| *** charcol has quit IRC | 00:00 | |
| *** acormier has quit IRC | 00:07 | |
| *** japestinho has joined #openstack-ansible | 00:13 | |
| *** chyka has joined #openstack-ansible | 00:14 | |
| *** fergus has joined #openstack-ansible | 00:16 | |
| *** fyu has joined #openstack-ansible | 00:27 | |
| *** fergus has quit IRC | 00:27 | |
| *** fyu is now known as fergus | 00:27 | |
| *** thorst has joined #openstack-ansible | 00:27 | |
| *** thorst has quit IRC | 00:27 | |
| *** cuongnv has joined #openstack-ansible | 00:48 | |
| *** qcrivera has joined #openstack-ansible | 01:18 | |
| *** charcol has joined #openstack-ansible | 01:31 | |
| *** markvoelker has joined #openstack-ansible | 01:36 | |
| *** cuongnv_ has joined #openstack-ansible | 01:37 | |
| *** cuongnv has quit IRC | 01:39 | |
| *** qcrivera has quit IRC | 01:54 | |
| *** qcrivera has joined #openstack-ansible | 01:59 | |
| *** chyka has quit IRC | 02:08 | |
| *** markvoelker has quit IRC | 02:08 | |
| *** cuongnv_ is now known as cuongnv | 02:12 | |
| *** lbragstad has joined #openstack-ansible | 02:17 | |
| *** qcrivera has quit IRC | 02:20 | |
| *** thorst has joined #openstack-ansible | 02:28 | |
| *** thorst has quit IRC | 02:33 | |
| *** japestinho has quit IRC | 02:43 | |
| *** charcol has quit IRC | 02:44 | |
| *** dixiaoli has joined #openstack-ansible | 02:52 | |
| *** markvoelker has joined #openstack-ansible | 03:06 | |
| *** yifei has quit IRC | 03:23 | |
| *** yifei has joined #openstack-ansible | 03:23 | |
| *** charcol has joined #openstack-ansible | 03:23 | |
| *** yifei has quit IRC | 03:24 | |
| *** gkadam has joined #openstack-ansible | 03:24 | |
| *** yifei has joined #openstack-ansible | 03:25 | |
| *** gkadam has quit IRC | 03:26 | |
| *** gkadam has joined #openstack-ansible | 03:27 | |
| *** markvoelker has quit IRC | 03:39 | |
| *** lbragstad has quit IRC | 03:55 | |
| *** thorst has joined #openstack-ansible | 03:58 | |
| *** thorst has quit IRC | 04:03 | |
| *** chhavi has joined #openstack-ansible | 04:04 | |
| *** cNilesh has joined #openstack-ansible | 04:06 | |
| *** hybridpollo has quit IRC | 04:07 | |
| *** evrardjp[m] has quit IRC | 04:11 | |
| *** evrardjp[m] has joined #openstack-ansible | 04:12 | |
| *** evrardjp[m] has joined #openstack-ansible | 04:12 | |
| *** charcol has quit IRC | 04:16 | |
| *** charcol has joined #openstack-ansible | 04:32 | |
| *** markvoelker has joined #openstack-ansible | 04:36 | |
| *** chhavi has quit IRC | 04:38 | |
| *** chhavi has joined #openstack-ansible | 04:41 | |
| *** chhavi has quit IRC | 04:44 | |
| *** dixiaoli has quit IRC | 05:00 | |
| *** markvoelker has quit IRC | 05:08 | |
| *** dixiaoli has joined #openstack-ansible | 05:27 | |
| *** tobberydberg has joined #openstack-ansible | 05:34 | |
| *** udesale has joined #openstack-ansible | 05:46 | |
| *** Oku_OS-away is now known as Oku_OS | 05:56 | |
| *** tobberyd_ has joined #openstack-ansible | 05:56 | |
| *** thorst has joined #openstack-ansible | 05:59 | |
| *** tobberydberg has quit IRC | 05:59 | |
| *** thorst has quit IRC | 06:05 | |
| *** markvoelker has joined #openstack-ansible | 06:05 | |
| *** tobberyd_ is now known as tobberydberg | 06:17 | |
| *** aszeszo has joined #openstack-ansible | 06:23 | |
| *** markvoelker has quit IRC | 06:39 | |
| *** markus_z has joined #openstack-ansible | 06:42 | |
| *** cshen_ has joined #openstack-ansible | 06:43 | |
| *** armaan has quit IRC | 06:45 | |
| *** armaan has joined #openstack-ansible | 06:45 | |
| *** udesale__ has joined #openstack-ansible | 06:49 | |
| *** udesale has quit IRC | 06:49 | |
| *** charcol has quit IRC | 06:52 | |
| *** tobberydberg has quit IRC | 06:53 | |
| *** tobberydberg has joined #openstack-ansible | 06:53 | |
| *** tobberydberg has quit IRC | 06:54 | |
| *** tobberydberg has joined #openstack-ansible | 06:55 | |
| *** tobberydberg has quit IRC | 06:59 | |
| *** tobberydberg has joined #openstack-ansible | 06:59 | |
| *** yolanda_ has joined #openstack-ansible | 07:01 | |
| *** mbuil has joined #openstack-ansible | 07:01 | |
| *** tobberydberg has quit IRC | 07:07 | |
| *** tobberydberg has joined #openstack-ansible | 07:07 | |
| *** tobberydberg has quit IRC | 07:08 | |
| *** tobberydberg has joined #openstack-ansible | 07:09 | |
| *** rodolof has quit IRC | 07:14 | |
| *** rodolof has joined #openstack-ansible | 07:14 | |
| *** gouthamr has joined #openstack-ansible | 07:15 | |
| *** shardy has joined #openstack-ansible | 07:16 | |
| *** rodolof has quit IRC | 07:23 | |
| *** cNilesh has quit IRC | 07:29 | |
| *** rodolof has joined #openstack-ansible | 07:35 | |
| *** markvoelker has joined #openstack-ansible | 07:36 | |
| *** oanson has quit IRC | 07:38 | |
| *** oanson has joined #openstack-ansible | 07:38 | |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-tests master: test-install-{nova,neutron}: Add support for openSUSE https://review.openstack.org/480393 | 07:51 |
|---|---|---|
| *** tobberydberg has quit IRC | 07:57 | |
| *** tobberydberg has joined #openstack-ansible | 07:57 | |
| *** thorst has joined #openstack-ansible | 08:01 | |
| *** thorst has quit IRC | 08:05 | |
| *** tobberydberg has quit IRC | 08:06 | |
| *** tobberydberg has joined #openstack-ansible | 08:07 | |
| *** tobberydberg has quit IRC | 08:08 | |
| *** markvoelker has quit IRC | 08:08 | |
| *** pbandark has joined #openstack-ansible | 08:08 | |
| *** tobberydberg has joined #openstack-ansible | 08:09 | |
| *** tobberydberg has quit IRC | 08:09 | |
| *** tobberydberg has joined #openstack-ansible | 08:09 | |
| *** shardy is now known as shtab | 08:27 | |
| *** shtab is now known as shardy | 08:27 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Update nova test playbook https://review.openstack.org/480409 | 08:29 |
| *** tobberydberg has quit IRC | 08:31 | |
| *** tobberydberg has joined #openstack-ansible | 08:31 | |
| *** tobberydberg has quit IRC | 08:33 | |
| *** tobberydberg has joined #openstack-ansible | 08:33 | |
| *** tobberydberg has quit IRC | 08:33 | |
| *** tobberydberg has joined #openstack-ansible | 08:34 | |
| hwoarang | odyssey4me: could you add opensuse support in this^^^^ and then I can drop my patchset on https://review.openstack.org/#/c/480393/ | 08:37 |
| *** tobberydberg has quit IRC | 08:38 | |
| *** tobberydberg has joined #openstack-ansible | 08:39 | |
| odyssey4me | hwoarang sure | 08:39 |
| hwoarang | thank you | 08:39 |
| odyssey4me | you can perhaps adjust it to just do neutron on top of https://review.openstack.org/480217 | 08:39 |
| hwoarang | ok good point | 08:40 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Update nova test playbook https://review.openstack.org/480409 | 08:40 |
| openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-tests master: test-install-neutron: Add openSUSE support https://review.openstack.org/480393 | 08:43 |
| odyssey4me | hwoarang posed a question in https://review.openstack.org/#/c/480292/1 | 08:49 |
| hwoarang | odyssey4me: but this thing does something different on centos right? | 08:51 |
| odyssey4me | hwoarang I have no idea. | 08:51 |
| odyssey4me | All that task in question is doing is the same as the one above - enabling a module. | 08:51 |
| odyssey4me | If the ansible module understands how to do that on the underlying OS, then it should work. | 08:51 |
| hwoarang | yeah me neither... The comment from cloudnull seems to suggest that a2enmod only works on Debian (and now suse) | 08:52 |
| odyssey4me | hmm, it requires http://docs.ansible.com/ansible/apache2_module_module.html#requirements-on-host-that-executes-module | 08:52 |
| hwoarang | yeah | 08:53 |
