| hamidlotfi_ | Hi there, | 07:12 |
|---|---|---|
| hamidlotfi_ | I set up skydive with Kolla deployment, but every user I checked to log in showed me login failed, please help for find a username and password to log in to the analyzer. | 07:12 |
| hamidlotfi_ | https://www.irccloud.com/pastebin/ldysIvY2/ | 07:12 |
| hamidlotfi_ | That is the skydive.conf content. | 07:12 |
| hamidlotfi_ | Please help me. | 07:12 |
| opendevreview | Ivan Halomi proposed openstack/kolla-ansible master: Refactor of getting list of containers that will also prepare function for migration scenario https://review.opendev.org/c/openstack/kolla-ansible/+/905837 | 08:03 |
| opendevreview | Verification of a change to openstack/kolla-ansible stable/yoga failed: Correct glance.conf example in external Ceph guide https://review.opendev.org/c/openstack/kolla-ansible/+/906902 | 08:53 |
| frickler | bbezak: kolla cores: please stop merging things to stable/yoga. cf. https://review.opendev.org/c/openstack/releases/+/906573 and https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/message/V7H6M5ANYOMFWSZ5BJSWAXVNQCUXI6D7/ . you can merge all you want into unmaintained/yoga once that is created | 08:55 |
| bbezak | sure frickler. let's do that | 08:57 |
| bbezak | (got wrong impression to merge/abandon everything before creating unmaintained/yoga) | 08:57 |
| bbezak | apparently | 08:57 |
| opendevreview | Merged openstack/kolla-ansible stable/zed: Correct glance.conf example in external Ceph guide https://review.opendev.org/c/openstack/kolla-ansible/+/906901 | 08:58 |
| opendevreview | Merged openstack/kolla-ansible stable/2023.1: Correct glance.conf example in external Ceph guide https://review.opendev.org/c/openstack/kolla-ansible/+/906880 | 08:58 |
| frickler | bbezak: abandon is good, merge would need yet another update of the release patch | 08:58 |
| bbezak | yeah | 08:59 |
| hamidlotfi_ | There is no one here to answer other people's questions? | 09:04 |
| kevko | frickler: ok | 09:05 |
| kevko | frickler, bbezak: what about my designate and horizon patches - master ... I think it's ready with all docs and renos and everything :P | 09:06 |
| kevko | hamidlotfi_: sorry but I really don't have any experiences with skydive | 09:06 |
| frickler | kevko: yeah, need to get back to those, will try to do that today or tomorrow at least | 09:08 |
| kevko | frickler: thank you | 09:08 |
| bbezak | yeah, will take a look. btw friday I got deeper into ironic failures in CI, it is caused because of that - https://review.opendev.org/c/openstack/ironic/+/902009. it looks we should use system scoped member (or new service role) for nova-compute-ironic service to be able to reach all ironic nodes. I'll propose sth this week - | 09:12 |
| bbezak | https://specs.openstack.org/openstack/ironic-specs/specs/17.0/secure-rbac.html#system-scope | 09:12 |
| bbezak | for now we could do that - https://review.opendev.org/c/openstack/kolla-ansible/+/906858. however I don't think is a good way forward, as it impacts only master | 09:14 |
| kevko | vote for first option | 09:16 |
| frickler | wasn't that whole system-scope thing reverted? at least that's what I saw in devstack and tempest | 09:20 |
| hamidlotfi_ | kevko: Thank you for your answer. | 09:24 |
| hamidlotfi_ | I am happy that someone is responsible. | 09:25 |
| kevko | hamidlotfi_: but what is your exact issue ? | 09:25 |
| kevko | hamidlotfi_: you are asking help to find out username and pass to analyzer ..but you pasted config where is block analyzed and user/password is present there | 09:26 |
| kevko | bbezak: what about you .. do you have a time for https://review.opendev.org/q/topic:%22kolla-neutron-dns-integration%22 and https://review.opendev.org/q/topic:%22kolla-horizon-fix%22 | 09:28 |
| bbezak | frickler I didn't find information that it was reverted for ironic service. I'll dig into that. | 09:33 |
| bbezak | I'll try to find time for it kevko | 09:38 |
| kevko | bbezak: thanks, it's quite short patch (except that one with tests ...) | 09:38 |
| kevko | bbezak: but that tests are just copy from neutron docs | 09:39 |
