Tuesday, 2019-10-01

*** goldyfruit_ has joined #openstack-ansible00:14
*** weshay has joined #openstack-ansible00:24
*** markvoelker has quit IRC00:26
*** gyee has quit IRC00:27
*** ianychoi has quit IRC01:17
*** ianychoi has joined #openstack-ansible01:18
*** dave-mccowan has joined #openstack-ansible01:21
*** nicolasbock has quit IRC01:57
*** elduderino80 has joined #openstack-ansible01:59
*** prometheanfire has quit IRC02:16
*** prometheanfire has joined #openstack-ansible02:16
*** macz has joined #openstack-ansible02:19
*** macz has quit IRC02:23
*** hwoarang has quit IRC02:38
*** BjoernT has joined #openstack-ansible02:47
*** hwoarang has joined #openstack-ansible02:48
*** dave-mccowan has quit IRC03:04
*** BjoernT has quit IRC03:14
*** BjoernT has joined #openstack-ansible03:18
*** raukadah is now known as chandankumar03:23
*** BjoernT has quit IRC03:29
*** spsurya has joined #openstack-ansible03:29
*** markvoelker has joined #openstack-ansible03:41
*** markvoelker has quit IRC03:42
*** markvoelker has joined #openstack-ansible03:43
*** gkadam has joined #openstack-ansible03:55
*** udesale has joined #openstack-ansible03:57
*** ianychoi has quit IRC03:59
*** ianychoi has joined #openstack-ansible04:00
*** gkadam has quit IRC04:08
*** macz has joined #openstack-ansible04:20
*** macz has quit IRC04:25
*** elduderino80 has quit IRC04:27
*** macz has joined #openstack-ansible04:28
*** macz has quit IRC04:30
*** macz has joined #openstack-ansible04:30
*** macz has quit IRC04:35
*** spsurya has quit IRC04:37
*** spsurya has joined #openstack-ansible04:38
*** weshay has quit IRC04:40
*** SmearedBeard has quit IRC04:45
*** SmearedBeard has joined #openstack-ansible04:56
*** pcaruana has joined #openstack-ansible05:01
*** ianychoi has quit IRC05:03
*** ianychoi has joined #openstack-ansible05:05
*** shyamb has joined #openstack-ansible05:11
*** jbadiapa has joined #openstack-ansible05:13
*** ianychoi has quit IRC05:27
*** ianychoi has joined #openstack-ansible05:29
*** markvoelker has quit IRC05:47
*** shyamb has quit IRC05:47
*** ianychoi has quit IRC06:00
*** ianychoi has joined #openstack-ansible06:01
*** shyamb has joined #openstack-ansible06:10
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: [WIP] Use parallel git clone  https://review.opendev.org/58837206:12
*** SmearedBeard has quit IRC06:12
*** jbadiapa has quit IRC06:22
*** shyamb has quit IRC06:28
*** shyamb has joined #openstack-ansible06:28
*** macz has joined #openstack-ansible06:32
*** macz has quit IRC06:36
*** ianychoi has quit IRC06:40
*** cshen has joined #openstack-ansible06:41
*** ianychoi has joined #openstack-ansible06:42
*** SmearedBeard has joined #openstack-ansible06:42
*** defionscode has quit IRC06:43
*** SmearedBeard has quit IRC06:47
*** Smeared_Beard has joined #openstack-ansible06:48
*** shyam89 has joined #openstack-ansible06:54
*** shyamb has quit IRC06:55
*** rpittau|afk is now known as rpittau07:04
*** zbr is now known as zbr|ruck07:08
*** tosky has joined #openstack-ansible07:16
*** kopecmartin|off is now known as kopecmartin07:24
*** jbadiapa has joined #openstack-ansible07:27
taccojrosser: thanks a lot. i already have this configs in place. My question is how this will be handled by ansible_ceph_client because i need some kind of credentials somewhere.. is it only the /etc/ceph/ceph.conf and what about the cluster fsid?07:32
jrosserthe ansible controller uses ssh to connect to your ceph monitor and collect those things07:33
jrosserso you need to have that access set up beforehand07:34
jrosserif you cannot run ansible tasks against the ceph cluster (run by a different team for example) then we have some recent work to allow the ceph keyrings to be supplied from the deployment host07:36
taccoi see. ok i tought it would be possible only with a ceph client that connects to the mon by ceph.conf.07:37
taccobut ok if i need ssh i will arange that.07:37
jrosserand remember that openstack-ansible just calls the ceph-ansible roles, so anything you can override with ceph-ansible variables is available to you07:37
*** luksky has joined #openstack-ansible07:38
taccook will check this role first and grant ssh access if i learned a bit more about the role07:38
jrossertacco: iirc you can collect ceph.conf from the mon with ansible or supply it manually yourself via variables07:39
taccothansk jrosser for all those quick responses that helps a lot.07:39
jrosserbut you also need to deal with keyrings07:39
taccocan i buy you a coffe or something?07:39
jrossersure :)07:39
taccosend me the link07:39
taccoi implemented the ceph.conf by the var ceph_conf_file: |07:40
