| *** asettle has quit IRC | 00:01 | |
| *** sacharya has quit IRC | 00:09 | |
| *** woodard has joined #openstack-ansible | 00:14 | |
| lbragstad | odyssey4me o/ | 00:15 |
|---|---|---|
| *** markvoelker has joined #openstack-ansible | 00:27 | |
| *** catintheroof has quit IRC | 00:27 | |
| *** saneax is now known as saneax_AFK | 00:28 | |
| *** mummer has quit IRC | 00:28 | |
| *** psilvad has joined #openstack-ansible | 00:29 | |
| *** sdake has quit IRC | 00:33 | |
| *** markvoelker has quit IRC | 00:34 | |
| *** raddaoui has quit IRC | 00:37 | |
| *** johnmilton has quit IRC | 00:52 | |
| *** openstackgerrit has quit IRC | 01:02 | |
| *** openstackgerrit has joined #openstack-ansible | 01:03 | |
| *** iceyao has joined #openstack-ansible | 01:05 | |
| *** sacharya has joined #openstack-ansible | 01:10 | |
| *** sacharya has quit IRC | 01:15 | |
| *** daneyon_ has quit IRC | 01:24 | |
| *** jthorne has quit IRC | 01:25 | |
| *** markvoelker has joined #openstack-ansible | 01:29 | |
| *** ErwanJ has quit IRC | 01:32 | |
| *** markvoelker has quit IRC | 01:34 | |
| *** iceyao has quit IRC | 01:38 | |
| *** iceyao has joined #openstack-ansible | 01:39 | |
| *** saneax_AFK is now known as saneax | 01:43 | |
| *** eric_lopez has quit IRC | 01:45 | |
| *** mummer has joined #openstack-ansible | 01:51 | |
| *** thorst_ has joined #openstack-ansible | 01:56 | |
| *** thorst_ has quit IRC | 02:01 | |
| *** eric_lopez has joined #openstack-ansible | 02:05 | |
| *** thorst_ has joined #openstack-ansible | 02:05 | |
| *** bryan_att has quit IRC | 02:13 | |
| *** markvoelker has joined #openstack-ansible | 02:30 | |
| *** markvoelker has quit IRC | 02:34 | |
| *** eric_lopez has quit IRC | 02:45 | |
| *** woodard has quit IRC | 02:58 | |
| *** woodard has joined #openstack-ansible | 02:59 | |
| *** eric_lopez has joined #openstack-ansible | 02:59 | |
| *** phalmos has joined #openstack-ansible | 03:01 | |
| *** phalmos_ has joined #openstack-ansible | 03:02 | |
| *** phalmos has quit IRC | 03:06 | |
| *** sacharya has joined #openstack-ansible | 03:12 | |
| *** woodard has quit IRC | 03:14 | |
| *** woodard has joined #openstack-ansible | 03:15 | |
| *** sacharya has quit IRC | 03:16 | |
| *** woodard has quit IRC | 03:19 | |
| *** kiranv_ has joined #openstack-ansible | 03:20 | |
| *** saneax is now known as saneax_AFK | 03:22 | |
| *** sacharya has joined #openstack-ansible | 03:28 | |
| *** markvoelker has joined #openstack-ansible | 03:31 | |
| *** iceyao has quit IRC | 03:31 | |
| *** markvoelker has quit IRC | 03:35 | |
| *** eric_lopez has quit IRC | 03:52 | |
| *** jamielennox is now known as jamielennox|away | 03:58 | |
| *** asettle has joined #openstack-ansible | 04:01 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Enable ha router support in Horizon https://review.openstack.org/313031 | 04:02 |
| *** jamielennox|away is now known as jamielennox | 04:03 | |
| *** phalmos_ has quit IRC | 04:05 | |
| *** asettle has quit IRC | 04:07 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Stop configuring neutron to enforce DHCP MTU option https://review.openstack.org/311260 | 04:11 |
| openstackgerrit | Merged openstack/openstack-ansible-os_swift: Refactor os_swift testing https://review.openstack.org/313581 | 04:12 |
| *** eric_lopez has joined #openstack-ansible | 04:15 | |
| *** woodard has joined #openstack-ansible | 04:15 | |
| *** thorst__ has joined #openstack-ansible | 04:19 | |
| *** thorst_ has quit IRC | 04:21 | |
| *** woodard has quit IRC | 04:21 | |
| *** markvoelker has joined #openstack-ansible | 04:31 | |
| *** mummer has quit IRC | 04:33 | |
| *** mummer has joined #openstack-ansible | 04:34 | |
| *** mummer has quit IRC | 04:35 | |
| *** markvoelker has quit IRC | 04:37 | |
| *** thorst__ has quit IRC | 04:50 | |
| *** thorst_ has joined #openstack-ansible | 04:51 | |
| *** eric_lopez has quit IRC | 04:52 | |
| *** thorst__ has joined #openstack-ansible | 04:56 | |
| *** thorst___ has joined #openstack-ansible | 04:59 | |
| *** thorst_ has quit IRC | 04:59 | |
| *** thorst_ has joined #openstack-ansible | 05:00 | |
| *** thorst__ has quit IRC | 05:01 | |
| *** thorst__ has joined #openstack-ansible | 05:02 | |
| *** thors____ has joined #openstack-ansible | 05:03 | |
| *** thorst___ has quit IRC | 05:03 | |
| *** thorst_ has quit IRC | 05:05 | |
| *** sdake has joined #openstack-ansible | 05:05 | |
| *** thorst__ has quit IRC | 05:07 | |
| *** thors____ has quit IRC | 05:07 | |
| *** thorst_ has joined #openstack-ansible | 05:08 | |
| *** hybridpollo has quit IRC | 05:09 | |
| *** thorst__ has joined #openstack-ansible | 05:09 | |
| *** thorst___ has joined #openstack-ansible | 05:10 | |
| *** thors____ has joined #openstack-ansible | 05:12 | |
| *** asettle has joined #openstack-ansible | 05:12 | |
| *** thorst_ has quit IRC | 05:13 | |
| *** thorst_ has joined #openstack-ansible | 05:13 | |
| *** thorst__ has quit IRC | 05:14 | |
| *** thorst___ has quit IRC | 05:15 | |
| *** thorst__ has joined #openstack-ansible | 05:15 | |
| *** shausy has joined #openstack-ansible | 05:16 | |
| *** eric_lopez has joined #openstack-ansible | 05:16 | |
| *** thors____ has quit IRC | 05:17 | |
| *** asettle has quit IRC | 05:17 | |
| *** thorst_ has quit IRC | 05:18 | |
| *** thorst_ has joined #openstack-ansible | 05:18 | |
| *** thorst__ has quit IRC | 05:20 | |
| *** thorst_ has quit IRC | 05:22 | |
| *** thorst_ has joined #openstack-ansible | 05:24 | |
| *** sdake has quit IRC | 05:26 | |
| *** sdake has joined #openstack-ansible | 05:28 | |
| *** thorst_ has quit IRC | 05:32 | |
| *** markvoelker has joined #openstack-ansible | 05:32 | |
| *** sdake has quit IRC | 05:33 | |
| *** thorst_ has joined #openstack-ansible | 05:34 | |
| *** markvoelker has quit IRC | 05:37 | |
| *** thorst_ has quit IRC | 05:39 | |
| *** curlybracket has quit IRC | 05:41 | |
| *** saneax_AFK is now known as saneax | 05:45 | |
| *** eric_lopez has quit IRC | 05:46 | |
| *** jamielennox is now known as jamielennox|away | 05:56 | |
| *** thorst_ has joined #openstack-ansible | 05:56 | |
| *** kiranv_ has quit IRC | 05:57 | |
| *** thorst_ has quit IRC | 06:05 | |
| *** thorst_ has joined #openstack-ansible | 06:08 | |
| *** Oku_OS-away is now known as Oku_OS | 06:10 | |
| *** jamielennox|away is now known as jamielennox | 06:10 | |
| *** thorst__ has joined #openstack-ansible | 06:11 | |
| *** bsv has joined #openstack-ansible | 06:12 | |
| *** thorst_ has quit IRC | 06:13 | |
| *** zhangjn has quit IRC | 06:15 | |
| *** thorst__ has quit IRC | 06:16 | |
| *** zhangjn has joined #openstack-ansible | 06:17 | |
| openstackgerrit | Merged openstack/openstack-ansible: Expose and set a default fallocate_reserve value https://review.openstack.org/312784 | 06:29 |
| *** asettle has joined #openstack-ansible | 06:31 | |
| *** asettle has quit IRC | 06:33 | |
| *** markvoelker has joined #openstack-ansible | 06:33 | |
| *** markvoelker has quit IRC | 06:38 | |
| *** shausy has quit IRC | 06:40 | |
| *** thorst_ has joined #openstack-ansible | 06:45 | |
| *** javeriak has joined #openstack-ansible | 06:46 | |
| *** zhangjn has quit IRC | 06:50 | |
| *** zhangjn has joined #openstack-ansible | 06:51 | |
| *** thorst_ has quit IRC | 06:53 | |
| *** sacharya has quit IRC | 06:54 | |
| *** unlaudable has joined #openstack-ansible | 06:55 | |
| *** kiranv_ has joined #openstack-ansible | 06:57 | |
| *** psilvad has quit IRC | 06:58 | |
| *** kiranv_ has quit IRC | 07:02 | |
| *** thorst_ has joined #openstack-ansible | 07:15 | |
| *** eric_lopez has joined #openstack-ansible | 07:17 | |
| *** fawadkhaliq has joined #openstack-ansible | 07:20 | |
| *** thorst_ has quit IRC | 07:24 | |
| *** mikelk has joined #openstack-ansible | 07:28 | |
| *** markvoelker has joined #openstack-ansible | 07:34 | |
| *** markvoelker has quit IRC | 07:39 | |
| *** karimb has joined #openstack-ansible | 07:40 | |
| *** haasn has quit IRC | 07:56 | |
| *** kiranv_ has joined #openstack-ansible | 07:59 | |
| *** kiranv_ has quit IRC | 08:04 | |
| *** jorge_munoz has quit IRC | 08:19 | |
| *** ozialien10 has joined #openstack-ansible | 08:20 | |
| *** thorst_ has joined #openstack-ansible | 08:22 | |
| *** thorst_ has quit IRC | 08:29 | |
| *** markvoelker has joined #openstack-ansible | 08:35 | |
| *** curlybracket has joined #openstack-ansible | 08:37 | |
| *** markvoelker has quit IRC | 08:39 | |
| *** timrc has quit IRC | 08:43 | |
| *** lianz has joined #openstack-ansible | 08:43 | |
| *** timrc has joined #openstack-ansible | 08:46 | |
| odyssey4me | lbragstad o/ ? | 08:54 |
| *** sacharya has joined #openstack-ansible | 08:54 | |
| *** wvera has joined #openstack-ansible | 08:56 | |
| bsv | odyssey4me: ? | 08:56 |
| *** wvera has quit IRC | 08:57 | |
| *** sacharya has quit IRC | 08:59 | |
| *** electrofelix has joined #openstack-ansible | 09:07 | |
| *** lianz has quit IRC | 09:08 | |
| *** thorst_ has joined #openstack-ansible | 09:12 | |
| *** javeriak has quit IRC | 09:17 | |
| *** admin0 has joined #openstack-ansible | 09:18 | |
| *** thorst_ has quit IRC | 09:20 | |
| Adri2000 | hi | 09:29 |
| Adri2000 | is it supported (and tested?) to deploy use openstack-ansible version X to deploy openstack version << X ? | 09:29 |
| Adri2000 | like using openstack-ansible master to deploy openstack mitaka | 09:29 |
| *** javeriak has joined #openstack-ansible | 09:29 | |
| *** javeriak has quit IRC | 09:30 | |
| *** javeriak has joined #openstack-ansible | 09:30 | |
| *** eric_lopez has quit IRC | 09:33 | |
| mattt | Adri2000: i wouldn't advise that, no | 09:33 |
| *** markvoelker has joined #openstack-ansible | 09:36 | |
| *** liecho has joined #openstack-ansible | 09:38 | |
| Adri2000 | ok :) | 09:38 |
| liecho | How does openstack-ansible differ from Kolla? | 09:39 |
| liecho | or do they share code (I assume not)? | 09:39 |
| *** markvoelker has quit IRC | 09:40 | |
| *** asettle has joined #openstack-ansible | 09:40 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: Removed the db create tasks https://review.openstack.org/314850 | 09:41 |
| mattt | Adri2000: tbh master and mitaka are probably still very close code wise, so you may be OK for now, but as master moves forward, you're going to run into issues trying to deploy mitaka with it | 09:41 |
| mattt | Adri2000: why not use the mitaka branch to deploy mitaka? :P | 09:42 |
| *** zhangjn has quit IRC | 09:42 | |
| *** zhangjn has joined #openstack-ansible | 09:44 | |
| Adri2000 | nothing specific in mind, but if some playbooks in master gain support for some drivers for example, it'd be interesting to be able to use them while still deploying a stable openstack version | 09:44 |
| Adri2000 | I imagine currently mitaka and master are still close, but my question was more general, whether supporting that is a goal or not | 09:45 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_heat: Removed the db create tasks https://review.openstack.org/314845 | 09:48 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_cinder: Removed the db create tasks https://review.openstack.org/314842 | 09:52 |