| kevko | all cases | 09:39 |
| opendevreview | Will Szumski proposed openstack/kolla master: Support CAP_DAC_READ_SEARCH capability https://review.opendev.org/c/openstack/kolla/+/905579 | 10:13 |
| opendevreview | Verification of a change to openstack/kayobe stable/yoga failed: Switch IPA builds to CentOS Stream 9 for yoga https://review.opendev.org/c/openstack/kayobe/+/903242 | 10:16 |
| SvenKieske | bbezak: we already wrote it down somewhere to use system-scope for everythink IIRC? but we never really did it. | 10:31 |
| SvenKieske | bbezak: frickler: there's even an older patch for that: https://review.opendev.org/c/openstack/kolla-ansible/+/815577 | 10:35 |
| frickler | SvenKieske: ah, yes, but that is for using the service role. system-scope is indeed only being used by ironic anymore for weird reasons | 10:48 |
| bbezak | nice find SvenKieske. Indeed, ironic would need service role but system scoped | 10:53 |
| SvenKieske | funnily I'm just in a customer call who has a keystone warning in glance-api which led me to this abandoned change: https://review.opendev.org/c/openstack/kolla-ansible/+/449889 | 10:56 |
| kevko | guys, do you know if one cinder-backup can handle several AZs ? | 11:12 |
| SvenKieske | kevko: about which metric are you asking? is this a functional or a performance or a security question? | 11:48 |
| kevko | functional | 11:49 |
| SvenKieske | kevko: redhat seems to say it's possible, but backups are stored in the central AZ from cinder-backup: https://access.redhat.com/documentation/de-de/red_hat_openstack_platform/16.1/html/block_storage_backup_guide/using-cinder-backup#proc_backup-and-restore-across-edge-sites_using-backup-service | 11:50 |
| kevko | SvenKieske: because, for example for cinder-volume you just specify enabled_backends = az1,az2,az3 and then you define block of config for each az, where you can specify different ceph clusters and each block has option backend_availability_zone = az* | 11:50 |
| SvenKieske | I myself have not much done with cinder backup tbf. | 11:51 |
| kevko | problem is that cinder_backup as a service has configuration in [DEFAULT] | 11:51 |
| kevko | and it seems that if you want to have cinder-backup for az1 (as example) ..you need to put it on controller0, az2 controler1, az3 controller2 ...and when you want to have HA ..you have problem | 11:52 |
| kevko | while in cinder-volume you can specify cinder-volume-service -> handle -> { az1-rbd, az2-rbd, az3-rbd } and you can copy this configuration for 3 controllers | 11:53 |
| kevko | it seems cinder-backup can't handle 3 backends per one service ..just one backend per one service | 11:54 |
| SvenKieske | cinder active active HA is still not implemented in kolla last time I looked | 11:57 |
| SvenKieske | triple-o has it, with pacemaker | 11:57 |
| kevko | SvenKieske: it's implemented ..you need just use config override :) | 12:16 |
| kevko | SvenKieske: it's not working out of the box ..but you just add config-override for cluster = ceph | 12:16 |
| kevko | then your cinder-volumes are clustered | 12:16 |
| kevko | redis is implemented for a long time | 12:17 |
| kevko | SvenKieske: https://review.opendev.org/c/openstack/kolla-ansible/+/763011 << this patch just adding one line ... i don't know why we didn't merged ..but we using config-override in /etc/kolla/config/host/cinder.conf with [default] cluster=ceph | 12:18 |
| kevko | probably because you need to migrate volumes to use new approach :) | 12:19 |
| kevko | and we are - as koalas afraid that users don't read upgrade notes .. :D | 12:19 |
| SvenKieske | well it's a catch 22: devs don't write upgrade notes because nobody reads them and nobody reads them because they are incomplete/lacking/empty.. | 12:27 |
| SvenKieske | we have to start somewhere :) | 12:27 |
| kevko | SvenKieske: i am totally ok to do it via config override :D | 12:29 |
| SvenKieske | I'm totally ok with any approach that works out of the box without manual intervention :) | 12:31 |
