*** itlinux has joined #openstack-dns | 00:04 | |
*** trungnv has joined #openstack-dns | 01:17 | |
*** caowei has joined #openstack-dns | 01:28 | |
*** daidv has joined #openstack-dns | 02:28 | |
*** itlinux has quit IRC | 03:32 | |
*** itlinux has joined #openstack-dns | 04:40 | |
*** caowei has quit IRC | 04:46 | |
*** caowei has joined #openstack-dns | 04:59 | |
*** itlinux has quit IRC | 05:28 | |
*** simon-AS5591 has quit IRC | 06:11 | |
openstackgerrit | Jens Harbott (frickler) proposed openstack/designate master: Update installation docs https://review.openstack.org/523392 | 06:45 |
---|---|---|
*** trungnv has quit IRC | 06:59 | |
*** simon-AS559 has joined #openstack-dns | 07:17 | |
*** simon-AS559 has quit IRC | 07:21 | |
*** simon-AS559 has joined #openstack-dns | 07:21 | |
*** simon-AS559 has quit IRC | 07:43 | |
*** simon-AS559 has joined #openstack-dns | 08:01 | |
*** simon-AS559 has quit IRC | 08:07 | |
*** simon-AS559 has joined #openstack-dns | 08:15 | |
*** AlexeyAbashkin has joined #openstack-dns | 08:16 | |
*** pcaruana has joined #openstack-dns | 08:23 | |
*** trungnv has joined #openstack-dns | 09:09 | |
*** Guest13268 is now known as zigo | 09:09 | |
*** MarkBaker has joined #openstack-dns | 09:24 | |
*** MarkBaker has quit IRC | 09:36 | |
*** MarkBaker has joined #openstack-dns | 09:59 | |
*** caowei has quit IRC | 10:16 | |
*** ianychoi_ is now known as ianychoi | 10:24 | |
*** MarkBaker has quit IRC | 10:27 | |
*** MarkBaker has joined #openstack-dns | 11:36 | |
*** itlinux has joined #openstack-dns | 13:50 | |
*** abalutoiu has joined #openstack-dns | 13:52 | |
*** cleong has joined #openstack-dns | 14:09 | |
*** JuanDaugherty has joined #openstack-dns | 14:53 | |
*** JuanDaugherty has quit IRC | 15:16 | |
*** AlexeyAbashkin has quit IRC | 15:20 | |
*** JuanDaugherty has joined #openstack-dns | 15:21 | |
*** itlinux has quit IRC | 15:26 | |
openstackgerrit | Graham Hayes proposed openstack/designate master: WIP Update to CI Jobs https://review.openstack.org/524683 | 15:43 |
openstackgerrit | Graham Hayes proposed openstack/designate master: WIP Update to CI Jobs https://review.openstack.org/524683 | 16:12 |
openstackgerrit | Merged openstack/designate master: Enable worker and producer by default in devstack local.conf https://review.openstack.org/524957 | 16:27 |
*** itlinux has joined #openstack-dns | 16:31 | |
*** _ix has joined #openstack-dns | 16:32 | |
_ix | Good morning folks. Implementing a vanilla pike designate node, and having some trouble with permissions. I just created a zone, and the zone is in an error state. | 16:32 |
_ix | The worker is logging `Stderr: u"rndc: 'addzone' failed: permission denied\n"` | 16:33 |
mugsie | _ix: OK looks like there is an issue with the rndc key | 16:33 |
mugsie | did you create an RNCD key and put it on the disk of the machine? | 16:34 |
_ix | I did. It's in /etc/designate/ and the owner is root:designate. | 16:34 |
mugsie | OK. the error should have logged a command it was trying to run, can you try run that manually? | 16:34 |
_ix | Sure. | 16:35 |
_ix | Seems to be the same error, running as root without rootwrap. | 16:41 |
_ix | `rndc: 'addzone' failed: permission denied` | 16:41 |
_ix | Strictly speaking, not a designate problem, but can you point me in the right direction? | 16:42 |
mugsie | Did you add the key on the far side, in the bind named.conf file? | 16:44 |
_ix | Let me verify that. | 16:44 |
mugsie | https://docs.openstack.org/designate/latest/contributor/backends/bind9.html gives a good start | 16:45 |
_ix | Thanks. | 16:45 |
mugsie | and the bind log files should have some detail as well | 16:45 |
