Friday, 2023-07-28

opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins master: Add openstack_resources role skeleton  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/87879406:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Adopt for usage openstack_resources role  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/88987906:26
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Install distro_packages in pre-main  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88993409:30
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Generate and distribute fernet keys from the last host  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88993609:36
noonedeadpunkfolks - only one of these 2 patches should be merged09:37
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Install distro_packages in pre-main  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88993409:38
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Generate and distribute fernet keys from the last host  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88993609:39
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Install distro_packages in pre-main  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88993409:39
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Install distro_packages in pre-main  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88993409:40
noonedeadpunkjrosser: unless you have already somehow sorted out ssh/rsync in a way I don't see? As looks like we test that in CI....09:43
jrossernoonedeadpunk: hi....09:44
noonedeadpunkI know you're off today....09:44
noonedeadpunkdidn't intend to summon now09:44
jrosseri think this is already fixed somehow (needing rsync up-front)09:45
jrosserfwiw we test this already as one of the CI scenarios has 3x keystones specially for this09:45
jrosseras i believe it came up already in the past as an issue09:45
noonedeadpunkyeah....09:45
noonedeadpunkit's relatively fresh fix though...09:46
noonedeadpunkthough I don't really see how we isntall ssh/rsync themselves09:46
noonedeadpunkLike I see https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/843739/3/tasks/main_pre.yml but it doesn't care installing packages?09:47
noonedeadpunkand what I hit was that sshd/rsync are simply missing... though it was on X09:48
* noonedeadpunk will try now in a sandbox09:48
jrossermaybe it is in openstack_hosts or somewhere less obvious09:50
noonedeadpunkI hope we don't install rsync in openstack_hosts.....10:23
anskiyhey! `log_hosts` group, which was removed here: https://opendev.org/openstack/openstack-ansible/commit/bc5428b21dda44ec9cb27528eeebaa4cd9cf895b is still in use by https://opendev.org/openstack/openstack-ansible-plugins/src/branch/master/roles/journald_remote/defaults/main.yml#L25 journald_remote role. I'm unsure on to what exactly this should be changed in case of a proper fix10:25
noonedeadpunkanskiy: actually, if you add `log_hosts: aio1: ip: *.*.*.*` to openstack_user_config.yml - they will still be added to inventory and journald_remote will work10:28
noonedeadpunkbut maybe worth adding `journald_remote_group` as a variable10:29
anskiynoonedeadpunk: it looks like doing so results in semi-broken inventory generated10:33
anskiylike this one: https://paste.opendev.org/show/b9Ux1GpvCYY0UU6ghTJ6/10:34
noonedeadpunkanskiy: well, I never tried to specify _only_ them....10:38
noonedeadpunkor on metal deployment....10:38
noonedeadpunkanother thing you can do - use /etc/openstack_deploy/inventory.ini and define log_hosts group there as a static one10:39
noonedeadpunkas this is anyway not smth really managed with osa without rsyslog roles, it's basically just to define where to ship things 10:40
anskiyfor now, I'm going to just remove `log_hosts` from `openstack_user_config` and add `journald_remote_targets` to `user_variables`, I think that this should work. 10:41
noonedeadpunkyeah, that will work as well:)10:42
anskiyand with this change that `osa` host is now out completely of generated inventory, which is fine, I guess10:42
noonedeadpunkjrosser: https://opendev.org/openstack/openstack-ansible-lxc_hosts/src/branch/master/vars/debian.yml#L51 /o\10:49
opendevreviewMerged openstack/openstack-ansible-os_neutron master: Configure OVN NB and SB DB Connection probes  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/88719210:54
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron stable/2023.1: Configure OVN NB and SB DB Connection probes  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/88981110:55
noonedeadpunkarxcruz: Hey! We've prepared a change for the tempest role, that would require usage of a openstack_resources role, that's part of openstack-ansible-plugins: https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/88974110:59
noonedeadpunkarxcruz: this will be quite breaking for tripleo unless you've managed stop tracking master11:00
noonedeadpunk(or already install openstack-ansible-plugins as a collection)11:00
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Stop installing openssh and rsync to containers  https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/88994511:06
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Install distro_packages in pre-main  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88993411:06
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: [DNM] Ensure that CI is happy about changes  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/88994611:08
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Adopt for usage openstack_resources role  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/88987911:19
anskiynoonedeadpunk: so it has to be in inventory, and can't be only set up using variables, as on the host, which is in `journald_remote_targets` `journald_remote` role installs and configures journald for recieving logs.12:09
anskiyso the your suggestion with setting up `log_hosts` in `inventory.ini` works12:11
noonedeadpunkwell I'd suggest just documenting what to set in inventory.ini. OFC we can add some env.d but given close to nobody want containers created on journald_remote - not sure how much sense this will make12:11
anskiyyeah, on is_metal: true that looks much less convenient. Anyways, got your point, thank you.12:15
anskiys/less/more12:15
noonedeadpunkwell,  is_metal: true can be default, like it is for neutron-agents or nova-compute, for example12:17
noonedeadpunkwith that it's worth saying, there were couple of issues with journald-remote on itself, iirc regarding vacuuming of logs12:21
anskiyit does vacuum logs fine now, but, there are two issues: https://github.com/systemd/systemd/issues/5242 (it does not respect maxfilesize) and https://github.com/systemd/systemd/issues/8979 (prints `-- Reboot --`, when log source host changes in log stream, while viewing logs)12:35
anskiyI've tried rebuilding the latest version of systemd on 20.04, but I do remember, that the first issue was fixed, it showed only one host in `-f` mode, the first, that outputted some logs.12:36
anskiybut the first problem is actually fixes with simple crontab12:36
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-haproxy_server master: Correct default Content-Type for security.txt  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/88997113:11
anskiyso the remote journald logging is not the best solution as it looks a little bit ugly, but it does the job okay.13:38
lsudreHi, im using OSA 27.0.0 and I got this bug https://bugs.launchpad.net/openstack-ansible/+bug/2002897 I don't really understand how to fix it13:53
noonedeadpunklsudre: so.... you have issue in horizon?14:09
lsudreThe task Add service User from this file line 68 /etc/ansible/ansible_collections/openstack/osa/roles/service_setup/tasks/main.yml FAILED14:25
lsudrehttps://paste.openstack.org/show/bvLFcJerfn2KYEQFn8ty/14:27
noonedeadpunkwait, how is that related with the bug you've linked?14:28
lsudreI don't know but when I tail -f /var/log/syslog I found this error, I don't know if its related14:29
noonedeadpunkbut to catch actual error you would need to re-run the playbook with `-e _service_setup_nolog=False`14:29
noonedeadpunkWhen you're saing "I have this bug" and it's nothing in common - that looks pretty much confusing14:30
lsudreOk thanks I rerun it with the -e14:30
*** promethe- is now known as prometheanfire19:05
opendevreviewMerged openstack/openstack-ansible-haproxy_server master: Correct default Content-Type for security.txt  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/88997120:26

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!