| *** sdake_ has joined #openstack-ansible | 00:17 | |
| *** sdake has quit IRC | 00:21 | |
| *** markvoelker has joined #openstack-ansible | 00:24 | |
| *** sdake_ has quit IRC | 00:27 | |
| *** markvoelker has quit IRC | 00:30 | |
| *** daneyon has joined #openstack-ansible | 00:50 | |
| *** sdake has joined #openstack-ansible | 01:00 | |
| *** daneyon_ has joined #openstack-ansible | 01:02 | |
| *** daneyon has quit IRC | 01:05 | |
| *** phoenix__ has joined #openstack-ansible | 01:31 | |
| *** javeriak has quit IRC | 01:32 | |
| *** heww has joined #openstack-ansible | 01:33 | |
| *** heww has quit IRC | 01:40 | |
| *** heww has joined #openstack-ansible | 01:41 | |
| *** javeriak has joined #openstack-ansible | 01:45 | |
| *** javeriak has quit IRC | 01:47 | |
| *** tlian has joined #openstack-ansible | 01:55 | |
| openstackgerrit | Miguel Grinberg proposed stackforge/os-ansible-deployment: [WIP] Keystone IdP configuration https://review.openstack.org/194259 | 01:59 |
|---|---|---|
| *** daneyon_ has quit IRC | 02:09 | |
| *** markvoelker has joined #openstack-ansible | 02:14 | |
| *** javeriak has joined #openstack-ansible | 02:15 | |
| *** daneyon has joined #openstack-ansible | 02:17 | |
| *** markvoelker has quit IRC | 02:18 | |
| *** daneyon has quit IRC | 02:18 | |
| *** annashen has joined #openstack-ansible | 02:32 | |
| *** javeriak has quit IRC | 03:06 | |
| *** javeriak has joined #openstack-ansible | 03:23 | |
| *** javeriak has quit IRC | 03:25 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated default fernet key usage https://review.openstack.org/195853 | 03:33 |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated default fernet key usage https://review.openstack.org/195853 | 03:39 |
| *** annashen has quit IRC | 03:57 | |
| *** markvoelker has joined #openstack-ansible | 04:02 | |
| *** markvoelker has quit IRC | 04:07 | |
| *** heww has quit IRC | 04:10 | |
| *** annashen has joined #openstack-ansible | 04:11 | |
| *** annashen has quit IRC | 04:14 | |
| *** annashen has joined #openstack-ansible | 04:19 | |
| *** tlian has quit IRC | 04:21 | |
| *** JRobinson__ is now known as JRobinson__afk | 04:50 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated default fernet key usage https://review.openstack.org/195853 | 05:04 |
| *** JRobinson__afk is now known as JRobinson__ | 05:15 | |
| *** jmccrory has quit IRC | 05:27 | |
| *** jmccrory has joined #openstack-ansible | 05:28 | |
| *** toddnni has quit IRC | 05:28 | |
| *** annashen has quit IRC | 05:29 | |
| *** sdake has quit IRC | 05:35 | |
| *** toddnni has joined #openstack-ansible | 05:36 | |
| *** markvoelker has joined #openstack-ansible | 05:51 | |
| *** markvoelker has quit IRC | 05:56 | |
| *** sdake has joined #openstack-ansible | 06:00 | |
| *** sdake has quit IRC | 06:16 | |
| *** sdake has joined #openstack-ansible | 06:18 | |
| *** annashen has joined #openstack-ansible | 06:30 | |
| *** JRobinson__ has quit IRC | 06:36 | |
| *** javeriak has joined #openstack-ansible | 06:37 | |
| *** sdake has quit IRC | 06:41 | |
| *** sdake has joined #openstack-ansible | 06:41 | |
| *** sdake has quit IRC | 06:41 | |
| *** annashen has quit IRC | 07:23 | |
| *** jmccrory has quit IRC | 08:19 | |
| *** jmccrory has joined #openstack-ansible | 08:34 | |
| *** husanu4 has joined #openstack-ansible | 09:09 | |
| *** husanu4 has quit IRC | 09:18 | |
| *** husanu8 has joined #openstack-ansible | 09:23 | |
| *** husanu8 has quit IRC | 09:28 | |
| *** javeriak has quit IRC | 09:28 | |
| *** markvoelker has joined #openstack-ansible | 09:29 | |
| *** markvoelker has quit IRC | 09:33 | |
| *** annashen has joined #openstack-ansible | 10:24 | |
| *** annashen has quit IRC | 10:28 | |
| *** markvoelker has joined #openstack-ansible | 11:17 | |
| *** markvoelker has quit IRC | 11:22 | |
| openstackgerrit | Andy McCrae proposed stackforge/os-ansible-deployment: Allow Swift middleware to be set via a variable https://review.openstack.org/181560 | 11:24 |
| evrardjp | hello everyone | 11:30 |
| odyssey4me | o/ | 11:30 |
