openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates stable/pike: GATE CHECK for TripleO https://review.openstack.org/602248 | 00:00 |
---|---|---|
openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates master: GATE CHECK for TripleO https://review.openstack.org/604298 | 00:00 |
*** wolverineav has quit IRC | 00:04 | |
*** wolverineav has joined #tripleo | 00:08 | |
*** slaweq has joined #tripleo | 00:16 | |
*** tosky has quit IRC | 00:16 | |
*** boazel has joined #tripleo | 00:18 | |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: upgrade: remove Docker containers now managed by Podman https://review.openstack.org/615209 | 00:20 |
*** boazel_ has quit IRC | 00:21 | |
*** slaweq has quit IRC | 00:24 | |
*** bfournie has joined #tripleo | 00:34 | |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-common master: image_uploader: fail if registry isn't reachable https://review.openstack.org/620117 | 00:37 |
openstackgerrit | Merged openstack/tripleo-heat-templates stable/rocky: Add customized libvirt-guests unit file to properly shutdown instances https://review.openstack.org/618771 | 00:39 |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-common master: image_uploader: fail if registry isn't reachable https://review.openstack.org/620117 | 00:53 |
*** sai_p has quit IRC | 00:55 | |
*** slaweq has joined #tripleo | 01:16 | |
*** slaweq has quit IRC | 01:24 | |
*** wolverin_ has joined #tripleo | 01:41 | |
*** wolverin_ has quit IRC | 01:42 | |
*** wolverineav has quit IRC | 01:42 | |
*** wolverineav has joined #tripleo | 01:42 | |
*** aedc has quit IRC | 01:45 | |
*** slaweq has joined #tripleo | 02:13 | |
*** wolverineav has quit IRC | 02:16 | |
*** wolverineav has joined #tripleo | 02:16 | |
*** wolverineav has quit IRC | 02:16 | |
openstackgerrit | Ian Wienand proposed openstack/diskimage-builder master: Capture ramdisk test run logs https://review.openstack.org/619400 | 02:16 |
openstackgerrit | Ian Wienand proposed openstack/diskimage-builder master: Fix unit tests for elements https://review.openstack.org/619387 | 02:16 |
openstackgerrit | Ian Wienand proposed openstack/diskimage-builder master: package-installs: provide for skip from env var https://review.openstack.org/619119 | 02:16 |
openstackgerrit | Ian Wienand proposed openstack/diskimage-builder master: simple-init: allow for NetworkManager support https://review.openstack.org/619120 | 02:16 |
openstackgerrit | Ian Wienand proposed openstack/diskimage-builder master: Make tripleo-buildimage-overcloud-full-centos-7 non-voting https://review.openstack.org/620200 | 02:16 |
openstackgerrit | Ian Wienand proposed openstack/diskimage-builder master: Revert "Make tripleo-buildimage-overcloud-full-centos-7 non-voting" https://review.openstack.org/620201 | 02:16 |
*** wolverineav has joined #tripleo | 02:17 | |
*** wolverineav has quit IRC | 02:21 | |
*** ramishra has joined #tripleo | 02:22 | |
*** mrsoul has joined #tripleo | 02:23 | |
*** slaweq has quit IRC | 02:24 | |
*** mschuppert has quit IRC | 02:27 | |
*** psachin has joined #tripleo | 02:40 | |
*** Baggypants12000 has quit IRC | 02:47 | |
*** agopi has joined #tripleo | 02:49 | |
*** eck` is now known as eck`gone | 03:11 | |
openstackgerrit | Steve Baker proposed openstack/os-apply-config stable/pike: fixes how os-apply-config handles invalid json https://review.openstack.org/620207 | 03:11 |
*** slaweq has joined #tripleo | 03:16 | |
*** artom has quit IRC | 03:21 | |
*** artom has joined #tripleo | 03:24 | |
*** slaweq has quit IRC | 03:24 | |
*** dsneddon has quit IRC | 03:24 | |
openstackgerrit | Alan Bishop proposed openstack/tripleo-heat-templates stable/queens: Configure cinder's access to the nova API https://review.openstack.org/620209 | 03:26 |
*** mcornea has quit IRC | 03:50 | |
*** dsneddon has joined #tripleo | 03:51 | |
*** udesale has joined #tripleo | 03:54 | |
*** dsneddon has quit IRC | 03:56 | |
*** ykarel|away has joined #tripleo | 03:57 | |
*** ykarel|away is now known as ykarel | 04:06 | |
*** therve has quit IRC | 04:08 | |
*** slaweq has joined #tripleo | 04:11 | |
*** rh-jelabarre has quit IRC | 04:17 | |
*** rh-jelabarre has joined #tripleo | 04:20 | |
*** slaweq has quit IRC | 04:24 | |
*** udesale has quit IRC | 04:31 | |
*** ykarel has quit IRC | 04:46 | |
*** dsneddon has joined #tripleo | 04:46 | |
*** janki has joined #tripleo | 04:49 | |
openstackgerrit | Janki Chhatbar proposed openstack/puppet-tripleo stable/queens: Pass variable from puppet-tripleo to puppet-neutron https://review.openstack.org/620013 | 04:55 |
*** dsneddon has quit IRC | 04:56 | |
*** dsneddon has joined #tripleo | 05:01 | |
*** ykarel has joined #tripleo | 05:03 | |
*** dsneddon has quit IRC | 05:06 | |
*** bshephar has joined #tripleo | 05:16 | |
*** chandan_kumar has joined #tripleo | 05:26 | |
*** chandan_kumar is now known as chkumar|ruck | 05:28 | |
Tengu | hello there :) | 05:31 |
*** dsneddon has joined #tripleo | 05:31 | |
*** ratailor has joined #tripleo | 05:39 | |
*** hakhande_ has joined #tripleo | 05:41 | |
*** dsneddon has quit IRC | 05:41 | |
openstackgerrit | Merged openstack/tripleo-heat-templates master: Stop upgrade if a task on one node fails https://review.openstack.org/619265 | 05:42 |
openstackgerrit | Merged openstack/tripleo-heat-templates master: Added Dell EMC SC multipath support https://review.openstack.org/612451 | 05:42 |
*** slaweq has joined #tripleo | 06:11 | |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 06:12 |
*** tzumainn has quit IRC | 06:20 | |
openstackgerrit | zhongshengping proposed openstack/puppet-pacemaker master: Deprecate include_class https://review.openstack.org/620219 | 06:22 |
*** slaweq has quit IRC | 06:24 | |
*** ccamacho has quit IRC | 06:30 | |
*** dsneddon has joined #tripleo | 06:37 | |
*** dsneddon has quit IRC | 06:42 | |
janki | Hi Tengu :) | 06:51 |
Tengu | hi janki :) | 06:51 |
janki | jamesdenton, jistr marios help merge this cherry-pick https://review.openstack.org/#/c/612238/ | 06:52 |
*** ksambor has joined #tripleo | 06:56 | |
*** rcernin has quit IRC | 06:58 | |
*** bshephar has quit IRC | 07:02 | |
*** ahosam has joined #tripleo | 07:02 | |
*** dsneddon has joined #tripleo | 07:05 | |
*** jfrancoa has joined #tripleo | 07:06 | |
*** mschuppert has joined #tripleo | 07:07 | |
openstackgerrit | Gael Chamoulaud proposed openstack/tripleo-validations stable/rocky: Check the keystone token flush on the keystone_cron container https://review.openstack.org/620225 | 07:12 |
openstackgerrit | Gael Chamoulaud proposed openstack/tripleo-validations stable/rocky: Fix containerized services task https://review.openstack.org/620227 | 07:14 |
*** ahosam has quit IRC | 07:16 | |
*** pcaruana has joined #tripleo | 07:24 | |
openstackgerrit | Vieri proposed openstack/tripleo-validations master: Add Python 3.6 classifier to setup.cfg https://review.openstack.org/620232 | 07:24 |
*** kopecmartin|off is now known as kopecmartin | 07:26 | |
openstackgerrit | Harald Jensås proposed openstack/tripleo-heat-templates master: Add Storage network to IronicConductor role https://review.openstack.org/617987 | 07:27 |
openstackgerrit | Radoslaw Smigielski proposed openstack/tripleo-common master: Fix AnsibleAction.run() when argument is not a dict https://review.openstack.org/620236 | 07:28 |
*** yprokule has joined #tripleo | 07:29 | |
openstackgerrit | Radoslaw Smigielski proposed openstack/tripleo-common master: Fix non-exiting link to TripleO-common bugs https://review.openstack.org/619999 | 07:30 |
*** cylopez has joined #tripleo | 07:30 | |
*** cylopez has left #tripleo | 07:30 | |
*** quiquell has joined #tripleo | 07:33 | |
*** hjensas has joined #tripleo | 07:34 | |
openstackgerrit | Quique Llorente proposed openstack-infra/tripleo-ci master: Simplify regex removing capturing groups https://review.openstack.org/619488 | 07:35 |
*** ykarel is now known as ykarel|lunch | 07:35 | |
mschuppert | jaosorior: morning, if possible could you please review https://review.openstack.org/619586 again. I have addressed your comment. | 07:39 |
*** slaweq has joined #tripleo | 07:43 | |
*** therve has joined #tripleo | 07:43 | |
openstackgerrit | gaobin proposed openstack/tripleo-docs master: modify judgment logic https://review.openstack.org/620247 | 07:53 |
*** ccamacho has joined #tripleo | 07:56 | |
openstackgerrit | Carlos Goncalves proposed openstack/puppet-tripleo master: Include octavia::controller https://review.openstack.org/620118 | 07:56 |
openstackgerrit | Carlos Goncalves proposed openstack/tripleo-heat-templates master: Fix Octavia hieradata keys https://review.openstack.org/620106 | 07:57 |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 07:59 |
openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates master: GATE CHECK for TripleO https://review.openstack.org/604298 | 08:00 |
openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates stable/rocky: GATE CHECK for TripleO https://review.openstack.org/604293 | 08:00 |
*** saneax has joined #tripleo | 08:03 | |
*** cfontain has joined #tripleo | 08:04 | |
*** gkadam has joined #tripleo | 08:08 | |
*** cfontain has quit IRC | 08:09 | |
*** florianf|afk is now known as florianf | 08:13 | |
openstackgerrit | Quique Llorente proposed openstack-infra/tripleo-ci master: Simplify regex removing capturing groups https://review.openstack.org/619488 | 08:14 |
marios | fultonj: sshnaidm|afk panda|rover quiquell rfolco weshay strongly considering +A here any thoughts/objections please. https://review.openstack.org/#/c/616872/ | 08:16 |
marios | quiquell: and this? https://review.openstack.org/#/c/619468/3 but you need recheck | 08:17 |
marios | ah you did already | 08:17 |
*** nawar has joined #tripleo | 08:17 | |
nawar | hi guys | 08:18 |
quiquell | marios: What jobs where isuing the ceph thing apart from standalone scn1|4 ? | 08:18 |
quiquell | multinode scn1|4 ? | 08:18 |
nawar | new problem :( with deploying, I'm trying network isolation with multiple-nics but I'm getting this error with keepalived "Error: Evaluation Error: Error while evaluating a Function Call, invalid address: at /etc/puppet/modules/tripleo/manifests/profile/base/keepalived.pp:66:38 on node overcloud-contro | 08:19 |
nawar | ller-0.localdomain", I'm not configuring ha, it's simple deployment controller with computeHCI | 08:19 |
quiquell | marios: workflowed the ceph stuff | 08:20 |
quiquell | marios: about https://review.openstack.org/#/c/619468 you can workflow it after we have zuul blessing | 08:22 |
quiquell | marios: Let's do reviewing of standalone scenarios stuff and merge us much as possible | 08:22 |
*** jtomasek has joined #tripleo | 08:22 | |
marios | quiquell: ah right yeah that too... | 08:23 |
*** dsneddon has quit IRC | 08:23 | |
marios | quiquell: thought you meant 'lets discuss this afternoon about the container cli override because of the featureset stuff' i didn't read your sentence properly :) ignore previous | 08:24 |
*** cfontain has joined #tripleo | 08:24 | |
quiquell | marios: We are possitive on you featureset_override ? did everything change after I drop ? | 08:25 |
*** shardy has joined #tripleo | 08:25 | |
quiquell | s/you/using/g | 08:25 |
marios | quiquell: no we aren't | 08:25 |
quiquell | marios: Yoiu can workflow scenario001 env file https://review.openstack.org/#/c/616592/ | 08:25 |
quiquell | marios: nope ? | 08:25 |
quiquell | damn... | 08:25 |
marios | quiquell: we will continue discussion this afternoon with stakeholders/anyone intereseted. invited the ceph folks too. | 08:25 |
marios | quiquell: and we make a call | 08:25 |
quiquell | marios: ok then we don't merge the container_cli override | 08:26 |
marios | quiquell: right thats what i was trying to decide | 08:26 |
quiquell | marios: but we can merge the env files, they are deploying correctly | 08:26 |
quiquell | marios: lint stuff is different | 08:26 |
marios | quiquell: like its only useful for featureset_override, otherwise we have to pass it another way | 08:26 |
quiquell | marios: yep we cannot merge jobs or featureset_override fixes | 08:26 |
quiquell | marios: but we can merge env files | 08:26 |
marios | quiquell: replied to matbu here with more context https://review.rdoproject.org/r/#/c/17496/3 | 08:26 |
marios | quiquell: so i think it makes sense to hold the env files a bit please | 08:27 |
marios | quiquell: because we didn't even get 1 green run yet. we need that first, then we can sanity check we got all the services we expect in that scenario | 08:27 |
marios | quiquell: we didn't validate that yet. i think they are easy to merge anyway | 08:28 |
marios | quiquell: agree/disagree? | 08:28 |
quiquell | marios: we can merge then and fix later | 08:28 |
quiquell | marios: going to easy the depends-on hell | 08:28 |
quiquell | marios: as long as we dont break the voting jobs | 08:28 |
marios | quiquell: yeah i guess that's right but i'd rather see it run green once at least before i push to merge .. though i'm up for adding the +2s and lining up the ci runs etc | 08:30 |
openstackgerrit | gaobin proposed openstack/tripleo-docs master: fixed Useless variable declaration https://review.openstack.org/620256 | 08:30 |
marios | matbu: did you see my comment here https://review.rdoproject.org/r/#/c/17496/3 the issue we have is specific to standalone they bypass the 'usual' tripleo-common mistral action with the module_path | 08:31 |
*** ykarel|lunch is now known as ykarel | 08:32 | |
*** paramite has joined #tripleo | 08:32 | |
matbu | marios: hey o/ | 08:33 |
matbu | marios: yep i was checking my email, i didn't click on the link | 08:33 |
matbu | marios: but thanks for the answer :) | 08:33 |
quiquell | marios, matbu: it right that this is a big change that have to be tested, maybe is just better to add the --module-path to python-tripleoclient calls | 08:35 |
quiquell | matbu: more or less the issue is that we are not using mistral at standalone | 08:35 |
quiquell | matbu: so it does not read module_path var | 08:35 |
marios | quiquell: yes that sounds right | 08:35 |
marios | quiquell: add here https://github.com/openstack/python-tripleoclient/blob/master/tripleoclient/v1/tripleo_deploy.py#L816 well in here anyway | 08:36 |
matbu | marios: quiquell yep maybe safer | 08:37 |
