*** galstrom_zzz is now known as galstrom | 00:00 | |
*** dxiri has quit IRC | 00:01 | |
*** vnogin has quit IRC | 00:03 | |
*** vnogin has joined #openstack-ansible | 00:05 | |
*** chris_hultin is now known as chris_hultin|AWA | 00:06 | |
bgmccollum | what would cause two service entries for swift to get created? one has all the endpoints correctly created, the other is just the service entry ... mitaka / 13.3.9 | 00:08 |
---|---|---|
bgmccollum | and i think horizon is picking the latter out of the catalog, which is...uh...bad | 00:09 |
*** vnogin has quit IRC | 00:10 | |
*** asettle has joined #openstack-ansible | 00:10 | |
*** Jack_Iv has joined #openstack-ansible | 00:13 | |
*** asettle has quit IRC | 00:14 | |
*** galstrom is now known as galstrom_zzz | 00:16 | |
*** Jack_Iv has quit IRC | 00:18 | |
*** whiteveil has joined #openstack-ansible | 00:19 | |
*** joseg has joined #openstack-ansible | 00:24 | |
*** joseg has left #openstack-ansible | 00:24 | |
*** dxiri_ has quit IRC | 00:25 | |
*** michaelgugino has quit IRC | 00:26 | |
*** vnogin has joined #openstack-ansible | 00:27 | |
*** omiday has quit IRC | 00:29 | |
*** fguillot has joined #openstack-ansible | 00:31 | |
*** Mudpuppy_ has joined #openstack-ansible | 00:37 | |
*** Mudpuppy has quit IRC | 00:40 | |
*** sdake has quit IRC | 00:45 | |
*** hw_wutianwei has joined #openstack-ansible | 00:48 | |
*** sacharya has joined #openstack-ansible | 00:58 | |
*** sacharya has quit IRC | 01:03 | |
*** fguillot has quit IRC | 01:04 | |
*** asettle has joined #openstack-ansible | 01:13 | |
*** asettle has quit IRC | 01:18 | |
*** markvoelker has quit IRC | 01:29 | |
*** Mudpuppy_ has quit IRC | 01:31 | |
*** Mudpuppy has joined #openstack-ansible | 01:31 | |
*** tnewhouse has quit IRC | 01:46 | |
*** rgogunskiy has joined #openstack-ansible | 01:51 | |
*** tnewhouse has joined #openstack-ansible | 01:56 | |
*** tnewhouse has quit IRC | 02:01 | |
cloudnull | bgmccollum: Ive seen that kinda thing when the region name was changed or the endpoint was disabled. | 02:02 |
*** PramodJ has quit IRC | 02:03 | |
*** pramodrj07 has quit IRC | 02:03 | |
*** PramodJayathirth has quit IRC | 02:03 | |
*** Jeffrey4l has quit IRC | 02:05 | |
*** Jeffrey4l has joined #openstack-ansible | 02:15 | |
*** hfu has joined #openstack-ansible | 02:19 | |
whiteveil | hey guys! Looking to get an opinion. This isn’t necessarily related to the openstack role, but I did use the role for my base linux ami that im building. So Im currently continuing the hardening of my base ami that has docker installed using ansible, and one of the things I need to do is implement tls auth for the docker daemon | 02:19 |
whiteveil | only problem is, if I did this using ansible for a base ami, all instances created with that base ami would have the same cert and key | 02:19 |
whiteveil | I think at least | 02:19 |
whiteveil | which obv isn’t ideal | 02:19 |
whiteveil | just wondering what your guys’ opinions are on approaching the issue i guess | 02:20 |
*** hfu has quit IRC | 02:25 | |
*** vnogin has quit IRC | 02:36 | |
*** hfu has joined #openstack-ansible | 02:40 | |
*** thorst_ has joined #openstack-ansible | 02:40 | |
*** rgogunskiy has quit IRC | 02:46 | |
*** thorst_ has quit IRC | 02:47 | |
*** thorst_ has joined #openstack-ansible | 02:47 | |
*** thorst_ has quit IRC | 02:52 | |
*** sdake has joined #openstack-ansible | 02:55 | |
*** sacharya has joined #openstack-ansible | 02:59 | |
*** sacharya has quit IRC | 03:04 | |
*** phalmos_ has quit IRC | 03:14 | |
*** phalmos has joined #openstack-ansible | 03:15 | |
*** sacharya has joined #openstack-ansible | 03:25 | |
*** markvoelker has joined #openstack-ansible | 03:30 | |
*** markvoelker has quit IRC | 03:35 | |
*** sdake has quit IRC | 03:44 | |
*** thorst_ has joined #openstack-ansible | 03:54 | |
openstackgerrit | Kyle L. Henderson proposed openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully https://review.openstack.org/410529 | 03:56 |
*** thorst_ has quit IRC | 03:58 | |
*** thorst_ has joined #openstack-ansible | 03:59 | |
*** sdake has joined #openstack-ansible | 04:01 | |
*** Mudpuppy has quit IRC | 04:05 | |
*** Mudpuppy has joined #openstack-ansible | 04:05 | |
*** thorst_ has quit IRC | 04:07 | |
*** Mudpuppy has quit IRC | 04:10 | |
*** sdake_ has joined #openstack-ansible | 04:10 | |
*** sdake has quit IRC | 04:13 | |
*** Jack_Iv has joined #openstack-ansible | 04:15 | |
*** Jack_Iv has quit IRC | 04:19 | |
openstackgerrit | Darren Chan proposed openstack/openstack-ansible: [ops-guide] Adding new content to guide https://review.openstack.org/409854 | 04:23 |
*** pwnall1337 is now known as zz_pwnall1337 | 04:27 | |
*** whiteveil has quit IRC | 04:28 | |
*** adrian_otto has joined #openstack-ansible | 04:29 | |
*** allanice001 has quit IRC | 04:33 | |
*** thorst_ has joined #openstack-ansible | 04:38 | |
*** sdake_ is now known as sdake | 04:40 | |
*** adrian_otto has quit IRC | 04:42 | |
*** adrian_otto has joined #openstack-ansible | 04:59 | |
*** sdake has quit IRC | 05:00 | |
*** thorst_ has quit IRC | 05:04 | |
*** poopcat has quit IRC | 05:04 | |
*** whiteveil has joined #openstack-ansible | 05:07 | |
*** adrian_otto has quit IRC | 05:10 | |
*** asettle has joined #openstack-ansible | 05:14 | |
*** whiteveil has quit IRC | 05:21 | |
*** asettle has quit IRC | 05:21 | |
*** markvoelker has joined #openstack-ansible | 05:31 | |
*** thorst_ has joined #openstack-ansible | 05:34 | |
*** markvoelker has quit IRC | 05:37 | |
*** thorst_ has quit IRC | 05:41 | |
*** h5t4 has joined #openstack-ansible | 05:45 | |
*** javeriak has joined #openstack-ansible | 05:47 | |
*** allanice001 has joined #openstack-ansible | 05:53 | |
*** tnewhouse has joined #openstack-ansible | 05:56 | |
*** tnewhouse has quit IRC | 05:57 | |
*** tnewhouse has joined #openstack-ansible | 05:57 | |
*** Jack_Iv has joined #openstack-ansible | 06:00 | |
*** hybridpolio has quit IRC | 06:03 | |
*** Jack_Iv has quit IRC | 06:05 | |
*** h5t4 has quit IRC | 06:06 | |
*** Jack_Iv has joined #openstack-ansible | 06:08 | |
*** pmannidi_ has quit IRC | 06:10 | |
*** pmannidi has joined #openstack-ansible | 06:11 | |
*** thorst_ has joined #openstack-ansible | 06:28 | |
*** McMurlock1 has joined #openstack-ansible | 06:31 | |
*** Jack_Iv has quit IRC | 06:32 | |
*** thorst_ has quit IRC | 06:36 | |
*** Jack_Iv has joined #openstack-ansible | 06:37 | |
*** Jack_Iv has quit IRC | 06:38 | |
*** Jack_Iv has joined #openstack-ansible | 06:40 | |
*** tnewhous_ has joined #openstack-ansible | 06:44 | |
*** tnewhouse has quit IRC | 06:45 | |
*** tnewhous_ has quit IRC | 06:48 | |
*** tnewhouse has joined #openstack-ansible | 06:48 | |
*** javeriak has quit IRC | 06:55 | |
*** Oku_OS-away is now known as Oku_OS | 06:57 | |
*** javeriak_ has joined #openstack-ansible | 06:58 | |
*** markvoelker has joined #openstack-ansible | 07:00 | |
*** h5t4 has joined #openstack-ansible | 07:04 | |
*** fxpester has joined #openstack-ansible | 07:06 | |
*** markvoelker has quit IRC | 07:06 | |
*** McMurlock1 has quit IRC | 07:08 | |
*** McMurlock1 has joined #openstack-ansible | 07:08 | |
*** maeker has quit IRC | 07:09 | |
*** tnewhous_ has joined #openstack-ansible | 07:10 | |
*** rmelero has quit IRC | 07:12 | |
*** rmelero has joined #openstack-ansible | 07:12 | |
*** McMurlock1 has quit IRC | 07:13 | |
*** tnewhouse has quit IRC | 07:14 | |
*** tnewhous_ has quit IRC | 07:15 | |
*** allanice001 has quit IRC | 07:16 | |
*** tnewhouse has joined #openstack-ansible | 07:16 | |
*** tnewhouse has quit IRC | 07:16 | |
*** rmelero has quit IRC | 07:17 | |
*** h5t4 has quit IRC | 07:17 | |
*** asettle has joined #openstack-ansible | 07:18 | |
*** bapalm has quit IRC | 07:18 | |
openstackgerrit | Omer Anson proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment https://review.openstack.org/391524 | 07:18 |
