*** TravT has quit IRC | 00:22 | |
*** TravT has joined #osic | 00:23 | |
*** TravT has quit IRC | 00:27 | |
*** adrian_otto has quit IRC | 00:30 | |
*** david-lyle has quit IRC | 00:31 | |
*** ravikama_ has joined #osic | 00:33 | |
*** JRobinson__ has quit IRC | 00:38 | |
*** ravikama_ has quit IRC | 00:38 | |
*** cody-somerville has quit IRC | 00:38 | |
*** karthikp_ has joined #osic | 00:54 | |
*** JRobinson__ has joined #osic | 00:55 | |
*** karthikp_ has quit IRC | 00:57 | |
*** karthikp_ has joined #osic | 00:57 | |
*** karthikp_ has quit IRC | 00:58 | |
*** karthikp_ has joined #osic | 00:59 | |
*** karthikp_ has quit IRC | 00:59 | |
*** karthikp_ has joined #osic | 01:00 | |
*** unrahul has quit IRC | 01:22 | |
*** fnaval has quit IRC | 01:30 | |
*** rajpatel has joined #osic | 01:39 | |
*** ravelar159 has joined #osic | 01:40 | |
*** fnaval has joined #osic | 01:43 | |
*** ravelar159 has quit IRC | 01:45 | |
*** rajpatel has quit IRC | 01:49 | |
*** vinaypotluri has quit IRC | 01:51 | |
*** rloo has quit IRC | 01:56 | |
*** rderose has quit IRC | 02:08 | |
*** davechen has joined #osic | 02:15 | |
*** cody-somerville has joined #osic | 02:22 | |
*** TravT has joined #osic | 02:31 | |
*** woodster_ has quit IRC | 02:49 | |
*** asettle has joined #osic | 03:03 | |
*** asettle has quit IRC | 03:08 | |
*** JRobinson__ is now known as JRobinson__afk | 03:35 | |
*** davechen has left #osic | 04:06 | |
*** adrian_otto has joined #osic | 04:09 | |
*** JRobinson__afk is now known as JRobinson__ | 04:13 | |
*** GB21 has joined #osic | 04:34 | |
*** asettle has joined #osic | 05:04 | |
*** asettle has quit IRC | 05:09 | |
*** davechen has joined #osic | 05:43 | |
*** karthikp_ has quit IRC | 05:58 | |
*** TravT has quit IRC | 06:35 | |
*** yonglihe has joined #osic | 06:47 | |
*** asettle has joined #osic | 06:58 | |
*** asettle has quit IRC | 07:02 | |
*** jascott1 has quit IRC | 07:18 | |
*** JRobinson__ has quit IRC | 07:18 | |
*** TravT has joined #osic | 07:26 | |
*** TravT has quit IRC | 07:30 | |
*** GB21 has quit IRC | 07:30 | |
*** ravelar159 has joined #osic | 07:41 | |
*** ravelar159 has quit IRC | 07:47 | |
*** asettle has joined #osic | 08:06 | |
*** GB21 has joined #osic | 08:17 | |
*** cody-somerville has quit IRC | 08:29 | |
*** adrian_otto has quit IRC | 08:41 | |
*** asettle has quit IRC | 08:41 | |
*** asettle has joined #osic | 08:47 | |
*** aastha has quit IRC | 08:59 | |
*** TravT has joined #osic | 09:14 | |
*** TravT has quit IRC | 09:20 | |
*** asettle has quit IRC | 09:34 | |
*** woodburn has quit IRC | 09:35 | |
*** asettle has joined #osic | 09:43 | |
*** asettle has quit IRC | 09:50 | |
*** GB21 has quit IRC | 09:53 | |
*** TravT has joined #osic | 10:09 | |
*** TravT has quit IRC | 10:13 | |
*** GB21 has joined #osic | 10:35 | |
*** davechen has quit IRC | 10:45 | |
*** asettle has joined #osic | 10:50 | |
*** TravT has joined #osic | 11:02 | |
*** TravT has quit IRC | 11:07 | |
*** GB21 has quit IRC | 12:23 | |
*** TravT has joined #osic | 12:51 | |
*** TravT has quit IRC | 12:56 | |
*** woodster_ has joined #osic | 13:21 | |
*** peristeri has joined #osic | 13:25 | |
*** ametts has joined #osic | 13:33 | |
kencjohnston | Good morning team! | 13:35 |
---|---|---|