| mattt | Adri2000: nope | 09:53 |
| mattt | Adri2000: in that case you could push to get stuff backported into stable/mitaka | 09:53 |
| mattt | Adri2000: it may not get accepted but you could certainly try :) | 09:54 |
| *** sacharya has joined #openstack-ansible | 09:55 | |
| Adri2000 | generally I'm in favour that stable branches only get bug|security fixes so... :p | 09:59 |
| *** sacharya has quit IRC | 10:00 | |
| *** kiranv_ has joined #openstack-ansible | 10:01 | |
| *** kiranv_ has quit IRC | 10:05 | |
| odyssey4me | Adri2000 you're certainly welcome to try, but we don't test that option so we'll never call it 'supported' - it may work though | 10:06 |
| odyssey4me | Adri2000 the only trouble is that we carry policy files, rootwrap filters, and other files which are branch specific from upstream | 10:06 |
| odyssey4me | I'd like to find the time this cycle to remove that so that we don't carry them, but simply pull them from the git source | 10:07 |
| odyssey4me | that would help in a lot of ways, including doing what you want to do | 10:07 |
| odyssey4me | mattt could you review https://review.openstack.org/315974 please? | 10:08 |
| mattt | sure | 10:09 |
| odyssey4me | liecho no, Kolla doesn't share code with OSA - the deployment philosophies are quite different | 10:09 |
| odyssey4me | liecho Kolla deploys with Docker, and only Docker and is fully committed to the Docker deployment tooling and way of doing things. | 10:10 |
| odyssey4me | liecho OSA deploys to hosts and optionally makes use of LXC machine containers for the control plane services. | 10:11 |
| *** tiagogomes has quit IRC | 10:15 | |
| *** thorst_ has joined #openstack-ansible | 10:19 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_horizon: Use tempest for role testing https://review.openstack.org/310441 | 10:21 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: [WIP] Update tempest test vars https://review.openstack.org/315366 | 10:25 |
| *** thorst_ has quit IRC | 10:26 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: [WIP] Update tempest test vars https://review.openstack.org/315366 | 10:26 |
| *** tiagogomes has joined #openstack-ansible | 10:28 | |
| odyssey4me | andymccr I thin that https://review.openstack.org/313314 should get a release note? | 10:34 |
| odyssey4me | andymccr also https://review.openstack.org/315650 needs a release note edit | 10:36 |
| *** markvoelker has joined #openstack-ansible | 10:36 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest: Allow tempest network overrides for public and private net https://review.openstack.org/314760 | 10:38 |
| *** smatzek has joined #openstack-ansible | 10:38 | |
| *** markvoelker has quit IRC | 10:41 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Refactor ceph_client for multi-OS and ceph https://review.openstack.org/312692 | 10:44 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_server: Updated role for multi-distro support https://review.openstack.org/313067 | 10:46 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_swift: Set fallocate_reserve to match upstream default https://review.openstack.org/315650 | 10:49 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_server: Updated role for multi-distro support https://review.openstack.org/313067 | 10:49 |
| odyssey4me | andymccr could you review https://review.openstack.org/315974 please? | 10:53 |
| *** pjm6 has joined #openstack-ansible | 11:03 | |
| pjm6 | morning all | 11:05 |
| odyssey4me | andymccr I just realised that https://review.openstack.org/315650 will also need an 'upgrade' release note to indicate the change in our default because that default value change is something you need to know about when upgrading | 11:08 |
| *** johnmilton has joined #openstack-ansible | 11:10 | |
| odyssey4me | asettle if you have a moment today, https://review.openstack.org/312273 could do with a review from you now that the technical nits are covered | 11:10 |
| asettle | Well that looks like a bundle of laughs | 11:12 |
| asettle | On it. | 11:12 |
| asettle | odyssey4me: is the upgrade guide keeping within dev doc conventions? Or are you aiming to have it at a similar level to the install guide? | 11:13 |
| odyssey4me | asettle I'm not sure what you mean by 'level'? The outcome is something like http://docs.openstack.org/developer/openstack-ansible/liberty/ | 11:14 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: [WIP] Update tempest test vars https://review.openstack.org/315366 | 11:14 |
| asettle | Sorry odyssey4me I mean, would you like me to follow the same writing conventions? | 11:15 |
| asettle | Or just make sure it makes sense with no spelling mistakes :p | 11:15 |
| odyssey4me | asettle Yes. The Install & Upgrade guides are aimed at Operators so they should maintain conventions. | 11:15 |
| asettle | odyssey4me: cool I'll do a basic run through now to ensure it makes sense, you can merge it after changes, and then by the looks of things I might need to do a review of hte Upgrade Guide too :) | 11:16 |
| *** bsv has quit IRC | 11:17 | |
| odyssey4me | asettle thanks :) | 11:17 |
| asettle | No stress | 11:17 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_swift: Set fallocate_reserve to match upstream default https://review.openstack.org/315650 | 11:17 |
| odyssey4me | andymccr I'm going to tweak that release note a bit if you don't mind? | 11:18 |
| andymccr | sure go ahead | 11:18 |
| asettle | odyssey4me: comments inline. I'm happy to just publish edits if that's easier? Or you can obviously do the same. | 11:20 |
| asettle | It's good to merge from my POV now. I'll have a look through the rest of the Upgrade Guide now. | 11:20 |
| openstackgerrit | Darren Birkett proposed openstack/openstack-ansible: Disable slave repo servers while syncing https://review.openstack.org/316032 | 11:22 |
| openstackgerrit | Alexandra Settle proposed openstack/openstack-ansible-os_swift: Set fallocate_reserve to match upstream default https://review.openstack.org/315650 | 11:23 |
| *** thorst_ has joined #openstack-ansible | 11:23 | |
| andymccr | are there releasenote guidelines? | 11:24 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift: Set fallocate_reserve to match upstream default https://review.openstack.org/315650 | 11:24 |
| odyssey4me | asettle go ahead and edit as you wish | 11:25 |
| asettle | odyssey4me: cool beans hombre | 11:25 |
| openstackgerrit | Darren Birkett proposed openstack/openstack-ansible: Disable slave repo servers while syncing https://review.openstack.org/316033 | 11:25 |
| odyssey4me | andymccr there aren't, I've been thinking of adding some to the dev docs because I am definitely repeating myself often :) | 11:25 |
| odyssey4me | andymccr are you happy with the edits in https://review.openstack.org/315650 ? | 11:26 |
| *** iceyao has joined #openstack-ansible | 11:27 | |
| asettle | odyssey4me: lowercase swift please | 11:28 |
| asettle | Other than than that, published the edits on: https://review.openstack.org/#/c/312273/ | 11:29 |
| asettle | You can go ahead and merge that if you're happy with my edits now | 11:29 |
| *** thorst_ has quit IRC | 11:31 | |
| *** tiagogomes has quit IRC | 11:32 | |
| asettle | Someone wanna enlighten me to where the Upgrade Guide be keepin it's sneaky self? | 11:33 |
| *** kylek3h has quit IRC | 11:33 | |
| asettle | its* | 11:33 |
| asettle | Good job, tech writer. | 11:33 |
| andymccr | its in the previous releases | 11:33 |
| andymccr | so you wont see it in master | 11:33 |
| odyssey4me | asettle that patch is creating it - there is no upgrade guide for master yet | 11:33 |
| asettle | OH! | 11:34 |
| asettle | I'm waiting then ;) | 11:34 |
| odyssey4me | once we have the liberty->mitaka guide done, we'll port that forward for master to get working on mitaka->newton | 11:34 |
| asettle | The fun never stops. | 11:34 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift: Set fallocate_reserve to match upstream default https://review.openstack.org/315650 | 11:34 |
| odyssey4me | asettle ^ better? | 11:35 |
| openstackgerrit | Darren Birkett proposed openstack/openstack-ansible: Disable slave repo servers while syncing https://review.openstack.org/316032 | 11:35 |
| asettle | I am very happy :) thank you | 11:35 |
| andymccr | odyssey4me: yeah that change seems fine - we do need to have guidelines though otherwise you are going to be rewriting a lot of releasenotes and its pretty frustrating for contributors | 11:35 |
| asettle | +1 to release note conventions. I think that's a good idea andymccr :) odyssey4me if you have an idea of how you like them, we should get that down somewhere. | 11:35 |
| odyssey4me | yup, I'll put something together | 11:36 |
| asettle | Cool :) | 11:36 |
| openstackgerrit | Darren Birkett proposed openstack/openstack-ansible: Disable slave repo servers while syncing https://review.openstack.org/316033 | 11:36 |
| *** markvoelker has joined #openstack-ansible | 11:37 | |
| *** haasn has joined #openstack-ansible | 11:41 | |
| *** markvoelker has quit IRC | 11:42 | |
| *** iceyao has quit IRC | 11:42 | |
| *** iceyao has joined #openstack-ansible | 11:43 | |
| *** eric_lopez has joined #openstack-ansible | 11:44 | |
| *** woodard has joined #openstack-ansible | 11:44 | |
| *** tiagogomes has joined #openstack-ansible | 11:45 | |
| odyssey4me | asettle how do I link to another heading in the same doc using rst notation? | 11:47 |
| * odyssey4me is being lazy :p | 11:47 | |
| asettle | Another heading or another page? What exactly are you trying to do? | 11:48 |
| odyssey4me | I want to refer to a heading on the same page in a body of text | 11:48 |
| asettle | Oh right. | 11:48 |
| odyssey4me | ie 'Please see xxx for more detailed guidelines' | 11:48 |
| asettle | :ref:`NAME` | 11:48 |
| asettle | Fairly sure. | 11:49 |
| *** woodard has quit IRC | 11:49 | |
| *** weshay has joined #openstack-ansible | 11:50 | |
| odyssey4me | apparently titles are implicit hyperlinks: http://docutils.sourceforge.net/docs/user/rst/quickref.html#implicit-hyperlink-targets | 11:51 |
| asettle | AH, if you're referencing within the same file, yep. If you're referring to another title in the same book, you should have to do the ref :) | 11:53 |
| asettle | I should have just given you a LMGTFY link :p | 11:53 |
| odyssey4me | That's the trouble with this stuff - too much jargon. It's hard to communicate what I want because I don't know the explicit term that explains it. | 11:54 |
| asettle | It's all new. We're still learning it too :) | 11:54 |
| odyssey4me | Maybe we should just forgoe explicit terms and ask for things using conceptual illustrations... or perhaps interpretive dance would be more effective. | 11:55 |
