Tuesday, 2016-12-06

*** adrian_otto has joined #openstack-ansible00:01
*** pramodrj07 has quit IRC00:02
*** PramodJayathirth has quit IRC00:03
*** thorst has joined #openstack-ansible00:12
*** thorst has quit IRC00:15
*** thorst has joined #openstack-ansible00:16
*** schwicht has joined #openstack-ansible00:20
deadnullsetup-openstack on stable/newton is failing to set the cinder storage address. I know I am clearly the issue here. I want to have my three infra nodes mount an NFS share for an initial test00:21
openstackgerritNeill Cox proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441900:24
*** thorst has quit IRC00:25
*** schwicht has quit IRC00:26
*** mfisch has quit IRC00:28
*** mfisch has joined #openstack-ansible00:29
*** mfisch has quit IRC00:29
*** mfisch has joined #openstack-ansible00:29
*** Guest76526 is now known as ioni00:31
*** ioni is now known as Guest9725800:31
*** pwnall1337 is now known as zz_pwnall133700:35
*** rstarmer_ has joined #openstack-ansible00:37
openstackgerritgecong proposed openstack/openstack-ansible-lxc_hosts: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40724300:39
*** rstarmer has quit IRC00:40
*** weezS has quit IRC00:40
openstackgerritgecong proposed openstack/openstack-ansible-ceph_client: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40724600:41
*** sdake_ has quit IRC00:45
openstackgerritgecong proposed openstack/openstack-ansible-memcached_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40724800:45
*** javeriak has quit IRC00:46
*** sdake has joined #openstack-ansible00:46
*** deadnull has quit IRC00:47
openstackgerritNeill Cox proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441900:51
openstackgerritgengchc2 proposed openstack/openstack-ansible-repo_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725000:52
*** hfu has joined #openstack-ansible00:52
openstackgerritgecong proposed openstack/openstack-ansible-pip_install: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725100:52
openstackgerritgengchc2 proposed openstack/openstack-ansible-os_trove: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725200:54
*** javeriak has joined #openstack-ansible00:56
openstackgerritgengchc2 proposed openstack/openstack-ansible-os_ironic: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725400:59
openstackgerritgengchc2 proposed openstack/openstack-ansible-plugins: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725501:00
openstackgerritgengchc2 proposed openstack/openstack-ansible-galera_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725701:02
*** rstarmer_ has quit IRC01:04
*** rstarmer has joined #openstack-ansible01:04
*** rstarmer has quit IRC01:06
openstackgerritgengchc2 proposed openstack/openstack-ansible: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725901:07
*** thorst has joined #openstack-ansible01:09
*** thorst has quit IRC01:09
*** thorst has joined #openstack-ansible01:10
openstackgerritgengchc2 proposed openstack/openstack-ansible-rsyslog_client: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726001:13
*** javeriak has quit IRC01:13
*** thorst has quit IRC01:14
openstackgerritgengchc2 proposed openstack/openstack-ansible-os_heat: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726201:16
openstackgerritgengchc2 proposed openstack/openstack-ansible-os_nova: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726301:18
*** schwicht has joined #openstack-ansible01:18
*** sdake_ has joined #openstack-ansible01:19
openstackgerritgengchc2 proposed openstack/openstack-ansible-os_barbican: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726501:20
*** sdake has quit IRC01:20
*** sdake has joined #openstack-ansible01:21
openstackgerritgengchc2 proposed openstack/openstack-ansible-openstack_openrc: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726601:22
*** thorst has joined #openstack-ansible01:23
*** thorst has quit IRC01:24
openstackgerritgengchc2 proposed openstack/openstack-ansible-pip_lock_down: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726701:24
*** hw_wutianwei has joined #openstack-ansible01:24
*** sdake_ has quit IRC01:25
*** cmart has quit IRC01:27
*** adrian_otto has quit IRC01:28
*** adrian_otto has joined #openstack-ansible01:28
*** Guest97258 is now known as ioni01:32
*** ioni is now known as Guest6205001:32
*** sdake_ has joined #openstack-ansible01:34
*** sdake has quit IRC01:35
*** May-meimei has joined #openstack-ansible01:37
*** Jack_Iv has joined #openstack-ansible01:40
*** Jack_Iv has quit IRC01:45
*** adrian_otto has quit IRC01:52
*** cathrich_ has joined #openstack-ansible02:02
*** cathrichardson has quit IRC02:02
*** thorst has joined #openstack-ansible02:05
*** thorst has quit IRC02:05
*** thorst has joined #openstack-ansible02:06
*** rstarmer has joined #openstack-ansible02:10
*** agrebennikov has quit IRC02:13
openstackgerritMerged openstack/openstack-ansible-repo_server: Remove pip_install as meta-dependency  https://review.openstack.org/40679402:13
*** sdake has joined #openstack-ansible02:15
*** thorst has quit IRC02:15
*** hfu has quit IRC02:15
*** sdake_ has quit IRC02:17
*** schwicht has quit IRC02:29
*** Guest62050 is now known as ioni02:32
*** ioni is now known as Guest178202:33
*** woodard has quit IRC02:33
*** woodard has joined #openstack-ansible02:34
*** Mudpuppy has quit IRC02:36
*** Mudpuppy has joined #openstack-ansible02:37
*** woodard has quit IRC02:37
*** javeriak has joined #openstack-ansible02:40
*** javeriak has quit IRC02:41
*** Mudpuppy has quit IRC02:41
*** aludwar has quit IRC02:42
*** javeriak has joined #openstack-ansible02:43
*** hfu has joined #openstack-ansible02:44
*** winggundamth has quit IRC02:48
*** winggundamth has joined #openstack-ansible02:49
openstackgerritNeill Cox proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441902:50
*** sdake_ has joined #openstack-ansible03:10
*** thorst has joined #openstack-ansible03:12
*** sdake has quit IRC03:13
*** adrian_otto has joined #openstack-ansible03:17
*** thorst has quit IRC03:20
openstackgerritMerged openstack/openstack-ansible: [DOCS] Updating inventory files  https://review.openstack.org/40544703:21
*** adrian_otto has quit IRC03:23
*** adrian_otto has joined #openstack-ansible03:24
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron: Fix calico test  https://review.openstack.org/40226503:25
*** hfu has quit IRC03:31
*** adrian_otto has quit IRC03:33
*** javeriak has quit IRC03:33
*** Guest1782 is now known as ioni03:33
*** adrian_otto has joined #openstack-ansible03:33
*** ioni is now known as Guest3734103:34
*** javeriak has joined #openstack-ansible03:35
*** hfu has joined #openstack-ansible03:36
*** javeriak has quit IRC03:37
*** javeriak has joined #openstack-ansible03:37
*** hfu has quit IRC03:40
*** hfu has joined #openstack-ansible03:40
*** adrian_otto has quit IRC03:43
*** adrian_otto has joined #openstack-ansible03:43
*** hfu has quit IRC03:44
*** hfu has joined #openstack-ansible03:45
*** adrian_otto has quit IRC03:46
*** adrian_otto has joined #openstack-ansible03:47
*** adrian_otto has quit IRC03:47
*** hfu has quit IRC03:47
*** adrian_otto has joined #openstack-ansible03:48
*** aludwar has joined #openstack-ansible03:50
*** hfu has joined #openstack-ansible03:50
*** hfu has quit IRC03:54
openstackgerritNeill Cox proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441903:55
*** javeriak has quit IRC03:56
*** adrian_otto1 has joined #openstack-ansible03:58
*** adrian_otto1 has quit IRC04:00
*** cathrich_ has quit IRC04:00
*** adrian_otto has quit IRC04:01
*** weezS has joined #openstack-ansible04:06
*** hfu has joined #openstack-ansible04:08
*** hfu has quit IRC04:15
*** thorst has joined #openstack-ansible04:18
*** hfu has joined #openstack-ansible04:20
*** thorst has quit IRC04:25
*** Jack_Iv has joined #openstack-ansible04:25
*** greghaynes has quit IRC04:26
*** hfu has quit IRC04:27
*** Jack_Iv has quit IRC04:29
*** javeriak has joined #openstack-ansible04:31
*** Guest37341 is now known as ioni04:34
*** ioni is now known as Guest9334904:35
*** javeriak has quit IRC04:36
*** sdake_ has quit IRC04:39
*** adrian_otto has joined #openstack-ansible04:42
*** sdake has joined #openstack-ansible04:44
*** poopcat has quit IRC04:58
*** javeriak has joined #openstack-ansible05:03
*** greghaynes has joined #openstack-ansible05:04
*** sdake_ has joined #openstack-ansible05:10
*** sdake has quit IRC05:13
*** mfisch has quit IRC05:16
*** mattt has quit IRC05:20
*** mattt has joined #openstack-ansible05:21
*** mfisch has joined #openstack-ansible05:23
*** mfisch is now known as Guest1619705:23
*** thorst has joined #openstack-ansible05:24
*** chhavi has joined #openstack-ansible05:27
*** thorst has quit IRC05:30
*** Guest93349 is now known as ioni05:35
*** ioni is now known as Guest8547205:35
*** hfu has joined #openstack-ansible05:37
*** shausy has joined #openstack-ansible05:38
*** hfu has quit IRC05:40
*** chhavi has quit IRC05:41
*** hfu has joined #openstack-ansible05:42
*** rstarmer has quit IRC05:42
*** janki has joined #openstack-ansible05:46
*** hfu has quit IRC05:47
*** hfu has joined #openstack-ansible05:47
*** chhavi has joined #openstack-ansible05:48
*** sdake_ has quit IRC05:48
*** woodard has joined #openstack-ansible05:50
*** weezS has quit IRC05:53
*** woodard has quit IRC05:54
*** Jack_Iv has joined #openstack-ansible05:56
