Tuesday, 2019-02-26

*** macza has quit IRC00:14
*** ansmith has joined #openstack-ansible00:22
*** tosky has quit IRC00:23
openstackgerritMerged openstack/openstack-ansible stable/pike: Dynamic inventory backup corruption fix  https://review.openstack.org/63829200:25
openstackgerritMerged openstack/openstack-ansible stable/rocky: Dynamic inventory backup corruption fix  https://review.openstack.org/63828900:25
*** ansmith has quit IRC00:27
*** hwoarang has quit IRC00:29
*** markvoelker has joined #openstack-ansible00:31
*** hwoarang has joined #openstack-ansible00:32
*** nurdie has joined #openstack-ansible00:45
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone stable/rocky: Correct fernet token sync race condition  https://review.openstack.org/63923400:57
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone stable/queens: Correct fernet token sync race condition  https://review.openstack.org/63923500:57
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone stable/pike: Correct fernet token sync race condition  https://review.openstack.org/63923600:57
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone stable/ocata: Correct fernet token sync race condition  https://review.openstack.org/63923700:58
*** galstrom_zzz has quit IRC01:00
*** markvoelker has quit IRC01:04
*** nurdie_ has joined #openstack-ansible01:13
*** nurdie has quit IRC01:15
*** hwoarang has quit IRC01:20
*** djhankb has joined #openstack-ansible01:21
*** hwoarang has joined #openstack-ansible01:24
*** nurdie_ has quit IRC01:32
*** nurdie has joined #openstack-ansible01:33
*** nurdie has quit IRC01:38
*** cshen has joined #openstack-ansible01:40
*** cshen has quit IRC01:45
*** hwoarang has quit IRC01:49
*** hwoarang has joined #openstack-ansible01:51
*** nurdie has joined #openstack-ansible02:02
jamesdentonevenin'02:02
*** nurdie has quit IRC02:04
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Correct fernet token sync race condition  https://review.openstack.org/63832702:05
*** nurdie has joined #openstack-ansible02:05
*** nurdie has quit IRC02:09
*** nwonknu has quit IRC02:11
*** nwonknu has joined #openstack-ansible02:16
*** vnogin has joined #openstack-ansible02:22
*** vnogin has quit IRC02:26
*** lbragstad has quit IRC02:44
*** macza has joined #openstack-ansible02:47
cloudnullhows it jamesdenton?02:49
cloudnullevenings all :)02:49
jamesdentonit's goin02:49
cloudnullI guess that's better than not :)02:49
openstackgerritMerged openstack/openstack-ansible master: Dynamic inventory backup corruption fix  https://review.openstack.org/63744102:49
jamesdentonworking on this Mellanox doc. Have you messed with SR-IOV in your system yet?02:49
*** macza has quit IRC02:51
cloudnullnot recently02:52
cloudnullim back to good old, trusty, linuxbirdge02:52
jamesdentontried and true02:53
jamesdentonI have docs showing... GRUB_CMDLINE_LINUX="... iommu=pt amd_iommu=on"02:53
jamesdentonsound about right>02:53
cloudnullAll L2, all the time .02:53
jamesdenton?02:53
cloudnullyup.  that should enable all that02:53
*** mgariepy has quit IRC02:53
cloudnull+ bios updates to ensure IOMMU and SR-IOV are turned on02:54
jamesdentonyep yep02:55
cloudnullI think spatel is running SR-IOV?02:56
*** mgariepy has joined #openstack-ansible02:56
jamesdentonyes, but on intel02:56
cloudnullah yes.02:57
cloudnulldid you get some new AMD gear?02:57
cloudnullif so, welcome to the AMD powered cloud!02:58
cloudnull:P02:58
jamesdentonhaha02:58
jamesdentonnaw, but i need to make sure those 2-3 people are included02:58
jamesdenton:P02:58
cloudnullhahahaha02:58
* cloudnull Opteron for life! 02:59
cloudnulluntil I get an EPYC setup, then it'll change02:59
jamesdentoni get along just fine with this old stuff. just needs a kick in the pants sometimes03:01
*** markvoelker has joined #openstack-ansible03:01
cloudnullme too. my old gear seems to do what I need03:03
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: [docs] Add Open vSwitch Hardware Offloading (ASAP^2) Deployment Scenario  https://review.openstack.org/56354703:09
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: [WIP] Deploy Vector Packet Processing (VPP) Platform for Neutron  https://review.openstack.org/63164403:15
jamesdentonthat's enough monkeying around for tonight03:15
*** markvoelker has quit IRC03:35
*** partlycloudy has quit IRC03:37
*** cshen has joined #openstack-ansible03:40
*** partlycloudy has joined #openstack-ansible03:40
*** raukadah is now known as chandankumar03:41
*** partlycloudy has left #openstack-ansible03:42
*** partlycloudy has joined #openstack-ansible03:42
cloudnulllate jamesdenton03:43
*** macza has joined #openstack-ansible03:44
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_neutron master: [docs] Add Open vSwitch Hardware Offloading (ASAP^2) Deployment Scenario  https://review.openstack.org/56354703:44
*** hwoarang has quit IRC03:44
*** cshen has quit IRC03:45
*** hwoarang has joined #openstack-ansible03:46
*** macza has quit IRC03:48
*** sdake has joined #openstack-ansible03:49
*** sdake has quit IRC03:49
*** udesale has joined #openstack-ansible03:54
*** gyee has quit IRC03:58
*** shyamb has joined #openstack-ansible03:59
*** shyamb has quit IRC04:06
*** sdake has joined #openstack-ansible04:06
*** partlycloudy has quit IRC04:10
*** sdake has quit IRC04:10
*** sdake has joined #openstack-ansible04:13
*** sdake has joined #openstack-ansible04:14
*** sdake has quit IRC04:23
*** hwoarang has quit IRC04:23
*** hwoarang has joined #openstack-ansible04:25
*** markvoelker has joined #openstack-ansible04:32
*** dave-mccowan has quit IRC04:44
*** nurdie has joined #openstack-ansible04:51
*** lbragstad has joined #openstack-ansible04:53
*** shyamb has joined #openstack-ansible05:05
*** markvoelker has quit IRC05:05
*** shyam89 has joined #openstack-ansible05:14
*** shyam89 has quit IRC05:16
*** shyam89 has joined #openstack-ansible05:17
*** shyamb has quit IRC05:17
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Added tempest.conf for heat_plugin  https://review.openstack.org/63202105:27
*** shyam89 has quit IRC05:48
*** hamzaachi has joined #openstack-ansible05:55
*** maxbab has joined #openstack-ansible05:56
*** markvoelker has joined #openstack-ansible06:03
*** shyamb has joined #openstack-ansible06:14
*** shyam89 has joined #openstack-ansible06:17
*** shyamb has quit IRC06:19
*** shyam89 has quit IRC06:19
*** shyamb has joined #openstack-ansible06:20
*** ivve has joined #openstack-ansible06:23
*** shyamb has quit IRC06:27
*** shyamb has joined #openstack-ansible06:27
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: [WIP] move deployment tool related vars to vars dir  https://review.openstack.org/63925806:28
*** markvoelker has quit IRC06:35
*** nurdie has quit IRC06:48
*** nurdie has joined #openstack-ansible06:48
*** nurdie has quit IRC06:53
*** hamzaachi has quit IRC06:53
openstackgerritMatthew Thode proposed openstack/openstack-ansible-os_tempest master: Add Gentoo support to os_tempest  https://review.openstack.org/63342407:00
prometheanfirechandankumar: :D07:00
chandankumarprometheanfire: thanks :-)07:01
*** shyam89 has joined #openstack-ansible07:07
*** shyamb has quit IRC07:10
*** shyam89 has quit IRC07:13
*** kopecmartin|off is now known as kopecmartin07:23
*** shyam89 has joined #openstack-ansible07:24
*** cshen has joined #openstack-ansible07:26
fnpanicHi07:30
*** ppetit has joined #openstack-ansible07:30
jrosserMorning07:34
*** logan- has quit IRC07:35
chandankumarjrosser: \o/07:35
*** logan- has joined #openstack-ansible07:37
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Added tempest.conf for heat_plugin  https://review.openstack.org/63202107:43
*** lbragstad has quit IRC07:44
*** hamzaachi has joined #openstack-ansible07:48
*** shyam89 has quit IRC07:51
*** shyam89 has joined #openstack-ansible07:51
chandankumarjrosser: I need some feedback related to this review https://review.openstack.org/#/c/639258/08:00
*** shyam89 has quit IRC08:01
*** shyam89 has joined #openstack-ansible08:01
jrosserchandankumar: I’m not sure about that - vars and defaults are not the same thing, and that kind of mixes them up08:02
jrosserIt would be much better imho to carry those overrides in a single place in tripleo - but I completely understand how the os_tempest defaults are what we need as defaults in OSA08:03
