Friday, 2016-08-12

*** tyr has joined #openstack-dns00:04
*** ducttape_ has quit IRC00:05
*** ducttape_ has joined #openstack-dns00:14
openstackgerritOpenStack Proposal Bot proposed openstack/designate: Updated from global requirements  https://review.openstack.org/35198400:18
*** tyr has quit IRC00:18
*** ducttape_ has quit IRC00:31
*** mlavalle has quit IRC00:42
*** stanzgy has joined #openstack-dns01:37
*** rudrajit has quit IRC01:45
*** rudrajit has joined #openstack-dns01:46
*** rudrajit has quit IRC01:50
*** a7ndrew has joined #openstack-dns01:54
*** ducttape_ has joined #openstack-dns02:02
*** ducttape_ has quit IRC02:06
*** rudrajit has joined #openstack-dns02:48
*** ducttape_ has joined #openstack-dns03:03
*** ducttape_ has quit IRC03:07
*** ducttape_ has joined #openstack-dns04:03
*** ducttape_ has quit IRC04:08
openstackgerritOpenStack Proposal Bot proposed openstack/designate: Updated from global requirements  https://review.openstack.org/35198404:48
*** GonZo2000 has quit IRC04:53
*** ducttape_ has joined #openstack-dns06:05
*** ducttape_ has quit IRC06:10
*** rudrajit_ has joined #openstack-dns06:12
*** rudrajit has quit IRC06:14
*** nyechiel has joined #openstack-dns06:41
*** nyechiel has quit IRC06:49
*** f13o has joined #openstack-dns06:51
*** stanzgy has quit IRC06:56
*** ducttape_ has joined #openstack-dns07:06
*** ducttape_ has quit IRC07:11
*** rudrajit_ has quit IRC07:12
*** rudrajit has joined #openstack-dns07:12
*** rkrum has quit IRC07:16
*** rudrajit has quit IRC07:17
*** stanzgy has joined #openstack-dns07:18
*** stanzgy has quit IRC07:38
f13oHi folks, new to designate, is there anything particular preventing me to use customer facing DNS in hidden master setup (so miniDNS talks to Master/Primary, while slaves are resolvers?) Thanks.08:01
*** ducttape_ has joined #openstack-dns08:08
*** ducttape_ has quit IRC08:12
openstackgerritsonu proposed openstack/designate-specs: Add spec for YADIFA DNS backend  https://review.openstack.org/35457908:21
*** amitkqed has quit IRC08:23
*** amitkqed has joined #openstack-dns08:24
*** sonuk has quit IRC08:28
*** f13o has quit IRC08:29
*** f13o has joined #openstack-dns08:42
*** stanzgy has joined #openstack-dns08:46
f13oCan someone please point me to the resources (docs) explaining neutron dns extension and designate integration? basically, are they conflicting or how can they work together? thanks...09:01
*** ducttape_ has joined #openstack-dns09:09
*** ducttape_ has quit IRC09:13
*** malos_ is now known as malos09:19
*** amitkqed has quit IRC09:40
*** amitkqed has joined #openstack-dns09:40
*** GonZo2000 has joined #openstack-dns09:59
*** ducttape_ has joined #openstack-dns10:09
*** ducttape_ has quit IRC10:14
*** f13o has quit IRC10:32
*** amitkqed has quit IRC10:35
*** amitkqed has joined #openstack-dns10:36
*** stanzgy has quit IRC10:56
*** GonZo2000 has quit IRC10:59
*** en_austin has joined #openstack-dns11:01
*** ducttape_ has joined #openstack-dns11:10
*** ducttape_ has quit IRC11:14
*** ducttape_ has joined #openstack-dns12:11
*** leitan has joined #openstack-dns12:15
*** ducttape_ has quit IRC12:15
*** ducttape_ has joined #openstack-dns12:16
*** adreznec has quit IRC12:33
*** chlong|mtg has quit IRC12:33
*** adreznec has joined #openstack-dns12:35
*** ducttape_ has quit IRC12:42
*** rkrum has joined #openstack-dns12:45
*** rkrum has quit IRC12:50
toabctlKiall, can you have another look at https://review.openstack.org/#/c/354141/ please?13:29
toabctlmugsie, ^^ same question for you13:30
*** GonZo2000 has joined #openstack-dns13:31
*** ducttape_ has joined #openstack-dns13:43
*** ducttape_ has quit IRC13:48
*** pglass has joined #openstack-dns14:04
*** pglbutt has joined #openstack-dns14:05
shewlessHi. I figured out most of my issues from yesterday. In my pool .yml file I was defining "hosts" with dns names instead of IP addresses.. which seems to cause some syntax errors in the python dns library14:05
