| *** ansmith has quit IRC | 00:37 | |
| *** goldenfri has quit IRC | 00:46 | |
| *** goldenfri has joined #openstack-ansible | 00:47 | |
| *** spatel has joined #openstack-ansible | 00:48 | |
| *** spatel has quit IRC | 01:26 | |
| *** BjoernT has quit IRC | 01:31 | |
| *** kplant has quit IRC | 01:46 | |
| *** spatel has joined #openstack-ansible | 01:50 | |
| spatel | in openstack_user_config.yml br-lbaas network type should be type: flat or raw ? | 01:50 |
|---|---|---|
| -spatel- - network: | 01:51 | |
| -spatel- container_bridge: br-lbaas | 01:51 | |
| -spatel- container_interface: eth14 | 01:51 | |
| -spatel- container_type: veth | 01:51 | |
| -spatel- group_binds: | 01:51 | |
| -spatel- - neutron_linuxbridge_agent | 01:51 | |
| -spatel- - octavia-worker | 01:51 | |
| -spatel- - octavia-housekeeping | 01:51 | |
| -spatel- - octavia-health-manager | 01:51 | |
| -spatel- host_bind_override: eth14 | 01:51 | |
| -spatel- ip_from_q: lbaas | 01:51 | |
| -spatel- net_name: lbaas | 01:51 | |
| -spatel- type: flat | 01:51 | |
| *** fnpanic has quit IRC | 02:08 | |
| *** aedc has quit IRC | 02:54 | |
| *** fyx has quit IRC | 03:18 | |
| *** mnaser has quit IRC | 03:19 | |
| *** fyx has joined #openstack-ansible | 03:19 | |
| *** mnaser has joined #openstack-ansible | 03:20 | |
| *** BjoernT has joined #openstack-ansible | 03:26 | |
| *** BjoernT has quit IRC | 03:31 | |
| *** BjoernT has joined #openstack-ansible | 03:35 | |
| *** spatel has quit IRC | 03:51 | |
| *** udesale has joined #openstack-ansible | 03:53 | |
| *** BjoernT has quit IRC | 04:18 | |
| *** ivve has joined #openstack-ansible | 05:04 | |
| *** Guest67924 has joined #openstack-ansible | 05:18 | |
| *** fghaas has joined #openstack-ansible | 05:29 | |
| *** pcaruana has joined #openstack-ansible | 05:56 | |
| *** pcaruana has quit IRC | 05:57 | |
| *** pcaruana has joined #openstack-ansible | 05:57 | |
| *** CeeMac has joined #openstack-ansible | 06:33 | |
| *** cshen has joined #openstack-ansible | 06:34 | |
| *** luksky has joined #openstack-ansible | 06:41 | |
| *** altlogbot_2 has quit IRC | 06:46 | |
| *** altlogbot_3 has joined #openstack-ansible | 06:49 | |
| *** altlogbot_3 has quit IRC | 06:50 | |
| evrardjp | good morning everyone | 06:52 |
| *** altlogbot_0 has joined #openstack-ansible | 06:55 | |
| *** tosky has joined #openstack-ansible | 07:28 | |
| jrosser | Morning | 07:29 |
| *** Emine has joined #openstack-ansible | 07:33 | |
| *** rgogunskiy has joined #openstack-ansible | 07:47 | |
| noonedeadpunk | yep, mornings:) | 07:49 |
| evrardjp | what happened in the last 5 days I was off? | 07:50 |
| evrardjp | jrosser: is the keystone fix you proposed backported to lower branches now? | 07:50 |
| noonedeadpunk | I'd say nothing super interesting | 07:50 |
| noonedeadpunk | not yet https://review.opendev.org/#/c/667201/ | 07:50 |
| evrardjp | do we need to backport to R for minor updates from Rocky.0.0 to latest rocky? | 07:53 |
| noonedeadpunk | evrardjp: I don't think we have smart sources in R.... | 07:55 |
| noonedeadpunk | and this problem was introduced with them | 07:55 |
| evrardjp | noonedeadpunk: I thought it was introduced in R | 07:56 |
| evrardjp | that's why :) | 07:56 |
| evrardjp | I have discussed that for so long! :D | 07:56 |
| evrardjp | sounds good then | 07:57 |
| noonedeadpunk | btw, evrardjp, probably you aware about include_vars. It seems, that it doesn't has scope, so if role A has in vars redhat-7.yml and role B has redhat.yml, and role A include/import role B, than in role B our with_first_found will include redhat-7 vars from A (as it's higher in the list). If redhat.yml is renamed to redhat-7.yml in B - than include will work in the correct way | 07:57 |
| evrardjp | noonedeadpunk: yeah it's been there forever, that's why I don't like include_role | 07:58 |
| evrardjp | I might even have reported a bug in ansible for that | 07:58 |
| evrardjp | I think the problem was with the dwim_relative function but it would be hard to refactor and untangle iirc | 07:59 |
| evrardjp | ofc the code has changed since then | 07:59 |
| evrardjp | noonedeadpunk: you want to propose simplification, that's what you mean? | 08:00 |
| evrardjp | I mean uniformity | 08:00 |
| evrardjp | to make sure things are always loaded the same way? | 08:00 |
| *** udesale has quit IRC | 08:01 | |
| evrardjp | the problem with that was for series with dual platform for the same os: for example bionic/xenial | 08:01 |
| evrardjp | in this case we can't rely on using "ubuntu" or "debian" at all | 08:01 |
| evrardjp | alternatively for those we can probably still use a single file and use a version inside a var nowadays | 08:02 |
| *** udesale has joined #openstack-ansible | 08:03 | |
| evrardjp | I mean that for those branches holding OS upgrades you need specific things, and for others you don't want specific things. | 08:03 |
| *** udesale has quit IRC | 08:03 | |
| *** udesale has joined #openstack-ansible | 08:03 | |
| noonedeadpunk | yeah, there's smth to think about.. I've just faced with that thing for the first time http://logs.openstack.org/29/666829/2/check/openstack-ansible-functional-centos-7/6295048/logs/ara-report/result/20c0dfcf-8355-452a-bd08-715cb54be9df/ | 08:06 |
