| *** cshen has joined #openstack-ansible | 00:18 | |
| *** cshen has quit IRC | 00:22 | |
| fridtjof[m] | noonedeadpunk: i finished triaging, here's the bug report :D https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1895487 | 01:15 |
|---|---|---|
| openstack | Launchpad bug 1895487 in qemu (Ubuntu) "'qemu-img convert' performance regression when target is a LVM volume" [Undecided,New] | 01:15 |
| watersj | where do you look to see why your router on your flat network is not pingable? | 01:21 |
| watersj | i am able to ping south side router (private side), but not public/flat side). Also from public net I can't ping router northside (sry got terminology wrong). | 01:23 |
| *** spatel has joined #openstack-ansible | 01:58 | |
| *** cshen has joined #openstack-ansible | 02:18 | |
| *** cshen has quit IRC | 02:22 | |
| watersj | physical_interface_mappings = flat:eno2,vlan:br-vlan , is it ok having flat and vlan on same physical interface? | 02:24 |
| *** rh-jelabarre has joined #openstack-ansible | 02:33 | |
| *** cshen has joined #openstack-ansible | 02:39 | |
| *** cshen has quit IRC | 02:43 | |
| *** rh-jelabarre has quit IRC | 03:25 | |
| *** evrardjp has quit IRC | 04:33 | |
| *** evrardjp has joined #openstack-ansible | 04:33 | |
| *** spatel has quit IRC | 04:37 | |
| *** cshen has joined #openstack-ansible | 04:39 | |
| *** cshen has quit IRC | 04:44 | |
| *** dasp has quit IRC | 05:48 | |
| *** fresta has joined #openstack-ansible | 06:12 | |
| *** miloa has joined #openstack-ansible | 06:18 | |
| *** pcaruana has joined #openstack-ansible | 06:20 | |
| noonedeadpunk | fridtjof[m]: oh, thanks, that's interesting. fortunatelly I just skipped stein I did all upgrades R->T :) | 06:51 |
| noonedeadpunk | but htat's really good to know | 06:51 |
| *** pcaruana has quit IRC | 06:56 | |
| *** pcaruana has joined #openstack-ansible | 07:09 | |
| *** cshen has joined #openstack-ansible | 07:14 | |
| jrosser | morning | 07:35 |
| jrosser | noonedeadpunk: i managed to reproduce the errors we get upgrading ansible past 2.9.9, this is really odd http://paste.openstack.org/show/797821/ | 07:42 |
| jrosser | 3 different behaviours on 3 different versions | 07:42 |
| *** andrewbonney has joined #openstack-ansible | 07:42 | |
| *** MickyMan77 has joined #openstack-ansible | 07:57 | |
| *** shyamb has joined #openstack-ansible | 08:26 | |
| *** tosky has joined #openstack-ansible | 08:27 | |
| noonedeadpunk | omg | 08:31 |
| noonedeadpunk | I feel veeeery comfortable on 2.9.9 :p | 08:31 |
| noonedeadpunk | jrosser: btw have you tried out 2.10? | 08:32 |
| jrosser | i have a wip patch and it fails the same | 08:32 |
| noonedeadpunk | 'item' is undefined? | 08:33 |
| noonedeadpunk | I haven't read release notes yet, but maybe they've droped with_items and force to use loops now..... | 08:34 |
| noonedeadpunk | will try to setup same based on your paste | 08:35 |
| *** gokhani has joined #openstack-ansible | 08:50 | |
| *** sshnaidm|pto is now known as sshnaidm | 09:10 | |
| *** itandops has joined #openstack-ansible | 09:12 | |
| *** shyamb has quit IRC | 09:23 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible stable/rocky: How to upgrade from xenial to bionic on rocky https://review.opendev.org/710803 | 09:32 |
| *** spatel has joined #openstack-ansible | 09:38 | |
| *** shyamb has joined #openstack-ansible | 09:41 | |
| *** spatel has quit IRC | 09:44 | |
| *** gixx has quit IRC | 09:45 | |
| *** gixx has joined #openstack-ansible | 09:45 | |
| *** shyamb has quit IRC | 10:03 | |
| *** shyamb has joined #openstack-ansible | 10:03 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-lxc_hosts master: Install unzip package to unpack lxc image https://review.opendev.org/751724 | 10:07 |
| fridtjof[m] | noonedeadpunk: yeah, i'm planning to jump on train (lol) soon anyway, just want to have everything in working order before I do that. Right now, I just manually replaced qemu-img with the default bionic release ^^' | 10:14 |
| noonedeadpunk | hm, maybe we should bin corresponding package so it won't be installed from uca as well... | 10:17 |