*** itlinux has quit IRC | 16:46 | |
openstackgerrit | Merged openstack/designate master: Update installation docs https://review.openstack.org/523392 | 16:46 |
*** itlinux has joined #openstack-dns | 16:50 | |
openstackgerrit | Merged openstack/designate master: Update to correct status tables https://review.openstack.org/522365 | 17:04 |
openstackgerrit | Graham Hayes proposed openstack/designate master: Update deletion date for (zone|pool)-manager https://review.openstack.org/525256 | 17:09 |
_ix | Thanks again, mugsie. I'm on my way now, getting through some other erros. I don't think I was quite ready to turn designate on. | 17:23 |
mugsie | _ix: thats good, if you have any other questions, just drop them in here | 17:24 |
eglute | hello, so i have some ghost stuff happening, something keeps sending messages like this: "transfer of 'test.example.net/IN' from 10.0.16.10#5354: failed to connect: timed out" | 17:35 |
eglute | but there is nothing under zones | 17:35 |
eglute | lots of testing was done, so something is left over somewhere | 17:36 |
eglute | that message is from a bind server log | 17:36 |
mugsie | eglute: and 10.0.16.10 is a designate server? | 17:37 |
eglute | yes | 17:37 |
mugsie | OK, with an admin account try running `openstack zone list --all-projects` | 17:38 |
eglute | Unexpected exception for http://10.0.16.10:9001/v2/zones?: Header value True must be of type str or bytes, not <type 'bool'> | 17:40 |
mugsie | :/ | 17:40 |
eglute | ideas? | 17:40 |
mugsie | that must be a real old version of the client | 17:40 |
eglute | newton? | 17:40 |
mugsie | try running `designate --version` ? | 17:41 |
eglute | designate 2.3.0 | 17:41 |
mugsie | yeah, that fix did not make it back there :/ | 17:42 |
eglute | what version of client should i get | 17:42 |
mugsie | I am checking now | 17:42 |
eglute | thank you | 17:43 |
mugsie | 2.4.0 and above have the fix | 17:44 |
mugsie | the latest version should work with all versions of the v2 API | 17:44 |
eglute | so should get newer designate client or newer openstack client? | 17:45 |
mugsie | newer designate client | 17:45 |
mugsie | it is an osc plugin | 17:45 |
mugsie | so upgrading our python-designateclient version updates the logic for the openstack cli | 17:46 |
eglute | thank you mugsie will try that | 17:46 |
eglute | mugsie openstack zone list --all-projects is empty | 17:51 |
eglute | returns empty list | 17:51 |
mugsie | Oh. | 17:51 |
mugsie | you may need to remove the zone from bind manually then | 17:51 |
*** simon-AS559 has quit IRC | 17:51 | |
eglute | from designate container? | 17:52 |
mugsie | if the zone was not deleted fully by designate - but that is worrying | 17:52 |
mugsie | with a "rndc delzone -clean test.example.net" | 17:53 |
eglute | yes.. it is stuck on designate side somewhere | 17:53 |
eglute | so, | 17:53 |
eglute | i do not have bind running on designate container. should I be? | 17:53 |
eglute | i have separate bind server and they are talking via rndc | 17:54 |
mugsie | no, that is fine | 17:55 |
mugsie | but for this case, just manually running the command (from the designate container or the bind container) should fix the issue | 17:56 |
eglute | ok, ran them | 17:57 |
eglute | thank you! | 17:57 |
eglute | mugsie what is the purpose of adding desginate server through CLI? is that same as ns server? | 17:59 |
mugsie | yes - we have moved away from doing from the CLI | 18:00 |
mugsie | it caused too many issues | 18:00 |
mugsie | it *is* possible, but should be avoided | 18:00 |
mugsie | (if you saw it on any of the docs, please let know which ones, I will go delete it :) ) | 18:01 |
eglute | ok, so i tried to just add a zone without having a server, and it told me i needed it. but this was with old client | 18:01 |
