Tuesday, 2016-04-19

*** karimb has quit IRC00:05
*** jayc_ has quit IRC00:06
*** pjm6 has quit IRC00:09
*** BjoernT has quit IRC00:09
*** busterswt has joined #openstack-ansible00:12
openstackgerritMerged openstack/openstack-ansible-os_aodh: Clarify role documentation and remove duplication  https://review.openstack.org/30731500:21
*** KiranV has joined #openstack-ansible00:41
*** busterswt has quit IRC00:47
*** busterswt has joined #openstack-ansible00:49
*** ssl_ has joined #openstack-ansible01:01
ssl_i'm trying to install osa, i'm getting the following error:  - [ XEN Server Information ] ----------------------------------------- ----------------------------------------------------------------------  No xenstore Information  +++ info_block 'Error Info - 262' 0 +++ echo ---------------------------------------------------------------------- ---------------------------------------------------------------------- +++ print_in01:01
cloudnullssl_: is that an all in one ?01:06
cloudnullthat is the diagnostic print out when the run has an error01:07
cloudnullit looks to see if the node is running on XEN hypervisors01:07
cloudnullyour actual error is well above all that01:07
*** ssl__ has joined #openstack-ansible01:09
*** fishcried has joined #openstack-ansible01:09
ssl__yes.. it is on allinone, however, the installation failed after that?01:09
*** ssl_ has quit IRC01:10
*** iceyao has joined #openstack-ansible01:11
cloudnullits using a bash trap to generate that data.01:14
cloudnullthe real error should be above01:14
*** fishcried has quit IRC01:18
*** weezS has joined #openstack-ansible01:20
*** alejandrito has joined #openstack-ansible01:26
*** KiranV has quit IRC01:44
*** busterswt has quit IRC01:45
*** asettle has quit IRC01:52
openstackgerritMerged openstack/openstack-ansible-galera_server: Decrease MariaDB wait timeout  https://review.openstack.org/30723101:57
*** keedya has quit IRC02:10
*** phalmos has joined #openstack-ansible02:20
*** iceyao has quit IRC02:24
*** iceyao has joined #openstack-ansible02:24
*** phalmos has quit IRC02:30
*** phalmos has joined #openstack-ansible02:40
*** alejandrito has quit IRC02:41
*** thorst_ has quit IRC02:52
*** thorst_ has joined #openstack-ansible02:53
*** thorst_ has quit IRC03:01
*** phalmos has quit IRC03:18
*** iceyao_ has joined #openstack-ansible03:36
*** iceyao has quit IRC03:36
*** iceyao has joined #openstack-ansible03:39
*** charz_ has quit IRC03:39
*** persia has quit IRC03:40
*** intr1nsic has quit IRC03:41
*** iceyao_ has quit IRC03:42
*** charz has joined #openstack-ansible03:42
*** iceyao has quit IRC03:44
*** persia has joined #openstack-ansible03:50
*** thorst_ has joined #openstack-ansible03:59
openstackgerritMerged openstack/openstack-ansible: Docs: Change invalid reference to FWaaS in VPNaaS documentation  https://review.openstack.org/30732204:00
*** thorst_ has quit IRC04:06
*** intr1nsic has joined #openstack-ansible04:07
*** saneax is now known as saneax_AFK04:12
*** ssl__ has quit IRC04:13
*** intr1nsic has quit IRC04:27
*** mkrish004c has joined #openstack-ansible04:32
*** intr1nsic has joined #openstack-ansible04:33
*** asettle has joined #openstack-ansible04:38
mkrish004chi all, i am trying out local repo set up for the OSA installation, facing lot of dependency conflicts on pip installation.04:40
mkrish004cwhy the OSA is using pip installation for most of the package rather than apt-get installation ?04:41
mkrish004cif i change all pip to apt get, would that affect my set up by any way ?04:41
prometheanfireodyssey4me: if you are curious on the work being done for upstream image work... https://review.openstack.org/307553 and https://review.openstack.org/#/c/30749304:42
mkrish004cin openstack installation guide all the packages have been installed via apt-get, why not the same in OSA04:42
*** asettle has quit IRC04:54
*** asettle has joined #openstack-ansible04:55
*** czunker has joined #openstack-ansible04:55
*** thorst_ has joined #openstack-ansible05:04
*** ssl_ has joined #openstack-ansible05:12
*** thorst_ has quit IRC05:12
*** eric_lopez has joined #openstack-ansible05:12
*** elo has quit IRC05:13
*** asettle has quit IRC05:13
*** asettle has joined #openstack-ansible05:13
*** mkrish004c has quit IRC05:17
ssl_how can i update the AIO to include Neutron LBaaS05:18
prometheanfirecheckout master>05:18
prometheanfire?05:18
*** saneax_AFK is now known as saneax05:23
*** shausy has joined #openstack-ansible05:30
*** asettle has quit IRC05:37
*** asettle has joined #openstack-ansible05:38
*** weezS has quit IRC05:40
*** Mudpuppy has quit IRC05:43
*** shausy has quit IRC05:44
*** ssl_ has quit IRC05:44
*** asettle has quit IRC05:51
*** asettle has joined #openstack-ansible05:53
*** thorst_ has joined #openstack-ansible06:09
*** asettle has quit IRC06:15
*** asettle has joined #openstack-ansible06:15
*** thorst_ has quit IRC06:17
*** jiteka has joined #openstack-ansible06:25
*** jiteka has quit IRC06:26
*** javeriak has joined #openstack-ansible06:37
*** dmellado_ is now known as dmellado06:44
joker_hi odyssey4me : I got this error https://gist.github.com/celikmustafa89/4c6600682d5c7f72898f5229409c72f906:44
joker_and I have solved this problem by downgrading pip version to 7.1.2.06:44
joker_what causes such a problem? thanx06:44
*** kiranv has joined #openstack-ansible06:48
*** fawadkhaliq has joined #openstack-ansible06:49
kiranvHi, I've been trying to setup an AIO node with OpenStack-Ansible since 3 days. When I bring up the node for the first time, everything boots up fine.. But when I try to change some config and re run run-playbooks.sh, I see a few failures and my horizon or keystone service is not accessible.. can anyone help me with this?06:52
mcardenkiranv: I may not be able to help, but I think anyone who can would need more information. Is the AIO in a VM or on a 'bare metal' host? How much CPU/RAM/DISK?06:55
kiranvIt is on bare metal, with ubuntu 14.04 server06:55
kiranvmemory 32G and HDD 1TB06:56
mcardenOK - that looks good.06:56
kiranvI am trying to build AIO from liberty branch06:56
*** chhavi has joined #openstack-ansible06:56
mcardenSo do you check out liberty as soon as you clone the openstack-ansible project?06:57
kiranvyes.. while cloning, -b liberty06:57
mcardenOK - I suspect you have already done anything that I might advise you of. You may need to wait for others to wake up and chime in with more experience.06:58
*** dalees` has quit IRC06:58
*** bbmbx has quit IRC06:59
*** dalees` has joined #openstack-ansible06:59
mcardenI've blogged what works for me (on a cloud VM) at http://www.michaelcarden.net but I think I have no clues that will point you in the right direction.06:59
kiranvsure! I also noticed a few more issue.. 1. OSA takes entire control of the sshd_config file and modifies it.. blocking the root login  #Ansible managed: /etc/ansible/roles/sshd/templates/sshd_config.j2 modified on "xyz"07:01
mcardenYep, you need to set up an ssh key login for root on your host before you start.07:02
kiranv2. if the machine is rebooted, after waiting for all the containers to come up, horizon isn't accessible and even if I re run run-playbooks.sh, it results in errors07:02
kiranvpoint noted. Will do that from now on :) and I'll check out your blog. Thanks :)07:03
*** fishcried has joined #openstack-ansible07:06
*** fawadkhaliq has quit IRC07:12
*** fishcried has quit IRC07:12
*** thorst_ has joined #openstack-ansible07:15
*** pcaruana has joined #openstack-ansible07:16
*** kiranv has quit IRC07:16
*** thorst_ has quit IRC07:22
*** pcaruana has quit IRC07:23
*** Mudpuppy has joined #openstack-ansible07:28
*** Mudpuppy has quit IRC07:33
*** mikelk has joined #openstack-ansible07:37
*** admin0 has joined #openstack-ansible07:41
*** mariusv has quit IRC07:48
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Designate functional tests  https://review.openstack.org/30718907:50
*** Oku_OS-away is now known as Oku_OS07:53
*** fishcried has joined #openstack-ansible07:54
*** fishcried has quit IRC07:55
*** javeriak has quit IRC07:59
*** coolj has quit IRC08:01
*** coolj has joined #openstack-ansible08:01
*** javeriak has joined #openstack-ansible08:03
*** javeriak has quit IRC08:19
*** thorst_ has joined #openstack-ansible08:20
*** javeriak has joined #openstack-ansible08:26
*** gparaskevas has joined #openstack-ansible08:27
*** thorst_ has quit IRC08:27
*** pjm6 has joined #openstack-ansible08:28
pjm6good morning :D08:28
admin0\o08:29
pjm6admin0: o/08:29
admin0brb :D08:30
openstackgerritPedro Magalhães (pjm) proposed openstack/openstack-ansible: Docs: Adding toctree to Configuring the Network Services (Optional)  https://review.openstack.org/30764008:38
*** javeriak has quit IRC08:39
*** asettle has quit IRC08:41
*** asettle has joined #openstack-ansible08:41
*** tiagogomes has joined #openstack-ansible08:48
*** asettle has quit IRC08:51
*** asettle has joined #openstack-ansible08:52
*** electrofelix has joined #openstack-ansible08:56
odyssey4memcarden point to note - run-playbooks should only be run once... from then on the playbooks should be run using openstack-ansible <playbook name>, also the AIO docs cover what to do after a reboot - please point people at the AIO docs08:57
odyssey4mepjm6 can you cherry-pick https://review.openstack.org/307322 to stable/mitaka please? you can do it through gerrit via a button08:58
odyssey4meevrardjp can you backport https://review.openstack.org/305971 to stable/mitaka08:59
odyssey4meevrardjp also https://review.openstack.org/306436 and https://review.openstack.org/30648209:00
*** pjm6 has quit IRC09:01
*** pjm6 has joined #openstack-ansible09:01
pjm6odyssey4me: sure09:04
pjm6do you want that i git clone stable/mitaka09:04
pjm6do git cherry-pick09:04
pjm6and then git-review ?09:04
pjm6odyssey4me: its this https://review.openstack.org/#/c/307659/ ?09:11
*** karimb has joined #openstack-ansible09:11
*** jiteka has joined #openstack-ansible09:17
*** thorst_ has joined #openstack-ansible09:25
*** lkoranda has joined #openstack-ansible09:26
*** Oku_OS is now known as Oku_OS-away09:29
*** thorst_ has quit IRC09:31
*** johnmilton has joined #openstack-ansible09:47
*** johnmilton has quit IRC09:51
*** asettle has quit IRC09:56
*** asettle has joined #openstack-ansible09:57
odyssey4mepjm6 it should have been cherry-pick -x but anyway - I'll fix up the commit msg09:57
