Thursday, 2017-03-02

*** jrobinson_ has joined #openstack-ansible00:05
*** jrobinson_ is now known as jrobinson00:05
*** whiteveil has joined #openstack-ansible00:07
*** hybridpollo has quit IRC00:09
*** jmckind has quit IRC00:13
*** hybridpollo has joined #openstack-ansible00:16
*** jamesdenton has joined #openstack-ansible00:21
*** BjoernT has quit IRC00:25
*** acormier has quit IRC00:26
*** schwicht has joined #openstack-ansible00:27
*** acormier has joined #openstack-ansible00:28
*** acormier has quit IRC00:29
*** thorst has joined #openstack-ansible00:31
*** manheim has joined #openstack-ansible00:34
*** thorst has quit IRC00:36
*** sdake has quit IRC00:36
*** thorst has joined #openstack-ansible00:41
*** sdake has joined #openstack-ansible00:42
*** May-meimei has quit IRC00:46
*** mpjetta has quit IRC00:52
*** cuongnv has joined #openstack-ansible00:56
*** jmckind has joined #openstack-ansible00:56
*** cuongnv has quit IRC00:56
*** cuongnv has joined #openstack-ansible00:57
*** thorst has quit IRC01:01
*** crushil has joined #openstack-ansible01:03
*** cjloader has joined #openstack-ansible01:04
cloudnullstevelle: ping01:06
stevellecloudnull: pong01:06
*** acormier has joined #openstack-ansible01:07
*** ngupta has quit IRC01:07
*** cloudtrainme has joined #openstack-ansible01:10
*** jmckind is now known as jmckind_01:13
*** cjloader has quit IRC01:14
*** jmckind_ is now known as jmckind01:14
*** jamielennox is now known as jamielennox|away01:16
*** whiteveil has quit IRC01:23
*** May-meimei has joined #openstack-ansible01:23
*** dimtheo_ has quit IRC01:24
*** karimb has quit IRC01:30
*** jmckind is now known as jmckind_01:32
*** jmckind_ is now known as jmckind01:34
*** jmckind is now known as jmckind_01:34
*** jmckind_ is now known as jmckind01:34
*** whiteveil has joined #openstack-ansible01:35
*** sanfern has quit IRC01:36
*** cjloader has joined #openstack-ansible01:44
*** joelgriffiths has quit IRC01:44
*** adrian_otto has quit IRC01:44
*** cjloader has quit IRC01:45
*** jrobinson is now known as jrobinson-afk01:48
*** acormier has quit IRC01:57
*** cjloader has joined #openstack-ansible02:00
*** jmckind has quit IRC02:00
*** manheim has quit IRC02:00
*** jrobinson-afk is now known as jrobinson02:02
*** chhavi has joined #openstack-ansible02:03
*** manheim has joined #openstack-ansible02:06
*** Mahe has quit IRC02:07
*** chhavi has quit IRC02:07
*** cjloader has quit IRC02:08
*** jamesden_ has joined #openstack-ansible02:09
*** smatzek_ has joined #openstack-ansible02:09
*** whiteveil has quit IRC02:09
*** Mahe has joined #openstack-ansible02:09
*** smatzek_ has quit IRC02:09
*** smatzek_ has joined #openstack-ansible02:10
*** hybridpollo has quit IRC02:10
*** sdake_ has joined #openstack-ansible02:10
*** sdake has quit IRC02:13
*** jamesden_ has quit IRC02:15
*** mmalik4_ has quit IRC02:15
*** ngupta has joined #openstack-ansible02:16
*** jamesden_ has joined #openstack-ansible02:19
*** MasterOfBugs has quit IRC02:20
*** cjloader has joined #openstack-ansible02:22
*** smatzek_ has quit IRC02:22
*** cjloader has quit IRC02:23
*** cjloader has joined #openstack-ansible02:24
*** agrebennikov_ has quit IRC02:24
*** schwicht has quit IRC02:26
*** hybridpollo has joined #openstack-ansible02:26
*** manheim has quit IRC02:27
*** sdake_ is now known as sdake02:28
*** woodard has joined #openstack-ansible02:28
*** cjloader has quit IRC02:29
*** woodard has quit IRC02:32
*** ngupta has quit IRC02:33
*** ngupta has joined #openstack-ansible02:33
*** ngupta has quit IRC02:38
*** esberglu has joined #openstack-ansible02:43
*** esberglu has quit IRC02:48
*** hybridpollo has quit IRC02:49
*** hybridpollo has joined #openstack-ansible02:50
jamesdentonhey cloudnull - quick question02:50
*** sanfern has joined #openstack-ansible02:50
cloudnullo/02:52
cloudnullwhat's up ?02:52
*** gouthamr has quit IRC02:53
*** pjh03 has joined #openstack-ansible02:53
*** cloudtrainme has quit IRC02:53
jamesdentonwell - let me verify again before i ask :P02:54
dmsimardcloudnull: UI rework is merging \o/02:55
dmsimardI'm cutting a release candidate tonight and I'll test it in your gate02:55
cloudnullwoot!02:55
cloudnullthat's awesome02:55
dmsimardit's much much more performant since you last looked at it :)02:56
*** pjh03 has quit IRC02:57
jamesdentoncloudnull Does the keystone service user have an rsa key generated at some point?02:59
cloudnulldmsimard: nice!03:00
cloudnulli look forward to using it soon :)03:00
jamesdentonkeystone system user, rather. In the keystone container(s)03:00
cloudnulljamesdenton: there's an ssh key that's created for the keystone user03:00
cloudnullwhich is used to sync the fernet tokens03:00
jamesdentonright. that task is failing for me, and I was digging around looking for that key03:01
cloudnullthat key should be in the /var/lib/keystone dir03:01
cloudnullwell.. /var/lib/keystone/,ssh03:01
cloudnull .ssh03:01
cloudnulldamn cant type03:01
*** rpittau_ has joined #openstack-ansible03:02
jamesdentonthx.03:02
*** jamesden_ has quit IRC03:03
cloudnullok, gotta run. bbs03:03
jamesdentonthanks again03:04
*** rpittau has quit IRC03:04
openstackgerritDavid Moreau Simard proposed openstack/openstack-ansible-tests master: Do not merge: Test ARA 0.12.0rc1  https://review.openstack.org/43996203:04
*** hybridpolio has joined #openstack-ansible03:04
logan-jamesdenton are you having ssh key problems with keystone?03:06
jamesdentonlogan- yes.03:06
logan-multi-node on master?03:06
jamesdentonmulti-node on master03:06
logan-run with keystone_serial=100% in your vars or apply https://review.openstack.org/#/c/438219/03:07
*** hybridpollo has quit IRC03:08
jamesdentonawesome logan-, thank you03:09
logan-no prob :)03:10
jamesdentonglad to see i wasn't doing something dumb this time :P03:10
jamesdentonis master still Ocata?03:12
logan-no, the stable/ocata branch was cut a week or two back. master is now pike work03:12
openstackgerritDavid Moreau Simard proposed openstack/openstack-ansible master: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/39632403:13
openstackgerritDavid Moreau Simard proposed openstack/openstack-ansible master: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/39632403:13
jamesdentongotcha. I found last week that stable/ocata seemed to be missing some of the sr-iov bits. will have to look again03:14
*** ngupta has joined #openstack-ansible03:15
logan-ahh yeah I think some of that just merged in the last few days. it might not be picked to the ocata branch yet. if you see something missing please push backports to ocata so we can get it completely implemented there03:16
jamesdentonwill do03:16
*** hybridpollo has joined #openstack-ansible03:25
dmsimardlogan-: o/ new ara version live in the gate: http://logs.openstack.org/62/439962/1/check/gate-openstack-ansible-tests-ansible-func-centos-7/f9fc8c2/logs/ara/reports/index.html03:39
dmsimardtook me a couple keystrokes and clicks to see that tempest failed on missing run_tempests.sh :D03:40
dmsimardtasks -> search box: failed and click on the failed label03:40
logan-that's awesome03:41
logan-beats scrolling thru the gate logs :P03:42
dmsimardbeats scrolling through 10MB+ of gate logs*03:42
logan-i was excited to see you mention the new version is much more efficient yesterday... hopefully that means we might be able to get it running in the integrated gate :)03:42
*** mmalik4 has joined #openstack-ansible03:43
dmsimardlogan-: yup, that review has it for integrated gate I believe: https://review.openstack.org/#/c/396324/03:43
*** hybridpolio has quit IRC03:44
dmsimardit's rc1 but if everything goes well and nothing looks broken I'll cut the release tomorrow -- currently testing it in a couple places first https://review.openstack.org/#/q/topic:ara-0.1203:44
logan-oool03:44
logan-cool*03:44
dmsimardso far so good03:44
dmsimardI gotta poke infra so that they look at my .svg image rendering issue fix on logs.o.o :(03:45
*** thorst has joined #openstack-ansible03:50
*** thorst has quit IRC03:50
sdakehey folks if your interested in cross project collaboration with other projects please join #openstack-deployment03:57
*** mmalik4 has quit IRC04:01
*** shausy has joined #openstack-ansible04:02
*** udesale has joined #openstack-ansible04:07
*** whiteveil has joined #openstack-ansible04:10
*** whiteveil has quit IRC04:12
*** poopcat has quit IRC04:21
*** thorst has joined #openstack-ansible04:32
*** thorst has quit IRC04:32
*** esberglu has joined #openstack-ansible04:32
*** Jeffrey4l has joined #openstack-ansible04:32
*** jrobinson is now known as jrobinson-afk04:35
*** esberglu has quit IRC04:36
*** poopcat has joined #openstack-ansible04:38
*** adrian_otto has joined #openstack-ansible04:38
*** acormier has joined #openstack-ansible04:39
*** hybridpollo has quit IRC04:43
*** hybridpollo has joined #openstack-ansible04:52
*** hybridpollo has quit IRC04:53
*** adrian_otto has quit IRC04:54
*** h5t4 has joined #openstack-ansible04:57
*** crushil has quit IRC04:57
*** poopcat has quit IRC04:58
*** thorst has joined #openstack-ansible05:03
*** sunjon_ has quit IRC05:07
*** sdake has quit IRC05:08
*** chhavi has joined #openstack-ansible05:14
*** thorst has quit IRC05:16
*** acormier has quit IRC05:28
*** yolanda has quit IRC05:35
*** Jack_Iv has joined #openstack-ansible05:46
openstackgerritDarren Chan proposed openstack/openstack-ansible master: [docs] Add content to the troubleshooting chapter  https://review.openstack.org/44014405:46
*** h5t4 has quit IRC05:54
*** jrobinson-afk is now known as jrobinson05:56
*** arturb has quit IRC06:03
*** ngupta has quit IRC06:18
*** esberglu has joined #openstack-ansible06:21
*** esberglu has quit IRC06:26
*** lwiecek has joined #openstack-ansible06:29
*** Jack_Iv has quit IRC06:41
*** Amit82 has joined #openstack-ansible06:41
*** Jack_Iv has joined #openstack-ansible06:42
Amit82Hi All06:44
Amit82I have deployed Openstack using Openstack Ansible. I am using Newton release from tag 14.0.8. My test environment is containing only Compute Node and Controller Node (Infra Node).06:44
Amit82When using python sdk, I am getting following error while making connection to externalviblp_address (192.168.255.45) binded to port 500006:45
Amit82openstack.exceptions.SDKException: Connection failure that may be retried.06:45
Amit82Any clue about this issue? More detailed traces are at:06:45
Amit82 http://paste.openstack.org/show/601053/06:45
*** Jack_Iv_ has joined #openstack-ansible06:46
*** Jack_Iv has quit IRC06:47
*** h5t4_ has joined #openstack-ansible06:51
*** vnogin has joined #openstack-ansible06:54
*** McMurlock1 has joined #openstack-ansible07:03
*** vnogin has quit IRC07:08
*** hwoarang has quit IRC07:28
*** hwoarang has joined #openstack-ansible07:29
*** Jack_Iv_ has quit IRC07:33
*** Jack_Iv has joined #openstack-ansible07:34
*** Jack_Iv has quit IRC07:35
*** Jack_Iv has joined #openstack-ansible07:35
*** jrobinson has quit IRC07:46
*** Jack_Iv has quit IRC08:00
*** Jack_Iv has joined #openstack-ansible08:01
*** Jack_Iv has quit IRC08:06
*** esberglu has joined #openstack-ansible08:10
*** winggundamth has joined #openstack-ansible08:10
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-galera_server stable/ocata: Cap the number of worker threads  https://review.openstack.org/44019008:13
*** pcaruana has joined #openstack-ansible08:13
*** esberglu has quit IRC08:15
*** retreved has quit IRC08:15
*** retreved has joined #openstack-ansible08:16
lwiecekHello everyone08:29
lwieceki have a question. I want to install ONLY keystone with the ansible role.. No rabbitmq, nothing, just pure keystone without containers on target node. How am I supposed to configure the openstack-ansible role to only install keystone? I know that i have to change property is_metal to true, to avoid containers, what else? how to disable rabbitmq and such stuff?08:30
*** Jack_Iv has joined #openstack-ansible08:31
*** DFFlanders has joined #openstack-ansible08:40
*** sunjon_ has joined #openstack-ansible08:45
*** sdake has joined #openstack-ansible08:51
*** sdake_ has joined #openstack-ansible08:51
*** sdake has quit IRC08:55
*** fandi has joined #openstack-ansible09:04
*** fandi has quit IRC09:09
rabel_b1jeffrey4l : would you mind to open https://bugs.launchpad.net/kolla-ansible/+bug/1669075 again? At least until someone gives a comment in the bug why this is not a bug. Because in my opinion it is, as I said there.09:11
openstackLaunchpad bug 1669075 in kolla-ansible "kolla-ansible pull with kolla_ansible-4.0.0.0rc1 fails, because of missing tag in docker registry" [Undecided,Invalid]09:11
*** thorst has joined #openstack-ansible09:13
rabel_b1sry, wrong channel09:14
*** thorst has quit IRC09:18
*** DanyC has joined #openstack-ansible09:18
*** arturb has joined #openstack-ansible09:23
*** Jeffrey4l has quit IRC09:25
*** Jeffrey4l has joined #openstack-ansible09:25
*** udesale__ has joined #openstack-ansible09:26
*** udesale has quit IRC09:28
*** Oku_OS-away is now known as Oku_OS09:30
*** Jeffrey4l has quit IRC09:31
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-galera_server stable/ocata: Cap the number of worker threads  https://review.openstack.org/44019009:34
