| opendevreview | Ivan Vnučko proposed openstack/kolla-ansible master: Add backend TLS encryption for Masakari https://review.opendev.org/c/openstack/kolla-ansible/+/927228 | 05:22 |
|---|---|---|
| opendevreview | Ivan Vnučko proposed openstack/kolla-ansible master: Add backend TLS encryption for Gnocchi https://review.opendev.org/c/openstack/kolla-ansible/+/927229 | 05:23 |
| opendevreview | Ivan Vnučko proposed openstack/kolla-ansible master: Add backend TLS encryption for CloudKitty https://review.opendev.org/c/openstack/kolla-ansible/+/927230 | 05:23 |
| opendevreview | Roman Krček proposed openstack/kolla master: Refactor dev mode https://review.opendev.org/c/openstack/kolla/+/925712 | 05:39 |
| opendevreview | Roman Krček proposed openstack/kolla-ansible master: Refactor dev mode https://review.opendev.org/c/openstack/kolla-ansible/+/925714 | 05:57 |
| stan | are we planning to replace redis with valkey any time soon? | 06:47 |
| SvenKieske | stan: there was some discussion but I guess so far no one had the time to do so. feel free to raise a patch | 07:14 |
| opendevreview | Matt Crees proposed openstack/kolla stable/2024.1: Add support for checking incoming RabbitMQ version https://review.opendev.org/c/openstack/kolla/+/927239 | 08:05 |
| opendevreview | Bartosz Bezak proposed openstack/kolla master: Remove incorrect reno https://review.opendev.org/c/openstack/kolla/+/927241 | 08:24 |
| mnasiadka | stan: that's the plan, but I haven't seem rpm/deb that we could use | 08:44 |
| gbialas | SvenKieske: I made some comment in https://review.opendev.org/c/openstack/kolla-ansible/+/927022/5 regarding changes you suggested. For some reason I couldn't reply properly, so I had to add it as main comment. I am not sure if it is visible to you, hence I am bothering you here ; | 08:45 |
| SvenKieske | gbialas: yes I've seen your comment, but it seems you are trying to do something that is not supported the way you're doing it. as you wrote, CI expects a string, not a list for these docvars, I'm not sure if this can be changed. | 08:51 |
| SvenKieske | not sure who is well versed with doc/source/conf.py here? | 08:55 |
| SvenKieske | in theory it should be possible to extend conf.py so it can convert your list of strings to a string I guess. | 08:55 |
| mnasiadka | SvenKieske: those variables that you commented on are ONLY for using these in .rst files, the variable introduced by gbialas is only for templating out branch name properly - it doesn't need to be added there. | 09:03 |
| SvenKieske | mhm I know these are only for rst files, but the comment specifically calls out to add all variables? then maybe the comment should be fixed? | 09:05 |
| SvenKieske | as I said I don't know that part of the codebase good. I was just going by the comment in the source code to add all variables to the global map. | 09:05 |
| mnasiadka | fine by me - gbialas can you change the comment? | 09:05 |
| gbialas | Sure. I will also add comment to clarify why this variable was added. | 09:07 |
| SvenKieske | but when you look at replace_global_vars in line 150/160 (old/new change) the iteration seems only to iterate over GLOBAL_VARIABLE_MAP[key], so are you sure this is not needed? | 09:07 |
| mnasiadka | SvenKieske: there's a cherry pick to unmaintained branch that seems to work, aren't we overdoing this? ;-) | 09:08 |
| SvenKieske | well I'm talking about a review on master branch: https://review.opendev.org/c/openstack/kolla-ansible/+/927022 | 09:08 |
| mnasiadka | yes, but the effect will be only visible on unmaintained branch | 09:09 |
| SvenKieske | that was also what gbialas linked to above | 09:09 |
| mnasiadka | https://review.opendev.org/c/openstack/kolla-ansible/+/927092?tab=change-view-tab-header-zuul-results-summary | 09:09 |
| SvenKieske | I don't care about the unmaintained branch :) | 09:09 |
| mnasiadka | well, antelope is going to be unmaintained this year, so we can't merge the docs change only to unmaintaned/* | 09:09 |
| mnasiadka | I don't care if you care, but your comments are not helping :) | 09:10 |
| mnasiadka | you can see that it's working here: https://4e240f8fa4f8989d230c-b3141299f569dd5d6d8f436de9f6d947.ssl.cf5.rackcdn.com/927092/1/check/openstack-tox-docs/da73fd1/docs/user/quickstart.html | 09:12 |
