| *** ducttape_ has joined #openstack-dns | 01:30 | |
| *** ducttape_ has quit IRC | 01:34 | |
| *** EricGonczer_ has quit IRC | 02:55 | |
| *** ducttape_ has joined #openstack-dns | 03:07 | |
| *** EricGonczer_ has joined #openstack-dns | 03:11 | |
| *** EricGonczer_ has quit IRC | 03:19 | |
| *** ducttape_ has quit IRC | 03:30 | |
| *** lkoranda has quit IRC | 05:01 | |
| *** ducttape_ has joined #openstack-dns | 05:01 | |
| *** ducttape_ has quit IRC | 05:06 | |
| *** lkoranda has joined #openstack-dns | 05:08 | |
| *** mariusv has joined #openstack-dns | 05:40 | |
| *** mariusv has quit IRC | 05:40 | |
| *** mariusv has joined #openstack-dns | 05:40 | |
| *** chrido has joined #openstack-dns | 05:59 | |
| *** ducttape_ has joined #openstack-dns | 06:02 | |
| *** ducttape_ has quit IRC | 06:06 | |
| *** pcaruana has joined #openstack-dns | 06:29 | |
| *** chrido has quit IRC | 06:34 | |
| *** lkoranda has quit IRC | 06:46 | |
| *** pcaruana has quit IRC | 06:48 | |
| *** lkoranda has joined #openstack-dns | 06:54 | |
| *** sonuk has quit IRC | 07:01 | |
| *** pcaruana has joined #openstack-dns | 07:02 | |
| *** ducttape_ has joined #openstack-dns | 07:03 | |
| *** ducttape_ has quit IRC | 07:07 | |
| *** abalutoiu has joined #openstack-dns | 07:11 | |
| *** fawadkhaliq has joined #openstack-dns | 07:13 | |
| *** rudrajit has quit IRC | 07:23 | |
| *** dmsimard has quit IRC | 08:05 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/designate: [WIP] Testing latest u-c https://review.openstack.org/318020 | 08:10 |
|---|---|---|
| *** nyechiel has joined #openstack-dns | 08:24 | |
| *** Alex_Stef has joined #openstack-dns | 08:27 | |
| *** Alex_Stef has quit IRC | 08:49 | |
| *** dmsimard has joined #openstack-dns | 08:54 | |
| *** fawadkhaliq has quit IRC | 09:34 | |
| *** sonuk has joined #openstack-dns | 09:38 | |
| *** Alex_Stef has joined #openstack-dns | 10:07 | |
| FransUrbo | Is there any other documentation than http://docs.openstack.org/developer/designate ? | 10:20 |
| federico3 | no FransUrbo, but that page is being revamped | 10:22 |
| *** fawadkhaliq has joined #openstack-dns | 10:34 | |
| *** fawadkhaliq has quit IRC | 10:40 | |
| FransUrbo | Ok. Any schedule for when it's going to be finished? | 10:43 |
| *** fawadkhaliq has joined #openstack-dns | 10:48 | |
| *** mpbnka has joined #openstack-dns | 10:50 | |
| mugsie | FransUrbo: it will be an ongoing project | 11:25 |
| mugsie | is there anything missing in particualr? | 11:25 |
| FransUrbo | Quite a lot actually. I created an issue in the tracker yesterday.. | 11:28 |
| FransUrbo | https://bugs.launchpad.net/designate/+bug/1603808 | 11:28 |
| openstack | Launchpad bug 1603808 in Designate "Designate setup missing several steps" [Undecided,New] | 11:28 |
| mugsie | Ah, OK. nameservers are created on pools. let me get the link | 11:30 |
| mugsie | what version of designate are you looking at? | 11:30 |
| FransUrbo | v2.0.0 (Mitaka) | 11:31 |
| mugsie | http://docs.openstack.org/developer/designate/pools.html | 11:31 |
| mugsie | so when you are defining the servers to use for a pool, you also supply the nameservers (called ns_records in that file) | 11:32 |
| mugsie | and then all zones created in that use those ns records | 11:32 |
| mugsie | we do not currently support custom NS records per zone | 11:32 |
| FransUrbo | Well, with trial-and-error, I did: designate server-create ... ; designate domain-create ... ; designate record-create ... | 11:32 |
| mugsie | yeah, server-create is an old API that is going away in the near future | 11:33 |
| FransUrbo | Ah. | 11:33 |
| mugsie | we had a pretty big re-architecture a few cycles ago | 11:33 |
| mugsie | we had to keep that API for backwards compatibilty | 11:34 |
