openstackgerrit | RedHat RDO CI proposed openstack/tripleo-quickstart-extras master: GATE CHECK for quickstart-extras https://review.openstack.org/560445 | 00:00 |
---|---|---|
*** lblanchard has joined #tripleo | 00:08 | |
*** ooolpbot has joined #tripleo | 00:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 00:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 00:10 |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 00:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 00:10 |
*** ooolpbot has quit IRC | 00:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 00:10 |
*** itlinux has joined #tripleo | 00:13 | |
*** dmacpher has quit IRC | 00:17 | |
*** rnoriega_ has joined #tripleo | 00:28 | |
*** weshay_ has joined #tripleo | 00:28 | |
*** markmc` has joined #tripleo | 00:28 | |
*** hewbrocc` has joined #tripleo | 00:28 | |
*** mburned` has joined #tripleo | 00:28 | |
*** rasca_ has joined #tripleo | 00:28 | |
*** haleyb_ has joined #tripleo | 00:28 | |
*** akrzos_ has joined #tripleo | 00:28 | |
*** _atoth has joined #tripleo | 00:29 | |
*** lhinds|out has joined #tripleo | 00:29 | |
*** pliu_ has joined #tripleo | 00:29 | |
*** rasca has quit IRC | 00:30 | |
*** pliu has quit IRC | 00:30 | |
*** aputtur_ has joined #tripleo | 00:30 | |
*** markmc has quit IRC | 00:31 | |
*** rnoriega has quit IRC | 00:31 | |
*** myoung|off has quit IRC | 00:31 | |
*** jjoyce has quit IRC | 00:31 | |
*** haleyb has quit IRC | 00:31 | |
*** akrzos has quit IRC | 00:32 | |
*** weshay has quit IRC | 00:32 | |
*** aputtur has quit IRC | 00:32 | |
*** mburned has quit IRC | 00:32 | |
*** lhinds has quit IRC | 00:32 | |
*** hewbrocca_afk has quit IRC | 00:32 | |
*** faceman has quit IRC | 00:32 | |
*** saneax has quit IRC | 00:33 | |
*** jjoyce has joined #tripleo | 00:33 | |
*** myoung has joined #tripleo | 00:33 | |
*** psahoo has joined #tripleo | 00:34 | |
*** markmc has joined #tripleo | 00:42 | |
*** hewbrocca_afk has joined #tripleo | 00:42 | |
*** mburned_out has joined #tripleo | 00:42 | |
*** rasca has joined #tripleo | 00:42 | |
*** akrzos has joined #tripleo | 00:42 | |
*** rasca_ has quit IRC | 00:42 | |
*** mburned` has quit IRC | 00:42 | |
*** markmc` has quit IRC | 00:43 | |
*** hewbrocc` has quit IRC | 00:43 | |
*** rnoriega has joined #tripleo | 00:43 | |
*** haleyb has joined #tripleo | 00:43 | |
*** myoung_ has joined #tripleo | 00:43 | |
*** weshay has joined #tripleo | 00:43 | |
*** fuzzball81 has joined #tripleo | 00:43 | |
openstackgerrit | Sai Ram Peesapati proposed openstack/puppet-tripleo stable/pike: Conditionally Enable Nuage VRS https://review.openstack.org/572631 | 00:43 |
*** pliu_ has quit IRC | 00:43 | |
*** _atoth has quit IRC | 00:44 | |
*** lhinds|out has quit IRC | 00:44 | |
*** haleyb_ has quit IRC | 00:44 | |
*** weshay_ has quit IRC | 00:44 | |
*** aputtur_ has quit IRC | 00:44 | |
*** rnoriega_ has quit IRC | 00:44 | |
*** myoung has quit IRC | 00:44 | |
*** akrzos_ has quit IRC | 00:44 | |
*** jjoyce has quit IRC | 00:44 | |
*** aputtur has joined #tripleo | 00:45 | |
*** pliu has joined #tripleo | 00:46 | |
*** lhinds has joined #tripleo | 00:47 | |
*** faceman has joined #tripleo | 00:49 | |
*** edmondsw has joined #tripleo | 00:51 | |
*** edmondsw has quit IRC | 00:55 | |
*** rpioso is now known as rpioso|afk | 00:59 | |
*** dmacpher has joined #tripleo | 01:04 | |
*** ooolpbot has joined #tripleo | 01:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 01:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 01:10 |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 01:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 01:10 |
*** ooolpbot has quit IRC | 01:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 01:10 |
*** psahoo has quit IRC | 01:13 | |
openstackgerrit | Sai Ram Peesapati proposed openstack/tripleo-heat-templates stable/pike: Conditionally Enable Nuage VRS https://review.openstack.org/572653 | 01:15 |
openstackgerrit | Sai Ram Peesapati proposed openstack/tripleo-heat-templates stable/pike: Conditionally Enable Nuage VRS https://review.openstack.org/572653 | 01:18 |
*** mdnadeem has joined #tripleo | 01:23 | |
*** psahoo has joined #tripleo | 01:24 | |
*** jbadiapa has joined #tripleo | 01:30 | |
*** threestrands_ has joined #tripleo | 01:33 | |
*** threestrands has quit IRC | 01:36 | |
*** nguyenhai93 has quit IRC | 01:47 | |
*** nguyenhai93 has joined #tripleo | 01:48 | |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use the in-built image prepare for undercloud install https://review.openstack.org/571613 | 01:53 |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use role tripleo-modify-image to update containers https://review.openstack.org/571631 | 01:53 |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use "openstack tripleo container image prepare" https://review.openstack.org/568403 | 01:53 |
*** yolanda_ has joined #tripleo | 01:56 | |
*** yolanda_ has quit IRC | 01:57 | |
*** yolanda_ has joined #tripleo | 01:58 | |
*** yolanda has quit IRC | 01:59 | |
*** yamahata has quit IRC | 01:59 | |
*** lblanchard has quit IRC | 02:02 | |
*** fragatina has quit IRC | 02:09 | |
*** ooolpbot has joined #tripleo | 02:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 02:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 02:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 02:10 |
*** ooolpbot has quit IRC | 02:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 02:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 02:10 |
*** jcoufal has joined #tripleo | 02:15 | |
*** nyechiel has joined #tripleo | 02:17 | |
*** zshi has quit IRC | 02:17 | |
*** dbecker has joined #tripleo | 02:18 | |
*** jcoufal has quit IRC | 02:25 | |
*** lblanchard has joined #tripleo | 02:26 | |
*** zshi has joined #tripleo | 02:30 | |
*** liverpooler has quit IRC | 02:31 | |
*** dbecker has quit IRC | 02:32 | |
*** ramishra has joined #tripleo | 02:38 | |
*** edmondsw has joined #tripleo | 02:39 | |
*** lblanchard has quit IRC | 02:39 | |
*** psachin has joined #tripleo | 02:39 | |
*** fragatina has joined #tripleo | 02:41 | |
*** edmondsw has quit IRC | 02:44 | |
*** nyechiel has quit IRC | 02:45 | |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: DNM Debug docker permission denied on upgrade https://review.openstack.org/572663 | 02:49 |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart master: Add featureset config for standalone, keystone only https://review.openstack.org/572221 | 02:50 |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart master: Add featureset config for standalone, keystone only https://review.openstack.org/572221 | 02:51 |
*** dxiri has quit IRC | 02:51 | |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart-extras master: Add a role for the standalone deployment https://review.openstack.org/572220 | 02:53 |
*** artom has joined #tripleo | 03:09 | |
*** ooolpbot has joined #tripleo | 03:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 03:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 03:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 03:10 |
*** ooolpbot has quit IRC | 03:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 03:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 03:10 |
*** fragatina has quit IRC | 03:10 | |
*** rajinir has quit IRC | 03:11 | |
*** anilvenkata has quit IRC | 03:14 | |
*** psahoo has quit IRC | 03:25 | |
*** zaneb has quit IRC | 03:28 | |
*** zaneb has joined #tripleo | 03:29 | |
*** ramishra has quit IRC | 03:33 | |
*** ramishra has joined #tripleo | 03:34 | |
*** psahoo has joined #tripleo | 03:40 | |
*** udesale has joined #tripleo | 03:44 | |
*** yamahata has joined #tripleo | 03:48 | |
*** rbrady has quit IRC | 04:00 | |
*** links has joined #tripleo | 04:02 | |
*** artom has quit IRC | 04:05 | |
Tengu | hello there | 04:09 |
*** psahoo has quit IRC | 04:09 | |
*** ooolpbot has joined #tripleo | 04:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 04:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 04:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 04:10 |
*** ooolpbot has quit IRC | 04:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 04:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 04:10 |
*** rlandy|rover|bbl is now known as rlandy|rover | 04:10 | |
*** jbadiapa has quit IRC | 04:12 | |
*** mvenesio has joined #tripleo | 04:13 | |
*** shreshtha has joined #tripleo | 04:20 | |
*** shreshtha has quit IRC | 04:21 | |
*** shreshtha has joined #tripleo | 04:21 | |
*** psahoo has joined #tripleo | 04:21 | |
*** noslzzp has quit IRC | 04:24 | |
*** edmondsw has joined #tripleo | 04:27 | |
*** edmondsw has quit IRC | 04:32 | |
*** radeks has joined #tripleo | 04:36 | |
*** radeks_ has joined #tripleo | 04:39 | |
*** radeks has quit IRC | 04:42 | |
*** bfournie has quit IRC | 04:46 | |
*** anilvenkata has joined #tripleo | 04:49 | |
*** radeks_ has quit IRC | 04:50 | |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: undercloud: deploy kernel composable service https://review.openstack.org/572533 | 04:51 |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: undercloud: deploy kernel composable service https://review.openstack.org/572533 | 04:51 |
*** cshastri has joined #tripleo | 04:55 | |
*** udesale has quit IRC | 04:56 | |
*** udesale has joined #tripleo | 04:57 | |
*** udesale has quit IRC | 04:57 | |
*** udesale has joined #tripleo | 04:58 | |
*** jaganathan has joined #tripleo | 05:03 | |
*** radeks_ has joined #tripleo | 05:06 | |
*** ooolpbot has joined #tripleo | 05:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 05:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 05:10 |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 05:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 05:10 |
*** ooolpbot has quit IRC | 05:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 05:10 |
*** aufi has joined #tripleo | 05:10 | |
*** pgadiya has joined #tripleo | 05:11 | |
*** nmathew has joined #tripleo | 05:14 | |
*** saneax has joined #tripleo | 05:26 | |
*** mvenesio has quit IRC | 05:28 | |
*** alee_ has quit IRC | 05:31 | |
*** alee_ has joined #tripleo | 05:31 | |
*** links has quit IRC | 05:33 | |
*** alee_ has quit IRC | 05:36 | |
*** quiquell|off is now known as quiquell | 05:38 | |
*** cshastri has quit IRC | 05:39 | |
*** sshnaidm|brq has joined #tripleo | 05:42 | |
*** psachin has quit IRC | 05:43 | |
*** karthiks has quit IRC | 05:47 | |
*** sshnaidm|brq has quit IRC | 05:47 | |
*** links has joined #tripleo | 05:49 | |
*** fragatina has joined #tripleo | 05:49 | |
*** nmathew- has joined #tripleo | 05:52 | |
*** jaosorior has joined #tripleo | 05:52 | |
*** nmathew has quit IRC | 05:56 | |
*** cshastri has joined #tripleo | 05:57 | |
*** kbyrne has quit IRC | 06:02 | |
*** kbyrne has joined #tripleo | 06:04 | |
openstackgerrit | Merged openstack/diskimage-builder master: Added release notes for Change 568697 https://review.openstack.org/570978 | 06:06 |
openstackgerrit | Jaganathan Palanisamy proposed openstack/tripleo-common master: WIP: Derive FixedIP parameter for public-facing VIP https://review.openstack.org/572678 | 06:08 |
*** ooolpbot has joined #tripleo | 06:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 06:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 06:10 |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 06:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 06:10 |
*** ooolpbot has quit IRC | 06:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 06:10 |
*** edmondsw has joined #tripleo | 06:15 | |
*** lvdombrkr has joined #tripleo | 06:16 | |
openstackgerrit | Merged openstack/diskimage-builder master: Use surrogateescape with outfilter.py https://review.openstack.org/570489 | 06:20 |
openstackgerrit | Merged openstack/diskimage-builder master: Reduce path length in PS4 for debug https://review.openstack.org/570282 | 06:20 |
*** edmondsw has quit IRC | 06:20 | |
*** waleedm has joined #tripleo | 06:21 | |
jaosorior | jaganathan: nice! I see you have a patch as wIP | 06:21 |
jaosorior | jaganathan: how does that run? is that run by default for every deployment? | 06:21 |