*** electrofelix has joined #openstack-ansible09:37
*** chhavi has quit IRC09:38
*** chhavi has joined #openstack-ansible09:38
*** DimGR has joined #openstack-ansible09:39
*** sdake_ is now known as sdake09:41
*** Jeffrey4l has joined #openstack-ansible09:43
*** IRC-Source_71442 has joined #openstack-ansible09:43
*** sprvn has joined #openstack-ansible09:47
*** udesale__ has quit IRC09:47
*** udesale has joined #openstack-ansible09:48
*** IRC-Source_71442 is now known as Chekov09:50
ChekovHi all, I have a question about an openstack-ansible install. Specfically, the galera container install fails due to a SSL validation problem of the haproxy connection to the repo server.09:51
ChekovIt crashed like this:09:51
Chekovhttps://thepasteb.in/p/qjhLZ7pzXljcB09:52
odyssey4melwiecek if you just want keystone on a host, then just use the keystone role and your own playbook09:52
odyssey4meyou'll need to work out the vars that need setting, but that's how you do it09:52
odyssey4meyou're making your life complicated by trying other ways09:52
odyssey4meI referred you to the integrated build playbook as a reference, not to use for your use case09:53
ChekovHowever, if I try to access the file via curl or wget using https things work if I register the haproxy cert on the galera container09:53
Chekovwhat am I doing wrong?09:53
*** manheim_ has joined #openstack-ansible09:56
evrardjphad someone a look at nea1's issue?09:56
DimGRHi  I have a host which has a subnet/27 routed to it , so it can use a floating ip . My question is this : should this host go under network_hosts: or under compute_hosts in user_config.yml ?09:58
*** manheim_ has quit IRC09:58
*** manheim_ has joined #openstack-ansible09:58
evrardjpnea1: so, long story short, you have a clean ubuntu 16.04 from upstream, you are using default AIO, and you have issues with rabbitmq09:58
*** esberglu has joined #openstack-ansible09:59
*** chhavi has quit IRC09:59
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/166912509:59
openstackLaunchpad bug 1669125 in openstack-ansible "rabbitmq-server fails so start with ubuntu16.04" [Undecided,New]09:59
*** cuongnv has quit IRC10:03
*** esberglu has quit IRC10:03
evrardjpI think I may have found the problem10:05
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova master: Change /etc/default/libvirt-bin to libvirtd  https://review.openstack.org/44028410:06
DimGRanyone ?10:07
nea1evrardjp: no AIO10:09
odyssey4meandymccr any idea why the upgrade test in https://review.openstack.org/#/c/438002/ is failing?10:09
andymccrodyssey4me: yeah - basically the libvirt changes are blocking it10:09
odyssey4meah, this one? https://review.openstack.org/43976010:10
andymccrhttps://review.openstack.org/#/c/440284/ and this10:10
andymccrthen it should work - although an AIO upgrade wont work due to some funky nova-ness10:10
andymccrwhich im working on today10:10
*** sdake has quit IRC10:18
*** hachi has quit IRC10:19
*** adogrant has joined #openstack-ansible10:22
*** sdake has joined #openstack-ansible10:22
*** admin0 has joined #openstack-ansible10:24
admin0\o/ — i am in reading :D10:24
admin0netherlands => germany => netherlands => belgium => france => uk — 5 countries in 10 hours :)10:25
adograntHi all, We have a OSA Mitaka install and all of a sudden we are no longer to launch instances. I have narrowed it down to glance being the issue and I am seeing some oddness in the logs. Has anyone come across this before?:10:25
adogrant2017-03-02 10:17:56.701 2110 ERROR glance.registry.client.v1.client10:25
adogrant2017-03-02 10:17:56.702 2110 ERROR glance.common.wsgi [req-c490de71-e9db-4e3d-a1b1-53a4033c10f0 ad7e01d762024a3485263e0abafa98bc 8ff3028a3b4048cfbc226f28fb1385ca - - -] Caught error: The request returned a 302 Multiple Choices. This genera10:25
adograntlly means that you have not included a version indicator in a request URI.10:25
adograntdidn't want to do a full stack trace in here10:25
*** udesale__ has joined #openstack-ansible10:26
admin0The request returned a 302 Multiple Choices. — 2 images of the same name ?10:26
adograntI thought that -  but I have just done an image list and they all seem different:10:27
*** udesale has quit IRC10:28
*** udesale__ has quit IRC10:30
*** chhavi has joined #openstack-ansible10:30
adograntwhenever I try to create an instance via CLI the complaint is: Could not find resource: image-id10:30
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova stable/newton: Set libvirt default file to a variable  https://review.openstack.org/44031810:32
*** askb has quit IRC10:33
*** doda has joined #openstack-ansible10:36
dodahi folks10:36
nea1evrardjp: "I think I may have found the problem"?10:37
admin0adogrant: openstack server create   --flavor m1.small   --image "centos" --key-name mykey.pub    --security-group default  --nic net-id=UUID instance-name10:38
admin0openstack image list will give you the names10:38
admin0nto sure what you are seeing10:38
*** admin0 has quit IRC10:41
*** sdake has quit IRC10:41
*** sanfern has quit IRC10:44
adograntI seem to have the right details - here is an image example:10:46
*** admin0 has joined #openstack-ansible10:47
adogrant| d5d43ba0-82e9-43de-8883-5ebaf07bf3e3 | Ubuntu-16.04                                                  | active |10:47
adograntmy command:10:47
adograntopenstack server create --flavor g1.small --image "Ubuntu-16.04" --key-name ib-desktop --security-group default --nic net-id=e2d925f0-63c1-442f-9158-6a138e5847ce gmtest10:47
adogranterror is: Could not find resource Ubuntu-16.0410:47
*** admin0 has quit IRC10:47
*** manheim_ has quit IRC10:49
*** manheim_ has joined #openstack-ansible10:50
*** DFFlanders has quit IRC10:51
*** manheim_ has quit IRC10:51
*** manheim_ has joined #openstack-ansible10:51
*** sanfern has joined #openstack-ansible10:54
odyssey4memhayden I've added the monitoring library suggestion as a cross-project topic for deployment tooling here: https://etherpad.openstack.org/p/deployment-pike10:56
dodawhat is a replacement for scripts/run-playbooks.sh ?10:56
dodai'm trying to do an AIO install10:56
odyssey4meandymccr I've also added the bits that we discussed with the openstack-helm crew10:56
odyssey4mev1k0d3n ^10:56
odyssey4medoda run-playbooks is still there10:57
andymccrodyssey4me: ahh sweet thanks odyssey4me10:57
dodayeah but it gives an info message and quits, The "scripts/run-playbooks.sh" script has exited. This script is no longer needed from now on.10:57
odyssey4medoda yes, once it's been run once, you should use the playbooks directly from then on10:58
odyssey4mein fact you don't need to use run-playbooks at all10:58
dodaah, yeah i see10:58
dodait printed a different error, i'll check that out10:58
dodaearly on, nothing was installed10:59
DimGRCan someone help debug this error please http://paste.openstack.org/show/601109/10:59
DimGRHmm it can not find ansible-playbook ?11:09
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon stable/ocata: Use horizon_ssl_protocol variable  https://review.openstack.org/43988511:11
*** sdake has joined #openstack-ansible11:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon stable/newton: Use horizon_ssl_protocol variable  https://review.openstack.org/43988811:13
*** Jack_Iv has quit IRC11:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon stable/mitaka: Use horizon_ssl_protocol variable  https://review.openstack.org/43988911:13
*** Jack_Iv has joined #openstack-ansible11:13
*** Amit82 has quit IRC11:14
*** thorst has joined #openstack-ansible11:14
*** sanfern has quit IRC11:15
*** sprvn has quit IRC11:17
*** Jack_Iv has quit IRC11:18
*** thorst has quit IRC11:19
*** dileepr has quit IRC11:19
pjm6good morning11:20
*** Chekov has quit IRC11:20
pjm6anyone here could do authentication in rabbitmq web management console ?11:20
pjm6with user monitoring and pass provided in user_secrets.yml ?11:20
*** Chekov has joined #openstack-ansible11:21
evrardjpnea1: sorry I was in a meeting11:23
evrardjpwoops w/c11:24
*** chhavi has quit IRC11:34
*** Andrew_jedi has joined #openstack-ansible11:34
*** manheim_ has quit IRC11:38
*** manheim_ has joined #openstack-ansible11:38
*** stuartgr has joined #openstack-ansible11:39
*** manheim_ has quit IRC11:43
*** chhavi has joined #openstack-ansible11:43
*** Chekov has quit IRC11:45
*** sdake has quit IRC11:49
*** sdake has joined #openstack-ansible11:50
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-galera_client master: Updated from global requirements  https://review.openstack.org/44039911:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-galera_server master: Updated from global requirements  https://review.openstack.org/44040011:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-haproxy_server master: Updated from global requirements  https://review.openstack.org/44040111:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-lxc_container_create master: Updated from global requirements  https://review.openstack.org/44040211:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-lxc_hosts master: Updated from global requirements  https://review.openstack.org/44040311:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-memcached_server master: Updated from global requirements  https://review.openstack.org/44040411:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-openstack_hosts master: Updated from global requirements  https://review.openstack.org/44040511:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-openstack_openrc master: Updated from global requirements  https://review.openstack.org/44040611:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-ops master: Updated from global requirements  https://review.openstack.org/44040711:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_aodh master: Updated from global requirements  https://review.openstack.org/44040811:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_barbican master: Updated from global requirements  https://review.openstack.org/44040911:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_ceilometer master: Updated from global requirements  https://review.openstack.org/44041011:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_cinder master: Updated from global requirements  https://review.openstack.org/44041111:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_cloudkitty master: Updated from global requirements  https://review.openstack.org/44041211:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_designate master: Updated from global requirements  https://review.openstack.org/44041311:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_glance master: Updated from global requirements  https://review.openstack.org/44041411:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_gnocchi master: Updated from global requirements  https://review.openstack.org/44041511:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_heat master: Updated from global requirements  https://review.openstack.org/44041611:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_horizon master: Updated from global requirements  https://review.openstack.org/44041711:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_ironic master: Updated from global requirements  https://review.openstack.org/44041811:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_keystone master: Updated from global requirements  https://review.openstack.org/44041911:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_magnum master: Updated from global requirements  https://review.openstack.org/44042011:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca master: Updated from global requirements  https://review.openstack.org/44042111:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_neutron master: Updated from global requirements  https://review.openstack.org/44042211:51
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_nova master: Updated from global requirements  https://review.openstack.org/44042311:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_rally master: Updated from global requirements  https://review.openstack.org/44042411:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_sahara master: Updated from global requirements  https://review.openstack.org/44042511:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_swift master: Updated from global requirements  https://review.openstack.org/44042611:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_tempest master: Updated from global requirements  https://review.openstack.org/44042711:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_trove master: Updated from global requirements  https://review.openstack.org/44042811:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_watcher master: Updated from global requirements  https://review.openstack.org/44042911:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_zaqar master: Updated from global requirements  https://review.openstack.org/44043011:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-pip_install master: Updated from global requirements  https://review.openstack.org/44043111:52
