Tuesday, 2018-01-30

*** gucampos__ has joined #openstack-ansible00:17
*** chyka_ has joined #openstack-ansible00:23
*** chyka has quit IRC00:26
*** dave-mccowan has quit IRC00:32
*** phalmos_ has quit IRC00:47
*** gucampos__ has quit IRC01:25
*** guhcampos_ has quit IRC01:26
*** guhcampos has quit IRC01:26
*** chyka_ has quit IRC01:28
*** rstarmer has joined #openstack-ansible01:29
*** derekjhyang has joined #openstack-ansible01:37
*** exodusftw has quit IRC01:38
*** pramodrj07 has quit IRC01:43
*** zenirc369 has quit IRC01:55
*** Leo_m has joined #openstack-ansible02:17
*** pramodrj07 has joined #openstack-ansible02:17
*** peri has joined #openstack-ansible02:17
*** pramodrj07 has quit IRC02:18
*** pramodrj07 has joined #openstack-ansible02:18
*** Leo_m has quit IRC02:21
*** Leo_m has joined #openstack-ansible02:24
*** Leo_m has quit IRC02:29
*** Pramod has joined #openstack-ansible02:31
*** pramodrj07 has quit IRC02:31
*** Pramod has quit IRC02:37
*** Pramod has joined #openstack-ansible02:37
*** Pramod has quit IRC02:39
*** pramodrj07 has joined #openstack-ansible02:39
*** akasurde has joined #openstack-ansible02:54
*** pedja has quit IRC02:56
*** dave-mccowan has joined #openstack-ansible02:58
*** Leo_m has joined #openstack-ansible03:17
*** akasurde has quit IRC03:21
*** Leo_m has quit IRC03:22
*** peri has quit IRC03:27
*** vnogin has joined #openstack-ansible03:43
*** vnogin has quit IRC03:47
*** exodusftw has joined #openstack-ansible03:50
*** dave-mccowan has quit IRC03:52
*** akasurde has joined #openstack-ansible04:05
*** akasurde has joined #openstack-ansible04:05
*** Leo_m has joined #openstack-ansible04:17
*** Leo_m has quit IRC04:22
cloudnullevenings04:44
*** akasurde has quit IRC04:46
*** akasurde has joined #openstack-ansible04:49
*** akasurde has joined #openstack-ansible04:49
prometheanfireyo04:49
*** poopcat has quit IRC05:05
cloudnullhows it prometheanfire05:16
prometheanfireslowly freezing05:17
*** woodard has quit IRC05:17
*** woodard has joined #openstack-ansible05:17
*** hybridpollo has quit IRC05:24
*** peri has joined #openstack-ansible05:26
cloudnulloh yea?05:28
cloudnullgo hang out in your server room05:28
cloudnullit'll be warm there :P05:28
prometheanfirenah, have the windows open05:32
prometheanfireand vents foil taped off05:32
*** akasurde has quit IRC05:32
*** pramodrj07 has quit IRC05:32
*** pramodrj07 has joined #openstack-ansible05:33
*** peri has quit IRC05:38
*** akasurde has joined #openstack-ansible05:42
*** indistylo has joined #openstack-ansible05:47
*** Pramod has joined #openstack-ansible05:49
*** rstarmer has quit IRC05:51
*** esberglu_ has joined #openstack-ansible05:51
*** gkadam has joined #openstack-ansible05:52
*** pramodrj07 has quit IRC05:52
*** esberglu has quit IRC05:55
*** jappleii__ has quit IRC06:01
*** peri has joined #openstack-ansible06:05
openstackgerritMerged openstack/openstack-ansible-rsyslog_server stable/newton: Zuul: Remove project name  https://review.openstack.org/53862106:14
*** peri has quit IRC06:14
openstackgerritMerged openstack/openstack-ansible-rsyslog_server stable/ocata: Zuul: Remove project name  https://review.openstack.org/53862406:19
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_congress master: Introduce os_congress role in gerrit  https://review.openstack.org/52249106:27
openstackgerritMerged openstack/openstack-ansible-plugins stable/pike: Zuul: Remove project name  https://review.openstack.org/53861806:28
openstackgerritMerged openstack/openstack-ansible-plugins stable/newton: Zuul: Remove project name  https://review.openstack.org/53861506:28
*** akasurde has quit IRC06:28
*** akasurde has joined #openstack-ansible06:30
*** akasurde has joined #openstack-ansible06:30
openstackgerritMerged openstack/openstack-ansible-plugins stable/ocata: Zuul: Remove project name  https://review.openstack.org/53861606:33
*** Pramod has quit IRC06:48
*** akasurde has quit IRC06:52
*** esberglu has joined #openstack-ansible06:55
*** esberglu_ has quit IRC06:57
jafehagood morning everybody07:00
xdfilOn flat-Earth, it's morning everywhere!07:04
jafehait's utc morning for sure07:09
*** pcaruana has joined #openstack-ansible07:10
openstackgerritMaxime Guyot proposed openstack/openstack-ansible master: [WIP] Ceph RadosGW integration  https://review.openstack.org/51785607:12
*** akasurde has joined #openstack-ansible07:14
*** akasurde has quit IRC07:14
*** akasurde has joined #openstack-ansible07:14
jafehaMiouge, great to see progress on rados :)07:15
*** Leo_m has joined #openstack-ansible07:17
prometheanfireI thought rgw was already working07:20
jafehaprometheanfire, afaik not fully integrated as drop in replacement for swift / as swift endpoint07:21
*** Leo_m has quit IRC07:22
jafehaceph-ansible has support for it, but there is still some work to do07:22
prometheanfireah07:23
prometheanfirewe've been starting some rpc work around it https://github.com/rcbops/rpc-ceph/07:23
prometheanfirehttps://github.com/rcbops/rpc-ceph/blob/master/playbooks/ceph-keystone-rgw.yml and https://github.com/rcbops/rpc-ceph/blob/master/playbooks/ceph-setup-logging.yml in particular may be interesting07:23
jafehai'm not working at it, but this should be interesting for Miouge and logan- who are working on that ceph-rgw contribution07:25
prometheanfireMiouge: logan- talk to andymccr about ceph rgw integration :D07:27
prometheanfirejafeha: that's how you voluntell someone07:27
Miougeprometheanfire: ceph rgw works with OSA if you add it with custom playbooks. The idea is to add add “ceph-rgw-install” playbook in OSA for out of the box support07:27
jafehahint, hint :D07:27
prometheanfireMiouge: yarp07:27
prometheanfireMiouge: I know, I'm using it now :P07:28
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Build everything on metal  https://review.openstack.org/50422407:34
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Build everything on metal  https://review.openstack.org/50422407:34
prometheanfireevrardjp: I knew you were a metal man07:37
*** mbuil has joined #openstack-ansible07:39
*** pmannidi has quit IRC07:40
prometheanfiredeath_to_all_but_metal lol07:40
prometheanfirehow do you feel about eddie :D07:40
*** pmannidi has joined #openstack-ansible07:42
evrardjpyeah metal rocks.08:00
evrardjp(and yes, I am mining/geologist engineer)08:01
*** mwe1 has quit IRC08:03
*** mwe1 has joined #openstack-ansible08:04
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Unfreeze roles after milestone 3  https://review.openstack.org/53912808:05
evrardjpprometheanfire: how are things?08:06
*** indistylo has quit IRC08:06
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Update all SHAs for master  https://review.openstack.org/53913108:10
prometheanfireevrardjp: eh, gate's still slow, but it's notmyfault so meh08:10
*** sxc731 has joined #openstack-ansible08:15
evrardjp:)08:16
evrardjpwill you come at the fosdem this year, or maybe next year?08:17
*** Leo_m has joined #openstack-ansible08:17
*** armaan_ has quit IRC08:19
*** sxc731 has quit IRC08:19
*** armaan has joined #openstack-ansible08:19
prometheanfirea bit short notice this year :P08:20
prometheanfireand next year is wedding time most likely08:20
evrardjpthen let's do it in 2 years!08:21
evrardjp:)08:21
prometheanfire;D08:22
*** Leo_m has quit IRC08:22
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_sahara master: Update paste, policy and rootwrap configurations 2018-01-30  https://review.openstack.org/53913408:24
