Friday, 2017-02-10

*** phalmos has joined #openstack-ansible00:00
*** david-lyle_ has joined #openstack-ansible00:00
*** agrebennikov_ has quit IRC00:08
*** david-lyle has joined #openstack-ansible00:09
*** pjh03 has joined #openstack-ansible00:15
*** mmalik4 has quit IRC00:18
*** pjh03 has quit IRC00:20
*** david-lyle has quit IRC00:20
*** vnogin has quit IRC00:20
*** klamath has quit IRC00:21
*** pmannidi has joined #openstack-ansible00:24
*** pmannidi has quit IRC00:24
*** adrian_otto has joined #openstack-ansible00:24
*** david-lyle_ has quit IRC00:25
*** pmannidi has joined #openstack-ansible00:25
*** retreved has quit IRC00:35
*** retreved has joined #openstack-ansible00:35
*** pmannidi has quit IRC00:38
*** pmannidi has joined #openstack-ansible00:39
*** pmannidi has quit IRC00:41
*** pmannidi has joined #openstack-ansible00:41
*** ngupta has joined #openstack-ansible00:44
*** SerenaFeng has joined #openstack-ansible00:55
*** hw_wutianwei has joined #openstack-ansible00:56
*** SerenaFeng has quit IRC00:56
*** SerenaFeng has joined #openstack-ansible00:57
*** ngupta has quit IRC00:59
*** ngupta has joined #openstack-ansible01:00
*** cuongnv has joined #openstack-ansible01:01
*** thorst_ has joined #openstack-ansible01:03
*** ngupta has quit IRC01:04
*** jamesdenton has joined #openstack-ansible01:05
*** thorst_ has quit IRC01:06
stevelleduplicate?01:07
*** jamielennox is now known as jamielennox|away01:07
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: Remove 3DES from ssl_cipher_suite  https://review.openstack.org/43179201:08
*** crushil has joined #openstack-ansible01:09
*** grumpycatt has quit IRC01:10
*** grumpycatt has joined #openstack-ansible01:11
*** weezS has quit IRC01:18
*** vnogin has joined #openstack-ansible01:21
*** jamielennox|away is now known as jamielennox01:21
*** SerenaFeng has quit IRC01:23
*** vnogin has quit IRC01:25
*** lucas_ has joined #openstack-ansible01:29
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone master: Remove 3DES from keystone_ssl_cipher_suite  https://review.openstack.org/43179501:29
*** david-lyle_ has joined #openstack-ansible01:30
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone master: Remove 3DES from keystone_ssl_cipher_suite  https://review.openstack.org/43179501:31
*** SerenaFeng has joined #openstack-ansible01:32
*** phalmos has quit IRC01:34
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-haproxy_server master: Provide default haproxy_ssl_cipher_suite  https://review.openstack.org/43179901:34
*** thorst_ has joined #openstack-ansible01:37
*** thorst_ has quit IRC01:38
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone master: Remove 3DES from keystone_ssl_cipher_suite  https://review.openstack.org/43179501:38
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_horizon master: Provide default horizon_ssl variables  https://review.openstack.org/43180101:42
*** hamzy has joined #openstack-ansible01:45
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_trove master: Remove 3DES from trove_ssl_cipher_suite  https://review.openstack.org/43180201:45
stevellejmccrory: how do you feel about putting the default cypher suite in defaults/main.yml01:46
jmccrorystevelle: numbing01:47
stevellejmccrory: :D01:47
stevellewould be nice to have them consistent between roles is all01:49
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_gnocchi master: Remove 3DES from gnocchi_ssl_cipher_suite  https://review.openstack.org/43180301:49
*** whiteveil has joined #openstack-ansible01:50
*** MasterOfBugs has quit IRC01:53
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_barbican master: Provide default barbican_ssl variables  https://review.openstack.org/43180401:53
*** whiteveil has quit IRC01:54
*** whiteveil has joined #openstack-ansible01:55
*** david-lyle_ has quit IRC01:55
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_magnum master: Remove ssl_cipher_suite from test vars  https://review.openstack.org/43180601:56
*** jamesdenton has quit IRC01:57
*** adrian_otto has quit IRC01:58
*** Andrew_jedi has quit IRC01:59
*** whiteveil has quit IRC01:59
*** cathrich_ has joined #openstack-ansible02:09
*** cathrichardson has quit IRC02:09
*** esberglu has joined #openstack-ansible02:10
*** esberglu has quit IRC02:10
*** esberglu has joined #openstack-ansible02:10
*** esberglu has quit IRC02:11
*** jamesdenton has joined #openstack-ansible02:13
*** sanfern has joined #openstack-ansible02:16
*** lucas_ has quit IRC02:23
*** winggundamth has joined #openstack-ansible02:23
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-apt_package_pinning stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181402:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-galera_client stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181502:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-galera_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181602:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-lxc_container_create stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181702:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-lxc_hosts stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181802:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-memcached_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181902:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-openstack_hosts stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182002:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-openstack_openrc stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182102:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_aodh stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182202:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_ceilometer stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182302:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_cinder stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182402:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_glance stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182502:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_heat stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182602:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_horizon stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182702:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_ironic stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182802:25
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182902:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_neutron stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183002:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_swift stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183102:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_tempest stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183202:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-pip_lock_down stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183302:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_build stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183402:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183502:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-rsyslog_client stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183602:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-rsyslog_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183702:26
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-security stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183802:26
*** crushil has quit IRC02:27
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible stable/newton: Remove 3DES from ssl_cipher_suite  https://review.openstack.org/43184002:29
*** Mahe has quit IRC02:30
*** cuongnv has quit IRC02:32
*** Mahe has joined #openstack-ansible02:34
*** thorst_ has joined #openstack-ansible02:38
*** jamesdenton has quit IRC02:41
*** lucas_ has joined #openstack-ansible02:43
*** thorst_ has quit IRC02:48
*** thorst_ has joined #openstack-ansible02:48
*** woodard has quit IRC02:52
*** thorst_ has quit IRC02:53
*** chris_hultin|AWA is now known as chris_hultin02:54
*** lucas_ has quit IRC02:54
*** chris_hultin is now known as chris_hultin|AWA02:58
*** whiteveil has joined #openstack-ansible02:59
*** LinStatSDR has quit IRC02:59
*** ngupta has joined #openstack-ansible02:59
*** whiteveil has quit IRC03:00
*** galstrom is now known as galstrom_zzz03:03
*** thorst_ has joined #openstack-ansible03:09
*** cuongnv has joined #openstack-ansible03:09
*** thorst_ has quit IRC03:09
*** mheremans has quit IRC03:19
*** phalmos has joined #openstack-ansible03:19
*** mheremans has joined #openstack-ansible03:21
*** DanyC has joined #openstack-ansible03:25
*** sdake has quit IRC03:28
*** crushil has joined #openstack-ansible03:29
*** japestinho has joined #openstack-ansible03:29
*** DanyC has quit IRC03:30
cloudnullevenings03:30
*** lucas_ has joined #openstack-ansible03:32
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/newton: Implementing stricter permissions on config files  https://review.openstack.org/43161703:33
*** thorst_ has joined #openstack-ansible03:35
*** thorst_ has quit IRC03:35
*** markvoelker has quit IRC03:56
*** SerenaFeng has quit IRC03:57
*** markvoelker has joined #openstack-ansible03:58
openstackgerritMatthew Oliver proposed openstack/openstack-ansible-os_swift master: Make swift_rings threading react to bad return codes  https://review.openstack.org/43186904:00
mattoliverauandymccr: ^^04:01
mattoliverauandymccr: I think there is a much easier way to do the whole thing what would remove the need for threading.. but lets start with that, and when I get a chance I'll play with the simplication.04:01
*** sdake has joined #openstack-ansible04:07
*** david-lyle has joined #openstack-ansible04:12
*** vnogin has joined #openstack-ansible04:23
*** udesale has joined #openstack-ansible04:24
*** vnogin has quit IRC04:27
openstackgerritMerged openstack/openstack-ansible-os_heat stable/newton: Implementing stricter permissions on config files  https://review.openstack.org/43161304:28
*** faizy has joined #openstack-ansible04:28
*** gouthamr has quit IRC04:33
*** lucas_ has quit IRC04:37
*** galstrom_zzz is now known as galstrom04:38
*** rmelero has joined #openstack-ansible04:39
*** ngupta has quit IRC04:40
*** ngupta has joined #openstack-ansible04:40
*** ngupta has quit IRC04:45
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/newton: Implementing stricter permissions on config files  https://review.openstack.org/43162104:47
*** jrobinson is now known as jrobinson-afk04:49
*** gouthamr has joined #openstack-ansible04:55
*** gouthamr_ has joined #openstack-ansible04:57
*** gouthamr has quit IRC05:00
*** cmart has quit IRC05:01
*** rmelero has quit IRC05:09
*** Amit82 has joined #openstack-ansible05:09
*** rmelero has joined #openstack-ansible05:09
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/newton: Implementing stricter permissions on config files  https://review.openstack.org/43162605:10
Amit82Hi All, I am deploying openstack newton on two VMs (only Infra and Compute) Node05:11
Amit82I am getting following error in /var/log/nova/nova-compute.log05:13
Amit82 ERROR oslo.messaging._drivers.impl_rabbit [req-dbfaca22-4b95-4a84-b224-086df5ef1c3b - - - - -] [7e6cc9e0-1212-4261-a7aa-d74feaf30d7e] AMQP server on 172.29.238.75:5671 is unreachable: timed out. Trying again in 32 seconds. Client port: None05:13
*** rmelero has quit IRC05:14
Amit82When I am trying to ping rabbitmq container's IP (172.29.238.75) from compute node, it is not able to do so.05:14
Amit82I wonder why this subnet 172.29.238.0 is coming in picture05:15
*** ssmith_ has joined #openstack-ansible05:16
Amit82Infra Node Mgmt IP is in 172.29.236.0 subnet05:17
Amit82Compute Node Mgmt IP is also in same subnet05:18
Amit82Tunnel (VXLAN) IP is in 172.29.240.0 subnet05:19
Amit82Storage NW IP is in 172.29.244.0 subnet05:20
Amit82then is it fine that rabbitmq container IP is in 172.29.238.0 subnet05:20
Amit82Could it be the reason that compute node is not able to reach rabbitmq05:21
Amit82?05:21
*** jrobinson-afk is now known as jrobinson05:23
*** david-lyle has quit IRC05:27
Amit82Compute node is not able to ping containers inside Infra node05:30
Amit82but is able to ping Infra Node Mgmt IP 172.29.236.1105:31
Amit82Is this behavior fine?05:31
*** cmart has joined #openstack-ansible05:34
openstackgerritMerged openstack/openstack-ansible-tests master: Remove *_requirements_git_install_branch vars  https://review.openstack.org/43070305:35
