Thursday, 2019-12-19

*** schwicht has quit IRC00:12
*** rholloway has joined #openstack-ansible00:13
*** rholloway has quit IRC00:38
*** gyee has quit IRC00:51
df_sbrTASK [os_ceilometer : Add keystone domain] **************************************************************************************************************************01:50
df_sbrfatal: [compute004]: FAILED! => {"msg": "The conditional check '(groups[(ceilometer_services['ceilometer-agent-notification']['group'] | intersect(group_names))[0]] | intersect(ansible_play_hosts))[0] | length > 0' failed. The error was: error while evaluating conditional ((groups[(ceilometer_services['ceilometer-agent-notification']['group'] | intersect(group_names))[0]] | intersect(ansible_play_hosts))[0] | leng01:50
df_sbrth > 0): list object has no element 0\n\nThe error appears to be in '/etc/ansible/roles/os_ceilometer/tasks/service_setup.yml': line 34, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n  block:\n    - name: Add keystone domain\n      ^ here\n"}01:50
df_sbrjrosser:  Tried again with a fresh  stable/train branch.  Still getting the same errors here^01:51
*** dave-mccowan has quit IRC02:26
*** irclogbot_1 has quit IRC02:56
*** irclogbot_3 has joined #openstack-ansible03:08
*** irclogbot_3 has quit IRC03:09
*** irclogbot_2 has joined #openstack-ansible03:14
*** dave-mccowan has joined #openstack-ansible03:19
*** goldyfruit_ has quit IRC04:14
*** dave-mccowan has quit IRC05:39
*** pcaruana has joined #openstack-ansible05:43
*** raukadah is now known as chandankumar06:06
*** elenalindq has joined #openstack-ansible06:13
*** gokhani has quit IRC07:00
*** jawad_axd has joined #openstack-ansible07:17
*** jbadiapa has joined #openstack-ansible07:20
jrosserdf_sbr: everything fresh? including bootstrap-ansible.sh again?07:30
*** irclogbot_2 has quit IRC07:44
*** irclogbot_2 has joined #openstack-ansible07:44
*** kopecmartin|off is now known as kopecmartin07:58
*** cshen has joined #openstack-ansible08:06
*** tosky has joined #openstack-ansible08:14
*** miloa has joined #openstack-ansible08:19
*** gokhani has joined #openstack-ansible08:24
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/69906008:30
taccomorning everyone08:40
taccowhere are the /etc/hosts entrys directed? i would like to persistent add a custom /etc/host entry08:40
taccowhat would be the best way08:40
*** DanyC has joined #openstack-ansible08:57
*** DanyC has joined #openstack-ansible08:57
*** DanyC has quit IRC08:58
*** starborn has joined #openstack-ansible09:04
*** DanyC has joined #openstack-ansible09:06
*** jbadiapa has quit IRC09:13
*** jbadiapa has joined #openstack-ansible09:13
*** rpittau|afk is now known as rpittau09:18
jrossertacco: for the things that openstack-ansible knows about it's done here https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/templates/openstack-host-hostfile-setup.sh.j209:47
jrosserhowever for things that are outside the OSA inventory you might need to deal with that outside of OSA, during the whatever host preparation you do?09:47
*** tosky_ has joined #openstack-ansible10:07
*** tosky is now known as Guest9772710:07
*** tosky_ is now known as tosky10:07
*** Guest97727 has quit IRC10:08
*** gshippey has joined #openstack-ansible10:12
*** sshnaidm|afk is now known as sshnaidm11:21
openstackgerritMerged openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/69906011:25
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-os_ceilometer master: Check host is within group  https://review.opendev.org/69995711:39
taccojrosser: ok. thanks for pointing me there.11:45
snadgejrosser.. just wanted to say i finally got my vsphere multi vm openstack install to pass tempest and work properly11:56
jrosser\o/ excellent11:56
snadgeit took me a while, but I got there eventually.. hehe11:56
jrosserwhat did you do with the tenant networking in the end?11:56
snadgeit looks like you can fiddle with tempest and change parameters for the private network11:56
snadgebut i ended up just using vxlan bridged to an interface which was common to all the vms (just added one)11:57
snadgeand it seems to work11:57
jrossercool, in a way thats the least config option becasue once that vxlan interface is working you can have a whole ton of tunnels over it11:57
