| *** mgkwill has quit IRC | 00:19 | |
| *** mgkwill has joined #openstack-kolla | 00:24 | |
| *** ivve has quit IRC | 00:25 | |
| *** JamesBenson has joined #openstack-kolla | 00:32 | |
| *** JamesBenson has quit IRC | 00:37 | |
| *** dave-mccowan has joined #openstack-kolla | 00:48 | |
| *** mgkwill has quit IRC | 00:48 | |
| *** mgkwill has joined #openstack-kolla | 00:54 | |
| *** k_mouza has joined #openstack-kolla | 01:06 | |
| *** k_mouza_ has joined #openstack-kolla | 01:09 | |
| *** k_mouza has quit IRC | 01:11 | |
| *** jcmdln has joined #openstack-kolla | 01:12 | |
| *** dave-mccowan has quit IRC | 01:43 | |
| *** mgkwill has quit IRC | 01:48 | |
| *** mgkwill has joined #openstack-kolla | 01:54 | |
| *** k_mouza_ has quit IRC | 01:58 | |
| *** dave-mccowan has joined #openstack-kolla | 01:59 | |
| *** schwicht has joined #openstack-kolla | 02:03 | |
| *** dave-mccowan has quit IRC | 02:08 | |
| *** mgkwill has quit IRC | 02:48 | |
| *** k_mouza has joined #openstack-kolla | 02:51 | |
| *** mgkwill has joined #openstack-kolla | 02:53 | |
| *** watersj has joined #openstack-kolla | 02:55 | |
| watersj | hi, have a vm that is powered off stuck in a pre-migrating state. How do I cancel it? | 02:57 |
|---|---|---|
| watersj | I think having pre-migrate is stopping me from powering it on successfully | 02:57 |
| *** watersj has quit IRC | 04:01 | |
| *** rohit02 has joined #openstack-kolla | 04:02 | |
| *** skramaja has joined #openstack-kolla | 04:19 | |
| *** k_mouza has quit IRC | 04:20 | |
| *** k_mouza has joined #openstack-kolla | 04:23 | |
| *** k_mouza has quit IRC | 04:27 | |
| *** jdwidari has quit IRC | 05:10 | |
| *** pcaruana has joined #openstack-kolla | 05:41 | |
| *** mgkwill has quit IRC | 05:48 | |
| *** mgkwill has joined #openstack-kolla | 05:49 | |
| openstackgerrit | Erik Olof Gunnar Andersson proposed openstack/kolla master: Add new Senlin services https://review.opendev.org/692948 | 06:02 |
| openstackgerrit | Erik Olof Gunnar Andersson proposed openstack/kolla-ansible master: Add new Senlin services https://review.opendev.org/692949 | 06:13 |
| *** cah_link has joined #openstack-kolla | 07:03 | |
| *** k_mouza has joined #openstack-kolla | 07:13 | |
| mnasiadka | CosmicSound: then it's interesting - try raising a bug in Magnum, it might be related to some metrics polling (seen that in the past in Rocky) | 07:13 |
| mnasiadka | morning | 07:14 |
| *** k_mouza has quit IRC | 07:18 | |
| *** shyamb has joined #openstack-kolla | 07:20 | |
| shyamb | Hi | 07:22 |
| shyamb | "kolla/centos-source-nova-compute:queens" this container has some obsolete yum repo urls | 07:23 |
| shyamb | opendaylight repo url is not valid anymore | 07:24 |
| shyamb | "https://cbs.centos.org/repos/nfv7-opendaylight-6-release/x86_64/os/repodata/repomd.xml" | 07:24 |
| shyamb | Can we fix it? | 07:24 |
| shyamb | Automated builds are failing due to this issue. | 07:25 |
| *** shyamb has quit IRC | 07:30 | |
| *** shyam89 has joined #openstack-kolla | 07:30 | |
| *** dpawlik has joined #openstack-kolla | 07:31 | |
| yoctozepto | morning | 07:34 |
| yoctozepto | shyam89: queens is em, might be the reason why we did not backport the fix | 07:35 |
| yoctozepto | hmm, but we did: https://review.opendev.org/692116 | 07:36 |
| shyam89 | okay | 07:36 |
| *** kevinz has joined #openstack-kolla | 07:38 | |
| shyam89 | yoctozepto: merged on 30 oct? | 07:38 |
| *** luksky has joined #openstack-kolla | 07:39 | |
| yoctozepto | shyam89: aye | 07:40 |
| yoctozepto | but we stopped publishing images soon after: https://review.opendev.org/691371 | 07:40 |
| yoctozepto | looks like centos source images failed to push to docker hub | 07:41 |
| shyam89 | yoctozepto: I see | 07:44 |
| shyam89 | thank you | 07:44 |
| shyam89 | I believe the push issue will be resolved soon | 07:44 |
| shyam89 | yoctozepto: last build was published four days ago | 07:44 |
| yoctozepto | shyam89: it's not going to happen | 07:45 |
| yoctozepto | since we turned it off :-) | 07:45 |
| shyam89 | yoctozepto: Really? | 07:45 |
| yoctozepto | yeah, that's what i meant with: https://review.opendev.org/691371 | 07:45 |
| shyam89 | yoctozepto: Okay | 07:46 |
| shyam89 | So the fix will not be in build | 07:46 |
| shyam89 | yoctozepto: Thank you for the info | 07:46 |
| yoctozepto | shyam89: you should git clone the repo and build images yourself | 07:47 |
| yoctozepto | we still accept fixes for queens if it breaks at some point | 07:47 |
| yoctozepto | but normally you are advised to upgrade to rocky -> stein -> train | 07:47 |