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: DOCS WIP: Adding Ironic configuration docs to Ansible install guide  https://review.openstack.org/30558610:00
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add option to auto enable from VPNaaS in Horizon  https://review.openstack.org/30543310:00
odyssey4measettle lives?10:00
asettleodyssey4me: yeah bro. Get reviewing. There's questions from back on patch set 1/2.10:00
asettle:)10:00
asettleHAPPY TUESDAY10:00
asettle\o/10:01
*** pjm6 has quit IRC10:01
matttasettle: woohoo!10:04
*** pjm6 has joined #openstack-ansible10:05
*** Oku_OS-away is now known as Oku_OS10:05
asettleWell hey mattt :)10:05
*** jiteka1 has joined #openstack-ansible10:05
asettlemattt - I believe you have andymccr back safe and sound10:05
*** jiteka has quit IRC10:07
*** pjm6 has quit IRC10:09
odyssey4measettle he's safe, not so sure about sound10:13
asettleodyssey4me: I do that to people ;)10:13
odyssey4memattt would you mind reviewing this small backport? https://review.openstack.org/30724010:15
matttodyssey4me: sure10:16
odyssey4memattt and this one https://review.openstack.org/30768410:16
matttk10:17
*** electrofelix has quit IRC10:24
matttodyssey4me: i don't know why but that first review just feels odd to me10:25
*** pjm6 has joined #openstack-ansible10:29
*** thorst_ has joined #openstack-ansible10:29
pjm6odyssey4me: -x ? What I did was executing the cherry pick command that were in the openstack10:30
odyssey4memattt it does pretty much nothing for any standard deploy - it'll make a lot more sense once we have OVS mixed in10:30
odyssey4mepjm6 -x adds the 'cherry picked from commit xxxx' bit into the commit message, so we know where it came from10:31
pjm6ohh right, thanks :D10:31
pjm6didn't knew10:31
pjm6next time I will try not to forget10:31
pjm6btw: https://review.openstack.org/#/c/307640/ in this way is better?10:31
odyssey4mepjm6 if you use the 'cherry pick' button in gerrit then it does that automatically once the master patch has merged10:32
pjm6That's the second change that i was doing10:32
pjm6odyssey4me: I copy pasted the 'cherry pick' command from the gerrit10:32
pjm6maybe did something wrong10:32
*** electrofelix has joined #openstack-ansible10:34
odyssey4mepjm6 next to 'rebase' do you see the 'cherry pick' button10:34
odyssey4meI think you used the 'download' button instead10:35
pjm6ohhh forget it10:35
odyssey4me'cherry pick' is under the 'owner' 'project' 'branch' etc10:35
pjm6yes I did that10:35
pjm6Cherry Pick button10:35
pjm6left side of "Revert"10:35
pjm6?10:35
odyssey4meyeah, so the download links are for testing10:35
odyssey4meyes, that button10:35
pjm6sorry my bad10:35
openstackgerritMerged openstack/openstack-ansible-os_aodh: Fail fast when required secrets are not present  https://review.openstack.org/30742610:36
pjm6I used from the download links yeah10:36
odyssey4menext time use that to cherry pick - it'll do the right thing if it can do it cleanly10:36
pjm6Nice :D and more easy to10:36
pjm6*too10:36
*** thorst_ has quit IRC10:37
*** markvoelker has joined #openstack-ansible10:37
joker_odyssey4me : could you help me with this error https://gist.github.com/celikmustafa89/7326f9cf08364201cb1aa40ed4565e7d10:38
*** markvoelker has quit IRC10:42
odyssey4mejoker_ don't use --limit or --retry, and clear your fact cache, then try and run the play again10:49
odyssey4mejoker_ hang, on do your hosts have /root/.ssh/id_rsa.pub keys which match your deployment host?10:51
*** johnmilton has joined #openstack-ansible10:59
joker_odyssey4me : all hosts have  " ~/.ssh/id_rsa.pub key of deployment host" in their ~/.ssh/authorized_keys file. Also containers has that public key too. Is this concept is correct?11:06
joker_odyssey4me: or should my repo container which, is "infra01_repo_container-d24349b7" , has infra01 hosts publickey under its authorized_keys file, too???11:08
*** zhangjn has joined #openstack-ansible11:12
*** admin0 has quit IRC11:13
joker_odyssey4me:  I have another question about pip version.  while ansible is installing wheel, virtualenv, virtualenv-tools with pip_8.1.1 it throws this error https://gist.github.com/celikmustafa89/c91d85d1d76708803f89ccefb9332a55 . Do you know something about this error? thanx11:14
openstackgerritMerged openstack/openstack-ansible-os_keystone: Fail fast when required secrets are not present  https://review.openstack.org/30747711:18
odyssey4mejoker_ the containers will inherit that file if it was there when they were created - if they weren't then destroy the containers and rebuild them11:19
*** javeriak has joined #openstack-ansible11:20
odyssey4mejoker_ as I've asked several time before, please post the complete play for that issue11:20
odyssey4methe results of the complete play11:20
joker_odyssey4me : sorry, what you mean by complete play?11:21
odyssey4mejoker_ which play are you running?11:26
joker_setup-infrastructure.yml11:27
*** weshay has quit IRC11:28
*** Mudpuppy has joined #openstack-ansible11:28
*** Mudpuppy has quit IRC11:29
joker_odyssey4me : setup-infrastructure.yml11:31
*** thorst_ has joined #openstack-ansible11:37
*** markvoelker has joined #openstack-ansible11:38
*** admin0 has joined #openstack-ansible11:41
*** markvoelker has quit IRC11:42
*** saneax is now known as saneax_AFK11:45
*** karimb has quit IRC11:49
*** karimb has joined #openstack-ansible11:49
*** Oku_OS is now known as Oku_OS-away11:52
*** karimb_ has joined #openstack-ansible11:52
*** javeriak has quit IRC11:54
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Ensure that role execution stops if there is no ssh public key configured  https://review.openstack.org/30773211:54
*** karimb has quit IRC11:54
*** karimb_ has quit IRC11:54
odyssey4mejoker_ ok, so can you share the output of the whole playbook execution from start to finish, preferably with the '-vv' CLI parameter added for verbose output11:55
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Ensure that tasks fail early if there is no ssh public key configured  https://review.openstack.org/30773211:57
*** javeriak has joined #openstack-ansible11:59
*** weshay has joined #openstack-ansible12:03
*** pjm6 has quit IRC12:12
*** schwicht has joined #openstack-ansible12:12
*** iceyao has joined #openstack-ansible12:15
*** chhavi has quit IRC12:16
*** markvoelker has joined #openstack-ansible12:19
openstackgerritMatt Thompson proposed openstack/openstack-ansible-memcached_server: Updated role using the Multi-Distro framework  https://review.openstack.org/27960812:19
*** Oku_OS-away is now known as Oku_OS12:19
*** gparaskevas has quit IRC12:19
*** rohanp has quit IRC12:19
*** flaviosr has quit IRC12:19
*** woodard has joined #openstack-ansible12:20
*** chhavi has joined #openstack-ansible12:29
*** javeriak has quit IRC12:35
*** javeriak has joined #openstack-ansible12:36
mhaydenbuenos dias12:40
*** winggundamth has quit IRC12:48
asettleodyssey4me: is there a problem with the ansible gates?13:00
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Add group_vars for swift_remote_all hosts  https://review.openstack.org/30780213:01
*** schwicht has quit IRC13:01
odyssey4measettle the gate queues are very long there are issues in OpenStack-CI and have been for two days13:01
asettleOh gotcha, cheers odyssey4me13:01
odyssey4methere are currentlyover 700 jobs in the queue13:02
odyssey4mehttp://status.openstack.org/zuul/13:02
asettleLucky zuul!13:02
asettleI'll leave that to itself then :)13:02
cloudnullmorning13:02
matttmorning2u cloudnull13:03
cloudnullohai mattt13:03
cloudnullhow are things ?13:03
odyssey4mecloudnull automagically mattt I think that considering the number of failures we're getting queries that relate to this, perhaps https://review.openstack.org/307732 is a good course of action13:03
*** retreved has joined #openstack-ansible13:04
*** klamath has joined #openstack-ansible13:04
*** klamath has quit IRC13:04
cloudnullthat seems like a good course of action13:04
*** klamath has joined #openstack-ansible13:05
cloudnulland matches some of the other preflight check things automagically has been working on13:05
*** keedya has joined #openstack-ansible13:05
odyssey4meyeah, we should do more of it13:06
*** b3rnard0_away is now known as b3rnard0\13:08
*** b3rnard0\ is now known as b3rnard013:09
*** pjm6 has joined #openstack-ansible13:12
evrardjpgood morning cloudnull13:14
evrardjptesting your commit13:15
evrardjpabout ssl termination13:15
*** pjm6_ has joined #openstack-ansible13:16
*** schwicht has joined #openstack-ansible13:17
evrardjpI think horizon and keystone should have an SSL passthrough but that's another topic. Having everything SSL without difficult wiring/configuration is a good thing13:17
*** pjm6 has quit IRC13:17
* admin0 is waiting to pounce on cloudnull as well and hammer him with ssl certs :D13:17
*** pjm6 has joined #openstack-ansible13:21
cloudnullhows it evrardjp13:21
*** pjm6_ has quit IRC13:21
* cloudnull is ready13:22
automagicallymorning all13:22
evrardjpmorning automagically13:22
evrardjpcloudnull I will give you feedback in around 10 minutes13:23
cloudnullidk about ssl pass through for keystone and horizon we have that kinda now, and it works, but in the deployments i've overseen just about all of them want SSL termination at the LB . so i think we should support it however i dont know if it should be our primary usecase.13:23
cloudnullthat said, im open to it if we think it best13:23
cloudnullmorning automagically13:23
*** karimb has joined #openstack-ansible13:24
admin0cloudnull:  as a deployer, i just expect SSL to work ( via haproxy, or via passthrought to the direct containers ) is not something to look into pros and cons or about13:25
cloudnullthat has been the general sentiment on deployments i've done too13:25
admin0yeah .. because there are a lot of things to do .. SSL done, yes .. move on to next item ..13:26
*** BjoernT has joined #openstack-ansible13:26
admin0leaving pros and cons of where is the best place to use SSL to get some millisecond improvement  to someone else :D13:26