| mnasiadka | more detailed link: https://4e240f8fa4f8989d230c-b3141299f569dd5d6d8f436de9f6d947.ssl.cf5.rackcdn.com/927092/1/check/openstack-tox-docs/da73fd1/docs/user/quickstart.html#install-kolla-ansible | 09:13 |
| opendevreview | Pierre Riteau proposed openstack/kayobe master: [DNM] Test seed-vm job with Ubuntu image without EFI changes https://review.opendev.org/c/openstack/kayobe/+/927100 | 09:13 |
| SvenKieske | I'm sorry, I misread that to mean that this is only about the patch on the unmaintained branch. if it's working it's fine I guess, I see as much on the cherry pick. | 09:14 |
| gbialas | Ok. I will push all necessary changes, and will wait for further review. | 09:16 |
| opendevreview | Bartosz Bezak proposed openstack/kolla-ansible master: Drop prometheus-msteams support https://review.opendev.org/c/openstack/kolla-ansible/+/927001 | 09:24 |
| opendevreview | Pierre Riteau proposed openstack/kayobe master: [DNM] Test Ubuntu seed VM on RL9 hypervisor https://review.opendev.org/c/openstack/kayobe/+/926984 | 09:43 |
| stan | SvenKieske Is there any rabbimq optimization guide to follow? Everytime we face any problem, 9/10 times it's rabbitmq shitting the bed. Any pointers? | 10:22 |
| SvenKieske | stan: there are quite a lot of guides etc out there, and also one patch is still outstanding on our side.. | 10:36 |
| mnasiadka | stan: What type of queues are you using? HA classic-mirrored queues? Quorum queues? | 10:36 |
| SvenKieske | patch that's still open: https://review.opendev.org/c/openstack/kolla-ansible/+/900528 | 10:37 |
| SvenKieske | guides: https://docs.openstack.org/large-scale/journey/configure/rabbitmq.html (mostly already incorporated into kolla afaik) | 10:38 |
| SvenKieske | short lightning talk with some pitfalls when scaling rmq: https://www.youtube.com/watch?v=cknfE7xymeQ | 10:38 |
| matusjenca | hello everyone, can I change a docker's container USER with kolla-ansible alone or do I need to rebuild image? | 10:41 |
| SvenKieske | depends on what you want to do, for one time execution you can just do docker exec --user=root if you want to reuse this it's better to rebuild the image I guess. | 10:45 |
| SvenKieske | in general the user settings should be fine though | 10:45 |
| SvenKieske | mhm, we don't have a really established mechanism to load variables from one role into another I guess? So I end up defining a huge chunk in group_vars/all.yml and then reference that everywhere? currently reworking the haproxy ssl settings (again) | 10:47 |
| SvenKieske | mnasiadka: what do you think? we currently have these roles, which all manage different haproxy aspects: "loadbalancer", "loadbalancer-config", "haproxy-config", and then the special cases "glance" and neutron with their completely own haproxy.cfg | 10:48 |
| SvenKieske | I initially did put new ssl defaults in "haproxy-config" but I would need to reference that variable at least in "loadbalancer" and in glance and neutron. Could do so via relative path "include_vars", but it's kind of ugly | 10:49 |
| mnasiadka | Historically we've just put such variables in group_vars/all.yml | 10:50 |
| SvenKieske | so I could move it to group_vars/all.yml but it's quite a large chunk. | 10:50 |
| mnasiadka | we could think of chopping up all.yml into separate files, but that will make backports more complicated ;) | 10:50 |
| SvenKieske | I guess I'll stick with that. Probably should raise a separate patch to move some of the glance/neutron haproxy configs out of those. the original intend was to make maintenance easier, but I feel it's more complicated to keep all haproxy.cfg files up-to-date | 10:51 |
| SvenKieske | at least the TLS settings should be sourced centrally I guess, which can be overriden | 10:52 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: harden haproxy TLS configuration https://review.opendev.org/c/openstack/kolla-ansible/+/915403 | 10:56 |
| stan | SvenKieske thank you. I will refer to the links you have provided:) | 11:00 |
| stan | we use quorum queues | 11:01 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: harden haproxy TLS configuration https://review.opendev.org/c/openstack/kolla-ansible/+/915403 | 11:01 |
| SvenKieske | stan: have you encountered a problem or are you just asking in advance? | 11:02 |
| opendevreview | Matt Crees proposed openstack/kolla-ansible master: Add a precheck to catch RMQ SLURP upgrades https://review.opendev.org/c/openstack/kolla-ansible/+/926146 | 11:07 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: harden haproxy TLS configuration https://review.opendev.org/c/openstack/kolla-ansible/+/915403 | 11:14 |
