| openstackgerrit | Merged openstack/openstack-ansible-os_nova: Simplify pip options/constraints mechanism https://review.openstack.org/392908 | 00:04 |
|---|---|---|
| openstackgerrit | Merged openstack/openstack-ansible-os_rally: Simplify pip options/constraints mechanism https://review.openstack.org/393446 | 00:04 |
| openstackgerrit | Merged openstack/openstack-ansible-os_swift: Simplify pip options/constraints mechanism https://review.openstack.org/392916 | 00:05 |
| openstackgerrit | Merged openstack/openstack-ansible-repo_build: Statically define the repo build concurrency https://review.openstack.org/393383 | 00:05 |
| cloudnull | baz: sorry was eating | 00:05 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_ceilometer: Install ceilometer-polling on compute nodes https://review.openstack.org/393470 | 00:06 |
| *** agrebennikov has quit IRC | 00:07 | |
| cloudnull | baz: this does sound like an issue with horizon proper however if we can work around it until a fix is made in horizon proper I think we should pursue that. | 00:08 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Speed up package install/removal https://review.openstack.org/393307 | 00:10 |
| *** jwitko has quit IRC | 00:10 | |
| *** v1k0d3n has quit IRC | 00:10 | |
| *** v1k0d3n has joined #openstack-ansible | 00:10 | |
| *** javeriak has quit IRC | 00:10 | |
| *** javeriak has joined #openstack-ansible | 00:12 | |
| evrardjp | See you tomorrow! | 00:13 |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Simplify pip options/constraints mechanism https://review.openstack.org/392919 | 00:13 |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Pin designate-tempest-plugin SHA https://review.openstack.org/392209 | 00:13 |
| *** v1k0d3n has quit IRC | 00:14 | |
| *** thorst has joined #openstack-ansible | 00:14 | |
| *** v1k0d3n has joined #openstack-ansible | 00:14 | |
| *** lunarlamp is now known as mariusv | 00:15 | |
| *** thorst_ has joined #openstack-ansible | 00:18 | |
| *** thorst has quit IRC | 00:18 | |
| *** javeriak has quit IRC | 00:18 | |
| logan- | anyone else seeing issues with master builds today? http://cdn.pasteraw.com/sxc20oxh4qae5y09huwrzz42v0hj0wa | 00:19 |
| logan- | looks related to https://github.com/openstack/openstack-ansible-os_tempest/commit/8c68340a46d7a3f3ea3841fcb396678ab871b833 | 00:19 |
| *** javeriak has joined #openstack-ansible | 00:19 | |
| jmccrory | logan- : about to push up a fix, think tempest will need to use the internal url to avoid self signed certs | 00:20 |
| logan- | gotcha | 00:20 |
| *** javeriak has quit IRC | 00:21 | |
| logan- | thanks | 00:21 |
| *** v1k0d3n has quit IRC | 00:22 | |
| *** schwicht has quit IRC | 00:22 | |
| *** thorst_ has quit IRC | 00:22 | |
| *** jlockwood has quit IRC | 00:22 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_tempest: Use internal endpoint when creating flavors https://review.openstack.org/393542 | 00:22 |
| *** javeriak has joined #openstack-ansible | 00:26 | |
| *** jwitko has joined #openstack-ansible | 00:26 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_tempest: Use internal endpoint when creating flavors https://review.openstack.org/393542 | 00:27 |
| *** Jeffrey4l has quit IRC | 00:30 | |
| *** Jeffrey4l has joined #openstack-ansible | 00:31 | |
| *** victorhe has joined #openstack-ansible | 00:33 | |
| *** fandi__ has quit IRC | 00:34 | |
| *** weezS has joined #openstack-ansible | 00:39 | |
| *** thorst has joined #openstack-ansible | 00:43 | |
| *** thorst has quit IRC | 00:44 | |
| *** karimb has quit IRC | 00:45 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_ceilometer: Install ceilometer-polling on compute nodes https://review.openstack.org/393470 | 00:46 |
| *** karimb has joined #openstack-ansible | 00:46 | |
| *** karimb has quit IRC | 00:48 | |
| *** smatzek has joined #openstack-ansible | 00:51 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_magnum: Replace github with git.o.o https://review.openstack.org/393143 | 00:51 |
| openstackgerrit | Merged openstack/openstack-ansible-os_magnum: Create magnum flavor using tempest role https://review.openstack.org/393345 | 00:52 |
| *** hybridpollo has quit IRC | 00:53 | |
| *** smatzek has quit IRC | 00:54 | |
| *** victorhe has quit IRC | 00:56 | |
| *** markvoelker has quit IRC | 00:57 | |
| *** victorhe has joined #openstack-ansible | 00:57 | |
| *** victorhe has quit IRC | 01:00 | |
| *** victorhe has joined #openstack-ansible | 01:01 | |
| *** javeriak has quit IRC | 01:05 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone: Simplify pip options/constraints mechanism https://review.openstack.org/393203 | 01:06 |
| *** pwnall1337 has quit IRC | 01:09 | |
| *** hybridpollo has joined #openstack-ansible | 01:10 | |
| openstackgerrit | Merged openstack/openstack-ansible: Replace github with git.o.o https://review.openstack.org/393350 | 01:10 |
| *** c-mart1 has joined #openstack-ansible | 01:17 | |
| *** c-mart has quit IRC | 01:18 | |
| *** c-mart1 has quit IRC | 01:22 | |
| *** pwnall1337 has joined #openstack-ansible | 01:27 | |
| *** pwnall1337 has quit IRC | 01:45 | |
| *** hybridpollo has quit IRC | 01:50 | |
| *** markvoelker has joined #openstack-ansible | 01:57 | |
| *** victorhe has quit IRC | 02:02 | |
| *** markvoelker has quit IRC | 02:02 | |
| *** dxiri has quit IRC | 02:05 | |
| *** hybridpollo has joined #openstack-ansible | 02:05 | |
| *** victorhe has joined #openstack-ansible | 02:13 | |
| *** v1k0d3n has joined #openstack-ansible | 02:19 | |
| *** jperry has joined #openstack-ansible | 02:19 | |
| *** dxiri has joined #openstack-ansible | 02:21 | |
| *** hybridpollo has quit IRC | 02:24 | |
| *** hybridpollo has joined #openstack-ansible | 02:25 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_ironic: Simplify pip options/constraints mechanism https://review.openstack.org/393385 | 02:25 |
| *** hybridpollo has quit IRC | 02:26 | |
| *** v1k0d3n has quit IRC | 02:26 | |
| *** dxiri has quit IRC | 02:27 | |
| *** victorhe has quit IRC | 02:28 | |
| *** v1k0d3n has joined #openstack-ansible | 02:29 | |
| *** v1k0d3n has quit IRC | 02:34 | |
| *** winggundamth has quit IRC | 02:37 | |
| *** mubix has quit IRC | 02:39 | |
| *** mubix has joined #openstack-ansible | 02:39 | |
| *** winggundamth has joined #openstack-ansible | 02:43 | |
| *** hybridpollo has joined #openstack-ansible | 02:43 | |
| *** dxiri has joined #openstack-ansible | 02:57 | |
| *** dxiri has quit IRC | 02:57 | |
| *** dxiri has joined #openstack-ansible | 02:58 | |
| *** khamtamtun has joined #openstack-ansible | 02:59 | |
| *** javeriak has joined #openstack-ansible | 03:02 | |
| *** gtrxcb has joined #openstack-ansible | 03:09 | |
| *** dxiri has quit IRC | 03:20 | |
| *** dxiri has joined #openstack-ansible | 03:20 | |
| *** adrian_otto has joined #openstack-ansible | 03:24 | |
| *** dxiri has quit IRC | 03:26 | |
| *** dxiri has joined #openstack-ansible | 03:26 | |
| *** adrian_otto has quit IRC | 03:27 | |
| dxiri | hey guys, quick question! I have a domain name that I would like dnsmasq to give away during the initial dhcp when a vm is booting up, I know how to edit the dnsmasq.conf for the specific agent manually, but what would be the osa way of doing it? | 03:29 |
| dxiri | since If I change that manually then it will break whenever I run the playbooks again | 03:29 |
| logan- | https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L110 | 03:40 |
| logan- | override that in your user_variables | 03:40 |
| dxiri | mmm, can I do it for just one network in specific? don't want it to be a general setting | 03:41 |
| logan- | i'm not sure if you can set a per-network dhcp domain. but i think if you could it would be via neutron API, not config files | 03:42 |
| dxiri | k, I have also heard (not tried) about the ability to have a dns server auto deployed with osa | 03:43 |
| dxiri | its unbound right? | 03:43 |
| dxiri | I believe it would be better if I use that and forward whatever is not local over to another dns | 03:44 |
| logan- | yes there is support for deploying unbound. i'd be hesitant to recommend using it for guests vm resolution. the primary purpose is providing resolution for control nodes with a local domain that allows the containers to resolve each other by name without having to keep /etc/hosts in sync across all of the nodes | 03:46 |
| *** Mudpuppy has quit IRC | 03:48 | |
| *** Mudpuppy has joined #openstack-ansible | 03:48 | |
| dxiri | ah I see...K so I will stick with my external DNS then and maybe set that variable you recommended :) | 03:49 |
| dxiri | thanks a ton! | 03:49 |
| dxiri | good night | 03:49 |
| *** dxiri has quit IRC | 03:50 | |
| *** Mudpuppy has quit IRC | 03:53 | |
| *** khamtamtun has quit IRC | 03:58 | |
| *** markvoelker has joined #openstack-ansible | 03:58 | |
| *** javeriak has quit IRC | 03:59 | |
| *** khamtamtun has joined #openstack-ansible | 03:59 | |
| *** khamtamtun has quit IRC | 04:00 | |
| *** michaelgugino has quit IRC | 04:01 | |
| *** markvoelker has quit IRC | 04:03 | |
| *** dxiri has joined #openstack-ansible | 04:10 | |
| *** jperry has quit IRC | 04:12 | |
| *** dxiri has quit IRC | 04:15 | |
| *** javeriak has joined #openstack-ansible | 04:16 | |
| *** hybridpollo has quit IRC | 04:18 | |
| *** gouthamr has quit IRC | 04:31 | |
| *** khamtamtun has joined #openstack-ansible | 04:36 | |
| *** khamtamtun has quit IRC | 04:45 | |
| *** khamtamtun has joined #openstack-ansible | 04:50 | |
| *** dxiri has joined #openstack-ansible | 04:58 | |
| *** dxiri has quit IRC | 05:03 | |
| *** khamtam25 has joined #openstack-ansible | 05:14 | |
| *** khamtamtun has quit IRC | 05:14 | |
| *** javeriak has quit IRC | 05:17 | |
| *** javeriak has joined #openstack-ansible | 05:17 | |
| *** weezS has quit IRC | 05:33 | |
| *** khamtam25 has quit IRC | 05:40 | |
| *** khamtamtun has joined #openstack-ansible | 05:52 | |
| *** markvoelker has joined #openstack-ansible | 05:59 | |
| *** khamtamtun has quit IRC | 06:00 | |
| *** markvoelker has quit IRC | 06:04 | |
| *** khamtamtun has joined #openstack-ansible | 06:05 | |
| *** khamtamtun has quit IRC | 06:12 | |
| *** shausy has joined #openstack-ansible | 06:19 | |
| *** drifterza_ has quit IRC | 06:19 | |
| *** pegmanm_ has joined #openstack-ansible | 06:40 | |
| *** fxpester has joined #openstack-ansible | 06:56 | |
| *** pegmanm_ has quit IRC | 06:57 | |
| *** markvoelker has joined #openstack-ansible | 07:00 | |
| *** h5t4 has joined #openstack-ansible | 07:00 | |
| *** markvoelker has quit IRC | 07:04 | |
| *** armaan has joined #openstack-ansible | 07:14 | |
| *** drifterza has joined #openstack-ansible | 07:16 | |
| drifterza | Hello all | 07:16 |
| *** armaan has quit IRC | 07:21 | |
| *** aheczko has joined #openstack-ansible | 07:24 | |
| *** javeriak has quit IRC | 07:31 | |
