Thursday, 2017-05-18

*** zul has quit IRC00:11
*** perniciouscaffei has joined #openstack-ansible00:21
*** galstrom_zzz is now known as galstrom00:24
*** zul has joined #openstack-ansible00:25
*** jamielennox is now known as jamielennox|away00:27
jgriffithsDO I have to do something ahead of time to configure the internal load balancer IP's on the haproxy host before running setup-infrastructure00:33
*** galstrom is now known as galstrom_zzz00:33
*** zul has quit IRC00:36
jgriffithsrickd The internal IP address gets keepalived and haproxy on the hosts specified. It's not containerized. The external LB doesn't have to be in your network at all.00:40
jgriffithsI'm not really an expert. If you ask me to elaborate my head will probably explode00:40
*** pmannidi has quit IRC00:41
*** jamielennox|away is now known as jamielennox00:41
*** woodard_ has quit IRC00:45
*** woodard has joined #openstack-ansible00:46
*** acormier has joined #openstack-ansible00:46
*** acormier has quit IRC00:48
*** acormier has joined #openstack-ansible00:48
*** cuongnv has joined #openstack-ansible00:56
*** thorst_afk has joined #openstack-ansible00:58
jgriffithsFor the sake of anybody who is interested in the inability to install galera because pip can't get the package, it ties back to the haproxy server.01:01
jgriffithsI needed to enable haproxy_keepalived_internal_vip_cidr: "{{internal_lb_vip_address}}/32"01:02
*** thorst_afk has quit IRC01:02
jgriffithsin the user_variables.yml file01:02
*** pmannidi has joined #openstack-ansible01:03
jgriffithsTo answer your question rickd. If you add the settings to the user_variables file, the haproxy hosts get a keepalived address assigned to them that are load balanced to the the haproxy services. If you don't, you can use your own external load balancer and to reach the individual services (I think). The internal and external addresses can be enabled independently in the user_variables file so you can configure the an haproxy load balancer01:12
jgriffithson some server nodes and use an external load balancer for your externally available IP addresses if you want to. These playbooks are incredibly well written,.01:12
*** cNilesh has joined #openstack-ansible01:15
tnargsup joel01:16
*** cNilesh has quit IRC01:16
*** cnilesh has joined #openstack-ansible01:16
*** cnilesh has quit IRC01:17
jgriffithsHey there. Getting my butt kicked with a large project that due tonight.01:17
*** cNilesh has joined #openstack-ansible01:17
jgriffithsI've got around 45 hours worked this week so far and this looks like an all-nighter01:18
tnargsorry for the butt-kicking01:18
*** perniciouscaffei has quit IRC01:19
jgriffithsSeriously01:19
*** jamesdenton has joined #openstack-ansible01:21
*** weezS has joined #openstack-ansible01:22
*** jamesden_ has joined #openstack-ansible01:26
cloudnulljgriffiths: did you get it going ?01:31
jgriffithsI did!01:31
cloudnullwoot!01:31
*** jamesdenton has quit IRC01:34
*** thorst_afk has joined #openstack-ansible01:41
*** thorst_afk has quit IRC01:43
*** weezS has quit IRC01:50
*** qiliang28 has joined #openstack-ansible02:01
*** jamesdenton has joined #openstack-ansible02:03
*** qiliang27 has quit IRC02:05
*** qiliang28 is now known as qiliang2702:05
*** markvoelker has quit IRC02:08
*** markvoelker has joined #openstack-ansible02:08
*** mhayden has quit IRC02:28
*** common_ has quit IRC02:31
*** common has joined #openstack-ansible02:32
*** mhayden has joined #openstack-ansible02:33
*** jamesdenton has quit IRC02:36
*** jamielennox is now known as jamielennox|away02:40
*** thorst_afk has joined #openstack-ansible02:44
*** winggundamth has joined #openstack-ansible02:45
*** gouthamr has quit IRC02:47
*** acormier has quit IRC02:47
*** gouthamr has joined #openstack-ansible02:48
*** jamesden_ has quit IRC02:50
*** zul has joined #openstack-ansible02:56
*** thorst_afk has quit IRC03:04
*** zul has quit IRC03:13
*** zul has joined #openstack-ansible03:14
*** piliman974 has quit IRC03:16
*** crushil has joined #openstack-ansible03:18
*** crushil has left #openstack-ansible03:18
jgriffithsAnybody ever install openstack-ansible and not have any endpoints except keystone?03:24
cloudnulljgriffiths: nope.03:26
cloudnulldid the playbooks complete ?03:26
jgriffithsYeah.03:26
jgriffithsNo errors03:26
cloudnulland do you have the openstack_user_config populated with the hosts needed for the other services?03:27
jgriffithsInitiatially I didn't configure the load balancers correctly though03:27
cloudnullusing haproxy ?03:27
jgriffithsYes.03:28
cloudnullare the endpoints up for the other services ?03:28
jgriffithsOnly keystone03:28
jgriffithsNo other endpoints at all03:28
cloudnullno endpoints ? or just down endpoints?03:28
jgriffithsNone.03:28
cloudnullrerun the haproxy playbook03:29
cloudnulland see if it drops more endpoints03:29
jgriffithsI have internal, admin, and public for keystone. That's it.03:29
cloudnullalso check to see if there are extra configs in /etc/haproxy/conf.d ?03:29
jgriffithsOkay. I was running setup-infrastructure again right now03:29
cloudnullyou can rerun just haproxy-install.yml, which will be faster.03:30
jgriffithsOkay. Don't want to ctrl-c this run though. :)03:30
cloudnullnp03:30
*** jamielennox|away is now known as jamielennox03:33
jgriffithsIt is not happy with me right now. :_03:33
jgriffithsWaiting for it to finish this run before I get worried.03:33
*** hybridpollo has quit IRC03:34
*** hybridpollo has joined #openstack-ansible03:42
openstackgerritMerged openstack/openstack-ansible-security stable/ocata: Fix security role gate  https://review.openstack.org/46515103:56
*** markvoelker has quit IRC03:56
openstackgerritMerged openstack/openstack-ansible-security master: Enable auto-upgrade in the gate  https://review.openstack.org/46516103:56
openstackgerritMerged openstack/openstack-ansible-pip_install master: Updated from global requirements  https://review.openstack.org/46531903:57
*** markvoelker has joined #openstack-ansible03:57
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/ocata: Add cronie in containers  https://review.openstack.org/46574503:58
*** poopcat has quit IRC04:00
*** markvoelker has quit IRC04:01
openstackgerritMerged openstack/openstack-ansible-os_trove master: Fix trove network related deployment issue  https://review.openstack.org/45888304:07
*** redaudit has quit IRC04:07
openstackgerritMerged openstack/openstack-ansible-ops master: Telegraf playbook fixes  https://review.openstack.org/46361604:12
*** zerda3 has quit IRC04:14
openstackgerritMerged openstack/openstack-ansible-security master: Use zuul-cloner for tests repo in OpenStack-CI  https://review.openstack.org/46265104:17
openstackgerritMerged openstack/openstack-ansible-os_monasca master: Use package module to install distro packages  https://review.openstack.org/46174604:20
openstackgerritMerged openstack/openstack-ansible-os_monasca master: Use zuul-cloner for tests repo in OpenStack-CI  https://review.openstack.org/46263304:21
*** chhavi has joined #openstack-ansible04:21
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Use package module to install distro packages  https://review.openstack.org/46175204:42
*** hybridpollo has quit IRC04:42
*** thorst_afk has joined #openstack-ansible05:01
openstackgerritMerged openstack/openstack-ansible stable/ocata: Fix os_cmd script for tty  https://review.openstack.org/46549205:04
openstackgerritMerged openstack/openstack-ansible stable/newton: Fix os_cmd script for tty  https://review.openstack.org/46549305:04
*** thorst_afk has quit IRC05:05
openstackgerritMerged openstack/openstack-ansible stable/ocata: Change swap creation command for CentOS  https://review.openstack.org/46566505:11
