*** jascott1 has joined #openstack-kolla | 00:00 | |
*** pengdake has quit IRC | 00:02 | |
*** jascott1 has quit IRC | 00:03 | |
*** jascott1 has joined #openstack-kolla | 00:03 | |
*** jascott1 has quit IRC | 00:07 | |
*** goldyfruit has quit IRC | 00:11 | |
*** k_mouza has joined #openstack-kolla | 00:19 | |
*** tovin07_ has joined #openstack-kolla | 00:44 | |
openstackgerrit | zhongshengping proposed openstack/kolla-ansible master: Use WSGIApplicationGroup %{GLOBAL} in mod_wsgi configuration https://review.openstack.org/532437 | 00:50 |
---|---|---|
*** pengdake has joined #openstack-kolla | 00:52 | |
*** threestrands has quit IRC | 01:03 | |
*** zhaochao has joined #openstack-kolla | 01:04 | |
*** livelace-link has quit IRC | 01:08 | |
*** jtriley has joined #openstack-kolla | 01:10 | |
*** caowei has joined #openstack-kolla | 01:11 | |
*** genek_ has quit IRC | 01:12 | |
*** tovin07_ has quit IRC | 01:14 | |
*** kiennt26 has joined #openstack-kolla | 01:17 | |
*** mdnadeem has joined #openstack-kolla | 01:22 | |
*** kevzha01 has joined #openstack-kolla | 01:31 | |
*** zhurong has joined #openstack-kolla | 01:33 | |
*** k_mouza has quit IRC | 01:43 | |
*** livelace-link has joined #openstack-kolla | 01:46 | |
*** livelace-link has quit IRC | 01:48 | |
*** TxGirlGeek has quit IRC | 01:53 | |
*** skramaja has joined #openstack-kolla | 02:06 | |
*** tovin07_ has joined #openstack-kolla | 02:09 | |
*** duonghq has joined #openstack-kolla | 02:17 | |
*** kevzha01 is now known as kevinz | 02:31 | |
*** genek has joined #openstack-kolla | 02:41 | |
*** genek has quit IRC | 02:46 | |
*** jtriley has quit IRC | 02:46 | |
*** threestrands has joined #openstack-kolla | 02:47 | |
*** threestrands has joined #openstack-kolla | 02:47 | |
*** jtriley has joined #openstack-kolla | 02:48 | |
*** masber has quit IRC | 03:02 | |
*** masber has joined #openstack-kolla | 03:05 | |
*** unicell has quit IRC | 03:12 | |
*** harlowja_ has quit IRC | 03:21 | |
*** genek has joined #openstack-kolla | 03:33 | |
*** genek has quit IRC | 03:38 | |
openstackgerrit | Dai Dang Van proposed openstack/kolla-ansible master: Support policy.yaml file [part 8] https://review.openstack.org/532721 | 03:39 |
*** genek has joined #openstack-kolla | 03:50 | |
*** genek has quit IRC | 03:55 | |
*** gkadam has joined #openstack-kolla | 04:03 | |
*** Angeh has joined #openstack-kolla | 04:06 | |
*** absubram has quit IRC | 04:06 | |
*** genek has joined #openstack-kolla | 04:08 | |
*** zhurong has quit IRC | 04:12 | |
*** genek has quit IRC | 04:13 | |
*** daidv has joined #openstack-kolla | 04:16 | |
*** jtriley has quit IRC | 04:33 | |
*** unicell has joined #openstack-kolla | 04:40 | |
*** absubram has joined #openstack-kolla | 04:44 | |
*** unicell has quit IRC | 04:45 | |
*** dardelean has joined #openstack-kolla | 04:49 | |
*** dardelean has quit IRC | 04:54 | |
*** jtriley has joined #openstack-kolla | 05:00 | |
*** jtriley has quit IRC | 05:05 | |
*** jtriley has joined #openstack-kolla | 05:06 | |
*** janki has joined #openstack-kolla | 05:07 | |
*** itlinux has quit IRC | 05:14 | |
*** gkadam has quit IRC | 05:16 | |
*** unicell has joined #openstack-kolla | 05:17 | |
*** unicell has quit IRC | 05:21 | |
*** gema has quit IRC | 05:26 | |
*** gema has joined #openstack-kolla | 05:27 | |
*** zhurong has joined #openstack-kolla | 05:28 | |
*** harlowja has joined #openstack-kolla | 05:29 | |
*** dardelean has joined #openstack-kolla | 05:30 | |
*** dardelean has quit IRC | 05:34 | |
*** genek has joined #openstack-kolla | 05:40 | |
*** genek has quit IRC | 05:45 | |
*** coolsvap has joined #openstack-kolla | 05:47 | |
*** genek has joined #openstack-kolla | 05:49 | |
*** genek has quit IRC | 05:53 | |
*** xinliang has quit IRC | 05:56 | |
*** jbadiapa has quit IRC | 06:06 | |
*** xinliang has joined #openstack-kolla | 06:08 | |
*** xinliang has joined #openstack-kolla | 06:08 | |
*** jtriley has quit IRC | 06:12 | |
*** Angeh has quit IRC | 06:15 | |
*** unicell has joined #openstack-kolla | 06:17 | |
*** feldmann has joined #openstack-kolla | 06:18 | |
*** unicell has quit IRC | 06:24 | |
*** feldmann has quit IRC | 06:32 | |
*** jtriley has joined #openstack-kolla | 06:35 | |
*** ntpttr_laptop has quit IRC | 06:36 | |
*** unicell has joined #openstack-kolla | 06:38 | |
*** jtriley has quit IRC | 06:43 | |
*** harlowja has quit IRC | 06:47 | |
*** threestrands has quit IRC | 07:00 | |
*** threestrands has joined #openstack-kolla | 07:01 | |
*** threestrands has quit IRC | 07:01 | |
*** threestrands has joined #openstack-kolla | 07:01 | |
*** genek has joined #openstack-kolla | 07:02 | |
*** dardelean has joined #openstack-kolla | 07:02 | |
*** feldmann has joined #openstack-kolla | 07:02 | |
*** threestrands has quit IRC | 07:02 | |
*** threestrands has joined #openstack-kolla | 07:03 | |
*** threestrands has quit IRC | 07:03 | |
*** threestrands has joined #openstack-kolla | 07:03 | |
*** threestrands has quit IRC | 07:04 | |
*** threestrands has joined #openstack-kolla | 07:04 | |
*** egonzalez has joined #openstack-kolla | 07:06 | |
*** absubram has quit IRC | 07:12 | |
*** cah_link has joined #openstack-kolla | 07:12 | |
*** jtriley has joined #openstack-kolla | 07:15 | |
egonzalez | can i have reviews on this tacker fixes? https://review.openstack.org/#/c/531379/ https://review.openstack.org/#/c/531374/ | 07:19 |
*** pcaruana has joined #openstack-kolla | 07:21 | |
*** dims_ has quit IRC | 07:21 | |
*** jtriley has quit IRC | 07:21 | |
*** dardelean has quit IRC | 07:21 | |
*** feldmann has quit IRC | 07:21 | |
*** dardelean has joined #openstack-kolla | 07:22 | |
*** jtriley has joined #openstack-kolla | 07:23 | |
*** chmarkus has joined #openstack-kolla | 07:24 | |
*** dims has joined #openstack-kolla | 07:25 | |
*** chmarkus has quit IRC | 07:26 | |
*** feldmann has joined #openstack-kolla | 07:26 | |
*** chmarkus has joined #openstack-kolla | 07:26 | |
*** dardelean has quit IRC | 07:26 | |
*** jtriley has quit IRC | 07:28 | |
*** feldmann has quit IRC | 07:31 | |
*** jtriley has joined #openstack-kolla | 07:34 | |
*** skramaja has quit IRC | 07:37 | |
*** zhangfei has joined #openstack-kolla | 07:39 | |
*** jtriley has quit IRC | 07:40 | |
*** jtriley has joined #openstack-kolla | 07:45 | |
openstackgerrit | Merged openstack/kolla-ansible stable/pike: Fix deployment with public TLS enabled https://review.openstack.org/521154 | 07:46 |
*** feldmann has joined #openstack-kolla | 07:47 | |
*** dciabrin has quit IRC | 07:49 | |
*** jtriley has quit IRC | 07:50 | |
openstackgerrit | Merged openstack/kolla-ansible master: Enable vitrage dashboard https://review.openstack.org/530455 | 07:51 |
daidv | egonzalez, could you review for remain patches of supporting policy YAML file? #link https://review.openstack.org/#/q/topic:bp/support-custom-policy-yaml+(status:open+OR+status:merged) | 07:53 |
