Thursday, 2016-03-17

*** darrenc_ has joined #openstack-ansible00:06
*** mrda has quit IRC00:06
*** darrenc has quit IRC00:07
*** mcarden has quit IRC00:07
*** flwang has quit IRC00:07
*** neillc has quit IRC00:07
*** gus has quit IRC00:07
*** neillc has joined #openstack-ansible00:07
*** mcarden has joined #openstack-ansible00:07
*** mrda has joined #openstack-ansible00:08
*** gus has joined #openstack-ansible00:08
*** flwang1 has joined #openstack-ansible00:09
*** networkninja has joined #openstack-ansible00:11
*** fawadkhaliq has quit IRC00:20
*** fawadkhaliq has joined #openstack-ansible00:21
*** finchd has quit IRC00:22
*** flwang1 has quit IRC00:23
*** darrenc_ is now known as darrenc00:25
*** johnmilton has quit IRC00:26
*** flwang1 has joined #openstack-ansible00:26
*** finchd has joined #openstack-ansible00:28
*** networkninja has quit IRC00:29
*** asettle has joined #openstack-ansible00:35
*** thorst has joined #openstack-ansible00:37
*** skamithi13 has joined #openstack-ansible00:41
*** skamithi14 has quit IRC00:44
*** skamithi13 has quit IRC00:44
*** skamithi13 has joined #openstack-ansible00:44
*** cloudtrainme has joined #openstack-ansible00:45
*** skamithi13 has quit IRC00:46
*** skamithi14 has joined #openstack-ansible00:47
*** fawadkhaliq has quit IRC00:51
*** fawadkhaliq has joined #openstack-ansible00:51
*** asettle has quit IRC00:56
*** iceyao has joined #openstack-ansible00:58
*** iceyao_ has joined #openstack-ansible01:02
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: Removing reference to internal RPC repo  https://review.openstack.org/29302401:02
*** odyssey4me has quit IRC01:04
*** iceyao has quit IRC01:04
*** odyssey4me has joined #openstack-ansible01:06
*** networkninja has joined #openstack-ansible01:08
*** iceyao has joined #openstack-ansible01:08
*** cloudtrainme has quit IRC01:11
*** iceyao_ has quit IRC01:12
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377301:16
*** asettle has joined #openstack-ansible01:20
*** sdake has quit IRC01:22
openstackgerritMerged openstack/openstack-ansible: Set apt sources to use a configured list of components  https://review.openstack.org/28983501:35
*** rstarmer has joined #openstack-ansible01:35
*** rstarmer has quit IRC01:46
*** jorge_munoz has quit IRC01:46
*** rstarmer has joined #openstack-ansible01:47
*** rstarmer has quit IRC01:47
*** fawadkhaliq has quit IRC01:52
*** fawadkhaliq has joined #openstack-ansible01:53
*** networkninja has quit IRC01:55
*** iceyao_ has joined #openstack-ansible01:57
*** fawadkhaliq has quit IRC01:58
*** fawadkhaliq has joined #openstack-ansible01:58
*** iceyao__ has joined #openstack-ansible02:00
*** iceyao has quit IRC02:00
*** bryan_att has quit IRC02:02
*** iceyao_ has quit IRC02:03
openstackgerritMichael Davies proposed openstack/openstack-ansible: Add installation support for os_ironic  https://review.openstack.org/29377902:08
*** thorst has quit IRC02:09
*** thorst has joined #openstack-ansible02:10
openstackgerritMichael Davies proposed openstack/openstack-ansible: Add installation support for os_ironic  https://review.openstack.org/29377902:11
*** fawadkhaliq has quit IRC02:15
*** fawadkhaliq has joined #openstack-ansible02:16
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_nova: Fix default value of `nova_default_schedule_zone`  https://review.openstack.org/29378202:17
*** thorst has quit IRC02:18
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377302:19
*** odyssey4me has quit IRC02:19
*** mrda has quit IRC02:19
*** neillc has quit IRC02:19
*** darrenc has quit IRC02:19
*** mattoliverau has quit IRC02:19
*** jwitko has quit IRC02:19
*** Apsu has quit IRC02:19
*** cfarquhar has quit IRC02:19
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Adding Vagrantfile for local developer testing  https://review.openstack.org/29378302:20
palendaeautomagically, You do realize you don't have to work all night? :)02:20
automagicallypalendae: I do indeed, had a little downtime02:20
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: Basic functional test of the ceilometer role  https://review.openstack.org/29378402:23
*** odyssey4me has joined #openstack-ansible02:25
*** mrda has joined #openstack-ansible02:25
*** neillc has joined #openstack-ansible02:25
*** darrenc has joined #openstack-ansible02:25
*** mattoliverau has joined #openstack-ansible02:25
*** jwitko has joined #openstack-ansible02:25
*** Apsu has joined #openstack-ansible02:25
*** cfarquhar has joined #openstack-ansible02:25
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: Adding Vagrantfile for local developer testing  https://review.openstack.org/29378502:25
*** fawadkhaliq has quit IRC02:26
*** fawadkhaliq has joined #openstack-ansible02:26
*** iceyao has joined #openstack-ansible02:27
*** iceyao__ has quit IRC02:27
*** fawadkhaliq has quit IRC02:38
*** fawadkhaliq has joined #openstack-ansible02:38
*** fawadkhaliq has quit IRC02:43
*** doublek has quit IRC02:54
*** daneyon has joined #openstack-ansible02:56
*** asettle has quit IRC02:56
*** asettle has joined #openstack-ansible02:59
*** asettle has quit IRC03:04
openstackgerritMerged openstack/openstack-ansible-os_keystone: Tests: Remove super-verbosity from ansible-playbook execution  https://review.openstack.org/29364703:14
*** markvoelker has quit IRC03:15
SamYaplepalendae: lies he must work forever03:16
*** thorst has joined #openstack-ansible03:16
*** iceyao has quit IRC03:18
*** iceyao has joined #openstack-ansible03:18
*** thorst has quit IRC03:23
*** cemason has joined #openstack-ansible03:40
*** rstarmer has joined #openstack-ansible03:58
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Use keystone-manage bootstrap command  https://review.openstack.org/29381603:59
*** daneyon_ has joined #openstack-ansible04:00
*** fawadkhaliq has joined #openstack-ansible04:01
*** daneyon has quit IRC04:03
*** winggundamth has joined #openstack-ansible04:20
*** thorst has joined #openstack-ansible04:21
*** galstrom_zzz is now known as galstrom04:25
*** asettle has joined #openstack-ansible04:27
*** rstarmer has quit IRC04:28
*** thorst has quit IRC04:28
*** asettle has quit IRC04:32
*** rstarmer has joined #openstack-ansible04:35
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Use keystone-manage bootstrap command  https://review.openstack.org/29381604:38
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add retry logic to mysql_upgrade  https://review.openstack.org/29382104:54
*** weshay has quit IRC04:55
openstackgerritKevin Carter proposed openstack/openstack-ansible-galera_server: Add retry logic to mysql_upgrade  https://review.openstack.org/29382205:00
openstackgerritKevin Carter proposed openstack/openstack-ansible-galera_server: Add retry logic to mysql_upgrade  https://review.openstack.org/29382205:12
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add retry logic to mysql_upgrade  https://review.openstack.org/29382105:13
*** markvoelker has joined #openstack-ansible05:15
*** phiche has joined #openstack-ansible05:21
*** markvoelker has quit IRC05:21
*** fawadkhaliq has quit IRC05:21
*** shausy has joined #openstack-ansible05:22
*** saneax_AFK is now known as saneax05:25
*** thorst has joined #openstack-ansible05:26
*** thorst has quit IRC05:33
*** phiche has quit IRC05:36
*** rstarmer has quit IRC05:37
*** rstarmer has joined #openstack-ansible05:39
*** galstrom is now known as galstrom_zzz05:41
*** asettle has joined #openstack-ansible05:43
*** sdake has joined #openstack-ansible05:44
*** sdake_ has joined #openstack-ansible05:45
openstackgerritMichael Davies proposed openstack/openstack-ansible: Add installation support for os_ironic  https://review.openstack.org/29377905:48
*** sdake has quit IRC05:49
*** rstarmer has quit IRC05:50
*** sdake_ is now known as sdake05:51
*** skamithi14 has quit IRC05:53
*** admin0 has joined #openstack-ansible06:05
*** rstarmer has joined #openstack-ansible06:07
*** skamithi13 has joined #openstack-ansible06:15
openstackgerritKevin Carter proposed openstack/openstack-ansible-os_cinder: Modified apt install and lvm volume specific tasks  https://review.openstack.org/29383606:16
*** andrei__ has joined #openstack-ansible06:28
*** rstarmer has quit IRC06:29
*** rstarmer has joined #openstack-ansible06:30
*** thorst has joined #openstack-ansible06:31
*** andrei__ has quit IRC06:36
*** thorst has quit IRC06:38
*** McMurlock1 has joined #openstack-ansible06:41
*** jiteka has joined #openstack-ansible06:42
*** admin0 has quit IRC06:48
*** markvoelker has joined #openstack-ansible06:52
*** unlaudable has joined #openstack-ansible06:57
*** markvoelker has quit IRC06:58
*** daneyon_ has quit IRC07:03
*** flaviosr has quit IRC07:14
*** mikelk has joined #openstack-ansible07:15
*** asettle has quit IRC07:15
*** winggundamth has quit IRC07:16
*** mikelk has quit IRC07:33
*** thorst has joined #openstack-ansible07:36
hlkv6_Hi there, we are trying to add a compute node, using the http://docs.openstack.org/developer/openstack-ansible/install-guide/ops-addcomputehost.html process07:38
hlkv6_but seems we have a problem with: undefined variables: 'dict object' has no attribute 'nova_pubkey' which is a problem seen before https://review.openstack.org/#/c/266839/07:39
hlkv6_now we would like input how to fix in current setup, manual scp or similar?07:39
*** hlkv6_ is now known as hlkv607:40
*** jhyang_ has joined #openstack-ansible07:40
*** thorst has quit IRC07:43
*** rstarmer has quit IRC07:45
mattthlkv6: i vaguely remember it being something to do w/ the --limit08:02
hlkv6mattt: yeah I could imagine some task/parts not included08:03
matttif you can't do --limit to add compute nodes tho then i think we have to rethink what's happening because that is an ideal situation for using it08:05
*** admin0 has joined #openstack-ansible08:08
*** swati_ has joined #openstack-ansible08:08
*** admin0 has quit IRC08:10
swati_Hi, I am working on the designate specification and  While the Designate services seem to up and running now in its container, I am stuck up with one last issue for the designate endpoint "EndpointNotFound". Whenever I run any designate related command after sourcing the openrc, I get this error.08:12
*** mikelk has joined #openstack-ansible08:12
swati_the results of some commands are listed here : http://pastebin.com/LhjVJd8K08:12
matttswati_: perhaps designate wasn't properly added to the service catalogue ?08:13
*** admin0 has joined #openstack-ansible08:13
swati_Hi mattt_ you can check on the list, it gets listed in the services08:13
swati_n its services ----- designate-api, designate-central, designate-pool-manager, designate-mdns & designate-sink are also up08:14
openstackgerritHugh Saunders proposed openstack/openstack-ansible: Release note for Repo Sync Patch  https://review.openstack.org/29369108:16
matttswati_: absolutely no idea, let me see if i can deploy it and test08:17
matttswati_: any docs on how to deploy it?  :)08:21
matttswati_: ok think i see it08:22
matttswati_: all i need is galera and keystone right?08:22
*** pcaruana has joined #openstack-ansible08:24
*** jhyang_ is now known as jhyang08:32
*** karimb has joined #openstack-ansible08:37
*** thorst has joined #openstack-ansible08:40
admin0morning08:41
*** sdake has quit IRC08:43
*** sdake has joined #openstack-ansible08:43
*** cristicalin has joined #openstack-ansible08:46
*** thorst has quit IRC08:48
*** karimb_ has joined #openstack-ansible08:49
*** sdake has quit IRC08:50
*** karimb has quit IRC08:52
matttmorning admin009:07
admin0morning mattt .. my test system is up, minus the ceph09:09
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Merge os-swift-sync role into os-swift  https://review.openstack.org/29353609:11
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_keystone: [WIP] Dummy dynamic inventory for tests  https://review.openstack.org/29291109:11
*** karimb_ has quit IRC09:15
*** asettle has joined #openstack-ansible09:19
swati_yeahh right mattt_09:24
openstackgerritgit-harry proposed openstack/openstack-ansible-galera_server: Use var galera_cluster_members to identify cluster  https://review.openstack.org/29072909:31
odyssey4meo/ swati_ how're you doing?09:35
swati_hey jesse...all gud...jst struggling with the same endpoint error :(09:36
odyssey4meswati_ can you pastebin the output of 'openstack endpoint list', the contents of your openrc, and the output of the command you're trying to run with --debug added to the CLI09:37
*** Andrew_jedi has joined #openstack-ansible09:41
*** cristicalin has quit IRC09:42
*** thorst has joined #openstack-ansible09:45
openstackgerritgit-harry proposed openstack/openstack-ansible: Fail when ansible-galaxy returns error  https://review.openstack.org/29228509:50
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Adjust swift plays to use unified os-swift role  https://review.openstack.org/29391109:51
*** thorst has quit IRC09:52
*** metachr0n has joined #openstack-ansible09:54
swati_jesse...pls find the pastebins---09:57
swati_commands I executed with endpoint-list : http://pastebin.com/LhjVJd8K09:57
swati_openrc:http://pastebin.com/b487xV9609:57