shewlessI'm wondering if someone can help me with, what I hope is, the last step14:06
shewlessI have a port which has a "dns_assignment" but it doesn't seem to show up in my "designate record-list"14:06
shewlessfrom neutron port-show: dns_assignment        | {"hostname": "orange", "ip_address": "192.168.192.56", "fqdn": "orange.mycloud.foo.bar.com."}14:07
shewlessbut desinate record-list mycloud.foo.bar.com. only shoes the SOA and NS record. Nothing for "orange"14:07
shewlessany recommendations to debug further?14:08
*** pglass has quit IRC14:09
*** GonZo2000 has quit IRC14:16
*** ducttape_ has joined #openstack-dns14:32
*** pglbutt has quit IRC14:32
*** mlavalle has joined #openstack-dns14:33
*** tyr has joined #openstack-dns14:36
shewlessI'm still seeing this log: Sending 'NOTIFY' for 'mycloud.foo.bar.com.' to '10.129.49.2:953'14:39
shewlessIn this case the IP address should be the IP of bind right? (not openstack/designate)14:40
timsimshewless: Yes.14:43
timsimThat's the pool target ip in pools.yaml14:44
shewlesstimsim: thanks.14:49
*** _ducttape_ has joined #openstack-dns14:59
*** ducttape_ has quit IRC15:03
shewlesstimsim: what should the "nameserver" be in the yml file? I think that's hanging me up15:12
shewlessdo I just make it up?15:12
timsimDesignate will do perform queries to those "nameservers" to ensure that change is propagated before marking a change as 'ACTIVE'15:12
shewlesstimsim: thanks. do I need the "." on the end of the hostname:15:13
timsimNah.15:13
shewlesstimsim: does it have to be a hostname? I tried moving it to an IP address but now I'm seeing an error in the logs about NeedAbsoluteNameOrOrigin15:15
timsimThe 'host' param? That's usually an IP for me.15:16
shewlessin the ns_records part it's "hostname"15:16
shewlessnot host15:17
shewlesscan I change it to host?15:17
timsimOh yeah ns records need to be a full host name15:17
timsimns_records are the NS records that get created on zones managed by designate15:17
timsimWith the dot and all.15:17
shewlesstimsim: so it does have to have a dot?15:17
timsimyes15:17
timsimns_records do15:17
timsimnot nameservers['host']15:18
timsimns_records['hostname'] yes15:18
shewlesstimsim: oops I see I asked the wrong question15:18
shewlesstimsim: Indeed I am trying to set the ns_record.15:18
shewlesstimsim: so do I make up the hostname for the ns_record or do I need to configure it on my dns server?15:19
timsimyep. You got it now, full name, with dot. Those are the names that people registering domains would put as the nameservers at their registrar. They should map to the dns servers you're using.15:20
timsimSo if you have two bind servers, you would probably set those ns_records to names that pointed to those two bind servers.15:20
shewlesstimsim: so it's just the full dns name of the bind server?15:21
timsimSure. Or something that cnames to it.15:21
timsimFor example, I work at rackspace, we have many nameservers, but the names that we give to the world are ns/ns2.rackspace.com, so that's what our ns_records would be.15:22
shewlesstimsim: just curious why it needs the dot then15:22
shewlesstimsim: like ns2.rackspace.com.15:22
timsimDesignate expects it to be a fully qualified hostname. Which requires the dot.15:23
*** pcaruana has quit IRC15:23
timsimThat's what's required for NS records.15:24
shewlesstimsim: sounds reasonable.15:24
timsimdig google.com NS +short     =  ns2.google.com.   ....15:24
shewlesstimsim: I keep getting erros like this in mdns log: Got lower serial for 'ugh.foo.bar.com.' to '10.129.49.2:53'. Expected:'1471015395'. Got:'1470950052'.Retries left='9' get_serial_number /usr/lib/python2.7/dist-packages/designate/mdns/notify.py:16115:24
