Tuesday, 2020-04-28

*** mmethot_ has joined #openstack-ansible00:27
*** mmethot has quit IRC00:32
*** sep has quit IRC02:44
*** threestrands has joined #openstack-ansible03:12
*** dpaclt has joined #openstack-ansible04:08
dpacltHi All Good Morning .We are trying Openstack Deployment using Ansible for the first time using three controllers .04:12
dpacltchosen from the same range of haproxy controllers.04:12
*** sshnaidm|afk is now known as sshnaidm|off04:34
*** evrardjp has quit IRC04:35
*** evrardjp has joined #openstack-ansible04:35
*** dpaclt has quit IRC04:50
*** maaritamm has joined #openstack-ansible05:00
*** maaritamm has quit IRC05:10
*** mmethot_ has quit IRC05:33
*** mmethot has joined #openstack-ansible05:34
*** maaritamm has joined #openstack-ansible05:39
*** dpaclt has joined #openstack-ansible05:42
*** miloa has joined #openstack-ansible05:59
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-galera_client master: Bump galera version to 10.5.2  https://review.opendev.org/68222906:06
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-galera_server master: Bump galera version to 10.5.2  https://review.opendev.org/68175906:10
jrosserdpaclt: do you have a specific thing you need help with?06:11
AJaegerOSA team, for py27 cleanup, here's the list of open requests I see right now - please review: https://review.opendev.org/#/q/is:open+(topic:cleanup-py27-support+OR+topic:drop-py27-support)+(projects:openstack/openstack-ansible+OR+projects:openstack/ansible-))06:15
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rabbitmq_server master: Add experimental support for ubuntu focal.  https://review.opendev.org/72380706:16
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: WIP - Add Ubuntu Focal support  https://review.opendev.org/72359706:16
AJaegerthanks, jrosser for reviewing06:18
*** pcaruana has quit IRC06:21
*** pcaruana has joined #openstack-ansible06:22
*** jbadiapa has joined #openstack-ansible06:24
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rsyslog_client master: Updated from OpenStack Ansible Tests  https://review.opendev.org/71172606:25
*** pcaruana has quit IRC06:25
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rsyslog_client master: Updated from OpenStack Ansible Tests  https://review.opendev.org/71172606:26
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rsyslog_client master: [ussuri][goal] Updates for python 2.7 drop  https://review.opendev.org/71067906:26
dpaclt@jrosser thanks for asking ..Actualy i am stuck at Openstack deployment using three node06:26
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rsyslog_client master: Cleanup py27 support  https://review.opendev.org/71993906:26
*** pcaruana has joined #openstack-ansible06:27
*** kleini has joined #openstack-ansible06:27
dpacltwhile running setup-infrastructure getting error at utlity containers as below06:27
dpacltutlity is trying to contact is the internal vip lb address ,which we have chosen from the same range of haproxy controllers06:27
jrosseryou mean you have used the same IP address as one of the controllers for the internal vip?06:28
dpacltno i used a different ip address for  internal vip06:28
jrosseroh, ok, thats fine06:28
dpacltbut that ip is not assigned to any controllers nor we dont have a separate lb06:29
openstackgerritMerged openstack/openstack-ansible-os_murano master: Cleanup py27 support  https://review.opendev.org/72183506:29
jrosserdpaclt: keepalived is responsible for assigning the VIP to one of the controllers06:29
dpaclti have configured keepalive in user_variables.yml file06:30
dpacltcan i share the config here ? Is it ok06:30
jrossercould you use paste.openstack.org for that06:31
dpacltsure06:31
*** pcaruana has quit IRC06:32
*** pcaruana has joined #openstack-ansible06:32
dpaclthttp://paste.openstack.org/show/792793/06:33
jrosserhaproxy_use_keepalived: False <= is that what you want?06:34
openstackgerritMerged openstack/ansible-role-systemd_mount master: Cleanup py27 support  https://review.opendev.org/72309206:34
openstackgerritMerged openstack/ansible-role-systemd_service master: Cleanup py27 support  https://review.opendev.org/72309506:34
dpaclt we need haproxy06:36
openstackgerritMerged openstack/openstack-ansible-memcached_server master: Cleanup py27 support  https://review.opendev.org/71993606:36
dpacltby reading doc https://docs.openstack.org/openstack-ansible-haproxy_server/latest/configure-haproxy.html i understood that need to be false .. i might be wrong06:36