*** adrian_otto has joined #osic | 13:35 | |
*** KLevenstein has joined #osic | 13:45 | |
*** valw has joined #osic | 13:46 | |
*** valw has quit IRC | 13:46 | |
*** KrishR has joined #osic | 13:46 | |
*** valw has joined #osic | 13:46 | |
*** ccneill has joined #osic | 13:46 | |
*** woodburn has joined #osic | 13:47 | |
*** ametts has quit IRC | 13:54 | |
*** rderose has joined #osic | 13:54 | |
*** ccneill has quit IRC | 13:55 | |
*** ravikama_ has joined #osic | 14:00 | |
*** dasanind has joined #osic | 14:04 | |
*** GB21 has joined #osic | 14:05 | |
*** ametts has joined #osic | 14:07 | |
*** Mudpuppy has joined #osic | 14:11 | |
*** dasanind has quit IRC | 14:11 | |
*** TxGirlGeek has joined #osic | 14:12 | |
*** mohitmotiani has joined #osic | 14:14 | |
*** sgundur1 has joined #osic | 14:15 | |
*** dasanind has joined #osic | 14:17 | |
*** fnaval has quit IRC | 14:19 | |
*** aastha has joined #osic | 14:19 | |
*** ravelar159 has joined #osic | 14:21 | |
*** spotz_zzz is now known as spotz | 14:24 | |
*** adrian_otto has quit IRC | 14:25 | |
*** adrian_otto has joined #osic | 14:25 | |
*** nadeem has joined #osic | 14:25 | |
dasm | g'morning | 14:26 |
*** ravelar159 has quit IRC | 14:26 | |
dasm | and now, everyone convince yourself: who sent and didn't send abstract for Barcelona? ;) | 14:27 |
*** ravelar159 has joined #osic | 14:27 | |
spotz | dasm morning | 14:29 |
*** GB21 has quit IRC | 14:30 | |
*** fnaval has joined #osic | 14:32 | |
dasm | hey spotz. are you in castle? | 14:33 |
spotz | dasm yep, walked behind you about5 minutes ago:) | 14:33 |
dasm | spotz: great! i'm on a meeting right now, but will try to meet with you in few minutes. | 14:34 |
spotz | dasm ok | 14:34 |
*** homerp has joined #osic | 14:34 | |
dasm | *in a meeting | 14:34 |
*** adrian_otto has quit IRC | 14:35 | |
*** valw has quit IRC | 14:41 | |
*** Tamayo has joined #osic | 14:42 | |
*** adrian_otto has joined #osic | 14:43 | |
*** rrecio has joined #osic | 14:52 | |
*** valw has joined #osic | 14:52 | |
*** rrecio_ has joined #osic | 14:53 | |
*** mohitmotiani has quit IRC | 14:53 | |
*** TravT has joined #osic | 14:55 | |
*** mohitmotiani has joined #osic | 14:56 | |
*** rrecio has quit IRC | 14:56 | |
*** valw has quit IRC | 14:57 | |
*** karthikp_ has joined #osic | 15:01 | |
*** TxGirlGeek has quit IRC | 15:01 | |
*** TxGirlGeek has joined #osic | 15:02 | |
*** vinaypotluri has joined #osic | 15:09 | |
*** mohitmotiani has quit IRC | 15:10 | |
*** vijendar has joined #osic | 15:12 | |
*** karthikp_ has quit IRC | 15:13 | |
*** karthikp_ has joined #osic | 15:14 | |
*** TxGirlGeek has quit IRC | 15:14 | |
*** mohitmotiani has joined #osic | 15:15 | |
*** mohitmotiani has quit IRC | 15:16 | |
*** TxGirlGeek has joined #osic | 15:18 | |
*** mohitmotiani has joined #osic | 15:19 | |
*** valw has joined #osic | 15:19 | |
*** dasanind has quit IRC | 15:22 | |
*** mohitmotiani has quit IRC | 15:24 | |
*** valw has quit IRC | 15:24 | |
*** mohitmotiani has joined #osic | 15:24 | |
*** TravT has quit IRC | 15:25 | |
*** mohitmotiani has quit IRC | 15:26 | |
*** ravelar159 has quit IRC | 15:26 | |
*** ravelar159 has joined #osic | 15:27 | |
*** mohitmotiani has joined #osic | 15:27 | |
*** TxGirlGeek has quit IRC | 15:29 | |
*** TxGirlGe_ has joined #osic | 15:29 | |
*** karthikp_ has quit IRC | 15:29 | |
*** nadeem has quit IRC | 15:29 | |
*** mohitmotiani has quit IRC | 15:31 | |
*** rderose has quit IRC | 15:35 | |
*** mohitmotiani has joined #osic | 15:36 | |
*** TxGirlGe_ has quit IRC | 15:36 | |
*** TxGirlGeek has joined #osic | 15:37 | |
*** dasanind has joined #osic | 15:41 | |
*** homerp has quit IRC | 15:42 | |
*** mohitmotiani has quit IRC | 15:45 | |
*** mohitmotiani has joined #osic | 15:45 | |
*** TxGirlGeek has quit IRC | 15:46 | |
*** rloo has joined #osic | 15:46 | |
*** valw