| noonedeadpunk | s/bin/pin | 10:17 |
| watersj | my router's port is down(?) Stdout: Interface "qg-974bf301-dc" is down. VMs in my private network can't get out. I can ping gateway in private network just not getting out. On public side, ip of router is down. | 10:25 |
| watersj | looking in NS everything seems ip ip netns exec qrouter-c05f804f-4cc1-4b9c-897b-a4d6e431fd77 ping [private vm, private gw, public gw] works | 10:26 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-haproxy_server master: Define http-01 params with already provided variables https://review.opendev.org/751316 | 10:38 |
| noonedeadpunk | watersj: have you tried to restart affected l3 agent? | 10:39 |
| noonedeadpunk | as this feels as some l3 router configuration issue (in terms of iptables probably) | 10:40 |
| jrosser | noonedeadpunk: i may have a fix | 10:54 |
| jrosser | ansible_host: "{{ hostvars[item]['ansible_host'] }}" | 10:54 |
| jrosser | becomes | 10:54 |
| jrosser | ansible_host: query('hostvars[item]', ansible_host) | 10:55 |
| noonedeadpunk | feels like workaround... | 10:58 |
| noonedeadpunk | or it's preffered way of handling that nowadays? | 10:58 |
| noonedeadpunk | (I mean they suppose to do that way?) | 10:58 |
| noonedeadpunk | and how to handle ways when we need to descend deeper? ie ip addresses? | 10:59 |
| jrosser | not sure tbh, i was just going through bugs and found this https://github.com/ansible/ansible/issues/71092 | 11:00 |
| gokhani | hi folks, our ssl is expired and I will renew it. I only use ssl at haproxy side. ıs it enough to change private.key and haproxy.pem files ? I don't want to run haproxy playbook. | 11:04 |
| *** SecOpsNinja has joined #openstack-ansible | 11:07 | |
| watersj | noonedeadpunk, yes I have | 11:08 |
| *** shyam89 has joined #openstack-ansible | 11:08 | |
| noonedeadpunk | haproxy.pem includes both certificate and private kay, so you need to update only /etc/ssl/private/haproxy.pem | 11:09 |
| SecOpsNinja | hi everyone. when trying to create a k8s cluster with magnum im getting "Failed to load default keystone auth policy: FileNotFoundError: [Errno 2] No such file or directory: '/etc/magnum/keystone_auth_default_policy.json'" but i don't find it in os_magnum ansible role. do i need to create it manually? | 11:10 |
| noonedeadpunk | watersj: is port owner is correct as well? | 11:10 |
| *** shyamb has quit IRC | 11:10 | |
| gokhani | noonedeadpunk, thanks I will change only .pem file. | 11:11 |
| noonedeadpunk | SecOpsNinja: hm........ | 11:14 |
| noonedeadpunk | let me see | 11:14 |
| watersj | noonedeadpunk, devive_owner = network:router_gateway (if that is what you mean) | 11:14 |
| SecOpsNinja | noonedeadpunk, thanks. for what im seeing in the magnum.conf.j2 there isn't anything defined regarding kubernetes setion so i suposse its using the default like stated were https://docs.openstack.org/magnum/latest/configuration/sample-config.html | 11:15 |
| noonedeadpunk | SecOpsNinja: yeah, we're missing it somehow o_O | 11:16 |
| *** jbadiapa has joined #openstack-ansible | 11:16 | |
| noonedeadpunk | here's sample in the meanwhile https://opendev.org/openstack/magnum/raw/branch/stable/ussuri/etc/magnum/keystone_auth_default_policy.sample | 11:16 |
| noonedeadpunk | I guess you've enabled keystone auth somehow explicitly? | 11:18 |
| noonedeadpunk | ie keystone_auth_enabled | 11:19 |
| SecOpsNinja | noonedeadpunk, i was also cheking that the coumentation is not very updated because regarding magnum there is still reference to fedora-atomic-27 but we should be now using fedora-coreos (that s whats im trying to use in k8s master and node). Regarding that sample do i need to chamge dos $proJECT_ID variables or that are internal to magnum? | 11:19 |
| noonedeadpunk | you shouldn't change variables I guess, but may want to adjust roles | 11:20 |
| noonedeadpunk | I mean I guess this file is not required unless keystone_auth_enabled is set explicitly to true | 11:20 |
| *** shyam89 has quit IRC | 11:21 | |