mugsie | OK, that should have been filled in if you had ran the "designate-manage pool update" command | 18:04 |
eglute | do i need to run that command even if i restart all the designate services? | 18:05 |
mugsie | yeah, the pools.yaml file is not read until that command is read | 18:06 |
mugsie | command is run* | 18:06 |
mugsie | it loads the contents of the file into the DB | 18:06 |
eglute | ah ok | 18:08 |
eglute | so if i added designate server-create how do i delete it if it the only one there | 18:10 |
mugsie | when you run the designate manage command it *should* delete it | 18:13 |
mugsie | but it is not a use case I have tested recently | 18:13 |
eglute | cool | 18:13 |
eglute | thank you | 18:13 |
eglute | so i should be able to install designate-manage via pip correct? | 18:36 |
eglute | mugsie on install directions i dont see anything about installing designate-manage separately, is that part of another package? | 18:37 |
mugsie | it should be installed as part of any of the designate-* packages | 18:38 |
eglute | hm. when was this added? after newton? | 18:39 |
mugsie | no, grizzly | 18:42 |
mugsie | or before even | 18:42 |
mugsie | what OS is this? | 18:42 |
mugsie | they may have split the package out a bit more than I expected | 18:42 |
eglute | this is on ubuntu | 18:43 |
eglute | oh i think it is there, | 18:44 |
eglute | at least i see a file | 18:44 |
eglute | but not in path i guess? | 18:44 |
mugsie | weird, it should be. | 18:46 |
mugsie | Xenial / newton ? | 18:46 |
mugsie | I can have a look and file a bug with them if it is not in the path | 18:46 |
openstackgerrit | Graham Hayes proposed openstack/designate master: Add zone 'attributes' to api-ref https://review.openstack.org/525274 | 18:47 |
eglute | mugsie this is with OSA so not sure if that makes a difference | 18:49 |
eglute | so in docs, you have this " su -s /bin/sh -c "designate-manage pool update" designate" | 18:49 |
eglute | i ran only "designate-manage pool update" did i need additional "designate at the end? | 18:50 |
openstackgerrit | Merged openstack/python-designateclient master: Avoid tox_install.sh for constraints support https://review.openstack.org/524819 | 18:52 |
_ix | mugsie: I can't seem to find where it's getting the value of 127.0.0.1 as the rndc host. | 18:55 |
_ix | I have 10.13.0.5, an external dns server specified everywhere. Does a local bind server absolutely need to be running? | 18:56 |
mugsie | _ix: no, not at all | 18:57 |
eglute | mugsie any ideas on this error: "NeedAbsoluteNameOrOrigin: An attempt was made to convert a non-absolute name to wire when there was also a non-absolute (or missing) origin." | 18:57 |
mugsie | can you post a link to a pools.yaml ? | 18:57 |
_ix | The logged command for each failure is an `rndc -s 127.0.0.1` | 18:57 |
_ix | Sure. | 18:57 |
_ix | https://paste.ubuntu.com/26113816/ | 19:01 |
*** corey_ has joined #openstack-dns | 19:01 | |
eglute | _ix make sure you dont have 127.0.0.1 in designate.conf as well | 19:02 |
mugsie | _ix: what version is this? | 19:02 |
mugsie | and are you running designate-worker or designate-pool-manager ? | 19:02 |
*** cleong has quit IRC | 19:03 | |
_ix | This is pike stable. | 19:03 |
_ix | I'm using pool manager. | 19:03 |
*** JuanDaugherty has quit IRC | 19:04 | |
_ix | Is this pools.yaml out of date with pike's format? | 19:04 |
mugsie | no, that is fine - the format hasn't changed | 19:05 |
mugsie | can you restart pool-manager ? | 19:05 |
frickler | mugsie: could I have your feedback on https://bugs.launchpad.net/python-designateclient/+bug/1736161 before I start coding, pls? not urgent, just making sure that you have seen it. I'm also thinking to ask the OSC folk for their advice | 19:05 |
