Friday, 2020-04-17

openstackgerritmelanie witt proposed openstack/openstack-ansible-os_tempest master: Add test_novnc to test nova vnc consoles  https://review.opendev.org/67176900:32
openstackgerritmelanie witt proposed openstack/openstack-ansible master: Revert "Use non-broken commit for NoVNC"  https://review.opendev.org/67164200:34
*** cshen has joined #openstack-ansible00:41
*** cshen has quit IRC00:45
*** andrea10 has quit IRC02:17
*** cshen has joined #openstack-ansible02:42
*** cshen has quit IRC02:47
*** rh-jelabarre has quit IRC03:48
*** Nick_A has quit IRC04:27
*** evrardjp has quit IRC04:37
*** evrardjp has joined #openstack-ansible04:37
*** fghaas has joined #openstack-ansible05:10
*** fridtjof[m] has quit IRC05:10
*** Anticimex has quit IRC05:10
*** tinwood has quit IRC05:10
*** fridtjof[m] has joined #openstack-ansible05:15
*** Anticimex has joined #openstack-ansible05:15
*** tinwood has joined #openstack-ansible05:15
*** Nick_A has joined #openstack-ansible05:25
*** udesale has joined #openstack-ansible05:35
*** gyee has quit IRC05:53
prometheanfirewhen denton is around I need to ask him about sr-iov spoof checking06:16
prometheanfirewhen I use a sr-iov device to split vlans off of I need a way for the OS to disable spoofchecking06:19
prometheanfirecan manually do it via ip link set dev enp4s0f0 vf 1 spoofchk off06:19
*** this10nly has joined #openstack-ansible06:21
prometheanfirehmm, may need a custom wrapper script like the rest of the sr-iov stuff06:23
*** udesale has quit IRC06:26
*** fghaas has quit IRC06:30
*** udesale has joined #openstack-ansible06:32
*** fghaas has joined #openstack-ansible06:54
*** spatel has joined #openstack-ansible06:55
*** yolanda has quit IRC06:59
*** yolanda has joined #openstack-ansible07:00
*** spatel has quit IRC07:00
*** jhesketh has quit IRC07:04
*** cshen has joined #openstack-ansible07:17
*** jbadiapa has joined #openstack-ansible07:19
*** rpittau|afk is now known as rpittau07:19
*** tosky has joined #openstack-ansible07:30
*** threestrands has quit IRC07:56
*** andrea15 has joined #openstack-ansible08:28
*** thuydang has joined #openstack-ansible08:38
*** cshen_ has joined #openstack-ansible08:46
*** cshen has quit IRC08:48
*** gokhani has joined #openstack-ansible08:57
*** yolanda has quit IRC09:23
*** yolanda has joined #openstack-ansible09:29
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Cleanup py27 support  https://review.opendev.org/71992509:32
jannowhere do the ceph pools, which are defined as cinder_backends, get created?10:03
jannowe had a failed playbook run due to missing openstacksdk and now the cinder-volume units don't get started because of missing ceph pools10:06
jannoand the playbook runs fail now during "Perform online data migrations" while it is trying to access the cinder-volume api10:07
*** yolanda has quit IRC10:10
*** thuydang has quit IRC10:22
*** rpittau is now known as rpittau|bbl10:30
*** szaher has joined #openstack-ansible10:34
*** gokhani has quit IRC10:45
kleinijanno: when I run OSA deployments with Ceph, I noticed something like ceph_client running. Maybe somewhere there pools and client keyrings for OS services are created.10:56
*** spatel has joined #openstack-ansible10:57
kleinijanno: the project is called openstack-ansible-ceph_client10:57
*** spatel has quit IRC11:02
noonedeadpunkjanno: do you have already running ceph you would like to connect to or you want to deploy a new one?11:30
noonedeadpunkin the last case you should define ceph-mon_hosts, ceph-osd_hosts, etc in openstack-user-config11:31
noonedeadpunkso that ceph be deployed with ceph-ansible11:31
jannoit's a new cluster which already has been deployed by setup-infrastructure.yml11:32
jannoit's just the pool from cinder_backends missing11:32
*** nikparasyr has joined #openstack-ansible11:41
*** nikparasyr has left #openstack-ansible11:42
*** gokhani has joined #openstack-ansible11:45
*** rh-jelabarre has joined #openstack-ansible11:54
*** udesale_ has joined #openstack-ansible12:02
*** udesale has quit IRC12:05
*** thuydang has joined #openstack-ansible12:05
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Disable test_list_user_groups temepst test  https://review.opendev.org/72069812:07
noonedeadpunkjanno: so it's ceph-ansible which should create pools. I think we should pass default variables there for pool creation. So if you changed cinder_backend name to smth specific you probably should also reflect that for ceph-ansible vars. Or just create them manually :p12:12
