Wednesday, 2021-01-06

*** cloudnull has joined #openstack-ansible00:03
*** cloudnull has quit IRC00:10
openstackgerritMerged openstack/openstack-ansible stable/victoria: Fix keystone IDP setup  https://review.opendev.org/c/openstack/openstack-ansible/+/76918100:14
openstackgerritMerged openstack/openstack-ansible stable/victoria: Update deploy guide to reflect the current status of OSA  https://review.opendev.org/c/openstack/openstack-ansible/+/76917800:14
*** tosky has quit IRC00:23
*** spatel has joined #openstack-ansible00:46
*** spatel has quit IRC00:52
*** gyee has quit IRC01:25
*** cloudnull has joined #openstack-ansible01:42
*** macz_ has quit IRC02:05
*** macz_ has joined #openstack-ansible02:12
*** spatel has joined #openstack-ansible02:26
*** spatel has quit IRC02:28
*** rh-jelabarre has quit IRC02:29
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-ansible05:33
*** macz_ has quit IRC05:45
*** miloa has joined #openstack-ansible06:43
*** ChiTo has joined #openstack-ansible06:52
*** ChiTo has quit IRC06:55
*** pto has joined #openstack-ansible07:13
*** prometheanfire has quit IRC07:14
*** prometheanfire has joined #openstack-ansible07:29
*** macz_ has joined #openstack-ansible07:46
*** macz_ has quit IRC07:50
*** rpittau|afk is now known as rpittau08:01
*** maharg101 has joined #openstack-ansible08:12
*** andrewbonney has joined #openstack-ansible08:23
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: defaults: start kuryr service before docker  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76947408:59
*** CeeMac has joined #openstack-ansible09:01
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: defaults: start kuryr service before docker  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76947409:11
*** pto_ has joined #openstack-ansible09:27
*** pto has quit IRC09:31
*** macz_ has joined #openstack-ansible09:47
*** macz_ has quit IRC09:52
*** rfolco has joined #openstack-ansible10:43
openstackgerritDmitriy Rabotyagov proposed openstack/ansible-role-systemd_service master: Add possibility to configure systemd sockets  https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/76319410:53
openstackgerritDmitriy Rabotyagov proposed openstack/ansible-role-systemd_service master: Add option to create systemd native service overrides  https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/76581510:53
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use systemd sockets for libvirt  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/76321611:09
*** masterpe has quit IRC11:20
*** csmart has quit IRC11:20
*** fridtjof[m] has quit IRC11:20
*** ioni has quit IRC11:21
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use systemd sockets for libvirt  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/76321611:26
*** fridtjof[m] has joined #openstack-ansible11:31
openstackgerritMerged openstack/openstack-ansible stable/victoria: Bump ansible version to 2.10.4  https://review.opendev.org/c/openstack/openstack-ansible/+/76918311:42
*** masterpe has joined #openstack-ansible11:58
*** ioni has joined #openstack-ansible11:58
*** csmart has joined #openstack-ansible11:59
admin0how do I specify external ceph to osa  ?12:14
admin0found it :) ceph_extra_confs  hope its correct12:15
*** tosky has joined #openstack-ansible12:15
kleiniadmin0: https://docs.openstack.org/openstack-ansible-ceph_client/latest/config-from-file.html12:18
kleiniwith OSA 21.2.0 it still requires to have a list of ceph_mons defined otherwise the ceph_client roles do not run. I think, this is fixed with 21.2.1, but I did not try it yet12:19
admin0kleini, thanks12:20
admin0kleini, in osa, it uses cinder for both nova and cinder pools12:24
admin0how do i specify a diff username for nova ?12:24
admin0i want to test erasure codes .. https://themeanti.me/technology/2018/08/23/ceph_erasure_openstack.html  and i cannot use 2 default pools for the same user12:25
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use systemd sockets for libvirt  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/76321612:30
kleiniI know about two different possible storages for VMs in Nova: persistent aka volumes and ephemeral storage. As volumes are managed by Cinder in Ceph and VMs or libvirt or qemu need to be able to access these volumes, the same credentials are necessary for Nova12:31
kleiniA different user for Nova is maybe possible, as credentials on compute need to be stored in ceph.conf and as secret in libvirt. I don't know, whether OSA supports this.12:35
