Thursday, 2018-12-20

*** macza_ has quit IRC00:22
*** ansmith has joined #openstack-ansible00:30
*** ansmith has quit IRC00:36
*** tosky has quit IRC00:43
*** macza has joined #openstack-ansible01:20
*** macza has joined #openstack-ansible01:21
*** trident has quit IRC01:36
*** markvoelker has quit IRC01:50
*** hwoarang has quit IRC01:54
*** hwoarang has joined #openstack-ansible01:56
*** gyee has quit IRC02:00
*** DanyC has joined #openstack-ansible02:12
*** DanyC has quit IRC02:16
*** Bhujay has joined #openstack-ansible02:40
*** Bhujay has quit IRC02:47
*** Bhujay has joined #openstack-ansible02:47
*** Bhujay has quit IRC02:48
*** Bhujay has joined #openstack-ansible02:49
*** Bhujay has quit IRC02:50
*** Bhujay has joined #openstack-ansible02:50
*** Bhujay has quit IRC02:51
*** Bhujay has joined #openstack-ansible02:52
*** Bhujay has quit IRC02:53
*** Bhujay has joined #openstack-ansible02:53
*** Bhujay has joined #openstack-ansible02:55
*** Bhujay has quit IRC02:56
*** Bhujay has joined #openstack-ansible02:56
*** Bhujay has quit IRC02:57
*** Bhujay has joined #openstack-ansible02:58
*** trident has joined #openstack-ansible02:58
*** Bhujay has quit IRC02:59
*** Bhujay has joined #openstack-ansible02:59
*** Bhujay has quit IRC03:00
*** Bhujay has joined #openstack-ansible03:01
*** Bhujay has quit IRC03:02
*** Bhujay has joined #openstack-ansible03:02
*** Bhujay has quit IRC03:03
*** Bhujay has joined #openstack-ansible03:04
*** Bhujay has quit IRC03:05
*** Bhujay has joined #openstack-ansible03:05
*** Bhujay has quit IRC03:06
*** Bhujay has joined #openstack-ansible03:07
*** Bhujay has quit IRC03:08
*** Bhujay has joined #openstack-ansible03:08
*** Bhujay has quit IRC03:09
*** Bhujay has joined #openstack-ansible03:10
*** nurdie has joined #openstack-ansible03:12
*** Bhujay has quit IRC03:15
*** hwoarang has quit IRC03:18
*** hwoarang has joined #openstack-ansible03:20
*** Bhujay has joined #openstack-ansible03:41
*** nurdie has quit IRC03:43
*** nurdie has joined #openstack-ansible03:43
*** Bhujay has quit IRC03:46
*** nurdie has quit IRC03:47
*** Bhujay has joined #openstack-ansible05:02
*** macza_ has joined #openstack-ansible05:03
*** macza has quit IRC05:06
*** shyamb has joined #openstack-ansible05:34
*** chkumar|vanished is now known as chandankumare05:42
*** chandankumare is now known as chandankumar05:42
*** nurdie has joined #openstack-ansible05:54
*** DanyC has joined #openstack-ansible06:12
*** DanyC has quit IRC06:16
*** mgagne has quit IRC06:33
*** mgagne has joined #openstack-ansible06:40
openstackgerritMerged openstack/openstack-ansible-ops master: Add local facts for template creations  https://review.openstack.org/62641106:46
*** hwoarang has quit IRC06:47
*** hwoarang has joined #openstack-ansible06:51
*** nurdie has quit IRC06:56
*** nurdie has joined #openstack-ansible06:56
*** nurdie has quit IRC07:01
*** shyamb has quit IRC07:12
*** mathlin has joined #openstack-ansible07:12
*** Bhujay has quit IRC07:13
*** DanyC has joined #openstack-ansible07:20
*** Bhujay has joined #openstack-ansible07:23
*** Bhujay has quit IRC07:24
*** shyamb has joined #openstack-ansible07:24
*** Bhujay has joined #openstack-ansible07:24
*** pcaruana has joined #openstack-ansible07:25
*** Bhujay has quit IRC07:26
*** Bhujay has joined #openstack-ansible07:26
*** Bhujay has quit IRC07:27
*** Bhujay has joined #openstack-ansible07:27
*** Bhujay has quit IRC07:29
*** Bhujay has joined #openstack-ansible07:29
*** Bhujay has quit IRC07:30
*** shyamb has quit IRC07:30
*** Bhujay has joined #openstack-ansible07:30
*** Bhujay has quit IRC07:32
*** Bhujay has joined #openstack-ansible07:32
*** Bhujay has quit IRC07:33
*** Bhujay has joined #openstack-ansible07:33
*** shyamb has joined #openstack-ansible07:34
*** Bhujay has quit IRC07:35
*** Bhujay has joined #openstack-ansible07:35
*** Bhujay has quit IRC07:36
*** Bhujay has joined #openstack-ansible07:36
*** Bhujay has quit IRC07:38
*** Bhujay has joined #openstack-ansible07:38
*** Bhujay has quit IRC07:39
*** Bhujay has joined #openstack-ansible07:39
*** Bhujay has quit IRC07:41
*** Bhujay has joined #openstack-ansible07:41
*** Bhujay has quit IRC07:42
*** Bhujay has joined #openstack-ansible07:42
*** Bhujay has quit IRC07:44
*** Bhujay has joined #openstack-ansible07:44
*** Bhujay has quit IRC07:45
*** Bhujay has joined #openstack-ansible07:45
*** Bhujay has quit IRC07:47
*** Bhujay has joined #openstack-ansible07:47
*** Bhujay has quit IRC07:48
*** Bhujay has joined #openstack-ansible07:48
*** gkadam has joined #openstack-ansible07:49
*** Bhujay has quit IRC07:50
*** Bhujay has joined #openstack-ansible07:50
*** Bhujay has quit IRC07:51
*** Bhujay has joined #openstack-ansible07:51
*** Bhujay has quit IRC07:53
*** Bhujay has joined #openstack-ansible07:53
*** Bhujay has quit IRC07:54
*** Bhujay has joined #openstack-ansible07:54
*** Bhujay has quit IRC07:56
*** Bhujay has joined #openstack-ansible07:56
*** Bhujay has quit IRC07:57
*** Bhujay has joined #openstack-ansible07:57
*** Bhujay has quit IRC07:59
*** Bhujay has joined #openstack-ansible07:59
*** macza has joined #openstack-ansible07:59
*** Bhujay has quit IRC08:00
*** Bhujay has joined #openstack-ansible08:00
*** Bhujay has joined #openstack-ansible08:02
*** Bhujay has quit IRC08:03
*** Bhujay has joined #openstack-ansible08:03
*** DanyC has quit IRC08:04
*** macza has quit IRC08:04
*** Bhujay has quit IRC08:05
*** Bhujay has joined #openstack-ansible08:05
fnpanicgood morning08:05
*** shyamb has quit IRC08:06
*** Bhujay has quit IRC08:06
*** kopecmartin|off is now known as kopecmartin08:06
*** Bhujay has joined #openstack-ansible08:07
*** hamzaachi has joined #openstack-ansible08:19
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_hosts master: Update the nspawn unit services  https://review.openstack.org/62651308:20