*** unicell1 has joined #openstack-kolla | 08:00 | |
*** jtriley has joined #openstack-kolla | 08:00 | |
*** unicell has quit IRC | 08:00 | |
*** dciabrin has joined #openstack-kolla | 08:05 | |
*** jtriley has quit IRC | 08:06 | |
*** jtriley has joined #openstack-kolla | 08:07 | |
openstackgerrit | Pierre Hanselmann proposed openstack/kolla-ansible master: Designate/Neutron communicaton failure https://review.openstack.org/532757 | 08:08 |
*** threestrands has quit IRC | 08:08 | |
*** dardelean has joined #openstack-kolla | 08:09 | |
*** jtriley has quit IRC | 08:12 | |
*** dardelean has quit IRC | 08:12 | |
*** Zophar has joined #openstack-kolla | 08:13 | |
*** n0isyn0i1e is now known as n0isyn0ise | 08:14 | |
*** gkadam has joined #openstack-kolla | 08:18 | |
*** jtriley has joined #openstack-kolla | 08:20 | |
*** shardy has joined #openstack-kolla | 08:22 | |
*** jtriley has quit IRC | 08:25 | |
openstackgerrit | Nguyen Hung Phuong proposed openstack/kolla master: Remove empty files https://review.openstack.org/532759 | 08:26 |
*** knsahm has joined #openstack-kolla | 08:27 | |
knsahm | does anybody know a good howto to deploy kolla-kubernetes an on a small kubernetes cluster (master + 3 nodes) | 08:29 |
*** jtriley has joined #openstack-kolla | 08:29 | |
gema | knsahm: we are still working through the scripts to make them work fine, there are issues | 08:32 |
*** gfidente has joined #openstack-kolla | 08:33 | |
gema | knsahm: https://docs.openstack.org/kolla-kubernetes/latest/deployment-guide.html | 08:33 |
knsahm | gema: thanks a lot | 08:33 |
gema | knsahm: you may find help here too: https://github.com/RichWellum/k8s | 08:34 |
gema | the deployment guide is being rewritten | 08:34 |
*** jtriley has quit IRC | 08:35 | |
knsahm | gema: the guide deploys a all-in-one instance, correct? | 08:36 |
*** jtriley has joined #openstack-kolla | 08:36 | |
gema | knsahm: there should be instructions for both | 08:36 |
gema | but I am not sure, I was relaying to you info from my team's internal doc | 08:36 |
gema | kevinz: ^ | 08:37 |
gema | kevinz: can you help? | 08:37 |
openstackgerrit | Zhaokun Fu proposed openstack/kolla-ansible master: FIX inject password error https://review.openstack.org/531949 | 08:37 |
*** jbadiapa has joined #openstack-kolla | 08:40 | |
openstackgerrit | Zhaokun Fu proposed openstack/kolla master: change python-libguestfs to python-guestfs for ubuntu https://review.openstack.org/532380 | 08:40 |
*** jtriley has quit IRC | 08:41 | |
*** pcaruana has quit IRC | 08:44 | |
*** nathharp has joined #openstack-kolla | 08:44 | |
*** magicboiz has joined #openstack-kolla | 08:45 | |
*** magicboiz has quit IRC | 08:45 | |
kevinz | gema: Just finish AIO | 08:46 |
kevinz | gema: knsahm: But I can help if you need:-) | 08:47 |
*** jaosorior has joined #openstack-kolla | 08:47 | |
*** b_bezak has joined #openstack-kolla | 08:47 | |
*** Mr_Broken has joined #openstack-kolla | 08:48 | |
kevinz | gema: knsahm: This RichWellum/k8s has been merged to upstream, ref here: https://github.com/openstack/kolla-kubernetes/blob/master/contrib/orchestration/ko.py | 08:48 |
kevinz | knsahm: This will give you a easy deployment by this script. | 08:49 |
knsahm | kevinz: ok i will try it | 08:49 |
knsahm | thanks | 08:49 |
*** jtriley has joined #openstack-kolla | 08:49 | |
kevinz | knsahm: yw | 08:50 |
kevinz | knsahm: ping me if you need help | 08:50 |
openstackgerrit | Merged openstack/kolla-ansible master: Use WSGIApplicationGroup %{GLOBAL} in mod_wsgi configuration https://review.openstack.org/532437 | 08:52 |
*** jtriley has quit IRC | 08:55 | |
*** b_bezak has quit IRC | 08:57 | |
*** Arminder has joined #openstack-kolla | 08:58 | |
*** jtriley has joined #openstack-kolla | 08:58 | |
*** nathharp has quit IRC | 09:03 | |
*** nathharp has joined #openstack-kolla | 09:03 | |
*** egonzalez has quit IRC | 09:03 | |
*** jtriley has quit IRC | 09:04 | |
*** egonzalez has joined #openstack-kolla | 09:05 | |
*** jtriley has joined #openstack-kolla | 09:10 | |
*** k_mouza has joined #openstack-kolla | 09:13 | |
*** ljjjustin has joined #openstack-kolla | 09:15 | |
*** jtriley has quit IRC | 09:15 | |
*** witek has joined #openstack-kolla | 09:16 | |
*** jtriley has joined #openstack-kolla | 09:17 | |
*** flaper87 has quit IRC | 09:17 | |
witek | hello | 09:17 |
witek | could someone tell me, how often master images are published to Docker Hub? | 09:18 |
*** flaper87 has joined #openstack-kolla | 09:21 | |
*** flaper87 has quit IRC | 09:21 | |
*** ktibi has joined #openstack-kolla | 09:22 | |
*** jtriley has quit IRC | 09:23 | |
*** flaper87 has joined #openstack-kolla | 09:23 | |
egonzalez | witek, master daily, let me check stable's | 09:24 |
egonzalez | daily too | 09:25 |
witek | do you use zuul job for that? | 09:25 |
openstackgerrit | Doug Szumski proposed openstack/kolla-ansible master: Local connection to remote Grafana can fail https://review.openstack.org/532587 | 09:27 |
egonzalez | witek, yep https://review.openstack.org/#/c/513855/ | 09:30 |
*** jtriley has joined #openstack-kolla | 09:31 | |
witek | thanks | 09:31 |
ktibi | Hi kolla ;) | 09:34 |
ktibi | I can see rally container doesn't launch rally db create. | 09:34 |
*** Goutham has joined #openstack-kolla | 09:34 | |
egonzalez | ktibi, it is https://github.com/openstack/kolla/blob/master/docker/rally/extend_start.sh#L13 | 09:36 |
*** jtriley has quit IRC | 09:36 | |
ktibi | egonzalez, Yes but when I use rally CLI, I have message => you need to execute rally db create first | 09:37 |
Goutham | Hi All, Facing this issue when performing prechecks using stable pike https://hastebin.com/oyucaxafaw.coffeescript | 09:38 |
openstackgerrit | Doug Szumski proposed openstack/kolla-ansible master: Local connection to remote Grafana can fail https://review.openstack.org/532587 | 09:39 |
Goutham | Docker version 18.01.0-ce, build 03596f5 in all nodes | 09:39 |
egonzalez | ktibi, need to fix the command https://review.openstack.org/#/c/498697/4 | 09:41 |
egonzalez | was changed to rally db create instead of rally-manage db create | 09:41 |
Goutham | egonzalez: any idea on the above error during precheck | 09:42 |
Goutham | ktibi: ^^ | 09:42 |
*** jtriley has joined #openstack-kolla | 09:43 | |
egonzalez | Goutham, what python docker you have? min version 2.0.0 | 09:46 |
Goutham | pip freeze | grep docker docker==2.7.0 docker-pycreds==0.2.1 | 09:47 |
openstackgerrit | Merged openstack/kolla-kubernetes master: Changed as per the standard convention set to use "." https://review.openstack.org/498332 | 09:48 |
*** jtriley has quit IRC | 09:49 | |
*** jtriley has joined #openstack-kolla | 09:49 | |
egonzalez | Goutham, The error was: while scanning for the next token\nfound character '\\t' that cannot start any token\n in \"<unicode string>\", line 2, column 10:\n Version:\t18.01.0-ce\n ^" | 09:49 |