*** manheim_ has joined #openstack-ansible11:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-plugins master: Updated from global requirements  https://review.openstack.org/44043311:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-rabbitmq_server master: Updated from global requirements  https://review.openstack.org/44043411:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-repo_build master: Updated from global requirements  https://review.openstack.org/44043511:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-repo_server master: Updated from global requirements  https://review.openstack.org/44043611:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-rsyslog_client master: Updated from global requirements  https://review.openstack.org/44043711:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-rsyslog_server master: Updated from global requirements  https://review.openstack.org/44043811:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-security master: Updated from global requirements  https://review.openstack.org/44044011:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-specs master: Updated from global requirements  https://review.openstack.org/44044111:52
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-tests master: Updated from global requirements  https://review.openstack.org/44044211:52
*** sdake_ has joined #openstack-ansible11:55
*** sdake has quit IRC11:56
evrardjpnot proposal bot11:57
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-rabbitmq_server master: Reload systemd-daemon in all cases  https://review.openstack.org/44046311:57
nea1evrardjp: welcome back then ^^12:04
nea1so what was your idea?12:04
*** T42X has joined #openstack-ansible12:05
evrardjpthe one just above12:06
evrardjpbut that shouldn't be solving your issue12:06
evrardjpprobably12:06
*** winggundamth has quit IRC12:09
*** sdake_ is now known as sdake12:09
nea1evrardjp: nope, hasn't helped12:10
evrardjpok12:11
evrardjpMan that's a crazy bug12:11
evrardjpso everything works, except rabbitmq12:11
evrardjpright?12:11
evrardjprabbitmq doesn't start in your rabbitmq container12:12
evrardjpyou double checked12:12
nea1mysql server is running12:12
evrardjpand rabbitmqctl status12:12
nea1on the new node12:12
evrardjpok12:12
nea1yep, same error12:12
evrardjpepmd doesn't run either12:12
evrardjp?12:12
nea1on the other setup openstack network list etc. works, but server list not for e.g.12:13
evrardjpwait12:13
nea16005 /usr/lib/erlang/erts-7.3/bin/epmd -daemon12:13
evrardjpand beam?12:13
nea1nope, the daemon is there12:13
nea1the line above12:13
nea1yep12:13
evrardjpha, I thought you said it didn't work?12:13
nea1it doesn't12:14
evrardjpso rabbitmqctl cluster_status works?12:14
nea1the process is there but seams like nothing helse12:14
nea1* unable to connect to epmd (port 4369) on hetzner1: address (cannot connect to host/port)12:14
evrardjpnetstat -lntp | grep epmd ?12:14
evrardjpgrep -e epmd -e beam just to be sure12:15
nea1both there12:15
nea1with multiple ports12:16
evrardjpwhere do you see this issue?12:16
nea1 unable to connect to epmd (port 4369) on hetzner1: address (cannot connect to host/port)12:16
nea1as soon as i use rabbitmqctl [what-ever]12:17
nea1the ports are there but it seams like they are not responding12:17
Andrew_jedinea1: Hi, Is it possible that you could stop the haproxy and paste the output of "netstat -ntlp" ?12:19
evrardjpso when inside the container you see the port listed in netstat -ltnp but can't connect with rabbitmqctl cluster_status12:19
evrardjpAndrew_jedi: haproxy doesn't interface with rabbitmq IIRC12:19
evrardjpor maybe for its mgmt interface at best12:20
*** smatzek_ has joined #openstack-ansible12:20
Andrew_jedievrardjp: server controller_rabbit_mq_container-ea29cbde 172.29.239.164:15672 check port 15672 inter 12000 rise 3 fall 312:21
*** smatzek_ has quit IRC12:21
evrardjp15672 is the mgmt interface12:21
*** smatzek_ has joined #openstack-ansible12:21
evrardjpjust a website to do commands on rabbitmq12:21
evrardjp:p12:21
evrardjpwe used to not have that12:21
*** ngupta has joined #openstack-ansible12:22
nea1http://termbin.com/5uzn12:23
nea1evrardjp: yep, I can't connect12:24
DimGRHow can I solve this error ? ERROR! Unexpected Exception: [Errno 12] Cannot allocate memory     I think its specific to ansible12:25
DimGRAnd ram is still free12:26
nea1output of the commands from rabbitmq container: http://termbin.com/qoks12:26
evrardjpDimGR: could you be more specific?12:26
evrardjpnea1: haha12:26
evrardjprabbit@hetzner1:12:26
Andrew_jedievrardjp: Ahhh, okay!12:27
evrardjpnot 'rabbitmq-cli-22@hetzner1-rabbit-mq-container-d17233cb'12:27
evrardjpyou are trying to connect on the host there12:27
*** ngupta has quit IRC12:27
evrardjpcould you recheck your /etc/hosts?12:27
DimGRevrardjp this error pops up after a while of running the setup-hosts.yml12:28
evrardjpand your openstack_user_config or conf.d for rabbit ?12:28
evrardjpDimGR: Probably during your run, you'll hit an OOM with a container, then the container stops, and the ram is freed12:28
evrardjpso when you use free before and after, it seems ok12:29
nea1o_O12:29
*** sdake_ has joined #openstack-ansible12:29
DimGRthe target hosts have plenty of ram , should I increase the ram on my deployment host ?12:29
evrardjpnea1: your cluster seem to want to contact rabbit@hetzner1 which doesn't sound right12:29
nea1hosts http://termbin.com/2m9612:29
nea1yep, now that you say it12:29
nea1but from where does it get that hostname?12:30
nea1it is not in the haproxy config so of cause it won't work12:30
*** sdake has quit IRC12:30
nea1and as i understood from before it shouldn't be in the haproxy so the hostname which it is trying to use is wrong12:30
evrardjpnea1: openstack_user_config or conf.d ?12:31
*** arbrandes1 has joined #openstack-ansible12:31
nea1evrardjp: http://paste.openstack.org/show/Rju8y8MR9JPuQTbZ7Uri/12:31
*** arbrandes has quit IRC12:33
nea1and in conf.d there are only .example and .aio files12:34
odyssey4meevrardjp this may have something to do with it? https://review.openstack.org/35364912:34
*** cloudtrainme has joined #openstack-ansible12:34
evrardjpnea1: can you privately send me the openstack_inventory.json ?12:35
nea1evrardjp: mail? - do you have a gpg key for that?12:36
DimGRS there something I can check evrardjp ?12:36
*** arbrandes has joined #openstack-ansible12:36
Andrew_jedievrardjp: If there are old facts in /etc/openstack_deploy where the user mentioned incorrect ip for infrastructure services and later the user update the IP, then the facts may not be updated right ?12:38
Andrew_jediDimGR: what does "lxc-top -s m " says ?12:38
*** arbrandes1 has quit IRC12:39
openstackgerritAlexandra Settle proposed openstack/openstack-ansible master: [docs] Add content to the troubleshooting chapter  https://review.openstack.org/44014412:39
odyssey4mebackport review for https://review.openstack.org/439244 please12:40
DimGRAndrew_jedi, this error popped up in the first steps of running the playbook , in fact in the setup-hosts.yml.12:40
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova stable/newton: Set libvirt default file to a variable  https://review.openstack.org/44031812:41
Andrew_jediDimGR: btw how much RAM  does your deploy host have ?12:43
*** cloudtrainme has quit IRC12:45
*** thorst has joined #openstack-ansible12:45
DimGRAndrew_jedi, it had 1 gb ram , I did not though I would need more ram for ansible , I raised the ram now to 3gb and I will try again12:47
evrardjpAndrew_jedi: good point12:49
evrardjpnea1: could you do rm -rf /etc/openstack_deploy/ansible_facts12:50
evrardjplxc-stop -n <rabbit mq container name>12:50
evrardjplxc-destroy -n <name>12:51
evrardjpopenstack-ansible lxc-container-create.yml --limit <containername>12:51
evrardjpopenstack-ansible rabbitmq-install.yml --limit <containername>12:52
evrardjpbecause nothing looks wrong in your current inventory12:52
evrardjpbut maybe cache is busted12:52
evrardjpbut that's weird12:52
evrardjpyou said you started clean, so I supposed it was clean :)12:52
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-os_aodh master: Cap the number of worker processes  https://review.openstack.org/44053012:52
mgariepymorning everyone12:56
nea1evrardjp: fatal: [hetzner1_rabbit_mq_container-d17233cb]: FAILED! => {"failed": true, "msg": "No file was found when using with_first_found. Use the 'skip: true' option to allow this task to be skipped if no files are found"}12:58
*** sdake has joined #openstack-ansible12:59
*** sdake_ has quit IRC13:01
*** sanfern has joined #openstack-ansible13:02
pjm6evrardjp: nea1: i'm having troubles with rabbitmq too, i tried to remove all containers and i'm getting the same error as nea113:03
Andrew_jedinea1: You need to run setup-hosts.yaml and cancel it after few tasks and then use "openstack-ansible lxc-container-create.yml --limit <containername>" again13:05
*** schwicht has joined #openstack-ansible13:06
pjm6Andrew_jedi: I confirm it solves the problem, just need setup module to execute in order to get the ansible facts of the infra hosts13:07
evrardjpI thought lxc-container-create used setup13:08
Andrew_jedipjm6: Awesome :)13:08
evrardjplet me double check13:08
pjm6btw: theoricaly if we just destroy all rabbitmq cluster13:09
pjm6and recreate it13:09
evrardjphttps://github.com/openstack/openstack-ansible/blob/master/playbooks/lxc-containers-create.yml#L1813:09
pjm6we would not loose anything right?13:09
evrardjpthat should work13:09
pjm6assuming that when we do that there's not pending works13:09
mhaydenbuenos dias13:09
evrardjpoh yes I understood13:09
evrardjpyou can't gather facts yet13:10
pjm6mhayden: o/13:10
pjm6evrardjp: probably that's because we are limit the container?13:10
Andrew_jedipjm6: I think so, yes, but you may want to confirm it from other people as well13:10
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-rabbitmq_server master: [Wip] Reload systemd-daemon in all cases  https://review.openstack.org/44046313:10
evrardjp[m]Yes it's partially that.13:12
evrardjp[m]You can't gather facts with something not created yet13:12
pjm6yep that make senses :D13:12
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-os_aodh master: Cap the number of worker processes  https://review.openstack.org/44053013:14
pjm6evrardjp[m]: regarding rebuilding rabbit_mq_containers, if there's no pending task in rabbitmq, it would not be a problem to remaking it all or there's something that we must preserve?13:14
*** schwicht has quit IRC13:14
*** sdake_ has joined #openstack-ansible13:16
Andrew_jedipjm6: I guess, If you take a backup of mnesia directory before rebuilding then you should be fine in case of any issues13:18
*** schwicht has joined #openstack-ansible13:19
*** sdake has quit IRC13:19
*** schwicht has quit IRC13:20
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-os_gnocchi master: Cap the number of worker processes  https://review.openstack.org/44054913:23
*** ngupta has joined #openstack-ansible13:23
*** esberglu has joined #openstack-ansible13:24
*** Andrew_jedi has quit IRC13:26
*** rpittau_ is now known as rpittau13:26
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova master: Adjust ordering for nova_db_setup  https://review.openstack.org/43969113:27
*** ngupta has quit IRC13:27
nea1evrardjp[m]: `openstack-ansible openstack-hosts-setup.yml` for the facts `openstack-ansible lxc-containers-create.yml --limit hetzner1_rabbit_mq_container-d17233cb` for the container `openstack-ansible rabbitmq-install.yml` => fail again with the same error13:31
nea1Error: unable to connect to node rabbit@hetzner1: nodedown13:31
*** klamath has joined #openstack-ansible13:31
*** klamath has quit IRC13:32
*** klamath has joined #openstack-ansible13:32
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-ceph_client master: Make sure  libvirtd is started.  https://review.openstack.org/44055613:33
cloudnullmornings13:35
mgariepygood morning cloudnull13:35
cloudnullhows it mgariepy?13:35
mgariepynot too bad, getting tired of fighting with ceph .. :)13:35
mgariepyyourself ?13:36
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: Updated from global requirements  https://review.openstack.org/44040513:37
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Updated from global requirements  https://review.openstack.org/44040213:38
openstackgerritMerged openstack/openstack-ansible-os_barbican master: Updated from global requirements  https://review.openstack.org/44040913:38
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Updated from global requirements  https://review.openstack.org/44039813:38
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Updated from global requirements  https://review.openstack.org/44041113:38
*** jpstnh has joined #openstack-ansible13:38
*** retreved has quit IRC13:39
cloudnullmgariepy: doing well myself.13:40
cloudnullI'm a recent addition into the ceph fight, but i can see how that would make one tired.13:40
cloudnull:)13:40
mgariepyhaha well it'13:41
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning master: Updated from global requirements  https://review.openstack.org/44039713:41
openstackgerritMerged openstack/openstack-ansible-galera_client master: Updated from global requirements  https://review.openstack.org/44039913:42
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: Updated from global requirements  https://review.openstack.org/44040113:42
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Updated from global requirements  https://review.openstack.org/44040313:42
mgariepynot that bad, but the centos stuff is starting to get me haha :)13:42
openstackgerritMerged openstack/openstack-ansible-memcached_server master: Updated from global requirements  https://review.openstack.org/44040413:42
openstackgerritMerged openstack/openstack-ansible-ops master: Updated from global requirements  https://review.openstack.org/44040713:42
openstackgerritMerged openstack/openstack-ansible-os_aodh master: Updated from global requirements  https://review.openstack.org/44040813:42
