Monday, 2020-10-12

*** MickyMan77 has joined #openstack-ansible00:36
*** MickyMan77 has quit IRC00:45
*** MickyMan77 has joined #openstack-ansible01:20
*** mpsairam has quit IRC01:27
*** pmannidi has joined #openstack-ansible01:27
*** MickyMan77 has quit IRC01:29
*** djhankb has quit IRC01:29
*** djhankb has joined #openstack-ansible01:30
*** rfolco has joined #openstack-ansible01:48
*** rfolco has quit IRC02:29
*** pmannidi has quit IRC03:03
*** maharg101 has joined #openstack-ansible03:17
*** maharg101 has quit IRC03:22
*** MickyMan77 has joined #openstack-ansible03:29
*** MickyMan77 has quit IRC03:38
*** maharg101 has joined #openstack-ansible03:54
*** maharg101 has quit IRC03:59
*** MickyMan77 has joined #openstack-ansible04:00
*** pmannidi has joined #openstack-ansible04:19
*** evrardjp has quit IRC04:33
*** evrardjp has joined #openstack-ansible04:33
*** djhankb has quit IRC04:45
*** djhankb has joined #openstack-ansible04:46
*** MickyMan77 has quit IRC05:04
*** maharg101 has joined #openstack-ansible05:55
*** dmsimard has quit IRC05:55
*** dmsimard has joined #openstack-ansible05:58
*** MickyMan77 has joined #openstack-ansible06:00
*** maharg101 has quit IRC06:01
*** MickyMan77 has quit IRC06:09
*** miloa has joined #openstack-ansible06:16
noonedeadpunkmornings06:37
*** MickyMan77 has joined #openstack-ansible06:45
*** viks____ has joined #openstack-ansible06:47
ebbexmornin'06:51
ebbexnoonedeadpunk: I managed to get the ceph cluster issue again.06:52
ebbexINSERT INTO `clusters` VALUES ('2020-10-10 19:48:16','2020-10-10 19:48:16',NULL,0,2,'ceph@RBD','cinder-volume',0,NULL,0,'disabled',NULL,0);06:53
*** MickyMan77 has quit IRC06:54
ebbexAnd was created by having just one cinder-volume.service start with cinder.conf containing [RBD]\nbackend_host: rbd:volumes06:54
recycleheromornings guys06:55
recycleheroFinally satisfied with my test setup. I wrote a script to convert all the vm hard drives from the failed queens enviroment to qcow2, add a public key to all of them for easy ssh auth, and upload them to my new os glance.06:57
recycleheroapart from getting some 504s on horizions it seems ok06:57
recycleherostill no cors for irect glance upload06:57
recycleheronoonedeadpunk: there is some issues needs exprt attention06:58
noonedeadpunkebbex: huh, so it doesn't really matter if we have backend_host defined or not06:58
recycleherocompute1 was getting an ipv6 automatically that prevented it from creating bridges06:58
noonedeadpunkand this was the request with which it failed, or which is needed to fix?06:58
recycleherocompute1 AppArmor has some issues with NFS so I had to disable it06:59
*** andrewbonney has joined #openstack-ansible07:00
*** tosky has joined #openstack-ansible07:03
* noonedeadpunk needs to spawn aio07:04
ebbexnoonedeadpunk: yup. for now it seems only that the create statement is sometimes missing, and none of the ceph-volume services will create it on startup if backend_host is not set.07:04
noonedeadpunkI'm wondering if we're missing some command to run, (ie cinder-manage one)07:05
ebbexbut i did deploy once without issues, only thing different was i had 'cinder_ceph_client: cinder' and 'glance_ceph_client: glance' in my user_variables.yml07:06
noonedeadpunkebbex: I guess it's default? https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/all/cinder.yml#L1707:08
ebbexYeah, i figured they were the defaults so i removed them, and the two times i've deployed without them, something went wrong.07:11
noonedeadpunktotally `wtf` sotuation....07:12
noonedeadpunk*situation07:12
ebbexyup.07:12
*** rpittau|afk is now known as rpittau07:35
jrosserebbex: we do have some odd sequencing perhaps?07:44
*** maharg101 has joined #openstack-ansible07:45
jrosserlike install the services, drop the systemd units, adjust the conf files with the templates, some restarts....07:45
jrosseranyway, good morning all07:49
*** sshnaidm|off is now known as sshnaidm07:58
noonedeadpunkI think I have some time during upcoming weeks to look into that, just not quite understand how to reproduce that... just drop glance_ceph_client and  cinder_ceph_client from user variables and leave only in group vars...08:02
noonedeadpunkwhat is clear, is that aio in CI does not reproduce issue...08:11
jrosserrecyclehero: for your NFS/apparmor problem when mouting into a container, or onto the host?08:15
