Friday, 2018-03-16

*** savvas has joined #openstack-ansible00:00
*** flemingo has joined #openstack-ansible00:01
*** sep_ has quit IRC00:04
*** savvas has quit IRC00:04
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Use production like interfaces in the gate  https://review.openstack.org/55363600:05
*** sep has joined #openstack-ansible00:05
*** flemingo has quit IRC00:05
*** guhcampos has joined #openstack-ansible00:10
*** ibmko has quit IRC00:11
*** flemingo has joined #openstack-ansible00:22
*** flemingo has quit IRC00:27
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/newton: Add retries to apt cache update  https://review.openstack.org/55335700:30
*** TxGirlGeek has quit IRC00:32
*** osnaya has joined #openstack-ansible00:34
*** odyssey4me has quit IRC00:34
*** odyssey4me has joined #openstack-ansible00:35
osnaya@cloudnull @odyssey4me for osa deployment on host scenario (no containers)... what exact usage is for external_lb_vip_addr and internal_lb_vip_addr?00:38
osnaya@cloudnull @odyssey4me since I have only 1 network interface in the lab setup, I am providing same IP address for external and internal_lb_vip_addr. Do you foresee any issues?00:40
*** savvas has joined #openstack-ansible00:47
*** savvas has quit IRC00:47
*** savvas has joined #openstack-ansible00:48
*** joseg has quit IRC00:54
*** hamzy__ has joined #openstack-ansible00:57
osnaya@cloudnull @odyssey4me @evrardjp setup-infrastructure.yml error - Task Galera_server: Check that wsrep_ready is ready - failed (shows OFF).... any ideas/pointers  on debug01:14
*** poopcat has quit IRC01:14
*** poopcat has joined #openstack-ansible01:15
*** jra has quit IRC01:16
*** flemingo has joined #openstack-ansible01:27
*** flemingo has quit IRC01:31
*** osnaya has quit IRC01:33
*** chyka has joined #openstack-ansible01:34
*** savvas_ has joined #openstack-ansible01:37
*** chyka has quit IRC01:39
*** savvas has quit IRC01:39
*** flemingo has joined #openstack-ansible01:40
*** gokhan_ has quit IRC01:44
*** flemingo has quit IRC01:45
cloudnullosnaya The public and internal vip will need to be that of your load balancer01:46
*** zerick_ is now known as zerick01:46
cloudnullif you're deploying on hosts it's assumed you have a separate load balacer host or device. if you put everything on a single machine you'll get into port conflicts01:46
cloudnullevrardjp: may have some thoughts on this01:47
*** tasker has joined #openstack-ansible01:47
taskerI have a homogenous cluster running ubuntu/trusty and I'm adding in some new compute hosts that are ubuntu/xenial.  when I run openstack-ansible repo-build, it doesn't identify the need to build xenial packages.01:48
taskerthe facts for the new compute hosts indicate that they are xenial. but why didn't the playbook notice the need?01:48
taskerskipping: [localhost] => (item=nova_compute)  => {"changed": false, "item": "nova_compute", "skip_reason": "Conditional check failed", "skipped": true}01:51
taskeris there a way to instruct repo_build to make sure it builds packages for all my operating system versions?01:52
*** flemingo has joined #openstack-ansible01:55
*** savvas_ has quit IRC01:56
*** savvas has joined #openstack-ansible01:57
*** guhcampos has quit IRC01:59
*** flemingo has quit IRC01:59
taskerit looks like it doesn't.02:05
taskergoing through the repo-build playbook, it only cares about what release / arch the "repo_server" themselves are made from.02:06
taskerit doesn't consider a mixed-architecture compute set-up.02:06
*** flemingo has joined #openstack-ansible02:21
*** flemingo has quit IRC02:25
openstackgerritMerged openstack/openstack-ansible master: Remove the "is_ssh_address" option from inventory  https://review.openstack.org/54892902:36
*** flemingo has joined #openstack-ansible02:41
*** chyka has joined #openstack-ansible02:42
*** flemingo has quit IRC02:46
*** chyka has quit IRC02:46
*** savvas has quit IRC02:53
*** savvas has joined #openstack-ansible02:54
*** savvas has quit IRC02:59
cloudnullo/ tasker03:18
cloudnulldo you have at least one infra node running a repo container on xenial and trusty ?03:19
cloudnullif so you will need to run repo-build to ensure you have the required bits03:20
*** flemingo has joined #openstack-ansible03:42
*** flemingo has quit IRC03:46
*** flemingo has joined #openstack-ansible03:51
*** flemingo has quit IRC03:56
*** udesale has joined #openstack-ansible04:00
*** poopcat has quit IRC04:08
*** gkadam has joined #openstack-ansible04:30
*** chyka has joined #openstack-ansible04:32
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible master: Integrate Congress with OSA.  https://review.openstack.org/50397104:33
*** chyka has quit IRC04:36
*** flemingo has joined #openstack-ansible04:40
*** flemingo has quit IRC04:44
*** flemingo has joined #openstack-ansible04:54
*** flemingo has quit IRC04:59
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Add container journal linking  https://review.openstack.org/54451805:04
*** flemingo has joined #openstack-ansible05:06
*** flemingo has quit IRC05:11
*** flemingo has joined #openstack-ansible05:22
*** dariko has joined #openstack-ansible05:23
*** flemingo has quit IRC05:26
*** flemingo has joined #openstack-ansible05:33
*** gkadam_ has joined #openstack-ansible05:34
*** gkadam has quit IRC05:36
*** flemingo has quit IRC05:38
*** flemingo has joined #openstack-ansible05:42
*** hw_wutianwei has quit IRC05:45
*** hw_wutianwei has joined #openstack-ansible05:45
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create master: Correct cgroup access on older kernels  https://review.openstack.org/55368205:46
*** flemingo has quit IRC05:47
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: common-tasks: Container Start/Stop conditions  https://review.openstack.org/55309405:53
*** dariko has quit IRC06:03
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Correct is_container when deploying containers  https://review.openstack.org/55368306:10
*** flemingo has joined #openstack-ansible06:10
*** flemingo has quit IRC06:15
*** flemingo has joined #openstack-ansible06:20
*** flemingo has quit IRC06:25
Taseerevrardjp: Good morning !06:52
jafehagood morning everybody06:52
Taseerjafeha: good morning06:52
Taseerevrardjp: can you help me with this => http://logs.openstack.org/71/503971/42/check/openstack-ansible-deploy-congress-ubuntu-xenial/f54e963/job-output.txt.gz#_2018-03-16_05_59_15_42180206:53
jafehagood morning Taseer06:53
*** Sha0000 has joined #openstack-ansible06:56
cloudnull odyssey4me qq for you - or anyone for that matter - on the pypi server, it looks like all of our requests go through a 404 to local 200 dance, http://paste.openstack.org/show/702880, is that expected?07:00
*** jbadiapa has joined #openstack-ansible07:02
*** jbadiapa has quit IRC07:02
*** jbadiapa has joined #openstack-ansible07:02
*** jwitko_ has quit IRC07:11
*** flemingo has joined #openstack-ansible07:11
openstackgerritMerged openstack/openstack-ansible-os_trove master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355707:12
openstackgerritMerged openstack/openstack-ansible-os_magnum master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55354107:12
openstackgerritMerged openstack/openstack-ansible-os_monasca-ui master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55354507:12
openstackgerritMerged openstack/openstack-ansible-ops master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352407:12
openstackgerritMerged openstack/openstack-ansible-os_neutron master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55354707:12
openstackgerritMerged openstack/openstack-ansible-os_barbican master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352807:12
openstackgerritMerged openstack/openstack-ansible-nspawn_container_create master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352007:14
openstackgerritMerged openstack/openstack-ansible-os_tacker master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355507:14
openstackgerritMerged openstack/openstack-ansible-specs master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356707:14
openstackgerritMerged openstack/openstack-ansible-galera_server master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351507:14
openstackgerritMerged openstack/openstack-ansible-os_watcher master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355807:14
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352207:14
openstackgerritMerged openstack/openstack-ansible-os_ironic master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353707:14
openstackgerritMerged openstack/openstack-ansible-os_swift master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355407:14
openstackgerritMerged openstack/openstack-ansible-os_nova master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55354807:14
openstackgerritMerged openstack/openstack-ansible-os_congress master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353207:15
openstackgerritMerged openstack/openstack-ansible-galera_client master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351407:15
openstackgerritMerged openstack/openstack-ansible-ceph_client master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351307:15
openstackgerritMerged openstack/openstack-ansible-os_monasca-agent master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55354407:15
openstackgerritMerged openstack/openstack-ansible-os_sahara master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355207:15
openstackgerritMerged openstack/openstack-ansible-os_horizon master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353607:15
openstackgerritMerged openstack/openstack-ansible-os_tempest master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355607:15
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353407:15
openstackgerritMerged openstack/ansible-hardening master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351107:16
openstackgerritMerged openstack/openstack-ansible-tests master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356907:16
*** flemingo has quit IRC07:16
*** sar has joined #openstack-ansible07:16
openstackgerritMerged openstack/openstack-ansible-openstack_openrc master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352307:16
*** yolanda_ is now known as yolanda07:16
openstackgerritMerged openstack/openstack-ansible-os_glance master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351007:17
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356207:17
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353107:17
openstackgerritMerged openstack/openstack-ansible-os_almanach master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352507:18
*** Sha0000 has quit IRC07:20
openstackgerritMerged openstack/openstack-ansible-repo_build master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356307:20
openstackgerritMerged openstack/openstack-ansible-rsyslog_client master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356507:20
openstackgerritMerged openstack/openstack-ansible-os_keystone master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353807:21
openstackgerritMerged openstack/openstack-ansible-os_aodh master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352607:23
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351807:23
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351207:23
openstackgerritMerged openstack/openstack-ansible-rsyslog_server master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356607:23
openstackgerritMerged openstack/openstack-ansible-os_molteniron master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55354207:24