openstackgerritMerged openstack/openstack-ansible-os_designate master: Updated from global requirements  https://review.openstack.org/44041313:43
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: Updated from global requirements  https://review.openstack.org/44041513:43
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Updated from global requirements  https://review.openstack.org/44042213:43
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Updated from global requirements  https://review.openstack.org/44042713:43
openstackgerritMerged openstack/openstack-ansible-os_zaqar master: Updated from global requirements  https://review.openstack.org/44043013:43
openstackgerritMerged openstack/openstack-ansible-repo_server master: Updated from global requirements  https://review.openstack.org/44043613:44
openstackgerritMerged openstack/openstack-ansible-rsyslog_client master: Updated from global requirements  https://review.openstack.org/44043713:44
openstackgerritMerged openstack/openstack-ansible-specs master: Updated from global requirements  https://review.openstack.org/44044113:44
openstackgerritMerged openstack/openstack-ansible-tests master: Updated from global requirements  https://review.openstack.org/44044213:44
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Updated from global requirements  https://review.openstack.org/44041013:44
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty master: Updated from global requirements  https://review.openstack.org/44041213:45
openstackgerritMerged openstack/openstack-ansible-os_ironic master: Updated from global requirements  https://review.openstack.org/44041813:45
openstackgerritMerged openstack/openstack-ansible-os_monasca master: Updated from global requirements  https://review.openstack.org/44042113:45
openstackgerritMerged openstack/openstack-ansible-os_nova master: Updated from global requirements  https://review.openstack.org/44042313:45
openstackgerritMerged openstack/openstack-ansible-os_rally master: Updated from global requirements  https://review.openstack.org/44042413:46
openstackgerritMerged openstack/openstack-ansible-os_sahara master: Updated from global requirements  https://review.openstack.org/44042513:46
openstackgerritMerged openstack/openstack-ansible-os_swift master: Updated from global requirements  https://review.openstack.org/44042613:46
openstackgerritMerged openstack/openstack-ansible-os_trove master: Updated from global requirements  https://review.openstack.org/44042813:46
mgariepyhmm http://logs.openstack.org/16/439816/1/check/gate-openstack-ansible-openstack-ansible-aio-centos-7-nv/6bbbcb8/logs/openstack/aio1-nova/nova-compute.log.txt.gz#_2017-03-01_21_34_27_36513:46
openstackgerritMerged openstack/openstack-ansible-os_watcher master: Updated from global requirements  https://review.openstack.org/44042913:46
openstackgerritMerged openstack/openstack-ansible-pip_install master: Updated from global requirements  https://review.openstack.org/44043113:46
mhaydenandymccr: so https://review.openstack.org/439157 didn't help13:46
openstackgerritMerged openstack/openstack-ansible-plugins master: Updated from global requirements  https://review.openstack.org/44043313:46
mhaydendoing the service setup prior to deploying the placement service still causes the service to fail the first time13:47
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: Updated from global requirements  https://review.openstack.org/44043413:47
mhaydenwhat's weird is that the placement api appears to not log anything when it fails to start13:47
openstackgerritMerged openstack/openstack-ansible-repo_build master: Updated from global requirements  https://review.openstack.org/44043513:47
openstackgerritMerged openstack/openstack-ansible-rsyslog_server master: Updated from global requirements  https://review.openstack.org/44043813:47
mhaydenbut the system journal shows that it failed and respawned 2-3 minutes later without a problem13:47
openstackgerritMerged openstack/openstack-ansible-security master: Updated from global requirements  https://review.openstack.org/44044013:48
openstackgerritMerged openstack/openstack-ansible master: Updated from global requirements  https://review.openstack.org/44039613:48
openstackgerritMerged openstack/openstack-ansible-openstack_openrc master: Updated from global requirements  https://review.openstack.org/44040613:48
cloudnullmgariepy: is that a read only socket problem ?13:48
openstackgerritMerged openstack/openstack-ansible-os_glance master: Updated from global requirements  https://review.openstack.org/44041413:48
openstackgerritMerged openstack/openstack-ansible-os_heat master: Updated from global requirements  https://review.openstack.org/44041613:48
andymccrmhayden: what are you trying to achieve?13:48
andymccrmhayden: or rather what is the issue youre solving there13:48
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Updated from global requirements  https://review.openstack.org/44041913:48
cloudnullor just that the nova perms are too restrictive ?13:48
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Updated from global requirements  https://review.openstack.org/44042013:48
mhaydenandymccr: solving the problem where the placement api tries to start initially and fails13:49
*** cloudtrainme has joined #openstack-ansible13:49
mhaydenthen magically starts 2 minutes later13:49
mhaydensuccessfully13:49
andymccrmhayden: ahh did not know that was happening :P13:49
*** Jeffrey4l has quit IRC13:49
andymccrmhayden: surely service setup wouldnt impact that? its not likely to connect to itself is it?13:50
mhaydenyeah -- it's taking > 2 min to start the service13:50
evrardjpnea1: so there is an issue somewhere13:50
mhaydenbut if you look at the system journal, it fails on first run -- then systemd tries to restart it 2 min later with success13:50
evrardjpthat makes your cluster think the host has something13:50
mhaydencauses the ansible task to hang for 2-3 m13:50
andymccrmhayden: hmm13:50
evrardjpmhayden: is it possible to change the delay ?13:51
mhaydensure13:51
mhaydenbut i wonder why it fails the first time13:51
mhaydenit doesn't log anything the first time around13:51
mgariepycloudnull, not sure yet but i would guess for the restriction13:52
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Updated from global requirements  https://review.openstack.org/44041713:52
openstackgerritAndy McCrae proposed openstack/openstack-ansible-tests stable/ocata: Set the Nova wsgi processes and threads  https://review.openstack.org/44056413:52
evrardjppjm6: do you also have the same issues with rabbit as nea1 ?13:53
lwiecekHello. -#=#-#=#- Is there a way to install keystone with keystone ansible role wide open? not in python virtual env? is there a simple solution for that?13:54
mhaydenlwiecek: we used to support that, but it was removed -- is there a problem with virtualenvs for you?13:54
lwiecekyes13:55
lwieceki want to install pure keystone on machine (no rabbitmq, nothing)13:55
lwiecekso i use openstack-ansible-os_keystone role13:55
lwiecek+ all openstack role dependencies that are specified in meta13:55
lwiecekeverything installs fine, until step [ensure tenant]. failure: Internal Server Error (HTTP 500) -keystone does not respond.13:56
lwieceki checked apache logs and i see error: cli arguments already parsed13:56
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova stable/ocata: Adjust ansible_hostname to ansible_nodename  https://review.openstack.org/44056513:56
lwiecekso I go into file  /etc/httpd/conf.d/keystone-httpd.conf and I see that there are few spaces missing in the beggining of the line (some error with jinja templating)13:56
andymccrhttps://review.openstack.org/#/c/439691/ this should fix our upgrade vs greenfield problem for nova.13:57
lwiecekand this is a reason why wsgi is executed from wrong python virtual env (unreadable argument)...13:57
lwiecek<VirtualHost *:5000> WSGIDaemonProcess     keystone-service user=keystone group=keystone processes=2 threads=1 display-name=%{GROUP} python-path=/openstack/venvs/keystone-testing/lib/python2.7/site-packages13:58
lwiecekthis line WSGI~ is missing 4 spaces at the beggining of the line. no idea how to fix this because its automatically generated.. I use newest ansible (2.2.1)13:59
*** cloudtrainme has quit IRC13:59
cloudnulllwiecek: https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-httpd.conf.j2#L514:00
cloudnullcan you try editing the template and removing the trailing -14:00
openstackgerritMerged openstack/openstack-ansible-pip_install master: Use block-rescue for pip install  https://review.openstack.org/43982814:00
cloudnullchange  -%} to %}14:01
cloudnullthen rerun the role14:01
*** The_Intern has joined #openstack-ansible14:01
openstackgerritMerged openstack/openstack-ansible-galera_server master: Updated from global requirements  https://review.openstack.org/44040014:02
*** The_Intern has quit IRC14:03
*** vnogin has joined #openstack-ansible14:03
lwiecekcloudnull ok the role is running i will report asap about the result14:05
cloudnullthanks!14:05
*** schwicht has joined #openstack-ansible14:05
*** Jack_Iv has joined #openstack-ansible14:07
ioniwhy was 14.04 dropped from ocata?14:07
andymccrioni: no projects are supporting it for newton+14:08
andymccrwe decided to keep it for Newton so you could upgrade to Newton on trusty, then upgrade Ubuntu to 16.0414:08
andymccrbut OSA is one of the only projects that did that, so there is a chance we will lose testing infra for newton/trusty gates at some point during this cycle.14:09
ionii do have quite a lot of nodes with 14.0414:09
ioniand the mix with 14.04 and 16.04 didn't work at all14:10
andymccrioni: did you try upgrading the nodes individually or did you remove/reinstall them completely and then try adding them back in?14:10
odyssey4meioni we did do some fixes based on your feedback, but yeah it'd be nice to get some further feedback from a lab test14:11
ionii had the controller on 14.04 and had compute node on 16.0414:11
ioniand that didn't work14:11
andymccrioni: would be great to get feedback on that so we can fix some of that up14:11
*** fguillot has joined #openstack-ansible14:12
ioniso everything in one region is 14.04 and in a seconde region is 16.0414:12
*** The_Intern has joined #openstack-ansible14:12
ionii have to see how to move to 16.04 on the first region14:12
ioniany recommendation?14:13
alextricity25cloudnull: If you get a moment, could you update https://review.openstack.org/#/c/437232/7, please?14:13
openstackgerritMerged openstack/openstack-ansible-galera_server stable/ocata: Cap the number of worker threads  https://review.openstack.org/44019014:14
nea1evrardjp: i think he was talking about the issue with the missing / brocken facts14:14
evrardjpk14:15
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server stable/ocata: Fix fact set using ternary filter  https://review.openstack.org/43915014:16
nea1as he wrote that "it" had fixed it (where Andrew wrote "You need to run setup-hosts.yaml and cancel it after few tasks [...]")14:16
ioniandymccr, do you happen to know if there were technical limitation on running ocata on 14.04?14:16
ioniandymccr, or you guys wanted to support only the latest tls from ubuntu14:17
*** crushil has joined #openstack-ansible14:17
odyssey4meioni as it stands right now our newton support on trusty is at risk of not being testable in our gate checks because openstack officially stopped supporting trusty with mitaka14:18
odyssey4meso we removed all the trusty support code in ocata - ocata absolutely will not work on trusty14:18
ioniok14:19
*** gouthamr has joined #openstack-ansible14:19
ionihow do you guys suggest to move to 16.04 nodes that already run 14.04?14:19
odyssey4mewe're fighting to keep our gate checks in place to verify newton/trusty support until newton is EOL, but we have been warned that the trusty nodes may be removed entirely from the nodepool14:19
odyssey4meioni I think that jmccrory has been working on a general plan and is hopefully going to push up a review to the docs repo with the general process14:20
cloudnullalextricity25: lookin14:20
odyssey4mebut what's been discussed so far is along the lines of:14:20
odyssey4me1. rekick the first controller with xenial (trusty must be wiped from the host) and re-deploy OSA onto it14:21
odyssey4me2. rekick the secondary control plane hosts in the same way14:21
openstackgerritMerged openstack/openstack-ansible-os_nova stable/newton: Set libvirt default file to a variable  https://review.openstack.org/44031814:21
odyssey4me3. work through each compute/swift host one at a time - move instances to another host, rekick, move instances back14:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-pip_install stable/ocata: Use block-rescue for pip install  https://review.openstack.org/44058914:22
evrardjpnea1:  could you try something for me?14:23
evrardjpansible -m debug -a "msg={{ hostvars[groups[rabbitmq_host_group][0]]['ansible_hostname'] }}" rabbitmq_all14:24
evrardjpreplace rabbitmq_host_group with rabbitmq_all :)14:24
nea1evrardjp: "msg": "hetzner1-rabbit-mq-container-d17233cb"14:24
nea1sec14:24
*** cjloader has joined #openstack-ansible14:25
evrardjpis that the same value as your container name?14:25
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-pip_install stable/newton: Use block-rescue for pip install  https://review.openstack.org/44059514:26
nea1evrardjp: http://termbin.com/ptdu seams like he hasn't got a rabbitmq_all group o_O14:26