| hwoarang | no clue if that's something centos can do | 08:53 |
| hwoarang | so i didn't touch it | 08:53 |
| odyssey4me | yep, after a little looking around it appears that's correct | 08:54 |
| odyssey4me | :( | 08:54 |
| odyssey4me | oh well +3 | 08:54 |
| odyssey4me | *2 | 08:54 |
| hwoarang | :) | 08:58 |
| *** electrofelix has joined #openstack-ansible | 08:59 | |
| *** cNilesh has joined #openstack-ansible | 08:59 | |
| mbuil | can somebody point me to where the user_variables.yml is created in the aio flavor? That file in my deployment is very different to the "example" file under OSA/etc/openstack_deploy/user_variables.yml and I can't find anything in the bootstrap-host role :( | 09:00 |
| odyssey4me | mbuil the user_variables.yml file is in the bootstrap-host templates | 09:01 |
| odyssey4me | https://github.com/openstack/openstack-ansible/blob/master/tests/roles/bootstrap-host/templates/user_variables.aio.yml.j2 | 09:01 |
| *** tobberydberg has quit IRC | 09:03 | |
| *** tobberydberg has joined #openstack-ansible | 09:04 | |
| mbuil | odyssey4me: aaah great! It makes sense :) | 09:04 |
| *** markvoelker has joined #openstack-ansible | 09:06 | |
| *** tobberydberg has quit IRC | 09:08 | |
| odyssey4me | asettle so with the comments in https://review.openstack.org/#/c/480258/8/doc/source/index.rst I was under the impression that after this merges the structure would change? is that not the case? | 09:08 |
| *** tobberydberg has joined #openstack-ansible | 09:08 | |
| odyssey4me | are we stuck with /ocata/ocata forever? | 09:08 |
| odyssey4me | And, what will the right link be? | 09:08 |
| mbuil | odyssey4me: where do you think is the best place to define the neutron plugin that we want to use in our deployment? Do you think user_variables.yml is ok or is that file reserved for other kind of stuff? | 09:09 |
| asettle | odyssey4me: it's a good question. I can't imagine why it would be (ocata,ocata) forever | 09:09 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: March to the beat of the new docs drum https://review.openstack.org/480258 | 09:09 |
| asettle | It is currently that because we put that in there (if you'll recall my amazing patch) | 09:10 |
| odyssey4me | mbuil that file's for overrides | 09:10 |
| odyssey4me | I don't think we want to add any more services to the default aio deployment at this time. | 09:10 |
| mbuil | odyssey4me: sorry, I meant in general, not just for aio | 09:11 |
| odyssey4me | mbuil it'll come down to how you want to make it easy for a deployer to consume the service - ideally they should implement a single setting, and the group_vars should enable things to work across all the integrations for them. | 09:11 |
| odyssey4me | So, the question is, what integrations are needed for tacker? | 09:11 |
| odyssey4me | You are the guy working on tacker, right? | 09:12 |
| openstackgerrit | Juan Vidal Allende proposed openstack/openstack-ansible-os_neutron master: Increase Vagrant VM memory from 2048 to 4096 MB https://review.openstack.org/480459 | 09:12 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: March to the beat of the new docs drum https://review.openstack.org/480258 | 09:13 |
| odyssey4me | andymccr how much of a problem is it do you think that the mitaka/liberty docs are all gone | 09:13 |
| odyssey4me | mbuil all user-space changes to configuration should be done in user_variables, or by using the vars plugin's /etc/openstack_deploy/{group_vars,host_vars} directories | 09:14 |
| mbuil | odyssey4me: I am thinking on a general problem we will have in OPNFV. We will need to work with different deployments. A clear example is OVS because we need to test two scenarios, one with plain OVS and another with OVS+DPDK. We will need to define a condition for that in os_neutron so that it know what OVS to deploy. However, I am not sure where we should write the variable (e.g. ovs_dpdk: true/false) that will steer that condition. I was | 09:16 |
| mbuil | thinking about writing it in user_variables.yml, but I am not sure if this is following good practices | 09:16 |
| *** admin0 has joined #openstack-ansible | 09:16 | |
| odyssey4me | ah yes | 09:16 |
| asettle | odyssey4me: he's just popped out for errands. I can't overly speak for him but LIberty and Mitaka are solidly EOL | 09:16 |
| asettle | You can still access via tags in the repo, yes? | 09:17 |
| odyssey4me | asettle yeah, they're in git of course - but no longer published | 09:17 |
| odyssey4me | and while they're EOL, there are still a lot of people running them | 09:17 |
| asettle | odyssey4me: As long as they are still accessible, I don't overly see the issue. Instead of linking to the published source, link to the github source. | 09:17 |
| asettle | They can build from there using sphinx | 09:17 |
| asettle | Checkout the tag, build | 09:17 |
| asettle | Voila | 09:17 |
| odyssey4me | the old docs in openstack are meant to remain as a reference, so I'm personally not pleased at them being gone | 09:18 |
| asettle | At least, that's what we do for docs. | 09:18 |
| odyssey4me | I remember when the essex docs were yanked when it went EOL, yet I was still a cloud operator running essex. | 09:18 |
| asettle | odyssey4me: to be honest, we've never published EOL docs. We do have to keep consistency. As long as they are still available. | 09:18 |
| odyssey4me | operators do not understand how to build docs or use the tooling | 09:18 |
| asettle | odyssey4me: instructions are available? | 09:19 |
| asettle | We are working on a proper archiving plan, but it's going to take ages to roll out because there's nobody to implement it, and we have to deal with this initial migration first and foremost | 09:19 |
| odyssey4me | hmm, yeah - understood | 09:19 |
| odyssey4me | options are there, of course, I just don't think it's very nice to operators to do this sort of thing | 09:19 |
| odyssey4me | but I understand that we need progress | 09:20 |
| openstackgerrit | Juan Vidal Allende proposed openstack/openstack-ansible-tests master: Increase Vagrant VM memory from 2048 to 4096 MB https://review.openstack.org/480463 | 09:20 |
| odyssey4me | hmm, we still have a mitaka branch, so I could push a patch for the purpose of ensuring a last publish is done :) | 09:20 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/mitaka: Dummy patch to republish docs https://review.openstack.org/480466 | 09:23 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/mitaka: Dummy patch to republish docs https://review.openstack.org/480466 | 09:23 |
| *** dixiaoli has quit IRC | 09:38 | |
| *** pbandark has quit IRC | 09:38 | |
| *** markvoelker has quit IRC | 09:39 | |
| openstackgerrit | Merged openstack/openstack-ansible-tests master: Split cinder API and the rest https://review.openstack.org/480221 | 09:39 |
| *** pbandark has joined #openstack-ansible | 09:46 | |
| andymccr | odyssey4me: yeah maybe we should do that - i'd say we would be better off with mitaka docs still (at least) | 09:47 |
| andymccr | maybe we should plan something and talk to infra at the PTG or before | 09:47 |
| asettle | odyssey4me: yeah, so, while we work on the migration, we can have pointers to the github pages for the next 2/3 months while we figure it out | 09:49 |
| asettle | odyssey4me: I just left a message for Andreas and Doug to start thinking about this change too | 09:51 |
| *** thorst has joined #openstack-ansible | 10:02 | |
| *** thorst has quit IRC | 10:06 | |
| *** cuongnv has quit IRC | 10:14 | |
| odyssey4me | andymccr asettle https://review.openstack.org/480466 will hopefully republish the last mitaka docs | 10:15 |