jaganathan | jaosorior, default this workflow will be invoked for all deployments. working on tripleoclient patch to call | 06:22 |
jaosorior | jaganathan: awesome | 06:22 |
jaosorior | thanks for this work | 06:23 |
*** holser__ has joined #tripleo | 06:23 | |
jaganathan | jaosorior, every deployment calls but if user given this parameter and will have precedence (priority) than derived one | 06:24 |
*** cshastri has quit IRC | 06:24 | |
jaganathan | jaosorior, welcome :) . test cases pending. will update the patch once design is finalized | 06:24 |
jaosorior | that sounds good | 06:25 |
jaganathan | jaosorior, thanks | 06:25 |
*** cshastri has joined #tripleo | 06:25 | |
*** ccamacho has joined #tripleo | 06:29 | |
openstackgerrit | Merged openstack/diskimage-builder master: Save and close stdout on exit https://review.openstack.org/570094 | 06:30 |
*** brault has joined #tripleo | 06:33 | |
*** brault has quit IRC | 06:37 | |
Tengu | hello jaosorior :) | 06:38 |
*** bkopilov has joined #tripleo | 06:40 | |
jaosorior | Tengu: yooo | 06:40 |
Tengu | jaosorior: just spent the last hours reading about rootwrap and oslo.privsep. A really nice work from the oslo/nova team | 06:41 |
*** agurenko has joined #tripleo | 06:41 | |
Tengu | *teams | 06:42 |
jaosorior | Tengu: have you thought about writting a blog? would be good to have your learnings written down somewhere so you can share them | 06:43 |
*** slaweq has joined #tripleo | 06:43 | |
Tengu | jaosorior: hm, not really to be honnest. but indeed, it might be a good thing to do. | 06:43 |
Tengu | will think a bit about it. I'll probably use a github page - don't want to get some wordpress or whatever. | 06:44 |
jaosorior | Tengu: that's what I use | 06:44 |
Tengu | :) | 06:44 |
*** links has quit IRC | 06:44 | |
jaosorior | Tengu: http://jaormx.github.io/ | 06:44 |
*** pcaruana has joined #tripleo | 06:44 | |
jaosorior | and I use one of the free templates... didn't want to bother setting all that up :D | 06:44 |
*** fragatina has quit IRC | 06:44 | |
Tengu | can do that now in fact. | 06:45 |
Tengu | won't be a loss of time in the end. | 06:45 |
jaosorior | Tengu: I think it would be useful. Also, I'm interested about your learnings on rootwrap and privsep haha | 06:45 |
Tengu | :) | 06:47 |
jaosorior | brb | 06:47 |
*** jaosorior has quit IRC | 06:47 | |
*** nmathew has joined #tripleo | 06:48 | |
*** dparkes has joined #tripleo | 06:49 | |
*** abishop has joined #tripleo | 06:49 | |
*** alee_ has joined #tripleo | 06:50 | |
*** ykarel|training has joined #tripleo | 06:50 | |
*** nmathew- has quit IRC | 06:51 | |
*** pdeore has joined #tripleo | 06:52 | |
*** ffiore has joined #tripleo | 06:52 | |
*** bogdando has joined #tripleo | 06:54 | |
*** janki has joined #tripleo | 06:55 | |
*** aufi has quit IRC | 06:57 | |
*** aufi has joined #tripleo | 06:57 | |
*** brault has joined #tripleo | 06:58 | |
*** zoli|gone is now known as zoli | 07:01 | |
*** lifeless has quit IRC | 07:02 | |
*** karthiks has joined #tripleo | 07:02 | |
*** lifeless has joined #tripleo | 07:02 | |
*** links has joined #tripleo | 07:03 | |
*** artom has joined #tripleo | 07:04 | |
*** rcernin has quit IRC | 07:07 | |
*** jbadiapa has joined #tripleo | 07:09 | |
*** ooolpbot has joined #tripleo | 07:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 07:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 07:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 07:10 |
*** ooolpbot has quit IRC | 07:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 07:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 07:10 |
*** links has quit IRC | 07:12 | |
*** kopecmartin has joined #tripleo | 07:13 | |
*** yprokule has joined #tripleo | 07:13 | |
*** brault has quit IRC | 07:14 | |
*** hjensas has joined #tripleo | 07:14 | |
*** ratailor has joined #tripleo | 07:16 | |
*** jbadiapa has quit IRC | 07:17 | |
*** jbadiapa has joined #tripleo | 07:17 | |
*** gkadam has joined #tripleo | 07:18 | |
*** openstackgerrit has quit IRC | 07:19 | |
*** sshnaidm|brq has joined #tripleo | 07:21 | |
*** lifeless has quit IRC | 07:22 | |
*** dmacpher has quit IRC | 07:27 | |
*** lifeless has joined #tripleo | 07:28 | |
*** tosky has joined #tripleo | 07:28 | |
*** lvdombrkr89 has joined #tripleo | 07:32 | |
*** links has joined #tripleo | 07:33 | |
*** lvdombrkr has quit IRC | 07:35 | |
*** skramaja has joined #tripleo | 07:37 | |
*** amoralej|off is now known as amoralej | 07:41 | |
*** skramaja_ has joined #tripleo | 07:42 | |
*** skramaja has quit IRC | 07:42 | |
*** openstackgerrit has joined #tripleo | 07:44 | |
openstackgerrit | Merged openstack/tripleo-upgrade stable/queens: Fix validation for A/P services https://review.openstack.org/572233 | 07:44 |
*** jpena|off is now known as jpena | 07:52 | |
openstackgerrit | Sylvain Afchain proposed openstack/tripleo-heat-templates master: skydive external_deploy_task migration https://review.openstack.org/561274 | 07:52 |
*** jpich has joined #tripleo | 07:55 | |
*** brault has joined #tripleo | 07:57 | |
*** brault has quit IRC | 07:57 | |
*** brault has joined #tripleo | 07:58 | |
openstackgerrit | Merged openstack/diskimage-builder master: Fix encoding issue during processing output https://review.openstack.org/548958 | 07:58 |
*** cylopez has joined #tripleo | 07:58 | |
*** threestrands_ has quit IRC | 08:03 | |
*** edmondsw has joined #tripleo | 08:03 | |
*** shardy has joined #tripleo | 08:05 | |
*** edmondsw has quit IRC | 08:08 | |
*** ooolpbot has joined #tripleo | 08:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 08:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 08:10 |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 08:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 08:10 |
*** ooolpbot has quit IRC | 08:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 08:10 |
*** agurenko has quit IRC | 08:12 | |
*** cylopez has left #tripleo | 08:12 | |
*** brault has quit IRC | 08:13 | |
*** radek__ has joined #tripleo | 08:13 | |
sshnaidm|brq | cores, please vote https://review.openstack.org/#/c/572146/ | 08:15 |
openstackgerrit | Michele Baldessari proposed openstack/tripleo-heat-templates master: Print a more informative error message on misconfigured volumes https://review.openstack.org/572692 | 08:17 |
openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: [WIP] Add release to the gating repo tarball name https://review.openstack.org/572694 | 08:22 |
*** oneswig has joined #tripleo | 08:30 | |
openstackgerrit | Quique Llorente proposed openstack-infra/tripleo-ci master: [DNM] Test n -> n + delta https://review.openstack.org/570823 | 08:31 |
*** derekh has joined #tripleo | 08:36 | |
*** leanderthal has joined #tripleo | 08:38 | |
*** brault has joined #tripleo | 08:39 | |
*** jfrancoa has joined #tripleo | 08:41 | |
*** jfrancoa has quit IRC | 08:43 | |
openstackgerrit | Jaganathan Palanisamy proposed openstack/python-tripleoclient master: Invokes derive parameters workflow for all deployments https://review.openstack.org/572701 | 08:45 |
shardy | flaper87: Hey good morning | 08:49 |
openstackgerrit | Jaganathan Palanisamy proposed openstack/tripleo-common master: WIP: Derive FixedIP parameter for public-facing VIP https://review.openstack.org/572678 | 08:49 |
shardy | flaper87: wondered if you've yet taken a look at the experimental scenario009 job> | 08:49 |
shardy | I tried it on https://review.openstack.org/#/c/568603/ yesterday and it seems to fail converting from a legacy job - not entirely sure how we convert it to zuul v3 and/or fix the problem | 08:50 |
*** akrivoka has joined #tripleo | 08:50 | |
shardy | flaper87, mandre: FYI EmilienM was pushing for CI coverage yesterday so we probably need to prioritize restoring this job and getting it in the check queue | 08:51 |
*** oneswig has quit IRC | 08:51 | |
shardy | I started looking at adding some vars to quickstart to help with that but first wanted to revive the experimental job | 08:51 |
mandre | shardy: sounds good, i also planned to look at this job today | 08:52 |
openstackgerrit | Jaganathan Palanisamy proposed openstack/tripleo-common master: WIP: Derive FixedIP parameter for public-facing VIP https://review.openstack.org/572678 | 08:52 |
openstackgerrit | Quique Llorente proposed openstack/tripleo-heat-templates stable/queens: Add keystone only job for queens https://review.openstack.org/572297 | 08:53 |
shardy | mandre: Ok cool, happy to work together on it | 08:53 |
shardy | I'm also testing some changes to quickstart-extras locally, e.g running openstack overcloud roles generate so we can make use of t-h-t/roles* instead of overriding the OpenStack ones | 08:54 |
openstackgerrit | Quique Llorente proposed openstack/tripleo-common stable/queens: Add keystone only job for queens https://review.openstack.org/572306 | 08:55 |
ccamacho | jaosorior around? | 08:56 |
ccamacho | moooorning! | 08:56 |
openstackgerrit | Quique Llorente proposed openstack/tripleo-heat-templates stable/queens: Add keystone only job for queens https://review.openstack.org/572297 | 08:56 |
mandre | shardy: great, this will make things less confusing for sure :) | 08:57 |
*** oneswig has joined #tripleo | 08:57 | |
openstackgerrit | Quique Llorente proposed openstack/puppet-tripleo stable/queens: Add keystone only job for queens https://review.openstack.org/572308 | 09:00 |
*** gfidente has joined #tripleo | 09:03 | |
*** lifeless has quit IRC | 09:05 | |
*** ooolpbot has joined #tripleo | 09:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 09:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 09:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 09:10 |
*** ooolpbot has quit IRC | 09:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 09:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 09:10 |
openstackgerrit | yolanda.robla proposed openstack/tripleo-docs master: Add Fast Forward Upgrade docs https://review.openstack.org/549892 | 09:15 |
openstackgerrit | Arx Cruz proposed openstack/tripleo-quickstart master: Using session in get-overcloud-nodes.py https://review.openstack.org/572709 | 09:20 |
flaper87 | shardy: mandre I was planning to take a look at this today | 09:20 |
shardy | flaper87: Ok - does it work if you focus on getting the experimental job running and I focus on adding things to quickstart that we were doing in the scripts? | 09:21 |
shardy | then we can combine the work and potentially move the job to the check queue as non-voting? | 09:22 |
shardy | or happy to split it some other way but don't want to duplicate effort :) | 09:23 |
*** gkadam has quit IRC | 09:25 | |
flaper87 | shardy: works for me :D | 09:29 |
*** radeks_ has quit IRC | 09:32 | |
*** zoli is now known as zoli|lunch | 09:33 | |
openstackgerrit | Quique Llorente proposed openstack/tripleo-common stable/queens: Add keystone only job for queens https://review.openstack.org/572306 | 09:34 |
*** akrivoka_ has joined #tripleo | 09:34 | |
*** akrivoka has quit IRC | 09:36 | |
openstackgerrit | Steven Hardy proposed openstack/tripleo-quickstart-extras master: Remove deprecated mitaka/liberty logic for workers https://review.openstack.org/572500 | 09:36 |
openstackgerrit | Steven Hardy proposed openstack/tripleo-quickstart-extras master: Add generate_overcloud_roles var to overcloud-deploy role https://review.openstack.org/572713 | 09:36 |
*** links has quit IRC | 09:39 | |
*** lifeless has joined #tripleo | 09:42 | |
*** karthiks has quit IRC | 09:46 | |
quiquell | Hello, executing some ssh with an ansible playbook I get a "Inappropriate ioctl for device" | 09:50 |
quiquell | I am running a fedora + i3 | 09:50 |
*** edmondsw has joined #tripleo | 09:52 | |
bandini | https://review.openstack.org/572125 simple backport if anyone has a bit of time | 09:55 |
openstackgerrit | Yong Huang proposed openstack/tripleo-heat-templates master: Update yaml files for Dell EMC VNX, Unity drivers https://review.openstack.org/572260 | 09:55 |
