| *** renmak__ has quit IRC | 00:01 | |
| *** rfxn has joined #openstack-kolla | 00:03 | |
| *** vhosakot has quit IRC | 00:06 | |
| *** Teck7 has quit IRC | 00:07 | |
| *** Teck7 has joined #openstack-kolla | 00:09 | |
| *** rfxn has quit IRC | 00:12 | |
| *** rfxn has joined #openstack-kolla | 00:14 | |
| *** aagate has quit IRC | 00:15 | |
| *** emccormick has quit IRC | 00:15 | |
| *** Teck7 has quit IRC | 00:17 | |
| *** itlinux has joined #openstack-kolla | 00:22 | |
| *** itlinux_ has joined #openstack-kolla | 00:22 | |
| *** kevinz has joined #openstack-kolla | 00:27 | |
| *** ducttape_ has joined #openstack-kolla | 00:31 | |
| *** emccormick has joined #openstack-kolla | 00:32 | |
| *** Teck7 has joined #openstack-kolla | 00:32 | |
| *** jtriley has joined #openstack-kolla | 00:36 | |
| *** ducttape_ has quit IRC | 00:36 | |
| *** mdnadeem has joined #openstack-kolla | 00:36 | |
| *** rfxn has quit IRC | 00:36 | |
| *** rfxn has joined #openstack-kolla | 00:38 | |
| *** emccormick has quit IRC | 00:38 | |
| *** ducttape_ has joined #openstack-kolla | 00:38 | |
| *** ducttape_ has quit IRC | 00:40 | |
| *** Teck7 has quit IRC | 00:41 | |
| *** jtriley has quit IRC | 00:41 | |
| *** ducttape_ has joined #openstack-kolla | 00:41 | |
| *** Teck7 has joined #openstack-kolla | 00:41 | |
| *** ducttape_ has quit IRC | 00:43 | |
| *** ducttap__ has joined #openstack-kolla | 00:43 | |
| *** rfxn has quit IRC | 00:43 | |
| *** duonghq has joined #openstack-kolla | 00:44 | |
| *** rfxn has joined #openstack-kolla | 00:45 | |
| *** ducttap__ has quit IRC | 00:47 | |
| *** srwilkers_ has joined #openstack-kolla | 00:47 | |
| *** Teck7 has quit IRC | 00:49 | |
| *** Teck7 has joined #openstack-kolla | 00:51 | |
| *** ramishra has joined #openstack-kolla | 00:51 | |
| *** rfxn has quit IRC | 00:54 | |
| *** rfxn has joined #openstack-kolla | 00:56 | |
| *** unicell has quit IRC | 00:58 | |
| *** Teck7 has quit IRC | 00:59 | |
| *** tonanhngo has quit IRC | 01:04 | |
| *** tovin07_ has joined #openstack-kolla | 01:06 | |
| *** tonanhngo has joined #openstack-kolla | 01:12 | |
| *** tonanhngo_ has joined #openstack-kolla | 01:16 | |
| *** tonanhngo has quit IRC | 01:16 | |
| *** tonanhngo_ has quit IRC | 01:20 | |
| *** itlinux_ has quit IRC | 01:24 | |
| *** itlinux has quit IRC | 01:24 | |
| *** https_GK1wmSU has joined #openstack-kolla | 01:30 | |
| *** https_GK1wmSU has left #openstack-kolla | 01:31 | |
| duonghq | morning guys | 01:36 |
|---|---|---|
| *** stefan_bo has joined #openstack-kolla | 01:49 | |
| *** jamesbenson has joined #openstack-kolla | 01:50 | |
| *** jamesbenson has quit IRC | 01:54 | |
| inc0 | hey Duong | 01:57 |
| *** slagle has quit IRC | 01:59 | |
| *** lan1 has joined #openstack-kolla | 02:03 | |
| *** iniazi has joined #openstack-kolla | 02:04 | |
| *** dixiaoli has joined #openstack-kolla | 02:05 | |
| *** itlinux_ has joined #openstack-kolla | 02:07 | |
| *** itlinux has joined #openstack-kolla | 02:07 | |
| *** iniazi_ has quit IRC | 02:08 | |
| *** slagle has joined #openstack-kolla | 02:12 | |
| *** awiddersheim has quit IRC | 02:12 | |
| *** awiddersheim has joined #openstack-kolla | 02:13 | |
| *** dave-mcc_ has joined #openstack-kolla | 02:41 | |
| *** dave-mccowan has quit IRC | 02:42 | |
| *** jamesbenson has joined #openstack-kolla | 02:45 | |
| *** dixiaoli has quit IRC | 02:47 | |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Add gnocchi log in fluentd https://review.openstack.org/489575 | 02:47 |
| sdake | sup peeps | 02:50 |
| zhubingbing | sup sdake | 02:50 |
| *** dixiaoli has joined #openstack-kolla | 02:51 | |
| *** goldyfruit has quit IRC | 02:52 | |
| *** ramishra has quit IRC | 02:53 | |
| *** itlinux has quit IRC | 03:00 | |
| *** itlinux_ has quit IRC | 03:00 | |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Add ironic log in fluentd https://review.openstack.org/489835 | 03:04 |
| *** dave-mccowan has joined #openstack-kolla | 03:12 | |
| *** dave-mcc_ has quit IRC | 03:14 | |
| *** caowei has joined #openstack-kolla | 03:18 | |
| *** spsurya has joined #openstack-kolla | 03:31 | |
| *** stefan_bo has quit IRC | 03:31 | |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Add panko log in fluentd https://review.openstack.org/489845 | 03:31 |
| spsurya | morning guys | 03:32 |
| *** dave-mccowan has quit IRC | 03:33 | |
| *** emccormick has joined #openstack-kolla | 03:34 | |
| zhubingbing | morning spsurya | 03:35 |
| spsurya | zhubingbing: sup | 03:35 |
| zhubingbing | ;) | 03:36 |
| *** yangyapeng has joined #openstack-kolla | 03:36 | |
| *** emccormick has quit IRC | 03:40 | |
| *** ducttape_ has joined #openstack-kolla | 03:42 | |
| ashishb_ | Hello Everyone~ | 03:45 |
| ashishb_ | I am trying to build Kolla images, using kolla-build command, however, during the build I see many errors: | 03:46 |
| ashishb_ | INFO:kolla.image.build.base:http://repo.percona.com/release/7/RPMS/x86_64/repodata/b0768206a4dd3d75cafa84ea23326705f00b8ad213e93a6fe34d9b38e210217b-primary.sqlite.bz2: [Errno 14] HTTP Error 404 - Not Found | 03:46 |
| ashishb_ | on checking the url, I see there is no such repo | 03:47 |
| ashishb_ | any thoughts, how I can somehow tell Kolla to not use this url for percona? | 03:48 |
| ashishb_ | I tried changing my yum repo urls, but it did not help | 03:48 |
| *** ducttape_ has quit IRC | 03:49 | |
| *** ducttape_ has joined #openstack-kolla | 03:49 | |
| *** eaguilar has joined #openstack-kolla | 03:54 | |
| *** ducttape_ has quit IRC | 03:54 | |
| *** eaguilar is now known as eaguilar|afk | 03:54 | |
| *** eaguilar|afk is now known as eaguilar | 03:54 | |
| *** ducttape_ has joined #openstack-kolla | 03:59 | |
| *** itlinux_ has joined #openstack-kolla | 04:02 | |
| *** itlinux has joined #openstack-kolla | 04:02 | |
| *** ducttape_ has quit IRC | 04:04 | |
| *** eaguilar has quit IRC | 04:23 | |
| *** unicell has joined #openstack-kolla | 04:24 | |
| *** kornicameister has quit IRC | 04:31 | |
| *** vharsh has joined #openstack-kolla | 04:31 | |
| *** kornicameister has joined #openstack-kolla | 04:32 | |
| *** kbaegis has joined #openstack-kolla | 04:36 | |
| *** dixiaoli has quit IRC | 04:40 | |
| *** jamesbenson has quit IRC | 04:42 | |
| *** ducttape_ has joined #openstack-kolla | 05:02 | |
| *** ducttape_ has quit IRC | 05:04 | |
| *** ducttape_ has joined #openstack-kolla | 05:06 | |
| *** ducttape_ has quit IRC | 05:08 | |
| *** ducttape_ has joined #openstack-kolla | 05:08 | |
| *** stefan_bo has joined #openstack-kolla | 05:09 | |
| *** caowei has quit IRC | 05:10 | |
| *** ramishra has joined #openstack-kolla | 05:12 | |
| *** ducttape_ has quit IRC | 05:13 | |
| *** skramaja has joined #openstack-kolla | 05:13 | |
| *** yangyapeng has quit IRC | 05:17 | |
| *** yangyapeng has joined #openstack-kolla | 05:19 | |
| *** robellison has joined #openstack-kolla | 05:22 | |
| openstackgerrit | Duong Ha-Quang proposed openstack/kolla-ansible master: Specify 'become' for only neccesary tasks (all other roles) https://review.openstack.org/398685 | 05:25 |
| *** ramishra has quit IRC | 05:26 | |
| *** robellison has quit IRC | 05:26 | |
| *** dixiaoli has joined #openstack-kolla | 05:28 | |
| *** ramishra has joined #openstack-kolla | 05:28 | |
| *** dixiaoli has quit IRC | 05:28 | |
| *** dixiaoli has joined #openstack-kolla | 05:29 | |
| *** jamesbenson has joined #openstack-kolla | 05:36 | |
| ashishb_ | ok, so I noticed that percona repo is added here in kolla: | 05:37 |
| ashishb_ | docker/base/Dockerfile.j2: 'http://repo.percona.com/release/7/RPMS/x86_64/percona-release-0.1-4.noarch.rpm' | 05:37 |
| ashishb_ | and somehow, this repo enables / causes the percona packages to be pulled from this url, during kolla-build: :http://repo.percona.com/release/7/RPMS/x86_64/repodata/b0768206a4dd3d75cafa84ea23326705f00b8ad213e93a6fe34d9b38e210217b-primary.sqlite.bz2: | 05:38 |
| ashishb_ | and since there is no such url (at least when I tried to build the kolla images) it fails with: | 05:39 |
| ashishb_ | [Errno 14] HTTP Error 404 - Not Found | 05:39 |
| ashishb_ | anyone else seeing this issue with percona images? | 05:39 |
| *** jamesbenson has quit IRC | 05:40 | |
| *** janki has joined #openstack-kolla | 05:41 | |
| *** kbaegis has quit IRC | 05:46 | |
| *** mdnadeem has quit IRC | 05:47 | |
| *** mdnadeem has joined #openstack-kolla | 05:48 | |
| *** mdnadeem has quit IRC | 05:49 | |
| *** mdnadeem has joined #openstack-kolla | 05:49 | |
| *** mdnadeem_ has joined #openstack-kolla | 05:50 | |
| *** mdnadeem has quit IRC | 05:51 | |
| *** mdnadeem has joined #openstack-kolla | 05:51 | |
| *** caowei has joined #openstack-kolla | 05:54 | |
| *** mdnadeem_ has quit IRC | 05:55 | |
| *** stefan_bo has quit IRC | 05:55 | |
| *** ducttap__ has joined #openstack-kolla | 06:11 | |
| *** ductta___ has joined #openstack-kolla | 06:13 | |
| *** ducttap__ has quit IRC | 06:13 | |
| *** stefan_bo has joined #openstack-kolla | 06:15 | |
| *** jamesbenson has joined #openstack-kolla | 06:18 | |
| *** ductta___ has quit IRC | 06:18 | |
| *** mdnadeem has quit IRC | 06:18 | |
| *** jamesbenson__ has quit IRC | 06:18 | |