*** udesale has joined #openstack-ansible06:37
jrosserdpaclt: that is quite badly worded documentation i think06:38
dpacltIf multiple hosts are found in the inventory, deploy HAProxy in a highly-available manner by installing keepalived.06:38
jrosserif you want an H/A deployment with multiple haproxy it is necessary to use keepalived06:38
dpacltok so i need to change it to true ?right06:38
jrosserthere is no need to adjust that variable at all06:39
jrosserthe value is normally set here https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/haproxy/haproxy.yml#L1706:39
dpacltoh ok then i will remove it from config then06:40
jrosserif you have more than one haproxy it is automatically set to True06:40
dpacltand try again06:40
dpacltThanks jrosser ..Hope i dont need an extra lb to point internal vip and just the  ip range is enough for haproxy_keepalived_internal_vip_cidr  in user_variable.yml file06:42
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: WIP - Add Ubuntu Focal support  https://review.opendev.org/72359706:45
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: [ussuri][goal] Updates for python 2.7 drop  https://review.opendev.org/71060806:47
openstackgerritMerged openstack/openstack-ansible-galera_server master: Cleanup py27 support  https://review.opendev.org/72182406:49
*** ierdem has joined #openstack-ansible06:51
*** amalrajgenocidex has joined #openstack-ansible06:54
*** pcaruana has quit IRC06:56
*** pcaruana has joined #openstack-ansible07:00
*** pcaruana has quit IRC07:03
*** pcaruana has joined #openstack-ansible07:04
*** pcaruana has quit IRC07:08
*** pcaruana has joined #openstack-ansible07:09
*** pcaruana has quit IRC07:12
*** pcaruana has joined #openstack-ansible07:12
*** pcaruana has quit IRC07:16
*** pcaruana has joined #openstack-ansible07:17
*** yolanda has joined #openstack-ansible07:18
*** pcaruana has quit IRC07:22
*** pcaruana has joined #openstack-ansible07:22
*** yolanda has quit IRC07:26
*** yolanda has joined #openstack-ansible07:27
openstackgerritAndreas Jaeger proposed openstack/ansible-role-uwsgi master: Cleanup py27 support  https://review.opendev.org/72227707:31
*** rpittau|afk is now known as rpittau07:34
*** tosky has joined #openstack-ansible07:36
*** pcaruana has quit IRC07:39
*** amalrajgenocidex has quit IRC07:41
AJaegerjrosser: could I trouble you with https://review.opendev.org/719944 and https://review.opendev.org/722277 as well, please?07:42
*** pcaruana has joined #openstack-ansible07:52
jrosserAJaeger: done08:02
AJaegerthanks, jrosser08:07
dpacltjrosser after removing haproxy_use_keepalived: False and changing haproxy_keepalived_internal_vip_cidr to the internal lb vip addrees in user_variables.yml file.. Issue fixed ..Thanks much08:07
dpacltIt would be great if the document is bit more clear08:07
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-galera_client master: Bump galera version to 10.5.2  https://review.opendev.org/68222908:08
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Clairfy documentation for deploying mutliple haproxy without keepalived  https://review.opendev.org/72383408:19
*** Blinkiz has left #openstack-ansible08:19
jrosserdpaclt: ^ could you look at that and see if the wording is better now, i also moved that part to the end of the H/A section08:19
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Clarify documentation for deploying mutliple haproxy without keepalived  https://review.opendev.org/72383408:20
dpacltSure08:22
*** udesale has quit IRC08:36
*** udesale has joined #openstack-ansible08:36
-openstackstatus- NOTICE: Zuul is currently failing testing, please refrain from recheck and submitting of new changes until this is solved.09:01
*** ChanServ changes topic to "Zuul is currently failing testing, please refrain from recheck and submitting of new changes until this is solved."09:01
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_tempest stable/train: Pin neutron-tempest-plugin to 0.9.0 for Train branch.  https://review.opendev.org/72131909:07
-openstackstatus- NOTICE: Zuul is currently failing all testing, please refrain from approving, rechecking or submitting of new changes until this is solved.09:11