| mugsie | but it will go away in the next 6 months or so | 11:34 |
| FransUrbo | Ok. Maybe document that to? :) | 11:34 |
| FransUrbo | But my biggest 'problem' is to try to understand the relationship between the pool creation and the configuration in designate.conf | 11:35 |
| mugsie | yup, that is WIP | 11:36 |
| mugsie | we had a tempory pool confing in that file for a cycle or so | 11:37 |
| mugsie | but the yaml file is the final state - we have not finished documenting it properly | 11:37 |
| mugsie | in the config file, you just need to set the "pool_id" in the pool manager section | 11:37 |
| mugsie | for someone with a single pool, just use the default, and use the name default in the pools.yaml file, and it will line up | 11:38 |
| FransUrbo | What exactly constitutes a "pool" in this regard? A 'pool' of nameservers? | 11:39 |
| FransUrbo | That's what the Pools page say.. | 11:39 |
| FransUrbo | But then it starts talking about zones... | 11:39 |
| mugsie | so, pools of name servers, are a pool | 11:42 |
| mugsie | they all host the same zones | 11:42 |
| mugsie | so when a zone is created it gets shedualed to a pool | 11:42 |
| mugsie | for most people that is just the default pool | 11:43 |
| FransUrbo | Ok. | 11:43 |
| FransUrbo | The 'connection' part of that example yaml, is that the same as in designate.conf? Because the latter is using '.../designate' and the former '.../designate_pdns'. | 11:44 |
| mugsie | the one in designate.conf is ignored | 11:44 |
| mugsie | ah, sorry | 11:44 |
| mugsie | I derped reading that | 11:44 |
| mugsie | the one in the exmaple pools.yaml is for powerdns | 11:45 |
| mugsie | if you use power dns, you have 2 separate DBs | 11:45 |
| FransUrbo | Ok. And if I'm using Bind9? | 11:45 |
| FransUrbo | I figured I'd just replace 'type: powerdns' with 'type: bind9'? | 11:46 |
| mugsie | yeap | 11:46 |
| FransUrbo | So what about the 'connection' part? | 11:46 |
| mugsie | http://docs.openstack.org/developer/designate/backends/bind9.html | 11:46 |
| mugsie | there will not be a connection part for bind9 | 11:46 |
| FransUrbo | Ah. | 11:46 |
| FransUrbo | Now I see the rndc part. Thanx. | 11:46 |
| mugsie | the options part changes depending on the backend used | 11:47 |
| mugsie | np | 11:47 |
| FransUrbo | Then I just load that yaml with "designate-manage"? | 11:49 |
| FransUrbo | Should I remove the config I've already done somehow? | 11:49 |
| mugsie | just load that yaml, and restart the designate-pool-manager | 11:50 |
| FransUrbo | ok. | 11:50 |
| mugsie | if it was in the pools.yaml, it will overwrite it | 11:50 |
| FransUrbo | Ok, that blew up: RecordSetNotFound_Remote: Could not find RecordSet | 11:52 |
| mugsie | is there a full trace? | 11:53 |
| FransUrbo | Ah, never mind. Wrong hostname for my NS1. | 11:53 |
| FransUrbo | Ok, that gave me: http://paste.openstack.org/show/536102/ | 11:55 |
| FransUrbo | So what about the designate.conf changes? | 11:55 |
| FransUrbo | Hmm, did I miss some configuration: host ns1.openstack.domain.tld. 10.0.4.1 => Host ns1.openstack.domain.tld not found: 5(REFUSED) | 12:00 |
| FransUrbo | rndc can connect with the specified key.. | 12:00 |
| mugsie | NS records are not hosted by us, they would have to be created in your registrar | 12:03 |
| mugsie | (we do not create those records locally by default) | 12:03 |
| FransUrbo | Sure. I get that. But the yaml file seems to create a host (A) record for that.. ? | 12:04 |
| mugsie | no, it shouldnt | 12:04 |
| FransUrbo | The "nameserver:" part.. ? | 12:05 |
| mugsie | that is used to tell where we should check for the zones and recordsets once they have been created | 12:06 |
| *** ducttape_ has joined #openstack-dns | 12:06 | |
| FransUrbo | Ok. | 12:06 |
