Monday, 2016-10-10

*** adrian_otto has joined #openstack-ansible00:09
*** adrian_otto has quit IRC00:23
*** gouthamr has joined #openstack-ansible00:31
*** david-lyle_ has joined #openstack-ansible01:04
*** Jeffrey4l has quit IRC01:06
*** david-lyle has quit IRC01:08
*** david-lyle_ is now known as david-lyle01:10
*** Jeffrey4l has joined #openstack-ansible01:12
*** thorst has joined #openstack-ansible01:13
*** cathrichardson has joined #openstack-ansible01:14
*** Jeffrey4l has quit IRC01:16
*** cathrichardson has quit IRC01:18
*** vishwanathj has joined #openstack-ansible01:20
*** gouthamr has quit IRC01:21
*** thorst has quit IRC01:22
*** xek_ has joined #openstack-ansible01:28
*** alextricity25 has quit IRC01:28
*** alextricity25 has joined #openstack-ansible01:29
*** vdo has quit IRC01:29
*** xek has quit IRC01:29
*** lkoranda has quit IRC01:29
*** Jeffrey4l has joined #openstack-ansible01:30
*** thorst has joined #openstack-ansible01:31
*** thorst has quit IRC01:32
*** vdo has joined #openstack-ansible01:35
*** vdo has joined #openstack-ansible01:35
*** lkoranda has joined #openstack-ansible01:36
*** Jeffrey4l has quit IRC01:37
*** Jeffrey4l has joined #openstack-ansible01:37
*** Jeffrey4l has quit IRC01:47
*** gouthamr has joined #openstack-ansible02:17
openstackgerritMerged openstack/openstack-ansible-repo_build: Ignore the tests repo checkout location  https://review.openstack.org/38296302:23
*** thorst has joined #openstack-ansible02:27
*** thorst has quit IRC02:27
openstackgerritMerged openstack/openstack-ansible-os_aodh: Remove aodh-api from service mapping  https://review.openstack.org/38400202:27
openstackgerritMerged openstack/openstack-ansible-tests: Fix idempotency check and add debug logging  https://review.openstack.org/38279502:29
openstackgerritMerged openstack/openstack-ansible-galera_server: Set default for physical_host if it's undefined  https://review.openstack.org/38413302:36
*** gouthamr has quit IRC02:43
*** sdake has joined #openstack-ansible02:46
openstackgerritMerged openstack/openstack-ansible-os_horizon: magnum_ui filename changes  https://review.openstack.org/38381402:50
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-galera_server: Allow mysql users to create triggers  https://review.openstack.org/38426803:00
*** weezS has joined #openstack-ansible03:02
openstackgerritMerged openstack/openstack-ansible: Loopback cinder image must insert before exit 0  https://review.openstack.org/38388903:03
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Implement zero downtime upgrades  https://review.openstack.org/38426903:04
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Implement zero downtime upgrades  https://review.openstack.org/38426903:05
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Implement zero downtime upgrades  https://review.openstack.org/38426903:07
*** david-lyle has quit IRC03:09
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Implement zero downtime upgrades  https://review.openstack.org/38426903:13
*** cathrichardson has joined #openstack-ansible03:15
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone: Implement zero downtime upgrades  https://review.openstack.org/38426903:18
*** cathrichardson has quit IRC03:19
*** weezS has quit IRC03:21
*** Jeffrey4l has joined #openstack-ansible03:27
openstackgerritMerged openstack/openstack-ansible: Ensure that repo_server/repo_build use same user:group  https://review.openstack.org/38406903:31
openstackgerritMerged openstack/openstack-ansible: Rename ironic database password during upgrades  https://review.openstack.org/38392703:31
*** thorst has joined #openstack-ansible03:36
openstackgerritNish Patwa(nishpatwa_) proposed openstack/openstack-ansible: Added sphinxmark in test-requirements.txt  https://review.openstack.org/38414003:41
*** sdake has quit IRC03:41
*** thorst has quit IRC03:41
*** adrian_otto has joined #openstack-ansible03:44
*** adrian_otto has quit IRC03:47
openstackgerritNish Patwa(nishpatwa_) proposed openstack/openstack-ansible-galera_server: [DOCS] Added release-name as a watermark to Docs.  https://review.openstack.org/38413903:51
*** adrian_otto has joined #openstack-ansible03:52
*** pmannidi_ is now known as pmannidi04:04
*** adrian_otto1 has joined #openstack-ansible04:13
*** adrian_otto has quit IRC04:16
*** woodard has joined #openstack-ansible04:20
*** jcrst has joined #openstack-ansible04:22
*** Mudpuppy has quit IRC04:22
*** dmsimard is now known as dmsimard|pto04:23
*** woodard has quit IRC04:24
*** Jeffrey4l has quit IRC04:29
*** Jeffrey4l has joined #openstack-ansible04:30
*** adrian_otto1 has quit IRC04:33
*** adrian_otto has joined #openstack-ansible04:35
*** adrian_otto has quit IRC04:36
*** adrian_otto has joined #openstack-ansible04:37
*** thorst has joined #openstack-ansible04:38
*** adrian_otto has quit IRC04:44
*** adrian_otto has joined #openstack-ansible04:45
*** thorst has quit IRC04:46
*** Mudpuppy has joined #openstack-ansible04:53
*** Mudpuppy has quit IRC04:57
*** adrian_otto has quit IRC05:01
*** adrian_otto has joined #openstack-ansible05:04
*** Jack_Iv has joined #openstack-ansible05:14
*** cathrichardson has joined #openstack-ansible05:15
*** cathrichardson has quit IRC05:20
*** woodard has joined #openstack-ansible05:21
*** woodard has quit IRC05:26
*** marst has quit IRC05:28
*** admin0 has joined #openstack-ansible05:46
*** admin0 has quit IRC05:46
*** Jeffrey4l has quit IRC05:56
*** Jeffrey4l has joined #openstack-ansible05:56
*** drifterza has quit IRC06:00
*** kuntumtarm has joined #openstack-ansible06:07
*** Oku_OS-away is now known as Oku_OS06:12
*** adrian_otto has quit IRC06:14
*** Jeffrey4l has quit IRC06:18
*** Jeffrey4l has joined #openstack-ansible06:18
*** cloud has joined #openstack-ansible06:22
cloudHello all06:22
cloudwhen i tried to deploy openstack using ansible, haproxy failed to restart06:23
*** adrian_otto has joined #openstack-ansible06:23
cloudhttp://paste.openstack.org/show/585133/06:24
cloudafter performing the above steps, haproxy is trying to restart06:24
cloudwhen I edited the code "stop and start" instead of restart06:25
cloudhaproxy was stopped and failed to restart06:25
cloudthis is a single blade deployment06:25
cloudbut there is no issue in case of multinode deployment06:25
*** dgonzalez has joined #openstack-ansible06:26
*** fops has quit IRC06:33
*** fops has joined #openstack-ansible06:34
*** kuntumtarm has quit IRC06:34
*** admin0 has joined #openstack-ansible06:36
*** admin0 has quit IRC06:37
evrardjpgood morning06:38
*** fops has quit IRC06:38
*** bsv has joined #openstack-ansible06:40
*** admin0 has joined #openstack-ansible06:45
*** jiteka has joined #openstack-ansible06:45
*** janki has joined #openstack-ansible06:46
*** thorst has joined #openstack-ansible06:48
*** thorst has quit IRC06:56
*** pcaruana has joined #openstack-ansible07:03
*** rgogunskiy has joined #openstack-ansible07:12
*** cathrichardson has joined #openstack-ansible07:16
*** cathrichardson has quit IRC07:21
*** admin0 has quit IRC07:24
*** admin0 has joined #openstack-ansible07:30
*** karimb has joined #openstack-ansible07:33
openstackgerritDeepak proposed openstack/openstack-ansible: Cleanup Newton Release Notes  https://review.openstack.org/38432407:33
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: Set default for physical_host if it's undefined  https://review.openstack.org/38432507:33
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build: Clean up Ansible retry files  https://review.openstack.org/38432607:33
