| *** born2bake has quit IRC | 00:21 | |
| *** wuchunyang has joined #openstack-kolla | 01:02 | |
| *** cah_link1 has joined #openstack-kolla | 01:07 | |
| *** cah_link has quit IRC | 01:08 | |
| *** cah_link1 is now known as cah_link | 01:08 | |
| *** wuchunyang has quit IRC | 01:11 | |
| *** wuchunyang has joined #openstack-kolla | 01:12 | |
| *** wuchunyang has quit IRC | 01:16 | |
| *** Torel has joined #openstack-kolla | 01:35 | |
| *** Torel has quit IRC | 01:42 | |
| *** Torel has joined #openstack-kolla | 02:46 | |
| *** Wuchunyang1 has joined #openstack-kolla | 02:51 | |
| *** Torel has quit IRC | 02:51 | |
| *** Wuchunyang1 has quit IRC | 02:52 | |
| *** wuchunyang has joined #openstack-kolla | 02:53 | |
| *** wuchunyang has quit IRC | 02:59 | |
| *** hongbin has joined #openstack-kolla | 03:08 | |
| *** hongbin has quit IRC | 03:28 | |
| *** vishalmanchanda has joined #openstack-kolla | 03:35 | |
| *** ykarel|away is now known as ykarel | 03:35 | |
| *** ykarel is now known as ykarel|afk | 03:54 | |
| *** evrardjp has quit IRC | 04:33 | |
| *** evrardjp has joined #openstack-kolla | 04:33 | |
| *** threestrands has joined #openstack-kolla | 04:40 | |
| *** Torel has joined #openstack-kolla | 04:58 | |
| *** skramaja has joined #openstack-kolla | 05:05 | |
| *** cah_link has quit IRC | 05:18 | |
| *** ykarel|afk is now known as ykarel | 05:25 | |
| *** cah_link has joined #openstack-kolla | 05:46 | |
| *** hjensas__ has quit IRC | 06:14 | |
| sorin-mihai_ | trying to deploy monasca i see https://pastebin.com/raw/rc7dkDFX and i noticed that the monasca-log-api keeps failing when i run kolla-build. is this some sort of bug or it just on my system? | 06:31 |
|---|---|---|
| yoctozepto | r3ap3r: yes, you could limit this to nova-compute as well | 06:50 |
| yoctozepto | sorin-mihai_: ussuri? it's gone; patch is in progress | 06:50 |
| *** ricolin_ has joined #openstack-kolla | 06:52 | |
| *** ricolin_ has quit IRC | 06:54 | |
| sorin-mihai_ | i guess if i force building the images from master tarballs it's some sort of victoria? but anyway, thanks | 06:54 |
| yoctozepto | sorin-mihai_: ah, yeah, it is victoria already, just nothing has happened in victoria obviously ;p | 06:55 |
| yoctozepto | or "not so much" | 06:55 |
| mnasiadka | morning | 07:01 |
| bjolo_ | morning | 07:02 |
| *** hjensas has joined #openstack-kolla | 07:12 | |
| *** dougsz has joined #openstack-kolla | 07:16 | |
| *** e0ne has joined #openstack-kolla | 07:21 | |
| *** amoralej|off is now known as amoralej | 07:27 | |
| openstackgerrit | Christian Berendt proposed openstack/kolla-cli master: README: add deprecation note https://review.opendev.org/730452 | 07:36 |
| *** openstackstatus has quit IRC | 07:39 | |
| *** openstackstatus has joined #openstack-kolla | 07:40 | |
| *** ChanServ sets mode: +v openstackstatus | 07:40 | |
| *** srin has joined #openstack-kolla | 07:41 | |
| *** zijlboot_ has joined #openstack-kolla | 07:43 | |
| *** vishalmanchanda has quit IRC | 07:44 | |
| *** zijlboot has quit IRC | 07:46 | |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla-cli master: README: add deprecation note https://review.opendev.org/730452 | 07:46 |
| *** rpittau|afk is now known as rpittau | 07:46 | |
| *** shyamb has joined #openstack-kolla | 07:49 | |
| *** dougsz has quit IRC | 07:55 | |
| *** JangwonLee has joined #openstack-kolla | 08:04 | |
| *** born2bake has joined #openstack-kolla | 08:05 | |
| *** shyamb has quit IRC | 08:12 | |
| *** jbadiapa has joined #openstack-kolla | 08:17 | |
| *** Tony31 has joined #openstack-kolla | 08:29 | |
| Tony31 | Hello Openstack-Kolla, how is everyone? Hope you are all keeping safe and well ? | 08:30 |
| *** sorin-mihai_ has quit IRC | 08:32 | |
| openstackgerrit | Michal Nasiadka proposed openstack/kolla-ansible master: Initial jinja2 templates syntax checks https://review.opendev.org/728894 | 08:37 |
| *** ykarel is now known as ykarel|lunch | 08:44 | |
| Tony31 | May I clarify with you with regards to flat external networks / VLAN nets? After deployment I have physnet1 and physnet2. Physnet2 is the external data network from the network nodes. How would I go about configuring a physnet3? The use case is deploying an openstack VM and giving it direct network access through the compute node. | 08:52 |
| Tony31 | Is there a guide on this topic? | 08:53 |
| *** priteau has joined #openstack-kolla | 08:54 | |
| *** k_mouza has joined #openstack-kolla | 09:02 | |
| openstackgerrit | Merged openstack/kolla master: Revert "Update OPENSTACK_RELEASE to ussuri" https://review.opendev.org/730522 | 09:04 |
| *** shyamb has joined #openstack-kolla | 09:07 | |
| openstackgerrit | Merged openstack/kolla master: Revert "Switch to Ussuri release tarballs for vmware-nsx*" https://review.opendev.org/730521 | 09:16 |
