Friday, 2017-03-03

*** karimb has joined #openstack-ansible00:01
openstackgerritDarren Chan proposed openstack/openstack-ansible master: [docs] Add content to the troubleshooting chapter  https://review.openstack.org/44014400:02
*** crushil has joined #openstack-ansible00:02
*** mmalik4 has joined #openstack-ansible00:02
*** dileepr has joined #openstack-ansible00:07
vnoginit seems that is my case https://github.com/systemd/systemd/issues/337400:07
*** schwicht has joined #openstack-ansible00:08
*** mmalik4 has quit IRC00:09
*** ngupta has quit IRC00:13
*** ngupta has joined #openstack-ansible00:13
*** mpjetta has quit IRC00:14
cloudnullvnogin: if you run that veth wiring script with the provided params does it give you any better output ?00:17
*** ngupta has quit IRC00:17
cloudnullGustavoChalco: normally that's due to the file /etc/openstack_deploy/openstack_user_config.yml00:18
cloudnullnot being setup correctly00:18
*** sdake has joined #openstack-ansible00:19
*** thorst has joined #openstack-ansible00:20
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/43991200:22
*** rmelero has quit IRC00:23
*** thorst has quit IRC00:25
*** adrian_otto has quit IRC00:27
vnogincloudnull: http://paste.openstack.org/show/601204/ yep, output looks better now00:30
*** schwicht has quit IRC00:33
*** karimb has quit IRC00:34
vnogincloudnull: however I don't understand why it doesn't see eth1 as it's up00:34
*** markvoelker has quit IRC00:35
*** ngupta has joined #openstack-ansible00:35
*** jmckind has quit IRC00:35
*** markvoelker has joined #openstack-ansible00:35
*** furlongm has quit IRC00:36
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/mitaka: Use horizon_ssl_protocol variable  https://review.openstack.org/43988900:36
cloudnullvnogin: does br-mgmt exist ?00:39
cloudnulleth1 is the address within the container00:39
cloudnull's/address/device/00:40
*** DFFlanders has quit IRC00:40
cloudnullwhich leads me to believe that the container didn't get an interface.00:40
*** markvoelker has quit IRC00:40
vnogincloudnull: yep, everything looks correct http://paste.openstack.org/show/601205/00:42
*** jamielennox|away is now known as jamielennox00:43
cloudnullin the container config under /var/lib/lxc/729018-comp-disk-254_nova_conductor_container-30f0466/ is there a file for eth1.ini ?00:44
*** sdake_ has joined #openstack-ansible00:47
vnogincloudnull: yep00:48
*** DimGR has joined #openstack-ansible00:48
*** sdake has quit IRC00:48
*** DimGR has quit IRC00:49
vnogincloudnull: http://paste.openstack.org/show/601207/00:49
cloudnullcan you stop the container00:49
cloudnulland then start it00:49
vnoginsure00:50
*** manheim has joined #openstack-ansible00:50
cloudnullwell. i guess the next thing to check is that the eth1.ini file is included in the main config00:50
cloudnull## /var/lib/lxc/729018-comp-disk-254_nova_conductor_container-30f0466/config00:50
vnogincloudnull: restarted.. the same..00:51
cloudnullin the main config you should see something like lxc.include = /var/lib/lxc/729018-comp-disk-254_nova_conductor_container-30f0466/eth1.ini00:53
*** Jack_Iv has joined #openstack-ansible00:53
vnoginhttp://paste.openstack.org/show/601209/00:53
vnogincloudnull: yep, it's there00:53
cloudnullif you lxc-attach to the container do you see eth1 ?00:54
vnogincloudnull: yep00:54
cloudnulldoes it have an address?00:54
vnogincloudnull: nope00:54
cloudnullin the container under /etc/network/interfaces is there an include line ?00:55
cloudnullfor the interface config in /etc/network/interfaces.d00:55
vnogincloudnull: as far as I see from /etc/network/interfaces.d it should have it00:55
cloudnulldoes [ /etc/network/interfaces ] have "source /etc/network/interfaces.d/*.cfg"00:56
*** cuongnv has joined #openstack-ansible00:56
vnogincloudnull: by some reason - nope....00:56
cloudnullinteresting . did something fail in the container create process ?00:57
cloudnullor maybe the lxc-host playbook ?00:57
*** Jack_Iv has quit IRC00:58
vnoginnope, it failed on wired script step only. And at the very beginning due to dns issue00:58
cloudnullis this master?00:59
vnoginshould we in near future :)00:59
vnoginactually it failed on all controller nodes01:00
cloudnullso that gets added into the lxc container cache01:01
cloudnullhttps://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/vars/ubuntu-16.04.yml#L11001:01
cloudnulli suspect that something went wrong when building the cache01:01
vnogincloudnull: http://paste.openstack.org/show/601211/01:01
cloudnullwhich resulted in that line not being in the default interface file.01:01
cloudnullthough idk what01:01
*** vcn[m] has quit IRC01:02
*** evrardjp[m] has quit IRC01:02
cloudnullyou could try nuking the containers, purging the cache and rerunning lxc-host-setup and lxc-container-create ?01:02
cloudnullor just go add that line to all the containers.01:03
*** csmart has quit IRC01:03
vnogincloudnull: yep, it seems that it's really good idea. btw how purge the cache? :)01:05
vnoginI mean is there any playbook for it?01:05
cloudnullansible -m shell -a 'rm -rf /var/cache/lxc/*' hosts01:05
vnogincloudnull: cool ) tnx )01:06
cloudnullnp01:06
*** ngupta has quit IRC01:06
*** ngupta has joined #openstack-ansible01:06
vnogincloudnull: I think it's better to ask - Did you mean to use lxc-destroy command for containers or something else01:09
*** ngupta has quit IRC01:11
*** vcn[m] has joined #openstack-ansible01:11
*** cjloader has joined #openstack-ansible01:12
cloudnullwe have a playbook for that01:12
cloudnulllxc-container-destroy.yml01:12
cloudnullit is suffeciently destructive01:12
cloudnull:)01:12
*** csmart has joined #openstack-ansible01:12
*** weezS has quit IRC01:12
*** evrardjp[m] has joined #openstack-ansible01:15
spotzhehe01:16
*** agrebennikov_ has quit IRC01:18
vnogincloudnull: ))) and again tnx. btw - I've checked cache files and thay looks fine. interfaces file contains relevant line for *.d folder01:20
*** thorst has joined #openstack-ansible01:21
cloudnullnice!01:21
cloudnullwas that after or before rebuilding it ?01:22
vnogincloudnull: before01:23
cloudnullah , so maybe something was off with the container create?01:23
*** acormier has joined #openstack-ansible01:23
cloudnullare there multiple dirs under /var/cache/lxc/ ?01:24
*** cjloader has quit IRC01:24
vnogincloudnull: nope..01:24
cloudnulljust downloads ?01:24
vnoginyep01:24
vnoginhowever let's try again :)01:24
cloudnullmultiple dirs in downloads ?01:25
vnoginmaybe this time it will be deployed ))01:25
*** thorst has quit IRC01:25
vnogincloudnull: nope, only ubuntu01:25
cloudnullok01:25
vnogincloudnull: I've tried to find the root cause as well..01:26
vnogineven checked tarball01:26
cloudnullvery odd01:27
vnoginyep01:28
cloudnullmust be gremlins01:28
cloudnull:)01:28
*** jamielennox is now known as jamielennox|away01:29
*** sdake has joined #openstack-ansible01:32
*** sdake_ has quit IRC01:34
vnogincloudnull: LOL )))01:34
*** jmckind has joined #openstack-ansible01:34
cloudnullalright all, im out.01:34
cloudnullhave a good one01:34
*** jmckind has quit IRC01:35
*** markvoelker has joined #openstack-ansible01:36
*** jamielennox|away is now known as jamielennox01:36
*** thorst has joined #openstack-ansible01:37
*** mmalik4 has joined #openstack-ansible01:39
*** markvoelker has quit IRC01:40
*** thorst has quit IRC01:41
*** markvoelker has joined #openstack-ansible01:43
*** sanfern has quit IRC01:50
*** sanfern has joined #openstack-ansible01:51
*** Jack_Iv has joined #openstack-ansible01:54
*** thorst has joined #openstack-ansible01:58
*** Jack_Iv has quit IRC01:58
*** thorst has quit IRC01:59
*** Mahe has quit IRC02:06
*** Mahe has joined #openstack-ansible02:09
*** manheim has quit IRC02:18
*** thorst has joined #openstack-ansible02:23
*** thorst has quit IRC02:24
*** vnogin has quit IRC02:32
*** woodard has joined #openstack-ansible02:33
*** woodard has quit IRC02:37
*** crushil has quit IRC02:38
*** thorst has joined #openstack-ansible02:48
*** thorst has quit IRC02:48
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_tempest stable/newton: Fix tempest for os_horizon role  https://review.openstack.org/44090602:48
*** galstrom_zzz is now known as galstrom02:50
*** mmalik4 has quit IRC02:50
*** Jack_Iv has joined #openstack-ansible02:54
*** Jack_Iv has quit IRC02:59
*** lucasxu has joined #openstack-ansible03:03
*** lucasxu has quit IRC03:10
*** mmalik4 has joined #openstack-ansible03:28
*** vnogin has joined #openstack-ansible03:32
*** acormier has quit IRC03:35
*** vnogin has quit IRC03:37
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible-haproxy_server stable/ocata: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/44091903:40
*** galstrom is now known as galstrom_zzz03:41
*** acormier has joined #openstack-ansible03:41
*** crushil has joined #openstack-ansible03:53
*** thorst has joined #openstack-ansible03:54
*** Jack_Iv has joined #openstack-ansible03:55
*** ngupta has joined #openstack-ansible03:58
*** furlongm has joined #openstack-ansible03:58
*** thorst has quit IRC03:59
*** lucasxu has joined #openstack-ansible03:59
*** Jack_Iv has quit IRC04:00
*** acormier has quit IRC04:05
*** adrian_otto has joined #openstack-ansible04:06
*** jrobinson is now known as jrobinson-afk04:07
dmsimardAccording to https://review.openstack.org/#/c/396324/04:07
dmsimardIt took ~1 minute to generate http://logs.openstack.org/24/396324/9/check/gate-openstack-ansible-openstack-ansible-aio-centos-7-nv/764557b/logs/ara/index.html04:08
dmsimard35 playbooks, 2.8k tasks, 4.9k results04:08
dmsimardI'd say that's pretty reasonable04:08
*** udesale has joined #openstack-ansible04:13
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_cinder master: MySQL SSL connections allowed.  https://review.openstack.org/44092504:23
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_cinder master: MySQL SSL connections allowed.  https://review.openstack.org/44092504:23
*** shausy has joined #openstack-ansible04:25
openstackgerritDavid Moreau Simard proposed openstack/openstack-ansible master: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/39632404:27
*** ngupta has quit IRC04:37
*** pmannidi_ has quit IRC04:37
*** mmalik4 has quit IRC04:40
*** jrobinson-afk is now known as jrobinson04:41
*** gouthamr has quit IRC04:45
*** sdake_ has joined #openstack-ansible04:48
*** sdake has quit IRC04:50
*** lucasxu has quit IRC04:52
*** sdake has joined #openstack-ansible04:53
*** adrian_otto has quit IRC04:53
*** adrian_otto has joined #openstack-ansible04:54
*** pmannidi_ has joined #openstack-ansible04:54
*** thorst has joined #openstack-ansible04:55
*** sdake_ has quit IRC04:55
*** Jack_Iv has joined #openstack-ansible04:56
*** crushil has quit IRC04:58
*** thorst has quit IRC05:00
*** udesale__ has joined #openstack-ansible05:01
*** udesale has quit IRC05:04
*** sdake has quit IRC05:04
*** sdake has joined #openstack-ansible05:05
*** pmannidi_ has quit IRC05:05
*** Jack_Iv has quit IRC05:06
*** markvoelker has quit IRC05:07
*** sdake has quit IRC05:09
*** sdake has joined #openstack-ansible05:14
*** pmannidi has joined #openstack-ansible05:16
*** sdake has quit IRC05:24
*** h5t4_ has joined #openstack-ansible05:24
*** weezS has joined #openstack-ansible05:25
*** sdake has joined #openstack-ansible05:27
*** adrian_otto has quit IRC05:33
*** udesale__ has quit IRC05:33
*** udesale has joined #openstack-ansible05:34
*** vnogin has joined #openstack-ansible05:34
*** sanfern has quit IRC05:37
*** sanfern has joined #openstack-ansible05:37
*** vnogin has quit IRC05:39
*** adrian_otto has joined #openstack-ansible05:40
*** Jeffrey4l has joined #openstack-ansible05:51
*** sdake_ has joined #openstack-ansible05:51
*** Jeffrey4l has quit IRC05:53
*** sdake has quit IRC05:53
*** Jeffrey4l has joined #openstack-ansible05:53
*** Jack_Iv has joined #openstack-ansible05:54
*** h5t4_ has quit IRC05:56
*** thorst has joined #openstack-ansible05:56
*** thorst has quit IRC06:01
*** Jeffrey4l has quit IRC06:03
openstackgerritSatheesh Kumar Ulaganathan proposed openstack/openstack-ansible-haproxy_server master: Enable timeout for http_request  https://review.openstack.org/44093506:04
pradiprwtHow to desable "apt-cacher-proxy" ??06:05
*** sdake_ has quit IRC06:05
*** markvoelker has joined #openstack-ansible06:07
*** Jeffrey4l has joined #openstack-ansible06:09
*** Jeffrey4l has quit IRC06:11
*** markvoelker has quit IRC06:12
*** weezS has quit IRC06:21
*** weezS has joined #openstack-ansible06:23
*** udesale__ has joined #openstack-ansible06:36
*** Amit82 has joined #openstack-ansible06:38
Amit82Hi All,  I have deployed Openstack using Openstack-Ansible. I am using Newton release from tag 14.0.8. My test environment is containing only Compute Node and Controller Node (Infra Node). When using Openstack Python SDK, I am getting following error while making connection to external_vib_lp_address (192.168.255.45) binded to port 5000.  openstack.exceptions.SDKException: Connection failure that may be retried.  Any clue ab06:38
Amit82More detailed traces are at: http://paste.openstack.org/show/601053/06:39
*** udesale has quit IRC06:39
Amit82Python script which I am using for this purpose is at: http://paste.openstack.org/show/601241/06:40
Amit82I am running this python script on some external machine, I am successfully able to run Horizon UI on the same machine where this python script is run06:41
*** weezS has quit IRC06:48
*** admin0 has joined #openstack-ansible06:53
*** h5t4_ has joined #openstack-ansible06:54
*** admin0 has quit IRC06:55
*** thorst has joined #openstack-ansible06:57
*** admin0 has joined #openstack-ansible06:58
*** thorst has quit IRC07:01
*** Oku_OS-away is now known as Oku_OS07:02
*** admin0 has quit IRC07:05
*** Amit82 has quit IRC07:06
*** adrian_otto has quit IRC07:12
*** hachi has joined #openstack-ansible07:13
*** sprvn has joined #openstack-ansible07:15
*** david-lyle has quit IRC07:16
*** jrobinson has quit IRC07:16
*** david-lyle has joined #openstack-ansible07:16
*** admin0 has joined #openstack-ansible07:17
*** hw_wutianwei has quit IRC07:26
*** hw_wutianwei has joined #openstack-ansible07:27
*** hw_wutianwei has quit IRC07:30
*** Amit82 has joined #openstack-ansible07:33
*** vnogin has joined #openstack-ansible07:36
*** pmannidi has quit IRC07:36
*** Jack_Iv has quit IRC07:36
*** Jack_Iv has joined #openstack-ansible07:37
*** hw_wutianwei has joined #openstack-ansible07:38
*** dileepr has quit IRC07:39
*** pcaruana has joined #openstack-ansible07:41
*** vnogin has quit IRC07:41
*** chhavi has joined #openstack-ansible07:54
*** thorst has joined #openstack-ansible07:58
*** thorst has quit IRC08:02
*** Jack_Iv has quit IRC08:07
*** markvoelker has joined #openstack-ansible08:08
admin0TGIF08:09
*** markvoelker has quit IRC08:14
*** fabg has joined #openstack-ansible08:14
*** vcn[m] has quit IRC08:14
*** evrardjp[m] has quit IRC08:14
*** csmart has quit IRC08:14
*** evrardjp[m] has joined #openstack-ansible08:20
*** Jack_Iv has joined #openstack-ansible08:29
*** SerenaFeng has joined #openstack-ansible08:29
*** SerenaFeng has quit IRC08:29
*** SerenaFeng has joined #openstack-ansible08:30
*** Jack_Iv has quit IRC08:31
*** udesale__ has quit IRC08:32
*** udesale has joined #openstack-ansible08:33
*** vnogin has joined #openstack-ansible08:35
*** Jack_Iv has joined #openstack-ansible08:35
*** Jack_Iv has quit IRC08:41
*** Jack_Iv has joined #openstack-ansible08:41
pradiprwtHow to disable "apt-cacher-proxy" in openstack ansible AIO??08:46
*** shardy has joined #openstack-ansible08:51
*** fabg has quit IRC08:52
*** manheim has joined #openstack-ansible08:55
*** thorst has joined #openstack-ansible08:58
*** manheim has quit IRC09:00
*** thorst has quit IRC09:09
*** david-lyle has quit IRC09:13
*** david-lyle has joined #openstack-ansible09:13
*** Andrew_jedi has joined #openstack-ansible09:22
*** Deys has joined #openstack-ansible09:23
Andrew_jediHello folks,  OpenStack hosts need no direct L2 connectivity on the management network, in principle all they need is IP connectivity, even if it's routed. Does OSA, however, make any assumption that all nodes are on the same L2 management network?09:25
*** david-lyle_ has joined #openstack-ansible09:30
*** david-lyle has quit IRC09:31
evrardjpAndrew_jedi: IIRC, it depends09:46
Andrew_jedievrardjp: Hello, i wanted to ask you something actually, i once saw you recommending multicast for vxlan networks, i was wondering about the reason behind that :)09:47
Andrew_jedievrardjp: I have another question,  does OSA support Neutron BGP, with or without DVR?09:48
evrardjpwell vxlan was designed with that in mind09:48
evrardjpunicast is just a hack IIRC09:48
evrardjpfar easier to build groups with multicast09:48
evrardjpwhat do you mean by neutron bgp? Neutron bgpvpn ?09:48
evrardjpcalico?09:49
*** vcn[m] has joined #openstack-ansible09:49
*** csmart has joined #openstack-ansible09:49
Andrew_jedievrardjp: ok, but both multicast switching and routing is something that always breaks in any data center09:49
Andrew_jedievrardjp: https://docs.openstack.org/developer/openstack-ansible-os_neutron/configure-network-services.html#bgp-dynamic-routing-service-optional09:49
evrardjpAndrew_jedi: I think we install all the software for bgp indeed09:50
evrardjpI haven't tried in a lab 'though09:51
evrardjpbut I'm not sure we are close to reference implementation or not09:52
evrardjpwhat are you trying to achieve?09:52
*** chhavi has quit IRC09:54
*** udesale has quit IRC09:55
evrardjpAndrew_jedi: also the configuration of the bgp there may be outdated09:55
Andrew_jedievrardjp: I was just thinking of trying bgp and dvr in my test env.09:56
Andrew_jediOhhh, thanks for the heads up !09:56
evrardjpyou may want to update our/other upstream docs if it's not accurate :)09:56
*** h5t4_ has quit IRC09:58
Andrew_jedievrardjp: :)10:03
odyssey4mepradiprwt if you don't want to use the apt cacher service, set 'repo_pkg_cache_enabled: no' in your user_variables.yml and re-run the setup-hosts, setup-infrastructure and setup-openstack playbooks10:04
