| *** vnogin has quit IRC | 00:23 | |
| *** manheim has quit IRC | 00:26 | |
| *** manheim has joined #openstack-ansible | 00:28 | |
| *** schwicht has joined #openstack-ansible | 00:39 | |
| *** acormier has joined #openstack-ansible | 00:45 | |
| *** lucasxu has joined #openstack-ansible | 00:56 | |
| *** lucasxu has quit IRC | 00:57 | |
| *** SerenaFeng has joined #openstack-ansible | 00:57 | |
| *** jamielennox is now known as jamielennox|away | 01:01 | |
| *** markvoelker has joined #openstack-ansible | 01:01 | |
| *** acormier has quit IRC | 01:05 | |
| *** acormier has joined #openstack-ansible | 01:06 | |
| *** cuongnv has joined #openstack-ansible | 01:06 | |
| *** manheim has quit IRC | 01:08 | |
| *** tonytan4ever has joined #openstack-ansible | 01:17 | |
| *** acormier has quit IRC | 01:18 | |
| *** rmelero has joined #openstack-ansible | 01:18 | |
| *** jamielennox|away is now known as jamielennox | 01:19 | |
| openstackgerrit | Mark Hamzy proposed openstack/openstack-ansible-os_molteniron master: Add example file so required files section in docs looks correct https://review.openstack.org/450039 | 01:21 |
|---|---|---|
| *** acormier has joined #openstack-ansible | 01:24 | |
| *** Mahe has quit IRC | 01:29 | |
| *** Mahe has joined #openstack-ansible | 01:33 | |
| *** dxiri has joined #openstack-ansible | 01:39 | |
| *** sanfern has quit IRC | 01:49 | |
| *** dixiaoli has joined #openstack-ansible | 01:53 | |
| *** May-meimei has quit IRC | 02:13 | |
| *** gouthamr has quit IRC | 02:16 | |
| *** acormier has quit IRC | 02:18 | |
| *** dixiaoli has quit IRC | 02:21 | |
| *** Jack_Iv has joined #openstack-ansible | 02:22 | |
| *** hw_wutianwei has joined #openstack-ansible | 02:23 | |
| *** rmelero has quit IRC | 02:24 | |
| *** rmelero has joined #openstack-ansible | 02:24 | |
| *** Jack_Iv has quit IRC | 02:27 | |
| *** rmelero has quit IRC | 02:32 | |
| *** cpuga has joined #openstack-ansible | 02:35 | |
| *** dixiaoli has joined #openstack-ansible | 02:39 | |
| *** dxiri has quit IRC | 02:49 | |
| *** dxiri has joined #openstack-ansible | 02:50 | |
| *** sanfern has joined #openstack-ansible | 02:54 | |
| *** dixiaoli has quit IRC | 03:00 | |
| *** dxiri has quit IRC | 03:00 | |
| *** dixiaoli has joined #openstack-ansible | 03:03 | |
| *** rmelero_ has joined #openstack-ansible | 03:20 | |
| *** mpotdar has quit IRC | 03:38 | |
| *** mpotdar has joined #openstack-ansible | 03:43 | |
| *** SerenaFeng has quit IRC | 03:47 | |
| *** cpuga has quit IRC | 03:49 | |
| *** dixiaoli has quit IRC | 03:52 | |
| *** cpuga has joined #openstack-ansible | 04:03 | |
| *** cpuga has quit IRC | 04:08 | |
| *** udesale has joined #openstack-ansible | 04:09 | |
| *** jamielennox is now known as jamielennox|away | 04:14 | |
| *** udesale has quit IRC | 04:17 | |
| *** udesale has joined #openstack-ansible | 04:18 | |
| *** jamielennox|away is now known as jamielennox | 04:22 | |
| *** dixiaoli has joined #openstack-ansible | 04:48 | |
| *** dixiaoli has quit IRC | 04:49 | |
| *** dixiaoli has joined #openstack-ansible | 04:50 | |
| *** dixiaoli has quit IRC | 04:52 | |
| *** hybridpollo has quit IRC | 04:53 | |
| *** jrobinson has quit IRC | 04:55 | |
| arslanq | hi guys: does openstack-ansible (OCATA) support centos based deployment? does it support 3 controller deployments? | 04:57 |
| *** jrobinson has joined #openstack-ansible | 05:04 | |
| *** japestinho has quit IRC | 05:10 | |
| *** cpuga has joined #openstack-ansible | 05:11 | |
| *** deepak_jon has joined #openstack-ansible | 05:20 | |
| *** cpuga_ has joined #openstack-ansible | 05:26 | |
| *** dixiaoli has joined #openstack-ansible | 05:29 | |
| *** cpuga has quit IRC | 05:30 | |
| *** cpuga_ has quit IRC | 05:30 | |
| *** rmelero_ has quit IRC | 05:31 | |
| *** rmelero has joined #openstack-ansible | 05:32 | |
| *** SerenaFeng has joined #openstack-ansible | 05:36 | |
| *** rmelero has quit IRC | 05:36 | |
| *** tonytan4ever has quit IRC | 05:41 | |
| *** Jack_Iv has joined #openstack-ansible | 05:53 | |
| *** deepak_jon has quit IRC | 05:56 | |
| *** NikhilS has joined #openstack-ansible | 06:02 | |
| *** Oku_OS-away is now known as Oku_OS | 06:03 | |
| *** May-meimei has joined #openstack-ansible | 06:25 | |
| *** manheim has joined #openstack-ansible | 06:37 | |
| *** pmannidi has quit IRC | 06:41 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/ocata: Retry the cirros image download https://review.openstack.org/450090 | 06:41 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/newton: Retry the cirros image download https://review.openstack.org/450091 | 06:41 |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-haproxy_server master: Add Vagrant support for openSUSE Leap 42.1 https://review.openstack.org/450095 | 06:49 |
| *** pmannidi has joined #openstack-ansible | 06:54 | |
| *** Jack_Iv has quit IRC | 06:56 | |
| odyssey4me | arslanq centos support is intended for ocata, but we're still working through the details of it - when it all works it will support exactly the same deployment as our ubuntu support | 07:03 |
| odyssey4me | it's intended for experimental use in Ocata, but I'd suggest waiting until the next release is out before trying it seriously | 07:04 |
| *** fxpester has joined #openstack-ansible | 07:06 | |
| *** SerenaFeng has quit IRC | 07:08 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_aodh master: Add a release note https://review.openstack.org/449864 | 07:17 |
| *** jrobinson has quit IRC | 07:19 | |
| *** pcaruana has joined #openstack-ansible | 07:20 | |
| *** japestinho has joined #openstack-ansible | 07:32 | |
| *** manheim has quit IRC | 07:34 | |
| *** chas has joined #openstack-ansible | 07:41 | |
| *** tonytan4ever has joined #openstack-ansible | 07:41 | |
| *** pmannidi has quit IRC | 07:52 | |
| arslanq | odyssey4me: | 07:53 |
| arslanq | odyssey4me: openstack-ocata is not released as yet? if not then what is the expected date for it? | 07:54 |
| *** manheim has joined #openstack-ansible | 07:56 | |
| odyssey4me | arslanq it is released, but the centos build isn't completely working right now - there are a bunch of merged patches which need a sha bump to get them incorporated into the release | 07:57 |
| odyssey4me | the sha bump will happen at the end of this week, and hopefully that will include fixes for most, if not all, the outstanding issues we've found for CentOS | 07:57 |
| arslanq | odyssey4me: Thanks | 07:57 |
| arslanq | if i want to try on centos i can or these issues are blocker ? | 07:58 |
| *** dixiaoli has quit IRC | 07:59 | |
| odyssey4me | arslanq I haven't checked within the last few days, but if you want to try I would suggest using a disposable AIO to try with. There is a vagrantfile which you can use in stable/ocata | 08:01 |
| arslanq | odyssey4me: ok fine, could you please send me the link for issues on which work is being done | 08:01 |
| odyssey4me | I'll kick one off with that now and see whether we've got all the patches merged and can simply do some role SHA bumps to resolve the integrated buid | 08:02 |
| *** foutatoro has joined #openstack-ansible | 08:02 | |
| odyssey4me | arslanq I don't know whether there is such a link. The work is being handled by mgariepy and mhayden at this stage. | 08:02 |
| *** dixiaoli has joined #openstack-ansible | 08:05 | |
| arslanq | odyssey4me: ok thanks | 08:05 |
| *** dixiaoli has quit IRC | 08:07 | |
| *** dixiaoli has joined #openstack-ansible | 08:08 | |
| *** dixiaoli has quit IRC | 08:08 | |
| *** karimb has joined #openstack-ansible | 08:09 | |
| *** dixiaoli has joined #openstack-ansible | 08:16 | |
| *** fabg has joined #openstack-ansible | 08:18 | |
| fabg | morning OSA | 08:19 |
| fabg | odyssey4me: hi, i solved my issue on https://bugs.launchpad.net/openstack-ansible/+bug/1670632 | 08:19 |
| openstack | Launchpad bug 1670632 in openstack-ansible "ceilometer error because gnocchiclient > 3.0 for stable/newton " [Undecided,New] - Assigned to Jesse Pretorius (jesse-pretorius) | 08:19 |
| fabg | add an extra upper constraint to install gnocchiclient < 3.0 | 08:20 |
| odyssey4me | I see that, thanks for providing a workaround in the bug :) | 08:23 |
| fabg | I was on stable/newton. I wait the 14.1.2 release to go on but i imagine finding the same issue. But now, i know how to solve it ;-) | 08:25 |
| *** manheim has quit IRC | 08:26 | |
| odyssey4me | fabg yeah, unfortunately the telemetry tooling does not follow the global requirements process, so it makes it hard for us | 08:27 |
| *** manheim has joined #openstack-ansible | 08:27 | |
| fabg | odyssey4me: I filed a new bug (related to ceilometer too), https://bugs.launchpad.net/openstack-ansible/+bug/1675804. Exist a fix too… :) | 08:29 |
| openstack | Launchpad bug 1675804 in openstack-ansible "Newton: oslo.messaging Bad address when CONFIG_AMQP_ENABLE_SSL=y" [Undecided,New] | 08:29 |
| fabg | oddysey4me: happy now to have ceilometer/gnocchi functionnal. | 08:31 |
| eki__ | anyone have some tips how to get external connectivity working on aio build (mitaka) with vxlan? Have been trying different things and currently resetting my setup completly. | 08:31 |
| *** manheim has quit IRC | 08:32 | |
| odyssey4me | eki__ from an instance out to the internet, or from an outside source to the instance? | 08:32 |
| eki__ | if possible both | 08:32 |
| odyssey4me | not sure if that's possible | 08:32 |
| odyssey4me | inside out should just work | 08:32 |
| eki__ | there is not networks setup so I am most likely doing something wrong there | 08:33 |
| *** openstackgerrit has quit IRC | 08:33 | |
| odyssey4me | outside in would require you having a floating ip assigned that's routable from outside to your neutron agent container, which the AIO does not do by default | 08:33 |
| eki__ | I mean once the playbook is done | 08:33 |
| odyssey4me | the AIO is a development and testing tool, not really meant for being used for anything outside of that | 08:34 |
| eki__ | so connecting from the AIO host to instance by ssh is not possible by default | 08:35 |
