*** strobelight has joined #openstack-ansible | 00:11 | |
*** strobelight_ has joined #openstack-ansible | 00:12 | |
*** strobelight is now known as Guest26081 | 00:12 | |
*** strobelight_ is now known as strobelight | 00:13 | |
*** Guest26081 has quit IRC | 00:16 | |
*** ianychoi has quit IRC | 00:18 | |
*** ianychoi has joined #openstack-ansible | 00:20 | |
*** gyee has quit IRC | 00:31 | |
*** strobelight has quit IRC | 02:04 | |
*** poopcat1 has joined #openstack-ansible | 02:28 | |
*** poopcat has quit IRC | 02:29 | |
*** goldenfri has quit IRC | 03:36 | |
*** gkadam has joined #openstack-ansible | 03:50 | |
*** gkadam has quit IRC | 03:50 | |
*** udesale has joined #openstack-ansible | 03:54 | |
*** poopcat1 has quit IRC | 04:01 | |
*** raukadah is now known as chandankumar | 04:02 | |
*** ChipOManiac has joined #openstack-ansible | 04:17 | |
*** cshen has joined #openstack-ansible | 04:19 | |
*** pcaruana has joined #openstack-ansible | 04:27 | |
*** jmccrory has quit IRC | 04:52 | |
*** jmccrory has joined #openstack-ansible | 05:04 | |
*** pcaruana has quit IRC | 05:12 | |
*** jmccrory has quit IRC | 05:14 | |
*** jmccrory has joined #openstack-ansible | 05:14 | |
*** pcaruana has joined #openstack-ansible | 05:25 | |
*** jmccrory has quit IRC | 05:41 | |
*** vnogin has joined #openstack-ansible | 05:41 | |
*** ChipOManiac has quit IRC | 05:43 | |
*** vnogin has quit IRC | 05:44 | |
*** cshen has quit IRC | 05:51 | |
*** cshen has joined #openstack-ansible | 05:57 | |
*** jmccrory has joined #openstack-ansible | 06:10 | |
*** kopecmartin|off is now known as kopecmartin | 06:11 | |
*** namrata has joined #openstack-ansible | 06:20 | |
*** hwoarang has quit IRC | 06:21 | |
*** hwoarang has joined #openstack-ansible | 06:25 | |
*** jawad_axd has joined #openstack-ansible | 06:29 | |
*** Blinkiz has joined #openstack-ansible | 06:34 | |
*** tosky has joined #openstack-ansible | 06:41 | |
*** ChipOManiac has joined #openstack-ansible | 06:49 | |
*** nyloc has quit IRC | 06:50 | |
*** arbrandes has quit IRC | 07:00 | |
*** arbrandes has joined #openstack-ansible | 07:01 | |
*** rpittau|afk is now known as rpittau | 07:27 | |
*** vnogin has joined #openstack-ansible | 07:36 | |
*** vnogin has quit IRC | 07:41 | |
*** key-networks has joined #openstack-ansible | 07:42 | |
*** ChipOManiac has quit IRC | 07:48 | |
key-networks | G'day folks! I have deployed OSA stein on infra1 and compute1 using openstack_user_config.yml.test.example as a template. I have set up a private CA and generated certs for haproxy and added them to user_variables.yml as well as installed the CA cert on all hosts (including containers). However, I get the following error when running openstack orchestration service list --debug: | 08:08 |
---|---|---|
key-networks | ... REQ: curl -g -i -X GET http://172.29.236.11:8004/v1/a1845460794b4de6b102d86f913b97df/services -H "Accept: application/json" -H "User-Agent: python-heatclient" -H "X-Auth-Token: {SHA256}adf1ccf847e347fb59b788adcf4aecd183b23d9c7765af11059a7fc32bd5bc08" -H "X-Region-Name: RegionOne" | 08:08 |
key-networks | Starting new HTTP connection (1): 172.29.236.11:8004 | 08:08 |
key-networks | http://172.29.236.11:8004 "GET /v1/a1845460794b4de6b102d86f913b97df/services HTTP/1.1" 500 198 | 08:08 |
key-networks | RESP: [500] Connection: close Content-Length: 198 Content-Type: application/json x-openstack-request-id: req-cf0528aa-f70f-4dcd-b5b8-4cfad6f713f6 | 08:08 |
key-networks | RESP BODY: {"explanation": "The server has either erred or is incapable of performing the requested operation.", "code": 500, "error": {"traceback": null, "type": "SSLError"}, "title": "Internal Server Error"} | 08:08 |
key-networks | GET call to orchestration for http://172.29.236.11:8004/v1/a1845460794b4de6b102d86f913b97df/services used request id req-cf0528aa-f70f-4dcd-b5b8-4cfad6f713f6 | 08:08 |
key-networks | ERROR: Internal Error | 08:08 |
key-networks | Traceback ... | 08:08 |
key-networks | The interesting thing is that if I execute that curl in the heat container against 127.0.0.1:8004, I get the same SSLError. | 08:10 |