| *** shyamb has joined #openstack-kolla | 07:54 | |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: DNM: increase keepalived timeout https://review.opendev.org/690920 | 07:56 |
| *** shyam89 has quit IRC | 07:58 | |
| *** shyamb has quit IRC | 08:00 | |
| *** hjensas has quit IRC | 08:01 | |
| *** kevinz has quit IRC | 08:02 | |
| mnasiadka | yoctozepto: did we make a final release of queens? :) | 08:14 |
| mnasiadka | yoctozepto: I think a lot of people are using releases, not the git stable/X tarball :) | 08:14 |
| yoctozepto | mnasiadka: no idea, mgoddard handles everything in this area | 08:15 |
| mnasiadka | yeah, just asking if you know | 08:15 |
| mnasiadka | it would be good to cut a final release and forget about queens :) | 08:15 |
| mnasiadka | ok, time to play with Mellanox (*vomit*) | 08:16 |
| yoctozepto | mnasiadka: https://review.opendev.org/691395 | 08:16 |
| yoctozepto | we did but without the fix | 08:16 |
| yoctozepto | so | 08:16 |
| yoctozepto | :-) | 08:16 |
| mnasiadka | lol, maybe we need another one | 08:16 |
| mnasiadka | mgoddard: ^^ | 08:16 |
| yoctozepto | Mellanox? are you cursed with their infiniband stack? | 08:16 |
| mnasiadka | naah, I'm only using Ethernet | 08:17 |
| yoctozepto | mnasiadka: lucky you | 08:17 |
| mnasiadka | I just hate the mlxconfig is not in some standard CentOS package | 08:17 |
| yoctozepto | mnasiadka: em means we are not releasing | 08:17 |
| mnasiadka | yoctozepto: well, ok | 08:18 |
| mnasiadka | and I have to install whole MFT stack to enable SRIOV | 08:18 |
| mnasiadka | It's good I don't have to install OFED drivers... | 08:18 |
| yoctozepto | ah, yeah, sr-iov needs their stuff | 08:19 |
| mnasiadka | yeah, there's no way to enable sriov without using their cli to enable it :) | 08:23 |
| yoctozepto | mnasiadka: well, otherwise nobody would install their stuff I guess | 08:23 |
| openstackgerrit | Dincer Celik proposed openstack/kolla-ansible master: [haproxy] use http/2 by default when kolla_enable_tls_external is enabled https://review.opendev.org/692957 | 08:34 |
| mnasiadka | yoctozepto: well, maybe - but if they would package it normally and make it available in a repo - I would be happier :) | 08:36 |
| *** zbr|ooo is now known as zbr | 08:38 | |
| *** hjensas has joined #openstack-kolla | 08:40 | |
| *** amoralej|off is now known as amoralej | 08:43 | |
| openstackgerrit | Erik Olof Gunnar Andersson proposed openstack/kolla master: Added senlin-conductor and senlin-health-manager https://review.opendev.org/692948 | 08:58 |
| openstackgerrit | Dincer Celik proposed openstack/kolla-ansible master: [docker] Added a new flag docker_disable_default_network https://review.opendev.org/689870 | 08:59 |
| openstackgerrit | Erik Olof Gunnar Andersson proposed openstack/kolla-ansible master: Added senlin-conductor and senlin-health-manager https://review.opendev.org/692949 | 08:59 |
| *** jistr is now known as jistr|mtgs | 09:10 | |
| *** rgogunskiy has joined #openstack-kolla | 09:14 | |
| mgoddard | mornin' | 09:15 |
| mgoddard | yoctozepto, mnasiadka: re the queens issue, as you said, we are EM so no more releases. Also we stopped publishing, so no more images | 09:19 |
| mgoddard | a less heavy handed approach might be to reduce the frequency of image publishing during EM - once per week? | 09:20 |
| mgoddard | I don't know of a first class way to do that in Zuul, but we could skip the build if day != sunday | 09:21 |
| mgoddard | or ask in #zuul for something better | 09:21 |
| mnasiadka | or tell people complaining it's EM :) | 09:21 |
| mnasiadka | maybe adding a big heading to README.rst would help? :D | 09:22 |
| mgoddard | mnasiadka: EM !+ EOL | 09:22 |
| mgoddard | != | 09:23 |
| openstack | mgoddard: Error: "=" is not a valid command. | 09:23 |
| mgoddard | lol | 09:23 |
| mgoddard | quiet @openstack | 09:23 |
| mgoddard | the main aim of stopping publishing was to reduce infra load. We can still reduce by 6/7 by publishing on one day only | 09:24 |
| yoctozepto | !quiet | 09:25 |
| openstack | yoctozepto: Error: "quiet" is not a valid command. | 09:25 |
| mnasiadka | or write what it means EM in the README.rst - no publishing, no new releases, some fixes will be back ported to stable/X | 09:25 |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: DNM: increase keepalived timeout https://review.opendev.org/690920 | 09:33 |
| mnasiadka | currently if I'm not following reviews - there's no place to find out that Queens is EM, apart from the releases.openstack.org page, which is a bit blurry (it states Maintained for Queens) | 09:39 |
