Tuesday, 2016-06-14

*** jamesdenton has joined #openstack-ansible00:18
*** thorst has joined #openstack-ansible00:19
*** sacharya has joined #openstack-ansible00:20
*** sacharya_ has quit IRC00:20
*** woodard has quit IRC00:23
*** woodard has joined #openstack-ansible00:24
*** adrian_otto has quit IRC00:26
*** klamath has quit IRC00:34
*** klamath has joined #openstack-ansible00:35
*** thorst has quit IRC00:40
*** sacharya has quit IRC00:41
*** saneax is now known as saneax_AFK00:41
*** thorst has joined #openstack-ansible00:41
*** raddaoui has quit IRC00:47
*** thorst has quit IRC00:49
*** schwicht_ has joined #openstack-ansible00:56
*** schwicht has quit IRC00:59
*** adrian_otto has joined #openstack-ansible01:05
*** fishcried has joined #openstack-ansible01:10
*** fishcried has quit IRC01:10
*** adrian_otto has quit IRC01:15
*** thorst has joined #openstack-ansible01:34
*** Drago has quit IRC01:35
*** sacharya has joined #openstack-ansible01:59
*** sacharya has quit IRC01:59
*** klamath has quit IRC01:59
*** Drago1 has joined #openstack-ansible02:02
*** Drago1 has joined #openstack-ansible02:02
*** mfisch has quit IRC02:10
*** schwicht_ has quit IRC02:20
*** schwicht has joined #openstack-ansible02:28
*** schwicht has quit IRC02:32
*** sacharya has joined #openstack-ansible02:34
*** jamesdenton has quit IRC02:48
*** sacharya_ has joined #openstack-ansible02:49
*** sacharya has quit IRC02:52
*** thorst has quit IRC03:00
*** thorst has joined #openstack-ansible03:00
*** thorst has quit IRC03:09
*** openstackgerrit has quit IRC03:11
*** openstackgerrit has joined #openstack-ansible03:12
*** M00nr41n has joined #openstack-ansible03:17
*** M00nr41n has quit IRC03:21
*** afred312 has quit IRC03:26
*** sacharya_ has quit IRC03:27
*** sacharya has joined #openstack-ansible03:28
*** Drago1 has quit IRC03:29
*** sacharya_ has joined #openstack-ansible03:30
*** sacharya has quit IRC03:32
*** sacharya has joined #openstack-ansible03:33
*** sacharya_ has quit IRC03:36
*** schwicht has joined #openstack-ansible03:40
*** schwicht has quit IRC03:44
*** mkrish004c has joined #openstack-ansible03:50
mkrish004cHi i am trying out OSA liberty 12.0.9, after OSA deployment if the linux bridge br-mgmt bounces(down and up manually), it will clear the br-mgmt container interfaces, so is this can be retrieved by restarting all the container ?03:53
*** berendt has quit IRC03:56
*** fishcried has joined #openstack-ansible03:58
*** zerda2 has joined #openstack-ansible04:02
mkrish004cI am facing an issue while bringing back the interfaces on br-mgmt, and it is failing to take ssh - "SSH Error: data could not be sent to the remote host. Make sure this host can be reached over ssh"04:03
mkrish004ci am not restarting containers, instead i am running lxc-container-create.yml again04:04
*** thorst has joined #openstack-ansible04:07
*** albertcard has quit IRC04:11
mkrish004clxc-container-create.yml is not bringing the interfaces added to br-mgmt untill unless there is a changes in network configuration. is this fixed in future releases ?04:11
*** thorst has quit IRC04:14
*** saneax_AFK is now known as saneax04:16
*** markvoelker has quit IRC04:16
*** afred312 has joined #openstack-ansible04:27
*** afred312 has quit IRC04:33
*** pcaruana has quit IRC04:39
*** berendt has joined #openstack-ansible04:44
*** weezS has joined #openstack-ansible04:54
*** M00nr41n has joined #openstack-ansible05:00
*** thorst has joined #openstack-ansible05:12
*** sacharya has quit IRC05:16
*** sacharya has joined #openstack-ansible05:16
*** markvoelker has joined #openstack-ansible05:17
*** thorst has quit IRC05:19
*** markvoelker has quit IRC05:22
*** schwicht has joined #openstack-ansible05:42
*** schwicht has quit IRC05:46
*** weezS has quit IRC05:48
*** chandanc has joined #openstack-ansible05:49
*** javeriak has joined #openstack-ansible05:59
*** pcaruana has joined #openstack-ansible06:16
*** thorst has joined #openstack-ansible06:16
*** goldenfri has quit IRC06:19
*** bsv has joined #openstack-ansible06:24
*** thorst has quit IRC06:24
*** schwicht has joined #openstack-ansible06:44
*** openstackgerrit has quit IRC06:48
*** openstackgerrit has joined #openstack-ansible06:48
*** schwicht has quit IRC06:49
*** jiteka has joined #openstack-ansible06:57
*** McMurlock has joined #openstack-ansible06:59
*** sacharya has quit IRC07:03
*** Guest90337 has joined #openstack-ansible07:15
*** markvoelker has joined #openstack-ansible07:18
openstackgerritMerged openstack/openstack-ansible: Use default metadata_backlog value from Neutron  https://review.openstack.org/32850207:21
*** mikelk has joined #openstack-ansible07:22
*** thorst has joined #openstack-ansible07:22
*** markvoelker has quit IRC07:22
*** thorst has quit IRC07:29
*** karimb has joined #openstack-ansible07:30
*** karimb has quit IRC07:31
*** karimb has joined #openstack-ansible07:32
ionihello guys07:58
ionii don't seems to find how to change from spice to novnc07:58
*** chigang has joined #openstack-ansible07:59
*** thng has joined #openstack-ansible08:03
*** faizy has joined #openstack-ansible08:09
*** chigang1 has joined #openstack-ansible08:18
*** chigang has quit IRC08:20
*** chigang1 is now known as chigang08:20
*** faizy_ has joined #openstack-ansible08:21
chigangHi, Does anyone know OSAD support OpenStack deployed on a Centos host ?08:21
*** faizy has quit IRC08:22
evrardjpit will soon08:23
evrardjpchigang:08:23
evrardjpwe are busy working on ubuntu 16.04 and centos support in this cycle08:24
evrardjpand good morning everyone08:24
chigangevrardjp: It's great! thanks08:24
*** thng has quit IRC08:25
*** mkrish004c has quit IRC08:25
odyssey4memkrish004c if the bridge is restarted the containers will lose connectivity so you can either restart the containers or manually plug the veths back in08:26
evrardjpfeel free to jump in and give feedback/help chigang08:26
evrardjpbecause centos has less priority than 16.04 support08:26
evrardjpbecause the demand is lower08:26
*** thorst has joined #openstack-ansible08:26
evrardjpand basically the supply (man hours) is low (as always)08:27
*** javeriak has quit IRC08:27
*** qiliang27 has joined #openstack-ansible08:27
*** afred312 has joined #openstack-ansible08:29
*** admin0 has joined #openstack-ansible08:30
chigangevrardjp: yep, we are planing to use OSA to take place our ansible scripts(supported centos 7 and ubuntu 14.04). hope to give some feedback.08:31
chigangevrardjp: now we are diving in OSA :)08:32
evrardjpdo you have a link to the docs?08:32
evrardjpit's massive, it will be refactored, but i's useful08:33
*** javeriak has joined #openstack-ansible08:33
*** afred312 has quit IRC08:34
*** thorst has quit IRC08:34
admin0good morning08:35
*** chandanc has quit IRC08:39
chigangevrardjp: I am reading the install guide http://docs.openstack.org/developer/openstack-ansible/install-guide/targethosts-prepare.html#installing-the-operating-system and saw only Ubuntu 14.04 mentioned, so I asked how about Centos supported.08:41
admin0how do I forcerecreate keystone endpoints08:42
evrardjpchigang: it's not supported as of now08:42
evrardjpwe are working on it08:42
evrardjpit's definitely not ready08:42
evrardjpadmin0: if the endpoints are different it should automatically recreate them08:43
evrardjpif you want to replace a similar endpoints (but not exactly the same), you'll have to use our keystone module for that08:44
admin0i enabled keystone_service_publicuri_proto: https in the config ..  it does not seem to pick up the changes08:49
evrardjpcould you file a bug ?08:51
evrardjpI don't have time to look at it right now, but I'd be happy to help whenever possible08:51
openstackgerritChhavi Agarwal proposed openstack/openstack-ansible-os_cinder: Cinder volume type creation race condition  https://review.openstack.org/32932508:52
*** javeriak has quit IRC08:56
*** chigang has quit IRC08:57
*** chigang has joined #openstack-ansible08:58
*** chigang has quit IRC09:10
*** chigang has joined #openstack-ansible09:10
bsvadmin0: mornings :)09:16
