Wednesday, 2018-06-20

*** jafeha has quit IRC00:04
*** rui has quit IRC00:05
*** blake has quit IRC00:10
*** blake has joined #openstack-dns00:12
*** blake has quit IRC00:32
*** jafeha has joined #openstack-dns00:37
*** blake has joined #openstack-dns00:38
*** blake has quit IRC00:45
*** trungnv has quit IRC01:22
*** trungnv has joined #openstack-dns01:23
*** ianychoi_ has quit IRC02:27
*** ianychoi has joined #openstack-dns02:30
*** Leo_m has quit IRC02:49
openstackgerritmiaoyuliang proposed openstack/designate master: Install and configure for Red Hat Enterprise Linux and CentOS miss several steps  https://review.openstack.org/57669003:05
openstackgerritmiaoyuliang proposed openstack/designate master: Install and configure for Red Hat Enterprise Linux and CentOS miss several steps  https://review.openstack.org/57669403:22
*** wlmbasson has quit IRC03:41
*** fyx has quit IRC03:44
*** wlmbasson has joined #openstack-dns03:45
*** fyx has joined #openstack-dns03:46
*** mwhahaha has quit IRC03:48
*** timsim has quit IRC03:48
*** amitry has quit IRC03:49
*** johnsom has quit IRC03:50
*** wlmbasson has quit IRC03:50
*** simonmcc has quit IRC03:51
*** andrewbogott has quit IRC03:51
*** fyx has quit IRC03:51
*** lxkong has quit IRC03:51
*** serverascode has quit IRC03:52
*** openstack has joined #openstack-dns04:29
*** ChanServ sets mode: +o openstack04:29
*** masber has quit IRC04:59
openstackgerritmiaoyuliang proposed openstack/python-designateclient master: just for test  https://review.openstack.org/57671505:10
*** andrewbogott has joined #openstack-dns05:22
*** wlmbasson has joined #openstack-dns05:24
*** lxkong has joined #openstack-dns05:24
*** mwhahaha has joined #openstack-dns05:28
*** serverascode has joined #openstack-dns05:28
*** simonmcc has joined #openstack-dns05:33
*** johnsom has joined #openstack-dns05:36
*** fyx has joined #openstack-dns05:43
*** trungnv has quit IRC05:45
*** wlmbasson has quit IRC05:51
*** fyx has quit IRC05:51
*** andrewbogott has quit IRC05:55
*** mwhahaha has quit IRC05:56
*** simonmcc has quit IRC05:57
*** johnsom has quit IRC05:57
*** lxkong has quit IRC05:58
*** serverascode has quit IRC05:58
*** trungnv has joined #openstack-dns06:09
*** andrewbogott has joined #openstack-dns06:12
*** fyx has joined #openstack-dns06:16
*** wlmbasson has joined #openstack-dns06:17
*** simonmcc has joined #openstack-dns06:21
*** timsim has joined #openstack-dns06:21
*** timsim has quit IRC06:21
*** timsim has joined #openstack-dns06:21
*** lxkong has joined #openstack-dns06:21
*** serverascode has joined #openstack-dns06:21
*** serverascode has quit IRC06:22
*** serverascode has joined #openstack-dns06:22
*** lxkong has quit IRC06:22
*** lxkong has joined #openstack-dns06:22
*** johnsom has joined #openstack-dns06:22
*** d34dh0r53 has quit IRC06:24
*** d34dh0r53 has joined #openstack-dns06:24
*** mwhahaha has joined #openstack-dns06:25
*** serverascode has quit IRC06:26
*** serverascode has joined #openstack-dns06:26
*** briner has joined #openstack-dns06:28
*** serverascode has quit IRC06:29
*** serverascode has joined #openstack-dns06:30
openstackgerritmiaoyuliang proposed openstack/python-designateclient master: server-get/update show wrong values about 'id' and 'update_at'  https://review.openstack.org/57640806:33
*** amitry_ has joined #openstack-dns06:55
*** rui has joined #openstack-dns07:31
*** andrewbogott has quit IRC07:42
*** andrewbogott has joined #openstack-dns07:42
*** rui has quit IRC07:46
*** AlexeyAbashkin has joined #openstack-dns07:49
*** briner has quit IRC07:56
*** rpittau is now known as rpittau_08:05
*** rpittau_ is now known as elfosardo08:05
*** elfosardo is now known as rpittau08:05
*** rpittau is now known as rpittau__08:09
*** rpittau__ is now known as rpittau08:09
*** rpittau has quit IRC08:10
*** rpittau has joined #openstack-dns08:10
*** peereb has joined #openstack-dns08:10
*** briner has joined #openstack-dns08:10
*** pcaruana has joined #openstack-dns08:11
*** peereb has quit IRC08:14
*** peereb has joined #openstack-dns08:15
*** peereb has quit IRC08:16
*** peereb has joined #openstack-dns08:16