| mugsie | so, when you create a zone, we write to targets, and then poll the nameservers untl the zone is there | 12:06 |
| mugsie | and then we mark it as active | 12:06 |
| FransUrbo | So what about designate.conf then? | 12:08 |
| mugsie | that is used for the other parts of designate config | 12:08 |
| mugsie | there should be sane defaults in there | 12:09 |
| mugsie | the only chnages should be things like hostnames, and sql connections | 12:09 |
| FransUrbo | So the '[pool:794ccc2c-d751-44fe-b57f-8894c9f5c842]', just uncomment? | 12:10 |
| mugsie | no, that should be removed | 12:10 |
| FransUrbo | It's commented out now, so.. | 12:10 |
| mugsie | it is in the version of the sample config I am looking at | 12:10 |
| mugsie | so, you can leavce it, or remove it | 12:10 |
| *** fawadkhaliq has quit IRC | 12:10 | |
| mugsie | ah. crap - the changes for the sample were not backported | 12:11 |
| FransUrbo | So my config logs like: http://bayour.com/misc/designate.conf.txt | 12:13 |
| mugsie | that looks good | 12:17 |
| FransUrbo | Perfect! Thanx for the help! | 12:19 |
| * FransUrbo is gone. Lunch! | 12:20 | |
| mugsie | enjoy :) | 12:21 |
| *** ducttape_ has quit IRC | 12:26 | |
| *** EricGonczer_ has joined #openstack-dns | 12:35 | |
| *** richm has joined #openstack-dns | 13:03 | |
| * FransUrbo is back. | 13:07 | |
| FransUrbo | So, it didn't delete my domain and it's record when I setup the pool. That's nice. I just created a test record, and that works just fine! Yay!! :) | 13:07 |
| FransUrbo | HOWEVER, is there a way to get "it" (Horizon, Nova or "someone") to automatically add records when I create an instance? | 13:08 |
| *** gnuoy` is now known as gnuoy | 13:10 | |
| mugsie | yes | 13:12 |
| mugsie | neutron can do that | 13:12 |
| mugsie | http://docs.openstack.org/mitaka/networking-guide/adv-config-dns.html | 13:12 |
| *** dmsimard has quit IRC | 13:16 | |
| *** richm has quit IRC | 13:39 | |
| *** ducttape_ has joined #openstack-dns | 13:42 | |
| *** mpbnka has quit IRC | 13:43 | |
| *** ducttape_ has quit IRC | 13:45 | |
| *** ducttape_ has joined #openstack-dns | 13:46 | |
| *** ducttape_ has quit IRC | 13:46 | |
| *** ducttape_ has joined #openstack-dns | 13:46 | |
| *** ducttape_ has quit IRC | 13:48 | |
| *** richm has joined #openstack-dns | 13:53 | |
| FransUrbo | That say, at the bottom, to use the 'neutron' user to authenticate to Designate. Shouldn't that be the 'designate' user? | 14:01 |
| *** catintheroof has joined #openstack-dns | 14:03 | |
| mugsie | yeah, as long as the designate user has the right credentials | 14:03 |
| *** mlavalle has joined #openstack-dns | 14:04 | |
| mugsie | or roles even | 14:09 |
| mugsie | but ost people keep the service users for each service to interact with other services | 14:09 |
| mugsie | most* | 14:09 |
| mugsie | so when designate calls out to other services, it uses the designate user. so when neutron calls us, using the neutron user is not a bad idea | 14:10 |
| FransUrbo | Ok. | 14:10 |
| FransUrbo | I'm wondering if the neutron-dhcp (dnsmasq) is "taking" that information.. I.e., Neutron isn't talking to Designate.. | 14:11 |
| *** ducttape_ has joined #openstack-dns | 14:12 | |
| mugsie | for internal resolution, yes | 14:17 |
| mugsie | but when you attach a floating IP to a port, the record gets generated and put into Designate | 14:17 |
| mugsie | along with the reverse DNS | 14:17 |
| FransUrbo | AHH!! Let'stry that.. | 14:17 |
| FransUrbo | Nope :( | 14:18 |
| mugsie | :/ | 14:19 |
| *** maestropandy has joined #openstack-dns | 14:19 | |
| mugsie | did you associate the network with a dns zone? | 14:19 |
| FransUrbo | Yes. | 14:19 |
| mugsie | OK. is there logs from neutron? | 14:20 |
| FransUrbo | http://paste.openstack.org/show/536124/ | 14:25 |
