Wednesday, 2019-11-06

*** nicolasbock has quit IRC00:06
*** nicolasbock has joined #openstack-ansible00:06
*** cshen has joined #openstack-ansible00:17
*** nicolasbock has quit IRC00:20
*** gyee has quit IRC00:33
*** macz has quit IRC00:36
*** cshen has quit IRC00:41
*** cshen has joined #openstack-ansible00:46
*** cshen_ has joined #openstack-ansible01:06
*** cshen has quit IRC01:08
*** born2bake has quit IRC01:31
*** openstackstatus has joined #openstack-ansible01:43
*** ChanServ sets mode: +v openstackstatus01:43
*** cshen_ has quit IRC01:50
*** nicolasbock has joined #openstack-ansible02:18
*** cshen has joined #openstack-ansible02:23
*** nicolasbock has quit IRC02:26
*** nicolasbock has joined #openstack-ansible02:27
*** cshen has quit IRC02:27
*** nicolasbock has quit IRC02:44
*** lixingxing has joined #openstack-ansible02:44
*** nicolasbock has joined #openstack-ansible02:51
*** cshen has joined #openstack-ansible02:54
*** idlemind has quit IRC02:55
*** lixingxing has quit IRC03:15
*** nicolasbock has quit IRC03:21
*** cshen has quit IRC03:25
*** rohit02 has joined #openstack-ansible03:27
*** cshen has joined #openstack-ansible03:31
*** nurdie has joined #openstack-ansible03:43
*** cshen has quit IRC03:52
*** cshen has joined #openstack-ansible04:00
*** cshen has quit IRC04:08
*** nurdie has joined #openstack-ansible04:12
*** nurdie has quit IRC04:16
*** goldyfruit_ has quit IRC04:47
*** nurdie has joined #openstack-ansible04:52
*** nurdie has quit IRC04:56
*** cshen has joined #openstack-ansible05:07
*** nurdie has joined #openstack-ansible05:22
*** nicolasbock has joined #openstack-ansible05:23
*** cshen has quit IRC05:27
*** nurdie has quit IRC05:27
*** cshen has joined #openstack-ansible05:28
*** irclogbot_2 has quit IRC05:34
*** irclogbot_0 has joined #openstack-ansible05:37
*** pcaruana has joined #openstack-ansible05:59
rohit02hi team .....how we can cinder volume backend both ceph and lvm in stein......getting error for lvm "lvm driver not support active active configuration"06:01
rohit02plzz help me if any one having idea06:04
*** kimhindart has joined #openstack-ansible06:10
*** radeks has joined #openstack-ansible06:16
*** radeks has quit IRC06:18
*** radeks has joined #openstack-ansible06:19
*** cshen has quit IRC06:31
*** gokhani has joined #openstack-ansible06:54
jrosserrohit02: I don’t think the lvm driver can do active/active06:55
jrossercan you explain a bit why you need both?06:55
*** rohit02 has quit IRC06:57
*** rohit02 has joined #openstack-ansible06:57
*** waxfire has joined #openstack-ansible07:08
*** hwoarang has quit IRC07:12
*** hwoarang has joined #openstack-ansible07:16
*** jawad_axd has joined #openstack-ansible07:17
*** fungi has quit IRC07:20
*** kimhindart has quit IRC07:21
*** nurdie has joined #openstack-ansible07:23
*** nicolasbock has quit IRC07:24
*** cshen has joined #openstack-ansible07:24
*** nurdie has quit IRC07:28
*** shyamb has joined #openstack-ansible07:32
*** luksky has joined #openstack-ansible07:34
*** shyamb has quit IRC07:44
*** nicolasbock has joined #openstack-ansible07:48
*** yolanda has quit IRC07:55
*** int-0x21 has joined #openstack-ansible07:55
*** nicolasbock has quit IRC07:58
*** nicolasbock has joined #openstack-ansible07:58
*** kopecmartin|pto is now known as kopecmartin|sick08:05
*** nicolasbock has quit IRC08:07
*** cshen has quit IRC08:08
*** tosky has joined #openstack-ansible08:10
*** yolanda has joined #openstack-ansible08:11
*** nicolasbock has joined #openstack-ansible08:16
*** nicolasbock1 has joined #openstack-ansible08:19
*** kimhindart has joined #openstack-ansible08:19
*** nicolasbock has quit IRC08:20
*** arxcruz|off is now known as arxcruz08:21
*** nicolasbock1 has quit IRC08:24
*** nicolasbock has joined #openstack-ansible08:25
openstackgerritkourosh vivan proposed openstack/openstack-ansible master: Fix requirements_git_url call  https://review.opendev.org/69301108:27
*** nicolasbock has quit IRC08:34
openstackgerritkourosh vivan proposed openstack/openstack-ansible-os_keystone master: Add possibility to overwrite public repo  https://review.opendev.org/69287208:38