| odyssey4me | even if they do go to the wrong place | 10:15 |
| odyssey4me | anywhere is better than nowhere | 10:15 |
| *** schwicht has quit IRC | 10:21 | |
| openstackgerrit | Merged openstack/openstack-ansible-tests master: Update neutron test playbook https://review.openstack.org/480217 | 10:25 |
| *** schwicht has joined #openstack-ansible | 10:25 | |
| *** udesale__ has quit IRC | 10:31 | |
| *** markvoelker has joined #openstack-ansible | 10:36 | |
| asettle | odyssey4me: where are they being linked from? | 10:40 |
| asettle | Or are you just reviving them to the old link? | 10:40 |
| odyssey4me | asettle I'd need to revise https://review.openstack.org/480258 to re-include them after we see where they live. | 10:40 |
| asettle | odyssey4me: okay cool | 10:40 |
| odyssey4me | or patch on top of https://review.openstack.org/480258 - depending on what happens first | 10:41 |
| *** tobberydberg has quit IRC | 10:43 | |
| *** tobberydberg has joined #openstack-ansible | 10:44 | |
| *** smatzek has joined #openstack-ansible | 10:46 | |
| *** thorst has joined #openstack-ansible | 10:47 | |
| *** thorst has quit IRC | 10:49 | |
| *** stuartgr has joined #openstack-ansible | 10:53 | |
| andymccr | odyssey4me: we're processing EOL'ing so roles have been EOL'd for mitaka - i'll hold off on EOL'ing stable/mitaka - i need to do a sha bump to point to mitaka-eol tag for upstream/role repos | 10:58 |
| andymccr | anyway | 10:58 |
| andymccr | so we should be ok to get that docs stuff fixed | 10:58 |
| odyssey4me | yup | 10:59 |
| *** thorst has joined #openstack-ansible | 11:00 | |
| andymccr | bbiab getting some lunch! | 11:00 |
| *** schwicht has quit IRC | 11:01 | |
| *** tobberyd_ has joined #openstack-ansible | 11:08 | |
| *** shardy is now known as shardy_lunch | 11:08 | |
| *** markvoelker has quit IRC | 11:10 | |
| *** tobberydberg has quit IRC | 11:11 | |
| *** armaan has quit IRC | 11:23 | |
| *** armaan has joined #openstack-ansible | 11:23 | |
| *** hw_wutianwei has quit IRC | 11:36 | |
| *** thorst has quit IRC | 11:36 | |
| *** cshen_ has quit IRC | 11:38 | |
| *** schwicht has joined #openstack-ansible | 11:39 | |
| *** cshen_ has joined #openstack-ansible | 11:39 | |
| *** acormier has joined #openstack-ansible | 11:45 | |
| *** admin0 has quit IRC | 11:48 | |
| *** admin0 has joined #openstack-ansible | 11:51 | |
| *** acormier has quit IRC | 11:53 | |
| *** acormier has joined #openstack-ansible | 11:54 | |
| *** acormier has quit IRC | 11:58 | |
| *** vishwanathj has joined #openstack-ansible | 12:03 | |
| *** vishwanathj has quit IRC | 12:04 | |
| logan- | odyssey4me jmccrory regarding the connection plugin issue, https://review.openstack.org/#/c/466743/ hacks together some tests for a lot of the cases fixed recently. the test case for https://review.openstack.org/#/c/472061/ is the one still failing there | 12:06 |
| *** markvoelker has joined #openstack-ansible | 12:07 | |
| odyssey4me | logan- ja, been watching that one - hoping for it to be resolved at some point | 12:07 |
| *** markvoelker has quit IRC | 12:16 | |
| *** markvoelker has joined #openstack-ansible | 12:17 | |
| *** schwicht has quit IRC | 12:20 | |
| openstackgerrit | Merged openstack/openstack-ansible stable/mitaka: Dummy patch to republish docs https://review.openstack.org/480466 | 12:21 |
| *** tobberyd_ is now known as tobberydberg | 12:24 | |
| mgariepy | morning everyone | 12:24 |
| odyssey4me | bother, andymccr this is popping up on our docs build jobs: http://logs.openstack.org/63/480463/2/gate/gate-openstack-ansible-tests-docs-ubuntu-xenial/528c148/console.html#_2017-07-05_12_19_23_941378 | 12:24 |
| odyssey4me | not sure if it's a general problem just yet | 12:25 |
| odyssey4me | cloudnull answered your Q's in https://review.openstack.org/479395 & https://review.openstack.org/480186 | 12:25 |
| andymccr | hmm | 12:36 |
| andymccr | thats not great | 12:36 |
| hwoarang | i wonder what changed since this morning | 12:39 |
| *** shardy_lunch is now known as shardy | 12:41 | |
| *** thorst has joined #openstack-ansible | 12:44 | |
| *** thorst_ has joined #openstack-ansible | 12:45 | |
| *** cshen_ has quit IRC | 12:47 | |
| *** thorst has quit IRC | 12:48 | |
| odyssey4me | andymccr hwoarang AJAeger says that dhellman is already looking into it | 12:56 |
| hwoarang | aha | 12:57 |
| odyssey4me | they suggest we disable shinxmark for now, which for us is a >40 repo task... I'd rather just live with docs fails for a few hours or a day | 12:57 |
| hwoarang | hmm | 12:58 |
| odyssey4me | I'd rather we cap using u-c, than disable sphinxmark across all repositories. | 12:58 |
| odyssey4me | hmm, we can work around this | 12:58 |
| odyssey4me | hang a sec, let me try something | 12:58 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron stable/newton: Simplify database migrations https://review.openstack.org/478888 | 12:59 |
| *** cathrichardson has joined #openstack-ansible | 12:59 | |
| mhayden | odyssey4me: the ansible-hardening docs are still throwing a 404 -- is there a step i've missed somewhere? | 13:00 |
| odyssey4me | oh bother, the docs tox envs don't use our tests repo requirements files | 13:00 |
| *** lucasxu has joined #openstack-ansible | 13:00 | |
| odyssey4me | mhayden yeah, you need to push a patch and merge it to publish | 13:00 |
| odyssey4me | all old docs are gone | 13:00 |
| mhayden | oh hah | 13:00 |
| mhayden | just any ol' patch? | 13:00 |
| odyssey4me | yup, merge anything and it should trigger a docs build | 13:00 |
| mhayden | okay, thanks | 13:00 |
| *** esberglu has joined #openstack-ansible | 13:01 | |
| openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: [Docs] Adjust hardening domains page https://review.openstack.org/480573 | 13:02 |
| mgariepy | andymccr, mind if I fix your patch https://review.openstack.org/#/c/480236/ ? | 13:03 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security master: [Docs] Adjust deprecation warning https://review.openstack.org/480574 | 13:03 |
| odyssey4me | hmm, this is weird - u-c has sphinxmark 0.1.18 and it's 0.1.19 that's breaking things | 13:03 |
| *** schwicht has joined #openstack-ansible | 13:04 | |
| odyssey4me | oh, it's not installing the new one | 13:04 |
| *** qcrivera has joined #openstack-ansible | 13:04 | |
| andymccr | mgariepy: sure! | 13:10 |
| asettle | odyssey4me: passing docs patch. We can continue to iterate if anything is up | 13:10 |
| asettle | Thanks for doing that | 13:10 |
| andymccr | ahh just gotta create the directory | 13:11 |
| andymccr | actually i made the same mistake in the patch i want to submit upstream | 13:11 |
| andymccr | and fixed that | 13:11 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible master: Set PrivateDevices=false for CentOS7 Ceph deploys https://review.openstack.org/480236 | 13:13 |
| mgariepy | hmm not sure what the perms should be for the directory. | 13:13 |
| *** admin0 has quit IRC | 13:14 | |
| andymccr | mgariepy: i just set it to defaults and didnt set them | 13:14 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible master: Set PrivateDevices=false for CentOS7 Ceph deploys https://review.openstack.org/480236 | 13:15 |
| mgariepy | root:root 0755 (from memcached config file. | 13:15 |
| mgariepy | from : https://github.com/openstack/openstack-ansible-memcached_server/blob/master/tasks/memcached_config.yml#L53-L61 | 13:16 |
| mhayden | odyssey4me: could you help me get this over the hump? https://review.openstack.org/480573 :) | 13:16 |
| mhayden | mgariepy: started getting some more virtlogd selinux denials over the weekend | 13:17 |