| noonedeadpunk | And by far the only idea I had (which is not good at all) is somehow to use the similar approach in naming var failes in roles.... | 08:07 |
| evrardjp | noonedeadpunk: what I didn't recently test, is to trigger the include_vars with a variable itself recently, to see if it alters the behaviour . I expect not. | 08:07 |
| evrardjp | noonedeadpunk: In the past I forced the file to be present by giving an absolute filename it's ugly as hell | 08:08 |
| noonedeadpunk | yeah, and not as reliable I guess... | 08:08 |
| jrosser | evrardjp: looks like we are OK on rocky for the keystone, smart sources isnt there | 08:09 |
| evrardjp | jrosser: thanks for double checking | 08:09 |
| evrardjp | :) | 08:09 |
| evrardjp | noonedeadpunk: correct, we still go through the same codepath | 08:10 |
| evrardjp | but I think it's worth PoC-ing :) | 08:10 |
| *** Guest67924 has quit IRC | 08:10 | |
| *** peter has joined #openstack-ansible | 08:10 | |
| *** peter is now known as Guest79102 | 08:10 | |
| noonedeadpunk | I feel like there should be import_vars but it's not :D | 08:11 |
| evrardjp | ? | 08:12 |
| evrardjp | you mean being static? | 08:12 |
| evrardjp | I would expect if you add {{ role_path }}/vars as argument it helps | 08:13 |
| evrardjp | What I wanted to do too is to scope them using include_vars: name | 08:14 |
| evrardjp | that always ensures proper scoping | 08:14 |
| noonedeadpunk | and as a name use role name? | 08:16 |
| evrardjp | yup | 08:16 |
| evrardjp | {{ role_name }} is just convenient | 08:16 |
| evrardjp | but it complexifies the whole thing | 08:16 |
| evrardjp | now to get your var you have to do rolename[varname] | 08:17 |
| evrardjp | but the scope is very clear that way | 08:17 |
| noonedeadpunk | yeah, it's just a dict | 08:17 |
| noonedeadpunk | but it's prety interesting, as it's really becomes the way clearer. | 08:18 |
| noonedeadpunk | but it probably won't help with with_first_found, as the proper file just won't be included | 08:18 |
| evrardjp | it needs to be done with other things first :) | 08:19 |
| evrardjp | noonedeadpunk: A good thing we could also do is to fail fast if the included vars do not contain the role name | 08:20 |
| evrardjp | that would automtically catch ansible upgrade quirks | 08:20 |
| evrardjp | quirks with a change of include_vars behaviour I mean | 08:20 |
| *** fnpanic has joined #openstack-ansible | 08:20 | |
| fnpanic | hello | 08:21 |
| evrardjp | for that a simple assert that role_name is in ansible_included_var_files (We need to do string matching there, but you get the gist) | 08:22 |
| noonedeadpunk | so it seems that this idea has much more pros than cons | 08:22 |
| evrardjp | which one? | 08:22 |
| *** hamzaachi has joined #openstack-ansible | 08:22 | |
| noonedeadpunk | using name for includes. | 08:22 |
| noonedeadpunk | it makes thing more reliable | 08:22 |
| noonedeadpunk | and easier to investigate I think | 08:23 |
| evrardjp | not really, I think it's a zero sum game, as we can implement the things in a different way (for example, reliability using assertions) | 08:23 |
| evrardjp | I think it's easier for ppl to see the role in 6 month time with an "assert" rule that is clear about what it tests and with a little comment about why we introduced this | 08:24 |
| noonedeadpunk | if to consider amount of work to do.... | 08:24 |
| evrardjp | but it's not great in any case :) | 08:24 |
| evrardjp | noonedeadpunk: I would say the fastest work would be to make sure all the include_vars are relying on role_path and/or have an assert role to fail the role if the wrong var file was loaded | 08:25 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_trove master: Use keystone catalog to retrieve service endpoints https://review.opendev.org/667287 | 08:31 |
| evrardjp | hello fnpanic | 08:31 |
| jrosser | noonedeadpunk: ^ i had a stab at simplfying those not found vars out of trove as well | 08:32 |
| *** martinkennelly has joined #openstack-ansible | 08:45 | |
| openstackgerrit | Chandan Kumar (raukadah) proposed openstack/openstack-ansible-os_tempest master: Update the list of python3 packages https://review.opendev.org/661994 | 08:56 |
| *** Guest79102 has quit IRC | 09:04 | |
| *** yolanda has joined #openstack-ansible | 09:07 | |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-galera_server master: Fix galera_server installation for openSUSE Leap 15.1 https://review.opendev.org/666272 | 09:21 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_tempest master: Switch to openSUSE Leap 15.1 https://review.opendev.org/667302 | 09:25 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_neutron master: Switch to openSUSE Leap 15.1 https://review.opendev.org/667303 | 09:31 |
| *** vnogin has joined #openstack-ansible | 09:37 | |
| *** noonedeadpunk has quit IRC | 09:44 | |
| *** noonedeadpunk has joined #openstack-ansible | 09:46 | |
| mathlin_ | hello, i am trying to setup federation on rocky (have a working setup on newton) but seem to be hitting this https://bugs.launchpad.net/openstack-ansible/+bug/1805630/ does anyone know of a work around? | 09:48 |
| openstack | Launchpad bug 1805630 in openstack-ansible "Keystone install fail because it put node in maintenance and question it (503 unavailable)" [Undecided,New] | 09:48 |