*** manheim_ has joined #openstack-ansible10:06
*** thorst has joined #openstack-ansible10:06
*** manheim_ has quit IRC10:06
*** Deys has quit IRC10:09
*** thorst has quit IRC10:10
odyssey4meAmit82 unfortunately you have not provided enough information to go on, although looking at your python code I think you might not have given enough info - that said it seems that your client is getting a connection failure... I'd suggest troubleshooting with curl or the CLI from the utility container to verify that you have a working system and use the CLI debug flag in order to see the interactions10:10
*** Andrew_jedi has quit IRC10:10
*** markvoelker has joined #openstack-ansible10:10
*** vnogin has quit IRC10:10
*** Deys has joined #openstack-ansible10:10
odyssey4meAmit82 if your goal is to do development with the SDK I would recommend using the AIO instead of a multi-node system as it's a closed box with a well known configuration that makes troubleshooting easier10:11
*** electrofelix has joined #openstack-ansible10:11
odyssey4meonce you have a working application you can then try it on a multi-node system10:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/ocata: Cap the number of worker processes  https://review.openstack.org/44103310:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ironic stable/ocata: Cap the number of worker processes  https://review.openstack.org/44103410:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_gnocchi stable/ocata: Cap the number of worker processes  https://review.openstack.org/44103510:12
*** cuongnv has quit IRC10:14
*** markvoelker has quit IRC10:15
*** manheim_ has joined #openstack-ansible10:17
pradiprwtThanks odyssey4me10:22
odyssey4mepradiprwt I'm curious though, why would you want to remove an optimisation like that?10:22
pradiprwtWhere I can get these all user variable options ...10:23
*** fabg has joined #openstack-ansible10:23
pradiprwtodyssey4me : I am buildiag a OSA image and using that image if I am creating a new VM there facing issue becouse of proxy ...10:24
pradiprwtThere is one more problem I am facing which is related to lxc networking10:25
odyssey4mepradiprwt each role's defaults act as documentation of custom settings that can be applied in user_variables to change the default behaviour10:25
*** fabg has quit IRC10:25
odyssey4mepradiprwt it's pretty standard with any ansible to look at group_vars and defaults to see what settings are available to tweak should you want to10:25
*** admin0 has quit IRC10:26
pradiprwtodyssey4me : I want only openstack core services with plain http horizon access ..10:27
*** admin0 has joined #openstack-ansible10:27
pradiprwtcan you suggest me some user_variable which can help me to achive this10:28
odyssey4mepradiprwt I take it that you want all public endpoints to be http?10:28
pradiprwtodyssey4me : yes10:28
odyssey4meset 'openstack_service_publicuri_proto: http'10:29
odyssey4meI'm not sure if that's all that needs doing.10:29
odyssey4meNote that it'll only work if you set that before you first implement.10:29
pradiprwtodyssey4me: sure I am installing with fresh VM,10:30
*** admin0 has quit IRC10:31
Amit82odyssey4me: From utility container, command line client using "openstack ..." are working10:31
pradiprwtodyssey4me: what this variable is doing ... "horizon_external_ssl: True"10:32
Amit82I tried the python script: http://paste.openstack.org/show/601268/ from utility container but it is giving me 40010:33
odyssey4mepradiprwt it enables the ability to understand a reverse proxy doing SSL for horizon - I think it can be left alone10:33
odyssey4meAmit82 then you're going to have to dig into it through keystone logs - enable debug logging and use debugging to figure it out10:34
Amit82These are detailed error logs: http://paste.openstack.org/show/601271/10:36
Amit82odyssey4me: how to enable more detailed logging in keystone10:36
Amit82I am looking into keystone container /var/log/keystone10:36
Amit82Does these errors mean that some "domain" is expected while making connection10:38
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Added MySQL connection SSL support  https://review.openstack.org/43809510:38
*** hw_wutianwei has quit IRC10:39
*** askb has quit IRC10:40
*** admin0 has joined #openstack-ansible10:43
Amit82odyssey4me: This request is failing with 400. http://paste.openstack.org/show/601273/. It is generated by python script10:44
Amit82This request is successful. http://paste.openstack.org/show/601275/. It is generated by openstack command line10:45
*** hachi has quit IRC10:45
Amit82You can observe the difference is related to "domain". These are excerpts from wireshark.10:45
*** qiliang27 has quit IRC10:45
Amit82Seems domain is expected in the request10:46
odyssey4meAmit82 Yes, with the keystone v3 API the domain must be set. I would recommend that you read through the API documentation properly to understand what's going on there.10:46
odyssey4meYou'll need to adjust your query based on whether you're looking for a scoped or unscoped token. Each token type gives you different abilities.10:46
odyssey4meIt's probably best to try and field these questions in the SDK channel, if there is one.10:47
*** admin0 has quit IRC10:48
*** h5t4 has joined #openstack-ansible10:48
Amit82odyssey4me: yea, thanks for your help10:49
*** sprvn has quit IRC10:50
*** hachi has joined #openstack-ansible10:50
*** vnogin has joined #openstack-ansible10:52
*** chhavi has joined #openstack-ansible10:54
*** SerenaFeng has quit IRC10:55
*** vnogin has quit IRC10:56
*** Jack_Iv_ has joined #openstack-ansible10:57
*** Jack_Iv has quit IRC10:59
*** admin0 has joined #openstack-ansible10:59
*** vnogin has joined #openstack-ansible11:00
andymccrhamzy: ping when you're about - i'd be happy to help get the molteniron repo setup and imported. i think all i need is your base repo and i can import that as the "start" point for the role11:01
evrardjpodyssey4me: nea111:01
evrardjp       --keep-env11:02
evrardjp              Keep the current environment for attached programs. This is the current default behaviour (as of version 0.9), but is is likely to change in the future, since this may leak undesirable information into the container. If you rely on the environment being available for the attached program, please use this option to be future-proof. In  ad‐11:02
evrardjp              dition to current environment variables, container=lxc will be set.11:02
evrardjpso question11:02
evrardjpwhich version of lxc do we have in gates/on your machine11:02
*** fabg has joined #openstack-ansible11:02
evrardjpif we have to change our lxc module, it would be good to know11:03
odyssey4meandymccr here it is: https://review.openstack.org/#/c/427255/11/ansible-role-requirements.yml11:03
odyssey4mecc hamzy11:03
andymccrahh sweet11:03
andymccreasy11:03
andymccri'll put a request in today then11:03
odyssey4meyep, once it's imported we can help get the tests passing11:03
nea1evrardjp: # apt policy lxc11:03
nea1lxc:11:03
nea1  Installed: 2.0.7-0ubuntu1~16.04.111:03
andymccrexcellente11:04
odyssey4meevrardjp we use lxc 211:04
evrardjpInstalled: 2.0.7-0ubuntu1~16.04.111:04
evrardjpsame version11:04
evrardjpexact same version, no leakage11:04
evrardjp "works for me"11:04
*** Jack_Iv_ has quit IRC11:08
vnoginhi osa :)11:10
andymccrhey vnogin11:10
evrardjphey vnogin11:11
odyssey4meandymccr FYI it took almost no time to produce the ARA report... so I think we can get this one in: https://review.openstack.org/39632411:11
odyssey4mehughsaunders FYI ^11:12
andymccrahh yeah i saw that11:12
vnoginguys, someone faced issue when after container it doesn't load network configuration. If I attach it and restart networking - everything is ok. It faced it when started to use jumbo frames11:12
hughsaundersodyssey4me: thanks11:12
andymccror at least i saw the log showing the build time11:12
vnoginandymccr: evrardjp hi guys :) nice to see you :)11:12
*** Jack_Iv has joined #openstack-ansible11:12
odyssey4meandymccr http://logs.openstack.org/24/396324/10/check/gate-openstack-ansible-openstack-ansible-aio-ubuntu-xenial/222db89/console.html#_2017-03-03_06_00_59_28862811:13
odyssey4me~2m:17s11:13
odyssey4methat's a perfectly acceptable time in my mind11:13
evrardjpwe'll see in the future too11:14
evrardjpit looks buggy, or is it me?11:15
evrardjpalso the 2m is just the generation of the static files, you still lose time at execution11:15
*** Amit82 has quit IRC11:21
*** fabg has quit IRC11:21
openstackgerritAndy McCrae proposed openstack/openstack-ansible stable/ocata: SHA bump to include nova upgrade fixes  https://review.openstack.org/44106911:23
andymccrvnogin: perhaps cloudnull would be able to comment on that - he wont be in for a while, but he's operated a large OSA cloud - so perhaps he will have seen something similar or have a better idea11:26
pjm6morning guys11:26
vnoginandymccr: ok, tnx Andy :)11:26
vnoginpjm6: o/11:27
vnogincloudnull: ping11:27
pjm6vnogin: the issue that you're handling with containers, are infra containers?11:27
odyssey4mevnogin check /etc/network/interfaces - does it source /etc/network/interfaces.d/*11:27
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-os_sahara master: Cap the number of worker threads  https://review.openstack.org/44071611:28
nea1evrardjp: https://linuxcontainers.org/lxc/manpages/man1/lxc-attach.1.html - "Keep the current environment for attached programs. This is the current default behaviour (as of version 0.9)"11:29
nea1If this is correct then the behavior on my system is correct, but may be wrong on yours(?)11:29
evrardjpwe are at version 2. I pasted it :p11:29
nea1this doesn't make any sense at all11:30
evrardjpthe only way I see the problem, is that I have it manually set somewhere in my env11:31
nea1and sry, i missed that part xD11:31
*** manheim_ has quit IRC11:31
evrardjpit's from your host11:31
*** SerenaFeng has joined #openstack-ansible11:31
evrardjpthere is something in your machine that has set that11:31
evrardjpyour bash profile, whatever11:32
evrardjpI don't really know11:32
evrardjpbut it's something that was explicitly set11:32
evrardjpwe don't have the same issues in our gates, or in my dev sessions, so it's pretty much not standard :p11:33
*** manheim_ has joined #openstack-ansible11:33
pjm6by default storage_hosts (cinder-volume) is deployed in a container or bare metal?11:33
evrardjpat least not standard to a minimal ubuntu 16 install11:33
evrardjpbaremetal pjm611:33
pjm6evrardjp: it's possible to make it in containers? because i will be using a storage backend11:34
pjm6and only need to use the API11:34
pjm6properties: is_metal: false ?11:34
pjm6I see that exists a file in env.d11:35
pjm6https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/env.d/cinder-volume.yml.container.example11:35
nea1evrardjp: could we compare the env of the host? http://termbin.com/218a11:36
pjm6if I rename the file, it will be deployed in container?11:36
nea1evrardjp: well it is the minimal ubuntu 16.04 what my hoster is installing with pxe11:36
pjm6well thinking better, i will use Dell EQXL which uses iSCSI protocol11:37
nea1and as far as i understand that should only change stuff with the network11:37
pjm6so with this note, it's better to be in baremetal, right?11:37
*** Jack_Iv has quit IRC11:38
*** Jack_Iv has joined #openstack-ansible11:39
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/newton: Fix tempest for os_horizon role  https://review.openstack.org/44090611:41
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_cinder master: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44107411:41
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_magnum master: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44107511:42
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_trove master: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44107611:42
vnoginpjm6: yep11:43
vnoginodyssey4me: yes. We fixed it this night :)11:44
pjm6vnogin: thanks. will have installed that in controller node11:44
vnoginodyssey4me: it seems that it can be related to jumbo frames as I said11:45
*** SerenaFeng has quit IRC11:46
odyssey4mevnogin yeah, unfortunately I suck at network things so I'm not much help11:46
pjm6vnogin: the problem is that containers don't get IP address?11:46
odyssey4mevnogin are you implementing jumbo frames in the containers, or only on the hosts?11:46
vnoginodyssey4me: both11:47
vnoginpjm6: yep, and you need to restart network11:47
pjm6vnogin: the only problem I had was that dnsmasq was not being started for some reason11:47
pjm6but in my case, this applies to all containers11:47
*** DimGR has joined #openstack-ansible11:48
vnoginpjm6: if I execute this playbook - network starts to work http://paste.openstack.org/show/601297/11:49
pjm6vnogin: are you in a dev env?11:49
vnoginpjm6: yep11:50
pjm6could you try reboot your controller node11:50
pjm6start11:50
pjm6and then execute this11:50
pjm6oh awit11:50
pjm6wait11:50
evrardjpnea1: I don't have HOSTNAME= in my env11:50
pjm6you to access containers with this playbook, means that you11:50
evrardjpon the host11:50
*** admin0 has quit IRC11:50
pjm6have LXC IP, right?11:51
pjm610.0.0.X11:51
vnoginpjm6: as far as I remember it attaching containers11:51
evrardjpmaybe look in your profile and all that jazz11:51
pjm6that's a different problem than mine then11:51
evrardjpthat's definitely injected by your hoster11:51
pjm6my problem is that all containers don't get any ip address11:52
pjm6because seems to be a problem with post-up execution of dnsmasq11:52
vnoginpjm6: maybe the same from my side11:52
pjm6but it seems that you have internal IP from LXC11:53
vnoginpjm6: nope, I don't have it as well11:53
vnoginso it seems it can be related to dnsmasq11:53
pjm6so how can you execute the playbook ? :o11:54
pjm6yes it's seem that's the same problem11:54
vnoginpjm6: which one?11:54
pjm6http://paste.openstack.org/show/601297/11:54
pjm6well what I do is executing this11:54
pjm6after a restart11:54
pjm6https://github.com/openstack/openstack-ansible-lxc_hosts/blob/f5ae22d4a05553d7cde026bcf248ba881175a683/templates/lxc-net-bridge.cfg.j2#L15-L16\11:55
pjm6removing post-up11:55
pjm6" /usr/local/bin/lxc-system-manage iptables-create && /usr/local/bin/lxc-system-manage dnsmasq-start || true "11:56
pjm6and all containers get IP address without a problem11:56
pjm6but I can't figure out then, how that playbook solves your problem11:56
openstackgerritAndy McCrae proposed openstack/openstack-ansible master: Update all SHAs for Pike 2017-03-03  https://review.openstack.org/44107911:56
pjm6as you don't have any ip attached to container11:56
*** stuartgr has joined #openstack-ansible11:56
vnoginpjm6: yep, you aer right....11:58
*** Jack_Iv_ has joined #openstack-ansible11:59
vnoginpjm6: odyssey4me: it seems that it's a bug... because I have to do it during osa install after each container restart11:59
*** Oku_OS is now known as Oku_OS-away12:01
pjm6vnogin: I only had to do it after a infra restart12:01
pjm6and only happens12:02
*** shausy has quit IRC12:02
pjm6in two of my infra hosts12:02
pjm6the other one works without a problem12:02
*** Jack_Iv has quit IRC12:02
pjm6(all were installed with the same time and same updates)12:02
vnoginpjm6: systemd on xenial, right?12:02
*** Jack_Iv_ has quit IRC12:03
pjm6pjm6: yes12:03
vnoginpjm6: hate it ))))12:04
*** thorst has joined #openstack-ansible12:07
*** smatzek_ has joined #openstack-ansible12:08
nea1evrardjp: ok, that is a point, I'll test it without that (but if I remember correctly I had reset that once to test it)12:08
*** chhavi has quit IRC12:08
*** admin0 has joined #openstack-ansible12:09
nea1but besides that I think it would be good to use --clear-env by default to ensure that we don't use any env variables in the containers which shouldn't be there12:09
*** smatzek_ has quit IRC12:10
evrardjpwell I think the experience taught us to ignore the HOSTNAME var.12:10
evrardjpthat's an ansible bug12:11
evrardjpwell I think12:11
*** markvoelker has joined #openstack-ansible12:11
*** thorst has quit IRC12:11
evrardjpyes it is12:12
openstackgerritAndy McCrae proposed openstack/openstack-ansible master: Update all SHAs for Pike 2017-03-03  https://review.openstack.org/44107912:13
evrardjpnea1: https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/cloud/lxc/lxc_container.py#L540-L54512:14
nea1evrardjp: ok, by removing it permanently (not only unset) it works12:14
evrardjpyeah12:15
evrardjpthe code is there12:15
evrardjp:p12:15
evrardjpwe have to unset HOSTNAME there12:15
evrardjpcloudnull: we've got a bug in ansible lxc_container module !12:15
evrardjpI'll do a PR, and you pull the strings?12:15
evrardjp:p12:15
*** markvoelker has quit IRC12:16
nea1well now with your link there that doesn't make any sense ... the hostname was set in the zshenv12:16
nea1does that run inside the container or on the host?12:18
pjm6vnogin: hey, for somethings it's seems easier but gets lot of problems :/12:18
vnoginpjm6: agree12:19
vnoginifco12:19
*** Jack_Iv has joined #openstack-ansible12:20
*** schwicht has joined #openstack-ansible12:20
pjm6vnogin: and I still don't understand why one of my controllers work without a problem, without having to run dnsmasq manually12:21
vnoginpjm6: btw, do you use jumbo frames?12:22
pjm6vnogin: not yet12:22
pjm6but when go to production I will use storage with jumbo frames12:22
*** manheim_ has quit IRC12:22
pjm6well forget it vnogin, yes i'm using12:23
pjm6i see in my config file and have container_mtu: 900012:24
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_magnum stable/newton: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44109112:24
*** askb has joined #openstack-ansible12:25
vnoginpjm6: yep :) I think our problem related to them somehow... could you please share with me your network config for controller host?12:25
odyssey4meandymccr oh, that's cute - we appear to be deploying designate by default in the AIO: https://github.com/openstack/openstack-ansible/blob/master/tests/bootstrap-aio.yml#L3112:25