| evrardjp | I'm getting sometimes annoying errors like galera_container-c0f26807] => SSH Error: data could not be sent to the remote host. Make sure this host can be reached over ssh | 11:32 |
| evrardjp | the host is well accessible, so it's purely an ansible bug | 11:33 |
| evrardjp | I've tried to change the timeouts | 11:33 |
| evrardjp | in ansible.cfg | 11:33 |
| evrardjp | doesn't seem to fix it | 11:33 |
| evrardjp | do you think I should change values for the ssh_args in ansible.cfg? | 11:34 |
| evrardjp | like the -o ServerAliveInterval=5 -o ServerAliveCountMax=3 | 11:34 |
| odyssey4me | evrardjp we've put quite a lot of time into trying to solve that issue, but haven't found a satisfactory resolution - the best we've managed to do is to implement a retry | 11:39 |
| evrardjp | is the retry included in openstack-ansible command? | 11:39 |
| odyssey4me | so we've added a patch upstream (in ansible) to implement an ssh restry automatically, but it'll only be in ansible 2 when it ships :( | 11:40 |
| evrardjp | ok :/ | 11:40 |
| evrardjp | but ansible already has a retry feature, right? | 11:41 |
| odyssey4me | but for now, then only real option other than to try and figure out the openssh/ssh tweaks to improve the situation, is to retry when it fails | 11:41 |
| odyssey4me | evrardjp in the gate check script we implement an automated retry if a playbook execution fails... it's not great, but that's the best we can do until ansible 2 ships | 11:42 |
| evrardjp | Yeah, I don't complain, just wondering if I had to work on it or not | 11:46 |
| odyssey4me | dstanek so hughsaunders has two keystone services running, and is trying to setup an IDP/SP relationship | 11:46 |
| evrardjp | for ansible, v2 is out in dev IIRC | 11:46 |
| odyssey4me | but for me shibboleth redirects to keystone, which just returns a 401 | 11:47 |
| odyssey4me | for hughsaunders ... (over to you) | 11:48 |
| hughsaunders | dstanek: "shib_check_user found no per-request structure" <-- is that the error that makes no sense to you? | 11:49 |
| hughsaunders | if so, I agree | 11:49 |
| dstanek | that and the other one about the ECP urls not matching | 11:52 |
| openstackgerrit | Andy McCrae proposed stackforge/os-ansible-deployment: Make swift_proxy_vars not a required variable https://review.openstack.org/196012 | 11:54 |
| openstackgerrit | Andy McCrae proposed stackforge/os-ansible-deployment: Make swift_proxy_vars not a required variable https://review.openstack.org/196012 | 11:56 |
| *** markvoelker has joined #openstack-ansible | 12:00 | |
| dstanek | odyssey4me: hughsaunders: come to #openstack-keystone and ask your k2k questions | 12:03 |
| *** tlian has joined #openstack-ansible | 12:28 | |
| *** jaypipes has joined #openstack-ansible | 12:41 | |
| *** fawadkhaliq has joined #openstack-ansible | 13:18 | |
| *** lkoranda_ has joined #openstack-ansible | 13:27 | |
| *** fawadkhaliq has quit IRC | 13:28 | |
| *** lkoranda has quit IRC | 13:32 | |
| *** lkoranda_ has quit IRC | 13:33 | |
| *** KLevenstein has joined #openstack-ansible | 13:37 | |
| *** lkoranda has joined #openstack-ansible | 13:37 | |
| *** Mudpuppy has joined #openstack-ansible | 13:50 | |
| cloudnull | mornin | 13:56 |
| cloudnull | odyssey4me dstanek sigmavirus24_awa dolphm https://review.openstack.org/#/c/195853/ <fernet with auto rotation | 13:58 |
| *** ayoung has quit IRC | 14:00 | |
| *** fawadkhaliq has joined #openstack-ansible | 14:04 | |
| dstanek | cloudnull: why rotate for every playbook execution? | 14:06 |
| cloudnull | it allows the user to rotate through ansible playbooks using a tag. it also should enfore a consistency on subsequent reruns of the playbooks. | 14:07 |
| cloudnull | like if a new node is added in | 14:08 |
| *** fawadk has joined #openstack-ansible | 14:08 | |
| cloudnull | we're also regenerating the ssh keys on every playbook execution so they're rotating all the time too. | 14:08 |
| dstanek | is there any chance that you'd run the playbooks a few times in a row and start to invalidate keys? | 14:09 |
| *** fawadkhaliq has quit IRC | 14:09 | |
| cloudnull | in the current config you'd have to do that 7+ times | 14:09 |