| openstackgerrit | Merged openstack/kolla master: Revert "Switch to Ussuri release of ovn-octavia-provider source tarball" https://review.opendev.org/730520 | 09:16 |
| openstackgerrit | Merged openstack/kolla master: Revert "Switch to tarballs.opendev.org for source images" https://review.opendev.org/730525 | 09:16 |
| openstackgerrit | Merged openstack/kolla master: Revert "Switch to versioned tarballs part 2" https://review.opendev.org/730526 | 09:16 |
| openstackgerrit | Merged openstack/kolla master: Revert "Switch to Ussuri release tarballs" https://review.opendev.org/730523 | 09:16 |
| *** shyam89 has joined #openstack-kolla | 09:23 | |
| *** shyamb has quit IRC | 09:26 | |
| *** gfidente|afk is now known as gfidente | 09:30 | |
| *** ykarel|lunch is now known as ykarel | 09:51 | |
| *** Tony31 has quit IRC | 09:59 | |
| *** shyam89 has quit IRC | 09:59 | |
| *** Torel has quit IRC | 09:59 | |
| *** Torel has joined #openstack-kolla | 10:00 | |
| *** shyamb has joined #openstack-kolla | 10:02 | |
| *** threestrands has quit IRC | 10:05 | |
| *** e0ne has quit IRC | 10:16 | |
| *** e0ne has joined #openstack-kolla | 10:17 | |
| *** e0ne has quit IRC | 10:18 | |
| *** rpittau is now known as rpittau|bbl | 10:20 | |
| *** e0ne has joined #openstack-kolla | 10:21 | |
| *** e0ne has quit IRC | 10:22 | |
| *** vishalmanchanda has joined #openstack-kolla | 10:23 | |
| *** e0ne has joined #openstack-kolla | 10:24 | |
| *** priteau has quit IRC | 10:35 | |
| *** Torel has quit IRC | 10:37 | |
| *** simplyolaf has joined #openstack-kolla | 10:43 | |
| simplyolaf | Good morning! I have tried to do a fresh install of Kolla, all-in-one, with the openstack-train release. I am not able to get it to work. I came across a few errors:1. Errors importing queue , when running the openstack client. queue is named with lower case in python 3. Fix was to change affected imports to import Queue. Problem solved2. After | 10:44 |
| *** Fl1nt has joined #openstack-kolla | 10:44 | |
| simplyolaf | setting everything up including the demo network, router shows interfaces for private network and for public network as downI can see errors in /var/log/kolla/neutron/neutron-l3-agent.log:2020-05-23 00:22:12.862 17 ERROR neutron.agent.l3.agent [-] Failed to process compatible router: 19b4e5ca-73f7-4c72-84be-5f4c6bc3060f: NetlinkError: (101, | 10:44 |
| Fl1nt | Hi everyone! | 10:45 |
| simplyolaf | Network is unreachable')2020-05-23 00:22:12.862 17 ERROR neutron.agent.l3.agent Traceback (most recent call last):3. On the startup of neutron-server container I saw the following error: ++ /usr/bin/update-alternatives --query iptables/usr/local/bin/kolla_extend_start: line 11: /usr/bin/update-alternatives: No such file or directory++ . | 10:45 |
| simplyolaf | simplyolaf/usr/local/bin/kolla_neutron_extend_startFor reference I setup my globals.yml in the following way:network_interface: "aggi"keepalived_virtual_router_id: “101”kolla_internal_vip_address: "10.143.3.148"kolla_external_vip_address: "10.143.3.149”neutron_external_interface: "agge"aggi is my private network interface and agge is my | 10:45 |
| simplyolaf | external | 10:45 |
| simplyolaf | please see this link for my specific problem which I am trying to solve | 10:46 |
| simplyolaf | https://ask.openstack.org/en/question/127787/ansible-kolla-unable-to-access-external-networks-gateway/ | 10:46 |
| *** shyamb has quit IRC | 10:50 | |
| Fl1nt | @simplyolaf, hey, did you installed your platform using OVS or LinuxBridge? | 10:56 |
| *** also_stingrayza has joined #openstack-kolla | 10:56 | |
| *** stingrayza has quit IRC | 10:59 | |
| simplyolaf | I left the defaults so I think it was using OVS | 11:02 |
| simplyolaf | I changed the following settings in globals.yml: | 11:02 |
| simplyolaf | network_interface: "aggi" | 11:02 |
| simplyolaf | keepalived_virtual_router_id: “101” | 11:02 |
| simplyolaf | kolla_internal_vip_address: "10.143.3.148" | 11:02 |
| simplyolaf | kolla_external_vip_address: "10.143.3.149” | 11:03 |
| simplyolaf | neutron_external_interface: "agge" | 11:03 |
| simplyolaf | kolla_install_type: "source" | 11:03 |
| Fl1nt | your nic interface is named agge??? | 11:03 |
| *** simplyolaf has quit IRC | 11:04 | |
| Fl1nt | and aggi ? which kind of nic are they? vlan? Team? bond? vnic? | 11:04 |
| *** shyamb has joined #openstack-kolla | 11:04 | |
| *** simplyolaf has joined #openstack-kolla | 11:07 | |
| simplyolaf | agge is the name of the external interface | 11:07 |
| simplyolaf | with public internet access | 11:08 |
| simplyolaf | it is called that because it is an aggregated interface with bonding | 11:08 |
| Fl1nt | is this interface handled by OVS ? Is this interface having an IP? | 11:08 |
| Fl1nt | If it have an IP, it shouldn't. | 11:09 |
