*** Bico_Fino has quit IRC | 00:02 | |
*** TxGirlGeek has quit IRC | 00:03 | |
AnswerGuy | After an all-in-one deployent of Kolla/Openstack 3.0.1 (base: ubuntu install_type: source) I've created/uploaded three images to Glance using 'glance image-create ...' | 00:09 |
---|---|---|
AnswerGuy | In each case I've gotten and error message like: Error finding address for http://172.19.2.251:9292/v2/images/aa19dbd9-6082-4fdd-b916-b3fe4a6a0ec7/file: | 00:10 |
AnswerGuy | 'openstack image list' show: | 00:10 |
*** Pavo has joined #openstack-kolla | 00:11 | |
AnswerGuy | | aa19dbd9-6082-4fdd-b916-b3fe4a6a0ec7 | CentOS 7 | saving | | 00:12 |
AnswerGuy | | 92c25a0c-cf32-4be3-938a-4d65baccd27c | Ubuntu Xenial Xeru 16.04.1 | saving | | 00:12 |
AnswerGuy | | 624d62a0-47f0-49f1-ba59-f474b5a3d989 | Debian Jessie 64-bit | saving | | 00:12 |
AnswerGuy | | 2b3610ea-8ddb-4b1a-b0b3-3682f34c0127 | cirros | saving | | 00:12 |
AnswerGuy | ... all of them are listed as "saving" including the Cirros image that was created by the init-runonce script after the post-deployment step. | 00:12 |
*** yingjun has joined #openstack-kolla | 00:19 | |
AnswerGuy | ... and I get Image 2b3610ea-8ddb-4b1a-b0b3-3682f34c0127 is not active. (HTTP 400) ... even when trying to use the cirros image (or any other). | 00:20 |
*** yingjun has quit IRC | 00:24 | |
*** saneax-_-|AFK is now known as saneax | 00:24 | |
jascott1 | AnswerGuy where is trying to save the images to? | 00:26 |
*** jgriffith has joined #openstack-kolla | 00:26 | |
AnswerGuy | Show a "show" on each of theseI don't know. | 00:28 |
*** goldyfruit has quit IRC | 00:28 | |
AnswerGuy | I don't know where this installation of Glance is trying to save its files. | 00:28 |
jascott1 | totally guessing but I would figure that out first | 00:29 |
AnswerGuy | #glance_backend_file: "yes" | 00:29 |
jascott1 | since it *almost* works | 00:29 |
*** gfidente has quit IRC | 00:29 | |
AnswerGuy | Yeah, I'm guessing that the file it getting up into RabbitMQ or memcache and not to the file backend. | 00:29 |
*** jgriffith has quit IRC | 00:30 | |
AnswerGuy | 'openstack image show ...' give something like: /v2/images/2b3610ea-8ddb-4b1a-b0b3-3682f34c0127/file for the "file" value | 00:31 |
jascott1 | hmm maybe curl the registry directly and poke around? | 00:32 |
jascott1 | glance registry | 00:32 |
*** tovin07_ has joined #openstack-kolla | 00:32 | |
*** yingjun has joined #openstack-kolla | 00:33 | |
*** jgriffith has joined #openstack-kolla | 00:33 | |
AnswerGuy | Is there a HOWTO guide on debugging Glance/image issues somewhere? (Sounds like this is more of a Glance issue than a Kolla issue ... other than the notion that Kolla's default behavior might be improved). | 00:36 |
*** jgriffith has quit IRC | 00:36 | |
sdake_ | AnswerGuy yes upstream maintains many guides for all of the various services | 00:40 |
sdake_ | google away :) | 00:40 |
Pavo | ok completely flat network | 00:41 |
Pavo | sdake_ | 00:41 |
Pavo | can you try ddi.hopto.org:4000 | 00:42 |
sdake_ | site can't be reached | 00:42 |
Pavo | that is being forwarded to 80 | 00:42 |
Pavo | wtf | 00:42 |
Pavo | this is BS | 00:42 |
Pavo | yeah this is BS because every other port forward is working | 00:47 |
*** duonghq_ has joined #openstack-kolla | 00:49 | |
*** jtriley has joined #openstack-kolla | 01:01 | |
*** zhubingbing has joined #openstack-kolla | 01:03 | |
*** diogogmt has quit IRC | 01:05 | |
*** eaguilar has joined #openstack-kolla | 01:08 | |
*** duonghq_ is now known as duonghq | 01:16 | |
duonghq | morning guys | 01:16 |
*** portdirect__ has quit IRC | 01:16 | |
*** newmember has quit IRC | 01:17 | |
jascott1 | good morning! | 01:18 |
tovin07_ | morning | 01:20 |
*** dave-mccowan has joined #openstack-kolla | 01:31 | |
*** zhurong has joined #openstack-kolla | 01:41 | |
Pavo | ok I have completely redone my entire network to a complete flat network no vlans, no trunks nothing, 2 interfaces only on each node eth0 all traffic and eth1 for neutron if this doesn't work there is something wrong with kolla | 01:42 |
sdake_ | pavo may i suggest running horizon on a port other then 80 | 01:43 |
Pavo | as the forwared port? | 01:44 |
sdake_ | so your normal port forward are working? | 01:44 |
sdake_ | sup duonghq | 01:44 |
Pavo | because I am using 4000 external to 80 internal as the forwarding | 01:44 |
sdake_ | right - i mean as a test | 01:44 |
Pavo | yes my other port forwarding are working no issues | 01:45 |
*** eaguilar has quit IRC | 01:45 | |
Pavo | see ddi.hopto.org:3000 | 01:45 |
Pavo | you can get to that right? | 01:45 |
sdake_ | right, so want to see if a port forward of horizon on 8000 works | 01:45 |
sdake_ | connection refused | 01:45 |
Pavo | ok will switch to 8000 | 01:45 |
Pavo | wait not done deploying yet | 01:45 |
Pavo | and you said connection refused for ddi.hopto.org:3000 | 01:46 |
Pavo | ? | 01:46 |
jascott1 | that url is your gogs and it works | 01:46 |
Pavo | ok good | 01:46 |
Pavo | waiting on deployment to get done | 01:47 |
harlowja | qq sdake_ inc0 for the dsvm jobs, most of those are nv right? | 01:47 |
harlowja | i think the centos one isnt right? | 01:47 |
harlowja | will the rest switch (sometime?) to voting? | 01:47 |
harlowja | (if this was already answered somewhere, let me know, ha) | 01:47 |
* harlowja may be dumb or asking same question again, lol | 01:48 | |
sdake_ | harlowja actually i htink inc0 changed em to voting | 01:48 |
harlowja | ah | 01:48 |
*** diogogmt has joined #openstack-kolla | 01:49 | |
sdake_ | harlowja i'm not sure which ones would have to ask him | 01:49 |
harlowja | kk | 01:49 |
inc0 | harlowja, just source build | 01:49 |
inc0 | not all of them | 01:49 |
*** jgriffith has joined #openstack-kolla | 01:49 | |
*** liyifeng has joined #openstack-kolla | 01:50 | |
harlowja | kk | 01:50 |
Pavo | ok sdake_ try ddi.hopto.org:8000 | 01:52 |
Pavo | anything? | 01:54 |
jascott1 | success! | 01:55 |
Pavo | no f##$ing way | 01:55 |
Pavo | seriously? | 01:55 |
jascott1 | horizon login | 01:56 |
Pavo | ok wtf | 01:56 |
Pavo | ok now how about we get tls working | 01:57 |
Pavo | since apparently I am an idoit | 01:57 |
Pavo | lol | 01:57 |
jascott1 | everything is always so simple after we solve the problem :) | 01:58 |
Pavo | but don't know what the issue was | 01:58 |
jascott1 | those are the best | 01:59 |
jascott1 | cause it means you prob get to do it all over again ;) | 01:59 |
Pavo | nope once I get TLS working I am done | 01:59 |
Pavo | not touching it again | 02:00 |
Pavo | lol | 02:00 |
harlowja | inc0 sdake_ another thing that wanted to see about, we've been using uwsgi here vs apache; would the be any major objection to having uwsgi being a thing to install (vs apache) | 02:00 |
sdake_ | harlowja you provide the patches we provide the reviews :) | 02:01 |
harlowja | k | 02:01 |
inc0 | backwards compatibility | 02:01 |
inc0 | upgrades | 02:01 |
inc0 | apache will have to go through deprecation | 02:01 |
sdake_ | ya i think that could probably be selectable? | 02:02 |
harlowja | ya, something like that | 02:02 |
harlowja | i'm talking with the ops guys here, seeing if they would just be ok with apache | 02:02 |
harlowja | want more of a reason than 'meh bunch of apache instances' | 02:02 |
sdake_ | lol | 02:02 |
sdake_ | ya we dont erally want to go through the whole litany of things inc0 listed above ;) | 02:02 |
harlowja | :-p | 02:02 |
sdake_ | i think the dockerfiles are configurable enough that they could be configured | 02:03 |
sdake_ | and the ansible could be configred | 02:03 |
harlowja | right, certain sections i'd have to chop up | 02:03 |
harlowja | https://github.com/openstack/kolla/blob/master/docker/keystone/keystone-base/Dockerfile.j2#L63-L70 | 02:03 |
kollabot | kolla/Dockerfile.j2 at master · openstack/kolla · GitHub | 02:03 |
harlowja | that one mainly | 02:03 |
inc0 | well, I wouldn't want to support both thb | 02:03 |
inc0 | tbh | 02:04 |
inc0 | if one is better than other, let's stick to better | 02:04 |
harlowja | agreed | 02:04 |
sdake_ | well harlowja there is a project in openstack to manage temporary forks | 02:05 |
sdake_ | harlowja the idea is it rebases to hte latest z stream at one command | 02:05 |
sdake_ | oracle using it | 02:06 |
Pavo | ok sdake_ and inc0 ready to get TLS working now? | 02:06 |
sdake_ | if you really need it, could follow that model | 02:06 |
inc0 | Pavo, sooo you don't know what was the issue? | 02:06 |
Pavo | have no clue | 02:06 |
sdake_ | real quick | 02:06 |
sdake_ | lets have a recap | 02:06 |
Pavo | unless it was some kind of vlan issue | 02:06 |
sdake_ | the issue was... | 02:06 |
sdake_ | changing the port from 80 to somethign else ? :) | 02:06 |
Pavo | because I have no vlans now | 02:06 |
sdake_ | yo ugot rid of vlans and that fixe dit? | 02:07 |
Pavo | ok so how is 443 gonna work now? | 02:07 |
Pavo | no no | 02:07 |
*** dave-mccowan has quit IRC | 02:07 | |
Pavo | well lets check | 02:07 |
Pavo | I will do 80 to 80 and see what happens | 02:07 |
sdake_ | lets figure out what you did to fix it | 02:07 |
sdake_ | so we can leearn from it | 02:07 |
Pavo | ok try ddi.hopto.org | 02:07 |
sdake_ | nothing | 02:08 |
sdake_ | sitting around | 02:08 |
Pavo | ok one sec | 02:08 |
Pavo | oknow try ddi.hopto.org:8000 | 02:08 |
sdake_ | nada | 02:08 |
sdake_ | lemme log off vpn... | 02:09 |
*** sdake has joined #openstack-kolla | 02:10 | |
sdake | pavo 8000 works without vpn, wht about 80? | 02:10 |
Pavo | ok try without 8000 | 02:10 |
Pavo | ddi.hopto.org | 02:10 |
sdake | ya 80 works | 02:10 |
sdake | are you switching configs between? | 02:10 |
Pavo | no | 02:11 |
Pavo | just switching port forwarding | 02:11 |
Pavo | so now 80 works | 02:11 |
Pavo | hmmm | 02:11 |
sdake | is 80 internal? | 02:11 |
sdake | or 8000 internal? | 02:11 |
sdake | got a screenshot? | 02:11 |
Pavo | right now 80 are both | 02:11 |
Pavo | https://www.dropbox.com/s/q4ystpzt5fir3si/Screenshot%202016-11-21%2021.11.51.png?dl=0 | 02:11 |
Pavo | ummm think I messed horizon up lol | 02:12 |
*** jgriffith has quit IRC | 02:12 | |
Pavo | one sec | 02:12 |
*** sdake_ has quit IRC | 02:13 | |
Pavo | wow yeah I messed it up badly | 02:13 |
*** derekjhyang has joined #openstack-kolla | 02:13 | |
Pavo | I was thinking I could just have the things I wanted changed in the custom config and nope thats not correct | 02:13 |
Pavo | oops | 02:14 |
Pavo | guess you have to have all settings that are default in the custom config but just add the changes you want | 02:14 |
Pavo | doing a reconfigure right now | 02:15 |
sdake | ok dinner time | 02:16 |
openstackgerrit | Alexis Rivera proposed openstack/kolla-ansible: updating-deprecated-ansible-modules https://review.openstack.org/400466 | 02:26 |
kollabot | Gerrit Code Review | 02:26 |
openstackgerrit | Joshua Harlow proposed openstack/kolla: Allow for externally managed configuration https://review.openstack.org/332590 | 02:27 |
kollabot | Gerrit Code Review | 02:27 |
openstackgerrit | Joshua Harlow proposed openstack/kolla: Don't process/queue children not matched https://review.openstack.org/400467 | 02:29 |
kollabot | Gerrit Code Review | 02:29 |
Pavo | theoretically I could pip install kolla on my mac and wouldn't need a VM as my deployer right? | 02:31 |
Pavo | ok for TLS I should only have to add another IP as external vip, enable tls and add FQDN for external vip and make certs | 02:34 |
Pavo | then reconfigure | 02:34 |
Pavo | correct inc0? | 02:35 |
inc0 | for deployment yeah | 02:36 |
inc0 | for docker registry | 02:37 |
inc0 | well, doable | 02:37 |
inc0 | just pita | 02:37 |
inc0 | (answer to mac question) | 02:37 |
openstackgerrit | Alexis Rivera proposed openstack/kolla-ansible: updating-deprecated-ansible-modules https://review.openstack.org/400466 | 02:37 |
kollabot | Gerrit Code Review | 02:37 |
Pavo | I have a docker registry running on my mac now without issue | 02:37 |
inc0 | kk then | 02:37 |
inc0 | ad TLS, yeah sounds about right | 02:37 |
Pavo | ok editing globals now | 02:38 |
Pavo | ok here goes nothing | 02:39 |
sdake | pavo did you figure out how you got port 80 working? | 02:40 |
Pavo | nope lol | 02:40 |
sdake | groan | 02:40 |
Pavo | I know right | 02:41 |
Pavo | only thing it could have been was my vlan configuration | 02:41 |
sdake | what else did you change in your env? | 02:41 |
Pavo | thats all I took out | 02:41 |
sdake | your wireless probably doesnt support vlan | 02:41 |
Pavo | removed all vlans, trunks and only have 2 interfaces on nodes now | 02:41 |
Pavo | yeah it does | 02:41 |
sdake | interesting | 02:41 |
Pavo | https://www.dropbox.com/s/nofht5a1jeblwf9/Screenshot%202016-11-21%2021.42.05.png?dl=0 | 02:42 |
Pavo | see | 02:42 |
sdake | wow cna't believe it has that feature | 02:43 |
Pavo | it didn't by default, using Tomato firmware | 02:43 |
sdake | never seen commercial product with vlans that is wireless | 02:43 |
sdake | oh custom firmware | 02:43 |
sdake | cool well whatever works ;) | 02:43 |
*** gardlt has joined #openstack-kolla | 02:44 | |
*** tonanhngo has quit IRC | 02:48 | |
Pavo | ok can you try https://ddi.hopto.org | 02:48 |
*** tonanhngo has joined #openstack-kolla | 02:48 | |
Pavo | anything? | 02:50 |
*** tonanhngo has quit IRC | 02:50 | |
sdake | nada | 02:50 |
Pavo | hmmm | 02:50 |
Pavo | what about now? | 02:51 |
Pavo | still notihing? | 02:52 |
*** Jeffrey4l has joined #openstack-kolla | 02:53 | |
openstackgerrit | Alexis Rivera proposed openstack/kolla-ansible: updating-deprecated-ansible-modules https://review.openstack.org/400466 | 02:53 |
kollabot | Gerrit Code Review | 02:53 |
*** tonanhngo has joined #openstack-kolla | 03:04 | |
*** zhurong has quit IRC | 03:05 | |
*** tonanhngo has quit IRC | 03:06 | |
*** zhurong has joined #openstack-kolla | 03:06 | |
*** sdake has quit IRC | 03:07 | |
openstackgerrit | Alexis Rivera proposed openstack/kolla-ansible: updating-deprecated-ansible-modules https://review.openstack.org/400466 | 03:10 |
kollabot | Gerrit Code Review | 03:10 |
*** unicell1 has quit IRC | 03:11 | |
*** bmace has quit IRC | 03:20 | |
*** bmace has joined #openstack-kolla | 03:20 | |
Pavo | finally | 03:24 |
Pavo | https://ddi.hopto.org | 03:24 |
Pavo | working | 03:24 |
Pavo | inc0 you can get to https://ddi.hopto.org right | 03:27 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Remove setup_$distro.sh script https://review.openstack.org/400488 | 03:34 |
kollabot | Gerrit Code Review | 03:34 |
*** jgriffith has joined #openstack-kolla | 03:35 | |
*** jgriffith has quit IRC | 03:36 | |
*** fragatin_ has joined #openstack-kolla | 03:36 | |
Pavo | why in the world would admin-openrc.sh use external vip | 03:37 |
*** fragatin_ has quit IRC | 03:38 | |
*** fragati__ has joined #openstack-kolla | 03:38 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Add octavia docker image https://review.openstack.org/399896 | 03:39 |
kollabot | Gerrit Code Review | 03:39 |
Pavo | I would assume admin-openrc.sh would only use internal endpoints | 03:39 |
Pavo | I wouldn't think anyone in their right mind would use admin-openrc.sh from external network | 03:39 |
*** fragatina has quit IRC | 03:39 | |
*** fragati__ has quit IRC | 03:41 | |
v1k0d3n | hey portdirect_away you around? | 03:51 |
openstackgerrit | Alexis Rivera proposed openstack/kolla-ansible: updating-deprecated-ansible-modules https://review.openstack.org/400466 | 03:52 |
kollabot | Gerrit Code Review | 03:52 |
