openstackgerrit | Hongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node https://review.opendev.org/708213 | 00:08 |
---|---|---|
openstackgerrit | James Kirsch proposed openstack/kolla-ansible master: Refactor copy certificates task https://review.opendev.org/719104 | 00:19 |
*** tonythomas has quit IRC | 00:23 | |
openstackgerrit | Hongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node https://review.opendev.org/708213 | 00:26 |
openstackgerrit | Hongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node https://review.opendev.org/708213 | 00:27 |
openstackgerrit | Hongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node https://review.opendev.org/708213 | 01:32 |
*** negronjl has quit IRC | 02:48 | |
*** negronjl has joined #openstack-kolla | 02:50 | |
*** JamesBenson has quit IRC | 02:58 | |
*** cdearborn has quit IRC | 02:58 | |
*** JamesBenson has joined #openstack-kolla | 02:58 | |
*** JamesBenson has quit IRC | 03:40 | |
*** evrardjp has quit IRC | 04:37 | |
*** evrardjp has joined #openstack-kolla | 04:37 | |
*** seco has joined #openstack-kolla | 05:45 | |
*** bline has joined #openstack-kolla | 05:52 | |
*** sorin-mihai has joined #openstack-kolla | 06:28 | |
sorin-mihai | i'm trying to enable volume encryption, using lvm as storage backend for cinder and p11_crypto as barbican crypto plugin. i can create new volume types change the encryption options, but when i try to create a volume it keeps failing. where i can find the logs related to this? | 06:45 |
*** seco has quit IRC | 06:51 | |
*** sorin-mihai_ has joined #openstack-kolla | 07:28 | |
*** sorin-mihai has quit IRC | 07:31 | |
sorin-mihai_ | tried to change barbican back to simple_crypto, but regardless of the plugin used while trying to create the volume i get 'Key manager error (HTTP 400)' | 07:33 |
*** born2bake has joined #openstack-kolla | 07:43 | |
yoctozepto | dking: it's best working on centos 7, so py2.7 | 07:47 |
yoctozepto | sorin-mihai_: https://bugs.launchpad.net/kolla-ansible/+bug/1821696 could be related | 07:48 |
openstack | Launchpad bug 1821696 in kolla-ansible stein "Failed to start instances with encrypted volumes" [High,Triaged] | 07:48 |
sorin-mihai_ | yoctozepto, that is a bit different, i can't even create volumes if using a volume type with encryption enabled. tried both plain and luks, both barbican crypto plugins, got the same error | 07:50 |
sorin-mihai_ | i would've expect at least the simple_crypto to work and i would've consider a firewall issue in my setup, if it wasn't that 400 error when i tried from command line. might be something i forgot to enable? | 07:56 |
*** cz3 is now known as papiez | 08:18 | |
*** papiez is now known as cz3 | 08:18 | |
yoctozepto | sorin-mihai_: nothing relevant in cinder-api / cinder-volume logs? | 08:36 |
*** Reepicheep has quit IRC | 08:37 | |
openstackgerrit | jacky06 proposed openstack/kolla-ansible master: Remove the nova-consoleauth from high-availability.rst https://review.opendev.org/719159 | 08:39 |
*** tonythomas has joined #openstack-kolla | 08:47 | |
openstackgerrit | Radosław Piliszek proposed openstack/kolla master: Add vitrage-persistor image https://review.opendev.org/717891 | 09:12 |
*** devfaz has quit IRC | 09:19 | |
*** devfaz has joined #openstack-kolla | 09:24 | |
cosmicsound | good day | 09:28 |
cosmicsound | anyone here had success with trove in k-a | 09:28 |
cosmicsound | i guess i have a bad combo, since it killed zun, magnum what ever happened broken half opennstack | 09:28 |
*** jonaspaulo has joined #openstack-kolla | 09:30 | |
sorin-mihai_ | yoctozepto, maybe this could be considered relevant, but it is actually from barbican/loadwsgi.py.log : https://pastebin.com/raw/3iAWMPF8 | 09:45 |
yoctozepto | cosmicsound: quite apocalyptic! I don't think it can really go that bad | 09:46 |