| SvenKieske | now this should work | 11:14 |
| stan | SvenKieske I have no idea how rabbitmq works yet. So just wanted to know if we are following the best practices while we start, to avoid any tech debt | 11:15 |
| SvenKieske | stan: always good to be cautious! rabbitmq.com has also lot's of docs. if this is your first message queueing system I would also advise to read something about distributed systems and messages queues in general :) | 11:17 |
| rohit02 | Hi Team,We are trying kolla-ansible Caracal(2024.1) deployment on Rocky 9 Linux but deployment failed at Task "TASK [rabbitmq : List RabbitMQ policies]" | 11:18 |
| rohit02 | Attached the detailed logs "https://paste.openstack.org/show/bMInLqyd0Wpt9Che0400/" | 11:20 |
| rohit02 | rabbitmq policy | 11:26 |
| stan | SvenKieske Yes, I should start reading a lot on these topics. | 11:27 |
| stan | :) | 11:27 |
| opendevreview | Merged openstack/kayobe master: seed-vm/infra-vms: Add support for EFI and q35 https://review.opendev.org/c/openstack/kayobe/+/921660 | 11:27 |
| SvenKieske | rohit02: the error says your rabbitmq is not running, so the task can't list the policies. are you sure you already deployed rabbitmq sucessfully? which installation docs are you following? | 11:39 |
| opendevreview | Maximilian Sesterhenn proposed openstack/kolla-ansible master: WIP: Add ovn-bgp-agent / FRR / neutron-bgpvpn / Horizon BGPVPN dashboard support https://review.opendev.org/c/openstack/kolla-ansible/+/891622 | 11:42 |
| opendevreview | Maximilian Sesterhenn proposed openstack/kolla master: Add ovn-bgp-agent / FRR / Horizon BGPVPN dashboard https://review.opendev.org/c/openstack/kolla/+/891617 | 11:42 |
| rohit02 | Hi @SvenKieske i am following this official kolla doc link "https://docs.openstack.org/kolla-ansible/2024.1/user/quickstart.html" | 11:43 |
| SvenKieske | those should work, at which step are you? deployment? https://docs.openstack.org/kolla-ansible/2024.1/user/quickstart.html#deployment | 11:46 |
| rohit02 | @<SvenKieske> rabbitmq container continuously failing with error " https://paste.openstack.org/show/brb0YOD1EM8XlAgLBcd8/" | 11:47 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2024.1: seed-vm/infra-vms: Add support for EFI and q35 https://review.opendev.org/c/openstack/kayobe/+/927261 | 11:49 |
| rohit02 | yes at deploy command it fails | 11:49 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2023.2: seed-vm/infra-vms: Add support for EFI and q35 https://review.opendev.org/c/openstack/kayobe/+/927262 | 11:49 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2023.1: seed-vm/infra-vms: Add support for EFI and q35 https://review.opendev.org/c/openstack/kayobe/+/927263 | 11:50 |
| SvenKieske | mhm interesting, it can't enable the required feature flags for rabbitmq somehow. which rabbitmq version or image are you using? | 11:52 |
| opendevreview | Grzegorz Bialas proposed openstack/kolla-ansible master: Fix links in docs for unmaintained releases https://review.opendev.org/c/openstack/kolla-ansible/+/927022 | 11:55 |
| rohit02 | @SvenKieske i am using quay.io/openstack.kolla/rabbitmq 2024.1-rocky-9 | 11:57 |
| opendevreview | Grzegorz Bialas proposed openstack/kolla-ansible master: Fix links in docs for unmaintained releases https://review.opendev.org/c/openstack/kolla-ansible/+/927022 | 12:09 |
| PrzemekK | rocky is sheet xD always missing some packages vs ubuntu | 12:56 |
| PrzemekK | what image date You have ? What version of Rabbit ? @rohit02 | 13:00 |
| PrzemekK | stream_single_active_consumer is from this 3.11 | 13:01 |
| opendevreview | Martin Hiner proposed openstack/kolla-ansible master: Move to high level client in DockerWorker https://review.opendev.org/c/openstack/kolla-ansible/+/908295 | 13:57 |
| opendevreview | Martin Hiner proposed openstack/kolla-ansible master: Move to high level client in DockerWorker https://review.opendev.org/c/openstack/kolla-ansible/+/908295 | 14:09 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: put in a short dealy when waiting for haproxy https://review.opendev.org/c/openstack/kolla-ansible/+/927277 | 14:21 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: harden haproxy TLS configuration https://review.opendev.org/c/openstack/kolla-ansible/+/915403 | 14:22 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: put in a short delay when waiting for haproxy https://review.opendev.org/c/openstack/kolla-ansible/+/927277 | 14:23 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: mariadb: Disable wsrep_provider plugin https://review.opendev.org/c/openstack/kolla-ansible/+/927096 | 14:46 |
