| noonedeadpunk | sykebenX: hey | 07:47 |
|---|---|---|
| noonedeadpunk | I guess there's some issue with a variable being used to "produce" haproxy_nova_spice_console_service | 07:50 |
| noonedeadpunk | but I don't see anything obvious in there which can cause issues.... | 07:51 |
| noonedeadpunk | but I think I can reproduce the issue.... | 07:54 |
| noonedeadpunk | even on 29.2.0 | 07:54 |
| noonedeadpunk | sykebenX: ok, so try refreshing facts :D | 07:59 |
| noonedeadpunk | ie `cd /opt/openstack-ansible; ansible -m setup nova_all` | 07:59 |
| noonedeadpunk | as this happens due to default relying on facts here: https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/all/nova.yml#L28 | 07:59 |
| noonedeadpunk | (at least in my case) | 08:00 |
| noonedeadpunk | but I was debugging it like `ansible -m debug -a var=haproxy_nova_spice_console_service nova_all[0]` and that leasd me to `ansible -m debug -a var=nova_console_proxy_types nova_all[0]` | 08:01 |
| jrosser | now that we gather minimal facts rather than everything it might be ok to do some by default fact gathering | 09:10 |
| noonedeadpunk | I think that architecture is actually part of min? | 09:54 |
| noonedeadpunk | or not? | 09:54 |
| sykebenX | This is great! Thanks noonedeadpunk - I'll give it a try and report back | 14:05 |
| sykebenX | Seems to have resolved the issue | 14:29 |
| opendevreview | Merged openstack/openstack-ansible-os_skyline master: Auto-fix yaml rules https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/941403 | 16:35 |
| sykebenX | noonedeadpunk: is there a straighforward way to re-triggering this other than deleting the existing cert from each control-plane host? https://github.com/openstack/openstack-ansible-haproxy_server/blob/e1e62d3f571acd8402d457edf3493a346896a194/tasks/haproxy_ssl_letsencrypt.yml#L19 | 16:53 |
| sykebenX | I added a new domain to `haproxy_ssl_letsencrypt_domains` in my user_variables file and I'd like that to be reflected in the certificate | 16:54 |
| noonedeadpunk | I think not... I can recall running `ansible -m file -a "path=/etc/letsencrypt/ state=absent" haproxy_all` | 16:55 |
| noonedeadpunk | this is totally we can imporove... | 16:56 |
| noonedeadpunk | *totally smth | 16:56 |
| sykebenX | I see! Well that's something :) I wonder if the role can be improved with a tag or extra var to regenerate first-time SSL certs with letsencrypt/certbot | 16:56 |
| noonedeadpunk | it totally can | 17:02 |
| noonedeadpunk | but somebody needs to do that :D | 17:02 |
| noonedeadpunk | we open to contributions :[ | 17:02 |
| noonedeadpunk | s/[/p/ | 17:02 |
| sykebenX | Yeah I'd be happy to look into this :) I need to get more familar with contributing to openstack stuff anyways (still not super comfortable with the development flow) | 17:04 |
| noonedeadpunk | let us know of concerns and we will try to help with onboarding :) | 17:05 |
| sykebenX | Will do! Thanks! | 17:11 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!