| *** cloader89 has quit IRC | 00:08 | |
| *** thorst has joined #openstack-ansible | 00:18 | |
| *** jayc has quit IRC | 00:29 | |
| coolj | stevelle: it's own in javascript https://github.com/openstack/horizon/tree/stable/liberty/openstack_dashboard/static/app/core/openstack-service-api | 00:29 |
|---|---|---|
| *** jayc has joined #openstack-ansible | 00:41 | |
| *** metral is now known as metral_zzz | 00:41 | |
| *** thorst has quit IRC | 00:42 | |
| *** thorst has joined #openstack-ansible | 00:43 | |
| *** thorst has quit IRC | 00:51 | |
| *** weezS has joined #openstack-ansible | 00:56 | |
| *** sdake has joined #openstack-ansible | 01:02 | |
| *** richoid has quit IRC | 01:11 | |
| *** sdake has quit IRC | 01:14 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: Reorganize test playbooks https://review.openstack.org/303090 | 01:18 |
| *** sdake has joined #openstack-ansible | 01:19 | |
| *** sdake_ has joined #openstack-ansible | 01:22 | |
| *** sdake has quit IRC | 01:25 | |
| *** richoid has joined #openstack-ansible | 01:26 | |
| stevelle | Now I have the tempest role not completing http://paste.openstack.org/show/539cbTkyeaQO5H0Hk5aN/ but I'm done for the night | 01:27 |
| *** thorst has joined #openstack-ansible | 01:49 | |
| *** thorst has quit IRC | 01:56 | |
| *** weezS has quit IRC | 01:59 | |
| *** weezS has joined #openstack-ansible | 02:00 | |
| *** shanec_ has quit IRC | 02:07 | |
| *** nhadzter has quit IRC | 02:19 | |
| *** nhadzter has joined #openstack-ansible | 02:19 | |
| *** openstackstatus has quit IRC | 02:19 | |
| openstackgerrit | Merged openstack/openstack-ansible: Adding ERLANG VM tuning parameters https://review.openstack.org/301288 | 02:21 |
| *** woodard has joined #openstack-ansible | 02:22 | |
| *** richoid1 has joined #openstack-ansible | 02:23 | |
| *** rstarmer has joined #openstack-ansible | 02:25 | |
| *** richoid has quit IRC | 02:25 | |
| *** woodard has quit IRC | 02:28 | |
| *** weezS has quit IRC | 02:31 | |
| *** rstarmer has quit IRC | 02:31 | |
| *** sdake_ is now known as sdake | 02:33 | |
| *** spotz_zzz is now known as spotz | 02:35 | |
| *** Mudpuppy has joined #openstack-ansible | 02:41 | |
| *** richoid has joined #openstack-ansible | 02:52 | |
| *** thorst has joined #openstack-ansible | 02:54 | |
| *** richoid1 has quit IRC | 02:55 | |
| *** b3rnard0_away is now known as b3rnard0 | 02:59 | |
| *** iceyao has joined #openstack-ansible | 03:00 | |
| *** thorst has quit IRC | 03:01 | |
| *** iceyao_ has joined #openstack-ansible | 03:02 | |
| *** iceyao has quit IRC | 03:03 | |
| *** kong has quit IRC | 03:36 | |
| *** Mudpuppy has quit IRC | 03:50 | |
| *** Mudpuppy has joined #openstack-ansible | 03:51 | |
| *** Mudpuppy has quit IRC | 03:56 | |
| *** thorst has joined #openstack-ansible | 03:59 | |
| *** thorst has quit IRC | 04:06 | |
| openstackgerrit | Michael Carden proposed openstack/openstack-ansible-ironic: Add tests for the ironic CLI https://review.openstack.org/303104 | 04:14 |
| *** keedya has quit IRC | 04:16 | |
| *** hieulq has joined #openstack-ansible | 04:17 | |
| hieulq | hi guys, can you have a look at https://review.openstack.org/#/c/297563/ | 04:18 |
| *** sdake_ has joined #openstack-ansible | 04:19 | |
| *** sdake has quit IRC | 04:19 | |
| *** javeriak has joined #openstack-ansible | 04:20 | |
| openstackgerrit | Michael Carden proposed openstack/openstack-ansible-ironic: Add tests for the ironic CLI https://review.openstack.org/303104 | 04:56 |
| *** sdake has joined #openstack-ansible | 05:03 | |
| *** thorst has joined #openstack-ansible | 05:04 | |
| *** sdake_ has quit IRC | 05:06 | |
| *** thorst has quit IRC | 05:11 | |
| *** iceyao_ has quit IRC | 05:12 | |
| *** sdake_ has joined #openstack-ansible | 05:13 | |
| *** iceyao has joined #openstack-ansible | 05:14 | |
| *** sdake has quit IRC | 05:17 | |
| *** javeriak has quit IRC | 05:20 | |
| *** javeriak has joined #openstack-ansible | 05:23 | |
| *** markvoelker has quit IRC | 05:30 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: Reorganize test playbooks https://review.openstack.org/303090 | 05:31 |
| openstackgerrit | Neill Cox proposed openstack/openstack-ansible-ironic: Add tests for the ironic REST API https://review.openstack.org/298654 | 05:33 |
| *** admin0 has joined #openstack-ansible | 05:45 | |
| admin0 | morning all | 05:45 |
| *** kong has joined #openstack-ansible | 05:48 | |
| *** javeriak_ has joined #openstack-ansible | 05:55 | |
| *** saneax_AFK is now known as saneax | 05:55 | |
| *** sdake has joined #openstack-ansible | 05:55 | |
| *** javeriak has quit IRC | 05:56 | |
| *** admin0 has quit IRC | 05:56 | |
| *** sdake_ has quit IRC | 05:57 | |
| *** mikelk has joined #openstack-ansible | 06:00 | |
| *** weezS has joined #openstack-ansible | 06:04 | |
| *** thorst has joined #openstack-ansible | 06:09 | |
| *** sdake_ has joined #openstack-ansible | 06:09 | |
| *** sdake has quit IRC | 06:11 | |
| *** thorst has quit IRC | 06:16 | |
| *** spotz is now known as spotz_zzz | 06:28 | |
| *** markvoelker has joined #openstack-ansible | 06:30 | |
| *** markvoelker has quit IRC | 06:36 | |
| *** javeriak_ has quit IRC | 06:42 | |
| *** mrda is now known as mrda_away | 07:01 | |
| *** admin0 has joined #openstack-ansible | 07:06 | |
| winggundamth | hi | 07:12 |
| winggundamth | I see Mitaka release! congratulation | 07:12 |
| winggundamth | still wonder no upgrade path from liberty at this time right? | 07:13 |
| *** thorst has joined #openstack-ansible | 07:14 | |
| admin0 | winggundamth: i plan to test that out :D | 07:21 |
| admin0 | liberty -> mitaka :D | 07:21 |
| *** weezS has quit IRC | 07:21 | |
| *** thorst has quit IRC | 07:22 | |
| winggundamth | me too | 07:23 |
| winggundamth | already have heavy testing liberty one to upgrade to mitaka | 07:23 |
| winggundamth | our company plans to fully using OpenStack in production after install Mitaka with OSA is stable :) | 07:25 |
| mattt | winggundamth: yeah we don't have a liberty->mitaka upgrade plan at the moment, i'm sure it is something we'll be starting to do soon | 07:26 |
| * winggundamth willing to help | 07:26 | |
| mattt | winggundamth: that'd be great! | 07:27 |
| mattt | winggundamth: have you seen the work done to upgrade kilo->liberty? | 07:27 |
| winggundamth | mattt: I read it | 07:28 |
| winggundamth | mattt: would be upgrade path will be the same? | 07:28 |
| mattt | winggundamth: it should be yeah | 07:33 |
| mattt | winggundamth: obviously the plays will need to be updated to deal w/ specific issues resulting form liberty->mitaka upgrade | 07:34 |
| mattt | admin0: looks like you have unaddressed feedback in your ceph review | 07:34 |
| winggundamth | mattt: ok. maybe I can try it with AIO first :) | 07:34 |
| admin0 | lots of feedback | 07:34 |
| admin0 | which one did i fail to address :D ? | 07:35 |
| mattt | admin0: you set glance notifications to noop for some reason | 07:36 |
| mattt | which is not necessary in the context of this review | 07:36 |
| winggundamth | admin0: that's huge patch | 07:36 |
| mattt | admin0: i also raised the point of potentially moving this content into either the glance and nova sections | 07:37 |
| mattt | admin0: the ceph cinder integration is in the cinder section, so i thought it would make sense to break your patch out and to put the bits under the relevant section | 07:37 |
| admin0 | that is also good :) | 07:38 |
| admin0 | i can do that :) | 07:38 |
| mattt | admin0: it was just a suggestion, but the noop bit needs to go i think :) | 07:39 |
| admin0 | mattt: https://www.openstackfaq.com/openstack-ansible-ceph/ — if you look into the working cinder conf .. can I have multi servers but just 1 containers_vars ? iand if yes, where do they indent : | 07:41 |
| admin0 | then i can submit a broken down ceph example for nova, glance and cinder | 07:41 |
| admin0 | and have 1 patch to address all of them | 07:41 |
| mattt | admin0: i think you could probably put cinder_backends into /etc/openstack_deploy/user_variables.yml and then you wouldn't have to set container_vars, but i wouldn't recommend doing that | 07:43 |
| mattt | admin0: i would probably just enumerate it out like you did there | 07:43 |
| admin0 | so each storage section will have the same container_vars repeated | 07:44 |
| mattt | admin0: i tried doing something similar for devices (put my list of OSDs into /etc/openstack_deploy/user_variables.yml instead of listing them out per device in my ceph.yml conf.d file) | 07:44 |
| admin0 | need an example gist for me to get into my head :D | 07:44 |
| mattt | admin0: it worked fine, until i had a non-standard server and had to override it, which didn't work because /etc/openstack_deploy/user_variables.yml always wins since it's called last | 07:45 |
| admin0 | oh | 07:45 |
| admin0 | so how i am doing it is correct ? | 07:45 |
| mattt | i believe so yes | 07:45 |
| admin0 | ok | 07:45 |
| admin0 | in that case, i will cover the components individually for ceph, but also wish to have 1 document which covers all of them ? so that if people want to integrate ceph wtih ansible, they do not have to dig into 4 differerent pages ? | 07:46 |
| *** nhadzter has quit IRC | 07:47 | |
| admin0 | for example, if you break it .. then i have a different ceph for nova and a different ceph for glance .. so am i supposed to declare mons differently for each platform | 07:48 |
| *** pcaruana has joined #openstack-ansible | 07:49 | |
| *** nhadzter has joined #openstack-ansible | 07:49 | |
| *** Oku_OS-away is now known as Oku_OS | 07:51 | |
| *** jamielennox is now known as jamielennox|away | 07:53 | |
| admin0 | mattt: you know the variables in ceph are preseted with developers in mind . saying hey .. you can include this, include that .. but people doing deployments are sysadmins usually not developers .. so the current configure-ceph page says .. “hey you can override the conf file with fsid, etc etc etc” . but it does not tell me what i need to do . what is the minimum i need to move on [apprarantly there are 100 of things to take | 07:55 |
| admin0 | care of ] .. so i want to include the cinder part here as well ( so that there is one page that shows minimum of how to do it ) and then on rest of the pages, maybe include overrides and reference this page | 07:55 |
| mattt | admin0: i'm not against that, i more or less wanted to raise the issue that cinder has its documentation for ceph integration elsewhere, just so you were aware | 07:57 |
| admin0 | i see that, and i see it incomplete | 07:57 |
| admin0 | because in cinder we mention cinder specific only .. and then installers are left wondering where is the complete picture ? are we repeating mons for each sevice we want to have .. etc | 07:58 |
| admin0 | as example configure-cinder-backup page mentions nothing .. like hey .. you must declare mons as well .. | 07:58 |