| eki__ | or from external | 08:35 |
| odyssey4me | Well, I personally don't know how to make it work if it is possible. | 08:36 |
| eki__ | hmm ok well first I will have to figure out how to get connectivity to internet | 08:36 |
| eki__ | from instance to internet | 08:36 |
| eki__ | which should work by default? | 08:37 |
| odyssey4me | that should just work, assuming that your host has internet connectivity | 08:37 |
| odyssey4me | that said, I've not tried it in ages | 08:37 |
| eki__ | how should the network + router etc be setup? | 08:37 |
| odyssey4me | if you run the tempest install playbook it will setup a demo project with the right stuff | 08:38 |
| eki__ | hmmm have to look to taht | 08:39 |
| *** Jack_Iv has joined #openstack-ansible | 08:39 | |
| *** manheim has joined #openstack-ansible | 08:39 | |
| *** tonytan4ever has quit IRC | 08:42 | |
| *** chas has quit IRC | 08:44 | |
| eki__ | as far as I can tell I will simply run the run-tempest.sh after running the bootstrap-aio.sh | 08:47 |
| eki__ | will give that a go | 08:47 |
| odyssey4me | eki__ nope, run playbooks/os-tempest-install.yml | 08:47 |
| eki__ | after or only | 08:48 |
| odyssey4me | the shell script is just a wrapper around that and will be removed | 08:48 |
| odyssey4me | only | 08:48 |
| eki__ | ok thanks | 08:48 |
| eki__ | but yeah odyssey4me this is getting way over my head so having someone to point in some direction helps a lot | 08:49 |
| eki__ | been hitting my head against a wall for bit | 08:49 |
| odyssey4me | eki__ the playbooks to make things happen are all in playbooks/ | 08:49 |
| *** vnogin has joined #openstack-ansible | 08:50 | |
| *** vnogin has quit IRC | 08:55 | |
| *** vnogin has joined #openstack-ansible | 09:02 | |
| *** fabg has quit IRC | 09:03 | |
| *** fabg has joined #openstack-ansible | 09:05 | |
| *** gaudenz has quit IRC | 09:07 | |
| foutatoro | Hi all, I'm trying to reintall AOI to include magnum, after following https://docs.openstack.org/developer/openstack-ansible/developer-docs/quickstart-aio.html#rebuilding-an-aio | 09:07 |
| *** gaudenz has joined #openstack-ansible | 09:07 | |
| foutatoro | to rebuild openstack but I got this error http://paste.openstack.org/show/604268/ since yesterday. | 09:07 |
| odyssey4me | foutatoro you could just add magnum on an existing AIO | 09:07 |
| odyssey4me | but I guess it's too late now | 09:07 |
| foutatoro | oddyssey4me: how could i do that , | 09:08 |
| odyssey4me | foutatoro it seems pretty clear to me that the cache prep is unable to fetch apt sources due to a 503 error | 09:08 |
| odyssey4me | foutatoro as specified in https://docs.openstack.org/developer/openstack-ansible/developer-docs/quickstart-aio.html#building-an-aio | 09:08 |
| *** deepak_jon has joined #openstack-ansible | 09:08 | |
| *** SerenaFeng has joined #openstack-ansible | 09:08 | |
| odyssey4me | To add OpenStack Services over and above the bootstrap-aio default services for the applicable scenario, copy the conf.d files with the .aio file extension into /etc/openstack_deploy and rename then to .yml files. | 09:08 |
| odyssey4me | then execute the applicable playbooks | 09:09 |
| foutatoro | odysse4me: yes of course but "apt-get " works fine in my server | 09:09 |
| foutatoro | I don't have any dns issue. | 09:09 |
| *** pbandark has joined #openstack-ansible | 09:10 | |
| odyssey4me | foutatoro it's inside the chroot that's not able to route through your host on the lxc bridge | 09:10 |
| *** retreved has joined #openstack-ansible | 09:13 | |
| *** Jack_Iv has quit IRC | 09:17 | |
| *** openstackgerrit has joined #openstack-ansible | 09:17 | |
| openstackgerrit | Alexandra Settle proposed openstack/openstack-ansible master: [DOCS] Add checklist item for ceph_stable_release https://review.openstack.org/449195 | 09:17 |
| *** Jack_Iv has joined #openstack-ansible | 09:17 | |
| *** dixiaoli has quit IRC | 09:18 | |
| *** dixiaoli has joined #openstack-ansible | 09:19 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: [DOCS] Add checklist item for ceph_stable_release https://review.openstack.org/449195 | 09:20 |
| openstackgerrit | Merged openstack/openstack-ansible-os_molteniron master: Add example file so required files section in docs looks correct https://review.openstack.org/450039 | 09:20 |
| *** Jack_Iv has quit IRC | 09:21 | |
| *** udesale__ has joined #openstack-ansible | 09:28 | |
| *** udesale has quit IRC | 09:28 | |
| *** Jack_Iv has joined #openstack-ansible | 09:35 | |
| *** udesale__ has quit IRC | 09:36 | |
| *** udesale has joined #openstack-ansible | 09:36 | |
| foutatoro | odyssey4me: I solve the issue after attaching to the LXC_NAME container then rm /etc/apt/apt.conf.d/00apt-cacher-proxy | 09:43 |
| *** chas has joined #openstack-ansible | 09:44 | |
| odyssey4me | foutatoro ah, that means that file is on the host, but you should have removed it before rebuilding | 09:46 |
| foutatoro | oddyssey4me: as said by the tuto I revmoved that file from my host | 09:47 |
| *** dalees has quit IRC | 09:47 | |
| foutatoro | I was surprised to find it in LXC_NAME | 09:47 |
| *** chas has quit IRC | 09:49 | |
| pjm6 | good morning OSA | 09:54 |
| *** pbandark is now known as pbandark`brb | 09:55 | |
| *** SerenaFeng has quit IRC | 09:56 | |
| *** Jack_Iv has quit IRC | 09:56 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-pip_install stable/ocata: RDO repo package name changed https://review.openstack.org/450147 | 09:57 |
| asmaa | Hi, After creating a new container, it was generated without IP address on eth0 | 09:57 |
| asmaa | any idea why ? | 09:57 |
| *** pbandark`brb has quit IRC | 09:59 | |
| *** Jack_Iv has joined #openstack-ansible | 09:59 | |
| andymccr | asmaa: how did you create the new container? | 10:00 |
| asmaa | I used the playbook of ceph. this one generated three containers, only one of them has this problem | 10:02 |
| asmaa | each container on a different node | 10:04 |
| *** dixiaoli has quit IRC | 10:06 | |
| *** manheim has quit IRC | 10:10 | |
| *** electrofelix has joined #openstack-ansible | 10:11 | |
| *** dixiaoli has joined #openstack-ansible | 10:11 | |
| openstackgerrit | Merged openstack/openstack-ansible master: Fix pip_links for LB terminated SSL environments https://review.openstack.org/449823 | 10:13 |
| openstackgerrit | Merged openstack/openstack-ansible master: [DOCS] Add checklist item for ceph_stable_release https://review.openstack.org/449195 | 10:13 |
| andymccr | asmaa: do other containers on that host have eth0 addresses? eth0 is usually the lxbr0 interface (from the hosts) | 10:14 |
| pjm6 | asmaa: are you using Ubuntu 16.04? | 10:14 |
| asmaa | andymccr yes, containers from the first launch are having IPs on this node, but after rebooting the nodes and creating the new container, this issue appeared. | 10:17 |
| asmaa | pjm6 yes, it's Ubuntu 16.04 | 10:18 |
| foutatoro | asmaa: try these commands after rebooting /usr/local/bin/lxc-system-manage iptables-create /usr/local/bin/lxc-system-manage dnsmasq-start || true | 10:18 |
| odyssey4me | andymccr I'm not convinced that https://review.openstack.org/450147 is a good idea. mhayden has an alternative patch in, but has marked it WIP... also I'm busy running an ocata build and it seems to be going ok without that change. I think the current package URL is a pseudo URL which downloads the latest package.... what made you look to change it? | 10:19 |
| asmaa | foutatoro i'll reboot and apply these cmds, thanks all | 10:20 |
| pjm6 | asmaa: do what foutatoro said | 10:20 |
| pjm6 | I have that problem too, it seems a concurrency problem when lxcbr0 goes up, for some reason that commands appear not being working | 10:21 |
| pjm6 | at least in my case and other happen | 10:21 |
| *** udesale has quit IRC | 10:31 | |
| *** electrofelix has quit IRC | 10:35 | |
| andymccr | odyssey4me: that makes sense except that that link isnt working in ocata gating (cinder for example is failing consistently on that) | 10:36 |
| andymccr | happy with whatever the best solution is, but we need to come up with a definitive solution that actually works consistently rather than a mishmash that seems to fail on a weekly basis | 10:36 |
| andymccr | bbiab! | 10:37 |
| odyssey4me | yeah, odd though because it appears to be working in an integrated build for me | 10:37 |
| *** deadnull has quit IRC | 10:37 | |
| *** dixiaoli has quit IRC | 10:37 | |
| *** domi007 has joined #openstack-ansible | 10:38 | |
| *** cuongnv has quit IRC | 10:38 | |
| *** dixiaoli has joined #openstack-ansible | 10:38 | |
| domi007 | hi all, I'm trying to get stable/newton working but for some reason the requirements.txt is wrong so while installing the repo-container it fails on me | 10:38 |
| domi007 | It tries to copy to tmp a repository that wasn't cloned (skipped by ansible) | 10:39 |
| *** tonytan4ever has joined #openstack-ansible | 10:42 | |
| domi007 | It seems like a bug in the template requirements.txt.j2 in repo_build rola | 10:42 |
| domi007 | *role | 10:42 |
| *** manheim has joined #openstack-ansible | 10:45 | |
| domi007 | it tries to use nova_lxd | 10:45 |
| *** fabg has quit IRC | 10:45 | |
| asmaa | foutatoro pjm6, this is working for me, thank you. | 10:46 |
| *** manheim has quit IRC | 10:46 | |
| pjm6 | asmaa: nice | 10:47 |
| pjm6 | when you reboot your host, remember to execute that | 10:47 |
| pjm6 | until problem be solved | 10:47 |
| pjm6 | odyssey4me: andymccr is there a way to update nova to 15.1.0 without breaking other OS components ? | 10:48 |
| pjm6 | If I update only the SHA Bump or its better to wait for OSA 15.1.0 ? | 10:49 |
| hwoarang | odyssey4me: re https://review.openstack.org/#/c/450095/ is there any chance to have some stale .tox directory in your openstack-ansible-haproxy_server repo? | 10:50 |
| hwoarang | could you remove the .tox directory and try again? :-/ | 10:50 |
| domi007 | is there any way to tell nova to install without any compute nodes? | 10:55 |
| *** sanfern has quit IRC | 10:56 | |