| mnasiadka | or maybe I'm blind :) | 09:39 |
| yoctozepto | mnasiadka: oh, lol, you are right | 09:40 |
| yoctozepto | 09:40 | |
| yoctozepto | Extended Maintenance estimated 2019-10-25 | 09:40 |
| yoctozepto | 09:40 | |
| yoctozepto | they forgot to update it | 09:40 |
| yoctozepto | well, they still hold our releases | 09:41 |
| yoctozepto | https://review.opendev.org/691332 | 09:42 |
| yoctozepto | they transitioned us | 09:42 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: DNM: Testing cloudkitty in Stein https://review.opendev.org/681548 | 09:43 |
| mnasiadka | yoctozepto: just saying from an operator experience point of view :) | 09:48 |
| mnasiadka | there's nothing in the docs, nothing in README :) | 09:49 |
| yoctozepto | mnasiadka: yeah, I figure | 09:50 |
| yoctozepto | and I absolutely agree | 09:50 |
| mnasiadka | but all other projects do the same | 09:50 |
| mnasiadka | so we are not to be blamed :) | 09:50 |
| yoctozepto | indeed | 09:53 |
| yoctozepto | I just checked | 09:53 |
| yoctozepto | and the main reason why queens is not called em is tripleo+puppet being held from transition | 09:54 |
| mnasiadka | yoctozepto: well, it would mean RHOSP 13 is a bit dead :) | 10:02 |
| mnasiadka | (if they wouldn't hesitate to EM it) | 10:03 |
| *** shyamb has joined #openstack-kolla | 10:03 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: Fix cloudkitty influxdb config section name (stein) https://review.opendev.org/692966 | 10:04 |
| yoctozepto | mnasiadka: you might be right | 10:05 |
| mnasiadka | although RHOSP release process internally in RH is a bit crazy | 10:05 |
| mnasiadka | but it would mean a big desynch from tripleo upstream I guess | 10:06 |
| yoctozepto | mnasiadka: I have no idea | 10:13 |
| mnasiadka | whatever, not our problem :) | 10:13 |
| *** lemko has joined #openstack-kolla | 10:18 | |
| *** radeks has joined #openstack-kolla | 10:21 | |
| *** rgogunskiy has quit IRC | 10:31 | |
| Blinkiz | yoctozepto, Hello. How is it going with #1850656, https://review.opendev.org/#/c/692179/, DNM: Enforce keystone oslo policy scope? Is it a complicated problem that needs to be solved? | 10:46 |
| *** ivve has joined #openstack-kolla | 10:46 | |
| openstackgerrit | Lev Klimin proposed openstack/kolla-ansible master: Collect rabbitmq logs by fluentd https://review.opendev.org/692976 | 10:48 |
| *** dpawlik has quit IRC | 10:48 | |
| openstackgerrit | Sagi Shnaidman proposed openstack/kolla master: Limit centos repo disable to centos hosts only https://review.opendev.org/692978 | 10:50 |
| openstackgerrit | Sagi Shnaidman proposed openstack/kolla master: Limit centos repo disable to centos hosts only https://review.opendev.org/692978 | 10:53 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: DNM: Testing cloudkitty in Stein https://review.opendev.org/681548 | 10:56 |
| openstackgerrit | Pierre Riteau proposed openstack/kayobe master: Stop gathering facts for host command run https://review.opendev.org/692981 | 11:01 |
| *** dpawlik has joined #openstack-kolla | 11:06 | |
| *** dpawlik has quit IRC | 11:14 | |
| *** dpawlik has joined #openstack-kolla | 11:16 | |
| openstackgerrit | Pierre Riteau proposed openstack/kayobe master: Stop running kolla-target-venv in seed hypervisor host upgrade https://review.opendev.org/692983 | 11:29 |
| openstackgerrit | Merged openstack/kolla-ansible stable/stein: Updated ansible uri module HEADERS_ field https://review.opendev.org/692859 | 11:31 |
| openstackgerrit | Sagi Shnaidman proposed openstack/kolla master: DNM: test 3party https://review.opendev.org/692984 | 11:32 |
| openstackgerrit | Merged openstack/kolla-ansible master: Fix empty match while setting supported_policy_files https://review.opendev.org/692855 | 11:33 |
| openstackgerrit | Merged openstack/kolla-ansible stable/rocky: Fix nova scheduler down after first docker restart https://review.opendev.org/692213 | 11:33 |
| *** shyamb has quit IRC | 11:39 | |
| yoctozepto | Blinkiz: I got stuck because I could not find how to make openstacksdk to accept this situation, it may need resolving upstream | 11:50 |
| Blinkiz | yoctozepto. oh, I see. Bummer. Do you know of a manual workaround for me? | 11:55 |
| yoctozepto | Blinkiz: nope, except for not using automated deployment | 11:56 |
| Blinkiz | yoctozepto, Maybe I can deploy with kolla-ansible without enforcing scope and after add permissions at system level for admin user and enable enforcing of scope? | 11:59 |