| openstackgerrit | Neill Cox proposed openstack/openstack-ansible-ironic: Add tests for the ironic REST API https://review.openstack.org/298654 | 07:59 |
| admin0 | let me remove the noop from the existing, and then include cinder glance and nova as well \ | 07:59 |
| admin0 | and then submit a patch | 07:59 |
| admin0 | so that one page gives a clear picture ..and rest talks about how to have each with ceph | 07:59 |
| admin0 | so cinder-ceph will tell exactly what the min is to get it working, and i will include the current things as well, so that people know they can always override | 08:00 |
| *** javeriak has joined #openstack-ansible | 08:10 | |
| *** admin0 has quit IRC | 08:11 | |
| *** joker_ has quit IRC | 08:16 | |
| *** admin0 has joined #openstack-ansible | 08:16 | |
| admin0 | sorry .. disconnected … did i miss anything :D ? | 08:16 |
| admin0 | http://eavesdrop.openstack.org/irclogs/%23openstack-ansible/%23openstack-ansible.2016-04-08.log.html — last log is that i have quit :D | 08:17 |
| admin0 | so not sure if i missed anythnign :D | 08:17 |
| *** thorst has joined #openstack-ansible | 08:19 | |
| *** iceyao_ has joined #openstack-ansible | 08:22 | |
| *** iceyao has quit IRC | 08:26 | |
| *** thorst has quit IRC | 08:26 | |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: ceph configuration for glance and nova https://review.openstack.org/301922 | 08:27 |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: ceph configuration for glance and nova https://review.openstack.org/301922 | 08:31 |
| admin0 | can i update subject but keep the change_id same | 08:31 |
| *** markvoelker has joined #openstack-ansible | 08:31 | |
| admin0 | so that i can include cinder as well ? | 08:31 |
| *** openstackgerrit has quit IRC | 08:33 | |
| *** openstackgerrit has joined #openstack-ansible | 08:33 | |
| *** javeriak_ has joined #openstack-ansible | 08:34 | |
| *** javeriak has quit IRC | 08:34 | |
| *** d9k_ has joined #openstack-ansible | 08:35 | |
| *** markvoelker has quit IRC | 08:36 | |
| *** d9k has quit IRC | 08:37 | |
| winggundamth | cloudnull mattt: I tried to install cinder-volume on 3 infra nodes. only 1 cinder-volume start and the others down | 08:40 |
| winggundamth | I checked in configuration and found that [rbd] section in cinder.conf only exist in node that started | 08:41 |
| winggundamth | not sure this is a bug or not | 08:41 |
| *** javeriak has joined #openstack-ansible | 08:45 | |
| *** javeriak_ has quit IRC | 08:46 | |
| winggundamth | https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/os_cinder/templates/cinder.conf.j2#L101-L106 | 08:49 |
| odyssey4me | winggundamth how did you configure the back-ends? | 08:49 |
| winggundamth | these are lines that not show in other 2 cinder-volumes | 08:49 |
| winggundamth | I'm using Ceph | 08:49 |
| *** hieulq has quit IRC | 08:49 | |
| winggundamth | odyssey4me: http://paste.openstack.org/show/493443/ | 08:51 |
| winggundamth | this is my configuration for storage_hosts | 08:51 |
| winggundamth | oh. I know it now | 08:52 |
| winggundamth | it is the nest of only infra3 | 08:53 |
| winggundamth | so I have to put it all nodes. anyway to do as a global for all nodes? | 08:53 |
| odyssey4me | winggundamth it is best to define the cinder-volume back-ends per node, even if they're repeated configurations for each node | 08:58 |
| *** javeriak has quit IRC | 08:58 | |
| odyssey4me | it then allows you to add other back-ends, if you have them | 08:58 |
| odyssey4me | winggundamth admin0 the starting point would be to validate that a deployment from the stable/liberty branch works well - then we test upgrades from liberty to mitaka to see what needs to be done to make it happen with as little down-time as possible, and to determine changes that needs ot take place | 09:00 |
| *** saneax is now known as saneax_AFK | 09:00 | |
| *** javeriak has joined #openstack-ansible | 09:02 | |
| admin0 | odyssey4me: mattt .. from user_variables.yml container_vars: can i do something like is_metal: false ( without the need to edit the env file ) ? | 09:05 |
| odyssey4me | admin0 you could try, but I would not advise it | 09:05 |
| odyssey4me | if you have set your environment to have each host group for each service on separate hosts, then it should work - and some could even share hosts, but some cannot | 09:06 |
| odyssey4me | I would rather that people don't confuse things by sharing that option at this point | 09:06 |
| admin0 | odyssey4me: my tested setup is here: https://www.openstackfaq.com/openstack-ansible-ceph/ — there i have said disable is_metal from /etc/openstack_deploy/env.d/cinder.yml .. i am now trying to submit a patch for configure-cinder .. and I do not want to say disable this globally there | 09:07 |
| admin0 | but rather give it an option | 09:08 |
| admin0 | never mind .. i figured out how to word it correctly | 09:10 |
| *** javeriak has quit IRC | 09:12 | |
| odyssey4me | I think that the is_metal option can be set per host too. | 09:13 |
| odyssey4me | It'd be nice to test that option and show it. Basically have ceph in a container, but cinder-lvm on metal. | 09:13 |
| odyssey4me | but let me not distract you :) | 09:13 |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: ceph configuration for nova glance and cinder https://review.openstack.org/301922 | 09:15 |
| odyssey4me | oh dear, it seems that the plugin change hughsaunders did has introduced a bug: http://logs.openstack.org/25/296525/9/check/gate-openstack-ansible-os_neutron-ansible-func-ubuntu-trusty/581c2df/console.html#_2016-04-07_20_15_49_266 | 09:16 |
| odyssey4me | hughsaunders are you in? | 09:16 |
| hughsaunders | odyssey4me: yep | 09:16 |
| odyssey4me | it seems that the module change has made the new setting required instead of optional - I looked through it and didn't spot that... it looked all optional to me | 09:17 |
| *** sdake_ has quit IRC | 09:17 | |
| hughsaunders | odyssey4me: its optional according to the ansible module, but looks like I failed to make it actually optional in the code | 09:17 |
| hughsaunders | will have a look now | 09:18 |
| odyssey4me | yeah, thanks | 09:18 |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: ceph configuration for nova glance and cinder https://review.openstack.org/301922 | 09:22 |
| admin0 | we have infra01 and infra1 in docs .. while it means the same | 09:22 |
| admin0 | sometimes with different ips | 09:22 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-rabbitmq_server: Remove nova mentions from tasks and tags https://review.openstack.org/303315 | 09:23 |
| admin0 | i want to create a drawing with group of servers .. say controllers, swift, storage, visualize them and then always reference them in the same way .. does that sound good with others as well ? | 09:23 |
| odyssey4me | admin0 yeah, our drawings could do with an update - they're based on the old RPC docs and reference an ELK stack | 09:23 |
| odyssey4me | if you could do fresh drawings and ideally include the svg source then it could be editable by anyone from now on | 09:24 |
| *** thorst has joined #openstack-ansible | 09:24 | |
| admin0 | odyssey4me: for example like this: https://www.openstackfaq.com/wp-content/uploads/2016/03/openstack_architecture_admin0_physical.png .. but there will be more possible groups like swift 1 2 3 , lvm 1 2 3 netapp 1 2 3 etc . and then with fixed IPs .. then on all our docs, we reference the groups | 09:24 |
| admin0 | in that way we do not end up with infra1 vs infra01 from one to another with different ips | 09:24 |
| odyssey4me | yeah, it would be good to be consistent | 09:25 |
| admin0 | so svg source with png ? | 09:26 |
| admin0 | i will check how others are doing it | 09:27 |
| odyssey4me | admin0 yes please | 09:27 |
| odyssey4me | what drawing program do you use? | 09:28 |
| admin0 | quick ones = draw.io , flowcharts = http://asciiflow.com/ .. also have graffna, photoshop and visio | 09:28 |
| odyssey4me | see here: https://github.com/openstack/openstack-manuals/tree/master/doc/networking-guide/source/figures | 09:28 |
| odyssey4me | png for showing in the docs, graffle is the actual program used so its source is there, and svg is there as an open source mechanism | 09:29 |
| odyssey4me | the ideal is to use an open source tool for drawing the diagrams, then share the source for the drawing | 09:30 |
| *** flaviosr has quit IRC | 09:30 | |
| openstackgerrit | Merged openstack/openstack-ansible-ironic: Add tests for the ironic REST API https://review.openstack.org/298654 | 09:30 |
| odyssey4me | but at this stage I'd say use whatever you like and share the source, and ideally something converted to svg as well like here | 09:30 |
| admin0 | if you suggest a tool or have a program in mind, speak your mind now :D | 09:31 |
| *** thorst has quit IRC | 09:32 | |
| admin0 | the max we need now to create consistency is a tool to create a lot of boxes ( as 3 servers per group ) and have 2 lines ( hostname and ip address ) .. then the whole documentation tree can be changed to make it consistent .. | 09:35 |
| *** subscope has joined #openstack-ansible | 09:38 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Add Nova config for os_ironic role https://review.openstack.org/293315 | 09:44 |
| *** subscope has quit IRC | 09:44 | |
| *** subscope has joined #openstack-ansible | 09:45 | |
| odyssey4me | admin0 I'd be happy with generic boxes instead of visio-type stencils, but it's up to you | 09:45 |
| admin0 | it will be generic boxes | 09:45 |
| admin0 | i just want to “kind of” enforce hostnames and ip addresses :) | 09:45 |
| odyssey4me | inkscape may be a good tool to use - it's made for illustrations | 09:45 |
| odyssey4me | but it's up to you as you'll be the one doing the drawings | 09:46 |
| admin0 | i think i will go wtih draw.io .. so that ( it can be exported to svg/xml) .. is free .. anyone can quickly make edits (online) . | 09:50 |
| admin0 | else people need to download this big app | 09:51 |
| *** javeriak has joined #openstack-ansible | 10:02 | |
| openstackgerrit | Merged openstack/openstack-ansible-galera_server: Remove dependency on python2_lxc git source https://review.openstack.org/303063 | 10:02 |
| openstackgerrit | Qiming Teng proposed openstack/openstack-ansible: Add convenience links for install workflow doc https://review.openstack.org/303330 | 10:03 |
| openstackgerrit | Hugh Saunders proposed openstack/openstack-ansible-plugins: Fix NoneType with no subnet allocation ranges https://review.openstack.org/303331 | 10:03 |
| *** Oku_OS is now known as Oku_OS-away | 10:05 | |
| *** javeriak has quit IRC | 10:07 | |
| *** tiagogomes has joined #openstack-ansible | 10:08 | |
| odyssey4me | admin0 if it works for you, then sounds great :) | 10:09 |
| *** subscope has quit IRC | 10:10 | |