| *** smatzek has joined #openstack-ansible | 10:58 | |
| *** electrofelix has joined #openstack-ansible | 11:00 | |
| *** manheim has joined #openstack-ansible | 11:01 | |
| *** dixiaoli has quit IRC | 11:06 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-plugins master: Add list of packages to install lookup https://review.openstack.org/449274 | 11:10 |
| evrardjp | what is this dell ironic CI everywhere? | 11:10 |
| odyssey4me | hwoarang yeah I can try that | 11:11 |
| odyssey4me | it is possible | 11:11 |
| hwoarang | i guess it wouldn't hurt to do an rm -rf .tox in the run_tests.sh script | 11:12 |
| *** dalees has joined #openstack-ansible | 11:15 | |
| odyssey4me | yeah, that's not a bad idea | 11:15 |
| *** stuartgr has joined #openstack-ansible | 11:18 | |
| *** dixiaoli_ has joined #openstack-ansible | 11:25 | |
| *** coolkil has joined #openstack-ansible | 11:25 | |
| odyssey4me | evrardjp it's a badly configured external CI which is not filtering the repo correctly | 11:26 |
| *** coolkil has left #openstack-ansible | 11:27 | |
| *** coolkil has joined #openstack-ansible | 11:33 | |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-haproxy_server master: Add Vagrant support for openSUSE Leap 42.1 https://review.openstack.org/450095 | 11:36 |
| *** Jack_Iv has quit IRC | 11:36 | |
| pjm6 | the rsyslog container should have all the logs in /var/log/log-storage | 11:38 |
| pjm6 | right/ | 11:38 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-plugins master: Add Packages file parsing lookup https://review.openstack.org/449267 | 11:41 |
| evrardjp | odyssey4me: ^ now with tests \o/ I think it's production ready and should be backported :p | 11:42 |
| *** tonytan4ever has quit IRC | 11:42 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-plugins master: Add Packages file parsing lookup https://review.openstack.org/449267 | 11:42 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-plugins master: Add Packages file parsing lookup https://review.openstack.org/449267 | 11:44 |
| *** dixiaoli_ has quit IRC | 11:44 | |
| pjm6 | well i just restarted rsyslog service and it's working now | 11:44 |
| *** thorst has joined #openstack-ansible | 11:45 | |
| *** dixiaoli has joined #openstack-ansible | 11:48 | |
| coolkil | I want to install Openstack on an IBM Linux one using Openstack-Ansible. this fails because during the lxc-create gets a blank --architecture input. I wanted to test if I could fix this localy first but I cant find the location to add this variable | 11:51 |
| coolkil | can anybody help me? | 11:51 |
| *** manheim has quit IRC | 11:52 | |
| odyssey4me | coolkil what architecture is it? | 11:53 |
| coolkil | s390x | 11:53 |
| odyssey4me | heh, that's a first | 11:53 |
| *** fabg has joined #openstack-ansible | 11:54 | |
| coolkil | I know think it should be added here. wanted to test localy first but cant find the same file https://github.com/openstack/openstack-ansible-lxc_container_create/blob/master/defaults/main.yml | 11:54 |
| odyssey4me | assuming that ansible is able to detect the architecture at all, you'll have to add a mapping to https://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/defaults/main.yml#L30-L33 | 11:55 |
| odyssey4me | and to https://github.com/openstack/openstack-ansible-lxc_container_create/blob/master/defaults/main.yml#L50-L53 | 11:55 |
| odyssey4me | I don't think there's anywhere else that it's needed. | 11:55 |
| odyssey4me | but you may find that mapping elsewhere too | 11:56 |
| *** Jack_Iv has joined #openstack-ansible | 11:56 | |
| odyssey4me | according to http://codesearch.openstack.org/?q=lxc_architecture_mapping&i=nope&files=&repos= that's it | 11:56 |
| *** sanfern has joined #openstack-ansible | 11:57 | |
| odyssey4me | there may be some other surprises which you encounter on the way | 11:58 |
| coolkil | probably but someone has to be the first to test something like this rightXD | 11:58 |
| mgariepy | morning everyone | 12:06 |
| mhayden | odyssey4me / andymccr: the RDO issue is a weird one | 12:08 |
| mhayden | we require package signing (thanks to the security role) for local packages, which breaks the install of RDO via wget (since that pkg isn't signed) | 12:08 |
| mhayden | however, CentOS Extras repo has the RDO repo packages available to install with yum (as we do for EPEL) | 12:09 |
| *** manheim has joined #openstack-ansible | 12:17 | |
| mgariepy | mhayden, centos pkg pulls ceph as well. | 12:17 |
| mgariepy | rdo only pulls rdo + qemu-ev | 12:17 |
| mgariepy | both points to the same servers tho. | 12:18 |
| mhayden | we could only install those two repo packages if we want to | 12:18 |
| mgariepy | maybe we should manage repos | 12:18 |
| mhayden | the main repo pkg installs all 4 | 12:18 |
| mhayden | but we could pick and choose from those 4 without installing the big metapackage | 12:18 |
| *** dixiaoli has quit IRC | 12:18 | |
| mgariepy | http://www.rpmfind.net/linux/RPM/centos/extras/7.3.1611/x86_64/Packages/centos-release-openstack-ocata-1-1.el7.noarch.html | 12:19 |
| mgariepy | the repo is in that package directly, it's not a meta package | 12:20 |
| *** askb has quit IRC | 12:20 | |
| *** gouthamr has joined #openstack-ansible | 12:21 | |
| mhayden | well darn | 12:22 |
| mhayden | perhaps we ought to just use yum_repository then :/ | 12:22 |
| mgariepy | can't we skip pkg sign for the one package ? | 12:22 |
| *** schwicht has joined #openstack-ansible | 12:24 | |
| mhayden | we could | 12:27 |
| mhayden | mgariepy: but if we're doing that, i'd rather config the repo using yum_repository ;) | 12:29 |
| mgariepy | good point. | 12:29 |
| *** lostRhino has joined #openstack-ansible | 12:32 | |
| *** Disova_ has quit IRC | 12:33 | |
| *** Disova has joined #openstack-ansible | 12:34 | |
| mhayden | my current patches are here -> https://review.openstack.org/#/q/topic:use-centos-rdo-pkg | 12:34 |
| mhayden | mgariepy: could we install the built-in centos pkg and remove the ceph repo pkg? | 12:34 |
| mgariepy | mhayden, but if we're doing that, i'd rather config the repo using yum_repository ;) | 12:35 |
| mhayden | you make a good point :P | 12:35 |
| mgariepy | haha | 12:35 |
| mgariepy | installing to remove is kinda bad IMO :) | 12:36 |
| mhayden | okay, i'll go fix up my patches | 12:37 |
| mhayden | ^^ | 12:37 |
| mhayden | andymccr: ^^ | 12:37 |
| *** fabg has quit IRC | 12:38 | |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-haproxy_server master: Add Vagrant support for openSUSE Leap 42.1 https://review.openstack.org/450095 | 12:41 |
| mhayden | mgariepy: would you be opposed to using the *.repo files from the rdo-release.rpm file directly? | 12:41 |
| mhayden | rather than yum_repository? | 12:42 |
| mgariepy | not really | 12:42 |
| mhayden | we could make them templated | 12:42 |
| mhayden | and could set the priority right there in the repo file | 12:42 |
| andymccr | cool cool :) | 12:43 |
| *** klamath has joined #openstack-ansible | 12:44 | |
| mgariepy | if we use yum_repository we cna set the priority as well. | 12:44 |
| mhayden | good points | 12:44 |
| mhayden | now i'm back to considering installing the rdo-release.rpm file w/o GPG checks | 12:45 |
| mhayden | :P | 12:45 |
| *** tonytan4ever has joined #openstack-ansible | 12:45 | |
| mgariepy | lol | 12:45 |
| mhayden | computers are terrible | 12:45 |
| mgariepy | does rdo-release repo changes overtime ? | 12:46 |
| mgariepy | when installing pike we will need: remove rdo-o install rdo-p | 12:46 |
| *** markvoelker has quit IRC | 12:47 | |
| mhayden | that is true | 12:47 |
| mgariepy | will using the pkg allow us to update it ? | 12:47 |
| mgariepy | might be easier to maintain on the long run. | 12:48 |
| *** tonytan4ever has quit IRC | 12:48 | |
| mhayden | yeah, using the pkg should be the cleanest route | 12:48 |
| mhayden | ensures we're matching what upstream is doing (if they make changes) | 12:49 |
| mgariepy | yeah but we need to be able to update it. | 12:49 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-openstack_hosts master: Use built-in CentOS RDO package https://review.openstack.org/449788 | 12:50 |
| mhayden | mgariepy: see how that looks ^^ | 12:50 |
| mhayden | well commit message needs an update | 12:50 |
| mgariepy | lgtm | 12:51 |
| mgariepy | beside the commit msg | 12:51 |
| andymccr | as an fyi i put the patch in to promote the upgrade jobs for cinder/nova/neutron to voting :) | 12:51 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-openstack_hosts master: Install RDO release RPM without GPG checks https://review.openstack.org/449788 | 12:52 |
| mhayden | mgariepy: ^^ check the commit msg there | 12:52 |
| mhayden | andymccr: nifty! | 12:52 |
| mgariepy | mhayden, perfect :D\ | 12:55 |
| mhayden | yay | 12:55 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-haproxy_server stable/ocata: Add additional check for SElinux https://review.openstack.org/450201 | 12:56 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-pip_install master: Install RDO release RPM without GPG checks https://review.openstack.org/449795 | 12:57 |
| andymccr | oh on that note - the one cinder upgrade fix job for ocata needs another review: https://review.openstack.org/#/c/448161/ - thought they'd all gone through but i missed one that is still in flight :) | 12:59 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-tests master: Install RDO release RPM without GPG checks https://review.openstack.org/449796 | 12:59 |
| mgariepy | andymccr, done | 13:00 |
| mhayden | andymccr: https://review.openstack.org/#/q/topic:install-rdo-without-gpgcheck | 13:00 |
| andymccr | grazie :) | 13:00 |
| andymccr | mhayden: mgariepy: thanks for sorting out the repo stuff! | 13:00 |
| mgariepy | you're welcome | 13:01 |
| mgariepy | i really want it to work. ! | 13:01 |
| mgariepy | mhayden, we don't need it for lxc-hosts ? | 13:03 |
| mhayden | mgariepy: is the caching step affected? | 13:03 |
| mgariepy | not sure, isn't the yum config pulled from the hosts in the chroot ? | 13:04 |
