Monday, 2015-10-05

*** elo has quit IRC00:36
*** elo has joined #openstack-ansible00:37
cloudnullmhayden: you can start the process with https://github.com/cloudnull/os-ansible-deployment/blob/master-rhel/scripts/bootstrap-ansible.sh to support multi OS then it can be the absolute first thing run .00:44
cloudnullseems sensible to replace script-y parts with ansible play00:45
cloudnull*plays00:45
cloudnullarbrandes: currently we only support unauthenticated libvirt but i'd be great to change that.00:49
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement neutron venv support  https://review.openstack.org/23072601:23
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement cinder venv support  https://review.openstack.org/22546301:25
*** alextricity-mobi has quit IRC01:38
*** dcreno has quit IRC01:54
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement neutron venv support  https://review.openstack.org/23072602:24
*** elo has quit IRC02:45
*** jhesketh has quit IRC02:48
*** jhesketh has joined #openstack-ansible02:50
*** elo has joined #openstack-ansible03:13
*** elo has quit IRC04:14
*** elo has joined #openstack-ansible04:17
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement neutron venv support  https://review.openstack.org/23072604:21
*** smallbig has quit IRC04:32
*** shausy has joined #openstack-ansible05:34
*** javeriak has joined #openstack-ansible05:41
*** javeriak has quit IRC06:03
*** javeriak has joined #openstack-ansible06:03
*** sdake has joined #openstack-ansible06:06
*** sdake has quit IRC06:10
*** sdake has joined #openstack-ansible06:10
*** sdake has quit IRC06:27
*** sdake has joined #openstack-ansible06:30
*** sdake has quit IRC06:31
*** javeriak has quit IRC06:42
*** elo has quit IRC06:54
*** elo has joined #openstack-ansible06:58
*** javeriak has joined #openstack-ansible06:59
*** javeriak has quit IRC07:06
*** javeriak has joined #openstack-ansible07:06
*** mancdaz has joined #openstack-ansible07:24
*** Guest60551 has quit IRC07:26
*** grumpycat has joined #openstack-ansible07:27
*** grumpycat is now known as Guest9265707:27
evrardjpgood morning everyone07:49
*** gparaskevas has joined #openstack-ansible07:51
*** vdo has joined #openstack-ansible08:15
*** mgoddard has joined #openstack-ansible08:34
*** misc_ is now known as misc08:39
*** javeriak has quit IRC08:55
*** markvoelker has joined #openstack-ansible09:05
*** markvoelker_ has joined #openstack-ansible09:06
*** jmccrory has quit IRC09:07
*** jmccrory has joined #openstack-ansible09:08
*** markvoelker has quit IRC09:09
*** markvoelker_ has quit IRC09:20
matttodyssey4me: any reason why the commit message here doesn't incidate it's a backport?  https://review.openstack.org/#/c/227963/09:33
odyssey4memattt you mean why is it not a cherry pick?09:33
matttodyssey4me: yeah cherry-pick09:33
odyssey4methe primary reason would be to say that it wasn't a cherry pick - and if it was it'd have to be two and edited anyway09:34
matttwhy maintain the same change-id from master/kilo then?09:34
odyssey4mesimply to make it easier to track them together09:35
matttk09:35
odyssey4methey all solve the same problem, but not in the same way due to upstream differences09:36
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix bashate violations  https://review.openstack.org/23052010:03
odyssey4memattt can you take a peek through a docs change for me please: https://review.openstack.org/23036810:08
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Move contributing and AIO documentation into dev-docs  https://review.openstack.org/23042310:09
matttodyssey4me: trying to get through some of the older reviews, is this urgent?10:09
odyssey4mefair enough, keep going :)10:09
matttodyssey4me: i'll have a look at it in a bit!10:10
openstackgerritMerged openstack/openstack-ansible: Install irqbalance on hosts  https://review.openstack.org/22794210:18
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Move contributing and AIO documentation into dev-docs  https://review.openstack.org/23042310:23
*** shausy has quit IRC10:27
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Set affinity to 1 for OpenStack-CI gate checks  https://review.openstack.org/22195710:27
*** shausy has joined #openstack-ansible10:27
openstackgerritMerged openstack/openstack-ansible: Add ebtables to neutron agent configuration  https://review.openstack.org/22796310:32
odyssey4memattt just thinking about affinities and clustering - considering how we implement the rabbit cluster, does it make sense to bother with more than one rabbitmq instance for the gate check?10:32
odyssey4meafaik we implement a multimaster cluster and the services consuming it all get given the list of rabbitmq servers10:33
odyssey4meI think three galera nodes adds some value, but 3 x rabbitmq seems a waste10:33
matttodyssey4me: i guess it's more to test the actual set up of the cluster itself, more so than how openstack interfaces with it10:36
odyssey4memattt yeah, but then we need to think about what we're actually about here - is our focus to setup a galera or rabbit cluster, is is our focus to deploy openstack10:37
matttodyssey4me: https://review.openstack.org/#/c/228558/ ... the bashate/pep8 errors here seem to be setup issues (tox.MissingDependency, InvocationError), were those all resolved?10:37
odyssey4meI would like to test the cluster more thoroughly, but our playbooks do nothing to actually test it right now. The galera cluster is more thorough in that regard - the rabbit servers are simply started and added. I don't see much value in running the rabbit bits in the current gate test.10:38
odyssey4memattt bashate violations patch: https://review.openstack.org/23052010:38
odyssey4mematt tox.ini fox: https://review.openstack.org/23031910:39
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix incorrect tox.ini config  https://review.openstack.org/23093510:39