*** thorst_ has joined #openstack-ansible05:36
openstackgerritMerged openstack/openstack-ansible master: Using yaml.safe_load instead of yaml.load  https://review.openstack.org/43001005:38
*** aludwar has quit IRC05:39
*** SerenaFeng has joined #openstack-ansible05:40
*** thorst_ has quit IRC05:41
*** zerda3 has quit IRC05:49
*** zerda3 has joined #openstack-ansible05:51
*** gouthamr_ has quit IRC05:52
*** Jack_Iv has joined #openstack-ansible05:54
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_ironic master: Updated from global requirements  https://review.openstack.org/43202705:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_keystone master: Updated from global requirements  https://review.openstack.org/43202805:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_magnum master: Updated from global requirements  https://review.openstack.org/43202905:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca master: Updated from global requirements  https://review.openstack.org/43203005:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_neutron master: Updated from global requirements  https://review.openstack.org/43203105:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_nova master: Updated from global requirements  https://review.openstack.org/43203205:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_rally master: Updated from global requirements  https://review.openstack.org/43203305:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_sahara master: Updated from global requirements  https://review.openstack.org/43203405:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_swift master: Updated from global requirements  https://review.openstack.org/43203505:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_tempest master: Updated from global requirements  https://review.openstack.org/43203605:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_trove master: Updated from global requirements  https://review.openstack.org/43203705:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_watcher master: Updated from global requirements  https://review.openstack.org/43203805:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_zaqar master: Updated from global requirements  https://review.openstack.org/43203905:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-pip_install master: Updated from global requirements  https://review.openstack.org/43204005:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-plugins master: Updated from global requirements  https://review.openstack.org/43204105:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-rabbitmq_server master: Updated from global requirements  https://review.openstack.org/43204205:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-repo_build master: Updated from global requirements  https://review.openstack.org/43204305:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-repo_server master: Updated from global requirements  https://review.openstack.org/43204405:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-rsyslog_client master: Updated from global requirements  https://review.openstack.org/43204505:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-rsyslog_server master: Updated from global requirements  https://review.openstack.org/43204605:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-security master: Updated from global requirements  https://review.openstack.org/43204705:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-specs master: Updated from global requirements  https://review.openstack.org/43204805:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-tests master: Updated from global requirements  https://review.openstack.org/43204905:56
*** lucas_ has joined #openstack-ansible05:57
*** drifterza has joined #openstack-ansible06:06
*** Jack_Iv has quit IRC06:07
*** woodard has joined #openstack-ansible06:07
*** Jack_I has joined #openstack-ansible06:11
*** woodard has quit IRC06:11
*** drifterza has quit IRC06:13
*** SerenaFeng has quit IRC06:13
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: Provide default haproxy_ssl_cipher_suite  https://review.openstack.org/43179906:20
openstackgerritMatthew Oliver proposed openstack/openstack-ansible-os_swift master: Rework swift_rings.py to use the RingBuilder class  https://review.openstack.org/43213206:22
mattoliverau^^ andymccr that is a rewrite that removes the crazy threading all together and simplifies the code somewhat. Though I actually only just finished writing it, not tested or debugged yet. So will mark it WIP.. But feel free to give it a test drive :)06:23
*** lucas_ has quit IRC06:23
*** sacharya has quit IRC06:24
*** crushil has quit IRC06:28
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone master: Conditionally run appropriate db_sync commands  https://review.openstack.org/43213406:31
openstackgerritMerged openstack/openstack-ansible-os_trove master: Remove 3DES from trove_ssl_cipher_suite  https://review.openstack.org/43180206:33
*** phalmos has quit IRC06:33
*** admin0_ has joined #openstack-ansible06:40
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Remove 3DES from keystone_ssl_cipher_suite  https://review.openstack.org/43179506:40
*** admin0_ has quit IRC06:41
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Provide default horizon_ssl variables  https://review.openstack.org/43180106:42
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: Remove 3DES from gnocchi_ssl_cipher_suite  https://review.openstack.org/43180306:43
*** pmannidi_ has joined #openstack-ansible06:44
*** SerenaFeng has joined #openstack-ansible06:53
*** cmart has quit IRC06:54
*** pmannidi_ has quit IRC06:55
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Benchmark requests during upgrade testing  https://review.openstack.org/43122506:59
*** markvoelker has quit IRC07:02
*** markvoelker has joined #openstack-ansible07:02
*** markvoelker has quit IRC07:06
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Add nova_placement service to tests inventory  https://review.openstack.org/43085207:09
*** SerenaFeng has quit IRC07:13
*** SerenaFeng has joined #openstack-ansible07:14
*** drifterza has joined #openstack-ansible07:16
openstackgerritMerged openstack/openstack-ansible stable/newton: corrected infra wheel mirror URL  https://review.openstack.org/42876007:19
*** japestinho has quit IRC07:24
*** rmelero has joined #openstack-ansible07:24
*** japestinho has joined #openstack-ansible07:24
*** faizy has quit IRC07:28
*** Jeffrey4l__ has joined #openstack-ansible07:29
*** pcaruana has joined #openstack-ansible07:30
*** Jeffrey4l_ has quit IRC07:30
*** faizy has joined #openstack-ansible07:31
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone master: Conditionally run appropriate db_sync commands  https://review.openstack.org/43213407:36
*** japestinho has quit IRC07:37
*** thorst_ has joined #openstack-ansible07:37
*** galstrom is now known as galstrom_zzz07:40
*** asi93 has joined #openstack-ansible07:41
*** mnaser has quit IRC07:41
*** thorst_ has quit IRC07:42
asi93hi! i installed openstack with ansible and rebooted machine; when i start galera-install.yml playbook i get fatal: [aio1_galera_container-4fd7e2e2]: FAILED! => {"failed": true, "msg": "The conditional check 'proxy_check.status == 200' failed. any idea what can i do in order to fix this problem?07:42
*** asi93 has quit IRC07:45
*** rmelero has quit IRC07:45
*** rmelero has joined #openstack-ansible07:46
*** rmelero has quit IRC07:51
*** admin0_ has joined #openstack-ansible07:52
*** jrobinson has quit IRC07:52
*** ssmith_ has quit IRC07:56
*** japestinho has joined #openstack-ansible07:57
*** faizy_ has joined #openstack-ansible08:02
*** markvoelker has joined #openstack-ansible08:03
*** sdake_ has joined #openstack-ansible08:05
*** faizy has quit IRC08:05
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Updated from global requirements  https://review.openstack.org/43201108:05
openstackgerritMerged openstack/openstack-ansible-memcached_server master: Updated from global requirements  https://review.openstack.org/43201208:05
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: Updated from global requirements  https://review.openstack.org/43201408:05
*** faizy__ has joined #openstack-ansible08:05
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: Updated from global requirements  https://review.openstack.org/43200908:06
openstackgerritMerged openstack/openstack-ansible-ops master: Updated from global requirements  https://review.openstack.org/43201608:06
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning master: Updated from global requirements  https://review.openstack.org/43200508:06
openstackgerritMerged openstack/openstack-ansible-galera_server master: Updated from global requirements  https://review.openstack.org/43200808:06
openstackgerritMerged openstack/openstack-ansible-os_sahara master: Updated from global requirements  https://review.openstack.org/43203408:06
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Updated from global requirements  https://review.openstack.org/43201008:06
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Updated from global requirements  https://review.openstack.org/43202608:07
openstackgerritMerged openstack/openstack-ansible-os_swift master: Updated from global requirements  https://review.openstack.org/43203508:07
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Updated from global requirements  https://review.openstack.org/43200608:07
openstackgerritMerged openstack/openstack-ansible-os_heat master: Updated from global requirements  https://review.openstack.org/43202508:07
openstackgerritMerged openstack/openstack-ansible-os_aodh master: Updated from global requirements  https://review.openstack.org/43201708:07
openstackgerritMerged openstack/openstack-ansible-os_rally master: Updated from global requirements  https://review.openstack.org/43203308:07
*** sdake has quit IRC08:07
openstackgerritMerged openstack/openstack-ansible-openstack_openrc master: Updated from global requirements  https://review.openstack.org/43201508:08
openstackgerritMerged openstack/openstack-ansible-os_barbican master: Updated from global requirements  https://review.openstack.org/43201808:08
openstackgerritMerged openstack/openstack-ansible-galera_client master: Updated from global requirements  https://review.openstack.org/43200708:08
openstackgerritMerged openstack/openstack-ansible-os_monasca master: Updated from global requirements  https://review.openstack.org/43203008:08
openstackgerritMerged openstack/openstack-ansible-pip_install master: Updated from global requirements  https://review.openstack.org/43204008:09
*** markvoelker has quit IRC08:09
*** faizy_ has quit IRC08:09
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Updated from global requirements  https://review.openstack.org/43202808:09
openstackgerritMerged openstack/openstack-ansible-os_nova master: Updated from global requirements  https://review.openstack.org/43203208:09
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Updated from global requirements  https://review.openstack.org/43203608:09
openstackgerritMerged openstack/openstack-ansible-rsyslog_client master: Updated from global requirements  https://review.openstack.org/43204508:09
*** faizy has joined #openstack-ansible08:09
openstackgerritMerged openstack/openstack-ansible-os_designate master: Updated from global requirements  https://review.openstack.org/43202208:10
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: Updated from global requirements  https://review.openstack.org/43202408:10
openstackgerritMerged openstack/openstack-ansible-os_ironic master: Updated from global requirements  https://review.openstack.org/43202708:10
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Updated from global requirements  https://review.openstack.org/43202908:10
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Updated from global requirements  https://review.openstack.org/43203108:10
openstackgerritMerged openstack/openstack-ansible-os_trove master: Updated from global requirements  https://review.openstack.org/43203708:11
*** skuda has joined #openstack-ansible08:11
openstackgerritMerged openstack/openstack-ansible-os_watcher master: Updated from global requirements  https://review.openstack.org/43203808:11
openstackgerritMerged openstack/openstack-ansible-os_zaqar master: Updated from global requirements  https://review.openstack.org/43203908:11
