Wednesday, 2019-12-11

*** jbadiapa has quit IRC00:07
*** igordc has quit IRC00:13
*** k_mouza has quit IRC00:16
*** k_mouza has joined #openstack-kolla00:17
*** k_mouza has quit IRC00:21
*** k_mouza has joined #openstack-kolla00:23
*** xinliang has joined #openstack-kolla00:28
*** schwicht has quit IRC00:35
*** schwicht has joined #openstack-kolla00:40
*** k_mouza has quit IRC00:44
*** k_mouza has joined #openstack-kolla00:58
*** zhanglong has joined #openstack-kolla01:02
openstackgerritMerged openstack/kolla-ansible master: Template custom HAProxy service configuration  https://review.opendev.org/69827101:19
*** schwicht has quit IRC01:21
*** goldyfruit_ has joined #openstack-kolla01:27
*** k_mouza has quit IRC01:28
*** zhanglong has quit IRC01:36
*** zhanglong has joined #openstack-kolla01:38
*** schwicht has joined #openstack-kolla01:49
*** dave-mccowan has joined #openstack-kolla02:00
*** goldyfruit_ has quit IRC02:15
*** goldyfruit_ has joined #openstack-kolla02:15
*** negronjl has quit IRC02:18
*** negronjl has joined #openstack-kolla02:21
*** goldyfruit_ has quit IRC02:40
*** ricolin has joined #openstack-kolla02:40
*** dave-mccowan has quit IRC02:55
*** zhanglong has quit IRC03:07
*** munimeha1 has quit IRC03:28
*** k_mouza has joined #openstack-kolla03:29
*** factor has joined #openstack-kolla03:31
*** k_mouza has quit IRC03:34
*** xinliang has quit IRC03:42
*** zhanglong has joined #openstack-kolla03:54
*** zhanglong has quit IRC04:46
*** skramaja has joined #openstack-kolla05:27
*** sri_ has joined #openstack-kolla06:02
sri_Morning06:03
*** pcaruana has joined #openstack-kolla06:09
*** raukadah is now known as chkumar|ruck06:10
yoctozeptomorning06:20
*** xinliang has joined #openstack-kolla06:28
openstackgerritKevin Zhao proposed openstack/kolla master: Add CentOS/source aarch64 experimental job  https://review.opendev.org/66245606:34
openstackgerritKevin Zhao proposed openstack/kolla master: Add CentOS/source aarch64 experimental job  https://review.opendev.org/66245606:41
osmanlicilegimorning06:46
*** dpawlik has joined #openstack-kolla07:00
*** dpawlik has quit IRC07:04
*** dpawlik has joined #openstack-kolla07:07
*** rgogunskiy has joined #openstack-kolla07:07
*** k_mouza has joined #openstack-kolla07:30
*** zainub_wahid has joined #openstack-kolla07:31
hrwmorning07:32
*** k_mouza has quit IRC07:34
*** hjensas has quit IRC07:36
yoctozeptoborn2bake: replied07:36
yoctozeptoah, he's gone07:36
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: Add CentOS/source aarch64 experimental job  https://review.opendev.org/66245607:37
hrwarm64 job in progress07:45
yoctozeptomgoddard, mnasiadka: https://review.opendev.org/696047 - let's discuss it, merge and release, otherwise we get unhappy Ubunters07:52
patchbotpatch 696047 - kolla-ansible - Ensure hostname resolved by kolla configured /etc/... - 2 patch sets07:52
*** lemko has joined #openstack-kolla07:53
*** jbadiapa has joined #openstack-kolla08:20
*** pcaruana has quit IRC08:22
mnasiadkayoctozepto: find an unhappy Ubunter here :)08:31
yoctozeptomnasiadka: sure: born2bake08:32
yoctozeptosorry, wrong guy08:32
yoctozepto:D08:33
yoctozeptobut there was one08:33
yoctozeptoand there are on ask afraid to visit us on irc08:33
yoctozepto;D08:33
yoctozeptotbarron, brtknr: I merged manila bugs, they are the same, better track as one08:34
yoctozeptolet tripleo know about it08:34
yoctozeptobrtknr: could you verify train?08:34
*** rpittau|afk is now known as rpittau08:36
*** hjensas has joined #openstack-kolla08:42
hrwmnasiadka, yoctozepto: help py2 to die? https://review.opendev.org/#/c/695168/08:55
patchbotpatch 695168 - kolla-ansible - Get rid of Python 2 support - 11 patch sets08:55
*** strigazi has joined #openstack-kolla08:55
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637608:58
*** zhanglong has joined #openstack-kolla09:08
mgoddardmorning09:17
*** dougsz has joined #openstack-kolla09:17
hrwarm64 not timed out!09:18
mgoddardyoctozepto: on https://review.opendev.org/696047, are you saying we should delay train for it?09:19
patchbotpatch 696047 - kolla-ansible - Ensure hostname resolved by kolla configured /etc/... - 2 patch sets09:19
mgoddardwhat is the problem that it fixes for Ubunters?09:20
*** k_mouza has joined #openstack-kolla09:21
*** k_mouza has quit IRC09:22
*** k_mouza has joined #openstack-kolla09:22
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: OVN Support  https://review.opendev.org/69684109:26
*** k_mouza has quit IRC09:26
*** k_mouza has joined #openstack-kolla09:27
*** k_mouza has quit IRC09:28
*** k_mouza has joined #openstack-kolla09:29
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: skydive: mark as unbuildable on !x86  https://review.opendev.org/69843009:33
hrwskydive change is dependency for arm64 ci now09:34
yoctozeptomgoddard: it seems ubuntu defaults to breaking /etc/hosts09:34
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: Add CentOS/source aarch64 experimental job  https://review.opendev.org/66245609:35
mgoddardyoctozepto: since when?09:35
mgoddardyoctozepto: and how?09:35
mgoddardyoctozepto: it won't in general know about every host in the baremetal group09:36
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: Add CentOS/source aarch64 experimental job  https://review.opendev.org/66245609:36
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: Add Debian/source aarch64 experimental job  https://review.opendev.org/55765909:36
*** zainub_wahid has quit IRC09:37
*** dpawlik has quit IRC09:38
yoctozeptomgoddard: no, that's why I commented we should really drop the host itself09:39
yoctozeptoas it is what cause the havoc09:39
yoctozeptomgoddard: since no idea when, but ppl coming with this breakage recently09:40
yoctozeptocould be from maas09:40
mgoddardyoctozepto: that makes a bit more sense09:40
yoctozeptomgoddard: yeah, if Chason does not come to fix it, I will take over it09:40
mgoddardI don't like the proposed patch09:40
yoctozeptomgoddard: -1 from me as well09:40
mnasiadkaso what are we even discussing about? :D09:41
mgoddardwould accept removal of this host, if it is idempotent09:41
yoctozeptomnasiadka: that fix is needed, but better09:41
mnasiadkayoctozepto: so go fix it, send a mail to chason if he's going to continue - he's not very active lately09:42
mnasiadkayoctozepto, mgoddard, hrw: changing subject - I could use some criticism on https://review.opendev.org/#/q/topic:bp/container-health-check09:42
yoctozeptomnasiadka: will do, just busy with other stuff now, he got notified by gerrit already09:43
mnasiadkayoctozepto: you know where gerrit notifications land normally, right? :)09:43
yoctozeptomnasiadka: Chason reacts upon them correctly :-)09:44
hrwmnasiadka: kolla one looks fine, +2 material etc. but can you explain in two sentences what it does?09:44
mnasiadkahrw: in the commit message or here? :)09:46
mgoddardhrw: lol. +2, what does it do?09:46
hrwmnasiadka: commit or both09:46