mancdazodyssey4me would something like this not need a blueprint/spec normally? https://review.openstack.org/#/c/230716/10:39
matttodyssey4me: ok cool, let me +2 it and let it all get tested again10:40
openstackgerritJimmy McCrory proposed openstack/openstack-ansible: Install spice-html5 from source  https://review.openstack.org/22646210:40
*** Burgosz has joined #openstack-ansible10:41
matttodyssey4me: perhaps there is less need to cluster rabbitmq10:42
matttodyssey4me: fully agree about us needing to focus on testing openstack, but since these core components aren't being tested elsewhere right now and are foundational to the openstack bits it seems like we have no option but to test them now10:43
odyssey4memattt I haven't checked https://review.openstack.org/230716 out thoroughly, but it is nice in that the repo build process is handled entirely in-house instead of via yaprt... I think that a discussion around what needs to happen on a repo server is something we need and perhaps this should form part of that work. This in isolation is a nice improvement though.10:43
matttodyssey4me: assuming that comment was for mancdaz?10:44
odyssey4memattt yeah, I agree - but I'd rather have us prioritise openstack testing above infra testing until we split the gate out... right now the resource starvation is causing far too much unreliability in the gate checks10:44
mancdazodyssey4me sure, just feels significant enough a change to need at least a bug assigned, if not a blueprint10:44
odyssey4memattt ah, you're right :p10:44
odyssey4memancdaz ^^10:45
mancdazodyssey4me ^^10:45
odyssey4memancdaz at this stage I think that cloudnull put it up for review to get a discussion going, so I'd suggest commenting in the review10:45
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Set affinity to 1 for OpenStack-CI gate checks  https://review.openstack.org/22195711:16
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Remove unused libvirt-bin file  https://review.openstack.org/22837111:16
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Set affinity to 1 for OpenStack-CI gate checks  https://review.openstack.org/22195711:19
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update all SHA's (except Horizon) to Liberty RC1  https://review.openstack.org/22838511:21
odyssey4memancdaz if this is applicable to kilo, please backport: https://review.openstack.org/20940411:28
openstackgerritMerged openstack/openstack-ansible: Updates ansible role requirements script name  https://review.openstack.org/22954011:30
mancdazodyssey4me I was still waiting for feedback as to why we're doing it (in email thread) so had it in WIP, and cloudnull rewrote this patch which has now merged11:31
mancdazI'm still not 100% on the need for it11:31
odyssey4memancdaz I suppose the alternative question is whether having it does any harm?11:32
mancdazodyssey4me that was more the thing, yeah11:32
mancdazprobably not, but...without really understanding the need for it11:32
odyssey4mewell, we can leave it in master/Liberty and hopefully you'll get your answer at some point11:33
*** javeriak has joined #openstack-ansible11:33
odyssey4mefor now it'll be tested and commented on by a broader mix11:33
mancdaz(for anyone reading along, I do completely understand the need for it in a normal master-slave replication scenario)11:33
mancdazodyssey4me sounds good11:33
*** jhesketh has quit IRC11:43
*** Burgosz has quit IRC11:46
*** jhesketh has joined #openstack-ansible11:48
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Move contributing and AIO documentation into dev-docs  https://review.openstack.org/23042311:49
mhaydenhappy monday12:08
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Move contributing and AIO documentation into dev-docs  https://review.openstack.org/23042312:10
odyssey4meo/ mhayden12:23
evrardjphi everyone12:24
odyssey4meo/ evrardjp12:24
*** woodard has joined #openstack-ansible12:25
mhaydenwould anyone have a moment to give this one a final nudge? just need a +2 https://review.openstack.org/#/c/228591/12:28
evrardjpcould someone help me with some ansible stuff?12:30
evrardjpI have this: http://paste.openstack.org/show/475303/12:30
mhaydenevrardjp: that looks fancy12:31
evrardjpwait for the rest ;)12:31
evrardjpI'd like to generate a config like this: http://paste.openstack.org/show/475305/12:32
evrardjpbut with my template, I end up with:12:32
evrardjphttp://paste.openstack.org/show/475307/12:33
mhaydenwell that's interesting12:34
evrardjpso on the 307 you see that the host_name from the 303 is well generated, but12:34
mhaydenlooks like you're looping over a string rather than a list/dict12:34
evrardjpit's like I have new lines flushed12:34
evrardjpyeah12:34
evrardjpnot sure about the vocabulary, but something like the 305 means that I should loop over a list right12:35
mhaydendo you have a paste with a little more context? it's hard to tell with only seeing a line or two12:35
evrardjpand a list can be written with [item1,item2,...] right?12:35
mhaydeni don't see a comma in your list12:36
evrardjpon 303?12:36
evrardjpor on 307?12:36
mhaydenevrardjp: which paste has the lines12:36
evrardjp307 is cutted, but it has "[ " "," and "]"12:36
mhaydeni think i missed one of the pastes :)12:36
evrardjpyou don't have the template, that's maybe something of your interest, but it's really an ansible stuff12:37
evrardjpI have given 3 pastes, right now12:37
evrardjphttp://paste.openstack.org/show/475303/12:37
evrardjpis what I'm working on12:38
evrardjpoh wait, I have an idea12:38
evrardjpok found it12:39
evrardjpon the paste 30312:39
openstackgerritMerged openstack/openstack-ansible: Remove containers from /etc/hosts during teardown  https://review.openstack.org/21535712:39
evrardjpI have "[ something ]"12:39
evrardjpinstead of having [ "something"]12:39
evrardjpbut I have a subsidary question12:41
evrardjpthis: http://paste.openstack.org/show/475305/12:41
