Wednesday, 2018-11-21

*** spatel has quit IRC00:03
*** aedc has joined #openstack-ansible00:11
*** tosky has quit IRC00:12
*** hamzy has joined #openstack-ansible00:44
*** nowster has quit IRC00:50
*** cshen has joined #openstack-ansible00:51
*** cshen has quit IRC00:55
*** hw_wutianwei_ has joined #openstack-ansible01:11
*** klamath has quit IRC01:38
*** klamath has joined #openstack-ansible01:41
*** mino_ has joined #openstack-ansible03:10
*** maddtux has joined #openstack-ansible03:29
*** udesale has joined #openstack-ansible04:17
*** mmercer has quit IRC04:27
*** cshen has joined #openstack-ansible04:45
*** cshen has quit IRC04:50
*** chandankumar has joined #openstack-ansible05:36
*** chandankumar is now known as chkumar|ruck05:37
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Added task to list tempest tests  https://review.openstack.org/61902406:41
*** ahosam has joined #openstack-ansible07:14
*** cshen has joined #openstack-ansible07:18
*** gkadam has joined #openstack-ansible07:25
*** DanyC has joined #openstack-ansible07:30
*** DanyC has joined #openstack-ansible07:31
*** DanyC has quit IRC07:44
*** DanyC_ has joined #openstack-ansible07:44
*** DanyC_ has quit IRC07:49
*** hamzaachi has joined #openstack-ansible08:06
*** rpittau has joined #openstack-ansible08:19
cshenI need some review for my patch https://review.openstack.org/#/c/581248/ , thanks.08:27
*** shardy has joined #openstack-ansible08:35
*** shardy has quit IRC08:39
*** eumel8 has joined #openstack-ansible08:44
*** mino_ has quit IRC08:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ops master: MNAIO: Add ability to deploy Ceph  https://review.openstack.org/60733808:50
*** tosky has joined #openstack-ansible08:57
*** hamzaachi has quit IRC09:00
MiougeI’m geting errors like “fatal: repository 'https://git.openstack.org/cgit/openstack/neutron-vpnaas-dashboard/' not found” in CI, it sounds completely unrelated to my patch, so I wonder what is going on: https://review.openstack.org/61909209:02
*** dcdamien has joined #openstack-ansible09:07
odyssey4meMiouge oops, wrong URL in https://review.openstack.org/#/c/617847/09:07
odyssey4mecgit should not be in the URL :/09:08
odyssey4mewould you like to push up a fix, or shall I?09:08
Miougeodyssey4me: cool! Let me give it a shot09:08
odyssey4methanks :)09:09
dcdamienodyssey4me: my bad - I'll fix it09:09
odyssey4medcdamien Perhaps give Miouge a shot at it, then you can review the patch. :)09:10
dcdamienkk09:11
MiougeI wonder why it was not caught by the CI the the openstack-ansible-os_horizon repo?09:12
openstackgerritMaxime Guyot proposed openstack/openstack-ansible-os_horizon master: Fix the vpnaas-dashboard git repo URL  https://review.openstack.org/61917909:13
Miougehere you go dcdamien and odyssey4me that URL works with cloning locally ^09:16
*** chkumar|ruck has quit IRC09:18
odyssey4meMiouge yep, thanks! :)09:18
*** chkumar|ruck has joined #openstack-ansible09:18
*** hamzaachi has joined #openstack-ansible09:25
*** DanyC has joined #openstack-ansible09:26
*** DanyC has quit IRC09:28
*** DanyC has joined #openstack-ansible09:29
*** cshen has quit IRC09:35
*** ahosam has quit IRC09:36
*** ahosam has joined #openstack-ansible09:36
*** ahosam has quit IRC09:40
openstackgerritMaxime Guyot proposed openstack/openstack-ansible master: Add a check that keepalived interfaces have IPs  https://review.openstack.org/61909209:42
*** hamzaachi_ has joined #openstack-ansible09:45
*** hamzaachi has quit IRC09:46
*** pcaruana has joined #openstack-ansible09:48
*** hamzaachi_ has quit IRC09:50
*** shardy has joined #openstack-ansible09:51
*** hamzaachi has joined #openstack-ansible09:53
*** hamzaachi has quit IRC09:54
evrardjphola09:54
*** hamzaachi has joined #openstack-ansible09:55
*** hamzaachi_ has joined #openstack-ansible09:57
*** hamzaachi has quit IRC09:57
*** hamzaachi_ has quit IRC09:58
*** hamzaachi has joined #openstack-ansible10:00
*** cshen has joined #openstack-ansible10:01
dcdamien+1 Miouge I think we should figure out why such as fail as setting incorrect git URL was not caught in CI run related to change that instroduced it.10:03
*** ahosam has joined #openstack-ansible10:03
Miougedcdamien: I can’t find any “vpnass” in http://logs.openstack.org/47/617847/6/check/openstack-ansible-functional-ubuntu-bionic/6273c37/job-output.txt.gz so I suppose that it didn’t get tested10:04
*** hamzaachi has quit IRC10:05
dcdamienshouldn't we enable this dashboard in AIO to get it tested in CI?10:06
odyssey4medcdamien none of those are used in the CI test - only the basic dashboard is setup10:06
*** cshen has quit IRC10:07
dcdamienis there any reason to not test all of them?10:07
odyssey4medcdamien I don't think anyone's tried. :)10:07
MiougeI think that openstack-ansible CI tried to clone it but openstack-ansible-os_horizon CI didn’t10:08
odyssey4meWith the basic horizon setup in the role, we had to add a nova service catalog entry for it to work - adding the extra dashboards may also require similar things to get them to allow horizon to start properly. It'd be nice to have them tested in CI. :)10:09
odyssey4medcdamien also note that for every _git_repo entry in the role, there should be a corresponding SHA pin in the integrated repo-  otherwise the py_pkgs lookup will always grab master and the integrated build will break10:09
*** Emine has joined #openstack-ansible10:10
dcdamienodyssey4me: isn't nova service catalog entry just required to use (access) dashboards and not required to deploy them?10:15
*** nowster has joined #openstack-ansible10:19
odyssey4medcdamien yes, but the CI test actually runs tempest against horizon - I think all that does is verify that it loads and can be logged into10:20
dcdamienok, now I got the point10:25
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ops master: MNAIO: Add ability to deploy Ceph  https://review.openstack.org/60733810:28
*** Emine has quit IRC10:31
*** priteau has joined #openstack-ansible10:37
*** hamzaachi has joined #openstack-ansible10:38
nowsterHmm...10:43
*** ahosam has quit IRC10:43
nowster$ git clone https://git.openstack.org/cgit/openstack/neutron-vpnaas-dashboard/10:43
nowsterCloning into 'neutron-vpnaas-dashboard'...10:43
nowsterfatal: repository 'https://git.openstack.org/cgit/openstack/neutron-vpnaas-dashboard/' not found10:43
odyssey4menowster https://review.openstack.org/619179 will fix that10:45
nowsterthanks10:45
odyssey4mejrosser hwoarang evrardjp you around? we need another review for https://review.openstack.org/619179 to unblock the integrated gate10:46
nowsterjrosser is in a meeting at the moment10:47
*** ahosam has joined #openstack-ansible10:51
*** shardy has quit IRC10:52
*** shardy has joined #openstack-ansible10:53
evrardjpodyssey4me: I missed it :(10:53
evrardjpmy bad10:54
*** Emine has joined #openstack-ansible10:54
odyssey4meevrardjp yeah, me too :/10:54
*** ahosam has quit IRC10:55
*** fghaas has joined #openstack-ansible10:58
*** cshen has joined #openstack-ansible11:02
mnaserbonjour11:03
jrossero/11:05
mnaserodyssey4me: do we want to start adding nspawn jobs inside our gates?11:07
odyssey4memnaser I dunno if the existing integrated build test is passing yet on master - I'd think that's an initial target.11:07
odyssey4meYou were working on that some time ago?11:07
odyssey4meMy backports to rocky were only to get the nspawn_hosts/nspawn_container_create roles up to speed with master.11:08
mnaserodyssey4me: https://review.openstack.org/#/c/608433/ i have this but i can respin if someone has done some iterations on that since11:08
odyssey4memnaser I think you can abandon that and start fresh again, because I think much of that has been done and merged.11:11
odyssey4meI guess I could push a patch up to bring it into the check queue and see what happens.11:12
odyssey4melemme do that11:12