snadgei thought i might have to enable something on vsphere to get vxlan to work.. but presumably thats if you want to switch it or route it to another vsphere box etc11:57
jrosserwell, it's just UDP packets that the host is making that happen to be vxlan11:58
snadgesince its all local to the one vsphere host and its only used internally between those vms specific to openstack.. then it would seem its not necessary11:58
jrosserif they can route to other hosts of yours then everything should be fine11:58
snadgeright11:58
jrosserthere is a bit of multicast involved though, so thats one to watch out for11:58
snadgepromiscuous mode is enabled on that interface11:59
jrosserbroadcast and arp and so on ends up on a multicast group11:59
snadgewhich is required for bridging support, and potentially that as well11:59
snadgein production we use vlans.. but im not sure why, since that is limited to 4000 tunnels or what have you12:00
jrosserit depends what you want to do really12:00
*** DanyC has quit IRC12:00
snadgemy short term or immediate goal, is to replace their existing openstack setup, with a new version thats openstack-ansible deployed12:01
jrosserif you scale out a bit then vlans can be troublesome with lots of L2 spanned all over the place and STP blah blah, maybe hard to engineer resilience into that12:01
snadgeit seems logical to mirror their existing setup as closely as possible12:01
jrosserabsolutely12:01
*** DanyC has joined #openstack-ansible12:02
snadgeand then discuss changing that to make it more resilient etc12:02
snadgefor example they only have one infra node essentially, there is no clustering on that12:02
jrossersnadge: well it's not all excellent with the clustering either, seems rabbitmq is causing a lot of problems for people at upgrade time12:03
snadgebut to add a second infra node, the support for that is included with OA12:04
snadgeso their current strategy is to have two identical production setups.. one idle.. and they alternate between them12:04
snadgeso "upgrade" is basically install new version onto idle cluster.. and move all the instances over to it when they're happy to do so12:04
snadgethis is obviously a massive waste of hardware12:04
snadgebut it avoids these upgrade pains somewhat12:05
snadgei guess you could also say thats a crude form of HA or redundancy.. if something goes super bad, you can quickly switch over to the "backup" system12:06
snadgewhen i say quickly.. within hours or a day12:06
snadgei see there is a release version of OA for train, but it looks like some people have ran into upgrade problems as you have mentioned12:08
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/ansible-hardening master: Fix ignoring of packages in 'latest' state  https://review.opendev.org/69996312:10
noonedeadpunkjrosser: I think that's the patch we need to fix chrony absence12:12
noonedeadpunkthanks for stopping me :p12:12
jrosserwoah that is obtuse ansible used in that task12:18
noonedeadpunkactually things got broken after we merged this https://review.opendev.org/#/c/693614/12:22
df_sbrjrosser:  Yes.  I rm -rf /etc/ansible/* ;  rm -rf /opt/ansible-runtime ; rm -rf /etc/openstack-ansbile/ansible-facts; rm /etc/openstack-ansible/openstack_hostnames_ips.yml; rm /etc/openstack-ansible/openstack_inventory.json .  Ran /opt/openstack-ansible/scripts/bootstrap-ansible.sh12:23
df_sbr^ Sorry.  The /etc path is /etc/openstack_deploy.12:24
jrossernoonedeadpunk: maybe now that can be simplified, if there are seperate tasks for add and remove12:26
df_sbrThis is the line in openstack_user_config.yml.     "metering-compute_hosts: *compute_hosts"12:26
jrosserthen there can be two lists of packages12:26
noonedeadpunkbut we still have for installed and latest so not sure12:26
noonedeadpunkah, at least for absent we can probably simplify12:26
jrosseri can see how it got broken12:27
jrossercomplexity++12:27
noonedeadpunkyeah, indeed.12:27
jrosserdf_sbr: we had a look at that issue earlier12:27
jrosserdf_sbr: if possible could you try this https://review.opendev.org/#/c/699957/12:28
jrosserthat will be in /etc/ansible/roles/os_ceilometer/tasks/main.yml12:28
noonedeadpunkthe best way to simplify this is to rework stig_packages_rhel7 and make a single package per item instead of included list12:29
noonedeadpunkit will extend variable size, but overall it should simplify logic12:29
df_sbrjrosser: checking now.12:29