*** tlian has joined #openstack-ansible12:44
evrardjpservers is I guess a "list" of items. each item being a dict? is this the correct vocabulary?12:46
*** agireud has quit IRC12:47
mhaydenevrardjp: yeah, in YAML terms, it looks like you have a list of dicts there12:47
evrardjpwritten differently, I have [ {}, {} ] right?12:48
mhaydenyessir12:48
evrardjpok, then it should work, I'll further check why it doesn't here12:49
*** javeriak has quit IRC12:49
mhaydeni usually forget to use "with_dict:" instead of "with_items:"12:52
*** dcreno has joined #openstack-ansible12:54
evrardjpmhayden: I know the feeling ;)12:55
evrardjphere it's just ... different12:55
evrardjpthis is the template in question12:55
evrardjphttps://github.com/evrardjp/ansible-haproxy/blob/master/templates/service.j212:55
evrardjpjust FYI12:55
mhaydenand which line there is the problematic one?12:56
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Limit the number of Ansible forks used to 10  https://review.openstack.org/22978612:58
mhaydenodyssey4me: ^^ aww well that's no fun12:59
evrardjpshouldn't we stop playing with the number of forks, and let the deployer decide?13:01
odyssey4meevrardjp read the review ;)13:02
evrardjpif needed for gate checks, maybe sed on the ansible.cfg file13:02
evrardjpmy bad, reacting directly isn't good ;)13:02
odyssey4mecurrently the number of forks is set to #CPU's when using run-playbooks.sh only - that patch caps it at 10 for the reasons given and adds a doc entry telling deployers how they can use a different value when executing playbooks13:03
evrardjpI moved to paramiko for openstack-ansible deployment13:03
evrardjpit was far more reliable for me, don't know why13:04
evrardjpit's good to cap at 1013:04
odyssey4meyup13:04
odyssey4merun-playbooks is only designed for dev/test environments and gating13:04
odyssey4meI'm busy adding another doc entry to say so13:05
*** javeriak has joined #openstack-ansible13:05
javeriakguys, any idea when we might be upgrading the jinja version?13:08
odyssey4mejaveriak I would expect that it would be whenever Ansible does so13:09
odyssey4mecurrently we only have a lower cap: https://github.com/openstack/openstack-ansible/blob/master/requirements.txt#L213:09
javeriakoh so its whatever version comes with the ansible source we install13:10
javeriakand when do we upgrade ansible? i know v2 isnt out yet13:10
odyssey4mejaveriak sort-of - the requirement is determined by yaprt in the repo container which I think does the lowest version that complies with the overall requirements13:11
odyssey4meso if any other package we use has other requirements, they'll influence what goes into the repo13:11
javeriakive basically hit alot of walls trying to get my logic to work, and all the features i require are in newer versions of ansible & jinja13:11
javeriakah okay13:11
odyssey4mewe're already using the latest available stable version: https://github.com/openstack/openstack-ansible/blob/master/scripts/bootstrap-ansible.sh#L2313:12
evrardjpmhayden: https://github.com/evrardjp/ansible-haproxy/blob/master/templates/service.j2#L10813:13
odyssey4meThe resolved jinja version right now appears to be 2.813:13
javeriakyep i know, sadly that doesnt include support for looping on include13:13
odyssey4mejaveriak so what do you need to support it?13:14
evrardjpmhayden: I'd like to define a list of servers (so something like ["",""])13:14
evrardjpeach server being a dict13:14
evrardjp(so I guess something like [ {}, {}] )13:14
evrardjpeach of them having name and ip for example13:15
mhaydenwowzers13:15
mhaydeni haven't done anything quite like that before13:15
javeriaki could get stuff to work with jinja2.8 (my setup downloaded 2.7)13:15
evrardjpso [ { 'name' : 'tada' , 'ip': '127.0.0.1' }, {...} ]13:16
evrardjpbut when I try that, ansible complaints13:16
odyssey4mejaveriak hmm, that's interesting - is this a build from master, or from the kilo branch?13:17
javeriakodyssey4me master13:20
odyssey4mejaveriak yeah, it seems that OpenStack also uses jinja but it's minimum is also 2.613:22
*** brice has joined #openstack-ansible13:23
odyssey4mejaveriak the trouble is that while we can implement a higher jinja version for master right now, backporting it into the stable branches may not be accepted so easily13:23
evrardjpto be complete, [ { 'name': 'tada', 'ip': '127.0.0.1'}, { 'name': 'abc', 'ip': '127.0.0.1'}] works if I put it like that in a variable, but not if I use loops etc13:24
odyssey4meare you sure there's not another way you can achieve the same goal?13:24
*** rromans is now known as rromans_pto13:24
openstackgerritMiguel Alejandro Cantu proposed openstack/openstack-ansible: Removes /opt/*openstack*/ pattern from teardown.  https://review.openstack.org/22855813:25
*** scarlisle has joined #openstack-ansible13:26
javeriakodyssey4me alright makes sense, yes I'll just have to use sub-optimal logic for now, which will be duplicating some variables because they're needed directly and as part of a dict, sorry for the delay in pushing my changed for my BPs13:26
odyssey4mejaveriak yeah, we'll be able to do some pretty nifty optimising once Ansible 2 releases. For now we're doing a lot of sub-optimal stuff. :/13:27
odyssey4mejaveriak will you be making it to the summit in Tokyo?13:28
javeriakodyssey4me yep i'm gonna wait for v2 anxiously too now :), nope I wont be making it to the summit unfortunately13:31
evrardjpyeah, ansible2 will bring huge improvements13:32
evrardjpcombine variables!13:32
*** jasondotstar|afk is now known as jasondotstar13:32
evrardjppackage management os agnostic!13:32
javeriakevrardjp yea :)13:34
*** mgoddard has quit IRC13:35
openstackgerritMerged openstack/openstack-ansible: Remove unused libvirt-bin file  https://review.openstack.org/22837113:39