fghaasodyssey4me, another follow-up from last week. You'll recall we spoke briefly about our default haproxy connection timeouts being too conservative for things like openstack stack event list --follow, where the client keeps a connection open essentially indefinitely (until interrupted by SIGINT or, rather rudely, by an upstream haproxy as in our case). I am beginning to wonder whether or not that might affect other services as w11:13
fghaasell. In particular, I'm not sure if heat-engine doesn't try to pipeline many (all?) of its requests to a particular API endpoint over a single TCP connection (I haven't looked at the code, because I don't even know where I'd start looking). If that's the case, then the 50s timeout is _definitely_ too conservative. Have you run into any of that before?11:13
openstackgerritMohammed Naser proposed openstack/openstack-ansible master: Enable passing nspawn jobs  https://review.openstack.org/60843311:13
mnaserodyssey4me: oops i was alt tabbed ^11:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: [WIP] Switch ubuntu/nspawn/source jobs to voting  https://review.openstack.org/61921111:15
odyssey4memnaser ah ok, well - keep going with that one, let's see what happens11:17
odyssey4meI'll abandon mine.11:17
mnaserodyssey4me: cool, i was thinking that if we get somewhat functional nspawn jobs, we can actually look into using integrated role for our test jobs using nspawn11:19
mnaserso all role testing uses integrated using nspawn11:20
mnaserwhich will exercise a lot more 'testing' on our nspawn components and we keep lxc in integrated11:20
odyssey4memnaser yeah, it might be good to do that when we switch - I need to find some time to get back to getting the changes to the aio bootstrap done to allow us to switch to using the integrated build for everything11:21
odyssey4meI think I can squeeze in some time this week.11:21
mnaserodyssey4me: i've been a bit swamped personally but i'm happy with the good progress we're doing in os_placement which will keep us up to date.11:22
mnaseron a totally seperate note i've been looking to add new people who would be working on OSA so hopefully that'll give us more help here too11:22
mnaserbut that takes forever :)11:22
mnaser(but hopefully takes a bit of load off of everyone)11:22
odyssey4memnaser thanks - the more climb in to help, the easier it is for everyone11:23
odyssey4meand no contribution is too small to spread the load11:23
*** hamzaachi has quit IRC11:23
mnaseryup, i think right now we have a lot of big heavy lifting ahead of us11:24
odyssey4mewe may have to pin our nova role once the switch is made in upstream nova, so that our role tests can continue until we have our placement role done11:24
mnaseresp with the change to nspawn and figuring out that whole thing11:24
mnaserodyssey4me: placement is not being removed until one deployment tool adds it11:24
odyssey4meah ok, heh, it'd be good to be that tool ;)11:25
mnasertripleo is working on it and so are we, so hopefully we can have it done.  let me share a small doc11:25
mnaserhttps://etherpad.openstack.org/p/BER-placement-extract11:25
mnaserboth existing in deployment tool *with* upgrade jobs.. so yeah11:25
odyssey4meah, yes - well - with the role in place and working, and integrated, we can focus on doing the upgrade thing11:26
mnaserpart of the placement upgrade is like11:26
mnasershutting down old placement service11:26
mnaserexport db into a new one..11:27
mnaserand start it back up11:27
* mnaser is terrified already11:27
mnaserthe placement team has given us a bash script which is noop if it's already done11:27
odyssey4meyep, but let's get greenfield done - then we can work out the best way to migrate11:27
mnaseryep11:27
mnaserhttps://github.com/openstack/placement/blob/master/tools/mysql-migrate-db.sh11:27
mnaserfwiw11:27
odyssey4meok, the bash script will be a good reference11:27
mnaseryup :)11:28
openstackgerritMerged openstack/openstack-ansible-nspawn_container_create stable/rocky: Add missing user defined interface support  https://review.openstack.org/61616411:28
*** udesale has quit IRC11:28
noonedeadpunkMorning everyone.11:30
noonedeadpunkI'd appreciate if someone can take a look into https://review.openstack.org/#/c/619058/11:30
mnasernoonedeadpunk: small nit11:31
noonedeadpunkmnaser: To be honest, I've placed patch just after https://review.openstack.org/#/c/617847/ being merged, so mentioned patch wasn't placed at that time11:33
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: [DNM] Test arm64  https://review.openstack.org/61830511:33
mnasernoonedeadpunk: no worries :D if you can just drop that part and add depends-on or things will be in merge conflict11:33
noonedeadpunkI just thought, that the first placed patch should be more valuable, but ok, I'll remove this part from mine11:35
openstackgerritMerged openstack/openstack-ansible-nspawn_container_create stable/rocky: Add a guard so we don't allow for duplicate config  https://review.openstack.org/61616511:35
openstackgerritDmitriy Rabotjagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon master: Implements masakari-dashboard to be installed in horizon  https://review.openstack.org/61905811:36
*** cshen has quit IRC11:36
*** cshen has joined #openstack-ansible11:39
evrardjpfghaas: haproxy?11:41
evrardjpyou can have sticky tables if you like11:41
evrardjpin haproxy11:41
evrardjpnot sure if the role is ready for that though11:41
odyssey4mefghaas last I ran into trouble with that was a very long time ago in essex, but I don't operate a cloud any more - so perhaps better to ask those who do on a day to day basis, like mnaser logan- jrosser11:43
*** cshen has quit IRC11:44
mnaserheat-api talks to heat-engine via rpc11:44
mnaseri have noticed the issues mentioned about stack event indeed11:44
openstackgerritMerged openstack/openstack-ansible-nspawn_container_create stable/rocky: Add test for host_only networks and ensure network ordering  https://review.openstack.org/61616311:45
jamesdentongood morning11:45
*** hamzaachi has joined #openstack-ansible11:46
*** mugsie has joined #openstack-ansible11:48
*** cshen has joined #openstack-ansible11:50
openstackgerritDmitriy Rabotjagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon master: Implements masakari-dashboard to be installed in horizon  https://review.openstack.org/61905811:51
openstackgerritKaio Kassiano Moura Oliveira proposed openstack/openstack-ansible-os_monasca-ui master: Retire openstack-ansible-os_monasca-ui  https://review.openstack.org/61720411:52
fghaasevrardjp: I don't follow. How do sticky tables help with enforced timeouts?11:53
openstackgerritMerged openstack/openstack-ansible-nspawn_hosts stable/rocky: Install the timezone package by default  https://review.openstack.org/61615011:53
fghaasmnaser: yes I know that heat-api talks to heat-engine via RPC, but the question is whether heat-engine pipelines its calls to *other* APIs11:54
evrardjpfghaas: it would not help on the timeouts11:54
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Remove unnecessary octavia scenario AIO bootstrap  https://review.openstack.org/61921811:54
jrosserodyssey4me: should we add that tz package ^^ to my stripped down lxc_hosts packages patch?11:54
evrardjpfghaas: but the client would always target the same backend nodes, so I suppose it's not really a problem anymore, as connections would be reused?11:54
evrardjpfghaas: I am just trying to understand the root cause :)11:54
fghaasevrardjp: no, the problem is haproxy _actively killing_ the connection11:55
evrardjpoh I see11:55
mnaserfghaas: even if heat pipelined calls, no calls to openstack actually take 50s with nothing happening11:55
mnaserexcept for glance in weird scenarios11:55
evrardjpAnd it's from heat-engine, which you mean internally, right?11:55
mnaserwhere it buffers all the upload stuff then pushes it out after11:55
guilhermespmorning11:55
mnasero/ guilhermesp11:56