| FransUrbo | I'm guessing an auth/access problem.. | 14:26 |
| mugsie | yeah | 14:26 |
| mugsie | it should be using the credentials you used to create the port | 14:26 |
| mugsie | are they in the same project as that DNS Zone? | 14:27 |
| FransUrbo | I've created the instance as the "admin" user. As well as the domain, pool etc. | 14:27 |
| FransUrbo | And I added the floating IP as that user as well. | 14:27 |
| FransUrbo | But Neutron is using "neutron" to talk to Designate.. | 14:28 |
| FransUrbo | I'd _rather_ not have to put my admin user/passwd in the Neutron config.. | 14:28 |
| *** sonuk has quit IRC | 14:29 | |
| FransUrbo | "same project"... yes, I'm quite sure.. | 14:29 |
| FransUrbo | "quite" :) | 14:29 |
| FransUrbo | How do i give "neutron" access to Designate? | 14:31 |
| FransUrbo | Oups, never mind. I think.. In designate.conf, the 'network_api:neutron', I've specified "admin".. | 14:31 |
| mugsie | that is for us talking to neutron, which is a different integration | 14:32 |
| FransUrbo | Oh :( | 14:32 |
| mugsie | mlavalle: do you have any ideas on ^ ? | 14:32 |
| FransUrbo | Well, using 'admin' in neutron.conf/designate didn't work anyway, so it might be something else.. | 14:36 |
| mlavalle | FransUrbo: What triggered this error: http://paste.openstack.org/show/536124/ | 14:37 |
| FransUrbo | Trying to assign a floating IP to an instance. | 14:38 |
| FransUrbo | My designate.conf file: http://bayour.com/misc/designate.conf.txt | 14:39 |
| mlavalle | FransUrbo: openstack.domain.tld. has already been created? | 14:39 |
| FransUrbo | yes. I've been able to create records manually with 'designate record-create' | 14:40 |
| FransUrbo | So i'm "pretty sure" that Designate works. | 14:40 |
| mlavalle | I am not doubting that | 14:41 |
| FransUrbo | Ok. | 14:41 |
| FransUrbo | But maybe you should :D | 14:41 |
| FransUrbo | Doubt it I mean :) | 14:41 |
| mlavalle | not yet anyway :-) | 14:41 |
| FransUrbo | LOL | 14:42 |
| mlavalle | are you assigning a --dns_name and --dns_domain to you floating ip at creation? | 14:42 |
| FransUrbo | No. I create the instance (in Horizon) and add a 'dns_name' property. Then, after it's "up and running", I associate a floating IP to it. That's when it fails. | 14:43 |
| FransUrbo | The network have the 'dns_domain' set. | 14:44 |
| mlavalle | correct, that was my next question.... | 14:44 |
| mlavalle | Now, from the user / tenant you use to create and assign your floating ip, do you have accces to that zone? | 14:45 |
| FransUrbo | yes. At the moment, I do everything (!!) as the "admin" user. I'll fix that eventually, once everything seems to be working as I want/expect it. But for now, it's simpler to use 'admin'. | 14:46 |
| mlavalle | In other words, from that user / tenant can you do 'designate record-list' to see records in that zone? | 14:46 |
| FransUrbo | yes. | 14:47 |
| FransUrbo | I'm thinking it's something wrong with the '[designate]' section in neutron.conf (http://docs.openstack.org/mitaka/networking-guide/adv-config-dns.html#configuring-openstack-networking-for-integration-with-an-external-dns-service). | 14:49 |
| FransUrbo | But even though I've entered the 'admin' user, it still fails. | 14:51 |
| mlavalle | are you using master? | 14:53 |
| *** nyechiel has quit IRC | 14:54 | |
| FransUrbo | master? As in the master branch? No, Mitaka (Designate v2.0.0, Neutron v8.1.2) | 14:55 |
| mlavalle | ah ok | 14:55 |
| *** nkinder has joined #openstack-dns | 14:57 | |
| *** _ducttape_ has joined #openstack-dns | 15:01 | |
| mlavalle | FransUrbo: the username and tenant in the '[designate]' section of neutron.conf is used exclusively to create reverse lookup records | 15:02 |
| mlavalle | FransUrbo: do we agree on that? | 15:02 |