noonedeadpunkBut I'd probably leave as is as for now not to bring in new issues12:31
jrosserurgh yes that data structure is not nice12:31
jrosserdf_sbr: if you have a gerrit account it would be great if you could leave some feedback on that patch12:33
*** ansmith has quit IRC12:34
*** sum12 has quit IRC12:44
*** sum12 has joined #openstack-ansible12:48
ierdemjrosser, i had face the same issue which df_sbr faced and i tried adding https://review.opendev.org/#/c/699957/. It solved, thank you13:02
jrosserierdem: thanks! good to know it's addressed the issue13:03
guilhermespjrosser: did you ever apply it in production? https://github.com/openstack/openstack-ansible-rabbitmq_server/commit/15e8837dd3972159f5d83fd95db5fc69f80f6139#diff-16ccf8c41f99a0867513224bbf0fd9b4R4513:10
jrosserguilhermesp: thats merged in train?13:11
* guilhermesp checks 13:12
jrosserif so we have it deployed now on a containers deployment - is there something you'd like me to check?13:12
guilhermespyep it seems to be13:12
guilhermespacutally my case is that i cherry pickes to stein, and when defining that line it seems to break with this http://paste.openstack.org/show/787787/13:13
guilhermesphttps://www.irccloud.com/pastebin/LHpTHop8/13:13
jrosserthere were other related things13:14
jrosserlike this https://github.com/openstack/openstack-ansible-openstack_hosts/commit/a71523f7c361e2a2406cec38d572be23e826f66413:14
guilhermesphuuuuuum13:15
jrosserthat confused rabbitmq as the hostname it thought it had via /etc/hosts didnt match the nodename in the config13:16
jrosserand binding to the mgmt ip caused that to mismatch13:16
guilhermesplet me try that out13:16
jrosseri just have a hunch becasue of it saying "* suggestion: check if all server nodes and CLI tools use consistent hostnames when addressing each other"13:17
jrosserjust commenting out those extra lines from /etc/hosts would find out quickly13:18
guilhermespyep...I'm re running playbooks here to see if now works13:18
guilhermespi think at the time we were working on making it work for rabbit this was already merged so13:18
guilhermespI wasn't aware13:18
jrosserthose patches are within 2 days of each other so i think this is all in the same area13:19
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-openstack_hosts master: Update Openstack code name to Ussuri  https://review.opendev.org/69998413:24
guilhermespoh jrosser yeah it seems now that tasks are not breaking :P13:26
guilhermesplet's wait the final result13:26
jrosserguilhermesp: great :) that patch was in the bind-to-mgmt topic btw, maybe worth checking if theres anything else we need13:27
jrosserwe/you13:27
guilhermespyep. let's see after i finish the playbook if rabbitmgmt is functional for a non-containerized env13:28
jrosserdid we ever mergen anything for galera......13:28
guilhermesphum dont remember tbh ... but well. i haven't had problems with galera in most of our non-containerized deployments13:29
guilhermesphum weird, it seems it is still just listening to the vip13:29
guilhermesphttps://www.irccloud.com/pastebin/821hRqCn/13:29
jrosserhmm? thats odd, the VIP not the node mgmt address?13:31
guilhermespyep it is13:32
df_sbrjrosser:  Deployment is working now.  I added a +1 on the patch in gerrit13:32
jrosserdf_sbr: great, thanks for testing it13:32
jrosserdf_sbr: that patch should hopefully merge today and we can backport to Train13:33
guilhermespjrosser: take a look at this13:34
guilhermesphttps://www.irccloud.com/pastebin/l8C4WLD4/13:34
df_sbrjrosser:  Thanks!13:34
jrosserin the meantime you can either patch locally or we have a means of overriding the SHA of the os_ceilometer role if you want something more robust13:34
df_sbrThis is good for now.  It's a dev environment.13:35
guilhermesphum dont we enable it in the tasks?13:36
jrosserguilhermesp: wait its ok :)13:36
jrosserhttps://github.com/openstack/openstack-ansible/blob/master/inventory/group_vars/haproxy/haproxy.yml#L256-L26613:36
jrosserif this is an infra node with all the services collapsed haproxy is accepting connnections to the rabbitmq mgmt interface on the vip13:37
guilhermespyep that is right as we have the backend in place.... but it seems that in each controller i need to enable the plugin13:38
guilhermespdid it manually in one of the ctls... the other are still not listening to the process locally13:38
