noonedeadpunk | like feels that it's tough for it to unmount or smth | 08:01 |
---|---|---|
noonedeadpunk | folks, any good guesses wtf could be here? https://bugs.launchpad.net/openstack-ansible/+bug/2095465 | 08:10 |
noonedeadpunk | as can not imagine anything except weird proxy for "cannot verify github.com's certificate, issued by ‘CN=Example Corp Openstack Infrastructure Intermediate CA,ST=England,C=GB’" | 08:11 |
f0o | wow yeah that looks a lot like a proxy wrapping TLS | 08:15 |
noonedeadpunk | ++ thanks! | 08:16 |
jrosser | how is that even possible | 08:17 |
noonedeadpunk | that is smth I'm not really sure | 08:17 |
noonedeadpunk | as you need to work hard to mess up proxy like that I believe | 08:17 |
jrosser | well and to somehow get a certificate signed by the OSA CA to appear to be coming from somewhere totally else | 08:18 |
jrosser | unless due to "enterprise reasons" they've had to install our CA into some proxy device and thats gone horriby wrong | 08:18 |
noonedeadpunk | I'd guess they might wanted to take opprotunity of having CA to use it for proxy tls termination? | 08:18 |
noonedeadpunk | or that | 08:19 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/939751 | 08:27 |
opendevreview | Andrew Bonney proposed openstack/openstack-ansible master: Add additional commented RabbitMQ policy to manage segment sizes https://review.opendev.org/c/openstack/openstack-ansible/+/939713 | 08:30 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/939751 | 08:35 |
noonedeadpunk | hm, that's weird as well: https://zuul.opendev.org/t/openstack/build/8811c8041d754dd6949c9094816426e0/log/job-output.txt#1293-1295 | 09:10 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/939751 | 09:11 |
noonedeadpunk | as python3-setuptools are installed in containers and on localhost... maybe not inside of venv though... hm... | 09:12 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Install setupttols for molecule venv https://review.opendev.org/c/openstack/openstack-ansible/+/939771 | 09:27 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/939751 | 09:27 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Install setupttols for molecule venv https://review.opendev.org/c/openstack/openstack-ansible/+/939771 | 09:29 |
opendevreview | Merged openstack/ansible-role-pki master: Install setuptools for noble https://review.opendev.org/c/openstack/ansible-role-pki/+/939752 | 10:17 |
opendevreview | Merged openstack/ansible-role-pki master: Use OSA_TEST_REQUIREMENTS_FILE for molecule job https://review.opendev.org/c/openstack/ansible-role-pki/+/939301 | 10:17 |
opendevreview | Merged openstack/openstack-ansible-os_skyline master: Use standalone httpd role https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/938297 | 11:06 |
opendevreview | Merged openstack/openstack-ansible-os_skyline master: Implement TLS backend coverage for Skyline https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/938298 | 11:24 |
jrosser | i'm not sure that the replies in https://bugs.launchpad.net/openstack-ansible/+bug/2095465 make much sense at all | 11:46 |
jrosser | NAT or not has nothing to do with certificates | 11:46 |
noonedeadpunk | unless it was pointing traffic somehow back to haproxy | 12:05 |
noonedeadpunk | or smth like that | 12:05 |
jrosser | port forward for 443 or something | 12:07 |
noonedeadpunk | yeah, can be... | 12:14 |
noonedeadpunk | but it's really smth very weird | 12:14 |
noonedeadpunk | what sucks about molecule - are absent logs as a result | 12:26 |
noonedeadpunk | from docker, I mean | 12:27 |
noonedeadpunk | maybe there's some solution exists for that... | 12:27 |
noonedeadpunk | just trying to understnad wtf is missing in galera role for EL: https://zuul.opendev.org/t/openstack/build/af8d35e5d4994b12b7a0fae677cc31db | 12:38 |
noonedeadpunk | as it fails to startup with Failed to establish connection: Connection refused | 12:39 |
noonedeadpunk | but in fact it feels it's just missing some binary | 12:39 |
noonedeadpunk | https://paste.openstack.org/show/bj1GjDDCUGsJ9GP3dj6y/ | 12:40 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!