Open Stack

Hi Wodel,

Did it work when you added the ssl parameter? If so, could you propose a
fix for this upstream?

Thanks,
Mark

On Tue, 19 Apr 2022 at 15:07, wodel youchi <wodel.youchi at gmail.com> wrote:

> Hi,
> I tried to do this
> vim
> /home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/defaults/main.yml
> *cloudkitty_influxdb_use_ssl: "true"*
> But it didn't work,then I added the same variable to globals.yml but it
> didn't work.
>
> So finally I edited vim
> /home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/tasks/bootstrap.yml
> and added the ssl variable as a workaround
>
>> - name: Creating Cloudkitty influxdb database
>>   become: true
>>   kolla_toolbox:
>>     module_name: influxdb_database
>>     module_args:
>>       hostname: "{{ influxdb_address }}"
>>       port: "{{ influxdb_http_port }}"
>>      * ssl: True*
>>       database_name: "{{ cloudkitty_influxdb_name }}"
>>   run_once: True
>>   delegate_to: "{{ groups['cloudkitty-api'][0] }}"
>>   when: cloudkitty_storage_backend == 'influxdb'
>>
>
>
> I don't know if this would have worked I just get the idea
>
> - name: Creating Cloudkitty influxdb database
>>   become: true
>>   kolla_toolbox:
>>     module_name: influxdb_database
>>     module_args:
>>       hostname: "{{ influxdb_address }}"
>>       port: "{{ influxdb_http_port }}"
>>      * ssl: {{  cloudkitty_influxdb_use_ssl }}*
>>       database_name: "{{ cloudkitty_influxdb_name }}"
>>   run_once: True
>>   delegate_to: "{{ groups['cloudkitty-api'][0] }}"
>>   when: cloudkitty_storage_backend == 'influxdb'
>>
>
>
>
>
> Regards.
>
> Le mar. 19 avr. 2022 à 12:37, Rafael Weingärtner <
> rafaelweingartner at gmail.com> a écrit :
>
>> It seems that it was always assumed to be HTTP and not HTTPs:
>> https://github.com/openstack/kolla-ansible/blob/a52cf61b2234d2f078dd2893dd37de63e20ea1aa/ansible/roles/cloudkitty/tasks/bootstrap.yml#L36
>> .
>>
>> Maybe, we will need to change that to use SSL whenever needed.
>>
>> On Tue, Apr 19, 2022 at 8:19 AM wodel youchi <wodel.youchi at gmail.com>
>> wrote:
>>
>>> Hi,
>>>
>>> I tested with influx -host <IP_ADDRESS>
>>> First I tested with the internal api IP address of the host itself, and
>>> it did work : influx -host 10.10.3.9
>>> Then I tested with VIP of the internal api, which is held by haproxy :
>>> influx -host 10.10.3.1, it didn't work, looking in the haproxy
>>> configuration file of influxdb, I noticed that haproxy uses https in the
>>> front end, so I tested with :  influx -ssl -host 10.10.3.1 and it did work.
>>>
>>> And if you see the error message from TASK [cloudkitty : Creating
>>> Cloudkitty influxdb database], ssl is false
>>>
>>> fatal: [192.168.1.5 -> 192.168.1.5]: FAILED! => {
>>>     "action": "influxdb_database",
>>>     "changed": false,
>>>     "invocation": {
>>>         "module_args": {
>>>             "database_name": "cloudkitty",
>>>             "hostname": "dashint.cloud.cerist.dz",
>>>             "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>>>             "path": "",
>>>             "port": 8086,
>>>             "proxies": {},
>>>             "retries": 3,
>>>             *"ssl": false,*
>>>             "state": "present",
>>>             "timeout": null,
>>>             "udp_port": 4444,
>>>             "use_udp": false,
>>>             "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>>>             "validate_certs": true
>>>         }
>>>     },
>>>     "msg": "('Connection aborted.', RemoteDisconnected('Remote end
>>> closed connection without response',))"
>>> }
>>>
>>> Could that be the problem? if yes how to force Cloudkitty to enable ssl?
>>>