jrosserinteresting https://opendev.org/openstack/openstack-ansible-rabbitmq_server/src/branch/master/defaults/main.yml#L93-L9513:39
guilhermespyeah and I've checked that before13:39
jrosseri wonder if we've updated rabbitmq to a point that the ansible module doesnt understand any more13:40
noonedeadpunkthat might be actualy13:41
noonedeadpunkas 2.8 has absolutelly different output13:41
noonedeadpunk*3.813:41
noonedeadpunkI've placed a patch to over rabbitmq_policy related issue, but it seems that at this point nobody care about ansible modules anymore13:42
noonedeadpunkLike https://github.com/ansible/ansible/pull/64512 as placed month ago an no reviews up to this point13:43
*** ansmith has joined #openstack-ansible13:45
*** KeithMnemonic has joined #openstack-ansible13:58
*** tosky_ has joined #openstack-ansible14:23
*** tosky is now known as Guest2789014:23
*** tosky_ is now known as tosky14:23
*** Guest27890 has quit IRC14:26
*** KeithMnemonic has quit IRC14:31
openstackgerritMerged openstack/openstack-ansible-openstack_hosts stable/train: Update OpenStack code name to Train  https://review.opendev.org/69944614:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_magnum master: Fix magnum-api wsgi name  https://review.opendev.org/69972614:55
*** theintern_ has joined #openstack-ansible15:03
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_magnum stable/train: Fix magnum-api wsgi name  https://review.opendev.org/69973815:05
openstackgerritMerged openstack/openstack-ansible-os_nova stable/stein: Make nova_novncproxy use BUMPs  https://review.opendev.org/69911315:08
*** jawad_axd has quit IRC15:20
*** jawad_axd has joined #openstack-ansible15:21
*** jawad_ax_ has joined #openstack-ansible15:23
*** electrofelix has joined #openstack-ansible15:24
*** starborn has quit IRC15:25
*** jawad_axd has quit IRC15:26
*** jawad_ax_ has quit IRC15:28
*** cshen has quit IRC15:34
*** gyee has joined #openstack-ansible15:54
*** rpittau is now known as rpittau|afk16:02
*** cp- has quit IRC16:05
*** cp- has joined #openstack-ansible16:06
*** cp- has quit IRC16:11
*** cp- has joined #openstack-ansible16:12
openstackgerritDouglas Mendizábal proposed openstack/ansible-role-atos-hsm master: WIP: Add HA (load balancing) support  https://review.opendev.org/70001816:20
*** jawad_axd has joined #openstack-ansible16:22
*** jawad_axd has quit IRC16:25
*** jawad_axd has joined #openstack-ansible16:26
*** jawad_axd has quit IRC16:27
*** miloa has quit IRC16:41
*** rholloway has joined #openstack-ansible17:07
*** trandles has joined #openstack-ansible17:19
*** chandankumar has quit IRC17:31
*** DanyC has quit IRC17:56
*** aedc has joined #openstack-ansible18:01
*** aedc has quit IRC18:02
*** udesale has joined #openstack-ansible18:03
*** gyee has quit IRC18:12
*** gyee has joined #openstack-ansible18:12
*** rholloway has quit IRC18:32
*** rholloway has joined #openstack-ansible18:33
noonedeadpunkjrosser: ooooooops https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_5aa/699726/6/check/openstack-ansible-deploy-aio_metal-centos-7/5aa80c2/logs/ara-report/result/63c02a09-691c-462d-b5a4-62312f97be97/18:35
*** udesale has quit IRC18:37
noonedeadpunkI really dunno what we can do about it except abandoning centos7 support as for now, or building python-libselinux from scratch...18:46
*** rholloway has quit IRC19:11
*** rholloway has joined #openstack-ansible19:13
*** rholloway has quit IRC19:25
*** electrofelix has quit IRC19:28
*** dmsimard0 has joined #openstack-ansible19:41
*** dmsimard has quit IRC19:41
*** dmsimard0 is now known as dmsimard19:41
*** rodolof has quit IRC19:44
*** spotz has quit IRC19:44
*** rodolof has joined #openstack-ansible19:45
jrosserI wonder how far off the centos 8 job is19:55
*** sshnaidm is now known as sshnaidm|afk20:00
*** mattoliverau has quit IRC20:05
*** irclogbot_2 has quit IRC20:06
*** irclogbot_2 has joined #openstack-ansible20:09
*** elenalindq has quit IRC20:36
*** theintern_ has quit IRC20:46
*** pcaruana has quit IRC21:23
*** ansmith has quit IRC21:40
*** goldyfruit_ has joined #openstack-ansible21:57
*** goldyfruit_ has quit IRC22:06
*** jbadiapa has quit IRC23:13
*** ansmith has joined #openstack-ansible23:18
*** tosky has quit IRC23:22
*** admin0 has quit IRC23:26

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!