swati_designate command in --debug mode: http://pastebin.com/DR21wG09:58
odyssey4meswati_ ok, the first mistake is that the designate docs quite clearly explain that the endpoint must be versionless09:58
odyssey4meie public, admin and endpoint must all be http://10.16.34.6:900109:59
odyssey4meyou can see how they're configured in these steps: http://docs.openstack.org/developer/designate/install/ubuntu-liberty.html#configure-designate10:01
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Adjust swift plays to use unified os-swift role  https://review.openstack.org/29391110:04
swati_Jesse...now i created them without versions...and I get the same error "ConnectFailure: Unable to establish connection to http://10.16.34.6:9001/domains"10:07
*** tiagogomes has joined #openstack-ansible10:07
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: Update os_designate README.rst  https://review.openstack.org/29391910:09
odyssey4memattt https://review.openstack.org/29361110:09
odyssey4meswati_ ok, repastebin the endpoint list (just the endpoint list) so I can verify that it's right10:10
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Update os_designate README.rst  https://review.openstack.org/29391910:10
swati_updated at http://pastebin.com/LhjVJd8K10:11
odyssey4meswati_ is that the output, or did you just edit the pastebin? ;)10:12
odyssey4meswati_ ok, the next thing to pastebin is the haproxy.conf for designate - it should be in /etc/haproxy/conf.d/designate on the host10:14
swati_yes jessee...this is the exact output : http://pastebin.com/taiR2Dvt10:14
odyssey4meand the output of lxc-ls -f10:14
tiagogomeswhy is it bridge-utils broken? I find the new ip command to be *awful*10:14
odyssey4metiagogomes you'll have to ask Apsu that one when he comes on line10:15
odyssey4meI think it comes down to the project for bridge-utils is no longer maintaining the code effectively.10:15
*** iceyao has quit IRC10:16
*** iceyao has joined #openstack-ansible10:16
tiagogomesperhaps, it is still used by neutron though10:17
odyssey4metiagogomes that sounds like an opportunity for a fix :)10:17
odyssey4mehughsaunders can you take a look at https://review.openstack.org/293611 ? I'd like to apply that pattern across the board if we have consensus that this is the right approach10:18
odyssey4meandymccr ^10:18
odyssey4memattt also, https://review.openstack.org/293782 is a fix to rectify an issue that's showing up in the integrated gate10:19
*** iceyao has quit IRC10:20
*** iceyao_ has joined #openstack-ansible10:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Gate: Ensure that AIO container apt components match the host  https://review.openstack.org/29306410:21
*** iceyao_ has quit IRC10:22
*** iceyao has joined #openstack-ansible10:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Gate: Ensure that AIO container apt components match the host  https://review.openstack.org/29305710:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Gate: Ensure that AIO container apt components match the host  https://review.openstack.org/29306410:23
*** skamithi13 has quit IRC10:23
*** iceyao has quit IRC10:23
*** iceyao has joined #openstack-ansible10:23
*** skamithi13 has joined #openstack-ansible10:24
*** iceyao has quit IRC10:24
*** iceyao has joined #openstack-ansible10:24
*** admin0 has quit IRC10:27
*** admin0 has joined #openstack-ansible10:28
swati_odyssey4me_ http://pastebin.com/Ntwv9MUv haproxy_config.yml10:29
swati_lxc-ls -f : http://pastebin.com/JbRG9BYi10:29
odyssey4meswati_ the resulting config is what's important - from  /etc/haproxy/conf.d/designate (or something like that) on the haproxy host10:29
odyssey4meswati_ and what is the address of eth0 on your host10:31
hughsaundersodyssey4me: lgtm10:33
odyssey4methanks hughsaunders10:36
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: Update os_designate README.rst  https://review.openstack.org/29391910:38
swati_jesse_ I am using VPN so cant access eth0 directly10:39
odyssey4meswati_ the eth0 of your AIO host?10:39
openstackgerritMerged openstack/openstack-ansible-os_nova: Fix default value of `nova_default_schedule_zone`  https://review.openstack.org/29378210:40
odyssey4meswati_ can you also pastebin your openstack_user_config?10:40
swati_also there is no such directory /etc/haproxy...this haproxy_config.yml is inside /opt/openstack-ansible/playbooks/vars/configs and has the settings for designate as well10:40
odyssey4meswati_ there is on the AIO host10:40
odyssey4meswati_ alternatively, can you execute 'openstack endpoint list' (do not restrict it to any services) and pastebin the output?10:41
odyssey4meswati_ basically it looks to me like the endpoint address is something on your storage network, which is inaccessible10:42
odyssey4meon an AIO, assuming that's what you've deployed, the internal/admin endpoints should use the ip address 172.29.236.100 automatically, and the public endpoint should be the ip address of the AIO host eth010:43
matttswati_: so there is a critical issue with os_designate at this moment in time10:47
matttwhich prevents it from being used in any capacity10:47
matttswati_: https://github.com/openstack/openstack-ansible-os_designate/blob/master/templates/designate.conf.j2#L9210:47
matttso everything worked for me, except the designate-api was redirecting with 127.0.0.110:48
swati_endpoint-list : http://pastebin.com/Jx8bb27K10:49
*** admin0 has quit IRC10:49
swati_openstack-user-config.yml http://pastebin.com/5siDPuAb10:49
openstackgerritMerged openstack/openstack-ansible: Fix supplied identity uri  https://review.openstack.org/29330310:50
odyssey4meswati_ you have a problem with your config10:51
odyssey4meyou've marked 10.16.34.6 as the internal and external lb address10:51
*** thorst has joined #openstack-ansible10:51
odyssey4meis that the eth0 address for the haproxy host?10:51
swati_yes..horizon and other services run on this only.........n initially with the same files designate all commands were running fine on the Kilo release10:53
odyssey4meswati_ execute the following: cd /opt/openstack-ansible/playbooks; ansible haproxy_all -m shell -a 'ip addr show eth0'10:54
odyssey4meswati_ also execute ansible haproxy_all -m shell -a 'cat /etc/haproxy/conf.d/designate'10:55
odyssey4memaybe rather do: ansible haproxy_all -m shell -a 'cat /etc/haproxy/conf.d/designate*'10:56
*** asettle has quit IRC10:57
swati_there is no such dir /etc/haproxy visible to me ....also this command gives an error...if you want I can paste the haproxy_install.yml file10:57
odyssey4meswati_ if that command errors for you, then how did you install this?10:57
odyssey4mewhere do you run ansible to install things?10:58
odyssey4meis it on your laptop, or on a host in the system?10:58
odyssey4meis this a multi-node environment, or an AIO?10:58
*** winggundamth has joined #openstack-ansible10:58
*** thorst has quit IRC10:58
swati_its multi-node10:58
logan-hlkv6: a little late but to add compute nodes, you want something like this... openstack-ansible setup-hosts.yml --limit <newhostname> && openstack-ansible setup-openstack.yml --skip-tags nova-key-distribute --limit <newhostname> && openstack-ansible setup-openstack.yml --limit compute_hosts --tags nova-key10:58
swati_I have VPN access10:58
odyssey4meok, where do you execute ansible from?10:58
swati_https://github.com/sharmaswati6/designate_files/......... the exact structure visible to me10:59
swati_jk10:59
swati_opt/openstack-ansible11:00
odyssey4meswati_ trying to shoehorn designate into openstack-ansible at this point is a tough job - the role builds, but doesn't work yet... so you're getting all stuck with things that don't matter right now11:00
odyssey4meyou're putting yourself in a position where you're constantly having to rebase into the liberty consolidated code base, which means you're also prone to making a lot of errors11:00
swati_I am just getting confused because the same files were working for me in Kilo and all designate commands ran fine11:01
odyssey4meI would recommend that you make use of a simpler environment. Test the role on its own in a VM to start with - let's get designate to a point where it works, then we can integrate it into the Mitaka code base which will be much, much simpler to maintain.11:01
odyssey4meswati_ the configuration files and templates are based of mitaka's code base11:02
odyssey4meit might work with liberty, but there are no guarantees11:02
swati_ohk..11:03
*** cfarquhar has quit IRC11:03
odyssey4mealso, if you continue to use your fork instead of using https://github.com/openstack/openstack-ansible-os_designate then we're not looking at the same code and it's hard for us to help you11:03
odyssey4mestart simple, once you understand how the simple things works - then we expand to more complex things11:04
swati_since the designate services are all up in my case, I am hopeful if I just rid of this endpoint thing, then atleast my designate commands will run and I can integrate its dashboard11:04
odyssey4meso a quick test to verify something in your environment - lxc-attach into the designate container and verify whether the API is accessible from there11:04
odyssey4meyou can simply to something like: curl http://127.0.0.1:9001 (from inside the designate container)11:05
odyssey4meif that works, then try do the same thing from outside the container, but use the container's address11:05
odyssey4metake a look at the content of the response11:06
odyssey4megetting the dashboard to work is a long way from now11:06
odyssey4mewhile the commands may work, currently the role doesn't actually deliver a functional DNS service11:07
odyssey4methat still needs to be done11:07
odyssey4methis is why I keep going back to forgetting about trying to make this work in the integrated build - make it work on its own first11:07
odyssey4mestart simple, grow from there11:07
winggundamthI think I found a bug on OSA when try to install another nova. http://paste.openstack.org/show/490865/11:08
odyssey4mewinggundamth nope, that's a known issue11:08
odyssey4mehow did you try to add a node?11:08
winggundamthhttp://docs.openstack.org/developer/openstack-ansible/install-guide/ops-addcomputehost.html11:08
winggundamthas describe here11:08
logan-winggundamth: you are running with --limit right? see what I just pasted above11:09
winggundamthyes11:09
odyssey4melogan- would you mind adding a review to fix that doc page?11:09
logan-sure, will do11:09
odyssey4methat one keeps coming up, and it never seems to get corrected11:09
odyssey4methanks11:09
winggundamthhaha so what I have to fix?11:09
logan-you need to skip nova-key-distribute tag when you run limited to 1 compujte node, and then re-run nova-key tag specifically later without a limit (or limited to compute_hosts)11:11
odyssey4mewinggundamth run the command as specified by logan- earlier on11:11
*** phiche has joined #openstack-ansible11:11
winggundamthlogan- odyssey4me oh sorry. I just see it11:11
*** jiteka has quit IRC11:14
winggundamthlogan- odyssey4me mattt are you will be at OpenStack Summit at Austin?11:15
*** phiche has quit IRC11:15
logan-Yep!11:16
*** phiche has joined #openstack-ansible11:16
winggundamthI just booked everything yesterday. I looking forward to see you all11:16
winggundamthI really love OSA that much. Now I have my 10 lab machines to test it and most of it went well.11:17
odyssey4mewinggundamth yep, I'll be there :)11:18
winggundamthonly problem I have on my use case is here https://ask.openstack.org/en/question/89829/can-access-from-floating-ip-but-cant-access-from-internal-ip/11:18
winggundamthstill no one answer it :(11:18
odyssey4megood to hear that things went well! I'm hoping that we can see some contributions from you in the near future :)11:18
matttwinggundamth: i won't be, no :(11:18
winggundamthmattt: arrr11:18
winggundamthodyssey4me: that's my next goal11:19
odyssey4mewinggundamth looking at your question11:19
winggundamthI intend to join design summit and see anything I can help with11:19
odyssey4mewinggundamth great!11:19
*** admin0 has joined #openstack-ansible11:20
winggundamthodyssey4me: as a infra guy. I can't help with python coding but for ansible I think I can do sth about it since I have few experience on this11:20
winggundamthadmin0: will you be at OpenStack Summit Austin?11:20
matttwinggundamth: where you travelling in from ?11:21
admin0i will not be winggundamth11:21
admin0this year :(11:21
winggundamthmattt: Bangkok, Thailand11:21
winggundamthadmin0: haha just want to thank you in person from what you help me11:21
matttwinggundamth: wow, nice!11:22
admin0the world is small .. we will meet someday winggundamth11:22
winggundamthadmin0: I'm sure we will ;)11:22
*** jiteka has joined #openstack-ansible11:23
admin0mattt: you are also in reading, UK ?11:23
matttadmin0: yep!11:23
admin0how many of you are in reading ?11:23
admin0i know odyssey4me  is also there11:23
winggundamthmattt admin0 odyssey4me logan- where do you stay right now?11:24
admin0me = netherlands11:24
admin0but planning to go to reading ( where i have relatives ) in the next 3-4 months11:24
admin0and invite odyssey4me  and matt to a party :D11:24
