[rdo-list] proxy
by david caughey
Hi Folks,
I am trying to install Packstack Newton behind a proxy.
I recently got the go ahead to build an oVirt environment which went well
but I'm having issues getting Openstack Newton installed behind the proxy.
There seems to be an issue with Proxy swift server?
I have placed the necessary proxy settings in /etc/environment along wit
the no_proxy settings and also set firefox to respect the proxy.
Everything seems to go fine except proxy swift.
Are there any guides or how tos for this type of situation?
Or should I create the environment outside and import,
/etc/swift/swift.conf
[swift-hash]
swift_hash_path_suffix = 6201ab08e9d345b7
[swift-constraints]
max_header_size=8192
]# openstack endpoint show swift
+--------------+-----------------------------------------------+
| Field | Value |
+--------------+-----------------------------------------------+
| adminurl | http://10.20.30.91:8080/v1/AUTH_%(tenant_id)s |
| enabled | True |
| id | 5ac84270d5cb406eaaf9181cb54ac141 |
| internalurl | http://10.20.30.91:8080/v1/AUTH_%(tenant_id)s |
| publicurl | http://10.20.30.91:8080/v1/AUTH_%(tenant_id)s |
| region | RegionOne |
| service_id | 30fbf4a88f8e4ae5bc945e7c4a1db851 |
| service_name | swift |
| service_type | object-store |
+--------------+-----------------------------------------------+
# systemctl status openstack-swift-proxy
â openstack-swift-proxy.service - OpenStack Object Storage (swift) - Proxy
Server
Loaded: loaded (/usr/lib/systemd/system/openstack-swift-proxy.service;
enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Thu 2017-09-21 15:34:21 IST;
23h ago
Process: 7123 ExecStart=/usr/bin/swift-proxy-server
/etc/swift/proxy-server.conf (code=exited, status=1/FAILURE)
Main PID: 7123 (code=exited, status=1/FAILURE)
Sep 21 15:34:21 newton-1.eitte.lab swift-proxy-server[7123]: File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 681, in
post
Sep 21 15:34:21 newton-1.eitte.lab swift-proxy-server[7123]: return
self.request(url, 'POST', **kwargs)
Sep 21 15:34:21 newton-1.eitte.lab swift-proxy-server[7123]: File
"/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in
inner
Sep 21 15:34:21 newton-1.eitte.lab swift-proxy-server[7123]: return
wrapped(*args, **kwargs)
Sep 21 15:34:21 newton-1.eitte.lab swift-proxy-server[7123]: File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 570, in
request
Sep 21 15:34:21 newton-1.eitte.lab swift-proxy-server[7123]: raise
exceptions.from_response(resp, method, url)
Sep 21 15:34:21 newton-1.eitte.lab swift-proxy-server[7123]:
keystoneauth1.exceptions.http.Unauthorized: The request you have made
requires ...35d80)
Sep 21 15:34:21 newton-1.eitte.lab systemd[1]:
openstack-swift-proxy.service: main process exited, code=exited,
status=1/FAILURE
Sep 21 15:34:21 newton-1.eitte.lab systemd[1]: Unit
openstack-swift-proxy.service entered failed state.
Sep 21 15:34:21 newton-1.eitte.lab systemd[1]:
openstack-swift-proxy.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
# tail /var/log/messages
Sep 22 15:07:54 newton-1 swift-proxy-server: File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 681, in
post
Sep 22 15:07:54 newton-1 swift-proxy-server: return self.request(url,
'POST', **kwargs)
Sep 22 15:07:54 newton-1 swift-proxy-server: File
"/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in
inner
Sep 22 15:07:54 newton-1 swift-proxy-server: return wrapped(*args, **kwargs)
Sep 22 15:07:54 newton-1 swift-proxy-server: File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 570, in
request
Sep 22 15:07:54 newton-1 swift-proxy-server: raise
exceptions.from_response(resp, method, url)
Sep 22 15:07:54 newton-1 swift-proxy-server:
keystoneauth1.exceptions.http.Unauthorized: The request you have made
requires authentication. (HTTP 401) (Request-ID:
req-bfdb735b-36c9-4d42-b071-e79354d3cb9e)
Sep 22 15:07:54 newton-1 systemd: openstack-swift-proxy.service: main
process exited, code=exited, status=1/FAILURE
Sep 22 15:07:54 newton-1 systemd: Unit openstack-swift-proxy.service
entered failed state.
Sep 22 15:07:54 newton-1 systemd: openstack-swift-proxy.service failed.
Keystone logs (only error)
2017-09-22 15:05:23.158 3131 WARNING oslo_log.versionutils
[req-87b12ed7-e93d-4dbc-832a-0a7b5e1e7f43 3c6b71072fdf48b0ac3f027b19fc1598
36354e11031a4f1a9676cd52b0b9f288 - default default] Deprecated:
get_services of the v2 API is deprecated as of Mitaka in favor of a similar
function in the v3 API and may be removed in Q.