marios | marios recaffeine | 08:38 |
marios | brb | 08:38 |
*** tosky has joined #tripleo | 08:38 | |
*** Baggypants12000 has joined #tripleo | 08:39 | |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 08:40 |
*** cfontain has quit IRC | 08:43 | |
*** cfontain has joined #tripleo | 08:44 | |
openstackgerrit | Natal Ngétal proposed openstack/tripleo-common stable/queens: [Queens only] Fix the default for docker registry. https://review.openstack.org/611329 | 08:47 |
*** dsneddon has joined #tripleo | 08:47 | |
*** jaganathan has joined #tripleo | 08:48 | |
*** cfontain has quit IRC | 08:48 | |
*** jpena|off is now known as jpena | 08:51 | |
shardy | Hey folks, if anyone has time to check https://review.openstack.org/#/c/605492/ that would be great, next in the series reworking bootstrap_node things and finally unblocked/passing CI \o/ | 08:59 |
*** amoralej|off is now known as amoralej | 09:01 | |
*** xek has joined #tripleo | 09:01 | |
*** jpich has joined #tripleo | 09:05 | |
*** gfidente has joined #tripleo | 09:05 | |
*** udesale has joined #tripleo | 09:09 | |
*** holser_ has joined #tripleo | 09:09 | |
*** holser_ has quit IRC | 09:10 | |
*** holser_ has joined #tripleo | 09:10 | |
openstackgerrit | Jose Luis Franco proposed openstack/tripleo-upgrade master: Avoid adding ContainerImagePrepare in roles_data twice. https://review.openstack.org/620262 | 09:12 |
*** ahosam has joined #tripleo | 09:15 | |
mschuppert | hi, can I please get reviews on https://review.openstack.org/619586 , this is related to a blocker. | 09:18 |
*** dmacpher has joined #tripleo | 09:19 | |
*** suuuper has joined #tripleo | 09:20 | |
*** cfontain has joined #tripleo | 09:20 | |
*** ccamacho has quit IRC | 09:20 | |
*** bogdando has joined #tripleo | 09:23 | |
Tengu | hmm, gerrit seems slow. | 09:28 |
*** skramaja has joined #tripleo | 09:30 | |
*** ccamacho has joined #tripleo | 09:30 | |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 09:34 |
openstackgerrit | Jose Luis Franco proposed openstack/tripleo-common master: Fix ironic-pxe healthcheck. https://review.openstack.org/617728 | 09:35 |
*** derekh has joined #tripleo | 09:40 | |
*** cfontain has quit IRC | 09:41 | |
*** xek has quit IRC | 09:44 | |
*** xek has joined #tripleo | 09:48 | |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 09:51 |
*** aedc has joined #tripleo | 09:51 | |
*** hakhande_ has quit IRC | 09:53 | |
*** hakhande_ has joined #tripleo | 09:53 | |
*** dsneddon has quit IRC | 09:54 | |
openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-quickstart-extras master: Fix failure to install atop on fedora28 https://review.openstack.org/619595 | 10:02 |
ykarel | ssbarnea|bkp2, so seeing the existing implementation it looks like it wanted to install from EPEL repo | 10:07 |
ykarel | which is rarely enabled in all jobs | 10:07 |
ykarel | saying by seeing: atop_location=$(repoquery --repoid=osepel --repofrompath=osepel,$NODEPOOL_EPEL_MIRROR/7/x86_64/ --location atop) | 10:07 |
nawar | why I'm getting this error with keepalived "Error: Evaluation Error: Error while evaluating a Function Call, invalid address: at /etc/puppet/modules/tripleo/manifests/profile/base/keepalived.pp:66:38 | 10:07 |
openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-quickstart-extras master: Use include_role on tempest to avoid misleading output https://review.openstack.org/620146 | 10:10 |
openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-quickstart-extras master: Use include_role on tempest to avoid misleading output https://review.openstack.org/620146 | 10:12 |
*** akrivoka has joined #tripleo | 10:13 | |
*** xek has quit IRC | 10:18 | |
openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-quickstart-extras master: Fix failure to install atop on fedora28 https://review.openstack.org/619595 | 10:19 |
*** aedc has quit IRC | 10:21 | |
*** xek has joined #tripleo | 10:23 | |
openstackgerrit | Marios Andreou proposed openstack-infra/tripleo-ci master: Removes EXTRA_TAGS from toci_gate_test&quickstart.sh.j2 https://review.openstack.org/604768 | 10:25 |
ykarel | ssbarnea|bkp2, is osepel deployed somewhere? | 10:25 |
ykarel | this is different from originaly deploy method which was not enabling any repo, just installing pacake | 10:26 |
*** ramishra has quit IRC | 10:26 | |
ykarel | may be u have considered that fact | 10:26 |
*** aedc has joined #tripleo | 10:29 | |
openstackgerrit | Jose Luis Franco proposed openstack/tripleo-upgrade master: Do not adjust roles data for minor updates. https://review.openstack.org/620262 | 10:33 |
*** udesale has quit IRC | 10:33 | |
*** udesale has joined #tripleo | 10:34 | |
*** moguimar has joined #tripleo | 10:36 | |
*** udesale has quit IRC | 10:39 | |
openstackgerrit | Derek Higgins proposed openstack/tripleo-docs master: [WIP] Add documentation on using net-ansible in overcloud https://review.openstack.org/620101 | 10:44 |
openstackgerrit | Quique Llorente proposed openstack/python-tripleoclient master: Catch socket.timeout waitting port api https://review.openstack.org/619741 | 10:45 |
*** dsneddon has joined #tripleo | 10:47 | |
Hobbestigrou | hi | 10:49 |
Hobbestigrou | i have a question about this patch https://review.openstack.org/#/c/620003/ | 10:49 |
*** ramishra has joined #tripleo | 10:49 | |
Hobbestigrou | i have remove the tox part to build the documentation, because is not necessary on this project | 10:51 |
Hobbestigrou | i have also modify the test-requirements.txt to remove the documentation dependencies https://review.openstack.org/#/c/620003/3/test-requirements.txt | 10:53 |
Hobbestigrou | the patch fail because i have change the requirements and zuul check that | 10:54 |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 10:55 |
Hobbestigrou | and tripleo-upgrade use ansible https://github.com/openstack/tripleo-upgrade/blob/master/requirements.txt#L2 | 10:55 |
Hobbestigrou | but it's not present in openstack global requirements https://github.com/openstack/requirements/blob/master/global-requirements.txt | 10:56 |
Hobbestigrou | it's normal because ansible is not a global dependency of openstack | 10:56 |
Hobbestigrou | but i know which zuul template i can use for tripleo-upgrade https://review.openstack.org/#/c/620003/3/zuul.d/layout.yaml | 10:57 |
jistr | Hobbestigrou: i also just found this https://github.com/openstack/tripleo-upgrade/blob/master/ansible-requirements.txt | 10:59 |
*** dsneddon has quit IRC | 10:59 | |
jistr | Hobbestigrou: so i think maybe the best way would be to try dropping Ansible from https://github.com/openstack/tripleo-upgrade/blob/master/requirements.txt | 10:59 |
openstackgerrit | Quique Llorente proposed openstack/python-tripleoclient master: Catch socket.timeout waitting port api https://review.openstack.org/619741 | 10:59 |
Hobbestigrou | jistr, thanks | 10:59 |
jistr | yprokule: ^ sounds ok? | 11:00 |
Hobbestigrou | yes it's possible to remove ansible from global requirements | 11:00 |
openstackgerrit | Natal Ngétal proposed openstack/tripleo-upgrade master: [Configuration] Remove the build documentation. https://review.openstack.org/620003 | 11:03 |
*** udesale has joined #tripleo | 11:06 | |
*** holser_ is now known as holser|lunch | 11:07 | |
Hobbestigrou | someone can review this please https://review.openstack.org/#/c/617670/ ? | 11:08 |
Hobbestigrou | and this one also please https://review.openstack.org/#/c/619519/ | 11:08 |
Hobbestigrou | ? | 11:08 |
*** moguimar has quit IRC | 11:11 | |
openstackgerrit | Quique Llorente proposed openstack/python-tripleoclient master: Add --module-path to ansible-playbook calls https://review.openstack.org/620292 | 11:14 |
quiquell | marios: ^ | 11:14 |
quiquell | marios: for scenarios | 11:14 |
*** moguimar has joined #tripleo | 11:15 | |
openstackgerrit | Quique Llorente proposed openstack/python-tripleoclient master: Add --module-path to ansible-playbook calls https://review.openstack.org/620292 | 11:17 |
openstackgerrit | Jose Luis Franco proposed openstack/ansible-role-redhat-subscription master: Define job templates in zuul config. https://review.openstack.org/620293 | 11:18 |
marios | ack quiquell checking in a sec | 11:18 |
marios | quiquell: looks nice and clean | 11:19 |
marios | quiquell: module path andnothing else +1 | 11:19 |
quiquell | marios: pleas can you testing with stdl and scn don't have time now | 11:19 |
marios | quiquell: ack will do | 11:20 |
*** moguimar has quit IRC | 11:21 | |
nawar | what is the use of keepalived in overcloud if I want to enable ha will use pacemaker? | 11:22 |
nawar | and can I disable it? | 11:22 |
openstackgerrit | Quique Llorente proposed openstack-infra/tripleo-ci master: Simplify regex removing capturing groups https://review.openstack.org/619488 | 11:28 |
*** dsneddon has joined #tripleo | 11:30 | |
openstackgerrit | Marios Andreou proposed openstack-infra/tripleo-ci master: Add new tripleo-ci-centos-7-scenario001-standalone job https://review.openstack.org/619508 | 11:31 |
*** ahosam has quit IRC | 11:31 | |
openstackgerrit | Marios Andreou proposed openstack-infra/tripleo-ci master: Add tripleo-ci-centos-7-scenario004-standalone job https://review.openstack.org/619520 | 11:32 |
*** chkumar|ruck is now known as chkumar|away | 11:32 | |
*** salmankhan has joined #tripleo | 11:35 | |
openstackgerrit | Marios Andreou proposed openstack-infra/tripleo-ci master: Add standalone scenario002 job https://review.openstack.org/618709 | 11:35 |
openstackgerrit | Marios Andreou proposed openstack-infra/tripleo-ci master: Add new tripleo-ci-centos-7-scenario003-standalone job https://review.openstack.org/618761 | 11:36 |
*** dsneddon has quit IRC | 11:36 | |
marios | quiquell: ^ done | 11:36 |
marios | rfolco: we added Depends-On: https://review.openstack.org/620292 # python-tripleoclient fix for linting issue (set module path in standalone deploy) | 11:37 |
*** raildo has joined #tripleo | 11:37 | |
*** salmankhan1 has joined #tripleo | 11:38 | |
*** udesale has quit IRC | 11:38 | |
quiquell | marios: thanks mate, let's see how it breaths | 11:39 |
quiquell | marios: if we merge this non voting jobs we can test reviews without test reviews | 11:39 |
quiquell | marios: same we did with f28 | 11:40 |
*** salmankhan has quit IRC | 11:40 | |
*** salmankhan1 is now known as salmankhan | 11:40 | |
quiquell | as long as we don't break the others | 11:40 |
openstackgerrit | Sorin Sbarnea proposed openstack/python-tripleoclient master: Add missing py37 toxenv and corrected default envlist https://review.openstack.org/617606 | 11:40 |
*** xek has quit IRC | 11:40 | |
*** ahosam has joined #tripleo | 11:41 | |
*** salmankhan has quit IRC | 11:42 | |
*** udesale has joined #tripleo | 11:45 | |
*** rfolco is now known as rfolco_doctor | 11:45 | |
*** udesale has quit IRC | 11:45 | |
*** udesale has joined #tripleo | 11:46 | |
*** gfidente has quit IRC | 11:47 | |
*** moguimar has joined #tripleo | 11:51 | |
*** udesale has quit IRC | 11:52 | |
*** udesale has joined #tripleo | 11:53 | |
*** ratailor has quit IRC | 11:53 | |
*** moguimar has quit IRC | 11:56 | |
*** moguimar has joined #tripleo | 11:56 | |
*** gfidente has joined #tripleo | 11:56 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-docs master: Update parameters for ipsec deployment https://review.openstack.org/619557 | 11:58 |
jaosorior | marios: fixed the grammar issue, thanks for the review ^^ | 11:58 |
*** janki has quit IRC | 11:59 | |
jaosorior | jistr: is it cool if we merge this https://review.openstack.org/#/c/619733/2 ? | 11:59 |
*** hakhande_ has quit IRC | 12:01 | |
*** hakhande_ has joined #tripleo | 12:02 | |
jistr | jaosorior: yup, merging it | 12:02 |
jaosorior | hjensas: around? | 12:04 |
*** amoralej is now known as amoralej|lunch | 12:04 | |
*** bshephar has joined #tripleo | 12:05 | |
*** ahosam has quit IRC | 12:05 | |
*** ahosam has joined #tripleo | 12:05 | |
*** dsneddon has joined #tripleo | 12:09 | |
openstackgerrit | Merged openstack/tripleo-docs master: Some mixing errors https://review.openstack.org/618071 | 12:10 |
openstackgerrit | Merged openstack/tripleo-docs master: Reorganise upgrade/update/ffwd upgrade docs into their own section https://review.openstack.org/619733 | 12:10 |
*** xek has joined #tripleo | 12:11 | |
*** aedc has quit IRC | 12:11 | |
*** ccamacho has quit IRC | 12:12 | |
jaosorior | hjensas: anyway, commented on this https://review.openstack.org/#/c/616392/ | 12:13 |
*** holser|lunch is now known as holser_ | 12:15 | |
EmilienM | mandre: hello :) please look https://review.openstack.org/#/c/620168/ and tell me if it's fine | 12:16 |
*** bshephar has quit IRC | 12:18 | |
openstackgerrit | Derek Higgins proposed openstack/tripleo-docs master: Remove redundant mentions of boot_option https://review.openstack.org/619261 | 12:18 |
jaosorior | derekh: I'll merge https://review.openstack.org/#/c/619261/ now given that the fix was a simple typo, do you agree? or still wanna wait for other folks to check it out? | 12:19 |
*** udesale has quit IRC | 12:20 | |
openstackgerrit | Marios Andreou proposed openstack/ansible-role-tripleo-modify-image master: Replace scenario001-multinode with scenario001-standalone https://review.openstack.org/620301 | 12:20 |
*** ahosam has quit IRC | 12:20 | |
openstackgerrit | Marios Andreou proposed openstack/tripleo-common master: Replace scenario001-multinode with scenario001-standalone https://review.openstack.org/620303 | 12:20 |
openstackgerrit | Marios Andreou proposed openstack/puppet-tripleo master: Replace scenario001-multinode with scenario001-standalone https://review.openstack.org/620304 | 12:20 |
openstackgerrit | Marios Andreou proposed openstack/tripleo-heat-templates master: Replace scenario001-multinode with scenario001-standalone https://review.openstack.org/620305 | 12:20 |
jaosorior | marios: yay! | 12:20 |
*** ahosam has joined #tripleo | 12:20 | |
derekh | jaosorior: thanks, go ahead but it depends on about 4 other patches so wont merge until they do | 12:20 |
jaosorior | derekh: oh! got it, I'll review them then | 12:21 |
marios | jaosorior: well not quite yet but part of the task just getting ready | 12:21 |
derekh | jaosorior: thanks | 12:21 |
marios | jaosorior: we didn't get the new job green yet | 12:21 |