| *** jamesbenson has quit IRC | 06:22 | |
| *** bmace has quit IRC | 06:24 | |
| *** bmace has joined #openstack-kolla | 06:24 | |
| *** jamesbenson_ has joined #openstack-kolla | 06:24 | |
| *** jaosorior has quit IRC | 06:25 | |
| *** rwsu has quit IRC | 06:30 | |
| *** jaosorior has joined #openstack-kolla | 06:34 | |
| *** pcaruana has joined #openstack-kolla | 06:34 | |
| *** yangyape_ has joined #openstack-kolla | 06:43 | |
| *** yangyape_ has quit IRC | 06:46 | |
| *** yangyape_ has joined #openstack-kolla | 06:46 | |
| *** yangyapeng has quit IRC | 06:46 | |
| openstackgerrit | Ashish Billore proposed openstack/kolla master: Fix Underline as per the title length in .rst https://review.openstack.org/489882 | 06:48 |
| *** mdnadeem has joined #openstack-kolla | 06:48 | |
| *** yangyapeng has joined #openstack-kolla | 06:50 | |
| *** yangyape_ has quit IRC | 06:50 | |
| masber | hi all, I am having this issue while deploying kolla, any idea? fatal: [openstack-controller]: FAILED! => {"changed": false, "failed": true, "msg": "Unknown error message: Tag 4.0.2 not found in repository docker.io/kolla/centos-binary-fluentd"} | 06:51 |
| masber | how can I tell kolla to use image 4.0.0 instead of 4.0.2? thanks | 06:52 |
| *** yangyapeng has quit IRC | 06:54 | |
| *** prateek has joined #openstack-kolla | 06:59 | |
| *** jamesbenson has joined #openstack-kolla | 06:59 | |
| *** stefan_bo has quit IRC | 07:02 | |
| japestinho | hi guys, I have an error keystone-fernet-setup-job wih NSS: client certificate not found | 07:03 |
| *** jamesbenson has quit IRC | 07:04 | |
| japestinho | https://www.irccloud.com/pastebin/PEafN2tj/ | 07:04 |
| japestinho | https://www.irccloud.com/pastebin/ikpTHdVJ/ | 07:04 |
| japestinho | any clue what's wrong with configuration? | 07:06 |
| *** zhangfei has joined #openstack-kolla | 07:08 | |
| *** janki is now known as janki|lunch | 07:10 | |
| *** stefan_bo has joined #openstack-kolla | 07:12 | |
| openstackgerrit | Merged openstack/kolla-ansible master: Add default volume_backend_name for rbd driver in cinder volume https://review.openstack.org/486043 | 07:15 |
| openstackgerrit | Jeffrey Zhang proposed openstack/kolla master: Run fluentd as root user https://review.openstack.org/489890 | 07:19 |
| *** https_GK1wmSU has joined #openstack-kolla | 07:21 | |
| *** https_GK1wmSU has left #openstack-kolla | 07:22 | |
| *** stefan_bo has quit IRC | 07:23 | |
| *** reidrac has joined #openstack-kolla | 07:33 | |
| openstackgerrit | Jeffrey Zhang proposed openstack/kolla master: Prevent check haproxy script from generating meaningless logs https://review.openstack.org/489902 | 07:35 |
| *** lpetrut has joined #openstack-kolla | 07:37 | |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Fix modify external ceph.conf not restart related containers https://review.openstack.org/489903 | 07:37 |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Fix modify external ceph.conf not restart related containers https://review.openstack.org/489903 | 07:39 |
| *** eaxiom has joined #openstack-kolla | 07:44 | |
| *** stefan_bo has joined #openstack-kolla | 07:44 | |
| eaxiom | hi all. | 07:44 |
| eaxiom | I am planning to deploy a production ready openstack using kolla | 07:44 |
| openstackgerrit | weichuancheng proposed openstack/kolla-ansible master: Add external-ceph-scripts to create configration files https://review.openstack.org/489908 | 07:45 |
| eaxiom | previously i have done this with openstack-ansible but I want to try openstack-kolla this time | 07:45 |
| eaxiom | I have 3 physical controller nodes , 5 compute nodes , and three storage nodes (ceph osds) | 07:46 |
| openstackgerrit | weichuancheng proposed openstack/kolla-ansible master: Add external-ceph-scripts to create configration files https://review.openstack.org/489909 | 07:46 |
| eaxiom | can someone point me to a reference document to start with please? | 07:46 |
| *** yangyapeng has joined #openstack-kolla | 07:50 | |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Fix modify external ceph.conf not restart related containers https://review.openstack.org/489903 | 07:52 |
| *** robellison has joined #openstack-kolla | 07:52 | |
| *** egonzalez has joined #openstack-kolla | 07:53 | |
| *** ducttape_ has joined #openstack-kolla | 07:56 | |
| masber | eaxiom, https://docs.openstack.org/kolla-ansible/latest/ | 07:56 |
| *** aagate has joined #openstack-kolla | 07:58 | |
| masber | eaxiom, are you planing to use ironic? | 08:01 |
| *** ducttape_ has quit IRC | 08:01 | |
| *** aagate has quit IRC | 08:02 | |
| *** robellison has quit IRC | 08:02 | |
| *** yangyapeng has quit IRC | 08:05 | |
| *** serlex has joined #openstack-kolla | 08:05 | |
| *** yangyapeng has joined #openstack-kolla | 08:06 | |
| *** robellison has joined #openstack-kolla | 08:06 | |
| *** mgoddard has joined #openstack-kolla | 08:08 | |
| *** robellison has quit IRC | 08:10 | |
| *** stefan_bo has quit IRC | 08:11 | |
| *** stefan_bo has joined #openstack-kolla | 08:13 | |
| eaxiom | masber: thanks for the link . I am currently not using ironic . but i want to use cpeh as storage | 08:20 |
| *** https_GK1wmSU has joined #openstack-kolla | 08:21 | |
| eaxiom | And I want to deploy ceph on bare metal servers | 08:21 |
| *** https_GK1wmSU has left #openstack-kolla | 08:22 | |
| eaxiom | I have three controllers which i want to use as ceph proxy nodes as well | 08:22 |
| *** janki|lunch is now known as janki | 08:25 | |
| *** reddream has joined #openstack-kolla | 08:29 | |
| egonzalez | eaxiom, may want to use external ceph https://docs.openstack.org/kolla-ansible/latest/external-ceph-guide.html | 08:30 |
| eaxiom | egonzalez: actually i would like to deploy ceph via kolla but on baremetal instead of containers | 08:30 |
| eaxiom | i think this link is helpful when i need to integrate to an existing ceph | 08:31 |
| eaxiom | whereas in my case i do not have an existing ceph setup | 08:31 |
| reddream | Hi, my reconfigure failed at step [neutron : Copying over ml2_conf.int] fatal: [compute2]: FAILED! => {"failed": true, "msg": "{{ hostvars[inventory_hostname]['ansible_' + tunnel_interface]['ipv4']['address'] }}: 'dict object' has no attribute 'ipv4'"} | 08:31 |
| egonzalez | eaxiom, kolla does not deploy on baremetal only | 08:31 |
| reddream | Any suggestion? | 08:32 |
| eaxiom | egonzalez: so you think First I have to setup the ceph storage and then proceed with kolla ? | 08:33 |
| egonzalez | eaxiom, for that use case yes | 08:33 |
| *** openstackgerrit has quit IRC | 08:33 | |
| egonzalez | eaxiom, can use ceph-ansible is a simple project to deploy ceph, support baremetal and containers | 08:33 |
| eaxiom | hmm . okay thanks I will check it out. another question.. Can I deploy neutron with openvswitch and DVR (distributed virtual routing) with Kolla | 08:34 |
| *** stefan_bo has quit IRC | 08:35 | |
| egonzalez | eaxiom, yep, ovs is default, add enable_neutron_dvr: "yes" into globals.yml | 08:36 |
| egonzalez | reddream, your compute2 have tunnel_interface? | 08:36 |
| eaxiom | egonzalez: thats great | 08:37 |
| eaxiom | egonzalez: I am grateful for your kind help | 08:37 |
| *** openstackgerrit has joined #openstack-kolla | 08:38 | |
| openstackgerrit | Jeffrey Zhang proposed openstack/kolla-ansible stable/ocata: Remove symlink from fluentd global conf https://review.openstack.org/489927 | 08:38 |
| *** yangyapeng has quit IRC | 08:43 | |
| *** yangyapeng has joined #openstack-kolla | 08:43 | |
| openstackgerrit | Mathieu Rohon proposed openstack/kolla master: Skydive: bump the binary version https://review.openstack.org/489930 | 08:46 |
| *** stefan_bo has joined #openstack-kolla | 08:53 | |
| *** rmart04 has joined #openstack-kolla | 08:53 | |
| masber | eaxiom, I am using kolla-ansible with ceph as well, I am not an expert but happy to help | 08:57 |
| eaxiom | masber: thats cool | 09:00 |
| masber | egonzalez, I was playing with ansible templates and end up breaking it, i decided to reinstall kolla and now I am getting this error message fatal: [openstack-controller]: FAILED! => {"changed": false, "failed": true, "msg": "Unknown error message: Tag 4.0.2 not found in repository docker.io/kolla/centos-binary-fluentd"} | 09:00 |
| masber | is it trying to download image version 4.0.2? why? | 09:01 |
| eaxiom | masber: have you deployed ceph via kolla | 09:01 |
| masber | eaxiom, yes | 09:01 |
| egonzalez | masber, have you updated kolla-ansible? | 09:01 |
| masber | eaxiom, but I am not using it in a production environment | 09:01 |
| masber | egonzalez, I did pip uninstall and pip install ... | 09:02 |
| egonzalez | masber, probably later pip install installed a newer version | 09:03 |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Add gnocchi log in fluentd https://review.openstack.org/489575 | 09:03 |
| masber | egonzalez, should I specify version inside the globals.yml? | 09:04 |
| egonzalez | masber, if want to use other image tags yes, if not set the version kolla will detect your release based on pbr version | 09:04 |
| eaxiom | masber: I am using 3 controller nodes as proxy nodes for ceph and there are 3 other nodes for osds | 09:05 |