*** factor has quit IRC09:46
hrwmgoddard: the code itself does not affect how images work. will not break them for normal users.09:47
*** factor has joined #openstack-kolla09:47
mnasiadkawell, in the commit message there's a link to what healthchecks do, the kolla change is only some scripts we use in kolla-ansible to check if the service hosted in the docker container is ,,healthy''09:47
yoctozeptolol, quality reviews xD09:47
mnasiadkahm, I just noticed fluentd healthcheck is a bit awkward, let me look into that09:47
mnasiadkahrw: an example of working healthchecks: https://zuul.opendev.org/t/openstack/build/befc7727953949c996990fe62054721a/log/primary/logs/system_logs/docker-info.txt.gz#15909:47
mnasiadkaif the container is unhealthy - docker engine will restart it09:48
mnasiadka(hoping that solves the issue)09:48
hrwmnasiadka: thanks09:49
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: Use Docker healthchecks for core services  https://review.opendev.org/67638909:49
mnasiadkafixing fluentd unhealthy ^^09:50
*** xinliang has quit IRC09:50
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637609:54
hrwmnasiadka: if (new_healthcheck[key1] * 1000000000) != current_healthcheck[key2]: - move from other config where time was in ns?09:54
*** dpawlik has joined #openstack-kolla09:54
*** farhanjamil has joined #openstack-kolla09:55
hrwmgoddard: is there a way to setup zuul jobs as separate set than zuul ones?09:55
mnasiadkahrw: well, Docker HealthConfig struct in Docker Engine is in nanoseconds, I don't think it's sensible for us to use nanoseconds in Ansible :)09:55
hrwmgoddard: arm64 CI works now, can be merged but I am afraid that with 8 nodes we will have lot of CI jobs waiting in queue09:56
mnasiadkahrw: if there's more elegant solution - I'll gladly hear about it, it's my first approach to python since python 2.3 :)09:56
hrwmgoddard: kind of opendev-zuul + opendev-zuul-arm6409:56
hrwmnasiadka: # NOTE(mnasiadka) something about time?09:56
mnasiadkahrw: makes sense, will do :)09:57
hrwmnasiadka: and you can use 1e9 to make it easier to count09:57
hrwwill comment09:57
*** zainub_wahid has joined #openstack-kolla09:57
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637609:58
*** jbadiapa has quit IRC09:59
hrwmnasiadka: and below there is comment about time conversion ;D09:59
mnasiadkahrw, mgoddard, yoctozepto: do we need debian-ceph-ansible zuul job? currently with kolla-ceph we only have centos and ubuntu jobs10:00
openstackgerritMark Goddard proposed openstack/kolla-ansible master: Fix permission error when qemu-kvm loads ceph.conf  https://review.opendev.org/68074010:00
mgoddardmnasiadka: we can't add every job for debian + ubuntu10:01
mnasiadkamgoddard: I know, asking if anybody sees a problem with no job for debian10:01
mnasiadkaand it's still CentOS container on top of Ubuntu10:01
mnasiadka:)10:01
mgoddardit's not perfect, but our test coverage is far from 100%10:01
mgoddardubuntu ~= debian10:02
mnasiadkayeah10:02
mgoddardif we pass debian aio that's a good start10:02
mnasiadkaI'm working towards testing all services that integrate with Ceph in the CI job10:02
mnasiadkathat's second alternative - we could test Ceph as AIO instead of multinode10:02
*** gfidente has joined #openstack-kolla10:03
mnasiadkawe no longer need to test if ceph deployment works multinode - we have ceph-ansible for that10:04
*** farhanjamil has quit IRC10:07
hrwmnasiadka: commented10:09
mnasiadkahrw: I commented the ansible-lint related fixes change (https://review.opendev.org/#/c/694797/) but it might make sense to merge it as it is, and check for passwords in the ansible deploy logs as a separate task10:09
patchbotpatch 694797 - kolla-ansible - Some ansible-lint fixes - 11 patch sets10:09
mnasiadkahrw: thanks10:09
hrwmnasiadka: no_log stuff?10:09
mnasiadkayeah, it was just a note - I'll add this to my ansible todos10:10
mnasiadkathis change is not about this ;)10:10
hrwok10:10
mnasiadka+w and off it goes10:10
hrwmnasiadka: healthchecks k-a patch - I was not sure how it goes with values in some places. you have abc_healthcheck and then abc_healthcheck={} is all. maybe just do |default:{} and consider it done?10:12
*** shyamb has joined #openstack-kolla10:13
mnasiadkahrw: I need to re-verify this, I think with introducing enable_container_healthchecks var it can go away now10:13
hrwmnasiadka: I like the idea of those healthchecks10:14
mnasiadkahrw: well, a lot of people voted on that feature in PTG, so I guess it makes sense :)10:16
*** dpawlik has quit IRC10:19
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637610:21
*** dpawlik has joined #openstack-kolla10:22
openstackgerritWill Szumski proposed openstack/kolla-ansible master: Fix fernet_token_expiry precheck  https://review.opendev.org/69844110:23
hrwhttps://review.opendev.org/#/c/698430 needs another brave core ;D10:24
patchbotpatch 698430 - kolla - skydive: mark as unbuildable on !x86 - 1 patch set10:24
hrwtrivial change10:24
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: OVN Support  https://review.opendev.org/69684110:24
openstackgerritWill Szumski proposed openstack/kolla-ansible master: Fix fernet_token_expiry precheck  https://review.opendev.org/69844110:25
*** zhanglong has quit IRC10:25
hrwbbl10:26
openstackgerritWill Szumski proposed openstack/kolla-ansible master: Fix fernet_token_expiry precheck  https://review.opendev.org/69844110:28
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: OVN Support  https://review.opendev.org/69684110:28
*** shyamb has quit IRC10:33
*** shyamb has joined #openstack-kolla10:48
*** sri_ has quit IRC10:50
openstackgerritMark Goddard proposed openstack/kolla-ansible master: CI: Use python3 for openstack clients  https://review.opendev.org/69606210:52
openstackgerrityatin proposed openstack/kolla master: WIP: move to CentOS 8 in containers  https://review.opendev.org/69236811:03
openstackgerritMerged openstack/kayobe master: Switch to generic package module  https://review.opendev.org/69139311:04
openstackgerritWill Szumski proposed openstack/kolla-ansible master: Fix fernet_token_expiry precheck  https://review.opendev.org/69844111:05
openstackgerritMark Goddard proposed openstack/kolla master: Refactor Apache httpd setup  https://review.opendev.org/69825511:05
openstackgerritMark Goddard proposed openstack/kolla master: WIP: move to CentOS 8 in containers  https://review.opendev.org/69236811:05
openstackgerritMark Goddard proposed openstack/kolla master: CentOS 8: work around mod_ssl certificate issue  https://review.opendev.org/69844511:05
*** schwicht has quit IRC11:11
*** k_mouza has quit IRC11:17
*** k_mouza has joined #openstack-kolla11:17
*** dpawlik has quit IRC11:21
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: OVN Support  https://review.opendev.org/69684111:24
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637611:25
mnasiadkamgoddard: that's interesting - https://zuul.opendev.org/t/openstack/build/a4e8f51899f24a8c89a0c9384a2d4533/log/primary/logs/ansible/upgrade#1098811:28
mnasiadka:D11:28