*** ChanServ changes topic to "Zuul is currently failing all testing, please refrain from approving, rechecking or submitting of new changes until this is solved."09:11
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: WIP - Add Ubuntu Focal support  https://review.opendev.org/72359709:16
*** rpittau is now known as rpittau|bbl10:10
*** maaritamm has quit IRC10:16
*** nwonknu has quit IRC10:32
*** dasp has quit IRC10:32
*** nwonknu has joined #openstack-ansible10:34
*** dasp has joined #openstack-ansible10:35
*** maaritamm has joined #openstack-ansible10:44
*** ygk_12345 has joined #openstack-ansible11:07
*** brtknr has quit IRC11:07
*** ygk_12345 has left #openstack-ansible11:08
*** brtknr has joined #openstack-ansible11:15
*** brtknr has quit IRC11:23
*** tosky has quit IRC11:23
openstackgerritamolkahat proposed openstack/openstack-ansible-os_tempest master: Added tempest ironic resources setup.  https://review.opendev.org/72070511:27
*** brtknr has joined #openstack-ansible11:28
*** mgariepy has joined #openstack-ansible11:54
*** tosky has joined #openstack-ansible11:54
*** mgariepy has quit IRC12:02
*** rpittau|bbl is now known as rpittau12:08
*** mgariepy has joined #openstack-ansible12:16
openstackgerritAndreas Jaeger proposed openstack/ansible-hardening master: Remove duplicated Zuul config file  https://review.opendev.org/72388012:17
*** ChanServ changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://bit.ly/2SAcGAn"12:24
-openstackstatus- NOTICE: Zuul has been restarted, all events are lost, recheck or re-approve any changes submitted since 9:50 UTC.12:24
openstackgerritMerged openstack/ansible-role-uwsgi master: Cleanup py27 support  https://review.opendev.org/72227712:25
openstackgerritMerged openstack/openstack-ansible-plugins master: Cleanup py27 support  https://review.opendev.org/72183712:38
AJaegermnaser, noonedeadpunk, could I trouble you with reviewing https://review.opendev.org/#/c/719944/ https://review.opendev.org/#/c/723631/ and https://review.opendev.org/#/c/719940/ , please?12:46
AJaegerthx12:47
openstackgerritMerged openstack/openstack-ansible-repo_server master: Cleanup py27 support  https://review.opendev.org/71995112:47
noonedeadpunkAJaeger: sure, thanks for helping us with this celanup12:47
AJaegeryou're welcome12:48
AJaegerjrosser, mnaser, one further cleanup taht needs backporting: Broken Zuul config, see https://review.opendev.org/723880 . Please review12:48
AJaegernoonedeadpunk: now somebody needs to fix the repos that have non-working jobs to merge the rest...12:49
noonedeadpunkyeah, I'm trying to spent some time on fixing broken stuff....12:52
noonedeadpunkjust we have too much of them these days12:52
AJaeger:(12:52
* AJaeger will wait with further submissions12:53
AJaegernoonedeadpunk: https://review.opendev.org/#/c/720558/ - rsyslog_client is failing centos7 again ;(12:56
openstackgerritMerged openstack/openstack-ansible-ops master: Cleanup py27 support  https://review.opendev.org/71994412:57
noonedeadpunkAJaeger: is it supposed behaviour that check and gate jobs are running at the same time? shouldn't gate be cancelled?12:59
AJaegernoonedeadpunk: yes, if you recheck a job in gate, it gets added to check as well...13:00
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Cleanup py27 support  https://review.opendev.org/71994013:06
*** vesper11 has quit IRC13:06
*** vesper has joined #openstack-ansible13:06
jrossernoonedeadpunk: i have on my todo list to vendor the EPEL gpg key in the repo-server role13:07
jrosserthat fails many many jobs becasue it can't download that13:08
*** yolanda has quit IRC13:08
openstackgerritMerged openstack/openstack-ansible-galera_server master: Remove setup.* files  https://review.opendev.org/72358113:08
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Add documentation for HA HAProxy with LetsEncrypt certificates.  https://review.opendev.org/72242413:09
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: Cleanup py27 support  https://review.opendev.org/72363113:10
*** yolanda has joined #openstack-ansible13:14
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/rocky: Pin neutron-tempest-plugin to 0.9.0 for Rocky branch.  https://review.opendev.org/72249813:31
ChosSimbaOneHi every1. Is there a project / serivce in openstack that automatically can power off and on nova hosts based on load. Say one nova can be free of isntances could i auto power it off to save energy?13:35
ChosSimbaOnewould that be ironic i could implement this with?13:36
noonedeadpunkI think you would need some extra system which would leverage ironic to do that13:48
