Friday, 2016-03-11

*** skamithi14 has joined #openstack-ansible00:02
*** jguy_ has quit IRC00:02
*** johnmilton has joined #openstack-ansible00:03
*** jguy_ has joined #openstack-ansible00:03
*** skamithi13 has quit IRC00:04
*** johnmilton has quit IRC00:08
*** galstrom_zzz is now known as galstrom00:18
*** johnmilton has joined #openstack-ansible00:21
*** scarlisle has quit IRC00:21
*** openstackgerrit_ has quit IRC00:23
*** openstackgerrit_ has joined #openstack-ansible00:24
*** bapalm has quit IRC00:24
*** sdake has joined #openstack-ansible00:29
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: Test basic structure of dynamic inventory output  https://review.openstack.org/28757100:39
*** bapalm has joined #openstack-ansible00:41
*** ErwanJ has quit IRC00:46
stevellejmccrory: I think if the dependencies were listed in an order that meant the dependent is always listed below the dependency those might go away.00:46
stevelledidn't test it00:46
jmccrorystevelle: sorry, have a lot of tabs open. which review is that?00:47
stevellejmccrory: you asked about http://logs.openstack.org/86/290486/2/check/gate-openstack-ansible-dsvm-commit/f120f2d/console.html#_2016-03-10_20_25_15_47400:47
stevelleI'm having irc problems today00:47
stevellejust now seeing that msg00:47
*** openstackgerrit_ has quit IRC00:48
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server: [DOCS] Cleanup the role docs for consistency and clarity  https://review.openstack.org/29060200:49
jmccroryah right, that could be it00:49
*** openstackgerrit_ has joined #openstack-ansible00:49
stevellethe alpha order is nice but I noticed that those messages are common since00:49
stevelleI don't remember as many before00:50
*** galstrom is now known as galstrom_zzz00:52
*** johnmilton has quit IRC00:59
*** automagically_ has joined #openstack-ansible01:00
*** skamithi13 has joined #openstack-ansible01:03
jmccrorystevelle: yep, that's it. no errors with pip_install and pip_lock_down at the top. probably not worth messing with the alpha order for harmless log, but interesting that errors are delayed like that01:04
*** skamithi13 has quit IRC01:04
*** skamithi13 has joined #openstack-ansible01:05
*** skamithi14 has quit IRC01:07
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: Removing openstack_environment.yml. It is no longer useful.  https://review.openstack.org/28869801:16
*** furlongm has quit IRC01:20
*** skamithi13 has quit IRC01:24
*** dmsimard|pto has quit IRC01:31
*** galstrom_zzz is now known as galstrom01:35
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: Enable SSL termination for all services  https://review.openstack.org/27719901:37
*** sdake has quit IRC01:40
openstackgerritMerged openstack/openstack-ansible: Remove unused galera_address from playbook  https://review.openstack.org/29077301:42
*** weezS has quit IRC01:58
*** galstrom is now known as galstrom_zzz02:01
*** bapalm has quit IRC02:11
*** asettle has quit IRC02:15
*** asettle has joined #openstack-ansible02:15
*** bapalm has joined #openstack-ansible02:16
*** scarlisle has joined #openstack-ansible02:31
*** fawadkhaliq has quit IRC02:32
*** Guest38484 is now known as mfisch02:33
*** mfisch is now known as Guest1374902:34
*** raddaoui has joined #openstack-ansible02:35
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_horizon: Enable functional convergence testing  https://review.openstack.org/29003402:36
*** sdake has joined #openstack-ansible02:51
*** sdake_ has joined #openstack-ansible02:55
*** sdake has quit IRC02:56
*** raddaoui has quit IRC02:56
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_horizon: Enable functional convergence testing  https://review.openstack.org/29003403:02
*** sdake_ has quit IRC03:03
*** cemmason has joined #openstack-ansible03:07
*** izaakk has quit IRC03:07
*** cemmason has quit IRC03:15
*** cemmason has joined #openstack-ansible03:15
*** cemmason is now known as christy03:15
*** thorst__ has quit IRC03:20
*** thorst has joined #openstack-ansible03:20
*** thorst has quit IRC03:29
*** krotscheck has quit IRC03:30
*** krotscheck has joined #openstack-ansible03:31
*** sdake has joined #openstack-ansible03:42
*** automagically_ has quit IRC04:09
*** jguy_ has quit IRC04:10
*** sdake has quit IRC04:12
*** scarlisle has quit IRC04:14
openstackgerritMerged openstack/openstack-ansible: Fix: AODH sort rabbitmq hosts pre-task should use 'aodh_all' group  https://review.openstack.org/29072504:16
*** sdake has joined #openstack-ansible04:23
*** thorst has joined #openstack-ansible04:26
*** sdake_ has joined #openstack-ansible04:27
*** sdake has quit IRC04:29
*** thorst has quit IRC04:34
*** sdake_ has quit IRC04:48
*** aslaen has quit IRC04:52
*** javeriak has joined #openstack-ansible04:53
*** ErwanJ has joined #openstack-ansible04:56
*** lihg has joined #openstack-ansible04:59
*** lihg_ has joined #openstack-ansible04:59
*** lihg has quit IRC04:59
*** lihg_ has quit IRC04:59
*** ErwanJ has quit IRC05:00
*** ErwanJ has joined #openstack-ansible05:01
*** lykinsbd has joined #openstack-ansible05:10
*** javeriak has quit IRC05:14
*** lykinsbd has quit IRC05:15
*** thorst has joined #openstack-ansible05:32
*** ErwanJ has quit IRC05:35
*** andrei__ has joined #openstack-ansible05:38
*** thorst has quit IRC05:39
*** javeriak has joined #openstack-ansible05:44
*** javeriak_ has joined #openstack-ansible05:47
*** javeriak has quit IRC05:48
*** mgoddard has quit IRC05:56
*** bryan_att has quit IRC05:56
*** cfarquhar has quit IRC05:56
*** krotscheck has quit IRC06:01
*** mgoddard has joined #openstack-ansible06:02
*** bryan_att has joined #openstack-ansible06:02
*** cfarquhar has joined #openstack-ansible06:02
*** krotscheck has joined #openstack-ansible06:09
*** javeriak_ has quit IRC06:12
*** openstackgerrit_ has quit IRC06:17
*** cloudtrainme has joined #openstack-ansible06:17
*** admin0 has joined #openstack-ansible06:17
*** cloudtrainme has quit IRC06:18
*** openstackgerrit_ has joined #openstack-ansible06:18
*** admin0 has quit IRC06:20
*** phiche has joined #openstack-ansible06:26
*** thorst has joined #openstack-ansible06:37
openstackgerritMerged openstack/openstack-ansible: Clarify run-upgrade.sh failure message  https://review.openstack.org/29070706:37
*** thorst has quit IRC06:43
*** javeriak has joined #openstack-ansible06:45
*** andrei__ has quit IRC06:51
*** unlaudable has quit IRC06:51
openstackgerritMerged openstack/openstack-ansible-pip_lock_down: Remove allow-all-external from pip configuration  https://review.openstack.org/29111306:53
*** phiche has quit IRC06:57
openstackgerritMerged openstack/openstack-ansible-galera_client: Ensure apt-transport-https is present before installing from secure repos  https://review.openstack.org/29137707:00
openstackgerritMerged openstack/openstack-ansible-os_neutron: Check for a different version of LBaaS agent before stop  https://review.openstack.org/29077207:03
*** phiche has joined #openstack-ansible07:04
*** asettle has quit IRC07:07
*** asettle has joined #openstack-ansible07:08
bsvMornings o/07:09
*** mgoddard has quit IRC07:10
*** bryan_att has quit IRC07:10
*** cfarquhar has quit IRC07:10
openstackgerritMerged openstack/openstack-ansible-os_glance: Account for oslo_config deprecations in glance config templates  https://review.openstack.org/29081107:11
*** asettle has quit IRC07:18
*** mgoddard has joined #openstack-ansible07:21
*** bryan_att has joined #openstack-ansible07:21
*** cfarquhar has joined #openstack-ansible07:21
openstackgerritMerged openstack/openstack-ansible-galera_server: Ensure apt-transport-https is present before installing from secure repos  https://review.openstack.org/29139807:27
*** javeriak_ has joined #openstack-ansible07:32
*** javeriak has quit IRC07:33
*** mikelk has joined #openstack-ansible07:40
odyssey4mejmccrory stevelle nice find! perhaps we should note that as a known issue?07:40
odyssey4mebsv morning! did you guys manage to get beyond the network comms issues?07:40
*** thorst has joined #openstack-ansible07:41
*** asettle has joined #openstack-ansible07:45
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_client: Adding Vagrantfile for local developer testing  https://review.openstack.org/28753407:46
*** mgoddard has quit IRC07:47
*** bryan_att has quit IRC07:47
*** cfarquhar has quit IRC07:47
*** thorst has quit IRC07:49
bsvodyssey4me: nope, not yet07:49
