| jrosser | well that is interesting https://zuul.opendev.org/t/openstack/build/9e0f6673b15340e4a976fba65fc540d0 | 06:14 |
|---|---|---|
| jrosser | I wonder what ceph that actually installs…… | 06:15 |
| jrosser | maybe the apt pinning needs also to be updated in CI jobs too | 06:15 |
| gokhani | hello folks, I have seen csrf failed error on horizon. Referer checking failed - Referer is insecure while host is secure. Cookies may be turned off. Make sure cookies are enabled and try again. my env is with http | 08:24 |
| gokhani | what is the reason of this issue and how can I solve this issue? may be it is because of browser settings. | 08:25 |
| noonedeadpunk | mornings | 08:32 |
| noonedeadpunk | gokhani: I wonder if that might have smth to do with CSP: https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/haproxy/haproxy.yml#L34-L56` | 08:38 |
| gokhani | noonedeadpunk: it is same with my env configs | 08:49 |
| jrosser | we had someone else with this also recently? | 08:51 |
| jrosser | similarly with the env being http not https | 08:51 |
| gokhani | jrosser: https://bugs.launchpad.net/openstack-ansible/+bug/2071952 | 08:52 |
| noonedeadpunk | yeah, though you might wanna try to set `haproxy_security_headers_csp_report_only: true` | 08:57 |
| noonedeadpunk | in case is smth off | 08:58 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_magnum master: Manage Magnum resources with the last play host https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/923934 | 08:58 |
| gokhani | noonedeadpunk: I am trying now | 09:00 |
| noonedeadpunk | this will at least disable strict following and move into check mode | 09:00 |
| noonedeadpunk | though - you'd see CSP error in a browser console | 09:00 |
| noonedeadpunk | if it has smth to do with it | 09:01 |
| noonedeadpunk | otherwise - there might be smth with hoprizon secret | 09:01 |
| noonedeadpunk | `horizon_secret_key` to be specific | 09:01 |
| noonedeadpunk | as in case it's not defined - it will be different per backend, which doesn't work nicely | 09:02 |
| noonedeadpunk | so check that you have `SECRET_KEY` set in local_settings to a value: https://opendev.org/openstack/openstack-ansible-os_horizon/src/branch/master/templates/horizon_local_settings.py.j2#L150 | 09:02 |
| gokhani | it didn't work | 09:03 |
| opendevreview | Merged openstack/openstack-ansible-os_keystone stable/2023.1: Remove X-Forwarded-Proto header in apache https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/922640 | 09:40 |
| opendevreview | Merged openstack/openstack-ansible master: Switch to ceph-ansible stable-8.0 https://review.opendev.org/c/openstack/openstack-ansible/+/921976 | 11:32 |
| opendevreview | Merged openstack/openstack-ansible-lxc_hosts stable/2024.1: Ensure udev is installed in container image https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/923891 | 11:43 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/2023.2: Ensure git safe directory is templated properly https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/923886 | 11:46 |
| opendevreview | Merged openstack/openstack-ansible-lxc_container_create stable/2023.1: Respect dhcp_use_routes in lxc_container_networks https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/923643 | 11:48 |
| opendevreview | Merged openstack/openstack-ansible-os_nova stable/2023.1: Update conditions for kernel statoverride https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/922714 | 11:50 |
| opendevreview | Merged openstack/openstack-ansible-plugins stable/2023.1: Add sshpass_prompt to ssh connection options https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/922221 | 11:52 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/2024.1: Ensure git safe directory is templated properly https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/923884 | 11:56 |
| opendevreview | Merged openstack/openstack-ansible-galera_server stable/2023.1: Fix condition in cluster state checks https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/922555 | 12:01 |
| opendevreview | Merged openstack/openstack-ansible-os_cinder stable/2023.1: Start iscsid on cinder-volume hosts using LVM backend https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/921984 | 12:05 |
| opendevreview | Merged openstack/ansible-role-python_venv_build stable/2023.1: Ignore repo container facts gathering errors https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/923887 | 12:19 |
| opendevreview | Merged openstack/ansible-role-python_venv_build stable/2023.2: Ignore repo container facts gathering errors https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/923885 | 12:19 |
| jrosser | i think we are ready to land the ansible-2.17 change now https://review.opendev.org/c/openstack/openstack-ansible/+/921735 | 12:43 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible collection versions https://review.opendev.org/c/openstack/openstack-ansible/+/923951 | 12:53 |
| NeilHanlon | jrosser: gave +2,W+ on ansible-2.17 | 13:02 |
| opendevreview | Merged openstack/openstack-ansible-plugins stable/2023.1: Update plugins collection version https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/922720 | 13:08 |
| opendevreview | Merged openstack/ansible-role-python_venv_build stable/2024.1: Ignore repo container facts gathering errors https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/923883 | 14:18 |
| cnilesh | noonedeadpunk, | 14:27 |
| cnilesh | jrosser, Jul 11 14:34:59 ctrl001.ct.lan apache2[123771]: [wsgi:error] [pid 123771:tid 140164723529280] [remote 192.168.125.10:57014] Forbidden (Referer checking failed - Referer is insecure while host is secure.): /auth/login/ | 14:35 |
| cnilesh | same issue hitting again | 14:35 |
| cnilesh | https://bugs.launchpad.net/openstack-ansible/+bug/2071952 | 14:43 |