*** fragatina has joined #openstack-kolla | 03:57 | |
*** unicell has joined #openstack-kolla | 03:59 | |
*** tonanhngo has joined #openstack-kolla | 04:04 | |
*** tonanhngo has quit IRC | 04:06 | |
*** fragatina has quit IRC | 04:06 | |
*** fragatina has joined #openstack-kolla | 04:07 | |
*** Pavo has quit IRC | 04:11 | |
*** fragatina has quit IRC | 04:11 | |
*** sdake has joined #openstack-kolla | 04:13 | |
*** sdake_ has joined #openstack-kolla | 04:14 | |
*** diogogmt has quit IRC | 04:15 | |
*** Pavo has joined #openstack-kolla | 04:16 | |
*** sdake has quit IRC | 04:18 | |
*** mdnadeem has joined #openstack-kolla | 04:23 | |
*** tonanhngo has joined #openstack-kolla | 04:24 | |
*** tonanhngo has quit IRC | 04:25 | |
*** fragatina has joined #openstack-kolla | 04:29 | |
*** fragatina has quit IRC | 04:29 | |
*** inc0 has quit IRC | 04:29 | |
*** fragatina has joined #openstack-kolla | 04:29 | |
*** kong has quit IRC | 04:30 | |
*** sp_ has joined #openstack-kolla | 04:31 | |
*** tonanhngo has joined #openstack-kolla | 04:45 | |
*** tonanhngo has quit IRC | 04:48 | |
sdake_ | Jeffrey4l any idea on this gate failure in your ci patch? http://logs.openstack.org/01/398501/25/check/gate-kolla-ansible-dsvm-deploy-centos-source-centos-7-nv/db4be3c/console.html#_2016-11-22_03_16_17_069105 | 05:01 |
kollabot | Resource at http://logs.openstack.org/01/398501/25/check/gate-kolla-ansible-dsvm-deploy-centos-source-centos-7-nv/db4be3c/console.html#_2016-11-22_03_16_17_069105 exceeds the maximum size. | 05:01 |
* Jeffrey4l is checking. | 05:02 | |
sdake_ | looks like mysql looking for a file i've never seen before... | 05:02 |
sdake_ | just saw the wierdest review | 05:03 |
*** sbezverk_ has quit IRC | 05:03 | |
sdake_ | check_mode review | 05:04 |
sdake_ | was yes now no | 05:04 |
sdake_ | no is right ;) | 05:04 |
*** sbezverk has joined #openstack-kolla | 05:04 | |
sdake_ | Alternatively you can run: | 05:05 |
sdake_ | 2016-11-22 03:16:17.069530 | '/usr/bin/mysql_secure_installation' | 05:05 |
sdake_ | we do this iirc | 05:05 |
Jeffrey4l | sdake_, check this http://logs.openstack.org/01/398501/25/check/gate-kolla-ansible-dsvm-deploy-centos-source-centos-7-nv/db4be3c/logs/kolla/mariadb/mariadb.log | 05:05 |
Jeffrey4l | your logs should be correct. | 05:06 |
Jeffrey4l | sdake_, search `[ERROR] WSREP: Process completed with error: /usr/local/bin/wsrep-notify.sh --status Joined --uuid 0769833e-b062-11e6-a02a-ff8f8ad832b5 --primary yes --index 0 --members 0768818a-b062-11e6-bbff-fecc5408fe87/node1/10.210.35.13:3306: 1 (Operation not permitted)` | 05:06 |
sdake_ | 161122 3:16:16 [ERROR] WSREP: Process completed with error: /usr/local/bin/wsrep-notify.sh --status Joined --uuid 0769833e-b062-11e6-a02a-ff8f8ad832b5 --primary yes --index 0 --members 0768818a-b062-11e6-bbff-fecc5408fe87/node1/10.210.35.13:3306: 1 (Operation not permitted) | 05:06 |
sdake_ | ya | 05:06 |
sdake_ | permissions must be off on that file in the container | 05:07 |
Jeffrey4l | no idea what's this. the other container: ubuntu and oraclelinux are ok. | 05:07 |
sdake_ | so only centos? | 05:08 |
*** mdnadeem has quit IRC | 05:08 | |
sdake_ | this is sort of why we need cross repo gating ;) | 05:08 |
Jeffrey4l | sdake_, not sure. this is not happen stabilize. | 05:08 |
Jeffrey4l | last recheck, only oracle+source failed. | 05:09 |
sdake_ | so its intermittent? | 05:09 |
Jeffrey4l | this is the first time i saw such issue. | 05:09 |
Jeffrey4l | and yes. it is intermittent. | 05:09 |
sdake_ | groan | 05:09 |
sdake_ | 2016-11-22 02:51:42.267537 | [Zuul] Building remotely on centos-7-rax-iad-5720846 in workspace /home/jenkins/workspace/gate-kolla-ansible-dsvm-deploy-centos-source-centos-7-nv | 05:10 |
Jeffrey4l | sdake_, this is a following PS https://review.openstack.org/400051 | 05:10 |
kollabot | Gerrit Code Review | 05:10 |
sdake_ | so we know rax-iad generally hs problems for us | 05:10 |
Jeffrey4l | it is all green. | 05:10 |
sdake_ | what provider did oracle+source fail on? | 05:10 |
sdake_ | i saw somewhere new images were being pushed by infra yesterday or the day prior | 05:11 |
sdake_ | could be selinux issue on a specific provider as well | 05:11 |
Jeffrey4l | maybe. but we can not explain this. it should not be related to host os, imo. | 05:11 |
Jeffrey4l | sdake_, oracle+source is different issue. | 05:12 |
sdake_ | got a link to that one? | 05:12 |
Jeffrey4l | nova_libvirt Existed ( in oracle+source ) | 05:12 |
Jeffrey4l | sdake_, http://logs.openstack.org/01/398501/25/check/gate-kolla-ansible-dsvm-deploy-oraclelinux-binary-centos-7-nv/4f9b4a7/console.html#_2016-11-22_03_25_01_395836 | 05:12 |
kollabot | Resource at http://logs.openstack.org/01/398501/25/check/gate-kolla-ansible-dsvm-deploy-oraclelinux-binary-centos-7-nv/4f9b4a7/console.html#_2016-11-22_03_25_01_395836 exceeds the maximum size. | 05:12 |
Jeffrey4l | sdake_, libvirtd.log http://logs.openstack.org/01/398501/25/check/gate-kolla-ansible-dsvm-deploy-oraclelinux-binary-centos-7-nv/4f9b4a7/logs/kolla/libvirt/libvirtd.log | 05:13 |
sdake_ | 2016-11-22 02:51:09.857711 | [Zuul] Building remotely on centos-7-rax-iad-5720987 in workspace /home/jenkins/workspace/gate-kolla-ansible-dsvm-deploy-oraclelinux-binary-centos-7-nv | 05:13 |
sdake_ | looks like another rax-iad problem | 05:13 |
Jeffrey4l | maybe. | 05:13 |
sdake_ | have had more problems with rax-iad then any other provider ;) | 05:14 |
sdake_ | keep going at the rechecks | 05:14 |
sdake_ | we need to get that work merged now that pc has merged | 05:14 |
sdake_ | fwiw i've seen that second failure before on rax-iad | 05:15 |
*** n3v3rm0r3r has quit IRC | 05:15 | |
sdake_ | never seen that first failure | 05:15 |
sdake_ | tif you see more perm denied we prob need to contact infra to ask the mto push new images to rax-iad | 05:16 |
sdake_ | especially if we can grab the audit log | 05:16 |
Jeffrey4l | sdake_, we have grab the audit log. | 05:17 |
sdake_ | coool do you have link to audit log for the mysql failure? | 05:17 |
Jeffrey4l | sdake_, http://logs.openstack.org/01/398501/25/check/gate-kolla-ansible-dsvm-deploy-centos-source-centos-7-nv/db4be3c/logs/system_logs/ | 05:17 |
kollabot | Index of /01/398501/25/check/gate-kolla-ansible-dsvm-deploy-centos-source-centos-7-nv/db4be3c/logs/system_logs | 05:17 |
Jeffrey4l | fyi, the system log is collected all the time. | 05:17 |
sdake_ | type=USER_LOGIN msg=audit(1479783067.974:167): pid=1135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.99.112.182 terminal=ssh res=failed' | 05:18 |
sdake_ | i see that | 05:18 |
Jeffrey4l | but i am now sure what cause the mariadb failed. | 05:18 |
sdake_ | nice work on that ;) | 05:18 |
sdake_ | thats the only audit long entry i see that looks problematic | 05:18 |
sdake_ | there is another one after it as well | 05:18 |
sdake_ | well not sure - was hoping to see mysql pop up in that audit log | 05:20 |
sdake_ | or something else | 05:20 |
Jeffrey4l | but seems it is ok. | 05:20 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: NO_MERGE: test mitaka branch https://review.openstack.org/393877 | 05:23 |
kollabot | Gerrit Code Review | 05:23 |
sdake_ | off to bed | 05:24 |
sdake_ | night folks | 05:24 |
*** sdake_ has quit IRC | 05:24 | |
Jeffrey4l | night. | 05:24 |
*** sdake has joined #openstack-kolla | 05:26 | |
*** gardlt has quit IRC | 05:27 | |
*** sdake has quit IRC | 05:30 | |
*** kollabot has quit IRC | 05:34 | |
*** kollabot has joined #openstack-kolla | 05:34 | |
*** unicell has quit IRC | 05:45 | |
*** unicell has joined #openstack-kolla | 05:45 | |
*** prameswar has joined #openstack-kolla | 05:46 | |
Jeffrey4l | sdake | 05:52 |
Jeffrey4l | need ack for https://review.openstack.org/398501 which unblock the kolla-ansible gate. thanks. | 05:53 |
kollabot | Gerrit Code Review | 05:53 |
*** saneax is now known as saneax-_-|AFK | 05:54 | |
*** tonanhngo has joined #openstack-kolla | 05:55 | |
*** mdnadeem has joined #openstack-kolla | 05:56 | |
*** tonanhngo has quit IRC | 05:56 | |
*** skramaja has joined #openstack-kolla | 05:56 | |
*** kollabot has quit IRC | 05:57 | |
*** kollabot has joined #openstack-kolla | 05:58 | |
*** senk has joined #openstack-kolla | 05:59 | |
*** kollabot has quit IRC | 06:01 | |
*** kollabot has joined #openstack-kolla | 06:02 | |
*** kollabot has joined #openstack-kolla | 06:02 | |
*** kristian__ has joined #openstack-kolla | 06:03 | |
*** Pavo has quit IRC | 06:11 | |
*** tonanhngo has joined #openstack-kolla | 06:15 | |
*** Pavo has joined #openstack-kolla | 06:15 | |
*** tonanhngo has quit IRC | 06:16 | |
*** tonanhngo has joined #openstack-kolla | 06:27 | |
*** tonanhngo has quit IRC | 06:30 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Remove setup_$distro.sh script https://review.openstack.org/400488 | 06:33 |
*** v1k0d3n has quit IRC | 06:34 | |
*** f13o has joined #openstack-kolla | 06:43 | |
*** awidders_ has joined #openstack-kolla | 06:49 | |
*** awiddersheim has quit IRC | 06:49 | |
bjolo | morning | 06:52 |
*** senk has quit IRC | 06:52 | |
*** Satya_ has joined #openstack-kolla | 06:52 | |
*** kristian__ has quit IRC | 06:57 | |
*** sp_ has quit IRC | 07:06 | |
*** sp_ has joined #openstack-kolla | 07:19 | |
*** tonanhngo has joined #openstack-kolla | 07:25 | |
*** tonanhngo has quit IRC | 07:26 | |
*** senk has joined #openstack-kolla | 07:30 | |
*** sdake has joined #openstack-kolla | 07:33 | |
*** tovin07_ has quit IRC | 07:33 | |
*** tovin07 has quit IRC | 07:33 | |
*** sdake_ has joined #openstack-kolla | 07:34 | |
*** tovin07 has joined #openstack-kolla | 07:35 | |
*** tovin07_ has joined #openstack-kolla | 07:36 | |
*** sdake has quit IRC | 07:38 | |
*** Serlex has joined #openstack-kolla | 07:42 | |
*** tonanhngo has joined #openstack-kolla | 07:45 | |
*** tonanhngo has quit IRC | 07:47 | |
*** senk has quit IRC | 07:48 | |
*** f13o has quit IRC | 07:50 | |
*** senk has joined #openstack-kolla | 07:53 | |
*** kollabot has quit IRC | 07:55 | |
openstackgerrit | Merged openstack/kolla-ansible: Fix fact gathering when using --limit https://review.openstack.org/398313 | 07:55 |
*** kollabot has joined #openstack-kolla | 07:56 | |
jascott1 | hubot hi | 07:56 |
openstackgerrit | Steven Dake proposed openstack/kolla: Add specs are advisory readme.rst to kolla repo https://review.openstack.org/400570 | 07:56 |
jascott1 | werps... | 07:56 |
jascott1 | kollabot hi | 07:56 |
kollabot | Hi | 07:56 |
*** matrohon has joined #openstack-kolla | 07:57 | |
*** berendt has joined #openstack-kolla | 07:57 | |
sdake_ | sup berendt | 07:57 |
sdake_ | hey jascott1 | 07:57 |
*** kollabot1 has joined #openstack-kolla | 07:58 | |
openstackgerrit | Merged openstack/kolla-ansible: Fix network configuration for cloudkitty https://review.openstack.org/400011 | 07:58 |
jascott1 | yo | 07:58 |
jascott1 | stopped the bot from saying 'Gerrit Code Review' every time one posted | 07:58 |
*** kollabot has quit IRC | 07:58 | |
berendt | morning | 07:59 |
*** kollabot1 has quit IRC | 08:00 | |
*** kollabot has joined #openstack-kolla | 08:00 | |
jascott1 | this bot is 'not entirely stable' ;) | 08:01 |
sdake_ | ;-) | 08:01 |
sdake_ | when i was a young tike i wrote an irc bot | 08:01 |
sdake_ | called annoy bot | 08:02 |
sdake_ | heard of it? | 08:02 |
sdake_ | ;-) | 08:02 |
jascott1 | heheh | 08:02 |
sdake_ | also wrote an icmp nuke bot | 08:02 |
sdake_ | that was more fun :) | 08:02 |
*** tonanhngo has joined #openstack-kolla | 08:02 | |
sdake_ | annoy bot was pretty cool it would join a channel | 08:02 |
sdake_ | and then have other annoy bots join a channel over time | 08:03 |
sdake_ | and they would carry on a nonsensical conversation | 08:03 |
jascott1 | hey that is familiar | 08:03 |
sdake_ | icmp nuke bot would icmp nuke a irc server, then connect a user for each user in the channel | 08:03 |
sdake_ | this would cause mass collisions and kill everyone in the channel | 08:03 |
sdake_ | obvoiusly in the 90s when nickserv wasn't a thing and icmp wasn't locked down :) | 08:04 |
jascott1 | i remember bot floods and what not but wasnt aware of icmp nuke going on | 08:04 |
sdake_ | ya that is not possible today | 08:04 |
*** tonanhngo has quit IRC | 08:05 | |
sdake_ | this was sort of pre-firewall :) | 08:05 |
jascott1 | kinda funny im living on irc again 20+ years later | 08:05 |
sdake_ | my friend did something much more interesting, he wrote a firewall that run on a flooppy disk | 08:06 |
sdake_ | actually i guess he is my brother in law | 08:06 |
sdake_ | such a wierd thing to say | 08:06 |
jascott1 | i have one | 08:06 |
jascott1 | we play music most fridays downtown Hillsboro | 08:06 |
sdake_ | nice | 08:06 |
jascott1 | with my stepbrother | 08:06 |
sdake_ | which instrument | 08:07 |
jascott1 | another local band is called 'brother man' which wouldve been great for us | 08:07 |
jascott1 | great guys | 08:07 |
sdake_ | ya i go down to the hifi store some days and local bands are playing their presses on their gear | 08:08 |
jascott1 | guitar for me, stepbro keys and bro in law sings and plays acoustic | 08:08 |
jascott1 | you play keys? | 08:08 |
sdake_ | not musical at all | 08:08 |
sdake_ | my daughter is | 08:08 |
sdake_ | in choir and dance atm | 08:08 |
openstackgerrit | Javier Castillo Alcíbar proposed openstack/kolla-ansible: Fix ceilometer not sending logs to heka https://review.openstack.org/400168 | 08:08 |
sdake_ | my wife is | 08:09 |
sdake_ | my son is not | 08:09 |
sdake_ | i attended 301 music in america in university | 08:09 |
jascott1 | its great, id go crazy without it im sure | 08:09 |
sdake_ | easy course | 08:09 |
sdake_ | but it didn't get into the mechanics of playing an instrument or harmony | 08:09 |
sdake_ | i did a drum circle once ;) | 08:09 |
sdake_ | that was kind of crazy | 08:09 |
jascott1 | used to play bass in a 'power trio' when I was younger. good ol days | 08:10 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: NO_MERGE: test mitaka branch https://review.openstack.org/393877 | 08:10 |
sdake_ | my daughter has a guitar but she doesn't play it | 08:10 |
sdake_ | kind of a bummer | 08:10 |
sdake_ | she is quite gifted on the art side and techincal side | 08:10 |
jascott1 | my youngest is playing guitar. plays it a little everyday which is about as much as I could ask for | 08:10 |
sdake_ | thats fantastic :) | 08:11 |
*** Pavo has quit IRC | 08:11 | |
sdake_ | my son is more of a computer nerd :) | 08:11 |
Satya_ | lol | 08:11 |
jascott1 | convinced it helps shake out the bad bits in ma brain | 08:11 |
jascott1 | ya I cant get mine into it | 08:11 |
jascott1 | he wants to but doesnt have any motivation | 08:11 |
sdake_ | teaching him c now | 08:11 |
jascott1 | Ive learning unity3d hoping to gateway him into it | 08:12 |
jascott1 | but he is more into playing games | 08:12 |
jascott1 | cool! | 08:12 |
sdake_ | ya my son is totally into vid games | 08:12 |
sdake_ | but we learn c about 40 mins a day | 08:12 |
sdake_ | teaching him vi with it | 08:12 |
sdake_ | rather he learns | 08:13 |
jascott1 | man thats great. Ive showed mine a ittle of everything, i thought web/js would be empowering (look you can kill a paywall, kill a graphic etc) yawnz | 08:13 |
sdake_ | i bought my daughter a c book | 08:13 |
sdake_ | she took it to school | 08:13 |
sdake_ | i think she read parts of it | 08:13 |
sdake_ | she reads really fast | 08:13 |
jascott1 | to each their own tho. we really just push finding *something* you love to do | 08:13 |
sdake_ | which is not how K&R is meant to be digested | 08:14 |
jascott1 | heheh | 08:14 |
jascott1 | wow thats so cool | 08:14 |
sdake_ | she wants to be a video game artist of some type when she grows up apparently | 08:14 |
sdake_ | she is 14 | 08:14 |
sdake_ | son is undecided - not thinking of such things | 08:14 |
jascott1 | oh hey have they messed with unity? its really fun | 08:15 |
sdake_ | nope whats unity | 08:15 |
jascott1 | its c# or js but really should use c# | 08:15 |
jascott1 | its a free game engine | 08:15 |
sdake_ | some type of api? | 08:15 |
sdake_ | right makes sense | 08:15 |
*** Pavo has joined #openstack-kolla | 08:16 | |
sdake_ | i think that might be to advanced for them | 08:16 |
jascott1 | well free up until you gross 100k$ yr | 08:16 |
jascott1 | no i promise | 08:16 |
jascott1 | this is like autocad for games | 08:16 |
jascott1 | kinda like unreal | 08:16 |
sdake_ | lol | 08:16 |
jascott1 | https://unity3d.com/ | 08:16 |