ChosSimbaOneYeah, i was suggest to look into Watcher on a slack channel, it seems like that could help me quite a lot :-)13:50
*** hamzy has joined #openstack-ansible14:00
*** dpaclt has quit IRC14:17
*** udesale_ has joined #openstack-ansible14:27
ierdemHi folks, i got a problem. I am using OSA Stable/Train version and i have a HA environment. I am working on murano for now and i added HA murano cluster to my environment. When i try to deploy an environment it gives various error. When i search, I realized that murano virtual machines attemt to connect rabbitmq cluster but it is not reachable from murano virtual machine.  At HAProxy, there is no public access to rabbitmq cluster.14:28
ierdemIs there any way to add access rabbitmq from virtual machines? Any suggestions please?14:29
*** udesale has quit IRC14:29
*** rpittau is now known as rpittau|brb14:32
*** rpittau|brb is now known as rpittau14:57
*** ierdem has quit IRC14:58
*** timburke has quit IRC15:04
*** udesale_ has quit IRC15:13
openstackgerritMerged openstack/ansible-hardening master: Remove duplicated Zuul config file  https://review.opendev.org/72388015:17
openstackgerritAndreas Jaeger proposed openstack/ansible-hardening stable/train: Remove duplicated Zuul config file  https://review.opendev.org/72406415:20
openstackgerritAndreas Jaeger proposed openstack/ansible-hardening stable/stein: Remove duplicated Zuul config file  https://review.opendev.org/72406715:20
*** gyee has joined #openstack-ansible15:21
*** mgariepy has quit IRC15:24
*** mgariepy has joined #openstack-ansible15:26
*** mgariepy has quit IRC15:33
*** mgariepy has joined #openstack-ansible15:46
noonedeadpunk#startmeeting openstack_ansible_meeting16:03
openstackMeeting started Tue Apr 28 16:03:14 2020 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.16:03
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:03
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:03
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:03
noonedeadpunk#topic office hours16:03
*** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)"16:03
noonedeadpunkhi everyone16:03
noonedeadpunkso, I've created an etherpad for upcoming PTG https://etherpad.opendev.org/p/openstack-ansible-ptg16:03
noonedeadpunkI guess we need to write down topics to discuss in it16:04
noonedeadpunk#link https://etherpad.opendev.org/p/openstack-ansible-ptg16:05
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-rsyslog_client master: Add handled logs to the list  https://review.opendev.org/72055816:14
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_tempest stable/train: Make upgrade jobs voting  https://review.opendev.org/72407716:16
noonedeadpunkso regarding current work - we're fixing train to release and rocky to drop bumps.16:17
noonedeadpunkPatches for these are mostly placed16:17
*** rpittau is now known as rpittau|afk16:18
noonedeadpunkand will try to complete contributors ussuri user goal16:20
jrossero/ sorry late16:21
jrossernews from me - i got a metal build on ubuntu focal to pass tempest locally16:21
jrosserthe biggest blocker there will be needing to use galera 10.516:22
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-rabbitmq_server stable/train: Install rabbitmq for ubuntu from external_repo  https://review.opendev.org/72359416:22
noonedeadpunkjrosser: yes, I'll look into galera for sure16:23
jrosseri also have the haproxy role support for letsencrypt completely overhauled to support H/A deployments with LE, a few fixes to my patches to finish today that that is ready for review16:23
noonedeadpunkthat is really exciting feature16:23
noonedeadpunkI'd place it for release announcements if only we were not missed it (by bad)16:24
*** itandops has quit IRC16:24
noonedeadpunk* we didn't miss it16:24
jrosseri just deployed keepalived / 2 x haproxy and a backend service with it, all outside openstack-ansible16:24
jrosserso that role is nicely portable for use elswhere16:25
noonedeadpunkcool!16:25
noonedeadpunkhuh, maybe we should publish our roles to galaxy?16:25
noonedeadpunkBut that's probably topic for ptg?:)16:25
jrosseryeah :)16:25
noonedeadpunkok, so we still have some features for the release thanks to you:)16:27
noonedeadpunkthe bad thing that we still need centos816:27
noonedeadpunkjrosser: btw... maria 10.5 is in beta.... https://downloads.mariadb.org/mariadb/10.5.2/16:28