| SecOpsNinja | noonedeadpunk, yep i didn't change the default settings in magnum. i only had to put the external public endpoint with valid tls so it was able to comunicate with keystone | 11:21 |
| SecOpsNinja | but i will try find documentation regarding the point keystone_auth_Enabled | 11:22 |
| noonedeadpunk | I just get it from commit introduced it https://opendev.org/openstack/magnum/commit/59da4e25a6a31e296f8ad734395a791015769424 | 11:22 |
| noonedeadpunk | maybe it's set in the template level even | 11:23 |
| noonedeadpunk | yeah, it's template label lol https://docs.openstack.org/magnum/latest/user/#keystone-auth-enabled | 11:24 |
| noonedeadpunk | SecOpsNinja: ^ | 11:24 |
| noonedeadpunk | anyway I think it's worth creating that file.... | 11:24 |
| SecOpsNinja | yep i will try to first to create that file and see if i can get it to work | 11:24 |
| noonedeadpunk | not sure about specific groups though.... | 11:25 |
| noonedeadpunk | I think you can actually do not provide that flag to the template at the first place... | 11:25 |
| noonedeadpunk | but yeah, creating file should also work | 11:25 |
| *** shyamb has joined #openstack-ansible | 11:36 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_magnum master: Add deployment of keystone_auth_default_policy https://review.opendev.org/751767 | 11:37 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_magnum master: Simplify service creation https://review.opendev.org/751768 | 11:41 |
| *** dave-mccowan has joined #openstack-ansible | 11:48 | |
| *** rh-jelabarre has joined #openstack-ansible | 11:50 | |
| *** rh-jelabarre has quit IRC | 11:51 | |
| *** rh-jelabarre has joined #openstack-ansible | 11:51 | |
| *** rh-jelabarre has quit IRC | 12:00 | |
| *** rh-jelabarre has joined #openstack-ansible | 12:00 | |
| openstackgerrit | James Gibson proposed openstack/openstack-ansible-ops master: Change ansible tests to prefer Python3 over Python2 in vitualenv https://review.opendev.org/751773 | 12:15 |
| *** shyam89 has joined #openstack-ansible | 12:29 | |
| *** shyamb has quit IRC | 12:31 | |
| *** shyam89 has quit IRC | 12:31 | |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible-lxc_hosts master: Remove support for Centos-7 https://review.opendev.org/742124 | 12:42 |
| openstackgerrit | James Gibson proposed openstack/openstack-ansible-ops master: Change ansible tests to prefer Python3 over Python2 in vitualenv https://review.opendev.org/751773 | 12:47 |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible master: Remove Centos-7 support https://review.opendev.org/742100 | 12:54 |
| *** spatel has joined #openstack-ansible | 12:56 | |
| openstackgerrit | Jonathan Rosser proposed openstack/openstack-ansible master: Migrate LXC config keys to LXC3 https://review.opendev.org/742122 | 12:56 |
| *** lkoranda has joined #openstack-ansible | 12:59 | |
| spatel | jrosser: or noonedeadpunk - could you take care of this patch, I may not get time to touch it today - https://review.opendev.org/#/c/749379/ | 13:01 |
| noonedeadpunk | spatel: I'd rather merge https://review.opendev.org/#/c/749540/3 instead | 13:02 |
| noonedeadpunk | I didn't notice yours one when was placing this:( | 13:02 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_magnum master: Define condition for the first play host one time https://review.opendev.org/751780 | 13:04 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_masakari master: Define condition for the first play host one time https://review.opendev.org/751783 | 13:08 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_mistral master: Define condition for the first play host one time https://review.opendev.org/751784 | 13:10 |
| *** cshen has quit IRC | 13:11 | |
| spatel | noonedeadpunk: i am also wondering what holding it to get merge? | 13:11 |
| spatel | may be tomorrow meeting? | 13:11 |
| spatel | BRB | 13:12 |
| *** spatel has quit IRC | 13:12 | |
| *** irclogbot_0 has quit IRC | 13:19 | |
| noonedeadpunk | I gave my vote :p | 13:22 |
| *** irclogbot_0 has joined #openstack-ansible | 13:24 | |
| *** mnaser has quit IRC | 13:32 | |
