Wednesday, 2016-12-14

*** galstrom_zzz is now known as galstrom00:00
*** dxiri has quit IRC00:01
*** vnogin has quit IRC00:03
*** vnogin has joined #openstack-ansible00:05
*** chris_hultin is now known as chris_hultin|AWA00:06
bgmccollumwhat would cause two service entries for swift to get created? one has all the endpoints correctly created, the other is just the service entry ... mitaka / 13.3.900:08
bgmccollumand i think horizon is picking the latter out of the catalog, which is...uh...bad00:09
*** vnogin has quit IRC00:10
*** asettle has joined #openstack-ansible00:10
*** Jack_Iv has joined #openstack-ansible00:13
*** asettle has quit IRC00:14
*** galstrom is now known as galstrom_zzz00:16
*** Jack_Iv has quit IRC00:18
*** whiteveil has joined #openstack-ansible00:19
*** joseg has joined #openstack-ansible00:24
*** joseg has left #openstack-ansible00:24
*** dxiri_ has quit IRC00:25
*** michaelgugino has quit IRC00:26
*** vnogin has joined #openstack-ansible00:27
*** omiday has quit IRC00:29
*** fguillot has joined #openstack-ansible00:31
*** Mudpuppy_ has joined #openstack-ansible00:37
*** Mudpuppy has quit IRC00:40
*** sdake has quit IRC00:45
*** hw_wutianwei has joined #openstack-ansible00:48
*** sacharya has joined #openstack-ansible00:58
*** sacharya has quit IRC01:03
*** fguillot has quit IRC01:04
*** asettle has joined #openstack-ansible01:13
*** asettle has quit IRC01:18
*** markvoelker has quit IRC01:29
*** Mudpuppy_ has quit IRC01:31
*** Mudpuppy has joined #openstack-ansible01:31
*** tnewhouse has quit IRC01:46
*** rgogunskiy has joined #openstack-ansible01:51
*** tnewhouse has joined #openstack-ansible01:56
*** tnewhouse has quit IRC02:01
cloudnullbgmccollum: Ive seen that kinda thing when the region name was changed or the endpoint was disabled.02:02
*** PramodJ has quit IRC02:03
*** pramodrj07 has quit IRC02:03
*** PramodJayathirth has quit IRC02:03
*** Jeffrey4l has quit IRC02:05
*** Jeffrey4l has joined #openstack-ansible02:15
*** hfu has joined #openstack-ansible02:19
whiteveilhey guys! Looking to get an opinion. This isn’t necessarily related to the openstack role, but I did use the role for my base linux ami that im building. So Im currently continuing the hardening of my base ami that has docker installed using ansible, and one of the things I need to do is implement tls auth for the docker daemon02:19
whiteveilonly problem is, if I did this using ansible for a base ami, all instances created with that base ami would have the same cert and key02:19
whiteveilI think at least02:19
whiteveilwhich obv isn’t ideal02:19
whiteveiljust wondering what your guys’ opinions are on approaching the issue i guess02:20
*** hfu has quit IRC02:25
*** vnogin has quit IRC02:36
*** hfu has joined #openstack-ansible02:40
*** thorst_ has joined #openstack-ansible02:40
*** rgogunskiy has quit IRC02:46
*** thorst_ has quit IRC02:47
*** thorst_ has joined #openstack-ansible02:47
*** thorst_ has quit IRC02:52
*** sdake has joined #openstack-ansible02:55
*** sacharya has joined #openstack-ansible02:59
*** sacharya has quit IRC03:04
*** phalmos_ has quit IRC03:14
*** phalmos has joined #openstack-ansible03:15
*** sacharya has joined #openstack-ansible03:25
*** markvoelker has joined #openstack-ansible03:30
*** markvoelker has quit IRC03:35
*** sdake has quit IRC03:44
*** thorst_ has joined #openstack-ansible03:54
openstackgerritKyle L. Henderson proposed openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully  https://review.openstack.org/41052903:56
*** thorst_ has quit IRC03:58
*** thorst_ has joined #openstack-ansible03:59
*** sdake has joined #openstack-ansible04:01
*** Mudpuppy has quit IRC04:05
*** Mudpuppy has joined #openstack-ansible04:05
*** thorst_ has quit IRC04:07
*** Mudpuppy has quit IRC04:10
*** sdake_ has joined #openstack-ansible04:10
*** sdake has quit IRC04:13
*** Jack_Iv has joined #openstack-ansible04:15
*** Jack_Iv has quit IRC04:19
openstackgerritDarren Chan proposed openstack/openstack-ansible: [ops-guide] Adding new content to guide  https://review.openstack.org/40985404:23
*** pwnall1337 is now known as zz_pwnall133704:27
*** whiteveil has quit IRC04:28
*** adrian_otto has joined #openstack-ansible04:29
*** allanice001 has quit IRC04:33
*** thorst_ has joined #openstack-ansible04:38
*** sdake_ is now known as sdake04:40
*** adrian_otto has quit IRC04:42
*** adrian_otto has joined #openstack-ansible04:59
*** sdake has quit IRC05:00
*** thorst_ has quit IRC05:04
*** poopcat has quit IRC05:04
*** whiteveil has joined #openstack-ansible05:07
*** adrian_otto has quit IRC05:10
*** asettle has joined #openstack-ansible05:14
*** whiteveil has quit IRC05:21
*** asettle has quit IRC05:21
*** markvoelker has joined #openstack-ansible05:31
*** thorst_ has joined #openstack-ansible05:34
*** markvoelker has quit IRC05:37
*** thorst_ has quit IRC05:41
*** h5t4 has joined #openstack-ansible05:45
*** javeriak has joined #openstack-ansible05:47
*** allanice001 has joined #openstack-ansible05:53
*** tnewhouse has joined #openstack-ansible05:56
*** tnewhouse has quit IRC05:57
*** tnewhouse has joined #openstack-ansible05:57
*** Jack_Iv has joined #openstack-ansible06:00
*** hybridpolio has quit IRC06:03
*** Jack_Iv has quit IRC06:05
*** h5t4 has quit IRC06:06
*** Jack_Iv has joined #openstack-ansible06:08
*** pmannidi_ has quit IRC06:10
*** pmannidi has joined #openstack-ansible06:11
*** thorst_ has joined #openstack-ansible06:28
*** McMurlock1 has joined #openstack-ansible06:31
*** Jack_Iv has quit IRC06:32
*** thorst_ has quit IRC06:36
*** Jack_Iv has joined #openstack-ansible06:37
*** Jack_Iv has quit IRC06:38
*** Jack_Iv has joined #openstack-ansible06:40
*** tnewhous_ has joined #openstack-ansible06:44
*** tnewhouse has quit IRC06:45
*** tnewhous_ has quit IRC06:48
*** tnewhouse has joined #openstack-ansible06:48
*** javeriak has quit IRC06:55
*** Oku_OS-away is now known as Oku_OS06:57
*** javeriak_ has joined #openstack-ansible06:58
*** markvoelker has joined #openstack-ansible07:00
*** h5t4 has joined #openstack-ansible07:04
*** fxpester has joined #openstack-ansible07:06
*** markvoelker has quit IRC07:06
*** McMurlock1 has quit IRC07:08
*** McMurlock1 has joined #openstack-ansible07:08
*** maeker has quit IRC07:09
*** tnewhous_ has joined #openstack-ansible07:10
*** rmelero has quit IRC07:12
*** rmelero has joined #openstack-ansible07:12
*** McMurlock1 has quit IRC07:13
*** tnewhouse has quit IRC07:14
*** tnewhous_ has quit IRC07:15
*** allanice001 has quit IRC07:16
*** tnewhouse has joined #openstack-ansible07:16
*** tnewhouse has quit IRC07:16
*** rmelero has quit IRC07:17
*** h5t4 has quit IRC07:17
*** asettle has joined #openstack-ansible07:18
*** bapalm has quit IRC07:18
openstackgerritOmer Anson proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment  https://review.openstack.org/39152407:18