*** adrian_otto has quit IRC05:56
*** weezS has joined #openstack-ansible05:57
*** hfu has quit IRC06:06
*** adrian_otto has joined #openstack-ansible06:08
*** sdake has joined #openstack-ansible06:09
*** hfu has joined #openstack-ansible06:15
*** Jack_Iv has quit IRC06:16
*** rgogunskiy has joined #openstack-ansible06:24
*** adrian_otto has quit IRC06:24
*** adrian_otto has joined #openstack-ansible06:25
*** oanson has joined #openstack-ansible06:25
*** adrian_otto has quit IRC06:27
*** hfu has quit IRC06:27
*** sdake_ has joined #openstack-ansible06:28
*** thorst has joined #openstack-ansible06:29
*** sdake has quit IRC06:30
*** Jack_Iv has joined #openstack-ansible06:30
*** hfu has joined #openstack-ansible06:32
*** thorst has quit IRC06:34
*** Guest85472 is now known as ioni06:36
*** hfu has quit IRC06:36
*** ioni is now known as Guest7255006:36
*** hfu has joined #openstack-ansible06:46
*** hfu has quit IRC06:48
*** javeriak has quit IRC06:53
*** hfu has joined #openstack-ansible06:53
*** javeriak has joined #openstack-ansible06:54
*** Jack_Iv has quit IRC06:56
*** Jack_Iv has joined #openstack-ansible06:57
*** hfu has quit IRC06:57
*** hfu has joined #openstack-ansible06:57
*** fxpester has joined #openstack-ansible06:59
*** weezS has quit IRC06:59
*** weezS has joined #openstack-ansible07:00
*** Jack_Iv has quit IRC07:03
*** weezS has quit IRC07:05
*** CuongNV has joined #openstack-ansible07:08
*** Mudpuppy has joined #openstack-ansible07:09
*** Jack_Iv has joined #openstack-ansible07:11
*** Mudpuppy has quit IRC07:14
*** h5t4 has joined #openstack-ansible07:16
*** Jack_Iv_ has joined #openstack-ansible07:17
winggundamthhi all. I just curious. If I put more disks on swift node. Do I just put added disk on swift.yml drive configuration? And it will added automatically?07:19
*** Jack_Iv has quit IRC07:21
*** pegmanm_ has joined #openstack-ansible07:24
*** pegmanm_ has quit IRC07:24
*** pegmanm_ has joined #openstack-ansible07:25
*** pegmanm_ has quit IRC07:25
*** rgogunskiy has quit IRC07:26
*** mattt has quit IRC07:27
*** pegmanm_ has joined #openstack-ansible07:27
*** rgogunskiy has joined #openstack-ansible07:27
*** castulo has quit IRC07:29
*** thorst has joined #openstack-ansible07:32
*** castulo has joined #openstack-ansible07:34
*** Jeffrey4l has quit IRC07:36
*** Guest72550 is now known as ioni07:37
*** ioni is now known as Guest1733207:37
*** thorst has quit IRC07:40
*** pcaruana has joined #openstack-ansible07:42
*** hfu has quit IRC07:48
*** hfu has joined #openstack-ansible07:49
*** Jeffrey4l has joined #openstack-ansible07:52
*** hfu has quit IRC07:53
*** hfu has joined #openstack-ansible07:53
*** rgogunskiy_ has joined #openstack-ansible07:58
*** rgogunskiy has quit IRC07:59
*** rgogunskiy_ is now known as rgogunskiy07:59
*** sdake has joined #openstack-ansible07:59
*** sdake_ has quit IRC08:03
*** hybridpollo has quit IRC08:09
*** pegmanm_ has quit IRC08:10
*** pegmanm_ has joined #openstack-ansible08:11
*** paulfantom has joined #openstack-ansible08:14
*** paulfantom has quit IRC08:19
*** hybridpollo has joined #openstack-ansible08:27
openstackgerritPraveen N proposed openstack/openstack-ansible: typo fix  https://review.openstack.org/40739808:28
*** Guest17332 is now known as ioni08:38
*** ioni is now known as Guest2462108:38
*** thorst has joined #openstack-ansible08:38
*** thorst has quit IRC08:44
*** chhavi has quit IRC08:45
*** asettle has joined #openstack-ansible09:09
andymccrwinggundamth: yes! it'll change devices you have changed (e.g. the weight etc) and add new devices/remove old devices that are no longer in the inventory - so the TL;DR is to ensure that all disks you want configured are in your swift.yml conf file because ansible will try to ensure the state matches the swift.yml09:14
*** Jack_Iv_ has quit IRC09:14
winggundamthandymccr: thanks. I'm going to rerun os-swift-install.yml right now :)09:15
andymccrwinggundamth: excellent! if you run into any issues, let us know09:16
winggundamthandymccr: another question. if one of controller node is completely down eg. hdd os is broken. Can I bring the new node with the same ip and rerun setup-hosts.yml and setup-infrastructure.yml? Will it recover?09:18
andymccrwinggundamth: your controller would have keystone etc too - so you may need to rerun the other OpenStack playbooks (glance/keystone/cinder/nova etc. potentially) - but assuming the other 2 arestill fine it should work fine.09:20
winggundamthandymccr: thanks. I'm going to test it soon. will let you know the result :)09:20
andymccrahh you'll need setup-hosts too because that'll setup the containers and other host configuration09:20
winggundamthsure09:20
*** Jack_Iv has joined #openstack-ansible09:21
*** paulfantom has joined #openstack-ansible09:22
*** thorst has joined #openstack-ansible09:24
*** mattt has joined #openstack-ansible09:29
*** thorst has quit IRC09:31
*** javeriak has quit IRC09:33
*** Guest24621 is now known as ioni09:38
*** ioni is now known as Guest673009:39
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-repo_server: Add proxy configuration for apt-cacher-ng  https://review.openstack.org/40742609:40
*** javeriak has joined #openstack-ansible09:40
winggundamthandymccr: Adding new HDD to swift, adding new disk to swift.yml and rerun os-swift.yml. Everything went great!09:43
andymccrwinggundamth: glad to hear - there are guards to prevent weird things from happening too and when in doubt it should fail and not let you change anything to keep the rings consistent09:43
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_neutron: Neutron upgrade testing.  https://review.openstack.org/40018009:48
*** sdake has quit IRC09:49
*** electrofelix has joined #openstack-ansible09:54
*** CuongNV has quit IRC09:55
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Gather facts before running first role requiring them  https://review.openstack.org/40743510:00
winggundamthandymccr: yes. I can see swift_rings.py that is a great script :)10:03
*** askb has quit IRC10:03
*** vnogin has joined #openstack-ansible10:11
winggundamthbtw anyone can help me looking at this? https://review.openstack.org/#/c/403822/ The error happen when install galera but it's nothing to do with my patch. I already done recheck but still the same error. Anyone has any idea?10:13
*** oanson has quit IRC10:15
*** vnogin has quit IRC10:15
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-repo_server: Add proxy configuration for apt-cacher-ng  https://review.openstack.org/40742610:23
*** thorst has joined #openstack-ansible10:28
*** chhavi has joined #openstack-ansible10:32
*** thorst has quit IRC10:36
andymccrwinggundamth: that looks like the upstream mirror is not working (yum.mariadb.org)  - causing 404's so it cant install the packages. im not sure what we can do to come up with a "backup" plan for that. that repo doesnt seem super reliable10:38
*** Guest6730 is now known as ioni10:39
*** ioni is now known as Guest3902210:40
openstackgerritPraveen N proposed openstack/openstack-ansible: host net config bond0 static -> manual  https://review.openstack.org/40745110:44
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_nova: Remove the -d flag to libvirtd when using systemd  https://review.openstack.org/40745210:46
openstackgerritMerged openstack/openstack-ansible: Document and test group membership constraints  https://review.openstack.org/40552010:52
openstackgerritMerged openstack/openstack-ansible: trivial indentation fix  https://review.openstack.org/40706710:52
*** dfflanders has quit IRC10:53
winggundamthandymccr: so what is your suggestion for me to do right now?10:56
openstackgerritPraveen N proposed openstack/openstack-ansible: host net config bond0 static -> manual  https://review.openstack.org/40745610:56
*** hfu has quit IRC10:58
andymccrwinggundamth: ahh that review is quite old, we can recheck - the upstream repository should be fixed now.10:59
andymccrbut the CentOS support is still quite new, if we keep running into this issue we should definitely try find a backup plan to mitigate the problem10:59
winggundamthAnother question too. I'm trying setup Newton AIO and found the problem when I created router. It can not access to the internet. I did the same way with Mitaka AIO and found no problem.10:59
winggundamthI put information how to reproduce here https://bugs.launchpad.net/openstack-ansible/+bug/164710711:02
openstackLaunchpad bug 1647107 in openstack-ansible "osa newton aio router cannot access internet" [Undecided,New]11:02
*** Disova has joined #openstack-ansible11:05
DisovaHi everybody! Anyone can help with one little problem?11:06
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_nova: Remove the -d flag to libvirtd when using systemd  https://review.openstack.org/40745211:06
*** fabgub has joined #openstack-ansible11:07
DisovaSo I try to describe the problem. I have simple environment with 1 infra and 1 compute. So the question is should a linuxbridge_agent installed on compute?11:08
andymccrDisova: yes it should11:08
DisovaInside of nova-container or not?11:08
*** chhavi has quit IRC11:08
andymccrDisova: the compute itself runs on the host - so it should be on the compute host. there shouldn't be any containers on the compute host (unless you are using it as something else along with being compute)11:09
evrardjpDisova: kvm runs on baremetal11:09
