Friday, 2017-01-20

*** makowals has quit IRC00:01
*** dminer has quit IRC00:02
*** VW has quit IRC00:10
*** marst has quit IRC00:12
*** ducttape_ has joined #openstack-operators00:20
*** chyka has quit IRC00:31
*** ducttape_ has quit IRC00:31
*** chyka has joined #openstack-operators00:32
*** B_Smith has quit IRC00:35
*** chyka has quit IRC00:36
*** B_Smith has joined #openstack-operators00:37
*** bradjones has quit IRC00:55
*** mriedem has joined #openstack-operators00:58
*** B_Smith has quit IRC01:11
*** makowals has joined #openstack-operators01:25
*** VW has joined #openstack-operators01:38
*** saneax-_-|AFK is now known as saneax01:43
*** B_Smith has joined #openstack-operators01:49
*** ducttape_ has joined #openstack-operators01:55
*** ducttape_ has quit IRC01:59
*** ducttape_ has joined #openstack-operators02:13
*** VW has quit IRC02:29
*** Apoorva has quit IRC02:36
*** Oku_OS is now known as Oku_OS-away02:46
*** VW has joined #openstack-operators02:53
*** ducttape_ has quit IRC02:54
*** saneax is now known as saneax-_-|AFK03:24
*** sdake has joined #openstack-operators03:30
*** Apoorva has joined #openstack-operators03:32
*** armax has joined #openstack-operators03:40
*** saneax-_-|AFK is now known as saneax03:55
*** vijaykc4 has joined #openstack-operators04:15
*** liverpooler has quit IRC04:23
*** Apoorva has quit IRC04:32
*** sdake_ has joined #openstack-operators04:35
*** sdake has quit IRC04:39
*** vijaykc4 has quit IRC04:52
*** catinthe_ has quit IRC04:54
*** sdake_ is now known as sdake04:55
*** catintheroof has joined #openstack-operators05:02
*** VW has quit IRC05:02
*** catintheroof has quit IRC05:14
*** B_Smith has quit IRC05:19
*** slaweq has quit IRC05:24
*** slaweq has joined #openstack-operators05:26
*** bsilverman_ has quit IRC05:29
*** bsilverman_5 has joined #openstack-operators05:29
*** mriedem has quit IRC05:32
*** B_Smith has joined #openstack-operators05:37
*** B_Smith has quit IRC05:44
*** catintheroof has joined #openstack-operators05:46
*** B_Smith has joined #openstack-operators05:55
*** B_Smith has quit IRC06:02
*** B_Smith has joined #openstack-operators06:07
*** sticker has quit IRC06:12
*** crenguta has joined #openstack-operators06:14
*** armax has quit IRC06:19
*** armax has joined #openstack-operators06:20
*** armax has quit IRC06:20
*** mriedem has joined #openstack-operators06:29
*** jproulx has quit IRC06:35
*** furlongm_ has quit IRC06:51
*** B_Smith has quit IRC07:04
*** Oku_OS-away is now known as Oku_OS07:17
*** B_Smith has joined #openstack-operators07:29
*** pcaruana has joined #openstack-operators07:43
*** dewanee_ has quit IRC07:45
*** mj_richardson has joined #openstack-operators07:47
*** dewanee has joined #openstack-operators07:47
*** melwitt_ has joined #openstack-operators07:48
*** tdasilva has quit IRC07:51
*** melwitt has quit IRC07:51
*** mj_richa1dson has quit IRC07:51
*** tdasilva has joined #openstack-operators07:51
*** tesseract has joined #openstack-operators08:05
*** paramite has joined #openstack-operators08:09
*** klindgren has quit IRC08:27
*** klindgren has joined #openstack-operators08:27
*** zioproto has joined #openstack-operators08:50
*** bjolo has joined #openstack-operators08:53
*** crenguta has quit IRC08:56
*** Apoorva has joined #openstack-operators08:56
*** crenguta has joined #openstack-operators08:58
*** Apoorva has quit IRC08:58
*** vijaykc4 has joined #openstack-operators09:01
*** derekh has joined #openstack-operators09:15
*** racedo has quit IRC09:15
*** racedo has joined #openstack-operators09:18
*** timburke has quit IRC09:32
*** timburke has joined #openstack-operators09:35
*** crenguta has quit IRC09:37
*** crenguta