*** udesale has joined #openstack-ansible05:18
*** pranavb has joined #openstack-ansible05:22
*** thorst_afk has joined #openstack-ansible05:22
*** cpuga has quit IRC05:22
*** cpuga has joined #openstack-ansible05:23
*** armaan has quit IRC05:25
*** armaan has joined #openstack-ansible05:26
*** thorst_afk has quit IRC05:26
*** cpuga has quit IRC05:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_monasca stable/ocata: Use package module to install distro packages  https://review.openstack.org/46582105:59
*** Oku_OS-away is now known as Oku_OS06:14
*** perniciouscaffei has joined #openstack-ansible06:15
*** tobberydberg has joined #openstack-ansible06:16
*** thorst_afk has joined #openstack-ansible06:23
evrardjpgood morning06:23
jgriffithsGood morning06:24
*** pcaruana has joined #openstack-ansible06:24
jgriffithsOr is it night06:24
evrardjpit's morning for me :)06:26
jgriffithsMarathon Openstack installation session06:27
*** thorst_afk has quit IRC06:27
*** armaan has quit IRC06:32
*** perniciouscaffei has quit IRC06:32
*** armaan has joined #openstack-ansible06:32
*** armaan has quit IRC06:34
*** armaan has joined #openstack-ansible06:34
*** gouthamr has quit IRC06:36
*** markus_z has joined #openstack-ansible06:43
*** perniciouscaffei has joined #openstack-ansible06:49
*** arbrandes has joined #openstack-ansible07:01
*** perniciouscaffei has quit IRC07:02
*** arbrandes1 has quit IRC07:03
*** manheim_ has joined #openstack-ansible07:06
*** karimb has joined #openstack-ansible07:15
*** tobberydberg has quit IRC07:15
*** tobberydberg has joined #openstack-ansible07:16
*** rpittau has joined #openstack-ansible07:17
*** thorst_afk has joined #openstack-ansible07:24
*** mpranjic has quit IRC07:24
jgriffithsUgh. So I deleted everything and ran it again, but I still don't see any endpoints (except for keystone). Any thoughts?07:25
odyssey4mejgriffiths can you execute one of the playbooks - say os-glance-install.yml with -vvv and pastebin the log?07:26
jgriffithsSure. Using nova. Glance isn't happy with me for it's own reason.07:28
*** cathrich_ has quit IRC07:28
odyssey4menova's a bit big07:28
odyssey4mehow about cinder?07:28
*** cathrichardson has joined #openstack-ansible07:28
*** thorst_afk has quit IRC07:28
jgriffithsFair enough. I'm going to let nova finish first though since I started it and I'm curious now. BTW, thanks'07:29
odyssey4meI should have suggested using the nova-config tag to save you some time07:31
odyssey4mein fact, the nova-setup tag would save even more time07:32
odyssey4mehttps://github.com/openstack/openstack-ansible-os_nova/blob/master/tasks/nova_service_setup.yml#L3507:32
odyssey4mewhich release are you working to install?07:32
jgriffithsOcata07:33
evrardjp/msg odyssey4me hey07:34
evrardjpwoops07:34
jgriffithsJeeze. You're definitely right about nova. Taking forever.07:36
*** mpranjic has joined #openstack-ansible07:40
*** pbandark has joined #openstack-ansible07:43
odyssey4mejgriffiths nova spans the control plane, and compute nodes - it's the biggest spread in most environments07:45
odyssey4mealong with neutron07:45
odyssey4mehowever nova has many, many more discrete services - and therefore more containers, to the execution time is long07:45
mpranjicmorning07:46
*** armaan has quit IRC07:47
*** armaan has joined #openstack-ansible07:47
*** shardy has joined #openstack-ansible07:57
*** SerenaFeng has joined #openstack-ansible08:02
openstackgerritMerged openstack/openstack-ansible-security master: Configure AIDE before initial run  https://review.openstack.org/45971908:04
jgriffithsStrange. I just ran cinder and it added the endpoints for cinder08:07
*** karimb has quit IRC08:07
jgriffithsDO I have to run all of them by hand or something08:07
jgriffithsNova threw an error at the very end08:11
jgriffithshttps://pastebin.com/GETJQ5hT08:11
odyssey4mejgriffiths how have you been executing the playbooks?08:12
jgriffithsJust running setup-hosts, infrastructure, and openstack08:13
odyssey4mehmm, setup-openstack should have executed all these things08:15
jgriffithsI'm working through the includes right now to see if it doesn't fix some of my problem08:17
VAhlHi! Got some problem with TASK [Wait for ssh to be available]. For log, config-file se http://paste.openstack.org/show/609879/.08:19
VAhlThe problem is that some of the OS-service is created in virtualmachine that can not be access. So the task can not access the service.08:19
VAhlWhy ansible/openstack sets the number it does. I do not know. Nor do I know how I can controll it in a better way. Except set cidr_networks: container 10.0.0.0/16  tunnel: 10.1.0.0/16 storage 10.2.0.0/1608:19
*** SerenaFeng has quit IRC08:22
*** thorst_afk has joined #openstack-ansible08:24
odyssey4mejgriffiths the nova execution failed on node004 trying to install packages, although the output isn't clear what happened08:25
odyssey4meoh, actually on all the hosts08:26
ArchiFleKshi, cloudnull about https://review.openstack.org/#/c/462880/ what do you mean for the upgrade ?08:27
jgriffithsThanks odyssey4me. That was some strange output for nova.08:28
jgriffithsAside from cinder (which worked) and glance (which is broken), what would be the next best test run for the missing endpoints?08:29
odyssey4meany of the services you have08:29
odyssey4meneutron, swift, etc08:29
*** thorst_afk has quit IRC08:29
odyssey4mewhy is glance broken?08:29
jgriffithsIt is trying to use nfs, but I think I'm missing a preparation step08:30
*** vnogin has joined #openstack-ansible08:31
*** chuck__ has joined #openstack-ansible08:32
jgriffithsI really need to configure it to use ceph, but I need Openstack functioning within the next three hours and I'm a little burned out since I've been working on this for about 21 hours.08:33
*** jvidal has joined #openstack-ansible08:33
*** zul has quit IRC08:34
*** jvidal has quit IRC08:34
jgriffithsI'm starting to hear the theme music for Giligan's Island in my head.08:34
*** karimb has joined #openstack-ansible08:35
jgriffithsneutron was fast. Inredibly, it added itself to the endpoints too08:35
*** armaan has quit IRC08:36
*** armaan has joined #openstack-ansible08:37
openstackgerritMerged openstack/openstack-ansible-security master: Check for grub2 defaults file  https://review.openstack.org/46513008:40
*** chhavi has quit IRC08:40
*** chhavi has joined #openstack-ansible08:40
openstackgerritMerged openstack/openstack-ansible-repo_server master: Fix role gate tests for Ansible 2.3  https://review.openstack.org/46568508:45
openstackgerritMerged openstack/openstack-ansible-repo_server master: Add SUSE support  https://review.openstack.org/46568608:45
openstackgerritmelissaml proposed openstack/openstack-ansible master: Replaces uuid.uuid4 with uuidutils.generate_uuid()  https://review.openstack.org/46587608:46
*** vnogin has quit IRC08:54
odyssey4meandymccr https://review.openstack.org/46570208:56
openstackgerritmelissaml proposed openstack/openstack-ansible master: Replaces uuid.uuid4 with uuidutils.generate_uuid()  https://review.openstack.org/46587608:57
*** SerenaFeng has joined #openstack-ansible08:58
*** electrofelix has joined #openstack-ansible08:58
jgriffithsMaybe it's the glance failure that's breaking everything else. I just pasted the error https://pastebin.com/JhWFYvvC09:00
jgriffithsDo I need to configure NFS manually?09:00
odyssey4mejgriffiths yes, the nfs server needs to be pre-implemented and we don't have any plays to set it up09:01
jgriffithsThanks!09:01
odyssey4methis is because the NFS storage subsystem is often some sort of commercial device09:01
jgriffithsOh. Yeah. Forgot about that.09:01
jgriffithsOr I could configure ceph and use that.09:02