evrardjpno need to overcontainerize11:09
evrardjp:D11:09
*** vnogin has joined #openstack-ansible11:10
*** vnogin has quit IRC11:10
*** vnogin has joined #openstack-ansible11:10
*** javeriak has quit IRC11:11
DisovaThanks guys. I think either about linuxbridge_agent, but can't find it on compute host, this is the problem. (I using mitaka branch)11:11
Disovaroot@node2:~# ps ax | grep linuxbridge_agent11:11
Disova 6420 pts/1    S+     0:00 grep --color=auto linuxbridge_agent11:11
andymccrDisova: it'd be called neutron-linxbridge-agent - if you just grep for linuxbridge you should find it there! otherwise the neutron plays haven't been run properly11:13
*** Jack_Iv_ has joined #openstack-ansible11:15
Disovaroot@node2:~# ps ax | grep -E 'neutron|linxbridge|agent'11:15
Disova 7517 pts/1    S+     0:00 grep --color=auto -E neutron|linxbridge|agent11:15
Disovaandymccr: thanks11:16
andymccrDisova: no problem!11:16
*** Jack_Iv_ has quit IRC11:19
andymccrwinggundamth: i dont think its designed to work to be able to ping the internet in an AIO - it will make the nova-instances pingable from the host (if you add a public IP etc) - I'm not sure how it worked on Mitaka though11:21
*** pegmanm__ has joined #openstack-ansible11:22
*** chhavi has joined #openstack-ansible11:22
*** pegmanm_ has quit IRC11:23
*** stuartgr has joined #openstack-ansible11:27
*** javeriak has joined #openstack-ansible11:29
*** deadnull has joined #openstack-ansible11:29
*** thorst has joined #openstack-ansible11:34
*** faizy has joined #openstack-ansible11:35
*** ricardobuffa_ufs has joined #openstack-ansible11:36
*** Guest39022 is now known as ioni11:40
*** thorst has quit IRC11:41
*** ioni is now known as Guest1310911:41
andymccrhm the nova-lxd job is failing again for similar issues as last week...11:44
*** jamielennox is now known as jamielennox|away11:44
*** rgogunskiy has quit IRC11:49
*** faizy has quit IRC11:54
*** smatzek has joined #openstack-ansible12:00
DisovaHow can I "cleanup" host after ansible playbooks? Whether there is a such of possibility?12:07
*** hfu has joined #openstack-ansible12:11
deadnullIf I want to setup NfsDriver to have my infra nodes run an NFS client for cinder, I am assuming they will need an IP address on the br-storage bridge? I am running into an error on os-cinder-install.yml -> 'dict object' has no attribute 'ipv4'12:18
openstackgerritKevin Lefevre proposed openstack/openstack-ansible: Remove irrelevant cinder_backends in glance configuration  https://review.openstack.org/40748012:19
*** fabgub has quit IRC12:22
*** deadnull has quit IRC12:28
*** thorst has joined #openstack-ansible12:30
*** schwicht has joined #openstack-ansible12:33
*** schwicht has quit IRC12:34
*** Guest13109 is now known as ioni12:41
*** ioni is now known as Guest1228412:41
mgariepygood morning everyone12:50
*** johnmilton has joined #openstack-ansible12:52
*** deadnull has joined #openstack-ansible12:54
*** deadnull has left #openstack-ansible12:54
*** deadnull has joined #openstack-ansible12:54
Disovamorning12:56
asettleo/12:57
*** pegmanm__ has quit IRC13:02
*** woodard has joined #openstack-ansible13:06
*** javeriak has quit IRC13:07
*** hfu has quit IRC13:07
*** mattt has quit IRC13:09
*** mattt has joined #openstack-ansible13:09
lbragstadjmccrory i hacked together a new version of authenticate.py - https://github.com/lbragstad/keystone-performance-upgrade/commit/52ca35cd676b7614eac97df8650d3261b4a7084513:10
*** woodard has quit IRC13:10
lbragstadjmccrory i'm kicking off a fresh install to test the rolling upgrade with13:10
*** jheroux has joined #openstack-ansible13:11
*** sdake has joined #openstack-ansible13:11
*** gouthamr has joined #openstack-ansible13:12
*** retreved has joined #openstack-ansible13:12
*** stuartgr has quit IRC13:20
*** stuartgr has joined #openstack-ansible13:20
*** deadnull is now known as _deadnull13:21
*** _deadnull has quit IRC13:22
*** hfu has joined #openstack-ansible13:22
*** deadnull has joined #openstack-ansible13:24
*** javeriak has joined #openstack-ansible13:25
openstackgerritMerged openstack/openstack-ansible: typo fix  https://review.openstack.org/40739813:26
*** fabg has joined #openstack-ansible13:26
*** pmannidi has quit IRC13:27
*** javeriak has quit IRC13:28
*** hfu has quit IRC13:29
*** hfu has joined #openstack-ansible13:29
*** adrian_otto has joined #openstack-ansible13:29
*** askb has joined #openstack-ansible13:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715713:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717813:30
*** askb has quit IRC13:30
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: Add CentOS support for os_gnocchi role  https://review.openstack.org/40707113:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable FIPS [+Docs]  https://review.openstack.org/40721813:33
*** chhavi has quit IRC13:37
*** hfu has quit IRC13:38
*** woodard has joined #openstack-ansible13:39
*** shausy has quit IRC13:40
*** fguillot has joined #openstack-ansible13:41
*** h5t4 has quit IRC13:41
*** Guest12284 is now known as ioni13:42
*** ioni is now known as Guest1947513:42
*** faizy has joined #openstack-ansible13:44
*** strattao has joined #openstack-ansible13:50
*** fabg has quit IRC13:52
*** hfu has joined #openstack-ansible13:53
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_aodh: Add CentOS support for os_aodh role  https://review.openstack.org/40717113:55
mgariepyHello, can i get some reviews on : https://review.openstack.org/#/c/407152/ https://review.openstack.org/#/c/407071/ and https://review.openstack.org/#/c/407171/ please ? :D13:56
*** hfu has quit IRC13:58
*** h5t4 has joined #openstack-ansible13:59
*** fabg has joined #openstack-ansible14:00
*** Guest16197 is now known as mfisch14:03
*** mfisch is now known as Guest7303714:04
*** javeriak has joined #openstack-ansible14:04
*** hfu has joined #openstack-ansible14:08
*** oanson has joined #openstack-ansible14:08
*** javeriak has quit IRC14:08
*** cathrichardson has joined #openstack-ansible14:11
*** adrian_otto has quit IRC14:11
*** faizy_ has joined #openstack-ansible14:11
*** faizy has quit IRC14:13
*** deadnull has quit IRC14:15
*** fabg has quit IRC14:15
*** Guest73037 is now known as mfisch14:15
*** mfisch is now known as Guest1328114:16
*** Guest13281 is now known as mfisch14:16
*** mfisch is now known as Guest4066414:17
*** Guest40664 is now known as mfisch14:17
*** mfisch has quit IRC14:17
*** mfisch has joined #openstack-ansible14:17
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add AIDE checks for ACL/xattrs [+Docs]  https://review.openstack.org/40753014:19
*** kstev has joined #openstack-ansible14:20
*** schwicht has joined #openstack-ansible14:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add AIDE checks for ACL/xattrs [+Docs]  https://review.openstack.org/40753014:22
*** jamesdenton has joined #openstack-ansible14:24
*** kstev has quit IRC14:25
*** faizy_ has quit IRC14:25
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception: grub on removable media  https://review.openstack.org/40753414:26
*** hfu has quit IRC14:28
*** hfu has joined #openstack-ansible14:29
*** kstev has joined #openstack-ansible14:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable/start auditd [+Docs]  https://review.openstack.org/40753614:33
*** smatzek has quit IRC14:33
*** hfu has quit IRC14:35
openstackgerritMerged openstack/openstack-ansible-lxc_hosts: LXC version to 2.0.6 on CentOS  https://review.openstack.org/40715214:36
*** hfu has joined #openstack-ansible14:38
*** hfu has quit IRC14:40
*** h5t4 has quit IRC14:40
*** whiteveil has joined #openstack-ansible14:42
*** Guest19475 is now known as ioni14:42
*** ioni is now known as Guest4749314:43
*** sdake has quit IRC14:45
*** h5t4 has joined #openstack-ansible14:47
openstackgerritMerged openstack/openstack-ansible-os_nova: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726314:49
andymccrif anybody is around to review: https://review.openstack.org/#/c/407452/ that would be appreciated! (the lxd gate is fixed now) - this is a critical Xenial bug id like to get fixed and backported14:49
andymccralso ^ the first win for the upgrade testing :)14:50
*** agrebennikov has joined #openstack-ansible14:50
*** rstarmer has joined #openstack-ansible14:51
*** cathrichardson has quit IRC14:52
*** h5t4 has quit IRC14:53
*** rstarmer has quit IRC14:53
*** h5t4 has joined #openstack-ansible14:54
*** cathrichardson has joined #openstack-ansible14:54
*** sdake has joined #openstack-ansible14:55
*** rstarmer has joined #openstack-ansible14:55
*** rstarmer has quit IRC14:56
matttwe have an lxd gate?  :)14:56
*** rstarmer has joined #openstack-ansible14:56
*** rstarmer has quit IRC14:56
andymccrmattt: yeah - we do :P14:57
*** rstarmer has joined #openstack-ansible14:57
*** rstarmer has quit IRC14:57
*** rstarmer has joined #openstack-ansible14:58
*** cathrichardson has quit IRC14:58
*** rstarmer has quit IRC14:58
*** rstarmer has joined #openstack-ansible14:58
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set audisp failure options [+Docs]  https://review.openstack.org/40755014:59
*** rstarmer has quit IRC14:59
andymccrthanks logan-!14:59
logan-good fix on lxd andymccr :)14:59
*** rstarmer has joined #openstack-ansible14:59
andymccrlogan-: haha yeah im hoping it stabilizes a bit now, otherwise might have to drop it to non-voting until rc (which really isnt that far away so may not be worth it)14:59