*** asettle has quit IRC07:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Removing openstack_environment.yml. It is no longer useful.  https://review.openstack.org/28869807:50
bsvodyssey4me: focusing on the Virtual Connect config at the moment.07:54
*** mgoddard has joined #openstack-ansible07:54
*** bryan_att has joined #openstack-ansible07:54
*** cfarquhar has joined #openstack-ansible07:54
odyssey4mebsv could you take a look through https://review.openstack.org/291256 considering that it relates to a bug you filed? :)07:54
odyssey4mefor rendered results, you can look here: http://docs-draft.openstack.org/56/291256/2/check/gate-openstack-ansible-docs/6638b8b//doc/build/html/install-guide/overview-requirements.html07:55
bsvTalked with HPE yesterday, they had some ideas about what could cause this. Scheduled a tech on monday 08:30 to review the Virtual Connect configuration.07:55
javeriak_odyssey4me there are 3 instances of the lbaas_agents running right? is haproxy working on top?07:57
odyssey4meo/ javeriak_ I'm not sure I understand the question.07:58
bsvodyssey4me: much better :)07:58
bsvit was hlkv6 who filed that bug, just asked him to look at the link you sent.07:59
openstackgerritMerged openstack/openstack-ansible: Check local and upstream repo for pip before using pypi  https://review.openstack.org/29112707:59
javeriak_odyssey4me o/, just trying to figure out the architecture, need to read up on it ofc, but was wondering if having those multiple instances (i assume one runs in each of the neutron-agents) containers requires haproxy to redirect any kind of info on top; as in they arent proper backends right?08:00
hlkv6goodmorning08:00
openstackgerritMerged openstack/openstack-ansible: Docs/Reno: Conditional nova UID/GID  https://review.openstack.org/29012208:00
odyssey4meo/ hlkv608:00
odyssey4mejaveriak_ ok, I'm still not getting the question entirely... what instances of what exactly? haproxy (or the LB in the back-end architecture) is used to load balance access to the OpenStack API's, Horizon, MariaDB... that should be it08:02
hlkv6odyssey4me: re bug/1554626 - nothing is mentioned about partitioning, but looks very good otherwise!08:02
odyssey4mejaveriak_ the Neutron agents all talk to the Neutron server through RabbitMQ in a defined RPC protocol08:02
odyssey4mehlkv6 good point - I think we may need to dig some info/recommendations out for that08:03
javeriak_odyssey4me sorry for the confusion, i was talking about the neuron_lbaas_agent; actually my query is that we have a lbaas feature implementation in plumgrid that requires running them on each of the compute nodes. Is that something I can do. I mean I know I can probably change around the config to go install in compute_hosts instead. But I wouldnt be messing with your reefernce architture would i?08:04
odyssey4mejaveriak_ ah, now I understand08:04
hlkv6for a PoC having a single large / is fine, but for production deployment all the usual partitioning is recommended08:05
javeriak_odyssey4me oh ofcourse, the neurton agnets arent proper backends for haproxy08:05
odyssey4meok, so the implementation there is now uses its own instance of haproxy for each project and runs in the agents container08:06
odyssey4mebut where it runs should still be in its own group - if not, we should fix that08:06
odyssey4mebecause then the group can always be allocated elsewhere08:06
javeriak_odyssey4me yes exactly; i think the current group is tied to he neutron_agents one atm; i need to check though, I'd like to be able to reassign that to the computes though08:07
*** unlaudable has joined #openstack-ansible08:08
odyssey4mejaveriak_ I'm hunting for a patch which changed things to make them more flexible - gimme a minute08:10
*** admin0 has joined #openstack-ansible08:12
odyssey4mejaveriak_ ah, it's merged already - and lbaas follows the same pattern: https://github.com/openstack/openstack-ansible-os_neutron/commit/f1b82f43c4fdc85fe465ffbd4aa1a061eabab48d / https://github.com/openstack/openstack-ansible-os_neutron/commit/24b824b15c90dd7fe032bccc869538602849b17c#diff-7eeda618087b49ae876084ab6c73fdbb08:13
odyssey4mejaveriak_ the initial allow neutron agents to move around patch was done by logan- :)08:14
*** admin0_ has joined #openstack-ansible08:15
javeriak_odyssey4me ofcourse I remember that patch !08:16
odyssey4meI'm not sure exactly how he does the re-allocation, but as far as I recall he does run the dhcp agents on the compute nodes or something like that08:16
*** admin0 has quit IRC08:16
*** admin0_ is now known as admin008:16
odyssey4meI expect that it may be through the use of customised env.d files (this is exactly why they're in user space). :)08:17
javeriak_odyssey4me perfect, i know how to move it around now. So there 's no technical objection you might have on us doing that in prod though?08:17
odyssey4mejaveriak_ if it's an environment where plumgrid networking has been implemented, I think it makes sense to make use of the plumgrid load balancing service if there is one.08:18
odyssey4meI expect that it will work far better that the current base implementation using haproxy..08:18
odyssey4mejaveriak_ in fact, you should chat to mhayden and Apsu when they come online - they're the ones who've been doing all the leg work on LBaaS08:19
javeriak_odyssey4me okay perfect, thanks a lot. let me catch them when they're online later. And i know ive been absent from the community for a while, promise i'm coming back soon :); just need to get some projects out of the way08:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Gate: Use OpenStack-CI apt mirrors  https://review.openstack.org/29159708:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Gate: Use OpenStack-CI apt mirrors  https://review.openstack.org/29159808:21
*** winggundamth has joined #openstack-ansible08:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Allow a list of files to be copied into the container cache  https://review.openstack.org/29000508:23
*** jamielennox is now known as jamielennox|away08:23
*** admin0 has quit IRC08:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Gate: Use OpenStack-CI apt mirrors  https://review.openstack.org/29159808:24
*** admin0 has joined #openstack-ansible08:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Set apt sources to use a configured list of components  https://review.openstack.org/28983508:25
*** unlaudable has quit IRC08:33
*** pcaruana has joined #openstack-ansible08:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Gate: Ensure that AIO container apt components match the host  https://review.openstack.org/29160108:43
*** thorst has joined #openstack-ansible08:46
*** unlaudable has joined #openstack-ansible08:48
*** thorst has quit IRC08:54
bsvodyssey4me: ping08:54
* admin0 intercepted the ping .. sends a fake pong08:54
bsv:p08:55
*** javeriak_ has quit IRC08:55
bsvWe use 12.0.7 in the git checkout, but it tries to install MySQL-python with another version (--find-links=\"http://10.50.41.50:8181/os-r08:57
bsveleases/12.0.8\"08:57
bsv)08:57
bsvodyssey4me: hmm standby, someone might have pulled another tag ;) investigating.08:58
odyssey4me:)09:00
admin0:D09:01
admin0bsv: i do a manual install and then move on :D09:01
bsvadmin0: yeah, that ansible stuff... so anoying ;)09:02
hlkv6how often does someone run the complete OSA install? is it done in a automated system somewhere?09:12
*** neilus has joined #openstack-ansible09:13
hlkv6bsv: nobody pulled another tag, we did git checkout 12.0.7 and started09:13
odyssey4mehlkv6 an install is typically done once per site/region, and is typically done by hand unless the deployer has some sort of automation09:14
odyssey4meonce it's deployed, you may execute it again per tag - an example of what you might do is here: http://docs.openstack.org/developer/openstack-ansible/install-guide/app-minorupgrade.html09:14
odyssey4methen for major version upgrades you'd possibly make use of the upgrade scripts, for example from kilo to liberty: http://docs.openstack.org/developer/openstack-ansible/liberty/upgrade-guide/index.html09:15
*** electrofelix has joined #openstack-ansible09:15
odyssey4me(that section is still being edited, so it's a little thin right now)09:15
hlkv6ok09:16