has joined #osic | 15:46 | |
*** mohitmotiani has quit IRC | 15:47 | |
*** rderose has joined #osic | 15:48 | |
*** mohitmotiani has joined #osic | 15:48 | |
*** mohitmotiani has quit IRC | 15:50 | |
*** valw has quit IRC | 15:51 | |
*** TxGirlGeek has joined #osic | 15:51 | |
*** mohitmotiani has joined #osic | 15:51 | |
*** mohitmotiani has quit IRC | 15:52 | |
*** mohitmotiani has joined #osic | 15:55 | |
*** di has joined #osic | 15:55 | |
*** mmalik4 has joined #osic | 15:56 | |
*** mmalik4_ has joined #osic | 15:56 | |
*** homerp has joined #osic | 15:56 | |
*** karthikp_ has joined #osic | 15:57 | |
*** TxGirlGeek has quit IRC | 16:00 | |
*** TxGirlGeek has joined #osic | 16:00 | |
dasm | spotz: are you free now? | 16:02 |
spotz | dasm yeah, doing OSA meeting in irc but I can multi-task | 16:03 |
*** asettle has quit IRC | 16:03 | |
*** asettle has joined #osic | 16:04 | |
*** TxGirlGeek has quit IRC | 16:04 | |
*** TxGirlGeek has joined #osic | 16:05 | |
*** mohitmotiani has quit IRC | 16:05 | |
*** mohitmotiani has joined #osic | 16:06 | |
*** mmalik4 has quit IRC | 16:06 | |
*** dasanind has quit IRC | 16:07 | |
*** di has quit IRC | 16:07 | |
*** dasanind has joined #osic | 16:08 | |
*** asettle has quit IRC | 16:09 | |
*** mohitmotiani has quit IRC | 16:10 | |
*** TxGirlGeek has quit IRC | 16:11 | |
*** TxGirlGeek has joined #osic | 16:12 | |
*** di has joined #osic | 16:12 | |
*** TxGirlGeek has quit IRC | 16:13 | |
*** di has quit IRC | 16:13 | |
*** di has joined #osic | 16:13 | |
*** valw has joined #osic | 16:14 | |
*** valw has quit IRC | 16:19 | |
*** GB21 has joined #osic | 16:19 | |
*** valw has joined #osic | 16:28 | |
*** cmspence has joined #osic | 16:30 | |
*** valw has quit IRC | 16:32 | |
*** cody-somerville has joined #osic | 16:33 | |
*** cody-somerville has quit IRC | 16:33 | |
*** cody-somerville has joined #osic | 16:33 | |
*** mohitmotiani has joined #osic | 16:37 | |
*** mohitmotiani has quit IRC | 16:41 | |
*** valw has joined #osic | 16:41 | |
*** valw has quit IRC | 16:46 | |
*** karthikp_ has quit IRC | 16:52 | |
*** valw has joined #osic | 16:55 | |
*** cody-somerville has quit IRC | 16:56 | |
*** cody-somerville has joined #osic | 16:56 | |
*** unrahul has joined #osic | 16:58 | |
*** valw has quit IRC | 17:00 | |
*** karthikp_ has joined #osic | 17:01 | |
*** GB21 has quit IRC | 17:02 | |
*** asettle has joined #osic | 17:04 | |
*** GB21 has joined #osic | 17:05 | |
*** karthikp_ has quit IRC | 17:07 | |
*** cmspence has quit IRC | 17:09 | |
*** asettle has quit IRC | 17:09 | |
*** mmalik4_ has quit IRC | 17:12 | |
*** dasanind has quit IRC | 17:17 | |
*** valw has joined #osic | 17:22 | |
*** mmalik4_ has joined #osic | 17:26 | |
*** valw has quit IRC | 17:26 | |
*** valw has joined #osic | 17:30 | |
dolphm | adrian_otto: where is the shell script you're using to authenticate for a trust token? | 17:30 |
adrian_otto | ok, on the nova node, do a "find / -name part-006 -print" | 17:31 |
adrian_otto | and that will show you the script. | 17:31 |
adrian_otto | the script includes the heat-params file which contains the trust id and trustee userid | 17:31 |
*** muralia has joined #osic | 17:31 | |
adrian_otto | the trust token is successfully generated by keystone, and when we try to use it with the magnum API, magnum rejects it with a 401 Unauthorized response. | 17:32 |
*** revon has joined #osic | 17:34 | |
*** muralia_ has quit IRC | 17:34 | |
*** di has quit IRC | 17:36 | |
*** di has joined #osic | 17:37 | |
*** cody-somerville has quit IRC | 17:40 | |
*** cmspence has joined #osic | 17:46 | |
dolphm | adrian_otto: what's the password for your trustee user? it's not the password in your paste | 17:56 |