*** cathrichardson has joined #openstack-ansible15:01
paulfantomhi, all15:01
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [DOCS] Updates and restructures proposed ops guide  https://review.openstack.org/40755215:01
paulfantomI can't install local repo with repo_build on centos7. First it didn't clone requirements repository (which I cloned by hand) and now it won;t "Build package requirements file"15:02
*** smatzek has joined #openstack-ansible15:03
andymccrmgariepy: btw - the nova CentOS build is failing (although its still non-voting at the moment), seems to be an issue with the libvirt module - i need to do a run through and promote CentOS jobs to voting on the repos where its working now15:03
*** Jack_Iv has quit IRC15:03
*** cathrichardson has quit IRC15:03
*** Jack_Iv has joined #openstack-ansible15:03
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [DOCS] Updates and restructures proposed ops guide  https://review.openstack.org/40755215:04
paulfantomit is breaking on "repo_build : Build package requirements file" becouse variable "local_packages.results.0.item.role_requirement_files" is empty15:04
*** rstarmer has quit IRC15:04
*** hfu has joined #openstack-ansible15:04
paulfantomcan anyone help?15:04
*** cathrichardson has joined #openstack-ansible15:04
andymccrpaulfantom: taking a look gimme 2 secs :)15:08
*** phalmos has joined #openstack-ansible15:10
*** wadeholler has joined #openstack-ansible15:12
wadehollermorning all.  I plan on starting the 16.04 upgrade of the base OS on infra servers today. my plan was just to delete the lxc containers; upgrade; re-run playbooks. any other advice? (wasn't sure if I needed to clear any facts)15:13
wadehollerfinished mitaka -> newton a couple days ago15:14
andymccrpaulfantom: are you running the repo-build.yml playbook?15:14
paulfantomyes15:14
*** rstarmer has joined #openstack-ansible15:14
*** phalmos has quit IRC15:15
paulfantomjust deleted repo container (with lxc-containers-destroy.yml) and rerun setup-infrastructure.yml15:15
paulfantomit failed on: "repo_build : Retrieve upper constraints content"15:16
paulfantomwith error: "file not found: /var/www/repo/openstackgit/requirements/upper-constraints.txt"15:16
paulfantomthere is no "/var/www/repo/openstackgit/requirements" folder inside this container15:16
andymccrwadeholler: so youre on 14.04 with a working setup? There will probably have to be cleanup - for example we don't cleanup init scripts, but if you're deleting all containers you would probably better of reinstalling with 16.04 fresh. Although for infra hosts, if youre removing containers there isnt much else on there so it might well work - would be interested to know how that goes for15:17
andymccrpaulfantom: so thats a diff error from before? Let me see, trying to figure out why it wouldnt have worked the first time for you15:17
wadehollerandymccr: correct on 14.04 and all is well.15:18
andymccrwadeholler: is it an AIO?15:18
paulfantomandymccr: it's the same problem15:18
wadehollerandymccr: no, 3 infra, 6 compute, yada yada ..15:18
paulfantomI did a workaroud just by manually going into container and cloning "requirements" repo15:18
*** ricardobuffa_ufs has quit IRC15:18
andymccrwadeholler: ahh ok, i think compute/swift may need to be handled separately since they will have init scripts and various other bits on the host - but the infra may work ok that way - personally i would try a rekick and reinstall on a host by host basis15:19
andymccrpaulfantom: ahh ok i see, so that moved it a long a bit but it still failed after15:19
paulfantom andymccr: exactly15:20
wadehollerandymccr: understood and thank you very much.15:21
evrardjpdear cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically,15:21
evrardjpspotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, darrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397 :15:21
evrardjpthe osa bug triage will start in 40’. Please have a look at the bug list before starting: https://etherpad.openstack.org/p/osa-bugtriage15:21
mhaydenwoot15:22
*** phalmos has joined #openstack-ansible15:22
asettleMy favourite kind of triage15:22
*** rstarmer has quit IRC15:23
*** Mudpuppy has joined #openstack-ansible15:24
mhaydenso has anyone had luck converting something to an integer in jinja2? i'm having a weird issue15:25
paulfantomandymccr: Should op-clone-script.sh clone "requirements" repository, because somehow one in my repo-container don't do this15:25
andymccrpaulfantom: i believe the /opt/op-clone-script.sh script must be failing15:25
mhayden{{ 21002534912 * 0.25 / 1024 / 1024 | int }} -> 5007.3945312515:25
paulfantomandymccr: ^15:25
andymccrhahah15:26
andymccrim taking a look at that script a bit more15:26
mgariepyandymccr, sad for os_nova centos15:28
oansonHi. I have a question about os_neutron and ovs (and dragonflow).15:28
oansonIn dragonflow + l3-agent, I get the following error: BridgeDoesNotExist: Bridge br-int does not exist.15:28
oansonIn OVS, it looks like the l3-agent runs in the same way, and ovs or br-int isn't mention anywhere.15:28
oansonWhere is the bridge created? What am I missing?15:28
paulfantommhayden: try: {{ (21002534912 * 0.25 / 1024 / 1024) | int }}15:28
mgariepynova on centos is taking way too much time.15:28
openstackgerritLogan V proposed openstack/openstack-ansible-ceph_client: Disable SSH verification on mons online check  https://review.openstack.org/40756715:28
mgariepywe need to figure out why it's taking so long. (before we promote it to voting)15:28
mhaydenpaulfantom: palm applied to face15:29
mhaydenpaulfantom: thank you15:29
paulfantommhayden: no problem :-)15:29
oansonevrardjp, andymccr, could you please help me?15:30
*** rstarmer has joined #openstack-ansible15:30
openstackgerritMerged openstack/openstack-ansible-os_nova: Remove the -d flag to libvirtd when using systemd  https://review.openstack.org/40745215:31
mgariepyhmm on this patch it looks like it's about the same time on ubuntu and centos.. https://review.openstack.org/#/c/407452/15:34
andymccrpaulfantom: try add a debug task to check what your local_packages var is, just before you run the op-clone-script.sh (in tasks/repo_clone_git.yml) - http://paste.openstack.org/show/591553/ i think that is not correct15:35
andymccror i think there is a problem with that local_packages variable15:35
andymccroanson: taking a look15:36
oansonandymccr, thanks15:36
*** agrebennikov has quit IRC15:39
*** fabg has joined #openstack-ansible15:40
*** faizy_ has joined #openstack-ansible15:41
paulfantomandymccr: http://pastebin.com/raw/AQy1BKC915:41
paulfantomCan you take a look?15:41
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set space_left in auditd [+Docs]  https://review.openstack.org/40757015:42
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable/start auditd [+Docs]  https://review.openstack.org/40753615:43
*** faizy__ has joined #openstack-ansible15:43
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set audisp failure options [+Docs]  https://review.openstack.org/40755015:43
*** Guest47493 is now known as ioni15:43
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set space_left in auditd [+Docs]  https://review.openstack.org/40757015:43
*** ioni is now known as Guest2962115:44
*** rstarmer has quit IRC15:45
*** faizy_ has quit IRC15:46
*** chris_hultin|AWA is now known as chris_hultin15:46
paulfantomandymccr: I added debug check, it is here: http://pastebin.com/raw/9Cf87vXS chould you verfiy?15:49
*** rstarmer has joined #openstack-ansible15:50
*** Mudpuppy_ has joined #openstack-ansible15:50
*** agrebennikov has joined #openstack-ansible15:50
andymccrpaulfantom: that looks ok - im trying to see what else could be failing here15:50
andymccrso on your repo container does /var/www/repo/openstackgit/requirements/upper-constraints.txt not exist?15:51
paulfantomandymccr: shouldn't there be a link to "requirements" repo?15:51
paulfantomno there is no /var/www/repo/openstackgit/requirements directory15:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set space_left in auditd [+Docs]  https://review.openstack.org/40757015:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set audisp failure options [+Docs]  https://review.openstack.org/40755015:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set space_left_action in auditd [+Docs]  https://review.openstack.org/40757515:52
*** adrian_otto has joined #openstack-ansible15:52
*** Mudpuppy has quit IRC15:53
andymccrahh paulfantom true - in remote_packages requirements should exist (inside local_packages)15:54
lbragstadjmccrory well - i had to rework the benchmarking script quite a bit, but once i did i was able to upgrade from newton -> master while continuously creating and validating tokens without a hitch15:54
*** Jack_Iv_ has joined #openstack-ansible15:54
* lbragstad tips hat to jmccrory 15:54
jmccrorylbragstad : awesome!15:55
andymccrin your openstack-ansible base repo, do you have playbooks/defaults/repo_packages/openstack_services.yml (and does it contain requirements)15:55
lbragstadjmccrory very nice work15:55
paulfantomandymccr: something like this: "requirements_git_repo: https://git.openstack.org/openstack/requirements"?15:56