*** MickyMan77 has joined #openstack-ansible08:35
MickyMan77jrosser: I have manually link the libs but when I try to start the services I get this error... "TabError: inconsistent use of tabs and spaces in indentation". --  http://paste.openstack.org/show/798938/08:37
noonedeadpunkgerritbot seems broken again08:55
jrosserMickyMan77: you shouldnt need to manually link the libraries, the ceph_client role should do that for you i think09:05
recycleherojrosser: into the host. I set up storage backend as nfs so it tries to mount also in the compute physical host.09:13
jrosserrecyclehero: well i guess that is a debian / apparmor specific thing, if you know what we should do to allow that nfs mount then it might be possible to patch it, or put in the docs what must be done for preparing the hosts09:16
*** openstackgerrit has joined #openstack-ansible09:16
openstackgerritwu.shiming proposed openstack/openstack-ansible master: Use unittest.mock instead of mock  https://review.opendev.org/75749009:16
*** djhankb has quit IRC09:18
*** djhankb has joined #openstack-ansible09:19
MickyMan77jrosser: If I stand in  venvs/cinder*** folder and do an ". bin/activate" and then I run "bin/pip3 install python-cephlibs" that will install the python files.09:24
openstackgerritMerged openstack/openstack-ansible-os_nova master: Trigger uwsgi restart  https://review.opendev.org/75686109:24
jrosserthe ceph python libs need to be installed on the host and then symlinked into the venv09:25
recycleherojrosser: sure, I will share what I have done about it. but maybe the problem was the bridge problem which also need addressing. the interface for flat-vlan network which is passed to compute node (host_override_interface) was getting an IPV6 address which was cauging lot of problems09:25
jrosserthis is because the python libs are a thin shim around librbd and if the python bindings do not exactly match the shared libraries on the host then it's all going to go badly09:25
jrosserMickyMan77: i would really recommend using only the playbooks to set all this up, not manual installation because it's doing some really quite specific things09:26
recycleherowhy are the oversubscription of nova was chosen this much lower than the OS defaults?09:27
recycleheroOS nova_cpu_allocation_ratio:16 OSA nova_cpu_allocation_ratio:209:27
jrosserin fact more specifically the ceph python libs need to be installed on the host from the apt packages from the ceph site to be matching with the librbd packages, not using pip09:27
jrosserrecyclehero: it depends on your workload, override it to whatever you want09:28
openstackgerritMerged openstack/openstack-ansible-os_glance master: Trigger uwsgi restart  https://review.opendev.org/75668109:28
ebbexjrosser: maybe, i don't really see how. I'll try a couple redeploys tonight to see if i can pin it down to a specific combination.09:30
MickyMan77jrosser: can I just run the playbook ceph_install_python_libs.yml ?09:45
jrosserno, thats a set of tasks in an ansible role09:45
*** MickyMan77 has quit IRC09:46
jrosserthe ceph_client role is run from the os_cinder role, if the appropriate condition is met, see https://github.com/openstack/openstack-ansible-os_cinder/blob/master/tasks/main.yml#L166-L17609:48
openstackgerritMerged openstack/openstack-ansible-os_aodh master: Trigger uwsgi restart  https://review.opendev.org/75668409:48
openstackgerritMerged openstack/openstack-ansible master: Switch integrated linters to focal  https://review.opendev.org/75575909:59
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Fix linter errors  https://review.opendev.org/75569709:59
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Add configuration example for Ceph configuration from files.  https://review.opendev.org/75605109:59
openstackgerritMerged openstack/openstack-ansible-ceph_client master: Allow to proceed with role if ceph_conf_file is set  https://review.opendev.org/75582009:59
openstackgerritwu.shiming proposed openstack/openstack-ansible-os_cinder master: Dep's should be restricted by upper-constraints  https://review.opendev.org/75752510:01
*** shyamb has joined #openstack-ansible10:17
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Updated from OpenStack Ansible Tests  https://review.opendev.org/75416910:18
openstackgerritlikui proposed openstack/openstack-ansible master: Reuse the docs deps to benefit from constraints  https://review.opendev.org/75744310:20