jrosserSo you end up with a ton of overrides for tripleo08:03
chandankumarjrosser: sure, let me set those default vars in a playbook in tripleo side and set few stuff dyamically08:05
chandankumarjrosser: please have a look at these two reviews https://review.openstack.org/#/c/632726/ and https://review.openstack.org/#/c/638383/ when free!08:07
*** shyam89 has quit IRC08:07
*** phasespace has joined #openstack-ansible08:08
*** shardy has joined #openstack-ansible08:16
jrosserchandankumar: look where role defaults and role vars are in this list https://docs.ansible.com/ansible/latest/user_guide/playbooks_variables.html#variable-precedence-where-should-i-put-a-variable08:18
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/rocky: Correct fernet token sync race condition  https://review.openstack.org/63923408:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/queens: Correct fernet token sync race condition  https://review.openstack.org/63923508:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/pike: Correct fernet token sync race condition  https://review.openstack.org/63923608:25
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/ocata: Correct fernet token sync race condition  https://review.openstack.org/63923708:25
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_zun master: Enable overriding the service setup host python interpreter  https://review.openstack.org/62123908:27
*** miloa has joined #openstack-ansible08:27
*** DanyC has joined #openstack-ansible08:28
odyssey4memorning folks08:32
*** markvoelker has joined #openstack-ansible08:32
*** pcaruana has joined #openstack-ansible08:35
*** electrofelix has joined #openstack-ansible08:37
*** tosky has joined #openstack-ansible08:39
jrossero/ morning08:40
*** DanyC has quit IRC08:42
*** rgogunskiy has joined #openstack-ansible08:43
*** shyam89 has joined #openstack-ansible08:52
*** shardy has quit IRC08:54
*** priteau has joined #openstack-ansible08:59
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-ops master: modify playbook inventory to make groups more specific  https://review.openstack.org/63166809:00
*** markvoelker has quit IRC09:06
*** hamzaachi_ has joined #openstack-ansible09:13
*** hamzaachi has quit IRC09:15
*** DanyC has joined #openstack-ansible09:19
*** hamzaachi_ has quit IRC09:25
*** mmercer has joined #openstack-ansible09:28
chandankumarodyssey4me: \o/09:28
*** vnogin has joined #openstack-ansible09:29
chandankumarodyssey4me: regarding this review https://review.openstack.org/#/c/638393/ -> I wanted to hack and reuse python-venv-build as a dependency with os_tempest but each time it asks for venv_install_destination_path not defined09:29
*** hamzaachi_ has joined #openstack-ansible09:30
*** hamzaachi_ has quit IRC09:30
*** mmercer_ has quit IRC09:30
*** tacco has quit IRC09:30
*** tbarron has quit IRC09:30
chandankumarin order to alter that I thought lets uncomment above var but it leads to execute preflight tasks09:30
*** dcdamien has quit IRC09:30
*** ebbex has quit IRC09:30
chandankumarthen I removed always but it is not working09:30
chandankumarodyssey4me: I am not sure what is the best solution here09:30
*** dcdamien has joined #openstack-ansible09:30
*** broken_one has quit IRC09:35
*** jamesdenton has quit IRC09:35
*** jamesdenton has joined #openstack-ansible09:36
*** ebbex has joined #openstack-ansible09:36
*** hamzaachi has joined #openstack-ansible09:42
*** hamzaachi has quit IRC09:44
*** vnogin has quit IRC09:47
*** priteau has quit IRC09:57
*** priteau has joined #openstack-ansible09:58
*** markvoelker has joined #openstack-ansible10:03
*** rgogunskiy has quit IRC10:03
*** phasespace has quit IRC10:05
*** phasespace has joined #openstack-ansible10:06
*** priteau has quit IRC10:06
*** ppetit has quit IRC10:09
*** shyam89 has quit IRC10:10
*** shyam89 has joined #openstack-ansible10:11
openstackgerritChandan Kumar proposed openstack/ansible-role-python_venv_build master: Remove always tag from preflight checking for useing as dependency  https://review.openstack.org/63839310:29
*** phasespace has quit IRC10:30
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Added dependency of os_tempest role  https://review.openstack.org/63272610:32
*** markvoelker has quit IRC10:36
miloaHi,10:37
miloaabout : https://bugs.launchpad.net/openstack-ansible/+bug/178279810:37
openstackLaunchpad bug 1782798 in openstack-ansible "AIO Build Fails on SELinux File Context Tasks" [Medium,Fix released]10:37
miloaI think the problem is the same as for /var/lib/nova sefcontext there is an equivalent between /openstack/log and /var/log. Removing it, it seems to work for os_nova playbook10:39
miloaI removed manually the equivalence : semanage fcontext -d /openstack/log then playing the os_nova playbook it passed without error.10:41
miloaTrying to implement it in os_nova/tasks/nova_selinux.yml10:43
openstackgerritGabriele Santomaggio proposed openstack/openstack-ansible-rabbitmq_server master: Change the default HA policy for RabbitMQ mirroring  https://review.openstack.org/63929910:44
*** hamzaachi has joined #openstack-ansible10:46
miloaif the implementation work, will you accept ? because in the commit https://review.openstack.org/#/c/603860/ there is this : "This change can be reverted whenever we have a maintainer that's available to do the work required."10:51
*** shyamb has joined #openstack-ansible10:57
*** shyam89 has quit IRC10:59
*** cshen has quit IRC11:08
*** shyamb has quit IRC11:08
miloaseems to be ok all setup-openstack.yml pass without error. Now retesting with code modification on a fresh VM to be sure. After i will try to summit my modification.11:15
chandankumarjrosser: https://review.openstack.org/#/c/639310/ I came up with this11:20
chandankumarfor tripleo auto setting vars11:21
chandankumararxcruz: hello11:21
chandankumararxcruz: I came up with two approches https://review.openstack.org/#/c/639310/ and https://review.openstack.org/639310 for minimizing tripleo os_tempest var enduser usage11:22
chandankumarI am not sure which one is the correct way11:22
*** cshen has joined #openstack-ansible11:24
*** shyamb has joined #openstack-ansible11:24
*** udesale has quit IRC11:29
odyssey4mechandankumar re python-venv-build as a meta-dep... it should not e added as a meta-dep, because the role isn't run that way... a meta-dep will actually run the role prior to running the role that depends on it11:30
*** Adri2000 has quit IRC11:33
*** Adri2000 has joined #openstack-ansible11:34
chandankumarodyssey4me: got it thanks, will update the review11:37
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Added dependency of os_tempest role  https://review.openstack.org/63272611:41
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Added dependency of os_tempest role  https://review.openstack.org/63272611:41
arxcruzchandankumar: yeah, we must discuss this, i don't think odyssey4me would like it. I don't11:41
*** hamzaachi has quit IRC11:42
chandankumarodyssey4me: arxcruz currently in os_tempest and tripleo job, we are overriding more than 20 os_tempest vars to consume os_tempest role but end user just want to override 2-3 vars and just consume the role through a playbook11:54
chandankumarodyssey4me: arxcruz for that I came up with two reviews https://review.openstack.org/639258 and https://review.openstack.org/639310 I am not sure which one is the best way or we need to use something different11:55
chandankumarplease have a look!11:58
odyssey4mechandankumar will do, but only later - I need to focu on my day job for the moment12:00
chandankumarsure :-)12:00
*** shyamb has quit IRC12:13
*** phasespace has joined #openstack-ansible12:14
phasespaceHey guys. Playing more with OpenStack-Ansible upgrades. After an upgrade from pike to queens the hostnames of hypervisors change to add a domain ".openstack.local". However, in one case one of the hypervisors did not get updated12:15
phasespaceHow can I manually add this domain to the remaining hypervisor?12:16
phasespaceWhen I look in the resource_providers table in the nova_api database, I can see the old hypervisor hostnames, and the new ones12:18