openstackgerritMerged openstack/openstack-ansible-plugins master: Updated from global requirements  https://review.openstack.org/43204108:11
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: Updated from global requirements  https://review.openstack.org/43204208:11
openstackgerritMerged openstack/openstack-ansible-repo_build master: Updated from global requirements  https://review.openstack.org/43204308:11
openstackgerritMerged openstack/openstack-ansible-repo_server master: Updated from global requirements  https://review.openstack.org/43204408:11
openstackgerritMerged openstack/openstack-ansible-rsyslog_server master: Updated from global requirements  https://review.openstack.org/43204608:11
openstackgerritMerged openstack/openstack-ansible-security master: Updated from global requirements  https://review.openstack.org/43204708:11
openstackgerritMerged openstack/openstack-ansible-specs master: Updated from global requirements  https://review.openstack.org/43204808:11
openstackgerritMerged openstack/openstack-ansible-tests master: Updated from global requirements  https://review.openstack.org/43204908:12
*** faizy__ has quit IRC08:12
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Updated from global requirements  https://review.openstack.org/43201908:12
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Updated from global requirements  https://review.openstack.org/43202008:12
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty master: Updated from global requirements  https://review.openstack.org/43202108:12
openstackgerritMerged openstack/openstack-ansible-os_glance master: Updated from global requirements  https://review.openstack.org/43202308:12
*** Jeffrey4l__ has quit IRC08:21
*** Jeffrey4l__ has joined #openstack-ansible08:22
*** strattao_ has quit IRC08:23
*** japestinho has quit IRC08:24
*** Andrew_jedi has joined #openstack-ansible08:25
*** vnogin has joined #openstack-ansible08:25
*** vnogin has quit IRC08:29
Amit82Hi All, can Openstack be installed on virtual machines made in virtualbox using Openstack Ansible08:31
Amit82I have two VMs which I want to use as Infra and Compute08:31
*** Andrew_jedi has quit IRC08:32
*** sdake_ has quit IRC08:37
*** sdake has joined #openstack-ansible08:40
*** sdake has quit IRC08:40
*** SerenaFeng has quit IRC08:40
*** SerenaFeng has joined #openstack-ansible08:42
*** DanyC has joined #openstack-ansible08:42
*** DanyC has quit IRC08:45
*** DanyC has joined #openstack-ansible08:45
*** SerenaFeng has quit IRC08:46
*** faizy has quit IRC08:46
*** faizy has joined #openstack-ansible08:47
*** cuongnv has quit IRC08:50
*** cuongnv has joined #openstack-ansible08:56
*** Andrew_jedi has joined #openstack-ansible08:58
openstackgerritMerged openstack/openstack-ansible master: Revert role pins in master branch  https://review.openstack.org/42973908:59
openstackgerritMerged openstack/openstack-ansible master: Updated from global requirements  https://review.openstack.org/43200408:59
*** Jack_Iv has joined #openstack-ansible09:00
openstackgerritDonovan Francesco (drifterza) proposed openstack/openstack-ansible master: Add Cloudkitty to integrated repo.  https://review.openstack.org/39731309:02
*** askb has quit IRC09:03
*** Jack_Iv has quit IRC09:16
Amit82Hi All, can Openstack be installed on virtual machines made in virtualbox using Openstack Ansible09:21
Amit82I have two VMs which I want to use as Infra and Compute09:21
*** admin0_ has quit IRC09:23
*** SerenaFeng has joined #openstack-ansible09:25
*** japestinho has joined #openstack-ansible09:25
Amit82Can anybody guide that why IP of rabbitmq container is in 172.29.238.0 subnet09:27
Amit82should it not be in 172.29.236.0 subnet09:27
Amit82i.e. br_mgmt subnet09:27
*** Jack_Iv has joined #openstack-ansible09:33
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181409:35
*** admin0_ has joined #openstack-ansible09:35
openstackgerritMerged openstack/openstack-ansible-galera_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181609:36
openstackgerritMerged openstack/openstack-ansible-galera_client stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181509:36
*** Jack_Iv has quit IRC09:36
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181809:36
*** Jack_Iv has joined #openstack-ansible09:36
openstackgerritMerged openstack/openstack-ansible-lxc_container_create stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181709:37
openstackgerritMerged openstack/openstack-ansible-openstack_hosts stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182009:37
openstackgerritMerged openstack/openstack-ansible-memcached_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43181909:37
openstackgerritMerged openstack/openstack-ansible-os_aodh stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182209:37
Andrew_jediAmit82: Yes, you can install OSA in virtualbox.09:38
openstackgerritMerged openstack/openstack-ansible-openstack_openrc stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182109:38
*** thorst_ has joined #openstack-ansible09:38
openstackgerritMerged openstack/openstack-ansible-os_ceilometer stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182309:38
openstackgerritMerged openstack/openstack-ansible-os_glance stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182509:38
*** rpittau has joined #openstack-ansible09:38
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182409:38
openstackgerritMerged openstack/openstack-ansible-os_ironic stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182809:39
openstackgerritMerged openstack/openstack-ansible-os_heat stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182609:39
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182909:39
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183009:39
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183209:39
openstackgerritMerged openstack/openstack-ansible-os_swift stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183109:40
openstackgerritMerged openstack/openstack-ansible-pip_lock_down stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183309:40
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43182709:40
*** pjm6 has quit IRC09:41
openstackgerritMerged openstack/openstack-ansible-repo_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183509:41
openstackgerritMerged openstack/openstack-ansible-rsyslog_server stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183709:41
openstackgerritMerged openstack/openstack-ansible-repo_build stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183409:42
openstackgerritMerged openstack/openstack-ansible-security stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183809:42
*** faizy_ has joined #openstack-ansible09:42
openstackgerritMerged openstack/openstack-ansible-rsyslog_client stable/mitaka: Make all tests use upper-constraints  https://review.openstack.org/43183609:42
Amit82Thanks Andrew. Another thing, my rabbitmq container is having ip in 172.29.238.0 subnet09:42
*** thorst_ has quit IRC09:43
Amit82could you guide why is it different subnet than br_mgmt etc.09:43
Amit82probably because of this my compute node is not able to reach Infra node's rabbitmq09:43
*** japestinho has quit IRC09:44
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ensures the host IP isn't used for containers  https://review.openstack.org/43086909:44
*** japestinho has joined #openstack-ansible09:44
Amit82I am getting this error: ERROR oslo.messaging._drivers.impl_rabbit [req-8a86660b-4c1e-47c8-9c3f-3eaaf550c800 - - - - -] [9077db39-9ee6-4174-8cbd-49cba9f0698d] AMQP server on 172.29.238.75:5671 is unreachable: timed out. Trying again in 32 seconds. Client port: None09:45
Amit82do you see it some deployment related issue09:45
*** faizy has quit IRC09:45
*** pmannidi has quit IRC09:50
evrardjpAmit82 172.29.238.0 could be in 172.29.236.0 network09:50
evrardjpit just depends on the netmask :p09:50
andymccr^ that - if it's an AIO the subnet is /2209:50
evrardjpAmit82: are your rabbitmq containers running fine?09:51
Amit82evrardjp: it is running fine09:52
Amit82I am able to attach to it09:52
*** vnogin has joined #openstack-ansible09:52
Amit82but I am not being able to ping 172.29.238.75 (rabbitmq container's IP) from compute node09:52
evrardjpand processes are running fine?09:52
Amit82which particular process?09:53
evrardjpyou can use rabbitmqctl to check the state etc?09:53
*** SerenaFeng has quit IRC09:55
Amit82evrardjp: checked using rabbitmqctl status command09:56
openstackgerritMerged openstack/openstack-ansible-os_barbican master: Provide default barbican_ssl variables  https://review.openstack.org/43180409:56
Amit82output is at: http://paste.openstack.org/show/598356/09:56
Amit82could you pls see if anything suspicious in there09:56
johnthetubaguyandymccr: those races with discover hosts, turns out this patch I said was coming got merged already: https://github.com/openstack/nova/commit/9eb7bcea05ce2447496f6561caa1ae46b800f85d09:57
evrardjpAmit82: it looks fine, but I'm no expert of rabbitmq09:57
johnthetubaguyandymccr: scheduler.discover_hosts_in_cells_interval09:57
andymccrjohnthetubaguy: oh awesome! so we no longer need to do it manually?09:57
evrardjpAmit82: what's your cluster size? Can you check that everything is properly clustered?09:58
Mr_Smurfwhy would you like to use the keytone hosts with the memcache ports in https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/keystone_all.yml#L1909:58
johnthetubaguyandymccr: yep09:58
Amit82most importantly shouldn't I be able to ping rabbitmq IP from compute node09:58
andymccrjohnthetubaguy: is that in ocata or only pike/master?09:58
Amit82?09:58
evrardjpjohnthetubaguy: good news09:58
johnthetubaguyandymccr: turns out we snook that into RC109:58
andymccroh nice09:58
*** admin0_ has quit IRC09:58
andymccri guess the issue is if we spin stuff up and run a gate straight away we may still get that issue?09:58
Mr_Smurfthat looks like a bug... should it not be groups['memcached'] and not groups['keystone_all']?09:58
andymccror rather - we run tempest tests spinning up instances straight away it may not be up.09:58
johnthetubaguyandymccr: possibly, thats a good point09:59
andymccrMr_Smurf: those are the keystone_memcache servers09:59
Mr_Smurfandymccr: but when do you have memcache installed on the keystone servers?10:00
Mr_Smurfs/servers/containers/10:00
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests stable/newton: Remove *_requirements_git_install_branch vars  https://review.openstack.org/43221610:00
evrardjpMr_Smurf: I think almost all the time10:00
*** rgogunskiy has joined #openstack-ansible10:01
odyssey4meMr_Smurf evrardjp when uuid tokens are used, IIRC10:02
odyssey4methat's a legacy thing, and I don't think anyone's taken the time to unwind it10:02
andymccryeah basically if you use UUID memcached role is a dependency - and that bit gets set up10:02
evrardjpI think there was a discussion at some point10:02
andymccrif you don't then you don't need to specify that10:02
andymccrif you look in your AIO that conf entry wont even get used, but if you swap it to be UUID tokens it will.10:03
evrardjphttps://github.com/openstack/openstack-ansible-os_keystone/blob/master/meta/main.yml#L43-L4610:03
odyssey4meevrardjp yeah, you and I discussed removing that seeing as the memcache containers could be used regardless10:03
Mr_Smurfok, then I cant use keystone_memcached_servers to get the list of memcache servers..10:03
odyssey4mebut we didn't want to poke the bear :p10:03
Mr_Smurfbecause it will give me a list of keystone servers with the memcache port attached in the end10:03
*** markvoelker has joined #openstack-ansible10:03
odyssey4meyep10:03
odyssey4methere's a memcache group which has the containers in it10:04
evrardjphttps://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/env.d/memcache.yml10:04
Mr_Smurfyes, i get get it with {% for host in groups['memcached'] %}{{ hostvars[host]['container_address'] }}{% if not loop.last %},{% endif %}{% endfor %}:{{ memcached_port }}10:04
Mr_Smurfbut I tought there was a variable already defined for it10:05
evrardjpwhat do you mean there Mr_Smurf?10:05
Mr_Smurfhttps://bugs.launchpad.net/openstack-ansible/+bug/166119710:05
openstackLaunchpad bug 1661197 in openstack-ansible "Memcache setup missing in shibboleth2.xml" [Low,Confirmed]10:05
evrardjphttps://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L7710:05