| *** key-networks has joined #openstack-ansible | 10:15 | |
| *** flaviosr has quit IRC | 10:31 | |
| *** flaviosr has joined #openstack-ansible | 10:33 | |
| *** ansmith has joined #openstack-ansible | 10:40 | |
| *** ansmith has quit IRC | 10:46 | |
| *** gillesMo has joined #openstack-ansible | 10:57 | |
| *** gillesMo has quit IRC | 10:58 | |
| *** udesale has quit IRC | 11:06 | |
| *** udesale has joined #openstack-ansible | 11:08 | |
| *** vnogin has quit IRC | 11:10 | |
| *** cshen has quit IRC | 11:10 | |
| *** kplant has joined #openstack-ansible | 11:12 | |
| *** vnogin has joined #openstack-ansible | 11:15 | |
| *** cshen has joined #openstack-ansible | 11:19 | |
| *** fnpanic has quit IRC | 11:23 | |
| *** hwoarang has quit IRC | 11:29 | |
| *** hwoarang has joined #openstack-ansible | 11:30 | |
| *** gillesMo has joined #openstack-ansible | 11:41 | |
| *** key-networks has quit IRC | 11:49 | |
| *** jamesdenton has quit IRC | 11:54 | |
| *** spatel has joined #openstack-ansible | 11:55 | |
| ioni | hi spatel | 11:58 |
| ioni | spatel, did you manage to deploy DPDK with OSA? | 11:58 |
| *** luksky has quit IRC | 12:00 | |
| *** spatel has quit IRC | 12:00 | |
| gillesMo | Hello ! I'm just upgrading from Queens 17.1.9 to Rocky 18.1.7 and it fails with bug 1832727. Is there a simple fix U can try or do I have to restart upgrade with 18.1.6 ? | 12:07 |
| openstack | gillesMo: Error: Could not gather data from Launchpad for bug #1832727 (https://launchpad.net/bugs/1832727). The error has been logged | 12:07 |
| *** KurtB has joined #openstack-ansible | 12:09 | |
| *** hamzaachi has quit IRC | 12:14 | |
| *** spatel has joined #openstack-ansible | 12:15 | |
| spatel | Folk, when i am re-running infra playbook i got this error http://paste.openstack.org/show/753355/ | 12:16 |
| spatel | How do i tell its not upgrade? | 12:16 |
| spatel | Look like rebbitmq trying to upgrade and it failed | 12:17 |
| spatel | Do i need to set "rabbitmq_upgrade: false" in openstack_user_config.yml? | 12:22 |
| *** KurtB has quit IRC | 12:27 | |
| spatel | I meant user_variables.yml file | 12:28 |
| *** spatel has quit IRC | 12:30 | |
| *** fnpanic has joined #openstack-ansible | 12:32 | |
| *** KurtB has joined #openstack-ansible | 12:33 | |
| *** ansmith has joined #openstack-ansible | 12:34 | |
| *** KurtB has quit IRC | 12:40 | |
| *** martinkennelly has quit IRC | 12:43 | |
| guilhermesp | mornings... oh jrosser just saw the link of trove you pasted yesterday... so I think we don't need all of those endpoints anymore as everything could be fetched from keystone | 12:44 |
| jrosser | guilhermesp: I threw together a quick patch earlier to try changing it | 12:44 |
| guilhermesp | huuum let me find it | 12:45 |
| * guilhermesp found and looking | 12:45 | |
| guilhermesp | seems that we just have infra related issues ,isn't it? | 12:46 |
| jrosser | guilhermesp: I didn’t test that patch so quite likely needing some fiddling | 12:46 |
| guilhermesp | I can test it right now | 12:47 |
| jrosser | Oh cool I’m a bit stuck in meetings | 12:47 |
| guilhermesp | no worries! I will keep you updated | 12:47 |
| jrosser | Feel free to update it if you need to | 12:47 |
| guilhermesp | jrosser: ++ | 12:47 |
| *** KurtB has joined #openstack-ansible | 13:01 | |
| *** luksky has joined #openstack-ansible | 13:03 | |
| *** dave-mccowan has joined #openstack-ansible | 13:05 | |
| *** KurtB has quit IRC | 13:08 | |
| *** dave-mccowan has quit IRC | 13:18 | |
| *** hamzaachi has joined #openstack-ansible | 13:23 | |
| *** cshen_ has joined #openstack-ansible | 13:26 | |
| *** cshen has quit IRC | 13:29 | |
| *** vnogin has quit IRC | 13:31 | |
| *** dave-mccowan has joined #openstack-ansible | 13:31 | |
| *** BjoernT has joined #openstack-ansible | 13:37 | |
| *** openstackgerrit has quit IRC | 13:48 | |
| *** med_ has joined #openstack-ansible | 13:51 | |
| *** hamzaachi has quit IRC | 13:52 | |
| *** spatel has joined #openstack-ansible | 13:52 | |
| *** spatel has quit IRC | 13:52 | |
| *** spatel has joined #openstack-ansible | 13:54 | |
| *** aedc has joined #openstack-ansible | 14:01 | |
| *** aedc has quit IRC | 14:37 | |
| *** udesale has quit IRC | 14:55 | |
| spatel | Can someone help me here? http://paste.openstack.org/show/753366/ | 15:16 |
| spatel | I did set rabbitmq_upgrade: false in variables file | 15:17 |
| spatel | I am totally stuck here none of option working :( | 15:17 |
| spatel | If its BUG then happy to file it but want to make sure if you guys agreed. | 15:19 |
| spatel | lets see if it can help me openstack-ansible rabbitmq-install.yml -e 'rabbitmq_upgrade=false' | 15:26 |
| spatel | crap!!! still same error :( | 15:27 |
| spatel | filling BUG.. | 15:27 |
| spatel | Look like this is opened bug - https://bugs.launchpad.net/openstack-ansible/+bug/1830030 | 15:29 |
| openstack | Launchpad bug 1830030 in openstack-ansible "[Centos][rabbit upgrade] _rabbitmq_package_version is undefined" [Undecided,In progress] - Assigned to kourosh vivan (kourosh-vivan) | 15:29 |
| *** BjoernT_ has joined #openstack-ansible | 15:29 | |
| *** BjoernT has quit IRC | 15:30 | |
| jrosser | spatel: there is a fix for that by the look of it | 15:38 |
| spatel | I tried that but not working https://review.opendev.org/#/c/660713/2/tasks/rabbitmq_upgrade_check.yml | 15:38 |