*** gokhan_ has quit IRC08:24
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_nova master: Update paste, policy and rootwrap configurations 2018-01-30  https://review.openstack.org/53913608:24
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_designate master: Update paste, policy and rootwrap configurations 2018-01-30  https://review.openstack.org/53913708:25
prometheanfirelol, dracut just blind merged my patch08:26
evrardjpyou could have asked ppl, they can do the same! dracut is a job stealer!08:28
prometheanfireit was a oneliner08:32
prometheanfirethey thought I'd be using a module08:33
mbuilguys, any idea why my patch is not being tested --> https://review.openstack.org/#/c/538855/?08:35
prometheanfirembuil: gate is slow (without looking) :P08:36
prometheanfireI don't see it in the queue08:37
prometheanfireI'd recheck it08:37
*** gokhan_ has joined #openstack-ansible08:37
prometheanfiregate has restarted a few times...08:37
mbuilprometheanfire: ok, thanks. I guess I need to keep waiting08:38
prometheanfirembuil: type 'recheck' in a comment to have gate requeue it08:38
mbuilokk08:39
*** sxc731 has joined #openstack-ansible08:41
*** gokhan_ has quit IRC08:49
*** vnogin has joined #openstack-ansible08:51
*** ArchiFleKs has quit IRC08:54
evrardjpcores, could we get this one in: https://review.openstack.org/#/c/539128/ ?08:57
*** vnogin has quit IRC09:01
Taseerevrardjp: is this occasional ? http://logs.openstack.org/91/522491/67/check/openstack-ansible-functional-ubuntu-xenial/c1434a9/job-output.txt.gz#_2018-01-30_07_26_45_84113509:06
Taseershould I just rebase to trigger a new build ?09:07
hwoaranggood morning09:16
MiougeThis CI job fails, but no log or info output: http://osa-ci.protiumit.com/517856/10/1415/ is that normal?09:16
hwoarangevrardjp: done09:17
*** ArchiFleKs has joined #openstack-ansible09:17
hwoaranghmm ubuntu nodes are failing with some apt deps :/09:17
*** shardy has joined #openstack-ansible09:20
*** santacloud has joined #openstack-ansible09:23
evrardjpTaseer: no that's new, and that's for all the jobs, all the branches.09:25
*** indistylo has joined #openstack-ansible09:25
hwoarangevrardjp: do you know more about this^ ubuntu failure? mirror issue i guess?09:28
hwoarangso i don't spend time looking at it if you know already09:28
*** exodusftw has quit IRC09:29
evrardjpI haven't looked at it yet.09:29
*** aruns has joined #openstack-ansible09:30
*** indistylo has quit IRC09:31
evrardjphwoarang: I will just spawn up my vagrant whose image is an old cache, just to see if it's something appearing due to our deploy (installing latest packages) or if it's an image thing that depends on a more recent image09:36
evrardjpwhose image is from an old cache*09:36
*** exodusftw has joined #openstack-ansible09:37
*** vnogin has joined #openstack-ansible09:38
hwoarangyeah i am trying to parse the apt message09:41
*** vnogin has quit IRC09:43
*** sxc731 has quit IRC09:48
*** vnogin has joined #openstack-ansible09:49
*** pedja has joined #openstack-ansible09:51
hwoaranghmm can't reproduce locally09:51
hwoaranghmm it's this ovh mirror again09:55
*** bauruine has quit IRC09:55
*** armaan has quit IRC09:59
*** bauruine has joined #openstack-ansible10:02
Miougejafeha i’m struggling with the CI checks https://review.openstack.org/#/c/517856/ linter fails, but I dont’ find the output. Any clues on where I shoud look?10:04
MiougeI’ve been using “tox -e linters“ locally that passes I think10:04
hwoarangMiouge: you just have to click on the 'openstack-ansible-linters' job and then job-output has all the output you want10:05
hwoarangwhat is the problem?10:05
hwoarangthis is why linters fail http://logs.openstack.org/56/517856/10/check/openstack-ansible-linters/1e6da9a/job-output.txt.gz#_2018-01-30_07_28_14_74742510:06
hwoarangsome host groups are missing10:06
Miougehwoarang: I was checking the other folders. I see something with groups now. Thanks!10:07
*** armaan has joined #openstack-ansible10:08
openstackgerritMaxime Guyot proposed openstack/openstack-ansible master: [WIP] Ceph RadosGW integration  https://review.openstack.org/51785610:12
*** aruns has quit IRC10:18
*** aruns has joined #openstack-ansible10:18
Miougehwoarang: I can use “tox -e inventory” to run the same tests locally. nice!10:30
*** dave-mccowan has joined #openstack-ansible10:32
*** pbandark has joined #openstack-ansible10:46
*** armaan has quit IRC10:52
*** armaan has joined #openstack-ansible10:53
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_congress master: Introduce os_congress role in gerrit  https://review.openstack.org/52249111:05
*** exodusftw has quit IRC11:17
*** exodusftw has joined #openstack-ansible11:22
*** akasurde has quit IRC11:33
*** armaan has quit IRC11:35
*** armaan has joined #openstack-ansible11:35
*** akasurde has joined #openstack-ansible11:36
*** chyka has joined #openstack-ansible11:40
*** stuartgr has joined #openstack-ansible11:42
*** chyka has quit IRC11:45
*** gokhan has joined #openstack-ansible12:08
*** sxc731 has joined #openstack-ansible12:12
*** sxc731 has quit IRC12:14
*** vnogin has quit IRC12:14
CobHeadHello, how can I assign more external LB VIP addresses to my cluster with OSA?12:15
*** sxc731 has joined #openstack-ansible12:17
*** aruns__ has joined #openstack-ansible12:25
*** aruns has quit IRC12:28
*** vnogin has joined #openstack-ansible12:42
mbuilis the openstack-ansible-functional-ubuntu-xenial gate failing for more people?12:43
*** vnogin has quit IRC12:47
*** zenirc369 has joined #openstack-ansible13:02
odyssey4meyep, it seems that the base image being used has packages which aren't available in the mirrors13:03
*** vnogin has joined #openstack-ansible13:04
*** taseer1 has joined #openstack-ansible13:23
*** Taseer has quit IRC13:24
*** taseer2 has joined #openstack-ansible13:24
*** taseer1 has quit IRC13:28
*** indistylo has joined #openstack-ansible13:29
*** indistylo has quit IRC13:30
*** aruns__ has quit IRC13:30
*** aruns__ has joined #openstack-ansible13:31
*** woodard has quit IRC13:32
* hwoarang feels alone without a working zuul13:33
*** woodard has joined #openstack-ansible13:33
hwoarangor without a working xenial that is13:33
mgariepymorning13:34
*** sxc731 has quit IRC13:35
*** dave-mccowan has quit IRC13:37
*** indistylo has joined #openstack-ansible13:37
evrardjpCobHead: you can override your keepalived and haproxy configs13:41
CobHeadTo provide more than one (1) external VIP?13:41
-openstackstatus- NOTICE: Our ubuntu-xenial images (used for e.g. unit tests and devstack) are currently failing to install any packages, restrain from *recheck* or *approve* until the issue has been investigated and fixed.13:42
evrardjpCobHead: what are you trying to achieve?13:42
CobHeadI want OSA to configure HAproxy and keepalived to utilize multiple external VIPs.13:42
evrardjpstill doesn't answer my question13:43
odyssey4meCobHead for each OpenStack endpoint?13:43
evrardjpodyssey4me: we don't know, the question is still not clear :)13:43
evrardjpmaybe it might want multiple IPs for failover13:43
evrardjpor maybe it's for load balancing active active, or .... we don't know13:44
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible-lxc_hosts master: Change default for sshd to only all keybased auth  https://review.openstack.org/53902013:44
CobHeadLet's say I have multiple loadbalancers, and want multiple IPs in the case of a rack failure, so that the other TLS nodes can take over without having to wait for the Master to release the VIP.13:45
*** vnogin has quit IRC13:46
evrardjpCobHead: not sure what you mean here. You can definitely define multiple IPs on a network that's spread out, and use keepalived for defining the VIP13:47
