*** Qiming has quit IRC | 00:07 | |
*** Qiming has joined #openstack-zaqar | 01:06 | |
*** akanksha_ has joined #openstack-zaqar | 01:43 | |
*** achanda has joined #openstack-zaqar | 01:45 | |
Eva-i | Hello. I'm unable to configure Zaqar's keystone settings to avoid all warnings (including deprecation ones) and errors. Some errors and warnings show themselves on zaqar start, some on the first request. Can someone please figure out the right settings for Zaqar to communicate with default devstack's keystone installation by using HTTPS? The example of my faulty 'keystone_authtoken' section of 'zaqar.conf' is here: http://paste.openstack.org/s | 01:45 |
---|---|---|
openstackgerrit | Merged openstack/zaqar: Updated from global requirements https://review.openstack.org/302895 | 01:58 |
flwang1 | Eva-i: i dont' think the link you posted is accessible :) | 02:02 |
Eva-i | flwang1: ok, here's paste on another hosting place: http://pastebin.com/te6w523U | 02:04 |
flwang1 | Eva-i: are you sure the user-name = zaqar is correct? | 02:04 |
flwang1 | you're using - instead of _ | 02:05 |
flwang1 | Eva-i: ^ | 02:08 |
Eva-i | "_"? | 02:09 |
Eva-i | flwang1: when I use "username", I get: "WARNING oslo_config.cfg [-] Option "username" from group "keystone_authtoken" is deprecated. Use option "user-name" from group "keystone_authtoken"." | 02:09 |
Eva-i | " | 02:09 |
flwang1 | hmm... interesting, in my devstack env, i saw username = nova | 02:10 |
Eva-i | My keystone config fails on the first request with error. When I try to fix it, I get another errors. | 02:10 |
*** shu-mutou-AFK is now known as shu-mutou | 02:11 | |
Eva-i | flwang1: nova is not good example. As I know it uses also other deprecated keystone options. | 02:11 |
Eva-i | *nova in devstack | 02:12 |
flwang1 | Eva-i: i checked my devstack env, most of the services are using "username" | 02:13 |
Eva-i | flwang1: I believe you. But I set a task for me not to use any deprecated optons, so our install guide will last more time. | 02:14 |
flwang1 | Eva-i: and again, i don't believe user-name is a valid option | 02:15 |
*** wanghao has quit IRC | 02:16 | |
*** wanghao has joined #openstack-zaqar | 02:17 | |
Eva-i | flwang1: but keystone plugin says it should be used instead of "username" | 02:18 |
Eva-i | flwang1: you can try to play with the settings too, maybe you'll get configuration without warnings and errors... I gave up. I think I should ask also in keystone chat. =/ | 02:18 |
flwang | Eva-i: can you leave your vote on https://etherpad.openstack.org/p/newton-zaqar-summit-planning ? | 02:21 |
Eva-i | flwang1: oh, I thought "Interested" was voting. But there's new "Vote" part under each, proposal. Okay, I'll vote now. | 02:23 |
flwang1 | and the bad thing is you and me can't join the summit :) and most of the topics proposed by us :( | 02:24 |
Eva-i | flwang1: yes... | 02:34 |
Eva-i | flwang1: What "driver" in this etherpad means? Is it someone who will lead the summit session or someone who will be working on Zaqar solving the problem? | 02:34 |
flwang1 | yes | 02:34 |
flwang1 | that's the frustrating part | 02:35 |
Eva-i | flwang1: you mean 1st? | 02:35 |
flwang1 | lead the session | 02:35 |
flwang1 | so i will call in by hangout or skype to make sure all the sessions running well | 02:36 |
Eva-i | flwang1: oh | 02:38 |
Eva-i | flwang1: will you be able to hear people during the session, will people be able to hear you? | 02:40 |
flwang1 | absolutely yes | 02:41 |
Eva-i | flwang1: someone will turn on hangout or skype on their laptop, right? | 02:44 |
Eva-i | on the summit session | 02:44 |
flwang1 | Eva-i: yep, we can ask vkmc, ryansb or flaper87 to do that | 02:46 |
flwang1 | if they don't, i will -2 for all their patches in the future :) | 02:47 |