*** edmondsw has quit IRC | 09:56 | |
*** links has joined #tripleo | 09:57 | |
*** jaganathan has quit IRC | 10:02 | |
*** jaganathan has joined #tripleo | 10:03 | |
*** shreshtha_ has joined #tripleo | 10:04 | |
*** shreshtha has quit IRC | 10:06 | |
*** shreshtha_ has quit IRC | 10:08 | |
*** jaganathan has quit IRC | 10:08 | |
*** jaosorior has joined #tripleo | 10:08 | |
*** bkopilov has quit IRC | 10:09 | |
*** ooolpbot has joined #tripleo | 10:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 10:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 10:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 10:10 |
*** ooolpbot has quit IRC | 10:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 10:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 10:10 |
*** links has quit IRC | 10:16 | |
*** nyechiel has joined #tripleo | 10:17 | |
*** rh-jelabarre has joined #tripleo | 10:20 | |
*** lifeless has quit IRC | 10:26 | |
*** jaganathan has joined #tripleo | 10:26 | |
*** shreshtha has joined #tripleo | 10:27 | |
*** lifeless has joined #tripleo | 10:27 | |
*** shreshtha has quit IRC | 10:28 | |
*** shreshtha has joined #tripleo | 10:29 | |
*** links has joined #tripleo | 10:29 | |
*** psahoo has quit IRC | 10:46 | |
Tengu | jaosorior: https://cjeanner.github.io/ done. Now the hardest part: keep it updated. | 10:50 |
jaosorior | yeeeeah | 10:51 |
jaosorior | nice! | 10:51 |
Tengu | jaosorior: integrating the privsep thingy isn't that easy at all, especially in a big bunch of code as tripleoclient :D | 10:51 |
Tengu | already trying to get it right with correct structure and the like. Apparently the blog posts are "ahead" of cinder code it's based on - not yet merged. | 10:51 |
*** zoli|lunch is now known as zoli | 10:54 | |
*** dtantsur|afk is now known as dtantsur | 10:54 | |
openstackgerrit | Merged openstack/python-tripleoclient master: undercloud: save Rabbit credentials when upgrading https://review.openstack.org/572449 | 10:54 |
*** oneswig has quit IRC | 10:55 | |
*** mdnadeem has quit IRC | 10:56 | |
*** lifeless_ has joined #tripleo | 10:57 | |
*** lifeless has quit IRC | 10:57 | |
*** yolanda_ has quit IRC | 11:00 | |
*** yolanda_ has joined #tripleo | 11:00 | |
jaosorior | Tengu: you can always do an pudate | 11:02 |
jaosorior | *update | 11:02 |
jaosorior | or a part 2 | 11:02 |
*** lvdombrkr89 has quit IRC | 11:03 | |
jaosorior | Tengu: there is a section for blogs in tripleo.org, you could add you blog there if there's an RSS feed | 11:03 |
jaosorior | Tengu: http://tripleo.org/planet.html | 11:03 |
*** pkovar has joined #tripleo | 11:04 | |
*** karthiks has joined #tripleo | 11:04 | |
*** jpena is now known as jpena|lunch | 11:06 | |
*** bfournie has joined #tripleo | 11:10 | |
*** ooolpbot has joined #tripleo | 11:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 11:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 11:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 11:10 |
*** ooolpbot has quit IRC | 11:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 11:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 11:10 |
openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart-extras master: Create an additional network interface on subnode https://review.openstack.org/572732 | 11:10 |
*** ubijtsa has joined #tripleo | 11:10 | |
*** ubijtsa is now known as assassin | 11:10 | |
*** edmondsw has joined #tripleo | 11:12 | |
openstackgerrit | James Slagle proposed openstack-infra/tripleo-ci master: Update my blog feed https://review.openstack.org/572733 | 11:12 |
*** edmondsw has quit IRC | 11:16 | |
*** brault has quit IRC | 11:19 | |
*** edmondsw has joined #tripleo | 11:20 | |
*** thrash|g0ne is now known as thrash | 11:20 | |
*** pradk has joined #tripleo | 11:21 | |
Tengu | jaosorior: there is - at least there's a link "subscribe" :D | 11:24 |
jaosorior | Tengu: slagle just updated his blog feed, so there you can see where to add yours if you want ^^ | 11:26 |
Tengu | oh :) | 11:29 |
Tengu | hello slagle by the way :) | 11:29 |
Tengu | jaosorior: but I suppose I'll need to filter out the feed. | 11:30 |
jaosorior | Tengu: you should. I set up tags in mine, and have an rss feed for only the posts that have the tripleo tag | 11:30 |
jaosorior | I also have a geeral feed (for all the rest of the tags) | 11:31 |
*** dtantsur is now known as dtantsur|brb | 11:31 | |
openstackgerrit | Merged openstack/tripleo-quickstart master: Never remove the ansible_inventory if --dry-run is used https://review.openstack.org/572146 | 11:32 |
Tengu | jaosorior: I'll have a look later. Now: food. | 11:32 |
jaosorior | enjoy | 11:32 |
*** mburned_out is now known as mburned | 11:33 | |
*** fultonj has joined #tripleo | 11:34 | |
*** fultonj has quit IRC | 11:34 | |
slagle | Tengu: hello :) | 11:36 |
slagle | yea, saw you all chatting about the planet, and remembered i had recently migrated my blog | 11:37 |
openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Remove previous gating repo https://review.openstack.org/572736 | 11:37 |
*** dciabrin has quit IRC | 11:38 | |
*** dciabrin has joined #tripleo | 11:38 | |
*** lvdombrkr has joined #tripleo | 11:39 | |
Tengu | slagle: :) | 11:39 |
larsks | I've configured tripleo to set up ssl on a public endpoint (https://docs.openstack.org/tripleo-docs/latest/install/advanced_deployment/ssl.html). The deploy is failing because it's configuring auth_url in all the config files (a) using the public endpoint and (b) not using https, so the connections are failing. | 11:40 |
larsks | How do I fix that? I would ideally like auth_url to use the internal endpoint, rather than the public one. | 11:40 |
*** lvdombrkr89 has joined #tripleo | 11:41 | |
*** amoralej is now known as amoralej|lunch | 11:41 | |
openstackgerrit | Quique Llorente proposed openstack-infra/tripleo-ci master: [DNM] Test n -> n + delta https://review.openstack.org/570823 | 11:42 |
*** eck` is now known as eck`gone | 11:43 | |
*** waleedm has quit IRC | 11:43 | |
*** lvdombrkr has quit IRC | 11:44 | |
*** assassin has quit IRC | 11:44 | |
larsks | Ugh, I see it's using a *mix* of public and internal endpoints. E.g. in nova.conf, it's using the public endpoint in the keystone_authtoken and neutron sections, but the internal endpoint in the placement section. | 11:44 |
jaosorior | larsks: auth_url is normally configured in TripleO to use internal endpoints | 11:45 |
jaosorior | larsks: are you using a flat network or network isolation? | 11:46 |
*** morazi has joined #tripleo | 11:46 | |
jaosorior | larsks: yep, for nova it should be using the internal endpoint https://github.com/openstack/tripleo-heat-templates/blob/master/puppet/services/nova-base.yaml#L236 | 11:47 |
jaosorior | it literally points there to "KeystoneInternal" | 11:47 |
jaosorior | the default interface is also internal https://github.com/openstack/tripleo-heat-templates/blob/master/puppet/services/nova-base.yaml#L187 | 11:47 |
*** gkadam has joined #tripleo | 11:49 | |
openstackgerrit | Cédric Jeanneret proposed openstack-infra/tripleo-ci master: added cjeanner blog feed https://review.openstack.org/572739 | 11:51 |
Tengu | and bam. | 11:51 |
*** lblanchard has joined #tripleo | 11:52 | |
openstackgerrit | Ilya Etingof proposed openstack/tripleo-common master: UCS Ironic node driver info added https://review.openstack.org/528726 | 11:56 |
*** pkovar has quit IRC | 11:58 | |
*** pkovar1 has joined #tripleo | 11:58 | |
*** akrivoka_ has quit IRC | 12:00 | |
*** raildo has joined #tripleo | 12:01 | |
*** rfolco_ is now known as rfolco | 12:04 | |
*** brault has joined #tripleo | 12:04 | |
jaosorior | #startmeeting TripleO Security Squad | 12:05 |
openstack | Meeting started Wed Jun 6 12:05:08 2018 UTC and is due to finish in 60 minutes. The chair is jaosorior. Information about MeetBot at http://wiki.debian.org/MeetBot. | 12:05 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 12:05 |
*** openstack changes topic to " (Meeting topic: TripleO Security Squad)" | 12:05 | |
openstack | The meeting name has been set to 'tripleo_security_squad' | 12:05 |
jaosorior | This time it was me being a bit late :D | 12:05 |
moguimar | no worries | 12:05 |
jaosorior | lhinds, Tengu are you around? | 12:05 |
moguimar | #link https://etherpad.openstack.org/p/tripleo-security-squad | 12:05 |
jaosorior | #topic Public TLS by default work update | 12:06 |
*** openstack changes topic to "Public TLS by default work update (Meeting topic: TripleO Security Squad)" | 12:06 | |
jaosorior | As I mentioned yesterday in the TripleO weekly meeting, the public TLS by default work is currently blocked due to some decisions made about the approach we'll take to enable that. | 12:06 |
jaosorior | The first iteration added that to the deploy mistral workflow | 12:07 |
lhinds | hey jaosorior , sorry was delayed | 12:07 |
jaosorior | However, we decided to instead add that logic to the derive_parameters workflow, which is currently not enabled by default | 12:07 |
*** liverpooler has joined #tripleo | 12:07 | |
jaosorior | dervie_parameters is currently used for NFV cases, where more info is needed to be dynamically added to the deployment depending on the hosts | 12:08 |
jaosorior | but it could be generalized | 12:08 |
jaosorior | jaganathan took on the work of making that workflow more general, and even adding the Fixed IP additions we need | 12:08 |
*** akrivoka has joined #tripleo | 12:08 | |
jaosorior | He's working with the following patches | 12:08 |
jaosorior | #link https://review.openstack.org/#/c/572678/ | 12:09 |
jaosorior | #link https://review.openstack.org/#/c/572701/ | 12:09 |
jaosorior | So please review them if you have some time | 12:09 |
raildo | o/ | 12:09 |
*** ooolpbot has joined #tripleo | 12:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 12:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 12:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 12:10 |
*** ooolpbot has quit IRC | 12:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 12:10 |
*** jpena|lunch is now known as jpena | 12:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 12:10 |
jaosorior | After that work merges, we can add the code needed to get TLS by default in the overcloud on top of that | 12:10 |
jaosorior | That's all on that side | 12:10 |
jaosorior | Any questions/feedback? | 12:11 |
jaosorior | #topic Limit TripleO users | 12:12 |
*** openstack changes topic to "Limit TripleO users (Meeting topic: TripleO Security Squad)" | 12:12 | |
jaosorior | I believe Tengu and lhinds have some updates on this topic | 12:12 |
*** dbecker has joined #tripleo | 12:12 | |
*** quiquell is now known as quiquell|lunch | 12:12 | |
Tengu | woops, sorry, late. | 12:13 |
lhinds | So Tengu plans to tackle stack user, while I will look at the heat-admin and other users. We also plan to work on a spec as first prior so that a consensus can be gained over the approach. | 12:13 |
lhinds | please add if you like Tengu | 12:13 |
lhinds | there is a ML thread with some good discussion | 12:13 |
lhinds | and giving oslo.privsep a look in | 12:13 |
Tengu | actually two threads, but yep. | 12:14 |
lhinds | (in tripleo pythonclient) | 12:14 |
Tengu | fact is, oslo.privsep isn't easy to tackle, and will require "some" refactoring - but it's all for the best. We really have to write the spec/blueprint first though | 12:14 |
jaosorior | Tengu: what are the main limitations we have currently that prevent us from adopting oslo.privsep? | 12:15 |
Tengu | Following Michael blog posts we can reach a nice state. | 12:15 |
Tengu | jaosorior: well, at least in tripleoclient, the undercloud deploy is called with root - and there are many things that needs to be changed in order to launch it as a user. | 12:15 |
Tengu | mainly, there are file rights to change on the fly in the process, it starts heat daemon as heat and so on. for now, the code itself doesn't care about privileges, so there are os.chown, os.setuid and the like. | 12:16 |
Tengu | also a bunch of subprocess calls without any "sudo" or whatsover. So we will need to git-grep all of those occurences, check WHO has to run them, what are the requested rights, and finaly configure some privsep context. | 12:17 |
jaosorior | Tengu: do we have a list of things we should change so we can track them and address them systematically? | 12:17 |