odyssey4meo/07:36
bsv\o07:36
*** drifterza has joined #openstack-ansible07:38
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [Install-guide] Alignment gets corrected  https://review.openstack.org/38293507:39
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Correct alignment for code block  https://review.openstack.org/38432807:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Alignment gets corrected  https://review.openstack.org/38293507:42
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Use centralised Ansible test scripts  https://review.openstack.org/38233007:44
*** Jeffrey4l has quit IRC07:49
openstackgerritMerged openstack/openstack-ansible: [docs] Correct alignment for code block  https://review.openstack.org/38432807:50
*** haad1 has joined #openstack-ansible07:51
openstackgerritMerged openstack/openstack-ansible: [docs] Alignment gets corrected  https://review.openstack.org/38293507:51
*** Jeffrey4l has joined #openstack-ansible07:52
*** thorst has joined #openstack-ansible07:54
*** babilen has quit IRC07:54
*** Jeffrey4l has quit IRC07:55
openstackgerritMerged openstack/openstack-ansible-repo_build: Clean up Ansible retry files  https://review.openstack.org/38432607:55
*** Jeffrey4l has joined #openstack-ansible07:55
openstackgerritDeepak proposed openstack/openstack-ansible: Cleanup Newton Release Notes  https://review.openstack.org/38432407:55
odyssey4meoh bother, it looks like rally is an outsider in terms of requirements management... so we're going to have to build in a facility to allow the repo build process to cater for requirements that are disparate07:58
odyssey4mesee my answer in https://review.openstack.org/38423207:58
odyssey4mewell, see the answer to my patch07:58
odyssey4meautomagically ^07:58
*** bjolo_ has joined #openstack-ansible08:00
odyssey4meevrardjp andymccr hughsaunders if you have some time this morning, here's a hit list to review: https://review.openstack.org/#/q/starredby:jesse-pretorius+project:%255Eopenstack/openstack-ansible.*+status:open (some backports, some not)08:00
evrardjpok will have a look whenever possible08:01
*** thorst has quit IRC08:02
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Move sphinxmark requirement to test-requirements.txt  https://review.openstack.org/38414008:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: [DOCS] Added release-name as a watermark to Docs.  https://review.openstack.org/38413908:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: [DOCS] Added release-name as a watermark to Docs.  https://review.openstack.org/38413908:09
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Add Introduction heading Appendix B  https://review.openstack.org/38385308:11
*** fops has joined #openstack-ansible08:18
*** adrian_otto has quit IRC08:20
*** adrian_otto has joined #openstack-ansible08:23
cloud Hello all  when i tried to deploy openstack using ansible, haproxy failed to restart  http://paste.openstack.org/show/585133/  after performing the above steps, haproxy is trying to restart  when I edited the code "stop and start" instead of restart haproxy was stopped and failed to restart  this is a single blade deploymen08:26
*** admin0 has quit IRC08:27
odyssey4mecloud it would appear to me that you're using Fuel? This channel deals with OpenStack-Ansible, not Fuel. You may wish to find the applicable channel where people understand Fuel.08:27
*** ssbarnea has joined #openstack-ansible08:28
odyssey4meevrardjp have you seen https://bugs.launchpad.net/openstack-ansible/+bug/1630948 ?08:30
openstackLaunchpad bug 1630948 in openstack-ansible "keepalive does not work from the start" [Undecided,New]08:30
evrardjpyup I didn't got any answer08:36
evrardjpodyssey4me: according to my CI, keepalived runs correctly but I need to extend my testing.08:37
*** admin0 has joined #openstack-ansible08:37
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-pip_install: Ensure that package installs can fall back  https://review.openstack.org/38435508:38
*** berendt has joined #openstack-ansible08:39
*** sdake has joined #openstack-ansible08:43
cloud<odyssey4me> yes, am using fuel08:45
*** vishwana_ has joined #openstack-ansible08:46
odyssey4mecloud in that case I'm afraid the community in this channel is unable to assist you08:46
cloudcan u suggest me the channel as iam not aware of it08:46
odyssey4meperhaps try #openstack08:46
odyssey4memaybe ask there whether there's a good channel for assistance with Fuel08:46
cloudok..thank u :)08:46
evrardjpyou're welcome08:47
*** sc68cal_ has joined #openstack-ansible08:47
*** Mr_Smurf_ has joined #openstack-ansible08:49
*** evilt0ne_ has joined #openstack-ansible08:49
*** promethe1nfire has joined #openstack-ansible08:49
*** gaudenz_ has joined #openstack-ansible08:50
*** cjmarti has joined #openstack-ansible08:51
*** portante_ has joined #openstack-ansible08:53
*** dgonzalez_ has joined #openstack-ansible08:53
odyssey4mealextricity25 palendae I don't know if this bug is still relevant? https://bugs.launchpad.net/openstack-ansible/+bug/154322508:53
openstackLaunchpad bug 1543225 in openstack-ansible "dynamic_inventory "container"_cidr strongly typed" [Undecided,In progress] - Assigned to Miguel Alejandro Cantu (miguel-cantu)08:53
*** mfisch` has joined #openstack-ansible08:53
odyssey4meevrardjp perhaps you can add that to your list for the triage tomorrow to discuss and resolve08:53
*** hughsaunders_ has joined #openstack-ansible08:53
*** timrc_ has joined #openstack-ansible08:54
evrardjpok for me08:54
*** drifterza has quit IRC08:54
*** pcaruana has quit IRC08:54
*** vishwanathj has quit IRC08:54
*** prometheanfire has quit IRC08:54
*** nwonknu has quit IRC08:54
*** hughsaunders has quit IRC08:54
*** castulo has quit IRC08:54
*** timrc has quit IRC08:54
*** mfisch has quit IRC08:54
*** shasha_t_ has quit IRC08:54
*** portante has quit IRC08:54
*** Mr_Smurf has quit IRC08:54
*** evilt0ne has quit IRC08:54
*** sc68cal has quit IRC08:54
*** dgonzalez has quit IRC08:54
*** gaudenz has quit IRC08:54
*** hughsaunders_ is now known as hughsaunders08:54
*** portante_ is now known as portante08:54
*** dgonzalez_ is now known as dgonzalez08:54
*** cjmarti is now known as castulo08:54
evrardjpnetsplits08:54
evrardjpwoot!08:55
*** shasha_t_ has joined #openstack-ansible08:56
*** nwonknu has joined #openstack-ansible08:58
*** thorst has joined #openstack-ansible08:59
*** promethe1nfire is now known as prometheanfire08:59
*** drifterza has joined #openstack-ansible09:00
*** pcaruana has joined #openstack-ansible09:00
*** jcrst has quit IRC09:00
*** jcrst has joined #openstack-ansible09:02
*** thorst has quit IRC09:06
*** dragonmaster_ has joined #openstack-ansible09:08
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Ensure that novnc/spice consoles use the public endpoint protocol  https://review.openstack.org/38437709:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Move sphinxmark requirement to test-requirements.txt  https://review.openstack.org/38414009:15
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Ensure that novnc/spice consoles use the public endpoint protocol  https://review.openstack.org/38437709:16
*** cathrichardson has joined #openstack-ansible09:17
*** cathrichardson has quit IRC09:22
*** jcrst has quit IRC09:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Add Introduction heading to Appendix B  https://review.openstack.org/38385309:26
*** jcrst has joined #openstack-ansible09:26
openstackgerritMerged openstack/openstack-ansible-os_magnum: Add basic functional tests to role  https://review.openstack.org/38289009:27