*** tnewhouse has joined #openstack-ansible | 07:20 | |
*** tnewhouse has quit IRC | 07:23 | |
*** tnewhouse has joined #openstack-ansible | 07:23 | |
*** thorst_ has joined #openstack-ansible | 07:23 | |
*** asettle has quit IRC | 07:25 | |
*** sacharya has quit IRC | 07:26 | |
*** tnewhouse has quit IRC | 07:28 | |
*** javeriak_ has quit IRC | 07:31 | |
*** thorst_ has quit IRC | 07:31 | |
*** javeriak has joined #openstack-ansible | 07:32 | |
*** allanice001 has joined #openstack-ansible | 07:33 | |
*** drifterza has joined #openstack-ansible | 07:35 | |
*** bapalm has joined #openstack-ansible | 07:38 | |
*** tnewhouse has joined #openstack-ansible | 07:45 | |
*** maeker has joined #openstack-ansible | 07:50 | |
*** tnewhouse has quit IRC | 07:54 | |
*** maeker has quit IRC | 07:54 | |
*** tnewhouse has joined #openstack-ansible | 07:55 | |
*** tnewhouse has quit IRC | 07:59 | |
*** pcaruana has joined #openstack-ansible | 07:59 | |
*** sacharya has joined #openstack-ansible | 08:00 | |
*** sacharya has quit IRC | 08:05 | |
*** Jack_Iv_ has joined #openstack-ansible | 08:07 | |
*** tnewhouse has joined #openstack-ansible | 08:14 | |
*** tnewhouse has quit IRC | 08:18 | |
*** thorst_ has joined #openstack-ansible | 08:19 | |
*** Jack_Iv_ has quit IRC | 08:20 | |
openstackgerrit | Omer Anson proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment https://review.openstack.org/391524 | 08:20 |
*** karimb has joined #openstack-ansible | 08:21 | |
*** tnewhouse has joined #openstack-ansible | 08:23 | |
*** Jack_Iv_ has joined #openstack-ansible | 08:27 | |
*** Jack_Iv_ has quit IRC | 08:27 | |
*** thorst_ has quit IRC | 08:27 | |
*** Jack_Iv_ has joined #openstack-ansible | 08:27 | |
*** tnewhouse has quit IRC | 08:28 | |
*** Jack_Iv_ has quit IRC | 08:32 | |
*** vnogin has joined #openstack-ansible | 08:41 | |
*** vnogin has quit IRC | 08:46 | |
*** openstackgerrit has quit IRC | 08:48 | |
*** vnogin has joined #openstack-ansible | 09:00 | |
*** yolanda has quit IRC | 09:01 | |
*** markvoelker has joined #openstack-ansible | 09:02 | |
*** vnogin has quit IRC | 09:04 | |
*** ianychoi has joined #openstack-ansible | 09:05 | |
*** yolanda has joined #openstack-ansible | 09:05 | |
*** markvoelker has quit IRC | 09:07 | |
*** javeriak has quit IRC | 09:08 | |
*** tnewhouse has joined #openstack-ansible | 09:08 | |
*** tnewhouse has quit IRC | 09:13 | |
*** tnewhouse has joined #openstack-ansible | 09:13 | |
*** Jack_Iv_ has joined #openstack-ansible | 09:16 | |
*** thorst_ has joined #openstack-ansible | 09:18 | |
*** tnewhouse has quit IRC | 09:22 | |
*** thorst_ has quit IRC | 09:24 | |
*** Jack_Iv_ has quit IRC | 09:25 | |
*** Jack_Iv has quit IRC | 09:26 | |
*** Jack_Iv has joined #openstack-ansible | 09:28 | |
*** furlongm_ has joined #openstack-ansible | 09:29 | |
*** furlongm has quit IRC | 09:30 | |
*** May-meimei has quit IRC | 09:31 | |
*** uthng_ has joined #openstack-ansible | 09:32 | |
uthng_ | hello all | 09:32 |
uthng_ | anyone here can help me ? | 09:32 |
uthng_ | please | 09:32 |
*** tnewhouse has joined #openstack-ansible | 09:32 | |
*** tnewhouse has quit IRC | 09:37 | |
odyssey4me | uthng_ that depends on the question - best is to ask the question, then if someone can help, they will | 09:38 |
odyssey4me | alextricity25 yes, the repo data is in a bind mount to the host - has been since forever | 09:38 |
uthng_ | odyssey4me: same question yesterday about errors on glance and cinder after upgrade from Mitaka to Newton on AIO. | 09:41 |
*** Jack_Iv has quit IRC | 09:41 | |
odyssey4me | uthng_ when you did the upgrade, did you use the run_upgrade script? | 09:42 |
odyssey4me | how did you perform the upgrade? | 09:42 |
*** Jack_Iv has joined #openstack-ansible | 09:42 | |
uthng_ | After the upgrade os-keystone-install, rabbitmq lost passwords of glance and cinder with the error in log : AMQPLAIN login refused: user 'keystone' - invalid credentials AMQPLAIN login refused: user 'cinder' - invalid credentials | 09:42 |
odyssey4me | the question stands | 09:43 |
*** asettle has joined #openstack-ansible | 09:44 | |
uthng_ | after that, I tried to change password using rabbitmqctl with those in user_secrets.yml, errors went. But after, in keystone log : authorization failed and service unavailable | 09:44 |
uthng_ | odyssey4me: I did mannually | 09:44 |
*** karimb has quit IRC | 09:45 | |
uthng_ | following these steps http://docs.openstack.org/developer/openstack-ansible/newton/upgrade-guide/manual-upgrade.html | 09:45 |
odyssey4me | uthng_ it sounds to me like something went wrong with the secrets | 09:48 |
odyssey4me | have you tried setting the passwords for all service accounts to the ones in your secrets file, then restarting them? | 09:48 |
odyssey4me | and have you enabled debug logging to determine which accounts are failing to auth? | 09:49 |
odyssey4me | also, have you verified in keystone that the service loaded right with all its credentials? | 09:49 |
oanson | Hi. I'd appreciate some help with the tests in the dragonflow patch: https://review.openstack.org/#/c/391524/ | 09:53 |
uthng_ | odyssey4me: the user_secrets.yml is the same from Mitaka. | 09:53 |
oanson | The general functional tests fail. They run the dragonlfow tests, even though there's a condition that neutron_driver_type == 'ml2.dragonflow' | 09:54 |
uthng_ | while upgrading, I could only upgrade keystone, glance and cinder | 09:54 |
*** furlongm has joined #openstack-ansible | 09:54 | |
oanson | The dragonflow tests are skipped in calico though... | 09:54 |
*** furlongm_ has quit IRC | 09:55 | |
Adri2000 | is there something in OSA to deploy our own CA onto every hosts? | 09:55 |
uthng_ | but cinder failed while it tried to cinder_backends.yml | 09:55 |
uthng_ | because of service unavailable | 09:56 |
uthng_ | other services not upgraded yet and seem working well | 09:56 |
odyssey4me | Adri2000 no | 09:57 |
uthng_ | how can I verified in keystone the service loaded right all its credentials ? | 09:57 |
Adri2000 | odyssey4me: has it been considered already? did not find any bug report or ml thread | 09:58 |
*** openstackgerrit has joined #openstack-ansible | 09:58 | |
odyssey4me | uthng_ you can't - the only way is to use the openstack cli to set them to the values you have | 09:58 |
Adri2000 | odyssey4me: my use case it configuring keystone to talk with an LDAP directory over ldaps with custom CA | 09:58 |
odyssey4me | uthng_ I guess you could use their creds and attempt to auth with them | 09:58 |
odyssey4me | Adri2000 we facilitate the ability to set LDAP as a back-end, the implementation of the certs needs to be done by you | 09:59 |
*** askb has quit IRC | 09:59 | |
oanson | odyssey4me, hi, have you seen my question above? | 10:00 |
oanson | (If you are free, that is) | 10:00 |
*** electrofelix has joined #openstack-ansible | 10:02 | |
*** hfu has quit IRC | 10:02 | |
Adri2000 | odyssey4me: do you think it'd be a good idea to add support for this in the openstack_hosts role? | 10:03 |
odyssey4me | Adri2000 support for what, specifically? | 10:03 |
*** karimb has joined #openstack-ansible | 10:04 | |
*** tnewhouse has joined #openstack-ansible | 10:05 | |
Adri2000 | odyssey4me: the user could specify its own CA certificate in a variable, the role would deploy (copy) that CA certificate onto all the hosts in /usr/local/share/ca-certificates/ (I think), and run update-ca-certificate so that CA gets trusted system-wide | 10:06 |
odyssey4me | oanson looking | 10:06 |
Adri2000 | it'd help keystone connecting to ldaps with custom CA, and probably other similar use cases | 10:07 |
odyssey4me | Adri2000 sounds reasonable - I guess in the lxc_hosts role the container cache prep could also have that done to ensure that all containers trust the same CA's as the host | 10:07 |