*** karthikp_ has joined #osic | 17:56 | |
adrian_otto | that will be in the heat-params file | 17:57 |
adrian_otto | dolphm: are you connected to the nova instance? | 17:59 |
dolphm | adrian_otto: i'm not sure where you meant by nova node earlier? one of the nova containers? | 17:59 |
adrian_otto | ok, on the osad "infra1" box do: ssh infra1-utility-container-919baab5 | 17:59 |
adrian_otto | form there, do source openrc | 17:59 |
adrian_otto | and then nova list | 17:59 |
adrian_otto | you will see a nova instance there. | 18:00 |
*** cmspence has quit IRC | 18:00 | |
dolphm | adrian_otto: ooh, i thought you meant an infrastructure node | 18:00 |
adrian_otto | ssh to the 172.29.24.x address | 18:00 |
cloudnull | adrian_otto: all of the clients are installed on the utility container. | 18:00 |
*** cmspence has joined #osic | 18:00 | |
adrian_otto | in this case: | 18:01 |
adrian_otto | ssh -i .ssh/id_rsa_os minion@172.29.248.16 | 18:01 |
cloudnull | if you need want to access the clients for a given service you can work from the venv in /openstack/venvs/$SERVICE/bin | 18:01 |
dolphm | adrian_otto: gotcha | 18:01 |
adrian_otto | dolphm: /etc/sysconfig/heat-params | 18:01 |
adrian_otto | TRUSTEE_USER_ID TRUSTEE_PASSWORD and TRUST_ID are the relevant values | 18:02 |
*** GB21 has quit IRC | 18:02 | |
adrian_otto | and the part-006 file (get-cert.sh) is here: /var/lib/cloud/instances/a180ddd5-b38f-4754-bf56-0c9bc7c01798/scripts/part-006 | 18:03 |
adrian_otto | so what I was doing is cd /var/lib/cloud/instances/a180ddd5-b38f-4754-bf56-0c9bc7c01798/scripts; sh -x part-006 | 18:04 |
dolphm | adrian_otto: thanks, got everything i was looking for | 18:05 |
adrian_otto | and I could see that I got the client token, and then when it made the curl request on line 71, that's where the 401 happened. | 18:05 |
adrian_otto | awesome | 18:05 |
dolphm | adrian_otto: you said that script was failing with a 401 when it hit magnum, though? | 18:05 |
adrian_otto | yes | 18:05 |
adrian_otto | it gets the auth token from keystone fine | 18:05 |
dolphm | adrian_otto: i'm getting a 400 | 18:05 |
adrian_otto | and then magnum rejects it. | 18:06 |
adrian_otto | the 400 is a subsequent error | 18:06 |
adrian_otto | you see "ValueError: No JSON object could be decoded" right? | 18:06 |
*** vijendar has quit IRC | 18:07 | |
adrian_otto | look back further for this: | 18:08 |
adrian_otto | http://172.29.236.200:9511/certificates/7556bde0-4048-41fb-bcbc-34ca42b27674 | 18:08 |
adrian_otto | the curl for that results in a 401 result. | 18:08 |
adrian_otto | cascading to the other problem | 18:08 |
dolphm | adrian_otto: yes, okay | 18:09 |
adrian_otto | http://paste.openstack.org/raw/DqRtuFzkN1qmjEzS9XYc/ | 18:09 |
adrian_otto | that is what I see | 18:09 |
adrian_otto | and that is where we are really stuck | 18:09 |
adrian_otto | I do have a theory that we might want to explore. Let me know when you are ready to hear it. | 18:10 |
*** vijendar has joined #osic | 18:12 | |
*** homerp has quit IRC | 18:20 | |
dolphm | adrian_otto: what's that? | 18:22 |
adrian_otto | ok, if you look carefully at the role assignment list on the devstack side, it has only one role: "admin" | 18:25 |
dolphm | and there's heat_stack_owner delegated as part of the trust on the osad deploy | 18:25 |
dolphm | in addition to admin | 18:25 |
adrian_otto | yes, that's it | 18:26 |