jgriffithsIs it better to use the ansible-ceph package and tie into it with openstack-ansible or is it better to combine them in openstack-ansible?09:04
odyssey4mehttps://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/app-ceph.html09:04
odyssey4meit's really up to you - I know that logan- is using the built-in integration to deploy the ceph cluster, but for RAX the ceph clusters are deployed and maintained by another team, so we only use the client-side integrations09:05
odyssey4meie the cluster is deployed seperately, and OSA is configured to use it with the ceph client configs09:06
jgriffithsWait. Do you work at RAX?09:08
odyssey4meyep09:09
*** drifterza has joined #openstack-ansible09:09
jgriffithsI ask because I used to work at the Castle  few years ago09:09
odyssey4meah09:09
odyssey4meI work out of the UK.09:10
jgriffithsI worked on the email team09:10
drifterzagreetings09:10
jgriffithsOh. The Whitehouse. :_09:10
odyssey4melol09:10
odyssey4measettle https://github.com/openstack/openstack-ansible/tree/master/doc/source/draft-operations-guide/openstack-operations09:14
*** esberglu has joined #openstack-ansible09:22
openstackgerritAlexandra Settle proposed openstack/openstack-ansible master: [ops-guide] Adding live migration section to ops-guide  https://review.openstack.org/46589409:23
asettleodyssey4me: *guilty shuffle*09:23
asettleIt's all deleted now :p09:24
*** thorst_afk has joined #openstack-ansible09:25
*** esberglu has quit IRC09:26
openstackgerritMerged openstack/openstack-ansible master: Pass package list as a list  https://review.openstack.org/46516909:30
*** udesale__ has joined #openstack-ansible09:31
*** udesale has quit IRC09:31
*** cNilesh has quit IRC09:42
*** karimb has quit IRC09:42
VAhlif you set is_metal. In which directory is then the configuration installed on the server? /etc/{servicename} ? The reason for the question is that I was able to installed Keystone and swift as is_metal. But I can not find the configuration files.09:44
*** thorst_afk has quit IRC09:44
*** pmannidi has quit IRC09:45
andymccrVAhl: should be in /etc/swift or /etc/keystone - are you sure it targeted the hosts properly in that case? - the only diff between is_metal: true vs false is that when it's true a container wont be created and the host that is targetted wont be configured like a container - otherwise it does the same set of tasks.09:53
*** yifei has quit IRC09:53
*** yifei has joined #openstack-ansible09:54
*** jamielennox is now known as jamielennox|away10:04
pjm6good morning10:05
pjm6anyone here have done live migration ?10:05
pjm6i have a problem, basically I put a cpu_mode: custom and cpu_model: SandyBridge10:05
pjm6when i migrate from compute01 to compute02 it works good10:05
pjm6but the other way arround no10:05
pjm6because tthe compute02 has more flags10:05
pjm6but by forcing the cpu_model SandyBridge this should be working, no?10:06
*** cuongnv has quit IRC10:08
*** alezzandro has joined #openstack-ansible10:11
*** stuartgr has joined #openstack-ansible10:12
pjm6btw: regarding live migration10:13
pjm6migrate works fine10:13
*** piliman974 has joined #openstack-ansible10:17
*** karimb has joined #openstack-ansible10:25
*** drifterza has quit IRC10:32
*** pbandark has quit IRC10:33
*** pbandark has joined #openstack-ansible10:34
*** armaan has quit IRC10:36
*** armaan has joined #openstack-ansible10:37
*** vnogin has joined #openstack-ansible10:38
*** armaan has quit IRC10:41
*** vnogin has quit IRC10:42
asettleHey yo evrardjp and andymccr can we have a mergy mergy here: https://review.openstack.org/#/c/465894/10:46
asettleI did a whoops10:46
asettleAnd forgot a file10:46
asettleNO FILE LEFT BEHIND10:46
*** openstackgerrit has quit IRC10:48
odyssey4measettle you're so demanding :p10:53
asettleYes, yes I am10:53
asettleBut I'm standing up for the poor file10:53
asettleThat got left behind10:53
asettleThat I didn't notice10:53
asettleBut we'll ignore that bit10:53
*** openstackgerrit has joined #openstack-ansible10:56
openstackgerritMerged openstack/openstack-ansible master: [ops-guide] Adding live migration section to ops-guide  https://review.openstack.org/46589410:56
*** armaan has joined #openstack-ansible10:58
*** vnogin_ has joined #openstack-ansible11:01
VAhlandymccr: When I was on lunch, I realize that I have only run setup_hosts.yml and I have not yet run setup_infrastructure nor setup_openstack. I guess that /etc/keystone will be installed durint setup_openstack. I still have some serious problem with setup_hosts. As I mention around  [10:19]. today . Stil I have not found any solution on that problem.11:02
evrardjpasettle: I'm too late, the mergy mergy is done11:02
evrardjpbut next time yeah!11:03
asettleTRhanks :)11:12
andymccrVAhl: correct the openstack bits are setup during the setup_openstack.yml11:14
andymccrVAhl: not sure what timezone you're in and cant see anything in my scrollback right now around what issues you're having with setup_hosts11:15
*** udesale__ has quit IRC11:15
DimGRandymccr :  9:56] VAhl:Hi! Got some problem with TASK [Wait for ssh to be available]. For log, config-file se http://paste.openstack.org/show/609879/.11:21
DimGR[11:19:56] VAhl:The problem is that some of the OS-service is created in virtualmachine that can not be access. So the task can not access the service.11:21
DimGR[11:19:56] VAhl:Why ansible/openstack sets the number it does. I do not know. Nor do I know how I can controll it in a better way. Except set cidr_networks: container 10.0.0.0/16  tunnel: 10.1.0.0/16 storage 10.2.0.0/1611:21
*** smatzek has joined #openstack-ansible11:22
*** smatzek has quit IRC11:23
*** smatzek has joined #openstack-ansible11:24
andymccrahh ok i see11:26
andymccrVAhl: so the 10.0.3.0/24 range that are used are for the lxcbr0 network. which defaults to that range11:27
andymccryou usually wouldnt have to override that - but since the main network you've set as your container network is 10.0.0.0/16 that means that range is used and routable by your eno2 network  (and as a result your br-mgmt etc)11:28
andymccri imagine that would be causing the issue11:28
andymccrthose dnsmasq-dhcp errors can pretty much be ignored since they are just for the lxcbr0. but the overlap of ip ranges can't be ignored.11:29
DimGRthe only time i had this wait for ssh to be available error was when my deployment host was not in the same network with the target hosts and this took me 4 months to figure it out11:30
DimGR:P11:30
VAhlandymccr: So how do I solve that routing problem? I got the impression that I need to config container/tunnel/storage.11:30
VAhlDimGR: I really do hope that this will not take as long time for me to solve.11:31
andymccrVAhl: quickly finding an example for you11:31
andymccrVAhl: https://github.com/openstack/openstack-ansible/blob/master/tests/roles/bootstrap-host/templates/user_variables.aio.yml.j2#L51-L5711:31
andymccrso in our AIO we set the range for lxcbr0 to be something different (since it overlaps with some of the hosts provided by the gate)11:31
andymccrbut the process is the same - change the 3 lxc_net_ vars - and hten make sure your lxcbr0 is on the appropriate new range.11:32
*** chuck__ is now known as zul11:32
andymccrwhich should not overlap with the others. alternatively change your container network range (and eno2 interface etc) to not overlap with the lxcbr0 interface11:33
andymccrnetworking is hard unfortunately! i wish we had a good way of writing better docs for that, or hving some mechanism to explain it better - usually once that's all good things are a lot smoother, and its essentially the setup bits before you use OSA that are the main issue there.11:34
VAhlandymccr: Indeed, the networking is the hard bit. The rest of the Openstack is "pretty easy and straight forward". I will take a closer look on that example and see if I can get the network up and running.11:36