| *** pcaruana has joined #openstack-ansible | 07:33 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Simplify pip options/constraints mechanism https://review.openstack.org/392662 | 07:37 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum: Remove 'ignore_errors: true' in favor of 'failed_when: false' https://review.openstack.org/392105 | 07:39 |
| *** khamtamtun has joined #openstack-ansible | 07:41 | |
| *** khamtamtun has quit IRC | 07:43 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Simplify pip options/constraints mechanism https://review.openstack.org/393630 | 07:51 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift: Simplify pip options/constraints mechanism https://review.openstack.org/393631 | 07:52 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest: Simplify pip options/constraints mechanism https://review.openstack.org/393633 | 07:54 |
| *** gtrxcb has quit IRC | 07:58 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Use internal endpoint when creating flavors https://review.openstack.org/393542 | 08:13 |
| *** khamtamtun has joined #openstack-ansible | 08:17 | |
| *** gfa has left #openstack-ansible | 08:20 | |
| *** Mudpuppy has joined #openstack-ansible | 08:21 | |
| *** khamtamtun has quit IRC | 08:21 | |
| *** Mudpuppy has quit IRC | 08:26 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Fix bind mount of glance images https://review.openstack.org/393358 | 08:26 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [TEST] Bump ansible-lint version https://review.openstack.org/391429 | 08:27 |
| *** zenirc has joined #openstack-ansible | 08:32 | |
| *** f13o has joined #openstack-ansible | 08:33 | |
| zenirc | does https://raw.githubusercontent.com/ansible/ansible/devel/contrib/inventory/openstack.py give list of servers with their respective file names of the keys? | 08:33 |
| *** khamtamtun has joined #openstack-ansible | 08:33 | |
| *** khamtamtun has quit IRC | 08:35 | |
| *** karimb has joined #openstack-ansible | 08:37 | |
| *** khamtamtun has joined #openstack-ansible | 08:37 | |
| *** oanson has joined #openstack-ansible | 08:38 | |
| *** xek has joined #openstack-ansible | 08:38 | |
| *** khamtamtun has quit IRC | 08:44 | |
| *** aheczko has quit IRC | 08:46 | |
| *** aheczko has joined #openstack-ansible | 08:51 | |
| *** LiYuenan has joined #openstack-ansible | 08:58 | |
| *** Jack_Iv has joined #openstack-ansible | 09:08 | |
| *** aheczko has quit IRC | 09:11 | |
| *** LiYuenan has quit IRC | 09:11 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests: Update ansible-lint to 3.4.1 https://review.openstack.org/393655 | 09:16 |
| odyssey4me | zenirc off-hand I have no idea | 09:18 |
| zenirc | odyssey4me: you understood my question | 09:19 |
| zenirc | ? | 09:19 |
| neith | hello all | 09:19 |
| neith | anyone can help with this error? http://pastebin.com/L2TciqEs | 09:20 |
| zenirc | neith: can you paste nova log | 09:21 |
| neith | zenirc: from which container ? I have several nova container? | 09:23 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update ansible-lint to 3.4.1 https://review.openstack.org/391429 | 09:27 |
| *** zenirc has quit IRC | 09:27 | |
| openstackgerrit | Omer Anson proposed openstack/openstack-ansible-os_neutron: [WIP] Dragonflow https://review.openstack.org/391524 | 09:29 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update ansible-lint to 3.4.1 https://review.openstack.org/391429 | 09:31 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Remove extra extra_args https://review.openstack.org/393659 | 09:33 |
| *** haad1 has joined #openstack-ansible | 09:35 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_barbican: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393663 | 09:38 |
| *** zenirc has joined #openstack-ansible | 09:40 | |
| neith | zenirc: this ? http://pastebin.com/APj8sFr8 | 09:43 |
| evrardjp | odyssey4me: in favor not in favour :/ (for all the pip options/constraints mechanism patches) | 09:45 |
| odyssey4me | evrardjp what do you mean? | 09:46 |
| evrardjp | there is a typo in all the release notes | 09:46 |
| evrardjp | I'll probably fix that before someone from docs come by | 09:47 |
| evrardjp | and pretend it didn't happen | 09:47 |
| *** oanson has quit IRC | 09:48 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Temporarily pin Tempest SHA for Sahara testing https://review.openstack.org/393667 | 09:49 |
| odyssey4me | evrardjp what's the typo? | 09:49 |
| evrardjp | you used "in favour" instead of "in favor" | 09:50 |
| evrardjp | that's nothing important :p | 09:50 |
| odyssey4me | bah, no need to fix that | 09:50 |
| evrardjp | it just pain in my eye | 09:50 |
| odyssey4me | they're both acceptable spelling | 09:50 |
| odyssey4me | favour is right, favor is american | 09:50 |
| evrardjp | oh | 09:50 |
| evrardjp | well then we are fine | 09:51 |
| evrardjp | I thought both had to be written favor | 09:51 |
| evrardjp | I don't know why I made it an exception of the or/our in my mind | 09:51 |
| odyssey4me | evrardjp can you review this trivial fix? https://review.openstack.org/393659 | 09:52 |
| evrardjp | anyway it wasn't high in my prio list :p | 09:52 |
| evrardjp | sure | 09:52 |
| odyssey4me | if you're satisfied that it's all good, just workflow it too as it's trivial | 09:52 |
| evrardjp | let me finish the reviews I'm on first if you don't mind | 09:52 |
| odyssey4me | technically the docs guidelines say we should write american, but it hurts me | 09:52 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Add RHEL-07-010270 (ssh - empty password) https://review.openstack.org/391910 | 09:55 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Add RHEL-07-010430 and RHEL-07-010431 https://review.openstack.org/391930 | 09:55 |
| odyssey4me | I think we should merge this asap too https://review.openstack.org/393655 | 09:55 |
| odyssey4me | otherwise we'll regress | 09:56 |
| *** pjm6 has joined #openstack-ansible | 09:58 | |
| pjm6 | Hi guys | 09:59 |
| *** aheczko has joined #openstack-ansible | 10:04 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-openstack_hosts: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393675 | 10:07 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393677 | 10:09 |
| openstackgerrit | Merged openstack/openstack-ansible: Set the AIO to use bootstrap_host_public_interface https://review.openstack.org/392672 | 10:10 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Fix ansible-lint 3.4.1 regression https://review.openstack.org/393677 | 10:10 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Set the AIO to use bootstrap_host_public_interface https://review.openstack.org/393679 | 10:12 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder: Add cinder_profiler_hmac_key to cinder.conf https://review.openstack.org/393680 | 10:13 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder: Add cinder_profiler_hmac_key to cinder.conf https://review.openstack.org/393681 | 10:13 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_monasca: Optimizing monasca role. https://review.openstack.org/393684 | 10:17 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update Ansible to v2.2.0.0-1 https://review.openstack.org/389292 | 10:18 |
| *** kamtamtun has joined #openstack-ansible | 10:18 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_monasca: Optimizing monasca role. https://review.openstack.org/393684 | 10:20 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests: Update Ansible to v2.2.0.0-1 https://review.openstack.org/393686 | 10:20 |
| *** deepak_jon has joined #openstack-ansible | 10:25 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer: Remove extra extra_args https://review.openstack.org/393659 | 10:34 |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova: Disable SMT for ppc64 hypervisor and set VNC https://review.openstack.org/392912 | 10:34 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Remove extra extra_args https://review.openstack.org/393692 | 10:35 |
| *** aheczko has quit IRC | 10:40 | |
| odyssey4me | it looks like ansible 2.2 has a vars scope issue: http://logs.openstack.org/86/393686/1/check/gate-openstack-ansible-tests-ansible-func-centos-7/a8b7906/console.html#_2016-11-04_10_22_17_002174 | 10:41 |
| odyssey4me | notice that it's the pip_install role, but the vars are collected from the lxc_hosts role | 10:42 |
| *** mubix has quit IRC | 10:42 | |
| *** b3rn-n00dl3s has quit IRC | 10:42 | |
| *** worstadmin has quit IRC | 10:42 | |
| *** aheczko has joined #openstack-ansible | 10:42 | |
| *** b3rn-n00dl3s has joined #openstack-ansible | 10:42 | |
| *** Oku_OS has quit IRC | 10:43 | |
| *** izaakk has quit IRC | 10:43 | |
| *** git-harry has quit IRC | 10:43 | |
| *** sulo has quit IRC | 10:44 | |
| *** neith has quit IRC | 10:44 | |
| *** Apsu has quit IRC | 10:44 | |
| *** mancdaz has quit IRC | 10:44 | |
| *** pegmanm has quit IRC | 10:44 | |
| *** calebb has quit IRC | 10:44 | |
| *** sulo has joined #openstack-ansible | 10:44 | |
| *** worstadmin has joined #openstack-ansible | 10:45 | |
| *** mubix has joined #openstack-ansible | 10:45 | |
| *** neith has joined #openstack-ansible | 10:46 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_monasca: Optimizing monasca role. https://review.openstack.org/393684 | 10:47 |
| *** openstackgerrit has quit IRC | 10:47 | |
| odyssey4me | drifterza you're doing another megapatch - I'd advise doing that in smaller parts if you can | 10:48 |
| *** openstackgerrit has joined #openstack-ansible | 10:48 | |
| drifterza | its not really, its just small nit changes | 10:48 |
| *** mancdaz has joined #openstack-ansible | 10:48 | |
| drifterza | like variable names . | 10:49 |
| drifterza | and the keystone v3 change | 10:50 |
| *** Oku_OS has joined #openstack-ansible | 10:50 | |
| *** git-harry has joined #openstack-ansible | 10:50 | |
| *** Apsu has joined #openstack-ansible | 10:51 | |
| drifterza | odyssey4me, is it to big ? | 10:51 |
| odyssey4me | each patch should ideally solve a single problem | 10:51 |
| drifterza | oh crap | 10:52 |
| odyssey4me | that patch is solving many, but I guess it's not integrated at this stage so it's a bit of a free-for-all | 10:52 |
| odyssey4me | patches like that are horrible to review because so much s changing | 10:52 |
| drifterza | okay ill stop doing major changes from now. | 10:52 |
| drifterza | And rather do smaller sets | 10:52 |
| drifterza | this is the last one. | 10:52 |
| odyssey4me | try your best to break reviews up into small parts, that'll get quicker reviews | 10:53 |
| odyssey4me | sure | 10:53 |
| drifterza | Let me know if you have a nit about the keystone v3 stuff. | 10:53 |
| drifterza | I think its right now ? | 10:54 |
| drifterza | well I tested it and it gives me back a 200ok | 10:54 |
| *** shausy has quit IRC | 10:55 | |
| drifterza | odyssey4me, totally off topic but could I start work on making designate part of the integrated gate ? | 10:57 |
| *** calebb has joined #openstack-ansible | 10:58 | |
| *** electrofelix has joined #openstack-ansible | 10:58 | |
