Saturday, 2020-04-11

openstackgerritHongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node  https://review.opendev.org/70821300:08
openstackgerritJames Kirsch proposed openstack/kolla-ansible master: Refactor copy certificates task  https://review.opendev.org/71910400:19
*** tonythomas has quit IRC00:23
openstackgerritHongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node  https://review.opendev.org/70821300:26
openstackgerritHongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node  https://review.opendev.org/70821300:27
openstackgerritHongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node  https://review.opendev.org/70821301:32
*** negronjl has quit IRC02:48
*** negronjl has joined #openstack-kolla02:50
*** JamesBenson has quit IRC02:58
*** cdearborn has quit IRC02:58
*** JamesBenson has joined #openstack-kolla02:58
*** JamesBenson has quit IRC03:40
*** evrardjp has quit IRC04:37
*** evrardjp has joined #openstack-kolla04:37
*** seco has joined #openstack-kolla05:45
*** bline has joined #openstack-kolla05:52
*** sorin-mihai has joined #openstack-kolla06:28
sorin-mihaii'm trying to enable volume encryption, using lvm as storage backend for cinder and p11_crypto as barbican crypto plugin. i can create new volume types change the encryption options, but when i try to create a volume it keeps failing. where i can find the logs related to this?06:45
*** seco has quit IRC06:51
*** sorin-mihai_ has joined #openstack-kolla07:28
*** sorin-mihai has quit IRC07:31
sorin-mihai_tried to change barbican back to simple_crypto, but regardless of the plugin used while trying to create the volume i get 'Key manager error (HTTP 400)'07:33
*** born2bake has joined #openstack-kolla07:43
yoctozeptodking: it's best working on centos 7, so py2.707:47
yoctozeptosorin-mihai_: https://bugs.launchpad.net/kolla-ansible/+bug/1821696 could be related07:48
openstackLaunchpad bug 1821696 in kolla-ansible stein "Failed to start instances with encrypted volumes" [High,Triaged]07:48
sorin-mihai_yoctozepto, that is a bit different, i can't even create volumes if using a volume type with encryption enabled. tried both plain and luks, both barbican crypto plugins, got the same error07:50
sorin-mihai_i would've expect at least the simple_crypto to work and i would've consider a firewall issue in my setup, if it wasn't that 400 error when i tried from command line. might be something i forgot to enable?07:56
*** cz3 is now known as papiez08:18
*** papiez is now known as cz308:18
yoctozeptosorin-mihai_: nothing relevant in cinder-api / cinder-volume logs?08:36
*** Reepicheep has quit IRC08:37
openstackgerritjacky06 proposed openstack/kolla-ansible master: Remove the nova-consoleauth from high-availability.rst  https://review.opendev.org/71915908:39
*** tonythomas has joined #openstack-kolla08:47
openstackgerritRadosław Piliszek proposed openstack/kolla master: Add vitrage-persistor image  https://review.opendev.org/71789109:12
*** devfaz has quit IRC09:19
*** devfaz has joined #openstack-kolla09:24
cosmicsoundgood day09:28
cosmicsoundanyone here had success with trove in k-a09:28
cosmicsoundi guess i have a bad combo, since it killed zun, magnum what ever happened broken half opennstack09:28
*** jonaspaulo has joined #openstack-kolla09:30
sorin-mihai_yoctozepto, maybe this could be considered relevant, but it is actually from barbican/loadwsgi.py.log : https://pastebin.com/raw/3iAWMPF809:45
yoctozeptocosmicsound: quite apocalyptic! I don't think it can really go that bad09:46
yoctozeptosorin-mihai_: this would indicate cinder cannot into barbican :-(09:46
yoctozeptosorin-mihai_: if I were you, I'd file a cross-bug against barbican and cinder to ask for help; they would still need more logs on cinder side though09:48
cosmicsoundyoctozepto , i had a typo in kolla globals.yml09:49
cosmicsoundwould be great a syntax check on such important files before ansible would run them=, maybe...09:50
yoctozeptocosmicsound: ah, they can indeed be apocalyptic09:50
cosmicsoundi moved the line from enable_trove=true in enable and _trove=true 2 lines from 109:50
cosmicsoundmessed it all up it seems or kombo with masakari09:50
cosmicsoundSomething went wrong!09:51
cosmicsoundAn unexpected error has occurred. Try refreshing the page. If that doesn't help, contact your local administrator.09:51
cosmicsoundThis seems to do also with mistral somehow09:51
sorin-mihai_yoctozepto, yeah, i thought about that too. but how do i figure out what to check/provide? i'm doing this on a all-in-one with centos/source/master, sort of public, i'd have to grep the logs and at least remove the url and then zap it clean09:52