adrian_otto | my guess is that our policy enforcement on the magnum side may be confused by the additional role? | 18:26 |
dolphm | which is delegated on the admin project itself, rather than a user's project | 18:26 |
adrian_otto | is there a way to take out the second role as a way to prove/disprove this theory? | 18:27 |
*** TxGirlGeek has joined #osic | 18:27 | |
dolphm | adrian_otto: well, up until a minute ago, magnum wasn't seeing any roles at all | 18:27 |
dolphm | adrian_otto: the auth request in that script was not consuming the trust https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-trust-ext.rst#consuming-a-trust | 18:28 |
dolphm | adrian_otto: but i'm still getting a 400 from magnum | 18:28 |
dolphm | adrian_otto: on curl --fail -X GET -H "X-Auth-Token: $USER_TOKEN" $MAGNUM_URL/certificates/$BAY_UUID | 18:28 |
dolphm | cc- lbragstad | 18:28 |
dolphm | adrian_otto: lbragstad: for example, http://cdn.pasteraw.com/35bheyf3hz5xmakdxra4on0mczc8atm | 18:29 |
adrian_otto | ok, looking | 18:30 |
dolphm | adrian_otto: is magnum expecting something else as part of that request? | 18:30 |
lbragstad | dolphm is that a request you're making to magnum? | 18:30 |
dolphm | lbragstad: yes | 18:30 |
lbragstad | me internet just dropped for a minute | 18:30 |
lbragstad | my* | 18:30 |
lbragstad | huh - interesting | 18:31 |
adrian_otto | oh, that's different than before | 18:32 |
*** nadeem has joined #osic | 18:33 | |
dolphm | adrian_otto: i added the --fail because it was breezing past that 400 | 18:33 |
adrian_otto | ok | 18:34 |
adrian_otto | the magnum service may not be running | 18:36 |
adrian_otto | no, it's up. | 18:37 |
adrian_otto | oh, wait | 18:37 |
adrian_otto | we saw this once before | 18:37 |
adrian_otto | the service endpoint for the magnum API is front-ended by an haproxy | 18:37 |
adrian_otto | and the haproxy was returning a 400 wihtout passing the request through to magnum | 18:38 |
adrian_otto | let me see if that's happening again | 18:38 |
dolphm | adrian_otto: strange -- the magnum logs report a 401, and the client sees a 400 | 18:38 |
dolphm | adrian_otto: oh, maybe that behavior is also related to haproxy | 18:39 |
adrian_otto | verified. | 18:39 |
lbragstad | sounds like it | 18:39 |
adrian_otto | haproxy handles the request, and does not reverse proxy it to magnum | 18:39 |
adrian_otto | at least on eth0 | 18:39 |
adrian_otto | let me repeat that test on the other interfaces just in case | 18:40 |
adrian_otto | ok, I'm sure. Magnum is not getting contacted by haproxy. | 18:40 |
dolphm | adrian_otto: to correct myself - magnum was not seeing 401's from keystone when a client made a request ... those were two separate requests. the 401 occurred in magnum's periodic job, and magnum is NOT seeing any requests from the script on the nova instance | 18:41 |
dolphm | or at least, it's not logging anything | 18:41 |
* adrian_otto nod | 18:41 | |
dolphm | adrian_otto: so, i 100% agree with the haproxy thing | 18:41 |
dolphm | lbragstad: this is also in magnum's logs http://cdn.pasteraw.com/9dttj5qbhjzs7l2k9jizvf5gua0mm8v | 18:42 |
adrian_otto | so the question is why | 18:42 |
adrian_otto | I will strace the haproxy to see if it drops any clues | 18:43 |
*** dasanind has joined #osic | 18:44 | |
jroll | caching a 400 response for some reason? | 18:44 |
jroll | or does haproxy have some rules to short-circuit certain requests to a 400? | 18:45 |