NetworkManager is disabled
firewalld is disabled
selinux is disabled
httpd access
10.20.30.1 - - [21/Sep/2017:15:31:23 +0100] "GET /dashboard HTTP/1.1" 500
531 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
Firefox/52.0"
10.20.30.1 - - [21/Sep/2017:15:36:30 +0100] "GET /favicon.ico HTTP/1.1" 404
209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
Firefox/52.0"
10.20.30.1 - - [21/Sep/2017:15:36:30 +0100] "GET /favicon.ico HTTP/1.1" 404
209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
Firefox/52.0"
]# openstack service list
+----------------------------------+------------+----------------+
| ID | Name | Type |
+----------------------------------+------------+----------------+
| 08b9cd749a7c4088a51b49184c980549 | glance | image |
| 288278e3de374eb59089ee4f2ae351d4 | aodh | alarming |
| 298db4cec1ec4d109e11627a1719d7f3 | heat | orchestration |
| 30fbf4a88f8e4ae5bc945e7c4a1db851 | swift | object-store |
| 421ca271cfb145459c9a668a0a80b0b6 | neutron | network |
| 896d90902f4541309595def5eacc60ca | nova | compute |
| 8e8c0f9f141344499dfb46f99f01212c | cinderv2 | volumev2 |
| a91615f268fa4847a0e180097b6dfb71 | cinderv3 | volumev3 |
| ca0f48037e2b4349ba39ffb6fe9b221f | cinder | volume |
| defa7e6ded2549c69b6186e3ef5cc94f | ceilometer | metering |
| f3af042581654378ade38856bb2d86df | keystone | identity |
| f3bd2e15def2481ca83ba5451bd17b01 | heat-cfn | cloudformation |
| fe83eba206b446e4812a6c0ba30d16bd | gnocchi | metric |
+----------------------------------+------------+----------------+
It seems the only thing not working is the horizon dashboard.
Any ideas or hints would be appreciated,
BR/David
7 years
[rdo-list] RDO Git commits stats
by Fabien Boucher
Hi everyone,
I have built an instance of a tool that compute Git commits statistics for
the RDO's repositories. I think it is relevant to mention it on this ML so
I'm sharing the URL.
You can access RDO stats here:
http://38.145.33.181/repoxplorer/project.html?pid=RDO/rdo
RDO/rdo is RDO's repositories defined in the rdoinfo/rdo.yml file.
Furthermore the instance have an index of the OpenStack Git commits based
on the
governance/reference/projects.yaml file.
Cheers,
Fabien Boucher
7 years
[rdo-list] ceph-ansible auto builds in cbs.centos.org
by Ken Dreyer
Hi folks,
TL;DR new ceph-ansible tags are automatically built in the CentOS Storage SIG.
The RDO team members have been building ceph-related RPMs in the
CentOS Storage SIG, including ceph-ansible. Specifically this has been
handled by Giulio Fidente and John Fulton on the OpenStack (RDO/OSP)
team.
The reason is that TripleO relies on ceph-ansible to install Ceph, and
TripleO expects to install a ceph-ansible RPM. So RDO depends on the
ceph-ansible CBS builds.
In the past Giulio had been doing these CentOS builds by hand,
rebuilding upstream SRPMs from shaman.ceph.com, for example
http://cbs.centos.org/koji/buildinfo?buildID=19762
I have a job running in an internal Jenkins instance that now polls
https://github.com/ceph/ceph-ansible every hour and builds any new Git
tags within CBS. An example is
http://cbs.centos.org/koji/taskinfo?taskID=227958 , although that was
"scratch = True", and future builds will not be scratch builds. It is
using the script at https://github.com/ktdreyer/ceph-ansible-cbs
Next steps:
- automatically tag new builds into storage7-ceph-luminous-testing
- automatically tag new builds into storage7-ceph-luminous-release
Anyone in RDO have suggestions for how we should gate these next CBS
tagging operations? My simple approach was going to be "tag into
-testing immediately, then wait two weeks and tag into -release". If
there is a simple way to have safer, automatic gating here, I'm open
to that.
- Ken
7 years
[rdo-list] [Meeting] RDO meeting (2017-09-20) Minutes
by Jakub Ruzicka
==============================
#rdo: RDO meeting - 2017-09-20
==============================
Meeting started by jruzicka at 15:01:33 UTC. The full logs are
available athttp://eavesdrop.openstack.org/meetings/rdo_meeting___2017_09_20/2017/r...
.