evrardjpCobHead: could you give us more details about your use case?13:48
CobHeadWhat/where is that override? So far, in the Openstack Ansible docs, there are only internal VIPs specifyed.13:48
CobHeadspecified*13:48
evrardjpCobHead: in openstack_user_config you can define external and internal lb vip address. You can point to a domain name13:48
evrardjpthat domain name can resolve to multiple ips if you want. Or alternatively (simpler), point to a VIP ip13:49
evrardjpthat vip ip can be configured with the help of keepalived13:49
CobHeadYes, that makes sense.13:49
evrardjpCobHead: https://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/app-config-prod.html#user-variables13:49
evrardjplook at the complete example13:50
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible-lxc_hosts master: Change default for sshd to only all keybased auth  https://review.openstack.org/53902013:50
mgariepyevrardjp, prohibit-password is valid ;)13:50
evrardjpCobHead: remember one thing: simple is the most sophisticated complication13:50
CobHeadTrue13:50
evrardjpmgariepy: never heard of it, and I didn't see it in man sshd_config13:50
evrardjpCobHead: :)13:51
mgariepyhttps://www.openssh.com/txt/release-7.013:51
CobHeadevrardjp, this is where things stop up for me: haproxy_keepalived_external_vip_cidr: "1.2.3.4/32"13:51
CobHeadThat is only 1 IP, in 1 CIDR.13:51
mgariepyhttp://paste.openstack.org/show/658012/ << from "man sshd_config" on my desktop.13:51
evrardjpinteresting13:52
evrardjpyeah I saw that on my ubuntu too.13:52
evrardjpI don't know, I guess I was tired when I checked yesterday?13:52
evrardjpwhat's the real diff with without-password?13:52
mgariepyalias.13:52
mgariepyjust clearer13:52
mgariepywithout-password might be interpretted as : blank password.13:53
evrardjpweird it's even the default now13:53
evrardjpwell, cold me old school :D13:53
evrardjpcall*13:53
mgariepyhaha lol13:53
evrardjpmgariepy: my bad!13:53
mgariepyno problem13:53
mgariepythis is the great part about reviews :)13:53
evrardjpit proves we should always read the sshd man page13:53
mgariepyman pages online aren't always up to date.13:54
evrardjplet me check for the authorized key vs pub key thing, and you got my vote13:54
evrardjpdamn we are doing it wrong :p13:55
evrardjpminor detail, let's continue :D13:55
mgariepyhaha13:55
*** vnogin has joined #openstack-ansible13:56
*** aludwar has joined #openstack-ansible13:56
mgariepyon top of that this is a ridiculous password for root access if it were set : container_openstack_password: 0c8aa6d3ec3bbb0a2e13:57
*** sxc731 has joined #openstack-ansible13:58
mgariepynot long only letter (no caps) and numbers13:58
mgariepyfrom newton AIO.13:58
idlemindcloudnull you had helped by posting a patch for the lxc_hosts project. when i cherry-pick that do i have to do it on my repo container? that's where it's actually set correct?13:59
evrardjpidlemind: all the ansible bits are on your deploy node14:03
evrardjpin /etc/ansible/roles14:04
idlemindahh good deal thx14:07
idlemindhere goes nothin'14:08
openstackgerritManuel Buil proposed openstack/openstack-ansible-os_tacker master: Modify the etc directory in default/main  https://review.openstack.org/53885514:08
*** akasurde has quit IRC14:09
mgariepyhmm .. https://github.com/openstack/openstack-ansible/blob/master/tests/bootstrap-aio.yml#L56 > https://github.com/openstack/openstack-ansible/blob/master/inventory/group_vars/hosts.yml#L3214:13
mgariepywhich one will win ?14:14
*** cxc99 has quit IRC14:14
*** cxc99 has joined #openstack-ansible14:16
evrardjpmgariepy: the bootstrap-aio is generating user_variables.yml iirc, so it would win.14:16
evrardjpbut that's just for ppl using the gate scripts14:17
evrardjpa normal deploy wouldn't be impacted14:17
*** ndusek has joined #openstack-ansible14:17
*** sxc731 has quit IRC14:23
mgariepyi know, i use it for testing quick stuff sometimes.14:26
*** derekjhyang has quit IRC14:26
mgariepybut only on cloud vms.14:26
idlemindcloudnull that patch works for lxc_hosts for me i'll try to do the reviewer thing as well14:35
*** vnogin has quit IRC14:38
*** vnogin has joined #openstack-ansible14:42
mgariepyif anyone have insight on that it would be helpful: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/158300914:42
openstackLaunchpad bug 1583009 in Ubuntu Cloud Archive "Error starting domain since update" [Undecided,Incomplete]14:42
idlemindnow haproxy script is failing to download hatop, says failed to connect to storage.googleapis.com at 443 name or service not known. if i login to the node and run a wget for the url in code. it works w/o issue.14:47
*** sxc731 has joined #openstack-ansible14:50
*** dave-mccowan has joined #openstack-ansible14:55
idlemindnm was an issue on the deployment host (false alarm)14:59
*** cjloader has joined #openstack-ansible15:01
*** rstarmer has joined #openstack-ansible15:04
evrardjpDear all, we have community meeting in 55 minutes. Let me ping you with a very obstructive ping so that you can remember.15:05
evrardjp:D15:06
*** yifei1 has joined #openstack-ansible15:08
*** yifei1 has left #openstack-ansible15:08
evrardjpdear cloudnull, DimGR, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, darrenc,15:08
evrardjpJRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza, hwoarang, cshen, ullbeking:15:08
evrardjpthe osa community meeting will start in 55 minutes. Please have a look at the meeting agenda: https://wiki.openstack.org/wiki/Meetings/openstack-ansible15:08
*** gkadam has quit IRC15:14
*** vnogin has quit IRC15:23
mhaydenand there was much rejoicing15:23
evrardjpI see.15:24
*** akasurde has joined #openstack-ansible15:29
*** akasurde has quit IRC15:29
*** akasurde has joined #openstack-ansible15:29
evrardjpwelcome akasurde15:30
akasurdeevrardjp thanks15:30
evrardjphow are things?15:32
*** kstev has joined #openstack-ansible15:32
akasurdeevrardjp Good15:32
akasurdeevrardjp how are things at your end15:33
evrardjpgood, planning planning planning.15:36
evrardjpWill see how today's ansible meeting will go, I think what I propose is quite a change that we would help multiple communities.15:37
*** indistylo has quit IRC15:37
*** aruns__ has quit IRC15:38
akasurdeCool15:38
*** jwitko has joined #openstack-ansible15:38
mgariepytesting the upgrade from Ocata > Pike, haproxy/placement api not happy with the change from httpchk to expect 40115:42
mgariepy** before nova is updated that is.15:42
evrardjpOcata to Pike should have failed if you don't have the latest inventory patch15:43
mgariepyi'm on 16.0.615:44
openstackgerritPeriyasamy Palanisamy proposed openstack/openstack-ansible master: Make Opendaylight as the BGP speaker using Quagga  https://review.openstack.org/52390715:44
*** vnogin has joined #openstack-ansible15:44
evrardjpon top of that ppl just broke pike, so preventing a merge of said fix: http://logs.openstack.org/15/538315/1/check/openstack-ansible-deploy-ceph-ubuntu-xenial/49c68cc/job-output.txt.gz#_2018-01-30_09_36_35_59116915:45
*** vnogin has quit IRC15:46
evrardjpI don't point to anyone, because it might as well be me :D15:46
*** vnogin has joined #openstack-ansible15:46
mgariepylol15:47
mgariepyi'm updating the infra part right now. but it seems to be ok for now.15:48
mgariepyand my test on upgrading my AIO (from newton > Ocata > Pike ) passed.15:49
evrardjpare you still on centos?15:49
mgariepynop on ubunut.15:49
evrardjpok15:49
mgariepynop on ubuntu**15:49
evrardjpyeah centos was more a fun project on the side15:49
