| noonedeadpunk | mornings | 08:24 |
|---|---|---|
| jrosser | good morning | 09:09 |
| jrosser | noonedeadpunk: seems we will really struggle for code review for a couple of weeks | 09:27 |
| noonedeadpunk | yeah and damiandabrowski is now on vacation as well... | 09:28 |
| noonedeadpunk | I will ping EST based folks in the evening | 09:28 |
| jrosser | i was also wondering why i can't set the topic on this https://review.opendev.org/c/openstack/ansible-role-pki/+/875757 | 09:29 |
| noonedeadpunk | I can... | 09:33 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Update ironic documentation https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/867547 | 09:48 |
| noonedeadpunk | jrosser: is that ready or still WIP ^ ? | 10:17 |
| jrosser | theres one outstanding comment which i can't address until weds when other-Jonathan is working | 10:18 |
| jrosser | are we completely blocked by https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/876436 ? | 10:31 |
| noonedeadpunk | yup, we are | 10:33 |
| opendevreview | Jonathan Rosser proposed openstack/ansible-role-pki master: Allow to provide custom handler names https://review.opendev.org/c/openstack/ansible-role-pki/+/875757 | 11:46 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Allow default_backend to be specified https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/876157 | 11:57 |
| jrosser | do we still need this at all? it looks like the changes to the haproxy role make it deal with old and new formats https://review.opendev.org/c/openstack/openstack-ansible/+/872328/4 | 12:03 |
| noonedeadpunk | not sure to be frank | 12:25 |
| noonedeadpunk | What I was thinkning about what made these not mappings but just strings.... https://opendev.org/openstack/openstack-ansible-plugins/src/branch/master/roles/service_setup/tasks/main.yml#L21-L50 | 12:30 |
| noonedeadpunk | s/what/when | 12:33 |
| Elnaz | Hi | 12:34 |
| Elnaz | https://opendev.org/openstack/openstack-ansible-ops/src/branch/master/elk_metrics_7x | 12:34 |
| noonedeadpunk | Also `is defined` is awful condition :( | 12:35 |
| * noonedeadpunk trying to reuse role for spawning users/projects/roles in an automated manner | 12:35 | |
| Elnaz | Kibana names, `infra0X`, that are used in /etc/openstack_deploy/conf.d/elk.yml, have conflict with controller's names. | 12:39 |
| noonedeadpunk | Elnaz: Um, sorry, not really understanding that | 12:40 |
| noonedeadpunk | You can name nodes in conf.d as you want - it's not constrained in any way | 12:41 |
| jrosser | Elnaz: what that is saying is that you can use the infra nodes *if you want to*, to host parts of the ELK stack | 12:51 |
| jrosser | but it is entirely up to you if you do that, or make it on different hosts | 12:51 |
| jrosser | i think that for this you need to 1) come up with the design you want 2) then use the playbooks to deploy that | 12:51 |
| jrosser | you won't get anything really more than a proof of concept architecture from the host layout in the ops repo | 12:52 |
| Elnaz | I used infras, but it gave an error. Now I will do a test again, maybe I was not careful. | 12:56 |
| Elnaz | jrosser: What do you mean by "no more than a proof of concept"? Isn't it recommended for Production? | 12:58 |
| jrosser | Elnaz: i have a pretty large deployment of ELK using that repo, so yes it's fine | 12:58 |
| jrosser | but in general, you will need to have pretty good understanding of the ELK stack and how the openstack-ansible inventory works to make good use of it | 12:59 |
| jrosser | but if you get errors, paste them here if it is helpful | 12:59 |
| jrosser | for example, 3 ELK data nodes that also do all the other ELK node roles co-located on your controller might not be "recommended for production" | 13:00 |
| jrosser | that doesnt mean that the code isn't OK - you need to have a good architecture for how you're going to build it "for production" | 13:01 |
| jrosser | for a test lab to see how it works the suggestion to use infra0X is fine | 13:01 |
| mgariepy | huh.. https://social.treehouse.systems/@psykose/109967460650885493 | 13:13 |
| noonedeadpunk | I wonder why in the world you would do such comments... | 13:14 |
| noonedeadpunk | BUt yeah, I see frustration why sudoers don't work as expected :D | 13:14 |
| mgariepy | lol. | 13:14 |
| noonedeadpunk | (while debugging this extra space) | 13:15 |
| mgariepy | it's just bad decision in the design i guess ;) | 13:15 |
| noonedeadpunk | But still granting based on uids.... huh | 13:15 |
| mgariepy | yep. | 13:15 |
| mgariepy | what type of farm were you thinking of ? | 13:16 |
| noonedeadpunk | hehe | 13:16 |
| mgariepy | lol | 13:16 |
| noonedeadpunk | Defenitely not in Croatia - there's a shortage of farming land, too warm and not enough rains or water | 13:16 |