phasespacebut one of them did not get added with a new hostname12:18
*** logan_ has joined #openstack-ansible12:27
*** logan_ is now known as Guest1164712:28
*** bgmccollum has quit IRC12:30
*** electrofelix has quit IRC12:30
*** aludwar has quit IRC12:30
*** kaiokmo has quit IRC12:30
*** ArchiFleKs has quit IRC12:30
*** sm806 has quit IRC12:30
*** logan- has quit IRC12:30
*** mgariepy has quit IRC12:30
*** nwonknu has quit IRC12:30
*** sum12 has quit IRC12:30
*** openstackgerrit has quit IRC12:30
*** aludwar has joined #openstack-ansible12:30
*** ArchiFleKs has joined #openstack-ansible12:31
*** sm806 has joined #openstack-ansible12:31
*** sum12 has joined #openstack-ansible12:31
*** dxiri has joined #openstack-ansible12:31
*** Guest11647 is now known as logan-12:31
*** markvoelker has joined #openstack-ansible12:33
*** electrofelix has joined #openstack-ansible12:35
*** nwonknu has joined #openstack-ansible12:36
*** shyamb has joined #openstack-ansible12:41
*** nurdie has joined #openstack-ansible12:44
*** shyamb has quit IRC12:46
*** hamzaachi has joined #openstack-ansible12:47
*** nurdie has quit IRC12:48
*** shyamb has joined #openstack-ansible12:50
*** markvoelker has quit IRC13:06
*** cshen has quit IRC13:06
*** Adri2000 has quit IRC13:08
*** sdake has joined #openstack-ansible13:15
*** partlycloudy has joined #openstack-ansible13:17
*** mgariepy has joined #openstack-ansible13:18
*** abhi89 has joined #openstack-ansible13:31
*** cshen has joined #openstack-ansible13:32
*** ansmith has joined #openstack-ansible13:35
abhi89Hi All.. I wanted to discuss here on a vulnerability that has been reported in python-requests library (https://nvd.nist.gov/vuln/detail/CVE-2018-18074).)13:35
abhi89i was in discussion with the openstack-requirements team and opened a story to track the discussion - https://storyboard.openstack.org/#!/story/200497913:36
abhi89python-requests library is a non-openstack package, but we do have it in the requires section of openstack & we do aggregate it in openstack installer.13:37
abhi89so i was expecting that osa team would take care of the updates that need to be done in these packages. like in the present case, i want the upper-constraints of python-requests library to be changed to > 2.20.013:39
*** shyamb has quit IRC13:39
odyssey4meabhi89 is there a reason why you can't submit the patch to the requirements repo?13:40
abhi89odyssey4me: yes, there is no project as such which i can clone to do that update.. i guess updating requirements.txt is something that i am not aware of..13:41
odyssey4meabhi89 ok, I really don't get all the hullabaloo, so I'll submit a patch now and we'll see what happens13:42
abhi89odyssey4me: also, I have talked to openstack-requirements folks about this, opened a story for them to work on (as suggested by them) - https://storyboard.openstack.org/#!/story/200497913:43
abhi89odyssey4me: sure, thanks!13:43
*** nurdie has joined #openstack-ansible13:44
*** dave-mccowan has joined #openstack-ansible13:54
odyssey4meabhi89 prometheanfire FYI https://review.openstack.org/63934013:59
prometheanfireodyssey4me: well, voted :|14:12
prometheanfireodyssey4me: cc'd some stable people as well14:14
*** nurdie has quit IRC14:17
*** sdake has quit IRC14:21
prometheanfireodyssey4me: that said, I'd really like to hear stable team's stance on this14:25
odyssey4meprometheanfire we'll see - the py26 support dropping might be an issue for rocky, but is certaily an issue for some older releases14:26
prometheanfireodyssey4me: true, not even talking about that though, I'm more intrested to know how the proposed change fits within stable policy14:27
*** ivve has quit IRC14:27
*** phasespace has quit IRC14:29
*** sdake has joined #openstack-ansible14:34
*** dave-mccowan has quit IRC14:34
*** tstrul has joined #openstack-ansible14:35
*** bgmccollum has joined #openstack-ansible14:37
ioniletsencrypt for haproxy is a bit buggy14:39
*** lbragstad has joined #openstack-ansible14:40
ioniwhen trying to use /opt/letsencrypt/certbot-auto it tries automatically to install some pip packages14:40
ionibut haproxy is stopped and it fails14:40
ioniit fails because in pip.conf is configured to use the internal repo14:40
*** maxbab has quit IRC14:42
*** tstrul has quit IRC14:43
*** nurdie has joined #openstack-ansible14:45
*** sdake has quit IRC14:55
*** jwitko has joined #openstack-ansible14:59
*** jwitko has left #openstack-ansible15:00
*** sdake has joined #openstack-ansible15:00
*** aedc has joined #openstack-ansible15:02
prometheanfirelooks like the bot is absent15:04
prometheanfired34dh0r53: spaces, not tabs, blame the default file being tabs :P15:04
d34dh0r53:)15:05
prometheanfire%s/\t/  /g15:06
*** markvoelker has joined #openstack-ansible15:07
*** sreejithp has joined #openstack-ansible15:08
*** spatel has joined #openstack-ansible15:13
spatelmorning folks :)15:13
d34dh0r53prometheanfire: woot15:18
prometheanfired34dh0r53: next I need to save those binpkgs to os-infra, possibly also setting a low default for march=15:19
cloudnullmornings all15:27
jrossero/15:29
chandankumar\o/15:29
chandankumarjrosser: this one is working https://review.openstack.org/#/c/639310/ i think i just need to make some more tweaks on tripleo side15:30
chandankumaradded you to the review15:32
*** Nhey has joined #openstack-ansible15:32
*** markvoelker has quit IRC15:37
*** sdake has quit IRC15:59
*** sdake has joined #openstack-ansible16:01
*** sdake has quit IRC16:02
evrardjpo/16:03
guilhermesp\m/16:03
*** shananigans has joined #openstack-ansible16:04
*** macza has joined #openstack-ansible16:08
miloaHi,16:11
miloaHi16:11
prometheanfire\o16:11
chandankumar\o/16:12
mnaserugh16:12
mnaseri hate my calendar16:13
*** Adri2000 has joined #openstack-ansible16:13
mnaser#startmeeting openstack_ansible_meeting16:13
openstackMeeting started Tue Feb 26 16:13:22 2019 UTC and is due to finish in 60 minutes.  The chair is mnaser. Information about MeetBot at http://wiki.debian.org/MeetBot.16:13
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:13
mnaser#topic office hours16:13
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:13
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:13
*** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)"16:13
mnaserlet's try this out.16:13
*** cshen has quit IRC16:13
guilhermespo/16:14
prometheanfire\o16:14
chandankumar\o/16:14
arxcruz\o16:15
mnaserhow's our gate feeling these days16:15
mnaseri tried to ping the ML about the heat stuff jrosser has been looking at16:15
jamesdentono/16:16
chandankumarmnaser: I think the gate was good, few timedout on yum mirrors16:16
chandankumarand today on cirros image url time out16:17
*** sdake has joined #openstack-ansible16:18
jrosserwe have some really funky failures with os_swift https://review.openstack.org/#/c/635186/16:19
jrossermnaser: no-one bit on the ML heat post16:19
mnaseryeah i just tried to push something out today jrosser :(16:20
*** openstackgerrit has joined #openstack-ansible16:21
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Ensure the default version of Java is set  https://review.openstack.org/63937816:21
*** hamzaachi has quit IRC16:22
jrossermnaser: perhaps we should go to a heat irc meeting?16:24
mnaserjrosser: i think that might be a good idea16:25
*** sdake has quit IRC16:25
*** nurdie has quit IRC16:25
*** nurdie has joined #openstack-ansible16:26
*** sdake has joined #openstack-ansible16:27
odyssey4meo/16:27
odyssey4meapologies for disappearing last week - I had a sudden urgent need to become a painter for my kitchen wall16:28
*** dave-mccowan has joined #openstack-ansible16:28
mnaserodyssey4me: dont worry.. happens to me all the time16:29
mnaser:P16:29
*** nurdie has quit IRC16:30
mnaserdont think we've progressed at all about nspawn16:32
odyssey4meI'll be spending a little time this evening working out the last bits for the python build simplification. There's a month left before we hit Stein RC, so I'd really like to have it done and dusted within the next two weeks.16:32
mnaserim worried we wont be able to do much about it this cycle and itll put us one release behind16:32
odyssey4meFor nspawn, perhaps the best thing to do is to schedule a hackathon time frame at the PTG to get a passing gate16:32