| admin0 | odyssey4me: because .1 usually goes into routers, 2 .3 for maybe switches/VRRP etc .. i want to ensure that when you say infra1, it can always start from 172.29.236.101 172.29.240.101 and 172.29.244.101 — which is why in my own, i start with 11 .. so that via hostname, i do not have to reference another chart to map it to ips .. thoughts about that ? | 10:12 |
| odyssey4me | admin0 so you start with infra11 ? | 10:13 |
| admin0 | yes | 10:13 |
| odyssey4me | heh, I've seen people try to map the name to the ip and it gets messy fast | 10:14 |
| admin0 | i will want to create a new page where i explain this typical scenario that happens | 10:14 |
| odyssey4me | it does depend, though, on the size of the subnet | 10:14 |
| admin0 | well, its just for our documentation purpose | 10:14 |
| admin0 | we have /22 | 10:14 |
| admin0 | hmm.. | 10:14 |
| odyssey4me | yes, my thinking in the NEwton cycle is that we ideally want to document the intended scenarios that the gate is testing | 10:14 |
| odyssey4me | right now it only tests one, but we will expand that this cycle | 10:15 |
| *** subscope has joined #openstack-ansible | 10:15 | |
| odyssey4me | so I kinda think that maybe we'll have an appendix per scenario with all the details, then the rest of the docs can reference each appendix | 10:15 |
| odyssey4me | that keeps the install guide flow clean and simple, and leaves the details to other sections | 10:16 |
| odyssey4me | but that's just a thought right now - I haven't practically tried to see if that works | 10:16 |
| odyssey4me | yeah, the with the /22 infra11 doesn't map well | 10:16 |
| odyssey4me | so I would be careful of trying to do the naming/ip mapping | 10:17 |
| odyssey4me | keep the name to function, and let DNS resolve the IP | 10:17 |
| admin0 | also true | 10:17 |
| odyssey4me | also bear in mind that ipv6 will change that significantly | 10:20 |
| *** subscope has quit IRC | 10:20 | |
| admin0 | what i see in the docs is that infra1 has sometimes 172.29.236.100 sometimes 172.29.236.101 .. same goes for aio1 .. .. and again 111 112 113 .. sometimes .51 .. somtimes 16 .. | 10:20 |
| odyssey4me | ipv6 support isn't fully there yet, but it will come - probably within the next two cycles | 10:20 |
| odyssey4me | yes, so I'm game for consistency | 10:20 |
| admin0 | so in our docs infra1 has .16 .51 .100 .101 . 111 :D | 10:20 |
| odyssey4me | so for now aim to get it consistent | 10:21 |
| admin0 | i will start with 101 .. as that is what i see in majority | 10:21 |
| odyssey4me | sounds good | 10:21 |
| winggundamth | odyssey4me: I can install cinder-volume now. but there is old cinder-volume service that is lvm still show in horizon system information page. how to remove it? | 10:23 |
| admin0 | is mitaka ready for me to try via ansible :D ? | 10:23 |
| odyssey4me | winggundamth you'll have to remove the volume service using the openstack/cinder CLI | 10:23 |
| admin0 | sorry not for me | 10:24 |
| admin0 | for all :) | 10:24 |
| odyssey4me | admin0 mitaka should be testable, but some patches are waiting for it already | 10:24 |
| admin0 | then i will wait till the patches are in :) | 10:24 |
| winggundamth | odyssey4me: thanks | 10:25 |
| winggundamth | my company already order cheap set of machines for openstack lab. maybe I can test mitaka on this after summit :) | 10:26 |
| *** Oku_OS-away is now known as Oku_OS | 10:28 | |
| *** thorst has joined #openstack-ansible | 10:29 | |
| *** javeriak has joined #openstack-ansible | 10:32 | |
| *** markvoelker has joined #openstack-ansible | 10:32 | |
| odyssey4me | awesome :) for now simple AIO testing will be good enough to find and resolve issues | 10:35 |
| *** thorst has quit IRC | 10:35 | |
| *** deadnull has joined #openstack-ansible | 10:38 | |
| *** markvoelker has quit IRC | 10:39 | |
| odyssey4me | mattt perhaps you could take a peek at https://review.openstack.org/303331 ? | 10:42 |
| *** thorst has joined #openstack-ansible | 10:43 | |
| admin0 | odyssey4me: https://gist.github.com/a1git/746c0ebaece7b373a687d4561da1d78f — something like this ? | 10:44 |
| odyssey4me | admin0 having multiple storage hosts gives a false impression - cinder-lvm has no redundancy, so I'd vote to only have one | 10:46 |
| admin0 | right | 10:47 |
| admin0 | was also thinking of ceph into mind .. | 10:47 |
| odyssey4me | I'd like us to actually move away from showing cinder-lvm so obviously. I'd prefer that we suggest the use of nfs/ceph more heavily. | 10:47 |
| admin0 | have multiple nfs and ceph be a part of a big LVM that 1 system can export :D | 10:48 |
| odyssey4me | but for the moment, that's fine - just lose two of the storage hosts for the cinder-lvm use-cases | 10:48 |
| admin0 | ok | 10:48 |
| mattt | odyssey4me: sure, just in the middle of reviewing some stuff at the moment | 10:48 |
| odyssey4me | no, don't overcomplicate things now - keep it simple | 10:48 |
| odyssey4me | we can expand later | 10:48 |
| odyssey4me | thanks mattt | 10:48 |
| deadnull | admin0 odyssey4me any thoughts about cinder-zfs | 10:50 |
| admin0 | i use it :D | 10:50 |
| deadnull | yeah looks fairly awesome | 10:50 |
| admin0 | but want to move away to ceph | 10:50 |
| admin0 | no does not scale | 10:50 |
| deadnull | i guess for very large deployments, no it doesnt... ceph is not a silver bullet either | 10:51 |
| admin0 | issues ( zfs pool degration, crash ) = reboot of all instances | 10:51 |
| deadnull | oof thats no good. | 10:51 |
| admin0 | at least, i do not have to send issue emails due to 1 zfs crash | 10:51 |
| admin0 | zfs/nfs/lvm — export volumes .. instances use those volumes .. when that server crashes ( for whatever reasons ) .. the volumes go into read only .. due to how they are being used .. most of the time the instance needs to be rebooted after the volume recovers | 10:52 |
| *** joker_ has joined #openstack-ansible | 10:53 | |
| admin0 | with ceph, at leats i have more monitors, storage servers in the chain to keep the system working and not affected by 1 single server failure | 10:53 |
| admin0 | *least | 10:53 |
| *** thorst has quit IRC | 10:53 | |
| odyssey4me | deadnull yeah, basically I recommend that you use a decent storage solution that allows you to upgrade, maintain and support it with a very low risk of down-time and client connection loss | 10:57 |
| odyssey4me | whatever you're comfortable with or are prepared to get comfortable with is what counts | 10:58 |
| odyssey4me | that's the silver bullet | 10:58 |
| deadnull | yeah | 10:58 |
| deadnull | looking into the cinder driver/nimble integration now | 10:58 |
| deadnull | not sure how mature the fc zone manager is | 10:58 |
| admin0 | odyssey4me: updated: https://gist.github.com/a1git/746c0ebaece7b373a687d4561da1d78f | 10:59 |
| odyssey4me | deadnull the trouble with any FC connectivity is that it raises your expenses quite a lot as every compute node will need the FC connectivity - that's why iSCSI/NFS or some other Ethernet-based connectivity is more popular | 11:00 |
| odyssey4me | it does depend on your hardware though | 11:00 |
| admin0 | deadnull: that was about issue part .. now think for migration/maintenance .. using nfs/lvm/cinder — you need to migrate everyone off that node .. plan it, send notices, — ceph = transparent | 11:00 |
| admin0 | operations wise , people take instances as ephemeral ( cattles ) and volumes to be reliable to store their awesome content .. if that is a single point of failure, you have not built it correctly | 11:01 |
| odyssey4me | yeah, ceph is transparent thanks to the native driver in kvm for connectivity to the ceph cluster | 11:01 |
| admin0 | odyssey4me: the revision sound OK for me to proceed now ? | 11:03 |
| admin0 | OK to you, so that I can proceed with it | 11:04 |
| admin0 | * | 11:04 |
| admin0 | https://gist.github.com/a1git/746c0ebaece7b373a687d4561da1d78f — revised one | 11:04 |
| winggundamth | admin0: I can not create volume from image with ceph. did you have the same problem as me? | 11:04 |
| winggundamth | but I can create volume from snapshot | 11:05 |
| admin0 | https://www.openstackfaq.com/openstack-ansible-ceph/ — i used the uploaded cirros image to create the volume | 11:05 |
| winggundamth | for me. I created the instance then create snapshot from that instance and it will be image | 11:07 |
| winggundamth | after I try to create volume from that image. it always show me volume error and I can not do anything but delete it | 11:08 |
| admin0 | did logs say anything why you cannot directly frim image | 11:08 |
| admin0 | odyssey4me: mattt: if you guys can look into the updated ceph once again https://review.openstack.org/#/c/301922/ . and merge it .. then can start working on the sanitizing ip/hostname part .. else i need to create another folder .. since it will try to squash both the merges on review | 11:11 |
| admin0 | aah .. i missed the nova changes | 11:12 |
| odyssey4me | admin0 I'd rather suggest using 'ceph1' - the ceph-mon's should not carry OSD's | 11:12 |
| admin0 | ok | 11:12 |
| odyssey4me | while you shouldn't really cover the details of the ceph cluster - perhaps you should have ceph-mon addresses, so perhaps you're right | 11:13 |
| odyssey4me | the config needs no reference to the OSD's, right? | 11:13 |
| admin0 | nope | 11:13 |
| admin0 | not at all | 11:13 |
| admin0 | it just cares about ssh to the mons and finding the config from there | 11:13 |
| odyssey4me | winggundamth is your image raw or qcow? | 11:13 |
| odyssey4me | ok cool - then ceph-mon1/2/3 it is | 11:14 |
| admin0 | odyssey4me: i would like to leave ceph-mon there to show that we don’t care about the osds | 11:14 |
| odyssey4me | two computes is fine too | 11:14 |
| odyssey4me | winggundamth for CoW to work with ceph, the images have to be RAW, not sparse (qcow2) | 11:14 |
| openstackgerrit | Merged openstack/openstack-ansible-plugins: Fix NoneType with no subnet allocation ranges https://review.openstack.org/303331 | 11:15 |
| winggundamth | odyssey4me: I'm not sure. I created instance from RAW then I create snapshot from that instance and it show no format | 11:15 |
| *** saneax_AFK is now known as saneax | 11:17 | |
| *** saneax is now known as saneax_AFK | 11:18 | |
| *** saneax_AFK is now known as saneax | 11:18 | |
| winggundamth | odyssey4me: please see image list and snapshot list here http://paste.openstack.org/show/493462/ | 11:19 |
| winggundamth | what is format = none? | 11:20 |
| odyssey4me | winggundamth I just thought that I'd point that out as it's a common problem. I'm a little tied up with other work right now so I'm afraid I can't really dig into it. | 11:20 |
| winggundamth | odyssey4me: no worry. I'll try workaround by create volume from snapshot for now | 11:21 |
| odyssey4me | it may actually be worth asking in one of the other openstack/ceph channels - there may be a config entry that you need to do to make it work right. | 11:22 |