drifterzahello all09:28
dragonmaster_hey all09:36
*** tholiv has joined #openstack-ansible09:39
odyssey4meo/ dragonmaster_ drifterza09:40
*** tholiv has quit IRC09:42
*** tholiv has joined #openstack-ansible09:44
admin0\o09:44
admin0drifterza: done done ?09:44
admin0is your test system up now :)09:44
*** evilt0ne_ has quit IRC09:45
*** evilt0ne has joined #openstack-ansible09:48
*** evilt0ne has quit IRC09:48
*** evilt0ne has joined #openstack-ansible09:48
odyssey4meadmin0 could you please test whether https://review.openstack.org/384377 resolves the spice console issues and provide feedback in the review?09:48
drifterzaadmin0, well the vm parts are up09:55
drifterzajust ran openstack-ansible setup-hosts and that passed09:55
drifterzawant to do the ceph-deploy quick09:55
*** rgogunskiy has quit IRC09:59
*** rgogunskiy has joined #openstack-ansible10:00
admin0odyssey4me: if you look at the configs and variables i have used, https://bugs.launchpad.net/openstack-ansible/+bug/1630950 as shown here, this patch does not help at all10:04
openstackLaunchpad bug 1630950 in openstack-ansible "haproxy SSL, nova console set to http on the horizon link" [Medium,In progress] - Assigned to Jesse Pretorius (jesse-pretorius)10:04
odyssey4meadmin0 it does, it sets nova_spice_html5proxy_base_proto to https based on the general public proto10:05
*** johnthetubaguy has joined #openstack-ansible10:10
drifterzaadmin0, did setting the protocol to https fix the console ? I remember it fixed the connection but does the actual console display in SPICE ?10:10
*** rgogunskiy has quit IRC10:11
*** rgogunskiy has joined #openstack-ansible10:11
admin0i see it : playbooks/inventory/group_vars/all.yml:openstack_service_publicuri_proto: https10:11
admin0it will10:11
drifterzadoes it though.10:12
johnthetubaguyodyssey4me: I am having a look at that nova-conductor thing btw, not seen it before10:12
odyssey4methanks johnthetubaguy if you need help navigating the log locations and such let me know10:13
johnthetubaguyodyssey4me: looks like nova-conductor wan't running/responding when nova-compute started up, which is bad, but we shouldn't die on that10:13
*** haad1 has quit IRC10:13
johnthetubaguyodyssey4me: cool, will reach out, got some good breadcrumbs10:13
odyssey4mehmm, yes - there could easily be an ordering issue there as the notifiers which restart all the services will all fire at the same time - that can create a race condition relating to dependencies between services10:14
odyssey4methat can be fine tuned, if need be10:14
*** janki has quit IRC10:18
johnthetubaguyodyssey4me: so that would totally do it, you want nova-conductor first10:19
johnthetubaguyodyssey4me: having said that, there is totally a nova bug here, that shouldn't kill us in such a strange way, we are getting exceptions deep in chained __init__ functions here.10:20
odyssey4mejohnthetubaguy ok, if you can work the angle to improve nova's robustness in error handling, we can work the angle of sequencing the service starts/restarts here10:21
johnthetubaguyodyssey4me: sounds like a plan10:21
johnthetubaguyodyssey4me: FWIW, the "auto" PRC version triggers the failing code path.10:22
odyssey4mejohnthetubaguy to confirm - nova-conductor must always start/restart first, the others can start/restart in any order?10:22
johnthetubaguyodyssey4me: I *think* so10:23
johnthetubaguyodyssey4me: probably need a bit of wider context to confirm that all10:23
johnthetubaguyodyssey4me: nova-conductor is running on the controller nodes right?10:23
odyssey4mejohnthetubaguy yep10:23
johnthetubaguyodyssey4me: do you set the "database.connection" on the compute node btw, you don't need to have that there, with the conductor10:24
*** jcrst has quit IRC10:24
odyssey4mejohnthetubaguy in the role tests the host is nova-compute and the controller is in the 'openstack1' container10:24
odyssey4mejohnthetubaguy ah yes, thanks for reminding me - that's an item we need to clean up10:25
johnthetubaguyoh, you don't want those running next to each other, in an idea world, but in theory it shouldn't matter10:26
openstackgerritDeepak proposed openstack/openstack-ansible: [Docs] There was typo mistake  https://review.openstack.org/38204010:26
odyssey4mehmm, that's off - we already have a conditional: https://github.com/openstack/openstack-ansible-os_nova/blob/master/templates/nova.conf.j2#L22910:26
*** b3rnard0 has left #openstack-ansible10:26
johnthetubaguyodyssey4me: I just see *** in the logs, I guess that really means empty in that case!10:26
johnthetubaguysilly obfuscation logic I there10:27
odyssey4mehmm, perhaps we should try to collect resulting configs from the hosts/containers in the tests10:27
odyssey4melemme register a wish list bug for that10:28
johnthetubaguyodyssey4me: oh, so I see here the compute failed to start, then it looks like something started it up again, would that be possible?10:28
johnthetubaguyodyssey4me: FWIW thats really helpful in the gate more times that I give it credit10:29
johnthetubaguy2016-10-08 11:05:41.202 16059 (failed) 2016-10-08 11:05:43.237 17413 (restarted) ?10:29
odyssey4meregistered: https://bugs.launchpad.net/openstack-ansible/+bug/163190510:30
openstackLaunchpad bug 1631905 in openstack-ansible "Collect resulting configs for services" [Wishlist,New]10:30
odyssey4mejohnthetubaguy so that's what's confusing me - it somehow restarted on the working test, but did not restart on the failed test10:31
odyssey4memy suspicion is that the RPC detection actually does the restart10:31
odyssey4mebut that's just pure speculation10:31
openstackgerritMerged openstack/openstack-ansible: [Docs] There was typo mistake  https://review.openstack.org/38204010:33
*** karimb has quit IRC10:35
*** rgogunskiy has quit IRC10:36
johnthetubaguyodyssey4me: yeah, digging into the code to see if there is black magic10:36
*** rgogunskiy has joined #openstack-ansible10:36
johnthetubaguyodyssey4me: do you have a failed one vs a working one, I think the one I am seeing looks broken, but still restarts somehow http://logs.openstack.org/52/367752/14/check/gate-openstack-ansible-os_nova-ansible-func-ubuntu-trusty/26bfc2d/logs/host/nova/nova-compute.log.txt.gz10:37
odyssey4mejohnthetubaguy you'll see passed vs failed in https://review.openstack.org/#/c/367752/10:38
odyssey4meignore the centos failures10:38
johnthetubaguyodyssey4me: heh, true, that looks quite clear now10:39
odyssey4meit appears that in the last two cases the nova-lxd hypervisor failed... so maybe it's driver specific10:39
odyssey4mehowever if you look at PS13 the standard xenial gate test was also failing10:39
odyssey4mePS12 too10:39
johnthetubaguyfrom the logs, the compute node looks dead in the success case, do you try any VM builds?10:40
odyssey4meyes, it should be doing a tempest set of tests10:40
odyssey4meyep: http://logs.openstack.org/52/367752/14/check/gate-openstack-ansible-os_nova-ansible-func-ubuntu-trusty/83190cc/console.html#_2016-10-10_02_29_00_25734910:41
odyssey4metempest.scenario.test_server_basic_ops.TestServerBasicOps.test_server_basic_ops [32.991606s] ... ok10:41
odyssey4mecan definitely see evidence of it in http://logs.openstack.org/52/367752/14/check/gate-openstack-ansible-os_nova-ansible-func-ubuntu-trusty/83190cc/logs/host/nova/nova-compute.log.txt.gz10:42
johnthetubaguyoh, I was in 26bfc2d, I guess a different run10:43
