| *** hamzy has joined #openstack-ansible | 00:38 | |
| openstackgerrit | Merged openstack/openstack-ansible master: Fix octaiva amphora ram variable name https://review.opendev.org/667809 | 00:59 |
|---|---|---|
| openstackgerrit | Merged openstack/openstack-ansible master: Restrict the number of sahara processes and threads in AIO https://review.opendev.org/668019 | 00:59 |
| openstackgerrit | Merged openstack/openstack-ansible master: ceph: stop adding repos https://review.opendev.org/661186 | 01:12 |
| openstackgerrit | chenker proposed openstack/openstack-ansible-os_zun master: Switch to the new canonical constraints URL on master https://review.opendev.org/666564 | 01:45 |
| *** CeeMac has quit IRC | 02:28 | |
| *** schwicht has joined #openstack-ansible | 02:47 | |
| *** schwicht has quit IRC | 03:10 | |
| *** schwicht has joined #openstack-ansible | 03:33 | |
| *** raukadah is now known as chandankumar | 03:37 | |
| *** schwicht has quit IRC | 03:38 | |
| *** schwicht has joined #openstack-ansible | 04:21 | |
| *** udesale has joined #openstack-ansible | 04:24 | |
| *** schwicht has quit IRC | 04:31 | |
| *** pcaruana has joined #openstack-ansible | 04:36 | |
| *** hwoarang has quit IRC | 05:16 | |
| *** hwoarang has joined #openstack-ansible | 05:19 | |
| *** ivve has quit IRC | 05:43 | |
| *** luksky has joined #openstack-ansible | 05:45 | |
| *** jbadiapa has quit IRC | 05:46 | |
| *** gkadam has joined #openstack-ansible | 05:50 | |
| *** schwicht has joined #openstack-ansible | 05:55 | |
| *** schwicht has quit IRC | 06:00 | |
| *** schwicht has joined #openstack-ansible | 06:15 | |
| *** gkadam has quit IRC | 06:17 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova master: Switch to openSUSE Leap 15.1 https://review.opendev.org/666062 | 06:22 |
| *** ivve has joined #openstack-ansible | 06:22 | |
| *** kopecmartin|off is now known as kopecmartin | 06:24 | |
| *** cshen has joined #openstack-ansible | 06:26 | |
| *** gkadam has joined #openstack-ansible | 06:44 | |
| *** csmart has quit IRC | 06:52 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_ironic master: Add integrated coverage https://review.opendev.org/660083 | 06:57 |
| *** csmart has joined #openstack-ansible | 06:59 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible master: Bump SHAs for master https://review.opendev.org/665541 | 07:00 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible master: Restrict the number of octavia processes and threads in AIO https://review.opendev.org/667941 | 07:01 |
| *** jbadiapa has joined #openstack-ansible | 07:04 | |
| evrardjp | noonedeadpunk: Not sure what you meant | 07:07 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia master: Add support for using distribution packages for OpenStack services https://review.opendev.org/652049 | 07:11 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/665600 | 07:17 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible stable/stein: Reduce the RAM allocation for the octavia amphora flavor in AIO/CI https://review.opendev.org/667789 | 07:18 |
| *** schwicht has quit IRC | 07:18 | |
| evrardjp | jrosser: wow distro packages support | 07:21 |
| jrosser | Yeah looks like someone did a bunch of work there for Octavia so I thought I’d try to move it along | 07:23 |
| evrardjp | yeah that's very nice | 07:24 |
| evrardjp | I am marking this in my map | 07:24 |
| evrardjp | ironic, octavia, trove and zune, tacker are missing those | 07:25 |
| *** tosky has joined #openstack-ansible | 07:25 | |
| evrardjp | and congress | 07:26 |
| evrardjp | if we focus on ironic and octavia, it would be already a good win (not the one who gives points) | 07:27 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia master: [WIP] Add SUSE support https://review.opendev.org/660367 | 07:41 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_mistral master: Use the dynamic aio scenario https://review.opendev.org/658448 | 07:44 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_tempest master: Update distro package names for openSUSE Leap 15.1 https://review.opendev.org/667302 | 07:46 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_tempest master: Update distro package names for openSUSE Leap 15.1 https://review.opendev.org/667302 | 07:46 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_cinder master: Install openSUSE distro packages selectively. https://review.opendev.org/668056 | 07:52 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_keystone master: Update distro package names for openSUSE Leap 15.1 https://review.opendev.org/668057 | 07:58 |
| *** CeeMac has joined #openstack-ansible | 07:58 | |
| CeeMac | Morning | 07:58 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_heat master: Tidy distro package lists for openSUSE Leap 15.1 https://review.opendev.org/668055 | 08:01 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_glance master: Update distro package names for openSUSE Leap 15.1 https://review.opendev.org/668058 | 08:04 |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone master: db_setup: refactor database setup to a common file https://review.opendev.org/657036 | 08:04 |