*** kimhindart has quit IRC09:03
*** kimhindart has joined #openstack-ansible09:06
*** mathlin has quit IRC09:12
*** kimhin has joined #openstack-ansible09:23
*** miloa has joined #openstack-ansible09:23
*** nurdie has joined #openstack-ansible09:24
*** kimhindart has quit IRC09:26
*** kimhin has quit IRC09:28
*** nurdie has quit IRC09:29
miloaMorning09:30
int-0x21Morning09:37
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_glance stable/train: Drop common-db tag from db_sync task  https://review.opendev.org/69314609:42
jrossermorning09:47
*** admin0 has joined #openstack-ansible09:47
*** kimhindart has joined #openstack-ansible09:59
*** kimhindart has quit IRC10:02
*** DanyC has joined #openstack-ansible10:08
*** DanyC has joined #openstack-ansible10:09
*** DanyC has quit IRC10:10
*** ianychoi has quit IRC10:13
*** DanyC has joined #openstack-ansible10:14
*** DanyC has quit IRC10:42
*** luksky has quit IRC10:56
*** sep has quit IRC10:59
*** sep has joined #openstack-ansible11:02
*** DanyC has joined #openstack-ansible11:03
*** noonedeadpunk[h] has joined #openstack-ansible11:24
miloaOn stable/rocky I've got a problem with panels, horizon_install.yml install all packages without filtering if panel is set to true or false, as packages install panels in "enabled" repo the panels are by default present, althrougt the py file of panel is removed from repo "enabled" because pyc and pyo are still present. Perhaps it would be better to use package install and remove in place of the11:25
miloaactual panel enabled task in horizon_post_install.yml for distrib install method.11:25
*** nurdie has joined #openstack-ansible11:25
frestaIs there documentation anywhere on how to best configure the public/floating network? I would like to use the same interface and subnet for both api stuff and floating ips.11:27
*** noonedeadpunk[h] has quit IRC11:29
*** nurdie has quit IRC11:30
jrosserfresta: you can configure the public network any way you like, there isn't really a definition of "best"11:31
jrosserhowever i would say that sharing the subnet for floating IP and API stuff is only really something that should be done in a lab environment11:31
jrossercertainly never anywhere you care about the security of the openstack control plane11:32
openstackgerritAndriy Shevchenko proposed openstack/openstack-ansible-os_blazar master: fix tox python3 overrides  https://review.opendev.org/66154511:35
frestaThis is for a lab env so security is not that important. I created a bridge "br-public" and assigned a public ip for control plane api stuff. But when giving neutron that bridge as a flat network I get """Error: Can not enslave a bridge to a bridge."""11:36
frestajrosser: Maybe I shouldn't use a bridge for that?11:37
jrosseryou cannot give a bridge to neutron like that11:37
jrosserit must be an interface11:37
jrosserfresta: i would read this https://github.com/openstack/openstack-ansible/blob/master/etc/network/interfaces.d/openstack_interface.cfg.prod.example#L108-L12411:38
jrosserthere is an example config there where the native (untagged) traffic on br-vlan is connected via a veth to a special interface eth1211:39
jrossereth12 is then specified to neutron as the physical interface (even though in this case its not physical)11:40
jrosserso if you really want to use br-mgmt also for the public network, you can do the same trick11:40
*** noonedeadpunk[h] has joined #openstack-ansible11:41
jrosserbut make sure that you have specified the addresses you want to use for public/floating IP here https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.prod.example#L7-L1111:41
jrosserotherwise the OSA dynamic inventory is likley to allocate container IP where you don't want them11:42
noonedeadpunk[h]mornings11:45
*** luksky has joined #openstack-ansible11:45
frestajrosser: Aha that's clever. I was hoping i could do all network config with netplan but I don't think it supports veth (among a lot of other things).11:45
frestaBut I will give this a try. Thanks a lot!11:45
openstackgerritAndriy Shevchenko proposed x/monitorstack master: Update home-page  https://review.opendev.org/63045211:46
jrosserfresta: no worries - let us know if it works out11:47
noonedeadpunk[h]why is this ^ under our governance?11:49
