Thursday, 2022-01-20

opendevreviewJames Kirsch proposed openstack/kolla-ansible master: Add support for LetsEncrypt-managed certs  https://review.opendev.org/c/openstack/kolla-ansible/+/74134000:04
opendevreviewJames Kirsch proposed openstack/kolla-ansible master: Enable Keystone scope enforcement  https://review.opendev.org/c/openstack/kolla-ansible/+/82540600:37
opendevreviewMerged openstack/kolla-ansible master: Clean up chrony cleanup  https://review.opendev.org/c/openstack/kolla-ansible/+/82512803:59
opendevreviewMerged openstack/kolla-ansible stable/victoria: Add logrotate to libvirt service  https://review.opendev.org/c/openstack/kolla-ansible/+/82488403:59
opendevreviewMerged openstack/kolla-ansible stable/wallaby: Add logrotate to libvirt service  https://review.opendev.org/c/openstack/kolla-ansible/+/82488304:02
jingvarHi!06:04
jingvarI have a question about Multiple Environments06:05
jingvarwhy I can't share kolla/config between enviroments?  I've made ln -s ../../kolla/config in a env, but have path due to this access issue06:07
jingvarhow to dedublicate custom service configs between enviroments?06:07
jingvarsolved07:54
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: Add proxysql support for database  https://review.opendev.org/c/openstack/kolla-ansible/+/77021508:43
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: Edit services roles to support database sharding  https://review.opendev.org/c/openstack/kolla-ansible/+/77021608:43
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: [CI] Test ProxySQL with shards in the nova cells scenario  https://review.opendev.org/c/openstack/kolla-ansible/+/77062108:43
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: Move config.yml to config-node.yml in mariadb role  https://review.opendev.org/c/openstack/kolla-ansible/+/78356308:43
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: Add mariadb arbitrator to mariadb role  https://review.opendev.org/c/openstack/kolla-ansible/+/78081108:43
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: [CI] Test Mariadb-Arbitrator with shards in the nova cells scenario  https://review.opendev.org/c/openstack/kolla-ansible/+/78097008:43
opendevreviewMark Goddard proposed openstack/kolla-ansible master: DNM: run all jobs with keystone scope enforced  https://review.opendev.org/c/openstack/kolla-ansible/+/82544109:14
opendevreviewMark Goddard proposed openstack/kolla-ansible stable/xena: Revert "[CI] [to-revert] Avoid upgrades on CentOS Stream 8"  https://review.opendev.org/c/openstack/kolla-ansible/+/82545109:51
opendevreviewMark Goddard proposed openstack/kolla-ansible stable/wallaby: Revert "[CI] [to-revert] Avoid upgrades on CentOS Stream 8"  https://review.opendev.org/c/openstack/kolla-ansible/+/82545209:51
opendevreviewMark Goddard proposed openstack/kolla-ansible stable/victoria: Revert "[CI] [to-revert] Avoid upgrades on CentOS Stream 8"  https://review.opendev.org/c/openstack/kolla-ansible/+/82545309:52
opendevreviewMark Goddard proposed openstack/kolla stable/xena: magnum: fix issue with keystone auth default policy  https://review.opendev.org/c/openstack/kolla/+/82545409:57
opendevreviewMark Goddard proposed openstack/kolla stable/wallaby: magnum: fix issue with keystone auth default policy  https://review.opendev.org/c/openstack/kolla/+/82545509:57
opendevreviewMark Goddard proposed openstack/kolla stable/victoria: magnum: fix issue with keystone auth default policy  https://review.opendev.org/c/openstack/kolla/+/82545609:58
opendevreviewMark Goddard proposed openstack/kolla-ansible stable/xena: Continue to run all actions if one action failed in curator  https://review.opendev.org/c/openstack/kolla-ansible/+/82545709:58
opendevreviewMark Goddard proposed openstack/kolla-ansible stable/wallaby: Continue to run all actions if one action failed in curator  https://review.opendev.org/c/openstack/kolla-ansible/+/82545809:58
opendevreviewMark Goddard proposed openstack/kolla-ansible stable/victoria: Continue to run all actions if one action failed in curator  https://review.opendev.org/c/openstack/kolla-ansible/+/82545909:58