*** shyam89 has quit IRC07:40
*** ygk_12345 has joined #openstack-ansible07:45
*** markvoelker has joined #openstack-ansible07:47
*** markvoelker has quit IRC07:51
*** Jeffrey4l has quit IRC07:59
*** Jeffrey4l has joined #openstack-ansible08:00
*** jbadiapa has quit IRC08:03
*** jbadiapa has joined #openstack-ansible08:04
ChosSimbaOnemorning.08:17
*** yolanda has joined #openstack-ansible08:23
*** shyamb has joined #openstack-ansible08:28
ChosSimbaOneWhen setting up ceilometer + gnocchi with OSA, is it correct that no default configuration for data sendt to gnocchi is made?08:29
*** macz has joined #openstack-ansible08:32
*** lkoranda has joined #openstack-ansible08:32
*** macz has quit IRC08:36
ChosSimbaOneOhh, realized it is due to queens release. It has been patched. nvm then :-)08:47
*** macz has joined #openstack-ansible08:51
*** macz has quit IRC08:55
*** ygk_12345 has quit IRC09:05
*** jbadiapa has quit IRC09:29
*** jbadiapa has joined #openstack-ansible09:30
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-os_neutron stable/queens: Create symlink to neutron-keepalived-state-change  https://review.opendev.org/65030309:36
*** shyamb has quit IRC09:38
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_octavia master: Allow venv python interpreter to be overridden  https://review.opendev.org/68159209:42
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_tempest master: Whitelist octavia tests when octavia service is present  https://review.opendev.org/66813609:45
ChosSimbaOneHi. are anyone vizualizing ceilometer + gnoochi with grafana?09:48
*** markvoelker has joined #openstack-ansible09:48
noonedeadpunkChosSimbaOne: me:)09:49
noonedeadpunkBut it's tricky thing tbh09:49
jrossernoonedeadpunk: it is a shame OSA setup out of the box is hard for this09:51
jrosserthat would be a nice thing to sort out in Train09:51
noonedeadpunknot really, just gnocchi is not really wel documented for this09:51
jrosserwell we still don't have coordinator service?09:52
jrosseretcd or something09:52
noonedeadpunkSo I had to spend some time configuring cors for gnocchi and grafana auth process for gnocchi was the biggest problem for me.09:52
*** markvoelker has quit IRC09:53
noonedeadpunkWell, I'm using zookeeper, and zookeeper pip modules are included for both09:53
noonedeadpunkAnd I was using https://github.com/openstack/ansible-role-zookeeper but now it's gone from openstack unfortunatelly09:55
noonedeadpunkAh, it's still under governance https://opendev.org/windmill/ansible-role-zookeeper09:55
ChosSimbaOne well I just fixed the missing gnocchi_resources.yaml09:56
noonedeadpunkhm....09:56
ChosSimbaOneso just trying to figure out what i can visualize with ceilometer + gnooci.09:56
ChosSimbaOneSo now i am collecting metrics i thing. So was wondering with CORS step. But it seems that it must be configure for both keystone and the gnocchi container.09:57
noonedeadpunkI guess it's supposed to be there https://opendev.org/openstack/openstack-ansible-os_ceilometer/src/branch/master/vars/main.yml#L71-L7609:57
ChosSimbaOneyeah, my problem is that we are running queens, due to ACI support. So the patch was not back ported :-S09:58
noonedeadpunkactually you can visualize resource usage per server, like cpu or disk utilization - depends on what you collect09:58
noonedeadpunkAh, yes.09:58
noonedeadpunkActually even in rocky things should eventually work09:58
ChosSimbaOneSo i just need to enable CORS and setup the data source.09:59
noonedeadpunkbut before it yes - there were a big problems09:59
ChosSimbaOneyeah, I am starting to regred that we chose ACI as SDN...09:59
noonedeadpunkYeah, cisco seems to be not really good in suporting things for openstack10:00
*** shyamb has joined #openstack-ansible10:01
ChosSimbaOneyeah.. Guess we should have known :-S10:01
ChosSimbaOneBut thanks for the help :-) Will dig into CORS now :-)10:02
noonedeadpunklet me recal regarding cors10:02
noonedeadpunkah, ok, I ended up without cors10:04
noonedeadpunkSo in datasource URL I have keystone public endpoint, access browser, auth mode keystone and placed gnocchi service credentials there, but you may create extra ones10:05
*** ygk_12345 has joined #openstack-ansible10:12
*** ygk_12345 has left #openstack-ansible10:13
ChosSimbaOneAhh well I actually like that approach better! Think I will copy that.10:13
*** primeministerp has quit IRC10:14
noonedeadpunkChosSimbaOne: And that,s how graph is configured for me http://i.piccy.info/i9/8df76f7cfc11a701b415453efeff21c0/1569924965/61133/1336302/Screenshot_20191001_131347.png10:14
noonedeadpunkSyntax was pretty tough for me here.10:15
* jrosser would really like to have this working :)10:15
