| bndzor | ah well, my bad. il fix that and should be gucci | 00:01 |
|---|---|---|
| cloudnull | you can rerun any/all of it | 00:02 |
| cloudnull | so just add the hap config and rerun setup-everything | 00:02 |
| cloudnull | or you can start from setup-infra | 00:03 |
| cloudnull | its totally up to you | 00:03 |
| bndzor | ah nice | 00:03 |
| bndzor | so what is exactly external_lb_vip_address | 00:04 |
| bndzor | is that where horizon will listen ? | 00:04 |
| cloudnull | external_lb_vip_address is some address that would be considered public. its used by openstack for the public endpoint and haproxy will use it as a public bind address with an ssl cert | 00:05 |
| *** gouthamr has quit IRC | 00:05 | |
| bndzor | gotcha | 00:05 |
| bndzor | can i set it to an ip or do i need to create a alias for it | 00:05 |
| cloudnull | internal_lb_vip_address is some address that will only be used internal to the cluster, typically this is on the br-mgmt ip space. | 00:05 |
| cloudnull | you can set either of these to anything you want, however they can not be the same. | 00:06 |
| bndzor | alright | 00:06 |
| cloudnull | you could use external_lb_vip_address=10.0.0.1 and internal_lb_vip_address=10.0.0.2 | 00:06 |
| cloudnull | totally fine. | 00:06 |
| bndzor | ah ok | 00:07 |
| *** thorst has joined #openstack-ansible | 00:07 | |
| bndzor | im curious how its going to perform | 00:07 |
| cloudnull | just make sure you have those addresses on your host(s) (or manageable by keepalived) and all will be right with the world. | 00:07 |
| bndzor | 4x40ge mlag | 00:08 |
| bndzor | with a 20ge uplink to them internetz | 00:08 |
| bndzor | well it passed haproxy test now, thats really nice that it "resumes" | 00:10 |
| cloudnull | We typically run LACP w/ 2 bonded 10GiB nics. Which is great! | 00:10 |
| bndzor | yeah same setup here | 00:10 |
| bndzor | just not too happy about them nics in some machines, most of have intels, but some have broadcoms ;( | 00:10 |
| bndzor | there was a wierd issue on some of the hp cards (broadcom) where firmware had to be flashed to get pxe up and running | 00:11 |
| *** snowman48391 has quit IRC | 00:11 | |
| cloudnull | I've had good luck with intel x710(s), x520(s) | 00:13 |
| cloudnull | as well as melenox connect x3-pros | 00:13 |
| cloudnull | I've not had to deal with many broadcom nics in prod | 00:13 |
| bndzor | one of the broadcom cards went apeshit after a few days, and got the same mac on both ports... | 00:13 |
| *** snowman4839 has joined #openstack-ansible | 00:13 | |
| cloudnull | that's a bummer. | 00:13 |
| bndzor | ive never had any issues with intel, love their cards | 00:14 |
| bndzor | hmm | 00:14 |
| bndzor | fatal: [infra1_galera_container-a9b96010]: FAILED! => {"attempts": 5, "changed": false, "dest": "/opt/get-pip.py", "failed": true, "msg": "Request failed: <urlopen error [Errno 113] No route to host>", "state": "absent", "url": "http://172.29.236.9:8181/os-releases/16.0.1/ubuntu-16.04-x86_64/get-pip.py"} | 00:14 |
| cloudnull | it should fall back and use a recovery method | 00:14 |
| bndzor | ah, yes seems like it | 00:15 |
| cloudnull | in the pip install role we use blocks which support recovery tasks and thats one place I know where we use it | 00:15 |
| bndzor | :) | 00:15 |
| cloudnull | its a bad UX | 00:15 |
| cloudnull | I've heard that ansible is going to adjust that in 2.5 | 00:16 |
| cloudnull | so it'll get better with time | 00:16 |
| *** pbandark1 has joined #openstack-ansible | 00:16 | |
| cloudnull | for now it just looks bad, but its not, unless it is :D | 00:16 |
| *** pbandark has quit IRC | 00:16 | |