| noonedeadpunk | So it's really tricky to have farm here unless you want to open a winery :D | 13:17 |
| noonedeadpunk | And farm grapes | 13:17 |
| noonedeadpunk | Or olives | 13:17 |
| noonedeadpunk | mgariepy: do you have couple of mins for reviews? we need to land rabbit bumps https://review.opendev.org/q/project:openstack/openstack-ansible-rabbitmq_server+status:open | 13:18 |
| noonedeadpunk | at very least :) | 13:18 |
| mgariepy | yep | 13:18 |
| opendevreview | Sebastian Gumprich proposed openstack/openstack-ansible-galera_server master: fix indentation for condition https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/876276 | 13:23 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Prepare main repo for separated haproxy config https://review.opendev.org/c/openstack/openstack-ansible/+/871189 | 13:32 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Prepare haproxy role for separated haproxy config https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/875779 | 13:51 |
| jrosser | what am i doing wrong here with the zuul error https://review.opendev.org/c/openstack/openstack-ansible/+/871189/23 | 15:04 |
| opendevreview | Merged openstack/openstack-ansible-rabbitmq_server stable/yoga: Update rabbitmq to 3.10.7 https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/876398 | 15:05 |
| opendevreview | Merged openstack/openstack-ansible-rabbitmq_server master: Update erlang to 25.2.3 and rabbit to 3.11.10 https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/876436 | 15:05 |
| opendevreview | Merged openstack/openstack-ansible-rabbitmq_server stable/xena: Update rabbitmq to 3.9.28 https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/875782 | 15:05 |
| mgariepy | doesn't it needs to have the depends merged first ? | 15:07 |
| noonedeadpunk | jrosser: have no idea.... | 15:12 |
| noonedeadpunk | Like it seems zuul under impression that https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/871188/13 is in merge conflict, but it's not... | 15:12 |
| jrosser | mgariepy: it should at least run the tests i figure | 15:13 |
| jrosser | maybe more of this cross-the-queues thing i wonder | 15:13 |
| noonedeadpunk | and it does depends on that one as well... | 15:13 |
| noonedeadpunk | Nah, I don't think it's related to queues | 15:13 |
| jrosser | it would be nice if it dumped some kind of graph to show where it thought the error was | 15:13 |
| noonedeadpunk | jrosser: wait a second | 15:14 |
| noonedeadpunk | ah damn, I 've copypasted wrong id | 15:15 |
| jrosser | i feel like i have done something stupid here but i cant see it | 15:15 |
| noonedeadpunk | I'm not sure you did... Or well, I don't see anything either | 15:28 |
| noonedeadpunk | And it used to work nicely... | 15:28 |
| noonedeadpunk | Maybe some depends-on somewhere else on conflicting patch... | 15:28 |
| jrosser | maybe i make some noop update to the conflicting one and it might flush it out | 15:47 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Simplify haproxy_service_configs structure https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/871188 | 15:48 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Prepare haproxy role for separated haproxy config https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/875779 | 15:49 |
| jrosser | oh well it's probably this isnt it https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/876157 | 15:52 |
| jrosser | thats also touching templates/service.j2 which is totally rewritten in the other patch | 15:53 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Simplify haproxy_service_configs structure https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/871188 | 16:02 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Prepare haproxy role for separated haproxy config https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/875779 | 16:02 |
| spatel | is freezer openstack still active project? | 16:55 |
| noonedeadpunk | I won't call it active.... | 17:01 |
| noonedeadpunk | But it still meets all criterias and does releases... | 17:02 |
| prometheanfire | jamesdenton: when setting up the LB with OVN, do you know how I can look up where it should be sending arps from? (I guess this is what host the neutron port lives on) | 17:37 |
| jamesdenton | it might depend on what network the VIP comes from | 17:48 |
| jamesdenton | but TBH I am not sure | 17:49 |
| jamesdenton | i bet #openstack-neutron could help | 17:49 |
| prometheanfire | ack | 17:51 |
| jamesdenton | too much context switching at the moment :| | 17:52 |
| jrosser | you could also post to the ML with [neutron] | 17:53 |