*** tosky has joined #openstack-ansible08:24
*** thuydang has joined #openstack-ansible08:39
*** thuydang has quit IRC08:43
*** Bhujay has quit IRC08:46
*** nurdie has joined #openstack-ansible08:55
*** markvoelker has joined #openstack-ansible08:56
*** nurdie has quit IRC09:00
admin0\o09:05
*** shyamb has joined #openstack-ansible09:09
*** DanyC has joined #openstack-ansible09:13
*** DanyC has quit IRC09:14
*** DanyC has joined #openstack-ansible09:15
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_container_create master: Update the systemd-nspawn template for legacy systemd environments  https://review.openstack.org/62652509:17
*** shardy has joined #openstack-ansible09:24
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: WIP: Enable passing nspawn jobs  https://review.openstack.org/60843309:30
chandankumarcloudnull: jrosser Hello09:31
*** thuydang has joined #openstack-ansible09:31
chandankumarcloudnull: jrosser does libxml2-devel suse issue got fixed? http://logs.openstack.org/92/626092/1/check/openstack-ansible-functional-opensuse-423/f9d5c24/job-output.txt.gz#_2018-12-20_06_11_49_53979009:31
chandankumarcloudnull: I am seeing one more issue http://logs.openstack.org/28/625828/3/check/openstack-ansible-functional-centos-7/aa8d5c4/job-output.txt.gz#_2018-12-20_06_29_15_74750209:32
chandankumarcloudnull: faailing at os_neutron check fo available offline migration09:32
chandankumarplease have a look, thanks :-)09:32
*** shyamb has quit IRC09:42
*** thuydang has quit IRC09:45
cloudnullo/ chandankumar idk if its fixed yet , there was work with the upstream suse community to get it resolved, however idk where that is at the moment. -cc evrardjp09:48
*** shyamb has joined #openstack-ansible09:52
*** mkuf_ has joined #openstack-ansible09:56
*** mkuf has quit IRC09:59
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_hosts master: Update the nspawn unit services  https://review.openstack.org/62651309:59
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_hosts master: Update the nspawn unit services  https://review.openstack.org/62651310:12
*** Bhujay has joined #openstack-ansible10:23
chandankumarcloudnull: ack thanks :-)10:24
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_container_create master: Update the systemd-nspawn template for legacy systemd environments  https://review.openstack.org/62652510:25
*** thuydang has joined #openstack-ansible10:45
*** mkuf has joined #openstack-ansible10:46
*** mkuf_ has quit IRC10:49
*** shyamb has quit IRC11:02
*** kopecmartin is now known as kopecmartin|off11:02
odyssey4meo/ folks, how go things?11:03
*** shyamb has joined #openstack-ansible11:04
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_container_create master: Update the systemd-nspawn template for legacy systemd environments  https://review.openstack.org/62652511:10
jamesdentonlooks like cloudnull is still adjusting to timezones11:12
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Enable passing nspawn jobs  https://review.openstack.org/60843311:13
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_hosts master: Update the nspawn unit services  https://review.openstack.org/62651311:22
odyssey4mechandankumar that neutron failure looks like something may have merged upstream which has broken things11:31
*** ansmith has joined #openstack-ansible11:32
odyssey4mechandankumar hmm, maybe not - that task may not have something, but it's odd that it's only showing up now11:34
odyssey4menope, it seems that something in the interface has changed - the return code was 1, but the message that used to be there wasn't11:39
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_container_create master: Update the systemd-nspawn template for legacy systemd environments  https://review.openstack.org/62652511:39
odyssey4mehttps://github.com/openstack/openstack-ansible-os_neutron/blob/master/tasks/neutron_db_setup.yml#L59-L6911:39
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_container_create master: Update the systemd-nspawn template for legacy systemd environments  https://review.openstack.org/62652511:40
*** dave-mccowan has quit IRC11:42
*** shyamb has quit IRC11:46
*** udesale has joined #openstack-ansible11:56
odyssey4meevrardjp any news on resolving that package issue for suse? otherwise it looks like we'll have to making it non-voting I guess, given it's been two days11:59
odyssey4mecloudnull or jrosser you around? I could do with a review for https://review.openstack.org/#/c/625929/12:02
*** ansmith has quit IRC12:04
*** udesale has quit IRC12:11
*** udesale has joined #openstack-ansible12:12
*** udesale has quit IRC12:15
*** udesale has joined #openstack-ansible12:16
*** udesale has quit IRC12:21
*** udesale has joined #openstack-ansible12:21
jamesdentonodyssey4me what is the process for adding upgrade notes and deprecating vars or processes in upcoming releases?12:25
jamesdentonodyssey4me Also, i will work on testing your neutron migration patches today12:27
odyssey4mejamesdenton great, thanks :)12:29
odyssey4mejamesdenton if OSA vars are deprecated/removed/changed - add a release note with reno12:30
jamesdentonis there an example of that?12:30
odyssey4mejamesdenton https://docs.openstack.org/openstack-ansible/rocky/contributor/code-rules.html#release-notes12:31
jamesdentonperfect, i'll take it from there. thank you12:31
odyssey4mehere's an example from one recently merged: https://github.com/openstack/openstack-ansible-rabbitmq_server/blob/83affc627fd2132bb5a65c4b1f5a07a9f95a7998/releasenotes/notes/rabbitmq-gpg-keys-042a47164265ea40.yaml12:31