*** admin0 has quit IRC09:16
*** admin0 has joined #openstack-ansible09:18
*** Guest90337 has quit IRC09:22
*** electrofelix has joined #openstack-ansible09:26
*** javeriak has joined #openstack-ansible09:32
*** thorst has joined #openstack-ansible09:32
*** pjm6 has quit IRC09:33
*** pjm6 has joined #openstack-ansible09:34
*** admin0 has quit IRC09:35
*** admin0 has joined #openstack-ansible09:36
*** admin0 has quit IRC09:37
*** thorst has quit IRC09:39
evrardjpodyssey4me: what do you think of my comment there: https://review.openstack.org/#/c/312274/ Do you think I should adapt cloudnull's patch ?09:40
*** admin0 has joined #openstack-ansible09:40
*** admin0 has quit IRC09:43
openstackgerritMerged openstack/openstack-ansible-os_magnum: Specifying Keystone Authentication Version  https://review.openstack.org/32916209:43
*** McMurlock has quit IRC09:53
*** thng has joined #openstack-ansible09:54
thngHi all09:54
evrardjphi thng09:54
thngCan anybody tell me when /etc/openstack_deploy/user_conf_file.yml is charged while running playbook ?09:55
thnghi evrardjp :)09:55
*** javeriak has quit IRC09:56
*** admin0 has joined #openstack-ansible09:57
*** javeriak has joined #openstack-ansible09:59
*** fishcried has quit IRC09:59
*** admin0 has quit IRC10:00
*** chigang has quit IRC10:04
*** McMurlock has joined #openstack-ansible10:06
openstackgerritMerged openstack/openstack-ansible-os_sahara: Use master git branches  https://review.openstack.org/32912310:08
*** admin0 has joined #openstack-ansible10:09
odyssey4meadmin0 you can use the openstack CLI to update them yourself, or you can delete the endpoints and re-execute the playbooks to recreate them10:11
pjm6good morning all10:12
odyssey4meadmin0 I would recommend just updating them yourself rather, because deleting endpoints will result in the running environment breaking10:12
odyssey4methng What do you mean by 'charged'?10:13
thngused or loaded. Because I tried to add a file to copy in lxc_container_cache_files as you told me yesterday10:13
*** javeriak has quit IRC10:14
odyssey4methng the user_*.yml files are added as CLI overrides in alphabetic sequence by the openstack-ansible command10:14
thngBut It didnt work. It only copied the files defined in lxc_container_cache_files in user_conf_files.yml10:14
thngSo I think this variable is overrided anywhere10:15
odyssey4methng it is set for an AIO in user_variables, so if you're working on an AIO then the last one will win10:15
odyssey4methng but it also depends on how you're executing the playbooks?10:16
odyssey4methng can you explain how you're doing the execution?10:16
thngah ok. Thats why what I modifed in the lxc_hosts/defaults/main.yml didnot work10:17
odyssey4methng you do not have to change anything in the code tree - we've designed the entire system to ensure that configuration for everything can be done in /etc/openstack_deploy and not in the code tree10:18
thngas in the guide for AIO : bootstrap-ansible.sh , bootstrap-aio.sh and run-playbooks10:18
odyssey4methng once you have done those first two once, you do not need to do it again10:18
thngbut I only reran run-playbooks. 2 first commands I did only once10:18
odyssey4mealso run-playbooks should not be executed more than once10:18
thngodyssey4me: I changed in lxc_hosts role because you told me this one yesterday : https://github.com/openstack/openstack-ansible-lxc_hosts/blob/stable/mitaka/defaults/main.yml#L82-L8710:19
thngSo for copying a file in lxc image cache, the one to be modified is user_conf_files.yml10:20
*** javeriak has joined #openstack-ansible10:22
*** McMurlock has quit IRC10:22
openstackgerritMerged openstack/openstack-ansible-security: Add key fields to audit rules  https://review.openstack.org/32828810:30
*** afred312 has joined #openstack-ansible10:31
*** afred312 has quit IRC10:35
*** admin0 has quit IRC10:35
*** thorst has joined #openstack-ansible10:35
*** admin0 has joined #openstack-ansible10:36
openstackgerritMerged openstack/openstack-ansible-security: Docs: Add developer guide for security role  https://review.openstack.org/32549910:42
*** thorst has quit IRC10:44
*** admin0 has quit IRC10:50
openstackgerritMerged openstack/openstack-ansible-os_ceilometer: Cleanup/standardize usage of tags  https://review.openstack.org/32833010:50
*** admin0 has joined #openstack-ansible10:50
*** admin0 has quit IRC10:55
openstackgerritMerged openstack/openstack-ansible-memcached_server: DOC - Adopting the common role documentation pattern  https://review.openstack.org/32831110:56
openstackgerritMerged openstack/openstack-ansible-memcached_server: Update meta to show support for Xenial and CentOS  https://review.openstack.org/32831210:56
openstackgerritMerged openstack/openstack-ansible: Use correct keystone auth parameters  https://review.openstack.org/32843010:57
openstackgerritMerged openstack/openstack-ansible: Use correct keystone auth parameters  https://review.openstack.org/32843210:58
odyssey4methng I referred to the code in the role as a point of reference. I didn't mean that you should edit it. :)11:07
*** permalac has quit IRC11:09
odyssey4meso we need https://review.openstack.org/329136 finalised and merged to unblock the gate :/11:14
odyssey4mealextricity25 ^ :)11:14
odyssey4memhayden until the two lxc_* role patches merge, the time for the integrated build patch will not reflect the build with those patches included re: https://review.openstack.org/#/q/status:open+topic:overlayfs-implementation11:16
*** admin0 has joined #openstack-ansible11:28
*** weshay has joined #openstack-ansible11:30
*** schwicht has joined #openstack-ansible11:31
*** retreved has joined #openstack-ansible11:36
*** karimb has quit IRC11:36
*** thorst has joined #openstack-ansible11:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Implement base container for overlayfs-backed containers  https://review.openstack.org/32902911:42
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Docs: Add role development maturity guidelines  https://review.openstack.org/32710411:43
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_container_create: Implement overlayfs-backed containers  https://review.openstack.org/32904511:43
*** thorst_ has joined #openstack-ansible11:43
*** thorst has quit IRC11:47
*** thorst_ is now known as thorst11:49
*** admin0 has quit IRC11:50
mhaydenodyssey4me: that helps to explain things12:07
mhaydenmorning folks12:07
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_container_create: Implement overlayfs-backed containers  https://review.openstack.org/32904512:07
*** faizy_ has quit IRC12:07
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Ensure that AIO extra indexes config is well formed  https://review.openstack.org/32940612:09
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Allow AppArmor to be enabled  https://review.openstack.org/32940812:12
*** markvoelker has joined #openstack-ansible12:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add check/audit to gate testing  https://review.openstack.org/32849712:13
* mhayden kicks himself again for forgetting that the gate doesn't install recommended packages12:14
*** psilvad has joined #openstack-ansible12:16
*** psilvad has quit IRC12:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Use standard check for systemd  https://review.openstack.org/32941712:21
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure aide-common package is installed  https://review.openstack.org/32917712:22
*** woodard_ has joined #openstack-ansible12:24
*** zerda2 has quit IRC12:24
*** psilvad has joined #openstack-ansible12:26
*** woodard has quit IRC12:27
*** smatzek has joined #openstack-ansible12:27
*** klamath has joined #openstack-ansible12:27
*** klamath has quit IRC12:28
*** klamath has joined #openstack-ansible12:29
*** psilvad has quit IRC12:31
*** berendt has quit IRC12:32
*** afred312 has joined #openstack-ansible12:32
*** psilvad has joined #openstack-ansible12:35
*** alikins has joined #openstack-ansible12:35
*** woodard_ has quit IRC12:35
*** admin0 has joined #openstack-ansible12:36
*** woodard has joined #openstack-ansible12:36
*** afred312 has quit IRC12:37
*** psilvad has quit IRC12:39
mhaydenit seems like something systemd-related changed in the gate12:41
mhaydenor i'm blind12:41
*** johnmilton has joined #openstack-ansible12:41
mhaydennevermind, i'm an idiot12:42