shewlessany idea on that?15:24
shewlessI think it's related to the "NOTIFY timeouts" I'm getting15:25
shewlessGot Timeout while trying to send 'NOTIFY' for 'ugh.foo.bar.com.' to '10.129.49.2:953'. Timeout='30' seconds. Retry='1'15:25
timsimFor some reason or another, the NOTIFY + Zone Transfer that gets the latest data out for that zone isn't working.15:25
timsimYeah you won't be able to Notify port 95315:25
timsimYou need to notify port 5315:25
timsimYour rndc_host will be port 953, but the host on that target would be port 5315:25
shewlesstimsim, cool. How did I misocnfigure that I wonder15:26
shewlesstimsim: I don't recall configuring anything specifically to use port 95315:26
shewlesstimsim: the only thing I recall setting to port 953 is in the yml file as directed here: http://docs.openstack.org/developer/designate/backends/bind9.html15:27
shewlessis that incorrect?15:27
timsimrndc port should be 953, but port is 5315:27
timsimI'm almost positive you've got port as 953?15:28
shewlessthis is what I have: http://paste.ubuntu.com/2304969315:29
timsimyep. L46 port -> rndc_port15:30
shewlesstimsim: oh man15:30
timsimHow could you not see that, come on ;)15:30
*** haplo37_ has joined #openstack-dns15:30
shewlesstimsim: I'm laughing on the outside.. crying on the inside15:30
timsimI feel you15:31
*** en_austin has quit IRC15:34
shewlesstimsim: cool I created a record and I can actually do a "nslookup" and see the right response!15:34
timsimbadoosh15:35
shewlesstimsim: are you familiar with the dns advanced config stuff (having neutron assign DNS using designate)?15:37
timsimNot at the level that I can debug it very well15:37
timsimmlavalle knows things though15:40
shewlessokay thanks. I'll check with mlavalle.  I'm trying to get it working but I also want to know if this is even possible:15:43
shewlessif domain is x.com and users project/tenant is y and the hostname of the instance is z. Can I make the dns something like z.y.x.com15:44
shewlessI guess can I prefix the hostname with the project name in order to make it unique15:44
*** _ducttape_ has quit IRC15:53
*** ducttape_ has joined #openstack-dns15:54
openstackgerritJames Li proposed openstack/designate: Improve performance of recordsets API  https://review.openstack.org/32881315:55
*** haplo37_ has quit IRC16:00
mlavalleshewless: the Nova driver for Neutron takes the instance's hostname and assigns it to the 'dns_name' of the instance's port: https://github.com/openstack/nova/blob/master/nova/network/neutronv2/api.py#L101916:24
mlavalleshewless: in turn, Neutron takes that dns_name attribute from the port and that is what gets pushed to Designate, in the zone specified by the port's network dns_domain attribute16:25
mlavalleshewless: so, if I am understanding correctly, if you want your instance to be known in Designate as z.y.x.com, your instance's hostname has to be z.y16:29
*** rudrajit has joined #openstack-dns16:53
*** rudrajit has quit IRC17:05
*** rudrajit has joined #openstack-dns17:05
*** GonZo2000 has joined #openstack-dns17:16
*** GonZo2000 has quit IRC17:16
*** GonZo2000 has joined #openstack-dns17:16
shewlessmlavalle: thanks!17:40
mlavalleshewless: :-)17:40
shewlessmlavalle: I'm having a problem where neutron doesn't see to be pushing the dns to designate. I don't see anything in the neutron logs or the designate logs.17:43
shewlessI see the "dns_assignment" of my floating ip is set correctly but designate doesn't have that dns record17:44
shewlessI think it's likely related to the designate authentication stuff. I set auth_strategy to "noauth" in designate.conf because I could not for the life of me to get keystone auth to work. Do you think that would cause neutron to fail to nofify designate?17:46
shewlessI've set all the settings recommended here: http://docs.openstack.org/mitaka/networking-guide/adv-config-dns.html17:47