jaosorior | that would probably be useful | 12:17 |
jaosorior | we already have an etherpad where we were tracking this work. lhinds do you have the link? | 12:17 |
lhinds | yup: https://twitter.com/WHS_Carpet | 12:18 |
lhinds | derp! | 12:18 |
lhinds | one sec.. | 12:18 |
jaosorior | lol | 12:18 |
Tengu | jaosorior: not really. I have a beginning of sudoers though, it might be a start. But using rootwrap (privsep) will change that | 12:18 |
*** noslzzp has joined #tripleo | 12:18 | |
lhinds | https://etherpad.openstack.org/p/tripleo-heat-admin-security | 12:19 |
Tengu | fact is, rootwrap is "just" a sudo filter so that we don't have to manage the listing directly in sudo. also, it allows a more fine-grained right management. | 12:19 |
jaosorior | #link https://etherpad.openstack.org/p/tripleo-heat-admin-security | 12:19 |
Tengu | #link https://www.madebymikal.com/how-to-make-a-privileged-call-with-oslo-privsep/ | 12:19 |
Tengu | #link https://www.madebymikal.com/adding-oslo-privsep-to-a-new-project-a-worked-example/ | 12:19 |
Tengu | those two blogposts are really interesting and put some good practices/ideas. | 12:20 |
jaosorior | OK, I'll take a look at those | 12:20 |
Tengu | it might be interesting to involve Michael Still in "our" spec writing | 12:20 |
*** trown|outtypewww is now known as trown | 12:20 | |
lhinds | so the above would cover python code, but we also need to agree an approach on general nix scripts and calls using 'sudo <command>' | 12:20 |
Tengu | as it seems it's a pretty young thing, it's the good time to write a precise spec and implement best practices for privsep use | 12:20 |
jaosorior | Tengu: is the spec you're referring to limited to the undercloud's stack user? or will it be a general approach for the overcloud user as well? | 12:21 |
openstackgerrit | Rafael Folco proposed openstack-infra/tripleo-ci master: Move scenario000-multinode-oooq-container-upgrades to check https://review.openstack.org/572187 | 12:21 |
Tengu | jaosorior: I think we should write two specs: one regarding general python coding style regarding privileges escalation; a second regarding "standard sudo calls from a shell" | 12:21 |
Tengu | lhinds: -^ this also answers your concern I think :). | 12:22 |
jaosorior | OK | 12:22 |
Tengu | I see those two issues as different issues - so different specs. | 12:22 |
lhinds | That would work, we just need to make sure we co-ordinate the patches for when we switch off :ALL | 12:22 |
Tengu | lhinds: of course we have to. | 12:22 |
jaosorior | two issues that are coverd by this overall topic though :D | 12:22 |
Tengu | jaosorior: yep. but it's best to cut it in smaller parts. | 12:23 |
Tengu | else we won't find a start nor an end. | 12:23 |
*** shreshtha has quit IRC | 12:23 | |
lhinds | and yes, use the same topic / branch name (if that would work) | 12:23 |
jaosorior | Tengu: agreed | 12:23 |
Tengu | lhinds: I've never done a spec/blueprint, care to start it somewhere (already on the etherpad I think) and I add my inputs? | 12:23 |
*** ansmith has quit IRC | 12:23 | |
lhinds | Tengu: sure, its quite simple..will kick something off | 12:24 |
jaosorior | Tengu: the etherpad is a good place to brainstorm and track things. you can even put a draft of the spec and subsequently propose it | 12:24 |
Tengu | lhinds: thank you :). | 12:24 |
Tengu | jaosorior: will see to that. | 12:24 |
*** lvdombrkr89 has quit IRC | 12:24 | |
jaosorior | Alright, that will cover then python privilege escalation | 12:24 |
lhinds | I was thinking we could do a BP with two different specs | 12:25 |
*** nyechiel has quit IRC | 12:25 | |
*** lvdombrkr has joined #tripleo | 12:25 | |
lhinds | I will get onto that, leave it with me. | 12:25 |
jaosorior | lhinds: that sounds like a good idea | 12:25 |
openstackgerrit | John Trowbridge proposed openstack-infra/tripleo-ci master: Add ability to upgrade FROM change under test https://review.openstack.org/572419 | 12:25 |
openstackgerrit | John Trowbridge proposed openstack-infra/tripleo-ci master: Add logic/tests for n->n+1 upgrades https://review.openstack.org/572420 | 12:25 |
Tengu | lhinds: forward the links, and we can work on that. | 12:25 |
lhinds | Tengu: ack, will do | 12:25 |
jaosorior | Regarding scripts and sudo usage, lhinds, wanna share the proposal? | 12:25 |
Tengu | as said - we should write a dedicated spec for that, and enforce it in order to drop that horrible NOPASSWD:ALL :). | 12:27 |
lhinds | yup, so I have a basic script to pull out all sudo calls. Plan is to get this runnning in the various project test suites (tempest) and build a whitelist of calls that are made. | 12:28 |
Tengu | there's a thread about that in the ML, and the etherpad also gives some info - we have to format all of that and separate "python privilege escalation" and "privilege escalation with sudo in scripts". | 12:28 |
lhinds | So the spec will outline how to gather sudo calls (on-going) and regexp strictness needed for whitelisting calls. | 12:28 |
Tengu | +42 | 12:29 |
lhinds | and also put together some playbooks that can apply the whitelists | 12:29 |
*** shreshtha has joined #tripleo | 12:29 | |
Tengu | hmm. would it make sense to add sudoers snippets in packages directly? | 12:29 |
lhinds | packages? | 12:29 |
Tengu | err. right, containers now, packages will drop. | 12:30 |
lhinds | sorry, yes... | 12:30 |
lhinds | spoke to jaosorior , it would be made within the image (vm / container) | 12:30 |
jaosorior | Tengu: well, each openstack project already has some sudoers files specific to the project. The main concern here is the heat-admin or tripleo-admin users which we use for the deployment, and the validations user which we use for...well, validations :D | 12:30 |
Tengu | jaosorior: as well as "stack" user I guess (on the undercloud) | 12:31 |
*** shreshtha_ has joined #tripleo | 12:31 | |
Tengu | I saw some concern regarding its extensives rights on some sites. | 12:31 |
jaosorior | Tengu: well, yeah, although ideally the stack user should only be able to do openstack commands, which we will then limit | 12:32 |
jaosorior | or the minimum set of calls to set up an undercloud | 12:32 |
shardy | it's worth noting that even if you lock down e.g heat-admin for the nodes, all API actors on the undercloud are admin, e.g you can always run arbitrary ansible tasks on the nodes even if you lock down the default user provided via the user-data | 12:32 |
lhinds | actually that's a good point.. the stack user has a lot of sudo calls for hiera work and others. | 12:32 |
Tengu | it's actually more or less the case - there are some needs for yum install - all the rest should be managed by privsep in python. | 12:32 |
*** links has quit IRC | 12:33 | |
Tengu | bah, we should manage that with user GROUPS | 12:33 |
lhinds | so spec needs to be on 'python' mgmt of escaltions, and script management | 12:33 |
lhinds | rather then stack / heat admin | 12:33 |
Tengu | i.e. hieradata owned by root:deploy - stack member of deploy group, and 0640 on the data. | 12:33 |
lhinds | or underclooud /overcloud | 12:33 |
shardy | not saying a bad idea, only that it's a small part of the overall picture with an admin-driven provisioning/management tool | 12:33 |
Tengu | yup. that's why we need some proper specs. | 12:33 |
Tengu | in order to ensure we cover the cases, step by step. | 12:33 |
Tengu | file ownership can also be a (good) solution in some cases in order to avoid so-called privilege escalations. | 12:34 |
*** shreshtha has quit IRC | 12:34 | |
openstackgerrit | Chandan Kumar proposed openstack/tripleo-quickstart-extras master: use upstream git url instead of github https://review.openstack.org/572347 | 12:34 |
jpena | I'm trying (unsuccessfully for now) to test the TripleO all-in-one installer on a VM running on my laptop. So far I'm getting http://paste.openstack.org/show/722798/ and the deployment fails. Does that ring a bell? | 12:35 |
jaosorior | Tengu, lhinds: can you sync up in order to write the needed specs? It would be beneficial to have these discussions in the spec, for easier tracking. | 12:36 |
Tengu | jpena: the error seems actually above, not the hiera thingy. nothing before that error? | 12:36 |
Tengu | jaosorior lhinds sure thing. | 12:36 |
lhinds | jaosorior: agree, lets trash the finer points in review | 12:36 |
jaosorior | Tengu, lhinds: Thanks for taking a look at this work | 12:36 |
Tengu | np | 12:36 |
jaosorior | shardy: you'll be added to the spec reviews. your feedback is always very useful :D | 12:37 |
shardy | jaosorior: ack thanks | 12:38 |
openstackgerrit | Arx Cruz proposed openstack/tripleo-quickstart master: Using session in get-overcloud-nodes.py https://review.openstack.org/572709 | 12:38 |
*** shardy has quit IRC | 12:39 | |
jaosorior | Any more thoughts/feedback/questions about this? | 12:40 |
jpena | Tengu: checking | 12:41 |
jaosorior | #topic Any other business | 12:42 |
*** openstack changes topic to "Any other business (Meeting topic: TripleO Security Squad)" | 12:42 | |
jaosorior | Anything else folks want to bring up to the meeting? | 12:42 |
moguimar | yep | 12:42 |
*** shreshtha_ has quit IRC | 12:42 | |
moguimar | me and raildo are making progress with the secrets stuff | 12:42 |
jaosorior | moguimar: can you share a bit of context for the rest of the atendees? | 12:42 |
moguimar | we're implementing backend drivers for oslo.config | 12:43 |
moguimar | to store plaintext secrets elsewhere other than in the plaintext config files | 12:43 |
raildo | #link http://specs.openstack.org/openstack/oslo-specs/specs/queens/oslo-config-drivers.html | 12:43 |
*** shardy has joined #tripleo | 12:43 | |
moguimar | the oslo.config work consists of supporting drivers and an INI driver for fetching config from an URL | 12:44 |
moguimar | then we'll add a driver for castellan | 12:44 |
*** amoralej|lunch is now known as amoralej | 12:44 | |
moguimar | so oslo.config will be able to retrieve sensitive config from castellan | 12:44 |
moguimar | after that, we'll try to integrate to tripleO | 12:45 |
moguimar | right now we're 80% done in the oslo.config and starting the work on castellan | 12:45 |
moguimar | anything you want to add raildo ? | 12:45 |
moguimar | would also be nice to bring doug to this meeting next week | 12:45 |
jaosorior | Yeah, that would be useful | 12:46 |
*** atoth has joined #tripleo | 12:46 | |
raildo | so, would be great review this current spec: https://review.openstack.org/#/c/474304/ where we should define how that integration with tripleO will be done, probably target release | 12:46 |
raildo | so, any review on that aspect will be appreciated :) | 12:47 |
Tengu | raildo: will read it at least. no +2 from me thoug - can't do that :). | 12:47 |
raildo | Tengu, haha thanks :) | 12:48 |
jaosorior | raildo: I'll check that spec out, however, once we have a bit more details on how the deployment would look like; it would be better to propose a separate spec just for TripleO integration | 12:48 |
openstackgerrit | Luke Hinds proposed openstack/tripleo-specs master: [WIP] Spec placeholder for limit sudo BP https://review.openstack.org/572760 | 12:49 |
raildo | jaosorior, sounds reasonable for me | 12:49 |
jaosorior | raildo: lhinds just uploaded a spec placeholder, so you could use that for reference :) ^^ | 12:49 |
Tengu | lhinds: just added myself on your placeholder. | 12:49 |
raildo | awesome, thanks for the hints! | 12:50 |
jaosorior | moguimar, raildo: Do you have an estimate on when you'll finish the castellan driver? | 12:50 |
lhinds | Tengu: cool, there will be another coming for pything stuff | 12:50 |
jaosorior | so we can start thinking about TripleO integration | 12:50 |
lhinds | s/pything/python | 12:50 |
moguimar | not yet | 12:50 |
raildo | jaosorior, so, the castellan driver will be target for early on Stein release | 12:50 |
jaosorior | OK | 12:51 |
raildo | but not so well defined right now | 12:51 |
moguimar | tks raildo | 12:51 |
raildo | so basically, that's no worries about that on Rocky, we can start discussing about that on PTG-ish | 12:51 |
jaosorior | sure | 12:52 |