noonedeadpunkand for variables - node has query "resources(instance, host, type=instance)", and instances has query "resources(instance, id, host="$node")"10:17
*** shyamb has quit IRC10:21
*** udesale has quit IRC10:27
csmarthey everyone, is it expected that a stock AIO (stein 19.0.3) should come back up after a reboot?10:28
csmartI noticed two issues, cinder was not happy because cinder-loop service failed due to missing /openstack mount, restarting the service made it happy10:28
*** udesale has joined #openstack-ansible10:28
csmartsecondly, nova-compute service failed to come up because libvirtd hadn't started, starting libvirtd and restarting the nova-compute made the error go away but it's still in down state10:30
csmartsecondly, nova-compute service failed to come up because libvirtd hadn't started, starting libvirtd and restarting the nova-compute made the error go away but it's still in down state10:32
csmartok, and looks lke nova-compute is still down because /var/lock/nova doesn't exist, creating that and chowning to nova:nova brings it up10:35
*** shyamb has joined #openstack-ansible10:40
*** r81 has joined #openstack-ansible10:42
jrossercsmart: it's kind of just a test environment, but if you think we can make things more robust to a reboot that would be nice10:45
*** macz has joined #openstack-ansible10:52
jrossercsmart: i think you could fix a lot of this with adjusting these https://github.com/openstack/openstack-ansible/blob/master/tests/roles/bootstrap-host/tasks/prepare_loopback_cinder.yml#L33-L3510:53
*** jbadiapa has quit IRC10:53
jrossercsmart: is this centos? https://bugs.launchpad.net/openstack-ansible/+bug/183306610:55
openstackLaunchpad bug 1833066 in openstack-ansible "rebooting a centos compute node loses /var/lock/nova" [Undecided,New]10:55
csmartjrosser: k, maybe I should focus on settig it up with a few VMs then, rather than AIO? I'm just getting my feet wet again after a hiatus ;-)10:56
csmartjrosser: k, maybe I should focus on settig it up with a few VMs then, rather than AIO? I'm just getting my feet wet again after a hiatus ;-)10:57
csmartjrosser: k, maybe I should focus on settig it up with a few VMs then, rather than AIO? I'm just getting my feet wet again after a hiatus ;-)10:57
csmartand I guess LVM backed cinder probably isn't really a recommended prod config anyway...10:57
*** macz has quit IRC10:57
jrosserwell, it feels like the cinder loop device thing should be fairly easily fixable by adjusting the systemd unit to wait for the mounts to be ready10:57
jrosserand if you are on centos looks like there is an already existing bug to address too10:57
jrosserso fixing the AIO to be better would be cool, and yes, AIO is not a prod environment10:58
*** csmart_ has joined #openstack-ansible11:00
csmart_jrosser, sorry something weird is going on with riot chat atm..11:00
csmart_yep it's centos11:00
csmart_jrosser, yep I did modify loop-cinder to start after openstack.mount11:01
jrosserif you have any time to help on small bugs like this it would be great11:01
csmart_...however it wasn't happy with that, complained about lvm2 something something...11:02
csmart_yeah, sure I guess keen to know if I should invest some time on this or dig into more serious scenarios11:02
*** Smeared_Beard has quit IRC11:02
csmart_(hence my question about if we expect it to work after reboot)11:02
csmart_happy to do so if it's useful, fixing the centos bug seems reasonable... I'll take a closer look at that11:03
jrosserif it was only those two things preventing it working after reboot it would be worth a little time imho11:04
*** nicolasbock has joined #openstack-ansible11:04
*** udesale has quit IRC11:05
jrossermnaser: is this something you see on your centos hosts? https://bugs.launchpad.net/openstack-ansible/+bug/183306611:05
openstackLaunchpad bug 1833066 in openstack-ansible "rebooting a centos compute node loses /var/lock/nova" [Undecided,New]11:05
*** udesale has joined #openstack-ansible11:06
*** shyamb has quit IRC11:08
csmart_jrosser, sure, happy to look into it and send some patches11:10
*** dave-mccowan has joined #openstack-ansible11:12
*** udesale has quit IRC11:17
*** ansmith has quit IRC11:25
csmartok so looks like we used to have nova-systemd-tmpfiles.j2 but that was removed...11:27
csmart_https://review.opendev.org/#/c/466179/11:32
jrossercsmart_: yes it does look like that just got dropped probably accidentally in that patch11:34
*** cshen has quit IRC11:37
*** weshay has joined #openstack-ansible11:41
csmart_hmm.. calling the systemd_service role which looks like it has a task to create the tmpfiles... and systemd_lock_path is defined...11:43
csmart_getting late here I'll dig some more tomorrow :-)11:43
csmart_\o11:43