gshippeynoonedeadpunk[h]: can you regenerate the SHA bump for master, https://review.opendev.org/#/c/689649/1 this one is stale11:49
noonedeadpunk[h]gshippey: oh, yep, sure. I guess I've missed master yestarday11:50
*** luksky has quit IRC11:56
openstackgerritMerged x/monitorstack master: Update home-page  https://review.opendev.org/63045212:00
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Bump SHAs for master  https://review.opendev.org/69316312:13
*** rohit02 has quit IRC12:13
*** sshnaidm|off is now known as sshnaidm|bbl12:14
openstackgerritMikael Loaec proposed openstack/openstack-ansible-os_horizon stable/rocky: [WIP]Fix panels enable/disable for distro install.  https://review.opendev.org/69280412:17
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Bump SHAs for master  https://review.opendev.org/69316312:17
jrossernoonedeadpunk: this is subtle error https://review.opendev.org/#/c/692872/512:29
*** rohit02 has joined #openstack-ansible12:29
jrosseri wonder if UTF-8 is slipping into our code un-noticed......12:29
*** ansmith_ has quit IRC12:33
noonedeadpunk[h]jrosser: yeah, that may happen actually, but I'm not sure how to check that right now... I guess ansible-lint is not checking this12:34
jrossernoonedeadpunk[h]: i only found what was going on by cherry-picking the patch and pasting it here http://pygments.org/demo/6935167/12:37
jrosserit nicely highlights the location of the warnings12:37
noonedeadpunk[h]I guess I have some extension for vs code for checking that - but it's nice tool12:39
* noonedeadpunk[h] adds to bokkmarks12:39
noonedeadpunk[h]I think we need to add some check to the linters check12:41
noonedeadpunk[h]But it's worth doing while migrating to the integrated linters check - to edit them in one place instead of every tox12:41
openstackgerritMerged openstack/openstack-ansible-galera_server master: Restart mysql when package is installed  https://review.opendev.org/69304312:43
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-galera_server stable/train: Restart mysql when package is installed  https://review.opendev.org/69317212:44
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-galera_server stable/stein: Restart mysql when package is installed  https://review.opendev.org/69317312:44
*** luksky has joined #openstack-ansible13:03
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: Ansible  'search' is a test not a filter  https://review.opendev.org/69306113:08
guilhermespmornings13:08
jrossero/13:12
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rabbitmq_server stable/train: Ansible  'search' is a test not a filter  https://review.opendev.org/69317713:13
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rabbitmq_server stable/stein: Ansible  'search' is a test not a filter  https://review.opendev.org/69317813:14
frestajrosser: I created a veth pair, connected one end to br-public and specified the other for neutron. Works perfectly. Thanks again!13:26
jrosserfresta: excellent13:29
*** ansmith_ has joined #openstack-ansible13:33
*** nurdie has joined #openstack-ansible13:41
noonedeadpunk[h]jrosser: so https://github.com/ansible/ansible/pull/64512 worked for my test environment. Wondering how master works with rabbitmq 3.8 now...13:47
jrosserdid we bump rabbitmq to 3.8?13:49
*** henryb has joined #openstack-ansible13:55
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_tempest stable/queens: Don't download image when it's already there  https://review.opendev.org/69318214:09
*** goldyfruit_ has joined #openstack-ansible14:10
openstackgerritMerged openstack/openstack-ansible stable/train: Bump SHAs for stable/train  https://review.opendev.org/69300814:16
openstackgerritMerged openstack/openstack-ansible stable/stein: Bump SHAs for stable/stein  https://review.opendev.org/69300214:16
openstackgerritMerged openstack/openstack-ansible stable/pike: Bump SHAs for stable/pike  https://review.opendev.org/68965214:16
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-tests master: Use the cached cirros image for tests run from this repo  https://review.opendev.org/69318514:21
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_glance stable/train: Drop common-db tag from db_sync task  https://review.opendev.org/69314614:22