jaosorior | raildo, moguimar: Do you want to use next week's meeting to brain storm about TripleO integration? | 12:53 |
*** nyechiel has joined #tripleo | 12:53 | |
raildo | jaosorior, that would be awesome! | 12:53 |
jaosorior | OK, I'll write it up as a topic for next week's meeting | 12:53 |
jaosorior | lets hope redrobot can make it | 12:53 |
jaosorior | raildo, moguimar: thanks for driving this effort | 12:54 |
raildo | no problem :) | 12:54 |
*** quiquell|lunch is now known as quiquell | 12:55 | |
jaosorior | any questions/feedback on this work? | 12:55 |
Tengu | raildo: just read your spec. Pretty nice :). Added a comment for tripleo integration "needs" - I'm a beginner on that topic, so there's possibility I missed something :) | 12:55 |
openstackgerrit | Luke Hinds proposed openstack/tripleo-specs master: [WIP] Spec to improve privilege mgmt in py-client https://review.openstack.org/572761 | 12:56 |
*** eck`gone is now known as eck` | 12:56 | |
Tengu | lhinds: cool :) | 12:56 |
raildo | Tengu, thanks , I'll take a look on that soon! | 12:56 |
lhinds | so both have the same topic now: | 12:56 |
lhinds | https://review.openstack.org/#/q/topic:priv-mgmt+(status:open+OR+status:merged) | 12:56 |
lhinds | we can use the same topic for patches as well | 12:57 |
lhinds | (easier to track) | 12:57 |
jaosorior | lhinds: awesome! | 12:57 |
lhinds | don't worry about naming and stuff, we can fix that up | 12:57 |
lhinds | Tengu: you can cherry pick the spec down and take over as author or co-author etc. | 12:57 |
lhinds | or just leave as it is, up to you mate | 12:58 |
jaosorior | Well, we're at the end of the meeting now | 12:58 |
Tengu | lhinds: pl | 12:58 |
jaosorior | thanks to everybody for attending | 12:58 |
Tengu | *ok | 12:58 |
lhinds | thanks jaosorior | 12:58 |
raildo | thanks ozz | 12:58 |
*** pradk has quit IRC | 12:58 | |
jaosorior | #endmeeting | 12:58 |
*** openstack changes topic to "Welcome to Rocky. CI status: GREEN as in Green Day | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest" | 12:58 | |
openstack | Meeting ended Wed Jun 6 12:58:33 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 12:58 |
openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-heat-templates master: WIP: running dstat in overcloud nodes https://review.openstack.org/557476 | 12:58 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-06-06-12.05.html | 12:58 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-06-06-12.05.txt | 12:58 |
openstack | Log: http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-06-06-12.05.log.html | 12:58 |
Tengu | lhinds: for now I'll just continue reading docs about privsep and the like. I'll see what I can write once I have a clear idea of the things I think are good. | 12:59 |
lhinds | Tengu: sounds good! | 12:59 |
Tengu | lhinds: "stupide" question, but... how do we set the "topic" on gerrit stuff? | 12:59 |
jpena | Tengu: all I can see is a similar error above, in the keystone configuration | 12:59 |
Tengu | lhinds: is it the local branch name? | 12:59 |
lhinds | Tengu: nah, you just change it on gerrit | 13:00 |
Tengu | jpena: hm, would it be possible to share the full log? | 13:00 |
Tengu | lhinds: ah, ok | 13:00 |
*** shreshtha_ has joined #tripleo | 13:00 | |
lhinds | so I created two branches and then renamed the second branch to the same topic as the first | 13:00 |
lhinds | just do it on the GUI | 13:00 |
*** noslzzp has quit IRC | 13:00 | |
jpena | Tengu: sure, let me try to upload it somewhere (too big for pastebin) | 13:00 |
lhinds | kind of hacky, but it works | 13:00 |
Tengu | lhinds: :) | 13:00 |
lhinds | Tengu: this is where we put a summary / big picture: https://blueprints.launchpad.net/tripleo/+spec/improve-privilege-mgmt-in-tripleo | 13:01 |
lhinds | all the work will be tracked in there (specs, patches etc) | 13:01 |
jpena | Tengu: https://jpena.fedorapeople.org/deployment.log.gz | 13:01 |
lhinds | Tengu: I got to go and do the school run now, but will add some meat on the bones of the BP later. | 13:02 |
lhinds | Tengu: feel free to add what you want too to the spec. | 13:02 |
lhinds | just workflow -1 until its ready for feedback | 13:02 |
*** dparkes has quit IRC | 13:02 | |
openstackgerrit | Merged openstack/tripleo-heat-templates stable/queens: Create docker-puppet.sh only once to avoid ETXTBSY errors https://review.openstack.org/572125 | 13:03 |
*** shreshtha_ has quit IRC | 13:03 | |
Tengu | lhinds: good :). Thank you for the placeholders. I'll see what I can do. | 13:03 |
*** shreshtha has joined #tripleo | 13:03 | |
Tengu | jpena: hmm, do you have any log regarding docker activity and status? i.e. is there a mysql container or the like running? | 13:03 |
*** jcoufal has joined #tripleo | 13:04 | |
*** pchavva has joined #tripleo | 13:04 | |
jpena | Tengu: I see all images were downloaded, and the mysql and keystone containers were started and exited (so none running now) | 13:04 |
Tengu | jpena: exited with what status? | 13:05 |
jpena | Tengu: 24 | 13:05 |
Tengu | damn. | 13:05 |
*** noslzzp has joined #tripleo | 13:05 | |
Tengu | so yeah, basically the container crashed for some reason | 13:05 |
Tengu | maybe you have some logs in /var/log/containers/*? | 13:05 |
Tengu | if it doesn't exit with a 0 it's a crash. | 13:06 |
jpena | I can see the directories, but just that, no log files :/ | 13:06 |
Tengu | jpena: guess there's no way I can check? or may you launch some tmate? you can even start on in a container if you want, using my docker-compose: https://github.com/cjeanner/docker-tmate-client | 13:07 |
Tengu | *start one in | 13:07 |
Tengu | (yeah, self-promotion ;)) | 13:08 |
jpena | Tengu: it's just a VM on my local machine... let me retry on a public VM, if it still fails I can give you access | 13:08 |
Tengu | jpena: with tmate no worry about NAT :) | 13:08 |
* jpena checks | 13:08 | |
Tengu | jpena: basically it's a tmux that runs remotely | 13:08 |
*** ooolpbot has joined #tripleo | 13:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 13:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775205 | 13:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 13:10 |
*** ooolpbot has quit IRC | 13:10 | |
openstack | Launchpad bug 1775205 in tripleo "Failing jobs are no longer getting the output from gate_test_oooq.sh script" [Critical,Triaged] - Assigned to Ronelle Landy (rlandy) | 13:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 13:10 |
*** dsavineau has left #tripleo | 13:13 | |
*** dsavineau has joined #tripleo | 13:15 | |
*** lifeless_ has quit IRC | 13:16 | |
*** tzumainn has joined #tripleo | 13:17 | |
*** jaosorior has quit IRC | 13:20 | |
*** dciabrin has quit IRC | 13:20 | |
*** ansmith has joined #tripleo | 13:21 | |
*** myoung_ is now known as myoung | 13:21 | |
openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Remove previous gating repo https://review.openstack.org/572736 | 13:25 |
*** mcornea has joined #tripleo | 13:25 | |
openstackgerrit | Quique Llorente proposed openstack-infra/tripleo-ci master: [DNM] Test n -> n + delta https://review.openstack.org/570823 | 13:26 |
openstackgerrit | Quique Llorente proposed openstack/tripleo-heat-templates stable/queens: [DNM] Dummy change to test fs050 and n -> n + 1 (queens -> master) https://review.openstack.org/571435 | 13:26 |
*** dprince has joined #tripleo | 13:31 | |
*** udesale has quit IRC | 13:32 | |
*** kambiz has quit IRC | 13:33 | |
*** kambiz has joined #tripleo | 13:33 | |
Tengu | lhinds: hm, can't w-1 as I'm not the owner in fact. I don't have much power on gerrit.. | 13:37 |
*** dparkes has joined #tripleo | 13:39 | |
*** eck` is now known as eck`gone | 13:40 | |
*** eck`gone is now known as eck` | 13:40 | |
*** anilvenkata has quit IRC | 13:41 | |
*** dciabrin has joined #tripleo | 13:44 | |
*** nmathew has quit IRC | 13:46 | |
openstackgerrit | Carlos Camacho proposed openstack/tripleo-validations master: Add validation to avoid having an Overcloud with underscores. https://review.openstack.org/572774 | 13:46 |
openstackgerrit | Carlos Camacho proposed openstack/tripleo-validations master: Add validation to avoid having an Overcloud with underscores. https://review.openstack.org/572774 | 13:48 |
shardy | ccamacho: Hey what exactly doesn't allow underscores now? | 13:49 |
shardy | the bug and commit message don't specify | 13:50 |
ccamacho | hey shardy deploy an Overcloud with underscores, right? sec. https://bugzilla.redhat.com/show_bug.cgi?id=1576839 | 13:50 |
openstack | bugzilla.redhat.com bug 1576839 in openstack-tripleo-validations "Underscores in stacknames will cause problems when upgrading from 10" [Medium,On_dev] - Assigned to sgolovat | 13:50 |
ccamacho | I should add the "stack name" | 13:50 |
*** bkopilov has joined #tripleo | 13:51 | |
shardy | ccamacho: how are operators supposed to fix this? | 13:52 |
shardy | you can't rename stacks | 13:52 |
*** suuuper has joined #tripleo | 13:52 | |
shardy | https://launchpad.net/tripleo/+bug/1644587 introduced this restriction by the looks of it | 13:52 |
openstack | Launchpad bug 1644587 in tripleo "[RFE]: don't allow illegal characters in plan names" [High,Fix released] - Assigned to Adriano Petrich (apetrich) | 13:52 |
* shardy wonders why we didn't just s/_/- for the hostname | 13:52 | |
* apetrich is reading back | 13:53 | |
mandre | shardy: the current failure for the openshift deployment job is caused by overcloud-prep-containers role, I think we should skip it until we figure a clean way to pull the required containers into the local registry | 13:53 |
ccamacho | ***have no idea yet, but still we need to avoid the case if there is someone using newton with the stack name using _ | 13:54 |
ccamacho | shardy do you think is a good idea the validation? | 13:54 |
openstackgerrit | Yurii Prokulevych proposed openstack/tripleo-upgrade master: Add split-stack environment support. https://review.openstack.org/572778 | 13:54 |
ccamacho | I mean for users/clients having this issue I believe they might need help doing this.. | 13:54 |
shardy | mandre: Ok sounds good - I actually started looking at that - we can either update -prep-containers to pull/push a list of extra containers, or (ideally) add the openshift ones to tripleo-common so they can be included via the normal method | 13:55 |
shardy | ccamacho: well I'm just not clear what the operator is supposed to do with it | 13:55 |
shardy | how do they recover if they deployed with some_stack_name? | 13:55 |
shardy | I'm not clear what the migration plan is - doesn't sound like there is one? | 13:56 |
ccamacho | mwhahaha seems to be a good discussion, right? ^ | 13:56 |
shardy | ccamacho: my point is it's not enough to say on upgrade "bad luck, your name is bad" | 13:56 |
shardy | we have to either provide a simple way to fix it, or resolve the hostname problem is a backwards compatible way | 13:57 |
mandre | shardy: right, same as for ceph, that should do it | 13:57 |
shardy | personally I'd favor something which just fixed the hostname instead of imposing restrictions on the plan/stack name | 13:57 |
moguimar | tks raildo | 13:58 |
*** dtantsur|brb is now known as dtantsur | 13:58 | |
ccamacho | shardy: so mm the idea here will be allowing underscores in the stack name then? How can we fix this in the plan creation? | 14:00 |
shardy | ccamacho: I'm saying not allowing them for existing deployments is not backwards compatible, so we need some way to handle that even if we disallow them for new plans | 14:00 |
shardy | an alternative would be to not try to fix this via the plan name, and instead do some character replacement to ensure the hostname is valid | 14:01 |
shardy | not certain where the best place for that would be but seems like it should be possible | 14:01 |
openstackgerrit | Carlos Camacho proposed openstack/tripleo-validations master: Add validation to avoid having an Overcloud with underscores. https://review.openstack.org/572774 | 14:02 |
ccamacho | mmm shardy what do you recommend here :) you are the rockstar xD | 14:03 |
ccamacho | What im really scared is a failed FFU because of this | 14:03 |
ccamacho | Ill at least reduce the risk of this condition to appear | 14:03 |
