stevelle | a little subtle and adding a second filter to filter on facts directly would be needed but could be based on this | 00:00 |
---|---|---|
*** javeriak has quit IRC | 00:13 | |
*** sdake has quit IRC | 00:24 | |
*** sdake has joined #openstack-ansible | 00:48 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: changed container bind mounts to use abspath https://review.openstack.org/188558 | 00:53 |
*** sdake_ has joined #openstack-ansible | 00:58 | |
*** sdake has quit IRC | 01:01 | |
*** abitha has quit IRC | 01:03 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Added apt update tasks to everything using apt https://review.openstack.org/192484 | 01:20 |
*** Mudpuppy has quit IRC | 01:23 | |
*** Mudpuppy_ has joined #openstack-ansible | 01:23 | |
*** dkalleg has quit IRC | 01:25 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Allow protocol to be set per endpoint-type https://review.openstack.org/192148 | 01:26 |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Split environment file into component parts https://review.openstack.org/192102 | 01:27 |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Configurable lxc cache and rootfs path https://review.openstack.org/192165 | 01:27 |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Fix spelling of runlevel in init scripts https://review.openstack.org/192489 | 01:28 |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Backported tempest roles from Master https://review.openstack.org/192445 | 02:06 |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated Juno for new dev work https://review.openstack.org/188975 | 02:06 |
openstackgerrit | Merged stackforge/os-ansible-deployment: remove '{{' from variable in loop expression https://review.openstack.org/191006 | 02:07 |
*** dkalleg has joined #openstack-ansible | 02:26 | |
*** sdake_ is now known as sdake | 03:00 | |
*** dkalleg has quit IRC | 03:08 | |
openstackgerrit | Merged stackforge/os-ansible-deployment: Allow Horizon to access multiple regions https://review.openstack.org/190302 | 03:12 |
*** dkalleg has joined #openstack-ansible | 03:19 | |
*** markvoelker has quit IRC | 03:31 | |
*** JRobinson__ is now known as JRobinson__afk | 03:46 | |
*** stevemar has quit IRC | 03:47 | |
*** stevemar has joined #openstack-ansible | 03:48 | |
*** dkalleg has quit IRC | 03:58 | |
*** JRobinson__afk is now known as JRobinson__ | 04:27 | |
*** markvoelker has joined #openstack-ansible | 04:32 | |
*** markvoelker has quit IRC | 04:37 | |
*** fawadkhaliq has joined #openstack-ansible | 04:55 | |
*** JRobinson__ has quit IRC | 05:06 | |
*** javeriak has joined #openstack-ansible | 05:11 | |
*** shausy has joined #openstack-ansible | 05:14 | |
*** stevemar has quit IRC | 05:14 | |
*** Mudpuppy_ has quit IRC | 05:41 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated Juno for new dev work https://review.openstack.org/188975 | 05:55 |
*** markvoelker has joined #openstack-ansible | 05:55 | |
*** markvoelker has quit IRC | 06:00 | |
*** shausy has quit IRC | 06:09 | |
*** shausy has joined #openstack-ansible | 06:10 | |
*** javeriak has quit IRC | 06:12 | |
*** javeriak has joined #openstack-ansible | 06:12 | |
*** JRobinson__ has joined #openstack-ansible | 06:13 | |
*** radek_ has joined #openstack-ansible | 06:15 | |
*** javeriak has quit IRC | 06:16 | |
*** javeriak has joined #openstack-ansible | 06:17 | |
*** fawadkhaliq has quit IRC | 06:17 | |
*** daneyon has quit IRC | 07:20 | |
*** sdake has quit IRC | 07:20 | |
*** Mudpuppy has joined #openstack-ansible | 07:38 | |
*** Mudpuppy has quit IRC | 07:42 | |
*** amit213 has joined #openstack-ansible | 07:44 | |
*** markvoelker has joined #openstack-ansible | 07:44 | |
*** markvoelker has quit IRC | 07:49 | |
*** amit213 has quit IRC | 07:51 | |
*** javeriak has quit IRC | 08:02 | |
*** JRobinson__ has quit IRC | 08:16 | |
*** daneyon has joined #openstack-ansible | 09:09 | |
*** daneyon has quit IRC | 09:14 | |
openstackgerrit | Hugh Saunders proposed stackforge/os-ansible-deployment: Backported tempest roles from Master https://review.openstack.org/192445 | 09:26 |