| openstackgerrit | Mark Goddard proposed openstack/kolla stable/stein: Add effective and permitted capability to blackbox exporter https://review.opendev.org/692988 | 12:03 |
| openstackgerrit | Martin Chlumsky proposed openstack/kolla-ansible stable/stein: Fix empty match while setting supported_policy_files https://review.opendev.org/692989 | 12:04 |
| openstackgerrit | Merged openstack/kolla-ansible stable/stein: Fix nova scheduler down after first docker restart https://review.opendev.org/692212 | 12:07 |
| *** jdwidari has joined #openstack-kolla | 12:09 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible master: Fix keystone fernet rotation for source images https://review.opendev.org/692990 | 12:10 |
| *** dpawlik has quit IRC | 12:10 | |
| mnasiadka | Blinkiz: you can, but you won't be able to do any reconfigurations/upgrades later on | 12:11 |
| *** jdwidari has quit IRC | 12:12 | |
| openstackgerrit | Martin Chlumsky proposed openstack/kolla master: swift-rsyncd: don't recursively chown /srv/node at startup https://review.opendev.org/692870 | 12:12 |
| *** luksky has quit IRC | 12:13 | |
| yoctozepto | Blinkiz: if you can think of a way, then you are welcome to let us know of the results; by the looks of it it needs fixing somewhere else too (or at least better documenting...) | 12:14 |
| Blinkiz | mnasiadka, in my vision the permission already set for the admin user should not be touched. But maybe am missing that there are many system users that also needs this new permission? | 12:15 |
| Blinkiz | What I have understood there is missing permission on system scope level? Currently all permissions is set on domain level in the domain default. | 12:15 |
| mnasiadka | yoctozepto: I'm wondering if adding a v3 keystone endpoint wouldn't help... :) | 12:15 |
| mnasiadka | because we're using a version less endpoint, right? | 12:16 |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: DNM: increase keepalived timeout https://review.opendev.org/690920 | 12:16 |
| *** henriqueof has quit IRC | 12:16 | |
| yoctozepto | mnasiadka: nah, openstacksdk decides, uses v3 | 12:17 |
| yoctozepto | it looks like it does not scope to system properly | 12:18 |
| yoctozepto | maybe we are missing the permission indeed, but thought it was not | 12:18 |
| yoctozepto | let me check quick | 12:18 |
| yoctozepto | nah, admin has role on system | 12:19 |
| yoctozepto | so looks like issue with scoping | 12:19 |
| yoctozepto | as if openstacksdk did not know the proper scope | 12:20 |
| openstackgerrit | Mark Goddard proposed openstack/kolla stable/stein: get 'apt_*' options of kolla-build.conf working again https://review.opendev.org/692993 | 12:20 |
| openstackgerrit | Mark Goddard proposed openstack/kolla stable/rocky: get 'apt_*' options of kolla-build.conf working again https://review.opendev.org/692994 | 12:20 |
| yoctozepto | and there does not seem to be a way to force it | 12:20 |
| yoctozepto | mnasiadka: if you are more fluent with openstacksdk, I suggest you took it over | 12:20 |
| mnasiadka | well, the enforce_scope is not yet finished in keystone, and may work weird - from what I read | 12:22 |
| mnasiadka | DEBUG keystone.models.token_model [req-2eed28d1-00fd-4878-8acc-9d5eee838a93 - - - - -] User e292abd123704368832b9383f9c8b31d has no access to domain default _validate_domain_scope | 12:22 |
| mnasiadka | this is what made the top of my interest list ;) | 12:22 |
| *** amoralej is now known as amoralej|lunch | 12:23 | |
| yoctozepto | mnasiadka: the domain scope role is not there, but it seems fine | 12:25 |
| *** kplant has joined #openstack-kolla | 12:25 | |
| mnasiadka | yoctozepto: isn't that the authorisation failed, because user admin doesn't have access to domain default? :) | 12:26 |
| *** schwicht has quit IRC | 12:26 | |
| mnasiadka | ok, I just read the bug contents | 12:27 |
| yoctozepto | mnasiadka: ^ finally! | 12:27 |
| mnasiadka | so Coleen says we need a system scoped token - so no project/domain things in the auth | 12:27 |
| mnasiadka | let's see | 12:27 |
| yoctozepto | mnasiadka: not doable | 12:27 |
| yoctozepto | openstacksdk forces v2 then | 12:28 |
| mnasiadka | awesome | 12:28 |
| yoctozepto | indeed | 12:28 |
| openstackgerrit | Mark Goddard proposed openstack/kolla stable/stein: Stein: support mariabackup for backups https://review.opendev.org/692996 | 12:33 |
| *** sshnaidm|rover has joined #openstack-kolla | 12:34 | |
| *** born2bake has joined #openstack-kolla | 12:34 | |