| odyssey4me | if you can find out what's not right in the config for openstack, then it's easy for us to help you translate that to OSA configs :) | 11:22 |
| winggundamth | okay | 11:23 |
| winggundamth | odyssey4me: one thing. I want to report a bug for openstack cli. which project that I should create the bug report? | 11:24 |
| odyssey4me | hmm, not sure - perhaps ask in #openstack | 11:24 |
| winggundamth | okay | 11:25 |
| winggundamth | ok found it https://launchpad.net/python-openstackclient | 11:27 |
| odyssey4me | :) | 11:27 |
| *** keedya has joined #openstack-ansible | 11:28 | |
| *** saneax is now known as saneax_AFK | 11:30 | |
| *** ChanServ changes topic to "Austin Design Summit Schedule: https://goo.gl/WSRblf || Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs" | 11:36 | |
| *** subscope has joined #openstack-ansible | 11:38 | |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: ceph configuration for nova glance and cinder https://review.openstack.org/301922 | 11:40 |
| *** retreved has joined #openstack-ansible | 11:48 | |
| mhayden | happy friday, folks | 11:49 |
| *** keedya has quit IRC | 11:50 | |
| *** subscope has quit IRC | 11:50 | |
| *** johnmilton has joined #openstack-ansible | 11:54 | |
| *** clickboom has joined #openstack-ansible | 11:55 | |
| *** javeriak_ has joined #openstack-ansible | 11:56 | |
| odyssey4me | o/ mhayden | 11:57 |
| *** javeriak has quit IRC | 11:58 | |
| odyssey4me | mattt hughsaunders would you mind reviewing this backport? https://review.openstack.org/303025 | 11:58 |
| odyssey4me | it's holding up a master merge of https://review.openstack.org/296525 because 'depends-on' is not branch aware :/ | 11:58 |
| mattt | odyssey4me: k | 12:00 |
| *** Oku_OS is now known as Oku_OS-away | 12:00 | |
| *** javeriak_ has quit IRC | 12:01 | |
| *** subscope has joined #openstack-ansible | 12:03 | |
| *** javeriak has joined #openstack-ansible | 12:05 | |
| *** psilvad_ has joined #openstack-ansible | 12:09 | |
| hughsaunders | odyssey4me: done. | 12:11 |
| *** thorst has joined #openstack-ansible | 12:15 | |
| *** thorst has quit IRC | 12:15 | |
| *** thorst has joined #openstack-ansible | 12:15 | |
| *** thorst has quit IRC | 12:20 | |
| *** markvoelker has joined #openstack-ansible | 12:21 | |
| mhayden | odyssey4me: should i inquire about a liberty branch for openstack-ansible-security or were you taking that on? i couldn't remember from yesterday | 12:23 |
| odyssey4me | mhayden I'm working on that - busy prepping the patch now. | 12:27 |
| mhayden | thanks odyssey4me | 12:27 |
| *** busterswt has joined #openstack-ansible | 12:30 | |
| *** Oku_OS-away is now known as Oku_OS | 12:32 | |
| *** javeriak has quit IRC | 12:38 | |
| *** javeriak has joined #openstack-ansible | 12:41 | |
| *** woodard has joined #openstack-ansible | 12:43 | |
| *** woodard has quit IRC | 12:43 | |
| *** woodard has joined #openstack-ansible | 12:44 | |
| mhayden | cloudnull: icanhazcloud? i like the sound of that | 12:51 |
| mhayden | perhaps i need to get a logo for horizon | 12:51 |
| admin0 | odyssey4me: mattt .. i am not able to submit other reviews due to one being pending .. what more needs to be done on the ceph part | 12:56 |
| admin0 | so that i can move over to standardize hostname and ips on all our examples | 12:56 |
| mattt | admin0: that doesn't sound right | 12:56 |
| mattt | admin0: you can build other reviews on top of that one | 12:56 |
| admin0 | in a new directory, i cloned the master branch .. it says You are about to submit multiple commits. This is expected if you are submitting a commit that is dependent on one or more in-review commits. | 12:57 |
| * admin0 is not a git expert :D | 12:57 | |
| admin0 | when i do git branch, i do not even see that other branch | 12:57 |
| admin0 | btu git review somehow picks it up | 12:57 |
| mattt | admin0: not a git expert either :) but if i have multiple reviews on the same repo that don't overlap one-another, i just create separate branches off master (or whatever branch i'm working on) and do my work there | 12:59 |
| mattt | admin0: if i have a review in flight and i want to build another view on it, then you can go into the branch in your checkout where you did the parent commit, then create a new branch off that and do your work there | 13:00 |
| mattt | then when you git review the child review it will ask you to confirm that the new review should sit on top of the parent review | 13:00 |
| admin0 | will try | 13:09 |
| *** jayc has quit IRC | 13:09 | |
| *** jayc has joined #openstack-ansible | 13:10 | |
| *** pjm6 has joined #openstack-ansible | 13:10 | |
| pjm6 | Hi everyone :) | 13:10 |
| *** clickboom has quit IRC | 13:15 | |
| admin0 | hello pjm6 | 13:15 |
| admin0 | mattt: in either branch, same result: https://gist.github.com/a1git/72b4443503b8330dd77fa6b7df7d9a04 | 13:15 |
| admin0 | i will wait for that ceph stuff :( | 13:15 |
| mattt | admin0: you've buggered something up | 13:16 |
| admin0 | :D | 13:16 |
| mattt | admin0: so i understand, is the new review going to sit on top of the ceph doc change or not? | 13:17 |
| admin0 | once this ceph doc is done, then i want to delete everything and do again fresh i think .. right now, if i create 1 branch from another, or clone and start in a completely new folder, it tries to merge/squash all my pending changes | 13:18 |
| admin0 | better fix 1 at a time .. what more needs to ensure ceph is done | 13:19 |
| mattt | admin0: you can def. do multiple review simultaneously | 13:19 |
| *** clickboom has joined #openstack-ansible | 13:24 | |
| *** subscope has quit IRC | 13:30 | |
| cloudnull | mhayden: if you dont register the name i will :) | 13:31 |
| cloudnull | morning | 13:31 |
| Bofu2U | morn | 13:31 |
| *** briancubed has joined #openstack-ansible | 13:31 | |
| admin0 | \o | 13:31 |
| admin0 | odyssey4me: https://review.openstack.org/#/c/303427/1/doc/source/install-guide/overview-workflow.rst — is this the best page to include it ? | 13:32 |
| admin0 | i want to include it first somewhere . | 13:32 |
| admin0 | and then, move ahead to sanitize eveyr page | 13:32 |
| admin0 | *every | 13:32 |
| briancubed | Yesterday I received some advice from cloudnull for overcoming deployment failures during the "Wait for ssh to be available" tasks. Some ssh tests were failing. | 13:33 |
| odyssey4me | admin0 the AIO should not be referenced in the install guide | 13:34 |
| cloudnull | briancubed: worked? | 13:35 |
| cloudnull | or still a WIP | 13:35 |
| odyssey4me | not sure if it's the best way to do it - my mind is concentrating elsewhere - I'd advise discussing with mhayden or spotz_zzz as they've done most of the doc updates in the last cycle | 13:35 |
| briancubed | I made a change to the bridge config on each node. I looked at kernel logs on the hypervisor host and in the containers themselves. And I verified that I can ping from the containers to the target IP addresses. | 13:35 |
| mhayden | admin0: i think we put most of the AIO-related things into the developer guide | 13:35 |
| briancubed | Im still seeing this failure on several containers: failed: [infra1_nova_cert_container-e9feec52 -> 127.0.0.1] => {"elapsed": 301, "failed": true} msg: Timeout when waiting for search string OpenSSH in 172.29.237.66:22 | 13:36 |
| odyssey4me | FYI to all https://launchpad.net/openstack-ansible/+milestone/12.0.10 and https://launchpad.net/openstack-ansible/kilo/11.2.13 have been released | 13:36 |
| mhayden | odyssey4me: woot | 13:36 |
| *** joker_ has quit IRC | 13:36 | |
| odyssey4me | mhayden yes, the AIO is strictly a developer/testing/gating tool so all references to it should only be in the dev docs | 13:36 |
| briancubed | But I can ping from infra1_nova_cert_container-e9feec52 to 172.29.237.66. Looking for advice on next steps for triage. | 13:36 |
| cloudnull | odyssey4me: ++ | 13:36 |
| cloudnull | briancubed: no ssh ? | 13:37 |
| cloudnull | ssh -vvv $NAME ? | 13:37 |
| admin0 | mhayden: removing the aio ip from there, is that overview workflow the best place to indicat the IPs ? | 13:37 |
| cloudnull | does that reveal anything | 13:37 |
| cloudnull | I've had issues with keyforwarding causing things like that | 13:37 |
| briancubed | ssh from the container complains about authentication | 13:37 |
| cloudnull | i have a bunch of keys in my chain so i have to clear them out from time to time | 13:37 |
| briancubed | as in 'ssh 172.29.237.66' | 13:38 |
| cloudnull | ssh-add -D | 13:38 |
| cloudnull | ssh -vvvv 172.29.237.66 | 13:38 |
| briancubed | let me try that | 13:38 |
| *** KLevenstein has joined #openstack-ansible | 13:40 | |
| briancubed | Output of both commands is here: http://pastebin.com/basg7L1G | 13:42 |
| briancubed | Looks like I can see the other IP but there's an authentication problem. | 13:43 |
| odyssey4me | mhayden you now have a 12.0.0 tag and liberty branch in https://github.com/openstack/openstack-ansible-security | 13:43 |
| odyssey4me | based on the SHA from https://review.openstack.org/#/c/302385/1/ansible-role-requirements.yml | 13:43 |
| cloudnull | briancubed: seems like a publickey issue ? | 13:44 |
| cloudnull | can you login to the host , attach to the container and check the keys ? | 13:44 |
| *** mgoddard_ has joined #openstack-ansible | 13:45 | |
| briancubed | cloudnull: Do mean to check the keys on the container that is hosting 172.29.237.66? | 13:47 |
| cloudnull | yes | 13:47 |
| *** mgoddard has quit IRC | 13:49 | |
| *** briancubed_ has joined #openstack-ansible | 13:49 | |
| briancubed_ | Silly client lost connection... | 13:49 |
| briancubed_ | cloudnull: Do mean to check the keys on the container that is hosting 172.29.237.66? | 13:49 |
| *** flaviosr has joined #openstack-ansible | 13:50 | |
| cloudnull | yes | 13:50 |
| *** briancubed has quit IRC | 13:51 | |
| briancubed_ | Silly client | 13:53 |
| briancubed_ | okay. both containers, the source and target of the ssh test, are on node 'infra1'. On the target container, I found authorized_hosts under /root/.ssh. It contains a single public key for root@infra1 | 13:55 |
| *** subscope has joined #openstack-ansible | 13:56 | |
| briancubed_ | the username on each node is 'ubuntu'. There is no .ssh directory under /home/ubuntu | 13:57 |
| admin0 | briancubed_: whats the reason from one container to ssh to another one ? | 13:57 |
| odyssey4me | briancubed_ you're trying to ssh from one container to another? I don't think that's instrumented | 13:57 |
| *** cloudtrainme has joined #openstack-ansible | 13:57 | |
| odyssey4me | we only instrument from the host to the container | 13:57 |
| admin0 | i looked at the logs | 13:57 |
| admin0 | its from a nova container to somewhere XX | 13:57 |
| admin0 | that does not work | 13:57 |