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Use standard check for systemd  https://review.openstack.org/32941712:45
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure aide-common package is installed  https://review.openstack.org/32917712:45
*** javeriak has quit IRC12:46
*** psilvad has joined #openstack-ansible12:47
pjm6i wanted to test rabbitmq HA, but I only have a controller node (for now) and OSA is deployed12:48
pjm6can I just apply this12:48
pjm6http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-initial.html12:48
pjm6with affinity rabbit_mq_container wtih 312:48
pjm6and finish reruning all playbooks12:48
pjm6or I need to make an extra steP?12:48
*** Ashana has joined #openstack-ansible12:49
*** jamesdenton has joined #openstack-ansible12:50
*** admin0 has quit IRC12:54
*** admin0 has joined #openstack-ansible12:59
odyssey4memhayden you could implement the use of the 'install_recommends' option for the apt task if you want to reduce your package list?13:00
mhaydenodyssey4me: thanks for the quick looks this mornin'13:00
mhaydenodyssey4me: i thought about that, but i only needed one extra13:00
odyssey4mepjm6 yep, if you increase the affinity then it'll build the specified number of containers on the host13:00
mhaydeni emailed the ML about the osa-differ script13:01
mhaydenhopefully we can find a home for it13:01
*** chandanc has joined #openstack-ansible13:02
pjm6odyssey4me, yeah, but i need to run the setup-hosts, setup-infraestructure and then setup-openstack, right?13:03
odyssey4memhayden oh neat - like the diff tool... it'd be nice to improve it to also output the commit diff for the roles13:04
mhaydenodyssey4me: that's pretty doable13:04
odyssey4mepjm6 if you want everything to actually use the rabbit cluster, yes13:04
pjm6thanks odyssey4me  :) i was afraid that could break something if I do that after the deploy, or an extra step needed13:04
odyssey4mepjm6 you can make that a little shorter by just executing setup-hosts, rabbitmq-install and setup-openstack13:04
pjm6thanks odyssey4me  =D will do that13:05
odyssey4memhayden and yeah, we need some scaffolding in the ops repo13:05
odyssey4meand I do think that repo is where it belongs13:05
odyssey4meI'll reply to your ML13:05
*** alikins has quit IRC13:08
*** messy has joined #openstack-ansible13:08
*** alikins has joined #openstack-ansible13:10
*** alikins has quit IRC13:11
*** afred312 has joined #openstack-ansible13:14
mhaydenthanks, odyssey4me13:16
*** oneswig has quit IRC13:17
*** oneswig has joined #openstack-ansible13:19
*** oneswig has quit IRC13:19
*** kylek3h has joined #openstack-ansible13:19
*** TxGirlGeek has joined #openstack-ansible13:24
*** silentpj has joined #openstack-ansible13:27
*** jthorne has joined #openstack-ansible13:29
*** TxGirlGeek has quit IRC13:31
*** admin0 has quit IRC13:31
*** admin0 has joined #openstack-ansible13:32
*** bsv has quit IRC13:33
*** smatzek has quit IRC13:40
*** TxGirlGeek has joined #openstack-ansible13:43
*** faizy_ has joined #openstack-ansible13:44
openstackgerritMerged openstack/openstack-ansible-os_cinder: Cinder volume type creation race condition  https://review.openstack.org/32932513:45
*** jayc has joined #openstack-ansible13:45
*** berendt has joined #openstack-ansible13:46
*** M00nr41n has quit IRC13:49
admin0hi .. i was asking someone how awesome ansible playbooks are . .and he also got stuck on the ssl thing  ..  document followed: http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-haproxy.html#securing-haproxy-communication-with-ssl-certificates  . and forwarded to http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-sslcertificates.html  .. both page just says to include the13:50
admin0haproxy_ssl   keystone_ssl lines .. but keystone_ssl is undefined and haproxy_ssl is false by default13:50
admin0so kind of stuck :)13:50
*** admin0 has quit IRC13:59
*** pacoblox has joined #openstack-ansible14:00
*** pacoblox has left #openstack-ansible14:00
*** admin0 has joined #openstack-ansible14:00
*** vnogin has joined #openstack-ansible14:01
*** admin0 has quit IRC14:02
automagicallymorning all14:02
*** admin0 has joined #openstack-ansible14:02
*** smatzek has joined #openstack-ansible14:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ops: Add base test scaffolding for repo  https://review.openstack.org/32946314:03
*** admin0 has quit IRC14:03
*** admin0 has joined #openstack-ansible14:04
*** mgariepy has quit IRC14:07
*** galstrom_zzz is now known as galstrom14:08
mhaydenautomagically: thanks for unblocking the security role gate, sir14:09
automagicallynp14:10
mhaydenfriendly reminder: please add your details to the mid-cycle etherpad! https://etherpad.openstack.org/p/osa-midcycle-newton14:10
openstackgerritMerged openstack/openstack-ansible: Docs: Add role development maturity guidelines  https://review.openstack.org/32710414:10
openstackgerritMerged openstack/openstack-ansible-security: Use standard check for systemd  https://review.openstack.org/32941714:12
openstackgerritMerged openstack/openstack-ansible-security: Ensure aide-common package is installed  https://review.openstack.org/32917714:12
openstackgerritMerged openstack/openstack-ansible-security: Restart auditd after running augenrules  https://review.openstack.org/32827914:12
*** jmckind has joined #openstack-ansible14:13
*** admin0 has quit IRC14:13
*** admin0 has joined #openstack-ansible14:14
*** KLevenstein has joined #openstack-ansible14:17
*** faizy_ has quit IRC14:17
*** mgariepy has joined #openstack-ansible14:19
*** retreved has quit IRC14:20
*** spotz_zzz is now known as spotz14:23
*** kstev has joined #openstack-ansible14:23
*** Mudpuppy has joined #openstack-ansible14:24
*** admin0 has quit IRC14:24
*** admin0 has joined #openstack-ansible14:24
*** retreved has joined #openstack-ansible14:26
*** kstev1 has joined #openstack-ansible14:27
*** kstev has quit IRC14:30
odyssey4medoes anyone have any idea when alextricity25 will be around? we need https://review.openstack.org/329136 updated pronto to unblock the gate14:31
alextricity25I"m here!14:32
alextricity25I'm addressing the issue now :)14:32
odyssey4meeither that or we'll have to revert the aodh role change to use mongo again, or at least allow both options to work14:32
odyssey4meah, thanks alextricity2514:32
openstackgerritMichael Gugino proposed openstack/openstack-ansible-os_nova: Implement Xenial Support  https://review.openstack.org/32404514:32
evrardjpdear cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino, ametts, v1k0d314:33
evrardjpn, severion, bgmccollum, darrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec14:33
evrardjpthe osa bug triage will start in 1h30’. Please  have a look at the bug list before starting: https://bugs.launchpad.net/openstack-ansible/+bugs?search=Search&field.status=New14:33
v1k0d3nhey mhayden and odyssey4me...have you guys heard any of the buzz around HAProxy CVE-2016-5360? is this project free of this vulnerability? i tbhink it only impacts v 1.6-1.6.5.14:33
evrardjpthank you14:33
v1k0d3no/ hey all.14:34
automagicallyThx for the reminder evrardjp14:34
evrardjpyw14:34
*** gsteinmuller has joined #openstack-ansible14:34
evrardjpI think this is a good way to get acquainted (if that's the correct term) to the bugs14:34
odyssey4mev1k0d3n from a master-built AIO I'm running it has 1.5.18 installed, so I don't think we're affected on trusty at least14:35
odyssey4mev1k0d3n thanks for the heads-up though14:35
v1k0d3nthat's what i was thinking too.14:35
v1k0d3nok, cool.14:35
*** fignew has quit IRC14:36
gsteinmullerhey there! So, I'm just wondering if it's possible to deploy OSA in only one host (not using aio). I have a machine and I deployed 5 containers (deploy, infra1-2-3, storage and compute resides on metal)14:36
gsteinmullerbut networking part is confusing me in this scenario14:37
odyssey4megsteinmuller yes it is, although you obviously won't have any real HA14:38
mhaydenhughsaunders: we might be able to try a video conference option for you14:38
mhaydeni wonder if we can dig up a mic to use so the audio won't be awful14:39
evrardjp16.04 may be affected because we run from standard os packages14:39