odyssey4meI still see the evidence in that run too: http://logs.openstack.org/52/367752/14/check/gate-openstack-ansible-os_nova-ansible-func-ubuntu-trusty/26bfc2d/logs/host/nova/nova-compute.log.txt.gz10:44
*** rgogunskiy has quit IRC10:44
*** adrian_otto has quit IRC10:46
*** Jeffrey4l has quit IRC10:47
*** rgogunskiy has joined #openstack-ansible10:52
*** Jeffrey4l has joined #openstack-ansible10:53
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Ensure that nova-compute starts after all control plane services  https://review.openstack.org/38441010:54
*** rgogunskiy has quit IRC10:54
odyssey4mejohnthetubaguy ^ not sure whether we should enforce them all to start/restart first - or a select group - thoughts?10:54
johnthetubaguyodyssey4me: good question10:55
*** Mudpuppy has joined #openstack-ansible10:56
admin0drifterza: it did10:57
admin0the old setup is still active10:57
admin0if you want to test10:57
admin0console works fine now10:57
admin0i managed to add swift on it as well . that works too10:57
johnthetubaguyodyssey4me: I think you can just wait for nova-conductor, and ignore the others10:57
admin0i added aodh and ceilometer, but i find the databases empty10:57
admin0so trying to understnad why10:57
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Ensure that the nova-conductor service always starts first  https://review.openstack.org/38441011:00
*** Mudpuppy has quit IRC11:00
odyssey4mejohnthetubaguy ^ will give that a go and see what happens11:00
odyssey4meadmin0 you'll want to add gnocchi too I think11:01
admin0i want to add everything that ( and test it in that regard)11:01
admin0that is possible via the playbooks11:02
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [Docs] There was typo mistake  https://review.openstack.org/38441511:03
*** thorst has joined #openstack-ansible11:08
openstackgerritMerged openstack/openstack-ansible: [Docs] There was typo mistake  https://review.openstack.org/38441511:11
*** thorst has quit IRC11:16
*** cathrichardson has joined #openstack-ansible11:18
*** cathrichardson has quit IRC11:22
*** johnmilton has quit IRC11:25
*** tholiv has quit IRC11:28
*** tholiv has joined #openstack-ansible11:29
*** retreved has joined #openstack-ansible11:31
*** tholiv has quit IRC11:33
*** karimb has joined #openstack-ansible11:38
*** ssbarnea has quit IRC11:41
*** sdake has quit IRC11:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Add specific support for automatic compute RPC pinning  https://review.openstack.org/36775211:44
odyssey4mejohnthetubaguy I've rebased https://review.openstack.org/367752 on top of https://review.openstack.org/384410 to validate whether it makes a difference to that patch.11:45
johnthetubaguyodyssey4me: I have skeched out a fix for one of the issues, but I don't really like it: https://review.openstack.org/#/c/38442811:46
johnthetubaguyodyssey4me: going to get some food and get back to that after lunch.11:47
*** johnmilton has joined #openstack-ansible11:48
odyssey4mejohnthetubaguy does the underlying oslo library allow some sort of incremental backoff/retry before timing out? it may be worth going through that sort of loop before killing the service11:48
odyssey4methe alternative would be to just fail the service start entirely if conductor's configured but not available11:49
*** johnmilton has quit IRC11:49
*** johnmilton has joined #openstack-ansible11:50
*** thorst has joined #openstack-ansible11:51
johnthetubaguyodyssey4me: not sure, I kinda thought we already did that somewhere, but its not early enough anymore, or something like that11:54
johnthetubaguyodyssey4me: is it possible there are multiple triggers to restart nova-compute11:55
johnthetubaguyodyssey4me: I am getting very confused reading through the logs, but I think I have my head straight now11:55
odyssey4meyeah, that confused me too - I can find where the restarts are fired - hold a minute11:57
odyssey4mejohnthetubaguy this will be the line you're looking for in the console log: http://logs.openstack.org/52/367752/14/check/gate-openstack-ansible-os_nova-ansible-func-ubuntu-trusty/26bfc2d/console.html#_2016-10-08_11_04_38_85663811:58
odyssey4meRUNNING HANDLER [os_nova : Restart nova services]11:58
odyssey4mefrom that log, which is a successful test, the handler only executes once11:58
johnthetubaguyoh, sometimes you get lucky, sometimes its already running, or something like that?11:59
odyssey4meit looks like the restart order was: nova-compute->nova-scheduler->nova-consoleauth->nova-api-os-compute->nova-cert->nova-api-metadata->nova-conductor->nova-spicehtml5proxy12:01
odyssey4mein other job results the order was different - it's not deterministic at this point12:03
evrardjpodyssey4me: nice catch on the disbale12:06
mhaydengood morning12:06
evrardjpand good morning everyone12:06
mhaydenhappy columbus day everyone https://en.wikipedia.org/wiki/Columbus_Day12:06
*** evilt0ne has quit IRC12:09
johnthetubaguyodyssey4me: could the setup ssh key logic trigger nova-compute to start?12:26
*** karimb has quit IRC12:26
odyssey4mejohnthetubaguy no notifiers set in https://github.com/openstack/openstack-ansible-os_nova/blob/master/tasks/nova_compute_key_distribute.yml or https://github.com/openstack/openstack-ansible-os_nova/blob/master/tasks/nova_compute_key_populate.yml so no, not as far as I can see12:27
johnthetubaguylooks like someone started nova-compute between: 2016-10-08 11:16:03.469 10099 ERROR nova12:27
johnthetubaguy2016-10-08 11:18:36.349 14060 INFO os_vif [-] Loaded VIF plugin class '<class 'vif_plug_ovs.ovs.OvsPlugin'>' with name 'ovs'12:27
odyssey4mejohnthetubaguy to see the things triggering the restart handler, you can find 'NOTIFIED HANDLER Restart nova services' in the console log12:28
openstackgerritMerged openstack/openstack-ansible: [docs] Add Introduction heading to Appendix B  https://review.openstack.org/38385312:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Add Introduction heading to Appendix B  https://review.openstack.org/38447112:28
johnthetubaguyodyssey4me: I am wondering if the init script is doing the restart maybe?12:29
odyssey4meah, now that is possible - upstart/systemd itself may cause the service to start if it fails12:29
odyssey4mefor xenial/systemd: https://github.com/openstack/openstack-ansible-os_nova/blob/master/templates/nova-systemd-init.j2#L2112:29
odyssey4mefor trusty/upstart: https://github.com/openstack/openstack-ansible-os_nova/blob/master/templates/nova-upstart-init.j2#L1012:30
odyssey4meso yes, it appears that if the service itself fails then it will try to restart12:30
odyssey4meif the service does not actually fail then it won't12:30
johnthetubaguyodyssey4me: ah, so it takes us 60 secs to timeout, I guess its a race to see if nova-compute is restarted before the last tempest retry12:31
johnthetubaguyyeah, the service sure failed, which I think is the correct behaviour12:31
*** gouthamr has joined #openstack-ansible12:31
johnthetubaguyodyssey4me: so 150 seconds before the restart totally fits (phew)12:32
openstackgerritMerged openstack/openstack-ansible: [docs] Add Introduction heading to Appendix B  https://review.openstack.org/38447112:36
*** dragonmaster_ has quit IRC12:38
odyssey4mejohnthetubaguy evrardjp interestingly it looks like https://review.openstack.org/384410 causes the handlers to fire at that point, but never again... so we lose the nova-compute restart12:38
*** evilt0ne has joined #openstack-ansible12:39
odyssey4mealthough somehow the tests pass, so compute did start - very odd12:39