DimGRandymccr the docs should also mention that the deployment ansible host should be in the same network11:37
*** thorst_afk has joined #openstack-ansible11:44
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-repo_server master: SUSE: Add OBS:devel:libraries:c_c++ repository  https://review.openstack.org/46592711:44
*** retreved has joined #openstack-ansible11:44
*** piliman974 has quit IRC11:48
*** piliman974 has joined #openstack-ansible11:50
andymccrDimGR: yeah that would be good - perhaps a cool thing would be a sort of test tool that checks the networks on the hosts and ensures that everything is ok in that sense11:55
andymccrlike a "run this first and check if your networking is setup correctly"11:56
DimGRi can write such a ,yml test11:57
DimGRand forward it to you11:57
odyssey4methat would be great - it'd be a nice addition to the openstack_hosts role I think11:57
andymccr^ this11:57
odyssey4meit'd become some sort of pre-requisites check11:58
DimGRok give me couple days11:58
odyssey4meawesome, thanks DimGR11:59
mgariepymorning everyone12:03
evrardjpmorning mgariepy12:03
evrardjpandymccr: ansible -m ping all12:04
*** qcrivera has joined #openstack-ansible12:04
andymccrevrardjp: not quite - testing the storage/vlan etc interfaces can each connect to each other12:04
*** qcrivera has left #openstack-ansible12:04
andymccrevrardjp: and things like checking network range overlap with the lxcbr0 network would be good too12:04
evrardjpoh you mean full connectivity test?12:04
andymccrevrardjp: yeah - the other one would not be so useful :P12:05
andymccrlike "your networking looks good" - because usually the issue is not just connecting to the hosts12:05
evrardjpwell the thing is we shouldn't assume anything12:05
evrardjpbut let's see how it goes12:05
DimGRthe issue is sshing in the containers12:05
andymccrits not about assuming, its about testing12:05
*** mcrafty has joined #openstack-ansible12:06
andymccrlike you can set your networking up however you want, but we need certain things - e.g. that your networks dont overlap, that you can connect to the container network from the deployment host, and that each host can talk to each other host on the appropriate networks12:06
odyssey4meI'd settle for a simple start of verifying that the bridges needed to achieve the deployment are present.12:08
andymccryeah that'd be a good start point12:08
*** sliver has quit IRC12:10
*** sliver has joined #openstack-ansible12:11
*** mcrafty has quit IRC12:11
jrosser_didnt that whole business of checking port 22 on the containers get changed anyway?12:11
jrosser_so the initial problem mentioned way up there ^^^^ may no longer be an issue12:12
odyssey4mejrosser_ for master it's using ansible to do the checks now12:12
odyssey4mebut for ocata/newton it's still doing a port 22 check, but the check now happens at the host of the container, instead of at the deployment host12:12
odyssey4methat should be implemented into the latest release12:13
jrosser_so the most important point is to be able to ssh to the container hosts12:13
jrosser_not necessarily to the containers themselves12:13
odyssey4meandymccr https://github.com/openstack/openstack-ansible-plugins/blob/master/connection/ssh.py#L8912:15
andymccrnice - so yeah true for master.12:16
*** SerenaFeng has quit IRC12:16
odyssey4meif someone wants to verify that https://github.com/openstack/openstack-ansible-plugins/commit/d8c0341ab8ad0e17f8e080ccc116ca1a8356363f works in ocata I'd love to see a backport12:16
odyssey4mewith that ssh will still have to be there for the connectivity test, but no container will ever be logged into via ssh12:17
andymccrdamnit ansible 2.2 :P12:17
*** drifterza has joined #openstack-ansible12:18
*** markvoelker has joined #openstack-ansible12:23
*** sliver has quit IRC12:29
*** sliver has joined #openstack-ansible12:29
*** woodard has quit IRC12:30
*** woodard has joined #openstack-ansible12:31
*** schwicht has joined #openstack-ansible12:31
*** schwicht has quit IRC12:36
*** cpuga has joined #openstack-ansible12:36
strattaoI’m trying to run my own custom playbook to install my own custom service, but I’m getting an error that a variable ‘keystone_service_adminurl’ is undefined.12:37
strattaoLooking at the other sample os_whatever projects, none of those seem to have that variable set within the project, but are able to use the variable.12:38
strattaoWhat do I need to do to make use of those global variables?12:39
*** schwicht has joined #openstack-ansible12:39
*** cpuga has quit IRC12:40
*** cpuga has joined #openstack-ansible12:41
*** askb has quit IRC12:41
evrardjpstrattao: have a look at the group vars, just in case12:44
evrardjpalso you can set an export to re-use the OSA group vars now.12:45
evrardjps/an export/an env var/12:45
*** jbadiapa has quit IRC12:45
*** jbadiapa has joined #openstack-ansible12:46
*** armaan_ has joined #openstack-ansible12:50
*** armaan__ has joined #openstack-ansible12:53
*** armaan has quit IRC12:53
*** mcrafty has joined #openstack-ansible12:54
*** kylek3h has joined #openstack-ansible12:54
*** schwicht has quit IRC12:54
*** armaan_ has quit IRC12:56
*** gouthamr has joined #openstack-ansible12:57
strattaoYeah, I’m a dummy. I didn’t have the variable set in my custom_service.conf file. evrardjp Thanks for being there to help talk me through it!12:57
openstackgerritStuart Grace proposed openstack/openstack-ansible master: Add var for environment used only inside playbooks  https://review.openstack.org/46595012:57
*** sliver has quit IRC12:57
*** karimb has quit IRC12:59
VAhlandymccr: I set the container network to 10.1.0.0/16, tunnel 10.2.0.0/16 storage to 10.3.0.0/16 and then I configure the eno2 to 10.10.0.10. I let the lxc-br0 be on 10.0.3.0. Then restarted the setup-hosts.yml. The only result is that every container now got an IP fro 10.1.x.y. And none of them is accessible from the computer. The lxc is started but I can not reached them from the computer.13:00
*** esberglu has joined #openstack-ansible13:00
evrardjpVAhl: these are large networks!13:01
VAhlandymccr: It seems that I can login to them, but I do not know the pwd for admin account. I have tested with the localmachines admin account, the pwd for the Openstack (user_secret.yml). Neither is working. Kinda interesting.13:01
*** esberglu has quit IRC13:01
*** esberglu has joined #openstack-ansible13:01
openstackgerritStuart Grace proposed openstack/openstack-ansible master: Add var for environment used only inside playbooks  https://review.openstack.org/46595013:01
*** esberglu has quit IRC13:01
*** fguillot has joined #openstack-ansible13:01
evrardjpVAhl: technically you can connect on the machines with ssh and the key available on your deploy node13:01
VAhlIndeed it is. We are planning for having a really big Openstack in place.13:01
VAhlI can not ping the node :-/. Nor traceroute to them.13:02
evrardjpVAhl: in that case, you may want to do the networking differently13:02
evrardjpbecause you'll really have a large broadcast domain13:02
evrardjpwell I don't know what you call really big13:02
evrardjp65535 nodes is indeed big.13:02
*** drifterza has quit IRC13:03
evrardjpbut imagine the mesh!13:03
evrardjp:p13:03
VAhlThe first phase we will have around 60 nodes. Then we have a five computer halls that needs to be upgraded from another virtualization13:03
evrardjpthe lxcbr should only be used for containers to "get out" (that's where the nat happens by default)13:04
evrardjpVAhl: you may want to separate a little differently instead of briding everything on the same l213:05
evrardjpYou can add static routes in OSA13:05