| SvenKieske | "Multinode Kolla Ansible deployments provide HA and scalability for services." https://docs.openstack.org/kolla-ansible/latest/admin/production-architecture-guide.html#openstack-services | 12:32 |
| SvenKieske | this is wrong for some core openstack services, currently. :( | 12:32 |
| SvenKieske | I guess this was written, thinking "well we have haproxy in front of everything, so everything is HA now" which is just wrong. | 12:33 |
| opendevreview | Bartosz Bezak proposed openstack/kolla-ansible master: [DNM] disable enforce scope ironic https://review.opendev.org/c/openstack/kolla-ansible/+/906858 | 12:34 |
| kevko | what is not clustered ? | 12:35 |
| kevko | ha ? | 12:35 |
| SvenKieske | we have no cinder active-active by default, no? | 12:36 |
| kevko | true | 12:36 |
| SvenKieske | depending on your setup your networking might also be not as HA as you like :) | 12:36 |
| kevko | SvenKieske: well, for cinder there is only need to provide migrate path by some ansible script ... | 12:38 |
| kevko | SvenKieske: or just mention it in some upgrade reno | 12:38 |
| kevko | SvenKieske: add prechecks for control ..and that's it | 12:38 |
| opendevreview | Pedro Henrique Pereira Martins proposed openstack/kolla-ansible master: Fix the docker container dimensions comparison for short notation https://review.opendev.org/c/openstack/kolla-ansible/+/886500 | 13:11 |
| opendevreview | Rafael Weingartner proposed openstack/kolla-ansible master: Customize the authentication error timeout page in modOIDC https://review.opendev.org/c/openstack/kolla-ansible/+/832806 | 13:28 |
| opendevreview | Rafael Weingartner proposed openstack/kolla-ansible master: Customize the authentication error timeout page in modOIDC https://review.opendev.org/c/openstack/kolla-ansible/+/832806 | 13:41 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2023.2: Pin Docker Engine package to latest 24.x release https://review.opendev.org/c/openstack/kayobe/+/907064 | 14:12 |
| kevko | SvenKieske: haha, what browsert do you have ? :D | 14:26 |
| kevko | SvenKieske: hmm, you are right ...i checkd only --tags in a code block ..second one is with single -- ...will fix | 14:28 |
| SvenKieske | kevko: Firefox :D I originally just wanted to check if the table is rendered correctly. this might also be dependent on the used font, I guess. I'm no frontend person :) | 14:32 |
| opendevreview | Bartosz Bezak proposed openstack/kolla-ansible master: [DNM] disable enforce scope ironic https://review.opendev.org/c/openstack/kolla-ansible/+/906858 | 14:47 |
| opendevreview | Alex Welsh proposed openstack/kolla-ansible master: Update keystone service user passwords https://review.opendev.org/c/openstack/kolla-ansible/+/903178 | 15:05 |
| opendevreview | Alex Welsh proposed openstack/kolla-ansible master: Add OpenSearch upgrade flush timeout var https://review.opendev.org/c/openstack/kolla-ansible/+/906119 | 15:17 |
| atmark | hello, when building container image from source, is it necessary to specify in kolla-build.conf where to get source https://docs.openstack.org/kolla/xena/admin/image-building.html#build-openstack-from-source ? | 15:22 |
| atmark | i tried without specifying and i was able to successfuly build an image | 15:23 |
| atmark | is the default getting the source from master branch or it's based on version of kolla python package ( in my case it's 13.10.x ) | 15:25 |
| frickler | atmark: the default depends on the kolla version. running "tox -e genconfig" generates a template file that shows all the defaults. also note that kolla 13.x/xena is EOL and yoga will soon be, too | 15:32 |
| kevko | +1 | 15:39 |
| kevko | frickler: btw, i had some discussion with SvenKieske , what do you think about install oslos and other *openstack* libraries from tarballs, or gits as services are .. | 15:40 |
| kevko | frickler: depends on some option as --source git or similar | 15:40 |
| atmark | frickler: Just confirmed, I ran an nova-base, checked /nova-.x.x.x and version is based on kolla version. I'll try the tox again cuz last time it only generated 4 lines in the config. Yeah, trying to bring the env Xed in next 2 months | 15:40 |