kollabot | Unity - Game Engine | 08:16 |
jascott1 | one sec | 08:17 |
jascott1 | https://unity3d.com/learn/tutorials/projects/roll-ball-tutorial | 08:17 |
kollabot | Unity - Roll-a-ball tutorial | 08:17 |
openstackgerrit | zhubingbing proposed openstack/kolla-ansible: Add trove role https://review.openstack.org/400580 | 08:18 |
jascott1 | so its mostly UI driven (although you can script everything) but uses snippets of C# or js to detect collisions | 08:18 |
sdake_ | the concepts look fairly complex for a 12 year old | 08:18 |
jascott1 | true the UI is a little daunting | 08:19 |
jascott1 | its great tho. yeah 12 might be a little on the young side | 08:19 |
sdake_ | my true goal is to teach them how a computer works top to bottom | 08:19 |
sdake_ | since that is what they are interested in | 08:19 |
jascott1 | it helps if they are interested in | 08:20 |
jascott1 | can always build on that | 08:20 |
sdake_ | indeed son is not sure on daughter :) | 08:20 |
sdake_ | jascott1 which part of the world you in | 08:21 |
jascott1 | Im outside of Portland OR in Hillsboro | 08:21 |
sdake_ | oh right you said that ;) | 08:21 |
jascott1 | inc0 is moving up here in Dec | 08:21 |
sdake_ | yup he mentioned it | 08:22 |
sdake_ | intel site then at hillsboro? | 08:22 |
sdake_ | been to it | 08:22 |
sdake_ | worked at intel | 08:22 |
sdake_ | c6 | 08:22 |
jascott1 | oh yeah? how was that? | 08:22 |
sdake_ | back when c6 was cool | 08:22 |
jascott1 | C6? | 08:23 |
jascott1 | campus? | 08:23 |
sdake_ | building i worked in | 08:23 |
sdake_ | chandler 6 | 08:23 |
jascott1 | oh | 08:23 |
jascott1 | yea we are in Jones Farm | 08:23 |
openstackgerrit | zhubingbing proposed openstack/kolla: Fix congress broken https://review.openstack.org/398413 | 08:23 |
*** tonanhngo has joined #openstack-kolla | 08:23 | |
sdake_ | i was there during the late 90s | 08:23 |
sdake_ | security was high | 08:23 |
sdake_ | always felt like someone was gonna come in and shoot up the place ;) | 08:23 |
zhubingbing | sdake | 08:23 |
jascott1 | yikes! | 08:23 |
zhubingbing | https://review.openstack.org/398413 please review it | 08:24 |
zhubingbing | ;) | 08:24 |
sdake_ | intel was really good for me | 08:24 |
jascott1 | hmm luckily i dont feel that way | 08:24 |
jascott1 | (about the shooting) | 08:24 |
sdake_ | how long you been there | 08:24 |
sdake_ | its a different time | 08:24 |
jascott1 | its been great for me | 08:24 |
sdake_ | intel probably not so paranoid now :) | 08:24 |
jascott1 | great company to work for | 08:24 |
sdake_ | ya i suspect i woudl have gone far if i stayed at intel | 08:24 |
*** tonanhngo has quit IRC | 08:24 | |
jascott1 | get caught in a 'restructuring'? | 08:25 |
sdake_ | nope joined a startup | 08:25 |
sdake_ | which was run aground | 08:25 |
jascott1 | ah brave man! | 08:25 |
jascott1 | oh | 08:25 |
jascott1 | sorry | 08:26 |
sdake_ | but it was a rockin learning experience | 08:26 |
sdake_ | its ok it wasn't my money it was in fact intels :) | 08:26 |
sdake_ | the co was montavista | 08:26 |
jascott1 | whatd yall do? | 08:27 |
sdake_ | embedded linux | 08:27 |
sdake_ | basically our business model looked like this | 08:27 |
jascott1 | ah cool | 08:27 |
sdake_ | we made 300 board ports a year | 08:27 |
sdake_ | and 10 of them sold | 08:27 |
sdake_ | for 10-50k in total | 08:27 |
sdake_ | and we had 120 mil in funding | 08:27 |
sdake_ | and a couple hundred employees | 08:27 |
jascott1 | wow | 08:27 |
sdake_ | the worst part is our customers were making bilskies off our board ports | 08:28 |
sdake_ | actually thats not the worst part | 08:28 |
sdake_ | better saved for in person :) | 08:28 |
jascott1 | no doubt. where are you located now? | 08:29 |
sdake_ | arizona | 08:29 |
sdake_ | at cisco | 08:29 |
jascott1 | ah the dry lands! | 08:29 |
sdake_ | i spent about 12 years in flagstaff | 08:29 |
sdake_ | 4 seasons | 08:30 |
jascott1 | i liked flag when I visited | 08:30 |
jascott1 | those northern towns seem cool but also seemed like not a lot todo | 08:30 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: NO_MERGE: test mitaka branch https://review.openstack.org/393877 | 08:30 |
jascott1 | not that i do much, laptop, guitar, libations. | 08:30 |
*** egonzalez90 has joined #openstack-kolla | 08:32 | |
sdake_ | ya flagstaff is perfect for that :) | 08:33 |
Serlex | morning, what about to koll-ansible? | 08:38 |
sdake_ | serlex that didn't parse ;) | 08:41 |
*** tonanhngo has joined #openstack-kolla | 08:44 | |
*** hogepodge has quit IRC | 08:45 | |
*** tonanhngo has quit IRC | 08:45 | |
sdake_ | sup egonzalez90 | 08:46 |
sdake_ | zhubingbing i looked at your review | 08:48 |
zhubingbing | ok | 08:48 |
sdake_ | zhubingbing you must check out http://github.com/openstack/kolla-ansible | 08:48 |
kollabot | GitHub - openstack/kolla-ansible: Ansible deployment of the Kolla containers | 08:48 |
sdake_ | we split the repos | 08:48 |
bjolo | pbourke, i did some testing yesterday using macvlan interfaces instead of vlans and it seems to work | 08:48 |
sdake_ | sup bjolo | 08:48 |
bjolo | sup sdake_ | 08:48 |
bjolo | when do you sleep? :) | 08:49 |
sdake_ | bjolo I'm reminded of a Bee Jees song... | 08:49 |
sdake_ | bjolo hopefully soon | 08:49 |
sdake_ | still lagging from bcn | 08:49 |
sdake_ | takes me a couple weeks to get back on a normal schedule | 08:49 |
bjolo | oh hit you that bad huh | 08:49 |
*** jmccarthy has joined #openstack-kolla | 08:49 | |
sdake_ | ya europe is brutal for me | 08:49 |
sdake_ | going isn't bad | 08:50 |
sdake_ | coming back is hard | 08:50 |
bjolo | i remember one time i flew to hawaii from sweden. Swear to god, i could not eat, sleep or even talk for 4 days | 08:50 |
sdake_ | yikes | 08:50 |
bjolo | could not form a single sentence properly. my brain was just firing off in all directions | 08:51 |
sdake_ | ya i dont have that problem | 08:51 |
bjolo | good | 08:51 |
sdake_ | just sleep lag | 08:51 |
bjolo | hope you get back on schedule soon. jet lag sucks | 08:51 |
sdake_ | it doesn't help that i pulled a 30 hour day on wednesday | 08:51 |
sdake_ | of last week | 08:51 |
bjolo | nope | 08:52 |
sdake_ | had to be done | 08:52 |
*** sdake_ is now known as sdake | 08:52 | |
sdake | i ten dto run odd hours anyway | 08:53 |
sdake | so being up at 2am isn't totally abnormal | 08:53 |
sdake | for me atleast ;-) | 08:53 |
bjolo | nope | 08:53 |
bjolo | you are usually here when i come in in the morning | 08:53 |
bjolo | ok need to run | 08:53 |
sdake | some days | 08:53 |
sdake | later | 08:53 |
bjolo | mellanox onsite for tech update on their switches and nics | 08:54 |
sdake | enjoy | 08:54 |
sdake | i bought mellanox at 1$ | 08:54 |
sdake | it went to 120 | 08:54 |
sdake | I sold it | 08:54 |
sdake | winning :) | 08:54 |
bjolo | nice :) | 08:54 |
bjolo | i like their nics | 08:54 |
bjolo | their switches seems pretty darn good too | 08:54 |
sdake | this was in the rdma infiniband days | 08:54 |
bjolo | ciao for now | 08:54 |
sdake | later | 08:55 |
sdake | zhubingbing and you should apply that work to that repo | 08:56 |
sdake | and resubmit it | 08:56 |
*** Satya_ has quit IRC | 08:56 | |
sdake | zhubingbing the reason it has a -2 on it is the kolla repo no longer has an ansible dir | 08:56 |
sdake | well enough fun for one day - enjoy | 08:57 |
*** sdake has quit IRC | 08:57 | |
*** prameswar has quit IRC | 08:58 | |
zhubingbing | ok | 09:03 |
*** athomas has joined #openstack-kolla | 09:04 | |
*** tonanhngo has joined #openstack-kolla | 09:04 | |
*** tonanhngo has quit IRC | 09:06 | |
openstackgerrit | zhubingbing proposed openstack/kolla-ansible: Fix congress broken https://review.openstack.org/400623 | 09:10 |
zhubingbing | sdake https://review.openstack.org/#/c/400623/ | 09:11 |
*** prameswar has joined #openstack-kolla | 09:11 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Update Percona repo to current release https://review.openstack.org/399549 | 09:20 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: NO_MERGE: test mitaka branch https://review.openstack.org/393877 | 09:21 |
magicboiz | morning | 09:23 |
magicboiz | I need help from of you guys :) | 09:23 |
*** tonanhngo has joined #openstack-kolla | 09:24 | |
magicboiz | I'd like to copy the CA certificate to ALL docker containers, what would be the correct way to do it? | 09:24 |
magicboiz | playing with config.json / kolla-toolbox.json.j2? | 09:24 |
*** tonanhngo has quit IRC | 09:25 | |
*** mmoster_ has joined #openstack-kolla | 09:25 | |
egonzalez90 | magicboiz: if is copying something to docker images, use image customization http://docs.openstack.org/developer/kolla/image-building.html#dockerfile-customisation | 09:26 |
kollabot | Building Container Images — kolla 4.0.0.0b2.dev49 documentation | 09:26 |
zhubingbing | https://review.openstack.org/#/c/400623/ | 09:27 |
egonzalez90 | if is something on ansible side, actually there is not any mechanism to copy custom files yet | 09:27 |
zhubingbing | hello please review it | 09:27 |
zhubingbing | -)who can help me | 09:27 |
egonzalez90 | you'll need to edit code | 09:27 |
magicboiz | egonzalez90: ok | 09:29 |
egonzalez90 | if is for TLS certificates, you can use this http://docs.openstack.org/developer/kolla/advanced-configuration.html#tls-configuration | 09:30 |
kollabot | Advanced Configuration — kolla 4.0.0.0b2.dev49 documentation | 09:30 |
*** mmoster_ has quit IRC | 09:32 | |
*** f13o has joined #openstack-kolla | 09:33 | |
*** Satya_ has joined #openstack-kolla | 09:34 | |
Satya_ | hi | 09:34 |
*** yingjun has quit IRC | 09:37 | |
*** yingjun has joined #openstack-kolla | 09:37 | |
egonzalez90 | Hi Satya_ | 09:38 |
Satya_ | hi | 09:38 |
Satya_ | Hi egonzalez90 | 09:40 |
*** yingjun has quit IRC | 09:42 | |
*** tonanhngo has joined #openstack-kolla | 09:43 | |
*** tonanhngo has quit IRC | 09:44 | |
*** f13o has quit IRC | 09:46 | |
*** tovin07_ has quit IRC | 09:48 | |
*** tovin07 has quit IRC | 09:49 | |
*** eaguilar has joined #openstack-kolla | 09:56 | |
*** athomas has quit IRC | 09:57 | |
*** athomas has joined #openstack-kolla | 09:57 | |
*** athomas has quit IRC | 09:57 | |
*** zhurong has quit IRC | 10:03 | |
*** prameswar has quit IRC | 10:04 | |
*** tonanhngo has joined #openstack-kolla | 10:04 | |
*** tonanhngo has quit IRC | 10:05 | |
*** Satya_ has quit IRC | 10:06 | |
*** athomas has joined #openstack-kolla | 10:07 | |
athomas | ., | 10:07 |
*** Pavo has quit IRC | 10:11 | |
*** Pavo has joined #openstack-kolla | 10:16 | |
*** berendt has quit IRC | 10:16 | |
*** prameswar has joined #openstack-kolla | 10:20 | |
*** portdirect_ has joined #openstack-kolla | 10:20 | |
*** portdirect_ has quit IRC | 10:23 | |
*** tonanhngo has joined #openstack-kolla | 10:24 | |
*** portdirect_ has joined #openstack-kolla | 10:24 | |
*** portdirect_ has quit IRC | 10:24 | |
*** portdirect_ has joined #openstack-kolla | 10:25 | |
*** portdirect_ has joined #openstack-kolla | 10:25 | |
*** gfidente has joined #openstack-kolla | 10:25 | |
*** gfidente has joined #openstack-kolla | 10:25 | |
*** zhubingbing has quit IRC | 10:25 | |
portdirect_ | kollabot help | 10:26 |
*** tonanhngo has quit IRC | 10:26 | |
kollabot | portdirect_: replied to you in private! | 10:26 |
portdirect_ | kollabot the rules | 10:26 |
kollabot | 0. A robot may not harm humanity, or, by inaction, allow humanity to come to harm. | 10:26 |
kollabot | 1. A robot may not injure a human being or, through inaction, allow a human being to come to harm. | 10:26 |
kollabot | 2. A robot must obey any orders given to it by human beings, except where such orders would conflict with the First Law. | 10:26 |
kollabot | 3. A robot must protect its own existence as long as such protection does not conflict with the First or Second Law. | 10:26 |
egonzalez90 | lol | 10:27 |
portdirect_ | oh dear | 10:27 |
egonzalez90 | isnt a rule for woot? | 10:27 |
portdirect_ | moar woot! | 10:28 |
portdirect_ | anyway morning egonzalez90! | 10:28 |
egonzalez90 | morning portdirect_ | 10:29 |
*** ppalacios has joined #openstack-kolla | 10:30 | |
*** portdirect_ has quit IRC | 10:37 | |
sp_ | sdake_: jascott1 kollabot just a lame query. Can we use kolla-k8s for POC or Production environment? | 10:48 |
sp_ | egonzalez90: You can also provide your views on this for me to get understanding. | 10:48 |
pbourke | sp_: kolla-k8s is not production ready | 10:54 |
*** shardy has joined #openstack-kolla | 10:55 | |
sp_ | pbourke: even not after ocata release :( ?? | 10:56 |
pbourke | sp_: I'm not actively involved in kolla-k8s at the moment but I dont see how it could go from POC to production ready in one release | 10:57 |
sp_ | pbourke: Thanks for your kind response | 10:58 |
*** jascott1 has quit IRC | 10:59 | |
*** eaguilar has quit IRC | 11:00 | |
*** portdirect_away is now known as portdirect | 11:04 | |
openstackgerrit | Merged openstack/kolla-ansible: Fix ceilometer not sending logs to heka https://review.openstack.org/400168 | 11:05 |
portdirect | sp_: the ocata release was just a POC, since then several other people have got involved (including me), many of whom where working on parallel projects | 11:06 |
portdirect | sp_: we only recently came to a consensus on how the direction we should be moving in, based upon our expereinces of openstack in k8s, and the speed of development of k8s itself | 11:07 |
openstackgerrit | Merged openstack/kolla-ansible: updating-deprecated-ansible-modules https://review.openstack.org/400466 | 11:08 |
portdirect | sp_: this is best layed out in this doc https://github.com/openstack/kolla-kubernetes/blob/master/specs/kolla-kubernetes-arch.rst, though this is also worth reading: https://github.com/openstack/kolla-kubernetes/blob/master/specs/README.rst | 11:08 |
kollabot | kolla-kubernetes/README.rst at master · openstack/kolla-kubernetes · GitHub | 11:08 |
*** msimonin has joined #openstack-kolla | 11:08 | |
sp_ | portdirect: in your 1st line. I guess you are talking about Newton release | 11:10 |
portdirect | sp_: yeah, only just had my first sip of coffee this morning :/ | 11:10 |
sp_ | portdirect: nice :) | 11:11 |
*** Bico_Fino has joined #openstack-kolla | 11:12 | |
*** zhubingbing_ has joined #openstack-kolla | 11:15 | |
*** zhangshuai has joined #openstack-kolla | 11:30 | |
*** tonanhngo has joined #openstack-kolla | 11:35 | |
*** tonanhngo has quit IRC | 11:36 | |
*** mmoster_ has joined #openstack-kolla | 11:41 | |
openstackgerrit | Mauricio Lima proposed openstack/kolla-ansible: Remove docker from kolla-ansible https://review.openstack.org/398320 | 11:42 |
openstackgerrit | Merged openstack/kolla-ansible: fix ci gate https://review.openstack.org/398501 | 11:43 |
openstackgerrit | Merged openstack/kolla-ansible: Use tox to build gate images https://review.openstack.org/400051 | 11:43 |
*** mmoster_ has quit IRC | 11:48 | |
*** zhangshuai has quit IRC | 11:50 | |
*** zhangshuai has joined #openstack-kolla | 11:50 | |
pbourke | can someone please review https://review.openstack.org/#/c/392583/ | 11:53 |
*** tonanhngo has joined #openstack-kolla | 11:55 | |
*** tonanhngo has quit IRC | 11:56 | |
openstackgerrit | Javier Castillo Alcíbar proposed openstack/kolla-ansible: Refined version of heka-ceilometer in order to manage logs from - apache: ceilometer-api - openstack: ceilometer-collector, polling... https://review.openstack.org/400702 | 11:57 |
openstackgerrit | Mauricio Lima proposed openstack/kolla-ansible: Remove docker folder from kolla-ansible https://review.openstack.org/398320 | 11:58 |
*** jtriley has quit IRC | 12:05 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla-ansible: Remove the disable of ipv6 in gate https://review.openstack.org/400707 | 12:07 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Install mkfs.vfat tool in ironic-conductor image https://review.openstack.org/400709 | 12:09 |
*** Pavo has quit IRC | 12:11 | |
openstackgerrit | Mauricio Lima proposed openstack/kolla-ansible: Remove docker folder from kolla-ansible https://review.openstack.org/398320 | 12:11 |