*** tnewhouse has joined #openstack-ansible07:20
*** tnewhouse has quit IRC07:23
*** tnewhouse has joined #openstack-ansible07:23
*** thorst_ has joined #openstack-ansible07:23
*** asettle has quit IRC07:25
*** sacharya has quit IRC07:26
*** tnewhouse has quit IRC07:28
*** javeriak_ has quit IRC07:31
*** thorst_ has quit IRC07:31
*** javeriak has joined #openstack-ansible07:32
*** allanice001 has joined #openstack-ansible07:33
*** drifterza has joined #openstack-ansible07:35
*** bapalm has joined #openstack-ansible07:38
*** tnewhouse has joined #openstack-ansible07:45
*** maeker has joined #openstack-ansible07:50
*** tnewhouse has quit IRC07:54
*** maeker has quit IRC07:54
*** tnewhouse has joined #openstack-ansible07:55
*** tnewhouse has quit IRC07:59
*** pcaruana has joined #openstack-ansible07:59
*** sacharya has joined #openstack-ansible08:00
*** sacharya has quit IRC08:05
*** Jack_Iv_ has joined #openstack-ansible08:07
*** tnewhouse has joined #openstack-ansible08:14
*** tnewhouse has quit IRC08:18
*** thorst_ has joined #openstack-ansible08:19
*** Jack_Iv_ has quit IRC08:20
openstackgerritOmer Anson proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment  https://review.openstack.org/39152408:20
*** karimb has joined #openstack-ansible08:21
*** tnewhouse has joined #openstack-ansible08:23
*** Jack_Iv_ has joined #openstack-ansible08:27
*** Jack_Iv_ has quit IRC08:27
*** thorst_ has quit IRC08:27
*** Jack_Iv_ has joined #openstack-ansible08:27
*** tnewhouse has quit IRC08:28
*** Jack_Iv_ has quit IRC08:32
*** vnogin has joined #openstack-ansible08:41
*** vnogin has quit IRC08:46
*** openstackgerrit has quit IRC08:48
*** vnogin has joined #openstack-ansible09:00
*** yolanda has quit IRC09:01
*** markvoelker has joined #openstack-ansible09:02
*** vnogin has quit IRC09:04
*** ianychoi has joined #openstack-ansible09:05
*** yolanda has joined #openstack-ansible09:05
*** markvoelker has quit IRC09:07
*** javeriak has quit IRC09:08
*** tnewhouse has joined #openstack-ansible09:08
*** tnewhouse has quit IRC09:13
*** tnewhouse has joined #openstack-ansible09:13
*** Jack_Iv_ has joined #openstack-ansible09:16
*** thorst_ has joined #openstack-ansible09:18
*** tnewhouse has quit IRC09:22
*** thorst_ has quit IRC09:24
*** Jack_Iv_ has quit IRC09:25
*** Jack_Iv has quit IRC09:26
*** Jack_Iv has joined #openstack-ansible09:28
*** furlongm_ has joined #openstack-ansible09:29
*** furlongm has quit IRC09:30
*** May-meimei has quit IRC09:31
*** uthng_ has joined #openstack-ansible09:32
uthng_hello all09:32
uthng_anyone here can help me ?09:32
uthng_please09:32
*** tnewhouse has joined #openstack-ansible09:32
*** tnewhouse has quit IRC09:37
odyssey4meuthng_ that depends on the question - best is to ask the question, then if someone can help, they will09:38
odyssey4mealextricity25 yes, the repo data is in a bind mount to the host - has been since forever09:38
uthng_odyssey4me: same question yesterday about errors on glance and cinder after upgrade from Mitaka to Newton on AIO.09:41
*** Jack_Iv has quit IRC09:41
odyssey4meuthng_ when you did the upgrade, did you use the run_upgrade script?09:42
odyssey4mehow did you perform the upgrade?09:42
*** Jack_Iv has joined #openstack-ansible09:42
uthng_After the upgrade os-keystone-install, rabbitmq lost passwords of glance and cinder with the error in log : AMQPLAIN login refused: user 'keystone' - invalid credentials AMQPLAIN login refused: user 'cinder' - invalid credentials09:42
odyssey4methe question stands09:43
*** asettle has joined #openstack-ansible09:44
uthng_after that, I tried to change password using rabbitmqctl with those in user_secrets.yml, errors went. But after, in keystone log : authorization failed and service unavailable09:44
uthng_odyssey4me: I did mannually09:44
*** karimb has quit IRC09:45
uthng_following these steps http://docs.openstack.org/developer/openstack-ansible/newton/upgrade-guide/manual-upgrade.html09:45
odyssey4meuthng_ it sounds to me like something went wrong with the secrets09:48
odyssey4mehave you tried setting the passwords for all service accounts to the ones in your secrets file, then restarting them?09:48
odyssey4meand have you enabled debug logging to determine which accounts are failing to auth?09:49
odyssey4mealso, have you verified in keystone that the service loaded right with all its credentials?09:49
oansonHi. I'd appreciate some help with the tests in the dragonflow patch: https://review.openstack.org/#/c/391524/09:53
uthng_odyssey4me: the user_secrets.yml is the same from Mitaka.09:53
oansonThe general functional tests fail. They run the dragonlfow tests, even though there's a condition that neutron_driver_type == 'ml2.dragonflow'09:54
uthng_while upgrading, I could only upgrade keystone, glance and cinder09:54
*** furlongm has joined #openstack-ansible09:54
oansonThe dragonflow tests are skipped in calico though...09:54
*** furlongm_ has quit IRC09:55
Adri2000is there something in OSA to deploy our own CA onto every hosts?09:55
uthng_but cinder failed while it tried to cinder_backends.yml09:55
uthng_because of service unavailable09:56
uthng_other services not upgraded yet and seem working well09:56
odyssey4meAdri2000 no09:57
uthng_how can I verified in keystone the service loaded right all its credentials ?09:57
Adri2000odyssey4me: has it been considered already? did not find any bug report or ml thread09:58
*** openstackgerrit has joined #openstack-ansible09:58
odyssey4meuthng_ you can't - the only way is to use the openstack cli to set them to the values you have09:58
Adri2000odyssey4me: my use case it configuring keystone to talk with an LDAP directory over ldaps with custom CA09:58
odyssey4meuthng_ I guess you could use their creds and attempt to auth with them09:58
odyssey4meAdri2000 we facilitate the ability to set LDAP as a back-end, the implementation of the certs needs to be done by you09:59
*** askb has quit IRC09:59
oansonodyssey4me, hi, have you seen my question above?10:00
oanson(If you are free, that is)10:00
*** electrofelix has joined #openstack-ansible10:02
*** hfu has quit IRC10:02
Adri2000odyssey4me: do you think it'd be a good idea to add support for this in the openstack_hosts role?10:03
odyssey4meAdri2000 support for what, specifically?10:03
*** karimb has joined #openstack-ansible10:04
*** tnewhouse has joined #openstack-ansible10:05
Adri2000odyssey4me: the user could specify its own CA certificate in a variable, the role would deploy (copy) that CA certificate onto all the hosts in /usr/local/share/ca-certificates/ (I think), and run update-ca-certificate so that CA gets trusted system-wide10:06
odyssey4meoanson looking10:06
Adri2000it'd help keystone connecting to ldaps with custom CA, and probably other similar use cases10:07
odyssey4meAdri2000 sounds reasonable - I guess in the lxc_hosts role the container cache prep could also have that done to ensure that all containers trust the same CA's as the host10:07