| *** Emine has joined #openstack-ansible | 08:08 | |
| *** flaviosr_ has joined #openstack-ansible | 08:11 | |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_neutron master: Remove ovs-nsh repo for openSUSE packages https://review.opendev.org/667303 | 08:11 |
| *** flaviosr has quit IRC | 08:15 | |
| *** sum12 has joined #openstack-ansible | 08:17 | |
| evrardjp | dirk: I said jrosser you wouldn't mind if he updates your patch with little details . ^ | 08:18 |
| *** rgogunskiy has joined #openstack-ansible | 08:28 | |
| *** noonedeadpunk has joined #openstack-ansible | 08:33 | |
| *** noonedeadpunk has left #openstack-ansible | 08:34 | |
| *** noonedeadpunk has joined #openstack-ansible | 08:37 | |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_keystone master: Update distro package names for openSUSE Leap 15.1 https://review.opendev.org/668057 | 08:42 |
| ChosSimbaOne | Morning. So quick question. If i setup my openstack wth an existing ceph cluster, is there any need to configure the br-storage on infrastructure and compute nodes? | 08:46 |
| ChosSimbaOne | Morning. So quick question. If i setup my openstack wth an existing ceph cluster, is there any need to configure the br-storage on infrastructure and compute nodes? | 08:46 |
| *** schwicht has joined #openstack-ansible | 08:47 | |
| noonedeadpunk | ChosSimbaOne: Sure, since cinder needs to access your ceph storage and manage rbd | 08:48 |
| noonedeadpunk | and your instances needs to have access to ceph as well (it's for compute nodes) | 08:49 |
| ChosSimbaOne | sorry for double post. spotty wifi. | 08:51 |
| noonedeadpunk | ofc if you're using IB and not able to create bridge (since ipoib works on l3 and bridge on l2), you may do a trick and use sr-iov w/o bridges | 08:52 |
| *** schwicht has quit IRC | 08:52 | |
| noonedeadpunk | *br-storage | 08:52 |
| *** noonedeadpunk[m] has joined #openstack-ansible | 08:52 | |
| noonedeadpunk | but if you don't have such limitations, build bridges :) | 08:54 |
| *** noonedeadpunk[m] has quit IRC | 08:54 | |
| *** flaviosr__ has joined #openstack-ansible | 08:56 | |
| *** noonedeadpunk[m] has joined #openstack-ansible | 08:57 | |
| jrosser | evrardjp: look - distro passed! https://review.opendev.org/#/c/652049/ | 08:58 |
| *** flaviosr__ has quit IRC | 08:59 | |
| *** noonedeadpunk[m] has quit IRC | 08:59 | |
| ChosSimbaOne | noonedeadpunk: thank you for the input :) | 08:59 |
| *** flaviosr_ has quit IRC | 09:00 | |
| *** flaviosr has joined #openstack-ansible | 09:00 | |
| *** sum12 has quit IRC | 09:00 | |
| *** sum12 has joined #openstack-ansible | 09:02 | |
| *** hamzaachi has joined #openstack-ansible | 09:03 | |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia master: Update default test amphora image from xenial to bionic https://review.opendev.org/667085 | 09:03 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia master: Ensure that admin endpoint is used to configure octavia quota https://review.opendev.org/664551 | 09:05 |
| *** ansmith has joined #openstack-ansible | 09:07 | |
| *** jbadiapa has quit IRC | 09:09 | |
| *** ansmith_ has quit IRC | 09:09 | |
| *** jbadiapa has joined #openstack-ansible | 09:10 | |
| *** cshen has quit IRC | 09:17 | |
| *** trident has quit IRC | 09:27 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_keystone master: Convert dynamic includes to static imports https://review.opendev.org/665139 | 09:29 |
| *** trident has joined #openstack-ansible | 09:29 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-lxc_hosts stable/rocky: Fix image fetching process for leap 15 and 42.3 https://review.opendev.org/648854 | 09:32 |
| *** schwicht has joined #openstack-ansible | 09:32 | |
| *** cshen has joined #openstack-ansible | 09:33 | |
| *** schwicht has quit IRC | 09:37 | |
| *** cshen has quit IRC | 09:37 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible master: Reduce disk requirements for metal installations https://review.opendev.org/668131 | 09:41 |
| evrardjp | jrosser: sadly I had a convo with dirk, and I am guessing all those "green" jobs are doing noops on tempest :p | 09:41 |
| evrardjp | dirk you might want to check https://review.opendev.org/668131 for running OSA within your constrained vm :p | 09:42 |
| evrardjp | else, bring a bigger system disk! :) | 09:42 |
| jrosser | evrardjp: for octavia there looks to have beena quite deliberate decision not to whitelist the tempest tests | 09:44 |
| evrardjp | ahah | 09:50 |
| evrardjp | so it means we can ship things that don't work? | 09:50 |
| evrardjp | great | 09:50 |
| evrardjp | jrosser: I guess we should merge this real quick then :) | 09:51 |
| jrosser | evrardjp: here https://github.com/openstack/openstack-ansible-os_tempest/blob/master/defaults/main.yml#L84-L98 | 09:52 |
| evrardjp | jrosser: or do you want to clean up to use the integrated directly? | 09:52 |
| jrosser | am i understanding this right - that actually for the majority of non-core things we load up but dont whitelist their tempest plugin | 09:52 |
| jrosser | so actually the specific testsuites dont run | 09:52 |