| cnilesh | issue is described here ^^ templates https://paste.openstack.org/show/b5B8n0KLXBzWicWj0Ttn/ | 14:44 |
| noonedeadpunk | jrosser: this is actually what gokhani reported in the morning? | 14:44 |
| noonedeadpunk | seems we;re having smth off indeed. | 14:44 |
| noonedeadpunk | I will spawn an aio now to check on that.... | 14:45 |
| cnilesh | noonedeadpunk++ thank you so much. | 14:50 |
| jrosser | noonedeadpunk: yes i feel it is very similar / same | 14:56 |
| opendevreview | Merged openstack/openstack-ansible master: Update ansible to 2.17.1 https://review.opendev.org/c/openstack/openstack-ansible/+/921735 | 15:18 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/2023.1: Bump SHAs for 2023.1 https://review.opendev.org/c/openstack/openstack-ansible/+/923968 | 15:35 |
| opendevreview | Merged openstack/openstack-ansible-plugins master: Add haproxy_endpoint_manage role https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/923363 | 15:56 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible unmaintained/yoga: Remove EOL centos-8-stream jobs https://review.opendev.org/c/openstack/openstack-ansible/+/922414 | 16:16 |
| jrosser | frickler: can we get some help with merging the remaining things here https://review.opendev.org/q/topic:%22osa/remove-8-stream%22+status:open ? | 16:17 |
| jrosser | noonedeadpunk: ^ we have some mess here :) | 16:17 |
| noonedeadpunk | yeah | 16:18 |
| noonedeadpunk | I've recorded used centos repos | 16:18 |
| noonedeadpunk | I think we should be able to handle at least for yoga | 16:19 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_tempest stable/2023.1: Remove deprecated centos-8-stream job https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/923972 | 16:20 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible unmaintained/yoga: Remove EOL centos-8-stream jobs https://review.opendev.org/c/openstack/openstack-ansible/+/922414 | 16:20 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_tempest stable/2023.1: Remove EOL centos-8-stream jobs https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/923973 | 16:22 |
| noonedeadpunk | haha | 16:22 |
| noonedeadpunk | you can't set depends-on cross branches | 16:22 |
| noonedeadpunk | I also think that tempest have same issue on zed | 16:22 |
| noonedeadpunk | and yoga... | 16:22 |
| noonedeadpunk | so it should be backported there | 16:23 |
| noonedeadpunk | and - we need to land bumps: https://review.opendev.org/q/topic:%22bump_osa%22+status:open | 16:23 |
| noonedeadpunk | NeilHanlon: mgariepy if around ^ | 16:23 |
| jrosser | ok so this is a thing https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/908473 | 16:24 |
| noonedeadpunk | huh | 16:24 |
| noonedeadpunk | some conf error | 16:24 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_zun unmaintained/yoga: Remove deprecated centos-8-stream jobs https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/923974 | 16:27 |
| frickler | jrosser: noonedeadpunk: if you approve the patches that need force-merging, I can submit them | 16:27 |
| noonedeadpunk | I've approved a bunch. I think regarding https://review.opendev.org/c/openstack/openstack-ansible-tests/+/922408 - we should rather fix it... | 16:29 |
| opendevreview | Merged openstack/openstack-ansible-os_neutron unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/908480 | 21:19 |
| opendevreview | Merged openstack/openstack-ansible-os_ironic unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/908473 | 21:23 |
| opendevreview | Merged openstack/openstack-ansible stable/2023.2: Bump SHAs for 2023.2 (Bobcat) https://review.opendev.org/c/openstack/openstack-ansible/+/923595 | 21:33 |
| opendevreview | Merged openstack/openstack-ansible-os_murano unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_murano/+/908479 | 21:34 |
| opendevreview | Merged openstack/openstack-ansible-os_keystone unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/908474 | 21:36 |
| opendevreview | Merged openstack/openstack-ansible-os_masakari unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_masakari/+/908477 | 21:44 |
| opendevreview | Merged openstack/openstack-ansible-os_manila unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/908476 | 21:44 |
| opendevreview | Merged openstack/openstack-ansible-os_octavia unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/908482 | 21:44 |
| opendevreview | Merged openstack/openstack-ansible-os_horizon unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/908472 | 21:46 |
| opendevreview | Merged openstack/openstack-ansible-os_rally unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_rally/+/908484 | 21:48 |
| opendevreview | Merged openstack/openstack-ansible-os_placement unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/908483 | 21:50 |
| opendevreview | Merged openstack/openstack-ansible-os_mistral unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_mistral/+/908478 | 22:11 |
| opendevreview | Merged openstack/openstack-ansible-os_magnum master: Manage Magnum resources with the last play host https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/923934 | 22:51 |
| opendevreview | Merged openstack/openstack-ansible-os_magnum unmaintained/yoga: Update .gitreview for unmaintained/yoga https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/908475 | 22:51 |
| opendevreview | Merged openstack/openstack-ansible stable/2024.1: Bump SHAs for 2024.1 (Caracal) https://review.opendev.org/c/openstack/openstack-ansible/+/923559 | 23:05 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/2023.1: Ensure git safe directory is templated properly https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/923888 | 23:22 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!