*** admin0 has quit IRC09:18
*** cristicalin has joined #openstack-ansible09:19
*** admin0 has joined #openstack-ansible09:28
*** permalac has joined #openstack-ansible09:37
*** permalac has quit IRC09:37
*** permalac_ has joined #openstack-ansible09:38
*** phiche has quit IRC09:41
*** phiche1 has joined #openstack-ansible09:41
*** neilus has quit IRC09:44
*** neilus has joined #openstack-ansible09:44
*** cristicalin has quit IRC09:46
*** thorst has joined #openstack-ansible09:51
*** thorst has quit IRC09:59
andrei_Hi, can someone discuss ideas behind logging in openstack-ansible project?10:05
*** unlaudable has quit IRC10:06
odyssey4meandrei_ sure, what's up?10:10
*** Mudpuppy has quit IRC10:14
admin0andrei_: in the most lowest level .. the idea behind it was to send logs to a central server :D10:24
andrei_all containers get rsyslog-client role which is described under /etc/ansible/roles/rsyslog_client. If one wants to use TCP instead of UDP for example, he should change rsyslog_client_udp_reception from true to false and vice versa for syslog_client_tcp_reception in /etc/ansible/roles/rsyslog_client/defaults/main.yml. There is a file ansible-role-requirements.yml containing list of all repos to be downloaded and one can find https://git.openstac10:24
andrei_k.org/openstack/openstack-ansible-rsyslog_client in this file. Is there any workflow how can I replace client_logging role with custom one?10:24
odyssey4meandrei_ any changes to the defaults can be set in the user_variables.yml file in /etc/openstack_deploy - ie if you want to change rsyslog_client_udp_reception and syslog_client_tcp_reception you can set the variables in user_variables.yml - the idea is to keep customisations to settings out of the code tree and in user space10:27
odyssey4mesecondly do you want to have your syslog traffic go somewhere else (replace the rsyslog server role entirely), or do you want to send rsyslog traffic somewhere else in addition to the rsyslog server?10:28
odyssey4memy personal advice would be to keep the logging server as a low tech fallback to whatever your current logging target is10:28
*** permalac_ has quit IRC10:29
*** neilus1 has joined #openstack-ansible10:29
odyssey4mean example of user_variables.yml additions to send rsyslog traffic to something like splunk or loggly is explained in https://github.com/openstack/openstack-ansible-rsyslog_client/blob/master/defaults/main.yml#L56-L7310:30
andrei_If I define 3 log_hosts in openstack_user_config.yml all logs are sent to all rsyslog-servers(containers). I've changed template for rsyslog client to use rsyslog failover features instead of parallel queues. I'm not sure that openstack-ansible will use my own template and custom settings (like rsyslog_client_udp_reception)10:33
*** neilus has quit IRC10:33
andrei_As far as I remember in ansible lower level variables has higher priority then global vars10:33
odyssey4meandrei_ if you can submit a patch to improve how we do these and provide the failover, that'd be great!10:35
odyssey4meit might need some tweaking to generalise it, but we can do that in the patch review process10:35
odyssey4mewe may also be able to help you see how you can do this without needing to tweak things10:36
openstackgerritMerged openstack/openstack-ansible: Allow a list of files to be copied into the container cache  https://review.openstack.org/29000510:36
odyssey4mebut yes, the current paradigm is to only have one log host specified10:37
odyssey4meit's kinda assumed that if you want some sort of redundant log storage that you'd have something like an elasticsearch cluster with a syslog listener, then you'd point rsyslog client there as an additional target10:38
odyssey4mewe should probably document that as a recommendation <--- mhayden spotz10:38
bsvodyssey4me: dont use ES for persistent storage <---- bsv points out10:39
odyssey4mebsv :) sure, I'm not saying that's the only solution - I'm just saying that usually if you want something persistent and redundant then you'd have something else to do it... not just a standard syslog server10:40
bsvyeah, stream your logs to some sort of persistent storage, then let your ES-cluster read from that.10:41
andrei_I can try. Nevertheless I wrote it for 3 datacenters(3 rsyslog servers). Template should be somehow overwritten automagically if user has 10 datacenters and wants more log servers. Idea was: all containers within one datacenter send logs to primary _for_this_datacenter_ log server and only if sending fails failover to secondary, and so on datacenter(if all fails - write to buffer). Every rsyslog-server can forward logs further to splunk, logsta10:44
andrei_ash or whatever. Now it's working great - all logs over all servers. But I think it can be better :)10:44
odyssey4meah andrei_ - that sounds good... part of the work in the next cycle (once Mitaka is released) will be to reconsider a lot of our assumptions to cater for multiple DC's in the OpenStack concept of Regions, and also to include the concept of Cells (assuming Nova's Cells v2 is ready)10:45
odyssey4mefor now we kinda assume that each inventory is in a single DC10:45
-openstackstatus- NOTICE: Gerrit is going to be restarted due to bad performance10:51
*** ChanServ changes topic to "Gerrit is going to be restarted due to bad performance"10:51
*** thorst has joined #openstack-ansible10:56
*** ChanServ changes topic to "Mitaka Release Critical Bugs: https://goo.gl/ipD9BL || Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs"10:57
-openstackstatus- NOTICE: Gerrit has been restarted successfully10:57
*** asettle has joined #openstack-ansible10:57
*** asettle has quit IRC10:57
*** thorst has quit IRC11:04
*** tiagogomes has joined #openstack-ansible11:08
*** tiagogomes_ has quit IRC11:11
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Add functional convergence test for os-swift role  https://review.openstack.org/29129011:11
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift_sync: Add functional tests for os_swift_sync role  https://review.openstack.org/29129611:12
*** automagically_ has joined #openstack-ansible11:26
*** javeriak has joined #openstack-ansible11:27
*** jguy_ has joined #openstack-ansible11:27
*** unlaudable has joined #openstack-ansible11:34
*** andrei__ has joined #openstack-ansible11:36
openstackgerritgit-harry proposed openstack/openstack-ansible-galera_server: Use var galera_cluster_members to identify cluster  https://review.openstack.org/29072911:36
andymccrhttps://review.openstack.org/#/c/291290/ fixed11:39
odyssey4meandymccr it works! :D11:43
*** thorst has joined #openstack-ansible11:46
andymccrran into some random issues (like the ip range stuff) but yeah finally11:49
*** thorst has quit IRC11:55
*** thorst has joined #openstack-ansible11:56
*** mathlin has quit IRC11:56
*** tiagogomes has quit IRC11:58
*** johnmilton has joined #openstack-ansible12:00
logan-javeriak odyssey4me: yep.. dhcp agents on the compute nodes.. this is what I'm using that patch for: https://github.com/Logan2211/openstack-ansible/commit/e79ce3e95850a1d4a4539ba56dab9b27657e93ad?diff=unified#diff-71ef2e229d19f86ad8004c73ecbc506f12:01
*** jguy_ has quit IRC12:04
*** thorst has quit IRC12:05
*** tiagogomes has joined #openstack-ansible12:10
*** Mudpuppy has joined #openstack-ansible12:14
openstackgerritgit-harry proposed openstack/openstack-ansible-galera_server: Use var galera_cluster_members to identify cluster  https://review.openstack.org/29072912:14
*** sdake has joined #openstack-ansible12:16
*** Mudpuppy has quit IRC12:19
*** andrei__ has quit IRC12:22
*** sdake has quit IRC12:23
*** jguy_ has joined #openstack-ansible12:25
*** admin0 has quit IRC12:29
*** jguy_ has quit IRC12:31
mhaydenmornin'12:32
openstackgerritgit-harry proposed openstack/openstack-ansible-galera_server: Use var galera_cluster_members to identify cluster  https://review.openstack.org/29072912:34
*** automagically_ has quit IRC12:35
*** admin0 has joined #openstack-ansible12:36
admin0+1 to odyssey4me for bringing up the regions :D12:36
* admin0 waiting for ages for this :D12:36
*** andrei__ has joined #openstack-ansible12:36
*** Bofu2U has joined #openstack-ansible12:36
*** sdake has joined #openstack-ansible12:36
*** thorst has joined #openstack-ansible12:40
*** javeriak has quit IRC12:47
*** retreved has joined #openstack-ansible12:49
odyssey4melol admin012:51
