<div dir="ltr"><div>Great! <br></div><div><br></div><div>I created the patch: <a href="https://review.opendev.org/c/openstack/kolla-ansible/+/839393">https://review.opendev.org/c/openstack/kolla-ansible/+/839393</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Apr 26, 2022 at 10:01 AM wodel youchi <<a href="mailto:wodel.youchi@gmail.com">wodel.youchi@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi,</div><div><br></div><div>It did work,</div><div><br></div><div>Modify
/home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/tasks/bootstrap.yml like this :</div><div>
- name: Creating Cloudkitty influxdb database<br> become: true<br> kolla_toolbox:<br> module_name: influxdb_database<br> module_args:<br> hostname: "{{ influxdb_address }}"<br> port: "{{ influxdb_http_port }}"<br> <font size="4"> <b> <font size="2">ssl: {{
cloudkitty_influxdb_use_ssl
}}</font></b></font><br> database_name: "{{ cloudkitty_influxdb_name }}"<br> run_once: True<br> delegate_to: "{{ groups['cloudkitty-api'][0] }}"<br> when: cloudkitty_storage_backend == 'influxdb' <br></div><div><br></div><div>Then declare
<font size="2"><b>cloudkitty_influxdb_use_ssl</b></font> variable in globals.yml</div><div>
<b><font size="2"><br></font></b></div><div><b><font size="2">cloudkitty_influxdb_use_ssl</font>: true</b></div><div><br></div><div>Then deploy, it did work.<br></div><div><br></div><div>How to propose a fix, I do not know how to do that!!!</div><div><br></div><div>Regards.<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mer. 20 avr. 2022 à 08:57, Mark Goddard <<a href="mailto:mark@stackhpc.com" target="_blank">mark@stackhpc.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Hi Wodel,</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Did it work when you added the ssl parameter? If so, could you propose a fix for this upstream?</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Thanks,</div><div class="gmail_default" style="font-family:verdana,sans-serif">Mark</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 19 Apr 2022 at 15:07, wodel youchi <<a href="mailto:wodel.youchi@gmail.com" target="_blank">wodel.youchi@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi,</div><div>I tried to do this</div><div>vim /home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/defaults/main.yml</div><div><b>cloudkitty_influxdb_use_ssl: "true"</b></div><div>But it didn't work,then I added the same variable to globals.yml but it didn't work.<br></div><div><br></div><div>So finally I edited vim /home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/tasks/bootstrap.yml and added the ssl variable as a workaround</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>- name: Creating Cloudkitty influxdb database<br> become: true<br> kolla_toolbox:<br> module_name: influxdb_database<br> module_args:<br> hostname: "{{ influxdb_address }}"<br> port: "{{ influxdb_http_port }}"<br> <b> ssl: True</b><br> database_name: "{{ cloudkitty_influxdb_name }}"<br> run_once: True<br> delegate_to: "{{ groups['cloudkitty-api'][0] }}"<br> when: cloudkitty_storage_backend == 'influxdb' </div></blockquote><div><br></div><div><br></div><div>I don't know if this would have worked I just get the idea</div><div><br></div><div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>- name: Creating Cloudkitty influxdb database<br> become: true<br> kolla_toolbox:<br> module_name: influxdb_database<br> module_args:<br> hostname: "{{ influxdb_address }}"<br> port: "{{ influxdb_http_port }}"<br> <font size="4"> <b> ssl: {{
cloudkitty_influxdb_use_ssl
}}</b></font><br> database_name: "{{ cloudkitty_influxdb_name }}"<br> run_once: True<br> delegate_to: "{{ groups['cloudkitty-api'][0] }}"<br> when: cloudkitty_storage_backend == 'influxdb' </div></blockquote><div><br></div><div><br></div>
</div><div><br></div><div><br></div><div>Regards.<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mar. 19 avr. 2022 à 12:37, Rafael Weingärtner <<a href="mailto:rafaelweingartner@gmail.com" target="_blank">rafaelweingartner@gmail.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>It seems that it was always assumed to be HTTP and not HTTPs: <a href="https://github.com/openstack/kolla-ansible/blob/a52cf61b2234d2f078dd2893dd37de63e20ea1aa/ansible/roles/cloudkitty/tasks/bootstrap.yml#L36" target="_blank">https://github.com/openstack/kolla-ansible/blob/a52cf61b2234d2f078dd2893dd37de63e20ea1aa/ansible/roles/cloudkitty/tasks/bootstrap.yml#L36</a>.</div><div><br></div><div>Maybe, we will need to change that to use SSL whenever needed.<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Apr 19, 2022 at 8:19 AM wodel youchi <<a href="mailto:wodel.youchi@gmail.com" target="_blank">wodel.youchi@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi,</div><div><br></div><div>I tested with
influx -host <IP_ADDRESS></div><div>First I tested with the internal api IP address of the host itself, and it did work :
influx -host 10.10.3.9</div><div>Then I tested with VIP of the internal api, which is held by haproxy :
influx -host 10.10.3.1, it didn't work, looking in the haproxy configuration file of influxdb, I noticed that haproxy uses https in the front end, so I tested with :
influx -ssl -host 10.10.3.1 and it did work.</div><div><br></div><div>And if you see the error message from
TASK [cloudkitty : Creating Cloudkitty influxdb database], ssl is false</div><div><br></div><div>