*** pcaruana has quit IRC16:32
odyssey4meSpend a day doing restrospective, and two days hacking, with a small team working on just nspawn.16:33
spotzhey all16:34
*** markvoelker has joined #openstack-ansible16:35
*** sdake has quit IRC16:35
*** sdake has joined #openstack-ansible16:36
openstackgerritMikael Loaec proposed openstack/openstack-ansible-os_nova stable/rocky: Proposition to resolve bug #1782798  https://review.openstack.org/63938016:37
openstackbug 1782798 in openstack-ansible "AIO Build Fails on SELinux File Context Tasks" [Medium,Fix released] https://launchpad.net/bugs/178279816:37
mnaserodyssey4me: but the ptg is after release i think, right?16:37
*** sdake has quit IRC16:40
*** sdake_ has joined #openstack-ansible16:41
*** nurdie has joined #openstack-ansible16:41
odyssey4memnaser sure, but what matters is getting it working - more than making it work in this release16:43
*** sdake_ has quit IRC16:45
*** sdake has joined #openstack-ansible16:45
*** nurdie_ has joined #openstack-ansible16:46
openstackgerritMerged openstack/openstack-ansible-os_keystone master: add gentoo support to keystone  https://review.openstack.org/63342316:46
miloaI hope I did it correctly (first contribution to openstack-ansible :) )  https://review.openstack.org/63938016:48
evrardjpmiloa: thanks !16:48
*** nurdie has quit IRC16:49
*** nurdie_ has quit IRC16:50
*** sdake has quit IRC16:50
*** hamzaachi has joined #openstack-ansible16:51
*** sdake has joined #openstack-ansible16:52
mnasermiloa: woot16:53
d34dh0r53I have some cycles, but am a bit out of the loop, what nspawn things need work?16:54
prometheanfireand then there were 3 https://review.openstack.org/#/q/topic:add-gentoo-support+status:open :D16:54
miloa:)16:57
chandankumarhey I want to bring two topics, I need help & feedback16:58
chandankumarevrardjp: regarding how to use config_template and python-venv-build as a dependency in os_tempest16:59
chandankumarcan we ship both the modules as a pip package so that it will be installed while doing python setup.py install on os_tempest17:00
*** sdake has quit IRC17:00
chandankumaros that end user does not have to worry about installing additionally and modifying the ansible.cfg while consuming it17:00
chandankumarodyssey4me: mnaser ^^17:01
mnaserhmm17:01
mnaserthat's interesting17:01
chandankumarhere is the patches https://review.openstack.org/#/q/topic:os_tempest_deps+(status:open+OR+status:merged)17:01
mnaserisnt that using another dependnecy management system though17:01
odyssey4memnaser ansible doesn't have a dependency management system though17:01
chandankumaransible galaxy dependency does not solve our issue17:02
odyssey4meif you're thinking of meta-dependencies, they're badly named17:02
odyssey4methey're more about pre-loading17:02
chandankumarsince os_tempest is used outside may be more stuff developed by OSA can be consumed, how to solve the same issue17:02
*** sdake_ has joined #openstack-ansible17:03
chandankumarwe need to improve the user experince to install less dependecies as possible17:03
*** Nhey has quit IRC17:03
odyssey4mechandankumar within tripleo, won't this be handled by using rpm packages with dependencies?17:03
chandankumarodyssey4me: currently we have not packaged it as a dependency because of several installers involved in downstream17:04
chandankumarto deploy a single stuff17:04
chandankumarI want something which is easy for any enduser17:05
odyssey4mechandankumar well, perhaps evrardjp can confirm - but we could use some other meta file to express the dependency, then tripleo's installers can consume that meta file17:05
chandankumarif they want to run os_tempest they just install os_tempest their required dependency needs to be installed17:05
odyssey4mewe've done that for docs17:05
odyssey4meeg: https://github.com/openstack/openstack-ansible-os_tempest/blob/master/meta/openstack-ansible.yml17:06
chandankumarodyssey4me: we need something some thing so that ansible can recognixe those roles17:06
openstackgerritMerged openstack/openstack-ansible-os_neutron master: [docs] Add Open vSwitch Hardware Offloading (ASAP^2) Deployment Scenario  https://review.openstack.org/56354717:06
odyssey4meyeah, ansible doesn't have anything that solves this issue unless there's something new I don't know about17:06
evrardjpI will read this backlog when I am done with my meeting17:07
*** aedc has quit IRC17:07
*** markvoelker has quit IRC17:07
evrardjpmnaser: odyssey4me chandankumar there is another person that asked pip packaging of our role, ansible-hardening for example.17:08
evrardjpI added this to the agenda of this meeting17:08
chandankumarodyssey4me: evrardjp I think python setup.py install solves the issue,17:08
evrardjpit's just part of the solution17:08
evrardjplet me finish my meeting and I can explain17:08
odyssey4meok, what time will that be - I need to go afk for a bit17:09
chandankumarevrardjp: config_template is just a script so shipping as a module as fixes it17:09
chandankumarjust dump it at right path so that ansible recognizes it17:09
chandankumarit also removes copying config_templates script in ceph ansible17:10
chandankumarit might also help in adoption of osa developed ansible modules17:10
odyssey4mealright - I'll be back in about an hour17:10
* chandankumar not sure that is the right solution17:11
arxcruzI like the pip idea to be honest17:11
arxcruzbut would be a good use of pip for ansible role?17:12
*** abhi89 has quit IRC17:12
chandankumarodyssey4me: evrardjp mnaser arxcruz what about bringing this topic to ML may be someone has better idea?17:13
*** gyee has joined #openstack-ansible17:13
evrardjpodyssey4me: you're right, we can have anything in meta/ folder.17:13
arxcruzsure fine by me17:13
evrardjpansible doesn't have anything in itself for self resolving of dependencies outside of galaxy17:14
mnaser#endmeeting17:14
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: http://bit.ly/2xA1eZC"17:14
openstackMeeting ended Tue Feb 26 17:14:15 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:14
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-02-26-16.13.html17:14
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-02-26-16.13.txt17:14
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-02-26-16.13.log.html17:14
mnaserwhy dont we publish to galaxy then17:14
evrardjpbecause galaxy fails17:14
mnaserhow17:14
evrardjpbecause galaxy is not patchable either17:14
evrardjpso that brings depends on issues17:14
mnaserwhat do you mean not patchable17:14
evrardjpgalaxy api used to be unreliable17:15
evrardjpthat's problem 117:15
mnasercant we just have different tagged releases in galaxy17:15
chandankumarfirst we need to register openstack-ansible user on galaxy17:15
chandankumarmnaser: evrardjp I heard they are rewrriting the ansible-galaxy17:15
evrardjpproblem 2 is that when you fetch from ansible-galaxy cli you get a tar.gz, not a git repo17:15
mnaseror maybe there's already an openstack namespace too chandankumar17:15
chandankumarto something differnt project17:15
mnaserevrardjp: how is that a problem?17:15
chandankumarevrardjp: if we get tar.gz may be pip will work with tar gz17:16
evrardjpSo we'd need something to deal with depends-on: If depends-on on repo x, we'd need to then not use galaxy17:16
mnaserevrardjp: cant we do all of our dev in git, but release to galaxy?17:16
evrardjpbut then there is another thing, we need to tag regularily into a process, and define the consumption model17:17
evrardjpI mean all of this is fine, but I am wondering what the problem is17:17
evrardjpI think I am confused.17:17
evrardjpwhat are we trying to achieve here?17:17
chandankumarevrardjp: mnaser odyssey4me https://github.com/ansible/mazer -> galaxy alternative17:17
evrardjpchandankumar: if you want to pip install the code, as I said in the other review, you can already use the editable flag, and use --src17:18
evrardjppip would fetch the code and put it where you want.17:18
mnaserevrardjp: i think end goal is find a way to help with consumption of roles17:18
chandankumarevrardjp: the problem is if os_tempest is used as a role by end_user their roles needs to be installed easily17:18
evrardjpI am confused how a git clone is so hard17:18