yoctozepto | sorin-mihai_: this would indicate cinder cannot into barbican :-( | 09:46 |
yoctozepto | sorin-mihai_: if I were you, I'd file a cross-bug against barbican and cinder to ask for help; they would still need more logs on cinder side though | 09:48 |
cosmicsound | yoctozepto , i had a typo in kolla globals.yml | 09:49 |
cosmicsound | would be great a syntax check on such important files before ansible would run them=, maybe... | 09:50 |
yoctozepto | cosmicsound: ah, they can indeed be apocalyptic | 09:50 |
cosmicsound | i moved the line from enable_trove=true in enable and _trove=true 2 lines from 1 | 09:50 |
cosmicsound | messed it all up it seems or kombo with masakari | 09:50 |
cosmicsound | Something went wrong! | 09:51 |
cosmicsound | An unexpected error has occurred. Try refreshing the page. If that doesn't help, contact your local administrator. | 09:51 |
cosmicsound | This seems to do also with mistral somehow | 09:51 |
sorin-mihai_ | yoctozepto, yeah, i thought about that too. but how do i figure out what to check/provide? i'm doing this on a all-in-one with centos/source/master, sort of public, i'd have to grep the logs and at least remove the url and then zap it clean | 09:52 |
openstackgerrit | Radosław Piliszek proposed openstack/kolla master: Allow operators to use "ceilometer-upgrade" parameters https://review.opendev.org/718190 | 09:52 |
sorin-mihai_ | cosmicsound, that would happen to me only with karbor enabled | 09:53 |
cosmicsound | i enabled ironic yesterday too | 09:54 |
cosmicsound | mistral/masakari/vitrage broke in past my horizon | 09:54 |
cosmicsound | or combos of or with them | 09:54 |
cosmicsound | yoctozepto , yet there is no plans to drop Trove ? | 09:55 |
cosmicsound | Or is there a life cycle list for all operated and supported version under kolla? | 09:55 |
openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: Allow operators to use "ceilometer-upgrade" parameters https://review.opendev.org/718197 | 09:58 |
openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: Allow operators to use "ceilometer-upgrade" parameters https://review.opendev.org/718197 | 09:59 |
cosmicsound | btw anyone here uses swift with ceph rgw? | 10:11 |
cosmicsound | could use some hints on debugging this setup | 10:11 |
cosmicsound | Since its weird i can make folders in main , yet cannot add anything in them | 10:11 |
cosmicsound | api seems up in services | 10:12 |
cosmicsound | http://51.91.75.99:7480/swift/v1/36785396b29d47af9513d16077844b2c | 10:12 |
yoctozepto | sorin-mihai_: yeah, that can be painful, but usually a simple sed helps if you know the addresses/hostnames you want to hide there | 10:23 |
yoctozepto | sorin-mihai_, cosmicsound: some ui plugins are clumsy and conflicting, please just report these as bugs | 10:23 |
yoctozepto | cosmicsound: no, no plans to ditch trove | 10:24 |
yoctozepto | also, the rule of thumb is "what you can do with api" >= "what you can do with cli client" >= "what you can do from ui" | 10:25 |
*** bornie2bake has joined #openstack-kolla | 10:30 | |
*** mcriswell has quit IRC | 10:34 | |
openstackgerrit | Merged openstack/kolla-ansible master: Set mistral to use internalURL in admin-openrc.sh https://review.opendev.org/719003 | 10:39 |
*** bornie2bake has quit IRC | 10:47 | |
cosmicsound | yoctozepto , great rule ;D | 10:58 |
cosmicsound | solve the trove issue | 10:58 |
*** seco has joined #openstack-kolla | 11:32 | |
*** mcriswell has joined #openstack-kolla | 11:40 | |
*** bornie2bake has joined #openstack-kolla | 11:45 | |
*** seco has quit IRC | 11:47 | |
*** e0ne has joined #openstack-kolla | 11:49 | |
*** e0ne has quit IRC | 11:52 | |
*** bornie2bake has quit IRC | 11:55 | |
*** mcriswell has quit IRC | 12:38 | |
openstackgerrit | Merged openstack/kolla master: Add vitrage-persistor image https://review.opendev.org/717891 | 12:51 |