| mhayden | ah, that's a good point | 13:04 |
| mhayden | i'll fix that one up as well | 13:05 |
| *** coolkil has left #openstack-ansible | 13:08 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-lxc_hosts master: Install RDO release RPM without GPG checks https://review.openstack.org/450206 | 13:09 |
| *** woodard has joined #openstack-ansible | 13:11 | |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts master: Install RDO release RPM without GPG checks https://review.openstack.org/449788 | 13:13 |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-openstack_openrc master: meta: Add CentOS and openSUSE as supported distributions https://review.openstack.org/450210 | 13:13 |
| openstackgerrit | Merged openstack/openstack-ansible-pip_install master: Install RDO release RPM without GPG checks https://review.openstack.org/449795 | 13:14 |
| *** manheim has quit IRC | 13:18 | |
| mhayden | hwoarang: i left some comments around your run_tests changes | 13:21 |
| mhayden | can we get run_tests.sh/bindep.txt updated in one repo and then push the same changes to all repos? | 13:22 |
| hwoarang | mhayden: i thought of the same thing... maybe openstack-ansible-tests repo? | 13:22 |
| mhayden | hwoarang: possibly -- just pick one repo, get it looking good, we can merge it, then you can blast out that change to all of the OSA repos | 13:22 |
| mhayden | that way we keep them all synchronized | 13:23 |
| hwoarang | yeah definitely | 13:23 |
| mhayden | as a side note, your run_tests.sh looks fine at first glance -- haven't tested it on SUSE yet | 13:23 |
| hwoarang | the Vagrantfile may also be placed into a central repo | 13:23 |
| *** fabg has joined #openstack-ansible | 13:28 | |
| *** fabg has quit IRC | 13:29 | |
| *** cjloader_ has joined #openstack-ansible | 13:31 | |
| *** manheim has joined #openstack-ansible | 13:31 | |
| *** tonytan4ever has joined #openstack-ansible | 13:31 | |
| odyssey4me | hwoarang I don't think it'll be possible to use the run_tests.sh from openstack-ansible-tests because run_tests needs to actually implement the packages needed to get tox going and such | 13:32 |
| odyssey4me | ie it's pre-everything and we can't assume that git will be present either | 13:32 |
| hwoarang | hmm ... | 13:33 |
| *** foutatoro has quit IRC | 13:34 | |
| *** woodard has quit IRC | 13:35 | |
| *** cathrich_ has joined #openstack-ansible | 13:35 | |
| odyssey4me | also, the vagrantfile is not always the same - many are, but some are not | 13:35 |
| *** rmelero has joined #openstack-ansible | 13:36 | |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts master: Install RDO release RPM without GPG checks https://review.openstack.org/450206 | 13:36 |
| odyssey4me | centralising those will also take away the ability to simply 'vagrant up' | 13:36 |
| *** gouthamr_ has joined #openstack-ansible | 13:36 | |
| cloudnull | mornings | 13:36 |
| *** gouthamr has quit IRC | 13:36 | |
| pjm6 | cloudnull: o/ | 13:37 |
| odyssey4me | so yeah, unfortunately duplication is needed there - we may be able to reduce it a bit, but I can't see us eliminating it | 13:37 |
| cloudnull | o/ | 13:37 |
| *** cathrichardson has quit IRC | 13:38 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Update role SHA's to get CentOS working https://review.openstack.org/450224 | 13:38 |
| odyssey4me | andymccr mhayden mgagne note that with ^ I managed to get a full pass for CentOS using the Vagrantfile | 13:39 |
| hwoarang | odyssey4me: i see. so far all the vagrant files are more or less the same. I was basically thinking of fixing everything in openstack-ansible-tests and then make that repo a submodule for the rest of the repos. but that of course implies that git is available. | 13:39 |
| odyssey4me | sc` ^ see note about my patch above | 13:40 |
| pjm6 | i don't remember but someone else in this channel had problems using VNC console to access instances | 13:40 |
| odyssey4me | hwoarang a submodule would also force us to regularly update it due to the fixed SHA | 13:40 |
| pjm6 | I fix it by just restart the nova-consoleauth and nova-spice5html services | 13:40 |
| odyssey4me | so we'd still have to do a bunch of patches regardless | 13:41 |
| hwoarang | right | 13:41 |
| odyssey4me | currently we do https://github.com/openstack/openstack-ansible-haproxy_server/blob/master/tox.ini#L56-L60 | 13:41 |
| odyssey4me | it works as a way to easily get the current head into a known location | 13:41 |
| odyssey4me | for stable branches we make that branch specific | 13:42 |
| odyssey4me | eg https://github.com/openstack/openstack-ansible-haproxy_server/blob/stable/ocata/tox.ini#L59 | 13:42 |
| *** fabg has joined #openstack-ansible | 13:42 | |
| hwoarang | yes but this does not seem to help much in that case | 13:42 |
| odyssey4me | so to make a common run_tests script we could possibly have a basic wrapper in-repo which then executes a shared script | 13:42 |
| odyssey4me | if the wrapper in repo is very basic, then it will never need updating | 13:43 |
| odyssey4me | I don't know if it'd be possible to do something similar with a vagrantfile - have an in-repo wrapper, but source details from a shared repo | 13:44 |
| odyssey4me | it it is, then I'm game for that | 13:44 |
| sc` | if only there were something likr chef-provisioning :D | 13:45 |
| openstackgerrit | Merged openstack/openstack-ansible-os_cinder stable/ocata: Fix Cinder upgrade jobs https://review.openstack.org/448161 | 13:47 |
| *** rmelero has quit IRC | 13:49 | |
| *** rmelero has joined #openstack-ansible | 13:49 | |
| cloudnull | chef-metal FTW ! | 13:49 |
| * cloudnull loves him some chef | 13:50 | |
| *** rmelero has quit IRC | 13:54 | |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-tests master: vagrant: Add openSUSE Leap 42.1 https://review.openstack.org/450239 | 13:54 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_nova master: Use the cinderv3 endpoint by default https://review.openstack.org/446508 | 13:54 |
| *** esberglu has joined #openstack-ansible | 13:57 | |
| *** esberglu_ has joined #openstack-ansible | 14:00 | |
| *** markvoelker has joined #openstack-ansible | 14:00 | |
| *** SerenaFeng has joined #openstack-ansible | 14:01 | |
| *** agrebennikov has joined #openstack-ansible | 14:01 | |
| *** esberglu has quit IRC | 14:02 | |
| *** rmelero has joined #openstack-ansible | 14:03 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova stable/ocata: Search for whole equivalence for SElinux https://review.openstack.org/449917 | 14:05 |
| openstackgerrit | Merged openstack/openstack-ansible-rsyslog_client master: Fix mutiple restart of rsyslog daemon https://review.openstack.org/449966 | 14:06 |
| *** rmelero has quit IRC | 14:07 | |
| *** rmelero has joined #openstack-ansible | 14:09 | |
| *** rmelero has quit IRC | 14:09 | |
| *** rmelero has joined #openstack-ansible | 14:09 | |
| pjm6 | the nova_console_ssl* don't work with spice ? | 14:13 |
| *** rmelero has quit IRC | 14:14 | |
| *** rmelero has joined #openstack-ansible | 14:15 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible stable/ocata: Fix pip_links for LB terminated SSL environments https://review.openstack.org/450257 | 14:17 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible stable/newton: Fix pip_links for LB terminated SSL environments https://review.openstack.org/450258 | 14:17 |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible stable/newton: Bump Keepalived https://review.openstack.org/449305 | 14:19 |
| *** rmelero has quit IRC | 14:19 | |
| *** rmelero has joined #openstack-ansible | 14:20 | |
| *** manheim has quit IRC | 14:21 | |
| *** woodard has joined #openstack-ansible | 14:21 | |
| *** deepak_jon has quit IRC | 14:22 | |
| *** manheim has joined #openstack-ansible | 14:24 | |
| *** acormier has joined #openstack-ansible | 14:24 | |
| odyssey4me | hwoarang instead of the 'which <package installer>' perhaps we should just source /etc/os-release and use a case statement - it'll be simpler and more readable | 14:29 |
| odyssey4me | also, I'd rather see run_tests.sh use the same mechanism as tox (ie git clone the tests repo) so that it's easier to be familiar with | 14:30 |
| *** marst has quit IRC | 14:30 | |
| *** NikhilS has quit IRC | 14:31 | |
| *** NikhilS has joined #openstack-ansible | 14:31 | |
| tonytan4ever | evrardjp: ping | 14:31 |
| *** NikhilS has quit IRC | 14:31 | |
| *** NikhilS has joined #openstack-ansible | 14:31 | |
| evrardjp | pong | 14:33 |
| *** rmelero has quit IRC | 14:35 | |
| *** cmart has joined #openstack-ansible | 14:35 | |
| *** rmelero has joined #openstack-ansible | 14:35 | |
| *** dr_dolphm is now known as dolphm | 14:37 | |
| *** manheim has quit IRC | 14:38 | |
| *** rmelero has quit IRC | 14:40 | |
| *** shashank_t_ has joined #openstack-ansible | 14:42 | |
| *** phalmos has joined #openstack-ansible | 14:43 | |
| *** marst has joined #openstack-ansible | 14:44 | |
| *** kstev has joined #openstack-ansible | 14:45 | |
| hwoarang | odyssey4me: something like this? http://paste.opensuse.org/1525874 | 14:48 |
| hwoarang | (not tested just trying to get the main idea straight) | 14:49 |
| *** fxpester has quit IRC | 14:49 | |
| *** furlongm has quit IRC | 14:50 | |
| *** Jack_Iv has quit IRC | 14:50 | |
| odyssey4me | hwoarang yeah, although I think the package names might need to vary based on distribution | 14:51 |
| *** Jack_Iv has joined #openstack-ansible | 14:51 | |
| hwoarang | yeah | 14:52 |
| odyssey4me | but otherwise that looks pretty good - with that content in run_tests.sh though | 14:52 |
| *** Jack_Iv has quit IRC | 14:52 | |
| odyssey4me | then whatever we have in the common repo - I guess the bindep and other things should be executed in the sared script | 14:52 |
| odyssey4me | *shared | 14:52 |
| hwoarang | i was thining the shared scirpt to be run_tests.sh in the -tests repo and the in-repo script to be run_vagrant_tests.sh or whatever | 14:53 |
| hwoarang | and run_vagrant_tests.sh will have whatever i pasted above | 14:53 |