openstack | Launchpad bug 1736161 in python-designateclient "The records option gobbles up all trailing parameters" [Undecided,In progress] - Assigned to Dr. Jens Harbott (j-harbott) | 19:05 |
mugsie | frickler: ouch. yeah, that was a bad design | 19:07 |
mugsie | I think talking to the OSC folks would be a good idea | 19:07 |
mugsie | I do like the deprecation and new command route, we do need to have stablity there | 19:08 |
_ix | Restarting pool-manager... | 19:08 |
_ix | mugsie: Still getting failure to connect on 127.0.0.1#953. | 19:16 |
_ix | I must have a fundamental misunderstanding here. | 19:18 |
eglute | mugsie the zombies are back. how do i delete everything from designate DB? | 19:19 |
mugsie | _ix: one minute, looking up something | 19:19 |
mugsie | eglute: stop designate-central, drop the db, then re create it, and run the "designate-manage database sync" command again | 19:20 |
mugsie | then start designate-central | 19:20 |
eglute | how do i drop db | 19:20 |
mugsie | then run the "designate-manage pool update" command | 19:20 |
mugsie | you need to use the mysql command line client to do that | 19:21 |
eglute | ok | 19:21 |
mugsie | _ix: can you run "designate-manage pool generate_file --file /tmp/pools.yaml" and post it? | 19:22 |
_ix | Yes. | 19:23 |
mugsie | Make sure you use the "--file" bit, or it will overwrite your current file there | 19:23 |
_ix | Son of a gun. 127 is still in there. | 19:24 |
_ix | Thanks, mugsie. | 19:24 |
mugsie | _ix: ahha | 19:25 |
mugsie | "designate-manage pool update" | 19:25 |
mugsie | i think we need to highlight that just writing to the file is not enough, you have to run the command :) | 19:25 |
*** simon-AS559 has joined #openstack-dns | 19:25 | |
mugsie | (it is a weird one - that command just loads the yaml into the DB) | 19:26 |
*** simon-AS5591 has joined #openstack-dns | 19:28 | |
*** simon-AS559 has quit IRC | 19:30 | |
eglute | mugsie now i get Unknown database 'designate when i run "designate-manage database sync | 19:31 |
eglute | do i need to restart all the services? | 19:31 |
_ix | mugsie: Thanks again. | 19:32 |
_ix | Closer. | 19:32 |
mugsie | eglute: did you create the new DB and give the designate user access to it? | 19:32 |
eglute | doh | 19:32 |
openstackgerrit | Graham Hayes proposed openstack/designate master: Update deletion date for (zone|pool)-manager https://review.openstack.org/525256 | 19:38 |
_ix | mugsie: Things seem to be working better now, but I'm used to seeing flat files dropeed as a consequence of zone creation. | 19:44 |
_ix | There aren't any complaints from designate at this time, but, how can I be certain it's working, short of creating some records and seeing if they resolve? | 19:44 |
*** penick has joined #openstack-dns | 19:45 | |
mugsie | or a dig @server zone SOA should give you back data | 19:45 |
mugsie | (like the email you used to create it) | 19:46 |
_ix | That's a fine idea. | 19:46 |
openstackgerrit | Graham Hayes proposed openstack/designate master: WIP Update to CI Jobs https://review.openstack.org/524683 | 19:50 |
*** itlinux has quit IRC | 20:01 | |
openstackgerrit | Graham Hayes proposed openstack/designate master: Update deletion date for (zone|pool)-manager https://review.openstack.org/525256 | 20:08 |
eglute | mugsie i have dropped DB and re-ran the manage command. I am getting this when trying to create a zone: "openstack zone create --email admin@example.com example.com. | 20:27 |
eglute | no_servers_configured | 20:27 |
eglute | " | 20:27 |
mugsie | are you using designate-pool-manager or designate-worker | 20:27 |
mugsie | ? | 20:27 |
mugsie | oh, did you re run the "designate-manage pool update" command as well? | 20:28 |