*** Mudpuppy has joined #openstack-ansible13:47
*** mgoddard has joined #openstack-ansible13:49
*** KLevenstein has joined #openstack-ansible13:51
*** javeriak has quit IRC13:52
*** javeriak has joined #openstack-ansible13:55
*** openstackstatus has joined #openstack-ansible13:56
*** ChanServ sets mode: +v openstackstatus13:56
*** jmckind has joined #openstack-ansible13:58
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Various Documentation Updates  https://review.openstack.org/23042313:58
cloudnullmorning14:01
evrardjpgood morning cloudnull14:03
*** spotz_zzz is now known as spotz14:03
openstackgerritMerged openstack/openstack-ansible: Initial security documentation  https://review.openstack.org/22859114:04
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Limit the number of Ansible forks used to 10  https://review.openstack.org/22978614:05
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Removed unused variables from os_heat role  https://review.openstack.org/23045814:06
* mhayden tips his hat to cloudnull for the deuce14:08
cloudnullo/  : )14:08
*** shausy has quit IRC14:09
*** sigmavirus24_awa is now known as sigmavirus2414:09
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone to Liberty RC1  https://review.openstack.org/22691714:14
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Cinder to Liberty RC1  https://review.openstack.org/22720514:14
*** mgoddard_ has joined #openstack-ansible14:29
*** mgoddard has quit IRC14:32
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update all SHA's (except Horizon) to Liberty branch SHA's  https://review.openstack.org/22838514:38
*** alextricity has joined #openstack-ansible14:39
*** phalmos has joined #openstack-ansible14:44
*** gparaskevas has quit IRC14:51
odyssey4memattt can you please cast your eye on https://review.openstack.org/230935 and https://review.openstack.org/23052014:54
matttodyssey4me: yep14:56
*** dcreno has left #openstack-ansible14:59
*** javeriak has quit IRC15:02
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add developer docs entry for using tox  https://review.openstack.org/23104115:10
*** shausy has joined #openstack-ansible15:13
*** javeriak has joined #openstack-ansible15:13
*** mgoddard_ has quit IRC15:14
*** mgoddard has joined #openstack-ansible15:15
*** alejandrito has joined #openstack-ansible15:23
openstackgerritMerged openstack/openstack-ansible: Add maas external check for neutron metadata proxy  https://review.openstack.org/23063115:26
openstackgerritMerged openstack/openstack-ansible: Add install guide docs regarding config overrides  https://review.openstack.org/23036815:26
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Removes /opt/*openstack*/ pattern from teardown.  https://review.openstack.org/22855815:27
arbrandescloudnull: thanks for the reply, earlier. :)15:44
cloudnullanytime15:44
arbrandesAnother question: I'm upgrading from 11.2.2 to 11.2.3.  Is a repo-install.yml run + a setup-openstack.yml run enough?15:45
cloudnullrepo-build.yml + setup-openstack.yml15:45
arbrandescloudnull: awesome, thanks!15:45
*** mgoddard_ has joined #openstack-ansible15:45
cloudnullor repo-clone.yml for kilo15:45
arbrandescloudnull: yeah, I figured.  We're actually repo-cloning, for now.15:46
cloudnull that'll do it15:46
arbrandesWe were after the ARP spoofing protection for linuxbridge15:48
arbrandesNice that it just made it in for 11.2.3. :)15:48
*** mgoddard has quit IRC15:48
odyssey4mecloudnull what's the best way for an outdated clone to fetch all the new tags before checking out to the new tag?15:49
cloudnullgit fetch --all15:50
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add novnc console support  https://review.openstack.org/22819715:50
openstackgerritKevin Carter proposed openstack/openstack-ansible: Install spice-html5 from source  https://review.openstack.org/22646215:51
cloudnullmattt: can you give https://review.openstack.org/#/c/228197/8 a review. its the dependent patch for jmccrory 's update to the spice console change.15:52
cloudnullwhen you get a chance that i s15:52
arbrandesCool, I was going to report https://review.openstack.org/#/c/228197/7..8/playbooks/roles/os_nova/defaults/main.yml,unified, but glad to see it's already fixed. :)15:54
cloudnullarbrandes: did you give the novnc bits a go ? if so, did it work for you ?15:55
cloudnullbesides the service restart that is :)15:55
arbrandescloudnull: aside from that issue, there's just one other thing.  I'm digging up where exactly, just a sec.15:55
*** jmckind has quit IRC15:55
*** alejandrito has quit IRC15:55
matttcloudnull: oh derp, this is dependent isn't it ... i'll give that one a thorough test asap (which will most likely be tomorrow morning :( )15:55
*** jmckind has joined #openstack-ansible15:56
cloudnullno worries. thanks btw15:56
cloudnullif you have an env with the spice patch, you'll also have the novnc bits too.15:56
cloudnullwhen you give it a go, you'll have to change "nova_console_type=novnc"  which should do all of the needful for you.15:57
matttcloudnull: sweet, i do have an AIO which i used for the other patch so i'll leave this online for tomorrow15:58
cloudnullALL: the venv bits are just about done (still fiddeling with neutron) if anyone would like to give them a go it'd be much appreciated. https://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible+branch:master+topic:bp/enable-venv-support-within-the-roles,n,z15:58
matttanyway, afk for the moment15:58
cloudnullhave a good one mattt15:58
matttcloudnull: later man!15:59
*** shausy has quit IRC15:59
*** mgoddard has joined #openstack-ansible16:00
*** mgoddard_ has quit IRC16:00
*** galstrom_zzz is now known as galstrom16:01
arbrandescloudnull: see comment here, https://review.openstack.org/#/c/228197/8/playbooks/roles/os_nova/defaults/main.yml,unified16:02
arbrandesI worded the comment wrongly, though.  I meant to say, "the host the compute service is running on"16:03
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement neutron venv support  https://review.openstack.org/23072616:06
cloudnullarbrandes: looking now16:06