| odyssey4me | the whole idea is that run_tests.sh in repo should be a one stop spot for executing the tests on your temp host | 14:54 |
| odyssey4me | it's not vagrant specific | 14:54 |
| *** udesale has joined #openstack-ansible | 14:54 | |
| hwoarang | ok | 14:54 |
| hwoarang | no problem | 14:54 |
| *** woodard has quit IRC | 14:57 | |
| *** rmelero has joined #openstack-ansible | 14:57 | |
| *** woodard has joined #openstack-ansible | 14:57 | |
| *** rmelero has quit IRC | 15:02 | |
| odyssey4me | hwoarang your script-fu is strong :) | 15:03 |
| openstackgerrit | Merged openstack/openstack-ansible-haproxy_server master: Add Vagrant support for openSUSE Leap 42.1 https://review.openstack.org/450095 | 15:04 |
| *** marst has quit IRC | 15:04 | |
| palendae | Argh, https://review.openstack.org/#/c/449787/ still unmerged | 15:04 |
| *** NikhilS has quit IRC | 15:06 | |
| *** tonytan_brb has joined #openstack-ansible | 15:06 | |
| *** tonytan4ever has quit IRC | 15:07 | |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible-os_cinder master: Adjust cinder init restart times, provide variable https://review.openstack.org/448777 | 15:09 |
| openstackgerrit | Merged openstack/openstack-ansible-tests master: Install RDO release RPM without GPG checks https://review.openstack.org/449796 | 15:09 |
| *** NikhilS has joined #openstack-ansible | 15:10 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_cinder stable/ocata: Add support for cinder v3 api https://review.openstack.org/448659 | 15:10 |
| *** dxiri has joined #openstack-ansible | 15:11 | |
| *** rmelero has joined #openstack-ansible | 15:11 | |
| *** NikhilS has quit IRC | 15:11 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_cinder stable/newton: Add git to stable/ocata Trusty installs https://review.openstack.org/450287 | 15:22 |
| *** brianw has quit IRC | 15:23 | |
| odyssey4me | andymccr ^ you meant stable/newton ? | 15:25 |
| andymccr | odyssey4me: haha yeah | 15:25 |
| andymccr | damnit :P | 15:25 |
| *** dxiri has quit IRC | 15:25 | |
| odyssey4me | why is git needed? | 15:25 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_cinder stable/newton: Add git to stable/newton Trusty installs https://review.openstack.org/450287 | 15:25 |
| odyssey4me | that seems odd | 15:26 |
| *** dxiri has joined #openstack-ansible | 15:26 | |
| andymccr | odyssey4me: for installing packages in dev mode - the real solution is to adjust this functionality in master to have a dev package list or something along those lines | 15:26 |
| odyssey4me | that's exactly what bindep is for | 15:26 |
| odyssey4me | we shouldn't be installing that in the distro package list, because then all cinder hosts get it | 15:26 |
| odyssey4me | hmm, but then it needs it in the container, doesn't it | 15:26 |
| odyssey4me | dammit | 15:26 |
| andymccr | odyssey4me: bindep wont setup the packages on the containers - but i agree in essence that this isnt the correct approach except that its on stable/newton | 15:26 |
| andymccr | so adjusting functionality for all branches of cinder is not really super backportable | 15:27 |
| palendae | Cinder's going to fail til this gets fixed, I think - https://review.openstack.org/#/c/449787/ | 15:27 |
| andymccr | palendae: i thought i fixed the tempest cinder nonsense on stable/ocata for OSA at least... hmm | 15:27 |
| odyssey4me | andymccr I think palendae is talking to master | 15:27 |
| odyssey4me | *about | 15:28 |
| palendae | andymccr: https://review.openstack.org/#/c/448777/ was still failing this morning | 15:28 |
| palendae | Oh, yeah, master. | 15:28 |
| palendae | Dunno how far the tempest breakage went back | 15:28 |
| *** lucasxu has joined #openstack-ansible | 15:29 | |
| andymccr | sounds like a new issue then :( | 15:29 |
| palendae | Yeah. I found that cinder review Friday, looks like their own gate isn't passing though | 15:30 |
| *** galstrom_zzz is now known as galstrom | 15:34 | |
| *** manheim has joined #openstack-ansible | 15:35 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_cinder master: Only install git when developer_mode is enabled https://review.openstack.org/450293 | 15:35 |
| andymccr | odyssey4me: ^ better approach. | 15:35 |
| andymccr | although for stable/newton not sure that's a backport | 15:36 |
| odyssey4me | andymccr way better :) | 15:37 |
| *** chas has joined #openstack-ansible | 15:38 | |
| openstackgerrit | Eric Berglund proposed openstack/openstack-ansible-os_nova master: Add novalink apt key and repo before installation https://review.openstack.org/450298 | 15:38 |
| *** chas_ has joined #openstack-ansible | 15:40 | |
| *** chas has quit IRC | 15:42 | |
| *** chas_ has quit IRC | 15:44 | |
| *** chas has joined #openstack-ansible | 15:46 | |
| *** udesale has quit IRC | 15:50 | |
| *** Jack_Iv has joined #openstack-ansible | 15:52 | |
| *** schwicht has quit IRC | 15:55 | |
| *** Jack_Iv has quit IRC | 15:57 | |
| *** vnogin has quit IRC | 16:00 | |
| *** shashank_t_ has quit IRC | 16:01 | |
| *** tonytan_brb has quit IRC | 16:03 | |
| *** tonytan4ever has joined #openstack-ansible | 16:03 | |
| *** udesale has joined #openstack-ansible | 16:06 | |
| *** sanfern has quit IRC | 16:06 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-openstack_hosts stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450311 | 16:06 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-pip_install stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450312 | 16:07 |
| *** sanfern has joined #openstack-ansible | 16:07 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-lxc_hosts stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450313 | 16:07 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-tests stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450315 | 16:07 |
| *** electrofelix has quit IRC | 16:09 | |
| *** SerenaFeng has quit IRC | 16:12 | |
| *** rboyapat has joined #openstack-ansible | 16:13 | |
| *** fabg has quit IRC | 16:13 | |
| *** jamesdenton has joined #openstack-ansible | 16:23 | |
| SamYaple | mhayden: first disabling selinux, now disabling gpg checks? i am disappoint | 16:23 |
| odyssey4me | hell freezeth over | 16:24 |
| mhayden | haha | 16:24 |
| SamYaple | <3 mhayden | 16:24 |
| mhayden | SamYaple: dmsimard poked our friends in RDO-land to see if they can get that pkg signed | 16:24 |
| mhayden | the repos it configures have signed packages | 16:25 |
| SamYaple | mhayden: is that just for master? or do they sign none of thier packages? | 16:26 |
| mhayden | the repo packages appear to be unsigned | 16:27 |
| mhayden | the rdo-release-ocata.rpm only contains 3 repo files and 2 keys | 16:27 |
| mhayden | brb | 16:27 |
| SamYaple | oh i see | 16:27 |
| SamYaple | the more you know | 16:27 |
| dmsimard | SamYaple: the stable repositories are signed and gpgcheck is enabled | 16:27 |
| SamYaple | dmsimard: ah ok. that sounds more right | 16:28 |
| dmsimard | It's the convenience package to get the repos set up that isnt itself signed | 16:28 |
| SamYaple | yea i can see that | 16:28 |
| *** manheim has quit IRC | 16:28 | |
| *** MasterOfBugs has joined #openstack-ansible | 16:28 | |
| spotz | dmsimard: So not so convenient?:) | 16:29 |
| *** hachi has quit IRC | 16:29 | |
| dmsimard | ¯\_(ツ)_/¯ | 16:31 |
| dmsimard | The yum defaults do not have local_gpgcheck enabled | 16:31 |
| dmsimard | So I didn't know until someone pointed it out and that's fair, we'll improve it | 16:31 |
| *** hachi has joined #openstack-ansible | 16:32 | |
| *** adrian_otto has joined #openstack-ansible | 16:37 | |
| *** lostRhino has left #openstack-ansible | 16:38 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_cinder stable/newton: Add git to stable/newton Trusty installs https://review.openstack.org/450287 | 16:41 |
| *** pbandark has joined #openstack-ansible | 16:42 | |
| *** hachi has quit IRC | 16:44 | |
| *** shashank_t_ has joined #openstack-ansible | 16:49 | |
| *** shashank_t_ has quit IRC | 16:50 | |
| *** Jack_Iv has joined #openstack-ansible | 16:53 | |
| *** udesale has quit IRC | 16:54 | |
| *** Jack_Iv has quit IRC | 16:58 | |
| *** dxiri_ has joined #openstack-ansible | 17:06 | |
| *** dxiri has quit IRC | 17:09 | |
| *** pbandark has quit IRC | 17:12 | |
| *** pcaruana has quit IRC | 17:12 | |
| *** Amit82 has joined #openstack-ansible | 17:13 | |
| Amit82 | Hi All, I am deploying openstack using OSA 14.0.8. | 17:14 |
| Amit82 | While running "openstack-ansible setup-infrastructure.yml", I am facing this error: http://paste.openstack.org/show/604353/ | 17:15 |
| Amit82 | Any idea about this error? | 17:15 |
| openstackgerrit | Merged openstack/openstack-ansible-os_octavia master: Deprecate auth_plugin option https://review.openstack.org/448367 | 17:15 |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-tests master: vagrant: Add openSUSE Leap 42.1 https://review.openstack.org/450239 | 17:16 |
| *** schwicht has joined #openstack-ansible | 17:19 | |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-tests master: vagrant: Add openSUSE Leap 42.1 https://review.openstack.org/450239 | 17:20 |
| *** markvoelker has quit IRC | 17:23 | |
| openstackgerrit | Merged openstack/openstack-ansible stable/newton: Fix pip_links for LB terminated SSL environments https://review.openstack.org/450258 | 17:24 |
| evrardjp | Amit82: hey | 17:29 |
| evrardjp | Update apt if needed is located here: https://github.com/openstack/openstack-ansible-repo_server/blob/14.0.8/tasks/install_apt.yml#L26 | 17:29 |
| evrardjp | it basically uses the apt module | 17:29 |
| evrardjp | to do update_cache: yes | 17:30 |
| evrardjp | so if it doesn't work, it looks like there is something wrong on the container apt cache | 17:30 |
| evrardjp | try running it manually and fix it that way? | 17:30 |
| evrardjp | Amit82: for you it would be ansible -m shell -a "apt-get update" infra2_1_repo_container-defd5df1 | 17:31 |
| evrardjp | you'll see more about the failure I guess | 17:31 |
| evrardjp | apt cache can be busted quite easily if you Ctrl-C while doing operations, or network issues. | 17:32 |