*** jaganathan has quit IRC | 12:22 | |
marios | jaosorior: this merged btw https://review.openstack.org/#/c/619733/ | 12:22 |
marios | jaosorior: oh you voted :) | 12:22 |
marios | thanks jistr ccamacho | 12:22 |
jaosorior | marios: haha yep. I voted and then asked jistr to give it his holy blessing | 12:22 |
openstackgerrit | Emilien Macchi proposed openstack/os-apply-config stable/ocata: fixes how os-apply-config handles invalid json https://review.openstack.org/620306 | 12:24 |
marios | https://docs.openstack.org/tripleo-docs/latest/ didn't show up yet | 12:24 |
openstackgerrit | Vieri proposed openstack/tripleo-validations master: fix tox python3 overrides https://review.openstack.org/608241 | 12:24 |
jaosorior | EmilienM: was this a clean commit https://review.openstack.org/#/c/620306/1 ? | 12:25 |
jaosorior | * clean cherry-pick | 12:25 |
openstackgerrit | Gabriele Cerami proposed openstack-infra/tripleo-ci master: Fix overcloud node log collection in ovb jobs https://review.openstack.org/618669 | 12:25 |
jaosorior | marios: it takes a bit | 12:25 |
*** cfontain has joined #tripleo | 12:25 | |
jaosorior | it just merged some minutes ago | 12:25 |
marios | ack thanks jaosorior so have to find a new one now for this week... | 12:25 |
marios | **will be smaller ... | 12:25 |
marios | (much)! | 12:25 |
marios | jaosorior: found it am just gonna re-brand and sell this one as related to our effort :) https://review.openstack.org/616187 sorted till next week then ... | 12:26 |
marios | dont tell anyone | 12:27 |
jaosorior | marios: lol, sounds good to me | 12:27 |
jaosorior | derekh: wanna fix the comments from dtantsur|mtg on this review https://review.openstack.org/#/c/618727/3 ? or wanna do it in a subsequent one? | 12:28 |
jistr | marios: thanks for doing these | 12:28 |
*** ansmith has quit IRC | 12:29 | |
derekh | jaosorior: I left them as is because he +2'd it, I'm happy to change them now if you want to reduce further patches | 12:32 |
marios | ack jistr somethign that bugged me for a while since i did the dev docs for q | 12:32 |
jaosorior | derekh: given that the patch works, I'm fine merging that as-is. feel free to address the comments in a subsequent patch. | 12:32 |
*** udesale has joined #tripleo | 12:32 | |
*** udesale has quit IRC | 12:32 | |
derekh | jaosorior: ok, will do, thanks | 12:32 |
*** bfournie has quit IRC | 12:33 | |
jaosorior | marios: addressed your comment here https://review.openstack.org/#/c/619557/ | 12:34 |
*** udesale has joined #tripleo | 12:34 | |
*** salmankhan has joined #tripleo | 12:34 | |
*** jpena is now known as jpena|lunch | 12:36 | |
openstackgerrit | Bogdan Dobrelya proposed openstack/tripleo-common master: Add puppet-tripleo container https://review.openstack.org/619744 | 12:36 |
*** ccamacho has joined #tripleo | 12:41 | |
*** ykarel is now known as ykarel|away | 12:42 | |
EmilienM | jaosorior: yes | 12:43 |
jaosorior | ack | 12:43 |
*** dciabrin has quit IRC | 12:43 | |
EmilienM | jaosorior: can you review https://review.openstack.org/#/c/615209/ please? | 12:45 |
openstackgerrit | Bogdan Dobrelya proposed openstack/tripleo-common master: Add puppet-tripleo container https://review.openstack.org/619744 | 12:46 |
EmilienM | jaosorior: the result is that none of the docker containers that were automatically started are in docker anymore http://logs.openstack.org/09/615209/25/check/tripleo-ci-centos-7-containerized-undercloud-upgrades/c864e82/logs/undercloud/var/log/extra/docker/docker_allinfo.log.txt.gz | 12:46 |
*** morazi has joined #tripleo | 12:46 | |
*** jfrancoa has quit IRC | 12:46 | |
EmilienM | jaosorior: after the upgrade to podman | 12:46 |
jaosorior | neutron-dns seems to still be up though. Is that expected? | 12:46 |
EmilienM | jaosorior: yeah this one isn't managed by paunch but by neutron, we need to handle that | 12:47 |
jaosorior | got it | 12:47 |
EmilienM | jaosorior: i'm working on the next steps, pruning the containers not used anymore and migrates the one managed by neutron | 12:48 |
*** moguimar has quit IRC | 12:49 | |
ykarel|away | EmilienM, i rechecked the buildlogs revert patch, the broken rpm(container-selinux) is removed from buildlogs, let's see the job results | 12:51 |
EmilienM | ykarel|away: nice! thank you | 12:51 |
*** trown has quit IRC | 12:51 | |
*** trown|brb has joined #tripleo | 12:53 | |
*** udesale has quit IRC | 12:54 | |
*** abishop has joined #tripleo | 12:55 | |
*** ykarel|away has quit IRC | 12:56 | |
*** jfrancoa has joined #tripleo | 12:59 | |
*** akrivoka has quit IRC | 13:00 | |
*** arxcruz is now known as arxcruz|brb | 13:00 | |
*** nawar has left #tripleo | 13:00 | |
*** akrivoka has joined #tripleo | 13:00 | |
*** moguimar has joined #tripleo | 13:00 | |
openstackgerrit | Bogdan Dobrelya proposed openstack/tripleo-common master: Add puppet-tripleo container https://review.openstack.org/619744 | 13:02 |
openstackgerrit | Bogdan Dobrelya proposed openstack/tripleo-common master: Remove puppet et al bits from the base image layer https://review.openstack.org/620310 | 13:02 |
*** ccamacho has quit IRC | 13:04 | |
*** ccamacho has joined #tripleo | 13:04 | |
*** amoralej|lunch is now known as amoralej | 13:06 | |
*** toure|gone is now known as toure | 13:06 | |
openstackgerrit | Honza Pokorny proposed openstack/tripleo-common master: Add a way to update ContainerImagePrepare params https://review.openstack.org/619071 | 13:06 |
openstackgerrit | Jose Luis Franco proposed openstack/tripleo-heat-templates master: Invoke redhat-subscription role during upgrade. https://review.openstack.org/610493 | 13:08 |
*** suuuper has quit IRC | 13:09 | |
*** salmankhan has quit IRC | 13:12 | |
*** aedc has joined #tripleo | 13:15 | |
*** ahosam has quit IRC | 13:17 | |
*** salmankhan has joined #tripleo | 13:18 | |
openstackgerrit | Brent Eagles proposed openstack/tripleo-heat-templates master: neutron-cleanup skips ports marked skip_cleanup=true https://review.openstack.org/619060 | 13:23 |
*** salmankhan has quit IRC | 13:24 | |
openstackgerrit | Slawek Kaplonski proposed openstack/tripleo-heat-templates master: Remove external_network_bridge Neutron option https://review.openstack.org/604764 | 13:25 |
*** devep has joined #tripleo | 13:26 | |
*** devep_ has joined #tripleo | 13:26 | |
*** gfidente has quit IRC | 13:28 | |
*** rlandy has joined #tripleo | 13:28 | |
*** ykarel|away has joined #tripleo | 13:28 | |
*** gfidente has joined #tripleo | 13:29 | |
Hobbestigrou | someone can check this patch please https://review.openstack.org/#/c/618161/ | 13:33 |
Hobbestigrou | ? | 13:33 |
openstackgerrit | Brent Eagles proposed openstack/tripleo-heat-templates master: neutron-cleanup skips ports marked skip_cleanup=true https://review.openstack.org/619060 | 13:34 |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 13:34 |
*** ade_lee has quit IRC | 13:37 | |
*** jpena|lunch is now known as jpena | 13:38 | |
mandre | EmilienM: only if you tell me how to get the ansible-role-redhat-subscription role to work :) | 13:42 |
EmilienM | mandre: DEAL | 13:42 |
EmilienM | mandre: are you using it standalone or with tripleo? | 13:42 |
openstackgerrit | Jiri Stransky proposed openstack/tripleo-common stable/rocky: Set DeployIdentifier on update/upgrade/ffwd prepare actions https://review.openstack.org/620316 | 13:42 |
*** dprince has joined #tripleo | 13:43 | |
mandre | EmilienM: I'm using with tripleo, but I found that rhsm_repos is ignored when using rhsm_activation_key, is that expected? | 13:43 |
EmilienM | yes | 13:44 |
openstackgerrit | Steven Hardy proposed openstack/tripleo-heat-templates master: Don't disable keepalived in nonha-arch.yaml https://review.openstack.org/607180 | 13:44 |
EmilienM | when you have an activation key you manage the repos in your subscription interface | 13:44 |
EmilienM | I thought we documented that, one sec | 13:44 |
mandre | EmilienM: it's inconsistent with the current documentation | 13:44 |
EmilienM | yes | 13:44 |
EmilienM | indeed, I need to fix that | 13:45 |
*** trown|brb is now known as trown | 13:45 | |
EmilienM | and the github doc is broken too | 13:45 |
EmilienM | ok it needs some love indeed | 13:45 |
mandre | EmilienM: the only doc I found was on https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/advanced_overcloud_customization/ansible-based-registration | 13:45 |
EmilienM | yes and there is https://docs.openstack.org/tripleo-docs/latest/install/advanced_deployment/rhsm.html | 13:46 |
EmilienM | mandre: but afik these 2 params aren't compatible. I'll fix the doc today | 13:47 |
EmilienM | mandre: the reason is really on RHSM side | 13:47 |
EmilienM | mandre: i'm back in 1h30 | 13:48 |
EmilienM | mandre: see https://review.openstack.org/#/c/611334/ for history | 13:48 |
EmilienM | and https://launchpad.net/bugs/1798382 | 13:48 |
openstack | Launchpad bug 1798382 in tripleo "Overcloud deployment with Rhsm role that uses activation key fails with: "msg": "parameters are mutually exclusive: activationkey, autosubscribe"" [Medium,Triaged] - Assigned to Emilien Macchi (emilienm) | 13:48 |
mandre | EmilienM: hmm, do you know how to enable a given repo on the RHSM side then? will autoattach option will enable *all* the available repos for the subscription? in my tests it looks like not | 13:49 |
mandre | EmilienM: thanks for the pointers, I'll dig into it | 13:49 |
EmilienM | mandre: it should, and you can manage these repos in the Red Hat website I think, or in your Satellite instanec | 13:50 |
*** mcornea has joined #tripleo | 13:51 | |
openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-docs master: Add documentation on deploying Designate https://review.openstack.org/585833 | 13:52 |
*** ansmith has joined #tripleo | 13:54 | |
openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Better surface the error status and message when there is a failure https://review.openstack.org/617330 | 13:55 |
openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Fix broken YAQL expressions in heat_environments.yaml https://review.openstack.org/617311 | 13:55 |
*** udesale has joined #tripleo | 13:56 | |
jaosorior | #startmeeting tripleo | 14:00 |
openstack | Meeting started Tue Nov 27 14:00:55 2018 UTC and is due to finish in 60 minutes. The chair is jaosorior. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:00 |
*** openstack changes topic to " (Meeting topic: tripleo)" | 14:00 | |
openstack | The meeting name has been set to 'tripleo' | 14:00 |
jaosorior | #topic agenda | 14:01 |
*** openstack changes topic to "agenda (Meeting topic: tripleo)" | 14:01 | |
Tengu | ah :) | 14:01 |
d0ugal | o/ | 14:01 |
ccamacho | o/ hi TripleOers! | 14:01 |
fultonj | o/ | 14:01 |
jaosorior | * Review past action items | 14:01 |
jaosorior | * One off agenda items | 14:01 |
jaosorior | * Squad status | 14:01 |
bogdando | o/ | 14:01 |
jaosorior | * Bugs & Blueprints | 14:01 |
ksambor | o/ | 14:01 |
jaosorior | * Projects releases or stable backports | 14:01 |
jaosorior | * Specs | 14:01 |
marios | \o | 14:01 |
jaosorior | * open discussion | 14:01 |
jaosorior | Anyone can use the #link, #action and #info commands, not just the moderatorǃ | 14:01 |
jaosorior | Hey folks! who's around? | 14:01 |
panda|rover | o/ | 14:01 |
rlandy | o/ | 14:01 |
dpeacock | o/ | 14:01 |
weshay | 0/ | 14:02 |
openstackgerrit | Emilien Macchi proposed openstack/ansible-role-redhat-subscription master: Fix table in the README https://review.openstack.org/620317 | 14:02 |
EmilienM | o/ | 14:02 |
shardy | o/ | 14:02 |
jtomasek | o/ | 14:03 |
matbu | o/ | 14:04 |
*** cfontain has quit IRC | 14:04 | |
chem | o/ | 14:04 |
beagles | o/ | 14:04 |
jaosorior | #topic review past action items | 14:05 |
*** openstack changes topic to "review past action items (Meeting topic: tripleo)" | 14:05 | |
jaosorior | None. | 14:05 |
jaosorior | #topic one off agenda items | 14:05 |
*** openstack changes topic to "one off agenda items (Meeting topic: tripleo)" | 14:05 | |
jaosorior | #link https://etherpad.openstack.org/p/tripleo-meeting-items | 14:05 |
*** udesale has quit IRC | 14:05 | |
jaosorior | First topic: (jtomasek) Since the Workflows squad has been reorganized and UI&Validations squad is taking over the tripleo-common responsibilities, I'd like to propose we give UI squad cores right to +2 tripleo-common patches | 14:05 |
*** udesale has joined #tripleo | 14:05 | |
jfrancoa | o/ | 14:06 |
*** jrist has joined #tripleo | 14:06 | |
jrist | o/ | 14:06 |
*** suuuper has joined #tripleo | 14:06 | |
jaosorior | jtomasek: around? | 14:06 |
abishop | o/ | 14:06 |
jtomasek | jaosorior: as described ^, should I send an email to openstack-dev about it? Or is discussing it here enough? | 14:06 |
jrist | ui team is hitting stuff that is very UI specific that needs +2 workflow | 14:07 |
jaosorior | jtomasek: sending a mail would be nice too. | 14:07 |
*** cfontain has joined #tripleo | 14:07 | |
jtomasek | jaosorior: ok, will do | 14:07 |
jaosorior | jrist: understood. | 14:07 |
jrist | jaosorior: what's your initial reaction? | 14:08 |
openstackgerrit | Thomas Herve proposed openstack/tripleo-common master: Don't update run UpdateParametersAction errors https://review.openstack.org/620319 | 14:08 |
chem | ccamacho: try this instead "openstacksdk>=0.17.2" | 14:08 |
chem | ccamacho: and remove the tox line | 14:08 |
jaosorior | jrist, jtomasek: My initial reaction is to hit stackalaytics and check how much are folks from the UI squad reviewing tripleo-common stuff. | 14:08 |
chem | ccamacho: I had it working locally | 14:08 |
openstackgerrit | Jose Luis Franco proposed openstack/ansible-role-redhat-subscription master: Define job templates in zuul config. https://review.openstack.org/620293 | 14:08 |
jrist | jaosorior: noted, thanks | 14:09 |
shardy | historically there's been a lot of discussion and good testing/reviews of the workbooks and actions, so IMO this should be fine | 14:09 |
openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/rocky: Fix instack-undercloud nits https://review.openstack.org/619467 | 14:10 |
jaosorior | jrist, jtomasek, shardy: I understand the practical reasons; and I want to say it's cool and all. But I don't see folks doing a whole lot of reviews. | 14:10 |
jrist | yup, understood. | 14:11 |