csmart_ok yeah it is there under /etc/tmpfiles.d/openstack-nova-compute.conf11:45
csmart_interesting11:46
*** cshen has joined #openstack-ansible11:46
*** shyamb has joined #openstack-ansible11:47
*** markvoelker has joined #openstack-ansible11:49
*** markvoelker has quit IRC11:54
*** shyamb has quit IRC12:03
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Drop octaviav2 specific jobs  https://review.opendev.org/68359512:04
ChosSimbaOnenoonedeadpunk:  I  just tried you suggestion without cors, and it does not seem to work for queens. Which version are you using?12:07
noonedeadpunkIt's eventually queens.... Oh, just a sec12:08
noonedeadpunkIt required cors as well...12:10
*** ianychoi has quit IRC12:10
noonedeadpunkSo for keystone you need to set in "cors" section "allowed_origin = https://grafana.service.net"12:11
noonedeadpunkyeah, sorry for misleading you12:11
*** ianychoi has joined #openstack-ansible12:13
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Fix python path when deploy host is not localhost  https://review.opendev.org/66983812:23
ChosSimbaOnenoonedeadpunk: no problem, just wanted to be sure so i didn't bang my head to much :-)12:25
ChosSimbaOneThank you :-)12:26
*** ansmith has joined #openstack-ansible12:31
*** trident has quit IRC12:34
*** trident has joined #openstack-ansible12:35
*** macz has joined #openstack-ansible12:53
*** nicolasbock has quit IRC12:56
*** nicolasbock has joined #openstack-ansible12:56
*** macz has quit IRC12:57
*** jbadiapa has joined #openstack-ansible13:06
*** nicolasbock1 has joined #openstack-ansible13:07
*** nicolasbock has quit IRC13:07
*** nicolasbock1 is now known as nicolasbock13:07
*** dave-mccowan has quit IRC13:13
*** jawad_axd has joined #openstack-ansible13:14
*** jbadiapa has quit IRC13:16
*** trident has quit IRC13:22
*** trident has joined #openstack-ansible13:23
*** BjoernT has joined #openstack-ansible13:26
*** SmearedBeard has joined #openstack-ansible13:37
*** ivve has joined #openstack-ansible13:42
noonedeadpunkjrosser: I've figured out what's wrong with tempest lol  The good thing that it's easy to fix.13:45
noonedeadpunkit's because of https://opendev.org/openstack/openstack-ansible-os_tempest/commit/f4b1c94de9be8d16f55e4b45e5f4873b06d7e1c213:46
noonedeadpunk"{{ }}" can't be used in when statements:)13:46
jrosseryou know what13:48
jrosseri was just part way through adding a debug: to my AIO to see if that actually worked :)13:49
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Allow venv python interpreter to be overridden  https://review.opendev.org/68159213:49
jrosserbecause all of the python_venv_build was skipped so it can only be that13:49
noonedeadpunkThat's exactly what I did:)13:49
jrosserand also looking again i don't really like the not (A and B)13:49
jrosserwe can probably make that logic clearer13:50
*** markvoelker has joined #openstack-ansible13:50
jrosserin a similar way this is also fixing wrong {{ }} https://review.opendev.org/#/c/684125/1/playbooks/common-tasks/os-lxc-container-setup.yml13:51
jrosserargh13:51
jrosserhttps://review.opendev.org/#/c/684125/13:51
noonedeadpunknot really see how to optimize logic there...13:52
jrosseruse venv build if install method is source, or distro is debian13:54
jrosser^ makes me wonder if it is actually correct now13:54
*** jawad_axd has quit IRC13:54
jrosserturn the and to an or, and lose the 'not' from the front13:54
*** markvoelker has quit IRC13:55
*** spatel has joined #openstack-ansible13:56
*** markvoelker has joined #openstack-ansible13:57
noonedeadpunkactually looking at this, we can probably just leave "not (tempest_install_method | default('source') == 'distro')"13:57
noonedeadpunkor without not - "(tempest_install_method | default('source') == 'source')"14:00
jrosserbut this whole mess is becasue ubuntu distro install needs source install of tempest plugins14:01
*** markvoelker has quit IRC14:01
noonedeadpunkas we are including source install either for source or for tempest_plugin_install_source14:01
noonedeadpunkyep, that's true14:01
noonedeadpunkbut not sure about reverting patch for ubuntu14:02
noonedeadpunkBut I'd wish canonical shipped packages for tempest plugins14:02
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_tempest master: Fix tempest source install condition  https://review.opendev.org/68597414:06
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Freeze roles for Train milestone  https://review.opendev.org/68100214:08
jrossernoonedeadpunk: i'm a bit confused, do we use the python_venv_build to install the tempest plugins from source?14:12
jrosserwhen it is ubuntu and install_method is distro?14:13