evrardjp"fun"15:49
openstackgerritPeriyasamy Palanisamy proposed openstack/openstack-ansible master: Make Opendaylight as the BGP speaker using Quagga  https://review.openstack.org/52390715:49
mgariepyI have some colleague that will deploy on centos ""soonish""15:50
mgariepyI don't plan to change the OS for as long as I can.15:51
mgariepymaybe i'll change it to centos when i need to upgrade 16.04.15:51
*** sxc731 has quit IRC15:52
*** vnogin has quit IRC15:54
mgariepyhmm rabbitmq is also bumpy :)15:55
*** phalmos has joined #openstack-ansible15:56
*** Leo_m has joined #openstack-ansible15:56
evrardjpmgariepy: at that point centos will need to bump to centos 8 too :p15:56
evrardjpmaybe centos 8 will be blazing fast15:57
mgariepyyeah i think so.15:57
mgariepy:)15:57
mgariepyi'll see when i get there.15:57
mgariepyis 18.04 planned for Rocky ?15:57
evrardjpyes it will be part of rocky indeed15:57
*** phalmos has quit IRC15:58
mhaydenreminds me of that old Bone Thugs N Harmony song "See you when you get there"15:59
mhaydeni know cloudnull knows what i'm talking about15:59
*** vnogin has joined #openstack-ansible15:59
*** ivve has quit IRC15:59
evrardjpCommunity meeting cloudnull, DimGR, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum,15:59
evrardjpdarrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza, hwoarang, cshen15:59
evrardjp#startmeeting openstack_ansible_meeting15:59
openstackMeeting started Tue Jan 30 15:59:49 2018 UTC and is due to finish in 60 minutes.  The chair is evrardjp. Information about MeetBot at http://wiki.debian.org/MeetBot.15:59
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:59
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"15:59
openstackThe meeting name has been set to 'openstack_ansible_meeting'15:59
evrardjp#topic rollcall15:59
prometheanfireo/15:59
*** openstack changes topic to "rollcall (Meeting topic: openstack_ansible_meeting)"15:59
*** RandomTech has joined #openstack-ansible16:00
mgariepyo/16:00
* mhayden struts16:00
jmccroryo/16:00
evrardjpleaving a few seconds for late joiners16:01
evrardjpwaiting*16:01
hwoarango/16:02
evrardjpbad french -> english translation there!16:02
evrardjpok let's go16:02
evrardjp#topic Review action items from last month16:03
*** openstack changes topic to "Review action items from last month (Meeting topic: openstack_ansible_meeting)"16:03
spotzo/16:03
evrardjpsimple, last month we had no community meeting. Christmas and all.16:03
RandomTechoh is the meeting starting?16:03
evrardjpso let's move on to next topic!16:03
mhaydenhappy holidays retroactively16:04
evrardjpRandomTech: yes :)16:04
RandomTechokay i can wait with my questions :p16:04
evrardjpHappy holidays indeed, I wish you all a good 2018!16:04
mhaydenRandomTech: meetings are for me to randomly pop in and derail evrardjp's good deeds ;)16:04
*** armaan has quit IRC16:04
evrardjplol16:04
evrardjpwondering why we schedule them every tuesday at the same time !16:05
evrardjphahah16:05
evrardjpanyway16:05
evrardjpnext16:05
evrardjp#topic Liaisons feedback16:05
*** openstack changes topic to "Liaisons feedback (Meeting topic: openstack_ansible_meeting)"16:05
evrardjpanything to report?16:05
evrardjpmhayden: I guess you had a nice january with the spectre and stuff, anything impacting us we should pay attention to?16:05
mhaydeni'd say the expectation should be that we're going to see more patches over time16:06
evrardjpI think that we are covered with distro packages16:06
mhaydenbugs will be fixed which make more bugs16:06
mhaydenand also there will be gradual perf enhancements to make up for what's lost16:06
evrardjpok. yeah but nothing to do, as we suspected.16:06
mhaydenso keep tabs on what the distros are shipping ;)16:06
evrardjpyeah that's another topic.16:06
evrardjpI trust you there mhayden ! :D16:06
mhaydenbut deployers should remember that the guests need love too!16:07
evrardjpanything else?16:07
evrardjpthat's true16:07
mhaydendon't forget about your instances and patches ther e;)16:07
mhaydenthat's it for now16:07
evrardjpfor releases, I submitted milestone 3 recently, a few days later than the deadlines for cycle-with-milestones (so we are in advance)16:08
evrardjpI will do a release for the other branches, as usual, this friday. (End of month)16:08
mhaydenwoot16:08
* mhayden saw the emails16:08
*** KenCrandall has joined #openstack-ansible16:09
evrardjpat least that's what my agenda tells me I have to do for friday :p16:09
evrardjpAnyway, next topic16:09
evrardjp(except if any other liaison have something to say)16:09
evrardjpmoving on16:09
evrardjp#topic PTG16:09
*** openstack changes topic to "PTG (Meeting topic: openstack_ansible_meeting)"16:09
evrardjphere is the etherpad: https://etherpad.openstack.org/p/osa-rocky-ptg16:10
evrardjpPlease fill in your presence and topics you want to discuss16:10
evrardjpif you have topics for the ptg, please shoot.16:11
evrardjpI am waiting for your ideas there :)16:11
* mhayden will add some stuff but won't be able to attend16:12
hwoarangvideo conference?16:12
hwoarang:)16:12
mhaydenperhaps someone can bring me back a Guinness T-shirt ;)16:12
evrardjpI am thinking we'll do that.16:12
evrardjpmhayden: haha. Will do.16:12
evrardjpor I will ask d34dh0r5316:12
evrardjpif you're editing the etherpad, could you add your name, please?16:13
evrardjpok let's move on16:14
*** ivve has joined #openstack-ansible16:14
evrardjp#topic Specs16:14
*** openstack changes topic to "Specs (Meeting topic: openstack_ansible_meeting)"16:14
evrardjpthe docs spec has merged but I didn't work on it yet16:14
cloudnullmornings16:15
evrardjpthe nspawn is in progress, sometimes cloudnull and I have different opinions, but it's in progress too16:15
evrardjpcloudnull: morning!16:15
evrardjpright on time16:15
evrardjpthe pip changes are in progress , but any help is welcomed16:15
evrardjpfor the links here they are:16:16
cloudnull++ will get some reviews done today for sure.16:16
evrardjpoh we also have other sdn/opnfv specs16:16
evrardjpyes I am trying to find the links :D16:16
evrardjpcloudnull: could you paste yours?16:16
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova master: Fix SELinux file contexts for nova's ssh keys  https://review.openstack.org/53489116:17
evrardjphttps://review.openstack.org/#/c/531850/ was the one for docs16:17
cloudnullfor nspawn https://review.openstack.org/#/q/topic:nspawn-driver+(status:open+OR+status:merged)16:17
evrardjpthanks cloudnull16:17
evrardjpthe docs link I gave you is the blueprint for implementation, if someone got the chance to work on it, that would be great16:18
evrardjpthe nspawn part are requiring reviews16:18
evrardjpd34dh0r53: do you want to speak about https://review.openstack.org/#/c/527769/ ?16:18
mhaydenevrardjp: he better speak about it ;)16:19
cloudnullfor nspawn I need to get https://review.openstack.org/#/c/527749 finished, then I'll have some updating to do to get the actual nspawn patch in order.16:20
evrardjpodyssey4me: 's spec for pip changes and the following reviews are there: https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+branch:master+topic:bp/python-build-install-simplification16:20
d34dh0r53sorry, meetin's16:21
evrardjpso yeah, please act on the links above (review, code, whatever...) :)16:21
evrardjpok let's move on then16:21
evrardjp#topic Role maturity handling16:21
*** openstack changes topic to "Role maturity handling (Meeting topic: openstack_ansible_meeting)"16:21
*** vnogin has quit IRC16:21
d34dh0r53evrardjp: put it on the agenda for next week?16:21