matttwinggundamth: UK, reading specifically11:25
matttadmin0: nice!  :)  keep me posted11:25
admin0yep :)11:25
winggundamthhaha so far away from me ><11:26
winggundamthno one actually use OpenStack in production in Thailand so I only have you guys help me here11:26
admin0no problem11:27
admin0i am originally from Nepal ..  transit is always Thailand :)11:27
winggundamthI attended to last summit so I got a lot of knowledge including OSA too11:27
admin0we have your back winggundamth  .. just don’t do purple unicorns and deviate from standard11:28
winggundamthadmin0: haha just hack it a little bit to use apt-cacher-ng and that's all11:28
winggundamthadmin0: actually still stuck on vlan network on my use case. if you wouldn't mind please see if you can help me ;)11:29
winggundamthadmin0: https://ask.openstack.org/en/question/89829/can-access-from-floating-ip-but-cant-access-from-internal-ip/11:29
admin0winggundamth:  that is why its called intenral IP11:30
admin0because it says internal to the openstack project/hosts/cluster11:30
admin0and you need floating to get outside11:30
winggundamthadmin0: so I just wonder it can ping, it can telnet, but seems like the packet is stuck somewhere?11:31
admin0if 192.168.1.0/24 is where you work , and you have a router that can also reach 10.10.10.0/24, that should work fine11:32
admin0but if you can reach 10.10.25.0/24 as well, then still it can be done using routing, or its something else11:32
odyssey4mewinggundamth can you use the CLI to output and pastebin the subnet, network and router that the instance is attached to11:32
admin0you need to tcpdump from your system, to router to compute node, to network node and check where your packets are reaching or not reaching11:32
odyssey4mewinggundamth we need to establish whether you've created the network/router with the right stuff to ensure that it is tagging the packets to get onto the vlan11:33
* winggundamth checking11:34
odyssey4mewinggundamth if you want to access the instances directly, you can't also access them via a floating ip11:34
odyssey4meif you did that you'd create a routing loop11:34
odyssey4meyour floating network will have to be completely different to your internal networks, and your internal networks will require at least one router that bridges from a tagged network to a virtual network11:35
*** skamithi13 has quit IRC11:36
*** skamithi13 has joined #openstack-ansible11:36
winggundamthodyssey4me: is this what you want? http://paste.openstack.org/show/490870/11:37
*** skamithi13 has quit IRC11:38
*** skamithi13 has joined #openstack-ansible11:38
odyssey4mewinggundamth so let's try to draw a picture here11:38
odyssey4methe instance is connected to a neutron subnet, right?11:39
winggundamthyes11:39
odyssey4methat subnet is on a network11:39
hughsaundersodyssey4me: would this help to draw your picture? http://asciiflow.com/11:39
odyssey4melol hughsaunders11:39
*** johnmilton has joined #openstack-ansible11:39
odyssey4meif you want your instance to be directly on a vlan tagged network, then the network has to be created in a specific way that tells neutron to tag it11:40
odyssey4mealtneratively, you can have it on a virtual network, routed onto a vlan tagged network11:40
odyssey4mewhich would you prefer - directly on the vlan or routed to a vlan?11:41
* winggundamth thinking11:41
odyssey4methe floating address, FYI is a NATted address which also has acl's through security groups... so it's like it's behind a very basic firewall11:42
*** thorst has joined #openstack-ansible11:42
winggundamthI think it will be directly on a vlan tagged network11:42
*** thorst has quit IRC11:43
odyssey4meok, to make that work you'd have to create the network in such a way that you're telling neutron what the tag is for that network11:43
odyssey4melet me see if I can find a reference to how to do that11:43
*** thorst has joined #openstack-ansible11:43
*** thorst_ has joined #openstack-ansible11:44
odyssey4meok, this mentions OVS and stuff to do on the host... but scroll down to the neutron net-create command: https://www.s3it.uzh.ch/blog/openstack-neutron-vlan/11:45
odyssey4melet's examine how it works11:45
winggundamthodyseey4me: more information on my network http://paste.openstack.org/show/490872/11:45
odyssey4meyou're telling neutron to create a network which is a provider network, of type vlan, and providing the vlan tag 842, and it must use the bridge on the compute hosts called vlan84211:46
odyssey4mein that particular instance11:46
odyssey4mein our case we would modify that command a little as you should already have the right bridge in place11:46
odyssey4mebear in mind, I suck at networking, so I may get this wrong11:46
winggundamthodyssey4me: I think I already do it in that way right? from my last paste11:47
odyssey4mewinggundamth ah, I see you almost have it right11:48
*** thorst has quit IRC11:48
*** openstackgerrit has quit IRC11:48
odyssey4meinternal-network-25 is the one that the interface on the instacne is attached to, right?11:48
*** openstackgerrit has joined #openstack-ansible11:48
winggundamthodyssey4me: yes11:48
odyssey4meon your compute hosts, do you have a bridge called 'vlan', or a bridge called 'br-vlan' ?11:49
odyssey4mein our standard setup I would imaging that it's br-vlan ?11:49
winggundamthodyssey4me: yes I have it11:49
winggundamthit's br-vlan11:49
odyssey4meok, let's see if we have a mapping for this11:51
*** retreved has quit IRC11:51
*** retreved has joined #openstack-ansible11:51
odyssey4mecan you pastebin the contents of the linuxbridge ml2 plugin on your compute node?11:52
*** skamithi14 has joined #openstack-ansible11:52
winggundamthhere you gohttp://paste.openstack.org/show/490875/11:52
winggundamthodyssey4me: here you go http://paste.openstack.org/show/490875/11:52
odyssey4mealso, can you pastebin the ml2 configuration from your neutron server?11:52
odyssey4meok, so I see the interface mapping from vlan to br-vlan in http://paste.openstack.org/show/490875/11:53
winggundamthodyssey4me: here http://paste.openstack.org/show/490876/11:53
*** iceyao has quit IRC11:53
odyssey4mewinggundamth you need to set router:external to True on internal-network-2511:54
odyssey4methat tells neutron that the routing is being handled by a device which is not a neutron l3 agent11:54
odyssey4meok, the rest of the conf looks right11:55
*** skamithi13 has quit IRC11:55
winggundamthodyssey4me: but the router can only have 1 external network and I already assign it to another gateway that is I want it too11:55
odyssey4mewinggundamth you should not have a router attached to this network11:56
odyssey4methis network's routing must be facilitated by your switches11:56
admin0winggundamth: you want the instances to be accessible from office ?11:56
admin0directly ?11:56
winggundamthadmin0: yes11:56
admin0winggundamth: then do something like this: https://www.openstackfaq.com/openstack-add-direct-attached-dhcp-ip/11:56
winggundamthadmin0: just like aws vpn use case11:56
admin0make sure that IP is routable/reachable from office11:57
openstackgerritMichael Davies proposed openstack/openstack-ansible: Add installation support for os_ironic  https://review.openstack.org/29377911:57
odyssey4meadmin0 that looks about right - although I see your network's 'router:external' flag is set to false11:58
winggundamthadmin0 odyssey4me let me draw a picture for you :)11:59
odyssey4mewinggundamth it's been a very long time since I worked on this stuff, and I didn't really understand it then11:59
odyssey4meadmin0 knows networking better than I do11:59
odyssey4meI'll defer to him. :)11:59
admin0what i did is correct odyssey4me  .. its directly reachable .. without you ned to created extra routers12:00
tiagogomeshttps://www.openstackfaq.com/openstack-add-direct-attached-dhcp-ip/ seems a bit incomplete. If you want tenants to be able to attach a VM directly to an external network, you also need something like http://paste.openstack.org/show/490878/12:00
odyssey4metiagogomes ah, but you see this is being done to a tenant network12:01
odyssey4menot an external network12:01
odyssey4meideally you never want the tenant to be able to attach to the external networks12:01
odyssey4methe admin should create the vlan tagged network (only admin can) for the tenant/project, then the project can attach vm's to that network as it belongs to the project12:01
tiagogomeswhy not? I may not be interested in the performance overhead of doing NAT12:02
*** admin0 has quit IRC12:02
swati_jesse_ the curl command inside and outside the container works well12:02
swati_but when I do http://127.0.0.1:9001/v1 or http://127.0.0.1:9001/v2 it fails12:02
odyssey4mein this case there is no nat - it's attaching directly to the network through the bridge and neutron tags it12:02
odyssey4meswati_ if you simply curl  http://127.0.0.1:9001 does it give you v1 and v2 back in the data as options for endpoints?12:03
odyssey4metiagogomes see http://docs.openstack.org/kilo/networking-guide/deploy_scenario4b.html - it actually shows it in quite a bit of detail12:05
winggundamthadmin0 odyssey4me this is picture https://goo.gl/photos/eL9xu4JMNQJRF6PL712:05
swati_yes the output looks like http://pastebin.com/HWDSv0DP12:07
winggundamthadmin0 odyssey4me I just want 192.168.1.2 can connect to 10.10.25.2712:07
winggundamthnow it can ping but sth happen when I try to access via ssh or http12:08
odyssey4meswati_ ok, now you'll have to dig into what's wrong with the service if it's not responding on the v2 sub-url... you'll likely have to validate that the api-paste file has the right contents for the designate branch you're using12:08
odyssey4mewinggundamth what is the thing marked 'neutron' ?12:09
winggundamthtcp packet can send to instance and instance can send ack back. but packet is lost after that12:09
odyssey4meand what is the thing above it?12:09
*** phiche1 has joined #openstack-ansible12:09
tiagogomesodyssey4me interesting. So if you boot a VM without passing network options, it attaches to the only existing provider network. That wouldn't work for me though, because I have to external networks12:10
*** phiche has quit IRC12:10
swati_ok il try12:11
*** admin0 has joined #openstack-ansible12:11
winggundamthodyssey4me: it is neutron/controller nodes12:12
tiagogomesodyssey4me also, if am I am understooding right, that VM is being booted as the admin user12:12
winggundamthodyssey4me: and the thing above neutron is switch12:12
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Role cleanup  https://review.openstack.org/29391912:13
admin0tiagogomes: i tested using different projects and it worked .. do I still need to do the override ?12:13
winggundamthodyssey4me: L3 switch12:13
odyssey4metiagogomes there are three different levels of networks - external (usually meant for floating IP's), shared (shared between all projects, but no floating IP's), then private networks per project12:13
odyssey4methe routers can be physical or virtual to provide routing between the networks12:13
admin0tiagogomes: i added it as shared  and not external12:13
admin0so if you add a public range as shared, anyone can be on it .. without routers .. and that exteral override is not necessary12:13
admin0no nat is necessary12:13
*** weshay has joined #openstack-ansible12:14
odyssey4meif you want to allow a project to attach to a *private* (not shared between projects) network that is vlan tagged and does not rely on l3 routing provided by the neutron l3 agent, then you create a network that is not shared, by a vlan provider network type12:14
odyssey4methen the project can happily attach to it12:14
odyssey4meif you want to create a shared vlan tagged network, then you simply create the network in the same way, but flag it as shared12:15
odyssey4mein your case you've created an external network, made for attaching routers only in a typical model, but you're allowing instances to attach to it12:15
odyssey4medoes that make sense?12:15
admin0“odyssey4me: ideally you never want the tenant to be able to attach to the external networks”  — till you run a public cloud :D12:17
*** thorst has joined #openstack-ansible12:17
*** swati_ has quit IRC12:18
tiagogomesok, I didn't try to create the network as not external. I remember to follow this guide https://www.s3it.uzh.ch/blog/openstack-neutron-vlan/12:18
*** thorst_ has quit IRC12:21
admin0hmm.. multiple approaches to solve the same12:22
*** saneax is now known as saneax_AFK12:22
odyssey4meadmin0 it's the terminology that becomes confusing - an 'external network' in the OpenStack sense of it is defined as a network on which floating IP addresses are assigned... instances do not directly attach to them12:30
*** asettle has joined #openstack-ansible12:34
*** winggundamth has quit IRC12:38
automagicallymorning12:42
odyssey4meo/ automagically12:42
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: Role cleanup  https://review.openstack.org/29391912:45
matttautomagically: sorry, just removed WIP from commit summary :(12:46
odyssey4memattt https://review.openstack.org/#/c/293816/ jmccrory did it! :)12:50
matttnice jmccrory !12:50