| odyssey4me | drifterza sure - start with just ensuring that the role tests themselves work and the way designate is configured is up to date | 10:58 |
| *** pegmanm has joined #openstack-ansible | 10:58 | |
| odyssey4me | if that's all good, then propose the integration patch | 10:58 |
| drifterza | Cool. | 10:58 |
| drifterza | ill put that on my list | 10:59 |
| odyssey4me | after that it'll need to be wired up to nova, etc so it'll likely need some iteration | 10:59 |
| *** izaakk has joined #openstack-ansible | 10:59 | |
| odyssey4me | it'll be great to finally see that merged | 10:59 |
| drifterza | Yeah it will be a few Pr | 10:59 |
| drifterza | pr's | 10:59 |
| drifterza | we as an org need designate so its worth my time at least :) | 11:00 |
| odyssey4me | excellent :) | 11:00 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_barbican: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393704 | 11:01 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393706 | 11:01 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393707 | 11:04 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ironic: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393708 | 11:05 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393709 | 11:06 |
| *** schwicht has joined #openstack-ansible | 11:07 | |
| odyssey4me | bbiab - going for a hair cut and running some errands | 11:09 |
| drifterza | later dude. | 11:10 |
| openstackgerrit | Merged openstack/openstack-ansible: Fix BaseException.message deprecation messages https://review.openstack.org/392279 | 11:11 |
| openstackgerrit | Merged openstack/openstack-ansible: Move storage_address discovery into a single task https://review.openstack.org/392969 | 11:11 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Remove the old rabbitmq queues https://review.openstack.org/389795 | 11:14 |
| *** Jack_Iv has quit IRC | 11:23 | |
| *** Jack_Iv has joined #openstack-ansible | 11:24 | |
| *** Jack_Iv has quit IRC | 11:24 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer: Remove extra extra_args https://review.openstack.org/393692 | 11:26 |
| *** hw_wutianwei has quit IRC | 11:29 | |
| *** schwicht has quit IRC | 11:34 | |
| *** retreved has joined #openstack-ansible | 11:37 | |
| *** retreved has quit IRC | 11:37 | |
| *** retreved has joined #openstack-ansible | 11:37 | |
| *** f13o has quit IRC | 11:41 | |
| *** f13o has joined #openstack-ansible | 11:42 | |
| *** thorst has joined #openstack-ansible | 11:52 | |
| *** thorst has quit IRC | 11:52 | |
| *** thorst has joined #openstack-ansible | 11:53 | |
| *** retreved has quit IRC | 12:00 | |
| *** retreved has joined #openstack-ansible | 12:04 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_nova: Adding support for Designate notifications. https://review.openstack.org/393729 | 12:08 |
| *** f13o has quit IRC | 12:13 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_neutron: Adding support for Designate notifications. https://review.openstack.org/393730 | 12:14 |
| *** xek has quit IRC | 12:17 | |
| mgariepy | good morning everyone | 12:21 |
| *** Mudpuppy has joined #openstack-ansible | 12:22 | |
| *** markvoelker has joined #openstack-ansible | 12:23 | |
| mhayden | morning | 12:26 |
| drifterza | hi hi | 12:27 |
| andymccr | morning mhayden | 12:27 |
| *** Mudpuppy has quit IRC | 12:28 | |
| mhayden | ohai andymccr -- are you back today? | 12:29 |
| pjm6 | mhayden, andymccr o/ | 12:30 |
| andymccr | mhayden: nope! sunday - its storming here a bit, so catching up on some emails etc. | 12:37 |
| andymccr | hey pjm6 | 12:37 |
| evrardjp | good morning everyone | 12:37 |
| *** deepak_jon has quit IRC | 12:40 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 12:40 |
| *** kjw3 has joined #openstack-ansible | 12:44 | |
| *** nixhed has joined #openstack-ansible | 12:48 | |
| *** f13o has joined #openstack-ansible | 12:54 | |
| *** jheroux has joined #openstack-ansible | 12:55 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 13:01 |
| drifterza | k I'm out | 13:03 |
| drifterza | later guys | 13:03 |
| *** zenirc has quit IRC | 13:05 | |
| mhayden | adios, drifterza | 13:06 |
| *** cathrichardson has joined #openstack-ansible | 13:07 | |
| *** drifterza has quit IRC | 13:07 | |
| *** schwicht has joined #openstack-ansible | 13:12 | |
| *** cathrich_ has joined #openstack-ansible | 13:12 | |
| *** cathrichardson has quit IRC | 13:13 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_barbican: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393704 | 13:14 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update all SHAs for Ocata 2016-11-04 https://review.openstack.org/389712 | 13:15 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393766 | 13:17 |
| *** aheczko has quit IRC | 13:18 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393768 | 13:20 |
| *** askb has quit IRC | 13:20 | |
| *** cathrich_ is now known as cathrichardson | 13:22 | |
| *** Mudpuppy has joined #openstack-ansible | 13:27 | |
| mgariepy | odyssey4me, https://review.openstack.org/#/c/393442/ we need to make /var/{run|lock}/neutron persistent on reboot. | 13:28 |
| odyssey4me | mgariepy ok, but it appears that it's not working on that review | 13:29 |
| mgariepy | yeah I know | 13:29 |
| mgariepy | the tmpfile stuff is only good for systemd | 13:29 |
| *** gouthamr has joined #openstack-ansible | 13:31 | |
| *** askb has joined #openstack-ansible | 13:34 | |
| *** askb has quit IRC | 13:34 | |
| *** pwnall1337 has joined #openstack-ansible | 13:35 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_neutron: Fix tmpfiles.d when multiple service are running. https://review.openstack.org/393442 | 13:35 |
| mgariepy | let's fix one issue at the time ;) | 13:37 |
| *** nixhed has quit IRC | 13:37 | |
| *** pwnall1337 has quit IRC | 13:39 | |
| *** jroll is now known as jrollinhatin | 13:40 | |
| *** pwnall1337 has joined #openstack-ansible | 13:40 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update all SHAs for 14.0.2 https://review.openstack.org/393777 | 13:46 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Set nova-lxd repo branch to stable/newton https://review.openstack.org/393779 | 13:50 |
| *** kamtamtun has quit IRC | 13:54 | |
| *** drifterza has joined #openstack-ansible | 13:58 | |
| *** jmckind has joined #openstack-ansible | 13:59 | |
| *** khamtamtun has joined #openstack-ansible | 14:00 | |
| *** spotz_zzz is now known as spotz | 14:00 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update all SHAs for 13.3.8 https://review.openstack.org/393783 | 14:01 |
| *** michaelgugino has joined #openstack-ansible | 14:02 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:02 |
| *** nixhed has joined #openstack-ansible | 14:07 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:08 |
| *** TxGirlGeek has joined #openstack-ansible | 14:09 | |
| *** spotz is now known as spotz_zzz | 14:10 | |
| *** chhavi has joined #openstack-ansible | 14:11 | |
| *** khamtamtun has quit IRC | 14:12 | |
| *** khamtamtun has joined #openstack-ansible | 14:12 | |
| *** aheczko has joined #openstack-ansible | 14:12 | |
| *** khamtamtun has quit IRC | 14:18 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:18 |
| *** victorhe has joined #openstack-ansible | 14:21 | |
| *** f13o_ has joined #openstack-ansible | 14:22 | |
| *** agrebennikov has joined #openstack-ansible | 14:23 | |
| *** f13o has quit IRC | 14:26 | |
| openstackgerrit | Pedro Magalhães (pjm6) proposed openstack/openstack-ansible-os_horizon: [PIP] Add optional pip packages to horizon https://review.openstack.org/393799 | 14:26 |
| *** khamtamtun has joined #openstack-ansible | 14:27 | |
| *** khamtamtun has quit IRC | 14:28 | |
| *** jperry has joined #openstack-ansible | 14:29 | |
| *** dxiri_ has joined #openstack-ansible | 14:29 | |
| *** khamtamtun has joined #openstack-ansible | 14:29 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:30 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update all SHAs for Ocata 2016-11-04 https://review.openstack.org/389712 | 14:32 |
| odyssey4me | logan- I think that calico has gone and changed the package name again | 14:33 |
| *** dxiri_ has quit IRC | 14:33 | |
| * logan- looks | 14:34 | |
| odyssey4me | I wonder if it perhaps makes sense to make use of the PPA for calico? | 14:35 |
| odyssey4me | Command \"python setup.py egg_info\" failed with error code 1 in /tmp/openstack-builder/calico/ | 14:35 |
| logan- | it looks like they switched over the python packaging to match the repo name change | 14:36 |
| *** khamtamtun has quit IRC | 14:36 | |
| logan- | hopefully this will be the last update required for this issue | 14:36 |
| odyssey4me | oh, so the package should now be 'felix' ? | 14:36 |
| logan- | https://github.com/projectcalico/felix/commit/65e5184420080a1767d885c944e43af7155b069e#diff-8cf6167d58ce775a08acafcfe6f40966 | 14:36 |
| logan- | yes it looks that way | 14:37 |
| odyssey4me | ah ok, so we'll need to fix that up in the os_neutron repo first | 14:37 |
| odyssey4me | can you push up a patch for that? | 14:37 |
| logan- | yep | 14:37 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update all SHAs for Ocata 2016-11-04 https://review.openstack.org/389712 | 14:37 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:38 |
| openstackgerrit | Pedro Magalhães (pjm6) proposed openstack/openstack-ansible-os_horizon: [PIP] Add optional pip packages to horizon https://review.openstack.org/393799 | 14:39 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-os_neutron: Change Calico package to Felix https://review.openstack.org/393806 | 14:39 |
| *** chhavi has quit IRC | 14:40 | |
| openstackgerrit | Merged openstack/openstack-ansible-ceph_client: Remove ansible<2.2 apt cache hack https://review.openstack.org/393501 | 14:41 |
| openstackgerrit | Merged openstack/openstack-ansible-haproxy_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393504 | 14:42 |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts: Remove ansible<2.2 apt cache hack https://review.openstack.org/393507 | 14:42 |
| openstackgerrit | Merged openstack/openstack-ansible-memcached_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393506 | 14:42 |
| openstackgerrit | Merged openstack/openstack-ansible-galera_client: Remove ansible<2.2 apt cache hack https://review.openstack.org/393502 | 14:43 |
| openstackgerrit | Merged openstack/openstack-ansible-pip_install: Remove ansible<2.2 apt cache hack https://review.openstack.org/393528 | 14:44 |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts: Remove ansible<2.2 apt cache hack https://review.openstack.org/393505 | 14:44 |
| openstackgerrit | Merged openstack/openstack-ansible-rsyslog_client: Remove ansible<2.2 apt cache hack https://review.openstack.org/393532 | 14:45 |
| drifterza | eventually | 14:46 |
| drifterza | jeeze | 14:46 |
| *** phalmos has joined #openstack-ansible | 14:47 | |
