Open Stack

It seems that it was always assumed to be HTTP and not HTTPs:
https://github.com/openstack/kolla-ansible/blob/a52cf61b2234d2f078dd2893dd37de63e20ea1aa/ansible/roles/cloudkitty/tasks/bootstrap.yml#L36
.

Maybe, we will need to change that to use SSL whenever needed.

On Tue, Apr 19, 2022 at 8:19 AM wodel youchi <wodel.youchi at gmail.com> wrote:

> Hi,
>
> I tested with influx -host <IP_ADDRESS>
> First I tested with the internal api IP address of the host itself, and it
> did work : influx -host 10.10.3.9
> Then I tested with VIP of the internal api, which is held by haproxy :
> influx -host 10.10.3.1, it didn't work, looking in the haproxy
> configuration file of influxdb, I noticed that haproxy uses https in the
> front end, so I tested with :  influx -ssl -host 10.10.3.1 and it did work.
>
> And if you see the error message from TASK [cloudkitty : Creating
> Cloudkitty influxdb database], ssl is false
>
> fatal: [192.168.1.5 -> 192.168.1.5]: FAILED! => {
>     "action": "influxdb_database",
>     "changed": false,
>     "invocation": {
>         "module_args": {
>             "database_name": "cloudkitty",
>             "hostname": "dashint.cloud.cerist.dz",
>             "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>             "path": "",
>             "port": 8086,
>             "proxies": {},
>             "retries": 3,
>             *"ssl": false,*
>             "state": "present",
>             "timeout": null,
>             "udp_port": 4444,
>             "use_udp": false,
>             "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>             "validate_certs": true
>         }
>     },
>     "msg": "('Connection aborted.', RemoteDisconnected('Remote end closed
> connection without response',))"
> }
>
> Could that be the problem? if yes how to force Cloudkitty to enable ssl?
>
> Regards.
>
>
> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free.
> www.avast.com
> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
> <#m_-2160537011768264727_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
>
> Le mar. 19 avr. 2022 à 07:30, Pierre Riteau <pierre at stackhpc.com> a
> écrit :
>
>> Hello,
>>
>> InfluxDB is configured to only listen on the internal API interface. Can
>> you check the hostname you are using resolves correctly from the cloudkitty
>> host?
>> Inside the influxdb container, you should use `influxdb -host
>> <IP_ADDRESS>` with the internal IP of the influxdb host.
>>
>> Also check if the output of `docker logs influxdb` has any logs.
>>
>> Best wishes,
>> Pierre Riteau (priteau)
>>
>> On Tue, 19 Apr 2022 at 01:24, wodel youchi <wodel.youchi at gmail.com>
>> wrote:
>>
>>> Hi,
>>>
>>> I am trying to deploy Cloudkitty, but I get this error message :
>>>
>>> TASK [cloudkitty : Creating Cloudkitty influxdb database]
>>>> ******************************************************
>>>> task path:
>>>> /home/deployer/kollavenv/xenavenv/share/kolla-ansible/ansible/roles/cloudkitty/tasks/bootstrap.yml:36
>>>
>>>
>>> fatal: [192.168.1.5 -> 192.168.1.5]: FAILED! => {
>>>>     "action": "influxdb_database",
>>>>     "changed": false,
>>>>     "invocation": {
>>>>         "module_args": {
>>>>             "database_name": "cloudkitty",
>>>>             "hostname": "dashint.cloud.cerist.dz",
>>>>             "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>>>>             "path": "",
>>>>             "port": 8086,
>>>>             "proxies": {},
>>>>             "retries": 3,
>>>>             "ssl": false,
>>>>             "state": "present",
>>>>             "timeout": null,
>>>>             "udp_port": 4444,
>>>>             "use_udp": false,
>>>>             "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
>>>>             "validate_certs": true
>>>>         }
>>>>     },
>>>>     "msg": "('Connection aborted.', RemoteDisconnected('Remote end
>>>> closed connection without response',))"
>>>> }
>>>
>>>
>>>
>>> On  the influxdb container I did this :
>>>
>>>> [root at controllerb ~]# docker ps | grep inf
>>>> 68b3ebfefbec
>>>> 192.168.1.16:4000/openstack.kolla/centos-source-influxdb:xena
>>>>          "dumb-init --single-…"   22 minutes ago   Up 22 minutes
>>>>              influxdb
>>>> [root at controllerb ~]# docker exec -it influxdb /bin/bash
>>>> (influxdb)[influxdb at controllerb /]$ influx
>>>> Failed to connect to http://localhost:8086: Get
>>>> http://localhost:8086/ping: dial tcp [::1]:8086: connect: connection
>>>> refused
>>>> Please check your connection settings and ensure 'influxd' is running.
>>>> (influxdb)[influxdb at controllerb /]$ ps -ef
>>>> UID          PID    PPID  C STIME TTY          TIME CMD
>>>> influxdb       1       0  0 Apr18 ?        00:00:00 dumb-init
>>>> --single-child -- kolla_start
>>>> influxdb       7       1  0 Apr18 ?        00:00:01 /usr/bin/influxd
>>>> -config /etc/influxdb/influxdb.conf
>>>> influxdb      45       0  0 00:12 pts/0    00:00:00 /bin/bash
>>>> influxdb      78      45  0 00:12 pts/0    00:00:00 ps -ef
>>>> (influxdb)[influxdb at controllerb /]$
>>>
>>>
>>> I have no log file for influxdb, the directory is empty.
>>>
>>> Any ideas?
>>>
>>> Regards.
>>>
>>

-- 
Rafael Weingärtner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220419/302319bf/attachment.htm>