| *** ysandeep|out is now known as ysandeep | 04:20 | |
| *** frenzy_friday is now known as anbanerj|ruck | 04:35 | |
| *** bhagyashris_ is now known as bhagyashris | 06:21 | |
| *** ysandeep is now known as ysandeep|intv | 06:25 | |
| *** ysandeep|intv is now known as ysandeep | 08:51 | |
| *** ysandeep is now known as ysandeep|lunch | 08:58 | |
| *** ysandeep|lunch is now known as ysandeep | 09:21 | |
| *** dviroel|out is now known as dviroel|rover | 10:48 | |
| *** rlandy is now known as rlandy|ruck | 11:10 | |
| *** jpena|off is now known as jpena | 11:27 | |
| *** jcapitao is now known as jcapitao_lunch | 11:28 | |
| *** dpawlik7 is now known as dpawlik | 11:56 | |
| *** dviroel is now known as dviroel|rover | 13:08 | |
| *** jcapitao_lunch is now known as jcapitao | 13:18 | |
| *** ysandeep is now known as ysandeep|dinner | 14:34 | |
| dpawlik | clarkb, fungi: hey, someone against to add users account: tristanC and nhicher on logscraper01.openstack.org ? | 14:56 |
|---|---|---|
| fungi | dpawlik: feel free to do so | 14:57 |
| dpawlik | thanks fungi | 14:57 |
| dpawlik | fungi: would like to start logscraper + loggearman there and check with Reed how its working | 14:58 |
| dpawlik | eh,not this reed, but Reed_ :) | 14:58 |
| fungi | yeah, we've also hit a snag with the dns setup it seems, i was just replying to Reed_ by e-mail a moment ago | 14:59 |
| fungi | openstack.org dns is hosted in rackspace's dns service, and it doesn't allow creation of custom subdomain ns resource records, instead it forces you to create a new zone which the ns rrs will be at the root of | 15:00 |
| fungi | that seems to work for delegation as far as resolvers are concerned, but results in also serving an soa for that subdomain's zone, and that seems to cause some problem for delegating to aws's dns service, which you have to use if you want them to autogenerate ssl certs | 15:01 |
| *** dviroel|rover is now known as dviroel|rover|lunch | 15:01 | |
| fungi | he didn't elaborate on exactly why that soa record is presenting a problem, but unless it can be worked around on the aws side, the workarounds on our side are bound to be ugly | 15:02 |
| fungi | right now i'm getting successful resolution of the opensearch.logs.openstack.org name in dns via the existing delegation, so whatever's breaking must be with something else | 15:03 |
| dpawlik | fungi: oh, thats complicated | 15:05 |
| fungi | yeah, ain't it tho | 15:05 |
| dpawlik | fungi: at home I'm still got an issue on resolving that name | 15:05 |
| fungi | interesting | 15:05 |
| fungi | fungi@dhole:~$ host opensearch.logs.openstack.org | 15:06 |
| fungi | opensearch.logs.openstack.org is an alias for search-test-cloudformation-domain-2-rjml2ux7mxid6urm4pw2p3b4di.us-east-1.es.amazonaws.com. | 15:06 |
| dpawlik | fungi: could you send your DNS address? | 15:06 |
| fungi | search-test-cloudformation-domain-2-rjml2ux7mxid6urm4pw2p3b4di.us-east-1.es.amazonaws.com has address 34.230.189.146 | 15:06 |
| fungi | search-test-cloudformation-domain-2-rjml2ux7mxid6urm4pw2p3b4di.us-east-1.es.amazonaws.com has address 54.160.109.197 | 15:06 |
| fungi | looks like it's a round-robin address record for those two | 15:06 |
| fungi | well, it's a cname to the round robin address records | 15:07 |
| dpawlik | fungi: maybe the google dns and cloud flare dns got multiple instances and this one in EU is still not updated... but I can be wrong | 15:08 |
| dpawlik | fungi: from my side, I still can not resolve that address | 15:08 |
| fungi | or it could be something going bad with dnssec, i suppose | 15:08 |
| dpawlik | "it's always dns" | 15:09 |
| dpawlik | I need to buy such tshirt | 15:09 |
| fungi | "it can't be dns. there's no way it's dns... it was dns" | 15:09 |
| dpawlik | exactly, this one | 15:10 |
| fungi | i don't *think* it's dnssec causing issues though, since rackspace isn't doing dnssec for the openstack.org domain at all | 15:11 |
| fungi | we do dnssec for opendev.org and similar domains hosted in opendev's nameservers, but rackspace (who hosts the openstack.org dns) doesn't | 15:12 |
| *** ysandeep|dinner is now known as ysandeep | 15:14 | |
| opendevreview | Merged openstack/ci-log-processing master: Convert max-skipped parameter to int https://review.opendev.org/c/openstack/ci-log-processing/+/820848 | 15:20 |
| dpawlik | fungi: aha | 15:20 |
| fungi | well, anyway, it sounds like Reed_ thinks switching to hosting the cname rrs in the openstack.org zone should work after all. originally i got the impression the reason he wanted to do it via delegation was that aws cert manager required the names be hosted in their route 53 dns provider | 15:23 |
| fungi | but reading between the lines, now i suspect the reason he wanted to do it via delegation was that route 53 can infer names from aws directly so that you don't have to manually add records for the services | 15:24 |
| dpawlik | fungi: good to know. AWS is something that I use for 4 weeks and only 2 services... It was long time ago | 15:50 |
| opendevreview | Merged openstack/openstack-zuul-jobs master: Update Yoga testing runtime with new updates https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/820286 | 16:01 |
| *** dviroel|rover|lunch is now known as dviroel|rover | 16:12 | |
| *** ysandeep is now known as ysandeep|out | 16:31 | |
| *** amoralej is now known as amoralej|off | 16:44 | |
| clarkb | dpawlik: sorry for catching up late, but I would say interested parties should be encouraged :) | 17:25 |
| clarkb | not objections from me | 17:25 |
| *** jpena is now known as jpena|off | 17:50 | |
| *** sshnaidm is now known as sshnaidm|afk | 19:06 | |
| opendevreview | Merged openstack/ptgbot master: Update ptgbot's docker image to bullseye https://review.opendev.org/c/openstack/ptgbot/+/821338 | 19:27 |
| *** dviroel|rover is now known as dviroel|rover|afk | 21:02 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!