egonzalez | } | 09:49 |
egonzalez | looks like doesnt like the \t | 09:50 |
Goutham | so how do i fix this ? any idea ? | 09:51 |
egonzalez | Goutham, ansible version? | 09:52 |
egonzalez | i dont have a docker 18-ce by hand to test | 09:52 |
Goutham | ansible 2.4.0.0 | 09:53 |
*** jtriley has quit IRC | 09:54 | |
ktibi | Goutham, thx ;) do you use rally container on your plateform ? | 09:56 |
ktibi | oups it's for egonzalez | 09:57 |
Zophar | Any issue with zuul now? Seem a job is hanging currently for more thant 6 hours (https://review.openstack.org/#/c/532721/) | 09:58 |
openstackgerrit | Eduardo Gonzalez proposed openstack/kolla-ansible master: Support policy.yaml file [part 8] https://review.openstack.org/532721 | 09:58 |
Zophar | ;) or you too busy with it apparently ;) | 09:58 |
egonzalez | Zophar, yep, zuul is having issues/timeouts/etc | 09:59 |
*** jtriley has joined #openstack-kolla | 10:00 | |
*** kristaps_ has quit IRC | 10:02 | |
egonzalez | ktibi, i dont use rally very often, just for test upgrades and things like that | 10:03 |
*** pcaruana has joined #openstack-kolla | 10:04 | |
*** ljjjustin has quit IRC | 10:05 | |
*** cah_link1 has joined #openstack-kolla | 10:06 | |
*** jtriley has quit IRC | 10:06 | |
ktibi | egonzalez, because I don't know how use the rally container. rally doesn't have API, so for now, I need to copy OS env in rally container and use docker exec for start bench or unit test :/ not very user friendly, maybe do you have better way ? | 10:06 |
*** cah_link has quit IRC | 10:06 | |
*** cah_link1 is now known as cah_link | 10:06 | |
egonzalez | ktibi, install rally python clients and point your config json to your openstack urls | 10:08 |
ktibi | ok, same idea :) | 10:08 |
*** jtriley has joined #openstack-kolla | 10:08 | |
egonzalez | ktibi, https://github.com/openstack/rally/blob/master/doc/source/quick_start/tutorial/step_1_setting_up_env_and_running_benchmark_from_samples.rst#registering-an-openstack-deployment-in-rally | 10:10 |
*** tovin07_ has quit IRC | 10:11 | |
*** cah_link1 has joined #openstack-kolla | 10:11 | |
*** cah_link has quit IRC | 10:11 | |
*** cah_link1 is now known as cah_link | 10:11 | |
*** jtriley has quit IRC | 10:14 | |
*** sambetts|afk is now known as sambetts | 10:14 | |
*** jtriley has joined #openstack-kolla | 10:14 | |
*** duonghq has quit IRC | 10:16 | |
*** pbourke has joined #openstack-kolla | 10:16 | |
*** cah_link has quit IRC | 10:18 | |
*** jtriley has quit IRC | 10:20 | |
chmarkus | while trying to add support for Alpine Linux to the openstack-base image I stumbled upon the issue that the pip package python-qpid-proton (and thus also pyngus) is not installable, because the compilation of proton-c fails. Reason seems to be some missing mutex definition in musl, related: http://qpid.2158936.n2.nabble.com/Compiling-proton-c-for-Linux-Alpine-td7669810.html | 10:22 |
chmarkus | entry in question: https://github.com/openstack/kolla/blob/c0368764fe6aa4a2f12ac093fff26b0a51ae1262/docker/openstack-base/Dockerfile.j2#L376 | 10:23 |
*** cah_link has joined #openstack-kolla | 10:23 | |
hrw | chmarkus: how much bigger is base when alpine/glibc is used instead of alpine/musl? | 10:26 |
*** jtriley has joined #openstack-kolla | 10:27 | |
chmarkus | hrw, with alpine/glibc you mean one of the custom alpine builds including glibc on docker hub? | 10:28 |
hrw | chmarkus: from quick look at that nabble.com talk it looks like alpine/glibc exists and should not have issues with mutex etc which musl has | 10:28 |
hrw | chmarkus: if size difference is not so big that it may save you time to get some first images built. | 10:29 |
chmarkus | if I understand that talk correctly, the glibc alpine docker images include only the runtime part of glibc | 10:30 |
chmarkus | I'd need the compiler for the pip package | 10:31 |
chmarkus | if I got that right | 10:31 |
*** jtriley has quit IRC | 10:31 | |
hrw | ah, ok | 10:32 |
*** robbbe has joined #openstack-kolla | 10:33 | |
*** zhurong has quit IRC | 10:35 | |
*** mnasiadka has joined #openstack-kolla | 10:35 | |
*** jtriley has joined #openstack-kolla | 10:37 | |
chmarkus | so essentially we wouldn't be able to support Qpid as a RabbitMQ alternative for Alpine based images at all... | 10:41 |
*** jtriley has quit IRC | 10:42 | |
*** feldmann has quit IRC | 10:44 | |
*** caowei has quit IRC | 10:44 | |
*** jtriley has joined #openstack-kolla | 10:48 | |
*** numans has quit IRC | 10:54 | |
*** jtriley has quit IRC | 10:54 | |
*** numans has joined #openstack-kolla | 10:55 | |
*** cah_link has quit IRC | 10:57 | |
*** jtriley has joined #openstack-kolla | 10:57 | |
hrw | with 96 cpu cores and low bandwidth using 8 threads looks like half push, half build | 11:00 |
*** jtriley has quit IRC | 11:02 | |
*** jtriley has joined #openstack-kolla | 11:03 | |
*** feldmann has joined #openstack-kolla | 11:04 | |
*** pengdake has quit IRC | 11:07 | |
*** jtriley has quit IRC | 11:08 | |
*** jtriley has joined #openstack-kolla | 11:11 | |
*** k_mouza_ has joined #openstack-kolla | 11:13 | |
*** k_mouza has quit IRC | 11:14 | |
*** k_mouza_ has quit IRC | 11:15 | |
*** jtriley has quit IRC | 11:16 | |
*** zhangfei has quit IRC | 11:17 | |
*** jtriley has joined #openstack-kolla | 11:19 | |
*** Goutham has quit IRC | 11:19 | |
*** k_mouza has joined #openstack-kolla | 11:20 | |
*** shardy has quit IRC | 11:22 | |
*** jtriley has quit IRC | 11:24 | |
*** shardy has joined #openstack-kolla | 11:24 | |
*** k_mouza has quit IRC | 11:24 | |
*** k_mouza has joined #openstack-kolla | 11:26 | |
*** jtriley has joined #openstack-kolla | 11:26 | |
*** jtriley has quit IRC | 11:32 | |
*** jtriley has joined #openstack-kolla | 11:39 | |
*** jtriley has quit IRC | 11:45 | |
*** jtriley has joined #openstack-kolla | 11:49 | |
*** rhallisey has joined #openstack-kolla | 11:54 | |
*** jtriley has quit IRC | 11:55 | |
*** jtriley has joined #openstack-kolla | 11:59 | |
*** janki has quit IRC | 11:59 | |
*** pcaruana has quit IRC | 12:02 | |
*** pcaruana|afk| has joined #openstack-kolla | 12:02 | |
*** jtriley has quit IRC | 12:04 | |
chmarkus | what would be the best way to conditionally remove entries from the list of packages in the following template? | 12:05 |
chmarkus | https://github.com/openstack/kolla/blob/c0368764fe6aa4a2f12ac093fff26b0a51ae1262/docker/openstack-base/Dockerfile.j2#L285 | 12:05 |
chmarkus | I want to remove 2 incompatible packages from the list if base_distro is alpine | 12:05 |
*** jtriley has joined #openstack-kolla | 12:05 | |
chmarkus | is there a way without completely copying the list into an elif statement? | 12:06 |
*** feldmann has quit IRC | 12:08 | |
*** jtriley has quit IRC | 12:11 | |
*** sean-k-mooney has joined #openstack-kolla | 12:14 | |
sean-k-mooney | o/ | 12:15 |