*** peereb has quit IRC08:17
*** peereb has joined #openstack-dns08:18
*** peereb has quit IRC08:19
*** peereb has joined #openstack-dns08:19
*** peereb has quit IRC08:20
*** peereb has joined #openstack-dns08:21
*** peereb has quit IRC08:21
*** briner_ has joined #openstack-dns08:36
*** briner has quit IRC08:37
*** salmankhan has joined #openstack-dns09:02
*** briner_ has quit IRC09:04
*** briner has joined #openstack-dns09:05
*** briner has quit IRC09:10
*** salmankhan has quit IRC10:04
*** salmankhan has joined #openstack-dns10:04
*** Shadowphax has joined #openstack-dns10:04
*** briner has joined #openstack-dns12:00
*** salmankhan has quit IRC12:10
*** rfreire has joined #openstack-dns12:26
ShadowphaxI actually have no idea what i am doing with designate12:44
rfreire¯\_(ツ)_/¯12:44
Shadowphaxokay .. so i've configured designate and the first thing I have seen in the logs is related to " not enough nameservers "12:44
Shadowphaxhow does the resolution occur from external clients to my DNS servers ?12:46
Shadowphaxif i create shadowphax.sample.org12:46
rfreireShadowphax, well jokes apart12:47
Shadowphaxmy upstream DNS servers should be delegating that to bind right ?12:47
rfreireShadowphax, I have just entered the IRC channel and might have lost some extra context12:47
Shadowphaxlet me paste12:47
rfreireShadowphax, but I have written a somewhat step-by-step, tests included, for Designate setup (for Newton version, might be good enough for latest)12:47
rfreireShadowphax, https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/10/html-single/dns-as-a-service_guide/index#manual_dnsaas_installation12:48
rfreireShadowphax, take a look at this. It is really easy to follow12:48
rfreireShadowphax, and then there's a test session down there, on what to do and what to expect.12:48
Shadowphaxawesome thanks12:48
ShadowphaxI used Kolla to deploy12:49
Shadowphaxso its does most of what you have listed12:49
Shadowphaxbut I will compare12:49
Shadowphaxi am also confused about possible the other infrastructural components12:49
Shadowphaxlike external DNS and how it references the designate-backend-bind9 stuff12:50
rfreireShadowphax, ah been there man.12:51
frickleractually it would be a good idea to add this step to our installation guide I think. might be a bit out of scope, but certainly helpful for newcomers. what to you think, mugsie?12:55
Shadowphax@frickler, which installation guide /12:56
fricklerShadowphax: if you create a zone shadowphax.sample.org in designate and your bind server is named ns1.sample.org, you would need to create an entry "shadowphax.sample.org. NS ns1.sample.org" in your sample.org zone12:57
fricklerShadowphax: https://docs.openstack.org/designate/queens/install/index.html12:57
Shadowphaxi don't have that12:58
*** rfreire has quit IRC12:59
fricklerShadowphax: well, if you want globally visible DNS, you need to start with some zone that you register at some registrar12:59
Shadowphaxwhich I have12:59
Shadowphaxand they have delegated shadowphax.sample.org to the designate nameservers12:59
Shadowphaxwhich would be the controller nodes13:00
fricklerwell, if that is where your bind servers are running, then things should be fine13:00
Shadowphaxhmm .. just noticed that my public ip is not listening on 5313:02
*** salmankhan has joined #openstack-dns13:02
*** rfreire has joined #openstack-dns13:04
Shadowphaxnow complaining about SERVFAIL13:10
Shadowphaxwhen doing external lookups13:11
rfreireShadowphax, hi hi13:11
* rfreire is back13:11
rfreireShadowphax, what's going on right now?13:11
Shadowphaxso from what i could see my backend-bind9 was not listening with its external_ip on port 5313:12
Shadowphaxi've changed that now ..13:12
rfreireShadowphax, nicey!13:12
Shadowphaxso when doing lookups against shadowphax.sample.org i'm getting these SERVFAIl errors13:13
fricklerShadowphax: but zone creation in designate worked and the zone status is active?13:14
*** briner has quit IRC13:15
Shadowphaxno.. i get an error after the pending state13:15
Shadowphaxits actually erroring out at the creation process13:16