| mhayden | haven't dug into them yet | 13:17 |
| mgariepy | selinux is painful ! | 13:17 |
| mgariepy | haha :D | 13:17 |
| mhayden | hah, well this isn't a red hat project, so there's not much effort going into policies here outside of what we're doing | 13:18 |
| mhayden | red hat still tells people to disable selinux for clustering the last time i looked :( | 13:18 |
| mgariepy | aren't we doing cluster ? | 13:18 |
| mgariepy | shouldn't we disable it ? | 13:18 |
| mgariepy | ;p | 13:18 |
| *** hw_wutianwei has joined #openstack-ansible | 13:18 | |
| odyssey4me | mhayden unfortunately the docs jobs are broken right now | 13:20 |
| odyssey4me | so best to hold off | 13:20 |
| odyssey4me | see https://review.openstack.org/480577 | 13:20 |
| *** jwitko has joined #openstack-ansible | 13:21 | |
| mhayden | hooray | 13:21 |
| *** acormier has joined #openstack-ansible | 13:21 | |
| mgariepy | mhayden, is your cluster still on ocata ? | 13:22 |
| mhayden | i dropped a worthless onesie on it | 13:22 |
| mhayden | mgariepy: yeah | 13:22 |
| mhayden | i'm still wrestling with some interesting bridge issues after containers are online for a long time | 13:22 |
| mgariepy | what is causing the selinux issue ? juste upgrading libvirt ? | 13:22 |
| mhayden | i'll get into a situation where the container can reach other containers on the same subnet | 13:22 |
| mhayden | but it can't get traffic forwarded off the bridge and out to other networks | 13:23 |
| mhayden | it looks like it might be a conntrack issue because the actual connection tracking flow is missing for the container when it happens | 13:23 |
| mhayden | if i tcpdump the bridge with promisc enabled, everything is back to normal | 13:23 |
| mhayden | i even tried arping from inside the container -- no dice | 13:24 |
| mhayden | odyssey4me: i don't think i use sphinxmark for the security hardening stuff | 13:24 |
| mhayden | i can check again | 13:24 |
| mgariepy | hmm. that's pretty weird. | 13:25 |
| mhayden | the traffic isn't making it onto the wire | 13:25 |
| mhayden | i see the outbound, but nothing coming back | 13:25 |
| mhayden | well i don't see the outbound trafifc on the physical interface | 13:25 |
| mhayden | it's confusing | 13:25 |
| *** askb has quit IRC | 13:25 | |
| mgariepy | you have 4 servers ? 3 controllers/compute + 1 compute ? | 13:26 |
| mhayden | mgariepy: i'm using the new hotness HYPERCONVERGED | 13:27 |
| odyssey4me | mhayden indeed you do not, so https://review.openstack.org/479894 is incoming | 13:27 |
| mhayden | 4 servers -- all four are hypervisors | 13:27 |
| mhayden | shared infra on nodes 1,2,3 | 13:27 |
| mhayden | openstack on nodes 2,3 | 13:27 |
| mhayden | rsyslog on node 0 | 13:27 |
| mgariepy | I'll poke my friends in victoria to see if they see something similar | 13:28 |
| mgariepy | it's the same for all the containers or just those that runs openstack ? | 13:29 |
| mgariepy | or maybe the neutron agent on the compute is messing things up ? | 13:29 |
| mhayden | could be, haven't narrowed it down quite yet | 13:30 |
| mhayden | the instances are ok | 13:30 |
| mhayden | just the containers running management stuff that break | 13:30 |
| mhayden | and it's not a specific container -- seen it on galera, rabbit, nova, glance, etc | 13:31 |
| mgariepy | you have instance on all 4 server ? | 13:31 |
| mhayden | mgariepy: yeah | 13:32 |
| mhayden | running 7 instances right now | 13:32 |
| mhayden | icanhazip is running on there, so it gives the ethernet cards a good workout | 13:32 |
| mhayden | and it has a BOATLOAD of conntrack flows | 13:32 |
| *** gkadam has quit IRC | 13:33 | |
| mhayden | my linux router out front shows about 252K conntrack flows right now | 13:33 |
| mhayden | that creeps up over 425K at certain times of day | 13:33 |
| *** cNilesh has quit IRC | 13:33 | |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible-os_swift master: Don't run sync in upgrades https://review.openstack.org/479041 | 13:34 |
| *** klamath has joined #openstack-ansible | 13:37 | |
| *** klamath has quit IRC | 13:38 | |
| *** klamath has joined #openstack-ansible | 13:38 | |
| openstackgerrit | Merged openstack/ansible-hardening master: Doc migration fixes https://review.openstack.org/479894 | 13:39 |
| asettle | odyssey4me: are you in the openstack-doc channel? Doug is asking about the docs publishing | 13:41 |
| mhayden | evrardjp[m]: thanks for the comments on the ansible-keepalived patch | 13:46 |
| mhayden | i'll try to work on that today | 13:46 |
| andymccr | mgariepy: https://github.com/ceph/ceph-ansible/pull/1654 for reference | 13:50 |
| mgariepy | andymccr, nice | 13:52 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-plugins master: Fix regression with container_name var https://review.openstack.org/480591 | 13:53 |
| *** acormier has quit IRC | 13:58 | |
| *** udesale has joined #openstack-ansible | 14:01 | |
| *** armaan has quit IRC | 14:02 | |
| *** armaan has joined #openstack-ansible | 14:02 | |
| *** schwicht has quit IRC | 14:02 | |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-plugins master: Fix the physical_host_addr vars lookup https://review.openstack.org/480594 | 14:03 |
| *** galstrom_zzz is now known as galstrom | 14:06 | |
| *** schwicht has joined #openstack-ansible | 14:07 | |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-plugins master: Fix regression with container_name var https://review.openstack.org/480591 | 14:10 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-plugins master: Add container-aware connection plugin tests https://review.openstack.org/466743 | 14:10 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-plugins master: Fix the physical_host_addr vars lookup https://review.openstack.org/480594 | 14:10 |
| *** pbandark1 has joined #openstack-ansible | 14:10 | |
| *** pbandark has quit IRC | 14:12 | |
| *** pbandark1 is now known as pbandark | 14:12 | |
| *** schwicht has quit IRC | 14:24 | |
| mhayden | evrardjp[m]: regarding that keepalived selinux PR, where do you think it belongs in OSA? | 14:24 |
| mhayden | i guess it could go into the hosts role | 14:25 |
| *** aszeszo has quit IRC | 14:27 | |
| *** woodard has joined #openstack-ansible | 14:29 | |
| *** schwicht has joined #openstack-ansible | 14:30 | |
| mgariepy | mhayden, I guess the config should go in https://github.com/openstack/openstack-ansible/blob/master/group_vars/all/keepalived.yml | 14:30 |
| mhayden | seems like a good idea -- where should the .te files go? | 14:31 |
| mgariepy | the haproxy selinux rule for keepalived is very specific to our configuration | 14:31 |
| mhayden | true | 14:31 |
| odyssey4me | mhayden an option would be the haproxy role, activated by a var in group_vars | 14:33 |
| odyssey4me | another option would be to use the playbook to do the necessary things | 14:33 |
| mhayden | well what i'm thinking is that we're doing SELinux adjustments in a few different places | 14:33 |
| mhayden | didn't we centralize apparmor stuff in one place? | 14:33 |
| odyssey4me | I know we setup an apparmor profile in lxc_hosts, but I'm not aware of any other config being done. | 14:34 |
| odyssey4me | That apparmor stuff is specifically for LXC. | 14:34 |
| mhayden | true | 14:35 |
| mhayden | i'd like to centralize our SELinux stuff into one place | 14:35 |
| mgariepy | we could have a selinux role ! | 14:36 |
| mgariepy | :P | 14:36 |
| mhayden | ERMAGERD | 14:36 |
| odyssey4me | well, is there an selinux role that could be used in ansible-galaxy? | 14:36 |
| odyssey4me | if not, perhaps there should be one | 14:36 |
| mhayden | one could be made it not | 14:36 |