jamesdentonahh great, that's helpful12:34
jamesdentonand just push the note with the rest of the commit?12:34
odyssey4mejamesdenton yep - reno will generate the hash for you, those have to be unique so it's best to let it do it for you12:35
odyssey4methen just wipe out the sections from the releasenote which you aren't using and poopulate the content - then just add it to the patch making the changes12:36
jamesdentonk12:37
*** mkuf_ has joined #openstack-ansible12:42
openstackgerritMerged openstack/openstack-ansible stable/rocky: [DOC] fix some typos and fix some stuff  https://review.openstack.org/62589712:43
*** mkuf has quit IRC12:45
odyssey4mechandankumar FYI I've proposed https://review.openstack.org/626565 to resolve the neutron issue.12:47
*** cshen has joined #openstack-ansible12:48
odyssey4mefor now, though, while we wait for that - I'll submit patches to pin the SHA we use to something that works12:48
*** udesale has quit IRC12:49
*** udesale has joined #openstack-ansible12:50
*** udesale has quit IRC12:52
*** udesale has joined #openstack-ansible12:52
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Pin neutron SHA until migrations output is fixed  https://review.openstack.org/62656712:53
*** udesale has quit IRC12:53
*** udesale has joined #openstack-ansible12:53
*** udesale has quit IRC12:54
*** udesale has joined #openstack-ansible12:55
chandankumarodyssey4me: thanks :-)12:56
chandankumarodyssey4me: can we propose one of the openstack-ansible jobs against neutron projects to find issue early?12:56
odyssey4mechandankumar not just yet - I'm busy reworking our jobs to make that possible12:56
*** markvoelker has quit IRC13:12
openstackgerritMerged openstack/openstack-ansible-galera_server master: When upgrading, only stop the service if it exists  https://review.openstack.org/62592913:13
*** fnpanic has quit IRC13:13
*** rodolof has quit IRC13:20
*** pmannidi has joined #openstack-ansible13:20
*** rodolof has joined #openstack-ansible13:22
*** mkuf has joined #openstack-ansible13:24
*** gkadam has quit IRC13:25
*** ansmith has joined #openstack-ansible13:26
*** mkuf_ has quit IRC13:27
*** Bhujay has quit IRC13:31
*** cshen has quit IRC13:34
*** fnpanic has joined #openstack-ansible13:37
*** cshen has joined #openstack-ansible13:55
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Clean-up and simplify the major upgrade  https://review.openstack.org/62477313:58
*** shyamb has joined #openstack-ansible13:58
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Clean-up and simplify the major upgrade  https://review.openstack.org/62477313:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Clean-up and simplify the major upgrade  https://review.openstack.org/62477314:01
*** pmannidi is now known as pmannidi_114:02
*** udesale has quit IRC14:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server stable/queens: Correct failure when stopping cluster state is ignored  https://review.openstack.org/62658614:05
*** udesale has joined #openstack-ansible14:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server stable/rocky: Correct failure when stopping cluster state is ignored  https://review.openstack.org/62658714:06
*** mathlin has quit IRC14:16
*** pmannidi_1 is now known as pmannidi14:17
*** pmannidi is now known as pmannidi_114:17
*** pmannidi_1 is now known as pmannidi14:21
*** pmannidi is now known as pmannidi_114:21
openstackgerritFrank Kloeker proposed openstack/openstack-ansible-haproxy_server master: Add feature Letsencrypt SSL certification  https://review.openstack.org/58677414:28
*** shyamb has quit IRC14:32
*** jamesdenton has quit IRC14:45
*** jamesden_ has joined #openstack-ansible14:45
*** shyamb has joined #openstack-ansible14:49
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Add automated migration of neutron agents to bare metal  https://review.openstack.org/62533114:52
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Add automated migration of neutron agents to bare metal  https://review.openstack.org/62533114:53
openstackgerritPaul Martin proposed openstack/openstack-ansible-os_tempest master: Configuration drives don't appear to work on aarch64+kvm.  https://review.openstack.org/62659214:55
openstackgerritPaul Martin proposed openstack/openstack-ansible master: Spice console doesn't work on aarch64+kvm.  https://review.openstack.org/62659314:57
*** cshen has quit IRC14:57
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Add automated migration of neutron agents to bare metal  https://review.openstack.org/62533114:57
*** mkuf_ has joined #openstack-ansible14:58
*** jackivanov has joined #openstack-ansible14:58
odyssey4mecloudnull sorry - did a minor tweak there, no more changes incoming - jamesden_ it worked for me, although I didn't test whether connectivity was maintained - only that the new agents were implemented, then the old ones removed14:58
cloudnull LGTM - very nicely done btw. great seeing that all being cleaned up !14:59
openstackgerritJames Denton proposed openstack/openstack-ansible-plugins master: Update provider networks plugin to support multiple network mappings  https://review.openstack.org/62659415:00
*** jamesden_ is now known as jamesdenton15:00
jamesdentonodyssey4me I'm deploying MNAIO now, but it's slow going15:00
*** mkuf has quit IRC15:01
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Enable passing nspawn jobs  https://review.openstack.org/60843315:09
*** shyamb has quit IRC15:10
*** cshen has joined #openstack-ansible15:12
*** kaiokmo has quit IRC15:16
cloudnullmnaser ^  with those couple of updates, nspwan with cent7 seems to be humming right along.15:25