uthng_ | odyssey4me: not really, if it was the case, i did not have error with invalid cred in rabbitmq ? | 10:08 |
*** tnewhouse has quit IRC | 10:09 | |
Adri2000 | ah yes, it'd be needed on all hosts either bare metal or lxc containers so yes | 10:10 |
odyssey4me | uthng_ check each cred one by one to validate that they're all right - if any don't work, reset them to the value expected | 10:10 |
odyssey4me | uthng but Keystone Newton also has a credential store - so first thing is to validate that keystone works at all | 10:10 |
*** drifterza has quit IRC | 10:10 | |
*** brad[] has quit IRC | 10:11 | |
uthng_ | So you advice me to check each cred of each service in keystone, thats right ? How can I check it easily with commandline ? | 10:12 |
odyssey4me | uthng I'm afraid I don't have the time to teach you how to do that. You should do your own research and learn how to do this - there is plenty of literature around. | 10:13 |
odyssey4me | maybe someone else is available to assist you, but I would advise that you do some documentation exploring - openstack is a complex system and if you're going to support it then you should learn how to explore and teach yourself | 10:15 |
odyssey4me | also, if I remember correctly this is an AIO, right? if so then why does it matter that it's broken - destroy and rebuild it - the AIO is meant for development and testing and is supposed to be something that can be thrown away | 10:16 |
*** Jack_Iv has quit IRC | 10:19 | |
*** dfflanders has quit IRC | 10:19 | |
*** Jack_Iv has joined #openstack-ansible | 10:19 | |
odyssey4me | oanson ok, that's a very weird one - the conditional include is taking effect for the entire playbook (and role), but is not being applied to only the last few tasks | 10:19 |
*** thorst_ has joined #openstack-ansible | 10:21 | |
*** Jack_Iv_ has joined #openstack-ansible | 10:21 | |
*** vnogin has joined #openstack-ansible | 10:22 | |
*** Jack_Iv_ has quit IRC | 10:24 | |
*** Jack_Iv_ has joined #openstack-ansible | 10:25 | |
*** vnogin has quit IRC | 10:26 | |
uthng_ | odyssey4me: ok thanks. | 10:28 |
*** Jack_Iv_ has quit IRC | 10:28 | |
*** sdake has joined #openstack-ansible | 10:29 | |
*** Jack_Iv_ has joined #openstack-ansible | 10:29 | |
*** thorst_ has quit IRC | 10:29 | |
Adri2000 | reported bug #1649844 | 10:33 |
openstack | bug 1649844 in openstack-ansible "Add ability to deploy custom CA certificates" [Undecided,New] https://launchpad.net/bugs/1649844 | 10:33 |
*** Jack_Iv_ has quit IRC | 10:33 | |
*** vnogin has joined #openstack-ansible | 10:36 | |
*** stuartgr has joined #openstack-ansible | 10:44 | |
openstackgerrit | Adrien Cunin proposed openstack/openstack-ansible-os_magnum: Use openstack_service_*uri_proto vars by default https://review.openstack.org/410681 | 10:45 |
*** DanyC has joined #openstack-ansible | 10:49 | |
*** Jack_Iv has quit IRC | 10:49 | |
*** DanyC has left #openstack-ansible | 10:50 | |
*** Jack_Iv has joined #openstack-ansible | 10:53 | |
oanson | odyssey4me, is it possible I accidentally overridden the value during the tests? | 10:55 |
*** markvoelker has joined #openstack-ansible | 11:02 | |
andymccr | oanson: that is a bit strange, i'll take a look, although plus point - the dragonflow tests are passing now ;P | 11:07 |
*** markvoelker has quit IRC | 11:07 | |
oanson | andymccr, yep. At least that :) | 11:10 |
*** woodard has quit IRC | 11:12 | |
*** woodard has joined #openstack-ansible | 11:12 | |
openstackgerrit | Omer Anson proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment https://review.openstack.org/391524 | 11:13 |
*** rmelero has joined #openstack-ansible | 11:14 | |
*** thorst_ has joined #openstack-ansible | 11:16 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release https://review.openstack.org/410654 | 11:18 |
*** rmelero has quit IRC | 11:18 | |
*** Jack_Iv_ has joined #openstack-ansible | 11:19 | |
*** Jack_Iv_ has quit IRC | 11:20 | |
*** Jack_Iv_ has joined #openstack-ansible | 11:21 | |
*** Jack_Iv_ has quit IRC | 11:22 | |
*** thorst_ has quit IRC | 11:23 | |
*** brad[] has joined #openstack-ansible | 11:24 | |
*** Jack_Iv_ has joined #openstack-ansible | 11:28 | |
*** Jack_Iv_ has quit IRC | 11:33 | |
*** karimb has quit IRC | 11:35 | |
*** karimb has joined #openstack-ansible | 11:35 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release https://review.openstack.org/410654 | 11:37 |
*** furlongm_ has joined #openstack-ansible | 11:41 | |
*** furlongm has quit IRC | 11:41 | |
evrardjp | I'd be enclined to backport ansible 2.2 into stable/newton :( 2.1 really sucks | 11:46 |
andymccr | oanson: im running a build hopefully will figure out what the deal is with those tests running on lxb/ovs branches | 11:49 |
oanson | Thanks. I have also updated with odyssey4me 's comments, Maybe changing tasks->post_tasks will solve the issue | 11:49 |
andymccr | oanson: if it does it'd be a bit of a "what the?" moment, but we can hope - im running that patch anyway | 11:52 |
oanson | I'm hoping that there's a setting of facts between when tasks run and post_tasks run. I admit - hope that's inspired by ignorance. | 11:53 |
*** sacharya has joined #openstack-ansible | 12:02 | |
*** hfu has joined #openstack-ansible | 12:04 | |
*** maeker has joined #openstack-ansible | 12:06 | |
*** sacharya has quit IRC | 12:07 | |
*** maeker has quit IRC | 12:10 | |
*** thorst_ has joined #openstack-ansible | 12:10 | |
*** thorst_ has quit IRC | 12:18 | |
*** deadnull has joined #openstack-ansible | 12:20 | |
*** smatzek has joined #openstack-ansible | 12:21 | |
*** karimb has quit IRC | 12:27 | |
*** sdake has quit IRC | 12:31 | |
*** jimbaker has quit IRC | 12:34 | |
*** jimbaker has joined #openstack-ansible | 12:38 | |
*** jamielennox is now known as jamielennox|away | 12:43 | |
*** jimbaker has quit IRC | 12:44 | |
*** jimbaker has joined #openstack-ansible | 12:48 | |
*** jamielennox|away is now known as jamielennox | 12:50 | |
*** hw_wutianwei has quit IRC | 12:51 | |
*** johnmilton has joined #openstack-ansible | 12:52 | |
*** sdake_ has joined #openstack-ansible | 12:58 | |
*** sdake_ is now known as sdake | 13:02 | |
*** jheroux has joined #openstack-ansible | 13:03 | |
*** markvoelker has joined #openstack-ansible | 13:03 | |
*** thorst_ has joined #openstack-ansible | 13:05 | |
*** hfu has quit IRC | 13:05 | |
*** jimbaker has quit IRC | 13:06 | |
mhayden | morning! | 13:06 |
*** markvoelker has quit IRC | 13:08 | |
*** jimbaker has joined #openstack-ansible | 13:10 | |
*** hfu has joined #openstack-ansible | 13:10 | |
*** thorst_ has quit IRC | 13:13 | |
Adri2000 | odyssey4me: I don't understand your comment at https://review.openstack.org/#/c/410681/, the proposed change matches what most (all?) other roles do | 13:17 |
Adri2000 | see 'grep proto defaults/main.yml' in nova or glance roles for example | 13:17 |
*** sdake_ has joined #openstack-ansible | 13:20 | |
Adri2000 | or, I think I understand what you mean (do not use a variable that's actually defined outside the role), but then do you confirm that we should fix what all the roles are currently doing? | 13:20 |
*** sdake has quit IRC | 13:23 | |
*** markvoelker has joined #openstack-ansible | 13:24 | |
odyssey4me | Adri2000 oh dear, yes then the other roles should be fixed - but first the group vars should be set in the integrated role | 13:24 |
odyssey4me | *repo | 13:24 |
*** allanice001 has quit IRC | 13:24 | |
alextricity25 | Hello, has anyone had any issues with the "Get pacakge from git" taks in the os_nova role? It runs "git ls-remote git://<internal_lb_vip>/spice-html5" but returns "fatal: unable to connect to <ip> errno=No route to host" | 13:25 |
odyssey4me | ideally the roles should not be using vars outside of their own namespace - group_vars should take on the task of connecting different roles together | 13:25 |