admin0i mean directly to instances or via haproxy13:26
evrardjpit's not only that admin013:26
evrardjpit's about end to end ssl or not13:27
evrardjpbut that's another discussion I'll keep for later13:27
*** adreznec has quit IRC13:27
evrardjphaving everything simple and already defined for the deployer is nice13:27
evrardjpadmin0 did you try the code already?13:27
admin0evrardjp: i get that, but the first thing is to get the public side secured ( adn then later worry about  if we can also secure the internal traffic as well )13:27
*** gfa_ has quit IRC13:28
evrardjpit could be nice if you could bring your input too13:28
*** czunker has quit IRC13:28
admin0i am waiting for the output13:29
*** gfa_ has joined #openstack-ansible13:31
*** jwitko has quit IRC13:32
*** jwitko has joined #openstack-ansible13:33
*** adreznec has joined #openstack-ansible13:33
odyssey4meadmin0 but the output is waiting for your tests and for your to feedback the issues you found and how you solved them13:35
admin0yes . give me a few more minutes place13:36
*** openstackstatus has joined #openstack-ansible13:36
*** ChanServ sets mode: +v openstackstatus13:36
odyssey4meopen source solutions are delivered by a collective of people working on the same problems, not through a one-sided push mechanism13:36
evrardjp+113:37
-openstackstatus- NOTICE: We have recovered one of our cloud providers, but there is a huge backlog of jobs to process. Please have patience until your jobs are processed13:39
evrardjpwe want NAMES13:39
evrardjpeven if we know them13:39
evrardjpquick question about https://review.openstack.org/#/c/306632 there is no scenario where ironic can access public swift but not internal swift network?13:42
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Decrease MariaDB wait timeout  https://review.openstack.org/30782613:42
evrardjpif it's a possible scenario, should we set OS_ENDPOINT_TYPE=internalURL ?13:43
*** javeriak has quit IRC13:43
evrardjpinstead of using a variable13:43
cloudnullevrardjp:  im going to say no.13:44
evrardjpbecause we already use something like openrc_os_endpoint_type as a variable, so I am thinking about variable proliferation13:44
cloudnullironic should only use the internalURL13:45
*** asettle has quit IRC13:45
cloudnullIMO13:45
cloudnulli guess that could be debatable13:45
evrardjpthen it's fine for me13:45
cloudnullbut if it goes over public its essentially leaving the environment to download the image which may or may not be over SSL13:46
evrardjpI don't want to start a debate, I'm trying to review your patch :D13:46
cloudnullreviewing is a good time for a debate :)13:46
evrardjpdebate is good when it comes to result. Consensus avoid debate and skips steps :D13:46
admin0trying to start fresh, got a merge conflict on a newly cloned stable/mitaka13:47
admin0git fetch https://git.openstack.org/openstack/openstack-ansible refs/changes/99/277199/29 && git cherry-pick FETCH_HEAD13:47
admin0error: could not apply 971fd35... Enable SSL termination for all services13:47
admin0both modified: playbooks/haproxy-install.yml and playbooks/vars/configs/haproxy_config.yml13:48
evrardjpadmin0 try on master13:48
admin0ok13:48
*** saneax_AFK is now known as saneax13:50
*** pjm6 has quit IRC13:51
*** pjm6 has joined #openstack-ansible13:52
*** pjm6 has quit IRC13:52
*** pjm6 has joined #openstack-ansible13:54
odyssey4meadmin0 the patch should be tested on master, as that is where the patch is currently targeted - it is premature to test it on older releases13:55
admin0i see all haproxy endpoints behind SSL13:56
admin0and responding to SSL13:56
*** pjm6 has joined #openstack-ansible13:56
*** schwicht has quit IRC13:56
admin0but i tested only the haproxy install now .. i am going to quick setup the full service and do proper testing ..(doing operations as a normal user wtih curl —debug and analyizing the headers)13:56
admin0odyssey4me:  since i always start with haproxy-setup playbook, this will also allow me to test if it fails on haproxy like last time13:57
admin0and this time, i can do a bug report13:57
*** rohanp has joined #openstack-ansible13:58
admin0cloudnull: +0.9 :)    .1 after testing D:13:58
*** jthorne has joined #openstack-ansible13:58
admin0:D13:58
odyssey4mecloudnull FYI https://review.openstack.org/30783113:59
cloudnullnice!13:59
odyssey4merequest for mariadb mirror13:59
odyssey4memattt ^13:59
odyssey4mejmccrory ^13:59
admin0can i donate a mirror ?13:59
odyssey4meI have no idea whether my patch is right. I'll wait for review feedback, but at least the ball is rolling.13:59
odyssey4meadmin0 this is for a mirror in OpenStack-CI resources, which we are asked to use for CI purposes14:00
*** schwicht has joined #openstack-ansible14:00
odyssey4meadmin0 if you wish to donate CI resources to OpenStack, then you may approach the -infra team and discuss the offer14:00
*** sigmavirus24_awa is now known as sigmavirus2414:01
admin0ok14:02
*** psilvad has joined #openstack-ansible14:02
admin0odyssey4me:  i can give a +1 when i have at least one merged patch ?14:03
odyssey4meadmin0 anyone is able to vote on patches14:03
*** woodard has quit IRC14:04
*** jayc_ has joined #openstack-ansible14:04
*** woodard has joined #openstack-ansible14:04
*** jayc_ is now known as jayc14:07
*** KLevenstein has joined #openstack-ansible14:09
evrardjpcloudnull are there some variables I should change?14:09
evrardjpfor the ssl testing14:10
cloudnullno14:10
cloudnullits on by default14:10
cloudnulland itll be on for all public endpoints14:11
cloudnulladditionally some basic ACLs are in place for services that should not be routable via haproxy on the public interfaces.14:12
evrardjpyes that's cool14:14
evrardjpI think there should be an acl like acl blacklist --14:15
evrardjpsrc --14:15
evrardjpbut that's another topic14:15
evrardjpfor later14:15
sigmavirus24admin0: please don't just +1 without a comment though. Please make sure that you demonstrate that you've reviewed a patch and maybe tried it out.14:16
cloudnullthe interface will allow you to have a custom acl whitelist14:16
evrardjpcloudnull does that allow to create a new acl ?14:17
admin0i am not going to +1 yet . but actually test it out and then provide those details as well ( summary)14:17
cloudnullevrardjp:  it does14:17
admin0like this is what i expected, what i got and what I tested, so +1 from my side kind of comment14:17
evrardjpso you mean a REALLY new acl will be included live?14:17
evrardjpI thought only a change of acl was doable14:17
evrardjpthat's cool news14:17
cloudnullevrardjp: https://review.openstack.org/#/c/277199/29/playbooks/vars/configs/haproxy_config.yml@2614:17
evrardjpyes sure I saw that14:18
cloudnullif you change that you can add / remove acls14:18
*** cloudtrainme has joined #openstack-ansible14:18
evrardjplet me try the web interface for haproxy once, I'm always using the socket for that14:18
*** asettle has joined #openstack-ansible14:18
evrardjpoh you mean networks in the acl14:18
cloudnullah ive not given the web interface a go14:19
cloudnullevrardjp:  yes14:19
evrardjpso change the acl itself14:19
evrardjpok14:19
evrardjpthen yes14:19
evrardjpI get it14:19
evrardjpit was about new acls I'm talking about14:19
cloudnullok14:20
cloudnullthen no. not without changing the ACLs14:20
evrardjpanyway that's for the future :D14:21
evrardjpI have issues with horizon14:21
evrardjpthe rest seems fine14:21
cloudnulldid you pull in the rfc patches?14:23
*** asettle has quit IRC14:23
cloudnulllike so https://review.openstack.org/#/q/status:open+branch:master+topic:ssl-updates14:24
evrardjpthe others are merged14:24
evrardjpoh14:24
cloudnullhttps://review.openstack.org/#/c/305912/14:24
evrardjpyes I see14:25
cloudnullhorizon will throw hostname lookup problems14:25
cloudnulli should add https://review.openstack.org/#/c/305912/ to the dep list14:26
evrardjpmy browser cache had a glitch, I saw the Depends-On from patchset 2714:26
evrardjp:/14:26
cloudnullanyway, those rfc updates we're a result of all of the SSL testing14:27
*** bbmbx has joined #openstack-ansible14:29
evrardjpcould you link all the appropriate patches?14:30
*** galstrom_zzz is now known as galstrom14:30
cloudnullnot all of them are deps of the specific "SSL all the things" patch but all of them fix the same issue I found while testing "SSL all the things"14:30
cloudnullevrardjp:  i'd pull in https://review.openstack.org/#/q/status:open+branch:master+topic:ssl-updates14:30
evrardjppulling it all14:31
*** mbrou007 has joined #openstack-ansible14:34
admin0what does the tick in workflow mean in the review system ?14:36
automagicallyadmin0: http://docs.openstack.org/infra/manual/developers.html#code-review14:37
*** pjm6 has quit IRC14:37
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Fix container hostname for RFC 1034/1035  https://review.openstack.org/30679414:38
*** pjm6 has joined #openstack-ansible14:38
admin0automagically:  \o/14:38
odyssey4memattt https://review.openstack.org/#/q/status:open+branch:master+topic:ssl-updates14:38
matttok makes sense now14:38
evrardjpcloudnull could you make the commit 277199 depend on the 306794?14:40
*** pjm6_ has joined #openstack-ansible14:40
evrardjpdon't know if it's really necessary14:41
admin0fatal: [c14_rabbit_mq_container-fd76fc02] => Failed to template {{ hostvars[groups['rabbitmq_all'][0]]['rabbitmq_ssl_key_fact'] | — does this var needs to be present ?14:41
evrardjpit just more readable14:41
cloudnullevrardjp:  i ca n14:41
evrardjpthanks14:41
odyssey4meadmin0 clear your fact cache and re-run the rabbitmq play - the play should set the facts appropriately14:41
admin0odyssey4me:  it was a brand new formatted machine where it failed ( like 1st time failed )14:42
admin0same procedure still ?14:42
*** woodard has quit IRC14:43
*** pjm6 has quit IRC14:43
*** pjm6_ has quit IRC14:43
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services  https://review.openstack.org/27719914:43
*** woodard has joined #openstack-ansible14:43
cloudnull^ evrardjp14:43
cloudnullupdated .14:43
*** woodard has quit IRC14:43
cloudnullodyssey4me: is out depends-on things working ?14:43