opendevreviewlikui proposed openstack/kolla-ansible stable/victoria: Use Docker healthchecks for ironic-neutron-agent services  https://review.opendev.org/c/openstack/kolla-ansible/+/82546110:06
opendevreviewlikui proposed openstack/kolla-ansible stable/wallaby: Use Docker healthchecks for ironic-neutron-agent services  https://review.opendev.org/c/openstack/kolla-ansible/+/82546210:06
opendevreviewVerification of a change to openstack/kolla-ansible stable/xena failed: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82453610:48
frickler^^ seems to be an issue with the infra c8s mirror in general, see also #opendev10:57
opendevreviewMark Goddard proposed openstack/kayobe master: libvirt: deploy libvirt on the host  https://review.opendev.org/c/openstack/kayobe/+/82535911:00
priteau_ping fix coming to stream: https://git.centos.org/rpms/systemd/c/3d3dc89fb25868e8038ecac8d5aef0603bdfaaa2?branch=c8s11:16
*** priteau_ is now known as priteau11:16
opendevreviewVerification of a change to openstack/kolla-ansible stable/wallaby failed: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82461211:20
opendevreviewVerification of a change to openstack/kolla-ansible stable/victoria failed: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82461311:36
opendevreviewMerged openstack/kolla-ansible stable/ussuri: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82461411:50
opendevreviewMerged openstack/kolla-ansible stable/train: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82461512:03
mnasiadkapriteau: if it's 239-55 - then the build is failing - so probably not so fast - https://koji.mbox.centos.org/koji/taskinfo?taskID=334274 ;-)12:22
holtgreweHello. I have trouble with the queues/rabbitmq in my kayobe/kolla installed OpenStack. For example, I see the following in my logs https://paste.openstack.org/show/812256/12:22
opendevreviewMark Goddard proposed openstack/kayobe master: libvirt: deploy libvirt on the host  https://review.opendev.org/c/openstack/kayobe/+/82535912:31
holtgreweHrm, after `rm -f`ing the rabbitmq containers, they don't come back because "Error while waiting for Mnesia tables"12:46
holtgrewehm, looking into stale volumes12:47
holtgrewemaybe that's it, clearing out12:48
hrwhttps://review.opendev.org/c/openstack/kolla/+/823398 - can some core take a look? quite trival13:25
opendevreviewRadosław Piliszek proposed openstack/kolla-ansible master: Revert "[CI] [to-revert] Avoid upgrades on CentOS Stream 8"  https://review.opendev.org/c/openstack/kolla-ansible/+/82546413:30
opendevreviewMaksim Malchuk proposed openstack/kayobe master: Skip IP address allocation and configuration if needed  https://review.opendev.org/c/openstack/kayobe/+/82112913:38
yoctozeptohrw: done13:51
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: Add mariadb arbitrator to mariadb role  https://review.opendev.org/c/openstack/kolla-ansible/+/78081114:15
opendevreviewMark Goddard proposed openstack/kayobe master: libvirt: deploy libvirt on the host  https://review.opendev.org/c/openstack/kayobe/+/82535914:33
ozzzo_workI just noticed this: RHEL 8 (deprecated) in https://docs.openstack.org/kolla-ansible/latest/user/support-matrix14:37
ozzzo_workWhat does this mean? Redhat has been telling us that Stream 8 is an acceptable substitute for RHEL 8, for Openstack testing14:39
ozzzo_workAre they lying to us?14:39
spatelozzzo_work look like CentOS Stream 8 is supported 14:39
ozzzo_workIn the past, active RHEL versions were not listed as deprecated14:40
spatelRHEL 8 required license right ? its not free14:40
ozzzo_workyes. I've been complaining to our sales rep about that; so far it looks like RH will continue to be unwilling to allow the Openstack community to test on RHEL, but they say that the community will continue using Stream to test for RHEL similar to how it used to work with Centos14:41
ozzzo_workif that's not true, that would make the situation even worse for those who run Openstack on RHEL14:42
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: Add mariadb arbitrator to mariadb role  https://review.opendev.org/c/openstack/kolla-ansible/+/78081114:46
opendevreviewRadosław Piliszek proposed openstack/kolla-ansible master: [WIP] Fix mount leak with NFS and Quobyte  https://review.opendev.org/c/openstack/kolla-ansible/+/82551414:49