*** markvoelker has joined #openstack-ansible | 09:33 | |
*** markvoelker has quit IRC | 09:37 | |
openstackgerrit | Hugh Saunders proposed stackforge/os-ansible-deployment: Updated Juno for new dev work https://review.openstack.org/188975 | 09:47 |
*** jmccrory has quit IRC | 10:10 | |
*** jmccrory has joined #openstack-ansible | 10:12 | |
*** daneyon has joined #openstack-ansible | 10:58 | |
*** daneyon has quit IRC | 11:02 | |
openstackgerrit | Merged stackforge/os-ansible-deployment: Backported tempest roles from Master https://review.openstack.org/192445 | 11:05 |
*** markvoelker has joined #openstack-ansible | 11:22 | |
*** markvoelker has quit IRC | 11:27 | |
*** sdake has joined #openstack-ansible | 11:41 | |
*** Mudpuppy has joined #openstack-ansible | 11:54 | |
*** sdake has quit IRC | 12:04 | |
*** markvoelker has joined #openstack-ansible | 12:05 | |
*** jlvillal has quit IRC | 12:11 | |
*** shausy has quit IRC | 12:18 | |
*** shausy has joined #openstack-ansible | 12:19 | |
*** jlvillal has joined #openstack-ansible | 12:23 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated Juno for new dev work https://review.openstack.org/188975 | 12:44 |
*** daneyon has joined #openstack-ansible | 12:46 | |
*** Mudpuppy has quit IRC | 12:50 | |
*** daneyon has quit IRC | 12:51 | |
*** tlian has joined #openstack-ansible | 13:03 | |
openstackgerrit | Ken Johnston proposed stackforge/os-ansible-deployment-specs: Spec for multiregion ansible deployment https://review.openstack.org/192421 | 13:27 |
*** stevemar has joined #openstack-ansible | 13:30 | |
*** Mudpuppy has joined #openstack-ansible | 13:52 | |
*** Mudpuppy has quit IRC | 13:57 | |
*** Mudpuppy has joined #openstack-ansible | 13:57 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 13:58 | |
palendae | Does https://review.openstack.org/#/c/188975/ potentially need to get the tempest venv treatment? | 14:00 |
palendae | I know cloudnull mentioned it | 14:00 |
*** Mudpuppy is now known as sigmavirus25 | 14:01 | |
*** sigmavirus25 is now known as Mudpuppy | 14:01 | |
*** yaya_ has joined #openstack-ansible | 14:06 | |
*** galstrom_zzz is now known as galstrom | 14:31 | |
*** shausy has quit IRC | 14:31 | |
*** daneyon has joined #openstack-ansible | 14:35 | |
sigmavirus24 | odyssey4me: on https://review.openstack.org/#/c/189998/ how would delegating to keystone_all[0]'s host solve the problem for synchronize? | 14:36 |
sigmavirus24 | wouldn't we have to synchronize the keys to that host and then out to the other containers anyway? | 14:36 |
odyssey4me | sigmavirus24 it should probably delegate to the container - my brain's stuck in Microsoft-land right now... essentially there should be a way to do a direct sync from the first keystone container to the others | 14:37 |
odyssey4me | cloudnull would probably know off-hand | 14:38 |
* sigmavirus24 tried doing that | 14:39 | |
sigmavirus24 | It didn't work | 14:39 |
sigmavirus24 | I probably did it wrong but I used delegate_to: keystone_all[0] and it tried but there was no way to ssh from that container into the others | 14:39 |
sigmavirus24 | And I agree if we could that'd be super elegant but in the absence of elegance, we have this =/ | 14:40 |
*** daneyon has quit IRC | 14:40 | |
odyssey4me | sigmavirus24 yeah, I'm happy with leaving the push/pull mechanism - but I would like to see that the keys don't get recreated and forcibply moved around every time the role is executed :) | 14:44 |
sigmavirus24 | so cloudnull specifically asked for key rotation akin to nova's | 14:44 |
sigmavirus24 | And I copied that pattern although after Monday night's discussion with dolphm I'm pretty sure we don't need to destroy the directory to recreate since fernet_setup will rotate them for us | 14:45 |