*** eric_lopez has quit IRC14:43
*** woodard has joined #openstack-ansible14:44
cloudnullevrardjp:  idk if it'll gate yet because the deps aren't merged but the commit message has been updated14:44
*** mbrou007 has quit IRC14:45
joker_could some one help me with  this error:                          odyssey4me14:45
cloudnulljoker_: odyssey4me is an unrecoverable error14:46
cloudnull:p14:46
joker_odyssey4me : I have ran setup-hosts.yml and it finished without any error. here is my vv output https://gist.github.com/celikmustafa89/ce5ab1617eb32a10e24b03668bfd25aa14:46
joker_yeah :D14:46
*** Brew has joined #openstack-ansible14:46
joker_after that ı have ran setup-infrstructure-hosts.yml and I go this error https://gist.github.com/celikmustafa89/426f3b5c7adb34d10297bfd4718b733314:47
*** eric_lopez has joined #openstack-ansible14:47
joker_cloudnull can you check the output?14:47
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Changed for lxc-host setup/build for multi-distro  https://review.openstack.org/30785614:48
cloudnulljoker_: sure14:48
joker_cloudnull : than we can fix odyssey4me error :D14:48
* cloudnull looking now14:48
odyssey4mecloudnull nope, we have no instrumentation yet for zuul-cloner - working out other stuff, it's in the queue14:48
cloudnullhaha -- when will then be now!?!?!?14:48
cloudnull:p14:48
odyssey4mecloudnull in the year of the linux desktop :p14:49
*** mgoddard_ has joined #openstack-ansible14:49
cloudnullive been using the linux desktop for years!14:49
*** pjm6 has joined #openstack-ansible14:49
* cloudnull takes ball and goes home ...14:49
admin0odyssey4me:  that facts thing helped .. how does this work .. i mean why is this step required ?14:49
*** pjm6_ has joined #openstack-ansible14:50
cloudnulljoker_: whats the error ?14:50
evrardjprebuilding my aio with all these dependencies14:50
evrardjpeasier to have a real test14:50
odyssey4meadmin0 http://docs.openstack.org/developer/openstack-ansible/install-guide/ops-troubleshooting.html#cached-ansible-facts-issues14:50
admin0:D14:51
admin0i will look into docs first before asking14:51
joker_cloudnull : it is at end of the second post. you can find it by typing "failed: [ansible01_repo_container-d24349b7] => (item={     ............"14:51
*** mgoddard_ has quit IRC14:51
admin0joker_:  is your haproxy running and answering on those ports14:51
admin0i faced those errors a lot before which is why i started to start with openstack-ansible haproxy-setup playbook first before even doing setup-hosts ..14:52
joker_admin0 yes14:52
joker_can you check again cloudnull. ı updated it14:53
cloudnulljoker_:  the failed i see are ignored14:53
*** mgoddard has joined #openstack-ansible14:53
admin0but your case is a bit diff14:53
admin0this file is incomplete ?14:53
cloudnullnevermind i see it in the update14:53
joker_cloudnull : no that's about pip version. it fixed it automaticallt. I just updated it. please check again14:54
*** pjm6 has quit IRC14:54
*** mgoddard_ has joined #openstack-ansible14:55
joker_I have an emergency, I will be here in 30 minutes. sorry.14:55
*** mgoddard has quit IRC14:55
*** phalmos has joined #openstack-ansible14:55
cloudnullnp14:56
*** mgoddard__ has joined #openstack-ansible14:57
*** joker__ has joined #openstack-ansible14:57
*** mgoddard_ has quit IRC14:57
*** mgoddard__ has left #openstack-ansible14:58
admin0playbooks fails at: abbitmq_server | Enable queue mirroring15:01
*** pjm6_ is now known as pjm615:01
admin0i redid the steps removing facts . runnig playbook again15:02
admin0same output15:02
*** joker__ has quit IRC15:04
*** karimb has quit IRC15:04
*** joker__ has joined #openstack-ansible15:04
admin0https://gist.github.com/a1git/ac589606f422c4385beb32ad4912d29f  — that is the error i get15:04
*** cloudtrainme has quit IRC15:06
openstackgerritMerged openstack/openstack-ansible: make hostname,network and ip-address on all examples consistent  https://review.openstack.org/30342715:07
*** cloudtrainme has joined #openstack-ansible15:08
*** spotz_zzz is now known as spotz15:08
*** aludwar has quit IRC15:10
*** weezS has joined #openstack-ansible15:10
*** Mudpuppy has joined #openstack-ansible15:13
cloudnullodyssey4me: bug triage ?15:13
*** aludwar has joined #openstack-ansible15:13
*** Mudpuppy has quit IRC15:14
*** Mudpuppy has joined #openstack-ansible15:14
odyssey4mebug triage happens in 45 mins :)15:16
odyssey4meadmin0 it looks like your rabbitmq cluster is broken - fix that up, or shut them all down, or delete the containers15:17
* cloudnull hates time when it changes15:17
odyssey4menote that the log tells you what to try15:17
matttcloudnull: the changing meeting time is seriously annoying :(15:19
cloudnull mattt +115:19
*** saneax is now known as saneax_AFK15:19
cloudnullthe world should just run on UTC15:20
cloudnulltime zones are shit15:20
*** phalmos has quit IRC15:20
spotz+1 It's taken the WoO group a month to even semi get it right and we still ended up with people getting it wrong15:21
palendaemattt: The meeting time didn't change, we did :V15:21
matttpalendae: heh yeah15:22
* palendae liked it when his state ignored DST15:23
admin0yes . did that and moved on :D15:23
matttpalendae: i suppose all projects schedule meetings in UTC?15:23
palendaemattt: Yep15:23
palendaeSupposed to, anyway15:23
evrardjpcloudnull I agree15:27
*** phalmos has joined #openstack-ansible15:28
joker_hi cloudnull , did you find something?15:29
admin0cloudnull:  the setup scripts are running .. i will do a good test this evening and then put in the comments15:30
* admin0 heading out for 2 hours now15:30
*** admin0 has quit IRC15:31
*** karimb has joined #openstack-ansible15:31
*** ssl_ has joined #openstack-ansible15:33
ssl_getting the following error while installing aio:15:34
ssl_msg: fatal: unable to access 'https://git.openstack.org/openstack/tempest/': gnutls_handshake() failed: A TLS packet with unexpected length was received.15:34
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Changed for lxc-host setup/build for multi-distro  https://review.openstack.org/30785615:35
*** weshay has quit IRC15:36
cloudnulljoker_: no i've not15:36
odyssey4mejoker_ 'setuptools pip wheel failed with error code 1' what version of pip/setuptools/wheel are you using?15:36
joker_pip 7.1.2  but I downgrade it to install containers15:38
joker_during installation it upgrades pip to 8.1.115:38
odyssey4mejoker_ yeah, you can't downgrade the pip version15:39
odyssey4meyou must use the version that's pinned15:39
odyssey4mejoker_ try re-running the 'repo-install' playbook on its own and verify that it comepletes?15:40
joker_but It causes another problem without downgrading it. at the lxc_container-create step15:40
joker_ok I am running it again15:40
odyssey4mejoker_ then we need to isolate that problem and resolve it15:41
joker_I have found this bugs, and they suggest a quick fix which is downgrading pip   https://bugs.launchpad.net/openstack-ansible/+bug/15359915:41
openstackLaunchpad bug 153599 in xserver-xorg-video-ati (Ubuntu) "blank screen from Xserver - eMac G4 1.25GHz ppc " [High,Fix released]15:41
odyssey4mejoker_ are you going through an evaluation process? if this is a new evaluation then I would recommend testing with the head of stable/mitaka instead of liberty at this stage15:42
odyssey4mejoker_ I don't see what that bug has to do with a minimal ubuntu install15:42
odyssey4meor pip for that matter15:42
stevelleI'm +1 on moving to fixed UTC-based schedule on triage.  mattt for triage dictator for life15:44
*** eil397 has joined #openstack-ansible15:45
joker_odyssey4me sorry this solution https://bugs.launchpad.net/openstack-ansible/+bug/153599815:46
openstackLaunchpad bug 1535998 in openstack-ansible "unable to upgrade apt installed requests with pip 8.0.0" [Undecided,Fix released]15:46
odyssey4mejoker_ that situation has been resolved long ago, as is quite clearly noted in the bug status15:46
joker_odyssey4me : I know but without that quick fix I am getting this error https://gist.github.com/celikmustafa89/4c6600682d5c7f72898f5229409c72f915:48
odyssey4mejoker_ and my previous responses asking for more information have not yet been replied to15:48
odyssey4mejoker_ I asked you to provide a full verbose play output, and I asked you to try going into the host in question and doing the pip install manually with verbose output and to post the output15:49
palendaestevelle: I thought they were UTC based?15:50
odyssey4meI also asked you to post that info into a bug report so that we could help you go through a triage process as it seems that you're not always online in IRC15:51
palendaeIt's just that DST moves *us*15:51
*** mikelk has quit IRC15:52
joker_odyssey4me : ı passed that step by downgrading the pip, and to get what you want is starting all installation again. next time I will post it to you. now I am running repo-install.yml after that  ı will try it again15:53
stevellepalendae: DST doesn't mess us up, it's standard time that screws things.  We should stay on DST :P15:55
palendaestevelle: I think it's the shift ;)15:55
odyssey4mejoker_ hopefully repo-install will rebuild the packages properly with the right pip version15:55
palendaePick one, don't change!15:55
stevelleI pick DST15:55
joker_odyssey4me : hopefully it is still running15:57
*** jmccrory_ has joined #openstack-ansible15:57
*** ssl_ has quit IRC15:59
joker_odyssey4me : it failed again here is the output https://gist.github.com/celikmustafa89/3769aa33d00ca447c7f99d95f3c70e9816:00
joker_odyssey4me : I ran the command on related container and share the output under the gist as comment https://gist.github.com/celikmustafa89/3769aa33d00ca447c7f99d95f3c70e9816:01
*** iceyao has quit IRC16:02
odyssey4mejoker_ hmm, can you add --verbose to the pip install attempt ?16:03
spotzok cloudnull now we're late16:04
odyssey4mebug triage here cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino, ametts, v1k0d3n,16:04
odyssey4me severion, bgmccollum16:04
odyssey4meone new bug: https://bugs.launchpad.net/openstack-ansible/+bug/147229516:04
openstackLaunchpad bug 1472295 in python-glanceclient "Cinder and glance client have endpoint selection issues" [Undecided,New]16:04
joker_odyssey4me ı added it as comment under gist16:04