key-networks | But, surely the Heat API backend uses http not https? | 08:13 |
key-networks | I don't understand why the backend would return an SSL error. | 08:13 |
*** namrata has quit IRC | 08:20 | |
*** vnogin has joined #openstack-ansible | 08:22 | |
*** vnogin has quit IRC | 08:26 | |
jrosser | key-networks: heat is a mess | 08:31 |
key-networks | Ah, is it beyond redemption? | 08:32 |
jrosser | key-networks: not quite :) | 08:32 |
jrosser | the short story is that for heat to "work" you need to make references to the external endpoint for keystone in heat.conf | 08:32 |
jrosser | and that then blows up in certain situations, like self signed certs | 08:33 |
*** vnogin has joined #openstack-ansible | 08:33 | |
key-networks | Thanks, jrosser. Does that mean manual edits after standing up OS with OSA, or is there a formal OSA way to do that? | 08:34 |
jrosser | key-networks: the fix for the root cause is actually needed in heat itself, not anything that can be fixed in OSA directly https://review.opendev.org/#/c/650967/ | 08:34 |
jrosser | once that is merged, the heat.conf can be switched back to using internal endpoints for keystone | 08:35 |
key-networks | Thanks again for your help, jrosser! | 08:36 |
jrosser | key-networks: what i do is keep a local fork of heat with that patch applied, then use config overrides to switch the endpoints back to internal in heat.conf | 08:37 |
jrosser | messy but doable | 08:37 |
key-networks | Ok, thanks a ton! | 08:37 |
evrardjp | hello | 08:39 |
*** siqbal has joined #openstack-ansible | 08:50 | |
*** altlogbot_0 has quit IRC | 08:51 | |
*** irclogbot_3 has quit IRC | 08:51 | |
*** altlogbot_1 has joined #openstack-ansible | 08:51 | |
*** irclogbot_0 has joined #openstack-ansible | 08:52 | |
*** ChipOManiac has joined #openstack-ansible | 08:56 | |
*** vnogin has quit IRC | 08:58 | |
*** namrata has joined #openstack-ansible | 09:22 | |
*** namrata has quit IRC | 09:24 | |
*** namrata has joined #openstack-ansible | 09:24 | |
*** arxcruz is now known as arxcruz|brb | 09:54 | |
*** vnogin has joined #openstack-ansible | 10:00 | |
*** luksky123 has joined #openstack-ansible | 10:02 | |
*** trident has quit IRC | 10:06 | |
*** vnogin has quit IRC | 10:07 | |
*** trident has joined #openstack-ansible | 10:08 | |
*** csmart has quit IRC | 10:08 | |
*** ChipOManiac has quit IRC | 10:09 | |
noonedeadpunk | mornings | 10:23 |
*** csmart has joined #openstack-ansible | 10:45 | |
*** key-networks has quit IRC | 11:14 | |
*** udesale has quit IRC | 11:15 | |
*** kplant has joined #openstack-ansible | 11:17 | |
*** key-networks has joined #openstack-ansible | 11:23 | |
*** key-networks has quit IRC | 11:31 | |
*** irclogbot_0 has quit IRC | 11:33 | |
*** irclogbot_3 has joined #openstack-ansible | 11:34 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon master: Use systemd-journald instead of log files https://review.opendev.org/672506 | 11:51 |
*** ansmith has quit IRC | 11:59 | |
*** jsquare has quit IRC | 12:00 | |
*** jsquare has joined #openstack-ansible | 12:00 | |
mnaser | FYI our gates should be fixed now | 12:26 |
mnaser | https://review.opendev.org/#/c/672395/ | 12:26 |
mnaser | as of 20 minutes ago | 12:26 |
arxcruz|brb | mnaser, wondering if this is already a known issue... http://logs.openstack.org/25/672225/1/check/openstack-ansible-deploy-aio_metal-centos-7/5920ad7/job-output.txt.gz#_2019-07-24_11_53_32_544167 | 12:28 |
mnaser | arxcruz|brb: yeah, that patch above is related | 12:29 |
*** arxcruz|brb is now known as arxcruz | 12:29 | |
mnaser | pyparsing 2.4.1 was removed from pypi and constraints pointed towards it | 12:29 |
arxcruz | mnaser, oh, thanks, did not pay attention in the conversation :) | 12:29 |
mnaser | np :) | 12:29 |
jrosser | mnaser: we need a patch i think becase we carry the sha of requirements even for master branch | 12:32 |
* jrosser makes patch | 12:32 | |
openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible master: Update sha of global requirements repo to fix pyparsing https://review.opendev.org/672514 | 12:35 |
mnaser | jrosser: why do we need a sha bump | 12:41 |
mnaser | i think we have a bug that we're not using the pinned value | 12:41 |