odyssey4mecloudnull how would someone scope the upgrade of the os-nova-install playbook to just, say, the compute nodes - or a particular node?16:06
odyssey4me(I'm documenting the minor upgrade process)16:06
cloudnullodyssey4me: openstack-ansible os-nova-install.yml --limit nova_compute --skip-tags 'nova-key'16:13
cloudnullyou'd want to skip the tag nova-key if you we're only upgrading a subset of nodes16:13
odyssey4meah, because it doesn't gather the facts from the appropriate node?16:14
cloudnullif you were upgrading and adding nodes: openstack-ansible os-nova-install.yml --limit nova_compute16:14
cloudnullodyssey4me:  yes16:14
odyssey4meok, and if it was a single node, would it be '--limit <nodename>' ?16:14
cloudnullyes16:14
cloudnullodyssey4me: openstack-ansible os-nova-install.yml --limit <node-name> --skip-tags 'nova-key'16:15
cloudnull^ single node upgrade16:15
cloudnullthe key tasks rekeys all nodes in an environment which is great for security but wont work unless all nodes are part of the run.16:16
*** alejandrito has joined #openstack-ansible16:16
*** vdo has quit IRC16:19
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add novnc console support  https://review.openstack.org/22819716:19
openstackgerritKevin Carter proposed openstack/openstack-ansible: Install spice-html5 from source  https://review.openstack.org/22646216:20
cloudnullarbrandes: updated based on your comments about setting the compute address for the proxy client16:20
arbrandescloudnull: awesome!16:22
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23107816:23
odyssey4mecloudnull ^ please check it16:24
odyssey4mearbrandes if you can check it too it'd be great :)16:24
* cloudnull checking16:24
arbrandesThe minor upgrade doc change?  Sure!16:24
*** skamithi has joined #openstack-ansible16:26
arbrandesLGTM.  It'll come in handy, thanks!16:27
*** skamithi has left #openstack-ansible16:27
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23107816:29
odyssey4me^ some minor tweaks cloudnull arbrandes16:29
cloudnullodyssey4me:  i added a comment on patchset 116:29
arbrandesodyssey4me: still looks good :)16:30
openstackgerritMerged openstack/openstack-ansible: Fix bashate violations  https://review.openstack.org/23052016:30
openstackgerritMerged openstack/openstack-ansible: Fix incorrect tox.ini config  https://review.openstack.org/23093516:30
cloudnull+1 looks good and will be super useful16:30
*** galstrom is now known as galstrom_zzz16:31
*** alejandrito has quit IRC16:37
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23107816:38
*** alop has joined #openstack-ansible16:38
odyssey4mecloudnull updated based on your feedback, thanks :)16:39
cloudnull+216:40
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Remove unused libvirt-bin file  https://review.openstack.org/23108416:41
odyssey4memhayden please backport https://review.openstack.org/228907 to the kilo branch16:45
* mhayden does the thing16:46
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Add confirmation to teardown.sh  https://review.openstack.org/23108616:46
*** cloudtrainme has joined #openstack-ansible16:47
*** javeriak has quit IRC16:47
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix bashate violations  https://review.openstack.org/23109016:52
palendaecloudnull: For https://bugs.launchpad.net/openstack-ansible/+bug/1497681, were you envisioning the pre task to basically do what's in https://review.openstack.org/#/c/224137/24/scripts/upgrade-utilities/playbooks/cinder-adjustments.yml ?17:00
openstackLaunchpad bug 1497681 in openstack-ansible "cinder udev entry has empty whitespace" [Medium,Confirmed] - Assigned to Nolan Brubaker (nolan-brubaker)17:00
openstackgerritMerged openstack/openstack-ansible: Removed unused variables from os_heat role  https://review.openstack.org/23045817:00
cloudnullpalendae:  yup17:00
palendaeOk17:01
cloudnullitll fix the udev whitespace issue without causing a container restart17:01
palendaeAh, ok. Was going to ask why we don't change the variable template, but that's a good reason17:01
cloudnullyea it cant hurt leaving juno as is.17:02
cloudnulland with that task it corrects the issue when upgrading17:02
*** javeriak has joined #openstack-ansible17:03
palendaeOk. So basically, the line's fine in isolation, but having the pre task clean up will ensure that we're not carrying 2 of the same rule and confusing lxc17:04
palendaeI was just removing the extra spacey line, but I'll modify my current work to put the 'right' one ine.17:04
palendaeone in...17:04
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updated the neutron l3HA tool to use v3  https://review.openstack.org/22905317:07
*** subscope has joined #openstack-ansible17:09
arbrandesA general container host question.  I see /openstack is used for logs and databases.  It looks like if I want to partition this host's file system, mounting /openstack from a separate LV is a good idea.  Does this sound right to you guys?17:09
cloudnullarbrandes:  yes17:09
cloudnullthats what we do in prodd17:09
cloudnull*prod17:09
arbrandescloudnull: excellent, thanks for the confirmation. :)17:09
cloudnullpalendae: palendae: yes the https://review.openstack.org/#/c/224137/24/scripts/upgrade-utilities/playbooks/cinder-adjustments.yml,cm should remove the line and replace it such that theres no duplication causing the cinder-volume in container upgrade failure.17:10
cloudnullsorry for the double name :)17:10
cloudnullobviously if its moved to the host its not a problem all together.17:11
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Various Documentation Updates  https://review.openstack.org/23042317:16
cloudnullodyssey4me: https://review.openstack.org/229053 <- adds v2 + v3 support17:16
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updated the neutron l3HA tool to use v3  https://review.openstack.org/22905317:17
cloudnull^ that one for real this time :)17:17
odyssey4mecloudnull ah, that looks good :)17:18