jrosseroh oops!16:28
noonedeadpunkSo I'm not sure we will do focal before U16:28
noonedeadpunk*for16:28
noonedeadpunkor maybe maria will create at least 10.4 for focal...16:29
jrosserno focal here http://mariadb.mirror.digitalpacific.com.au//mariadb-10.4.12/repo/ubuntu/pool/main/m/mariadb-10.4/16:29
noonedeadpunkI guess they're just lagging16:29
noonedeadpunklike they have all 19 release there16:30
noonedeadpunkso not sure why 20.04 might be omited at the moment16:30
jrosserit's only just released i guess16:32
noonedeadpunkI think yes, as in default repos focal has 10.316:34
noonedeadpunkSo I'd use 10.4 for U eventually16:34
*** evrardjp has quit IRC16:35
*** evrardjp has joined #openstack-ansible16:35
noonedeadpunkmaaritamm: can you check https://review.opendev.org/#/c/723594/ ?16:37
noonedeadpunkI think ebbex tested it in prod and seems it should resolve rabbit upgrade issue16:38
jrossernoonedeadpunk: we should merge this soon https://review.opendev.org/#/c/723276/16:39
jrosserthat makes all sorts of wierd stuff happen, becasue half way through bootstrap on a py3 only system we install python2(!) then ansible starts executing with py2 for tasks against the host16:40
*** maaritamm has quit IRC16:40
noonedeadpunkoh, lol we still used py2 for bottstrap16:40
jrosseryeah, we do16:40
noonedeadpunkthat's why we saw py2 stuff and errors on hosts16:41
noonedeadpunkwhile services and ansible were in py3 venvs16:41
jrosserit also means we need things like python-pymysql to keep being installed, or the mysql ansible modules blow up16:41
noonedeadpunkcool, nice work16:41
noonedeadpunkI think we install them with mysql_client?16:42
jrosseri started taking some out with the focal patches https://review.opendev.org/#/c/681759/edit/vars/debian.yml16:42
*** itandops has joined #openstack-ansible16:42
jrosserbut my first attempt went very badly becasue it put py2 on16:42
jrosserand that was confusing "wtf is there python2 on my brand new OS for?"16:43
noonedeadpunkyeah, that's true16:44
noonedeadpunkI think we also have a room for cleanup in roles - we might still install some py2 package dependencies.16:44
noonedeadpunkAlso - do we need to install galera seperately? Isn't it a requirement for mariadb?16:45
noonedeadpunkat least for ubuntu distro package it is.. https://packages.ubuntu.com/focal/mariadb-server-10.316:45
noonedeadpunkI think it was required explicitly before 10.316:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Allow multiple methods of installing certbot  https://review.opendev.org/72242116:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Add option to use distro provided certbot package  https://review.opendev.org/72242216:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Install self-signed certificate before certbot has run for the first time  https://review.opendev.org/72242316:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Add documentation for HA HAProxy with LetsEncrypt certificates.  https://review.opendev.org/72242416:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Allow backend healthcheck interval to be overridden per service  https://review.opendev.org/72408516:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Allow ansible group for self signed certificate distribution to be overidden  https://review.opendev.org/72408616:46
jrosseroh yes we can drop that now16:48
jrosserthere is another issue with the galera_[client|server] roles.... that they both use each other as part of their tests16:48
jrosserso it's very difficult to land any kind of patch which bumps the version16:48
noonedeadpunkI think we should just bump client first? or this will isntantly install server?16:49
noonedeadpunk*newer server16:49
jrosseri think client uses server in it's test16:49
noonedeadpunkmaybe for glaera we can just sunset functional tests then? as integrated repo checks both of them eventually?16:50
jrossera bunch of the py2 package dependancies are needed because we still install python2 everwhere and there are needed for ansible16:50
jrosserso if we stop installing py2 then things should improve there, but i think there might still be a gap cloud-image vs. CI there16:51
jrossercertinaly a bionic cloud image doesnt have py216:51
noonedeadpunkactually upstream one do not have as well16:51
noonedeadpunkprobably CI has already dropped py2 as well...16:52
jrosserw was having to manually install py2 locally to get bootstrap to work16:52