evrardjpfor haproxy14:39
evrardjpIIRC14:39
odyssey4megsteinmuller you shouldn't create containers on the infra host - the playbooks will create all the containers on the host themselves14:39
hughsaundersmhayden: don't worry too much, I'm sure odyssey4me can spread the knowledge over here.14:39
*** fignew has joined #openstack-ansible14:40
*** BjoernT has joined #openstack-ansible14:40
odyssey4megsteinmuller if you want a multi-node setup on one host then use VM's14:40
admin0i do not see any i can pickup14:40
prometheanfireyo14:41
*** KLevenstein has quit IRC14:42
*** pacoblox has joined #openstack-ansible14:43
v1k0d3nevrardjp: interesting...haven't deployed 16.04 yet. our current/recent deployment defaulted to 1.4.24.14:43
*** admin0 has quit IRC14:43
evrardjpif there is a security vulnerability it should be fixed by ubuntu anyway14:44
openstackgerritChristopher Hultin proposed openstack/openstack-ansible-os_magnum: Moving config settings to magnum.conf.j2  https://review.openstack.org/32948414:44
evrardjpwe are basically consumers, so we just have to wait14:44
chris_hultinjmccrory: Regarding your comment from last night - https://review.openstack.org/32948414:45
odyssey4megsteinmuller in fact, you may want to use https://gist.github.com/cloudnull/f71e3078f9a0018017c3 (or at least use it as a base) - it sets up multiple VM's on a host and wires everything together14:45
v1k0d3nevrardjp: there is a patch that can be applied already available to 1.6+ versions.14:45
evrardjpv1k0d3n: you mean upstream patch, or ubuntu patch?14:46
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: [POC] Remove most I/O inventory tests  https://review.openstack.org/32920114:46
*** admin0 has joined #openstack-ansible14:47
v1k0d3nevrardjp: upstream for haproxy: http://git.haproxy.org/?p=haproxy-1.6.git;a=commit;h=60f01f8c89e4fb2723d5a9f2046286e699567e0b14:48
evrardjpoh ok14:51
gsteinmullerodyssey4me actually the ideia of creating the 5 containers (deploy, infras...) is to simulate the real requirements of OSA.14:51
evrardjpwe have to wait for ubuntu's package14:51
evrardjpfor 16.04 I mean14:51
*** TxGirlGeek has quit IRC14:51
evrardjplet me check because it looks old14:52
gsteinmullersince I have only one host and I'd like to deploy a real osa scenario for tests, I sliced the host in containers simulating a real deployment scenario14:52
alextricity25odyssey4me: stevelle: I'm running the aodh playbooks on my local env. now to test and will make a new patch set soon14:52
gsteinmullerI read in the osa-dev documentation that OSA all-in-one is only recommended for development purposes14:53
gsteinmullerthat's why I'm trying to simulate "real" OSA deployment on one host14:54
gsteinmullerand my enviorement will not grow, that's another reason to use OSA to deploy openstack in one host, for practical purposes14:55
evrardjpv1k0d3n: not fixed14:55
*** cloader89 has joined #openstack-ansible14:56
evrardjpthe ppa I am generally using has fixed it14:56
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible: Configuring AODH DB now that it uses MySQL.  https://review.openstack.org/32913614:56
evrardjpmaybe you may want to use that too v1k0d3n14:57
*** sacharya has joined #openstack-ansible14:58
*** phalmos has joined #openstack-ansible15:00
*** pjm6 has quit IRC15:00
palendaegsteinmuller, Development and demonstration. The AIO's about as real as you'll get on a single host, but a single host for the whole of OpenStack isn't "real" in terms of production15:00
*** Drago has joined #openstack-ansible15:01
*** sacharya_ has joined #openstack-ansible15:01
*** jayc has quit IRC15:01
*** pjm6 has joined #openstack-ansible15:01
palendaeI'm not sure if lxc lets you do containers in containers15:01
*** Drago has quit IRC15:01
*** TxGirlGeek has joined #openstack-ansible15:01
*** Drago has joined #openstack-ansible15:02
*** pacoblox1 has joined #openstack-ansible15:02
palendaeIf you want to simulate multiple hosts, then https://gist.github.com/cloudnull/f71e3078f9a0018017c3 is the best I know of at the moment15:02
gsteinmullerpalendae, indeed, I dont know too if it's possible do deploy containers inside containers...15:03
gsteinmullerI'll try to use cloudnull15:03
*** sacharya has quit IRC15:04
*** pacoblox has quit IRC15:05
odyssey4mealextricity25 review feedback https://review.openstack.org/32913615:05
*** oneswig has joined #openstack-ansible15:06
*** admin0 has quit IRC15:06
*** weezS has joined #openstack-ansible15:08
*** admin0 has joined #openstack-ansible15:09
*** pacoblox1 has quit IRC15:09
v1k0d3nevrardjp: do you have some more details?15:10
evrardjpwhat do you mean?15:10
*** pjm6 has quit IRC15:10
evrardjpyou want the ppa url?15:10
evrardjpI am generally using VBernat ppa15:10
*** oneswig has quit IRC15:11
odyssey4mev1k0d3n if you enable haproxy_ssl the ppa is automatigcally added when the haproxy playbook runs15:12
*** pjm6 has joined #openstack-ansible15:12
odyssey4meI think - let me verify15:13
*** pacoblox has joined #openstack-ansible15:13
admin0palendae: there is another way to also do multiple(alomst real ) deployement on a single host - https://www.openstackfaq.com/openstack-private-cloud-architecture/  .. it just needs a good server15:13
*** saneax is now known as saneax_AFK15:13
odyssey4mev1k0d3n yep: https://github.com/openstack/openstack-ansible/blob/stable/mitaka/playbooks/roles/haproxy_server/tasks/main.yml#L18-L1915:14
*** jayc has joined #openstack-ansible15:15
odyssey4mev1k0d3n the ppa in question: https://github.com/openstack/openstack-ansible/blob/stable/mitaka/playbooks/roles/haproxy_server/defaults/main.yml#L22-L2515:15
admin0anyone from rackspace amsterdam here ?15:15
v1k0d3nah, I see!15:16
v1k0d3nodyssey4me: thank you. that puts things together for me now.15:16
*** TxGirlGeek has quit IRC15:16
*** phalmos has quit IRC15:17
admin0there is a openstack meetup in rackspace amsterdam .. guess what I am going to present there :D how do do openstack with ansible :D15:17
admin0should have been someone from rackspace doing that15:17
*** TxGirlGeek has joined #openstack-ansible15:19
spotzadmin0: If you fly me there I will!15:20
admin0but what exactly does rackspace belenux does ? no techies here ? just sales ?15:21
admin0flying odyssey4me is cheaper ( from UK ) :D15:21
admin0but i am the third party here15:21
spotzadmin0: Well yeah and more knowledgeable but....:)15:22
admin0maybe i can drop in my resume there :) saying hey guys .. need help .. find me locally here :)15:22
spotzhehehe15:23
admin0i will publically thank everyone @ rackspace for making the ansible playbooks awesome15:25
admin0oops .. spotz is here .. publically => publicly  .. ( quick before she sees it )15:25
spotzheheh15:26
odyssey4mehaha admin0 good to hear you're presenting :)15:29
*** javeriak has joined #openstack-ansible15:29
admin0openstack private cloud in less than 10 steps - that is the heading15:30
admin01. prepare servers  2. prepare networking   :)15:30
admin0and i go into detail on how flexible is ansible on those parts15:30
admin0one node setup, multi node setup, 100 node setup, ip guidelines,       same for networking, single card, multiple card, bonds etc15:31
admin0if you guys have a presentation on ansible , that would be great as well15:31
admin0its more like a rackspace ansible presentation just without the rackspace branded slides :)15:32
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ops: Add base test scaffolding for repo  https://review.openstack.org/32946315:32
*** TxGirlGeek has quit IRC15:35
*** TxGirlGeek has joined #openstack-ansible15:36
odyssey4meadmin0 presentations I've done are all up on http://www.slideshare.net/JessePretorius - you can also look at the Vancouver, Tokyo and Austin summit videos for presentations that were recorded15:36
admin0thanks :)15:37
admin0i will try to come up with what i want to present and then maybe upload it somewhere for a view/comments :)15:38
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Implement Xenial Support  https://review.openstack.org/32404515:38