*** evilt0ne has quit IRC12:39
*** evilt0ne has joined #openstack-ansible12:39
odyssey4meI wonder if upstart/systemd are actually initiating a start when we reload upstart/systemd12:39
*** deepak_jon has joined #openstack-ansible12:39
*** woodard has joined #openstack-ansible12:39
deepak_jonHi,12:39
*** woodard has quit IRC12:40
evrardjpodyssey4me: interesting you mean the conditional handler is behaving weird again?12:40
deepak_jonsrc file are not accessible in ansible-role-requirements.yml12:40
evrardjplet me read the code to understand12:40
*** woodard has joined #openstack-ansible12:40
odyssey4meevrardjp it would seem so, the conditional is inventory base so I guess there's no surprise there :p12:40
deepak_jongetting error 404 Not Found12:40
odyssey4medeepak_jon could you please be clearer with what is not available?12:41
evrardjpodyssey4me: yes, surprise is no surprise with ansible :)12:41
*** karimb has joined #openstack-ansible12:42
deepak_jonodyssey4me: getting error while wget12:42
deepak_jon404 error12:42
evrardjpodyssey4me: we could have another approach instead of changing the role12:46
evrardjpwe apply the role on 2 plays in the playbook, one for the conductors, and one for the rest12:46
evrardjpthis way the play for the conductors happen first12:47
deepak_joni did use this "wget https://git.openstack.org/openstack/openstack-ansible-haproxy_server"12:47
deepak_jonand got 404 Not Found12:47
odyssey4mejohnthetubaguy evrardjp oh, I made a mistake in the group name :p12:48
*** ssbarnea has joined #openstack-ansible12:48
evrardjpstill I don't like this approach12:48
evrardjp:p12:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Ensure that the nova-conductor service always starts first  https://review.openstack.org/38441012:48
evrardjporchestration should be done at playbook level if possible12:48
*** bsv has quit IRC12:48
evrardjpbut let me check12:48
odyssey4medeepak_jon that is a git target and is not available via wget - what're you trying tod o?12:49
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Add specific support for automatic compute RPC pinning  https://review.openstack.org/36775212:50
evrardjpodyssey4me: that's concise-ly ugly12:50
evrardjp:D12:51
odyssey4meevrardjp what? the handler flush?12:51
evrardjpdoes this even work?12:51
evrardjpyes12:51
evrardjpwith the variable inside the when12:51
evrardjpI'm surprised12:51
evrardjpI'll have a look at the logs :D12:51
odyssey4mewe'll see - it should - why wouldn't it, that's exactly what the handler's doing12:51
evrardjpbecause when is already evaluated as a conditional and parses variables, which makes me wonder if the double parsing would work12:52
evrardjpI could be suprised12:52
odyssey4meah, well if it fails I'll reformat it - right now it's more of an experiment12:53
deepak_jonNothing much, i was just checking ..12:57
deepak_jonthanks12:57
evrardjpodyssey4me johnthetubaguy: what aabout upgrades, do it still work if conductor is restarted before the other ones?12:57
*** deepak_jon has quit IRC12:57
evrardjp s/aabout/about12:57
evrardjpor the upgrade process should be done the other way?12:57
odyssey4meevrardjp yeah, conductor is the thing that must always be stopped last and started first12:57
evrardjpwell then it's terrible :p12:57
johnthetubaguyevrardjp: you have to restart nova-conductor before compute, although I think most restarts are expected to be quicker than the timeout period12:58
odyssey4meevrardjp see https://etherpad.openstack.org/p/osa-newton-nova-upgrades12:58
johnthetubaguyevrardjp: the idea is, you turn off all the control plane, and turn it back on with the new version, then you restart each nova-compute node after that, the requirements were driven by the larger operators, for sure12:59
evrardjpok12:59
evrardjpthen it's good12:59
evrardjpI believe we should do our plays differently 'though13:00
evrardjpto be far more readable13:00
mhaydenodyssey4me: should we get a thread on openstack-dev to talk about OSA presence at the PTG?13:00
evrardjpnot targetted by the discussion but I'd say probably mhayden13:01
odyssey4memhayden not sure, this PTG will be run by andymccr so best to ask him :)13:01
evrardjpprobably worth asking andymccr13:01
mhaydengood point13:01
evrardjp:D13:01
* mhayden scoots next to andymccr13:02
odyssey4meI think he may be on holiday today though. Perhaps best to add to the Thu meeting agenda.13:02
hughsaunderspretty sure andymccr is out for the day13:02
hughsaunderswhat odyssey4me said13:02
mhaydengood stuff13:02
mhaydeni'll put something on the agenda13:03
*** cathrichardson has joined #openstack-ansible13:08
*** cathrichardson has quit IRC13:08
*** cathrichardson has joined #openstack-ansible13:09
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add tasks for RHEL-07-010010  https://review.openstack.org/38394313:11
odyssey4memhayden I dunno if it's just me, but the results in https://review.openstack.org/382330 are weird. It's failing on a functional test assertion.13:13
mhaydenodyssey4me: i'll gander13:14
mhaydenodyssey4me: i may yank those tests for now -- they need to be reworked a bit and they don't work well for the RHEL 7 content anyway13:15
odyssey4meI just wonder whether your other patches are failing on the same item. If not, then why.13:15
mhaydenah, i wonder if it's because the var isn't being set13:16
* mhayden ganders at your diff13:16
mhaydenthe file is being written in the functional tests... not sure why the stat is blowing up13:21
*** Mudpuppy has joined #openstack-ansible13:21
*** asettle_ has joined #openstack-ansible13:24
mhaydenodyssey4me: i found it -- the new scripts don't use my test_check.yml13:24
mhaydeni wonder if i can rig the test.yml to work for both use cases13:24
*** jperry has joined #openstack-ansible13:25
odyssey4memhayden argh, I thought the check mode test simply added --check... I didn't realise that it was a different playbook13:25
mhaydenyeah, let me hack a little and make it work13:25
odyssey4methanks13:26
mhaydende nada señor13:26
*** jperry has quit IRC13:27
*** Mudpuppy has quit IRC13:27
odyssey4meI have unfortunately discovered that Rally manages its requirements.txt completely differently to everything else in OpenStack, and it's therefore breaking out integrated build for master. It's requirements are incompatible with all other requirements.13:27
*** jperry has joined #openstack-ansible13:28
odyssey4meWhen I submitted a patch they simply said no to my update, and that I must wait or them to execute it with a script which is not in their repo.13:28
odyssey4meThey will do this when they're good and well ready to release their Newton bits, which is 'soon'.13:28
ioniwhat is rally?13:29
drifterzaload testing framework13:29
ioniok13:29
odyssey4meioni http://docs.openstack.org/developer/rally/13:29
ioniseems cool13:31
*** asettle_ has quit IRC13:31
ioniskipping playbook include 'os-gnocchi-install.yml' due to conditional test failure13:33
ionii have this "error"13:33
ionii tried to use -vvvv but i don't see anything13:33
*** BjoernT has joined #openstack-ansible13:33
ionii want to deploy gnocchi13:33
odyssey4meioni you have no hosts allocated to it13:33
ionii do have in conf.d/gnocchi.yml13:33
ionibut i did enable ceilometer as well13:34
odyssey4mepatebin the contents?13:34
odyssey4me*pastebin13:34
ioniodyssey4me, https://paste.xinu.at/eBn/13:35
ioniit's an all in one kinda setup13:35
odyssey4meioni ok, and what tag or commit are you using?13:36
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Use centralised Ansible test scripts  https://review.openstack.org/38233013:36
odyssey4mewhat was the last commit in your checkout?13:37