noonedeadpunkthe problem here is that we have `nova_ceph_client`. but this user is also used to attach cinder volumes to kvm instances, so even if it's different from cinder user, I think it should have same permissions12:35
kleiniJust found an option nova_ceph_client defaulting to cinder_ceph_client: https://docs.openstack.org/openstack-ansible-os_nova/ussuri/12:35
admin0nova_ceph_client: '{{ cinder_ceph_client }}'12:35
admin0got it12:35
admin0so i can just overwrite this variable12:36
kleiniyes, a different user at least requires the same permissions on the volumes pool12:36
noonedeadpunkwhich kind of makes no sense in creating extra user?12:36
kleiniand take care, that you then need a third client keyring configuration12:36
kleinimaybe if you want to monitor from Ceph side, which clients are connected to Ceph?12:37
noonedeadpunkbtw it's used heavily here https://opendev.org/openstack/openstack-ansible-ceph_client/src/branch/master/tasks/ceph_auth.yml12:37
*** yann-kaelig has joined #openstack-ansible12:43
admin0as per the blog and documentation, i can only have 1 default pool per username13:02
admin0so i need to separate nova and cinder as user separately13:02
openstackgerritMerged openstack/openstack-ansible stable/ussuri: Bump SHAs for stable/ussuri  https://review.opendev.org/c/openstack/openstack-ansible/+/76858113:28
ThiagoCMCadmin0, don't forget a complete blog post about how to configure OSA13:53
*** pto_ has quit IRC13:53
ThiagoCMC...with Ceph and EC pools!  =P13:54
*** pto has joined #openstack-ansible13:54
ThiagoCMCUsing the config-from-file instructions!  =P13:54
admin0yes  ..let me make it work first :)13:55
*** rh-jelabarre has joined #openstack-ansible14:00
*** pto has quit IRC14:00
*** pto has joined #openstack-ansible14:01
*** spatel has joined #openstack-ansible14:08
*** dave-mccowan has joined #openstack-ansible14:10
ThiagoCMCAwesome!  lol14:17
ThiagoCMCI'm planning to build an Heat Template (or Terraform) to deploy OSA on top of an OpenStack Cloud, as a lab... But I'm lazy these days...  :-P14:18
ThiagoCMCI don't have any spare machines to use as a lab for OSA+Ceph, has to be 100% virtual in my case.14:19
admin0u can test EC virtually also :)14:19
ThiagoCMCSure14:19
ThiagoCMCThat's the idea   ^_^14:19
*** pto has quit IRC14:23
spateladmin0: did you resolved your issue?14:47
admin0which ones :)14:47
admin0the neutron one .. yes14:47
admin0so what happened was .. i had another user_variables_ovn.yml in the same folder but with a custom neutron path .. and my thought was that it only reads user_variables.yml .. but as soon as i moved out the _ovn from the folder, that neutron issue was gone14:49
admin0so i have a working victoria14:49
admin0the only thing i had to do there was cherry pick your hatop patch14:49
ThiagoCMCHave you also tested the upgrade procedure? It failed for me with that "git --force" option that doesn't exists anymore.14:50
admin0first i have to see if that rc1 works fine .. when all works fine, then i will check the upgrade14:50
admin0but i wanted to try ovn with victoria14:50
ThiagoCMCOVN worked?14:51
noonedeadpunkthis patch is needed https://review.opendev.org/c/openstack/openstack-ansible/+/76872914:51
spatelHatop will be part of next RC2 release i believe14:51
noonedeadpunkjrosser: andrewbonney can we merge and backport it?14:51
spatelOVN... oh boy!14:51
ThiagoCMCnoonedeadpunk, okdok14:51
andrewbonneynoonedeadpunk: I'll take a look shortly14:52
jrossernoonedeadpunk: done, lgtm15:17
jrossercan you take a look at this https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/76880815:17
jrosseri'm not back at work till next week but want to take a look at the new pip resolver stuff asap15:17
noonedeadpunksure, lgtm15:20
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: Add support for kata container runtime  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76955515:26
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use systemd sockets for libvirt  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/76955615:31
*** spotz has quit IRC15:44
*** macz_ has joined #openstack-ansible16:10
*** macz_ has quit IRC16:10
*** macz_ has joined #openstack-ansible16:11
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use systemd sockets for libvirt  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/76955616:13
kleiniI have an Ansible based deployment for VMs and networking, where I deploy my OSA setup for staging, if anybody is interested.16:25
mgariepykleini, sure.16:26
