Wednesday, 2017-10-25

*** chyka has joined #openstack-ansible00:02
*** chyka has quit IRC00:06
*** pmannidi has joined #openstack-ansible00:10
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Improve execution time by using dynamic groups  https://review.openstack.org/51387600:15
*** jwitko has quit IRC00:21
*** thorst has joined #openstack-ansible00:29
*** chyka has joined #openstack-ansible00:38
*** dxiri has quit IRC00:38
*** newmember has quit IRC00:42
*** chyka has quit IRC00:42
*** thorst has quit IRC00:46
*** kylek3h has quit IRC00:55
*** kylek3h has joined #openstack-ansible00:56
*** brad[] has quit IRC00:59
*** brad[] has joined #openstack-ansible01:00
*** chyka has joined #openstack-ansible01:07
*** chyka has quit IRC01:07
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_freezer master: Updated from global requirements  https://review.openstack.org/51425801:16
*** chigang_ has joined #openstack-ansible01:17
*** persia has quit IRC01:21
*** gus has quit IRC01:21
*** gus has joined #openstack-ansible01:22
*** persia has joined #openstack-ansible01:22
*** jwitko_ has joined #openstack-ansible01:25
*** thorst has joined #openstack-ansible01:29
*** thorst has quit IRC01:34
*** jwitko_ has quit IRC01:40
*** smatzek has joined #openstack-ansible01:49
*** kiennt26 has joined #openstack-ansible01:51
*** esberglu has joined #openstack-ansible01:52
*** kylek3h_ has joined #openstack-ansible01:53
*** kiennt26 has quit IRC01:53
*** kiennt26 has joined #openstack-ansible01:54
*** smatzek has quit IRC01:54
*** kylek3h has quit IRC01:56
*** esberglu has quit IRC01:57
*** hw_wutianwei has joined #openstack-ansible02:07
*** smatzek has joined #openstack-ansible02:18
*** jhesketh_ is now known as jhesketh02:22
*** woodard has quit IRC02:30
*** smatzek has quit IRC02:41
*** smatzek has joined #openstack-ansible02:41
*** smatzek has quit IRC02:42
*** smatzek has joined #openstack-ansible02:42
*** thorst has joined #openstack-ansible02:46
*** smatzek has quit IRC02:46
*** thorst has quit IRC02:50
*** dave-mccowan has quit IRC02:59
*** dxiri has joined #openstack-ansible03:18
*** esberglu has joined #openstack-ansible03:20
*** dxiri has quit IRC03:22
*** dxiri has joined #openstack-ansible03:24
*** esberglu has quit IRC03:25
*** dxiri has quit IRC03:36
*** gkadam has joined #openstack-ansible03:38
SamYapleis OSA going to use the new peer discovery stuff in rabbitmq 3.7.0 (aka autocluster)03:51
*** nshetty has joined #openstack-ansible03:51
SamYaplei just setup autocluster + etcd and i like it03:51
*** kiennt26 has quit IRC04:07
*** poopcat has quit IRC04:07
*** esberglu has joined #openstack-ansible04:16
*** esberglu has quit IRC04:20
*** ivveh- is now known as ivveh04:31
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_freezer master: Updated from global requirements  https://review.openstack.org/51425804:31
*** thorst has joined #openstack-ansible04:51
*** udesale has joined #openstack-ansible04:54
*** thorst has quit IRC04:56
*** mummer has joined #openstack-ansible04:59
*** mummer has quit IRC04:59
*** Trident has quit IRC05:03
*** hw_wutianwei has quit IRC05:08
*** hw_wutianwei has joined #openstack-ansible05:09
*** hw_wutianwei has quit IRC05:12
*** hw_wutianwei has joined #openstack-ansible05:15
*** nwonknu has quit IRC05:22
*** armaan has joined #openstack-ansible05:32
*** cloudnull has quit IRC05:32
*** eglute has quit IRC05:33
*** eglute has joined #openstack-ansible05:34
*** cloudnull has joined #openstack-ansible05:34
*** nwonknu has joined #openstack-ansible05:35
*** korean101 has left #openstack-ansible05:42
*** cloudnull has quit IRC05:48
*** cloudnull has joined #openstack-ansible05:51
*** armaan_ has joined #openstack-ansible06:03
*** esberglu has joined #openstack-ansible06:03
*** armaan has quit IRC06:04
*** armaan has joined #openstack-ansible06:05
*** armaan_ has quit IRC06:06
*** kiennt26 has joined #openstack-ansible06:07
*** esberglu has quit IRC06:07
*** Oku_OS-away is now known as Oku_OS06:07
*** yolanda_ has joined #openstack-ansible06:12
*** gouthamr has quit IRC06:14
*** jvidal has joined #openstack-ansible06:19
*** acormier has joined #openstack-ansible06:22
*** acormier has quit IRC06:27
*** Miouge has joined #openstack-ansible06:30
*** DanyC has joined #openstack-ansible06:35
*** pcaruana has joined #openstack-ansible06:39
*** DanyC has quit IRC06:40
*** yolanda_ has quit IRC06:40
*** rodolof has joined #openstack-ansible06:43
*** SmearedBeard has joined #openstack-ansible06:50
*** thorst has joined #openstack-ansible06:53
*** SmearedBeard has quit IRC06:56
evrardjpSamYaple: interesting06:56
*** huxinhui_ has joined #openstack-ansible06:56
evrardjpWe have thought about something else recently but MQ reforming is high on our lists06:57
*** thorst has quit IRC06:57
evrardjpSamYaple: If you could tell us more that would be great06:57
*** sxc731 has joined #openstack-ansible07:06
*** rodolof has quit IRC07:07
*** rodolof has joined #openstack-ansible07:08
*** maybebuggy has joined #openstack-ansible07:16
*** esberglu has joined #openstack-ansible07:16
*** esberglu has quit IRC07:21
*** taseer1 has joined #openstack-ansible07:25
*** Taseer has quit IRC07:26
*** taseer2 has joined #openstack-ansible07:26
*** taseer1 has quit IRC07:30
*** vnogin has joined #openstack-ansible07:35
*** yolanda_ has joined #openstack-ansible07:42
*** yolanda_ is now known as yolanda07:43
*** esberglu has joined #openstack-ansible07:53
*** esberglu has quit IRC07:54
*** esberglu has joined #openstack-ansible07:54
*** esberglu has quit IRC07:54
*** DanyC has joined #openstack-ansible07:55
*** armaan has quit IRC07:59
*** armaan has joined #openstack-ansible08:00
*** sxc731 has quit IRC08:01
*** madorn has quit IRC08:02
evrardjpodyssey4me: where are the apt sources configured in lxc_container_create?08:03
*** madorn has joined #openstack-ansible08:04
evrardjpoh maybe it's on lxc_hosts in the base template?08:05
evrardjpok08:05
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_hosts master: SUSE: Improve openSUSE repositories handling  https://review.openstack.org/51485008:06
*** pbandark has joined #openstack-ansible08:14
*** thorst has joined #openstack-ansible08:14
*** thorst has quit IRC08:19
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-os_nova master: Enable KSM support for Nova  https://review.openstack.org/50786208:20
*** taseer2 is now known as Taseer08:25
*** nshetty_ has joined #openstack-ansible08:32
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible master: Integrate Congress with OSA.  https://review.openstack.org/50397108:33
*** electrofelix has joined #openstack-ansible08:34
*** nshetty has quit IRC08:35
*** nshetty__ has joined #openstack-ansible08:40
*** nshetty__ has quit IRC08:41
*** nshetty_ has quit IRC08:43
*** taseer1 has joined #openstack-ansible08:43
*** Taseer has quit IRC08:43
*** taseer2 has joined #openstack-ansible08:44
*** nshetty has joined #openstack-ansible08:44
*** taseer1 has quit IRC08:48
*** br0k3n has joined #openstack-ansible08:51
*** br0k3n has quit IRC08:55
*** br0k3n has joined #openstack-ansible08:55
*** pmannidi has quit IRC08:59
*** armaan has quit IRC09:16
*** armaan has joined #openstack-ansible09:16
*** armaan has quit IRC09:16
*** SmearedBeard has joined #openstack-ansible09:17
openstackgerritMaxime Guyot proposed openstack/openstack-ansible-os_cinder master: Fix indentation of container_vars for ceph doc  https://review.openstack.org/51497709:25
MiougeThe doc for ceph + cinder says to use both “storage_hosts” and “storage-infra_hosts” (see https://docs.openstack.org/openstack-ansible-os_cinder/latest/configure-cinder.html#configuring-cinder-to-use-ceph )09:34
MiougeEspicially the “container_vars” section just below the “storage-infra_hosts” then later it ends up in “storage_hosts”09:34
odyssey4meevrardjp they are not - they are configured in the base by copying from the host09:34
evrardjpyeah09:34
evrardjpI have seen that09:34
*** rodolof has quit IRC09:35
openstackgerritMerged openstack/openstack-ansible-os_ironic stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51475309:36
*** hw_wutianwei has quit IRC09:38
*** SmearedBeard has quit IRC09:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Correct regex for disk size  https://review.openstack.org/51499609:47
*** rcarrill1 is now known as rcarrillocruz09:48
openstackgerritMerged openstack/openstack-ansible-os_monasca stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51475409:48