*** Bico_Fino has quit IRC | 12:11 | |
openstackgerrit | Javier Castillo Alcíbar proposed openstack/kolla-ansible: Make sure ceilometer/service_credentials wotks with internalURL https://review.openstack.org/400711 | 12:14 |
*** tonanhngo has joined #openstack-kolla | 12:15 | |
*** Pavo has joined #openstack-kolla | 12:15 | |
*** tonanhngo has quit IRC | 12:17 | |
openstackgerrit | Javier Castillo Alcíbar proposed openstack/kolla-ansible: Make sure heka-ceilometer.toml manages correctly apache and openstack ceilometer logs https://review.openstack.org/400716 | 12:18 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Update Percona repo to current release https://review.openstack.org/399549 | 12:21 |
*** tonanhngo has joined #openstack-kolla | 12:26 | |
*** tonanhngo has quit IRC | 12:27 | |
*** Bico_Fino has joined #openstack-kolla | 12:28 | |
*** rmart04 has joined #openstack-kolla | 12:33 | |
portdirect | Jeffrey4L: thanks for sorting that bug :) if your about I would appreciate some advice re: https://bugs.launchpad.net/kolla/+bug/1642995 | 12:34 |
openstack | Launchpad bug 1642995 in kolla newton "Designate source Images do not contain required assets" [Undecided,New] - Assigned to Pete Birley (portdirect) | 12:34 |
kollabot | Bug #1642995 “Designate source Images do not contain required as...” : Bugs : kolla | 12:34 |
Jeffrey4l | what kind of advice? :) | 12:35 |
Jeffrey4l | portdirect, | 12:35 |
portdirect | Jeffrey4L: solving it is super easy, but I'm not sure of the workflow to tie toegether correctly between releases - if you could give me some pointers I'll get right on it :) | 12:35 |
Jeffrey4l | portdirect, fix it in the master branch and backport it into newton when merged. you should not care about the release very much. | 12:36 |
*** liyifeng has quit IRC | 12:37 | |
portdirect | cool - cheers | 12:38 |
*** f13o has joined #openstack-kolla | 12:41 | |
*** rhallisey has joined #openstack-kolla | 12:43 | |
*** tonanhngo has joined #openstack-kolla | 12:45 | |
*** f13o has quit IRC | 12:46 | |
*** tonanhngo has quit IRC | 12:47 | |
openstackgerrit | Pete Birley proposed openstack/kolla: Fix Designate source image container assets https://review.openstack.org/400730 | 12:47 |
*** skramaja_ has joined #openstack-kolla | 12:48 | |
openstackgerrit | Pete Birley proposed openstack/kolla: Fix Designate source image container assets https://review.openstack.org/400730 | 12:48 |
*** skramaja has quit IRC | 12:48 | |
Bico_Fino | Hi, I need anything configured inside /etc/kolla prior to run kolla build ? | 12:49 |
*** mmoster_ has joined #openstack-kolla | 12:50 | |
rhallisey | Bico_Fino, yes, copy the contents of etc/kolla in the kolla directory | 12:50 |
pbourke | Bico_Fino: http://docs.openstack.org/developer/kolla/image-building.html | 12:50 |
kollabot | Building Container Images — kolla 4.0.0.0b2.dev49 documentation | 12:50 |
Bico_Fino | Yeah, already did that | 12:52 |
Bico_Fino | I’m trying with 3.0.1 version | 12:52 |
Bico_Fino | Got some failures | 12:52 |
openstackgerrit | Mauricio Lima proposed openstack/kolla: Add nfs package in manila-data dockerfile https://review.openstack.org/400734 | 12:52 |
Bico_Fino | https://gist.github.com/bicofino/c56b1e1ccf7d35564df489c0de3a53fb | 12:52 |
kollabot | gist:c56b1e1ccf7d35564df489c0de3a53fb · GitHub | 12:52 |
pbourke | Bico_Fino: would need to see the full output to know why those images failed | 12:53 |
Bico_Fino | pbourke: Let me run again and save the full output | 12:54 |
*** eaguilar has joined #openstack-kolla | 12:59 | |
*** sdake has joined #openstack-kolla | 12:59 | |
sdake | morning peeps | 13:00 |
*** prameswar has quit IRC | 13:00 | |
sdake | pbourke yo dwag | 13:00 |
pbourke | sdake: morning | 13:00 |
sdake | pbourke i think the gates are finally working | 13:00 |
pbourke | yeah massive thanks to Jeffrey4l | 13:01 |
sdake | pbourke Jeffrey4l did a monster job hammering em out | 13:01 |
pbourke | great to see | 13:01 |
sdake | wondering if you know of any other short term breakages (besides wtf to do with docs) | 13:01 |
sdake | thta are missing from the gate | 13:01 |
*** zhurong has joined #openstack-kolla | 13:02 | |
*** msimonin has quit IRC | 13:03 | |
*** tonanhngo has joined #openstack-kolla | 13:04 | |
*** sdake_ has joined #openstack-kolla | 13:04 | |
sdake_ | [06:01:37] <sdake>wondering if you know of any other short term breakages (besides wtf to do with docs) | 13:05 |
sdake_ | [06:01:52] <sdake>thta are missing from the gate | 13:05 |
sdake_ | yo dawg pbourke ^^ :) | 13:05 |
Bico_Fino | pbourke: Full log now > https://gist.github.com/bicofino/c56b1e1ccf7d35564df489c0de3a53fb | 13:05 |
kollabot | Resource at https://gist.github.com/bicofino/c56b1e1ccf7d35564df489c0de3a53fb exceeds the maximum size. | 13:05 |
*** dave-mccowan has joined #openstack-kolla | 13:05 | |
sdake_ | sorry about the yo dawg ting, its from an email one of my friends (zane bitter) wrote | 13:05 |
sdake_ | which was pretty funny | 13:05 |
*** mdnadeem has quit IRC | 13:05 | |
sdake_ | and its kind of sticking :) | 13:05 |
sdake_ | it will subside eventually :) | 13:05 |
*** tonanhngo has quit IRC | 13:05 | |
sdake_ | funny in that his email was sad but true | 13:06 |
*** sdake has quit IRC | 13:07 | |
sdake_ | anyway guess not :) | 13:11 |
sdake_ | moring dave-mccowan | 13:11 |
dave-mccowan | good morning sdake_ | 13:11 |
sdake_ | dave-mccowan are ou on slack too? | 13:12 |
dave-mccowan | yes, at least on one internal slack server | 13:12 |
sdake_ | is there one client to rule them all | 13:13 |
sdake_ | for mac | 13:13 |
sdake_ | iirc your on a mac | 13:13 |
sdake_ | would rather not have two client windows open - difficult to deal with one window.. | 13:13 |
dave-mccowan | i only know about the official slack client. i haven't looked for others. | 13:13 |
sdake_ | slack client itself has irc support? | 13:13 |
dave-mccowan | oh... i don't think so. i run textual, slack, and spark clients. :-( | 13:14 |
sdake_ | don't forget jabber ;) | 13:14 |
dave-mccowan | :-( | 13:14 |
*** eaguilar_ has joined #openstack-kolla | 13:14 | |
*** sp__ has joined #openstack-kolla | 13:14 | |
sdake_ | atleast jabber doesn't take up a whole window :) | 13:15 |
dave-mccowan | then, we still need webex and email. and sometimes i see people in person. | 13:15 |
*** msimonin has joined #openstack-kolla | 13:15 | |
sdake_ | well thta may not be true | 13:15 |
*** eaguilar has quit IRC | 13:15 | |
sdake_ | ya - trying to sort out how to work with two clients | 13:15 |
*** skramaja has joined #openstack-kolla | 13:16 | |
*** skramaja_ has quit IRC | 13:16 | |
Bico_Fino | pbourke: Looks like I got a bunch of these -> The command '/bin/sh -c echo 'binary not yet available for centos' && /bin/false' returned a non-zero code: 1 | 13:16 |
portdirect | kfox1111: about? | 13:20 |
*** tovin07 has joined #openstack-kolla | 13:20 | |
Bico_Fino | pbourke: I was able to build congress-base that was failing by using —type ubuntu | 13:23 |
Bico_Fino | Going try build everything with —type ubuntu | 13:24 |
portdirect | question to the floor: has anyone run kolla-k8s from a fedora host (or another system the predictable interface names...)? having some fun with setting up ansible genconfig as my dev box has device names that my k8s nodes dont (eg enp3s0 vs eth0) | 13:24 |
sdake_ | portdirect at one point fedora didn't work with centos images | 13:25 |
sdake_ | the reason had to do with something about fedora having a newer something or another that centos couldn't decode | 13:25 |
sdake_ | kernel driver imges i think | 13:25 |
sdake_ | so digging into your question more, kubernets just creates eth0 right? | 13:27 |
sdake_ | if you set internal_interface to eth0 | 13:27 |
sdake_ | that may get the job done | 13:28 |
openstackgerrit | Daniel Gonzalez Nothnagel proposed openstack/kolla: Remove 'ansible' from README directory list https://review.openstack.org/400753 | 13:28 |
*** lamt has joined #openstack-kolla | 13:28 | |
portdirect | yeah - I'm working on that stuff we were talking about yesterday, to try and get the docs a bit more aligned with where we are now. | 13:29 |
openstackgerrit | Merged openstack/kolla: Clean up docs around local registry https://review.openstack.org/392583 | 13:29 |
portdirect | My dev boxes are running F24, and I've got a k8s cluster running on CentOS 7.2 in vagrant, with acesss via kubectl | 13:30 |
portdirect | so at this point: https://github.com/openstack/kolla-kubernetes/blob/master/doc/source/multi-node.rst#configure-kolla | 13:30 |
kollabot | kolla-kubernetes/multi-node.rst at master · openstack/kolla-kubernetes · GitHub | 13:30 |
Bico_Fino | pbourke: —base I mean, not —type. :) | 13:31 |
sdake_ | cool so working on the vagrant dev environment for kolla-kubernetes seems cruical to me | 13:31 |
sdake_ | i had planned to dig into it today to see where it stood and what needs to be done | 13:31 |
portdirect | I'm having some probs simply running kolla-ansible genconfig without freaking out at generating haproxy configs | 13:31 |
sdake_ | i see | 13:31 |
sdake_ | sbezverk probably a good person to contact here | 13:32 |
sdake_ | sbezverk he runs a similiar setup (cenots however) | 13:32 |
sdake_ | sbezverk but it does the same udev funkiness as fedora does with interface names | 13:33 |
sdake_ | portdirect did you read the manual re integrating the config options into globals.yaml? | 13:33 |
portdirect | yeah - I had a similar seup working a month ago... may check out an earlier commit for kolla and kolla-k8s and then fastforawrd till I get stuck again. | 13:34 |
*** tonanhngo has joined #openstack-kolla | 13:34 | |
sdake_ | i think one delta you got going here is your running vagrant | 13:35 |
sdake_ | what interfaces does vagrant expose? | 13:35 |
*** fguillot has joined #openstack-kolla | 13:35 | |
*** tonanhngo has quit IRC | 13:35 | |
sdake_ | my expectation would be vagrant would expose eth0/eth1 | 13:35 |
sdake_ | it may atm only b eexposing eth0 | 13:35 |
sdake_ | needs to expose two interfaces | 13:35 |
sdake_ | which is trivial to do from my understnading | 13:36 |
portdirect | yeah - I may be taking to big a leap with that :/ though it would mean that I could really rip into getting going when i van have everitning in a venv outside and just creat and destroy clusters at will.. | 13:36 |
portdirect | halycon is set up to expose both interfaces | 13:36 |
portdirect | I'll have another crack after lunch and hit up sbezverk when he's about | 13:38 |
*** v1k0d3n has joined #openstack-kolla | 13:46 | |
*** mliima_ has joined #openstack-kolla | 13:46 | |
Bico_Fino | We don’t have the 3.0.1 for https://hub.docker.com/r/kolla/ubuntu-binary-kolla-toolbox/tags/ yet? | 13:47 |
sdake_ | it can't expose host interfaces | 13:49 |
sdake_ | it uses libvirt | 13:49 |
sdake_ | portdirect ^ | 13:49 |
*** mliima has quit IRC | 13:49 | |
sdake_ | libvirt creates its own set of interfaces | 13:49 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla-kubernetes: Service and Mariadb operator template https://review.openstack.org/399972 | 13:51 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla-kubernetes: Mariadb Kubernetes Operator https://review.openstack.org/399263 | 13:51 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla-kubernetes: Kubernetes Operator base https://review.openstack.org/399262 | 13:51 |
*** jgriffith has joined #openstack-kolla | 13:53 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/kolla: Updated from global requirements https://review.openstack.org/400770 | 13:54 |
*** tonanhngo has joined #openstack-kolla | 13:54 | |
openstackgerrit | Merged openstack/kolla: Update Percona repo to current release https://review.openstack.org/399549 | 13:55 |
*** tonanhngo has quit IRC | 13:56 | |
mliima_ | horizon dashboard is broken? | 13:56 |
egonzalez90 | mliima_: not sure, what is not working? | 13:57 |
portdirect | sdake_: rodger | 13:58 |
mliima_ | http://paste.openstack.org/show/590071/ egonzalez90 | 13:58 |
kollabot | Paste #590071 | LodgeIt! | 13:58 |
sdake_ | mliima_ horizon wfm | 13:58 |
*** jtriley has joined #openstack-kolla | 13:58 | |
pbourke | Bico_Fino: so some images are not available for the binary type | 14:01 |
*** n3v3rm0r3r has joined #openstack-kolla | 14:01 | |
Bico_Fino | pbourke: I see. Going try from source then. | 14:02 |
pbourke | Bico_Fino: yes Id recommend that | 14:03 |
*** v1k0d3n has left #openstack-kolla | 14:04 | |
*** v1k0d3n has joined #openstack-kolla | 14:04 | |
*** v1k0d3n has quit IRC | 14:04 | |
*** v1k0d3n has joined #openstack-kolla | 14:04 | |
egonzalez90 | mliima_: are you using debug = true? | 14:05 |
mliima_ | yes | 14:05 |
egonzalez90 | quite old, but seems to be the same https://bugs.launchpad.net/horizon/+bug/1155765 | 14:06 |
openstack | Launchpad bug 1155765 in OpenStack Dashboard (Horizon) "Offline compression enabled but key is missing from offline manifest" [Medium,Fix released] - Assigned to Yves-Gwenael Bourhis (yves-gwenael-bourhis) | 14:06 |
kollabot | Bug #1155765 “Offline compression enabled but key is missing fro...” : Bugs : OpenStack Dashboard (Horizon) | 14:06 |
egonzalez90 | may be a bug in packages | 14:07 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/kolla: Updated from global requirements https://review.openstack.org/400770 | 14:07 |
mliima_ | ok egonzalez90 | 14:07 |
mliima_ | i'll try | 14:07 |
openstackgerrit | Pete Birley proposed openstack/kolla: Fix Designate source image container assets https://review.openstack.org/400730 | 14:08 |
*** skramaja has quit IRC | 14:09 | |
*** Pavo has quit IRC | 14:11 | |
*** tonanhngo has joined #openstack-kolla | 14:15 | |
*** Pavo has joined #openstack-kolla | 14:15 | |
*** tonanhngo has quit IRC | 14:16 | |
openstackgerrit | Ryan Hallisey proposed openstack/kolla-kubernetes: Change services dir to templates dir https://review.openstack.org/399971 | 14:18 |
*** zhurong has quit IRC | 14:21 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/kolla-ansible: Updated from global requirements https://review.openstack.org/400789 | 14:25 |
Bico_Fino | pbourke: Was able to generate all images without error. | 14:27 |
pbourke | Bico_Fino: good to hear | 14:27 |
pron | are there any drawback sof using standlone ceph with kolla? | 14:27 |
Bico_Fino | pbourke: going try kolla-ansible prechecks | 14:27 |
pbourke | Bico_Fino: id also recommend that :) | 14:30 |
pbourke | Bico_Fino: once the prechecks pass its very likely you'll have a clean deployment | 14:31 |
*** msimonin has quit IRC | 14:33 | |
egonzalez90 | pron: im not getting the question | 14:33 |
*** tonanhngo has joined #openstack-kolla | 14:35 | |
*** tonanhngo has quit IRC | 14:36 | |
Bico_Fino | pbourke: prechecks looks fine. | 14:43 |
*** msimonin has joined #openstack-kolla | 14:45 | |
*** msimonin has left #openstack-kolla | 14:46 | |
*** yingjun has joined #openstack-kolla | 14:52 | |
*** tonanhngo has joined #openstack-kolla | 14:55 | |
*** msimonin has joined #openstack-kolla | 14:56 | |
*** eaguilar_ has quit IRC | 14:56 | |
*** tonanhngo has quit IRC | 14:57 | |
*** msimonin has quit IRC | 14:58 | |
v1k0d3n | peterjenkins_: hey man | 14:59 |
v1k0d3n | you around? | 14:59 |
v1k0d3n | i talked with inc0 last night. we're going to write some documentation around halcyon for kolla-kube now that things are shaping up nicely (thanks for your help btw...a lot of good adds in here now). | 15:00 |
Bico_Fino | pbourke: It’s deployed. :) | 15:00 |
*** yingjun has quit IRC | 15:04 | |
*** yingjun has joined #openstack-kolla | 15:04 | |
*** yingjun has quit IRC | 15:08 | |
Bico_Fino | pbourke: kolla-3.0.1.tar.gz on pypi.python.org is missing some fixes(malformed config.js on ironic containers) | 15:10 |
sdake_ | Bico_Fino ya- ironic is busted in all versions of kolla including master | 15:11 |
Bico_Fino | This is the commit https://github.com/openstack/kolla-ansible/commit/b11504d4e1ac2e787e8015d7ccca1cb2f1aa7325 | 15:12 |
