Thursday, 2022-11-03

*** ysandeep|out is now known as ysandeep05:53
*** ysandeep is now known as ysandeep|afk10:53
*** dviroel|holiday is now known as dviroel|rover11:19
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Remove mariadb-connector-c during upgrades  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/86351512:00
*** ysandeep|afk is now known as ysandeep12:22
*** ysandeep is now known as ysandeep|out13:44
opendevreviewMarc Gariépy proposed openstack/openstack-ansible-os_neutron master: [WIP] add ovn ssl config  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/86240314:19
jrosserjamesdenton: os_ironic doesnt do anything for uploading deploy ramdisk images to glance (https://docs.openstack.org/ironic/latest/install/configure-glance-images.html) - do you think we should do that?14:28
mgariepyjrosser, can i do "and / or" in condition for pki install certs?14:28
mgariepylike:  condition: "{{ neutron_ovn_ssl }}" and  "{{ neutron_needs_openvswitch }}"14:28
jrosserjamesdenton: these are the same ones staged into the ironic-inspector here i think https://github.com/openstack/openstack-ansible-os_ironic/blob/master/defaults/main.yml#L443-L44614:28
jrossermgariepy: you have have anything that evaulates with | bool i think14:29
jrosserbut do watch out for all defined strings being True when you do things like that14:29
mgariepyok i'll test it out then. 14:30
mgariepyfor ovn ssl ovn run as root neutron run as neutron and i need to cert to be copied for both user..14:30
jrosserhuh interesting14:31
jrosserthats unfortunate14:31
jamesdentonjrosser yes, we ought to consider deploying those, i think14:31
mgariepyyep14:31
jrossermgariepy: if you really mean the cert then thats not secret, so permissions might be helpful there14:31
mgariepythey need the key as well.14:32
jrosserjamesdenton: i was also quite surprised to see that it wants the glance UUID when you enrol the node14:32
jrosserwhich points to a release specific deploy image14:32
jrosserand then you do an upgrade......14:32
jrossernow what?!14:32
mgariepyso meh i'll copy for both since it would cover both metal and container.14:33
jamesdentonyeah, the IPA in the ramdisk image does have some backwards compatibility, but if you stray too far deploys will fail14:33
jamesdentonas you do openstack upgrades you have to be mindful to update the baremetal node properties, too, to update the ramdisk and kernel UUIDs.14:35
jamesdentonnot a well documented step, i think14:35
*** dviroel|rover is now known as dviroel|afk15:50
*** dviroel|afk is now known as dviroel|rover16:56
mgariepyfun. neutron venv is deployed for not much good reason on ovn_northd container 17:01
noonedeadpunkmmm... sounds like common logic issue... as when we started ovs service when it was not needed17:28
noonedeadpunkBut I thought that we install neutron venv only on api...17:28
noonedeadpunkhm... we don't have any conditions there... https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/tasks/neutron_install.yml#L8917:30
noonedeadpunkmgariepy: do we have any neutron service running in there?17:30
mgariepynot on northd container17:30
mgariepyit needs to be there on the compute tho17:31
noonedeadpunkMaybe we can add `- (filtered_neutron_services + uwsgi_neutron_services) | length > 0`?17:31
mgariepyyep i guess we could.17:32
noonedeadpunkbut what out of neutron we need on computes? ovs agent?17:32
mgariepyhttps://github.com/openstack/openstack-ansible-os_neutron/blob/master/vars/main.yml#L53917:33
mgariepyovn_meta17:33
noonedeadpunkSo computes are part of neutron_ovn_controller group?17:34
mgariepyyes17:34
noonedeadpunkoh, ok...17:34
noonedeadpunkjust controller group does not associate with computes in my head :D17:35
mgariepyyeah..17:35
mgariepywell.17:35
mgariepyon ubuntu the pkg is called ovn-hosts )17:35
opendevreviewMarc Gariépy proposed openstack/openstack-ansible-os_neutron master: Do not install neutron venv if not needed.  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/86354617:39
mgariepy can only concatenate list (not "dict") to list LOL17:47
opendevreviewMarc Gariépy proposed openstack/openstack-ansible-os_neutron master: Do not install neutron venv if not needed.  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/86354617:50
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Refactor ironic deploy image handling.  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/86354918:12
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Refactor ironic deploy image handling.  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/86354918:16
opendevreviewMarc Gariépy proposed openstack/openstack-ansible-os_neutron master: [WIP] add ovn ssl config  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/86240319:47
opendevreviewJames Denton proposed openstack/openstack-ansible master: Update container_networks address for is_metal containers  https://review.opendev.org/c/openstack/openstack-ansible/+/86355419:48
*** arxcruz|ruck is now known as arxcruz20:05
opendevreviewMarc Gariépy proposed openstack/openstack-ansible-os_neutron master: Do not install neutron venv if not needed.  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/86354620:14
spatelkeepalived keep throwing error - (external) received an invalid passwd! 20:39
spatelis it safe to ignore it? 20:39
opendevreviewJames Denton proposed openstack/openstack-ansible master: Update container_networks address for is_metal containers  https://review.opendev.org/c/openstack/openstack-ansible/+/86355421:40
*** dviroel|rover is now known as dviroel|afk22:29

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!