mnaser | ERROR: Could not find a version that satisfies the requirement pyparsing===2.4.1 (from -c https://releases.openstack.org/constraints/upper/master (line 492)) | 12:41 |
mnaser | its reading master | 12:41 |
mnaser | jrosser: actually, nothing was broken, it just seems tempest was the only one broken because tempest uses master upper constraints | 12:42 |
mnaser | other stuff installed fine cause it was using the pinned ones | 12:42 |
*** ansmith has joined #openstack-ansible | 12:44 | |
jrosser | mnaser: i figured we needed the sha bump to cap the version of pyparsing which blows up here http://logs.openstack.org/47/672347/1/check/openstack-ansible-deploy-aio_metal-opensuse-15/465148c/job-output.txt.gz#_2019-07-24_08_01_46_293850 | 12:52 |
jrosser | but as you say, thats in tempest so there might be something else going on | 12:53 |
*** aedc has joined #openstack-ansible | 12:58 | |
*** vnogin has joined #openstack-ansible | 12:59 | |
jrosser | mnaser: actually tempest is alone in using a different url from all our other roles https://opendev.org/openstack/openstack-ansible-os_tempest/src/branch/master/defaults/main.yml#L48 | 12:59 |
*** jawad_axd has quit IRC | 13:01 | |
tosky | jrosser: I think that https://releases.openstack.org/constraints/upper/<branch> is the canonical URL | 13:03 |
tosky | jrosser: and also, the pyparsing crysis has been solved | 13:03 |
tosky | that version was published and then unpublished | 13:03 |
tosky | https://review.opendev.org/672395 should have fixed it | 13:04 |
tosky | oh, right, mnaser already wrote it '-_- | 13:04 |
tosky | I didn't scroll up | 13:04 |
jrosser | sure | 13:04 |
jrosser | can you use a sha rather than a branch name for the canonical url | 13:05 |
jrosser | i was trying to understand why we universally dont use it *except* in our tempest role | 13:05 |
tosky | uhm, but why a sha instead of the branch? | 13:05 |
tosky | I would expect all projects under openstack/ to use the constraints from requirements.git | 13:06 |
jrosser | everything we consume is (hopefully) pinned https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/defaults/repo_packages/openstack_services.yml | 13:07 |
*** siqbal has quit IRC | 13:11 | |
*** siqbal has joined #openstack-ansible | 13:16 | |
*** strattao has joined #openstack-ansible | 13:17 | |
*** vnogin has quit IRC | 13:19 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon master: Use systemd-journald instead of log files https://review.opendev.org/672506 | 13:22 |
*** bverschueren_ has joined #openstack-ansible | 13:25 | |
*** namrata has quit IRC | 13:29 | |
*** joshualyle has joined #openstack-ansible | 13:34 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon master: Use systemd-journald instead of log files https://review.opendev.org/672506 | 13:36 |
*** strattao has quit IRC | 13:37 | |
*** strattao has joined #openstack-ansible | 13:49 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [WIP] Drop creation of log directories https://review.opendev.org/671783 | 13:55 |
*** cshen has quit IRC | 14:01 | |
*** siqbal has quit IRC | 14:02 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [WIP] Drop creation of log directories https://review.opendev.org/671783 | 14:04 |
*** goldyfruit has joined #openstack-ansible | 14:11 | |
*** siqbal has joined #openstack-ansible | 14:12 | |
*** siqbal has quit IRC | 14:39 | |
*** siqbal has joined #openstack-ansible | 14:40 | |
mnaser | jrosser: because i dont think we include that var in the playbook | 14:42 |
mnaser | https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-heat-install.yml#L23-L25 | 14:42 |
mnaser | https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-tempest-install.yml#L20-L22 | 14:43 |
mnaser | oh hmm | 14:43 |
mnaser | we do | 14:43 |
mnaser | https://github.com/openstack/openstack-ansible-os_tempest/blob/master/defaults/main.yml#L48 | 14:43 |
mnaser | https://github.com/openstack/openstack-ansible-os_glance/blob/master/defaults/main.yml#L35 | 14:43 |
mnaser | are we not using requirements_git_url | 14:44 |
mnaser | requirements_git_install_branch | 14:44 |