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updates the lint check to ignore templates  https://review.openstack.org/23110117:22
*** javeriak_ has joined #openstack-ansible17:23
*** javeriak has quit IRC17:25
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement ceilometer venv support  https://review.openstack.org/22921217:25
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement heat venv support  https://review.openstack.org/22922517:25
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement glance venv support  https://review.openstack.org/22922117:26
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement horizon venv support  https://review.openstack.org/22922617:27
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement keystone venv support  https://review.openstack.org/22951317:28
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement nova venv support  https://review.openstack.org/23072717:29
*** openstackgerrit has quit IRC17:31
*** openstackgerrit has joined #openstack-ansible17:31
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updates the lint check to ignore templates  https://review.openstack.org/23110117:33
*** alejandrito has joined #openstack-ansible17:34
*** javeriak has joined #openstack-ansible17:34
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updates the lint check to ignore templates  https://review.openstack.org/23110117:34
cloudnullopenstackgerrit: ^ updated to support tox too17:34
*** javeriak_ has quit IRC17:34
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement neutron venv support  https://review.openstack.org/23072617:37
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement cinder venv support  https://review.openstack.org/22546317:38
*** alejandrito has quit IRC17:38
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement swift venv support  https://review.openstack.org/23073317:39
cloudnullsorry s/ openstackgerrit/ odyssey4me /17:40
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement nova venv support  https://review.openstack.org/23072717:42
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement keystone venv support  https://review.openstack.org/22951317:42
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement horizon venv support  https://review.openstack.org/22922617:42
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement glance venv support  https://review.openstack.org/22922117:43
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement heat venv support  https://review.openstack.org/22922517:43
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement ceilometer venv support  https://review.openstack.org/22921217:43
cloudnullsorry for all the spam ...17:43
cloudnullbut im done rebasing for a bit :)17:43
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updates the lint check to ignore templates  https://review.openstack.org/23111717:48
*** jmckind is now known as jmckind_17:52
odyssey4memhayden and https://github.com/openstack/openstack-ansible-security is born :)18:01
*** openstackgerrit has quit IRC18:01
*** openstackgerrit has joined #openstack-ansible18:02
*** alop has quit IRC18:02
*** alop has joined #openstack-ansible18:04
cloudnullmhayden: typie typie make the role :)18:06
openstackgerritMerged openstack/openstack-ansible: Removes /opt/*openstack*/ pattern from teardown.  https://review.openstack.org/22855818:29
*** elo1 has joined #openstack-ansible18:57
*** elo has quit IRC18:59
mhaydenodyssey4me: well would you look at that19:06
mhaydenodyssey4me / cloudnull: so since we have something here -> https://github.com/rackerlabs/openstack-ansible-security , what is the best way to begin getting that upstreamed?19:07
mhaydenshould i do it in chunks?19:07
openstackgerritIan Cordasco proposed openstack/openstack-ansible: Limit the number of Ansible forks used to 10  https://review.openstack.org/22978619:07
mhaydenall together?19:07
cloudnullfor the initial pull , i'd do it in one big chunk , but that call is up to odyssey4me19:09
palendaePersonally I'd do it in a big pull if you already have work19:09
palendaeNot sure if it's useful to re-do the commit history just to move repos19:10
palendaeMy 2c, but like cloudnull said Jesse has the final word19:10
odyssey4memhayden yeah, one big commit - otherwise we have to review multiple bits19:11
*** jmckind_ is now known as jmckind19:18
mhaydenokay19:20
openstackgerritIan Cordasco proposed openstack/openstack-ansible: Add developer docs entry for using tox  https://review.openstack.org/23104119:21
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix bashate violations  https://review.openstack.org/23109019:22
rackertomodyssey4me: Hello sir, I'm looking at  https://review.openstack.org/#/c/229786/19:26
odyssey4merackertom yep19:26
rackertomI don't understand the purpose, I think19:26
odyssey4methe purpose of the patch?19:26
odyssey4meor of the forks parameter?19:26
rackertomThe change references an sshd limit, but the patch is happening on the client side19:26
rackertomThe patch changing the cap on the forks parameter19:26
odyssey4merackertom yes, it mentions the default sshd limit - which is what we're catering for on the lcient side19:27
odyssey4me*client19:27
rackertomSo is this only for AIO then?19:27
odyssey4mewe do not wish to screw with a deployer's sshd configuration19:27
rackertomCorrect. I would not suggest that.19:28
odyssey4menope, this is general - if a deployer chooses to change their host sshd config then they have the docs info on how to use a higher number of forks19:28
odyssey4meright now the capability is there, but no-one knows about it19:28
rackertomI'm simply suggesting we may want to make this HOST_COUNT*10, which for AIO is 1 and for other deployments is a sensible default number19:28
odyssey4methis is not what the testing has come up with19:29
palendaefwiw https://github.com/rcbops/rpc-openstack/blob/master/scripts/deploy.sh#L15, but I think our internal QE people set it to 10 all the time19:29