has joined #openstack-operators09:39
*** sdake has quit IRC09:52
*** sdake has joined #openstack-operators09:53
*** vijaykc4 has quit IRC10:13
*** saneax is now known as saneax-_-|AFK10:31
*** vijaykc4 has joined #openstack-operators10:35
*** electrofelix has joined #openstack-operators10:59
*** ducttape_ has joined #openstack-operators11:29
*** vijaykc4 has quit IRC11:30
*** ducttape_ has quit IRC11:31
*** pcaruana has quit IRC11:59
*** saneax-_-|AFK is now known as saneax12:02
*** B_Smith has quit IRC12:03
*** pcaruana has joined #openstack-operators12:06
*** cdelatte has joined #openstack-operators12:08
*** bjolo has quit IRC12:14
*** bjolo_ has joined #openstack-operators12:14
*** sdake_ has joined #openstack-operators12:18
*** sdake has quit IRC12:18
*** catinthe_ has joined #openstack-operators12:32
*** simon-AS559 has joined #openstack-operators12:33
*** catintheroof has quit IRC12:33
*** vijaykc4 has joined #openstack-operators12:38
*** vijaykc4 has quit IRC12:55
*** liverpooler has joined #openstack-operators13:08
*** dminer has joined #openstack-operators13:08
*** ducttape_ has joined #openstack-operators13:11
*** vijaykc4 has joined #openstack-operators13:11
*** sdake has joined #openstack-operators13:15
*** sdake_ has quit IRC13:17
*** ducttape_ has quit IRC13:21
*** ducttape_ has joined #openstack-operators13:24
*** B_Smith has joined #openstack-operators13:29
*** ducttape_ has quit IRC13:34
*** bradjones has joined #openstack-operators13:38
*** bradjones has quit IRC13:38
*** bradjones has joined #openstack-operators13:38
shewlessHello. Still working on getting my openstack services behind a haproxy reverse ssl proxy. I got keystone to work but using glance I'm receiving a 502 error. Just wondering if anyone could look at my config and offer some guidance?13:44
*** paramite has quit IRC13:47
*** vijaykc4 has quit IRC13:54
mnasersounds like a haproxy configuration problem13:59
*** dminer has quit IRC14:00
shewlessmnaser I think it just might be. Would you mind having a quick peek?14:02
shewlesshttp://paste.ubuntu.com/2383342214:02
shewlesskeystone works. Glance doesn't.  The other thing i notice is that I have to stop glance, then start haproxy, then start glance, or else haproxy complains it can't bind 0.0.0.0:9292. But I specifially set the bind_host in glance-api.conf to 127.0.0.1 :s14:03
*** sdake_ has joined #openstack-operators14:06
*** sdake has quit IRC14:09
*** electrofelix has quit IRC14:13
*** electrofelix has joined #openstack-operators14:15
erhudyah, i do recall some issues with glance racing to bind everything14:16
erhudythis is probably my biggest complaint with debian/ubuntu, that services start automatically with default configurations14:17
*** saneax is now known as saneax-_-|AFK14:18
*** electrofelix has quit IRC14:22
shewlesserhudy: I don't think that's the problem because it's reproducible (it's not just the first time glance starts)14:25
shewlesserhudy: any hints on my haproxy file? That 502 error is weird14:26
*** catintheroof has joined #openstack-operators14:33
*** catinthe_ has quit IRC14:36
shewlessThis looks relavent: If HTTP request is larger than (tune.bufsize - tune.maxrewrite), haproxy will return HTTP 400 (Bad Request) error. Similarly if an HTTP response is larger than this size, haproxy will return HTTP 502 (Bad Gateway).14:39
shewlesswill try and tune that14:39
yankcrimeshewless: i'd look in the logs for glance-api and glance-registry, chances are they're throwing some kind of exception which will give you a clue as to where to look next14:39
shewlesswell.. will try and figure out how to allow big http responses14:39