andymccroanson: so the br-int is hardcoded in the one task (to create the integration bridge), does it have to be that bridge? im assuming that bridge needs to exist on the host first? OVS works (theoretically) but there is some work on going to get a functional test up for that, beyond API tests and ensuring it loads up (func tests wont actually work right now for OVS)15:56
paulfantomandymccr: my repo was cloned today from master about 6h ago :)15:56
oansonandymccr, yes. theoretically the name is configurable, but I didn't enable that in the patch.15:57
*** rstarmer has quit IRC15:58
oansonandymccr, logan- mentioned he tried AIO deployment, and saw the above exception as well. He said that includes a tempest test that sets up a VM15:58
*** rstarmer has joined #openstack-ansible15:59
andymccroanson: for OVS? probably :( i tried to get that going ages ago, the LXB one works fine - but i havnt had time to sit down and get OVS to do similar func tests that are useful. logan- is that what you were trying to get going?15:59
logan-the service that was complainig about br-int not existing was inside the neutron-agents container15:59
*** zz_pwnall1337 is now known as pwnall133715:59
andymccrlogan-: hmm15:59
logan-that was on a full aio build15:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set space_left_action in auditd [+Docs]  https://review.openstack.org/40757515:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set action_email_acct in auditd [+Docs]  https://review.openstack.org/40757915:59
oansonthe same configuration is used in ovs (theoretically I haven't run it)16:00
logan-oanson: have you tried building an AIO with OVS to see how the network config looks in the neutron-agents container?16:00
logan-that might be the easiest way to compare16:00
*** galstrom_zzz is now known as galstrom16:00
oansonI could do that. I can also run a tox environment, since I saw the errors there too16:01
*** cmart has joined #openstack-ansible16:01
logan-yep16:01
*** fabg has quit IRC16:01
lbragstadjmccrory i had two failures over the course of the entire upgrade - and they were because of the revocation event16:02
lbragstadhttps://github.com/lbragstad/keystone-performance-upgrade/blob/master/results/locust.output16:02
oansonAll right, I'll do that and report tomorrow. (It's end-of-day here)16:02
andymccrid love to get that OVS stuff working properly tbh. but the to do list is long!16:03
oansonYou should use Dragonflow! :)16:03
andymccrpaulfantom: thats weird its not building a whole bunch of other packages (e.g. ironic-ui which should be built as part of the horizon group... but magnum-ui is built)16:03
evrardjphello everyone16:05
evrardjpBug triage cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, dar16:05
evrardjprenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza16:05
paulfantomandymccr: very strange16:05
asettleYo yo16:05
asettleBug triage16:05
evrardjpfirst bug16:06
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164573216:06
openstackLaunchpad bug 1645732 in openstack-ansible "Allow for ansible become in SSH plugin" [Wishlist,Confirmed]16:06
jmccrorylbragstad : nice, should probably get that included in the role's upgrade gate test16:06
*** fabg has joined #openstack-ansible16:06
paulfantomandymccr: even stranger is the fact that about ~10 days ago it was working. I will be investigating it tomorrow since it's the end of the day here.16:06
evrardjpok this is already confirmed wishlist16:06
evrardjpI don't know what I did16:06
evrardjpnext16:06
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164572816:06
openstackLaunchpad bug 1645728 in openstack-ansible "Liberty to Liberty Upgrade: MariaDB upgrade stuck on post dpkg configure task" [Undecided,New]16:06
evrardjpBjoernT isn't here so no update16:07
evrardjpnext16:07
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164551216:07
openstackLaunchpad bug 1645512 in openstack-ansible "Documentation bug - network information is not visible" [Low,In progress] - Assigned to Praveen N (praveenn)16:07
evrardjpboom in progress already16:07
evrardjpnext16:07
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164537116:07
openstackLaunchpad bug 1645371 in openstack-ansible "Consider async jobs in security role" [Wishlist,Confirmed]16:07
evrardjpOk already confirmed wishlist16:07
evrardjpok guess what guys16:08
evrardjpI am NOT on the proper list16:08
evrardjpI am maybe a little tired16:08
cathrichardson+16:08
evrardjpso next16:08
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164768116:08
openstackLaunchpad bug 1647681 in openstack-ansible "trove error during publish_exists_event" [Undecided,New]16:08
evrardjptoo bad drifterza isn't here16:09
*** fxpester has quit IRC16:09
evrardjpanyone can have a look at the bug?16:09
andymccrseems like a weird connection string - connecting to host 0.0.0.016:10
evrardjpfair point16:10
andymccrim not sure we can confirm it - i havnt seen that but its possible/plausible16:10
evrardjpI'll mark it as incomplete and ask info from endpoints16:10
evrardjpok?16:10
andymccrsounds good to me16:10
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Fix broken/missing auditd docs  https://review.openstack.org/40758416:11
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164750316:11
openstackLaunchpad bug 1647503 in openstack-ansible "horizon_external_ssl: flase causes horizon endpoint to fail with redirect error" [Undecided,New]16:11
evrardjpI just confimed it16:11
evrardjpI've seen it16:11
andymccrok cool16:12
evrardjpbasically when doing to horizon_external_ssl: False, you configure horizon properly to handle ssl internally16:12
evrardjpbut haproxy isn't configured properly by default to take this into account16:12
evrardjpI suggest we continue the bug triage and we'll discuss the approach in an eventual commit16:13
andymccryeah agree16:13
evrardjpimportance seem medium16:13
evrardjpmedium rare16:13
andymccrhahaha16:13
evrardjpsorry16:14
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova: Remove the -d flag to libvirtd when using systemd  https://review.openstack.org/40758516:14
evrardjp #terriblejoke16:14
andymccrsteak o clock :D16:14
evrardjpnext is16:14
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164740416:14
openstackLaunchpad bug 1647404 in openstack-ansible "Kilo to Liberty Upgrades: flavor migration still an issue" [Undecided,New]16:14
asettle... why do I feel like we've looked at this bug before?16:14
*** weezS has joined #openstack-ansible16:14
andymccrasettle: it was different16:14
asettleAlso, Kilo is EOL. Why would we be looking at upgrades?16:14
* asettle is confused.16:14
andymccrlast week was a "this happened in k->l but may still be an issue in M + N etc"16:15
asettleandymccr: so many all named the same thing16:15
asettleandymccr: *facepalm*16:15
*** faizy__ has quit IRC16:15
evrardjpnot sure what we can do16:15
*** faizy has joined #openstack-ansible16:15
andymccrim not even sure there is anything we can do to fix this, since we cant push a release for liberty16:16
evrardjpand it's not our fault16:16
evrardjpit's I guess nova's migration16:16
evrardjpright?16:16
andymccryeah - i mean we could've worked around it a few months ago maybe - but now its not really possible16:16
andymccra fix in mitaka would not help this :P16:16
evrardjpmaybe we should have a better enforcing process of these migrations16:16
evrardjpbut that would deserve another bug (that would be wishlist)16:17
andymccrahh it seems to mess up on deleted instances?16:17
evrardjpyup16:17
evrardjpwell at least according to the bug report16:17
andymccrhmm yeah16:17
andymccri dunno16:17
andymccrwell16:17
andymccrtbh we cant do anything regardless of teh cause16:17
andymccr*the16:18
evrardjpcan't do anything16:18
evrardjpyup, the best we could do is issue a known issue16:18
*** rstarmer has quit IRC16:18
jmccrorythink i saw this before https://bugs.launchpad.net/openstack-ansible/+bug/1594584/comments/316:18
openstackLaunchpad bug 1594584 in openstack-ansible "Kilo nova extra migrations may not have successfully completed" [Medium,Fix released] - Assigned to Jimmy McCrory (jimmy-mccrory)16:18
*** rstarmer has joined #openstack-ansible16:18
evrardjpjmccrory: that's why it rings me a bell16:18
jmccrorythat migration was buggy16:18
*** pcaruana has quit IRC16:19
evrardjpI remember you talked about migration issues in the past, and that's why I thought it could be good to validate our migrations16:19
evrardjpthat's true jmccrory16:19
evrardjpso I'll post our conversation in the bug16:20
evrardjpand hope it helps, but that's the max we could do16:20
evrardjpeveryone agrees?16:20
evrardjpI'll mention won't fix16:21
*** faizy has quit IRC16:21
evrardjpI'd like a +1 of someone before taking this decision16:21
andymccrsure16:21
andymccri dont think we can fix16:21
*** rstarmer has quit IRC16:21
*** javeriak has joined #openstack-ansible16:22
evrardjpok approved as won't fix16:22
evrardjpnext16:22
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164710716:22
openstackLaunchpad bug 1647107 in openstack-ansible "osa newton aio router cannot access internet" [Undecided,New]16:22
*** oanson has quit IRC16:22
*** rstarmer has joined #openstack-ansible16:22
andymccrahh yeah winggundamth was mentioning this - i dont think this is intended as a working thing16:22
andymccrim not sure the routing is setup for that to be possible, although he mentioned it was working in mitaka16:22
