| *** aaronsheffield has quit IRC | 00:17 | |
| *** openstackgerrit has quit IRC | 00:52 | |
| *** sgrasley_ has quit IRC | 01:33 | |
| *** sgrasley has quit IRC | 01:33 | |
| *** mbologna has joined #airshipit | 05:31 | |
| *** jamesgu has quit IRC | 06:15 | |
| *** mbologna has quit IRC | 06:59 | |
| *** mbologna has joined #airshipit | 07:00 | |
| *** mbologna has quit IRC | 08:24 | |
| *** mbologna has joined #airshipit | 08:27 | |
| *** georgk has joined #airshipit | 08:41 | |
| *** mbologna has quit IRC | 08:42 | |
| *** mbologna has joined #airshipit | 08:42 | |
| *** skatsaounis has quit IRC | 08:48 | |
| *** skatsaounis has joined #airshipit | 09:44 | |
| *** aagate has quit IRC | 09:55 | |
| *** adrianreza has joined #airshipit | 09:59 | |
| *** georgk has quit IRC | 10:07 | |
| *** fdegir has joined #airshipit | 10:10 | |
| *** georgk has joined #airshipit | 10:12 | |
| *** mbologna has quit IRC | 10:31 | |
| *** mbologna has joined #airshipit | 10:33 | |
| *** georgk has quit IRC | 10:47 | |
| *** openstackgerrit has joined #airshipit | 10:54 | |
| openstackgerrit | Smruti Soumitra Khuntia proposed openstack/airship-shipyard master: User context tracing through logging https://review.openstack.org/633873 | 10:54 |
|---|---|---|
| *** rihbb has joined #airshipit | 11:51 | |
| rihbb | Hi, I am facing problems in deploying the genesis node. The pod airship-ucp-barbican-barbican-test is constantly failing with the error "Failed to contact the endpoint at http://barbican.ucp.svc.cluster.local:80/v1 for discovery". Does anyone know what could be the causing the error?Thanks in advance. | 11:51 |
| rihbb | curl http://barbican.ucp.svc.cluster.local:80/v1/ yields the following: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 11:52 |
| *** roman_g has joined #airshipit | 11:53 | |
| *** georgk has joined #airshipit | 12:37 | |
| *** georgk has quit IRC | 12:43 | |
| rihbb | Hi, I am facing problems in deploying the genesis node. The pod airship-ucp-barbican-barbican-test is constantly failing with the error "Failed to contact the endpoint at http://barbican.ucp.svc.cluster.local:80/v1 for discovery". Does anyone know what could be the causing the error?Thanks in advance. | 12:43 |
| rihbb | curl http://barbican.ucp.svc.cluster.local:80/v1/ yields the following: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 12:44 |
| *** georgk has joined #airshipit | 12:47 | |
| *** stefanb has joined #airshipit | 13:15 | |
| *** stefanb has left #airshipit | 13:16 | |
| *** stefanb has joined #airshipit | 13:17 | |
| *** stefanb has left #airshipit | 13:20 | |
| *** aaronsheffield has joined #airshipit | 14:04 | |
| *** stefanb has joined #airshipit | 14:10 | |
| *** nishant_ has joined #airshipit | 14:45 | |
| *** sthussey has joined #airshipit | 14:47 | |
| openstackgerrit | Nishant Kumar proposed openstack/airship-specs master: (divingbell) Ansible framework https://review.openstack.org/628221 | 14:52 |
| roman_g | rihbb: Hello. Can you have a look if Keystone is running? | 15:25 |
| roman_g | post to paste.ubuntu.com output of `kubectl get pods --all-namespaces -o wide` | 15:26 |
| *** shoaibwr has joined #airshipit | 15:26 | |
| *** shoaibwr has quit IRC | 15:26 | |
| roman_g | and paste a link here | 15:26 |
| *** michael-beaver has joined #airshipit | 15:28 | |
| rihbb | roman_g: Thanks. Here is the output you requested: https://paste.ubuntu.com/p/dd7h5jzPv2/ | 15:51 |
| rihbb | Also, the logs of the barbican api show: ERROR barbican SSLError: SSL exception connecting to https://iam.d42.se:443/v3/auth/tokens: ("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",) | 15:55 |
| openstackgerrit | Pradeep Kumar proposed openstack/airship-promenade master: Create logging section in promenade.conf https://review.openstack.org/629154 | 16:07 |