uthng_odyssey4me: not really, if it was the case, i did not have error with invalid cred in rabbitmq ?10:08
*** tnewhouse has quit IRC10:09
Adri2000ah yes, it'd be needed on all hosts either bare metal or lxc containers so yes10:10
odyssey4meuthng_ check each cred one by one to validate that they're all right - if any don't work, reset them to the value expected10:10
odyssey4meuthng but Keystone Newton also has a credential store - so first thing is to validate that keystone works at all10:10
*** drifterza has quit IRC10:10
*** brad[] has quit IRC10:11
uthng_So you advice me to check each cred of each service in keystone, thats right ? How can I check it easily with commandline ?10:12
odyssey4meuthng I'm afraid I don't have the time to teach you how to do that. You should do your own research and learn how to do this - there is plenty of literature around.10:13
odyssey4memaybe someone else is available to assist you, but I would advise that you do some documentation exploring - openstack is a complex system and if you're going to support it then you should learn how to explore and teach yourself10:15
odyssey4mealso, if I remember correctly this is an AIO, right? if so then why does it matter that it's broken - destroy and rebuild it - the AIO is meant for development and testing and is supposed to be something that can be thrown away10:16
*** Jack_Iv has quit IRC10:19
*** dfflanders has quit IRC10:19
*** Jack_Iv has joined #openstack-ansible10:19
odyssey4meoanson ok, that's a very weird one - the conditional include is taking effect for the entire playbook (and role), but is not being applied to only the last few tasks10:19
*** thorst_ has joined #openstack-ansible10:21
*** Jack_Iv_ has joined #openstack-ansible10:21
*** vnogin has joined #openstack-ansible10:22
*** Jack_Iv_ has quit IRC10:24
*** Jack_Iv_ has joined #openstack-ansible10:25
*** vnogin has quit IRC10:26
uthng_odyssey4me:  ok thanks.10:28
*** Jack_Iv_ has quit IRC10:28
*** sdake has joined #openstack-ansible10:29
*** Jack_Iv_ has joined #openstack-ansible10:29
*** thorst_ has quit IRC10:29
Adri2000reported bug #164984410:33
openstackbug 1649844 in openstack-ansible "Add ability to deploy custom CA certificates" [Undecided,New] https://launchpad.net/bugs/164984410:33
*** Jack_Iv_ has quit IRC10:33
*** vnogin has joined #openstack-ansible10:36
*** stuartgr has joined #openstack-ansible10:44
openstackgerritAdrien Cunin proposed openstack/openstack-ansible-os_magnum: Use openstack_service_*uri_proto vars by default  https://review.openstack.org/41068110:45
*** DanyC has joined #openstack-ansible10:49
*** Jack_Iv has quit IRC10:49
*** DanyC has left #openstack-ansible10:50
*** Jack_Iv has joined #openstack-ansible10:53
oansonodyssey4me, is it possible I accidentally overridden the value during the tests?10:55
*** markvoelker has joined #openstack-ansible11:02
andymccroanson: that is a bit strange, i'll take a look, although plus point - the dragonflow tests are passing now ;P11:07
*** markvoelker has quit IRC11:07
oansonandymccr, yep. At least that :)11:10
*** woodard has quit IRC11:12
*** woodard has joined #openstack-ansible11:12
openstackgerritOmer Anson proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment  https://review.openstack.org/39152411:13
*** rmelero has joined #openstack-ansible11:14
*** thorst_ has joined #openstack-ansible11:16
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release  https://review.openstack.org/41065411:18
*** rmelero has quit IRC11:18
*** Jack_Iv_ has joined #openstack-ansible11:19
*** Jack_Iv_ has quit IRC11:20
*** Jack_Iv_ has joined #openstack-ansible11:21
*** Jack_Iv_ has quit IRC11:22
*** thorst_ has quit IRC11:23
*** brad[] has joined #openstack-ansible11:24
*** Jack_Iv_ has joined #openstack-ansible11:28
*** Jack_Iv_ has quit IRC11:33
*** karimb has quit IRC11:35
*** karimb has joined #openstack-ansible11:35
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release  https://review.openstack.org/41065411:37
*** furlongm_ has joined #openstack-ansible11:41
*** furlongm has quit IRC11:41
evrardjpI'd be enclined to backport ansible 2.2 into stable/newton :( 2.1 really sucks11:46
andymccroanson: im running a build hopefully will figure out what the deal is with those tests running on lxb/ovs branches11:49
oansonThanks. I have also updated with odyssey4me 's comments, Maybe changing tasks->post_tasks will solve the issue11:49
andymccroanson: if it does it'd be a bit of a "what the?" moment, but we can hope - im running that patch anyway11:52
oansonI'm hoping that there's a setting of facts between when tasks run and post_tasks run. I admit - hope that's inspired by ignorance.11:53
*** sacharya has joined #openstack-ansible12:02
*** hfu has joined #openstack-ansible12:04
*** maeker has joined #openstack-ansible12:06
*** sacharya has quit IRC12:07
*** maeker has quit IRC12:10
*** thorst_ has joined #openstack-ansible12:10
*** thorst_ has quit IRC12:18
*** deadnull has joined #openstack-ansible12:20
*** smatzek has joined #openstack-ansible12:21
*** karimb has quit IRC12:27
*** sdake has quit IRC12:31
*** jimbaker has quit IRC12:34
*** jimbaker has joined #openstack-ansible12:38
*** jamielennox is now known as jamielennox|away12:43
*** jimbaker has quit IRC12:44
*** jimbaker has joined #openstack-ansible12:48
*** jamielennox|away is now known as jamielennox12:50
*** hw_wutianwei has quit IRC12:51
*** johnmilton has joined #openstack-ansible12:52
*** sdake_ has joined #openstack-ansible12:58
*** sdake_ is now known as sdake13:02
*** jheroux has joined #openstack-ansible13:03
*** markvoelker has joined #openstack-ansible13:03
*** thorst_ has joined #openstack-ansible13:05
*** hfu has quit IRC13:05
*** jimbaker has quit IRC13:06
mhaydenmorning!13:06
*** markvoelker has quit IRC13:08
*** jimbaker has joined #openstack-ansible13:10
*** hfu has joined #openstack-ansible13:10
*** thorst_ has quit IRC13:13
Adri2000odyssey4me: I don't understand your comment at https://review.openstack.org/#/c/410681/, the proposed change matches what most (all?) other roles do13:17
Adri2000see 'grep proto defaults/main.yml' in nova or glance roles for example13:17
*** sdake_ has joined #openstack-ansible13:20
Adri2000or, I think I understand what you mean (do not use a variable that's actually defined outside the role), but then do you confirm that we should fix what all the roles are currently doing?13:20
*** sdake has quit IRC13:23
*** markvoelker has joined #openstack-ansible13:24
odyssey4meAdri2000 oh dear, yes then the other roles should be fixed - but first the group vars should be set in the integrated role13:24
odyssey4me*repo13:24
*** allanice001 has quit IRC13:24
alextricity25Hello, has anyone had any issues with the "Get pacakge from git" taks in the os_nova role? It runs "git ls-remote git://<internal_lb_vip>/spice-html5" but returns "fatal: unable to connect to <ip> errno=No route to host"13:25