*** tzumainn has joined #tripleo | 14:11 | |
jtomasek | jaosorior: I understand your concerns, we can revisit the topic again later | 14:11 |
ccamacho | chem so now, what about running them with python2 holser_ has a point we dont have py3 in rocky, right? | 14:12 |
holser_ | chem I think we need to setup setup.cfg back to python2 | 14:12 |
holser_ | as it will create a huge divergence between upstream and downstream | 14:13 |
jaosorior | jtomasek: sounds good to me. | 14:13 |
jaosorior | Anybody else has a take on this topic? | 14:13 |
chem | holser_: ccamacho well I did the validation using python3 and it was ok | 14:13 |
therve | jtomasek: Does that mean UI is handling all tripleo-common bugs? :) | 14:13 |
* Tengu votes +1 on that | 14:13 | |
holser_ | chem, there will be python2 downstream anyway... | 14:14 |
jtomasek | therve: yes, they're all on apetrich now, who joined UI squad from workflows | 14:14 |
therve | Hum okay | 14:14 |
jrist | therve: depends is always the answer | 14:15 |
jrist | depends | 14:15 |
jrist | but sort of, yeah. | 14:15 |
d0ugal | therve: unless you want them? :) | 14:15 |
therve | d0ugal: Not really, but I end up fixing them anyway | 14:15 |
therve | That's why I'm asking :) | 14:15 |
jrist | haha | 14:15 |
d0ugal | therve: I noticed, thanks! | 14:15 |
jtomasek | therve++ | 14:16 |
*** ykarel|away has quit IRC | 14:16 | |
jaosorior | jtomasek, jrist: Lets do this, send a mail to the mailing list so more folks have time to give their thoughts there. | 14:17 |
openstackgerrit | Jiri Stransky proposed openstack/tripleo-heat-templates stable/rocky: Stop upgrade if a task on one node fails https://review.openstack.org/620320 | 14:17 |
jrist | roger that | 14:17 |
jtomasek | jaosorior: ack | 14:17 |
*** thrash has joined #tripleo | 14:17 | |
jaosorior | alright, the second topic is from panda|rover: featureset overriding and developer experience | 14:18 |
panda|rover | yes, I'm introducing this, but would like to discuss it in the CI community meeting. | 14:19 |
panda|rover | As part of the design to replace scenarios with standalone, a mechanism that overrides variables defined in featuresets was introduced in the CI workflow. This was deemed necessary to satisfy requirements given by tripleo developers, like the ability to change scenario more easily during the local workflow. I'd like to understand what these requirements are and in what way overriding featureset is the thing | 14:19 |
*** cfontain has quit IRC | 14:19 | |
panda|rover | that you need. Featureset design is one of the long lived and most robust design in our workflow, and its non overridability has protected us from regressions in the past, and it represented the last source of truth to understand what a job is doing. Since we are also changing the practice to map a job to a featureset 1:1 (all the standalone scenarios will now map to fs052) this represents also a big change | 14:19 |
panda|rover | in out to intepret the jobs. I want to understand what was the request that rendered this big change necessary, and eventually work on an alternative solution together. | 14:19 |
panda|rover | so, if some developers would be able to spend some time to explain it in the community meeting, I'd appreciate it, thanks. | 14:19 |
jaosorior | panda|rover: might also be a good idea to bring it up to the mailing list. Given that not everybody might be able to join to the CI community meeting (I can't join cause I have a conflicting meeting, for instance) | 14:20 |
panda|rover | jaosorior: ok, I'll do that, thanks. | 14:21 |
jaosorior | thank you! | 14:21 |
jaosorior | the next topic is mine: (jaosorior) Lets do some docs! | 14:22 |
jaosorior | So, based on some of the community feedback that was taken from the Summit; one of the pain points of folks was stale and difficult to find documentation | 14:22 |
jaosorior | in order to address this, marios and I synced up and decided to start a small initiative to work on the docs | 14:23 |
jaosorior | Namely, lets do small changes to improve the docs (readability, structure, and removing stale bits) | 14:23 |
jaosorior | and we're tracking this via this bug: https://bugs.launchpad.net/tripleo/+bug/1804642 | 14:23 |
openstack | Launchpad bug 1804642 in tripleo "[DOCS] Improve upstream documentation" [Low,In progress] - Assigned to Marios Andreou (marios-b) | 14:23 |
jaosorior | I know everybody's very busy, so we have the goal of doing one change a week | 14:24 |
*** hgibson has joined #tripleo | 14:24 | |
openstackgerrit | Steven Hardy proposed openstack/tripleo-quickstart-extras master: Switch httpboot directory for baremetal underclouds https://review.openstack.org/585344 | 14:24 |
jaosorior | so, if you're interested in joining, help is very much appreciated! | 14:24 |
marios | jaosorior: thanks (also listening to another call) 1/week if you want to join us please do small changes/improvements | 14:24 |
*** srini_ has quit IRC | 14:24 | |
Tengu | I can probably get some time out of the "idling" while a deploy is running on my lab :) | 14:25 |
Tengu | that will also improve my knowledge. | 14:25 |
jaosorior | Tengu: that's how I've been approaching it. take some idle time, read the docs, and try to find something to fix. | 14:26 |
marios | just remember to include the related-bug so we can have a nice track of our improvement | 14:26 |
jaosorior | so far it's been a nice learning experience, even if we just passed the first week. | 14:26 |
openstackgerrit | Bogdan Dobrelya proposed openstack/tripleo-heat-templates master: Optimize config containers used for puppet steps https://review.openstack.org/620061 | 14:26 |
Tengu | marios: for sure | 14:26 |
jaosorior | lots to read still! :D | 14:26 |
Tengu | jaosorior: yeah. will try to ;). | 14:26 |
marios | welcome Tengu :) you now owe one patch by friday | 14:26 |
openstackgerrit | Honza Pokorny proposed openstack/tripleo-quickstart-extras master: Bump OVB version https://review.openstack.org/620325 | 14:26 |
*** saneax has quit IRC | 14:27 | |
jaosorior | The next topic is this one: (bogdando) https://bugs.launchpad.net/tripleo/+bug/1804822 optimize base layer for security and edge cases - feedback and code review needed | 14:27 |
openstack | Launchpad bug 1804822 in tripleo "Reduce kolla containers image size by moving off puppet bits we override for tripleo" [High,In progress] - Assigned to Bogdan Dobrelya (bogdando) | 14:27 |
bogdando | yeah, I hope it self containing, nothing to add here | 14:28 |
bogdando | just more eyes needed please | 14:28 |
*** rbrady has joined #tripleo | 14:28 | |
jaosorior | bogdando: I'll check it out after the meetings, thanks for bringing it up! | 14:28 |
bogdando | tl;dr the battle for images size and security | 14:28 |
dprince | bogdando: I'm not convinced puppet is your biggest problem | 14:29 |
bogdando | just a one of many, dprince | 14:29 |
dprince | bogdando: I would prefer we hold on pushing any patches perhaps until we agree | 14:29 |
bogdando | ofc, I'm pushing updates for review only | 14:29 |
bogdando | to not develop things detached | 14:29 |
dprince | bogdando: I think the --volumes-from thing is a bit janky. it is more complex to debug for example | 14:30 |
bogdando | all those have wip-1 | 14:30 |
bogdando | dprince: we could use paunch to start containers | 14:30 |
bogdando | so debugging will be very easy | 14:30 |
*** xek has quit IRC | 14:30 | |
dprince | the way the layers are built today uses less space, because puppet is in the base layer. | 14:30 |
Tengu | paunch creates systemd units... | 14:30 |
bogdando | and solid with containers & paunch 101 UX | 14:30 |
bogdando | dprince: yes, but puppet brings in systemd, ruby and more | 14:31 |
dprince | bogdando: 2 things I would stress. Lets not just change our base layers around without hard data. Suspicion isn't enough to go and change these things | 14:32 |
bogdando | so we have at least 3 unrelated subjects for security maintenance for *each* container | 14:32 |
dprince | bogdando: and you may consider alternative (radical) containers to better accomidate edge clouds | 14:32 |
dprince | bogdando: what is your main issue? space, or network bandwidth? | 14:32 |
bogdando | what do you mean a suspicion? I think it's time to address that tech debt, at very least from the security standpoints | 14:32 |
bogdando | those look very generic, not just suspicious things to be proved | 14:33 |
shardy | introducing more dependencies on the host will make it harder when we eventually want to adopt an immuntable host OS like coreos, FWIW | 14:33 |
dprince | bogdando: my vision for how to address the puppet technical debt is quite different from yours I think | 14:33 |
openstackgerrit | Jason E. Rist proposed openstack/tripleo-ui master: Enable deletion of deployment upon successful deployment https://review.openstack.org/620332 | 14:33 |
dprince | bogdando: the LP ticket you filed mentioned space and network bandwidth... | 14:33 |
bogdando | shardy: the change does not bring dependencies for host, only reorg containers | 14:33 |
dprince | bogdando: https://bugs.launchpad.net/tripleo/+bug/1804822 | 14:33 |
openstack | Launchpad bug 1804822 in tripleo "Reduce kolla containers image size by moving off puppet bits we override for tripleo" [High,In progress] - Assigned to Bogdan Dobrelya (bogdando) | 14:33 |
dprince | image size is your main concern? | 14:34 |
bogdando | dprince: I updated it for security concerns todayt | 14:34 |
bogdando | and would be nice to alter cronie to not bring in systemd | 14:34 |
bogdando | #link https://review.rdoproject.org/r/#/q/topic:base-container-reduction | 14:34 |
dprince | bogdando: I spoke to slage yesterday. One idea for edge might be to go the other direction and try using 1 container for everything | 14:34 |
*** xek has joined #tripleo | 14:34 | |
bogdando | #link https://review.openstack.org/#/q/topic:base-container-reduction | 14:35 |
dprince | bogdando: like, we used to have an overcloud-full.qcow2 contain all the packages. If you want to only have a minimum amount of space, then that is likely your best option | 14:35 |
jaosorior | dprince: I do have to agree with bogdando on the security side. Whenever a security vulnerability is found on one of the dependencies that are pulled because of puppet, we need to update the base, and thus update all of the containers. | 14:35 |
bogdando | dprince: > my vision for how to address the puppet technical debt is quite different from yours I think | 14:35 |
bogdando | let's please consolidate on that | 14:35 |
dprince | jaosorior: do we have data on this? Like there are other Openstack things in our base container that are likely much more commonly security patched | 14:36 |
bogdando | in mail lists, code review, and alternative patches! it's very welcome | 14:36 |
dprince | jaosorior: I guess what confuses me is why puppet. Its one of perhaps many things | 14:36 |
bogdando | # link http://lists.openstack.org/pipermail/openstack-discuss/2018-November/000212.html | 14:36 |
openstackgerrit | Derek Higgins proposed openstack/tripleo-quickstart-extras master: Setup Ironic in Overcloud https://review.openstack.org/509728 | 14:37 |
jaosorior | dprince: understood. I'll bring this topic up with my team and get more heads around the security side of this. | 14:37 |
*** cfontain has joined #tripleo | 14:37 | |
dprince | bogdando: I will write a spec for my thoughts on the puppet containerization thoughts I have. But do note they are more about "logical" containers (keeping the containers self-contained) and do not perhaps fit with what your space/disk concerns are after | 14:37 |
dprince | jaosorior: look at the history, how often are we currently bumping the base layer for puppet and its deps. Is it really a problem? | 14:38 |
Tengu | well, if we can drop systemd from containers, that would already be a nice thing. | 14:38 |
bogdando | jaosorior, dprince: not just puppet, but systemd and ruby :) | 14:38 |
dprince | jaosorior: compare that to other packages. | 14:38 |
openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-docs master: Add simple diagram for contributor guide promotion stages https://review.openstack.org/616187 | 14:38 |
bogdando | my strong opinion is it's time to stop adding those into all containers | 14:38 |
bogdando | so the size is a 2nd issue , and yes, for edge cases only | 14:39 |
dprince | bogdando: but they get used in all the containers? | 14:39 |
dprince | bogdando: you are essentially asking us to stop using RPM dependencies in our containers... and just start bind mounting random things from other places into them | 14:39 |
jaosorior | alright, I suggest we continue this discussion in the BZ or the mailing list | 14:40 |
dprince | I mean I guess both containers would be built with their own RPMs | 14:40 |
Tengu | if this allows to prevent having to rebuild all the containers when there are security concerns... | 14:40 |
bogdando | dprince: jaosorior: > I guess what confuses me is why puppet. Its one of perhaps many things | 14:41 |
bogdando | yes, one of many, in the linked mail list, hjensas brought more of that | 14:41 |
bogdando | and mwhahaha did some optimizations, earlier in the topic | 14:41 |
jaosorior | bogdando: mind starting another mail thread with a new topic so this discussion is easier to track? | 14:41 |
shardy | We do already have parameters which allow splitting ServiceNameImage (runtime) and ServiceNameConfigImage | 14:41 |
shardy | so we could use different images, double how many are built and remove the runtime puppet etc deps | 14:42 |
bogdando | dprince: yes, they are in all containers in tripleo | 14:42 |
shardy | but yeah, ML sounds like a good place to discuss | 14:42 |
bogdando | not used maybe ,but stay here runtime and may be exploited, all of that security things :) | 14:42 |
dprince | shardy: if you have to download the config image once why not just use it to run the service? | 14:42 |
shardy | dprince: to avoid the need to restart service containers if e.g puppet gets updated which was mentioned above | 14:43 |
shardy | dprince: but yeah, I do agree | 14:43 |
dprince | shardy: the reason the Config image parameters exist was more along the lines of optimization I think, to eliminate generating things like nova.conf more than once | 14:43 |