evrardjpmnaser: I am not sure we need to be agressive in the killing of connections between internal endpoints11:56
mnaserwe dont have to be aggressive, but i think 50s is a very reasonable timeout for api services not responding11:57
evrardjpbut that 50 seconds thing is interesting indeed, why does the call take so long11:57
evrardjpmnaser: agreed11:57
evrardjpso maybe there is an exceptional case?11:57
mnaserheat stack event is this unique "streaming" like user facing api11:57
mnaserglance has always been an exception in wanting big timeouts11:57
mnasermaybe heat is another one now11:57
odyssey4mejrosser you mean remove it in your strip-down patch? I'm not sure I understand the question - although I think the timezone package is likely one of those which should be done in the base, because it's required for the copy of the timezone config from the host to the container to work11:58
evrardjpgood morning jamesdenton12:00
jrosserodyssey4me: well oddly it looks like it was never there in the lxc_hosts package list, so i figured that if it was necessary in the nspawn base packages then it probably should also be necessary in the lxc_hosts list12:00
odyssey4mejrosser yep, makes sense to me12:00
jrosserok, i'll add it to make things match up with nspawn12:00
evrardjpkaiokmo: thanks for the work on retiring :)12:00
evrardjpkaiokmo: want to retire more things, like freezer? :D12:01
evrardjpyou're now used to it, so it's good :)12:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Remove unnecessary octavia scenario AIO bootstrap  https://review.openstack.org/61921812:01
kaiokmoevrardjp: no problem. I thought freezer was already retired12:02
evrardjpkaiokmo: let me double check :)12:02
evrardjpI think there are a few ones not fully retired yet12:03
evrardjphttps://github.com/openstack/governance/blob/master/reference/projects.yaml#L2605-L2607 and https://github.com/openstack/governance/blob/master/reference/projects.yaml#L2614-L2616 could probably be retired. https://github.com/openstack/governance/blob/master/reference/projects.yaml#L2617-L2619 is a different story, but we can try, as I have changed releases to make that work12:04
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-lxc_hosts master: Minimise distro packages installed into the lxc image  https://review.openstack.org/61307812:04
evrardjpif you want I can do that12:04
evrardjpbut I thought it's good to exercice your newly acquired skills :)12:04
fghaasevrardjp: the way you see this is, for example, on an `openstack stack <operation> --wait` call, which will just die with "Connection aborted.', BadStatusLine("''",))"12:05
evrardjpoh yeah the wait bit!12:06
evrardjpmmm12:06
evrardjpI didn't get that recently though, so I am curious12:06
evrardjpwhich version is that?12:06
fghaasBut the problem is, it'll do this far sooner than 50s after the latest thing it sent12:06
evrardjpRocky?12:06
fghaasYes12:06
evrardjpthat might explain why I haven't seen it12:06
evrardjpI am still lagging behind there12:07
fghaasI have an output in front of me where I see the prior event entry at 12:04:13Z, and then at 12:04:30Z I see the drop.12:07
fghaasNo, this has been the case in Queens as well. Probably Pike too.12:07
fghaasSo while I agree with mnaser that no OpenStack API call should take 50s with nothing happening, there clearly _are_ things happening here but the connection still gets killed.12:08
evrardjpfghaas: I have done a few times this kind of stacks with wait in Q and didn't get the issue.12:08
fghaasI see this in all our OSA deployments, whereas our legacy RDO stuff (which uses nginx, not haproxy) doesn't have this issue.12:08
evrardjpmore interesting : )12:08
fghaasHow complex were your stacks though?12:09
*** hamzaachi has quit IRC12:10
evrardjpI recently did a deploy of 4 nodes k8s cluster with auto enrollment of nodes12:10
*** hamzaachi_ has joined #openstack-ansible12:10
evrardjpso kinda complex12:10
evrardjp(yes I am not using magnum :p)12:11
evrardjpbut still12:11
evrardjpI have weird environment though, it's not really haproxy you generate from the OSA plays12:12
evrardjpso that might be it12:12
jamesdentonodyssey4me was another bug or patch opened to fix the URL here? https://review.openstack.org/#/c/617847/6/defaults/main.yml12:19
odyssey4mejamesdenton yep: https://review.openstack.org/61917912:20
jonhergate is running as we speak12:20
jamesdentongreat, thanks!12:21
mnaserjrosser: odyssey4me evrardjp can i get https://review.openstack.org/#/c/615895/ and https://review.openstack.org/#/c/615896/ some love? it's been around for 2 sad weeks :(12:22
mnaserand i need to do backport to rocky and queens sooOo12:22
odyssey4memnaser done12:25
mnaserjrosser: mind looking at the second patch in there? :>12:28
Miougefghaas: would something like that http://paste.openstack.org/show/735888/ reproduce the problem?12:29
dcdamienfolks, you know that famous change that brings back VPNaaS dashboard back using wrong git URL12:30
dcdamiencan you please let me know if can it be backported? what policy states about?12:30
jrossermnaser: so about that second patch, what is it that connects to the public endpoint there?12:30
odyssey4medcdamien you are welcome to propose backports - although you should do a backport with the correct content this time :)12:30
odyssey4medcdamien also note that there needs to be a corresponding patch to the integrated build first to ensure that the SHA is pinned12:30
*** pvradu has joined #openstack-ansible12:31
*** hamzaachi_ has quit IRC12:31
mnaserjrosser: if you're using the heat agent like os-collect-config or so12:31
odyssey4medcdamien similar to https://github.com/openstack/openstack-ansible/blob/master/playbooks/defaults/repo_packages/openstack_services.yml#L105-L10912:31
mnaserand also in magnum is pushes it out to the container to do things like auth to get keys12:31
jrossermnaser: the reason I hesitate is that (in my case) the internals of the openstack services can't connect to the public endpoints12:32
*** pvradu has quit IRC12:32
jrosserand i don't know enough it to know if that is/isnt a problem12:32
*** pvradu has joined #openstack-ansible12:33
mnaserjrosser: it should still work, that url is the one exposed to the user12:33
jrosserrighto, thats fine12:33
mnaserit's just to kinda say "here is where you should go to authenticate"12:33
jrossergotcha12:33
odyssey4memnaser ok, what determines the endpoint the magnum service itself uses?12:34
odyssey4meI've posed another Q in review.12:34
mnaserodyssey4me: an awful scary workaround with a big TODO in magnum12:34
mnaserlet me find it12:34
jrosserimho this is something we should really improve in our testing, making sure there isnt an accidental short circuit internal/external12:35
*** dcdamien has quit IRC12:35
odyssey4mejrosser yeah, best way to achieve that would be to actually fire up a heat stack in our integrated build tests12:35
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_placement master: [WIP] Create base files to install placement  https://review.openstack.org/61882012:35
odyssey4methe healthcheck-openstack playbook actually does that12:35
jrosserin an AIO internal/external isnt really very distinct though is it?12:36
*** maddtux has quit IRC12:36
odyssey4mejrosser yeah, but due to the self signed cert - anything that tries to use the public endpoint will fail12:37
odyssey4meany internal service I mean12:37
jrosserah sneaky12:37
mnaserodyssey4me: voila12:37
odyssey4memnaser oh dear, that is horrible12:38
mnaseryep.  you can imagine how much fun that was to find lol12:39
cshenhello, is it true that each entry in the when block must be wrapper with double quotes?12:39
cshenwrapped12:40
mnasernot always cshen .. examples?12:40
odyssey4mecshen it is best to do so, but not required12:40
cshenodyssey4me Ok!12:40
odyssey4mecshen doing so ensures that ansible interprets the line as jinja, which sometimes doesn't happen correctly if unquoted12:41