odyssey4meideally the roles should not be using vars outside of their own namespace - group_vars should take on the task of connecting different roles together13:25
alextricity25Strange thing is that curling <internal_lb_vip>:8181 returns just fine..13:25
odyssey4mealextricity25 sounds to me like you have a network routing issue13:25
odyssey4mehmm, that's weird then13:25
alextricity25maybe it has something to do with the git protocol being used there13:27
*** Mudpuppy has joined #openstack-ansible13:27
alextricity25Maybe something is dropping traffic on that port?13:27
Adri2000odyssey4me: understood13:27
*** Mudpuppy has quit IRC13:27
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Don't delete container_cidr key when overriding  https://review.openstack.org/41039713:27
*** brad[] has quit IRC13:28
mhaydenodyssey4me: fixed up the reno on 410397 if you'd like to restore your deuce13:28
*** sdake_ is now known as sdake13:29
*** Mudpuppy has joined #openstack-ansible13:29
*** Mudpuppy has quit IRC13:30
*** hw_wutianwei has joined #openstack-ansible13:30
*** woodard has quit IRC13:30
*** woodard has joined #openstack-ansible13:31
*** klamath has joined #openstack-ansible13:33
*** vnogin has quit IRC13:33
*** klamath has quit IRC13:33
*** klamath has joined #openstack-ansible13:34
openstackgerritMerged openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully  https://review.openstack.org/41052913:35
mhaydenif anyone has a spare moment to review https://review.openstack.org/406329 , i'd be much obliged -- a little train of patches are lined up behind that one13:35
*** vnogin has joined #openstack-ansible13:36
mhaydenchugga chugga choo choo13:36
*** Mudpuppy has joined #openstack-ansible13:38
*** Mudpuppy has quit IRC13:38
*** uthng_ has quit IRC13:39
*** Jack_Iv_ has joined #openstack-ansible13:40
*** hfu has quit IRC13:40
*** Mudpuppy has joined #openstack-ansible13:40
*** Mudpuppy has quit IRC13:41
*** Mudpuppy has joined #openstack-ansible13:43
*** Mudpuppy has quit IRC13:44
*** Mudpuppy has joined #openstack-ansible13:44
openstackgerritKyle L. Henderson proposed openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully  https://review.openstack.org/41076213:45
*** Mudpuppy has quit IRC13:45
*** Mudpuppy has joined #openstack-ansible13:45
openstackgerritMerged openstack/openstack-ansible-os_ironic: Fixes issues with special characters in password.  https://review.openstack.org/40893513:46
*** Mudpuppy has quit IRC13:46
*** Mudpuppy has joined #openstack-ansible13:47
*** Mudpuppy has quit IRC13:47
*** Jack_Iv__ has joined #openstack-ansible13:51
*** Jack_Iv__ has quit IRC13:51
*** chhavi has joined #openstack-ansible13:52
*** Jack_Iv__ has joined #openstack-ansible13:52
*** Jack_Iv_ has quit IRC13:52
*** brad[] has joined #openstack-ansible13:52
*** karimb has joined #openstack-ansible13:57
*** Mudpuppy has joined #openstack-ansible14:00
*** Mudpuppy has quit IRC14:00
*** Mudpuppy has joined #openstack-ansible14:01
*** Mudpuppy has quit IRC14:02
*** Mudpuppy has joined #openstack-ansible14:02
Llenvarhello.  I was wondering if anyone had time to look over my openstack_user_config.yml file to ensure it looks ok.  I'll be starting my second attempt at installing Newton so wanted to get a thumbs up first.  thanks in advance.  http://paste.openstack.org/show/591966/14:02
*** cathrichardson has joined #openstack-ansible14:03
*** Mudpuppy has quit IRC14:03
*** sacharya has joined #openstack-ansible14:03
*** Mudpuppy has joined #openstack-ansible14:05
*** Mudpuppy has quit IRC14:05
*** Mudpuppy has joined #openstack-ansible14:06
*** cathrich_ has joined #openstack-ansible14:06
*** Mudpuppy has quit IRC14:06
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release  https://review.openstack.org/41065414:07
*** sacharya has quit IRC14:08
*** cathrichardson has quit IRC14:08
*** cathrich_ is now known as cathrichardson14:09
*** hw_wutianwei has quit IRC14:11
*** klamath has quit IRC14:11
*** hw_wutianwei has joined #openstack-ansible14:12
*** Mudpuppy has joined #openstack-ansible14:14
*** Mudpuppy has quit IRC14:14
openstackgerritDoug Hellmann proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release  https://review.openstack.org/41065414:15
dmsimardmgariepy: did you catch my note about centos 7.3 and kvm ?14:16
*** whiteveil has joined #openstack-ansible14:16
*** hw_wutianwei1 has joined #openstack-ansible14:16
*** hw_wutianwei has quit IRC14:16
*** hw_wutianwei1 is now known as hw_wutianwei14:16
*** bpetit has joined #openstack-ansible14:16
*** klamath has joined #openstack-ansible14:17
*** whiteveil has quit IRC14:19
*** mgariepy has quit IRC14:20
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-2 release  https://review.openstack.org/41065414:20
*** kstev has joined #openstack-ansible14:21
*** whiteveil has joined #openstack-ansible14:21
*** whiteveil has quit IRC14:22
andymccrTIL about doing refs in rst, and how bad they can be - also nb the OSA gate is broken until the liberty rel notes bit is fixed - which should be fixed in the above patch!14:23
*** thorst_ has joined #openstack-ansible14:26
*** Mudpuppy has joined #openstack-ansible14:27
*** Mudpuppy has quit IRC14:27
*** mgariepy has joined #openstack-ansible14:28
*** Mudpuppy has joined #openstack-ansible14:29
*** Mudpuppy has quit IRC14:30
*** fguillot has joined #openstack-ansible14:30
*** Mudpuppy has joined #openstack-ansible14:31
mgariepygood morning everyone14:31
*** Mudpuppy has quit IRC14:31
mgariepydmsimard, no I didn't14:31
*** asettle has quit IRC14:31
*** Mudpuppy has joined #openstack-ansible14:32
*** asettle has joined #openstack-ansible14:32
* mgariepy reading logs..14:32
*** Jack_Iv__ has quit IRC14:32
*** Mudpuppy has quit IRC14:32
*** Mudpuppy has joined #openstack-ansible14:34
*** Mudpuppy has quit IRC14:34
dmsimardmgariepy: this thread: http://lists.openstack.org/pipermail/openstack-dev/2016-December/108884.html14:34
dmsimardtl;dr There's a bunch of issues related to the release of 7.3. Older versions of KVM might not work with 7.3 and newer version (that still hasn't been synchronized to repos) has a regression14:35
*** smatzek has quit IRC14:35
*** Mudpuppy has joined #openstack-ansible14:36
*** Mudpuppy has quit IRC14:36
*** Mudpuppy has joined #openstack-ansible14:37
mgariepydmsimard, nova gate job didn't pass for long with CentOS, nova gate job are failing..14:37
*** Mudpuppy has quit IRC14:37
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: Add CentOS support for os_ceilometer role  https://review.openstack.org/40544414:37
*** phalmos has quit IRC14:38
*** fguillot has quit IRC14:38
*** Mudpuppy has joined #openstack-ansible14:38
mgariepybut I'll  take another look at this tomorrow, I'll be off today.14:38
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_nova: nova-gate test centos  https://review.openstack.org/40881514:38
*** Mudpuppy has quit IRC14:38
dmsimardmgariepy: oh? started failing after we got it working? bummer14:39