openstackgerritMerged openstack/openstack-ansible-os_almanach stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51474709:48
openstackgerritMerged openstack/openstack-ansible-os_sahara stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51475509:49
*** rpittau_ has quit IRC09:49
openstackgerritMerged openstack/openstack-ansible-os_barbican stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51474909:51
openstackgerritMerged openstack/openstack-ansible-os_ceilometer stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51475109:55
openstackgerritMerged openstack/openstack-ansible-os_zaqar stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51475609:58
openstackgerritMerged openstack/openstack-ansible-os_designate stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51475209:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Use new zuul v3 git src location  https://review.openstack.org/51500610:02
odyssey4meevrardjp andymccr ^ do you think we should add a reno to announce the change in default location?10:02
evrardjpno. it's fine.10:04
evrardjpI have read the commit message twice, still don't understand what you meant there.10:05
odyssey4meok, sorry - maybe I need more coffee10:05
odyssey4mewhich paragraph is confusing?10:05
evrardjpall of them.10:06
odyssey4mehaha10:06
evrardjpI understand you want to simplify developer mode now that we have zuulv3.10:06
evrardjpusing /src10:06
evrardjpthat's it.10:06
*** duonghq has quit IRC10:06
odyssey4menot simplify developer mode - simplify the job10:06
evrardjpyeah10:06
evrardjpwell -- reuse /src basically10:07
odyssey4meyes10:07
*** kiennt26 has quit IRC10:07
odyssey4mepreviously we had to make sure that 'keystone', for example, was cloned into the right place10:07
odyssey4menow we don't10:07
odyssey4methat's the first paragraph in a nutshell10:07
odyssey4mehttps://i.imgur.com/Y2Rrixn.gif10:10
odyssey4medamn, that took a lot longer than it should have10:11
*** udesale has quit IRC10:13
*** Miouge has quit IRC10:21
*** Miouge has joined #openstack-ansible10:22
*** Miouge has quit IRC10:25
*** Miouge has joined #openstack-ansible10:25
*** stuartgr has joined #openstack-ansible10:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Update test image for nova-lxd  https://review.openstack.org/51502010:33
*** Miouge has quit IRC10:33
*** pcaruana has quit IRC10:37
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Use zuul v3 src location to install ARA  https://review.openstack.org/51502210:46
*** chhavi has joined #openstack-ansible10:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Use zuul v3 src location to install ARA  https://review.openstack.org/51502310:49
*** armaan has joined #openstack-ansible11:02
*** ansibler has joined #openstack-ansible11:06
*** taseer2 is now known as Taseer11:08
odyssey4meSamYaple yeah, that autocluster stuff looks good - nice to see it being adopted by pivotal as official now11:09
odyssey4meoh, actually I see that autocluster is superceded now: http://next.rabbitmq.com/cluster-formation.html11:10
odyssey4mewell, for rabbitmq 3.711:11
*** rodolof has joined #openstack-ansible11:12
Taseerodyssey4me: Hi, can you help with this => http://logs.openstack.org/71/503971/13/check/openstack-tox-linters/e12ab77/job-output.txt.gz#_2017-10-25_08_48_18_02313011:14
*** armaan has quit IRC11:17
*** armaan has joined #openstack-ansible11:17
odyssey4meTaseer yeah, you've added some inventory groups and haven't added the group names to the test which validates that all the groups are there11:18
odyssey4meit's actually telling you which file they're in11:18
odyssey4melook in tests/test_inventory.py and it'll be pretty easy to find11:19
*** yolanda has quit IRC11:19
*** nshetty has quit IRC11:19
odyssey4meevrardjp is this an error you've seen elsewhere?11:21
odyssey4mehttp://logs.openstack.org/06/515006/1/check/openstack-ansible-functional-centos-7/493ec89/job-output.txt.gz#_2017-10-25_10_48_45_67531611:21
*** thorst has joined #openstack-ansible11:21
evrardjpthat's a new one to me11:22
*** nshetty has joined #openstack-ansible11:25
*** thorst has quit IRC11:26
*** smatzek has joined #openstack-ansible11:28
odyssey4mewell, say goodbye to the legacy jobs: https://review.openstack.org/51459211:28
*** dave-mccowan has joined #openstack-ansible11:31
ansiblerHi, I am guessing this is a bug https://pastebin.com/raw/ZwcricqM  I can repeat that if starting install from scratch. Could be some kind of race condition issue.11:35
odyssey4meansibler that's a purposefully ignored error - it doesn't cause failure11:35
ansiblerso far i see that "content" field differs between the runs, but hope someone with deeper understanding can have a look11:36
ansiblerI am confused with need to run setup-infrastructure twice. I did run ok on newton, but now with pike I cannot get it wirking with first run11:37
ansiblerI have pasted how task run looks in first iteration and also in second one. First time 2 tasks fail, second time succeeed11:39
*** pcaruana has joined #openstack-ansible11:43
ansiblercould cope with running setup-infrastructure.yml 2x, but after setup-openstack.yml I end up with cluster where rabbitmq refuses service requests from other services, so I am guessing it could be related to not configuring rabbitmq with first run. I am not changing user_secrets between runs.11:43
*** PTO has joined #openstack-ansible11:46
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Document reasonable radosgw timeout  https://review.openstack.org/51475011:47
odyssey4meevrardjp oh bother, that centos issue is showing up in all tests that use memcached today11:48
odyssey4meoanson is there something holding https://review.openstack.org/514268 back from being merged given that it's non-voting?11:51
*** PaulusNL has joined #openstack-ansible11:56
odyssey4mehwoarang any progress with the log uploads?11:58
hwoarangodyssey4me: have you seen my e-mail? it's a zuul problem and nobody contacted me since yesterday11:58
hwoarangso i presume nobody fixed anything11:58
odyssey4mehwoarang yeah, saw it - I was just wondering whether you've had further feedback11:58
hwoarangno :(11:59
odyssey4mecool, I'll follow up with jeblair later11:59
hwoarangthe thing that Monty uploaded in my patchset should work11:59
hwoarangthe problem is that the 'run' phase is executed from stable/newton !11:59
hwoarangwhere there is no post-run playbook11:59
PaulusNLhello all, I'm new here and have a question regarding openstack-ansible on CentOS (cause that is our default OS)11:59
hwoarangno clue why and that's the real zuul issue it seems12:00
PaulusNLhow experimental is experimental cause I'm not getting it to work for deploying it in the end12:00
evrardjpPaulusNL: what do you mean?12:01
evrardjpit fully depends on what you want to install...12:01
openstackgerritkourosh vivan proposed openstack/openstack-ansible-os_octavia master: add segmentation id option to octavia mgmt network creation task  https://review.openstack.org/51503512:01
PaulusNLevrardjp: when the documentation is followed and I'm on the stage to run the playbooks12:02
PaulusNLit always breaks at setup-infrastructure.yml12:02
PaulusNLand for example no /var/www directory is created so the rest will not work12:03
evrardjpPaulusNL: without logs, that's hard to say.12:03
evrardjpHow many nodes do you have?12:03
evrardjpfor the infrastructure nodes?12:03
*** pcaruana has quit IRC12:03
PaulusNL1 deploy and one controller host12:03
*** pcaruana has joined #openstack-ansible12:04
PaulusNLthe controller host is not deployed with the ansible playbook12:04
PaulusNLeventually it will be bigger12:04
PaulusNLbut for now this is eventually what is happening12:04
odyssey4mehwoarang that's bizarre - how do you know it's trying to use the newton branch?12:05
hwoarangodyssey4me: http://logs.openstack.org/06/513706/12/check/openstack-ansible-functional-opensuse-423/3aa14c1/job-output.txt.gz#_2017-10-24_12_43_17_51791312:05
hwoarang...playbooks/run@stable/newton]12:05
odyssey4meoh I see http://logs.openstack.org/06/513706/12/check/openstack-ansible-functional-ubuntu-xenial/32b4967/job-output.txt.gz#_2017-10-24_12_40_05_32387012:05
odyssey4mehaha, same same12:05
hwoarangso strange...12:05
hwoarangi think that's the issue jeblair is looking into12:06
odyssey4meok12:06
*** masuberu has joined #openstack-ansible12:06
odyssey4meI'll chase that up today as lack of logs is now holding us back substantially12:07