>>> Regards.
>>>
>>>
>>> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free.
>>> www.avast.com
>>> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
>>> <#m_-5979860831382871527_m_2114711239033937821_m_-2160537011768264727_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
>>>
>>> Le mar. 19 avr. 2022 à 07:30, Pierre Riteau <pierre at stackhpc.com> a
>>> écrit :
>>>
>>>> Hello,
>>>>
>>>> InfluxDB is configured to only listen on the internal API interface.
>>>> Can you check the hostname you are using resolves correctly from the
>>>> cloudkitty host?
>>>> Inside the influxdb container, you should use `influxdb -host
>>>> <IP_ADDRESS>` with the internal IP of the influxdb host.
>>>>
>>>> Also check if the output of `docker logs influxdb` has any logs.
>>>>
>>>> Best wishes,
>>>> Pierre Riteau (priteau)
>>>>
>>>> On Tue, 19 Apr 2022 at 01:24, wodel youchi <wodel.youchi at gmail.com>
>>>> wrote:
>>>>
>>>>> Hi,
>>>>>
>>>>> I am trying to deploy Cloudkitty, but I get this error message :
>>>>>
>>>>> TASK [cloudkitty : Creating Cloudkitty influxdb database]
>>>>>> ******************************************************
>>>>>> task path:
>>>>>> /home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/tasks/bootstrap.yml:36
>>>>>
>>>>>
>>>>> fatal: [192.168.1.5 -> 192.168.1.5]: FAILED! => {
>>>>>>     "action": "influxdb_database",
>>>>>>     "changed": false,
>>>>>>     "invocation": {
>>>>>>         "module_args": {
>>>>>>             "database_name": "cloudkitty",
>>>>>>             "hostname": "dashint.cloud.cerist.dz",
>>>>>>             "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>>>>>>             "path": "",
>>>>>>             "port": 8086,
>>>>>>             "proxies": {},
>>>>>>             "retries": 3,
>>>>>>             "ssl": false,
>>>>>>             "state": "present",
>>>>>>             "timeout": null,
>>>>>>             "udp_port": 4444,
>>>>>>             "use_udp": false,
>>>>>>             "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>>>>>>             "validate_certs": true
>>>>>>         }
>>>>>>     },
>>>>>>     "msg": "('Connection aborted.', RemoteDisconnected('Remote end
>>>>>> closed connection without response',))"
>>>>>> }
>>>>>
>>>>>
>>>>>
>>>>> On  the influxdb container I did this :
>>>>>
>>>>>> [root at controllerb ~]# docker ps | grep inf
>>>>>> 68b3ebfefbec
>>>>>> 192.168.1.16:4000/openstack.kolla/centos-source-influxdb:xena
>>>>>>            "dumb-init --single-…"   22 minutes ago   Up 22 minutes
>>>>>>                influxdb
>>>>>> [root at controllerb ~]# docker exec -it influxdb /bin/bash
>>>>>> (influxdb)[influxdb at controllerb /]$ influx
>>>>>> Failed to connect to http://localhost:8086: Get
>>>>>> http://localhost:8086/ping: dial tcp [::1]:8086: connect: connection
>>>>>> refused
>>>>>> Please check your connection settings and ensure 'influxd' is running.
>>>>>> (influxdb)[influxdb at controllerb /]$ ps -ef
>>>>>> UID          PID    PPID  C STIME TTY          TIME CMD
>>>>>> influxdb       1       0  0 Apr18 ?        00:00:00 dumb-init
>>>>>> --single-child -- kolla_start
>>>>>> influxdb       7       1  0 Apr18 ?        00:00:01 /usr/bin/influxd
>>>>>> -config /etc/influxdb/influxdb.conf
>>>>>> influxdb      45       0  0 00:12 pts/0    00:00:00 /bin/bash
>>>>>> influxdb      78      45  0 00:12 pts/0    00:00:00 ps -ef
>>>>>> (influxdb)[influxdb at controllerb /]$
>>>>>
>>>>>
>>>>> I have no log file for influxdb, the directory is empty.
>>>>>
>>>>> Any ideas?
>>>>>
>>>>> Regards.
>>>>>
>>>>
>>
>> --
>> Rafael Weingärtner
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220420/348e5386/attachment-0001.htm>