Mr_Smurfevrardjp: my fix was using  {{ keystone_memcached_servers }} but I ended up with the wrong addresses in my config10:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_gnocchi stable/newton: Remove 3DES from gnocchi_ssl_cipher_suite  https://review.openstack.org/43222010:06
evrardjpMr_Smurf: I'd use this: https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L7710:07
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon stable/newton: Provide default horizon_ssl variables  https://review.openstack.org/43222410:07
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/newton: Remove 3DES from keystone_ssl_cipher_suite  https://review.openstack.org/43222610:07
Mr_Smurfevrardjp: ah, nice thanks :)10:08
*** fxpester has joined #openstack-ansible10:08
*** cuongnv has quit IRC10:10
odyssey4meoanson happy to see dragonflow merged :)10:14
evrardjpI'd be happy to have some real multi node hardware to test this, and automate the links/NIC better. But working with hardware is taking so much time!10:15
*** openstackgerrit has quit IRC10:18
*** cuongnv has joined #openstack-ansible10:18
odyssey4meandymccr I combined the group name change into the UCA/ocata change this morning as the one failed without the other consistently: https://review.openstack.org/43165910:18
andymccrodyssey4me: nice - probably because neutron one hasnt merged in ocata?10:19
andymccrbut yeah that looks good to me10:19
odyssey4meI think we just got luck in master :p10:19
odyssey4me*lucky10:19
odyssey4meevrardjp I expect that you'll be back porting the 'use UCA everywhere' patch to newton too?10:20
evrardjpmanual backport yes10:20
*** hw_wutianwei has quit IRC10:21
evrardjpprobably with a release note there10:21
odyssey4meyeah, good plan10:21
*** admin0_ has joined #openstack-ansible10:21
*** Amit82 has quit IRC10:23
*** qiliang27 has quit IRC10:25
*** Jack_Iv has quit IRC10:25
*** winggundamth has quit IRC10:31
*** Jack_Iv has joined #openstack-ansible10:32
*** udesale has quit IRC10:33
*** strattao has joined #openstack-ansible10:40
*** cuongnv has quit IRC10:44
andymccrevrardjp: let me know when you've done that - we can version bump to 14.1 then10:46
evrardjpI'm finishing one thing really quick then I'm doing it.10:46
*** admin0_ has quit IRC10:46
andymccrok cool i'll just add a reminder on next sha bump to set it to 14.110:47
*** phalmos has joined #openstack-ansible10:47
*** pjm6 has joined #openstack-ansible10:50
andymccrbtw patch is up for gerritbot stable/ocata so we should see those msgs10:54
*** electrofelix has joined #openstack-ansible10:56
andymccrahh i see stevelle and jmccrory both did that already hahaha - late to the party :P anyway +1'd steve's and removed mine.10:57
odyssey4meyep :)10:59
*** admin0_ has joined #openstack-ansible11:00
*** Jeffrey4l__ has quit IRC11:00
*** Jeffrey4l__ has joined #openstack-ansible11:01
*** Amit82 has joined #openstack-ansible11:06
Amit82Hi All11:06
Amit82when using python sdk, I am getting following error while making connection to external_vib_lp_address binded to port 500011:07
Amit82openstack.exceptions.SDKException: Connection failure that may be retried.11:07
Amit82Any clue about this issue?11:07
Amit82More detailed traces are at: http://paste.openstack.org/show/598376/11:07
oansonodyssey4me, yes. Thanks for you help!11:09
*** japestinho has quit IRC11:13
*** openstackgerrit has joined #openstack-ansible11:15
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install stable/newton: Use RDO/UCA everywhere  https://review.openstack.org/43225711:15
odyssey4meandymccr now that the requirements repo has a stable/ocata branch, we'll want to slam this through ASAP: https://review.openstack.org/43225611:15
andymccragreed - and done!11:16
evrardjpwe should document this11:16
odyssey4meso the topic for all things done at branch creation is 'create-ocata', I did the same for newton 'create-newton'11:17
odyssey4methat makes it easy to reference11:17
odyssey4mebut yes, if you want to document ir, or perhaps script it and keep the script in-repo somewhere, then use that as reference11:18
odyssey4me*it11:18
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: Remove duplicate package  https://review.openstack.org/43225811:18
*** faizy_ has quit IRC11:20
evrardjpI don't really mind, but there was someone asking for this at some point: https://review.openstack.org/#/c/41845911:22
evrardjpcould I get a review there, this way I can forget it?11:22
*** sanfern has quit IRC11:22
*** sanfern has joined #openstack-ansible11:23
odyssey4meit'd certainly be better to have that var defined in defaults, that way it's exposed in the documentation11:24
odyssey4methis makes it a hidden setting11:24
evrardjpit is a backport ...11:24
odyssey4meso sure, we can pass that for the backport, but it'd be good to see a modification for master/ocata11:25
evrardjpI think it's good to leave that has hidden, basically this modification sucks. We shouldn't do that :p11:25
evrardjpbut, yeah, edge cases11:25
evrardjpI think if this deserves some love we should have a more generic approach11:26
evrardjpbut I'm happy to abandon it too. I don't really ... care ?11:27
odyssey4mea bunch of backports which need review here: https://review.openstack.org/#/q/topic:update_cipher_suite11:27
*** smatzek has joined #openstack-ansible11:27
*** stuartgr has joined #openstack-ansible11:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-haproxy_server stable/newton: Provide default haproxy_ssl_cipher_suite  https://review.openstack.org/43226311:35
odyssey4methanks andymccr two more new ones: https://review.openstack.org/#/q/topic:update_cipher_suite11:36
*** thorst_ has joined #openstack-ansible11:39
*** admin0_ has quit IRC11:41
*** thorst_ has quit IRC11:43
*** asi93 has joined #openstack-ansible11:44
asi93hi! i need help with openstack-ansible and ironic; i have added - name: ironic.yml.aio tests/bootstrap-aio.yml and  to /etc/os_deploy/user_variables.yml but when i start scripts/run-playbooks.sh i get: FAILED! => {"failed": true, "msg": "'ironic_service_user_name' is undefined"} ... any idea what have I missed out? thanks in advance!11:51
*** drifterza has quit IRC11:54
odyssey4measi93 not sure what you added to user_variables.yml, but you should not have had to add anything11:58
odyssey4mealso, there's no need to modify bootstrap-aio... you can just execute the bootstrap, then copy the file over afterwards yourself11:58
odyssey4meit the execution fails with doing just that, then there's a bug11:59
odyssey4me*if11:59
odyssey4meevrardjp can you please review https://review.openstack.org/432263 as it's holding back another patch with a depends-on with that change id12:01
evrardjpit's already reviewed !12:01
evrardjpI'm currently reviewing the whole topic12:02
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/newton: Provide default haproxy_ssl_cipher_suite  https://review.openstack.org/43226312:03
odyssey4meah, thanks12:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum master: Remove ssl_cipher_suite from test vars  https://review.openstack.org/43180612:03
asi93odyssey4me: what do you think by copying file over afterwards (for bootstrap-aio)? because if I didn't include "- name: ironic.yml.aio" then ironic is not installed... ?12:04
odyssey4measi ironic is only installed later, and that installation depends on there being hosts allocated to the appropriate group (which is what's in the contents of the file)12:04
odyssey4measi93 ^12:04
odyssey4meI recommend you work through the deploy guide to gain an understanding of the host allocations.12:05
odyssey4methe bootstrap-aio process only sets up the config for a known configuration (an all-in-one) which is used for testing and development12:06
asi93odyssey4me: i want to install aio with ironic since i'm installing openstack this way this for the first time and just want to test ironic; do you suggest me to rather start by installing with deployment&target hosts then AIO (I will only use one machine for this task for now)?12:12
odyssey4measi93 I'm not entirely sure it's possible to use ironic in a meaningful way with a single host. andymccr ?12:12
odyssey4meIronic requires a bare metal host to be available to enroll12:13
odyssey4measi93 but still - after you execute bootstrap-aio, just copy ironic.aio.yml into /etc/openstack_deploy/conf.d/12:13
evrardjpodyssey4me: I've answered for this: https://review.openstack.org/#/c/43225712:13
odyssey4meonce you've done that, continue with the execution of the playbooks and Ironic will be installed12:13
odyssey4methanks evrardjp12:14
andymccrasi93: yeah whta odyssey4me said is pretty accurate - there is work to get some virtual testing - but its pending upstream work at this point (for OSA at least) - and even then it will be to manage a pre-created virsh instance12:17
asi93maybe just another question about AIO install; with each AIO install i get "configuration error - unknown item 'FAIL_DELAY' (notify administrator)" message when logging into system; as far as i found out this is because FAIL_DELAY is deprecated in /etc/login... but seems like openstack-ansible is setting this value12:22
*** rgogunskiy has quit IRC12:22
*** rgogunskiy has joined #openstack-ansible12:23
*** manheim has joined #openstack-ansible12:24
*** retreved_ has joined #openstack-ansible12:25
evrardjpso, fun thing12:25
evrardjppackage module sucks12:25
evrardjpA little digging shows that it uses the setup module to discover the facts, but instantiate the search with no proper argument to use the fact cache12:26
*** retreved has quit IRC12:27
evrardjpor maybe I'm wrong12:28
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/newton: Remove 3DES from gnocchi_ssl_cipher_suite  https://review.openstack.org/43222012:28
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/newton: Remove 3DES from keystone_ssl_cipher_suite  https://review.openstack.org/43222612:30
*** faizy_ has joined #openstack-ansible12:31
*** thorst_ has joined #openstack-ansible12:33
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/newton: Provide default horizon_ssl variables  https://review.openstack.org/43222412:34
*** Jack_Iv has quit IRC12:34
*** Jack_Iv has joined #openstack-ansible12:35
*** Jack_Iv has quit IRC12:39
*** asi93 has quit IRC12:39
andymccrasi93: that seems to be in the openstack-ansible-security role - if you could file a bug about that it'd be great.12:39
*** jamesdenton has joined #openstack-ansible12:40
odyssey4mehmm, it looks like some of the nova services take a long time to start up12:42
odyssey4meI just waited 2 minutes for the api-metadata service to start12:43
odyssey4meI suspect that we need to quite urgently sort out the ordering of service startups12:43
*** admin0_ has joined #openstack-ansible12:45
*** jamesden_ has joined #openstack-ansible12:45
*** markvoelker has quit IRC12:46
*** markvoelker has joined #openstack-ansible12:46
evrardjpI see what you did there odyssey4me ;)12:46
*** jamesdenton has quit IRC12:46
*** phalmos has quit IRC12:47
*** admin0_ has quit IRC12:47
*** Jack_Iv has joined #openstack-ansible12:50
odyssey4mewow, the ARA report on os_nova has taken more than 5 mins to generate already12:50
odyssey4meok, it seems it's around 5 mins on the dot12:51
*** admin0_ has joined #openstack-ansible12:52
*** jamesden_ has quit IRC12:52
odyssey4methe ocata/uca patch has finally merged into os_nova12:53
andymccr\o/12:56
*** faizy_ has quit IRC12:56
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova master: Skip nova service wait when auto discovery enabled  https://review.openstack.org/43229112:57
odyssey4meevrardjp please review https://review.openstack.org/43143212:57
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova master: Implement cell auto enrollment  https://review.openstack.org/43229112:58
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest master: Add libpq-dev to install os_tempest plugins  https://review.openstack.org/43165612:59
*** rgogunskiy has quit IRC12:59
andymccrsweet we're finally getting all the stuff in to make other thngs go :)13:00
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum master: Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant  https://review.openstack.org/43004313:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ironic master: Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant  https://review.openstack.org/42997713:02
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova master: Enable cell auto enrollment  https://review.openstack.org/43229113:03