cloudnullguilhermesp, mnaser if you all have a moment to give that spin it'd be appreciated.15:25
mnasercloudnull: woohoooo15:27
mnaseri will have a look15:27
mnaseri can take on splitting that into a few digestable bits (or we can keep it as one bigger patch too)15:27
cloudnullwhatever's easiest :)15:28
cloudnullI have it all running an AIO, on my local test cluster . i started it all with `./scripts/gate-check-commit.sh aio_nspawn`15:30
cloudnullhttps://i.snag.gy/ANYcIT.jpg15:30
cloudnullmight still run into "some other failure" however there doesn't seem to be any connectivity issues and the playbooks have been running fine on this latest iteration.15:31
*** evrardjp_ has joined #openstack-ansible15:31
*** nurdie has joined #openstack-ansible15:32
*** nurdie_ has joined #openstack-ansible15:33
odyssey4mecloudnull is that all including the tempest tests?15:36
cloudnullits not run tempest yet.15:36
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: Provide support for network interface mappings without override  https://review.openstack.org/62362015:37
*** evrardjp has quit IRC15:37
*** nurdie has quit IRC15:37
jamesdenton^^ that may be ambitious15:37
cloudnullooooo. nice!15:38
openstackgerritJames Denton proposed openstack/openstack-ansible-plugins master: Update provider networks plugin to support multiple network mappings  https://review.openstack.org/62659415:41
*** evrardjp has joined #openstack-ansible15:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Set OpenSUSE jobs to non-voting  https://review.openstack.org/62660115:54
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Revert "Set OpenSUSE jobs to non-voting"  https://review.openstack.org/62660215:55
odyssey4memnaser cloudnull evrardjp to get us unblocked https://review.openstack.org/62660115:56
cloudnulldone15:56
*** nurdie_ has quit IRC16:00
*** nurdie has joined #openstack-ansible16:01
*** thuydang has quit IRC16:03
openstackgerritMerged openstack/openstack-ansible-galera_server stable/rocky: Correct failure when stopping cluster state is ignored  https://review.openstack.org/62658716:04
openstackgerritMerged openstack/openstack-ansible-nspawn_container_create master: Update the systemd-nspawn template for legacy systemd environments  https://review.openstack.org/62652516:05
jrosserodyssey4me: I’m around-ish ping me when that unblocking patch passes for more votes16:06
odyssey4mejrosser yeah, I think it'll need the patch to neutron to merge first - that's in the gate, but will take some time still16:07
openstackgerritMerged openstack/openstack-ansible master: Set Keepalived script_user to root  https://review.openstack.org/62112516:08
*** udesale has quit IRC16:11
CeeMacafternoon channel16:17
CeeMaci dont suppose there happens to be any linux/lxc network experts in the house?16:18
openstackgerritMerged openstack/openstack-ansible-nspawn_container_create master: Add bugs url link to README  https://review.openstack.org/62287316:25
*** mkuf_ has quit IRC16:27
*** mkuf_ has joined #openstack-ansible16:27
*** mkuf has joined #openstack-ansible16:28
*** mkuf_ has quit IRC16:32
*** DanyC has quit IRC16:34
*** macza has joined #openstack-ansible16:34
*** DanyC has joined #openstack-ansible16:35
cloudnullCeeMac - im not an "expert" but happy to help. whats up ?16:35
*** DanyC has quit IRC16:35
*** gyee has joined #openstack-ansible16:36
CeeMachi cloudnull16:37
guilhermespnice cloudnull I will take a look soon :D16:38
CeeMaci'm having some issues with arp between lxc containers and across hosts16:38
CeeMacas far as I can see, everything should be fine. Its obviously not though16:38
CeeMacso. there are 2 hosts running lxc, one for the non-os infrastructure roles, the other for the os-controller roles16:39
CeeMacsetup-hosts ran fine16:39
CeeMacsetup-infrastructure fails on utility container with "no route to host"16:40
CeeMacI can ping the utility container from both hosts16:40
CeeMacI can ping each host from the utility container16:40
CeeMacif i try and ping the vip of the haproxy, or the default gateway, i get nothing16:40
CeeMaci've installed net-tools in the container and the arp table is not being populated for these addresses for some reason16:41
CeeMacI've double/triple checked the interfaces configuration for bond/bridge/vlan config on the hosts16:41
CeeMacthe container veth is attached to the bridge16:41
CeeMacif i run tcpdump against the bond i can see the vlan tags16:42
CeeMacface->wall16:42
CeeMachelp?16:42
CeeMacoh, and as far as I can tell, IPtables is forwarding with accept by default on the hosts16:43
CeeMacthe only things i can think ive done different on these hosts than my last build is upgrade the kernel, not sure if that would make a difference16:44
jrosserThis feels like it might be a mismatch between a netmask and the actual addresses in the subnet16:46
jrosserI would look at the routing tables to try to understand the “no route to host” error first16:47
CeeMac"no route to host" is a result of destination host unreachable i thinkg16:47
CeeMacthey're on the same lan, so wouldn't use route lookup16:48
jrosserThe routing table while say which subnets live down each interface16:49
CeeMacdefault gateway is configured with /24, br-mgmt is configured with /24 on host, container has /24 showing in ifconfig16:49
jrosserAnd this is also matching the network definitions in your openstack_user_config? They are /22 in the examples?16:50
CeeMacsame in routing tables, just double checked16:50
CeeMacyes, just double-checked16:50
*** cshen has quit IRC16:51
CeeMac /2416:51
CeeMacfor both container network and haproxy_keepalived_internal_vip_cidr16:51
CeeMacinterestingly, the arp table on the router that hosts the DG and on the hosts themselves have the arp table populated for the container address16:52