prometheanfirewoo16:05
joker_odyssey4me is that what u want?16:05
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Fix container hostname for RFC 1034/1035  https://review.openstack.org/30679416:05
cloudnullo/16:05
spotz\o/16:06
joker_odyssey4me I have to catch the bus :/ u need anything else?16:06
rromans.16:06
odyssey4mejoker_ we have a bug triage meeting now, I'll look again later16:07
*** asettle has joined #openstack-ansible16:07
joker_odyssey4me : ok, thank you16:07
cloudnullBjoernT: that looks like its fixed?16:08
cloudnulllooking at the multi-region change for glance client16:08
*** busterswt has joined #openstack-ansible16:10
evrardjpcloudnull would the big ssl change impact this?16:10
cloudnullit would show you if you had a client issue16:11
cloudnullthe clients and services are all supposed to talk over the internalURL16:11
cloudnulland if the client is ignoring that instruction because its broken16:11
cloudnullitll be trying to talk over public16:11
cloudnullwhich will have ssl using a selfsigned cert16:12
*** asettle has quit IRC16:12
cloudnullcausing test and service breakage16:12
cloudnullevrardjp: so in the gate we'd be able to find this issue a lot sooner.16:12
evrardjpso what's the importance?16:14
*** cfarquhar has quit IRC16:14
evrardjpodyssey4me is busy :p16:14
*** sdake has joined #openstack-ansible16:14
cloudnullmedium / low ?16:15
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add coverage reporting to inventory testing  https://review.openstack.org/30790616:15
odyssey4meso I don't think we can do much about this except track it16:16
evrardjpyup16:16
evrardjpit seems quite low for us16:16
odyssey4methis is not directly related to openstack-ansible, it's a glance and client client issue16:16
stevelleinvalid then?16:17
odyssey4meyeah, I'm inclined to mark it invalid - it's very possible that the openstackclient resolves this anyway16:17
odyssey4meI don't see why the service CLI's should be fixing this when they're meant to be deprecating their CLI's16:18
evrardjptrue16:18
odyssey4methe other items in https://bugs.launchpad.net/openstack-ansible/+bugs?search=Search&field.status=New are waiting for validation16:19
odyssey4meis there anything there that anyone has an update on?16:19
*** cfarquhar has joined #openstack-ansible16:19
*** cfarquhar has quit IRC16:19
*** cfarquhar has joined #openstack-ansible16:19
stevelleI still don't like the workaround for 1557682 :)16:20
odyssey4mestevelle yeah, and cloudnull hasn't done the typey typey :)16:21
cloudnullwhats that ?16:21
odyssey4mehe keeps seeing squirrels16:21
odyssey4mehttps://bugs.launchpad.net/openstack-ansible/+bug/155768216:21
openstackLaunchpad bug 1557682 in openstack-ansible "repo_build cannot refer to variables in Creating OSA requirement wheels " [Wishlist,New] - Assigned to Kevin Carter (kevin-carter)16:21
stevelleit's wishlist, just gave me more grief in getting the role to test convergence16:21
cloudnulloh i had forgotten about that one.16:22
stevelleits not any higher priority;16:23
cloudnullah.16:23
*** Mudpuppy has quit IRC16:23
cloudnullit looks like it needs to be post processed by a jinja template16:23
*** phalmos has quit IRC16:23
stevelleyeah, that's all it would take16:23
*** jayc has quit IRC16:23
cloudnullbah. that might be hard.16:24
stevelleI'm busy shaving other yaks right now though so havn't scratched that itch16:24
cloudnullbecause its jinja rendering the list16:24
cloudnullwhich needs jinja to render the jinja16:24
evrardjpI already reached that issue but din't solve that, so I'd be happy to see it fixed for me to learn16:25
odyssey4meluckily we have a jinja ninja :p16:25
*** sdake_ has joined #openstack-ansible16:25
cloudnulllol16:26
evrardjpfor this line, maybe having everything in jinja would be fine16:26
odyssey4methat issue was filed before the repo build process was re-done (again)16:26
cloudnullbah. this is fugly.16:26
evrardjpor would it, jinja ninja?16:26
odyssey4meis it still a current issue stevelle ?16:26
* cloudnull going to take a hard look at that today16:27
stevelleodyssey4me: I reverified it last week16:27
*** joker__ has quit IRC16:27
stevelleor to be honest, I stubbed my toe again on it because I forgot16:27
evrardjpcloudnull, you are not allowed to use filters16:27
evrardjpjust for the fun16:27
* cloudnull goes to write a module16:27
odyssey4meok cool, then I guess that means that this should be solved as it may come up as a need for other things16:28
palendaecloudnull: write it in go16:28
odyssey4mepalendae don't tempt him16:28
cloudnullpalendae: obviously16:28
*** Mudpuppy has joined #openstack-ansible16:28
palendaeodyssey4me: If I was tempting I'd tell him to write it in swift ;)16:28
cloudnullstatically compiled, for speed16:28
evrardjprust?16:29
stevelleor for a challenge, write it only using the keys on the right half of the keyboard16:29
odyssey4meah cloudnull for speed nothing beats ASM16:29
evrardjplol16:29
cloudnullnow thats just crazy talk16:29
*** phalmos has joined #openstack-ansible16:29
*** karimb has quit IRC16:29
cloudnullwe're trying to have a serious discussion ...16:29
cloudnull:p16:29
odyssey4mebe sure to cater for x86, amd64, ppc and ARM of course16:29
*** sdake has quit IRC16:29
evrardjpwe are talking about the ninja... sure it's real?16:29
cloudnullodyssey4me: cant forget mips16:31
odyssey4meah, of course - because everyone uses mips16:31
cloudnullobviously16:33
cloudnullthe future !16:33
pjm6I remember using mips when learning Assembly xD16:33
evrardjpthat's what I heard about public transportation with horses16:33
evrardjpthe future!16:33
stevellethis seems relevant http://www.realultimatepower.net/index4.htm16:33
evrardjp:D classic16:34
spotzDon't pick on horses!:)16:35
odyssey4meand apparently, just for funsies, mips has warrior-class processors16:35
odyssey4mehttps://imgtec.com/mips/warrior/i-class-i6400-multiprocessor-core/16:35
eil397it would be cool to use energy-aware technologies : - ) especially for automation16:38
LiftedKiltwhen running the setup-hosts.yml playbook, I get "msg: Failed to lock apt for exclusive operation" errors and then it fails out seemingly randomly - any ideas?16:39
BjoernTcloudnull: in regards to https://review.openstack.org/#/c/306794/16:39
odyssey4meLiftedKilt do you have anything else that\s using apt at the same time on the same hosts?16:39
LiftedKiltodyssey4me: I shouldn't - they aren't doing anything else16:40
odyssey4meLiftedKilt eg are you running the playbook multiple times through multiple shells against the same hosts16:40
cloudnullLiftedKilt: ive also seen that issue when your inventory has the same host listed (ip address) with a different name16:40
odyssey4meheh, that would do it16:40
cloudnullansible things they're different hosts16:40
LiftedKiltcloudnull: that sounds probable16:40
cloudnullBjoernT: yes?16:40
andymccr+1 cloudnull, done that many times :D16:40
odyssey4meoh dear16:40
* odyssey4me sends LiftedKilt to the sinbin16:41
LiftedKiltI used the same three nodes for all the infra roles16:41
cloudnullme too16:41
odyssey4meLiftedKilt as long as they all use the same name in the inventory, that's fine16:41
cloudnullits fine to reuse the same nodes over and over again16:41
cloudnulljust make sure they have the same name16:41
odyssey4methe name-ip must match everywhere in the inventory16:41
cloudnull++ ^16:41
odyssey4mein fact, perhaps raddaoui should add a check for multiple hosts with different IP's :)16:42
LiftedKiltwhere does the inventory live? I assumed it was dynamically generated based on the openstack_user_config.yml16:42
odyssey4meor maybe that'll be up palendae's alley :)16:42
odyssey4meLiftedKilt it is - you can inspect it in the json file in /etc/openstack_deploy/16:42
palendaeLiftedKilt: It is - it lives in /etc/openstack_deploy/openstack_inventory.json16:43
palendaeThat file is basically env.d + conf + dynamic_inventory.py16:43
palendaeodyssey4me: Totally open to adding tests, yeah16:43
LiftedKiltgotcha - should I edit it statically?16:43
palendaeA list here wouldn't be remiss: https://etherpad.openstack.org/p/openstack-ansible-newton-dynamic-inventory16:43
LiftedKiltor do I need to rework the openstack_user_config16:44
palendaeodyssey4me: I'm not grokking your statement "add a check for multiple hosts with different IP's"16:44
palendaeOh16:44
palendaeGot it16:44
*** Oku_OS is now known as Oku_OS-away16:45
*** fawadkhaliq has joined #openstack-ansible16:45
odyssey4mepalendae :) it would seem that a run-time check would be more appropriate to catch this issue16:45
palendaeRight16:45
palendaeRuntime check + a test16:45
palendaetest(s)16:45
evrardjpI'm off!16:45
*** cfarquhar has quit IRC16:45
odyssey4meof course16:45
eil397 https://bugs.launchpad.net/openstack-ansible/+bug/1442823  "Tempest failures after run_ssh = True" Anyone know status for it ?  I would like to check current state with tempest and different config options for tempest.16:47
openstackLaunchpad bug 1442823 in openstack-ansible trunk "Tempest failures after run_ssh = True" [Medium,Incomplete] - Assigned to Tom Cameron (drdabbles)16:47
*** cfarquhar has joined #openstack-ansible16:47
*** cfarquhar has quit IRC16:47
*** cfarquhar has joined #openstack-ansible16:47
odyssey4meLiftedKilt you could inspect the json file to identify the cause, but it'll be easier to start with verifying that you don't have a mistake in the user_config and conf.d files16:47
odyssey4meLiftedKilt you can also use the inventory-manage script in the scripts directory to list all known hosts from the inventory16:48
odyssey4meeil397 that bug is old an invalid, ad the status says :)16:48
odyssey4me*as16:48
LiftedKiltodyssey4me: Looking back through the config again I see what you mean about the multiple names. I'm re-writing it16:48
LiftedKiltodyssey4me: cloudnull thanks for the heads up16:48
*** weezS has quit IRC16:48
eil397odessey4me: thanks16:49
odyssey4meeil397 we test every commit in the integrated build using tempest, so it works16:49
eil397odessey4me: yes. I know. "test_list_summary='scenario heat_api cinder_backup ceilometer_api (25 tests)'"16:50