| *** ianychoi has quit IRC | 16:08 | |
| *** jamesgu has joined #airshipit | 16:10 | |
| *** rihbb has quit IRC | 16:13 | |
| georgk | roman_g: on the same topic as rihbb, can SSL be disabled in a lab deployment? | 16:20 |
| *** stefanb has quit IRC | 16:48 | |
| *** aagate has joined #airshipit | 16:59 | |
| *** lemko has joined #airshipit | 17:05 | |
| *** michaelbeaver has joined #airshipit | 17:19 | |
| *** michael-beaver has quit IRC | 17:22 | |
| *** michaelbeaver has quit IRC | 17:30 | |
| *** michaelbeaver has joined #airshipit | 17:37 | |
| roman_g | Please, review: https://review.openstack.org/#/c/635507/ - Add cache for results of requests to quay.io in Updater tool; openstack/airship-treasuremap repository. Thank you. | 17:53 |
| roman_g | georgk: I think developers tried to eneble it everywhere, where possible. Because it's intended to be for production usage, and we (internally) have very strict policies (TLS everywhere, in short), which we believe are useful for being adopted as a new norm. | 18:01 |
| roman_g | *tried to enable | 18:01 |
| *** mbologna has quit IRC | 18:08 | |
| *** mbologna has joined #airshipit | 18:08 | |
| openstackgerrit | Merged openstack/airship-treasuremap master: Configure public network in Jenkinsfile https://review.openstack.org/636402 | 18:16 |
| *** shoaibwr has joined #airshipit | 18:26 | |
| *** dustinspecker has joined #airshipit | 18:26 | |
| shoaibwr | Hey guys, Is anyone online, was just hoping for a little bit of assitance regarding adding a change that I did in the CLI to the API ? Had a few questions about that, so if someone familiar with armada code can kindly let me know if they are online, i would really appreciate it. Thanks | 18:30 |
| *** michaelbeaver has quit IRC | 18:43 | |
| *** michael-beaver has joined #airshipit | 18:44 | |
| dwalt | shoaibwr: sorry for the delay, ask away :) | 19:02 |
| openstackgerrit | Roman Gorshunov proposed openstack/airship-deckhand master: Embed UML generated diagrams into docs https://review.openstack.org/635357 | 19:03 |
| *** mbologna has quit IRC | 19:05 | |
| *** mbologna has joined #airshipit | 19:06 | |
| *** JosW has joined #airshipit | 19:16 | |
| openstackgerrit | chittibabu proposed openstack/airship-pegleg master: Add CLI to create Salt Key https://review.openstack.org/636089 | 19:31 |
| *** JosW has quit IRC | 19:45 | |
| *** lemko has quit IRC | 19:49 | |
| openstackgerrit | chittibabu proposed openstack/airship-pegleg master: Add CLI to create Salt Key https://review.openstack.org/636089 | 19:52 |
| *** dustinspecker has quit IRC | 20:04 | |
| mattmceuen | rihbb / georgk: is the "iam.d42.se" keystone the keystone within your cluster, or an external keystone? I'm a little surprised to see that -- barbican would normally be accessing keystone using the cluster internal url, keystone-api.ucp.svc.cluster.local on port 5000 | 20:06 |
| mattmceuen | That might also be related to the certificate issue, since the host name may not be matching the corresponding certificate | 20:07 |
| mattmceuen | tracing back where that value comes from in, treasuremap: I believe this is what substitutes this value into the barbican chart: https://github.com/openstack/airship-treasuremap/blob/master/global/software/charts/ucp/deckhand/barbican.yaml#L30-L35 | 20:10 |
| mattmceuen | That gets pulled from the endpoint catalog at the site level: https://github.com/openstack/airship-treasuremap/blob/master/site/airship-seaworthy/software/config/endpoints.yaml#L58-L78 | 20:13 |
| mattmceuen | Can you share your correponding snippet of your endpoint catalog? | 20:14 |
| openstackgerrit | Roman Gorshunov proposed openstack/airship-deckhand master: Embed UML generated diagrams into docs https://review.openstack.org/635357 | 20:17 |