| asettle | But it is all a hell of a lot easieer | 11:55 |
| asettle | odyssey4me: please interpretive dance for me on all occasions. | 11:55 |
| asettle | I have *no* qualms. | 11:55 |
| odyssey4me | Easier than docbook. Then again I'd rather shove hot pokers into my eyes than try to write docs in docbook. | 11:55 |
| asettle | Docbook | 11:55 |
| asettle | \o/ haha | 11:56 |
| asettle | But yeah, docbook wasn't exactly easy to use for everyone | 11:56 |
| *** sacharya has joined #openstack-ansible | 11:56 | |
| *** sacharya has quit IRC | 12:01 | |
| *** Andrew_jedi has joined #openstack-ansible | 12:01 | |
| Andrew_jedi | Hello Folks, Is it possible to enable ssl for keystone for a running kilo setup with OSA? | 12:02 |
| *** kiranv_ has joined #openstack-ansible | 12:02 | |
| *** psilvad has joined #openstack-ansible | 12:05 | |
| *** kylek3h has joined #openstack-ansible | 12:06 | |
| *** kiranv_ has quit IRC | 12:07 | |
| *** javeriak has quit IRC | 12:10 | |
| mhayden | morning | 12:11 |
| *** darrenc_ has joined #openstack-ansible | 12:17 | |
| *** jroll has quit IRC | 12:17 | |
| *** neillc has quit IRC | 12:17 | |
| *** darrenc has quit IRC | 12:17 | |
| *** neillc has joined #openstack-ansible | 12:17 | |
| * mhayden woke up to find an email from a security role user... such happiness | 12:22 | |
| *** jroll has joined #openstack-ansible | 12:22 | |
| *** jroll has quit IRC | 12:22 | |
| *** jroll has joined #openstack-ansible | 12:22 | |
| *** darrenc_ is now known as darrenc | 12:22 | |
| *** Min_Cai has joined #openstack-ansible | 12:25 | |
| Min_Cai | hi, I just did a OSA-AIO, everything seems okay but glance part failed. | 12:26 |
| Min_Cai | root@aio1-utility-container-8825c03f:~# glance image-list | 12:26 |
| Min_Cai | /usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:315: SNIMissingWarning: An HTTPS request has been made, but the SNI (Subject Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. For more information, see https://urllib3.readthedocs.org/en/latest/secu | 12:26 |
| Min_Cai | rity.html#snimissingwarning. | 12:26 |
| Min_Cai | SNIMissingWarning | 12:26 |
| Min_Cai | /usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:120: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning. | 12:26 |
| Min_Cai | InsecurePlatformWarning | 12:26 |
| Min_Cai | SSL exception connecting to https://9.47.66.40:9292/versions: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed | 12:26 |
| Min_Cai | sorry attach too many things, anyone knows what's this certificate problem. I used the latest version. | 12:27 |
| odyssey4me | Min_Cai please use a pastebin for logs and share the pastebin link instead of flooding the channel with logs | 12:31 |
| odyssey4me | Min_Cai what do you mean by 'the latest version' ? which branch/tag? | 12:32 |
| asettle | odyssey4me: jsut having a brief chat with mattt and andymccr and we (as a community) need to agree on the format of our code name. Ie: OpenStack-Ansbile or openstack-ansible or OSA | 12:32 |
| Min_Cai | ok, got it | 12:32 |
| mhayden | asettle: i've had "OpenStack-Ansible" drilled into me as the formal name :P | 12:32 |
| mhayden | with that capitalization + punctuation :) | 12:32 |
| odyssey4me | asettle OpenStack-Ansible is the project name, openstack-ansible refers to the repository itself only, OSA is the contraction of the priject name | 12:33 |
| odyssey4me | *project | 12:33 |
| mhayden | if I use "OSA" in an email or conversation, i do that "OpenStack-Ansible (OSA)" type thing | 12:33 |
| asettle | mhayden: yeah that's what I did on the docs. I just want to ensure everyone agrees to that? | 12:33 |
| asettle | Yep, cool :) thanks homies | 12:33 |
| Min_Cai | it's master | 12:33 |
| mattt | we need a project name | 12:33 |
| Min_Cai | 13.1.0 | 12:33 |
| odyssey4me | asettle it is as I have spoken, and no-one has ever challenged it ;) | 12:33 |
| mhayden | mattt: we need to rename to something catchy, like "Dumplings" | 12:33 |
| odyssey4me | mattt too late for that - repositories cannot be renamed | 12:34 |
| *** pjm6 has quit IRC | 12:34 | |
| odyssey4me | Min_Cai master and 13.1.0 are not the same thing | 12:34 |
| asettle | mhayden: cause immediately whenever someone says Dumplings I'm like 'yes! openstack ansible!' | 12:34 |
| mattt | mhayden: ceph already had a 'dumpling' release | 12:34 |
| odyssey4me | 13.1.0 comes from the Mitaka branch | 12:34 |
| Min_Cai | hold on, let me have a double check | 12:34 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add documentation/release note guidance to the contributor guide https://review.openstack.org/316061 | 12:35 |
| liecho | what is the difference between this and Kolla? | 12:35 |
| liecho | I'm a new user and a bit confused | 12:35 |
| odyssey4me | asettle spotz_zzz jmccrory automagically cloudnull d34dh0r53 stevelle mattt hughsaunders andymccr mhayden please review https://review.openstack.org/316061 | 12:35 |
| liecho | is openstack-ansible stable for Mitaka? | 12:35 |
| asettle | odyssey4me: sasw. Doing. | 12:35 |
| odyssey4me | liecho I have already answered your question. | 12:35 |
| Min_Cai | root@jerrycai-vm2:/opt/openstack-ansible# git branch | 12:36 |
| Min_Cai | * master | 12:36 |
| odyssey4me | liecho http://eavesdrop.openstack.org/irclogs/%23openstack-ansible/%23openstack-ansible.2016-05-13.log.html#t2016-05-13T10:09:57 | 12:36 |
| Min_Cai | root@jerrycai-vm2:/opt/openstack-ansible# git describe --abbrev=0 --tags | 12:36 |
| Min_Cai | 13.0.0 | 12:36 |
| odyssey4me | Min_Cai ok, so you're using the master branch | 12:36 |
| odyssey4me | the execution of the glance command you did - where did you do that from? | 12:36 |
| Min_Cai | in my util container | 12:36 |
| Min_Cai | once I ran "glance image-list" | 12:37 |
| Min_Cai | seems no error comes from glance container | 12:37 |
| Min_Cai | but I can nova list | 12:37 |
| Min_Cai | cinder list | 12:37 |
| Min_Cai | only glance image-list failed | 12:37 |
| odyssey4me | Min_Cai it seems that perhaps the glance client is misbehaving again - can you please pastebin/gist your openrc and the resulting output from 'glance --debug image-list' | 12:37 |
| odyssey4me | Min_Cai also, try doing 'openstack image list' and see if it works better? | 12:38 |
| Min_Cai | okay, it seems broken as I also run a scenario tempest cases | 12:38 |
| Min_Cai | it shows 2 in 3 failed due to image service down | 12:38 |
| *** markvoelker has joined #openstack-ansible | 12:38 | |
| odyssey4me | Min_Cai we do the same thing in the gate and it seems to be working fine - so something specific may have gone wrong in your installation | 12:39 |
| Min_Cai | Um.. okay here comes the result | 12:39 |
| Min_Cai | I think so too | 12:39 |
| Min_Cai | I'm new, how to use pastebin? | 12:39 |
| asettle | odyssey4me: comments inline | 12:40 |
| odyssey4me | Min_Cai have you changed anything in /etc/openstack_deploy/ after the AIO bootstrap step? | 12:40 |
| *** Andrew_jedi has quit IRC | 12:40 | |
| liecho | odyssey4me: thanks, I missed that! | 12:41 |
| Min_Cai | yes, I delete DEPLOY_CEILOMETER and DEPLOY_SWIFT and DEPLOY_IRONIC boot part | 12:41 |
| liecho | so it's about mutable vs immutable? which one would you recommend for a green field deployment? | 12:41 |
| Min_Cai | just delete them in /scripts/run-playbooks.sh | 12:41 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_cinder: Removed the db create tasks https://review.openstack.org/314842 | 12:42 |
| *** markvoelker has quit IRC | 12:43 | |
| odyssey4me | Min_Cai ah, that explains why glance isn't working - there is no swift and the configuraiton is expecting swift to be there | 12:45 |
| *** woodard has joined #openstack-ansible | 12:45 | |
| *** thorst_ has joined #openstack-ansible | 12:45 | |
| Min_Cai | oh | 12:46 |
| Min_Cai | glance has to be with swift backend? | 12:46 |
| odyssey4me | Min_Cai to disable swift you need to do the following: remove /etc/openstack_deploy/conf.d/swift.yml (you can remove aodh.yml, ceilometer.yml, ironic.yml too in order to prevent those services from deploying) | 12:46 |
| kylek3h | odyssey4me: Can't Min_Cai just enable the glance file backend? | 12:47 |
| odyssey4me | Min_Cai no, the AIO specifically assumes that swift will be deployed - if you do your own build using the install guide then you will understand how it fits together more clearly | 12:47 |
| asettle | odyssey4me: replied to your comment inline. And I dunno why, but the link didn't work for me originally... does now :) | 12:47 |
| kylek3h | Min_Cai: Are you doing AIO? I thought you were on the multi node task. | 12:48 |
| odyssey4me | Min_Cai To further disable ceilometer/swift from the AIO you'll need to remove these entries from /etc/openstack_deploy/user_variables.yml https://github.com/openstack/openstack-ansible/blob/master/tests/roles/bootstrap-host/templates/user_variables.aio.yml.j2#L19-L37 / https://github.com/openstack/openstack-ansible/blob/master/tests/roles/bootstrap-host/templates/user_variables.aio.yml.j2#L48-L49 | 12:48 |
| *** woodard has quit IRC | 12:49 | |
| *** thorst_ has quit IRC | 12:50 | |
| odyssey4me | kylek3h yes, technically the value of glance_default_store can be changed in /etc/openstack_deploy/user_variables.yml to 'file' and the 'setup-openstack.yml' playbook can be re-run - but right now there are a bunch of extra configurations in place for ceilometer which may cause other issues | 12:50 |
| Min_Cai | kylek3h, yeah, yesterday I tired to start multinode deployment but seems need more network establishment efforts, so in the mean time I kicked off a AIO to find something and encountered this problem. :) | 12:51 |
| kylek3h | ok | 12:51 |
| Min_Cai | odyssey4me, thank you, can I just remove it now and re-run the run-playbook.sh? | 12:52 |
| Min_Cai | will it help? | 12:52 |
| odyssey4me | Min_Cai once you've executed run_playbooks once, you shouldn't use it again | 12:52 |
| odyssey4me | you should execute the playbooks directly | 12:52 |
| Min_Cai | okay, I knew the playbooks are idempotent, you mean not .sh again, just glance playbook | 12:53 |
| odyssey4me | Min_Cai once you've adjusted the configuration, execute: cd /opt/openstack-ansible/playbooks; openstack-ansible setup-openstack.yml | 12:53 |
| odyssey4me | Min_Cai if you've only done the glance store config change, then just the glance playbook will be fine | 12:54 |
| Min_Cai | got it, thank you | 12:54 |
| odyssey4me | note that your other services are instrumented for ceilometer though, so you may get some other side effects | 12:55 |
| *** phalmos has joined #openstack-ansible | 12:55 | |
| kylek3h | odyssey4me: I have a question for you...it maybe one to go off and think about. | 12:57 |
| kylek3h | we're trying to get OSA to work on ppc64le but we're using x86 for the controllers. Of course, we ran into problems with the repo because it's building x86 only | 12:57 |
| kylek3h | venv, pip wheels ,etc.... :-) | 12:58 |