CeeMacwhich makes sense, given they can both ping it.  So, its responding to "who has" arp requests16:53
CeeMacso either its own "who has" requests are getting lost, or the "i have" replies are getting lost16:54
*** rodolof has quit IRC16:55
*** DanyC has joined #openstack-ansible16:58
CeeMacok, now i know i've gone insane16:58
CeeMacinstalled tcpdump in the utility container, set it away, went to ping to/from the container in another session and its working>!16:59
CeeMacand I can now ping from the router too16:59
CeeMacfml16:59
CeeMacoh well, thanks jrosser, maybe you have the technicial effect :)16:59
CeeMac*technician16:59
*** rodolof has joined #openstack-ansible17:01
CeeMachmm, actually, maybe it was an arp timeout17:01
jrosserIs this all bare metal?17:02
CeeMacvmware17:02
jrosserAaaahhhhhh17:02
CeeMaci think actually, it was me17:02
jrosserjamesdenton: ^ can you advise here?17:02
CeeMaci had fudged the interface config on the controller node, fixed it and rolled back to snapshot, then rebooted that server17:02
*** DanyC has quit IRC17:02
CeeMacbut didn't reboot the inf node17:03
CeeMacso it probably had a cached incomplete arp entry17:03
CeeMacmaybe17:03
jrosserSo up and running now?17:03
CeeMaci'm rolling back again and going to reboot both and see if it still works17:03
CeeMacyeah17:03
CeeMacmental17:03
jrosserCool :)17:03
CeeMaci had issues with the vmware config on the portgroup for vlan trunk initially which drove me mad for days17:03
CeeMacbut i resolved that17:04
jrosserThere are folks here running labs on esxi so hopefully you can get some specific pointers if needed17:04
CeeMaccool17:05
CeeMacin an semirelated note17:05
CeeMachow does one get around the haproxy not starting on boot issue, i'm sure i've seen a forum post about it but can't find it again17:06
*** priteau has joined #openstack-ansible17:10
CeeMacso, the problem comes back after a reboot17:13
*** cshen has joined #openstack-ansible17:13
jamesdentonjrosser CeeMac everything good now?17:13
cloudnullCeeMac sorry, was getting a bite.17:13
cloudnulllooks like jrosser got you going?17:13
*** electrofelix has quit IRC17:14
CeeMacjamesdenton, i thought so, but its not again17:14
CeeMaccloudnull, no problem, feel free to jump in!17:14
jrosserjamesdenton: any tips for VMware?17:14
cloudnullis this a vmware issue ?17:16
cloudnullspatel did a bunch of vmware things17:16
jamesdentonOn ESXi, you'll want to enable 'Promiscuous Mode and MAC Address Changes' on the virtual switch. I think i enabled forged transmits, too.17:17
cloudnullI remember he had to do some config to allow spoofing ?17:17
cloudnullwhat jamesdenton said17:17
cloudnull:)17:17
*** thuydang has joined #openstack-ansible17:17
jamesdentonand when you create the port groups, those values should be inherited.17:17
CeeMacjamesdenton, yep, all 3 options set to accept (i'd forgotten to do promisc initially a few days ago)17:18
*** rodolof has quit IRC17:18
*** cshen has quit IRC17:18
CeeMacthe vlan is passing up ok and I can ping the container from the other host br-mgmt address17:18
CeeMacwhich i couldn't when the dvport config was incorrect17:19
jamesdentonand i also have a port group named TRUNK associated with the vSwitch, with VLAN ID set to 4095. Allows me to tag in the VM and interfaces with VLANs on physnet17:19
jamesdentonwhat is the issue you're seeing now?17:19
CeeMaci can ping the container from the 2 hosts17:21
CeeMaci can ping the 2 hosts from the container17:21
CeeMaci cant ping the container from the router, but i get an arp entry with the correct mac17:21
CeeMaci cant ping the router from the container and I don't get an arp entry17:22
CeeMacso arps aren't working 100% from the container17:22
CeeMacexcept eventually they did while i was troubleshooting earlier17:22
CeeMacafter i'd installed net-tools and tcpdump in the container to try and capture arp traffic17:22
openstackgerritMerged openstack/openstack-ansible-tests master: Set OpenSUSE jobs to non-voting  https://review.openstack.org/62660117:23
jamesdentonand the router is in the same network as the containers? i assume this is a typical deploy, right? eth0 on a 10dot?17:23
*** cshen has joined #openstack-ansible17:24
CeeMacyeah, all on the same vlan17:24
jamesdentonAnd you're sure there's no kind of arp conflict? Like, one of the containers didn't grab the IP of the router?17:25
*** rodolof has joined #openstack-ansible17:26
jamesdentonis this a single container behaving this way? Or all containers?17:27
CeeMaclet me double check again17:27
CeeMacok, and now its working again17:28
CeeMacin that container, but not in a different one17:28
jamesdentongrab the MAC that's showing up in the arp cache17:28
CeeMacon?17:28
jamesdentonin the container.17:28
jamesdentonit should be the router's mac, right?17:29
CeeMacshould be17:29
CeeMacits the same mac as is showing in the arp table of the hosts17:30
CeeMacits an irb on the switch, just trying to remember how to track the mac of an irb17:30
CeeMacgot it, yep its the mac of the irb that is showing in the container now17:32
CeeMacthats a weird delay though17:32
jamesdentonit wasn't resolving for a bit, and now it is?17:32
CeeMacnow its working in the second container17:32
CeeMaclet me try another onw17:32
CeeMaccorrect17:32
jamesdentonk17:32
CeeMaccould it be a kernel version issue?17:32
CeeMaci updated to 4.15.0-42-generic for this run through17:33
jamesdentoni doubt it. what version?17:33
jamesdentoni'm on that, too. no issues here17:33
CeeMacah, good to know17:33
*** hamzaachi has quit IRC17:33
CeeMac3rd container on same host can't ping (destination host unreachable)17:34
