Wednesday, 2020-07-29

pfsmorigo_... so I'm wondering if I run the openstack-ansible playbooks as part of my ansible00:00
pfsmorigo_s/if I run the/if I can run the/00:00
*** kleini_ has quit IRC00:57
*** mmercer has quit IRC00:57
*** gundalow has quit IRC00:57
*** owalsh_ has joined #openstack-ansible01:00
*** kleini_ has joined #openstack-ansible01:01
*** mmercer has joined #openstack-ansible01:01
*** gundalow has joined #openstack-ansible01:01
*** gyee has quit IRC01:02
*** fridtjof[m] has quit IRC01:03
*** csmart has quit IRC01:03
*** ioni has quit IRC01:03
*** owalsh has quit IRC01:04
*** csmart has joined #openstack-ansible01:10
*** fridtjof[m] has joined #openstack-ansible01:41
*** ioni has joined #openstack-ansible01:41
*** vblando has quit IRC01:42
elicopfsmorigo_: I am writing my own.. it seems to me pretty hard to delve into openstack-ansbile..02:02
*** rh-jelabarre has quit IRC04:32
*** rh-jlabarre has joined #openstack-ansible04:32
*** evrardjp has quit IRC04:33
*** rh-jlabarre has quit IRC04:33
*** evrardjp has joined #openstack-ansible04:33
*** rh-jlabarre has joined #openstack-ansible04:33
*** udesale has joined #openstack-ansible04:45
*** arkan has joined #openstack-ansible05:54
*** alvinstarr has quit IRC05:56
*** brtknr has quit IRC06:17
*** shyamb has joined #openstack-ansible06:20
jrosserpfsmorigo_: elico if you have specific questions the please just ask06:25
jrosserit is very common to use your own playbooks (or something like foreman, or MAAS, or.....) to prepare the hosts before you use openstack-ansible06:25
jrosseryou can use whatever you like06:26
CeeMacadmin0: ping me when you get online regarding moving neutron-server to controller06:28
*** shyamb has quit IRC06:35
*** tosky has joined #openstack-ansible07:39
*** yolanda has quit IRC07:40
*** shyamb has joined #openstack-ansible07:42
jannonoonedeadpunk: i removed all container_extra_network stuff from my config, but the inventory still shows them. any idea how to get rid of that?07:59
*** shyamb has quit IRC07:59
*** vblando has joined #openstack-ansible07:59
noonedeadpunkexcept manually drop interfaces out of /etc/openstack_deploy/openstack_inventory.json ?08:00
*** evrardjp has quit IRC08:06
*** evrardjp has joined #openstack-ansible08:08
admin0here CeeMac08:08
admin0i want the neutron containers to be on the controllers, but the actual l3 agents to be on compute nodes08:08
*** shyamb has joined #openstack-ansible08:09
admin0pfsmorigo_, in our case its tied to a kickstart file fed by a pxe menu to select a compute, controller or a generic profile08:12
jannonoonedeadpunk: this is possible and won't break anything? :)08:12
CeeMachi admin0 , let me pull my notes together for you, just on a call then will send you something08:12
noonedeadpunkjanno: until it will be valid json without syntax errors :p08:13
jannook ^^08:13
admin0CeeMac, my notes had this: https://gist.github.com/a1git/4ac94ecfadca0d66badea710786a7a0a .. confirming if that is the case08:13
admin0that is the neutron.yml file inside env.d08:13
noonedeadpunkso this file is used by dynamic_inventory as a cache. So once it present, and nothing should be added to it, dynamic inventory will use cached data08:16
*** yolanda has joined #openstack-ansible08:17
*** shyamb has quit IRC08:22
*** shyamb has joined #openstack-ansible08:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Only create local facts folder when necessary  https://review.opendev.org/74357308:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Only create local facts folder when necessary  https://review.opendev.org/74357308:31
*** brtknr has joined #openstack-ansible08:47
*** shyamb has quit IRC08:55
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/74369808:57
CeeMacadmin0: this is what I used to move neutron-server containers to my control nodes: https://pasted.tech/pastes/d51a251e81f268bcf6c12bef837cccd2a49309b109:01