*** permalac has joined #openstack-ansible15:38
*** Drago1 has joined #openstack-ansible15:39
*** adrian_otto has joined #openstack-ansible15:39
*** Drago1 has joined #openstack-ansible15:39
*** Drago has quit IRC15:40
*** TxGirlGeek has quit IRC15:40
*** TxGirlGeek has joined #openstack-ansible15:42
*** admin0 has quit IRC15:42
*** TxGirlGeek has quit IRC15:44
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible-os_aodh: Changing Naming Convention of DB Vars  https://review.openstack.org/32953715:45
*** TxGirlGeek has joined #openstack-ansible15:45
*** TxGirlGeek has quit IRC15:48
*** M00nr41n has joined #openstack-ansible15:49
*** jayc has quit IRC15:51
*** chandanc has quit IRC15:52
*** Drago1 has quit IRC15:52
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-security: Add support for Xenial and CentOS 7 to the Vagrantfile  https://review.openstack.org/32733115:54
*** silentpj has quit IRC15:55
*** jmccrory_ has joined #openstack-ansible15:57
evrardjphello everyone16:00
evrardjpcloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino, ametts, v1k0d3n, se16:00
evrardjpverion, bgmccollum, darrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec16:00
evrardjpit's bug triage time!16:00
evrardjphere is the list for today16:01
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bugs?search=Search&field.status=New16:01
evrardjpstarting from the bottom16:01
*** thorst is now known as thorst_afk16:01
d34dh0r53o/16:01
evrardjpthe first one for today is https://bugs.launchpad.net/openstack-ansible/+bug/159206716:01
openstackLaunchpad bug 1592067 in openstack-ansible "Liberty manual upgrade steps missing a few playbooks" [Undecided,New] - Assigned to Jean-Philippe Evrard (jean-philippe-evrard)16:01
evrardjpsimple I just assigned it to me :D16:02
evrardjpI confirm what jmccrory has seen16:02
rromans.16:03
evrardjpI'd tag it as "Medium" importance, everyone ok with that?16:03
*** Drago has joined #openstack-ansible16:03
stevelleI might say high, or med16:03
evrardjpI was hesitating with high, due to the fact we don't force ppl to use the upgrade script, so the doc is kind of a reference16:04
*** TxGirlGeek has joined #openstack-ansible16:04
*** jayc has joined #openstack-ansible16:04
evrardjpOk for high then16:04
d34dh0r53I would vote for high, upgrades have quite a bit of visibility16:04
evrardjpgood16:05
evrardjpquorum reached, high16:05
evrardjpnext one is: https://bugs.launchpad.net/openstack-ansible/+bug/159018516:05
openstackLaunchpad bug 1590185 in openstack-ansible ""V-38496 - Gather problematic system accounts" check fails on RHEL 7" [Undecided,New]16:05
*** mummer has joined #openstack-ansible16:05
evrardjpmhayden: are you there?16:05
*** mikelk has quit IRC16:06
d34dh0r53RHEL 7?16:06
evrardjpyes, it's for the security role only16:06
evrardjpapparently16:06
d34dh0r53ahh16:06
d34dh0r53have had my head in a hole for a couple of weeks16:06
d34dh0r53I just panged major16:06
mhaydenWHAT DID I DO16:06
mhaydenokay i'm here now16:07
mhaydenwas talking to cloader8916:07
evrardjpin launchpad, the roles from the openstack-ansible umbrella all fall into the openstack-ansible launchpad project16:07
mhaydenevrardjp: i'll take that ticket16:07
evrardjpmhayden: it was just to know if you were familiar with the issue16:07
mhaydeni am -- he's using the default ansible/jinja2 in RHEL 716:07
mhaydenwhich will cause a "bad time"16:07
stevellelow? has a workaround16:07
mhaydenlow should be fine16:07
evrardjpok good16:07
evrardjpConfirmed/Triaged?16:08
mhaydenconfirmed16:08
evrardjpgood that's settled!16:08
evrardjpnext one is https://bugs.launchpad.net/openstack-ansible/+bug/159016616:08
openstackLaunchpad bug 1590166 in openstack-ansible "Rejoining/recovery of galera cluster fails" [Undecided,New]16:08
evrardjpThe impact seems quite high IMO16:10
evrardjpthe importance is difficult to determine, because the occurence is seldom (who stays with something broken for days?)16:10
*** michaelgugino has joined #openstack-ansible16:10
evrardjpIt's worth high/medium importance for me16:11
d34dh0r53evrardjp: they probably didn't know it was down :/16:11
evrardjphas someone encountered this bug?16:11
odyssey4me+1 to high16:11
odyssey4menot confirmed yet though, we need to get someone to test to confirm16:11
evrardjpthat was my question16:12
evrardjpbecause nobody confirmed this, I'll leave it in new state16:12
d34dh0r53ok16:13
d34dh0r53+116:13
evrardjpwe can go over next week16:13
evrardjpok next: https://bugs.launchpad.net/openstack-ansible/+bug/159008216:13
openstackLaunchpad bug 1590082 in openstack-ansible "update virtualenv path fails when neutron_plugin_type: ml2.ovs is set" [Undecided,New]16:13
*** zerda2 has joined #openstack-ansible16:14
odyssey4mewe want OVS to be in a working state for Newton, so I'd say medium/high16:14
automagically+116:15
evrardjpI'd be inclined to say that if we had ovs gating, we could have seen that, and breaking the gates could have mean critical status16:15
evrardjpso I'd be inclined to say high16:15
evrardjphowever, we need someone to confirm it16:15
evrardjpNew/High ok for everyone?16:15
*** thng has quit IRC16:16
*** permalac has quit IRC16:16
evrardjpSomeone want to take it?16:16
openstackgerritMajor Hayden proposed openstack/openstack-ansible: [WIP] Update lists of skipped security role tasks  https://review.openstack.org/32773216:16
evrardjpwants*16:16
jmccrorythe section where he's showing a failure can use some work, i've seen that before if directories/venvs are manually deleted or role run is canceled at certain points16:16
jmccrorymight not be directly caused by choosing ovs16:17
automagicallyjmccrory: Could have been a result of a role cancel and re-run16:17
evrardjpjmccrory: you mean we have an idempotency issue ?16:17
automagicallyI know Greg is attempting to redo this work currently, so perhaps he can confirm the bug16:17
evrardjpok cool16:17
jmccroryevrardjp: if the run is canceled during venv unpack, yes16:17
evrardjpthe cancel should be forbidden! :D16:18
evrardjpanother story, yes16:18
stevellesounds like an issue with the module16:18
evrardjpI'll leave it as new for confirmation if it's an ovs bug or a user issue16:19
evrardjpI'll leave it unassigned too16:19
evrardjpok next16:19
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/158616016:19
openstackLaunchpad bug 1586160 in openstack-ansible "Keystone direct import of uuid.Provider deprecated warning" [Undecided,New] - Assigned to Andrew Meserole (andrew-meserole)16:19
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Update lists of skipped security role tasks  https://review.openstack.org/32773216:19
evrardjpImportance low IMO16:19
*** javeriak_ has joined #openstack-ansible16:20
evrardjpsigmavirus24: did you confirm this? you seem to have assigned it16:20
*** javeriak has quit IRC16:20
evrardjpNo answer, let's go through the classification then16:21
evrardjpStatus: New, Importance: Low ?16:21
sigmavirus24evrardjp: I did confirm that log message16:21
evrardjpcool! thanks!16:21
sigmavirus24evrardjp: it should have been closed by messy as invalid because it's only for RPCO though16:21
evrardjpok16:22
evrardjpI'll mark it16:22
evrardjpas invalid16:22
sigmavirus24thanks evrardjp16:22
evrardjpnext one is: https://bugs.launchpad.net/openstack-ansible/+bug/158615916:23
openstackLaunchpad bug 1586159 in openstack-ansible "Keystone admin_token_auth middleware deprecation" [Undecided,New]16:23
evrardjpwe are basically consuming the file, so I'm not sure if it's really osa concern16:24
evrardjpI mean, it's a concern, but it starts to be an opinion if we change the defaults16:24
stevellesounds like something RPCO wants to look at addressing then16:25
stevellesince they have opinions16:25
evrardjpSo the question would be: Confirmed/Won't fix? And to which importance?16:26
evrardjpstevelle: I fully agree16:26
stevelleleaning toward wont16:26
evrardjpit's maybe worth documenting, which would then require a proper "fix"16:26
evrardjpI am waiting for your opinions16:27
evrardjpI don't want to bear the responsability of burying this :p16:27
*** scarlisle has quit IRC16:28
evrardjpI'll tag it as Wishlist, and document the two paths: change the defaults/documents in the Bug. We could discuss this in the community meeting if required16:29
stevellegood enough16:29