| *** ducttape_ has quit IRC | 15:02 | |
| FransUrbo | Ok. Have no idea, but if you say so :) | 15:02 |
| mugsie | actually - in the designate API logs there should be a 404 response | 15:03 |
| mugsie | it will show the user and project used in the request | 15:03 |
| FransUrbo | Yes: 2016-07-18 15:57:48.727 27000 INFO eventlet.wsgi [req-7767de93-7869-440b-8ca3-1c8203d5c372 4b0e25c70d2b4ad6ba4c50250f2f0b0b 04ee0e71babe4fd7aa16c3f64a8fca89 - - -] 10.0.4.1 - - [18/Jul/2016 15:57:48] "GET /v2/zones?name=openstack.domain.tld. HTTP/1.1" 404 212 0.213553 | 15:03 |
| mugsie | so 4b0e25c70d2b4ad6ba4c50250f2f0b0b = user, and 04ee0e71babe4fd7aa16c3f64a8fca89 = project | 15:04 |
| FransUrbo | Ah, so that's what those numbers mean! :) | 15:05 |
| FransUrbo | One sec.. | 15:05 |
| FransUrbo | So that's admin/admin. | 15:05 |
| mugsie | OK... weird | 15:06 |
| mugsie | can you do "openstack zone show openstack.domain.tld." with the admin admin credentials sourced? | 15:07 |
| mlavalle | mugsie: exactly | 15:07 |
| FransUrbo | Failed to contact the endpoint at http://10.0.4.1:9001/v1/ for discovery. Fallback to using that endpoint as the base url. | 15:07 |
| mugsie | thats it? | 15:08 |
| FransUrbo | Yeah. And "NotFound". | 15:08 |
| FransUrbo | # openstack endpoint list | grep 9001 | 15:08 |
| FransUrbo | | 81021fe5f13d4680a60746aa8936d238 | europe-london | designate | dns | True | admin | http://10.0.4.1:9001/v1/ | | 15:08 |
| FransUrbo | | 9c037b48a3a448c28fe720f2f28baf3d | europe-london | designate | dns | True | internal | http://10.0.4.1:9001/v1/ | | 15:08 |
| FransUrbo | | cd32f85addbe4556acd22919a369adf7 | europe-london | designate | dns | True | public | http://10.0.4.1:9001/v1/ | | 15:08 |
| mugsie | ok, NotFound is what we wanted | 15:08 |
| mugsie | yoiu should have the url as "http://10.0.4.1:9001" | 15:08 |
| FransUrbo | In the neutron.conf:designate section? | 15:09 |
| mugsie | can you do "openstack zone list" then ? | 15:09 |
| mugsie | no in the keystone catalog | 15:09 |
| FransUrbo | Same thing. | 15:09 |
| mugsie | and no list of results? | 15:09 |
| FransUrbo | No. | 15:09 |
| mugsie | if you do designate --version what do you get? | 15:09 |
| FransUrbo | designate 2.1.0 | 15:10 |
| FransUrbo | The package say '2.0.0-2'.. | 15:10 |
| mugsie | damn - we added a handy feature in 2.2.0 | 15:11 |
| FransUrbo | Changing the url (removing the '/v1/') for all three endpoints give me "Could not find requested endpoint in Service Catalog." when I run "openstack zone list". | 15:11 |
| mugsie | openstack endpoint list | grep 9001 again? | 15:12 |
| FransUrbo | # openstack endpoint list | grep 9001 | 15:12 |
| FransUrbo | | 81021fe5f13d4680a60746aa8936d238 | europe-london | designate | dns | True | admin | http://10.0.4.1:9001 | | 15:12 |
| FransUrbo | | 9c037b48a3a448c28fe720f2f28baf3d | europe-london | designate | dns | True | internal | http://10.0.4.1:9001 | | 15:12 |
| FransUrbo | | cd32f85addbe4556acd22919a369adf7 | europe-london | designate | dns | True | public | http://10.0.4.1:9001 | | 15:12 |
| mugsie | i hpe this bug is not back, ... add a "/" on the end ? | 15:13 |
| mugsie | hope* | 15:13 |
| FransUrbo | # openstack zone list | 15:13 |
| FransUrbo | Could not find requested endpoint in Service Catalog. | 15:13 |
| FransUrbo | # openstack endpoint list | grep 9001 | 15:13 |
| FransUrbo | | 81021fe5f13d4680a60746aa8936d238 | europe-london | designate | dns | True | admin | http://10.0.4.1:9001/ | | 15:13 |
| FransUrbo | | 9c037b48a3a448c28fe720f2f28baf3d | europe-london | designate | dns | True | internal | http://10.0.4.1:9001/ | | 15:13 |
| FransUrbo | | cd32f85addbe4556acd22919a369adf7 | europe-london | designate | dns | True | public | http://10.0.4.1:9001/ | | 15:13 |
