| opendevreview | ws proposed openstack/openstack-ansible-os_keystone master: Add vars file for Rocky Linux distribution https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/812768 | 02:31 |
|---|---|---|
| opendevreview | ws proposed openstack/openstack-ansible master: Add support for Rocky Linux distro to some playbooks and scripts https://review.opendev.org/c/openstack/openstack-ansible/+/812770 | 03:22 |
| opendevreview | Merged openstack/openstack-ansible-galera_server master: Use ansible-role-pki to generate SSL certificates https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/807717 | 11:58 |
| *** raukadah is now known as chandankumar | 12:28 | |
| opendevreview | Merged openstack/openstack-ansible-os_mistral master: Refactor galera_use_ssl behaviour https://review.opendev.org/c/openstack/openstack-ansible-os_mistral/+/810234 | 13:01 |
| jamesdenton | is the auth_url available as an ansible variable? | 13:28 |
| noonedeadpunk | keystone_service_(admin|internal|public)url | 13:29 |
| jamesdenton | perfect, thank you | 13:30 |
| noonedeadpunk | https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/all/keystone.yml | 13:30 |
| jamesdenton | thanks, i was lazy :( | 13:35 |
| opendevreview | James Denton proposed openstack/openstack-ansible master: Implements framework for ironic_neutron_agent and Neutron 'baremetal' plugin https://review.opendev.org/c/openstack/openstack-ansible/+/813006 | 13:40 |
| mgariepy | jamesdenton, are you using ironic ? | 13:42 |
| jamesdenton | yes | 13:42 |
| mgariepy | for clients ? | 13:42 |
| jamesdenton | yes, but fairly basic | 13:42 |
| jamesdenton | i use networking_generic_switch plugin in the lab | 13:42 |
| jamesdenton | w/ ironic. | 13:43 |
| mgariepy | is there a way to block bmc or firmware/bios upgrade on the hosts? | 13:43 |
| mgariepy | i guess you need to manage the switches via ironic if you want to make sure that the client don't mess with the network and stuff ? | 13:45 |
| jamesdenton | hmm, well, users don't necessarily have access to OOB (ipmi) network of the hosts, so no iLo/Drac/etc. Only the ironic conductor would have access to that AFAIK. The alternative to using a switch plugin would be to just put all of the baremetal instances on a flat network | 13:47 |
| jamesdenton | and without credentials, i don't think users can manage the BMC from within the host | 13:47 |
| mgariepy | aren't the users root on the box ? | 13:49 |
| mgariepy | with ipmitool you can set whatever your want | 13:50 |
| jamesdenton | would you not need the actual ipmi credentials, too? | 13:51 |
| mgariepy | i guess it's ok if your users can be thrusted but not really ok for public cloud. | 13:51 |
| mgariepy | no. | 13:51 |
| jamesdenton | i admit, i have not verified this | 13:51 |
| jamesdenton | well, i know RAX has baremetal nodes in public cloud, so there must be a way | 13:51 |
| jamesdenton | not sure if the decom process has some kind of restore., though | 13:52 |
| opendevreview | James Denton proposed openstack/openstack-ansible-os_neutron master: Implements ironic_neutron_agent and baremetal ML2 driver https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/813011 | 13:54 |
| mgariepy | ok | 13:55 |
| mgariepy | thanks | 13:55 |
| spatel | keepalived question, i am seeing only MASTER generating VRRP multi-cast traffic not BACKUP is that correct? | 13:55 |
| spatel | I thought VRRP multicast traffic should be generated by both node MASTER and BACKUP | 13:56 |
| jamesdenton | mgariepy i will kick one now and verify | 13:57 |
| mgariepy | `ipmitool lan print` | 13:59 |
| jamesdenton | spatel only the master AFAIK | 13:59 |
| spatel | hmm! really, how does master know Backup is available? | 13:59 |
| jamesdenton | it doesn't care | 13:59 |
| jamesdenton | https://datatracker.ietf.org/doc/html/rfc3768#section-6.4.2 | 14:01 |
| spatel | Interesting... | 14:02 |
| spatel | Thank you!! jamesdenton | 14:04 |
| spatel | my problem is floating IP generating VRRP traffic even i configured net.ipv4.ip_nonlocal_bind=1 | 14:07 |
| jamesdenton | is this an active/active type situation? | 14:10 |
| spatel | yes, but after rebooting both node looks good now VRR originating from local interface | 14:18 |
| jamesdenton | good deal | 14:19 |
| spatel | jamesdenton something is odd, after reboot again it started using VIP address to send VRRP | 15:19 |
| spatel | jamesdenton can you see anything wrong here - https://paste.opendev.org/show/809844/ | 15:20 |
| opendevreview | Marc Gariépy proposed openstack/openstack-ansible stable/stein: fix double-double-quotes https://review.opendev.org/c/openstack/openstack-ansible/+/813044 | 15:25 |
| mgariepy | not sure it worth fixing it.. but.. lol "" is not good there haha | 15:25 |
| noonedeadpunk | I hope we don't have that on master :) | 15:34 |
| mgariepy | nop | 15:36 |
| mgariepy | it was fixed | 15:37 |
| jamesdenton | spatel strange. maybe try configuring the virtual address as a /32 - "10.0.0.3/32" | 15:47 |
| spatel | jamesdenton i tried that also but same issue, its using VIP address for VRRP :( | 16:17 |
| spatel | jamesdenton i think i found my problem.. its my SNAT rule in iptables | 16:41 |
| jamesdenton | really. | 17:00 |
| spatel | still trying to understand... | 17:22 |
| spatel | i have noticed as soon as i put this rules it will start using VIP address for VRRP | 17:22 |
| spatel | iptables -A FORWARD -i ens4 -m state --state ESTABLISHED,RELATED -j ACCEPT | 17:22 |
| spatel | not sure why and what is the connection with FORWARD rules with VIP | 17:22 |
| spatel | jamesdenton everything working now :) | 18:26 |
| spatel | i am able to sync iptables conntrack table and not a single connection drop during failover | 18:26 |
| spatel | so connection mirroring working.. tonight i will blog that piece out | 18:27 |
| jamesdenton | yes, please do@ | 18:49 |
| spatel | sure | 18:58 |
| opendevreview | James Denton proposed openstack/openstack-ansible-os_neutron master: Implements ironic_neutron_agent and baremetal ML2 driver https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/813011 | 19:02 |
| opendevreview | James Denton proposed openstack/openstack-ansible-os_neutron master: Implements ironic_neutron_agent and baremetal ML2 driver https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/813011 | 19:09 |
| opendevreview | James Denton proposed openstack/openstack-ansible-os_neutron master: Implements ironic_neutron_agent and baremetal ML2 driver https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/813011 | 20:45 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!