| evrardjp | well | 09:52 |
| evrardjp | we have history here | 09:52 |
| jrosser | yeah | 09:53 |
| evrardjp | so in the past tempest role defaults were for the integrated | 09:53 |
| evrardjp | and role had an <rolename>-overrides which contained the whitelist | 09:53 |
| evrardjp | now that we move everything back to the integrated, we should do things properly | 09:53 |
| evrardjp | I am not sure how we do it yet | 09:53 |
| jrosser | given that the tempest role autodetects what is installed, this should be relatively OK? | 09:54 |
| evrardjp | I would have hoped we copy the whole <rolename>-overrides.yml into user_variables_<rolename> | 09:54 |
| jrosser | like all the tempest_service_available_<service> vars are already there | 09:54 |
| evrardjp | do we use this to auto change the whitelist? | 09:54 |
| evrardjp | Afaik, we don't | 09:54 |
| jrosser | well yes, see the link i posted just now ^^ | 09:55 |
| evrardjp | https://github.com/openstack/openstack-ansible/blob/a63b3cbcb24f51a6dff0af2533482b6ba5baeefb/tests/roles/bootstrap-host/tasks/prepare_aio_config.yml#L176-L178 | 09:55 |
| evrardjp | your thing above is just the defaults, not the fact we have any override :) | 09:56 |
| *** ivve has quit IRC | 09:56 | |
| jrosser | i'm not sure that the whitelist can be an override any more | 09:57 |
| *** emine__ has joined #openstack-ansible | 09:57 | |
| evrardjp | can or should? | 09:57 |
| jrosser | well, aio_metal_octavia_barbican <-- whose override for the whitelist shall we take? | 09:58 |
| evrardjp | yeah, this is my point... We can do it, it's just unreliable. We should do autodiscovery into tempest | 09:59 |
| evrardjp | but we're not | 09:59 |
| evrardjp | I will propose this | 09:59 |
| *** Emine has quit IRC | 10:00 | |
| evrardjp | if tempest_service_available_neutron is True, then add neutron tests into the test_whitelist | 10:00 |
| evrardjp | basically continue what we are already doing | 10:00 |
| evrardjp | but with all roles | 10:00 |
| jrosser | so add more entries in the defaults in os_tempest? | 10:01 |
| evrardjp | correct | 10:01 |
| jrosser | right we are on the same page | 10:01 |
| evrardjp | I will do that today | 10:02 |
| *** cshen has joined #openstack-ansible | 10:06 | |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_tempest master: Whitelist octavia tests when octavia service is present https://review.opendev.org/668136 | 10:06 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia master: [DNM] test patch https://review.opendev.org/668137 | 10:08 |
| noonedeadpunk | folks, I'll be away for the next 2 weeks | 10:09 |
| noonedeadpunk | but some reviews on https://review.opendev.org/#/q/owner:noonedeadpunk%2540ya.ru+status:open+NOT+label:Verified-1+NOT+label:Workflow-1 are still appreciated:) | 10:09 |
| *** cshen has quit IRC | 10:11 | |
| *** CeeMac has quit IRC | 10:16 | |
| evrardjp | noonedeadpunk: enjoy ! I will be off next week too. | 10:25 |
| *** schwicht has joined #openstack-ansible | 10:27 | |
| *** schwicht has quit IRC | 10:33 | |
| *** ivve has joined #openstack-ansible | 10:40 | |
| *** schwicht has joined #openstack-ansible | 10:50 | |
| *** cshen has joined #openstack-ansible | 10:52 | |
| *** schwicht has quit IRC | 10:59 | |
| *** kplant has joined #openstack-ansible | 11:14 | |
| openstackgerrit | Merged openstack/openstack-ansible-tests stable/stein: Revert defining tempest_install_method for tests https://review.opendev.org/666641 | 11:16 |
| *** schwicht has joined #openstack-ansible | 11:25 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_keystone master: service_setup: refactor service setup to a single file https://review.opendev.org/665167 | 11:31 |
| *** CeeMac has joined #openstack-ansible | 11:31 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_glance master: service_setup: refactor service setup to a single file https://review.opendev.org/665372 | 11:31 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_cinder master: service_setup: refactor service setup to a single file https://review.opendev.org/665607 | 11:32 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Re-establish coverage https://review.opendev.org/668147 | 11:32 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_nova master: service_setup: refactor service setup to a single file https://review.opendev.org/665648 | 11:32 |
| chandankumar | Hello | 11:35 |
| chandankumar | is it possible in ansible to look for clouds.yaml at particular path instead of /etc/ | 11:36 |
| evrardjp | mmm | 11:36 |
| evrardjp | it should | 11:36 |
| evrardjp | if it's in your environment | 11:36 |
| evrardjp | ~/.config/openstack/ | 11:36 |
| chandankumar | if someone run ansible playbook as become true then it looks at /etc | 11:36 |
| chandankumar | that time user become sudo user , ~ -> /root | 11:36 |
| evrardjp | do you have something in /root/.config/openstack ? | 11:37 |
| chandankumar | evrardjp: nope | 11:37 |
| evrardjp | or do you want to point to a specific file? | 11:37 |
| chandankumar | evrardjp: I want to point to a specific file | 11:37 |
| evrardjp | why not making the file at the standard locations? | 11:37 |