*** zeih has joined #openstack-operators14:40
erhudylet me look at how we have glance configured14:40
erhudythough i don't think we're doing anything out of the ordinary with it14:41
erhudynope, using the same config for glance-api as for all the other APIs, so maybe it's something in our global settings14:43
*** bjolo_ has quit IRC14:43
shewlessyankcrime: no glance errors14:44
shewlesserhudy: thanks for checking!14:44
shewlesserhudy: I'm most concerned about he haproxy config. I think I'm missing something there14:44
erhudyhttps://github.com/bloomberg/chef-bcpc/blob/master/cookbooks/bcpc/templates/default/haproxy-head.cfg.erb is the template for our haproxy setup14:45
yankcrimeshewless: haproxy's status OK for those services?14:45
yankcrimeshewless: entries in the service catalogue all present and correct?14:45
*** B_Smith has quit IRC14:49
shewlessyankcrime: I'm just using haproxy as a reverse proxy atm (no state checking) but the service is running okay and working for keystone. THe glance entries exist in the service catalog just find and dandy14:51
shewlesserhudy: thanks for the cfg reference! I'm not doing any loadbalancing yet so I'm trying to figure out which parts are relevant for me.14:51
*** zeih has quit IRC14:53
*** ducttape_ has joined #openstack-operators14:53
*** melwitt_ is now known as melwitt14:55
yankcrimeshewless: does glance-api work locally, at least for just a simple GET?14:56
yankcrimeyou should see a response with some metadata around versioning etc.14:57
shewlessyankcrime: you may be onto something there14:59
shewlessI can't connect to http://127.0.0.1:929214:59
shewlessnot sure if I should be able to or not15:00
yankcrimeyou should15:00
yankcrimewell, depending on glance-api's configuration15:00
yankcrimeif you've configured it correctly to bind to the loopback interface, then you should be able to15:00
shewlessyes.. I just tried my production environment and it allows me to connect to port 929215:00
shewlessdamn. I wonder if glance works with bind_host = localhost15:01
s3an2shewless, try `lsof -i:9292` do you see the glance-api?15:01
shewlessor if I have to do 127.0.0.1 ?15:01
shewlesss3an2: nope15:01
shewlessthere's the problem15:01
shewlessbut why :)15:01
*** ducttape_ has quit IRC15:02
yankcrimebind_host definitely set in the right section and in the right file?15:02
* yankcrime mumbles something about configuration management15:02
shewlessoh my.. looks like "bind_host = 127.0.0.1" works better than "bind_host = localhost" in glance-api.conf15:02
yankcrimeodd - does 'localhost' not resolve to 127.0.0.1 ?15:03
shewlessyankcrime: it does! and I am using ansible.. just converting my "standalone" config to work behind a reverse proxy15:03
shewlessit used to say "::" which basically means 0.0.0.0 but also IPv6..15:04
*** B_Smith has joined #openstack-operators15:04
shewlessyankcrime a3an2: I think the problem is my haproxy.  I have it set to "bind 0.0.0.0:9292"15:06
shewlessBut I think that will include localhost15:06
yankcrimeah, yes15:06
shewlessso I guess I need to be more specific if I want to run haproxy on the same host as my services15:07
yankcrimeyup15:07
*** VW has joined #openstack-operators15:07
shewlessfor some reason apache with keystone doesn't seem to mind.. but glance is not happy15:07
*** jproulx has joined #openstack-operators15:07
*** VW has quit IRC15:20
*** VW has joined #openstack-operators15:21
*** TxGirlGeek has joined #openstack-operators15:23
*** ducttape_ has joined #openstack-operators15:29
mnasershewless keystone bind_host is ignored15:30
mnaserif youre using it with apache wsgi15:30
*** vijaykc4 has joined #openstack-operators15:30
shewlessmnaser... right but I have apache configured to listen on localhost.. just surprised it worked.15:32