noonedeadpunkIt looks like we don't use python_venv_build for plugin installation at all14:13
noonedeadpunkthey're installed by the pip commands directly in the following tasks14:14
noonedeadpunkwe're just omitting virtualenv for pip module in case of ubuntu distro case14:15
noonedeadpunkbut looks like pip creates venv if it's missing, and plugin installation install tempest as it's in the requirements14:16
noonedeadpunkso that's how we got tempest from pip14:16
*** markvoelker has joined #openstack-ansible14:22
jrossernoonedeadpunk:  you can probably lose this comment too https://github.com/openstack/openstack-ansible-os_tempest/blob/465f5749b43bbff080b99947edc6a3c12be5cf50/tasks/tempest_install_source.yml#L32-L3514:26
*** markvoelker has quit IRC14:26
*** markvoelker has joined #openstack-ansible14:27
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_tempest master: Fix tempest source install condition  https://review.opendev.org/68597414:27
*** spatel has quit IRC14:33
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-specs master: Drop unsupported oslosphinx  https://review.opendev.org/68598814:47
*** lkoranda has quit IRC14:54
*** jbadiapa has joined #openstack-ansible14:58
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-specs master: Drop unsupported oslosphinx  https://review.opendev.org/68598815:00
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-specs master: fix misspelling  https://review.opendev.org/68230515:01
*** cshen has quit IRC15:03
*** jbadiapa has quit IRC15:05
*** SmearedBeard has quit IRC15:08
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-specs master: Update Specs to use openstackdocstheme  https://review.opendev.org/68598815:12
*** BjoernT has quit IRC15:12
*** BjoernT has joined #openstack-ansible15:18
*** ianychoi has quit IRC15:20
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-specs master: Update Specs to use openstackdocstheme  https://review.opendev.org/68598815:20
*** ianychoi has joined #openstack-ansible15:23
*** prometheanfire has quit IRC15:24
*** prometheanfire has joined #openstack-ansible15:25
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_tempest master: Whitelist octavia tests when octavia service is present  https://review.opendev.org/66813615:25
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-specs master: fix misspelling  https://review.opendev.org/68230515:31
*** gyee has joined #openstack-ansible15:34
*** BjoernT has quit IRC15:39
*** rpittau is now known as rpittau|afk15:42
*** BjoernT has joined #openstack-ansible15:44
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_nova master: vars: package cleanup  https://review.opendev.org/66258515:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_nova master: vars: package cleanup  https://review.opendev.org/66258515:46
*** BjoernT_ has joined #openstack-ansible15:48
*** BjoernT has quit IRC15:49
*** ivve has quit IRC15:55
tiffanie#startmeeting openstack_ansible_meeting16:00
openstackMeeting started Tue Oct  1 16:00:05 2019 UTC and is due to finish in 60 minutes.  The chair is tiffanie. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:00
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:00
tiffanie#topic office hours16:00
*** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)"16:00
noonedeadpunko/16:00
cjloadero/16:00
noonedeadpunkcjloader: how is your ironic patch doing?16:00
cjloaderi'm testing on hardware now16:01
cjloaderto ensure that it is not breaking ironic16:01
noonedeadpunkok, great16:02
jrossero/16:02
*** macz has joined #openstack-ansible16:04
guilhermespo/16:06
*** SmearedBeard has joined #openstack-ansible16:07
noonedeadpunkso I'm a bit stuck with murano right now. Tempest tests that never ends... But during looking inside I've just found that it's nova instance that stuck in build state. Hadn't dig into this yet.16:08
noonedeadpunkjrosser: I see you had some progress with mind-to-mgmt ?16:09
guilhermespi guess the last chance was a couple of days ago https://review.opendev.org/#/q/topic:bind-to-mgmt+(status:open+OR+status:merged)16:10
guilhermespbut I see almost a greenfield here https://review.opendev.org/#/c/670051/ :)16:11
noonedeadpunkyep, and debian is kinda worth rechecking16:11
noonedeadpunkso that's what I was asking:)16:11
guilhermespso let me recheck that16:12
jrosserguilhermesp: yes we are very very close16:15
jrosseri wonder if we should just merge all the "Add global override for service bind address" patches16:15
jrosserthen even if we don't finish the detail of galera for train we already have a set of overrides that work for multinode16:15
noonedeadpunkwhy not?16:15
jrosseri mean we should merge them, i think16:16