evrardjpPaulusNL: what issue do you have in your logs? Were there any failure in the playbooks?12:07
openstackgerritkourosh vivan proposed openstack/openstack-ansible-os_cinder master: Change ceph example backend name  https://review.openstack.org/51458812:07
*** thorst has joined #openstack-ansible12:08
evrardjpI suspect a network issue.12:08
PaulusNLok12:08
PaulusNLevrardjp: I'm looking in the logs (with 2 other collega's)12:08
PaulusNLis this way of installing openstack good for a production environment?12:09
*** masber has quit IRC12:09
evrardjpyeah, we do have large clouds under production :p12:10
evrardjpthat is the whole point12:10
PaulusNLok clear on that :)12:10
PaulusNLWe are so new to openstack12:10
PaulusNLthanks evrardjp for your reaction12:11
evrardjphaha :)12:11
PaulusNLgoing to look at our network setup12:11
evrardjpJullie kan het doen! Misschien kan jij ook uw openstack_user_config stuuren :p12:12
evrardjpmeer informatie nodig zal zijn om het probleem op te lossen12:12
PaulusNLevrardjp: did you use Google Translate? :P12:12
evrardjpjust rusty12:12
evrardjp:p12:13
PaulusNLah ok12:13
PaulusNLbut I understand12:13
evrardjphaha12:13
*** smatzek has quit IRC12:13
PaulusNLcan I post it to you in a pm?12:13
evrardjpwhat was the thing that gave me?12:13
evrardjpstuuren ipv zenden?12:13
*** smatzek has joined #openstack-ansible12:14
evrardjpNah you can paste a link here, everyone can help you that way12:14
PaulusNLevrardjp: the sentences itself and also stuuren is sturen12:15
PaulusNLzenden is just another word12:15
evrardjpyeah12:15
evrardjpdarn my grammar is not as good as it was!12:16
PaulusNLbut I'm not a native English speaker12:16
evrardjpneither do I :p12:16
PaulusNLik wil je wel helpen door Nederlands te typen12:16
PaulusNL;)12:16
Taseerodyssey4me: okay, thanks12:17
evrardjpNiet nodig PaulusNL ;)12:17
PaulusNLok12:17
evrardjp:D12:17
PaulusNL:P12:17
evrardjpI accept though, even if not necessary here. :p12:17
*** br0k3n1 has joined #openstack-ansible12:18
*** smatzek has quit IRC12:18
*** br0k3n has quit IRC12:18
PaulusNLevrardjp: I'm not going to post the config public. I think that the problem is going to be tackeld because of your remark about network!12:19
PaulusNLansible playbook want to go to one container that does not exist12:19
evrardjpPaulusNL: well, for now it's just a gut feeling12:19
PaulusNL... i think a rookie error12:19
odyssey4mePaulusNL the initial config is a bit hard due to all the networking setup - but once you get it right it'll be smooth from there12:20
PaulusNLok12:20
evrardjpPaulusNL: yeah maybe some step was skipped?12:20
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible master: Integrate Congress with OSA.  https://review.openstack.org/50397112:21
*** thorst_ has joined #openstack-ansible12:24
PaulusNLevrardjp: I think so... we are looking with 3 persons now :)12:24
evrardjphaha12:25
PaulusNLwe think that this option is our problem12:25
PaulusNLinternal_lb_vip_address:12:26
evrardjpsame as external_lb_vip_address ?12:26
*** thorst has quit IRC12:26
PaulusNLis this an address that does not exist12:26
oansonodyssey4me, no holdup. It's just waiting for review.12:26
evrardjpPaulusNL: yeah, that could be a problem if you don't make it appear12:26
oansonI can press the core reviewers if there's a hurry12:27
evrardjpPaulusNL: either manual config, or automatic with keepalived for example12:27
*** yolanda has joined #openstack-ansible12:27
PaulusNLso the internal and external must be the same and a now existing host?12:27
PaulusNL*none12:27
PaulusNLI have defined the following12:28
PaulusNLglobal_overrides:12:28
PaulusNL    internal_lb_vip_address: 192.168.114.1912:28
PaulusNL    external_lb_vip_address: os.visc.surfsara.nl12:28
odyssey4meoanson ah ok - I've made a note for a patch that will make it actually do what's expected... right now the cross-repo test won't actually be testing patches to dragonflow... only the merged head - the patch I mentioned fixes that12:29
odyssey4meoanson ping us if you need assistance with anything12:29
odyssey4meI have a patch depending on your patch to allow us to completely remove all the legacy jobs from zuul... so I was just following up.12:30
*** esberglu has joined #openstack-ansible12:31
*** nshetty_ has joined #openstack-ansible12:31
PaulusNLwe are running the playbooks again :)12:32
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/pike: lxc_cache_preparation: Convert the LXC cache preparation to async task  https://review.openstack.org/51477612:33
*** mbuil has joined #openstack-ansible12:33
*** nshetty has quit IRC12:33
evrardjpPaulusNL: they should not be the same12:35
evrardjpSurfsara!12:35
evrardjpInteresting :)12:35
evrardjpI guess you're interested by our shibboleth integration :p12:36
PaulusNL:P12:36
mhaydenhappy wednesday12:36
PaulusNLfirst things first12:36
evrardjpPaulusNL: I did the first implementation for Belnet, so you are not alone :p12:36
evrardjphappy wednesday mhayden!12:36
PaulusNLevrardjp: so you need to just pick two random ip's?12:37
odyssey4memorning mhayden - howdy doodie?12:37
evrardjp"random" is not a good idea :p12:37
odyssey4meFYI I'm seeing http://logs.openstack.org/06/515006/1/check/openstack-ansible-functional-centos-7/493ec89/job-output.txt.gz#_2017-10-25_10_48_45_675316 pop up in centos builds all over the place... trying to see if it replicates outside of infra12:38
MikeWHey guys I'm having issues with rabbitmq routing neutron events to designate-sink... is it ok that each one of my services has their own virtualhost or is that what's messing me up?12:38
evrardjpPaulusNL: I'd suggest you to have one on your external network, and one on your management network.12:38
evrardjpPaulusNL: they need to be resolvable by the hosts in your cloud12:38
PaulusNLah ok12:38
evrardjpI'd just say, for internal lb vip address, just use one ip in your br-mgmt, not yet used.12:39
PaulusNLevrardjp: belnet cool :)12:39
evrardjp(put it in the list of the reserved ips)12:39
evrardjpPaulusNL: I am not working there anymore :)12:39
PaulusNLevrardjp: we are doing this right now...12:40
evrardjpfor the external lb vip address: you can keep your FQDN, just make sure it resolves by all the possible clients of your cloud, including internal ones12:40
evrardjpthat is never good to have bad dns resolution.12:40
evrardjpif you keep the two IPs separate, the better, you can have better isolation of the traffic, and it's easier to configure too12:40
*** armaan has quit IRC12:41
PaulusNLok12:41
*** armaan has joined #openstack-ansible12:41
evrardjpthe external lb vip address will basically be terminated at the haproxy node12:41
evrardjpso the haproxy node will have to get this IP somehow12:41
PaulusNLevrardjp: is it a problem to have them both in the same network... for testing now?12:41
evrardjpno it's not12:41
evrardjpfor testing :)12:42
PaulusNLok thanks!12:42
evrardjpkeep 2 ips, this way you don't have overlap in binding12:42
evrardjpyou can probably keep the FQDN for the external one, and just use a different IP when on production12:42
PaulusNLcan I just run the playbooks again... or do I need to reinstall the environment?12:42
evrardjpas long as this FQDN -> IP will be mapped to the haproxy node you'll do fine12:43
evrardjpre-run12:43
evrardjp:p12:43
*** markvoelker has joined #openstack-ansible12:43
evrardjplet's see how it goes12:43
PaulusNLok :D12:43
PaulusNLrunning :D12:43
evrardjpif it doesn't tell us what's wrong12:43
evrardjpwe'll work it out together12:43
PaulusNLthis will take a while but thank you so very much!12:44
MikeWPaulusNL The guys in this chat are the best in all of IRC (I'm not one of them they've helped me a ton) ;)12:45
PaulusNLMikeW: good to know :)12:46
PaulusNLevrardjp: thank you from all the guys here ^_^ (needed to let you know)12:47
evrardjpPaulusNL: haha no worries :)12:47
*** udesale has joined #openstack-ansible12:48
odyssey4meevrardjp it looks like not even our console logs for tests are getting uploading into elasticsearch :/12:48
evrardjpMikeW: that's great to hear! It's because you're part of it, with that mindset, that it can stay the best :D12:48
odyssey4meI'll follow that up with infra12:48
evrardjpodyssey4me: yeah but it's been a while12:48
tnogistonot sure if this is the correct chat, but if neutron crashes on loop with: CRITICAL neutron [req-ed23388b-1769-4fab-b191-3f4f1aec2089 - - - - -] Unhandled error: UnmappedInstanceError: Class 'neutron.objects.plugins.ml2.vlanallocation.VlanAllocation' is not mapped12:48