| born2bake | Hi guys, I have a question related to networking per-configuration. I want to deploy openstack on 3 different machines. I am not networking guy but those 3 machines were preconfigured with vlans http://prntscr.com/psq4j6 ; When I was deploying openstack before, I know that I need minimum 2 network interfaces. One for provider network and second | 12:41 |
| born2bake | network interface without ip address for floating ip. With these network configuration http://prntscr.com/psq4j6 with VLAN 10,20,30; What interface/vlan I shall use for what provider network and can I use any vlan with ip for raw net-interface for floating ip? Thank you | 12:41 |
| openstackgerrit | Michal Nasiadka proposed openstack/kolla-ansible master: DNM: Enforce keystone oslo policy scope https://review.opendev.org/692179 | 12:43 |
| *** dpawlik has joined #openstack-kolla | 12:44 | |
| *** schwicht has joined #openstack-kolla | 12:50 | |
| sshnaidm|rover | hi | 12:51 |
| sshnaidm|rover | does kolla have train branch? | 12:51 |
| sshnaidm|rover | if not, when is it planned to create it? | 12:51 |
| mgoddard | sshnaidm|rover: we have patches open to releases to create them. Just waiting on the release team, probably all having fun in Shanghai | 12:53 |
| sshnaidm|rover | I see :) | 12:53 |
| *** gdwornicki has joined #openstack-kolla | 12:56 | |
| yoctozepto | born2bake: not sure what you want to achieve, but yeah - you need an address-less interface for the neutron external network | 13:02 |
| *** gdwornicki has quit IRC | 13:05 | |
| yoctozepto | mgoddard, mnasiadka: cancelling tomorrow's kolla meeting? | 13:09 |
| *** jistr|mtgs is now known as jistr | 13:14 | |
| born2bake | yoctozepto I think guys were trying to achieve this https://docs.openstack.org/neutron/queens/admin/deploy-ovs-selfservice.html | 13:16 |
| *** jdwidari has joined #openstack-kolla | 13:17 | |
| *** jdwidari has quit IRC | 13:17 | |
| born2bake | If for instance, I will configure 4th VLAN without IP address, it will be okay? | 13:19 |
| *** schwicht has quit IRC | 13:21 | |
| *** luksky has joined #openstack-kolla | 13:37 | |
| *** gdwornicki has joined #openstack-kolla | 13:47 | |
| *** gdwornicki has quit IRC | 13:48 | |
| *** amoralej|lunch is now known as amoralej | 13:55 | |
| mnasiadka | as long as you use flat provider network - it might work | 13:56 |
| mnasiadka | or not :) | 13:56 |
| Blinkiz | born2bake, hi. Kolla-ansible do not configure VLANs, you can choose whatever network structure you want. Just specify what should be "network_interface" and "neutron_external_interface". | 13:58 |
| openstackgerrit | Merged openstack/kolla master: CI: drop the gate profile https://review.opendev.org/691270 | 13:58 |
| openstackgerrit | Merged openstack/kolla master: Limit centos repo disable to centos hosts only https://review.opendev.org/692978 | 13:58 |
| mgoddard | yoctozepto: we can keep it short, but will be good to meet as we're close to train. Get some admin out of the way before PTG. Also make sure we're prepped for PTG | 13:59 |
| Blinkiz | mnasiadka, I just tried latest patch set 9 (system_scope: all) for DNM: Enforce keystone oslo policy scope. Sadly same error message as before. | 14:00 |
| *** vmixor has joined #openstack-kolla | 14:00 | |
| born2bake | I know that kolla does not configure it. My question is like: someone asked me to deploy openstack, I want to deploy it using kolla-ansible. When I checked their network setup, I am not sure which interface shall I use.. | 14:01 |
| mnasiadka | Blinkiz: yeah, seems openstacksdk doesn't support system_scope: all, although python-openstackclient does :) | 14:01 |
| born2bake | i created vlan without ip address, will try to use that for external interface | 14:01 |
| Blinkiz | born2bake, yeah. "neutron_external_interface" should (recommentation) be empty interface (but up) | 14:02 |
| Blinkiz | born2bake, I have "neutron_external_interface" on a raw interface, "ens3f1". Then in OpenStack (openvswitch/neutron) I can manage that interface that is named "phys1net" (if I remember correctly). | 14:04 |
| Blinkiz | physnet1 maybe was the name. yeah.. | 14:05 |
| Blinkiz | mnasiadka: so what is the path forward? include developers from openstacksdk in on bug #1850656? Or switch to use python-openstackclient instead? | 14:07 |
| openstack | bug 1850656 in kolla-ansible train "Deploy will fail if keystone.conf has '[oslo_policy]/enforce_scope=true'" [Medium,In progress] https://launchpad.net/bugs/1850656 - Assigned to Radosław Piliszek (yoctozepto) | 14:07 |