| * mhayden looks | 14:36 | |
| mgariepy | would be a lot better to have selinux stuff working as a module from ansible. | 14:36 |
| odyssey4me | but I'd suggest then that the role be prefixed with 'ansible-' and not 'openstack-ansible-' as it's a general role which could be used across projects and outside of openstack | 14:37 |
| odyssey4me | or that ^ | 14:37 |
| mgariepy | but that's another issue. | 14:37 |
| odyssey4me | there may already be an selinux role? | 14:37 |
| odyssey4me | *module | 14:37 |
| mhayden | i don't mind building/maintaining one in github | 14:37 |
| mhayden | most of the ones i'm finding actually disable selinux | 14:37 |
| mhayden | sigh | 14:37 |
| odyssey4me | hahahaha | 14:37 |
| mhayden | odyssey4me: don't laugh | 14:38 |
| mgariepy | they follow rhel docs ! | 14:38 |
| mhayden | :P | 14:38 |
| mgariepy | lol | 14:38 |
| *** cpuga has joined #openstack-ansible | 14:39 | |
| mhayden | one problem i often find with ansible-galaxy is that the roles are low quality, or won't pass linting tests :/ | 14:39 |
| mhayden | i found one that will do it, but it needs an overhaul | 14:39 |
| mgariepy | link ? | 14:39 |
| odyssey4me | yup | 14:39 |
| odyssey4me | I typically check to see whether it has regular maintenance, releases and CI testing. If not, I don't bother with it. | 14:40 |
| mhayden | https://github.com/MWojtowicz/ansible-semodule | 14:40 |
| mhayden | no ci | 14:40 |
| odyssey4me | It's often more work to overhaul it than it's worth, | 14:40 |
| mhayden | last commit on Feb 21 | 14:40 |
| mgariepy | 1 commit | 14:40 |
| *** cpuga_ has joined #openstack-ansible | 14:41 | |
| mgariepy | nice :) | 14:41 |
| mhayden | oh hah | 14:41 |
| mhayden | :P | 14:41 |
| odyssey4me | well, you could reach out to the owner | 14:41 |
| mhayden | i'd also like to find the most optimized way to get this done | 14:41 |
| mhayden | could easily copy all of the .te's at once and async build the modules | 14:41 |
| *** schwicht has quit IRC | 14:42 | |
| mhayden | but even if we did it this way (bring in a role from galaxy), where would the .te files live? | 14:44 |
| mgariepy | what else are we configuring for selinux ? | 14:44 |
| mhayden | the ansible-hardening role enables it | 14:44 |
| *** cpuga has quit IRC | 14:44 | |
| mhayden | we have selinux stuff in swift, nova, keepalived, haproxy right now | 14:44 |
| mgariepy | the te file should live in the role that needs it. | 14:44 |
| mgariepy | or depends on it (for haproxy/keepalived ) | 14:44 |
| *** acormier has joined #openstack-ansible | 14:45 | |
| mgariepy | so the role can be consumed outside of OSA ? | 14:45 |
| mhayden | right | 14:45 |
| mhayden | the names of the policies could easily be tossed in via variable | 14:45 |
| mhayden | i'm just wondering if we ought to put some selinux playbook goodness into OSA that does all of the SELinux work up front | 14:46 |
| mhayden | but then again, that wouldn't help IRR testing :/ | 14:46 |
| mhayden | so i think your idea is best, mgariepy | 14:46 |
| mgariepy | to enable selinux there is an ansible module | 14:46 |
| mhayden | we could write a "secompile" module :P | 14:47 |
| mhayden | but that seems like overkill | 14:47 |
| mgariepy | haha :) | 14:47 |
| mhayden | it would be a bunch of python calling out to shell | 14:47 |
| openstackgerrit | Merged openstack/openstack-ansible stable/newton: Implement rolling upgrades for cinder https://review.openstack.org/476256 | 14:50 |
| *** perniciouscaffei has quit IRC | 14:51 | |
| *** schwicht has joined #openstack-ansible | 14:54 | |
| *** markus_z has quit IRC | 14:56 | |
| *** fergus has quit IRC | 14:56 | |
| *** fergus has joined #openstack-ansible | 14:58 | |
| *** lucasxu has quit IRC | 15:00 | |
| *** Oku_OS is now known as Oku_OS-away | 15:01 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Implement data migrations for rolling upgrades https://review.openstack.org/479395 | 15:05 |
| *** lbragstad has joined #openstack-ansible | 15:05 | |
| odyssey4me | cloudnull ^ done | 15:06 |
| odyssey4me | thanks for going through that, I know it's a bit complicated | 15:06 |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible-os_swift master: Don't run sync in upgrades https://review.openstack.org/479041 | 15:10 |
| cshen | is anybody familiar with dhcp problem in openstack? we saw an IP was released with "unknown lease" reason in dnsmasq. So the VM was booting, it could not get the IP. How can I force dnsmasq to offer the IP again? | 15:16 |
| cshen | log is like "Jul 4 16:24:18 dnsmasq-dhcp[8732]: DHCPRELEASE(tap0665484b-42) 10.131.2.75 fa:16:3e:3e:5f:c3 unknown lease." | 15:16 |
| *** udesale has quit IRC | 15:18 | |
| *** schwicht has quit IRC | 15:23 | |
| cloudnull | cshen: if you can console into the vm you can run dhclient | 15:25 |
| cloudnull | or you can wait for the dhcp timeout. | 15:25 |
| cloudnull | or reboot the instance | 15:25 |
| cshen | cloudnull: I did reboot the VM, it didn't work. It seems that the dhcp IP was already RELEASED in dnsmasq. | 15:26 |
| cshen | but in horizon, you still see it was assigned to that VM. | 15:26 |
| *** schwicht has joined #openstack-ansible | 15:26 | |
| cloudnull | this is dnsmasq running within the neutron agent container within a specific network namespace ? | 15:26 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-specs master: [Spec] Add software firewall https://review.openstack.org/479415 | 15:27 |
| cshen | cloudnull: domain is openstacklocal. | 15:27 |
| cloudnull | can you console to the instance ? | 15:28 |
| cshen | I can't at the moment. But I brutally restarted all the services in neutron-agent. | 15:29 |
| cshen | and it seems the that 10.131.2.75 was offered by dnsmasq again. | 15:29 |
| *** aszeszo has joined #openstack-ansible | 15:30 | |
| cshen | Jul 5 15:14:39 dnsmasq-dhcp[17568]: DHCPOFFER(tap0665484b-42) 10.131.2.75 fa:16:3e:a3:3a:82 | 15:30 |
| cloudnull | you could kill the dnsmasq process within the neutron-agent container(s), rm the leases file (/var/lib/neutron/dhcp/$NETWORK_ID/leases), and restart the neutron-agents. | 15:30 |
| cshen | cloudnull: thanks for your great tips. | 15:31 |
| cshen | I will try. | 15:31 |
| *** cNilesh has joined #openstack-ansible | 15:31 | |
| *** perniciouscaffei has joined #openstack-ansible | 15:34 | |
| *** lucasxu has joined #openstack-ansible | 15:35 | |
| cshen | cloudnull: I believe your tips will do the trick. since I restarted all services in neutron-agent, and the DHCP IP was offered again. The VM can see this offered IP now. thanks for help. | 15:38 |
| *** dixiaoli has joined #openstack-ansible | 15:39 | |
| andymccr | if somebody is about to review: https://review.openstack.org/#/c/467222/ would be appreciated! It's the last thing standing in the way of the translations check site :) | 15:42 |
| *** dixiaoli has quit IRC | 15:44 | |
| palendae | Are docs jobs broken at the moment? | 15:45 |
| palendae | PIL's failing to run | 15:45 |
| andymccr | palendae: yeah unfortunately. i believe a fix is being worked on by the infra people | 15:46 |
| palendae | Ok, thanks | 15:46 |
| palendae | Wanted to be sure it wasn't something I had to do for the swift role | 15:46 |
| andymccr | haha yeah i think you're ok | 15:47 |
| palendae | Alright, will keep an eye out then | 15:48 |
| palendae | Thanks | 15:48 |
| mhayden | odyssey4me: could you give me a little nudge on this one? https://review.openstack.org/480573 | 15:49 |
| mhayden | andymccr: gotcha | 15:49 |
| odyssey4me | all docs/linters jobs will fail until https://review.openstack.org/480577 merges palendae andymccr | 15:50 |