| evrardjp | I cannot confirm that's the issue/cause, but doing this would help you. | 17:32 |
| *** gouthamr_ is now known as gouthamr | 17:32 | |
| *** schwicht has quit IRC | 17:34 | |
| Amit82 | evrardjp: thanks a lot, I ran "ansible -m shell -a "apt-get update" infra2_1_repo_container-defd5df1", and then re-ran setup-infrastructure.yml | 17:37 |
| Amit82 | I think it passed that step but stuck at this: http://paste.openstack.org/show/604358/ | 17:37 |
| *** kstev has quit IRC | 17:39 | |
| *** shashank_t_ has joined #openstack-ansible | 17:39 | |
| *** lucasxu has quit IRC | 17:40 | |
| openstackgerrit | Merged openstack/openstack-ansible stable/ocata: Fix pip_links for LB terminated SSL environments https://review.openstack.org/450257 | 17:41 |
| *** shardy has quit IRC | 17:44 | |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450311 | 17:45 |
| *** The_Intern has joined #openstack-ansible | 17:46 | |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450313 | 17:46 |
| evrardjp | Amit82: maybe you should check the connectivity of this container | 17:49 |
| evrardjp | and check that everything is alright | 17:49 |
| openstackgerrit | Merged openstack/openstack-ansible-pip_install stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450312 | 17:51 |
| *** Amit82 has quit IRC | 17:54 | |
| openstackgerrit | Luz Cazares proposed openstack/openstack-ansible-os_tempest master: (WIP) Copy tempest subunit result files to log folder https://review.openstack.org/449352 | 17:54 |
| *** Jack_Iv has joined #openstack-ansible | 17:54 | |
| openstackgerrit | Merged openstack/openstack-ansible-rsyslog_client master: Update postrotate script https://review.openstack.org/449967 | 17:55 |
| *** Amit82 has joined #openstack-ansible | 17:56 | |
| openstackgerrit | Luz Cazares proposed openstack/openstack-ansible-os_tempest master: (WIP) Copy tempest subunit result files to log folder https://review.openstack.org/449352 | 17:56 |
| openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer master: Add a release note https://review.openstack.org/449865 | 17:56 |
| *** shashank_t_ has quit IRC | 17:56 | |
| *** adrian_otto has quit IRC | 17:57 | |
| *** stuartgr has quit IRC | 17:57 | |
| *** shashank_t_ has joined #openstack-ansible | 17:57 | |
| Amit82 | As my installation is getting stuck here and there. | 17:58 |
| Amit82 | How can I cleanup everything and re-run all the playbooks from start | 17:58 |
| Amit82 | ? | 17:59 |
| *** Jack_Iv has quit IRC | 17:59 | |
| Amit82 | I mean is there any script for cleanup everything what OSA does in setup-hosts.yml and setup-infrastructure.yml | 18:00 |
| *** schwicht has joined #openstack-ansible | 18:00 | |
| Amit82 | ? | 18:00 |
| *** kstev has joined #openstack-ansible | 18:01 | |
| *** shashank_t_ has quit IRC | 18:01 | |
| *** poopcat has joined #openstack-ansible | 18:02 | |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_container_create master: Enhance configurability of LXC net interfaces https://review.openstack.org/386885 | 18:04 |
| openstackgerrit | Merged openstack/openstack-ansible-tests stable/ocata: Install RDO release RPM without GPG checks https://review.openstack.org/450315 | 18:07 |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-haproxy_server master: [WIP] run_tests.sh: Use common test script to run the tox tests https://review.openstack.org/450384 | 18:07 |
| hwoarang | odyssey4me: ^ a proof of concept | 18:08 |
| *** schwicht has quit IRC | 18:08 | |
| *** poopcat has quit IRC | 18:10 | |
| *** lucasxu has joined #openstack-ansible | 18:11 | |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-haproxy_server master: [WIP] run_tests.sh: Use common test script to run the tox tests https://review.openstack.org/450384 | 18:11 |
| *** marst has joined #openstack-ansible | 18:12 | |
| *** Amit82 has quit IRC | 18:12 | |
| *** pbandark has joined #openstack-ansible | 18:15 | |
| *** MasterOfBugs has quit IRC | 18:18 | |
| *** Jack_Iv has joined #openstack-ansible | 18:25 | |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-haproxy_server master: [WIP] run_tests.sh: Use common test script to run the tox tests https://review.openstack.org/450384 | 18:28 |
| *** Jack_Iv has quit IRC | 18:29 | |
| *** retreved has quit IRC | 18:37 | |
| *** retreved has joined #openstack-ansible | 18:37 | |
| *** vnogin has joined #openstack-ansible | 18:38 | |
| *** chas has quit IRC | 18:39 | |
| *** vnogin has quit IRC | 18:42 | |
| *** pbandark has quit IRC | 18:50 | |
| openstackgerrit | Merged openstack/openstack-ansible master: Add support to install a molteniron server https://review.openstack.org/427255 | 18:56 |
| *** fabg has joined #openstack-ansible | 18:59 | |
| *** phalmos has quit IRC | 19:02 | |
| *** schwicht has joined #openstack-ansible | 19:03 | |
| *** smatzek has quit IRC | 19:10 | |
| *** adrian_otto has joined #openstack-ansible | 19:12 | |
| *** hybridpollo has joined #openstack-ansible | 19:15 | |
| *** fabg has quit IRC | 19:16 | |
| *** The_Intern has quit IRC | 19:17 | |
| lbragstad | hey folks - we have a few changes that have merged recently that move policy defaults into code for keystone (https://review.openstack.org/#/q/topic:bp/policy-in-code+project:openstack/keystone) | 19:17 |
| *** The_Intern has joined #openstack-ansible | 19:17 | |
| lbragstad | not sure if there are specific things osa needs to do around those, but I assume work has already been done in osa to consume those types of changes from nova? | 19:18 |
| *** poopcat has joined #openstack-ansible | 19:18 | |
| *** hybridpolio has joined #openstack-ansible | 19:19 | |
| palendae | lbragstad: afaik no https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/policy.json.j2 | 19:19 |
| palendae | But last I played with policy was trying to get a policy working between horizon and keystone that allowed multiple domains to play nice...someone else fixed that internally and I fell out of the loop | 19:20 |
| palendae | lbragstad: Does this mean the tools to generate the sample configs should be run during a keystone deploy? | 19:20 |
| *** hybridpollo has quit IRC | 19:21 | |
| *** hybridpolio is now known as hybridpollo | 19:22 | |
| palendae | Nova was last updated in June 2016 https://github.com/openstack/openstack-ansible-os_nova/blob/master/templates/policy.json.j2 | 19:23 |
| palendae | July, sorry | 19:23 |
| lbragstad | palendae when you generate policy files for horizon and nova, is that what you do? | 19:23 |
| palendae | lbragstad: Looks like no | 19:23 |
| palendae | But I may be out of the loop there, since that file is completely blank | 19:24 |
| palendae | https://github.com/openstack/openstack-ansible-os_nova/blob/3145f5142f770736d8f45d9d769a8755687eba96/tasks/nova_post_install.yml#L78 looks like it just applies our override dict, not running scripts | 19:24 |
| *** nyloc has quit IRC | 19:25 | |
| *** nyloc has joined #openstack-ansible | 19:25 | |
| *** Jack_Iv has joined #openstack-ansible | 19:26 | |
| palendae | lbragstad: https://github.com/openstack/openstack-ansible-os_horizon/blob/e097fb989015a3c289f26619ab2c24bd4a18826b/templates/horizon_local_settings.py.j2#L415-L440 | 19:26 |
| palendae | Looks like our roles aren't up with the latest policy changes :( | 19:27 |
| *** shashank_t_ has joined #openstack-ansible | 19:27 | |
| lbragstad | palendae ah - interesting | 19:28 |
| lbragstad | palendae after the policy-in-codes changes go into keystone, you should be able to generate complete policy files based on any existing policies written to the file and the defaults defined in code | 19:29 |
| palendae | Cool | 19:29 |
| palendae | But I assume we're going to need to add tasks that call the executables that do so? | 19:29 |
| lbragstad | palendae but - i think policy generation only kicks out yaml (as of oslo.policy 1.21.0) | 19:30 |
| lbragstad | palendae i would think so | 19:30 |
| palendae | Are they going to be separate executables, or something like keystone-manage? | 19:30 |
| *** Jack_Iv has quit IRC | 19:30 | |
| lbragstad | palendae i suppose it would be possible for osa to be aware of any policy overrides specified by the deployer | 19:30 |
| palendae | I, for one, would be happy if we could point our policy overrides to a file, vs. writing them inline in the openstack_user_config | 19:32 |
| lbragstad | palendae https://review.openstack.org/#/c/443344/5 | 19:32 |
| palendae | But that's just out of a general desire to reduce complexity of that file, not about policy specifically | 19:32 |
| lbragstad | palendae very similar, but it would use oslo.policy instead `oslopolicy-sample-generator --config-file etc/keystone-policy-generator.conf` for example | 19:33 |
| palendae | Ah, ok, so there is already a generator | 19:33 |
| palendae | But keystone would wrap that code with it's own executable | 19:33 |
| lbragstad | palendae i should also clarify | 19:34 |
| lbragstad | with these changes, it should be possible to run keystone with *only* the policies you want to override specified in your policy file | 19:34 |
| palendae | lbragstad: 👍 | 19:35 |
| palendae | That sounds awesome | 19:35 |
| lbragstad | (i.e. if you only want to override GET /v3/users/ to be something other than the default, that's the only entry that would exist in your deployments policy file for keystone) | 19:35 |
| palendae | Right | 19:35 |
| lbragstad | yeah - there are two types | 19:35 |
| palendae | That'd be a big win | 19:35 |
| lbragstad | there is a sample generator | 19:35 |
| palendae | But it sounds like we may need some guidance on bringing this into our roles | 19:35 |
| lbragstad | which behaves very similar to the sample config generator | 19:35 |
| palendae | I'm definitely not super clear on how it would fit | 19:36 |
| lbragstad | it generates a sample policy file with documentation about each of policies, what they do, what path + http verb is used to access them, etc... | 19:38 |