eil397odessey4me: last time when I was working with tempest and osa on mulihost deployment it was not working for me with my configuration because of floating_ips ( by default it was trying to use floating_ips to reach instances)16:51
odyssey4meeil397 tempest has plenty of horrible assumptions made as it's made for the development community, not for real deployments16:53
odyssey4meeil397 you can always just exluce the test that attempts the connection via the floating IP for your purposes16:53
eil397odysset4me: agree. is there anything that can be used for QA and healthcheck automated testing ?16:54
eil397odessey4me: I would like to use some basic test scenarios , and I think such scenario like "launch instance and terminate" should work without testing floating_ips16:55
odyssey4meeil397 that's a topic that could take days - every environment has different opinions and it may be best to ask on the operator mailing list to see what people are doing16:57
odyssey4mebut tempest is very likely to be a bad choice for that sort of thing16:57
odyssey4mepersonally I'd probably rather have a set of nagios (or similar) checks that do some basic actions in a test client which provide enough coverage to identify problems and give performance stats on a continuous basis16:58
eil397odyssey4me: do you know something better ? except monitoring tools. I'm sure operators usually relay on monitoring tools16:59
odyssey4metempest would raid your API and probably overwhelm your environment if you ran it often16:59
eil397odyssey4me: yes. I agree, of course QA and monitoring tools like nagios are different things.17:01
eil397odyssey4me: but if I17:02
eil397odessye4me: if I'm checking logs of nova-api, it should like simillar  : - )17:03
*** zhangjn has quit IRC17:06
*** b3rnard0 is now known as b3rnard0_away17:07
*** zhangjn has joined #openstack-ansible17:09
*** javeriak has joined #openstack-ansible17:10
*** kiranv has joined #openstack-ansible17:12
raddaouiodyssey4me, I am trying to catch in here, you mean add a check for hosts with different hostnames and same IPs in the user config17:12
openstackgerritAla Raddaoui proposed openstack/openstack-ansible: modify how services are configured in haproxy  https://review.openstack.org/30134317:14
palendaeraddaoui: Yeah, so if you define (for example) aio1 with x.x.x.100 and x.x.x.101, the one seen last in the config will win17:15
palendaeActually I'm talking about a slightly different thing :)17:15
palendaeBut working on a patchset for mine which I will upload after lunch17:16
palendaeBut yeah, having both would be good17:16
*** eil397 has left #openstack-ansible17:16
raddaouiI was thinking haproxy x.x.x.100 and then keystone x.x.x.100 different hostnames but same Ips17:17
raddaouiexample17:17
palendaeraddaoui: Yeah, that may have been the original example17:17
palendaeI'm gonna do lunch, but I have code for mine, will need to write a test17:19
raddaoui okay17:20
palendaeraddaoui: Quickly before I leave, If you have thoughts on https://etherpad.openstack.org/p/openstack-ansible-newton-dynamic-inventory that'd be awesome17:20
automagicallyraddaoui: Would definitely appreciate your thoughts there17:21
palendaeTrying to add content for discussion before we actually meet17:21
odyssey4meraddaoui yes, one host with two IP's in the inventory - or two hosts with the same IP... either is bad17:21
palendaeAnd automagically/raddaoui I added https://review.openstack.org/#/c/307906/ to that pad, but reviews appreciated17:21
automagicallypalendae: Awesome! Will review17:21
palendaeodyssey4me: So 1 host can't have 2 IPs I just found - last one read in will win. But I found the section and have an error17:22
palendaeJust need to write a test/submit17:22
odyssey4mecool, thanks palendae17:22
odyssey4meraddaoui if you like you can work out the other one17:22
palendaeI started down the path of that first one, but got lead to this :p17:22
palendaeBut also feel free to tackle that too17:23
raddaouisure odyssey4me. Ill do that17:23
palendaeMy main focus for the next ~month I think will be to increase test coverage17:23
palendaeI'd like to see us get to some reasonable level of coverage before we do heavy duty refactoring, personall17:23
*** olivier427 has joined #openstack-ansible17:24
automagicallyAlways a safer approach17:24
raddaouiand palendae I will look at that etherpad and see what I can add17:25
odyssey4medolphm dstanek lbragstad in doing some tests we've discovered that for some reason keystone is redirecting queries from port 5000 to port 35357... setting public_endpoint makes it not do that, but it seems weird that it would do that by default17:25
automagicallyNow that we are measuring coverage, will be nice to get an idea of how much of a safety net we’ve got17:25
palendaeautomagically: Yeah, and given we have people relying on this now, I'm far more comfortable building up a nice safety net before going nuts17:25
palendaeYeah, my runs on my laptop showed 10% coverage currently. I think getting up to 75-80% would be a reasonable place to turn on enforcement in the gate17:26
palendaeBut for now, we can just report17:26
palendaeAlright, lunch17:28
palendaeFor real17:28
odyssey4mestevelle mattt cloudnull FYI, we now have higher timeouts on the role jobs: https://review.openstack.org/30657317:30
evrardjpnova testing just got easier17:31
*** weshay has joined #openstack-ansible17:32
stevelleodyssey4me: #winning17:33
stevellepabelanger: thx for ^17:34
*** javeriak_ has joined #openstack-ansible17:41
*** olivier427 has quit IRC17:42
*** javeriak has quit IRC17:43
*** javeria__ has joined #openstack-ansible17:43
*** electrofelix has quit IRC17:44
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-rsyslog_client: Ansible 2.x - Address deprecation warning of bare variables  https://review.openstack.org/30795017:45
*** javeriak_ has quit IRC17:46
cloudnullodyssey4me:  awesome !17:48
automagicallyodyssey4me and cloudnull - Was there discussion of getting an Ansible 2.x experimental check setup?17:48
automagicallyDidn’t see it mentioned here: https://etherpad.openstack.org/p/openstack-ansible-taking-advantage-ansible217:48
cloudnullno i dont think so17:49
cloudnullbut I'd be +117:49
automagicallyActually, it appears that line 106 does mention it17:49
javeria__hey cloudnull; i think you shared some script of yours a while back that checked for problematic services and tried restarting them?17:49
cloudnullhttps://gist.github.com/cloudnull/d9c9a85bdfeccbbe5b93 <- javeria__17:49
kiranvHello all.. I've been trying to setup an AIO node on a bare metal server with 32G memory and 1TB HDD.. When I set it up for the first time, everything comes up fine.. but, when I make a change to the config and rerun run-playbooks.sh, it always exits out with an error/failure.. can anyone help me understand why this is happenign?17:50
javeria__cloudnull perfect thanks; would this help with an aio thats been restarted? as things seem to be in a bad shape usually then17:50
odyssey4meautomagically I think that I'd like us to get Liberty->Mitaka upgrades done before we get too much of the Ansible 2 work done... otherwise fixes we need won't be so easy to backport17:50
automagicallykiranv: Can you share a gist/paste of the error you are getting?17:51
javeria__no actually there was another one cloudnull ...?17:51
odyssey4mekiranv you shouldn't really run run-playbooks more than once... it's better to run the playbooks themselves directly17:51
odyssey4mealthough run-playbooks is not as bad as it used to be17:52
automagicallyodyssey4me: Well, assuming we keep the 1.9 and 2.x gates running on liberty, we should be fine17:52
kiranvI am trying to set up liberty.. I changed the password for keystone and re ran run-playbooks.. it gives me the following error17:52
kiranvchanged keystone_auth_password in /opt/openstack-ansible/  r failed: Broken pipe\r\ndebug2: Received exit status from master 1\r\n', 'failed': True, 'attempts': 10, 'parsed': False}failed: [aio1_galera_container-0d2ed55b] => (item={'priv': '*.*:USAGE', 'state': 'present', 'password': u'', 'host': 'localhost', 'name': u'monitoring'}) => {"attempts": 10, "failed": true, "item": {"host": "localhost", "name": "monitoring", "pa17:52
cloudnulljaveria__: nothing that i can think of ?17:52
odyssey4mekiranv if you change the password, stuff won't work - the user creation steps for the admin user will not change the password17:52
automagicallyodyssey4me: Hmm, fun. We should definitely document that, if it isn’t documented already17:53
odyssey4mekiranv you have to set the password before you build, or you should change the password through keystone before reconfiguring the services17:53
kiranvhttp://pastebin.com/4cXzPsAB17:53
automagicallyI’ll check if its documented anywhere17:53
javeria__cloudnull okay :(, it was one that went thru services and checked which ones were down; anyway thanks for looking17:53
kiranvIn my previous trial, I made changes to the hosts file and ran run-playbooks.. and it exited with an error as well17:54
odyssey4meautomagically so the trouble is that if we introduce backward incompatible changes into master, then we can't backport them to mitaka - considering that the upgrade work typically finds bugs which will need implementation in both master and mitaka I think we should maintain compatibility across both branches until the upgrade work is complete17:54
odyssey4mekiranv as stated before - you can't make password changes after the env is build by simply editing the secrets... it's more involved17:55
automagicallyI hear what you are saying. It would complicate backport17:55
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: Multi-distro framework for rabbitmq_server role  https://review.openstack.org/28628217:55
odyssey4mekiranv if it's a test env and you change secrets, you're best advised to tear down and rebuild unless you know openstack well enough to understand the effects of the change17:56
automagicallyMy concern is that I’ve seen more Ansible 2.x work patchs come in than Liberty -> Mitaka upgrade work17:56
javeria__also wanted to ask you guys; the slowing down behaviour i was experiencing on our osic cluster would go away for a few hours after running nova playbooks. once it came back, i just ran the nova plays again and things would go back to normal. any idea what was going on? were some buffers getting filled up in the meantime?17:56