jrosseri*16:52
jrosserwhich is why i got fed up with doing that and fixed it :)16:52
noonedeadpunkso, maybe we should set ansible_python_interpreter for user_variables.yml in boostrap-hosts role?16:53
jrosserbut we don't see that same thing in the gate16:53
noonedeadpunkbut set it to py3 to explicitly make ansible to use py316:53
jrossermaybe, but i think thats tricky, to make a universal decision there about the path to the interpreter, unless it's happy with "python3"16:53
jrosserit would have to be a valid choice on all distros both in and out of CI16:54
jrosseroh haha from the infra folks https://review.opendev.org/#/c/723105/3/playbooks/group_vars/all.yaml16:55
jrossersnap16:55
noonedeadpunkjrosser: oh, ansible 2.9.7 has merged backported rabbitmq fix16:55
jrosseroh excellent16:55
* jrosser needs to go eat16:56
jrosserwe should try to land that16:56
noonedeadpunklol, yes, infra knows how to do that)16:56
noonedeadpunkyeah16:56
jrosseryou should be able to bump the version here https://review.opendev.org/#/c/681003/16:56
* jrosser realy goes16:56
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Update ansible to 2.9.7  https://review.opendev.org/68100316:57
noonedeadpunkYep, I saw that one:)16:57
noonedeadpunk#endmeeting16:57
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://bit.ly/2SAcGAn"16:57
openstackMeeting ended Tue Apr 28 16:57:51 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:57
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-04-28-16.03.html16:57
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-04-28-16.03.txt16:57
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-04-28-16.03.log.html16:57
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Update ansible to 2.9.7  https://review.opendev.org/68100316:59
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-rsyslog_client master: Updated from OpenStack Ansible Tests  https://review.opendev.org/71172617:03
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-os_keystone master: Add option for OIDCOutgoingProxy for mod_auth_openidc  https://review.opendev.org/72409217:05
NobodyCamGood Afternoon OSA folks, I had a question about recovering a crashed hypervisor. I had a hypervisor disk crash, was able to get a new hard disk, but have question as to how to reenable it. can I just rerun the add hypervisor playbook for do I have too remove it first?17:09
kleiniI tried to use the ceph keyring from file feature and I still see issues with it. Next to ceph_conf_and ceph_keyrings_dir I still need to define ceph_mons otherwise the ceph_client role is not executed. And furthermore if ceph_mons is defined the role still tries to connect via SSH to slurp the ceph.conf file. So how do I get ceph_client ansible role running without defining ceph_mons?17:10
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-os_keystone master: Add memcached caching  https://review.opendev.org/72409817:14
jrosserkleini: you need to hav e ceph_mons defined, otherwise the IP of the monitors cannot be put into ceph.conf of the clients17:25
kleiniceph.conf is defined through ceph_conf_file17:25
kleinimy problem is, that the connection to ceph_mons is not possible at all17:26
jrosserthe logic for how the keys are obtained is here https://github.com/openstack/openstack-ansible-ceph_client/blob/master/tasks/ceph_auth.yml#L20-L2417:26
*** AJaeger has left #openstack-ansible17:29
kleinihttps://github.com/openstack/openstack-ansible-ceph_client/blob/master/tasks/main.yml#L16-L21 <- the problem is here. without ceph_mons being defined ceph_client does not run at all17:29
kleinimaybe I need to have a deeper look tomorrow. that is too much for today and it is already too late17:31
jrosseris it a problem to define ceph_mons and also ceph_keyrings_dir?17:31
jrosserthen the role would execute and it will use the provided keyrongs17:32
jrosserthe relevant tasks here look contitional on ceph_conf_file being configured https://github.com/openstack/openstack-ansible-ceph_client/blob/master/tasks/ceph_config.yml#L24-L4317:33
*** yolanda has quit IRC17:44
*** schwicht has quit IRC17:45
*** schwicht has joined #openstack-ansible17:53
kleiniI need to check my ansible role, why it still tries to connect to ceph_mons17:54
kleinithe code you're showing me looks good17:55
*** maaritamm has joined #openstack-ansible18:09
kleiniceph_get_mon_host.yml is always run and it waits for SSH connection to ceph_mons. that is the main conflict.18:12