*** rpittau|bbl is now known as rpittau12:19
*** mgariepy has joined #openstack-ansible12:24
jannonoonedeadpunk: yes, I already created it manually ;)12:35
openstackgerritamolkahat proposed openstack/openstack-ansible-os_tempest master: Added tempest ironic resources setup.  https://review.opendev.org/72070512:46
*** cshen_ has quit IRC13:07
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Disable test_list_user_groups temepst test  https://review.opendev.org/72069813:12
*** thuydang has quit IRC13:14
*** cshen has joined #openstack-ansible13:15
openstackgerritamolkahat proposed openstack/openstack-ansible-os_tempest master: Added tempest ironic resources setup.  https://review.opendev.org/72070513:30
mgariepyanywone aware of issue with rabbitmq and centos ? i'm testing my ssl cipher patch against it but it does not install the correct version it seels. els-erlang.repo points to version 20. but version 19 is being installed.13:49
mgariepythat's for rocky13:49
noonedeadpunkmgariepy: I recently noticed that rabbitmq role is broken for centos on rocky but didin't dig into it13:49
mgariepymy patch about the ciphers break the functional test but it seems that it's because of a bad version.13:51
noonedeadpunkit's broken even without your patch :)13:51
mgariepywhitout my patch, run_test.sh works-ish13:52
noonedeadpunkI faced the same behaviour here https://review.opendev.org/#/c/718786/13:52
mgariepyDepends-On: https://review.opendev.org/718774 << which is my patch haha ;p13:53
noonedeadpunkhuh13:54
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible stable/rocky: Drop bumps for stable/rocky  https://review.opendev.org/71878613:54
mgariepyhttp://paste.openstack.org/show/792328/13:54
noonedeadpunkwhy did I add it... to tst patch when we had broken functional tests maybe...13:55
noonedeadpunkso erlang seems to be installed from native repo?13:55
mgariepyiirc someone once or twice told me that yum repo priority was a bad idea lol.13:56
noonedeadpunkWhile I think it should be isntalled from this one https://opendev.org/openstack/openstack-ansible-rabbitmq_server/src/branch/stable/rocky/vars/redhat.yml#L3813:56
noonedeadpunkfilelist seems empty...13:58
mgariepyhttp://paste.openstack.org/show/792329/13:59
noonedeadpunkso maybe we should change that repo - I'm not sure current one has erlang actually13:59
mgariepyso, erlangs from rdo-deps and rabbit from RabbitMQ14:07
mgariepyhttp://paste.openstack.org/show/792330/14:08
mgariepykinda rusty on centos ;) haha14:08
*** this10nly has quit IRC14:09
noonedeadpunkmgariepy: I think we should backport things from stein probably14:10
noonedeadpunkand use https://packagecloud.io/rabbitmq/erlang/el/ as a repo14:10
noonedeadpunk* https://packagecloud.io/rabbitmq/erlang14:11
*** gokhani has quit IRC14:12
mgariepyhttps://review.opendev.org/#/q/961ea180591048d69e4cea5ac756b87625b08a2a ? this one ?14:14
noonedeadpunkI think that one is mostly implemented as well... As it's already external_repo14:17
noonedeadpunkbut we should take _rabbitmq_erlang_repo_url from it for sure14:18
mgariepyok i'll work on this then.14:20
mgariepyfun. stuff haha14:20
melwittcan anyone give any hints about why adding to the tempest_test_whitelist does not seem to cause tests to run? https://review.opendev.org/#/c/671769/6/defaults/main.yml14:27
*** mpjetta has quit IRC14:29
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Disable test_list_user_groups temepst test  https://review.opendev.org/72069814:45
noonedeadpunkmelwitt: we have override here https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/utility_all.yml#L8814:46
melwittnoonedeadpunk: thank you! I will try that location instead14:47
openstackgerritMarcus Klein proposed openstack/openstack-ansible-os_cinder master: Python 3 library is needed for uWSGI.  https://review.opendev.org/72073914:49
kleininoonedeadpunk: https://review.opendev.org/#/c/720739 solves for me the missing Python 3 library for uWSGI Cinder volume service.14:51
noonedeadpunknice, thanks14:52
kleinisame will come for placement and Nova14:58
kleiniwho will request the backport to stable/train?14:58
noonedeadpunkyou can but after master will merge15:03
noonedeadpunkgenerally it's cherry-pick button on gerrit15:03
openstackgerritMarcus Klein proposed openstack/openstack-ansible-os_placement master: Python 3 library is needed for uWSGI.  https://review.opendev.org/72074315:03