odyssey4meas you'll see in the proposed review I already indicated that it should not be fixed - we consume the upstream file verbatim with as little editing as possible16:29
odyssey4meI would suggest that any deployers that don't want that error use config_overrides.16:30
odyssey4mewe can perhaps add an 'issue' release note indicating that this is a known issue which will be resolved when upstream deletes that content.16:30
evrardjpfine for me16:31
evrardjpImportance wishlist, status confirmed + message to explain a release note should be delivered16:31
odyssey4me+116:31
*** TxGirlGeek has quit IRC16:31
evrardjpsomeone for writing the reno ?16:32
odyssey4meany volunteers to review this quickly? https://review.openstack.org/32946316:32
evrardjpOk next16:33
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/158560416:33
openstackLaunchpad bug 1585604 in openstack-ansible "horizon_developer_mode does not work" [Undecided,New]16:33
jmccroryevrardjp: i can take that16:33
evrardjpI'm losing momentum, let's go :D16:33
automagicallyodyssey4me: done16:33
evrardjpok I assigned previous issue to you jmccrory, thanks!16:34
openstackgerritMerged openstack/openstack-ansible-ops: Add base test scaffolding for repo  https://review.openstack.org/32946316:36
evrardjpjmccrory: you seem to have analysed this, you want to assign that to you?16:36
odyssey4meI see that jmccrory looked into the horizon developer_mode thing16:36
jmccrorysure, think it can be closed though.16:36
jmccroryjust need -e pip_install_options="--isolated" when running specific OS playbook16:36
jmccroryto ignore locked pip repo16:36
odyssey4meyeah, not sure we should fix it as this was an unusual circumstance16:36
evrardjpok you mean invalid ?16:37
jmccroryyeah, it works once that extra var is used16:37
evrardjpok16:37
evrardjpunderstood16:37
odyssey4meI suppose we could do something like detect developer_mode and insert that pip install option... but then we'd probably break other environments which are doing things like using an internal pypi mirror16:37
evrardjpWon't fix16:37
odyssey4meso yeah, I don't think it should be fixed - there's enough in the comment jmccrory did to help anyone who gets stuck in this situation16:38
jmccroryyep, in that situation, not going to work unless any newer packages required are mirrored also16:38
gsteinmullerodyssey4me: just wondering what would be the difference between deploying an OSA target host in container and VM. The only thing that goes in my mind is overhead16:39
evrardjpnext16:39
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/158524316:40
openstackLaunchpad bug 1585243 in openstack-ansible "Kilo upgrade to Liberty died on repo build process" [Undecided,New] - Assigned to Xin (zxuuzx)16:40
odyssey4megsteinmuller there are some things that can't run properly in a container - for example nova-compute won't be able to make iscsi connections from inside a container16:40
jmccroryhttps://review.openstack.org/#/c/328485/ should address16:40
odyssey4meyeah, I'm wondering whether we shouldn't bind mount the repo package folder onto the host so that the build wheels aren't lost16:41
odyssey4meI do think that it'd be a good practise if we move towards deleting and rebuilding containers on major upgrades (at least). It'll kill a ton of issues and also means we don't have to care so much about leaving things behind (users, old confs, etc).16:42
*** scarlisle has joined #openstack-ansible16:43
evrardjpI agree with odyssey4me16:43
evrardjpbut that's a topic for a Thursday16:43
evrardjp:p16:43
odyssey4meyep16:43
evrardjpor is it?16:43
evrardjpok next16:44
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/157991916:44
openstackLaunchpad bug 1579919 in openstack-ansible "msgpack pip issue after Juno to Kilo upgrade" [Undecided,New] - Assigned to Andrew Meserole (andrew-meserole)16:44
odyssey4mestill waiting for a confirmation there16:45
evrardjpNot confirmed yet16:45
evrardjpI'll leave it's status to new then16:46
evrardjpI'll not update the importance, to keep the aging as it is16:46
evrardjpIt is already assigned16:46
evrardjptherefore we are at...16:46
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/158380416:46
openstackLaunchpad bug 1583804 in openstack-ansible "Security role should require an email to receive root's mail" [Wishlist,New]16:46
gsteinmulleri see... Actually I've been planning to only run in containers the Infrastructure Host Control Plane and deployment host. Makes sense to me that running nova-compute inside a container is defnetly not a good ideia16:47
*** chandanc has joined #openstack-ansible16:47
evrardjpShouldn't we add this as a discussion topic for next meeting mhayden?16:48
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/158380416:48
openstackLaunchpad bug 1583804 in openstack-ansible "Security role should require an email to receive root's mail" [Wishlist,New]16:48
stevellegsteinmuller: at least one of horizon and keystone should be inside a container, as they both use mod_wsgi and the roles don't blend well if deployed on metal16:48
evrardjpLast one is also for mhayden16:49
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/158378816:49
openstackLaunchpad bug 1583788 in openstack-ansible "Security role should use pam_faillock for V-38501 on CentOS" [Wishlist,New] - Assigned to Major Hayden (rackerhacker)16:49
odyssey4megsteinmuller yeah, it's not a standard way of deploying for us - you can give it a go... but I expect that you're likely to hit a few issues because we do quite a few host tweaks that a container may not be able to do16:49
evrardjpI think mhayden is using launchpad as its todo list :D16:50
evrardjpI think we are all done for today16:50
evrardjpThanks for your presence, and your patience :D16:50
odyssey4methanks evrardjp16:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum: Moving config settings to magnum.conf.j2  https://review.openstack.org/32948416:52
*** chandanc has quit IRC16:53
*** weezS has quit IRC16:54
*** Drago has quit IRC17:01
gsteinmullerodyssey4me I'll give a try in some scenarios... The only thing that confuses me in deploying in only one host is the networking architeture that is designed to real HA.17:01
gsteinmullerdo you think that would be good to run a non-scalable cloud using AIO?17:01
*** Drago has joined #openstack-ansible17:02
*** Drago has quit IRC17:02
*** Drago has joined #openstack-ansible17:03
odyssey4megsteinmuller you can easily deploy the whole lot on a single host much like the AIO does but adapt the networking so that it doesn't use the fake NIC... then you'll be able to grow it to more hosts later if you want to... it will run like a bit of a dog and the contention between the instances and control plane services will probably cause some horrible performance/reliability issues... but it can be done17:03
gsteinmulleror try cobbler-osa-multi-aio17:03
odyssey4meideally you should split out compute to another host at least17:04
odyssey4meI assume that you won't be deploying swift either, and you should probably not deploy aodh/ceilometer17:04
gsteinmulleryeah, that's another issue... I'll need to deploy a compute in the same host of control plane...17:04
gsteinmullerI want to deploy a ceph cluster too... It's horrible in terms of HA17:05
odyssey4meit'll work, but don't expect it to perform very well - you can use some of the AIO tricks to reduce the control planes CPU/memory consumption a bit17:05
odyssey4merunning ceph on the same host will not be tenable on the same host as where you run instances17:06
odyssey4methe CPU contention will be way too high to do anything useful17:06
*** cloader89 has quit IRC17:07
*** thorst_afk is now known as thorst17:07
gsteinmullerthe host in question has 32 core with hyperthreading, 128Gb of memory and 32Tb of disk... we expect to run just a few instances17:07
odyssey4meyou could possible do some funky things like cpu pinning and implement limits to ensure that the containers and services can't use more than x cpu's and y ram... that might help17:08
gsteinmullerit has also RAID controller17:08
odyssey4meit's pointless running ceph on the same host anyway... you may as well rather just use the local file store and do backups17:08