evrardjpcshen: at least that's what I have been told by ansible people.12:41
odyssey4meI really wish the syntax requirements were more consistent - using {{}} in some places but not others really drives me nuts.12:41
mnaseri've found that it mostly is necessary when you do things like when: "foo" in bar12:41
evrardjpodyssey4me: haha12:41
mnaserthe quotes there confuse yaml12:41
evrardjpmnaser: ?12:41
mnaserif you do: when: "foo" in bar12:42
evrardjpif you're doing " " it is just fine for me12:42
evrardjpwhen: \n - "'foo' in bar"12:42
mnaseryaml goes like "why is there a " in bar" after the quoted string12:42
mnaserso you need to do somehtling like12:42
mnaseryeah, you have to quote it in those scenarios12:42
mnaserbut for example if you do12:42
mnaserwhen: foo is bar12:42
mnaserthe yaml evaluates fine there12:42
evrardjpyeah but foo is a var12:42
mnaserso in my experience usually its just a yaml thing rather than an ansible thing12:42
evrardjpso foo needs to be a string12:43
evrardjpso ''12:43
mnaserwhen: 'foo is bar' vs when: foo is bar12:43
mnaseris the same thing in yaml12:43
evrardjpno I meant12:43
evrardjp'foo' is bar12:43
evrardjpwhich is easier if we at the end write12:43
mnaserafia if you did12:43
evrardjp"'foo' is bar"12:43
mnaserwhen: bar == 'foo'12:43
mnaserthat doesnt need quotes12:43
mnaserthe fact we discuss this that much12:44
mnaseris a problem12:44
evrardjphahah12:44
mnaserlolol12:44
evrardjpfair12:44
evrardjpI'd rather stick with the convention12:44
evrardjp" 'string' is whatevervar"12:44
*** dcdamien has joined #openstack-ansible12:44
evrardjpor the other way around12:44
evrardjpwhatever is readable :p12:44
evrardjpwe should have a linter to force all the when conditions to be wrapped with double quotes :p12:45
evrardjp #hatersaregonnahate12:45
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_placement master: [WIP] Create base files to install placement  https://review.openstack.org/61882012:45
guilhermespppl ^ I was wondering how to add ansible-lint tests in os_placement12:46
cshensince it's best practice, I will wrap my patch with double quotes.12:47
mnaserguilhermesp: you'll have to add things to zuul.d12:48
mnaserlet me see12:48
guilhermespmnaser: didn't find explicitly in roles like os_glance12:49
mnaserguilhermesp: create a projects.yaml similar to this one https://github.com/openstack/openstack-ansible-os_glance/blob/master/zuul.d/project.yaml12:49
mnaseropenstack-ansible-role-jobs is a template that includes linters12:49
guilhermespnice12:49
mnaseryou pretty much want to copy that exact file and drop the check: and gate: sections12:49
mnaserbecause those are custom glance jobs12:49
mnaserand then zuul will do its magical thing :)12:49
guilhermesplovely12:50
fghaasMiouge: yes it does for me!12:50
mnaserjrosser: odyssey4me here is another gem of auth_uri having a private url (which it should not): https://review.openstack.org/#/c/615916/12:50
fghaasMiouge: http://paste.openstack.org/show/735892/12:50
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_heat stable/queens: Deprecate auth_uri option  https://review.openstack.org/61923112:52
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_placement master: [WIP] Create base files to install placement  https://review.openstack.org/61882012:53
Miougefghaas: this is what I get: http://paste.openstack.org/show/735893/ on a Pike OSA deploy with the following (default?) HAProxy conf: http://paste.openstack.org/show/735894/12:56
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_placement master: [WIP] Create base files to install placement  https://review.openstack.org/61882012:56
openstackgerritChenjun Shen proposed openstack/openstack-ansible master: Fix "configure container (other services)" when statement  https://review.openstack.org/58124812:58
openstackgerritArx Cruz proposed openstack/openstack-ansible-os_tempest master: [WIP] - Add centos-7 job with support to python-tempestconf  https://review.openstack.org/61902112:58
mnaserguilhermesp: http://zuul.openstack.org/status you can see that the linters and jobs are running :)12:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ensure AIO bootstrap container tech var is namespaced  https://review.openstack.org/61923313:00
guilhermespmnaser: sweet13:02
guilhermespdidn't notice that zuul interface has changed13:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ensure AIO bootstrap container tech var is namespaced  https://review.openstack.org/61923313:03
guilhermespok so all functional tests are there and are going to fail of course13:03
kaiokmoguilhermesp: what if all functional pass at first? :)13:05
mnaserthat theory has already failed kaiokmo  :P13:05
mnaserhttp://logs.openstack.org/20/618820/13/check/openstack-ansible-functional-centos-7/2f14b4f/13:05
guilhermespkaiokmo: they're already failing :)13:05
kaiokmohahah13:05
mnaserodyssey4me: was the run_tests.sh file sync'd with our magic tools?13:06
mnaseror did we manually add that13:06
guilhermespI'm just writing the role. That's why I'd like linters to check the syntax. But I do need to create tests/ and run_tests.sh and start fixing stuff13:06
odyssey4memnaser it will sync from the tests repo if a file by that name exists13:06
mnaserok so we need to bootstrap that file13:07
odyssey4meso yes, you need to initially add it in a patch13:07
mnaserokay so guilhermesp can just copy and paste it from another repo like glance and that'll get us past that point, cool13:07
guilhermespwill do that mnaser13:07
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_placement master: [WIP] Create base files to install placement  https://review.openstack.org/61882013:09
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Fix the vpnaas-dashboard git repo URL  https://review.openstack.org/61917913:10
*** fghaas has quit IRC13:13
nowsteryay!13:19
*** fghaas has joined #openstack-ansible13:31
openstackgerritMerged openstack/openstack-ansible-os_heat master: Switch to using public endpoint for URIs  https://review.openstack.org/61591613:34
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_placement master: [WIP] Create base files to install placement  https://review.openstack.org/61882013:38
*** hamzaachi has joined #openstack-ansible13:47
*** strattao has joined #openstack-ansible13:52
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Drop identity_uri usage in keystone_authtoken  https://review.openstack.org/61589513:58
*** pvradu_ has joined #openstack-ansible14:03
*** pvradu has quit IRC14:07
*** pvradu_ has quit IRC14:07
*** pvradu has joined #openstack-ansible14:08
*** chkumar|ruck has quit IRC14:12
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Implements masakari-dashboard to be installed in horizon  https://review.openstack.org/61905814:13
openstackgerritFlorian Haas proposed openstack/openstack-ansible master: Include Swift AUTH_%(tenant_id)s suffix in rgw Keystone endpoint  https://review.openstack.org/61419414:23
openstackgerritFlorian Haas proposed openstack/openstack-ansible master: Include Swift AUTH_%(tenant_id)s suffix in rgw Keystone endpoint  https://review.openstack.org/61419414:30
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: [WIP] Implement changes to allow test usage by roles  https://review.openstack.org/55179114:32
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ensure AIO bootstrap container tech var is namespaced  https://review.openstack.org/61923314:36
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: [WIP] Implement changes to allow test usage by roles  https://review.openstack.org/55179114:36
*** udesale has joined #openstack-ansible14:39
openstackgerritLuis Filipe Domingues proposed openstack/openstack-ansible-os_cinder master: Add possibility to have private cinder volume types  https://review.openstack.org/61926414:40
arxcruzguys, i need help with https://review.openstack.org/#/c/619021/14:40