openstackgerritMerged openstack/openstack-ansible-os_zaqar master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355907:24
openstackgerritMerged openstack/openstack-ansible-os_rally master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355107:25
openstackgerritMerged openstack/openstack-ansible-os_cinder master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353007:25
*** indistylo has joined #openstack-ansible07:25
openstackgerritMerged openstack/openstack-ansible-plugins master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356107:26
openstackgerritMerged openstack/openstack-ansible-os_panko master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355007:26
openstackgerritMerged openstack/openstack-ansible-os_monasca master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55354307:26
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create master: Add container journal linking  https://review.openstack.org/55370707:27
openstackgerritMerged openstack/openstack-ansible-memcached_server master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351907:27
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352907:27
openstackgerritMerged openstack/openstack-ansible-repo_server master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356407:28
openstackgerritMerged openstack/openstack-ansible-pip_install master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55356007:28
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351707:28
openstackgerritMerged openstack/openstack-ansible-os_searchlight master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55355307:28
openstackgerritMerged openstack/openstack-ansible-os_designate master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353307:29
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55351607:29
openstackgerritMerged openstack/openstack-ansible-nspawn_hosts master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55352107:31
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create master: Add container journal linking  https://review.openstack.org/55370707:32
*** flemingo has joined #openstack-ansible07:33
*** armaan has joined #openstack-ansible07:35
*** flemingo has quit IRC07:37
hwoarangodyssey4me: good morning. so far trying to override the cinder end point doesn't work for me. --os-endpoint $internalurl doesn't seem to work but maybe I use it in the wrong way. Do you have any suggestion on how the command line arguments should look like?07:43
*** flemingo has joined #openstack-ansible07:43
*** holser__ has joined #openstack-ansible07:47
*** flemingo has quit IRC07:48
*** epalper has joined #openstack-ansible08:02
*** flemingo has joined #openstack-ansible08:07
evrardjposnaya -- don't run lb external and internal lb vip on the same address. It makes no sense08:10
evrardjphwoarang: jafeha Taseer good morning08:10
hwoaranggood morning evrardjp08:11
evrardjpTaseer: does congress abide requirements process?08:11
*** flemingo has quit IRC08:11
evrardjpTaseer: could you compare if the requirements to install congress are matching what you can find in upper constraints in github.com/openstack/requirements ?08:12
evrardjphwoarang: is there nothing like --interface  or something like that?08:13
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible master: [DOC] contributor: Add initial documentation for distribution support  https://review.openstack.org/54922508:13
hwoarangevrardjp: can't find anything08:13
evrardjphwoarang: --os-interface internal08:14
hwoarangwhat's the meaning of that08:15
evrardjphwoarang: oh it's maybe worth checking you don't have any env variables set08:15
evrardjpit tries to use the internal endpoint instead of the external endpoint08:15
hwoarangevrardjp: there are a few variables set because of openrc08:15
hwoarangbut i dont know which one may affect stuff08:15
evrardjphwoarang: crash that, if you're using openstack cli, you can directly use your clouds.yaml08:15
hwoarang--help says that cmdline overrides the environment08:15
evrardjpyou're on openstack cli right?08:16
hwoarangevrardjp: the role is using the 'cinder' cmd directly08:16
evrardjpoh my bad08:16
evrardjpand it's for cinder things only right?08:16
hwoarangyes08:16
*** radeks has joined #openstack-ansible08:16
evrardjpfor backends08:16
evrardjpcould you point me to the task please?08:16
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_cinder master: tasks: Do not check the load balancer uri for API status  https://review.openstack.org/55288908:17
hwoarangevrardjp: ^08:17
hwoarangthat's the change i am testing but doesn't work08:17
evrardjpthanks08:17
hwoarangi will experiment again later today08:18
hwoarangmaybe ask internally some cinder people08:18
*** electrofelix has joined #openstack-ansible08:18
openstackgerritMerged openstack/openstack-ansible-os_heat master: tox.ini: Expose USER environment variable to execution environment  https://review.openstack.org/55353508:20
*** flemingo has joined #openstack-ansible08:21
evrardjphwoarang: so08:21
evrardjpthese features are available from openstack cli08:21
hwoarangright08:22
evrardjpbut by default openstack cli isn't installed on cinder deploys08:22
evrardjpso you'd have to add it08:22
hwoarangdo you know if there is a reason we dont have openstack cli everywhere?08:22
hwoarangi mean, in the venvs08:23
evrardjpyeah understood08:23
evrardjpgood question -- and openstack is converging into that08:23
evrardjpI guess it was not necessary08:23
evrardjpbut my question for you is double08:23
evrardjpdo you think it would be possible to use another machine?08:23
evrardjpLike the utility container?08:23
evrardjpI'd prefer NOT do it, but still08:24
evrardjpthe question is asked08:24
evrardjpmy concern is why reaching ansible_host08:24
hwoarangwell, the API LB backend is still down at this point so you can only do stuff from the cinder-api container08:24
evrardjpoh yeah08:24
evrardjpthe lb is dead08:24
evrardjpnot sure it's gonna work anyway08:24
evrardjpwouldn't keystone point to the LB?08:25
hwoarangyes it does08:25
hwoarang:(08:25
evrardjpI think with openstack client you have something for forcing the cinder endpoint08:25
evrardjpjust a sec08:25
* hwoarang is deploying HA again so it will take a while08:26
*** flemingo has quit IRC08:26
odyssey4mecloudnull That should only happen during the repo build because it's not yet got all the wheels, so it tries the pypiserver first - then goes to pypi.08:27
evrardjphwoarang: I guess here it's worth asking cinder ppl. I think the os-endpoint will take different endpoints depending on your type of token08:27
evrardjpodyssey4me: I thought of something08:28
evrardjpmaybe it's old thinking, and it's already solved08:28
evrardjpbut if we don't put many roles into a-r-r, the lookup of py_pkgs will have less input, and therefore less things to build.08:29
evrardjpI guess we now are more selective than before, but it just simplifies things "naturally"08:29
evrardjpodyssey4me: I think we should discuss the offline story a little more08:31
evrardjpI know it's not in your path08:31
odyssey4meevrardjp offline can only be fixed once the python simplification and staging is done - if we don't fix those first, then stuff gets much more complicated08:31
odyssey4meone thing that can help the offline story now is to vendor in all the keys08:32
evrardjpall the keys?08:32
evrardjpthe gpg keys?08:32
evrardjpfor repo sources?08:32
evrardjpanything goes. I think it's worth doing all the things for that story -- ppl are complaining everyday about these things08:33
evrardjpwe need to be more reliable08:33
odyssey4meyes08:33
evrardjpbecause network isn't apparently :)08:33
odyssey4meevrardjp hwoarang could we get this through the door to close the gap in ocata too https://review.openstack.org/55346808:38
odyssey4mealso, I think it's time to remove this from the check pipeline https://review.openstack.org/55359008:38
*** flemingo has joined #openstack-ansible08:40
hwoarangodyssey4me: lgtm but why isn't the ocata thing a backport?08:41
odyssey4mehwoarang it's actually a forward port from newton08:41
hwoarangah right08:41
odyssey4mepike onwards is fine - found that bug yesterday08:42
odyssey4meyou'll see the change id matches the newton one08:43
hwoarangyep08:43
*** flemingo has quit IRC08:44
odyssey4mewould be nice to have another review for https://review.openstack.org/547768 if anyone has a moment to do it08:49
*** flemingo has joined #openstack-ansible08:49
*** flemingo has quit IRC08:53
evrardjpdone08:56
evrardjphey I have a new topic for everyone08:56
evrardjpthe Vancouver Forum brainstorming etherpad:08:56
evrardjpPlease write down what your users would like to see here: https://etherpad.openstack.org/p/YVR-openstack-ansible-brainstorming08:56
*** armaan has quit IRC08:59
evrardjpodyssey4me: I am thinking it would be nice to relay this into Rackspace ^09:03
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Fix role when running with isolated tags  https://review.openstack.org/55103209:04
*** flemingo has joined #openstack-ansible09:10
openstackgerritManuel Buil proposed openstack/openstack-ansible-os_tacker stable/pike: Modify the etc directory in default/main  https://review.openstack.org/55372109:12
odyssey4meevrardjp did you see https://review.openstack.org/#/c/553683/1 ?09:15
*** flemingo has quit IRC09:15
*** savvas has joined #openstack-ansible09:16
evrardjpoh interesting09:19
evrardjpI didn't know ansible was doing something wrong again.09:19
odyssey4meI wonder if it's stale facts or something.09:20
*** savvas has quit IRC09:20
odyssey4mehm, I'm seing the same behaviour in my env - so it's not just the gate09:21
*** flemingo has joined #openstack-ansible09:21
odyssey4mewhile cloudnull's approach is to use a hammer - it looks like this is the best option for now09:21
odyssey4mecheck experimental?09:22
odyssey4methat patch is on the integrated gate - what're you hoping to test?09:22
evrardjpdarn.09:22
evrardjpmorning.09:22
odyssey4melol09:23
evrardjpI thought this was openstack_hosts  :)09:23
evrardjphaha we are good then09:23
evrardjpdon't say anyone.09:23
evrardjphwoarang: could you vote on some docs patches? This way I can continue my docs crusage09:24
evrardjpcrusade*09:24
evrardjphttps://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible+branch:stable/queens+topic:bp/docs-improvements-stable/queens09:24
evrardjpat least the first ones that aren't in merge conflict09:24
evrardjpso that the other ones can be rechecked I guess or at least fixed09:24
odyssey4meevrardjp I have to admit, my votes there are rubber stamps. Those patches are impossible to review.09:25
openstackgerritJames Portman proposed openstack/openstack-ansible master: Stop inventory constantly giving containers new IP  https://review.openstack.org/55372609:25
evrardjpodyssey4me: everything is so intertwined :(09:25
evrardjpmaybe I should have done a mega patch09:25
*** flemingo has quit IRC09:26
jamespohey evrardjp: https://review.openstack.org/#/c/553726/ - let me know if I've done something terribly wrong there09:26
evrardjpnah I think all of them can be reviewed separately, but you can only get the big picture when all are landed I guess... That's all about the spec :)09:26
evrardjpjamespo: welcome new contributor! :D09:26
evrardjpthanks for the patch, a new contributor tackling the inventory as first commit, that's one big thing.09:27
*** ibmko has joined #openstack-ansible09:27
jamespoNo problem! Hopefully I have understood it correctly, and it's useful09:27