| Fl1nt | when handled by OVS | 11:09 |
| Fl1nt | has the agent will actually deal it. | 11:09 |
| Fl1nt | and last thing is, how did you created the external network? using flat type or something else? | 11:09 |
| simplyolaf | after the install it doesn't have an ip. BUt I assigned an ip to br-ex so I have internet access | 11:10 |
| simplyolaf | using flat type | 11:10 |
| mnasiadka | and that Neutron log snippet isn't helping in anything | 11:10 |
| simplyolaf | that's all I can find in the logs | 11:10 |
| mnasiadka | simplyolaf: can you post some next lines of the Neutron log with error on paste.openstack.org? | 11:10 |
| simplyolaf | lok | 11:11 |
| simplyolaf | ok | 11:11 |
| Fl1nt | you don't have to assign IP to the br-ex neither | 11:11 |
| mnasiadka | it's Ubuntu, right? | 11:11 |
| simplyolaf | Centos | 11:12 |
| simplyolaf | 2020-05-23 00:21:45.816 17 INFO neutron.agent.l3.agent [-] Starting router update for 19b4e5ca-73f7-4c72-84be-5f4c6bc3060f, action 3, priority 2, update_id b45496ac-0224-4b14-be8f-444e36def40f. Wait time elapsed: 7.2072020-05-23 00:21:46.929 17 INFO neutron.agent.linux.interface [-] Device qg-c9268f44-17 already exists2020-05-23 00:21:48.173 17 | 11:12 |
| simplyolaf | ERROR neutron.agent.l3.router_info [-] (101, 'Network is unreachable'): NetlinkError: (101, 'Network is unreachable')2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info Traceback (most recent call last):2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File | 11:12 |
| simplyolaf | "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/common/utils.py", line 166, in call2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info return func(*args, **kwargs)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 1218, | 11:12 |
| simplyolaf | in process2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info self.process_external()2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 983, in process_external2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info | 11:12 |
| simplyolaf | self._process_external_gateway(ex_gw_port)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 865, in _process_external_gateway2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info self.external_gateway_added(ex_gw_port, | 11:12 |
| simplyolaf | interface_name)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 816, in external_gateway_added2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info ex_gw_port, interface_name, self.ns_name, preserve_ips)2020-05-23 00:21:48.173 17 | 11:12 |
| simplyolaf | ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/l3/router_info.py", line 793, in _external_gateway_added2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info device.route.add_gateway(ip)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File | 11:12 |
| simplyolaf | "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py", line 594, in add_gateway2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info scope=scope)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py", line 632, in | 11:12 |
| simplyolaf | add_route2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info table=table, metric=metric, scope=scope, **kwargs)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py", line 1473, in add_ip_route2020-05-23 00:21:48.173 17 ERROR | 11:12 |
| simplyolaf | neutron.agent.l3.router_info metric=metric, scope=scope, **kwargs)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/privileged/agent/linux/ip_lib.py", line 53, in sync_inner2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info return input_func(*args, | 11:12 |
| simplyolaf | **kwargs)2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/oslo_privsep/priv_context.py", line 245, in _wrap2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info return self.channel.remote_call(name, args, kwargs)2020-05-23 00:21:48.173 17 ERROR | 11:12 |
| simplyolaf | neutron.agent.l3.router_info File "/var/lib/kolla/venv/lib/python2.7/site-packages/oslo_privsep/daemon.py", line 204, in remote_call2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info raise exc_type(*result[2])2020-05-23 00:21:48.173 17 ERROR neutron.agent.l3.router_info NetlinkError: (101, 'Network is unreachable')2020-05-23 | 11:12 |
| simplyolaf | 00:21:48.173 17 ERROR neutron.agent.l3.router_info | 11:12 |
| mnasiadka | simplyolaf: paste.openstack.org - not here! | 11:12 |
| simplyolaf | right | 11:12 |
| simplyolaf | sorry | 11:12 |
| mnasiadka | don't flood the channel with your logs or configs... please. | 11:13 |
| simplyolaf | Ok still new | 11:14 |
| simplyolaf | http://paste.openstack.org/show/793983/ | 11:14 |
| Fl1nt | so you're using a linux bridge. | 11:15 |
| mnasiadka | well, something is surely wrong with your network setup, if it can't add route... | 11:15 |