bogdando | sorry, that's it from my side | 14:43 |
shardy | just pointing out we already provide an interface which could enable "lean" runtime containers if folks really want that for hardening etc | 14:43 |
openstackgerrit | Marios Andreou proposed openstack/tripleo-docs master: Add simple diagram for contributor guide promotion stages https://review.openstack.org/616187 | 14:43 |
*** xek_ has joined #tripleo | 14:43 | |
dprince | shardy: its all pre-optimization to me at this point. Like how often is puppet or ruby updated that something else in the base container isn't? | 14:44 |
* dprince thinks we are chasing the wrong problem | 14:44 | |
mwhahaha | very rarely | 14:44 |
mwhahaha | because we don't switch versions | 14:44 |
shardy | dprince: yeah, I'm just saying different images could be cleaner than bind mounts between containers etc, not arguing for the change itself | 14:44 |
jaosorior | Alright, lets move on with the agenda and continue this topic in the ML | 14:45 |
dprince | shardy: cool. And I'm saying having a container be able to configure itself is very useful. Furthermore a logical 'service' container is a very good thing | 14:45 |
Tengu | dprince: well, between systemd, puppet and ruby, there are many security concernes, almost every month... and also, what's the point keeping them in runtime containers when they are useless? reducing attack surface is a must, regarding security ;). anyway, will also jump in the LP + ML. | 14:45 |
dprince | that said, if you want to break the rules for edge and have an all-in-one container then we have parameters in place that should allow you to do that | 14:46 |
*** xek has quit IRC | 14:46 | |
dprince | but don't go re-layer everything for the sake of pre-optimizing container layers | 14:46 |
jistr | FWIW removing puppet/ruby from service containers is going to make situation worse w/r/t space usage likely | 14:46 |
jistr | would we start building 2 sets of base images? | 14:47 |
bogdando | shardy: note, those bind mounts between containers is a daily approach for pods | 14:47 |
jistr | one for services, other for config | 14:47 |
Tengu | mounts between containers is also a known and well used thing in rancher world. | 14:47 |
dprince | bogdando: sure, but is having a service be able to configure itself really need to involve a separate pod? | 14:47 |
Tengu | I'd say yes, dprince... removing not-runtime things is a good idea. That will require some chances in the architecture, but still... I support bogdando on that :). | 14:49 |
bogdando | shardy: I wish I could just use podman pods, but I have hope to backport that for Queens | 14:49 |
dprince | rather than this, I would like to see use use --volumes from for the /var/lib/config-data directory | 14:49 |
dprince | having that be in a data container makes so much sense | 14:49 |
dprince | and IMO is a more correct "podlike" construct | 14:49 |
shardy | bogdando: IMHO backporting something like this would be very risky indeed | 14:49 |
bogdando | but we want to support edge there... | 14:50 |
bogdando | DCN | 14:50 |
dprince | but what is being suggested here is basically teasing apart functional containers... | 14:50 |
dprince | those are two very different things | 14:50 |
bogdando | think of 30,000 or 40,000 nodes getting a base layer with the world plugged in | 14:50 |
shardy | bogdando: if you need a solution that works on queens personally I'd just build two sets of containers vs the sidecar thing | 14:51 |
shardy | but that's just my opinion | 14:51 |
bogdando | I think that can work as well | 14:51 |
bogdando | would be nice to play with neat podman pods | 14:51 |
dprince | shardy: thats actually more data that he'll download I think | 14:51 |
bogdando | w/o legacy ) | 14:51 |
shardy | it's still a risk from an update perspective but it miminizes the architecural changes | 14:51 |
*** krypto has joined #tripleo | 14:52 | |
jistr | dprince: +1. I don't follow how can we save on downloading things if we build two sets of images, it's likely going to have the opposite effect AFAICT? | 14:52 |
jistr | i understand the security argument though | 14:52 |
*** gkadam has quit IRC | 14:52 | |
*** rfolco_doctor is now known as rfolco | 14:53 | |
bogdando | dprince: I'm not sure all-in-one container is a good idea tbh | 14:53 |
jistr | but as long as we generate config locally on each node, the 30 or 40K nodes are going to have to download images with world plugged in anyway | 14:53 |
dprince | bogdando: given what you are asking for it is the way you'll download the least data to these nodes | 14:53 |
shardy | jistr, dprince: yeah, I was just saying it's a less risky way of achieving the hardening goal vs the image size thing | 14:53 |
bogdando | jistr: > well, between systemd, puppet and ruby, there are many security concernes, almost every month... and also, what's the point keeping them in runtime containers when they are useless? reducing attack surface is a must, regarding security ;). anyway, will also jump in the LP + ML. | 14:53 |
Tengu | hm, we seriously should continue this discussion on the ML and get over the mtg though (ping jaosorior ;)) | 14:53 |
bogdando | no, just a separate image with config-time dependencies | 14:54 |
bogdando | and config_image to leverage volumes off it | 14:54 |
bogdando | that's what I proposed in the lined topics | 14:54 |
jaosorior | Tengu: at this point there's 5 min left. | 14:54 |
krypto | hi all in triple-o is it possible to have separate roles like RabbitMQ and load balancer so that it can be installed on separate nodes | 14:54 |
jistr | bogdando, shardy: yea re hardening it makes sense i think | 14:54 |
dprince | bogdando: honestly, the best solution for you would be using packages on the host, generating the config files on the host. And then having an all-in-one container for all the services which lets them run in an isolated mannner | 14:54 |
jaosorior | Anyway | 14:54 |
jaosorior | just for status: | 14:54 |
jaosorior | #topic bugs & blueprints | 14:54 |
*** openstack changes topic to "bugs & blueprints (Meeting topic: tripleo)" | 14:54 | |
jaosorior | #link https://launchpad.net/tripleo/+milestone/stein-2 | 14:54 |
jaosorior | For Stein we currently have 29 (for stein-2) and 3 (for stein-3) blueprints open in Launchpad. | 14:54 |
jaosorior | Bugs: 780 (+15) stein-2, 5 (+2) stein-3. 102 (+1) open Storyboard bugs. | 14:54 |
openstack | bug 36202 in gnupg (Ubuntu) "duplicate for #780 race condition on ~/.gnupg/random_seed when signing" [Medium,Fix released] https://launchpad.net/bugs/36202 - Assigned to Daniel Silverstone (dsilvers) | 14:54 |
dprince | bogdando: i.e. taking a step back from containers | 14:54 |
jaosorior | #link https://storyboard.openstack.org/#!/project_group/76 | 14:54 |
mwhahaha | krypto: yes, see the Messaging role we provide | 14:54 |
jaosorior | #topic open discussion | 14:55 |
*** openstack changes topic to "open discussion (Meeting topic: tripleo)" | 14:55 | |
krypto | Thanks mwhahaha | 14:55 |
*** salmankhan has joined #tripleo | 14:58 | |
*** salmankhan has quit IRC | 14:58 | |
jaosorior | Alright, folks! thanks for joining | 14:58 |
jaosorior | #endmeeting | 14:58 |
*** openstack changes topic to "CI Status: Green but recheck slowly | https://docs.openstack.org/tripleo-docs/latest/" | 14:58 | |
openstack | Meeting ended Tue Nov 27 14:58:51 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:58 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/tripleo/2018/tripleo.2018-11-27-14.00.html | 14:58 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/tripleo/2018/tripleo.2018-11-27-14.00.txt | 14:58 |
openstack | Log: http://eavesdrop.openstack.org/meetings/tripleo/2018/tripleo.2018-11-27-14.00.log.html | 14:58 |
bogdando | jistr, not for day 2. One have to only update that config-image, not all containers, pushing changes off the base layer upside all the way up... If puppet/systemd/ruby gets a CVE | 14:59 |
weshay | k.. moving to ci open office | 14:59 |
weshay | rfolco, https://bluejeans.com/4113567798 | 15:00 |
weshay | ssbarnea|bkp2, sshnaidm|afk ^ | 15:01 |
rfolco | weshay, joining in a min | 15:01 |
marios | gfidente: fultonj: you want to join us on ci community call? " https://bluejeans.com/4113567798 | 15:03 |
gfidente | marios yes joining | 15:03 |
fultonj | marios: yes | 15:03 |
gfidente | marios thanks | 15:03 |
*** bfournie has joined #tripleo | 15:05 | |
jistr | bogdando: ack, yea i agree re security. Re downloads i think it's going to be the same or worse still. Either we'll have to have per-service config image or the single config image will need to carry all of OpenStack anyway (puppet modules depend on OpenStack packages for some actions AFAIK), so you'll still download the world even if you update just the config image, unless i'm missing something | 15:05 |
*** devep_ has quit IRC | 15:05 | |
*** devep has quit IRC | 15:05 | |
Tengu | jistr: at least World won't be loaded in the runtime containers, exposing flawed libraries and the like ;). | 15:06 |
jistr | Tengu: yup agreed on that | 15:06 |
Tengu | security has always been a tradeoff. | 15:06 |
Tengu | convenience vs security, usability vs security, bandwidth vs security, KISS vs security, and the like | 15:07 |
chem | KISS is a worthy goal :) | 15:07 |
Tengu | yeah, and that one can lead to security ;). | 15:08 |
Tengu | btw, if we apply KISS to the containers, we will actually drop a lot of useless load. | 15:08 |
jistr | yea i'm fine making tradeoffs, just trying to get to the bottom of individual points, because in any decision making it helps to have the pros/cons clear. I mean we shouldn't use download size as a "pro" in this discussion when (according to my understandin anyway) it's going to end up being a "con". | 15:09 |
Tengu | of course | 15:09 |
openstackgerrit | Quique Llorente proposed openstack/python-tripleoclient master: Catch socket.timeout waitting port api https://review.openstack.org/619741 | 15:09 |
Tengu | open process means open discussions, weighting all aspects, and so on ;). | 15:09 |
Tengu | one more thing: if runtime containers don't have World, security update might NOT affect them, meaning: no service disturbence, as we should not need any container restart. | 15:10 |
Tengu | that's the nice thing if we got either all-in-one config container, or per-service config container. either way: as long as (service+libs) aren't affected, we don't need to restart the container. yay! | 15:11 |
Tengu | no more shattering rabbitmq cluster running after its messages | 15:11 |
Tengu | just for that.. I'm all in :D | 15:12 |
jistr | Tengu, bogdando: just a heads up, to allow rolling upgrades we'll likely need per-service config containers | 15:13 |
*** skramaja has quit IRC | 15:13 | |
jistr | so a preferred technical solution would be to bolt on config stuff on top of individual service images i think | 15:14 |
dtantsur|mtg | config containers wut?.. | 15:15 |
Tengu | yeah, if individual config-container are needed, that's probably the right thing to do, for the sake of common layers. | 15:15 |
jistr | alternatively we could go the other way -- bolt on service stuff on top of base image with config stuff | 15:15 |
Tengu | hm, that's what we have already.... ? | 15:15 |
Tengu | bolting that way would let puppet/systemd/ruby/others in runtime containers | 15:15 |
jistr | Tengu: i meant a separate tree for config images only. The service images would start from a base image without config stuff | 15:16 |
Tengu | ah, ok. not sure this is the best regarding space/bw | 15:17 |
*** salmankhan has joined #tripleo | 15:17 | |
Tengu | as the config will get part or all of the service thingy anyway. | 15:17 |
Tengu | (due to dependencies) | 15:17 |
jistr | Tengu: personally i'd prefer "bolt on config stuff on top of individual service images" because having a single base image seems easier to reason about | 15:17 |
Tengu | +1 | 15:17 |
jistr | Tengu: i think from space perspective both are bad :) | 15:17 |
Tengu | so, base image -> per-service image -> per-service config image ? | 15:18 |
jistr | Tengu: yes that's the sanest i think | 15:18 |
jistr | Tengu: but it results in downloading config stuff N times instead of once | 15:18 |
Tengu | yep. | 15:18 |
Tengu | and why not a config "all-in-one"? | 15:18 |
Tengu | OK it will probably duplicate part of openstack things. but we download it once, and get smaller per-service containers. | 15:19 |
Tengu | we avoid most of the duplication | 15:19 |
jistr | Tengu: because that would block us from aiming for rolling per-service upgrades | 15:19 |
Tengu | why so? | 15:19 |
Tengu | as long as service upgrade isn't triggered, we don't need to run the "service specific parts".. ? | 15:20 |
jistr | if we intend to run one service in major/minor version X and other service in minor/major version Y, we need matching-version config image | 15:20 |
Tengu | ah. humpf. so people are actually doing that? is it sane anyway? | 15:20 |
dtantsur|mtg | rolling upgrades? well, people who care about their cloud uptime do ;) | 15:21 |
jistr | Tengu: people aren't doing that with TripleO right now but i think it's been suggested that it'd be nice to be able to do that. IIRC some old blog posts, CERN used to do upgrades service-after-service | 15:22 |
openstackgerrit | Rafael Folco proposed openstack-infra/tripleo-ci master: Deprecate tripleo stable/{newton,ocata} jobs https://review.openstack.org/619337 | 15:22 |
dtantsur|mtg | they have to do it. otherwise it's too hard to recover if something fails in the middle. | 15:22 |
jistr | yea. Currently TripleO takes node-by-node approach, which makes a lot of sense coming from package-based world, but as we get more and more established with containers, it will probably be better/safer to go service-by-service at some point | 15:23 |
dtantsur|mtg | and of course downtime | 15:23 |
Tengu | jistr: erf... | 15:23 |
dtantsur|mtg | instance-of-service-by-instance-of-service, to be more precise | 15:24 |
jistr | dtantsur|mtg: yes, to preserve uptime | 15:24 |
dtantsur|mtg | like, ironic-conductor-1, then ironic-conductor-2, then ironic-api-1, then ironic-api-2, ... | 15:24 |