Meeting summary
---------------
* Hello #rdo o/ (jruzicka, 15:02:05)
* Infrastructure topics (jruzicka, 15:06:35)
* rdopkg Release bumping support (jruzicka, 15:16:41)
* LINK: https://softwarefactory-project.io/r/#/c/9636/ (jruzicka,
15:23:09)
* LINK: https://softwarefactory-project.io/r/#/c/9724 has some of the
good behavior from current release (jschlueter, 15:24:06)
* LINK:
https://softwarefactory-project.io/r/#/c/9724/1/features/fix.feature
(jruzicka, 15:27:20)
* ACTION: jruzicka to research Release formats in the wilds
(jruzicka, 15:36:47)
* ACTION: everyone to think about best Trunk Release format
(jruzicka, 15:38:58)
* ACTION: jschlueter to collect interesting OSP NVR's to jruzicka and
pick out interesting cases (jschlueter, 15:39:31)
* PTG interviews starting to appear here:
http://youtube.com/RDOCommunity (jruzicka, 15:40:37)
* Test day schedule for Queens (jruzicka, 15:42:38)
* ceph/ceph-ansible and tripleo integration (jruzicka, 15:50:09)
* hallway-track discussion at PTG brought up how we can improve
ceph/ceph-ansible and tripleo integration and testing (jschlueter,
15:51:47)
* Looking for additional feedback and input on how Storage SIG can
setup more workflow around ceph/ceph-ansible and tripleo integration
(jschlueter, 15:58:36)
* Chair for next meetig (jruzicka, 16:01:00)
* ACTION: amoralej to chair next meeting (jruzicka, 16:01:40)
Meeting ended at 16:01:59 UTC.
Action items, by person
-----------------------
* amoralej
* amoralej to chair next meeting
* jruzicka
* jruzicka to research Release formats in the wilds
* jschlueter to collect interesting OSP NVR's to jruzicka and pick out
interesting cases
* jschlueter
* jschlueter to collect interesting OSP NVR's to jruzicka and pick out
interesting cases
People present (lines said)
---------------------------
* jruzicka (66)
* jschlueter (33)
* rbowen (29)
* amoralej (25)
* Duck (24)
* apevec (18)
* gfidente (12)
* fultonj (9)
* openstack (9)
* jpena (7)
* PagliaccisCloud (4)
* trown (4)
* snecklifter (4)
* rdogerrit (3)
* chandankumar (2)
* flepied (1)
* myoung (1)
* jatanmalde (1)
Generated by `MeetBot`_ 0.1.4
7 years
[rdo-list] automating auth to CBS
by Ken Dreyer
Hi Haïkel,
Recently I was looking into automatically building ceph-ansible in
CBS, and I was curious how you're doing automatic CBS builds for RDO.
I'm guessing you've generated your hguemar CentOS FAS x509 cert with
centos-cert, and then you upload that .centos.cert file into some
Jenkins instance as a "Global Credential"? Is that ci.centos.org or
something else? Do you have to refresh that every three months?
- Ken
7 years
[rdo-list] [Minutes] RDO meeting - 2017-09-13
by Chandan kumar
==============================
#rdo: RDO meeting - 2017-09-13
==============================
Meeting started by chandankumar at 15:02:00 UTC. The full logs are
available at
http://eavesdrop.openstack.org/meetings/rdo_meeting___2017_09_13/2017/rdo...
.
Meeting summary
---------------
* Roll Call (chandankumar, 15:02:12)
* dropping patches repositories (chandankumar, 15:05:17)
* AGREED: create patches branches on-demand (number80, 15:17:05)
* AGREED: abandon patches open reviews for EOL branches (number80,
15:17:15)
* ACTION: number80 document that where it fits ^ (number80, 15:17:27)
* Fedora worker cleanup in RDO Trunk (chandankumar, 15:18:31)
* ACTION: jpena to check inclusion of openstack-macros in RDO Trunk
(jpena, 15:27:18)
* Using the CentOS extras Ansible (chandankumar, 15:35:10)
* rdopkg is now in Fedora 25+ and EPEL 7 (chandankumar, 15:44:26)
* ACTION: jruzicka to update website (jruzicka, 15:47:17)
* chair for next meeting (chandankumar, 15:51:40)
* ACTION: jruzicka to chair for next meeting (chandankumar, 15:53:25)
* Open discussion (chandankumar, 15:53:50)
Meeting ended at 16:01:34 UTC.
Action items, by person
-----------------------
* jpena
* jpena to check inclusion of openstack-macros in RDO Trunk
* jruzicka
* jruzicka to update website
* jruzicka to chair for next meeting
* number80
* number80 document that where it fits ^
* openstack
* jpena to check inclusion of openstack-macros in RDO Trunk
People present (lines said)
---------------------------
* chandankumar (48)
* number80 (47)
* apevec (43)
* jruzicka (31)
* snecklifter (25)
* jpena (18)
* dmsimard (8)
* openstack (8)
* rbowen (7)
* Duck (6)
* PagliaccisCloud (2)
* rdogerrit (2)
* jatanmalde (2)
Generated by `MeetBot`_ 0.1.4
7 years