Eva-i | flwang1: aha, I see. =) | 02:47 |
Eva-i | flwang1: when is the deadline for voting? | 02:54 |
flwang1 | i would say by Tue | 02:55 |
flwang1 | since i need to setup the schedule asap | 02:55 |
*** achanda has quit IRC | 02:59 | |
Eva-i | flwang1: maybe I shouldn't lead any sessions during this summit. With me being session first timer and attending remotely there's high probability of getting into some awkward situation, especially if my session will be the first in the schedule. | 03:03 |
Eva-i | flwang1: I tried to find a video that shows an example of some openstack design session. But I found not very relevant results. :o | 03:07 |
flwang | because most of the design sessions are not recorded | 03:12 |
Eva-i | flwang1: yes, this is what I thought. | 03:16 |
* Eva-i is scared | 03:26 | |
*** flwang1 has quit IRC | 03:35 | |
*** achanda has joined #openstack-zaqar | 03:44 | |
*** achanda has quit IRC | 03:46 | |
*** achanda has joined #openstack-zaqar | 04:18 | |
*** akanksha_ has quit IRC | 04:27 | |
*** GB21 has joined #openstack-zaqar | 05:21 | |
*** pcaruana has joined #openstack-zaqar | 05:39 | |
*** achanda has quit IRC | 05:43 | |
*** GB21 has quit IRC | 05:44 | |
*** itisha has joined #openstack-zaqar | 06:10 | |
*** pt_15 has joined #openstack-zaqar | 06:11 | |
*** achanda has joined #openstack-zaqar | 06:15 | |
*** rcernin has joined #openstack-zaqar | 06:15 | |
*** GB21 has joined #openstack-zaqar | 06:18 | |
*** achanda has quit IRC | 06:20 | |
*** tesseract has joined #openstack-zaqar | 06:35 | |
*** tesseract is now known as Guest8989 | 06:35 | |
*** jtomasek has joined #openstack-zaqar | 06:39 | |
*** achanda has joined #openstack-zaqar | 06:44 | |
*** GB21 has quit IRC | 07:25 | |
*** GB21 has joined #openstack-zaqar | 07:25 | |
openstackgerrit | Neerja Narayan proposed openstack/zaqar: Adding Negative tests cases to Zaqar v1.0 https://review.openstack.org/296381 | 07:38 |
*** GB21 has quit IRC | 07:44 | |
*** achanda has quit IRC | 07:56 | |
openstackgerrit | Neerja Narayan proposed openstack/zaqar: Adding Negative tests cases to Zaqar v1.0 https://review.openstack.org/296381 | 08:06 |
openstackgerrit | Neerja Narayan proposed openstack/zaqar: Adding Negative tests cases to Zaqar v1.0 https://review.openstack.org/296381 | 08:08 |
*** achanda has joined #openstack-zaqar | 08:22 | |
*** GB21 has joined #openstack-zaqar | 08:28 | |
*** pcaruana has quit IRC | 09:00 | |
openstackgerrit | Neerja Narayan proposed openstack/zaqar: Adding Negative tests cases to Zaqar v1.0 https://review.openstack.org/296381 | 09:14 |
*** gcb has quit IRC | 09:33 | |
*** gcb has joined #openstack-zaqar | 09:33 | |
*** GB21 has quit IRC | 09:47 | |
wanghao | flwang: ping | 09:47 |
wanghao | flwang: ping | 09:47 |
wanghao | flwang: ping | 09:47 |
wanghao | flwang: https://review.openstack.org/#/c/286433/ this patch seems to need workflow +1 again to merge it into master, if you have free time, plz +1 again, thanks. | 09:48 |
*** Qiming has quit IRC | 10:20 | |
*** GB21 has joined #openstack-zaqar | 10:38 | |
*** pt_15 has quit IRC | 10:55 | |
*** itisha has quit IRC | 10:59 | |
*** GB21 has quit IRC | 11:02 | |
*** gcb has quit IRC | 11:11 | |
*** GB21 has joined #openstack-zaqar | 11:35 | |
*** Qiming has joined #openstack-zaqar | 11:43 | |
*** fribeiro has joined #openstack-zaqar | 11:47 | |
*** flaper87 has quit IRC | 11:51 | |
*** flaper87 has joined #openstack-zaqar | 11:51 | |
*** eliqiao has quit IRC | 12:05 | |
*** eliqiao has joined #openstack-zaqar | 12:06 | |
*** GB21 has quit IRC | 12:17 | |
*** achanda has quit IRC | 12:18 | |
*** GB21 has joined #openstack-zaqar | 12:19 | |
openstackgerrit | wangxiyuan proposed openstack/python-zaqarclient: Add update queue function in v2 https://review.openstack.org/294368 | 12:24 |