openstackgerrit | Hugh Saunders proposed stackforge/os-ansible-deployment: Handle proxies through environment variables https://review.openstack.org/192717 | 14:52 |
*** sdake_ has joined #openstack-ansible | 14:53 | |
palendae | hughsaunders: lol, I was gonna be looking at that, but thanks :p | 14:53 |
palendae | Actually nm, different bug | 14:53 |
hughsaunders | :) | 14:53 |
odyssey4me | sigmavirus24 ok, I wasn't aware that you did it that way based on a request from cloudnull - alright, I suppose that effectively means that we need to wait for cloudnull to verify that the patch achieves what he was looking for... | 15:03 |
sigmavirus24 | it does, but it can probably be done in a simpler way | 15:04 |
sigmavirus24 | I'd want to verify that synchronize will effectively copy over the existing keys though on a regeneration | 15:04 |
odyssey4me | I'll sigmavirus24 so I've pulled my -1 and will wait to see cloudnull's review before proceeding. | 15:04 |
*** openstackgerrit has quit IRC | 15:05 | |
*** openstackgerrit has joined #openstack-ansible | 15:05 | |
sigmavirus24 | odyssey4me: nah, your nit is valid | 15:05 |
sigmavirus24 | -1 can stay | 15:05 |
sigmavirus24 | I love the -1s | 15:05 |
sigmavirus24 | I live off -1s | 15:06 |
sigmavirus24 | -1s are my lifeblood | 15:06 |
odyssey4me | sigmavirus24 haha :p | 15:06 |
sigmavirus24 | If I'm not getting -1's I'm doing something wrong =P | 15:06 |
*** Mudpuppy has quit IRC | 15:12 | |
*** Mudpuppy_ has joined #openstack-ansible | 15:12 | |
*** Mudpuppy_ is now known as Mudpuppy | 15:12 | |
*** yaya_ has quit IRC | 15:29 | |
*** Mudpuppy has quit IRC | 15:38 | |
*** Mudpuppy has joined #openstack-ansible | 15:38 | |
svg | hello folks | 15:47 |
*** stevemar has quit IRC | 15:50 | |
*** javeriak has joined #openstack-ansible | 15:51 | |
*** stevemar has joined #openstack-ansible | 15:52 | |
*** daneyon has joined #openstack-ansible | 16:04 | |
*** daneyon_ has joined #openstack-ansible | 16:04 | |
*** daneyon has quit IRC | 16:08 | |
svg | Who's familiar with memcache configs? We bumped into issues somehow related to https://bugs.launchpad.net/keystone/+bug/1332058, where we had some nodes down (metal, including memcache containers) | 16:11 |
openstack | Launchpad bug 1332058 in Mirantis OpenStack "keystone behavior when one memcache backend is down" [Critical,Fix committed] - Assigned to Yuriy Taraday (yorik-sar) | 16:11 |
openstackgerrit | Jesse Pretorius proposed stackforge/os-ansible-deployment: Implement service_region user_group_var https://review.openstack.org/189664 | 16:11 |
svg | seems osad configs rely on the defaults, which gives long timeouts when one or more memcaches is down | 16:12 |
*** Mudpuppy has quit IRC | 16:22 | |
*** yaya has joined #openstack-ansible | 16:24 | |
*** sdake_ is now known as sdake | 16:25 | |
*** yaya has quit IRC | 16:29 | |
*** openstackgerrit has quit IRC | 16:33 | |
*** openstackgerrit has joined #openstack-ansible | 16:34 | |
*** rrrobbb has joined #openstack-ansible | 16:42 | |
*** a| has joined #openstack-ansible | 16:46 | |
*** a| has quit IRC | 16:46 | |
*** mfisch has quit IRC | 16:47 | |
*** logan2 has joined #openstack-ansible | 16:47 | |
*** javeriak has quit IRC | 16:48 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated Juno for new dev work https://review.openstack.org/188975 | 16:48 |
*** mfisch has joined #openstack-ansible | 16:49 | |
*** mfisch has quit IRC | 16:50 | |
*** mfisch has joined #openstack-ansible | 16:50 | |
*** abitha has joined #openstack-ansible | 16:58 | |
*** abitha has quit IRC | 17:00 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated Juno for new dev work https://review.openstack.org/188975 | 17:00 |
*** abitha has joined #openstack-ansible | 17:07 | |
*** javeriak has joined #openstack-ansible | 17:08 | |
*** javeriak has quit IRC | 17:08 | |
*** javeriak has joined #openstack-ansible | 17:10 | |
*** sdake_ has joined #openstack-ansible | 17:30 | |
*** sdake has quit IRC | 17:34 | |
*** Mudpuppy has joined #openstack-ansible | 17:49 | |
openstackgerrit | Merged stackforge/os-ansible-deployment: Added apt update tasks to everything using apt https://review.openstack.org/192484 | 17:57 |