arxcruzthe tempest_use_tempestconf variable isn't being set to true for some reason14:41
*** hamzaachi has quit IRC14:41
odyssey4mearxcruz uh, nope - that's not going to work with our role tests14:42
odyssey4mewe don't use zuul's ansible to run the test14:42
arxcruz(╯°□°)╯︵ ┻━┻14:42
arxcruzodyssey4me: so need to create entry on tox14:43
arxcruzgot it14:43
odyssey4mearxcruz you'll want to do something like https://github.com/openstack/openstack-ansible-os_glance/blob/master/tox.ini#L11514:43
arxcruzyup, got it, thanks odyssey4me14:44
odyssey4meand then in the job: https://github.com/openstack/openstack-ansible-os_glance/blob/master/zuul.d/jobs.yaml#L23-L2814:44
odyssey4meone day when there's a zuul runner, and we can specify a version of ansible to use to run the play, we can switch to using a simpler mechanism14:45
openstackgerritLuis Filipe Domingues proposed openstack/openstack-ansible-os_cinder master: Add possibility to have private cinder volume types  https://review.openstack.org/61926414:46
*** hamzaachi has joined #openstack-ansible14:47
openstackgerritArx Cruz proposed openstack/openstack-ansible-os_tempest master: [WIP] - Add centos-7 job with support to python-tempestconf  https://review.openstack.org/61902114:48
arxcruzodyssey4me: ok, thanks!14:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement AIO changes to allow test usage by roles  https://review.openstack.org/55179114:55
*** hamzaachi has quit IRC15:01
*** fghaas has left #openstack-ansible15:06
*** chandankumar has joined #openstack-ansible15:11
MiougeI'm running into this error "Selective block device migration is not supported with tunnelled block migrations." when trying to live migrate VMs with local storage AND cinder volumes (RBD). It looks like OSA sets live_migration_tunnelled=True. Is there any way out other than detaching the volumes before live migrating?15:17
*** Emine has quit IRC15:17
*** Emine has joined #openstack-ansible15:18
mnaserMiouge: i guess you might have to disable that but im not sure of the consueqnces15:19
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_magnum stable/rocky: Drop identity_uri usage in keystone_authtoken  https://review.openstack.org/61927015:19
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_magnum stable/queens: Drop identity_uri usage in keystone_authtoken  https://review.openstack.org/61927115:20
*** chandankumar has quit IRC15:22
mnaserthat gate fix cant merge fast enough15:22
mnaseroh it did merge15:23
odyssey4memnaser which one?15:23
odyssey4meyep15:23
mnaserodyssey4me: the one that makes clones fail15:23
Miougemnaser: the vpnaas dashboard fix got merged15:23
mnaserodyssey4me: https://review.openstack.org/#/c/608433/ im going to be tracking this on my little time i have, iterating slowly to make things happen15:23
mnasercoool15:24
*** chandankumar has joined #openstack-ansible15:24
mnasermy super red patch is gonna be a bit less red15:24
mnasercentos failed on clones for nspawn, expected..15:24
odyssey4memnaser I think that https://review.openstack.org/551791 will enable the use of the integrated build for roles, assuming it passes -along with the dep patches below it. We'll see how the gate responds.15:24
mnaserodyssey4me: when we have some gate results i will invest in some time really reading through it15:25
odyssey4meyep15:25
odyssey4mebasically the scenario name can now be named whatever you like, but it will assume keystone & haproxy as a base15:26
odyssey4meif you add 'aio' to the scenario name, it'll add the compute kit15:26
odyssey4meif you add 'nspawn' to the name, it'll use nspawn instead of lxc15:26
odyssey4meif you add 'metal' to the name, it'll skip haproxy15:26
mnaserwill we have to maintain all of the scenarios in integrated repo or can they live in-role?15:27
odyssey4methen just add whatever other services you like for extra stuff15:27
odyssey4mewe'll need to add conf.d files, plays, group_vars, etc to the integrated build for now15:27
openstackgerritMerged openstack/openstack-ansible-os_monasca-ui master: Retire openstack-ansible-os_monasca-ui  https://review.openstack.org/61720415:28
*** hamzaachi has joined #openstack-ansible15:29
odyssey4mewe can see whether we want to change it up to allow in-repo other things - that would be an extension on top of that work... for now I'm focusing on the stuff already integrated15:29
mnaserodyssey4me: yeah lets not have too much scope creep, we'd already be years ahead just getting integrated up in roles15:29
odyssey4methanks to evrardjp for the idea to simply use the scenario name and extrapolate from there15:29
odyssey4meto enable testing of the infrastructure roles, and different affinities, I'll do some other bits on top to enable that in a follow on patch once this is working15:30
mnaseri'm trying to debug nspawn failures15:31
mnasercentos was just git clone fail (re: vpn))15:31
mnaseropensuse seems to try to access a folder that's missing in our mirrors?15:31
mnaserhttp://mirror.iad.rax.openstack.org/opensuse/distribution/leap/42.3/repo/oss/repodata/repomd.xml15:31
mnaserhowever i noticed this15:31
mnaserhttp://mirror.iad.rax.openstack.org/opensuse/distribution/leap/15.0/repo/oss/repodata/repomd.xml15:31
mnaseri should ahve checked another mirror15:32
odyssey4memaybe something's gone into the lxc hosts/container create roles which needs to be replicated to the nspawn roles that correspond15:32
mnaseryeah repodata is missingin upstream mirrors15:32
mnaserhttp://ftp.opensuse.org/pub/opensuse/distribution/leap/42.3/repo/oss/ here too15:32
mnaserso that means that we're doing something weird15:32
mnaserhwoarang: evrardjp any ideas?15:33
mnaseri wonder if its including the wrong file or if its creating like15:34
mnaser15.0 containers15:34
mnasercloudnull: any ideas too?15:36
odyssey4memnaser it's perhaps likely that https://github.com/openstack/openstack-ansible-lxc_hosts/commit/5f0f01c355972a3c4ef87abf2aa5302ef33ceb1c or something like it needs to happen in the nspawn_hosts role15:37
odyssey4memnaser perhaps it'd be best to just pick one distro and get it to working, then go from there15:38
*** chandankumar has quit IRC15:39
mnaserodyssey4me: fair enough, centos it is :P15:39
mnaserthat's the easiest i can iterate on at least anyways15:39
mnaserdont mind pitching in for the rest but this is the fastest path to success anyways :P15:39
odyssey4mesure, once that's alright then myself/cloudnull can have a go at bionic15:40
mnaserawesome, im excited15:41
openstackgerritChenjun Shen proposed openstack/openstack-ansible master: Fix "configure container (other services)" when statement  https://review.openstack.org/58124815:42
mnaserodyssey4me: i think i will repush that patch with all jobs removed except for the centos nspawn one, just to get it to run faster and waste less ci resources15:42
mnaserthoughts?15:42
odyssey4memnaser yep, go for it15:43
openstackgerritJames Denton proposed openstack/openstack-ansible master: Adds haproxy endpoints for networking-ovn support  https://review.openstack.org/58406915:44
openstackgerritMohammed Naser proposed openstack/openstack-ansible master: Enable passing nspawn jobs  https://review.openstack.org/60843315:44
mnaserthere, that'll get us through quicker15:45
*** devx has quit IRC15:48
Miougemnaser: might need to replace live_migration_tunnelled by live_migration_inbound_addr & co. Is it that most people just run with nova_libvirt_images_rbd_pool instead?15:48
mnaserMiouge: i mean personally speaking we run everything on rbd so i cant really like15:49
mnaserknow what to do in that scenario15:49
*** hamzaachi has quit IRC15:49
*** ThiagoCMC has quit IRC15:50
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: Adds DPDK support for Open vSwitch  https://review.openstack.org/59081015:51
*** cshen has quit IRC15:52
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ensure AIO bootstrap container tech var is namespaced  https://review.openstack.org/61923315:53