kollabot | Fix invalid json in ironic service · openstack/kolla-ansible@b11504d · GitHub | 15:12 |
*** msimonin has joined #openstack-kolla | 15:12 | |
sdake_ | Bico_Fino sean-k-mooney is working on ironic iirc, recommend asking the source ;) | 15:12 |
Bico_Fino | Thanks sdake_ | 15:13 |
*** srwilkers has joined #openstack-kolla | 15:14 | |
*** ppalacios has left #openstack-kolla | 15:17 | |
*** TxGirlGeek has joined #openstack-kolla | 15:18 | |
*** tonanhngo has joined #openstack-kolla | 15:20 | |
sean-k-mooney | sdake_: it should be working on newton+ | 15:22 |
*** tonanhngo has quit IRC | 15:22 | |
sdake_ | bmaas? | 15:22 |
sean-k-mooney | sdake_: yes | 15:22 |
sdake_ | sweet | 15:22 |
sdake_ | well its busted apparently :) | 15:22 |
sean-k-mooney | sdake_: we have a ci that uses kolla to provide baremetal nodes | 15:22 |
sdake_ | Bico_Fino can you file a bug plz | 15:22 |
sdake_ | Bico_Fino si it can be appropriately triaged | 15:22 |
sean-k-mooney | sdake_: wznoinsk was working on it | 15:22 |
sdake_ | sean-k-mooney right wznoinsk perhaps can take a look at Bico_Fino 's issue | 15:23 |
sdake_ | i dont know first thing about ironci :) | 15:23 |
openstackgerrit | Javier Castillo Alcíbar proposed openstack/kolla-ansible: Make sure ceilometer/service_credentials wotks with internalURL https://review.openstack.org/400711 | 15:23 |
*** tovin07 has quit IRC | 15:34 | |
*** tonanhngo has joined #openstack-kolla | 15:38 | |
*** tonanhngo has quit IRC | 15:40 | |
*** unicell1 has joined #openstack-kolla | 15:42 | |
*** unicell has quit IRC | 15:42 | |
*** ayoung has quit IRC | 15:45 | |
*** bmace has quit IRC | 15:46 | |
*** f13o has joined #openstack-kolla | 15:51 | |
*** ntpttr is now known as ntpttr-vacation | 15:52 | |
*** magicboiz has quit IRC | 15:55 | |
*** tonanhngo has joined #openstack-kolla | 15:55 | |
*** dave-mccowan has quit IRC | 15:55 | |
*** tonanhngo has quit IRC | 15:55 | |
*** zhubingbing_ has quit IRC | 15:58 | |
*** berendt has joined #openstack-kolla | 16:00 | |
*** magicboiz has joined #openstack-kolla | 16:01 | |
Bico_Fino | going check that sdake_ | 16:02 |
*** f13o has quit IRC | 16:04 | |
*** inc0 has joined #openstack-kolla | 16:05 | |
*** prameswar has joined #openstack-kolla | 16:05 | |
inc0 | good morning | 16:05 |
egonzalez90 | morning inc0 | 16:05 |
*** sayantani01 has joined #openstack-kolla | 16:06 | |
inc0 | how is my favorite community today? | 16:09 |
*** senk has quit IRC | 16:10 | |
*** dave-mccowan has joined #openstack-kolla | 16:10 | |
*** Pavo has quit IRC | 16:11 | |
srwilkers | hello inc0 | 16:11 |
*** Pavo has joined #openstack-kolla | 16:11 | |
inc0 | srwilkers, hey, got an business for you m8 | 16:12 |
inc0 | so hide while you can;) | 16:12 |
srwilkers | uh oh | 16:12 |
srwilkers | feel free to pm me | 16:12 |
inc0 | nah, it's cool | 16:12 |
Bico_Fino | sdake_: I changed the templates inside /usr/local/share/kolla/ansible/roles/ironic/templates, doing a deploy again | 16:13 |
inc0 | so in your github repo you already have mariadb and keystone | 16:14 |
inc0 | all helmy helmy and cool | 16:14 |
inc0 | what would you say to making it more kolla-k8s | 16:15 |
inc0 | and start porting it to kolla? | 16:15 |
srwilkers | thats actually what im working on currently | 16:15 |
*** msimonin has quit IRC | 16:15 | |
*** tonanhngo has joined #openstack-kolla | 16:16 | |
inc0 | then sir you are reading my mind, I will be thrilled to see it:) | 16:16 |
srwilkers | :) | 16:17 |
*** msimonin has joined #openstack-kolla | 16:17 | |
*** tonanhngo has quit IRC | 16:17 | |
Pavo | so..... good morning everyone | 16:17 |
srwilkers | ey Pavo | 16:17 |
Bico_Fino | already 2 PM here | 16:17 |
Bico_Fino | lol | 16:17 |
Pavo | I finally got TLS working lastnight | 16:17 |
inc0 | yay | 16:17 |
inc0 | what was the issue? | 16:18 |
Pavo | honestly think it was the way I had the routes on the host | 16:18 |
Pavo | nodes | 16:18 |
Pavo | going to redo it today with my vlans set back up | 16:18 |
Pavo | but ran into another issue | 16:19 |
Pavo | admin-openrc.sh after deploying with TLS was using all external endpoints | 16:19 |
Pavo | which was using my external domain name | 16:20 |
Pavo | why does this happen? | 16:20 |
inc0 | Pavo, well, by design tbh;) | 16:20 |
inc0 | but that's easy to change, it's jsut openrc | 16:20 |
Pavo | I would imagine that admin-openrc.sh would only use internal endpoints | 16:21 |
Pavo | who in their right mind would use admin-openrc.sh from outside is beyond me | 16:21 |
Pavo | so the template for admin-openrc.sh is? | 16:22 |
egonzalez90 | tools/openrc-example | 16:22 |
egonzalez90 | sorry, this one ansible/roles/common/templates/admin-openrc.sh.j2 | 16:23 |
Pavo | hmm interesting | 16:25 |
Pavo | export OS_AUTH_URL={{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_admin_port }}/v3 | 16:25 |
Pavo | its using kolla_internal_fqdn | 16:25 |
Pavo | which I do not have set in globals | 16:25 |
*** diogogmt has joined #openstack-kolla | 16:25 | |
Pavo | which should by default use kolla_internal_vip_address | 16:26 |
egonzalez90 | yup, weird. Did you used kolla-ansible post-deploy to create openrc? | 16:27 |
Pavo | yeah | 16:27 |
openstackgerrit | Christian Berendt proposed openstack/kolla: Install MySQL-python with pip in openstack-base container (type source) https://review.openstack.org/400849 | 16:27 |
*** ayoung has joined #openstack-kolla | 16:27 | |
Pavo | think I really need to setup a DNS server | 16:32 |
*** tonanhngo has joined #openstack-kolla | 16:35 | |
portdirect | Pavo: do you need FedRAMP for your deployments? (asking out of interest mainly) | 16:36 |
*** tonanhngo has quit IRC | 16:36 | |
Pavo | never heard of it, let me look it up | 16:36 |
Pavo | ah | 16:37 |
Pavo | nah we have a RMF process that they have to go through | 16:37 |
openstackgerrit | Paul Bourke (pbourke) proposed openstack/kolla: Install neutron-vpnaas in neutron-server https://review.openstack.org/400867 | 16:40 |
*** rmart04_ has joined #openstack-kolla | 16:46 | |
*** jascott1 has joined #openstack-kolla | 16:48 | |
*** jascott1 has quit IRC | 16:49 | |
*** rmart04 has quit IRC | 16:49 | |
*** rmart04_ is now known as rmart04 | 16:49 | |
*** senk has joined #openstack-kolla | 16:49 | |
*** matrohon has quit IRC | 16:49 | |
*** jascott1 has joined #openstack-kolla | 16:49 | |
*** zhangshuai has quit IRC | 16:52 | |
*** magicboiz has quit IRC | 16:52 | |
*** zhangshuai has joined #openstack-kolla | 16:52 | |
*** inc0 has quit IRC | 16:53 | |
*** tonanhngo has joined #openstack-kolla | 16:55 | |
*** inc0 has joined #openstack-kolla | 16:55 | |
*** tonanhngo has quit IRC | 16:56 | |
*** kristian__ has joined #openstack-kolla | 16:57 | |
kristian__ | Hi sdake_ and portdirect | 16:58 |
portdirect | word | 16:58 |
*** berendt has quit IRC | 16:59 | |
kristian__ | portdirect: have you found something in the logs? | 17:00 |
portdirect | no sorry :( | 17:01 |
kristian__ | :/ ok then | 17:01 |
Bico_Fino | sdake_: Got ironic running. | 17:01 |
*** huikang has joined #openstack-kolla | 17:04 | |
*** athomas has quit IRC | 17:05 | |
pbourke | Bico_Fino: which driver, pxe? | 17:05 |
pbourke | Jeffrey4l: just noticed rootwrap.conf is owned by neutron, I assume this is bad | 17:05 |
Bico_Fino | pbourke: all the ironic containers. | 17:06 |
Bico_Fino | pbourke: Need configure now | 17:06 |
*** fragatina has quit IRC | 17:06 | |
Bico_Fino | I’m following this -> http://docs.openstack.org/developer/kolla/ironic-guide.html | 17:06 |
kollabot | Ironic in Kolla — kolla 4.0.0.0b2.dev53 documentation | 17:06 |
pbourke | Bico_Fino: so you haven't actually proivsioned a server with it yet | 17:06 |
kristian__ | portdirect: do you know how to get murano and magnum running on kolla with dashboard? and is trove available to deploy with kolla? | 17:06 |
Bico_Fino | not yet pbourke | 17:06 |
pbourke | Bico_Fino: ok :) | 17:06 |
Bico_Fino | This is my goal for today. :P | 17:06 |
pbourke | Bico_Fino: im at that stage also but am waiting for access to some hardware to actually test it | 17:07 |
pbourke | Bico_Fino: so be interested to know how you get on | 17:07 |
Bico_Fino | pbourke: I’m using Kolla 3.0.1(Newton) | 17:07 |
Bico_Fino | I’m debbuging this now > ERROR nova.compute.manager [req-93641741-c952-44aa-b213-eeb720eb9cde - - - - -] No compute node record for host openstack1 on nova_compute_ironic | 17:08 |
*** athomas has joined #openstack-kolla | 17:09 | |
Bico_Fino | You got this error on yours pbourke ? | 17:11 |
portdirect | kristian__: sry, I'm not using either of these within kolla yet, you will need to get horizon running with a db cache backend - there are ansible roles for both of these services however, I dont think there is ansible role for trove. | 17:11 |
kristian__ | portdirect: ok but with 3.0.1 when I tried it I couldnt see it in horizon | 17:12 |
pbourke | Bico_Fino: it sounds familiar but Im not sure what it means off the top of my head... like I said I haven't got to the stage where I can provision a server yet | 17:12 |
kristian__ | do you think it should work on 3.0.2? | 17:12 |
Bico_Fino | pbourke: I see. | 17:13 |
*** huikang has quit IRC | 17:15 | |
*** tonanhngo has joined #openstack-kolla | 17:15 | |
*** tonanhngo has quit IRC | 17:17 | |
*** newmember has joined #openstack-kolla | 17:17 | |
portdirect | kristian__: I think you will need to set these up as plugins during image building: http://docs.openstack.org/developer/kolla/image-building.html#plugin-functionality | 17:18 |
kollabot | Building Container Images — kolla 4.0.0.0b2.dev53 documentation | 17:18 |
*** sdake_ has quit IRC | 17:18 | |
kristian__ | portdirect: so rebuild all of my images?? | 17:18 |
portdirect | kristian__: this may help (for getting info about the plugins you need), but note the image produced is *definitely* not compatible with kolla: https://github.com/portdirect/harbor/blob/latest/docker/openstack/openstack-horizon/openstack-horizon-httpd/Dockerfile | 17:20 |
kollabot | harbor/Dockerfile at latest · portdirect/harbor · GitHub | 17:20 |
egonzalez90 | kristian__: trove ansible is under review ATM | 17:20 |
portdirect | kristian__: you should only need to build the horizon image afaik, but I'm really not the best person to ask :/ | 17:20 |
kristian__ | ok thanks | 17:21 |
*** msimonin has quit IRC | 17:21 | |
*** inc0 has quit IRC | 17:22 | |
*** egonzalez90 has quit IRC | 17:23 | |
*** sdake has joined #openstack-kolla | 17:24 | |
*** wwriverrat has joined #openstack-kolla | 17:25 | |
*** rmart04 has quit IRC | 17:30 | |
mliima_ | guys, need act here https://review.openstack.org/#/c/399715/ | 17:34 |
mliima_ | https://review.openstack.org/#/c/398320/ and https://review.openstack.org/#/c/400734/ | 17:34 |
*** unicell1 has quit IRC | 17:35 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Update Percona repo to current release https://review.openstack.org/400889 | 17:35 |
*** fguillot has quit IRC | 17:36 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Update Percona repo to current release https://review.openstack.org/400892 | 17:37 |
Jeffrey4l | pbourke, re rootwrap.conf, in which container? | 17:38 |
*** fguillot has joined #openstack-kolla | 17:38 | |
pbourke | Jeffrey4l: all the neutron containers | 17:39 |
pbourke | Jeffrey4l: I assume nova is the same | 17:39 |
Jeffrey4l | pbourke, hmm, yep. all containers are the same. it is not good. | 17:39 |
pbourke | Jeffrey4l: that said the filter file for vpnaas is owned by root and its not being read | 17:39 |
Bico_Fino | this one? | 17:39 |
Bico_Fino | (neutron-server)[neutron@openstack1 /]$ ls -la /etc/neutron/rootwrap.conf | 17:39 |
Bico_Fino | -rw-r--r-- 11 neutron neutron 1219 Nov 2 17:30 /etc/neutron/rootwrap.conf | 17:39 |
pbourke | Bico_Fino: yes | 17:39 |
Jeffrey4l | this is talked in the ml. | 17:40 |
pbourke | yeah I remember sam saying something about it | 17:40 |
pbourke | would have to dig back | 17:40 |
Jeffrey4l | btw, how u guys search mail in http://lists.openstack.org/pipermail/openstack-dev/ ? | 17:40 |
kollabot | OpenStack Open Source Cloud Computing Software » The OpenStack-dev Archives | 17:40 |
pbourke | go away kollabot ! | 17:40 |
jascott1 | i'll take that one out as well | 17:42 |
openstackgerrit | Eduardo Gonzalez proposed openstack/kolla-ansible: Pull swift-object-expirer image https://review.openstack.org/400894 | 17:42 |
*** inc0 has joined #openstack-kolla | 17:42 | |
*** tonanhngo has joined #openstack-kolla | 17:42 | |
pbourke | Jeffrey4l: not sure if this is the best way but https://www.mail-archive.com/openstack-dev@lists.openstack.org/ is searchable | 17:43 |
kollabot | openstack-dev | 17:43 |
pbourke | jascott1: thanks :) | 17:43 |
Jeffrey4l | thanks. | 17:43 |
wwriverrat | Oh great Kolla gurus (or folks who know LOTS more than me): I need to somehow inject a custom pip.conf (targeting --extra-index-url) when pip is installed for Kolla to use. We use some custom package dependencies in private repos and would like to be able to pull those packages in also. Is there a "blessed" way to do this (or maybe some ideas how we might override how pip.conf is installed)? | 17:44 |
*** kollabot has quit IRC | 17:44 | |
pbourke | Jeffrey4l: http://lists.openstack.org/pipermail/openstack-dev/2016-September/104519.html | 17:44 |
inc0 | wwriverrat, that's interesting problem, I think I know how to help | 17:45 |
openstackgerrit | Eduardo Gonzalez proposed openstack/kolla-ansible: Tacker NFV Ansible support https://review.openstack.org/399179 | 17:45 |
*** kollabot has joined #openstack-kolla | 17:45 | |
wwriverrat | awesome :-) | 17:45 |
Jeffrey4l | pbourke, yep. ( i got it in my gmail ;-) ) | 17:45 |
Jeffrey4l | wwriverrat, check this https://github.com/openstack/kolla/blob/master/tools/setup_gate.sh#L30,L37 | 17:46 |
inc0 | wwriverrat, http://docs.openstack.org/developer/kolla/image-building.html#dockerfile-customisation this is mechanism to customize stuff inside docker | 17:46 |
kollabot | kolla/setup_gate.sh at master · openstack/kolla · GitHub | 17:46 |
kollabot | Building Container Images — kolla 4.0.0.0b2.dev53 documentation | 17:46 |
pbourke | Jeffrey4l: have you tried vpnaas by any chance? | 17:47 |
inc0 | wwriverrat, idea is to use some block to create your pip.ini | 17:47 |
Jeffrey4l | pbourke, no. any issue? | 17:47 |
wwriverrat | Awesome. I’ll start digging into both ways. Thanks | 17:47 |
inc0 | https://github.com/openstack/kolla/blob/master/docker/base/Dockerfile.j2#L7 like this one | 17:47 |
kollabot | kolla/Dockerfile.j2 at master · openstack/kolla · GitHub | 17:47 |
pbourke | Jeffrey4l: it seems to have a problem with rootwrap filters. That's how I noticed the permission thing | 17:47 |
Jeffrey4l | pbourke, error message? | 17:48 |
pbourke | Jeffrey4l: http://paste.openstack.org/show/590108/ | 17:48 |
kollabot | Paste #590108 | LodgeIt! | 17:48 |
Jeffrey4l | it should work if the rootwrapper owned by neutron. pbourke | 17:48 |
jascott1 | thats another one | 17:48 |
pbourke | Jeffrey4l: the filters are there but its the only file owned by root. Currently rebuilding with it owned by neutron | 17:48 |
wwriverrat | @inc0: Yeah. I’m working with harlowja and he mentioned the same reference | 17:48 |
pbourke | Jeffrey4l: its world readable though so I cant see why it would be an issue | 17:48 |
Jeffrey4l | inc0, should we remove the include_header and include_footer parameter? they are marked deprecated since newton, already. | 17:49 |
inc0 | Jeffrey4l, good catch, yeah | 17:49 |
inc0 | wanna publish bug for it? | 17:49 |
inc0 | and mark it as low hanging fruit | 17:49 |
*** kollabot has quit IRC | 17:49 | |
*** kollabot has joined #openstack-kolla | 17:49 | |
Jeffrey4l | roger. | 17:51 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/kolla: Updated from global requirements https://review.openstack.org/400770 | 17:51 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/kolla-ansible: Updated from global requirements https://review.openstack.org/400789 | 17:52 |