*** shardy is now known as shardy_lunch12:25
*** sanfern has quit IRC12:25
pjm6vnogin: you're talking about operating system config networking12:25
pjm6or ansible config?12:26
pjm6besides i'm using mtu in config playbook, i didn't set it in the interface12:26
vnoginpjm6: the first one12:26
odyssey4meit looks like mcarden sneaked it in while I wasn't looking :) https://github.com/openstack/openstack-ansible/commit/09887025f0622033ba34907c592c5ead51012ccb12:26
*** sanfern has joined #openstack-ansible12:26
andymccrmcarden is quite sneaky12:27
*** cathrichardson has quit IRC12:27
*** manheim_ has joined #openstack-ansible12:27
pjm6vnogin: sure, give me 1min12:27
odyssey4meandymccr so the question is whether we want it there12:27
*** retreved has joined #openstack-ansible12:27
andymccri guess its a gate timing question12:28
odyssey4meI was kinda thinking that maybe we slim down the integrated gate tests to just compute kit, and swift-keystone in two scenario's12:28
andymccror strategy - we could reduce our build gate to the compute kit and then ahve the scenarios/periodicals for others like we're doing now12:28
andymccrhaha12:28
andymccryeah12:28
odyssey4methen we do *everything* in periodics12:28
*** cathrichardson has joined #openstack-ansible12:28
odyssey4mespeaking of which - your thoughts on https://review.openstack.org/440631 ?12:29
odyssey4meI'd like ot port that back to ocata and newton so that we can do pugrade tests for newton->ocata and ocata->master12:29
pjm6vnogin: pastebin.com/VZMiRDxq12:29
odyssey4me*upgrade12:29
vnoginpjm6: tnx)12:30
pjm6no problem, you help me see that I have to put mtu config in the bridge too xD12:31
pjm6because probably that will not working in LXC, if the host mtu is the default (1500(12:31
openstackgerritAndy McCrae proposed openstack/openstack-ansible stable/newton: Update all SHAs for 14.1.1  https://review.openstack.org/44109512:32
evrardjpnea1: in the meantime, it's probably worth keeping your fix :)12:32
evrardjpor we should document it12:33
evrardjpdocument the bug12:33
nea1evrardjp: should I leave the bug open?12:34
*** fabg has joined #openstack-ansible12:34
evrardjpyes, it's not solved yet12:35
evrardjpI'll comment on it12:35
nea1ok12:35
*** admin0 has quit IRC12:38
odyssey4mepradiprwt I have confirmed that an AIO uilds and works successfully with only 'openstack_service_publicuri_proto: http' set in user_variables.yml12:42
odyssey4meI didn't test horizon, but I tested the CLI and everything seems to work as expected.12:42
andymccrok gonna get some lunch! bbiab12:42
openstackgerritAndy McCrae proposed openstack/openstack-ansible stable/mitaka: Update all SHAs for 13.3.16  https://review.openstack.org/44110012:42
*** thorst has joined #openstack-ansible12:44
openstackgerritRavi Gummadi proposed openstack/openstack-ansible-os_swift master: Cap the number of worker threads  https://review.openstack.org/44110212:44
DimGRLxc container create : wait for ssh to be available , and stops there . What can I check for this error please12:46
*** askb has quit IRC12:47
*** chhavi has joined #openstack-ansible12:51
openstackgerritMerged openstack/openstack-ansible master: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/39632412:55
*** fabg has quit IRC12:57
mgariepyhwoarang, for your question on the mysql command stuff. https://github.com/openstack/openstack-ansible-galera_server/blob/master/tasks/galera_install_yum.yml#L97-L9912:59
*** schwicht has quit IRC12:59
mgariepygood morning everyone13:00
hwoarangmgariepy: Hi. yeah i have seen that. i wanted to discuss what happens the first time you run it.13:05
*** Mr_Smurf_ has left #openstack-ansible13:05
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/newton: ensure OPENSTACK_KEYSTONE_URL is always configured  https://review.openstack.org/43798513:05
*** sawblade6 has quit IRC13:07
*** sdake has joined #openstack-ansible13:07
hamzyandymccr, and odyssey4me thanks for that!13:07
*** sawblade6 has joined #openstack-ansible13:08
mgariepycan i have 1 more review on this one ? https://review.openstack.org/#/c/440556/13:08
mgariepyplease :D13:08
vnoginpjm6: yep, as far as I see in stable/newton you will not be able even deploy osa if your bridge config is incorrect13:09
hwoarangmgariepy: so basically i was saying yesterday, the mysqladmin command will set the root password to {{ galera_root_password }} but the line below that will set it to $rootpass and $rootpass could be empty or something else13:09
vnoginpjm6: you are on mitaka now?13:10
vnoginpjm6: and you upgraded from mitaka to newton, so we have new bug in osa upgrades:)))13:12
*** fabg has joined #openstack-ansible13:12
mgariepythe password is set to something else.13:12
vnogins/and you/and if yon performed/13:12
*** rgogunskiy has joined #openstack-ansible13:15
odyssey4memgariepy reviewed - small tweak needed13:16
mgariepymaybe we could run mysql_secure_installation script tho.13:17
*** admin0 has joined #openstack-ansible13:19
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-ceph_client master: Make sure  libvirtd is started.  https://review.openstack.org/44055613:20
mgariepyodyssey4me, thanks, fixed :)13:20
*** Andrew_jedi has joined #openstack-ansible13:20
*** sawblade6 has quit IRC13:22
*** schwicht has joined #openstack-ansible13:23
*** markvoelker has joined #openstack-ansible13:23
*** sawblade6 has joined #openstack-ansible13:23
*** smatzek has joined #openstack-ansible13:23
mgariepyis there ara configured for some gate check ?13:24
odyssey4memgariepy for the role tests that have the 'func' name in it, yes13:24
odyssey4meie the functional tox env13:25
hwoarangmgariepy: I see but the default {{ galera_root_user }} being 'root' confuses things a bit. Because in the end we end up with 'root' using $rootpass instead of {{ galera_root_password }} in the default case13:26
smatzekodyssey4me, on the Swift thread cap.  I haven't tried checking the is_metal value in play, but I think it would be best to only cap the Swift proxy service and then only if is_metal: False.  That should allow the bare-metal dedicated proxy case to consume all CPU.13:26
*** kylek3h has quit IRC13:26
*** sawblade6 has quit IRC13:27
*** heroux has joined #openstack-ansible13:29
nea1if you keep the glance_nfs_client: option from the prod example - the nfs server has to be install manually or?13:30
*** warthog42 has joined #openstack-ansible13:30
mgariepyhwoarang, http://paste.openstack.org/show/601319/13:31
mgariepywhich i guess point to the galera_root_password13:32
*** fabg has quit IRC13:32
*** schwicht has quit IRC13:33
odyssey4mesmatzek yeah, if there's a way to determine that it'd be best13:34
mgariepyhwoarang, the idea was only to apply the mysql_secure_installation script on centos. maybe cloudnull can comment on it as he is the one who did it13:36
*** schwicht has joined #openstack-ansible13:36
hwoaranghmm i see. i will investigate a bit more then13:37
mgariepyand the user root in my DB use the galera_root_password var.13:38
*** shardy_lunch is now known as shardy13:39
*** dankolbrs has quit IRC13:40
*** dankolbrs has joined #openstack-ansible13:41
hwoarangok must be missing something then... will dig deeper!13:42
mgariepymaybe you have a way to run the mysql_secure_installation stuff on suse that doesn't need the mysql commands there is for centos.13:43
*** fguillot has joined #openstack-ansible13:43
*** schwicht_at_work has joined #openstack-ansible13:46
*** schwicht has quit IRC13:47
*** mhayden has quit IRC13:48
*** mhayden has joined #openstack-ansible13:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/44113413:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/44113513:51
odyssey4mehughsaunders mattt ^13:51
hughsaundersodyssey4me: cool, will look at the output when thats run13:52
odyssey4mehughsaunders you can see the results in the master patch merge if you like13:54
pjm6vnogin: I had previosly mitaka13:55
pjm6vnogin: I did an upgrade of operating system and had several problems (ubuntu 14.04 to ubuntu 16.04)13:56
vnoginpjm6: related to systemd? )13:56
pjm6vnogin: I did an clean install and had problems (i had some time to figure out that problem of dnsmasq)13:56
pjm6vnogin: not sure, its the same problem we're facing now13:57
*** gouthamr has joined #openstack-ansible13:57
pjm6offtopic: do you need to have interface br-storage configured to MTU 9000, right? in order to use in the LXC?13:57
mattthughsaunders: http://logs.openstack.org/24/396324/10/check/gate-openstack-ansible-openstack-ansible-aio-ubuntu-xenial/222db89/logs/ara/13:58
vnoginpjm6: have you deployed openstack from scratch after?13:58
*** rgogunskiy has quit IRC13:58
pjm6yes, after I formated yes13:58
matttodyssey4me: that looks quite handy13:59
hughsaundershmm, tyring to click on page 2 and it gives me a download13:59
logan-hughsaunders: yeah i noticed that too. the patchset from the other day didn't have the broken images and paging like that13:59
hughsaundersthere was an ara ui refactor recently14:00
odyssey4medmsimard ^14:00
*** sdake_ has joined #openstack-ansible14:01
admin0is all i need is to declare magnum-infra_hosts: and give the infra hosts to enable containers ?14:01
*** The_Intern has joined #openstack-ansible14:01
admin0sounds too nice .. painless ..  awesome .. confusing ..14:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build master: Add non *.whl files to MANIFEST.in  https://review.openstack.org/43965914:01
*** schwicht_at_work has quit IRC14:02
dmsimardlogan- odyssey4me: broken images will be fixed by https://review.openstack.org/#/c/435566/14:02
dmsimardhughsaunders: where are you getting a download ?14:03
logan-ahh cool14:03
*** sdake has quit IRC14:03
logan-the 1,2,3 page links at the bottom of http://logs.openstack.org/24/396324/10/check/gate-openstack-ansible-openstack-ansible-aio-ubuntu-xenial/222db89/logs/ara/reports/index.html14:03
cloudnullevrardjp: is there a pr for the lxc_container module up?14:03
odyssey4meadmin0 yes, that's to get the service running - from there there's a bunch of stuff like uploading images, etc still to do on your own... but we get the service up for you :)14:03
hughsaundersdmsimard: http://logs.openstack.org/24/396324/10/check/gate-openstack-ansible-openstack-ansible-aio-ubuntu-xenial/222db89/logs/ara/reports/214:04
dmsimardhughsaunders: ah crap I see it now14:04
Andrew_jedifolks, Can you please recommend any good graphical client  for Swift? (which can also run on OS X)14:04
dmsimardThat's anothet gzip mimetype issue14:04
evrardjpcloudnull: not yet14:04
admin0Andrew_jedi: cyberduck ?14:04
dmsimardhughsaunders: thanks, going to do a dot release today to adress that14:04
evrardjpI'll do that now, this way I don't forget14:04
admin0odyssey4me: thanks :)14:05
logan-mhayden: https://people.redhat.com/duffy/selinux/selinux-coloring-book_A4-Stapled.pdf14:05
* admin0 will look for other such easter eggs :) 14:05
hughsaundersAndrew_jedi: cyberduck?14:05
cloudnullvnogin: did you set https://github.com/openstack/openstack-ansible-lxc_container_create/blob/master/defaults/main.yml#L77 ?14:05
Andrew_jediadmin0: Yeah, the problem is that it is not working for me :/14:05
odyssey4meAndrew_jedi it's no graphical, but our very own cloudnull made turbolift which is a sensible swift CLI client14:06
Andrew_jediadmin0: Are you deploying magnum ?14:06
hughsaundersadmin0: oops14:06
cloudnullvnogin: and add this line to the openstack_user_config for all of the networks you want to run jumbo frames on https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.example#L25914:06
cloudnulldoc'd here https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.example#L164-L16514:06
pjm6anyone here are doing monitoring in OS? if yes what tools use, nagios, sensu or other?14:06
admin0Andrew_jedi: i deployed a working Ocata (with everything verified OK ) from the latest playbooks ..  now looking to see how to deploy more on it14:06
*** acormier has joined #openstack-ansible14:06
admin0does someone have a all-in-one-but-multi-node-everything-that-can-be-deployed  user_config that I can run :D14:07
Andrew_jediodyssey4me: very cool,, cloudnull rocks! :)14:07
cloudnullo/14:07
admin0pjm6:  i use check_mk and snmp+observium14:07
odyssey4meadmin0 just copy all conf.d/*.aio files to conf.d/ and rename them14:07
pjm6cloudnull: o/14:07
cloudnullAndrew_jedi: https://pypi.python.org/pypi/turbolift14:08
Andrew_jediadmin0: Do you have K8 working ? With default settings i only had swarm working14:08
* cloudnull shameless plug14:08
admin0Andrew_jedi:  i am just starting out14:08
odyssey4meadmin0 we'll be bringing scenario tests online soon which will do something similar14:08
pjm6thanks admin014:08
Andrew_jedicloudnull: Thanks a lot, reading the doc now :)14:08
admin0odyssey4me: since the openstack_user_config.yml.prod.example  mentions only those, we ( deployers) incorrectly asume that is the limit14:09
*** fabg has joined #openstack-ansible14:09
vnogincloudnull: the second part was added... and what about first one? should it be 9000?14:09
*** kylek3h has joined #openstack-ansible14:09
admin0so for all those who made all the other thigns possible, i would like to see or contribute to a  a openstack_user_config.yml.MAX.example .. which would try to deploy a lot of other thigns that can be deployed14:10
cloudnullvnogin: yes.14:10
*** acormier has quit IRC14:10
cloudnullon all network sections you want running w/ an mtu of 900014:10
vnogincloudnull: and should I configure network interfaces on compute to use mtu 9000 as well?14:10
cloudnullyes.14:11
evrardjpan large mtu is over 9000!14:11
evrardjpOk I'm out.14:11
dmsimardhughsaunders: fix for page download: https://review.openstack.org/44114314:11
cloudnullwe have mtu 9000 in the osic14:11
cloudnullit works great14:11
andymccrevrardjp: hahaha14:11
vnogincloudnull: evrardjp do you have an example of interfaces file for it? :)14:11
*** sawblade6 has joined #openstack-ansible14:11
cloudnullbut a little bit of a hastle to get going.14:12
cloudnullsure. one sec14:12
vnogincause it seems that I'm doing something wrong14:12
dmsimardodyssey4me: and I also confirm that the logs.o.o fix I submitted works for broken images (on logs-dev.o.o, got to submit a patch to fix the production logs.o.o) -> http://logs-dev.openstack.org/24/396324/10/check/gate-openstack-ansible-openstack-ansible-aio-ubuntu-xenial/222db89/logs/ara/index.html14:12
vnogincloudnull: awesome! thx a lot14:12
*** jamesden_ has joined #openstack-ansible14:12
hughsaundersdmsimard: Do links to the changed route need updating? Or is the link target determined by the route?14:14
dmsimardhughsaunders: we use url_for() everywhere, the links are automated automatically14:14
hughsaundersdmsimard:  \o/14:14
*** schwicht has joined #openstack-ansible14:14
dmsimardthat doesn't fix the reports that have already been generated but oh well14:14
*** cathrichardson has quit IRC14:15
*** cathrichardson has joined #openstack-ansible14:15
cloudnullvnogin: this is an example config w/ mtu 9000 for all the things14:15
cloudnullhttps://gist.github.com/cloudnull/08c06b6ab20d37c3e51414:15
*** kstev has joined #openstack-ansible14:15
cloudnullthing to remember is that a brige will use the lowest mtu for any connected device14:16
cloudnullso when converting you have to do something like this https://gist.github.com/cloudnull/05d60237fda2bdb177b014:16
odyssey4mewe have some ocata backports in the queue - would appreciate some love for them: https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+status:open+branch:stable/ocata14:17
pjm6cloudnull: but if the bridge has mtu defined in the operating system, it will not be a rpoblem, right?14:17
odyssey4mesimilarly for newton: https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+status:open+branch:stable/newton14:18
mgariepymhayden, are you around ?14:19
vnogincloudnull: awesome! thanks a lot!14:19
admin0https://gist.github.com/a1git/520c731d2c5962b0afd9abd8a23e9675  — os-magnim playbook runs but i do not see it doing anything  .. pasting the output in -vvvv and the config  .. what might I be doing wrong/missing ?14:19
mgariepymhayden, we need to fix selinux stuff http://paste.openstack.org/show/601326/14:19
*** cathrichardson has quit IRC14:19
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/ocata: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/44091914:19
admin0oh .. i need to redo the repo stuff i think14:20
admin0recall something like that when things are added back, running the relevant playbook is not enough14:20
admin0*are added later14:20
*** ngupta has joined #openstack-ansible14:20
*** Hosam has joined #openstack-ansible14:20
*** ngupta has quit IRC14:20
*** ngupta has joined #openstack-ansible14:21
admin0everyone here @ Reading, i am in Reading as well :)  but going back on sunday .. the first thing i did when i came here was drove to the magic aroundabout in swingdom and did some loops in there (like a confused foreigner ) :) always wanted to do that14:24
*** pcaruana has quit IRC14:24
admin0*Swindon14:24
Andrew_jediadmin0: Have you added "magnum-infra_hosts:" in openstack_user_config.yaml14:25
nea1evrardjp: can you confirm this, as my system seams to be strange ^^ the libvirt_group should be libvirtd not libvirt on ubuntu 16.0414:26
admin0oh .. forgot to push the git14:27
evrardjpwhat should I confirm?14:27
odyssey4meadmin0 yes, for newton onwards the repo build is selective in order to speed it up - so if you add host groups for new services you'll need to rebuild the repo14:28
admin0got it14:28
nea1evrardjp: https://github.com/openstack/openstack-ansible-os_nova/blob/master/vars/ubuntu-16.04.yml#L19 <> `grep libvirt /etc/group`14:28
andymccrnea1: if you're using UCA (which you should be on master) it'll deploy a version of libvirt that has the group changed14:30
Andrew_jedinea1: Were you able to figure out the rabbitmq issue ?14:30
evrardjpandymccr: what's the recent groupname for libvirt ?14:30
andymccrbut if you're still using the older version - you can set that var manually to be libvirtd14:30
andymccrevrardjp: libvirt is the new one14:30