| spatel | Now trying _rabbitmq_package_version: '' in /etc/ansible/roles/rabbitmq_server/vars/redhat.yml | 15:39 |
| *** Emine has quit IRC | 15:39 | |
| *** gshippey has joined #openstack-ansible | 15:46 | |
| *** cshen_ has quit IRC | 15:49 | |
| *** hamzy has quit IRC | 15:54 | |
| spatel | Solution is _rabbitmq_package_version: '' | 15:54 |
| spatel | I have comment in patch section to verify | 15:54 |
| admin0 | hi guys .. anyone knows where the data from openstack usage list is made | 15:55 |
| mnaser | #startmeeting openstack_ansible_meeting | 16:00 |
| *** luksky has quit IRC | 16:00 | |
| mnaser | #topic office hours | 16:00 |
| openstack | Meeting started Tue Jun 25 16:00:30 2019 UTC and is due to finish in 60 minutes. The chair is mnaser. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)" | 16:00 | |
| openstack | The meeting name has been set to 'openstack_ansible_meeting' | 16:00 |
| *** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)" | 16:00 | |
| mnaser | o/ | 16:00 |
| *** BjoernT has joined #openstack-ansible | 16:00 | |
| chandankumar | \o/ | 16:00 |
| mnaser | (sorry all, i've been knee deep in octavia... | 16:00 |
| mnaser | not a fun time | 16:00 |
| *** BjoernT_ has quit IRC | 16:02 | |
| guilhermesp | o/ | 16:02 |
| mnaser | so release stuf | 16:02 |
| evrardjp | o/ | 16:03 |
| *** udesale has joined #openstack-ansible | 16:03 | |
| *** rgogunskiy has quit IRC | 16:03 | |
| mnaser | so | 16:04 |
| mnaser | unfortunately the rc didnt go out? | 16:04 |
| mnaser | https://review.opendev.org/#/c/666721/ | 16:04 |
| mnaser | evrardjp: you removed the +w .. anything to note? | 16:04 |
| evrardjp | Nope it's convention I am not +w on release right now. It was a mistake I added the +w. | 16:05 |
| evrardjp | It's all good | 16:05 |
| *** noonedeadpunk[m] has joined #openstack-ansible | 16:05 | |
| noonedeadpunk[m] | o/ | 16:05 |
| evrardjp | thanks noonedeadpunk for stepping up and starting that work | 16:06 |
| noonedeadpunk | we've got serious fix from jrosser forkeystone... | 16:09 |
| mnaser | this feels never ending, but yes, that is quite serious | 16:10 |
| noonedeadpunk | I mean https://review.opendev.org/#/c/667201/ | 16:10 |
| mnaser | every deploy will destroy all your fernet tokens and credentials. | 16:10 |
| noonedeadpunk | and I think once we do release ppl will start their upgrades | 16:11 |
| evrardjp | mnaser: this is why we have multiple rcs :) | 16:11 |
| mnaser | well i guess we're going to get another one.. | 16:12 |
| *** noonedeadpunk_ has joined #openstack-ansible | 16:12 | |
| *** chandankumar is now known as raukadah | 16:13 | |
| noonedeadpunk | (however upgrade script missing things iirc, but we've decided to live with it until next minor version) | 16:13 |
| *** noonedeadpunk[m] has quit IRC | 16:13 | |
| *** noonedeadpunk_ has quit IRC | 16:13 | |
| mnaser | ok so do we feel okay after the keystone thing merges to do another one? | 16:16 |
| *** hamzaachi has joined #openstack-ansible | 16:17 | |
| evrardjp | i am fine with that | 16:18 |
| noonedeadpunk | ++ | 16:19 |
| noonedeadpunk | do we make another one rc, or just directly release with the fresh bump without rc? | 16:19 |
| guilhermesp | so is on they way https://review.opendev.org/#/c/667201/ noonedeadpunk has rehecked. Would be the case to just reckick to gate? | 16:20 |
| evrardjp | noonedeadpunk: we can do either | 16:21 |
| noonedeadpunk | Now there's some problem with infra I think - we're receiving retry limits for the patches | 16:21 |
| guilhermesp | yeah noonedeadpunk I've noticed this too | 16:22 |
| guilhermesp | and following up in #opentack-infra | 16:22 |
| logan- | o/ | 16:35 |
| mnaser | so i guess that's pretty much it | 16:35 |
| mnaser | for stein release | 16:35 |
| mnaser | lets try and get those landed and we ..should be ok | 16:35 |
| logan- | ++ | 16:35 |
| evrardjp | I have nothing to add, we can iterate later | 16:37 |
| evrardjp | (on that topic) | 16:37 |
| logan- | following on the keystone issue, I really question whether smart sources is a pattern we want to stick with. versioning configs on the target nodes doesn't make sense to me, that's what versioned config management is for. and the only way to do a "rollback" to a prior smart sources version is with a bunch of manual operator work; ansible will never use it. even if you check out the earlier tag and run playbooks, ansible is just going to | 16:37 |
| logan- | template a new config. | 16:37 |
| evrardjp | logan-: what do you propose? | 16:38 |
| logan- | we have a pretty straight forward way to back out the smart sources stuff thanks to jrosser's work. is there any reason we shouldn't apply this to all roles so we don't end up with a snowflake keystone role w/o smart sources and <everything else> with it | 16:38 |
| logan- | and then, of course, do we backport that to stein or do we convert everyone to smart sources for one release and then back it out in train? i'd lean towards backporting it to stein | 16:40 |
| evrardjp | mmm | 16:40 |
| evrardjp | my experience with "half baked" (I don't like calling this one like that, but bear with me) is that it was always a pain to deal after the fact, so reverting and backporting is better | 16:42 |