| Elnaz | jrosser: > 3 ELK data nodes that also do all the other ELK node roles co-located on your controller might not be "recommended..." | 18:19 |
| Elnaz | At present I'm useing 3 separate logging servers and 3 seperate Kibana servers that is default setting in /nv.d/elk.conf | 18:19 |
| jrosser | Elnaz: you mean that there a 3 physical servers for elasticsearch and 3 physical servers for kibana, or you make 3 LXC containers for each on the infra0X nodes? | 18:21 |
| jrosser | Elnaz: is there something specific you're trying to find out here? | 18:22 |
| Elnaz | 3 VMs for elastic and 3 VMs for Kibana; nothing is added to Physical infra servers | 18:22 |
| jrosser | right, but you host 3 extra LXC containers for elasticsearch and kibana on the infra nodes | 18:23 |
| jrosser | that might be OK :) trouble is you need to know what you want to achieve | 18:23 |
| Elnaz | No, I just need to have an ELK stack; (I know there are other solutions as in elk-ansible or docker solution) | 18:24 |
| jrosser | Elnaz: sorry i keep trying to answer but now i'm really not sure what the question is | 18:26 |
| Elnaz | Which of the various elk deploy solutions leads to a better result in terms of simpler maintenance and greater integration? | 18:27 |
| jrosser | i have no idea i'm sorry - i use and have contributed to the one in the openstack-ansible-ops repo.... pretty much means i've not used the others | 18:28 |
| Elnaz | And if the OSA tool itself does proper deployment, what is the default (the structure I mentioned above) is enough to start? I will continue to read about ELK to achieve to an enhanced arch | 18:29 |
| Elnaz | I see, thanks. | 18:29 |
| jrosser | you can easily do a lab deployment with the instructions in the openstack-ansible-ops repo | 18:29 |
| jrosser | but if you want to scale up your elk stack data nodes to get sufficient throughput for a large cloud or something, then that is a different matter | 18:30 |
| jrosser | but the same playbooks can do either | 18:30 |
| Elnaz | I'll consider your tip. The deployment on lab is in progress (: | 18:31 |
| jrosser | ok, then just follow the ops repo | 18:31 |
| jrosser | exactly the same would be true for Ceph for example | 18:31 |
| jrosser | lab or small cloud use the ceph deployment that is integrated in openstack-ansible | 18:32 |
| jrosser | but if you want to scale up or separate the concerns / failure domain then you'll need to customise | 18:32 |
| jrosser | Openstack-Ansible is a toolkit that lets you build whatever you like, it is not expected that the default deployment will cover all use cases | 18:32 |
| Elnaz | You definitely head up not to deploy Ceph for production (in case of even a small cloud) | 18:34 |
| Elnaz | https://docs.openstack.org/openstack-ansible/zed/user/ceph/full-deploy.html: "Warning! Deploying ceph cluster as part of openstack-ansible is not recommended since" | 18:34 |
| Elnaz | I understand. I need to get to know him more. | 18:36 |
| Elnaz | but, why the OSA installs ClamAV antivirus on nodes: `TASK [ansible-hardening : Check if ClamAV update process is already running]`? As I know, Linux does not need to any antivirus at all? | 18:37 |
| Elnaz | (https://help.ubuntu.com/stable/ubuntu-help/net-antivirus.html.en) | 18:38 |
| jrosser | Elnaz: are you sure it installs it? | 18:41 |
| Elnaz | `TASK [ansible-hardening : Check if ClamAV is installed]`, If it's installed! meaningful. | 18:48 |
| mgariepy | Elnaz, https://github.com/openstack/ansible-hardening/blob/master/defaults/main.yml#L249-L250 | 18:52 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Deploy step-ca when 'stepca' is part of the deployment scenario. https://review.opendev.org/c/openstack/openstack-ansible/+/876637 | 20:46 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Add a /etc/hosts entry for the external IP of an AIO https://review.opendev.org/c/openstack/openstack-ansible/+/876638 | 20:46 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Use certbot to generate SSL cert for the external VIP in 'stepca' scenario https://review.opendev.org/c/openstack/openstack-ansible/+/876639 | 20:46 |
| Elnaz | mgariepy: | 21:41 |
| Elnaz | Thanks | 21:41 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Deploy step-ca when 'stepca' is part of the deployment scenario. https://review.opendev.org/c/openstack/openstack-ansible/+/876637 | 21:57 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Add a /etc/hosts entry for the external IP of an AIO https://review.opendev.org/c/openstack/openstack-ansible/+/876638 | 21:57 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Use certbot to generate SSL cert for the external VIP in 'stepca' scenario https://review.opendev.org/c/openstack/openstack-ansible/+/876639 | 21:58 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!