| cloudnull | but yes. | 14:09 |
| cloudnull | however i'd hope that the run would've converged by the 7th run . | 14:10 |
| *** ayoung has joined #openstack-ansible | 14:12 | |
| palendae | You would hope | 14:13 |
| cloudnull | also i tested this last night with 11 keystone nodes, 7 keys, an API worker beating on a nova api, and a script rotating the keys on a for loop for a few minutes i never got a 401 . | 14:13 |
| cloudnull | so kudos to you guys. :) | 14:13 |
| dstanek | that's 7 times in 12 hours though | 14:14 |
| dstanek | i don't have any problem with it if you think it's operationally sound - was just curious | 14:15 |
| cloudnull | i think it should be good, however if we can make it better we should do that =) | 14:15 |
| cloudnull | also i set the default auto rotation to daily, do you think it should be more frequent than that? | 14:17 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:19 | |
| *** fawadk has quit IRC | 14:19 | |
| sigmavirus24 | cloudnull: looking | 14:20 |
| dstanek | i would expect daily to be more than enough for a key rotation | 14:23 |
| cloudnull | ok | 14:23 |
| *** yaya has joined #openstack-ansible | 14:42 | |
| openstackgerrit | Tom Cameron proposed stackforge/os-ansible-deployment: Upgrade to ansible 1.9.2 https://review.openstack.org/196083 | 14:44 |
| *** jaypipes is now known as leakypipes | 14:56 | |
| *** yaya has quit IRC | 15:04 | |
| *** yaya has joined #openstack-ansible | 15:08 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated default fernet key usage https://review.openstack.org/195853 | 15:13 |
| sigmavirus24 | dstanek: yeah, I was saying even weekly should be often enough but daily is probably the most future-proof (security-wise) default | 15:22 |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated default fernet key usage https://review.openstack.org/195853 | 15:32 |
| *** sdake has joined #openstack-ansible | 15:52 | |
| evrardjp | I'm off for today! Enjoy the week-end everyone! | 15:59 |
| cloudnull | evrardjp: have a great one. | 16:00 |
| *** fawadkhaliq has joined #openstack-ansible | 16:03 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Implement Ceilometer https://review.openstack.org/173067 | 16:12 |
| openstackgerrit | Jesse Pretorius proposed stackforge/os-ansible-deployment: [WIP] Keystone SP configuration https://review.openstack.org/194395 | 16:29 |
| odyssey4me | hughsaunders miguelgrinberg ^ | 16:29 |
| openstackgerrit | Andy McCrae proposed stackforge/os-ansible-deployment: Allow Swift middleware to be set via a variable https://review.openstack.org/181560 | 16:30 |
| hughsaunders | odyssey4me: thanks | 16:36 |
| hughsaunders | odyssey4me: oh, so those location matches were supposed to be outside the vhost? | 16:38 |
| openstackgerrit | Andy McCrae proposed stackforge/os-ansible-deployment: Allow Swift middleware to be set via a variable https://review.openstack.org/181560 | 16:43 |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Upgrade to ansible 1.9.2 https://review.openstack.org/196144 | 16:52 |
| *** yaya has quit IRC | 16:56 | |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Upgrade to ansible 1.9.2 https://review.openstack.org/196083 | 16:56 |
| *** annashen has joined #openstack-ansible | 17:03 | |
| *** yaya has joined #openstack-ansible | 17:05 | |
| *** yaya has quit IRC | 17:15 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Remove hardcoded config drive enforcement https://review.openstack.org/195403 | 17:16 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 17:27 | |
| *** fawadk has joined #openstack-ansible | 17:37 | |
| *** javeriak has joined #openstack-ansible | 17:37 | |
| *** fawadkhaliq has quit IRC | 17:40 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 17:41 | |
| *** jwagner_away is now known as jwagner | 18:00 | |
| *** annashen has quit IRC | 18:08 | |
| *** annashen has joined #openstack-ansible | 18:08 | |
| *** sdake has quit IRC | 18:13 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Remove hardcoded config drive enforcement https://review.openstack.org/195403 | 18:30 |