| *** pbandark1 is now known as pbandark | 00:16 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts stable/pike: Combined backport for LXC container create storage options https://review.openstack.org/517338 | 00:21 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts stable/pike: Enable cross project gating https://review.openstack.org/519000 | 00:27 |
| bndzor | HMM IT FAILED | 00:27 |
| bndzor | RERUNNING | 00:27 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts stable/pike: Combined backport to fix issues and enhance efficiency https://review.openstack.org/517341 | 00:28 |
| cloudnull | where did it fail? | 00:29 |
| bndzor | hmm | 00:30 |
| bndzor | still failing | 00:30 |
| bndzor | lemme paste | 00:30 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible master: Fix automatic log copying in Zuul runs https://review.openstack.org/516448 | 00:30 |
| cloudnull | o/ logan- | 00:30 |
| bndzor | http://paste.openstack.org/show/626046/ | 00:31 |
| logan- | o/ cloudnull | 00:31 |
| logan- | how was the trip? | 00:31 |
| *** thorst has quit IRC | 00:31 | |
| *** thorst has joined #openstack-ansible | 00:31 | |
| cloudnull | bndzor: looks like it can not connect to http://172.29.236.9:8181 which would be the internal vip address on hap | 00:32 |
| cloudnull | is that up ? | 00:32 |
| cloudnull | that address is used for the repo server | 00:33 |
| *** thorst has quit IRC | 00:33 | |
| cloudnull | logan-: the trip was good, long travel time, but great overall. | 00:33 |
| logan- | :) | 00:33 |
| *** thorst has joined #openstack-ansible | 00:33 | |
| cloudnull | missed seeing you there, hopefully we can get a few cloud beers at the PTG :D | 00:34 |
| logan- | yep! hope so | 00:34 |
| bndzor | hmm | 00:34 |
| cloudnull | bndzor: you can see if the haproxy bits are working using hatop -s /var/run/haproxy.sock on your haproxy nodes. | 00:35 |
| bndzor | nah i forgot about the internal :) | 00:35 |
| *** TxGirlGeek has quit IRC | 00:35 | |
| bndzor | so, on what vlan/range should internal_lb_vip_address be ? | 00:35 |
| bndzor | mgmt ? | 00:36 |
| cloudnull | typically mgmt | 00:36 |
| bndzor | aah | 00:36 |
| bndzor | oh, wait, it is | 00:36 |
| cloudnull | my bad. `hatop -s /var/run/haproxy.stat` | 00:38 |
| cloudnull | also can you curl the vip address | 00:38 |
| cloudnull | on that port 8181 | 00:38 |
| *** thorst has quit IRC | 00:38 | |
| bndzor | hatop -s works | 00:38 |
| bndzor | on infra 1 to 3 | 00:39 |
| cloudnull | are the repo servers up? | 00:39 |
| cloudnull | and your vips should be on one of your lb nodes. | 00:39 |
| bndzor | infra1_repo_container-a5c60a53 RUNNING 1 onboot, openstack 10.0.3.205, 172.29.239.250 - | 00:40 |
| cloudnull | does hatop report that the repo-servers are up ? | 00:40 |
| bndzor | trying to find it | 00:42 |
| cloudnull | I gotta run, bbl | 00:43 |
| cloudnull | have a good one all | 00:43 |
| bndzor | hmm i cant see it there | 00:43 |
| bndzor | cya cloud and thanks for the help! | 00:43 |
| cloudnull | bndzor: are you using hap with keepalived ? | 00:43 |
| bndzor | i think i saw keepalive somewhere, yeah. I just went straight for the example config | 00:44 |
| cloudnull | https://docs.openstack.org/openstack-ansible-haproxy_server/latest/configure-haproxy.html#making-haproxy-highly-available | 00:44 |
| cloudnull | might be of help | 00:44 |
| bndzor | thanks! | 00:45 |
| cloudnull | if it comes to it you could just add the needed vips to one of your LBs and circle back on making it HA | 00:46 |
| cloudnull | something like `ip addr add $CIDR_ADD dev br-mgmt` | 00:47 |
| bndzor | il play around a bit :) | 00:47 |
| bndzor | ah oki | 00:48 |
| cloudnull | just do that on one of the nodes. | 00:48 |
| cloudnull | doing it on all three would be bad | 00:48 |
| bndzor | yah | 00:48 |
| bndzor | giving that a try right now | 00:48 |