admin0i am :D12:51
admin0i am even creating blogs to put all general questions out here, so that you guys can focus more on doing stuff :D12:51
admin0out of here*12:51
admin0and give me regions :D12:51
admin0\0/12:51
odyssey4meI have made some notes of what to work through for the multi-region deployment, but I doubt I'll have time before the summit to actually get down to it. I might, but I doubt it - getting the release done is more important.12:52
admin0no hurry .. if its in your radar and notes, its good enough12:52
*** spotz is now known as spotz_zzz12:55
*** jguy_ has joined #openstack-ansible13:01
*** jguy_ has quit IRC13:01
*** sdake has quit IRC13:10
*** sdake has joined #openstack-ansible13:11
*** saneax has joined #openstack-ansible13:13
*** lykinsbd has joined #openstack-ansible13:13
*** phiche1 has quit IRC13:14
*** jguy_ has joined #openstack-ansible13:17
*** lykinsbd has quit IRC13:18
*** sdake_ has joined #openstack-ansible13:20
*** ametts has joined #openstack-ansible13:22
*** sdake has quit IRC13:23
*** phiche has joined #openstack-ansible13:34
*** keedya has joined #openstack-ansible13:36
*** andrei__ has quit IRC13:52
*** adac has joined #openstack-ansible13:59
*** sdake_ has quit IRC13:59
adacHi there!13:59
odyssey4meo/ adac14:00
admin0hello adac14:00
*** Bjoern_ has joined #openstack-ansible14:01
*** sdake has joined #openstack-ansible14:05
*** andrei__ has joined #openstack-ansible14:17
*** scarlisle has joined #openstack-ansible14:18
*** sdake_ has joined #openstack-ansible14:19
*** sdake has quit IRC14:21
*** iurygregory has quit IRC14:26
adacGuys, while running "scripts/bootstrap-ansible.sh" (For the AIO with standard settings) I do get this error: https://gist.github.com/anonymous/482e6929d35c827d4a6e Can this be ignored?14:27
*** mgoddard has quit IRC14:29
*** iurygregory has joined #openstack-ansible14:29
*** andrei__ has quit IRC14:29
odyssey4meadac yes14:30
odyssey4meit falls back to isolated mode and succeeds in the last few lines14:31
adacodyssey4me, kk cool!14:31
openstackgerritMerged openstack/openstack-ansible-ironic: Setup tftp for all scenarios  https://review.openstack.org/29020614:32
*** mgoddard has joined #openstack-ansible14:39
*** saneax is now known as saneax_AFK14:43
*** ShannonM has joined #openstack-ansible14:50
*** Mudpuppy has joined #openstack-ansible14:51
*** jthorne has joined #openstack-ansible14:54
*** Guest13749 is now known as mfisch14:58
*** KLevenstein has joined #openstack-ansible14:58
*** mfisch is now known as Guest8807414:59
*** waverider has joined #openstack-ansible15:00
*** Guest88074 is now known as mfisch15:01
*** mfisch has quit IRC15:01
*** mfisch has joined #openstack-ansible15:01
*** galstrom_zzz is now known as galstrom15:01
*** galstrom is now known as galstrom_zzz15:02
*** automagically_ has joined #openstack-ansible15:03
*** automagically_ has left #openstack-ansible15:03
*** sigmavirus24_awa is now known as sigmavirus2415:06
automagicallySeeing at least one check failing with some strang logging out of the Glance API: http://logs.openstack.org/98/288698/6/check/gate-openstack-ansible-dsvm-commit/39e70c3/logs/aio1_glance_container-a7d2ece4/glance-api.log15:06
automagicallyAnyone else seeing that ^15:06
*** christy has quit IRC15:08
*** cemmason has joined #openstack-ansible15:09
*** ErwanJ has joined #openstack-ansible15:09
automagicallyRelated to https://bugs.launchpad.net/glance/+bug/1412798 perhaps15:14
openstackLaunchpad bug 1412798 in Glance "Typo in section header in config silently disables all config parsing" [Medium,Fix released] - Assigned to Hassaan Pasha (hassaanp)15:14
automagicallyMore digging required15:14
odyssey4meautomagically oh, that looks fun15:16
odyssey4meit's a little odd that it's suddenyl started happening15:16
automagicallyWell, there were config file changes in the glance role recently15:16
automagicallyI’ll track it down now15:16
*** admin0 has quit IRC15:17
*** admin0 has joined #openstack-ansible15:21
*** spotz_zzz is now known as spotz15:26
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_glance: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29176415:27
automagicallyodyssey4me: What is the process to bump SHAs? I ask because https://review.openstack.org/#/c/277199/ won’t pass check/gate until we bump the Heat SHA15:27
odyssey4mewe can bump the SHA's, but then we fall into a bundle of hell15:28
odyssey4mewe already know that a keystone SHA bump will break things15:28
automagicallyWell, you really made that sound attractive ;)15:28
automagicallySo presumably, they will bump for Mitake RC1 next?15:28
odyssey4methe diea was to get all the functional testing in the roles done before we embark on that adventure15:28
odyssey4meyep15:28
automagicallyCool15:28
*** sdake_ has quit IRC15:29
automagicallyJust looking to understand timing more than anything15:29
odyssey4mein the role tests that can already be done to identiy problem specific to the roles15:29
odyssey4meI would recommend starting there15:29
automagicallyGood point15:29
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_keystone: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29176715:30
*** automagically_ has joined #openstack-ansible15:30
*** sdake has joined #openstack-ansible15:31
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_cinder: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29177015:35
automagically_o/ mhayden15:35
automagically_Duh, sorry, your mornin’ was a long time ago….apparently I need more coffee15:36
odyssey4meI'm about ready for a drink. :p15:36
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_aodh: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29177615:40
*** raddaoui has joined #openstack-ansible15:44
*** jaypipes is now known as leakypipes15:45
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_cinder: Remove the messaging tasks from the role  https://review.openstack.org/28810315:49
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_cinder: Remove the messaging tasks from the role  https://review.openstack.org/28810315:50
*** ron___ has joined #openstack-ansible15:53
*** unlaudable has quit IRC15:57
*** admin0 has quit IRC15:58
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Expose and set a default fallocate_reserve value  https://review.openstack.org/28791215:58
*** permalac has joined #openstack-ansible16:01
*** kencjohnston has joined #openstack-ansible16:03
*** waverider has quit IRC16:03
automagically_Found the glance issue effecting the AIO, working on a fix with functional testing now16:04
*** thorst is now known as thorst_afk16:06
*** winggundamth has quit IRC16:06
odyssey4meawesome, thanks automagically_16:11
*** ErwanJ has quit IRC16:12
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Fixing Glance API startup failure and adding functional tests  https://review.openstack.org/29179316:15
automagically_odyssey4me: ^ the fix16:15
odyssey4meautomagically_ so 'oslo_messaging_notifications' is not a real heading?16:17
odyssey4me*section?16:17
automagically_I _believe_ the issue is that I misread the logging in glance-api earlier. Note the commit comment on https://github.com/openstack/openstack-ansible-os_glance/commit/d8b6871f6d5085dc9c731684a9fef4cd9e25f607 versus what was changed16:18
automagically_Translation: I need to slow down and read better16:19
*** Mudpuppy has quit IRC16:19
automagically_And have a drink once this week is over16:19
*** ErwanJ has joined #openstack-ansible16:20
odyssey4meah, so notification_driver is still valid - but topics is not16:20
*** markvoelker has quit IRC16:21
andymccrhttps://github.com/openstack/glance/blob/master/etc/glance-api.conf#L1381-L1390 that seems correct though, no?16:21
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Adding Vagrantfile for local developer testing  https://review.openstack.org/29179616:23
automagically_Yes, the section is, but I ended up duplicating it16:24
* odyssey4me is confused16:25
*** asettle has joined #openstack-ansible16:25
openstackgerritAla Raddaoui proposed openstack/openstack-ansible-openstack_hosts: Add a check for hosts particular kernel modules  https://review.openstack.org/29179716:25