| odyssey4me | kylek3h hmm, that's a fun one | 12:58 |
| kylek3h | no kidding. | 12:58 |
| odyssey4me | kylek3h is it even possible to build wheels for another architecture on x86? | 12:58 |
| kylek3h | I'm not an expert, but I didn't think so. | 12:59 |
| kylek3h | We where going down the route of, how do we setup up multiple repos. | 12:59 |
| kylek3h | one for x86 and one for ppc64le | 12:59 |
| odyssey4me | kylek3h if it is possible, I don't see it as an issue to instrument the repo build to do it - it'd take some rejigging but that's fine | 13:00 |
| *** thorst_ has joined #openstack-ansible | 13:00 | |
| kylek3h | odyssey4me: another issue is we need to keep the repo's separate so the don't rsync across architectures. | 13:01 |
| odyssey4me | another option for that environment is to build a repo container on the ppc platform and include it as an extra link using pip_links | 13:01 |
| odyssey4me | kylek3h why shouldn't they? | 13:02 |
| kylek3h | well, there is one set of venv's .... we'd have to include the arch in the names then. ?? | 13:02 |
| Min_Cai | odyssey4me, you told me: "once you've adjusted the configuration, execute: cd /opt/openstack-ansible/playbooks; openstack-ansible setup-openstack.yml", the configuration you mentioned is in /opt/openstack-ansible/etc/openstack_deploy/ or in /etc/openstack_deploy/? | 13:03 |
| odyssey4me | yes, I expect the venv tarballs on the repo server would have to be architecture specific | 13:03 |
| kylek3h | like nova-13.1.1.amd64.tar | 13:03 |
| odyssey4me | yep | 13:03 |
| odyssey4me | Min_Cai the configuration changes must be done in /etc/openstack_deploy - that is user space configuration, whereas the stuff in /opt/etc/openstack_deploy is all sample configuration in the code tree | 13:04 |
| kylek3h | Maybe that's the way to start out. Start putting arch into the resource names and see how that works out. | 13:04 |
| *** javeriak has joined #openstack-ansible | 13:04 | |
| odyssey4me | Min_Cai in a normal OSA deployment you should never need to edit code in the git tree - everything can be controlled in the user space configuration | 13:05 |
| Min_Cai | thank you | 13:05 |
| Min_Cai | okay | 13:05 |
| odyssey4me | kylek3h yeah, unfortunately that'll touch every role but so be it | 13:06 |
| Min_Cai | I think the configuration files in /etc/openstack_deploy generated from git tree? some .sh scripts | 13:06 |
| odyssey4me | kylek3h I guess the starting point is to first see whether it's possible to build the wheels for ppc on x86 - if not then figure out a solution for that problem | 13:06 |
| kylek3h | odyssey4me: I haven't looked at the rsync stuff too much....is it from a master to slaves or would it sync from ppc64 back to a master? | 13:06 |
| odyssey4me | kylek3h the build happens on repo_server[0] and gets pushed to all the other repo servers using lsync/rsync | 13:07 |
| odyssey4me | lsync watches for changes and initiates rsync to push them out | 13:07 |
| kylek3h | odyssey4me: I saw the build part....but wasn't sure if the rsync was just one way though | 13:08 |
| odyssey4me | Min_Cai yes, the bootstrap-aio script puts the AIO configurations in the right places and uses the examples for that | 13:08 |
| odyssey4me | kylek3h yeah, it's one way | 13:08 |
| kylek3h | So we'd kind of need a ppc64 master to push up to the overall master??? Hmm | 13:08 |
| *** javeriak has quit IRC | 13:09 | |
| odyssey4me | kylek3h I suppose if x86 can't build the wheels for ppc then we'd have to figure out how to implement a multi-master repo server so that each arch can build their wheels and they can sync both ways | 13:09 |
| kylek3h | odyssey4me: yeah...same for venvs. | 13:10 |
| odyssey4me | yep | 13:10 |
| *** Zucan has joined #openstack-ansible | 13:10 | |
| odyssey4me | asettle FYI I'm going to wait for more feedback before making adjustments to https://review.openstack.org/316061 | 13:11 |
| odyssey4me | smatzek kylek3h as newcomers to the project I'd be interested in getting your feedback on https://review.openstack.org/316061 too | 13:11 |
| asettle | odyssey4me: sure | 13:11 |
| kylek3h | odyssey4me: looking | 13:11 |
| Min_Cai | odyssey4me, stupid quesiton, openstack-ansible CLI is the wrapper for ansible CLI, no need to specify inventory files? | 13:14 |
| *** sdake has joined #openstack-ansible | 13:14 | |
| *** admin0 has left #openstack-ansible | 13:14 | |
| *** fawadkhaliq has quit IRC | 13:20 | |
| *** fawadkhaliq has joined #openstack-ansible | 13:20 | |
| *** odyssey4me has quit IRC | 13:21 | |
| *** odyssey4me has joined #openstack-ansible | 13:21 | |
| odyssey4me | Min_Cai if you execute from /opt/openstack-ansible/playbooks then it will pick up the inventory because it's in the same directory... openstack-ansible is a wrapper script around ansible-playbook specifically to ensure the inclusion of the /etc/openstack_deploy/user.* override files | 13:24 |
| *** fawadkhaliq has quit IRC | 13:25 | |
| *** galstrom_zzz is now known as galstrom | 13:27 | |
| Min_Cai | yeah as you said I can see openstack-ansible automatically include these: "Variable files: "-e @/etc/openstack_deploy/user_conf_files.yml -e @/etc/openstack_deploy/user_secrets.yml -e @/etc/openstack_deploy/user_variables.yml "" | 13:28 |
| *** unlaudable has quit IRC | 13:29 | |
| Min_Cai | I ran "openstack-ansible os-glance-install.yml" failed due to some precheck. Okay I decide to re-install and start swift to it see if glance can be back. | 13:30 |
| odyssey4me | Min_Cai hmm, user_conf_files.yml ? what's in there? | 13:32 |
| smatzek | odyssey4me: looks good. Over the last few days I've worked through my first OSA deploy, mostly an AIO with separate host as nova-compute, with a ceph cluster. I've jotted down notes on additional documentation changes I'm going to purpose. | 13:32 |
| odyssey4me | ah never mind - that's one of the AIO files | 13:32 |
| *** Andrew_jedi has joined #openstack-ansible | 13:32 | |
| odyssey4me | smatzek ah awesome :) | 13:32 |
| Min_Cai | smatzek: you mean you deployed an AIO with multinode env? one is controller and compute service in another node? | 13:33 |
| *** chhavi has joined #openstack-ansible | 13:35 | |
| smatzek | Min_Cai: yes | 13:36 |
| *** smatzek has quit IRC | 13:36 | |
| *** KLevenstein has joined #openstack-ansible | 13:36 | |
| Min_Cai | cool, do each host need 2 physical nic? | 13:37 |
| *** KLevenstein_ has joined #openstack-ansible | 13:37 | |
| Min_Cai | smatzek: we've been blocked here for many days on network establishment before run the ansible. | 13:37 |
| *** markvoelker has joined #openstack-ansible | 13:39 | |
| *** pjm6 has joined #openstack-ansible | 13:39 | |
| odyssey4me | Min_Cai the hosts don't *have* to have two NIC's, but you'll have to implement some smart magic to make the bridges work properly with only one NIC | 13:40 |
| odyssey4me | as I recall you can use a veth connection for that | 13:40 |
| odyssey4me | that said, I'm terrible at networking so take what I say with a pinch of salt - Apsu, evrardjp or rackertom know far better | 13:41 |
| *** KLevenstein has quit IRC | 13:41 | |
| *** KLevenstein_ is now known as KLevenstein | 13:41 | |
| *** pjm6 has quit IRC | 13:42 | |
| *** openstack has joined #openstack-ansible | 13:47 | |
| Min_Cai | odyssey4me: thank you. so if I have 2 vms, 1 for controller and 1 for compute node. The way to deploy multinode openstack is briefly: 1. Network configuration for 2 vms. 2. Specify the second host information to /opt/openstack-ansible/etc/openstack_deploy/openstack_user_config.yml.aio. 3. run bootstrape to generate the conf in /etc/openstack_deploy 4. Goto playbooks folder, run "openstack-ansible | 13:48 |
| Min_Cai | setup-openstack.yml" | 13:48 |
| Min_Cai | This could be a lot of mistake, please correct me. :) | 13:48 |
| *** pjm6 has joined #openstack-ansible | 13:49 | |
| *** joker_ has quit IRC | 13:49 | |
| *** thorst_ has quit IRC | 13:49 | |
| *** jthorne has joined #openstack-ansible | 13:50 | |
| odyssey4me | Min_Cai the second host information needs to be added into /etc/openstack_deploy/openstack_user_config.yml - you can use /opt/openstack-ansible/etc/openstack_deploy/openstack_user_config.yml.aio as an example, but the AIO build uses network configuration that won't work for multi-node because it uses a fake NIC | 13:50 |
| odyssey4me | Min_Cai so if you want to do multi-node I advise that you work through the install guide instead of trying to short cut by using the AIO config | 13:51 |
| *** unlaudable has quit IRC | 13:51 | |
| Min_Cai | docs here: http://docs.openstack.org/developer/openstack-ansible/install-guide/index.html right? | 13:52 |
| *** openstack has joined #openstack-ansible | 13:55 | |
| *** Ger-chervyak has joined #openstack-ansible | 13:56 | |
| *** thorst_ has joined #openstack-ansible | 13:56 | |
| Min_Cai | ok, thank you odyssey4me, I'll start from the beginning carefully. And I was changed the role from a developper to deployer, and blank on networking, do you have any quick way to fast bring up network :) | 13:57 |
| *** sacharya has joined #openstack-ansible | 13:57 | |
| jamesdenton | Min_Cai recently rebuild my home lab using a single interface. Maybe this will help | 13:58 |
| jamesdenton | https://gist.github.com/busterswt/01e706086c6bc6108e66e06fc992d1c0 | 13:58 |
| jamesdenton | https://gist.github.com/busterswt/54311ad7d1e298d22d0f0cc4c98be407 | 13:58 |
| jamesdenton | that's the network interfaces file and openstack_user_config.yml, respectively | 13:59 |
| *** Mudpuppy has joined #openstack-ansible | 14:00 | |
| Min_Cai | oh, that seems helpful, let me check... | 14:00 |
| *** thorst_ has quit IRC | 14:00 | |
| cloudnull | mornings | 14:00 |
| odyssey4me | Andrew_jedi yes it is | 14:01 |
| odyssey4me | Andrew_jedi http://docs.openstack.org/developer/openstack-ansible/kilo/install-guide/configure-sslcertificates.html | 14:02 |
| Andrew_jedi | odyssey4me: Perfect, Is this documented somewhere ? | 14:02 |
| *** smatzek has joined #openstack-ansible | 14:02 | |
| *** smatzek has joined #openstack-ansible | 14:02 | |
| *** sacharya has quit IRC | 14:02 | |
| odyssey4me | jamesdenton excellent, thanks for that! | 14:03 |
| *** alextricity25_ has joined #openstack-ansible | 14:04 | |
| *** kiranv_ has joined #openstack-ansible | 14:04 | |
| *** ametts has joined #openstack-ansible | 14:04 | |
| *** flaviodsr has joined #openstack-ansible | 14:05 | |
| odyssey4me | Andrew_jedi here's an example that uses haproxy for SSL offloading: https://gist.github.com/odyssey4me/bb79e9f2ae349413dae3 | 14:05 |
| *** alextricity25_ has quit IRC | 14:06 | |
| Andrew_jedi | odyssey4me: Ahh thanks! Looking at both docs :) | 14:06 |
| Min_Cai | jamesdenton, thank you for your share. In you env, 172.29.236.11~13 are controller nodes and 172.29.236.14~15 are compute nodes right? And the network-interfaces-sample is for all the nodes but only change the ip address right? I see there is only 1 physical nic. | 14:06 |