openstackgerritkourosh vivan proposed openstack/openstack-ansible-os_keystone master: Add possibility to overwrite public repo  https://review.opendev.org/69287214:24
jrosserint-0x21: ThiagoCMC:  this is merged https://review.opendev.org/#/c/693008/, so stable/train of OSA should now have all the dependancies pointing correctly to Train repos14:25
*** radeks has quit IRC14:27
jrossernoonedeadpunk[h]: guilhermesp i dont understand why this is proceeding to the gate https://review.opendev.org/#/c/692607/ becasue it looks like the same change is already merged in the stable/train SHA bunp14:30
noonedeadpunk[h]I dunno actually, as it was placed before the bump14:31
guilhermesphum i guess this needed a -1 before the stable/train sha bump?14:33
guilhermespor maybe we just missed that14:36
jrosserperhaps - i was expecting to see a conflict or "cannot merge"14:36
int-0x21jrosser, oh nice i will check it out14:36
guilhermespyeah not sure... this was +w yesterday14:36
int-0x21Been doing some testing with manual install of openstack to get a better feel for it and am back to ansible now when i have more control of what is actualy happening14:36
int-0x21master still has the "  no filter named 'ips_in_ranges' " for ceph mon it seems14:37
*** rohit02 has quit IRC14:37
guilhermespjrosser: should we abandon or wait zu to execute? it already failed one job so, it's not gonna merge14:38
guilhermespzuul*14:38
*** goldyfruit___ has joined #openstack-ansible14:38
*** rohit02 has joined #openstack-ansible14:38
*** goldyfruit_ has quit IRC14:40
*** sshnaidm|bbl is now known as sshnaidm|rover14:41
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Fix typos in the yml files  https://review.opendev.org/69295614:45
int-0x21Putting ipaddrs_in_ranges.py into /opt/openstack-ansible/playbooks/filter_plugins/ solved the ceph_mon issue14:51
openstackgerritMerged openstack/openstack-ansible-nspawn_container_create master: Fix typos in the yml files  https://review.opendev.org/69277314:51
openstackgerritMerged openstack/openstack-ansible-pip_install master: Update the source link to the lastest one  https://review.opendev.org/69277614:52
openstackgerritMerged openstack/openstack-ansible-repo_server master: Fix the format of the bugs link  https://review.opendev.org/69277414:55
noonedeadpunk[h]guilhermesp: jrosser was right, https://review.opendev.org/#/c/692607/1 is not needed as this sha is laready merged. https://opendev.org/openstack/openstack-ansible/src/branch/stable/train/ansible-role-requirements.yml#L21914:58
*** ansmith has joined #openstack-ansible15:01
*** sum12 has left #openstack-ansible15:02
*** ansmith_ has quit IRC15:03
*** ansmith has quit IRC15:31
*** ansmith has joined #openstack-ansible15:31
*** rohit02 has quit IRC15:33
*** rohit02 has joined #openstack-ansible15:34
*** prometheanfire has quit IRC15:38
*** prometheanfire has joined #openstack-ansible15:39
*** rohit02 has quit IRC15:39
*** gyee has joined #openstack-ansible15:46
openstackgerritMikael Loaec proposed openstack/openstack-ansible-os_horizon stable/rocky: [WIP]Fix panels enable/disable for distro install.  https://review.opendev.org/69280415:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_glance master: [DNM] test patch  https://review.opendev.org/69320315:48
ThiagoCMCHey guys, todays bootstrap-ansible.sh (stable/train) is failing, two or three errors: git openstack-ansible-os_placement fatail: reference is not a tree, same with git ansible-role-uwsgi, then, in the end, the script can't find "/var/lib/lxc" withn the deployment host but, no containers is supposed to be running at the deployment server.15:58
*** ansmith has quit IRC16:00
*** noonedeadpunk[h] has quit IRC16:00
*** macz has joined #openstack-ansible16:04
jrosserdirk: i see this on two different CI providers now https://zuul.opendev.org/t/openstack/build/629e4415c3d94bb8a46c03a5747c2051/log/job-output.txt#1321316:12
jrossermaybe an upstream repo issue there?16:12
*** cshen has joined #openstack-ansible16:22
*** ansmith has joined #openstack-ansible16:22
*** DanyC has quit IRC16:32
*** ivve has quit IRC16:34
jrosserThiagoCMC: i'm not sure what is going on for you - i have just bootstrap-ansible on a VM and all the repos clone OK? http://paste.openstack.org/show/785859/16:45