*** achanda has joined #openstack-zaqar | 12:35 | |
*** achanda has quit IRC | 12:35 | |
*** GB21 has quit IRC | 12:40 | |
*** GB21 has joined #openstack-zaqar | 12:41 | |
*** achanda has joined #openstack-zaqar | 12:44 | |
ryansb | flwang: mean :P of course we can hangout/skype you in | 12:56 |
*** GB21 has quit IRC | 13:11 | |
*** fribeiro has quit IRC | 13:16 | |
*** amitgandhinz has joined #openstack-zaqar | 13:40 | |
*** jtomasek has quit IRC | 13:41 | |
*** jtomasek has joined #openstack-zaqar | 13:48 | |
*** jtomasek has quit IRC | 13:50 | |
*** achanda has quit IRC | 13:50 | |
*** jtomasek has joined #openstack-zaqar | 13:50 | |
*** ametts has joined #openstack-zaqar | 13:55 | |
*** achanda has joined #openstack-zaqar | 13:58 | |
*** itisha has joined #openstack-zaqar | 13:58 | |
*** pt_15 has joined #openstack-zaqar | 13:59 | |
*** kgriffs|afk is now known as kgriffs | 14:02 | |
*** achanda has quit IRC | 14:07 | |
*** jtomasek has quit IRC | 14:11 | |
*** jtomasek has joined #openstack-zaqar | 14:46 | |
*** khushbu_ has joined #openstack-zaqar | 14:54 | |
*** jtomasek has quit IRC | 14:59 | |
*** amitgandhinz has quit IRC | 15:02 | |
ryansb | meeting, folks? | 15:02 |
Eva-i | ryansb: hello, I guess so | 15:02 |
*** elmiko has joined #openstack-zaqar | 15:02 | |
*** amitgandhinz has joined #openstack-zaqar | 15:02 | |
elmiko | hi folks =) | 15:03 |
Eva-i | flwang: are you here? | 15:03 |
elmiko | i had a quick question about the subscribe model for zaqar, does it still work in a manner where i inform the zaqar server about an endpoint that it should send messages to? | 15:03 |
ryansb | elmiko: hiya | 15:03 |
ryansb | yeah, that's right | 15:03 |
Eva-i | elmiko: yes | 15:03 |
elmiko | cool, just wanted to make sure my knowledge hadn't gotten stale ;) | 15:04 |
*** jtomasek has joined #openstack-zaqar | 15:04 | |
*** achanda has joined #openstack-zaqar | 15:15 | |
*** openstackgerrit has quit IRC | 15:18 | |
*** openstackgerrit has joined #openstack-zaqar | 15:18 | |
*** exploreshaifali has joined #openstack-zaqar | 15:31 | |
*** Guest8989 has quit IRC | 15:35 | |
*** Qiming has quit IRC | 15:45 | |
*** khushbu_ has quit IRC | 16:09 | |
*** openstackstatus has joined #openstack-zaqar | 16:11 | |
*** ChanServ sets mode: +v openstackstatus | 16:11 | |
*** khushbu_ has joined #openstack-zaqar | 16:12 | |
*** david-lyle_ is now known as david-lyle | 16:15 | |
-openstackstatus- NOTICE: Reminder, Gerrit will be offline from 20:00 to 21:00 UTC for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 16:19 | |
*** khushbu_ has quit IRC | 16:20 | |
*** khushbu has joined #openstack-zaqar | 16:20 | |
*** rcernin has quit IRC | 16:40 | |
*** kgriffs is now known as kgriffs|afk | 16:55 | |
*** kgriffs|afk is now known as kgriffs | 16:55 | |
*** fribeiro has joined #openstack-zaqar | 17:10 | |
*** sebasmagri has joined #openstack-zaqar | 17:23 | |
*** achanda has quit IRC | 17:53 | |
*** achanda has joined #openstack-zaqar | 17:56 | |
*** exploreshaifali has quit IRC | 18:00 | |
*** achanda_ has joined #openstack-zaqar | 18:04 | |
*** achanda has quit IRC | 18:04 | |
*** achanda_ has quit IRC | 18:21 | |
*** achanda has joined #openstack-zaqar | 18:21 | |
*** khushbu has quit IRC | 18:25 | |
*** achanda has quit IRC | 18:27 | |
*** flwang1 has joined #openstack-zaqar | 18:28 | |
*** khushbu_ has joined #openstack-zaqar | 18:29 | |
*** achanda has joined #openstack-zaqar | 18:30 | |
flwang1 | morning | 18:31 |
flwang1 | vkmc: ryansb: flaper87: around? | 18:32 |
*** achanda has quit IRC | 18:36 | |
ryansb | flwang1: yup | 18:44 |
flwang1 | ryansb: https://etherpad.openstack.org/p/newton-zaqar-summit-planning may i get your vote? | 18:44 |