CeeMacif you wanted to not have dedicated network nodes, and run the agents all on the compute nodes, you could just reference your compute nodes under 'network_hosts:' in o_u_c09:02
CeeMacoops missed a step09:02
CeeMacone sec09:02
openstackgerritChandan Kumar (raukadah) proposed openstack/openstack-ansible master: Trigger basic ironic tempest tests on os_ironic  https://review.opendev.org/73650709:03
CeeMacadmin0: this one is better: https://pasted.tech/pastes/2eafe56b95bc8c61fee4f76a12c48ca5fcc4867f09:04
openstackgerritChandan Kumar (raukadah) proposed openstack/openstack-ansible-os_ironic master: [DNM] test patch  https://review.opendev.org/72706709:05
*** shyamb has joined #openstack-ansible09:10
*** vblando has quit IRC10:08
*** shyamb has quit IRC10:15
admin0CeeMac, under that config, network-infra_hosts: will be controllers and network_hosts can be aby10:16
admin0any*10:16
CeeMacyes10:19
CeeMacI have dedicated network nodes specified as network_hosts10:19
CeeMacbut you could double up your compute nodes for instance10:19
admin0hmm.. bash: openstack-ansible: command not found  after completing bootstrap10:21
admin0centos 7.710:21
admin07.810:21
CeeMacwhich play?10:22
admin0openstack-ansible setup-infrastructure.yml --syntax-check10:22
admin0i meant bootstrap failed to add path to openstack-ansible command10:22
CeeMacodd10:22
admin0i am rerunning bootstrap to catch any errors if i can10:24
admin0what is the path to openstack-ansible ?10:26
jrosser /usr/local/bin10:27
jrosseri find that when testing OSA in centos cloud image VM that its not on the path10:27
admin0path only had /sbin:/bin:/usr/sbin:/usr/bin10:27
admin010:27
admin0i will append mine10:27
jrosseri just usually shrugh and put it down it being centos10:28
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_aodh master: Revert CentOS 8 jobs to voting  https://review.opendev.org/74354010:30
*** shyamb has joined #openstack-ansible10:31
admin0is it possible to tell OSA not to run a specific v-XXX from executing from the ansible-hardening playbook ?10:34
CeeMacthere are some overrides for it iirc10:35
CeeMacunless you want to sledgehammer it with "apply_security_hardening: false" in u_v10:36
admin0i only want to disable  copy login warning banner and adjust ssh server config based on stig10:37
admin0so its just 1 yaml file .. /etc/ansible/roles/ansible-hardening/tasks/rhel7stig/sshd.yml10:37
CeeMacdo you have the V-xxx numbers handy admin010:48
CeeMacyou should be able to override them from those set in here: https://github.com/openstack/ansible-hardening/blob/master/defaults/main.yml10:49
CeeMacso for login banner, I think security_enable_graphical_login_message: no10:49
CeeMacfor instance10:49
CeeMacand there are a bunch of different ssh ones https://github.com/openstack/ansible-hardening/blob/master/defaults/main.yml#L31910:50
admin0many thanks CeeMac  .. i know now11:03
jannothis did the trick: http://paste.openstack.org/show/796421/11:06
*** mgariepy has quit IRC11:09
CeeMacno problem11:11
*** markvoelker has joined #openstack-ansible11:40
*** arkan has quit IRC11:46
*** markvoelker has quit IRC11:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Deprecate os_congress role  https://review.opendev.org/74252111:59
*** elico has quit IRC12:09
*** shyamb has quit IRC12:17
*** udesale_ has joined #openstack-ansible12:19
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-ceph_client master: Add centos8 epel GPG key  https://review.opendev.org/74352312:19
*** udesale has quit IRC12:21
*** mgariepy has joined #openstack-ansible12:23
admin0in my metrics_hosts:, ansible creates a container, but does not give it an ip .. the IP is not in the inventory file either12:35
admin0is the ip assigned in inventory first and then asked from dhcp, or is it captured from dhcp first and then added to inventory12:36