| openstackgerrit | Logan V proposed openstack/openstack-ansible: Change Calico package to Felix https://review.openstack.org/393810 | 14:47 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:48 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Remove ansible<2.2 apt cache hack https://review.openstack.org/393534 | 14:48 |
| cloudnull | mornings | 14:49 |
| drifterza | sorry for the spam | 14:49 |
| drifterza | hi cloudnull | 14:49 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:50 |
| cloudnull | o/ drifterza | 14:50 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:51 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update all SHAs for 12.2.8 https://review.openstack.org/393812 | 14:51 |
| automagically | o/ cloudnull | 14:52 |
| cloudnull | ohai automagically. how are things? | 14:52 |
| openstackgerrit | Merged openstack/openstack-ansible-repo_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393531 | 14:54 |
| openstackgerrit | Merged openstack/openstack-ansible-os_aodh: Remove ansible<2.2 apt cache hack https://review.openstack.org/393508 | 14:54 |
| openstackgerrit | Merged openstack/openstack-ansible-repo_build: Remove ansible<2.2 apt cache hack https://review.openstack.org/393530 | 14:54 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 14:54 |
| openstackgerrit | Merged openstack/openstack-ansible-os_watcher: Remove ansible<2.2 apt cache hack https://review.openstack.org/393526 | 14:54 |
| automagically | cloudnull: Generally good. Been enjoying your blog posts | 14:54 |
| cloudnull | i just recently start doing that again. | 14:55 |
| mgariepy | anyone here have a xenial installation ? I would like to know what are the perms on /run/lock dir. | 14:55 |
| cloudnull | im sure ill stop in a couple months and forget it's there for another year or so | 14:55 |
| cloudnull | mgariepy: i do | 14:55 |
| cloudnull | root:root 755 | 14:56 |
| mgariepy | ok thanks | 14:56 |
| cloudnull | that's to /run/lock | 14:56 |
| cloudnull | dirs inside have different perms | 14:56 |
| mgariepy | so dont restart neutron containers :P | 14:56 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Move storage_address discovery into a single task https://review.openstack.org/393814 | 14:57 |
| openstackgerrit | Merged openstack/openstack-ansible-os_horizon: Remove ansible<2.2 apt cache hack https://review.openstack.org/393517 | 14:57 |
| openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer: Remove ansible<2.2 apt cache hack https://review.openstack.org/393509 | 14:57 |
| openstackgerrit | Merged openstack/openstack-ansible: Fix bind mount of glance images https://review.openstack.org/393358 | 14:57 |
| cloudnull | mgariepy: why whats going on ? | 14:57 |
| mgariepy | - /run/lock/neutron isn't persistent and will probably fail to start some services | 14:57 |
| openstackgerrit | Merged openstack/openstack-ansible-os_cloudkitty: Remove ansible<2.2 apt cache hack https://review.openstack.org/393512 | 14:57 |
| openstackgerrit | Merged openstack/openstack-ansible-os_trove: Remove ansible<2.2 apt cache hack https://review.openstack.org/393525 | 14:58 |
| mgariepy | that's an issue I have with centos. | 14:58 |
| openstackgerrit | Merged openstack/openstack-ansible-os_heat: Remove ansible<2.2 apt cache hack https://review.openstack.org/393516 | 14:59 |
| openstackgerrit | Merged openstack/openstack-ansible-os_rally: Remove ansible<2.2 apt cache hack https://review.openstack.org/393521 | 14:59 |
| *** aheczko has quit IRC | 14:59 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Move storage_address discovery into a single task https://review.openstack.org/393814 | 14:59 |
| cloudnull | mgariepy: so when you restart the neutron conatiner the lock dir isn't coming back ? | 14:59 |
| mgariepy | cloudnull, maybe you can confirm it tho ? neutron-agent won't be able to save some iptables rules in it after restart | 15:00 |
| mgariepy | no, at least not on centos. probably not on xenial either | 15:00 |
| mgariepy | cloudnull, I wanted to fix it like so : https://review.openstack.org/#/c/393442/4/tasks/neutron_pre_install.yml | 15:01 |
| cloudnull | mgariepy: is this potentially an issue like so https://github.com/openstack/openstack-ansible-os_nova/commit/1d4c3ad6ece7648d7329c5a6bfd42ed9b53b3022 | 15:01 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Use HEAD stable-1.9 Ansible in bootstrap-ansible https://review.openstack.org/391303 | 15:01 |
| mgariepy | how do you fix it when you have multiple nova services in the same container ? | 15:02 |
| mgariepy | ho, well might be ok to have it multiple times in those cases. | 15:03 |
| openstackgerrit | Merged openstack/openstack-ansible-os_designate: Remove ansible<2.2 apt cache hack https://review.openstack.org/393513 | 15:03 |
| openstackgerrit | Merged openstack/openstack-ansible-os_glance: Remove ansible<2.2 apt cache hack https://review.openstack.org/393514 | 15:03 |
| openstackgerrit | Merged openstack/openstack-ansible-os_gnocchi: Remove ansible<2.2 apt cache hack https://review.openstack.org/393515 | 15:03 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Fix bind mount of glance images https://review.openstack.org/393817 | 15:03 |
| openstackgerrit | Merged openstack/openstack-ansible-rabbitmq_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393529 | 15:03 |
| openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer: Install ceilometer-polling on compute nodes https://review.openstack.org/393470 | 15:03 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update all SHAs for Ocata 2016-11-04 https://review.openstack.org/389712 | 15:05 |
| cloudnull | mgariepy: so long as the perms are the same it should be ok | 15:05 |
| openstackgerrit | Merged openstack/openstack-ansible-os_cinder: Remove ansible<2.2 apt cache hack https://review.openstack.org/393511 | 15:05 |
| mgariepy | o | 15:05 |
| mgariepy | i'll wait for https://review.openstack.org/#/c/393442 to merge and fix it. | 15:06 |
| cloudnull | mhayden: ^ | 15:09 |
| openstackgerrit | Merged openstack/openstack-ansible-os_swift: Remove ansible<2.2 apt cache hack https://review.openstack.org/393523 | 15:09 |
| cloudnull | any chance you have a moment to tune of that patch to pull in a couple of additional fixes? | 15:09 |
| cloudnull | mgariepy: you could also do a dependent patch | 15:10 |
| *** adrian_otto has joined #openstack-ansible | 15:11 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:11 | |
| mgariepy | ok -1 workflow to the patch will prevent the merge ? | 15:12 |
| openstackgerrit | Merged openstack/openstack-ansible-tests: Update ansible-lint to 3.4.1 https://review.openstack.org/393655 | 15:13 |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Temporarily pin Tempest SHA for Sahara testing https://review.openstack.org/393667 | 15:13 |
| cloudnull | mgariepy: that or we can build off of it. | 15:13 |
| cloudnull | with a subsequent one. | 15:13 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Fix bind mount of glance images https://review.openstack.org/393817 | 15:13 |
| *** weezS has joined #openstack-ansible | 15:14 | |
| *** drifterza has quit IRC | 15:14 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_neutron: Remove ansible<2.2 apt cache hack https://review.openstack.org/393519 | 15:15 |
| *** spotz_zzz is now known as spotz | 15:15 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Install ceilometer-polling on compute nodes https://review.openstack.org/393822 | 15:16 |
| *** aheczko has joined #openstack-ansible | 15:16 | |
| *** c-mart has joined #openstack-ansible | 15:16 | |
| mhayden | evrardjp: i was looking over your comments in https://review.openstack.org/392269 -- got a link to docs on the debsig-verify policy you're talking about? | 15:16 |
| evrardjp | odyssey4me: about the 2.2 apt cache, I'll check if add repo with update_cache now works | 15:17 |
| evrardjp | this way we can reduce further | 15:17 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Use upper constraints for all tox targets https://review.openstack.org/388446 | 15:17 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Simplify pip options/constraints mechanism https://review.openstack.org/392913 | 15:17 |
| evrardjp | mhayden: let me google that for you | 15:17 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Updated from global requirements https://review.openstack.org/392785 | 15:17 |
| *** dxiri has joined #openstack-ansible | 15:17 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/392636 | 15:17 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: [DOCS] Added release-name as a watermark to Docs. https://review.openstack.org/388150 | 15:17 |
| mhayden | evrardjp: hah, i'm finding some docs but didn't know if you knew of something specific | 15:17 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Remove 'ignore_errors: true' in favor of 'failed_when: false' https://review.openstack.org/386818 | 15:17 |
| *** dxiri has quit IRC | 15:17 | |
| evrardjp | http://blog.packagecloud.io/eng/2014/10/28/howto-gpg-sign-verify-deb-packages-apt-repositories/ | 15:17 |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova: Remove ansible<2.2 apt cache hack https://review.openstack.org/393520 | 15:17 |
| evrardjp | first result | 15:18 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393707 | 15:18 |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova: Simplify pip options/constraints mechanism https://review.openstack.org/393630 | 15:18 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Remove ansible<2.2 apt cache hack https://review.openstack.org/393522 | 15:18 |
| *** hughmFLEXin has joined #openstack-ansible | 15:18 | |
| *** grumpycatt has quit IRC | 15:18 | |
| evrardjp | the question was more: should we care? | 15:18 |
| evrardjp | I know it would be better | 15:18 |
| *** dxiri has joined #openstack-ansible | 15:18 | |
| *** messy has quit IRC | 15:18 | |
| evrardjp | maybe it's not the case anymore, and we maybe don't really need it | 15:19 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Temporarily pin Tempest SHA for Sahara testing https://review.openstack.org/393825 | 15:19 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_neutron: Fix tmpfiles.d when multiple service are running. https://review.openstack.org/393442 | 15:19 |
| evrardjp | I just 'thought it could be good to know that we're not "safe" because we did that | 15:19 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Simplify pip options/constraints mechanism https://review.openstack.org/392662 | 15:19 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Use centralised Ansible test scripts https://review.openstack.org/389144 | 15:19 |
| openstackgerrit | Merged openstack/openstack-ansible-os_magnum: Remove ansible<2.2 apt cache hack https://review.openstack.org/393518 | 15:21 |
| *** zenirc has joined #openstack-ansible | 15:23 | |
| *** grumpycatt has joined #openstack-ansible | 15:23 | |
| *** woodard has joined #openstack-ansible | 15:25 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Simplify pip options/constraints mechanism https://review.openstack.org/393827 | 15:26 |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Remove ansible<2.2 apt cache hack https://review.openstack.org/393524 | 15:26 |