*** miloa has quit IRC16:52
*** DanyC has joined #openstack-ansible17:07
*** DanyC has quit IRC17:12
guilhermespok so i think then we can proceed to abandon 692607 jrosser noonedeadpunk17:16
jrosseryes i think so17:16
jrosserlooks like we need some help from our suse friends....     * seems broken17:17
guilhermesphow's more susish nowadays ?17:17
*** spatel has joined #openstack-ansible17:21
spatelI hate when you running playbooks and you found its breaking because some remote fedora repo is down17:22
spatelis there any good way to make it failover to next repo or try other ?17:22
*** jawad_axd has quit IRC17:23
*** andrea15 has joined #openstack-ansible17:26
*** jawad_axd has joined #openstack-ansible17:29
*** melwitt is now known as jgwentworth17:31
*** jawad_axd has quit IRC17:32
*** DanyC has joined #openstack-ansible17:36
ThiagoCMCjrosser: which branch are you on?17:36
jrosseri made new VM and checked out stable/train just an hour or two ago17:37
ThiagoCMCHere is my output: https://pastebin.com/WNUCjiQE - error at lines 6, 35 and 57 until almost the end...17:39
spatelwhy running openstack-ansible setup-hosts.yml --limit infra01   doing nothing17:41
jrosserdid you start from fresh or is this a git fetch / git checkout stable/train / ./scripts/bootstrap-ansible.sh on top of a previous deployment17:41
spatelbut if i run "openstack-ansible setup-hosts.yml"  only it works17:41
ThiagoCMCjrosser: it's not 100% fresh, I'll rebuild the OSA Deployment Server tonigh and try again.17:42
jrossera quick woraround would be to just delete the things that are failing from /etc/ansible/roles and re-bootstrap17:42
guilhermesphum i see ThiagoCMC is already using the recent merged bump shas https://review.opendev.org/#/c/693008/17:44
guilhermespyeah, i think maybe deleting the roles and let the bootstrap script clone then again might work17:44
*** cshen has quit IRC17:45
guilhermespfailing roles to be more precise17:45
ThiagoCMCHmm... got it! I'll try that now.17:46
jrosserguilhermesp: i wish i understood why this happens17:46
jrossersometimes we bump the SHA and the exact same thing happens in the CI jobs17:47
jrosserusually for external repos like gnocchi so i feel like it is something to do with the way the git history is structured17:47
guilhermespwhen we change a sha, or overide it, we expect the bootstrap-script to re-clone it right? or checkout it to the specified sha17:48
jrosserultimately it's this https://github.com/openstack/openstack-ansible/blob/master/scripts/get-ansible-role-requirements.yml#L98-L11117:49
guilhermespok so might be a module issue or a git issue itself.17:51
jrosserso yes, we expect bootstrap-ansible to get the /etc/ansible/roles/* to the correct state regardless of if it's fresh or an upgrade17:51
jrosserabsolutely yes17:51
ThiagoCMCAHA! The "rm -rf /etc/ansible/roles/os_placement and uwsgi fixed the issue!17:51
jrosserguilhermesp: ^ so there i guess we know that there are cases where it works for fresh clones but not for moving an existing role forward to a new SHA17:52
jrosserbut only for some roles, some times :(17:52
guilhermespthat's the only clue we have17:52
guilhermesp"stderr": "fatal: reference is not a tree: c42b0d95ff4ab8c4ca00404df04f2eaaff431c9c\n", "stderr_lines": ["fatal: reference is not a tree: c42b0d95ff4ab8c4ca00404df04f2eaaff431c9c"], "stdout": "", "stdout_lines": []}17:52
guilhermespos_placement example ^17:53
jrosseri think you get the same error if after finding one of those you cd to the directory and git show <SHA>17:53
jrosserbut it would be good to confirm that17:53
guilhermespThiagoCMC: do you still have a failing repo or did you rm -rf all failing roles?17:54
ThiagoCMCI did the "rm -rf /etc/ansible/roles/os_placement /etc/ansible/roles/uwsgi" (the failing roles) and the bootstrap worked!17:55
ThiagoCMCI'm also seeeing something related to Python3 not being in use: "Not overwriting existing python script /opt/ansible-runtime/bin/python (you must use /opt/ansible-runtime/bin/python3)" - can I ignore that?    =)17:56