bogdando | hjensas, mwhahaha, jaosorior, shardy, jistr, Tengu, dprince: http://lists.openstack.org/pipermail/openstack-discuss/2018-November/000244.html | 15:25 |
jaosorior | bogdando: ack | 15:25 |
*** shardy has quit IRC | 15:26 | |
jistr | dtantsur|mtg: yea. On high level rolling across components, and within one component, rolling across service instances | 15:26 |
bogdando | jistr: I think this has nothing to individual containers, that is still a thing | 15:26 |
jistr | dtantsur|mtg, Tengu: currently that's all scifi :) but we shouldn't close any doors towards that | 15:26 |
bogdando | just empowered by a "pod" with puppet et al bits | 15:26 |
bogdando | consumed from another common container | 15:27 |
jistr | bogdando: nothing with containers, but it is affected by how images are structured | 15:27 |
bogdando | individual config images will keep working as is, jistr | 15:28 |
dtantsur|mtg | jistr: scifi for tripleo - yes | 15:28 |
*** Vorrtex has joined #tripleo | 15:29 | |
*** salmankhan has quit IRC | 15:29 | |
bogdando | just that they all stop having puppet* in it | 15:29 |
jistr | dtantsur|mtg: well we can't rolling-upgrade some services (e.g. Rabbit) so it's a bit more than just TripleO | 15:29 |
bogdando | later we may want to move off all clients there | 15:30 |
dtantsur|mtg | right, I mostly mean for openstack services that do support it | 15:30 |
*** mjturek has joined #tripleo | 15:30 | |
bogdando | like openstack client and whatnot? | 15:30 |
dtantsur|mtg | (nova, ironic, cinder, ...?) | 15:30 |
bogdando | so containers for runtime will only have needed libs to run | 15:30 |
dtantsur|mtg | the best way to upgrade rabbit is stop using rabbit for rpc :) | 15:30 |
bogdando | a service | 15:30 |
bogdando | but we can start from puppet | 15:30 |
bogdando | and its nasty dependencies ) | 15:31 |
*** rbrady has quit IRC | 15:33 | |
bogdando | jistr: >so you'll still download the world even if you update just the config image, unless i'm | 15:33 |
bogdando | I think you do. A side car container contains puppet and deps, while config image now stops containing it, as of the base layer getting leaner | 15:33 |
bogdando | and that's basically it... nothing that that | 15:33 |
bogdando | than | 15:33 |
bogdando | now if puppet gets a CVE fixed you do not pull in all layers on top of the base, for all containers | 15:34 |
bogdando | but only a base layer + 1 a common side car container | 15:34 |
bogdando | config/runtime images are now not afected by unrelated updates | 15:34 |
jistr | bogdando: that was my point in discussion with Tengu though, we probably can't have 1 common side car container image if we want to support rolling upgrades | 15:34 |
bogdando | why not? it contains puppet, maybe clients later, just like a single image would do | 15:35 |
Tengu | jistr: unless playing on image tag maybe? | 15:35 |
jistr | bogdando: because you want different ones in one cloud at the same time. They have to match the services | 15:36 |
bogdando | we just split image runtime, but from a container started off it, it looks the same as if started from the old image where we have all included there | 15:36 |
bogdando | nothing changes | 15:36 |
*** ykarel|away has joined #tripleo | 15:36 | |
bogdando | so you can version that image | 15:36 |
Hobbestigrou | someone can review this please patch please https://review.openstack.org/#/c/620003/ ? | 15:36 |
jistr | Tengu: that could be a way perhaps... still it feels a bit strange to make one service config image affect all the other services | 15:36 |
bogdando | the same way as you would do for the original image that contains puppet | 15:36 |
jistr | Tengu: no per-service fixes/tweaks are possible | 15:37 |
bogdando | I see no difference really... | 15:37 |
bogdando | Just that you have N+1 images of a vesrion X vs Y, compared to the original N images of X vs Y | 15:38 |
bogdando | just that N images duplicate all that is there in that extra 1 image | 15:38 |
bogdando | just in the base layer | 15:38 |
bogdando | jistr: ^^ | 15:38 |
jistr | bogdando: yea, i'm thinking whether we can get away with bundling the config capabilities of all services into a single image in this scenario... maybe (?) | 15:39 |
bogdando | not sure, that looks like another topic and I have to wrap my head around it ) | 15:40 |
bogdando | that's probably only the question of when to merge layers | 15:40 |
bogdando | build time, like that all-on-one | 15:40 |
bogdando | or runtime, what pods/volume-from can do for individual container merges | 15:41 |
bogdando | or merge nothing and have it all dupicated off the common base layer, as we do | 15:41 |
bogdando | jistr: ^^ | 15:41 |
jistr | Tengu, bogdando: the single-config-image vs. per-service-config-image ways can perhaps be combined too, if we discover we have to. E.g. have a single image mostly, and if some services are too special then they can still get their own custom one. | 15:42 |
jistr | and maybe playing on image tag would indeed be sufficient for rolling upgrades here | 15:42 |
bogdando | merging run time, in pods, look more a wise approach to me | 15:42 |
bogdando | when bloating it up build time | 15:42 |
bogdando | think of k8s pods that work as only build-time all in one? :D | 15:43 |
bogdando | do we want that? | 15:43 |
*** dciabrin has joined #tripleo | 15:43 | |
*** shardy has joined #tripleo | 15:44 | |
jistr | bogdando: do you have a link with some reading re runtime merging? i'm not familiar with that | 15:46 |
bogdando | jistr: that's a pod in k8s | 15:46 |
bogdando | the pod is a container | 15:47 |
bogdando | and all containers in it may consume its volumes | 15:47 |
bogdando | that's that I called merging runtime | 15:47 |
*** jcoufal has joined #tripleo | 15:47 | |
*** ade_lee has joined #tripleo | 15:47 | |
bogdando | so logically you see a pool of volume resources for all of containers in pod | 15:47 |
*** ksambor has quit IRC | 15:47 | |
bogdando | an opposite to pods, would be to build a single container and create containers using volumes off it | 15:48 |
bogdando | that's how I get it, I may be wrong... | 15:48 |
jistr | bogdando: ok i am familiar with that :) but afaik that's merging *volumes*, not *layers*, right? | 15:48 |
bogdando | for the latter case we have shared nothing for containers started off that all in one | 15:48 |
bogdando | think of it as logical units | 15:48 |
bogdando | we want to see puppet from a container w/o it | 15:49 |
bogdando | we can either add a layer, into the base or other one, or use a pod | 15:49 |
jistr | hm so you'd want to share things like /usr/bin/puppet and /usr/lib/<whatever-puppet-needs> via a volume? | 15:50 |
bogdando | yes | 15:50 |
bogdando | that's my plan | 15:50 |
jistr | well i've never tried that, but at a first glance it sounds dangerous/fragile to me | 15:50 |
bogdando | see https://review.openstack.org/#/c/620061/4/docker/docker-puppet.py | 15:50 |
bogdando | well, not sure. Why? k8s uses that for each pod. Not sure if for binaries, we could search for examples | 15:51 |
bogdando | btw, I don't know if pods use volume-from or just nsenter | 15:52 |
*** dtrainor__ is now known as dtrainor | 15:52 | |
dtrainor | is there a way to see a list of resource classes? or is this information only availble per a node's resource_class field, and the in the 'resources' attribute of the 'properties' field of a flavor? | 15:52 |
*** jcoufal has quit IRC | 15:52 | |
jistr | bogdando: i think that's kinda the difference i see. I don't mind as we mount /usr/share/openstack-puppet/modules, because we know that we only need whatever is in that dir. But how would we sanely track whatever dynamic libs are getting loaded when we execute /usr/bin/puppet ? | 15:53 |
openstackgerrit | Sam Doran proposed openstack/ansible-role-redhat-subscription master: Fix table in README https://review.openstack.org/620345 | 15:53 |
bogdando | jistr: right, and that is an open question :) | 15:53 |
dtantsur|mtg | dtrainor: you can fetch them from Placement, I think. but doing $ openstack node list --fields resource_class may be easier | 15:53 |
bogdando | let's think of alternatives | 15:53 |
bogdando | maybe indeed, stop using strange RPM dependencies? | 15:54 |
dtrainor | dtantsur|mtg, thanks. i was actually going to ping you about this later on, i think there may have been a regression re: node tagging / resource matching from rocky -> queens | 15:54 |
*** quiquell is now known as quiquell|off | 15:54 | |
bogdando | or stop installing RPMs in containers ) | 15:54 |
*** gfidente has quit IRC | 15:54 | |
dtrainor | but i first wanted to prove this :) | 15:54 |
jistr | bogdando: the build-time layering sounds saner to me.. | 15:54 |
bogdando | like I want cronie and get systemd pulled in for freeeee bonus | 15:54 |
dtantsur|mtg | dtrainor: there may be, there may be not :) nova scheduler is dark and full of terrors | 15:54 |
*** gfidente has joined #tripleo | 15:54 | |
dtrainor | indeed. | 15:54 |
*** hberaud has joined #tripleo | 15:55 | |
bogdando | jistr: that is not achievable to drop off config time bits then | 15:55 |
dtrainor | dtantsur|mtg, like this? (undercloud.example.com, 5396d128-0fbb-4f73-a2ea-1f1c067b0f28) ram: 0MB disk: 0MB io_ops: 0 instances: 0 does not have 4096 MB usable ram before overcommit, it only has 0 MB. host_passes /usr/lib/python2.7/site-packages/nova/scheduler/filters/ram_filter.py:47 | 15:55 |
mwhahaha | weshay: so i think the gate is terrible because we added the scenario jobs back as voting to the stable branches. | 15:55 |
bogdando | unless maintaining a two trees | 15:55 |
dtantsur|mtg | dtrainor: I suspect you need to update your flavors | 15:55 |
*** devep has joined #tripleo | 15:55 | |
bogdando | or using docker build time dependencies | 15:55 |
bogdando | not a thing for podman AFAIK | 15:56 |
dtantsur|mtg | dtrainor: https://docs.openstack.org/ironic/latest/install/configure-nova-flavors.html all this resources stuff, do you have it? | 15:56 |
bogdando | and not really fits into what docker-puppet.py does | 15:56 |
dtrainor | which updates might you suggest? i'm using the default flavors deployed with a downstream queens deployment | 15:56 |
dtrainor | i do, yes | 15:56 |
*** udesale has quit IRC | 15:56 | |
dtrainor | they're set to 0, and per the docs that's ok to disable scheduling based on standard properties for a bare metal flavor | 15:57 |
*** udesale has joined #tripleo | 15:57 | |
bogdando | dprince, jistr: speaking of https://review.openstack.org/#/c/620061/4/docker/docker-puppet.py, why do we bind mount /usr/share/openstack-puppet/modules/ from host? | 15:58 |
openstackgerrit | Merged openstack/tripleo-heat-templates master: Upgrades: Ensure idempotency of pacemaker services https://review.openstack.org/619575 | 15:58 |
openstackgerrit | Merged openstack/tripleo-common master: Catch heat exceptions in DeployStackAction https://review.openstack.org/613974 | 15:58 |
*** udesale has quit IRC | 15:58 | |
bogdando | I thought we want to consume what we have in containers? | 15:58 |
bogdando | why including things into the base layer then overriding it in docker-puppet from host? | 15:59 |
*** yprokule has quit IRC | 15:59 | |
openstackgerrit | Steven Hardy proposed openstack/tripleo-heat-templates master: Remove common bootstrap_nodeid from deploy_steps/tripleo-packages.yaml https://review.openstack.org/605682 | 15:59 |
jistr | bogdando: i think the puppet *modules* are not distributed with containers maybe? via RPMs still? while puppet *executables* are in the containers | 15:59 |
bogdando | jistr: they are | 15:59 |
bogdando | puppet-tripleo pulls in the world | 15:59 |
bogdando | and it's in the base later | 16:00 |
bogdando | layer | 16:00 |
openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates master: GATE CHECK for TripleO https://review.openstack.org/604298 | 16:00 |
bogdando | that's not what I understand in DF still ) | 16:00 |
dtrainor | dtantsur|mtg, re: "disable scheduling based on standard properties" was a quote from that very same doc you linked. i believe my understanding of that process is correct | 16:00 |
bogdando | had we wanted only puppet, we'd include puppet, not puppet-tripleo | 16:00 |
jistr | ack then i don't know | 16:00 |
* bogdando sigh | 16:00 | |
bogdando | mwhahaha: perchance? | 16:01 |
mwhahaha | que? | 16:01 |
bogdando | mwhahaha: | 16:01 |
bogdando | speaking of https://review.openstack.org/#/c/620061/4/docker/docker-puppet.py, why do we bind mount /usr/share/openstack-puppet/modules/ from host? | 16:01 |
bogdando | I thought we want to consume what we have in containers? | 16:01 |
bogdando | why including things into the base layer then overriding it in docker-puppet from host? | 16:01 |
mwhahaha | because puppet-tripleo is used by all the services | 16:01 |
mwhahaha | so it's global to all openstack services | 16:01 |
mwhahaha | which is why it would make sense to be in the base layer | 16:01 |
*** dansmith has quit IRC | 16:02 | |
bogdando | mwhahaha: but why overriding /usr/share/openstack-puppet/modules/ from host? | 16:02 |
*** dansmith has joined #tripleo | 16:02 | |
bogdando | isn't that pointless to include into container that path from puppet-tripleo & deps then? | 16:02 |
mwhahaha | probably, but dprince has a patch to stop using the host puppet | 16:02 |
mwhahaha | this is one of those things that we need to weigh the pros/cons of | 16:03 |
bogdando | I saw that, but the question remains, why do we want something in the base layer what we always override | 16:03 |
mwhahaha | because there's an operational impact for either method | 16:03 |
* mwhahaha shrugs | 16:03 | |
mwhahaha | it was like that when i got here | 16:03 |
bogdando | the same :D | 16:03 |
mwhahaha | it's easier to hack in changes if they come from the host than in the container | 16:04 |
mwhahaha | so i'm not sure | 16:04 |
*** cfontain has quit IRC | 16:04 | |
mwhahaha | we could drop puppet-tripleo and just leave puppet from the base | 16:04 |
mwhahaha | but that prevents it from being used only from containers | 16:04 |
*** cfontain has joined #tripleo | 16:04 | |
mwhahaha | like if we switch to an atopic base os | 16:04 |
mwhahaha | of course who knows if we'll ever be able to do that | 16:05 |
bogdando | we'll do, you'll see! :) | 16:05 |