mgoddardmnasiadka: that is odd. strange that it got that far before failing11:29
mnasiadkayeah11:29
*** shyam89 has joined #openstack-kolla11:31
*** shyamb has quit IRC11:31
*** pcaruana has joined #openstack-kolla11:36
*** shyam89 has quit IRC11:38
openstackgerritMark Goddard proposed openstack/kolla master: Refactor Apache httpd setup  https://review.opendev.org/69825511:39
openstackgerritMark Goddard proposed openstack/kolla master: CentOS 8: work around mod_ssl certificate issue  https://review.opendev.org/69844511:39
openstackgerritMark Goddard proposed openstack/kolla master: WIP: move to CentOS 8 in containers  https://review.opendev.org/69236811:39
openstackgerritMark Goddard proposed openstack/kolla master: CentOS 8: work around mod_ssl certificate issue  https://review.opendev.org/69844511:41
openstackgerritMark Goddard proposed openstack/kolla master: WIP: move to CentOS 8 in containers  https://review.opendev.org/69236811:41
*** sri_ has joined #openstack-kolla11:51
*** sean-k-mooney is now known as skm11:55
*** k_mouza has quit IRC11:55
*** skm is now known as sean-k-mooney11:55
*** k_mouza has joined #openstack-kolla11:56
mnasiadkaanalyzing the keystone error 500 thing (especially in the healthchecks change), it seems only one out of three keystones is in healthy state11:57
mnasiadkaand this only happens in multinode it seems11:57
yoctozeptomnasiadka: deprecate mariadb11:57
mnasiadkayoctozepto: actually I don't think it's mariadb's fault11:58
yoctozeptomnasiadka: well, everything is bound to keystone11:58
yoctozeptoand keystone is bound to mariadb11:58
yoctozeptoso11:58
yoctozepto:D11:58
yoctozeptomgoddard, mnasiadka: yeah, the lack of basic ansible vars errors are just lovely11:59
yoctozeptowonder if the nodes are really stable or we get some memory corruption (or we found the reason of ceph-ansible deprecation)12:00
*** dpawlik has joined #openstack-kolla12:00
mnasiadkayoctozepto: well, this was in hrw's ansible-lint related change :D12:02
yoctozeptomnasiadka: they happen very rarily but do12:02
yoctozeptoas if some internal state broke for some reason12:03
yoctozeptocould be some tricky race condition as well12:03
*** spsurya has joined #openstack-kolla12:05
*** dpawlik has quit IRC12:05
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: DNM: Test keystone wsgi LogLevel debug  https://review.opendev.org/69845212:08
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637612:13
*** vmixor has joined #openstack-kolla12:13
*** dpawlik has joined #openstack-kolla12:20
*** dougsz has quit IRC12:21
yoctozeptomnasiadka: I'm afraid you might need strace12:21
*** hamdyk has joined #openstack-kolla12:21
yoctozeptowhat came to my mind, might be keystone is doing heavy locking with each action12:22
yoctozeptohence only one is deemed healthy12:22
yoctozeptoand our round-robin scheduling increases failure ratio in general12:22
yoctozeptoas in those funny failures when you always get the 3rd node to fail :-)12:23
yoctozeptoi.e. do multiple keystone only for HA, no scaling whatsoever12:23
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: Use Docker healthchecks for core services  https://review.opendev.org/67638912:23
hamdykHi all, I want to add neutron plugin (networking-mlnx) to neutron-base image. For binary it's no problem, but for source, how can I generate and upload the tar files to add it to kolla/common/config.py ?12:24
*** dpawlik has quit IRC12:25
tbarronyoctozepto: thanks for combining the bugs and giving triplo folks a heads up12:27
mnasiadkahamdyk: just add it to kolla/common/config.py, networking-mlnx is publishing tarballs on tarballs.openstack.org, right?12:28
mnasiadkahamdyk: and is there a reason you need it in neutron-base? neutron-server will not suffice?12:28
tbarronyoctozepto: we (manila) are going to need to work with Ceph folks proper since the issue is in this ceph-volume-library which12:29
tbarronyoctozepto: although python is part of Ceph itself rather than the manila driver proper12:29
tbarronyoctozepto: the ceph folks are migrating clients off of it to a rest interface so that e.g. golang clients can use the same capability without pythohn bindings12:29
tbarronyoctozepto: but we've got to get this fixed anyways12:29
hamdykmnasiadka: not sure about the publishing, will check12:30
tbarronbrtknr: ^^ just fyi12:30
hamdykmnasiadka: we need the plugin to be used in neutron-server, neuton-dhcp and neutron-l312:30
*** dpawlik has joined #openstack-kolla12:33
mnasiadkahamdyk: sure, just asking - write the explanation in the commit message ;-)12:34
yoctozeptotbarron: ack, so this affects everything up to ussuri, eh?12:35
hamdykmnasiadka: so I can see http://tarballs.openstack.org/networking-mlnx/, now all I need to do is to modify  kolla/common/config.py and add the package with prefix "neutron-base-plugin-" ?12:35
mnasiadkahamdyk: seems so12:36
hamdykmnasiadka: great, will try it12:36
hamdykmnasiadka: thnx :)12:36
*** negronjl has quit IRC12:40
tbarronyoctozepto: well it affects whatever openstack release you use if you use post-luminous so far as I can tell atm, so yes12:41
*** negronjl has joined #openstack-kolla12:41
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637612:43
tbarronyoctozepto: assuming that the deployment bakes ceph versions into container images (not all do of courxe)12:44
*** k_mouza_ has joined #openstack-kolla12:44
tbarronyoctozepto: upstream manila CI does not and the devkstack-ceph-plugin wax still deploying luminous so the12:45
tbarronissue is not seen there even on master12:45
yoctozeptotbarron: I see, thanks for your explanation12:45
tbarronyoctozepto: but in my downstream job we use tripleo with kolla images (but lag behind upstream) so I'm motivated to get a fix :)12:46
*** k_mouza has quit IRC12:47
*** k_mouza_ has quit IRC12:49
*** k_mouza has joined #openstack-kolla12:49
hrwfolks: RDO has meeting just before our one. I will log but not being able to attend. Probably have to skip our one too today12:54
hrwyoctozepto: skydive - you should -1 https://review.opendev.org/#/c/696709/ when it was time for it ;D12:57
patchbotpatch 696709 - kolla - Remove skydive rpm installation (MERGED) - 1 patch set12:57
hrwyoctozepto: will handle12:57
yoctozeptohrw: hmm, that did not change buildability12:58
yoctozeptobut you are right about releasenote12:58
yoctozeptomnasiadka: ^12:58
yoctozeptohrw: where is that rdo channel? :D12:58
yoctozeptook, here #rdo12:59
mnasiadkahrw: usually they had theirs at the same time12:59
mnasiadkaI'm normally following both and complaining over something on #rdo13:00
yoctozeptomnasiadka: may you complain about manila today13:00
yoctozeptoor really just raise their awareness13:00
mnasiadkawell, it's interesting because RDO is testing some setups, right?13:01
yoctozeptowell, tripleo too13:01
yoctozeptoprobably not manila share13:01
yoctozeptoor not with the latest ceph13:01
yoctozeptofor whatever reason13:01
hrwmnasiadka: hm. maybe right. I had to calculate GMT offset wrong again13:01