| evrardjp | but I am not sure what the problem is | 16:42 |
| mnaser | honestly | 16:43 |
| mnaser | i would be in favour of reverting all smart sources patches imho. | 16:43 |
| mnaser | its overly complex. and like i explained | 16:43 |
| mnaser | if you want to rollback, you would need to rollback your OSA version too | 16:43 |
| mnaser | and at that point, you'll get a template generated with the older template too | 16:43 |
| mnaser | so the end result is the same.. | 16:43 |
| logan- | ^ | 16:43 |
| logan- | yep | 16:43 |
| *** spatel has quit IRC | 16:44 | |
| mnaser | i'm in favour of that, but i'd like to hear what others think | 16:44 |
| evrardjp | just to know what we want to really revert -- is the location, or the fact it's from upstream files? | 16:46 |
| mnaser | to me the problem that we had was: we maintained a copy of files that were not very dynamic in nature | 16:47 |
| mnaser | like rootwrap config, policy, etc | 16:47 |
| mnaser | that we always were out of sync | 16:47 |
| evrardjp | I am asking that because we'll have to have bump tools in repos now | 16:47 |
| evrardjp | so we are at a state where things need to happen in repo regularily anyway | 16:48 |
| mnaser | the solution would be to grab those 'static' files from the repo, use "our" overrides, throw them in /etc/$service | 16:48 |
| evrardjp | (but not in the backported branches) | 16:48 |
| logan- | pretty much everything has moved to policy in code so smart sources doesn't have any bearing on that anymore afaik | 16:48 |
| mnaser | logan-: rootwrap rules | 16:49 |
| mnaser | but we can still work around those or do a simple cp when venv changes.. | 16:49 |
| logan- | mnaser: gotcha yep | 16:49 |
| evrardjp | logan-: correct, but the policy in code is not the hardest things to maintain | 16:49 |
| mnaser | i mean | 16:49 |
| mnaser | we dont allow overriding rootwrap rules anyways | 16:49 |
| mnaser | so it can just be a task to do a sync with remote_src | 16:49 |
| logan- | yep | 16:50 |
| evrardjp | I think it makes sense for me to continue shipping things in the role if it's easier and remove some tasks | 16:50 |
| evrardjp | because we'll need to have a tooling for taking care of those | 16:50 |
| mnaser | evrardjp: so you're saying we continue to maintain a copy inside rather than just cp-ing it from the pkg? | 16:51 |
| logan- | i don't mind consuming them from the venv, but we can do it a lot simpler as mnaser by using copy + remote_src when a venv is deployed | 16:51 |
| mnaser | i rather maintain tasks that sync these things than maintain jobs and tooling (and responsibility) of syncing them | 16:51 |
| evrardjp | mnaser: I am saying that the door is opened to anything | 16:52 |
| admin0 | guys .. where do i get data to bill projects in openstack .. is data from openstack usage list reliable | 16:52 |
| admin0 | or if anyone is selling cloud .. how do you generate billing stuff | 16:52 |
| mnaser | admin0: hire people and write code :) | 16:52 |
| mnaser | we're in an OSA meeting fyi :) | 16:52 |
| admin0 | oops .. sorry | 16:52 |
| evrardjp | logan-: I am fine with that | 16:52 |
| mnaser | jrosser: noonedeadpunk guilhermesp .. thoughts ? | 16:52 |
| admin0 | they hired me to write code .. i need directions :D | 16:52 |
| evrardjp | since we have that in the venv | 16:52 |
| *** aedc has joined #openstack-ansible | 16:53 | |
| evrardjp | if it's not shipped as data files, I suppose we extend the pattern, and we are good | 16:53 |
| evrardjp | packagers gonna hate us but it's fine, we did that in the past already :) | 16:53 |
| evrardjp | so to summarize: remove smart sources, copy files from venv | 16:54 |
| evrardjp | (for those who aren't to customize) | 16:54 |
| *** hamzaachi has quit IRC | 16:55 | |
| evrardjp | is that what you are proposing logan-? | 16:55 |
| logan- | yes that makes sense to me | 16:55 |
| evrardjp | fine for me too | 16:55 |
| *** hamzaachi has joined #openstack-ansible | 16:56 | |
| noonedeadpunk | I think that there might be more files, than just rootwrap and policies | 16:57 |
| noonedeadpunk | It was the case for the ceilometer at least | 16:57 |
| evrardjp | yes the paste files for example | 16:57 |
| evrardjp | and heat stuff iirc | 16:58 |
| logan- | noonedeadpunk: yeah, i'm thinking we could make a common task file like we do for db/rabbit which knows how to copy a list of files defined in the role from the venv into somewhere on the system | 16:58 |
| guilhermesp | I'm only concerning to the fact we keep those static files out of sync | 16:58 |
| noonedeadpunk | I thought we decided to take them from venv, so they are not static, are they? | 16:59 |
| evrardjp | guilhermesp: well, if those aren't from the data files of the venv, then we need to carry them. And maintain them. I suppose a bump script would beed to happen then | 16:59 |
| evrardjp | noonedeadpunk: maybe not everything is shipped in the venv | 16:59 |
| evrardjp | (to be verified) | 16:59 |
| noonedeadpunk | yep, not everything for sure | 16:59 |
| logan- | then it is probably out of scope in the context of a smart sources revert right? | 16:59 |
| evrardjp | well the smart sources did a bunch of things | 17:00 |
| noonedeadpunk | And I have concerns about backporting reverts to stein... Isn't it too late for this? | 17:00 |