| evrardjp | chandankumar: do you run a command, or do you run an ansible module? | 11:38 |
| chandankumar | evrardjp: I have done this https://review.opendev.org/#/c/667323/3/playbooks/tempest.yml@15 | 11:38 |
| chandankumar | but os_tempest is running there as a root | 11:39 |
| chandankumar | and there is no /root/.config/openstack dir | 11:39 |
| chandankumar | and nothing in /etc/openstack | 11:39 |
| chandankumar | so it is saying cloud not found | 11:39 |
| evrardjp | what do you want to achieve? | 11:39 |
| evrardjp | if you're running as root it's simple, just make that in /etc/openstack or /root/.config/openstack | 11:40 |
| evrardjp | if you run in the CLI you have the opportunity to use currentdir too, but it's more complex than it should do | 11:40 |
| chandankumar | the goal here is to run os_tempest on overcloud by using /home/user/.config/openstack/cloud.yaml file only | 11:40 |
| evrardjp | that sounds reasonable | 11:40 |
| evrardjp | why do you run become: true then? | 11:41 |
| noonedeadpunk | evrardjp: I think it works http://logs.openstack.org/54/648854/12/check/openstack-ansible-functional-opensuse-150/e7f8803/logs/ara-report/result/aceb5266-eb69-4bad-aa30-6d7551dca82d/ | 11:41 |
| evrardjp | chandankumar: if you really want you can mess up with USER_CONFIG_DIR but I wouldn't recommend it | 11:41 |
| noonedeadpunk | The point is that rocky wasn't ready to work with the new lxc, which is now shipped, so container creation fails afterwards | 11:41 |
| chandankumar | evrardjp: os_tempest needs sudo privilages for installing tempest relatd dustro package | 11:41 |
| noonedeadpunk | but it's another thing to fix... | 11:41 |
| chandankumar | *distro packages | 11:42 |
| evrardjp | chandankumar: I mean if you want to run as root anyway, why not making the user level config file available as root? | 11:42 |
| evrardjp | as you tried above, OS_CLIENT_CONFIG_FILE is something you can use too | 11:43 |
| evrardjp | noonedeadpunk: oh I see | 11:43 |
| evrardjp | sorry I didn't check in details | 11:44 |
| noonedeadpunk | since http://logs.openstack.org/54/648854/12/check/openstack-ansible-lxc-dir-opensuse-150/a1e0966/logs/ara-report/ fails on lxc_container_create but not on lxc_host | 11:44 |
| evrardjp | yeah got it | 11:44 |
| evrardjp | jrosser: let's see how long this bad boy will take: https://review.opendev.org/#/c/668147/ | 11:44 |
| evrardjp | jrosser: if that doesn't work, I will make something in bootstrap aio | 11:45 |
| noonedeadpunk | I'm really pretty afraid about execution time.... | 11:46 |
| evrardjp | yup, but that's what we got when we decided to go for one repo :p | 11:47 |
| evrardjp | I said there was a reason we spread the tests into multiple repos | 11:47 |
| evrardjp | :D | 11:47 |
| evrardjp | I will think about something and propose an alternative patch | 11:47 |
| chandankumar | overcloud deployment is done by a normal user become_true is called when I am calling os_tempest role https://github.com/openstack/tripleo-quickstart-extras/blob/master/playbooks/tempest.yml#L53 | 11:48 |
| chandankumar | can I add one task in tempest resource to look for different places for clouds.yaml and set env var for os_client_config_file? | 11:48 |
| *** hamzaachi has quit IRC | 11:49 | |
| evrardjp | I would just change the your call to have that exposed | 11:49 |
| noonedeadpunk | It looks good. The point is that your reason is pretty weighty one :) | 11:49 |
| openstackgerrit | Merged openstack/openstack-ansible master: Restrict the number of octavia processes and threads in AIO https://review.opendev.org/667941 | 11:50 |
| chandankumar | evrardjp: I am a big idiot | 11:52 |
| * chandankumar used export export os_client_config_file | 11:52 | |
| chandankumar | that's why export is getting exported | 11:52 |
| chandankumar | and there is on overcloud cloud found | 11:52 |
| chandankumar | sorry | 11:53 |
| *** schwicht has quit IRC | 11:56 | |
| noonedeadpunk | evrardjp: btw, I've added a disclaimer for https://review.opendev.org/#/q/topic:osa/service-refactor+(status:open+OR+status:merged) - thanks for this tip | 11:57 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Add barbican tempest plugin for distro installs https://review.opendev.org/668155 | 11:59 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Add barbican tempest plugin for distro installs https://review.opendev.org/668155 | 12:00 |
| *** ansmith_ has joined #openstack-ansible | 12:02 | |
| *** ansmith has quit IRC | 12:02 | |
| openstackgerrit | Merged openstack/openstack-ansible master: Restrict the number of placement processes and threads in AIO https://review.opendev.org/667898 | 12:06 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_barbican master: Use secure persmissions for barbican configuration https://review.opendev.org/668159 | 12:10 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Add tempest plugin for distro installs https://review.opendev.org/668155 | 12:16 |
| evrardjp | thanks noonedeadpunk for the change | 12:17 |
| evrardjp | I have updated the tempest plugins things | 12:17 |