ThiagoCMCYeah, never mind, the python is a symlink to python3, sorry about the buzz.17:57
ThiagoCMCFor some reason, stable/train is creating the neutron_server_container-xxx within the Network Nodes (where I only expect the neutron-*-agents as metal). It's ignoring my /etc/openstack_deploy/env,d/neutron.yml file. I tried jrosser suggestions, no effect.18:02
ThiagoCMCIt works on stable/stein!18:02
guilhermespjrosser: that's the suse issues you were mentioning https://zuul.opendev.org/t/openstack/build/55e278d3b56143c79c2049a283301a39/log/job-output.txt#3981 ?18:09
jrosser I saw a whole bunch of failing to install packages from the suse repo / mirror18:10
d34dh0r53wrt to mnaio, people are still using it but I think they have their own workarounds for things, it's generally still usable but needs a little TLC18:23
d34dh0r53jamesdenton, jrosser ^18:24
*** DanyC has quit IRC18:24
jrosserd34dh0r53: always good to roll in fixed for those workarounds.....18:26
jamesdentonthanks, d34dh0r53. i had every intention of getting to it today, but real work™ got in the way18:35
d34dh0r53:) no worries, while you're both here, any objections to me making 18.04 the default image for the vms?18:36
*** jgwentworth is now known as melwitt18:36
jamesdentoni demand it18:36
jamesdenton:D18:36
d34dh0r53lol, excellent18:36
cjloaderjamesdenton: d34dh0r53 o/18:39
d34dh0r53howdy cjloader18:39
jamesdentonhi there18:39
*** tosky has quit IRC18:48
*** int-0x21 has quit IRC18:52
*** strattao has quit IRC19:15
*** sshnaidm|rover is now known as sshnaidm|afk19:27
*** spatel has quit IRC19:28
*** ivve has joined #openstack-ansible19:51
*** nurdie has quit IRC20:01
*** nurdie has joined #openstack-ansible20:02
*** ansmith has quit IRC20:13
*** nurdie has quit IRC20:19
*** nurdie has joined #openstack-ansible20:19
*** nurdie has quit IRC20:24
*** spatel has joined #openstack-ansible20:31
spatelany idea what is this error for20:31
-spatel- fatal: [ostack-eng-infra-1-2_keystone_container-0889527d -> 172.28.17.12]: FAILED! => {20:31
-spatel- "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",20:31
spateljrosser: any idea? its happening during "Create DB for services" task20:35
jrosseri would be setting the no_log to false otherwise you'll never see the underlying error20:36
spateljrosser: i can see error unable to connect database, check your password or account20:44
spateljrosser: does galera create services accounts or keystone going to create service account?20:45
spateljrosser: this is the error i am getting http://paste.openstack.org/show/785866/20:48
spatelwhat is this "reading initial communication packet" ?20:48
jrossermaybe first check that 172.28.17.12 is the host you expect that task to be delegated to20:53
jrosserand also if you expect this "login_host": "172.28.16.9",20:54
spateli can see mysql is up and all 3 cluster nodes registerd20:54
spatel172.28.16.9 is my HAproxy VIP (internal)20:54
spateldo i need to tell mysql to allow host access from 172.28.16.9 ?20:54
jrosserif that is your VIP then that should be done already, i guess20:57
jrosserspatel: so for example, from my utility container i can use the mysql cli to interact with the database20:58
spatellet me try from my util box20:59
jrosserand if this works that will prove you can access the db via the VIP20:59
-spatel- $ mysql -h 172.28.16.9 -u root20:59
-spatel- ERROR 2013 (HY000): Lost connection to MySQL server at 'handshake: reading inital communication packet', system error: 1120:59
spatellook like something is wrong21:00
spatelI am running HAproxy on Infra nodes*21:00
spatelinfra-1/221:00
spatelI am running tcpdump on mysql and not seeing any request coming on it from LB21:05
spateli believe something is wrong with LB21:05
jrosserlooks like it, yes21:05
spatelcrap!! haproxy saying galera-back down21:08
spatelbut i can see its up and i can access from HAproxy node21:09
spatellet me poke...21:09
spatelfrom infra node i can do "telnet 172.28.17.12 3306"21:10
spatelwhat is this?21:12
spatelserver ostack-eng-infra-1-2_galera_container-d11cc5d0 172.28.17.12:3306 check port 9200 inter 12000 rise 1 fall 121:12
spatelwhy saying check port 9200 ?21:12