*** mikelk has quit IRC16:28
*** Mudpuppy has joined #openstack-ansible16:28
*** Mudpuppy has quit IRC16:28
*** adac has quit IRC16:29
*** Mudpuppy has joined #openstack-ansible16:29
*** asettle has quit IRC16:30
*** mathlin1 has joined #openstack-ansible16:33
*** sdake_ has joined #openstack-ansible16:34
*** sdake has quit IRC16:36
*** Mudpuppy has quit IRC16:40
*** weezS has joined #openstack-ansible16:40
*** phiche has quit IRC16:40
*** phiche has joined #openstack-ansible16:40
openstackgerritAla Raddaoui proposed openstack/openstack-ansible: Add ebtables check for network hosts  https://review.openstack.org/28962216:46
*** phiche has quit IRC16:49
*** pcaruana has quit IRC16:50
*** woodard has joined #openstack-ansible16:50
*** woodard has quit IRC16:52
*** mathlin1 has quit IRC16:52
*** woodard has joined #openstack-ansible16:53
*** automagically_ has left #openstack-ansible16:54
*** shausy has joined #openstack-ansible16:56
*** raddaoui has quit IRC16:57
*** Mudpuppy has joined #openstack-ansible17:03
*** shausy has quit IRC17:04
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Fixing Glance API startup failure and adding functional tests  https://review.openstack.org/29179317:08
*** markvoelker has joined #openstack-ansible17:09
ErwanJHI all, I am quite unfortunately behind a corproate proxy doing a lab install of ansible-openstack.  I have run in a few issues, but mainly whenever a task tries to excecute and apt-key or gpg command it requires me to add the --keyserver-options http-proxy parameter to it as apt-key/gpg is not using the env proxy nor the proxy in apt.conf - I'm fairly new to Ansible, but I suspect there is a way for me to ensure that t17:10
automagicallyErwanJ: Also behind a proxy for most of my work17:11
automagicallyWhich tasks are failing for you?17:11
ErwanJAny task that add keys17:13
ErwanJFOr instance " TASK: [galera_client | Add galera apt-keys] ***********************************17:13
odyssey4meErwanJ before building the containers, you'll need to have this set in your /etc/openstack_deploy/user_variables.yml file: https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/user_variables.yml#L172-L17817:14
automagicallyI don’t believe that the hkp downloads use the proxy17:15
ErwanJIt doesn't17:15
automagicallyI know that the apt ones definitely do not17:15
ErwanJnope17:15
ErwanJI created a seperate playbook to add the proxy to apt.conf17:15
ErwanJwhich works for apt-get17:15
ErwanJbut apt-key doesn't even use that17:15
automagicallyyep, been there, done that17:15
ErwanJit actually requires the --keyserver-options added17:16
ErwanJNeed to edit something task or other to add the parameters whever a apt-key is excecuted17:16
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Add radvd to neutron containers  https://review.openstack.org/29182617:18
ErwanJI'm fairly new to Ansible in general and specifical openstack-ansible so I'm just mudying my way through it - was hoping someone else had run into this and may be abel to guide me in the right direction haha :)  I can continue installing adding keys manually to each container but it's just taking a while :P17:18
andymccrhmm it looks like it could be a problem in that that option isnt passible by the ansible module itself?:  http://docs.ansible.com/ansible/apt_key_module.html17:18
ErwanJVery possible17:18
ErwanJLooks like it17:18
ErwanJ:(17:18
logan-one workaround would be to download the keys to your deployment host and pass them via user_variables17:18
*** woodard has quit IRC17:19
ErwanJGood idea @logan will look into doing that17:20
logan-all of the playbooks support this via https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/haproxy_server/tasks/haproxy_add_ppa_repo.yml#L4317:20
logan-so you could do http://cdn.pasteraw.com/rrytd6ohcy8pdy9hbqom9qwld8bibpt17:21
logan-er17:21
logan-http://cdn.pasteraw.com/evvqmniilk7lvr9f4f1phtrevtv6y2717:21
logan-data: is the parameter, not item: :)17:22
*** weezS has quit IRC17:22
automagicallycloudnull: You around?17:22
ErwanJThanks logan, if I do that, should I be able to just run the haproxy-install playbook and it should update what is needed?17:23
logan-correct. that will override the default from here https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/haproxy_server/defaults/main.yml#L24-L29 with local key files17:24
automagicallyI too am running into issues with the galera_server role. Would like to remove https://github.com/openstack/openstack-ansible-galera_server/blob/master/defaults/main.yml#L87:L93 as we don’t seem to be using them (and I don’t want to mirror yet another repo)17:24
tiagogomes:wq17:25
logan-automagically: i think xtrabackup is required for the clustering :(17:25
* tiagogomes is happy using mariadb 10.1, which already includes galera17:26
automagicallylogan-: This caught my attention: https://github.com/openstack/openstack-ansible-galera_server/blob/master/tasks/galera_install.yml#L65:L7217:26
logan-yeah I think that is done to keep the version pinned to whatever deb is specified17:27
logan-or the ppa version rather17:27
automagicallyGotcha, thanks17:28
logan-I remember some talk about it a few weeks ago and cloudnull was saying there have been issues in the past if mariadb and xtrabackup versions were out of sync17:28
*** weezS has joined #openstack-ansible17:29
*** leakypipes has quit IRC17:30
*** admin0 has joined #openstack-ansible17:31
logan-In case it helps you.. this is what I'm doing for apt key/repo mirroring: http://cdn.pasteraw.com/1sttaji741wvuc3a4v6k92e7xgy0y6m17:34
*** jaypipes has joined #openstack-ansible17:34
*** krotscheck has quit IRC17:34
*** iurygregory has quit IRC17:35
logan-with the apt-mirror role available here: https://github.com/logan2211/ansible-apt-mirror17:35
*** pcaruana has joined #openstack-ansible17:35
*** b3rnard0 is now known as b3rnard0_away17:35
*** krotscheck has joined #openstack-ansible17:37
automagicallyThanks for sharing logan-17:37
automagicallyBeen having issues with role check logs not being fully downloadable. Raised with #infra and they are suggesting moving away from storing logs in swift and using an alternative log collection mechanism17:39
automagicallyAny objections to that approach while #infra tries to figure out the source of the issues17:39
odyssey4meautomagically uh, where would you like to store them?17:40
automagicallyconversation ongoing in #openstack-infra17:40
odyssey4meoh ok, so it's not that we change anything - it's just that we source them differently17:41
odyssey4metemporarily while they sort stuff out17:42
automagicallyhttps://review.openstack.org/#/c/291834/17:42
automagicallyYeppers odyssey4me17:42
odyssey4meyeah, if they're doing the thing then fine17:42
automagicallyCool, didn’t want to being acting unilaterally or anything17:42
stevellethx17:44
*** wadeholler has joined #openstack-ansible17:44
wadehollerhey all: I have slow client command responses (openstack user list; openstack network-list; etc), 35s-1m.  Haven't found any errors, shutdown all but 1 keystone, galera, and memcache instances to help troubleshooting17:45
wadeholleranyone care to point me in a direction ?  kind of pulling my hair out17:45
automagicallywadeholler: You run the client in debug mode yet?17:47
automagicallyWould love to see the debug logs17:47
wadehollernope, will do and advise with pastebin - just run with "--debug" ?17:48
stevellecorrect17:48
*** lykinsbd has joined #openstack-ansible17:49
*** neilus1 has quit IRC17:49
automagicallythx wadeholler17:50
wadehollerhttp://pastebin.com/MyKsn1tK - long steps appear to kind of be the "Making authentication request ....."17:51
*** javeriak has joined #openstack-ansible17:52
wadehollerany change my "vip"...236.147 not being resolvable could be slowing it down ?17:52
automagicallyIs that external_lb_vip or internal?17:53
wadehollerinternal17:53
*** lykinsbd has quit IRC17:53
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add condition to local IP for overlay net  https://review.openstack.org/27379317:53
wadeholler"any change" = "any chance"17:54
*** raddaoui has joined #openstack-ansible17:54
automagicallyDoes the curl command the debug spat out take ~20 seconds too?17:54
*** adac has joined #openstack-ansible17:54
wadehollerlast curl command in output is about 10 sec ( in this 30 sec overall run )17:55
wadehollerby my stopwatch17:56
cloudnullo/ morn/afternoons17:56