evrardjpd34dh0r53: it will be there next week, as with every week :)16:22
evrardjpdon't worry, specs are there to stay!16:22
evrardjp(that was a joke ... hoping we'll implement stuff!)16:22
d34dh0r53I lol'd on the inside16:23
evrardjpmy jokes aren't as nice on irc as they are on real life, which was the perfect transition to...16:23
evrardjpwe're gonna discuss role maturity handling during the ptg.16:23
evrardjpI think there is a risk, right now, of roles rotting (as we've seen in the past), so we need to take appropriate action before it happens.16:24
evrardjpLet's discuss a plan at the ptg, and please come at the ptg with ideas on how we can improve our roles maturity, and prevent them from rotting16:24
evrardjpok next topic16:24
evrardjp#topic open discussion16:25
*** openstack changes topic to "open discussion (Meeting topic: openstack_ansible_meeting)"16:25
prometheanfirewho's gonna be at the ptg?16:25
evrardjpthat should be on the etherpad prometheanfire16:25
prometheanfirek16:25
evrardjpsee a little above16:25
prometheanfireya, have it open16:25
evrardjpfor the first open discussion topic I want to discuss our gates16:26
evrardjpI want to raise a warning -- our project quality seems decreasing16:26
evrardjpHave a look at our gates dashboard.16:26
evrardjpgo into http://zuul.openstack.org/builds.html select project:openstack/openstack-ansible16:26
evrardjpIn the last month, so many issues have been solved, yet so little green appears on the same dashboard.16:27
evrardjpThere are jobs which are broken for a cycle now, and I am not even talking about role tests.16:27
prometheanfireevrardjp: gates all over are getting worse over the last month16:27
evrardjpI know there is much orange on that dashboard page due to exceptional circumstances.16:27
evrardjpBut when a month is almost entirely composed of exceptional circumstances, the exceptional becomes ordinary.16:27
hwoarangit's hard to tell which failures are because of us and which ones are because of infra/zuul issues though16:27
evrardjpWe should work together on making the breakage an exception, not the pure reality.16:27
evrardjpI agree hwoarang16:27
mhaydenwell prometheanfire found that rackspace's mirrors are only doing 100mbit/sec16:28
evrardjpcloudnull for example, had to wait for more than 2 weeks before we could even think of merging the first basic nspawn patch.16:28
mhaydenso that's a recent problem16:28
evrardjpA series of my patches is waiting for months to find out the good window of opportunity.16:28
evrardjpI am worried: We have so few people actually working on fixing stuff .... (tremendous thanks hwoarang and odyssey4me who are the biggest fixers).16:28
evrardjpI'd like to organise at least a bug smash after rc1, and that would be great if you could get people to work on this.16:28
prometheanfiremhayden: rackspace's openstack mirrors16:28
mhaydenprometheanfire: ah, i stand corrected16:28
prometheanfiremhayden: os-infra is working on rebuilding the VM hosting the mirror16:28
evrardjpwould you be ok with that?16:28
prometheanfiremhayden: ya, they could have made that more clear16:28
mhaydenevrardjp: bug smash sounds excellent16:29
evrardjpIt would be really nice that someone handles the bug triage and its statistics.16:29
evrardjpthat would help too for the bug smash16:29
mhaydeni propose we all go to hwoarang's house and work from there -- i'll chip in for pizza16:29
evrardjpAnd last point, if you think you can fix a job -- looking at the centos jobs particularily -- I'd love to have your help.16:29
hwoarangwhy would you want to come to england?16:29
hwoarang-_-16:29
mhaydenevrardjp: trying ;)16:29
evrardjp:D16:29
evrardjpAnd the last thing I wanted to say is thank you all16:30
mhaydens/thank you all/thank y'all/16:30
evrardjpbecause we had many bad moments during this cycle, but many good moments too, and I think we are heading towards new stuff even if that cycle was quite infra themed :D16:31
evrardjpmhayden: :D16:31
mhaydenthere's always gonna be bumps in the road16:31
*** akasurde has quit IRC16:31
mhaydenthanks for steering our ship, evrardjp16:31
evrardjpnow it's up to you to speak, we have 29 more minutes of open discussion!16:31
evrardjp28!16:31
*** akasurde has joined #openstack-ansible16:31
evrardjpoh yeah, I am trying to include config_template into core of ansible again. Let's see how it will go.16:32
RandomTechI have a comment if you have time16:32
*** KenCrandall has quit IRC16:33
evrardjpIf it doesn't work, we're gonna have no choice than shipping it into a different place to help collaboration between ceph-ansible, and others.16:33
evrardjpRandomTech: yeah, we have time, it's community meeting :)16:33
evrardjpif you have a community thing, let's discuss it!16:33
RandomTechIve had to start learning openstack from ground zero, and ive noticed it can be hard figuring out how certain changes to the configs effect the outcome of the playbook16:34
RandomTechid have to search for a second to find specific examples though16:34
evrardjphow can we improve, RandomTech ?16:35
*** akasurde has quit IRC16:35
*** sxc731 has joined #openstack-ansible16:36
RandomTechA bit more documentation on how specific changes in the openstack_user_config and user_variable effect the playbooks would be nice. Even if its just a section in the appendeces.16:36
evrardjpRandomTech: Would this help: https://review.openstack.org/#/c/531850/ ?16:36
RandomTechome moment while i read16:37
evrardjpok I will remember that. We may assume too many things and we may assume some kind of ansible knowledge too.16:37
evrardjpWe should be more explicit16:37
evrardjpGood proposition RandomTech !16:37
RandomTechya i was basically thrown into the fire by higher ups at my research center16:38
hwoarangtrue but it's nearly impossible to document every variable on every role16:38
hwoarangthough we do a good job with comments in the default var files16:38
RandomTechwas told to set it up with only a basic background in computer networking16:38
evrardjpRandomTech: yeah openstack isn't really friendly on that side either.16:38
evrardjphwoarang: I have another idea on that improvements, will draft a PoC for the PTG, this way we can discuss it further.16:39
evrardjpthat kind of improvements*16:39
mhaydenone of the feedback points from a coworker is that it's hard to figure out what ansible variables to set to get the corresponding change in nova16:39
mhaydensince some names don't match16:39
evrardjpI think we should simplify those things16:40
evrardjpit's hard for newcomers, and that will be my focus for next cycle.16:40
evrardjpAt least that's what I'd like to do.16:40
RandomTechevrardjp: i believe that would be a decent step into helping, examples on configurations/stories with a good explanation would help alot16:41
*** rstarmer has quit IRC16:41
evrardjpRandomTech: would you be able to help us on that?16:41
RandomTechi noticed alot of times after hearing someone explain in detail what was going on when trying to do something helped tremendously16:42
RandomTechi can at least take a look at what you have from time to time16:42
evrardjpok16:42
evrardjpanything else for the community meeting?16:42
evrardjp17 minutes remaining.16:42
*** akasurde has joined #openstack-ansible16:43
evrardjpok thank you everyone!16:43
hwoarangthank you too16:43
RandomTecha checklist of basic requirements somewhere would be nice. Some sort of coalated "you need to do at least these things"16:43
*** ndusek has quit IRC16:44
RandomTechno problem16:44
evrardjpRandomTech: let's discuss this in the docs patches :)16:44