*** nurdie has joined #openstack-ansible21:13
spateljrosser: ^^21:13
ionispatel, that's xinetd from galera21:15
ioniit runs in galera container21:15
ionissh into galera container and check if is running21:16
*** goldyfruit___ has quit IRC21:16
ioniif is running, then look at /etc/xinetd.d/mysqlchk21:16
ionimaybe only_from wasn't detected correctly21:16
spatelioni: you are right21:17
spatelonly_from = 172.28.16.7 172.28.16.8 172.28.16.12 172.28.16.13 172.28.16.14 172.28.1.216 172.28.15.166 172.28.15.69 127.0.0.121:17
spateli can't see HAproxy IP address in this list21:17
*** nurdie has quit IRC21:18
ionii used to have galera_monitoring_allowed_source: "0.0.0.0/0" in user_variables.yml21:18
ionito avoid this issue in the past21:18
spatellook like... i have to do that21:18
spatelioni: thanks for point that out21:19
ionispatel, your welcome my friend :)21:19
jrosserthis ought to be default? https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/galera_all.yml#L3521:23
*** gshippey has quit IRC21:27
*** pcaruana has quit IRC21:27
spatelioni: do you know how to run specific tag to update xinited ?21:28
spateli don't want to run whole playbook to just update xinted :)21:29
spateljrosser: Do you know?21:29
ionispatel, not really, i don't really use tags seens most of the time, when i try, they don't work as expected21:29
spatelis it safe to run galere playbook ?21:30
spatelioni: ^21:32
ionior you can use edit the file manually on couples of containers :D21:32
spatelioni: i want to see what happen :)21:33
jrosseralso depends how much you want to find why it is broken21:33
jrosserthis could be just the first of a few things that somehow doesnt get the VIP address properly21:33
*** nurdie has joined #openstack-ansible21:34
*** nurdie has quit IRC21:35
*** nurdie has joined #openstack-ansible21:36
spateljrosser: i thought playbook will be smart enough to add HAproxy IPs but it didn't :(21:36
jrosserright, but it should21:36
jrosserand i linked you to the group_vars which will set it21:36
jrosserso its a judgement, either its just broken, which is unlikley as there are lots of multinode deploys out there working, or there is something in your environment/vars causing this21:37
jrosseror a corner case which we need to fix21:38
spatelOh yess.. interesting..21:38
jrosserjust adding a debug: var: galera_monitoring_allowed_source21:39
spatelyou know what i have "galera_monitoring_allowed_source:" in user_variable.yml may be i am overwriting stuff :)21:39
jrosserfollowed by fail: task into the galera playbook would be reasonable way to see whats happening21:39
jrosserahha!21:39
spateldamn it... that is the issue21:40
jrosserso for things like this i always first go to codesearch.openstack.org21:40
spateli wish no matter what you have in user_variable.yml it should force add haproxy group21:40
jrosserand put the var name in, and straight away up pops everywhere it is defined / used21:40
*** nurdie has quit IRC21:40
spateljrosser: i love it ----> codesearch.openstack.org21:41
spatelis this dedicated for openstack-ansible or whole universe ?21:42
jrosseropenstack everything21:42
spatelits very handy though :) i can see how to troubleshoot now21:42
jrosserit is this https://github.com/hound-search/hound21:43
spatelnice jquery :)21:44
spateljrosser: Do you guys using Cell_v2 ?21:50
spatelI have zero experience with cell deployment that is why building 3rd isolated cluster :(21:50
spatelI hate doing.. because it required lots of work21:51
jrosserno we don't do that21:52
spatelhow do you running multiple cloud?21:59
*** henryb has quit IRC22:05
*** tosky has joined #openstack-ansible22:10
*** spatel has quit IRC22:36
*** nicolasbock has joined #openstack-ansible22:47
*** nicolasbock has quit IRC23:00
*** nicolasbock has joined #openstack-ansible23:01
*** nicolasbock has quit IRC23:12
*** nicolasbock has joined #openstack-ansible23:21
*** nicolasbock has quit IRC23:21
*** nicolasbock has joined #openstack-ansible23:21
*** ansmith has joined #openstack-ansible23:24
*** nicolasbock has quit IRC23:31
*** nicolasbock has joined #openstack-ansible23:32
*** nicolasbock has quit IRC23:36
*** tosky has quit IRC23:48

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!