evrardjpand if you are ready to extend OSA, you can even think of using an IGP.13:06
odyssey4meVAhl I think you may wish to take a peek at https://review.openstack.org/44885013:06
VAhlOK. to static routes. I guess for the first phase. Perhaps I should do 10.0.0.0/2513:06
VAhlThat should give about 128 nodes. Which will be more than enought for the first test phase.13:06
openstackgerritMerged openstack/openstack-ansible-repo_server master: SUSE: Add OBS:devel:libraries:c_c++ repository  https://review.openstack.org/46592713:06
evrardjpVAhl: so, as a summary, if you reconfigure the container network, it should be alright13:07
*** piliman974 has quit IRC13:07
*** schwicht has joined #openstack-ansible13:08
jrosser_odyssey4me: i still think its a little bit ugly how https://review.openstack.org/#/c/448850/ interleaves the subnets13:08
evrardjpVAhl: try connecting from one node, lxc-attach to a container, and see its IP13:08
VAhlShould I set it to the same as lxc-br0? in a previous setting, all node that had IP within that network. They could be accessed.13:08
jrosser_as VAhl's example shows you'd ideally start with large contiguous networks and then subnet them13:08
evrardjpand ping another container IP from there13:08
evrardjpI don't remember what we do by default to be honest.13:09
odyssey4mejrosser_ I guess what I like is having the options available to take whatever approach suits your needs.13:10
odyssey4mewhat that review does show, though, is how to implement the static routes13:10
jrosser_also, the existing documentation has large /22, so that patch is different to current.....13:10
*** qcrivera has joined #openstack-ansible13:11
evrardjpVAhl: if we don't override it in group vars, the lxcbr0 is indeed in 10.0.3.0/24 with nat13:11
qcriveraopenstack-ansible13:11
jrosser_yes to the static routes, which i think are going to get out of hand as i commented13:11
evrardjpso yes, if you have br-mgmt that overlaps that doesn't sound good13:11
evrardjpjrosser_: I think having large broadcast domain is terrible.13:12
evrardjpbut it simplifies a lot of things indeed.13:13
qcriveraHi I'm dedploying opensatack-ansible, stable-ocata branch, with 3 infra nodes + 3 compute. I am using the example production openstack_user_config.yml in the deployment guide13:13
evrardjpI guess it all depends on how you are willing to do your l2. But for me l2 is harder than l3.13:13
jrosser_evrardjp: agreed, just imho the L3 example would be way better if the subnets were contiguous by function13:14
jrosser_then the need to have fully meshed static routes just goes away13:14
qcriveramy question is if this deployment will create the necessary linux bridges on the target hosts or do I need to create this separately13:14
qcrivera?13:14
evrardjpjrosser_: which example?13:14
jrosser_and you wouldnt then have to add a new static route literally everywhere when adding a new pod13:14
jrosser_https://review.openstack.org/#/c/448850/13:14
*** karimb has joined #openstack-ansible13:15
evrardjpI need to have a look at this patch13:15
evrardjpStarred.13:15
*** pranavb has quit IRC13:16
*** cathrich_ has joined #openstack-ansible13:16
*** klamath has joined #openstack-ansible13:17
*** klamath has quit IRC13:17
*** klamath has joined #openstack-ansible13:18
*** esberglu has joined #openstack-ansible13:18
*** esberglu has quit IRC13:18
*** cathrichardson has quit IRC13:18
*** esberglu has joined #openstack-ansible13:18
openstackgerritMerged openstack/openstack-ansible-os_monasca stable/ocata: Fix for lookup and get_url occuring in different places  https://review.openstack.org/46573713:19
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Improve the execution time  https://review.openstack.org/46570213:21
*** karimb has quit IRC13:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security stable/ocata: Check for grub2 defaults file  https://review.openstack.org/46596513:25
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security stable/ocata: Configure AIDE before initial run  https://review.openstack.org/46596713:27
*** smatzek has quit IRC13:29
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security master: Fix numbering in AIDE config block  https://review.openstack.org/46597013:30
*** lbragstad has joined #openstack-ansible13:48
*** jamielennox|away is now known as jamielennox13:49
*** cjloader_ has joined #openstack-ansible13:59
*** cjloader_ has quit IRC14:00
*** armaan__ has quit IRC14:00
*** cjloader_ has joined #openstack-ansible14:00
*** armaan has joined #openstack-ansible14:00
*** askb has joined #openstack-ansible14:07
*** askb has quit IRC14:09
*** smatzek has joined #openstack-ansible14:10
*** drifterza has joined #openstack-ansible14:16
*** armaan has quit IRC14:20
*** armaan has joined #openstack-ansible14:20
*** piliman974 has joined #openstack-ansible14:22
*** shardy has quit IRC14:31
*** galstrom_zzz is now known as galstrom14:31
*** shardy has joined #openstack-ansible14:32
cloudnullmornings14:34
mgariepymorning cloudnull14:34
piliman974Hi all.14:36
cloudnullhow goes it ?14:36
VAhlevrardjp: When I login to a container (keystone_container) and then do an ifconfig. I get the following output. http://paste.openstack.org/show/609921/. What I can see no IP4 number have been registered on either interface (eth0, eth1). That could be the reason why I can not connect to the lxc. However, the question will then be. Why has it not been set. Especially since the /etc/hosts have register the ip-number for that container to 10.0.14:36
VAhl3.4214:36
piliman974Having an HTTP 300 on a new install using OSA. "Status code was not [300]: An unknown error occurred: ''"14:37
spotzFYI at Google I/O someone else needs to lead today's meeting:)14:39
*** perniciouscaffei has joined #openstack-ansible14:48
*** orange_juluis has joined #openstack-ansible14:49
openstackgerritMerged openstack/openstack-ansible-security master: Fix numbering in AIDE config block  https://review.openstack.org/46597014:49
openstackgerritMerged openstack/openstack-ansible-security stable/ocata: Check for grub2 defaults file  https://review.openstack.org/46596514:49
openstackgerritMerged openstack/openstack-ansible-security stable/ocata: Configure AIDE before initial run  https://review.openstack.org/46596714:49
orange_juluisAnybody ever attempt an openstack-ansible offline installation? (I apologize if this isn't the correct place, https://wiki.openstack.org/wiki/IRC pointed me here for openstack-ansible discussions)14:50
*** shardy has quit IRC14:50
mgariepyorange_juluis, maybe this would help: https://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/app-limited-connectivity.html14:52
*** karimb has joined #openstack-ansible14:53
*** shardy has joined #openstack-ansible14:53
orange_juluisThat does outline a decent amount of things. I was just wondering if anybody knew of any "gotchas". We have cloned Pypi and most of the required repos, but there is always going to be something14:53
mgariepysome have but i'm not quite sure who exactly14:54
mhaydenso i switched from spice -> novnc, but for some reason, the console won't accept keyboard input :/15:03
*** tobberyd_ has joined #openstack-ansible15:04
mhaydenam i missing a step? the ctrl-alt-del button works fine15:04
*** rcarrillocruz has quit IRC15:05
*** tobberydberg has quit IRC15:07
*** Oku_OS is now known as Oku_OS-away15:07
logan-orange_juluis: my hosts and containers are not internet connected with the exception of my public LB endpoint and the repo container. the "offline" hosts/containers do have proxy access to the internet to ease the pain however I did run proxy-less (private mirrored content only) in liberty and mitaka.15:08