*** winggundamth has joined #openstack-ansible12:52
winggundamthadmin0 odyssey4me I can solve my problem now :)12:53
winggundamthjust add the route at office router. it needs to directly route to neutron not go to default gateway and everything solved12:53
odyssey4mewinggundamth awesome :)12:54
*** busterswt has joined #openstack-ansible12:55
*** admin0 has quit IRC12:56
*** Trident has quit IRC12:57
winggundamthodyssey4me: another problem :) I'm using this command to add more compute node12:58
winggundamthopenstack-ansible setup-hosts.yml --limit compute2 && openstack-ansible setup-openstack.yml --skip-tags nova-key-distribute --limit compute2 && openstack-ansible setup-openstack.yml --limit compute2 --tags nova-key12:58
winggundamthbut it's error on the last command12:58
winggundamthoddyssey4me logan- is the command correct? http://paste.openstack.org/show/490889/12:59
*** severion has quit IRC13:01
odyssey4mejmccrory automagically cloudnull d34dh0r53 stevelle mattt hughsaunders andymccr with thanks to jmccrory we have an update to the stable/miataka sha in the keystone role - see https://review.openstack.org/293816 - what're your thoughts on the approach for how to get this done? I think the updates there will break the other roles. Should we merge it and then do a raft of patches to update the other roles quickly, or13:02
odyssey4me should we figure out how to stage it (if at all possible) so that the other roles don't break.13:02
openstackgerritMerged openstack/openstack-ansible-os_keystone: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29361113:04
*** admin0 has joined #openstack-ansible13:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401013:07
*** asettle has quit IRC13:08
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_container_create: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401113:09
*** markvoelker has joined #openstack-ansible13:11
*** iceyao has joined #openstack-ansible13:11
*** woodard has joined #openstack-ansible13:12
*** Trident has joined #openstack-ansible13:12
*** Andrew_jedi has quit IRC13:12
*** asettle has joined #openstack-ansible13:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401213:13
*** asettle has quit IRC13:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401313:14
*** winggundamth has quit IRC13:15
matttautomagically: can you have a peep at https://review.openstack.org/#/c/293476/ since you're familiar with this work?13:15
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401413:16
cloudnullmorning13:17
matttmorning cloudnull13:17
cloudnullautomagically odyssey4me: +1 for the work13:17
cloudnullautomagically: +1 for talking about this at the meeting13:17
cloudnull^^ RE: keystone -bootstrap by jmccrory13:17
odyssey4mecloudnull good plan13:17
odyssey4methe meeting happens quite late in our day though, so I was hoping for us to discuss sooner so that we could get a head start13:18
odyssey4mebut hey, will go with that13:18
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_designate: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401513:19
openstackgerritMerged openstack/openstack-ansible-os_designate: Role cleanup  https://review.openstack.org/29391913:19
cloudnullIm happy to talk about it sooner.13:20
odyssey4mebasically I expect that removing the token from the config will result in the integrated build and all the other roles to break13:21
odyssey4mewe can either smash through patches to all the roles to update their SHA's and make sure they don't use the tokens, or we leave the token in the config and remove it later in another patch13:22
matttcloudnull: any thoughts on https://review.openstack.org/#/c/293476/?  if no objection i will apply to rest of the os_* roles13:22
bsvodyssey4me: do you know if the people working on glance is some out-of-space timezone? :)13:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_glance: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401613:23
odyssey4mebsv lol13:24
hughsaunderssigmavirus24_awa: is definitely from a distant planet13:24
*** scarlisle has joined #openstack-ansible13:24
odyssey4meI'm sure it could be said that most of OpenStack appears to be from outer space. :p13:24
*** karimb has joined #openstack-ansible13:24
odyssey4mecertainly from a code standpoint :p13:24
odyssey4me<--- says me, probably the worst coder in OpenStack13:25
*** asettle has joined #openstack-ansible13:25
bsv:D13:25
hughsaundersodyssey4me: you're not even close to winning that accolade13:26
cloudnullmattt: LGTM+213:27
cloudnullgood change to make things a lot simpler.13:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401713:28
matttthanks cloudnull !13:28
odyssey4meship it! :)13:28
*** retreved has quit IRC13:28
*** asettle has quit IRC13:30
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-rabbitmq_server: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401913:30
automagicallyWeighing in on the removal of keystone auth_token: I like Jesse’s suggestion of taking a two step approach13:30
odyssey4meautomagically this assumes, of course, that any of the other roles actually need to use the token at all... I have a vague idea that none of them actually use the token and just haven't checked yet13:31
automagicallyIt hopefully limits the risk to other roles and gate, and let’s us patch other roles in a more relaxed timeframe13:31
odyssey4mewe could also patch the other roles that do now - there should be no need for any other role to make use of the token, ever13:31
automagicallyodyssey4me: Well, looking at the glance role, it does13:31
odyssey4menaughty role13:31
matttthanks automagically !13:31
odyssey4me:p13:31
automagicallyThe general pattern of usage for the keystone lib is to pass the token in many cases throughout the roles13:32
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29402013:34
automagicallyWe’ve also got the SHA bumps that are likely to ripple changes through all the roles and likely have a multi-day impact on gate stability13:35
automagicallyI think the key choice is what do we want to tackle first13:35
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_server: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29402113:37
*** ametts has joined #openstack-ansible13:37
odyssey4mehow about we divide up the roles and apply patches now, with the current SHA's, to change from using the token to using the credentials instead?13:38
openstackgerritMerged openstack/openstack-ansible-os_keystone: Fix how constraints are added to pip_install_options  https://review.openstack.org/29347613:39
automagicallyodyssey4me: I’m not against getting the patches in motion13:39
automagicallyI’ll start in on aodh now13:40
logan-the other roles could use credentials even without any changes to the keystone token stuff right?13:40
logan-as keystone is already bootstrapped by then?13:40
automagicallytopic name: remove_admin_token_usage13:40
automagicallylogan-: I believe you are correct13:41
bsvodyssey4me: it seems that OSA/liberty ships with a broken glanceclient.13:42
odyssey4meoh, and by the way - we now also have https://github.com/openstack/openstack-ansible-os_barbican and https://github.com/openstack/openstack-ansible-os_magnum13:42
bsvCan I just upgrade the client, or will the entire setup roll over?13:42
odyssey4menote that these are not in a production ready state13:42
automagicallybsv: What are you running into with glanceclient?13:42
openstackgerritKevin Carter proposed openstack/openstack-ansible-galera_server: Add retry logic to mysql_upgrade  https://review.openstack.org/29382213:44
bsvIf I deploy 10 instances with volumes, 3-5 of them will fail. Looking at the logfiles I tracked it back to Cinder, from cinder it goes back to Glance.13:44
odyssey4mebsv The packages we ship are tested in our tests, and in openstack's tests... so that's highly unlikely. Our build will implement the latest available fully tested and working version that meets the requirements of the OpenStack projects.13:44
bsvit fails to get the image13:44
automagicallybsv: Can you open a launchpad bug with details13:44
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_glance: Fix how constraints are added to pip_install_options  https://review.openstack.org/29402613:44
bsvhttps://etherpad.openstack.org/p/cinder42513:44
odyssey4mebsv what's the back-end you're using with glance?13:45
odyssey4meis it swift, file, ceph, nfs?13:45
bsvNeed to check that.13:46
*** sigmavirus24_awa is now known as sigmavirus2413:47
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_cinder: Fix how constraints are added to pip_install_options  https://review.openstack.org/29402813:47
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add condition to local IP for overlay net  https://review.openstack.org/27379313:47
sigmavirus24hughsaunders: why are you revealing my (lack of) nationality? :P13:47
sigmavirus24Also I need to pick up reviews/contributions on the glance role13:47
hughsaunderssigmavirus24: bsv started it13:48
odyssey4mesigmavirus24 that'd be great - now that the roles are separated, you can watch only the ones related to your upstream work13:49
*** jthorne has joined #openstack-ansible13:49
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_nova: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403013:49
openstackgerritKevin Carter proposed openstack/openstack-ansible: Enable SSL termination for all services  https://review.openstack.org/27719913:50
odyssey4mesigmavirus24 I vaguely recall that if you used the file backend for glance, and you had multiple registry servers, you could tell the api service to do a round-robin retry x times in the hope that it finds the registry that actually holds the image?13:50
bsvodyssey4me: think we are using file13:51
sigmavirus24odyssey4me: I'm not sure that's true13:51
odyssey4mebsv see my message to sigmavirus24 above - the file backend is a very bad idea, unless you have mounted the file store on shared storage... otherwise your image is hosted on one of the registry servers and the api may not find it13:51
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_neutron: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403113:52
sigmavirus24Yeah, the file backend really is mostly for testing (e.g., devstack)13:52
bsvsigmavirus24: this is testing :)13:52
odyssey4melemme see if I can find that conf option13:53
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403413:54
bsvyeah, we are using file right now.13:54
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29403513:55
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_heat: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403613:56
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403413:56
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add ability to configure Neutron FWaaS  https://review.openstack.org/27589413:57
openstackgerritKevin Carter proposed openstack/openstack-ansible: Update LBaaS docs/config to use simple plugin names  https://review.openstack.org/29332013:57
odyssey4mesigmavirus24 bsv, hmm it seems that I might be confusing this with something else...13:57
odyssey4mebsv do you have an nfs server perhaps?13:58
bsvodyssey4me: confirmed, some images are missing on the glance-containers (not the primary)13:58
bsvis there some kind of service to keep them in sync?13:58
odyssey4mebsv glance does not synchronise its images - you have to do it13:58
* bsv facepalms13:58
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_aodh: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403713:58
bsvThat would explain a thing or two :)13:59
odyssey4meeffectively it's expected that you will use shared storage, swift or ceph13:59
bsvyeah, think we are going to try the direct 3PAR driver.13:59
*** Mudpuppy has joined #openstack-ansible13:59
odyssey4mebsv, not sure there is one? http://docs.openstack.org/liberty/config-reference/content/configuring-image-service-backends.html14:00
bsvceph is a behemoth :D14:00
*** Mudpuppy has quit IRC14:00
odyssey4mealthough you could use cinder as the back-end, and configure cinder to access the 3par14:00
bsvyes, that was the plan, going thru cinder14:00
*** Mudpuppy has joined #openstack-ansible14:00
bsvgreat, so 1. Get coffee, 2. Enjoy coffee, 3. Sync image directories :D14:01
odyssey4methe simplest route, for your PoC, is to create a shared LUN on the 3PAR, then mount it onto the file system in the file store's location14:01
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_ceilometer: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403914:01
odyssey4mealternatively, just for the PoC, you could also just setup an rsync cron job14:01
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404014:02
*** tiagogomes has quit IRC14:02
*** yaya has joined #openstack-ansible14:04
*** shausy has quit IRC14:05
*** shausy has joined #openstack-ansible14:06
bsvodyssey4me: well, there are some issues with Ubuntu and multipathing right now.14:06
bsvThe driver we use, have been commented out in the build :p14:06
bsvand other stuff14:06
*** yaya_ has joined #openstack-ansible14:07
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_cinder: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404114:07