| *** schwicht has joined #openstack-ansible | 12:18 | |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_heat master: Switch to openSUSE Leap 15.1 https://review.opendev.org/668055 | 12:20 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_heat master: Tidy distro package lists for openSUSE Leap 15.1 https://review.opendev.org/668055 | 12:20 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia master: Updated certificate distribution task https://review.opendev.org/657662 | 12:21 |
| *** udesale has quit IRC | 12:22 | |
| *** udesale has joined #openstack-ansible | 12:23 | |
| evrardjp | dirk: on the barbican config, I understand why in this case we would do this, but I wonder if we shouldn't do this by default to all the config files | 12:26 |
| evrardjp | I am not sure about the impact for the service users to have write access to their config | 12:27 |
| evrardjp | but I am also not seeing a reason why the services users should have write access to those at all | 12:28 |
| *** electrofelix has joined #openstack-ansible | 12:29 | |
| *** schwicht has quit IRC | 12:30 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-galera_server master: Make mariadb bind address configurable https://review.opendev.org/668164 | 12:36 |
| *** shyamb has joined #openstack-ansible | 12:37 | |
| *** jbadiapa has quit IRC | 12:37 | |
| *** schwicht has joined #openstack-ansible | 12:40 | |
| *** pcaruana has quit IRC | 12:40 | |
| dirk | evrardjp: most services did actually have proper permissions (not writeable by the service itself) | 12:40 |
| dirk | evrardjp: yes, its an obvious security blunder. | 12:41 |
| *** pcaruana has joined #openstack-ansible | 12:41 | |
| evrardjp | chandankumar: ahah glad you found it | 12:42 |
| evrardjp | and... don't beat yourself ! | 12:43 |
| noonedeadpunk | evrardjp: I'm not sure that it's worth adding extra variable, since this should be easily overridable. Probably I'm missing some important point (as usual) | 12:44 |
| noonedeadpunk | and by default everything is br-lxc and br-mgmt which tend to be pretty secure... | 12:45 |
| noonedeadpunk | except metal.... | 12:45 |
| *** KurtB has joined #openstack-ansible | 12:48 | |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible stable/stein: Remove experimental opensuse jobs from periodic https://review.opendev.org/668167 | 12:50 |
| *** schwicht has quit IRC | 12:53 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible master: Install iptables on AIO by default https://review.opendev.org/668169 | 12:55 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible master: Remove duplicate vars https://review.opendev.org/668170 | 12:56 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_cinder master: Install openSUSE distro packages selectively https://review.opendev.org/668056 | 12:57 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_glance master: Update distro package names for openSUSE Leap 15.1 https://review.opendev.org/668058 | 12:58 |
| *** ivve has quit IRC | 13:04 | |
| *** shyamb has quit IRC | 13:07 | |
| evrardjp | noonedeadpunk: I am adding this var for metal | 13:07 |
| evrardjp | (I suppose you're talking about bind_address) | 13:07 |
| evrardjp | haha my brain was confused with another config file | 13:08 |
| noonedeadpunk | yep about https://review.opendev.org/#/c/668164/ | 13:09 |
| noonedeadpunk | I mean do we really-really need this? | 13:09 |
| noonedeadpunk | oh, you already abandoned it) | 13:09 |
| *** shyamb has joined #openstack-ansible | 13:10 | |
| *** shyamb has quit IRC | 13:15 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_zun master: Convert dynamic includes to static imports https://review.opendev.org/666829 | 13:16 |
| *** gkadam_ has joined #openstack-ansible | 13:21 | |
| *** gkadam has quit IRC | 13:22 | |
| ioni | https://docs.openstack.org/project-deploy-guide/openstack-ansible/stein/targethosts.html | 13:24 |
| ioni | ubuntu 16.04 is still supported in stein? | 13:24 |
| evrardjp | ioni: isn't rocky the last xenial one? | 13:26 |
| ioni | that's why i'm asking | 13:26 |
| ioni | i didn't updated to stein because i knew that 16.04 is not supported | 13:27 |
| ioni | but in documentation is different | 13:27 |
| *** BjoernT has joined #openstack-ansible | 13:42 | |
| *** jbadiapa has joined #openstack-ansible | 13:42 | |
| *** schwicht has joined #openstack-ansible | 13:43 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone master: Convert dynamic includes to static imports https://review.opendev.org/665139 | 13:44 |
| *** spatel has joined #openstack-ansible | 13:48 | |
| *** hamzaachi has joined #openstack-ansible | 13:49 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_cinder master: Convert dynamic includes to static imports https://review.opendev.org/665612 | 13:49 |
| *** trident has quit IRC | 13:56 | |
| *** trident has joined #openstack-ansible | 13:58 | |
| spatel | Can someone help me related octavia lbaas-mgmt network setup, i think i am confused somewhere and need help to get out. | 14:11 |
| spatel | This is my 3 node controller config - http://paste.openstack.org/show/753565/ | 14:11 |
| *** jbadiapa has quit IRC | 14:12 | |