sean-k-mooney | is there anyone familar with deploying Octavia with kolla-ansibel around? im hoping to deploy it in the next few days but was wondering how to work around https://bugs.launchpad.net/kolla-ansible/+bug/1668377 | 12:16 |
openstack | Launchpad bug 1668377 in kolla-ansible "kolla-ansible certificates not generating certs for Octavia" [Wishlist,Triaged] | 12:16 |
*** jtriley has joined #openstack-kolla | 12:20 | |
openstackgerrit | Chason Chan proposed openstack/kolla-ansible master: Quickstart rewrite https://review.openstack.org/526200 | 12:21 |
egonzalez | chmarkus, {% set openstack_base_pip_packages_remove = [1, 2] %} | 12:22 |
hrw | chmarkus: and NOTE(chmarkus): those two packages got removed because ... | 12:22 |
*** jtriley has quit IRC | 12:24 | |
chmarkus | egonzalez, thanks - now I'm curious, how is "openstack_base_pip_packages_remove" evaluated by kolla? I can't find that string anywhere else by grep'ing. | 12:25 |
*** jtriley has joined #openstack-kolla | 12:25 | |
*** llua has quit IRC | 12:27 | |
*** llua has joined #openstack-kolla | 12:27 | |
*** egonzalez has quit IRC | 12:29 | |
*** jtriley has quit IRC | 12:30 | |
*** jtriley has joined #openstack-kolla | 12:31 | |
*** egonzalez has joined #openstack-kolla | 12:34 | |
*** Mr_Broken has quit IRC | 12:34 | |
*** feldmann has joined #openstack-kolla | 12:35 | |
*** jtriley has quit IRC | 12:36 | |
hrw | chmarkus: we did not had to use it probably | 12:36 |
*** zshi has quit IRC | 12:39 | |
*** jtriley has joined #openstack-kolla | 12:40 | |
chmarkus | I mean there has to be a function that takes the list "X_remove" and subtracts the elements from the list named "X" defined somewhere | 12:40 |
hrw | chmarkus: check jinja2 parser code | 12:41 |
*** zshi has joined #openstack-kolla | 12:41 | |
egonzalez | chmarkus, https://github.com/openstack/kolla/blob/master/kolla/template/filters.py#L19 | 12:41 |
chmarkus | oh I see | 12:42 |
chmarkus | many thanks | 12:42 |
chmarkus | it was the "customizable()" call in the filter chain for the install_pip macro then | 12:42 |
chmarkus | now it makes sense :) | 12:42 |
egonzalez | yep | 12:43 |
*** jtriley has quit IRC | 12:45 | |
*** absubram has joined #openstack-kolla | 12:48 | |
*** pcaruana|afk| has quit IRC | 12:49 | |
*** jtriley has joined #openstack-kolla | 12:50 | |
*** krtaylor_ has quit IRC | 12:50 | |
*** absubram_ has joined #openstack-kolla | 12:52 | |
*** absubram has quit IRC | 12:53 | |
*** absubram_ is now known as absubram | 12:53 | |
*** jtriley has quit IRC | 12:56 | |
*** pcaruana|afk| has joined #openstack-kolla | 13:02 | |
*** jtriley has joined #openstack-kolla | 13:02 | |
*** ljjjustin has joined #openstack-kolla | 13:03 | |
*** jtriley has quit IRC | 13:07 | |
*** lvdombrkr has joined #openstack-kolla | 13:09 | |
*** lvdombrkr has quit IRC | 13:09 | |
*** jaosorior has quit IRC | 13:09 | |
*** Mr_Broken has joined #openstack-kolla | 13:11 | |
*** janki has joined #openstack-kolla | 13:14 | |
*** lvdombrkr has joined #openstack-kolla | 13:14 | |
*** jtriley has joined #openstack-kolla | 13:16 | |
*** jtriley has quit IRC | 13:21 | |
*** chas has joined #openstack-kolla | 13:21 | |
*** pengdake has joined #openstack-kolla | 13:21 | |
*** jtriley has joined #openstack-kolla | 13:24 | |
*** absubram has quit IRC | 13:25 | |
*** jtriley has quit IRC | 13:29 | |
*** jtriley has joined #openstack-kolla | 13:32 | |
*** lvdombrkr has quit IRC | 13:34 | |
*** jtriley has quit IRC | 13:38 | |
ktibi | With cinder and ceph enabled, I have a fail with tempest and snapshot volume. I think we need to change to True rbd_flatten_volume_from_snapshot here https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/cinder/templates/cinder.conf.j2#L114 | 13:39 |
*** mdnadeem has quit IRC | 13:39 | |
ktibi | with false, we can't remove a volume created from a snapshot => https://bugs.launchpad.net/cinder/+bug/1485897 | 13:40 |
openstack | Launchpad bug 1485897 in Cinder "fail to delete a snapshot after creating a volume from it with RBD driver" [Undecided,Won't fix] | 13:40 |
ktibi | I found this fix but not merged https://review.openstack.org/#/c/281550/ | 13:40 |
*** jtriley has joined #openstack-kolla | 13:46 | |
*** masber has quit IRC | 13:52 | |
sean-k-mooney | qq if you anre not useing cinder drivers that require it is there any reason to enable the multipathd container | 13:54 |
openstackgerrit | Christian Berendt proposed openstack/kolla-ansible master: Make custom kibana configuration files possible https://review.openstack.org/532825 | 13:55 |
*** jtriley has quit IRC | 13:56 | |
openstackgerrit | Christian Berendt proposed openstack/kolla-ansible master: Make custom kibana configuration files possible https://review.openstack.org/532825 | 13:56 |
openstackgerrit | Christian Berendt proposed openstack/kolla-ansible master: Make custom elasticsearch configuration files possible https://review.openstack.org/532826 | 13:58 |
*** jtriley has joined #openstack-kolla | 13:59 | |
*** shardy has quit IRC | 14:02 | |
*** jtriley has quit IRC | 14:07 | |
*** jtriley has joined #openstack-kolla | 14:08 | |
*** dave-mccowan has joined #openstack-kolla | 14:10 | |
*** jtriley has quit IRC | 14:13 | |
*** dave-mccowan has quit IRC | 14:14 | |
*** yangyapeng has quit IRC | 14:15 | |
*** dave-mccowan has joined #openstack-kolla | 14:16 | |
*** ljjjustin has quit IRC | 14:29 | |
*** wojdec1 has joined #openstack-kolla | 14:32 | |
*** wojdec has quit IRC | 14:32 | |
*** zhaochao has quit IRC | 14:40 | |
*** lvdombrkr has joined #openstack-kolla | 14:41 | |
*** mchlumsky has joined #openstack-kolla | 14:42 | |
*** mchlumsky has quit IRC | 14:44 | |
*** mchlumsky has joined #openstack-kolla | 14:45 | |
*** mchlumsky has quit IRC | 14:45 | |
*** jtriley has joined #openstack-kolla | 14:46 | |
*** goldyfruit has joined #openstack-kolla | 14:52 | |
*** mchlumsky has joined #openstack-kolla | 14:55 | |
*** Rodrigo_BR has joined #openstack-kolla | 14:56 | |
*** goldyfruit has quit IRC | 14:59 | |
*** yangyapeng has joined #openstack-kolla | 15:00 | |
Rodrigo_BR | Hello guys, this will be my first deploy using kolla I deployed another environment using other tools, I would like deploy a multi node environment using 3 controllers on vms and 2 computes nodes on baremetal. | 15:00 |
Rodrigo_BR | but the quick start https://docs.openstack.org/kolla-ansible/latest/user/quickstart.html is a litle confuse. | 15:01 |
Rodrigo_BR | I need have a separate node for deployment ? | 15:02 |
*** wojdec has joined #openstack-kolla | 15:05 | |
*** shardy has joined #openstack-kolla | 15:08 | |
*** wojdec1 has quit IRC | 15:08 | |
pbourke | Rodrigo_BR: you don't need to no | 15:08 |
hrw | machine used for deployment may be used as one of target nodes iirc | 15:13 |
sean-k-mooney | kolla is written to use an optional dedicated deployment node for cases where a it is required for you network topology or b you just want to use a dedicated deployment node though i generally prefer to use one of my controler nodes as the deployment node | 15:15 |