alextricity25 | Strange thing is that curling <internal_lb_vip>:8181 returns just fine.. | 13:25 |
odyssey4me | alextricity25 sounds to me like you have a network routing issue | 13:25 |
odyssey4me | hmm, that's weird then | 13:25 |
alextricity25 | maybe it has something to do with the git protocol being used there | 13:27 |
*** Mudpuppy has joined #openstack-ansible | 13:27 | |
alextricity25 | Maybe something is dropping traffic on that port? | 13:27 |
Adri2000 | odyssey4me: understood | 13:27 |
*** Mudpuppy has quit IRC | 13:27 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Don't delete container_cidr key when overriding https://review.openstack.org/410397 | 13:27 |
*** brad[] has quit IRC | 13:28 | |
mhayden | odyssey4me: fixed up the reno on 410397 if you'd like to restore your deuce | 13:28 |
*** sdake_ is now known as sdake | 13:29 | |
*** Mudpuppy has joined #openstack-ansible | 13:29 | |
*** Mudpuppy has quit IRC | 13:30 | |
*** hw_wutianwei has joined #openstack-ansible | 13:30 | |
*** woodard has quit IRC | 13:30 | |
*** woodard has joined #openstack-ansible | 13:31 | |
*** klamath has joined #openstack-ansible | 13:33 | |
*** vnogin has quit IRC | 13:33 | |
*** klamath has quit IRC | 13:33 | |
*** klamath has joined #openstack-ansible | 13:34 | |
openstackgerrit | Merged openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully https://review.openstack.org/410529 | 13:35 |
mhayden | if anyone has a spare moment to review https://review.openstack.org/406329 , i'd be much obliged -- a little train of patches are lined up behind that one | 13:35 |
*** vnogin has joined #openstack-ansible | 13:36 | |
mhayden | chugga chugga choo choo | 13:36 |
*** Mudpuppy has joined #openstack-ansible | 13:38 | |
*** Mudpuppy has quit IRC | 13:38 | |
*** uthng_ has quit IRC | 13:39 | |
*** Jack_Iv_ has joined #openstack-ansible | 13:40 | |
*** hfu has quit IRC | 13:40 | |
*** Mudpuppy has joined #openstack-ansible | 13:40 | |
*** Mudpuppy has quit IRC | 13:41 | |
*** Mudpuppy has joined #openstack-ansible | 13:43 | |
*** Mudpuppy has quit IRC | 13:44 | |
*** Mudpuppy has joined #openstack-ansible | 13:44 | |
openstackgerrit | Kyle L. Henderson proposed openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully https://review.openstack.org/410762 | 13:45 |
*** Mudpuppy has quit IRC | 13:45 | |
*** Mudpuppy has joined #openstack-ansible | 13:45 | |
openstackgerrit | Merged openstack/openstack-ansible-os_ironic: Fixes issues with special characters in password. https://review.openstack.org/408935 | 13:46 |
*** Mudpuppy has quit IRC | 13:46 | |
*** Mudpuppy has joined #openstack-ansible | 13:47 | |
*** Mudpuppy has quit IRC | 13:47 | |
*** Jack_Iv__ has joined #openstack-ansible | 13:51 | |
*** Jack_Iv__ has quit IRC | 13:51 | |
*** chhavi has joined #openstack-ansible | 13:52 | |
*** Jack_Iv__ has joined #openstack-ansible | 13:52 | |
*** Jack_Iv_ has quit IRC | 13:52 | |
*** brad[] has joined #openstack-ansible | 13:52 | |
*** karimb has joined #openstack-ansible | 13:57 | |
*** Mudpuppy has joined #openstack-ansible | 14:00 | |
*** Mudpuppy has quit IRC | 14:00 | |
*** Mudpuppy has joined #openstack-ansible | 14:01 | |
*** Mudpuppy has quit IRC | 14:02 | |
*** Mudpuppy has joined #openstack-ansible | 14:02 | |
Llenvar | hello. I was wondering if anyone had time to look over my openstack_user_config.yml file to ensure it looks ok. I'll be starting my second attempt at installing Newton so wanted to get a thumbs up first. thanks in advance. http://paste.openstack.org/show/591966/ | 14:02 |
*** cathrichardson has joined #openstack-ansible | 14:03 | |
*** Mudpuppy has quit IRC | 14:03 | |
*** sacharya has joined #openstack-ansible | 14:03 | |
*** Mudpuppy has joined #openstack-ansible | 14:05 | |
*** Mudpuppy has quit IRC | 14:05 | |
*** Mudpuppy has joined #openstack-ansible | 14:06 | |
*** cathrich_ has joined #openstack-ansible | 14:06 | |
*** Mudpuppy has quit IRC | 14:06 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release https://review.openstack.org/410654 | 14:07 |
*** sacharya has quit IRC | 14:08 | |
*** cathrichardson has quit IRC | 14:08 | |
*** cathrich_ is now known as cathrichardson | 14:09 | |
*** hw_wutianwei has quit IRC | 14:11 | |
*** klamath has quit IRC | 14:11 | |
*** hw_wutianwei has joined #openstack-ansible | 14:12 | |
*** Mudpuppy has joined #openstack-ansible | 14:14 | |
*** Mudpuppy has quit IRC | 14:14 | |
openstackgerrit | Doug Hellmann proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release https://review.openstack.org/410654 | 14:15 |
dmsimard | mgariepy: did you catch my note about centos 7.3 and kvm ? | 14:16 |
*** whiteveil has joined #openstack-ansible | 14:16 | |
*** hw_wutianwei1 has joined #openstack-ansible | 14:16 | |
*** hw_wutianwei has quit IRC | 14:16 | |
*** hw_wutianwei1 is now known as hw_wutianwei | 14:16 | |
*** bpetit has joined #openstack-ansible | 14:16 | |
*** klamath has joined #openstack-ansible | 14:17 | |
*** whiteveil has quit IRC | 14:19 | |
*** mgariepy has quit IRC | 14:20 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release https://review.openstack.org/410654 | 14:20 |
*** kstev has joined #openstack-ansible | 14:21 | |
*** whiteveil has joined #openstack-ansible | 14:21 | |
*** whiteveil has quit IRC | 14:22 | |
andymccr | TIL about doing refs in rst, and how bad they can be - also nb the OSA gate is broken until the liberty rel notes bit is fixed - which should be fixed in the above patch! | 14:23 |
*** thorst_ has joined #openstack-ansible | 14:26 | |
*** Mudpuppy has joined #openstack-ansible | 14:27 | |
*** Mudpuppy has quit IRC | 14:27 | |
*** mgariepy has joined #openstack-ansible | 14:28 | |
*** Mudpuppy has joined #openstack-ansible | 14:29 | |
*** Mudpuppy has quit IRC | 14:30 | |
*** fguillot has joined #openstack-ansible | 14:30 | |
*** Mudpuppy has joined #openstack-ansible | 14:31 | |
mgariepy | good morning everyone | 14:31 |
*** Mudpuppy has quit IRC | 14:31 | |
mgariepy | dmsimard, no I didn't | 14:31 |
*** asettle has quit IRC | 14:31 | |
*** Mudpuppy has joined #openstack-ansible | 14:32 | |
*** asettle has joined #openstack-ansible | 14:32 | |
* mgariepy reading logs.. | 14:32 | |
*** Jack_Iv__ has quit IRC | 14:32 | |
*** Mudpuppy has quit IRC | 14:32 | |
*** Mudpuppy has joined #openstack-ansible | 14:34 | |
*** Mudpuppy has quit IRC | 14:34 | |
dmsimard | mgariepy: this thread: http://lists.openstack.org/pipermail/openstack-dev/2016-December/108884.html | 14:34 |
dmsimard | tl;dr There's a bunch of issues related to the release of 7.3. Older versions of KVM might not work with 7.3 and newer version (that still hasn't been synchronized to repos) has a regression | 14:35 |
*** smatzek has quit IRC | 14:35 | |
*** Mudpuppy has joined #openstack-ansible | 14:36 | |
*** Mudpuppy has quit IRC | 14:36 | |
*** Mudpuppy has joined #openstack-ansible | 14:37 | |
mgariepy | dmsimard, nova gate job didn't pass for long with CentOS, nova gate job are failing.. | 14:37 |
*** Mudpuppy has quit IRC | 14:37 | |
openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_ceilometer: Add CentOS support for os_ceilometer role https://review.openstack.org/405444 | 14:37 |
*** phalmos has quit IRC | 14:38 | |
*** fguillot has quit IRC | 14:38 | |
*** Mudpuppy has joined #openstack-ansible | 14:38 | |
mgariepy | but I'll take another look at this tomorrow, I'll be off today. | 14:38 |
openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: nova-gate test centos https://review.openstack.org/408815 | 14:38 |
*** Mudpuppy has quit IRC | 14:38 | |
dmsimard | mgariepy: oh? started failing after we got it working? bummer | 14:39 |
*** Mudpuppy has joined #openstack-ansible | 14:39 | |
dmsimard | mgariepy: ping me if you can't figure it out I'll try and look | 14:39 |