| born2bake | yeah, but as you can see their raw interface would bonded - bond0 http://prntscr.com/psq4j6 | 14:08 |
| born2bake | I am wondering if I can use bond0.10 ; bond0.20 in globals.yml | 14:08 |
| Blinkiz | born2bake, yeah but then you need a flat structure. For most possibilities you should use a unused interface for neutron_external_interface. | 14:09 |
| Blinkiz | born2bake: So minimal 2 cables to your nearest switch. One for all management including storage that you manage before deploy. Another one for neutron_external_interface that OpenStack controls. Of course you can build with only one interface but this is a easier way forward. | 14:13 |
| mnasiadka | Blinkiz: I'll speak with the keystone people, but it won't be this week (since they all are on the Summit) | 14:14 |
| Blinkiz | mnasiadka: Awesome :) | 14:14 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: Fix idempotency of fluentd customisations https://review.opendev.org/693013 | 14:15 |
| openstackgerrit | Martin Chlumsky proposed openstack/kolla master: swift-rsyncd: don't recursively chown /srv/node at startup https://review.opendev.org/692870 | 14:15 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: Wait for MariaDB to be accessible via HAProxy https://review.opendev.org/693014 | 14:17 |
| *** vmixor has quit IRC | 14:18 | |
| *** goldyfruit_ has joined #openstack-kolla | 14:19 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: Remove Heat environment file disabling deprecated plugins https://review.opendev.org/693015 | 14:24 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/rocky: Remove Heat environment file disabling deprecated plugins https://review.opendev.org/693016 | 14:24 |
| *** cah_link has quit IRC | 14:25 | |
| *** vmixor has joined #openstack-kolla | 14:28 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible master: Fix indentation of HAProxy internal http-request config https://review.opendev.org/693018 | 14:31 |
| *** gdwornicki has joined #openstack-kolla | 14:32 | |
| *** vmixor has quit IRC | 14:33 | |
| *** mixor has joined #openstack-kolla | 14:33 | |
| *** goldyfruit___ has joined #openstack-kolla | 14:34 | |
| *** goldyfruit_ has quit IRC | 14:36 | |
| *** mixor has quit IRC | 14:37 | |
| *** mixor has joined #openstack-kolla | 14:37 | |
| *** mixor has quit IRC | 14:38 | |
| *** vmixor has joined #openstack-kolla | 14:39 | |
| *** gdwornicki has quit IRC | 14:39 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: Fix swift.conf custom configuration path collision https://review.opendev.org/693020 | 14:43 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/rocky: Fix swift.conf custom configuration path collision https://review.opendev.org/693021 | 14:43 |
| *** rohit02 has quit IRC | 14:43 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: Swift: compute the list of containers dynamically in the reconfigure task https://review.opendev.org/693022 | 14:44 |
| *** schwicht has joined #openstack-kolla | 14:44 | |
| openstackgerrit | Michal Nasiadka proposed openstack/kolla-ansible master: DNM: Enforce keystone oslo policy scope https://review.opendev.org/692179 | 14:48 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: Use mariabackup for database backups https://review.opendev.org/693023 | 14:49 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: CI: Add mariadb test (Stein) https://review.opendev.org/693024 | 14:53 |
| *** watersj has joined #openstack-kolla | 15:02 | |
| watersj | How do I cancel a pre-migration task? It is stuck and will not complete | 15:04 |
| *** schwicht has quit IRC | 15:04 | |
| mnasiadka | watersj: we are not Nova experts, but people on #openstack-nova might know a thing... | 15:05 |
| *** dpawlik has quit IRC | 15:05 | |
| watersj | having bunch issues w/my kolla install and it appears to have started with this migration task | 15:06 |
| watersj | i'll try there | 15:06 |
| yoctozepto | mnasiadka: you have a keystone-insider? | 15:14 |
| yoctozepto | mnasiadka: also - are you trying those system scope params blindly? ;D | 15:16 |
| *** gdwornicki has joined #openstack-kolla | 15:17 | |
| openstackgerrit | Mark Goddard proposed openstack/kayobe-config-dev master: DNM: Remove controller0 from inventory https://review.opendev.org/693029 | 15:18 |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: DNM: increase keepalived timeout https://review.opendev.org/690920 | 15:19 |
| *** gdwornicki has quit IRC | 15:19 | |