*** yaya has quit IRC14:08
*** yaya_ is now known as yaya14:08
odyssey4mebsv, oh that's fun14:08
*** spotz_zzz is now known as spotz14:09
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404314:09
bsvwau, somehow the glance images are different on every controller :D14:11
*** shausy has quit IRC14:14
odyssey4mebsv, yes - when you upload an image it'll get put on any one of them14:14
odyssey4meand only one14:14
bsvawesome!14:15
*** jaypipes has quit IRC14:15
bsvRedundancy, oh no wait...?14:15
*** tiagogomes has joined #openstack-ansible14:17
ApsuMorning14:17
bsvApsu o/14:17
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_heat: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404814:17
*** marst has joined #openstack-ansible14:18
palendaeodyssey4me: I'm going to get a patch started for the neutron migration issue, but not sure how far I'll get today14:18
odyssey4mepalendae what was the final issue determination?14:18
palendaeodyssey4me: There is a neutron migration that was put in place during Kilo. From what we can gather, it runs when Kilo is installed, and is therefore skipped by alembic when Liberty's installed. The tables in question aren't made until Liberty, either14:19
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29403514:20
palendaeIt only affects networks that were made in Kilo, because the migration just adds them all into the networksecuritybindings table14:20
odyssey4mepalendae odd, if you run the migration on kilo doesn't it do the right things?14:20
palendaeodyssey4me: No, because the table it inserts values into doesn't exist in Kilo14:20
odyssey4meie is there a pre-migration db prep that must be done?14:20
palendaeNot that we could find14:21
odyssey4meok, and is there a neutron bug for this? it seems to me that this needs to be picked up upstream asap14:21
palendaeWe're trying to find some neutron people to comment both internally and externally, so far haven't heard back14:21
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404014:21
*** jaypipes has joined #openstack-ansible14:22
palendaehttps://bugs.launchpad.net/neutron/+bug/150931214:22
openstackLaunchpad bug 1509312 in neutron "unable to use tenant network after kilo to liberty update due to port security extension" [Undecided,Expired]14:22
odyssey4mepalendae I hear that mattt has a connection. ;)14:23
matttodyssey4me: wut14:24
palendaeLooks like https://bugs.launchpad.net/neutron/+bug/1461519 encountered it, too, but their patch doens't really help us...https://review.openstack.org/#/c/188209/814:24
openstackLaunchpad bug 1461519 in neutron "Enabling ml2 port security extension driver causes net-list to fail on existing deployment" [High,Fix released] - Assigned to Kahou Lei (kahou82)14:24
palendaeodyssey4me: Also, we tried re-running migrations manually after upgrading to Liberty; the neutron-db-manage/alembic commands exited early after comparing the hashes for the current DB version and what was in the models14:26
matttpalendae: Ihar Hrachyshka helped me w/ some questions a while back, that's the only neutron person i've interacted w/14:26
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_horizon: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405514:26
matttjmccrory: you around?14:26
jmccrorymattt: hey just on14:27
matttjmccrory: forget you're PST :(  can you look at https://review.openstack.org/#/c/290034/ when you get a moment?  it's not super urgent14:27
matttbut should go in sooner rather than later14:27
openstackgerritKevin Carter proposed openstack/openstack-ansible-os_cinder: Added case statement to cinder backend type adds  https://review.openstack.org/29405614:28
*** pcaruana has quit IRC14:28
jmccrorysure14:28
matttjmccrory: thank you !14:28
odyssey4mepalendae I would recommend punting this bug out to the ML for attention.14:29
odyssey4metag it specifically related to neutron14:29
palendaeNot a bad idea14:29
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_neutron: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405714:29
palendaeI'll do that and continue with my patch14:30
matttpalendae: did you ping about that bug today?14:30
mattti noticed when prometheanfire mentioned it yesterday it was super quiet14:30
palendaemattt: Not in the neutron channel yet14:30
prometheanfirehi?14:30
odyssey4meyeah, I'd also recommend going into the neutron channel14:30
openstackgerritKevin Carter proposed openstack/openstack-ansible-os_cinder: Added case statement to cinder backend type adds  https://review.openstack.org/29405614:30
odyssey4methis seems like a pretty rough bug to be having - and if it's not a bug, then they'd be best positioned to help us understand how to make it work14:31
palendaeRight14:31
palendaeI'm still going to work on a patch as a cover-our-asses thing14:31
prometheanfireI just pinged them again14:32
matttthanks prometheanfire14:32
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_nova: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405914:32
*** KLevenstein has joined #openstack-ansible14:33
automagicallyFYI cloudnull our SSL dependency in Heat is getting backported to Liberty. https://review.openstack.org/#/c/293965/ Gives me hope that once we wrap up the work in OSA we may be able to backport14:34
cloudnulloooo. that makes it possible for us to do term in liberty too14:35
automagicallyyeppers14:35
cloudnullif they're backporting, and it lands, we should too14:35
cloudnullIMHO14:35
logan-speaking of ssl term14:36
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_swift: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29406414:37
Apsutiagogomes: odyssey4me was correct. For bridge-utils, it's mostly fine except it uses deprecated and abandoned kernel code paths to do its work. Same as the net-tools binaries. More importantly, iproute2's ip/ss/bridge are complete and let you access the full power of Linux networking.14:37
Apsutiagogomes: If you're having trouble with something about "ip" perhaps I can help shed some light on it14:37
logan-i am seeing some weird issues uploading images to glance via haproxy ssl + glance ssl middleware. glance complains about the connection closing before all of the data has been received14:37
automagicallylogan-: Any difference when taking glance ssl middleware out of the picture?14:38
logan-i bypassed the haproxy endpoint and uploaded directly to a glance api server, and it worked. so it seems to be something related to the ssl term setup. going to troubleshoot it more but if someone else runs into it lets chat14:38
automagicallyHmm..interesting14:38
logan-not yet, thats going to be a next step14:38
automagicallyCurious to hear more about how that goes14:39
odyssey4melogan- client -> haproxy ssl -> glance api -> glance_store -> storage ... plenty of moving parts... what's the back end storage for glance?14:39
logan-ceph14:39
*** sdake has joined #openstack-ansible14:39
odyssey4melogan- make sure that your client, haproxy, glance and glance_store settings all have the same timeouts14:39
odyssey4meit is easily possible that the api service may timeout before haproxy does, or the other way around14:40
*** sigmavirus24 is now known as sigmavirus24_awa14:40
odyssey4meI saw some weird behaviour with a swift store once where glance would dribble data for a few mins, then pause for a few mins, then dribble some more, then pause14:40
odyssey4meduring that I discovered how important all the timeouts are14:40
*** sigmavirus24_awa is now known as sigmavirus2414:41
logan-will do. things seem to work smooth without the ssl term, but once I put all of that in place this started. I'll pull more logs etc and see where we can get with it. I found an old glance bug that seemed to indicate it might be a timeout issue like that on the LB, but they were only seeing it with >1GB images. I am seeing it even on a 40mb cirros raw image.14:42
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_tempest: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29407014:42
odyssey4melogan- when I was operating OpenStack more, I opted to ensure that all internal stuff was without SSL and only external/public/client interactions went via SSL... this meant that all the services would work smoothly without trouble, and only 'customers' would be affected... and the ratio of 'customer' API calls to internal API calls was very, very low14:44
logan-yup14:44
bsvodyssey4me: all fixed now!14:44
logan-another thing I noticed is neutron is hitting nova's public api endpoint for port updates14:45
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: Removing reference to internal RPC repo  https://review.openstack.org/29302414:45
logan-i'm trying to do the same thing, public is ssl and all of the internal services speak on non-ssl endpoints14:45
logan-not using signed certs in testing has made it easy to narrow down the services which aren't talking to the right endpoints ;)14:46
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405914:46
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_cinder: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404114:47
*** jorge_munoz has joined #openstack-ansible14:47
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404314:47
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_heat: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404814:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29407014:48
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_horizon: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405514:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29406414:48
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_neutron: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405714:48
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_nova: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405914:49
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_tempest: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29407014:49
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_swift: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29406414:49
*** jorge_munoz has quit IRC14:50
*** raddaoui has joined #openstack-ansible14:50
* odyssey4me wait for jmccrory's vote before adding his to automagically's patches :)14:52
automagicallyYeah, stupid mistake there on the commit messages14:52
odyssey4methanks for whipping those up automagically!14:52
jmccrorylol14:52
automagicallyShould be the end of channel spam14:53
jmccroryyeah, thanks automagically14:53
spotzautomagically is trying to catch up to odyssey4me:)14:54
*** kencjohnston_ has quit IRC14:54
*** kencjohnston has quit IRC14:54
*** kencjohnston has joined #openstack-ansible14:54
automagicallyspotz: Don’t think thats going to be possible for Mitake. He’s like #7 in commits or something14:54
*** sonus has joined #openstack-ansible14:54
spotzhehehe14:54
spotzI can't beat anyone on commits, but I'm staying ahead of mhayden on reviews:)14:55
odyssey4meheh, automagically is doing well on reviews though :)14:55
spotzI've been slacking this week, had to do lots of Opsy stuff which take time and attention14:56
*** yaya has quit IRC14:57
*** jorge_munoz has joined #openstack-ansible14:58
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add ansible fact clean up script to upgrade-utils  https://review.openstack.org/29408414:59
*** jorge_munoz_ has joined #openstack-ansible15:01
*** tiagogomes has quit IRC15:01
*** jorge_munoz has quit IRC15:02
*** jorge_munoz_ is now known as jorge_munoz15:03
*** karimb has quit IRC15:04
*** alejandrito has joined #openstack-ansible15:05
*** jorge_munoz has quit IRC15:07
openstackgerritMerged openstack/openstack-ansible-os_horizon: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405515:07
openstackgerritMerged openstack/openstack-ansible-os_neutron: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405715:07
automagicallyI’d love to collect additional logs in the IRR functional tests. Where do the Jenkins publishers get defined?15:08
meteorfoxandymccr: hey,  another tunable that I had to adjust to fix a couple issues with Swift was the memcache_max_connections. Currently is not exposed as var. I set it from 2 to 4 connections per worker and was able to mitigate the connection limit errors to memcache .15:08
automagicallyI took a quick look in https://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/jobs but couldn’t seem to find the publisher macro defs15:09
meteorfoxandymccr: this is proxy-server.conf15:09
openstackgerritMerged openstack/openstack-ansible-os_ceilometer: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404015:09
automagicallyAh nm, think I found them here: https://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/jobs/macros.yaml15:10
odyssey4meautomagically we'd have to do something similar to what we're doing in the main repo - create a log dir in the repo, then have our build process collect the logs into there15:10
openstackgerritMerged openstack/openstack-ansible-os_horizon: Adding Vagrantfile for local developer testing  https://review.openstack.org/29095715:11