| odyssey4me | and then for some services it's from container to container, but that's specific users for specific services | 13:58 |
| *** jayc has quit IRC | 13:58 | |
| odyssey4me | examples would be the swift rsync services, or the nova user for live migration facilitation | 13:58 |
| briancubed_ | help me understand: I'm just running the setup-hosts playbook. I must have something configured incorrectly because I'm not explicitly sshing anywhere. it's the playbook run... | 13:58 |
| odyssey4me | ok, so in that case all that needs to work is from deployment host to the hosts and the containers | 13:59 |
| admin0 | briancubed_: you need to have a deploy host .. and then run the playbooks from there .. and from there, it can ssh to all containers .. but not among containers | 13:59 |
| odyssey4me | ie you generate keys on the deployment host, then you send the authorised keys content to all hosts | 14:00 |
| briancubed_ | infra1 serves as both the deployment host and one of my infrastructure target hosts. Are you saying that is not supported? | 14:00 |
| odyssey4me | oh that's fine | 14:00 |
| briancubed_ | I thought the install guide said this was supported... | 14:00 |
| odyssey4me | in most deployments I'm aware of that is the habit | 14:00 |
| odyssey4me | ok, so your root user on infra1 has the private & public key | 14:01 |
| odyssey4me | ? | 14:01 |
| odyssey4me | in /root/.ssh/id_rsa & /root/.ssh/id_rsa.pub ? | 14:01 |
| briancubed_ | Let me verify | 14:01 |
| briancubed_ | yes, infra1 has those files | 14:02 |
| *** saneax_AFK is now known as saneax | 14:02 | |
| odyssey4me | alright, then either you need a var called 'lxc_container_ssh_key' set in user_variables that has the value of the public key, or you need to ensure that all hosts have the same file /root/.ssh/id_rsa.pub | 14:03 |
| briancubed_ | Rats. A meeting I cannot avoid. Sorry, I need to drop off. | 14:03 |
| briancubed_ | Meetings! | 14:03 |
| odyssey4me | and all hosts needs their authorised keys set to allow passwordless login using that key | 14:03 |
| admin0 | briancubed_: if possible, post the output of scripts/bootstrap-ansible.sh , openstack-ansible setup-host and content of openstack_user_config file | 14:03 |
| admin0 | that would help | 14:03 |
| mhayden | odyssey4me: thanks a bunch! | 14:04 |
| admin0 | i once faced a 2 days issue due to a wrong indentation on the subject of ssh :D | 14:04 |
| briancubed_ | admin0: Thanks. I'll do that ASAP | 14:04 |
| admin0 | pastebin/gist somewhere | 14:04 |
| mhayden | odyssey4me: so i assume i need to set "version: liberty" in ansible-role-requirements.yml rather than a sha? | 14:06 |
| mhayden | wasn't sure if i interpreted your comment correctly there | 14:06 |
| cloudnull | briancubed_: https://gist.github.com/cloudnull/15ff608e027b07d12fdbd256aeadf860 -- that might help with re-keying the containers in the env | 14:06 |
| odyssey4me | mhayden it should be pinned to a SHA or tag | 14:06 |
| odyssey4me | my suggestion was perhaps to use the tag name as it's more obvious | 14:07 |
| admin0 | hmm.. barcelona has nepalese reastaurants .. i will be there in that summit :D | 14:08 |
| cloudnull | i love Barcelona | 14:08 |
| cloudnull | if given the chance i will move there some day :) | 14:09 |
| admin0 | mv reading/cloudnull barcelona/cloudnull :D | 14:09 |
| admin0 | sudo mv reading/cloudnull barcelona/cloudnull | 14:09 |
| admin0 | there, solved | 14:09 |
| admin0 | with sudo | 14:09 |
| cloudnull | w/ sudo now i have to do it | 14:09 |
| admin0 | shall i wait for some feedback on this? https://review.openstack.org/#/c/303427/ — before i do a mass BIG change on every doc and submit ? | 14:11 |
| *** Ger-chervyak has joined #openstack-ansible | 14:11 | |
| *** iceyao_ has quit IRC | 14:12 | |
| mattt | jmccrory: bit early i know, but you around ? | 14:12 |
| arslan | i just installed AIO setup....unable to launch VM...i dont see any error logs in aio1_nova_api_os_compute_container-6d48b28b i see error message on launching host that no enough hosts available | 14:13 |
| *** ametts has joined #openstack-ansible | 14:13 | |
| cloudnull | arslan: anything in your logs from the logging server ? | 14:15 |
| cloudnull | or on the compute node? | 14:16 |
| cloudnull | does nova service-list reveal any service being up / down ? | 14:16 |
| odyssey4me | admin0 except that cloudnull doesn't live in Reading :p | 14:16 |
| admin0 | oh | 14:16 |
| cloudnull | san antonio/cloudnull ... | 14:17 |
| admin0 | i know a few of you guys do. but i am not sure who is from where | 14:17 |
| admin0 | the hague,NL/admin0 | 14:17 |
| cloudnull | andymccr: you about? | 14:17 |
| odyssey4me | admin0 you already have feedback ;) | 14:19 |
| *** automagically has joined #openstack-ansible | 14:19 | |
| automagically | Morning all | 14:19 |
| admin0 | morning automagically | 14:19 |
| *** javeriak has quit IRC | 14:20 | |
| cloudnull | morning automagically | 14:20 |
| cloudnull | hows it ? | 14:20 |
| automagically | Its Friday, all roses, sunshine and happy puppies over here ;) | 14:21 |
| cloudnull | nice! | 14:22 |
| cloudnull | everyone loves a puppy | 14:22 |
| *** KLevenstein has quit IRC | 14:22 | |
| *** KLevenstein has joined #openstack-ansible | 14:22 | |
| pjm6 | morning automagically | 14:23 |
| * automagically o/ pjm6 | 14:23 | |
| *** javeriak has joined #openstack-ansible | 14:25 | |
| *** kong has quit IRC | 14:26 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Optionally apply security hardening in Liberty https://review.openstack.org/302385 | 14:26 |
| *** javeriak_ has joined #openstack-ansible | 14:27 | |
| *** briancubed_ has quit IRC | 14:28 | |
| *** javeriak has quit IRC | 14:30 | |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: Fixes for SSL key / cert distribution for rabbitmq https://review.openstack.org/302824 | 14:30 |
| *** Brew has joined #openstack-ansible | 14:30 | |
| *** spotz_zzz is now known as spotz | 14:30 | |
| *** jthorne has joined #openstack-ansible | 14:30 | |
| admin0 | oops .. how can I checkout this https://review.openstack.org/#/c/301922/ as a new branch ? | 14:31 |
| *** Mudpuppy has joined #openstack-ansible | 14:32 | |
| arslan | cloudnull: i was missing something, got it done. Thanks btw. | 14:32 |
| *** Mudpuppy has quit IRC | 14:32 | |
| cloudnull | cool | 14:32 |
| *** Mudpuppy has joined #openstack-ansible | 14:33 | |
| *** subscope has quit IRC | 14:34 | |
| *** persia has quit IRC | 14:34 | |
| deadnull | morning all | 14:35 |
| admin0 | morning | 14:35 |
| palendae | admin0: There's a 'Download' button that gives you the option to check it out, get it as a cherry pick, or as a patch | 14:35 |
| palendae | deadnull: You're going to get me very confused with cloudnull :) | 14:35 |
| admin0 | \o/ | 14:35 |
| admin0 | thanks palendae | 14:35 |
| palendae | My IRC client even highlights you both with the same color | 14:35 |
| palendae | admin0: Welcome | 14:35 |
| deadnull | palendae my apologies -- he is much more of an openstack expert than I am :) | 14:36 |
| odyssey4me | admin0 you can 'git review -d <review number>' to pull down the current review as a branch, then work as usual in git to 'git checkout -b <branch-name>' - the branch name gets used as a 'topic' in gerrit | 14:36 |
| palendae | Ah, didn't know git review -d did it, nice | 14:36 |
| palendae | deadnull: np :p | 14:36 |
| automagically | git review -d is the bees knees | 14:36 |
| *** persia has joined #openstack-ansible | 14:37 | |
| *** karimb has joined #openstack-ansible | 14:38 | |
| mhayden | MORNING AUTOMAGICALLY | 14:38 |
| automagically | WHOA mhayden | 14:39 |
| mhayden | haha | 14:39 |
| * mhayden needs a script to automagically say good morning to automagically in an automagical kinda way | 14:40 | |
| automagically | Easy buddy, I don’t know if I’m caffeinated enough for loud volumes yet | 14:40 |
| mhayden | how about cinder volumes instead | 14:40 |
| odyssey4me | palendae another trick dolphm taught me was that 'git review -X' does the cherry pick right right way :) | 14:40 |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: ceph configuration for nova glance and cinder https://review.openstack.org/301922 | 14:40 |
| mhayden | #success mhayden got a dad joke deployed before 10AM CDT | 14:40 |
| *** karimb has quit IRC | 14:40 | |
| cloudnull | deadnull: just fake it till you make it | 14:41 |
| deadnull | cloudnull ha! | 14:41 |
| *** karimb has joined #openstack-ansible | 14:41 | |
| automagically | odyssey4me: Thanks for the work to bring the Rally role into the fold. I see that we have it in Gerrit now: https://review.openstack.org/#/admin/projects/openstack/openstack-ansible-os_rally | 14:41 |
| automagically | Anything more left to do there? | 14:41 |
| cloudnull | cloud is all buzzwords, kittens, puppies, and hacky BS. -- no experts here :) | 14:42 |
| automagically | ^ That! ^ | 14:42 |
| *** mikelk has quit IRC | 14:44 | |
| *** b3rnard0 is now known as b3rnard0_away | 14:44 | |
| *** b3rnard0_away is now known as b3rnard0 | 14:44 | |
| cloudnull | hahahaha | 14:45 |
| *** sdake has joined #openstack-ansible | 14:45 | |
| cloudnull | automagically: will you be at the summit ? | 14:45 |
| cloudnull | you may have covered this already... | 14:45 |
| automagically | Indeed I will. Can’t wait. It will be my first | 14:45 |
| cloudnull | nice | 14:45 |
| mhayden | automagically: woot | 14:46 |
| mhayden | it will be my first since essex :P | 14:46 |
| cloudnull | its fun. | 14:46 |
| * odyssey4me points at the channel topic for the summit schedule :) | 14:46 | |
| mhayden | cloudnull: i wish odyssey4me would post a summit schedule | 14:46 |
| * mhayden winks | 14:47 | |
| cloudnull | yea ikr | 14:47 |
| cloudnull | such an oversight | 14:47 |
| cloudnull | :) | 14:47 |
| * odyssey4me also points at http://lists.openstack.org/pipermail/openstack-dev/2016-April/091760.html | 14:47 | |
| cloudnull | not even a mailing post mhayden can you believe it | 14:48 |
| cloudnull | :p | 14:48 |
| mhayden | i know | 14:48 |
| *** sdake_ has joined #openstack-ansible | 14:49 | |
| *** psilvad_ has quit IRC | 14:50 | |
| automagically | Anyone here had any luck with Ansible roles for network config? Specifically looking for anyone who has attempted to automate the process of setting up the bonds and bridges that the OSA reference architecture suggests | 14:50 |
| mattt | automagically: no but that would be amazing | 14:51 |
| automagically | Right?!? | 14:51 |
| *** sdake has quit IRC | 14:51 | |
| *** mgoddard has joined #openstack-ansible | 14:51 | |
| mattt | automagically: there goes your weekend :) | 14:51 |
| odyssey4me | automagically a while back palendae tried, but it got messy fast | 14:51 |
| automagically | Nah, I assigned it out to someone on my team to do a spike on | 14:51 |
| *** mgoddard_ has quit IRC | 14:51 | |