mwhahaha | so i still think you need puppet in the base container | 16:06 |
mwhahaha | other wise you'll dupe that in all the containers and actually have space problems | 16:06 |
bogdando | mwhahaha: my plan was to use a pod-like way to runtime refer it | 16:06 |
panda|rover | mwhahaha: to the best of you knowledge, do you think any of the scenarios we'll have to define in the custom environment file will require a different set of "ci" feature from the one required for another environment ? | 16:06 |
bogdando | see that jistr writes above:4:50:13 PM GMT+1 - jistr: hm so you'd want to share things like /usr/bin/puppet and /usr/lib/<whatever-puppet-needs> via a volume? | 16:07 |
mwhahaha | panda|rover: not for the standalone, we don't have any basic features from a quickstart perspective that we would change | 16:07 |
* bogdando thinks of using nsenter for that... | 16:07 | |
mwhahaha | bogdando: honestly this doesn't solve anything of use. It would be better if we could generate configs/containers and ship only what we needed from the UC. but that's even more complicated | 16:08 |
Tengu | please don't | 16:08 |
Tengu | nsenter is a mess, really. | 16:08 |
panda|rover | mwhahaha: ok | 16:08 |
Tengu | bogdando: if we can avoid nsenter, it's really, really better. | 16:09 |
Tengu | we already had some funky issues with it, and it's really a pain to debug/trace -.- | 16:09 |
openstackgerrit | Gael Chamoulaud proposed openstack/tripleo-validations master: Use containerized location of keystone.conf file https://review.openstack.org/620350 | 16:09 |
bogdando | Tengu: ok, I'll look what can be done | 16:10 |
*** salmankhan has joined #tripleo | 16:11 | |
*** salmankhan has quit IRC | 16:12 | |
jrist | honza, jtomasek, dtrainor, florianf eyes? https://review.openstack.org/#/c/620332/ | 16:13 |
openstackgerrit | Merged openstack/tripleo-docs master: Update parameters for ipsec deployment https://review.openstack.org/619557 | 16:15 |
openstackgerrit | Thomas Herve proposed openstack/tripleo-common stable/rocky: Catch heat exceptions in DeployStackAction https://review.openstack.org/620352 | 16:18 |
Tengu | bogdando: avoiding nsenter will make the code less complex, more maintainable, easier to fix/debug/understand :). switching namespace on the fly is nice, but probably a bad idea for the future. | 16:18 |
*** aedc has quit IRC | 16:20 | |
jistr | Tengu, bogdando: separating service vs. config images at build time (either having a single know-it-all config image, or bolting config parts on top of service images) so far sounds the most sane to me, to achieve the security hardening | 16:20 |
*** aedc has joined #tripleo | 16:20 | |
jistr | (from what we've discussed so far) | 16:21 |
*** artom has quit IRC | 16:22 | |
*** artom has joined #tripleo | 16:22 | |
*** cfontain has quit IRC | 16:22 | |
openstackgerrit | Jose Luis Franco proposed openstack-infra/tripleo-ci master: Create tripleo-ansible-role-job template for ansible projects. https://review.openstack.org/620353 | 16:23 |
*** thrash is now known as thrash|biab | 16:25 | |
*** mfedosin has joined #tripleo | 16:25 | |
dtrainor | jrist, ack, i'll be able to look in a bit | 16:27 |
*** jcoufal has joined #tripleo | 16:28 | |
*** apetrich has quit IRC | 16:28 | |
*** jfrancoa has quit IRC | 16:28 | |
openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-quickstart-extras master: Fix failure to install atop on fedora28 https://review.openstack.org/619595 | 16:29 |
openstackgerrit | Rajini Karthik proposed openstack/tripleo-heat-templates stable/rocky: Added Dell EMC SC multipath support https://review.openstack.org/620355 | 16:29 |
*** hakhande_ has quit IRC | 16:30 | |
openstackgerrit | Rajini Karthik proposed openstack/tripleo-heat-templates stable/rocky: Added Dell EMC SC multipath support https://review.openstack.org/620355 | 16:31 |
openstackgerrit | Rajini Karthik proposed openstack/tripleo-heat-templates stable/queens: Added Dell EMC SC multipath support https://review.openstack.org/620358 | 16:34 |
mfedosin | weshay, hello! | 16:35 |
mfedosin | I just found an issue with the reproducer on 'stack create' task... | 16:35 |
mfedosin | and wanted to understand whether it's common or just for me | 16:35 |
mfedosin | here is my command ./reproducer-quickstart.sh --create-virtualenv true --remove-stacks-keypairs true --nodestack-prefix repro -a | 16:36 |
mfedosin | and the results are http://paste.openstack.org/show/736123/ | 16:36 |
dprince | bogdando, mwhahaha: you have to keep in mind the entire TripleO deployment used to be on baremetal | 16:37 |
dprince | this is why we bind mounted /usr/share/openstack-puppet/modules/. It was a step towards containerization | 16:37 |
dprince | but also keep in mind Pacemaker still runs on the baremetal host as well and currently requires puppet there | 16:38 |
bogdando | jistr: yes, but that makes the Edge DCN story very sad | 16:41 |
bogdando | indeed, dprince I forgot about pacemaker on host :o | 16:42 |
*** apetrich has joined #tripleo | 16:42 | |
bogdando | jistr: though, may be adding config bits as a small layer on top ... | 16:44 |
bogdando | not the base layer ofc | 16:44 |
bogdando | may be a way to go indeed | 16:44 |
*** sri_ has joined #tripleo | 16:44 | |
therve | mfedosin: What does "openstack stack show repromultinode_stack" says? | 16:45 |
openstackgerrit | Gael Chamoulaud proposed openstack/tripleo-validations master: Run pcs command only if the pacemaker service is active https://review.openstack.org/620360 | 16:47 |
dprince | bogdando: if you add 'config bits' (i.e. puppet, etc) in the layers on top it will actually cost you much more in terms of network bandwidth and disk usage | 16:47 |
bogdando | jistr: commented as well, nsenter... | 16:48 |
bogdando | Tengu: (sorry for that) | 16:48 |
Tengu | bogdando: :) | 16:48 |
bogdando | dprince: not, if you think of Day 2 | 16:48 |
Tengu | anyway. see you tomorrow folks! | 16:48 |
bogdando | when you have to push the changed layer and all changes on top for each container as a minor update | 16:48 |
dprince | bogdando: if you'll hold on for 1 day I will write you a spec for how I'd like to re-layer puppet logically | 16:49 |
*** agopi is now known as agopi|food_run | 16:49 | |
bogdando | that's not an emergency you know :) I can hold off as long as we want it. let's make it clearly implemented! thanks dprince! | 16:49 |
mfedosin | therve, $ openstack stack show repromultinode_stack | 16:49 |
mfedosin | Stack not found: repromultinode_stack | 16:49 |
dprince | bogdando: regarding the root cause of your comments I'm hearing a general "I don't like how containers work", so lets bind mount things ad-hoc | 16:49 |
bogdando | dprince: please hear me right. bind-mount is not like host or something. Just a standard way of doing things in pods! | 16:50 |
therve | mfedosin: Do you still have /tmp/reproduce-tmp.mqp25/reproprovision_multinode_stack.log ? | 16:50 |
bogdando | each pod in k8s world does that | 16:50 |
bogdando | when you define a volume in a pod and use it in a container defined nearby | 16:51 |
dprince | bogdando: I dispute that. Bind mounting applications and libraries should not be done. It is the equivalent of using an /nfs share for your applications | 16:51 |
bogdando | that's established, what else we can do? only follow it | 16:51 |
dprince | bogdando: --volumes from should be used to share application state. Not application code | 16:51 |
mfedosin | therve, yes, one second | 16:51 |
bogdando | dprince: yes, that's a nuance indeed... | 16:51 |
dprince | this is where we disagree, and I think we need to have the team agree on our best practices. Otherwise, we'll have what I consider a "hack" in our codebase | 16:52 |
bogdando | sure | 16:52 |
bogdando | let's avoid more hacks :) | 16:52 |
mfedosin | therve, http://paste.openstack.org/show/736126/ | 16:52 |
mfedosin | it says ERROR: The Parameter (image) was not provided. | 16:52 |
* jistr also -1 on bind-mounting executables/libs | 16:53 | |
therve | Yeah | 16:53 |
bogdando | dprince: wait, but init containers does share code | 16:53 |
bogdando | and any bootstrap logic one wants for a pod! | 16:53 |
bogdando | IIRC | 16:53 |
therve | mfedosin: Content of /tmp/reproduce-tmp.mqp25/params_multinode.yaml ? | 16:53 |
bogdando | so one can have its containers bootstrapped using missing code | 16:53 |
bogdando | consumed from the init container | 16:53 |
bogdando | am I right? | 16:54 |
bogdando | do share* | 16:54 |
*** arxcruz|brb is now known as arxcruz | 16:54 | |
mfedosin | therve, http://paste.openstack.org/show/736127/ | 16:54 |
bogdando | and init containers may be using arbitrary images | 16:54 |
bogdando | so the same volumes from approach, just from other interface | 16:55 |
jistr | i haven't seen a container sharing code yet i think.. Once i tred to do it to get tensorflow running in container, mounting nvidia driver libs, but i noped out of that quite quickly :) | 16:55 |
dprince | bogdando: init containers are ephemeral (they go away quickly just like our config containers do). The images can be different sure, but the init container images should contain all the application binaries and libaries they need to complete on their own | 16:55 |
dprince | bogdando: I'm not sure I see any differences here other than you can use an alternate image | 16:55 |
*** moguimar has quit IRC | 16:55 | |
bogdando | dprince: init container abstracts off the missing code in the main container | 16:56 |
dprince | bogdando: but do note... if that is your idea layering puppet outside of the base layer is going to give you a much large network download and disk footprint as I said before | 16:56 |
bogdando | one may be using distinct images | 16:56 |
jistr | bogdando: yes but it doesn't actualy export or import binaries between containers. Just acts on data using its own binaries. | 16:56 |
therve | mfedosin: I fixed something around that area not too long ago. I don't know what's going on | 16:56 |
dprince | bogdando: you say abstracts off, I would say "builds upon". I would think each container has its own complete set of libraries and applications | 16:56 |
bogdando | jistr: hm, right... | 16:57 |
bogdando | sigh | 16:57 |
therve | mfedosin: What does "openstack image list --long -f value -c ID --public --property latest=centos-7-latest" give you? | 16:57 |
bogdando | nsenter is not a hack :D | 16:58 |
bogdando | it's been around for decades isn't it? just a tool | 16:58 |
mfedosin | therve, $ openstack image list --long -f value -c ID --public --property latest=centos-7-latest | 16:58 |
mfedosin | issubclass() arg 1 must be a class | 16:58 |
therve | Heh | 16:59 |
bogdando | we'd need only wrap a single puppet command with it | 16:59 |
bogdando | dprince, jistr: ^^ | 16:59 |
bogdando | and problem solved | 16:59 |
weshay | mfedosin, /me looking.. panda|rover fyi can you assist mfedosin | 16:59 |
dprince | bogdando: the use of nsenter was a hack IMO because it was used in a manner that was trying to replicate a previous work around: https://review.openstack.org/#/c/620062/ | 16:59 |
bogdando | ok, but that's not a case for this bug right? | 16:59 |
therve | mfedosin: Do you have an old client or something? | 16:59 |
mfedosin | it's more or less fresh... openstack 3.17.0 | 17:00 |
weshay | mfedosin, can you point me at the log / job file you pulled the reproducer script from | 17:00 |
jistr | bogdando, dprince: i'm not so sure. Read my review on your patch please. Either we'd need to "mount" puppet binary or we'd need to "mount" the OpenStack service binaries, assuming that no image has both OpenStack and Puppet binaries in it. | 17:00 |
dprince | bogdando: the docker in docker pattern was a work around from a previous release. Rather than try to duplicate that pattern with podman (which doesn't have a daemon or a socket) I thought it better to get to the root of the problem and launch things more securely, exposing less privs to the runtime service containers themselves | 17:00 |
mfedosin | weshay, http://logs.openstack.org/65/613165/10/check/tripleo-ci-centos-7-scenario009-multinode-oooq/1aac355/logs/ | 17:00 |
openstackgerrit | Emilien Macchi proposed openstack/ansible-role-redhat-subscription master: sat6: pull & deploy katello certs https://review.openstack.org/620176 | 17:00 |
weshay | thanks | 17:00 |
*** jpich has quit IRC | 17:01 | |
bogdando | jistr: oh right, so chroot maybe | 17:01 |
mfedosin | therve, openstack image list works fine http://paste.openstack.org/show/736128/ | 17:01 |
bogdando | but still the same problem ... | 17:01 |
bogdando | of switching it | 17:01 |
openstackgerrit | Gael Chamoulaud proposed openstack/tripleo-validations master: Fix inspector.conf file path again. https://review.openstack.org/620365 | 17:01 |
bogdando | inside of puppet invokation | 17:01 |
jistr | bogdando: yes, it's all either-or. Switching rather than combining. | 17:02 |
bogdando | security is hard :D | 17:02 |
*** salmankhan has joined #tripleo | 17:03 | |
bogdando | and I feel not so sure now | 17:03 |
bogdando | for all that thing | 17:03 |
bogdando | let's try another day then, c ya folks | 17:03 |
jistr | yea i think if we want to split, we'll likely have to go build-time | 17:03 |
bogdando | right... | 17:03 |
jistr | ++ on security but -- on data efficiency | 17:03 |
weshay | mfedosin, trying in my env w/ the same script | 17:05 |
mfedosin | weshay, cool! let me know the results | 17:06 |
panda|rover | mmmhh we have no wa to add -vvvv to the ansible-playbook in the reproducer ... | 17:08 |
weshay | mfedosin, is your personal tenant clean? ie.. all servers, networks removed from previous work? | 17:08 |
*** sshnaidm|afk is now known as sshnaidm | 17:08 | |
*** bogdando has quit IRC | 17:08 | |
weshay | mfedosin, this just worked for me, from your log it looks like the heat stack did not complete properly | 17:08 |
panda|rover | and get more meaningful errors | 17:09 |
weshay | which could be a resources issue or a fluke w/ rdo | 17:09 |
weshay | panda|rover, it's during the heat stack create though | 17:09 |
mfedosin | weshay, what command did you use? | 17:09 |
weshay | panda|rover, reproprovision_multinode_stack.log | 17:10 |
weshay | bash -x reproducer-quickstart.sh --create-virtualenv true --remove-stacks-keypairs true --nodestack-prefix repro -a | 17:10 |