evrardjpyou forgot quotes :)14:27
evrardjpansible -m debug -a "msg={{ hostvars[groups['rabbitmq_all'][0]]['ansible_hostname'] }}" rabbitmq_all14:27
nea1ok, then it is fine14:27
evrardjpthe node you have returned is your rabbitmq_primary_cluster_node14:27
nea1but rabbitmq_host_group didn't have any either ^^14:27
evrardjpbecause that was a var :)14:27
evrardjpbut that's a var scoped in defaults14:28
evrardjpI don't know why it worked14:28
nea1well then why is he still trying to use hetzner1 ^^14:28
evrardjpthe other nodes are connecting by doing14:28
openstackgerritMerged openstack/openstack-ansible-os_nova master: Change /etc/default/libvirt-bin to libvirtd  https://review.openstack.org/44028414:28
evrardjphttps://github.com/openstack/openstack-ansible-rabbitmq_server/blob/cf6f08b31bd58a26b8f035b77cdbc457bb9e580b/tasks/rabbitmq_cluster_join.yml#L3914:28
*** stelouie has joined #openstack-ansible14:29
*** stelouie_ has joined #openstack-ansible14:29
*** Jeffrey4l has joined #openstack-ansible14:29
logan-ioni odyssey4me: yep that is the general process I've gone with. it is going ok. my compute/storage node pain is eased by the stateless node stuff but in terms of control node stuff 14.04->16.04 rebuild is pretty smooth other than the keystone credentials bug that is getting worked out soon. i'm reloading my last controller in my dev cluster atm, probably will do prod next week and write up the general process I used14:29
lwiecekcloudnull Im sorry but I have to go for now. I wil be back on monday and finish running the playbook and report You if it fixed the issue or not14:30
nea1well there is only one node, so that shouldn't be used(?)14:30
ionilogan-, cool14:30
logan-ioni: one major thing to watch out for currently if you reimage controllers (specifically the first controller where repo_build occurs, keystone[0] lives, etc) is this: https://bugs.launchpad.net/openstack-ansible/+bug/166796014:30
openstackLaunchpad bug 1667960 in openstack-ansible "Rebuilding keystone[0] container breaks credential keys" [Critical,Confirmed]14:30
evrardjphttps://github.com/openstack/openstack-ansible-rabbitmq_server/blob/cf6f08b31bd58a26b8f035b77cdbc457bb9e580b/tasks/rabbitmq_cluster.yml#L1814:30
evrardjpnea1: could you try something different?14:31
andymccrhmm logan- would it be possible to move to a "run_once" rather than a when inventory_hostname == group[0]14:31
evrardjpedit your /etc/ansible/roles/rabbitmq_server/tasks/rabbitmq_cluser.yml and remove static:no below the cluster create14:31
logan-no andymccr. first we need to add a task to collect all of the keys from all of the keystone containers14:31
ionilogan-, so the general ideea is to add a second controller with xenial, build the services(without pushing the compute nodes) since the services built on 16.04, won't work in 14.0414:31
nea1well as he is trying to run that is must be correct14:31
evrardjpandymccr: I guess depend on the serial ?14:31
nea1ok, sec14:31
ionilogan-, then remove the controller with 14.04, reintall compute node, move instances to compute node etc14:32
evrardjpnea1: then add in tasks/rabbitmq_cluster_create.yml a debug task like14:32
andymccrlogan-: i thought the idea of the key sync stuff was to do that?14:32
logan-andymccr: no, the key sync checks if keys exist on keystone[0], if they don't, it generates new ones and then distributes them to the other containers, overwriting the old ones14:33
logan-it never checks the other nodes for existing keys first14:33
andymccrlogan-: ahh i see.14:33
*** fabg has joined #openstack-ansible14:33
andymccrlogan-: but if you ran it against keystone[1] it would then work?14:33
andymccre.g. it would sync all the keystone[1] keys to keystone[0]14:33
evrardjpnea1: http://paste.openstack.org/show/601143/14:33
evrardjpafter the first task in cluster create14:34
evrardjpand see what's going on when your run rabbitmq playbook14:34
odyssey4melogan- oh awesome :)14:34
ionilogan-, where are you going to post the documentation?14:34
*** lwiecek has quit IRC14:34
logan-andymccr: don't think so, i think that is one of the many tasks in the role that are hard coded on keystone[0]14:34
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/ocata: Use stable/ocata branch for tempest plugin repo  https://review.openstack.org/43987414:34
andymccrlogan-: yeah i think we ahve similar issues with swift - its any role that strongly requires things to be setup and then distributed14:34
*** Jeffrey4l has quit IRC14:35
andymccrlogan-: we copy all the swift stuff over so in theory if you remove swift_all[0] it would run against the next swift_all[0] and still work, but if swift_all[0] is just unavailable i imagine it would bomb14:35
andymccrwhich isnt ideal14:35
logan-yeah :(14:35
andymccrlogan-: maybe we need a way to determine the first available node rather htan keystone[0]14:35
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/ocata: Provide empty default for cinder_backends  https://review.openstack.org/43947514:35
odyssey4meandymccr evrardjp logan- perhaps we should start implementing the use of the deploy node as a place to keep copies of things, then distribute from there14:36
evrardjpagreed14:36
logan-ioni: not sure yet.. maybe on my blog. but yes to answer your question my control is 3x 14.04 currently. I build a 4th node and install 16.04. then shutdown a control node, swap the drives from the 16.04 node, and run OSA to rebuild the containers.14:36
evrardjpput it in /etc/openstack_deploy/files14:36
odyssey4meit would simplify things dramatically, and we could re-use this mechanism for ssl keys/certs and loads of other things14:36
evrardjpthat's what I used previously :p14:37
logan-ioni: i'll drop you a link once I've got it written up14:37
odyssey4meyeah, basically setup a folder in /etc/openstack_deploy which contains things we copy between nodes - then always ship from the deployment node out14:37
logan-odyssey4me: yeah thats a potential solution14:37
nea1evrardjp: http://termbin.com/w60914:37
ionilogan-, cool, i'll ping you next week?14:37
andymccri think that's ok as long as we back it up onto other hosts too14:37
odyssey4mein some cases we may generate on a target host, then pull, then push14:37
logan-odyssey4me: but for the credential keys I think its probably unnecessary. we already have the keys on the other 2 containers. we can just collect them all, filter by uniques, and then populate all existing keys first before distributing14:38
andymccrlogan-: yeah i kinda agree, if we have to distribute them everywhere anyway it makes more sense to come up with a method that doesnt involve linking to node[0]14:38
andymccrswift is the same.14:38
*** rmelero has joined #openstack-ansible14:38
andymccre.g. test consistency - if its the same or some are empty (e.g. they are new) pick any non-empty host to be the sync host14:39
logan-yep14:39
nea1evrardjp: i fount the problem -.-14:39
odyssey4meandymccr yeah, for maximum protection we'd have to check all node if they have the thing we need and pull it if it doesn't exist on the deploy node14:39
evrardjpok tell me.14:40
evrardjpI've spent too much time on this :p14:40
nea1hetzner injects your hostname into the hosts on install14:40
nea1and it uses the public ip14:40
nea1but openstack-ansible sets 127.0.1.1 for the node name14:40
andymccrhost files are fun :D14:40
logan-ioni: sure sounds good14:40
nea1what sound wrong too but it works if rabbitmq tries to use that on its on node14:41
evrardjpnea1: that doesn't sound right14:41
odyssey4melogan- I trust you to come up with an elegant solution ;)14:41
nea1because dnsmasq resolves hetzner1 to 127.0.1.114:41
evrardjpwhat you pasted was on the container14:41
evrardjprabbitmq checks the hosts file for clustering, and I'm not aware he is doing reverse lookup14:42
*** ngupta has joined #openstack-ansible14:42
evrardjpusing libc dns libs or whatever it's named14:42
evrardjp(pun intended)14:42
nea1yep, that is fine, but it seams like rabbitmqctl is always trying to use the hostname of the host14:42
*** ngupta_ has joined #openstack-ansible14:43
evrardjpit uses the hostname but should only read /etc/hosts IIRC14:43
*** esberglu has quit IRC14:43
evrardjpanyway, let's see how it goes on your host14:43
evrardjpif you disable your dhcp from hetzner114:43
evrardjpand if it works better in your container14:43
logan-odyssey4me: maybe too much faith, but we'll see, i'm going for "less of a wrecking ball" :P in the mean time, some eyes on this would be appreciated: https://review.openstack.org/#/c/438219/14:43
evrardjpbut that's definitely an edge case here14:43
odyssey4meandymccr evrardjp logan- mgariepy FYI here's the review for adding the periodic jobs for OSA to test centos and upgrades: https://review.openstack.org/41951714:43
logan-not just odyssey4me too, any input is appreciated14:44
odyssey4meI have no idea whether it's all right or not14:44
evrardjplogan-: I'll remove my vote on it14:44
nea1evrardjp: ... sry was wrong >.<14:44
evrardjpthis way we can merge it, and maybe improve later14:44
logan-evrardjp: agreed thanks14:44
evrardjpI still don't like it, but I don't have an alternative to propose right now :/14:45
nea1ping hetzner1 the way I'd assumed but yep, you are right rabbbitmqctl doesn't use that14:45
logan-thats great odyssey4me. how complete is the upgrade scenario now?14:45
evrardjpstill, it's worth cleaning up just in case there is a weird overlap bug we didn't see in the past14:45
evrardjpmaybe 16.04 and systemd stuff :p14:45
evrardjpif I can, I'll happily blame systemd-resolvd.14:46
*** ngupta has quit IRC14:46
odyssey4melogan- with that periodic we'll have to change how gate-check-commit works to understand the 'deploy' versus 'upgrade' action parameter - but with that we'll be able to test any scenario's deploy and upgrade14:46
odyssey4meI'll be pushing up a patch shortly to address that change14:46
fabgHi osa folks, got an error on task os-neutron, tag neutron-config (newton 14.0.7). http://paste.openstack.org/show/601146/ Any idea ?14:46
odyssey4melogan- argh, https://review.openstack.org/438219 makes my brain hurt14:47
* odyssey4me saves it for tomorrow when he has a fresh head14:47
logan-haha ok14:49
*** ngupta_ has quit IRC14:49
*** ngupta has joined #openstack-ansible14:49
cloudnullthanks lwiecek14:50
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova master: Adjust ordering for nova_db_setup  https://review.openstack.org/43969114:50
andymccr^ should work now!14:50
*** manheim_ has quit IRC14:51
nea1evrardjp: ok, so I just did a lot of noise about nothing >.< ... the issue still stays, why is rabbitmqctl trying to use hetzner1 as server14:51
odyssey4mecloudnull I'm guessing it's the '-' before the '%}' in this line? https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-httpd.conf.j2#L514:51
odyssey4meodd - because it's not causing trouble in the gate14:52
odyssey4melwiecek ^14:52
evrardjpdid you run the debug task nea1 ?14:53
nea1evrardjp: what i get if i add 127.0.0.1 hetzner1 to my hosts when running rabbitmqctl cluster_status http://termbin.com/zj2114:54
cloudnullagreeded. odd14:54
nea1evrardjp: the debug output  http://termbin.com/w60914:54
cloudnull**agreed14:54
evrardjpnea1: http://termbin.com/zj21 shows the problem14:56
evrardjpcookie set14:56
evrardjpnode name is wrong14:56
evrardjpepmd issue14:56
evrardjpso14:56
evrardjpcould you disable dhcp from eth0 in your container14:57
evrardjpsee if works better14:57
evrardjpafter a restart of epmd14:58
*** TxGirlGeek has joined #openstack-ansible14:59
*** mpjetta has joined #openstack-ansible15:00
*** esberglu has joined #openstack-ansible15:01
*** TxGirlGeek has quit IRC15:02
nea1evrardjp: `ifdown eth0` `rabbitmqctl cluster_status` > * unable to connect to epmd (port 4369) on hetzner1: nxdomain (non-existing domain)15:02
*** TxGirlGeek has joined #openstack-ansible15:02
nea1and i restarted the service of cause15:02
*** sawblade6 has joined #openstack-ansible15:02
nea1and if I add hetzner1 to 172.0.1.1 I get the same message as above (zj2115:03
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible-haproxy_server master: Define haproxy_ssl_protocol variable.  https://review.openstack.org/43991215:03
*** manheim_ has joined #openstack-ansible15:05
*** acormier has joined #openstack-ansible15:06
*** TxGirlGeek has quit IRC15:06
*** kstev has joined #openstack-ansible15:13
*** crushil has quit IRC15:15
openstackgerritMark Hamzy proposed openstack/openstack-ansible master: Add support to install a molteniron server  https://review.openstack.org/42725515:15
*** chhavi has quit IRC15:15
*** crushil has joined #openstack-ansible15:15
*** Andrew_jedi has joined #openstack-ansible15:16
*** TxGirlGeek has joined #openstack-ansible15:16
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova stable/ocata: Split upgrade testing into it's own shell script  https://review.openstack.org/43800215:16
*** chris_hultin|AWA is now known as chris_hultin15:16
*** TxGirlGeek has quit IRC15:16
*** TxGirlGeek has joined #openstack-ansible15:17
*** shausy has quit IRC15:19
*** sunjon_ has quit IRC15:20
*** TxGirlGeek has quit IRC15:21
*** whiteveil has joined #openstack-ansible15:22
*** Andrew_jedi has quit IRC15:23
*** TxGirlGeek has joined #openstack-ansible15:24
andymccrjamesdenton: ok i have a fix for the service not starting issue: https://review.openstack.org/#/c/439691/ - additionally https://review.openstack.org/#/c/440565/ should fix the hostname issue for placement15:26