| mnasiadka | Fl1nt: and from where do you reckon that? | 11:16 |
| Fl1nt | @mnasiadka, "/var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/linux/ip_lib.py" <- from there, this is not the ovs_agent that is called. | 11:16 |
| simplyolaf | but surely whatever it is trying to use, it would be limited to the options I pick in globals.yml? | 11:18 |
| Fl1nt | depends on how you setup your globals.yml but yeah, if you didn't requested to use neutron_ovs_agent and openvswitch usage you're using linux bridge. | 11:19 |
| Fl1nt | but as I always work/use OVS I can't really help in here sorry . | 11:19 |
| mnasiadka | Fl1nt: I'm sorry, but you're wrong. | 11:19 |
| simplyolaf | I want to use OVS as well | 11:21 |
| simplyolaf | which options do I pick then in globals.yml | 11:21 |
| simplyolaf | so I am sure it is using OVS | 11:21 |
| mnasiadka | simplyolaf: if you haven't enabled linuxbridge - it's openvswitch | 11:22 |
| mnasiadka | simplyolaf: just run docker ps | grep openvswitch | 11:22 |
| simplyolaf | I see three jobs running | 11:22 |
| simplyolaf | three containers | 11:23 |
| simplyolaf | neutron_openvswitch_agent | 11:23 |
| simplyolaf | openvswitch_vswitchd | 11:23 |
| simplyolaf | openvswitch_db | 11:23 |
| Fl1nt | @mnasiadka, yep, you're right sorry, mixed up things. | 11:23 |
| simplyolaf | In a similar machine I was able to do a setup of packstack RDO | 11:24 |
| simplyolaf | it worked | 11:24 |
| Fl1nt | @simplyolaf, just to be sure, what's the value of the neutron_plugin_agent variable within your globals.yml? | 11:25 |
| simplyolaf | # Valid options are [ openvswitch, linuxbridge, vmware_nsxv, vmware_nsxv3, vmware_dvs, opendaylight ]# if vmware_nsxv3 is selected, enable_openvswitch MUST be set to "no" (default is yes)#neutron_plugin_agent: "openvswitch" | 11:27 |
| Fl1nt | ok, fine | 11:27 |
| Fl1nt | and so you get a neutron network mapping configuration with agge:physnet1 right? | 11:28 |
| simplyolaf | yes | 11:30 |
| simplyolaf | http://paste.openstack.org/show/793985/ | 11:30 |
| simplyolaf | the link above shows the configuration of the public network I created | 11:31 |
| simplyolaf | using physnet1 | 11:31 |
| simplyolaf | as you can see in globals.yml agge is the network I provided for neutron | 11:32 |
| Fl1nt | hum, you didn't provided this network a range yep? | 11:32 |
| Fl1nt | how did you provided an IP to you br-ex ? | 11:32 |
| Fl1nt | -yep+yet | 11:32 |
| simplyolaf | I created a network-script | 11:33 |
| simplyolaf | let me paste it | 11:33 |
| simplyolaf | one sec | 11:33 |
| simplyolaf | http://paste.openstack.org/show/793986/ | 11:35 |
| Fl1nt | don't get why you assign an IP to the br-ex bridge. | 11:36 |
| Fl1nt | you don't need to do that. Or I missed something. | 11:37 |
| *** wuchunyang has joined #openstack-kolla | 11:40 | |
| *** wuchunya_ has joined #openstack-kolla | 11:40 | |
| Fl1nt | you'll be able to specify all of that at the network/subnet creation doing that is prohibiting you to attach any new external/provider networks to your bridge. | 11:41 |
| Fl1nt | no need to specify that your bond is OVS managed neither, are you mixing system-wide OVS installation with the OVS containers from kolla? | 11:42 |
| simplyolaf | I need to keep internet access | 11:49 |
| simplyolaf | as the agge interface is the only one with internet access | 11:49 |
| simplyolaf | so I assigned an ip address to it. I had done the same thing when I did the packstack install | 11:49 |
| simplyolaf | If that is not the right place to put the scripts, where can I put them?> | 11:49 |
| Fl1nt | basically, no need for scripts | 11:50 |
| Fl1nt | kolla/ovs is taking care of that. | 11:50 |
| Fl1nt | what I'm having a hard time to get is your internet requirement. | 11:50 |
| simplyolaf | the server itself loses connectivity to the internet | 11:51 |
| simplyolaf | after running the install | 11:51 |
| simplyolaf | i have two network interfaces but only one has internet access | 11:51 |
| Fl1nt | hold on, your node is directly connected to your internet router? | 11:51 |
| simplyolaf | I am testing an all in one install in a server with direct internet access via a gateway | 11:52 |
| simplyolaf | it is not my local computer | 11:52 |
| *** shyamb has quit IRC | 11:52 | |
| Fl1nt | in that case you'll need a bond between both nic, then create upper vnic and assign those upper vnic to external bridge. | 11:52 |
| *** e0ne has quit IRC | 11:57 | |
| *** e0ne_ has joined #openstack-kolla | 11:57 | |
| Fl1nt | @simplyolaf, did you created a subnet for this network? | 11:57 |
| simplyolaf | yes | 11:58 |
| simplyolaf | https://pasteboard.co/Ja9zcTk.png | 11:58 |
| simplyolaf | above is a screenshot of the network interface attached to the router for the external gateway | 11:58 |