| openstackgerrit | Mark Goddard proposed openstack/kayobe master: Fix kolla ansible virtualenv creation on the seed https://review.opendev.org/693030 | 15:20 |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: CI: Add mariadb test (Stein) https://review.opendev.org/693024 | 15:24 |
| mnasiadka | yoctozepto: not blindly, talking with people that didn’t go drinking beers in China :) | 15:26 |
| mnasiadka | yoctozepto: but I think it’s a bit fubar... | 15:26 |
| *** gdwornicki has joined #openstack-kolla | 15:53 | |
| *** noxoid has joined #openstack-kolla | 15:53 | |
| *** kplant has quit IRC | 15:57 | |
| *** JamesBenson has joined #openstack-kolla | 15:59 | |
| *** gdwornicki has quit IRC | 16:04 | |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla-ansible master: DNM: increase keepalived timeout https://review.opendev.org/690920 | 16:07 |
| *** schwicht has joined #openstack-kolla | 16:11 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: CI: Add mariadb test (Stein) https://review.opendev.org/693024 | 16:12 |
| openstackgerrit | Michal Nasiadka proposed openstack/kolla-ansible master: DNM: Enforce keystone oslo policy scope https://review.opendev.org/692179 | 16:22 |
| *** hamzaachi has joined #openstack-kolla | 16:26 | |
| *** igordc has joined #openstack-kolla | 16:27 | |
| *** igordc has quit IRC | 16:27 | |
| *** luksky has quit IRC | 16:31 | |
| *** sshnaidm|rover has left #openstack-kolla | 16:32 | |
| stingrayza | hi all o/ | 16:40 |
| *** skramaja has quit IRC | 16:41 | |
| mgoddard | hi stingrayza | 16:50 |
| openstackgerrit | Sagi Shnaidman proposed openstack/kolla master: DNM: test 3party https://review.opendev.org/693055 | 16:57 |
| *** luksky has joined #openstack-kolla | 16:57 | |
| openstackgerrit | Sagi Shnaidman proposed openstack/kolla master: DNM: test 3party with patch https://review.opendev.org/693056 | 17:02 |
| *** radeks has quit IRC | 17:12 | |
| mnasiadka | yoctozepto: and I don't know if I like keystone bootstrap script ;) | 17:16 |
| mgoddard | mnasiadka: that could definitely be better. It's quite opaque when it fails | 17:18 |
| mnasiadka | mgoddard: I would rather think about moving out such weird scripts to k-a, managing them in kolla makes it a bit harder job I think | 17:21 |
| *** gdwornicki has joined #openstack-kolla | 17:22 | |
| mnasiadka | too much thinking :) | 17:24 |
| mgoddard | yeah | 17:24 |
| openstackgerrit | Merged openstack/kolla-ansible stable/stein: Fix idempotency of fluentd customisations https://review.opendev.org/693013 | 17:27 |
| openstackgerrit | Christian Berendt proposed openstack/kolla-ansible master: Fix defaults filename of module-load role https://review.opendev.org/693058 | 17:29 |
| *** hjensas has quit IRC | 17:38 | |
| *** also_stingrayza has joined #openstack-kolla | 17:52 | |
| *** stingrayza has quit IRC | 17:53 | |
| *** goldyfruit___ has quit IRC | 17:53 | |
| openstackgerrit | Mark Goddard proposed openstack/kolla-ansible stable/stein: CI: Add mariadb test (Stein) https://review.opendev.org/693024 | 17:54 |
| generalfuzz | Curious if anyone has had success deploying octavia using kolla with "openvswitch" as the neutron plugin agent? | 17:58 |
| *** goldyfruit___ has joined #openstack-kolla | 17:58 | |
| noxoid | i have it deployed in that configuration | 17:59 |
| noxoid | stein release | 17:59 |
| noxoid | you referring to firewall_driver=openvswitch correct? | 18:00 |
| mgoddard | generalfuzz: I believe your colleagues in the UK do that? | 18:00 |
| generalfuzz | its possible | 18:01 |
| generalfuzz | Trying to figure out how to configure my deployment so that the octavia-worker can access the loadbalancer network | 18:02 |
| generalfuzz | I have the octavia.conf setup correctly pointing to the network id - however, the octavia worker container doesn't have an interface for the load balancer network | 18:04 |
| noxoid | i have physnet1 configured as trunk port and create a neutron network with the "vlan" type which is also trunked to all the compute nodes that host the octavia vms | 18:05 |
| born2bake | noxoid I have a question related to networking per-configuration. I want to deploy openstack on 3 different machines. I am not networking guy but those 3 machines were preconfigured with vlans http://prntscr.com/psq4j6 ; When I was deploying openstack before, I know that I need minimum 2 network interfaces. One for provider network and second | 18:05 |
| born2bake | network interface without ip address for floating ip. With these network configuration http://prntscr.com/psq4j6 with VLAN 10,20,30; What interface/vlan I shall use for what provider network and can I use any vlan with ip for raw net-interface for floating ip? Thank you | 18:05 |