flwang1 | i'm going to schedule the sessions | 18:44 |
ryansb | certainly | 18:45 |
flwang1 | and unfortunately, i still can't contact vkmc | 18:45 |
flwang1 | so i can't figure out our new meeting time | 18:45 |
ryansb | hrm. | 18:45 |
Eva-i | flwang1: hello | 18:46 |
flwang1 | Eva-i: hi | 18:46 |
flwang1 | http://doodle.com/poll/2qbcr2ddavhbaq3n#table for this poll, still haven't get vkmc's response :( | 18:47 |
Eva-i | I'm a bit relieved that my proposals didn't get much votes | 18:48 |
Eva-i | flwang1: I talked about a week ago with vkmc, she's fine | 18:49 |
flwang1 | Eva-i: currently, we may go for 18:00UTC, that's my 6:00AM | 18:50 |
Eva-i | flwang1: I don't mind 18:00 UTC ;) | 18:51 |
flwang1 | ok, if so, but it's not friendly for China | 18:52 |
flwang1 | so we will go to the new time UTC 18:00, i will send out a mail | 18:54 |
*** flwang1 has left #openstack-zaqar | 18:54 | |
*** flwang1 has joined #openstack-zaqar | 19:00 | |
flwang1 | ryansb: IIRC, you will fly to austin, right? | 19:01 |
*** amitgandhinz has quit IRC | 19:03 | |
*** amitgandhinz has joined #openstack-zaqar | 19:03 | |
*** khushbu_ has quit IRC | 19:11 | |
*** flwang1 has quit IRC | 19:28 | |
ryansb | yup | 19:41 |
-openstackstatus- NOTICE: Gerrit will be offline from 20:00 to 21:00 UTC (starting 10 minutes from now) for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 19:51 | |
*** achanda has joined #openstack-zaqar | 19:59 | |
*** openstackgerrit has quit IRC | 20:05 | |
-openstackstatus- NOTICE: Gerrit is offline until 21:00 UTC for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 20:08 | |
*** ChanServ changes topic to "Gerrit is offline until 21:00 UTC for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html" | 20:08 | |
*** pt_15 has quit IRC | 20:15 | |
*** rcernin has joined #openstack-zaqar | 20:16 | |
*** itisha has quit IRC | 20:19 | |
*** rcernin has quit IRC | 20:21 | |
*** achanda has quit IRC | 20:22 | |
*** kgriffs is now known as kgriffs|afk | 20:24 | |
*** openstackgerrit has joined #openstack-zaqar | 20:27 | |
*** kgriffs|afk is now known as kgriffs | 20:32 | |
*** sebasmagri has quit IRC | 20:39 | |
*** openstackgerrit has quit IRC | 20:41 | |
*** openstackgerrit has joined #openstack-zaqar | 20:55 | |
*** ChanServ changes topic to "OpenStack Queuing and Notification Service || Smile :D || Meetings every Monday @ 21:00 UTC/15:00 UTC || Wiki: https://wiki.openstack.org/wiki/Zaqar || Paste: http://paste.openstack.org/ || Send messages and make some noise :D" | 21:08 | |
-openstackstatus- NOTICE: Gerrit move maintenance completed successfully; note that DNS has been updated to new IP addresses as indicated in http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 21:08 | |
Eva-i | Has anyone tried to run devstack with ssl enabled? | 21:08 |
flwang | Eva-i: i'm going to try that | 21:11 |
flwang | Eva-i: so you are still running into issues? | 21:11 |
Eva-i | flwang: yes. I use these instructions to enable SSL in devstack: https://ask.openstack.org/en/question/45348/devstack-with-ssl/ https://blog-rcritten.rhcloud.com/?p=5. With both methods 'stack.sh' fails with different errors. I test devstack now without zaqar plugin enabled. | 21:14 |
flwang | Eva-i: so USE_SSL=True in localrc doesn't work? | 21:15 |
Eva-i | flwang: yes, it doesn't work. Hm. I'll try to disable SELinux, maybe it will help. | 21:16 |
fribeiro | Eva-i: that usually does the trick :) | 21:17 |
Eva-i | fribeiro: okay, let's see if it will work. I usually work on debian/ubuntu and still not get used to fedora-like systems. | 21:18 |