openstackgerritMerged openstack/openstack-ansible master: Remove "when" statement from vars_prompt  https://review.opendev.org/75582410:28
*** shyamb has quit IRC10:31
*** pcaruana has quit IRC10:31
recycleheroregarding overcommiting memory, is ksm avaialble by default for nova kvm driver?10:37
*** djhankb has quit IRC10:38
*** djhankb has joined #openstack-ansible10:38
*** shyamb has joined #openstack-ansible10:58
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Do not manage /etc/ssl or /etc/pki directories or symlinks  https://review.opendev.org/75409310:59
*** pcaruana has joined #openstack-ansible11:03
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Add infra testing scenario  https://review.opendev.org/75549711:14
jrosserrecyclehero: you can enable KSM is you need it https://github.com/openstack/openstack-ansible-os_nova/blob/master/defaults/main.yml#L17011:14
jrossernoonedeadpunk: SHA bump on master makes unfortunate error for debian https://zuul.opendev.org/t/openstack/build/4ac0f9f137fe4522abbd4b1dcc8ebcca/log/logs/host/nova-compute.service.journal-10-34-13.log.txt#4516-452711:17
noonedeadpunkjrosser: uh, seems we need to enable buster-backports for qemu11:18
noonedeadpunkas its 3.1 vs 5,011:19
jrossermakes me wonder why that has broken so late11:22
jrosseryou would change that sort of thing right at the start of a cycle rather than just at the end?11:22
noonedeadpunkI hope I bumped really V there11:23
*** shyamb has quit IRC11:24
*** shyamb has joined #openstack-ansible11:24
noonedeadpunkwell yes, it's just landed https://opendev.org/openstack/nova/commit/2931516b75ab1eda8deefec6910efee82a0a7ae211:24
*** shyam89 has joined #openstack-ansible11:24
noonedeadpunkuh11:24
*** shyam89 has quit IRC11:25
*** MickyMan77 has joined #openstack-ansible11:34
*** rh-jelabarre has joined #openstack-ansible11:54
*** shyamb has quit IRC11:57
*** shyam89 has joined #openstack-ansible11:57
*** recyclehero has quit IRC11:57
*** recyclehero has joined #openstack-ansible12:03
openstackgerritMerged openstack/openstack-ansible master: Simplify path for letsencrypt usage  https://review.opendev.org/75132712:05
*** shyam89 has quit IRC12:07
*** shyam89 has joined #openstack-ansible12:08
*** shyamb has joined #openstack-ansible12:19
*** shyam89 has quit IRC12:20
*** shyamb has quit IRC12:26
*** soutr has joined #openstack-ansible12:30
jrossernoonedeadpunk: i think we have something a bit broken in our strategy plugin, see this https://zuul.opendev.org/t/openstack/build/419d108ff609461f95300206dd5c9262/log/job-output.txt#15345-1534612:47
*** yann-kaelig has joined #openstack-ansible12:47
jrosserthe task returns no status at all, so not skipped / ok / failed, just nothing12:47
jrosserand that also means that the task is not in the ARA report by the look of it12:47
jrosserwe have an early exit point here https://github.com/openstack/openstack-ansible-plugins/blob/master/strategy/linear.py#L124-L12512:48
noonedeadpunkjrosser: well, that never caused any actual issues12:49
jrosserthat checks any conditionals on the task12:49
noonedeadpunkand I think here issue is in patch itself...12:49
noonedeadpunkbut yeah, I noticed that previously as well12:49
jrosseri guess i was surprised not to see the task at all in ARA12:49
noonedeadpunkwell, ara changed the way of logging I think as well)12:50
noonedeadpunkfrom other side because of early exit we probably save up some time?12:50
jrosserthats the idea i suppose, though it is from very long ago12:50
noonedeadpunkyeah it is....12:50
noonedeadpunkwell yes, it's probably worth looking at one day12:51
noonedeadpunkjrosser: btw offtopic question - I guess you're using barbican?12:53
jrosseri'm just taking a look at keystone why the uw_apache test seems to fail with missing rsync12:53
jrosserseems related to cleaning up the lxc packages by i can't see what12:54
jrossernoonedeadpunk: no we don't use barbican, but it would be nice12:54
jrosserno good answer to the secrets backend is kind of my issue with it12:54
noonedeadpunkwell ye felt it:)12:54
jrosserprobably hashi vault would be my first choice12:55
noonedeadpunkactually I was trying to use vault one12:55
noonedeadpunkyeah. and it seems there's no need in barbican to use vault...12:55
jrosserwe do use vault, just not for this yet, so have some experience with it12:55
redrobot๐Ÿ‘€12:56