logan-i've shared a few playbooks in the past that i use for mirroring extra content to the repo container, would be happy to dig those up15:09
*** tobberyd_ has quit IRC15:09
*** armaan has quit IRC15:12
orange_juluislogan-: That would be great. We will be attempting a completely airgapped installation today and I know we will run into snags, but the more we can get ahead of that the better15:13
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Bootstrap Keystone with versionless endpoints  https://review.openstack.org/46288015:16
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-ops master: [WIP] Make possible to start leap from K  https://review.openstack.org/46365915:17
logan-orange_juluis: i think this covers most of it https://gist.github.com/Logan2211/8793868fc087126f4c7bcb6436c6a06e15:19
*** manheim_ has quit IRC15:21
logan-it is set up to intentionally break the mirror playbook anytime the upstream OSA role changes its rabbitmq or xtrabackup upstream url/sha. only the url is overridden to the local repo server, so if the upstream merges a package update, you should catch it in CI since you'll still be mirroring the old version to repo and the SHA from the role won't match. so it is something we identify in CI before merging OSA sha bumps15:23
orange_juluislogan-: Thanks a lot! We will be rolling with CentOS so I'll have to make some changes, but this will definitely get me going.15:26
*** fyu has joined #openstack-ansible15:29
*** shardy has quit IRC15:29
*** fergus has quit IRC15:29
*** fyu is now known as fergus15:29
andymccrcloudnull, DimGR, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum,15:30
andymccrdarrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza, sc68cal - weekly meeting in #openstack-meeting-4 in 30 mins!15:30
*** shardy has joined #openstack-ansible15:31
*** galstrom is now known as galstrom_zzz15:32
*** piliman974 has quit IRC15:36
*** perniciouscaffei has quit IRC15:38
*** piliman974 has joined #openstack-ansible15:42
*** jamesdenton has joined #openstack-ansible15:45
*** markus_z has quit IRC15:45
xdfilChange the avatar for OSA. THe bull is stupid. Use a Domino.15:53
*** tobberydberg has joined #openstack-ansible15:56
andymccrxdfil: it's a buffalo!15:57
*** sliver has joined #openstack-ansible15:58
andymccrcloudnull, DimGR, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum,15:59
andymccrdarrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza, sc68cal - meeting starting in #openstack-meeting-4 in a minute :D15:59
*** mcrafty has quit IRC16:00
*** tobberydberg has quit IRC16:00
*** ThiagoCMC has joined #openstack-ansible16:02
ThiagoCMCHey guys16:02
*** rcarrillocruz has joined #openstack-ansible16:02
ThiagoCMCI'm trying to run: "time openstack-ansible setup-hosts.yml" within my MaaS environment, and the following error is appearing: Please login as the user \"ubuntu\" rather than the user \"root\"16:03
ThiagoCMCWhere should I change the OSA setup to use "ubuntu" user instead?16:03
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-ops master: [WIP] Make possible to start leap from K  https://review.openstack.org/46365916:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova master: Remove default for nova_console_keymap  https://review.openstack.org/46603216:04
logan-ThiagoCMC: currently the OSA playbooks expect to always authenticate to the root user on the remote host.16:08
ThiagoCMCOuch16:08
*** weezS has joined #openstack-ansible16:09
logan-you could modify /root/.ssh/authorized_keys to add the key OSA is using to connect with and also remove that message if desired16:09
logan-I think adding the key is sufficient to allow auth even without removing the warning message iirc16:10
ThiagoCMCI'm surprised that there is no way to configure "ansible_user" in OSA... Can you confirm that?16:11
ThiagoCMCI don't want to enable root login via ssh.16:11
logan-the way things stand now yes it requires root login although you could allow key-only auth to root. here is what causes this requirement to exist: https://github.com/openstack/openstack-ansible/blob/master/playbooks/openstack-hosts-setup.yml#L19 (in all of the playbooks)16:13
*** mcrafty has joined #openstack-ansible16:14
ThiagoCMCOk, thanks!16:15
logan-there has been talk about removing the requirement in the past however I am not aware of any patches up for review yet, but I dont think theres a reason the change couldn't take place this cycle if someone put in the work.16:15
jrosser_do you know why originally it was root only?16:15
jrosser_i was digging at the ssh connection plugin yesterday and that looked feasable to add support for become:16:16
odyssey4mejrosser_ because it was simpler ;)16:17
*** sliver has quit IRC16:17
jrosser_good reason :)16:17
logan-haha, yeah its been that way as long as ive been using OSA. but removing the hard coded user in the playbooks and implementing a default ansible_user=root in group_vars/all shouldnt be too difficult. then it would give ops an easy way to start testing different strategies like become (probably some work still needed in the connection plugin for that to work)16:18
jrosser_there was a simple method in the parent class that would wrap the command in whatever become: method was set16:19
jrosser_which was basically a one liner16:20
*** sliver has joined #openstack-ansible16:20
jrosser_and as usual a failed at having an easy way to test anything16:20
*** karimb has quit IRC16:21
*** winggundamth has quit IRC16:21
*** vnogin_ has quit IRC16:21
*** mcrafty has quit IRC16:23
*** karimb has joined #openstack-ansible16:23
*** mcrafty has joined #openstack-ansible16:23
*** manheim_ has joined #openstack-ansible16:24
*** sliver has quit IRC16:25
*** perniciouscaffei has joined #openstack-ansible16:26
*** Mannheim has joined #openstack-ansible16:27
*** manheim_ has quit IRC16:29
strattaoDo we have any SQLAlchemy gurus here?16:29
*** drifterza has quit IRC16:30
strattaoactually, I don’t even need a guru, just someone who knows it better than me. The bar isn’t very high :)16:30
*** perniciouscaffei has quit IRC16:33
*** pcaruana has quit IRC16:40
*** smatzek_ has joined #openstack-ansible16:42
*** smatzek has quit IRC16:46
*** weezS has quit IRC16:48
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-lxc_container_create master: Write MAC addresses to local facts folder  https://review.openstack.org/46188416:48
palendae^ evrardjp16:49
evrardjpon it16:49
evrardjplooks good16:50
palendaeThanks!16:53
palendaeWould appreciate eyes on this, too https://review.openstack.org/#/c/464703/16:53
evrardjpinteresting16:57
odyssey4mepalendae evrardjp I'm a little wary of adding more meta groups in the dynamic inventory instead of implementing it in something that is easier to find and understand.16:59
palendaeSure16:59
odyssey4meevrardjp is there a way we can implement something like that in group vars?16:59
evrardjpnope16:59
palendaeSo just go to the env.d and add them?17:00
palendaeBecause I'm not super happy with it either17:00
odyssey4meenv.d is just as bad as the dynamic inventory17:00
evrardjpwe are not adding vars, we are doing an inventory17:00
evrardjpadd_hosts is the live version of it17:00
evrardjpbut IMO this is the place of the inventory17:00
odyssey4meyeah17:00
evrardjpwe could have a simple file17:00
palendaehttps://gist.github.com/nrb/9240d6759f080efc218460aab9ae2cdb -> the hosts line there is what I was trying to correct17:00
evrardjpthat is as simple as17:00
palendaeI want containers that aren't infrastructure and not utility17:01
evrardjp[api_nodes:children] *_api_containers17:01
evrardjpand add this file by default17:01
palendaeevrardjp: Ah, yeah17:01
palendaeThat's true17:01
palendaeI'll give that a shot17:01
palendaeIn the hosts field of a playbook, variable expansion doesn't work on groups :(17:01