mnasiadkayoctozepto: we haven't tested, we are not to blame :D13:01
yoctozeptomnasiadka: surely :D13:02
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: skydive: mark as unbuildable on !x86  https://review.opendev.org/69843013:06
mnasiadkayoctozepto: coming back to "option httpchk" discussion, it seems most services should support healthchecks - https://docs.openstack.org/oslo.middleware/latest/reference/healthcheck_plugins.html13:07
hrwyoctozepto: here you have13:07
yoctozeptomnasiadka: and you are going for /healthcheck or / ?13:07
mnasiadkayoctozepto: I'll check on some deployment and I guess it makes sense to start doing real healthchecks on haproxy level too13:08
yoctozeptohrw: thx13:09
yoctozeptomnasiadka: well, currently haproxy has issues with its script13:09
yoctozeptoit seems to destabilize rather than stabilize the situation13:09
yoctozeptoI mean the keepalived check13:09
*** zainub_wahid has quit IRC13:10
*** k_mouza has quit IRC13:11
*** schwicht has joined #openstack-kolla13:12
mnasiadkayoctozepto: you mean the check script that pollutes haproxy logs? :)13:16
*** goldyfruit_ has joined #openstack-kolla13:17
yoctozeptomnasiadka: possibly, at least the one that breaks otherwise valid jobs13:26
*** k_mouza has joined #openstack-kolla13:26
mnasiadkayoctozepto: https://github.com/openstack/kolla/blob/master/docker/keepalived/check_alive.sh - that one? or I'm again sleeping on the job? :)13:27
*** schwicht has quit IRC13:28
yoctozeptomnasiadka: that one13:29
mnasiadkayoctozepto: how does it break jobs?13:29
*** wuchunyang has quit IRC13:33
openstackgerritMark Goddard proposed openstack/kolla master: WIP: move to CentOS 8 in containers  https://review.opendev.org/69236813:35
hrwhttps://review.opendev.org/#/c/662456 https://review.opendev.org/#/c/557659 - anyone?13:35
patchbotpatch 662456 - kolla - Add CentOS/source aarch64 experimental job - 32 patch sets13:35
patchbotpatch 557659 - kolla - Add Debian/source aarch64 experimental job - 57 patch sets13:35
openstackgerritHamdy Khader proposed openstack/kolla master: Add Networking-MLNX to Neutron-Base packages  https://review.opendev.org/68911013:39
*** dougsz has joined #openstack-kolla13:40
openstackgerritHamdy Khader proposed openstack/kolla master: Add Networking-MLNX to Neutron-Base packages  https://review.opendev.org/68911013:41
openstackgerritMark Goddard proposed openstack/kolla-ansible master: CI: Use python3 for openstack clients  https://review.opendev.org/69606213:45
openstackgerritHamdy Khader proposed openstack/kolla master: Add Networking-MLNX to Neutron-Base packages  https://review.opendev.org/68911013:50
yoctozeptomnasiadka: timeouts and makes vip address move away13:55
yoctozeptothere are two issues, one is keepalived behaving weirdly on timeout13:55
yoctozeptosecond is the timeout itself :-)13:55
yoctozeptoI have this reported somewhere13:56
openstackgerritWill Szumski proposed openstack/kolla-ansible master: Fix fernet_token_expiry precheck  https://review.opendev.org/69844113:58
*** schwicht has joined #openstack-kolla13:59
*** cah_link has joined #openstack-kolla13:59
*** goldyfruit_ has quit IRC14:02
*** cah_link has quit IRC14:03
*** k_mouza has quit IRC14:07
*** k_mouza has joined #openstack-kolla14:07
osmanlicilegihrw: can you have a look at https://review.opendev.org/#/c/694799/ when you have some time14:21
patchbotpatch 694799 - kolla - WIP: Upgrade RabbitMQ to 3.8 - 10 patch sets14:21
openstackgerritWill Szumski proposed openstack/kolla-ansible master: Remove fernet_token_expiry precheck  https://review.opendev.org/69844114:30
mnasiadkayoctozepto: so lets change it to killall -0 haproxy14:30
*** hamdyk has quit IRC14:34
*** watersj has joined #openstack-kolla14:35
hrwosmanlicilegi: done. -114:37
yoctozeptomnasiadka: what does it do?14:37
*** schwicht has quit IRC14:38
mnasiadkayoctozepto: the same what docker does - checks if haproxy is running14:38
mnasiadkayoctozepto: probably better to disable it in CI for sure :)14:40
mnasiadka(The check)14:40
*** hjensas has quit IRC14:40
yoctozeptomnasiadka: ah, I read it again and now get what you meant :D14:43
*** sri_ has quit IRC14:44
yoctozeptowell, it might be more reasonable to rely on a simpler check either way14:45
yoctozeptono need to stress haproxy with extra requests via the unix socket14:46
yoctozeptostill, it's interesting why it fails to respond in several seconds, could be related to general load14:46
yoctozeptonever had it locally14:46
yoctozeptosee: https://bugs.launchpad.net/kolla-ansible/+bug/184772714:48
openstackLaunchpad bug 1847727 in kolla-ansible "CI: failing on CRITICAL may be still too strong" [Medium,Triaged]14:48
yoctozeptohttps://review.opendev.org/#/c/690702/14:48
patchbotpatch 690702 - kolla-ansible - DNM: haproxy timeout - raise value for server - 3 patch sets14:48
yoctozeptoand14:48
yoctozeptohttps://review.opendev.org/#/c/690920/14:48
patchbotpatch 690920 - kolla-ansible - DNM: keepalived testing - 10 patch sets14:48
openstackgerritMark Goddard proposed openstack/kolla-ansible master: WIP: CI: Start testing CentOS 8 hosts  https://review.opendev.org/69354414:54
openstackgerritMark Goddard proposed openstack/kolla-ansible master: WIP: Deploy CentOS 8 containers  https://review.opendev.org/69769014:54
mgoddardmeeting in 514:54
openstackgerritMark Goddard proposed openstack/kolla master: WIP: move to CentOS 8 in containers  https://review.opendev.org/69236814:54
mgoddardmgoddard mnasiadka hrw egonzalez yoctozepto rafaelweingartne ^14:55
mnasiadkayoctozepto: yeah, some things only happen in the CI, right? :)14:57
yoctozeptomnasiadka: unfortunately!14:58
*** wuchunyang has joined #openstack-kolla14:58
*** chason has joined #openstack-kolla14:59
* hrw off14:59
*** chason has left #openstack-kolla15:00
yoctozeptomeeting time15:01
yoctozeptomgoddard15:01
mgoddardyessir15:01
mgoddard#startmeeting15:01
openstackmgoddard: Error: A meeting name is required, e.g., '#startmeeting Marketing Committee'15:01
mgoddard#startmeeting kolla15:01
openstackMeeting started Wed Dec 11 15:01:21 2019 UTC and is due to finish in 60 minutes.  The chair is mgoddard. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
*** openstack changes topic to " (Meeting topic: kolla)"15:01
openstackThe meeting name has been set to 'kolla'15:01
mgoddard#topic rollcall15:01
*** openstack changes topic to "rollcall (Meeting topic: kolla)"15:01
mgoddard\o15:01
jovial[m]o/15:01
generalfuzzo/15:01
*** chason has joined #openstack-kolla15:01
osmanlicilegio/15:01
yoctozeptoo/15:01
chasono/15:02
*** graysonh has joined #openstack-kolla15:02
mnasiadkao/15:02
*** scottsol has joined #openstack-kolla15:02
*** wuchunyang has quit IRC15:02
*** lemko has quit IRC15:03
mgoddard#topic agenda15:03
*** openstack changes topic to "agenda (Meeting topic: kolla)"15:03
mgoddard* Roll-call15:03
mgoddard* Announcements15:03
mgoddard* Review action items from last meeting15:03
mgoddard* CI status15:03
mgoddard* Train release planning15:03
mgoddard* Ussuri release planning15:03