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement AIO changes to allow test usage by roles  https://review.openstack.org/55179115:53
*** udesale has quit IRC15:58
*** gkadam has quit IRC16:40
*** ThiagoCMC has joined #openstack-ansible16:42
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ensure AIO bootstrap container tech var is namespaced  https://review.openstack.org/61923316:46
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ensure AIO container_tech/install_method vars are namespaced  https://review.openstack.org/61923316:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement AIO changes to allow test usage by roles  https://review.openstack.org/55179116:49
*** pcaruana has quit IRC16:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ops master: MNAIO: Add ability to deploy Ceph  https://review.openstack.org/60733816:52
*** ThiagoCMC has quit IRC16:53
*** shardy has quit IRC17:01
*** Emine has quit IRC17:05
*** shardy has joined #openstack-ansible17:07
*** pvradu has quit IRC17:08
openstackgerritArx Cruz proposed openstack/openstack-ansible-os_tempest master: Add centos-7 job with support to python-tempestconf  https://review.openstack.org/61902117:17
*** dcdamien has quit IRC17:17
arxcruzodyssey4me: evrardjp https://review.openstack.org/#/c/619021/ ready for review :)17:18
*** arbrandes has quit IRC17:21
jrosserodyssey4me: would we expect the "install tempest plugin requirements" to be all available from the repo server, or does the utility container need to be able to build those?17:36
cloudnullafternoons all17:41
jrossero/17:41
cloudnullmnaser odyssey4me - what do we need to give a spin in Bionic ?17:43
odyssey4mecloudnull well, mnaser is working on getting the nspawn gate on centos to pass, then we can build on top of that for bionic17:46
cloudnullcool!17:46
* cloudnull was just looking at https://review.openstack.org/#/c/608433 17:47
odyssey4mecloudnull yep, obviously if you see any results and can suggest changes - go ahead and do so in review17:48
cloudnull++17:48
openstackgerritMerged openstack/openstack-ansible-ops master: Correct clustered gating job  https://review.openstack.org/61903317:53
*** rpittau has quit IRC17:57
*** hamzaachi has joined #openstack-ansible18:04
*** arbrandes has joined #openstack-ansible18:10
mnaserHey cloudnull quick question18:21
mnaserAre bind mounts done differently with nspawn?18:22
mnaserhttp://logs.openstack.org/33/608433/8/check/openstack-ansible-deploy-aio_nspawn-centos-7/7e7b76b/logs/openstack/aio1_glance_container-0f1deaf7/glance/glance-api.log.txt.gz18:22
mnaserActually nevermind. This is not /var/log but /var/lib18:22
mnaserI wonder why it’s an issue in nspawn but not lxc18:23
cloudnullwhats the issue?18:24
mnaserhttps://www.irccloud.com/pastebin/dSMqSC0418:25
mnasercloudnull: nspawn fails in tempest upload image because glance can’t go18:25
mnaserUp18:25
mnaserBecause it somehow can’t write to /var/lib/glance/cache18:25
mnaserSomehow that folder already exists?!18:26
mnaserhttp://logs.openstack.org/33/608433/8/check/openstack-ansible-deploy-aio_nspawn-centos-7/7e7b76b/logs/ara-report/result/837db9b8-3534-4265-9505-0a771ae84a7e/18:26
mnaserBut that’s the first task of glance so I’m struggling to understand how that folder exists18:26
mnaserUnless somehow when we create the container it’s getting installed?18:27
cloudnullthat's peculiar18:28
* cloudnull reading the logs 18:28
cloudnullI have nspawn running on my local lab here however the glance store is on NFS18:29
cloudnullare there tasks in the glance role / playbook that reload the container ?18:29
cloudnullmaybe its not getting the correct config initially ?18:29
mnasercloudnull: well digging deeper it seems that /var/lib/glance somehow already exists (and with different permissions I assume)18:30
mnaserAnd so that’s why things don’t work properly because when Ansible creates the user it notices it’s already there18:31
*** DanyC has quit IRC18:32
*** DanyC has joined #openstack-ansible18:33
mnaserSomething at some point creates it before. I’m checking this on mobile so I’ll try to look deeepr when I have my laptop ahead of me18:33
cloudnullif we could pull in the /etc/systemd/nspawn and /etc/systemd/system/$container_name.service files we could inspect whats going on there.18:33
*** shardy has quit IRC18:34
*** ThiagoCMC has joined #openstack-ansible18:35
cloudnulland yes, ansible is saying that those dirs already exist18:35
cloudnullhttp://logs.openstack.org/33/608433/8/check/openstack-ansible-deploy-aio_nspawn-centos-7/7e7b76b/logs/openstack/ansible-logging/setup-openstack.log.txt.gz#_2018-11-21_17_13_17_26418:35
cloudnullso maybe something in the DVSM image?18:36
*** shardy has joined #openstack-ansible18:36
*** DanyC has quit IRC18:37
cloudnullthis is interesting though http://logs.openstack.org/33/608433/8/check/openstack-ansible-deploy-aio_nspawn-centos-7/7e7b76b/logs/openstack/ansible-logging/setup-openstack.log.txt.gz#_2018-11-21_17_15_42_96618:38
cloudnullhttps://pasted.tech/pastes/fe5e91ac58d13d2e7a8474f275c154f1c9045eaa.raw18:39
*** strattao has quit IRC18:42
cloudnullhttps://pasted.tech/pastes/7cd117eb8e73828cc85eea6007669851935fe76b - this is all very suspect.18:45
* cloudnull goes to make an AIO 18:45
cloudnullalso looks like we need to change default_store to default_backend18:47
*** strattao has joined #openstack-ansible18:50
ThiagoCMCThis isn't an OpenStack Ansible question but, I'm curious, currently, there is "Nova Compute with LXD", but, what about "Nova Compute with nspawn", will it come someday?18:52
*** ahosam has joined #openstack-ansible18:53
cloudnullThiagoCMC it could come one day, though idk anyone working on that18:53
ThiagoCMCOk!   =)18:53
cloudnullI think the closest thing to that is lxd or zun18:53
cloudnullwe have nova-lxd already, and we have a new role for zun18:53
cloudnullthough it needs folks to use and figure out the rough parts18:53
ThiagoCMCNice! I started to use nspawn a few weeks ago and I really like it! It's so simple.   ^_^18:54
* cloudnull made the zun role during the vancouver summit 18:54
ThiagoCMC:-D18:54
ThiagoCMCI mean, I'm using nspawn not with OSA, just to replace my own Ubuntu KVM guests in my Ubuntu desktop PC, it's awesome!18:54
ThiagoCMC=)18:54
cloudnull++ I agree. Im a fan of the nspawn methods18:54
* cloudnull uses nspawn for all my workstation tools and services 18:56
*** shardy has quit IRC18:56
*** DanyC has joined #openstack-ansible18:57
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Switch to www_authenticate_uri instead of auth_uri  https://review.openstack.org/61589618:59
*** ThiagoCMC has quit IRC19:00
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_hosts master: Change ssh variable in Ubuntu and remove masks  https://review.openstack.org/61933919:01
*** DanyC has quit IRC19:02
cloudnullany cores around want to give this a review https://review.openstack.org/#/c/607811/19:07
*** mmercer has joined #openstack-ansible19:07
*** dcdamien has joined #openstack-ansible19:08
jrossercloudnull: remember there’s still a bit of a mess in the swift service config.....19:09
cloudnulloh yes...19:10
jrosserThat patch is cool but it think it’s doing a load of duplicate either way19:11
cloudnullI have my local lab w/ swift here . let me update to the latest master and see where things less than perfect19:11
cloudnulldo you by chance remember the specific units that were busted?19:12
jrosserUnless I’m missing something there are a bunch of duplicate replicator services19:12
jrosserWith oh-so-similar but different service names19:12
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_cinder master: remove loop control when running include_role  https://review.openstack.org/60781419:12
*** klamath has quit IRC19:13
jrossercloudnull: and then in the journals for half of those services they are all busy because the sockets are already in use iirc19:13
