| kevko | \o/ | 08:27 |
|---|---|---|
| kevko | SvenKieske, mnasiadka, frickler: https://review.opendev.org/c/openstack/kolla-ansible/+/924651 << can we move this whole chain ... it will be significant improvement | 08:29 |
| kevko | s/move/merge | 08:29 |
| opendevreview | Michal Arbet proposed openstack/kolla master: [letsencrypt] Rename script for updating certificates https://review.opendev.org/c/openstack/kolla/+/936919 | 08:50 |
| opendevreview | Michal Arbet proposed openstack/kolla master: [letsencrypt] Add ProxySQL support for certificate renewal https://review.opendev.org/c/openstack/kolla/+/936920 | 08:50 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Rework certificates https://review.opendev.org/c/openstack/kolla-ansible/+/936922 | 09:01 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Rework certificates https://review.opendev.org/c/openstack/kolla-ansible/+/936922 | 09:03 |
| frickler | darmach: mnasiadka: any progress yet on the raxflex issue? seems to end up in failures a bit too often for my comfort currently | 10:09 |
| kevko | frickler: what issue ? | 10:11 |
| mnasiadka | frickler: did some research, will post a patch today to skip that role on raxflex | 10:12 |
| mnasiadka | it just never finds that label after creating it, which is extremely weird | 10:12 |
| frickler | kevko: failures like https://zuul.opendev.org/t/openstack/build/07a7d0a28b6548fdb2979ccc0934ec96 with "Error mounting /var/lib/docker: mount: /var/lib/docker: can't find LABEL=kolla." | 10:13 |
| kevko | frickler: aa, ok ..can i check it also ? :) | 10:28 |
| frickler | kevko: I don't understand the question, nobody prevents you from checking anything, but if mnasiadka already has a plan, maybe wait to have a look at that, first? | 10:37 |
| mnasiadka | kevko: are you bored? There are hundreds of patches awaiting review :) | 11:04 |
| opendevreview | Michal Arbet proposed openstack/kolla master: [letsencrypt] Add ProxySQL support for certificate renewal https://review.opendev.org/c/openstack/kolla/+/936920 | 12:15 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Rework certificates https://review.opendev.org/c/openstack/kolla-ansible/+/936922 | 12:16 |
| kevko | mnasiadka: frickler: okay | 12:16 |
| kevko | mnasiadka: btw, should I abandon some very old patches and similar ? | 12:24 |
| kevko | mnasiadka: with some information for user to reopen if needed ? | 12:24 |
| frickler | kevko: I've be reluctant to do so, most patches I've seen still would make some kind of sense, just need some attention to get finished. maybe create a list of what you think is obsolete and we can glance over it first? | 12:40 |
| kevko | frickler: yeah, i can go through ... | 12:42 |
| mnasiadka | A list on the whiteboard or dedicated etherpad would be nice | 13:27 |
| opendevreview | Dr. Jens Harbott proposed openstack/kolla-ansible master: CI: skip Cinder HA precheck for zun scenario https://review.opendev.org/c/openstack/kolla-ansible/+/936649 | 13:29 |
| opendevreview | Antony Messerli proposed openstack/kolla-ansible master: Enables override of Octavia notification topics https://review.opendev.org/c/openstack/kolla-ansible/+/934827 | 14:40 |
| Vii | Hi, I think there is some bug in version 2024.2. The same config, previous updates worked without a problem (from 2023.2 to 2024.1). Update 2024.1 -> 2024.2. "Access denied for user 'root_shard_0'@" The database user is defined in globals.yaml | 15:31 |
| Vii | https://paste.opendev.org/show/bTLoKKkKxKZXycSSVWme/ | 15:31 |
| Vii | external databases | 15:31 |
| Vii | -vvvv "module_args": "{'login_host': 'openstack.domain.example', 'login_port': '3306', 'login_user': 'root_shard_0', 'login_password': 'password_from_password.yml', 'variable': 'log_bin_trust_function_creators', 'value': 1}", | 15:47 |
| kevko | Vii: did you try to login manually ? | 15:56 |
| Vii | yes, it works | 15:58 |
| kevko | Vii: did you try via VIP ? | 16:03 |
| kevko | or directly ? | 16:03 |
| Vii | I can't connect to VIP hmmm the logs say the password is incorrect, and in the sql proxy logs I see that the DB nodes have been correctly added. I'll look for the reason, if I find anything I'll let you know | 16:10 |
| kevko | Vii: check your config for mariadb root user in proxysql | 16:12 |