odyssey4mejamespo aha, now it makes sense why the ip's were changing09:28
odyssey4meit had to do with the change in data structure under it09:28
evrardjpjamespo: I think we should move this to a more state machine like inventory09:28
odyssey4methanks for writing up the bug and working out  afix!09:28
*** flemingo has joined #openstack-ansible09:29
evrardjpthe cyclomatic complexity of these things is insane09:29
odyssey4mejust like those of your sentences ;)09:29
jamespoYeah there is a lot of complication, the triple assignment is still there and makes me feel slightly bad inside too09:30
jamespohttps://github.com/openstack/openstack-ansible/blob/master/osa_toolkit/generate.py#L62909:30
jamespoI think it's lucky/obscure that network ends up being a pointer to networks[old_address]09:31
evrardjpalso a lot of things due to old things not deprecated correctly09:31
odyssey4mejamespo it's hopelessly too complicated - if you can figure out a way to simplify it then we're happy to see patches09:31
evrardjpjamespo: yes09:31
evrardjpexactly what I meant09:31
evrardjpI went to that route earlier this year or last year, and I said "oh really wtf"09:31
jamespoCool, I might have another look but didn't want to start ripping it all apart just yet09:31
jamespojust wanted to settle the strange behaviour down first09:31
evrardjpjamespo: if you want to help I am working on this on part time. I'd definitely need your help if you have spare cycles.09:32
evrardjplike just a few insights on a regular basis would be good09:32
jamespoYeah sure, happy to try and help out :)09:32
evrardjpgreat.09:32
*** flemingo has quit IRC09:33
*** aruns__ has joined #openstack-ansible09:40
odyssey4meevrardjp hwoarang just a little more clean-up when you have a min to review: https://review.openstack.org/55175309:41
*** indistylo has quit IRC09:42
*** esberglu has joined #openstack-ansible09:43
*** esberglu has quit IRC09:47
*** Sha0000 has joined #openstack-ansible09:48
*** flemingo has joined #openstack-ansible09:50
adrianrezaHi OSA folks, we want to deploy OSA with 1 infra node and 2 compute nodes at first because we're on tight budget09:53
adrianrezabut next year we're planning to scale with 3 HA infra node and more compute nodes09:53
adrianrezaI have config like this http://paste.openstack.org/show/702937/ https://paste.ubuntu.com/p/9YSTJ2xNnb/09:54
*** aruns__ has quit IRC09:54
*** flemingo has quit IRC09:55
adrianrezaI got this error when setup-openstack.yml occurred http://paste.openstack.org/show/701491/09:56
*** aruns__ has joined #openstack-ansible09:56
adrianrezawe need some advice how to plan OSA deployment with our current situation09:57
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova stable/ocata: Switch upgrade test to non-voting  https://review.openstack.org/55373509:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova stable/ocata: Use constraints for all pip package installations  https://review.openstack.org/55346809:59
odyssey4meevrardjp unfortunately newton->ocata's nova upgrade test is suffering the same issue as pike->queens, so we need to do https://review.openstack.org/55373510:00
*** flemingo has joined #openstack-ansible10:01
openstackgerritMerged openstack/openstack-ansible-os_swift master: Switch pypy functional test to experimental  https://review.openstack.org/55359010:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift stable/queens: Switch pypy functional test to experimental  https://review.openstack.org/55373710:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift stable/pike: Switch pypy functional test to experimental  https://review.openstack.org/55374010:04
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift stable/ocata: Switch pypy functional test to experimental  https://review.openstack.org/55374110:04
*** flemingo has quit IRC10:05
ibmkoodyssey4me, ehm, can I have one more repo related question ? :)10:06
*** savvas has joined #openstack-ansible10:10
*** armaan has joined #openstack-ansible10:10
*** savvas has quit IRC10:15
*** armaan_ has joined #openstack-ansible10:18
*** flemingo has joined #openstack-ansible10:19
openstackgerritAndy McCrae proposed openstack/openstack-ansible stable/queens: Fix BOOTSTRAP_OPTS  https://review.openstack.org/55374410:19
openstackgerritAndy McCrae proposed openstack/openstack-ansible stable/pike: Fix BOOTSTRAP_OPTS  https://review.openstack.org/55374510:20
*** armaan has quit IRC10:22
*** flemingo has quit IRC10:23
openstackgerritMerged openstack/openstack-ansible master: Updated from global requirements  https://review.openstack.org/54955210:23
*** andymccr_ is now known as andymccr10:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/queens: Only try to stop services that exist  https://review.openstack.org/55374610:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/pike: Only try to stop services that exist  https://review.openstack.org/55374710:28
*** shardy has joined #openstack-ansible10:28
*** flemingo has joined #openstack-ansible10:29
evrardjpodyssey4me: did you read the openstack-dev ML's email about requirements process change?10:32
*** flemingo has quit IRC10:33
*** armaan has joined #openstack-ansible10:39
*** armaan_ has quit IRC10:41
odyssey4meevrardjp nope - what's the deal?10:45
evrardjpodyssey4me: well I am not 100% sure.10:45
evrardjpit's still unclear to me10:45
evrardjphttp://lists.openstack.org/pipermail/openstack-dev/2018-March/128352.html10:45
odyssey4meodd, it looks like we're still getting disk space errors on rax nodes sometimes - looking into it10:46
odyssey4melooking at ML post10:47
evrardjpI sent you the link10:47
evrardjpthis way you don't have to look it up10:47
*** flemingo has joined #openstack-ansible10:48
*** udesale has quit IRC10:50
*** flemingo has quit IRC10:53
odyssey4meevrardjp ok, no effect on us - we only use the u-c anyway10:54
odyssey4methe changes involve lower bounds only, and the synchronising of lower bounds in requirements.txt - so all this means to us is that we'll no longer get the global requirements proposal bot patches... or we'll get them less often10:54
evrardjpyeah, that's the part I understood. But we are using that to bump of versions of sphinx and all right?10:56
odyssey4mesphinx is also in u-c: https://github.com/openstack/requirements/blob/master/upper-constraints.txt#L35410:57
*** Sha0000 has quit IRC10:57
*** flemingo has joined #openstack-ansible10:57
odyssey4means all envs inherit the use of u-c: https://github.com/openstack/openstack-ansible/blob/master/tox.ini#L1110:58
*** ansmith has quit IRC10:58
odyssey4meso the minimum version never matters10:58
odyssey4mewhen pip finds a constraint for the package it's installing, it ignores the requirement version spec10:58
Taseerevrardjp: the requirements are not exactly the same in the two. So do I need to update the congress requirements ?11:00
*** armaan has quit IRC11:01
evrardjpTaseer: it could be normal, are they conflicting?11:02
*** flemingo has quit IRC11:02
TaseerI can not say conflicting, e.g, in congress openstackdocstheme===1.19.0 and in requirements it is openstackdocstheme>=1.18.1 # Apache-2.011:03
*** savvas has joined #openstack-ansible11:04
Taseersimilar are the requirements for sphinx and coverage packages11:04
*** flemingo has joined #openstack-ansible11:04
*** savvas has quit IRC11:04
*** savvas has joined #openstack-ansible11:05
*** savvas has quit IRC11:05
*** savvas has joined #openstack-ansible11:05
*** armaan has joined #openstack-ansible11:06
*** bhujay has joined #openstack-ansible11:08
*** flemingo has quit IRC11:08
odyssey4meevrardjp Taseer that's likely because the os_congress repo is not included in openstack/requirements/projects.txt11:15
odyssey4meevrardjp all the new repositories need to be added there, otherwise they're not included in the g-r process11:15
evrardjpouch. probably a few ones are missing.11:17
Taseerodyssey4me: is that a complex process ?11:17
odyssey4meTaseer nope, just submitting a patch11:17
Taseeryou may delegate it to me....11:17
*** armaan has quit IRC11:19
hwoarangodyssey4me: in https://review.openstack.org/#/c/553721/ , due you know why only ubuntu-xenial job was executed?11:25
hwoarang*do you know11:25
*** flemingo has joined #openstack-ansible11:25
Taseerodyssey4me: which repository contains "openstack/requirements/projects.txt" file ?11:26
TaseerI cannot find in OSA11:26
odyssey4mehwoarang curious11:26
hwoarang:/11:26
odyssey4meTaseer that is the repository name: 'openstack/requirements'11:26
hwoarangah sorry11:26
hwoarangthat's tacker not neutron11:27
hwoarangwe dont have multidistro jobs there11:27
hwoarangmy bad11:27
Taseeroh okay11:27
odyssey4mehwoarang pike doesn't have multi-distro, yeah: https://github.com/openstack/openstack-ansible-os_tacker/blob/stable/pike/zuul.d/project.yaml11:27
hwoarangyeah my bad sorry11:27
odyssey4meTaseer https://github.com/openstack/requirements/blob/master/projects.txt11:28
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible master: zuul: Make openSUSE a voting job  https://review.openstack.org/55297711:28
*** flemingo has quit IRC11:30
Taseerodyssey4me: thanks11:31
*** admin0 has joined #openstack-ansible11:33
*** admin0 has quit IRC11:33
*** admin0 has joined #openstack-ansible11:34
evrardjpI am not sure we re talking about the same thing though11:34
evrardjpit was a failure to install congress right?11:35
*** flemingo has joined #openstack-ansible11:35
Taseerevrardjp: it was on installing tempest plugin requirements11:37
Taseerhttp://logs.openstack.org/71/503971/42/check/openstack-ansible-deploy-congress-ubuntu-xenial/f54e963/job-output.txt.gz#_2018-03-16_05_59_15_42180211:37
evrardjpoh yes, my bad11:37
odyssey4meTaseer log?11:37
Taseerodyssey4me: ^11:37
niraj_singhi am getting below error:11:39
niraj_singhfailed: [aio1_masakari_container-bbaa5113] (item={'service_key': 'masakari-api', 'service_name': 'masakari-api', 'service_en': True, 'config_options': '--config-file /etc/masakari/masakari.conf --config-file /etc/masakari/api-paste.ini --log-file=/var/log/masakari/masakari-api.log', 'group': 'masakari_api'}) => {"attempts": 5, "changed": false, "item": {"config_options": "--config-file /etc/masakari/masakari.conf --config-file11:39
niraj_singh/etc/masakari/api-paste.ini --log-file=/var/log/masakari/masakari-api.log", "group": "masakari_api", "service_en": true, "service_key": "masakari-api", "service_name": "masakari-api"}, "msg": "Could not find the requested service masakari-api: host"}11:39
openstackgerritAndy McCrae proposed openstack/openstack-ansible-plugins master: Utilise OrderedDict to ensure no random changes  https://review.openstack.org/55375711:39
odyssey4meTaseer commented on the patch11:39
odyssey4menot sure if it will work, but it's worth a try11:39
*** flemingo has quit IRC11:40
Taseerodyssey4me: let me see11:40
*** savvas_ has joined #openstack-ansible11:41
*** savvas has quit IRC11:44
*** Sha000000 has joined #openstack-ansible11:45
openstackgerritMerged openstack/openstack-ansible-os_tacker stable/pike: Modify the etc directory in default/main  https://review.openstack.org/55372111:48
*** sar has quit IRC11:55
*** odyssey4me has quit IRC12:04
*** odyssey4me has joined #openstack-ansible12:04
*** bhujay has quit IRC12:05
*** sawblade6 has joined #openstack-ansible12:15
*** sawblade6 has quit IRC12:19
*** sawblade6 has joined #openstack-ansible12:20
*** sar has joined #openstack-ansible12:27
admin0anyone know how "working" is vitrage with osa ?12:29