| odyssey4me | all docs/linters jobs for *master* | 15:50 |
| odyssey4me | stable branches are just fine | 15:51 |
| andymccr | ahh so we'll need to sha bump requirements? | 15:51 |
| odyssey4me | mhayden done | 15:51 |
| odyssey4me | andymccr hmm, no the integrated repo should be fine actually | 15:51 |
| odyssey4me | the breaking change in u-c merged this morning | 15:51 |
| *** qcrivera has quit IRC | 15:51 | |
| andymccr | odyssey4me: ahh ok yeah that makes sense | 15:52 |
| odyssey4me | so it's only the docs/linters because they grab straight from the head of the branch, not our fixed SHA's | 15:52 |
| *** schwicht has quit IRC | 15:52 | |
| palendae | odyssey4me: Thanks, I'll add a depends-on I guess | 15:53 |
| odyssey4me | palendae that won't help, I don't think | 15:53 |
| palendae | No, but it'll communicate status | 15:53 |
| palendae | Or maybe jsut a comment | 15:53 |
| odyssey4me | the docs/linters use the published u-c | 15:53 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-plugins master: Add container-aware connection plugin tests https://review.openstack.org/466743 | 15:54 |
| odyssey4me | if you like - it'll be merged within the hour I reckon, so it's kinda pointless | 15:54 |
| mhayden | odyssey4me: gracias | 15:54 |
| *** armaan has quit IRC | 15:55 | |
| *** schwicht has joined #openstack-ansible | 15:56 | |
| *** cshen has quit IRC | 15:56 | |
| *** BjoernT has joined #openstack-ansible | 15:58 | |
| *** itdependsnetwork has joined #openstack-ansible | 15:59 | |
| *** perniciouscaffei has quit IRC | 16:04 | |
| *** perniciouscaffei has joined #openstack-ansible | 16:04 | |
| *** jamesden_ has joined #openstack-ansible | 16:04 | |
| *** jamesdenton has quit IRC | 16:04 | |
| openstackgerrit | Merged openstack/ansible-hardening master: [Docs] Adjust hardening domains page https://review.openstack.org/480573 | 16:05 |
| *** schwicht has quit IRC | 16:06 | |
| *** qcrivera has joined #openstack-ansible | 16:06 | |
| mgariepy | andymccr, great success :D http://logs.openstack.org/36/480236/3/check/gate-openstack-ansible-openstack-ansible-ceph-centos-7-nv/f666d97/console.html#_2017-07-05_14_10_06_406553 | 16:08 |
| *** tobberyd_ has joined #openstack-ansible | 16:08 | |
| *** tobberydberg has quit IRC | 16:08 | |
| *** tobberyd_ has quit IRC | 16:09 | |
| *** aszeszo1 has joined #openstack-ansible | 16:09 | |
| andymccr | mgariepy: hopefully now all the periodicals are mostly in a working state! at least on master | 16:09 |
| *** tobberydberg has joined #openstack-ansible | 16:09 | |
| *** aszeszo has quit IRC | 16:10 | |
| mgariepy | ocata failed this morning | 16:11 |
| mgariepy | for centos** | 16:11 |
| *** aszeszo has joined #openstack-ansible | 16:11 | |
| andymccr | mgariepy: ugh :P | 16:12 |
| odyssey4me | I have a bash-ism question which I'm trying to puzzle out, perhaps someone can assist? cc hughsaunders | 16:13 |
| odyssey4me | currently https://github.com/openstack/openstack-ansible/blob/master/scripts/gate-check-commit.sh#L187 is not working as I expect it to | 16:13 |
| odyssey4me | when I execute the script and background it by hand, it works exactly how it should | 16:13 |
| *** aszeszo1 has quit IRC | 16:13 | |
| odyssey4me | however in the gate it's behaving more like it does when I execute it using a subshell, eg: bash ./tests/data-plane-test.sh & | 16:14 |
| odyssey4me | the behaviour is that it appears to be running in the background, but it does nothing | 16:14 |
| odyssey4me | any thoughts on what might be going wrong there? | 16:14 |
| andymccr | hmm mgariepy seems to be some cinder attach bits. i'll take a look tomorrow if it fails again and debug more | 16:17 |
| *** smatzek has quit IRC | 16:17 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible master: Add translations test-site deployment option https://review.openstack.org/467222 | 16:19 |
| mgariepy | andymccr, ok great | 16:19 |
| *** galstrom is now known as galstrom_zzz | 16:19 | |
| mgariepy | seems consistant with the upgrade test tho. | 16:19 |
| andymccr | ahh thats new then. i wonder if something changed | 16:20 |
| andymccr | ahh the new sha's merged | 16:20 |
| *** markvoelker has quit IRC | 16:24 | |
| *** galstrom_zzz is now known as galstrom | 16:24 | |
| *** lucasxu has quit IRC | 16:27 | |
| *** jamesdenton has joined #openstack-ansible | 16:29 | |
| *** jamesden_ has quit IRC | 16:29 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_glance stable/ocata: Only sync glance database on major versions https://review.openstack.org/479384 | 16:30 |
| *** tobberydberg has quit IRC | 16:30 | |
| *** markvoelker has joined #openstack-ansible | 16:30 | |
| *** tobberydberg has joined #openstack-ansible | 16:30 | |
| mbuil | guys, I am trying to deploy now with 'mini' and I am getting a problem when installing rabbitmq. it gets a urlopen error when trying to download "http://172.29.236.11:8181/os-releases/master/ubuntu-16.04-x86_64/get-pip.py" | 16:32 |
| openstackgerrit | Merged openstack/openstack-ansible-os_glance stable/ocata: Ensure that services restart in a particular order https://review.openstack.org/479604 | 16:32 |
| openstackgerrit | Merged openstack/openstack-ansible-os_glance stable/ocata: Use listen instead of chained notifiers https://review.openstack.org/479605 | 16:32 |
| openstackgerrit | Merged openstack/openstack-ansible-os_glance stable/newton: Only sync glance database on major versions https://review.openstack.org/479385 | 16:32 |
| *** rodolof has quit IRC | 16:32 | |
| evrardjp | mgariepy: mhayden I didn't follow the whole conversation | 16:32 |
| mbuil | That file does not exist. In that directory I only have requirements.txt requirements_constraints.txt. Is there something wrong when creating the repo? | 16:32 |
| evrardjp | but I think we could have a ok-ish approach, a good enough approach, and a nice approach | 16:33 |
| evrardjp | let's start with the nice | 16:33 |
| evrardjp | we could have a repo that is solely focusing on writing selinux modules, that basically allow the compilation of policies | 16:34 |
| *** schwicht has joined #openstack-ansible | 16:34 | |
| evrardjp | we can therefore include this as meta dependency to our roles with no overhead | 16:34 |
| evrardjp | each of the roles could then ship their own files and use this module | 16:35 |
| evrardjp | the good enough approach, is we ship those tasks in some role, and include the role in playbooks or roles | 16:35 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron stable/newton: Ensure that services restart in a particular order https://review.openstack.org/478895 | 16:36 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron stable/newton: Resolve migration issues https://review.openstack.org/478917 | 16:36 |
| *** mbuil has quit IRC | 16:37 | |
| evrardjp | the ok-ish approach is (for haproxy + keepalived matter) we store the haproxy policy file for keepalived into haproxy role, and define a group var that basically say "Hey the file to compile your keepalived policy is stored there..." and keepalived tasks will use it. | 16:37 |
| *** toddnni has quit IRC | 16:39 | |
| openstackgerrit | Merged openstack/openstack-ansible stable/ocata: Consolidate final two keystone plays https://review.openstack.org/479239 | 16:41 |
| *** toddnni has joined #openstack-ansible | 16:44 | |
| *** smatzek has joined #openstack-ansible | 16:53 | |
| *** galstrom is now known as galstrom_zzz | 17:05 | |
| *** galstrom_zzz is now known as galstrom | 17:08 | |
| *** cNilesh has quit IRC | 17:08 | |
| *** cNilesh has joined #openstack-ansible | 17:09 | |