mnaserbecause apache != glance/eventlet :)15:33
shewlessmnaser: okay fair enough15:33
shewlessI'm further along now but I'm receiving a 500 error now. I see this line and I wonder if haproxy doesn't know what to do with this "relative" path? "GET /v1/images/detail HTTP/1.1" 500 22815:34
s3an2shewless, haproxy will just forward that request on to the backend - Check the glance-api logs you should have a trace for that 50015:47
shewlesss3an2: thanks.. figured out the cause.. not sure the best way to solve it though15:51
shewlessin glance-api.conf: registry_host = 127.0.0.115:51
shewlessthis works.. but if registry_host is set to my "glance endpoint IP address"15:51
shewlessit doesn't work15:51
shewlessI think it's probably because it's not coming in as https15:52
shewlessI'm not sure if care... should I make the registry SSL? can I? how to?15:52
yankcrimeshewless: looks like you have already from the config you pasted earlier, i.e what you've defined for frontend ft_glance_registry15:53
*** crenguta has quit IRC15:54
shewlessyankcrime: it's not working. I think it assumes I'm coming in as https.. but whatever is hitting the glance-registry isn't https15:54
yankcrimeshewless: you probably need to set registry_client_protocol15:55
shewlessyankcrime: beauty! thanks!!15:55
shewlessI wonder what other random goodies I'll hit like that15:55
yankcrimethere's no end to openstack's "random goodies"15:56
shewless:D15:56
shewlesshuzzah.. glance works behind my ssl proxy (registry and all)15:57
shewlessyou guys rock15:57
shewlessnow for nova, neutron, heat! :S15:57
yankcrimeonto the easy stuff then! ;)15:59
*** VW_ has joined #openstack-operators16:01
*** vijaykc4 has quit IRC16:01
*** VW_ has quit IRC16:02
*** VW_ has joined #openstack-operators16:03
*** marst has joined #openstack-operators16:03
*** pcaruana has quit IRC16:03
*** VW_ has quit IRC16:03
*** VW has quit IRC16:04
*** VW has joined #openstack-operators16:04
*** armax has joined #openstack-operators16:14
*** hieulq_ has joined #openstack-operators16:15
*** sdake_ has quit IRC16:15
*** sdake has joined #openstack-operators16:16
*** sdake has quit IRC16:16
*** vijaykc4 has joined #openstack-operators16:16
*** sdake has joined #openstack-operators16:16
*** Oku_OS is now known as Oku_OS-away16:18
*** simon-AS559 has quit IRC16:19
*** zioproto has quit IRC16:23
*** Apoorva has joined #openstack-operators16:30
*** vijaykc4 has quit IRC16:31
*** sudipto has joined #openstack-operators16:32
*** sudipto_ has joined #openstack-operators16:32
*** hieulq_ has quit IRC16:32
*** chyka has joined #openstack-operators16:33
*** paramite has joined #openstack-operators16:43
*** Apoorva has quit IRC16:48
*** paramite has quit IRC16:50
*** B_Smith has quit IRC16:54
*** VW has quit IRC16:58
*** VW has joined #openstack-operators16:58
*** _ducttape_ has joined #openstack-operators16:59
*** derekh has quit IRC17:00
*** mriedem is now known as mriedem_afk17:00
*** ducttape_ has quit IRC17:02
*** B_Smith has joined #openstack-operators17:03
*** B_Smith has quit IRC17:09
*** _ducttape_ has quit IRC17:35
*** ducttape_ has joined #openstack-operators17:36
*** Apoorva has joined #openstack-operators17:50
*** B_Smith has joined #openstack-operators17:56
*** B_Smith has quit IRC18:01
*** B_Smith has joined #openstack-operators18:07
*** VW has quit IRC18:28
*** VW has joined #openstack-operators18:29
*** esmiurium has quit IRC18:40
*** sudipto has quit IRC18:41
*** sudipto_ has quit IRC18:41
*** esmiurium has joined #openstack-operators18:47
*** VW has quit IRC18:49
*** TxGirlGeek has quit IRC18:50
*** VW has joined #openstack-operators18:56