*** ChanServ has quit IRC | 12:55 | |
*** ChanServ has joined #openstack-kolla | 13:03 | |
*** tepper.freenode.net sets mode: +o ChanServ | 13:03 | |
*** ChanServ has quit IRC | 13:08 | |
*** ChanServ has joined #openstack-kolla | 13:10 | |
*** tepper.freenode.net sets mode: +o ChanServ | 13:10 | |
openstackgerrit | caoyuan proposed openstack/kolla stable/train: Add vitrage-persistor image https://review.opendev.org/719176 | 13:27 |
openstackgerrit | caoyuan proposed openstack/kolla stable/stein: Add vitrage-persistor image https://review.opendev.org/719178 | 13:28 |
*** cz3 is now known as launchd | 13:59 | |
*** launchd is now known as cz3 | 13:59 | |
*** Reepicheep has joined #openstack-kolla | 14:05 | |
openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: Allow operators to use "ceilometer-upgrade" parameters https://review.opendev.org/718197 | 14:09 |
-openstackstatus- NOTICE: Restarting gerrit to fix an issue from yesterday's maintenance | 14:33 | |
cosmicsound | and from internal one: SSL exception connecting to https://cloud.uhlhost.net:8779/v1.0/36785396b29d47af9513d16077844b2c/flavors/6: HTTPSConnectionPool(host='cloud.uhlhost.net', port=8779): Max retries exceeded with url: /v1.0/36785396b29d47af9513d16077844b2c/flavors/6 (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', | 14:41 |
cosmicsound | 'tls_process_server_certificate', 'certificate verify failed')],)",),)) | 14:41 |
cosmicsound | anyone has any idea what is causing this after deploying trove? | 14:41 |
cosmicsound | this is the internal keystone, with external i get this: Service Unavailable (HTTP 503) when using public keystone auth. | 14:41 |
cosmicsound | opened this: https://bugs.launchpad.net/kolla-ansible/+bug/1872205 | 15:12 |
openstack | Launchpad bug 1872205 in kolla-ansible "Designate tooz error" [Undecided,New] | 15:12 |
openstackgerrit | Qitao proposed openstack/kolla-ansible master: Add vitrage-persistor service https://review.opendev.org/715364 | 15:21 |
*** ricolin has joined #openstack-kolla | 15:23 | |
*** cah_link has joined #openstack-kolla | 15:27 | |
*** ricolin has quit IRC | 15:32 | |
*** hjensas_ has quit IRC | 16:34 | |
*** evrardjp has quit IRC | 16:37 | |
*** evrardjp has joined #openstack-kolla | 16:37 | |
*** sorin-mihai has joined #openstack-kolla | 17:02 | |
openstackgerrit | Marcin Juszkiewicz proposed openstack/kolla-ansible master: CI: do not build images on aarch64 https://review.opendev.org/718714 | 17:03 |
*** sorin-mihai_ has quit IRC | 17:06 | |
*** oncall-pokemon has joined #openstack-kolla | 17:26 | |
cosmicsound | https://bugs.launchpad.net/python-tooz/+bug/1872205 updated | 18:17 |
openstack | Launchpad bug 1872205 in tooz "Designate tooz error" [Undecided,New] | 18:17 |
*** ricolin has joined #openstack-kolla | 18:23 | |
cosmicsound | https://bugs.launchpad.net/kolla/+bug/1872220 | 18:32 |
openstack | Launchpad bug 1872220 in kolla "[fluent] unable to parse several logs" [Undecided,New] | 18:32 |
cosmicsound | a new one old one yet never reported it before | 18:32 |
*** ricolin has quit IRC | 18:34 | |
*** seco has joined #openstack-kolla | 18:37 | |
openstackgerrit | Hongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node https://review.opendev.org/708213 | 19:34 |
*** e0ne has joined #openstack-kolla | 19:34 | |
*** sri_ has joined #openstack-kolla | 20:15 | |
*** seco has quit IRC | 20:40 | |
*** seco has joined #openstack-kolla | 20:52 | |
sri_ | cosmicsound: | 20:53 |
sri_ | I am using swift with ceph rgw. | 20:54 |
*** seco has quit IRC | 20:58 | |
*** cah_link has quit IRC | 21:06 | |
*** e0ne has quit IRC | 21:09 | |
cosmicsound | sri_ , i have this weird issue when i am able to create first container | 21:13 |