| *** kiranv_ has quit IRC | 14:08 | |
| odyssey4me | mhayden any thoughts on https://review.openstack.org/316032 ? | 14:09 |
| *** thorst_ has joined #openstack-ansible | 14:10 | |
| *** admin0 has joined #openstack-ansible | 14:10 | |
| *** eric_lopez has quit IRC | 14:11 | |
| jamesdenton | yep that's right | 14:12 |
| jamesdenton | you can use multiple nics or bonds if you want | 14:13 |
| jamesdenton | good luck! i have to bounce | 14:13 |
| odyssey4me | asettle I've posed a few questions in https://review.openstack.org/316061 - thoughts? | 14:14 |
| asettle | Yeah I just saw odyssey4me I'm having a look now | 14:14 |
| Min_Cai | jamesdenton, thank you. I'll leave further question on your shared doc on git | 14:15 |
| *** admin0 has quit IRC | 14:17 | |
| Andrew_jedi | odyssey4me: The document says "For each service, deployers have the option to use self-signed certificates generated during the deployment process". But i don't see any certs in the /etc/keystone/ssl directory? | 14:19 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:19 | |
| odyssey4me | Andrew_jedi they won't be there unless you've enabled SSL for the service, or implemented the var changes to use use-rprovided certs | 14:20 |
| odyssey4me | and run the playbooks after changing the settings | 14:20 |
| mhayden | odyssey4me: i'm in support of that patch | 14:20 |
| odyssey4me | Andrew_jedi also, if you have a running setup already you'll have to update the keystone endpoints manually using openstack endpoint ... | 14:21 |
| Andrew_jedi | odyssey4me: Yes and all the openrc files as well | 14:22 |
| *** spotz_zzz is now known as spotz | 14:22 | |
| odyssey4me | Andrew_jedi the openrc files shouldn't need an update unless you're changing the internal endpoints | 14:23 |
| odyssey4me | and those will be automatically adjusted if you run the correct plays | 14:23 |
| *** kiranv_ has joined #openstack-ansible | 14:29 | |
| *** kiranv_ has quit IRC | 14:31 | |
| *** jorge_munoz has joined #openstack-ansible | 14:32 | |
| openstackgerrit | Merged openstack/openstack-ansible: Disable slave repo servers while syncing https://review.openstack.org/316033 | 14:33 |
| *** kstev has joined #openstack-ansible | 14:33 | |
| *** jorge_munoz has quit IRC | 14:36 | |
| *** jorge_munoz has joined #openstack-ansible | 14:36 | |
| *** can8dnSix has joined #openstack-ansible | 14:38 | |
| *** tiagogomes has quit IRC | 14:38 | |
| Andrew_jedi | odyssey4me: documentation clearly specify how to enable ssl in case of user provided certs but i am not able to figure out how to enable ssl for a service in case of self-signed certs. | 14:43 |
| *** Brew has joined #openstack-ansible | 14:43 | |
| *** tiagogomes has joined #openstack-ansible | 14:43 | |
| odyssey4me | Andrew_jedi for Kilo it'll only work for Keystone. The other service clients are rather horrible at supporting SSL properly and often fail. | 14:44 |
| odyssey4me | Andrew_jedi Do you want to implement self-signed certs for Keystone? Which endpoints do you want to apply the certs to? Where do you want the SSL to terminate? | 14:45 |
| odyssey4me | (the Keystone service itself, or the load balancer) | 14:45 |
| *** psilvad has quit IRC | 14:46 | |
| Andrew_jedi | odyssey4me: I am trying to integrate the Ceph Object Gateway with Keystone. http://docs.ceph.com/docs/hammer/radosgw/keystone/ | 14:47 |
| Andrew_jedi | and for this to work i have to enable ssl on keystone first | 14:47 |
| Andrew_jedi | only the keystone service | 14:48 |
| odyssey4me | Andrew_jedi if I read that right, it doesn't appear that you *have* to use SSL | 14:49 |
| Andrew_jedi | odyssey4me: Configuring the Ceph Object Gateway to work with Keystone also requires converting the OpenSSL certificates that Keystone uses for creating the requests to the nss db format | 14:49 |
| *** jorge_munoz_ has joined #openstack-ansible | 14:49 | |
| prometheanfire | wat | 14:49 |
| odyssey4me | yeah, I see that - it's not clear, but it doesn't seem to imply that it *must* be done, rather that if you use SSL for keystone then you need to do that | 14:49 |
| odyssey4me | Andrew_jedi have you tried to configure it would SSL on the keystone endpoint first? | 14:50 |
| *** jorge_munoz__ has joined #openstack-ansible | 14:50 | |
| Andrew_jedi | odyssey4me: yes i did. let me try to show you the exact error i got. | 14:51 |
| *** thorst_ has quit IRC | 14:51 | |
| *** thorst_ has joined #openstack-ansible | 14:52 | |
| automagically | Morning(ish) all | 14:52 |
| odyssey4me | o/ automagically how goes it? | 14:52 |
| automagically | Much better now that I’ve finished my week of OpenStack training. Now time for real work | 14:53 |
| Andrew_jedi | odyssey4me: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed | 14:53 |
| *** jorge_munoz has quit IRC | 14:53 | |
| *** jorge_munoz__ is now known as jorge_munoz | 14:53 | |
| odyssey4me | automagically heh, was that interesting or tiresome? | 14:53 |
| automagically | A bit of both. Was a great opportunity to see OpenStack through the eyes of my classmates, many of whom are newbs to the space | 14:54 |
| *** jorge_munoz_ has quit IRC | 14:54 | |
| Andrew_jedi | odyssey4me: OpenStack training can never be fun, heh | 14:54 |
| odyssey4me | automagically I expect that you had to deploy OpenStack by hand in the training, and now feel much more thankful that you don't do that for production | 14:54 |
| automagically | Indeed and amen to that | 14:54 |
| *** BjoernT has joined #openstack-ansible | 14:54 | |
| odyssey4me | Andrew_jedi was that error produced by radosgw or by something else? | 14:55 |
| cloudnull | odyssey4me: ++ | 14:55 |
| Andrew_jedi | odyssey4me: swift client throws this error | 14:55 |
| cloudnull | openstack by hand may actually be harder than linux from scratch | 14:55 |
| automagically | cloudnull: That’s quite possible | 14:55 |
| Andrew_jedi | cloudnull: I have done that. Deploying Openstack essex, folsom, grizzly by hand | 14:56 |
| *** thorst_ has quit IRC | 14:56 | |
| cloudnull | I did Diablo essex folsom by hand. it was lovely :) | 14:57 |
| Andrew_jedi | cloudnull: i detect sarcasm :D | 14:57 |
| *** Ger-chervyak has quit IRC | 14:57 | |
| cloudnull | worked in dev, ops problem now | 14:57 |
| automagically | ^ | 14:57 |
| *** Ger-chervyak has joined #openstack-ansible | 14:58 | |
| *** sacharya has joined #openstack-ansible | 14:58 | |
| odyssey4me | Andrew_jedi ok, are your keystone endpoints currently http or https? | 14:59 |
| Andrew_jedi | odyssey4me: all are http | 14:59 |
| *** thorst_ has joined #openstack-ansible | 14:59 | |
| *** thorst_ has quit IRC | 15:00 | |
| *** thorst_ has joined #openstack-ansible | 15:00 | |
| Andrew_jedi | odyssey4me: This is the command i am using, swift -V 2.0 -A http://x.x.x.x:5000/v2.0 -U admin:admin -K <password> list | 15:00 |
| odyssey4me | Andrew_jedi and your rgw setting 'rgw keystone url' is set to? | 15:01 |
| cloudnull | this http://www.linuxfromscratch.org/ is easier than this http://docs.openstack.org/liberty/install-guide-ubuntu/ | 15:01 |
| *** phalmos has quit IRC | 15:02 | |
| odyssey4me | Andrew_jedi and your object-store endpoints are http or https? | 15:02 |
| odyssey4me | Andrew_jedi if you manually execute the swift client with --debug, is the process failing on the object store endpoint or on the keystone endpoint | 15:02 |
| *** phalmos has joined #openstack-ansible | 15:03 | |
| Andrew_jedi | odyssey4me: object-store endpoint is http, but i just got some interesting output after using --debug | 15:05 |
| Andrew_jedi | odyssey4me: http://paste.openstack.org/show/497090/ | 15:05 |
| Andrew_jedi | cloudnull: I played with lfs 3 years back. Package building took too much time and if there is a bug then you were doomed. I don't know about the current health of lfs project. | 15:06 |
| *** stelouie has joined #openstack-ansible | 15:07 | |
| odyssey4me | Andrew_jedi it looks like you got your keystone token, then rgw redirected you to an https endpoint | 15:07 |
| *** stelouie has quit IRC | 15:07 | |
| Andrew_jedi | odyssey4me: rgw keystone url = http://172.29.236.10:5000 | 15:08 |
| odyssey4me | Andrew_jedi hmm, I just noticed that this relies on the token auth - so the port needs to be 35357, not 5000 | 15:09 |
| odyssey4me | the port used in the rgw config I mean | 15:10 |
| odyssey4me | the swift client needs to auth to :5000 | 15:10 |
| Andrew_jedi | odyssey4me: Ahhh, could you please educate me why 35357 here? | 15:11 |
| logan- | yeah rgw uses admin token | 15:12 |
| odyssey4me | hmm, I'm not sure if there's some sort of restriction coded somewhere else because it looks like the pipeline includes admin_token_auth for both the public and admin endpoints | 15:13 |
| odyssey4me | odd - but the token auth is usually restricted to the admin endpoint only | 15:13 |
| *** karimb has quit IRC | 15:13 | |
| *** saneax is now known as saneax_AFK | 15:13 | |
| odyssey4me | that's also why http://docs.ceph.com/docs/hammer/radosgw/keystone/ specifies 'keystone server admin port' for the 'rgw keystone url' setting | 15:14 |
| *** karimb has joined #openstack-ansible | 15:14 | |
| *** Oku_OS is now known as Oku_OS-away | 15:17 | |
| *** openstackgerrit has quit IRC | 15:17 | |
| *** openstackgerrit has joined #openstack-ansible | 15:18 | |
| *** daneyon has joined #openstack-ansible | 15:22 | |
| Andrew_jedi | odyssey4me: Changed the port to 35357, restarted radosgw but still the same error | 15:23 |
| odyssey4me | Andrew_jedi can you pastebin your full endpoint list (sanitsed if need be) | 15:23 |
| openstackgerrit | Jacob Wagner proposed openstack/openstack-ansible-os_tempest: Allow tempest network overrides for public and private net https://review.openstack.org/314760 | 15:25 |
| *** phalmos_ has joined #openstack-ansible | 15:29 | |
| Andrew_jedi | odyssey4me: http://paste.openstack.org/show/497095/ | 15:31 |
| *** phalmos has quit IRC | 15:32 | |
| odyssey4me | Andrew_jedi hmm, can you nova list happily? | 15:33 |
| odyssey4me | weird because that failure there is not the same as the failure form earlier | 15:33 |
| odyssey4me | this time the auth is failing | 15:33 |
| odyssey4me | previously the auth passed | 15:33 |
| *** weezS has joined #openstack-ansible | 15:34 | |
| phschwartz | Hi all, I am trying to use openstack-ansible-security to harden a list of hosts. Each host fails with http://paste.openstack.org/show/497096/ any pointers would be appreciated | 15:34 |
| Andrew_jedi | odyssey4me: nova list works fine, this time auth failed because i changed the command. Earlier it was "swift -V 2.0 -A ..." | 15:34 |
| Andrew_jedi | odyssey4me: I saw that swift endpoint was configured for v1 so i changed the command | 15:35 |
| *** mikelk has quit IRC | 15:36 | |
| odyssey4me | Andrew_jedi -V is the auth version, so it should be 2 | 15:37 |
