*** tosky has quit IRC | 00:28 | |
*** tosky has joined #openstack-barbican | 11:25 | |
*** JohnnyRainbow has joined #openstack-barbican | 11:46 | |
*** raildo has joined #openstack-barbican | 11:59 | |
*** Luzi has joined #openstack-barbican | 13:16 | |
*** dave-mccowan has joined #openstack-barbican | 13:21 | |
*** d34dh0r53 has joined #openstack-barbican | 13:51 | |
JohnnyRainbow | Hi Guys, is there possibility that someone of you may know why I cannot retrieve certificate from barbican for my listener? Seems all ACLs are configured correctly, it should work well: https://paste.ofcode.org/vpaV2rMK4tDVvamLnde8Y4 Thanks in advance for your help, I'm lack of ideas for the moment. | 15:36 |
---|---|---|
JohnnyRainbow | Seems like an issue exactly the same as is: https://ask.openstack.org/en/question/123646/octavia-could-not-retrieve-certificate-when-create-https-listener-using-application-credentials/ so I updated octavia and barbican to stein release, however no changes | 15:38 |
johnsom | JohnnyRainbow After the Rocky release, users no longer need to make changes to the barbican ACLs. If you manually made changes to the ACLs, that might be an issue. What was the error reported in the Octavia worker log? | 15:50 |
johnsom | JohnnyRainbow One other thing to check is to make sure the barbican client version is the latest for stein, there were bugs in the barbican client at one point that led to content not being accessible. | 15:52 |
*** JohnnyRainbow has quit IRC | 15:53 | |
*** Luzi has quit IRC | 16:19 | |
*** JohnnyRainbow has joined #openstack-barbican | 16:26 | |
JohnnyRainbow | johnsom no logs in octavia worker log, maybe because of this certificate retrieval? | 16:27 |
JohnnyRainbow | I will check barbican release as well | 16:27 |
johnsom | Ah, so the API validation failed. There might be something in the API log. | 16:28 |
johnsom | Yeah, my guess is the python-barbicanclient may be old on the API/worker instances | 16:28 |
openstackgerrit | Merged openstack/castellan master: Remove six https://review.opendev.org/754592 | 16:29 |
openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Use barbican.conf in barbican-manage https://review.opendev.org/759319 | 16:38 |
*** JohnnyRainbow has quit IRC | 16:46 | |
openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Use barbican.conf in barbican-manage https://review.opendev.org/759319 | 16:59 |
openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Disable octavia job to unblock gate https://review.opendev.org/759740 | 17:02 |
*** jmlowe has quit IRC | 17:02 | |
openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Use barbican.conf in barbican-manage https://review.opendev.org/759319 | 17:03 |
*** jmlowe has joined #openstack-barbican | 17:04 | |
*** tosky has quit IRC | 17:17 | |
*** tosky has joined #openstack-barbican | 20:43 | |
*** tkajinam has quit IRC | 22:55 | |
*** tkajinam has joined #openstack-barbican | 22:55 | |
*** tosky has quit IRC | 23:28 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!