*** phalmos has joined #openstack-ansible13:03
openstackgerritMerged openstack/openstack-ansible master: Ensures the host IP isn't used for containers  https://review.openstack.org/43086913:04
openstackgerritMerged openstack/openstack-ansible stable/newton: Remove 3DES from ssl_cipher_suite  https://review.openstack.org/43184013:04
odyssey4meevrardjp I'm guessing you'll want to backport https://review.openstack.org/430869 all the way back to newton ?13:05
*** sdake has joined #openstack-ansible13:06
*** phalmos has quit IRC13:08
*** faizy has joined #openstack-ansible13:19
*** Amit82 has quit IRC13:19
*** woodard has joined #openstack-ansible13:23
*** asi93 has joined #openstack-ansible13:24
asi93odyssey4me: i found there really is a bug... playbooks/inventory/group_vars/all.yml has 'ironic_service_name: ironic' instead of 'ironic_service_user_name: ironic'; there is _user missing in ironic_service_name13:26
asi93using stable/newton 15.0.0.0rc113:27
*** woodard has quit IRC13:27
odyssey4measi93 if you're using 15.0.0.0rc1 then you're using stable/ocata or the master branch13:32
odyssey4mebut yes, that sounds like a bug - please file it13:33
*** asi93 has quit IRC13:39
odyssey4meandymccr we'll have to get https://review.openstack.org/432311 merged in order for our ironic role tests to pass13:42
mgariepymorning everyone13:42
andymccrpushing it through13:45
andymccrthere are a few that don't yet have a branch - its frustrating13:45
*** manheim has quit IRC13:48
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible stable/newton: Ensures the host IP isn't used for containers  https://review.openstack.org/43231313:49
evrardjpodyssey4me: yes indeed13:49
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Remove ssl_cipher_suite from test vars  https://review.openstack.org/43180613:53
openstackgerritMerged openstack/openstack-ansible master: Remove 3DES from ssl_cipher_suite  https://review.openstack.org/43179213:53
openstackgerritMerged openstack/openstack-ansible-security master: Correct minimum Ansible version in readme  https://review.openstack.org/43041313:54
*** gouthamr has joined #openstack-ansible13:56
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum stable/newton: Remove ssl_cipher_suite from test vars  https://review.openstack.org/43231514:01
evrardjpso, for the record, I remove what I said about package module.14:02
evrardjp:p14:02
boxrick1cloudnull: Are you around?14:02
openstackgerritMarc Gariépy proposed openstack/openstack-ansible master: [WIP] Add CentOS support for AIO setup  https://review.openstack.org/40769014:04
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova master: Enable cell auto enrollment  https://review.openstack.org/43229114:05
*** v1k0d3n has quit IRC14:06
*** v1k0d3n has joined #openstack-ansible14:07
*** retreved_ has quit IRC14:08
*** retreved has joined #openstack-ansible14:10
*** jamesdenton has joined #openstack-ansible14:13
*** Andrew_jedi has quit IRC14:16
*** Amit82 has joined #openstack-ansible14:17
*** markb1 has joined #openstack-ansible14:21
*** jamesdenton has quit IRC14:23
*** jperry has joined #openstack-ansible14:23
*** jamesdenton has joined #openstack-ansible14:25
*** jperry has quit IRC14:28
*** cathrichardson has joined #openstack-ansible14:28
*** jperry has joined #openstack-ansible14:28
*** klamath has joined #openstack-ansible14:29
andymccrjohnthetubaguy: if you're about can you maybe give your thoughts on https://review.openstack.org/#/c/432291/ - im not too sure when it would be appropriate or detrimental to enable auto_discovery for cells14:30
*** cathrich_ has quit IRC14:30
*** smatzek has quit IRC14:31
*** schwicht has quit IRC14:31
*** The_Intern has joined #openstack-ansible14:31
*** schwicht has joined #openstack-ansible14:32
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova master: Enable cell auto enrollment  https://review.openstack.org/43229114:33
logan-noted the intervals in the commit msg14:33
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova master: Enable cell auto enrollment  https://review.openstack.org/43229114:34
odyssey4meBOOM Dragonflow is in Ocata oanson :)14:34
andymccrnice!14:35
andymccra lot of work went in - glad to have it land14:35
logan-:D14:36
*** sdake_ has joined #openstack-ansible14:36
mgariepymhayden, are you there ?14:36
mhaydenyes14:36
mgariepymhayden, do you have an ubuntu deployment on similar hw as your centos one ?14:36
mhaydennot at the moment14:37
mgariepyhow long does the haproxy-playbook take to run ?14:37
*** agrebennikov_ has joined #openstack-ansible14:37
*** fguillot has joined #openstack-ansible14:37
mgariepythe with_items tasks on centos seems really slow to me compared to ubuntu.14:38
*** sdake has quit IRC14:39
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Add libpq-dev to install os_tempest plugins  https://review.openstack.org/43165614:40
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/newton: Add libpq-dev to install os_tempest plugins  https://review.openstack.org/43233214:41
*** ngupta has joined #openstack-ansible14:45
mgariepyit's like 1.3 sec per service config on centos and the equivalent on ubuntu is like .5 sec14:45
*** ngupta_ has joined #openstack-ansible14:45
mhaydenmgariepy: that's peculiar14:47
mhaydeni wonder if we have ssh shenanigans of some sort14:48
mrhillsmanwhen trying to use stable/ocata14:48
mhaydenandymccr: so i started monkeying around with telegraf plugins last night http://grafana.major.io:3000/dashboard/db/openstack-ansible-gerrit14:48
mrhillsmanhttps://bugs.launchpad.net/openstack-ansible/+bug/166361614:48
openstackLaunchpad bug 1663616 in openstack-ansible "os-nova-install stalls for hours and re-run requires deleting cell" [Undecided,New]14:48
*** ngupta has quit IRC14:49
hughsaundershey yall, can anyone remind me how to get ansible-playbook to execute modules on localhost in a venv? I'm trying -e ansible_python_interpreter=blah but doesn't seem to be working :/14:49
mrhillsmani know all things are not ready yet, so just throwing this one out there14:49
mrhillsmanran into it last night14:49
odyssey4memrhillsman I suspect that may be resolved in the next sha bump now that we have https://review.openstack.org/431660 & https://review.openstack.org/431663 merged (in the last hour or so)14:49
andymccrnice mhayden!14:49
lbragstadqq folks here might know the answer to - does running `tox -e upgrade` for a various project role require tox from pip or packages?14:49
*** aludwar has joined #openstack-ansible14:50
mrhillsmancool thx odyssey4me14:50
lbragstadI default to using tox from pip14:50
odyssey4melbragstad we use it from pip, typically14:50
logan-mrhillsman: yep that's https://review.openstack.org/#/c/431663/ :)14:50
lbragstadodyssey4me are there documented issues with using tox from packages?14:50
andymccr^ fixed :)14:50
odyssey4meif the version of tox used is more than 2.0 then it should be fine: https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tox.ini#L214:50
* mrhillsman runs back to his little corner14:51
odyssey4melbragstad the primary reason for that minversion is for https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tox.ini#L10 to work14:51
odyssey4methat's the same minversion throughout openstack14:51
lbragstadcc dolphm ^14:52
lbragstaddolphm that sounds oddly like what you're seeing?14:52
lbragstadodyssey4me dolphm is using tox from packages following similar steps to what I was doing yesterday - but hitting an issue http://cdn.pasteraw.com/jb4990p595se33if0dwovydql1tghiw14:52
dolphmlbragstad: i'm using tox 2.3.1-4 from xenial packaging14:52
odyssey4meyeah, if tox isn't at that version, the pip install will fail with an error relating to not understanding the command14:53
lbragstaddolphm aha - so technically that satisfies the version14:53
odyssey4meoh interesting, that looks like a crytography related install failure14:54
dolphmodyssey4me: the error seems vague, but i assumed it was because i was missing libssl-dev headers? that did not fix it though14:55
*** udesale has joined #openstack-ansible14:55
dolphmodyssey4me: i'm running bootstrap-ansible on the host first now, before running tox -e upgrade14:55
odyssey4medolphm try installing all thepackages in bindep ?14:55
lbragstadodyssey4me fwiw - i wasn't hitting that yesterday but I was not using tox from package (i used pip for everything)14:55
odyssey4mebootstrap-ansible will install a small horde of packages :o14:56
*** smatzek has joined #openstack-ansible14:56
dolphmodyssey4me: ooh, i didn't realize os_keystone had it's own bindep, cool14:56
dolphmodyssey4me: i'll try that14:56
*** vnogin has quit IRC14:57
lbragstadodyssey4me does `tox -e upgrade` not run the bindeps for os_keystone?14:58
*** crushil has joined #openstack-ansible14:58
odyssey4melbragstad nope, bindep.txt is executed prior to running tox in the gate14:58
lbragstadodyssey4me ah14:58
odyssey4meyou'll see in run_tests.sh that we install pip, then install tox and bindep, then execute the tox envs14:59
odyssey4mewe could probably modify run_tests.sh to allow you to select the environment to run so that it doesn't force you to run them all14:59
odyssey4methen you could just execute the test with one command ;)14:59
lbragstadhttps://github.com/openstack/openstack-ansible-os_keystone/blob/master/run_tests.sh#L3215:00
*** v1k0d3n has quit IRC15:01
*** v1k0d3n has joined #openstack-ansible15:01
*** david-lyle has joined #openstack-ansible15:03
*** cloader89 has joined #openstack-ansible15:04
*** cloader8_ has joined #openstack-ansible15:06
*** sanfern has quit IRC15:06
*** sanfern has joined #openstack-ansible15:07
*** cloader89 has quit IRC15:09
*** Andrew_jedi has joined #openstack-ansible15:09
*** lucas_ has joined #openstack-ansible15:10
*** faizy_ has joined #openstack-ansible15:14
*** faizy has quit IRC15:17
cloudnullboxrick1: I am now15:18
boxrick1Excellent, I was hoping you could clarify something.15:19
boxrick1Your comment from yesterday: https://review.openstack.org/#/c/428770/3/multi-node-aio/openstack-service-setup.sh <--15:19
cloudnullyes :)15:20
boxrick1Can you explain what you mean for me ?15:20
cloudnulloh, i was seeing that variable file load in the other files.15:20
dolphmodyssey4me: lbragstad: figured it out. tox from ubuntu packaging was using python3, so everything i was doing to fix python2 was ineffective15:20
*** fxpester has quit IRC15:20
cloudnullso if that was executed by itself and that var had been changed in that file15:20
cloudnullit would potentially try and create a flat network that would not work in the environment.15:21
cloudnullso making it like https://review.openstack.org/#/c/428770/3/multi-node-aio/build.sh may be of some assistance .15:21
cloudnullthough i could be missing something.15:21
cloudnullso feel free to say im wrong :)15:21
boxrick1The variables.sh was a late amendment so that was an oversight on my part15:22
boxrick1You are correct15:22
*** sacharya has joined #openstack-ansible15:23
boxrick1We use variables.sh to override a whole bunch of stuff as opposed to just the network config.15:23
*** cmart has joined #openstack-ansible15:23
cloudnull++ i think its useful15:23
boxrick1Ill fix that now, cheers15:24
lbragstaddolphm aha -  i always forget about that with ubuntu 16.0515:24
lbragstader... 16.0415:24
*** ssmith_ has joined #openstack-ansible15:25
*** sacharya has quit IRC15:27
openstackgerritRick Box proposed openstack/openstack-ansible-ops master: Adds in network config - removes hardcoded values  https://review.openstack.org/42877015:28
*** cmart1 has joined #openstack-ansible15:28
*** cmart has quit IRC15:28
*** sacharya has joined #openstack-ansible15:33
*** esberglu has joined #openstack-ansible15:35
*** whiteveil has joined #openstack-ansible15:35
*** jperry has quit IRC15:36
*** michaelgugino has joined #openstack-ansible15:36
*** jperry has joined #openstack-ansible15:37
*** yolanda has quit IRC15:38
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant  https://review.openstack.org/43004315:38
*** yolanda has joined #openstack-ansible15:38
*** Mr_Smurf has quit IRC15:38
dolphmrofl http://cdn.pasteraw.com/6msnqv5whiaakglmprm5qr70s33vnzd15:40
evrardjpAHAH15:40
palendaeYou really broke it this time, dolphm15:42
spotzdolphm is breaking things?:)15:42
dolphmspotz: that's all i know how to do15:43
odyssey4megrr, ironic doesn't have a stable/ocata branch yet either :/15:43
spotzdolphm: You forgot being scary and drinking gimlits, that gives you 3 skills:)15:43
*** admin0_ has quit IRC15:43
dolphmyay #skillful15:43
