| openstackgerrit | Feilong Wang proposed openstack/magnum master: Fix proxy issue for etcd and k8s https://review.opendev.org/733027 | 01:00 |
|---|---|---|
| *** mnasiadka has quit IRC | 01:19 | |
| *** mnasiadka has joined #openstack-containers | 01:22 | |
| *** ricolin has joined #openstack-containers | 02:41 | |
| *** k_mouza has joined #openstack-containers | 03:34 | |
| *** k_mouza has quit IRC | 03:39 | |
| *** flwang1 has joined #openstack-containers | 04:45 | |
| *** pcaruana has quit IRC | 05:22 | |
| *** vishalmanchanda has joined #openstack-containers | 05:37 | |
| *** flwang1 has quit IRC | 06:11 | |
| *** ttsiouts has joined #openstack-containers | 06:19 | |
| *** ttsiouts has quit IRC | 06:37 | |
| *** belmoreira has joined #openstack-containers | 06:54 | |
| *** born2bake has joined #openstack-containers | 07:01 | |
| *** ttsiouts has joined #openstack-containers | 07:03 | |
| *** yolanda has quit IRC | 07:31 | |
| *** threestrands has quit IRC | 07:41 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum stable/ussuri: resize: Send only nodes_to_remove and node_count https://review.opendev.org/735150 | 07:43 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: Lower log level of missing output https://review.opendev.org/735308 | 08:27 |
| *** ianychoi__ has quit IRC | 08:38 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: Lower log level of missing output https://review.opendev.org/735308 | 09:19 |
| *** rcernin has quit IRC | 09:21 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: Remove warning for scale_manager https://review.opendev.org/735317 | 09:30 |
| *** ttsiouts has quit IRC | 09:50 | |
| *** phildale has joined #openstack-containers | 10:06 | |
| *** vishalmanchanda has quit IRC | 10:19 | |
| *** k_mouza has joined #openstack-containers | 10:46 | |
| phildale | Hi folks! I am trying to deploy a Magnum cluster on a network that does not have Internet access, but is behind a proxy. The network is an "external network". The master node is created and the docker containers are fetched correctly. However, once the master starts heat-container-agent, things go sour. In the logs I see that the runc command is failing to Authenticate. Running tcpdump I notice that the master does a lookup for | 10:55 |
| phildale | the auth_url and then attempts to connect to it directly. This fails as there is no direct Internet access to the public Auth URL. DNS is running on the proxy servers. The Proxy config is correctly configured on the master node. Any ideas? Recommendations? | 10:55 |
| *** namrata has joined #openstack-containers | 11:02 | |
| *** phildale has quit IRC | 11:09 | |
| *** namrata has quit IRC | 11:14 | |
| *** ttsiouts has joined #openstack-containers | 11:16 | |
| *** namrata has joined #openstack-containers | 11:36 | |
| *** namrata has quit IRC | 11:54 | |
| *** ttsiouts has quit IRC | 11:56 | |
| *** phildale has joined #openstack-containers | 11:58 | |
| *** ttsiouts has joined #openstack-containers | 12:12 | |
| *** ricolin has quit IRC | 12:19 | |
| *** namrata has joined #openstack-containers | 12:58 | |
| *** born2bake has quit IRC | 13:18 | |
| *** ttsiouts has quit IRC | 13:31 | |
| *** belmoreira has quit IRC | 13:39 | |
| *** vishalmanchanda has joined #openstack-containers | 13:41 | |
| brtknr | phildale: did you use http_proxy label? | 14:16 |
| phildale | brtknr: Yes, both http_proxy and https_proxy. The proxy settings are correct on the master node too. The node successfully fetches containers through the proxy. | 14:18 |
| brtknr | phildale: so whats the problem? | 14:19 |
| brtknr | can you curl the auth_url? | 14:19 |
| brtknr | phildale: what version of magnum are you running? | 14:20 |
| *** k_mouza has quit IRC | 14:20 | |
| phildale | 9.2.0 and yes, I can curl the auth_url | 14:20 |
| *** k_mouza has joined #openstack-containers | 14:20 | |
| phildale | tcpdump shows that the master node is attempting to connect directly to the endpoint and not through proxy. | 14:20 |
| *** ttsiouts has joined #openstack-containers | 14:23 | |
| *** k_mouza has quit IRC | 14:24 | |
| *** ttsiouts has quit IRC | 14:28 | |
| brtknr | phildale: is this fedora coreos? | 14:37 |
| brtknr | or atomic? | 14:37 |
| brtknr | there have been quite a few patches related to proxy recently | 14:37 |
| phildale | @brtknr Sorry, atomic | 14:37 |
| brtknr | phildale: with use_podman label or without? | 14:39 |
| phildale | brtknr this was without use_podman, fedora 29 image. | 14:41 |
| *** k_mouza has joined #openstack-containers | 14:45 | |
| brtknr | phildale: did it use to work before using proxy? | 14:47 |
| brtknr | or is this the first time you are trying? | 14:48 |
| phildale | Without a proxy and on an external network that has Internet access, it works fine. I use the same template, but just add the proxy values and change external network to the proxied network. | 14:49 |
| brtknr | phildale: AFAIK the proxy side of things has been neglected for a while as not many users using it... if you are able to fix it and propose changes upstream, itwould be appreciated | 15:15 |
| phildale | OK, thanks. First I think we might want to upgrade to 9.3.0. I will take a look and try to see if I can find more... | 15:18 |
| *** namrata has quit IRC | 15:44 | |
| *** k_mouza has quit IRC | 15:45 | |
| *** k_mouza has joined #openstack-containers | 15:45 | |
| *** k_mouza has quit IRC | 15:49 | |
| *** k_mouza has joined #openstack-containers | 15:49 | |
| *** phildale has quit IRC | 15:54 | |
| *** k_mouza has quit IRC | 16:11 | |
| *** ttsiouts has joined #openstack-containers | 16:24 | |
| *** ttsiouts has quit IRC | 16:58 | |
| *** ttsiouts has joined #openstack-containers | 17:05 | |
| *** ttsiouts has quit IRC | 17:28 | |
| *** ttsiouts has joined #openstack-containers | 18:04 | |
| *** ttsiouts has quit IRC | 18:09 | |
| *** irclogbot_2 has quit IRC | 18:29 | |
| *** irclogbot_2 has joined #openstack-containers | 18:32 | |
| *** vishalmanchanda has quit IRC | 19:51 | |
| *** born2bake has joined #openstack-containers | 19:53 | |
| *** ttsiouts has joined #openstack-containers | 20:05 | |
| *** mgariepy has quit IRC | 20:16 | |
| *** mgariepy has joined #openstack-containers | 20:30 | |
| *** ttsiouts has quit IRC | 20:39 | |
| -openstackstatus- NOTICE: The Gerrit service on review.opendev.org is going offline momentarily at 21:00 UTC for project rename maintenance, but should return within a few minutes: http://lists.opendev.org/pipermail/service-announce/2020-June/000004.html | 20:56 | |
| -openstackstatus- NOTICE: gerrit is being taken offline for emergency cleanup, will return to service again shortly | 21:58 | |
| -openstackstatus- NOTICE: The Gerrit service on review.opendev.org is available again | 22:48 | |
| *** born2bake has quit IRC | 23:02 | |
| *** ttsiouts has joined #openstack-containers | 23:35 | |
| *** dasp has quit IRC | 23:57 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!