evrardjp#endmeeting16:44
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs"16:44
openstackMeeting ended Tue Jan 30 16:44:40 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:44
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2018/openstack_ansible_meeting.2018-01-30-15.59.html16:44
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2018/openstack_ansible_meeting.2018-01-30-15.59.txt16:44
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2018/openstack_ansible_meeting.2018-01-30-15.59.log.html16:44
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_tempest master: Use system python for image download  https://review.openstack.org/53925716:44
mhaydenevrardjp: another centos gate helper ^^16:45
evrardjpmhayden: shouldn't we make the bindings available to the venvs instead?16:45
evrardjpI know I am painful :D16:46
mhaydenthat would be handy -- but i'm not sure about how to go about that16:46
mhaydenwe could build the venv with site packages, but that might taint the venv with other things :/16:46
evrardjpyeah that sounds worse16:46
evrardjphttps://dmsimard.com/2016/01/08/selinux-python-virtualenv-chroot-and-ansible-dont-play-nice/16:47
mgariepycan't we do the same we do with rbd bindings ?16:48
mhaydenoh look, our friend dmsimard|afk did a thing!16:48
mhaydenmgariepy: what did we do there?16:48
mgariepysymlink the lib in the venv16:48
mgariepyhttps://github.com/openstack/openstack-ansible-ceph_client/blob/master/tasks/ceph_install_python_libs.yml16:48
evrardjpI'd rather do that16:49
mhaydenoh dang, i have not seen this glorious hackery16:49
RandomTechcloudnull: are you there?16:49
cloudnullyes.16:50
mhaydenwould we want to link it in for all venvs on centos?16:50
RandomTechi have a quick question about some fo the networking stuff we did yesterday16:50
evrardjpmhayden: that is quite old though16:50
mhaydenas in, would we do this during repo build?16:50
evrardjpit was included by mattt iirc16:50
mhaydenwell, i guess we would need to do it in each role16:50
mhaydensince someone might use them independently16:50
evrardjpmhayden: why?16:51
evrardjpwhy not in repo build?16:51
mhaydenwell if someone deploys keystone with os_keystone, they won't have repo build16:51
mgariepyyou are not sure the target have the lib installed.16:51
evrardjpthat is true, but if you do it for repo build, and for tempest you should be good, right?16:51
RandomTechSince we went ahead and hung the virtual interface "eth5" off my new bridge should the host_bind_override say eth5?16:51
evrardjpwell for safety we can do it everywhere16:52
evrardjpyou can probably add a task after the virtualenv-tools replacement that's only for centos16:52
RandomTechor shoulld i keep it the physical interface cloudnull ?16:54
*** chyka has joined #openstack-ansible16:55
*** gkadam has joined #openstack-ansible16:58
*** vnogin has joined #openstack-ansible17:00
*** akasurde has quit IRC17:01
*** akasurde has joined #openstack-ansible17:01
idlemindos-keystone-install is failing out on a failure to connect to the database, check login_user and login_password are correct in /root/.my.cnf ... any ideas where to start?17:13
*** vnogin has quit IRC17:15
RandomTechevrardjp: are you able to help me figure some things out witht he networking configs?17:17
jrosserhas anyone ever used the repo_build role somehow standalone to create an offline repo?17:19
*** pbandark has quit IRC17:21
*** pbandark1 has joined #openstack-ansible17:21
*** pbandark1 is now known as pbandark17:23
odyssey4mejrosser yep, we do it in RPC's CI17:26
jrosseryeah, you linked me to sonething in the rpcops repo before but its a bit opaque how that works17:26
odyssey4meI can explain it. :)17:27
jrosserstage-python-artefacts.yml wasnt it?17:27
odyssey4meah no, that just pre-fetches from the repo17:28
odyssey4methat's used in the deployment, versus the CI build itself17:28
odyssey4megimme a minute and I'll explain the process17:28
jrosserperhaps i'm just struggling conceptually that i havent found a trivial reuse of the repos_build role17:28
odyssey4mejust gotta finish a call17:28
jrosserno worries, i'm here for another 30mins17:28
*** Pramod has joined #openstack-ansible17:31
odyssey4meok, so basically in CI all we do is bootstrap an AIO - then only build the repo container, but set it to build everything17:33
odyssey4meonce it's all built, we push the results up to a web server17:34
jrosserright, makes total sense17:36
odyssey4megiven that every build produces a MANIFEST.in file, for example http://rpc-repo.rackspace.com/os-releases/r16.0.0/ubuntu-16.04-x86_64/MANIFEST.in that staging playbook uses the manufest file to download the contents from the central web store to the local repo server in a build17:36
*** markvoelker has joined #openstack-ansible17:36
jrosser"but set it to build everything" <- this is where i was stuck17:36
odyssey4meit just reads the file contents, understand how to process each item, them uses aria2c to execute the download to the local repo container super fast17:36
jrosseras by rights it shouldnt build much if the repo container is the only thing.....17:36
odyssey4meaha, yes - lemme help you with that17:37
odyssey4meset this to off in an override file: https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L5317:37
odyssey4meand this https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L6217:38
odyssey4meand this https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L6817:38
odyssey4methat will force it to build all wheels, clone all git repositories and build all venvs17:38
jrosserheh, obivous when you know where :)17:38
jrosserthats great, we already have an AIO in CI anyway, so this is just a small change to the config of that17:39
odyssey4mewith our staging playbook, the entire content for a release (with everything built) is downloaded in <5 mins... versus running a repo build which takes >10mins in selective mode17:40
odyssey4methen when you run the repo build over the top of the staged content, it does nothing unless the requirements/constraints in the deployment aren't matching those that the CI environment used17:41
idlemindhow do i ensure the user for keystone is created in the mysql db (playbook wise)17:41
odyssey4meidlemind the os-keystone-install playbook does that for you17:41
idlemindodyssey4me it's blowing up at create db for service17:42
idlemindbest i can tell it's trying to use the default "keystone" for username and the auto-gen'd password for keystone to connect to galera ... i'm thinking that wasn't created yet17:42
odyssey4meidlemind only time I've seen that is when the secrets haven't been generated before the deployment17:43
*** guhcampos has joined #openstack-ansible17:43
*** guhcampos_ has joined #openstack-ansible17:43
idlemindhmm17:43
odyssey4meare your /etc/openstack_deploy/user_secrets.yml values populated?17:43
idlemindyup17:43
*** gucampos__ has joined #openstack-ansible17:43
idlemindsafe to regen them?17:43
odyssey4methe regen tool will only generate missing ones17:43
idlemindany way to "repush" them17:43
odyssey4mewell, I'm guessing the deployment is new and not functinal, right?17:44
idlemindya not live17:44
idlemindi can drop and rebuild whatever is needed17:44
odyssey4mevalidate whether you have a complete set from the in-repo file for your tag/branch17:44
odyssey4meperhaps best to lxc-containers-destroy the existing containers to get a fresh start on everything17:45
idlemindk, i was wondering how to use lxc-containers-destroy17:45
odyssey4meopenstack-ansible lxc-containers-destroy.yml17:45