openstackgerritMerged openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/74369812:37
*** markvoelker has joined #openstack-ansible12:48
admin0m1_gnocchi_container-7038e889  is not even bridged to lxcbr012:52
*** dave-mccowan has joined #openstack-ansible13:28
*** odyssey4me has joined #openstack-ansible13:29
odyssey4mehey folks, long time no see :)13:30
noonedeadpunk\o/13:30
*** andrewbonney has joined #openstack-ansible13:32
odyssey4meI wonder if it'd be possible to get some eyes on https://review.opendev.org/743573 - the fact setting bits are a little OSA-centric and that neutralises the issue we're seeing in TripleO-CI (we don't run this role as root like OSA does).13:32
noonedeadpunkI've already voted for it:)13:34
odyssey4mehaha, always on top of things as always noonedeadpunk :)13:44
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_gnocchi master: Fix run task conditionals  https://review.opendev.org/73934613:45
jrossero/ hey there13:46
noonedeadpunkI saw that patch yestarday, but recalled to look through it only once you wrote :(13:46
mgariepyhere you go odyssey4me13:46
odyssey4meboom, thanks to you both13:47
mgariepywhat's up odyssey4me ?13:47
odyssey4memgariepy: doing alright - doing the usual thing - chasing patches, fixing bugs, trying to figure out how to make openstack deployments simpler and easier to work with13:48
odyssey4me:)13:49
mgariepycool13:49
noonedeadpunkSounds pretty good:)13:49
*** d34dh0r53 has joined #openstack-ansible13:49
admin0is the ip assigned in inventory first and then asked from dhcp, or is it captured from dhcp first and then added to inventory ?14:06
admin0i have one container with missing eth014:06
jrosserit doesnt work like that14:06
admin0:D14:07
jrossereth0 in the container always gets its IP from dnsmasq running on the host via DHCP14:07
jrosserany other interfaces are allocated by the dynamic inventory and recorded in /etc/openstack_deploy/.... files14:08
*** sshnaidm is now known as sshnaidm|bbl14:17
*** spatel has joined #openstack-ansible14:45
*** irclogbot_0 has quit IRC14:52
*** irclogbot_1 has joined #openstack-ansible14:58
*** also_stingrayza has joined #openstack-ansible15:22
*** stingrayza has quit IRC15:24
*** also_stingrayza is now known as stingrayza15:24
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_gnocchi master: Flush handlers before doing db upgrade  https://review.opendev.org/74378315:26
*** spatel has quit IRC15:28
*** mgariepy has quit IRC15:40
*** shyamb has joined #openstack-ansible15:44
*** shyamb has quit IRC15:53
*** jbadiapa has quit IRC16:12
*** markvoelker has quit IRC16:13
*** udesale_ has quit IRC16:24
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [DNM] Decrease murano tempest concurrency  https://review.opendev.org/74379816:28
*** sshnaidm|bbl is now known as sshnaidm16:28
*** gyee has joined #openstack-ansible16:28
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_murano master: Add centos-8 support  https://review.opendev.org/73963916:28
*** jbadiapa has joined #openstack-ansible16:36
*** mgariepy has joined #openstack-ansible17:05
*** sshnaidm is now known as sshnaidm|afk17:15
*** andrewbonney has quit IRC18:21
*** waxfire has quit IRC19:12
*** waxfire has joined #openstack-ansible19:13
*** cp- has quit IRC19:33
openstackgerritMerged openstack/ansible-role-python_venv_build master: Only create local facts folder when necessary  https://review.opendev.org/74357321:02
*** jbadiapa has quit IRC21:11
*** jbadiapa has joined #openstack-ansible21:11
*** jbadiapa has quit IRC21:33
openstackgerritMerged openstack/openstack-ansible stable/ussuri: Fix ceph deployment for CentOS 7  https://review.opendev.org/74331421:48
*** yan0s has joined #openstack-ansible23:14
*** tosky has quit IRC23:21
yan0sHello is anyone familiar with osprofiler?23:34

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!