*** Mudpuppy has quit IRC | 14:40 | |
*** fguillot has joined #openstack-ansible | 14:41 | |
mgariepy | it's very weird, vm get stuck at networking (again), i've been able to start 2 vms after restart to several services but the day after it wasn't working anymore. | 14:41 |
mgariepy | anyway, i'll start a fresh install tomorrow and let you know if I need help.\ | 14:41 |
mgariepy | Thanks again. | 14:41 |
*** marst has joined #openstack-ansible | 14:41 | |
*** sdake_ has joined #openstack-ansible | 14:42 | |
Adri2000 | chhavi: hello, I've got questions about this commit https://git.openstack.org/cgit/openstack/openstack-ansible-os_cinder/commit/?id=27a895cbd5602a35e797adbb619520553e0e7eb8 from June... I think it has a bad impact when you have multiple cinder-volume hosts with a different volume backend/type for each. with your patch, only the volume type associated with the first cinder-volume will be created | 14:43 |
Adri2000 | ... | 14:43 |
*** gouthamr has joined #openstack-ansible | 14:43 | |
*** sdake has quit IRC | 14:45 | |
*** thorst_ has quit IRC | 14:46 | |
*** whiteveil has joined #openstack-ansible | 14:46 | |
evrardjp | fair point Adri2000 | 14:47 |
*** sdake_ is now known as sdkae | 14:47 | |
*** sdkae is now known as sdake | 14:48 | |
evrardjp | we should probably have a dynamic group based on volume backend/type | 14:49 |
evrardjp | or set fact | 14:49 |
evrardjp | Adri2000: you should file a bug, we'll analyse it next tuesday | 14:50 |
evrardjp | this is probably worth backporting IMO | 14:50 |
*** whiteveil has quit IRC | 14:51 | |
*** thorst_ has joined #openstack-ansible | 14:52 | |
Adri2000 | evrardjp: I was afraid of not being clear, happy that you understood what I meant! :) filed bug #1649914 | 14:55 |
openstack | bug 1649914 in openstack-ansible "os_cinder may create only the first volume type" [Undecided,New] https://launchpad.net/bugs/1649914 | 14:55 |
*** whiteveil has joined #openstack-ansible | 14:56 | |
logan- | nice catch Adri2000 | 14:57 |
*** vnogin has quit IRC | 14:58 | |
evrardjp | I think group_by and add_host because it seems so much more fancy than set_facts! | 14:59 |
evrardjp | fancier* | 14:59 |
*** vnogin has joined #openstack-ansible | 15:00 | |
*** smatzek has joined #openstack-ansible | 15:02 | |
*** chhavi has quit IRC | 15:07 | |
*** vnogin has quit IRC | 15:11 | |
openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer: Remove dependency on oslo.vmware https://review.openstack.org/410238 | 15:11 |
*** whiteveil has quit IRC | 15:13 | |
*** gouthamr has quit IRC | 15:13 | |
*** gouthamr has joined #openstack-ansible | 15:15 | |
*** vnogin has joined #openstack-ansible | 15:15 | |
openstackgerrit | Merged openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully https://review.openstack.org/410762 | 15:19 |
*** TxGirlGeek has joined #openstack-ansible | 15:25 | |
*** chris_hultin|AWA is now known as chris_hultin | 15:29 | |
*** phalmos has joined #openstack-ansible | 15:29 | |
*** fedruantine_ has quit IRC | 15:30 | |
*** tnewhouse has joined #openstack-ansible | 15:35 | |
*** tnewhouse has quit IRC | 15:37 | |
*** whiteveil has joined #openstack-ansible | 15:37 | |
*** Mudpuppy has joined #openstack-ansible | 15:37 | |
*** tnewhouse has joined #openstack-ansible | 15:37 | |
*** Mudpuppy has quit IRC | 15:37 | |
*** adrian_otto has joined #openstack-ansible | 15:39 | |
*** Mudpuppy has joined #openstack-ansible | 15:42 | |
*** Mudpuppy has quit IRC | 15:42 | |
*** Mudpuppy has joined #openstack-ansible | 15:43 | |
openstackgerrit | Adrien Cunin proposed openstack/openstack-ansible: Fixed when logic for gnocchi bind mounts https://review.openstack.org/410821 | 15:43 |
*** thorst_ has quit IRC | 15:44 | |
andymccr | https://review.openstack.org/#/c/410654/ evrardjp or odyssey4me that one is good to go now, and will unblock the osa master gate | 15:45 |
odyssey4me | gogogo | 15:46 |
odyssey4me | andymccr having fun with releasenotes yet? | 15:46 |
andymccr | odyssey4me: haha yeah there were 2 issues... | 15:46 |
andymccr | multiple refs using the same name (here) - with diff links | 15:46 |
andymccr | and then the EOL happened after i fixed that | 15:46 |
andymccr | so the liberty branch failed | 15:47 |
andymccr | although its being fixed upstream | 15:47 |
andymccr | will have to put a subsequent patch in to fix it for liberty though - right now it just removes it | 15:47 |
cloudnull | mornings | 15:47 |
odyssey4me | andymccr I thought I saw a failure in Newton relating to releasenotes oto | 15:47 |
*** tnewhouse has quit IRC | 15:47 | |
odyssey4me | *too | 15:48 |
andymccr | odyssey4me: ahh | 15:48 |
andymccr | its probably the same | 15:48 |
andymccr | since liberty branch has gone | 15:48 |
andymccr | i'll fix that up and get it backported | 15:48 |
odyssey4me | bye bye liberty | 15:48 |
andymccr | kinda glad :P | 15:48 |
odyssey4me | did we ever do the final SHA bumps to the EOL SHA's for liberty? | 15:48 |
odyssey4me | I don't recall seeing one | 15:48 |
*** tnewhouse has joined #openstack-ansible | 15:48 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment https://review.openstack.org/391524 | 15:50 |
*** karimb has quit IRC | 15:50 | |
cloudnull | ^ very cool | 15:51 |
cloudnull | nice work on that evrardjp andymccr :) | 15:51 |
*** karimb has joined #openstack-ansible | 15:52 | |
*** tnewhouse has quit IRC | 15:53 | |
andymccr | odyssey4me: nope - we released 12.2.8 and then the email about EOL'ing it went in. i think the only change would be a docs change that asettle pushed, everything else is the same | 15:53 |
*** ngupta has joined #openstack-ansible | 15:53 | |
andymccr | cloudnull: it was largely oanson - also that is a very random bug... it skips the first task but then runs the rest? | 15:54 |
asettle | andymccr: I don't think that would break it | 15:54 |
cloudnull | was more talking about adding dragon flow | 15:54 |
andymccr | nothings broken :) | 15:54 |
odyssey4me | andymccr okie dokey | 15:54 |
andymccr | cloudnull: yeah :) its basically done, i think my last fix should make it go now, but there is some random ansible bug that was causing the lxb gates to fail because it wasnt skipping all the tasks in the dragonflow tests - even though it had a conditional around the neutron_plugin_type | 15:55 |
andymccr | odyssey4me: i might add a final liberty release for that last fix then that just matches the SHA for liberty-eol | 15:57 |
andymccr | just for completeness | 15:57 |
odyssey4me | andymccr can't now - no more branch | 15:58 |
andymccr | odyssey4me: its just a sha, there's a tag | 15:58 |
odyssey4me | oh, you mean add a tag at the same SHA as eol... | 15:58 |
andymccr | yeah | 15:58 |
odyssey4me | meh, anyone's welcome to use the eol tag directly | 15:58 |
andymccr | true | 15:59 |
odyssey4me | historically I would hold back our EOL until all projects we use have completed their process | 16:00 |
odyssey4me | sometimes they cram in a few extra patches | 16:00 |
odyssey4me | but anyone can override the SHA's or point to their own forks, so it's not exactly crucial | 16:00 |
*** gouthamr has quit IRC | 16:01 | |
*** thorst_ has joined #openstack-ansible | 16:02 | |
*** adrian_otto has quit IRC | 16:02 | |
*** gouthamr has joined #openstack-ansible | 16:04 | |
*** sacharya has joined #openstack-ansible | 16:04 | |
Adri2000 | do I miss something, or rsyslog client configuration is missing for bare metal hosts such as nova-compute and cinder-volume ? | 16:05 |
*** gouthamr has quit IRC | 16:06 | |
*** Llenvar has quit IRC | 16:08 | |
*** sacharya has quit IRC | 16:08 | |
*** Mudpuppy_ has joined #openstack-ansible | 16:14 | |
*** rmelero has joined #openstack-ansible | 16:14 | |
*** whiteveil has quit IRC | 16:15 | |
*** tnewhous_ has joined #openstack-ansible | 16:16 | |
*** Mudpuppy has quit IRC | 16:18 | |
cloudnull | Adri2000: what are you seein g? | 16:21 |
