:56
*** owalsh has joined #openstack-kolla23:02
*** chrizl has quit IRC23:05
*** chrizl has joined #openstack-kolla23:05
*** ivve has quit IRC23:08
*** chrizl has quit IRC23:19
*** chrizl has joined #openstack-kolla23:24
*** chrizl has quit IRC23:28
*** chrizl has joined #openstack-kolla23:33
*** chrizl has quit IRC23:38

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!