jamesdentonYou might try performing a pcap on that container net vlan on the infra node and see if those arp requests are making their way out17:34
jrosserWith a rebooted vm do the container veth rewire themselves by magic?17:36
jamesdentoncan you share your 'brctl show' from the infra node and 'ip addr show' from the container?17:36
CeeMac3rd container working now, i'm running tcpdump on another session, let me try another container real quick17:36
CeeMacjrosser, yes after reboot they all reattach to the bridge17:36
CeeMacthe arp request is coming out of the container17:37
CeeMacroot@e6-00-cistg01-memcached-container-96e6028b:~# ip addr show eth117:38
CeeMac30: eth1@if31: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 100017:38
CeeMac    link/ether 00:16:3e:d6:b4:0b brd ff:ff:ff:ff:ff:ff link-netnsid 017:38
CeeMac    inet 10.1.211.20/24 brd 10.1.211.255 scope global eth117:38
CeeMac       valid_lft forever preferred_lft forever17:38
CeeMac    inet6 fe80::216:3eff:fed6:b40b/64 scope link17:38
CeeMac       valid_lft forever preferred_lft forever17:38
CeeMacbridge name     bridge id               STP enabled     interfaces17:38
CeeMacbr-mgmt         8000.005056b32e1a       no              20385a94_eth117:38
CeeMac                                                        2ef06fa6_eth117:38
CeeMac                                                        31f0b760_eth117:38
CeeMac                                                        37d62ba3_eth117:38
CeeMac                                                        4507a3e5_eth117:38
CeeMac                                                        6ab83fa5_eth117:38
jamesdentoncareful not to paste here. try paste.openstack.org or pasted.tech17:38
CeeMac                                                        96e6028b_eth117:38
CeeMac                                                        ab9f07ff_eth117:38
CeeMac                                                        bcffa313_eth117:38
CeeMac                                                        bond0.21117:38
CeeMac                                                        ebac552e_eth117:38
CeeMacyeah17:38
CeeMacmy bad17:39
CeeMacbrain dead now, been a long day17:39
jamesdentonit's all good17:39
CeeMachttp://paste.openstack.org/show/737791/17:39
CeeMacnow that container is working17:40
CeeMacso the delay isnt as long, but still there17:40
jamesdentoni recently saw something related to that container nat network. jrosser is eth0 going away, or is it a deployer decision?17:40
jrosserMy http proxy test scenario removes it17:41
jrosserIt’s kinda up to the deployer how the default route works I guess17:41
jamesdentonit sets up an http proxy config inside the container17:41
jamesdenton?17:41
CeeMacfrom the outside it looks like arp is running fine http://paste.openstack.org/show/737792/17:42
jrosserjamesdenton: accessible via br-mgmt17:42
*** thuydang has quit IRC17:43
jamesdentonCeeMac Can you start that cap again and try to ping from another container and see what the delay is?17:43
jrosserjamesdenton: see https://review.openstack.org/#/c/625523/ that’s an example with proxy and no container eth017:43
CeeMacsure17:43
jamesdentonjrosser right on, dude. thanks17:44
CeeMacthe arp request/reply is showing straight away on the cap17:45
CeeMacbut the reply is still not happening from the container17:45
jamesdentonwhere are you performing the cap? which interface?17:45
CeeMacoh,wait 27 pings before reply17:45
CeeMacbond0 on the controller17:46
CeeMacthe containers are on the inf node that i'm testing currently17:46
jamesdentonCeeMac Similar issue to you: https://lists.linuxfoundation.org/pipermail/bridge/2017-December/010830.html17:53
jamesdentonCeeMac the infra nodes... those are hosted on ESX? If so, what does your bond configuration look like?17:58
CeeMacsimilar, but slightly different, although I'm still reading through it.  If I connect to a container and check eth1 mac, it is not showing in brctl showmacs br-mgmt17:59
*** cshen has quit IRC17:59
CeeMacif i then ping the host IP and check showmacs again, it is there17:59
CeeMacif i then try ping DG, it doesn't work17:59
jamesdentonok, the former behavior is what i would expect. those entries in mac table would timeout and show up upon traffic. Do you happen to see DG mac in that table?18:01
CeeMacjamesdenton http://paste.openstack.org/show/737794/18:01
CeeMacDG mac is in br-mgmt yep18:01
CeeMacactually, reading through that mailtrail some more, when i first saw the eth1 mac it was on port1, now that I can ping it is on port 918:04
CeeMacso could be similar issue, i'll keep reading18:04
*** cshen has joined #openstack-ansible18:07
jamesdenton"brctl showstp br-mgmt" should show interfaces and respective port numbers. will help figure out 1 vs 918:08
CeeMaci have another weird going on18:11
CeeMacwhen i was looking at the cap for the arp18:11
CeeMaci saw a request for the DG IP coming from an IP that I don't have configured, and the reply went back to that iP18:12
*** cshen has quit IRC18:12
CeeMacI can ping the IP from the switch, tracing the MAC back takes me to br-mgmt on the controller18:12
CeeMaci dont see that ip in ifconfig or attached to a container18:13
jamesdentonAnd the IP isn't a VIP or something?18:14
CeeMacnope18:15
CeeMacdidn't run setup-infrastructure again yet18:16
CeeMacits showing in the arp table against br-mgmt18:16
CeeMacshowmacs on br-mgmt shows it against port 1, which is bond0.21118:16
CeeMacwhich doesn't have an IP assigned18:16
CeeMacand its not a mac of any of the physical interfaces on that node18:19
cjloaderis it possible in an aio, to create duplicate service containers (for example, two barbican containers to test haproxy)?18:19
jamesdentonit may be a byproduct of promisc mode, not sure18:19