adrian_otto | 20510 recvfrom(313, "GET /certificates/7556bde0-4048-41fb-bcbc-34ca42b27674 HTTP/1.1\r\nHost: 172.29.236.200:9511\r\nUser-Agent: curl/7.43.0\r\nAccept: */*\r\nX-Auth-Token: gAAAAABXh92gt0VHUFiMtjaUbnIxS8IITgs1rlLqkfI0ut81VYZyxPis9AGko1XhVoZk5FMOlnF2X0lpHTP_eaAW9sgJ09ghtW16yYE7CQmhpPWCcQ1onUrHyVUsBmS_DSLReb1lw36G3IGeJtf4SWnlpEcVEq7JsA\r\r\n\r\n", 375808, 0, NULL, NULL) = 311 | 18:45 |
adrian_otto | 20510 sendto(313, "HTTP/1.0 400 Bad request\r\nCache-Control: no-cache\r\nConnection: close\r\nContent-Type: text/html\r\n\r\n<html><body><h1>400 Bad request</h1>\nYour browser sent an invalid request.\n</body></html>\n\n", 188, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_MORE, NULL, 0) = 188 | 18:45 |
adrian_otto | see that? | 18:46 |
adrian_otto | it's immediately dumping the connection | 18:46 |
lbragstad | so - it's a config issue with haproxy? | 18:47 |
adrian_otto | To my disgust, haproxy is configured with 25 different configuration files. | 18:47 |
adrian_otto | I'm not exaggerating. | 18:47 |
adrian_otto | lbragstad: I think this is part of the problem but not all of it | 18:47 |
jroll | it can be configured with one file :) | 18:47 |
adrian_otto | because the first time you make this request, you get a 401 back to the client | 18:48 |
jroll | but yeah I'd check the config first | 18:48 |
adrian_otto | jroll: yes, I wish it were. | 18:48 |
jroll | adrian_otto: I'm happy to take a look if you want to dump the configs somewhere | 18:48 |
dolphm | Jul 14 18:47:55 ip6-localhost haproxy[20510]: 172.29.248.16:34692 [14/Jul/2016:18:47:55.541] magnum-front magnum-front/<NOSRV> -1/-1/-1/-1/0 400 188 - - PR-- 231/0/0/0/0 0/0 "<BADREQ>" | 18:48 |
jroll | <NOSRV> | 18:49 |
adrian_otto | jroll: tx | 18:49 |
jroll | maybe all the backend servers dropped out of rotation for whatever reason? | 18:49 |
dolphm | jroll: yeah /etc/haproxy/conf.d/magnum http://cdn.pasteraw.com/elm5g29ss1fx624b40k5lftd7p59bot | 18:49 |
jroll | option httpchk /status | 18:50 |
jroll | does magnum have that endpoint? | 18:50 |
adrian_otto | jroll: keep in mind that there are 23 other services with similar files, and a main one | 18:50 |
jroll | adrian_otto: yeah, noted | 18:50 |
adrian_otto | I first fixated on "option httpchk /status" | 18:50 |
jroll | worth looking at http://$haproxyhost:8080/haproxy?stats | 18:51 |
adrian_otto | and haproxy does request /status from magnum on the backend | 18:51 |
adrian_otto | and magnum replies in a timely fashion with 200 OK | 18:51 |
adrian_otto | so then I stopped looking at that | 18:51 |
jroll | ah ok cool | 18:51 |
jroll | just making sure that actually worked | 18:51 |
dolphm | adrian_otto: /status is protected by keystone | 18:52 |
adrian_otto | ok, I need to pick up my son, be back in about 20 min. | 18:52 |
adrian_otto | of the status check is the problem I would expect a 50[34] error, not a 400 | 18:53 |
adrian_otto | the abckend server beign judged as down is not a client error | 18:53 |
adrian_otto | bbl | 18:53 |
jroll | same, but maybe one of those configs makes it a 400 :P | 18:53 |
*** ccneill has joined #osic | 18:56 | |
*** valw has quit IRC | 18:57 | |
dolphm | took off the /status and still seeing <NOSRV> in the haproxy log | 18:58 |
lbragstad | hmm i believe osa sets up ha proxy - so i wonder if they are seeing this issue upstream? | 18:58 |
jroll | random google says that <NOSRV> + 400 = "client did not finish making request before timeout" | 19:00 |
dolphm | well, when i manually make the same request that the script is running, i get a 404 from magnum -- auth succeeds just fine | 19:00 |
dolphm | http://cdn.pasteraw.com/95k6ewvo77auk3pxf9mcravsnafbbbh | 19:00 |