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible-rabbitmq_server stable/rocky: fix repo url  https://review.opendev.org/72074415:04
noonedeadpunkbtw I'm kinda wondering why on CI things work well15:04
noonedeadpunkkleini: so you have the same issue with uwsgi with placement as well?15:05
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible-rabbitmq_server stable/rocky: Configure better ciphers for rabbitmq  https://review.opendev.org/71877415:05
mgariepynoonedeadpunk, can you re-add my cipher patch ?15:06
kleiniyes, same issue with placement, Nova API and maybe more15:07
mgariepyer, wait a sec i'll retest the stack first.15:07
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible stable/rocky: Drop bumps for stable/rocky  https://review.opendev.org/71878615:08
kleininoonedeadpunk: maybe this does not happen as bindeb.txt lists python3-dev and the header of that file reads something about CI package installation before running tests.15:08
kleinibut I have no idea about OSA CI, just stumbled over that file while greping for python315:09
noonedeadpunkhm, might be15:09
noonedeadpunkI just wasn't facing that for some reason in sandboxes...15:10
noonedeadpunkIf you see issues with all of the uwsgi services, probably it's easier to patch https://opendev.org/openstack/ansible-role-uwsgi/src/branch/master/vars/debian.yml#L2115:10
noonedeadpunkmgariepy: let's merge https://review.opendev.org/#/c/720572/ to fix functional tests15:12
noonedeadpunkbtw https://review.opendev.org/#/c/717806/ will unblock lxc jobs as well:)15:15
mgariepynoonedeadpunk, done and done !15:19
kleininoonedeadpunk: but ansible-role-uwsgi lists uwsgi-plugin-python3 as package, which is NOT installed in containers having the uwsgi and Python 3 problem. Therefore I did not consider that as a possible solution. Are these package lists later changed somewhere else?15:27
*** thuydang has joined #openstack-ansible15:28
mgariepy\o/ rabbitmq works on both centos and ubuntu !15:30
noonedeadpunkkleini: huh, that is interesting... as placement in train uses uwsgi role for it's deployment for sure...15:48
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible-os_placement/src/branch/stable/train/tasks/main.yml#L75-L8315:48
noonedeadpunkmgariepy: nice!15:48
kleiniI will test it15:49
noonedeadpunkI think like everything except keystone that uses uwsgi is using uwsgi role... I can mix things up and maybe some role don't have it in train....15:50
*** cshen has quit IRC15:50
jrosserwhy to we need a -dev package for runtime? that doesn’t make sense to me15:52
noonedeadpunkjrosser: there was an issue when uwsgi for keystone was claiming on missing libpython3.615:54
jrosserbut -dev ?15:54
noonedeadpunkas we don't know what 3.* python we have (like debian has 3.7) so -dev package isntalls needed requirement...15:55
jrosserthat’s headers and stuff15:55
noonedeadpunkor we need to split vars for debian and ubuntu just for that...15:55
jrosserthat -dev package will itself depend on the one with the actual15:56
jrosserlibrary you want15:56
noonedeadpunkyep15:56
jrosserwe should not be installing -dev except on the repo server15:56
noonedeadpunkand it's just libpython3-dev. so for debian it installs libpython3.7 for ubuntu libpython3.615:57
noonedeadpunkactually we can use ternary there....15:57
openstackgerritmelanie witt proposed openstack/openstack-ansible master: Revert "Use non-broken commit for NoVNC"  https://review.opendev.org/67164215:57
openstackgerritmelanie witt proposed openstack/openstack-ansible master: Add test_novnc to test nova vnc consoles  https://review.opendev.org/72076115:57
noonedeadpunkbut kinda I don't like really bind to version installed as feel that with time we end up in non working stuff15:58
jrosserlibpython3-stdlib? is that it?16:02
noonedeadpunkit don't install libpython3.6....16:03
noonedeadpunkthat's what I tried at first:)16:03
noonedeadpunknot sure - maybe it also resolvs the issue itself....16:03
jrosserwhat I don’t understand is why this is never seen before16:03
noonedeadpunkwe just had libpython2.7 everywhere....16:04
noonedeadpunkBut yeah. I think that it's really the issue for keystone as we don't use uwsgi role there16:04
noonedeadpunkBut for other services I'm not sure as well16:04
openstackgerritMerged openstack/openstack-ansible-tests stable/rocky: Retire repo_build and pip_install roles  https://review.opendev.org/72057216:11