evrardjpodyssey4me: I am clueless on why12:48
tnogistoany ideas what do to?12:48
evrardjpLike I said, I know nothing about logstash.o.o too.12:48
odyssey4meevrardjp when we removed the legacy tests, that's when they stopped working12:48
evrardjpyeah12:49
evrardjpbut the logs are still there12:49
evrardjpincluding periodics12:49
evrardjptnogisto: that sounds like a bad bad thing.12:49
odyssey4mebut those were all legacy jobs - now that they're gone...12:49
odyssey4mewhere're you seeing the logs?12:49
*** esberglu has quit IRC12:49
evrardjpodyssey4me: which ones?12:50
evrardjpperiodics?12:50
evrardjplogs.openstack.org/periodic/git.openstack.org/openstack/openstack-ansible/12:50
tnogistoIm thinking so too, but I dont know what happened to it12:50
odyssey4meoh, that's interesting12:50
evrardjpodyssey4me: well I don't know if that was by design or not.12:51
tnogistoit crashes after trying to initialize vlan driver12:51
odyssey4meheh, I like the new folder format12:51
evrardjpI have still the https://etherpad.openstack.org/p/osa-zuulv3 where it was shown working12:51
evrardjpI think I have the link there12:51
evrardjplet me check12:51
evrardjptnogisto: I think it's maybe due to a bad nic mapping?12:52
evrardjphave you double checked your configuration?12:52
evrardjpneutron configuration + openstack_user_config12:52
evrardjptnogisto: ^12:52
tnogistoIm trying to get self-provisioned networks to work, so probably they are wrong, but it's still interesting that it crashes that horribly :)12:53
*** sxc731 has joined #openstack-ansible12:55
tnogistohttps://pastebin.com/06JVM5NP12:56
tnogistohere is the ml2_conf.ini12:57
tnogistoand its the neutron server container12:57
odyssey4mexgerman_ the scenario you implemented for testing octavia in the integrated gate was only ever implemented as experimental. You never progressed it to a non voting test. https://github.com/openstack/openstack-ansible/blob/master/zuul.d/project.yaml#L26-L2913:01
evrardjpmhayden: just to make sure we are talking about the same thing: when you said vendor in the gpg key, you meant giving a file to that module, right? http://docs.ansible.com/ansible/latest/rpm_key_module.html13:01
*** Miouge has joined #openstack-ansible13:01
evrardjpmhayden: because https://github.com/openstack/openstack-ansible-pip_install/blob/9372b42afa18d2e5d744de62fb07c2213ca835fa/vars/redhat-7.yml#L38 is the thing that can be slow in gates13:01
odyssey4meevrardjp I think  it was me who said that perhaps vendoring in the keys was a good idea, and yes that means having the key in-repo as a file.13:02
evrardjptnogisto: wow you're on ovs?13:02
evrardjpyeah I am fine with that in a file13:02
evrardjpit doesn't move quite often13:02
evrardjpmy question is where does it matter13:03
evrardjpmhayden: is that the proper var I am showing?13:03
odyssey4meevrardjp mhayden heh, in my own test on centos I got the same memcache error13:03
evrardjpthat sounds bad13:04
evrardjpthat didn't happen yesterday so it's new13:05
tnogistoyas, I want to get OVS working13:05
tnogistoit almost works :)13:06
tnogistoalmost13:06
mhaydenodyssey4me: yeah, this is really strange13:06
odyssey4memhayden hmm, it's trying to get the package from the 'openstack-pike' repository13:06
evrardjptnogisto: haha great13:07
tnogistoI had it working with my not ansible deployment but currently I want to get ansible deployed selfprovisioned networks13:07
mgariepymorning everyone13:07
evrardjpnot many ppl are using ovs13:07
mhaydenodyssey4me: that's where it probably should be getting it from13:07
mhaydenmost likely a newer version there13:07
mhaydenso my OSA AIO went through just fine13:07
gunixevrardjp: so i shouldn't event ry to learn ovs. thank you. :D13:08
mhaydeni wonder if it's the repos in the image biting us again13:08
odyssey4memhayden sure - so I suspect that maybe the key setup failed silently or something13:08
odyssey4meoh hum, gpgcheck is enabled, but not key in the .repo file - is that normal?13:08
evrardjpgunix: haha don't get me wrong, ovs is fun13:08
*** PaulusNL has quit IRC13:09
mhaydenodyssey4me: that's okay -- rpm is smart enough to look through its keys ot find the right one13:09
evrardjpit used to work when someone was actively working on it. I think I heard more and more ppl wanting to use it again13:09
gunixevrardjp: fun or not, it's another week of reading forums, wikis and trying stuff out. i would rather use that time to learn ceph13:09
mhaydenso my installation on plain old centos 7 worked fine13:09
evrardjpgunix: well it's not that hard.13:09
*** esberglu has joined #openstack-ansible13:09
evrardjpbut I understand why you'd want to invest time on ceph.13:10
odyssey4memhayden I just did the 'functional' tox env on a plain centos7 using the openstack-ansible-tests repo and it failed with the same issue13:10
mhaydenodyssey4me: so i'm not seeing those extra repos being disabled -> http://logs.openstack.org/63/501263/5/check/openstack-ansible-functional-centos-7/a349e07/job-output.txt.gz13:11
mhaydeni only see epel getting enabled13:11
gunixevrardjp: what are the technical advantages of using ovs?13:11
* mhayden goes back to look at the tests repo13:11
mhaydenhmm yeah, all of the old repos are still enabled it seems13:12
odyssey4memhayden well, all our job does is executes './run_tests.sh {tox env}' now13:13
odyssey4mehttps://github.com/openstack/openstack-ansible-tests/blob/master/zuul.d/playbooks/run.yml#L2013:13
odyssey4methat's how bindep is used, etc... so our own scripts should be sorting that out13:13
*** PaulusNL has joined #openstack-ansible13:14
evrardjpgunix: flow management13:14
odyssey4meit appears that only the epel and centos keys are installed13:14
mhaydenhmm well let me fire up a test with openstack-ansible-tests then13:14
evrardjpif you don't use flows, I don't see the point13:14
PaulusNLevrardjp: we are going to reinstall the machines and will go further from there13:14
gunixevrardjp: i have no ideea what you mean with flows13:14
evrardjpodyssey4me: mhayden I am working on a patch to vendor in keys, so let's not redo the wheel, I am already doing that :)13:14
evrardjpPaulusNL: ok13:15
evrardjpbefore re-deploy, ensure that your networking is fine13:15
PaulusNLevrardjp: I think we will do more on Friday for our openstack test environment13:15
mhaydenevrardjp: okay13:15
evrardjpPaulusNL: if you want a quick PoC, that's one line of shell, but I guess that's not what you are looking for :p13:15
odyssey4meevrardjp I'm debugging here - not trying to make a patch.13:16
odyssey4mePaulusNL if you're building a test lab out, you might find https://github.com/openstack/openstack-ansible-ops/tree/master/multi-node-aio interesting13:16
PaulusNLevrardjp: no not really... we want to have a real test for production13:17
PaulusNLlabs we already have :)13:17
PaulusNLodyssey4me: thanks for letting know13:17
mhaydenodyssey4me: the tasks seem to show that the key is already present -> http://logs.openstack.org/11/514711/1/check/openstack-ansible-functional-centos-7/4ada47d/job-output.txt.gz#_2017-10-25_02_30_10_78197013:18
odyssey4memhayden yes, applying the command used in the task, I see the key13:19
odyssey4mehowever I don't see the key when doing rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'13:19
mhaydenthat's unusual13:19
odyssey4mewell, let's put it this way - I see the hash in the list when using: rpm -vv -q centos-release13:19
*** armaan has quit IRC13:20
*** mrch has joined #openstack-ansible13:20
*** armaan has joined #openstack-ansible13:20
*** sxc731 has quit IRC13:21
odyssey4memhayden the key shown in the install error is different though: Header V4 RSA/SHA1 Signature, key ID 764429e613:21
odyssey4meheh, oh, it isn't13:21
*** jafeha has joined #openstack-ansible13:21
jafehahello everybody13:21
oansonodyssey4me, Thanks! It seems now the gate fails earlier in the process. I've added openstack/requirements to the required projects, but if that solves the issue maybe it should be pushed to the parent?13:23
odyssey4memhayden ok, if I run this then it shows up properly: rpm --define '%_hkp_keyserver http://pool.sks-keyservers.net' --import 0x764429E613:24
odyssey4meso it seems to me that somehow two databases are not in sync13:24
mhaydenweird13:25
mhaydenwell evrardjp is going to vendor those keys, so hopefully we can avoid these shenanigans in the future13:25