automagicallyHmm, sounds like network, though could possibly related to query times on the db side of things17:57
automagicallyYou could take a peek at the keystone logs perhaps and narrow it down17:57
automagicallyBut I’m guessing connection and transport time between the utility container and keystone is the culprit17:57
automagicallyhey cloudnull o/17:58
automagicallyHad a qq for you earlier cloudnull about whether or not we still need: https://github.com/openstack/openstack-ansible-galera_server/blob/master/defaults/main.yml#L87:L9317:58
cloudnullautomagically: I think so. May just be my paranoia but allowing the system package to be isntalled via galera apt repo has kicked us in the teeth.17:59
automagicallykk17:59
cloudnullso maybe ?17:59
*** weezS has quit IRC17:59
automagicallyAppreciate the explanation18:00
cloudnullit would be nice to remove the extra dep18:00
automagicallyYeah, if I have time next week, maybe I can test the removal a bit18:00
automagicallyBut bogged down with other stuff atm18:00
*** asettle has joined #openstack-ansible18:00
wadehollerok.  haven't found any errors yet in keystone logs, just all the OPTIONS, POST, GET, etc.  will keep digging.  comeback when I find something more.  thanks again automagically18:00
automagicallywadeholler: Sure thing, sorry I couldn’t be more helpful18:00
wadehollerno worries.  problems like this a pain I know.  cheers.18:00
cloudnullautomagically odyssey4me: RE: these patches -> https://review.openstack.org/#/q/status:merged+topic:rootwrap_owned_by_root -- I think those would be worth backporting all the way to kilo.18:01
odyssey4meI have to ask - is there a particular reason why we don't just install using the Ubuntu provided MariaDB packages?18:01
automagicallycloudnull: I tend to agree given they are security issues18:01
cloudnullI've been working on somethings and it would seem to me that we should do those.18:01
odyssey4mecloudnull considering that's an impact to d34dh0r53, perhaps he should make those go? :)18:02
automagicallyafk for a few18:02
cloudnullbeing that they are already patched in master and public i dont mind saying that we might even want to raise a CVE for it18:02
odyssey4meI'd support the backport, whoever does it18:02
cloudnullbecause as it stands if I get in , have access to the neutron user, I can change the rootwrap file and write my own sudo privs18:03
odyssey4mefeature?18:03
odyssey4me:p18:03
*** wadeholler has quit IRC18:05
*** asettle has quit IRC18:05
spotzheheh18:05
*** neilus has joined #openstack-ansible18:05
*** raddaoui has quit IRC18:05
automagicallyK, back, I’m down to backport them18:07
automagicallyCan fit that in today18:07
automagicallyShould I open a launchpad bug first?18:08
odyssey4mein other news: http://releases.openstack.org/liberty/index.html#openstack-ansible :)18:09
*** Mudpuppy has quit IRC18:09
odyssey4meand http://releases.openstack.org/kilo/index.html#openstack-ansible18:09
odyssey4meignore the fact that the tarball links don't work :p18:09
cloudnullautomagically: if you can create a bug that would be great. Im going to request a public CVE for the issue and we can link the CVE-ID to the bug once we get it.18:12
automagicallyWill do18:12
*** javeriak has quit IRC18:15
*** javeriak_ has joined #openstack-ansible18:15
automagicallycloudnull: Can you turn a quick eye to https://review.openstack.org/#/c/287571/ please18:15
automagicallyIts been percolating for about a week and seems ready ;)18:16
cloudnullsure thing18:16
automagicallythank you sir18:16
*** javeriak_ has quit IRC18:17
*** javeriak has joined #openstack-ansible18:18
*** adac has quit IRC18:18
*** lykinsbd has joined #openstack-ansible18:20
*** javeriak_ has joined #openstack-ansible18:22
*** javeriak has quit IRC18:24
automagicallyBug for rootwrap issues: https://bugs.launchpad.net/openstack-ansible/+bug/155623118:24
openstackautomagically: Error: malone bug 1556231 not found18:24
automagicallyIts marked as a security issue, and thus not currently public18:24
*** Mudpuppy has joined #openstack-ansible18:24
*** lykinsbd has quit IRC18:25
*** sdake_ has quit IRC18:28
cloudnullthank you automagically:  I've marked the issue as "Public Security" and included in my message to MITR .18:29
odyssey4meI've marked the series it affects18:29
odyssey4meand targeted them at the next release for each.18:29
cloudnullsweet.18:30
odyssey4meautomagically will you be doing the backports?18:30
automagicallyCool, I had no idea how to mark the series18:30
automagicallyYep, starting the Liberty backport now18:30
odyssey4meok, assigned18:30
*** Mudpuppy has quit IRC18:31
*** permalac has quit IRC18:35
*** zhangjn has quit IRC18:38
*** sdake has joined #openstack-ansible18:39
*** b3rnard0_away is now known as b3rnard018:39
*** Mudpuppy has joined #openstack-ansible18:40
*** zhangjn has joined #openstack-ansible18:41
*** sdake_ has joined #openstack-ansible18:41
*** sdake has quit IRC18:44
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: rootwrap configuration must be owned by root  https://review.openstack.org/29185818:44
*** thorst_afk is now known as thorst18:44
openstackgerritMerged openstack/openstack-ansible-os_keystone: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29176718:48
odyssey4meautomagically you're missing the edit for https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/os_ceilometer/tasks/ceilometer_pre_install.yml#L59 in https://review.openstack.org/#/c/291858/18:55
automagicallyNice catch odyssey4me18:56
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: rootwrap configuration must be owned by root  https://review.openstack.org/29185818:58
odyssey4meautomagically hopefully you can just cherry-pick that to kilo?19:03
automagicallyThat’s what I’m hoping19:03
automagicallyWaiting for gate, then I’ll give it a shot19:03
odyssey4meyou can try now, as it's a backport already there's no need for further formalities19:04
odyssey4meah, fair enough19:04
*** Bjoern_ is now known as Bjoern_zZzZzZzZ19:04
odyssey4meit may be pertinent to ensure that it actually works :p19:04
*** sdake_ has quit IRC19:05
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Add LBaaS v2 support (OSA)  https://review.openstack.org/28724319:05
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-galera_server: Allow cert validation to be toggled by deployers  https://review.openstack.org/29186519:08
*** sdake has joined #openstack-ansible19:10
automagicallyD’oh! Merge conflict trying to cherry-pick19:11
automagicallyAh well19:11
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: rootwrap configuration must be owned by root  https://review.openstack.org/29186819:15
*** McMurlock1 has joined #openstack-ansible19:23
*** McMurlock1 has quit IRC19:23
*** wadeholler has joined #openstack-ansible19:24
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-galera_server: Role should fail immediately when its preconditions are not met  https://review.openstack.org/29187319:24
odyssey4meFor anyone interested in giving it a go - I have the convergence testing complete for the Designate role. I've tried to make the testing a little less unwieldy than we're seeing in some of the other roles. It's not perfect, and I have no idea yet whether Designate actionally is functional, but the API does come up and responds to queries. :p See: https://github.com/odyssey4me/openstack-ansible-os_designate19:35
odyssey4meI expect that it's in a condition that we can import the role during the course of next week and the collaborate to make it usable.19:35
odyssey4mejmccrory ^ seeing as you looked at the previous work done19:36
jmccroryodyssey4me cool, i'll give a look sometime over the next few days19:37
odyssey4meok, time out for me - it's time to weekend!19:37
automagicallyEnjoy your weekend odyssey4me19:38
cloudnullenjoy the weekend odyssey4me19:39
cloudnullhave lots of scotch19:39
cloudnull:)19:39
openstackgerritMerged openstack/openstack-ansible-os_aodh: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29177619:42
automagicallyFYI, we should consider taking advantage of this: https://github.com/openstack/keystone/blob/4ebf58566ec7c3a557987c1c9cfd1e03a91272e6/releasenotes/notes/add-bootstrap-cli-192500228cc6e574.yaml19:42
*** mgoddard has quit IRC19:42
automagicallyWill help us dump some code out of the keystone Ansible module19:42