*** flemingo has joined #openstack-ansible12:29
*** hcericnoan has joined #openstack-ansible12:31
*** gkadam__ has joined #openstack-ansible12:32
*** shardy is now known as shardy_lunch12:32
*** flemingo has quit IRC12:34
*** gkadam_ has quit IRC12:34
*** Sha000000 has quit IRC12:42
*** ansmith has joined #openstack-ansible12:42
*** flemingo has joined #openstack-ansible12:45
*** flemingo has quit IRC12:49
openstackgerritMerged openstack/openstack-ansible master: Correct is_container when deploying containers  https://review.openstack.org/55368312:51
hwoarangjmccrory: hello could you ping me when you are around to discuss the cinder/HA problem? :/12:55
hwoarangthank you :)12:55
*** Sha0000 has joined #openstack-ansible12:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Correct is_container when deploying containers  https://review.openstack.org/55377712:59
*** flemingo has joined #openstack-ansible12:59
*** dave-mccowan has joined #openstack-ansible12:59
*** admin0 has quit IRC12:59
*** admin0 has joined #openstack-ansible13:00
*** gyankum has joined #openstack-ansible13:01
*** throwsb1 has joined #openstack-ansible13:02
*** shardy_lunch is now known as shardy13:03
*** indistylo has joined #openstack-ansible13:03
*** dave-mcc_ has joined #openstack-ansible13:04
*** flemingo has quit IRC13:04
*** dave-mccowan has quit IRC13:04
*** aruns__ has quit IRC13:05
*** aruns__ has joined #openstack-ansible13:10
*** indistylo has quit IRC13:10
*** flemingo has joined #openstack-ansible13:11
*** flemingo has quit IRC13:15
*** esberglu has joined #openstack-ansible13:17
*** dariko has joined #openstack-ansible13:20
*** tasker has quit IRC13:26
*** flemingo has joined #openstack-ansible13:28
*** udesale has joined #openstack-ansible13:31
*** flemingo has quit IRC13:32
*** flemingo has joined #openstack-ansible13:37
evrardjpgood catch odyssey4me13:37
evrardjpon the repo name13:37
evrardjpacl *13:37
odyssey4meevrardjp :)13:39
*** flemingo has quit IRC13:42
*** udesale has quit IRC13:46
*** flemingo has joined #openstack-ansible13:47
*** flemingo has quit IRC13:51
admin0anyone here will be in vancouver ?13:52
*** jwitko has joined #openstack-ansible13:52
admin0summit13:52
admin0or too early to tell13:52
evrardjpadmin0: maybe, depends on the travel support :(13:52
admin0if my vote counts, i will vote for you13:52
evrardjphaha thanks buddy!13:52
admin0i am not training 2 people on osa .. third one from monday .. after that, we would be able to test/contribute more13:53
admin0virtage, monitoring/dashboard, SSO etc in scope in OSA to be deployed13:54
admin0and lots of nfv/epa stuff13:55
admin0i am refining a heat script that generates a multi node setup with all the mgmt, storage etc networks and vms creaated .. so that test can be done again and gain13:56
admin0will put it somewhere after refinement13:56
admin0that way, its a bit more than AIO where the test infra (DTA) can be built using heat13:57
admin0port security is disabled on the controller ,so the lxc ips work nicely13:58
*** aruns__ has quit IRC14:03
*** indistylo has joined #openstack-ansible14:03
*** flemingo has joined #openstack-ansible14:10
*** dariko has quit IRC14:11
*** dariko has joined #openstack-ansible14:12
*** flemingo has quit IRC14:15
mnaserso really how have people felt about queens14:16
mnaserqueens osa release that is14:16
mnaserany big showstoppers or no one rolled it out yet?14:16
hwoarangbest release EVER14:17
hwoarang-_-14:17
mnaser:D14:20
admin0i am rolling out 2 dev environments to test queens14:21
admin0aim to start testing it from today14:21
admin0can have more input on monday14:21
odyssey4memnaser well, we managed to speed up the deploy somewhat for Queens vs Pike - so that's nice14:23
mnaseryeah, we're kinda in a bit of a limbo14:23
odyssey4meI'd expect there are a few loose ends to tie up here and there, so obviously we'd like feedback from as many test deployments as possible.14:23
mnasernew private cloud customer.. not sure if we go pike and upgrade .. or queens and be on top of our stuff14:23
odyssey4mePike is pretty mature by now, so it's low risk. I guess it depends on your timings.14:24
admin0mnaser, i am hoping that if by next week, queens is released, i will go queens and help here to iron out bugs14:24
odyssey4meIt'll take a bit more time to iron out the upgrade story. I think our CI shows it broken right now. I think evrardjp would love more attention on all that.14:25
mnaserit is my experience that, well, devs are happy to iron out things in newer releases :p14:25
admin0i promised no SLAs to business, so i have some wiggle room there14:25
mnaserand at this point i cant imagine us running into show stoppers14:25
mnaserthe infra stuff is stable14:25
mnaserand openstack is openstack.14:25
admin0yes..plus i like to have the multi attach cinder and wysiwyg heat stuff14:25
mnaseryeah multiattach cinder is not a thing with rbd14:25
mnaserso boo14:25
*** flemingo has joined #openstack-ansible14:26
admin0export rbd over nfs :D ?14:26
*** Sha0000 has quit IRC14:28
admin0because if move  with pike now, the thing to test/upgrade will always be with me ..14:29
*** gyankum has quit IRC14:29
admin0better go queens, help here to iron our bugs and be on latest14:29
*** kstev has joined #openstack-ansible14:30
*** flemingo has quit IRC14:30
*** geb has quit IRC14:31
*** geb has joined #openstack-ansible14:32
*** kstev1 has joined #openstack-ansible14:32
*** kstev has quit IRC14:35
cloudnullodyssey4me: regarding pypi server - https://i.snag.gy/T6GJLk.jpg - this was from a fully built aio this morning. I installed requests on the host and can see that the pypi server is doing the same interaction where it seems to be making two requests all the time14:36
cloudnullmornings all btw14:36
*** flemingo has joined #openstack-ansible14:41
spotzhola cloudnull, como estas?14:42
*** flaviosr has joined #openstack-ansible14:42
evrardjptwo requests?14:43
evrardjpyou mean the 404?14:43
cloudnullevrardjp: yes14:44
evrardjpcloudnull: do you have requests on your cache? That's not shown on your screenshot14:44
evrardjpcloudnull: mmm14:44
cloudnullit seems to be doing two requests14:44
cloudnullI could try another package, one sec14:44
evrardjpI don't like when you arrive like this in the morning on friday :D14:44
evrardjpcloudnull: well I meant which package do you have in cache already?14:44
evrardjpcloudnull: I am taking the example of chardet for example14:45
cloudnullspotz: todo bien, es Vierness y soy listo para la fin de semana :)14:45
*** flemingo has quit IRC14:45
evrardjpcloudnull: :)14:46
evrardjpthat's so nice that spanish is a readable language :)14:46
spotzhehehe, yo tambien14:46
spotzI'm doing a bi-lingual talk at summit. I will be sticking to the English so as not to offend:)14:47
evrardjpnice14:48
*** gkadam__ has quit IRC14:48
evrardjpwhich language?14:48
evrardjpspanish/english?14:48
cloudnullevrardjp: https://snag.gy/Exb4uk.jpg14:48
cloudnullso that test was installing cachetools and the specific version I had in cache14:48
evrardjpcloudnull: let me check if I understand the log wells for cachetools14:48
* cloudnull is a little meta :)14:48
spotzevrardjp: Yep14:48
evrardjpcloudnull: I see the request, I see the 200.14:49
cloudnulland the 40414:49
evrardjpbut weirdly I also see 127.0.0.1 GET /simple/cachetools as 40414:49
cloudnullidk if this is expected , maybe its just "the way"-tm14:50
evrardjpcould it be a listen/vhost issue?14:50
cloudnullit was just odd imo14:50
evrardjpbut it looks like it's serving it from cache later right?14:50
evrardjponly one way to find out: put a firewall on your repo server, do it again :)14:50
evrardjpI mean firewall towards the outside14:50
evrardjpthat or the tcpdump14:51
cloudnullit seems to be serving from cache. let me block the world and try again14:52
*** gkadam has joined #openstack-ansible14:52
evrardjpwell if you tell it's doing the right thing, it's just about log filtering. Let me spawn up a new instance on my side.14:52
evrardjpI need to do a new instance for logan anyway :)14:53
evrardjpcloudnull: the format for those line is also different14:53
evrardjpI am now intrigued!14:54
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_hosts master: tasks: Ensure machinectl quota value is reasonable  https://review.openstack.org/55284214:55
*** flemingo has joined #openstack-ansible14:56
cloudnullevrardjp: that broke some things https://snag.gy/sN17nG.jpg14:57
cloudnullevrardjp: -A OUTPUT -o eth0 -j REJECT --reject-with icmp-port-unreachable within the repo container14:58
cloudnullseems when it couldn't reachout it died14:58
openstackgerritMerged openstack/openstack-ansible master: Fix typo and misleading task name for nova-consoleauth  https://review.openstack.org/55167814:59
evrardjpand osloutils is on your cache too?14:59
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Introduce next steps  https://review.openstack.org/55344014:59
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Less scary landing page  https://review.openstack.org/55343814:59
openstackgerritMerged openstack/openstack-ansible master: [Docs] Simplify and fix docs configuration  https://review.openstack.org/55341814:59
openstackgerritMerged openstack/openstack-ansible stable/queens: Replace host_need_pip with standard override mechanism  https://review.openstack.org/54776814:59
cloudnullit is14:59
evrardjpcloudnull: maybe we are just reverse proxying then :(14:59
evrardjpsame version and all?14:59
evrardjpdarn14:59
evrardjpthat's not cool15:00
cloudnulli ran an `ls` on the package at the top15:00
cloudnullits strange for sure15:00
*** flemingo has quit IRC15:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Fix typo and misleading task name for nova-consoleauth  https://review.openstack.org/55381115:01
evrardjpoh yes sorry I missed the first 2 lines15:02
cloudnullalso, interesting capability of the systemd-networkd role https://review.openstack.org/#/c/552721 - we can generate a production network setup: bonds, bridges, vlans, oh-my!15:02
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/pike: Fix typo and misleading task name for nova-consoleauth  https://review.openstack.org/55381215:02
cloudnullanyone want to give https://review.openstack.org/#/c/553682/ and https://review.openstack.org/#/c/553707/ a review ?15:03
evrardjpcloudnull: could you check mtu and routes too on https://review.openstack.org/#/c/552721 ?15:04
evrardjpcloudnull: I mean without a shell script15:05
evrardjpif not we can mark it somewhere we need to write that execstart/stop15:05
evrardjp(btw I didn't know execstart/stop, which makes me willing to converge to networkd everywhere)15:06
evrardjpdoes it break ubuntu 16?15:06
evrardjpcloudnull: what is https://review.openstack.org/#/c/552721/8/tests/roles/bootstrap-host/tasks/prepare_networking.yml L94 for?15:08
evrardjpL94-L9815:08
cloudnullevrardjp: http://paste.openstack.org/show/703031/15:08
cloudnull?15:08
cloudnullthe double address ?15:09
cloudnullthat's so we can have more than one address on a given interface15:09
evrardjpno I meant15:09
cloudnullon br-vlan we have a .100 address and a .1 which is used as a gateway for flat networking15:09
evrardjpfor everything else you're using interface address netmask15:09
cloudnulli've not seen any breakage on ubuntu 16.04 btw15:10
evrardjpI'm surpised this is completely different: config_overrides: Network: Address: list of two ips with cidr notation15:10
evrardjpat least feature wise it's on par with what we are doing in AIO.15:11
evrardjplgtm15:11
evrardjpjust suprised of readability15:11
cloudnullthe config overrides is using the direct syntax in the network file which writes addresses in cidr notation.15:11