lbragstad | dolphm and that is a trust-scoped token? | 19:01 |
dolphm | which makes me think that the code trying to parse the token out of the response from keystone is getting a trailing line break or something wonky | 19:01 |
dolphm | lbragstad: it wasn't before, but it is now | 19:01 |
lbragstad | dolphm so that should prove that the trust configuration seems to work on the osa setup | 19:05 |
*** asettle has joined #osic | 19:06 | |
*** valw has joined #osic | 19:06 | |
dolphm | lbragstad: afaict, yes | 19:06 |
*** nadeem has quit IRC | 19:07 | |
*** mohitmotiani has joined #osic | 19:10 | |
*** asettle has quit IRC | 19:11 | |
*** valw has quit IRC | 19:11 | |
*** mohitmotiani has quit IRC | 19:11 | |
*** mmalik4_ has quit IRC | 19:12 | |
*** rloo has quit IRC | 19:13 | |
*** rloo has joined #osic | 19:14 | |
* adrian_otto back. Read scrollback. | 19:16 | |
dolphm | adrian_otto: tl;dr i'm getting a legit 404 from magnum now | 19:18 |
adrian_otto | ok | 19:18 |
dolphm | adrian_otto: i've made 3 changes i'll summarize in an email - but i' | 19:18 |
dolphm | i'm not sure how to proceed from here, other than to suggest killing the instance, update this script, and run everything again | 19:18 |
adrian_otto | terrific. | 19:18 |
adrian_otto | you have my undivided attention | 19:19 |
*** karthikp_ has quit IRC | 19:22 | |
*** rderose has quit IRC | 19:23 | |
*** karthikp_ has joined #osic | 19:23 | |
*** nadeem has joined #osic | 19:24 | |
lbragstad | dolphm are you going to send that out on adrian_otto's thread? | 19:24 |
*** nadeem has quit IRC | 19:25 | |
*** mohitmotiani has joined #osic | 19:26 | |
lbragstad | dolphm adrian_otto i'm going to break for lunch - i'll catch the scroll back though | 19:26 |
*** cody-somerville has joined #osic | 19:26 | |
*** cody-somerville has quit IRC | 19:26 | |
*** cody-somerville has joined #osic | 19:26 | |
*** cody-somerville has quit IRC | 19:28 | |
*** cody-somerville has joined #osic | 19:28 | |
adrian_otto | tx lbragstad | 19:28 |
*** cody-somerville has quit IRC | 19:28 | |
*** cody-somerville has joined #osic | 19:29 | |
*** nadeem has joined #osic | 19:31 | |
*** rderose has joined #osic | 19:32 | |
*** mmalik4_ has joined #osic | 19:33 | |
*** valw has joined #osic | 19:34 | |
*** asettle has joined #osic | 19:35 | |
*** valw has quit IRC | 19:38 | |
*** asettle has quit IRC | 19:40 | |
*** rmevans has joined #osic | 19:42 | |
*** mohitmotiani has quit IRC | 19:42 | |
*** Tamayo has quit IRC | 19:50 | |
*** valw has joined #osic | 19:51 | |
*** peristeri has quit IRC | 19:51 | |
*** valw has quit IRC | 19:56 | |
jroll | dolphm: that tr O_o | 19:56 |
jroll | you know | 19:56 |
*** valw has joined #osic | 19:57 | |
jroll | I wonder if there's a \r in there somewhere and haproxy is hoping for a \n after that or something? | 19:57 |
*** ravelar159 has quit IRC | 19:57 | |
*** fnaval has quit IRC | 19:57 | |
*** fnaval has joined #osic | 19:57 | |
dolphm | jroll: i'm guessing curl -H 'Key: Value\r' results in an extra line break in the http request headers, effectively signaling that they've all been sent | 19:57 |
*** asettle has joined #osic | 19:59 | |
*** asettle has quit IRC | 19:59 | |
jroll | dolphm: oh yeah, that too | 19:59 |