| odyssey4me | Andrew_jedi in fact, it should be 3 but you can use 2 | 15:37 |
| odyssey4me | ah, I see that you have both v3 and v2.0 keystone endpoints | 15:38 |
| Andrew_jedi | odyssey4me: yes ofcourse, i forgot this bit, its been a long time away from swift | 15:38 |
| odyssey4me | I don't think the swift client can do v3 endpoints in Kilo, so use the v2 endpoint | 15:38 |
| Andrew_jedi | odyssey4me: yes, kilo has this. | 15:38 |
| Andrew_jedi | odyssey4me: okay, one min | 15:39 |
| Andrew_jedi | odyssey4me: Are you asking to change the endpoint to this "http://172.29.236.10/swift/v2.0" | 15:40 |
| Andrew_jedi | odyssey4me: just a bit confused here | 15:41 |
| *** daneyon_ has joined #openstack-ansible | 15:41 | |
| *** yarkot has quit IRC | 15:43 | |
| *** daneyon has quit IRC | 15:44 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add documentation/release note guidance to the contributor guide https://review.openstack.org/316061 | 15:48 |
| Andrew_jedi | odyssey4me: Ok after using v2, i get the same ssl error, http://paste.openstack.org/show/497097/ | 15:48 |
| odyssey4me | Andrew_jedi it seems that rgw only supports the swift v1 API, so no don't change that endpoint | 15:49 |
| odyssey4me | what I'm saying is that you should auth using the keystone v2.0 protocol | 15:49 |
| odyssey4me | right, so you did that and you can see that the client auth worked | 15:50 |
| odyssey4me | Andrew_jedi you're going to need to see the content that's going back and forth there to see why there's a redirect | 15:51 |
| odyssey4me | either sniff it on the wire, or use curl to request /swift/v1?format=json | 15:51 |
| odyssey4me | Andrew_jedi https://swiftstack.com/docs/integration/keystone.html and https://developer.rackspace.com/docs/cloud-files/quickstart/ should be helpful to figure out how to use curl | 15:53 |
| Andrew_jedi | odyssey4me: Thanks, looking at it. | 15:54 |
| *** karimb has quit IRC | 15:56 | |
| *** thorst_ has quit IRC | 16:02 | |
| *** thorst_ has joined #openstack-ansible | 16:09 | |
| Andrew_jedi | odyssey4me: SSL error is gone. | 16:10 |
| *** tiagogomes has quit IRC | 16:11 | |
| Andrew_jedi | odyssey4me: I changed the endpoints to include 8080 port as well | 16:11 |
| Andrew_jedi | odyssey4me: Like this one, http://172.29.236.10:8080/swift/v1 | 16:11 |
| *** thorst__ has joined #openstack-ansible | 16:12 | |
| *** thorst_ has quit IRC | 16:13 | |
| *** thorst__ has quit IRC | 16:18 | |
| *** markvoelker has quit IRC | 16:18 | |
| odyssey4me | Andrew_jedi ah ok - happy that you figured it out | 16:20 |
| *** markvoelker has joined #openstack-ansible | 16:22 | |
| *** psilvad has joined #openstack-ansible | 16:29 | |
| *** Andrew_jedi has quit IRC | 16:30 | |
| *** mummer has joined #openstack-ansible | 16:32 | |
| *** asettle has quit IRC | 16:33 | |
| *** asettle has joined #openstack-ansible | 16:33 | |
| *** asettle has quit IRC | 16:33 | |
| *** weezS has quit IRC | 16:34 | |
| *** smatzek has quit IRC | 16:35 | |
| *** sdake_ has joined #openstack-ansible | 16:36 | |
| *** sdake has quit IRC | 16:39 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add documentation guidance to the contributor guide https://review.openstack.org/316061 | 16:42 |
| *** raddaoui has joined #openstack-ansible | 16:44 | |
| *** eric_lopez has joined #openstack-ansible | 16:44 | |
| odyssey4me | automagically thanks for the review of https://review.openstack.org/316061 - besides the grammar correction, your thoughts on the actual content? | 16:45 |
| *** daneyon_ has quit IRC | 16:46 | |
| *** iceyao has quit IRC | 16:50 | |
| *** Andrew_jedi has joined #openstack-ansible | 16:54 | |
| *** sdake_ has quit IRC | 16:54 | |
| *** b3rnard0 has quit IRC | 16:56 | |
| *** electrofelix has quit IRC | 16:59 | |
| *** catintheroof has joined #openstack-ansible | 16:59 | |
| *** catintheroof has quit IRC | 17:00 | |
| *** psilvad has quit IRC | 17:00 | |
| *** catintheroof has joined #openstack-ansible | 17:00 | |
| odyssey4me | mhayden is https://review.openstack.org/314282 idempotent? it strikes me that it might not be because the tasks will continually try and put their item just below the marker. | 17:02 |
| *** smatzek has joined #openstack-ansible | 17:03 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest: Fix and add tests for tempest plugin system https://review.openstack.org/315435 | 17:04 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest: Fix and add tests for tempest plugin system https://review.openstack.org/315435 | 17:05 |
| *** daneyon has joined #openstack-ansible | 17:05 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest: Fix and add tests for tempest plugin system https://review.openstack.org/315435 | 17:06 |
| *** Andrew_jedi has quit IRC | 17:07 | |
| *** Andrew_jedi has joined #openstack-ansible | 17:07 | |
| *** smatzek has quit IRC | 17:09 | |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible-galera_client: Add mariadb-client-core-10.0 to galera client role https://review.openstack.org/316215 | 17:10 |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible-galera_client: Add mariadb-client-core-10.0 to galera client role https://review.openstack.org/316215 | 17:11 |
| *** Min_Cai has quit IRC | 17:17 | |
| *** can8dnSix has quit IRC | 17:19 | |
| *** jang has joined #openstack-ansible | 17:20 | |
| *** smatzek has joined #openstack-ansible | 17:30 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add documentation guidance to the contributor guide https://review.openstack.org/316061 | 17:35 |
| jmccrory | odyssey4me cloudnull: could https://review.openstack.org/#/c/313582/ go back to liberty? | 17:35 |
| cloudnull | jmccrory: i say yes | 17:35 |
| jmccrory | 8x faster in upgrade deployments yesterday here | 17:35 |
| BjoernT | jmccrory: +1 We need that as admins, it is painfully slow on large cluster | 17:36 |
| BjoernT | Otherwise devs have to pay my lunch every time I upgrade OSA clouds | 17:37 |
| cloudnull | hahaha | 17:37 |
| cloudnull | ill do the things now | 17:37 |
| jmccrory | heh | 17:37 |
| jmccrory | cool thanks, cloudnull | 17:37 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Improve deployment performance on large clusters https://review.openstack.org/316223 | 17:40 |
| cloudnull | done | 17:40 |
| odyssey4me | jmccrory cloudnull could do with a review on this backport too https://review.openstack.org/315967 | 17:40 |
| cloudnull | done | 17:41 |
| *** b3rnard0 has joined #openstack-ansible | 17:42 | |
| odyssey4me | cloudnull if you have a gap, please read through https://review.openstack.org/316061 | 17:42 |
| * cloudnull reading | 17:43 | |
| *** bryan_att has joined #openstack-ansible | 17:46 | |
| *** jang has quit IRC | 17:48 | |
| *** kstepniewski has joined #openstack-ansible | 17:49 | |
| *** pjm6 has quit IRC | 17:50 | |
| *** thorst_ has joined #openstack-ansible | 17:50 | |
| mhayden | odyssey4me: i ran it several times and didn't see any extra lines being added | 17:55 |
| *** thorst_ has quit IRC | 17:55 | |
| mhayden | are you worried about the config lines or the marker being added more than once | 17:55 |
| mhayden | or both? | 17:55 |
| odyssey4me | mhayden so I add the marker, then I say that option1 should go below the marker, then option2, then option3 | 17:56 |
| *** thorst_ has joined #openstack-ansible | 17:56 | |
| odyssey4me | at this point I have http://pastebin.com/mgRmcFcZ in the file, right? | 17:56 |
| *** thorst_ has quit IRC | 18:01 | |
| *** thorst_ has joined #openstack-ansible | 18:01 | |
| mhayden | odyssey4me: hmm, i'll go run it a few more times and verify | 18:01 |
| odyssey4me | mhayden if that is how it ends up looking because each options wants to be immediately below the marker, then each time you run the task may try to rearrange that option immediately below the marker again | 18:02 |
| odyssey4me | if all it does is check whether the line's in the file, and if it isn't then add it then it's all good | 18:03 |
| mhayden | odyssey4me: http://paste.openstack.org/show/497113/ | 18:05 |
| mhayden | ansible seems to be smart enough to not re-add those | 18:05 |
| *** Ger-chervyak has quit IRC | 18:06 | |
| odyssey4me | awesome, good to go then | 18:07 |
| *** Ger-chervyak has joined #openstack-ansible | 18:08 | |
| *** Ger-chervyak has quit IRC | 18:09 | |
| *** Ger-chervyak has joined #openstack-ansible | 18:09 | |
| *** keedya has joined #openstack-ansible | 18:13 | |
| evrardjp | hello everyone | 18:13 |
| *** klamath has joined #openstack-ansible | 18:14 | |
| automagically | o/ evrardjp | 18:14 |
| *** sdake has joined #openstack-ansible | 18:20 | |
| *** klamath has quit IRC | 18:20 | |
| *** sdake_ has joined #openstack-ansible | 18:26 | |
| *** psilvad has joined #openstack-ansible | 18:26 | |
| *** sdake has quit IRC | 18:28 | |
| odyssey4me | jmccrory replied in https://review.openstack.org/#/c/286282/ | 18:29 |
| jmccrory | odyssey4me: ahh ok, cool idea | 18:30 |
| *** admin0 has joined #openstack-ansible | 18:30 | |
| odyssey4me | that way the override works as it always did | 18:30 |
| odyssey4me | and no funky vars inclusions needed | 18:30 |
| jmccrory | yep, should be much cleaner | 18:30 |
| openstackgerrit | Merged openstack/openstack-ansible: Add documentation guidance to the contributor guide https://review.openstack.org/316061 | 18:31 |
| *** daneyon has quit IRC | 18:38 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309425 | 18:40 |
| *** eric_lopez has quit IRC | 18:41 | |
| *** kstev has quit IRC | 18:45 | |
| *** thorst_ has quit IRC | 18:49 | |
| *** thorst_ has joined #openstack-ansible | 18:50 | |
| *** sdake_ has quit IRC | 18:52 | |
| *** sdake has joined #openstack-ansible | 18:53 | |
| *** sdake has quit IRC | 18:53 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_horizon: Enable ha router support in Horizon https://review.openstack.org/313031 | 18:53 |
| *** thorst__ has joined #openstack-ansible | 18:53 | |
| *** thorst_ has quit IRC | 18:54 | |
| *** thorst__ has quit IRC | 18:58 | |
| odyssey4me | mhayden have you see my question in https://review.openstack.org/#/c/315244/1/templates/horizon_local_settings.py.j2 ? | 18:58 |
| mhayden | odyssey4me: yes, just been swamped today | 18:58 |
| *** thorst_ has joined #openstack-ansible | 18:59 | |
| odyssey4me | mhayden with https://review.openstack.org/#/c/312733/3/templates/horizon_local_settings.py.j2 - is enable_lb only applicable to the old panels? | 19:00 |
| mhayden | odyssey4me: right -- enable_lb is for those very old LBaaSv1 panels | 19:01 |
| *** weezS has joined #openstack-ansible | 19:03 | |
| odyssey4me | alright then, now I understand :) +2 | 19:03 |
| *** thorst_ has quit IRC | 19:03 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: Multi-distro framework for rabbitmq_server role https://review.openstack.org/286282 | 19:05 |
| mhayden | odyssey4me: thanks sir | 19:05 |
| *** hybridpollo has joined #openstack-ansible | 19:10 | |