cloudnullto keep things compatible with our inventory natively the template will join the address and netmask together to create cidr notation.15:12
*** electrofelix has quit IRC15:12
*** electrofelix has joined #openstack-ansible15:12
cloudnullfrom the template https://github.com/cloudnull/ansible-systemd_networkd/blob/master/templates/systemd-network.j2#L26-L2715:13
evrardjpI am very confused by networkd sometimes.15:13
*** flemingo has joined #openstack-ansible15:14
evrardjpso question:15:14
evrardjpmaybe worth asking on different chan15:14
evrardjpsorry15:14
*** electrofelix has quit IRC15:14
*** niraj_singh has quit IRC15:14
*** udesale has joined #openstack-ansible15:16
cloudnullnetworkd is confusing as hell coming from traditional network interface setup. however now that i've gotten my head around it I like the layout and the specific small file approach15:17
*** flemingo has quit IRC15:18
*** epalper has quit IRC15:21
openstackgerritAndy McCrae proposed openstack/openstack-ansible-plugins master: Utilise sorted to ensure no random changes  https://review.openstack.org/55375715:22
*** Sha0000 has joined #openstack-ansible15:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Fix typo and misleading task name for nova-consoleauth  https://review.openstack.org/55382315:23
*** flemingo has joined #openstack-ansible15:24
*** sawblade_ has joined #openstack-ansible15:25
*** sawblade6 has quit IRC15:28
*** flemingo has quit IRC15:29
*** sar has quit IRC15:30
*** nattanon has joined #openstack-ansible15:30
*** indistylo has quit IRC15:30
nattanonHello everbody really need a help!!!15:31
nattanonDo someone ever face through problem about l3 agent ha have more than one agent active ??15:32
nattanonI'm implement neutron with hybrid type DVR also normal HA mode.15:35
*** dave-mcc_ is now known as dave-mccowan15:40
*** flemingo has joined #openstack-ansible15:41
cloudnullnattanon: I've had the l3 agents scheduled to more than one active node which was causing flapping, to fix it i simply had to unshedule it from one of them.15:42
cloudnullthat was with the linux bridge agent15:42
cloudnullidk about DVR though15:42
*** sar has joined #openstack-ansible15:43
*** Sha0000 has quit IRC15:44
*** udesale has quit IRC15:44
nattanoncloudnull: Could you explain more about step to unschedule it.15:45
openstackgerritAndy McCrae proposed openstack/openstack-ansible-plugins master: Utilise sorted to ensure no random changes  https://review.openstack.org/55375715:45
*** flemingo has quit IRC15:45
openstackgerritAndy McCrae proposed openstack/openstack-ansible-plugins master: Utilise sorted to ensure no random changes  https://review.openstack.org/55375715:46
*** chyka has joined #openstack-ansible15:47
*** armaan has joined #openstack-ansible15:47
cloudnullnattanon: i simply had to identify the routers that were double scheduled and then use `neutron l3-agent-router-add/remove`15:48
cloudnullhere's a good blog post covering that https://www.openstackfaq.com/openstack-migrate-routers-and-dhcp15:49
cloudnullwell the basic steps anyway15:49
*** flemingo has joined #openstack-ansible15:51
*** ianychoi_ has joined #openstack-ansible15:53
nattanoncloudnull: Okay thank you so much i will try. Oh my production T_T.15:53
*** flemingo has quit IRC15:55
*** v1k0d3n_ has joined #openstack-ansible15:55
*** wlmbasson_ has joined #openstack-ansible15:55
cloudnullthe interaction should be the same15:57
cloudnullnattanon: I but don't have any quality experience with DVR15:57
*** promethe1nfire has joined #openstack-ansible15:58
cloudnullmaybe someone else here might? though it's friday and I suspect a lot of folks are getting ready for the weekend :P15:58
cloudnullnattanon: best of luck and let us know how it goes or if we can help15:58
*** prometheanfire has quit IRC15:59
*** promethe1nfire is now known as prometheanfire15:59
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create master: Add container journal linking  https://review.openstack.org/55370715:59
cloudnullanyone around to lend a review to https://review.openstack.org/#/c/550609/16:01
nattanonActually, For DVR is just passed test still not allow for anyone yet.16:01
prometheanfirecloudnull: commit message should say WHY it's needed16:01
*** szaher has quit IRC16:02
prometheanfirecloudnull: why why do you need both tasks? wouldn't just the tempfiles one work?16:02
evrardjpprometheanfire: good catch!16:02
evrardjpremoving my vote!16:02
*** jillr has quit IRC16:03
*** ianychoi has quit IRC16:03
*** bradm has quit IRC16:03
*** mattoliverau has quit IRC16:03
*** speedmann has quit IRC16:03
*** wlmbasson has quit IRC16:03
*** v1k0d3n has quit IRC16:03
*** redondo-mk has quit IRC16:03
*** wlmbasson_ is now known as wlmbasson16:03
*** v1k0d3n_ is now known as v1k0d3n16:03
*** speedmann has joined #openstack-ansible16:03
evrardjpthere is something that changed on ansible website, I don't know what16:03
evrardjpfont?16:03
nattanoncloudnull: One more things if my problem related with only l3-ha16:04
evrardjpprometheanfire: he lined to the bug16:04
evrardjplinked*16:04
prometheanfireah, still personal preference16:04
evrardjp:)16:04
cloudnullnattanon: in my prod clouds we're not normally using l3 ha due to flapping issues. we enable it but don't make it the default16:05
prometheanfireand still not sure why just the tmpfiles file isn't enough16:05
evrardjpcould anyone vote on those non-merge conflicts backports please? https://review.openstack.org/#/q/topic:bp/docs-improvements-stable/queens+(status:open)16:05
cloudnullevrardjp: done.16:07
evrardjpthanks16:07
nattanoncouldnull: If i connect VM direct to the public it should without router it should be worked right ?16:07
*** geb has quit IRC16:08
*** redondo-mk has joined #openstack-ansible16:10
pabelangercloudnull: so, I'm having trouble getting your ssh connection plugin working locally.  No matter where I set physical_host=foo, self._play_context doesn't seem to contain it. Do you know if 2.3.3.0 is supported?16:11
cloudnullyes, we've been using it since 2.116:11
logan-is the strategy plugin also present16:11
cloudnullmind sharing your inventory ?16:11
logan-it is still required iirc16:11
cloudnull++16:11
cloudnullthat's a thing16:11
openstackgerritMerged openstack/openstack-ansible master: Add missing Ubuntu packages  https://review.openstack.org/55339416:12
*** flemingo has joined #openstack-ansible16:12
evrardjppabelanger: have a look at what logan- said :16:13
evrardjp:)16:13
*** geb has joined #openstack-ansible16:13
cloudnulli think that requirement was removed in 2.516:13
pabelangerhttp://paste.openstack.org/show/703045/16:13
pabelangeroh, I'm not using a strategy plugin16:14
cloudnullwe no longer need to push things into the connection plugin, it just magically have them16:14
pabelangerjust the connection_plugin16:14
pabelangerlet me see what that is16:14
logan-https://github.com/openstack/openstack-ansible-plugins/blob/master/strategy/linear.py <-- this plugin will need to be used alongside the connection plugin16:14
pabelangerkk16:14
pabelangerthat is likely my issue16:15
pabelangerlet me add it16:15
pabelangerhey, that is better16:17
*** flemingo has quit IRC16:17
pabelangercloudnull: evrardjp: logan-: thanks!16:17
logan-:)16:17
cloudnullanytime16:17
*** DanyC has joined #openstack-ansible16:17
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Add missing Ubuntu packages  https://review.openstack.org/55384416:18
odyssey4meooh, would you look at that - an opensuse pass in check: https://review.openstack.org/#/c/553394/16:18
*** jillr has joined #openstack-ansible16:18
*** bradm has joined #openstack-ansible16:18
*** mattoliverau has joined #openstack-ansible16:18
*** admin0 has quit IRC16:19
idlemindwhen in doubt rebuild the container16:20
idlemind#magic16:20
*** bhujay has joined #openstack-ansible16:22
pabelangerboo, physical_host={{ ansible_host}} or physical_host={{ ansible_hostname }} doesn't work.16:22
pabelangerSSH Error: data could not be sent to remote host \"{{ ansible_hostname }}\". Make sure this host can be reached over ssh", "unreachable": true16:23
evrardjpphysical_host: "{{ ansible_hostname }}" ?16:23
evrardjpWell I guess it all depends on your file type16:23
odyssey4mepabelanger I may be wrong, but ansible_host/ansible_hostname is the name of the target (container), not the host16:23
evrardjpoh yeah16:24
evrardjppabelanger: pabelanger https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/group_vars/all_containers.yml16:24
*** bhujay has quit IRC16:24
evrardjpand https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/host_vars/infra1.yml#L1616:24
evrardjpthese are for creating containers on AIO nodes for our testing16:25
evrardjpI can assure you it works for ages now :)16:25
*** bhujay has joined #openstack-ansible16:25
pabelangerso, I need to dynamically set physical_host at runtime, because I don't know the IP of the remote system16:25
*** flemingo has joined #openstack-ansible16:25
*** radeks has quit IRC16:25
odyssey4methe container need a host property called 'physical_host' which contains a value specifying the host it's on16:25
pabelangerso, figured I could just set it to ansible_host value, which is setup in inventory16:25
odyssey4meansible_host in the inventory is typically the ansible target (in this case the container)16:26
pabelangerokay, so maybe I am not understanding the plugin. Let me recap what I'd like to happen16:27
odyssey4mea way you can build a dynamic form of this is to connect to the host, then use add_host to add a host to the inventory which includes all containers on the host - out dynamic inventory does that for us, but if you don't have a dynamic inventory for that you'd have to use add_host to do it16:27
odyssey4me*our16:27
pabelangerright now, ansible_host=38.145.33.34 is the remote node I can connect to and run tasks16:28
evrardjpok16:28
pabelangeras I understand, if I want containers on that host, I would set physical_host=38.145.33.3416:28
evrardjpand do you have an inventory where you can say container1 ansible_host=container1 physical_host=38.145.33.34 ... but physical_host need to be at run time, that's what you meant?16:28
pabelangerthen, the connection_plugin would try to run commands via lxc on that remote node16:28
pabelangerhttp://paste.openstack.org/show/703045/16:29
pabelangeris the inventory file I have now16:29
odyssey4mepabelanger yes, although the container has to be on the host already though - and the container's host properties must have that physical_host attribute16:29
pabelangerwhich, I think is wrong16:29
evrardjpgear01 is your metal node right now16:29
odyssey4meansible_host should be the container's address16:29
*** flemingo has quit IRC16:30
pabelangerAh, okay. So then this isn't going to work as I think16:30
evrardjpadd another node gear01-container1 ansible_host=container1 physical_host=38.145.33.3416:30
pabelangerbecause ansible_host is always going to be the baremetal address16:30
pabelangerbecause, that is what get setup from zuul / nodepool16:30
evrardjpwhy ?16:31
pabelangerhardcoded16:31
evrardjpbut you can't have extra inventory item?16:31
pabelangerI can, but I cannot change ansible_host16:31
evrardjplike you said, you can't add_host ok...16:31
pabelangerright16:31
evrardjpmmm16:31
evrardjpthat's a pickle indeed, because you don't have something to say "I want to reach that container"16:32
pabelangerI mean, I could hack up the connection_plugin for this case16:32
evrardjpwhat you want is reversing the thing16:32
pabelangerright16:32
evrardjpyou're not the only one to talk about this16:32