odyssey4meso the plan is to vendor them, and just use ansible to import them idempotently?13:26
*** snowman4839 has quit IRC13:26
jafehai have a question regarding an ovs setup. we've switched from a bridged setup to ovs and have built all the ovs-bridges for our compute nodes. my deployment is currently broken as the pattern check for CONFIG_OPENVSWITCH fails.13:27
mhaydeni believe so, but i'll yield to evrardjp on that13:27
* mhayden is about to scoot for a mtg13:27
jafehai guess this checks if the necessary kernel modules are loaded. do i have to configure ovs-bridges on my mgmt nodes too or does installing the ovs packages do the trick here?13:27
mhayden90 minutes straight of meetings, actually13:27
odyssey4memhayden evrardjp ok, so the root cause of the key fail for centos tests has now been figured out - as you're working on a solution for it anyway I'll leave that one to you13:28
*** SerenaFeng has joined #openstack-ansible13:31
evrardjpyeah, but mine is probably a big patch, so it's maybe a good idea to split it out. Let me do two commits then.13:32
*** PTO has quit IRC13:32
*** armaan has quit IRC13:32
evrardjpso the problem is that it's two different keys in two keyservers?13:32
evrardjpwhat are the odds for that13:33
gunixtempest is a playbook that is part of osa, not part of default openstack, right?13:33
*** ansibler has quit IRC13:33
*** galstrom_zzz is now known as galstrom13:33
mgariepyanyone here tested manila ?13:33
gunixnevermind, i found the tempest role within ansible. i got what it does13:37
gunixopensource is so cool. i can just read the code to understand13:37
openstackgerritMerged openstack/openstack-ansible-tests stable/ocata: Hide yum-config-manager output  https://review.openstack.org/51483813:41
evrardjpgunix: :)13:44
evrardjpsorry for the late answer, you found it yourself :D13:44
*** galstrom is now known as galstrom_zzz13:49
dmsimardodyssey4me: thanks a lot for working on the ara OSA job! I'll fix the pep8 thing today, it was introduced by a pep8 update recently13:49
odyssey4medmsimard sure thing :)13:49
dmsimardwith a bit of luck, I should also be able to tag ara 0.14.5 which will resolve the ansible.cfg issue with ansible 2.4, it will however blacklist 2.4.013:50
dmsimardhoping ansible doesn't delay 2.4.1 any further13:50
*** galstrom_zzz is now known as galstrom13:50
odyssey4meevrardjp the issue is that the key is somehow half imported.... so it'd be better if we can just vendor the key and import it idempotently13:50
evrardjpok13:50
evrardjpI am indeed partly working on that, so it's good13:51
*** gus has quit IRC13:51
*** gus has joined #openstack-ansible13:51
odyssey4meevrardjp I can do a quick hack to unblock gates while you work on something better - but that'll only be worth it if your patch is still going to take another day or so.13:52
*** nshetty__ has joined #openstack-ansible13:52
*** smatzek has joined #openstack-ansible13:52
cloudnullmornings13:53
*** smatzek has quit IRC13:53
*** smatzek has joined #openstack-ansible13:54
*** smatzek has quit IRC13:54
*** nshetty_ has quit IRC13:54
*** smatzek has joined #openstack-ansible13:55
*** nshetty__ has quit IRC13:55
*** nshetty__ has joined #openstack-ansible13:55
*** PaulusNL has quit IRC13:56
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_aodh stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51474813:56
evrardjpodyssey4me: don't worry I will make that patch13:57
*** mrch has quit IRC13:57
*** jwitko has joined #openstack-ansible13:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51507614:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51507614:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51507614:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51507614:07
*** mbuil has quit IRC14:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/ocata: Initial OSA zuul v3 role jobs  https://review.openstack.org/51508214:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/ocata: Initial OSA zuul v3 role jobs  https://review.openstack.org/51508214:15
*** a0x3e8 has joined #openstack-ansible14:16
*** SerenaFeng has quit IRC14:17
*** a0x3e8 has quit IRC14:17
admin0hi all . how to fix all routers going into standby ?14:19
admin0is there a way to make 1 master ?14:19
*** BjoernT has joined #openstack-ansible14:21
*** udesale has quit IRC14:26
*** acormier has joined #openstack-ansible14:26
*** acormier has quit IRC14:27
*** acormier has joined #openstack-ansible14:28
*** yolanda has quit IRC14:28
*** udesale has joined #openstack-ansible14:30
*** acormier has quit IRC14:31
mgariepyadmin0, how many neutron l3 agent do you have ?14:36
admin0i see 4 but all on standby14:37
admin0tried to remove from 3, restart l3 on the remaining one, but it did not helped ..   setting it to down, set mode to ha=false helped, but its now a single point of failure .. maybe there is a way in ansible to lock it to 3 max or 2 max14:38
mgariepylike : max_l3_agents_per_router = 214:39
mgariepyadmin0, https://github.com/openstack/openstack-ansible-os_neutron/blob/master/templates/neutron.conf.j2#L7314:40
mgariepyadmin0, i would suggest to try i at 2.14:41
admin0if i have set all my compute nodes to also be network agents, so say 10 compute, 10 l3, how big do they grow ?14:41
*** TxGirlGeek has joined #openstack-ansible14:41
admin0set max_l3_router = num_agent if num_agent > 2  -- means 1 network can also be in 10 nodes ?14:41
*** gouthamr has joined #openstack-ansible14:41
mgariepyadmin0, i was having it to 3 on mitaka but it was causing issue.14:42
mgariepyit took very long to stabilize. so I switched back to no-ha :)14:43
*** dxiri has joined #openstack-ansible14:45
admin0no-ha is a spof that boss finds hard to accept, ha does not work :D14:45
jafehais there any dev here who was involved in implementing ovs in osa?14:45
*** woodard has joined #openstack-ansible14:45
admin0jafeha, i have ovs working in osa, but i am not a dev14:45
mgariepyhmm. i'm a bit confused about the logic in :https://github.com/openstack/openstack-ansible-os_neutron/blob/master/templates/neutron.conf.j2#L6814:47
jafehaadmin0: could you have a look at your config and tell me "how" you've set the pattern in your user_variables.yml file? i had it first configured including the "=" but ran into issues. removing the character seems to work14:48
mgariepyif there is only 1 agent it's set to 2 ? that is not sounding right haha14:48
jafehathis might be bug in either the documentation or the check itself. i'd say the documentation.14:49
admin0jafeha, i have no idea what you are refering to14:50
jafehaaccording the documentation there should be a config line "pattern: "CONFIG_OPENVSWITCH=""14:52
jafehahttps://docs.openstack.org/openstack-ansible-os_neutron/latest/app-openvswitch.html14:52
admin0aha14:53
admin0hold14:53
jafehatnx14:53
admin0    pattern: "CONFIG_OPENVSWITCH="14:53
admin0let me pastebin14:53
jafehastrange14:53
odyssey4meadmin0 so you have OVS in your deployment?14:54
admin0yes14:54
admin0with some admin0 hacks and workarounds14:54
*** jvidal has quit IRC14:54
odyssey4meany chance that you could put together a patch for the deploy guide to give a full example configuration? In the format given in https://docs.openstack.org/project-deploy-guide/openstack-ansible/draft/app-config-test.html14:54
admin0but the core networking is in ovs14:54
*** br0k3n1 has quit IRC14:55
evrardjpafter a very long work on testing rpm cli, I realized that rpm_key is properly idempotent with the same commands I was using. Time loss: 1 hour. :/14:56
evrardjpat least I know how it works.14:56
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible master: Integrate Congress with OSA.  https://review.openstack.org/50397114:56
odyssey4mehwoarang evrardjp FYI apparently there's a patch that's merged to solve the log issue - they're restarting zuul now, after which we should be able to test our patch again14:58
evrardjpodyssey4me: the issue you reported was for memcached_server right?14:58
odyssey4meplease hold - your logs are important to us14:58
evrardjpgreat14:58
odyssey4meevrardjp the issue was for openstack-ansible-tests14:58
odyssey4methe memcache_server role tests fine, because it doesn't use the openstack repositories14:58
evrardjplet me check where is the key managed there14:58
odyssey4meevrardjp the key is managed in openstack_hosts and pip_install14:58
evrardjpyeah ok14:59
evrardjpbut that was memcached_server that failed then?14:59