odyssey4mecores, we could do with some votes on some of these: https://review.openstack.org/#/q/topic:create-ocata+project:%255Eopenstack/openstack-ansible.*+status:open15:43
*** admin0_ has joined #openstack-ansible15:44
*** udesale has quit IRC15:44
odyssey4medolphm haha, of course xenial wants you to use python315:45
odyssey4meI did notice that, but it didn't quite register the red flag it should have15:45
odyssey4mewe should probably add this line to ensure the right python is used: https://github.com/openstack/openstack-ansible/blob/master/tox.ini#L915:46
palendaeodyssey4me: That's telling tox what to use to build the venvs, not what tox is invoked with15:47
palendaetox is invoked with your system python15:47
openstackgerritMarc Gariépy proposed openstack/openstack-ansible master: [WIP] Add CentOS support for AIO setup  https://review.openstack.org/40769015:47
palendaeInterpreter shell game!15:47
* odyssey4me packs it in, throws laptop out the window15:47
*** DanyC has quit IRC15:47
*** chris_hultin|AWA is now known as chris_hultin15:48
spotzodyssey4me: ironic failed the gate fyi15:48
odyssey4mespotz yep, because there is no stable/ocata ironic15:48
*** cmart1 has quit IRC15:48
*** DanyC has joined #openstack-ansible15:48
spotzodyssey4me: That's the convo I walked in on:)15:48
* odyssey4me shakes a fist at jroll15:48
*** DanyC has quit IRC15:49
odyssey4meyou can safely ignore the failed ones15:49
openstackgerritMerged openstack/openstack-ansible-os_ironic master: Install python2 for Ubuntu 16.04 and CentOS 7 in Vagrant  https://review.openstack.org/42997715:49
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: Allow the usage of own repos instead of uca/rdo  https://review.openstack.org/43235915:50
spotzodyssey4me: Ok if they were green and happy I looked at them and reviewed the reds and -1 workflows I skipped poke when you want those looked at. Gonna go do workie stuffage15:51
*** marst has quit IRC15:52
odyssey4mespotz yeah, those are all stalled due to other shenanigans15:52
odyssey4methanks!15:52
*** crushil has quit IRC15:54
*** mnaser has joined #openstack-ansible15:55
*** cmart has joined #openstack-ansible15:56
*** jpstnh has joined #openstack-ansible15:58
*** adrian_otto has joined #openstack-ansible16:00
*** cmart has quit IRC16:00
*** marst has joined #openstack-ansible16:02
*** retreved_ has joined #openstack-ansible16:04
*** retreved has quit IRC16:05
*** karimb has joined #openstack-ansible16:05
*** crushil has joined #openstack-ansible16:06
*** retreved has joined #openstack-ansible16:07
*** galstrom_zzz is now known as galstrom16:08
*** Jack_Iv has quit IRC16:08
*** retreved_ has quit IRC16:09
*** Oku_OS is now known as Oku_OS-away16:10
openstackgerritMerged openstack/openstack-ansible stable/newton: Ensures the host IP isn't used for containers  https://review.openstack.org/43231316:12
*** lucas_ has quit IRC16:13
*** lucas_ has joined #openstack-ansible16:13
evrardjpSo, has someone checked on why ocata is borked?16:16
*** ngupta_ has quit IRC16:16
*** Jack_Iv has joined #openstack-ansible16:16
*** ngupta has joined #openstack-ansible16:17
*** admin0_ has quit IRC16:19
*** adrian_otto1 has joined #openstack-ansible16:22
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia master: [WIP] Octavia role hacking  https://review.openstack.org/41721016:23
*** admin0_ has joined #openstack-ansible16:24
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: [WIP] Allow the usage of own repos instead of uca/rdo  https://review.openstack.org/43235916:24
*** adrian_otto has quit IRC16:25
*** adrian_otto1 has quit IRC16:27
*** lucas_ has quit IRC16:27
*** adrian_otto has joined #openstack-ansible16:28
andymccrxgerman: on the octavia stuff - i see you copied over the heat role etc for testing i assume - if you're interested here is a sample role that will at least pass tests once you follow the steps: https://github.com/andymcc/openstack-ansible-cookiecutter_repo16:35
xgermanI think major  did the copying16:36
xgermanmhayden16:36
xgermanbut will use the better one16:36
*** cmart has joined #openstack-ansible16:38
andymccrif it works it works :) its more just an easy way to ensure you get everything setup - you could probably just apply the same steps to the role you already have16:40
*** Andrew_jedi has quit IRC16:46
*** pcaruana has quit IRC16:53
*** david-lyle has quit IRC16:53
*** admin0_ has quit IRC16:54
*** woodard has joined #openstack-ansible16:55
*** Jack_Iv has quit IRC16:55
*** Jack_Iv has joined #openstack-ansible16:55
*** FrankZhang has quit IRC16:56
odyssey4meandymccr xgerman yeah, and the heat role isn't one that gets much attention16:57
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: Allow the usage of own repos instead of uca/rdo  https://review.openstack.org/43235916:57
*** Jack_Iv_ has joined #openstack-ansible16:57
*** FrankZhang has joined #openstack-ansible16:58
*** Andrew_jedi has joined #openstack-ansible16:58
odyssey4meevrardjp ocata is borked? I thought that we were close to getting it unborked?16:58
*** whiteveil has quit IRC16:58
*** lucas_ has joined #openstack-ansible16:58
*** woodard has quit IRC16:59
evrardjpwell I didn't check but nothing seems to pass tempest16:59
evrardjpbut I may be wrong16:59
andymccrfor which role?17:00
evrardjpthe integrated17:00
andymccrahh my build is in now17:00
odyssey4mewell, we only just got nova back on track17:00
andymccrhttps://review.openstack.org/#/c/432243/ hasnt failed yet17:00
evrardjpbut something merged at 13;0417:00
andymccrshould be up to date17:00
odyssey4metempest just merged https://review.openstack.org/430750 so we have that working17:00
evrardjpweird17:00
*** Jack_Iv has quit IRC17:01
evrardjpok then it's just me then.. let me double check17:01
odyssey4mecould do with reviews of https://review.openstack.org/#/c/429821 and https://review.openstack.org/#/c/432361/17:01
*** japestinho_ has joined #openstack-ansible17:02
*** cmart has quit IRC17:02
odyssey4meand https://review.openstack.org/43143417:02
spotzlooking17:02
openstackgerritDolph Mathews proposed openstack/openstack-ansible-os_keystone master: Allow locust benchmarks to use zeromq  https://review.openstack.org/43238517:03
*** jpstnh has quit IRC17:04
odyssey4mequite a few are ready for review actually https://review.openstack.org/#/q/branch:stable/ocata+project:%255Eopenstack/openstack-ansible.*+status:open17:05
odyssey4mequite a few newton patches too: https://review.openstack.org/#/q/branch:stable/newton+project:%255Eopenstack/openstack-ansible.*+status:open17:06
*** ngupta has quit IRC17:07
*** ngupta has joined #openstack-ansible17:07
andymccrevrardjp: do we have a patch in to address https://review.openstack.org/#/c/418459/ in master?17:09
*** stevemar has left #openstack-ansible17:09
evrardjpI guess we technically have it in master now17:10
odyssey4meandymccr https://review.openstack.org/41779517:10
evrardjpbecause this was merged in master for a while17:10
odyssey4memerged a month ago17:10
andymccrno i mean to address the comments from cloudnull17:10
odyssey4meah17:10
evrardjpI don't agree17:10
openstackgerritMerged openstack/openstack-ansible-pip_install stable/newton: Use RDO/UCA everywhere  https://review.openstack.org/43225717:10
andymccrthat having it as a bool would be cleaner?17:12
evrardjpmy patch leaves the file templated as it was, making it an unobstructive change ( #DISALLOW_IFRAME_EMBED = stays the same), where the change of cloudnull modify the file17:12
odyssey4meevrardjp yes, for newton it makes sense to leave it as-is17:12
evrardjpso every newton will get horizon restarted on next playbook run17:12
odyssey4mebut in master it'd be cleaner to change it17:12
odyssey4methe point was not to change it in newton, but in master17:12
andymccrmy main point is - we often have the situation where its "ok thats better but its a backport so just land it" which i agree with - but then i'd like to see the better version make master.17:13
evrardjpfeel free to do it in master if you want, I think we discussed too much on this :p17:13
odyssey4meandymccr I'll work up  a patch now17:14
andymccrodyssey4me: sweet thanks!17:14
odyssey4meI'll trade you - if you can work up a patch to make the cinder upgrade test work the better way :)17:14
evrardjpI still don't think it's a good idea. I'm glad with staying close to standard shipped file17:14
andymccrwell my sha bump isn't failing yet! so that's good17:15
evrardjpif we are to do it, I suggest we rethink the way we manage the horizon file17:15
evrardjpmaybe I jinxed mine.17:15
odyssey4meevrardjp as you said, far too much discussion about something that's pretty aribtrary17:15
andymccrevrardjp: yeah i think the main thing is if people do reviews on backports its nice to follow up on those reviews rather than just forget about it. if its really not a better idea then fair enough!17:15
evrardjpwell I guess we could have different ideas, which is fine too, it's a community, we are not forced to be 100% in agreement :p17:17
*** faizy_ has quit IRC17:17
*** FrankZhang has quit IRC17:17
evrardjpI think if this gets backported, it does its job17:17
evrardjpfor the initial use case17:17
evrardjpand I moved on :p17:17
andymccrall good17:18
openstackgerritDolph Mathews proposed openstack/openstack-ansible-os_keystone master: Reduce number of locust clients  https://review.openstack.org/43239117:18
andymccri'm out for now! have a great weekend everybody. also the sha bump failed - will follow that up later!17:18
evrardjpenjoy your weekend !17:19
evrardjphaha. unlucky. let's see that on monday, I'm off too!17:19
*** vnogin has joined #openstack-ansible17:19
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon master: Expose horizon_disallow_iframe_embed in defaults  https://review.openstack.org/43239217:20
*** DanyC has joined #openstack-ansible17:22
*** DanyC has quit IRC17:22
*** DanyC has joined #openstack-ansible17:23
jrollodyssey4me: sorry, we'll have ocata soon. yesterday was the goal :)17:23
*** cmart has joined #openstack-ansible17:24
odyssey4mejroll with all the shenanigans in nova/neutron, I expect you've also had to tussle through a bunch of things to get it all right17:24
odyssey4mewe've only just managed to get that settled today17:24
jrollodyssey4me: not too bad from there, but when grenade branched we broke hard17:24
*** vnogin has quit IRC17:24
odyssey4meheh, they pulled the pin :p17:25
jrollwe've just got some release notes cleanup to go, maybe a bug fix or two if something came up this morning, but should be today/monday17:25
jrolllol17:25
odyssey4mesounds good - we'll keep an eye out on it17:25
jrollcool :)17:25
*** david-lyle has joined #openstack-ansible17:31
*** Jack_Iv_ has quit IRC17:34
*** automagically has quit IRC17:36
*** Jack_Iv has joined #openstack-ansible17:37
*** whiteveil has joined #openstack-ansible17:45
*** sanfern has quit IRC17:45
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/newton: Make possible to use embed iframes  https://review.openstack.org/41845917:46
*** sanfern has joined #openstack-ansible17:46
*** sanfern has quit IRC17:46
*** phalmos has joined #openstack-ansible17:50
odyssey4meandymccr https://review.openstack.org/432243 needed the designate bits - patch updated17:52
odyssey4medolphm lbragstad has https://review.openstack.org/432391 achieved the desired results?17:53
lbragstadodyssey4me it works for me17:54
Andrew_jediJust ran into this magnum bug in my env, https://bugs.launchpad.net/magnum/+bug/1643197. And overriding the magnum.conf is npt helping either17:54
openstackLaunchpad bug 1643197 in Magnum "os_magnum role uses internal VIP inside instances" [Undecided,New]17:54
lbragstadodyssey4me i was thinking about your suggestion to modify https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/keystone_install.yml17:54
lbragstadodyssey4me would a sane starting point be to set a variable (keystone_local = path/to/local/keystone/source/) that gets installed from a venv?17:55
odyssey4melbragstad I was thinking along the lines of changing it up to do a bind mount into the container for the git repo, then doing some sort of 'detect existing checkout, and leave it alone' in the install process17:56
lbragstadodyssey4me ok - is there an example of that anywhere?17:59
odyssey4melbragstad we do an unfortunately complicated thing similar for the repo-server/repo-build in order to allow the use of a git clone cache18:00
odyssey4melbragstad detection: https://github.com/openstack/openstack-ansible/blob/master/playbooks/repo-server.yml#L2318:01