| *** mnaser has joined #openstack-ansible | 13:32 | |
| *** mnaser has quit IRC | 13:32 | |
| *** mnaser has joined #openstack-ansible | 13:32 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_neutron master: Define condition for the first play host one time https://review.opendev.org/751790 | 13:32 |
| *** d34dh0r53 has joined #openstack-ansible | 13:54 | |
| *** sshnaidm is now known as sshnaidm|afk | 14:07 | |
| *** cshen has joined #openstack-ansible | 14:09 | |
| *** miloa has quit IRC | 14:16 | |
| *** baptistemm has joined #openstack-ansible | 14:29 | |
| baptistemm | hello | 14:29 |
| *** lkoranda has quit IRC | 14:36 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-lxc_hosts master: Ensure gzip is present to unpack lxc image https://review.opendev.org/751724 | 14:45 |
| jrosser | baptistemm: hello! if you have a question just ask :) | 14:49 |
| noonedeadpunk | jrosser: btw have you seen https://bugs.launchpad.net/openstack-ansible/+bug/1895533 ? | 14:54 |
| openstack | Launchpad bug 1895533 in openstack-ansible "/var/log bind mount overshadows /var/log/journal bindmount in lxc container setup" [Undecided,New] | 14:54 |
| noonedeadpunk | I just don't sure I understand... I guess we don't bind mount directory for journald? But like deployer does thet with lxc_container_bind_mounts or smth? | 15:00 |
| noonedeadpunk | oh, we actually do.... | 15:03 |
| jrosser | where is that | 15:06 |
| noonedeadpunk | dunno, but have it in aio... | 15:06 |
| noonedeadpunk | which I spawned just with gate-check-commit.sh | 15:07 |
| noonedeadpunk | so in container I have http://paste.openstack.org/show/797842/ | 15:07 |
| noonedeadpunk | but I can't find how we do this at the moment:) | 15:08 |
| noonedeadpunk | jrosser: ok, that's how we do it https://opendev.org/openstack/openstack-ansible-lxc_container_create/src/branch/master/tasks/lxc_container_config.yml#L284-L291 | 15:13 |
| noonedeadpunk | tbh..... | 15:13 |
| jrosser | right now i'm not sure i understand what is wrong | 15:14 |
| noonedeadpunk | so we define bind mounts in 2 places... | 15:14 |
| noonedeadpunk | first one is during lxc_container_create, and the second one is common-tasks/os-lxc-container-setup.yml | 15:15 |
| noonedeadpunk | and we bind mount /var/log/journal, and on top of it /var/log | 15:15 |
| noonedeadpunk | which makes /var/log/journal overlapped | 15:15 |
| noonedeadpunk | so we'd rather mount /var/log and only after /var/log/journal.... | 15:15 |
| noonedeadpunk | or smth like that | 15:15 |
| noonedeadpunk | so we should invent smth with ordering in lxc config.... | 15:17 |
| *** ianychoi has joined #openstack-ansible | 15:24 | |
| jamesdenton | jrosser The results of the OVS provider network test, FYI: http://paste.openstack.org/show/797843/ | 15:25 |
| jrosser | jamesdenton: wouldnt we expect to need to make a network: entry for the flat type anyway? | 15:31 |
| jamesdenton | yes, but as of right now the logic seems to expect two different bridges, one for vlan networks and another for (a) flat network. When in reality, it could be the same bridge. | 15:32 |
| jamesdenton | You can set.. "flat_networks = *" in ml2_conf.ini to handle it | 15:34 |
| jrosser | oh - this isnt 'flat:br-provider' <- name:interface | 15:35 |
| jrosser | not type:interface | 15:35 |
| jamesdenton | well, it's both. You potentially have 'vlan:br-provider' with type:vlan and 'flat:br-provider' with type:flat. The logic seems to create two bridge mappings, vlan:br-provider and flat:br-provider, which are not unique and the agent exists. | 15:36 |
| *** cshen has quit IRC | 15:55 | |
| jrosser | jamesdenton: humm, so you think we need a special case on 'flat_networks' in the template..... | 15:56 |
| jrosser | all feels a bit messy somehow | 15:56 |
| jamesdenton | seems a bit late to fix, no? :D | 16:06 |
| jamesdenton | s/fix/change | 16:06 |
| *** MickyMan77 has left #openstack-ansible | 16:16 | |
| *** spatel has joined #openstack-ansible | 16:26 | |