| cloudnull | it's not HA but can complete the deployment and re-add the HA bits later on. | 00:48 |
| bndzor | yep :) | 00:49 |
| cloudnull | ok, gotta run . | 00:49 |
| cloudnull | chao. | 00:49 |
| bndzor | have a good one! | 00:49 |
| bndzor | and thanks again! | 00:50 |
| *** rodolof has quit IRC | 00:57 | |
| *** esberglu has quit IRC | 01:33 | |
| *** SmearedBeard has quit IRC | 01:33 | |
| *** ZiLi0n has joined #openstack-ansible | 01:45 | |
| ZiLi0n | hello everyone. anyone has the network interfaces configuration for a AIO deployment? I can't get it to work right, everytime I restart the networking service, it fails... | 01:47 |
| *** woodard_ has joined #openstack-ansible | 01:47 | |
| *** woodard has quit IRC | 01:47 | |
| *** ZiLi0n has quit IRC | 02:01 | |
| *** pbandark has quit IRC | 02:04 | |
| *** dave-mccowan has joined #openstack-ansible | 02:05 | |
| *** dmsimard is now known as dmsimard|off | 02:17 | |
| *** ZiLi0n has joined #openstack-ansible | 02:22 | |
| ZiLi0n | hello everyone. anyone has the network interfaces configuration for a AIO deployment? I can't get it to work right, everytime I restart the networking service, it fails... | 02:22 |
| *** dave-mcc_ has joined #openstack-ansible | 02:23 | |
| *** dave-mccowan has quit IRC | 02:26 | |
| *** thorst has joined #openstack-ansible | 02:35 | |
| *** thorst has quit IRC | 02:43 | |
| *** thorst has joined #openstack-ansible | 02:44 | |
| *** thorst has quit IRC | 02:44 | |
| *** dave-mcc_ has quit IRC | 03:26 | |
| ZiLi0n | hi, I am running into errors with pip and the repo. It tries to access port 8181 but there is nothing listening there. | 03:51 |
| *** ZiLi0n has quit IRC | 04:32 | |
| *** weezS has joined #openstack-ansible | 04:42 | |
| *** thorst has joined #openstack-ansible | 04:45 | |
| *** sxc731 has joined #openstack-ansible | 04:55 | |
| *** bhujay has joined #openstack-ansible | 05:06 | |
| *** bhujay has quit IRC | 05:13 | |
| *** bhujay has joined #openstack-ansible | 05:14 | |
| *** agrebennikov has quit IRC | 05:30 | |
| *** weezS has quit IRC | 05:36 | |
| *** taseer2 is now known as Taseer | 05:47 | |
| *** sxc731 has left #openstack-ansible | 06:02 | |
| *** bhujay has quit IRC | 06:15 | |
| *** bhujay has joined #openstack-ansible | 07:18 | |
| *** SmearedBeard has joined #openstack-ansible | 07:45 | |
| gunix | Zili0n/ | 07:49 |
| gunix | ? | 07:49 |
| *** Smeared_Beard has joined #openstack-ansible | 07:50 | |
| *** SmearedBeard has quit IRC | 07:51 | |
| *** thorst has quit IRC | 08:30 | |
| *** jwitko has quit IRC | 08:54 | |
| *** cshen has joined #openstack-ansible | 09:01 | |
| *** cshen has quit IRC | 09:30 | |
| *** ericzolf has joined #openstack-ansible | 10:01 | |
| *** Smeared_Beard has quit IRC | 10:13 | |
| openstackgerrit | Dimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Fix typo https://review.openstack.org/519014 | 10:21 |
| openstackgerrit | Dimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Fix typo https://review.openstack.org/519014 | 10:26 |
| openstackgerrit | Dimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Add hosts to ODL test inventory https://review.openstack.org/518964 | 10:26 |
| *** thorst has joined #openstack-ansible | 10:28 | |
| *** chhavi has joined #openstack-ansible | 11:17 | |
| *** armaan has quit IRC | 11:20 | |
| *** bruvik has quit IRC | 11:35 | |
| *** chhavi has quit IRC | 11:39 | |
| *** pbandark has joined #openstack-ansible | 11:57 | |
| *** cshen has joined #openstack-ansible | 11:57 | |
| *** bruvik has joined #openstack-ansible | 11:59 | |
| *** bruvik has quit IRC | 12:04 | |
| *** cshen has quit IRC | 12:25 | |
| *** cshen has joined #openstack-ansible | 12:26 | |
| *** thorst has quit IRC | 12:27 | |
| *** hachi_ has joined #openstack-ansible | 12:32 | |