Jeffrey4l | pbourke, need copy this file into /etc/neutron/rootwrap.d/ file https://github.com/openstack/neutron-vpnaas/tree/master/etc/neutron/rootwrap.d | 17:52 |
kollabot | neutron-vpnaas/etc/neutron/rootwrap.d at master · openstack/neutron-vpnaas · GitHub | 17:52 |
Jeffrey4l | need this line in your case: https://github.com/openstack/neutron-vpnaas/blob/master/etc/neutron/rootwrap.d/vpnaas.filters#L14 | 17:52 |
kollabot | neutron-vpnaas/vpnaas.filters at master · openstack/neutron-vpnaas · GitHub | 17:52 |
pbourke | Jeffrey4l: yeah I have it | 17:55 |
*** kollabot has quit IRC | 17:55 | |
pbourke | Jeffrey4l: so not sure why neutron isn't loading it | 17:55 |
*** kollabot has joined #openstack-kolla | 17:55 | |
*** diogogmt has quit IRC | 17:56 | |
Jeffrey4l | hrm ;/ | 17:57 |
*** fragatina has joined #openstack-kolla | 17:59 | |
*** jtriley has quit IRC | 17:59 | |
*** diogogmt has joined #openstack-kolla | 17:59 | |
Jeffrey4l | pbourke, inc0 please review this https://review.openstack.org/400707 , it is blocked mitaka branch, right now. | 18:00 |
kollabot | Gerrit Code Review | 18:00 |
jascott1 | ugh wtf | 18:00 |
mliima_ | haha inc0 | 18:02 |
mliima_ | https://review.openstack.org/#/c/400707/ | 18:02 |
kollabot | Gerrit Code Review | 18:02 |
inc0 | yeah | 18:02 |
inc0 | that was one fast merge | 18:02 |
inc0 | ;) | 18:02 |
harlowja | what's kollabot do btw? | 18:02 |
harlowja | :-P | 18:02 |
inc0 | harlowja, beats me | 18:02 |
harlowja | u guys should just use my https://github.com/harlowja/gerritbot2 :-P | 18:02 |
kollabot | GitHub - harlowja/gerritbot2: The next generation of gerritbot (with multi-backend support!) | 18:03 |
harlowja | thx kollabot that's your replacement, ha | 18:03 |
Jeffrey4l | thanks. | 18:03 |
*** kollabot has quit IRC | 18:03 | |
inc0 | harlowja, tbh I have no idea who created it;) but well, kollabot is welcome here as anyone | 18:03 |
harlowja | haha | 18:03 |
harlowja | maybe its really a person | 18:03 |
harlowja | with feelings | 18:03 |
inc0 | we're tolerant bunch, bot lives matter to us too | 18:03 |
harlowja | :-P | 18:03 |
*** kollabot has joined #openstack-kolla | 18:03 | |
inc0 | welcome kollabot | 18:04 |
harlowja | wwriverrat u figure it out? | 18:04 |
Jeffrey4l | harlowja, inc0 <sdake>Jeffrey4l i think that is jascott's toy | 18:04 |
harlowja | Jeffrey4l gotcha | 18:04 |
harlowja | gerritbot2 is mine, lol | 18:04 |
jascott1 | you are correct | 18:04 |
wwriverrat | not yet. still poking around :-) | 18:04 |
harlowja | k | 18:04 |
harlowja | i think u can use use openstack_base_header | 18:05 |
harlowja | to get it in | 18:05 |
harlowja | other option is we can further templatize that pip_install macro | 18:05 |
jascott1 | btw I just took out the url-title so it wont be blabbing uselessly after every url paste | 18:05 |
jascott1 | harlowja I will check it out | 18:05 |
mliima_ | Jeffrey4l, does it works for ubuntu source? https://review.openstack.org/#/c/395957/ | 18:05 |
harlowja | jascott1 u might like https://github.com/harlowja/gerritbot2/blob/master/plugins/gerritbot/gerritbot.py#L265-L298 | 18:05 |
harlowja | https://github.com/harlowja/gerritbot2/blob/master/plugins/gerritbot/templates/review.md (when a review is mentioneD) | 18:06 |
harlowja | ^ that jinja2 is used | 18:06 |
Jeffrey4l | mliima_, seems no. i didn't fix this in Ubuntu ( i does not use Ubuntu :( ) | 18:06 |
*** sp__ has quit IRC | 18:07 | |
openstackgerrit | Merged openstack/kolla-ansible: Remove the disable of ipv6 in gate https://review.openstack.org/400707 | 18:07 |
Jeffrey4l | but i will try to fix it on Ubuntu ;) mliima_ | 18:07 |
mliima_ | ok Jeffrey4l | 18:07 |
*** msimonin has joined #openstack-kolla | 18:08 | |
*** hyakuhei has quit IRC | 18:08 | |
*** unicell has joined #openstack-kolla | 18:10 | |
*** Pavo has quit IRC | 18:11 | |
*** Pavo has joined #openstack-kolla | 18:11 | |
*** pbourke has quit IRC | 18:14 | |
*** pbourke has joined #openstack-kolla | 18:14 | |
*** jtriley has joined #openstack-kolla | 18:15 | |
*** hyakuhei has joined #openstack-kolla | 18:15 | |
*** prameswar has quit IRC | 18:15 | |
*** huikang has joined #openstack-kolla | 18:16 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Remove the disable of ipv6 in gate https://review.openstack.org/400922 | 18:16 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Remove the disable of ipv6 in gate https://review.openstack.org/400923 | 18:17 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Update Percona repo to current release https://review.openstack.org/400892 | 18:18 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Bump OpenStack service version https://review.openstack.org/394271 | 18:18 |
*** rmart04 has joined #openstack-kolla | 18:19 | |
*** senk has quit IRC | 18:19 | |
*** huikang has quit IRC | 18:20 | |
*** senk has joined #openstack-kolla | 18:21 | |
*** unicell has quit IRC | 18:26 | |
*** shardy has quit IRC | 18:27 | |
*** huikang has joined #openstack-kolla | 18:27 | |
*** hyakuhei has quit IRC | 18:28 | |
*** hyakuhei has joined #openstack-kolla | 18:28 | |
*** hyakuhei has quit IRC | 18:28 | |
*** hyakuhei has joined #openstack-kolla | 18:28 | |
*** rmart04_ has joined #openstack-kolla | 18:34 | |
v1k0d3n | so inc0...working on an AIO and have a question.... | 18:35 |
v1k0d3n | sorry, to be more clear... | 18:35 |
v1k0d3n | AIO with single interface (the bridge stuff...which sdake has asked me to blueprint for possible AIO pretask). | 18:36 |
v1k0d3n | think i have one interface mixed up still because i am getting an error typical if you have TLS on an interface that shouldn't have TLS (what you guys were trying to explain to my slow brain i believe the other day). | 18:36 |
*** rmart04 has quit IRC | 18:36 | |
*** rmart04_ is now known as rmart04 | 18:36 | |
v1k0d3n | SSL exception connecting to https://openstack.jinkit.com:5000/v3/auth/tokens: bad handshake: Error([('SSL routines', 'SSL23_GET_SERVER_HELLO', 'unknown protocol')],) | 18:37 |
v1k0d3n | that is most likely because i have the wrong interface configured with HAproxy...is that correct? sdake does this make sense? | 18:37 |
*** kristian__ has quit IRC | 18:40 | |
inc0 | v1k0d3n, question is | 18:41 |
*** diogogmt has quit IRC | 18:43 | |
*** Pavo has quit IRC | 18:43 | |
*** Pavo has joined #openstack-kolla | 18:44 | |
*** diogogmt has joined #openstack-kolla | 18:45 | |
*** strigazi is now known as strigazi_AFK | 18:46 | |
inc0 | does openstack.jinkit.com resolves to interface you want tls in? | 18:47 |
*** Pavo has quit IRC | 18:49 | |
*** jgriffith has quit IRC | 18:51 | |
*** Pavo has joined #openstack-kolla | 18:52 | |
huikang | Hi, since kolla has been split to kolla and kolla-ansible both of which have the docker directory, which one should I use to build images? | 18:54 |
*** unicell has joined #openstack-kolla | 18:54 | |
*** diogogmt has quit IRC | 18:55 | |
*** Pavo has quit IRC | 18:56 | |
*** Pavo has joined #openstack-kolla | 18:57 | |
inc0 | huikang, kolla-ansible does not have docker directory | 18:58 |
inc0 | ;) | 18:58 |
huikang | inc0, https://github.com/openstack/kolla-ansible/tree/master/docker | 18:59 |
inc0 | huikang, ok, we didn't remove it I guess, shouldn't be there | 19:00 |
*** diogogmt has joined #openstack-kolla | 19:00 | |
inc0 | kolla is used for build | 19:00 |
*** senk has quit IRC | 19:00 | |
huikang | inc0, thanks | 19:00 |
*** f13o has joined #openstack-kolla | 19:00 | |
*** inc0 has quit IRC | 19:02 | |
*** sdake_ has joined #openstack-kolla | 19:03 | |
*** newmember has quit IRC | 19:04 | |
jascott1 | oh ya docker folder is still there | 19:05 |
*** f13o has quit IRC | 19:05 | |
*** sdake has quit IRC | 19:06 | |
*** inc0 has joined #openstack-kolla | 19:09 | |
mliima_ | https://review.openstack.org/#/c/398320/ inc0 huikang | 19:10 |
*** Pavo has quit IRC | 19:13 | |
*** huikang has quit IRC | 19:13 | |
*** Pavo has joined #openstack-kolla | 19:14 | |
*** inc0 has quit IRC | 19:19 | |
openstackgerrit | Ryan Hallisey proposed openstack/kolla-kubernetes: Service and Mariadb operator template https://review.openstack.org/399972 | 19:22 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla-kubernetes: Mariadb Kubernetes Operator https://review.openstack.org/399263 | 19:22 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla-kubernetes: Kubernetes Operator base https://review.openstack.org/399262 | 19:22 |
*** schwicht has joined #openstack-kolla | 19:23 | |
rhallisey | sdake_, ^ | 19:23 |
rhallisey | that's in better shape in terms of structure | 19:23 |
*** huikang has joined #openstack-kolla | 19:25 | |
*** eaguilar has joined #openstack-kolla | 19:25 | |
*** matrohon has joined #openstack-kolla | 19:28 | |
*** gfidente has quit IRC | 19:28 | |
*** awiddersheim has joined #openstack-kolla | 19:28 | |
*** sayantani01 has quit IRC | 19:30 | |
*** awidders_ has quit IRC | 19:31 | |
v1k0d3n | inc0 left. | 19:32 |
*** Bico_Fino_ has joined #openstack-kolla | 19:32 | |
*** kristian__ has joined #openstack-kolla | 19:33 | |
v1k0d3n | tbh...let me send a link of interfaces and globals.yaml | 19:34 |
*** kristian__ has quit IRC | 19:34 | |
*** Bico_Fino has quit IRC | 19:34 | |
*** Bico_Fino_ is now known as Bico_Fino | 19:34 | |
*** kristian__ has joined #openstack-kolla | 19:34 | |
v1k0d3n | https://gist.github.com/v1k0d3n/f29b57f39ef1d7b928519a5b2ec4c994 | 19:34 |
kristian__ | Hi. Google is down for me :( | 19:36 |
v1k0d3n | kristian__: aaaahhhhh | 19:36 |
*** huikang has quit IRC | 19:36 | |
kristian__ | all google services down even their dns | 19:36 |
*** daneyon has joined #openstack-kolla | 19:37 | |
*** daneyon has left #openstack-kolla | 19:38 | |
*** Bico_Fino has quit IRC | 19:39 | |
*** senk has joined #openstack-kolla | 19:43 | |
sdake_ | rhallisey in a meeting atm, will take a look | 19:44 |
jascott1 | wha? | 19:44 |
*** schwicht has quit IRC | 19:47 | |
*** msimonin1 has joined #openstack-kolla | 19:48 | |
*** msimonin has quit IRC | 19:50 | |
*** diogogmt has quit IRC | 20:00 | |
sdake_ | mliima_ thanks for that | 20:01 |
sdake_ | jascott1 huh? | 20:01 |
sdake_ | jascott1 talking to me or kristian? | 20:01 |
*** DaveTurner has joined #openstack-kolla | 20:04 | |
*** inc0 has joined #openstack-kolla | 20:06 | |
*** huikang has joined #openstack-kolla | 20:08 | |
*** dave-mccowan has quit IRC | 20:10 | |
*** Pavo has quit IRC | 20:11 | |
*** sayantani01 has joined #openstack-kolla | 20:11 | |
*** Pavo has joined #openstack-kolla | 20:11 | |
*** rhallisey has quit IRC | 20:12 | |
*** senk has quit IRC | 20:17 | |
*** huikang has quit IRC | 20:22 | |
*** eaguilar has quit IRC | 20:27 | |
*** eaguilar has joined #openstack-kolla | 20:27 | |
kristian__ | skdake_ do you know how to setup murano and magnum on kolla horizon? | 20:30 |
kristian__ | * sdake_: | 20:31 |
*** huikang has joined #openstack-kolla | 20:31 | |
*** huikang has quit IRC | 20:32 | |
*** huikang has joined #openstack-kolla | 20:33 | |
*** Pavo_ has joined #openstack-kolla | 20:36 | |
*** diogogmt has joined #openstack-kolla | 20:37 | |
*** Pavo has quit IRC | 20:37 | |
*** Pavo_ is now known as Pavo | 20:38 | |
jascott1 | sdake sorry that was in response to 'google' is down | 20:38 |
inc0 | google is down?:( | 20:40 |
jascott1 | not for me | 20:40 |
jascott1 | cant ping 8.8.8.8 tho, thought that worked before | 20:41 |
inc0 | it did | 20:41 |
inc0 | I can ping it | 20:41 |
jascott1 | oh im on proxy | 20:41 |
inc0 | was meant to ask you | 20:42 |
jascott1 | ya it worky from cloud1 | 20:42 |
*** Pavo has quit IRC | 20:43 | |
kristian__ | its working for me now | 20:44 |
kristian__ | but in some parts of my country it isnt | 20:44 |
*** Pavo has joined #openstack-kolla | 20:45 | |
v1k0d3n | kristian__: where are you located? | 20:46 |
v1k0d3n | http://downdetector.com/status/google/map/ | 20:46 |
v1k0d3n | i noticed an outage in EU | 20:46 |
kristian__ | slovakia | 20:46 |
v1k0d3n | ah...there you go. | 20:46 |
v1k0d3n | makes more sense now. | 20:46 |
kristian__ | v1k0d3n: can you please help me setup murano and magnum on horizon? | 20:51 |
*** inc0 has quit IRC | 20:52 | |
*** ayoung has quit IRC | 20:55 | |
*** ayoung has joined #openstack-kolla | 20:56 | |
v1k0d3n | kristian__: would be happy to help, but in the middle of things myself. | 20:57 |
v1k0d3n | is it really late where you are? | 20:57 |
kristian__ | oh ok | 20:57 |
kristian__ | yes | 20:57 |
v1k0d3n | think you're quite a few hours ahead, right? | 20:57 |
kristian__ | 9:57 pm | 20:58 |
kristian__ | yes I will be up will midnight | 20:58 |
v1k0d3n | ok. is this for a lab, poc, development? | 20:58 |
kristian__ | lab, "mini cloud gaming" | 20:58 |
kristian__ | thats why the gpu is in there that I have problem passing | 20:59 |
*** sp__ has joined #openstack-kolla | 21:00 | |
*** newmember has joined #openstack-kolla | 21:01 | |
*** inc0 has joined #openstack-kolla | 21:01 | |
*** ayoung has quit IRC | 21:01 | |
*** f13o has joined #openstack-kolla | 21:04 | |
*** schwicht has joined #openstack-kolla | 21:04 | |
sdake_ | v1k0d3n re the halycon dev env for kubernetes | 21:05 |
sdake_ | v1k0d3n whats it take to make centos as a base image work in that? | 21:05 |
-openstackstatus- NOTICE: Gerrit is offline until 21:30 UTC for scheduled maintenance: http://lists.openstack.org/pipermail/openstack-dev/2016-November/107379.html | 21:09 | |
*** ChanServ changes topic to "Gerrit is offline until 21:30 UTC for scheduled maintenance: http://lists.openstack.org/pipermail/openstack-dev/2016-November/107379.html" | 21:09 | |
*** Pavo has quit IRC | 21:11 | |
*** jgriffith has joined #openstack-kolla | 21:13 | |
*** rmart04 has quit IRC | 21:16 | |
*** jgriffith has quit IRC | 21:17 | |
*** sp__ has quit IRC | 21:18 | |
*** jgriffith has joined #openstack-kolla | 21:21 | |
*** eaguilar has quit IRC | 21:23 | |
*** msimonin1 has quit IRC | 21:24 | |
v1k0d3n | sdake_: what do you mean? | 21:26 |
v1k0d3n | oh... | 21:27 |
v1k0d3n | gotcha...one sec, i'll show you. | 21:27 |
v1k0d3n | sdake_: you have two places...the image which is in config.rb | 21:28 |
v1k0d3n | https://github.com/att-comdev/halcyon-vagrant-kubernetes/blob/master/config.rb#L2 | 21:28 |
v1k0d3n | then here for ansible scripts: https://github.com/att-comdev/halcyon-kubernetes/blob/1ff13d38d93ea54a9053f0f89daf0346acdb0a5f/kube-deploy/group_vars/all.yml#L17 | 21:29 |
*** jgriffith has quit IRC | 21:29 | |
sdake_ | that second variable controls what? | 21:30 |
sdake_ | config setup? | 21:30 |
*** jascott1 has quit IRC | 21:31 | |
*** eaguilar has joined #openstack-kolla | 21:32 | |
*** jascott1 has joined #openstack-kolla | 21:32 | |
sdake_ | v1k0d3n seems like centos is ready to go with changing those two variables? | 21:32 |
*** jascott1 has quit IRC | 21:34 | |
*** jascott1 has joined #openstack-kolla | 21:34 | |
*** inc0 has quit IRC | 21:34 | |
*** Jeffrey4l has quit IRC | 21:34 | |
*** eaguilar has quit IRC | 21:34 | |
*** Jeffrey4l has joined #openstack-kolla | 21:35 | |
srwilkers | sdake_, yeah, it should be | 21:35 |
sdake_ | srwilkers nice - what is plan for persistent storage for the dev environment | 21:35 |
*** huikang has quit IRC | 21:36 | |
v1k0d3n | for some reason, i was thinking Ubuntu was set, no? | 21:37 |
v1k0d3n | think i'm losing my brains. haha | 21:37 |
sdake_ | v1k0d3n ubuntu is default | 21:37 |
*** huikang has joined #openstack-kolla | 21:37 | |
v1k0d3n | ah, ok. | 21:37 |
sdake_ | v1k0d3n there is an implementation of centos | 21:37 |
v1k0d3n | just checking | 21:37 |
v1k0d3n | oh, there is definitely...yes. | 21:37 |
sdake_ | so PVCs | 21:38 |
sdake_ | need that | 21:38 |
v1k0d3n | and persistent storage, we are currently working on this actually. | 21:38 |
sdake_ | cool | 21:38 |
v1k0d3n | coming. | 21:38 |
v1k0d3n | using Ceph. | 21:38 |
v1k0d3n | which was assumed would be inline with kolla? | 21:38 |