cloudnull | the syslog bits are setup for nova and swift last i recall | 16:21 |
*** weezS has joined #openstack-ansible | 16:22 | |
*** whiteveil has joined #openstack-ansible | 16:22 | |
*** karimb has quit IRC | 16:22 | |
cloudnull | assuming you're running the os-nova-install.yml playbooks the roles are included https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-nova-install.yml#L169-L174 | 16:22 |
cloudnull | that's a nova example | 16:23 |
cloudnull | which will cover the physical hosts | 16:23 |
*** karimb has joined #openstack-ansible | 16:26 | |
*** Mudpuppy_ is now known as Mudpuppy | 16:30 | |
Adri2000 | I have a deployment where there are missing, not sure why, I'll debug more later | 16:30 |
*** adrian_otto has joined #openstack-ansible | 16:31 | |
*** Oku_OS is now known as Oku_OS-away | 16:32 | |
*** Jack_Iv_ has joined #openstack-ansible | 16:33 | |
*** javeriak has joined #openstack-ansible | 16:34 | |
*** Jack_Iv_ has quit IRC | 16:37 | |
andymccr | oanson: passes now! | 16:39 |
cloudnull | woot! | 16:40 |
cloudnull | Adri2000: let me know , happy to help if there's something not working right | 16:40 |
*** deadnull has quit IRC | 16:41 | |
*** karimb has quit IRC | 16:45 | |
*** karimb has joined #openstack-ansible | 16:47 | |
*** TxGirlGeek has quit IRC | 16:54 | |
*** jmckind has joined #openstack-ansible | 16:57 | |
*** chhavi has joined #openstack-ansible | 17:00 | |
*** maeker has joined #openstack-ansible | 17:01 | |
*** zz_pwnall1337 is now known as pwnall1337 | 17:03 | |
*** sdake has quit IRC | 17:05 | |
*** sacharya has joined #openstack-ansible | 17:05 | |
*** maeker has quit IRC | 17:05 | |
*** maeker has joined #openstack-ansible | 17:06 | |
*** Jack_Iv_ has joined #openstack-ansible | 17:15 | |
evrardjp | andymccr ok reviewing | 17:15 |
evrardjp | does someone need my urgent help right now? | 17:17 |
*** Jack_Iv_ has quit IRC | 17:20 | |
openstackgerrit | Merged openstack/openstack-ansible: Fix role SHA's for Ocata-2 release https://review.openstack.org/410654 | 17:21 |
evrardjp | ^ wooot ! | 17:21 |
*** karimb has quit IRC | 17:24 | |
evrardjp | mhayden: out of curiosity: https://review.openstack.org/#/c/407178/14/tasks/rhel7stig/file_perms.yml isn't the when item.uid >= 1000 redundant here? | 17:24 |
*** sdake has joined #openstack-ansible | 17:26 | |
*** sdake has quit IRC | 17:30 | |
bgmccollum | asettle ArchiFleKs -- https://bugs.launchpad.net/openstack-ansible/+bug/1639080/comments/4 | 17:35 |
openstack | Launchpad bug 1639080 in openstack-ansible "Image uploads fail in Horizon if upload mode is set to direct if endpoint set to internal." [Low,Confirmed] - Assigned to Alexandra Settle (alexandra-settle) | 17:35 |
asettle | bgmccollum: you rang? | 17:35 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs] https://review.openstack.org/406329 | 17:35 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners https://review.openstack.org/407157 | 17:36 |
evrardjp | at some point we're gonna have to define safe defaults for ppl using horizon :D | 17:36 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs] https://review.openstack.org/407178 | 17:36 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set user/group/modes on user init files [+Docs] https://review.openstack.org/408736 | 17:36 |
evrardjp | (if that's not the case right now) | 17:36 |
asettle | evrardjp: please do | 17:36 |
evrardjp | ahah | 17:36 |
evrardjp | I should try indeed | 17:36 |
bgmccollum | asettle added some additional info regarding Horizon Direct Image Upload + Glance CORS | 17:36 |
*** BjoernT has joined #openstack-ansible | 17:37 | |
evrardjp | thanks bgmccollum | 17:37 |
asettle | I just read, thank you bgmccollum :) | 17:37 |
*** whiteveil has quit IRC | 17:38 | |
*** whiteveil has joined #openstack-ansible | 17:38 | |
bgmccollum | woot | 17:38 |
bgmccollum | finally can upload images via horizon | 17:39 |
*** whiteveil has quit IRC | 17:40 | |
*** whiteveil has joined #openstack-ansible | 17:40 | |
*** weezS has quit IRC | 17:42 | |
*** javeriak has quit IRC | 17:46 | |
sigmavirus | bgmccollum: that's almost certainly a bug ;) | 17:46 |
*** asettle has quit IRC | 17:48 | |
bgmccollum | sigmavirus: which part. the missing allowed header ORIGIN, or the fact CORS isn't even setup? | 17:48 |
sigmavirus | bgmccollum: the "finally can upload images via horizon" bit ;) | 17:48 |
*** thorst_ has quit IRC | 17:48 | |
bgmccollum | sigmavirus haha. i know, i know. im working on developing training material, and for this audience, it is very much an important feature. | 17:49 |
*** thorst_ has joined #openstack-ansible | 17:49 | |
*** TxGirlGeek has joined #openstack-ansible | 17:50 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs] https://review.openstack.org/406329 | 17:52 |
*** vnogin has quit IRC | 17:52 | |
*** tnewhous_ has quit IRC | 17:53 | |
*** ngupta has quit IRC | 17:54 | |
*** ngupta has joined #openstack-ansible | 17:55 | |
*** Jeffrey4l has quit IRC | 17:58 | |
*** thorst_ has quit IRC | 17:58 | |
*** javeriak has joined #openstack-ansible | 17:59 | |
*** whiteveil has quit IRC | 17:59 | |
*** ngupta has quit IRC | 18:00 | |
*** thorst_ has joined #openstack-ansible | 18:00 | |
evrardjp | bgmccollum: agreed it should be easy and out of the box. Maybe it's time to change the defaults for "safer defaults"... Like asettle just said, I should submit a patch ASAP :p | 18:00 |
evrardjp | to have a basis for discussion | 18:00 |
evrardjp | I'll tag you in the reviews if you don't mind | 18:01 |
bgmccollum | there are a few issues all overlapping...the ssl handshake bits if using HTTPS endpoints (the public endpoints by default), CORS if using direct upload. im thinking going back to legacy mode + internalURL will avoid all these issues. | 18:03 |
*** asettle has joined #openstack-ansible | 18:04 | |
*** thorst_ has quit IRC | 18:04 | |
*** Jack_Iv_ has joined #openstack-ansible | 18:05 | |
*** tnewhouse has joined #openstack-ansible | 18:06 | |
*** thorst has joined #openstack-ansible | 18:06 | |
*** thorst has quit IRC | 18:11 | |
*** thorst has joined #openstack-ansible | 18:12 | |
*** vnogin has joined #openstack-ansible | 18:14 | |
openstackgerrit | Merged openstack/openstack-ansible-os_keystone: All handlers should be tagged "config" https://review.openstack.org/410304 | 18:16 |
*** thorst has quit IRC | 18:17 | |
*** asettle has quit IRC | 18:17 | |
*** Jack_Iv_ has quit IRC | 18:18 | |
*** vnogin has quit IRC | 18:18 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix liberty release notes since EOL https://review.openstack.org/410900 | 18:19 |
*** Jack_Iv_ has joined #openstack-ansible | 18:19 | |
*** david-lyle has quit IRC | 18:21 | |
*** thorst has joined #openstack-ansible | 18:23 | |
*** ngupta has joined #openstack-ansible | 18:27 | |
*** markvoelker has quit IRC | 18:29 | |
*** arif-ali has quit IRC | 18:30 | |
*** thorst has quit IRC | 18:30 | |
*** david-lyle has joined #openstack-ansible | 18:30 | |
*** electrofelix has quit IRC | 18:30 | |
*** arif-ali has joined #openstack-ansible | 18:31 | |
*** pwnall1337 is now known as zz_pwnall1337 | 18:34 | |
*** markvoelker has joined #openstack-ansible | 18:35 | |
palendae | mhayden: https://review.openstack.org/#/c/410397/ no longer passes release note build | 18:36 |
*** metral_zzz has joined #openstack-ansible | 18:36 | |
*** metral_zzz is now known as metral | 18:36 | |
*** thorst has joined #openstack-ansible | 18:36 | |
*** thorst has quit IRC | 18:36 | |
*** thorst has joined #openstack-ansible | 18:37 | |
*** sdake has joined #openstack-ansible | 18:38 | |
*** sdake_ has joined #openstack-ansible | 18:41 | |
*** vnogin has joined #openstack-ansible | 18:41 | |
*** sdake has quit IRC | 18:43 | |
openstackgerrit | Kyle L. Henderson proposed openstack/openstack-ansible-repo_server: Fix apt-cacher-ng file owners during rsync https://review.openstack.org/410916 | 18:46 |