jamesdentoncjloader i think you can define affinity?18:20
cjloaderokay18:20
CeeMacmy brain is dead and i'm way overdue going home.  thanks for the help, think i'll kick it in for tonight and try again in the morning18:20
jamesdentonCeeMac Can you verify Forged Transmits is also enabled?18:20
jamesdentonwish i had a better answer for you. i'm sure it's something dumb.18:20
CeeMacthis is something perculiar to this build.  I got past this stage on my previous builds fine18:21
CeeMacyeah, it always is18:21
CeeMacyep, promisc, mac changes and forged transmits all allowed18:21
*** ianychoi has quit IRC18:22
CeeMac"vlan trunking" type with specific vlan list in the trunk range18:22
jamesdentonk, thanks. the only other thing i would consider would be breaking the bond and working with only one interface - ens160 or ens192. Just to eliminate any funkiness there. You can also try to set max age to 0 and see if that improves things, but it's not ideal18:23
CeeMacmight try vmotioning them to different hosts18:23
CeeMactomorrow see if the issue persists18:23
jamesdentonwish i could replicate, it would help18:23
CeeMacyeah18:23
jamesdentoncjloader https://docs.openstack.org/project-deploy-guide/openstack-ansible/draft/app-advanced-config-affinity.html -- I think you can define 1 host and set affinity to 2 or 318:23
CeeMaci'm using pretty much the same interfaces config as my previous build, thats the weird thing.  Built the VMs from same ISO and using same dvport18:24
cjloaderjamesdenton: thx!18:24
CeeMaconly difference is kernel upgrade and git branch, but cant see git branch affecting container networking?18:25
*** cshen has joined #openstack-ansible18:25
CeeMacthat mail trail doesn't get anywhere either sadly :(18:27
jamesdentonyeah, i know. Found another one, but the fix involved patches or a NIC swap. Neither are concrete IMO18:28
CeeMacyeah18:28
jamesdentonARP gremlins18:28
CeeMaclittle buggers18:28
CeeMachmm18:28
jamesdentonThere might be something to the way the MAC moves from one port to another.18:28
CeeMacthe VMs are on different hosts than the last build, wonder if that is just coincidence18:29
CeeMacnot sure if thats just the ens port proxy-arping for the veth though?18:29
jamesdentonwhat did port 1 correspond to? and port 9?18:29
CeeMacport 1 was bond0.211, port 9 was the veth for the container18:29
jamesdentonok, so i would expect to see it always on port 918:29
CeeMac*eth118:29
CeeMacpresuming there is no proxy-arping going on, then yes18:30
*** cshen has quit IRC18:30
jamesdentonAnd when it wasn't working, the MAC was on eth1. Then aged out (maybe), then showed up on port 9 and worked.18:30
CeeMacthats the presumption i'm working on18:30
CeeMaclet me test again from a different container18:30
jamesdentonCeeMac Can you also just check this, for grins? [grep -rnw /proc/sys/net/ipv4/conf/*/proxy_arp -e '1']18:35
CeeMacsure18:35
*** nurdie has quit IRC18:36
CeeMacfrom the container?18:36
jamesdentonon the infra node18:36
CeeMacnot showing anything yet18:36
*** nurdie has joined #openstack-ansible18:37
jamesdentonk. i would expect no results18:37
CeeMacah, thats good then?18:37
jamesdentonit's something. heh18:37
CeeMachah18:37
CeeMacjust waiting for the arp reply to come back18:37
jamesdentonjust wanted to verify if proxy arp was enabled on anything18:37
*** shardy has quit IRC18:37
jamesdentonwhile you do that, run the 'brctl showmacs br-mgmt' and see if you see the eth1 mac associated with a port18:38
jamesdentonand which port it is18:38
CeeMacso, eth1 is associated with port1 until it gets a reply, then switched to the port for its veth18:39
CeeMac7 in this instance18:39
CeeMaconce the reply starts coming back.  I was a little slow running the tcpdump so cant see which device got the reply this time18:40
jamesdentoni suspect it's the other way around... becomes associated with port 7 then gets the response18:40
*** nurdie has quit IRC18:41
CeeMacyeah18:41
CeeMacok, so i've jumped on a new container18:41
CeeMacno entry in show macs18:41
jamesdentonout of curiousity... what NICs are you using?18:41
jamesdentonphysical nics18:41
CeeMacping remote host, its in showmacs for port 118:42
CeeMacping local host it goes to port 318:42
CeeMacping dg it goes back to 118:43
jamesdentonat that point the remote starts working, too?18:43
jamesdentonoh interesting18:43
*** cshen has joined #openstack-ansible18:43
CeeMacnope18:43
CeeMacstill timeout on the dg and remote18:43
CeeMacens160 and ens224 in bond018:44
CeeMactrying to emulate how it would be in physical set up (nic1 and nic3)18:44
jamesdentonsure. I assume these correspond to two port groups and two vSwitches with different physical nics?18:45
CeeMacits a dvswitch18:45
jamesdentonahh ok.18:46
CeeMacboth vmnics connect to the same dvport18:46
CeeMacinterestingly, i see the same 3 arp requests just before a reply as that thread, first request is 28 length then next 2 4618:46
CeeMacno idea if that is significant18:46
CeeMacmaybe i'll bounce that VM to a different host before I go18:47
CeeMaclooking back through the pcap, it looks like the reply was going back a good few times before the ping kicked it18:51
CeeMac*in18:51
*** thuydang has joined #openstack-ansible18:51
CeeMachmm, wonder if having a few snapshots on the vm would cause issues18:51
CeeMaci've seen it do weird rtt's when there are snapshots around for a while18:52
jamesdentonhmm, i wouldn't think so? Unless there's another VM out there with the same MACs?18:52
CeeMacnope18:52
CeeMacall unique18:52
*** aludwar has quit IRC18:53
CeeMacok that was weird, i lost networking to the host for a while after the vmotion there18:53
CeeMacok, issue persists after vmotion18:54