sdake_ | i don't know of any other answer but i am not a kubernetes expert | 21:38 |
*** jascott1 has quit IRC | 21:38 | |
sdake_ | i know there is storage plugins for other systems | 21:39 |
sdake_ | like gce/etc | 21:39 |
sdake_ | but nothing that would work in a dev environment easily for aio | 21:39 |
*** ChanServ changes topic to "Looking for Ansible deployment? git checkout http://github.com/openstack/kolla-ansible; New to Kolla? Please read the documentation here: http://docs.openstack.org/developer/kolla/; Kolla IRC meetngs on Wednesdays @ 16:00 UTC - see agenda @ https://goo.gl/OXB0DL - IRC channel is *LOGGED* @ http://goo.gl/3mzZ7b (old logs from #kolla http://goo.gl/VKpPzA):" | 21:40 | |
sbezverk | sdake_: for aio we can also use host mounted storage | 21:40 |
*** huikang has quit IRC | 21:40 | |
sdake_ | sbezverk ya - however vagrant spawns vms | 21:40 |
sbezverk | sdake_ ceph only really required for multinode kube cluster | 21:40 |
sdake_ | sbezverk the idea is a dev environment with multiple nodes | 21:40 |
v1k0d3n | so the trick is not with ceph actually (that is done) | 21:40 |
v1k0d3n | the trouble is with the pvc actually | 21:42 |
*** sdake_ has quit IRC | 21:42 | |
v1k0d3n | we had to patch controller, and have an image ready for that. | 21:42 |
*** jascott1 has joined #openstack-kolla | 21:42 | |
sbezverk | v1k0d3n: what was wrong with pvc? | 21:43 |
v1k0d3n | https://quay.io/repository/attcomdev/kube-controller-manager | 21:43 |
alanmeadows | sbezverk: lots of pain | 21:44 |
*** jgriffith has joined #openstack-kolla | 21:44 | |
alanmeadows | sbezverk: but we got it going... combination of several things | 21:44 |
alanmeadows | one is 1.5.0.beta1 to offer a working rbd storage provisioner, but also a custom kube-controller-manager container with the ceph tools | 21:45 |
sbezverk | alanmeadows: interesting, the only pain we saw was when worker with attached rbd volume was going off the air, then ceph cluster kept locks for it, other than that everything worked well. | 21:45 |
alanmeadows | but our ceph chart, once what we have is up at EOD should work with that configuration | 21:46 |
*** ayoung has joined #openstack-kolla | 21:46 | |
alanmeadows | sbezverk: I think part of it depends on what deploy paradigm, namely whats housing the kube-controller-manager process wich tries to launch rbd. For kubeadm out of the box, thats a gcr container with no ceph utils | 21:47 |
sbezverk | alanmeadows: we used two approaches, one running specially baked image with all ceph bits in it and second just install on kubelet host, ceph-common. In either case worked well. | 21:49 |
alanmeadows | yup, we went with the latter, per v1k0d3ns paste above | 21:49 |
alanmeadows | except that for reliable PVC rbd provisioning we had to go jump to 1.5.0.beta1 which brought in some PetSet rename pain | 21:50 |
*** msimonin has joined #openstack-kolla | 21:50 | |
sbezverk | alanmeadows: really ?!?!?! so there is no backward compatibitiy between petset and the new name they introduced in 1.5.0?? | 21:51 |
alanmeadows | the fun of v1alpha APIs? :) | 21:51 |
alanmeadows | also no transition for existing petsets | 21:52 |
alanmeadows | as far as I can tell | 21:52 |
alanmeadows | DIY | 21:52 |
sbezverk | alanmeadows: wow, it is not nice for sure.. I guess I better get 1.5.0 going and start using new convention :-( | 21:53 |
v1k0d3n | sbezverk: just use halcyon when we update it :) | 21:53 |
v1k0d3n | to be fair...still pretty beta. | 21:53 |
alanmeadows | so you were doing rbd volume claims/pvc with pre1.5.0? What version? | 21:53 |
sbezverk | v1k0d3n: thank you but no, I like real hardware :-) | 21:54 |
alanmeadows | Not functional for us in v1.4.6 | 21:54 |
alanmeadows | https://github.com/kubernetes/kubernetes/commit/5445ccf4cbc8aa5794e125f1b66dcc16ae4a9572 | 21:55 |
*** matrohon has quit IRC | 21:56 | |
sbezverk | alanmeadows: ok so with this change we do not need to pre-create rbd volume. What about initialization of filesystem on it? | 21:58 |
*** jgriffith_ has joined #openstack-kolla | 22:03 | |
*** inc0 has joined #openstack-kolla | 22:03 | |
*** Pavo has joined #openstack-kolla | 22:03 | |
alanmeadows | sbezverk: you can request an fs with the PVC, haven't tried that yet | 22:04 |
alanmeadows | sbezverk: but because we use petsets with volumeClaimTemplates (1:1 PVC with container automatically) we needed RBD PVCs | 22:04 |
alanmeadows | but other then PetSets we already did some helm pre/post jobs to manufacture the rbd volumes we needed | 22:05 |
alanmeadows | but at this point need PVCs to work | 22:05 |
*** jtriley_ has joined #openstack-kolla | 22:05 | |
*** jgriffith has quit IRC | 22:06 | |
*** bmace has joined #openstack-kolla | 22:06 | |
*** f13o has quit IRC | 22:07 | |
*** msimonin has quit IRC | 22:07 | |
*** jtriley has quit IRC | 22:08 | |
sbezverk | alanmeadows: got it. I hope whoever submitted that commit, figured it out, as we saw some issue when pod tried to use PVC/PV pointing to a rbd volume where FS has not been created | 22:09 |
sbezverk | kubelet could not mount it and pod stayed in hanging state | 22:09 |
*** jtriley_ has quit IRC | 22:10 | |
*** jgriffith_ is now known as jgriffith | 22:13 | |
*** srwilkers has quit IRC | 22:14 | |
*** schwicht has quit IRC | 22:17 | |
*** schwicht has joined #openstack-kolla | 22:19 | |
*** lamt has quit IRC | 22:20 | |
*** sdake has joined #openstack-kolla | 22:23 | |
sdake | v1k0d3n one problem with a mac is lack of removable battery :( | 22:23 |
sdake | v1k0d3n needless to say lost power during our conversation | 22:24 |
sdake | if your still about, you were saying the problem si with pvc? | 22:24 |
*** schwicht has quit IRC | 22:24 | |
jascott1 | le seigh. non removable everything these days :( | 22:29 |
sdake | ya | 22:31 |
sdake | batteries included ftw :) | 22:31 |
Pavo | sdake can you try https://ddi.hopto.org | 22:31 |
sdake | pavo sure | 22:31 |
sdake | pavo although not all ngiht :) | 22:31 |
Pavo | should work | 22:31 |
pmisiak | quit | 22:31 |
*** pmisiak has quit IRC | 22:32 | |
sdake | pavo looks good you have tls | 22:32 |
sdake | your cert isn't ssigned | 22:32 |
Pavo | yeah | 22:32 |
sdake | which is normal for a self-signed cert | 22:32 |
sdake | a proper cloud would pay good money to have their certs signed | 22:32 |
*** Serlex has quit IRC | 22:32 | |
Pavo | ok leaving it alone | 22:32 |
Pavo | this is only for PoC | 22:32 |
sdake | roger | 22:32 |
sdake | i'd open all the other openstack endpoint ports | 22:33 |
sdake | you can determine that via oenstack endpoint list | 22:33 |
Pavo | and maybe something to allow others to test stuff out | 22:33 |
sdake | that way people can use openstack cli to access your cloud | 22:33 |
*** pmisiak has joined #openstack-kolla | 22:34 | |
Pavo | I really don't like the idea of cli access from outside | 22:34 |
sdake | ok then dont do that :) | 22:35 |
sdake | it is safe and secur ewith tls however | 22:36 |
sdake | without tls, well i wouldn't do that | 22:36 |
*** pmisiak has quit IRC | 22:36 | |
sdake | in a real cloud people will want to be able to access via clis | 22:36 |
*** pmisiak has joined #openstack-kolla | 22:36 | |
Pavo | well a real cloud would also have more than 10Mb connection | 22:37 |
Pavo | lol :P | 22:37 |
Pavo | thats my upload limit | 22:37 |
Pavo | which sucks | 22:37 |
sdake | you have a point :) | 22:37 |
sdake | v1k0d3n the halyson work looks good for a dev environment for kolla from my pov | 22:38 |
sdake | laycion | 22:38 |
Pavo | ok so looks like kolla-ansible done, now to start on kolla-k8s | 22:38 |
sdake | v1k0d3n i think the one blocker is the lack of Ceph | 22:38 |
sdake | v1k0d3n do you need any help there? | 22:38 |
sdake | pavo kolla-k8s not really pocable at this point | 22:38 |
sdake | pavo its a work in progress | 22:39 |
sdake | pavo not to discourage you from palying with it, but i am struggling myself to get it operational | 22:39 |
v1k0d3n | sdake: very close. | 22:40 |
v1k0d3n | maybe by eod perhaps. alanmeadows is working on this. | 22:40 |
sdake | v1k0d3n nice | 22:40 |
v1k0d3n | it's been a bit of a challenge. | 22:40 |
sdake | sup alanmeadows | 22:40 |
sdake | nice to meet you | 22:40 |
v1k0d3n | so i have a guy planning to write the updates for kolla-k8s documentation, using halcyon...since this will be maintained to support exactly what kolla-k8s needs. | 22:41 |
sdake | ya we did same sort of thing with heat when kolla was started actually | 22:41 |
sdake | v1k0d3n sounds good | 22:41 |
v1k0d3n | i remember the days of kolla via heat actually! | 22:41 |
sdake | intereseting | 22:41 |
sdake | ya, we have come along way :) | 22:41 |
v1k0d3n | sdake: did you see that halcyon also deploys straight to openstack as well? | 22:42 |
v1k0d3n | most definitely has. | 22:42 |
sdake | i did see that | 22:42 |
sdake | i'd rather use it to setup a bare metal simulation of kubernetes | 22:42 |
v1k0d3n | yup. look at config.rb, and vagrant. | 22:42 |
sdake | so devs have a way to run | 22:42 |
v1k0d3n | vagrantfile | 22:42 |
*** sayantani01 has quit IRC | 22:42 | |
v1k0d3n | so that's why i split out the repos... | 22:43 |
v1k0d3n | so ansible could deploy straight to bare metal. | 22:43 |
v1k0d3n | with no need for the vagrant bits. | 22:43 |
*** sayantani01 has joined #openstack-kolla | 22:43 | |
sdake | cool | 22:43 |
sdake | not sure kolla has an answer for baremetal on kubernetes, atm we re using ironic in ansible land | 22:43 |
v1k0d3n | in our scenario, we use bare metal too | 22:43 |
v1k0d3n | first this: https://github.com/att-comdev/dockerfiles/tree/master/maas | 22:43 |
v1k0d3n | then bare metal provision. | 22:44 |
sdake | looks interesting | 22:44 |
v1k0d3n | and provisioning part will automatically assign into the kubernetes cluster using daemonsets. | 22:44 |
awiddersheim | with kolla the `reconfigure` command | 22:44 |
awiddersheim | really just takes update configs | 22:45 |
alanmeadows | the maas stuff is missing a few things | 22:45 |
awiddersheim | and distributes them restarting anything that needs it? | 22:45 |
v1k0d3n | so we wanted to be modular. | 22:45 |
awiddersheim | with re-running `deploy` do the same thing? | 22:45 |
v1k0d3n | honestly, if this was greenfield for us...we could use ironic. in our case, we already have maas. so this transitions for us. | 22:45 |
alanmeadows | its going to be wrapped into a helm chart, with proper config maps shortly, and then the apt-foo removed for individual containers | 22:45 |
awiddersheim | do you run `deploy` if you are adding new nodes? | 22:45 |
v1k0d3n | however we are making it extremely pluggable. no religion on bmp. | 22:46 |
*** sdake has quit IRC | 22:46 | |
*** sdake has joined #openstack-kolla | 22:46 | |
sdake | keyboard shut down | 22:47 |
sdake | not sure what happened | 22:47 |
*** klindgren has joined #openstack-kolla | 22:47 | |
v1k0d3n | sdake: i'm taking a hard look at the AIO single-nic thing for kolla-a | 22:48 |
v1k0d3n | have a question.... | 22:48 |
v1k0d3n | i made a config error, but want to identify what i need to do. could use your expertise. | 22:49 |
sdake | shoot | 22:49 |
sdake | not sure i can help :) | 22:49 |
sdake | networking not my expertise | 22:49 |
sdake | but will give it a go | 22:49 |
v1k0d3n | here's config...it's split into three files on gist... | 22:49 |
v1k0d3n | first globals.yaml. then interfaces config, then interfaces | 22:50 |
v1k0d3n | https://gist.github.com/v1k0d3n/f29b57f39ef1d7b928519a5b2ec4c994 | 22:50 |
v1k0d3n | so here is what's happening...unfortunately (i need to correct behavior with a config change). | 22:50 |
v1k0d3n | first going to openstack.jinkit.com (172.29.236.25 or br-mgmt) works like a charm. | 22:51 |
v1k0d3n | TLS...i like that. | 22:51 |
*** schwicht has joined #openstack-kolla | 22:52 | |
klindgren | Howdy, I have a question regarding kolla and creating openstack service users (nova/galnce/keystone ect ect). Its also indirectly related to: https://review.openstack.org/#/c/332590/ | 22:52 |
sdake | Sorry, the website openstack.jinkit.com cannot be found | 22:52 |
sdake | is what chrome spit out | 22:52 |
v1k0d3n | second...when i assign the physi1 interface to flat, that picks up the 192.168.4.0/22 (br-kolla) flat network perfectly. (happy about this also). | 22:52 |
v1k0d3n | i know. you can reach...internal | 22:52 |
v1k0d3n | but here's the bad part i want to correct.... | 22:53 |
klindgren | Their is a comment about handling the of userid mapping between the system and the the container. But dont you already have this problem with the volume mounts that are currently being performed? | 22:53 |
v1k0d3n | the openrc files get generated with openstack.jinkit.com, no cert definition, and when i point to the crt i get empty [] responses. | 22:53 |
sdake | klindgren it should work just like normal openstack does on bare metal - however let me look at review | 22:53 |
klindgren | https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/nova/tasks/start_compute.yml#L11-L21 | 22:53 |
klindgren | The issue I think is that the users when created inside the container you guys dont specify a specific userid | 22:54 |
klindgren | so when maping in the logging directory, we already have a mismatch between what user has access on the the container hosts to what user has access in the container host no? | 22:54 |
klindgren | Ie: https://github.com/openstack/kolla/blob/master/docker/glance/glance-base/Dockerfile.j2#L35 | 22:55 |
klindgren | is going to cause the glance user to be added with the next availabile 500 level user. | 22:56 |
sdake | klindgren moment | 22:57 |
sdake | v1k0d3n i dont follow those last two sttements | 22:58 |
klindgren | which is fine until the base image includes a new server that changes what the glance user is in the image. It also cause username mismatches between the host and the container for mounted volumes, because the userid in the container can be all over the place. | 22:58 |
sdake | specifically i can reach internal, how? | 22:58 |
klindgren | sdake, np - I can wait my turn :-D | 22:58 |
sdake | klindgren not a robot - need a moment to process the review :) | 22:58 |
*** schwicht has quit IRC | 22:58 | |
harlowja | y u not a robot | 22:59 |
harlowja | lol | 22:59 |
sdake | sup harlowja | 22:59 |
harlowja | :) | 22:59 |
sdake | fwiw i dont think having godadydd or not godaddy in the commit message matters at all | 22:59 |
sdake | i'm not sur ewhy that dude said that stuff about "your company" :) | 22:59 |
harlowja | ha | 23:00 |
harlowja | meh, whatever | 23:00 |
sdake | klindgren no | 23:00 |
sdake | harlowja note there is a tool for maintnaining up to date temporary forks of openstack projects | 23:01 |
sdake | harlowja one command does it all | 23:01 |
harlowja | ya, i've heard about that | 23:01 |
harlowja | git? | 23:01 |
harlowja | lol | 23:01 |
harlowja | :-P | 23:01 |
*** schwicht has joined #openstack-kolla | 23:01 | |
v1k0d3n | sdake btw...that config is the primer for what will end up taking care of that blueprint (from a template pov). | 23:01 |
sdake | nah it automatically rebases | 23:01 |
harlowja | git rebase | 23:01 |
harlowja | lol | 23:01 |
sdake | v1k0d3n undersotood | 23:01 |
*** sayantani01 has quit IRC | 23:01 | |
v1k0d3n | that could essentially be one interface in reality. | 23:01 |
sdake | harlowja automatically rebases to latest z stream | 23:01 |
sdake | harlowja its a pretty cool tool, i've used it | 23:02 |
harlowja | ya, git-upstream or something | 23:02 |
sdake | harlowja back when i was jerking around with "convergence" | 23:02 |
sdake | ya thats it | 23:02 |
sdake | maybe thats not it | 23:02 |
sdake | not sure | 23:02 |
sdake | pbourke uses it in oracle | 23:02 |
sdake | they carry some patches on top | 23:03 |
sdake | haven't actually looked at your code | 23:03 |
harlowja | ya, such a tool is only useful if u've got the rest of the pipeline :-P | 23:03 |