| *** chyka has joined #openstack-ansible | 17:10 | |
| *** cNilesh has quit IRC | 17:17 | |
| *** cNilesh has joined #openstack-ansible | 17:18 | |
| *** aszeszo has quit IRC | 17:22 | |
| *** galstrom is now known as galstrom_zzz | 17:29 | |
| *** galstrom_zzz is now known as galstrom | 17:30 | |
| *** PerilousApricot has quit IRC | 17:34 | |
| *** cpuga_ has quit IRC | 17:35 | |
| *** cathrichardson has quit IRC | 17:35 | |
| odyssey4me | anyone care to give this a nudge? not sure if jmccrory is around: https://review.openstack.org/478877 | 17:40 |
| * mhayden has already applied nudging | 17:42 | |
| *** cathrichardson has joined #openstack-ansible | 17:43 | |
| *** cpuga has joined #openstack-ansible | 17:45 | |
| *** craigs has joined #openstack-ansible | 17:47 | |
| *** gkadam has joined #openstack-ansible | 17:48 | |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible master: Install swift serially for rolling updates https://review.openstack.org/478580 | 17:49 |
| *** cNilesh has quit IRC | 17:52 | |
| craigs | @here will the patch - for erlang be merged to OSA newton? and if so what tag? | 17:57 |
| craigs | same patch but merged to ocata- https://review.openstack.org/#/c/474362/1 | 17:58 |
| *** cshen has joined #openstack-ansible | 18:01 | |
| *** electrofelix has quit IRC | 18:02 | |
| *** cshen has quit IRC | 18:03 | |
| *** cshen has joined #openstack-ansible | 18:03 | |
| *** stuartgr has left #openstack-ansible | 18:08 | |
| *** BjoernT has quit IRC | 18:13 | |
| *** admin0 has joined #openstack-ansible | 18:15 | |
| admin0 | hi .. what variable to change openstack.local to my own domain ? | 18:15 |
| *** hw_wutianwei has quit IRC | 18:16 | |
| *** gkadam has quit IRC | 18:19 | |
| *** rodolof has joined #openstack-ansible | 18:19 | |
| odyssey4me | admin0 I'd prefer to teach you to grep, then you can figure it out yourself. ;) | 18:20 |
| odyssey4me | cd /opt/openstack-ansible; find . -name "*.yml" -exec grep -r 'openstack.local' {} \; | 18:21 |
| *** craigs has quit IRC | 18:25 | |
| *** schwicht has quit IRC | 18:26 | |
| *** aszeszo has joined #openstack-ansible | 18:26 | |
| *** schwicht has joined #openstack-ansible | 18:28 | |
| *** cshen has quit IRC | 18:32 | |
| admin0 | oh .. i searched the same, but in /etc/ansible/os_* :D | 18:33 |
| *** qcrivera has quit IRC | 18:33 | |
| *** perniciouscaffei has quit IRC | 18:35 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone stable/newton: Implement serialisable rolling upgrade https://review.openstack.org/478877 | 18:40 |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone stable/newton: Use run_once instead of inventory scoping https://review.openstack.org/479241 | 18:40 |
| *** cathrichardson has quit IRC | 18:45 | |
| *** craigs_ has joined #openstack-ansible | 18:47 | |
| *** perniciouscaffei has joined #openstack-ansible | 18:49 | |
| *** jamesdenton has quit IRC | 18:55 | |
| *** jamesdenton has joined #openstack-ansible | 18:56 | |
| *** aszeszo1 has joined #openstack-ansible | 18:56 | |
| *** jamesdenton has quit IRC | 18:59 | |
| *** aszeszo has quit IRC | 18:59 | |
| *** jamesdenton has joined #openstack-ansible | 18:59 | |
| *** schwicht has quit IRC | 19:05 | |
| *** jamesdenton has quit IRC | 19:06 | |
| *** rromans has quit IRC | 19:06 | |
| *** schwicht has joined #openstack-ansible | 19:09 | |
| *** jamesdenton has joined #openstack-ansible | 19:11 | |
| *** hybridpollo has joined #openstack-ansible | 19:19 | |
| *** cathrichardson has joined #openstack-ansible | 19:23 | |
| *** aszeszo has joined #openstack-ansible | 19:25 | |
| *** cathrich_ has joined #openstack-ansible | 19:26 | |
| *** aszeszo1 has quit IRC | 19:27 | |
| *** cathrichardson has quit IRC | 19:28 | |
| *** rromans has joined #openstack-ansible | 19:29 | |
| *** Wayne_ has joined #openstack-ansible | 19:37 | |
| *** cpuga has quit IRC | 19:38 | |
| *** cshen has joined #openstack-ansible | 19:39 | |
| *** askb has joined #openstack-ansible | 19:40 | |
| *** galstrom is now known as galstrom_zzz | 19:49 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_glance stable/newton: Perform an atomic policy file change https://review.openstack.org/479275 | 19:55 |
| *** ThiagoCMC has joined #openstack-ansible | 19:57 | |
| ThiagoCMC | Guys, just curious, is anyone working in an "os_senlin" role for OSA? | 19:57 |
| ThiagoCMC | Maybe for Pike? | 19:57 |
| odyssey4me | dmsimard cloudnull jmccrory evrardjp So, I did a thing and hope you can help me finish it. :) https://review.openstack.org/480716 | 19:58 |
| odyssey4me | any cores around ready to give this one a nudge? https://review.openstack.org/479275 | 19:59 |
| odyssey4me | ThiagoCMC I'm not aware of anyone actually working on one. | 19:59 |
| ThiagoCMC | odyssey4me, Hmm... Okay, I'll give it a try... Might be a good way for learning about OSA internals... =) | 20:00 |
| dmsimard | odyssey4me: I'll help review some more as it gets a little bit more fleshed out (minimum with integration tests? just making sure it at least runs and we recover the subunit file in logs), I'm in firefighting mode right now | 20:00 |
| *** woodard_ has joined #openstack-ansible | 20:02 | |
| *** galstrom_zzz is now known as galstrom | 20:02 | |
| *** tobberyd_ has joined #openstack-ansible | 20:04 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_glance stable/newton: Ensure that services restart in a particular order https://review.openstack.org/480720 | 20:04 |
| *** woodard__ has joined #openstack-ansible | 20:04 | |
| odyssey4me | dmsimard sure, not expecting much - but thanks for that pointer :) | 20:05 |
| *** woodard_ has quit IRC | 20:05 | |
| *** woodard has quit IRC | 20:06 | |
| *** tobberydberg has quit IRC | 20:07 | |
| odyssey4me | I just wanted to give a heads-up that it's on the way, finally. | 20:07 |
| dmsimard | odyssey4me: and it's awesome \o/ | 20:08 |
| dmsimard | odyssey4me: after the meeting I'm on, I'll explain some ideas that have been brewing | 20:08 |
| *** tobberyd_ has quit IRC | 20:09 | |
| *** itdependsnetwork has quit IRC | 20:09 | |
| *** jamesdenton has quit IRC | 20:10 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Implement rolling upgrades for glance https://review.openstack.org/479386 | 20:13 |
| *** woodard__ has quit IRC | 20:15 | |
| *** PerilousApricot has joined #openstack-ansible | 20:15 | |
| *** woodard has joined #openstack-ansible | 20:15 | |
| PerilousApricot | Hi all, does OSA support using OVS bridges, or should deployments only use regular linux bridges | 20:16 |
| *** woodard has quit IRC | 20:16 | |
| *** woodard has joined #openstack-ansible | 20:17 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Implement rolling upgrades for keystone https://review.openstack.org/479244 | 20:17 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Implement rolling upgrades for keystone https://review.openstack.org/479244 | 20:20 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Allow keystone playbook to work with limits https://review.openstack.org/479246 | 20:22 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Allow keystone playbook to work with limits https://review.openstack.org/479246 | 20:23 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Consolidate final two keystone plays https://review.openstack.org/480728 | 20:24 |
| *** tobberydberg has joined #openstack-ansible | 20:24 | |
| *** tobberydberg has quit IRC | 20:27 | |
| *** tobberyd_ has joined #openstack-ansible | 20:27 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Implement rolling upgrades for neutron https://review.openstack.org/479248 | 20:32 |
| *** perniciouscaffei has quit IRC | 20:33 | |