cosmicsound | yet that is where it ends | 21:13 |
sri_ | cosmicsound: are you able to find error message in logs ? | 21:14 |
cosmicsound | will need to check that again | 21:15 |
*** srini_ has joined #openstack-kolla | 21:15 | |
*** hjensas has joined #openstack-kolla | 21:16 | |
sri_ | is your civetweb port and swift endpoint port same ? | 21:17 |
cosmicsound | yes | 21:18 |
cosmicsound | allows me to create first containers | 21:18 |
cosmicsound | yet thats where t ends | 21:19 |
cosmicsound | they are unsecure | 21:19 |
cosmicsound | i need to find out how to add ssl | 21:19 |
sri_ | cosmicsound: That is weird | 21:19 |
cosmicsound | to rgw endpoint | 21:19 |
cosmicsound | in kolla are no logs of swift | 21:20 |
cosmicsound | since its via rgw and service link external ceph | 21:20 |
cosmicsound | il look at ceph | 21:20 |
sri_ | ok, this my what i did, http://paste.openstack.org/show/790984/ | 21:22 |
*** srini_ has quit IRC | 21:27 | |
cosmicsound | http://paste.openstack.org/show/791983/ | 21:27 |
sri_ | can try deleting default rgw pools and create a new pool | 21:29 |
cosmicsound | sri_ , your swift is local this example | 21:33 |
cosmicsound | right? | 21:33 |
*** seco has joined #openstack-kolla | 21:33 | |
sri_ | yes | 21:33 |
cosmicsound | is this built in kolla ceph? | 21:34 |
cosmicsound | or external | 21:34 |
sri_ | it's external | 21:34 |
cosmicsound | ok | 21:34 |
cosmicsound | you created in openstack the ceph_rgw user? | 21:35 |
cosmicsound | cause i used admin | 21:35 |
sri_ | yes, I've create a user | 21:36 |
sri_ | is your ceph cluster in a healthy state ? | 21:37 |
*** seco has quit IRC | 21:39 | |
cosmicsound | yep its healty | 21:40 |
cosmicsound | kolla seems to have a ceph_rgw_keystone_password in passwords.yml | 21:41 |
cosmicsound | you used that in any ways? | 21:41 |
cosmicsound | i dont have that config.json | 21:44 |
sri_ | in my case I am using admin user so I am using keystone_admin password | 21:44 |
cosmicsound | same here | 21:45 |
cosmicsound | "source": "/var/lib/kolla/config_files/ceph.conf", | 21:45 |
cosmicsound | "dest": "/etc/ceph/ceph.conf", | 21:45 |
cosmicsound | these lines | 21:45 |
cosmicsound | are in ceph side the files? | 21:45 |
sri_ | I don't think you don't need config.json | 21:45 |
cosmicsound | ok | 21:46 |
*** born2bake has quit IRC | 21:46 | |
cosmicsound | and what is with /usr/share/kolla-ansible/ansible/roles/ceph/tasks/start_rgw_keystone.yml | 21:52 |
cosmicsound | seems i also miss the ceph.client.radosgw.keyring | 21:56 |
cosmicsound | do i need this also in kolla side config somewhere | 21:57 |
sri_ | No, I think that's reference file when we use kolla ceph | 21:59 |
sri_ | That has nothing to with my your issue | 21:59 |
cosmicsound | right | 22:02 |
cosmicsound | i am cofused a bit with format of ceph.conf is it valid both rgw keystone admin password and with underscore _ ? | 22:04 |
*** jimcrowleyibm has joined #openstack-kolla | 22:21 | |
cosmicsound | does tenant mean project? | 22:52 |
cosmicsound | "Tenant" is the old term for a project in Keystone. Starting in API version 3, "project" is the preferred term. | 22:53 |
cosmicsound | ceph need to update their docs :D | 22:53 |
*** sorin-mihai_ has joined #openstack-kolla | 22:57 | |
*** sorin-mihai has quit IRC | 22:58 | |
*** sorin-mihai__ has joined #openstack-kolla | 22:59 | |
*** sorin-mihai_ has quit IRC | 23:01 | |
*** schwicht has quit IRC | 23:36 | |
*** sorin-mihai_ has joined #openstack-kolla | 23:37 | |
*** schwicht has joined #openstack-kolla | 23:38 | |
*** sorin-mihai__ has quit IRC | 23:39 | |
*** sorin-mihai__ has joined #openstack-kolla | 23:47 | |
*** sorin-mihai_ has quit IRC | 23:50 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!