CeeMaci'm done.18:54
CeeMacwill try looking at it with fresh eyes in the morning18:54
jamesdentonunderstood. get some rest and maybe tomorrow it will come to you18:55
CeeMacthanks again for sticking with me18:55
jamesdentonsure. I've seen this type of behavior before, but not under the same circumstances18:55
CeeMacif you have any epiphanies drop me a dm18:55
jamesdentonLast time i encountered something like this was with an Intel X710 NIC and it could only be corrected with latest drivers18:55
CeeMacon the ESXi or on the VM?18:56
jamesdentonNo ESXi in this case.18:56
CeeMacright18:56
CeeMacvmxnet3 adapters on these vms18:56
jamesdentonbut the MAC reflection issue was causing drops like we're seeing here18:56
jamesdentonyeah18:56
CeeMacusing open vmware tools18:57
CeeMacactually18:57
jamesdentonget some rest18:57
CeeMactheres a thing18:57
CeeMacon my last build i used a template where i'd removed open-vmware tools and installed the official vmware tools18:57
CeeMacbut then because i ran into neutron issues i thought id go all stock for this next build18:57
CeeMaci'll take a snapshot and try that in the morning18:58
jamesdentoni don't ever install the vmware toold18:58
jamesdentonsure. keep me posted18:58
CeeMacyou mean the offical ones, or at all?18:58
jamesdentonat all.18:58
CeeMacubuntu installs open-vmware tools automagically18:58
jamesdentonOh, well in that case, maybe i should retract that statement18:59
nsmedsthis isn't exactly OSA specific - however defaults (and capp) is set by OSA so figured I'd ask in here. Our MySQL `max_connections` set at 1600, but appears that we sit ~1k threads connected at most times18:59
CeeMaci certainly got prompted to upgrade them when i ran apt update && apt dist-upgrade18:59
nsmedsanyone else had to increase max_connections beyond the 1600?18:59
jamesdentonyeah ok, open-vm-tools is installed.18:59
CeeMacanyway, thats a chat for the morrow19:00
jamesdentonyep, see ya19:00
CeeMacgood to know19:00
CeeMaclater19:00
*** aludwar has joined #openstack-ansible19:04
redkriegHi all, is it possible to target nova_virt_type based on the individual host instead of making it global for the entire cloud?  I'd like a mix of kvm and lxd nodes.19:14
jamesdentonredkrieg you might check this out: https://docs.openstack.org/openstack-ansible/rocky/reference/configuration/using-overrides.html#overriding-openstack-configuration-defaults19:17
redkriegjamesdenton: perfect, thank you.19:17
jamesdentonCeeMac This may be relevant - not sure in your dvSwitch scenario: https://communities.vmware.com/message/1507261. Since you're running a dvSwitch, can't you implement failover at the ESX level, rather than the VM? I think if you break the bond on the VM and stick to one interface you may have better luck19:21
jamesdentonIs the gate still busted on [os_neutron : Check for available offline migrations]?19:25
guilhermespcloudnull: thoughts? http://paste.openstack.org/show/737800/19:26
*** thuydang has quit IRC19:46
*** thuydang has joined #openstack-ansible19:47
*** hamzaachi has joined #openstack-ansible19:49
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: Spice console doesn't work on aarch64+kvm.  https://review.openstack.org/62659319:50
*** thuydang has quit IRC19:51
*** thuydang has joined #openstack-ansible19:51
*** jackivanov has quit IRC19:54
*** jackivanov has joined #openstack-ansible19:54
*** pcaruana has quit IRC19:57
*** jackivanov has quit IRC19:59
*** DanyC has joined #openstack-ansible20:01
*** CeeMac has quit IRC20:05
*** jackivanov has joined #openstack-ansible20:06
*** jackivanov has quit IRC20:09
*** jackivanov has joined #openstack-ansible20:09
*** DanyC has quit IRC20:10
*** jackivanov has quit IRC20:14
*** DanyC has joined #openstack-ansible20:20
*** jackivanov has joined #openstack-ansible20:22
*** jackivanov has quit IRC20:23
*** jackivanov has joined #openstack-ansible20:24
*** jackivanov has quit IRC20:26
*** jackivanov has joined #openstack-ansible20:27
openstackgerritJustin Alford proposed openstack/openstack-ansible-lxc_hosts master: Increase LXC container shutdown delay  https://review.openstack.org/62671620:30
*** jackivanov has quit IRC20:31
*** DanyC has quit IRC20:36
*** jlalford has joined #openstack-ansible20:50
*** radeks has joined #openstack-ansible20:56
openstackgerritJustin Alford proposed openstack/openstack-ansible-lxc_hosts master: Increasing LXC container default shutdown delay  https://review.openstack.org/62599821:11
*** jlalford_ has joined #openstack-ansible21:13
*** jlalford has quit IRC21:13
*** thuydang has quit IRC21:18
*** thuydang has joined #openstack-ansible21:21
*** ansmith has quit IRC21:26
*** sawblade6 has joined #openstack-ansible21:36
*** hamzaachi has quit IRC21:44
*** hamzaachi has joined #openstack-ansible21:45
*** priteau has quit IRC21:56
*** DanyC has joined #openstack-ansible22:01
*** thuydang has quit IRC22:03
*** ivve has quit IRC22:08
*** ivve has joined #openstack-ansible22:20
*** hamzaachi has quit IRC22:28
*** pmannidi_1 has quit IRC22:29
*** nurdie has joined #openstack-ansible22:35
*** nurdie has quit IRC22:40
*** radeks has quit IRC22:40
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Fence options before casting to json  https://review.openstack.org/62676323:00
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Fence options before casting to json  https://review.openstack.org/62676323:07
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Fence options before casting to json  https://review.openstack.org/62676323:35
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Fence options before casting to json  https://review.openstack.org/62676323:38

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!