evrardjpif that, it means I have to patch hosts more urgently14:59
evrardjpthen pip install14:59
odyssey4meyeah, memcache failed to install from the RDO repo because the key was improperly imported14:59
odyssey4meyes, hosts and pip install - with that we should be good15:00
*** weezS has joined #openstack-ansible15:00
*** BjoernT has quit IRC15:02
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-openstack_hosts master: Vendor in the RDO GPG keys to install  https://review.openstack.org/51510115:02
tnogistooki, got my OVS to work, is it correct that openstack-ansible deployed console doesnt work out of the box?15:03
*** snowman4839 has joined #openstack-ansible15:03
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-openstack_hosts master: Vendor in the RDO GPG keys to install  https://review.openstack.org/51510115:03
admin0odyssey4me, my workaround was due to setup-hosts not working due to the script expecting linuxbride, i run all network containers on metal on some of the hosts15:04
admin0so in my case, compute node == network node15:04
jafehathis is really strange. the openstack_kernel_modules.yml explicitly checks for '=y' or '=m' for loaded modules. https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/tasks/openstack_kernel_modules.yml15:04
jafehabut anyway, i found a workaround for the moment15:04
jafehaodyssey4me: is there still someone around who i could ask abount the openstack_kernel_modules.yml code?15:05
*** woodard has quit IRC15:06
admin0jafeha, https://pastebin.com/yZGS1dph15:06
*** woodard has joined #openstack-ansible15:06
admin0jafeha, that is for OVS on the user_variables15:07
jafehaadmin0: thank you! i'll have a closer look and check my config15:07
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: Vendor in the RDO GPG keys to install  https://review.openstack.org/51510315:07
admin0odyssey4me, i am currently redoing this platform in pike .. i will paste the full configs in that same manner for ovs15:08
admin0but give me some days for that15:08
odyssey4mejafeha that stuff was implemented by some intel guys some time back - unfortunately they're not around any more15:12
odyssey4mejafeha it'd be better to just ask the questions to the channel, and hopefully someone can respond... we have some people around who know there way around kernel configs here and there15:12
*** Oku_OS is now known as Oku_OS-away15:12
evrardjpjafeha: what's your issue?15:13
odyssey4metnogisto it does work out the box - what issue are you seeing? bear in mind that by default you're using a self-signed cert, so your browser might block the wss being tunnelled through it15:13
evrardjpI am refactoring the openstack_hosts role right now, and I refactored those taks.15:13
odyssey4meevrardjp posed a question in https://review.openstack.org/#/c/515101/2 and a suggestion15:14
evrardjpanswered the question... the suggestion is duely noted: it will be done differently with my patch15:16
evrardjpbasically handling distros the same way15:16
evrardjpI was not ready to go on a crusade for changing those modules.15:17
evrardjpmaybe I should just write a quick action plugin and vendor it in too, but I have the feeling we would increase our tech debt15:17
tnogistoya, it does work, but haproxy thinks its backend should be https, but spice thinks it wants to serve http.15:17
evrardjpthat's probably a variable to change tnogisto15:18
tnogistoalso horizon links the https site as http15:18
tnogistotrue15:18
evrardjpis there no docs for that?15:18
tnogistoI was initialy confused by the behaviour :)15:19
odyssey4metnogisto that doesn't sound normal15:19
evrardjptrue that!15:19
odyssey4meevrardjp another question in the same patch - thanks :)15:19
tnogistonow I know what causes it and will fix it soon to work properly, sorry to bother you guys :)15:19
tnogistoI can show you the conf, but thats how it worked out of the box, didnt make any special changes to it yet.15:21
mhaydenxgerman_: do you have time to get openstack-ansible-os_octavia working with zuulv315:21
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Move log collection to 'post' stage  https://review.openstack.org/51371115:22
odyssey4memhayden there's already a zuulv3 patch up - but it seems the functional test is failing15:23
evrardjpmhayden: opinion on the location of gpg keys? We'd need an experienced centos admin: https://review.openstack.org/#/c/515101/215:24
*** nshetty__ has quit IRC15:24
mhaydenevrardjp: i'd suggest /tmp since it's best to let rpm put the files down witht he right permissions and SELinux contexts15:25
evrardjpyeah that's what I thought first15:25
evrardjptmp being generally a noexec place and all15:25
* mhayden commented15:25
evrardjpthanks15:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Move log collection to 'post' stage  https://review.openstack.org/51371115:29
jafehaodyssey4me: thank you15:29
odyssey4meevrardjp mhayden thanks!15:31
evrardjpthank you!15:32
evrardjpwith you in capital letters15:32
*** galstrom is now known as galstrom_zzz15:33
jafehaevrardjp: the kernel module check does not work for me when i enable the CONFIG_OPENVSWITCH kernel module as written in the documentation.15:34
*** thorst_ has quit IRC15:34
*** rodolof has quit IRC15:34
evrardjpok15:35
*** thorst has joined #openstack-ansible15:35
evrardjpso you mean the pattern is wrong15:35
openstackgerritGerman Eichberger proposed openstack/openstack-ansible master: Add Neutron variables shared with Octavia  https://review.openstack.org/51511015:35
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia master: Improve event streaming with a better Octavia verison  https://review.openstack.org/51485215:36
jafehaevrardjp: there is a pattern check in the code for "$MODULE" the documentation refers to "$MODULE="15:37
jafehaevrardjp: for admin0 works the option "pattern: "CONFIG_OPENVSWITCH="" for me works the option "pattern: "CONFIG_OPENVSWITCH"" ;)15:38
evrardjpyeah makes sense15:38
evrardjpthat is a doc change I guess :)15:38
evrardjpcould you patch it?15:38
evrardjpthat would be nice15:38
admin0jafeha, if both works, whats the one to use :)15:39
jafehathats the question :D15:39
*** thorst has quit IRC15:39
jafehaother implementations refer to "$MODULE" https://docs.openstack.org/openstack-ansible-openstack_hosts/latest/15:39
jafehai've never made a doc patch, but if we agree to the change, i'll post a patch tomorrow15:41
admin0so modules and also config_openvswitch has multiple working examples :D15:42
jafehathe thing is: i do not fully understand the checks in the openstack_kernel_modules.yml. admin0 might have passed another condition? https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/tasks/openstack_kernel_modules.yml15:43
*** jwitko has quit IRC15:44
admin0jafeha,  me too ..  i came here, asked around, tinkered with it, it worked .. moved on to do something else :D15:44
*** jwitko has joined #openstack-ansible15:44
jafehathere are four when clauses, two check for "=y" and "=m"15:45
admin0thing is, OVS example/usage is less with osa .. so there is no fixed "this is how we are going to do it"  road (yet)15:46
*** smatzek_ has joined #openstack-ansible15:46
admin0if they decide to gate check in both ovs/lb -  i am sure a lot of things will improve15:47
jafehaadmin0: as we're deploying it, we might be able to help15:47
admin0yes .. but we are ending up in 2 configs .. lets sit down for a week and see how many more we can gather15:47
admin0after 4 hours will be more people here ( from the US ) whom also have some ovs-osa deployment15:48
admin0can ask around for the config they use15:48
jafehasure. there seems to be much work necessary for the "default" ovs deployment, but my config is not that different in the end15:48
*** pcaruana has quit IRC15:49
jafehasun sets in berlin, not sure how long i'll be around today ;)15:49
*** smatzek has quit IRC15:49
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Run security hardening when leaping a deployment  https://review.openstack.org/51511415:50
mhaydenevrardjp: looks like https://review.openstack.org/515101 needs a small adjustment15:54
evrardjpoh let me have a look15:54
mhaydenjust missing an underscore on _add_yum_keys15:54
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-openstack_hosts master: Vendor in the RDO GPG keys to install  https://review.openstack.org/51510115:55
evrardjpvery silly15:55
evrardjpyeah15:55
mhaydenevrardjp: i still think you're pretty cool15:55