Rodrigo_BR | Thanks, and about the local registry, Can I use any host or a separate node? | 15:15 |
*** goldyfruit has joined #openstack-kolla | 15:16 | |
sean-k-mooney | Rodrigo_BR: same fro registry, the only requirement is that all nodes can reach it over the network | 15:16 |
Rodrigo_BR | sean-k-mooney: thanks | 15:17 |
hrw | Rodrigo_BR: you will use official images from hub.docker or build own ones? | 15:17 |
Rodrigo_BR | hrw: I will try usage the official images | 15:19 |
sean-k-mooney | Rodrigo_BR: oh in that case you can skip the registry if all nodes have internet acess to pull them form docker hub. im guessing thats what hrw was going to suggest | 15:20 |
hrw | yep | 15:20 |
hrw | building own images in such case would be best with having local registry and then build-with-push to local and then deploy from local | 15:21 |
hrw | we built all kolla images for debian/source/aarch64 combo in 1.5h today on our new CI builder | 15:21 |
hrw | and then waited for an hour to get them pushed to hub.docker ;D | 15:22 |
Rodrigo_BR | hrw: sean-k-mooney: Ok I understood ! | 15:23 |
sean-k-mooney | hrw do you use apt-cacheng to cache the packages? i used to get a lot os speed ups from a local apt and pip cache in the past | 15:23 |
hrw | sean-k-mooney: proxy is next step. we just started using that beast | 15:23 |
*** chmarkus has quit IRC | 15:23 | |
*** chmarkus has joined #openstack-kolla | 15:24 | |
sean-k-mooney | hrw: i have found that alot of the time spend building is either due to slow disks or slow network. that said 1.5 hours is not terible | 15:24 |
hrw | sean-k-mooney: the good part is that all changes we wanted/needed are merged into kolla and kolla-ansible so we can concentrate on testing now | 15:26 |
hrw | sean-k-mooney: I plan to do one more build next week just to have second set for upgrade tests | 15:27 |
hrw | all-in-one setup runs on 29 images | 15:27 |
*** chmarkus has left #openstack-kolla | 15:29 | |
Rodrigo_BR | What is the stable version ocata or pike ? | 15:29 |
hrw | both are stable | 15:29 |
hrw | pike is latest stable | 15:29 |
Rodrigo_BR | hrw: I will try with pike, thanks | 15:31 |
*** M4he has joined #openstack-kolla | 15:33 | |
sean-k-mooney | Rodrigo_BR: queens will be avilable in about 6 weeks so if your testing time permits you can also upgrade to queens before going to production | 15:33 |
*** M4he has left #openstack-kolla | 15:33 | |
*** yangyapeng has quit IRC | 15:33 | |
*** janki has quit IRC | 15:35 | |
Rodrigo_BR | Good news ! Yes I can wait and test the upgrade in my LAB | 15:35 |
*** shardy has quit IRC | 15:35 | |
*** pengdake has quit IRC | 15:35 | |
*** itlinux has joined #openstack-kolla | 15:37 | |
*** yangyapeng has joined #openstack-kolla | 15:38 | |
*** lvdombrkr has quit IRC | 15:39 | |
*** chas has quit IRC | 15:39 | |
ktibi | 6 weeks for queens ? | 15:42 |
*** chmarkus has joined #openstack-kolla | 15:43 | |
ktibi | with luminous for ceph ? :D I saw last talk between inc0 and gema. | 15:43 |
ktibi | date for first RC of kolla ? | 15:45 |
*** mahe has joined #openstack-kolla | 15:46 | |
Zophar | https://bugs.launchpad.net/kolla-ansible/+bug/1740455 | 15:46 |
openstack | Launchpad bug 1740455 in kolla-ansible "Kolla Designate Pike "Could not find 1514518466 for openstack.example. on enough nameservers."" [Undecided,New] | 15:46 |
Zophar | Guys.... the worker is sending NOTIFY to dns backend (Bind)... but doesn't seems to work... if i disable notify on worker, mdns will do the notify on dns backend... and it works | 15:47 |
*** itlinux has quit IRC | 15:47 | |
Zophar | Seems more a workaround that a real solution... any clue why bind doesn't accept the notify from the worker? | 15:48 |
Zophar | named.conf? | 15:48 |
*** mnasiadka has quit IRC | 15:49 | |
*** mnasiadka has joined #openstack-kolla | 15:50 | |
sean-k-mooney | pbourke: egonzalez inc0 qq do we gate on external ceph. im going to try and deploy with it shortly just wondering if we test it regularly | 15:51 |
*** mahe has left #openstack-kolla | 15:51 | |
pbourke | sean-k-mooney: no it's untested unfortuknately | 15:51 |
pbourke | *unfortunately | 15:51 |
sean-k-mooney | ok i tried it last weekend at home with no luck but i was on a weird config so we will see how it goes with centos | 15:52 |
*** jmcevoy has joined #openstack-kolla | 15:52 | |
sean-k-mooney | pbourke: are we still planning to move to external ceph only in the future? | 15:52 |
ktibi | Zophar I use pike and designate and I can create record which are created in my bind. | 15:52 |
pbourke | sean-k-mooney: honestly I'm not sure | 15:53 |
pbourke | I guess it depends if any external solution is viable | 15:53 |
pbourke | from what I hear ceph-ansible right now is not | 15:54 |
*** mnasiadka has quit IRC | 15:55 | |
sean-k-mooney | pbourke: i actully deployed with ceph ansible for this deployment but not the dockerised mode | 15:55 |
pbourke | yeah I'm not saying its not good, just unsure how well it will work as a drop in replacement | 15:55 |
sean-k-mooney | i would be happier with it as one if the docker version was robust but i think its still a little young that said we have bugs in our native support too so you can pick your poision i guess | 15:57 |
pbourke | yeah | 16:00 |
*** itlinux has joined #openstack-kolla | 16:08 | |
*** jbadiapa has quit IRC | 16:08 | |
gema | sean-k-mooney: we have tested ceph queens | 16:12 |
gema | sean-k-mooney: smoke test after manual installation worked, we don't support bluestore config | 16:12 |
gema | sean-k-mooney: not sure if that helps, but there you go :) | 16:13 |
gema | pbourke: ^ | 16:13 |
pbourke | good to know gema | 16:13 |
sean-k-mooney | gema: external ceph or ceph deployed by kolla | 16:13 |
gema | sean-k-mooney: ceph deployed by kolla-ansible | 16:13 |
gema | luminous | 16:13 |
gema | we have also tested with pike containers and they also work | 16:14 |
sean-k-mooney | gema: ah as an fyi there are still 2 bugs with that wich we should really fix. | 16:14 |
gema | sean-k-mooney: do you have ids? | 16:14 |
gema | I can put someone on those | 16:14 |
*** lvdombrkr has joined #openstack-kolla | 16:15 | |
sean-k-mooney | i dont know if the bugs are still open or if i created them ... ill try to open them later if not already there. | 16:15 |
sean-k-mooney | 1 we dont set the cache size when you enable ceph caching so you have to do that as a manual step after or you data will never leave the cache and be written tothe backing teir | 16:16 |
gema | sean-k-mooney: sounds good, keep me posted | 16:16 |
gema | unless you ahve the bandwith | 16:16 |
*** egonzalez has quit IRC | 16:16 | |
gema | then we can review | 16:16 |