*** flwang1 has joined #openstack-zaqar | 21:31 | |
klambrec | Hi folks, I've moved on to testing Zaqar into a proper Open Stack install, including Keystone, first thing I"m bumping into is that my HA Proxy instances are now getting a 401 in response to their OPTIONS requests. Is there a trick to getting Zaqar to respond to a simple OPTIONS ping without authentication ? | 21:34 |
flwang | klambrec: can you access the zaqar api without haproxy? | 21:36 |
klambrec | To be honest I haven't tried, in my current setup Zaqar does not have a public IP. I rely on haproxy to forward requests. If this is non trivial, I"ll move my test client inside the management network somehow. | 21:39 |
*** amitgandhinz has quit IRC | 21:52 | |
Eva-i | flwang: fribeiro: no, turning off SELinux didn't helped, but there was a tiny hope. I get this SSL-related error for example: http://paste.openstack.org/show/FqqfsnoJb8wNf9IIjYzO/. Maybe this error is familiar to you? | 21:52 |
fribeiro | Eva-i: humm, looks like ssl is not enabled in cinder by default, it should know the protocol | 21:53 |
flwang | klambrec: is it possible in your env to jump into the haproxy node to 'ping' zaqar? | 21:54 |
fribeiro | Eva-i: weird | 21:54 |
klambrec | flwang, it is and that definitely works, to be clear : my setup worked fine until I changed the auth strategy | 21:55 |
*** amitgandhinz has joined #openstack-zaqar | 21:56 | |
flwang | klambrec: ah, possible since auth is always the first thing which may trouble you :) | 21:56 |
flwang | can you see any error in your zaqar log? | 21:58 |
klambrec | flwang, haproxy sends an HTTP OPTIONS requests to the backend services to determine if they are alive, and when the auth_strategy is not set, Zaqar responds with something positive, 200 OK I guess, now it responds with 401, and so Haproxy considers Zaqar unavaialble. | 21:58 |
*** amitgandhinz has quit IRC | 21:58 | |
flwang | and it would be nice if you can paste it at paste.openstack. org and share the link | 21:58 |
klambrec | http://paste.openstack.org/show/493699/ | 22:00 |
Eva-i | fribeiro: hm, according to my stack.sh.log, nova commands work under SSL. Cinder commands do not. But their 'keystone_authtoken' settings are identical. Perhaps I should ask people in cinder chat. Maybe it's a bug. | 22:05 |
*** fribeiro has quit IRC | 22:07 | |
flwang | klambrec: btw i'm wondering how haproxy OPTIONS works with the other openstack service | 22:10 |
klambrec | My haproxy section for zaqar is pretty much a copy and paste of the keystone/swift ... etc.. sections. So unless there's a piece of haproxy config I haven't found yet in here; I suspect they do accept it. | 22:15 |
klambrec | https://www.haproxy.com/doc/aloha/7.0/haproxy/healthchecks.html#creating-a-health-check I don't I could even get HA Proxy to send along some extra Auth headers in the OPTIONS if I wanted to. | 22:28 |
klambrec | * I don't think | 22:28 |
* Eva-i asked about my problem in cinder chat and got an answer: https://bugs.launchpad.net/devstack/+bug/1533813 | 22:31 | |
openstack | Launchpad bug 1533813 in devstack "Cinder API server disagrees with USE_SSL=True" [Undecided,In progress] - Assigned to Guang Yee (guang-yee) | 22:31 |
flwang | klambrec: but after rollback to noauth, does that work? | 22:31 |
klambrec | Yes it works just fine under noauth | 22:31 |
flwang | klambrec: ok, i will give it a try and let you know | 22:34 |
klambrec | Cool, with noauth, Zaqar responds like this : 192.168.0.2 - - [11/Apr/2016 22:34:30] "OPTIONS / HTTP/1.0" 204 0 | 22:35 |
*** ametts has quit IRC | 22:48 | |
flwang | klambrec: got it, thanks for the feedback | 22:50 |
flwang | klambrec: can you share me the config of you haproxy? | 22:51 |
*** Qiming has joined #openstack-zaqar | 23:44 | |
*** flwang1 has quit IRC | 23:45 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!