| *** bruvik has joined #openstack-ansible | 12:34 | |
| *** cshen has quit IRC | 13:03 | |
| *** bruvik has quit IRC | 13:08 | |
| *** pbandark has quit IRC | 13:10 | |
| *** pbandark has joined #openstack-ansible | 13:16 | |
| *** thorst has joined #openstack-ansible | 13:24 | |
| *** bhujay has quit IRC | 13:47 | |
| *** thorst has quit IRC | 13:54 | |
| *** thorst has joined #openstack-ansible | 13:54 | |
| *** thorst has quit IRC | 13:56 | |
| *** cshen has joined #openstack-ansible | 14:22 | |
| *** dave-mccowan has joined #openstack-ansible | 14:27 | |
| *** cshen has quit IRC | 14:27 | |
| *** dave-mccowan has quit IRC | 14:29 | |
| *** ZiLi0n has joined #openstack-ansible | 14:30 | |
| *** dave-mccowan has joined #openstack-ansible | 14:35 | |
| *** dave-mccowan has quit IRC | 14:42 | |
| *** bruvik has joined #openstack-ansible | 14:42 | |
| *** bruvik has quit IRC | 14:47 | |
| *** savvas has joined #openstack-ansible | 14:54 | |
| *** thorst has joined #openstack-ansible | 14:56 | |
| *** pbandark has quit IRC | 15:06 | |
| *** pbandark has joined #openstack-ansible | 15:11 | |
| *** cshen has joined #openstack-ansible | 15:14 | |
| *** pbandark has quit IRC | 15:15 | |
| *** cshen has quit IRC | 15:25 | |
| *** SmearedBeard has joined #openstack-ansible | 15:30 | |
| *** armaan has joined #openstack-ansible | 15:39 | |
| *** bhujay has joined #openstack-ansible | 15:41 | |
| *** Smeared_Beard has joined #openstack-ansible | 15:49 | |
| *** SmearedBeard has quit IRC | 15:49 | |
| *** dave-mccowan has joined #openstack-ansible | 15:57 | |
| *** dave-mcc_ has joined #openstack-ansible | 15:59 | |
| *** dave-mccowan has quit IRC | 16:03 | |
| *** thorst has quit IRC | 16:35 | |
| ZiLi0n | Error with "install UCA repository key" during setup-host phase. it says it cannot lock dpkg | 17:03 |
| ZiLi0n | has anyone seen this? cloned stable/pike | 17:03 |
| *** Smeared_Beard has quit IRC | 17:08 | |
| *** armaan has quit IRC | 17:14 | |
| *** dave-mcc_ has quit IRC | 17:15 | |
| *** SmearedBeard has joined #openstack-ansible | 17:18 | |
| *** jbadiapa has quit IRC | 17:19 | |
| ZiLi0n | I think my problem is that I am following the example of appendix A, which is a control&network node + compute node | 17:22 |
| ZiLi0n | and I am trying to deploy a all in one deployment, and the parallelism of ansible is making the playbook fail because it tries to use yum at the same time | 17:24 |
| ZiLi0n | I am running openstack-ansible with --forks=1 to make it serial, but anyway I am not sure if following appendix A it will deploy a functioning OpenStack :) | 17:25 |
| SmearedBeard | ZiLi0n for all in one, you can just run scripts/bootstrap-aio.sh that will do everything for you | 17:31 |
| *** armaan has joined #openstack-ansible | 17:34 | |
| *** jbadiapa has joined #openstack-ansible | 17:34 | |
| ZiLi0n | SmearedBeard thank you. can I still custom the config? I would like to have a flat network and a vlan provider network, that is all custom changes I need | 17:37 |
| SmearedBeard | ZiLi0n you can certainly customise after the install, not sure about within the install | 17:39 |
| ZiLi0n | SmearedBeard, thank you, the customization after the install can be done re-running setup-openstack playbook? | 17:42 |
| *** cshen has joined #openstack-ansible | 17:46 | |
| *** dave-mccowan has joined #openstack-ansible | 17:50 | |
| *** pabelanger has left #openstack-ansible | 17:51 | |
| ZiLi0n | SmearedBeard there is a bootstrap-host file that seems to allow to configure the AIO deployment, I will take a look | 17:54 |
| *** jbadiapa has quit IRC | 17:58 | |
| *** cshen has quit IRC | 18:06 | |
| *** bruvik has joined #openstack-ansible | 18:17 | |