mgoddard ** Support for Train redeployment on C8, we are already diverging with support for Train15:03
mgoddard* Review priorities15:03
mgoddard* Should we check for supported OS distro & release in prechecks?15:03
mgoddard* CI scenarios15:03
mgoddard#topic announcements15:03
*** openstack changes topic to "announcements (Meeting topic: kolla)"15:03
mgoddard#info Kayobe RC1 planned this week15:03
mgoddard#info kolla RC2 releases proposed15:04
mgoddardI do wonder if the release team have become a bottleneck. Those patches have been up for a couple days15:04
mgoddard*patch15:04
mgoddardAny others?15:05
mnasiadkathey announced some time ago they are happy to teach new members... so maybe that's the case15:05
yoctozeptoyea, it's happening again15:05
yoctozeptothey were delayed previously too15:05
yoctozeptomnasiadka: we should go get taught :-)15:05
mgoddardseems to me like teams should have control over their own releases15:06
mgoddardsimilar to the recent stable branch discussion15:06
mgoddardanyway15:07
mgoddard#topic Review action items from last meeting15:07
*** openstack changes topic to "Review action items from last meeting (Meeting topic: kolla)"15:07
mgoddardWe had two15:07
mgoddardmgoddard to update kayobe train release etherpad15:07
mgoddardosmanlicilegi to mark senlin images as unbuildable for ubuntu & debian binary15:07
mgoddardI did mine15:07
mgoddardosmanlicilegi did his15:07
mgoddardboom15:07
osmanlicilegiyep15:07
mgoddard#topic CI status15:07
*** openstack changes topic to "CI status (Meeting topic: kolla)"15:08
mgoddardthanks osmanlicilegi :)15:08
osmanlicilegiyw15:08
mgoddardCI looking good AFAIK, although we are running train tarballs on master15:08
yoctozeptoonly for c715:08
mgoddardtrue15:09
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Ceph-Ansible CI  https://review.opendev.org/67637615:09
mgoddard#topic Train release planning15:09
*** openstack changes topic to "Train release planning (Meeting topic: kolla)"15:09
mgoddardKolla is looking good at this point, just waiting for release handle cranking15:09
*** schwicht has joined #openstack-kolla15:09
mgoddardjovial[m]: how about kayobe?15:10
openstackgerritWill Szumski proposed openstack/kayobe master: Add kayobe as openstack project for release notes  https://review.opendev.org/69770115:10
jovial[m]Still need the nova cells work and anible version bump patches to be completed.15:11
mgoddardjovial[m]: and this one: https://review.opendev.org/#/c/694616/15:11
jovial[m]Other than that it's just reviews we need.15:11
patchbotpatch 694616 - kayobe - Use OpenStack Train release - 2 patch sets15:11
mgoddardRelease tracker here: https://etherpad.openstack.org/p/kayobe-train-release15:12
jovial[m]Oh yeah, I will update that one shortly.15:12
mgoddard#link https://etherpad.openstack.org/p/kayobe-train-release15:12
*** chason has quit IRC15:13
mgoddard7 patches left to review15:13
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: OVN Support  https://review.opendev.org/69684115:13
mgoddardlet's keep pushing on it15:13
mgoddard#topic Ussuri release planning15:14
*** openstack changes topic to "Ussuri release planning (Meeting topic: kolla)"15:14
mgoddardOnto U15:14
yoctozeptoonto U!15:14
*** rgogunskiy has quit IRC15:14
mgoddardI've been spending some time on centos 8 recently15:14
mgoddardcurrent status is we have an aio centos8/source job passing in CI15:15
yoctozeptohurrary15:15
yoctozeptohurray*15:15
mgoddardit required a few hacks & fudges, trying to extract the correct pieces into other patches to get them merged15:15
mnasiadkaso it's in good progress15:16
mnasiadkaalthough we're missing ceph client libraries, right?15:16
mgoddardyatin pointed out that the main delorean RDO repo is now available, so I've just pushed a patch to test centos8/binary aio15:16
*** dpawlik has quit IRC15:16
mgoddardmnasiadka: yes15:16
mgoddardand a few other things15:16
mnasiadkaok, around ceph - we should get it built in a couple of weeks, there's a group that is pushing all the deps to EPEL el815:16
mnasiadkaand there's only a couple left15:17
mnasiadkamainly pecan and libs depending on pecan15:17
mgoddardnice15:18
yoctozeptovery good15:18
mgoddardwe know that we need to support c7 & c8 on train, so bear that in mind when writing and reviewing these patches15:18
mgoddard(backport)15:18
mnasiadkawe already know that backporting will be a bit painful, due to some changes in kolla (like repo enablement on a different level)15:19
mgoddardI think the most sane way to support that is to support both in master, then remove c715:19
mgoddardi.e. parallel build & deploy jobs15:19
mnasiadkayeah, that's probably a good idea to follow that path15:20
yoctozeptoyea, we already broke qinling now15:20
yoctozeptosorry, senlin*15:20
mgoddardI'm not sure what we do about publishing15:20
mgoddardshould we publish images with a base_distro of centos8?15:20
mnasiadkamgoddard: I think we have no other option15:21
mgoddardtrue for train, but we could avoid it on master if we wish15:21
mgoddardmaybe it doesn't matter15:21
mnasiadkaI think a sane approach would be to have base_distro = centos8, and deprecate/remove centos (as in centos7)15:22
mnasiadkaless people complaining maybe15:22
mnasiadkabut I guess we'll work it out on the way15:22
mgoddardhmm, rather than switching back to centos on master?15:22
mnasiadkamaybe it doesn't make any sense, and we should switch back to centos on master15:23
openstackgerritMerged openstack/kayobe master: Add example to Bridges and VLANs section  https://review.opendev.org/69336815:23
yoctozeptocentos8 sounds nice15:23
yoctozeptowe might soon require that for ubuntu2015:23
mgoddardwould require a lot of conditional logic changes15:23
yoctozeptoencoding distro version sounds nice15:23
mnasiadkamy worry is that we'll get centos8 master tagged images we would need to remove from docker hub15:23
yoctozeptomgoddard: hmm, could be15:24
yoctozeptomnasiadka: yea, going back and forth sounds bad15:24
yoctozeptomy idea is to stay15:24
yoctozeptorethink logic to accommodate it15:24
mgoddardor we encode the OS version in the image name15:24
mnasiadkalike centos-8-source-xxx ?15:25
mgoddardor kolla/centos-8-source-base:train15:25
mgoddardyeah15:25
mnasiadkawell, we have time to rethink the pros and cons of both solutions I think15:25
mgoddardor kolla/centos-source-base:train-centos815:25
mgoddardas a one-off15:25
mnasiadkayeah, the tag thing as a one off should probably work15:26
mnasiadkawe could shorten it to train-c815:26
mnasiadka:)15:26
mgoddardyeah15:26
mgoddardthat's probably best15:26
mnasiadkayup15:26
mgoddardwe need something we can decide on at runtime in ansible, based on ansible_distro_major_version15:27
mgoddardfor mixed c7/815:27
mgoddardok, we have some things to think about15:27
mgoddardwhile we are on this topic, we have a subtopic proposed15:28
mgoddardSupport for Train redeployment on C8, we are already diverging with support for Train15:28
mgoddardyoctozepto: is that you?15:28
yoctozeptomgoddard: yea15:28