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Disable test_list_user_groups temepst test  https://review.opendev.org/72069816:15
noonedeadpunkmgariepy: so with https://review.opendev.org/#/c/720744/1 you got erlang 20.3.*? Not latest one?:)16:16
*** rpittau is now known as rpittau|afk16:17
mgariepyyep 20.3 from link 4616:19
mgariepylink/line16:20
mgariepyubuntu have the same version also.16:20
mgariepynoonedeadpunk, with rabbitmq-server 3.7.5 you need to erlang 19.3 .. 20.x https://www.rabbitmq.com/which-erlang.html16:22
*** udesale_ has quit IRC16:23
noonedeadpunkyeah, wasn't just 100% sure that _rabbitmq_erlang_version_spec works so decided to ask:)16:23
mgariepyit was working on ubuntu :) i was wondering why i did have 19.x on centos and 20.x on ubuntu, the 19.x erlang stuff is not good enough for the cipher list.16:24
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Bump tempest SHA  https://review.opendev.org/72077416:25
*** ianychoi_ has joined #openstack-ansible16:29
*** hamzy__ has joined #openstack-ansible16:31
*** gyee has joined #openstack-ansible16:31
*** ianychoi has quit IRC16:31
*** hamzy_ has quit IRC16:31
*** fghaas has quit IRC16:32
*** evrardjp has quit IRC16:37
*** evrardjp has joined #openstack-ansible16:37
noonedeadpunkmgariepy: btw, I was wondering why don't we have the same on master?16:39
noonedeadpunkor we don't need it as rabbit version has this included?16:40
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Fix functional tests  https://review.opendev.org/71780616:41
mgariepynoonedeadpunk, the cipher list was from the rabbitmq from master.16:44
mgariepytrain is also ok.16:45
mgariepystein and rocky needed fixing.16:45
mgariepyssl standard getting old they were probably ok-ish at first.16:45
mgariepyto do the nmap scan you need a newer version os nmap than the one in centos default repos. or it will not tell you what are the ciphers (i installed it from the rpm command of the nmap site)16:46
noonedeadpunkmgariepy: oh, really? Just don't see ciphers key in https://opendev.org/openstack/openstack-ansible-rabbitmq_server/src/branch/master/templates/rabbitmq.config.j216:49
mgariepynop they are not needed since erlang / rabbitmq version do confiugre them correcly by default16:49
noonedeadpunkah16:49
noonedeadpunkyeah, I kinda thought about that16:50
mgariepywhich make sense at some point that de default of newer are better .. older are getting crappier16:50
noonedeadpunkjust didn't get your answer correctly:(16:50
mgariepyno worries.16:50
mgariepytests are passing for rocky stable bump :D16:53
mgariepyonly tempest running on centos16:53
*** thuydang has quit IRC17:06
openstackgerritmelanie witt proposed openstack/openstack-ansible master: Add test_novnc to test nova vnc consoles  https://review.opendev.org/72076117:33
openstackgerritmelanie witt proposed openstack/openstack-ansible master: Revert "Use non-broken commit for NoVNC"  https://review.opendev.org/67164217:33
kleinijrosser, noonedeadpunk: will test with minimal non -dev package in uwsgi role that provides the missing library on Monday.17:34
*** kleini has left #openstack-ansible17:34
*** kleini has joined #openstack-ansible17:34
*** fghaas has joined #openstack-ansible18:48
*** mmercer has quit IRC18:56
mgariepycan i also have another vote on this one https://review.opendev.org/#/c/718770/ ?19:02
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server stable/rocky: fix repo url  https://review.opendev.org/72074419:26
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server stable/rocky: Configure better ciphers for rabbitmq  https://review.opendev.org/71877419:26
*** cshen has joined #openstack-ansible19:47
*** cshen has quit IRC19:52
*** fghaas has left #openstack-ansible20:21
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server stable/stein: Configure better ciphers for rabbitmq  https://review.opendev.org/71877020:32
*** rh-jelabarre has quit IRC21:31
*** cshen has joined #openstack-ansible21:48
*** cshen has quit IRC21:53
*** jbadiapa has quit IRC21:57
*** mgariepy has quit IRC22:06
*** thuydang has joined #openstack-ansible22:11
*** thuydang has quit IRC23:06
*** gyee has quit IRC23:10
*** tosky has quit IRC23:21
openstackgerritmelanie witt proposed openstack/openstack-ansible-os_tempest master: Enable vnc consoles in tempest  https://review.opendev.org/67176923:44
*** cshen has joined #openstack-ansible23:48
*** cshen has quit IRC23:52

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!