guilhermespi just rechecked some that has some isolated jobs failing16:16
noonedeadpunkJust remove -W and I'm pretty ready for reviews16:16
jrosserpossibly some minor py3 bugs revealed by these as some roles we've not really touched since switching to py316:17
jrosserso os_glance is failing this now always openstack-ansible-nfs_glance16:17
jrosserwhich maybe we should just get rid of?16:17
guilhermespbtw, looking at https://review.opendev.org/#/c/683080/ do we still need this job? https://github.com/openstack/openstack-ansible-os_glance/blob/ae681ded4e6bc033c75f72b7a429a5b04dd0a676/zuul.d/jobs.yaml#L1616:18
guilhermespyeah jrosser16:18
jrosserif anyone really wants that we should convert it to a scenario in the integrated repo16:19
guilhermespagreed16:20
noonedeadpunkjrosser: it's failing due to the same tempest thing16:20
jrosserok, so i removed all the -W from the bind-to-mgmt patches16:21
noonedeadpunkSo, we can just fix tempest and leave it as is as for now16:21
jrossernoonedeadpunk: ah interesting, how did you find that?16:21
jrosseri could not find the tempest log easily16:21
jrosseranother outstanding thing is i've not been able to land any of the ansible 2.8 patches to the test repo16:22
jrosserthey fail in obscure ways looks like the connection plugin16:22
jrosserwhich we don't see at all in the integrated repo16:22
jrosserfor example https://review.opendev.org/#/c/659658/16:23
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_masakari master: Add global override for service bind address  https://review.opendev.org/68313816:24
*** weshay_ has joined #openstack-ansible16:25
noonedeadpunkI've scrolled through ara error and found that the same keystone test fails16:25
*** weshay has quit IRC16:26
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_glance master: Add global override for service bind address  https://review.opendev.org/68308016:33
jrossernoonedeadpunk: ^ that should test the glance / tempest thing16:34
noonedeadpunkactually https://review.opendev.org/#/c/685974/ seems to fail:(16:36
noonedeadpunkok, but that's completely another thing I'd say....16:36
openstackgerritMerged openstack/openstack-ansible master: Collect logs from auditd in CI jobs  https://review.opendev.org/68124116:37
chandankumarjrosser: noonedeadpunk what was the tempest issue?16:37
jrosserchandankumar: https://review.opendev.org/#/c/685974/16:37
*** BjoernT has joined #openstack-ansible16:40
jrosserso one of those is failing on this https://github.com/openstack/tempest/blob/master/tempest/api/identity/admin/v3/test_trusts.py#L34-L3516:40
jrossermaybe becasue of this? https://github.com/openstack/openstack-ansible-os_tempest/blob/master/templates/tempest.conf.j2#L69-L7016:41
*** BjoernT_ has quit IRC16:42
noonedeadpunklet's check16:43
jrosserthen the second one is here https://github.com/openstack/tempest/blob/master/tempest/api/identity/base.py#L315-L31716:43
chandankumarchecking16:44
jrosserneeds application_credentials=true as well in [identity-feature-enabled]16:44
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_tempest master: Fix tempest source install condition  https://review.opendev.org/68597416:46
*** SmearedBeard has quit IRC16:46
*** weshay_ is now known as weshay16:46
chandankumaras per this https://github.com/openstack/tempest/blob/master/tempest/config.py#L251 -> it should be enabled by default16:46
jrosserchandankumar: default=False?16:47
noonedeadpunkbut default is false16:47
noonedeadpunk++16:47
jrosseror you mean by default we should enable it :)16:48
chandankumarwe need to enable by default to true16:48
chandankumarI am checking centos one16:48
chandankumarjrosser: noonedeadpunk in centos it is skipped https://openstack.fortnebula.com:13808/v1/AUTH_e8fd161dc34c421a979a9e6421f823e9/zuul_opendev_logs_53d/685974/2/check/openstack-ansible-deploy-aio_distro_metal-centos-7/53d5c75/logs/openstack/aio1-utility/stestr_results.html16:50
chandankumarsetUpClass (tempest.api.identity.admin.v3.test_trusts16:50
chandankumarhttps://eb7fd4fca907b0349dac-fddd31f569f44d98bd401bfd88253d97.ssl.cf1.rackcdn.com/685974/2/check/openstack-ansible-deploy-aio_metal-debian-stable/6801486/logs/openstack/aio1-utility/stestr_results.html -> failed but why16:51
* chandankumar looks deeper16:51
noonedeadpunkthat's rly interesting question... Maybe new condition doesn't work as expected?16:52
noonedeadpunkI mean which changed with that patch...16:52
jrosserso we've now moved to master git version of tempest rather than pip16:54
noonedeadpunkyep, that might be the case as wel.. But why centos do not fail then..16:54
noonedeadpunkbut skips as expected16:54
jrosseroh well, we've not bumped the master sha have we16:55