| simplyolaf | This is from the ansible kolla setup | 11:58 |
| simplyolaf | I am going to also show the same thing but from the Packstack RDO which worked | 11:58 |
| Fl1nt | no I mean, the external network, does it have a subnet? | 11:58 |
| simplyolaf | it does | 11:58 |
| simplyolaf | https://pasteboard.co/Ja9zZlO.png | 11:59 |
| Fl1nt | ok, that's a subnet of only 1 fixed IP. what's the gateway IP that you assigned to this subnet? | 11:59 |
| *** wuchunya_ has quit IRC | 12:01 | |
| simplyolaf | it has 3 ips | 12:01 |
| simplyolaf | public1-subnet 142.91.120.240/28 | 12:01 |
| simplyolaf | the gw ip is set to 142.91.120.187 | 12:02 |
| simplyolaf | which is the same as for the server | 12:02 |
| Fl1nt | you can't do that | 12:02 |
| Fl1nt | your gateway have to be the br-ex addr if you assign an addr to the bridge | 12:03 |
| Fl1nt | and you can't use that IP addr and gateway IP from within the available subnet CIDR. | 12:03 |
| Fl1nt | or you gonna mess your routing. | 12:03 |
| Fl1nt | so your subnet gateway addr should be 140.91.120.100 | 12:04 |
| simplyolaf | the public network should be setup with the real external gateway right? | 12:06 |
| simplyolaf | and only the router will have a gateway setup with a diffferent ip, differnt from the real gateway | 12:07 |
| simplyolaf | ? | 12:07 |
| Fl1nt | nope, you can't, your neutron router won't be able to contact it. | 12:07 |
| Fl1nt | First thing first, do you want to create a network that will be directly used by your VMs or through a neutron router? | 12:10 |
| simplyolaf | I don't want to give direct access to the external network | 12:10 |
| simplyolaf | I want the vms to go through the router | 12:10 |
| Fl1nt | ok, and your VMs will have an IP assigned within this public range right? | 12:11 |
| simplyolaf | no just private ips. | 12:12 |
| simplyolaf | I might give them floating ip addresses | 12:12 |
| simplyolaf | but the vms will not even know it | 12:13 |
| Fl1nt | ok | 12:13 |
| Fl1nt | so | 12:13 |
| Fl1nt | your router connecting from your private network to the public network should have an IP addr and a gateway which is your network bridge address. | 12:15 |
| Fl1nt | something like 140.91.120.247 gw 140.91.120.100 | 12:15 |
| Fl1nt | because, if you don't do that, how is your router supposed to know where to send your packet? | 12:17 |
| simplyolaf | network bridge address? | 12:18 |
| *** k_mouza_ has joined #openstack-kolla | 12:19 | |
| simplyolaf | you mean the ip address assgined to br-ex | 12:20 |
| Fl1nt | yes | 12:20 |
| Fl1nt | you should have a look at neutron's router namespaces created on your host, you'll get a clearer understanding at why a router can't directly talk to your gateway. | 12:21 |
| *** rpittau|bbl is now known as rpittau | 12:22 | |
| Fl1nt | also, be aware that by default routers are doing SNAT | 12:22 |
| *** k_mouza has quit IRC | 12:22 | |
| *** ykarel is now known as ykarel|afk | 12:23 | |
| simplyolaf | I tried the exact same setup with packstack RDO, I assigned the real gateway to the public network and I was able to get it to work | 12:24 |
| Fl1nt | I don't know how is packstack doing stuff, so can't really compare sorry. | 12:24 |
| simplyolaf | I see in https://pasteboard.co/Ja9zcTk.png ovs_hybrid_plug set to true | 12:25 |
| simplyolaf | any idea what that means? | 12:25 |
| simplyolaf | when comparing it to the version of openstack that works(not kolla) | 12:26 |
| simplyolaf | https://pasteboard.co/Ja9L0Li.png | 12:26 |
| simplyolaf | differences that I notice between the two. connectivity and that attribute | 12:27 |
| *** amoralej is now known as amoralej|lunch | 12:28 | |
| Fl1nt | that it to let API services to know that OVS agent will have to create firewall bridge (linuxbridge <-> ovs) thing, hence why I asked if you installed OVS using the system packages on this machine and thought you where using a linux bridge, there is something wrong on your setup, if you're fully using kolla containerized OVS you should have such thing. | 12:31 |
| Fl1nt | shouldn't have such thing. | 12:32 |
| Fl1nt | sorry | 12:32 |
| *** wuchunyang has quit IRC | 12:32 | |
| Fl1nt | can you compare both network type on packstack and your kolla installationt too ? | 12:33 |
| *** wuchunyang has joined #openstack-kolla | 12:33 | |
| Fl1nt | your kolla is a provider network, how is your packstack network? | 12:33 |
| simplyolaf | http://paste.openstack.org/show/793991/ | 12:36 |
| simplyolaf | I think this will give you an answer of my setup for packstack | 12:36 |
| *** wuchunyang has quit IRC | 12:37 | |
| simplyolaf | In Kolla, I set enable_neutron_provider_networks: "yes" | 12:38 |
| Fl1nt | nope, that doesn't answer my question as I don't know if your network is set as a provider network within your packstack installation. | 12:38 |