| mugsie | try with --debug on the end? | 15:14 |
| mugsie | "openstack zone list --debug" | 15:14 |
| FransUrbo | http://paste.openstack.org/show/536130/ | 15:15 |
| *** maestropandy has quit IRC | 15:16 | |
| mugsie | did you change anything in your designate setup? | 15:16 |
| FransUrbo | No. | 15:17 |
| mugsie | oh, damn. | 15:18 |
| mugsie | can you uncomment enable_api_v2 = True ? | 15:18 |
| mugsie | and restart the API ? | 15:18 |
| FransUrbo | Changing back the endpoint to having '.../v1/', I get: http://paste.openstack.org/show/536133/ | 15:19 |
| FransUrbo | Ok, setting 'enable_api_v2 = True' AND removing 'v1/' from the endpoint it works.. | 15:20 |
| mugsie | thats a bug | 15:21 |
| mlavalle | Yeap | 15:21 |
| mugsie | damn it. - I will file it now - its on us - we should have the v2 on by default | 15:21 |
| mugsie | the neutron integration should alwso work now | 15:22 |
| FransUrbo | Give me the link to the issue when you've filed so I can reference it on the Debian GNU/Linux designate package issue I'll file. | 15:22 |
| mugsie | https://bugs.launchpad.net/designate/+bug/1604043 | 15:25 |
| openstack | mugsie: Error: Could not gather data from Launchpad for bug #1604043 (https://launchpad.net/bugs/1604043). The error has been logged | 15:25 |
| openstackgerrit | Graham Hayes proposed openstack/designate: Enable V2 API as default https://review.openstack.org/343727 | 15:27 |
| mugsie | FransUrbo: bug + patch ^ | 15:28 |
| FransUrbo | Thanx! | 15:28 |
| FransUrbo | Bug wasn't very descriptive though :D | 15:32 |
| FransUrbo | Is there a log of this channel? | 15:33 |
| mugsie | yeap - in the topic | 15:33 |
| FransUrbo | Found it, thanx. | 15:35 |
| FransUrbo | Oh, bummer! Still get "Error publishing floating IP data in external DNS service". And the 404. | 15:36 |
| mugsie | OK, and the openstack zone show <zone> works ? | 15:38 |
| *** abalutoiu has quit IRC | 15:39 | |
| mlavalle | FransUrbo: what do you have in the 'url' parameter of the [designate] section in neutron.conf? | 15:39 |
| FransUrbo | mugsie: Yes | 15:39 |
| FransUrbo | mlavalle: I now have "url = http://openstack.domain.tld:9001/v2". | 15:39 |
| FransUrbo | Actually, by setting that (i had '/' when I mentioned it just now). | 15:40 |
| FransUrbo | With this URL, it works. In the sense that the record is created in Designate. However, Horizon is saying "Request Failed: internal server error", "Unable to associate IP address". | 15:41 |
| FransUrbo | Log say: ERROR neutron.api.v2.resource BadRequest: Expecting to find domain in project | 15:42 |
| FransUrbo | But it's set in the list, so.. ? | 15:42 |
| mugsie | OK, that may be a "keystone" domain | 15:42 |
| mugsie | but that is kinda out of my realm of knowledge - mlavalle is the neutron guru in this channel | 15:43 |
| mlavalle | FransUrbo: is there a Traceback in the neutron log? | 15:46 |
| *** _ducttape_ has quit IRC | 15:46 | |
| FransUrbo | Hmm, and deleting the instance (without first removing the floating IP) left the record in the domain.. | 15:46 |
| *** ducttape_ has joined #openstack-dns | 15:46 | |
| FransUrbo | http://paste.openstack.org/show/536137/ | 15:47 |
| *** fawadkhaliq has joined #openstack-dns | 15:49 | |
| *** fawadkhaliq has quit IRC | 15:53 | |
| *** abalutoiu has joined #openstack-dns | 15:55 | |
| mlavalle | FransUrbo: The referred domain is a keystone domain | 15:57 |
| FransUrbo | ? | 15:58 |
| *** dougwig has quit IRC | 16:01 | |
| FransUrbo | Bloody MySQL!! It keeps reseting my max_connections!! | 16:01 |
| *** dougwig has joined #openstack-dns | 16:03 | |
| *** Anonissimus has joined #openstack-dns | 16:03 | |
| mlavalle | FransUrbo: can we do a test with a floating ip, without involving instances / ports? | 16:06 |