andymccrnot sure if anybody else knows differently16:23
*** h5t4 has quit IRC16:23
jmccrorynever tried16:23
andymccrim not too sure why you'd aim to do that16:24
andymccrbut afaik the aio sets up its own interfaces that are not connected to anything16:24
evrardjpnever tried either  :p16:24
evrardjpbut wouldn't tempest need that?16:25
evrardjpto fetch the cirros image?16:25
evrardjphe is doing it inside the utility container16:25
evrardjpso I guess he has to have proper connectivity16:25
evrardjpoh ok16:25
evrardjpit's not inside containers16:25
evrardjpit's for instances!16:25
evrardjpomg16:25
andymccrso im pretty sure that wouldnt work as far as "routing out" would go16:25
evrardjp #tired16:25
evrardjphow do we classify this?16:25
andymccrevrardjp: id say its low since AIO isnt designed for that16:25
andymccror maybe even wishlist? im not too sure haha16:26
evrardjpif newton broke the workflow we can consider this as a bug16:26
andymccrevrardjp: true but its not confirmed this was possible in mitaka16:26
asettleIn fairness, I'd go wishlist, tbh. Because it really isn't designed that way.16:26
evrardjpit's just ppl are using it in ways we didn't try16:26
asettleIt is something someone wants, it isn't a design flaw.16:26
*** javeriak has quit IRC16:27
evrardjplow, and leave it as unconfirmed until someone reproduces it, is that splitting the apple in half?16:27
openstackgerritMerged openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC  https://review.openstack.org/40094016:27
jmccroryi'll test and confirm later today16:27
evrardjp(not sure if that expression works in english)16:27
evrardjpok16:27
evrardjpthanks jmccrory16:27
asettleevrardjp: works16:27
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164685516:28
openstackLaunchpad bug 1646855 in openstack-ansible "ceph_apt_pin_packages default value is incorrect" [Undecided,New] - Assigned to Praveen N (praveenn)16:28
asettleNeeds to be reproduced.16:28
asettleLow and leave it. The reporter even says it 'might be a mistake'16:28
andymccrdo we even set that?16:29
evrardjpU tgubj ut sgiykd16:30
evrardjpoops16:30
asettleHahahahhahahah16:30
evrardjpI think it should be o=RedHat16:30
andymccrbut where do we even set that?16:30
*** fabg has quit IRC16:30
evrardjpceph client role I guess16:31
logan-no matches for ceph_apt_pin_packages in ceph_client16:31
logan-hmm16:31
logan-I think it is possibly an rpc-openstack/ceph-ansible issue16:32
evrardjpFYI, it's happening in templates/ceph_pin.pref.j216:32
logan-oh16:32
evrardjpconfirmed low16:32
evrardjpwishlist16:32
evrardjplow is good16:32
evrardjpwe need to move to RedHat now!16:32
evrardjpthey have been bought16:32
evrardjpok for you?16:32
andymccrceph_apt_pinned_packages16:32
andymccryeah sure16:33
andymccrsounds fine16:33
*** rstarmer has quit IRC16:33
*** fguillot has quit IRC16:33
*** woodard has quit IRC16:34
logan-TIL a role actually uses apt_package_pinning16:34
evrardjpyup that used pinned_packages instead of pin_packages16:35
evrardjpI documented in the bug16:35
evrardjp(as andymccr said)16:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add checks for remote syslog [+Docs]  https://review.openstack.org/40759316:35
evrardjpI marked it as low hanging fruit if someone new wants to take it :D16:35
evrardjpanyway16:35
evrardjpnext16:35
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164627916:35
openstackLaunchpad bug 1646279 in openstack-ansible "Including trove into ansible deployment" [Undecided,New]16:35
andymccrim not too sure what the bug is16:35
andymccrits in the deliverable for Ocata so its technically an integrated project that is part of the release16:35
*** rstarmer has joined #openstack-ansible16:36
evrardjpWon't Fix would be good to set on this bug, just for the sake of it.16:36
evrardjp:p16:36
andymccryeah sounds good16:36
evrardjpI'm kidding I'll put this in Invalid, mentioning it's already integrated16:37
evrardjpis that fine?16:37
evrardjpok I'll leave it as is, to wait for bug reporter input16:38
andymccr^^ yeah thats a good idea16:38
evrardjpand I'll document our conversation in the bug16:38
evrardjpnext16:38
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164612416:38
openstackLaunchpad bug 1646124 in openstack-ansible "Swift is generating audit.log errors on CentOS with selinux enabled" [Undecided,New]16:38
evrardjpandymccr: D16:39
andymccrhaha no i defer to mhayden16:39
andymccrmhayden: make selinux enforcing again - now its time to put your money where your license plate is!16:39
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception: Disable syslog reception  https://review.openstack.org/40759716:39
mhaydenOOOOOOOORLY16:39
mhaydeni thought mgariepy was working this one16:39
* mhayden looks again16:39
*** mamitchl has joined #openstack-ansible16:39
mhaydenwait, i thought mgariepy proposed some selinux policy to fix this up16:40
evrardjpmhayden's license plate is CHROOT right? not SELinux16:40
mhaydenhow about we just asettle down here a bit :P16:40
mgariepy put it in whislist, i added it only to track this kind of isse..16:40
evrardjpor it has been updated?16:40
mgariepyissue**16:40
andymccrhahah yeah thats true16:40
evrardjpmgariepy: ok16:40
andymccrok cool thanks mgariepy16:40
*** rstarmer has quit IRC16:40
asettlemhayden: :p always a good ping16:41
mgariepynot sure it's causing problem anyway.16:41
evrardjpok I'll leave it as new instead of confirmed then16:41
evrardjpnext16:41
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164597916:41
openstackLaunchpad bug 1645979 in openstack-ansible "neutron_l3_agent and neutron_l3_metadata groups include physical host" [Undecided,New]16:41
*** rstarmer has joined #openstack-ansible16:41
evrardjpI think this one is worth a discussion in the community meeting16:41
evrardjpfine for everyone?16:42
palendaeFine with me16:42
andymccrsounds fine!16:42
evrardjplet's defer then16:42
evrardjpok next16:42
*** Jack_Iv_ has quit IRC16:42
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164372716:42
openstackLaunchpad bug 1643727 in openstack-ansible "Mitaka Upgrade: rfc1034_1035-cleanup.yml does not work with insecure public API" [Undecided,New] - Assigned to Jean-Philippe Evrard (jean-philippe-evrard)16:42
evrardjpok I see what this is, and I have to work on it16:43
evrardjpbasically forcing the use of internal url in the upgrade from l to m16:44
evrardjpOR just have insecure by default and ignore16:44
*** Guest29621 is now known as ioni16:44
evrardjpthat's a quick fix16:44
evrardjpnext16:44
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164370516:44
openstackLaunchpad bug 1643705 in openstack-ansible "Mitaka: pip_install_options break repo playbook" [Undecided,New]16:44
*** ioni is now known as Guest9999016:45
*** vnogin has quit IRC16:45
evrardjpI agree with the proposition of moving the pip wheel commands to different flags than the pip install16:45
evrardjpand by default use the same ones16:46
andymccryeah i think that might work16:46
andymccror should work rather16:46
evrardjpthis would allow more deployer flexibility16:46
evrardjpbut as a reminder, it should not be used for that16:46
evrardjpdo you agree? Should I move this to confirmed/wishlist ?16:46
*** rstarmer has quit IRC16:46
andymccryeah16:47
andymccri agree with that16:47
evrardjpI'll document this in the bug16:47
evrardjpok16:47
andymccri think thats a sensible change at least, although im still not sure you should use --force-reinstall but hey as a deployer it is your responsibility, we provide the option to do it16:47
*** rstarmer has joined #openstack-ansible16:47
evrardjpor at least not break the installation workflow16:47
evrardjpmakes sense to me16:47
evrardjpok we're done for today16:47
evrardjpthanks everyone!16:47
andymccrthanks evrardjp16:48
*** Mudpuppy_ is now known as Mudpuppy16:50
*** paulfantom_ has joined #openstack-ansible16:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Virus definition update frequency  https://review.openstack.org/40760516:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable FIPS [+Docs]  https://review.openstack.org/40721816:53
*** rstarmer has quit IRC16:54
openstackgerritAdam Reznechek proposed openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC  https://review.openstack.org/40760716:54
*** rstarmer has joined #openstack-ansible16:54
*** vnogin has joined #openstack-ansible16:59
*** rstarmer has quit IRC17:04
*** janki has quit IRC17:04
*** rstarmer has joined #openstack-ansible17:04
*** adrian_otto has quit IRC17:05
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set maxlogins limit [+Docs]  https://review.openstack.org/40761117:07
*** retreved has quit IRC17:08
*** rstarmer has quit IRC17:08
*** rstarmer has joined #openstack-ansible17:09
*** fabg has joined #openstack-ansible17:09
mgariepyandymccr, i just destroyed all the containers in a test vm, and re-deployed repo-server on centos7 and it works ok for me.17:10
mgariepyandymccr, did you find something related to paulfantom's issue ?17:11
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception: logging level  https://review.openstack.org/40761317:12
openstackgerritMerged openstack/openstack-ansible-ceph_client: Disable SSH verification on mons online check  https://review.openstack.org/40756717:14
*** chhavi has joined #openstack-ansible17:14
andymccrmgariepy: not really aside from that his local_packages didnt include requirements17:15