alextricity25 | logan- ping | 18:50 |
*** sdake_ has quit IRC | 18:51 | |
*** chhavi has quit IRC | 18:53 | |
logan- | alextricity25: o/ | 18:54 |
alextricity25 | logan-: Is this you here: https://github.com/openstack/openstack-ansible-os_nova/commit/2c641baaffd6ec7f1a0222089252686f239bf150 | 18:54 |
logan- | yes | 18:54 |
alextricity25 | logan-: I'm running through a mulit-node installation of newton...and for whatever reason the save directory doesn't exist on my hypervisors. | 18:55 |
alextricity25 | logan-: I had to manually restart the libvirt-bin service before the directory was created. I was wondering if you know of any patch/bug out there that is related? | 18:56 |
alextricity25 | Maybe a backport got missed? | 18:56 |
alextricity25 | logan-: I feel like this probably belongs in newton, no? https://github.com/openstack/openstack-ansible-os_nova/blob/master/tasks/nova_compute_kvm_install.yml#L16 | 18:57 |
*** vnogin has quit IRC | 19:00 | |
*** michaelgugino has joined #openstack-ansible | 19:01 | |
*** vnogin has joined #openstack-ansible | 19:01 | |
*** weezS has joined #openstack-ansible | 19:01 | |
*** poopcat has joined #openstack-ansible | 19:02 | |
logan- | hmm so it is a fresh install? | 19:02 |
alextricity25 | logan-: Yes, fresh install. It failed on the task trying to stat the /var/lib/libvirt/qemu/save directory because it wasn't there. Maybe this is a one-off thing...restarting the libvirt-bin service manually seemed to make the save dir appear | 19:03 |
*** thorst has quit IRC | 19:03 | |
alextricity25 | logan-: ATM I'm not sure if this is a persistent issue | 19:04 |
logan- | yeah that seems very one offish, I imagine we'd be seeing that in the gate quite a bit if it was happening frequently | 19:04 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners https://review.openstack.org/407157 | 19:04 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs] https://review.openstack.org/407178 | 19:04 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set user/group/modes on user init files [+Docs] https://review.openstack.org/408736 | 19:04 |
alextricity25 | logan-: Yeah. I'll keep my eye out while i'm doing more of these hardware deployments. Thanks for the info :) | 19:04 |
logan- | the openstack gate wasn't seeing that race I fixed there, I was seeing it in my local CI, but that whole workflow of renaming the save dir is very racy and i don't like it :( | 19:04 |
alextricity25 | me neither :/ | 19:05 |
logan- | but since i put the rechecks in there for that, it has been stable for me | 19:05 |
*** pester has joined #openstack-ansible | 19:05 | |
*** whiteveil has joined #openstack-ansible | 19:07 | |
*** Jack_Iv_ has quit IRC | 19:07 | |
*** fxpester has quit IRC | 19:08 | |
*** Jack_Iv_ has joined #openstack-ansible | 19:09 | |
*** poopcat has quit IRC | 19:10 | |
openstackgerrit | Merged openstack/openstack-ansible: host net config bond0 static -> manual https://review.openstack.org/410230 | 19:11 |
*** Jack_Iv_ has quit IRC | 19:13 | |
*** marst has quit IRC | 19:16 | |
*** marst has joined #openstack-ansible | 19:16 | |
*** thorst has joined #openstack-ansible | 19:16 | |
*** thorst has quit IRC | 19:17 | |
*** ngupta has quit IRC | 19:21 | |
*** ngupta has joined #openstack-ansible | 19:22 | |
*** poopcat has joined #openstack-ansible | 19:22 | |
*** McMurlock1 has joined #openstack-ansible | 19:24 | |
*** ngupta has quit IRC | 19:24 | |
*** ngupta has joined #openstack-ansible | 19:24 | |
*** thorst has joined #openstack-ansible | 19:26 | |
*** thorst has quit IRC | 19:26 | |
*** McMurlock1 has quit IRC | 19:26 | |
*** McMurlock1 has joined #openstack-ansible | 19:27 | |
*** McMurlock1 has quit IRC | 19:27 | |
*** thorst has joined #openstack-ansible | 19:28 | |
stevelle | FYI andymccr I added you as a reviewer on https://review.openstack.org/#/c/382958 so you can keep an eye on the progress. This is the item to watch re: the desired ceilometer SHA bump. If this patch does stall out entirely for some reason we might drop the g-r for ceilo | 19:30 |
*** thorst has quit IRC | 19:31 | |
*** maeker has quit IRC | 19:35 | |
*** thorst has joined #openstack-ansible | 19:38 | |
*** sdake has joined #openstack-ansible | 19:39 | |
*** ngupta has quit IRC | 19:42 | |
*** ngupta has joined #openstack-ansible | 19:43 | |
*** ngupta has quit IRC | 19:47 | |
*** javeriak has quit IRC | 19:52 | |
*** sdake has quit IRC | 19:55 | |
*** uthng has quit IRC | 19:55 | |
*** javeriak has joined #openstack-ansible | 19:59 | |
*** sdake has joined #openstack-ansible | 19:59 | |
*** stuartgr has quit IRC | 20:01 | |
*** Jack_Iv_ has joined #openstack-ansible | 20:01 | |
*** tnewhouse has quit IRC | 20:01 | |
*** johnmilton has quit IRC | 20:02 | |
*** pester has quit IRC | 20:10 | |
*** hybridpollo has joined #openstack-ansible | 20:11 | |
*** tnewhouse has joined #openstack-ansible | 20:14 | |
*** dfflanders has joined #openstack-ansible | 20:15 | |
*** adrian_otto has quit IRC | 20:16 | |
*** vnogin has quit IRC | 20:16 | |
*** vnogin has joined #openstack-ansible | 20:18 | |
*** asettle has joined #openstack-ansible | 20:18 | |
*** javeriak has quit IRC | 20:19 | |
*** Jack_Iv_ has quit IRC | 20:21 | |
*** asettle has quit IRC | 20:22 | |
*** ngupta has joined #openstack-ansible | 20:23 | |
*** johnmilton has joined #openstack-ansible | 20:23 | |
*** javeriak has joined #openstack-ansible | 20:26 | |
*** johnmilton has quit IRC | 20:30 | |
*** hw_wutianwei1 has joined #openstack-ansible | 20:32 | |
*** gouthamr has joined #openstack-ansible | 20:33 | |
*** hw_wutianwei has quit IRC | 20:33 | |
*** hw_wutianwei1 is now known as hw_wutianwei | 20:33 | |
*** pcaruana has quit IRC | 20:33 | |
*** javeriak has quit IRC | 20:34 | |
*** sdake_ has joined #openstack-ansible | 20:35 | |
*** sdake has quit IRC | 20:37 | |
mrda | Morning OSA | 20:46 |
*** thorst has quit IRC | 20:51 | |
mhayden | ohai mrda | 20:52 |
*** phalmos has quit IRC | 20:53 | |
mrda | mhayden: o/ | 20:53 |
*** Jack_Iv_ has joined #openstack-ansible | 20:58 | |
*** phalmos has joined #openstack-ansible | 21:02 | |
*** vnogin has quit IRC | 21:05 | |
*** thorst has joined #openstack-ansible | 21:06 | |
*** weezS has quit IRC | 21:08 | |
*** vnogin has joined #openstack-ansible | 21:11 | |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Don't delete container_cidr key when overriding https://review.openstack.org/410397 | 21:13 |
*** karimb has joined #openstack-ansible | 21:16 | |
*** Jack_Iv_ has quit IRC | 21:16 | |
*** Jack_Iv_ has joined #openstack-ansible | 21:17 | |
*** fguillot has quit IRC | 21:18 | |
*** asettle has joined #openstack-ansible | 21:21 | |
*** Jack_Iv_ has quit IRC | 21:21 | |
*** smatzek has quit IRC | 21:22 | |
*** tnewhouse has quit IRC | 21:24 | |
*** asettle has quit IRC | 21:25 | |
cloudnull | mhayden: https://review.openstack.org/#/c/406329/22/tasks/rhel7stig/file_perms.yml@104 -- is there a reason not to use the octal form ? | 21:27 |
*** ianychoi has quit IRC | 21:28 | |
*** tnewhouse has joined #openstack-ansible | 21:30 | |
*** omiday has joined #openstack-ansible | 21:34 | |
*** tnewhouse has quit IRC | 21:35 | |
*** Jack_Iv_ has joined #openstack-ansible | 21:38 | |
*** Jack_Iv_ has quit IRC | 21:38 | |
*** sdake_ has quit IRC | 21:46 | |
cloudnull | mhayden: ping ^ | 21:46 |
mhayden | OY | 21:46 |
mhayden | cloudnull: well, i want to avoid making the permissions LESS restrictive | 21:47 |
*** jmckind_ has joined #openstack-ansible | 21:47 | |
mhayden | so if the STIG says "750 is required", but the file is "0644", then i don't want things to happen | 21:47 |
mhayden | does that make sense? | 21:47 |
cloudnull | it does. | 21:47 |