| reddream | egonzalez, thanks for your response, yes, it has vxlan to controller node | 09:06 |
| masber | eaxiom, I have 1 vm for control plane and 2 nodes for computing and ceph (hyperconverged configuration) | 09:06 |
| eaxiom | masber: have you installed ceph on physical nodes via kolla or installed ceph into containers? | 09:06 |
| eaxiom | oh ok | 09:06 |
| masber | eaxiom, I installed everything (ceph included) using kolla-ansible, that means all ceph components are running on containers | 09:07 |
| reddream | It works well, I just want to change a parameter of cinder, so I use kolla-ansible reconfigure to update | 09:07 |
| *** stefan_bo has quit IRC | 09:07 | |
| *** jamesbenson has joined #openstack-kolla | 09:07 | |
| eaxiom | masber: did you use ubuntu 16.04 LTS ? | 09:08 |
| *** jmccarthy has quit IRC | 09:08 | |
| *** jmccarthy has joined #openstack-kolla | 09:08 | |
| *** yangyapeng has quit IRC | 09:08 | |
| *** jmccarthy has quit IRC | 09:08 | |
| masber | eaxiom, baremetal hosts runs centos7 and container images are based on centos/binary | 09:08 |
| egonzalez | reddream, compute also need tunnel_interface to make connection to neutron in network nodes | 09:08 |
| *** jmccarthy has joined #openstack-kolla | 09:09 | |
| masber | egonzalez, np, but I am guessing images 4.0.2 are not 100% stable yet is that right? | 09:09 |
| *** reidrac_ has joined #openstack-kolla | 09:10 | |
| egonzalez | masber, I would say 4.0.2 are more stable than 4.0.1 ;) | 09:10 |
| egonzalez | masber, 4.0.2 is latest ocata release with bug fixes | 09:10 |
| *** reidrac has quit IRC | 09:10 | |
| reddream | egonzalez, yes, my network node is also on the controller node | 09:11 |
| *** stefan_bo has joined #openstack-kolla | 09:11 | |
| *** jamesbenson has quit IRC | 09:12 | |
| egonzalez | reddream, is the interface name the same in all nodes? | 09:12 |
| masber | egonzalez, nice! but the centos-binary-fluentd 4.0.2 is missing from docker hub https://hub.docker.com/r/kolla/centos-binary-fluentd/tags/? | 09:13 |
| *** reidrac_ has quit IRC | 09:14 | |
| *** yangyapeng has joined #openstack-kolla | 09:14 | |
| *** reidrac has joined #openstack-kolla | 09:15 | |
| *** yangyapeng has quit IRC | 09:16 | |
| *** yangyapeng has joined #openstack-kolla | 09:17 | |
| reddream | egonzalez, which interface name do you mean? I cannot find it in ml2_conf.ini . What do the task [neutron : Copying over ml2_conf.int] actually do? | 09:20 |
| egonzalez | reddream, that task use ml2_conf.ini.j2 in ansible/roles/neutron/templates and copy to remote nodes | 09:21 |
| egonzalez | reddream, the config is failing is local_ip (end of the file) which is the IP from tunnel_interface (defaults to network_interface) | 09:22 |
| *** zhangfei has quit IRC | 09:26 | |
| reddream | egonzalez, I set the tunnel_interface to 'eno2' in my original conf. And neutron_external_interface is also set to 'eno2'. After my installation, I found that I have to move IP address of eno2 to br-ex, otherwise the tunnel cannot be setup properly. | 09:26 |
| egonzalez | reddream, tunnel_interface use to be under network/api_interfaces | 09:27 |
| egonzalez | neutron_external_interface is a separate NIC | 09:27 |
| reddream | egonzalez, afterwards reconfiguration cannot get ip address of eno2, maybe it's the reason? | 09:28 |
| egonzalez | reddream, likely | 09:28 |
| reddream | So far my servers have only two NIC, so I want to share | 09:28 |
| reddream | egonzalez, I think api/tunnel/storage/ceph cluster is too much for one interface, so I try to share neutron_external_interface with tunnel_interface... | 09:31 |
| *** robellison has joined #openstack-kolla | 09:32 | |
| *** dpertin has joined #openstack-kolla | 09:32 | |
| *** stefan_bo has quit IRC | 09:32 | |
| *** stefan_bo has joined #openstack-kolla | 09:36 | |
| *** zhangfei has joined #openstack-kolla | 09:38 | |
| japestinho | hi egonzalez, did you know why nova-api-create-cell pod keep in init state? I got nova-api-create-cell pod stuck for more than half hour. | 09:40 |
| *** mewald has joined #openstack-kolla | 09:40 | |
| japestinho | I tried to get log file from /var/log/kolla but unfortunately there is no nova.log there | 09:41 |
| japestinho | http://paste.openstack.org/show/617226/ this is what I get from kubectl describe and logs | 09:41 |
| egonzalez | japestinho, cell command log should be at nova-manage.log | 09:41 |
| japestinho | egonzalez ah thank you for pointing me, I'll check for that | 09:42 |
| *** mewald has quit IRC | 09:46 | |
| *** tovin07_ has quit IRC | 09:50 | |
| japestinho | egonzalez, I checked from /var/lib/kubelet but there is no log file from than nova-api-manage-db | 09:52 |
| japestinho | https://www.irccloud.com/pastebin/MK7LZ6Xx/ | 09:52 |
| *** ducttape_ has joined #openstack-kolla | 09:58 | |
| *** ducttape_ has quit IRC | 10:02 | |
| *** papacz has joined #openstack-kolla | 10:03 | |
| *** dixiaoli has quit IRC | 10:04 | |
| reddream | thank you egonzalez, I plan to destroy my old installation and change the tunnel-interface to network-interface | 10:09 |
| *** sambetts|afk is now known as sambetts | 10:09 | |
| *** jaosorior has quit IRC | 10:10 | |
| *** robellison has quit IRC | 10:13 | |
| *** robellison has joined #openstack-kolla | 10:13 | |
| *** stefan_bo has quit IRC | 10:15 | |
| *** mewald has joined #openstack-kolla | 10:17 | |
| *** ramishra has quit IRC | 10:19 | |
| *** ramishra has joined #openstack-kolla | 10:21 | |
| *** robellison has quit IRC | 10:24 | |
| masber | egonzalez, how can check and change the version of images that kolla-ansible will download? | 10:29 |
| *** robellison has joined #openstack-kolla | 10:31 | |
| egonzalez | masber, openstack_release: "tag" | 10:33 |
| mewald | Is anyone aware of problems with Magnum in Kolla? | 10:36 |
| *** jascott1 has quit IRC | 10:36 | |
| *** jascott1 has joined #openstack-kolla | 10:37 | |
| openstackgerrit | weichuancheng proposed openstack/kolla-ansible master: Add external-ceph-scripts to create configration files https://review.openstack.org/489964 | 10:37 |
| openstackgerrit | Ashish Billore proposed openstack/kolla master: Fix title formatting and details https://review.openstack.org/489965 | 10:37 |
| openstackgerrit | Merged openstack/kolla-ansible stable/ocata: Remove symlink from fluentd global conf https://review.openstack.org/489927 | 10:41 |
| *** jascott1 has quit IRC | 10:41 | |
| *** zhurong has quit IRC | 10:43 | |
| masber | mewald, I tried magnum few weeks back but couldn't deploy a kubernetes cluster, are you having any issue? | 10:43 |
| mewald | masber: Yeah I can deploy the services but cannot issue any API calls. I will always get this error: https://gist.github.com/mewald1/fdb154cf284ba23a484336e0a5984bd3 Could be configuration related or a bug in the software itself, too. | 10:47 |
| *** mewald has quit IRC | 10:49 | |
| masber | in my case I had an issue while deploying a k8s cluster where the director was not reachable | 10:49 |
| *** robellison has quit IRC | 10:51 | |
| *** robellison has joined #openstack-kolla | 10:55 | |
| masber | egonzalez, thank you it is working now | 10:58 |
| masber | egonzalez, do you know when the new docker images will be uploaded to the docker hub? | 11:00 |
| *** jaosorior has joined #openstack-kolla | 11:02 | |
| *** robellison has quit IRC | 11:03 | |
| *** reidrac has quit IRC | 11:04 | |
| *** mewald has joined #openstack-kolla | 11:10 | |
| *** mewald has quit IRC | 11:10 | |
| reddream | egonzalez, if I need to modify some configurations of openstack services, should I run kolla_ansible reconfiguration or some other command? | 11:10 |
| *** caowei has quit IRC | 11:12 | |
| *** robellison has joined #openstack-kolla | 11:14 | |
| *** zhangfei has quit IRC | 11:15 | |
| *** mewald has joined #openstack-kolla | 11:17 | |
| *** ducttap__ has joined #openstack-kolla | 11:17 | |
| *** robellison has quit IRC | 11:18 | |
| *** k_mouza has joined #openstack-kolla | 11:22 | |
| *** ducttap__ has quit IRC | 11:22 | |
| *** rhallisey has joined #openstack-kolla | 11:26 | |
| *** stefan_bo has joined #openstack-kolla | 11:29 | |
| openstackgerrit | weichuancheng proposed openstack/kolla-ansible master: Add external-ceph-scripts to create configration files https://review.openstack.org/489984 | 11:33 |
| *** tonanhngo has joined #openstack-kolla | 11:40 | |
| *** janki has quit IRC | 11:41 | |
| *** ramishra has quit IRC | 11:41 | |
| *** markhargrove28 has joined #openstack-kolla | 11:48 | |
| *** markhargrove28 has quit IRC | 11:49 | |
| *** jamesbenson has joined #openstack-kolla | 11:56 | |
| *** jamesbenson has quit IRC | 12:01 | |
| *** mdnadeem has quit IRC | 12:03 | |
| *** ducttape_ has joined #openstack-kolla | 12:07 | |
| egonzalez | reddream, it depends of what changed, if is s config file from a service do reconfigure and user --tags <service> to limit reconfigure | 12:12 |
| *** ducttape_ has quit IRC | 12:12 | |
| *** reidrac has joined #openstack-kolla | 12:14 | |
| *** emccormick has joined #openstack-kolla | 12:16 | |
| *** sean-k-mooney has quit IRC | 12:16 | |