odyssey4mebind mount https://github.com/openstack/openstack-ansible/blob/master/playbooks/repo-server.yml#L4718:01
lbragstadodyssey4me and i'm assuming this would be done prior to these steps - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/keystone_install.yml#L17618:01
*** phalmos has quit IRC18:01
odyssey4melbragstad the thing that tells us what version to install is here: https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/keystone_install.yml#L15518:03
odyssey4methat comes from here: https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L3418:03
odyssey4meso, I'm not sure if it'd be as simple as overriding https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L30 to be a file location18:04
*** cmart has left #openstack-ansible18:04
odyssey4meobviously that needs to be a file location that's available in the container, which is where the bind mount comes into play18:04
odyssey4mehmm, let me fire up a test box and give it a try18:05
*** Jack_Iv has quit IRC18:08
*** Jack_Iv has joined #openstack-ansible18:09
lbragstadodyssey4me wrapping up a test run the modifies the locust command quick and I'll be on the same page18:09
openstackgerritMerged openstack/openstack-ansible stable/newton: Var target security playbook host group  https://review.openstack.org/42810018:10
*** adrian_otto has quit IRC18:11
odyssey4medolphm lbragstad oh neat, no fails: http://logs.openstack.org/91/432391/1/check/gate-openstack-ansible-os_keystone-ansible-upgrade-ubuntu-xenial-nv/099d6d6/console.html#_2017-02-10_17_43_26_62410918:11
lbragstadodyssey4me sweet!18:13
*** lucas_ has quit IRC18:14
*** Jack_Iv has quit IRC18:14
*** lucas_ has joined #openstack-ansible18:14
*** yolanda has quit IRC18:14
*** Jack_Iv has joined #openstack-ansible18:15
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_nova stable/newton: Implementing stricter permissions on config files  https://review.openstack.org/43241218:16
*** yolanda has joined #openstack-ansible18:16
openstackgerritLance Bragstad proposed openstack/openstack-ansible-os_keystone master: Use registered variables for locust commands  https://review.openstack.org/43241318:17
*** Jack_Iv has quit IRC18:17
*** Jack_Iv has joined #openstack-ansible18:18
*** DanyC has quit IRC18:19
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_neutron stable/newton: Implementing stricter permissions on config files  https://review.openstack.org/43241518:19
*** DanyC has joined #openstack-ansible18:19
*** phalmos has joined #openstack-ansible18:20
*** crushil has quit IRC18:20
odyssey4melbragstad does https://review.openstack.org/432413 work?18:20
odyssey4meie does it take a URL as an argument?18:21
lbragstadodyssey4me yeah - it passed for me locally18:21
lbragstaddoing `tox -e upgrade`18:21
odyssey4meok cool, sounds good - we can wait to verify in the gate18:21
openstackgerritLance Bragstad proposed openstack/openstack-ansible-os_keystone master: Use registered variables for locust commands  https://review.openstack.org/43241318:22
*** Jack_Iv has quit IRC18:22
dolphmodyssey4me: \o/18:24
odyssey4melbragstad I'm waiting for a functional test env to get stood up to play with and try to figure out an improved developer mode18:25
*** weezS has joined #openstack-ansible18:26
lbragstadodyssey4me sweet18:26
odyssey4meif we can get the basic idea working it'd be awesome :)18:26
*** admin0_ has joined #openstack-ansible18:26
lbragstadodyssey4me yeah - the bind mount idea sounds like it will give us the flexibility to do what we need18:27
lbragstadthen all we'd really have to do is pull a patch onto the deployment how and make sure it's available in the variable (?)18:28
*** Amit82 has quit IRC18:30
*** admin0_ has quit IRC18:32
odyssey4meo/ jmccrory18:34
lbragstaddeployment host*18:34
jmccroryhey odyssey4me18:34
odyssey4melbragstad yeah, so the idea would be that your host has your checkout18:34
lbragstad++18:34
lbragstadand the ansible bits are just to install whatever that is18:34
odyssey4meyep18:35
odyssey4meideally this should just key off of the existing keystone_developer_mode var18:35
odyssey4meand maybe a path18:35
odyssey4methe less that needs to be set, the better18:35
lbragstadand we would define those here - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/keystone-test-vars.yml ?18:36
odyssey4memaybe, I'm hoping to make it auto-detect18:36
odyssey4meso basically it should try to figure out if the working directory is the os_keystone role, or the keystone service git source18:37
odyssey4methen react accordingly18:37
*** crushil has joined #openstack-ansible18:37
odyssey4meI'm not sure how an infra job that executes another repo's tox env would work though18:38
*** MasterOfBugs has joined #openstack-ansible18:40
odyssey4mefor a development workflow though, we should be able to give it some sort of default location where a git source might be expected on the host18:40
odyssey4mesimilar to what we do for the repo build18:40
*** admin0_ has joined #openstack-ansible18:44
*** esberglu has quit IRC18:45
lbragstadhmm18:47
*** sdake_ has quit IRC18:48
odyssey4mejmccrory if you could take a look at https://review.openstack.org/430298 that'd be grand18:51
mgariepyandymccr, odyssey4me do you think we can merge https://review.openstack.org/#/c/407690/ even if the centos test timeout ?18:53
jmccroryodyssey4me : got it. that's nice18:56
*** sdake has joined #openstack-ansible18:57
odyssey4memgariepy I'm in favor of merging something, then continuing work from there on.18:57
odyssey4meobviously it'll mean that reviewers need to test themselves, which isn't great18:57
odyssey4mebut yeah, if you can add the docs bits and remove the todo list from the commit message then I'd be happy to vote it through (once I've actually reviewed)18:57
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Reduce number of locust clients  https://review.openstack.org/43239118:58
mgariepyyeah, the further i got the test to go in the 90 minutes was installing tempest.18:58
odyssey4mejmccrory yeah, in pike we can do more of that and ditch all the templates we carry18:58
odyssey4mewell, a lot of them18:58
odyssey4memgariepy that's not bad going18:58
odyssey4meobviously there's room to improve performance and we should definitely go for that, but I think having an experimental centos status for ocata will be worth while18:59
odyssey4melbragstad ok, I think I've got something that'll work - now to prep a patch for it19:00
lbragstadodyssey4me woo!19:01
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone master: Add failure condition to upgrade test  https://review.openstack.org/43242619:03
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/newton: Add libpq-dev to install os_tempest plugins  https://review.openstack.org/43233219:03
lbragstaddolphm ^19:03
dolphmlbragstad: does that not affect master?19:03
dolphmlbragstad: oh, nvm19:04
*** poopcat has joined #openstack-ansible19:04
lbragstadthis is cool - https://review.openstack.org/#/c/432426/1/tests/test-benchmark-keystone-upgrade-results.yml19:04
dolphmlbragstad: i've only used master so far today19:04
mgariepyok great, i'll fix that.19:04
*** whiteveil has quit IRC19:04
odyssey4mejmccrory I agree with lbragstad, that's awesome :)19:05
odyssey4mealthough, perhaps that condition should be something we can enable/disable?19:05
odyssey4meie in our gate we disable it, but in the keystone gate it should be enabled19:06
odyssey4methat said, perhaps we should just bug the keystone team every time their upgrades are crappy :p19:06
jmccroryyeah, maybe. the results have all been pretty promising so far, but i can see it becoming a hassle if this starts running into problems and this test is voting19:06
lbragstadodyssey4me first we need to define "crappy" :)19:07
*** The_Intern has quit IRC19:07
odyssey4melbragstad if you want that tag, you gotta make it awesome... well outside of any definition of crappy19:07
odyssey4meI have faith in you.19:07
odyssey4meDO IT19:07
lbragstadideally - it would be awesome is if locust gave some more information (like apachebench) and then actually output it in parsable formats19:08
dolphmspecifically standard deviations :)19:09
*** karimb has quit IRC19:10
*** esberglu has joined #openstack-ansible19:12
*** poopcat has quit IRC19:12
openstackgerritMerged openstack/openstack-ansible-os_magnum stable/newton: Remove ssl_cipher_suite from test vars  https://review.openstack.org/43231519:14
*** FrankZhang has joined #openstack-ansible19:16
lbragstadjmccrory testing https://review.openstack.org/#/c/432426/1 locally now19:17
odyssey4mejmccrory want to punch these through? https://review.openstack.org/432231 & https://review.openstack.org/43223019:17
*** Jack_Iv has joined #openstack-ansible19:18
*** schwicht has quit IRC19:18
*** schwicht has joined #openstack-ansible19:19
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Use registered variables for locust commands  https://review.openstack.org/43241319:19
*** schwicht has quit IRC19:19
*** Jack_Iv has quit IRC19:20
*** The_Intern has joined #openstack-ansible19:20
*** schwicht has joined #openstack-ansible19:21
*** schwicht has quit IRC19:23
openstackgerritDolph Mathews proposed openstack/openstack-ansible-os_keystone master: Set locust clients to be 1:1 with server threads  https://review.openstack.org/43243319:25
*** poopcat has joined #openstack-ansible19:25
*** The_Intern has quit IRC19:25
*** schwicht has joined #openstack-ansible19:25
*** sdake_ has joined #openstack-ansible19:29
*** schwicht_at_work has joined #openstack-ansible19:30
ssmith_Can someone point me in the right direction? We're deploying with 14 Compute nodes and would like to deploy into 4 Availability Zones. Is this possible via the ansible deployment?19:30
*** schwicht has quit IRC19:30
*** sdake has quit IRC19:32
*** FrankZhang has quit IRC19:32
*** lucas_ has quit IRC19:33
*** phalmos has quit IRC19:33
*** electrofelix has quit IRC19:35
*** lucas_ has joined #openstack-ansible19:37
odyssey4messmith_ you can setup and allocate AZ's after the deployment is done19:39
*** pramodrj07 has joined #openstack-ansible19:41
openstackgerritDolph Mathews proposed openstack/openstack-ansible-os_keystone master: Set a maximum request timeout for benchmarks  https://review.openstack.org/43243719:44
*** stuartgr has left #openstack-ansible19:44
*** vnogin has joined #openstack-ansible19:44
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_keystone master: Add failure condition to upgrade test  https://review.openstack.org/43242619:45
jmccrorymade it more readable19:45
*** whiteveil has joined #openstack-ansible19:48
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia master: [WIP] Octavia role hacking  https://review.openstack.org/41721019:53
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_neutron master: [WIP] Adds Octavia to Neutron  https://review.openstack.org/42897919:54
openstackgerritDolph Mathews proposed openstack/openstack-ansible-os_keystone master: Allow locust benchmarks to use zeromq  https://review.openstack.org/43238519:54
*** The_Intern has joined #openstack-ansible19:59
jrosser_cloudnull: on a multinode-aio is there an easy way to reconnect any bridges on the host that have become detached from the vms?20:00
*** karimb has joined #openstack-ansible20:01
jrosser_for exmaple we fiddle with the bridge configs a bit and stuff becomes unlinked, and a pile of ip link blah blah to put it all back20:01
*** david-lyle has quit IRC20:03
*** vnogin has quit IRC20:10
*** whiteveil has quit IRC20:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Get conf files from local git server rather than upstream  https://review.openstack.org/43029820:11
admin0_hi all .. i am having issues here:   TASK [os_cinder : Add in cinder devices types] *********************************20:11
stevellejgriffiths: to be really fair, I think you're onto something with load_inventory instead of load_from_json -- I just hadn't completed the work of hiding load_from_json which does feel like it doesn't quite belong.20:11
admin0_fatal: [c16]: FAILED! => {"failed": true, "msg": "the field 'args' has an invalid value, which appears to include a variable that is undefined. The error was: 'dict object'20:11
admin0_has no attribute 'volume_backend_name'\n\nThe error appears to have been in '/etc/ansible/roles/os_cinder/tasks/cinder_backends.yml': line 30, column 3, but may\nbe elsewher20:11
admin0_e in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: Add in cinder devices types\n  ^ here\n"}20:11
admin0_oops20:11