ccamacho | and then find a proper mechanism to fix it and backport it | 14:03 |
openstackgerrit | Chandan Kumar proposed openstack/tripleo-quickstart-extras master: Enable support for running refstack tests in TQE https://review.openstack.org/570719 | 14:04 |
*** rodolof has joined #tripleo | 14:04 | |
shardy | ccamacho: cloud-init sets the hostname on deploy, but I suspect we'd need a different method if it's necessary to modify it on update (and I'm not sure what impact that could have), maybe we could have some host_prep_tasks ansible that runs on the host and ensures a valid hostname is configured? | 14:07 |
*** ooolpbot has joined #tripleo | 14:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 14:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 14:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 14:10 |
*** ooolpbot has quit IRC | 14:10 | |
*** dtrainor has joined #tripleo | 14:14 | |
dtantsur | shardy: slightly related: do we have a list of features that we rely on cloud-init doing? | 14:14 |
*** dtrainor has quit IRC | 14:14 | |
holser__ | shardy what I think we need to validate that only on upgrade | 14:15 |
*** pradk has joined #tripleo | 14:15 | |
larsks | I've noticed that os-net-config failures, at least in some cases, don't result in the stack deploy failing. It just hangs instead. This is with Pike; do you know if this is a known problem, or if I should open a bug on the behavior? | 14:15 |
holser__ | as we may allow to install new versions with underscores | 14:15 |
shardy | dtantsur: I don't think so, we run the default modules, and by default include metadata that'll set the hostname and user-data that creates the heat-admin user (which can be disabled) | 14:15 |
shardy | operators can also include arbitrary additional user-data | 14:16 |
holser__ | ccamacho - also I don't know why we need to add validation to master | 14:16 |
dtantsur | shardy: I see, yeah. Just thinking what exactly I should re-create without Nova. Also os-net-config data? | 14:16 |
shardy | holser__: yeah my point was validating isn't enough on upgrade as the operator has no way to fix the failure | 14:17 |
shardy | dtantsur: ah, yeah I think we can just include the same user/meta-data in a config-drive? | 14:17 |
shardy | then cloud-init should do the same as it does now? | 14:17 |
dtantsur | shardy: yep, it should work. I guess I should allow arbitrary stuff passed to it | 14:18 |
shardy | that data comes from nova and heat, so I guess we'd need to wire that in | 14:18 |
dtantsur | shardy: JFYI I'm getting closer to starting integrating the thing into OoO, so expect a lot of questions in the coming weeks :) | 14:18 |
dtantsur | and probably some semi-official announcement on the ML | 14:18 |
shardy | dtantsur: great, be interested to try it when you're ready for test/review | 14:18 |
openstackgerrit | Rafael Folco proposed openstack-infra/tripleo-ci master: DNM: Use custom config release https://review.openstack.org/571813 | 14:19 |
dtantsur | shardy: totally :) I have two pain points right now: 1. understanding all the current features OoO uses; 2. understanding where in the config-download world I should plug my (future) ansible role | 14:19 |
*** pkovar1 has quit IRC | 14:20 | |
*** quiquell is now known as quiquell|off | 14:22 | |
*** pkovar has joined #tripleo | 14:24 | |
shardy | dtantsur: ack, I'll think more about (2) - we could wire it in via the heat/mistral layer but maybe it's a good opportunity to enable a more pure-ansible model, or at least figure out the steps to get to that | 14:24 |
dtantsur | shardy: yep, I'm starting to lean towards doing it in ansible right away | 14:25 |
*** skramaja_ has quit IRC | 14:25 | |
dtantsur | it will be very handy to test in the CI, since zuul v3 is also ansible-based | 14:25 |
larsks | shardy: what could cause an overcloud deploy (pike) to try using the same ControlPlane address on two different controllers? | 14:26 |
larsks | (causing os-net-config to fail, causing the deploy to hang) | 14:26 |
*** b00tcat has joined #tripleo | 14:27 | |
*** pchavva has quit IRC | 14:27 | |
openstackgerrit | Carlos Camacho proposed openstack/tripleo-validations stable/newton: Add validation to avoid the upgrade if the Overcloud stack name has underscores. https://review.openstack.org/572789 | 14:27 |
larsks | dsneddon: ^^^ if you have any thoughts... | 14:28 |
shardy | larsks: Hmm not sure, the ctlplane IPs should be allocated via dhcp - are you using a custom nic template? | 14:28 |
*** fzdarsky has joined #tripleo | 14:29 | |
*** cshastri has quit IRC | 14:29 | |
shardy | larsks: re the hanging, on old releases that was due to the way os-net-config is invoked, which was previously an os-refresh-config element but more recently is a script | 14:29 |
shardy | https://github.com/openstack/tripleo-heat-templates/blob/stable/pike/network/scripts/run-os-net-config.sh | 14:29 |
shardy | larsks: so on pike it should never hang unless that script is hanging for some reason | 14:30 |
larsks | shardy: we are using a custom nic template. we're assigning controlplane ips statically right now. | 14:30 |
larsks | (This is a deploy onto pre-provisioned servers) | 14:30 |
shardy | larsks: we don't support static ips for the ctlplane | 14:31 |
*** moguimar_ has joined #tripleo | 14:31 | |
larsks | shardy: it seems to hang pretty reliably when I hit os-net-config failures. I'm not sure how to debug for more details, though. | 14:31 |
*** moguimar has quit IRC | 14:31 | |
larsks | The last thing that shows up is the "[overcloud.ComputeDeployedServerIpListMap]: CREATE_COMPLETE state changed" message. | 14:31 |
shardy | larsks: if you try putting a specific IP in the nic config, it'll be applied to all nodes, which probably explains your issue? | 14:31 |
larsks | shardy: we don't have a specific ip in the config. Just use_dhcp: false. | 14:32 |
larsks | The deploy actually *does* work, sometimes :) | 14:32 |
shardy | larsks: Ok I'd check the /var/log/messages on the node for clues - if it's running os-net-config (or that script) you can probably re-run it on the node to debug | 14:32 |
shardy | larsks: so how does it get the IP then? | 14:32 |
larsks | shardy: like this: https://github.com/CCI-MOC/rhosp-director-config/blob/master/templates/network/config/controller.yaml#L131 | 14:34 |
larsks | That came straight from an example somewhere, I think, but maybe it's erroneous? | 14:35 |
shardy | larsks: ack, yeah that should be referencing the ctlplane port we create for each node | 14:36 |
shardy | larsks: can you still access the node via the network after the failure? | 14:36 |
*** tzumainn has quit IRC | 14:37 | |
larsks | I can (primary ingress isn't via the controlplane network), which is how i was able to find the os-net-config failure in the first place. But I've just rebuilt the node and started a new deploy, and the problem may or may not crop up again. | 14:37 |
*** tzumainn has joined #tripleo | 14:38 | |
shardy | larsks: yeah I'm just wondering if there's a duplicate interface since the ctlplane should be configured during the deployment - you could probably debug by running os-net-config and checking the state of all the nics before/after | 14:39 |
*** rpioso|afk is now known as rpioso | 14:40 | |
openstackgerrit | Cédric Jeanneret proposed openstack/tripleo-specs master: [WIP] Spec to improve privilege mgmt in py-client https://review.openstack.org/572761 | 14:40 |
larsks | I'll see what additional details I can find if this crops up again. Should be soon if it's going to happen this time... | 14:41 |
*** lvdombrkr has quit IRC | 14:42 | |
*** radek__ has quit IRC | 14:43 | |
*** pdeore has quit IRC | 14:44 | |
*** pdeore has joined #tripleo | 14:45 | |
openstackgerrit | Cédric Jeanneret proposed openstack/tripleo-specs master: [WIP] Spec to improve privilege mgmt in py-client https://review.openstack.org/572761 | 14:45 |
Tengu | lhinds: ah, icymi: git review -t priv-mgmt :) | 14:45 |
*** shardy has quit IRC | 14:47 | |
*** shardy has joined #tripleo | 14:47 | |
*** itlinux has quit IRC | 14:50 | |
larsks | shardy: so, it happened again...but it seems to be lying? The error is: Error, some other host (52:54:00:EB:00:48) already uses address 192.168.24.12. | 14:51 |
larsks | ...but if I log into that other host, it has .24.10 assigned to the corresponding interface. | 14:51 |
d0ugal | Workflow Squad meeting in 8 mins. https://etherpad.openstack.org/p/tripleo-workflows-squad-status /cc rbrady,apetrich,thrash,toure,jtomasek | 14:52 |
larsks | And if I manually run os-net-config it succeeds. | 14:52 |
*** morazi has quit IRC | 14:52 | |
*** moguimar_ has quit IRC | 14:53 | |
*** noslzzp has quit IRC | 14:54 | |
shardy | larsks: Hmm - that's why I was wondering if the ctlplane nic or IP got changed on the first run f os-net-config - can you see from the logs that some other address was previously configured? | 14:57 |
openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart master: Create an additional network interface on libvirt subnode https://review.openstack.org/572798 | 14:57 |
Tengu | see you tomorrow :). | 14:57 |
*** rodolof has quit IRC | 14:58 | |
larsks | shardy: I don't see any evidence that 192.168.24.12 was ever assigned to the wrong host (I looked at journalctl | grep 192.168.24.12, as well as the contents of /var/lib/heat-config) | 14:59 |
*** rodolof has joined #tripleo | 14:59 | |
*** dbecker has quit IRC | 15:01 | |
*** aufi has quit IRC | 15:01 | |
shardy | larsks: do you see anything in the arp table to confirm the error? | 15:01 |
*** dbecker has joined #tripleo | 15:01 | |
larsks | I don't. | 15:02 |
*** pchavva has joined #tripleo | 15:02 | |
shardy | larsks: Ok, not sure what to suggest other than figuring out what 52:54:00:EB:00:48 refers to | 15:02 |
*** noslzzp has joined #tripleo | 15:03 | |
*** rodolof has quit IRC | 15:03 | |
*** rodolof has joined #tripleo | 15:03 | |
larsks | It's the control plane interface on another host (which is where I've been looking for evidence that the conflicting ip was ever assigned there). | 15:03 |
shardy | larsks: what happens if you ifdown the ctlplane on that host then bring it back up with dhcp? | 15:04 |
openstackgerrit | Carlos Camacho proposed openstack/tripleo-docs master: Add keystone credential-keys and fernet-keys clarification when restoring the Undercloud https://review.openstack.org/572800 | 15:04 |
larsks | There is no dhcp service on the controlplane. It's a vlan interface, so if I ifdown it the interface goes away, but I can just dhclient on the interface when it's up and it does not receive a response from any dhcp server. | 15:05 |
larsks | I'll spend some more time digging around to see what I can find. meanwhile, if I want to poke the deploy so that it continues, how do I do that? | 15:06 |
shardy | larsks: the deploy will hang if any nodes lose connectivity to the undercloud via the ctlplane network | 15:06 |
shardy | as they signal back to heat & poll for metadata on that network | 15:06 |
*** michchap_ has quit IRC | 15:06 | |
shardy | larsks: so I think you'll have to fix the network, then re-run the deploy command | 15:07 |
larsks | Right, but having run os-net-config successfully by hand, can I signal heat manually? | 15:07 |
*** pchavva has quit IRC | 15:07 | |
shardy | larsks: yes you can do heat resource-signal <stack id> resourcename, or check the logs on the node for the curl call when we signal via heat-config-notify and re-run it | 15:07 |
larsks | Okay, I'll give that a try and see what happens. Thanks for your time! | 15:08 |
shardy | larsks: np, good luck! | 15:08 |
*** ratailor has quit IRC | 15:08 | |
openstackgerrit | Martin André proposed openstack/tripleo-common master: [WIP] Add container images needed for OpenShift https://review.openstack.org/572802 | 15:09 |
*** pdeore has quit IRC | 15:09 | |
mandre | shardy: ^^ this is the first piece to the puzzle | 15:09 |
*** michchap has joined #tripleo | 15:09 | |
openstackgerrit | Thomas Herve proposed openstack/tripleo-common master: Optimize horizon URI retrieval https://review.openstack.org/572431 | 15:09 |