*** Mudpuppy has joined #openstack-ansible14:39
dmsimardmgariepy: ping me if you can't figure it out I'll try and look14:39
*** Mudpuppy has quit IRC14:40
*** fguillot has joined #openstack-ansible14:41
mgariepyit's very weird, vm get stuck at networking (again), i've been able to start 2 vms after restart to several services but the day after it wasn't working anymore.14:41
mgariepyanyway, i'll start a fresh install tomorrow and let you know if I need help.\14:41
mgariepyThanks again.14:41
*** marst has joined #openstack-ansible14:41
*** sdake_ has joined #openstack-ansible14:42
Adri2000chhavi: hello, I've got questions about this commit https://git.openstack.org/cgit/openstack/openstack-ansible-os_cinder/commit/?id=27a895cbd5602a35e797adbb619520553e0e7eb8 from June... I think it has a bad impact when you have multiple cinder-volume hosts with a different volume backend/type for each. with your patch, only the volume type associated with the first cinder-volume will be created14:43
Adri2000...14:43
*** gouthamr has joined #openstack-ansible14:43
*** sdake has quit IRC14:45
*** thorst_ has quit IRC14:46
*** whiteveil has joined #openstack-ansible14:46
evrardjpfair point Adri200014:47
*** sdake_ is now known as sdkae14:47
*** sdkae is now known as sdake14:48
evrardjpwe should probably have a dynamic group based on volume backend/type14:49
evrardjpor set fact14:49
evrardjpAdri2000: you should file a bug, we'll analyse it next tuesday14:50
evrardjpthis is probably worth backporting IMO14:50
*** whiteveil has quit IRC14:51
*** thorst_ has joined #openstack-ansible14:52
Adri2000evrardjp: I was afraid of not being clear, happy that you understood what I meant! :) filed bug #164991414:55
openstackbug 1649914 in openstack-ansible "os_cinder may create only the first volume type" [Undecided,New] https://launchpad.net/bugs/164991414:55
*** whiteveil has joined #openstack-ansible14:56
logan-nice catch Adri200014:57
*** vnogin has quit IRC14:58
evrardjpI think group_by and add_host because it seems so much more fancy than set_facts!14:59
evrardjpfancier*14:59
*** vnogin has joined #openstack-ansible15:00
*** smatzek has joined #openstack-ansible15:02
*** chhavi has quit IRC15:07
*** vnogin has quit IRC15:11
openstackgerritMerged openstack/openstack-ansible-os_ceilometer: Remove dependency on oslo.vmware  https://review.openstack.org/41023815:11
*** whiteveil has quit IRC15:13
*** gouthamr has quit IRC15:13
*** gouthamr has joined #openstack-ansible15:15
*** vnogin has joined #openstack-ansible15:15
openstackgerritMerged openstack/openstack-ansible-repo_server: Wait for lsyncd rsync to finish successfully  https://review.openstack.org/41076215:19
*** TxGirlGeek has joined #openstack-ansible15:25
*** chris_hultin|AWA is now known as chris_hultin15:29
*** phalmos has joined #openstack-ansible15:29
*** fedruantine_ has quit IRC15:30
*** tnewhouse has joined #openstack-ansible15:35
*** tnewhouse has quit IRC15:37
*** whiteveil has joined #openstack-ansible15:37
*** Mudpuppy has joined #openstack-ansible15:37
*** tnewhouse has joined #openstack-ansible15:37
*** Mudpuppy has quit IRC15:37
*** adrian_otto has joined #openstack-ansible15:39
*** Mudpuppy has joined #openstack-ansible15:42
*** Mudpuppy has quit IRC15:42
*** Mudpuppy has joined #openstack-ansible15:43
openstackgerritAdrien Cunin proposed openstack/openstack-ansible: Fixed when logic for gnocchi bind mounts  https://review.openstack.org/41082115:43
*** thorst_ has quit IRC15:44
andymccrhttps://review.openstack.org/#/c/410654/ evrardjp or odyssey4me that one is good to go now, and will unblock the osa master gate15:45
odyssey4megogogo15:46
odyssey4meandymccr having fun with releasenotes yet?15:46
andymccrodyssey4me: haha yeah there were 2 issues...15:46
andymccrmultiple refs using the same name (here) - with diff links15:46
andymccrand then the EOL happened after i fixed that15:46
andymccrso the liberty branch failed15:47
andymccralthough its being fixed upstream15:47
andymccrwill have to put a subsequent patch in to fix it for liberty though - right now it just removes it15:47
cloudnullmornings15:47
odyssey4meandymccr I thought I saw a failure in Newton relating to releasenotes oto15:47
*** tnewhouse has quit IRC15:47
odyssey4me*too15:48
andymccrodyssey4me: ahh15:48
andymccrits probably the same15:48
andymccrsince liberty branch has gone15:48
andymccri'll fix that up and get it backported15:48
odyssey4mebye bye liberty15:48
andymccrkinda glad :P15:48
odyssey4medid we ever do the final SHA bumps to the EOL SHA's for liberty?15:48
odyssey4meI don't recall seeing one15:48
*** tnewhouse has joined #openstack-ansible15:48
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment  https://review.openstack.org/39152415:50
*** karimb has quit IRC15:50
cloudnull^ very cool15:51
cloudnullnice work on that evrardjp andymccr :)15:51
*** karimb has joined #openstack-ansible15:52
*** tnewhouse has quit IRC15:53
andymccrodyssey4me: nope - we released 12.2.8 and then the email about EOL'ing it went in. i think the only change would be a docs change that asettle pushed, everything else is the same15:53
*** ngupta has joined #openstack-ansible15:53
andymccrcloudnull: it was largely oanson - also that is a very random bug... it skips the first task but then runs the rest?15:54
asettleandymccr: I don't think that would break it15:54
cloudnullwas more talking about adding dragon flow15:54
andymccrnothings broken :)15:54
odyssey4meandymccr okie dokey15:54
andymccrcloudnull: yeah :) its basically done, i think my last fix should make it go now, but there is some random ansible bug that was causing the lxb gates to fail because it wasnt skipping all the tasks in the dragonflow tests - even though it had a conditional around the neutron_plugin_type15:55
andymccrodyssey4me: i might add a final liberty release for that last fix then that just matches the SHA for liberty-eol15:57
andymccrjust for completeness15:57
odyssey4meandymccr can't now - no more branch15:58
andymccrodyssey4me: its just a sha, there's a tag15:58
odyssey4meoh, you mean add a tag at the same SHA as eol...15:58
andymccryeah15:58
odyssey4memeh, anyone's welcome to use the eol tag directly15:58
andymccrtrue15:59
odyssey4mehistorically I would hold back our EOL until all projects we use have completed their process16:00
odyssey4mesometimes they cram in a few extra patches16:00
odyssey4mebut anyone can override the SHA's or point to their own forks, so it's not exactly crucial16:00
*** gouthamr has quit IRC16:01
*** thorst_ has joined #openstack-ansible16:02
*** adrian_otto has quit IRC16:02
*** gouthamr has joined #openstack-ansible16:04
*** sacharya has joined #openstack-ansible16:04
Adri2000do I miss something, or rsyslog client configuration is missing for bare metal hosts such as nova-compute and cinder-volume ?16:05