fricklerso there should be some error message related to that either in one of the designate-* logs or in the bind log13:17
ShadowphaxCould not find 1529497922 for shadowphax.sample.org. on enough nameservers.13:19
Shadowphaxthat comes from designate-worker13:19
rfreireShadowphax, nice13:20
fricklerShadowphax: well, that is the result of the zone not being created in bind, but there should be some other error before that. your maybe your pool.yaml is broken, can you share it on paste.openstack.org?13:20
rfreireShadowphax, that menas: Designate could not create the zone (and verify it) in your BIND servers13:21
Shadowphaxall other logs are good13:21
rfreireShadowphax, a grep ERR /var/log/designate/* will also be of help in the pastebin.13:22
rfreireShadowphax, other side note; in the BIND servers:13:23
rfreireShadowphax, if you are using SELinux, you will need to apply a boolean13:23
rfreireShadowphax, AND you will also have to set a group permission13:23
rfreireOtherwise, it will hinder the zone creation13:23
rfreireand thus13:23
rfreirethe errors.13:23
rfreireNamely:13:23
rfreire# setsebool named_write_master_zones 1 (the SELinux boolean)13:24
rfreire# chmod g+w /var/named13:24
rfreire(the permission group in /var/named)13:24
Shadowphaxusing ubuntu so no selinux13:25
rfreirealrighto; check the group write perms13:27
*** Shadowphax has quit IRC13:39
*** briner has joined #openstack-dns13:42
*** PsionTheory has joined #openstack-dns13:49
fricklerwhy do folks always leave when things get interesting? ftr, the directory would be /var/cache/bind/ for ubuntu and should be owned by bind:bind13:54
rfreirefrickler++14:03
*** diman has joined #openstack-dns14:22
*** Shadowphax has joined #openstack-dns14:41
*** briner has quit IRC14:43
openstackgerritPavlo Shchelokovskyy proposed openstack/designate master: Init sslutils before service start  https://review.openstack.org/57688614:50
*** rfreire_ has joined #openstack-dns14:58
*** rfreire has quit IRC15:00
*** briner has joined #openstack-dns15:03
*** PsionTheory has quit IRC15:27
*** briner has quit IRC15:28
*** rfreire_ has quit IRC15:38
*** Shadowphax has quit IRC16:43
*** briner has joined #openstack-dns16:45
*** rfreire has joined #openstack-dns16:49
*** diman has quit IRC16:54
*** salmankhan has quit IRC17:16
*** AlexeyAbashkin has quit IRC17:23
*** briner has quit IRC17:50
*** diman has joined #openstack-dns18:07
*** diman has quit IRC18:18
*** ianychoi has quit IRC18:36
*** ircuser-1 has quit IRC18:45
*** rui has joined #openstack-dns18:46
*** rfreire has quit IRC19:00
*** Shadowphax has joined #openstack-dns19:08
*** rui has quit IRC19:13
*** Shadowphax has quit IRC19:17
*** Shadowphax has joined #openstack-dns19:19
Shadowphax@frickler, apologies for leaving ... our upstream provider had problems with their network19:21
*** rfreire has joined #openstack-dns19:31
Shadowphaxrfreire: apologies for quiting earlier, had problems with our upstream provider19:35
Shadowphaxso it seems that BIND is the problem in this case - http://paste.openstack.org/show/723955/19:37
Shadowphaxbut its port 5354 which is  not listening on the private IP thats causing the issue19:39
*** Deknos has joined #openstack-dns19:39
Shadowphaxits only listening on the public interface, which it should not19:39
*** Deknos has left #openstack-dns19:41
*** salmankhan has joined #openstack-dns19:41
*** boris_42_ has joined #openstack-dns20:10
mugsieShadowphax: you need to update  the designate.conf to make minidns listen on the right interface20:26
Shadowphax@mugsie, indeed i did20:29
Shadowphaxand it work20:29
Shadowphaxworked20:29
Shadowphaxand now everything is working .20:29
*** salmankhan has quit IRC20:30
Shadowphaxdefinitely going to update the Kolla documentation of Designate :)20:37
*** pcaruana has quit IRC20:41
*** briner has joined #openstack-dns20:52
*** briner has quit IRC21:14
*** rfreire has quit IRC21:30
*** Shadowphax has quit IRC21:31
*** Shadowphax has joined #openstack-dns21:49
*** Shadowphax has quit IRC22:34
*** rui has joined #openstack-dns22:43
*** rui has quit IRC23:09
*** boris_42_ has quit IRC23:19

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!