yoctozeptoso we need to think about it when reviewing15:28
yoctozeptoand also need some mechanism to support both ways15:28
yoctozeptoas we are going to lose train re-deployability15:29
yoctozeptoon c815:29
mgoddardyou mean migrating an existing train c7 cloud to c8?15:30
yoctozeptomhm15:30
yoctozeptonow senlin would fail to redeploy because of the logic change15:30
yoctozeptoit could be really hard to allow both releases if more projects start diverging15:30
mgoddardbut we'd be using stable/train k-a to do this15:30
yoctozeptoah15:31
yoctozeptodid not get that15:31
yoctozepto:D15:31
mgoddardat least that was the generally preferred option I think15:31
yoctozeptothen all is fine15:31
*** negronjl has quit IRC15:31
mnasiadkabut maybe it would make sense to have a change with zuul job that does the migration?15:31
mgoddardyes, we need that15:31
mgoddardbut on stable/train15:32
mnasiadkaof course15:32
mgoddardI think we would have a multinode with mixed c7/815:33
mgoddarddeploy to c7, then add the c8 node to the inventory and deploy again15:34
yoctozeptoso we need to support c8 as host on train15:34
mnasiadkawell, host can be c7, containers can be c8 :)15:34
yoctozeptonot sure we do already15:34
mgoddardyes15:34
*** negronjl has joined #openstack-kolla15:34
mgoddardno, we do not15:34
yoctozepto:D15:34
mgoddardthere will be much backporting15:34
yoctozeptomhm15:34
mnasiadkaI guess we need to support all three mixes for the migration/upgrade process? c7 on c7, c8 on c7, c8 on c8?15:35
mnasiadkaor c7 on c8? :)15:35
mgoddardmnasiadka: no - tripleo isn't going to mix host and container versions15:35
mgoddardso we shoulnd't either15:36
mgoddardc7 host runs c7 containers15:36
mnasiadkamgoddard: well, they control the OS with Heat stack, we need to state what we support in the docs15:36
mgoddardnew c8 hosts come up with c8 containers15:36
mnasiadkathat's why I'm asking15:36
mgoddardthat's what I meant earlier with ansible_distro_major_version - we will select the container tag based on the host15:36
yoctozeptoc8 on c7 unsupported15:37
mnasiadkamakes sense15:37
mnasiadkaso we don't expose that to the user in any other way, we deploy c8 containers on c8 host15:37
mgoddardwe should probably write this stuff down somewhere :)15:37
mnasiadkayeah, most probably - we need a draft of a proposed migration process and a zuul job that tests it :)15:38
mgoddardit'll be a variable. they can shoot themselves in the foot if they want15:38
yoctozepto:D15:38
mnasiadkagood, I love users shooting in the foot15:38
mgoddardopenstack_release & openstack_release_centos8?15:39
mgoddardor maybe it needs to be configurable for each container?15:39
mgoddardhmm, perhaps base_distro would be easier from ansible perspective15:39
mgoddardwould be a lot easier if they just supported upgrades from 7 to 8...15:40
mgoddardAny other thoughts on this one?15:40
mnasiadkaby the way, the centos 8 containers will be based on Stream, right?15:41
mgoddardmnasiadka: I think so15:41
mnasiadkayeah centos:8 is stream15:41
mnasiadkano more stupid questions, I guess as homework we all need to rethink the base_distro vs tag for next meeting15:42
mgoddardyeah15:43
mgoddard#topic Should we check for supported OS distro & release in prechecks?15:43
*** openstack changes topic to "Should we check for supported OS distro & release in prechecks? (Meeting topic: kolla)"15:43
mgoddardI noticed that OSA has some checks on the OS distro & release against a supported set15:44
mnasiadkamight make sense, do we plan to check the docker engine version as well?15:44
mgoddardI also notice in bug reports people using untested ubuntu & kolla release combos15:44
yoctozepto+115:45
mnasiadkaespecially when we merge healthchecks, anything prior to docker 1.12 will not work15:45
mgoddardwe could check docker engine version. I'm not sure we have much of a requirement on it15:45
osmanlicilegi+115:45
mnasiadkawe have some requirements on docker API versions rather15:45
mgoddardhopefully no one is running anything earlier than 1.12 with ussuri :)15:45
mnasiadkawe could check for that15:45
mnasiadkamgoddard: who knows... who knows :)15:46
mnasiadkaespecially people might not be aware about the maintenance cycles for docker-ce15:46
mgoddardhow strict should we be with centos versions?15:46
*** chkumar|ruck is now known as raukadah15:47
mgoddardshould we just say we support c7, or 7.7?15:47
mgoddardsame with debian/ubuntu15:47
mnasiadkaI think it should be c7 - c7 GA is supported normally until Q4 202015:47
mnasiadkawell, with Ubuntu it's easy - we say Bionic, right?15:47
mgoddardI think so15:48
mnasiadkaand Debian Buster I think?15:48
mgoddardyes15:48
yoctozeptoimage must match host15:48
mgoddardyeah15:48
yoctozeptootherwise very limited support15:48
mgoddardso does anyone want to pick this up?15:49
yoctozeptoi.e. not necessarily rejecting patches15:49
yoctozeptobut not caring much15:49
osmanlicilegiI can take it if nobody wants it :) I'm not sure if I can catch ussuri timelines but I'll try15:50
mnasiadkamgoddard: around picking up, maybe we could think about having a bucket list (or a more scary version - kanban board) - and each one of us with spare cycles could take something - at least I have a tendency of forgetting about things :)15:51
mgoddardI've added it to the whiteboard15:51
mgoddardhttps://blueprints.launchpad.net/kolla-ansible/+spec/os-prechecks15:51
mnasiadkagoodie15:52
mgoddardalways a good place to pick things up from15:53
mgoddardI'll put your name on the blueprint osmanlicilegi, remove it if you think you won't have time15:54
mnasiadkathere are some... old blueprints with high priority - can we sort of think about cleaning it up?15:54
osmanlicilegimgoddard: ok15:54
mgoddardmnasiadka: which ones?15:55
mnasiadkamgoddard: example - https://blueprints.launchpad.net/kolla-ansible/+spec/sanity-check-container15:55
mnasiadkait's there since Newton or longer :)15:55
mgoddardoh right, I thought you meant on the whiteboard15:55
mgoddardyeah, LP is a mess15:56
mnasiadkanaah, whiteboard is maintained :)15:56
mgoddardI occasionally tidy it up until I get bored15:56
mnasiadkamgoddard: maybe let's just remove priority tag from those things we don't do in Ussuri?15:56
mgoddard+115:56
mnasiadkaok, I'll do that, because this mess hurts :)15:57
yoctozeptomeh, just filter for ussuri :D15:57
mgoddard#action mnasiadka to remove priority from inactive blueprints15:58
mgoddard#topic Open discussion15:58
*** openstack changes topic to "Open discussion (Meeting topic: kolla)"15:58
mgoddardAnything else to cover?15:59
yoctozeptonah, /me overloaded15:59
osmanlicilegimgoddard: I have a question for https://blueprints.launchpad.net/kolla-ansible/+spec/docker-image-pruning. should I go with ansible docker module or kolla_docker.py ?15:59
yoctozeptogood question15:59
osmanlicilegimaybe for the v cycle kolla_docker.py will retire :]16:00
mnasiadkaso, if kolla_docker.py lacks this functionality - I would go for upstream module16:00
mgoddardosmanlicilegi: it still has some things docker_container does not16:00