kiranvok.. I understand that.. but in my previous trial, I did not make any password changes. I changed the hosts file and re ran run-playbooks.sh .. and it exited out with a similar error17:56
odyssey4meautomagically yeah, but the patches are all compatible right now - so that's ok... we can maintain that... and we'll need someone to pick up the torch to lead the upgrade work17:56
odyssey4methe sooner the better17:56
automagicallyFair point17:57
kiranvcould you point me to any documentation on teardown? I've been trying the commands listed in rebuild-stack section of https://github.com/jolsenatx/openstack-ansible-lxc17:57
odyssey4mekiranv I have no idea where you got that link17:57
kiranvand it is resulting me having to re install host os17:57
odyssey4mekiranv the AIO docs are here: http://docs.openstack.org/developer/openstack-ansible/developer-docs/quickstart-aio.html17:57
odyssey4methe general docs are here: http://docs.openstack.org/developer/openstack-ansible/17:58
kiranvshould I just run the teardown.sh scripts as descrived in http://docs.openstack.org/developer/openstack-ansible/developer-docs/quickstart-aio.html17:59
javeria__odyssey4me btw whats the best way to put an aio back into an operational state after a reboot; i know they arent meant to be rebooted but still?17:59
odyssey4mekiranv the docs describe how to do it17:59
odyssey4mejaveria__ check the AIO docs ;)18:00
odyssey4mejaveria__ http://docs.openstack.org/developer/openstack-ansible/developer-docs/quickstart-aio.html#rebooting-an-aio18:00
javeria__odyssey4me ah okay :)18:00
odyssey4methat query comes in often enough to warrant its own heading :p18:00
kiranvok. thanks.18:00
pabelangerstevelle: np18:01
javeria__hey has anyone ever seen the issue where you cant create a project from horizon, it gives you a danger type error; but it works from cli? i cant seem to see anything in the logs18:03
*** tiagogomes has quit IRC18:03
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: DOC - Adding warning about changing passwords/secrets  https://review.openstack.org/30796118:04
automagicallykiranv: Would appreciate your review on ^18:05
odyssey4mejaveria__ horizon logs are fully muted by default - as I recall you have to do quite a bit of editing of the local_settings to make them show up in the logs18:05
odyssey4methere's a section at the end where you can customise which logs should show18:05
odyssey4methanks automagically - small comment18:07
javeria__odyssey4me yea theres nothing there that would help; okay let me try and figure that out18:07
odyssey4meautomagically maybe a note should be in the AIO docs too?18:07
automagicallyodyssey4me: Could duplicate it there, but I tend to think of the AIO docs as specific to the AIO, whereas everything in the install guide applies to AIO as well as other configs18:07
javeria__also odyssey4me, my question above about the nova plays solving the cluster slowness, ^; any idea what migtve been happening?18:07
odyssey4meautomagically fair enough18:08
odyssey4mejaveria__ I'm not sure if this perhaps has something to do with it? https://review.openstack.org/30723118:09
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: DOC - Adding warning about changing passwords/secrets  https://review.openstack.org/30796118:09
kiranvI think a small comment warning the user not to change the passwords after deploying in the /etc/openstack_deploy/user_secrets file should do it18:09
automagicallyGood call kiranv, I’ll add a comment there as well18:09
javeria__odyssey4me would that only be apparent at scale though? ive seen the same behaviour with smalller installations18:10
*** weezS has joined #openstack-ansible18:10
odyssey4mejaveria__ based on the comment in the commit message, I expect that any long running install would end up with mariadb memory wastage due to dangling connections18:11
odyssey4mebut I don't actually know - I would way prefer to actually put together a decent test proposal to figure out a proper set of settings to scale nicely18:11
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: DOC - Adding warning about changing passwords/secrets  https://review.openstack.org/30796118:11
javeria__odyssey4me it was only a few hours though for the large one; that it would start getting slow18:13
*** kvemuri has joined #openstack-ansible18:18
*** jmccrory_ has quit IRC18:19
*** kvemuri has quit IRC18:22
*** kiranv_ has joined #openstack-ansible18:24
*** kiranv has quit IRC18:24
*** kiranv_ has left #openstack-ansible18:24
*** kiranv_ has joined #openstack-ansible18:24
*** olivier427 has joined #openstack-ansible18:27
kiranv_@automagically is there any way I can deploy a multi region setup with OSA? I found documentation on how to deploy federation.. but is there any way I can have my AIO point to keystone on another server?18:28
odyssey4mekiranv_ yes it's completely possible18:28
automagicallykiranv_: I know that some folks in the community have tried, and its something that my team is actively pursuing. I believe you could set a bunch of keystone vars and do it18:28
odyssey4mekiranv_ we have no docs ready though18:28
odyssey4mebut we have instrumented the ability to point any service at an external DB, and all the service registrations can be done against another keystone - but you'll have to unwind all the vars that have to be set18:29
automagicallykiranv_: Overriding vars in https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L132 - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L154 should get you most of the way there18:29
odyssey4meit's not trivial, and we hope to simplify it in the next cycle or two18:30
odyssey4meautomagically yep, those will be the main ones18:30
automagicallyPerhaps some additional stuff to override in openrc as well18:30
cloudnullkiranv_:  i did a simple multi-region test which can be found here https://github.com/cloudnull/osad-regions18:31
cloudnullthats way out of date18:31
cloudnullbut a good example of how it can be done18:31
automagicallycloudnull: Nice! I need to spend more time reading through your Github repos18:31
cloudnulllots of old crusty BS there. :)18:31
cloudnulli put everything in os-cloud or my github18:32
cloudnullthat way when i get an itch to destroy my laptop i dont lose things18:32
kiranv_thanks for the links.. If I change the keystone config and re run the keystone playbook, that should reset every service to point to the new server? or do I have to do this during the initial setuo?18:32
kiranv_setup*18:32
automagicallyYou’d re-run the non-Keystone playbooks18:33
automagicallyBut, you are probably better off starting fresh18:33
kiranv_ok.. I'll try that18:33
*** pjm6 has quit IRC18:40
*** sdake_ has quit IRC18:41
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-galera_server: Ansible 2.x - Address deprecation warning of bare variables  https://review.openstack.org/30798918:41
*** sdake has joined #openstack-ansible18:48
*** b3rnard0_away is now known as b3rnard018:54
*** admin0 has joined #openstack-ansible18:54
openstackgerritMerged openstack/openstack-ansible: Add option to auto enable from VPNaaS in Horizon  https://review.openstack.org/30543318:54
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-ironic: Ansible 2.x - Address deprecation warning of bare variables  https://review.openstack.org/30799718:56
odyssey4mecores - backport reviews for the mitaka 13.0.1 release: https://review.openstack.org/307998 / https://review.openstack.org/307691 / https://review.openstack.org/307683 / https://review.openstack.org/307681 / https://review.openstack.org/30765918:58
*** fawadkhaliq has quit IRC19:00
*** sigmavirus24 is now known as sigmavirus24_awa19:06
*** ChrisBenson has quit IRC19:12
odyssey4mejmccrory automagically cloudnull d34dh0r53 stevelle mattt hughsaunders andymccr ^19:16
javeria__odyssey4me  i just noticed that the user_variables.yml in the newer liberty tags is all commented out; don't we provide the basic settings that need to be in place?19:17
odyssey4mejaveria__ all required settings are already in role defaults or group_vars19:17
odyssey4merole defaults for defaults, and group_vars for 'glue'19:17
javeria__odyssey4me they werent before?19:17
odyssey4mejaveria__ they were all, but we found a few strays - user_vars as provided was always meant to just be a sample of configs that are commonly set - but it got out of hand19:18
odyssey4meand people got the wrong impression19:18
odyssey4meit became a dumping ground for duplicated settings19:18
LiftedKiltall of the lxc containers are failing to start - they are created, but they sit there and say that19:18
LiftedKiltmsg: The container [ %s ] failed to start. Check to lxc is available and that the container is in a functional state.19:18
LiftedKiltfailed: [controller_1_nova_console_container-e0e6669f -> controller_1] => {"error": "Failed to start container [ controller_1_nova_console_container-e0e6669f ]", "failed": true, "lxc_container": {"init_pid": -1, "interfaces": [], "ips": [], "state": "stopped"}, "rc": 1}19:18
javeria__odyssey4me  oh i see... an installation of mine seems to be in a bad shape, i was wondering if i was missing the configs19:19
odyssey4meLiftedKilt it's likely that one of the config changes that relate to them have broken the start - maybe something like the net configs19:19
LiftedKiltodyssey4me: hmmm - I used the sample openstack_user_config.yml and just tweaked it slightly - http://pastebin.com/BqyZ3swW19:23
odyssey4meLiftedKilt best would be to inspect the startup logs for the containers and see what they're saying19:23
LiftedKiltodyssey4me: good call - "failed to attach 'c9e81e56_eth1' to the bridge 'br-mgmt': No such device19:24
LiftedKilt"19:24
odyssey4meyep, you gotta have the bridges you're using present19:24
LiftedKiltdo I need to manually create the bridges on all the target machines? I know the AIO script does it for you19:25
odyssey4meall hosts will need br-mgmt19:25
odyssey4meLiftedKilt yep, we cover it here: http://docs.openstack.org/developer/openstack-ansible/install-guide/targethosts-network.html19:26