| odyssey4me | jmccrory in https://review.openstack.org/#/c/286282 - some more comments | 19:11 |
| odyssey4me | lemme work up a thought example | 19:11 |
| *** weezS has quit IRC | 19:13 | |
| *** yarkot has joined #openstack-ansible | 19:17 | |
| *** phalmos_ has quit IRC | 19:19 | |
| *** chhavi has quit IRC | 19:19 | |
| odyssey4me | jmccrory https://gist.github.com/odyssey4me/122b8cd5cc2f0441eaf7169fba8d2afb | 19:20 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Add CentOS 7 and Ubuntu 16.04 support https://review.openstack.org/313697 | 19:20 |
| *** Zucan has quit IRC | 19:21 | |
| *** Andrew_jedi has quit IRC | 19:22 | |
| *** Ger-chervyak has quit IRC | 19:24 | |
| *** kstev has joined #openstack-ansible | 19:24 | |
| *** KLevenstein has quit IRC | 19:26 | |
| *** Ger-chervyak has joined #openstack-ansible | 19:26 | |
| *** Ger-chervyak has quit IRC | 19:26 | |
| *** Ger-chervyak has joined #openstack-ansible | 19:27 | |
| *** daneyon has joined #openstack-ansible | 19:27 | |
| *** kstepniewski has quit IRC | 19:29 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: Multi-distro framework for rabbitmq_server role https://review.openstack.org/286282 | 19:31 |
| *** daneyon_ has joined #openstack-ansible | 19:32 | |
| *** daneyon has quit IRC | 19:35 | |
| *** eric_lopez has joined #openstack-ansible | 19:37 | |
| evrardjp | could some ppl give opinion on this? https://review.openstack.org/#/c/310221/ | 19:41 |
| jmccrory | evrardjp: didn't know endpoints could be updated, is that a recent change? | 19:42 |
| evrardjp | not really | 19:43 |
| *** ericlopez has joined #openstack-ansible | 19:43 | |
| evrardjp | but it's been a while that we don't use this feature | 19:43 |
| evrardjp | we could have used the delete/create before, but it was never a topic | 19:44 |
| evrardjp | I must say, this is a band aid on our keystone module, not a real long term work that should be done with ansible upstream... I volunteered on these matters | 19:44 |
| evrardjp | it's just an easy way to bring update functionality. this could be useful when we'll force https for endpoints by default for example: we could have something that changes the endpoints during the update process | 19:46 |
| *** eric_lopez has quit IRC | 19:47 | |
| *** eric_lopez has joined #openstack-ansible | 19:47 | |
| *** ericlopez has quit IRC | 19:48 | |
| *** ericlopez has joined #openstack-ansible | 19:50 | |
| *** eric_lopez has quit IRC | 19:52 | |
| *** eric_lopez has joined #openstack-ansible | 19:53 | |
| *** Brew has quit IRC | 19:55 | |
| *** ericlopez has quit IRC | 19:55 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Add CentOS 7 and Ubuntu 16.04 support https://review.openstack.org/313697 | 19:57 |
| *** ericlopez has joined #openstack-ansible | 19:58 | |
| *** asettle has joined #openstack-ansible | 19:59 | |
| *** asettle has quit IRC | 19:59 | |
| *** eric_lopez has quit IRC | 19:59 | |
| *** eric_lopez has joined #openstack-ansible | 20:01 | |
| *** psilvad has quit IRC | 20:03 | |
| *** ericlopez has quit IRC | 20:04 | |
| *** psilvad has joined #openstack-ansible | 20:04 | |
| *** galstrom is now known as galstrom_zzz | 20:04 | |
| evrardjp | what's happening if I'm not happy with the current behavior we've decided about the pkg cache to be hard set to a value instead of leaving the choice to the deployer, as it's used to be? | 20:04 |
| *** ericlopez has joined #openstack-ansible | 20:04 | |
| odyssey4me | evrardjp which pkg cache is this? | 20:05 |
| evrardjp | cache_timeout | 20:05 |
| odyssey4me | it hasn't changed since the patches you put in - it's only been moved | 20:06 |
| evrardjp | indeed | 20:06 |
| evrardjp | to var | 20:06 |
| evrardjp | hard set | 20:06 |
| evrardjp | vars* | 20:06 |
| odyssey4me | yep, so an override will still work | 20:06 |
| *** eric_lopez has quit IRC | 20:06 | |
| evrardjp | you mean an user_* variable? | 20:06 |
| odyssey4me | yup | 20:07 |
| evrardjp | yes, that's not standard | 20:07 |
| *** eric_lopez has joined #openstack-ansible | 20:07 | |
| odyssey4me | well, then propose an alternative pattern | 20:07 |
| evrardjp | defaults, as it used to be | 20:08 |
| *** ericlopez has quit IRC | 20:09 | |
| evrardjp | I understood why it was done that way: we thought this was a variable that needed to be hard set for ubuntu. but if it was the case I would have put this variable in vars/main directly | 20:10 |
| *** daneyon_ has quit IRC | 20:11 | |
| evrardjp | in the first place I mean | 20:11 |
| *** ericlopez has joined #openstack-ansible | 20:11 | |
| openstackgerrit | Merged openstack/openstack-ansible-galera_client: Add mariadb-client-core-10.0 to galera client role https://review.openstack.org/316215 | 20:11 |
| *** eric_lopez has quit IRC | 20:12 | |
| evrardjp | pkg cache value could work for any os, and should be set by the deployer, hence defaults | 20:12 |
| odyssey4me | evrardjp propose a pattern - the var was moved because it only pertained to apt, so if you want to make it more universal then go for it | 20:13 |
| odyssey4me | evrardjp you may wish to propose something like is being done here: https://review.openstack.org/#/c/286282/40/defaults/main.yml | 20:13 |
| odyssey4me | that allows platform specific vars, but also allows a default to be overridden | 20:14 |
| *** kstev has quit IRC | 20:14 | |
| odyssey4me | I don't know if the yum module has the expiry for the cache as an option though | 20:14 |
| evrardjp | odyssey4me I used about the same pattern for keepalived module | 20:14 |
| evrardjp | odyssey4me it does | 20:14 |
| odyssey4me | then propose that as a pattern against one of the roles that has already merged that change | 20:15 |
| odyssey4me | if it's accepted then you can replicate it | 20:15 |
| evrardjp | fine for me | 20:15 |
| evrardjp | just wanted to avoid a plain -1 before starting the work | 20:15 |
| evrardjp | next time I'll do this directlt | 20:16 |
| evrardjp | y | 20:16 |
| odyssey4me | BjoernT you may wish to backport https://review.openstack.org/316215 to stable/mitaka & liberty | 20:16 |
| odyssey4me | evrardjp yup, code wins :) | 20:16 |
| BjoernT | yes I do wish :-) | 20:16 |
| evrardjp | odyssey4me false: +2 wins | 20:16 |
| BjoernT | I do it once it merges | 20:17 |
| BjoernT | oh it did lol | 20:17 |
| evrardjp | odyssey4me I'm barely increasing my +2 chances by speaking with the appropriate persons | 20:17 |
| odyssey4me | evrardjp :p presenting the code for discussion is always a good way of getting a decent discussion going | 20:18 |
| odyssey4me | we can discuss theories forever, but if we have code to discuss on then it can be a productive discussion | 20:18 |
| odyssey4me | BjoernT I've assigned the backport bugs to you - typey typey :) | 20:20 |
| odyssey4me | Thanks for that. And good to hear that OSIC cloud1 is on Liberty now. :) | 20:20 |
| BjoernT | yeah we got some big headache with MAAS not using venvs | 20:21 |
| *** johnmilton has quit IRC | 20:21 | |
| odyssey4me | oh fun, I'm sure that git-harry will be thrilled to hear it | 20:23 |
| evrardjp | :D | 20:25 |
| mattt | odyssey4me: you really need to stop reviewing WIP reviews | 20:27 |
| odyssey4me | mattt :) | 20:29 |
| mattt | hehe | 20:30 |
| evrardjp | I'm sad I didn't got the chance to be on previous community meeting | 20:31 |
| evrardjp | I basically disagree on having a separate ops and tests repo | 20:33 |
| openstackgerrit | Merged openstack/openstack-ansible: Disable slave repo servers while syncing https://review.openstack.org/316032 | 20:33 |
| openstackgerrit | Merged openstack/openstack-ansible: Document the Release Notes build https://review.openstack.org/315639 | 20:33 |
| evrardjp | having other repos to do exactly the same as the main repo should be doing is a nothing I find interesting | 20:34 |
| evrardjp | maybe a folder like tests/ or operations/ inside the playbooks folder should be enough | 20:34 |
| evrardjp | if we need another repo for tests, I think we're doing it wrong: it proves our misusage of playbooks and includes | 20:35 |
| *** ametts has quit IRC | 20:36 | |
| mattt | evrardjp: it's not a question of finding the work interesting | 20:38 |
| mattt | evrardjp: the amount of duplication is problematic, and making progressive changes to all roles is hard | 20:39 |
| evrardjp | you'll just still duplicate all the playbooks | 20:39 |
| evrardjp | they shouldn't be as different if they are self contained | 20:40 |
| mattt | evrardjp: you won't duplicate playbooks | 20:40 |
| mattt | evrardjp: you will have a single playbook that runs playbooks in the common tests folder | 20:41 |
| evrardjp | what are these playbooks in the tests folder? | 20:42 |
| mattt | evrardjp: so for example, half the roles have a play to setup rabbit, galera, keystone, etc. | 20:42 |
| mattt | the setup is identical across every role, so why do we need separate plays in each role to do this? | 20:43 |
| evrardjp | I agree on this part but my point is: why should we stop there? Why aren't we re-using the already existing rabbit, galera and keystone playbooks that we already have? | 20:43 |
| evrardjp | openstack-ansible main repo is all about the playbooks | 20:43 |
| evrardjp | when we changed the roles pattern and move to IRR, openstack-ansible became the de-facto playbook repo | 20:44 |
| evrardjp | if we can't reuse them, it's probably because they are not atomic enough | 20:45 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 11.2.17 https://review.openstack.org/316284 | 20:45 |
| mattt | evrardjp: we probably can reuse them, but they do a lot more things than we'd want to do in a functional test | 20:45 |
| mattt | evrardjp: but that's not to say we can't investigate that, i never thought about it tbh | 20:45 |
| evrardjp | mattt that's what we need to fix | 20:45 |
| evrardjp | if possible | 20:45 |
| evrardjp | if it's really not possible, then create another one in the same tree, it avoid lots of work | 20:46 |
| odyssey4me | evrardjp if you think it can work, then do a PoC | 20:46 |
| odyssey4me | evrardjp I completely disagree with that - we already have a lot of commits going into the integrated repo that relate only to tests - I'd like to rather have test stuff somewhere else where we can iterate quickly | 20:47 |
| odyssey4me | if it's in a separate repo we can explore the option of having it be branchless, or branched and tagged differently | 20:48 |
| *** psilvad has quit IRC | 20:48 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: Multi-distro framework for rabbitmq_server role https://review.openstack.org/286282 | 20:48 |
| evrardjp | I get the benefit of having a different repo, don't imagine its usage yet | 20:49 |
| mattt | evrardjp: i think what we are going to do is POC in github first, and make sure it works | 20:50 |
| mattt | before we do anything official | 20:51 |
| odyssey4me | yep, that's the plan | 20:51 |