| openstackgerrit | Merged openstack/openstack-ansible-os_swift: Add object-reconstructor for swift EC https://review.openstack.org/392104 | 15:27 |
| *** zenirc has quit IRC | 15:29 | |
| openstackgerrit | Merged openstack/openstack-ansible: Remove the old rabbitmq queues https://review.openstack.org/389795 | 15:29 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift: Simplify pip options/constraints mechanism https://review.openstack.org/393631 | 15:29 |
| *** messy has joined #openstack-ansible | 15:31 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_barbican: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393663 | 15:31 |
| *** khamtamtun has joined #openstack-ansible | 15:35 | |
| *** khamtamtun has quit IRC | 15:38 | |
| *** woodard has quit IRC | 15:39 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: GPG verification for packages https://review.openstack.org/392269 | 15:40 |
| *** karimb has quit IRC | 15:40 | |
| *** karimb has joined #openstack-ansible | 15:41 | |
| odyssey4me | we have one soutstanding linters update for the integrated repo - can we get some reviews for it please? https://review.openstack.org/393675 | 15:43 |
| *** c-mart has quit IRC | 15:43 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-galera_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393503 | 15:43 |
| odyssey4me | evrardjp I answered your question in there. | 15:43 |
| odyssey4me | oh, there is one more that needs review: https://review.openstack.org/392636 | 15:44 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-galera_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393503 | 15:46 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Simplify pip options/constraints mechanism https://review.openstack.org/393827 | 15:47 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Fix OVS kernel module vars https://review.openstack.org/393360 | 15:47 |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova: Set nova-lxd repo branch to stable/newton https://review.openstack.org/393779 | 15:52 |
| openstackgerrit | Merged openstack/openstack-ansible: Update Ansible to v2.2.0.0-1 https://review.openstack.org/389292 | 15:53 |
| *** karimb_ has joined #openstack-ansible | 15:53 | |
| openstackgerrit | Merged openstack/openstack-ansible-pip_install: Be more specific about Red Hat version for vars https://review.openstack.org/393696 | 15:54 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Use centralised Ansible test scripts https://review.openstack.org/389144 | 15:55 |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393675 | 15:56 |
| *** karimb has quit IRC | 15:56 | |
| *** kriskend has joined #openstack-ansible | 15:56 | |
| *** seroyer has joined #openstack-ansible | 15:56 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_barbican: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393704 | 15:56 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-tests: Update Ansible to v2.2.0.0-1 https://review.openstack.org/393686 | 15:57 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: [DOCS] Added release-name as a watermark to Docs. https://review.openstack.org/388150 | 15:57 |
| *** pcaruana has quit IRC | 15:58 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Remove 'ignore_errors: true' in favor of 'failed_when: false' https://review.openstack.org/386818 | 15:58 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Simplify pip options/constraints mechanism https://review.openstack.org/392913 | 15:58 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Remove ansible<2.2 apt cache hack https://review.openstack.org/393522 | 15:59 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Updated from global requirements https://review.openstack.org/392785 | 15:59 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Use upper constraints for all tox targets https://review.openstack.org/388446 | 15:59 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393707 | 15:59 |
| *** spotz is now known as spotz_zzz | 16:00 | |
| *** c-mart has joined #openstack-ansible | 16:00 | |
| *** spotz_zzz is now known as spotz | 16:01 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Simplify pip options/constraints mechanism https://review.openstack.org/393633 | 16:01 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_neutron: Fix tmpfiles.d when multiple service are running. https://review.openstack.org/393442 | 16:01 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-rsyslog_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393533 | 16:01 |
| openstackgerrit | Merged openstack/openstack-ansible-os_magnum: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393709 | 16:03 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_keystone: Implement zero downtime upgrades https://review.openstack.org/384269 | 16:03 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix tags https://review.openstack.org/393833 | 16:03 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Remove ansible<2.2 apt cache hack https://review.openstack.org/393519 | 16:03 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_zaqar: Remove ansible<2.2 apt cache hack https://review.openstack.org/393527 | 16:04 |
| odyssey4me | evrardjp FYI we do sometimes get SNI failures on CentOS unfortunately | 16:04 |
| evrardjp | oh still | 16:04 |
| evrardjp | ok | 16:04 |
| *** spotz is now known as spotz_zzz | 16:04 | |
| odyssey4me | love the ternary use in https://review.openstack.org/393503 - we should do that in os_neutron, os_nova, etc | 16:04 |
| openstackgerrit | Merged openstack/openstack-ansible-os_ironic: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393708 | 16:06 |
| odyssey4me | stable/newton's os_neutron tests are still the old, old style and fail intermittently for no reason :/ | 16:06 |
| *** 18VAABSMN has quit IRC | 16:06 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Fix ansible-lint 3.4.1 regression https://review.openstack.org/393677 | 16:07 |
| mhayden | odyssey4me: i'm considering writing a module for those locked accounts lookups -- it's not possible to wedge the module into the role, is it? | 16:07 |
| evrardjp | odyssey4me: not 100% | 16:07 |
| evrardjp | the ternary is good in this case | 16:07 |
| evrardjp | but in some other case it's better to use update_cache directly in apt_repository | 16:07 |
| odyssey4me | mhayden see https://github.com/openstack/openstack-ansible-os_neutron/tree/master/library | 16:07 |
| evrardjp | odyssey4me: it depends if there is a conditional or not, and think about how to properly reduce operations | 16:08 |
| odyssey4me | evrardjp I'm thinking of the same use case for os_nova, os_neutron | 16:08 |
| evrardjp | yeah but for example neutron has conditional of uca yes or no | 16:08 |
| odyssey4me | if the uca repo is added, refresh the cache forcibly | 16:08 |
| odyssey4me | right now we do that in two tasks | 16:09 |
| evrardjp | if the conditional is skipped, the cache is never done | 16:09 |
| odyssey4me | ah fair enough | 16:09 |
| *** raginbaj- has joined #openstack-ansible | 16:09 | |
| odyssey4me | there may be other places where that's useful too | 16:09 |
| evrardjp | I mean we have to think it appropriately :p | 16:09 |
| evrardjp | yes I'll have a look at all of the apt_repository basically | 16:09 |
| evrardjp | now that I know it's fixed too | 16:09 |
| odyssey4me | mhayden in other words - yes you can :) | 16:09 |
| openstackgerrit | Hugh Saunders proposed openstack/openstack-ansible: Protect CLI parameters passed through osa wrapper https://review.openstack.org/390480 | 16:09 |
| odyssey4me | Obama would be proud that his legacy lives on. | 16:09 |
| *** spotz_zzz is now known as spotz | 16:10 | |
| evrardjp | thanks hughmFLEXin | 16:10 |
| evrardjp | oops | 16:10 |
| evrardjp | I meant hughsaunders | 16:10 |
| odyssey4me | ah, hughsaunders - mystery solved? | 16:10 |
| hughsaunders | odyssey4me: yeah odd quoting in ANSIBLE_PARAMETERS was causing problems | 16:11 |
| odyssey4me | thanks for persisting on that | 16:12 |
| odyssey4me | I was getting to the point of considering doing a python wrapper instead. :p | 16:12 |
| *** Oku_OS is now known as Oku_OS-away | 16:13 | |
| evrardjp | odyssey4me: it's a good idea to have a python wrapper | 16:15 |
| evrardjp | :D | 16:15 |
| hughsaunders | evrardjp: m04r python | 16:16 |
| evrardjp | import ansible is so easy | 16:16 |
| odyssey4me | sure, although I'd still rather get rid of the wrapper entirely | 16:16 |
| evrardjp | haha good luck with that | 16:16 |
| odyssey4me | no extra-vars == no wrapper | 16:16 |
| hughsaunders | people would have to remember to -e their own overrides | 16:17 |
| evrardjp | hughsaunders: they wouldn't need to | 16:17 |
| hughsaunders | but thats not a large problem | 16:17 |
| evrardjp | if we properly do stuff | 16:17 |
| odyssey4me | allow /etc/openstack_deploy/{host_vars,group_vars} to be used for overriding defaults, then the dynamic inventory can take care of it instead of extra vars | 16:17 |
| evrardjp | we should just use more of the ansible's dir.py | 16:17 |
| hughsaunders | moving overrides to the inventory is good, gives people options for storing config in external inventories | 16:18 |
| evrardjp | hagrid! | 16:19 |
| logan- | using host vars and group vars is fine until you start wanting to override stuff in role vars files | 16:20 |
| *** agrebennikov has quit IRC | 16:21 | |
| logan- | oh i guess if dynamic inventory is doing it they would become inventory vars | 16:21 |
| logan- | which have precedence then I think? | 16:21 |
| *** c-mart has quit IRC | 16:21 | |
| *** pegmanm_ has joined #openstack-ansible | 16:23 | |
| odyssey4me | logan- I'm sure we could figure that out. | 16:23 |
| odyssey4me | and it doesn't mean that extra vars aren't available - it just means that you choose to use them instead of forcing the implementation | 16:23 |
| logan- | gotcha | 16:24 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-lxc_hosts: Ensure apparmor is running before reloading https://review.openstack.org/393838 | 16:25 |
| odyssey4me | the task consolidation is making a significant difference | 16:27 |
| odyssey4me | see 48 min run time for https://review.openstack.org/#/c/389292/ | 16:27 |
| odyssey4me | well, that's combined with Ansible 2.2 as well | 16:28 |
| odyssey4me | that's osic cloud1 on the spinning disk, which normally takes around 70 mins | 16:28 |
| logan- | wow | 16:28 |
| odyssey4me | let's find more tasks to consolidate! :) | 16:29 |
| palendae | Awesome | 16:29 |
| cloudnull | nice! | 16:29 |
| jmccrory | good breathing room for affinities to come back :) | 16:31 |
| odyssey4me | jmccrory for sure :) | 16:32 |
| odyssey4me | we may even get a pass with ovh :) | 16:32 |
| *** jlockwood has joined #openstack-ansible | 16:32 | |
| *** pegmanm_ has quit IRC | 16:33 | |
| neith | odyssey4me: to run CI on ovh? | 16:33 |