andymccror rather a fix for the DB perm issue15:26
andymccri think that should cover off the nova upgrade issues you saw. i'll try take a look at the galera problems but that may not make release.15:27
*** Andrew_jedi has joined #openstack-ansible15:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Adjust gate-check-commit for deploy/upgrade testing  https://review.openstack.org/44063115:28
andymccrmhayden: on that placement thing - dont the logs indicate that its actually nova-compute taking ages to restart?15:29
andymccrhttp://logs.openstack.org/65/440565/1/check/gate-openstack-ansible-os_nova-ansible-func-ubuntu-xenial/db5c8c5/console.html#_2017-03-02_14_33_16_79413515:30
andymccrfor example15:30
andymccrmhayden: ara logs suggest the same15:32
*** whiteveil has quit IRC15:32
*** lucasxu has joined #openstack-ansible15:32
*** whiteveil has joined #openstack-ansible15:34
logan-looks like that updated ara took less than 1 min to generate integrated repo stuff if i'm reading correctly http://logs.openstack.org/24/396324/9/check/gate-openstack-ansible-openstack-ansible-aio-ubuntu-xenial/71a03bb/console.html#_2017-03-02_04_08_54_21074415:35
*** TxGirlGeek has quit IRC15:37
andymccrlogan-: yeah that doesnt seem too bad then!15:38
*** TxGirlGeek has joined #openstack-ansible15:38
*** marst has joined #openstack-ansible15:40
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer master: Remove Ceilometer API Service  https://review.openstack.org/43723215:42
*** Andrew_jedi has quit IRC15:44
*** Matias has quit IRC15:44
mhaydenandymccr: haven't gotten into that deeply enough yet15:45
andymccrmhayden: fair fair15:45
mhaydenOSA Weekly Meeting in 15 minutes!15:45
mhaydencloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion,15:45
mhaydenbgmccollum, darrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza, sc68cal15:45
mhayden(in #openstack-meeting-4, of course)15:45
d34dh0r53whew, real IRC15:45
mhaydenindeed15:45
spotzheheh15:45
mhaydenslacker15:45
spotzd34dh0r53: How goes?:)15:46
d34dh0r53spotz: not bad, how's the new gig?15:46
asettleHooray15:46
asettlemhayden: you're back hosting?15:46
*** Andrew_jedi has joined #openstack-ansible15:47
*** doda has quit IRC15:47
andymccrmhayden: have you prepared gifs?15:49
*** galstrom_zzz is now known as galstrom15:53
*** TxGirlGeek has quit IRC15:54
*** TxGirlGeek has joined #openstack-ansible15:54
mhaydennot really ;)15:55
*** The_Intern has quit IRC15:56
spotzd34dh0r53: I'm liking it, keeping me busy:)15:56
*** Andrew_jedi has quit IRC15:56
*** TxGirlGeek has quit IRC15:59
*** The_Intern has joined #openstack-ansible15:59
*** schwicht has quit IRC16:04
*** fabg has quit IRC16:04
*** TxGirlGeek has joined #openstack-ansible16:04
*** fabg has joined #openstack-ansible16:04
*** galstrom is now known as galstrom_zzz16:04
openstackgerritMerged openstack/openstack-ansible-os_nova stable/ocata: Adjust ansible_hostname to ansible_nodename  https://review.openstack.org/44056516:05
*** yolanda has joined #openstack-ansible16:05
*** jmckind has joined #openstack-ansible16:05
*** galstrom_zzz is now known as galstrom16:06
*** markvoelker has quit IRC16:07
*** admin0 has joined #openstack-ansible16:07
*** Oku_OS is now known as Oku_OS-away16:07
SamYaplenea1: can you run $(getent ahostsv4 `hostname`)16:09
SamYaplenea1: that will do the same resolving checks that erlang does16:09
*** rmelero has quit IRC16:09
*** DanyC has quit IRC16:10
nea1SamYaple: evrardjp I just noticed that `HOSTNAME=$(hostname) rabbitmqctl cluster_status` works16:10
nea1for some reason the HOSTNAME in `env` is wrong16:10
nea1but hostname returns the correct value16:11
SamYaplehmmm16:11
*** Matias has joined #openstack-ansible16:11
nea1SamYaple: http://termbin.com/cltw16:11
*** DanyC has joined #openstack-ansible16:12
*** markvoelker has joined #openstack-ansible16:12
SamYaplenea1: having it resolve to 127.0.1.1 is a bad thing for clustering16:12
SamYaplebut it should be alright.16:13
nea1SamYaple: that seams to be the way OSA does it(?) I haven't changed anything on the hosts16:14
SamYapleyea thats why im saying it should be fine16:14
SamYapleit can make things more complicated, but i dont think thats whats happening here16:14
*** galstrom is now known as galstrom_zzz16:14
nea1hostnamectl returns "Failed to create bus connection: No such file or directory" in the container ...16:15
*** galstrom_zzz is now known as galstrom16:15
*** DanyC has quit IRC16:16
*** jamesden_ has joined #openstack-ansible16:18
*** cloudtrainme has joined #openstack-ansible16:19
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Added a common tag to the common tasks  https://review.openstack.org/44066516:19
*** fabg has quit IRC16:19
*** fabg has joined #openstack-ansible16:20
rabel_b1mhayden: could you make a +2 out of your -1 in https://review.openstack.org/#/c/430900/ ? ;) all the missing dependencies should be backported now and the change passes the gates now.16:20
*** TxGirlGeek has quit IRC16:23
*** manheim_ has quit IRC16:24
nea1it seams like the HOSTNAME in the env is the nodes name everywhere16:24
SamYaplenea1: yea i was just confirming that16:25
mgariepydamn .. /usr/local/bin/openstack-ansible: line 64: 27471 Segmentation fault16:26
cloudnullseg fault ?!16:29
*** fabg has quit IRC16:30
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova stable/ocata: Change /etc/default/libvirt-bin to libvirtd  https://review.openstack.org/44067116:30
*** fabg has joined #openstack-ansible16:30
mgariepycloudnull, yep, twice on 2 differents vms this morning.16:30
nea1I just tested it on my other setup, there only one container doesn't fail16:30
cloudnullso that has to be something within ansible16:31
cloudnullline 64 in that file is the "fi"16:31
cloudnullof the wrapper16:31
SamYaplenea1: can you repeat that last comment?16:32
SamYapleare you saying in a different environment its broken too?16:32
*** TxGirlGeek has joined #openstack-ansible16:36
nea1SamYaple: there are container which seam to be fine16:37
nea1I noticed that dbus is missing in the rabbitmq container, but that still doesn't solve the problem, but removes the "Failed to create bus connection: No such file or directory" Error16:38
*** manheim_ has joined #openstack-ansible16:38
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova stable/ocata: Adjust ordering for nova_db_setup  https://review.openstack.org/44067916:39
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Remove Ceilometer API Service  https://review.openstack.org/43723216:39
evrardjplogan-: https://docs.openstack.org/developer/openstack-ansible/ocata/developer-docs/contribute.html#development-cycle-checklist16:40
logan-great thanks16:40
evrardjpI guess we could document the ceph bits there in milestone 216:40
*** h5t4_ has quit IRC16:41
*** cloudtrainme has quit IRC16:41
logan-yep i think m2 is perfect, esp. with tests running now16:41
*** agrebennikov_ has joined #openstack-ansible16:42
*** pcaruana has quit IRC16:42
openstackgerritNolan Brubaker proposed openstack/openstack-ansible master: Restructure lib directory to install via pip  https://review.openstack.org/41807616:45
openstackgerritNolan Brubaker proposed openstack/openstack-ansible master: Restructure lib directory to install via pip  https://review.openstack.org/41807616:46
nea1evrardjp: SamYaple `unset HOSTNAME` `rabbitmqctl status` works fine too, so the question is from where it the HOSTNAME in the env coming from, it is not in any /etc/ nor /root/ files16:47
*** fabg has quit IRC16:48
*** mmalik4_ has joined #openstack-ansible16:49
evrardjpthat's a good question!16:49
evrardjpcould you indicate that in the bug?16:50
evrardjpthis way when someone looks for a fix, they know the cause and will therefore look at how to fix it16:50
evrardjpif you don't do it yourself :)16:50
*** chhavi has joined #openstack-ansible16:51
*** jmckind_ has joined #openstack-ansible16:52
*** jmckind has quit IRC16:54
nea1well the question is where to fix it16:55
nea1the quickfix is done easily but there should it actually be done16:55
evrardjpI'd grep for HOSTNAME accross the whole codebase. Barbarian method.16:55
evrardjpelse lxc-container-create, rabbitmq, or lxc-hosts role for a more surgical approach16:56
evrardjpSamYaple: any idea?16:57
*** fabg has joined #openstack-ansible16:58
SamYapleevrardjp: haah i did the same thing16:58
SamYaplenea1: ive been trying to dig into _where_ HOSTNAME comes from16:58
SamYaplethe only thing i found was lxc.utsname, but thats not begin set as far as i can tell16:59
evrardjpSamYaple: we may need to check also ansible_env.hostname or things like that so...16:59
nea1evrardjp: ../etc/openstack_deploy/ansible_facts/hetzner1_rabbit_mq_container-d17233cb:        "HOSTNAME": "hetzner1",16:59
nea1../etc/openstack_deploy/ansible_facts/hetzner1:        "HOSTNAME": "hetzner1",16:59
evrardjp-i16:59
*** fabg has quit IRC16:59
nea1but the strange part is `ansible -m shell -a "env | grep HOSTNAME" all` returns HOSTNAME=hetzner1 for all17:00
*** schwicht has joined #openstack-ansible17:00
SamYaplenea1: did you set 'global_environment_variables' or soething?17:01
*** sdake has joined #openstack-ansible17:02
SamYaplebetter question, how was this ever working17:03
*** jpstnh has quit IRC17:04
odyssey4mejmccrory logan- andymccr evrardjp I'd appreciate any feedback for https://review.openstack.org/440631 to help get the upgrade tests for the integrated build working17:04
evrardjpnea1: that's definitively a source of issues :)17:05
evrardjpSamYaple: haha :)17:05
*** sdake_ has quit IRC17:06
SamYapleevrardjp: whats really funny is i think rabbitmq is the _ONLY_ one that would have issues with that17:06
evrardjpwould that be dnsmasq that messes up everything? I can't understand that :)17:06
nea1SamYaple: don't know what global_environment_variables should be ^^17:06
evrardjpwell for me I hoped it was using /etc/hosts, so I thought rabbitmq would have been the only one NOT impacted :p17:06
SamYaplenea1: well it doesnt need to be set at all. is it set in your configs?17:06
nea1the config is default, except for http://paste.openstack.org/show/Rju8y8MR9JPuQTbZ7Uri/17:07
evrardjpnea1 pay attention to what you say, you said to me you didn't define anything.17:07
evrardjp:D17:07
SamYapleevrardjp: HOSTNAME is an env keyword that rabbitmq uses as a final override. you can also add it to rabbitmq-env.conf and rabbitmq will source that before starting17:07
*** cloudtrainme has joined #openstack-ansible17:07
evrardjpgood to know!17:07
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-os_ironic master: Cap the number of worker processes  https://review.openstack.org/44070617:08
nea1oh, yea HOSTNAME would be perfect in global_environment_variables xD17:08
*** schwicht has quit IRC17:08
logan-ok odyssey4me added to queue17:09
nea1SamYaple: the user_variables.yml is untouched17:09
nea1directly from stable/ocata17:09
logan-jmccrory thanks for that etherpad... added a bunch of notes.. good luck :P17:09
*** whiteveil has quit IRC17:10
*** crushil has quit IRC17:10
*** DanyC has joined #openstack-ansible17:12
*** TxGirlGeek has quit IRC17:16
*** TxGirlGeek has joined #openstack-ansible17:17
nea1evrardjp: I don't have the time to fix this, but I'm noticing that my workaround isn't working either - ansible doesn't load the bashrc / profile does it?17:18
evrardjpnope17:19
evrardjpit executes python on the node17:19
nea1so how do i fix the env for that ^^17:19
*** doda has joined #openstack-ansible17:19
SamYaplenea1: im pretty confused as to how that is getting set17:22
evrardjpI'm thinking lxc_container_create or lxc_hosts17:22
evrardjpor openstack_hosts17:22
nea1as soon as I run the rabbitmq-install.yml, this returns >.< => ansible_facts/hetzner1_rabbit_mq_container-d17233cb:        "HOSTNAME": "hetzner1",17:23
nea1SamYaple: yep, i have no idea17:23
SamYaplecloudnull: do you recall if you are using lxc.utsname or something to set the HOSTNAME in the containers at the time of lxc create?17:23
SamYapleim not seeing anything that sets that env var anywhere17:23
evrardjplxc.utsname is good17:23
nea1usually it is set in lxc containers with lxc.utsname, but the are fine17:24
SamYaplewierdness17:24
evrardjpwhat is lxc_cache_environment ?17:24
cloudnullSamYaple:  we set it within the container using /etc/hosts and /etc/hostname, then call ``hostname -f /etc/hostname``17:26
cloudnulli'd like to set it within the config17:26
cloudnullhowever doing so would trigger a container restart17:26
cloudnullup until recently that is17:26
*** manheim_ has quit IRC17:26
cloudnullwe could likely revisit that now17:26
hwoarangmgariepy: hello! do you have a bit of time to talk about the centos7 playbooks in openstack ansible? i am working on the suse support and i have a question some centos7 stuff for the galera_server role17:26
evrardjpcloudnull: /etc/hosts is good and /etc/hostname is good17:26
nea1evrardjp: fatal: [hetzner1_rabbit_mq_container-d17233cb]: FAILED! => {"failed": true, "msg": "the field 'args' has an invalid value, which appears to include a variable that is undefined. The error was: 'lxc_cache_environment' is undefined\n\nThe error appears to have been in '/etc/ansible/roles/rabbitmq_server/tasks/rabbitmq_cluster_create.yml': line 29, column 3, but may\nbe elsewhere in the file17:27
evrardjpat least that's what I heard17:27
nea1depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: debug hostname\n  ^ here\n"}17:27
nea1i added it to the rabbitmq_server/tasks/rabbitmq_cluster_create.yml17:27