| *** ducttape_ has joined #openstack-kolla | 12:22 | |
| *** kbaegis has joined #openstack-kolla | 12:23 | |
| *** stefan_bo has quit IRC | 12:24 | |
| *** ducttape_ has quit IRC | 12:24 | |
| *** ducttape_ has joined #openstack-kolla | 12:24 | |
| *** schwicht has joined #openstack-kolla | 12:25 | |
| *** ramishra has joined #openstack-kolla | 12:26 | |
| *** stefan_bo has joined #openstack-kolla | 12:27 | |
| *** schwicht has quit IRC | 12:32 | |
| *** schwicht has joined #openstack-kolla | 12:37 | |
| *** jamesbenson has joined #openstack-kolla | 12:38 | |
| *** ducttape_ has quit IRC | 12:39 | |
| *** jamesbenson has quit IRC | 12:42 | |
| *** awidders_ has joined #openstack-kolla | 12:50 | |
| *** stefan_bo has quit IRC | 12:53 | |
| *** awiddersheim has quit IRC | 12:53 | |
| *** schwicht has quit IRC | 12:55 | |
| *** iniazi_ has joined #openstack-kolla | 12:56 | |
| masber | egonzalez, I am facing this error in ironic_dnsmasq container. Is this normal because the dhcp pool settings are not setup by default? http://paste.openstack.org/show/617262/ | 12:58 |
| *** iniazi has quit IRC | 13:00 | |
| *** stefan_bo has joined #openstack-kolla | 13:01 | |
| egonzalez | masber, need to set ironic_dnsmasq_dhcp_range, no idea what value goes there, never used ironic | 13:02 |
| masber | egonzalez, thank you | 13:03 |
| egonzalez | masber, there you have a patch to kolla docs ;) | 13:03 |
| masber | egonzalez, sure, let me find out which value I need to put there so I can update the docs properly | 13:05 |
| *** dpertin has quit IRC | 13:06 | |
| *** dpertin has joined #openstack-kolla | 13:06 | |
| *** stefan_bo has quit IRC | 13:06 | |
| *** lucasxu has joined #openstack-kolla | 13:12 | |
| *** lan1 has quit IRC | 13:12 | |
| *** goldyfruit has joined #openstack-kolla | 13:13 | |
| *** athomas has quit IRC | 13:18 | |
| *** schwicht has joined #openstack-kolla | 13:20 | |
| *** aolwas has quit IRC | 13:21 | |
| *** aolwas has joined #openstack-kolla | 13:23 | |
| *** athomas has joined #openstack-kolla | 13:27 | |
| *** prateek has quit IRC | 13:28 | |
| *** kbaegis has quit IRC | 13:32 | |
| *** jistr is now known as jistr|mtg | 13:32 | |
| *** xinliang has quit IRC | 13:32 | |
| *** kbaegis has joined #openstack-kolla | 13:34 | |
| *** kbaegis has quit IRC | 13:34 | |
| *** kbaegis has joined #openstack-kolla | 13:34 | |
| *** kiennt has joined #openstack-kolla | 13:35 | |
| openstackgerrit | Merged openstack/kolla-kubernetes master: Fix rendering problem when yaml value gets overridden via cli https://review.openstack.org/488513 | 13:37 |
| *** sgrasley has joined #openstack-kolla | 13:38 | |
| *** yangyapeng has quit IRC | 13:38 | |
| *** rwsu has joined #openstack-kolla | 13:41 | |
| *** xinliang has joined #openstack-kolla | 13:44 | |
| *** jtriley has joined #openstack-kolla | 13:46 | |
| *** zhangfei has joined #openstack-kolla | 13:47 | |
| *** robellison has joined #openstack-kolla | 13:48 | |
| jaosorior | hey folks, could I get a review on this https://review.openstack.org/#/c/489150/ ? | 13:48 |
| *** aagate has joined #openstack-kolla | 13:50 | |
| *** jistr|mtg is now known as jistr | 13:52 | |
| masber | sorry to bother you mgoddard, I would like to ask you a question regarding ironic running on kolla. According to kolla ironic documentation (post-deployment configuration) https://docs.openstack.org/kolla-ansible/latest/ironic-guide.html we need to create a network and a subnet with dhcp enabled and but also we need to setup dhcp-range parameter for ironic_dnsmasq container. I am confused because it gives me the idea that we are setting up 2 DHCP | 13:54 |
| masber | servers, is that right? and why? | 13:54 |
| mgoddard | hi masber, sorry I had to disappear the other day | 13:54 |
| *** robellison has quit IRC | 13:55 | |
| mgoddard | masber: the ironic dhcp range is actually for ironic inspector, which requires its own dhcp server for hardware inspection | 13:55 |
| mgoddard | in kolla-ansible, ironic-inspector is quite tightly coupled to ironic which can get a bit confusing | 13:56 |
| mgoddard | if you're not using ironic-inspector, you can ignore the ironic dhcp range variable, or at most give it a value that allows it to start up | 13:57 |
| -openstackstatus- NOTICE: We have disable infracloud-vanilla due to the compute host running mirror.regionone.infracloud-vanilla.o.o being offline. Please recheck your failed jobs to schedule them to another cloud. | 13:57 | |
| *** zhurong has joined #openstack-kolla | 13:57 | |
| *** vharsh has quit IRC | 14:00 | |
| *** robellison has joined #openstack-kolla | 14:00 | |
| *** k_mouza has quit IRC | 14:02 | |
| *** k_mouza has joined #openstack-kolla | 14:02 | |
| *** skramaja has quit IRC | 14:08 | |
| *** robellison has quit IRC | 14:10 | |
| *** hongbin has joined #openstack-kolla | 14:10 | |
| *** robellison has joined #openstack-kolla | 14:12 | |
| masber | mgoddard, I see, thanks | 14:15 |
| *** schwicht has quit IRC | 14:18 | |
| *** schwicht has joined #openstack-kolla | 14:19 | |
| *** prateek has joined #openstack-kolla | 14:20 | |
| *** mdnadeem has joined #openstack-kolla | 14:20 | |
| *** jiriprox has joined #openstack-kolla | 14:24 | |
| *** renmak_ has joined #openstack-kolla | 14:25 | |
| *** rwsu has quit IRC | 14:29 | |
| masber | mgoddard, sorry again, I would to ask you another question if you have time. I think I have an issue where my baremetal node can't see the PXE server hence clean process fails. If I am not mistaken the PXE server is listening to interface eno33557248 but I do can ping that interface from the baremetal server, there is something I am missing and I don't know what is it, would you be able to give a hint? http://paste.openstack.org/raw/617277/ | 14:33 |
| *** zhurong has quit IRC | 14:38 | |
| *** rwsu has joined #openstack-kolla | 14:39 | |
| *** jamesbenson has joined #openstack-kolla | 14:40 | |
| *** hrw has quit IRC | 14:41 | |
| *** yangyapeng has joined #openstack-kolla | 14:45 | |
| *** prateek has quit IRC | 14:45 | |
| *** jamesbenson has quit IRC | 14:45 | |
| *** hrw has joined #openstack-kolla | 14:47 | |
| *** jamesbenson has joined #openstack-kolla | 14:47 | |
| *** aagate_ has joined #openstack-kolla | 14:48 | |
| *** aagate_ has quit IRC | 14:49 | |
| mgoddard | masber: try installing tftp on the baremetal server and downloading pxelinux.0 | 14:49 |
| *** yangyapeng has quit IRC | 14:49 | |
| mgoddard | masber: are you familiar with tcpdump? If so it should be possible to watch the network traffic from the controller | 14:49 |
| mgoddard | masber: I usually do sudo tcpdump -eni <interface> port bootps or port bootpc or port tftp | 14:50 |
| masber | mgoddard, I ran "sudo tcpdump -i any port 67 or port 68 or port 69" on the pxe server however I can't see any traffic from the baremetal server | 14:50 |
| *** ducttape_ has joined #openstack-kolla | 14:51 | |
| *** jamesbenson has quit IRC | 14:51 | |
| mgoddard | masber: your instance deployment succeeds, right? is it only cleaning that fails | 14:51 |
| *** yangyapeng has joined #openstack-kolla | 14:53 | |
| masber | mgoddard, I have not tried deployment yet, I assumed that deployment would fail as well | 14:53 |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Add gnocchi log in fluentd https://review.openstack.org/489575 | 14:53 |
| mgoddard | masber: ok. what does the networking on the controller look like? is there a separate network node? | 14:55 |
| *** ducttape_ has quit IRC | 14:55 | |
| jmccarthy | Are errors (as seen with docker logs for designate_backend_bind9) like this to be expected with deploy out-of-the-box ? | 14:55 |
| jmccarthy | http://paste.openstack.org/show/617284/ | 14:55 |
| jmccarthy | (I have not done any additional config yet for creating a zone or updating /etc/kolla/config/designate/designate-sink.conf) | 14:55 |
| *** duonghq has quit IRC | 14:58 | |
| *** duonghq has joined #openstack-kolla | 14:58 | |
| duonghq | evening guys | 14:58 |
| *** duonghq_ has joined #openstack-kolla | 14:59 | |
| *** kbaegis1 has joined #openstack-kolla | 14:59 | |
| *** kbaegis has quit IRC | 14:59 | |
| openstackgerrit | Merged openstack/kolla-ansible master: Remove unnecessary setUp function in testcase https://review.openstack.org/472031 | 15:00 |
| *** kbaegis1 has quit IRC | 15:00 | |
| masber | mgoddard, http://paste.openstack.org/show/617285/ | 15:00 |
| *** jamesbenson has joined #openstack-kolla | 15:01 | |
| inc0 | good morning | 15:03 |
| *** ducttape_ has joined #openstack-kolla | 15:03 | |
| *** jistr is now known as jistr|mtg | 15:06 | |
| *** zhangfei has quit IRC | 15:06 | |
| duonghq | moring inc0 | 15:07 |
| *** manheim has joined #openstack-kolla | 15:07 | |
| *** mdnadeem has quit IRC | 15:08 | |
| *** ducttape_ has quit IRC | 15:08 | |
| openstackgerrit | Rich Wellum proposed openstack/kolla-kubernetes master: Moved ko.py to orchestration/tools https://review.openstack.org/487972 | 15:09 |
| *** aagate has quit IRC | 15:09 | |
| inc0 | yay rwellum | 15:09 |
| inc0 | damn that's a lot of code | 15:09 |
| *** manheim has quit IRC | 15:10 | |