*** karimb has joined #openstack-ansible15:11
andymccrhey meteorfox, you can set that via ansible using the config overrides then, rsync was a bit diff in that the config file was a bit strange - but for proxy server we can do that using the "swift_proxy_server_conf_overrides" var15:11
automagicallythx odyssey4me15:12
odyssey4meautomagically we may also have to add an extra bit of config to the jobs, but that's easy enough15:12
meteorfoxandymccr: ok cool15:12
odyssey4meit' not much good unless we have logs to collect15:12
odyssey4meI think we should pick up on that in the next cycle15:12
odyssey4meI'll add it to my notes.15:12
*** tiagogomes has joined #openstack-ansible15:14
automagicallyodyssey4me: The motivator is that it appears that the functional tests wherein we attempt to talk to the various service apis are failing randomly, presumably due to a race condition between service startup and functional test playbook execution. I’ve seen it on ceilometer and now glance15:14
andymccrmeteorfox: https://github.com/openstack/openstack-ansible/blob/master/doc/source/install-guide/configure-openstack.rst explains how to do it!15:14
odyssey4memaybe we should have an initial test which waits for the port to come up? or for the basic uri to respond? then execute tests?15:15
automagicallySo, in both cases, we’re attempting the GET the basic uri15:15
meteorfoxandymccr:  nice, definitely much scalable than adding a var for every option in a config file15:15
automagicallyBut yeah, waiting on the port, and/or retrying a few times may be more sane15:16
odyssey4memeteorfox andymccr or http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-openstack.html if you want to see it rendered in pretty :)15:16
odyssey4meautomagically it may make sense to have retries/delays on that initial test before it fails15:16
automagicallyYeah, adding that now15:17
*** jmccrory_ has joined #openstack-ansible15:18
openstackgerritMerged openstack/openstack-ansible-os_aodh: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29403515:21
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: Basic functional test of the ceilometer role  https://review.openstack.org/29378415:22
openstackgerritMerged openstack/openstack-ansible-os_cinder: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404115:22
openstackgerritMerged openstack/openstack-ansible-os_horizon: Enable functional convergence testing  https://review.openstack.org/29003415:25
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_horizon: [WIP] Standardise role  https://review.openstack.org/29409515:26
openstackgerritMerged openstack/openstack-ansible-os_tempest: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29407015:27
*** neilus has quit IRC15:28
*** unlaudable has quit IRC15:29
*** weezS has joined #openstack-ansible15:31
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Add ability to configure Neutron FWaaS  https://review.openstack.org/29346715:32
*** iceyao has quit IRC15:32
marstHello! Apologies for off-topic, but can anyone help with guides/articles on how to use ansible to manage openstack after installation? I need to create few tenants&users, change quotas for each user etc.15:34
marstmy google-fu is failing me, and docs.ansible.org isn't very helpful neither.15:34
automagicallymarst: You might find our keystone ansible library useful: https://github.com/openstack/openstack-ansible-plugins/blob/master/library/keystone15:35
odyssey4memarst ansible 2 has some modules - have you looked at the docs?15:35
*** phiche1 has quit IRC15:35
odyssey4memarst alternatively you can easily use the shell commands to execute the standard openstack commands15:35
odyssey4memarst also https://developer.rackspace.com/blog/operating-your-openstack-cloud-using-ansible/ / https://www.packtpub.com/virtualization-and-cloud/openstack-administration-ansible15:36
marstThank you very much! Appreciate it.15:36
*** raddaoui has quit IRC15:42
openstackgerritMerged openstack/openstack-ansible-os_neutron: Add ability to configure Neutron FWaaS  https://review.openstack.org/29346715:42
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_swift: Fix how constraints are added to pip_install_options  https://review.openstack.org/29411015:48
alextricity25bgmccollum: Hey man. Could you link me your heat templates for osa again?15:50
openstackgerritKevin Carter proposed openstack/openstack-ansible: Added memcache flush to upgrade process  https://review.openstack.org/29411515:51
palendaealextricity25: https://github.com/cloud-training/rpc-heat-ansible ?15:52
palendaeI think Byron's out on paternity leave15:52
*** karimb has quit IRC15:52
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_swift: Fix how constraints are added to pip_install_options  https://review.openstack.org/29411015:52
alextricity25oh! Thanks palendae :)15:52
*** phiche has joined #openstack-ansible15:55
*** phiche1 has joined #openstack-ansible15:55
openstackgerritKevin Carter proposed openstack/openstack-ansible: Added memcache flush to upgrade process  https://review.openstack.org/29411515:56
*** javeriak has joined #openstack-ansible15:57
jmccroryodyssey4me: would you mind retriggering your +workflow on https://review.openstack.org/#/c/289510/ ?15:58
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: Basic functional test of the ceilometer role  https://review.openstack.org/29378415:58
*** phiche has quit IRC15:59
odyssey4mejmccrory done!16:01
odyssey4memeeting in #openstack-meeting-4 cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino,16:01
odyssey4me ametts, v1k0d3n, severion, bgmccollum16:01
jmccroryodyssey4me thanks16:01
*** yaya has joined #openstack-ansible16:01
*** mgoddard has quit IRC16:03
*** mgoddard has joined #openstack-ansible16:03
*** raddaoui has joined #openstack-ansible16:03
openstackgerritMerged openstack/openstack-ansible-repo_server: Trim apt package list  https://review.openstack.org/28951016:04
*** yaya has quit IRC16:04
*** yaya has joined #openstack-ansible16:06
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_horizon: [WIP] Standardise role  https://review.openstack.org/29409516:08
*** bsv has quit IRC16:10
*** yaya has quit IRC16:13
*** jwitko has quit IRC16:20
*** raddaoui has quit IRC16:21
openstackgerritMerged openstack/openstack-ansible-os_aodh: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403716:22
*** pcaruana has joined #openstack-ansible16:22
*** raddaoui has joined #openstack-ansible16:23
*** jwitko has joined #openstack-ansible16:26
*** michaelgugino has joined #openstack-ansible16:26
*** mikelk has quit IRC16:30
spotzcloudnull accidently fixed your commit messafe on 294084 when leaving comments for typos:(16:34
*** v1k0d3n has joined #openstack-ansible16:34
cloudnullthats ook16:35
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible: Add ansible fact clean up script to upgrade-utils  https://review.openstack.org/29408416:35
*** karimb has joined #openstack-ansible16:36
*** javeriak has quit IRC16:36
*** yaya has joined #openstack-ansible16:37
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Workaround missing neutron security bindings  https://review.openstack.org/29415216:44
v1k0d3nhey guys...question...i'm looking through the documentation and it's not jumping out at me...16:44
admin0v1k0d3n: whats not jumping ?16:44
v1k0d3nif i want to change the default 172. public address cidr range for neutron...what changes do i need to make in /etc/openstack_deploy prior to deployment?16:45
v1k0d3ni've been using most of the defaults for my needs until now...16:45
*** sigmavirus24 is now known as sigmavirus24_awa16:45
*** sigmavirus24_awa is now known as sigmavirus2416:45
admin0there is no public cidr in neutron16:45
admin0172 is all internal16:45
palendaeFor the neutron issue: https://review.openstack.org/#/c/294132/ is up for a neutron fix (against master), https://review.openstack.org/294152 is up for a workaround. I've commented on the neutron one asking about my fix.16:46
palendaed34dh0r53, rackertom, git-harry ^16:46
palendaeIhar also responded on the ML16:47
v1k0d3nadmin0: so the public-subnet 172.29.248.0/22 is created during turnup for an AIO16:48
admin0v1k0d3n: i am not using aio ..16:48
admin0:(16:48
v1k0d3ni'm having my team build out AIO to get a feel for the project before we deploy multi16:48
*** yarkot_ has joined #openstack-ansible16:48
*** alejandrito has quit IRC16:49
rackertompalendae: I'm testing Ihar's patch now.16:49
sigmavirus24hey odyssey4me is there a plan to have separate role core reviewer teams that all inherit from openstack-ansible-core?16:49
palendaerackertom: Thanks16:50
rackertom👍16:50
sigmavirus24because that would be convenient16:50
palendaeAlso from Ihar's email: "Yeah. To trigger the bug, you don’t need to upgrade. Just create a network/port without the extension enabled; then enable the extension; then try to start an instance using the network/port."16:50
odyssey4mesigmavirus24 yes, I will propose at the summit that each role has its own core group - and will also propose that if a dev team for that service is interested in partnering with us, that the core team for the service gets added to16:51
*** alejandrito has joined #openstack-ansible16:51
sigmavirus24odyssey4me: that's far too much16:52
sigmavirus24Most of the core teams of services are not deployers16:52
sigmavirus24Nor will most of them want core on a role16:52
odyssey4mesigmavirus24 it'll be discussed at the summit and reviewed on a case by case basis16:52
odyssey4mebut yeah, essentially we need to move to a more distributed development and review model.16:53
sigmavirus24I'm not sure that means what you think it means16:54
*** jiteka has quit IRC16:55
sigmavirus24Also tossing core around isn't really great for a project's reputation. Kind of like why Salt has a bad reputation for accepting any first-time contribution regardless of how awful it is16:55
sigmavirus24http://beesbeesbees.com/16:55
admin0v1k0d3n: i have documented a single server setup https://www.openstackfaq.com/openstack-dev-server-setup-ubuntu/  .. which still allows you to do multi setup, but using VMs16:56
v1k0d3ni found it. i had to look again, but it's found in /etc/openstack_deploy/openstack_user_config.yml.16:58
v1k0d3nadmin0: this is awesome ^^ (what you just sent). this is what I'm doing now...and it's perfect.16:58
v1k0d3ni'm starting an ansible pre-deploy set of playbooks to prep the deploy and target hosts currently...16:59
v1k0d3nhttps://github.com/att-esst/osa-prep16:59
stevellev1k0d3n: you got your answer?  We just wrapped the community meeting, most eyes were focused there16:59
v1k0d3nand i need to do a vm setup run-through to build out ceph backends, configure the mac addresses for pxe and base ubuntu installs...etc. your test lab fits perfectly which what i need to do now.17:00
v1k0d3nadmin0: thank you! stevelle: yup...i got what i need. thanks guys! :)17:00
v1k0d3ni'm also still working on the tower-osa-deployment. that should fit really well with all of the prep work. i want to give this to the osa project once i have more worked out with it.17:01
*** alejandrito has quit IRC17:01
*** raddaoui has quit IRC17:02
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_ceilometer: Basic functional test of the ceilometer role  https://review.openstack.org/29378417:02
*** weezS has quit IRC17:04
*** admin0 has quit IRC17:06
odyssey4mev1k0d3n glad you're still working on it :)17:11
v1k0d3nodyssey4me: yeah, i've just been slammed lately. when i have a little more, i will reach back out.17:12
v1k0d3nif i wanted to contribute it back to you guys (as say an add-on...whatever) what is your process for merging/pull requests? do you have an agreement and who do i need to talk to about that process?17:13
openstackgerritRobb Romans proposed openstack/openstack-ansible: Release note for Repo Sync Patch  https://review.openstack.org/29369117:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon: Add ability to configure Neutron FWaaS  https://review.openstack.org/29346917:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon: Add ability to configure Neutron FWaaS  https://review.openstack.org/29346917:14
odyssey4meautomagically ^ the depends-on seemed to have gotten zuul stuck, so I removed it from the commit message and rebased17:14
*** fawadkhaliq has joined #openstack-ansible17:16
*** b3rnard0 is now known as b3rnard0_away17:18
jmccroryanyone free for a second +2 on https://review.openstack.org/#/c/291885/ - neutron convergence test ?17:19
*** yarkot_ has quit IRC17:19
* automagically looking jmccrory 17:19
*** karimb has quit IRC17:19
*** fawadkhaliq has quit IRC17:20
*** fawadkhaliq has joined #openstack-ansible17:21
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add playbook to ensure neutron port sec rules work  https://review.openstack.org/29419217:23
*** skamithi13 has joined #openstack-ansible17:23
*** skamithi14 has quit IRC17:24
jmccrorythanks automagically17:25
automagicallythank you, I love how cleanly organized the test plays are17:25
*** asettle has joined #openstack-ansible17:25
*** McMurlock1 has quit IRC17:26
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377317:27