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_sahara: Remove pip_lock_down dependency  https://review.openstack.org/32682017:09
gsteinmullermake sense... well, this is not a real production enviorement actually... I'm planning do experiment these different scenarios17:10
*** weezS has joined #openstack-ansible17:10
odyssey4methe cobbler-osa-multi-aio will be much more nifty to build, tear down and rebuild environments because all the changes when building a new environment go into the vm's and are cleaned up when they're rebuild17:12
odyssey4mewhereas if you're experimenting on your host you'll do a *lot* of rebuilding of that host which takes more time17:12
gsteinmullerindeed17:13
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_aodh: Add release note for Mongo to Galera changes  https://review.openstack.org/32957617:13
gsteinmullerodyssey4me thank you! I'll take a look at cobbler-osa-multi-aio. Would be helpful as a reference17:18
*** raddaoui has joined #openstack-ansible17:21
*** cloader89 has joined #openstack-ansible17:26
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-openstack_hosts: Address Ansible bare variable usage  https://review.openstack.org/32959117:30
*** schwicht has quit IRC17:33
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_ceilometer: Implement Ubuntu 16.04 support with SystemD  https://review.openstack.org/32790017:37
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Address Ansible bare variable usage  https://review.openstack.org/32959517:39
*** electrofelix has quit IRC17:41
*** michaelgugino has quit IRC17:44
*** tiagogomes has quit IRC17:47
openstackgerritMerged openstack/openstack-ansible-os_magnum: Moving config settings to magnum.conf.j2  https://review.openstack.org/32948417:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_container_create: Address Ansible bare variable usage  https://review.openstack.org/32960317:50
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure aide-common package is installed  https://review.openstack.org/32960517:54
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Address Ansible bare variable usage in haproxy_server role  https://review.openstack.org/32960617:55
*** admin0 has joined #openstack-ansible17:56
*** KLevenstein has joined #openstack-ansible18:00
*** TxGirlGe_ has joined #openstack-ansible18:05
*** Drago has quit IRC18:07
*** albertcard has joined #openstack-ansible18:09
*** elopez has joined #openstack-ansible18:09
*** elopez is now known as Guest1281418:10
*** admin0 has quit IRC18:10
*** TxGirlGe_ has quit IRC18:10
*** admin0 has joined #openstack-ansible18:10
*** KLevenstein has quit IRC18:11
*** Drago has joined #openstack-ansible18:11
odyssey4me@cloader89 to run the role tests you can build a fresh instance, clone the repo and execute run_tests.sh from the repo root18:13
*** mkrish004c has joined #openstack-ansible18:14
*** scarlisle has quit IRC18:16
mkrish004cHi Guys, i am trying out OSA libert 12.0.9 with ssl, i referred doc from community and modified, but it is failing to connect ...configuration --> http://pastebin.com/cjkD8tVj18:17
mkrish004cthe error is on keystone connection it self18:18
odyssey4memkrish004c that most certainly won't work with haproxy - what LB are you using?18:19
*** jmccrory_ has quit IRC18:19
odyssey4meit looks like you're using haproxy18:19
odyssey4memkrish004c first things first, all those settings are supposed to be set in user_variables.yml - not edited in the roles or anywhere else18:20
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible-os_heat: Implement Xenial Support  https://review.openstack.org/32473318:20
odyssey4memkrish004c secondly with haproxy the only support for ssl endpoints is for keystone - we have changed things in Newton for full support across all endpoints but in prior versions there were client side bugs and other issues18:20
odyssey4memkrish004c thirdly if you made this change after an initial install you will have to change the keystone endpoints yourself by using the openstack CLI - the playbooks will not change existing endpoints that are registered18:21
*** Drago has quit IRC18:22
odyssey4memkrish004c here's a working config including using real certs: https://gist.github.com/odyssey4me/bb79e9f2ae349413dae318:22
odyssey4methat will only implement ssl on the public endpoint with haproxy doing the ssl offloading18:22
*** Drago has joined #openstack-ansible18:23
*** Drago has quit IRC18:23
*** Drago has joined #openstack-ansible18:24
*** cloader89 has quit IRC18:28
mkrish004c@odyssey4me, thanks a lot, i had followed the community document link and tried certain things. I am using HAproxy...18:28
*** jthorne has quit IRC18:29
*** jthorne has joined #openstack-ansible18:29
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Enable human readable logging  https://review.openstack.org/32133318:29
*** KLevenstein has joined #openstack-ansible18:30
mhaydenso i see stevelle's commit to remove pymongo from AODH, but i'm still seeing pymongo trying to be installed in the AODH role in AIO's https://github.com/openstack/openstack-ansible-os_aodh/commit/ae2e55beedf35ffae18bdbbc9966f0ab5b21157518:33
mhaydenhttp://logs.openstack.org/32/327732/8/check/gate-openstack-ansible-dsvm-commit/abc9efd/console.html#_2016-06-14_18_27_41_82218:33
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_ceilometer: Implement Ubuntu 16.04 support with SystemD  https://review.openstack.org/32790018:33
mhaydeni'm wondering if i am missing something, because i am changing something unrelated18:33
*** jthorne has quit IRC18:34
*** johnmilton has quit IRC18:34
stevellemhayden: the integrated is broken because of group_vars in OSA that specify to use mongodb for aodh storage, alextricity25 has a fix up https://review.openstack.org/32913618:35
mhaydenstevelle: ah, that helps -- i missed that18:35
mhaydenthanks18:35
openstackgerritMerged openstack/openstack-ansible-os_sahara: Remove pip_lock_down dependency  https://review.openstack.org/32682018:36
*** jthorne has joined #openstack-ansible18:36
*** bsv has joined #openstack-ansible18:47
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: Introduce a playbook for deploying Gnocchi  https://review.openstack.org/32412518:49
*** weezS has quit IRC18:52
*** scarlisle has joined #openstack-ansible18:54
*** weezS has joined #openstack-ansible18:56
admin0odyssey4me:  does this work for the latest mitaka ? https://gist.github.com/odyssey4me/bb79e9f2ae349413dae318:57
*** berendt has quit IRC18:57
*** berendt has joined #openstack-ansible18:59
*** Drago has quit IRC18:59
*** Drago has joined #openstack-ansible18:59
admin0will give it a try :)19:00
*** Drago1 has joined #openstack-ansible19:01
*** Drago has quit IRC19:01
*** Drago1 has quit IRC19:01
*** Drago has joined #openstack-ansible19:01
*** alikins has joined #openstack-ansible19:02
*** sdake has quit IRC19:06
*** sdake has joined #openstack-ansible19:07
*** adrian_otto has quit IRC19:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Update lists of skipped security role tasks  https://review.openstack.org/32773219:11
openstackgerritAdam Reznechek proposed openstack/openstack-ansible-specs: [WIP] Add multiple CPU architecture support spec  https://review.openstack.org/32963719:15
*** admin0 has quit IRC19:17
*** admin0 has joined #openstack-ansible19:28
*** schwicht has joined #openstack-ansible19:30
*** admin0 has quit IRC19:32
*** M00nr41n has quit IRC19:34
*** admin0 has joined #openstack-ansible19:34
*** admin0 has quit IRC19:34
*** KLevenstein has quit IRC19:40
*** weshay is now known as weshay_mtg19:42
*** KLevenstein has joined #openstack-ansible19:43
openstackgerritMerged openstack/openstack-ansible-os_heat: Implement Xenial Support  https://review.openstack.org/32473319:51
*** TxGirlGeek has joined #openstack-ansible19:51
*** cloader89 has joined #openstack-ansible19:55
cloader89odyssey4me: ok I will try that19:56
openstackgerritMajor Hayden proposed openstack/openstack-ansible-ops: Add script to diff projects in OSA releases  https://review.openstack.org/32846919:56
spotzFastest time from patch to merge yet! Thank mhayden and stevelle on the heat role +2s!19:57
*** adrian_otto has joined #openstack-ansible20:00
*** admin0 has joined #openstack-ansible20:01
mhaydenspotz: thanks for doing the hard part!20:02