*** gouthamr has quit IRC16:06
*** Llenvar has quit IRC16:08
*** sacharya has quit IRC16:08
*** Mudpuppy_ has joined #openstack-ansible16:14
*** rmelero has joined #openstack-ansible16:14
*** whiteveil has quit IRC16:15
*** tnewhous_ has joined #openstack-ansible16:16
*** Mudpuppy has quit IRC16:18
cloudnullAdri2000: what are you seein g?16:21
cloudnullthe syslog bits are setup for nova and swift last i recall16:21
*** weezS has joined #openstack-ansible16:22
*** whiteveil has joined #openstack-ansible16:22
*** karimb has quit IRC16:22
cloudnullassuming you're running the os-nova-install.yml playbooks the roles are included https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-nova-install.yml#L169-L17416:22
cloudnullthat's a nova example16:23
cloudnullwhich will cover the physical hosts16:23
*** karimb has joined #openstack-ansible16:26
*** Mudpuppy_ is now known as Mudpuppy16:30
Adri2000I have a deployment where there are missing, not sure why, I'll debug more later16:30
*** adrian_otto has joined #openstack-ansible16:31
*** Oku_OS is now known as Oku_OS-away16:32
*** Jack_Iv_ has joined #openstack-ansible16:33
*** javeriak has joined #openstack-ansible16:34
*** Jack_Iv_ has quit IRC16:37
andymccroanson: passes now!16:39
cloudnullwoot!16:40
cloudnullAdri2000: let me know , happy to help if there's something not working right16:40
*** deadnull has quit IRC16:41
*** karimb has quit IRC16:45
*** karimb has joined #openstack-ansible16:47
*** TxGirlGeek has quit IRC16:54
*** jmckind has joined #openstack-ansible16:57
*** chhavi has joined #openstack-ansible17:00
*** maeker has joined #openstack-ansible17:01
*** zz_pwnall1337 is now known as pwnall133717:03
*** sdake has quit IRC17:05
*** sacharya has joined #openstack-ansible17:05
*** maeker has quit IRC17:05
*** maeker has joined #openstack-ansible17:06
*** Jack_Iv_ has joined #openstack-ansible17:15
evrardjp andymccr ok reviewing17:15
evrardjpdoes someone need my urgent help right now?17:17
*** Jack_Iv_ has quit IRC17:20
openstackgerritMerged openstack/openstack-ansible: Fix role SHA's for Ocata-2 release  https://review.openstack.org/41065417:21
evrardjp^ wooot !17:21
*** karimb has quit IRC17:24
evrardjpmhayden: out of curiosity: https://review.openstack.org/#/c/407178/14/tasks/rhel7stig/file_perms.yml isn't the when item.uid >= 1000 redundant here?17:24
*** sdake has joined #openstack-ansible17:26
*** sdake has quit IRC17:30
bgmccollumasettle ArchiFleKs -- https://bugs.launchpad.net/openstack-ansible/+bug/1639080/comments/417:35
openstackLaunchpad bug 1639080 in openstack-ansible "Image uploads fail in Horizon if upload mode is set to direct if endpoint set to internal." [Low,Confirmed] - Assigned to Alexandra Settle (alexandra-settle)17:35
asettlebgmccollum: you rang?17:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632917:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715717:36
evrardjpat some point we're gonna have to define safe defaults for ppl using horizon :D17:36
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717817:36
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set user/group/modes on user init files [+Docs]  https://review.openstack.org/40873617:36
evrardjp(if that's not the case right now)17:36
asettleevrardjp: please do17:36
evrardjpahah17:36
evrardjpI should try indeed17:36
bgmccollumasettle added some additional info regarding Horizon Direct Image Upload + Glance CORS17:36
*** BjoernT has joined #openstack-ansible17:37
evrardjpthanks bgmccollum17:37
asettleI just read, thank you bgmccollum :)17:37
*** whiteveil has quit IRC17:38
*** whiteveil has joined #openstack-ansible17:38
bgmccollumwoot17:38
bgmccollumfinally can upload images via horizon17:39
*** whiteveil has quit IRC17:40
*** whiteveil has joined #openstack-ansible17:40
*** weezS has quit IRC17:42
*** javeriak has quit IRC17:46
sigmavirusbgmccollum: that's almost certainly a bug ;)17:46
*** asettle has quit IRC17:48
bgmccollumsigmavirus: which part. the missing allowed header ORIGIN, or the fact CORS isn't even setup?17:48
sigmavirusbgmccollum: the "finally can upload images via horizon" bit ;)17:48
*** thorst_ has quit IRC17:48
bgmccollumsigmavirus haha. i know, i know. im working on developing training material, and for this audience, it is very much an important feature.17:49
*** thorst_ has joined #openstack-ansible17:49
*** TxGirlGeek has joined #openstack-ansible17:50
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632917:52
*** vnogin has quit IRC17:52
*** tnewhous_ has quit IRC17:53
*** ngupta has quit IRC17:54
*** ngupta has joined #openstack-ansible17:55
*** Jeffrey4l has quit IRC17:58
*** thorst_ has quit IRC17:58
*** javeriak has joined #openstack-ansible17:59
*** whiteveil has quit IRC17:59
*** ngupta has quit IRC18:00
*** thorst_ has joined #openstack-ansible18:00
evrardjpbgmccollum: agreed it should be easy and out of the box. Maybe it's time to change the defaults for "safer defaults"... Like asettle just said, I should submit a patch ASAP :p18:00
evrardjpto have a basis for discussion18:00
evrardjpI'll tag you in the reviews if you don't mind18:01
bgmccollumthere are a few issues all overlapping...the ssl handshake bits if using HTTPS endpoints (the public endpoints by default), CORS if using direct upload. im thinking going back to legacy mode + internalURL will avoid all these issues.18:03
*** asettle has joined #openstack-ansible18:04
*** thorst_ has quit IRC18:04
*** Jack_Iv_ has joined #openstack-ansible18:05
*** tnewhouse has joined #openstack-ansible18:06
*** thorst has joined #openstack-ansible18:06
*** thorst has quit IRC18:11
*** thorst has joined #openstack-ansible18:12
*** vnogin has joined #openstack-ansible18:14
openstackgerritMerged openstack/openstack-ansible-os_keystone: All handlers should be tagged "config"  https://review.openstack.org/41030418:16
*** thorst has quit IRC18:17
*** asettle has quit IRC18:17
*** Jack_Iv_ has quit IRC18:18
*** vnogin has quit IRC18:18
openstackgerritAndy McCrae proposed openstack/openstack-ansible: Fix liberty release notes since EOL  https://review.openstack.org/41090018:19
*** Jack_Iv_ has joined #openstack-ansible18:19
*** david-lyle has quit IRC18:21
*** thorst has joined #openstack-ansible18:23
*** ngupta has joined #openstack-ansible18:27
*** markvoelker has quit IRC18:29
*** arif-ali has quit IRC18:30
*** thorst has quit IRC18:30
*** david-lyle has joined #openstack-ansible18:30
*** electrofelix has quit IRC18:30
*** arif-ali has joined #openstack-ansible18:31
*** pwnall1337 is now known as zz_pwnall133718:34
*** markvoelker has joined #openstack-ansible18:35
palendaemhayden: https://review.openstack.org/#/c/410397/ no longer passes release note build18:36
*** metral_zzz has joined #openstack-ansible18:36
*** metral_zzz is now known as metral18:36
*** thorst has joined #openstack-ansible18:36
*** thorst has quit IRC18:36
*** thorst has joined #openstack-ansible18:37
*** sdake has joined #openstack-ansible18:38
*** sdake_ has joined #openstack-ansible18:41
*** vnogin has joined #openstack-ansible18:41
*** sdake has quit IRC18:43
openstackgerritKyle L. Henderson proposed openstack/openstack-ansible-repo_server: Fix apt-cacher-ng file owners during rsync  https://review.openstack.org/41091618:46