| *** psilvad has joined #openstack-ansible | 20:52 | |
| odyssey4me | evrardjp I would recommend you discuss your thoughts with andymccr who's doing the PoC - you could agree to each do a different one and we can all review the alternatives | 20:52 |
| evrardjp | ok | 20:53 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 11.2.17 (Final Kilo SHA's) https://review.openstack.org/316284 | 20:57 |
| odyssey4me | jmccrory ^ I hope y'all have upgraded to Liberty already :p | 20:58 |
| *** rromans has quit IRC | 20:59 | |
| *** Mudpuppy has quit IRC | 20:59 | |
| *** galstrom_zzz is now known as galstrom | 21:00 | |
| jmccrory | odyssey4me: going to 10.1.18 as we speak :) | 21:00 |
| odyssey4me | so progressive : | 21:00 |
| odyssey4me | :p | 21:00 |
| jmccrory | heh hopefully liberty in next couple months, we'll see | 21:01 |
| *** johnmilton has joined #openstack-ansible | 21:02 | |
| *** rromans has joined #openstack-ansible | 21:02 | |
| evrardjp | I'm off for today, enjoy your week-end everyone | 21:02 |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Use correct var in functional test https://review.openstack.org/315384 | 21:03 |
| *** jthorne has quit IRC | 21:04 | |
| openstackgerrit | Merged openstack/openstack-ansible-repo_server: Updated role for multi-distro support https://review.openstack.org/313067 | 21:05 |
| *** Ger-chervyak has quit IRC | 21:05 | |
| *** raddaoui has quit IRC | 21:07 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_horizon: Use tempest for role testing https://review.openstack.org/310441 | 21:08 |
| odyssey4me | cheers evrardjp ! | 21:08 |
| *** psilvad has quit IRC | 21:09 | |
| *** kstepniewski has joined #openstack-ansible | 21:09 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Fix and add tests for tempest plugin system https://review.openstack.org/315435 | 21:11 |
| *** johnmilton has quit IRC | 21:12 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_cinder: Update tempest test vars https://review.openstack.org/315382 | 21:12 |
| *** smatzek has quit IRC | 21:16 | |
| *** jmhale has quit IRC | 21:17 | |
| *** jmhale has joined #openstack-ansible | 21:17 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Initial commit to enable mitaka>newton upgrades https://review.openstack.org/316290 | 21:19 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Initial commit to enable mitaka>newton upgrades https://review.openstack.org/316290 | 21:21 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Initial commit to enable mitaka>newton upgrades https://review.openstack.org/316290 | 21:24 |
| *** johnmilton has joined #openstack-ansible | 21:24 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Initial commit to enable mitaka>newton upgrades https://review.openstack.org/316290 | 21:26 |
| *** markvoelker has quit IRC | 21:26 | |
| errr | Im having an issue where one of my containers is not getting the right version of pip installed into it. How can I ensure the pip in my container is the same version as that of the utility container? | 21:27 |
| odyssey4me | errr that should be done automatically if your role has a meta dep much like the other openstack roles | 21:28 |
| errr | odyssey4me: how can I ensure I have that done properly? | 21:29 |
| odyssey4me | errr an example: https://github.com/openstack/openstack-ansible-os_neutron/blob/master/meta/main.yml#L33-L38 | 21:29 |
| odyssey4me | what happens then is that the pip_install role inherits these group vars: https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/hosts.yml#L70-L75 | 21:30 |
| odyssey4me | that's assuming that you're using the dynamic inventory to install your extra role | 21:31 |
| odyssey4me | assuming you're working on an extra role, which I think you are? | 21:31 |
| errr | odyssey4me: I am, and it looks like I have that | 21:31 |
| errr | https://github.com/michaelrice/openstack-ansible-os_cloudkitty/blob/master/meta/main.yml#L32-L38 | 21:32 |
| odyssey4me | what's the version of pip that's being installed? | 21:32 |
| errr | 8.0.2 | 21:33 |
| odyssey4me | hmm, that's a bit old | 21:33 |
| odyssey4me | is that the version in your cloudkitty container, or the version in your utility container? | 21:34 |
| errr | I need newer because a package is failing to install and 8.0.2 pip is missing a conditional I need | 21:34 |
| errr | the utility is getting 8.1.1 | 21:34 |
| openstackgerrit | Merged openstack/openstack-ansible: Improve deployment performance on large clusters https://review.openstack.org/316223 | 21:34 |
| odyssey4me | ok, if you execute your play to install cloudkitty do you see these tasks https://github.com/openstack/openstack-ansible-pip_install/blob/master/tasks/install.yml#L44-L58 ? can you execute the play with -vv for verbose logging and pastebin the log? | 21:36 |
| errr | yes that fails regularly on a lot of the roles | 21:37 |
| odyssey4me | which branch of the integrated repo are you working with as a base? | 21:38 |
| errr | 13.1.0 | 21:38 |
| odyssey4me | hmm, that's odd - those tasks shouldn't fail | 21:38 |
| odyssey4me | please pastebin the output? | 21:38 |
| odyssey4me | at least the output from the pip_install role tasks | 21:39 |
| errr | sorry it looks like my scroll back buffer doesnt go back enough to grab the error and I just rebuilt the server so it will be a while before it gets to that poiont of the install again for me to get the errors I was getting from it | 21:39 |
| odyssey4me | ah ok | 21:39 |
| errr | I did the rebuild right before I came in hoping I just needed to change a setting in a file then run this again. | 21:39 |
| errr | heh | 21:39 |
| errr | I think it takes about 30-40 mins to get to that point, so when I get there Ill come back | 21:40 |
| odyssey4me | fyi you can 'export ANSIBLE_LOG_PATH=/my.log' to have ansible store results in a log file | 21:40 |
| odyssey4me | it will still show results on the screen too | 21:40 |
| errr | sweet, Ill do that | 21:40 |
| *** eric_lopez has joined #openstack-ansible | 21:43 | |
| *** keedya has quit IRC | 21:43 | |
| *** ericlopez has quit IRC | 21:46 | |
| *** ericlopez has joined #openstack-ansible | 21:46 | |
| *** eric_lopez has quit IRC | 21:48 | |
| *** eric_lopez has joined #openstack-ansible | 21:49 | |
| *** ericlopez has quit IRC | 21:51 | |
| *** ericlopez has joined #openstack-ansible | 21:52 | |
| *** eric_lopez has quit IRC | 21:53 | |
| *** eric_lopez has joined #openstack-ansible | 21:55 | |
| *** keedya has joined #openstack-ansible | 21:56 | |
| *** spotz is now known as spotz_zzz | 21:57 | |
| *** ericlopez has quit IRC | 21:57 | |
| *** ericlopez has joined #openstack-ansible | 21:59 | |
| *** kylek3h has quit IRC | 22:00 | |
| *** eric_lopez has quit IRC | 22:01 | |
| *** eric_lopez has joined #openstack-ansible | 22:02 | |
| *** ericlopez has quit IRC | 22:04 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: Multi-distro framework for rabbitmq_server role https://review.openstack.org/286282 | 22:04 |
| *** eric_lopez has quit IRC | 22:07 | |
| *** eric_lopez has joined #openstack-ansible | 22:07 | |
| *** flaviodsr has quit IRC | 22:08 | |
| *** ericlopez has joined #openstack-ansible | 22:10 | |
| *** eric_lopez has quit IRC | 22:12 | |
| *** jang has joined #openstack-ansible | 22:12 | |
| *** eric_lopez has joined #openstack-ansible | 22:13 | |
| *** ericlopez has quit IRC | 22:14 | |
| *** ericlopez has joined #openstack-ansible | 22:16 | |
| *** eric_lopez has quit IRC | 22:18 | |
| *** eric_lopez has joined #openstack-ansible | 22:18 | |
| *** galstrom is now known as galstrom_zzz | 22:19 | |
| *** sacharya has quit IRC | 22:20 | |
| *** ericlopez has quit IRC | 22:21 | |
| *** ericlopez has joined #openstack-ansible | 22:21 | |
| *** eric_lopez has quit IRC | 22:24 | |
| *** eric_lopez has joined #openstack-ansible | 22:24 | |
| *** albertcard has joined #openstack-ansible | 22:24 | |
| *** ericlopez has quit IRC | 22:26 | |
| *** markvoelker has joined #openstack-ansible | 22:27 | |
| *** ericlopez has joined #openstack-ansible | 22:27 | |
| *** eric_lopez has quit IRC | 22:29 | |
| *** markvoelker has quit IRC | 22:31 | |
| *** eric_lopez has joined #openstack-ansible | 22:31 | |
| *** ericlopez has quit IRC | 22:32 | |
| *** mummer has quit IRC | 22:32 | |
| *** ericlopez has joined #openstack-ansible | 22:35 | |
| *** eric_lopez has quit IRC | 22:37 | |
| *** eric_lopez has joined #openstack-ansible | 22:38 | |
| *** zhangjn has quit IRC | 22:38 | |
| *** ericlopez has quit IRC | 22:40 | |
| *** ericlopez has joined #openstack-ansible | 22:41 | |
| *** keedya has quit IRC | 22:41 | |
| *** zhangjn has joined #openstack-ansible | 22:41 | |
| *** mummer has joined #openstack-ansible | 22:42 | |
| *** eric_lopez has quit IRC | 22:43 | |
| *** eric_lopez has joined #openstack-ansible | 22:43 | |
| *** ericlopez has quit IRC | 22:45 | |
| *** ericlopez has joined #openstack-ansible | 22:46 | |
| *** jang has quit IRC | 22:48 | |
| *** eric_lopez has quit IRC | 22:48 | |
| *** eric_lopez has joined #openstack-ansible | 22:49 | |
| *** catintheroof has quit IRC | 22:49 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Docs: Update Liberty & Mitaka release status https://review.openstack.org/316310 | 22:51 |
| *** ericlopez has quit IRC | 22:51 | |
| *** ericlopez has joined #openstack-ansible | 22:52 | |
| odyssey4me | I'm out for the weekend. Cheerio all! | 22:53 |
| *** eric_lopez has quit IRC | 22:54 | |
| *** eric_lopez has joined #openstack-ansible | 22:55 | |
| jmccrory | odyssey4me: 11.2.16 was never tagged? | 22:56 |
| jmccrory | ah just saw you're leaving, later | 22:56 |
| *** ericlopez has quit IRC | 22:57 | |
| *** ericlopez has joined #openstack-ansible | 22:58 | |
| *** eric_lopez has quit IRC | 23:01 | |
| openstackgerrit | Merged openstack/openstack-ansible: Docs: Update Liberty & Mitaka release status https://review.openstack.org/316310 | 23:01 |
| *** ericlopez has quit IRC | 23:03 | |
| *** ericlopez has joined #openstack-ansible | 23:03 | |
| *** eric_lopez has joined #openstack-ansible | 23:06 | |
| *** ericlopez has quit IRC | 23:09 | |
| *** ericlopez has joined #openstack-ansible | 23:10 | |
| *** admin0 has quit IRC | 23:10 | |
| *** eric_lopez has quit IRC | 23:12 | |
| *** ericlopez has quit IRC | 23:15 | |
| *** ericlopez has joined #openstack-ansible | 23:15 | |
| *** admin0 has joined #openstack-ansible | 23:16 | |
| *** admin0 has quit IRC | 23:18 | |
| *** sacharya has joined #openstack-ansible | 23:20 | |
| *** timl0101 has quit IRC | 23:25 | |
| *** sacharya has quit IRC | 23:25 | |
| *** BjoernT has quit IRC | 23:27 | |
| *** markvoelker has joined #openstack-ansible | 23:28 | |
| *** markvoelker has quit IRC | 23:32 | |
| *** saneax_AFK is now known as saneax | 23:42 | |
| *** spotz_zzz is now known as spotz | 23:42 | |
| *** johnmilton has quit IRC | 23:45 | |
| *** mummer has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!