*** fnaval has quit IRC | 19:59 | |
*** fnaval has joined #osic | 20:00 | |
*** ametts has quit IRC | 20:00 | |
*** ravelar159 has joined #osic | 20:02 | |
*** di has left #osic | 20:09 | |
*** di has joined #osic | 20:10 | |
*** rderose has quit IRC | 20:10 | |
*** rderose has joined #osic | 20:11 | |
*** mohitmotiani has joined #osic | 20:13 | |
*** ametts has joined #osic | 20:15 | |
*** mohitmotiani has quit IRC | 20:17 | |
*** asettle has joined #osic | 20:18 | |
*** rderose has quit IRC | 20:19 | |
*** peristeri has joined #osic | 20:19 | |
*** asettle has quit IRC | 20:20 | |
*** rderose has joined #osic | 20:20 | |
*** asettle has joined #osic | 20:20 | |
*** asettle has quit IRC | 20:25 | |
*** rajpatel has joined #osic | 20:32 | |
*** mohitmotiani has joined #osic | 20:34 | |
*** ravelar159 has quit IRC | 20:35 | |
*** mohitmotiani has quit IRC | 20:39 | |
*** hemanthm is now known as hemanthm|afk | 20:39 | |
*** mohitmotiani has joined #osic | 20:42 | |
*** valw has quit IRC | 20:44 | |
*** rderose has quit IRC | 20:44 | |
*** Mudpuppy has quit IRC | 20:44 | |
*** rderose has joined #osic | 20:45 | |
*** mohitmotiani has quit IRC | 20:48 | |
*** rmevans has quit IRC | 20:53 | |
*** TxGirlGeek has quit IRC | 20:53 | |
*** adrian_otto has quit IRC | 21:00 | |
*** peristeri has quit IRC | 21:07 | |
*** mohitmotiani has joined #osic | 21:12 | |
*** dasanind has quit IRC | 21:14 | |
*** mohitmotiani has quit IRC | 21:14 | |
*** mmalik4_ has quit IRC | 21:17 | |
*** rajpatel has quit IRC | 21:18 | |
*** karthikp_ has quit IRC | 21:24 | |
*** mohitmotiani has joined #osic | 21:25 | |
*** KrishR has quit IRC | 21:30 | |
*** KrishR has joined #osic | 21:31 | |
*** rajpatel has joined #osic | 21:31 | |
*** rajpatel1 has joined #osic | 21:32 | |
*** vijendar has quit IRC | 21:35 | |
*** mohitmotiani has quit IRC | 21:36 | |
*** rajpatel has quit IRC | 21:36 | |
*** dharinic_ has joined #osic | 21:39 | |
*** cmspence has quit IRC | 21:44 | |
*** karthikp_ has joined #osic | 21:47 | |
*** rajpatel1 has quit IRC | 21:49 | |
*** cmspence has joined #osic | 21:49 | |
*** rajpatel has joined #osic | 21:57 | |
*** nadeem has quit IRC | 22:00 | |
*** ametts has quit IRC | 22:01 | |
*** ccneill has quit IRC | 22:02 | |
*** dharinic_ has quit IRC | 22:06 | |
*** spotz is now known as spotz_zzz | 22:07 | |
*** cody-somerville has quit IRC | 22:12 | |
*** ravikama_ has quit IRC | 22:14 | |
*** chris_hultin has joined #osic | 22:14 | |
*** KLevenstein has quit IRC | 22:15 | |
*** karthikp_ has quit IRC | 22:17 | |
*** rajpatel has quit IRC | 22:18 | |
*** cody-somerville has joined #osic | 22:18 | |
*** nadeem has joined #osic | 22:20 | |
*** cody-somerville has quit IRC | 22:23 | |
*** JRobinson__ has joined #osic | 22:23 | |
*** cody-somerville has joined #osic | 22:23 | |
*** cody-somerville has quit IRC | 22:23 | |
*** cody-somerville has joined #osic | 22:23 | |
*** mohitmotiani has joined #osic | 22:29 | |
*** nadeem has quit IRC | 22:29 | |
*** ntpttr has quit IRC | 22:31 | |
*** ntpttr has joined #osic | 22:31 | |
*** karthikp_ has joined #osic | 22:32 | |
*** ravikama_ has joined #osic | 22:33 | |
*** mohitmotiani has quit IRC | 22:34 | |
*** karthikp_ has quit IRC | 22:41 | |
*** mmalik4_ has joined #osic | 22:49 | |
*** ravikama_ has quit IRC | 22:49 | |
*** mmalik4_ has quit IRC | 23:05 | |
*** ccneill has joined #osic | 23:07 | |
*** adrian_otto has joined #osic | 23:13 | |
*** karthikp_ has joined #osic | 23:17 | |
*** rrecio_ has quit IRC | 23:17 | |
*** asettle has joined #osic | 23:26 | |
*** asettle has quit IRC | 23:30 | |
*** KrishR has quit IRC | 23:32 | |
*** di has quit IRC | 23:41 | |
*** ccneill has quit IRC | 23:46 | |
*** cody-somerville has quit IRC | 23:54 | |
*** cody-somerville has joined #osic | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!