chandankumaruser do not need to install seperately and fix ansible.cfg to consume it17:19
mnaser^^^17:19
mnaserour roles are not just a git clone17:19
mnaserthere's things like config_template dependencies that are not pulled17:19
evrardjpI think there is a misconception here -- I am using ansible-config_template in another project, I didn't have to do anything special for consuming it.17:20
evrardjpwe are confusing multiple problems17:20
evrardjpsorry17:20
evrardjplet me rephrase that17:20
cloudnullohh , a galaxy alternative17:20
evrardjpthere is a series of misconceptions that prevent me to give you a proper solution17:20
evrardjpyou can pip install the role right now, in the folder you want, assuming you know how to pass arguments to pip17:21
evrardjpif you don't, we need to then release each of the roles and publish them to pip17:21
evrardjpwhich means tagging17:21
evrardjpand different pipelines17:21
evrardjpI am fine with that17:22
evrardjpI just need people to be aware of it.17:22
mnaserevrardjp: if you need to use os_tempest, you need to install config_template17:22
mnaserthat dependency isnt properly/clearly defined right now17:22
mnaseri think that's what chandankumar is trying tos olve17:22
chandankumaryes correct17:22
evrardjpSo as I said17:22
evrardjpyou just need to put that into the right folder17:22
chandankumari just need python_venv_build and config_template17:23
mnaserchandankumar: the idea here i think is that.. if i do.. pip install ansible .. ansible comes in with all its dependencies17:23
evrardjpI am using git clone, but pip install with arguments would do just as fine17:23
evrardjpif we are talking about "just that"17:23
mnaserit doesnt just install ansible, with a note saying "please go and pip install jinja2 now"17:23
mnaserif i understand chandankumar correctly, that's what he's trying to solve? he wants the install to be a one step that resolves dependencies17:24
evrardjphow does it resolve versions ?17:24
chandankumarmnaser: yes correct, once step solution for dependencies17:24
evrardjpchandankumar: ansible-galaxy install <your requirement file> is not enough for you?17:25
mnaserevrardjp: requirements.txt .. ? but in ansible... i dunno how we'd handle it17:25
chandankumarevrardjp: for versions you mean ansible version?17:25
mnaseransible-galaxy install openstack.os_tempest .. that would pull down the dependencies defined inside `meta`17:25
evrardjpchandankumar: shas of the tempest/config_template version code17:25
*** DanyC_ has joined #openstack-ansible17:26
chandankumarevrardjp: we are not consuming ansible galaxy there as os_tempest is not recognized by galaxy as user is not registered17:26
evrardjpmnaser: that's correct, as long as meta are expressed in a galaxy format17:26
evrardjpchandankumar: you don't need to publish on galaxy.ansible.com to use ansible-galaxy cli17:26
mnaseri think the dependencies wont work properly17:27
*** nurdie has joined #openstack-ansible17:27
evrardjpmnaser: I don't see where it matters, if those are installed immediately?17:27
evrardjpI definitely fail to see what the problem is17:27
*** DanyC has quit IRC17:27
evrardjpwe can reinvent pip, reuse pip, reuse ansible galaxy format, so many options17:28
mnaserright you're asking the user to define the dependencies of the role inside their own requirements file17:28
mnaseri think that's a bit counterintuitive17:28
*** cmart has joined #openstack-ansible17:28
evrardjpmnaser: they have to do it anyway :p17:28
evrardjpmnaser: that's what I fail to see17:28
chandankumarevrardjp: https://review.openstack.org/#/c/632726/ i think odyssey4me last comment explain the issue what I am trying to achieve17:29
mnaserwell, they don't have to do it if we have the proper dependencies and galaxy stuff published, because it will pull down tempest, check its dependnecies, and pull those down after17:29
chandankumarwhat i want is git clone os_tempest, then python setup.py install then if i reuse os_tempest things should work17:30
chandankumarno other steps17:30
evrardjpok so you want to use pip resolver to resolve dependencies on ansible roles, and therefore you want to have all the dependents role to be released on pip + tag/versionned.17:31
* chandankumar is thinking from a enduser prespective17:31
chandankumarevrardjp: yes17:31
* jrosser looks over at how openstack-ansible-ops deals with this17:31
evrardjpjrosser: in any case, he wants to use the pip resolution.17:32
chandankumarevrardjp: it will also help ceph-ansible to stop copying config_template script17:32
mnaseris pip a hard requrieemnt chandankumar17:32
jrosserwhat about many versions of the same thing17:32
mnaserlike we consume some of the roles locally here17:32
chandankumarmnaser: if we package it as a rpm then it will dump the files it to right places17:32
jrosserif OSA and ceph-ansible both require config_template, but different versions17:33
chandankumarbasically dealing with setup.py data files17:33
evrardjpchandankumar: I suppose the rpm would be built on the python package17:33
evrardjpchandankumar: that's not the issue17:33
mnaserim wondering how easy it would be to build a python package that automatically sits 'in the right place'17:33
evrardjpplease decouple the setup.py from the rest of the conversation :p17:33
mnaserbut for me it just feels.. wrong17:33
evrardjpas said, you can already use pip to install a role anywhere.17:33
evrardjpdependency resolution + tagged version is what you are looking for.17:34
chandankumarbut pip works on setup.py on where to put files so that it will be discoverable17:34
chandankumarby python17:34
evrardjpmnaser: it is easy to build a package to store at a place17:34
evrardjpwhat would be "the right place" though?17:34
evrardjpWould that be the same for centos, suse, and ubuntu?17:34
mnaseri bet it wouldnt be, and it wouldnt be the same for OSA either17:35
chandankumarevrardjp: if it is treated as a pypi package it will work for other distros17:35
mnaserand it wouldn't be for someone who would use it to install in their own local usage17:35
evrardjpmnaser: we are not forced to consume it17:35
evrardjpbut let me come back to my initial question17:35
mnaserbut we're shipping it, so we need to make sure its usable.  if it drops files into /etc/ansible/roles/<foo> then bleh17:35
evrardjpwhen you have your dependency resolver with pip, what does it bring you ?17:35
evrardjpbecause now you need to test coinstallability of your roles17:36
evrardjpso automatic dependency resolution is not a panacea17:36
evrardjpso you need to freeze a manifest -- pip freeze > role-requirements.txt17:36
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Ensure the default version of Java is set  https://review.openstack.org/63937817:36
evrardjpisn't that EXACTLY what our ansible-role-requirements is ?17:36
jrosser^ ++ this precisely17:37
jrosserwe choose to own /etc/ansible/roles on the deploy host in OSA17:37
jrosserbut that could equally be $pwd/roles/... to keep everything in-directory17:37
* mnaser never liked how an OSA deploy host owns the host17:37
jrosserthats entirely up to the consuming project to decide17:37
evrardjpmnaser: we could technically put that elsewhere, it's just a decision17:38
evrardjpI think we should put it in playbooks/roles/17:38
chandankumarevrardjp: jrosser if I am going to use this https://github.com/openstack/openstack-ansible-os_tempest/blob/master/tests/ansible-role-requirements.yml it is going to pull bunch of stuff which is not needed17:38
jrosserin my non OSA code i have a ansible-role-requirements equivalent17:38
*** spatel has quit IRC17:38
jrosserand the roles get pulled into the project dir, not a random place on the host17:38
mnaser^ the way we should do it in osa17:38
jrosserit all works nicely and doesnt collide with anything else17:38
evrardjpchandankumar: I think you are hitting the point there -- you want an a-r-r which is the minimum you need for testing17:39
jrosserno dependancy managment required, just a-r-r equivalent17:39
evrardjpand that's what matters.17:39
chandankumarevrardjp: yes17:39
evrardjpmnaser: jrosser I would be fine to do that one day if you want -- moving things in tree17:40
chandankumarevrardjp: i need to install only those_stuff which is required to make it working17:40