sean-k-mooney | 2 we use /dev/sdX names for the external journal paths in the contianers instead of the uuids so external journals can fail if those names change on a reboot | 16:16 |
gema | sean-k-mooney: one problem we are fixing is that we don't allow to install ceph on a partition instead of an entire drive and that is bad for testing in our env | 16:17 |
sean-k-mooney | gema: well these have been around since ceph support was added so sinc ei have not fixed them yet im proably going to keep putting them off.... | 16:17 |
gema | sean-k-mooney: we are going to upgrade our cluster to the containers in queens, so we need to make those work | 16:18 |
ktibi | gema why bluestore no works ? | 16:18 |
gema | ktibi: it cannot be configured, I am told, with kolla-ansible | 16:18 |
sean-k-mooney | gema: ya the first time i used kolla to deploy ceph i tried to use a partition on my os drive and nuked the whole thing... that was interesting... | 16:18 |
gema | sean-k-mooney: yep | 16:18 |
*** feldmann has quit IRC | 16:19 | |
gema | sean-k-mooney: we have moonshots for testing, and those only have one SSD per cartridge | 16:19 |
gema | so our current ceph deployment is not very testable | 16:19 |
sean-k-mooney | ktibi: the partition layout is different for bluestore and you have to skip steps like creating a file system on the main osd partion | 16:19 |
sean-k-mooney | gema: for testing loopback devices work well | 16:20 |
sean-k-mooney | i think thats what we use in the gate | 16:20 |
gema | sean-k-mooney: ok, will tell my team | 16:20 |
sean-k-mooney | gema: they might find this helpful https://github.com/openstack/kolla-ansible/blob/master/tests/setup_ceph_disks.sh | 16:20 |
gema | sean-k-mooney: thanks! | 16:21 |
sean-k-mooney | by the way ye added dpdk support last release correct? do ye test that in your ci? | 16:22 |
gema | sean-k-mooney: our CI is two guys for now | 16:22 |
sean-k-mooney | ah :) | 16:23 |
gema | sean-k-mooney: we are working throught the system to add to tmonjalo's patchwork automation | 16:23 |
gema | sean-k-mooney: we found out he has stuff automated | 16:23 |
gema | sean-k-mooney: we are also talking to the unh guys | 16:23 |
gema | about the interop automation lab | 16:23 |
gema | some of our members are going to put HW there, I think | 16:24 |
gema | sean-k-mooney: so still on the making | 16:24 |
gema | sean-k-mooney: we can catch up in dublin, I am guessing you'll be there? | 16:24 |
sean-k-mooney | one of my own personal goals (never have time to work on it) is to extend kolla-ansible to deploy a workign copy of zuul + nodepool so you can easily setup a ci | 16:24 |
gema | that'd be nifty | 16:25 |
sean-k-mooney | gema: ya its looking like i will. i havent booked a ticket/hotel yet but i will likely do that soon | 16:25 |
*** lvdombrkr has quit IRC | 16:25 | |
gema | sean-k-mooney: sounds good | 16:25 |
ktibi | when do you think can I test upgrade P=>Q ? I have a big dev plateform with ceph cluster (80 OSDs) | 16:26 |
ktibi | maybe good to test on a RC :) | 16:26 |
sean-k-mooney | ktibi: if you feel like testing an rc on production? feel free | 16:26 |
ktibi | dev plateform* | 16:26 |
sean-k-mooney | that more sane hehe sorry missread | 16:27 |
ktibi | plateform for test my deploy :) | 16:27 |
*** ManoX has joined #openstack-kolla | 16:28 | |
ktibi | I had make a lot of benchmark on CEPH, very | 16:29 |
ktibi | excited to test ceph upgrade :D | 16:29 |
kolla-slack | <aslancimbom100> are you using nvme ktibi? | 16:30 |
*** absubram has joined #openstack-kolla | 16:31 | |
*** shardy has joined #openstack-kolla | 16:32 | |
*** knsahm has quit IRC | 16:32 | |
sean-k-mooney | inc0: i could have sworn kolla had upgrade gates at one point. was i imaginging it? or was that a future goal | 16:32 |
*** mnasiadka has joined #openstack-kolla | 16:33 | |
pbourke | sean-k-mooney: future goal! | 16:33 |
sean-k-mooney | ktibi: it look like all the luminous patches have merged https://review.openstack.org/#/q/topic:bp/ceph-luminous so you shoudl be able to test ceph upgrades | 16:33 |
ktibi | aslancimbom100 no full SSD | 16:34 |
ktibi | with sata | 16:35 |
*** absubram has quit IRC | 16:36 | |
sean-k-mooney | pro anti hack tip. if you only have one ssd in the server don thave it hold a cache partiton, 2 journals and the os unless you like really shortening life fo your ssd's | 16:36 |
*** wojdec has quit IRC | 16:39 | |
ktibi | sean-k-mooney, do you test plugin with ceph mgr ? like metrics in influx ? | 16:41 |
*** absubram has joined #openstack-kolla | 16:41 | |
ktibi | maybe we can enable module if influx is deploy by kolla :) | 16:42 |
sean-k-mooney | ktibi: i have not looked into the fucntionality provided by the ceph mgr yet but i was hoping to add ceph monitoring via collectd in the future. | 16:42 |
sean-k-mooney | *to my cloud not sure if ill have time to automate it via kolla | 16:43 |
kolla-slack | <aslancimbom100> ceph-mgr sounds/looks like a good addition...bluestore also available? | 16:45 |
ktibi | aslancimbom100, no http://eavesdrop.openstack.org/irclogs/%23openstack-kolla/latest.log.html#t2018-01-11T16:19:41 | 16:46 |
sean-k-mooney | the lack of bluestore is why im currently deploying with ceph ansible and trying the external ceph support | 16:47 |
kolla-slack | <aslancimbom100> I see ok thanks | 16:47 |
*** jtriley has quit IRC | 16:51 | |
*** jtriley has joined #openstack-kolla | 16:52 | |
*** pcaruana|afk| has quit IRC | 16:57 | |
*** k_mouza has quit IRC | 17:14 | |
*** wojdec has joined #openstack-kolla | 17:17 | |
*** ntpttr_laptop has joined #openstack-kolla | 17:32 | |
*** feldmann has joined #openstack-kolla | 17:35 | |
kfox1111 | morning. | 17:36 |
*** coolsvap has quit IRC | 17:36 | |
*** gkadam has quit IRC | 17:37 | |
*** mnasiadka has quit IRC | 17:41 | |
*** nathharp has quit IRC | 17:42 | |
*** absubram has quit IRC | 17:46 | |
-openstackstatus- NOTICE: Due to an unexpected issue with zuulv3.o.o, we were not able to preserve running jobs for a restart. As a result, you'll need to recheck your previous patchsets | 17:47 | |
*** mnasiadka has joined #openstack-kolla | 17:50 | |
*** mnasiadka has quit IRC | 17:54 | |
*** sambetts is now known as sambetts|afk | 17:54 | |
*** jistr is now known as jistr|afk | 17:55 | |
inc0 | good morning | 18:00 |
*** martinst has joined #openstack-kolla | 18:03 | |
*** jbadiapa has joined #openstack-kolla | 18:04 | |
*** mnasiadka has joined #openstack-kolla | 18:05 | |
*** wojdec has quit IRC | 18:06 | |
*** mnasiadka has quit IRC | 18:10 | |
*** ntpttr_laptop has quit IRC | 18:11 | |
*** unicell1 has quit IRC | 18:13 | |
*** robbbe has quit IRC | 18:17 | |
*** wojdec has joined #openstack-kolla | 18:18 | |
*** mnasiadka has joined #openstack-kolla | 18:20 | |
*** wojdec1 has joined #openstack-kolla | 18:20 | |
*** wojdec has quit IRC | 18:22 | |
*** mnasiadka has quit IRC | 18:24 | |
sean-k-mooney | inc0: 0/ how is life states side | 18:32 |