| SvenKieske | mhm, CI issue? I currently see constantly failing Task "Wait for backup haproxy to start" in deploy phase | 14:47 |
| mnasiadka | SvenKieske: https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_233/915403/7/check/kolla-ansible-debian/2335d5e/primary/logs/container_logs/haproxy.txt - look at the bottom | 14:49 |
| SvenKieske | ah thx for the pointer! I also looked at a wrong log I see | 14:50 |
| SvenKieske | rather wrong buildset from a different patch | 14:50 |
| mnasiadka | that's what I meant by running some haproxy config test before we start/restart anything :) | 14:50 |
| mnasiadka | ideally in config.yml I guess - running an additional container that only runs the test | 14:50 |
| SvenKieske | yep, but that container then needs all the linters installed, haproxy, promtool..but it is feasible I guess. | 14:51 |
| mnasiadka | run haproxy container just for parsing the config | 14:52 |
| mnasiadka | not use one image for all parsing :) | 14:52 |
| SvenKieske | well and we need a binary per version, I just noticed that debian version is ancient again :D | 14:52 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: service-python-path: Introduce a role to get python_path of an image https://review.opendev.org/c/openstack/kolla-ansible/+/926632 | 14:55 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: WIP: Add support for Ubuntu Noble Numbat (24.04 LTS) https://review.opendev.org/c/openstack/kolla-ansible/+/925581 | 14:56 |
| SvenKieske | got the wrong yaml multiline anchor again.. good thing there is: https://yaml-multiline.info/ | 14:59 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: harden haproxy TLS configuration https://review.opendev.org/c/openstack/kolla-ansible/+/915403 | 15:00 |
| mnasiadka | SvenKieske: https://ih1.redbubble.net/image.3180585412.6676/fposter,small,wall_texture,product,750x1000.u13.jpg | 15:02 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: WIP: Add support for Ubuntu Noble Numbat (24.04 LTS) https://review.opendev.org/c/openstack/kolla-ansible/+/925581 | 15:16 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2024.1: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927288 | 15:19 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2023.2: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927289 | 15:19 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2023.2: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927289 | 15:20 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2023.2: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927289 | 15:20 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2023.2: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927289 | 15:21 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2023.1: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927290 | 15:21 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2023.1: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927290 | 15:22 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: DNM: Run fio tests https://review.opendev.org/c/openstack/kolla/+/927210 | 15:25 |
| SvenKieske | mnasiadka: xD nice, I should probably print that out.. | 15:48 |
| SvenKieske | mnasiadka: I prepared some docs for haproxy TLS stuff, just want to let CI pass once before I push again. | 16:00 |
| SvenKieske | mhm, I'm just thinking, in theory I could reverse some of the patchlogic so we could actually backport this, if I make the legacy behaviour the default and raise a second patch just for changing the default then? but I don't know if we would want to backport that.. | 16:04 |
| SvenKieske | people really needing it can of course always backport manually. | 16:04 |
| PrzemekK | I dont know why You dont support aarch64 while kolla does - https://docs.openstack.org/kolla-ansible/latest/user/support-matrix.html https://docs.openstack.org/kolla/2024.1/support_matrix . What the plans for host/image on Ubuntu 24 ? | 16:23 |
| PrzemekK | will You change matrix as well ? | 16:25 |