nea1Andrew_jedi: yes, there was a HOSTNAME set in the env of the host, and lxc-attach has default --keep-env ;)14:30
evrardjpwell yes and no14:30
nea1evrardjp: well libvirt was installed by ansible, so I'd guess it should be correct(?)14:31
evrardjpAndrew_jedi: https://github.com/ansible/ansible/pull/2224614:31
admin0I added the magnum-infra_hosts,  but this is the offiical doc if i am correct: https://docs.openstack.org/developer/openstack-ansible-os_magnum/  - says nothing about the phg = user_config[cphg][container_host] . which I believe is i need to declrate container_host in the config as well14:31
evrardjpthe yes and no was for hostname :)14:31
odyssey4meadmin0 it appears you're speaking a foreign language ;)14:32
evrardjphaha14:32
admin0:) sorry for that14:32
admin0engrish has not been my primary language14:32
*** crushil has joined #openstack-ansible14:33
Andrew_jedievrardjp nea1 : Wow, kudos to both of you for figuring that out.14:33
admin0ok .. i added magnum-infra_hosts, but when i try to run the playbook, it throws out a error that ends with the line “    phg = user_config[cphg][container_host]”  .. i believe i need to add container_host in the user_config as well ? same as compute ?14:33
*** chhavi has quit IRC14:33
odyssey4meadmin0 hmm, will have to look but that sounds like a bug14:34
spotzNo picking on admin0!:)14:34
admin0i have to run .. someone wants me to give ma  tour of costaco in reading :D14:34
nea1rerunning setup-openstack.yml doesn't work ^^ failed: [hetzner1_glance_container-f97d4038] (item={u'path': u'/var/lib/glance/images/'}) => {"failed": true, "gid": 0, "group": "root", "item": {"path": "/var/lib/glance/images/"}, "mode": "0755", "msg": "chown failed", "owner": "root", "path": "/var/lib/glance/images/", "size": 4096, "state": "directory", "uid": 0}14:34
admin0some kind of a big warehouse with cheap prices to impress the nerds14:34
Andrew_jediadmin0: Can you paste your " /etc/openstack_deploy/openstack_user_config.yml" ?14:34
odyssey4menope, this looks like an inventory issue: https://github.com/openstack/openstack-ansible/blob/59aaac0cb5cf935d5d5e9ee899ecfd25b67923a1/lib/generate.py#L63814:34
admin0sure14:34
*** smatzek has quit IRC14:34
odyssey4meadmin0 it's likely a misconfiguration somewhere - you may have hit some edge case that palendae is not aware of :)14:35
Andrew_jediadmin0: In AMS ?14:35
admin0reading :D14:35
admin0i am in reading somewhere14:36
*** galstrom_zzz is now known as galstrom14:36
*** arturb has quit IRC14:36
admin0reading.UK14:36
admin0https://gist.github.com/a1git/8da8cb401c38fa6cf77f88b42bc677fb14:37
Andrew_jedinea1: "chown" failed14:37
nea1Andrew_jedi: i know, that dir is mounted via nfs14:39
nea1because i copied the default config ^^ and couldn't change it after14:40
Andrew_jediadmin0: Umm, can you show me  output of "lxc-ls -f " please ?14:40
admin0Andrew_jedi: from which server ?14:41
Andrew_jediadmin0: c11 or c12 or c1314:41
admin0Andrew_jedi: https://gist.github.com/a1git/8e134a0e0bd226b445ac3facd7c24eb414:42
*** faizy has joined #openstack-ansible14:42
Andrew_jediadmin0: Looks like probably you need to first create magnum container first14:43
Andrew_jedis/first//14:43
*** sdake_ has quit IRC14:44
*** sdake has joined #openstack-ansible14:44
Andrew_jedinea1: You mean change as in user_variables.yaml or overriding the ".conf" file14:45
odyssey4meAndrew_jedi admin0 well, yes - to deploy magnum (as with any service after initial install) you add the conf.d file with the host allocation, then go through setup-hosts, setup-infrastructure, setup-openstack14:46
*** fabg has quit IRC14:46
admin0is there a way to limit to just the services ?14:47
admin0setup-hosts —limit=*magnum* ?14:47
*** fabg has joined #openstack-ansible14:47
odyssey4meadmin0 yeah, just 'magnum_all' should do it14:47
admin0ok14:47
admin0if i do setup-everything with magnum_all, does it take care of repo process as well ?14:47
odyssey4mealthough that won't work for the repo build part14:47
odyssey4meso I guess it'd be14:48
Andrew_jediadmin0: yep, after creating container, repo-build.yaml playbook needs to be run14:48
odyssey4mesetup-hosts.yml --limit magnum_all; setup-infrastructure.yml --limit repo_all; setup-openstack.yml --limit magnum_all14:48
*** retreved has quit IRC14:48
*** retreved_ has joined #openstack-ansible14:49
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Make sure  libvirtd is started.  https://review.openstack.org/44055614:49
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ceph_client stable/ocata: Make sure  libvirtd is started.  https://review.openstack.org/44115714:50
Andrew_jediadmin0: btw, just want to give you a heads up, a magnum VM expects that it should be able to connect with both internet and keystone service.14:50
odyssey4mecloudnull care for review https://review.openstack.org/439762 when you have a moment?14:50
*** The_Intern has quit IRC14:50
*** The_Intern has joined #openstack-ansible14:51
cloudnullodyssey4me: did we backport the change to the integrated repo too ?14:51
admin0Andrew_jedi: thanks .will make a note14:51
odyssey4mecloudnull yep14:51
cloudnullok14:51
admin0i am out for a while now .. commands running in background :)14:51
odyssey4mehttps://review.openstack.org/#/q/Ic7130368c5a2bb231c35bb459a2bebaa28a5a968,n,z14:51
admin0thanks guys14:51
*** retreved_ has quit IRC14:51
admin0and spotz :)14:52
odyssey4mecloudnull I wouldn't mind seeing that go back to newton if you and logan- have the stomach for it :)14:52
odyssey4mewell, that set of changes14:52
spotz:)14:52
odyssey4meit would speed up the newton deployment somewhat14:52
*** admin0 has quit IRC14:52
*** retreved has joined #openstack-ansible14:52
odyssey4mebut don't propose yet, let's get that one merged first and bump the role sha for ocata to use it14:53
dmsimardhughsaunders: 0.12.1 tagged with page download fix14:54
dmsimardcoming to a pypi mirror near you14:54
hughsaundersdmsimard: thanks :) #spdy14:55
dmsimardhey, gotta make sure it works ;p14:55
logan-odyssey4me cloudnull: yeah, iffy on pulling that to newton due to the lack of testing14:56
odyssey4melogan- any chance that you can test it?14:56
*** retreved has quit IRC14:56
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible stable/newton: Move ceph client role to playbooks for faster run time  https://review.openstack.org/44116214:57
logan-yes14:57
cloudnullboom!14:57
cloudnullbut we can abandon if its a no go14:57
logan-i can, it just might be couple days until i can vote :P14:57
odyssey4mecloudnull argh, now the ocata role patch won't merge :/14:57
odyssey4medue to the depends-on :/14:58
odyssey4mewell, we can always edit the commit message to get it in14:58
cloudnulli can change the change-id14:58
odyssey4mehappy with that idea?14:58
odyssey4mecloudnull once you've pulled the master back then there's no going back14:58
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible stable/newton: Move ceph client role to playbooks for faster run time  https://review.openstack.org/44116514:59
*** cjloader has joined #openstack-ansible14:59
cloudnullah... bummer14:59
cloudnullok, one sec14:59
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-lxc_hosts master: Moving selinux bits into lxc_selinux  https://review.openstack.org/44116715:00
*** weezS has joined #openstack-ansible15:00
odyssey4mecloudnull changing the change id in the newton patch won't work15:00
odyssey4megerrit knows what you did15:00
odyssey4methe only way out is to pull the depends-on from the ceph client patch15:01
*** smatzek has joined #openstack-ansible15:01
cloudnullyup. stupid gerrit15:02
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ceph_client stable/ocata: Tag clean up  https://review.openstack.org/43976215:02
odyssey4mecloudnull logan- ^ small tweak to the commit message, please revote15:02
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ceph_client stable/ocata: Tag clean up  https://review.openstack.org/43976215:02
cloudnullopps15:02
cloudnulli think we stepped on one another.15:02
cloudnullmy bad15:02
odyssey4melol, or that15:02
logan-lol15:02
openstackgerritMerged openstack/openstack-ansible-repo_build master: Add non *.whl files to MANIFEST.in  https://review.openstack.org/43965915:03
odyssey4meI'd prefer to keep the reference, lemme put that back15:03
logan-ok15:03
spotzheheh15:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ceph_client stable/ocata: Tag clean up  https://review.openstack.org/43976215:03
cloudnullok15:03
odyssey4meok, done now15:03
cloudnulldone15:04
odyssey4mesweet15:04
*** Andrew_jedi has quit IRC15:05
*** sanfern has quit IRC15:05
odyssey4meI cleaned up the other patch - so we're all good15:05
odyssey4melogan- I'll bump the ocata role SHA to include the ceph_client fix once it's merged15:05
odyssey4methat'll go through a gate test15:06
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_nova master: Add missing selinux rule for libvirt  https://review.openstack.org/44117215:06
mgariepymhayden, ^^15:06
mgariepyodyssey4me, i think that after 441172 merge centos gate check will be passing :D15:08
openstackgerritDavid Moreau Simard proposed openstack/openstack-ansible-tests master: Do not merge: Troubleshooting in-gate ARA jobs  https://review.openstack.org/44117315:08
*** fabg has quit IRC15:08
*** retreved has joined #openstack-ansible15:08
odyssey4mecloudnull https://review.openstack.org/438723 doesn't port back cleanly unfortunately15:08
*** fabg has joined #openstack-ansible15:08
cloudnullyea that's going to be a lift and shift i think15:09
openstackgerritMerged openstack/openstack-ansible-os_trove master: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44107615:09
cloudnullwe may not be able to do that one.15:09
cloudnullin the ceph roles15:09
cloudnullbut the playbook changes could get in to limit the runtime15:09
warthog42hello folks, I'm using stable/netwon versions of galera_server and galera_client, and I'm having issues getting galera_apt_repo_url and galera_client_apt_repo_url to set the repo to our internal mirror of the rackspace mariadb repo.15:10
warthog42my other galera_* vars are being set right from the same vars file, but these ones just won't set for me.15:11
warthog42looking at defaults/main.yml for both roles, I don't see the repo urls there, while all the other vars I'm setting are in the file and work.15:12
xgermanmhayden, alextricity25 I am wondering if you can have a look at https://review.openstack.org/#/c/428979/8 — this should be good to go and is only 3 files ;-)15:13
alextricity25xgerman: I acutally reviewed that one yesterday! I just forgot to +1 it. Sorry about that.15:14
xgermanno worries, thanks15:14
*** lucasxu has joined #openstack-ansible15:17
*** Jack_Iv has quit IRC15:17
openstackgerritMerged openstack/openstack-ansible-os_sahara master: Cap the number of worker threads  https://review.openstack.org/44071615:17
*** Jack_Iv has joined #openstack-ansible15:18
*** Andrew_jedi has joined #openstack-ansible15:19
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build stable/ocata: Add non *.whl files to MANIFEST.in  https://review.openstack.org/44118015:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build stable/newton: Add non *.whl files to MANIFEST.in  https://review.openstack.org/44118115:20
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44107415:22
openstackgerritMerged openstack/openstack-ansible-ceph_client stable/ocata: Tag clean up  https://review.openstack.org/43976215:24
openstackgerritDavid Moreau Simard proposed openstack/openstack-ansible-tests master: Do not merge: Troubleshooting in-gate ARA jobs  https://review.openstack.org/44117315:28
*** vnogin has quit IRC15:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara stable/ocata: Cap the number of worker threads  https://review.openstack.org/44118815:30
*** whiteveil has joined #openstack-ansible15:31
odyssey4meany cores around to review https://review.openstack.org/44063115:32
odyssey4mebefore the periodic job goes into infra, that needs to be merged and backported15:32
*** whiteveil has quit IRC15:34
*** whiteveil has joined #openstack-ansible15:35
mhaydenmgariepy: finally back15:35
mgariepymhayden, hehe :) cool.15:35
mgariepymhayden, https://review.openstack.org/#/c/441172/15:36
mhaydenmgariepy: looking at 441167 now15:36
mgariepywhile this works there should be a better way to do it.15:36
mhaydenlooking15:37
mhaydenhah, gertty puts a '?' in there for those hard tabs in the te file :P15:37
*** marst has quit IRC15:38
mhaydenmgariepy: left a question in there15:38
mhaydeni was wondering if we could label the files/dirs instead of writing policy for access to unlabeled things15:39
mhaydenor use an equivalence15:39
mgariepyyeah probably15:39
mgariepyi'm not a selinux expert at all.15:39
mhaydenallowing libvirt to talk to unlabeled stuff makes me a little concerned15:39
mhaydenso the correct policy is system_u:system_r:virtlogd_t ?15:39
mhaydenor label, i mean15:39
mhaydenthat's what the files *should*be ?15:39
*** whiteveil has quit IRC15:40
openstackgerritMerged openstack/openstack-ansible-ceph_client stable/ocata: Make sure  libvirtd is started.  https://review.openstack.org/44115715:40
pjm6in nova service list I have nova-console-container down in two controllers. I had restarted the service spicehtml5proxy and consoleauth, but they still be down15:40
mhaydenweird, i don't have a virtlog_t https://gist.github.com/major/1ac1b0d3f750cbdc5d617b05553da67c15:40
pjm6any tip in how debug or check why nova reports as down ?15:41
odyssey4melogan- answered your question15:41
mhaydenmgariepy: so is the problem happening when libvirt tries to read the console log?15:42
mhaydeni assume that's from nova trying to look at the console log15:42
*** cathrichardson has joined #openstack-ansible15:43
mgariepywhen it trys to spawn the vm15:43
pjm6forget, the service was nova-consoleauth was stopped15:44
pjm6but thats strange because didn't appear me in systemctl list-units, maybe needs a reload in order to appear there?15:44
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible master: Remove Ceilometer API Service  https://review.openstack.org/43874015:44
*** manheim_ has quit IRC15:44
openstackgerritMerged openstack/openstack-ansible-os_magnum stable/newton: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44109115:44
mgariepymhayden, openstack console log show seems to work15:45
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Update paste, policy and rootwrap configurations 2017-03-03  https://review.openstack.org/44107515:45
mhaydenmgariepy: yeah, i see that too15:45
*** cathrich_ has joined #openstack-ansible15:45
mgariepybut after i applied the stuff ;)15:45
mgariepyso what equivalence should we set /var/lib/nova to ?15:45
mhaydenmgariepy: have you tried a restorecon?15:47
mhaydeni'm showing something different15:47
*** cathrichardson has quit IRC15:47
mhaydenhttps://gist.github.com/major/27b6e1946a51a60cc3a24d98ee1c1562 mgariepy15:47
mhaydenand i'm not getting AVC's15:48
*** marst has joined #openstack-ansible15:48
mhaydenbrb15:49
mgariepymhayden, is your /var/lib/nova a mountpoint ?15:49
andymccrjamesdenton: i ran an upgrade after the nova fixes and it worked fine - i have confirmed the galera multi node bug so that still needs a fix. but i think everything else is good to go.15:49
*** mpjetta has joined #openstack-ansible15:50
* mgariepy is a little confused by this selinux stuff hehe..15:51
*** fabg has quit IRC15:53
*** chris_hultin|AWA is now known as chris_hultin15:53
spotzmgariepy: selinux=disabled?:)15:53
mgariepyspotz, ok let's do team work, got talk to mhayden about it :P15:55
mgariepys/got/go/15:55
spotzmgariepy: hehehe, I don't think we can talk Mr. Security into it!15:55
*** Andrew_jedi has quit IRC15:57
*** tailDASHeF has quit IRC15:59
*** whiteveil has joined #openstack-ansible15:59
mgariepymhayden, updating my patch. need a few second.15:59
*** agrebennikov_ has joined #openstack-ansible15:59
openstackgerritMerged openstack/openstack-ansible master: Update all SHAs for Pike 2017-03-03  https://review.openstack.org/44107916:01
*** adrian_otto has joined #openstack-ansible16:01
*** lucasxu has quit IRC16:01
*** retreved has quit IRC16:02
*** manheim_ has joined #openstack-ansible16:02
*** retreved has joined #openstack-ansible16:06
*** The_Intern has quit IRC16:09
*** lucasxu has joined #openstack-ansible16:11
odyssey4melogan- you around to talk through the upgrade tes?16:12
odyssey4me*tes16:12
logan-yeah16:12
odyssey4me*test16:12
odyssey4meok, so the periodics - as I understand them - work by targeting a branch for the initial checkout... the branch being the source, not the destination16:13
*** The_Intern has joined #openstack-ansible16:13
odyssey4meI'm not yet sure of it though, it's been a bit hard to get good advice on how it all works16:13
nea1is there somewhere a doc which explains how to create a NATed network as uplink for the VMs? (on a not AIO)16:14
odyssey4mefor an on-commit test we'd want to do what you suggest, but I don't think it'll work for periodics16:14
*** cjloader has quit IRC16:15
logan-so it is an infra limitation? what wouldn't work though? checking out the previous branch?16:15
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_nova master: Set secontext for /var/lib/nova/  https://review.openstack.org/44117216:16
logan-if you can check out master I guess I don't understand why you can't check out a prior branch in there and use that as the initial deploy16:16
*** weezS has quit IRC16:16
odyssey4melogan- ok, maybe we can re-work this... because I'd like it to work like that16:16
odyssey4meso in https://review.openstack.org/#/c/419517/13/jenkins/jobs/openstack-ansible-jobs.yaml16:17
odyssey4methat's the job - it preps the host with the appropriate branch16:17
odyssey4methe branch is used of the upper constraints, etc16:17
odyssey4mebut it also checks out that branch16:17
odyssey4methe model I was asked to follow is in https://github.com/openstack-infra/project-config/blob/254904ce1af55c3595cffe9722d3129227b927db/jenkins/jobs/python-bitrot-jobs.yaml16:18
odyssey4mebut those aren't upgrade jobs16:18