panda|rover | ERROR: The Parameter (image) was not provided. | 17:10 |
mwhahaha | jrist, https://review.openstack.org/#/c/619077/ not sure if this affects tripleo or not. jfyi | 17:18 |
jrist | red alert | 17:19 |
*** psachin has quit IRC | 17:21 | |
*** derekh has quit IRC | 17:23 | |
*** ykarel|away has quit IRC | 17:28 | |
*** apetrich has quit IRC | 17:30 | |
*** jcoufal has quit IRC | 17:31 | |
*** dmacpher has quit IRC | 17:32 | |
*** sai_p has joined #tripleo | 17:34 | |
*** zaneb has quit IRC | 17:34 | |
openstackgerrit | Jill Rouleau proposed openstack/paunch master: WIP: Add systemd healthchecks to podman https://review.openstack.org/620372 | 17:37 |
openstackgerrit | Alex Schultz proposed openstack/tripleo-heat-templates master: Switch debug to use logging classes https://review.openstack.org/620373 | 17:37 |
Chaserjim | After adding https://github.com/openstack/tripleo-heat-templates/commit/6c17d0f1c3c8c28c401dae56d88c6dd4075bf046#diff-f84644f1b5951f535bc7c3f4151a9a90 to my code base, I now encounter the scaled-out compute with no containers running. Any thoughts? | 17:39 |
*** thrash|biab is now known as thrash | 17:40 | |
*** agopi|food_run is now known as agopi | 17:41 | |
*** aedc has quit IRC | 17:41 | |
*** trown is now known as trown|lunch | 17:42 | |
openstackgerrit | Thomas Herve proposed openstack/tripleo-common master: Don't upcall run on UpdateParametersAction errors https://review.openstack.org/620319 | 17:46 |
*** apetrich has joined #tripleo | 17:50 | |
*** florianf is now known as florianf|afk | 17:53 | |
*** hberaud is now known as hberaud|gone | 17:54 | |
*** ansmith has quit IRC | 17:59 | |
*** salmankhan has quit IRC | 18:00 | |
*** zaneb has joined #tripleo | 18:01 | |
dtrainor | dtantsur|mtg, I'm still struggling a bit with a filter that's failing. I'm not sure if it's because the baremetal resources are set to 0 (like the doc says to do, to match based on resources instead of standard resources. The terminal error always seems to be: | 18:01 |
dtrainor | ram: -8192MB disk: -81920MB io_ops: 0 instances: 0 does not have 4096 MB usable ram before overcommit, it only has 0 MB | 18:01 |
*** ansmith has joined #tripleo | 18:01 | |
*** ahosam has joined #tripleo | 18:03 | |
*** krypto has quit IRC | 18:04 | |
*** bnemec has quit IRC | 18:06 | |
*** jcoufal has joined #tripleo | 18:06 | |
*** bnemec has joined #tripleo | 18:06 | |
*** jpena is now known as jpena|off | 18:09 | |
*** jtomasek has quit IRC | 18:12 | |
*** devep has quit IRC | 18:12 | |
*** devep has joined #tripleo | 18:12 | |
*** kopecmartin is now known as kopecmartin|off | 18:16 | |
*** eck`gone is now known as eck` | 18:16 | |
openstackgerrit | Emilien Macchi proposed openstack/ansible-role-redhat-subscription master: Make it more explicit that rhsm_activation_key and rhsm_repos are exclusive https://review.openstack.org/620380 | 18:18 |
EmilienM | mandre: ^ | 18:18 |
*** wolverineav has joined #tripleo | 18:24 | |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-docs master: RHSM: some updates for Rocky https://review.openstack.org/620382 | 18:25 |
EmilienM | marios, jaosorior : finally found the time to push the weekly doc patch :P ^ | 18:25 |
*** ykarel|away has joined #tripleo | 18:27 | |
*** dprince has quit IRC | 18:28 | |
*** rlandy is now known as rlandy|brb | 18:28 | |
*** suuuper has quit IRC | 18:33 | |
*** amoralej is now known as amoralej|off | 18:34 | |
cgoncalves | hi folks. I updated some packages on the undercloud (THT, puppet-tripleo, puppet-octavia) and ran 'openstack undercloud upgrade'. only 2 containers have been restarted (neutron-dnsmasq-dhcp and nova-placement). is it safe to assume everything's in order? | 18:34 |
cgoncalves | (container keepalived was also restarted) | 18:35 |
EmilienM | cgoncalves: no | 18:36 |
EmilienM | you need to upgrade python-tripleoclient | 18:36 |
EmilienM | like it's documented | 18:36 |
EmilienM | https://docs.openstack.org/tripleo-docs/latest/upgrade/undercloud.html | 18:37 |
EmilienM | sudo yum update python-tripleoclient* openstack-tripleo-common openstack-tripleo-heat-templates | 18:37 |
EmilienM | then "openstack undercloud upgrade" | 18:37 |
cgoncalves | EmilienM, why? I have no updates for triploclient or tripleo-common | 18:38 |
EmilienM | ah it's not an upgrade? | 18:38 |
cgoncalves | no. I want to test some scratch builds | 18:39 |
EmilienM | containers which restart are the ones with new image or/and new config only | 18:39 |
cgoncalves | ok, makes sense since the packages I updated (THT, puppet-tripleo and puppet-octavia) do not actually bring any new config or image | 18:41 |
cgoncalves | just wanted to make sure before I trigger OC deploy :) | 18:41 |
cgoncalves | thanks | 18:41 |
openstackgerrit | Emilien Macchi proposed openstack/ansible-role-redhat-subscription master: sat6: pull & deploy katello certs https://review.openstack.org/620176 | 18:42 |
openstackgerrit | Emilien Macchi proposed openstack/ansible-role-redhat-subscription master: sat6: pull & deploy katello certs https://review.openstack.org/620176 | 18:44 |
*** tongl has joined #tripleo | 18:47 | |
*** dougbtv has joined #tripleo | 18:48 | |
*** zbitter has joined #tripleo | 18:49 | |
*** zaneb has quit IRC | 18:52 | |
*** salmankhan has joined #tripleo | 18:54 | |
*** salmankhan has quit IRC | 18:54 | |
*** salmankhan1 has joined #tripleo | 18:54 | |
*** eck` is now known as eck`gone | 18:56 | |
*** morazi has quit IRC | 18:56 | |
*** eck`gone is now known as eck` | 18:56 | |
*** salmankhan1 is now known as salmankhan | 18:56 | |
*** ykarel|away has quit IRC | 18:56 | |
*** trown|lunch is now known as trown | 18:58 | |
*** zbitter is now known as zaneb | 19:02 | |
*** wolverin_ has joined #tripleo | 19:03 | |
*** wolverineav has quit IRC | 19:05 | |
*** vinaykns has joined #tripleo | 19:06 | |
*** ahosam has quit IRC | 19:08 | |
*** rlandy|brb is now known as rlandy | 19:09 | |
*** salmankhan has quit IRC | 19:11 | |
openstackgerrit | Merged openstack/tripleo-common master: Update swift_backup workflow success status message https://review.openstack.org/619099 | 19:12 |
*** devep has quit IRC | 19:15 | |
*** salmankhan has joined #tripleo | 19:15 | |
*** salmankhan has quit IRC | 19:15 | |
*** salmankhan has joined #tripleo | 19:16 | |
*** salmankhan has quit IRC | 19:17 | |
*** salmankhan has joined #tripleo | 19:17 | |
*** zaneb has quit IRC | 19:20 | |
*** holser_ has quit IRC | 19:24 | |
openstackgerrit | Merged openstack/puppet-tripleo master: [ui] Add option to configure apache expires https://review.openstack.org/589572 | 19:26 |
*** salmankhan has quit IRC | 19:28 | |
*** gfidente has quit IRC | 19:28 | |
openstackgerrit | Noam Angel proposed openstack/tripleo-docs master: change "--override-config-file" to "--override-ansible-cfg" https://review.openstack.org/611503 | 19:30 |
*** zaneb has joined #tripleo | 19:31 | |
openstackgerrit | Harald Jensås proposed openstack/tripleo-heat-templates master: ctlplane pre-alloc IPs - deprecated/non-deprecated role name https://review.openstack.org/620391 | 19:33 |
*** moguimar has joined #tripleo | 19:34 | |
*** moguimar has quit IRC | 19:34 | |
*** shardy has quit IRC | 19:35 | |
weshay | jaosorior, so.. we had some failures w/ centos 7.6 but things appear to be passing atm https://tree.taiga.io/project/tripleo-ci-board/issue/309?kanban-status=2027733 | 19:39 |
*** wolverin_ has quit IRC | 19:41 | |
*** wolverineav has joined #tripleo | 19:41 | |
*** wolverineav has quit IRC | 19:42 | |
*** wolverineav has joined #tripleo | 19:42 | |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-docs master: RHSM: some updates for Rocky https://review.openstack.org/620382 | 19:46 |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-docs master: RHSM: some updates for Rocky https://review.openstack.org/620382 | 19:47 |
openstackgerrit | Merged openstack/tripleo-heat-templates stable/queens: Add config option for ODL IPv6 deployment https://review.openstack.org/612242 | 19:50 |
*** salmankhan has joined #tripleo | 19:51 | |
*** wolverineav has quit IRC | 19:53 | |
vinaykns | hello channel I'm working on https://bugzilla.redhat.com/show_bug.cgi?id=1613601 | 20:03 |
openstack | bugzilla.redhat.com bug 1613601 in openstack-tripleo-heat-templates "THT should have an option to disable Panko completely." [Medium,On_dev] - Assigned to vkapalav | 20:03 |
vinaykns | is there a way in heat templates that can do condition checking to avoid https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/ceilometer-agent-notification.yaml#L93 if panko is disabled..? | 20:04 |
*** devep has joined #tripleo | 20:06 | |
*** dprince has joined #tripleo | 20:09 | |
*** jcoufal has quit IRC | 20:09 | |
*** devep has quit IRC | 20:09 | |
*** jtomasek has joined #tripleo | 20:17 | |
*** lennyb has quit IRC | 20:20 | |
*** jrist has quit IRC | 20:22 | |
openstackgerrit | Trevor Vardeman proposed openstack/tripleo-common master: Add manifest list image support to the kolla builder https://review.openstack.org/620397 | 20:22 |
*** wolverineav has joined #tripleo | 20:24 | |
openstackgerrit | Jill Rouleau proposed openstack/paunch master: WIP: Add systemd healthchecks to podman https://review.openstack.org/620372 | 20:26 |
*** akrivoka has quit IRC | 20:31 | |
*** wolverineav has quit IRC | 20:33 | |
*** wolverineav has joined #tripleo | 20:34 | |
hjensas | vinaykns: https://docs.openstack.org/heat/latest/template_guide/hot_spec.html#if | 20:35 |
hjensas | vinaykns: the problem is how to figure out if panko was disabled. | 20:37 |
vinaykns | hjensas: I can have a new variable that's always true, and then in the env file having value as false if it needs to be disabled. | 20:38 |
hjensas | vinaykns: yes, that should work. | 20:39 |
vinaykns | mwhahaha: thx for the input.! | 20:40 |
hjensas | vinaykns: it would be cool if one could check the resource registry for OS::TripleO::Services::PankoApi:, to see if it is OS::Heat::None or something. Not sure we can. | 20:40 |
vinaykns | hjensas: yeah that would be the ideal way to check I guess, but even I'm not sure if one can do that. | 20:41 |
*** slaweq_ has joined #tripleo | 20:44 | |
*** jtomasek has quit IRC | 20:45 | |
*** salmankhan has quit IRC | 20:52 | |
openstackgerrit | Nagasai Vinaykumar Kapalavai proposed openstack/tripleo-heat-templates master: Remove ties between ceilometer and panko https://review.openstack.org/620402 | 20:52 |
openstackgerrit | Nagasai Vinaykumar Kapalavai proposed openstack/tripleo-heat-templates master: Update to the ceilometer publisher list https://review.openstack.org/600843 | 20:55 |
openstackgerrit | Nagasai Vinaykumar Kapalavai proposed openstack/tripleo-heat-templates master: Remove ties between ceilometer and panko https://review.openstack.org/620402 | 20:56 |
*** morazi has joined #tripleo | 20:58 | |
*** dprince has quit IRC | 20:58 | |
*** slaweq_ has quit IRC | 21:03 | |
*** ahosam has joined #tripleo | 21:04 | |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: WIP - upgrade2podman: prune everything in Docker https://review.openstack.org/620405 | 21:05 |
openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: WIP - upgrade2podman: prune everything in Docker https://review.openstack.org/620405 | 21:06 |
*** raildo has quit IRC | 21:14 | |
*** jrist has joined #tripleo | 21:15 | |
*** Vorrtex has quit IRC | 21:18 | |
*** jcoufal has joined #tripleo | 21:28 | |
*** wolverineav has quit IRC | 21:32 | |
*** wolverineav has joined #tripleo | 21:34 | |
*** xek_ has quit IRC | 21:35 | |
*** wolverineav has quit IRC | 21:38 | |
*** wolverineav has joined #tripleo | 21:38 | |
*** ansmith has quit IRC | 21:41 | |
*** salmankhan has joined #tripleo | 21:45 | |
*** pcaruana has quit IRC | 21:46 | |
*** salmankhan has quit IRC | 21:46 | |
*** salmankhan1 has joined #tripleo | 21:46 | |
*** salmankhan1 is now known as salmankhan | 21:49 | |
*** trown is now known as trown|outtypewww | 21:49 | |
openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart master: DNM install tar-split https://review.openstack.org/620413 | 22:01 |
*** slaweq has quit IRC | 22:03 | |
openstackgerrit | Steve Baker proposed openstack/tripleo-common master: Implement python based uploader https://review.openstack.org/616018 | 22:03 |
openstackgerrit | Steve Baker proposed openstack/tripleo-common master: WIP make python uploader the default https://review.openstack.org/616019 | 22:03 |
*** redrobot has quit IRC | 22:08 | |
*** saneax has joined #tripleo | 22:15 | |
*** abishop has quit IRC | 22:16 | |
*** slaweq has joined #tripleo | 22:19 | |
*** slaweq has quit IRC | 22:24 | |
*** ahosam has quit IRC | 22:24 | |
*** ansmith has joined #tripleo | 22:26 | |
*** bfournie has quit IRC | 22:27 | |
*** wolverineav has quit IRC | 22:36 | |
*** wolverineav has joined #tripleo | 22:37 | |
*** wolverineav has quit IRC | 22:39 | |
*** wolverin_ has joined #tripleo | 22:39 | |
*** wolverin_ has quit IRC | 22:49 | |
*** wolverineav has joined #tripleo | 22:50 | |
*** saneax has quit IRC | 22:50 | |
*** vinaykns has quit IRC | 22:55 | |
*** jcoufal has quit IRC | 22:56 | |
*** radeks has quit IRC | 22:57 | |
*** rcernin has joined #tripleo | 22:57 | |
*** wolverineav has quit IRC | 22:59 | |
*** wolverineav has joined #tripleo | 23:02 | |
*** salmankhan has quit IRC | 23:11 | |
*** wolverin_ has joined #tripleo | 23:12 | |
*** aedc has joined #tripleo | 23:14 | |
*** wolverin_ has quit IRC | 23:15 | |
*** wolverin_ has joined #tripleo | 23:15 | |
*** wolverineav has quit IRC | 23:15 | |
*** mjturek has quit IRC | 23:16 | |
openstackgerrit | Merged openstack/puppet-tripleo stable/queens: Add support for ODL-OVS IPv6 deployment https://review.openstack.org/612238 | 23:21 |
*** ade_lee has quit IRC | 23:21 | |
*** rlandy has quit IRC | 23:27 | |
openstackgerrit | Merged openstack/diskimage-builder master: Make tripleo-buildimage-overcloud-full-centos-7 non-voting https://review.openstack.org/620200 | 23:32 |
openstackgerrit | Jill Rouleau proposed openstack/tripleo-ansible master: Add podman_container module https://review.openstack.org/620423 | 23:47 |
*** ade_lee has joined #tripleo | 23:55 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!