| automagically | First rule of success: delegate! | 14:52 |
| odyssey4me | we could maybe try and do it once we're on Ansible 2.1 as there are modules available that will simplify that | 14:52 |
| Mudpuppy | automagically: I did run into an issu with 14.04 ubuntu, where a network restart would not create the bonds/bridges because of this bug https://bugs.launchpad.net/ubuntu/+source/ifupdown/+bug/1301015 | 14:52 |
| openstack | Launchpad bug 1301015 in ifupdown (Ubuntu) "Networking does not restart" [High,Confirmed] | 14:52 |
| palendae | automagically: Yeah, it got really hairy with the roles we had in the past. I've not seen what Ansible 2.1 offers in that vein yet | 14:52 |
| *** clickboom has quit IRC | 14:53 | |
| odyssey4me | mhayden boo, I must have miscommunicated - see comment in https://review.openstack.org/302385 | 14:53 |
| odyssey4me | jmccrory automagically I'd like to hear your thoughts on the inclusion of https://review.openstack.org/302385 into liberty | 14:53 |
| palendae | Making it flexible was also annoying. We basically ended up needing to recreate all the config lines with yaml syntax | 14:53 |
| palendae | automagically: https://github.com/debops/ansible-ifupdown may be some good prior art, too | 14:54 |
| odyssey4me | it's an opt-in, so it's reasonably safe - but it's a feature change into a stable branch, so I'd like opinions from more than just RAX | 14:54 |
| mhayden | odyssey4me: hah, just trying to figure out what's best there -- my gut says tagging the security role is probably overkill due to the low volume of changes there | 14:54 |
| mhayden | odyssey4me: i'm okay with using a SHA there and bumping it when necessary | 14:54 |
| mhayden | is that what's needed? | 14:54 |
| odyssey4me | mhayden we will be tagging anyway | 14:54 |
| mhayden | well then let's do a tag! :P | 14:55 |
| mhayden | oh wait, there's already a tag | 14:55 |
| mhayden | https://git.openstack.org/cgit/openstack/openstack-ansible-security/tag/?h=12.0.0 | 14:55 |
| odyssey4me | yep | 14:55 |
| * mhayden sits in the corner | 14:55 | |
| * odyssey4me pats mhayden on the head | 14:55 | |
| deadnull | yeah that ubuntu 14.04 bug, grr | 14:56 |
| deadnull | i was looking into doing some CIMC XML API interactions, and serial console connection to drive the initial changes of the box | 14:56 |
| odyssey4me | Mudpuppy as I recall, the advise from Apsu was no to use ifup/ifdown because it's broken and is unlikely to get fixed. Better to use: ip link set dev <device> up | 14:58 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Optionally apply security hardening in Liberty https://review.openstack.org/302385 | 14:58 |
| automagically | Anyone else start digging into this oslo.config spec? https://review.openstack.org/#/c/295543/8/specs/categorized-configuration-options.rst,unified | 14:59 |
| palendae | "One of the largest barriers to adoption of OpenStack is perceived complexity." -- I don't think it's just perceived, heh | 14:59 |
| palendae | Given multiple projects, including this one, exist just to configure it | 15:00 |
| odyssey4me | automagically yeah, I've been following it - as that's done in the next few cycles it'll be awesome | 15:02 |
| palendae | I'd agree, the general aim is good | 15:03 |
| automagically | I like the general tenor, will be interested to see how it goes | 15:03 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Nuage neutron plugin ansible changes https://review.openstack.org/296525 | 15:03 |
| *** subscope has joined #openstack-ansible | 15:04 | |
| Apsu | odyssey4me: ifup/ifdown are mostly ok, as they only change the active status. Also, they're Debian specific tooling, not part of net-tools. | 15:08 |
| *** cloudtrainme has quit IRC | 15:10 | |
| *** iceyao has joined #openstack-ansible | 15:11 | |
| *** weezS has joined #openstack-ansible | 15:12 | |
| *** Ger-chervyak has quit IRC | 15:12 | |
| *** Ger-chervyak has joined #openstack-ansible | 15:13 | |
| cloudnull | woot! neuage is in the mix now. that's awesome! | 15:13 |
| cloudnull | odyssey4me: have you worked with the ironic role / deployment much ? | 15:14 |
| odyssey4me | cloudnull yep, we just need to finalise the nova changes, then the final bits will be documentation and release notes | 15:14 |
| cloudnull | or anyone for that matter? | 15:14 |
| admin0 | anyone has any info/docs on another SDN ( not neutron ) with ansible ? | 15:14 |
| odyssey4me | cloudnull I did some initial work on the role to get it to converge at least, and to conform to some of the general characteristics for testing as we did in the other roles | 15:15 |
| cloudnull | javeriak_: admin0 | 15:15 |
| cloudnull | javeriak_: works on the plumgrid bits | 15:15 |
| cloudnull | and maybe able to provide information | 15:16 |
| cloudnull | odyssey4me: im having an issue with ironic conductor and tftp | 15:16 |
| javeriak_ | admin0 this is the doc on using plumgrid with OSA http://docs.openstack.org/developer/openstack-ansible/install-guide/app-plumgrid.html | 15:16 |
| cloudnull | nodes come get cycled via ipmi, neutron provides dhcp, all seems well, then tftp times out | 15:16 |
| cloudnull | if i tftp $IPADDRESS i can get files just fine over the same network | 15:17 |
| odyssey4me | cloudnull hmm, I didn't get that far - I know that mrda and andymccr have been working on physical deployments and seem to have made progress... but they're in Aus so will only be online later | 15:17 |
| cloudnull | additionally if i boot the node manually install an OS configure the interface to get DHCP it gets the address neutron provides and again all is well. | 15:17 |
| odyssey4me | cloudnull one thing I know from historically working with PXE though is that file size matters | 15:18 |
| cloudnull | i can then install tftp packages and get files just fine | 15:18 |
| odyssey4me | are you able to retrieve exactly the same file as the one that times out? | 15:18 |
| cloudnull | yup | 15:18 |
| cloudnull | in 0.0 seconds | 15:18 |
| cloudnull | and the md5 sum of the files match | 15:18 |
| odyssey4me | odd, maybe it's worth having a chat over in #openstack-ironic ? | 15:18 |
| *** thorst_ has joined #openstack-ansible | 15:18 | |
| odyssey4me | also, are you sure that another dhcp server isn't conflicting? | 15:19 |
| spotz | admin0 looking | 15:19 |
| cloudnull | yes im sure. | 15:20 |
| cloudnull | i had that issue | 15:21 |
| cloudnull | but fixed it | 15:21 |
| cloudnull | the osic cloud where im doing work comes with a cobbler env | 15:21 |
| cloudnull | i just turned it off | 15:21 |
| odyssey4me | yeah, you'd probably have to make sure that cobbler only answers dhcp queries for the nodes it should care about - not the nodes which are meant to be ironic nodes | 15:22 |
| *** thorst_ has quit IRC | 15:22 | |
| odyssey4me | ideally you should be able to have the MAC registered, then block it from being responded to in some way so that Ironic can do its thing | 15:22 |
| odyssey4me | I think that perhaps it'd be best to engage with #openstack-ironic - whatever the issue it's likely been seen by someone before. | 15:23 |
| odyssey4me | jroll is aware of the OpenStack-Ansible-Ironic work, and I'm sure he'd be happy to help :) | 15:23 |
| odyssey4me | oh look, he's here :) | 15:23 |
| cloudnull | im in #openstack-ironic now | 15:28 |
| admin0 | gone for a few hours :D | 15:29 |
| admin0 | see ya all | 15:29 |
| jmccrory | mattt: ping | 15:30 |
| *** cloudtrainme has joined #openstack-ansible | 15:30 | |
| jmccrory | cloudnull: do you see anything interesting in your ironic-conductor log when tftp is timing out? | 15:31 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Update .gitreview for Liberty https://review.openstack.org/303501 | 15:31 |
| odyssey4me | jmccrory it's probably best to go into #openstack-ironic to see the conversation :) | 15:31 |
| jmccrory | ah ok | 15:31 |
| cloudnull | jmccrory: nothing of note | 15:33 |
| cloudnull | lots of API calls | 15:34 |
| *** admin0 has quit IRC | 15:34 | |
| *** saneax is now known as saneax_AFK | 15:37 | |
| *** javeriak has joined #openstack-ansible | 15:38 | |
| *** deadnull is now known as _deadnull | 15:41 | |
| *** javeriak_ has quit IRC | 15:42 | |
| *** sdake has joined #openstack-ansible | 15:43 | |
| *** sdake_ has quit IRC | 15:44 | |
| odyssey4me | cores, we need some attention on stable/mitaka reviews please: https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+status:open+branch:stable/mitaka+label:Verified%252B1+NOT+label:Workflow%253C%253D-1 | 15:44 |
| *** dmellado has joined #openstack-ansible | 15:46 | |
| odyssey4me | automagically FYI, the user story relating to the oslo.config cross-project spec is https://review.openstack.org/291406 | 15:49 |
| automagically | Nice, will take a look | 15:49 |
| *** saneax_AFK is now known as saneax | 15:49 | |
| stevelle | odyssey4me: you watching the related https://review.openstack.org/#/c/295543/ ? | 15:49 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Update .gitreview for Liberty https://review.openstack.org/303501 | 15:49 |
| *** javeriak_ has joined #openstack-ansible | 15:54 | |
| *** javeriak has quit IRC | 15:55 | |
| *** schwicht has joined #openstack-ansible | 15:58 | |
| *** KLevenstein has quit IRC | 16:03 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add condition to local IP for overlay net https://review.openstack.org/273793 | 16:03 |
| *** KLevenstein has joined #openstack-ansible | 16:03 | |
| cloudnull | http://snag.gy/MJT1x.jpg -- odyssey4me jmccrory | 16:03 |
| cloudnull | we need a couple more updates to the ironic role | 16:04 |
| cloudnull | but its getting there | 16:04 |
| jmccrory | nice | 16:04 |
| odyssey4me | stevelle yep | 16:04 |
| odyssey4me | cloudnull working? | 16:05 |
| cloudnull | yup | 16:05 |
| odyssey4me | awesome :) | 16:05 |
| cloudnull | we need to be able to set the tftp network | 16:05 |
| cloudnull | like cinder its default is my_ip | 16:05 |
| cloudnull | which is wrong | 16:05 |
| cloudnull | also tftp-hpa has a bug | 16:05 |
| odyssey4me | oh lovely | 16:06 |
| cloudnull | it wants to only use ipv6 | 16:07 |
| odyssey4me | heh, it's forward thinking | 16:07 |
| cloudnull | yup | 16:07 |
| * cloudnull adding to the list of why im going to make ipv6 work for OpenStack infra | 16:08 | |
| cloudnull | this is the issue | 16:08 |
| cloudnull | https://bugs.launchpad.net/ubuntu/+source/tftp-hpa/+bug/1448500 | 16:08 |
| openstack | Launchpad bug 1448500 in tftp-hpa (Ubuntu) "tftp-hpa doesn't accept IPv4 connections" [High,Confirmed] | 16:08 |
| cloudnull | simple fix | 16:08 |
| cloudnull | but still something we're not doing in the role currently | 16:08 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: Add executable bit to run_tests.sh https://review.openstack.org/301007 | 16:13 |