evrardjpbut how would you then select what to run your thing on?16:33
evrardjpif you don't mark it in an inventory of some sort?16:33
pabelangeryah, if I could use the default ansible_host then some how say, i also want to use container commands for that host, it should work16:33
pabelangeryah16:33
openstackgerritAndy McCrae proposed openstack/openstack-ansible-plugins master: Utilise sorted to ensure no random changes  https://review.openstack.org/55375716:33
pabelangerso, does lxc-attach use an ip address?16:34
evrardjppabelanger: I think your best solution, if you want to do container things with only a limited, unmodifiable set of inventory, you're good at writing something of your own16:34
evrardjpand always reuse that module16:35
evrardjpwhich will be tedious16:35
evrardjpbecause you can't delegate to a non inventory thing etc.16:35
evrardjppabelanger: no16:35
evrardjpit just enter the namespace16:35
evrardjpenters*16:35
odyssey4mepabelanger it doesn't, but if the physical_host and ansible_host addresses match, we assume that it's a physical host16:35
evrardjpnsenter is doing the same almost16:35
jmccroryhwoarang hi is https://review.openstack.org/#/c/552889/ not working in your testing?16:36
pabelangerodyssey4me: Ah, I see. And I want the opposite16:36
evrardjppabelanger: so to summarize: in a plugin you can say I want to target node x (container or physical host), if x in inventory has physical_host == ansible_host we know it's a physical host, and connect with ssh. If in the inventory it's different, we jump on physical_host through ssh, and attach to namespace of ansible_host16:37
pabelangerso, I could invert that check for a quick test I suspect16:37
pabelangerack16:37
hwoarangjmccrory: hello :( --os-endpoint has no effect. the LB cinder endpoint is still being returned16:37
evrardjpin a playbook* not in a plugin16:37
hwoarangso the cinder command simply fails16:37
pabelangerevrardjp: where does the physical_host == ansible_host check happen?16:37
pabelangercan you link code path16:37
hwoarangjmccrory: maybe --os--endpoint needs something else or we also need --os-endpoint-type but so far I couldn't find someone internally to discuss that. and i haven't asked in #openstack-cinder yet.16:38
evrardjphttps://github.com/openstack/openstack-ansible-plugins/blob/stable/queens/connection/ssh.py#L9416:38
evrardjphttps://github.com/openstack/openstack-ansible-plugins/blob/stable/queens/connection/ssh.py#L149-L16516:39
evrardjphttps://github.com/openstack/openstack-ansible-plugins/blob/stable/queens/connection/ssh.py#L156-L16116:39
evrardjppabelanger: ^16:39
*** flemingo has joined #openstack-ansible16:39
jmccroryhwoarang hmm other place i know of that OSA does something similar is in keystone with 'ignore_catalog' to our plugin16:40
jmccroryhttps://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/keystone_service_setup.yml#L8916:40
jmccroryhttps://github.com/openstack/openstack-ansible-plugins/blob/master/library/keystone#L609-L61016:40
evrardjpjmccrory: not sure if that can be done from cinder cli :(16:41
*** savvas_ has quit IRC16:41
evrardjplogan-: okay I finally got time to look at your issue. Friday. Like 1 week after the initial conversation ! \o/16:41
pabelangerevrardjp: Hmm, are you sure? because when I set ansible_host == physical_host, I do see lxc-attach --clear-env --name gear01 command16:41
pabelangerevrardjp: or is it some other process later on that will fail16:41
evrardjpmmm16:42
logan-evrardjp: woot16:42
pabelangerhttp://paste.openstack.org/show/703051/16:42
evrardjppabelanger: mmm maybe we are using container_name and physical_host16:42
evrardjplet me double check16:42
pabelangerI mean, that looks like it is working, if I had lxc setup16:43
*** savvas has joined #openstack-ansible16:43
evrardjptech debt!16:43
hwoarangjmccrory: the cinder cmdline doesn't offer such option16:43
hwoarangso we are sort of stuck :/16:43
evrardjppabelanger: haha my bad16:43
evrardjpwe are indeed using container_name now16:43
pabelangerWOOT16:43
evrardjpand container_name is in our inventory16:43
pabelangerokay, so this might actually work :)16:43
evrardjpwell, how come?16:44
evrardjpyou have to multiply your hosts?16:44
jmccroryhwoarang don't think i've tried anything like this before, taking a look at one of regions here to test things out16:44
evrardjpwell I guess it would workd :)16:44
*** flemingo has quit IRC16:44
evrardjpit's very unfriendly though!16:44
evrardjpI guess you should try pabelanger  :)16:44
evrardjplogan-: haha16:44
pabelangerI think I just need to add some code to get physical_host={{ ansible_host }} to run via jinja2 parser in the connection_plugin16:45
pabelangerI'll hack on that after some food16:45
spotzevrardjp: You put in for on-boarding and project update for summit right?16:45
evrardjpyes I did16:45
evrardjpwant to be in?16:45
evrardjplogan-: ok16:45
evrardjpso16:46
evrardjpfound out the issue16:46
evrardjpwell16:46
evrardjpnot really16:46
evrardjpbut the issue is definitely on the git lcone16:46
evrardjplet me dig deeper16:46
spotzevrardjp: If you want me there sure, I was just making sure:)16:48
*** admin0 has joined #openstack-ansible16:48
lbragstado/ does osa support setting up k2k? or just service provider federation?16:49
odyssey4melbragstad k2k I think was implemented too16:50
lbragstadcool16:50
lbragstadi have a container i'd like to try and run it against16:50
odyssey4mehttps://docs.openstack.org/openstack-ansible-os_keystone/latest/configure-federation-sp.html16:51
cloudnullidlemind: ++ i typically spend about 5 min trying to work on a problem within a container, then nuke it and rebuild it16:51
jmccroryhwoarang yeah...seems broken. bypass-url, os-endpoint, and CINDER_ENDPOINT...all still use catalog with the client16:51
cloudnullidlemind: one of the neat features of the zfs, btrfs, machinectl backends is that you can clone containers instantly. so if i have to rebuild one, i just clone from a functional one, then rerun the playbooks to setup that target correctly.16:53
*** armaan has quit IRC16:53
idlemindcloudnull ya i'll have to figure out a monitoring strategy ... or if it's worth it or not16:53
idlemindcloudnull that's pretty sweet actually. i've heard good things about brtfs16:53
cloudnullit works well enough.16:54
idlemindi'm still slummin' in lvm land16:54
cloudnulli've been beating on it at home w/ software raid and several levels of a special kind of hell and it's not failed me yet.16:54
idlemindnice nice16:54
*** yolanda has quit IRC16:55
hwoarangjmccrory: right :/16:55
*** flemingo has joined #openstack-ansible16:55
cloudnullI even put BTRFS on my laptop as root, running opensuse tumbleweed. so far so good16:55
idlemindi just got some cheapo 8 tb sata drives for my home lab maybe i'll migrate to it when i get around to installing them16:55
spotzhwoarang: jmccrory - I know some stuff shows up in the client help for cinder that isn't actually implemented16:55
cloudnullidlemind: as for monitoring, have a look at https://github.com/openstack/openstack-ansible-ops/tree/master/cluster_metrics16:56
cloudnullor netdata16:56
jmccroryspotz it's strange because it mentions one thing as being deprecated and suggests to use something else, but neither of them work16:56
cloudnullit's more metrics than alert monitoring16:56
lbragstadodyssey4me: is the k2k stuff tested yet, or run in the osa gate?16:56
cloudnullbut gives a lot of great insight into the clouds operation16:56
idlemindcool i'll take a peek there16:56
*** nattanon has quit IRC16:56
odyssey4melbragstad nope, not at all16:57
lbragstadok - just curious16:57
odyssey4melbragstad it's not had any feedback or changes since kilo, so it's likely out of date :/16:57
spotzjmccrory: I had talked to them about --project and it's never been implemented, so I wouldn't be surprised about other stuff16:57
idlemindi've been thinking about my horizon ssl issue ... instead of disabling ssl verification i wonder if it would be better to tell horizon to trust the self-signed certs it should expect to see16:57
evrardjplogan-: env.d/haproxy.yml rename haproxy_container with haproxy16:57
lbragstadodyssey4me: ack16:57
odyssey4melbragstad most of our federation consumers trickle feedback for keystone as an SP in over time, and that covers their use-case16:57
lbragstadodyssey4me: right - not many people using keystone as an actual identity provider16:58
odyssey4meone would hope not ;)16:58
evrardjplogan-: I will check on the root cause but at least I found out the problem16:58
evrardjpwell16:58
*** flemingo has quit IRC16:59
evrardjplogan-: "the dynamic inventory is all broken"17:00
logan-evrardjp: ouch :/17:00
admin0idlemind, its also better to just have aSSL cert ..17:00
logan-lol17:00
idlemindadmin0 oh i don't disagree17:01
evrardjplogan-: but for your case, it would be enough to solve your "issue"17:01
evrardjpmoving to haproxy or haproxy_containers17:01
logan-gotcha17:01
admin0its like less than 5$ per year17:01
evrardjpinstead of haproxy_container17:01
idlemindadmin0 but generically; ppl come to osa to "trial" openstack and they up with an install that can't upload images in horizon or connect to consoles (spice/novnc)17:01
evrardjplogan-: could you check on what was done before?17:01
evrardjpjust in case it's not a typo17:01
idlemindadmin0 so the idea is to create "sensible" defaults that create a more "functional" install with less customization17:02
idlemindif we generate and use self-signed certificates they should be used sensibly in the rest of the environment17:02
admin0but we do generate a self signed cert as well17:02
logan-evrardjp: pretty sure I copypasta'd that file directly from one that hasnt changed since liberty or mitaka, checking17:02
idlemindadmin0 https://bugs.launchpad.net/openstack-ansible/+bug/174768417:02
openstackLaunchpad bug 1747684 in openstack-ansible "Default Values Do Not Allow Image Uploads to Glance from Horizon" [Medium,Confirmed]17:02
idlemind^^ that's bug i wrote up on it17:02
evrardjplogan-: this is an extract of my default inventory: http://paste.openstack.org/show/703052/17:03
evrardjpso I'd say applying stuff to haproxy_containers would make sense17:03
evrardjpno17:03
evrardjpit doesn't17:03
evrardjpscratch what I just said.17:03
*** esberglu has quit IRC17:04
logan-the cinder-volume is applied the same way, but that one's not breaking stuff?17:04
idlemindadmin0 so 1 option, disabling cert verification works, a better option to keep cert validation in place would be to teach horizon to trust the certs used in the external endpoints17:04
idlemindonly when using the generated self-signed certs17:04
idlemind(me thinks)17:04
logan-also yea confirmed this exact method is what ive been using for haproxy for a long time heh17:04
evrardjplogan-: meh !17:04
*** holser__ has quit IRC17:04
evrardjpI don't say I have an idea right now of what's going on.17:05
admin0idlemind, in production you will use real SSL .. for test, can do without SSL as well .. why go to horizon and agian have it trust some arbritary self signed certs17:05
evrardjpbut I expect something in our defaults env.d17:05
logan-taking a glance at https://github.com/openstack/openstack-ansible/blob/stable/queens/inventory/env.d/haproxy.yml it looks like 'haproxy_container' is the correct place to apply it17:05
logan-weird17:05
evrardjpjust giving you hints on what's the cause and what's an appropriate fix for your env17:05
logan-yeah17:05
logan-really strange17:05
idlemindadmin0 because in production i've also seen self-signed certs; look at any customers esx environment17:05