noonedeadpunkmoreover, barbican weirdly fails when it set to store with vault and cinder tries to read previously created secret12:56
noonedeadpunkredrobot: I tried to write in #openstack-barbican :p12:56
noonedeadpunkredrobot: http://paste.openstack.org/show/798944/12:56
noonedeadpunkwhat is weird, that when I just manually put data it's readed fine12:57
redrobotOh weird12:57
noonedeadpunkhttp://paste.openstack.org/show/798948/12:57
noonedeadpunkwhen cinder is set to use vault directly it's ok as well....12:58
noonedeadpunk(directly through castellian I mean)12:58
redrobotSo Barbican with Vault backend is borked, but Castellan with Vault backend is OK?12:59
redrobot๐Ÿค”12:59
noonedeadpunkkind of....12:59
noonedeadpunkwhich does not make much sense seing https://opendev.org/openstack/barbican/src/branch/master/barbican/plugin/vault_secret_store.py13:00
noonedeadpunkredrobot: well, barbican with vault is ok, until cinder tries to read previously created payload13:01
noonedeadpunkbut, what makes me suspicios, is metadata for cinder created key....13:02
noonedeadpunkvolume type is `openstack volume type create --encryption-provider luks --encryption-cipher aes-xts-plain64 --encryption-key-size 256 --encryption-control-location front-end LUKS --property volume_backend_name='rbddriver'`13:02
noonedeadpunkbut it results in ` Mode          | None ` for the secret13:02
redrobotyeah, mode is just metadata, it doesn't really do much.13:03
redrobot> previously created payload < Previously created how? ๐Ÿค”13:03
noonedeadpunkI mean just created volume13:03
noonedeadpunkas api/scheduler part is passed and it fails on cinder-volume part13:04
noonedeadpunkSo I guess that payload should be already created and stored?13:04
noonedeadpunk(by cinder)13:04
noonedeadpunkredrobot: I have actually a sandbox where I'm playing with it... but have no idea what to look for at the moment13:11
noonedeadpunkredrobot: oh, well, and `encoded` value which is passed to oslo_serialization.base64 is `b'\xe2\xca7\xc2i$\x99\x8a\xb5\xf6r\x9d&@\xe6\xf1\xfbW\xfeL\x1d\xae\xa1\x8e\x1b\xe6\xea\xaa\xc0\xf5\xd3\xa1'` which I have no idea how to decrypt as well13:14
noonedeadpunks/decrypt/decode13:14
noonedeadpunkso actually what results in this error is `openstack secret get https://10.6.0.196:9311/v1/secrets/ed50129c-eb0e-4fe3-8e43-696197854768 -t application/octet-stream -p`13:21
*** maharg101 has quit IRC13:22
noonedeadpunkso my guess is that maybe it's not properly decrypted....13:28
*** soutr has quit IRC13:30
recycleheroif I want to get rid of neutron-metering-agent Should I override it and remove it from contains list of network-containers via a override in /etc/.../env.d or just remove it from neutron plugins in its conf?13:32
recycleheroor both?13:32
*** pcaruana has quit IRC13:35
noonedeadpunkredrobot: hm, just out of interest I placed "raise ValueError" here https://opendev.org/openstack/barbican/src/branch/master/barbican/plugin/resources.py#L71 - and it's not raised, but only http://paste.openstack.org/show/798944/13:42
noonedeadpunkso it seems I was wrong about that it has stored somewhere13:42
noonedeadpunkbut how/why it tries to read data then....13:42
noonedeadpunkit's stack trace from cinder size... http://paste.openstack.org/show/798953/13:43
*** d34dh0r53 has quit IRC13:54
*** d34dh0r53 has joined #openstack-ansible14:00
*** gshippey has joined #openstack-ansible14:10
ebbexhttp://paste.openstack.org/show/798955/ is this the correct format for pci passthru ?14:18
ebbexah, not quite. nova_pci_passthrough_whitelist is not actually a list :/14:20
jrosseri had something like this http://paste.openstack.org/show/798956/14:22
ebbexjrosser: i started out using nova_nova_conf_overrides, then I saw in the template these other options. Thanks :)14:43
*** MickyMan77 has quit IRC15:12
*** miloa has quit IRC15:23
jrosserooohhh haproxy/metal is passing https://review.opendev.org/#/c/733408/15:35
jrosserthe thing blocking that merging would be this https://review.opendev.org/#/c/754092/15:36
*** cyberpear has joined #openstack-ansible15:43
jrosseri ran the os_keystone uw_apache functional test locally and it passed15:49
jrossernot sure what is going on there with not able to find 'rsync'15:49
noonedeadpunkcentos 8 looks the way worse. I thought we even disabled it? or it was for some other role?15:50
jrosserhmm? iirc theres is a seperate patch to add centos-8 there?15:51
