Wednesday, 2025-01-22

noonedeadpunklike feels that it's tough for it to unmount or smth08:01
noonedeadpunkfolks, any good guesses wtf could be here? https://bugs.launchpad.net/openstack-ansible/+bug/209546508:10
noonedeadpunkas can not imagine anything except weird proxy for "cannot verify github.com's certificate, issued by ‘CN=Example Corp Openstack Infrastructure Intermediate CA,ST=England,C=GB’" 08:11
f0owow yeah that looks a lot like a proxy wrapping TLS08:15
noonedeadpunk++ thanks!08:16
jrosserhow is that even possible08:17
noonedeadpunkthat is smth I'm not really sure08:17
noonedeadpunkas you need to work hard to mess up proxy like that I believe08:17
jrosserwell and to somehow get a certificate signed by the OSA CA to appear to be coming from somewhere totally else08:18
jrosserunless due to "enterprise reasons" they've had to install our CA into some proxy device and thats gone horriby wrong08:18
noonedeadpunkI'd guess they might wanted to take opprotunity of having CA to use it for proxy tls termination?08:18
noonedeadpunkor that08:19
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/93975108:27
opendevreviewAndrew Bonney proposed openstack/openstack-ansible master: Add additional commented RabbitMQ policy to manage segment sizes  https://review.opendev.org/c/openstack/openstack-ansible/+/93971308:30
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/93975108:35
noonedeadpunkhm, that's weird as well: https://zuul.opendev.org/t/openstack/build/8811c8041d754dd6949c9094816426e0/log/job-output.txt#1293-129509:10
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/93975109:11
noonedeadpunkas python3-setuptools are installed in containers and on localhost... maybe not inside of venv though... hm...09:12
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Install setupttols for molecule venv  https://review.opendev.org/c/openstack/openstack-ansible/+/93977109:27
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add molecule testing for the role  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/93975109:27
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Install setupttols for molecule venv  https://review.opendev.org/c/openstack/openstack-ansible/+/93977109:29
opendevreviewMerged openstack/ansible-role-pki master: Install setuptools for noble  https://review.opendev.org/c/openstack/ansible-role-pki/+/93975210:17
opendevreviewMerged openstack/ansible-role-pki master: Use OSA_TEST_REQUIREMENTS_FILE for molecule job  https://review.opendev.org/c/openstack/ansible-role-pki/+/93930110:17
opendevreviewMerged openstack/openstack-ansible-os_skyline master: Use standalone httpd role  https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/93829711:06
opendevreviewMerged openstack/openstack-ansible-os_skyline master: Implement TLS backend coverage for Skyline  https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/93829811:24
jrosseri'm not sure that the replies in https://bugs.launchpad.net/openstack-ansible/+bug/2095465 make much sense at all11:46
jrosserNAT or not has nothing to do with certificates11:46
noonedeadpunkunless it was pointing traffic somehow back to haproxy12:05
noonedeadpunkor smth like that12:05
jrosserport forward for 443 or something12:07
noonedeadpunkyeah, can be...12:14
noonedeadpunkbut it's really smth very weird12:14
noonedeadpunkwhat sucks about molecule - are absent logs as a result12:26
noonedeadpunkfrom docker, I mean12:27
noonedeadpunkmaybe there's some solution exists for that...12:27
noonedeadpunkjust trying to understnad wtf is missing in galera role for EL: https://zuul.opendev.org/t/openstack/build/af8d35e5d4994b12b7a0fae677cc31db12:38
noonedeadpunkas it fails to startup with Failed to establish connection: Connection refused12:39
noonedeadpunkbut in fact it feels it's just missing some binary12:39
noonedeadpunkhttps://paste.openstack.org/show/bj1GjDDCUGsJ9GP3dj6y/12:40

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!