| odyssey4me | is there an alternative tftp service we can use which behaves? | 16:15 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ironic: Update ironic.conf for swift and keystone compat https://review.openstack.org/301712 | 16:17 |
| *** neilus has quit IRC | 16:19 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add project scoped token when obtaning token https://review.openstack.org/297563 | 16:20 |
| cloudnull | odyssey4me: that one behaves once we set the IP address correctly | 16:25 |
| cloudnull | if we take the default its ipv6 only | 16:25 |
| *** cloudtrainme has quit IRC | 16:26 | |
| odyssey4me | ah ok - that's reasonable enough | 16:26 |
| *** phiche has joined #openstack-ansible | 16:26 | |
| *** karimb has quit IRC | 16:27 | |
| odyssey4me | alright, I think that's enough for the week - thanks all, and have a great day! | 16:28 |
| cloudnull | cheers | 16:28 |
| *** weezS has quit IRC | 16:32 | |
| *** Ger-chervyak has quit IRC | 16:34 | |
| *** subscope has quit IRC | 16:35 | |
| *** Mudpuppy has quit IRC | 16:36 | |
| *** cloudtrainme has joined #openstack-ansible | 16:39 | |
| *** Oku_OS is now known as Oku_OS-away | 16:41 | |
| *** pcaruana has quit IRC | 16:46 | |
| *** pjm6 has quit IRC | 16:52 | |
| *** cloudtrainme has quit IRC | 16:53 | |
| *** pjm6 has joined #openstack-ansible | 16:54 | |
| openstackgerrit | Merged openstack/openstack-ansible: Add tempest_log_dir variable https://review.openstack.org/302692 | 17:09 |
| *** Mudpuppy has joined #openstack-ansible | 17:10 | |
| *** deadnull has joined #openstack-ansible | 17:12 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: [WIP] Reorganize test playbooks https://review.openstack.org/303090 | 17:13 |
| *** eil397 has joined #openstack-ansible | 17:14 | |
| *** _deadnull has quit IRC | 17:15 | |
| spotz | seeya odyssey4me! | 17:16 |
| *** phiche has quit IRC | 17:27 | |
| *** automagically has quit IRC | 17:32 | |
| *** automagically has joined #openstack-ansible | 17:38 | |
| *** fawadkhaliq has joined #openstack-ansible | 17:39 | |
| *** sdake_ has joined #openstack-ansible | 17:43 | |
| *** sdake has quit IRC | 17:45 | |
| *** psilvad_ has joined #openstack-ansible | 17:45 | |
| *** psilvad has quit IRC | 17:47 | |
| *** psilvad_ is now known as psilvad | 17:47 | |
| *** psilvad has quit IRC | 17:48 | |
| *** psilvad has joined #openstack-ansible | 17:50 | |
| *** psilvad_ has joined #openstack-ansible | 17:52 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: Reorganize test playbooks https://review.openstack.org/303090 | 17:54 |
| *** psilvad_ has quit IRC | 17:55 | |
| *** Ger-chervyak has joined #openstack-ansible | 17:55 | |
| *** psilvad_ has joined #openstack-ansible | 17:55 | |
| *** psilvad has quit IRC | 17:55 | |
| *** psilvad_ has quit IRC | 17:56 | |
| *** sdake has joined #openstack-ansible | 17:59 | |
| *** sdake_ has quit IRC | 18:01 | |
| *** iceyao has quit IRC | 18:01 | |
| *** fawadkhaliq has quit IRC | 18:03 | |
| *** fawadkhaliq has joined #openstack-ansible | 18:03 | |
| *** javeriak_ has quit IRC | 18:10 | |
| *** javeriak has joined #openstack-ansible | 18:12 | |
| lbragstad | o/ i'm playing around with deploying self-signed certs and it looks like i'm required to supply the memcached_encryption_key variable | 18:19 |
| lbragstad | s/self-signed certs/self-signed certs for SSL/ | 18:19 |
| lbragstad | is there any documentation outside of the os_keystone role for this? | 18:19 |
| stevelle | gerrit slow, must be friday | 18:20 |
| *** KLevenstein has quit IRC | 18:22 | |
| *** KLevenstein has joined #openstack-ansible | 18:22 | |
| *** javeriak has quit IRC | 18:23 | |
| cloudnull | lbragstad: yes that uses the cache module to distribute the keys | 18:23 |
| cloudnull | which means you need to have a memcache env up | 18:23 |
| cloudnull | we've started moving away from that model now that setting facts is better and more reliable but its not 100% there yet | 18:25 |
| lbragstad | cloudnull cool - are there docs published somewhere for that? | 18:26 |
| cloudnull | lbragstad: http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-sslcertificates.html?highlight=self%20signed | 18:28 |
| cloudnull | though that may not have exactly what you're looking for | 18:28 |
| lbragstad | cloudnull we just want to hook SSL testing into our deployment for capstone | 18:28 |
| cloudnull | because its geared at a deployed OSA env not a stand alone keystone env | 18:28 |
| lbragstad | cloudnull sure | 18:28 |
| cloudnull | if you include the memcache_server role and set the encryption key itll do the needful | 18:29 |
| *** weezS has joined #openstack-ansible | 18:29 | |
| lbragstad | cloudnull https://github.com/openstack/openstack-ansible-memcached_server this guy? | 18:29 |
| cloudnull | do you want ssl at the capstone node? | 18:29 |
| cloudnull | or are you terminating it ? | 18:30 |
| lbragstad | cloudnull yeah - I want to deploy keystone with ssl configured (https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L167 = true) | 18:30 |
| cloudnull | if all you want to do is to handle the proto from a terminated request you can set that as an option | 18:30 |
| cloudnull | ok | 18:30 |
| cloudnull | thats the role you need for it to work | 18:31 |
| cloudnull | that said, if you want to work on removing those bits it'd be appreciated :) | 18:31 |
| *** pjm6 has quit IRC | 18:31 | |
| *** ametts has quit IRC | 18:32 | |
| lbragstad | cloudnull which bits? here - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/keystone_ssl_key_store.yml ? | 18:32 |
| cloudnull | the ssl bits using the memcached module we've been slowly taking out | 18:34 |
| cloudnull | have a look at how we're doing it in the rabbit role | 18:34 |
| cloudnull | https://github.com/openstack/openstack-ansible-rabbitmq_server/tree/master/tasks | 18:34 |
| cloudnull | specifically the user provided section which is what is effecting you | 18:35 |
| cloudnull | https://github.com/openstack/openstack-ansible-rabbitmq_server/blob/master/tasks/rabbitmq_ssl_user_provided.yml | 18:35 |
| cloudnull | its simply using the ansible built-ins and storing a fact | 18:35 |
| *** javeriak has joined #openstack-ansible | 18:36 | |
| openstackgerrit | Merged openstack/openstack-ansible-rabbitmq_server: Remove nova mentions from tasks and tags https://review.openstack.org/303315 | 18:36 |
| lbragstad | cloudnull ah - I was hitting the issue here - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/keystone_ssl_key_store.yml#L21-L22 | 18:36 |
| lbragstad | or I thought that's where I was hitting it | 18:36 |
| cloudnull | yup thats the break point | 18:37 |
| lbragstad | cool | 18:37 |
| cloudnull | no key, no cache server, no work | 18:37 |
| cloudnull | :) | 18:37 |
| lbragstad | yup - that's what I'm seeing | 18:38 |
| cloudnull | so we can cut that requirement out, and we have in almost all places, we just need to go a little further. | 18:39 |
| lbragstad | cloudnull so the rabbit role doesn't require the key? | 18:40 |
| cloudnull | nope | 18:40 |
| cloudnull | no memcached requirement at all | 18:40 |
| lbragstad | ok | 18:40 |
| lbragstad | cloudnull cool - so the rabbit key creation looks consistent with what os_keystone is already doing https://github.com/openstack/openstack-ansible-rabbitmq_server/blob/master/tasks/rabbitmq_ssl_key_create.yml | 18:42 |
| lbragstad | so that's good | 18:42 |
| *** sdake has quit IRC | 18:42 | |
| lbragstad | cloudnull what's slurp? | 18:43 |
| automagically | Just reads a file’s contents | 18:43 |
| cloudnull | ^ | 18:43 |
| lbragstad | got it | 18:43 |
| lbragstad | so memcached was just being used to store and distribute the certs/keys | 18:46 |
| lbragstad | across all the nodes in the cluster | 18:46 |
| cloudnull | in this case yes | 18:47 |
| cloudnull | it piggy backed on the cluster cache | 18:47 |
| lbragstad | gotcha | 18:47 |
| *** can8dnSix has joined #openstack-ansible | 18:47 | |
| cloudnull | that was done during the ansible 1.4/5/6 timeframe and we had issues with storing facts | 18:47 |
| cloudnull | so that was the solution | 18:48 |
| lbragstad | ah sure | 18:48 |
| lbragstad | makes sense | 18:48 |
| cloudnull | now that we dont have fact storage issues its being removed. slowly | 18:48 |
| lbragstad | so now it's just registered as a fact and copied around the cluster | 18:48 |
| cloudnull | yup | 18:48 |
| lbragstad | cool | 18:48 |
| lbragstad | makes sense | 18:48 |
| cloudnull | if you'd be keen on making that go, i'd be keen on reviewing it :) | 18:49 |
| * cloudnull back to my ironic hole | 18:49 | |
| lbragstad | cloudnull sure thing, I'll see if I can get a PR up that models what the rabbit role is doing | 18:49 |
| cloudnull | ++ | 18:49 |
| lbragstad | cloudnull automagically thanks for the answers! | 18:49 |
| cloudnull | anytime | 18:50 |
| *** sdake has joined #openstack-ansible | 18:52 | |
| *** Ger-chervyak has quit IRC | 19:00 | |
| *** Ger-chervyak has joined #openstack-ansible | 19:00 | |
| *** LanceHaig has quit IRC | 19:03 | |
| *** LanceHaig has joined #openstack-ansible | 19:03 | |
| *** cloudtrainme has joined #openstack-ansible | 19:04 | |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_rally: Removing unused handlers file https://review.openstack.org/303584 | 19:06 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: [WIP] Reorganize test playbooks https://review.openstack.org/303090 | 19:07 |
| openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-04-03 https://review.openstack.org/300860 | 19:12 |
| *** eil397 has quit IRC | 19:13 | |
| cloudnull | hahaha. automagically i read the gerrit commit message as "... oh really: Removing unused handlers file" | 19:16 |
| cloudnull | i need a nap | 19:17 |
| *** eil397 has joined #openstack-ansible | 19:18 | |
| automagically | Haha | 19:20 |
| openstackgerrit | Merged openstack/openstack-ansible: Add project scoped token when obtaning token https://review.openstack.org/297563 | 19:21 |
| *** eil397 has quit IRC | 19:23 | |
| openstackgerrit | Lance Bragstad proposed openstack/openstack-ansible-os_keystone: Use ansible facts for distributing SSL certs/keys https://review.openstack.org/303592 | 19:26 |
| cloudnull | lbragstad: ^ awesome! | 19:26 |
| lbragstad | cloudnull it's a shot in the dark ;) | 19:27 |
| evrardjp | lbragstad 0640 or 0644 for the cert? | 19:31 |
| evrardjp | and hello everyone | 19:31 |
| cloudnull | o/ evrardjp | 19:31 |
| lbragstad | evrardjp o/ | 19:31 |
| lbragstad | evrardjp I was following the model established here - https://github.com/openstack/openstack-ansible-rabbitmq_server/blob/master/tasks/rabbitmq_ssl_key_distribute.yml | 19:31 |
| evrardjp | I have some time today so why not doing some reviews :) | 19:31 |
| automagically | cert can be 644, cert key should be 600 | 19:32 |
| evrardjp | automagically agreed | 19:32 |
| lbragstad | automagically does that apply to the rabbit role? | 19:32 |