| odyssey4me | neith one of nodepool's providers is ovh - our integrated builds typically fail on it due to a timeout | 16:34 |
| logan- | any idea how much of that speed improvement is 2.2 and how much is task optimizations in OSA? | 16:34 |
| odyssey4me | logan- not sure - we've done a combined set | 16:35 |
| logan- | oh well, great either way | 16:35 |
| *** pester has joined #openstack-ansible | 16:37 | |
| *** h5t4 has quit IRC | 16:37 | |
| *** f13o_ has quit IRC | 16:38 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_barbican: Use updated get_url module checksum functionality https://review.openstack.org/393844 | 16:38 |
| *** pester has quit IRC | 16:39 | |
| evrardjp | yes I think there is still much to do in the cleanup of ansible 2.2 | 16:39 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_barbican: Use updated get_url module checksum functionality https://review.openstack.org/393844 | 16:39 |
| *** fxpester has quit IRC | 16:40 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh: Use updated get_url module checksum functionality https://review.openstack.org/393845 | 16:40 |
| *** mrhillsman is now known as icanchangethatth | 16:40 | |
| *** icanchangethatth is now known as mrhillsman | 16:41 | |
| neith | instances are not spawning because of a port creation issue, can someone help me to understand this log? http://pastebin.com/WHKHDvYj | 16:41 |
| *** c-mart has joined #openstack-ansible | 16:42 | |
| openstackgerrit | Merged openstack/openstack-ansible: Update all SHAs for 13.3.8 https://review.openstack.org/393783 | 16:42 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_neutron: Remove ansible<2.2 apt cache hack https://review.openstack.org/393519 | 16:42 |
| openstackgerrit | Merged openstack/openstack-ansible: [docs] Update branch names for Ocata https://review.openstack.org/392517 | 16:42 |
| *** hughmFLE_ has joined #openstack-ansible | 16:43 | |
| *** gouthamr has quit IRC | 16:43 | |
| *** hughmFLEXin has quit IRC | 16:45 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Use updated get_url module checksum functionality https://review.openstack.org/393847 | 16:46 |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/392636 | 16:47 |
| *** f13o_ has joined #openstack-ansible | 16:47 | |
| *** pegmanm_ has joined #openstack-ansible | 16:47 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-ceph_client: Use apt_repository update_cache feature https://review.openstack.org/393849 | 16:50 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-galera_client: Use apt_repository update_cache feature https://review.openstack.org/393851 | 16:51 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-haproxy_server: Use apt_repository update_cache feature https://review.openstack.org/393852 | 16:51 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder: Use updated get_url module checksum functionality https://review.openstack.org/393853 | 16:51 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-ops: Use apt_repository update_cache feature https://review.openstack.org/393854 | 16:51 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_nova: Use apt_repository update_cache feature https://review.openstack.org/393856 | 16:51 |
| *** jamielennox is now known as jamielennox|away | 16:51 | |
| odyssey4me | argh evrardjp could you please use a consistent topic/branch for those patches to make them easier to find ? | 16:52 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-repo_build: Use apt_repository update_cache feature https://review.openstack.org/393857 | 16:52 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393768 | 16:52 |
| evrardjp | yes this one I forgot to add a topic | 16:53 |
| evrardjp | I'll add another topic name because it's not 100% the same thing | 16:53 |
| evrardjp | except if you want to make it easier to find all of them | 16:53 |
| *** TxGirlGeek has quit IRC | 16:54 | |
| evrardjp | ok I put the same name | 16:55 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cloudkitty: Use updated get_url module checksum functionality https://review.openstack.org/393863 | 16:55 |
| odyssey4me | evrardjp yeah, it makes it easier to find them and review them together | 16:56 |
| odyssey4me | assuming they're the same or similar patches | 16:56 |
| evrardjp | yes they are different in my mind but I can accept a combination | 16:56 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_designate: Use updated get_url module checksum functionality https://review.openstack.org/393865 | 16:58 |
| *** haad1 has quit IRC | 16:59 | |
| *** pegmanm_ has quit IRC | 17:00 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_glance: Use updated get_url module checksum functionality https://review.openstack.org/393866 | 17:01 |
| *** chhavi has joined #openstack-ansible | 17:07 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Fix OVS kernel module vars https://review.openstack.org/393868 | 17:07 |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Remove ansible<2.2 apt cache hack https://review.openstack.org/393522 | 17:09 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_zaqar: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393870 | 17:09 |
| *** agarner has quit IRC | 17:09 | |
| *** aleph1 has joined #openstack-ansible | 17:10 | |
| *** pegmanm_ has joined #openstack-ansible | 17:10 | |
| *** aleph1 has quit IRC | 17:11 | |
| *** aleph1 has joined #openstack-ansible | 17:12 | |
| evrardjp | odyssey4me: jmccrory logan- if possible for these linting issues, I'd rather have the task skipped than including a changed_when: false | 17:13 |
| *** aheczko has quit IRC | 17:14 | |
| evrardjp | lint skipped* | 17:14 |
| evrardjp | it's merged now but it's still worth mentioning | 17:14 |
| *** aleph1 has quit IRC | 17:14 | |
| mgariepy | can I have some review on https://review.openstack.org/#/c/393442/ please :D | 17:14 |
| *** aheczko has joined #openstack-ansible | 17:14 | |
| *** aheczko has quit IRC | 17:14 | |
| evrardjp | yup | 17:14 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cloudkitty: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393871 | 17:15 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_zaqar: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393870 | 17:15 |
| *** aleph1 has joined #openstack-ansible | 17:15 | |
| logan- | evrardjp: i guess the reasoning is the changed_when: false hides our idempotence issues with the task? | 17:15 |
| evrardjp | yup | 17:16 |
| evrardjp | if it's possible to fix idempotency instead that would be better | 17:16 |
| evrardjp | maybe we should have a module for the db manage | 17:16 |
| *** pegmanm_ has quit IRC | 17:17 | |
| odyssey4me | you'd have to have one per service because they're so inconsistent | 17:18 |
| *** jmckind has quit IRC | 17:18 | |
| evrardjp | pfff | 17:20 |
| evrardjp | so sad | 17:20 |
| evrardjp | I thought this was calling sqlalchemy and we could use this for wrapping it all up | 17:21 |
| evrardjp | mgariepy: reviewed, don't see a problem itself, just a question before I vote | 17:21 |
| odyssey4me | evrardjp ask hughsaunders just how consistently it's used :) | 17:21 |
| odyssey4me | every project has its own way - you can't use sqalchemy directly through an API or anything | 17:22 |
| evrardjp | hehe I know I have to ask him, he is just not here right now :) | 17:22 |
| odyssey4me | anyway - I need to run | 17:22 |
| evrardjp | that's true but I guess we can call sql alchemy from an ansible module | 17:22 |
| evrardjp | but yes, probably too much work | 17:22 |
| spotz | have a good weekend odyssey4me | 17:22 |
| odyssey4me | time out for me - have a great w/end all | 17:22 |
| evrardjp | enjoy your week-end odyssey4me! | 17:22 |
| evrardjp | get your car fixed! | 17:22 |
| evrardjp | :p | 17:23 |
| evrardjp | else, what do you think guys of asking the projects to have proper return codes for their db manage stuff? | 17:23 |
| evrardjp | that could fix our issues :p | 17:23 |
| palendae | Certainly doesn't hurt to ask | 17:23 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible: Resolve dynamic inventory libs through symlink https://review.openstack.org/393875 | 17:23 |
| palendae | Making DB behavior more consistent is a worthy cross-project goal, IMO | 17:23 |
| *** aleph1 has quit IRC | 17:24 | |
| evrardjp | palendae: I don't expect that to be achievable short term | 17:24 |
| palendae | Nor do I | 17:24 |
| palendae | Still worthy :) | 17:24 |
| evrardjp | while proper return code would be quite feasible, just a few cycles per project I guess | 17:24 |
| mgariepy | evrardjp, replied :D | 17:24 |
| evrardjp | mgariepy: cool | 17:24 |
| *** aleph1 has joined #openstack-ansible | 17:26 | |
| *** aleph1 has quit IRC | 17:29 | |
| *** aludwar has quit IRC | 17:30 | |
| *** aludwar has joined #openstack-ansible | 17:31 | |
| *** sshen_ has quit IRC | 17:31 | |
| *** javeriak has joined #openstack-ansible | 17:32 | |
| *** sshen has joined #openstack-ansible | 17:33 | |
| *** chris_hultin is now known as chris_hultin|AWA | 17:33 | |
| *** adrian_otto1 has joined #openstack-ansible | 17:39 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_zaqar: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393870 | 17:39 |
| *** adrian_otto has quit IRC | 17:40 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_tempest: Use upstream openstack network modules https://review.openstack.org/393879 | 17:40 |
| openstackgerrit | Merged openstack/openstack-ansible-rsyslog_server: Remove ansible<2.2 apt cache hack https://review.openstack.org/393533 | 17:41 |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: [DOCS] Added release-name as a watermark to Docs. https://review.openstack.org/388150 | 17:44 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-plugins: Remove neutron library https://review.openstack.org/393882 | 17:46 |
| *** chhavi has quit IRC | 17:46 | |
| *** f13o_ has quit IRC | 17:47 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393883 | 17:48 |
| *** javeriak has quit IRC | 17:48 | |
| mhayden | odyssey4me: i'll give that a try | 17:50 |
| openstackgerrit | Merged openstack/openstack-ansible: Fix bind mount of glance images https://review.openstack.org/393817 | 17:53 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_tempest: Use upstream openstack network modules https://review.openstack.org/393879 | 17:55 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Fix OVS kernel module vars https://review.openstack.org/393868 | 17:55 |
| *** adrian_otto1 has quit IRC | 17:56 | |
| *** fguillot has quit IRC | 17:56 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Remove packages according to STIG https://review.openstack.org/391972 | 17:58 |
| *** poopcat has joined #openstack-ansible | 18:01 | |