| lbragstad | then there is a policy file generator that looks for an existing policy file on disk, reads values defined in that files as overrides, and fills in the rest of the policies with the default values | 19:38 |
| lbragstad | so the result is a complete policy file with overrides for a specific deployment worked into the result | 19:38 |
| lbragstad | (which would be something you could give horizon) | 19:38 |
| palendae | Nice | 19:38 |
| openstackgerrit | Merged openstack/openstack-ansible master: Remove Ceilometer API Service https://review.openstack.org/438740 | 19:40 |
| *** aimeeu__ has joined #openstack-ansible | 19:41 | |
| *** aimeeu has quit IRC | 19:41 | |
| *** aimeeu__ is now known as aimeeu | 19:41 | |
| lbragstad | palendae yeah - the policy generation pieces would munge any existing policies with the defaults. | 19:44 |
| palendae | Cool | 19:44 |
| lbragstad | palendae there is also some additional functionality that might help clean up your existing policy files | 19:45 |
| lbragstad | palendae you should be able to pass an existing policy file to oslo.policy and it will tell you which policies you've defined that are using the default (i.e. any policies you no longer need to define and can prune from your policy file) | 19:48 |
| lbragstad | palendae which is essentially a tool for helping deployers simplify their policy files | 19:48 |
| lbragstad | by removing duplicated/default information | 19:48 |
| palendae | Right | 19:48 |
| palendae | So some of that isn't really for OSA to do | 19:48 |
| palendae | More like so people can clean up what they're passing in as overrides via OSA | 19:49 |
| lbragstad | palendae ++ | 19:49 |
| lbragstad | palendae does osa override any of the keystone policies? | 19:49 |
| *** v1k0d3n has quit IRC | 19:49 | |
| palendae | I don't know for sure, but usually commits like the latest here https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/policy.json.j2 just copy/paste them out of the package's git repo | 19:50 |
| lbragstad | https://github.com/openstack/openstack-ansible-os_keystone/blob/33e5ca3eb6ebe218412a7ee51da6e463e6e15551/templates/policy.json.j2 looks pretty stock | 19:50 |
| palendae | Right | 19:50 |
| palendae | So yeah, my guess is most of them could go away | 19:50 |
| lbragstad | yeah - if not all of them | 19:50 |
| palendae | The template file may be necessary for the config_template plugin to populate an override | 19:50 |
| lbragstad | then the deploy process would call the keystone/oslo bits to munge the right policy together based on any deployer specific policy overrides | 19:51 |
| palendae | But if you're not doing overrides, it just wouldn't get used | 19:51 |
| *** v1k0d3n has joined #openstack-ansible | 19:51 | |
| *** tonytan4ever has quit IRC | 19:51 | |
| lbragstad | yeah - if there aren't any overrides just generate a sample for horizon | 19:51 |
| lbragstad | if there are overrides, osa would have to munge the files using the oslo/keystone tooling to provide a policy file for horizon | 19:52 |
| palendae | Got it | 19:52 |
| lbragstad | and keystone would just run with whatever is left in the overrides file (since it doesn't really make sense to generate a complete policy file of default for keystone since it already knows its own defaults) | 19:52 |
| palendae | So existing policy.json files will be used as overrides for now; are they being dropped any time soon? | 19:53 |
| *** tonytan4ever has joined #openstack-ansible | 19:53 | |
| lbragstad | palendae is what being dropped? | 19:53 |
| lbragstad | palendae support for using .json/.yaml files for policy? | 19:53 |
| palendae | Yes | 19:54 |
| lbragstad | palendae not that i am aware of | 19:54 |
| palendae | k | 19:54 |
| palendae | So it's less about ripping stuff out, but adjusting it for the new process | 19:54 |
| lbragstad | palendae since that's what deployers use to customize policy for their deployments | 19:54 |
| lbragstad | we're just moving everything into code, and treating anything in the policy file as an override to the default in code | 19:55 |
| palendae | Yeah | 19:55 |
| lbragstad | which should make the policy file simpler if you only override a subset of policies | 19:55 |
| palendae | So if you're stock, no need to have a copy/pasted file sitting around | 19:55 |
| lbragstad | right | 19:55 |
| palendae | Right, that's kinda like what I did with environment overrides | 19:55 |
| lbragstad | if a policy isn't define in the policy file, the default is applied in code | 19:55 |
| palendae | We keep our default environment in tree, you only write /etc/openstack_deploy/env.d files if you need them | 19:55 |
| palendae | For our case, that also helps when it comes time to upgrade | 19:56 |
| lbragstad | ah - so that's essentially your overrides | 19:56 |
| palendae | Easier to tell if we made a change to the structure, or the deployer did | 19:56 |
| palendae | For environment, yes | 19:56 |
| lbragstad | right | 19:56 |
| palendae | For policy it would go into a dictionary in openstack_user_config.yml | 19:56 |
| palendae | Which is then processed by config_template and rendered to a json file | 19:56 |
| lbragstad | yeah - we're hoping this helps with the upgrade case too, since at upgrade time you don't have to manually diff a file between releases to see what policies changed or were added | 19:57 |
| palendae | Exactly | 19:57 |
| palendae | Cause sometimes the diff is just about ordering | 19:57 |
| lbragstad | and it's a PITA | 19:57 |
| lbragstad | to do manually | 19:57 |
| palendae | Or if you have a change introduced by the project AND a change done by the deployer | 19:57 |
| lbragstad | instead all your defaults just carry forward | 19:57 |
| lbragstad | palendae yeah - that's the worst of all worlds | 19:58 |
| palendae | It's impossible to find out who changed what | 19:58 |
| palendae | Which is where I was in a few of our OSA upgrades | 19:58 |
| palendae | We removed some services from groups | 19:58 |
| lbragstad | :-/ | 19:58 |
| palendae | But I couldn't just blanket remove them | 19:58 |
| *** TxGirlGeek has joined #openstack-ansible | 19:58 | |
| palendae | Putting env.d in our tree fixed that particular annoyance | 19:58 |
| palendae | Though maybe someday we'll just replace our inventory system with something simpler and more common | 19:59 |
| openstackgerrit | Merged openstack/openstack-ansible-security master: Change PASS_WARN_DAYS --> PASS_WARN_AGE https://review.openstack.org/448193 | 19:59 |
| lbragstad | i'll write down an action item to help out with porting those changes into osa once we have all the policy-in-code and policy-docs patches merged | 20:00 |
| palendae | Thanks! | 20:00 |
| lbragstad | because that should result in all the necessary things to generate the required policy files | 20:01 |
| lbragstad | palendae osa keystone master pulls from keystone master, right? | 20:01 |
| palendae | I *think* so | 20:01 |
| palendae | May pull a specific SHA slightly behind master though | 20:02 |
| *** Jack_Iv has joined #openstack-ansible | 20:02 | |
| lbragstad | ah - https://github.com/openstack/openstack-ansible-os_keystone/blob/33e5ca3eb6ebe218412a7ee51da6e463e6e15551/defaults/main.yml#L31 | 20:02 |
| spotz | lbragstad: palendaeI think we pull the SHA at release? | 20:02 |
| palendae | spotz: Well, master tries to keep up | 20:02 |
| lbragstad | spotz ah - at milestones, too? | 20:02 |
| palendae | Then at release we pin | 20:02 |
| spotz | lbragstad: I think palendae explained it better:) | 20:03 |
| *** manheim_ has joined #openstack-ansible | 20:03 | |
| palendae | lbragstad: We try to consume the head of master on master, and when we cut branches we'll consume SHAs | 20:03 |
| stevelle | nova is moving to the exact same treatment of policies, so this is going to be a behavior we will want to generalize | 20:03 |
| palendae | stevelle: Yeah, lbragstad started the convo by assuming we'd already done so :) | 20:04 |
| palendae | With nov | 20:04 |
| palendae | nova* | 20:04 |
| stevelle | I just read most of the scrollback :) | 20:04 |
| lbragstad | stevelle o/ | 20:04 |
| palendae | Ah :) | 20:04 |
| spotz | hey stevelle! | 20:04 |
| * stevelle suddenly feels like he's been away instead of just distracted | 20:04 | |
| lbragstad | yeah - keystone has moved most policy into code, and is currently working on documenting each of the policies so that we can generate proper sample policy files | 20:05 |
| lbragstad | we're planning on getting all of this done before pike-1, so i wanted to swing by and see if there was anything we could use to help osa consume this for keystone (which is why I started asking about nova defaults) | 20:06 |
| *** Jack_Iv has quit IRC | 20:07 | |
| palendae | Yeah, I think that'd be great | 20:07 |
| lbragstad | would a sane starting place be to figure out what the required steps are for removing the default policy.json.j2 templates? | 20:08 |
| palendae | I think so | 20:08 |
| lbragstad | cool | 20:08 |
| palendae | I'm not sure it'd be removed, though | 20:08 |
| palendae | The config_template module would place any overrides written into openstack_user_config.yml into that | 20:08 |
| palendae | Though maybe we can modify the template to just spit out a string of JSON into a specified file, instead of requiring an empty j2 file | 20:09 |
| *** cmart has quit IRC | 20:09 | |
| lbragstad | would it work for config_template to only write to that file IFF there are overrides to write? | 20:09 |
| *** markvoelker has joined #openstack-ansible | 20:09 | |
| palendae | I think that's doable | 20:09 |
| palendae | With a when: keystone_policy_json_overrides is defined | 20:09 |
| palendae | (variable name might be wrong) | 20:10 |
| lbragstad | then the osa roles for the various projects would be able to remove the j2 policy template completely and leave it up to config_template to do the needful | 20:10 |
| palendae | I'd have to look at the internals of config_template... | 20:10 |
| lbragstad | me too | 20:10 |
| palendae | But I think it *needs* a file to exist | 20:10 |
| lbragstad | ok | 20:10 |