odyssey4meall testing has suggested using no more than 10 unless sshd config is changed19:29
odyssey4meit's not the amount of hosts because if you set forks=20 then ansible will try to use 20 connections to a host if it needs it19:29
rackertomBut again, sshd is for the ssh server side, and we're the client.19:29
palendaerackertom: Well, it seems to be specifically 'delegate_to' tasks19:30
*** sdake has joined #openstack-ansible19:30
rackertomBy hosts I mean metal boxes19:30
bgmccollumrackertom: i did lots of testing of this -- https://bugs.launchpad.net/openstack-ansible/+bug/1479812/comments/1019:30
openstackLaunchpad bug 1479812 in openstack-ansible trunk "ssh connection failures during deployments" [Low,In progress] - Assigned to Jesse Pretorius (jesse-pretorius)19:30
odyssey4meyes, so we're limiting to 10 all the time and informing people that they can do more if they want to19:30
palendaeWhich get hairy19:30
palendaeYeah,was going to reference bgmccollum's bug report19:30
palendaehttps://bugs.launchpad.net/openstack-ansible/+bug/1479812/comments/519:31
palendae^ that specifically refers to how delegate_to interacts with ansible's forks and sshd19:31
bgmccollumoh yeah...that too19:31
rackertomSo the problem is actually the frequency, not the count19:32
rackertomAnd again, it's frequency over the count of hosts. Combined with a sensible max cap of 10*hosts19:34
scarlislecloudnull qq about patch set 2419:38
cloudnullyes?19:39
scarlislewhy'd you remove the tags from juno-container-cleanup.sh.  Just wondering19:39
bgmccollumrackertom: if you have 5 hosts, and using 10*5 as you suggest would allow 50 forks. if your infra1 has lets say 25 containers, there is the possibility that infra1 will have 25 simultaneous connections to manage those containers via delegate_to, and go over the maxstartups lower limit. ansible doesn't evenly divide up the fork between hosts...19:39
openstackgerritMerged openstack/openstack-ansible: Add confirmation to teardown.sh  https://review.openstack.org/23108619:40
cloudnullscarlisle:  it was failing to build when libs were missing.19:40
scarlisleahh19:40
cloudnulli have a tester running for 5 upgrades ever 3 or so hours and it was all failing on that part.19:40
scarlisleok, gotcha.  Lab is almost back at 10.1.15 (playbooks are running ungodly slow today) so I might be able to start reviewing that patch set today19:41
cloudnullwithout the tags there it succeeded.19:41
cloudnullnice19:42
cloudnulllet me know ill be around all day19:42
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Removed unused variables from os_heat role  https://review.openstack.org/23114719:42
scarlislecool19:42
odyssey4meanyone care to do a quick backport of https://review.openstack.org/228558 ?19:43
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add install guide docs regarding config overrides  https://review.openstack.org/23114819:43
odyssey4memhayden is https://review.openstack.org/228591 applicable to kilo? if so, backport please19:44
* mhayden ganders19:44
odyssey4mesigmavirus24 backport of https://review.openstack.org/215357 to kilo please19:44
*** brice has quit IRC19:44
openstackgerritIan Cordasco proposed openstack/openstack-ansible: Remove containers from /etc/hosts during teardown  https://review.openstack.org/23114919:45
sigmavirus24^ odyssey4me19:45
odyssey4mecloudnull backport of https://review.openstack.org/229540 to kilo please19:45
odyssey4methanks sigmavirus24 :)19:45
mhaydenodyssey4me: it does apply, especially with the SSL backports from last week19:45
mhaydeni'll cherry pickerrrr19:45
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Initial security documentation  https://review.openstack.org/23115119:45
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updates ansible role requirements script name  https://review.openstack.org/23115319:48
cloudnullodyssey4me: done19:48
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Ensure cinder container udev line isn't duplicated  https://review.openstack.org/23115419:49
*** sdake has quit IRC19:59
mhaydenodyssey4me: for the openstack-ansible-security review, should all of the commits so far be rebased down?20:02
odyssey4memhayden you need to squash them all into one commit20:04
odyssey4meotherwise there'll be a ton of reviews in the queue20:04
sigmavirus24odyssey4me: looking at your docs patch, you have all those Home links in the docs, why? They render not so great: http://docs-draft.openstack.org/23/230423/7/check/gate-openstack-ansible-docs/e9c7441//doc/build/html/install-guide/index.html (for example)20:06
odyssey4mesigmavirus24 I agree, but those are existing links that I just cleaned up a little and made the dev docs work the same way.20:07
odyssey4meThere are a few things I'm not fond of in the current docs.20:08
sigmavirus24Ah okay20:08
odyssey4meBut it'll take time and more focused patches to fix. That patch is just a general fix for lots of horribleness. :p20:08
sigmavirus24misread the diffs20:09
odyssey4mean example - why a whole page for this? http://docs.openstack.org/developer/openstack-ansible/install-guide/install-foundation-run.html20:09
odyssey4mewe could consolidate and simplify a lot, and I'll do those in focused patches to make discussion easier20:09
sigmavirus24not sure consolidation is necessary in all cases but making things better wouldn't hurt20:10
openstackgerritMerged openstack/openstack-ansible: Various Documentation Updates  https://review.openstack.org/23042320:10
odyssey4meagreed - I just think that 3 lines on one page is silly - too much clickey clickey :p20:12
*** markvoelker has joined #openstack-ansible20:12
*** tlian2 has joined #openstack-ansible20:21
*** tlian has quit IRC20:24
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23107820:26