jrosserso now we could have the opposite problem that tempest is too new for the versions of the service we run16:55
*** cshen has joined #openstack-ansible16:56
noonedeadpunkI'd say we did https://opendev.org/openstack/openstack-ansible/src/commit/e2c7eb271cc79e8077d2ac6e13f614053d2585f8/playbooks/defaults/repo_packages/openstack_testing.yml16:56
noonedeadpunkbut yeah, we didn't test it actually16:56
jrosserright - but this https://review.opendev.org/#/c/683821/16:56
jrosser^ thats failing becasue tempest pip is too old for the service sha16:57
jrosserthis has the feeling of a circular problem :(16:57
chandankumarfrom this https://eb7fd4fca907b0349dac-fddd31f569f44d98bd401bfd88253d97.ssl.cf1.rackcdn.com/685974/2/check/openstack-ansible-deploy-aio_metal-debian-stable/6801486/logs/ara-report/16:57
chandankumarhttps://github.com/openstack/tempest/commit/8d1b36559c499c588c2a2644cd80cbcfeeda4291 got installed16:57
noonedeadpunkbut jrosser means that we probably need newer one16:58
noonedeadpunkmich makes kinda cross-dependency16:58
noonedeadpunkIf I understand correctly16:58
chandankumarnoonedeadpunk: may be due this https://github.com/openstack/openstack-ansible-os_tempest/blob/master/defaults/main.yml#L244 it is coming?16:58
jrosserso if we rewind a bit, this is where it all started https://review.opendev.org/#/c/682460/16:58
jrosserthere was a fix in keystone, we needed to bump the sha to get that16:59
jrosserbut then * was broken because in turn that needed a newer tempest17:00
tiffanie#endmeeting17:01
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: http://bit.ly/2xA1eZC"17:01
openstackMeeting ended Tue Oct  1 17:01:37 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:01
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-10-01-16.00.html17:01
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-10-01-16.00.txt17:01
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2019/openstack_ansible_meeting.2019-10-01-16.00.log.html17:01
* jrosser has to travel17:01
noonedeadpunkall in all I hope that enabling things will work out17:03
*** cshen has quit IRC17:06
*** cshen has joined #openstack-ansible17:07
*** cshen has quit IRC17:12
*** cshen has joined #openstack-ansible17:23
*** gillesMo has quit IRC17:25
*** r81 has quit IRC17:27
*** cshen has quit IRC17:28
jrosseroh nice this works now https://review.opendev.org/#/c/662585/17:37
*** ivve has joined #openstack-ansible17:41
*** gillesMo has joined #openstack-ansible18:26
*** ansmith_ has joined #openstack-ansible19:00
*** ansmith has quit IRC19:02
*** spsurya has quit IRC19:09
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_sahara master: Add global override for service bind address  https://review.opendev.org/68313919:19
*** markvoelker has quit IRC19:21
*** spatel has joined #openstack-ansible19:22
spatelnoonedeadpunk: hey!19:22
noonedeadpunkjrosser: that's nice:)19:23
noonedeadpunkspatel: hi:) sorry, a bit busy now19:23
spatelnoonedeadpunk: no problem, take your time.19:25
noonedeadpunkjrosser: but https://review.opendev.org/#/c/685974/3 is even worse....19:29
jrosseri saw yes, just looking19:29
jrosserquite probably we misunderstand something here19:29
*** SmearedBeard has joined #openstack-ansible19:30
mnaserits just yaml thjey said19:35
mnaserthey said*19:35
*** Miouge has quit IRC19:38
*** Miouge has joined #openstack-ansible19:38
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: Bump SHAs for master  https://review.opendev.org/68382119:43
jrossernoonedeadpunk: https://zuul.opendev.org/t/openstack/build/9c6cba0c1d914529980ad348f2a7629e/log/logs/host/keystone-wsgi-public.service.journal-18-18-10.log.txt.gz#717019:56
*** ansmith_ has quit IRC19:57
jrosserhmm just a warning though19:58
*** markvoelker has joined #openstack-ansible20:00
jrosserit actually fails here https://zuul.opendev.org/t/openstack/build/9c6cba0c1d914529980ad348f2a7629e/log/logs/host/keystone-wsgi-public.service.journal-18-18-10.log.txt.gz#715220:04
*** kopecmartin is now known as kopecmartin|off20:11
*** SmearedBeard has quit IRC20:11
*** Smeared_Beard has joined #openstack-ansible20:11
jrossernoonedeadpunk: cmurphy> jrosser: it needs 'application_credential' as part of the list in [auth]/methods, it is in the list by default but if your ansible config is overriding it then it would fail20:11
noonedeadpunkah, yep20:12
*** ansmith_ has joined #openstack-ansible20:12
noonedeadpunkI remember overriding this for keystone localy20:12
noonedeadpunkTo enable application credentials20:13
noonedeadpunkkeystone_auth_methods20:13
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible-os_keystone/src/branch/master/defaults/main.yml#L63\20:14
jrossermaybe no good reason we override the default?20:15