evrardjpthat's setting a precedent for static inventory on top of our dynamic inventory17:01
palendaeI tried to do *_api_containers, but Ansible failed to find it17:01
evrardjpdoable IMO17:02
evrardjppalendae: yes17:02
odyssey4methe openstack stuff is already in a group called 'os-infra_containers'17:02
evrardjpyou need to add it first as empty before adding a dynamic one IIRC17:02
odyssey4meand the infra stuff is already in a group called 'shared-infra_containers'17:02
palendaeHmm17:02
palendaeOk, let me double check an existing inventory then17:02
palendaeBefore I push further with that17:02
evrardjpin any way, I understand the willingness to have a group for that17:03
odyssey4meBUT I love the idea of being able to use the ini inventory format alonside our dynamic inventory17:03
evrardjphaha :)17:03
palendaeIf it comes to needing that, I'll try to make the ini thing work over a new metagroup17:03
evrardjp-i filename17:03
odyssey4meit would potentially give us a slow migration path to something more easily understood by anyone doing ansible17:03
evrardjpso easy :p17:03
evrardjpoh we don't even need that17:03
evrardjpI'm pretty sure if we put it into our inventory/ folder it would work OOTB17:04
palendaeRight17:04
palendaeParallel to the script and env.d17:04
evrardjpyou should probably try to have it in a file for a different group, try to use it, and iterate over it17:04
palendaeYeah17:04
evrardjpshouldn't take too long to figure out17:04
evrardjp:p17:04
palendaeI'll take a look at that later17:04
palendaeThanks for the feedback guys; I wasn't sold on doing it that way, anyway17:05
evrardjphaha17:05
palendaeOnce I had to special case to get keystone included, I became wary17:05
palendaePlus it's "hiding" another group inside that Python code17:05
odyssey4mewell, if we can ditch the env.d files over time to an ini format, I'm completely game17:05
palendaeSure17:05
odyssey4meI would sincerely love to work towards containers simply being services on the hosts, rather than hosts in the ansible inventory17:06
odyssey4meie properties of the host, not hosts themselves17:06
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova master: Set default keymap to be blank.  https://review.openstack.org/46605417:07
odyssey4mewe could potentially drop their details in local facts when we create the container, then they're easily read and used17:07
odyssey4methat would almost completely do away with the dynamic inventory17:07
palendaeAgreed17:07
*** fergus has quit IRC17:08
palendaeI'd like to ask some service to make them and give us info back17:08
odyssey4meall we'd then need to do is figure out how to allocate IP's17:08
palendaeThe dynamic inventory script is basically there because LXD wasn't ready and we needed a way to do DNS and DHCP17:08
odyssey4mebut that could be done by something smaller and simpler17:08
*** fergus has joined #openstack-ansible17:08
palendaeIt could be done by DHCP :D17:08
odyssey4meor we could allocate a range to each host, then let DHCP on the host use that range17:09
odyssey4meso yes, DHCP - but localised, much like the lxcbr017:09
palendaeRight17:09
palendaeCause lxc uses dnsmasq17:09
palendaeWe'd still need a way to query that if we SSH in17:09
palendaeThough if we use lxc-attach for all the work, we'd just need the name17:09
odyssey4mewell, we don't need to ssh in17:09
odyssey4mewe already don't, at all in master17:09
palendaeCool17:10
odyssey4mehmm, perhaps I should take some holiday and prototype this idea ;)17:10
palendaeSo, possibly have it look something like hostvars['infra1']['containers17:10
palendaeSo, possibly have it look something like hostvars['infra1']['containers'] = {... dict with container info ...}17:10
odyssey4meyep, just a list of dicts I guess17:11
*** fergus has quit IRC17:12
*** sliver has joined #openstack-ansible17:15
*** fergus has joined #openstack-ansible17:16
*** mcrafty has quit IRC17:17
*** mcrafty has joined #openstack-ansible17:18
*** sliver has quit IRC17:19
evrardjpcontainers should indeed be a property of the host if we stick to low tech things like systemd-nspawn or lxc17:20
*** alezzandro has quit IRC17:22
*** retreved_ has joined #openstack-ansible17:26
*** retreved_ has quit IRC17:27
*** retreved_ has joined #openstack-ansible17:27
evrardjpmhayden: are you there?17:28
*** retreved has quit IRC17:29
*** retreved has joined #openstack-ansible17:30
*** retreved_ has quit IRC17:30
*** retreved has quit IRC17:35
*** manheim_ has joined #openstack-ansible17:36
*** sliver has joined #openstack-ansible17:40
*** mcrafty has quit IRC17:42
*** galstrom_zzz is now known as galstrom17:53
*** mcrafty has joined #openstack-ansible17:53
*** sliver has quit IRC17:57
mhaydenhere!17:57
mhaydenandymccr: https://review.openstack.org/#/c/466032/17:59
*** armaan has joined #openstack-ansible18:01
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Move keystone and glance to a single  https://review.openstack.org/46606218:01
*** stuartgr has quit IRC18:07
*** retreved has joined #openstack-ansible18:08
*** hamza has joined #openstack-ansible18:10
*** ThiagoCMC has quit IRC18:11
*** manheim_ has quit IRC18:12
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Move keystone and glance to a single file  https://review.openstack.org/46606218:14
*** retreved_ has joined #openstack-ansible18:15
*** retreved has quit IRC18:17
*** markvoelker has quit IRC18:19
*** markvoelker has joined #openstack-ansible18:20
*** zul has quit IRC18:22
*** smatzek_ has quit IRC18:23
*** chhavi has quit IRC18:24
*** markvoelker has quit IRC18:24
*** electrofelix has quit IRC18:25
*** weezS has joined #openstack-ansible18:27
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Move keystone and glance to a single file  https://review.openstack.org/46606218:29
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Move keystone and glance to a single file  https://review.openstack.org/46606218:32
*** marst has joined #openstack-ansible18:32
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607218:35
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607218:36
*** armaan has quit IRC18:38
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova master: Remove default for nova_console_keymap  https://review.openstack.org/46603218:39
*** zul has joined #openstack-ansible18:43
*** thorst_afk has quit IRC18:43
*** fergus has quit IRC18:45
*** fergus has joined #openstack-ansible18:54
*** cathrich_ has quit IRC18:59
*** cathrichardson has joined #openstack-ansible19:00
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-ops master: [WIP] Make possible to start leap from K  https://review.openstack.org/46365919:05
*** karimb has quit IRC19:12
*** karimb has joined #openstack-ansible19:13
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607219:16
*** schwicht has quit IRC19:17
*** manheim_ has joined #openstack-ansible19:19
*** schwicht has joined #openstack-ansible19:20
*** zul has quit IRC19:24
*** gouthamr has quit IRC19:37
*** hamza has quit IRC19:42
xdfilI need to stop OSA from installing LVM219:46
xdfilI'm not sure where it's happening19:46
xdfilI just got done removing it from my hypervisors19:47
xdfiland now its back19:47
xdfilLVM causes lots of problems for me19:48
mgariepyxdfil, https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/vars/ubuntu-16.04.yml#L6819:50
xdfilmgariepy: you make it look so easy19:51
xdfilthanks19:51
*** redaudit has joined #openstack-ansible19:51
xdfilmgariepy: where are the "known problem packages" I've seen that fly by the screen while running plays19:52
xdfilI want to make sure its uninstalled19:52
xdfilevery play19:52
mgariepysomes roles have that, to fix stuff on upgrades.19:53