*** jmckind has quit IRC | 21:47 | |
cloudnull | and makes sense. | 21:47 |
cloudnull | was +/- curious | 21:48 |
mhayden | hah | 21:48 |
mhayden | it is confuding | 21:48 |
mhayden | confusing even | 21:48 |
*** vnogin_ has joined #openstack-ansible | 21:48 | |
*** tnewhouse has joined #openstack-ansible | 21:48 | |
*** vnogin has quit IRC | 21:49 | |
*** jmckind has joined #openstack-ansible | 21:50 | |
*** jmckind_ has quit IRC | 21:51 | |
*** jmckind_ has joined #openstack-ansible | 21:55 | |
*** thorst has quit IRC | 21:56 | |
*** jmckind has quit IRC | 21:56 | |
*** tnewhouse has quit IRC | 21:59 | |
*** v1k0d3n has quit IRC | 21:59 | |
*** thorst_ has joined #openstack-ansible | 21:59 | |
*** weezS has joined #openstack-ansible | 22:01 | |
*** jmckind has joined #openstack-ansible | 22:01 | |
*** jmckind_ has quit IRC | 22:02 | |
*** whiteveil has quit IRC | 22:03 | |
*** whiteveil has joined #openstack-ansible | 22:03 | |
*** jmckind has quit IRC | 22:06 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-os_heat: Add variable to control cinder backups https://review.openstack.org/410976 | 22:06 |
*** whiteveil has quit IRC | 22:11 | |
*** whiteveil has joined #openstack-ansible | 22:11 | |
*** jmckind has joined #openstack-ansible | 22:18 | |
bgmccollum | random question. with trusty support being dropped in newton, is M->N upgrade even going to be supported, as it will require an OS upgrade? | 22:20 |
*** jimbaker has quit IRC | 22:23 | |
*** whiteveil has quit IRC | 22:23 | |
*** whiteveil has joined #openstack-ansible | 22:23 | |
*** jimbaker has joined #openstack-ansible | 22:27 | |
*** jmckind_ has joined #openstack-ansible | 22:27 | |
*** Jack_Iv has quit IRC | 22:28 | |
cloudnull | anyone around that might want to give these a shove https://review.openstack.org/#/q/owner:kevin%2540cloudnull.com+status:open+project:openstack/openstack-ansible-ops ? | 22:28 |
cloudnull | bgmccollum: M>N is supported | 22:29 |
palendae | bgmccollum, OSA has trusty in Newton | 22:29 |
cloudnull | N>O is not | 22:29 |
*** jmckind has quit IRC | 22:29 | |
cloudnull | we kept trusty in N | 22:29 |
palendae | cloudnull, Well, N trusty > O wouldn't be | 22:29 |
cloudnull | I think we very well may be the only project to do so | 22:29 |
palendae | N -> O is kind of uncharted water | 22:29 |
bgmccollum | ok, i misread the review then :/ | 22:29 |
cloudnull | palendae: ++ | 22:29 |
cloudnull | Trusty was deprecated in N, and is being removed in O | 22:30 |
palendae | bgmccollum, Granted, most of openstack removed trusty in N; hopefully upgrades don't encounter a nasty surprise because of that | 22:30 |
palendae | I'm not aware of anyone doing an actual upgrade yet. Maybe mhayden | 22:30 |
cloudnull | there've been a few folks that have done it so far. | 22:31 |
cloudnull | and I know that the OSIC is testing it today | 22:31 |
mhayden | i took a four node upgrade from M -> N | 22:31 |
mhayden | trusty to xenial upgrade is horrible times | 22:31 |
palendae | Ah, ok | 22:31 |
palendae | mhayden, I figured =\ | 22:31 |
bgmccollum | ok, fears subdued | 22:31 |
palendae | cloudnull, Just trying by checking out the playbooks and running? | 22:32 |
palendae | bgmccollum, Or do you mean delayed? :) | 22:32 |
cloudnull | using the run-upgrade script for the most part. | 22:32 |
bgmccollum | ;) | 22:32 |
palendae | There's stuff in newton for that? | 22:32 |
palendae | Huh | 22:32 |
palendae | Obviously I have not been paying attention | 22:32 |
*** adrian_otto has joined #openstack-ansible | 22:32 | |
cloudnull | yup. I mean we've not removed this line quite yet https://github.com/openstack/openstack-ansible/blob/master/scripts/run-upgrade.sh#L27 | 22:33 |
bgmccollum | i have not been paying attention for a long time...trying to chip the rust off a bit | 22:33 |
cloudnull | but it is there and has been worked on | 22:33 |
palendae | Cool | 22:34 |
palendae | Trusty -> Xenial may be left as an exercise for the reader | 22:34 |
cloudnull | we're going to need to do a thing for N>O | 22:34 |
cloudnull | and I imagine that we're going to have to carry an OS check to stop folks from trying to upgrade on a trusty box | 22:35 |
palendae | Yeah | 22:35 |
palendae | "This will blow everything up" | 22:35 |
cloudnull | yea. | 22:35 |
palendae | Out of sheer curiosity | 22:36 |
bgmccollum | its more than just the host, its the containers too | 22:36 |
palendae | Is there a hard break with installing Ocata stuff? | 22:36 |
palendae | bgmccollum, Yep | 22:36 |
*** vnogin_ has quit IRC | 22:36 | |
cloudnull | at present no. | 22:36 |
cloudnull | you can run the ocata bits on trusty | 22:36 |
palendae | But no bugfixes for you | 22:36 |
cloudnull | however that's likeley to change as the releaes progresses. | 22:36 |
palendae | Right | 22:37 |
cloudnull | as soon as these files are removed it'll be a clean break https://github.com/openstack/openstack-ansible-os_nova/blob/master/vars/ubuntu-14.04.yml | 22:37 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Auto-enable heat cinder backup functionality https://review.openstack.org/410985 | 22:37 |
palendae | I mostly meant for the services themselves | 22:38 |
palendae | Though that may be hard to know without trying | 22:38 |
cloudnull | but as of right now things work on trusty | 22:38 |
cloudnull | stevelle: you around ? | 22:38 |
cloudnull | when you get a chance i'd love your insight on https://review.openstack.org/#/c/410821 seems like a sensible change however I figured I'd ask you before +w | 22:39 |
stevelle | cloudnull: yess | 22:39 |
stevelle | cloudnull: I threw a quick comment to acknowledge it, working on dinking with the change now | 22:39 |
stevelle | will give a vote this afternoon | 22:39 |
cloudnull | cool . thanks! | 22:40 |
*** phalmos has quit IRC | 22:42 | |
openstackgerrit | Merged openstack/openstack-ansible: Process and mount default bind mounts first https://review.openstack.org/409768 | 22:42 |
*** gouthamr has quit IRC | 22:45 | |
*** v1k0d3n has joined #openstack-ansible | 22:45 | |
*** marst has quit IRC | 22:45 | |
*** jmckind_ has quit IRC | 22:52 | |
*** vnogin has joined #openstack-ansible | 22:54 | |
*** hw_wutianwei has quit IRC | 22:55 | |
*** michaelgugino has quit IRC | 22:55 | |
*** gouthamr has joined #openstack-ansible | 22:57 | |
*** ngupta has quit IRC | 22:57 | |
*** ngupta has joined #openstack-ansible | 22:58 | |
*** sdake has joined #openstack-ansible | 23:01 | |
*** ngupta has quit IRC | 23:02 | |
*** jheroux has quit IRC | 23:02 | |
*** thorst_ has quit IRC | 23:04 | |
*** sdake has quit IRC | 23:08 | |
*** cathrichardson is now known as cathrichardson_a | 23:11 | |
*** cathrichardson_a is now known as cathrichardson_z | 23:12 | |
*** ngupta has joined #openstack-ansible | 23:12 | |
*** thorst_ has joined #openstack-ansible | 23:15 | |
*** sdake has joined #openstack-ansible | 23:15 | |
*** sdake has quit IRC | 23:16 | |
*** vnogin has quit IRC | 23:21 | |
*** kstev has quit IRC | 23:21 | |
*** asettle has joined #openstack-ansible | 23:22 | |
*** ianychoi has joined #openstack-ansible | 23:25 | |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible: [TEST] Update Ansible to v2.2.1.0-0.2.rc2 https://review.openstack.org/399875 | 23:25 |
*** asettle has quit IRC | 23:27 | |
*** sdake has joined #openstack-ansible | 23:28 | |
*** kstev has joined #openstack-ansible | 23:29 | |
*** karimb has quit IRC | 23:30 | |
*** TxGirlGeek has quit IRC | 23:31 | |
*** kstev has quit IRC | 23:31 | |
*** sdake_ has joined #openstack-ansible | 23:36 | |
*** thorst_ has quit IRC | 23:36 | |
*** sdake has quit IRC | 23:37 | |
*** chris_hultin is now known as chris_hultin|AWA | 23:37 | |
*** klamath has quit IRC | 23:46 | |
*** messy has quit IRC | 23:46 | |
*** dxiri has joined #openstack-ansible | 23:52 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!