openstackgerritRadosław Piliszek proposed openstack/kolla master: Allow operators to use "ceilometer-upgrade" parameters  https://review.opendev.org/71819009:52
sorin-mihai_cosmicsound, that would happen to me only with karbor enabled09:53
cosmicsoundi enabled ironic yesterday too09:54
cosmicsoundmistral/masakari/vitrage broke in past my horizon09:54
cosmicsoundor combos of or with them09:54
cosmicsoundyoctozepto , yet there is no plans to drop Trove ?09:55
cosmicsoundOr is there a life cycle list for all operated and supported version under kolla?09:55
openstackgerritRadosław Piliszek proposed openstack/kolla-ansible master: Allow operators to use "ceilometer-upgrade" parameters  https://review.opendev.org/71819709:58
openstackgerritRadosław Piliszek proposed openstack/kolla-ansible master: Allow operators to use "ceilometer-upgrade" parameters  https://review.opendev.org/71819709:59
cosmicsound btw anyone here uses swift with ceph rgw?10:11
cosmicsoundcould use some hints on debugging this setup10:11
cosmicsoundSince its weird i can make folders in main , yet cannot add anything in them10:11
cosmicsoundapi seems up in services10:12
cosmicsoundhttp://51.91.75.99:7480/swift/v1/36785396b29d47af9513d16077844b2c10:12
yoctozeptosorin-mihai_: yeah, that can be painful, but usually a simple sed helps if you know the addresses/hostnames you want to hide there10:23
yoctozeptosorin-mihai_, cosmicsound: some ui plugins are clumsy and conflicting, please just report these as bugs10:23
yoctozeptocosmicsound: no, no plans to ditch trove10:24
yoctozeptoalso, the rule of thumb is "what you can do with api" >= "what you can do with cli client" >= "what you can do from ui"10:25
*** bornie2bake has joined #openstack-kolla10:30
*** mcriswell has quit IRC10:34
openstackgerritMerged openstack/kolla-ansible master: Set mistral to use internalURL in admin-openrc.sh  https://review.opendev.org/71900310:39
*** bornie2bake has quit IRC10:47
cosmicsoundyoctozepto , great rule ;D10:58
cosmicsoundsolve the trove issue10:58
*** seco has joined #openstack-kolla11:32
*** mcriswell has joined #openstack-kolla11:40
*** bornie2bake has joined #openstack-kolla11:45
*** seco has quit IRC11:47
*** e0ne has joined #openstack-kolla11:49
*** e0ne has quit IRC11:52
*** bornie2bake has quit IRC11:55
*** mcriswell has quit IRC12:38
openstackgerritMerged openstack/kolla master: Add vitrage-persistor image  https://review.opendev.org/71789112:51
*** ChanServ has quit IRC12:55
*** ChanServ has joined #openstack-kolla13:03
*** tepper.freenode.net sets mode: +o ChanServ13:03
*** ChanServ has quit IRC13:08
*** ChanServ has joined #openstack-kolla13:10
*** tepper.freenode.net sets mode: +o ChanServ13:10
openstackgerritcaoyuan proposed openstack/kolla stable/train: Add vitrage-persistor image  https://review.opendev.org/71917613:27
openstackgerritcaoyuan proposed openstack/kolla stable/stein: Add vitrage-persistor image  https://review.opendev.org/71917813:28
*** cz3 is now known as launchd13:59
*** launchd is now known as cz313:59
*** Reepicheep has joined #openstack-kolla14:05
openstackgerritRadosław Piliszek proposed openstack/kolla-ansible master: Allow operators to use "ceilometer-upgrade" parameters  https://review.opendev.org/71819714:09
-openstackstatus- NOTICE: Restarting gerrit to fix an issue from yesterday's maintenance14:33
cosmicsoundand from internal one: SSL exception connecting to https://cloud.uhlhost.net:8779/v1.0/36785396b29d47af9513d16077844b2c/flavors/6: HTTPSConnectionPool(host='cloud.uhlhost.net', port=8779): Max retries exceeded with url: /v1.0/36785396b29d47af9513d16077844b2c/flavors/6 (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines',14:41
cosmicsound'tls_process_server_certificate', 'certificate verify failed')],)",),))14:41
cosmicsoundanyone has any idea what is causing this after deploying trove?14:41
cosmicsoundthis is the internal keystone, with external i get this: Service Unavailable (HTTP 503) when using public keystone auth.14:41
cosmicsoundopened this: https://bugs.launchpad.net/kolla-ansible/+bug/187220515:12
openstackLaunchpad bug 1872205 in kolla-ansible "Designate tooz error" [Undecided,New]15:12
openstackgerritQitao proposed openstack/kolla-ansible master: Add vitrage-persistor service  https://review.opendev.org/71536415:21
*** ricolin has joined #openstack-kolla15:23
*** cah_link has joined #openstack-kolla15:27
*** ricolin has quit IRC15:32
*** hjensas_ has quit IRC16:34
*** evrardjp has quit IRC16:37
*** evrardjp has joined #openstack-kolla16:37
*** sorin-mihai has joined #openstack-kolla17:02
openstackgerritMarcin Juszkiewicz proposed openstack/kolla-ansible master: CI: do not build images on aarch64  https://review.opendev.org/71871417:03