| mnasiadka | generalfuzz: octavia-worker needs to have connection to lb-mgmt-network if I recall correctly | 18:05 |
| noxoid | born2bake, ideally the provider network would have no ip address on it. if you're willing to accept a "flat" network in neutron you can trunk a new vlan (vlan 50 for example) and just add that to bond0 | 18:08 |
| noxoid | without an ip address | 18:08 |
| *** schwicht has quit IRC | 18:08 | |
| noxoid | personally all of bond0 is a provider network for me, bond1 hosts all my vlans for ceph/octavia/etc | 18:10 |
| born2bake | So basically I can create new vlan bond0.50 without ip address and assign it to globals.yml for neutron? | 18:10 |
| noxoid | that should work but again you would likely be limited to a "flat" neutron network unless you wanted to do qinq i believe | 18:11 |
| noxoid | i opted for the flexibility of giving neutron an entire trunk port so i can manage which vlans are configured on it in neutron | 18:12 |
| generalfuzz | mnasiadka: I'm now trying to determine how to configure that. I had incorrectly assumed Kolla handled that as part of octavia deployment. | 18:12 |
| noxoid | which opens up other possibilities like octavia mgmt vlans | 18:12 |
| generalfuzz | noxoid: that makes sense | 18:12 |
| noxoid | http://paste.openstack.org/show/785813/ | 18:13 |
| noxoid | my octavia network | 18:13 |
| noxoid | octavia_network_interface: "bond1.1002" | 18:14 |
| *** schwicht has joined #openstack-kolla | 18:16 | |
| *** amoralej is now known as amoralej|off | 18:17 | |
| *** hamzaachi has quit IRC | 18:22 | |
| *** also_stingrayza has quit IRC | 18:35 | |
| *** stingrayza has joined #openstack-kolla | 18:36 | |
| openstackgerrit | Michal Nasiadka proposed openstack/kolla-ansible master: DNM: Enforce keystone oslo policy scope https://review.opendev.org/692179 | 18:37 |
| mnasiadka | generalfuzz: nope, kolla-ansible doesn't manage that, probably we would need some refined docs with some proposed configuration ;-) | 18:39 |
| *** goldyfruit_ has joined #openstack-kolla | 18:46 | |
| *** goldyfruit___ has quit IRC | 18:49 | |
| *** gdwornicki has quit IRC | 19:05 | |
| *** hamzaachi has joined #openstack-kolla | 19:11 | |
| *** goldyfruit_ has quit IRC | 19:14 | |
| *** hamzaachi_ has joined #openstack-kolla | 19:21 | |
| *** hamzaachi has quit IRC | 19:21 | |
| *** hjensas has joined #openstack-kolla | 19:22 | |
| *** rouk has joined #openstack-kolla | 19:22 | |
| *** dpawlik has joined #openstack-kolla | 19:28 | |
| *** radeks has joined #openstack-kolla | 19:29 | |
| *** gdwornicki has joined #openstack-kolla | 19:36 | |
| born2bake | does anyone have the same issue with magnum https://bugs.launchpad.net/kolla-ansible/+bug/1846476 ? | 19:41 |
| openstack | Launchpad bug 1846476 in kolla-ansible "K8s cluster deployment is stuck at kube_cluster_deploy OS::Heat::SoftwareDeployment" [Undecided,New] | 19:41 |
| *** schwicht has quit IRC | 19:41 | |
| *** watersj has quit IRC | 19:52 | |
| *** vmixor has quit IRC | 19:56 | |
| *** dpawlik has quit IRC | 20:13 | |
| *** hamzaachi_ has quit IRC | 20:19 | |
| *** hamzaachi_ has joined #openstack-kolla | 20:21 | |
| *** hamzaachi_ has quit IRC | 20:23 | |
| *** hamzaachi_ has joined #openstack-kolla | 20:24 | |
| *** zbr is now known as zbr|ooo | 20:29 | |
| *** hamzaachi_ has quit IRC | 20:29 | |
| *** goldyfruit_ has joined #openstack-kolla | 20:33 | |
| *** radeks has quit IRC | 20:34 | |
| *** schwicht has joined #openstack-kolla | 20:50 | |
| *** lemko has quit IRC | 21:27 | |
| *** chrizl has quit IRC | 22:00 | |
| *** chrizl has joined #openstack-kolla | 22:01 | |
| *** pcaruana has quit IRC | 22:03 | |
| *** hamzaachi has joined #openstack-kolla | 22:11 | |
| *** hamzaachi has quit IRC | 22:12 | |
| *** schwicht has quit IRC | 22:19 | |
| *** JamesBen_ has joined #openstack-kolla | 22:28 | |
| *** JamesBenson has quit IRC | 22:31 | |
| *** JamesBen_ has quit IRC | 22:32 | |
| openstackgerrit | Michael Senizaiz proposed openstack/kayobe master: Connections default to 'public' interface when attempting to run openstack commands. This breaks setups where the network roles are separate from the controller group. Set ironic and network checks to use the internal API network. https://review.opendev.org/693090 | 22:41 |
| *** luksky has quit IRC | 22:54 | |
| *** zbr|ooo has quit IRC | 23:00 | |
| *** yoctozepto has quit IRC | 23:04 | |
| *** yoctozepto has joined #openstack-kolla | 23:04 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!