chandankumarand without tweaking ansible.cfg (which i hate)17:40
evrardjpchandankumar: whether it's pip or not pip, you would need to keep track of versions, right?17:40
mnaserthere's a whole bunch of things i think we should move in-tree, like even the ansible runtime, and making the config path a configurable dir, ok ill shut up17:40
evrardjphow do you intent to do that?17:40
chandankumarevrardjp: yes17:40
mnaserbtw, what ansible.cfg changes are needed?17:41
evrardjpmnaser: you are right.17:41
evrardjpmnaser: technically to use config_template: none.17:41
chandankumarevrardjp: one was to dump in /usr/share/local/ansible using date files of python setup.py install17:41
* mnaser thinks you should be able to deploy openstack ansible from your laptop17:41
evrardjpI am using it without any changes in ansible.cfg in my project17:41
evrardjpmnaser: alleluiah17:41
evrardjppip install osa17:42
evrardjprun plays17:42
*** cshen has joined #openstack-ansible17:42
evrardjpboom17:42
jrossermy ansible.cfg is roles_path = ./roles17:42
chandankumarmnaser: the main thing is that is that if we want to consume any osa developed roles outside oSA how to do that17:42
*** miloa has quit IRC17:42
jrosserbingo17:42
evrardjpI should really show you my CLI... oh wait. I did17:42
evrardjpjrosser: haha17:42
evrardjpyou don't even need that17:42
evrardjpI am pretty sure it would work if you remove it.17:43
jrossermaybe so :)17:43
mnaserchandankumar: is there a packaging standard in tripleo right now for ansible roles?17:43
evrardjpmnaser: that's the right questions out there17:43
mnaserTBH if someone is gonna install a role from rpm17:43
evrardjphow do you deal with version resolution now17:43
mnaserwe should drop it in /etc/ansible/roles17:43
chandankumarmnaser: https://github.com/rdo-packages/ansible-role-tripleo-modify-image-distgit/blob/rpm-master/ansible-role-tripleo-modify-image.spec#L7017:43
evrardjpmnaser: that can be decided by the packaging17:44
evrardjp/usr/share is just as fine17:44
evrardjpor whatever17:44
evrardjpI dont' want to go into that debate17:44
evrardjp:p17:44
mnaserright but we have to provide something consumable17:44
evrardjpso17:44
* chandankumar needs to check whether ansible picks from /etc/ansible/roles17:44
evrardjpthe question is not where it's placed17:44
evrardjpthe question is how do you track versions17:44
mnaserit does by default evrardjp17:44
mnasererr chandankumar17:45
evrardjpand coinstallability17:45
mnaserevrardjp: we don't really care, thats a building tool problem17:45
mnaserand rdo has all the tooling to do make this happen17:45
mnaserthey coinstall things in their ci to make sure it works, etc17:45
mnaserits a downstream problem17:45
evrardjpok17:45
mnaserjust like how in openstack, we don't ever have pins for nova or whatever, we have upper constraints sure17:45
evrardjprequirements is doing that indeed17:46
mnaserbut one can assume our branches coinstall17:46
evrardjpso let me summarize what people have expressed here:17:46
chandankumarcloudnull: evrardjp: mnaser jrosser https://github.com/rdo-packages/ansible-role-tripleo-modify-image-distgit/blob/rpm-master/ansible-role-tripleo-modify-image.spec#L7017:46
chandankumarI want to avoid doing this part in runtime17:46
chandankumarsorry17:47
chandankumarthis link https://git.openstack.org/cgit/openstack/openstack-ansible-ops/tree/skydive/tests/functional.yml#n2917:47
evrardjpthe kolla model17:47
chandankumarmnaser: cloudnull evrardjp ^^17:47
evrardjppip installable into a known location17:47
evrardjpoh not even17:47
*** cshen has quit IRC17:47
evrardjpchandankumar: you can just add your roles into that ansible-role-requirements17:48
chandankumarmnaser: we need to care about both downstream as well as upstream as they are our consumers :-)17:48
mnaserevrardjp: that concept doesnt exist downstream17:48
mnaserno such thing as ansible-role-requirements17:49
mnaserthere is rpm requiremenets.17:49
mnaserand doing a yum install os_tempest will pull down config_template as a dependency17:49
chandankumarin rpm build just they need requires macros17:49
mnaseri imagine by us making this a thing, downstream rpm builders will easily consume it17:49
jrosserchandankumar: the ops repo is a really good example, becasue it allows OSA deployment with ansible version A and config_template version Y, then the ELK stack can be laid over the top with ansible version B and config_template version Z, all on the same host without trashing each other17:49
evrardjpmnaser: yes but the building of the spec is based on a branch and continuously builds, or not ?17:50
evrardjpdo we need to version things?17:50
mnaserpbr automatically versions things17:50
evrardjpI am all fine with rpm packaging and/or pip packaging17:50
chandankumarmnaser: I can solve rpm stuff what about if people installing from source17:50
mnaserok lets define installing from source17:50
mnaserare we talking adding the repo in a requirements.yaml ?17:50
evrardjpmnaser: so you would mean that they are installing rolex-17.0.0.r100 ?17:50
evrardjpnot rolex the brand, RoleY17:51
evrardjphahah17:51
mnaserevrardjp: yep, or git sha tag or whatever17:51
chandankumari think we can release stuff on pip with some version so that it should work with versions17:51
evrardjpmnaser: this is what I ask -- all of the above we can do -- I am just wondering what people need :)17:51
mnasermaybe we should ask ceph-ansible folks to chime in too17:51
mnaserre config_template17:51
evrardjpIf now the stance is "we tag roles" then we shall change release/17:51
evrardjpeven if we don't consume them17:52
chandankumarevrardjp: people are crazy they can anything who no developer ever expects :-) that would happen to his product17:52
chandankumar*do anything17:52
evrardjpthat's not what I am asking -- I am asking what is what the expectations, right now.17:52
evrardjpI cannot change things if I don't understand. would you be fine with just data files?17:53
evrardjpWhat would be the spec?17:53
evrardjpspecfile I mean17:53
chandankumarevrardjp: I just want this, git clone os_tempest python setup.py install and then include_role : os_tempest it should work that;s it17:54
chandankumarif it is solvable through data_files I am fine with that17:54
evrardjpchandankumar: git clone into the right location and it should just work?17:54
chandankumarthen we donot need to care meta/main.yaml deps17:55
chandankumarevrardjp: yes17:55
evrardjpchandankumar: so no code changes then :)17:55
mnasergit clone git://git.openstack.org/openstack/openstack-ansible-os_tempest /etc/ansible/role/os_tempest17:55
mnaserinclude_role: os_tempest17:55
mnaserBOOM: config_template is not defined17:55
evrardjp:D17:55
chandankumarevrardjp: basically python_veenv_build and config_template as used should work17:56
evrardjpI have the impression we are turning in circles here17:56
evrardjpso you said it, you want pip dependency resolution. That's what you want. And you will deal with the fallout and co installability.17:57
evrardjpok, so we can change setup.cfg to include the requirements over other roles, which will obviously be not met easily unless pass the right requirements.txt, correct?17:58
chandankumarevrardjp: yes basically pip install stufff, but pip takes cares of dependency as it looks for install_requires in setup.py or requorements.txt if we speically tell them17:58
chandankumarevrardjp: yes17:58
evrardjpso now the installation becomes pip install -r requirements.txt after git cloen17:58
evrardjpok what if I told you17:58
chandankumarmay be pip install -e takes cares of that17:58
evrardjppip install -e git+location17:59
evrardjppip install -e git+location  --src rolesfolder17:59
evrardjpso what you want is a different requirements.txt17:59
evrardjpcorrect?17:59
evrardjpit's not a setup.cfg anymore?17:59
evrardjp(you'll see we'll do a full round)17:59
evrardjpbare with me18:00
chandankumarevrardjp: setup.cfg is anyway needed to discovers the stuff at right path18:00
chandankumarevrardjp: I am thinking something like that release both python_Venv_build and config_template as a pip packae18:00
mnaserevrardjp: if requirements.txt includes config_template and python_venv_builder18:00
mnaserthen pip instsall os_tempest will install them too18:00