evrardjpok so you have this variable overriden17:27
nea1as debug message17:27
evrardjpyes I understood you :)17:27
evrardjpwell I'd do this:17:28
evrardjpopenstack-ansible lxc-container-destroy.yml --limit <rabbitmq container name?17:28
evrardjpunset the HOSTNAME var17:28
evrardjpdo the same with container create17:28
evrardjpand see how it goes17:28
evrardjpto see if it's carried during container create or something else17:29
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-os_sahara master: Cap the number of worker threads  https://review.openstack.org/44071617:30
nea1I'm just trying that, but it is still strange, as I restarted the container, and well there is no "hetzer1" in /etc or so which should lead to it setting the hostname17:31
*** The_Intern has quit IRC17:32
*** The_Intern has joined #openstack-ansible17:32
nea1evrardjp: nope, didn't help17:33
openstackgerritMerged openstack/openstack-ansible-os_nova master: Adjust ordering for nova_db_setup  https://review.openstack.org/43969117:34
*** lucasxu has quit IRC17:36
*** lucasxu has joined #openstack-ansible17:38
mgariepyhwoarang, sure, i'm currently in a meeting and lunch after that but we can have a quick chat after this.17:39
mgariepyhwoarang, mhayden is very knowledgeable on the centos stuff also ;)17:39
mhaydenwhee17:39
odyssey4meandymccr I take it that you're still working on making the ocata upgrade test work for os_nova? I see it's failing in https://review.openstack.org/44067917:40
odyssey4meoh, it's probably https://review.openstack.org/440671 that needs to merge17:40
odyssey4melogan- ^ :)17:40
andymccrhttps://review.openstack.org/#/c/438002/ <-- that needs to merge17:40
*** admin0 has quit IRC17:40
andymccrthe libvirtd change wont matter since we dont set listen_tcp to 1 so it doesnt get touched17:41
andymccrbut once the patch i linked above merges then upgrade tests are all working!17:41
odyssey4meandymccr gimme gimme gimme your review before midnight :) https://review.openstack.org/44063117:41
hwoarangmgariepy: mhayden: ok :) for now i have a simple question. The line 136 in tasks/galera_install_yum.yml ('...UPDATE mysql.user SET Password=PASSWORD('$rootpass')...) doesn't make much sense to me. $rootpass variable is empty. So in the line above you set the root pass to '{{galera_root_password}}', then you set it to empty, so subsequent mysql connections fail in the rest of the playbooks. more or less... what do i miss? :)17:42
*** doda has quit IRC17:43
odyssey4meFYI we can expect to see infra mirrors for mariadb 10.0 and 10.1 within the next day as https://review.openstack.org/354203 has merged17:46
*** vnogin has quit IRC17:49
logan-nice!17:49
*** vnogin has joined #openstack-ansible17:49
*** adrian_otto has joined #openstack-ansible17:52
*** h5t4 has joined #openstack-ansible17:53
*** vnogin has quit IRC17:54
*** lucasxu has quit IRC17:54
SamYapleodyssey4me: w00t17:54
*** Andrew_jedi has joined #openstack-ansible17:57
SamYaplei was really hoping rabbitmq 3.7.0 would land before ocata, but alas it did not17:57
SamYapleit has some really awesome stuff. like autoclustering and any-order node restarting17:58
SamYaplenot to mention the config file format is no longer native erlang ugliness. its ini-type config (mostly)17:59
*** vzkyr3 has joined #openstack-ansible18:01
odyssey4meSamYaple yeah, d34dh0r53 has been salivating over it18:03
SamYaplehe aint the only one18:03
d34dh0r53yep18:04
SamYapleive been running the RC at my house because i cannot wait18:04
SamYapleits been kinda buggy :/18:04
d34dh0r53we can't even get 3.6.7 :/18:04
*** stuartgr has quit IRC18:04
SamYapleall that sweet sweet 3.7.0 work18:05
*** karimb has joined #openstack-ansible18:05
jmccroryodyssey4me question on https://review.openstack.org/#/c/44063118:05
*** schwicht has joined #openstack-ansible18:08
*** stelouie has left #openstack-ansible18:12
*** vnogin has joined #openstack-ansible18:13
*** adogrant has quit IRC18:14
odyssey4mejmccrory answered18:14
*** woodard has joined #openstack-ansible18:15
*** TxGirlGeek has quit IRC18:15
*** TxGirlGeek has joined #openstack-ansible18:16
vnoginguys, did any one face this issue? http://paste.openstack.org/show/601170/18:17
vnoginnewton/stable18:18
*** vzkyr3 has quit IRC18:18
*** cloudtrainme has quit IRC18:19
odyssey4mevnogin looks like a transient failure?18:19
odyssey4meTemporary failure in name resolution18:19
*** TxGirlGeek has quit IRC18:20
vnoginodyssey4me: and I need to deploy lab today :)))18:20
odyssey4mevnogin multi-node?18:20
*** woodard has quit IRC18:20
odyssey4mevnogin execute scripts/fastest-infra-wheel-mirror.py18:21
vnoginodyssey4me: big scale lab :)18:21
evrardjpcloudnull: did you think of using an ansible cache_plugin to basically fast fetch/fast reuse of cruton data?18:22
odyssey4methen add the var 'repo_build_pip_extra_indexes:' into user_variables.yml with a single list item that contains the result from running that script18:22
evrardjpyou can there store facts super fact with cassandra backend18:22
cloudnulli have.18:22
*** TxGirlGeek has joined #openstack-ansible18:22
cloudnulli did not implement it18:22
evrardjphehe :D18:22
odyssey4mevnogin but you may just have a dns resolution issue on your hosts18:22
evrardjpYou had a nice idea there.18:22
evrardjpjust saying18:22
*** McMurlock1 has quit IRC18:23
*** whiteveil has joined #openstack-ansible18:24
vnoginodyssey4me: damn... Jesse, I owe you beer )) I need to sleep )18:24
evrardjphaha18:25
evrardjpyes I guess it must be late for you!18:25
*** crushil has joined #openstack-ansible18:25
odyssey4mevnogin good luck!18:26
vnoginevrardjp: yep)18:27
vnoginodyssey4me: tnx18:27
openstackgerritMerged openstack/openstack-ansible-os_nova stable/ocata: Change /etc/default/libvirt-bin to libvirtd  https://review.openstack.org/44067118:29
openstackgerritMerged openstack/openstack-ansible-os_nova stable/ocata: Adjust ordering for nova_db_setup  https://review.openstack.org/44067918:29
*** The_Intern has quit IRC18:32
*** lucasxu has joined #openstack-ansible18:32
*** The_Intern has joined #openstack-ansible18:32
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Octavia role hacking  https://review.openstack.org/41721018:34
*** TxGirlGeek has quit IRC18:35
*** TxGirlGeek has joined #openstack-ansible18:36
*** The_Intern has quit IRC18:37
*** chhavi has quit IRC18:41
*** The_Intern has joined #openstack-ansible18:41
*** Andrew_jedi has quit IRC18:42
*** weezS has joined #openstack-ansible18:43
*** schwicht has quit IRC18:43
xgermandoes this ring a bell?18:46
xgermanhttps://www.irccloud.com/pastebin/anuf2Iwe/18:46
xgermanstevelle, mhayden?18:47
logan-xgerman: can you provide the contents of /var/log/keystone/keystone.log from that container18:48
logan-xgerman: you may be hitting https://bugs.launchpad.net/openstack-ansible/+bug/166796018:49
openstackLaunchpad bug 1667960 in openstack-ansible "Rebuilding keystone[0] container breaks credential keys" [Critical,Confirmed]18:49
xgermanyep, likely18:50
xgermanhttps://www.irccloud.com/pastebin/jf8s1SNQ/18:50
xgermanhere is the stacktrace18:50
logan-looks like some other issue18:51
xgermanmmh, this is a fresh AIO install18:52
logan-which branch? master?18:52
xgermanof course master18:52
*** crushil has quit IRC18:53
*** admin0 has joined #openstack-ansible18:53
*** crushil has joined #openstack-ansible18:53
*** sdake_ has joined #openstack-ansible18:54
logan-do you have the ansible playbook run log of os-keystone-install18:54
*** sdake has quit IRC18:55
xgermanwhere would I find those18:55
xgerman?18:55
logan-your console, the tasks taht were run before it failed18:56
xgermanok18:56
logan-did you run the playbooks multiple times? or is this the first run?18:57
xgerman1st run18:57
logan-odd that credential_migrate is even being run18:59
logan-it should be skipped for greenfield18:59
xgermanyeah https://usercontent.irccloud-cdn.com/file/KFCST6B1/log.txt19:00
xgerman^^ here is the output19:01
*** DanyC has quit IRC19:02
logan-looks like something to do with https://github.com/openstack/openstack-ansible-os_keystone/commit/d2e00019b49e6a07adb89b84536921a06c19ff0e jmccrory19:02
logan-"Check current state of Keystone DB" failed the playbook19:02
jmccroryoh, if that's a fresh install you'll need to make sure the keystone_git_branch is at least at 99db3c83e09b8c1df25ec06fe99530aa088c325f19:04
jmccroryhttps://review.openstack.org/#/c/432376/19:04
jmccrorythe check command wasn't working for new installs until that patch19:05
*** manheim_ has joined #openstack-ansible19:05
logan-cool thx19:05
jamesden_andymccr were you able to replicate that DB table perms issue?19:05
hamzyandymccr, what is the process to import a new role https://github.com/hamzy/os_molteniron.git into the openstack namespace?19:06
*** vnogin has quit IRC19:06
*** adrian_otto has quit IRC19:07
*** thorst has quit IRC19:09
*** manheim_ has quit IRC19:09
*** thorst has joined #openstack-ansible19:10
jmccrorykeystone_git_install_branch * ^19:10
agrebennikov_evrardjp may I have your attention please?19:10
*** vnogin has joined #openstack-ansible19:10
evrardjphum yes?19:14
evrardjpsorry if I did something wrong.19:14
evrardjp:D19:14
*** thorst has quit IRC19:14
*** adrian_otto has joined #openstack-ansible19:15
agrebennikov_evrardjp it is about galera_client_ssl thing19:16
agrebennikov_can you take a look real quick?19:16
evrardjpsure19:17
evrardjpok19:18
evrardjpI remember19:18
evrardjpso my point was19:18
evrardjpif we are using the default, no need to override it in group_vars19:18
evrardjpwhen we are ready to override this var, let's do it19:18
*** lucasxu has quit IRC19:18
*** lucasxu has joined #openstack-ansible19:19
evrardjpso I don't complain about the introduction of galera_client_use_ssl, etc.19:19
evrardjpI just think it would be great to set it to True :)19:19
evrardjpbut as long as it's not ready I don't see the point19:19
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/ocata: Use horizon_ssl_protocol variable  https://review.openstack.org/43988519:19
odyssey4meevrardjp better to do the same as we do for rabbitmq19:20
evrardjpyes19:20
evrardjpagreed odyssey4me19:20
evrardjpmove to true :)19:20
evrardjpin the openstack-ansible19:20
evrardjpwhen ready19:20
odyssey4mewe should not use ssl for role tests, and that should be the default - but we set it to true in group_vars so that the integrated build uses it19:20
evrardjpyes19:20
evrardjpprecisely!19:20
odyssey4methis way we test both code paths19:20
odyssey4meeverything must merge into the galera_client and galera_server roles, and any other roles which require changes... then we implement it in the integrated gate19:21
evrardjpagrebennikov_: so keep the patch under your hand somewhere, cause you're gonna need it soon :)19:21
*** adrian_otto has quit IRC19:23
*** sdake_ has quit IRC19:24
*** adrian_otto has joined #openstack-ansible19:25
agrebennikov_not sure I'm following :/19:25
agrebennikov_do I keep the naming?19:26
agrebennikov_of the vars19:26
evrardjpthere is no problem with the naming19:26
evrardjpthe commit shouldn't exist right now19:26
agrebennikov_why?19:26
odyssey4meagrebennikov_ as an example, using rabbitmq19:26
evrardjpbecause by default we are using (in the galera_client and server role) the same value as what you re defining in group_vars19:26
odyssey4mewe, in every role, set use_ssl for rabbitmq to false by default: https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L11919:27
evrardjpso we are carrying code that doesn't do anything, which is source of confusions19:27
agrebennikov_I mean, I just don't want to duplicate the var in the roles.... or you mean I HAVE to?19:27
odyssey4methen in group_vars for the integrated build we set it to true: https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L28819:27
*** schwicht has joined #openstack-ansible19:27
odyssey4meagrebennikov_ yes, every role must have a default that does not rely on external input19:28
odyssey4methat ensures that it can run independently19:28
agrebennikov_I see... that was confusing :)19:28
agrebennikov_so each value in the group vars should Necessarily be mentioned in the role's defaults as well19:29
odyssey4meso each role should have a namespaced var, for example: keystone_galera_use_ssl19:29
odyssey4mebut it should be defaulted in the role to false19:29
agrebennikov_which means it will not be jsut one unified var.....19:30
odyssey4methen in group_vars, have a galera_use_ssl var set to true, which is used to set keystone_galera_use_ssl: "{{ galera_use_ssl }}"19:30
agrebennikov_instead you want me to create 15 vars XYZ_galera_use_ssl?19:30
odyssey4methat way there is an easy key var, but each service can also be set independently19:30
odyssey4meyes19:30
*** electrofelix has quit IRC19:31
odyssey4meit's a pain, but that's how best to do it19:31
odyssey4meit ensures that there is individual service control using namespaced vars19:31
agrebennikov_and then keystone role will have its own keystone_galera_use_ssl in the defaults, set to false?19:31
odyssey4meyes19:32
odyssey4mein the role tests it will not use ssl, but in the integrated build it will use ssl - that way both code paths are tested and deployers have the choice19:32
agrebennikov_well.... as you wish :)19:33
odyssey4meit's important also because in some cases we may find that something doesn't work properly, for example swift doesn't support RPC over SSL so we had to hard set https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/swift_all.yml#L2419:33