logan-https://github.com/openstack-infra/project-config/blob/254904ce1af55c3595cffe9722d3129227b927db/jenkins/jobs/python-bitrot-jobs.yaml#L1116:18
odyssey4mehere's an upgrade job: https://github.com/openstack-infra/project-config/blob/788bb1e5229312b1cd91ee0c35ec9eaa2a2a81de/jenkins/jobs/nova.yaml#L11116:19
*** h5t4 has quit IRC16:20
odyssey4meand here's what the zuul prep thing does: https://github.com/openstack-infra/project-config/blob/3e50f77f4bc9b22d2e196f58e11b295bd0c613d8/jenkins/jobs/macros.yaml#L9016:20
logan-ah ok16:21
logan-i was just going to ask what consumes zuul-git-branch-prep-upper-constraints16:21
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible-haproxy_server stable/newton: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/44121316:24
logan-i don't see what needs to change in the job configs16:25
logan-it seems like we just need to change where we do our hard coded checkout in the OSA side16:25
logan-right now we hard code the N+1 branch16:25
logan-just hard code N-1 in a different part of the file and then check out the original zuul branch for the upgrade portion16:26
odyssey4meyeah, I'd like to confirm what actually gets checked out - and what tells it to do so16:26
odyssey4meI'm not yet seeing that part16:26
openstackgerritGerman Eichberger proposed openstack/openstack-ansible master: Additions to install OpenStack Octavia  https://review.openstack.org/42206216:26
odyssey4meso the confusion for me is that branch is checked out as the starting point16:26
logan-ah16:27
odyssey4meit looks like we may need to set OVERRIDE_ZUUL_BRANCH to tell zuul which branch to checkout16:27
odyssey4meif that is the case, then we can set our start and end point16:27
openstackgerritMerged openstack/openstack-ansible stable/ocata: SHA bump to include nova upgrade fixes  https://review.openstack.org/44106916:27
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/newton: Use horizon_ssl_protocol variable  https://review.openstack.org/43988816:27
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/newton: Make long-running tasks use async  https://review.openstack.org/43924916:28
odyssey4meand yes - going from n-1 to n would be preferable16:28
logan-if you don't override it, won't it just checkout the branch passed in to the job like this? https://github.com/openstack-infra/project-config/blob/254904ce1af55c3595cffe9722d3129227b927db/jenkins/jobs/python-bitrot-jobs.yaml#L5616:28
*** mmalik4_ has joined #openstack-ansible16:28
odyssey4melogan- sure, but then that's the starting point16:28
logan-so on master it will check out master, and then in the OSA gate check script you can check out N-1 if it is an upgrade job, then later re-checkout the original sha16:28
odyssey4meok, let me re-look at this on that assumption16:29
odyssey4meso the branch name in the job will be the 'target'16:30
logan-yep16:30
odyssey4meie what we are upgrading *to*16:30
odyssey4meI'll rework all the bits for that.16:30
odyssey4melemme make some tea first16:30
*** cjloader has joined #openstack-ansible16:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security master: Disable file perm/ownership reset  https://review.openstack.org/44121716:32
*** fguillot has quit IRC16:32
*** ngupta has quit IRC16:32
mgariepymhayden, https://review.openstack.org/#/c/441172/ finished testing this one and it seems to work correcly with the secontext stuff.16:33
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_neutron master: Adds Octavia to Neutron  https://review.openstack.org/42897916:33
mhaydenmgariepy: ah, i was just looking at that stuff16:33
mhaydenmgariepy: i'll trade you for a look at 441217 :)16:34
*** The_Intern has quit IRC16:34
* mgariepy looking16:35
*** The_Intern has joined #openstack-ansible16:35
*** ngupta has joined #openstack-ansible16:36
*** The_Intern has quit IRC16:38
*** adrian_otto has quit IRC16:39
openstackgerritAndy McCrae proposed openstack/openstack-ansible-galera_server master: [WIP] Fix upgrades for multinode galera  https://review.openstack.org/44122016:41
andymccrjamesdenton: for the mysql issue I've got a WIP PR up - gonna test it a bit but if you're keen give it a go ^16:41
*** adrian_otto has joined #openstack-ansible16:44
*** weezS has joined #openstack-ansible16:47
*** cathrich_ is now known as cathrichardson16:48
*** cjloader has quit IRC16:51
*** cjloader has joined #openstack-ansible16:52
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Adjust gate-check-commit for deploy/upgrade testing  https://review.openstack.org/44063116:54
odyssey4melogan- jmccrory ^16:55
*** crushil has quit IRC16:55
*** crushil has joined #openstack-ansible16:56
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_nova master: Added MySQL connection SSL support  https://review.openstack.org/43809516:57
*** kjw3 has quit IRC16:58
logan-thanks odyssey4me16:59
openstackgerritMerged openstack/openstack-ansible stable/newton: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/44113516:59
agrebennikov_hi odyssey4me, mind commenting in https://review.openstack.org/#/c/425997/ please? (if necessary)17:00
openstackgerritAndy McCrae proposed openstack/openstack-ansible-galera_server master: [WIP] Fix upgrades for multinode galera  https://review.openstack.org/44122017:00
GustavoChalcoHello, can someone gimme a hint? http://paste.openstack.org/show/601361/17:01
agrebennikov_maybe from your perspective it requires toggle switch for turning server encryption on as well17:01
GustavoChalcoI already disable SELINUX17:01
*** warthog42 has quit IRC17:02
*** The_Intern has joined #openstack-ansible17:02
jmccroryodyssey4me: do you have to edit the project-config change too? newton won't be able to upgrade from mitaka in gate because of xenial17:03
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-security master: Fix selinux check when disabled  https://review.openstack.org/44123317:04
agrebennikov_GustavoChalco, it is probably the question for mhayden17:05
mgariepyGustavoChalco, https://review.openstack.org/44123317:05
mgariepyGustavoChalco, we do not test often without selinux enabled17:05
mgariepydisabled***17:05
mgariepyarf17:05
mgariepylol.17:05
agrebennikov_nice :)17:06
mgariepywe only test with selinux enabled so we might miss stuff a bit.17:06
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/newton: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/44121317:06
agrebennikov_mgariepy, but it is complaining about the type of the var :/17:07
odyssey4mejmccrory yeah - trying to get advise on how this work17:07
odyssey4melogan- jmccrory unless you guys can help fathom it out?17:07
odyssey4meuse the review to comment on suggestions17:07
GustavoChalcomgariepy Interesting... B-)17:07
odyssey4memy question is posed in https://review.openstack.org/#/c/419517/13/jenkins/jobs/openstack-ansible-jobs.yaml17:08
mgariepyagrebennikov_, when selinux is not enabled ansible_selinux.status doesn't exist.17:08
agrebennikov_ah17:08
openstackgerritMerged openstack/openstack-ansible-pip_install stable/newton: Optimize pip_install  https://review.openstack.org/43924417:10
odyssey4mejmccrory logan- it looks to me like the job will always check out master, unless we specify OVERRIDE_ZUUL_BRANCH to change that17:11
odyssey4mesee https://github.com/openstack-infra/project-config/blob/81b1e0e808bde114867a3ebf9e539797e162d3f1/jenkins/jobs/devstack-gate.yaml#L132117:11
odyssey4meso maybe the easiest for now is to skip the newton->ocata bits and go for ocata->master for now17:11
odyssey4meor, alternatively, add another parameter in the job name17:12
odyssey4mehmm... yeah, lemme try that17:12
mgariepyGustavoChalco, instead of disabling it might be better to set it to permissive mode instead.17:13
*** faizy has quit IRC17:13
*** gouthamr has quit IRC17:15
openstackgerritTom Jose Kalapura proposed openstack/openstack-ansible stable/mitaka: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/44123817:16
mgariepyGustavoChalco, once you've tested https://review.openstack.org/441233 you can leave a review if you want :)17:16
logan-yeah, not sure on the infra bits odyssey4me17:18
*** woodard has joined #openstack-ansible17:19
*** kjw3 has joined #openstack-ansible17:20
*** rabel_b1 has quit IRC17:23
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/ocata: Cap the number of worker processes  https://review.openstack.org/44103517:24
*** woodard has quit IRC17:24
*** gouthamr has joined #openstack-ansible17:26
*** The_Intern has quit IRC17:29
openstackgerritAndy McCrae proposed openstack/openstack-ansible-galera_server master: [WIP] Fix upgrades for multinode galera  https://review.openstack.org/44122017:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/44113417:33
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security master: Replace always_run with check_mode  https://review.openstack.org/42044117:34
odyssey4meandymccr I think this might be the first xenial pass I've seen in the gate for newton: https://review.openstack.org/#/c/441162/17:36
*** worstadmin_ has joined #openstack-ansible17:36
odyssey4mebut that patch is all up to logan- to approve17:36
*** darrenc_ has joined #openstack-ansible17:36
logan-haha 1h28m, just in the nick of time17:37
logan-i'll test when possible. wrapping up keystone fix atm17:37
*** matt6434 has joined #openstack-ansible17:38
*** neillc_ has joined #openstack-ansible17:38
*** mich9455 has joined #openstack-ansible17:39
*** Trident has joined #openstack-ansible17:40
*** jhesketh_ has joined #openstack-ansible17:41
*** mudpuppy_zzz has joined #openstack-ansible17:41
*** spotz_ has joined #openstack-ansible17:42
*** pwnall138 has joined #openstack-ansible17:42
*** jmccrory_ has joined #openstack-ansible17:42
*** bgmccollum_ has joined #openstack-ansible17:42
*** mgagne_ has joined #openstack-ansible17:42
*** Guest27612 has joined #openstack-ansible17:42
*** hamzy_ has joined #openstack-ansible17:42
*** strattao- has joined #openstack-ansible17:42
*** greghayn1 has joined #openstack-ansible17:42
*** squid has joined #openstack-ansible17:43
*** fedruantine_ has joined #openstack-ansible17:43
*** zz_pwnall1337 has quit IRC17:43
*** chris_hultin has quit IRC17:43
*** bgmccollum has quit IRC17:43
*** dstanek has quit IRC17:43
*** palendae has quit IRC17:43
*** darrenc has quit IRC17:43
*** mudpuppy has quit IRC17:43
*** jmccrory has quit IRC17:43
*** spotz has quit IRC17:43
*** fedruantine has quit IRC17:43
*** mgagne has quit IRC17:43
*** strattao has quit IRC17:43
*** worstadmin has quit IRC17:43
*** cloudnull has quit IRC17:43
*** hamzy has quit IRC17:43
*** Tridde has quit IRC17:43
*** gfa has quit IRC17:43
*** neillc has quit IRC17:43
*** mattoliverau has quit IRC17:43
*** jhesketh has quit IRC17:43
*** mcarden has quit IRC17:43
*** calebb has quit IRC17:43
*** greghaynes has quit IRC17:43
*** chris__hultin has joined #openstack-ansible17:43
*** strattao- is now known as strattao17:43
*** chris__hultin is now known as chris_hultin17:43
odyssey4melogan- jmccrory_ just as I thought, see Andreas' reply in https://review.openstack.org/#/c/419517/13/jenkins/jobs/openstack-ansible-jobs.yaml17:43
*** cloudnull has joined #openstack-ansible17:43
*** dstanek has joined #openstack-ansible17:43
*** Guest27612 is now known as palendae17:43
*** gfa has joined #openstack-ansible17:44
*** jmccrory_ is now known as jmccrory17:44
odyssey4methat said, the host prep for our test doesn't matter all that much - we reinstall most things that infra installs from a python standpoint17:44
*** shardy has quit IRC17:44
odyssey4meI'll adjust the project-config stuff tomorrow. I'm tired now and in great need of a drink.17:45
*** worstadmin_ is now known as worstadmin17:46
*** spotz_ is now known as spotz_zzz17:48
evrardjphaha17:48
evrardjpenjoy the weekend odyssey4me!17:49
*** cjloader has quit IRC17:49
*** adrian_otto has quit IRC17:55
agrebennikov_odyssey4me, before you go please - are you with merging my ssl stuff if centos-related tests fail?17:56
agrebennikov_*are you ok17:56
openstackgerritSatheesh Kumar Ulaganathan proposed openstack/openstack-ansible-haproxy_server master: Enable timeout for http_request  https://review.openstack.org/44093517:57
*** schwicht has quit IRC17:58
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible-os_ceilometer master: Change ceilometer central container name  https://review.openstack.org/44126217:59
openstackgerritMerged openstack/openstack-ansible-os_ironic stable/ocata: Cap the number of worker processes  https://review.openstack.org/44103418:01
*** schwicht has joined #openstack-ansible18:02
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible master: Remove Ceilometer API Service  https://review.openstack.org/43874018:06
*** manheim_ has quit IRC18:07
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Rebuild credential-key repo during keystone[0] rebuild  https://review.openstack.org/44126418:07
*** TxGirlGeek has joined #openstack-ansible18:08
*** jwitko has joined #openstack-ansible18:10
GustavoChalcomgariepy, I use that patch, but now I'm getting this error  http://paste.openstack.org/show/601363/18:12
openstackgerritRavi Kumar Boyapati proposed openstack/openstack-ansible master: Move glance container bind mount dirs to group_vars  https://review.openstack.org/44126718:14
*** jamesden_ has quit IRC18:15
*** crushil has quit IRC18:15
*** matt6434 is now known as mattoliverau18:16
*** crushil has joined #openstack-ansible18:16
agrebennikov_GustavoChalco, this is nothing about the previous one... which release?18:18
*** lucasxu has quit IRC18:19
agrebennikov_and which play it is about?18:19
*** jmckind has joined #openstack-ansible18:20
GustavoChalcoagrebennikov_, how can I know the release? ( sorry I'm pretty new with OpenStack )18:21
agrebennikov_which release are you installing? master? ocata? newton? mitaka?18:22
GustavoChalcoagrebennikov_, I been following these guide https://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/run-playbooks.html18:22
agrebennikov_so ocata18:22
*** jmckind has quit IRC18:23
*** kstev has quit IRC18:23
agrebennikov_and which playbook gives you this error?18:23
GustavoChalcowhen I run these command openstack-ansible setup-hosts.yml18:23
agrebennikov_there are 4 parts in that play18:24
agrebennikov_(if you take a look at the playbook18:24
agrebennikov_)18:24
*** jlmcknight has joined #openstack-ansible18:24
agrebennikov_it is most likely the task from lxc-hosts-setup18:24
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Rebuild credential-key repo during keystone[0] rebuild  https://review.openstack.org/44126418:24
*** adrian_otto has joined #openstack-ansible18:25
*** lucasxu has joined #openstack-ansible18:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Rebuild credential-key repo during keystone[0] rebuild  https://review.openstack.org/44126418:25
mgariepyGustavoChalco, which version are you using ?18:26
GustavoChalcomgariepy, Ocata18:26
mgariepywhcih tag ?18:26
agrebennikov_GustavoChalco, can you please tell which task it successfully executed right before the failed one?18:27
GustavoChalcoTASK [lxc_hosts : Create base directories] < that's the previous task18:28
mgariepyGustavoChalco, we switched to COPR repo18:29
mgariepyGustavoChalco, can you try with origin/stable/ocata instead of the tag ?18:30
mgariepyhttps://github.com/openstack/openstack-ansible-lxc_hosts/blob/stable/ocata/tasks/lxc_install_yum.yml#L1618:30
agrebennikov_mgariepy, why https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L17?18:31
agrebennikov_it is master by default :/18:31
mgariepyit's the master branch18:31
agrebennikov_ah, sec18:32
agrebennikov_oh, my bad... sorry18:32
mgariepyyou can switch branch in the drop down on top of the file ;p18:32
agrebennikov_I jsut thought I'm getting crazy18:32
GustavoChalcomgariepy, Ok, I'll try18:32
*** acormier has joined #openstack-ansible18:33
evrardjpok guys I'm off for today, see you next week!18:34
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-security master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44128118:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Rebuild credential-key repo during keystone[0] rebuild  https://review.openstack.org/44126418:34
agrebennikov_jmccrory, thanks a lot for ^^ my commit just failed 10 minutes ago because of that18:35
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Rebuild credential-key repo during keystone[0] rebuild  https://review.openstack.org/44126418:35
jmccroryagrebennikov_ : yeah, have a feeling a lot of failures across repos are are going to be because of that18:35
agrebennikov_even though is it about -security?18:36
agrebennikov_because mine failed in the role18:36
agrebennikov_is this commit supposed to fix all of them?18:36
jmccroryeach role has its own bindep.txt18:36
agrebennikov_soooo.....18:36
agrebennikov_all them needs to be fixed right now?18:36
jmccroryyep18:36
agrebennikov_are you going to do it or I can help?18:36
jmccrorysure, you can help18:37
agrebennikov_ERROR: These requested packages were not installed:18:37
agrebennikov_2017-03-03 17:08:00.177408 |18:37
agrebennikov_2017-03-03 17:08:00.177431 | pyOpenSSL18:37
agrebennikov_is this about the same error?18:37
agrebennikov_in centos18:37
*** h5t4_ has joined #openstack-ansible18:37
jmccroryyeah, python2-pyOpenSSL is the new package name18:38
*** acormier has quit IRC18:38
agrebennikov_but it is saying18:38
agrebennikov_Package pyOpenSSL-0.15.1-1.el7.noarch is obsoleted by python2-pyOpenSSL-16.2.0-3.el7.noarch which is already installed18:38
DimGRHello  does anyone here has servers hosted with hetzner.de ?18:38
*** acormier has joined #openstack-ansible18:38
jmccroryright, but bindep apparently still wants the specific package named, pyOpenSSL, to be installed. it never will be18:39
*** spotz_zzz is now known as spotz18:39
agrebennikov_ah, so it is not required anymore... I think I get it18:39
agrebennikov_ok, let me port it to some of the roles in a sec18:39
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_nova master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44128818:41