inc0 | cold rain today | 18:32 |
inc0 | probably my least favorite weather | 18:33 |
inc0 | it could only get worse if cold rain would be freezing rain | 18:33 |
sean-k-mooney | we had fog up to like an hour ago when i think it just froze instead of clearing | 18:33 |
sean-k-mooney | im currently preparing to deploy the docker hub stable pike images with external ceph which could be interesting | 18:35 |
*** mnasiadka has joined #openstack-kolla | 18:35 | |
inc0 | yeah, totally | 18:35 |
sean-k-mooney | im personaly hoping its boaring and just works :P | 18:35 |
inc0 | gates are using hub images all the time now | 18:35 |
sean-k-mooney | how has that effect speed/reliablity? | 18:36 |
inc0 | not really | 18:36 |
inc0 | mechanism for publishing is similar to that of tarballs | 18:36 |
inc0 | but I have change in pipeline that's adding testing before publishing | 18:36 |
inc0 | so that should have positive impact | 18:36 |
sean-k-mooney | oh ya i forgot about that. | 18:36 |
inc0 | lol | 18:37 |
inc0 | I just wanted to exec to my standing container | 18:37 |
inc0 | with sleep 99999 and was baffled when I couldnt | 18:38 |
inc0 | I guess 99999 seconds passed.. | 18:38 |
sean-k-mooney | lol ya maybe try sleep infinity next time | 18:38 |
sean-k-mooney | regarding the gates we dont run tempest yet correct | 18:39 |
sean-k-mooney | is that what your patch is doing or something else? | 18:39 |
*** mnasiadka has quit IRC | 18:40 | |
inc0 | no, my patch just adds testing to pipeline | 18:40 |
inc0 | no tempest or upgrades yet | 18:40 |
inc0 | :( | 18:40 |
inc0 | we have all the tools we'd need tho | 18:40 |
inc0 | with stable images up there we can totally do upgrade gates | 18:40 |
sean-k-mooney | well we have the tempest container already so it would not take too much to add tempest | 18:40 |
inc0 | yeah | 18:41 |
sean-k-mooney | we have the role too actully | 18:41 |
inc0 | yup | 18:41 |
sean-k-mooney | the only annoyance with the role is you have to do two deploy to use it | 18:41 |
inc0 | hmm..I wonder why | 18:42 |
inc0 | I mean if you put tempest role at the very end, it really have whole cloud there | 18:42 |
sean-k-mooney | actully you could do it in one. you just need to know the flavor ids, image ids and network ides you will use ahead of time | 18:43 |
sean-k-mooney | the role uses that info to create a tempest config | 18:43 |
*** wojdec1 has quit IRC | 18:47 | |
inc0 | you can create these in tempest role | 18:47 |
inc0 | I'd be ok with that | 18:47 |
sean-k-mooney | inc0: yes you could but it does not do it currently if you did it would work the way devstack does | 18:47 |
*** mnasiadka has joined #openstack-kolla | 18:50 | |
*** shardy has quit IRC | 19:01 | |
*** gkadam has joined #openstack-kolla | 19:17 | |
*** bmace has quit IRC | 19:19 | |
*** bmace has joined #openstack-kolla | 19:19 | |
*** feldmann has quit IRC | 19:23 | |
openstackgerrit | Christian Berendt proposed openstack/kolla-ansible master: kibana: allow use of server.basePath https://review.openstack.org/532946 | 19:25 |
*** gfidente is now known as gfidente|afk | 19:26 | |
*** itlinux has quit IRC | 19:26 | |
*** feldmann has joined #openstack-kolla | 19:38 | |
*** harlowja has joined #openstack-kolla | 19:43 | |
*** wojdec has joined #openstack-kolla | 19:52 | |
*** feldmann has quit IRC | 19:54 | |
*** itlinux has joined #openstack-kolla | 19:54 | |
*** itlinux has quit IRC | 19:55 | |
*** jistr|afk is now known as jistr | 19:57 | |
jmcevoy | How is the Spectre/Meltdown bug patched with with containers? We are running version kolla-ansible 3.0.3 with Newton. We will be patching the hypervisors and controllers and the cinder images. Do the kolla containers need to be patched since updates to kvm and qemu are part of the patch? | 20:00 |
*** ManoX has quit IRC | 20:05 | |
*** wojdec has quit IRC | 20:05 | |
*** gema has quit IRC | 20:06 | |
kfox1111 | jmcevoy: I believe you need to create updated containers with new qemu version with the fixes in it applied. | 20:07 |
*** jtriley has quit IRC | 20:09 | |
*** feldmann has joined #openstack-kolla | 20:10 | |
*** wojdec has joined #openstack-kolla | 20:11 | |
*** gkadam has quit IRC | 20:12 | |
*** jtriley has joined #openstack-kolla | 20:12 | |
*** mnasiadka has quit IRC | 20:15 | |
*** mchlumsky has quit IRC | 20:17 | |
*** gema has joined #openstack-kolla | 20:33 | |
*** Rodrigo_BR has quit IRC | 20:36 | |
*** gfidente|afk has quit IRC | 20:47 | |
jmcevoy | Thanks kfox1111 | 20:48 |
*** mm6021 has joined #openstack-kolla | 20:53 | |
sean-k-mooney | yeah my new team dev cluster is alive :) time to go home before it explodes and i spend all evening fixing it | 20:54 |
jmcevoy | kfox1111 is there an easy way to pass kolla-build the version of the updated qemu rpm for centos? I have been building from binaries rpms. | 20:55 |
*** nathharp has joined #openstack-kolla | 20:55 | |
sean-k-mooney | jmcevoy: you sould have to use a template override | 20:55 |
sean-k-mooney | kfox1111: for Spectre/Meltdown you should really just need to update the kernel i think it should not need a container rebuild | 20:56 |
sean-k-mooney | kfox1111: we use kvm from the host kernel so that would be pathced when the host is patched. qemu i dont think is effected by either iteslf. | 20:58 |
jmcevoy | seal-k-mooney OK I did that before to install a private CA certificate. And what do I do to push out the change... Have not gotten a chance to run an upgrade yet... Or do I just run deploy again? | 20:59 |
sean-k-mooney | jmcevoy: you would build the images with a new tag version then upgrade to that tag version | 21:00 |
sean-k-mooney | but for meltdown and specter i dont think you need a contaienr rebuild just a host kernel update | 21:00 |
*** krtaylor has joined #openstack-kolla | 21:02 | |
jmcevoy | sean-k-mooney: Where does /usr/libexec/qemu-kvm run from a container or the host syste,? | 21:02 |
sean-k-mooney | meltdown is mitigated by segmenting kernel and user spaces page so qemu does not need to be updated to facilite that and since kvm is from the host kernel it should be fine also | 21:02 |
sean-k-mooney | jmcevoy: the container | 21:02 |
*** david-lyle has quit IRC | 21:03 | |
*** krtaylor has quit IRC | 21:03 | |
*** david-lyle has joined #openstack-kolla | 21:04 | |
*** krtaylor has joined #openstack-kolla | 21:04 | |
sean-k-mooney | jmcevoy: i could be wrong but i would guess the qemu changes are updates to the cpu feature set to expose the PCID feautre for all cpu models that support it. that prevents the performance hit intoduces by the kernel adress spaces segmentation and the tlb flushes that introduces. | 21:05 |
sean-k-mooney | to be extra safe it would be worth rebuilding the images if for nothing else then to pick up any other security patches that are out standing, but not 100% sure it would be required to patch meltdown on its own | 21:06 |