odyssey4meyou can use --limit if you like, but in this case don't bother17:45
idlemindsweet17:46
odyssey4meit'll ask two questions - whether you want to wipe the containers, and if you want to wipe the data - yes to both17:46
idlemindin progress17:46
idlemindthen just re-run setup-everything and see if it gets past os-keystone-install after lunch?17:46
odyssey4mewith that done, if you're not worried about existing secrets then just copy the starter version without values from the git tree, then generate the secrets again17:47
odyssey4meonce that's done, you can just execute: openstack-ansible lxc-containers-create.yml (it's the last in the setup-hosts playbook)17:48
odyssey4methen execute: openstack-ansible setup-infrastructure.yml os-keystone-install.yml17:48
odyssey4mesetup-infra will do the repo, rabbit and database again17:48
odyssey4meos-keystone will only do keystone and get you back to where you were - if that works you're good and just execute setup-openstack.yml17:49
*** electrofelix has quit IRC17:49
odyssey4meyou'll notice that setup-everything is a meta-playbook which just includes the other playbooks I just mentioned... personally I prefer doing them bit by bit17:49
*** electrofelix has joined #openstack-ansible17:50
idlemindthx ya i tend to do that too was all excited to get to the openstack bits only to have os-keystone-install fail on me17:50
idlemindbb in a bit17:50
RandomTechhey, is anyone able to help me check my networking configuration in openstack_user_config.yml quickly?17:50
odyssey4mejrosser feel free to ping me if you hit something that behaves unexpectedly or need another mind to step through doing some things in CI before deployment... my hope is to improve the capabilities in OSA to make it much more intuitive, but I haven't had much time to execute on the spec :)17:51
odyssey4meidlemind if it fails again then you may need to use verbose logging to try and get more detailed feedback... the process works, but there might be something unusual happening and -vvv on the CLI for the os-keystone-install playbook will help discover what's being returned by the task in more detail17:52
jrosserodyssey4me: sure, will do. i figure that what i need is always buried in there somewhere, just need to find it :)17:53
*** rstarmer has joined #openstack-ansible18:03
*** Pramod has quit IRC18:05
*** Pramod has joined #openstack-ansible18:06
*** sxc731 has quit IRC18:10
*** mbuil has quit IRC18:14
*** vnogin has joined #openstack-ansible18:17
*** Leo_m has quit IRC18:31
*** Leo_m has joined #openstack-ansible18:32
*** vnogin has quit IRC18:35
*** Leo_m has quit IRC18:36
*** akasurde has quit IRC18:39
*** armaan has joined #openstack-ansible18:43
*** armaan has quit IRC18:58
*** armaan has joined #openstack-ansible19:00
*** rstarmer has quit IRC19:00
*** poopcat has joined #openstack-ansible19:01
*** rstarmer has joined #openstack-ansible19:02
*** vnogin has joined #openstack-ansible19:05
*** Leo_m has joined #openstack-ansible19:06
*** vnogin has quit IRC19:09
*** Leo_m has quit IRC19:10
*** Pramod has quit IRC19:12
*** vnogin has joined #openstack-ansible19:13
*** hamza21 has joined #openstack-ansible19:16
*** kstev has quit IRC19:16
*** Leo_m has joined #openstack-ansible19:18
RandomTechhey, is anyone able to help me check my networking configuration in openstack_user_config.yml quickly?19:20
mgariepyRandomTech, pastebin the data i can have a quick look19:21
*** armaan has quit IRC19:21
RandomTechokay one second19:21
*** vnogin has quit IRC19:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible master: Add user agent for haproxy health checks  https://review.openstack.org/53286319:22
*** Leo_m has quit IRC19:22
*** armaan has joined #openstack-ansible19:23
RandomTechhere is what my providor network section looks like: http://paste.openstack.org/show/658048/19:23
*** kstev has joined #openstack-ansible19:24
RandomTechand here is what my hosts interfaces look like (templeted version): http://paste.openstack.org/show/658049/19:24
RandomTechmgariepy: ^19:24
mgariepyRandomTech, auto enp4s0.55 << does that works ?19:25
RandomTechyes19:25
*** kstev1 has joined #openstack-ansible19:26
RandomTechits creating vlan tagged virtual interfaces19:26
mgariepyI had issues with that. network not commit back up on reboot or something..19:27
mgariepyhttp://paste.openstack.org/show/658051/19:27
mgariepythen using vlanXXXX interface in the bridge.19:28
*** kstev has quit IRC19:28
RandomTechthere can be problems if you had a previose network configuration that used it. the number after the '.' denoted the vlan number19:28
*** Pramod has joined #openstack-ansible19:28
RandomTechmy main concerns are with how br-vlan and br-external are setup19:29
RandomTechboth of those have bene newly changed and im not sure if i changed/created them corretly19:29
mgariepyit was working in previous version with ens / em / eth names but with enp3s0f0 it wasn't getting populated by the vlan network scripts19:29
*** stuartgr has quit IRC19:30
RandomTechworked fine with us, we got a semi working openstack, were just trying to work out bugs/add functionallity19:30
RandomTechi actually setup a script to do the network provisioning for us (after we give it a basic ip for it to run on of course)19:31
RandomTechthat template is what it used (before the change to br-vlan and the addition of br-external)19:32
mgariepythat's on the controllers ?19:32
RandomTechwhat is?19:32
mgariepythe network config ?19:32
RandomTechthis network config is on all of the nodes19:33
RandomTechminus the br-external and hanging an interface off br-vlan19:33
*** Leo_m has joined #openstack-ansible19:34
mgariepyi would need a bit more context here, why do you have 2 br-vlan in your config ? eth12 and eth11 ?19:36
*** Leo_m has quit IRC19:36
RandomTechI was trying to follow the example on the website honestly19:36
mgariepydo you want to have vlans for tenant traffic ?19:37
*** Leo_m has joined #openstack-ansible19:37
RandomTechi have almost no background knowledge of openstack and was told to set it up19:37
RandomTechmind if i take a moment to explain out networking situation and what we need to go for?19:37
mgariepyyeah sure19:37
mgariepyrunning some endless playbook on not so fast server now so i got some time :)19:38
RandomTechThere are two networks, A private network that only the openstack cluster can access (its isolated physically) and a university wide network that we are leased an ip range in for our openstack.19:39
RandomTechwe need most of openstacks communication to happen on the private network19:40
RandomTechwhile the floating ips created for tenates and the horizon dashboard use the university wide ips19:40
RandomTechas we dont really have free range with that network but need our researchers to be able to ssh in to work19:42
*** shardy has quit IRC19:42
*** gucampos__ has quit IRC19:42
*** guhcampos_ has quit IRC19:42
*** guhcampos has quit IRC19:42
idlemindugh new errors19:43
idlemindlxc_hosts ensure that the lxc cache has been prepared19:43
idlemindbig ole failed19:43
mgariepyRandomTech, so you have like /24 public ip for your tenant floatings ips ?19:45
RandomTechi believe its a /22 but basically19:46
mgariepyRandomTech, and do you exposes the dashboard to the internet ?19:46
mgariepydashboard /api..19:47
RandomTechwe expose the dashboard to the university but it isnt accessable from outside that19:47
RandomTechfirewalls and sch19:47
RandomTechsuch19:47
mgariepyok19:47
mgariepyhow are you going to isolate tenant networks ?19:48