andymccrand a few others that are less important - but it seemed to be an incomplete list17:15
*** fabg has quit IRC17:15
mgariepyok17:16
andymccrwhich means thats then related to the "with_py_pkgs" module in openstack-ansible-plugins or there is a var/setting somewhere that is not quite right17:16
andymccrmgariepy: how do you build your AIOs for CentOS?17:16
mgariepymanually lol17:16
andymccrhaha :)17:17
andymccrfair enough17:17
*** whiteveil has quit IRC17:17
mgariepyhttp://paste.openstack.org/show/591570/17:17
mgariepyandymccr, ^^17:17
mgariepyworking on a patch to support centos for bootstrap-aio.sh.17:18
andymccrahh nice mgariepy17:18
lbragstadjmccrory documented what we saw in https://bugs.launchpad.net/keystone/+bug/164780017:18
openstackLaunchpad bug 1647800 in OpenStack Identity (keystone) "keystone-manage bootstrap isn't completely idempotent" [Undecided,New]17:18
mgariepyi finally got all the other "required" role patched up so next step is bootstrap-aio :D17:18
mgariepyand debug the nova thing.17:19
paulfantom_mgariepy, andymccr, all I did was just running setup-everything.yml on fresh install of CentOS 7.2 :)17:19
*** woodard has joined #openstack-ansible17:19
paulfantom_after bootstraping ansible17:19
mgariepypaulfantom_, after configuring the rest of the infra ;)17:20
mgariepylike copy /etc/openstack-deploy and networking ..17:20
*** weezS has quit IRC17:21
paulfantom_yeah, I've got an ansible role for that, but it is based on openstack defaults17:21
*** rstarmer_ has joined #openstack-ansible17:21
*** woodard has quit IRC17:22
*** rstarmer has quit IRC17:22
*** woodard has joined #openstack-ansible17:22
jmccrorylbragstad : cool, good write up. i've subscribed to it17:25
paulfantom_mgariepy: what's with nova?17:26
mgariepygate jobs are failing17:26
paulfantom_oh17:26
*** rstarmer_ has quit IRC17:26
openstackgerritMerged openstack/openstack-ansible-repo_build: Copy get-pip script into the release folder  https://review.openstack.org/40680217:26
mgariepyfood time for me. back in an hour or so.17:27
*** weezS has joined #openstack-ansible17:28
*** kstev1 has joined #openstack-ansible17:29
*** kstev has quit IRC17:29
*** kstev1 has quit IRC17:33
*** rstarmer has joined #openstack-ansible17:35
andymccrok im out for today :) see you all later!17:36
*** strattao has quit IRC17:37
*** rstarmer has quit IRC17:38
*** kstev has joined #openstack-ansible17:39
*** rstarmer has joined #openstack-ansible17:39
*** strattao has joined #openstack-ansible17:41
*** asettle has quit IRC17:42
*** rstarmer has quit IRC17:43
*** Guest99990 is now known as ioni17:45
*** ioni is now known as Guest9789617:46
*** fguillot has joined #openstack-ansible17:46
*** adrian_otto has joined #openstack-ansible17:47
*** vnogin has quit IRC17:50
openstackgerritMerged openstack/openstack-ansible-os_keystone: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652317:56
openstackgerritMerged openstack/openstack-ansible-rsyslog_client: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726017:56
openstackgerritMerged openstack/openstack-ansible-plugins: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725517:56
openstackgerritMerged openstack/openstack-ansible-pip_lock_down: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726717:56
openstackgerritMerged openstack/openstack-ansible-repo_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725017:57
openstackgerritMerged openstack/openstack-ansible-pip_install: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725117:57
*** weezS has quit IRC17:58
openstackgerritMerged openstack/openstack-ansible-memcached_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40724817:59
openstackgerritMerged openstack/openstack-ansible-galera_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40725717:59
openstackgerritMerged openstack/openstack-ansible-lxc_hosts: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40724317:59
openstackgerritMerged openstack/openstack-ansible-openstack_openrc: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40726618:00
*** cbits has joined #openstack-ansible18:03
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Exception for cron logging  https://review.openstack.org/40717018:05
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Exceptions for filesystem mounts  https://review.openstack.org/40715018:07
*** kstev has quit IRC18:09
openstackgerritMerged openstack/openstack-ansible: Gather facts before running first role requiring them  https://review.openstack.org/40743518:10
openstackgerritMerged openstack/openstack-ansible: Allow refspec in role fetcher  https://review.openstack.org/40719218:10
*** jlockwood has quit IRC18:14
*** vnogin has joined #openstack-ansible18:16
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Exception for user init file umask  https://review.openstack.org/40716418:20
*** vnogin has quit IRC18:20
*** whiteveil has joined #openstack-ansible18:21
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Exception for removing unnecessary accounts  https://review.openstack.org/40700418:21
*** woodard has quit IRC18:25
*** faizy has joined #openstack-ansible18:25
*** woodard has joined #openstack-ansible18:27
*** Jack_Iv has quit IRC18:29
*** faizy_ has joined #openstack-ansible18:31
*** chhavi has quit IRC18:32
*** faizy_ has quit IRC18:32
*** faizy has quit IRC18:33
*** faizy_ has joined #openstack-ansible18:33
*** asettle has joined #openstack-ansible18:35
*** weezS has joined #openstack-ansible18:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for ocsp_on in PKCS config [+Docs]  https://review.openstack.org/40765018:43
*** Jack_Iv has joined #openstack-ansible18:43
*** Guest97896 is now known as ioni18:46
*** ioni is now known as Guest4246118:46
*** v1k0d3n has quit IRC18:47
*** v1k0d3n has joined #openstack-ansible18:47
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-repo_server: Add proxy configuration for apt-cacher-ng  https://review.openstack.org/40742618:48
*** ArchiFleKs has joined #openstack-ansible18:51
*** v1k0d3n has quit IRC18:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for cackey/coolkey values [+Docs]  https://review.openstack.org/40765418:52
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-12-02  https://review.openstack.org/40603118:53
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Separate host type and container type with a dash  https://review.openstack.org/40765518:54
*** asettle has quit IRC18:54
*** asettle has joined #openstack-ansible18:55
*** weezS has quit IRC18:58
*** sdake has quit IRC18:59
*** asettle has quit IRC18:59
*** cathrichardson has quit IRC19:01
*** Jack_Iv_ has joined #openstack-ansible19:01
*** Jack_Iv_ has quit IRC19:03
*** Jack_Iv_ has joined #openstack-ansible19:04
*** sdake has joined #openstack-ansible19:05
*** jamielennox|away is now known as jamielennox19:07
*** electrofelix has quit IRC19:10
*** Jack_Iv_ has quit IRC19:10
*** strattao has quit IRC19:11
*** Jack_Iv_ has joined #openstack-ansible19:11
*** v1k0d3n has joined #openstack-ansible19:11
*** severion has joined #openstack-ansible19:13
*** bapalm_ has quit IRC19:14
*** severion has quit IRC19:15
*** severion has joined #openstack-ansible19:15
*** Jack_Iv_ has quit IRC19:16
*** severion is now known as v1k0d3n_19:16
*** v1k0d3n_ has quit IRC19:17
*** v1k0d3n has quit IRC19:17
*** cathrichardson has joined #openstack-ansible19:17
*** v1k0d3n has joined #openstack-ansible19:17
*** stuartgr has quit IRC19:18
*** bapalm has joined #openstack-ansible19:18
*** faizy_ has quit IRC19:19
*** Jack_Iv_ has joined #openstack-ansible19:20
*** Jack_Iv_ has quit IRC19:20
*** poopcat has joined #openstack-ansible19:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception: firewall port auditing  https://review.openstack.org/40767119:26
*** cathrichardson has quit IRC19:28
openstackgerritMajor Hayden proposed openstack/openstack-ansible-repo_server: Add proxy configuration for apt-cacher-ng  https://review.openstack.org/40742619:31
mhaydenlogan-: i just tidied up the reno on 40726 ^^19:32
mhaydenerr 40742619:32
*** TxGirlGeek has joined #openstack-ansible19:34
logan-thx19:34
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add checks for remote syslog [+Docs]  https://review.openstack.org/40759319:34
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure separate filesystems exist [+Docs]  https://review.openstack.org/40719919:34
*** vnogin has joined #openstack-ansible19:37
*** Jeffrey4l has quit IRC19:42
*** Jeffrey4l has joined #openstack-ansible19:42
mhaydenif anyone has a moment to throw a gander into my callback_plugin fix, that'd be great! https://review.openstack.org/40721419:43
*** ianychoi has quit IRC19:45
*** Guest42461 is now known as ioni19:47
*** ioni is now known as Guest622219:47
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set TMOUT variable for all sessions [+Docs]  https://review.openstack.org/40768419:51
*** whiteveil has quit IRC19:51
*** whiteveil has joined #openstack-ansible19:52
*** johnmilton has quit IRC19:59
*** cathrichardson has joined #openstack-ansible20:01
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable chrony [+Docs]  https://review.openstack.org/40768720:02