| *** manheim has joined #openstack-kolla | 15:10 | |
| *** emccormick has quit IRC | 15:11 | |
| *** ducttape_ has joined #openstack-kolla | 15:11 | |
| *** robellison has quit IRC | 15:17 | |
| *** robellison has joined #openstack-kolla | 15:21 | |
| *** mewald has quit IRC | 15:22 | |
| *** ducttape_ has quit IRC | 15:29 | |
| *** ducttape_ has joined #openstack-kolla | 15:30 | |
| *** tonanhngo has quit IRC | 15:35 | |
| mgoddard | masber: thanks. how is OVS wired up? | 15:36 |
| mgoddard | masber: is eno33557248 plugged into br-ex? | 15:37 |
| masber | mgoddard, no | 15:38 |
| mgoddard | is anything plugged into br-ex? | 15:39 |
| *** renmak_ has quit IRC | 15:39 | |
| kfox1111_ | morning. | 15:40 |
| *** vhosakot has joined #openstack-kolla | 15:41 | |
| rwellum | inc0: yeah I know. Thanks to tox -e pep8 I had to rewrite a lot of it. That's the last time I use global variables, now I know openstack no-likey... :) | 15:41 |
| inc0 | and for good reason;) | 15:42 |
| rwellum | yup | 15:42 |
| *** itlinux has quit IRC | 15:45 | |
| *** itlinux_ has quit IRC | 15:45 | |
| jmccarthy | Are errors (as seen with docker logs for designate_backend_bind9) like this to be expected with deploy out-of-the-box ? | 15:47 |
| jmccarthy | http://paste.openstack.org/show/617284/ | 15:47 |
| jmccarthy | (I have not done any additional config yet for creating a zone or updating /etc/kolla/config/designate/designate-sink.conf) or other steps yet | 15:47 |
| *** robellison has quit IRC | 15:48 | |
| *** k_mouza has quit IRC | 15:48 | |
| egonzalez | jmccarthy, yeah are expected iirc | 15:48 |
| egonzalez | i think some cleanup needs to be done in bind9 config | 15:48 |
| jmccarthy | egonzalez: Ok cool, as long as I'm in the ball park - thanks ! | 15:49 |
| egonzalez | jmccarthy, is disable ipv6 | 15:49 |
| jmccarthy | Oh on the dns_interface is it ? | 15:51 |
| egonzalez | jmccarthy, listen-on-v6 port 53 { none; }; in bind config file | 15:51 |
| *** k_mouza has joined #openstack-kolla | 15:51 | |
| *** rmart04 has quit IRC | 15:53 | |
| jmccarthy | Hmm I'm not seeing a template or place to change that yet ? | 15:53 |
| egonzalez | jmccarthy, or add -4 in named cmd at designate-backend-bind9.json.j2 | 15:53 |
| *** robellison has joined #openstack-kolla | 15:53 | |
| rwellum | morning kfox1111_ | 15:53 |
| jmccarthy | ? Oh ok like ... ['ubuntu', 'debian'] else 'named -4' % | 15:54 |
| duonghq | inc0, do we have meeting today? | 15:55 |
| inc0 | yes | 15:56 |
| inc0 | in 4min:) | 15:56 |
| openstackgerrit | Marcus Williams proposed openstack/kolla-ansible master: Add OpenDaylight role https://review.openstack.org/416367 | 15:56 |
| duonghq | roger | 15:56 |
| openstackgerrit | Michal Jastrzebski (inc0) proposed openstack/kolla-kubernetes master: WIP Dockerfile to run ansible orchiestration https://review.openstack.org/474770 | 15:56 |
| *** robellison has quit IRC | 15:56 | |
| jmccarthy | egonzalez: Will this be doctored up sometime ? I'm less clear on the 'best' way to do this (will try adjust the designate-backend-bind9.json.j2 method for my env) | 15:57 |
| kfox1111_ | morning. | 15:57 |
| egonzalez | jmccarthy, that will need to be fixed, just saying what was the fix :) | 15:58 |
| *** kiennt has quit IRC | 15:58 | |
| *** gaoyan has joined #openstack-kolla | 15:59 | |
| jmccarthy | egonzalez: :) Still working out how to get this going - thanks for the help ! | 16:00 |
| *** egonzalez has quit IRC | 16:01 | |
| *** egonzalez has joined #openstack-kolla | 16:01 | |
| *** robellison has joined #openstack-kolla | 16:03 | |
| *** lpetrut has quit IRC | 16:07 | |
| *** egonzalez90 has joined #openstack-kolla | 16:08 | |
| *** dpertin has quit IRC | 16:10 | |
| openstackgerrit | Marcus Williams proposed openstack/kolla-ansible master: Add OpenDaylight role https://review.openstack.org/416367 | 16:11 |
| *** egonzalez has quit IRC | 16:13 | |
| *** pcaruana has quit IRC | 16:14 | |
| masber | mgoddard, sorry, I found a network issue I didn't had before, I am redeploying and making sure the vms have connection to the internet | 16:14 |
| mgoddard | masber: ok. I would investigate the connection between the neutron bridges and the bare metal node. without it dhcp will not be possible | 16:15 |
| openstackgerrit | zhubingbing proposed openstack/kolla-ansible master: Add gnocchi log in fluentd https://review.openstack.org/489575 | 16:16 |
| *** gaoyan has quit IRC | 16:17 | |
| *** gaoyan has joined #openstack-kolla | 16:17 | |
| *** kbaegis has joined #openstack-kolla | 16:19 | |
| jamesbenson | meeting starts in 40 minutes? | 16:19 |
| vhosakot | jamesbenson: meeting is happening now. | 16:20 |
| *** serlex has quit IRC | 16:22 | |
| *** jistr|mtg is now known as jistr | 16:22 | |
| *** gaoyan has quit IRC | 16:23 | |
| *** jascott1 has joined #openstack-kolla | 16:24 | |
| *** gaoyan has joined #openstack-kolla | 16:25 | |
| *** itlinux has joined #openstack-kolla | 16:28 | |
| *** itlinux_ has joined #openstack-kolla | 16:28 | |
| *** bmace has quit IRC | 16:29 | |
| *** k_mouza has quit IRC | 16:34 | |
| *** unicell has quit IRC | 16:37 | |
| *** gaoyan has quit IRC | 16:37 | |
| *** manheim has quit IRC | 16:39 | |
| *** gaoyan has joined #openstack-kolla | 16:39 | |
| *** sgrasley has left #openstack-kolla | 16:40 | |
| sbezverk | kfox1111: what do you think about this one: https://review.openstack.org/484991 ? | 16:40 |
| *** robellison has quit IRC | 16:40 | |
| *** bmace has joined #openstack-kolla | 16:42 | |
| *** gaoyan has quit IRC | 16:44 | |
| *** gaoyan has joined #openstack-kolla | 16:46 | |
| *** gaoyan has quit IRC | 16:46 | |
| *** manheim has joined #openstack-kolla | 16:46 | |
| *** manheim has quit IRC | 16:46 | |
| *** manheim has joined #openstack-kolla | 16:46 | |
| *** phuongnh has joined #openstack-kolla | 16:50 | |
| jmccarthy | egonzalez: Yep the -4 got rid of most of the errors, but this one: | 16:50 |
| jmccarthy | 02-Aug-2017 17:19:53.862 managed-keys-zone: Unable to fetch DNSKEY set '.': timed out | 16:50 |
| *** ducttape_ has quit IRC | 16:50 | |
| *** ducttape_ has joined #openstack-kolla | 16:51 | |
| egonzalez90 | jmccarthy: will take a look tomorrow | 16:52 |
| duonghq | thank you inc0, egonzalez90, rwellum | 16:54 |
| duonghq | good night and see you later | 16:54 |
| rwellum | good night duonghq | 16:55 |
| kolla-slack | <srikrishna68> am trying to run this command in multinode setup kolla-ansible pull -i multinode but am getting the following error TASK [common : Pulling kolla-toolbox image] **************************************************************************************************************************** [WARNING]: Module did not set no_log for auth_password fatal: [10.125.154.19]: FAILED! => {"changed": true, "failed": true, "msg": "'Traceback ( | 16:55 |
| kolla-slack | call last):\\n File \"/tmp/ansible_ZzG7t_/ansible_module_kolla_docker.py\", line 777, in main\\n dw = DockerWorker(module)\\n File \"/tmp/ansible_ZzG7t_/ansible_module_kolla_docker.py\", line 214, in __init__\\n self.dc = docker.Client(**options)\\nAttributeError: \\'module\\' object has no attribute \\'Client\\'\\n'"} to retry, use: --limit @/usr/local/share/kolla-ansible/ansible/site.retry | 16:55 |
| *** jascott1 has quit IRC | 16:55 | |
| *** duonghq has quit IRC | 16:55 | |
| *** egonzalez90 has quit IRC | 16:55 | |
| inc0 | srikrishna, did you install correct version of docker-py? | 16:55 |
| inc0 | how did you install kolla and docker-py? | 16:56 |
| kolla-slack | <srikrishna68> which version i should install? | 16:56 |
| *** yangyapeng has quit IRC | 16:56 | |
| *** yangyapeng has joined #openstack-kolla | 16:56 | |
| inc0 | docker-py==1.6.0 should be fine | 16:56 |
| vhosakot | night duonghq_ | 16:57 |
| openstackgerrit | Rich Wellum proposed openstack/kolla-kubernetes master: Moved ko.py to orchestration/tools https://review.openstack.org/487972 | 16:57 |
| *** yangyapeng has quit IRC | 17:00 | |
| *** ramishra has quit IRC | 17:00 | |
| openstackgerrit | Rich Wellum proposed openstack/kolla-kubernetes master: A python tool to bring up Kubernetes and OpenStack. https://review.openstack.org/487972 | 17:02 |
| kolla-slack | <srikrishna68> do you the exact command to install a particular version of docker-py? | 17:03 |
| *** mgoddard has quit IRC | 17:03 | |
| inc0 | pip install docker-py==1.6.0 | 17:03 |
| *** k_mouza has joined #openstack-kolla | 17:04 | |
| *** ducttape_ has quit IRC | 17:08 | |
| *** k_mouza has quit IRC | 17:08 | |
| kolla-slack | <srikrishna68> i have cleared that error . i dont have any images in docker . should i give kolla-build command first or kolla ansible pull? | 17:09 |
| *** ducttape_ has joined #openstack-kolla | 17:11 | |
| *** reidrac has quit IRC | 17:11 | |
| *** harlowja has joined #openstack-kolla | 17:13 | |
| inc0 | build first then pull | 17:16 |
| *** unicell has joined #openstack-kolla | 17:17 | |
| *** ducttape_ has quit IRC | 17:17 | |
| *** ntpttr_laptop__ has joined #openstack-kolla | 17:20 | |
| *** ntpttr_laptop has joined #openstack-kolla | 17:20 | |
| *** prateek has joined #openstack-kolla | 17:22 | |