*** TxGirlGeek has quit IRC20:02
spotzheheh20:02
mhaydenspotz: want to look at my super tiny docs patch? :P https://review.openstack.org/32913920:03
spotzmhayden that the one you workflow -1'ed yesterday?:)20:03
*** rueben has joined #openstack-ansible20:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix documentation warnings from sphinx  https://review.openstack.org/32913920:03
*** rueben has quit IRC20:03
mhayden^^ that one -- rebased it now that the osas gate is fixed ;)20:03
*** TxGirlGeek has joined #openstack-ansible20:04
spotzmhayden: Yep that's the one:)20:04
mhaydenhaha, that's the one where i learned my lesson on using sed with symlinks :|20:05
spotzbut yes I'll work on it, it'll take a bit. Trying to get some summit talks squared away for submittal20:05
*** alikins has quit IRC20:07
spotzmhayden what you do add : orphan: everywhere?:)20:12
mhaydenspotz: yeah, since they shouldn't ever appear in a toctree20:12
mhaydenalso there was a random "id.rst" in there that didn't belonw20:13
mhaydenbelong20:13
mhaydenbut that *should* clear all of the warnings20:13
*** alikins has joined #openstack-ansible20:14
spotzmhayden ok fixing a little grammar as I go20:15
mhaydenspotz: i think someone might have pushed that one through20:17
mhaydenmy gertty got all locked up20:17
mhaydenah, automagically snuck in there20:17
*** schwicht has quit IRC20:18
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-security: Add support for Xenial and CentOS 7 to the Vagrantfile  https://review.openstack.org/32733120:18
automagicallyYep, grammar fixes can go in a follow-on patch20:18
spotzbah and here I've got 4 files edited so far. Ok I'll grab it from github and refix20:19
automagically:( Sorry spotz20:19
mhaydennice job on the vagrant file updates, automagically20:19
automagicallyEh, just trying to respond to feedback at a reasonable pace20:19
automagicallyAnd wanted to play with the role on CentOS as well20:19
mhaydenautomagically: got any RHEL over there?20:20
automagicallystorage nodes20:20
automagicallyceph20:20
openstackgerritLogan V proposed openstack/openstack-ansible: HAProxy extra endpoints  https://review.openstack.org/32966520:20
spotzautomagically: It's ok, I'll fix grammar when I've got some downtime no one else will notice:)20:20
mpjettaI just completed my first AIO install with OSA, should I be able to ping an instance with a floating IP (172.29.248.5) from the AIO host ?20:23
*** rueben has joined #openstack-ansible20:26
openstackgerritMerged openstack/openstack-ansible-security: Fix documentation warnings from sphinx  https://review.openstack.org/32913920:26
mpjettanm, security rules me thinks20:27
*** weezS has quit IRC20:29
*** TxGirlGeek has quit IRC20:32
*** TxGirlGeek has joined #openstack-ansible20:33
*** pacoblox has quit IRC20:45
*** saneax_AFK is now known as saneax20:46
*** TxGirlGeek has quit IRC20:49
*** smatzek has quit IRC20:49
*** TxGirlGeek has joined #openstack-ansible20:49
*** alikins has quit IRC20:50
*** alikins has joined #openstack-ansible20:51
*** Mudpuppy has quit IRC20:53
*** thorst has quit IRC20:54
*** thorst has joined #openstack-ansible20:55
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix documentation warnings from sphinx  https://review.openstack.org/32967320:55
*** alikins_home has joined #openstack-ansible20:55
*** TxGirlGeek has quit IRC20:55
*** alikins has quit IRC20:56
*** alikins_home has quit IRC20:56
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Cleaning up overrides  https://review.openstack.org/32967420:56
spotzmhayden you're killing me!20:56
*** oneswig has joined #openstack-ansible20:57
*** jmckind has quit IRC20:58
*** alikins has joined #openstack-ansible20:59
*** thorst has quit IRC20:59
*** rueben has quit IRC21:00
mhaydenuh oh21:02
mhaydenWAT did i do21:02
*** darrenc is now known as darrenc_afk21:03
spotzmhayden: your rsts! So far it looks liek a cherry pick of the last one so not doing the grammar changes21:05
*** psilvad has quit IRC21:07
*** alikins has quit IRC21:08
*** smatzek has joined #openstack-ansible21:09
*** TxGirlGeek has joined #openstack-ansible21:09
*** kstev1 has quit IRC21:10
*** alikins has joined #openstack-ansible21:11
*** pacoblox has joined #openstack-ansible21:11
*** javeriak has joined #openstack-ansible21:13
*** javeriak has quit IRC21:13
*** bsv has quit IRC21:14
*** alikins has quit IRC21:15
*** javeriak_ has quit IRC21:16
*** berendt has quit IRC21:18
*** TxGirlGeek has quit IRC21:18
*** TxGirlGeek has joined #openstack-ansible21:19
*** alikins has joined #openstack-ansible21:20
*** KLevenstein has quit IRC21:20
*** alikins has quit IRC21:21
*** smatzek has quit IRC21:22
*** alikins has joined #openstack-ansible21:23
*** TxGirlGeek has quit IRC21:25
*** TxGirlGeek has joined #openstack-ansible21:25
*** adrian_otto has quit IRC21:26
*** berendt has joined #openstack-ansible21:27
*** pacoblox has quit IRC21:31
*** pacoblox has joined #openstack-ansible21:33
*** TxGirlGeek has quit IRC21:34
*** TxGirlGeek has joined #openstack-ansible21:36
*** kstev has joined #openstack-ansible21:39
*** darrenc_afk is now known as darrenc21:54
*** TxGirlGeek has quit IRC21:55
*** messy has quit IRC21:56
*** kylek3h has quit IRC21:56
mrdaMorning21:57
*** cloader89 has quit IRC22:03
*** oneswig has quit IRC22:04
*** alikins has quit IRC22:05
*** alikins has joined #openstack-ansible22:07
*** kstev has quit IRC22:08
*** alikins has quit IRC22:09
*** alikins has joined #openstack-ansible22:11
*** jamesdenton has quit IRC22:12
*** alikins has quit IRC22:12
*** psilvad has joined #openstack-ansible22:15
*** alikins has joined #openstack-ansible22:15
*** spotz is now known as spotz_zzz22:16
*** alikins has quit IRC22:17
*** alikins has joined #openstack-ansible22:21
*** alikins has quit IRC22:23
*** sigmavirus24 is now known as sigmavirus24_awa22:23
*** openstackstatus has quit IRC22:25
*** openstack has joined #openstack-ansible22:28
*** schwicht has joined #openstack-ansible22:28
*** mkrish004c has quit IRC22:29
*** oneswig has joined #openstack-ansible22:29
*** oneswig has quit IRC22:29
*** catintheroof has quit IRC22:30
*** alikins has quit IRC22:30
*** alikins has joined #openstack-ansible22:31
*** galstrom is now known as galstrom_zzz22:35
*** psilvad has quit IRC22:37
*** furlongm_ has joined #openstack-ansible22:37
*** furlongm has quit IRC22:37
*** mummer has quit IRC22:38
*** mummer has joined #openstack-ansible22:40
*** asselin has joined #openstack-ansible22:42
asselinhello, I'm looking for ansible work that finds unmounted attached cinder volumes, and formats/partitions/mounts them so they're ready to go. Any tips where to look?22:43
asselinhttps://github.com/openstack/openstack-ansible seems to be more to use ansible to setup openstack cloud provider22:44
*** Drago has quit IRC22:46
*** alikins has quit IRC22:47
asselinI created the volume and attached it with http://docs.ansible.com/ansible/os_server_volume_module.html22:49
*** admin0 has quit IRC22:49
*** berendt has quit IRC22:49
jmccroryasselin: not sure if that work's been done, #openstack-operators or #ansible could be good places to ask22:55
asselinjmccrory, thanks22:57
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_designate: Remove pip_lock_down dependency  https://review.openstack.org/31388422:57
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_ceilometer: Update Aodh integration  https://review.openstack.org/32970523:01
*** jamesdenton has joined #openstack-ansible23:12
*** jamesden_ has joined #openstack-ansible23:14
*** schwicht has quit IRC23:16
*** jamesdenton has quit IRC23:17
openstackgerritMerged openstack/openstack-ansible-security: Docs: Specify supported distributions  https://review.openstack.org/32907223:19
*** Ashana has quit IRC23:20
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_ceilometer: Add Gnocchi Support  https://review.openstack.org/32971523:22
*** BjoernT has quit IRC23:24
*** adrian_otto has joined #openstack-ansible23:28
*** mummer has quit IRC23:31
*** sdake has quit IRC23:32
*** sdake has joined #openstack-ansible23:33

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!