| FransUrbo | Sure. | 16:07 |
| mlavalle | FransUrbo: Let's create a floatingip specifying a --dns-name and a --dns-domain. The dns name should be something that doesn't exist already in your zone. The --dns-domain should be the domain / zone that you already created. Do this from the user / tenant from which you can see the zone | 16:09 |
| FransUrbo | Ok, how do I do that? | 16:10 |
| mugsie | neutron floatingip-create --dns-name <name> --dns-domain <zone> ext-net (or whatever your external network is called) | 16:12 |
| mlavalle | FransUrbo: neutron floatingip-create <external network uuid> --dns_domain <yourdomain> --dns_name Fransfip | 16:13 |
| FransUrbo | Request Failed: internal server error while processing your request. | 16:14 |
| mlavalle | can I see the Traceback | 16:15 |
| mlavalle | ? | 16:15 |
| FransUrbo | http://bayour.com/misc/create-floatingip.txt | 16:16 |
| mlavalle | FransUrbo: But you can see the new record in the zone using the designate client, right? | 16:18 |
| FransUrbo | Yes. | 16:19 |
| *** fawadkhaliq has joined #openstack-dns | 16:20 | |
| mlavalle | ok, it is failing when creating the reverse lookup records. You configured in admin_auth_url in the designate section of neutron.conf the keystone v3 endpoint? | 16:21 |
| FransUrbo | yes. using the 'neutron' user.. | 16:22 |
| FransUrbo | I'll try the 'admin' user.. | 16:23 |
| FransUrbo | (I thought I did that earlier!?) | 16:23 |
| mlavalle | please don't do that | 16:23 |
| mlavalle | ahhhh.... yeah, let's try firs with the admin user | 16:23 |
| *** fawadkhaliq has quit IRC | 16:24 | |
| mlavalle | I don't think it is going to fix it, though | 16:24 |
| mlavalle | FransUrbo: ^^^^ | 16:24 |
| FransUrbo | Nope, didn't work. | 16:24 |
| mlavalle | As I suspected | 16:24 |
| mlavalle | FransUrbo: what is the value you have in admin_auth_url in the designate section of neutron.conf | 16:25 |
| mlavalle | ? | 16:25 |
| *** EricGonczer_ has quit IRC | 16:26 | |
| FransUrbo | http://openstack.domain.tld:35357/v3 | 16:26 |
| FransUrbo | That's what I have for every other service.. | 16:26 |
| mlavalle | FransUrbo: can we try http://openstack.domain.tld:35357/v2.0? | 16:26 |
| mlavalle | you have to restart the neutron server | 16:27 |
| mlavalle | after the change | 16:27 |
| FransUrbo | Unauthorized: The request you have made requires authentication | 16:27 |
| mlavalle | so you don;t have the Keystone v2.0 api enabled | 16:28 |
| mlavalle | where we are having the problem is in the authentication with v3.0 of keystone | 16:28 |
| mlavalle | we have a bug there | 16:28 |
| mlavalle | let's go back to http://openstack.domain.tld:35357/v3 | 16:29 |
| mlavalle | in neutron.conf | 16:29 |
| FransUrbo | Already did :) | 16:29 |
| mlavalle | also, please change allow_reverse_dns_lookup to False | 16:29 |
| FransUrbo | That worked. | 16:30 |
| mlavalle | yeap | 16:30 |
| mlavalle | so, with this configuration, you are going to be able to create dns records for your floating ips or ports in your zone | 16:31 |
| mlavalle | You are not creating reverse lookup records, though | 16:31 |
| FransUrbo | That's a bummer, but I can live with that (for a while). Any way to backport a fix? | 16:32 |
| mlavalle | for that, we will need to fix the keystone v3 | 16:32 |
| mlavalle | intercation | 16:32 |
| FransUrbo | Ok, so a major undertaking then? | 16:32 |
| mlavalle | No, I don't think it is major undertaking | 16:32 |
| mlavalle | But in the meantime, I recommend that you try to enable also the keystone v2 api, without removing the v3, and configure it | 16:33 |
| mlavalle | If you do this, you will be able to work around this limitation | 16:34 |
| mlavalle | FransUrbo: ^^^ | 16:34 |
| FransUrbo | How do I do that? | 16:37 |