mnaser | it.. should use it | 14:45 |
jrosser | mnaser: just to be clear, what do you think we should be doing? | 14:46 |
*** jbadiapa has quit IRC | 14:52 | |
*** jbadiapa has joined #openstack-ansible | 15:06 | |
*** gyee has joined #openstack-ansible | 15:13 | |
*** namrata has joined #openstack-ansible | 15:15 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon master: Use systemd-journald instead of log files https://review.opendev.org/672506 | 15:33 |
*** goldenfri has joined #openstack-ansible | 15:42 | |
openstackgerrit | Merged openstack/openstack-ansible-os_tempest master: Update stestr_executable variable for RHEL-8 https://review.opendev.org/672225 | 15:44 |
*** namrata has quit IRC | 15:45 | |
*** siqbal has quit IRC | 15:47 | |
*** strattao has quit IRC | 15:56 | |
*** siqbal has joined #openstack-ansible | 16:02 | |
openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia stable/stein: Save iptables rules for all Debian derivative operating systems https://review.opendev.org/672555 | 16:06 |
openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia stable/rocky: Save iptables rules for all Debian derivative operating systems https://review.opendev.org/672556 | 16:06 |
*** allanb has quit IRC | 16:11 | |
*** pcaruana has quit IRC | 16:13 | |
*** rpittau is now known as rpittau|afk | 16:26 | |
*** siqbal has quit IRC | 16:27 | |
*** siqbal has joined #openstack-ansible | 16:33 | |
*** marta_lais has joined #openstack-ansible | 16:34 | |
*** luksky123 has quit IRC | 16:55 | |
*** gillesMo has quit IRC | 17:01 | |
*** siqbal has quit IRC | 17:10 | |
*** allanb has joined #openstack-ansible | 17:32 | |
openstackgerrit | Chandan Kumar (raukadah) proposed openstack/openstack-ansible-os_tempest master: Set fact tempest_install_method var for meta handler https://review.opendev.org/672231 | 17:37 |
*** joshualyle has quit IRC | 17:38 | |
*** pcaruana has joined #openstack-ansible | 17:41 | |
*** vnogin has joined #openstack-ansible | 17:46 | |
*** vnogin has quit IRC | 17:50 | |
*** KeithMnemonic has joined #openstack-ansible | 17:54 | |
*** strattao has joined #openstack-ansible | 18:05 | |
*** gary_perkins_ has quit IRC | 18:19 | |
*** gary_perkins has joined #openstack-ansible | 18:20 | |
*** poopcat has joined #openstack-ansible | 18:36 | |
*** tosky has quit IRC | 18:42 | |
*** hwoarang has quit IRC | 18:53 | |
*** allanb has quit IRC | 18:53 | |
*** hwoarang has joined #openstack-ansible | 18:54 | |
*** marta_lais has quit IRC | 19:03 | |
*** strattao has quit IRC | 19:11 | |
*** kopecmartin is now known as kopecmartin|offf | 19:13 | |
*** cshen has joined #openstack-ansible | 19:28 | |
*** hwoarang has quit IRC | 19:30 | |
*** hwoarang has joined #openstack-ansible | 19:31 | |
*** BjoernT has joined #openstack-ansible | 19:44 | |
*** kplant has quit IRC | 19:51 | |
*** cshen has quit IRC | 19:52 | |
*** allanb has joined #openstack-ansible | 20:08 | |
*** allanb has quit IRC | 20:12 | |
*** allanb has joined #openstack-ansible | 20:14 | |
openstackgerrit | Guilherme Steinmuller Pimentel proposed openstack/openstack-ansible-os_ironic stable/stein: Add missing variable file for Redhat https://review.opendev.org/672588 | 20:16 |
*** hwoarang has quit IRC | 20:25 | |
*** goldyfruit has quit IRC | 20:26 | |
*** hwoarang has joined #openstack-ansible | 20:26 | |
*** BjoernT has quit IRC | 20:57 | |
openstackgerrit | Merged openstack/openstack-ansible master: Update Ansible to 2.8.2, Ceph-Ansible to 4.0, Ceph to Nautilus https://review.opendev.org/659656 | 20:59 |
jrosser | woah it merged | 21:01 |
*** ansmith has quit IRC | 21:02 | |
*** pcaruana has quit IRC | 21:05 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [WIP] Drop creation of log directories https://review.opendev.org/671783 | 21:09 |
*** aedc has quit IRC | 21:31 | |
*** ansmith has joined #openstack-ansible | 21:38 | |
*** ivve has quit IRC | 23:25 | |
openstackgerrit | Merged openstack/openstack-ansible stable/stein: Reduce the RAM allocation for the octavia amphora flavor in AIO/CI https://review.opendev.org/667789 | 23:53 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!