| evrardjp | I am fine for that tbh. If it's bugged... | 17:01 |
| evrardjp | logan-: I meant that the revert of the smart sources should be smart and thought of. Not blindly revert all the patches in that topic | 17:01 |
| *** rgogunskiy has joined #openstack-ansible | 17:01 | |
| logan- | evrardjp: yeah a straight revert is not possible because we already rm -rf the /etc/<service> | 17:02 |
| evrardjp | yeah, on top of that :) | 17:02 |
| logan- | right | 17:02 |
| evrardjp | but I mean that leveraging the data_files from the venv and the fact to not carry (but template) the policy files are good. | 17:02 |
| evrardjp | as far as I can see, all the files we care about are in date_files | 17:03 |
| evrardjp | data files | 17:03 |
| evrardjp | except ceilometer so it seems | 17:05 |
| evrardjp | oh no ceilometer seems fine too | 17:05 |
| *** rgogunskiy has quit IRC | 17:06 | |
| evrardjp | I am off now | 17:07 |
| *** udesale has quit IRC | 17:07 | |
| evrardjp | I just wanted to add the fact I didn't progress as I would like on the OSA jobs using the integrated, but it's looking slowly better | 17:07 |
| evrardjp | I will need some help on distro packages stuff | 17:08 |
| evrardjp | and my other topic for today was 42.3 removal, and 15.0 to 15.1 move, which are both in progress | 17:08 |
| noonedeadpunk | evrardjp: do you have the list of roles that are missing distro installs? | 17:09 |
| noonedeadpunk | btw, don't we want to add bionic distro install for integrated checks (non voting) and work on it? | 17:09 |
| logan- | noonedeadpunk: i think we did that at one point but no one worked on it so it got removed | 17:10 |
| *** raukadah is now known as chandankumar | 17:11 | |
| noonedeadpunk | I'll try to spend some of my free time for that, I think then... | 17:12 |
| *** hamzy has joined #openstack-ansible | 17:12 | |
| evrardjp | correct that's experimental. But I would like to be consistent everywhere, so it's easier to understand, and expectations are consistent | 17:12 |
| *** chandankumar is now known as raukadah | 17:13 | |
| logan- | ah yeah I think it got moved from nv check pipeline to the experimental pipeline. so to poke at it you should be able to 'check experimental' in a patch and it will run the job | 17:13 |
| noonedeadpunk | oh, great. | 17:14 |
| evrardjp | noonedeadpunk: https://docs.google.com/spreadsheets/d/1coiPHGqaIKNgCGYsNhEgzswqwp4wedm2XoBCN9WMosY/edit#gid=752070695 should also help | 17:14 |
| evrardjp | see what's red | 17:14 |
| * noonedeadpunk should finally save this link to some reliable place | 17:15 | |
| mnaser | #endmeeting | 17:15 |
| *** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: http://bit.ly/2xA1eZC" | 17:15 | |
| openstack | Meeting ended Tue Jun 25 17:15:28 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 17:15 |
| noonedeadpunk | logan-: yep, thanks | 17:15 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-06-25-16.00.html | 17:15 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-06-25-16.00.txt | 17:15 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-06-25-16.00.log.html | 17:15 |
| mnaser | (we can keep discussing) | 17:15 |
| mnaser | does anyone feel like picking up the task (or at least establishing the pattern) for getting these files from the base? | 17:15 |
| logan- | yes | 17:16 |
| logan- | i will hack on it | 17:16 |
| noonedeadpunk | sorry need to run away:( | 17:16 |
| guilhermesp | so to summarize, the decision was: keep copies of the files from venvs | 17:17 |
| logan- | i'll work out a proposed pattern that we can discuss in the next meeting | 17:17 |
| logan- | admin0: following up on your earlier question about billing, it really depends a lot on the use case. hostbill and whmcs have modules for openstack, but both of those are geared toward a hosting reseller type scenario. cloudkitty is an openstack project that does rating (not billing), which your billing system could consume usage data from. but it seems like a lot of places roll their own. we integrated openstack billing into our existing | 17:28 |
| logan- | system by building a service that watches the rabbit notification queues that the openstack services emit events to. | 17:28 |
| mnaser | logan-: i would say not wait one week but if you have some poc-y thing, we can do it in the review | 17:42 |
| *** vnogin has joined #openstack-ansible | 17:58 | |
| *** vnogin has quit IRC | 18:02 | |
| logan- | mnaser: yep, will do | 18:11 |
| *** spatel has joined #openstack-ansible | 18:25 | |
| spatel | what is octavia_management_net_subnet_allocation_pools: ? | 18:26 |
| spatel | where it will get used ? | 18:26 |
| spatel | does it used by container ? | 18:27 |
| spatel | oh wait is this for amphora vm ? | 18:31 |
| guilhermesp | huum jrosser seems that now we have a circular dependency between https://review.opendev.org/#/c/665458/ and https://review.opendev.org/#/c/667287/ | 18:47 |
| *** hamzaachi has quit IRC | 18:48 | |
| guilhermesp | afik one of the ways to get rid of the circular dependency is to, for one of the patches, set jobs to non-voting so we can merge the change and then recheck the other one. But seems quite problematic now to do it so | 18:49 |