mhaydenodyssey4me: a quick test shows that patch works ^^13:37
ioniorigin/stable/newton13:37
ionicommit 04605cae23bd84b19efed1fd08358bfce2bb0ddc13:37
odyssey4meok, that's recent - so it should work13:37
odyssey4meioni if you use the inventory-manage.py script in scripts/ to show the group members, does it show that host in the group?13:38
odyssey4mewell, does it show a container at all for any telemetry groups?13:39
ionihttps://paste.xinu.at/OG1ZkA/13:39
ionithis is my primary config13:39
*** galstrom_zzz is now known as galstrom13:39
odyssey4memhayden perhaps you'd like to ditch the old test-check.yml file in the patch?13:39
mhaydenodyssey4me: good call13:40
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Use centralised Ansible test scripts  https://review.openstack.org/38233013:40
ioniodyssey4me, https://paste.xinu.at/fr1i9/13:41
ioniodyssey4me, i see it in metrics_all13:41
openstackgerritMerged openstack/openstack-ansible-galera_server: Allow mysql users to create triggers  https://review.openstack.org/38426813:41
ionithat's all the metrics as groups13:41
openstackgerritMerged openstack/openstack-ansible-galera_server: [DOCS] Added release-name as a watermark to Docs.  https://review.openstack.org/38413913:41
odyssey4meioni I see a gnocchi container: https://paste.xinu.at/fr1i9/#n6813:42
ioniyes13:42
odyssey4meso it should work, because gnocchi_all will contain gnocchi_api unless you've been messing with env.d files?13:42
ionii don't have anything in env.d13:43
ioniit's a newly installation on ubuntu 14.0413:43
odyssey4meioni not sure if palendae or stevelle are available to help walk you through it... I'm a little tied up right now13:44
ioniok13:46
ionii'll run the setup and see if it fails :D13:46
*** williamc_ has joined #openstack-ansible13:47
pjm6hi there13:48
*** sdake has joined #openstack-ansible13:49
*** admin0 has quit IRC13:51
drifterzao/13:51
*** michaelgugino has joined #openstack-ansible13:52
*** bjolo_ has quit IRC13:53
*** sdake has quit IRC13:54
williamc_Does openstack-ansible with CentOS 7.2? From the documentation (http://docs.openstack.org/developer/openstack-ansible/install-guide/overview-requirements.html) seems this only work in ubuntu but the OpenStack Summit presentations seems to suggest different13:54
*** sdake has joined #openstack-ansible13:55
odyssey4mewilliamc_ no idea what summit presentation you're referring to, but the work to make it go on CentOS is still ongoing13:55
*** esberglu has joined #openstack-ansible13:55
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Use centralised Ansible test scripts  https://review.openstack.org/38233013:56
odyssey4mewilliamc_ all the infrastructure is done, and we have one person working on making it go for each of the services... I think that keystone, neutron, cinder, glance are done so it's now nova in progress, then swift, then the telemetry systems, then others13:56
odyssey4meI'm pretty sure that mgariepy would love some help with it13:57
williamc_@odyssey4me Like this one https://www.youtube.com/watch?v=q_uDtdpLmpg13:57
odyssey4mewilliamc_ yes, the security role does with with CentOS and has for over a cycle13:57
odyssey4mebut not all of OSA does13:57
*** admin0 has joined #openstack-ansible13:58
williamc_okay. thanks for the clarification.13:58
*** admin0 has quit IRC14:00
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: [WIP] Ensure that the nova-conductor service always starts first  https://review.openstack.org/38441014:01
pjm6anyone could give me a tip in debugging floating ip? What I'm trying to do: I went to the router responsible and ping the IP (nothing happen)14:02
williamc_at the git repo I see several openstack-ansible related projects (openstack-ansible-security, ansible-role-nodepool, openstack-ansible, openstack-ansible-pip_install, etc). Are all these part of this same project?14:02
pjm6and i tried to see iptables if SNAT was pointing to my VM14:02
pjm6(but I didn't see the record)14:02
pjm6it was supposed to be that, right?14:02
odyssey4mewilliamc_ anything that starts with 'openstack-ansible' is part of this project14:02
pjm6At least to the output IP be the floating IP instead of the routr14:03
*** techstepper has joined #openstack-ansible14:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: Allow mysql users to create triggers  https://review.openstack.org/38453814:04
williamc_what will be the relation between openstack-ansible/playbooks/galera-install.yml and openstack-ansible-galera_(server|client) ? Does one replace the other? or are those dependecies?14:04
odyssey4mewilliamc_ the openstack-ansible repository contains Ansible playbooks and various other bits that tie things together14:07
odyssey4meeach of the 'openstack-ansible-.*' repositories are mostly Ansible roles which are independently usable14:08
odyssey4methe integrated repository (openstack-ansible) has a set of playbooks which execute the roles14:08
odyssey4meso the openstack-ansible/playbooks/galera-install.yml playbook executes the 'galera_server' role, which is housed in the openstack/openstack-ansible-galera_server git repository14:09
*** karimb has quit IRC14:09
williamc_got it!14:10
odyssey4memhayden and we have a pass :) https://review.openstack.org/38233014:11
williamc_Just noticed the integration at ansible-role-requirements.yml14:12
odyssey4mecores - looking for reviews that are important for the newton release: https://review.openstack.org/#/q/starredby:jesse-pretorius+project:%255Eopenstack/openstack-ansible.*+status:open14:12
*** spotz_zzz is now known as spotz14:13
*** admin0 has joined #openstack-ansible14:14
mhaydenodyssey4me: woot14:16
*** jmckind has joined #openstack-ansible14:17
ionii noticed something, the hostnames of the containers and compute nodes are not added anymore in /etc/hosts14:18
ioniit's that on purpose?14:18
odyssey4meioni that should only be the case if you're using the unbound containers - if not, then that's a bug14:19
ionii don't think that i'm using that14:19
odyssey4meioni please register a bug for it asap14:20
ioniok14:20
*** admin0 has quit IRC14:22
pjm6anyone here had a error like: "Failed to process compatible router '' " ?14:26
pjm6in neutron agent14:26
pjm6with runtime error : RNETLINK answers: network is unreachable14:26
*** shasha_t_ is now known as shasha_tavil14:28
openstackgerritMerged openstack/openstack-ansible: [docs] Move sphinxmark requirement to test-requirements.txt  https://review.openstack.org/38414014:28
openstackgerritMerged openstack/openstack-ansible: [DOCS] Edits to installation chapter  https://review.openstack.org/38382414:29
evrardjpfrom wherever you see that, check your nics and routers pjm6 :D14:29
pjm6yes evrardjp, I have the same config as before14:29
pjm6and I could connect to my private network14:29
pjm6only bridge stops working14:29
*** admin0 has joined #openstack-ansible14:29
*** kiriakos has joined #openstack-ansible14:29
pjm6I remember that neutron need to ping the "router"?!? in order to work?14:29
pjm6or i'm just confusing with something else14:30
ioniodyssey4me, https://bugs.launchpad.net/openstack-ansible/+bug/163197514:30
openstackLaunchpad bug 1631975 in openstack-ansible "/etc/hosts is not populated anymore" [Undecided,New]14:30
odyssey4methanks ioni - evrardjp ^ please add to tomorrow's triage list14:31
evrardjpit's gonna be on the list :)14:32
kiriakosHi there, can somebody explain to me how lxc_container_create/tasks/container_create.yml task "Wait for ssh to be available" works?14:32