noonedeadpunkwell, rsync added for redhat but not for uubntu/debian images with https://review.opendev.org/#/c/75658715:52
jrosserkeystone role installs rsync too15:52
jrosserthis is whats so confusing15:52
noonedeadpunkwell yeah, it does...15:52
noonedeadpunkoh wait15:53
noonedeadpunkit's missing rsync on the host where it tries to connect15:53
noonedeadpunkwhich is 10.1.0.415:53
noonedeadpunkand it's keystone2?15:54
jrosserhmm - it's not running serial is it15:54
jrosserand the package installation has not yet happened on the 2nd instance.....15:55
noonedeadpunkit is https://opendev.org/openstack/openstack-ansible-tests/src/branch/master/test-install-keystone.yml#L2715:55
jrossermatching here https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-keystone-install.yml#L3915:56
noonedeadpunkyeah....15:57
noonedeadpunkso we kind of need rsync before role get's launched....15:57
jrosserunfortunate15:57
noonedeadpunkwe probably ned to leave comments _why_ we need packages in lxc_hosts15:58
jrosseragreed15:58
jrossertheres also this comment too https://github.com/openstack/openstack-ansible-os_keystone/blob/4c9dda7dc4e90ade994eb05928a2d636c6747f43/tasks/keystone_fernet_keys_distribute.yml#L1616:00
jrosserbut iirc synchronize module needs rsync anyway16:00
noonedeadpunkyes, it is16:00
*** rpittau is now known as rpittau|afk16:01
noonedeadpunkwell, it will be more neat, but yeah, we need tsync anyway)16:01
noonedeadpunk*rsync16:01
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-lxc_hosts master: Add rsync to container base image  https://review.opendev.org/75761216:11
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_keystone master: Do not manage /etc/ssl or /etc/pki directories or symlinks  https://review.opendev.org/75409216:11
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_cloudkitty master: Define condition for the first play host one time  https://review.opendev.org/75126116:20
*** tosky has quit IRC16:21
jrosseri think this is stopping things merge in python_venv_build role https://review.opendev.org/#/c/756279/16:22
*** spatel has joined #openstack-ansible16:28
spatelI know its too early but do we know when openstack-ansible victoria stable going to come out?16:30
spatelI am planning to skip Ussuri if victoria is current stable or close to stable16:30
*** csmart has quit IRC16:40
jrosserebbex: http://paste.openstack.org/show/798963/17:07
*** pcaruana has joined #openstack-ansible17:13
*** andrewbonney has quit IRC17:29
*** gyee has joined #openstack-ansible18:00
ebbexjrosser: well that's new... how does that apply to something? do you combine it to a dict, and it will set/cancel out a key with null?18:10
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Updated from OpenStack Ansible Tests  https://review.opendev.org/75554018:11
jrosserafaik it it a dict with keys but no values18:11
jrosserand itโ€™s used several times in the systemd_networkd role examples18:11
jrosserwould need a bit of trying out to see why itโ€™s done that way I guess18:12
*** spatel has quit IRC18:32
ebbexjrosser: I'm guessing it's another way to make it look like a list, but behave like a dict? Though you could get the same result just adding a ':' at the end of the quoted key.18:35
ebbexI'm guessing cloudnull could chime in on that.18:37
cloudnullwat?18:37
ebbexcloudnull: Why are some "lists" using '?' instead of '-' in systemd_networkd18:38
ebbex?18:38
*** viks____ has quit IRC18:38
ebbexcloudnull: like this, https://review.opendev.org/#/c/733408/19/tests/roles/bootstrap-host/tasks/prepare_networking.yml18:39
jrosserthat syntax i took from the example here https://github.com/openstack/ansible-role-systemd_networkd/blob/master/examples/playbook.yml#L175-L18018:40
ebbexcurious side-question, what do you guys use for irc clients, and how do you get notifications on mentions?18:45
cloudnullebbex that's a set vs an array18:46
cloudnullwhen using config_template we differentiate between the two data sources18:46
cloudnullthere used to be docs on this , though im failing to find it18:48
cloudnullthe TL;DR is , a set allows INI style config to create a duplicate entry within the section18:49
cloudnullopenstack allows for multi-config-op which is not actually part of the ini spec.18:50
cloudnullto support that, config_template sees a set (items with ?) as a multi-config op when writing an INI file18:51
cloudnullwhen not writing an INI file , ? or - are just lists18:51