ozzzo_workare there any RH employees here who can comment on the deprecation?15:03
spatelI believe its hard to run RHEL ci job if we don't have license ( so in short its kind of up to you to test it out yourself) 15:04
ozzzo_workI understand, but that has always been the case. What's new is the listing of an active RHEL OS as deprecated. Does anyone know the story behind this change?15:06
ozzzo_workIt looks like Victoria is the last release that lists RHEL 8 as supported. In Wallaby it changes to deprecated15:10
opendevreviewRadosław Piliszek proposed openstack/kolla-ansible master: [DNM] [CI] Test Zun with Ceph  https://review.opendev.org/c/openstack/kolla-ansible/+/82552015:13
yoctozeptoozzzo_work: the kolla project is not backed by RH15:15
yoctozeptothe deprecation is there because we have no means of testing it15:15
yoctozeptoit could have been long b0rken15:15
opendevreviewRadosław Piliszek proposed openstack/kolla-ansible master: [DNM] [CI] Test Zun with Ceph  https://review.opendev.org/c/openstack/kolla-ansible/+/82552015:17
opendevreviewMerged openstack/kolla-ansible stable/victoria: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82461316:11
opendevreviewMark Goddard proposed openstack/kayobe master: libvirt: deploy libvirt on the host  https://review.opendev.org/c/openstack/kayobe/+/82535916:17
ozzzo_workyoctozepto: do you know where I can find an archive of the discussion that led to this decision? I'm guessing it's based on the Centos Stream debacle but I would like to know more details16:29
ozzzo_workI know that we have never been able to test on RHEL, but my understanding of the history is that, until recently, Centos was considered an acceptable substitute for testing RHEL, and thus active RHEL versions were not listed as deprecated16:31
mgoddardozzzo_work: these decisions are always reversible, and in some ways they intended to pull interested parties out of the woodwork16:36
mgoddardozzzo_work: if your org is willing to work with upstream to verify that rhel works, and fix it when it doesn't, then we might be able to work something out16:37
mgoddardof course this would need to be on an ongoing basis16:37
mgoddardozzzo_work: one of the main things that changed is that tripleo no longer uses kolla images. previously that provided some hint that at least the images were not completely broken on rhel (although they did heavily customise kolla)16:39
mgoddardI'm not sure whether stream affects the situation. probably not really in practical terms16:40
ozzzo_workmgoddard: I'm doubtful about my ability to get my employer to do that, but it can't hurt to ask them. How would it work?16:40
mgoddardozzzo_work: well that would be up for discussion. ultimately upstream is just looking for some confidence that things aren't getting completely broken16:41
mgoddardozzzo_work: FWIW, we (stackhpc) are looking at centos stream alternatives for some clients who aren't willing to jump in the stream16:42
mgoddardozzzo_work: rhel is a possibility, but we're hoping rocky will satisfy everyone16:42
mgoddardozzzo_work: I'm really talking about the host OS here. kolla images may remain on centos stream, or move to ubi, or something else. unclear16:43
ozzzo_workmgoddard: Would we be setting up a CI-CD pipeline and running tests on Openstack/RHEL similar to what the community does for free operating systems?16:48
mgoddardozzzo_work: that would be the holy grail16:49
ozzzo_workhow can I find out more details of how to do that?16:49
mgoddardozzzo_work: https://docs.openstack.org/infra/openstackci/third_party_ci.html16:50
mgoddardunsure how up to date that is16:50
ozzzo_workexcellent; I'll read this and then talk to my supervisor 16:50
mgoddardI don't think jenkins is involved any more16:50
opendevreviewMerged openstack/kolla-ansible stable/wallaby: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82461216:51
mgoddardozzzo_work: this looks more up to date: https://docs.opendev.org/opendev/system-config/latest/third_party.html16:52
ironfootDue to self-signed certificates, I'm hitting some issues when running `TASK [service-ks-register : keystone | Creating services]` (CERTIFICATE_VERIFY_FAILED on  https://openstack.example.com:35357)17:10