kiriakoshttp://paste.ofcode.org/35a6ddCkQijdp5Q2JR6THa314:33
kiriakosBecause it just stalls on ansible 2.1.1.0... (Ubuntu Xenial)14:33
ioniodyssey4me, interesting, even i had that "error" gnocchi was deployed14:33
*** chris_hultin|AWA is now known as chris_hultin14:34
odyssey4mekiriakos it wait for port 22 to be available and to give the standard OpenSSH listening service output - if it's hanging there there there's likely something wrong with your networking14:35
*** Mudpuppy has joined #openstack-ansible14:37
*** openstack has joined #openstack-ansible18:25
*** jcrst has joined #openstack-ansible18:28
*** openstack has joined #openstack-ansible19:07
*** retreved has quit IRC19:07
*** yarkot has joined #openstack-ansible19:08
*** karimb has joined #openstack-ansible19:09
jmccrorychris_hultin : looks like https://review.openstack.org/#/c/346863/19:10
*** yarkot has quit IRC19:10
chris_hultinjmccrory: Looks like the most recent Magnum role doesn't support that yet.  Time for another patch!19:10
jmccroryhmm just that one role having problems?19:11
chris_hultinjmccrory: Yeah, as far as I'm aware19:11
chris_hultinjmccrory: Working on a new Newton-based cluster19:11
*** bjolo_ has quit IRC19:14
cmartIs anyone familiar with the haproxy and keepalived roles? I think I previously defined wrong "haproxy_keepalived_external_vip_cidr" and "haproxy_keepalived_internal_vip_cidr" in user_variables.yml, trying to undo that with the correct variable, but unsure if I can just change the variable and re-run setup-infrastructure.yml.19:17
*** tholiv has joined #openstack-ansible19:18
*** johnmilton has quit IRC19:18
chris_hultinjmccrory: Figured out where the change needs to be made.  Testing now19:18
*** yarkot has joined #openstack-ansible19:21
*** spotz is now known as spotz_zzz19:21
openstackgerritChristopher Hultin proposed openstack/openstack-ansible-os_magnum: Fixing VENV download URL  https://review.openstack.org/38467419:24
*** kstev has quit IRC19:26
*** yarkot has quit IRC19:30
chris_hultinodyssey4me: Do we want to go ahead and trash the entire /extras directory, then?19:32
odyssey4mechris_hultin well, with the integration into openstack-ansible done it's pointless to duplicate a playbook, group vars, etc in the role19:33
odyssey4meit's usually just a starting tool for testing before the role is integrated19:33
chris_hultinodyssey4me: So, shall we consign it to /dev/null?19:34
odyssey4mechris_hultin sure, go ahead with pushing up a patch :)19:34
openstackgerritChristopher Hultin proposed openstack/openstack-ansible-os_magnum: Removing extras/  https://review.openstack.org/38467619:36
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Use centralised Ansible test scripts  https://review.openstack.org/38231119:41
*** jcrst has quit IRC19:43
*** admin0 has joined #openstack-ansible19:43
*** jascott1 has quit IRC19:52
*** nishpatwa_ has quit IRC19:53
*** kstev has joined #openstack-ansible19:53
*** mpotdar has quit IRC19:54
*** tholiv has quit IRC19:54
*** jamesdenton has joined #openstack-ansible19:54
chris_hultinodyssey4me: I proposed the change to totally remove extras/, if you want to review19:54
*** tholiv has joined #openstack-ansible19:55
*** mpotdar has joined #openstack-ansible19:55
odyssey4mechris_hultin already did ;)19:55
odyssey4mealso added a comment FYI19:55
chris_hultinodyssey4me: Good point - that is an important distinction.19:56
odyssey4mechris_hultin yeah - so the integrated build does not assume that you want magnum, you have to tell it that you do19:57
chris_hultinodyssey4me: Makes sense, Magnum is still an up-and-coming project19:57
odyssey4mewhereas the extras stuff assumed that magnum was in the game and would always build the containers along with all the others19:57
odyssey4mewe're actually moving away from those very high level all inclusive groups in favor of being more declarative and explicit about what you want19:58
odyssey4methat avoids having to mess about with affinities19:58
*** adrian_otto has joined #openstack-ansible19:58
*** tholiv has quit IRC19:59
odyssey4mechris_hultin also note that env.d files are *not required* for newton - if present they are merged into the existing *default* environment set out in playbooks/inventory/env.d19:59
odyssey4meit makes handling upgrades *far* easier for us19:59
chris_hultinodyssey4me: Cool20:00
odyssey4meso the only reason to have env.d files is if you want to change the default groups in the environment20:00
*** cmart has quit IRC20:01
*** fops has joined #openstack-ansible20:05
*** kstev1 has joined #openstack-ansible20:10
*** kstev1 has quit IRC20:10
*** kstev has quit IRC20:10
*** jcrst has joined #openstack-ansible20:11
admin0can openstack logo be printed/used  in business cards ?20:12
*** techstepper has quit IRC20:17
chris_hultinadmin0: Probably not the right place to be looking for that kind of answer20:17
admin0just asking if its a common practice20:18
admin0there seems to be NO clear answer on the topic20:18
odyssey4meadmin0 best ask the foundation20:18
odyssey4mealthough a very quick google got me some answers admin0 : http://www.openstack.org/brand/20:19
*** cmart has joined #openstack-ansible20:19
*** spotz_zzz is now known as spotz20:19
odyssey4methere's a very clear section about commercial use20:19
admin0not for consulting business you know .. openstack powered consulting :D20:21
odyssey4meadmin0 there's a legal mailing list for general questions relating to such things20:21
mhaydencloudnull: TTL exceeded20:22
mhaydencloudnull: sorry, your ping got lost :P20:22
cloudnullno worries.20:22
cloudnulljust wanted to let you know we upgarade the OSIC using the sec role as enabled.20:22
*** michaelgugino has quit IRC20:23
cloudnullso far looking good.20:23
mhaydenwoot!20:23
cloudnullbut i'll let you know if things go sideways.20:23
admin0“ we upgarade the OSIC using the sec role as enabled….” — flew over /me’s head20:27
stevelleadmin0: a large production environment based on OSA is being upgraded from Liberty to Mitaka, and now enables the openstack-ansible-security role20:31
admin0aha20:31
admin0ok20:31
admin0are you doing mitaka => newton as well ?20:31
stevellenot right now20:31
admin0are you going to blog about it somewhere  ?20:31
stevellein some months from now probably20:31
admin0of the steps you took maybe ?20:32
admin0its not as simple as git checkout stable/mitaka ; openstack-ansible setup-everything.yml  and \party/20:32
odyssey4meadmin0 all the steps are documented in the upgrade guide and the run-upgrade.sh script... I see a few patches came in based on this one20:32
admin0:)20:32
odyssey4meadmin0 no, you can largely do the checkout, execute setup-openstack thing for minor upgrades... but major upgrades need more care20:33
*** adrian_otto has quit IRC20:37
mrdaMorning OSA20:38
admin0morning20:41
spotzhey mrda20:43
mrdao/20:44
*** adrian_otto has joined #openstack-ansible20:44
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift: Use centralised Ansible test scripts  https://review.openstack.org/38231420:45
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible: Updated from global requirements  https://review.openstack.org/38470820:45
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-galera_server: Updated from global requirements  https://review.openstack.org/38470920:45
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone: Use centralised Ansible test scripts  https://review.openstack.org/38230620:47