openstackgerritMerged openstack/openstack-ansible-os_cinder: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29177019:42
stevelleautomagically: agreed, I think a light spec for Newton is appropriate19:45
openstackgerritMerged openstack/openstack-ansible-os_glance: Prevent IP conflicts on lxcbr0  https://review.openstack.org/29176419:46
cloudnullah thats nice , automagically we should use that indeed.19:46
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Enable developer mode  https://review.openstack.org/29144519:46
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_cinder: Remove default vars from the test playbook  https://review.openstack.org/29094719:48
*** sdake_ has joined #openstack-ansible19:49
palendaeDo we have config_template docs anywhere?19:49
*** sdake has quit IRC19:49
automagicallyhttp://docs.openstack.org/developer/openstack-ansible/developer-docs/extending.html#setting-overrides-in-configuration-files19:50
automagicallyPretty light, but its something19:50
*** Bjoern_zZzZzZzZ is now known as Bjoern_19:50
*** electrofelix has quit IRC19:50
palendaeThanks19:51
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Enable functional convergence testing  https://review.openstack.org/29188519:53
automagicallystevelle: keystone-manage blueprint added: https://blueprints.launchpad.net/openstack-ansible/+spec/adopt-keystone-manage-bootstrap19:55
stevellesubscribing to this product and/or service, thx19:55
stevelleI set a reminder for myself to look at this before summit19:56
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Enable functional convergence testing  https://review.openstack.org/29188519:58
*** sdake_ has quit IRC19:59
mhaydenif hosts have plenty of RAM/disk available, and my quota is fine, but i'm getting "no valid host -- does anyone have idea for where to look?20:03
mhaydeni can't seem to go past 60 instances20:03
*** miguelgrinberg has quit IRC20:03
automagicallymhayden: What is raising that complaint?20:05
mhaydeni see it in my nova-conductor logs20:05
automagicallySounds like a scheduler issue20:05
automagicallyLike it thinks the computes cannot take anymore instances of the type you are using20:06
mhaydenwhat's weird is that it lets two hypervisors have 19 and lets the other two have 11 (each20:07
mhayden19x2 + 11x2 = 60 -- sounds like an oddly round number20:07
automagicallyIndeed20:07
wadehollernova_cpu_allocation_ratio need tweeked ?20:07
mhaydenwadeholler: you might be right -- two of my hosts have fewer cpu cores20:08
admin0mhayden: are you using stacking ?20:08
admin0or not using stacking ?20:08
* mhayden feels badly stacked20:09
admin0:D20:09
logan-scheduler logging can be pretty useless until you put it in debug mode20:10
*** raddaoui has joined #openstack-ansible20:11
SamYaplemhayden: with debug on the computes themselves will all report why they failed to schedule the instance if an attempt was made. but i would start with the scheduler and see why the sceduler is rejecting the computes (it may not ever be scehduling to the computes)20:12
SamYaplemy bet is on disk space20:12
mhaydenalrighty, i'll check that20:12
admin0nova-compute.log usually gives that20:12
admin0no host found : scheduler(disk/cpu/ram), image too big for flavor, neutron slow , anti-affinity and all other hosts filled up ,20:13
SamYapleadmin0: if the scheduler checks the db and it fails the host checks based on the database information the compute wont log anything if i recall correctly20:15
logan-yep, if it makes it to compute usually compute will get you decent log entries if it fails to scheduler. but if it is a scheduler filter issue then usually have to put scheduler in debug i've found as it will just give you "no hosts available" one liners20:17
logan-fails to scheduler*20:17
logan-schedule*...20:17
mhaydenwell it appears that wadeholler wins an internet today -- it was the allocation ratio20:17
*** sdake has joined #openstack-ansible20:17
*** weezS has joined #openstack-ansible20:17
mhaydenit was set to 2.020:18
mhaydenhorizon had a big red circle that said "48 vcpus used out of 24"20:18
*** eil397 has joined #openstack-ansible20:19
*** neilus has quit IRC20:20
*** adac has joined #openstack-ansible20:21
SamYaplecpu_allocation_ratio = -120:21
*** tiagogomes has quit IRC20:21
SamYaplethough you can force ignore those ratios with the admin role I believe, for testing20:22
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Enable functional convergence testing  https://review.openstack.org/29188520:22
mhaydencpu_allocation_ratio = slumlord_host20:22
mhayden:P20:22
SamYapleno slumload would put it at 2.0 and then drop the cpu filter from the scheduler ;)20:23
mhaydenhaha20:23
SamYaplegotta hide that stuff20:23
* mhayden is now the owner of 200 VM's :P20:24
*** cemmason has quit IRC20:25
mhaydensuccess? http://i.imgur.com/67zkvm5.png20:28
palendaemhayden: Only one of those is overallocated, so no20:29
SamYapleim making a note here : HUGE SUCCESS20:29
SamYaplethis is a triumph20:29
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Fixing Glance API startup failure and adding functional tests  https://review.openstack.org/29179320:30
*** unlaudable has joined #openstack-ansible20:33
mhaydensee y'all in a week :)20:33
automagicallyLater mhayden. Enjoy that time off/away20:34
*** kencjohnston has quit IRC20:34
stevellemhayden: we should all count in base 6020:35
openstackgerritMerged openstack/openstack-ansible-os_neutron: Enable developer mode  https://review.openstack.org/29144520:36
*** kencjohnston has joined #openstack-ansible20:36
*** thorst has quit IRC20:38
*** thorst has joined #openstack-ansible20:39
SamYaplestevelle: what characterset?20:40
stevelleSamYaple: RFP20:42
stevellebonus pts for inclusion of good emoji20:42
*** asettle has joined #openstack-ansible20:42
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible: Added configuration information for using Ceph with Cinder  https://review.openstack.org/29087320:47
*** asettle has quit IRC20:47
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: POC - Fail fast when required secrets are not present  https://review.openstack.org/29190820:56
*** sdake has quit IRC20:58
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Fixing Glance API startup failure and adding functional tests  https://review.openstack.org/29179321:03
*** sigmavirus24 is now known as sigmavirus24_awa21:05
*** raddaoui has quit IRC21:07
*** raddaoui has joined #openstack-ansible21:08
*** inc0 has joined #openstack-ansible21:08
*** yarkot_ has joined #openstack-ansible21:17
openstackgerritMerged openstack/openstack-ansible: rootwrap configuration must be owned by root  https://review.openstack.org/29185821:19
*** yarkot_ has quit IRC21:19
openstackgerritMerged openstack/openstack-ansible: rootwrap configuration must be owned by root  https://review.openstack.org/29186821:19
*** sigmavirus24_awa is now known as sigmavirus2421:22
*** inc0 has quit IRC21:22
*** raddaoui has quit IRC21:27
*** phiche has joined #openstack-ansible21:30
*** ErwanJ has quit IRC21:34
*** ErwanJ has joined #openstack-ansible21:35
*** thorst has quit IRC21:35
*** raddaoui has joined #openstack-ansible21:36
*** javeriak_ has quit IRC21:37
*** wadeholler has quit IRC21:42
*** kencjohnston has quit IRC21:48
Bjoern_can we link the issue  1556231 to the cve bug?21:52
cloudnullBjoern_: https://bugs.launchpad.net/openstack-ansible/+bug/155623121:54
openstackLaunchpad bug 1556231 in openstack-ansible trunk "Rootwrap configuration has incorrect ownership" [Critical,Fix committed] - Assigned to Travis Truman (travis-truman)21:54
cloudnulltheres no CVE ID however we've requested one.21:55
Bjoern_ok21:55
*** thorst has joined #openstack-ansible21:56
*** b3rnard0 is now known as b3rnard0_away21:57
*** johnmilton has quit IRC22:02
*** jaypipes has quit IRC22:02
*** dmsimard has joined #openstack-ansible22:03
nnbrianNewbie question: during AIO install is there a way in user variables yml to tell pip to use --extra-index-url  and --trusted_host?22:03
*** KLevenstein has quit IRC22:03
*** phiche has quit IRC22:05
*** jthorne has quit IRC22:05
SamYaplehey Bjoern_22:06
Bjoern_hey22:06
*** Bjoern_ is now known as Bjoernt22:06
nnbrianBasically, we're trying to add a local PyPi mirror so that we can test the installation of our own packages. Want pip to look there...22:07