alextricity25logan- ping18:50
*** sdake_ has quit IRC18:51
*** chhavi has quit IRC18:53
logan-alextricity25: o/18:54
alextricity25logan-: Is this you here: https://github.com/openstack/openstack-ansible-os_nova/commit/2c641baaffd6ec7f1a0222089252686f239bf15018:54
logan-yes18:54
alextricity25logan-: I'm running through a mulit-node installation of newton...and for whatever reason the save directory doesn't exist on my hypervisors.18:55
alextricity25logan-: I had to manually restart the libvirt-bin service before the directory was created. I was wondering if you know of any patch/bug out there that is related?18:56
alextricity25Maybe a backport got missed?18:56
alextricity25logan-: I feel like this probably belongs in newton, no? https://github.com/openstack/openstack-ansible-os_nova/blob/master/tasks/nova_compute_kvm_install.yml#L1618:57
*** vnogin has quit IRC19:00
*** michaelgugino has joined #openstack-ansible19:01
*** vnogin has joined #openstack-ansible19:01
*** weezS has joined #openstack-ansible19:01
*** poopcat has joined #openstack-ansible19:02
logan-hmm so it is a fresh install?19:02
alextricity25logan-: Yes, fresh install. It failed on the task trying to stat the /var/lib/libvirt/qemu/save directory because it wasn't there. Maybe this is a one-off thing...restarting the libvirt-bin service manually seemed to make the save dir appear19:03
*** thorst has quit IRC19:03
alextricity25logan-: ATM I'm not sure if this is a persistent issue19:04
logan-yeah that seems very one offish, I imagine we'd be seeing that in the gate quite a bit if it was happening frequently19:04
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715719:04
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717819:04
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set user/group/modes on user init files [+Docs]  https://review.openstack.org/40873619:04
alextricity25logan-: Yeah. I'll keep my eye out while i'm doing more of these hardware deployments. Thanks for the info :)19:04
logan-the openstack gate wasn't seeing that race I fixed there, I was seeing it in my local CI, but that whole workflow of renaming the save dir is very racy and i don't like it :(19:04
alextricity25me neither :/19:05
logan-but since i put the rechecks in there for that, it has been stable for me19:05
*** pester has joined #openstack-ansible19:05
*** whiteveil has joined #openstack-ansible19:07
*** Jack_Iv_ has quit IRC19:07
*** fxpester has quit IRC19:08
*** Jack_Iv_ has joined #openstack-ansible19:09
*** poopcat has quit IRC19:10
openstackgerritMerged openstack/openstack-ansible: host net config bond0 static -> manual  https://review.openstack.org/41023019:11
*** Jack_Iv_ has quit IRC19:13
*** marst has quit IRC19:16
*** marst has joined #openstack-ansible19:16
*** thorst has joined #openstack-ansible19:16
*** thorst has quit IRC19:17
*** ngupta has quit IRC19:21
*** ngupta has joined #openstack-ansible19:22
*** poopcat has joined #openstack-ansible19:22
*** McMurlock1 has joined #openstack-ansible19:24
*** ngupta has quit IRC19:24
*** ngupta has joined #openstack-ansible19:24
*** thorst has joined #openstack-ansible19:26
*** thorst has quit IRC19:26
*** McMurlock1 has quit IRC19:26
*** McMurlock1 has joined #openstack-ansible19:27
*** McMurlock1 has quit IRC19:27
*** thorst has joined #openstack-ansible19:28
stevelleFYI andymccr I added you as a reviewer on https://review.openstack.org/#/c/382958 so you can keep an eye on the progress. This is the item to watch re: the desired ceilometer SHA bump. If this patch does stall out entirely for some reason we might drop the g-r for ceilo19:30
*** thorst has quit IRC19:31
*** maeker has quit IRC19:35
*** thorst has joined #openstack-ansible19:38
*** sdake has joined #openstack-ansible19:39
*** ngupta has quit IRC19:42
*** ngupta has joined #openstack-ansible19:43
*** ngupta has quit IRC19:47
*** javeriak has quit IRC19:52
*** sdake has quit IRC19:55
*** uthng has quit IRC19:55
*** javeriak has joined #openstack-ansible19:59
*** sdake has joined #openstack-ansible19:59
*** stuartgr has quit IRC20:01
*** Jack_Iv_ has joined #openstack-ansible20:01
*** tnewhouse has quit IRC20:01
*** johnmilton has quit IRC20:02
*** pester has quit IRC20:10
*** hybridpollo has joined #openstack-ansible20:11
*** tnewhouse has joined #openstack-ansible20:14
*** dfflanders has joined #openstack-ansible20:15
*** adrian_otto has quit IRC20:16
*** vnogin has quit IRC20:16
*** vnogin has joined #openstack-ansible20:18
*** asettle has joined #openstack-ansible20:18
*** javeriak has quit IRC20:19
*** Jack_Iv_ has quit IRC20:21
*** asettle has quit IRC20:22
*** ngupta has joined #openstack-ansible20:23
*** johnmilton has joined #openstack-ansible20:23
*** javeriak has joined #openstack-ansible20:26
*** johnmilton has quit IRC20:30
*** hw_wutianwei1 has joined #openstack-ansible20:32
*** gouthamr has joined #openstack-ansible20:33
*** hw_wutianwei has quit IRC20:33
*** hw_wutianwei1 is now known as hw_wutianwei20:33
*** pcaruana has quit IRC20:33
*** javeriak has quit IRC20:34
*** sdake_ has joined #openstack-ansible20:35
*** sdake has quit IRC20:37
mrdaMorning OSA20:46
*** thorst has quit IRC20:51
mhaydenohai mrda20:52
*** phalmos has quit IRC20:53
mrdamhayden: o/20:53
*** Jack_Iv_ has joined #openstack-ansible20:58
*** phalmos has joined #openstack-ansible21:02
*** vnogin has quit IRC21:05
*** thorst has joined #openstack-ansible21:06
*** weezS has quit IRC21:08
*** vnogin has joined #openstack-ansible21:11
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Don't delete container_cidr key when overriding  https://review.openstack.org/41039721:13
*** karimb has joined #openstack-ansible21:16
*** Jack_Iv_ has quit IRC21:16
*** Jack_Iv_ has joined #openstack-ansible21:17
*** fguillot has quit IRC21:18
*** asettle has joined #openstack-ansible21:21
*** Jack_Iv_ has quit IRC21:21
*** smatzek has quit IRC21:22
*** tnewhouse has quit IRC21:24
*** asettle has quit IRC21:25
cloudnullmhayden: https://review.openstack.org/#/c/406329/22/tasks/rhel7stig/file_perms.yml@104 -- is there a reason not to use the octal form ?21:27
*** ianychoi has quit IRC21:28
*** tnewhouse has joined #openstack-ansible21:30
*** omiday has joined #openstack-ansible21:34
*** tnewhouse has quit IRC21:35
*** Jack_Iv_ has joined #openstack-ansible21:38
*** Jack_Iv_ has quit IRC21:38
*** sdake_ has quit IRC21:46
cloudnullmhayden: ping ^21:46
mhaydenOY21:46
mhaydencloudnull: well, i want to avoid making the permissions LESS restrictive21:47
*** jmckind_ has joined #openstack-ansible21:47
mhaydenso if the STIG says "750 is required", but the file  is "0644", then i don't want things to happen21:47