| *** tonanhngo has joined #openstack-kolla | 17:22 | |
| *** tonanhngo_ has joined #openstack-kolla | 17:25 | |
| kolla-slack | <srikrishna68> when i try kolla-build it gives the following messages | 17:25 |
| kolla-slack | <srikrishna68> INFO:kolla.image.build:Found the docker image folder at /usr/local/share/kolla/docker Traceback (most recent call last): File "/usr/local/bin/kolla-build", line 10, in <module> sys.exit(main()) File "/usr/local/lib/python2.7/dist-packages/kolla/cmd/build.py", line 30, in main statuses = build.run_build() File "/usr/local/lib/python2.7/dist-packages/kolla/image/build.py", line 1105, in run_build kolla = KollaWo | 17:25 |
| kolla-slack | File "/usr/local/lib/python2.7/dist-packages/kolla/image/build.py", line 581, in __init__ self.dc = docker.APIClient(version='auto', **docker_kwargs) AttributeError: 'module' object has no attribute 'APIClient' | 17:25 |
| *** tonanhngo has quit IRC | 17:26 | |
| *** prateek has quit IRC | 17:28 | |
| *** mgoddard has joined #openstack-kolla | 17:28 | |
| *** tonanhngo_ has quit IRC | 17:28 | |
| *** tonanhngo has joined #openstack-kolla | 17:28 | |
| vhosakot | rwellum also saw this issue the other day ^^ using 1.6 docker-py should resolve it. | 17:29 |
| vhosakot | srikrishna68 ^^ | 17:29 |
| *** sambetts is now known as sambetts|afk | 17:30 | |
| *** johnrambo has joined #openstack-kolla | 17:32 | |
| johnrambo | hi all | 17:32 |
| johnrambo | one question, | 17:32 |
| johnrambo | do kolla project have support for OpenContrail? | 17:33 |
| inc0 | johnrambo: not natively | 17:33 |
| inc0 | however in Pike we moved ovs to separate role | 17:34 |
| kolla-slack | <srikrishna68> @vhosakot i have installed 1.6 docker-py still the same error | 17:34 |
| inc0 | sri on *all* of the nodes or just deploy? | 17:34 |
| kolla-slack | <egonzalez> johnrambo nope but may be possible to do your own implementation | 17:34 |
| inc0 | I'm not sure what does it take to deploy opencontrail-based openstack tho | 17:35 |
| johnrambo | ok :) | 17:35 |
| *** manheim has quit IRC | 17:37 | |
| johnrambo | I have not used OpenContrail yet, just read about it and sounds pretty nice | 17:37 |
| vhosakot | johnrambo: kolla has OpenDaylight if you're not a Juniper fan ;) https://github.com/openstack/kolla/tree/master/docker/opendaylight | 17:37 |
| vhosakot | OpenDaylight does a lot of SDN-ish, YANG-ish, OpenFlow-ish things | 17:38 |
| kolla-slack | <srikrishna68> i installed in all nodes @inc0 | 17:40 |
| inc0 | vhosakot: it doesn't yet;) we didn't merge it just yet, we're close tho | 17:42 |
| vhosakot | inc0: right, I've seen many OpenDaylight patches in the queue, right :) | 17:42 |
| inc0 | https://review.openstack.org/#/c/416367/ you can help reviewing;) | 17:43 |
| kfox1111_ | sbezverk: the review looks ok to me. | 17:44 |
| johnrambo | vhosakot, which one is better ? OpenDaylight or OpenContrail | 17:44 |
| johnrambo | I saw the interface of OpenContrail much better than OpenDaylight | 17:44 |
| rwellum | sbezverk: kfox1111_ I know I asked this before. But how do I change a Service .conf file before running kolla-k8s? For example I want to change the cinder.conf to point to a different backend. | 17:46 |
| *** mmehan has joined #openstack-kolla | 17:49 | |
| *** johnrambo has quit IRC | 17:49 | |
| vhosakot | johnrambo: I have not used OpenContrail. I have used OpenDaylight and integrated OpenDaylight with OpenStack (using the networking-odl plugin) and I like it. OpenDaylight takes OpenStack to the SP/NFV/Telco world and bridges the gap using YANG, OpenFlow, and other SDN-ish things that OpenStack lacks. | 17:51 |
| vhosakot | OpenStack is just VM-as-a-service and is just a bunch of VMs end of the day :) SP/Telcos want more than that like NFV and service-chaining magic. | 17:52 |
| *** krtaylor has quit IRC | 17:53 | |
| *** yangyapeng has joined #openstack-kolla | 17:56 | |
| *** ducttape_ has joined #openstack-kolla | 17:59 | |
| vhosakot | we wrote a heat template with 1,200 lines to create a service chain in OpenStack. we were able to do it using just 3 APIs (3 lines) using OpenDaylight :) | 18:01 |
| *** yangyapeng has quit IRC | 18:01 | |
| *** Pavo has joined #openstack-kolla | 18:03 | |
| *** robellison has joined #openstack-kolla | 18:10 | |
| *** phuongnh has quit IRC | 18:10 | |
| kfox1111_ | vhosakot: cool. | 18:12 |
| kfox1111_ | was hoping maybe more of the nfv stuff landed in neutron so it worked out of the box. | 18:13 |
| kfox1111_ | haven't ever had time to figure out how to add it. | 18:13 |
| *** manheim has joined #openstack-kolla | 18:15 | |
| kfox1111_ | inc0: maybe they are serious about zuulv3 after all. :) | 18:15 |
| kfox1111_ | " | 18:15 |
| kfox1111_ | [openstack-dev] [all] Rollout of Zuul v3 at the PTG | 18:15 |
| kfox1111_ | " | 18:15 |
| inc0 | ahh going prod on conference | 18:16 |
| inc0 | it's even better than release on friday | 18:16 |
| kfox1111_ | that would be a great time to talk with them about getting our job in too. | 18:17 |
| inc0 | I know | 18:17 |
| inc0 | we'll be one of first gunnea pigs of zuulv3 I assume;) | 18:17 |
| inc0 | we can go live with dockerhub pushing on PTG or soon after too | 18:17 |
| kfox1111_ | lets make that one our top priority for the conference. | 18:18 |
| *** kfox1111_ is now known as kfox1111 | 18:19 | |
| inc0 | well I have most of code written | 18:19 |
| vhosakot | yeah saw the email about zuul v3 rollout. | 18:19 |
| vhosakot | kfox1111: yes, neutron in OpenStack is adding a lot of NFV/SDN plugins to make OpenStack NFV ready OTB. | 18:20 |
| kfox1111 | vhosakot: cool. | 18:21 |
| *** Pavo has quit IRC | 18:21 | |
| kolla-slack | <srikrishna68> am able to clear the kolla-ansible prechecks . But am getting error in kolla-build | 18:24 |
| kolla-slack | <srikrishna68> File "/usr/local/bin/kolla-build", line 10, in <module> sys.exit(main()) File "/usr/local/lib/python2.7/dist-packages/kolla/cmd/build.py", line 30, in main statuses = build.run_build() File "/usr/local/lib/python2.7/dist-packages/kolla/image/build.py", line 1105, in run_build kolla = KollaWorker(conf) File "/usr/local/lib/python2.7/dist-packages/kolla/image/build.py", line 581, in __init__ self.dc = | 18:24 |
| kolla-slack | docker.APIClient(version='auto', **docker_kwargs) AttributeError: 'module' object has no attribute 'APIClient' | 18:24 |
| kolla-slack | <srikrishna68> same error | 18:24 |
| kolla-slack | <srikrishna68> i dont have deployment host...am doing from controller host itself | 18:25 |
| rwellum | srikrishna: "pip freeze | grep docker-py" | 18:30 |
| *** ntpttr_laptop has quit IRC | 18:33 | |
| kolla-slack | <srikrishna68> docker-py==1.10.6 docker-pycreds==0.2.1 | 18:36 |
| kolla-slack | <srikrishna68> am getting this output | 18:36 |
| kolla-slack | <srikrishna68> docker-py is 1.10.6 ..it should be 1.6? | 18:37 |
| *** jtriley has quit IRC | 18:37 | |
| kolla-slack | <srikrishna68> pip install -U docker-py==1.6 Collecting docker-py==1.6 Requirement already up-to-date: requests>=2.5.2 in /usr/local/lib/python2.7/dist-packages (from docker-py==1.6) Requirement already up-to-date: websocket-client>=0.32.0 in /usr/local/lib/python2.7/dist-packages (from docker-py==1.6) Requirement already up-to-date: six>=1.4.0 in /usr/lib/python2.7/dist-packages (from docker-py==1.6) Requirement already up-to-date: idna<2.6, | 18:37 |
| kolla-slack | /usr/local/lib/python2.7/dist-packages (from requests>=2.5.2->docker-py==1.6) Requirement already up-to-date: chardet<3.1.0,>=3.0.2 in /usr/local/lib/python2.7/dist-packages (from requests>=2.5.2->docker-py==1.6) Requirement already up-to-date: certifi>=2017.4.17 in /usr/local/lib/python2.7/dist-packages (from requests>=2.5.2->docker-py==1.6) Requirement already up-to-date: urllib3<1.23,>=1.21.1 in /usr/local/lib/python2.7/dist-packages (from | 18:37 |
| kolla-slack | requests>=2.5.2->docker-py==1.6) Installing collected packages: docker-py Found existing installation: docker-py 1.10.6 Uninstalling docker-py-1.10.6: Successfully uninstalled docker-py-1.10.6 Successfully installed docker-py-1.6.0 | 18:37 |
| *** jtriley has joined #openstack-kolla | 18:38 | |
| kolla-slack | <srikrishna68> pip freeze | grep docker-py docker-py==1.6.0 docker-pycreds==0.2.1 | 18:38 |
| kolla-slack | <srikrishna68> even after docker-py==1.6.0 i get the same error in kolla-build | 18:39 |
| kolla-slack | <srikrishna68> kolla-build --base ubuntu --type source --registry 10.125.154.19:4000 --push INFO:kolla.image.build:Found the docker image folder at /usr/local/share/kolla/docker Traceback (most recent call last): File "/usr/local/bin/kolla-build", line 10, in <module> sys.exit(main()) File "/usr/local/lib/python2.7/dist-packages/kolla/cmd/build.py", line 30, in main statuses = build.run_build() File | 18:39 |
| kolla-slack | "/usr/local/lib/python2.7/dist-packages/kolla/image/build.py", line 1105, in run_build kolla = KollaWorker(conf) File "/usr/local/lib/python2.7/dist-packages/kolla/image/build.py", line 581, in __init__ self.dc = docker.APIClient(version='auto', **docker_kwargs) AttributeError: 'module' object has no attribute 'APIClient' | 18:39 |