ironfootI have no  ssl problems running `curl  https://openstack.example.com:35357` on the node running that task, as I added the CA, and am very confused.17:10
spatelI have question related deployment of Mellanox Infiniband (ml2/mlnx) - https://docs.openstack.org/kolla-ansible/latest/reference/networking/neutron.html#mellanox-infiniband-ml2-mlnx17:10
ironfootIs this task running from somewhere else?17:10
spatelDoes enabling mlnx will install driver etc for Mellanox?17:10
spatelwhich include eswitchd 17:11
ironfootAh, just noticed, this task indeed runs from the kolla-toolbox17:11
spateldoes kolla-ansible has support of installing subnet manager for InfiniBand ?17:23
mnasiadkakolla-ansible deploys OpenStack and it's components (in your case Mellanox Neutron drivers/agents/etc), not the Host OS required components (like OFED drivers, and other Mellanox/NVIDIA components)17:26
spateloh ok so i have to install OFED and opensm for subnet manager 17:27
mnasiadkayup17:31
spatelok cool.. i am new to infiniband stuff so just trying to understand what i need to do. 17:34
ironfootthe `curl https://` test from the kolla-toolbox container also works, I'm starting to think this is somehting else.17:49
alpha23Is the vitrage UI available outside Horizon with the kolla-ansible?  The vitrage dashboard installed under kolla-ansible breaks other dashboards, the vitrage docs suggest connection to nagios, and there is no additional documentation regarding vitrage in kolla-ansible.17:51
mnasiadkavitrage is not tested, and I don't know of anybody using it, it might need some additional love - and the project is not very active anymore17:52
mnasiadkanot tested in Kolla-Ansible17:52
opendevreviewMerged openstack/kolla master: base: do not duplicate repo data on CentOS  https://review.opendev.org/c/openstack/kolla/+/82339818:42
opendevreviewJames Kirsch proposed openstack/kolla-ansible master: Enable Keystone scope enforcement  https://review.opendev.org/c/openstack/kolla-ansible/+/82540618:58
alpha23mnasiadka: thank you19:00
opendevreviewMerged openstack/kolla-ansible stable/xena: Access to zun container fails when tls_external enabled.  https://review.opendev.org/c/openstack/kolla-ansible/+/82453619:18
opendevreviewBuddhika Sanjeewa proposed openstack/kolla-ansible master: Deploy Zun with Cinder Ceph support  https://review.opendev.org/c/openstack/kolla-ansible/+/82472219:42
opendevreviewBuddhika Sanjeewa proposed openstack/kolla-ansible master: Deploy Zun with Cinder Ceph support  https://review.opendev.org/c/openstack/kolla-ansible/+/82472219:47
opendevreviewBuddhika Sanjeewa proposed openstack/kolla-ansible master: Deploy Zun with Cinder Ceph support  https://review.opendev.org/c/openstack/kolla-ansible/+/82472219:48
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: openvswitch: add option to set hw offload  https://review.opendev.org/c/openstack/kolla-ansible/+/81925419:57
opendevreviewMichal Nasiadka proposed openstack/kayobe master: Bump up manage-lvm role version to v0.2.5  https://review.opendev.org/c/openstack/kayobe/+/82567120:20
opendevreviewMerged openstack/kolla master: Clean MariaDB/MySQL  https://review.opendev.org/c/openstack/kolla/+/81224920:51
opendevreviewMerged openstack/kolla-ansible master: [docs] swift: fix mentions of interfaces config  https://review.opendev.org/c/openstack/kolla-ansible/+/82284020:51
opendevreviewMerged openstack/kolla-ansible master: Deprecate storage_interface variable  https://review.opendev.org/c/openstack/kolla-ansible/+/82284220:51
opendevreviewMerged openstack/kolla-ansible master: Add Ansible 5 aka core 2.12 support  https://review.opendev.org/c/openstack/kolla-ansible/+/81913520:53
opendevreviewMerged openstack/kolla-ansible master: Make nova_ssh listen on api_interface as well  https://review.opendev.org/c/openstack/kolla-ansible/+/82403620:53
opendevreviewJames Kirsch proposed openstack/kolla-ansible master: Enable Keystone scope enforcement  https://review.opendev.org/c/openstack/kolla-ansible/+/82540623:04

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!