chandankumarthen add it to requirements then then pip install stufff, we are done18:01
evrardjpmnaser: it won't be able to resolve those names if they are not published into pypi, which means a requirements.txt is necessary18:01
chandankumarit will also help to no need to set /etc/<roles>/config templayes18:01
evrardjpmnaser: I am really trying to understand what people need18:01
mnaserthe whole point of what chandankumar is trying to accomplish is adding a requirements.txt18:01
chandankumarin ansible,cfg18:01
mnaserhe wants dependency management so running an install puts all the right roles in the right places.18:01
evrardjpok -- and the requirements.txt handling is done by?18:02
mnaserpip install18:02
mnaserpbr pulls the dependencies from requirements.txt18:02
evrardjpno I mean18:02
mnaserand automatically installs them18:02
evrardjpdo we own this file?18:02
evrardjpdo we manage the file*18:02
mnaserit would live in repo18:02
mnaseryes18:02
chandankumarpip install -e takes carew of that that18:02
evrardjpok so -- the change is, for you 1) setup.cfg to add config_template and role x of os_tempest, 2) add a requirements.txt that's unfrozen I guess, to point to a git location18:04
chandankumarevrardjp: yes!18:04
evrardjpchandankumar: ok so, when branching happens, you will maintain that code?18:04
chandankumarevrardjp: yes I can maintain18:04
evrardjpI mean that requirements.txt will need to point the egg to that branch18:05
evrardjpok18:05
mnaserso um18:05
mnaserchandankumar: question18:05
mnaserwhy cant we just18:05
chandankumarevrardjp: I will get the patches up tomorrow18:05
*** spatel has joined #openstack-ansible18:05
mnasergit clone, ansible-galaxy install -r requirements.yaml18:05
mnasersame thing but correct constructs and proper ecosystem18:05
evrardjpand the location for the cloning -- is that in setup.cfg data_files, or is that provided by the user?18:06
chandankumarmnaser: ansible-galaxy -r requriement never tried that18:06
evrardjpmnaser: that's my favorite choice btw, as I said above many times.18:06
mnaserchandankumar: we can migrate the tests/ansible-role-requirements.yaml to the root18:06
evrardjpchandankumar: I believe that's what we should do, have the right requirement file for the role.18:06
mnaserevrardjp: sorry i've had a long day so far :<18:06
evrardjpmnaser: oh I think mine is definitely longer :p18:07
evrardjpbut it;s no competition18:07
evrardjp:D18:07
guilhermespmine is longer! :P18:07
evrardjp ofc it is guilhermesp .18:07
* chandankumar is done for the day already18:08
evrardjpchandankumar: other people have asked pip installability without dependency resolution. I think we should think about that all together.18:08
chandankumarmnaser: evrardjp let me do one thing tomorrow, try putting -e <path to git repo in requirements.txt> and ansible-galaxxy install requirement tomorrow and let see hwat happens18:09
evrardjpmnaser: from that ^ decision, we should decide if we want to regularily release/tag our roles, and adapt releases.18:09
evrardjpchandankumar: tip: with your own galaxy file you can define the location of the role.18:09
evrardjpand it seems it's the same as the link you gave us18:10
evrardjpbut talking with leseb would be useful for syncing our practices for packaging if you want.18:10
chandankumarevrardjp: yes, let's try tomrrow we can come with solution18:11
mnaserchandankumar: sounds god18:11
chandankumarmnaser: evrardjp odyssey4me jrosser thanks for help :-)18:11
evrardjpyw18:12
mnasernp!18:12
evrardjpmnaser: please also see: https://review.openstack.org/#/c/637595/18:12
*** kopecmartin is now known as kopecmartin|off18:14
chandankumarevrardjp: mnaser https://review.openstack.org/633424 let's enable https://review.openstack.org/633424 gentoo with os_Tempest and make prometheanfire happy :-)18:14
chandankumarevrardjp: mnaser and this one also https://review.openstack.org/638557 :-)18:15
chandankumarsorry ignore second review18:15
* chandankumar is done for day18:15
*** chandankumar is now known as raukadah18:16
mkucia_Some kind of offline packaging would be nice18:24
mkucia_While publishing packages is nice for some people, for enterprise/commercial use cases packages will have to be built in-house from source anyway.18:25
*** sdake_ has quit IRC18:30
*** sdake has joined #openstack-ansible18:37
*** sdake has quit IRC18:46
*** sdake_ has joined #openstack-ansible18:46
*** partlycloudy has left #openstack-ansible18:48
*** partlycloudy has joined #openstack-ansible18:48
*** sdake_ has quit IRC18:50
*** sdake has joined #openstack-ansible18:52
*** sdake has quit IRC18:55
*** sdake_ has joined #openstack-ansible18:56
*** cyberpear has joined #openstack-ansible18:56
*** sdake_ has quit IRC18:56
jrossermnaser: I wonder if we should just propose a patch to heat adding a new var to unambiguously set what gets passed into instances as the external endpoint18:57
jrosserThere is already a few like that for other things18:58
*** sdake has joined #openstack-ansible18:58
*** sdake has quit IRC19:00
*** sdake_ has joined #openstack-ansible19:02
*** vollman has quit IRC19:04
*** markvoelker has joined #openstack-ansible19:04
*** sdake_ has quit IRC19:06
*** sdake has joined #openstack-ansible19:06
*** sdake has quit IRC19:10
*** sdake has joined #openstack-ansible19:12
*** nurdie_ has joined #openstack-ansible19:18
*** DanyC has joined #openstack-ansible19:18
*** hamzaachi has quit IRC19:20
*** nwonknu has quit IRC19:20
*** sdake has quit IRC19:20
*** partlycloudy has quit IRC19:20
*** nurdie has quit IRC19:20
*** DanyC_ has quit IRC19:20
*** partlycloudy has joined #openstack-ansible19:21
*** sdake_ has joined #openstack-ansible19:21
openstackgerritMerged openstack/openstack-ansible-galera_server master: Add gentoo support to galera_server  https://review.openstack.org/63338519:23
*** sdake_ has quit IRC19:25
*** nwonknu has joined #openstack-ansible19:27
*** sdake has joined #openstack-ansible19:27
*** sdake has quit IRC19:35
*** sdake_ has joined #openstack-ansible19:36
*** markvoelker has quit IRC19:38
cmarthowdy. I'm experiencing a network performance issue on my test cluster, curious if anyone has seen similar19:42
cmartbasically, north-to-south traffic (internet to instances) is very slow (a few hundred kbps), e.g. downloading files and running APT upgrades. uploads are about 10x faster (a few mbps) but still fairly slow.19:44
*** cshen has joined #openstack-ansible19:44
*** sdake_ has quit IRC19:45
cmartalso seeing the slowness issue with east-west traffic between instances on floating IPs, but not on fixed IPs.19:45
cloudnullcmart are you seeing a slowdown consistently within the instance ? and is all using l3 + routers?19:45
cmartyes, and yes19:45
cmartit's not affecting compute or infra hosts at all, only instances19:45
cmartand I think it's only affecting traffic transiting Neutron routers19:46
cmartI have 10 gbps physical interfaces everywhere19:46
cloudnullI've seen that before, which was caused by the underlying hardware19:46
cloudnullwe needed to use NICs that had vxlan offloading19:46
* cloudnull assuming you're using vxlan 19:46
*** sdake has joined #openstack-ansible19:46
cmartgot it. yes, using vxlan. we used to not have this problem, but that was over a year ago, and a couple of major OpenStack versions ago. this is on a new, clean Rocky install19:47
cloudnullsame hardware?19:47
cmartyes, though new kernel version19:47
cloudnullhum19:47
cmartso it could be some hardware/driver interaction :)19:48
cloudnullcould be19:48
cloudnullmaybe vxlan offloading is disbaled ?19:48
*** cshen has quit IRC19:48
jamesdentonit shouldnt be that slow, though19:49
jamesdentonbut with vxlan, may be worth checking the usual suspects.... mtu19:50
cloudnull^ the Dr. is in the house!19:50
cloudnulloh that could be too. ^19:50
jamesdentonone hand on keyboard and the other holding a baby. fairly useless at this point!19:50
cloudnullso a straw to the beer ?19:51
cloudnull:D19:51
cmartlol. Yes, ethtool shows `udp_tnl-segmentation` is on for physical interfaces19:51
jamesdentonif fixed ip is fast between instances on different computes, and vxlan is used, then that should rule out vxlan caveats19:51
cmart(I was also suspecting an MTU issue, though haven't changed it recently)19:51