*** sdake has joined #openstack-ansible | 17:58 | |
*** sdake_ has quit IRC | 18:01 | |
jmccrory | hi all, is there are current option to not deploy utility containers? | 18:02 |
cloudnull | cores https://review.openstack.org/#/c/188975/13 - please make this go for juno | 18:06 |
cloudnull | jmccrory: you'd have to modify the environment to not deploy utility | 18:06 |
cloudnull | jmccrory: https://github.com/stackforge/os-ansible-deployment/tree/master/etc/openstack_deploy/env.d | 18:07 |
cloudnull | in master kilo you can simply remove the utility.yml from your environment setup | 18:07 |
*** annashen has joined #openstack-ansible | 18:07 | |
cloudnull | in juno/icehouse you'd have to remove the the same bits from the monolithic environment.yml file. | 18:08 |
*** sdake_ has joined #openstack-ansible | 18:10 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Fix spelling of runlevel in init scripts https://review.openstack.org/192489 | 18:13 |
*** annashen has quit IRC | 18:13 | |
*** sdake has quit IRC | 18:14 | |
*** yaya has joined #openstack-ansible | 18:14 | |
*** annashen has joined #openstack-ansible | 18:15 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Configurable lxc cache and rootfs path https://review.openstack.org/192165 | 18:18 |
jmccrory | cloudnull: ah ok, thanks | 18:18 |
*** markvoelker has quit IRC | 18:25 | |
*** markvoelker has joined #openstack-ansible | 18:25 | |
svg | hello folks | 18:37 |
cloudnull | hey svg | 18:45 |
*** daneyon_ has quit IRC | 18:45 | |
*** daneyon has joined #openstack-ansible | 18:46 | |
svg | hi cloudnull | 18:47 |
svg | did you notice my messages? ^^ 2 hours up | 18:47 |
*** markvoelker_ has joined #openstack-ansible | 18:47 | |
*** markvoelker has quit IRC | 18:47 | |
svg | was one of the reasons things got real sluggish at certain times | 18:48 |
*** daneyon_ has joined #openstack-ansible | 18:49 | |
cloudnull | no... been intermittently connected. im in training all this weelk. | 18:50 |
* cloudnull looking back through scroll back. | 18:50 | |
*** daneyon has quit IRC | 18:52 | |
cloudnull | svg: the "memcache configs" things? | 18:53 |
svg | yes | 18:53 |
svg | all os daemons get a list of all the memcached servers | 18:54 |
svg | but it takes some time to time out when some are offline | 18:54 |
svg | and the result is, all commands (horizon or cli) get slow - sometimes 10-50s | 18:54 |
svg | So I'm wondering if that might be a config problem | 18:55 |
svg | the bug I linked to, shows some options to tell the client driver to remember down connections etc | 18:55 |
svg | but those ar not used in osad, so I'm wondering if this might be an optimisation opportunity | 18:56 |
* cloudnull looking. | 18:57 | |
svg | one of the first thing I think of is ordering: the first server should point to the container on the same metal host | 18:58 |
svg | and possibl eusing those extra options from the bug link, I need to test that a bit though | 18:59 |
cloudnull | looks like an optimization we can make. in master/kilo we have a deterministic sorting process we can put the list of servers through. | 19:04 |
cloudnull | Example: https://github.com/stackforge/os-ansible-deployment/blob/master/playbooks/os-cinder-install.yml#L80-L88 | 19:04 |
cloudnull | that would make it so that were not using the same server as the first server all the time | 19:05 |
*** yaya has quit IRC | 19:07 | |
dstanek | i was looking at https://bugs.launchpad.net/openstack-ansible/+bug/1399383 and the review for it - is there any reason why the internal endpoints are not going over SSL? | 19:08 |
openstack | Launchpad bug 1399383 in openstack-ansible juno "General SSL support for all public endpoints including spice" [High,Confirmed] - Assigned to Andy McCrae (andrew-mccrae) | 19:08 |