| Vii | 2024-12-03 17:07:37 MySQL_Session.cpp:5797:handler___status_CONNECTING_CLIENT___STATE_SERVER_HANDSHAKE_WrongCredentials(): [ERROR] ProxySQL Error: Access denied for user 'monitor'@'10.x.x.x' (using password: YES) | 16:12 |
| kevko | Vii: what pass do you have for monitor ? | 16:13 |
| Vii | admin_variables: <- there must be a root password for the DB here? | 16:13 |
| kevko | Vii: /etc/kolla/proxysql/users/mariadb... | 16:14 |
| opendevreview | Merged openstack/kolla-ansible master: Don't notify handlers during copy-cert https://review.opendev.org/c/openstack/kolla-ansible/+/924651 | 16:14 |
| Vii | password is OK, but user is wrong :) username: "root_shard_0" | 16:14 |
| kevko | Vii: it's ok user | 16:15 |
| kevko | Vii: that's good user ... | 16:15 |
| kevko | Vii: check if root_shard_0 is created in mysql backend | 16:15 |
| Vii | I logged in to the database with this user | 16:16 |
| opendevreview | Merged openstack/kolla-ansible master: Performance: Don't notify handlers during config https://review.opendev.org/c/openstack/kolla-ansible/+/745164 | 16:24 |
| opendevreview | Merged openstack/kolla-ansible master: Refactor services' check-containers and optimise https://review.opendev.org/c/openstack/kolla-ansible/+/773243 | 16:24 |
| opendevreview | Merged openstack/kolla-ansible master: Fix unintentional trigger of ansible handlers https://review.opendev.org/c/openstack/kolla-ansible/+/924145 | 16:24 |
| opendevreview | Merged openstack/kolla-ansible master: Fix proxysql-config's TLS DB configuration https://review.opendev.org/c/openstack/kolla-ansible/+/933922 | 16:27 |
| kevko | Vii: so where is the problem ? :D | 16:35 |
| Vii | kevko: upgrade 2024.1 to 2024.2: kestone task | 16:50 |
| Vii | https://paste.opendev.org/show/bt6uXQt3AcJNVjvFG9OF/ | 16:50 |
| Vii | keepalive: GW nodes | 16:50 |
| Vii | ProxySQL Error: Access denied for user 'root'@'10.0.164.56' (using password: YES)\ | 16:50 |
| Vii | this IP -> node CTRL hmmm | 16:50 |
| Vii | PING openstack.domain.example (10.0.164.64) | 16:52 |
| Vii | ok I found it, in the external database you need to create a user "root_shard_0" with the appropriate permissions. It would be good to add it to the documentation | 17:24 |
| Vii | 2024-12-03 18:23:31 MySQL_Session.cpp:8414:unable_to_parse_set_statement(): [WARNING] Unable to parse unknown SET query from client 10.0.164.56:60800. Setting lock_hostgroup. Please report a bug for future enhancements:SET GLOBAL log_bin_trust_function_creators = 0 | 17:27 |
| Vii | "indicates that ProxySQL encountered a SET statement it does not understand and could not parse. This issue often arises because ProxySQL does not support all MySQL SET commands, particularly certain global or session-level configuration variables." | 17:28 |
| kevko | Vii: but this is automatically done | 17:32 |
| kevko | Vii: upgrades are tested in CI | 17:33 |
| Vii | but only on the mariadb container, I have an external database. | 17:36 |
| kevko | Vii: aaaa, that's the issue | 17:40 |
| opendevreview | Merged openstack/kolla-ansible master: CI: skip Cinder HA precheck for zun scenario https://review.opendev.org/c/openstack/kolla-ansible/+/936649 | 17:43 |
| opendevreview | Antony Messerli proposed openstack/kolla-ansible master: Enables override of Octavia notification topics https://review.opendev.org/c/openstack/kolla-ansible/+/934827 | 19:09 |
| opendevreview | Michal Arbet proposed openstack/kolla master: [letsencrypt] Add ProxySQL support for certificate renewal https://review.opendev.org/c/openstack/kolla/+/936920 | 20:29 |
| opendevreview | Merged openstack/kolla-ansible master: mariadb: switch to use mariadb flavored commands https://review.opendev.org/c/openstack/kolla-ansible/+/927039 | 20:53 |
| opendevreview | Merged openstack/kolla-ansible master: Add precheck for Horizon config file renames in Caracal https://review.opendev.org/c/openstack/kolla-ansible/+/923558 | 20:53 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add TLS support for MariaDB Connections https://review.opendev.org/c/openstack/kolla-ansible/+/933924 | 21:07 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Rework certificates https://review.opendev.org/c/openstack/kolla-ansible/+/936922 | 21:07 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!