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_cinder master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129018:42
*** adrian_otto has quit IRC18:44
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_glance master: nstall python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129118:44
agrebennikov_so jmccrory really all them?18:45
openstackgerritMerged openstack/openstack-ansible-security master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44128118:45
jmccroryagrebennikov_ : looks like it18:46
jmccrorythink i'll just script through the rest18:46
agrebennikov_let me finish heat real quick18:47
openstackgerritAndrey Grebennikov proposed openstack/openstack-ansible-os_heat master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129418:47
*** sdake has quit IRC18:47
*** mmalik4_ has quit IRC18:47
agrebennikov_why you didn't say you have automated thing to go through all roles? ;)18:48
openstackgerritLogan V proposed openstack/openstack-ansible-apt_package_pinning master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129518:49
openstackgerritLogan V proposed openstack/openstack-ansible-ceph_client master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129718:49
openstackgerritLogan V proposed openstack/openstack-ansible-galera_client master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129818:49
*** adrian_otto has joined #openstack-ansible18:49
*** spotz is now known as spotz_zzz18:49
openstackgerritLogan V proposed openstack/openstack-ansible-galera_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129918:49
openstackgerritLogan V proposed openstack/openstack-ansible-haproxy_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130018:49
openstackgerritLogan V proposed openstack/openstack-ansible-lxc_container_create master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130118:49
openstackgerritLogan V proposed openstack/openstack-ansible-lxc_hosts master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130218:49
openstackgerritLogan V proposed openstack/openstack-ansible-memcached_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130518:49
openstackgerritLogan V proposed openstack/openstack-ansible-security master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130618:49
openstackgerritLogan V proposed openstack/openstack-ansible-openstack_hosts master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130718:49
openstackgerritLogan V proposed openstack/openstack-ansible-openstack_openrc master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130818:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_aodh master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130918:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_barbican master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131018:49
jmccroryoh thanks logan- !18:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_ceilometer master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131118:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_designate master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131218:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_gnocchi master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131318:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_horizon master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131418:49
logan-sorry i just saw you were doing that as i started pushing them :P18:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_ironic master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131518:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131618:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_magnum master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131718:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131918:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_rally master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132018:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_sahara master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132118:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_swift master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132218:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_tempest master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132318:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_trove master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132418:49
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132518:50
openstackgerritLogan V proposed openstack/openstack-ansible-plugins master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132618:50
openstackgerritLogan V proposed openstack/openstack-ansible-rabbitmq_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132718:50
openstackgerritLogan V proposed openstack/openstack-ansible-repo_build master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132818:50
openstackgerritLogan V proposed openstack/openstack-ansible-repo_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132918:50
openstackgerritLogan V proposed openstack/openstack-ansible-rsyslog_client master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44133018:50
openstackgerritLogan V proposed openstack/openstack-ansible-rsyslog_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44133118:50
agrebennikov_is that all :D18:50
jmccroryagrebennikov_ was just going to write a loop with sed18:50
logan-no there are a few that aren't in the integrated repo yet18:50
*** electrofelix has quit IRC18:50
agrebennikov_yeah18:51
GustavoChalcomgariepy, Hi, I try as you suggest and now get these... http://paste.openstack.org/show/601365/18:51
GustavoChalcowhich is wear cause I already install epel-release18:51
GustavoChalco:/18:51
agrebennikov_it seems to jsut be a syntax error in the task somewhere18:52
agrebennikov_jmccrory, don't miss my glance role commit please ;)18:52
*** sdake has joined #openstack-ansible18:53
*** crushil has quit IRC18:54
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129018:54
*** Jack_Iv has quit IRC18:54
*** crushil has joined #openstack-ansible18:54
*** adrian_otto has quit IRC18:55
*** Jack_Iv has joined #openstack-ansible18:55
mgariepyGustavoChalco, did you re-ran the bootstrap-ansible script ?18:59
*** Jack_Iv has quit IRC18:59
*** TxGirlGeek has quit IRC19:00
*** TxGirlGeek has joined #openstack-ansible19:00
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_glance master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129119:03
jamesdentonandymccr thanks!19:04
DimGRHello  does anyone here has servers hosted with hetzner.de ?19:04
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-security stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44134019:05
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_cinder stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44134119:05
openstackgerritMarc Gariépy proposed openstack/openstack-ansible stable/newton: [DOC] fix tag for newton  https://review.openstack.org/44134319:05
*** poopcat has joined #openstack-ansible19:06
*** kjw3 has quit IRC19:07
*** kjw3 has joined #openstack-ansible19:07
agrebennikov_so jmccrory same look through ocata now?19:11
agrebennikov_*loop19:11
jmccroryneed cherry-picks to ocata and newton19:11
*** Andrew_jedi has joined #openstack-ansible19:12
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-tests master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44134819:12
logan-yeah i can pick all of the ones I did, one sec19:13
logan-was debating waiting till they merge or not19:13
Andrew_jedimgariepy: AFAIR mhayden did disabled selinux on some patch and gave it +219:13
jmccrorylogan- yeah, was waiting on merge. don't know if it'll really make a difference or not though19:14
*** poopcat has quit IRC19:14
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-security master: Fix selinux check when disabled  https://review.openstack.org/44123319:15
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-lxc_hosts master: Moving selinux bits into lxc_selinux  https://review.openstack.org/44116719:17
mgariepyAndrew_jedi, ?19:17
agrebennikov_seems gerrit is a bit busy with all these simultaneous changes19:17
openstackgerritMerged openstack/openstack-ansible-security master: Replace always_run with check_mode  https://review.openstack.org/42044119:19
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_octavia master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135419:20
*** ngupta has quit IRC19:23
mgariepyevrardjp, are you around ?19:23
logan-i guess i will stage the newton/ocata backports jmccrory19:23
jmccroryok thanks19:24
openstackgerritLogan V proposed openstack/openstack-ansible-apt_package_pinning stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135519:24
openstackgerritLogan V proposed openstack/openstack-ansible-ceph_client stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135619:24
openstackgerritLogan V proposed openstack/openstack-ansible-galera_client stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135719:24
openstackgerritLogan V proposed openstack/openstack-ansible-galera_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135819:24
openstackgerritLogan V proposed openstack/openstack-ansible-haproxy_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135919:24
openstackgerritLogan V proposed openstack/openstack-ansible-lxc_container_create stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136019:25
openstackgerritLogan V proposed openstack/openstack-ansible-lxc_hosts stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136119:25
openstackgerritLogan V proposed openstack/openstack-ansible-memcached_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136219:25
openstackgerritLogan V proposed openstack/openstack-ansible-security stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136319:25
openstackgerritLogan V proposed openstack/openstack-ansible-openstack_hosts stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136419:25
openstackgerritLogan V proposed openstack/openstack-ansible-openstack_openrc stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136519:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_aodh stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136619:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_barbican stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136719:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_ceilometer stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136819:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_designate stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136919:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_gnocchi stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137019:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_horizon stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137119:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_ironic stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137219:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137319:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_magnum stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137419:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137519:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_rally stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137619:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_sahara stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137719:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_swift stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137819:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_tempest stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137919:25
openstackgerritLogan V proposed openstack/openstack-ansible-os_trove stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138019:25
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138119:25
openstackgerritLogan V proposed openstack/openstack-ansible-plugins stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138219:25
openstackgerritLogan V proposed openstack/openstack-ansible-rabbitmq_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138319:25
openstackgerritLogan V proposed openstack/openstack-ansible-repo_build stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138419:25
Andrew_jedimgariepy: https://bugs.launchpad.net/openstack-ansible/+bug/165751719:25
openstackLaunchpad bug 1657517 in openstack-ansible "Hosts role should set SELinux into permissive mode" [Undecided,Fix released] - Assigned to Major Hayden (rackerhacker)19:25
openstackgerritLogan V proposed openstack/openstack-ansible-repo_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138519:25
openstackgerritLogan V proposed openstack/openstack-ansible-rsyslog_client stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138619:25
openstackgerritLogan V proposed openstack/openstack-ansible-rsyslog_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138719:25
*** poopcat has joined #openstack-ansible19:26
agrebennikov_logan-, seems you didn't include major openstack roles19:27
evrardjp[m]Not really there, but shoot. If i can i will do it today, no promises :)19:27
agrebennikov_or that's because they were manually done?19:27
logan-agrebennikov_: still working on it, but yeah, a few of the first ones were proposed by you so they aren't in my mass update :P19:28
agrebennikov_are you doing it? or I can just finish with them since I started already19:29
*** ngupta has joined #openstack-ansible19:31
evrardjpmgariepy: ^19:31
mgariepyevrardjp, the nova stuff on centos is failing again :D19:31
mgariepyhaha19:31
evrardjpwhich reason?19:32
jlmcknighthello, I've got a question regarding https://review.openstack.org/#/c/314817/ (change that added centos7 support to galera_server)19:32
mgariepyqemu verison not recent enough19:32
evrardjpI didn't got the chance to look at it19:32
evrardjpbut rdo is included ??19:32
evrardjpthat's weird19:32
mgariepyyep, was working yesterday haha.19:32
jlmcknightin that change, the apt related galera_ variables were moved from default/main.yml to vars/<os>.yml, which makes things like galera_apt_repo_url rather difficult to override19:33
evrardjpoh man, repl pins above rdo?19:33
jlmcknightis that by design?  effectivly I am only able to use --extra-vars to set those at this point.19:33
evrardjpor rdo is just super instable?19:33
*** greghayn1 is now known as greghaynes19:33
mgariepyrdo is for ocata not pike.19:33
evrardjpjlmcknight: If you have to override something in vars, we are doing it wrong19:33
openstackgerritMerged openstack/openstack-ansible-os_glance master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129119:34
openstackgerritMerged openstack/openstack-ansible-os_nova master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44128819:34
openstackgerritLogan V proposed openstack/openstack-ansible-apt_package_pinning stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139119:34
openstackgerritLogan V proposed openstack/openstack-ansible-ceph_client stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139219:34
openstackgerritLogan V proposed openstack/openstack-ansible-galera_client stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139319:34
openstackgerritLogan V proposed openstack/openstack-ansible-galera_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139419:34
openstackgerritLogan V proposed openstack/openstack-ansible-haproxy_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139519:34
evrardjpjlmcknight: probably worth listing as a bug, and then we'll move the variable away19:34
openstackgerritLogan V proposed openstack/openstack-ansible-lxc_container_create stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139619:34
openstackgerritLogan V proposed openstack/openstack-ansible-lxc_hosts stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139719:34
evrardjpback to defaults19:34
openstackgerritLogan V proposed openstack/openstack-ansible-memcached_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139819:34
openstackgerritLogan V proposed openstack/openstack-ansible-security stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139919:34
openstackgerritLogan V proposed openstack/openstack-ansible-openstack_hosts stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140019:34
openstackgerritLogan V proposed openstack/openstack-ansible-openstack_openrc stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140119:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_aodh stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140219:34
openstackgerritMerged openstack/openstack-ansible-os_heat master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129419:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_ceilometer stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140319:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_gnocchi stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140419:34
evrardjpjlmcknight: but yes, in general we tend to use user_variables quite liberally19:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_horizon stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140519:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_ironic stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140619:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140719:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_magnum stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140819:34
mgariepylogan centos stuff for newton ?19:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140919:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_rally stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141019:34
openstackgerritLogan V proposed openstack/openstack-ansible-os_sahara stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141119:35
openstackgerritLogan V proposed openstack/openstack-ansible-os_swift stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141219:35