logan-it seems like that fix shouldn't even work17:06
idlemindadmin0 esx/vsphere17:06
evrardjplogan-: did you try it ?17:06
evrardjpJust to see if I'm insane or not?17:06
evrardjp:p17:06
logan-nope not yet gonna bootstrap it now17:06
admin0well, then its not an openstack problem is it ?17:06
logan-and see17:06
idlemindadmin0 right; it's about sensible defaults to provide a good customer experience17:06
evrardjpyeah, change your env.d BEFORE generating the inventory17:06
admin0if someone choses to use self signed in prod, then well.. they will get errors here and there17:06
logan-right17:06
evrardjpor remove your openstack_inventory.json17:07
*** udesale has joined #openstack-ansible17:07
*** holser__ has joined #openstack-ansible17:08
*** holser__ has quit IRC17:08
admin0idlemind, i agree defaults should be to provide a good experience, and i think the current defaults allows me good usage in both both prod and dev .. you can't have lets use self-signed-ssl but also lets made changes in code so that we don't get errors when using self-signed code17:08
admin0cert*17:08
openstackgerritMerged openstack/openstack-ansible master: scripts: scripts-library.sh: Fix typo  https://review.openstack.org/55205017:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Flatten out maintenance task  https://review.openstack.org/55344517:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Link to the AIO  https://review.openstack.org/55343717:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Simplify structure of operations guide  https://review.openstack.org/55344217:09
admin0well. just my view ..17:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Update manage networks location  https://review.openstack.org/55345517:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Add haproxy verification  https://review.openstack.org/55345617:09
admin0i might be wrong :)17:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Promote scale the environment  https://review.openstack.org/55345717:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Promote Backup and Restore  https://review.openstack.org/55345817:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Move the upgrade reference into reference  https://review.openstack.org/55344817:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Migrate CLI reference to reference guide  https://review.openstack.org/55347917:09
openstackgerritMerged openstack/openstack-ansible stable/queens: [Docs] Simplify advanced config  https://review.openstack.org/55348017:09
idlemindadmin0 ya i've been investigating it and it seems so far i'm able to tell if a self-signed certificate is being used so i'd image i could teach horizon to inject and trust that certificate17:09
admin0even if we fix horizon, with self signed certs, curl will complain, api will complain17:10
idlemindadmin0 right at that point i trust the person is intelligent enough to know how to trust the cert17:10
admin0which is beyond us .. so evne if we fix, we are not addressing the issue17:10
*** flemingo has joined #openstack-ansible17:10
idlemindadmin0 w/o the horizon fix it's nestled fairly deep in developer tools of chrome to find out that horizon isn't trusting it17:10
idlemindand not the local machine which trusts it as soon as you hit the "accept and continue" button in the browser17:11
admin0by default logic, it should not right .. to trust self signed certs17:11
idlemindadmin0 again agreed there17:11
idlemindadmin0 but a fledging enterprise customer might go "meh, gargabe just as i expected, can't even install right"17:12
idlemindbecause all the user gets is a random unmeaning error message in horizon17:12
idlemindi think it is literally "undefined error"17:12
idlemindbut ya i'll keep looking at a fix to propose17:13
idlemindmaybe we'll find a happy medium17:13
admin0so isn't a good fix to fix the documentatin saying if using for demo/test, use SSL, if prod use real SSL certs else these are the issue you face ?17:13
evrardjplogan-: the plot thickens -- reusing your env.d and generating the inventory looks like it produces a valid inventory, with no cycles.17:13
admin0don't use SSL*17:13
admin0real enterprize customes will have money and every (throw every known compliance and iso requirment ) to not go prod without a vendor17:14
*** flemingo has quit IRC17:14
idlemindadmin0 definitely an option; doc's blurb about it and a few config blurbs to paste in to fix the problem17:15
idlemindwhich could very well be keep self-signed but disable the cert verification17:15
idlemindwhich does owrk17:15
logan-evrardjp: maybe https://github.com/continuouspw/openstack-ci-cloud/blob/28a2652bc5abd836dcf19a1ef1e7f6f1d785c321/openstack_deploy/env.d/haproxy.yml#L19 should be "False"?17:16
*** udesale has quit IRC17:16
hwoarangjmccrory: i think i am running out of ideas. i can't even get it to work with the openstack client tool17:17
*** pabelanger has quit IRC17:17
*** pabelanger has joined #openstack-ansible17:17
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible stable/queens: Correct is_container when deploying containers  https://review.openstack.org/55377717:17
jmccroryhwoarang think i managed to narrow down a bit. https://github.com/openstack/python-cinderclient/blob/master/cinderclient/client.py#L682-L71917:17
jmccroryit'll only make use of the bypass_url if session is None, still need to figure out how to make that happen though17:18
evrardjplogan-: checking the generated inventory I see that you have haproxy_all: that contains both hosts and children17:18
hwoarangi see17:19
evrardjplogan-: that wouldn't hurt.17:19
evrardjpthat's technically what it hsould be17:19
evrardjplet me try17:19
logan-evrardjp: yep thats a standard quirk with dynamic inventory when the host group and service group match names17:19
logan-I just tried it, no luck17:19
logan-testing your fix now17:19
evrardjplogan-: don't work better17:20
evrardjplogan-: my fix isn't a fix17:20
logan-yeah17:20
logan-gotcha17:20
evrardjpyour inventory still gonna get busted17:20
logan-it just populates 'haproxy' group with the metal hosts17:20
evrardjpor not doing what you expecte17:20
logan-basically the same as not having that env override17:20
evrardjpwhat I am telling here is that we have something with haproxy override.17:21
evrardjpNot so sure why, but it looks like the whole thing is wrongly generated17:21
logan-yep agreed17:21
logan-crazy that the haproxy override wrecks it but the cinder one doesn't17:21
*** rpittau has quit IRC17:22
odyssey4meevrardjp logan- is this perhaps a differential in the env.d definitions?17:22
evrardjplogan-: I think it's a problem in the basic env.d provided by OSA17:22
evrardjpand our dynamic inventory17:22
evrardjpodyssey4me: maybe17:23
evrardjplet me check17:23
*** ianychoi__ has joined #openstack-ansible17:24
evrardjpI just think I did shit on the first env.d/haproxy.yaml it was long ago17:24
*** admin0 has quit IRC17:26
*** ianychoi_ has quit IRC17:27
evrardjpI guess it's really time for that inventory migration tool :p17:28
*** DanyC has quit IRC17:30
odyssey4meevrardjp that time was yesterday, two cycles back ;)17:30
evrardjphaha.17:31
evrardjpwell... It still can be independant!17:31
evrardjp(I hear the WOOOOOOOOOOO and "did he dare?" )17:32
mnaserwhat have i created on twitter17:32
* mnaser hides from the foundation17:32
odyssey4memnaser what did you do?17:32
odyssey4melol17:32
mnaserapparently created the "talk rejects club"17:32
*** savvas_ has joined #openstack-ansible17:33
mnaserim sure we can work something out like an evening event but not sure we'd have a lot of time for talks17:33
evrardjpmnaser: lol17:33
evrardjpYou are the cause of all of this!17:34
evrardjphahaha17:34
mnasercause if we can get some sort of evening event17:34
mnaserit would be cool but i dont think we'd have much more time than like17:34
mnaser2 talks17:34
cloudnullmnaser: leading a revolution !17:35
cloudnull:)17:35
odyssey4meI'm out for the w/end folks. See you next week (or maybe on the weekend if I get insomnia, which is likely).17:36
*** savvas has quit IRC17:36
mnaserlater17:39
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia master: Fixes mgmt net fact setting  https://review.openstack.org/55386617:41
evrardjplater odyssey4me17:43
jmccroryhwoarang this seems to pretty much force a session unfortunately, https://github.com/openstack/python-cinderclient/blob/master/cinderclient/shell.py#L693-L694 https://github.com/openstack/python-cinderclient/blob/master/cinderclient/shell.py#L889-L91217:44
evrardjpjmccrory: can we use the openstack client for this?17:48
jmccrorynot sure, i'll look into that later today17:49
Bico_FinoHello, trying to rebuild a container and I'm getting this http://paste.openstack.org/show/703061/17:52
cloudnullBico_Fino: include hosts in your limit17:53
cloudnullwhen I rebuild a container i run the command like so: `openstack-ansible lxc-container-destroy.yml lxc-container-create.yml --limit 'hosts:infra1_galera_container-b350d733'`17:54
Bico_Finocloudnull I was following https://docs.openstack.org/openstack-ansible/pike/admin/maintenance-tasks/galera.html#galera-cluster-recovery17:54
cloudnullhum. IDK if limit twice works.17:55
cloudnullI think you have to combine it with ":" or a ","17:55
Bico_Finoyeap that worked17:56
Bico_Finothanks cloudnull17:56
*** flemingo has joined #openstack-ansible18:02
hwoarangjmccrory: i see :(18:02
hwoarangevrardjp: i had a look with the openstack cli but i couldn't get it to work either18:02
hwoarangbut maybe i wasn't doing the right thing18:02
pabelangercloudnull: evrardjp: odyssey4me: so far, it seems only set_fact is the only way physical_host: "{{ ansible_host }}" parses correctly. All other methods of inventory / host / group variable don't work.18:06
pabelangerhttp://paste.openstack.org/show/703062/18:06
pabelangerso, I should be able to use that for now, but need to better understand internals of ansible to see where the template parsing is invoked from18:06
*** flemingo has quit IRC18:07
cloudnullits all done in a module called templar (or used to be).18:07
pabelangerk18:08
cloudnullwe use the group_vars in our role tests. like so https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/group_vars/all_containers.yml#L2418:08
pabelangeryah, I cannot get that to work with an ansible variable18:09
cloudnullyou should also be able to get it to work using a static inventory like so http://paste.openstack.org/show/703064/18:12
*** bhujay has quit IRC18:13
*** flemingo has joined #openstack-ansible18:15
*** rootd00d has joined #openstack-ansible18:17
rootd00dhey folks! anyone using the ansible-hardening role from openstack?18:17
cloudnullyes. we use it by default18:18
cloudnullif you deploy osa you have that role run on your hosts by default.18:18
cloudnullyou can disable that interaction if you want but we recommend running it18:18
pabelangercloudnull: yah, that does work. I'm going to try creating an lxc container now and interact with it18:18
*** flemingo has quit IRC18:19
cloudnullpabelanger: the same interaction can be done with an nspawn container too18:19
cloudnullnot that you want to dive into that quite yet, but the plugin supports both18:19
pabelangercloudnull: any reason to use that over lxc? Or just the new and shiny?18:21
evrardjpwe have a page for that that explain the strength of each18:21
evrardjpor at least we should have!18:21
evrardjpbasically one is provided with systemd, so shipped everywhere18:21
cloudnull^18:22
pabelangeryah18:22
evrardjpoh no this doc patch hasn't merged yet.18:22