| spatel | My question is how amphora vm hook up lbaas-mgmt over br-vlan? | 14:12 |
| *** jbadiapa has joined #openstack-ansible | 14:12 | |
| spatel | mnaser: i think you are running octavia, you may can help me out. | 14:13 |
| spatel | I found this article - https://github.com/rcbops/rpc-octavia/blob/master/INSTALLATION.md | 14:13 |
| spatel | very few document on official website explaining details so hard to understand | 14:14 |
| *** mwe1 has quit IRC | 14:18 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_octavia master: Add support for using distribution packages for OpenStack services https://review.opendev.org/652049 | 14:18 |
| openstackgerrit | Merged openstack/openstack-ansible-os_octavia master: db_setup: refactor database setup to a common file https://review.opendev.org/664888 | 14:18 |
| guilhermesp | mornings | 14:20 |
| guilhermesp | logan-: around ? | 14:20 |
| *** gkadam_ has quit IRC | 14:21 | |
| *** CeeMac has quit IRC | 14:26 | |
| *** SmearedBeard has joined #openstack-ansible | 14:29 | |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible master: Revert ansible-playbook link to the unmodified binary https://review.opendev.org/668185 | 14:32 |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible master: Revert ansible-playbook link to the unmodified binary https://review.opendev.org/668185 | 14:36 |
| Nick_A | how would I modify lxc config with openstack-ansible? running lxd computes with nova-lxd | 14:41 |
| *** cshen has quit IRC | 14:54 | |
| evrardjp | Nick_A: two different things: nova-lxd is for "tenants" of your openstack. We are using LXC for control plane of openstack (optional, but default). What do you mean here? | 14:54 |
| jrosser | Nick_A: if you look at our nova CI tests you can see that we set one up to run nova-lxd | 15:04 |
| *** ansmith_ has quit IRC | 15:04 | |
| jrosser | Nick_A: seeing how that test is set up should be a good starting point for making real nova-lxd computes | 15:04 |
| jrosser | Nick_A: here is a ramdom example of that https://review.opendev.org/#/c/665648/ - see the "openstack-ansible-deploy-aio_metal_lxd-ubuntu-bionic" job | 15:05 |
| jrosser | spatel: the multi-node-aio in the ops repo was set up to do octavia tests, that should show you what is needed | 15:07 |
| *** SmearedBeard has quit IRC | 15:09 | |
| *** SmearedBeard has joined #openstack-ansible | 15:10 | |
| Nick_A | Let me rephrase - we're trying to modify lxd config for nova-lxd via lxc config commands. Is there a way to do that with openstack-ansible? | 15:11 |
| spatel | jrosser: oh okay.. i have AIO but never deploy multi-node-aio | 15:11 |
| spatel | jrosser: i am almost done with 3 node controller and just need final touch to finish it :) | 15:12 |
| jrosser | Well maybe don’t deploy it, use it as reference | 15:12 |
| jrosser | Nick_A: what exactly are you trying to change? | 15:13 |
| Nick_A | something like images.remote_cache_expiry | 15:13 |
| Nick_A | basically is there a way to run a command like "lxc config set images.auto_update_interval 0" with openstack-ansible ? | 15:17 |
| jrosser | so this is the extent of the setup we do for LXD https://github.com/openstack/openstack-ansible-os_nova/blob/377588a57c157611de108cde6d89bf769af168ab/tasks/drivers/lxd/nova_compute_lxd.yml | 15:20 |
| logan- | guilhermesp: o/ | 15:22 |
| guilhermesp | ah nvm logan- I think I figured out... actually was about ceph rgw playbook | 15:25 |
| guilhermesp | it adds swiftoperator role | 15:25 |
| guilhermesp | but ceph.conf needs to allow this role | 15:25 |
| guilhermesp | like | 15:25 |
| guilhermesp | rgw keystone accepted roles = {accepted user roles} | 15:25 |
| guilhermesp | http://docs.ceph.com/docs/mimic/radosgw/keystone/ | 15:26 |
| guilhermesp | with a clean rgw installation, when I try to access the object storage in horizon it pops me out like I'm not authorized | 15:26 |
| guilhermesp | so I think should be this missing config, which I'm going to apply using ceph_conf_overrides_rgw ( https://docs.openstack.org/openstack-ansible/latest/user/ceph/swift.html ) | 15:27 |
| jrosser | Nick_A: is that setting you need in an LXD profile? or is it a more global LXD configuration? | 15:27 |
| Nick_A | the latter I believe | 15:28 |
| Nick_A | double checking | 15:29 |
| jrosser | if it's an LXD profile there is an ansible module for that so should be very easy to add some support | 15:30 |
| jrosser | guilhermesp: https://github.com/openstack/openstack-ansible/blob/4bc8c748a654b833c902268c6c0ae2ed4c52bdcf/inventory/group_vars/ceph-rgw.yml ? | 15:33 |
| *** CeeMac has joined #openstack-ansible | 15:36 | |
| *** chandankumar is now known as raukadah | 15:40 | |
| Nick_A | maybe we're using a default profile, not sure. we will take a look. | 15:49 |
| *** schwicht has quit IRC | 15:53 | |
| jrosser | Nick_A: if you can figure out if it's in a profile or a global config we can see what needs doing | 15:55 |
| guilhermesp | hum jrosser I have added this in grou_vars/ceph-rgw.yml. Actually just the accepted roles option | 15:57 |
| guilhermesp | but seems to not work | 15:57 |