openstackgerrit | Carlos Camacho proposed openstack/tripleo-docs master: Add keystone credential-keys and fernet-keys clarification when restoring the Undercloud https://review.openstack.org/572800 | 15:09 |
*** pdeore has joined #tripleo | 15:10 | |
*** ooolpbot has joined #tripleo | 15:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 15:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 15:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 15:10 |
*** ooolpbot has quit IRC | 15:10 | |
*** artom has quit IRC | 15:11 | |
shardy | mandre: nice, thanks, then we need the *Image params in t-h-t I guess | 15:11 |
shardy | can we assume the same etcd image? | 15:11 |
*** hjensas has quit IRC | 15:12 | |
openstackgerrit | Michael Bayer proposed openstack/tripleo-specs master: Region Support https://review.openstack.org/566448 | 15:12 |
mandre | shardy: i hope we're able to use the same etcd image, yeah | 15:12 |
shardy | mandre: Ok sounds good | 15:12 |
openstackgerrit | Tim Rozet proposed openstack/puppet-tripleo master: Adds check and resyncs ODL/OVS OF pipeline https://review.openstack.org/572804 | 15:16 |
*** pblaho has quit IRC | 15:20 | |
*** pdeore has quit IRC | 15:21 | |
*** janki has quit IRC | 15:22 | |
*** moguimar has joined #tripleo | 15:23 | |
*** radek__ has joined #tripleo | 15:23 | |
*** pcaruana has quit IRC | 15:23 | |
openstackgerrit | Martin André proposed openstack/tripleo-heat-templates master: Add docker service to OpenShift CI roles https://review.openstack.org/572806 | 15:24 |
openstackgerrit | Thomas Herve proposed openstack/tripleo-common master: Don't resolve outputs when getting stacks https://review.openstack.org/572807 | 15:25 |
openstackgerrit | Thomas Herve proposed openstack/tripleo-common master: Don't resolve outputs when getting stacks https://review.openstack.org/572807 | 15:27 |
openstackgerrit | Harry Rybacki proposed openstack/tripleo-quickstart master: DNM: Testing CI issue w/ depends-on https://review.openstack.org/572809 | 15:27 |
*** abishop has quit IRC | 15:29 | |
*** rajinir has joined #tripleo | 15:30 | |
weshay | marios, https://review.openstack.org/#/c/572187/5/playbooks/tripleo-ci/run.yaml | 15:33 |
*** alee_ has quit IRC | 15:33 | |
*** jbadiapa has quit IRC | 15:33 | |
weshay | rfolco, hey.. re: https://review.openstack.org/#/c/572187/ | 15:33 |
weshay | rfolco, can we ditch the addition to run.yaml | 15:33 |
*** saneax has quit IRC | 15:35 | |
*** itlinux has joined #tripleo | 15:37 | |
*** dparkes has quit IRC | 15:37 | |
*** sshnaidm|brq has quit IRC | 15:37 | |
*** ukalifon has quit IRC | 15:37 | |
*** bogdando has quit IRC | 15:38 | |
*** ramishra has quit IRC | 15:39 | |
*** dxiri has joined #tripleo | 15:39 | |
*** ykarel|training has quit IRC | 15:39 | |
*** dxiri has quit IRC | 15:40 | |
openstackgerrit | Carlos Camacho proposed openstack/tripleo-validations stable/newton: Add validation to avoid the upgrade if the Overcloud stack name has underscores. https://review.openstack.org/572789 | 15:40 |
*** dxiri has joined #tripleo | 15:40 | |
*** jpich has quit IRC | 15:44 | |
openstackgerrit | Martin André proposed openstack/tripleo-common master: Revert "Revert "Pass connection info via ansible config file"" https://review.openstack.org/568781 | 15:45 |
*** pchavva has joined #tripleo | 15:47 | |
*** janki has joined #tripleo | 15:49 | |
*** itlinux has quit IRC | 15:52 | |
*** fragatina has joined #tripleo | 15:55 | |
openstackgerrit | Ilya Etingof proposed openstack/tripleo-common master: ensure unique ironic node ID with UCS driver https://review.openstack.org/528726 | 15:56 |
*** radek__ has quit IRC | 15:58 | |
openstackgerrit | Tim Rozet proposed openstack/puppet-tripleo master: Adds check and resyncs ODL/OVS OF pipeline https://review.openstack.org/572804 | 15:59 |
*** hjensas has joined #tripleo | 15:59 | |
*** hjensas has quit IRC | 15:59 | |
*** hjensas has joined #tripleo | 15:59 | |
openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates stable/queens: GATE CHECK for TripleO https://review.openstack.org/567224 | 16:00 |
*** shreshtha has quit IRC | 16:01 | |
*** shardy has quit IRC | 16:03 | |
*** homeski has quit IRC | 16:03 | |
*** homeski has joined #tripleo | 16:04 | |
*** shardy has joined #tripleo | 16:04 | |
*** leanderthal has quit IRC | 16:05 | |
openstackgerrit | Toure Dunnon proposed openstack/python-tripleoclient master: Release notes warning for mixing multiple command line clients. https://review.openstack.org/570971 | 16:05 |
*** pchavva has quit IRC | 16:07 | |
*** dbecker has quit IRC | 16:08 | |
openstackgerrit | Arx Cruz proposed openstack/tripleo-quickstart master: Using session in get-overcloud-nodes.py https://review.openstack.org/572709 | 16:08 |
*** trown is now known as trown|lunch | 16:09 | |
*** ooolpbot has joined #tripleo | 16:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 16:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 16:10 |
*** ooolpbot has quit IRC | 16:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 16:10 |
*** homeski has quit IRC | 16:12 | |
*** zoli is now known as zoli|gone | 16:12 | |
*** homeski has joined #tripleo | 16:12 | |
*** zoli|gone is now known as zoli | 16:12 | |
*** gkadam has quit IRC | 16:15 | |
*** homeski has quit IRC | 16:21 | |
*** homeski has joined #tripleo | 16:22 | |
*** fragatina has quit IRC | 16:22 | |
*** pradk has quit IRC | 16:23 | |
*** bogdando has joined #tripleo | 16:26 | |
*** alee has joined #tripleo | 16:26 | |
openstackgerrit | Rafael Folco proposed openstack-infra/tripleo-ci master: Move scenario000-multinode-oooq-container-upgrades to check https://review.openstack.org/572187 | 16:29 |
holser__ | dtantsur interesting thing is going on, due to bug in libvirt introspection failed 'timed out' | 16:33 |
holser__ | however overcloud deploy didn't check that fact and started deployment even when half of node were out of service | 16:34 |
*** apetrich has quit IRC | 16:34 | |
holser__ | http://pastebin.test.redhat.com/600262 | 16:35 |
*** pkovar has quit IRC | 16:35 | |
*** apetrich has joined #tripleo | 16:35 | |
holser__ | so undercloud didn't check the fact that deployment of overcloud will fail | 16:36 |
*** homeski has quit IRC | 16:37 | |
*** homeski has joined #tripleo | 16:37 | |
*** nyechiel has quit IRC | 16:38 | |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart-extras master: Add a role for the standalone deployment https://review.openstack.org/572220 | 16:39 |
*** pradk has joined #tripleo | 16:40 | |
chandankumar | apetrich: https://review.openstack.org/#/c/572697/ done | 16:40 |
*** mcornea has quit IRC | 16:40 | |
dtantsur | holser__: fun. yeah, I seem to recall that under some conditions the introspection results are ignored. Mind making a proper bug report out of it? | 16:41 |
dtantsur | probably with some dump of mistral logs and/or workflow states | 16:41 |
dtantsur | d0ugal: ^^^ | 16:41 |
holser__ | http://pastebin.test.redhat.com/600208 | 16:41 |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart master: use fs config to assign standalone role https://review.openstack.org/572830 | 16:41 |
openstackgerrit | Ben Nemec proposed openstack/puppet-tripleo master: Fix designate-api hiera references https://review.openstack.org/572831 | 16:42 |
*** mcornea has joined #tripleo | 16:43 | |
holser__ | dtantsur - I have opened bug https://bugs.launchpad.net/tripleo/+bug/1775431 | 16:44 |
openstack | Launchpad bug 1775431 in tripleo "overcloud depoyment happened after failed introspection" [Undecided,New] - Assigned to Dmitry Tantsur (divius) | 16:44 |
holser__ | I might needed to do it on storyboard | 16:44 |
dtantsur | yeah. I also cannot promise to work on it soon, d0ugal may beat me to it (or may not) | 16:45 |
*** pradk- has joined #tripleo | 16:47 | |
weshay | looking for input on upgrade job in check https://review.openstack.org/#/c/572187/ | 16:47 |
*** pradk has quit IRC | 16:49 | |
*** myoung is now known as myoung|lunch | 16:50 | |
openstackgerrit | Harald Jensås proposed openstack/tripleo-quickstart-extras master: Fix typo in config-download template so it match neturon api https://review.openstack.org/572835 | 16:51 |
openstackgerrit | Harald Jensås proposed openstack/tripleo-heat-templates master: Get ctlplane interface config from the subnet https://review.openstack.org/569547 | 16:52 |
*** brault has quit IRC | 16:55 | |
ccamacho | matbu still around? | 16:55 |
ccamacho | chem also, one thing, I added the keystone sync to the docs as at the end that was the issue, when reinstalling the Undercloud puppet was regenerating the keys. | 16:56 |
ccamacho | simple docs review (I paragraph with explanation and 1 rsync line)https://review.openstack.org/#/c/572800/ | 16:57 |
chem | ccamacho: ack | 16:57 |
*** ffiore has quit IRC | 16:58 | |
matbu | ccamacho: im here | 16:58 |
matbu | ccamacho: ack | 16:58 |
ccamacho | please if you can check it would be awesome | 16:58 |
ccamacho | :) | 16:58 |
ccamacho | thanks! | 16:58 |
ccamacho | <3 | 16:58 |
*** anilvenkata has joined #tripleo | 17:01 | |
*** kopecmartin has quit IRC | 17:02 | |
*** trown|lunch is now known as trown | 17:03 | |
openstackgerrit | Merged openstack/tripleo-common stable/pike: Add a 'trash_output' flag to ansible playbook action https://review.openstack.org/572064 | 17:03 |
*** fragatina has joined #tripleo | 17:05 | |
*** derekh has quit IRC | 17:06 | |
openstackgerrit | Tim Rozet proposed openstack/puppet-tripleo master: Adds check and resyncs ODL/OVS OF pipeline https://review.openstack.org/572804 | 17:08 |
openstackgerrit | Michele Baldessari proposed openstack/tripleo-heat-templates master: WIP Introduce restart_bundle containers to detect config changes and restart pacemaker resources https://review.openstack.org/572840 | 17:08 |
openstackgerrit | Merged openstack/tripleo-docs master: Add keystone credential-keys and fernet-keys clarification when restoring the Undercloud https://review.openstack.org/572800 | 17:08 |
*** janki has quit IRC | 17:09 | |
*** ooolpbot has joined #tripleo | 17:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 17:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 17:10 |
*** ooolpbot has quit IRC | 17:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 17:10 |
*** pchavva has joined #tripleo | 17:12 | |
*** bogdando has quit IRC | 17:12 | |
*** shardy has quit IRC | 17:13 | |
*** rodolof has quit IRC | 17:13 | |
*** rodolof has joined #tripleo | 17:13 | |
*** yprokule has quit IRC | 17:14 | |
*** dbecker has joined #tripleo | 17:19 | |
*** nyechiel has joined #tripleo | 17:26 | |
*** suuuper has quit IRC | 17:28 | |
*** akrivoka has quit IRC | 17:28 | |
*** holser__ has quit IRC | 17:32 | |
*** edmondsw has quit IRC | 17:32 | |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart master: use fs config to assign standalone role, tests https://review.openstack.org/572830 | 17:34 |
*** anilvenkata has quit IRC | 17:37 | |
*** jpena is now known as jpena|off | 17:40 | |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart master: use fs config to assign standalone role, tests https://review.openstack.org/572830 | 17:43 |
*** edmondsw has joined #tripleo | 17:45 | |
*** fragatina has quit IRC | 17:46 | |
*** fragatina has joined #tripleo | 17:46 | |
*** rodolof has quit IRC | 17:47 | |
*** amoralej is now known as amoralej|off | 17:54 | |
*** rodolof has joined #tripleo | 17:55 | |
*** pchavva has quit IRC | 17:57 | |
*** pchavva has joined #tripleo | 17:59 | |
*** mcornea has quit IRC | 18:05 | |
*** radeks has joined #tripleo | 18:06 | |
openstackgerrit | Tim Rozet proposed openstack/puppet-tripleo master: Adds check and resyncs ODL/OVS OF pipeline https://review.openstack.org/572804 | 18:06 |
*** eck` is now known as eck`gone | 18:09 | |
*** mcornea has joined #tripleo | 18:10 | |
*** michchap has quit IRC | 18:10 | |
*** ooolpbot has joined #tripleo | 18:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 18:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 18:10 |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 18:10 |
*** ooolpbot has quit IRC | 18:10 | |
*** pchavva has quit IRC | 18:14 | |
*** michchap has joined #tripleo | 18:14 | |
openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates master: Add tempest container to docker.yaml https://review.openstack.org/572858 | 18:15 |