cloudnull | something like https://gist.github.com/cloudnull/bf7311fb93bca16c9c3b would help | 19:08 |
cloudnull | dstanek: ssl w/ out a signed cert is next to impossible with most OS services. but it certainly could be set to https if they wanted to. | 19:10 |
dstanek | cloudnull: why no signed cert? it's usually best practice to use SSL everywhere even on a "secure, private" network | 19:11 |
svg | cloudnull: that sounds right - ho wis the sorrtic logic in that module? | 19:12 |
*** yaya has joined #openstack-ansible | 19:13 | |
cloudnull | dstanek: w/ a singed cert it "should" work. but not every service supports that and supports it the same way. | 19:15 |
svg | reading the module code... | 19:15 |
cloudnull | last i tried, and im sure a few others went down this path too but, ssl all the way down w/ the enventlet wsgis is next to impossible | 19:16 |
*** openstackgerrit has quit IRC | 19:16 | |
dstanek | cloudnull: ah, so some of the services need some love | 19:16 |
*** openstackgerrit has joined #openstack-ansible | 19:17 | |
cloudnull | eventlet + monkey patching makes using a real web server impossible in some cases. | 19:17 |
cloudnull | but, rest assured, keystone works great with ssl :) | 19:17 |
dstanek | cloudnull: what about with a terminator? i'm guessing that some don't respect the HTTPS header to rewrite links | 19:17 |
cloudnull | last i looked ssl terminated at the lb works fine. | 19:18 |
*** yaya has quit IRC | 19:49 | |
*** stevemar has quit IRC | 20:00 | |
*** javeriak has quit IRC | 20:03 | |
*** Mudpuppy has quit IRC | 20:09 | |
*** Mudpuppy has joined #openstack-ansible | 20:10 | |
*** toddnni has quit IRC | 20:11 | |
*** toddnni has joined #openstack-ansible | 20:13 | |
*** Mudpuppy has quit IRC | 20:22 | |
*** toddnni_ has joined #openstack-ansible | 20:23 | |
*** toddnni has quit IRC | 20:26 | |
*** toddnni_ is now known as toddnni | 20:26 | |
*** galstrom is now known as galstrom_zzz | 20:30 | |
*** Mudpuppy has joined #openstack-ansible | 20:48 | |
*** Mudpuppy_ has joined #openstack-ansible | 20:50 | |
*** Mudpuppy has quit IRC | 20:54 | |
*** yaya has joined #openstack-ansible | 20:55 | |
*** dkalleg has joined #openstack-ansible | 20:57 | |
*** annashen has quit IRC | 21:05 | |
*** javeriak has joined #openstack-ansible | 21:06 | |
*** Mudpuppy_ is now known as Mudpuppy | 21:10 | |
*** tlian has quit IRC | 21:13 | |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Ceph/RBD support https://review.openstack.org/181957 | 21:16 |
openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated to the latest stable rabbitmq release https://review.openstack.org/192899 | 21:18 |
*** openstackgerrit has quit IRC | 21:24 | |
*** openstackgerrit has joined #openstack-ansible | 21:24 | |
*** sdake_ is now known as sdake | 21:25 | |
*** Mudpuppy has quit IRC | 21:28 | |
*** radek_ has quit IRC | 21:38 | |
*** toddnni has quit IRC | 21:38 | |
*** toddnni has joined #openstack-ansible | 21:41 | |
*** annashen has joined #openstack-ansible | 21:42 | |
*** Mudpuppy has joined #openstack-ansible | 21:59 | |
*** Mudpuppy has quit IRC | 22:02 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 22:08 | |
*** yaya has quit IRC | 22:09 | |
*** JRobinson__ has joined #openstack-ansible | 22:29 | |
*** rrrobbb has quit IRC | 22:31 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 22:55 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 22:56 | |
*** JRobinson__ is now known as JRobinson__afk | 23:05 | |
openstackgerrit | Merged stackforge/os-ansible-deployment: Fix spelling of runlevel in init scripts https://review.openstack.org/192489 | 23:05 |
*** JRobinson__afk is now known as JRobinson__ | 23:14 | |
openstackgerrit | Merged stackforge/os-ansible-deployment: Generate consistent length passwords in AIO https://review.openstack.org/192220 | 23:26 |
*** sdake_ has joined #openstack-ansible | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!