admin0_sorry .. multi line20:11
jgriffithsActually. That solved it right away20:11
stevelleperfect20:12
admin0_this is a NFS build , and as per the example provided20:12
jgriffithsI'm moving the inline code in main to functions as well so I can write tests for them20:12
stevelle+1 jgriffiths20:12
stevellewe don't want to test libraries but once the args are parsed everything else should be testable20:13
stevellerefactoring location of arg parse may make that easier too20:13
admin0_config and error message here: https://gist.github.com/a1git/0e5bbbd72582578ee6aa3a5f54d0a49620:13
odyssey4meadmin0_ I think you may be hitting a known issue - which branch is that on?20:14
admin0_stable/newton20:14
*** skuda has quit IRC20:14
admin0_last commit: 232401ff5be61bdf3bd56eef1a616fed1a2e3274     Merge "Move scenario variables under vars" into stable/newton20:14
admin0_3 days ago20:15
admin0_i see i am late already20:15
*** whiteveil has joined #openstack-ansible20:15
odyssey4meadmin0_ I think we have a fix in already, but our sha bump hasn't merged20:15
admin0_aah20:16
admin0_ok20:16
odyssey4mehttps://review.openstack.org/42784020:16
odyssey4mealso https://github.com/openstack/openstack-ansible-os_cinder/commit/841bf7f5da13f77e8fd271f266ab45a907e0b4ff20:16
odyssey4meI think we'll also need to update the documentation20:16
admin0_when is the sha scheduled to be merged ?20:17
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible stable/mitaka: Remove 3DES from ssl_cipher_suite  https://review.openstack.org/43244320:17
odyssey4mewe're waiting for the previous release to be done, which is waiting for the stable team20:17
logan-i'm not seeing how that fix is related to the error though. the error says volume_backend_name is not set20:17
*** adrian_otto has joined #openstack-ansible20:17
odyssey4mehopefully next week20:17
logan-and in your config you have volume_backend_name commented20:18
admin0_yes, because when i enable that, there are more errors20:18
logan-gotcha20:18
odyssey4methere was a ML post recently about this20:18
odyssey4mehang on20:18
admin0_i added them myself to see if i can solve it myself20:18
odyssey4mehttps://bugs.launchpad.net/openstack-ansible/+bug/166158620:18
openstackLaunchpad bug 1661586 in openstack-ansible "Breaking change to NFS config in os_cinder stable/newton" [Undecided,Fix released]20:18
odyssey4mesee in the description the link to the ML post20:19
odyssey4mein there is a working config20:19
logan-ahh yeah20:19
admin0_i can move to the new way, if there is a proper example on the new config20:22
admin0_but the example and the docs point to the old way20:22
*** vnogin has joined #openstack-ansible20:22
*** woodard has joined #openstack-ansible20:23
openstackgerritMarc Gariépy proposed openstack/openstack-ansible master: Add CentOS support for AIO setup  https://review.openstack.org/40769020:29
mgariepyodyssey4me, I added release notes but I thinkg i'll edit the quickstart-aio to add some indication on running it on Centos.20:29
odyssey4meadmin0_ yep, we need to close the loop on it20:29
odyssey4meunfortunately the person who submitted the patch to change it doesn't seem to care much to update the docs20:30
admin0_i can do the docs, if i get a working code that works at least 3 tries :)20:30
odyssey4memgariepy it'll need something in the deploy guide too just to show that centos is supported too20:30
admin0_i am in a dilemma if i move to the new or shift to old20:31
odyssey4meadmin0_ there are docs changes here: https://github.com/openstack/openstack-ansible-os_cinder/commit/841bf7f5da13f77e8fd271f266ab45a907e0b4ff20:31
odyssey4meoh lovely, scratch that - no docs there either20:31
*** sdake_ has quit IRC20:31
odyssey4meargh20:31
odyssey4meoh, this is where I was thinking of https://github.com/openstack/openstack-ansible-os_cinder/commit/e6c2b14c717568b6f6284e614d170081c4283cce20:32
admin0_but this is not merged yet right ?20:33
odyssey4methat is already merged20:33
odyssey4mebut the deploy guide hasn't been adjusted20:33
odyssey4meie the example configs in the deploy guide20:33
*** marst has quit IRC20:34
admin0_i see it20:34
odyssey4methis file need updating to the new method: https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.prod.example20:34
*** ngupta_ has joined #openstack-ansible20:37
*** lucas_ has quit IRC20:37
*** Jack_I has quit IRC20:39
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone master: [WIP] Use a custom git checkout in developer mode  https://review.openstack.org/43244920:39
odyssey4melbragstad ^ that's a very rough start20:39
odyssey4methe checkout location is fixed to /opt/keystone right now20:39
openstackgerritMarc Gariépy proposed openstack/openstack-ansible master: Add CentOS support for AIO setup  https://review.openstack.org/40769020:39
odyssey4meand I haven't tested it very thoroughly, but I think it's working20:39
mgariepyhave a nice weekend everyone20:39
odyssey4meIt's definitely time for me to weekend. :)20:40
* lbragstad muahaha20:40
lbragstadodyssey4me thank you - your version looks way better than what I have locally20:40
lbragstadodyssey4me I'll test!20:40
lbragstadcc dolphm ^20:40
*** ngupta has quit IRC20:40
mgariepylol odyssey4me are you sure ? :P it's only 3:40 pm here.. it's a bit early ;)20:40
*** ngupta_ has quit IRC20:42
odyssey4memgariepy 8:42pm here20:42
odyssey4mehave a great weekend!20:42
mgariepycya20:42
*** lucas_ has joined #openstack-ansible20:43
admin0_i am having trouble putting the info together to a working code: https://gist.github.com/a1git/0e5bbbd72582578ee6aa3a5f54d0a496#gistcomment-199433820:52
admin0_never mind :D20:52
admin0_please ignore me20:52
*** marst has joined #openstack-ansible20:53
*** woodard_ has joined #openstack-ansible20:58
admin0_running with the new ode .20:59
*** karimb has quit IRC20:59
*** woodard has quit IRC21:01
*** whiteveil has quit IRC21:02
*** Znnq has quit IRC21:04
*** karimb has joined #openstack-ansible21:04
*** whiteveil has joined #openstack-ansible21:06
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible stable/mitaka: Remove 3DES from ssl_cipher_suite  https://review.openstack.org/43244321:07
*** fguillot has quit IRC21:08
*** Znnq has joined #openstack-ansible21:09
*** The_Intern has quit IRC21:10
admin0_the change worked, but when I try to make a volume, i get : error due to: No valid host was found. No weighed hosts available error_out21:11
*** ngupta has joined #openstack-ansible21:11
Andrew_jediI am tring to setup magnum and it can work if we can allow the VMs to reach public endpoint of Keystone, but the public entpoint is "https" and then magnum throws the SSL error at me :/ :( :(21:11
Andrew_jediSSLError: SSL exception connecting to https://192.168.50.220:5000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)21:12
Andrew_jediIs it somehow possible to change the public "https" endpoints ?21:14
*** jamesdenton has quit IRC21:14
*** admin0_ has quit IRC21:16
*** jamesdenton has joined #openstack-ansible21:16
*** crushil has quit IRC21:17
*** crushil has joined #openstack-ansible21:18
*** sacharya has quit IRC21:18
*** sacharya has joined #openstack-ansible21:18
*** crushil has quit IRC21:23
*** sdake has joined #openstack-ansible21:29
*** sdake has quit IRC21:32
*** smatzek has quit IRC21:32
*** karimb has quit IRC21:33
*** crushil has joined #openstack-ansible21:35
*** lenserpgo has quit IRC21:35
*** retreved has quit IRC21:37
*** rmelero has joined #openstack-ansible21:38
*** chris_hultin is now known as chris_hultin|AWA21:42
*** rmelero has quit IRC21:43
*** crushil has quit IRC21:43
*** askb has joined #openstack-ansible21:43
cloudnullAndrew_jedi: do you want to make them http only ?21:44
Andrew_jedicloudnull: Yes, and i am to cry :(21:44
Andrew_jedi*about to21:44
Andrew_jediMagnum has given me a lot of stress :/21:45
cloudnull:'(21:45
*** crushil has joined #openstack-ansible21:46
Andrew_jedicloudnull: I tried this "keystone_service_publicuri_proto: http" but that only made the endpoint "http" but authentication still failed21:46
cloudnullAndrew_jedi: https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L9121:46
cloudnulland then https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L9421:47
cloudnullI believe, with those two set accordingly it'll do the needful21:48
Andrew_jedicloudnull: wow, it was here and i was searching all over in /etc/ansible/roles .. :/21:48
*** whiteveil has quit IRC21:49
cloudnullyea, sorry.21:50
cloudnulli think we should doc this in case someone else comes along wanting to disable ssl21:51
*** whiteveil has joined #openstack-ansible21:53
*** gouthamr has quit IRC21:56
*** lucas_ has quit IRC21:56
Andrew_jedicloudnull: Looks like i have to delete the "https" endpoint first and then re-run the keystone playbook ...22:00
cloudnullah yes. the keystone endpoints will all need to be changed.22:00
cloudnullyou can do that in the db22:00
*** lucas_ has joined #openstack-ansible22:01
cloudnullmysql; use keystone; UPDATE endpoint SET url = REPLACE(url, 'http://', 'https://') WHERE interface = 'public';22:03
cloudnullthen you should be good to go .22:03
cloudnulloops. the replace would be in reverse22:03
*** vnogin has quit IRC22:04
Andrew_jedicloudnull: ahhh ... thanks! :) .. changing those now ..22:08
*** thorst_ has quit IRC22:09
Andrew_jedicloudnull: ConnectFailure: Unable to establish connection to http://192.168.50.220:5000/v3/auth/tokens: ('Connection aborted.', BadStatusLine("''",))22:11
cloudnullis the internal url still working ?22:12
Andrew_jedicloudnull: Now that i know how to disable ssl, i think i can work my way around these issues :)22:12
Andrew_jediYes22:12
cloudnullwith ssl diabled you'll need to rerun the haproxy play22:13
*** jamesdenton has quit IRC22:13
cloudnullif you've not already22:13
Andrew_jedioops i did not22:13
*** crushil has quit IRC22:13
cloudnullthen you might want to rerun the keystone playbook with the tag keystone-config so that should there be any config changes everything will be up-to-date22:14
Andrew_jedicloudnull: Roger that. Btw does this look fine to you ?http://paste.openstack.org/show/598465/22:15
openstackgerritRavi Kumar Boyapati proposed openstack/openstack-ansible-security master: Fix the regex  https://review.openstack.org/43248422:16
*** lucas_ has quit IRC22:18
*** esberglu has quit IRC22:19
*** esberglu has joined #openstack-ansible22:19
*** mmalik4 has joined #openstack-ansible22:21
*** esberglu has quit IRC22:24
*** mmalik4_ has joined #openstack-ansible22:29
*** thorst_ has joined #openstack-ansible22:29
*** mmalik4 has quit IRC22:31
*** esberglu has joined #openstack-ansible22:33
*** thorst_ has quit IRC22:34
cloudnullAndrew_jedi: lgtm22:35
*** esberglu has quit IRC22:37
*** agrebennikov_ has quit IRC22:39
*** michaelgugino has quit IRC22:43
*** cloader8_ has quit IRC22:45
*** whiteveil has quit IRC22:49
*** david-lyle has joined #openstack-ansible22:55
*** jperry has quit IRC22:55
*** whiteveil has joined #openstack-ansible22:57
*** ngupta has quit IRC22:58
*** jamielennox is now known as jamielennox|away22:58
*** david-lyle has quit IRC23:04
Andrew_jedicloudnull: thanks a lot for the help...I owe you beer. I have not yet been able to fire magnum cluster successfully but now my chances have increased significantly...Have a great weekend :)23:06
cloudnullnp Andrew_jedi23:08
cloudnullhave a good one.23:08
*** whiteveil has quit IRC23:13
*** ssmith_ has quit IRC23:18
*** gouthamr has joined #openstack-ansible23:20
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/newton: Implementing stricter permissions on config files  https://review.openstack.org/43241523:21
*** marst has quit IRC23:22
*** markb1 has quit IRC23:25
*** mmalik4_ has quit IRC23:30
*** crushil has joined #openstack-ansible23:35
*** woodard_ has quit IRC23:37
*** adreznec has quit IRC23:47
*** adreznec has joined #openstack-ansible23:47
*** jamielennox|away is now known as jamielennox23:50
*** Disova has quit IRC23:53
lbragstadquick question - if you run `tox -e upgrade` locally, one the tests finish is there a way to get the logs from the contains (it looks like they cleaned up after the runs)23:56
lbragstadspecifically the keystone logs like this - http://logs.openstack.org/49/432449/1/check/gate-openstack-ansible-os_keystone-ansible-upgrade-ubuntu-xenial-nv/ff62b5d/logs/openstack/keystone1/keystone/ ?23:56
lbragstadthose aren't available on the deployment host at all after the run are they?23:57
*** ngupta has joined #openstack-ansible23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!