openstackgerritLogan V proposed openstack/openstack-ansible-os_tempest stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141319:35
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141419:35
jlmcknightevrardjp: ok, thanks I'll look into filing a bug for it.  thanks!19:35
evrardjpmgariepy: yes but for master we are supposed to use rdo testing, right?19:35
openstackgerritLogan V proposed openstack/openstack-ansible-plugins stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141519:35
openstackgerritLogan V proposed openstack/openstack-ansible-rabbitmq_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141619:35
openstackgerritLogan V proposed openstack/openstack-ansible-repo_build stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141719:35
openstackgerritLogan V proposed openstack/openstack-ansible-repo_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141819:35
openstackgerritLogan V proposed openstack/openstack-ansible-rsyslog_client stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141919:35
openstackgerritLogan V proposed openstack/openstack-ansible-rsyslog_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142019:35
logan-mgariepy: should only be on roles that contain it in bindep19:35
evrardjpjlmcknight: we could technically close it if we find it's a good idea though :)19:35
evrardjpif it's not*19:35
mgariepyok19:35
*** TxGirlGeek has quit IRC19:35
mgariepyAndrew_jedi, disabled and permissive is 2 different modes.19:36
*** TxGirlGeek has joined #openstack-ansible19:36
jlmcknightevrardjp: understood, hopefully setting repo info is deemed worthy to move :)19:36
evrardjpmgariepy: it's for gates and ansible basically19:36
Andrew_jedimgariepy: Yep, i was wrong ...19:37
openstackgerritLogan V proposed openstack/openstack-ansible-os_heat stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142119:38
openstackgerritLogan V proposed openstack/openstack-ansible-os_heat stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142219:38
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142319:38
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142419:38
openstackgerritLogan V proposed openstack/openstack-ansible-os_glance stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142519:38
openstackgerritLogan V proposed openstack/openstack-ansible-os_glance stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142619:38
openstackgerritLogan V proposed openstack/openstack-ansible-tests stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142719:38
openstackgerritLogan V proposed openstack/openstack-ansible-tests stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142819:38
evrardjplogan-: could you adapt also the pip install role afterwards too?19:38
evrardjp:D19:39
evrardjphttps://github.com/openstack/openstack-ansible-pip_install/blob/master/vars/redhat-7.yml#L2419:39
openstackgerritLogan V proposed openstack/openstack-ansible-os_cinder stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44143019:39
evrardjpI'm supposed to be out now!19:39
openstackgerritLogan V proposed openstack/openstack-ansible-security stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44134019:39
openstackgerritLogan V proposed openstack/openstack-ansible-security stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44143219:39
*** spotz_zzz is now known as spotz19:40
logan-evrardjp sure19:40
evrardjpwell I can quickly patch it19:40
evrardjpyou'll vote this way :)19:40
*** stream10 has joined #openstack-ansible19:41
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44143419:43
evrardjpthanks for the topic change, that was fast!19:44
logan-i drank a lot of coffee today19:44
evrardjphaha :)19:45
evrardjpmgariepy: would that be fine: https://buildlogs.centos.org/centos/7/cloud/x86_64/rdo-trunk-master-tested/ ?19:46
evrardjpdmsimard: are you there?19:46
openstackgerritRavi Kumar Boyapati proposed openstack/openstack-ansible master: Add ceph container bind mounts to group_vars  https://review.openstack.org/44143619:46
dmsimardevrardjp: o/19:47
mgariepyevrardjp, dmsimard i think this part is more on the rdo-qemu-ev one.19:48
mgariepymaybe for centos/pike it might be better19:49
*** TxGirlGeek has quit IRC19:49
dmsimardwhat's the problem ?19:49
*** spotz is now known as spotz_zzz19:49
mgariepyhttps://review.openstack.org/#/c/441172/19:50
mgariepyqemu sudently not recent enough for nova.19:50
evrardjp"THE" problem :)19:50
evrardjpthat would be nice if we only had one :)19:50
*** bgmccollum_ is now known as bgmccollum19:50
mgariepylol19:50
mgariepywhouldn't it be too easy evrardjp ?19:51
evrardjplife would be so boring19:51
dmsimardDo you recover a "rpm -qa" somewhere ?19:51
dmsimard"rpm -qa" and "yum repolist -v" are good things to recover if you can19:51
evrardjpmaybe worth exporting somewhere in the gates indeed19:52
dmsimardHard to compare package version things otherwise19:52
*** TxGirlGeek has joined #openstack-ansible19:52
evrardjpok will add this to centos gates19:52
dmsimardlike, I see that: http://logs.openstack.org/72/441172/3/check/gate-openstack-ansible-os_nova-ansible-func-centos-7-nv/ae0dd9e/logs/host/nova/nova-compute.log.txt.gz#_2017-03-03_17_18_13_32719:53
dmsimardBut that doesn't make sense to me, the qemu-ev repo (that's not managed by RDO by the way) ships >=2.619:53
dmsimardSo either it wasn't installed or somehow you got the one from the base operating system19:54
*** chris_hultin is now known as chris_hultin|AWA19:55
mgariepygrr19:55
mgariepyepel crap.19:55
mgariepyqemu.x86_64                            2:2.0.0-1.el7.6          @epel19:55
*** TxGirlGeek has quit IRC19:55
evrardjpgrr19:55
evrardjpthat's what I was afraid of :(19:56
dmsimardI probably told you at least once that EPEL is evil19:56
mgariepywell lol probably more than once. :)19:56
*** stuartgr has left #openstack-ansible19:56
dmsimardDo you install yum-plugin-priorities ?19:56
openstackgerritMerged openstack/openstack-ansible master: Adjust gate-check-commit for deploy/upgrade testing  https://review.openstack.org/44063119:56
evrardjpwell we should track this and kill epel19:56
evrardjpmaybe there is less need for it now19:56
mgariepydmsimard, how to I list all pakcage verison for let's say qemu ?19:57
dmsimardIf you install yum-plugin-priorities, you can probably be less prone to that kind of problems if you set priorities on the repos you're most interested in19:57
mgariepyto see what version are avalaible >19:57
dmsimardyum info ?19:57
dmsimardyum info <pkg> should list all available packages/sources I think19:57
mgariepyonly the one installed.19:57
dmsimardI'm not sure, I usually google that kind of stuff :p19:59
mgariepylol19:59
*** galstrom is now known as galstrom_zzz19:59
*** pwnall138 is now known as zz_pwnall13820:00
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-tests master: Improve rpm/repos logging  https://review.openstack.org/44144620:01
evrardjpmaybe I should use a centos to really test this20:01
evrardjpoh man yum repolist -v can be really slow20:04
*** mmalik4_ has joined #openstack-ansible20:05
*** hachi has quit IRC20:05
evrardjpmgariepy: in any case we need to know what to use for rdo master20:06
mgariepywe need to remove epel is possible.20:06
mgariepyi'll check this next week20:06
evrardjpyes20:07
evrardjpthat's gonna help us a lot20:07
mgariepyor use priority stuff.20:07
evrardjplet's do BDD20:07
evrardjpbreak driven development.20:07
evrardjpwe break things by removing epel, and see how we converge to make it pass.20:07
mgariepyhaha20:08
mgariepyhttp://paste.openstack.org/show/601370/20:09
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-tests master: Improve rpm/repos logging  https://review.openstack.org/44144620:09
mgariepybut yeah we can do that, i'll setup a brand new vm on monday morning and test that.20:09
mgariepyhave a nive weekend.20:11
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-tests master: Improve rpm/repos logging  https://review.openstack.org/44144620:11
evrardjphave a nice week-end !20:11
*** Andrew_jedi has quit IRC20:12
openstackgerritAndy McCrae proposed openstack/openstack-ansible-galera_server master: Fix upgrades for multinode galera  https://review.openstack.org/44122020:12
logan-you too evrardjp20:13
andymccrok ^ that now works20:13
andymccrwould be cool to get some reviews - there may well be a better way to approach this :) but it does fix the linked bug20:13
openstackgerritMerged openstack/openstack-ansible stable/ocata: Implement ARA logging and reporting for openstack-ansible gate jobs  https://review.openstack.org/44113420:16
*** galstrom_zzz is now known as galstrom20:19
*** mmalik4_ has quit IRC20:20
*** mmalik4_ has joined #openstack-ansible20:21
openstackgerritMerged openstack/openstack-ansible-pip_install master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132520:23
openstackgerritMerged openstack/openstack-ansible-pip_install stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141420:26
openstackgerritMerged openstack/openstack-ansible-tests master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44134820:27
openstackgerritMerged openstack/openstack-ansible-repo_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132920:28
*** jamesdenton has quit IRC20:29
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135420:29
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132720:29
*** TxGirlGeek has joined #openstack-ansible20:29
openstackgerritMerged openstack/openstack-ansible-rsyslog_client master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44133020:29
openstackgerritMerged openstack/openstack-ansible-os_sahara master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132120:30
openstackgerritMerged openstack/openstack-ansible-os_trove master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132420:30
openstackgerritMerged openstack/openstack-ansible-repo_build master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132820:30
openstackgerritMerged openstack/openstack-ansible-os_swift master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132220:30
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44143420:30
openstackgerritMerged openstack/openstack-ansible-memcached_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130520:31
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131920:31
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132320:31
openstackgerritMerged openstack/openstack-ansible-plugins master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132620:31
openstackgerritMerged openstack/openstack-ansible-rsyslog_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44133120:31
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129520:31
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129720:31
openstackgerritMerged openstack/openstack-ansible-galera_client master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129820:32
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130020:32
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130120:32
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131420:32
openstackgerritMerged openstack/openstack-ansible-os_ironic master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131520:32
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131620:32
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131720:32
openstackgerritMerged openstack/openstack-ansible-os_rally master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44132020:33
openstackgerritMerged openstack/openstack-ansible-galera_server master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44129920:33
openstackgerritMerged openstack/openstack-ansible-os_designate master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131220:33
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130720:33
openstackgerritMerged openstack/openstack-ansible-openstack_openrc master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130820:34
openstackgerritMerged openstack/openstack-ansible-os_barbican master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131020:35
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130220:35
agrebennikov_folks, can somebody please take a look into https://review.openstack.org/#/c/43809520:35
openstackgerritMerged openstack/openstack-ansible-os_aodh master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44130920:36
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131320:36
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44131120:36
openstackgerritMerged openstack/openstack-ansible-os_heat stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142120:37
openstackgerritMerged openstack/openstack-ansible-os_nova stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142320:37
openstackgerritMerged openstack/openstack-ansible-pip_install stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138120:37
*** spotz_zzz is now known as spotz20:37
openstackgerritMerged openstack/openstack-ansible-tests stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142720:37
openstackgerritMerged openstack/openstack-ansible-os_glance stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142520:37
openstackgerritMerged openstack/openstack-ansible-pip_install master: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44143420:41
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44146420:43
*** spotz is now known as spotz_zzz20:47
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Rebuild credential-key repo during keystone[0] rebuild  https://review.openstack.org/44126421:01
*** Erming has joined #openstack-ansible21:03
*** crushil has quit IRC21:05
*** crushil has joined #openstack-ansible21:06
ErmingHi, after tried out quite a few methods, I am trying out openstack ansible which is said neat and convenient to deploy/maintain a cloud. However, I've got an error at the very beginning step:21:07
Ermingerror message can be found here: https://paste.fedoraproject.org/paste/UdBpkEdEZByT4GP4KboFdl5M1UNdIGYhyRLivL9gydE=21:07
ErmingThe command I was running is: openstack-ansible setup-hosts.yml21:08
*** GustavoChalco has quit IRC21:08
logan-Erming: which branch/tag are you deploying?21:09
Erming14.0.8 newton21:09
ErmingAIO went well with this branch/tag21:09
openstackgerritMerged openstack/openstack-ansible-os_glance stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142621:09
Erminglogan-: see above. thanks21:10
agrebennikov_Erming, I saw this happening when it failed somewhere else during the installation and now it jsut cannot proceed21:10
*** heroux has quit IRC21:10
openstackgerritMerged openstack/openstack-ansible-security stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44134021:11
agrebennikov_jsut destroy the containers, create them once again and re-run the playbooks21:11
Ermingagrebennikov_: why i am so 'lucky'21:11
openstackgerritMerged openstack/openstack-ansible-os_nova stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142421:11
agrebennikov_Erming, I'm re-deploying the containers 20-30 times every time21:11
Ermingagrebennikov_: it's the very first step no containers running yet.21:11
agrebennikov_Erming, it is installing pip where?21:12
openstackgerritMerged openstack/openstack-ansible-tests stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142821:12
openstackgerritMerged openstack/openstack-ansible-plugins stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138221:12
agrebennikov_baremetals?21:12
Ermingagrebennikov_: I have 3 ctrls 1 logsrv 1storage server,21:12
evrardjpI was overly enthusiastic in my keyboard shortcuts :/21:12
Ermingagrebennikov_: no, on VMs on inside a cloud21:12
Ermingagrebennikov_: it's a testing deployment21:13
agrebennikov_Erming, it seems there is some pip already installed on those vms21:13
*** sdake_ has joined #openstack-ansible21:13
openstackgerritMerged openstack/openstack-ansible-rsyslog_client stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138621:13
openstackgerritMerged openstack/openstack-ansible-os_heat stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142221:13
agrebennikov_and the playbook gets confusd21:13
openstackgerritMerged openstack/openstack-ansible-repo_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138521:13
openstackgerritMerged openstack/openstack-ansible-rsyslog_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138721:14
openstackgerritSatheesh Kumar Ulaganathan proposed openstack/openstack-ansible-haproxy_server master: Enable timeout for http_request  https://review.openstack.org/44093521:14
Ermingagrebennikov_: Do you mean I shoud remove all the PIPs from the servers21:15
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137921:15
agrebennikov_python /opt/get-pip.py --isolated21:15
Ermingagrebennikov_: or thos packages such as appdirs.21:15
agrebennikov_is what it is doing21:15
*** chris_hultin|AWA is now known as chris_hultin21:15
agrebennikov_try running it manually21:15
Ermingagrebennikov_: on each VM?21:16
agrebennikov_python /opt/get-pip.py --isolated   pip==9.0.1 setuptools==34.1.0 wheel==0.29.021:16
agrebennikov_it is doing it on each host, yeah21:16
agrebennikov_I mean, you try on one21:16
agrebennikov_because it fails similarly everywhere21:16
Ermingagrebennikov_:  is it because of the latest apt-get dist-upgarde21:16
*** sdake has quit IRC21:16
agrebennikov_ideally should not be the case :/21:17
agrebennikov_we install to latest OS as well21:17
Ermingagrebennikov_: error as following21:17
agrebennikov_but well, maybe very recent changes somehow21:17
Ermingagrebennikov_: https://paste.fedoraproject.org/paste/kXHPJY8DQolVrDBvGV6JAF5M1UNdIGYhyRLivL9gydE=21:17
Ermingagrebennikov_: I suspect the packages such as 'appdirs' issue?21:18
*** kjw3 has quit IRC21:19
agrebennikov_seems so... as I say - I had this kind of issues before but within the containers. So I jsut re-created the containers and forgot about it :) But I had that when something was failing during the pip packages installation21:19
Ermingagrebennikov_: what's the best from your estimation I could try21:19
agrebennikov_so yeah, you probably manually try to purge appdirs completely21:20