| mattmceuen | On a related note - looks like your barbican is configured to talk to keystone over SSL. Within-cluster SSL is not ready across all services within Airship -- we actually don't expect to be using SSL between Barbican and Keystone (yet). So I think we do need to adjust your endpoint definition to avoid SSL in those cases, like you were thinking. | 20:18 |
| openstackgerrit | Drew Walters proposed openstack/airship-treasuremap master: airskiff: Update OSH-infra pin https://review.openstack.org/636747 | 20:26 |
| dwalt | For those experiencing Helm/Tiller version mismatch issues in Airskiff, this patch corrects it: https://review.openstack.org/636747 | 20:28 |
| mattmceuen | nice dwalt - thanks. In the future I wonder if we can `yq` out the right osh-infra revision to use from the treasuremap yamls dynamically, so that it will always be in sync with whatever armada version is pulled in by the manifests | 20:40 |
| openstackgerrit | Merged openstack/airship-promenade master: Allow tls versions and ciphers to be configured https://review.openstack.org/634815 | 20:44 |
| dwalt | mattmceuen: I am all for that; it's easy to forget to update the version in the script. Although, I don't think that'll guarantee that the Armada/OSH-infra versions are in-sync for minikube/KubeADM deployments until Airskiff consumes the UCP globals and the Armada container image version in the bootstrap script matches the one in versions.yaml | 20:49 |
| *** roman_g has quit IRC | 20:51 | |
| openstackgerrit | Jared Miller proposed openstack/airship-treasuremap master: Disable weak tls ciphers for kube-apiserver https://review.openstack.org/636754 | 20:59 |
| *** aagate has quit IRC | 21:17 | |
| *** rmelero has joined #airshipit | 21:39 | |
| rmelero | hello gentlemens. trying to run airskiff, and getting this error | 21:40 |
| rmelero | debug_error_string = "{"created":"@1550093654.370425725","description":"Error received from peer","file":"src/core/lib/surface/call.cc","file_line":1017,"grpc_message":"incompatible versions client[2.12.1] server[v2.11.0]","grpc_status":2}" | 21:40 |
| rmelero | for the bootstrap-armada script. any ideas? | 21:40 |
| sthussey | @rmelero from @dwalt earlier "For those experiencing Helm/Tiller version mismatch issues in Airskiff, this patch corrects it: https://review.openstack.org/636747" | 21:41 |
| rmelero | you da man. fresh outta the oven I see :) | 21:43 |
| mattmceuen | Still in the oven even! :D Yup that should fix it - and agree dwalt, airskiff consuming treasuremap globals for bootstrap fits into that | 21:44 |
| openstackgerrit | Kaspars Skels proposed openstack/airship-in-a-bottle master: [wip] Potentially adding pre-genesis stage https://review.openstack.org/636767 | 22:05 |
| openstackgerrit | Kaspars Skels proposed openstack/airship-in-a-bottle master: [wip] Potentially adding pre-genesis stage https://review.openstack.org/636767 | 22:05 |
| *** openstackgerrit has quit IRC | 22:22 | |
| *** rmelero has quit IRC | 22:31 | |
| *** mbologna has quit IRC | 22:50 | |
| *** mbologna has joined #airshipit | 22:51 | |
| *** openstackgerrit has joined #airshipit | 22:59 | |
| openstackgerrit | Jared Miller proposed openstack/airship-treasuremap master: Disable weak tls ciphers for kube-apiserver https://review.openstack.org/636754 | 22:59 |
| *** michael-beaver has quit IRC | 23:17 | |
| georgk | mattmceuen, hi, thanks for the pointers. iam.d42.se is in fact the keystone of the cluster. we don't have an external keystone. | 23:58 |
| georgk | mattmceuen our endpoint config is unchanged compared to the seaworthy repo: https://hastebin.com/iqevaloviz.cpp | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!