*** mriedem_afk is now known as mriedem19:00
*** VW has quit IRC19:01
*** B_Smith has quit IRC19:06
*** jproulx has quit IRC19:07
*** crenguta has joined #openstack-operators19:07
*** VW has joined #openstack-operators19:11
*** VW has quit IRC19:15
*** VW has joined #openstack-operators19:29
*** paramite has joined #openstack-operators19:31
*** tesseract has quit IRC19:32
*** jproulx has joined #openstack-operators19:35
*** chyka has quit IRC19:44
*** chyka has joined #openstack-operators19:45
*** chyka has quit IRC19:45
*** chyka has joined #openstack-operators19:45
*** slaweq_ has joined #openstack-operators19:47
*** sdake has quit IRC19:47
*** catinthe_ has joined #openstack-operators19:50
*** catintheroof has quit IRC19:53
*** TxGirlGeek has joined #openstack-operators19:59
*** TxGirlGeek has quit IRC19:59
*** TxGirlGeek has joined #openstack-operators20:00
*** jamesdenton has joined #openstack-operators20:01
*** jproulx has quit IRC20:01
*** jproulx has joined #openstack-operators20:05
*** TxGirlGeek has quit IRC20:06
*** racedo has quit IRC20:09
*** racedo has joined #openstack-operators20:10
*** crenguta has quit IRC20:13
*** crenguta has joined #openstack-operators20:15
*** esmiurium has quit IRC20:15
*** TxGirlGeek has joined #openstack-operators20:20
*** TxGirlGeek has quit IRC20:29
*** esmiurium has joined #openstack-operators20:31
*** Apoorva has quit IRC20:46
*** slaweq has quit IRC20:51
*** B_Smith has joined #openstack-operators20:51
*** crenguta has quit IRC20:51
*** slaweq_ has quit IRC20:51
*** slaweq_ has joined #openstack-operators20:52
*** slaweq has joined #openstack-operators20:53
*** crenguta has joined #openstack-operators20:53
*** B_Smith has quit IRC20:56
*** bsilverman_5 has quit IRC20:58
*** bsilverman_ has joined #openstack-operators20:58
*** dminer has joined #openstack-operators21:01
*** catinthe_ has quit IRC21:02
*** catintheroof has joined #openstack-operators21:03
*** crenguta has quit IRC21:03
*** crenguta has joined #openstack-operators21:05
*** catintheroof has quit IRC21:07
*** crenguta has quit IRC21:13
*** crenguta has joined #openstack-operators21:14
*** B_Smith has joined #openstack-operators21:23
*** Apoorva has joined #openstack-operators21:24
*** B_Smith has quit IRC21:27
*** B_Smith has joined #openstack-operators21:33
*** TxGirlGeek has joined #openstack-operators21:37
*** dminer has quit IRC21:38
*** crenguta has quit IRC21:45
*** klindgren_ has joined #openstack-operators21:46
*** _ducttape_ has joined #openstack-operators21:48
*** klindgren has quit IRC21:49
*** _ducttape_ has quit IRC21:49
*** dminer has joined #openstack-operators21:49
*** _ducttape_ has joined #openstack-operators21:50
*** ducttape_ has quit IRC21:51
*** dminer has quit IRC22:01
*** sdake has joined #openstack-operators22:03
*** B_Smith has quit IRC22:10
*** paramite has quit IRC22:12
*** dminer has joined #openstack-operators22:19
*** slaweq has quit IRC22:22
*** slaweq_ has quit IRC22:23
*** armax has quit IRC22:26
*** dminer has quit IRC22:27
*** dminer has joined #openstack-operators22:27
*** mistur has quit IRC22:34
*** jamesdenton has quit IRC22:35
*** VW_ has joined #openstack-operators22:39
*** mriedem has quit IRC22:39
*** VW has quit IRC22:42
*** armax has joined #openstack-operators22:42
*** VW_ has quit IRC22:43
*** mistur has joined #openstack-operators22:51
*** masber has quit IRC22:59
*** masber has joined #openstack-operators23:00
*** VW has joined #openstack-operators23:18
*** _ducttape_ has quit IRC23:22
*** VW has quit IRC23:24
*** TxGirlGeek has quit IRC23:27
*** armax has quit IRC23:41
*** dminer has quit IRC23:51

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!