| palendae | Like https://github.com/openstack/openstack-ansible-os_nova/blob/master/templates/policy.json.j2 | 20:11 |
| lbragstad | also - i believe oslo.policy only generates policies in yaml (instead of json) | 20:11 |
| palendae | https://github.com/openstack/openstack-ansible-os_nova/blob/3145f5142f770736d8f45d9d769a8755687eba96/tasks/nova_post_install.yml#L78-L81 | 20:11 |
| palendae | config_template does yaml | 20:11 |
| lbragstad | palendae aha - sure.. so os_nova is doing somethingl ike that | 20:11 |
| palendae | https://github.com/openstack/openstack-ansible-plugins/blob/master/action/_v2_config_template.py#L436-L443 currently need a 'src' file | 20:12 |
| palendae | Hence the bare policy.json.j2 file in nova | 20:12 |
| lbragstad | sweet - so https://github.com/openstack/openstack-ansible-os_nova/blob/3145f5142f770736d8f45d9d769a8755687eba96/tasks/nova_post_install.yml#L78-L81 populates nova's policy file with the overrides already | 20:12 |
| palendae | Yeah | 20:13 |
| lbragstad | nice | 20:13 |
| palendae | Really all it'd need is the when: | 20:13 |
| palendae | To be a bit smarter about the skip | 20:13 |
| palendae | With keystone, it'd just write out what's in the template right now (https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/policy.json.j2) | 20:13 |
| *** jamielennox is now known as jamielennox|away | 20:13 | |
| palendae | Or just delete the contents and leave it as {} like nova | 20:14 |
| lbragstad | palendae right - but that wouldn't be required | 20:14 |
| lbragstad | palendae yep | 20:14 |
| palendae | Would have to profile to know which is faster | 20:14 |
| palendae | Seems kinda silly to actually copy '{}' out though :) | 20:14 |
| lbragstad | palendae for now - an {} would make it so osa developers don't have to maintain a keystone policy file | 20:14 |
| palendae | Even if it is mostly a no-op | 20:14 |
| palendae | Yep! | 20:14 |
| palendae | And keep the overrides we have | 20:14 |
| lbragstad | right | 20:14 |
| palendae | Really the only ? would be performance | 20:15 |
| palendae | But as a first pass, easy enough | 20:15 |
| lbragstad | then you have a condensed opinionated list of things osa needs/provides for policy | 20:15 |
| palendae | Right | 20:15 |
| lbragstad | so - then the next bit would be the things needed for horizon | 20:15 |
| lbragstad | which i assume would be a follow on play to generate a complete policy file (including overrides and defaults) to give to horizon | 20:16 |
| lbragstad | which i think would be pretty easy because all the overrides are written to a known place | 20:16 |
| palendae | Yeah | 20:18 |
| palendae | Or, generate one and drop it, then in the horizon role look in that known/configured place | 20:18 |
| *** rmelero has quit IRC | 20:18 | |
| *** rmelero has joined #openstack-ansible | 20:19 | |
| lbragstad | palendae ++ yeah - that'd work, too | 20:19 |
| *** pbandark has joined #openstack-ansible | 20:19 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible stable/newton: Update Ansible to 2.1.5.0 https://review.openstack.org/437003 | 20:20 |
| palendae | I think that's probably the least coupled way of doing it | 20:20 |
| *** markvoelker has quit IRC | 20:22 | |
| *** rmelero has quit IRC | 20:23 | |
| *** jamielennox|away is now known as jamielennox | 20:24 | |
| *** vnogin has joined #openstack-ansible | 20:26 | |
| *** manheim_ has quit IRC | 20:27 | |
| *** gouthamr has quit IRC | 20:29 | |
| *** foutatoro has joined #openstack-ansible | 20:31 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible master: [WIP] Added an ALL is_metal scenario https://review.openstack.org/449372 | 20:33 |
| palendae | cloudnull: Chaos! | 20:33 |
| cloudnull | what? | 20:34 |
| *** TxGirlGeek has quit IRC | 20:34 | |
| palendae | Everything running on one node, chaos! | 20:34 |
| cloudnull | indeed! | 20:34 |
| stevelle | I'm going to suggest we shouldn't be using overrides in this case, and should only lay down a policy file if there are overrides. | 20:35 |
| palendae | stevelle: I'm +1 | 20:35 |
| lbragstad | stevelle keystone should be able to support that case | 20:35 |
| lbragstad | we should require a policy file anymore | 20:35 |
| stevelle | set up migration/upgrade work to evaluate the file if it already exists, purging duplicates | 20:35 |
| lbragstad | (PR is currently in review) | 20:36 |
| stevelle | just have an empty list of keystone_policy_overrides in defaults | 20:36 |
| palendae | stevelle: Or don't define it and do is_defined | 20:36 |
| palendae | is defined* | 20:36 |
| stevelle | that would be fine too, the only reason I might prefer an empty list is that it makes the defaults file document how to set a policy override easily | 20:37 |
| palendae | True | 20:37 |
| palendae | But then you'd have a bunch of empty lists in our default config file | 20:37 |
| palendae | Cause more than keystone gets policy | 20:37 |
| stevelle | one per role | 20:38 |
| palendae | Oh I see | 20:38 |
| palendae | Not in openstack_user_config | 20:38 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible master: Update Ansible to 2.2.2.0 https://review.openstack.org/436999 | 20:38 |
| stevelle | that is cart before the horse, perhaps. the migration plan is going to be the real feat | 20:39 |
| palendae | Well, leaving them in place isn't necessarily harmful | 20:40 |
| *** woodard_ has joined #openstack-ansible | 20:40 | |
| palendae | but it is leaving chaff | 20:40 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible master: [WIP] Added an ALL is_metal scenario https://review.openstack.org/449372 | 20:43 |
| lbragstad | palendae right | 20:43 |
| *** woodard has quit IRC | 20:43 | |
| *** woodard_ has quit IRC | 20:45 | |
| *** shashank_t_ has quit IRC | 20:45 | |
| *** shashank_t_ has joined #openstack-ansible | 20:46 | |
| *** manheim_ has joined #openstack-ansible | 20:47 | |
| *** manheim_ has quit IRC | 20:49 | |
| *** shashank_t_ has quit IRC | 20:50 | |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible master: Restructure lib directory to install via pip https://review.openstack.org/418076 | 20:52 |
| *** askb has joined #openstack-ansible | 20:52 | |
| *** rboyapat has quit IRC | 20:56 | |
| *** retreved has quit IRC | 20:57 | |
| *** retreved has joined #openstack-ansible | 20:58 | |
| *** retreved has quit IRC | 20:58 | |
| *** Matias has joined #openstack-ansible | 21:00 | |
| *** gouthamr has joined #openstack-ansible | 21:01 | |
| *** Jack_Iv has joined #openstack-ansible | 21:02 | |
| *** cmart has joined #openstack-ansible | 21:05 | |
| *** Jack_Iv has quit IRC | 21:07 | |
| *** The_Intern has quit IRC | 21:14 | |
| *** jamesdenton has quit IRC | 21:17 | |
| *** smatzek has joined #openstack-ansible | 21:17 | |
| stevelle | if I were to state it differently, the migration and clean up is the interesting problem to solve. | 21:19 |
| stevelle | but I say that acknowledging that there is not exactly a shortage of interesting problems to solve | 21:19 |
| *** cjloader_ has quit IRC | 21:26 | |
| *** foutatoro has quit IRC | 21:31 | |
| *** smatzek has quit IRC | 21:33 | |
| *** lucasxu has quit IRC | 21:34 | |
| *** pbandark has quit IRC | 21:36 | |
| *** lucasxu has joined #openstack-ansible | 21:41 | |
| *** tonytan4ever has quit IRC | 21:51 | |
| *** esberglu_ has quit IRC | 21:51 | |
| *** jrobinson has joined #openstack-ansible | 22:00 | |
| *** thorst has quit IRC | 22:02 | |
| *** thorst has joined #openstack-ansible | 22:03 | |
| *** Jack_Iv has joined #openstack-ansible | 22:03 | |
| *** david-lyle has quit IRC | 22:04 | |
| *** esberglu has joined #openstack-ansible | 22:05 | |
| *** david-lyle has joined #openstack-ansible | 22:05 | |
| *** rmelero has joined #openstack-ansible | 22:06 | |
| *** thorst has quit IRC | 22:07 | |
| *** Jack_Iv has quit IRC | 22:08 | |
| *** esberglu has quit IRC | 22:09 | |
| *** kstev has quit IRC | 22:16 | |
| openstackgerrit | German Eichberger proposed openstack/openstack-ansible-os_octavia master: Adds anti affinity hint and az configuration option https://review.openstack.org/450475 | 22:18 |
| *** karimb has quit IRC | 22:21 | |
| *** domi007 has left #openstack-ansible | 22:24 | |
| *** acormier has quit IRC | 22:28 | |
| *** Adri2000 has quit IRC | 22:29 | |
| *** galstrom is now known as galstrom_zzz | 22:31 | |
| *** manheim has joined #openstack-ansible | 22:45 | |
| *** cjloader_ has joined #openstack-ansible | 22:49 | |
| *** thorst has joined #openstack-ansible | 22:50 | |
| *** lucasxu has quit IRC | 22:51 | |
| *** markvoelker has joined #openstack-ansible | 22:52 | |
| *** thorst has quit IRC | 22:53 | |
| *** agrebennikov has quit IRC | 22:53 | |
| *** Adri2000 has joined #openstack-ansible | 22:57 | |
| *** Adri2000 has quit IRC | 22:57 | |
| *** Adri2000 has joined #openstack-ansible | 22:57 | |
| *** Jack_Iv has joined #openstack-ansible | 23:04 | |
| *** marst has quit IRC | 23:04 | |
| *** jrobinson has quit IRC | 23:06 | |
| *** Jack_Iv has quit IRC | 23:09 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible master: [WIP] Added an ALL is_metal scenario https://review.openstack.org/449372 | 23:10 |
| *** rmelero_ has joined #openstack-ansible | 23:10 | |
| *** rmelero has quit IRC | 23:12 | |
| *** cjloader_ has quit IRC | 23:14 | |
| *** marst has joined #openstack-ansible | 23:18 | |
| *** manheim has quit IRC | 23:22 | |
| *** acormier has joined #openstack-ansible | 23:23 | |
| *** thorst has joined #openstack-ansible | 23:24 | |
| *** acormier has quit IRC | 23:29 | |
| *** schwicht has quit IRC | 23:31 | |
| *** pmannidi has joined #openstack-ansible | 23:36 | |
| *** thorst has quit IRC | 23:39 | |
| openstackgerrit | Merged openstack/openstack-ansible stable/ocata: Update SHA of galera_server role backported change https://review.openstack.org/449770 | 23:39 |
| *** poopcat has quit IRC | 23:42 | |
| *** poopcat has joined #openstack-ansible | 23:51 | |
| *** klamath has quit IRC | 23:57 | |
| *** poopcat has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!