automagicallyAny cores available for review, we’ve got 4 remaining roles with the keystone admin token removal: https://review.openstack.org/#/q/topic:remove_admin_token_usage+status:open17:28
openstackgerritMerged openstack/openstack-ansible: Release note for Repo Sync Patch  https://review.openstack.org/29369117:29
cloudnullautomagically: looking now17:30
*** asettle has quit IRC17:31
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377317:31
*** michaelgugino has quit IRC17:31
stevellelooks like they're all done17:32
automagicallyThx cloudnull17:33
cloudnullthank you automagically, jmccrory, stevelle17:33
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377317:34
openstackgerritMerged openstack/openstack-ansible-os_horizon: Add ability to configure Neutron FWaaS  https://review.openstack.org/29346917:39
*** daneyon has joined #openstack-ansible17:40
*** phiche1 has quit IRC17:40
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Adjust swift plays to use unified os-swift role  https://review.openstack.org/29391117:41
openstackgerritMerged openstack/openstack-ansible-os_swift: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29406417:44
odyssey4meif any cores are available, there's a series of patches in line which will help the gate checks move a little more quickly and reliably: https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+topic:gate-optimise+status:open17:44
*** fawadkhaliq has quit IRC17:46
openstackgerritMerged openstack/openstack-ansible-os_nova: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29405917:46
openstackgerritMerged openstack/openstack-ansible-os_heat: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404817:46
*** fawadkhaliq has joined #openstack-ansible17:48
openstackgerritMerged openstack/openstack-ansible-os_glance: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29404317:49
*** KLevenstein has quit IRC17:53
*** KLevenstein has joined #openstack-ansible17:54
*** weezS has joined #openstack-ansible17:54
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Enable functional convergence testing  https://review.openstack.org/29188517:56
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Add functional testing  https://review.openstack.org/29270317:56
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Remove iptables checksum rule script  https://review.openstack.org/29306717:57
*** daneyon has quit IRC17:57
odyssey4mejmccrory you may wish to add these bits to your neutron tests: https://review.openstack.org/29401117:57
odyssey4meit'll speed up the test a little and should hopefully come under the 30 min limit.17:58
*** v1k0d3n has quit IRC17:58
*** v1k0d3n has joined #openstack-ansible17:59
*** sigmavirus24 is now known as sigmavirus24_awa18:00
*** b3rnard0_away is now known as b3rnard018:02
jmccroryodyssey4me, yeah looks good18:03
*** weshay has quit IRC18:04
*** neilus has joined #openstack-ansible18:06
*** neilus has quit IRC18:07
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Enable functional convergence testing  https://review.openstack.org/29188518:07
*** admin0 has joined #openstack-ansible18:07
*** neilus has joined #openstack-ansible18:12
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Basic functional testing for the keystone role  https://review.openstack.org/29421718:13
* admin0 is back :D 18:14
openstackgerritMerged openstack/openstack-ansible-lxc_container_create: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401118:16
admin0fsid_uuid  — is this a random variable ?18:17
*** pcaruana has quit IRC18:18
odyssey4mejmccrory plenty more where those came from :) https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+topic:gate-optimise+status:open18:18
odyssey4meadmin0 it's a uuid18:18
odyssey4meadmin0 if that's for Ceph, then it's the uuid of your cluster - it should be unique to your cluster and never change once it's set up18:19
odyssey4meadmin0 you can generate your own using uuidgen :)18:19
odyssey4meadmin0 or more likely in this case, from bash: uuidgen | tr '[:upper:]' '[:lower:]'18:20
jmccroryodyssey4me awesome, looks like that definitely helped get galera-server under 30 on ovh18:20
odyssey4merelocating, afk for a bit18:28
*** sigmavirus24_awa is now known as sigmavirus2418:28
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377318:29
odyssey4mejust throwing it out there - would it be terrible for us to make use of ubuntu's default mysql/rabbitmq packages for the independent roles that need those services?18:29
odyssey4meit'd make our independent role tests go somewhat faster I imagine?18:29
*** pcaruana has joined #openstack-ansible18:30
*** tiagogomes has quit IRC18:32
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Basic functional testing for the keystone role  https://review.openstack.org/29421718:33
jmccroryprobably a few versions behind what we're currently deploying18:33
jmccroryoh, just speaking for testing though? don't see that as a big deal18:33
automagicallyI’m a -1 on that. I think we should bias for correctness/consistency with OSA, our recommended deployment use cases over speed18:33
automagicallyUnless the idea is that role functional tests would just never interact with any aspects of a service under test such that we think the mismatch would matter18:34
odyssey4mepersonally, I see the integrated gate as the integrated test where we test all things ours18:37
odyssey4mebut in the independent roles it's quite literally focused on the quickest path to testing changes in this role18:37
odyssey4methe infra supporting the role in question for the role tests, to me, doesn't have to be 'production grade' - it needs to suit the purpose of testing the role with as few dependencies as possible18:38
odyssey4meI'm easy either way, but I do think it'll cut deployment times down a bit.18:39
odyssey4meit may also reduce the complexity of the test playbooks a bit.18:39
jmccroryso thinking just replace galera/mysql role dependencies with an apt task?18:41
jmccrorygalera/rabbit*18:41
odyssey4meyep18:41
*** Mudpuppy_ has joined #openstack-ansible18:42
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Enable functional convergence testing  https://review.openstack.org/29188518:42
automagicallyI’m curious how that might compare with functional/integration testing efforts on the service teams themselves. i.e. what does the Keystone, Heat, Glance team depend on18:42
automagicallyWorth some investigation certainly, faster feedback and less test cruft has lots of benefit18:42
odyssey4meautomagically they use a few things18:43
odyssey4mesqlite for a large body of tests18:43
odyssey4methen mysql and postgresql are used for the integration tests, I think18:43
dstanekodyssey4me: yes, at least for keystone. integration tests are in tempest.18:43
odyssey4methey don't do cluster testing in their gates, so they only use the default mysq/rabbitmq packages18:43
automagicallyAh, got it18:44
dstanekodyssey4me: we're looking at using real databases for our upcoming functional tests too18:44
odyssey4medstanek perhaps we can have you use our keystone role for that testing ;)18:44
dstanekodyssey4me: i wish, but i think we are bound to devstack18:45
dstanekodyssey4me: i've made a bunch of devstack plugins for it18:45
*** Mudpuppy has quit IRC18:45
odyssey4mewould the keystone team be averse to having our role implemented as a non-voting gate check?18:45
openstackgerritMerged openstack/openstack-ansible-galera_server: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401018:46
dstanekodyssey4me: not sure, but if you're will to coach me, i'm willing to try18:46
odyssey4mewe'd be keen on partnering more closely with the keystone team to co-develop the role so that as changes are made in keystone's code, our role is testing that change and we can find production-type bugs early and get them resolved18:47
jmccroryodyssey4me: we'd still need some additional configs dropped for infra services, but maybe those can just be generalized tasks as well. interested in seeing how much time would be saved though18:47
*** KLevenstein has quit IRC18:47
*** KLevenstein has joined #openstack-ansible18:47
*** KLevenstein has quit IRC18:47
odyssey4mejmccrory which configs? we have playbook tasks to create users, vhosts, etc - those can be done against the default package setups as far as I've seen18:48
admin0i am stuck at TASK: [ceph-mon | ceph monitor mkfs with keyring (before infernalis release)] *** .. errorr is: stderr: parse error setting 'fsid' to '62f04a011fbb80030bb0a13701c20b41'18:48
admin0who can offer some help18:48
dstanekodyssey4me: i've got lots of stuff for this week already, but i'd love to talk more next week. maybe i could come up with a proposal for next week's project meeting18:48
cloudnullodyssey4me: im -1 on testing w/ the default system packages. even tough its could be a time saver I'd rather we dog food.18:48
jmccroryodyssey4me my.cnf?18:48
odyssey4mejmccrory what needs the file?18:49
odyssey4mecloudnull sure, I want us to eat the dog food - but that's why we have an integrated gate - to test everything together18:49
odyssey4medstanek I think we're a little tied up in the Mitaka release - perhaps we can arrange a chat at the summit?18:50
cloudnullsure but whats the benefit of not using the role we know already work, besides a potential speed benefit.18:50
cloudnullit would simply be yet another stack to maintain18:51
dstanekodyssey4me: works for me18:51
odyssey4mecloudnull how about we do a test and try it out and see :)18:51
odyssey4meit's hardly a stack - it's one task18:51
cloudnullits not one task,18:51
cloudnullneither rabbit or mysql work out of the box.18:52
cloudnullunless you debconf18:52
cloudnullwhich is only available on ubuntu/debian.18:52
odyssey4mehmm, I'm doing some work on ironic tonight and will provide feedback18:52
odyssey4mebut when I last tested, it was one task18:52
odyssey4meI need to run.18:52
*** Mudpuppy_ has quit IRC18:53
cloudnullseems like we're looking to shave minutes off the IRR role test and unless its a lot of minutes im -118:53
odyssey4meAgain, I'm just putting it out there as it seems we're cutting it quite close to the 30 min limit on some of the roles.18:53
cloudnullsee you odyssey4me18:53
cloudnullodyssey4me:  we can up that timeout to 60 min or so18:53
*** Mudpuppy has joined #openstack-ansible18:53
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-os_neutron: Allow ml2 extension drivers to be overridden  https://review.openstack.org/29423118:54
*** Mudpuppy has quit IRC18:54
*** Mudpuppy has joined #openstack-ansible18:54
spotznight odyssey4me18:56
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Add functional testing  https://review.openstack.org/29270318:56
*** asettle has joined #openstack-ansible18:57
*** mgoddard has quit IRC18:58
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron: Remove iptables checksum rule script  https://review.openstack.org/29306719:01
*** asettle has quit IRC19:01
*** galstrom_zzz is now known as galstrom19:02
*** b3rnard0 is now known as b3rnard0_away19:05
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Allow ml2 extension drivers to be overridden  https://review.openstack.org/29423719:07
*** eil397 has joined #openstack-ansible19:11
openstackgerritRobb Romans proposed openstack/openstack-ansible: Added configuration information for using Ceph with Cinder  https://review.openstack.org/29087319:12
*** fawadkhaliq has quit IRC19:13
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Disable Neutron port security driver on upgrades  https://review.openstack.org/29424319:23
*** javeriak has joined #openstack-ansible19:23
openstackgerritMerged openstack/openstack-ansible: Update LBaaS docs/config to use simple plugin names  https://review.openstack.org/29332019:25
*** klamath has joined #openstack-ansible19:25
alextricity25Does anybody know why it takes so long to ssh into VMs on an AIO. something to do with DNS maybe?19:25
jthornealextricity25: that's usually the case19:26
jthornessh is trying to do a reverse lookup and it timesout19:26
alextricity25jthorne: Thanks. Is there anyway to turn that off?19:26
jthornethere are client and server side parameters to turn it on/off19:27
jthorneit may be a server side feature you have to turn off19:27
*** yaya has quit IRC19:27
jthornealextricity25: pass -vvvv to your ssh connection to verify that's what it's hanging on19:28
klamathHowdy, wondering if this proposed change was implemented 3) Enable some form of encryption to ensure the replication of objects across locations is secure. https://specs.openstack.org/openstack/openstack-ansible-specs/specs/kilo/multi-region-swift.html19:28
*** jmccrory_ has quit IRC19:28
*** ametts has quit IRC19:29
palendaeUpdated Liberty upgrade review dashboard: https://review.openstack.org/#/q/project:openstack/openstack-ansible+status:open+topic:liberty_upgrade+OR+bug/150931219:29
*** kencjohnston_ has joined #openstack-ansible19:32
*** b3rnard0_away is now known as b3rnard019:34
*** raddaoui has joined #openstack-ansible19:34
cloudnullandymccr: ping RE: multi-region object encryption -- was the implemented?19:35