| automagically | I was answering in general terms | 19:32 |
| cloudnull | lbragstad: yes likely | 19:32 |
| evrardjp | same for me, it's not worth doing something different | 19:32 |
| evrardjp | as soon as the server can read it, fine for me | 19:33 |
| cloudnull | granted we change the user and group ownership so 640 | 19:33 |
| cloudnull | *to | 19:33 |
| evrardjp | nice addition IMO | 19:33 |
| *** weezS has quit IRC | 19:34 | |
| cloudnull | wow i cant type or speak . | 19:34 |
| cloudnull | :\ | 19:34 |
| *** karimb has joined #openstack-ansible | 19:34 | |
| lbragstad | evrardjp cloudnull automagically want me to push a patch to the rabbit role, too? | 19:34 |
| evrardjp | I would say it's fine as it is | 19:34 |
| evrardjp | it's just I was surprised by the difference of permissions in your change, but it's appropriate | 19:35 |
| automagically | I don’t think its a big deal | 19:35 |
| evrardjp | (difference agains the original) | 19:35 |
| lbragstad | evrardjp gotcha | 19:36 |
| evrardjp | and consistency is good :) | 19:37 |
| lbragstad | evrardjp ++ | 19:38 |
| *** javeriak has quit IRC | 19:42 | |
| lbragstad | automagically thanks for the review - should I add the keystone-ssl tag to that play as well? | 19:45 |
| lbragstad | I *think* that would make sense? | 19:45 |
| automagically | Yes, it should have the same tags as the cert/key generation task | 19:46 |
| *** deadnull has quit IRC | 19:46 | |
| openstackgerrit | Lance Bragstad proposed openstack/openstack-ansible-os_keystone: Use ansible facts for distributing SSL certs/keys https://review.openstack.org/303592 | 19:46 |
| *** eil397 has joined #openstack-ansible | 19:47 | |
| openstackgerrit | Lance Bragstad proposed openstack/openstack-ansible-os_keystone: Use ansible facts for distributing SSL certs/keys https://review.openstack.org/303592 | 19:48 |
| evrardjp | cool | 19:48 |
| evrardjp | ty | 19:48 |
| lbragstad | evrardjp thanks for the review and testing | 19:49 |
| evrardjp | yw | 19:49 |
| *** cloudtrainme has quit IRC | 20:01 | |
| *** johnmilton has quit IRC | 20:06 | |
| *** fawadkhaliq has quit IRC | 20:11 | |
| *** fawadkhaliq has joined #openstack-ansible | 20:11 | |
| evrardjp | does someone know if I can copy paste an exhaustive list of all the IRR of the project? else I'd have to do a parsing a regexp to list all the appropriate projects from gerrit | 20:12 |
| automagically | You want to check the governance file for the project | 20:13 |
| automagically | One second, I can dig up a link | 20:13 |
| automagically | evrardjp: https://github.com/openstack/governance/blob/master/reference/projects.yaml#L2672 | 20:14 |
| evrardjp | thanks | 20:14 |
| evrardjp | but I workarounded somehow for my use | 20:15 |
| evrardjp | still good to know | 20:15 |
| palendae | evrardjp: I wrote a small script that extracts stuff with an openstack-ansible-* repository from the ansible-role-requirements.yml too | 20:15 |
| automagically | lbragstad: I didn’t think about it before, but it would be nice to see the keystone functional test suite updated to cover the changes you made around the cert distribution | 20:15 |
| evrardjp | palendae :) | 20:15 |
| lbragstad | automagically absolutely - look at how to do that | 20:16 |
| *** cloudtrainme has joined #openstack-ansible | 20:16 | |
| palendae | I'm probably going to include that in a patch set for managing local development better | 20:16 |
| lbragstad | automagically would that be something that makes sense here - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/test-keystone-functional.yml ? | 20:16 |
| * lbragstad is ansible testing illiterate | 20:16 | |
| automagically | Exactly! | 20:16 |
| *** karimb has quit IRC | 20:17 | |
| automagically | You’ll need some inventory magic to compare the values between hosts, but that is where the test should go | 20:17 |
| evrardjp | why not here? https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/test-install-keystone.yml | 20:17 |
| evrardjp | it's part of the install | 20:18 |
| evrardjp | it's not really the functionning of keystone itself | 20:18 |
| evrardjp | lbragstad anywhere is good as long as its tested I'd say | 20:18 |
| evrardjp | :D | 20:18 |
| automagically | evrardjp: The assertions about the state of the keystone hosts post-install go in test-keystone-functional | 20:18 |
| evrardjp | we can move it afterwards | 20:18 |
| automagically | All this: https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/test-install-keystone.yml#L72 should have been removed…curious that its duplicated currently | 20:19 |
| automagically | Anyway, I’ve got to go. See you all on the other side of the weekend. | 20:19 |
| cloudnull | have a good one automagically | 20:20 |
| lbragstad | automagically o/ | 20:20 |
| *** clickboom has joined #openstack-ansible | 20:20 | |
| evrardjp | have a good one! | 20:20 |
| evrardjp | lbragstad automagically is right ;D | 20:20 |
| *** cloudtrainme has quit IRC | 20:20 | |
| lbragstad | evrardjp so putting this specific test in https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/test-keystone-functional.yml makes sense? | 20:20 |
| evrardjp | yup | 20:21 |
| evrardjp | like I said, the more important is to have a proper test :D | 20:21 |
| lbragstad | ok - so we would need to add a play in there that checks the location and the permissions of the cert and key on both keystone1 and keystone2? | 20:21 |
| evrardjp | I'd just add tasks in this file | 20:22 |
| evrardjp | you're running the tasks on keystone_all anyway | 20:23 |
| *** sdake_ has joined #openstack-ansible | 20:26 | |
| lbragstad | evrardjp ah - sure that makes sense | 20:27 |
| *** sdake has quit IRC | 20:27 | |
| lbragstad | evrardjp is there an ansible module to check the status of a file instead of change it? | 20:28 |
| evrardjp | stat? | 20:28 |
| lbragstad | I should be able to do that with file? | 20:28 |
| lbragstad | oh - stat makes sense | 20:28 |
| evrardjp | :) | 20:29 |
| evrardjp | palendae I'm working on making local development better right now | 20:32 |
| evrardjp | I'm quickly drafting a script that receives IP as parameter and sends the appropriate local folders to the appropriate place using ansible sync module | 20:33 |
| *** clickboom has quit IRC | 20:36 | |
| *** admin0 has joined #openstack-ansible | 20:39 | |
| openstackgerrit | Lance Bragstad proposed openstack/openstack-ansible-os_keystone: Use ansible facts for distributing SSL certs/keys https://review.openstack.org/303592 | 20:40 |
| *** jayc has joined #openstack-ansible | 20:42 | |
| *** sdake_ has quit IRC | 20:42 | |
| palendae | evrardjp: I was more thinking about interacting with the IRRs | 20:49 |
| palendae | From within an openstack-ansible checkout | 20:49 |
| palendae | Being able to check them all out at once or changing the branch without interfering with roles outside the scope | 20:49 |
| *** thorst_ has joined #openstack-ansible | 20:53 | |
| *** schwicht has quit IRC | 20:54 | |
| *** Mudpuppy_ has joined #openstack-ansible | 20:54 | |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: make hostname,network and ip-address on all examples consistent https://review.openstack.org/303427 | 20:56 |
| *** Mudpuppy has quit IRC | 20:58 | |
| *** Mudpuppy_ has quit IRC | 20:59 | |
| openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: hi .. i saw the conflict . Can I includ this also ? https://review.openstack.org/#/c/303427/ https://review.openstack.org/303614 | 21:01 |
| *** retreved has quit IRC | 21:02 | |
| evrardjp | ^ funny commit | 21:03 |
| evrardjp | :) | 21:03 |
| *** can8dnSix has quit IRC | 21:04 | |
| *** thorst_ has quit IRC | 21:05 | |
| evrardjp | may I help you? | 21:06 |
| *** schwicht has joined #openstack-ansible | 21:09 | |
| *** KLevenstein has quit IRC | 21:15 | |
| *** automagically has quit IRC | 21:20 | |
| *** jthorne has quit IRC | 21:20 | |
| *** karimb has joined #openstack-ansible | 21:23 | |
| *** cfarquhar_ has quit IRC | 21:33 | |
| *** cfarquhar has joined #openstack-ansible | 21:35 | |
| *** cfarquhar has quit IRC | 21:35 | |
| *** cfarquhar has joined #openstack-ansible | 21:35 | |
| *** Ger-chervyak has quit IRC | 21:36 | |
| *** spotz is now known as spotz_zzz | 21:54 | |
| *** schwicht has quit IRC | 21:55 | |
| openstackgerrit | Adam Reznechek proposed openstack/openstack-ansible-specs: PowerVM Virt Driver Support https://review.openstack.org/302941 | 22:02 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-ironic: updated Ironic role to fix tftp-hpa issues https://review.openstack.org/303633 | 22:02 |
| *** karimb has quit IRC | 22:02 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-ironic: Change the default thread pool size https://review.openstack.org/303079 | 22:07 |
| *** kong has joined #openstack-ansible | 22:10 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-ironic: Update ironic.conf for swift and keystone compat https://review.openstack.org/301712 | 22:11 |
| *** markvoelker has quit IRC | 22:16 | |
| *** busterswt has quit IRC | 22:16 | |
| *** schwicht has joined #openstack-ansible | 22:17 | |
| *** karimb has joined #openstack-ansible | 22:20 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: Reorganize test playbooks https://review.openstack.org/303090 | 22:24 |
| *** fawadkhaliq has quit IRC | 22:25 | |
| *** fawadkhaliq has joined #openstack-ansible | 22:25 | |
| *** woodard has quit IRC | 22:27 | |
| *** karimb has quit IRC | 22:27 | |
| *** woodard has joined #openstack-ansible | 22:27 | |
| *** karimb has joined #openstack-ansible | 22:27 | |
| *** woodard has quit IRC | 22:31 | |
| *** woodard_ has joined #openstack-ansible | 22:31 | |
| *** admin0 has quit IRC | 22:33 | |
| *** Brew has quit IRC | 22:37 | |
| *** admin0 has joined #openstack-ansible | 22:39 | |
| *** woodard_ has quit IRC | 22:41 | |
| *** karimb has quit IRC | 22:53 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Add installation support for os_ironic https://review.openstack.org/293779 | 22:54 |
| *** karimb has joined #openstack-ansible | 22:54 | |
| *** karimb has quit IRC | 23:01 | |
| *** jayc has quit IRC | 23:04 | |
| *** markvoelker has joined #openstack-ansible | 23:16 | |
| *** markvoelker has quit IRC | 23:21 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-ironic: updated Ironic role to fix tftp-hpa issues https://review.openstack.org/303633 | 23:26 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: updated ironic playbook inclusion for tftp network https://review.openstack.org/303659 | 23:30 |
| *** admin0 has quit IRC | 23:35 | |
| *** scarlisle has quit IRC | 23:47 | |
| *** fawadkhaliq has quit IRC | 23:48 | |
| *** fawadkhaliq has joined #openstack-ansible | 23:48 | |
| *** markvoelker has joined #openstack-ansible | 23:52 | |
| *** eil397 has quit IRC | 23:53 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