| *** schwicht has joined #openstack-ansible | 15:58 | |
| Nick_A | jrosser it's just a server config, not a profile afaik | 15:58 |
| jrosser | Nick_A: OK - we can maybe take a look at this next week. I have a ton of ansible for LXD setup stuff outside of OSA, i'm sure some of that deals with the server config | 16:00 |
| Nick_A | thank you | 16:02 |
| *** ansmith has joined #openstack-ansible | 16:03 | |
| *** emine__ has quit IRC | 16:04 | |
| *** rgogunskiy has quit IRC | 16:13 | |
| jrosser | guilhermesp: if you are looking at ceph/rgw things that is the last piece of brokennes to land ansible2.8/ceph-ansible4/nautilus in OSA master | 16:14 |
| jrosser | i've still not worked out what is wrong there | 16:14 |
| *** udesale has quit IRC | 16:26 | |
| redkrieg | I'm having an issue where lxd-init.sh is being written out with a different lxd_init_storage_pool than I set in my user variables. I've got `default/lxd` set for that but lxd-init.sh shows only `default` there. If I change it manually in the shell script and run it, things work out fine and the script exits cleanly. Any idea why it's getting modified? | 16:33 |
| openstackgerrit | Merged openstack/openstack-ansible-os_barbican master: Use secure persmissions for barbican configuration https://review.opendev.org/668159 | 16:37 |
| jrosser | redkrieg: it doesnt appear in very many places http://codesearch.openstack.org/?q=lxd_init_storage_pool | 16:37 |
| jrosser | redkrieg: you may find however that things just don't work unless the pool name is 'default' though, at the time i last fixed the nova-lxd support in OSA there were bugs in nova-lxd related to that | 16:38 |
| jrosser | also the only working backend was ZFS, at that time too | 16:39 |
| redkrieg | interesting, none of that code should have modified the value. I really need to have a subpool for the storage pool because I have to have /var/lib/lxd on the same hardware pool on my computes. this is using zfs | 16:40 |
| redkrieg | is there a way to get openstack-ansible to print out all the variables it knows so I can see if it's set correctly after parsing? | 16:41 |
| jrosser | something like this ansible <host> -m debug -a "var=<foo>" | 16:43 |
| jrosser | print the value of <foo> as seen by <host> | 16:44 |
| spatel | what is wrong here, getting this error during os-octavia-install.yml - fatal: [ostack-infra-2-3_octavia_server_container-e804ce0b]: FAILED! => {"msg": "'dict object' has no attribute 'ip_from_q'"} | 16:44 |
| *** BjoernT has quit IRC | 16:46 | |
| redkrieg | weird, it tells me "VARIABLE IS NOT DEFINED" but it shouldn't have rendered that parameter in lxd-init.sh if that were the case: http://paste.openstack.org/show/753573/ | 16:48 |
| spatel | jrosser: any idea? {"msg": "'dict object' has no attribute 'ip_from_q'"} | 16:50 |
| jrosser | redkrieg: probably you need this fix https://review.opendev.org/#/c/662032/1 | 16:50 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_octavia master: Add openSUSE support https://review.opendev.org/660367 | 16:51 |
| openstackgerrit | Dirk Mueller proposed openstack/openstack-ansible-os_octavia master: [WIP] Add openSUSE support https://review.opendev.org/660367 | 16:51 |
| jrosser | spatel: i would say that is trying to take an ip from a network for a container, but maybe the network name specified doesnt match the one defined in openstack_user_config.yml ? | 16:52 |
| spatel | jrosser: this is what i have http://paste.openstack.org/show/753565/ | 16:52 |
| spatel | what could be wrong here? | 16:58 |
| openstackgerrit | Merged openstack/openstack-ansible-os_sahara master: db_setup: refactor database setup to a common file https://review.opendev.org/665738 | 17:01 |
| jrosser | spatel: i don't know, but i'd probably be putting a bunch of debug: tasks right at the start of the octavia role to print the values of these https://github.com/openstack/openstack-ansible-os_octavia/blob/master/defaults/main.yml#L330-L355 | 17:02 |
| jrosser | becasue you can see at least one of those vars is needing the ip_from_q entry, so i'd start with that | 17:03 |
| spatel | how do i enable debug in task? | 17:03 |
| jrosser | i mean add some more ansible tasks using the debug module | 17:04 |
| jrosser | https://docs.ansible.com/ansible/latest/modules/debug_module.html | 17:04 |
| spatel | let me see.. i got this error since i changed type: flat to type: raw | 17:05 |
| *** SmearedBeard has quit IRC | 17:16 | |
| spatel | jrosser: after setting octavia_container_network_name: lbaas_address i am not seeing error | 17:22 |
| spatel | look like this option was missing "octavia_container_network_name: lbaas_address" | 17:23 |
| redkrieg | jrosser: found all instances where that patch could apply (/usr/local/bin/openstack-ansible and /opt/openstack-ansible/scripts/openstack-ansible.sh) and added the ${VAR1}, I can read the value with ansible -a now and it does correctly report `"lxd_init_storage_pool": "default/lxd"`, thank you. running my playbooks again to see if it gets set correctly now | 17:26 |
| jrosser | redkrieg: excellent | 17:27 |
| *** electrofelix has quit IRC | 17:30 | |