mhaydenregardless of what odyssey4me says15:55
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: Vendor in the RDO GPG keys to install  https://review.openstack.org/51510315:55
evrardjplol15:55
mhaydenevrardjp: this one has the same error -> https://review.openstack.org/51510315:56
mhaydenbam!15:56
evrardjpwhen did he say I am not cool?15:56
*** huxinhui_ has quit IRC15:56
evrardjp:p15:56
admin0so i create some instances using heat :) .. i pre-specify the ssh key .. does not work .. i rebuild the instances again using rebuild  ( and not delete the stack) .. ssh keys work15:56
* mhayden whistles15:56
* evrardjp brings forks15:56
evrardjp:)15:56
mhaydenodyssey4me: feel free to re-deuce https://review.openstack.org/515103 and https://review.openstack.org/51510115:56
*** weezS has quit IRC15:57
mhaydencloudnull: isn't this run as part of `setup-hosts.yml` in newton? https://review.openstack.org/#/c/515114/15:57
cloudnullit is however we're not running setup-hosts in leap15:58
mhaydenoh, i see right above there15:58
*** weezS has joined #openstack-ansible15:58
openstackgerritMerged openstack/openstack-ansible-galera_server stable/newton: Remove unified queue from gate pipeline  https://review.openstack.org/51472415:58
openstackgerritMajor Hayden proposed openstack/ansible-hardening master: Docs/Reno fixes  https://review.openstack.org/51479015:59
*** mpranjic has joined #openstack-ansible16:01
*** wspthr has joined #openstack-ansible16:02
*** Miouge has quit IRC16:05
*** wspthr has left #openstack-ansible16:15
*** wspthr has joined #openstack-ansible16:15
evrardjpodyssey4me: you wanted to vendor in the uca jeys too?16:23
evrardjpkeys*16:23
evrardjpthat's a weird lapsus.16:23
odyssey4meevrardjp if we're going to adopt this (which is good for offline installs), we should do it everywhere16:23
evrardjpk16:23
evrardjpgood16:23
odyssey4merabbitmq, mariadb, uca, etc16:23
evrardjpwill do16:23
evrardjpyeah that's included in my patch :p16:23
evrardjpwell16:24
evrardjpnot 100%16:24
evrardjpbut16:24
evrardjpit can be an override16:24
odyssey4meit should be our default16:24
odyssey4meIMO16:24
evrardjpwhy should we ship all the keys for all the containers?16:24
evrardjpI understand shipping uca everywhere16:24
evrardjpbut mariadb and rabbitmq keys... meh16:24
evrardjpwell why not...16:25
odyssey4methey're all reaching out to the internet, so they're all a risk of failure for the same reasn16:25
evrardjpoh yeah, I thought you meant shipping to all the containers all the keys16:26
odyssey4meoh no16:27
*** thorst has joined #openstack-ansible16:27
odyssey4mejust each role that adds a repo, should add the key for the repo16:27
evrardjpyeah ok16:27
evrardjpin the same way16:27
odyssey4meyup16:27
evrardjpsounds good16:27
evrardjpI may even have a good idea for once16:28
odyssey4meyou have many good dieas16:28
evrardjpwell let's see what it gives in actual code16:28
*** armaan has joined #openstack-ansible16:29
*** maybebuggy has quit IRC16:34
*** udesale has quit IRC16:35
*** DanyC has quit IRC16:39
openstackgerritMerged openstack/openstack-ansible master: Correct regex for disk size  https://review.openstack.org/51499616:50
openstackgerritMerged openstack/openstack-ansible stable/pike: Add ceph-ansible v3 support  https://review.openstack.org/51265516:50
openstackgerritByron McCollum proposed openstack/openstack-ansible-os_horizon master: IMAGES_ALLOW_LOCATION Wrongly Templated As String  https://review.openstack.org/51513316:55
*** snowman4839 has quit IRC16:58
*** snowman4839 has joined #openstack-ansible16:59
openstackgerritMajor Hayden proposed openstack/ansible-hardening master: Docs/Reno fixes  https://review.openstack.org/51479017:00
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: Hide yum-config-manager output  https://review.openstack.org/51483517:01
openstackgerritMerged openstack/openstack-ansible stable/newton: Update number of workers to optimize gate memory  https://review.openstack.org/51105117:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Move log collection to 'post' stage  https://review.openstack.org/51371117:04
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Move log collection to 'post' stage  https://review.openstack.org/51371117:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/pike: Correct regex for disk size  https://review.openstack.org/51513817:06
*** phalmos has joined #openstack-ansible17:20
*** smatzek_ is now known as smatzek17:21
*** dmsimard is now known as dmsimard|afk17:23
*** vnogin has quit IRC17:24
*** phalmos_ has joined #openstack-ansible17:25
*** phalmos has quit IRC17:27
*** germs has joined #openstack-ansible17:34
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova stable/newton: Ensure nova is started after everything else  https://review.openstack.org/51514517:34
*** germs1 has joined #openstack-ansible17:36
*** germs has quit IRC17:38
*** TxGirlGeek has quit IRC17:43
openstackgerritMerged openstack/openstack-ansible-pip_install master: Vendor in the RDO GPG keys to install  https://review.openstack.org/51510317:45
*** TxGirlGeek has joined #openstack-ansible17:49
openstackgerritMerged openstack/openstack-ansible-ops master: Run security hardening when leaping a deployment  https://review.openstack.org/51511417:50
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: Vendor in the RDO GPG keys to install  https://review.openstack.org/51510117:53
*** gkadam has quit IRC17:54
*** poopcat has joined #openstack-ansible17:57
*** electrofelix has quit IRC17:57
*** smatzek_ has joined #openstack-ansible17:59
*** smatzek has quit IRC18:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts stable/pike: Vendor in the RDO GPG keys to install  https://review.openstack.org/51515418:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install stable/pike: Vendor in the RDO GPG keys to install  https://review.openstack.org/51515518:08
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible master: Integrate Congress with OSA.  https://review.openstack.org/50397118:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests stable/pike: Hide yum-config-manager output  https://review.openstack.org/51483718:14
*** chhavi has quit IRC18:17
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: Hide yum-config-manager output  https://review.openstack.org/51483518:29
*** stuartgr has quit IRC18:35
*** dxiri_ has joined #openstack-ansible18:35
*** tasker has quit IRC18:38
*** dxiri has quit IRC18:38
*** dxiri_ has quit IRC18:40
*** yolanda has joined #openstack-ansible18:40
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests stable/pike: Add fedora to run_tests_common.sh  https://review.openstack.org/51471118:45
*** newmember has joined #openstack-ansible18:50
xgerman_this confuses me: http://logs.openstack.org/67/514767/3/check/openstack-ansible-functional-ubuntu-xenial/a4ca403/job-output.txt.gz#_2017-10-24_19_41_06_106126 I am shutting down the bridge but then it’s still up. Did something change with the test code?19:02
*** vnogin has joined #openstack-ansible19:11
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova stable/newton: Ensure nova is started after everything else  https://review.openstack.org/51514519:13
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_nova stable/newton: Change checkout for nova-lxd to use the EOL tag  https://review.openstack.org/51517819:13
openstackgerritMerged openstack/openstack-ansible stable/pike: Correct regex for disk size  https://review.openstack.org/51513819:13
*** mummer has joined #openstack-ansible19:16
mhaydenyay19:21
mgariepymhayden, is the STIG stuff talks about KSM anywhere ?19:23
mhaydenkvm shared memory?19:24
mhaydeni don't believe so19:24
mgariepyyep19:24
mhaydennot sure if i would use KSM on a multi-tenant env19:24
mgariepyit's active by default.19:24
mhaydenor a multi security level env19:24
mhaydenhah19:24
mgariepyat least on ubuntu19:24
mhaydeni thought you had to run the ksmtuned daemon for it19:24
mhaydenoh19:24
mhaydenit's off by default on centos19:24
mgariepyhttp://paste.openstack.org/show/624642/19:25
mgariepyqemu-kvm set it to auto on 16.04.19:26
mgariepyhrm (old host )19:26
mhaydeninteresting19:26
mgariepysadly.19:26
mhaydenubuntu continues to surprise me19:26
spotzweird one is on by default and the other off by default19:26
mgariepyhwoarang, what's about opensuse ?19:27
mgariepythat's the things with defaults ..19:27
mhaydendang, looks like evrardjp's GPG key patches weren't enough19:27