jrosser*bust19:14
mnasercloudnull: ok so when we're running the db migration, it's creating the folder19:16
mnasercloudnull: aw i bet you it's this -- http://logs.openstack.org/33/608433/8/check/openstack-ansible-deploy-aio_nspawn-centos-7/7e7b76b/job-output.txt.gz#_2018-11-21_17_13_18_01408719:16
cloudnulljrosser https://pasted.tech/pastes/97021b92c88df4dac3a540e03c50aaf00680ff8519:18
cloudnullthis is what i have currently19:18
cloudnullwhich is osa master from a few weeks ago19:19
mnaserHA19:20
mnaserfound the bug19:20
mnaseri think.19:20
mnaserok no its just a misnamed task19:21
mnaserok so whats happening here is that `/var/lib/glance/cache` is being created by the task which does the bind mounts to the host19:23
mnaserin lxc, we don't create it inside the container, i guess the lxc config creates it automagically19:23
cloudnulljrosser the proxy server only has the one unit - https://pasted.tech/pastes/fc6492c07f19dfff2da778181ad927f4857c4f4419:23
cloudnullso with that Im going to go upgrade all the things and see if it goes a bit haywire19:24
cloudnullI also have an AIO spinning so i should have a greenfield env to compare with19:24
mnasercloudnull: do any of the nspawn roles take care of doing bind mounts?19:25
cloudnullmnaser so var/lib/glance/cache is being created by the service ?19:25
mnasercloudnull: nope its being created by a task19:25
mnaserhttp://logs.openstack.org/33/608433/8/check/openstack-ansible-deploy-aio_nspawn-centos-7/7e7b76b/job-output.txt.gz#_2018-11-21_17_13_18_01408719:25
mnaserthat task is not the right name, it should say (container) and not (physical host) but it creates a folder there19:25
mnaseri assume it creates it under root:root19:25
cloudnullthe bind-mounts in nspawn are created by the playbook in the integrated repo, same as lxc19:25
mnaserit doesnt look like we actually create folders in lxc19:26
mnaserbut we do in nspawn19:26
mnaser(inside the container)19:26
mnaseri.e. this task doesnt exist in lxc world: https://github.com/openstack/openstack-ansible/blob/master/playbooks/common-tasks/os-nspawn-container-setup.yml#L50-L5719:26
cloudnullah yes, in lxc the interior directories are created here https://github.com/openstack/openstack-ansible/blob/master/playbooks/common-tasks/os-lxc-container-setup.yml#L5219:28
cloudnulltheres no specific task in lxc that does it , its handled by the mount option19:29
mnaseri mean regardless it's still going to be an issue because we're creating things as root:root19:29
mnaserso maybe what we need to do is add /var/lib/glance to the task that creates folders?19:29
cloudnullso maybe the interious nspawn dirs need to be created more permissively ?19:29
cloudnull** interior19:30
mnasereither that or the roles should enforce permissions19:30
mnaseraka do chown glance:glance /var/lib/glance19:30
mnaserwhich feels more right imho19:30
mnaserrather than most probably making it world writeable19:31
cloudnull++ however I think its doing the the chown in the role already ?19:31
cloudnullor it should be19:31
*** hamzaachi has quit IRC19:31
mnaserlet me double check19:31
mnaserin terms of roles that do bind monuts19:31
*** hamzaachi has joined #openstack-ansible19:31
mnaserwe got ceph, galera, glance and gnocchi19:31
cloudnullhere https://github.com/openstack/openstack-ansible-os_glance/blob/master/tasks/glance_install.yml#L53-L7819:32
mnasercloudnull: i guess /cache is not in that list19:32
mnaserso /cache is root:root but /cache/{api,registry} is glance:glance19:32
cloudnullah...19:32
cloudnullthis would make some sense .19:32
mnaseri think adding "{{ glance_system_user_home }}/cache" to that list probably will get us our result19:33
cloudnull+119:33
* cloudnull happy to push the button if your still afk 19:33
* mnaser push fix19:33
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_glance master: Fix permissions on /var/lib/glance/cache  https://review.openstack.org/61934319:36
mnasercloudnull: ^ that should do19:36
* cloudnull does not have an lxc cloud i can go check atm 19:36
cloudnullhowever i would suspect the cache is 0777 ?19:36
openstackgerritMohammed Naser proposed openstack/openstack-ansible master: WIP: Enable passing nspawn jobs  https://review.openstack.org/60843319:36
mnaserwell if its glance:glance that'll be good enough19:37
mnaserthat's a depends on and we'll see how it goes19:37
cloudnull++19:37
mnaserthanks for help cloudnull19:37
* mnaser goes back to breaking thingz19:37
* cloudnull is curious what the perms are for that dir in a filebacked lxc environment 19:37
*** klamath has joined #openstack-ansible19:38
cloudnullmnaser nspawn will likely still fail in the gate until we correct - https://review.openstack.org/#/c/619339/ - for ubuntu that is19:39
jrossercloudnull: so this https://github.com/openstack/openstack-ansible-os_swift/blob/master/defaults/main.yml#L395 vs. https://github.com/openstack/openstack-ansible-os_swift/blob/master/defaults/main.yml#L44119:39
jrosserand a few similar for the other replicators19:39
cloudnullah . looks like we also need to deal with the journal change over there too ...19:41
* cloudnull is looking19:41
mnasercloudnull: want me to repush the change with bionic in there too to get some results if you have time to iterate?19:43
mnaseri just put it to centos cause i was just gonna focus on getting that up and running as it's the one im most comfortalbe with19:44
mnaserbut i did notice that o19:44
cloudnullnah. I'll build on top your patch19:44
cloudnulli'll make a dependent commit19:44
mnaserok cools19:44
cloudnullas to not impede cent progress19:44
mnaserthanks, im gonna be iterating over and over that one, it seemed to actually make really good progress19:45
mnaserlike i really dont think there's much more work to be done19:45
mnaser(famous last words)19:45
mnasereverything seemed to be running ok in terms of other services19:45
mnaseruhhh we're deploying rsyslog container in aio?19:46
mnaserhttp://logs.openstack.org/33/608433/8/check/openstack-ansible-deploy-aio_nspawn-centos-7/7e7b76b/logs/openstack/aio1_rsyslog_container-d3e30614/19:46
*** klamath has quit IRC19:46
*** mmercer has quit IRC19:48
*** klamath has joined #openstack-ansible19:49
cloudnullyes we are, though its not doing much these days20:03
*** cshen has joined #openstack-ansible20:05
*** mmercer has joined #openstack-ansible20:11
cshenis there any problem with zuul now? zuul check for my patch had timeout.20:12
*** ahosam has quit IRC20:24
openstackgerritMerged openstack/openstack-ansible stable/queens: Use loop_var name in when clause  https://review.openstack.org/61659620:25
cloudnullcshen there could be20:39
cloudnulljust comment `recheck` and it should retry, however, if it continues we might need to look into why20:39
*** d3n14l has joined #openstack-ansible20:42
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible stable/rocky: Add openstackclient bash completion  https://review.openstack.org/61935420:45
d3n14l@cloudnull @evrardjp @odyssey4me . We just migrated from pike to queens - neutron agents update and migrated to baremetal, but no snat namespaces get created, router can not communicate with outside world… any help appreciated.20:45
cloudnulld3n14l upgraded with the "run-upgrade.sh" script ?20:46
cloudnullare the agents on the infra nodes starting?20:46
cloudnullanything in the journal/logs indicating specific errors ?20:46
d3n14lcan not see errors in neutron logs. will check journl20:47
cloudnullalso the status of the neutron-agents, are they running ?20:49
cshencloudnull thanks, I'll try.20:49
*** hamzaachi has quit IRC20:50
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_heat stable/rocky: Switch to using public endpoint for URIs  https://review.openstack.org/61935520:50
d3n14l@cloudnull agents are running on baremetal lxc-containers are stopped.20:51