| jrosser | redkrieg: btw I think that fix I pointed you to will only affect the “ad-hoc” debug command you did, shouldn’t affect the playbook runs | 17:33 |
| redkrieg | ahh, that's unfortunate. so I still need to find the underlying issue but at least I know my user_ data is being parsed correctly | 17:34 |
| jrosser | Make sure you run the playbooks from the openstack-ansible fit to make sure your user variables get picked up too | 17:34 |
| jrosser | Argh autocorrect! | 17:34 |
| jrosser | Fit/dir | 17:34 |
| redkrieg | thanks, I usually do `cd /opt/openstack-ansible/playbooks && openstack-ansible setup-hosts.yml setup-infrastructure.yml setup-openstack.yml`. I've had strange failures sometimes when I don't run all three back to back | 17:35 |
| *** ivve has joined #openstack-ansible | 17:38 | |
| guilhermesp | jrosser: I have changed to ceph_config_overrides but seems that it is duplicating the entries in ceph.conf. I was looking this btw https://github.com/ceph/ceph-ansible/issues/2157 | 17:52 |
| openstackgerrit | Vadim Kuznetsov proposed openstack/openstack-ansible-os_octavia master: Updated certificate distribution task https://review.opendev.org/657662 | 18:07 |
| *** hamzaachi has quit IRC | 18:20 | |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_glance master: service_setup: refactor service setup to a single file https://review.opendev.org/665372 | 18:49 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_cinder master: service_setup: refactor service setup to a single file https://review.opendev.org/665607 | 18:50 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_keystone master: service_setup: refactor service setup to a single file https://review.opendev.org/665167 | 18:50 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_nova master: service_setup: refactor service setup to a single file https://review.opendev.org/665648 | 18:51 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_keystone master: service_setup: refactor service setup to a single file https://review.opendev.org/665167 | 19:00 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_cinder master: service_setup: refactor service setup to a single file https://review.opendev.org/665607 | 19:02 |
| openstackgerrit | Merged openstack/openstack-ansible-os_octavia master: Updated from OpenStack Ansible Tests https://review.opendev.org/664731 | 19:04 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible master: Drop support for Ubuntu Xenial https://review.opendev.org/668236 | 19:09 |
| spatel | jrosser: one more issue - http://paste.openstack.org/show/753574/ | 19:28 |
| spatel | i am running octavia playbook and it getting stuck here | 19:28 |
| *** ivve has quit IRC | 19:28 | |
| jrosser | i have a patch here which i think is for that https://review.opendev.org/#/c/667791/ | 19:28 |
| spatel | oh!!! let me try.. that is what i was searching.. | 19:32 |
| spatel | thanks... | 19:32 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-os_octavia master: Automatically create and import keypair if it doesn't exist https://review.opendev.org/606143 | 19:32 |
| jrosser | octavia bugfixes ready to go now the tests are working again https://review.opendev.org/#/c/664551/ and https://review.opendev.org/#/c/667791/ | 19:40 |
| openstackgerrit | Vadim Kuznetsov proposed openstack/openstack-ansible-os_octavia master: Updated certificate distribution task https://review.opendev.org/657662 | 19:49 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible stable/rocky: Restrict the number of octavia processes and threads in AIO https://review.opendev.org/668239 | 19:53 |
| *** hamzaachi has joined #openstack-ansible | 19:55 | |
| *** kplant has quit IRC | 19:55 | |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible stable/stein: Restrict the number of octavia processes and threads in AIO https://review.opendev.org/668240 | 19:56 |
| *** BjoernT has joined #openstack-ansible | 19:59 | |
| *** BjoernT has quit IRC | 20:04 | |
| *** BjoernT has joined #openstack-ansible | 20:08 | |
| spatel | jrosser: that patch works.. please push it to master :) | 20:19 |
| jrosser | I need reviews :) | 20:19 |
| jrosser | +1 it for me saying it works | 20:20 |
| *** hamzaachi has quit IRC | 20:27 | |
| *** hamzaachi has joined #openstack-ansible | 20:28 | |
| *** kopecmartin has quit IRC | 21:13 | |
| *** pcaruana has quit IRC | 21:16 | |
| openstackgerrit | Vadim Kuznetsov proposed openstack/openstack-ansible-os_octavia master: Updated certificate distribution task https://review.opendev.org/657662 | 21:19 |
| *** spatel has quit IRC | 21:25 | |
| *** kplant has joined #openstack-ansible | 21:37 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_octavia master: Drop private argument for include/import role https://review.opendev.org/659754 | 22:21 |
| *** luksky has quit IRC | 22:52 | |
| *** CeeMac has quit IRC | 23:16 | |
| *** schwicht has quit IRC | 23:16 | |
| *** spatel has joined #openstack-ansible | 23:25 | |
| *** tosky has quit IRC | 23:26 | |
| *** spatel has quit IRC | 23:29 | |
| *** schwicht has joined #openstack-ansible | 23:59 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!