evrardjpit's on my list!18:22
cloudnullits actually not all that new or shinny, its just ubiquitous.18:22
cloudnullthe interaction between the two is the same18:22
cloudnullso is the management18:22
*** gkadam has quit IRC18:23
cloudnullIMHO it's nice because we can support it the same on all distros without having to rely on third party repos, packages, etc.18:23
cloudnullI also like all of the built in resource management tools18:24
cloudnullall that said, for osa, lxc is the tried and true method18:24
*** savvas_ has quit IRC18:24
pabelangerYah, can see that18:25
*** savvas has joined #openstack-ansible18:25
cloudnullin the coming cycles I'd like to make nspawn a first class option.18:26
cloudnullfor now i'll settle for it being tested in the gate :)18:27
*** flaviosr has quit IRC18:28
*** flemingo has joined #openstack-ansible18:30
*** flemingo has quit IRC18:34
*** deadnull has joined #openstack-ansible18:35
*** flemingo has joined #openstack-ansible18:50
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Convert role to use a common systemd role(s)  https://review.openstack.org/55204718:51
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Converge distro interfaces to systemd-networkd  https://review.openstack.org/55272118:52
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Use production like interfaces in the gate  https://review.openstack.org/55363618:52
*** flemingo has quit IRC18:54
*** flemingo has joined #openstack-ansible19:00
*** Sha0000 has joined #openstack-ansible19:04
*** flemingo has quit IRC19:04
*** shardy has quit IRC19:11
idlemindhaproxy_use_keepalived: False wouldn't that be True for a keepalived driven haproxy not false? https://docs.openstack.org/openstack-ansible-haproxy_server/latest/configure-haproxy.html#making-haproxy-highly-available19:12
idlemindor am i just reading the blurb above it incorrectly?19:12
*** deadnull has quit IRC19:13
*** chyka has quit IRC19:14
*** flemingo has joined #openstack-ansible19:14
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible master: Add more infos into error message  https://review.openstack.org/55388119:16
*** flemingo has quit IRC19:19
*** kstev1 has quit IRC19:21
*** Sha0000 has quit IRC19:21
*** ibmko has quit IRC19:22
*** flemingo has joined #openstack-ansible19:23
*** flemingo has quit IRC19:27
evrardjplogan-: I am sorry I got side tracked to many other things. It will have to wait for next week.19:32
logan-evrardjp: no probs.. you narrowed it down a lot. it seems like its just something where ansible 2.4 doesn't like the inventory json... and since you narrowed it down to that specific part, im hacking on the inventory json some to see if i can figure it out19:33
*** ansmith has quit IRC19:33
logan-and at least you scoped the problem.. I was worried we'd see this coming up for a lot of people trying to deploy queens, but it seems like the impact will be fairly limited now19:34
idlemindevrardjp is the keepalived role that is used by us the same as: https://github.com/evrardjp/ansible-keepalived/19:35
evrardjplogan-: sorry I could only spend a total of 10 minutes on that19:35
evrardjp:(19:35
*** flemingo has joined #openstack-ansible19:35
evrardjpYes I am concerned about the test gap logan-19:35
evrardjpidlemind: yes19:36
idlemindcool thanks19:36
evrardjphttps://github.com/openstack/openstack-ansible/blob/master/ansible-role-requirements.yml#L3119:36
evrardjpyou can use keepalived role for many things.19:36
*** admin0 has joined #openstack-ansible19:36
spotzevrardjp: portal is fixed19:37
*** throwsb1 has quit IRC19:38
evrardjpspotz: oh great19:39
evrardjpwhat did we have to do?19:39
spotzevrardjp: Jimmy fixed it, I'm asking if there's anything we can do in the future19:40
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible stable/queens: Correct is_container when deploying containers  https://review.openstack.org/55377719:40
*** flemingo has quit IRC19:40
*** kstev has joined #openstack-ansible19:40
idlemindevrardjp thx where / how is it called by osa? doesn't seem to be in -haproxy_server19:41
idlemind(and ya am interested in ipv6 support)19:41
evrardjpidlemind: it's called in the playbook for haproxy19:41
evrardjpidlemind: ipv6 works19:41
evrardjpor at least it used to19:41
evrardjpspotz: great19:42
evrardjpidlemind: https://github.com/openstack/openstack-ansible/blob/master/playbooks/haproxy-install.yml#L32-L3319:42
evrardjpI am off for today19:42
evrardjphave a good week-end everyone19:42
idlemindthx19:42
idlemindyou too19:42
spotzseeya evrardjp19:42
evrardjpthanks spotz on the project-navigator!19:42
evrardjpgreat job there19:43
evrardjp!19:43
evrardjpcya !19:43
*** kstev has quit IRC19:44
*** kstev has joined #openstack-ansible19:46
*** flemingo has joined #openstack-ansible19:51
*** flemingo has quit IRC19:55
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible master: Add more infos into error message  https://review.openstack.org/55388119:58
pabelangersuccess, just deployed first lxc container and use the connection_plugin to echo hello work inside it :D19:59
cloudnullpabelanger: nice!20:20
cloudnullnext step, conquer the world!20:20
*** savvas has quit IRC20:23
*** savvas has joined #openstack-ansible20:24
*** ansmith has joined #openstack-ansible20:25
*** savvas has quit IRC20:28
*** hw_wutianwei1 has joined #openstack-ansible20:32
*** hw_wutianwei has quit IRC20:33
*** hw_wutianwei1 is now known as hw_wutianwei20:33
*** savvas has joined #openstack-ansible20:34
*** flemingo has joined #openstack-ansible20:34
*** chyka has joined #openstack-ansible20:35
*** chyka has quit IRC20:36
*** chyka has joined #openstack-ansible20:37
*** savvas has quit IRC20:38
*** savvas has joined #openstack-ansible20:38
*** flemingo has quit IRC20:39
*** dave-mccowan has quit IRC21:01
*** jwitko has quit IRC21:22
*** sawblade6 has joined #openstack-ansible21:28
*** flemingo has joined #openstack-ansible21:29
*** sawblade_ has quit IRC21:30
*** flemingo has quit IRC21:33
*** ibmko has joined #openstack-ansible21:44
*** savvas has quit IRC21:50
*** savvas has joined #openstack-ansible21:51
*** savvas has quit IRC21:58
*** savvas has joined #openstack-ansible22:03
*** savvas has quit IRC22:03
*** savvas has joined #openstack-ansible22:04
*** savvas has quit IRC22:05
*** savvas has joined #openstack-ansible22:05
*** sawblade6 has quit IRC22:07
*** chyka has quit IRC22:07
*** sep has quit IRC22:07
*** rickflare has quit IRC22:07
*** DimGR has quit IRC22:07
*** coolj has quit IRC22:07
*** olivierbourdon38 has quit IRC22:07
*** sawblade6 has joined #openstack-ansible22:07
*** chyka has joined #openstack-ansible22:07
*** sep has joined #openstack-ansible22:07
*** rickflare has joined #openstack-ansible22:07
*** DimGR has joined #openstack-ansible22:07
*** coolj has joined #openstack-ansible22:07
*** olivierbourdon38 has joined #openstack-ansible22:07
*** savvas has quit IRC22:09
*** chyka has quit IRC22:13
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create master: Use hostnamectl to set the container hostname  https://review.openstack.org/55391122:20
*** kstev has quit IRC22:22
logan-cloudnull: testing out the networkd changes in lxc_container_create.. nice work. one question on the eth0 lxc net interface.. ifquery --status shows that ifupdown is managing eth0, and eth0 if setup for dhcp in /etc/network/interfaces. but there is also networkd config present for eth0 and networkd seems to think it is managing it also22:24
logan-same with lo22:25
logan-shouldn't we remove /etc/network/interfaces?22:26
logan-or delete everything from it22:26
logan-networkctl shows eth0 and eth1 stuck in configuring state. when i delete all of the contents of /etc/network/interfaces, now it shows eth0/eth1 as "configured"22:27
cloudnullwe could migrate the eth0/1/lo interfaces into networkd, but the idea was to first allow them to coexist on the test hosts.22:31
cloudnullat least as it pertains to the bootstrap-hosts role22:32
cloudnullI think it'd be something worthwhile to work on though to migrate existing network config into networkd.22:32
logan-not looking at the host interfaces though.. im talking about inside the containers22:33
logan-eth1 is not configured in ifupdown anymore22:33
*** flemingo has joined #openstack-ansible22:33
logan-eth0 is configured in both networkd and ifupdown22:33
logan-just not sure if that will cause issues22:33
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts master: Truncate all default sys config  https://review.openstack.org/55391222:35
cloudnullah yes.22:36
logan-it also seems like eth0 being configured in ifupdown prevents BOTH eth0 and eth1 from showing "configured" state in networkctl22:36
cloudnullwe should remove those interfaces22:36
logan-they stay in "configuring" forever22:36
logan-gotcha22:36
cloudnullI guess we need to create a lo interface file using networkd in the lxc container create role22:37
*** flemingo has quit IRC22:37
cloudnulland just nuke the ENI files22:37
logan-interestingly even with lo removed from /etc/network/interfaces, ifquery --state still shows it configured lo22:38
logan-so we might not be able to move lo to networkd, but at least eth0 we can get rid of22:38
cloudnulllogan-: http://0pointer.de/blog/projects/the-new-configuration-files22:41
cloudnulllooks like it's just something that happens22:41
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia master: Adds certificate generation  https://review.openstack.org/55363022:42
cloudnullso we could likely nuke the eni file22:42
logan-cool22:42
cloudnulland any other files in /etc/network/interfaces.d22:42
cloudnulli wonder if it'd all still work with state absent on /etc/network/interfaces.d and /etc/network/interfaces ?22:43
*** flemingo has joined #openstack-ansible22:45
*** chyka has joined #openstack-ansible22:46
*** hw_wutianwei has quit IRC22:46
*** hw_wutianwei has joined #openstack-ansible22:46
pabelangergiving openstack-ansible-lxc_container_create a try locally, but think I am hitting a bug22:47
pabelangerhttp://paste.openstack.org/show/703091/22:47
pabelangerusing stable/queens branch22:47
logan-yes it does work cloudnull22:48
*** admin0 has quit IRC22:49
logan-pabelanger: have to go afk for 30 mins... but with a delegation issue like that it'd be interesting to see your group vars for the container/physical hosts, and also your inventory22:49
*** chyka has quit IRC22:49
pabelangersure, I can paste, but I'm just following http://git.openstack.org/cgit/openstack/openstack-ansible-lxc_container_create/tree/examples/playbook.yml for my playbook. I'm likely missing group_vars22:50
*** flemingo has quit IRC22:50
pabelangeroh, I might see the issue22:52
pabelangerproperties is a dict, which filters don't work with by default22:53
pabelangerso, adding it to group_vars to see if fixes22:53
pabelangerokay, that fixed it. So, a minor bug. I can push up a patch here later this evening to fix the default filter with dictionaries22:59
pabelangerthanks!23:00
*** chyka has joined #openstack-ansible23:02
*** flemingo has joined #openstack-ansible23:11
*** flemingo has quit IRC23:17
*** savvas has joined #openstack-ansible23:24
*** savvas has quit IRC23:29
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: common-tasks: Container Start/Stop conditions  https://review.openstack.org/55309423:33
openstackgerritGerman Eichberger proposed openstack/openstack-ansible master: Increase DIB disk space to 3GB  https://review.openstack.org/49683223:34
*** openstackgerrit has quit IRC23:48
*** chyka has quit IRC23:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!