yoctozeptomake it so that it's easy to go either way :D16:00
mnasiadkaunless upstream module lacks some functionality, so go for extending kolla_docker.py :)16:00
yoctozeptolooking at current shape of docker16:01
yoctozeptoi would not be surprised it's "deprecated" in a year16:01
mgoddardhttps://docs.ansible.com/ansible/latest/modules/docker_image_module.html16:01
mgoddardI can't see prune on there16:01
yoctozeptoprobably getting a fork and more momentum toward podman and alike16:01
mnasiadkayoctozepto: and what all those Docker Desktop users will do? :)16:01
yoctozeptomnasiadka: cry just a little16:01
osmanlicilegimgoddard: https://docs.ansible.com/ansible/latest/modules/docker_prune_module.html16:02
mnasiadkayoctozepto: Windows users cry louder than others :)16:02
yoctozeptohttps://www.youtube.com/watch?v=ZBpWdwXzpMk16:02
mgoddardosmanlicilegi: oh, nice. Use that. We'll need to bump ansible minimum to 2.8, but I think we planned to do that in U anyway16:02
osmanlicilegiok sir :]16:02
mnasiadkayes, bump up Ansible :)16:03
yoctozeptoyes, bump as far as eyes can see16:03
yoctozeptowe are past 5pm16:03
mgoddardok, we're at time16:03
yoctozeptolet's wrap it up16:03
mgoddardThank you all16:04
mgoddard#endmeeting16:04
*** openstack changes topic to "Kolla IRC meetings on Wednesdays @ 15:00 UTC - see agenda @ https://goo.gl/OXB0DL | Whiteboard: https://etherpad.openstack.org/p/KollaWhiteBoard | IRC channel is *LOGGED* @ http://goo.gl/3mzZ7b"16:04
openstackMeeting ended Wed Dec 11 16:04:12 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:04
openstackMinutes:        http://eavesdrop.openstack.org/meetings/kolla/2019/kolla.2019-12-11-15.01.html16:04
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/kolla/2019/kolla.2019-12-11-15.01.txt16:04
openstackLog:            http://eavesdrop.openstack.org/meetings/kolla/2019/kolla.2019-12-11-15.01.log.html16:04
yoctozeptothanks mgoddard16:04
yoctozeptomgoddard, mnasiadka: hrw was right, rdo had meeting one hour before us :D16:04
hrwelo again16:04
yoctozeptoweird approach to tz16:04
mgoddardyes, I remember him reading logs last week16:05
mnasiadkayoctozepto: maybe it was at the same time before time change in PL :)16:05
hrwspeaking of docker... can we just say "19.03 is minimum supported, deal with it"?16:05
*** negronjl has quit IRC16:05
hrwand not as 'in some release in future' but today/tomorrow/notlater16:06
openstackgerritMark Goddard proposed openstack/kolla-ansible master: Drop python 2 support from action plugins  https://review.opendev.org/69606316:07
openstackgerritMark Goddard proposed openstack/kolla-ansible master: Get rid of Python 2 support  https://review.opendev.org/69516816:07
*** negronjl has joined #openstack-kolla16:08
openstackgerritWill Szumski proposed openstack/kayobe master: WIP: Adds support for Ansible 2.8, bump mimimum to 2.6  https://review.opendev.org/69770216:10
*** scottsol has quit IRC16:10
mgoddardhrw: I don't think we have any dependencies on that version specifically16:10
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: WIP: OVN Support  https://review.opendev.org/69684116:11
openstackgerritWill Szumski proposed openstack/kayobe master: Use OpenStack Train release  https://review.opendev.org/69461616:11
hrwmgoddard: according to docker devs we need 19.03.4+ to have ver working with kernels which have overlayfs fix (so 4.19/debian and all stable branches)16:12
hrwmgoddard: anyway we should define one version and keep it to cut all those discussions 'will it work on someone's 1.12 docker'16:12
watersjbridge_mappings = physnet1:br-ex, physnet2:br-ex2, what creates the ovs bridge device? Do I need to enter the neutron_openvswitch_agent and create br-ex2 1st?16:12
hrw1.12 is several years old one16:12
hrwk-a installs docker-ce in bootstrap-servers16:13
mnasiadkayeah, there are overlay2 fixes in 19.03 for newer kernels, might help us just point to that version16:14
yoctozeptoyay16:14
mgoddardwe don't require users to run bootstrap-servers16:15
yoctozeptomnasiadka: not sure, they clam it's 15 UTC16:15
hrwmgoddard: but we require them to run docker?16:15
mnasiadkamgoddard: that's another thing, we need to manage the deps somehow :)16:16
mnasiadkafor a sane approach, now if somebody comes in with Docker 1.0 he can expect it to work :)16:16
*** dougsz has quit IRC16:16
mgoddardI'm up for a minimum, but not necessarily too new16:16
hrwmgoddard: 18.06, 18.09 or 19.03? there are no other version available.16:17
yoctozepto19.03 is not too new16:18
yoctozeptoand expect latest patch16:18
hrwosmanlicilegi: do you plan any rabbitmq patch chcanges today? I would like to change linaro repos there to use https (and only that)16:19
*** dougsz has joined #openstack-kolla16:21
*** k_mouza has quit IRC16:25
*** k_mouza_ has joined #openstack-kolla16:25
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: WIP: Upgrade RabbitMQ to 3.8  https://review.opendev.org/69479916:28
hrwosmanlicilegi: only Linaro repos changed16:28
*** k_mouza has joined #openstack-kolla16:30
*** k_mouza_ has quit IRC16:32
openstackgerritMerged openstack/kolla master: skydive: mark as unbuildable on !x86  https://review.opendev.org/69843016:41
noxoidwell this is scary https://bugs.launchpad.net/keystone/+bug/185508016:42
openstackLaunchpad bug 1855080 in OpenStack Security Advisory "Credentials API allows listing and retrieving of all users credentials" [High,Confirmed] - Assigned to Gage Hugo (gagehugo)16:42
*** ricolin has quit IRC16:46
mgoddardthat is quite ridiculous16:55
noxoidright? i just confirmed any authorized user on my kolla stein deployment can see everyone elses ec2 (s3) credentials16:55
yoctozeptomgoddard, mnasiadka: https://review.opendev.org/69604716:59
patchbotpatch 696047 - kolla-ansible - Ensure hostname resolved by kolla configured /etc/... - 2 patch sets16:59
yoctozeptonew comment from me16:59
yoctozeptonoxoid: sh*t17:00
noxoidi just shoved out a change to set enforce_scope=true and im having people test it17:00
noxoidat first glance it fixes the problem but kolla was reporting 403s when trying to call list_services17:01
*** wuchunyang has joined #openstack-kolla17:03
yoctozeptomgoddard, mnasiadka: I see no other option than to either have idempotency and scalability issues, or completely override /etc/hosts17:06
openstackgerritMerged openstack/kayobe master: Add kayobe as openstack project for release notes  https://review.opendev.org/69770117:07
*** wuchunyang has quit IRC17:08
mnasiadkayoctozepto: there is third one - failed_when :)17:09
yoctozeptomnasiadka: when what?17:09
yoctozeptormq already fails :-)17:09
mnasiadkaWhen hostname is in the same line with 127.0.*17:10
yoctozeptoideally we should have consenting adults who use proper DNS17:10
yoctozeptomnasiadka: it's not about localhost17:10
yoctozeptoand/or loopback17:11
yoctozeptosee http://paste.openstack.org/show/787463/17:11
yoctozeptothat's mess from maas17:11
yoctozepto172.16.103.100    ctrl1.lab3.stack ctrl117:11