SamYaplecloudnull: did you see what dehaan just posted?22:08
SamYaplecloudnull: http://michaeldehaan.net/post/140649196217/the-phoenix-is-not-burnt-out-it-is-just-rebooting22:08
cloudnullmancdaz: you can use the option "pip_install_options" in your user_* files22:08
cloudnullSamYaple: no i've not read his blog in a bit.22:09
* cloudnull goes to read22:09
SamYaplecloudnull: its the ravings of a madman!22:09
SamYaplecloudnull: in the title he calls himself the pheonix22:10
SamYapleim a bit in its pretty funny22:10
*** jguy_ has quit IRC22:10
cloudnull"To leave ego out of it, I’m pretty darn good as a developer..."22:11
*** retreved has quit IRC22:11
SamYaplecloudnull: he is the donald trump of the computer world!22:11
SamYapleim serious it reads like a trump quote22:11
cloudnullis he just saying the things we're all thinking :\22:12
SamYapleansible 2.0 == poo22:12
* cloudnull is not thing the things Trump is saying btw ..22:12
SamYaple"When I don't care, I'm happy, and I do great work. And people like this work, and as a result I start to care. When I care, I try to fix all the broken things and people don't like being told they are wrong, I am not happy seeing all the wrongness, and as a result, I learn to not care again. Thus I'm happiest when I don't care and completely incapable of remaining in a state where I don't care."22:13
*** ametts has quit IRC22:14
cloudnullhe drinks flavor aid, I have grape drink22:14
*** dmsimard is now known as dmsimard|pto22:15
*** phiche has joined #openstack-ansible22:16
SamYaplecloudnull: i dont know that i can finish this. im glazing over22:16
cloudnullweeds, malcome in the middle, Jason Isbell song, --- we;re all over the place22:22
SamYaple"It's one of the reasons I'm frustrated in places where the data is hidden behind different levels" --- https://github.com/ansible/ansible/blob/v1.9.4-1/lib/ansible/module_common.py#L112-12022:22
SamYaplehe throws in a Dune reference otoo22:22
palendaeHe's right that people don't like hearing they're wrong22:23
palendaeLike when they assemble python modules scattered across the code base to be shipping to a remote machine22:23
SamYaplehow dare you say im wrong palendae!22:23
palendaeshipped*22:23
cloudnullyou all just dont care enough...22:24
SamYapleim burned out man22:24
palendaedon't not care enough22:24
* cloudnull runs down the hall22:24
SamYapleim a pheonix thats rebooting22:24
palendaea phoenix bios?22:24
SamYaplei like the UEFI bioses now22:25
SamYaplegot the mouse clickys22:25
SamYaplewierd that i like a mouse for my bios but a keyboard for everything else....22:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_build: Install packages necessary to build Python wheels  https://review.openstack.org/29193322:25
SamYaplei think i just dont like being told no22:25
cloudnullhttps://www.youtube.com/watch?v=JpSfgusep7s22:26
cloudnull^pheonix rebooting22:26
palendaeNeeds the modem dial too22:26
SamYaplehttps://www.youtube.com/watch?v=Ht96HJ01SE422:26
SamYapleyoure welcome ^22:26
palendaehttps://youtu.be/o_XaJdDqQA022:26
cloudnullthats a good one22:26
palendae^ formatting hard drive22:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_server: Trim apt package list  https://review.openstack.org/28951022:27
cloudnullburn outs real for sure.22:27
cloudnulli think it effects us all , and differently22:27
cloudnullbut that post was mental vomit.22:28
cloudnullhows things BTW SamYaple?22:33
*** asettle has joined #openstack-ansible22:33
cloudnullI wanted to say I talked a bit RE: Ekko to a lot of folks at the OPS midcycle a few weeks back22:33
SamYaplecool cloudnull22:33
cloudnulllots of potential interest once mitaka gets out the door22:33
SamYaplewe plan to have a working backup/restore by mitaka release, though that wont be a 1.022:34
SamYaplethen theres things like scheduling and integration with nova and retention22:34
cloudnullnice!22:34
SamYaplewere shooting for a 1.0 in newton22:34
cloudnullI'd like to see OSIC back that project too.22:35
SamYaplewell the way i see it, we need people using it to get the drive to get the nova stuff in place22:35
SamYapleit took me 2 months to get a fix into place AFTER liberty released that broke ceph completely with nova22:36
SamYapleit was fairly simple too22:36
cloudnullyea. nova's a beast to break into ...22:36
SamYapleso its kinda a wierd situation. the way i have it now is the backup agent on the compute node talks directly to libvirt which is not ideal22:36
SamYapleit doesnt interfere with nova from what ive seen, but it *could*22:37
cloudnullso long as you can lock the state that shouldnt be all that bad .22:37
SamYaplei cant thats the thing22:37
* cloudnull maybe overlooking/simplifying things22:37
SamYaplei need a NOVA_DONT_TOUCH_THIS state for the instance22:37
SamYaplebut short of tweaking the nova database directly, im not sure how to do that22:38
*** asettle has quit IRC22:38
SamYapleto be fair, i havent tought about it much, too much math going on right now22:38
cloudnullthe math's will do that to you :)22:38
cloudnullyea reset-state command in nova is rather limited.22:39
cloudnulland you cant force state, to my knowledge .22:39
SamYaplei can reset it to error or active, and that might work, but it triggers other actions from nova afaik22:39
cloudnullyea error could result in data-loss22:40
cloudnullif the clean up process nukes an ephemeral disk22:40
SamYapleright some  for now its "dont touch the instance while ekko is using it"22:40
*** raddaoui has quit IRC22:41
SamYapletalked with duncant from cinder and i might be able to generate backups that can be converted to cinder-backup copies with metadata generation only22:42
SamYapleassuming no compression/encryption22:42
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_build: Install packages necessary to build Python wheels  https://review.openstack.org/29193322:43
cloudnullthat'd be useful.22:43
*** Bjoernt has quit IRC22:47
*** scarlisle has quit IRC22:50
*** dmsimard|pto has quit IRC22:52
cloudnullSamYaple: looking at the nova code to change an instance task state, that looks kinda like a mess without direct nova integration...22:59
cloudnullonce you have an instance object you can call instance.task_state = task_state;  instance.save() but getting there looks miserable.23:00
*** asettle has joined #openstack-ansible23:01
*** unlaudable has quit IRC23:04
*** raddaoui has joined #openstack-ansible23:05
*** admin0 has quit IRC23:07
*** asettle has quit IRC23:09
*** ShannonM has quit IRC23:18
*** sigmavirus24 is now known as sigmavirus24_awa23:22
SamYaplecloudnull: thats the conclusion i came to as well23:26
cloudnullyea, its a bit fugly.23:26
*** raddaoui has quit IRC23:26
SamYaplei like the "dont touch the instances while using ekko" approach23:26
SamYapleat least for now23:26
SamYaplei need to tell nova to lock it down something else is goign on, that oculd be useful outside of ekko too23:26
SamYaplesome type of lock-state state23:26
cloudnullwhen UsingEkko():\n    no_stop_dont()23:27
cloudnullthat works for now.23:27
cloudnullim surprised theres not a better way to munge state.23:27
cloudnullbut in my quick look, it looks miserable23:27
SamYaplereset to error or active, thats all you get23:27
SamYaplenot even shutdown! thats what bugs me23:28
cloudnullyea. sux23:28
SamYaplei rarely need to reset to ACTIVE23:28
SamYapleshutdown, sure23:28
SamYaplebut active?23:28
cloudnullalso if im reseting the state, the instance is likely not "active"23:28
SamYaplethats what im saying23:29
cloudnullpending, paused, foobar, but not active23:29
SamYapleor "I accidenteally reset migration state, let me tell you what state its supposed to be in dammit!" state23:29
SamYapletwas a many nights i was frusterated with that23:30
*** eil397 has quit IRC23:30
cloudnullbut ass the Phoenix once said, "It Is Just Rebooting"23:31
*** eil397 has joined #openstack-ansible23:31
cloudnull*as23:31
SamYapleTHE Phoenix23:32
cloudnullIm off, BBL.23:32
cloudnullhave a good one all23:32
*** phiche has quit IRC23:32
SamYaplesee ya man23:33
*** bryan_att has quit IRC23:37
*** thorst is now known as thorst_afk23:42
*** adac has quit IRC23:42
*** asettle has joined #openstack-ansible23:42
*** asettle has quit IRC23:49
*** weezS has quit IRC23:54
*** spotz is now known as spotz_zzz23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!