| *** yaya has joined #openstack-ansible | 18:36 | |
| *** sdake has joined #openstack-ansible | 18:36 | |
| *** sdake has quit IRC | 18:36 | |
| *** sdake has joined #openstack-ansible | 18:38 | |
| *** kelvk has joined #openstack-ansible | 18:51 | |
| *** markvoelker has quit IRC | 19:20 | |
| *** markvoelker has joined #openstack-ansible | 19:26 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 19:31 | |
| *** markvoelker has quit IRC | 19:32 | |
| *** markvoelker has joined #openstack-ansible | 19:32 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 19:38 | |
| *** markvoelker_ has joined #openstack-ansible | 19:38 | |
| *** markvoelker has quit IRC | 19:40 | |
| *** markvoelker has joined #openstack-ansible | 19:44 | |
| *** markvoelker_ has quit IRC | 19:45 | |
| annashen | running a playbook with the final task being calling shell module performing a command in this format "cd somefolder; /usr/local/bin/some-api --config-file /etc/someapi/some.conf --debug 2>&1 | tee /opt/logs/someapi.log" | 19:48 |
| annashen | but ansible never returns and the playbook just hang there | 19:49 |
| palendae | annashen: Is it from os-ansible-deployment? | 19:49 |
| *** daneyon has joined #openstack-ansible | 19:50 | |
| palendae | The playbook, that is | 19:50 |
| annashen | have no idea whethre it comes from... | 19:50 |
| annashen | no.. | 19:50 |
| annashen | the playbook i wrote it myself | 19:50 |
| palendae | Ah. You may get better feedback from the #ansible channel, then | 19:50 |
| annashen | oh.. thanks | 19:51 |
| openstackgerrit | Shu Shen proposed stackforge/os-ansible-deployment: Ensure flush-net-cache on local host https://review.openstack.org/196216 | 19:52 |
| *** markvoelker has quit IRC | 19:54 | |
| *** markvoelker has joined #openstack-ansible | 19:58 | |
| *** Mudpuppy has quit IRC | 20:02 | |
| *** Mudpuppy_ has joined #openstack-ansible | 20:03 | |
| *** markvoelker_ has joined #openstack-ansible | 20:09 | |
| *** markvoelker has quit IRC | 20:11 | |
| *** markvoelker_ has quit IRC | 20:12 | |
| *** Mudpuppy_ has quit IRC | 20:14 | |
| *** yaya has quit IRC | 20:16 | |
| *** KLevenstein has quit IRC | 20:21 | |
| *** KLevenstein has joined #openstack-ansible | 20:40 | |
| *** fawadk has quit IRC | 20:42 | |
| *** fawadkhaliq has joined #openstack-ansible | 20:43 | |
| *** fawadkhaliq has quit IRC | 20:44 | |
| *** daneyon_ has joined #openstack-ansible | 20:46 | |
| *** daneyon has quit IRC | 20:49 | |
| *** kelvk is now known as kelv | 20:50 | |
| *** kelv has left #openstack-ansible | 20:50 | |
| *** markvoelker has joined #openstack-ansible | 20:51 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Remove all of the rpc_release.link files https://review.openstack.org/196242 | 21:02 |
| *** tlian has quit IRC | 21:16 | |
| *** KLevenstein has quit IRC | 21:16 | |
| *** yapeng has joined #openstack-ansible | 21:17 | |
| *** markvoelker has quit IRC | 21:19 | |
| cloudnull | im out guys have a good weekend | 21:23 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:23 | |
| *** openstack has joined #openstack-ansible | 21:26 | |
| *** markvoelker has joined #openstack-ansible | 21:28 | |
| *** markvoelker has quit IRC | 21:30 | |
| *** yapeng has quit IRC | 21:37 | |
| *** metral is now known as metral_zzz | 21:46 | |
| *** javeriak has quit IRC | 22:09 | |
| *** fawadkhaliq has joined #openstack-ansible | 22:17 | |
| *** fawadk has joined #openstack-ansible | 22:19 | |
| *** fawadkhaliq has quit IRC | 22:20 | |
| *** annashen has quit IRC | 22:22 | |
| *** annashen has joined #openstack-ansible | 22:22 | |
| *** annashen has quit IRC | 22:39 | |
| *** fawadk has quit IRC | 22:40 | |
| *** annashen has joined #openstack-ansible | 22:50 | |
| *** annashen has quit IRC | 23:14 | |
| *** sdake_ has joined #openstack-ansible | 23:21 | |
| *** sdake has quit IRC | 23:25 | |
| *** yapeng has joined #openstack-ansible | 23:25 | |
| *** annashen has joined #openstack-ansible | 23:26 | |
| *** yapeng has quit IRC | 23:30 | |
| *** annashen has quit IRC | 23:31 | |
| *** sdake_ has quit IRC | 23:42 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!