*** rudrajit has quit IRC17:57
*** rudrajit has joined #openstack-dns17:58
openstackgerritKen'ichi Ohmichi proposed openstack/designate: Use tempest.lib instead of tempest-lib  https://review.openstack.org/35487418:01
mlavalleshewless: yeah I think that is the most likely cause. The other thing to check is whether Neutron's driver for Designate is being loaded. In my dev environment, I have the following two lines in the Neutron server log: http://paste.openstack.org/show/556150/18:04
openstackgerritGraham Hayes proposed openstack/designate: Grenade Plugin  https://review.openstack.org/35488018:09
*** baffle has quit IRC18:17
*** baffle has joined #openstack-dns18:21
leitanguys18:24
leitanquick questions18:24
leitanv2/limits18:24
leitandoesnt support sending a tenant18:24
leitanhow can i get the quota for an specific tenant ?18:24
leitanas an admin for example ...18:25
leitanmugsie, timsim  ?18:25
mugsieleitan: what version are you on again?18:28
leitanmitaka18:29
mugsieso, in mitaka you have to use v1/quotas18:29
shewlessmlavalle: I did see those logs.. so it's being loaded18:29
mugsiewe added quoatas in this cycle to v218:29
leitanok, but v1/quotas supports getting the quotas for a specific tenant ?18:30
mugsieyes18:30
leitangreat mugsie i see it now18:30
leitanon the docs18:30
leitanmugsie, im trying to remember why i used v2/limits in the first place18:32
timsimmugsie or admin/quotas18:47
leitantimsim, mugsie now i remember, i was using v2/limits because a regular user cannot get their own usage cause /quotas/tenant_id its just and admin resource19:15
*** tyr has quit IRC19:22
*** tyr_ has joined #openstack-dns19:22
*** GonZo2K has joined #openstack-dns20:00
*** GonZo2000 has quit IRC20:00
*** haplo37_ has joined #openstack-dns20:39
*** shewless has quit IRC20:44
-openstackstatus- NOTICE: The Gerrit service on review.openstack.org is restarting for a scheduled upgrade, but should return to service momentarily: http://lists.openstack.org/pipermail/openstack-dev/2016-August/101394.html20:49
-openstackstatus- NOTICE: The Mediawiki service at wiki.openstack.org will be offline from 21:00 UTC until approximately 23:00 UTC for a planned upgrade http://lists.openstack.org/pipermail/openstack-dev/2016-August/101395.html20:56
*** ChanServ changes topic to "The Mediawiki service at wiki.openstack.org will be offline from 21:00 UTC until approximately 23:00 UTC for a planned upgrade http://lists.openstack.org/pipermail/openstack-dev/2016-August/101395.html"20:56
*** ducttape_ has quit IRC20:58
*** rudrajit_ has joined #openstack-dns21:08
*** rudrajit has quit IRC21:12
*** haplo37_ has quit IRC21:50
*** ducttape_ has joined #openstack-dns22:07
*** ducttape_ has quit IRC22:35
*** ducttape_ has joined #openstack-dns22:36
*** ducttape_ has quit IRC22:40
-openstackstatus- NOTICE: ok https://wiki.openstack.org/ is now running Mediawiki 1.27.0; please let us know in #openstack-infra if anything seems wrong22:58
*** ChanServ changes topic to "ok https://wiki.openstack.org/ is now running Mediawiki 1.27.0; please let us know in #openstack-infra if anything seems wrong"22:58
openstackgerritKen'ichi Ohmichi proposed openstack/designate: Remove unnecessary __init__ from functionaltests  https://review.openstack.org/35510722:59
*** ChanServ changes topic to "OpenStack Designate - Logged @ http://eavesdrop.openstack.org/irclogs/%23openstack-dns | Review Dashboard @ http://graham.hayes.ie/designate/dashboard"23:04
-openstackstatus- NOTICE: https://wiki.openstack.org/ is now running Mediawiki 1.27.0; please let us know in #openstack-infra if anything seems wrong23:04
*** harmw has quit IRC23:20
*** leitan has quit IRC23:39
*** tyr_ has quit IRC23:46
*** ducttape_ has joined #openstack-dns23:53

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!