| *** adrian_otto has joined #openstack-ansible | 18:04 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: GPG verification for packages https://review.openstack.org/392269 | 18:04 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix tags https://review.openstack.org/393833 | 18:04 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_glance: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393889 | 18:08 |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Update paste, policy and rootwrap configurations 2016-11-04 https://review.openstack.org/393707 | 18:09 |
| *** poopcat has quit IRC | 18:10 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Remove packages according to STIG https://review.openstack.org/391972 | 18:10 |
| *** poopcat has joined #openstack-ansible | 18:11 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Remove 'ignore_errors: true' in favor of 'failed_when: false' https://review.openstack.org/386818 | 18:12 |
| c-mart | wheee. can reproduce https://bugs.launchpad.net/openstack-ansible/+bug/1624791 | 18:12 |
| openstack | Launchpad bug 1624791 in openstack-ansible "Horizon randomly fails to connect to the service APIs" [High,Won't fix] | 18:12 |
| cloudnull | c-mart: and does downgrading python-cryptography and pyopenssl fix it? | 18:13 |
| c-mart | trying that shortly | 18:13 |
| cloudnull | I've seen this issue in the osic and simply havent had the time to look into it | 18:14 |
| c-mart | yup. for me it's only for calls that Horizon makes to the HTTPS, public Keystone Admin API, I'm guessing for other calls it uses internal APIs, which do not trigger the bug :) | 18:15 |
| mgariepy | anyone knows why this happens http://logs.openstack.org/42/393442/7/gate/gate-openstack-ansible-os_neutron-ansible-func-centos-7/4d66bfa/console.html#_2016-11-04_17_46_38_109401 | 18:15 |
| *** karimb_ has quit IRC | 18:16 | |
| *** TxGirlGeek has joined #openstack-ansible | 18:17 | |
| *** karimb has joined #openstack-ansible | 18:17 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Remove packages according to STIG https://review.openstack.org/391972 | 18:18 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: GPG verification for packages https://review.openstack.org/392269 | 18:18 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix tags https://review.openstack.org/393833 | 18:18 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_designate: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393891 | 18:18 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_designate: Use updated get_url module checksum functionality https://review.openstack.org/393865 | 18:20 |
| *** jmckind has joined #openstack-ansible | 18:21 | |
| *** karimb has quit IRC | 18:27 | |
| *** johnthetubaguy has quit IRC | 18:28 | |
| *** karimb has joined #openstack-ansible | 18:28 | |
| *** johnthetubaguy_ has joined #openstack-ansible | 18:28 | |
| *** johnthetubaguy_ is now known as johnthetubaguy | 18:30 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_zaqar: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393870 | 18:31 |
| openstackgerrit | Merged openstack/openstack-ansible-os_magnum: Remove 'ignore_errors: true' in favor of 'failed_when: false' https://review.openstack.org/392105 | 18:31 |
| *** jmckind has quit IRC | 18:33 | |
| *** electrofelix has quit IRC | 18:34 | |
| mhayden | tmpfile | 18:34 |
| mhayden | oopsies | 18:34 |
| mgariepy | ? | 18:35 |
| mgariepy | mhayden, ^^ ? | 18:36 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_cinder: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393900 | 18:37 |
| *** gus has quit IRC | 18:38 | |
| *** jamielennox|away has quit IRC | 18:38 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Use upper constraints for all tox targets https://review.openstack.org/388446 | 18:39 |
| mhayden | mgariepy: pasted in the wrong window :P | 18:41 |
| mgariepy | ha ok, because i made some patches for tmpfile stuff ;P haha i was just wondering a bit what you were talking about | 18:41 |
| stevelle | evrardjp: might be easier to add a cmd to the db manage operations to check if an upgrade is needed | 18:43 |
| stevelle | evrardjp: adding, if we propose the specs / blueprints / changes ourselves that would help but then it is still a problem of getting reviews | 18:44 |
| *** karimb has quit IRC | 18:46 | |
| *** stelouie has joined #openstack-ansible | 18:47 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Use centralised Ansible test scripts https://review.openstack.org/389144 | 18:47 |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara: Simplify pip options/constraints mechanism https://review.openstack.org/392913 | 18:47 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_heat: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393904 | 18:49 |
| c-mart | I have a "codebase orientation" question: where do we set which versions of PIP packages are installed in containers (outside virtualenvs)? | 18:49 |
| logan- | pip is pinned in https://github.com/openstack/openstack-ansible/blob/master/global-requirement-pins.txt | 18:51 |
| *** m4rx has joined #openstack-ansible | 18:51 | |
| c-mart | logan-, that's for pip itself -- i'm asking about for all the other packages that are installed via pip | 18:51 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Install screen and ssh client/server https://review.openstack.org/393905 | 18:52 |
| c-mart | e.g. in my repo containers, I see pyopenssl-16.1.0-py2.py3-none-any.whl. where is that pinned? | 18:52 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_swift: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393907 | 18:54 |
| logan- | oh, misread. that would be part of the repo_build role. it compiles a list of requirements from openstack's requirements repo, upper constraints, the package shas that are defined in playbooks/defaults, etc and builds the repo of wheels based on that. there is some logging on the repo containers in /var/log somewhere and also in /var/www/repo/os-releases/<tag>/requirements* | 18:54 |
| *** hughmFLE_ has quit IRC | 18:54 | |
| * mhayden tips his hat to spotz for the quick look :) | 18:55 | |
| spotz | mhayden anytime | 18:55 |
| c-mart | cool. ultimately I'd like to determine which PyPI package versions of pyOpenSSL and cryptography are installed with Mitaka, vs. Newton (all I have is a Newton deployment) | 18:55 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_ceilometer: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393908 | 18:56 |
| logan- | i would look in /var/www/repo/os-releases/<tag>/requirements_absolute_requirements.txt to determine on a per-tag basis which wheels and versions are being built | 18:56 |
| *** hughmFLEXin has joined #openstack-ansible | 18:56 | |
| c-mart | yeah, it looks like requirements_absolute_requirements.txt is dynamically generated https://github.com/openstack/openstack-ansible-repo_build/blob/c7bf6779141bb59436f909475566ea9f14a2378a/templates/requirements_absolute_requirements.txt.j2 | 18:58 |
| logan- | correct | 18:58 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_aodh: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393909 | 18:58 |
| logan- | it is not pinned in the OSA repo anywhere | 18:59 |
| c-mart | in that case, can anyone share with me what that file looks like for them on a Mitaka deployment? :) I don't have one handy, is all. | 18:59 |
| logan- | let me check, one moment | 18:59 |
| *** gus has joined #openstack-ansible | 18:59 | |
| logan- | for 13.3.3 tag I have pyopenssl==0.15.1 and cryptography==1.2.3 | 19:00 |
| c-mart | thank you logan- | 19:00 |
| *** javeriak has joined #openstack-ansible | 19:00 | |
| *** victorhe_ has joined #openstack-ansible | 19:02 | |
| c-mart | so all of the OpenStack components within a given release share the same Python dependency versions? | 19:02 |
| dxiri | cloudnull: I figured out the dhcp stuff yesterday :) | 19:03 |
| *** victorhe_ has quit IRC | 19:03 | |
| *** victorhe_ has joined #openstack-ansible | 19:04 | |
| logan- | c-mart: more so now than in the past, yes. https://github.com/openstack/requirements | 19:04 |
| *** victorhe has quit IRC | 19:05 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_cinder: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393900 | 19:05 |
| *** jlockwood has quit IRC | 19:07 | |
| *** jamielennox|away has joined #openstack-ansible | 19:13 | |
| *** jamielennox|away is now known as jamielennox | 19:13 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_ironic: Fix tmpfiles.d when multiple service are running https://review.openstack.org/393914 | 19:13 |
| *** weezS has quit IRC | 19:14 | |
| *** dxiri has quit IRC | 19:15 | |
| *** dxiri has joined #openstack-ansible | 19:16 | |
| mgariepy | have a nice weekend everyone | 19:16 |
| cloudnull | dxiri: what was it ? | 19:27 |
| cloudnull | dxiri: something that we need to adjust in osa or maybe just document? | 19:28 |
| cloudnull | mgariepy: cya later. | 19:28 |
| dxiri | turn out I was following the appendix A on the documentation...and nowhere in there it mentions that you need to put an interface on the controller inside br-vlan | 19:28 |
| dxiri | would be good if that could be mentioned somewhere | 19:28 |
| dxiri | br-vlan on the compute host works ok with "bridge_ports none" | 19:29 |
| cloudnull | If you wouldn't mind raising an issue for that I'm sure we can get something in to note that. | 19:29 |
| dxiri | but for the controller, network node should be something in there | 19:29 |
| dxiri | in the case of a single nic vlaned, you would put eth0 in there | 19:29 |
| dxiri | sure, where can I do that? I could also volunteer to fix it myself :) | 19:30 |
| *** h5t4 has joined #openstack-ansible | 19:30 | |
| *** adrian_otto1 has joined #openstack-ansible | 19:32 | |
| *** adrian_otto has quit IRC | 19:32 | |
| *** javeriak has quit IRC | 19:36 | |
| c-mart | OSA seems to be install some pip packages at the system level, and some in virtualenvs. is there a reason OSA does both, and not entirely in venvs? | 19:37 |
| *** Mudpuppy has quit IRC | 19:38 | |
| *** f13o_ has joined #openstack-ansible | 19:38 | |
| stevelle | c-mart: any packages used by ansible (to create service endpoints for instance) will be at system level (like keystoneauth1 and keystoneclient) | 19:40 |
| stevelle | in time we would like to clean that up but we didn't add venv support to our keystone module | 19:40 |
| automagically | FWIW, Ansible is pretty flaky when used with virtualenvs as well | 19:45 |
| automagically | Many modules do not respect the virtualenv | 19:45 |
| *** jmckind has joined #openstack-ansible | 19:50 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_designate: Fix linting issues for ansible-lint 3.4.1 https://review.openstack.org/393891 | 19:51 |
| *** phalmos has quit IRC | 19:55 | |
| openstackgerrit | Pedro Magalhães (pjm6) proposed openstack/openstack-ansible-os_horizon: Add optional pip packages to horizon https://review.openstack.org/393799 | 20:00 |
| openstackgerrit | Merged openstack/openstack-ansible-galera_client: Use apt_repository update_cache feature https://review.openstack.org/393851 | 20:01 |