*** adrian_otto has quit IRC20:47
*** karimb has quit IRC20:48
*** adrian_otto has joined #openstack-ansible20:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Use centralised Ansible test scripts  https://review.openstack.org/38231120:53
*** Mudpuppy has quit IRC20:59
*** admin0 has quit IRC21:01
*** kjw3 has joined #openstack-ansible21:02
*** redhatkj has joined #openstack-ansible21:11
*** redhatkj has quit IRC21:11
*** retreved_ has quit IRC21:15
*** adrian_otto has quit IRC21:15
*** asettle_ has joined #openstack-ansible21:15
*** asettle_ has quit IRC21:18
*** woodard_ has joined #openstack-ansible21:19
*** phalmos has quit IRC21:22
*** woodard has quit IRC21:23
*** woodard_ has quit IRC21:23
*** chris_hultin is now known as chris_hultin|AWA21:24
*** jheroux has quit IRC21:26
*** thorst has quit IRC21:27
*** admin0 has joined #openstack-ansible21:27
*** galstrom is now known as galstrom_zzz21:29
*** cmart has quit IRC21:33
*** tholiv has joined #openstack-ansible21:35
*** agrebennikov has joined #openstack-ansible21:36
agrebennikovcloudnull, thanks for that, I'm interested specifically in neutron part of the compute21:37
*** batkins61 has joined #openstack-ansible21:38
*** evilt0ne has quit IRC21:38
agrebennikovthe question was - in provider_networks section we describe their configuration, and seems it all has to be applied to the containers (regarding the section layout)21:38
agrebennikovon the computes though it is applied straight to the baremetal21:39
agrebennikovwhy?21:39
*** tholiv has quit IRC21:40
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Update the neutron MTU settings on upgrade  https://review.openstack.org/38463521:42
*** karimb has joined #openstack-ansible21:43
batkins61Getting persistent failure "Download lxc cache(s)" for 13.3.4, "failed to create temporary content file:"  Where to look?21:43
*** BjoernT has quit IRC21:43
*** tholiv has joined #openstack-ansible21:44
*** karimb has quit IRC21:44
*** kjw3 has quit IRC21:46
*** cmart has joined #openstack-ansible21:48
*** slo_ has joined #openstack-ansible21:49
slo_Hi there, is ansible security also aplyable to Ubuntu 16.04?21:51
mcardenslo_: From the openstack-ansible-security role README:  "The openstack-ansible security role applies security hardening configurations21:52
mcardenfrom the [Security Technical Implementation Guide(STIG)](http://iase.disa.mil/stigs/Pages/index.aspx)21:52
mcardento systems running Ubuntu 14.04, Ubuntu 16.04, CentOS 7, and Red Hat21:52
mcardenEnterprise Linux 7."21:52
mcardenSo, yes.21:53
*** tholiv has quit IRC21:53
*** dfflanders has joined #openstack-ansible21:54
slo_mcarden: thank you. So in case ansible security is applied within none openstack environment, let's say just within standalone server, than just some of the "configs" should be disabled, which are targeted to be used iwthin opensstack env. (eg. keystone) ?21:55
mcardenSorry slo_, I don't understand your question.21:55
*** thorst has joined #openstack-ansible21:56
slo_mcarden: i'm just guessing that some STIGs are possible also applied only when OS is used on top of Openstack or is not a matter?21:57
mcardenThe actions mandated by the STIG are at the OS level and not directly related to any particular application software like Openstack components.21:58
mcardenIt's all about making the host OS secure.21:58
slo_mcarden: ok. thank you.21:58
mcardenMy pleasure.21:59
*** thorst has quit IRC22:01
*** jperry has quit IRC22:06
*** jmckind has quit IRC22:07
*** slo_ has quit IRC22:10
*** jcrst has quit IRC22:10
*** williamc_ has quit IRC22:13
*** williamcaban has joined #openstack-ansible22:13
cmartdoes anyone know how the load-balanced virtual IP addresses get assigned to the infrastructure nodes, for a deployment with HAProxy + keepalived? Do I need to set them manually on interfaces or does HAProxy/keepalived do that? I'm getting an error from keepalived in syslog: "(external): Cannot find an IP address to use for interface br-vlan"22:14
*** jcrst has joined #openstack-ansible22:17
*** esberglu has quit IRC22:18
*** williamcaban has quit IRC22:19
*** williamcaban has joined #openstack-ansible22:19
*** cathrichardson has quit IRC22:19
*** williamcaban has quit IRC22:24
*** calebb has quit IRC22:25
*** batkins61 has quit IRC22:25
*** calebb has joined #openstack-ansible22:27
*** jamielennox is now known as jamielennox|away22:32
*** esberglu has joined #openstack-ansible22:35
*** esberglu has quit IRC22:36
*** gouthamr has quit IRC22:37
*** sdake has quit IRC22:44
*** jamielennox|away is now known as jamielennox22:48
*** gus_ is now known as gus22:52
*** TxGirlGeek has quit IRC22:56
*** shasha_t_ has quit IRC22:59
*** mpotdar has quit IRC22:59
*** thorst has joined #openstack-ansible23:10
*** sdake has joined #openstack-ansible23:12
*** sdake_ has joined #openstack-ansible23:17
*** adrian_otto has joined #openstack-ansible23:19
*** admin0 has quit IRC23:21
*** sdake has quit IRC23:21
*** batkins61 has joined #openstack-ansible23:22
*** nhairston_ has quit IRC23:23
batkins61Problem with calico on liberty 12.2.4, ansible version 1.9.4?23:23
cmartbatkins61, I had an issue with calico last week, what are you seeing?23:24
*** weezS has quit IRC23:24
logan-calico was just added in newton so if you are seeing calico anywhere in liberty you might have the wrong OSA branch checked out or bootstrapped23:25
batkins61I thought calico wasn't in liberty or mitaka, just newton.  It's failing to build an egg in /tmp/openstack-builder/calico/23:25
batkins61checked out 12.2.4.23:25
batkins61Can I rerun bootstrap then playbooks?23:26
batkins61I'll try bootstrapping again, then rerunning setup-infrastructure.23:27
logan-do you have roles in /etc/ansible/roles?23:27
logan-liberty should not have OSA roles in /etc/ansible/roles23:27
batkins61Yes, but originally I had checkout and bootstrapped mitaka.  I changed to 12.2.4, but may have forgotten to bootstrap.23:28
logan-with liberty bootstrap isn't going to get rid of those roles. you'll probably need to manually clean out /etc/ansible/roles23:28
logan-as all of the roles reside in the osa tree for liberty23:29
batkins61Ok, I'll just reset and clone again.23:29
logan-just remove all of the OSA roles from /etc/ansible/roles23:29
batkins61Will that be enough?23:29
batkins61Not sure I know which ones are osa and which are not.23:29
logan-unless you have installed any roles from galaxy etc for other projects, probably all of the roles in that directory are from OSA. if you want to confirm you could go thru the ansible-role-requirements.yml from the version you previously had checked out (mitaka, newton, whatever)23:30
batkins61Ok, thanks!23:31
logan-then delete them all from /etc/ansible/roles, rebootstrap to ensure the ansible version matches the intended version for liberty, and proceed running playbooks :)23:31
batkins61I removed all roles from /etc/ansible/roles, and ran bootstrap in 12.2.4.  There are three roles in /etc/ansible/roles, sshd, keepalived, and openstack-ansible-security.23:33
batkins61Is that expected?23:33
logan-yep23:33
batkins61Also, can I start at setup-infrastructure, or should I rerun setup-hosts?23:34
*** markvoelker has quit IRC23:36
logan-you should probably start with fresh hosts if possible23:37
logan-this is a fast paced project and there are some pretty significant differences between major versions. downgrading major versions like this you will probably waste more time trying to work around edge cases than you would wiping them clean23:39
*** berendt has quit IRC23:40
batkins61logan, thanks!23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!