| guilhermesp | I'd try to merge that one https://review.opendev.org/#/c/665458/ to be able to recheck that one https://review.opendev.org/#/c/667287/ | 18:49 |
| guilhermesp | just wondering how would I do that now | 18:49 |
| jrosser | guilhermesp: do you want to squash them together? The trove role is a bit needing TLC anyway | 18:49 |
| *** ianychoi_ has quit IRC | 18:49 | |
| guilhermesp | like put one on top of another? | 18:50 |
| *** ianychoi_ has joined #openstack-ansible | 18:50 | |
| jrosser | If they’re totally dependant put them together in one commit | 18:50 |
| jrosser | We could have a cleanup | 18:51 |
| jrosser | Patch for all this stuff | 18:51 |
| * jrosser phonetyping | 18:51 | |
| guilhermesp | seems a good way to simpify things | 18:51 |
| guilhermesp | I'd abandon https://review.opendev.org/#/c/665458/ and copy all the content to https://review.opendev.org/#/c/667287/ | 18:52 |
| guilhermesp | soudns good to you? | 18:52 |
| jrosser | Yes, and we update the commit message to explain why it’s all in together | 18:52 |
| guilhermesp | ok | 18:53 |
| guilhermesp | will do that | 18:53 |
| *** luksky has joined #openstack-ansible | 18:53 | |
| *** aedc has quit IRC | 18:54 | |
| *** openstackgerrit has joined #openstack-ansible | 19:00 | |
| openstackgerrit | Guilherme Steinmuller Pimentel proposed openstack/openstack-ansible-os_trove master: Use keystone catalog and fix looking up and storing admin tenant id https://review.opendev.org/667287 | 19:00 |
| guilhermesp | jrosser: I think that pretty much what we need to do ^ | 19:01 |
| spatel | my playbook is failing during octavia installation.. i have question do i need br-lbaas bridge on compute nodes ? | 19:02 |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone stable/stein: Fix loss of fernet and credential keys during Rocky to Stein upgrade https://review.opendev.org/667201 | 19:19 |
| *** jsquare has quit IRC | 19:22 | |
| *** jsquare has joined #openstack-ansible | 19:22 | |
| *** pcaruana has quit IRC | 19:38 | |
| *** tosky has quit IRC | 19:40 | |
| spatel | look like its bug here CentOS doesn't have service iptables save command by default https://github.com/openstack/openstack-ansible-os_octavia/blob/master/tasks/octavia_post_install.yml#L32 | 19:42 |
| *** kplant has quit IRC | 19:46 | |
| *** rgogunskiy has joined #openstack-ansible | 19:47 | |
| *** rgogunskiy has quit IRC | 19:50 | |
| *** snadge has quit IRC | 19:51 | |
| *** snadge has joined #openstack-ansible | 19:57 | |
| guilhermesp | jrosser: watching it in zuul and seems that some jobs are already passing :) https://review.opendev.org/#/c/667287/ | 20:13 |
| openstackgerrit | Guilherme Steinmuller Pimentel proposed openstack/openstack-ansible-os_trove master: db_setup: refactor database setup to a common file https://review.opendev.org/665741 | 20:15 |
| *** Guest79102 has joined #openstack-ansible | 20:17 | |
| goldenfri | guilhermesp: Do you have a minute to help me troubleshoot at work around to this bug? https://bugs.launchpad.net/openstack-ansible/+bug/1807346 | 20:22 |
| openstack | Launchpad bug 1807346 in openstack-ansible "[heat] Installations fails during Update Q->R" [Undecided,New] - Assigned to Guilherme Steinmuller Pimentel (guilhermesp) | 20:22 |
| *** ohwhyosa- has quit IRC | 20:24 | |
| *** ivve has quit IRC | 20:24 | |
| jrosser | guilhermesp: that’s excellent! | 20:25 |
| goldenfri | Well if anyone can help, I applied the patches mentioned in the bug report and Added a blank project, but I am still getting this error: http://paste.openstack.org/show/753399/ | 20:27 |
| guilhermesp | goldenfri: I think we have fixed that for a while. Let me see if I can find the patch | 20:27 |
| goldenfri | I applied these patches: https://github.com/ansible/ansible/pull/42899/files | 20:28 |
| goldenfri | Oh and also this one: https://github.com/ansible/ansible/pull/42913/files | 20:30 |
| guilhermesp | have you tried this ? https://review.opendev.org/#/c/636630/ | 20:30 |
| goldenfri | oh no I haven't seen that one, let me try it out, Thanks! | 20:31 |
| guilhermesp | ok let me know, because if it is the case, we needed to add Closes-bug. But I will wait your response in order to see if fits to the bug and then close it | 20:32 |
| *** hamzy has quit IRC | 20:33 | |
| goldenfri | guilhermesp: I still have the same problem, I was actually doing something similar by adding the blank project. | 20:35 |
| guilhermesp | jrosser: or any other core mind +w https://review.opendev.org/#/c/667287/2 ? | 20:35 |
| guilhermesp | so goldenfri what error exactly are you facing? | 20:36 |
| goldenfri | http://paste.openstack.org/show/753399/ | 20:36 |
| guilhermesp | so this happens in "os_heat : Add service user to roles" task? | 20:37 |
| goldenfri | yes | 20:37 |
| jrosser | Hmm I guess that needs a review from someone else really - appreciate your time there guilhermesp on fixing trove | 20:37 |
| goldenfri | It does the first 3 ok and fails on the last one, this is a rocky install and as soon as I add multi-domain I have this problem | 20:38 |
| guilhermesp | ahhh yeah makes sense, you're the owner of the patch hhehehe jrosser no worries, my pleasure! | 20:38 |
| *** ansmith has quit IRC | 20:38 | |
| guilhermesp | goldenfri: didn't understand at all: it does the first 3 ok? | 20:43 |