| mlavalle | FransUrbo: I am not an expert on that. I am trying to find out | 16:37 |
| FransUrbo | Thanx. | 16:38 |
| FransUrbo | So to create a record for an instance, you _HAVE_ to use the "dns_name"? No other, smarter and less prone to forgetting?? :) | 16:45 |
| FransUrbo | [I have the memory of a gold fish! :)] | 16:47 |
| * FransUrbo is gone. On my way home, bbl. | 16:52 | |
| *** penchal has joined #openstack-dns | 16:54 | |
| *** pcaruana has quit IRC | 16:59 | |
| *** rudrajit has joined #openstack-dns | 17:00 | |
| *** rudrajit has quit IRC | 17:02 | |
| *** rudrajit has joined #openstack-dns | 17:03 | |
| *** amit213 has quit IRC | 17:05 | |
| *** Kdecherf has quit IRC | 17:05 | |
| *** zigo has quit IRC | 17:06 | |
| *** timsim has quit IRC | 17:06 | |
| *** harmw_ has quit IRC | 17:06 | |
| *** jmccrory has quit IRC | 17:06 | |
| *** zigo has joined #openstack-dns | 17:06 | |
| *** harmw has joined #openstack-dns | 17:07 | |
| *** rudrajit_ has joined #openstack-dns | 17:08 | |
| *** amit213 has joined #openstack-dns | 17:09 | |
| *** jmccrory has joined #openstack-dns | 17:10 | |
| *** rudrajit has quit IRC | 17:11 | |
| *** timsim has joined #openstack-dns | 17:14 | |
| *** Kdecherf has joined #openstack-dns | 17:20 | |
| *** james_li has joined #openstack-dns | 17:31 | |
| *** ducttape_ has quit IRC | 17:39 | |
| *** rudrajit has joined #openstack-dns | 17:43 | |
| *** rudrajit_ has quit IRC | 17:46 | |
| *** ducttape_ has joined #openstack-dns | 17:51 | |
| * FransUrbo is back. | 17:59 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/designate: Updated from global requirements https://review.openstack.org/343355 | 18:08 |
| *** haplo37_ has joined #openstack-dns | 18:15 | |
| *** james_li has quit IRC | 18:21 | |
| *** pcaruana has joined #openstack-dns | 18:34 | |
| *** mpbnka has joined #openstack-dns | 18:36 | |
| *** Alex_Stef has quit IRC | 18:55 | |
| *** fawadkhaliq has joined #openstack-dns | 19:05 | |
| *** penchal has quit IRC | 19:07 | |
| *** rudrajit has quit IRC | 19:24 | |
| *** james_li has joined #openstack-dns | 19:27 | |
| *** james_li has quit IRC | 19:33 | |
| *** james_li has joined #openstack-dns | 19:36 | |
| *** fawadkhaliq has quit IRC | 19:52 | |
| *** fawadkhaliq has joined #openstack-dns | 19:53 | |
| *** fawadkhaliq has quit IRC | 19:57 | |
| *** mpbnka has quit IRC | 20:31 | |
| *** EricGonczer_ has joined #openstack-dns | 20:37 | |
| *** EricGonczer_ has quit IRC | 21:13 | |
| *** haplo37_ has quit IRC | 21:17 | |
| *** FransUrbo has left #openstack-dns | 21:23 | |
| *** sonuk has joined #openstack-dns | 21:30 | |
| *** krot_vaca_jul19 is now known as krotscheck | 21:30 | |
| *** catintheroof has quit IRC | 21:30 | |
| *** rudrajit has joined #openstack-dns | 22:08 | |
| *** j4964 has joined #openstack-dns | 22:13 | |
| *** amit213 has quit IRC | 22:13 | |
| *** amit213 has joined #openstack-dns | 22:13 | |
| *** abalutoiu_ has joined #openstack-dns | 22:17 | |
| *** j4964d has joined #openstack-dns | 22:19 | |
| *** j4964 has quit IRC | 22:19 | |
| *** abalutoiu has quit IRC | 22:20 | |
| *** ducttape_ has quit IRC | 22:20 | |
| *** EricGonczer_ has joined #openstack-dns | 22:36 | |
| *** mlavalle has quit IRC | 22:43 | |
| *** james_li has quit IRC | 22:49 | |
| *** abalutoiu_ has quit IRC | 22:50 | |
| *** james_li has joined #openstack-dns | 22:52 | |
| *** pcaruana has quit IRC | 23:05 | |
| *** james_li has quit IRC | 23:07 | |
| *** rudrajit has quit IRC | 23:09 | |
| *** EricGonczer_ has quit IRC | 23:42 | |
| *** EricGonczer_ has joined #openstack-dns | 23:42 | |
| *** EricGonczer_ has quit IRC | 23:43 | |
| *** ducttape_ has joined #openstack-dns | 23:45 | |
| *** ducttape_ has quit IRC | 23:52 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!