noonedeadpunkjrosser: seems that https://review.opendev.org/#/c/681003/ passed place where it used to fail!18:19
noonedeadpunkkleini: huh I believed it's included conditionally now...18:21
noonedeadpunkbut we apparently not18:22
jrosserhmm maybe we didn’t backport that to train, I thought we did....18:23
noonedeadpunkno, it's not even in master...18:24
noonedeadpunklet me patch that18:24
kleiniIf I would have a good idea, where to fix that, I would have provided a fix but I am missing a little bit of overview about all those playbooks in ceph_client role18:25
kleininoonedeadpunk: thank you18:25
*** villes has joined #openstack-ansible18:30
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-ceph_client master: Do not try to connect to mons when everything is provided  https://review.opendev.org/72411818:32
noonedeadpunkkleini: I think that should work out eventually18:32
noonedeadpunkwe won't catch this in CI so would be great to hear if it works for you:)18:33
kleinimy fix was: http://paste.openstack.org/show/792839/ so I am sure, this will help18:37
noonedeadpunkkleini: hm, this one does a bit another thing - I think it includes file when it eventually shouldn't18:39
kleiniI have to read how Ansible interprets a list compared to "or"18:39
noonedeadpunkso it means that it won't get included only when either conf file is missing or keyrings dir is not provided. Which means that role will fail in other place18:40
noonedeadpunklist is AND18:40
kleinithat is a different meaning then18:41
openstackgerritAndreas Jaeger proposed openstack/openstack-ansible-rsyslog_client master: Cleanup py27 support  https://review.opendev.org/71993918:42
noonedeadpunkso, the main point of this include to get set fact ceph_mon_host THis fact is used in ceph_get_keyrings_from_mons.yml (which is not included when ceph_keyrings_dir is defined) and in ceph_config.yml18:43
noonedeadpunkbut only when ceph_conf_file is not defined18:43
noonedeadpunkso I think in case either of these variables are missing - we should connect to the monitor to get missing part18:44
noonedeadpunk(just explaining my idea to verify if my logic is correct)18:45
noonedeadpunkAs it can probably be wrong...18:45
villesfor me it looks now correct as I was trying to get this work but did not think all use cases first.18:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-rsyslog_client master: [ussuri][goal] Updates for python 2.7 drop  https://review.opendev.org/71067918:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-rsyslog_client master: Cleanup py27 support  https://review.opendev.org/71993918:47
noonedeadpunkok, cool then:)18:48
noonedeadpunkjrosser: guilhermesp would be great to have a review on several things: https://review.opendev.org/#/c/722923/ https://review.opendev.org/#/c/721091/  https://review.opendev.org/#/c/716528/18:55
noonedeadpunkand ofc https://review.opendev.org/#/c/720558/ once it pass tests)18:55
*** jbadiapa has quit IRC19:00
*** maaritamm has quit IRC19:44
*** threestrands has quit IRC20:09
jrosserguilhermesp: spotz heres another needing a review https://review.opendev.org/#/c/681003/20:13
spotzjrosser on it20:20
spotzdone:)20:21
openstackgerritMerged openstack/openstack-ansible-ops master: Expose voting-only option for master-eligible elasticsearch nodes  https://review.opendev.org/72357420:30
openstackgerritMerged openstack/openstack-ansible-tests stable/rocky: Add requirements_git_install_branch to test-vars  https://review.opendev.org/72292321:00
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-tests master: Update ansible to 2.9.7  https://review.opendev.org/72418021:49
noonedeadpunkPerfect timing for rabbit thing being backported)21:52
openstackgerritMerged openstack/openstack-ansible-rsyslog_client master: Add handled logs to the list  https://review.opendev.org/72055821:53
openstackgerritMerged openstack/openstack-ansible-rsyslog_client master: [ussuri][goal] Updates for python 2.7 drop  https://review.opendev.org/71067921:53
openstackgerritMerged openstack/openstack-ansible-rsyslog_client master: Cleanup py27 support  https://review.opendev.org/71993921:53
*** miloa has quit IRC23:03
openstackgerritMerged openstack/openstack-ansible master: Update ansible to 2.9.7  https://review.opendev.org/68100323:37
*** tosky has quit IRC23:39

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!