| PrzemekK | And ubuntu 24 will be on 2024.2 or sooner ? | 16:25 |
| opendevreview | Sven Kieske proposed openstack/kolla-ansible master: harden haproxy TLS configuration https://review.opendev.org/c/openstack/kolla-ansible/+/915403 | 16:26 |
| PrzemekK | Because i have discussion if ubuntu 24 can be host OS for kolla-ansible . I have told that kolla images will be ubuntu 2024.1 but they can run on all Host OS (for example Windows OS) can You give arguments why it should run on ubuntu 22.04 ? | 16:29 |
| opendevreview | Merged openstack/kolla stable/2024.1: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927288 | 16:54 |
| opendevreview | Merged openstack/kolla stable/2023.1: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927290 | 16:57 |
| opendevreview | Merged openstack/kolla stable/2023.2: CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs https://review.opendev.org/c/openstack/kolla/+/927289 | 17:01 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: mariadb: Add pv on Ubuntu as well https://review.opendev.org/c/openstack/kolla/+/927305 | 18:02 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: mariadb: Disable wsrep_provider plugin https://review.opendev.org/c/openstack/kolla-ansible/+/927096 | 18:03 |
| opendevreview | Aravindh proposed openstack/kolla-ansible master: HAProxy: Switch to L7 Healthchecks (Phase 1) https://review.opendev.org/c/openstack/kolla-ansible/+/918437 | 18:36 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: DNM: Run fio tests https://review.opendev.org/c/openstack/kolla/+/927210 | 18:48 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: DNM: Run fio tests https://review.opendev.org/c/openstack/kolla/+/927210 | 18:49 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: DNM: Run fio tests https://review.opendev.org/c/openstack/kolla/+/927210 | 18:50 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: WIP: Use new module names from openstack.cloud https://review.opendev.org/c/openstack/kolla-ansible/+/914325 | 19:50 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: WIP: Use new module names from openstack.cloud https://review.opendev.org/c/openstack/kolla-ansible/+/914325 | 19:50 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Use new module names from openstack.cloud https://review.opendev.org/c/openstack/kolla-ansible/+/914325 | 19:50 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: ironic: use ironic_tftp_listen_address in dnsmasq.conf https://review.opendev.org/c/openstack/kolla-ansible/+/927079 | 20:07 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: ironic: use ironic_tftp_listen_address https://review.opendev.org/c/openstack/kolla-ansible/+/927079 | 20:10 |
| opendevreview | Grzegorz Bialas proposed openstack/kolla master: Check if archive is tarfile https://review.opendev.org/c/openstack/kolla/+/914193 | 20:20 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: CI: Add reno linting https://review.opendev.org/c/openstack/kolla/+/916642 | 20:21 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: WIP: Move pre tasks into roles https://review.opendev.org/c/openstack/kolla/+/920590 | 20:21 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: WIP: Move pre tasks into roles https://review.opendev.org/c/openstack/kolla/+/920590 | 20:22 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: WIP: Move pre tasks into roles https://review.opendev.org/c/openstack/kolla/+/920590 | 20:22 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: WIP: Move pre tasks into roles https://review.opendev.org/c/openstack/kolla/+/920590 | 20:23 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: WIP: Move pre tasks into roles https://review.opendev.org/c/openstack/kolla/+/920590 | 20:23 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: CI: Move image building to a role https://review.opendev.org/c/openstack/kolla/+/922148 | 20:23 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: CI: Add reno linting https://review.opendev.org/c/openstack/kolla/+/916642 | 20:57 |
| opendevreview | Verification of a change to openstack/kolla master failed: Revert "[release] Change RDO's DELOREAN_DEPS repo to Caracal" https://review.opendev.org/c/openstack/kolla/+/926982 | 21:55 |
| opendevreview | Merged openstack/kolla master: Check if archive is tarfile https://review.opendev.org/c/openstack/kolla/+/914193 | 23:14 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!