*** sorin-mihai_ has quit IRC17:06
*** oncall-pokemon has joined #openstack-kolla17:26
cosmicsoundhttps://bugs.launchpad.net/python-tooz/+bug/1872205 updated18:17
openstackLaunchpad bug 1872205 in tooz "Designate tooz error" [Undecided,New]18:17
*** ricolin has joined #openstack-kolla18:23
cosmicsoundhttps://bugs.launchpad.net/kolla/+bug/187222018:32
openstackLaunchpad bug 1872220 in kolla "[fluent] unable to parse several logs" [Undecided,New]18:32
cosmicsounda new one old one yet never reported it before18:32
*** ricolin has quit IRC18:34
*** seco has joined #openstack-kolla18:37
openstackgerritHongbin Lu proposed openstack/kolla-ansible master: [WIP] Zun: Add zun-cni-daemon to compute node  https://review.opendev.org/70821319:34
*** e0ne has joined #openstack-kolla19:34
*** sri_ has joined #openstack-kolla20:15
*** seco has quit IRC20:40
*** seco has joined #openstack-kolla20:52
sri_cosmicsound:20:53
sri_I am using swift with ceph rgw.20:54
*** seco has quit IRC20:58
*** cah_link has quit IRC21:06
*** e0ne has quit IRC21:09
cosmicsoundsri_ , i have this weird issue when i am able to create first container21:13
cosmicsoundyet that is where it ends21:13
sri_cosmicsound: are you able to find error message in  logs ?21:14
cosmicsoundwill need to check that again21:15
*** srini_ has joined #openstack-kolla21:15
*** hjensas has joined #openstack-kolla21:16
sri_is your civetweb port and swift endpoint port same ?21:17
cosmicsoundyes21:18
cosmicsoundallows me to create first containers21:18
cosmicsoundyet thats where t ends21:19
cosmicsoundthey are unsecure21:19
cosmicsoundi need to find out how to add ssl21:19
sri_cosmicsound: That is weird21:19
cosmicsoundto rgw endpoint21:19
cosmicsoundin kolla are no logs of swift21:20
cosmicsoundsince its via rgw and service link external ceph21:20
cosmicsoundil look at ceph21:20
sri_ok, this my what i did, http://paste.openstack.org/show/790984/21:22
*** srini_ has quit IRC21:27
cosmicsoundhttp://paste.openstack.org/show/791983/21:27
sri_can try deleting default rgw pools and create a new pool21:29
cosmicsoundsri_ , your swift is local this example21:33
cosmicsoundright?21:33
*** seco has joined #openstack-kolla21:33
sri_yes21:33
cosmicsoundis this built in kolla ceph?21:34
cosmicsoundor external21:34
sri_it's external21:34
cosmicsoundok21:34
cosmicsoundyou created in openstack the ceph_rgw user?21:35
cosmicsoundcause i used admin21:35
sri_yes, I've create a user21:36
sri_is your ceph cluster in a healthy state ?21:37
*** seco has quit IRC21:39
cosmicsoundyep its healty21:40
cosmicsoundkolla seems to have a ceph_rgw_keystone_password in passwords.yml21:41
cosmicsoundyou used that in any ways?21:41
cosmicsoundi dont have that config.json21:44
sri_in my case I am using admin user so I am using keystone_admin password21:44
cosmicsoundsame here21:45
cosmicsound            "source": "/var/lib/kolla/config_files/ceph.conf",21:45
cosmicsound            "dest": "/etc/ceph/ceph.conf",21:45
cosmicsoundthese lines21:45
cosmicsoundare in ceph side the files?21:45
sri_I don't think you don't need config.json21:45
cosmicsoundok21:46
*** born2bake has quit IRC21:46
cosmicsoundand what is with /usr/share/kolla-ansible/ansible/roles/ceph/tasks/start_rgw_keystone.yml21:52
cosmicsoundseems i also miss the ceph.client.radosgw.keyring21:56
cosmicsounddo i need this also in kolla side config somewhere21:57
sri_No, I think that's reference file when we use kolla ceph21:59
sri_That has nothing to with my your issue21:59
cosmicsoundright22:02
cosmicsoundi am cofused a bit with format of ceph.conf is it valid both rgw keystone admin password and with underscore _ ?22:04
*** jimcrowleyibm has joined #openstack-kolla22:21
cosmicsounddoes tenant mean project?22:52
cosmicsound"Tenant" is the old term for a project in Keystone. Starting in API version 3, "project" is the preferred term.22:53
cosmicsoundceph need to update their docs :D22:53
*** sorin-mihai_ has joined #openstack-kolla22:57
*** sorin-mihai has quit IRC22:58
*** sorin-mihai__ has joined #openstack-kolla22:59
*** sorin-mihai_ has quit IRC23:01
*** schwicht has quit IRC23:36
*** sorin-mihai_ has joined #openstack-kolla23:37
*** schwicht has joined #openstack-kolla23:38
*** sorin-mihai__ has quit IRC23:39
*** sorin-mihai__ has joined #openstack-kolla23:47
*** sorin-mihai_ has quit IRC23:50

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!