eglute | worker | 20:28 |
eglute | should i have pool manager running? | 20:28 |
eglute | yes i ran pool update | 20:29 |
_ix | I see that that designate-pool-manager is not prefered. Is this correct? | 20:29 |
mugsie | _ix: yes | 20:29 |
mugsie | eglute: no that should be OK | 20:29 |
_ix | Thanks. | 20:29 |
mugsie | _ix: designate-pool-manager will be deleted early next cycle | 20:29 |
mugsie | eglute: can you run "designate-manage pool generate_file --file /tmp/pools.yaml" and post it? | 20:30 |
mugsie | and can you see what error / trace is in the designate-central logs? | 20:32 |
eglute | mugsie looks like after i re-ran my playbooks some things got wiped out. i will need to update the pools.yaml file first i think. thanks | 20:32 |
mugsie | no problem | 20:33 |
*** penick has quit IRC | 20:52 | |
*** penick has joined #openstack-dns | 20:52 | |
*** McClymontS has joined #openstack-dns | 21:03 | |
*** McClymontS has quit IRC | 21:03 | |
*** itlinux has joined #openstack-dns | 21:05 | |
*** itlinux has quit IRC | 21:06 | |
_ix | Sorry to bother you folks again. It's possible to run designate self contained, with a local bind server on the designate host itself, right? | 21:08 |
mugsie | defintitly | 21:10 |
mugsie | (thats is one of the configs that runs in the CI gate) | 21:10 |
_ix | OK. Good. I'm figuring it out, but, right now it says I don't have any servers configured. | 21:13 |
openstackgerrit | Graham Hayes proposed openstack/designate master: WIP Update to CI Jobs https://review.openstack.org/524683 | 21:14 |
mugsie | and the "ns_records" show in the designate-manage pool generate_file output ? | 21:17 |
eglute | mugsie i do have a question about ns_records. in docs, it says: hostname: ns1-1.example.org. what should it be in the real world? | 21:21 |
eglute | like, if i am going to have designate be primary for eglute.com, should it be something like ns1-1.eglute.com? | 21:21 |
mugsie | it should be the public DNS names of the Bind servers. For some people that would be something like ns1.domain.com. and others it may be ns1.bigcorp.com | 21:26 |
mugsie | these are the NS servers for all domains hosted by designate | 21:27 |
eglute | ah ok. so the bind servers must have public dns records? | 21:28 |
_ix | Ugh. | 21:28 |
_ix | It's basically blank. | 21:28 |
mugsie | yes, these are where you tell your registrar to point people looking for DNS information to | 21:29 |
* mugsie just looked at the time | 21:29 | |
eglute | thank you mugsie! what if it is internal bind server, does it still have to start with ns1? or does it matter? | 21:30 |
mugsie | I am going to leave the office now, but I will have a look in the morning for any more questions :) | 21:30 |
eglute | thank you mugsie for all your help! | 21:30 |
*** corey_ has quit IRC | 21:30 | |
mugsie | eglute: no, it can be whatever - ns is just a common prefix | 21:30 |
eglute | cool, thank you mugsie | 21:30 |
eglute | have a good evening! | 21:30 |
mugsie | thanks :) | 21:30 |
*** penick has quit IRC | 21:36 | |
*** penick has joined #openstack-dns | 21:37 | |
*** JonathanS is now known as JonathanD | 21:39 | |
*** pcaruana has quit IRC | 21:39 | |
*** JonathanD is now known as JonathanS | 21:40 | |
*** simon-AS559 has joined #openstack-dns | 22:51 | |
*** simon-AS5591 has quit IRC | 22:54 | |
*** simon-AS559 has quit IRC | 22:55 | |
*** simon-AS559 has joined #openstack-dns | 22:55 | |
*** simon-AS559 has quit IRC | 23:02 | |
*** JuanDaugherty has joined #openstack-dns | 23:32 | |
*** MarkBaker has quit IRC | 23:37 | |
*** penick has quit IRC | 23:37 | |
*** MarkBaker has joined #openstack-dns | 23:49 | |
*** ianychoi has quit IRC | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!