| *** shardy has quit IRC | 20:35 | |
| *** cshen has quit IRC | 20:36 | |
| odyssey4me | PerilousApricot yes, OVS is a supported configuration | 20:38 |
| odyssey4me | a quick google gave me http://trumant.github.io/openstack-ansible-openvswitch.html | 20:38 |
| PerilousApricot | odyssey4me: I found the same. I get an error under centos, so I was trying to sort out which direction to work on solving it | 20:40 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Implement rolling upgrades for neutron https://review.openstack.org/479248 | 20:40 |
| odyssey4me | heh, no centos is unlikely to work with ovs | 20:41 |
| odyssey4me | no-one's put the effort into that | 20:41 |
| odyssey4me | for ocata and master, centos support is still new - many, many bugs are still shaking out | 20:42 |
| openstackgerrit | Merged openstack/openstack-ansible-os_glance stable/newton: Perform an atomic policy file change https://review.openstack.org/479275 | 20:42 |
| odyssey4me | I don't think OVS for centos is tested at all | 20:42 |
| odyssey4me | in OSA I mean | 20:42 |
| PerilousApricot | right | 20:42 |
| *** jwitko has quit IRC | 20:43 | |
| PerilousApricot | Yeah, I get something weird with trying to attach bridges to the containers. We're primarily a centos shop, so I tried installing w/centos, but I guess i'll blow away the machines and put ubuntu on them instead | 20:44 |
| PerilousApricot | Thanks for the help! | 20:45 |
| *** PerilousApricot has quit IRC | 20:46 | |
| *** itdependsnetwork has joined #openstack-ansible | 20:47 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Implement rolling upgrades for glance https://review.openstack.org/479387 | 20:48 |
| openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Conditinally install EPEL if needed https://review.openstack.org/480734 | 20:49 |
| openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Allow epel-release package name customization https://review.openstack.org/480737 | 20:54 |
| *** thorst_ has quit IRC | 20:55 | |
| *** esberglu has quit IRC | 20:55 | |
| *** galstrom is now known as galstrom_zzz | 20:55 | |
| *** thorst has joined #openstack-ansible | 20:57 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Implement rolling upgrades for keystone https://review.openstack.org/479244 | 20:59 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Allow keystone playbook to work with limits https://review.openstack.org/479246 | 20:59 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Consolidate final two keystone plays https://review.openstack.org/480728 | 20:59 |
| *** thorst has quit IRC | 21:01 | |
| openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Re-organize defaults/main.yml https://review.openstack.org/480739 | 21:04 |
| *** galstrom_zzz is now known as galstrom | 21:08 | |
| dmsimard | odyssey4me: so, this idea | 21:09 |
| dmsimard | odyssey4me: more and more I want to introduce the concept of driver in ARA -- for sending data in and getting data out | 21:10 |
| *** woodard_ has joined #openstack-ansible | 21:10 | |
| dmsimard | odyssey4me: for example, there's output in subunit, junit, html -- there's someone working on graphite right now and I also eventually want to be able to send data to elasticsearch for use in ELK | 21:11 |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible-os_swift master: Use playbook hosts for ring synchronization https://review.openstack.org/480742 | 21:12 |
| dmsimard | And then there's input streams, right now there's a callback that sends data to sql but upstream is interested in having ARA pick up data from mqtt (firehose) since that's where zuul will be dropping messages | 21:12 |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible master: Install swift serially for rolling updates https://review.openstack.org/478580 | 21:13 |
| dmsimard | I guess ARA would more or less become a common "database" format for ansible playbook runs or something like that | 21:13 |
| palendae | dmsimard: I believe twitter did something like that | 21:13 |
| palendae | They stored retries in a DB | 21:13 |
| palendae | Not necessarily metrics | 21:13 |
| dmsimard | and then you'd have an API to abstract drivers to send things in and send things out | 21:14 |
| *** woodard has quit IRC | 21:14 | |
| dmsimard | this assumes that ARA would have an API in the first place, which it doesn't really right now but it's also something I want to flesh out | 21:14 |
| *** woodard_ has quit IRC | 21:15 | |
| dmsimard | palendae: Yeah, I don't think ARA is in the business of storing metrics -- but it has data that can be used in metric backends and interpreters | 21:15 |
| palendae | Sure | 21:15 |
| palendae | Well, it reports on what happened...it's not directly handling stuff like retries | 21:16 |
| dmsimard | palendae: they'd be translated into the process but things like, I don't know, task durations, amount of tasks and their results, etc. | 21:16 |
| *** smatzek has quit IRC | 21:16 | |
| palendae | Sure | 21:16 |
| palendae | I guess what I'm saying is there's precedent in the ansible world | 21:16 |
| palendae | Maybe not open sourced, but twitter definitely did a presentation on it | 21:16 |
| dmsimard | palendae: trying to search about ansible and twitter on google is a bit of a nightmare :) | 21:18 |
| *** itdependsnetwork has quit IRC | 21:18 | |
| palendae | Oof, yeah | 21:18 |
| palendae | It's been a few years | 21:18 |
| palendae | Here it is https://www.youtube.com/watch?v=fwGrKXzocg4 | 21:19 |
| palendae | 2014, so pretty datd in Ansible-land | 21:19 |
| dmsimard | palendae: thanks, I'll definitely watch it | 21:21 |
| *** jamesdenton has joined #openstack-ansible | 21:27 | |
| *** thorst has joined #openstack-ansible | 21:31 | |
| dmsimard | palendae: looks like this is where they talk about it: https://www.youtube.com/watch?v=fwGrKXzocg4&t=1222 | 21:33 |
| dmsimard | palendae: from what I can gather, this is mostly no longer a problem today (retrying only the things that failed) | 21:34 |
| *** thorst has quit IRC | 21:35 | |
| *** fergus has quit IRC | 21:59 | |
| *** fergus has joined #openstack-ansible | 21:59 | |
| *** schwicht has quit IRC | 22:05 | |
| *** klamath has quit IRC | 22:14 | |
| *** esberglu has joined #openstack-ansible | 22:21 | |
| *** acormier has quit IRC | 22:22 | |
| *** acormier has joined #openstack-ansible | 22:22 | |
| *** schwicht has joined #openstack-ansible | 22:24 | |
| *** galstrom is now known as galstrom_zzz | 22:25 | |
| *** esberglu has quit IRC | 22:26 | |
| *** acormier has quit IRC | 22:27 | |
| *** andries has quit IRC | 22:35 | |
| *** admin0 has quit IRC | 22:37 | |
| *** andries has joined #openstack-ansible | 22:38 | |
| *** schwicht has quit IRC | 22:49 | |
| *** schwicht has joined #openstack-ansible | 22:49 | |
| *** schwicht has quit IRC | 22:55 | |
| *** thorst has joined #openstack-ansible | 23:12 | |
| *** thorst has quit IRC | 23:12 | |
| *** thorst has joined #openstack-ansible | 23:19 | |
| *** schwicht has joined #openstack-ansible | 23:22 | |
| *** rodolof has quit IRC | 23:34 | |
| *** chyka has quit IRC | 23:34 | |
| *** aszeszo has quit IRC | 23:35 | |
| *** rodolof has joined #openstack-ansible | 23:46 | |
| *** hw_wutianwei has joined #openstack-ansible | 23:53 | |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-os_neutron master: Fix DB expand delegated facts https://review.openstack.org/480772 | 23:54 |
| *** hybridpollo has quit IRC | 23:55 | |
| *** rodolof has quit IRC | 23:56 | |
| *** rodolof has joined #openstack-ansible | 23:56 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!