| spatel | back | 16:28 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [reno] Ignore backported release note https://review.opendev.org/751855 | 16:32 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [reno] Ignore backported release note https://review.opendev.org/751855 | 16:33 |
| baptistemm | jrosser: yes I had but I was side-tracked by urgency. it's me who reported https://storyboard.openstack.org/#!/story/2008135 I wanted to see how the module was supposed to work. | 16:38 |
| *** cshen has joined #openstack-ansible | 16:46 | |
| *** dasp has joined #openstack-ansible | 16:46 | |
| *** cshen has quit IRC | 16:57 | |
| *** spatel has quit IRC | 16:57 | |
| *** dasp has quit IRC | 16:58 | |
| *** dasp has joined #openstack-ansible | 17:00 | |
| *** andrewbonney has quit IRC | 17:31 | |
| *** SecOpsNinja has left #openstack-ansible | 17:35 | |
| *** Jeffrey4l has quit IRC | 18:08 | |
| *** spatel has joined #openstack-ansible | 18:35 | |
| *** Jeffrey4l has joined #openstack-ansible | 18:48 | |
| *** spatel has quit IRC | 18:52 | |
| *** cshen has joined #openstack-ansible | 18:53 | |
| *** Jeffrey4l has quit IRC | 18:55 | |
| *** Jeffrey4l has joined #openstack-ansible | 18:57 | |
| *** cshen has quit IRC | 18:57 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-lxc_hosts master: Wait for aria2c to finish https://review.opendev.org/751724 | 19:09 |
| noonedeadpunk | baptistemm: I think it's worth asking in #openstack-ansible-sig | 19:12 |
| watersj | is it ok to have a vlan on the same interface as the flat network prior to OSA defined vlans ? I am tight on nics and split things out for bridges | 19:14 |
| noonedeadpunk | I do that yes. Eventually I'd say it's better to use some tagged interface as "flat", as flat!=vlan for neutron or smth... | 19:17 |
| watersj | flat is the default vlan 1, | 19:18 |
| noonedeadpunk | anyway neutron is going to pick up control on vlan interface to create new vlans on it, so probably having like bond0.20 for flat is ok | 19:18 |
| noonedeadpunk | I was facing issues when had vlan, vxlan and flat on the same physocal netwrok, in case flat was untagged (or with id1) | 19:19 |
| noonedeadpunk | but maybe things have changes since then.... | 19:19 |
| baptistemm | thanks noonedeadpunk | 19:40 |
| *** spatel has joined #openstack-ansible | 20:38 | |
| *** spatel has quit IRC | 20:40 | |
| *** cshen has joined #openstack-ansible | 20:53 | |
| *** cshen has quit IRC | 20:58 | |
| jrosser | logan-: regarding https://github.com/openstack/openstack-ansible-galera_server/commit/3d405dfd52c0a5059cefd877fd578114bcdd912d | 21:15 |
| jrosser | was there an ansible issue created for that? | 21:15 |
| *** itandops has quit IRC | 21:16 | |
| jrosser | logan-: there is some related discussion here https://github.com/ansible/ansible/issues/71745 | 21:23 |
| logan- | I don't think so. I was seeing it with the lxd connection plugin. I've actually been working around this using a different method now that doesn't require modifying roles.. http://paste.openstack.org/raw/797855/ | 21:27 |
| jrosser | it's currently preventing us going past ansible 2.9.9, the galera role fails with the current code | 21:29 |
| logan- | Interesting. Something major must have changed between 2.9.9 -> 2.9.10. I have a totally different problem (but still connection related) that is blocking me from going past 2.9.9 in a project. | 21:31 |
| jrosser | could you comment on the ansible issue with your LXD workaround? | 21:31 |
| logan- | Sure | 21:32 |
| jrosser | seems there is something funky here | 21:32 |
| logan- | Yeah have you seen any problem with local connections? This is my >2.9.9 blocker http://paste.openstack.org/raw/797857/ | 21:37 |
| jrosser | hmm no, nothing like that | 21:40 |
| jrosser | though i've not got OSA beyond galera yet so there could be more surprises | 21:40 |
| logan- | If it helps I think it would be fine to revert https://github.com/openstack/openstack-ansible-galera_server/commit/3d405dfd52c0a5059cefd877fd578114bcdd912d | 21:47 |
| *** tosky has quit IRC | 22:33 | |
| *** cshen has joined #openstack-ansible | 22:54 | |
| *** cshen has quit IRC | 22:58 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!