| simplyolaf | Sorry I think my knowledge is a bit limited | 12:39 |
| Fl1nt | Don't worry | 12:39 |
| simplyolaf | I can see in my kolla globals.yml #neutron_plugin_agent: "openvswitch" | 12:39 |
| simplyolaf | so it should still be using that as the default | 12:39 |
| Fl1nt | hold on, one thing after the other. | 12:40 |
| simplyolaf | ok | 12:40 |
| Fl1nt | first, goes within your packstack network named external_network and retrieve the informations to know which type of network it is. | 12:41 |
| *** cah_link has quit IRC | 12:41 | |
| simplyolaf | https://pasteboard.co/Ja9Rc3v.png | 12:41 |
| Fl1nt | ok, that's what I thought, your packstack is declaring your network as an external network but not a provider network. | 12:44 |
| simplyolaf | ok | 12:44 |
| Fl1nt | where your kolla is declaring it as a provider network | 12:44 |
| simplyolaf | let me double check | 12:44 |
| Fl1nt | sure | 12:44 |
| *** dave-mccowan has joined #openstack-kolla | 12:45 | |
| simplyolaf | https://pasteboard.co/Ja9SJTF.png | 12:45 |
| simplyolaf | that's for kolla | 12:45 |
| Fl1nt | hum, could you get the info from the cli? | 12:46 |
| simplyolaf | what's the command | 12:46 |
| *** rgogunskiy has joined #openstack-kolla | 12:48 | |
| simplyolaf | http://paste.openstack.org/show/793992/ | 12:50 |
| simplyolaf | I got I think | 12:50 |
| *** ricolin has quit IRC | 12:51 | |
| Fl1nt | ok,and now do the same with packstack | 12:52 |
| simplyolaf | packstack: http://paste.openstack.org/show/793994/ | 12:52 |
| Fl1nt | hum... I'm out of ideas | 12:53 |
| Fl1nt | is packstack using the same br-ex with an assigned IP ? | 12:54 |
| simplyolaf | I setup the same thing I did for kolla | 12:54 |
| simplyolaf | I assigned an ip address | 12:54 |
| simplyolaf | I am using train release of kolla | 12:54 |
| simplyolaf | and packstack is using stein release | 12:54 |
| *** ricolin has joined #openstack-kolla | 12:55 | |
| *** ricolin_ has joined #openstack-kolla | 12:55 | |
| simplyolaf | I can alwasy try another release and hope I am lucky? | 12:55 |
| *** ricolin_ has quit IRC | 12:55 | |
| Fl1nt | I don't think it's coming from the release | 12:55 |
| Fl1nt | I'm using rocky and train, both are using external without any issue. | 12:56 |
| openstackgerrit | Piotr Kopec proposed openstack/kolla stable/train: nova-compute: add ndctl to expose NVDIMMs to guests https://review.opendev.org/730787 | 12:56 |
| Fl1nt | the main difference is my bridge don't get an IP assigned | 12:56 |
| simplyolaf | I see | 12:56 |
| simplyolaf | I did a previous setup without messing around with the bridge | 12:57 |
| simplyolaf | and it was the same result | 12:57 |
| Fl1nt | on a side note, my bridges are also fully managed by kolla, and don't get anything prepared in advance. | 12:58 |
| simplyolaf | a major difference for packstack. It is using the same interface for all | 12:59 |
| Fl1nt | what do you mean? | 12:59 |
| simplyolaf | it is not using the internal interface aggi | 12:59 |
| simplyolaf | maybe i can just give it agge for network_interface and neutron_network_interface? | 12:59 |
| Fl1nt | that should make difference as you get br-tun connecting everything in between. | 13:00 |
| simplyolaf | You mean make no difference? | 13:00 |
| Fl1nt | if you set network_interface = agge no need to specify neutron_* as it will fallback to network_interface if not set. | 13:00 |
| *** ykarel|afk is now known as ykarel | 13:01 | |
| simplyolaf | ok | 13:01 |
| simplyolaf | I will try the setup that way | 13:01 |
| Fl1nt | I mean if you use aggi for br-tun and agge for br-ex you should have a br-int bridge that get a patch interface on each of them connecting them. | 13:01 |
| simplyolaf | and see what I get | 13:01 |
| Fl1nt | also | 13:02 |
| Fl1nt | disable neutron_enable_provider_network if you're not doing DVR | 13:02 |
| simplyolaf | DVR? | 13:02 |
| Fl1nt | Distributed routing | 13:03 |
| Fl1nt | but as you're using an all-in-one installation, don't mind about that now | 13:04 |
| simplyolaf | ok | 13:04 |
| Fl1nt | it's a way to get vm-to-vm traffic to be direct and not going back and forth using the network node. | 13:04 |
| *** wuchunyang has joined #openstack-kolla | 13:06 | |
| simplyolaf | ok | 13:15 |
| openstackgerrit | Will Szumski proposed openstack/kayobe master: Add ability to run playbooks before and after a kayobe command https://review.opendev.org/724818 | 13:16 |
| *** amoralej|lunch is now known as amoralej | 13:18 | |
| *** ykarel is now known as ykarel|afk | 13:24 | |
| *** JamesBenson has joined #openstack-kolla | 13:42 | |
| openstackgerrit | Pierre Riteau proposed openstack/kolla stable/train: Fix release note formatting by removing extra backtick https://review.opendev.org/730821 | 13:45 |