noonedeadpunkI'd say that this default was placed when application credentials was not in keystone... So maybe we should update defaults?20:16
noonedeadpunkWith upgrade reno20:17
jrossermaybe even remove the setting totally20:17
noonedeadpunki guess we needed it for federation?20:18
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible-os_keystone/src/branch/master/templates/keystone.conf.j2#L5220:19
noonedeadpunkand default is the way wider20:20
noonedeadpunkand not applicable for federation20:20
*** ansmith has joined #openstack-ansible20:20
noonedeadpunkSo I'd just adjusted  keystone_auth_methods20:21
jrosseryes here https://opendev.org/openstack/openstack-ansible-os_keystone/src/branch/master/defaults/main.yml#L6320:21
jrosseragreed20:21
jrosseri can patch?20:22
*** ansmith_ has quit IRC20:23
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_keystone master: Add application credentials as a default authentication method  https://review.opendev.org/68604120:29
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_tempest master: Fix tempest source install condition  https://review.opendev.org/68597420:30
*** pcaruana has quit IRC20:33
*** ansmith has quit IRC20:45
mnaserjrosser: we just got an epyc (rome) server to try and see how things work20:56
jrosseri have some arriving in the next eek or so20:56
jrosser*week20:56
mnasercat /proc/cpuinfo | grep ^process | wc -l => 9620:56
mnaserand the price is stupid compared to intels20:56
jrosseris this for compute?20:56
mnaseryeah20:57
mnaserthe equiv of this is the intel 826820:57
mnaser$6.3k each, so $12.6k both20:57
jrosseri have some 7402P for all NVMe ceph osd nodes20:57
mnaserthe epyc server turns out to be the price of a single intel cpu, with 512g of ddr4-3200 (intel doesnt even support this fast) cpus20:58
mnaserand pcie 4, not that i have anything that can use it yet20:58
jrossermellanox dual port 100G is the only thing i have which could actually need that20:59
mnaserand i think this is setup with 8 memory channels?20:59
jrosseryes20:59
mnaserim very excited to see what it does20:59
mnaserbtw if you're interested, train will support SEV21:00
mnaseryou do lose live migration but21:00
jrosseri held off amd for computes21:00
mnaserjrosser: well ill let you know how it goes :)21:02
jrossersimilar for the ceph things21:03
jrosseri'm very interested to see if it can keep up with a good number of NVMe21:03
jrosserand if i need to do a bunch of cpu pinning as iirc it's actually a numa system even in one socket21:04
BjoernTdoes anyone how to deal with   distutils.errors.DistutilsError: Download error for https://files.pythonhosted.org/packages/8d/e9/0c8afd1579e5cf7bc0f06fbcd7cdb954cbc0baadd505973949a99337da1c/cffi-1.12.3-cp27-cp27mu-manylinux1_x86_64.whl#sha256=2444d0c61f03dcd26dbf7600cf64354376ee579acad77aef459e34efcb438c63: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)21:09
BjoernThttp://paste.openstack.org/show/780646/21:09
BjoernTI have already --trusted-host=files.pythonhosted.org  inside command line and also pip.conf21:10
BjoernTbut it seems that the setuptools import inside the /usr/local/lib/python2.7/dist-packages/setuptools/package_index.py is ignoring all this21:10
jrosserBjoernT: i wonder if it is python2.7.<whatever> not dealing with SNI properly?21:13
BjoernThard to tell , i can pip wheel it manually21:15
BjoernTbut not when repo-install runs21:15
BjoernTmakes me believe that --trusted-host are ignored21:16
*** nicolasbock has quit IRC21:17
BjoernTalso there is a mismatch in queens on the version, cffi is limited to 1.11.4 but cryptography pulls in 1.12.3 which is strange21:17
*** csmart_ has quit IRC21:24
*** openstackstatus has quit IRC21:32
*** openstackstatus has joined #openstack-ansible21:34
*** ChanServ sets mode: +v openstackstatus21:34
*** spatel has quit IRC21:44
*** ansmith has joined #openstack-ansible22:06
*** luksky has quit IRC22:10
*** weshay has quit IRC22:29
openstackgerritMerged openstack/openstack-ansible-os_nova master: vars: package cleanup  https://review.opendev.org/66258522:30
*** tosky has quit IRC23:02
*** BjoernT has quit IRC23:04
*** macz has quit IRC23:05
*** macz has joined #openstack-ansible23:07
*** macz has quit IRC23:10
*** BjoernT has joined #openstack-ansible23:33
snadgeis redhat 8 supported, or preferred to v7? whats the story with that.. what platforms are we all using23:37
*** markvoelker has quit IRC23:38
*** markvoelker has joined #openstack-ansible23:44
*** ivve has quit IRC23:47
BjoernTI doubt redhat 8 has been tested yet, as usually centos would come first as it's easier to gate (no licenses)...23:50

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!