fatal: [192.168.1.5 -> 192.168.1.5]: FAILED! => {<br> "action": "influxdb_database",<br> "changed": false,<br> "invocation": {<br> "module_args": {<br> "database_name": "cloudkitty",<br> "hostname": "<a href="http://dashint.cloud.cerist.dz" target="_blank">dashint.cloud.cerist.dz</a>",<br> "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",<br> "path": "",<br> "port": 8086,<br> "proxies": {},<br> "retries": 3,<br> <font size="4"><b>"ssl": false,</b></font><br> "state": "present",<br> "timeout": null,<br> "udp_port": 4444,<br> "use_udp": false,<br> "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",<br> "validate_certs": true<br> }<br> },<br> "msg": "('Connection aborted.', RemoteDisconnected('Remote end closed connection without response',))"<br>}
</div><div><br>
</div><div>Could that be the problem? if yes how to force Cloudkitty to enable ssl?<br></div><div><br></div><div>Regards.<br></div></div><div id="gmail-m_-7847920128451186113gmail-m_8469948696530983632gmail-m_-5979860831382871527gmail-m_2114711239033937821gmail-m_-2160537011768264727DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br>
<table style="border-top:1px solid rgb(211,212,222)">
<tbody><tr>
<td style="width:55px;padding-top:13px"><a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank"><img src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif" alt="" style="width: 46px; height: 29px;" width="46" height="29"></a></td>
<td style="width:470px;padding-top:12px;color:rgb(65,66,78);font-size:13px;font-family:Arial,Helvetica,sans-serif;line-height:18px">Virus-free. <a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" style="color:rgb(68,83,234)" target="_blank">www.avast.com</a>
</td>
</tr>
</tbody></table><a href="#m_-7847920128451186113_m_8469948696530983632_m_-5979860831382871527_m_2114711239033937821_m_-2160537011768264727_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1" height="1"></a></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mar. 19 avr. 2022 à 07:30, Pierre Riteau <<a href="mailto:pierre@stackhpc.com" target="_blank">pierre@stackhpc.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hello,</div><div><br></div><div>InfluxDB is configured to only listen on the internal API interface. Can you check the hostname you are using resolves correctly from the cloudkitty host?</div><div>Inside the influxdb container, you should use `influxdb -host <IP_ADDRESS>` with the internal IP of the influxdb host.</div><div><br></div><div>Also check if the output of `docker logs influxdb` has any logs.</div><div><br></div><div>Best wishes,</div><div>Pierre Riteau (priteau)</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 19 Apr 2022 at 01:24, wodel youchi <<a href="mailto:wodel.youchi@gmail.com" target="_blank">wodel.youchi@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi,<br><div><br></div><div>I am trying to deploy Cloudkitty, but I get this error message :</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">TASK [cloudkitty : Creating Cloudkitty influxdb database] ******************************************************<br>task path: /home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/tasks/bootstrap.yml:36</blockquote><div><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">fatal: [192.168.1.5 -> 192.168.1.5]: FAILED! => {<br> "action": "influxdb_database",<br> "changed": false,<br> "invocation": {<br> "module_args": {<br> "database_name": "cloudkitty",<br> "hostname": "<a href="http://dashint.cloud.cerist.dz" target="_blank">dashint.cloud.cerist.dz</a>",<br> "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",<br> "path": "",<br> "port": 8086,<br> "proxies": {},<br> "retries": 3,<br> "ssl": false,<br> "state": "present",<br> "timeout": null,<br> "udp_port": 4444,<br> "use_udp": false,<br> "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",<br> "validate_certs": true<br> }<br> },<br> "msg": "('Connection aborted.', RemoteDisconnected('Remote end closed connection without response',))"<br>}</blockquote></div><div><br></div><div><br></div><div>On the influxdb container I did this :</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">[root@controllerb ~]# docker ps | grep inf<br>68b3ebfefbec <a href="http://192.168.1.16:4000/openstack.kolla/centos-source-influxdb:xena" target="_blank">192.168.1.16:4000/openstack.kolla/centos-source-influxdb:xena</a> "dumb-init --single-…" 22 minutes ago Up 22 minutes influxdb<br>[root@controllerb ~]# docker exec -it influxdb /bin/bash<br>(influxdb)[influxdb@controllerb /]$ influx<br>Failed to connect to <a href="http://localhost:8086" target="_blank">http://localhost:8086</a>: Get <a href="http://localhost:8086/ping" target="_blank">http://localhost:8086/ping</a>: dial tcp [::1]:8086: connect: connection refused<br>Please check your connection settings and ensure 'influxd' is running.<br>(influxdb)[influxdb@controllerb /]$ ps -ef<br>UID PID PPID C STIME TTY TIME CMD<br>influxdb 1 0 0 Apr18 ? 00:00:00 dumb-init --single-child -- kolla_start<br>influxdb 7 1 0 Apr18 ? 00:00:01 /usr/bin/influxd -config /etc/influxdb/influxdb.conf<br>influxdb 45 0 0 00:12 pts/0 00:00:00 /bin/bash<br>influxdb 78 45 0 00:12 pts/0 00:00:00 ps -ef<br>(influxdb)[influxdb@controllerb /]$</blockquote><div><br></div><div>I have no log file for influxdb, the directory is empty.</div><div><br></div><div>Any ideas?</div><div><br></div><div>Regards.<br></div></div>
</blockquote></div></div>
</blockquote></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr"><div dir="ltr">Rafael Weingärtner</div></div>
</blockquote></div>
</blockquote></div>
</blockquote></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Rafael Weingärtner</div></div>