*** stream10 has quit IRC21:20
Ermingagrebennikov_: just pip uninstall appdirs?21:20
agrebennikov_also probably delete the cache21:21
agrebennikov_http://stackoverflow.com/questions/9510474/removing-pips-cache21:21
Ermingagrebennikov_: Thanks. Trying...21:25
*** jamielennox is now known as jamielennox|away21:29
*** smatzek has quit IRC21:33
*** chris_hultin is now known as chris_hultin|AWA21:34
*** kjw3 has joined #openstack-ansible21:40
*** schwicht_at_work has joined #openstack-ansible21:41
*** jlmcknight has quit IRC21:41
*** schwicht has quit IRC21:42
DimGRGuys , quick question. Is it possible to deploy open stack as a cloud in a setup with 1 Nic card and no vlan support? I found out today that the datacenter where I have everything hosted does not support  vlan tagging  etc21:44
*** retreved has quit IRC21:44
*** jwitko has quit IRC21:45
agrebennikov_DimGR, sure, you jsut create bridges with separate phys nics21:46
agrebennikov_OSA doesn't care about the interfaces pretty much21:46
DimGRagrebennikov_, there is only 1 Nic available , eth0  and thats it21:47
agrebennikov_ah, just saw it...21:47
agrebennikov_and no vlan?21:47
*** thorst has quit IRC21:48
DimGRagrebennikov_,  I requested this : 4 unique vlans that are trunked to each of the ports for all 6 of my servers and their rely was we do not offer that. I then asked for an alternative solution and they offered me a 8port switch which does not support vlan21:49
*** thorst has joined #openstack-ansible21:50
openstackgerritRavi Kumar Boyapati proposed openstack/openstack-ansible-os_monasca-ui master: Add tasks to install monasca ui  https://review.openstack.org/43673121:51
*** thorst has quit IRC21:55
*** lucasxu has quit IRC22:00
*** gouthamr has quit IRC22:01
DimGRagrebennikov_,  I can ask for a second Nic if thats makes things easier . If it does I will have eth0 with public networking , eth1 private  and still no vlans .  Can OSA still deploy a cloud with this set up or vlans are mandatory no matter what22:03
*** acormier_ has joined #openstack-ansible22:03
*** acormier has quit IRC22:07
*** sdake_ has quit IRC22:09
openstackgerritMerged openstack/openstack-ansible-ceph_client stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135622:10
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136122:10
openstackgerritMerged openstack/openstack-ansible-openstack_hosts stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136422:10
*** h5t4_ has quit IRC22:10
openstackgerritMerged openstack/openstack-ansible-os_aodh stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136622:10
openstackgerritMerged openstack/openstack-ansible-os_ceilometer stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136822:10
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44134122:10
openstackgerritMerged openstack/openstack-ansible-memcached_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136222:11
ErmingTASK [lxc_container_create : Wait for ssh to be available] *********************22:11
Ermingagrebennikov_: It passed the issue. Thanks. Now it's hanging here:   TASK [lxc_container_create : Wait for ssh to be available]22:11
Ermingagrebennikov_: Do I have anything network configuration wrong?22:12
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135522:13
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137022:13
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137122:14
openstackgerritMerged openstack/openstack-ansible-os_ironic stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137222:14
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137322:14
openstackgerritMerged openstack/openstack-ansible-os_magnum stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137422:14
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137522:14
openstackgerritMerged openstack/openstack-ansible-os_rally stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137622:14
openstackgerritMerged openstack/openstack-ansible-os_sahara stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137722:14
openstackgerritMerged openstack/openstack-ansible-os_swift stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44137822:15
openstackgerritMerged openstack/openstack-ansible-galera_client stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135722:15
openstackgerritMerged openstack/openstack-ansible-galera_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135822:15
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44135922:15
Ermingagrebennikov_: looks all containers are running.22:15
openstackgerritMerged openstack/openstack-ansible-lxc_container_create stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136022:15
openstackgerritMerged openstack/openstack-ansible-openstack_openrc stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136522:15
openstackgerritMerged openstack/openstack-ansible-os_barbican stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136722:15
openstackgerritMerged openstack/openstack-ansible-os_designate stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136922:15
*** adrian_otto has joined #openstack-ansible22:15
openstackgerritMerged openstack/openstack-ansible-os_trove stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138022:15
openstackgerritMerged openstack/openstack-ansible-pip_install stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44146422:15
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138322:15
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141622:16
openstackgerritMerged openstack/openstack-ansible-repo_build stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44138422:16
openstackgerritMerged openstack/openstack-ansible-repo_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141822:16
openstackgerritMerged openstack/openstack-ansible-rsyslog_client stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141922:16
openstackgerritMerged openstack/openstack-ansible-rsyslog_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44142022:16
openstackgerritMerged openstack/openstack-ansible-security stable/ocata: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44136322:16
agrebennikov_Erming, potentially... but first go to the controller and get into the container and make sure they got IPs22:16
agrebennikov_I saw that issue recently22:16
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139722:16
agrebennikov_when dnsmasq was not running on the node22:16
openstackgerritMerged openstack/openstack-ansible-os_aodh stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140222:16
*** galstrom is now known as galstrom_zzz22:17
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44143022:17
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140722:17
openstackgerritMerged openstack/openstack-ansible-os_magnum stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140822:17
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140922:17
Ermingagrebennikov_: Yes. I am check the containers and saw IPs. But cannot ping the gateway, e.g. 172.29.236.122:17
openstackgerritMerged openstack/openstack-ansible-os_swift stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141222:17
openstackgerritMerged openstack/openstack-ansible-plugins stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141522:17
openstackgerritMerged openstack/openstack-ansible-repo_build stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141722:17
openstackgerritMerged openstack/openstack-ansible-security stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139922:18
agrebennikov_technically all nodes should be sitting in the same subnet...22:18
agrebennikov_well, then check the configs of the bridges :)22:18
agrebennikov_btw22:18
agrebennikov_are they instances within another openstack?22:18
Ermingagrebennikov_: yes22:19
agrebennikov_heh :)22:19
agrebennikov_then you'll have a hard time22:19
agrebennikov_with dealing with anti-spoofing22:19
agrebennikov_in neutron22:19
openstackgerritMerged openstack/openstack-ansible-os_sahara stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141122:19
*** h5t4 has joined #openstack-ansible22:19
agrebennikov_when the port is created on the compute, it is only allowed the traffic from the particular IP and mac to go through22:20
Ermingagrebennikov_: I am trying out osad in a openstack cloud. Each host (VM) has been attached 5 vNICs from one physical NIC.22:20
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139122:20
agrebennikov_Erming, this is what I'm saying22:20
DimGRagrebennikov_,  I can ask for a second Nic if thats makes things easier . If it does I will have eth0 with public networking , eth1 private  and still no vlans .  Can OSA still deploy a cloud with this set up or vlans are mandatory no matter what22:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Adjust gate-check-commit for deploy/upgrade testing  https://review.openstack.org/44149422:20
openstackgerritMerged openstack/openstack-ansible-galera_client stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139322:20
Ermingagrebennikov_: Sounds a trouble. Do you have a good advice for this?22:21
openstackgerritMerged openstack/openstack-ansible-galera_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139422:21
agrebennikov_DimGR, OSA doesn't need vlans, jsut bridges22:21
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139522:21
openstackgerritMerged openstack/openstack-ansible-ceph_client stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139222:21
openstackgerritMerged openstack/openstack-ansible-memcached_server stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139822:21
DimGRagrebennikov_,  no vlan tags at all ?22:21
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: Enable timeout for http_request  https://review.openstack.org/44093522:22
Ermingagrebennikov_: This is the error message and configurations:  https://paste.fedoraproject.org/paste/v1QcQzehThxMrrkIRFON7V5M1UNdIGYhyRLivL9gydE=22:22
openstackgerritMerged openstack/openstack-ansible-lxc_container_create stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44139622:22
agrebennikov_Erming, each port of the vms has port_security_enabled set to true22:22
openstackgerritMerged openstack/openstack-ansible-openstack_hosts stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140022:22
openstackgerritMerged openstack/openstack-ansible-openstack_openrc stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140122:22
agrebennikov_you have to disable it22:22
agrebennikov_for all ports22:22
openstackgerritMerged openstack/openstack-ansible-os_ceilometer stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140322:22
Ermingagrebennikov_: where to disable port_security_enabled ?22:22
agrebennikov_of the instances where you run containers22:22
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140422:22
openstackgerritMerged openstack/openstack-ansible-os_horizon stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140522:22
agrebennikov_neutron port-update22:22
openstackgerritMerged openstack/openstack-ansible-os_rally stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141022:22
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44141322:22
Ermingagrebennikov_: let me check. Wow22:23
agrebennikov_and then it is also going to complaint about the sec groups - you have to set it to none22:23
agrebennikov_(if I remember correctly)22:23
Ermingagrebennikov_: can you show me the commands to be more clear?22:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build stable/ocata: Add non *.whl files to MANIFEST.in  https://review.openstack.org/44118022:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build stable/newton: Add non *.whl files to MANIFEST.in  https://review.openstack.org/44118122:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Update thread/worker settings for optimal memory usage  https://review.openstack.org/43867322:24
agrebennikov_DimGR, in the openstack_user_config you should only mention bridges for each provider network22:24
agrebennikov_and it is up to you how you manage them22:24
agrebennikov_and also container network may be the same as your real network22:25
DimGRagrebennikov_,  I am looking for a working example22:25
agrebennikov_DimGR,22:25
agrebennikov_cidr_networks:22:25
agrebennikov_  container: 10.146.200.0/24 # host IP addresses22:25
agrebennikov_which is the same as the real network on the nodes22:26
agrebennikov_DimGR, then you define br-mgmt in provider_network section on eth022:27
agrebennikov_br-mgmt on the nodes will have that ip in the baremetal nodes22:27
openstackgerritMerged openstack/openstack-ansible-os_ironic stable/newton: Install python2-pyOpenSSL package on CentOS  https://review.openstack.org/44140622:27
agrebennikov_and br-vlan-based network on your eth122:28
agrebennikov_which will be used for projects networks22:28
agrebennikov_that's it22:28
DimGRHm ok thanks I will look into this scenario22:29
*** vnogin has joined #openstack-ansible22:30
openstackgerritSatheesh Kumar Ulaganathan proposed openstack/openstack-ansible-haproxy_server stable/ocata: Enable timeout for http_request  https://review.openstack.org/44149822:31
Ermingagrebennikov_: I checked but not very clear about which one I should do.  I have basic network 192.168.1.0 and mgmt: 172.29.236.0, vlan, vxlan and storage networks.22:33
Ermingagrebennikov_: which network related ports I should modify?22:33
agrebennikov_EmilienM, whichever is your container network22:33
agrebennikov_you specify the bridge in the config for containers22:34
Ermingagrebennikov_: I guess you mean the mgmt network, 172.29.23622:34
agrebennikov_ok22:34
agrebennikov_it has the interface attached to it22:34
openstackgerritMerged openstack/openstack-ansible stable/newton: [DOC] fix tag for newton  https://review.openstack.org/44134322:34
agrebennikov_instance port in that network you have to modify22:34
*** vnogin has quit IRC22:35
*** sdake has joined #openstack-ansible22:35
Ermingagrebennikov_: yes. I checked with "neturon port-show ...". Only find security_groups ID there, no port_security_enabled field. So you mean I still need disable it?22:38
agrebennikov_it will be there, but you should be the admin most likely (in the tenant)22:39
*** Andrew_jedi has joined #openstack-ansible22:40
*** crushil has quit IRC22:41
Ermingagrebennikov_: I am the admin of this tenant. I did this way: 1) checked the IP, such as 172.29.236.11, and then neutron port-list|grep 172.29.236.x, and the neutron port-show22:41
agrebennikov_interesting... so from inside the container then are you able to ping the host and the neighbour hosts?22:42
Ermingagrebennikov_: let me try22:43
Ermingagrebennikov_: can ping, but ssh failed since publickey issue. I guess I am using the wrong user: root22:44
Ermingagrebennikov_:  ping 172.29.236.118   64 bytes from 172.29.236.118: icmp_seq=1 ttl=64 time=0.187 ms22:44
Ermingagrebennikov_: maybe should disable sec_groups?22:45
Ermingagrebennikov_: please let me know how to verify the ssh issue "Wait for ssh to be available (3 retries left)."22:46
Ermingagrebennikov_: Heh. From a hypervisor, I can ping/ssh, but not from the deployment node22:47
*** Andrew_jedi has quit IRC22:50
Ermingagrebennikov_: Ah, cannot ping containers on other hosts.22:50
Ermingagrebennikov_: only on the same host and the host itself.22:50
Ermingagrebennikov_: I didn't give a gateway of this container network on any node as when setting up br-mgmt, it had a problem in networking service.22:52
*** esberglu has quit IRC23:00
*** esberglu has joined #openstack-ansible23:01
EmilienMagrebennikov_: sup?23:01
*** esberglu_ has joined #openstack-ansible23:02
*** jamesdenton has joined #openstack-ansible23:02
*** Hosam has quit IRC23:03
agrebennikov_EmilienM, sorry, I picked the wrong username :) sorry for bugging you23:03
EmilienMagrebennikov_: no worries23:04
*** esberglu has quit IRC23:05
*** jamesden_ has joined #openstack-ansible23:06
*** esberglu_ has quit IRC23:06
*** jamesdenton has quit IRC23:07
DimGRagrebennikov_,  so , the interfaces file will only have one br0 and thats it ?23:07
agrebennikov_2 bridges and 2 phys interfaces23:07
*** sdake has quit IRC23:11
openstackgerritJimmy McCrory proposed openstack/openstack-ansible stable/newton: [WIP] Test Ansible 2.1.5.0-0.2.rc2  https://review.openstack.org/43700323:16
*** acormier_ has quit IRC23:17
*** ErmingPei has joined #openstack-ansible23:17
*** admin0 has joined #openstack-ansible23:19
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone master: Rebuild credential-key repo during keystone[0] rebuild  https://review.openstack.org/44126423:19
DimGRAnd 2 Nic cards  one on public one on private are enough for a successful deployment ?23:20
openstackgerritMerged openstack/openstack-ansible stable/mitaka: Define haproxy_ssl_bind_options variable.  https://review.openstack.org/44123823:21
DimGRagrebennikov_,  I am reading this https://github.com/openstack/openstack-ansible/blob/master/etc/network/interfaces.d/openstack_interface.cfg.prod.example    and I see for example " bond0.10 "   shouldn't the switch behind this network know about the .10 tag ?23:22
*** jamesdenton has joined #openstack-ansible23:25
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/newton: Install packages in one step  https://review.openstack.org/43925523:27
*** david-lyle_ is now known as david-lyle23:29
admin0i accidently put wrong hosts/ip on magnum-infra_hosts .. how do I corect it23:29
admin0do i manually remove from the inventory.json mapping ?23:29
agrebennikov_DimGR, you see bridges definitions? that is all you have to care about23:30
admin0i did a ./scripts/inventory-manage.py -r   and removed the magnum stuff that is listed ( containers ) but i still see the wrong mapping in the inventory.json file23:30
DimGROk thank you so I will get the second Nic23:31
DimGRI guess I can bridge a private and public network together23:31
*** agrebennikov_ has quit IRC23:35
*** marst has quit IRC23:44
*** david-lyle has quit IRC23:47
*** dimtheo_ has joined #openstack-ansible23:50
*** DimGR has quit IRC23:51
*** h5t4 has quit IRC23:52

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!