{"action":"created","issue":{"url":"https://api.github.com/repos/theforeman/smart_proxy_dns_route53/issues/6","labels_url":"https://api.github.com/repos/theforeman/smart_proxy_dns_route53/issues/6/labels{/name}","comments_url":"https://api.github.com/repos/theforeman/smart_proxy_dns_route53/issues/6/comments","events_url":"https://api.github.com/repos/theforeman/smart_proxy_dns_route53/issues/6/events","html_url":"https://github.com/theforeman/smart_proxy_dns_route53/issues/6","id":96655795,"number":6,"title":"plugin not working on new foreman install","user":{"login":"haghabozorgi","id":1186748,"avatar_url":"https://avatars.githubusercontent.com/u/1186748?v=3","gravatar_id":"","url":"https://api.github.com/users/haghabozorgi","html_url":"https://github.com/haghabozorgi","followers_url":"https://api.github.com/users/haghabozorgi/followers","following_url":"https://api.github.com/users/haghabozorgi/following{/other_user}","gists_url":"https://api.github.com/users/haghabozorgi/gists{/gist_id}","starred_url":"https://api.github.com/users/haghabozorgi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/haghabozorgi/subscriptions","organizations_url":"https://api.github.com/users/haghabozorgi/orgs","repos_url":"https://api.github.com/users/haghabozorgi/repos","events_url":"https://api.github.com/users/haghabozorgi/events{/privacy}","received_events_url":"https://api.github.com/users/haghabozorgi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-07-22T20:23:40Z","updated_at":"2015-07-23T19:06:07Z","closed_at":null,"body":"new foreman install on centos 6.\r\ninstalled yum install rubygem-smart_proxy_pulp from the nightly foreman repo after trying it from the stable foreman repo and having no luck. In both instances the provisioning kicks off , and when it gets to the create A record DNS entry it fails and rolls back.\r\n\r\nI created an IAM user that is assigned to ec2fullaccess and route53fullaccess roles.\r\n\r\nI added \r\n:use_provider: dns_route53\r\n to the dns.yml so it looks like \r\n\r\n```---\r\n# DNS management\r\n:enabled: true\r\n# valid providers:\r\n#   dnscmd (Microsoft Windows native implementation)\r\n#   nsupdate\r\n#   nsupdate_gss (for GSS-TSIG support)\r\n#   virsh (simple implementation for libvirt)\r\n#:dns_provider: nsupdate\r\n# use this setting if you are managing a dns server which is not localhost though this proxy\r\n:use_provider: dns_route53\r\n:dns_server: 127.0.0.1\r\n# use this setting if you want to override default TTL setting (86400)\r\n:dns_ttl: 86400\r\n# use dns_tsig_* for GSS-TSIG updates using Kerberos.  Required for Windows MS DNS with\r\n# Secure Dynamic Updates, or BIND as used in FreeIPA.  Set dns_provider to nsupdate_gss.\r\n:dns_key: /etc/rndc.key\r\n#:dns_tsig_keytab: /usr/share/foreman-proxy/dns.keytab\r\n#:dns_tsig_principal: DNS/host.example.com@EXAMPLE.COM\r\n```\r\n\r\nand then I created a dns_route53.yml and added the below\r\n\r\n```\r\n---\r\n#\r\n# Configuration file for 'dns_route53' DNS provider\r\n#\r\n# Set the following keys for the AWS credentials in use:\r\n:aws_access_key: \"MYACCESSKEY\"\r\n:aws_secret_key: \"MYSECRETKEY\"\r\n```\r\n\r\n\r\nThe gui fails with\r\n\r\nUnable to save\r\nCreate DNS record for test5.env.domain.internal task failed with the following error: ERF12-2357 [ProxyAPI::ProxyException]: Unable to set DNS entry ([RestClient::BadRequest]: 400 Bad Request) for proxy https://puppetmaster.env.domain.internal:8443/dns\r\n\r\n\r\nproduction.log shows \r\nFailed to save: Create DNS record for test4.perf.nba.internal task failed with the following error: ERF12-2357 [ProxyAPI::ProxyException]: Unable to set DNS entry ([RestClient::BadRequest]: 400 Bad Request) for proxy https://puppetmaster.env.domain.internal:8443/dns\r\n\r\n\r\nThe instructions on the github page are not clear as I would assume the \r\n:dns_key: /etc/rndc.key\r\n:dns_server: 127.0.0.1\r\nare either wrong or not needed at all. Perhaps some config options are still needed that are missing? Any assistance would be helpful.\r\n"},"comment":{"url":"https://api.github.com/repos/theforeman/smart_proxy_dns_route53/issues/comments/124213252","html_url":"https://github.com/theforeman/smart_proxy_dns_route53/issues/6#issuecomment-124213252","issue_url":"https://api.github.com/repos/theforeman/smart_proxy_dns_route53/issues/6","id":124213252,"user":{"login":"haghabozorgi","id":1186748,"avatar_url":"https://avatars.githubusercontent.com/u/1186748?v=3","gravatar_id":"","url":"https://api.github.com/users/haghabozorgi","html_url":"https://github.com/haghabozorgi","followers_url":"https://api.github.com/users/haghabozorgi/followers","following_url":"https://api.github.com/users/haghabozorgi/following{/other_user}","gists_url":"https://api.github.com/users/haghabozorgi/gists{/gist_id}","starred_url":"https://api.github.com/users/haghabozorgi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/haghabozorgi/subscriptions","organizations_url":"https://api.github.com/users/haghabozorgi/orgs","repos_url":"https://api.github.com/users/haghabozorgi/repos","events_url":"https://api.github.com/users/haghabozorgi/events{/privacy}","received_events_url":"https://api.github.com/users/haghabozorgi/received_events","type":"User","site_admin":false},"created_at":"2015-07-23T19:06:07Z","updated_at":"2015-07-23T19:06:07Z","body":"@domcleal  yeah I see what you are saying. The foreman box cannot resolve the host1 server inside of the vpc. But oddly the host1 server can resolve the foreman server. Not sure what I am missing here"}}