cloudnullLiftedKilt: we create all that on the aio however in prod the assumption is you will need to make them due it being very likely your kick system / internal automation will do most of that for you19:26
cloudnullwe used to have a thing that did it/could do it, but it was miserable and caused more problems than it solved.19:26
LiftedKiltodyssey4me cloudnull: that makes sense - well, off to figure out how to write a playbook for target dpeloyment haha19:27
odyssey4meLiftedKilt yeah, we might revisit that with Ansible 2.x as there's a nifty module for network configs now19:27
cloudnull++19:27
odyssey4mebut at the moment we specifically need the hosts prepped19:28
LiftedKiltodyssey4me: is there an eta for the ansible 2 migration?19:28
cloudnullLiftedKilt:  if you know the device layout and dont mind a template doing things for you19:28
cloudnullyou can do something like this https://github.com/os-cloud/osic-ironic-impl/blob/master/templates/os-refimpl-devices.cfg.j219:28
odyssey4meLiftedKilt also make sure to either set lxc_container_ssh_key or to ensure the lxc hosts have your pub key in the right place - I've added https://review.openstack.org/307732 to make sure there's a hard fail before touching the hosts in the future19:28
cloudnulli've used that with great success19:29
odyssey4meLiftedKilt we'll do it for Newton and no earlier19:29
cloudnullitll ip the nodes all off the last octet of the ssh host address.19:29
odyssey4methis dev cycle is Newton19:29
cloudnullbut like i said its making some fairly strong assumptions about the devices you have19:30
LiftedKiltodyssey4me: I'm using maas for ssh key insertion, and then running an ansible playbook that installs the dependencies and moves the authorized_keys file to the root user on the targets as well19:30
LiftedKiltthanks for the links - that will definitely be helpful19:31
cloudnullLiftedKilt: Bofu2U may have some pointers on MaaS ?19:31
odyssey4meLiftedKilt ah ok, I just thought I'd call it out - note that we expect the is_rsa.pub file on the lxc hosts to push the key into the containers... what you're doing is good but may not be enough19:31
* cloudnull doesnt know much about maas19:31
odyssey4meit'd be really nice to have a blog post about using MaaS to deploy OSA :)19:32
* LiftedKilt doesn't know much about maas either19:32
*** admin0 has quit IRC19:32
openstackgerritHector I Gonzalez Mendoza proposed openstack/openstack-ansible-os_barbican: Updated role using the Multi-Distro framework  https://review.openstack.org/30420919:32
cloudnullizaakk: ++19:32
odyssey4mecloudnull izaakk FYI, don't forget that you can add a 'check experimental' comment to any role to get Ubuntu Xenial and CentOS7 jobs to execute19:33
odyssey4meto any review for a role I mean19:33
*** admin0 has joined #openstack-ansible19:35
*** admin0 has quit IRC19:36
*** phiche has joined #openstack-ansible19:40
odyssey4mejaveria__ cloudnull FYI - a question was posed in https://review.openstack.org/29976119:41
*** admin0 has joined #openstack-ansible19:42
izaakkodyssey4me: will do19:42
cloudnullthats a good question odyssey4me evrardjp,19:42
cloudnullthis was like the other task19:43
cloudnullthat when was never processed . so does it count as removing it19:43
cloudnullby adding it we're changing the task19:43
admin0cloudnull: setup finished .. horizon does not work19:44
admin0503 service unavailable19:44
cloudnulladmin0: yup did you pull in the deps within that task ?19:44
admin0hmm .. how :D19:44
cloudnullw/out the RFC dependencies horizon wont work19:44
cloudnullhttps://review.openstack.org/#/c/305912/19:45
admin0i just did a cherry pick19:45
cloudnullthe external dependencies https://review.openstack.org/#/c/277199/19:45
odyssey4meadmin0 yep, the roles need patches too - it's a pain right now but we'll make that easier soon19:45
cloudnullin the commit message there are several Depends-On entries19:45
admin0so i need ot cherry pick that also ?19:45
cloudnullkinda19:46
admin0:D19:46
cloudnullyou have to have the changes in the roles19:46
cloudnullthe roles are located in /etc/ansible/roles19:46
odyssey4mecloudnull did you see evrardjp's feedback on the patch - we hit a pre-existing issue, but one that we actually need to figure out as it's important... it might be a keystone bug19:46
*** raddaoui has quit IRC19:47
*** weezS has quit IRC19:47
cloudnullodyssey4me:  which one is that?19:47
cloudnull...keystone bug ?19:48
odyssey4mecloudnull https://review.openstack.org/277199 see the last review comment19:48
cloudnullah yea19:48
odyssey4mefor some reason external queries get redirected to the admin port19:48
odyssey4meI've seen this before, but in reviewing various bugs and online reference apparently this is supposed to have been fixed19:49
odyssey4meso maybe we're configuring something wrong somewhere, or maybe keystone still has a bug19:49
odyssey4meforce setting keystone_public_endpoint is a workaround at best19:50
admin0i do not want to make mistakes :D shall i just cherry pick that role ?19:57
*** gouthamr has joined #openstack-ansible19:59
*** gouthamr has left #openstack-ansible19:59
*** elo has joined #openstack-ansible20:00
*** eric_lopez has quit IRC20:00
odyssey4meok, I'm out for the night - cheerio all20:02
palendaeNight20:02
*** weezS has joined #openstack-ansible20:05
*** sigmavirus24_awa is now known as sigmavirus2420:06
spotznight odyssey4me20:09
*** fawadkhaliq has joined #openstack-ansible20:14
*** johnmilton has quit IRC20:16
cloudnullnight odyssey4me20:16
*** fawadkhaliq has quit IRC20:22
*** fawadkhaliq has joined #openstack-ansible20:22
*** rohanp_ has joined #openstack-ansible20:23
*** javeria__ has quit IRC20:28
*** weezS has quit IRC20:29
*** jayc_ has joined #openstack-ansible20:35
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Changed for lxc-host setup/build for multi-distro  https://review.openstack.org/30785620:58
*** chhavi has quit IRC21:00
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-lxc_container_create: Ansible 2.x - Address deprecation warning of bare variables  https://review.openstack.org/30803421:05
*** psilvad has quit IRC21:05
openstackgerritBjoern Teipel proposed openstack/openstack-ansible-os_swift: Remove XFS filesystem from the daily mlocate cron job  https://review.openstack.org/30803621:06
*** thorst_ has quit IRC21:08
*** admin0 has quit IRC21:09
*** BjoernT has quit IRC21:12
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-memcached_server: Ansible 2.x - Address deprecation warning of bare variables  https://review.openstack.org/30804121:13
cloudnullautomagically: ++ awesome!21:16
cloudnullhave you been giving 2.1 a spin ?21:16
*** woodard_ has joined #openstack-ansible21:16
*** retreved has quit IRC21:17
*** woodard has quit IRC21:20
*** woodard_ has quit IRC21:21
*** fawadkhaliq has quit IRC21:23
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services  https://review.openstack.org/27719921:23
*** fawadkhaliq has joined #openstack-ansible21:24
spotzwaiting for jenkins to verify but got reviews pulled up21:25
*** phiche has quit IRC21:26
cloudnullthanks spotz21:26
cloudnullif you have a moment would you mind giving https://review.openstack.org/#/c/305586/ a go?21:26
spotzcloudnull you're welcome feel guilty was busy the last few days21:26
spotzcloudnull got it21:26
cloudnullno guilt life happens21:27
cloudnullthanks again :)21:27
*** thorst_ has joined #openstack-ansible21:28
*** fawadkhaliq has quit IRC21:28
*** Mudpuppy has quit IRC21:30
*** Mudpuppy_ has joined #openstack-ansible21:30
*** sdake_ has joined #openstack-ansible21:30
*** thorst_ has quit IRC21:31
*** thorst_ has joined #openstack-ansible21:31
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Refactor main inventory function for testability  https://review.openstack.org/30804721:31
*** phiche has joined #openstack-ansible21:32
*** sdake has quit IRC21:33
*** admin0 has joined #openstack-ansible21:34
*** cloudtrainme has quit IRC21:51
*** eric_lopez has joined #openstack-ansible21:51
*** busterswt has quit IRC21:52
*** elo has quit IRC21:54
*** thorst_ has quit IRC21:56
*** ametts has quit IRC21:57
*** johnmilton has joined #openstack-ansible21:58
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Check for two IP addresses assigned to same host  https://review.openstack.org/30805222:01
*** sigmavirus24 is now known as sigmavirus24_awa22:02
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Refactor main inventory function for testability  https://review.openstack.org/30804722:03
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Check for two IP addresses assigned to same host  https://review.openstack.org/30805222:03
*** Mudpuppy_ has quit IRC22:03
*** phalmos has quit IRC22:04
*** spotz is now known as spotz_zzz22:12
*** fawadkhaliq has joined #openstack-ansible22:14
*** KLevenstein has quit IRC22:18
*** intr1nsic has quit IRC22:20
*** Brew has quit IRC22:21
*** furlongm has joined #openstack-ansible22:21
*** galstrom is now known as galstrom_zzz22:24
*** intr1nsic has joined #openstack-ansible22:26
*** sdake_ is now known as sake22:26
*** thorst has joined #openstack-ansible22:30
*** klamath has quit IRC22:34
*** asettle has joined #openstack-ansible22:39
*** phiche has quit IRC22:45
*** persia has quit IRC22:46
*** gfa_ has quit IRC22:47
*** admin0 has quit IRC22:50
*** admin0 has joined #openstack-ansible22:52
*** johnmilton has quit IRC22:54
*** thorst has quit IRC22:58
*** admin0 has quit IRC22:58
*** admin0 has joined #openstack-ansible23:00
*** saneax_AFK is now known as saneax23:00
*** gfa_ has joined #openstack-ansible23:04
*** persia has joined #openstack-ansible23:04
*** admin0 has quit IRC23:16
*** johnmilton has joined #openstack-ansible23:18
*** fawadkhaliq has quit IRC23:19
*** fawadkhaliq has joined #openstack-ansible23:19
*** sake is now known as sdake23:22
*** fawadkhaliq has quit IRC23:24
*** asettle has quit IRC23:26
*** asettle has joined #openstack-ansible23:28
*** elo has joined #openstack-ansible23:39
*** eric_lopez has quit IRC23:39
*** jayc_ has quit IRC23:48
*** jthorne has quit IRC23:52
*** olivier427 has quit IRC23:57
*** thorst has joined #openstack-ansible23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!