| *** thorst has joined #openstack-ansible | 18:17 | |
| *** bruvik has quit IRC | 18:21 | |
| *** ZiLi0n has quit IRC | 18:29 | |
| *** SmearedBeard has quit IRC | 18:37 | |
| *** ZiLi0n has joined #openstack-ansible | 18:45 | |
| ZiLi0n | can the AIO have a unique network interface for both the host as well as br-vxlan,br-vlan,br-mgmt,storage? | 18:47 |
| *** cshen has joined #openstack-ansible | 18:52 | |
| *** thorst has quit IRC | 19:00 | |
| *** ericzolf has quit IRC | 19:01 | |
| *** bhujay has quit IRC | 19:06 | |
| *** cshen has quit IRC | 19:14 | |
| *** jonher has joined #openstack-ansible | 19:25 | |
| *** armaan has quit IRC | 19:34 | |
| *** armaan has joined #openstack-ansible | 19:34 | |
| *** armaan has quit IRC | 19:39 | |
| *** cshen has joined #openstack-ansible | 19:56 | |
| *** savvas has quit IRC | 20:03 | |
| *** savvas has joined #openstack-ansible | 20:04 | |
| *** hachi_ has quit IRC | 20:05 | |
| *** SmearedBeard has joined #openstack-ansible | 20:12 | |
| *** savvas has quit IRC | 20:12 | |
| *** savvas has joined #openstack-ansible | 20:13 | |
| *** SmearedBeard has quit IRC | 20:34 | |
| *** thorst has joined #openstack-ansible | 20:38 | |
| *** thorst has quit IRC | 20:44 | |
| *** andries has quit IRC | 21:27 | |
| *** ZiLi0n has quit IRC | 21:36 | |
| *** dave-mccowan has quit IRC | 21:55 | |
| *** snowman4839 has quit IRC | 21:56 | |
| *** cshen has quit IRC | 22:21 | |
| *** thys has joined #openstack-ansible | 22:22 | |
| *** thys has left #openstack-ansible | 22:22 | |
| *** tyhys has joined #openstack-ansible | 22:24 | |
| *** dave-mccowan has joined #openstack-ansible | 22:42 | |
| *** dave-mccowan has quit IRC | 23:15 | |
| *** SmearedBeard has joined #openstack-ansible | 23:29 | |
| *** snowman4839 has joined #openstack-ansible | 23:30 | |
| *** ZiLi0n has joined #openstack-ansible | 23:31 | |
| ZiLi0n | I am not sure what I am doing wrong, but is there any extra configuration I have to do to get traffic through floating ip working in a AIO deployment? | 23:42 |
| tyhys | ZiLi0n: Haha I came here for the same reason. Have it working the way I want with devstack, but with OSA I cant get floating ips working. | 23:45 |
| ZiLi0n | tythys fun! are you expecting the floating traffic to flow through the br-vlan interface? | 23:46 |
| tyhys | Thats the only interface I see on the 172.29.48.0/22, which coincides with the default public ip network in OSA | 23:49 |
| tyhys | either have to figure out what exactly to change in the playbooks or how to route traffic from 172.29.48.0/22 to 192.168.1.0/24 | 23:50 |
| ZiLi0n | ok, we agree on that then, I think so too. But did you realize that there is an alias ip address 172.24.248.1 as interface of the OSA host itself? It says that is for pentest, so I guess that has to be removed | 23:51 |
| tyhys | I tried changing things in openstack_user_config.yml, but it just barks at me saying the aio host has two ips | 23:52 |
| tyhys | pentest? didnt see anything about that, but i did see the alias. 172.24.248.100 with a 172.24.248.1 alias | 23:53 |
| ZiLi0n | check /etc/network/interfaces.d/osa-deployment | 23:55 |
| ZiLi0n | go to the end of the file | 23:55 |
| ZiLi0n | so the default gateway 172.29.248.1 is "simulated" as reachable setting that IP in the host itself | 23:55 |
| ZiLi0n | I just removed that and rebooted | 23:55 |
| ZiLi0n | I have a external with that IP address, let's see what happens | 23:56 |
| tyhys | yea i saw that | 23:56 |
| tyhys | but that says tempest not pentest | 23:56 |
| ZiLi0n | haha my bad sorry! | 23:59 |
| tyhys | :) | 23:59 |
| ZiLi0n | I have rebooted and now I can't get to horizon... | 23:59 |
| tyhys | yea that address is working as a gateway | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!