*** myoung|lunch is now known as myoung | 18:18 | |
*** morazi has joined #tripleo | 18:27 | |
*** rajinir has quit IRC | 18:29 | |
*** dtantsur is now known as dtantsur|afk | 18:30 | |
*** pchavva has joined #tripleo | 18:30 | |
*** yamahata has quit IRC | 18:31 | |
*** pradk- has quit IRC | 18:33 | |
*** itlinux has joined #tripleo | 18:33 | |
*** pradk has joined #tripleo | 18:35 | |
hamzy | where is heat getting ip_netmask from? I am seeing incorrect values in: | 18:44 |
hamzy | {"network_config": [{"addresses": [{"ip_netmask": "9.114.219.196/24"}], "dns_servers": ["8.8.8.8", "8.8.4.4"], "name": "nic1", "routes": [{"ip_netmask": "169.254.169.254/32", "next_hop": "9.114.219.30"}], "type": "interface", "use_dhcp": false}, {"addresses": [{"ip_netmask": "9.114.219.196/24"}], "dns_servers": ["8.8.8.8", "8.8.4.4"], "members": [{"name": "nic3", "primary": true, "type": "interface"}], "name": "br-ex", "routes": | 18:44 |
hamzy | [{"default": true, "next_hop": "9.114.118.254"}], "type": "ovs_bridge", "use_dhcp": false}]} | 18:44 |
hamzy | both ip_netmasks are the same and nic3 should be on a different subnet. | 18:45 |
hamzy | 2: eno2 inet 9.114.219.44/24 brd 9.114.219.255 scope global dynamic eno2\ valid_lft 36376sec preferred_lft 36376sec | 18:46 |
hamzy | 3: eno3 inet 9.114.219.197/24 brd 9.114.219.255 scope global dynamic eno3\ valid_lft 408sec preferred_lft 408sec | 18:46 |
hamzy | 4: eno4 inet 9.114.118.241/24 brd 9.114.118.255 scope global dynamic eno4\ valid_lft 79589sec preferred_lft 79589sec | 18:46 |
openstackgerrit | Tim Rozet proposed openstack/tripleo-heat-templates stable/queens: Add flag to enable QoS DSCP marking in ODL https://review.openstack.org/572867 | 18:47 |
*** yamahata has joined #tripleo | 18:51 | |
*** rbowen has joined #tripleo | 18:54 | |
*** hjensas has quit IRC | 18:56 | |
*** radeks has quit IRC | 18:57 | |
*** pchavva has quit IRC | 18:57 | |
*** ooolpbot has joined #tripleo | 19:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 19:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 19:10 |
*** ooolpbot has quit IRC | 19:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 19:10 |
*** eck`gone is now known as eck` | 19:11 | |
*** tzumainn has quit IRC | 19:13 | |
*** radeks has joined #tripleo | 19:17 | |
*** rajinir has joined #tripleo | 19:18 | |
*** nyechiel has quit IRC | 19:27 | |
openstackgerrit | Doug Hellmann proposed openstack/instack master: fix tox python3 overrides https://review.openstack.org/572904 | 19:27 |
*** nyechiel has joined #tripleo | 19:28 | |
*** atoth has quit IRC | 19:32 | |
*** lifeless has joined #tripleo | 19:35 | |
openstackgerrit | Rajini Karthik proposed openstack/puppet-tripleo stable/queens: Remove share_backend_name from Dell-EMC manila backends https://review.openstack.org/572931 | 19:36 |
*** rodolof has quit IRC | 19:38 | |
openstackgerrit | Matt Young proposed openstack/tripleo-heat-templates master: DMN: Testing tripleo-ci upgrade logic (sprint 14) https://review.openstack.org/572933 | 19:38 |
*** slaweq has quit IRC | 19:39 | |
*** rodolof has joined #tripleo | 19:39 | |
*** slaweq_ has joined #tripleo | 19:42 | |
*** slaweq has joined #tripleo | 19:44 | |
openstackgerrit | Matt Young proposed openstack/tripleo-heat-templates stable/queens: DMN: Testing tripleo-ci upgrade logic (sprint 14) (queens) https://review.openstack.org/572937 | 19:47 |
*** fzdarsky has quit IRC | 19:50 | |
openstackgerrit | Rafael Folco proposed openstack-infra/tripleo-ci master: Run fs037 on queens https://review.openstack.org/570902 | 19:51 |
*** slaweq has quit IRC | 19:51 | |
*** slaweq has joined #tripleo | 19:54 | |
*** slaweq__ has joined #tripleo | 19:54 | |
*** slaweq__ has quit IRC | 19:54 | |
*** slaweq has quit IRC | 19:54 | |
*** slaweq has joined #tripleo | 19:54 | |
*** slaweq__ has joined #tripleo | 19:55 | |
*** slaweq has quit IRC | 19:55 | |
*** slaweq__ has quit IRC | 19:55 | |
*** slaweq has joined #tripleo | 19:55 | |
*** slaweq_ has quit IRC | 19:56 | |
*** slaweq has quit IRC | 19:57 | |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart-extras master: Add a role for the standalone deployment https://review.openstack.org/572220 | 19:59 |
*** dprince has quit IRC | 20:03 | |
*** holser__ has joined #tripleo | 20:04 | |
*** fzdarsky has joined #tripleo | 20:04 | |
*** ooolpbot has joined #tripleo | 20:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 20:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 20:10 |
*** ooolpbot has quit IRC | 20:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 20:10 |
*** liverpooler has quit IRC | 20:10 | |
*** raildo has quit IRC | 20:15 | |
*** radeks has quit IRC | 20:16 | |
*** fzdarsky has quit IRC | 20:16 | |
openstackgerrit | Merged openstack/tripleo-validations master: Fix node health validation with inventory changes https://review.openstack.org/566900 | 20:17 |
*** tzumainn has joined #tripleo | 20:31 | |
*** ansmith has quit IRC | 20:31 | |
*** radeks has joined #tripleo | 20:32 | |
*** dxiri has quit IRC | 20:32 | |
*** artom has joined #tripleo | 20:40 | |
openstackgerrit | mathieu bultel proposed openstack/tripleo-heat-templates stable/queens: Add sanity checks for xinetd service restart. https://review.openstack.org/572998 | 20:43 |
*** dxiri has joined #tripleo | 20:47 | |
*** jcoufal has quit IRC | 20:48 | |
openstackgerrit | Matt Young proposed openstack/tripleo-heat-templates master: DMN: Testing tripleo-ci upgrade logic (sprint 14) (change2) https://review.openstack.org/573000 | 20:55 |
*** rh-jelabarre has quit IRC | 20:56 | |
openstackgerrit | Matt Young proposed openstack/tripleo-heat-templates master: DMN: Testing tripleo-ci upgrade logic (sprint 14) (change2) https://review.openstack.org/573000 | 20:56 |
*** trown is now known as trown|outtypewww | 20:57 | |
*** fragatina has quit IRC | 20:58 | |
*** fragatina has joined #tripleo | 20:59 | |
*** rh-jelabarre has joined #tripleo | 21:01 | |
*** fragatina has quit IRC | 21:01 | |
*** fragatina has joined #tripleo | 21:01 | |
*** rbowen has quit IRC | 21:02 | |
*** holser___ has joined #tripleo | 21:02 | |
*** radeks has quit IRC | 21:04 | |
*** holser__ has quit IRC | 21:06 | |
*** myoung is now known as myoung|off | 21:06 | |
openstackgerrit | Jiri Tomasek proposed openstack/tripleo-ui master: Pass currentPlanName when fetching available roles https://review.openstack.org/573006 | 21:09 |
*** edmondsw has quit IRC | 21:09 | |
*** ooolpbot has joined #tripleo | 21:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 21:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 21:10 |
*** ooolpbot has quit IRC | 21:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 21:10 |
jtomasek | honza: In case you're still here, could you please check https://review.openstack.org/573006 | 21:13 |
*** jcoufal has joined #tripleo | 21:16 | |
*** jcoufal has quit IRC | 21:18 | |
openstackgerrit | Jiri Tomasek proposed openstack/tripleo-ui stable/queens: Pass currentPlanName when fetching available roles https://review.openstack.org/573011 | 21:20 |
*** ansmith has joined #tripleo | 21:22 | |
*** lifeless_ has joined #tripleo | 21:22 | |
*** lifeless has quit IRC | 21:23 | |
openstackgerrit | wes hayutin proposed openstack/tripleo-quickstart-extras master: Add a role for the standalone deployment https://review.openstack.org/572220 | 21:24 |
*** dciabrin has quit IRC | 21:27 | |
*** holser___ has quit IRC | 21:32 | |
*** itlinux has quit IRC | 21:36 | |
*** itlinux has joined #tripleo | 21:37 | |
*** itlinux has quit IRC | 21:37 | |
*** pradk has quit IRC | 21:39 | |
trozet | urgent: can i get some cores to review https://review.openstack.org/#/c/572804/ please? | 21:40 |
trozet | slagle: ^ please | 21:41 |
*** mcornea has quit IRC | 21:41 | |
trozet | flaper87:^^ | 21:41 |
trozet | dsneddon:^^^ | 21:42 |
dsneddon | trozet, I'm looking | 21:42 |
*** mcornea has joined #tripleo | 21:48 | |
dsneddon | trozet, In opendaylight.pp you have the comment " # Workaround until OpenDayight is capable of synchronizing flows". Do you have a bug number that applies to the workaround that could be placed in comments? | 21:49 |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use the in-built image prepare for undercloud install https://review.openstack.org/571613 | 21:50 |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use role tripleo-modify-image to update containers https://review.openstack.org/571631 | 21:50 |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use "openstack tripleo container image prepare" https://review.openstack.org/568403 | 21:50 |
trozet | dsneddon: i just filed RHBZ earlier today | 21:51 |
trozet | dsneddon: this is quite urgent though, so i think restarting ci for a comment is not a good idea | 21:51 |
trozet | dsneddon, but your comment is valid | 21:51 |
dsneddon | trozet, It's fine as-is, but if you do another pass maybe include a reference to https://bugs.launchpad.net/tripleo/+bug/1775436 if that bug applies to that comment. | 21:51 |
openstack | Launchpad bug 1775436 in tripleo "OVS missing random OpenFlow tables with OpenDaylight deployment" [Critical,In progress] - Assigned to Tim Rozet (trozet) | 21:51 |
trozet | dsneddon: will do | 21:52 |
dsneddon | trozet, If you poke me again I'll put my +2 on the new patchset. | 21:53 |
*** rcernin has joined #tripleo | 21:54 | |
*** artom has quit IRC | 21:55 | |
*** toure is now known as toure|gone | 21:56 | |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use the in-built image prepare for undercloud install https://review.openstack.org/571613 | 22:04 |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use role tripleo-modify-image to update containers https://review.openstack.org/571631 | 22:04 |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Use "openstack tripleo container image prepare" https://review.openstack.org/568403 | 22:04 |
*** edmondsw has joined #tripleo | 22:06 | |
*** nyechiel has quit IRC | 22:08 | |
*** dbecker has quit IRC | 22:09 | |
*** ooolpbot has joined #tripleo | 22:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 22:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 22:10 |
*** ooolpbot has quit IRC | 22:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 22:10 |
*** gfidente has quit IRC | 22:10 | |
*** edmondsw has quit IRC | 22:10 | |
*** noslzzp has quit IRC | 22:13 | |
*** rodolof has quit IRC | 22:17 | |
*** lifeless_ has quit IRC | 22:34 | |
*** lifeless has joined #tripleo | 22:34 | |
*** rlandy|rover is now known as rlandy|rover|bbl | 22:37 | |
*** pmannidi has joined #tripleo | 22:39 | |
*** rh-jelabarre has quit IRC | 22:43 | |
*** rh-jelabarre has joined #tripleo | 22:47 | |
*** threestrands has joined #tripleo | 22:51 | |
*** mrunge has quit IRC | 23:09 | |
*** rajinir has quit IRC | 23:09 | |
*** ooolpbot has joined #tripleo | 23:10 | |
ooolpbot | URGENT TRIPLEO TASKS NEED ATTENTION | 23:10 |
ooolpbot | https://bugs.launchpad.net/tripleo/+bug/1775209 | 23:10 |
*** ooolpbot has quit IRC | 23:10 | |
openstack | Launchpad bug 1775209 in tripleo "docker permission denied on upgrade prep containers" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker) | 23:10 |
*** mrunge has joined #tripleo | 23:12 | |
*** mrunge_ has joined #tripleo | 23:15 | |
*** mrunge has quit IRC | 23:17 | |
openstackgerrit | Merged openstack/tripleo-heat-templates master: Add sanity checks for xinetd service restart. https://review.openstack.org/572327 | 23:19 |
*** gavit has joined #tripleo | 23:27 | |
gavit | hi all | 23:27 |
*** tosky has quit IRC | 23:31 | |
gavit | I'm running the config/nodes/1ctlr_1comp.yml with the quickstart, but I see red parts (failed with a different errors), should I care? the script is continuing | 23:36 |
*** lifeless has quit IRC | 23:46 | |
*** lifeless has joined #tripleo | 23:46 | |
*** mcornea has quit IRC | 23:47 | |
*** edmondsw has joined #tripleo | 23:54 | |
*** edmondsw has quit IRC | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!