jamesdentonit's all tied to the router? ie snat or floating ip?19:52
jamesdentoni would look at your infra node(s) hosting the router19:52
cmartyes, floating IPs. when I talk between two instances on their fixed IPs it approaches the physical link speed. when I talk on floating IPs it's super slow19:53
jamesdentontry rescheduling the router. also, which kernel version?19:53
jamesdentonwhat mtu are you running on the neutron net? 1450/1500?19:53
cmartfor the infra nodes, `4.4.0-142-generic #168-Ubuntu SMP`19:53
cmart(and compute nodes)19:53
cmartMTU on Neutron networks is 1500 on the "external" network (where floating IPs are assigned) and 1450 on the private network (where fixed IPs are allocated)19:54
cmart(on the switches it's probably over 9000 but could check)19:55
*** sdake has quit IRC19:55
cmarttesting inter-instance communication between two compute hosts now (the instances I was testing with before were both on the same compute host)19:55
jamesdentonyep, ok thats good. just making sure19:56
jamesdentonahh yeah line speed or higher would be expected on same node19:56
*** sdake has joined #openstack-ansible19:57
cmartyeah just realized mistake :!19:59
jamesdentonwhatcha find?19:59
cloudnulldo tell!19:59
jamesdentonhalf duplex 10/mbit?19:59
cmartno, I mean I realized that I wasn't testing across two compute hosts earlier19:59
jamesdentonahh ok19:59
cloudnullBNC for teh win!19:59
jamesdentonyou laugh, but i've seen auto-neg do stpuid things and 10/half manifests itself like this20:00
jamesdentoncmart what nic?20:00
jamesdentonor better yet, testing between the nodes themselves was OK?20:01
jamesdentoneven between the br-vxlan interfaces?20:01
cmartNICs look to be a mix of Intel X710 and Broadcom BCM5781020:02
jamesdentonand is there any chance you could create a private net of 'vlan' type to compare20:02
jamesdentongood ole 71020:02
cloudnullold glory!20:02
cmartyeah all but one infra host has the X710 :)20:02
cmartfor some reason20:02
jamesdentonis the router on the broadcom? lol20:02
cmartgood question20:03
jamesdentoni kid i kid20:03
*** sdake has quit IRC20:03
jamesdentonbut worth checking20:03
cmartalso to be clear this is a test cluster, not an emergency20:03
jamesdentontoday's test cluster, tomorrow's prod environment20:03
jamesdentoni'm afraid there's no easy answer here.20:05
cmartyep. this'll take me a few mins but looking into the aforementioned & will report back! thank you both20:10
jamesdentonsure thing20:11
*** DanyC has quit IRC20:17
*** DanyC has joined #openstack-ansible20:18
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: modify playbook inventory to make groups more specific  https://review.openstack.org/63166820:22
cloudnulltake care cmart20:22
*** nurdie_ has quit IRC20:23
*** nurdie has joined #openstack-ansible20:24
*** hamzaachi has joined #openstack-ansible20:27
openstackgerritMerged openstack/openstack-ansible-ops master: Ensure the default version of Java is set  https://review.openstack.org/63937820:27
*** vnogin has joined #openstack-ansible20:52
*** hamzaachi_ has joined #openstack-ansible20:52
*** hamzaachi_ has quit IRC20:52
*** hamzaachi_ has joined #openstack-ansible20:53
*** hamzaachi has quit IRC20:56
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/queens: Correct fernet token sync race condition  https://review.openstack.org/63923520:57
nicolasbockHi! I am trying to install an additional package into all lxc containers of an AIO. I am suspecting that I can do that here: https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/tasks/openstack_hosts_configure_zypper.yml#L7720:58
*** partlycloudy has left #openstack-ansible20:58
nicolasbockHowever, I need to add a repository for that package, which as far as I can tell is done here: https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/tasks/openstack_hosts_configure_zypper.yml#L8420:58
nicolasbockIn other words a few lines after the package is installed20:58
nicolasbockThat seems backwards20:58
nicolasbockBut of course I am probably just missing something :)20:59
nicolasbockCould someone point me to what I am missing?20:59
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Add Gentoo support to os_tempest  https://review.openstack.org/63342421:00
jrossernicolasbock: there seems to be an implication here https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/tasks/openstack_hosts_configure_apt.yml#L38 that you might need repo keys installed from packages first, in order to add further repos21:02
*** spsurya has quit IRC21:03
jrosserwhich would certainly be the case for this https://packages.ubuntu.com/search?keywords=ubuntu-cloud-keyring21:03
*** cmart has quit IRC21:03
nicolasbockFor zypper you can auto import the keys (https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/tasks/openstack_hosts_configure_zypper.yml#L93)21:04
nicolasbockNot saying this is the most secure approach21:04
nicolasbockBut it works :)21:04
jrosseri was working on this https://review.openstack.org/#/c/594160/21:04
nicolasbockThe issue I am running into though is that the package is not know to zypper because the repository hasn't been added yet21:04
*** partlycloudy has joined #openstack-ansible21:05
*** vnogin has quit IRC21:09
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/ocata: Correct fernet token sync race condition  https://review.openstack.org/63923721:10
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/pike: Correct fernet token sync race condition  https://review.openstack.org/63923621:12
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/rocky: Correct fernet token sync race condition  https://review.openstack.org/63923421:12
*** cmart has joined #openstack-ansible21:21
*** dxiri has quit IRC21:23
*** cmart has quit IRC21:29
*** cmart has joined #openstack-ansible21:29
*** ansmith has quit IRC21:31
*** markvoelker has joined #openstack-ansible21:35
*** partlycloudy has quit IRC21:37
spotznicolasbock: test with moving it before and then submit a patch? Though best thing would probably ping Markos don't see his nick online21:41
nicolasbockYes, I am doing that right now :)21:42
nicolasbockI'll ping Markos tomorrow morning21:42
nicolasbockThanks!21:42
*** markvoelker has quit IRC22:09
spotznicolasbock: NP:)22:14
*** sdake has joined #openstack-ansible22:28
*** hamzaachi_ has quit IRC22:29
*** sdake has quit IRC22:30
*** phasespace has joined #openstack-ansible22:32
*** sdake has joined #openstack-ansible22:32
*** dave-mccowan has quit IRC22:33
*** nurdie has quit IRC22:34
*** nurdie has joined #openstack-ansible22:35
*** nurdie has quit IRC22:39
*** sdake has quit IRC22:40
*** sdake_ has joined #openstack-ansible22:42
*** DanyC has quit IRC22:43
*** sdake_ has quit IRC22:45
*** DanyC has joined #openstack-ansible22:45
*** sdake has joined #openstack-ansible22:46
*** shananigans has quit IRC22:50
*** spatel has quit IRC22:54
*** sdake has quit IRC22:56
*** djhankb has quit IRC22:57
*** sdake has joined #openstack-ansible22:58
*** sdake has quit IRC23:00
*** sdake has joined #openstack-ansible23:02
*** sdake has quit IRC23:06
*** sdake_ has joined #openstack-ansible23:07
*** ansmith has joined #openstack-ansible23:09
*** sreejithp has quit IRC23:10
*** sdake_ has quit IRC23:10
*** sdake has joined #openstack-ansible23:11
*** dave-mccowan has joined #openstack-ansible23:20
*** sdake has quit IRC23:20
*** sdake has joined #openstack-ansible23:21
*** sdake has quit IRC23:25
*** sdake has joined #openstack-ansible23:27
*** sdake has quit IRC23:30
*** sdake has joined #openstack-ansible23:34
*** sdake has quit IRC23:35
*** sdake has joined #openstack-ansible23:37
*** sdake has quit IRC23:37
*** sdake has joined #openstack-ansible23:37
*** aedc has joined #openstack-ansible23:39
*** sdake has quit IRC23:40
*** sdake has joined #openstack-ansible23:42
*** nurdie has joined #openstack-ansible23:42
*** cshen has joined #openstack-ansible23:45
*** DanyC has quit IRC23:46
*** nurdie has quit IRC23:47
*** cshen has quit IRC23:49
*** sdake has quit IRC23:50
*** dcdamien has quit IRC23:52
*** sdake has joined #openstack-ansible23:53
*** sdake has quit IRC23:55
*** sdake has joined #openstack-ansible23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!