| *** jcmdln has quit IRC | 13:47 | |
| *** yoctozepto8 has joined #openstack-kolla | 14:00 | |
| *** yoctozepto has quit IRC | 14:01 | |
| *** yoctozepto8 is now known as yoctozepto | 14:01 | |
| *** TrevorV has joined #openstack-kolla | 14:08 | |
| *** rpittau is now known as rpittau|brb | 14:10 | |
| *** srin has quit IRC | 14:17 | |
| openstackgerrit | Merged openstack/kolla stable/train: Fix release note formatting by removing extra backtick https://review.opendev.org/730821 | 14:17 |
| *** amoralej is now known as amoralej|brb | 14:17 | |
| *** ykarel|afk is now known as ykarel | 14:21 | |
| *** jcmdln has joined #openstack-kolla | 14:30 | |
| *** rpittau|brb is now known as rpittau | 14:39 | |
| *** amoralej|brb is now known as amoralej | 14:50 | |
| r3ap3r | yoctozepto: thanks for the reply, sorry, it has been a crazy morning. That nova.conf didn't appear to be there? All I could find yesterday was the nova.conf.j2 file which seemed to be similar however it didn't have the `cpu_mode` option from what I can remember? I'll try taking another peek this afternoon, thanks. | 14:51 |
| *** stingrayza has joined #openstack-kolla | 14:52 | |
| *** also_stingrayza has quit IRC | 14:55 | |
| *** cah_link has joined #openstack-kolla | 14:56 | |
| *** jcmdln has quit IRC | 14:59 | |
| openstackgerrit | Sebastian Luna-Valero proposed openstack/kayobe master: Fix encoding of subprocess output https://review.opendev.org/730842 | 15:00 |
| *** seco has joined #openstack-kolla | 15:01 | |
| *** jcmdln has joined #openstack-kolla | 15:04 | |
| *** seco has quit IRC | 15:11 | |
| *** ysirndjuro has quit IRC | 15:17 | |
| *** e0ne_ has quit IRC | 15:17 | |
| *** ysirndjuro has joined #openstack-kolla | 15:18 | |
| *** e0ne has joined #openstack-kolla | 15:21 | |
| openstackgerrit | Michal Nasiadka proposed openstack/kayobe master: WIP: Test vault functionality in kayobe on CI runs https://review.opendev.org/730855 | 15:29 |
| *** priteau has joined #openstack-kolla | 15:34 | |
| *** skramaja has quit IRC | 15:35 | |
| openstackgerrit | Merged openstack/kolla-cli master: README: add deprecation note https://review.opendev.org/730452 | 15:39 |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla-cli stable/ussuri: README: add deprecation note https://review.opendev.org/730858 | 15:40 |
| priteau | I see in Train release notes: urls should be constructed using the {{ internal_protocol }} and {{ external_protocol }} configuration parameters | 15:40 |
| priteau | Yet, there is only two occurrences of external_protocol: this release note and a comment | 15:41 |
| yoctozepto | priteau: sounds like an oopsie :D | 15:41 |
| priteau | Should we s/external_protocol/public_protocol | 15:42 |
| yoctozepto | priteau: yes | 15:42 |
| priteau | ping headphoneJames | 15:42 |
| yoctozepto | well, this sounds like a note to contributors | 15:43 |
| priteau | Not necessarily. A deployer can customise endpoint URLs via globals.yml (I do) | 15:45 |
| yoctozepto | priteau: ah, but you are an advanced user :-) | 15:48 |
| yoctozepto | let's say powerusers :D | 15:48 |
| *** rpittau is now known as rpittau|afk | 15:51 | |
| *** ykarel is now known as ykarel|away | 15:51 | |
| yoctozepto | r3ap3r: sorry, I am not sure I'm getting what you mean there - you are able to override just any setting available in nova, it does not have to be in the kolla templates to be usable | 15:53 |
| *** e0ne has quit IRC | 15:55 | |
| openstackgerrit | Michal Nasiadka proposed openstack/kayobe master: WIP: Test vault functionality in kayobe on CI runs https://review.opendev.org/730855 | 16:01 |
| headphoneJames | priteau: good catch | 16:03 |
| priteau | I am preparing a patch | 16:04 |
| headphoneJames | thanks | 16:04 |
| *** e0ne has joined #openstack-kolla | 16:04 | |
| openstackgerrit | Merged openstack/kolla-cli stable/ussuri: README: add deprecation note https://review.opendev.org/730858 | 16:04 |
| openstackgerrit | Merged openstack/kolla master: README: mark kolla-cli as deprecated & add kayobe https://review.opendev.org/730451 | 16:10 |
| *** EmilienM is now known as EmilienM|lunch | 16:20 | |
| *** EmilienM|lunch is now known as EmilienM | 16:20 | |
| openstackgerrit | Michal Nasiadka proposed openstack/kayobe master: WIP: Test vault functionality in kayobe on CI runs https://review.opendev.org/730855 | 16:24 |
| openstackgerrit | Michal Nasiadka proposed openstack/kolla-ansible master: CI: Initial jinja2 templates syntax checks https://review.opendev.org/728894 | 16:26 |
| *** seco has joined #openstack-kolla | 16:29 | |
| *** e0ne has quit IRC | 16:33 | |
| *** seco has quit IRC | 16:42 | |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla stable/ussuri: README: mark kolla-cli as deprecated & add kayobe https://review.opendev.org/730882 | 16:48 |