*** jmckind is now known as jmckind_20:27
*** CheKoLyN has joined #openstack-ansible20:30
*** agireud has joined #openstack-ansible20:31
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Initial import of openstack-ansible-security role  https://review.openstack.org/23116520:32
* mhayden gulps20:32
odyssey4memhayden can you please backport https://review.openstack.org/223742 ?20:33
odyssey4me(to kilo)20:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Add AIO build docs  https://review.openstack.org/23116720:33
mhaydenodyssey4me: woot20:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Initial import of openstack-ansible-security role  https://review.openstack.org/23116520:36
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add install guide docs regarding config overrides  https://review.openstack.org/23114820:37
*** jmckind_ is now known as jmckind20:37
mhaydenodyssey4me: so the review is in, but it's kinda large20:37
odyssey4memhayden that's fine - we can let it through as it's a seeding review20:38
odyssey4mecloudnull ^20:38
mhaydenthanks odyssey4me20:39
cloudnullyes?20:39
odyssey4memhayden you need to figure out what gating you'd like to have there - maybe a docs check? and an ansible syntax/lint check?20:39
mhaydencloudnull: dropped a tiny review in there for you20:39
mhaydenodyssey4me: absolutely -- is there an example from openstack-ansible i could follow?20:40
mhaydenhttps://github.com/openstack/openstack-ansible/blob/master/scripts/gate-check-lint.sh ?20:40
* cloudnull looking20:41
odyssey4memhayden nope - lemme clue you in20:42
odyssey4memhayden first, https://github.com/openstack/openstack-ansible/blob/master/tox.ini20:42
openstackgerritMiguel Alejandro Cantu proposed openstack/openstack-ansible: Removes /opt/*openstack*/ pattern from teardown.  https://review.openstack.org/23117320:43
odyssey4methat'll enable you to test locally - see https://review.openstack.org/231041 for how to execute tox for each purpose20:44
mhaydenodyssey4me: nice, thanks20:45
*** persia has quit IRC20:53
*** persia has joined #openstack-ansible20:54
*** persia has quit IRC20:54
*** persia has joined #openstack-ansible20:54
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Initial import of openstack-ansible-security role  https://review.openstack.org/23116520:54
mhaydenodyssey4me: first try ^^20:54
mhaydenshould i add a toxenv to run ansible-lint20:54
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix broken link in documentation  https://review.openstack.org/23118221:00
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update documentation for rename in cidr_networks  https://review.openstack.org/23118321:00
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fixing broken networking link  https://review.openstack.org/23118421:00
odyssey4memhayden once you have pep8/bashate we'll try and use the standard -infra gate check instead of the one we currently use21:01
mhaydensounds good -- pep8 works fine right now but i have no python in this repo ;)21:02
*** woodard_ has joined #openstack-ansible21:02
mhaydenother than setup.py21:02
mhaydenand no bash21:02
*** woodard has quit IRC21:05
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master  https://review.openstack.org/23118721:05
*** woodard_ has quit IRC21:06
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master  https://review.openstack.org/23118721:08
mhaydenodyssey4me: i'm headed out but will probably be online later to add things if needed21:09
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Adding docs for configuring horizon  https://review.openstack.org/23119021:09
javeriakodyssey4me, sorry for the late convergence on the bp commit, was just butting my head over different ansible/jinja limitations atm, would really appreciate some early reviews, everyones pushing for quick PG+RAX kilo support :) https://review.openstack.org/23118721:13
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Adding docs for configuring horizon  https://review.openstack.org/23119321:15
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Various Documentation Updates  https://review.openstack.org/23119421:19
*** phalmos has quit IRC21:24
openstackgerritMiguel Alejandro Cantu proposed openstack/openstack-ansible: Add OpenID Connect RP Apache Module[WIP]  https://review.openstack.org/22661721:29
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Various Documentation Updates  https://review.openstack.org/23119421:30
*** Mudpuppy has quit IRC21:32
openstackgerritMiguel Alejandro Cantu proposed openstack/openstack-ansible: Add OpenID Connect RP Apache Module[WIP]  https://review.openstack.org/22661721:32
openstackgerritMiguel Alejandro Cantu proposed openstack/openstack-ansible: Add OpenID Connect RP Apache Module  https://review.openstack.org/22661721:33
*** subscope has quit IRC21:33
*** harlowja has quit IRC21:59
*** sigmavirus24 is now known as sigmavirus24_awa22:06
*** openstackgerrit has quit IRC22:16
*** openstackgerrit has joined #openstack-ansible22:16
*** spotz is now known as spotz_zzz22:34
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup  https://review.openstack.org/23121422:40
*** jmckind has quit IRC22:43
*** javeriak has quit IRC22:44
openstackgerritMiguel Alejandro Cantu proposed openstack/openstack-ansible: Add OpenID Connect RP Apache Module  https://review.openstack.org/22661722:48
*** harlowja has joined #openstack-ansible22:48
*** cloudtrainme has quit IRC22:54
*** CheKoLyN has quit IRC23:10
openstackgerritMerged openstack/openstack-ansible: Removes /opt/*openstack*/ pattern from teardown.  https://review.openstack.org/23117323:25
*** pradk has quit IRC23:30
*** KLevenstein has quit IRC23:33
*** Mudpuppy has joined #openstack-ansible23:44
*** scarlisle has quit IRC23:46
*** galstrom_zzz is now known as galstrom23:50
*** mgoddard_ has joined #openstack-ansible23:51
*** mgoddard has quit IRC23:52
*** mgoddard__ has joined #openstack-ansible23:52
*** mgoddard_ has quit IRC23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!