evrardjp?19:27
evrardjpwhat did I miss?19:28
mhaydenhttp://logs.openstack.org/35/514835/3/check/openstack-ansible-functional-centos-7/a080e79/job-output.txt.gz#_2017-10-25_19_01_20_38141619:28
*** woodard has quit IRC19:28
* mhayden builds an AIO to dig into it19:29
*** marst has joined #openstack-ansible19:32
xgerman_so when I try to run the functional test on my own vm with tox -efunctional it works — but on the zuul host it blows up bringing up the br-lbaas interface…19:35
xgerman_very confused…19:36
evrardjpmhayden: does memcached need another key?19:37
mhaydenevrardjp: firing up a AIO19:38
evrardjpmhayden: oh no19:38
evrardjpno need19:38
evrardjp:)19:38
evrardjpgot it19:38
mhaydenhah, okay19:38
evrardjpwell I think19:38
evrardjphttps://github.com/openstack/openstack-ansible-memcached_server/blob/master/meta/main.yml#L38-L4019:38
evrardjpno pip install in deps19:39
evrardjpso we rely on openstack_hosts19:39
mhaydenOOOOOH19:39
*** TxGirlGeek has quit IRC19:39
evrardjpbut check the host you're targetting19:39
mhaydendidn't we change that to include_role somewhere?19:39
evrardjpit's not the host19:39
evrardjpmhayden: I am busy doing that19:39
evrardjpmaybe I missed it?19:39
evrardjpwell I am completely refactoring openstack_hosts role right now :p19:39
evrardjpbut in the meantime19:39
evrardjpwe should know why the container didn't inherit from the host19:40
evrardjpok let me check real quick then19:41
evrardjpif you have a host that should be easier to find out19:42
*** pbandark has quit IRC19:42
evrardjphttps://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/vars/redhat-7.yml#L6119:42
evrardjpso19:42
evrardjpwhat Jesse said was correct.19:42
evrardjpwe should maybe have put the file there19:43
mhaydenbut pip_install should set that up properly19:43
evrardjppip install adds the key properly on the lxc_host19:43
mhaydenit won't be right in the container cache, but it will b eright when pip_install comes along19:43
evrardjpwhich is fine19:43
mhaydenwhich i guess is why memcached is broken19:44
evrardjpmhayden: that's what I said earlier19:44
evrardjpmemcached doesn't need pip19:44
mhaydenyup19:44
mhaydentrue19:44
evrardjpso we don't have that19:44
evrardjpso we should rely on the base container that behaves properly19:44
mhaydenwe could try to match the permissions of other gpg keys in there19:44
evrardjpOR alternatively19:44
mhaydenand run restorecon on the roles to make sure selinux contexts are good19:44
evrardjpadd the key into memcached19:44
evrardjpOR19:44
evrardjpalternatively19:44
evrardjpwait for my next commit19:44
* mhayden waits19:45
evrardjpto openstack_hosts :p19:45
evrardjpit's not ready and it's late19:45
evrardjpwhat do you think should we do in the meantime?19:45
evrardjpI'd say move the key into that location19:45
mhaydenseems okay19:45
mhaydenwant me to do it? in a meeting for the next 15 min19:45
evrardjpwell you can do it after your meeting19:46
evrardjp:)19:46
mhaydenokay, can do19:46
evrardjpI'd be happy to see a patch indeed, because I want to stop working for today :D19:46
mhaydengo enjoy a beer sir19:46
evrardjpbut I will work on this refactor tomorrow19:46
evrardjpin the meantime, all you do there with the proper permissions and selinux context is good, because I can reuse it19:47
spotzlater evrardjp19:48
evrardjpsee you later spotz!19:48
*** woodard has joined #openstack-ansible20:01
mhaydenso it looks like ansible *thinks* that 764429E6 is in place, but it isn't20:02
*** Miouge has joined #openstack-ansible20:08
*** hachi_ has joined #openstack-ansible20:09
*** TxGirlGeek has joined #openstack-ansible20:11
openstackgerritMaxime Guyot proposed openstack/openstack-ansible-os_cinder master: Fix indentation of container_vars for ceph doc  https://review.openstack.org/51497720:12
openstackgerritMajor Hayden proposed openstack/openstack-ansible-memcached_server master: Apply pip_install to memcached role  https://review.openstack.org/51519420:14
*** phalmos_ has quit IRC20:15
*** acormier has joined #openstack-ansible20:19
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: Hide yum-config-manager output  https://review.openstack.org/51483520:20
*** smatzek_ has quit IRC20:21
*** smatzek has joined #openstack-ansible20:22
*** acormier has quit IRC20:25
*** smatzek has quit IRC20:26
*** thorst has quit IRC20:27
*** vnogin has quit IRC20:37
*** thorst has joined #openstack-ansible20:48
*** thorst has quit IRC20:48
*** thorst has joined #openstack-ansible20:49
mhaydenevrardjp: this fixes it --> https://review.openstack.org/515194 (for your review tomorrow)20:49
mhaydenalthough i don't like applying pip_install to memcached, it does work20:49
mhaydenand brings that container in line with the others20:50
openstackgerritMajor Hayden proposed openstack/openstack-ansible-memcached_server stable/pike: Apply pip_install to memcached role  https://review.openstack.org/51520520:50
evrardjp[m]yes, that's an alternative20:50
evrardjp[m]wasn't it possible to move the gpg file instead ?20:50
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests stable/pike: Hide yum-config-manager output  https://review.openstack.org/51483720:51
*** masuberu has quit IRC20:51
mhaydenevrardjp[m]: that is a possibility20:52
*** thorst has quit IRC20:53
evrardjp[m]sounded less terrible than adding pip install but.. meh ;) fine for me for now...20:53
evrardjp[m]i was worried about selinux contexts20:54
*** yolanda has quit IRC20:56
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Copy RPM keys into correct place  https://review.openstack.org/51520621:00
*** Miouge has quit IRC21:00
*** vnogin has joined #openstack-ansible21:01
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests stable/newton: use Newton sha's for cross repo versions  https://review.openstack.org/51520721:02
*** mummer has quit IRC21:02
*** hachi_ has quit IRC21:03
*** mummer has joined #openstack-ansible21:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install master: Copy RPM keys into correct place  https://review.openstack.org/51520821:06
*** dmsimard|afk is now known as dmsimard21:08
*** mummer has quit IRC21:10
*** mummer has joined #openstack-ansible21:13
*** TxGirlGeek has quit IRC21:15
*** jwitko has quit IRC21:21
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_freezer master: Updated from global requirements  https://review.openstack.org/51425821:24
*** mwynne has quit IRC21:28
*** esberglu has quit IRC21:29
*** mwynne has joined #openstack-ansible21:30
openstackgerritVictor Morales proposed openstack/openstack-ansible master: Add proxy environment vars to boostrap-aio.yml  https://review.openstack.org/51521421:31
*** esberglu has joined #openstack-ansible21:43
*** esberglu has quit IRC21:48
*** weezS has quit IRC21:54
*** marst has quit IRC21:58
openstackgerritFrank Zhang proposed openstack/openstack-ansible-ops master: Automate Elasticsearch upgrade in leap  https://review.openstack.org/51521922:08
*** TxGirlGeek has joined #openstack-ansible22:08
*** smatzek has joined #openstack-ansible22:10
*** smatzek has quit IRC22:15
*** weezS has joined #openstack-ansible22:21
*** mwynne has quit IRC22:29
*** pbandark has joined #openstack-ansible22:31
*** pbandark has quit IRC22:33
*** thorst has joined #openstack-ansible22:35
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_freezer master: Updated from global requirements  https://review.openstack.org/51425822:40
*** thorst has quit IRC22:42
*** pbandark has joined #openstack-ansible22:42
*** thorst has joined #openstack-ansible22:43
*** thorst has quit IRC22:46
*** pmannidi has joined #openstack-ansible22:50
*** dxiri has joined #openstack-ansible22:57
*** dxiri has quit IRC22:57
*** dxiri has joined #openstack-ansible22:58
*** alanmeadows has quit IRC23:03
*** alanmeadows has joined #openstack-ansible23:03
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_freezer master: Updated from global requirements  https://review.openstack.org/51425823:05
*** masuberu has joined #openstack-ansible23:05
*** weezS has quit IRC23:08
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_freezer master: Updated from global requirements  https://review.openstack.org/51425823:08
*** gouthamr has quit IRC23:22
*** gouthamr has joined #openstack-ansible23:22
*** TxGirlGeek has quit IRC23:23
*** thorst has joined #openstack-ansible23:45
*** thorst has quit IRC23:46

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!