kleiniwould be an archive okay? I don't think, I can make it public16:34
kleiniI need to remove files like the SSH deploy key16:40
mgariepyif it contains ssh keys and password maybe you are better not to share it ;)16:43
admin0how are people using central logging ?16:45
admin0using the new journald ?16:45
*** jamesden_ is now known as jamesdenton16:46
*** gyee has joined #openstack-ansible16:50
openstackgerritMerged openstack/ansible-role-python_venv_build master: Fix tests for Centos8 EPEL repo paths  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/76880817:06
ThiagoCMCkleini, share it on github! I wanna do something similar using Heat or Terraform...   ;-)17:06
openstackgerritJonathan Rosser proposed openstack/ansible-role-python_venv_build stable/victoria: Fix tests for Centos8 EPEL repo paths  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/76958517:08
openstackgerritJonathan Rosser proposed openstack/ansible-role-python_venv_build stable/ussuri: Fix tests for Centos8 EPEL repo paths  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/76958617:08
openstackgerritJonathan Rosser proposed openstack/ansible-role-python_venv_build master: Remove support for lxc2 config keys  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/75624717:10
openstackgerritJonathan Rosser proposed openstack/ansible-role-python_venv_build master: Updated from OpenStack Ansible Tests  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/75419317:10
openstackgerritJonathan Rosser proposed openstack/ansible-role-python_venv_build master: Add Victoria release info  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/76868917:11
spateladmin0: i think graylog has agent which collect logs to push out to centralize server17:27
spatellook into openstack-ansible-ops playbook17:28
*** miloa has quit IRC17:32
admin0i did run it, but the agent fails17:33
admin0so searching for anyone for whom its working17:33
*** rpittau is now known as rpittau|afk17:43
openstackgerritMerged openstack/openstack-ansible master: Set force option to false by default  https://review.opendev.org/c/openstack/openstack-ansible/+/76872917:50
*** nsmeds has joined #openstack-ansible18:14
openstackgerritJonathan Rosser proposed openstack/openstack-ansible stable/victoria: Set force option to false by default  https://review.opendev.org/c/openstack/openstack-ansible/+/76958818:52
*** andrewbonney has quit IRC18:56
*** avagi has left #openstack-ansible19:05
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/victoria: Add no_log to LDAP domain config  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/76918519:07
spateldoes neutron has option to reserved chunk of ips and not allocate to anyone.19:13
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use systemd sockets for libvirt  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/76955619:18
noonedeadpunkyou can for sure adjust dhcp range for example. and I guess you can leverage subnet pools as well19:23
openstackgerritMerged openstack/openstack-ansible-os_zun master: defaults: start kuryr service before docker  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76947419:28
spatelnoonedeadpunk: can i adjust DHCP pool range on live network?19:39
spatellets say 192.168.1.10-192.168.1.100  what i have currently but i can change it to 192.168.1.10-192.168.1.256 anytime tight?19:40
mgariepy254 not 256. ;)19:51
spatel:)20:03
spatelmgariepy: typo,  but that is possible to expand range without interruption20:04
mgariepymaybe , i guess you might need to test it. ;)20:04
spatelI have /23 public pool and want to just handover /24 to openstack so it won't dirty my whole pool. laster if customer ask then i will expand as per request20:04
spatellater*20:05
spatelI used this command   openstack subnet set --allocation-pool start=192.168.1.200,end=192.168.1.254 365bca22-ef09-4296-89bd-94bd8927121d20:14
spatellook like it did expand and now show output showing | allocation_pools     | 192.168.2.1-192.168.2.254,192.168.1.200-192.168.1.254 |20:15
spatelit appended in back of subnet20:15
spatellet me try to spin up some VM to see if its getting IP from new subnet or not20:16
spatelTotally works20:30
*** yann-kaelig has quit IRC20:33
*** yann-kaelig has joined #openstack-ansible21:15
*** yann-kaelig has quit IRC22:10
*** spatel has quit IRC22:40
*** maharg101 has quit IRC22:48
*** rfolco has quit IRC22:50
*** rh-jelabarre has quit IRC23:21
*** tosky has quit IRC23:51

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!