| *** kevzha01_ has joined #openstack-kolla | 18:40 | |
| *** kevinz has quit IRC | 18:43 | |
| inc0 | vhosakot: nomination sent, poem included;) | 18:45 |
| *** krtaylor has joined #openstack-kolla | 18:45 | |
| robellison | so.. rabbitmq.. i now can start it IF i comment out the RABBITMQ_BOOT_MODULE=rabbit_clusterer line in rabbitmq-env.conf | 18:45 |
| robellison | anyone got any ideas as to why that doesn't work? its defo not name resolution! | 18:45 |
| vhosakot | inc0: cool, awesome! :) | 18:45 |
| rwellum | srikrishna: the actually command I used was: "pip install docker-py==1.6.*" | 18:47 |
| robellison | also, has anyone got any good inventory file examples for simple setups? i want a 3-node controllers and no network nodes (i'm going to use Nuage hopefully) and no storage (external ceph) | 18:49 |
| kolla-slack | <srikrishna68> still the same . no help :( | 18:49 |
| robellison | idealy no nova nodes until the controllers are working too | 18:49 |
| *** Pavo has joined #openstack-kolla | 18:49 | |
| *** jascott1 has joined #openstack-kolla | 18:49 | |
| *** Teck7 has joined #openstack-kolla | 18:50 | |
| sbezverk | inc0: to return greenness to our gate please https://review.openstack.org/484991 | 18:51 |
| *** iniazi_ is now known as iniazi | 18:51 | |
| kolla-slack | <jascott1> inc0 2017 Make the gates green again! | 18:53 |
| rwellum | srikrishna: not sure - here are the exact steps I used: | 18:54 |
| *** rfxn has quit IRC | 18:54 | |
| rwellum | https://www.irccloud.com/pastebin/ED2jK61G/ | 18:54 |
| kolla-slack | <srikrishna68> thanks will check | 18:54 |
| *** rfxn has joined #openstack-kolla | 18:55 | |
| inc0 | lol | 18:58 |
| *** Teck7 has quit IRC | 18:59 | |
| *** coolsvap has quit IRC | 19:01 | |
| rwellum | inc0: do you know offhand where 'kolla build' places it's build logs? | 19:05 |
| inc0 | by default stdout | 19:06 |
| inc0 | if you provide log dir.... | 19:06 |
| rwellum | Then it's redirected? Cool... | 19:07 |
| inc0 | --logs-dir is option you want | 19:08 |
| rwellum | ty | 19:08 |
| *** Pavo has quit IRC | 19:09 | |
| *** ducttape_ has quit IRC | 19:10 | |
| vhosakot | right, kolla gate also uses log dir http://logs.openstack.org/30/489930/1/check/gate-kolla-dsvm-build-centos-source-centos-7/43a1587/console.html#_2017-08-02_16_22_04_734939 | 19:19 |
| *** manheim has quit IRC | 19:33 | |
| *** mgoddard has quit IRC | 19:33 | |
| *** manheim has joined #openstack-kolla | 19:35 | |
| *** Pavo has joined #openstack-kolla | 19:38 | |
| *** spsurya has quit IRC | 19:40 | |
| *** ntpttr_laptop has joined #openstack-kolla | 19:54 | |
| *** ntpttr_laptop has quit IRC | 19:54 | |
| robellison | stupid question - where do i find the password to log in after install? | 19:55 |
| inc0 | login to openstack? | 19:56 |
| robellison | no doubt in the passwords.yml file, but which password? | 19:56 |
| robellison | yea | 19:56 |
| inc0 | admin_password | 19:56 |
| inc0 | keystone_admin_password | 19:56 |
| robellison | i can log into horizon with that as well? | 19:57 |
| *** yangyapeng has joined #openstack-kolla | 19:57 | |
| robellison | so i have got all this working (ish) but i had to make rabbitmq run standalone. there was no way it would run as a cluster. are you sure there are no bugs? i cant think what it could possibly be | 19:57 |
| inc0 | yes | 19:58 |
| inc0 | robellison: interesting, it used to work well | 19:59 |
| inc0 | can be something broken by rabbitmq release or whatever | 19:59 |
| robellison | i even took the container (and config etc) and ran it on my mac. still wouldn't start | 19:59 |
| *** yangyapeng has quit IRC | 20:02 | |
| robellison | i'm convinced it's something to do with overlayfs | 20:03 |
| robellison | interesting that the cluster method this is using is deprecated as well | 20:04 |
| inc0 | clusterer might need some love | 20:08 |
| *** krtaylor has quit IRC | 20:08 | |
| *** Pavo has quit IRC | 20:10 | |
| robellison | inc0 yeah i think there are newer alternatives | 20:13 |
| inc0 | good change for Queens | 20:14 |
| robellison | are you guys fixed on having the config outside the container? | 20:14 |
| inc0 | you mean you'd like to put conf inside image? | 20:14 |
| robellison | i need to build a rabbit cluster for something else | 20:14 |
| robellison | i ususally use environment variables or autodiscorvery | 20:15 |
| *** k_mouza has joined #openstack-kolla | 20:15 | |
| inc0 | you can do both in Kolla, also change conf file | 20:15 |
| robellison | mainly because we use swarm services a lot and they need to be self contained really | 20:15 |
| robellison | maybe i'll build one in the same way you do it that can run as a swarm service as well | 20:16 |
| robellison | just related acutlaly - are you planning on using swarm at all? | 20:17 |
| inc0 | plan-no | 20:17 |
| inc0 | possible-yes | 20:17 |
| inc0 | if someone would like to implement it, I see no reason why not;) | 20:17 |
| robellison | in the kolla-ansible project? | 20:18 |
| inc0 | env variables aren't good for configuring openstack services | 20:18 |
| robellison | or a separate one? | 20:18 |
| inc0 | no, it'd be separate project, as kolla-swarm | 20:18 |
| robellison | ok, interesting | 20:18 |
| robellison | are there any example production setups anywhere ? i'm looking to add an external API layer somehow | 20:19 |
| inc0 | API layer? as in external load balancer? | 20:19 |
| robellison | well an external 3 nodes, running haproxy and all the -api containers | 20:22 |
| robellison | DMZ nodes | 20:22 |
| inc0 | don't forget that Kolla runs haproxy on network nodes | 20:22 |
| inc0 | not controllers | 20:22 |
| inc0 | which means if you put your network nodes on dmz, which you shouild for l3 agents to be in dmz too | 20:23 |
| inc0 | that's what you're getting really | 20:23 |
| *** krtaylor has joined #openstack-kolla | 20:23 | |
| *** k_mouza has quit IRC | 20:23 | |
| robellison | i've not got any network nodes at the moment. i put haproxy on the control nodes | 20:23 |
| inc0 | well that's the way I'd suggest doing this | 20:24 |
| inc0 | as in, have 3 or so nodes connected to the world | 20:24 |
| inc0 | haproxy and l3-agents will land there | 20:24 |
| inc0 | other than that you can just look at our haproxy conf and replicate it exactly on dmz nodes | 20:25 |
| robellison | all the network stuff i'm going to do with nuage so no need for the netwok nodes | 20:25 |
| inc0 | ok | 20:25 |
| robellison | cool, so create a new group in inventory, add all the *-api containers | 20:25 |
| robellison | then create a bespoke haproxy | 20:25 |
| robellison | ? | 20:25 |
| inc0 | no need to create new group, they're all there | 20:25 |
| inc0 | https://github.com/openstack/kolla-ansible/blob/master/ansible/inventory/multinode#L82 | 20:26 |
| inc0 | override this | 20:26 |
| robellison | i'm going to be running ceph, so really worried about api hacing access to ceph-client network | 20:26 |
| robellison | so i need internal api's on the control nodes, and ideally all the api's also on some dmz nodes | 20:26 |
| robellison | users will only access the DMZ ones | 20:27 |
| robellison | which wont have access to ceph | 20:27 |
| robellison | not direct anyway | 20:27 |
| inc0 | right | 20:27 |
| inc0 | so | 20:27 |
| inc0 | put haproxy on dmz nodes | 20:27 |
| inc0 | only haproxy-terminated ceph api is rados gw | 20:28 |
| robellison | glance and cinder? | 20:28 |
| inc0 | so if your users only have access to nodes you specify in haproxy group, it should work | 20:28 |
| inc0 | glance and cinder won't go through haproxy | 20:28 |
| robellison | not even glance-api and cinder-api? | 20:29 |
| robellison | they seem to on most architecutre diagrams i've seen | 20:29 |
| inc0 | well, control nodes will have to have access to ceph | 20:30 |
| inc0 | thing is, users don't have access to control nodes | 20:30 |
| robellison | by default all the api's seem to be on there though | 20:30 |
| robellison | and they will access the API - though haproxy | 20:30 |
| inc0 | right...to glance and cinder APIs | 20:31 |
| inc0 | since they have to | 20:31 |
| inc0 | for example to create image | 20:31 |
| inc0 | they won't have direct access to ceph | 20:31 |
| robellison | it's still a bit of a worry when i dont know who is trying to access it | 20:32 |
| inc0 | so, you don't want your users to have access to cinder-api or glance-api? | 20:33 |
| *** https_GK1wmSU has joined #openstack-kolla | 20:33 | |
| robellison | yeah i do, but i want an external copy of those apis to be running in a DMZ | 20:33 |
| *** k_mouza has joined #openstack-kolla | 20:33 | |
| inc0 | that's haproxy | 20:33 |
| *** https_GK1wmSU has left #openstack-kolla | 20:34 | |
| inc0 | users don't have direct access to cinder-api, only haproxy endpoints which will NAT it to actual api | 20:34 |
| robellison | but everything they do will just be passed though | 20:34 |
| robellison | so if there is a vunerability in the web-server (whatever that is) it may be possible to execute code in that container which then has access to ceph etc etc | 20:35 |
| robellison | in my environment, the access they will have would be extensive | 20:35 |