| goldenfri | guilhermesp: sorry I should be more clear: It does the first 3 elements of the task: http://paste.openstack.org/show/753400/ | 20:45 |
| guilhermesp | so goldenfri are you able to do what the tasks does manually? I mean, that would be the case to reproduce manually and see what is going on | 20:47 |
| goldenfri | Is there an easy way to figure out how to do this manually, I'm not well versed enough in ansible yet to be able to reverse engineer this. :-/ | 20:48 |
| *** ianychoi_ has quit IRC | 20:59 | |
| *** ianychoi_ has joined #openstack-ansible | 21:00 | |
| *** ianychoi_ has quit IRC | 21:05 | |
| *** ianychoi_ has joined #openstack-ansible | 21:09 | |
| guilhermesp | goldenfri: I'd see what the task do, then I'd use the variables it uses to try to do manually what the task is meant to do | 21:17 |
| *** openstackgerrit has quit IRC | 21:18 | |
| *** ianychoi_ is now known as ianychoi | 21:18 | |
| guilhermesp | I can try to have an extra look at it, time is something difficult to have sometimes :P | 21:18 |
| *** aedc has joined #openstack-ansible | 21:20 | |
| spatel | I have ceph storage running outside openstack and now i want to integrate my glance with that ceph storage which playbook i should be using | 21:33 |
| spatel | ceph_client is there but how do i push out ceph key etc? | 21:33 |
| spatel | should i be using these variables? https://docs.openstack.org/openstack-ansible-ceph_client/queens/ | 21:34 |
| *** aedc has quit IRC | 21:37 | |
| spatel | anybody here :) | 21:41 |
| spatel | look like talking to myself.. haha | 21:42 |
| spatel | somehow this community is very silent these day.. | 21:42 |
| spatel | missing cloudnull :( | 21:43 |
| *** Emine has joined #openstack-ansible | 21:45 | |
| *** tobberydberg has quit IRC | 21:49 | |
| *** crazzy has quit IRC | 21:50 | |
| *** fnpanic has quit IRC | 21:50 | |
| *** rgogunskiy has joined #openstack-ansible | 21:51 | |
| *** tobberydberg has joined #openstack-ansible | 21:51 | |
| *** crazzy has joined #openstack-ansible | 21:51 | |
| BjoernT | The ceph keys will be automatically downloaded once you configure the ceph_mons group | 21:53 |
| *** rgogunskiy has quit IRC | 21:55 | |
| BjoernT | https://pastebin.com/CbBvZqYp would be a common configuration to get the ceph client role going | 21:55 |
| spatel | BjoernT: thanks for reply, this is what i have http://paste.openstack.org/show/753401/ | 21:58 |
| BjoernT | next time dont post the fsid, lol | 22:00 |
| spatel | BjoernT: getting this error when trying to deploy ceph client to one of container http://paste.openstack.org/show/753402/ | 22:00 |
| spatel | i thought fsid is just uniq identifier | 22:01 |
| spatel | that playbook did nothing | 22:02 |
| spatel | BjoernT: i think i have same config which you provided.. am i missing something? | 22:04 |
| BjoernT | its not the playbook for client install it installs the server which needs specific configurations | 22:04 |
| BjoernT | os-glance-install would rollout the client | 22:04 |
| spatel | I didn't specify ceph_mon in openstack_user_config.yml ( i don't think we need that too) | 22:05 |
| spatel | oh.. let me run | 22:05 |
| BjoernT | if you want to install the client only then yes you only need ceph_mons override and run os-glance-install.yml | 22:05 |
| spatel | running os-glance-install.yml playbook | 22:06 |
| spatel | figures cross.. | 22:06 |
| spatel | fingers cross | 22:06 |
| BjoernT | lol | 22:06 |
| *** Emine has quit IRC | 22:07 | |
| spatel | too much excitement | 22:07 |
| spatel | I have Octavia question if you help me out :) | 22:08 |
| spatel | if you look here https://pastebin.com/v8yCDsfe | 22:09 |
| BjoernT | I'll be offline soon but back tomorrow (CST time zone) | 22:09 |
| spatel | is type: flat is correct or i should use raw? | 22:09 |
| spatel | BjoernT: sure.. i will talk to you tomorrow.. thanks for hint | 22:10 |
| spatel | BjoernT: i can see its installing some ceph stuff.. look like progress | 22:10 |
| spatel | TASK [ceph_client : Verify Ceph monitors are up] | 22:10 |
| BjoernT | yes br-lbaas is only needed for the management networks where you reserve few IPs for the gateway and containers and it will be added to neutron by the playbooks but you can pre configure it | 22:11 |
| BjoernT | host_bind_override: eth14 is not needed | 22:12 |
| spatel | hmm so type: flat is correct? | 22:12 |
| BjoernT | that depends on how br-lbaas is setup, I have raw for example as I added it via veth into a br-vlan bridge. But I actually route the lbass network over internal switches now so I dont need to add the containers into that network | 22:20 |
| *** BjoernT has quit IRC | 22:23 | |
| *** luksky has quit IRC | 22:34 | |
| *** spatel has quit IRC | 22:38 | |
| *** weifan has joined #openstack-ansible | 22:55 | |
| *** weifan has quit IRC | 23:29 | |
| *** weifan has joined #openstack-ansible | 23:29 | |
| *** weifan has quit IRC | 23:29 | |
| cyberpear | any idea how good the Ubuntu 16.04 STIG V1R2 coverage is in the ansible-hardening role? (I couldn't find it in the docs) | 23:32 |
| *** ansmith has joined #openstack-ansible | 23:47 | |
| *** Guest79102 has quit IRC | 23:49 | |
| *** kplant has joined #openstack-ansible | 23:59 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!