*** BjoernT has joined #openstack-ansible20:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set space_left_action in auditd [+Docs]  https://review.openstack.org/40757520:04
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set action_email_acct in auditd [+Docs]  https://review.openstack.org/40757920:04
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception: grub on removable media  https://review.openstack.org/40753420:05
*** askb has joined #openstack-ansible20:10
*** deadnull has joined #openstack-ansible20:10
openstackgerritMarc Gariépy proposed openstack/openstack-ansible: [WIP] Add CentOS support for AIO setup  https://review.openstack.org/40769020:11
*** asettle has joined #openstack-ansible20:11
*** sdake has quit IRC20:12
*** hfu has quit IRC20:12
*** sdake has joined #openstack-ansible20:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for pam_lastlogin [+Docs]  https://review.openstack.org/40769120:14
*** asettle has quit IRC20:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for pam_lastlogin [+Docs]  https://review.openstack.org/40769120:15
*** sdake_ has joined #openstack-ansible20:16
*** sdake has quit IRC20:19
*** johnmilton has joined #openstack-ansible20:19
*** hybridpollo has quit IRC20:19
*** askb has quit IRC20:24
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Remove .shosts/shosts.equiv files [+Docs]  https://review.openstack.org/40769520:27
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Remove .shosts/shosts.equiv files [+Docs]  https://review.openstack.org/40769520:27
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable chrony [+Docs]  https://review.openstack.org/40768720:29
mhayden19 controls left in the security role :P20:30
openstackgerritMarc Gariépy proposed openstack/openstack-ansible: [WIP] Add CentOS support for AIO setup  https://review.openstack.org/40769020:32
mgariepygreat !20:32
*** TobiSan has quit IRC20:33
*** TobiSan has joined #openstack-ansible20:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for promiscuous interfaces [+Docs]  https://review.openstack.org/40769820:36
mhaydeni have a difficult time spelling promiscuous20:37
palendaemhayden: Do we need to add a command line spell check to the gate?20:37
* palendae has thought about it for his own pre-commit hooks20:37
*** gouthamr has quit IRC20:39
*** asettle has joined #openstack-ansible20:41
*** poopcat has quit IRC20:43
*** vnogin has quit IRC20:43
*** poopcat has joined #openstack-ansible20:43
mgariepyisn't that why we have review ?20:43
palendaemgariepy: Yes :)20:44
palendaePartially20:44
mgariepyhaha20:44
palendaeAlso I quickly found out that maintaining such a spell checker was a nightmare20:44
palendaeCustom dictionary files20:44
*** fguillot has quit IRC20:47
*** Guest6222 is now known as ioni20:48
*** ioni is now known as Guest2741720:48
*** vnogin has joined #openstack-ansible20:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Remove .shosts/shosts.equiv files [+Docs]  https://review.openstack.org/40769520:52
*** david-lyle has quit IRC20:55
*** cmart has quit IRC20:56
*** askb has joined #openstack-ansible21:00
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Restrict mail relaying [+Docs]  https://review.openstack.org/40770121:01
*** schwicht has quit IRC21:07
*** weezS has joined #openstack-ansible21:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for TFTP secure mode [+Docs]  https://review.openstack.org/40770921:08
*** Jack_Iv_ has joined #openstack-ansible21:08
*** cmart has joined #openstack-ansible21:14
*** johnmilton has quit IRC21:15
*** chris_hultin is now known as chris_hultin|AWA21:20
*** schwicht has joined #openstack-ansible21:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for TFTP secure mode [+Docs]  https://review.openstack.org/40770921:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Restrict mail relaying [+Docs]  https://review.openstack.org/40770121:23
*** Jack_Iv has quit IRC21:25
*** schwicht has quit IRC21:26
*** schwicht has joined #openstack-ansible21:27
*** Jack_Iv_ has quit IRC21:29
*** Jeffrey4l has quit IRC21:32
*** paulfantom_ has quit IRC21:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for default SNMP comm strings [+Docs]  https://review.openstack.org/40771721:34
*** Jeffrey4l has joined #openstack-ansible21:34
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Restrict mail relaying [+Docs]  https://review.openstack.org/40770121:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for TFTP secure mode [+Docs]  https://review.openstack.org/40770921:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for default SNMP comm strings [+Docs]  https://review.openstack.org/40771721:35
*** schwicht has quit IRC21:36
*** schwicht has joined #openstack-ansible21:38
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Fix swapped docs  https://review.openstack.org/40771821:39
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Docs for TFTP server removal  https://review.openstack.org/40772021:46
*** schwicht has quit IRC21:46
*** schwicht has joined #openstack-ansible21:48
*** Guest27417 is now known as ioni21:48
*** ioni is now known as Guest1732021:49
*** smatzek has quit IRC21:52
*** schwicht has quit IRC21:58
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set permissions on sshd host keys [+Docs]  https://review.openstack.org/40772422:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for default SNMP comm strings [+Docs]  https://review.openstack.org/40771722:03
*** wadeholler has quit IRC22:05
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Add missing docs for GSSAPI  https://review.openstack.org/40772722:06
*** thorst has quit IRC22:09
*** thorst has joined #openstack-ansible22:09
openstackgerritMerged openstack/openstack-ansible-repo_server: Add proxy configuration for apt-cacher-ng  https://review.openstack.org/40742622:10
*** cathrich_ has joined #openstack-ansible22:11
*** cathrichardson has quit IRC22:12
*** thorst has quit IRC22:18
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-lxc_hosts: Allow variable control over lxc_template task enviroment  https://review.openstack.org/40773222:20
*** woodard_ has joined #openstack-ansible22:20
*** weezS has quit IRC22:22
*** woodard has quit IRC22:23
*** david-lyle has joined #openstack-ansible22:24
*** woodard_ has quit IRC22:25
*** schwicht has joined #openstack-ansible22:25
*** vnogin has quit IRC22:26
*** deadnull has quit IRC22:28
*** jheroux has quit IRC22:30
*** vnogin has joined #openstack-ansible22:30
*** poopcat has quit IRC22:30
*** ianychoi has joined #openstack-ansible22:32
*** poopcat has joined #openstack-ansible22:32
*** The_Bruce has quit IRC22:33
agrebennikovhi there folks, is there a way to say I want my public catalog endpoints to be https while others are http?22:33
*** pwnall1337 is now known as zz_pwnall133722:35
andymccragrebennikov: i believe you can set openstack_service_publicuri_proto: https and set openstack_service_adminuri_proto: http and openstack_service_internaluri_proto: http22:36
agrebennikovoh, that's proto.... i'm actually almost finished finding it through the default vars, but thanks!22:37
*** thorst_ has joined #openstack-ansible22:38
*** thorst_ has quit IRC22:38
*** asettle has quit IRC22:40
*** poopcat has quit IRC22:40
*** david-lyle has quit IRC22:41
*** david-lyle has joined #openstack-ansible22:41
*** cathrich_ has quit IRC22:44
*** david-lyle has quit IRC22:46
*** Guest17320 is now known as ioni22:49
*** ioni is now known as Guest189022:50
*** adrian_otto has quit IRC22:50
*** chris_hultin|AWA is now known as chris_hultin22:50
*** poopcat has joined #openstack-ansible22:52
*** yolanda has quit IRC22:52
*** yolanda has joined #openstack-ansible22:54
*** chris_hultin is now known as chris_hultin|AWA23:00
*** asettle has joined #openstack-ansible23:00
*** asettle has quit IRC23:01
*** jamesdenton has quit IRC23:02
*** yolanda has quit IRC23:04
*** jamielennox is now known as jamielennox|away23:05
*** vnogin has quit IRC23:06
*** jamielennox|away is now known as jamielennox23:06
*** chris_hultin|AWA is now known as chris_hultin23:07
*** cbits has quit IRC23:11
*** TxGirlGeek has quit IRC23:11
*** yolanda has joined #openstack-ansible23:13
*** pmannidi has joined #openstack-ansible23:13
*** vnogin has joined #openstack-ansible23:14
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Virus definition update frequency  https://review.openstack.org/40760523:14
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Fix swapped docs  https://review.openstack.org/40771823:17
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Exception: logging level  https://review.openstack.org/40761323:18
*** zz_pwnall1337 is now known as pwnall133723:18
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Exception: grub on removable media  https://review.openstack.org/40753423:19
*** yolanda has quit IRC23:22
*** Jack_Iv has joined #openstack-ansible23:29
*** galstrom is now known as galstrom_zzz23:31
*** Jack_Iv has quit IRC23:34
*** yolanda has joined #openstack-ansible23:35
*** thorst_ has joined #openstack-ansible23:39
*** BjoernT has quit IRC23:40
*** agrebennikov has quit IRC23:42
*** yolanda has quit IRC23:43
*** whiteveil has quit IRC23:44
*** weezS has joined #openstack-ansible23:45
*** thorst_ has quit IRC23:48
*** Guest1890 is now known as ioni23:50
*** ioni is now known as Guest8170623:51
*** sdake_ has quit IRC23:51
*** v1k0d3n has quit IRC23:53

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!