harlowja | patching not so hard, its the rest of the pipeline, ha | 23:03 |
sdake | harlowja right - noticed you have kolla rolling through jenkins - nice progress! | 23:03 |
awiddersheim | sdake: some workflow questions for you | 23:03 |
harlowja | sdake its getting somewhere, ha | 23:03 |
awiddersheim | when you do a `reconfigure` where/when does the old container get removed? | 23:03 |
sdake | awiddersheim you will have to wait a moment | 23:04 |
sdake | klindgren we set permissions of all relevant files here: | 23:04 |
*** schwicht has quit IRC | 23:06 | |
sdake | klindgren https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/heat/templates/heat-api.json.j2#L11-L17 | 23:06 |
sdake | that is how that permission problem is solved | 23:06 |
sdake | imo its subptimal, we should preallocate UIDs (I think as you suggested) for every service in openstack-bse or base | 23:07 |
sdake | ok v1k0d3n | 23:07 |
klindgren | is that executed within the container? | 23:07 |
sdake | klindgren right | 23:08 |
sdake | in set_configs.py | 23:08 |
sdake | set_configs.py parses the json | 23:08 |
sdake | that json file is the api to the containers | 23:09 |
*** bmace has quit IRC | 23:09 | |
klindgren | kk - I haven't been doing too much of the kolla/ansible stuff. Just was looking at some stuff with josh and noticed the userads being done without uids. Having had issues with that in the past. Especially on shared filesystems (like with glance and an nfs store) | 23:12 |
*** bmace has joined #openstack-kolla | 23:12 | |
klindgren | So you would be open to a patch that has a mapping of openstack services -> uid so that the uids are consistently set. Also so that the uid's can be mapped from container -> host for things that are pisted externaly to the container. | 23:13 |
v1k0d3n | ok sdake? | 23:13 |
klindgren | s/pisted/persisted/ | 23:14 |
*** Bico_Fino has joined #openstack-kolla | 23:14 | |
sdake | sorry got distracted | 23:14 |
v1k0d3n | it's cool | 23:15 |
*** schwicht has joined #openstack-kolla | 23:16 | |
sdake | v1k0d3n moment having conversation with wife | 23:17 |
v1k0d3n | ok. | 23:18 |
jascott1 | should the UID have to exist in code or can we just enforce it in the stock dockerfiles? | 23:18 |
*** sayantani01 has joined #openstack-kolla | 23:18 | |
jascott1 | s/enforce/implement | 23:18 |
*** n3v3rm0r3r has quit IRC | 23:19 | |
*** TxGirlGeek has quit IRC | 23:21 | |
klindgren | I think it would make sense to have it as a way that people could easily override the stock values if needed for their deployment? | 23:23 |
jascott1 | always nice but then we add 40 lines to global yaml? | 23:24 |
jascott1 | could put the defaults in the templates with logic to override IF they exist | 23:24 |
jascott1 | in globals | 23:24 |
openstackgerrit | Alexis Rivera proposed openstack/kolla-ansible: renaming-kolla-build-command https://review.openstack.org/401005 | 23:25 |
jascott1 | I guess they need to be unique across services? | 23:25 |
klindgren | That seems like it would be acceptable. | 23:25 |
jascott1 | cant just use 888 across the baord? | 23:26 |
sdake | jascott1 ok guys got to queue, v1k0d3n first ;) | 23:26 |
sdake | rather not jascott1 :) | 23:26 |
sdake | i dont know how that got in there | 23:26 |
*** kristian__ has quit IRC | 23:27 | |
klindgren | jascottl - honestly I am not actually sure if they need to be unique. | 23:27 |
*** liyifeng has joined #openstack-kolla | 23:27 | |
sdake | so v1k0d3n not clear on what your asking | 23:27 |
sdake | i see globals.yaml in that gist | 23:27 |
sdake | but dont' see other things | 23:27 |
harlowja | jascott1 666 | 23:28 |
harlowja | lol | 23:28 |
jascott1 | almost said it | 23:28 |
jascott1 | haha | 23:28 |
harlowja | :-p | 23:28 |
v1k0d3n | sdake i explained. | 23:28 |
harlowja | prob klindgren favorite number... | 23:28 |
sdake | v1k0d3n right, so how do i get at the other files in teh gist | 23:28 |
v1k0d3n | but let you help others. | 23:28 |
*** amaged__ has quit IRC | 23:28 | |
v1k0d3n | they are all in the same exact gist. | 23:28 |
v1k0d3n | scroll down | 23:28 |
*** amaged__ has joined #openstack-kolla | 23:28 | |
sdake | ok let me check that out | 23:28 |
klindgren | jascott1, if they were all the same, it would allow ops to create an "openstack user" on the host. Then the containers can internally map that uid to whatever name they want. | 23:29 |
*** amaged__ has quit IRC | 23:29 | |
*** sharon_so has joined #openstack-kolla | 23:29 | |
sdake | klindgren one point, i am not the end all be all of open to patches - the core reviewers sort that out :) | 23:29 |
klindgren | IE in glance 888 is the glance user, in the nove container 888 is nova.... but on the host everything just uses the openstack user which is 888 as well. | 23:30 |
sdake | klindgren write a blueprint, include work items, will put in discussion state, we can discuss | 23:30 |
klindgren | sdake, fair. Some ideas though are like a hell no. Others are like a "meh" :-D | 23:30 |
sdake | klindgren nah we are pretty open to most ideas | 23:31 |
sdake | if people write the code we generally merge it | 23:31 |
sdake | i think where things get tricky is repo splits and stuff like that | 23:31 |
harlowja | klindgren is like an expert in jinja2 now also | 23:31 |
harlowja | super-expert | 23:31 |
sdake | that is super disruptive as can be seen by the last 2 weeks of kolla reorg :) | 23:31 |
harlowja | ya | 23:31 |
sdake | ok v1k0d3n see your gists | 23:32 |
sdake | didn't realize gist had multiple file submission capability | 23:33 |
*** sharon_so has quit IRC | 23:33 | |
v1k0d3n | yeah, that's why i like using gist | 23:33 |
v1k0d3n | i can just update and repost or attach multiple files when troubleshooting with someone. | 23:34 |
sdake | [15:53:41] <v1k0d3n>the openrc files get generated with openstack.jinkit.com, no cert definition, and when i point to the crt i get empty [] responses. | 23:34 |
sdake | v1k0d3n this is what i was missing in the barrage of q&a :) | 23:35 |
sdake | so OS_CA_CERT needs to be defined if tls is enabled in the post-deploy playbook | 23:35 |
sdake | v1k0d3n hwo are you pointing it to the crt file? | 23:35 |
sdake | /etc/kolla/certificates/haproxy-ca.crt? | 23:35 |
*** schwicht has quit IRC | 23:36 | |
sdake | v1k0d3n essentially there is a bug in post-deploy which doesn't set OS_CA_CERT | 23:37 |
sdake | when enable_tls = yes | 23:37 |
sdake | OS_CA_CERT file also needs to be readable | 23:37 |
sdake | so if your not running as root, typically would hae to copy that file somewhere next to your client | 23:38 |
sdake | from my understanding if you have a properly signed certificate, you don't need the OS_CA_CERT at all | 23:38 |
sdake | so not sure if etting OS_CA_CERT is the correct answer | 23:39 |
sdake | really depends on if the certificate is self signed or not | 23:39 |
v1k0d3n | sdake: so trying that....but throwing errors | 23:39 |
v1k0d3n | one sec | 23:39 |
sdake | to work around your problem, recommend setting OS_CA_CERT as follows | 23:39 |
sdake | export OS_CACERT=/Users/sdake/demo/haproxy-ca.crt | 23:40 |
sdake | kolla's tls options are locked down | 23:40 |
v1k0d3n | Unable to establish connection to http://openstack.jinkit.com:35357/v3/auth/tokens: HTTPConnectionPool(host='openstack.jinkit.com' | 23:40 |
sdake | i have seen some people have problems with tls in their environments | 23:40 |
v1k0d3n | i did set OS ... | 23:40 |
v1k0d3n | oh wait.. | 23:40 |
v1k0d3n | one sec.... | 23:40 |
sdake | v1k0d3n did you source it? | 23:40 |
v1k0d3n | so OS_CACERT.... | 23:41 |
sdake | the cause of the tls problems in their environments is unknown - if we reduce ssecurity on tls it works for them | 23:41 |
sdake | ya sorry had it wrong :) | 23:41 |
v1k0d3n | that cert needs to be copied to home and user needs permissions? | 23:41 |
sdake | right | 23:41 |
v1k0d3n | ok | 23:41 |
v1k0d3n | let me try | 23:41 |
v1k0d3n | one sec | 23:41 |
sdake | that file is the public certificate | 23:41 |
sdake | ok whos up next :) | 23:42 |
sdake | klindgren ? | 23:42 |
sdake | btw got 40 mins on the clock until dinner with "Ansible Community Manager" | 23:42 |
inc0 | sdake, wanna mention ansible override feature? | 23:43 |
v1k0d3n | sdake: The request you have made requires authentication. (HTTP 401) (Request-ID: req-5742fcb9-447d-4fa1-9556-82372433b7bc) | 23:43 |
sdake | inc0 feel free, not sure what you mean :) | 23:43 |
inc0 | sdake, "ansible community manager" | 23:43 |
sdake | aka wife | 23:43 |
klindgren | I think I am good. Just not sure if we need a unique ID per service or if its acceptable to have a standard uid. I think a standard uid would actually work out jsut fine. | 23:44 |
inc0 | ahh | 23:44 |
inc0 | ok | 23:44 |
inc0 | say hello to her | 23:44 |
sdake | klindgren we actually wanted to do that in newton | 23:44 |
inc0 | brain is fried ;( | 23:44 |
sdake | klindgren but we were out of time | 23:44 |
sdake | klindgren so we got what we got now | 23:44 |
sdake | klindgren faster implementation | 23:45 |
klindgren | so was their a blueprint I can glob on to? | 23:45 |
sdake | define "standard uid" | 23:45 |
sdake | klindgren possible although with the reorg, no idea where it is | 23:45 |
*** Bico_Fino has quit IRC | 23:45 | |
sdake | klindgren moment, let me see if i can find it | 23:46 |
klindgren | so using uid say 888 in all the conainers for service users. | 23:46 |
klindgren | "standard uid" | 23:46 |
sdake | i see | 23:46 |
sdake | you mean like nova = 888 glance = 888 | 23:46 |
klindgren | so on the host one would create 888 as the openstack user. | 23:46 |
harlowja | 666 | 23:46 |
harlowja | lol | 23:46 |
klindgren | anythign thats mapped into the host, 888 would be nova in the nova containers | 23:47 |
klindgren | glance in the glance containers | 23:47 |
sdake | some of our containers communicate | 23:47 |
sdake | so that model doesn't totally work | 23:47 |
awiddersheim | can anyone tell me how an `upgrade` cleans up the old containers | 23:47 |
sdake | the one example that comes to mind is nova + libvirt | 23:47 |
awiddersheim | I'm nto seeing it anywhere | 23:47 |
sdake | awiddersheim it doesn't clean up the docker cache | 23:47 |
sdake | awiddersheim if that is what your after | 23:48 |
awiddersheim | sure but I'm not seeing in the code where the current running is stopped | 23:48 |
sdake | inc0 will do :) | 23:48 |
sdake | inc0 mind taking that q since you spearheaded the upgrade work | 23:48 |
awiddersheim | sdake: using horizon as an example since it's simple | 23:49 |
awiddersheim | https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/horizon/tasks/upgrade.yml | 23:49 |
sdake | inc0 know your fried :) | 23:49 |
awiddersheim | it just copies over new config and starts container | 23:49 |
awiddersheim | but I never see where any exiting older container gets stopped | 23:49 |
inc0 | awiddersheim, our "start" task will redeploy | 23:49 |
klindgren | sdake, not sure I follow how this is an issue for nova/libvirt? Does nova write files that libvirt needs to read? or vice versa? | 23:49 |
sdake | klindgren right | 23:49 |
awiddersheim | inc0: ok... get I get some more details about what redeploy means? | 23:49 |
sdake | file reads/writes go both ways | 23:49 |
sdake | so they need two uids | 23:49 |
sdake | and possibly a third, i forget the details | 23:50 |
awiddersheim | inc0: I see in kolla_docker it does a compare but it seems to only do that compare on an existing container and if they are different in some way it will remove one | 23:50 |
inc0 | awiddersheim, https://github.com/openstack/kolla-ansible/blob/master/ansible/library/kolla_docker.py#L563 | 23:51 |
awiddersheim | right I was looking at this part | 23:51 |
klindgren | sdake, confused how this is not broken currently then? If the libvirt container doesn't have the nova user installed in it. and/or its using a differnt uid for nova than the nova container. | 23:51 |
klindgren | you are going to run into permisions issues, unless the permissions were set wide to begin with? | 23:52 |
sdake | klindgren it does indeed work, i'm not sure how, jeffrey4l sorted that one out | 23:52 |
awiddersheim | so when I `upgrade` should I not change | 23:52 |
sdake | klindgren that one was complicated | 23:52 |
awiddersheim | the tag? | 23:52 |
sdake | klindgren jeffrey is in apac | 23:52 |
sdake | klindgren best to sk him directly :) | 23:52 |
inc0 | awiddersheim, tag should be caught by this | 23:53 |
sdake | klindgren or i could sk him and get back to you during the day - i often see him although not over turkey day | 23:53 |
inc0 | and it should redeploy new tag | 23:53 |
awiddersheim | okay | 23:53 |
sdake | awiddersheim also it compares the hash | 23:53 |
sdake | not just the tag | 23:53 |
awiddersheim | it's not obvious to me how that is happening I guess | 23:53 |
awiddersheim | just lookign at the code | 23:53 |
awiddersheim | but | 23:53 |
awiddersheim | perhaps i need to stare at it longer | 23:53 |
klindgren | jeffery == jeffery4l ? | 23:54 |
inc0 | awiddersheim, or we made some horrible mistake;) did it work? | 23:54 |
sdake | klindgren right | 23:54 |
awiddersheim | inc0: haven't done it yet | 23:54 |
klindgren | kk - I will reach out and hash some stuff out with him | 23:54 |
sdake | upgrade definately works | 23:54 |
awiddersheim | wanted to understand how it worked first | 23:54 |
awiddersheim | I guess when I look at this code | 23:54 |
sdake | there is iirc some services which lack upgrade | 23:54 |
inc0 | kk | 23:54 |
sdake | some of the non-core projects | 23:55 |
awiddersheim | I expect to have a 3.0 tag | 23:55 |
awiddersheim | then I push a new container with 3.1 | 23:55 |
awiddersheim | but when I look at this code it seems like it will only compare the 3.1 tagged container to itself | 23:55 |
inc0 | that would be bug, but I don't think that's the case | 23:55 |
sdake | it doesn't look at the tag, it looks at the hash iirc | 23:55 |
sdake | looking at tag is not sufficient | 23:56 |
sdake | klindgren cool - he is really the best resource on this, he did most of the design since we were in crunch mode | 23:56 |
*** Bico_Fino has joined #openstack-kolla | 23:56 | |
sdake | and to do it right the way we desired wasn't going to happen | 23:56 |
inc0 | awiddersheim, it will base on container name afair | 23:57 |
inc0 | and images changed | 23:57 |
inc0 | so nova_scheduler container will be different when you try to redeploy | 23:57 |
inc0 | or upgrade | 23:57 |
v1k0d3n | sdake: that didn't work. | 23:57 |
inc0 | hence it will deploy new image | 23:57 |
inc0 | hence upgrade! | 23:57 |
v1k0d3n | think it went by in all the back and forth. | 23:57 |
awiddersheim | inc0: so docker pulls down the new container tag | 23:57 |
inc0 | yeah | 23:57 |
awiddersheim | kind of overwriting the odl one | 23:58 |
awiddersheim | and this compare will see the change | 23:58 |
sdake | jascott1 from above comment: [16:24:04] <jascott1>always nice but then we add 40 lines to global yaml? | 23:58 |
inc0 | althout I *strongly* suggest to do kolla-ansible pull before upgrade | 23:58 |
awiddersheim | and remove the old one | 23:58 |
awiddersheim | ok | 23:58 |
awiddersheim | inc0: another quick question | 23:58 |
inc0 | it will remove old container (container, not image) and start new one with newer image | 23:58 |
inc0 | you have both images saved | 23:58 |
awiddersheim | when I want to expand the number of compute hosts I have | 23:58 |
sdake | jascott1 please read: http://docs.openstack.org/developer/kolla/deployment-philosophy.html | 23:59 |
awiddersheim | do I just do another `deploy` or do I also need to do a `reconfigure`? | 23:59 |
inc0 | awiddersheim, for compute nodes just deploy should cut it | 23:59 |
inc0 | as nova-compute will introduce itself | 23:59 |
awiddersheim | I guess that is a bad example... maybe something that needs rabbit configs | 23:59 |
awiddersheim | or something | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!