RandomTechand of course not having a externally routable ip19:48
mgariepyvlan and/or vxlan ?19:48
RandomTechnot sure what your meaning19:48
mgariepywhen you will create network for the differents project in openstack. how do you plan to isolate that between projects ?19:49
RandomTechhmm19:49
RandomTechnot sure19:50
RandomTechall i know is that the instances for our researchers need to be able to be ssh'd into from the university network and have access to the internet(outbound request)19:51
RandomTechas i said i was basically just told make it with no prior knowledge of what openstack really is19:51
RandomTechbeen slowly learning over the past 2 months19:52
*** pcaruana has quit IRC19:52
mgariepyIf you isolate traffic via VLAN you will need to configure a bunch of vlan in the switches then offload that to neutron/19:53
mgariepyyou can isolate with vxlan instead so you don't need to change the config of the switch.19:54
RandomTechis there a reason the flosting ip networks need to be seperate networks for different projects19:55
RandomTechhmk19:58
RandomTechit seems that the old system deos have subnets for each project but there not part of that floating ip range19:58
*** vnogin has joined #openstack-ansible19:59
RandomTechi did create vlans in the internal switch if thats what your meaning mgariepy19:59
RandomTechthe "1400:1699" in under vxlan19:59
*** TicToc has joined #openstack-ansible20:02
openstackgerritJimmy McCrory proposed openstack/openstack-ansible stable/ocata: Fix logic to check for insecure Keystone  https://review.openstack.org/53930520:02
idlemindfork, apparently the proxy has been added to every repo and w/my yum repo container borked i can't get any packages20:03
idlemindugh, i think a format of the node is going to be easier at this point lol20:04
RandomTechim definately up to suggestions on how to configure it mgariepy20:04
idlemindi wonder if the lxc-container delete process should remove the proxy for yum when that container is deleted20:05
mgariepyyou are trying to follow that  ? https://docs.openstack.org/project-deploy-guide/openstack-ansible/pike/app-config-prod.html20:05
mgariepyRandomTech, ^^20:05
*** hybridpollo has joined #openstack-ansible20:06
*** rstarmer has quit IRC20:06
RandomTechi was trying to follow this: https://docs.openstack.org/project-deploy-guide/openstack-ansible/pike/app-config-prod-ceph.html20:06
mgariepyok.20:09
mgariepydo you have your internal and external network figured out ?20:09
RandomTechthats honestly what ive been trying to do20:10
mgariepyyour internal network would be on br-mgmt vlan 45 (from your config)20:11
RandomTechthe interal i can pretty much do anything to (as long as it doesnt interfear with the old setup), the external one i can pretty much only assign ips on)20:11
mgariepyyeah that's ok.20:12
mgariepy:)20:12
RandomTechcurrently enp7s0f1 is the interface thats connected to the universities network20:12
RandomTechenp4s0 is connected to the internal one20:12
mgariepythe external range will be used to access the API (from outside openstack)  and also you can use that range to assign floating ips to tenant.20:12
RandomTechyes20:13
mgariepyhow many controllers do you have ?20:13
mgariepy3 ?20:13
RandomTech3 controllers and 2 compute/storage20:13
RandomTechwould it help if i share my whole openstack_user_config20:14
mgariepymaybe20:14
RandomTechhere you go mgariepy20:15
*** rstarmer has joined #openstack-ansible20:19
*** hamza21 has quit IRC20:19
mgariepy?20:19
RandomTechmy bad: http://paste.openstack.org/show/658053/20:20
RandomTechmgariepy: ^20:20
RandomTechgot distracted twying to make a diagram of what we have20:20
RandomTecha simplistic version of course20:20
mgariepyOK20:21
mgariepythat helps.20:21
mgariepyso on your controllers on br-external interface you have a 130.xx ip?20:21
mgariepyor you have a external loadbalancer ?20:23
mgariepyRandomTech, ^^20:23
RandomTechno we were using haproxy20:23
RandomTechwe have a 130.108.84.0/22 range20:25
RandomTechthe interface bridge external is going to bridge off of currently has an ip on that range20:26
mgariepyok20:27
mgariepyso you network config seems to be ok.20:28
*** phalmos has joined #openstack-ansible20:31
*** phalmos has quit IRC20:32
openstackgerritMerged openstack/openstack-ansible master: Fix keepalived warnings  https://review.openstack.org/53257320:34
*** vnogin has quit IRC20:38
*** Leo_m has quit IRC20:39
*** Leo_m has joined #openstack-ansible20:40
*** vnogin has joined #openstack-ansible20:46
*** vnogin has quit IRC20:47
*** vnogin has joined #openstack-ansible20:49
*** vnogin has quit IRC20:49
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/pike: tasks: lxc_post_install: Handle missing init.scope scope  https://review.openstack.org/53902620:53
*** RandomTech has quit IRC21:06
*** cmart has quit IRC21:22
openstackgerritAntony Messerli proposed openstack/openstack-ansible-ops master: [WIP] Replace pxelinux with iPXE support in MNAIO  https://review.openstack.org/53932721:22
mhaydenantonym: ORLY21:30
antonymmhayden: YARLY21:31
antonymmhayden: might need to lean on you for some kickstarts/network configs and we'd probably be able to fill those missing pieces21:32
antonymfor centos21:32
*** ianychoi has quit IRC21:34
*** ianychoi has joined #openstack-ansible21:35
*** rstarmer has quit IRC21:35
* mhayden has done that from time to time21:37
*** threestrands has joined #openstack-ansible21:40
*** openstacking_123 has joined #openstack-ansible21:42
*** pabelanger has left #openstack-ansible21:43
openstackgerritShannon Mitchell proposed openstack/openstack-ansible-ops master: Fix tftpd-hpa configuration issues  https://review.openstack.org/53933421:44
*** guhcampos has joined #openstack-ansible21:45
*** armaan has quit IRC21:46
*** armaan has joined #openstack-ansible21:47
*** vnogin has joined #openstack-ansible21:56
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/ocata: Zuul: Remove project name  https://review.openstack.org/53852721:58
*** vnogin has quit IRC22:00
*** cmart has joined #openstack-ansible22:09
*** cjloader has quit IRC22:13
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/pike: Zuul: Remove project name  https://review.openstack.org/53852822:18
*** jwitko_ has joined #openstack-ansible22:23
*** Leo_m has quit IRC22:26
*** jwitko has quit IRC22:28
*** Leo_m has joined #openstack-ansible22:28
openstackgerritMerged openstack/openstack-ansible-repo_build master: SUSE: Fix MariaDB development package  https://review.openstack.org/53797522:32
*** esberglu has quit IRC22:32
openstackgerritMerged openstack/openstack-ansible-os_tacker master: Modify the etc directory in default/main  https://review.openstack.org/53885522:46
*** rstarmer has joined #openstack-ansible22:50
*** openstacking_123 has quit IRC22:55
*** openstacking_123 has joined #openstack-ansible22:55
idlemindodyssey4me completely rebuilt the environment. as soon as i got to os-keystone-install i got the same mysql username error22:58
*** openstacking_123 has quit IRC23:00
idlemindhttp://paste.openstack.org/show/658074/23:00
*** dave-mccowan has quit IRC23:03
*** ianychoi has quit IRC23:05
idlemindseems haproxy thinks mysql is down, doing an attach to the container shows mysql up ...23:07
*** zenirc369 has quit IRC23:09
*** rstarmer has quit IRC23:12
*** Leo_m has quit IRC23:17
idlemindhmmm telnet to 9200 on mysql displays but then closes quickly; good times23:26
*** cmart has quit IRC23:42
*** rstarmer has joined #openstack-ansible23:43
*** armaan has quit IRC23:45

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!