mhaydendoes that make sense?21:47
cloudnullit does.21:47
*** jmckind has quit IRC21:47
cloudnulland makes sense.21:47
cloudnullwas +/- curious21:48
mhaydenhah21:48
mhaydenit is confuding21:48
mhaydenconfusing even21:48
*** vnogin_ has joined #openstack-ansible21:48
*** tnewhouse has joined #openstack-ansible21:48
*** vnogin has quit IRC21:49
*** jmckind has joined #openstack-ansible21:50
*** jmckind_ has quit IRC21:51
*** jmckind_ has joined #openstack-ansible21:55
*** thorst has quit IRC21:56
*** jmckind has quit IRC21:56
*** tnewhouse has quit IRC21:59
*** v1k0d3n has quit IRC21:59
*** thorst_ has joined #openstack-ansible21:59
*** weezS has joined #openstack-ansible22:01
*** jmckind has joined #openstack-ansible22:01
*** jmckind_ has quit IRC22:02
*** whiteveil has quit IRC22:03
*** whiteveil has joined #openstack-ansible22:03
*** jmckind has quit IRC22:06
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_heat: Add variable to control cinder backups  https://review.openstack.org/41097622:06
*** whiteveil has quit IRC22:11
*** whiteveil has joined #openstack-ansible22:11
*** jmckind has joined #openstack-ansible22:18
bgmccollumrandom question. with trusty support being dropped in newton, is M->N upgrade even going to be supported, as it will require an OS upgrade?22:20
*** jimbaker has quit IRC22:23
*** whiteveil has quit IRC22:23
*** whiteveil has joined #openstack-ansible22:23
*** jimbaker has joined #openstack-ansible22:27
*** jmckind_ has joined #openstack-ansible22:27
*** Jack_Iv has quit IRC22:28
cloudnullanyone around that might want to give these a shove https://review.openstack.org/#/q/owner:kevin%2540cloudnull.com+status:open+project:openstack/openstack-ansible-ops ?22:28
cloudnullbgmccollum: M>N is supported22:29
palendaebgmccollum, OSA has trusty in Newton22:29
cloudnullN>O is not22:29
*** jmckind has quit IRC22:29
cloudnullwe kept trusty in N22:29
palendaecloudnull, Well, N trusty > O wouldn't be22:29
cloudnullI think we very well may be the only project to do so22:29
palendaeN -> O is kind of uncharted water22:29
bgmccollumok, i misread the review then :/22:29
cloudnullpalendae: ++22:29
cloudnullTrusty was deprecated in N, and is being removed in O22:30
palendaebgmccollum, Granted, most of openstack removed trusty in N; hopefully upgrades don't encounter a nasty surprise because of that22:30
palendaeI'm not aware of anyone doing an actual upgrade yet. Maybe mhayden22:30
cloudnullthere've been a few folks that have done it so far.22:31
cloudnulland I know that the OSIC is testing it today22:31
mhaydeni took a four node upgrade from M -> N22:31
mhaydentrusty to xenial upgrade is horrible times22:31
palendaeAh, ok22:31
palendaemhayden, I figured =\22:31
bgmccollumok, fears subdued22:31
palendaecloudnull, Just trying by checking out the playbooks and running?22:32
palendaebgmccollum, Or do you mean delayed? :)22:32
cloudnullusing the run-upgrade script for the most part.22:32
bgmccollum;)22:32
palendaeThere's stuff in newton for that?22:32
palendaeHuh22:32
palendaeObviously I have not been paying attention22:32
*** adrian_otto has joined #openstack-ansible22:32
cloudnullyup. I mean we've not removed this line quite yet https://github.com/openstack/openstack-ansible/blob/master/scripts/run-upgrade.sh#L2722:33
bgmccollumi have not been paying attention for a long time...trying to chip the rust off a bit22:33
cloudnullbut it is there and has been worked on22:33
palendaeCool22:34
palendaeTrusty -> Xenial may be left as an exercise for the reader22:34
cloudnullwe're going to need to do a thing for N>O22:34
cloudnulland I imagine that we're going to have to carry an OS check to stop folks from trying to upgrade on a trusty box22:35
palendaeYeah22:35
palendae"This will blow everything up"22:35
cloudnullyea.22:35
palendaeOut of sheer curiosity22:36
bgmccollumits more than just the host, its the containers too22:36
palendaeIs there a hard break with installing Ocata stuff?22:36
palendaebgmccollum, Yep22:36
*** vnogin_ has quit IRC22:36
cloudnullat present no.22:36
cloudnullyou can run the ocata bits on trusty22:36
palendaeBut no bugfixes for you22:36
cloudnullhowever that's likeley to change as the releaes progresses.22:36
palendaeRight22:37
cloudnullas soon as these files are removed it'll be a clean break https://github.com/openstack/openstack-ansible-os_nova/blob/master/vars/ubuntu-14.04.yml22:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Auto-enable heat cinder backup functionality  https://review.openstack.org/41098522:37
palendaeI mostly meant for the services themselves22:38
palendaeThough that may be hard to know without trying22:38
cloudnullbut as of right now things work on trusty22:38
cloudnullstevelle: you around ?22:38
cloudnullwhen you get a chance i'd love your insight on https://review.openstack.org/#/c/410821 seems like a sensible change however I figured I'd ask you before +w22:39
stevellecloudnull: yess22:39
stevellecloudnull: I threw a quick comment to acknowledge it, working on dinking with the change now22:39
stevellewill give a vote this afternoon22:39
cloudnullcool . thanks!22:40
*** phalmos has quit IRC22:42
openstackgerritMerged openstack/openstack-ansible: Process and mount default bind mounts first  https://review.openstack.org/40976822:42
*** gouthamr has quit IRC22:45
*** v1k0d3n has joined #openstack-ansible22:45
*** marst has quit IRC22:45
*** jmckind_ has quit IRC22:52
*** vnogin has joined #openstack-ansible22:54
*** hw_wutianwei has quit IRC22:55
*** michaelgugino has quit IRC22:55
*** gouthamr has joined #openstack-ansible22:57
*** ngupta has quit IRC22:57
*** ngupta has joined #openstack-ansible22:58
*** sdake has joined #openstack-ansible23:01
*** ngupta has quit IRC23:02
*** jheroux has quit IRC23:02
*** thorst_ has quit IRC23:04
*** sdake has quit IRC23:08
*** cathrichardson is now known as cathrichardson_a23:11
*** cathrichardson_a is now known as cathrichardson_z23:12
*** ngupta has joined #openstack-ansible23:12
*** thorst_ has joined #openstack-ansible23:15
*** sdake has joined #openstack-ansible23:15
*** sdake has quit IRC23:16
*** vnogin has quit IRC23:21
*** kstev has quit IRC23:21
*** asettle has joined #openstack-ansible23:22
*** ianychoi has joined #openstack-ansible23:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible: [TEST] Update Ansible to v2.2.1.0-0.2.rc2  https://review.openstack.org/39987523:25
*** asettle has quit IRC23:27
*** sdake has joined #openstack-ansible23:28
*** kstev has joined #openstack-ansible23:29
*** karimb has quit IRC23:30
*** TxGirlGeek has quit IRC23:31
*** kstev has quit IRC23:31
*** sdake_ has joined #openstack-ansible23:36
*** thorst_ has quit IRC23:36
*** sdake has quit IRC23:37
*** chris_hultin is now known as chris_hultin|AWA23:37
*** klamath has quit IRC23:46
*** messy has quit IRC23:46
*** dxiri has joined #openstack-ansible23:52

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!