| openstackgerrit | Merged openstack/openstack-ansible-ops: Use apt_repository update_cache feature https://review.openstack.org/393854 | 20:02 |
| openstackgerrit | Merged openstack/openstack-ansible-haproxy_server: Use apt_repository update_cache feature https://review.openstack.org/393852 | 20:02 |
| *** victorhe_ has quit IRC | 20:02 | |
| *** TxGirlGeek has quit IRC | 20:04 | |
| *** adrian_otto has joined #openstack-ansible | 20:04 | |
| *** adrian_otto1 has quit IRC | 20:04 | |
| *** jlockwood has joined #openstack-ansible | 20:07 | |
| *** TxGirlGeek has joined #openstack-ansible | 20:11 | |
| ioni | is there a way to only push configuration changes and restart daemon on a specific playbook? | 20:11 |
| automagically | ioni: Sure, just execute only that playbook with the service-config tag. So, for Cinder, you’d use the cinder-config tag | 20:13 |
| automagically | Assuming you are running Newton | 20:13 |
| ioni | yes, newton | 20:13 |
| ioni | thank you | 20:13 |
| *** karimb has joined #openstack-ansible | 20:14 | |
| *** victorhe has joined #openstack-ansible | 20:17 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_designate: Use updated get_url module checksum functionality https://review.openstack.org/393865 | 20:18 |
| *** kvcobb has joined #openstack-ansible | 20:22 | |
| *** michaelgugino has quit IRC | 20:24 | |
| *** hughmFLEXin has quit IRC | 20:25 | |
| *** jmckind has quit IRC | 20:26 | |
| *** adrian_otto has quit IRC | 20:26 | |
| *** retreved_ has joined #openstack-ansible | 20:29 | |
| *** retreved has quit IRC | 20:33 | |
| *** retreved_ has quit IRC | 20:33 | |
| *** victorhe has quit IRC | 20:33 | |
| *** stelouie has quit IRC | 20:34 | |
| *** javeriak has joined #openstack-ansible | 20:37 | |
| *** adrian_otto has joined #openstack-ansible | 20:40 | |
| *** karimb has quit IRC | 20:40 | |
| *** weezS has joined #openstack-ansible | 20:41 | |
| *** askb has joined #openstack-ansible | 20:43 | |
| *** weezS has quit IRC | 20:43 | |
| *** hughmFLEXin has joined #openstack-ansible | 20:44 | |
| *** adrian_otto has quit IRC | 20:45 | |
| *** jmckind has joined #openstack-ansible | 20:45 | |
| *** pjm6_ has joined #openstack-ansible | 20:46 | |
| *** jlockwood has quit IRC | 20:47 | |
| *** victorhe has joined #openstack-ansible | 20:48 | |
| *** pjm6 has quit IRC | 20:48 | |
| *** jlockwood has joined #openstack-ansible | 20:50 | |
| *** karimb has joined #openstack-ansible | 20:50 | |
| *** jheroux has quit IRC | 20:57 | |
| *** jmckind has quit IRC | 20:58 | |
| *** thorst has quit IRC | 20:58 | |
| *** victorhe has quit IRC | 20:58 | |
| *** victorhe has joined #openstack-ansible | 20:58 | |
| *** schwicht has quit IRC | 21:02 | |
| *** Mudpuppy has joined #openstack-ansible | 21:03 | |
| *** spotz is now known as spotz_zzz | 21:05 | |
| *** thorst has joined #openstack-ansible | 21:06 | |
| *** thorst has quit IRC | 21:10 | |
| *** h5t4 has quit IRC | 21:11 | |
| *** jmckind has joined #openstack-ansible | 21:12 | |
| *** schwicht has joined #openstack-ansible | 21:18 | |
| *** thorst has joined #openstack-ansible | 21:24 | |
| *** pjm6_ is now known as pjm6 | 21:24 | |
| *** jmckind has quit IRC | 21:24 | |
| *** thorst has quit IRC | 21:26 | |
| *** schwicht has quit IRC | 21:27 | |
| *** thorst has joined #openstack-ansible | 21:35 | |
| *** schwicht has joined #openstack-ansible | 21:36 | |
| *** jrollinhatin is now known as jroll | 21:36 | |
| *** dxiri has quit IRC | 21:37 | |
| *** dxiri has joined #openstack-ansible | 21:38 | |
| *** thorst has quit IRC | 21:40 | |
| *** haad1 has joined #openstack-ansible | 21:40 | |
| *** sdake has joined #openstack-ansible | 21:42 | |
| *** seroyer has quit IRC | 21:43 | |
| *** haad1 has quit IRC | 21:46 | |
| *** kriskend has quit IRC | 21:48 | |
| *** askb has quit IRC | 21:49 | |
| *** retreved has joined #openstack-ansible | 21:50 | |
| *** aludwar has quit IRC | 21:58 | |
| *** jperry has quit IRC | 21:59 | |
| *** dxiri has quit IRC | 22:01 | |
| *** dxiri has joined #openstack-ansible | 22:01 | |
| *** hughmFLE_ has joined #openstack-ansible | 22:02 | |
| *** dxiri has quit IRC | 22:03 | |
| *** schwicht has quit IRC | 22:03 | |
| *** hughmFLEXin has quit IRC | 22:05 | |
| *** retreved has quit IRC | 22:07 | |
| c-mart | how do people feel about running a firewall on their OpenStack infrastructure hosts? it doesn't look like OSA configures one for me, but I expect it's easy enough to do -- just look at all the listening ports and build a ruleset around them | 22:11 |
| c-mart | OSA basically leaves iptables wide open. is anyone running ufw, for example, on their infra hosts? | 22:12 |
| *** aludwar has joined #openstack-ansible | 22:13 | |
| *** dxiri has joined #openstack-ansible | 22:13 | |
| *** victorhe has quit IRC | 22:15 | |
| *** dxiri has quit IRC | 22:20 | |
| *** dxiri has joined #openstack-ansible | 22:20 | |
| *** dxiri has quit IRC | 22:23 | |
| *** dxiri has joined #openstack-ansible | 22:23 | |
| *** dxiri has quit IRC | 22:28 | |
| *** retreved has joined #openstack-ansible | 22:29 | |
| *** retreved has quit IRC | 22:29 | |
| *** sdake has quit IRC | 22:37 | |
| *** sdake has joined #openstack-ansible | 22:40 | |
| *** pwnall1337 is now known as testpwnall | 22:41 | |
| *** testpwnall is now known as pwnall1337 | 22:41 | |
| *** schwicht has joined #openstack-ansible | 22:43 | |
| cloudnull | c-mart: I think it's a fine idea. | 22:48 |
| *** c-mart has left #openstack-ansible | 22:48 | |
| cloudnull | I'm not running UFW in my clouds on the physical gear as our ref-arch generally uses a top of rack FW. however I think it'd be great to further secure the control plane. | 22:49 |
| cloudnull | I'm not 100% sold on UFW but I like the idea. | 22:49 |
| *** dxiri has joined #openstack-ansible | 22:52 | |
| *** dxiri has quit IRC | 22:55 | |
| *** dxiri_ has joined #openstack-ansible | 22:55 | |
| *** TxGirlGeek has quit IRC | 22:58 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible: Adding Designate to integrated repo. https://review.openstack.org/393755 | 23:01 |
| *** c-mart has joined #openstack-ansible | 23:01 | |
| c-mart | my only gripe about ufw is it's an abstraction of iptables, and all abstractions are leaky. but it is the Ubuntu default, and this is an Ubuntu project. | 23:03 |
| cloudnull | If we could build a nice-ish interface into straight up iptables i'd be all for that. | 23:05 |
| cloudnull | I imagine we could do something with a fairly simply jinja template | 23:05 |
| *** schwicht has quit IRC | 23:05 | |
| cloudnull | once we have that iptables-persist should help make it stick | 23:05 |
| cloudnull | if there's a way to stay platform agnostic I'd love it. that said I'm not totally against UFW. | 23:06 |
| cloudnull | I have similar sentiments about it being a leaky abstration | 23:06 |
| c-mart | a sufficiently developed "nice-ish interface into straight up iptables" would itself begin to resemble ufw | 23:07 |
| cloudnull | hahaha. | 23:07 |
| cloudnull | fair enough | 23:07 |
| *** jlockwood has quit IRC | 23:08 | |
| c-mart | there are ansible modules for both iptables and ufw | 23:08 |
| *** hughmFLE_ has quit IRC | 23:09 | |
| *** jlockwood has joined #openstack-ansible | 23:11 | |
| *** schwicht has joined #openstack-ansible | 23:13 | |
| stevelle | sounds like a reason to under polish the interface :) | 23:13 |
| stevelle | at least the iptables module would be more agnostic | 23:13 |
| cloudnull | ++ and mgariepy is close to having 100% centos support | 23:16 |
| c-mart | sure. in that case OSA would just need to handle committing the iptables ruleset to disk, and loading it on reboot. also, we would need to decide how to distribute the responsibilities between HAProxy and iptables. right now, for example, HAProxy is configured to only allow connections from a whitelist of subnets, for some services. which is something you could reasonably do either in iptables or HAProxy. | 23:16 |
| stevelle | HAProxy is not necessarily intended to act as any kind of firewall in that implementation so I would be inclined to prefer moving that to iptables if consuming the role that is used for that feature is activated | 23:18 |
| stevelle | and letting HAProxy whitelist if it isn't | 23:18 |
| stevelle | and that begs the question, is this a change to an existing host mgmt role or a new role | 23:19 |
| c-mart | i don't know. the logic that configures the iptables ruleset will need to know which ports you are exposing, for ALL of the services you configure. | 23:21 |
| stevelle | the HAProxy role already consumes those doesn't it? that means those should already be exposed group_vars but I'm not actually verifying it, just talking :) | 23:22 |
| stevelle | (really, procrastinating) | 23:23 |
| c-mart | stevelle vars/configs/haproxy_config.yml consumes some ports defined elsewhere, but also has some of its own hard-coded | 23:25 |
| c-mart | so, some of the ports are defined in group_vars, some of them are defined in haproxy_config.yml. | 23:27 |
| stevelle | Mmmm, sounds like potential tech debt | 23:27 |
| c-mart | some of them are defined in both places, like repo_server_port in group_vars, and the same haproxy_port defined in haproxy_config.yml. | 23:28 |
| c-mart | both set to 8181 | 23:28 |
| c-mart | so, eliminating the parallel data structures / duplication would ease implementation of a firewall role, if not being a requirement | 23:29 |
| c-mart | I might end up inventing this as I need to configure a firewall on my hosts. I'd prefer to do what the project would find most useful, so I won't be the only one maintaining it going forward | 23:30 |
| stevelle | good opportunity to inflate the commit count | 23:30 |
| stevelle | sounds like a good ML topic | 23:30 |
| c-mart | so if what OSA wants is a template that writes some iptables rules, that's probably what i'll build | 23:30 |
| c-mart | machine learning? wat | 23:30 |
| stevelle | use the ML and a weekly meeting to drive some conversation and gather reqs. | 23:31 |
| c-mart | ah, mailing list | 23:31 |
| stevelle | ya, sry | 23:31 |
| stevelle | rather: sry, not sry | 23:31 |
| c-mart | stevelle I don't see an OSA-specific mailing list on http://lists.openstack.org/cgi-bin/mailman/listinfo. which do you suggest? | 23:40 |
| stevelle | openstack-dev with [openstack-ansible] in the subject | 23:40 |
| c-mart | roger. thanks | 23:41 |
| logan- | I am using debops.ferm to orchestrate iptables across all of the containers and hosts. Would be happy to share those plays/configs | 23:44 |
| c-mart | logan- i'd be curious to see. I found debops recently and have been wanting to try some of it | 23:48 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/openstack-ansible-os_sahara: Updated from global requirements https://review.openstack.org/392785 | 23:55 |
| logan- | Sure I'll drop a link here when I get a chance to pull a gist together c-mart | 23:58 |
| c-mart | cool. no rush | 23:58 |
| *** jlockwood has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!