d3n14llooks good… suspect some neutron config regarding the br-provider … but can not put the finger on it.20:52
jrosserin this case do you have to make sure that eth12 (or equivalent) is present on the infra host in the same way as it would have been in the container?20:52
cloudnullI'd tail the logs / journal in one window and restart the agents in another.20:52
cloudnullmaybe something failing to initialize ?20:52
cloudnullalso what jrosser said :)20:53
jrosserbecasue the OSA stuff would have set up a bunch of particularly named interfaces on the old container eth11/12 etc and the config might be expecting to find those now on the host20:53
d3n14lneutron-openvswitch service log shows errors on restart… i will check what it is.21:00
cshencloudnull https://review.openstack.org/#/c/581248/10 did I comment 'recheck' correctly?21:01
cshenzull check is not restarted.21:01
jrossercshen: have a look here http://zuul.openstack.org/status21:02
jrosseryou can see the job running and even watch the console if you need to21:02
d3n14lErros were only due to restart :-/21:03
cloudnullcshen yes.21:04
cshenI got it, thanks.21:04
cloudnulld3n14l are your network hosts able to get back to the rabbitmq nodes and are they running ?21:05
cloudnullI've seen issues where the service looks like it starts but does nothing, which was caused by not being able to communicate with rabbit21:05
d3n14l@cloudnull no errors regarding rabbit also everything else seems to be running except snat namespaces.21:06
d3n14l@jrosser which config will expect the eth11 eth12 names exactly?21:06
jamesdentonanything interesting in the neutron l3-agent log file?21:07
d3n14lnope21:10
jamesdentoncan you hop into the utility container and perform an 'openstack network agent list'?21:11
jamesdentonit may be a matter of shuffling routers around21:11
jrosserd3n14l: well in the example linucbridge config eth12 is the interface given to neutron, but as you're doing OVS i'll leave you in the capable hands of jamesdenton :)21:13
jamesdentoneek21:15
d3n14l@jamesdenton @jrosser @cloudnull - our container_interface still is "eth12" and type is veth - but that matched the lxc container setup - what we need would be br-vlan with type bridge - I guess.21:15
d3n14lhttps://pastebin.com/Xvvbr8z721:16
d3n14lWe did not change that config when moving from lxc to baremetal.21:17
d3n14lWhat we did was: manually plugging the br-vlan into br-provider in the openvswitch.21:17
jamesdentondoes that mirror how the computes are configured?21:18
d3n14l yes21:20
jamesdentondo you also have an override configured for 'neutron_provider_networks' in say, user_variables.yml?21:21
d3n14lhttps://pastebin.com/66pFvt8A21:22
*** radeks_ has quit IRC21:22
d3n14lyes21:23
d3n14lneutron_provider_network override: https://pastebin.com/S58bHSLm21:24
jamesdentonso at this point, do you have any working vm traffic? Does it work out thru a distributed router on a compute? And only the snat namespace seems to be an issue? Are dhcp namespaces OK?21:24
d3n14lYes - despite: dhcp namespaces are there and dnsmasqs are listening - but they can not get data from their upstream because their gateway (the router) is missing its external ip (in the snat).21:25
d3n14lcommunication through floating ips on compute nodes is possible.21:26
d3n14lwith dvr21:26
jamesdentonk21:26
jamesdentoncan you post the output of 'openstack network agent list --router <router>'21:28
jamesdentonas well as ''openstack network agent list'21:31
d3n14lhttps://pastebin.com/BxWhugLH21:31
mnasercloudnull: we got beyond the glance stuff21:31
mnaserbut now stuck on tempest flavors.. #progress regardless :)21:31
d3n14lthere it is...21:31
jamesdentond3n14l yeah, it's still scheduled to the old agents21:31
jamesdentonso you should be able to do a 'openstack network agent remove router <agent> <router>' to unschedule, then 'add router' to schedule to a new baremetal agent21:32
mnaserbtw, can we get some love on https://review.openstack.org/#/c/613285/21:32
jamesdentonyou can prob do one at a time21:32
d3n14l@jamesdenton thx we will try it with one router and see what happens.21:34
cloudnullmnaser nice!21:34
jamesdentoncool. It may be possible to disable one of the old agents via the 'network agent set' command, unschedule, and see if neutron auto reschedules to a baremetal agent21:35
jamesdentoni can't recall21:35
d3n14lthe container agents are already disabled - no auto rescheduling.21:36
jamesdentonk21:37
d3n14lwhile a colleague tries this… how would I reschedule a lbaas :-)21:37
d3n14l??21:37
d3n14lWe still got one of them on the lxc-containers.21:38
d3n14lthe only one.21:38
jamesdentonhmm21:38
jamesdentonthis is lbaasv2 i assume?21:39
jamesdentoni don't think there is an API hook for that. There is an auto failover mechanism, though. http://www.nirmagnezi.com/neutron-lbaas-ha-part-i-auto-reschedule-loadbalancers/21:41
*** ahosam has joined #openstack-ansible21:42
d3n14l@jamesdenton - we added one of the baremetal agents to the router and restartet the baremetal agent - snat namespace comes up after a while and vms get dns and outbound traffic back.21:44
d3n14lthank you very much!21:44
d3n14lWe will try to work it up from here.21:44
d3n14lregarding the lbaas we will hav a look tomorrow21:44
jamesdentonthat's very good news21:44
jamesdentonwe'll want to update the upgrade docs to reflect that behavior21:45
d3n14lthat would be … ahmm… awesome :-D21:45
jamesdentondo you have the URL you followed?21:46
d3n14l@cshen will then also have this info when his upgrade will finally take place :-) Good evening cshen ;-)21:46
d3n14l@jamesdenton need to look it up in our own docs - colleague planned and executed the upgrade - I just joined for firefighting.21:47
cshend3n14l good luck :-)21:48
d3n14lthanks!21:48
jamesdentonfair enough21:49
jamesdentonkeep us posted!21:49
d3n14l@jamesdenton we followed https://docs.openstack.org/openstack-ansible/queens/admin/upgrades/major-upgrades.html and the upgrade notes of the queens release notes21:52
d3n14lWas that what you meant?21:52
jamesdentonit is21:53
jamesdentonI'll see about updating those release notes to reflect an OVS deploy. a little trickier, as you saw21:54
jamesdentonDo you mind filing a bug?21:55
d3n14lSure - if it can wait until tomorrow :-D it is 10:55 p.m. here.21:55
jamesdentonoh of course. i probably won't look at it until Monday :D21:56
d3n14lNo problem.21:56
*** eumel8 has quit IRC21:59
jrosseroh man all these setup.py are unhelpful22:15
jrosseri just replaced my make binary with a shell script that calls the original with --jobs=<lots> and it speeds up all the compiling hugely22:15
jrossertheres no standard way to pass those args22:16
*** priteau has quit IRC22:16
mnaserjrosser: i assume this is a huge speed up for arm22:16
jrosserit was just sat there with one core stuck at 100%22:17
mnaserjrosser: !!22:17
mnaserhttps://stackoverflow.com/a/3259853322:17
mnaserignore the first part22:17
mnaserthe second part22:17
jrossertheres no wheels for a load of stuff so it has to do really loads of work just to get through boostrap_ansible22:17
jrosserhahahah22:17
jrossermnaser: this also shows that with that arm image we need to add build-essentials to the packages the boostrap installs, as you need a toolchain in this situation22:19
d3n14l@jamesdenton  as we did not had auto rescheduling of lbaas turned on (a point that goes on our todo list - nudge @cshen) we fell back to changing the hosting agent in the database and restartet the agents. Worked perfectly.22:43
d3n14lExpect the bug report tomorrow and again - we owe you a beer! Thanks a lot!22:43
*** d3n14l has left #openstack-ansible22:48
jamesdentoni work for beer. cheers!23:07
*** ThiagoCMC has joined #openstack-ansible23:09
*** ahosam has quit IRC23:19
*** strattao has quit IRC23:39
*** lbragstad is now known as lbragstad_turkey23:46
*** lbragstad_turkey has quit IRC23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!