cloudnullhttps://github.com/openstack/ansible-config_template/blob/master/action/config_template.py#L136-L18218:52
cloudnullthat doc string is in code, I thought something more robust was published to, but I cant find it18:53
cloudnullebbex I hope that answers your question18:53
* cloudnull goes back to lurking 18:53
*** djhankb has quit IRC18:54
jrossercloudnull: oh thats really neat18:54
jrosserwe were looking at systemd timer units wanting multiple OnCalendar keys18:54
*** djhankb has joined #openstack-ansible18:54
jrosserthat wouldallow it18:54
ebbexcloudnull: Thanks :)18:54
cloudnull++18:55
cloudnulljrosser yup that would allow it18:55
cloudnullwe used it in openstack, mysql, and systemd config18:55
*** yann-kaelig has quit IRC19:00
*** cshen has quit IRC19:01
jrosserebbex: i use irccloud, browser based. it hooks into desktop notifications from chrome, and also theres a mobile app19:02
ebbexI'll look into that, thanks :)19:15
*** masterpe has quit IRC19:16
*** ioni has quit IRC19:16
*** fridtjof[m] has quit IRC19:16
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_nova master: Define condition for the first play host one time  https://review.opendev.org/75633219:25
*** ioni has joined #openstack-ansible19:26
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Updated from OpenStack Ansible Tests  https://review.opendev.org/75553019:26
openstackgerritJonathan Rosser proposed openstack/ansible-role-python_venv_build master: Install git package on hosts building venvs  https://review.opendev.org/75693919:26
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_nova master: Simplify scheduler filter additions  https://review.opendev.org/65014419:29
*** masterpe has joined #openstack-ansible19:50
*** fridtjof[m] has joined #openstack-ansible19:50
*** MickyMan77 has joined #openstack-ansible20:00
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Fix boolean in config file.  https://review.opendev.org/75550820:14
*** djhankb has quit IRC20:15
*** djhankb has joined #openstack-ansible20:15
*** d34dh0r53 has quit IRC20:20
*** d34dh0r53 has joined #openstack-ansible20:25
*** tosky has joined #openstack-ansible20:26
recyclehero21.0.1: there is an option in neutron role, neutorn_plugin_base. I cant find an option with the same name in OS Neutron conf. is there the default options name for roles arbitrary?20:30
*** d34dh0r53 has quit IRC20:30
recycleheroif they are arbitrary chosen I think neutron_plugin_base maps to service_plugins in neutron.conf, right?20:30
recycleherowhere can I see these mapping?20:31
*** d34dh0r53 has joined #openstack-ansible20:31
*** d34dh0r53 has quit IRC20:35
*** d34dh0r53 has joined #openstack-ansible20:36
jrosserrecyclehero: unfortunately life is not always as simple as taking the config key name and exposing it directly as a variable. Sometimes extra logic is required, and that is the case for service_plugins in neutron.conf20:40
*** yann-kaelig has joined #openstack-ansible20:41
jrosserthis is a useful way of finding out where all these things go http://codesearch.openstack.org/?q=neutron_plugin_base20:41
*** yann-kaelig has quit IRC20:41
recycleherolife wasnt easy this past week working with ansible, but its starting to payoff. thansk jrosser20:42
jrosseryou'll see from that search that neutron_plugin_base is a term from inside the neturon code, so the choice is not arbitrary20:42
recycleherojrosser: say I deployed neutron-metering-agent, then I go and delete it in my overridden env.d and also remove it from neutron_plugin_base. will it get removed?20:42
jrosseri don't know20:43
jrosseri would have to try20:43
recycleheroor see the playbooks to findout20:43
jrosseryes20:43
recycleherobut I think the playbooks are not so inclined to deleting things20:44
jrosseransible in general is additive20:48
jrosserbut you can declare state, like a service being started or stopped20:48
recycleheroin this case the neutorn-metering-agent is still there20:49
MickyMan77Now I have another problem. I'm trying to deploy ceph-client. When I activate "ceph_keyrings_dir: /etc/openstack_deploy/ceph-keyrings" I do get this error  --> http://paste.openstack.org/show/798966/20:49
jrosserrecyclehero: the way to approach this is to look in the os_neutron defaults/main.yml20:50
jrosserthe defaults files for the roles are the "external interface" where settings are declared20:50