| *** mnasiadka has quit IRC | 16:49 | |
| *** vishalmanchanda has quit IRC | 16:54 | |
| *** mnasiadka has joined #openstack-kolla | 16:58 | |
| *** dking has joined #openstack-kolla | 17:03 | |
| *** k_mouza_ has quit IRC | 17:04 | |
| *** mnasiadka has quit IRC | 17:07 | |
| openstackgerrit | Radosław Piliszek proposed openstack/kolla stable/ussuri: [DNM] Delorean no more https://review.opendev.org/730923 | 17:17 |
| *** ricolin has quit IRC | 17:21 | |
| *** mnasiadka has joined #openstack-kolla | 17:21 | |
| *** vishalmanchanda has joined #openstack-kolla | 17:22 | |
| *** gfidente has quit IRC | 17:30 | |
| *** vishalmanchanda has quit IRC | 17:33 | |
| *** simplyolaf has quit IRC | 17:34 | |
| *** seco has joined #openstack-kolla | 17:34 | |
| *** born2bake has quit IRC | 17:35 | |
| *** KeithMnemonic has joined #openstack-kolla | 17:42 | |
| *** seco has quit IRC | 17:45 | |
| *** dave-mccowan has quit IRC | 18:06 | |
| *** dave-mccowan has joined #openstack-kolla | 18:08 | |
| *** dcapone2004 has joined #openstack-kolla | 18:24 | |
| dcapone2004 | I have q question about external ceph with kolla-ansible and keyring authentication | 18:25 |
| dcapone2004 | the kolla-ansible documentation references a ceph document for "more information on creating keyrings" for ceph...then proceeds to indicate where the keyring files need to be copied | 18:26 |
| *** irclogbot_0 has quit IRC | 18:26 | |
| dcapone2004 | however, there is a inconsistency with the kolla docs and the ceph docs as the ceph docs basically have you create a cinder keyring which appears to have permissions for BOTH vms | 18:27 |
| dcapone2004 | AND volumes ceph pool (obviously you can name them differently)….but the kolla docs seems to look for a separate nova user / keyring and indicates to copy both the cinder user keyring and the nova user keyring into the nova config override directory | 18:28 |
| dcapone2004 | I was wondering if there was a specific best practice on this or if just user a cinder user and keyring as specified in the ceph docs is ok? | 18:28 |
| *** irclogbot_1 has joined #openstack-kolla | 18:29 | |
| *** bsanjeewa_ has joined #openstack-kolla | 18:48 | |
| *** bsanjeewa_ has left #openstack-kolla | 18:49 | |
| *** bsanjeewa_ has joined #openstack-kolla | 18:49 | |
| *** amoralej is now known as amoralej|off | 19:13 | |
| *** e0ne has joined #openstack-kolla | 19:24 | |
| kplant | i segment it | 19:27 |
| kplant | one user per service | 19:27 |
| dcapone2004 | just ran a deploy and kolla actually complains about there being no nova keyring file....don't know if that should be considered a bug or not | 19:31 |
| dcapone2004 | since the user specified in noa-compute.conf was cinder in the /etc/kolla/config/nova directory | 19:31 |
| dcapone2004 | so I was forced to change it anyway | 19:31 |
| *** bsanjeewa_ has quit IRC | 19:41 | |
| dcapone2004 | kplant: what are the correct permissions for each service since the ceph docs the kolla docs point to combine the users? | 19:48 |
| kplant | https://pastebin.com/9N51yZ2d | 19:51 |
| kplant | that's what i use | 19:51 |
| dcapone2004 | awesome thanks | 19:51 |
| dcapone2004 | only different I have is the read only on the glance pool per the ceph docs | 19:52 |
| dcapone2004 | only one I wasn't sure on was whether the nova user needed access to volumes or just vms | 19:53 |
| r3ap3r | yoctozepto: Oh, sorry for the misunderstanding. What I meant was that the /etc/kolla/config/nova.conf does not exist so do I need to create it and add only the `cpu_mode=host-passthrough`line to that file or am I going in the wrong direction with that train of thought? | 19:56 |
| r3ap3r | yoctozepto: Oh, wait, I think I found what I'm looking for in the `OpenStack Service Configuration in Kolla` section of https://docs.openstack.org/kolla-ansible/train/admin/advanced-configuration.html | 20:05 |
| *** jbadiapa has quit IRC | 20:21 | |
| *** irclogbot_1 has quit IRC | 20:22 | |
| *** irclogbot_3 has joined #openstack-kolla | 20:24 | |
| *** Limech has joined #openstack-kolla | 20:26 | |
| *** jonaspaulo has joined #openstack-kolla | 20:29 | |
| *** seco has joined #openstack-kolla | 20:33 | |
| *** e0ne has quit IRC | 20:33 | |
| *** priteau has quit IRC | 20:36 | |
| *** seco has quit IRC | 20:38 | |
| *** TrevorV has quit IRC | 20:47 | |
| *** factor has joined #openstack-kolla | 21:06 | |
| *** wuchunyang has quit IRC | 21:20 | |
| *** Torel has joined #openstack-kolla | 21:34 | |
| *** Fl1nt has quit IRC | 21:35 | |
| *** born2bake has joined #openstack-kolla | 21:57 | |
| *** cah_link has quit IRC | 22:05 | |
| *** jonaspaulo has quit IRC | 22:31 | |
| *** born2bake has quit IRC | 23:04 | |
| *** threestrands has joined #openstack-kolla | 23:17 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!