xdfilIts a pretty big issue, I can't be the only one to experience it19:53
xdfilif you use iscsi block storage19:54
xdfiland the guest volume has LVM, the host reads the LVM data19:54
xdfiland it messes up live migrations19:54
mgariepyhmm interesting19:54
mgariepycan you fill a bug ?19:54
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607219:54
xdfiland I also notice the host "unmounting swap volume"19:54
xdfilso the host is seeing guest swap volumes and thinking it can use them19:55
xdfilluckily my hosts never swap19:55
xdfilI will gather the details and report something later19:55
mgariepyxdfil, thanks19:56
*** gouthamr has joined #openstack-ansible19:56
xdfillvm filters aren;t really an option either, so the best thing to do is remove lvm2 from the system entirely19:56
mgariepybug tiage happens on tuesday19:56
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607219:57
*** gouthamr has quit IRC19:57
*** zul has joined #openstack-ansible19:58
*** manheim_ has quit IRC20:02
*** orange_juluis has quit IRC20:04
*** zul has quit IRC20:10
*** esberglu has quit IRC20:18
prometheanfireanyone having stalls on wait for ssh after container create? I can ssh in manually just fine20:23
openstackgerritMerged openstack/openstack-ansible-os_nova master: Remove default for nova_console_keymap  https://review.openstack.org/46603220:23
prometheanfirecloudnull: you were saying a couple of days ago something about having to restart networking for some reason?20:25
*** zul has joined #openstack-ansible20:28
cloudnullrun lxc-veth-check20:29
*** gouthamr has joined #openstack-ansible20:29
cloudnulli think that's the name20:29
prometheanfireit looks like it's the wrong network20:29
prometheanfireit's trying to use 10.29, not 172.2920:29
prometheanfirecloudnull: do you know why the xenial stuff defines that twice, and diferently for each?20:30
*** esberglu has joined #openstack-ansible20:30
cloudnulli do not20:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova stable/ocata: Remove default for nova_console_keymap  https://review.openstack.org/46609920:31
prometheanfirehttps://github.com/openstack/openstack-ansible-ops/blob/master/multi-node-aio-xenial-ansible/variables.sh#L3 ya, for some reason that's defined20:32
*** fguillot has quit IRC20:32
*** pbandark has quit IRC20:33
*** schwicht has quit IRC20:36
*** schwicht has joined #openstack-ansible20:37
*** thorst_afk has joined #openstack-ansible20:39
*** thorst_afk has quit IRC20:40
*** zul has quit IRC20:41
*** schwicht has quit IRC20:46
*** thorst_afk has joined #openstack-ansible20:50
*** hamzy has quit IRC20:52
openstackgerritweezer su proposed openstack/openstack-ansible-ops master: [WIP] Make possible to start leap from K  https://review.openstack.org/46365920:52
openstackgerritweezer su proposed openstack/openstack-ansible-ops master: [WIP] Make possible to start leap from K  https://review.openstack.org/46365920:53
palendaeIf people are interested in having a tool for doing some benchmarks against a cluster, I'd appreciate reviews on https://review.openstack.org/#/c/466062/420:54
jrosser_prometheanfire: i think that the -zenial multinode has a different NETWORK_BASE by accident20:56
prometheanfirejrosser_: ya, I may submit a review to fix once I'm done here20:56
jrosser_the hosts we did that work on are on a 172.29 network themselves which causes all sorts of horror20:57
prometheanfirealso, if you disable setup host then the pxe setup fails because it's expecting a var that's set in setup-host20:57
jrosser_which is precisely why we put the ability inthere to change it20:57
*** schwicht has joined #openstack-ansible20:57
jrosser_nice to see that being used anyway :) could do with some more eyes on it20:58
*** retreved_ has quit IRC21:01
*** qcrivera has quit IRC21:03
*** admin0 has quit IRC21:11
*** jamesdenton has quit IRC21:12
*** jhesketh_ has joined #openstack-ansible21:14
*** karimb has quit IRC21:16
*** jhesketh has quit IRC21:18
*** evrardjp[m] has quit IRC21:18
*** neillc[m] has quit IRC21:18
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Implement CLI test picker  https://review.openstack.org/46610821:21
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Implement CLI test picker  https://review.openstack.org/46610821:24
*** clickboom has joined #openstack-ansible21:27
*** evrardjp[m] has joined #openstack-ansible21:28
*** neillc[m] has joined #openstack-ansible21:29
*** cpuga has quit IRC21:29
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-ops master: [WIP] Make possible to start leap from K  https://review.openstack.org/46365921:29
*** clickboom has quit IRC21:32
klamathanyone have a newer version of this? https://gist.github.com/odyssey4me/4af6a759b7ce1a4df9b36df412f57f0a21:34
klamathim trying to use newton with a wildcard cert and getting weird behavior, swift and horizon do not auth correctly atm21:35
klamathor is very hit and miss with swift calls21:35
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-ops master: [WIP] Make possible to start leap from K  https://review.openstack.org/46365921:37
*** gouthamr has quit IRC21:37
*** schwicht has quit IRC21:41
*** thorst_afk has quit IRC21:47
*** galstrom is now known as galstrom_zzz21:48
*** cjloader_ has quit IRC21:48
*** manheim_ has joined #openstack-ansible21:54
*** cpuga has joined #openstack-ansible21:57
*** manheim_ has quit IRC21:58
*** galstrom_zzz is now known as galstrom22:05
*** Jeffrey4l_ has quit IRC22:08
*** schwicht has joined #openstack-ansible22:10
*** weezS has quit IRC22:13
*** kylek3h has quit IRC22:13
*** Jeffrey4l has joined #openstack-ansible22:13
*** askb has joined #openstack-ansible22:15
*** galstrom is now known as galstrom_zzz22:26
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607222:34
cloudnullklamath: swift is not authing to keystone ?22:34
cloudnullneither horizon ?22:35
*** schwicht has quit IRC22:35
*** schwicht has joined #openstack-ansible22:36
*** schwicht has quit IRC22:42
*** thorst_afk has joined #openstack-ansible22:48
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Implement CLI test picker  https://review.openstack.org/46610822:54
*** weezS has joined #openstack-ansible22:54
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Implement CLI test picker  https://review.openstack.org/46610822:56
klamathcloudnull: does not appear so, im trying to add certs for rabbitmq right now and it seems that swift auth is working at the moment, playbooks still running22:57
klamathill see if the german and login and figure it out tonight23:00
klamaths/and/can23:00
*** gouthamr has joined #openstack-ansible23:01
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Implement CLI test picker  https://review.openstack.org/46610823:04
*** thorst_afk has quit IRC23:06
*** Mannheim has quit IRC23:08
*** pmannidi has joined #openstack-ansible23:11
*** gouthamr has quit IRC23:13
*** klamath has quit IRC23:13
*** weezS has quit IRC23:16
*** schwicht has joined #openstack-ansible23:16
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Implement CLI test picker  https://review.openstack.org/46610823:18
*** manheim_ has joined #openstack-ansible23:21
*** manheim_ has quit IRC23:25
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-ops master: Implement CLI test picker  https://review.openstack.org/46610823:31
*** schwicht has quit IRC23:35
*** esberglu has quit IRC23:37
*** manheim_ has joined #openstack-ansible23:39
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607223:45
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova master: Streamline task execution  https://review.openstack.org/46607223:46
*** schwicht has joined #openstack-ansible23:49
*** schwicht has quit IRC23:49

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!