jrosserhere would be the enable/disable flag for the neutron metring agent https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/vars/main.yml#L39720:51
jrosserthen we can find the condition which determines if that is true/false https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/vars/main.yml#L14420:51
recycleherojrosser: thanks I saw the deafualt and yet didnt see that20:52
jrosserso perhaps checking if 'metering' is in neutron_plugin_base is first step20:52
jrosserif so remove it, and the metering service will still be deployed, but hopefully the systemd unit will be disabled20:53
recycleherobut if I remove it from env.d neutron_agents_container maybe it shoudnt get deployed20:54
jrosseryou can do that but i would not recommend that20:54
recycleherocare to elaborate?20:56
recycleherojrosser: also I was looking at default/main.yml not vars/main.yml20:57
jrosseradjusting env.d and removing the definition of a group means that you then need to delete that group and all references to it from the dynamic inventory cache20:57
*** cshen has joined #openstack-ansible20:58
jrosserand perhaps also you'd want to check that the playbooks make no direct reference to the group you want to remove20:58
jrosseri.e they run without error if the group is undefined, rather than simply empty20:58
recycleheroI am playing now to find a near perfect deployemnt. if I dont have that from start the problem with inventory cache will be gone, right?20:59
recycleherobut I get it, its better to play with the options when u can and dont touch the skeleton as u mentioned earlier21:00
*** cshen has quit IRC21:02
jrosserin principle either way will work21:03
jrosserturning the metering agent on/off via neutron_plugin_base is quite simple and you could do that on a live deployment quite easily21:04
openstackgerritMerged openstack/openstack-ansible-os_panko master: Cleanup apache tasks  https://review.opendev.org/75686421:04
jrosserasjusting env.d feels mich more invasive somehow21:04
recycleheroyes so there is no need doing anything with vars. but as I said it seems If you get it, you cant get rid of it. but I omitted it from neutron_service_plugins and that change hopeyfully projected to the nuetorn-server container. so I should be abte to safely disable the systemd for it or even delete its bin from /openstack21:06
recycleheroi removed it from base plugins but it still shows as running21:07
recycleherojrosser: whats the purpose of component_skel in env.d files? I think they are internal and with dont see them on the surface21:12
jrosserhttps://opendev.org/openstack/openstack-ansible/src/branch/master/etc/openstack_deploy/env.d/extra_container.yml.example21:29
jrosserrecyclehero: if the metering agent is still running i think you've now got enough info to trace through21:29
jrosseryou can throw in a debug; task to print the value of neutron_metering21:30
recycleherothats good idea and make me learn to write tasks21:33
recycleherobut it made me realize where my fault lays21:33
recycleheroin user_variables I wore neutorn_base_plugins: -router. so they would get merged from default and the final neutron_base_plugin would be -router and -metring.21:34
jrosserwell actually it looks like a bug tbh https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/vars/main.yml#L325-L34021:34
recycleheroI should do neutron_base_plugin: router(with out the dash) in user_variables?21:34
jrosserit's a yaml format list https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/defaults/main.yml#L338-L34021:36
jrosserso one entry can be a newline with a dash21:36
jrosseror key: [ value ]21:36
jrosseras an alternate yaml form21:36
jrosseranyway late here, i'm done for today21:37
recycleherothanks, ttl.21:37
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_nova master: Define condition for the first play host one time  https://review.opendev.org/75633221:44
openstackgerritMerged openstack/openstack-ansible master: Update integrated ansible-lint rules  https://review.opendev.org/75612122:57
*** watersj has quit IRC23:01
*** CeeMac has quit IRC23:01
*** tosky has quit IRC23:15
*** nurdie has quit IRC23:20
openstackgerritMerged openstack/openstack-ansible-os_heat master: Trigger uwsgi restart  https://review.opendev.org/75672423:23
*** nurdie has joined #openstack-ansible23:36
*** nurdie has quit IRC23:40

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!