alextricity25Is there anything special I need to do to make DNS works on instances built on an AIO environment?19:36
cloudnullalextricity25:  from the VM?19:36
alextricity25I added nameserver 8.8.8.8 to /etc/resolv.conf, but that doesn't seem to do the trick19:36
alextricity25yes. on the vm19:36
cloudnullnothing that im aware of. in cirros images i usually add google ns and it works19:37
alextricity25hmmm...let me give that a try on cirros19:37
cloudnullmaybe something fishy in the sec group rules/19:38
cloudnulls/\//?/19:38
alextricity25I do get this when I run 'host google.com 8.8.8.8':19:38
alextricity25;; reply from unexpected source: 8.8.8.8#49, expected 8.8.8.8#5319:38
alextricity25which i really fishy!19:38
*** skamithi13 has quit IRC19:40
*** skamithi13 has joined #openstack-ansible19:41
*** skamithi14 has joined #openstack-ansible19:42
*** johnmilton has quit IRC19:42
*** skamithi13 has quit IRC19:46
*** skamithi14 has quit IRC19:47
*** skamithi13 has joined #openstack-ansible19:47
alextricity25cloudnull: Instances that use a neutron router for outbound traffic have no problem pinging google.com. It's only instances that I attach directly to the 'public' network that can't resolve. Am I missing anything?19:52
cloudnullno dns setup when you created the public network ?19:53
alextricity25even with the cirros image, if it's directly attached to the flat DHCP provider public network, then it won't ping google.com19:53
alextricity25cloudnull: I"m using the public network that tempest creates19:53
alextricity25Hmmm...even with 'dns-nameservers' configured on the public-subnet, still no ping19:55
cloudnullIm not sure.19:56
alextricity25Do cirros VMs attached directly to the public network give you this issue?19:56
cloudnullif you do private network w/ public float does it work ?19:56
alextricity25^^^ Yeah19:56
alextricity25That's the only way it works19:56
cloudnulllet me go make some vms, ill be bit im kicking things right now19:57
alextricity25Thanks cloudnull19:57
odyssey4meautomagically would you mind taking a peek at https://review.openstack.org/275894 seeing as the dependent patches have all merged?19:57
automagicallywill do19:57
odyssey4mejmccrory would you mind adding your review to https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+topic:gate-optimise+status:open (all the one's marked 'Tests: ' are the same ?19:58
*** raddaoui has quit IRC19:59
*** javeriak has quit IRC20:01
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Disable Neutron port security driver on upgrades  https://review.openstack.org/29424320:02
odyssey4meautomagically the neutron convergence patch from jmccrory needs a nudge too https://review.openstack.org/29188520:02
palendaeodyssey4me: Provided the upgrade workaround merges, what version number are you looking at tagging tomorrow?20:05
palendaehttps://review.openstack.org/#/c/291468/ refers to the version number where upgrades are possible is why I ask20:05
odyssey4mepalendae next Liberty milestone is 12.0.820:08
*** raddaoui has joined #openstack-ansible20:08
palendaeodyssey4me: Ok, that's what I wrote. Wasn't sure if it would be bumped to indicate upgrades or not20:08
*** skamithi13 has quit IRC20:10
*** skamithi13 has joined #openstack-ansible20:10
*** skamithi13 has quit IRC20:10
*** skamithi13 has joined #openstack-ansible20:10
*** skamithi13 has quit IRC20:11
*** skamithi13 has joined #openstack-ansible20:11
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add manual upgrade step document  https://review.openstack.org/29146820:12
odyssey4mepalendae a few tweaks in the patch20:12
odyssey4mepalendae https://review.openstack.org/#/c/294243/220:12
jmccroryodyssey4me: good to go for rest of the host apt/pip configs20:14
odyssey4mesweet, thanks jmccrory :)20:14
*** raddaoui has quit IRC20:15
*** raddaoui has joined #openstack-ansible20:15
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Disable Neutron port security driver on upgrades  https://review.openstack.org/29424320:16
*** pcaruana has quit IRC20:17
*** asettle has joined #openstack-ansible20:17
openstackgerritMerged openstack/openstack-ansible-repo_server: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29402120:17
*** raddaoui has quit IRC20:17
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401920:19
*** fawadkhaliq has joined #openstack-ansible20:19
*** galstrom is now known as galstrom_zzz20:19
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Disable Neutron port security driver on upgrades  https://review.openstack.org/29424320:20
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: [WIP] Basic functional test of the aodh role  https://review.openstack.org/29377320:20
openstackgerritMerged openstack/openstack-ansible-repo_build: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29402020:21
openstackgerritMerged openstack/openstack-ansible-os_neutron: Enable functional convergence testing  https://review.openstack.org/29188520:21
openstackgerritMerged openstack/openstack-ansible-os_neutron: Add functional testing  https://review.openstack.org/29270320:21
*** asettle has quit IRC20:22
openstackgerritMerged openstack/openstack-ansible-os_swift: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401720:23
automagicallyjmccrory: Would you mind reviewing: https://review.openstack.org/#/c/293784/, https://review.openstack.org/#/c/294217/, https://review.openstack.org/#/c/293606/ and finally https://review.openstack.org/#/c/293024/20:23
openstackgerritMerged openstack/openstack-ansible-os_ceilometer: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401320:24
jmccrorysure, taking a look20:24
openstackgerritMerged openstack/openstack-ansible-os_designate: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401520:25
openstackgerritMerged openstack/openstack-ansible-os_aodh: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401220:27
openstackgerritMerged openstack/openstack-ansible-os_cinder: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401420:27
openstackgerritMerged openstack/openstack-ansible-os_glance: Tests: Make containers use the host's apt/pip config  https://review.openstack.org/29401620:28
*** woodard has quit IRC20:28
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377320:29
*** pcaruana has joined #openstack-ansible20:30
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_glance: Fix how constraints are added to pip_install_options  https://review.openstack.org/29402620:33
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_aodh: Basic functional test of the aodh role  https://review.openstack.org/29377320:34
odyssey4mejmccrory here's another set of like patches which need to get merged: https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+status:open+branch:master+topic:pip_install_options20:34
automagicallyI’m out for the day folks. See ya on the flip side20:34
jmccrorylater20:35
*** ametts has joined #openstack-ansible20:42
openstackgerritMerged openstack/openstack-ansible-os_keystone: Basic functional testing for the keystone role  https://review.openstack.org/29421720:47
odyssey4mecheers automagically - have a great eve!20:47
odyssey4methanks jmccrory :)20:47
*** weshay has joined #openstack-ansible20:50
openstackgerritMerged openstack/openstack-ansible-os_neutron: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403120:51
openstackgerritMerged openstack/openstack-ansible-os_cinder: Fix how constraints are added to pip_install_options  https://review.openstack.org/29402820:53
odyssey4meI'm out for the night. Cheers all!20:54
spotzYou said that earlier odyssey4me!20:54
spotzNight20:54
openstackgerritMerged openstack/openstack-ansible-os_nova: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403020:55
*** raddaoui has joined #openstack-ansible20:55
openstackgerritMerged openstack/openstack-ansible-os_designate: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403420:58
*** fawadkhaliq has quit IRC21:00
openstackgerritMerged openstack/openstack-ansible-os_ceilometer: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403921:00
*** Mudpuppy has quit IRC21:06
*** asettle has joined #openstack-ansible21:06
*** kencjohnston_ has quit IRC21:08
*** asettle has quit IRC21:11
openstackgerritMerged openstack/openstack-ansible: Add ability to configure Neutron FWaaS  https://review.openstack.org/27589421:12
openstackgerritMerged openstack/openstack-ansible: Removing reference to internal RPC repo  https://review.openstack.org/29302421:12
*** kencjohnston_ has joined #openstack-ansible21:13
*** fawadkhaliq has joined #openstack-ansible21:15
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_heat: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403621:17
*** sdake has quit IRC21:28
*** weezS has quit IRC21:29
*** sdake has joined #openstack-ansible21:30
*** raddaoui has quit IRC21:36
*** thorst has quit IRC21:42
*** thorst has joined #openstack-ansible21:43
*** sdake has quit IRC21:45
*** fawadkhaliq has quit IRC21:46
*** thorst has quit IRC21:47
openstackgerritMerged openstack/openstack-ansible-os_heat: Fix how constraints are added to pip_install_options  https://review.openstack.org/29403621:51
*** asettle has joined #openstack-ansible21:55
*** kencjohnston_ has quit IRC21:57
*** fawadkhaliq has joined #openstack-ansible21:57
*** asettle has quit IRC22:00
*** marst has quit IRC22:02
*** fawadkhaliq has quit IRC22:04
*** raddaoui has joined #openstack-ansible22:04
*** fawadkhaliq has joined #openstack-ansible22:04
*** klamath has quit IRC22:06
*** neilus has quit IRC22:08
*** Mudpuppy has joined #openstack-ansible22:12
*** spotz is now known as spotz_zzz22:12
*** busterswt has quit IRC22:13
*** ametts has quit IRC22:14
*** b3rnard0 is now known as b3rnard0_away22:18
*** asettle has joined #openstack-ansible22:20
*** thorst has joined #openstack-ansible22:21
openstackgerritMerged openstack/openstack-ansible: Removing openstack_environment.yml testing symlink  https://review.openstack.org/29360622:23
*** asettle has quit IRC22:25
*** jthorne has quit IRC22:25
*** raddaoui has quit IRC22:28
*** raddaoui has joined #openstack-ansible22:28
*** Mudpuppy has quit IRC22:32
*** raddaoui has quit IRC22:39
*** raddaoui has joined #openstack-ansible22:39
*** sigmavirus24 is now known as sigmavirus24_awa22:40
*** raddaoui has quit IRC22:42
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_designate: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29431522:45
*** Mudpuppy has joined #openstack-ansible22:55
*** admin0 has quit IRC22:59
*** johnmilton has joined #openstack-ansible23:01
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_zaqar: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29432023:04
*** cfarquhar has joined #openstack-ansible23:05
*** cfarquhar has quit IRC23:05
*** cfarquhar has joined #openstack-ansible23:05
*** asettle has joined #openstack-ansible23:07
*** saneax_AFK is now known as saneax23:12
*** networkninja has joined #openstack-ansible23:17
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add condition to local IP for overlay net  https://review.openstack.org/27379323:22
*** sdake has joined #openstack-ansible23:24
*** scarlisle has quit IRC23:24
*** fawadkhaliq has quit IRC23:31
*** fawadk has joined #openstack-ansible23:31
*** phiche has joined #openstack-ansible23:33
openstackgerritMerged openstack/openstack-ansible-galera_server: Use var galera_cluster_members to identify cluster  https://review.openstack.org/29072923:35
*** metral is now known as metral_zzz23:35
*** johnmilton has quit IRC23:36
*** phiche has quit IRC23:37
*** phiche has joined #openstack-ansible23:37
*** Trident has quit IRC23:40
*** Trident has joined #openstack-ansible23:40
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_magnum: Implement base configuration for OpenStack-CI  https://review.openstack.org/29433023:43
openstackgerritMerged openstack/openstack-ansible-os_swift: Merge os-swift-sync role into os-swift  https://review.openstack.org/29353623:43
*** phiche1 has joined #openstack-ansible23:43
openstackgerritMerged openstack/openstack-ansible-os_swift: Fix how constraints are added to pip_install_options  https://review.openstack.org/29411023:43
*** phiche has quit IRC23:43
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_magnum: Implement base configuration for OpenStack-CI  https://review.openstack.org/29433023:46
openstackgerritMerged openstack/openstack-ansible-os_glance: Fix how constraints are added to pip_install_options  https://review.openstack.org/29402623:46
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Adjust swift plays to use unified os-swift role  https://review.openstack.org/29391123:46
*** johnmilton has joined #openstack-ansible23:50
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_magnum: Implement base configuration for OpenStack-CI  https://review.openstack.org/29433023:50
*** markvoelker has quit IRC23:54
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_magnum: Remove dependency on the Keystone admin auth token  https://review.openstack.org/29433123:55
*** karimb has joined #openstack-ansible23:57
*** johnmilton has quit IRC23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!