yoctozepto172.16.103.100    controller1.lab3.stack controller117:11
yoctozeptomust fail17:11
openstackgerritMark Goddard proposed openstack/kayobe master: Support internal API TLS encryption  https://review.opendev.org/69637117:13
*** rpittau is now known as rpittau|afk17:13
*** wuchunyang has joined #openstack-kolla17:14
openstackgerritMark Goddard proposed openstack/kayobe master: Use mariabackup for database backups  https://review.opendev.org/69612917:17
*** wuchunyang has quit IRC17:19
*** yan0s has quit IRC17:26
osmanlicilegihrw: I was on the way to home. thanks for the update!17:32
mnasiadkayoctozepto: then we will always hit that... either check for weirdness and fail or template out17:33
mgoddardmnasiadka: true, we could do the getent check for some/all hosts to check that our change applied correctly17:35
mnasiadkamgoddard: there you go - we have a solution :)17:39
*** wuchunyang has joined #openstack-kolla17:40
*** igordc has joined #openstack-kolla17:42
*** wuchunyang has quit IRC17:44
*** k_mouza has quit IRC17:45
*** k_mouza has joined #openstack-kolla17:48
*** k_mouza has quit IRC17:49
*** wuchunyang has joined #openstack-kolla17:50
yoctozeptohmm, that makes sense17:52
*** dougsz has quit IRC17:53
yoctozeptoprechecks for rabbitmq would make most sense?17:53
yoctozeptomgoddard, mnasiadka: ^17:53
openstackgerritWill Szumski proposed openstack/kolla-ansible master: Remove fernet_token_expiry precheck  https://review.opendev.org/69844117:54
mnasiadkayoctozepto: might be it makes more sense there17:54
yoctozeptoI felt like we had one already17:55
yoctozepto- name: Check if all rabbit hostnames are resolvable17:55
*** wuchunyang has quit IRC17:55
yoctozeptohah, it checks only resolvability, not its correctness lol17:55
*** gfidente has quit IRC17:56
*** wuchunyang has joined #openstack-kolla17:59
mgoddardyoctozepto: you sure?18:00
yoctozeptomgoddard: yeah, it doesn't check the sacred address -> hostname mapping18:01
yoctozeptoonly hostname -> address which is also relevant but not enough18:01
yoctozeptofor rabbitmq and other stuff in erlang18:01
*** wuchunyang has quit IRC18:04
*** wuchunyang has joined #openstack-kolla18:10
*** igordc has quit IRC18:13
*** igordc has joined #openstack-kolla18:14
yoctozeptoodd, I could not reproduce breakage with the linked paste, very weird18:14
*** wuchunyang has quit IRC18:16
yoctozeptomnasiadka: https://bugs.launchpad.net/kolla-ansible/+bug/1785569 your rmq bug - is this still relevant?18:22
openstackLaunchpad bug 1785569 in kolla-ansible "Scale out of rabbitmq is broken" [Undecided,New]18:22
mnasiadkayoctozepto: I think we stopped using clusterer long time ago, but I don’t know if that got fixed by that :)18:24
*** igordc has quit IRC18:25
yoctozeptomnasiadka: I think it deserves invalidation anyway18:25
*** rgogunskiy has joined #openstack-kolla18:28
*** rgogunskiy has quit IRC18:32
*** k_mouza has joined #openstack-kolla18:39
*** k_mouza has quit IRC18:43
*** henriqueof has joined #openstack-kolla18:50
*** murphyslawbbs has joined #openstack-kolla18:53
*** wuchunyang has joined #openstack-kolla18:56
*** wuchunyang has quit IRC19:05
mnasiadkayoctozepto: yup19:11
mnasiadkayoctozepto: seems manila works when using ceph Nautilus (when ceph client is Nautilus as well) - https://zuul.opendev.org/t/openstack/build/8609f6cf17134c34852f3cb00519aa7f/log/primary/logs/ansible/test-ceph19:13
*** wuchunyang has joined #openstack-kolla19:13
*** spsurya has quit IRC19:14
*** hjensas has joined #openstack-kolla19:16
*** wuchunyang has quit IRC19:17
yoctozeptohmm, why does not it elsewhere?19:21
openstackgerritMichal Nasiadka proposed openstack/kolla-ansible master: CI: Add Ceph-Ansible jobs  https://review.opendev.org/67637619:21
mnasiadkayoctozepto: maybe it's related to shares created before upgrade?19:22
mnasiadka189 patch sets... I hope I won't hit 200 :D19:22
yoctozeptohmm, interesting thought19:22
yoctozeptoWhy not19:23
yoctozeptoYou will bump up infra's stats19:23
*** wuchunyang has joined #openstack-kolla19:24
*** goldyfruit_ has joined #openstack-kolla19:26
*** wuchunyang has quit IRC19:29
*** wuchunyang has joined #openstack-kolla19:33
*** wuchunyang has quit IRC19:37
*** wuchunyang has joined #openstack-kolla19:39
*** wuchunyang has quit IRC19:43
*** wuchunyang has joined #openstack-kolla19:48
*** wuchunyang has quit IRC19:55
*** murphyslawbbs has quit IRC20:20
*** wuchunyang has joined #openstack-kolla20:20
*** murphyslawbbs has joined #openstack-kolla20:25
*** murphyslawbbs has quit IRC20:26
noxoidah i think i see why i got 403's after enabling enforce_scope. auth config needs system_scope:all20:27
*** wuchunyang has quit IRC20:32
*** wuchunyang has joined #openstack-kolla20:39
*** born2bake has joined #openstack-kolla20:41
*** wuchunyang has quit IRC20:44
*** wuchunyang has joined #openstack-kolla20:44
*** born2bake has quit IRC20:47
*** wuchunyang has quit IRC20:52
*** wuchunyang has joined #openstack-kolla20:56
*** wuchunyang has quit IRC21:00
*** born2bake has joined #openstack-kolla21:01
born2bakeguys when configuring external ceph... cinder_rbd_secret_uuid or rbd_secret_uuid shall be used in cinder-volumes.conf file? P.S. Ubuntu/Stein/source21:01
*** wuchunyang has joined #openstack-kolla21:24
yoctozeptocinder one21:28
*** wuchunyang has quit IRC21:38
*** pcaruana has quit IRC21:38
*** vmixor has quit IRC21:41
*** wuchunyang has joined #openstack-kolla21:44
born2bakeokay, updated my bug report. Also, due to the fact that magnum and octavia are not working for me, is there anyone who tried to deploy rancher with openstack cloud provider connected?21:48
watersjhow ans when are ovs bridges created? At container bootstrapping?21:50
*** k_mouza has joined #openstack-kolla21:50
*** wuchunyang has quit IRC21:51
*** henriqueof has quit IRC21:52
*** henriqueof has joined #openstack-kolla21:52
*** graysonh has quit IRC21:54
*** k_mouza has quit IRC21:55
*** wuchunyang has joined #openstack-kolla21:58
*** watersj has quit IRC21:59
*** wuchunyang has quit IRC22:02
*** wuchunyang has joined #openstack-kolla22:13
*** wuchunyang has quit IRC22:18
*** wuchunyang has joined #openstack-kolla22:23
*** wuchunyang has quit IRC22:25
*** wuchunyang has joined #openstack-kolla22:30
*** wuchunyang has quit IRC22:35
*** wuchunyang has joined #openstack-kolla22:36
*** wuchunyang has quit IRC22:43
openstackgerritDincer Celik proposed openstack/kolla master: WIP: Upgrade RabbitMQ to 3.8  https://review.opendev.org/69479922:49
*** wuchunyang has joined #openstack-kolla23:05
*** schwicht has quit IRC23:09
*** wuchunyang has quit IRC23:13
*** wuchunyang has joined #openstack-kolla23:17
*** wuchunyang has quit IRC23:25
*** wuchunyang has joined #openstack-kolla23:26
*** wuchunyang has quit IRC23:30
*** wuchunyang has joined #openstack-kolla23:33
*** schwicht has joined #openstack-kolla23:39
*** wuchunyang has quit IRC23:42
*** schwicht has quit IRC23:46
*** born2bake has quit IRC23:49
*** schwicht has joined #openstack-kolla23:54

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!