agrebennikov_let me make a quick change then19:33
*** admin0 has quit IRC19:33
agrebennikov_but do I have to then do barbican_use_ssl, magnum_use_ssl, trove_use_ssl?19:33
agrebennikov_and stuff like that19:33
odyssey4mebarbican_galera_use_ssl, etc yes19:34
odyssey4meeach role's var is namespaced19:34
agrebennikov_or I only add those vars which I'm in fact going to change right now?19:34
agrebennikov_no, I'm telling about smtng else19:34
agrebennikov_in openstack-ansible group_vars19:34
agrebennikov_in my commit19:34
odyssey4mebetter to implement the vars in all the roles first, before going for the integrated build set19:35
agrebennikov_do I have to only mention 6 components or 26 components which will potentially use ssl19:35
agrebennikov_ok, yeah, it makes sense19:35
agrebennikov_I just thought about having one var in the head first19:35
odyssey4meotherwise things break badly, and all development is stalled19:35
agrebennikov_totally agree, my bad19:35
agrebennikov_ok, let me submit all roles for now19:36
agrebennikov_description of the feature in the role required?19:36
agrebennikov_each role19:36
odyssey4methe defaults are exposed as documentation, so a comment wiht the var is good19:37
agrebennikov_gotcha19:37
agrebennikov_tnx!19:37
odyssey4meI would recommend just doing one role first, establishing the pattern, then doing the rest once the first is merged19:37
*** MasterOfBugs has joined #openstack-ansible19:37
agrebennikov_it's actually over there already.. ust need to add the var https://review.openstack.org/#/c/438095/19:38
*** The_Intern has quit IRC19:38
agrebennikov_but then19:39
palendaeShould we add a confirm step to removing hosts/groups? :)19:39
agrebennikov_what to do with the actual path to the CA cert?19:39
palendaeLet’s be sure as we encounter problems, we invest the effort to make the fix effective, complete and long lasting19:39
palendaeOops, meant https://aws.amazon.com/message/41926/19:39
openstackgerritMerged openstack/openstack-ansible-galera_server stable/ocata: Fix fact set using ternary filter  https://review.openstack.org/43915019:40
*** The_Intern has joined #openstack-ansible19:41
odyssey4meagrebennikov_ what do you mean?19:44
*** adrian_otto has quit IRC19:45
odyssey4meagrebennikov_ https://docs.openstack.org/security-guide/databases/database-transport-security.html is not very helpful19:46
odyssey4meagrebennikov_ this is apparently a start: http://stackoverflow.com/questions/8014781/how-to-make-mysql-connection-that-requires-ca-cert-with-sqlalchemy-or-sqlobject19:48
*** Rodrigo_BR has quit IRC19:51
odyssey4meagrebennikov_ what you can try - not sure if these work any more, but you can add ssl_ca_file, ssl_cert_file and ssl_key_file to the conf file of any service19:51
odyssey4meI think it goes under the [ssl] or [DEFAULT] section, not sure19:52
odyssey4meoh, hang on  - I see you're passing it into the connection string19:53
odyssey4methen I really don't understand what your question is :)19:54
*** cloudtrainme has joined #openstack-ansible20:01
*** jamielennox|away is now known as jamielennox20:02
DimGR TASK [lxc_container_create : Wait for ssh to be available]    does this mean there is a problem with the bridges ? This part of the role just now started giving errors about not being able to ssh into the containers20:05
nea1evrardjp: SamYaple I just noticed that when I use ssh to connect to the container the HOSTNAME is not set in `env` and `echo $HOSTNAME` returns the correct hostname - seams like this comes somewhere from lxc-attach20:05
agrebennikov_odyssey4me, sorry, I was away for a bit... I was asking about the war only :) in general everything is ready20:07
agrebennikov_the var of the path for the mysql CA cert20:07
agrebennikov_you can take a look at the patch, it is pretty simple (if you have a minute)20:07
odyssey4meagrebennikov_ any vars in a role should be namespaced ideally, although exceptions can be made20:08
odyssey4meI would say that the user-provided var can be consistent across roles though - that makes sense20:09
odyssey4menot sure - push a patch up and let's see20:09
odyssey4me(sorry - busy in something else right now)20:09
agrebennikov_absolutely20:09
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible-haproxy_server master: Define haproxy_ssl_protocol variable.  https://review.openstack.org/43991220:10
*** DanyC has joined #openstack-ansible20:12
*** askb has joined #openstack-ansible20:14
mrdaMorning OSA20:18
palendaeMorning mrda20:19
mrdao/20:19
nea1evrardjp: SamYaple and the content of ansible_env gets set by the gather_facts (which has the HOSTNAME= set) and overwriting the HOSTNAME in /etc/openstack_deploy/ansible_facts/ doesn't help20:24
nea1or better saied the ansible_env is the env of the host20:24
*** vnogin has quit IRC20:25
*** vnogin has joined #openstack-ansible20:25
*** chris_hultin is now known as chris_hultin|AWA20:28
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_nova master: Added MySQL connection SSL support  https://review.openstack.org/43809520:29
agrebennikov_odyssey4me, that one20:31
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible-haproxy_server master: Define haproxy_ssl_protocol variable.  https://review.openstack.org/43991220:33
*** TxGirlGeek has quit IRC20:33
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: Cap the number of worker processes  https://review.openstack.org/44054920:35
*** h5t4 has quit IRC20:35
*** thorst has joined #openstack-ansible20:35
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build master: Add non *.whl files to MANIFEST.in  https://review.openstack.org/43965920:36
*** cloudtrainme has quit IRC20:36
*** vnogin has quit IRC20:37
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible master: [WIP] Remove Ceilometer API Service  https://review.openstack.org/43874020:39
*** DFFlanders has joined #openstack-ansible20:47
openstackgerritMerged openstack/openstack-ansible-os_ironic master: Cap the number of worker processes  https://review.openstack.org/44070620:49
*** Andrew_jedi has joined #openstack-ansible20:50
openstackgerritMerged openstack/openstack-ansible-os_aodh master: Cap the number of worker processes  https://review.openstack.org/44053020:50
*** crushil has quit IRC20:56
*** crushil has joined #openstack-ansible20:57
openstackgerritMerged openstack/openstack-ansible-pip_install stable/ocata: Use block-rescue for pip install  https://review.openstack.org/44058921:02
*** vnogin has joined #openstack-ansible21:06
*** smatzek_ has quit IRC21:10
hwoaranglogan-: hello! do you mind if i ping you about this? https://github.com/Logan2211/ansible-etcd/pull/8 :) TIA21:12
openstackgerritMerged openstack/openstack-ansible-pip_install stable/newton: Use block-rescue for pip install  https://review.openstack.org/44059521:16
*** Andrew_jedi has quit IRC21:17
*** TxGirlGeek has joined #openstack-ansible21:18
mgariepyhwoarang, we can chat tomorrow if you want i was kinda stuck in a meeting today21:18
mgariepyhwoarang, I should be back at 8 or 9 am eastern tomorrow21:19
*** kjw3 has joined #openstack-ansible21:19
*** adrian_otto has joined #openstack-ansible21:20
openstackgerritMerged openstack/openstack-ansible-tests stable/ocata: Set the Nova wsgi processes and threads  https://review.openstack.org/44056421:22
hwoarangmgariepy: sure no problem21:24
*** The_Intern has quit IRC21:30
*** The_Intern has joined #openstack-ansible21:30
*** TxGirlGeek has quit IRC21:32
*** The_Intern has quit IRC21:35
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible-haproxy_server master: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/43991221:36
*** The_Intern has joined #openstack-ansible21:37
*** karimb has quit IRC21:37
*** karimb has joined #openstack-ansible21:38
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_nova master: Added MySQL connection SSL support  https://review.openstack.org/43809521:40
*** jrobinson has joined #openstack-ansible21:43
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build master: Add non *.whl files to MANIFEST.in  https://review.openstack.org/43965921:44
*** chris_hultin|AWA is now known as chris_hultin21:45
*** chris_hultin is now known as chris_hultin|AWA21:49
*** Jack_Iv has quit IRC21:50
*** Jack_Iv has joined #openstack-ansible21:51
*** whiteveil has quit IRC21:51
*** The_Intern has quit IRC21:52
*** cjloader_ has joined #openstack-ansible21:53
*** The_Intern has joined #openstack-ansible21:54
*** xar- has quit IRC21:55
*** Jack_Iv has quit IRC21:55
*** DanyC has quit IRC21:57
*** cjloader has quit IRC21:57
*** cjloader_ has quit IRC21:58
*** fguillot has quit IRC22:05
*** thorst has quit IRC22:08
*** xar- has joined #openstack-ansible22:09
dolphmwhat does ssl termination for keystone?22:10
dolphmi'm assuming the answer is "it depends", but i only see apache config for it22:12
*** The_Intern has quit IRC22:13
*** The_Intern has joined #openstack-ansible22:13
*** jamesden_ has quit IRC22:15
*** manheim_ has joined #openstack-ansible22:15
*** crushil has quit IRC22:17
*** TxGirlGeek has joined #openstack-ansible22:17
*** The_Intern has quit IRC22:18
andymccrdolphm: it'd be apache (but haproxy can do it too)22:19
jmccrorydolphm : think the options for OSA right now are physical lb, haproxy, or apache/nginx22:19
*** manheim_ has quit IRC22:20
andymccrdolphm: ideally with the new community goal all services are on nginx/apache so we set it up that way :)22:20
*** The_Intern has joined #openstack-ansible22:20
*** stelouie_ has quit IRC22:23
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_nova master: Added MySQL connection SSL support  https://review.openstack.org/43809522:24
openstackgerritMerged openstack/openstack-ansible-os_nova stable/ocata: Split upgrade testing into it's own shell script  https://review.openstack.org/43800222:26
*** schwicht has quit IRC22:27
*** jmckind_ has quit IRC22:31
*** ngupta_ has joined #openstack-ansible22:32
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_neutron master: Adds Octavia to Neutron  https://review.openstack.org/42897922:32
*** gouthamr has quit IRC22:33
openstackgerritGerman Eichberger proposed openstack/openstack-ansible master: Additions to install OpenStack Octavia  https://review.openstack.org/42206222:33
*** ngupta has quit IRC22:34
*** ngupta_ has quit IRC22:36
*** thorst has joined #openstack-ansible22:36
*** thorst has quit IRC22:41
*** rmelero has joined #openstack-ansible22:45
openstackgerritMerged openstack/openstack-ansible master: Added a common tag to the common tasks  https://review.openstack.org/44066522:47
*** kstev has quit IRC22:52
*** gouthamr has joined #openstack-ansible22:57
*** schwicht has joined #openstack-ansible23:01
*** admin0 has joined #openstack-ansible23:08
*** sdake has joined #openstack-ansible23:09
*** adrian_otto has quit IRC23:16
*** thorst has joined #openstack-ansible23:17
*** sdake has quit IRC23:18
*** sdake has joined #openstack-ansible23:19
*** thorst has quit IRC23:19
*** GustavoChalco has joined #openstack-ansible23:20
*** hw_wutianwei1 has joined #openstack-ansible23:21
*** mmalik4_ has quit IRC23:21
*** lucasxu has quit IRC23:22
GustavoChalcoHello, I been facing a problem when trying to run openstack-ansible setup-infrastructure.yml --syntax-check23:22
*** ngupta has joined #openstack-ansible23:23
GustavoChalcoI'm getting the following result : ERROR! Attempted to execute "/opt/openstack-ansible/playbooks/inventory/dynamic_inventory.py" as inventory script: Inventory script (/opt/openstack-ansible/playbooks/inventory/dynamic_inventory.py) had an execution error: global_overrides can't be found in user config23:23
*** hw_wutianwei has quit IRC23:23
*** hw_wutianwei1 is now known as hw_wutianwei23:23
*** The_Intern has quit IRC23:24
*** acormier has quit IRC23:25
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_nova master: Added MySQL connection SSL support  https://review.openstack.org/43809523:29
*** schwicht has quit IRC23:31
*** adrian_otto has joined #openstack-ansible23:31
*** marst has quit IRC23:31
*** MasterOfBugs has quit IRC23:32
*** MasterOfBugs has joined #openstack-ansible23:33
*** jamielennox is now known as jamielennox|away23:37
*** klamath has quit IRC23:37
jmccroryGustavoChalco is your /etc/openstack_deploy/openstack_user_config.yml missing a global_overrides section? https://docs.openstack.org/project-deploy-guide/openstack-ansible/newton/app-config-prod.html#production-environment-config23:38
*** MasterOfBugs has quit IRC23:38
*** sdake has quit IRC23:40
*** sdake_ has joined #openstack-ansible23:40
*** TxGirlGeek has quit IRC23:41
*** galstrom is now known as galstrom_zzz23:41
GustavoChalcojmccrory I been following these guide https://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/run-playbooks.html23:42
*** marst has joined #openstack-ansible23:42
*** jmckind has joined #openstack-ansible23:47
*** jmckind has quit IRC23:47
*** dimtheo_ has joined #openstack-ansible23:50
*** DimGR has quit IRC23:51
*** jmckind has joined #openstack-ansible23:52
*** admin0 has quit IRC23:52
*** Jack_Iv has joined #openstack-ansible23:52
*** admin0 has joined #openstack-ansible23:53
*** sdake_ has quit IRC23:53
*** admin0 has quit IRC23:56
vnoginguys,  all containers failed with the following error http://paste.openstack.org/show/601202/ does anyone know what's wrong? :)23:57
*** Jack_Iv has quit IRC23:57
*** dimtheo_ has quit IRC23:58
*** karimb has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!