*** wojdec has quit IRC | 21:07 | |
kfox1111 | sean-k-mooney: I patched all my machines with a newer qemu-kvm-ev package too | 21:09 |
kfox1111 | as they mention specifically, fixing spectre issues. | 21:09 |
kfox1111 | I'm guesssing it is for a vm to vm attack, not the meltdown vm to kernel attack. | 21:09 |
*** Mr_Broken has quit IRC | 21:10 | |
*** masber has joined #openstack-kolla | 21:10 | |
sean-k-mooney | kfox1111: ah perhaps, jmcevoy an upgrade is your safet bet but without the kernel host update you will still be vulnerable. i think redhat release an ansible playbook to patch RHEL/centos systems | 21:16 |
sean-k-mooney | jmcevoy: if the qemu pathed rpms are availabel in the centos main repo(they should be) you should just be able to do a normal image build and it will pick them up. i dont think we pin the version specifically in kolla | 21:18 |
kfox1111 | +1. | 21:24 |
*** nathharp has quit IRC | 21:26 | |
*** nathharp has joined #openstack-kolla | 21:27 | |
*** nathharp has quit IRC | 21:31 | |
*** nathharp has joined #openstack-kolla | 21:32 | |
*** numans has quit IRC | 21:36 | |
*** numans has joined #openstack-kolla | 21:36 | |
*** unicell has joined #openstack-kolla | 21:37 | |
*** threestrands has joined #openstack-kolla | 21:58 | |
*** threestrands has quit IRC | 21:58 | |
*** threestrands has joined #openstack-kolla | 21:58 | |
*** threestrands has quit IRC | 21:59 | |
*** threestrands has joined #openstack-kolla | 21:59 | |
*** threestrands has quit IRC | 21:59 | |
*** threestrands has joined #openstack-kolla | 21:59 | |
*** threestrands has quit IRC | 22:00 | |
*** threestrands has joined #openstack-kolla | 22:01 | |
*** jbrooks has quit IRC | 22:01 | |
*** jascott1 has joined #openstack-kolla | 22:02 | |
*** threestrands has quit IRC | 22:02 | |
*** threestrands has joined #openstack-kolla | 22:02 | |
*** jbrooks has joined #openstack-kolla | 22:02 | |
*** bjolo has quit IRC | 22:09 | |
*** ktibi has quit IRC | 22:12 | |
*** jtriley has quit IRC | 22:12 | |
*** feldmann has quit IRC | 22:16 | |
*** dave-mccowan has quit IRC | 22:16 | |
*** dave-mccowan has joined #openstack-kolla | 22:17 | |
*** nathharp has quit IRC | 22:17 | |
*** goldyfruit has quit IRC | 22:22 | |
*** dave-mccowan has quit IRC | 22:25 | |
*** itlinux has joined #openstack-kolla | 22:30 | |
*** jtriley has joined #openstack-kolla | 22:41 | |
*** k_mouza has joined #openstack-kolla | 22:44 | |
*** bjolo has joined #openstack-kolla | 22:44 | |
*** jbadiapa has quit IRC | 22:47 | |
*** ruhe has quit IRC | 22:51 | |
*** ruhe has joined #openstack-kolla | 22:52 | |
*** Jeffrey4l has quit IRC | 22:53 | |
*** k_mouza has quit IRC | 22:54 | |
*** itlinux has quit IRC | 22:55 | |
*** Jeffrey4l has joined #openstack-kolla | 22:56 | |
*** itlinux has joined #openstack-kolla | 22:57 | |
*** goldyfruit has joined #openstack-kolla | 23:03 | |
*** jascott1 has quit IRC | 23:06 | |
*** jascott1 has joined #openstack-kolla | 23:07 | |
*** jascott1 has quit IRC | 23:09 | |
*** jascott1 has joined #openstack-kolla | 23:09 | |
*** jascott1 has quit IRC | 23:11 | |
*** jascott1 has joined #openstack-kolla | 23:11 | |
*** itlinux has quit IRC | 23:12 | |
*** jascott1 has quit IRC | 23:12 | |
*** jascott1 has joined #openstack-kolla | 23:13 | |
kfox1111 | SamYaple: have you played with clear containers yet? | 23:13 |
*** jbadiapa has joined #openstack-kolla | 23:14 | |
kfox1111 | was wondering if cri might be a good/better fit for vms. you could reuse cni and maybe csi easier then? | 23:14 |
*** jascott1 has quit IRC | 23:17 | |
*** jtriley has quit IRC | 23:19 | |
SamYaple | kfox1111: i have not, but its on thelist for sure | 23:21 |
kfox1111 | I got clear containers and cri working together. | 23:23 |
kfox1111 | crio | 23:23 |
kfox1111 | crio sets up the image dir, and then calls runc or cc to do the launch. | 23:23 |
kfox1111 | can be selected by pod annotation. | 23:24 |
kfox1111 | would recommend looking at wha tthey did for the qemu thing you are doing. | 23:24 |
kfox1111 | it would make things a little more runtime specific, but might give you much more direct access to things. | 23:25 |
*** jascott1 has joined #openstack-kolla | 23:29 | |
*** jbadiapa has quit IRC | 23:32 | |
*** jtriley has joined #openstack-kolla | 23:36 | |
klindgren_ | howdy - We (GoDaddy) are wanting to make some changes to kolla-ansible to add in some better controls around deploying containers. Such as doing things like. If its an API node, start the new container, test the new container, if tests pass, manage harpoxy for that server to place the service in maintenace mode (letting connections drain off). making the new container active in haproxy. Then stopping the old container. | 23:46 |
klindgren_ | then on failure rolling back whatever amount of work, to make the original container running/active if something doesn't work with the new container. Doing something similar for RPC containers.... | 23:48 |
SamYaple | klindgren_: good plan, but that does pretty radically change the way containers are laid down right now (static naming) | 23:48 |
SamYaple | what about just draining haproxy connections, and recreating the container? | 23:48 |
SamYaple | that would be far more easily doable | 23:48 |
klindgren_ | Also having vm's go through a _new -> tests -> active. _active -> _ld. Which gives the ability to also do a "rollback" | 23:49 |
kfox1111 | kind of more what k8s provides. | 23:50 |
SamYaple | but this is for kolla-ansible, no? | 23:50 |
klindgren_ | it would be... we have our own container_deployment which does this and its working now. But we want to switch to kolla-ansible | 23:51 |
klindgren_ | so we want to port this concept/ability into kolla-ansible | 23:51 |
SamYaple | klindgren_: for reference, is that public or a known one? | 23:51 |
SamYaple | or internal only | 23:52 |
kfox1111 | yes, ansible could be made to do it, but would take a fair amount of code. where as k8s was built for that kind of use case. | 23:52 |
klindgren_ | internal - but nothing "godaddy" specific about it - so I can move it externally | 23:52 |
SamYaple | i was just curious what you were coming from, or if even ansible | 23:53 |
*** k_mouza has joined #openstack-kolla | 23:54 | |
*** k_mouza has quit IRC | 23:56 | |
*** k_mouza has joined #openstack-kolla | 23:56 | |
klindgren_ | its 100% ansible | 23:56 |
klindgren_ | https://etherpad.openstack.org/p/kolla-ansible_better_container_deployments - is the rough flow chart | 23:56 |
klindgren_ | give me a few and I will drop the role and an example playbook in a public git repo. | 23:59 |
SamYaple | klindgren_: so spinning up a *new* rpc server is no bueno | 23:59 |
klindgren_ | (might actually be tommorrow | 23:59 |
SamYaple | thatll actually make a new one in the database and the like | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!