| inc0 | well if you want to provide your own LB | 20:36 |
| inc0 | that's also quite easy | 20:36 |
| robellison | i'm aiming for something like this.. | 20:36 |
| inc0 | just configure your LB | 20:36 |
| inc0 | (you can use haproxy conf for reference) | 20:36 |
| inc0 | and then in globals: | 20:36 |
| robellison | user -> fw -> haproxy -> apis -> fw -> rabbitmq/mariadb/etc | 20:37 |
| inc0 | https://github.com/openstack/kolla-ansible/blob/master/etc/kolla/globals.yml#L30 | 20:37 |
| inc0 | this will be IP to your Load balancer | 20:37 |
| inc0 | and add enable_haproxy: "no" | 20:37 |
| robellison | i assume all the internal services use that as well though? | 20:37 |
| inc0 | yes, but you can have external ip too | 20:38 |
| *** k_mouza has quit IRC | 20:38 | |
| robellison | i want users to all hit the DMZ api's and internal stuff to hit the contol nodes as normal | 20:38 |
| inc0 | https://github.com/openstack/kolla-ansible/blob/master/etc/kolla/globals.yml#L41 this is your user-facing vip | 20:38 |
| inc0 | but that's only for haproxy conf | 20:38 |
| inc0 | if you have your own LB, that's up to you | 20:38 |
| inc0 | our haproxy doesn't bind to 0.0.0.0 | 20:39 |
| inc0 | it always binds to specific IP, so it will create 2 separate endpoints | 20:39 |
| robellison | yeah ok, i guess i'd need that VIP to be on a different haproxy | 20:39 |
| inc0 | one for private IP andother for public | 20:39 |
| robellison | ok, i guess it might just work then | 20:39 |
| inc0 | yeah, if your dmz machines has access to both internal and external | 20:40 |
| robellison | yeah i think that should be ok | 20:40 |
| inc0 | you give one for users and another for internal and haproxy will have 2 separate endpoints | 20:40 |
| robellison | yeah hopefully :) | 20:40 |
| inc0 | then fw can make rules depending on endpoint one hits | 20:40 |
| robellison | cool | 20:40 |
| robellison | sounds like it might be ok | 20:41 |
| inc0 | well if you'll find security loophole in this arch, please do let us know | 20:41 |
| inc0 | we try hard to make it secure;) | 20:41 |
| robellison | it's just glance and cinder with ceph that are the worry at the moment | 20:41 |
| robellison | i'll let you know what setup i end up with though. it will hopefully be a good example secure reference | 20:42 |
| *** jascott1 has quit IRC | 20:42 | |
| inc0 | fwiw ceph has nice auth on it's own | 20:42 |
| robellison | i've given up with the commercial distros because they are not flexible to be secure | 20:42 |
| robellison | yeah ceph auth seems good, but network-wise it's pretty open and we cant use firewalls because we need the performance | 20:42 |
| robellison | so separation of user-facing roles is critical | 20:43 |
| inc0 | yeah, we had couple people from orgs like military or investment banking trying kolla around and never heard anything too bad about our security | 20:43 |
| robellison | yeah we have similar requirements | 20:43 |
| inc0 | so if you hit some issues with way we deploy, do let us know | 20:44 |
| robellison | it's just flexibility i'm after | 20:44 |
| inc0 | right | 20:44 |
| robellison | yeah i will. i'll contribute a reference back | 20:44 |
| inc0 | well what I'm saying is we for example never bind to 0.0.0.0 | 20:44 |
| inc0 | little things like that | 20:44 |
| robellison | it seems good so far | 20:44 |
| inc0 | making openstack secure one attack vector at the time;) | 20:45 |
| robellison | very well laid out | 20:45 |
| *** k_mouza has joined #openstack-kolla | 20:45 | |
| *** k_mouza has quit IRC | 20:45 | |
| openstackgerrit | Serguei Bezverkhi proposed openstack/kolla-kubernetes master: Disable destroy_tests.sh as it constantly breaks ironic gate https://review.openstack.org/484991 | 20:46 |
| sbezverk | inc0: how about now? ^^^ | 20:47 |
| inc0 | +2'd | 20:47 |
| *** krtaylor has quit IRC | 20:50 | |
| *** Teck7 has joined #openstack-kolla | 20:53 | |
| *** jrist has quit IRC | 20:54 | |
| rwellum | sbezverk: is there a bug open on the faulty script - or that not something we are doing for kolla-k8s yet? | 20:55 |
| sbezverk | inc0: thanks | 20:55 |
| sbezverk | rwellum we do not, but I think we should start | 20:56 |
| sbezverk | rwellum if you have cycles, please file a bug | 20:56 |
| rwellum | sbezverk: Yeah sure. | 20:56 |
| *** rfxn has quit IRC | 20:57 | |
| *** rfxn has joined #openstack-kolla | 20:58 | |
| *** vhosakot has quit IRC | 20:58 | |
| *** vhosakot has joined #openstack-kolla | 21:00 | |
| *** lucasxu has quit IRC | 21:00 | |
| *** Teck7 has quit IRC | 21:02 | |
| *** jtriley has quit IRC | 21:05 | |
| *** stefan_bo has joined #openstack-kolla | 21:05 | |
| *** stefan_bo has quit IRC | 21:10 | |
| rwellum | sbezverk: pointer to the broken gate (logs)? | 21:13 |
| sbezverk | rwellum http://logs.openstack.org/05/485905/1/check/gate-kolla-kubernetes-deploy-centos-source-4-ironic-nv/360b62f/console.html.gz#_2017-07-21_01_49_19_534349 | 21:16 |
| *** robellison has quit IRC | 21:16 | |
| *** robellison has joined #openstack-kolla | 21:17 | |
| *** robellison has quit IRC | 21:17 | |
| *** robellison has joined #openstack-kolla | 21:18 | |
| *** robellison has quit IRC | 21:18 | |
| rwellum | sbezverk: https://bugs.launchpad.net/kolla-kubernetes/+bug/1708288 | 21:18 |
| openstack | Launchpad bug 1708288 in kolla-kubernetes "destroy_tests.sh breaks the Ironic gate" [Undecided,New] | 21:18 |
| *** robellison has joined #openstack-kolla | 21:18 | |
| sbezverk | rwellum thanks a lot! | 21:18 |
| *** robellison has quit IRC | 21:19 | |
| *** robellison has joined #openstack-kolla | 21:20 | |
| *** robellison has quit IRC | 21:20 | |
| *** jascott1 has joined #openstack-kolla | 21:21 | |
| *** lpetrut has joined #openstack-kolla | 21:21 | |
| *** mgoddard has joined #openstack-kolla | 21:23 | |
| *** jrist has joined #openstack-kolla | 21:26 | |
| rwellum | sbezverk: technically I guess, the +2 +w etc shouldn't be given until this PS has passed Jenkins? | 21:28 |
| sbezverk | rwellum right | 21:28 |
| sbezverk | but jenkins will not let ps merge before passing | 21:29 |
| rwellum | Ok fair enough. | 21:30 |
| *** vhosakot has quit IRC | 21:47 | |
| *** manheim has quit IRC | 21:51 | |
| *** mgoddard has quit IRC | 21:52 | |
| *** jamesbenson has quit IRC | 21:52 | |
| *** jamesbenson has joined #openstack-kolla | 21:55 | |
| *** yangyapeng has joined #openstack-kolla | 21:58 | |
| *** jamesbenson has quit IRC | 22:00 | |
| openstackgerrit | Merged openstack/kolla-kubernetes master: Disable destroy_tests.sh as it constantly breaks ironic gate https://review.openstack.org/484991 | 22:02 |
| *** yangyapeng has quit IRC | 22:03 | |
| *** goldyfruit has quit IRC | 22:04 | |
| iniazi | where is tools/start-registry (on centos 7), from the multinode deployment and deploying a registry | 22:14 |
| *** lpetrut has quit IRC | 22:14 | |
| *** https_GK1wmSU has joined #openstack-kolla | 22:17 | |
| *** https_GK1wmSU has left #openstack-kolla | 22:17 | |
| *** schwicht has quit IRC | 22:31 | |
| *** emccormick has joined #openstack-kolla | 22:35 | |
| *** goldyfruit has joined #openstack-kolla | 22:40 | |
| *** goldyfruit has quit IRC | 22:42 | |
| *** goldyfruit has joined #openstack-kolla | 22:46 | |
| *** eaguilar has joined #openstack-kolla | 22:50 | |
| *** pbourke has quit IRC | 22:55 | |
| *** jrist has quit IRC | 22:55 | |
| *** schwicht has joined #openstack-kolla | 22:56 | |
| *** pbourke has joined #openstack-kolla | 22:57 | |
| *** yangyapeng has joined #openstack-kolla | 23:02 | |
| *** yangyapeng has quit IRC | 23:07 | |
| *** jascott1 has quit IRC | 23:07 | |
| *** jascott1 has joined #openstack-kolla | 23:08 | |
| *** jascott1 has quit IRC | 23:10 | |
| *** eaguilar has quit IRC | 23:14 | |
| *** eaxiom has quit IRC | 23:15 | |
| *** eaguilar has joined #openstack-kolla | 23:19 | |
| *** itlinux has quit IRC | 23:20 | |
| *** itlinux_ has quit IRC | 23:20 | |
| *** hongbin has quit IRC | 23:21 | |
| *** tonanhngo has quit IRC | 23:24 | |
| *** _mmethot_ has joined #openstack-kolla | 23:24 | |
| *** mmethot_ has quit IRC | 23:26 | |
| *** mmehan has quit IRC | 23:27 | |
| *** schwicht has quit IRC | 23:28 | |
| *** eaguilar has quit IRC | 23:28 | |
| kfox1111 | rwellum: sbezverk: almost. jenkins will not let a W through for non passing voting jobs. | 23:35 |
| kfox1111 | kolla-kubernetes doesn't have many voting jobs yet. | 23:35 |
| kfox1111 | so its better to wait for the results before the final workflow. | 23:35 |
| *** tonanhngo has joined #openstack-kolla | 23:42 | |
| *** goldyfruit has quit IRC | 23:42 | |
| *** jascott1 has joined #openstack-kolla | 23:42 | |
| *** krtaylor has joined #openstack-kolla | 23:43 | |
| *** Pavo has joined #openstack-kolla | 23:45 | |
| *** tonanhngo has quit IRC | 23:47 | |
| *** manheim has joined #openstack-kolla | 23:52 | |
| openstackgerrit | Jeffrey Zhang proposed openstack/kolla-ansible master: Change mode after ceph and neutron log is rotated https://review.openstack.org/490254 | 23:52 |
| *** Pavo has quit IRC | 23:53 | |
| *** manheim has quit IRC | 23:57 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!