| frickler | kevko: we should not do that by default, but as an option it might be fine. it does allow ppl to deviate from upper-constraints though, so I fear it may generate a lot of support issues if we make that too easy to apply | 15:46 |
| kevko | frickler: well, my point is ..that there are several bugfixes in stable branches ... but released from time to time ... | 15:47 |
| kevko | for projects | 15:47 |
| kevko | and libs | 15:47 |
| kevko | and we do this for services .. | 15:47 |
| frickler | kevko: yes, I understand the use case, but I still consider it risky. also with my TC hat on I'd rather focus on helping library projects make timely stable backports and releases if needed | 15:53 |
| SvenKieske | frickler: yes, that's true, and also a potential issue (the misuse aspect). I still think it would be good to have in general. maybe document it with a "here be dragons" danger sign? :D | 16:08 |
| atmark | I cloned kolla@stable/yoga , `ran tox -e genconfig` and it generated etc/kolla/kolla-build.conf which only contains [DEFAULT] | 16:08 |
| atmark | https://paste.openstack.org/show/b6WlbvqeJjQmIV3DIYDe/ | 16:12 |
| frickler | atmark: seems there is something wrong with your setup, it does work fine for me. "WARNING:stevedore.named:Could not load kolla" is an error in this context | 16:14 |
| frickler | is your /tmp mounted with noexec maybe? | 16:14 |
| opendevreview | Rafael Weingartner proposed openstack/kolla-ansible master: Customize the authentication error timeout page in modOIDC https://review.opendev.org/c/openstack/kolla-ansible/+/832806 | 16:18 |
| atmark | frickler: nope. I tried moving it to /root/kolla/, same issue | 16:20 |
| atmark | thought that warning is unrelated | 16:22 |
| atmark | i'll look it up | 16:23 |
| atmark | what version is your stevedore? | 16:24 |
| frickler | stevedore==3.5.2 that should all be pinned by yoga upper-constraints.txt | 16:29 |
| frickler | except ... which version of tox do you use? 3.21.4 here | 16:30 |
| atmark | tox==4.12.1 | 16:32 |
| frickler | atmark: ack, can reproduce this, genconfig is broken with tox 4, even on master. do you want to create a bugreport yourself? then we could track fixing this | 16:34 |
| kevko | atmark: yeah, it's broken | 16:42 |
| kevko | hmm | 16:43 |
| atmark | 3.21.4 works | 16:44 |
| atmark | i'll create a bug report | 16:44 |
| kevko | frickler: regarding libs git ...well, you probably agree with me that there are several customers/teams/companies using older version of openstack ..and release team will just not release new version for lib ..nor service ... then you are in situation that you can't fix your deployment | 16:46 |
| kevko | frickler: it can be super helpful to fix something in your downstream git and just refer in kolla | 16:46 |
| frickler | atmark: thx | 16:46 |
| frickler | kevko: oh, so you are talking about EOL releases? I won't care about a patch that gets added to every unmaintained branch, if you want that | 16:47 |
| kevko | frickler: no, i am talking about that option which should be possible I think | 16:48 |
| kevko | frickler: i will propose something in future when i will have some time :D | 16:50 |
| atmark | frickler: https://bugs.launchpad.net/kolla/+bug/2051575 | 17:02 |
| atmark | Thanks for looking into it | 17:02 |
| opendevreview | Dawud proposed openstack/kayobe master: Fix wipe-disks role to work on newer distros https://review.opendev.org/c/openstack/kayobe/+/907105 | 17:35 |
| opendevreview | Matt Crees proposed openstack/ansible-collection-kolla master: Fix: include missing docker log-opts in config https://review.opendev.org/c/openstack/ansible-collection-kolla/+/907107 | 17:49 |
| opendevreview | Rafael Weingartner proposed openstack/kolla-ansible master: Customize the authentication error timeout page in modOIDC https://review.opendev.org/c/openstack/kolla-ansible/+/832806 | 19:23 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2023.2: Handle removal of Docker devicemapper storage driver https://review.opendev.org/c/openstack/kayobe/+/907064 | 21:34 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!