*** skamithi13 has joined #openstack-ansible | 00:02 | |
cloudnull | Bgmccollum mirror of https://mirror.rackspace.com/rackspaceprivatecloud/ | 00:12 |
---|---|---|
cloudnull | Is really a mirror of RPC.rackspace.com | 00:12 |
cloudnull | So if its in one its in the other. Maybe mirror.rackspace.com doesn't allow symlinks or something similar. I'll ping mirror admin to see what's what. | 00:13 |
cloudnull | Tmyny sorry not many folks are around this week. We're mostly at the openstack summit. | 00:14 |
cloudnull | Tmyny if at all possible can you register the issue on launchpad so we can track / fix it. | 00:15 |
cloudnull | Evrardjp just woke up. | 00:16 |
* cloudnull in tokyo | 00:16 | |
cloudnull | We should plan an OSA meet and drink for folks in Tokyo ;-) | 00:16 |
cloudnull | Cc odyssey4me | 00:17 |
*** jmckind has joined #openstack-ansible | 00:20 | |
*** jmckind has quit IRC | 00:23 | |
*** jmckind has joined #openstack-ansible | 00:24 | |
cloudnull | Any cores around that can review https://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible+branch:liberty,n,z so Jesse can can cut a new tag? | 00:26 |
*** elo has joined #openstack-ansible | 00:27 | |
*** elo has quit IRC | 00:29 | |
mhayden | cloudnull: i gave you the strongest possible +1 a guy could give :P | 00:34 |
cloudnull | tyvm sir | 00:37 |
cloudnull | bgmccollum: i checked in on rpc-repo.rax and everything looks fine. so ill have to wait to hear back from mirror.rax to see whats what . | 00:37 |
mhayden | also i figured out why my ssl commit for rabbitmq kept bombing | 00:37 |
cloudnull | 4y ? | 00:37 |
mhayden | didn't realize that rabbitmq port ends up in all of the service templates | 00:37 |
mhayden | :| | 00:38 |
cloudnull | ah yes. | 00:38 |
mhayden | so i'm testing a way to change it for all of them in one swoop | 00:38 |
cloudnull | so we'll have to turn on rabbit ssl across the board . | 00:38 |
mhayden | would it be useful to have them togglable per service? | 00:38 |
mhayden | that's totally possible | 00:38 |
cloudnull | lets do that if possible | 00:38 |
mhayden | okay | 00:38 |
cloudnull | yes we can toggle though using a group_var | 00:38 |
mhayden | let me see if the functionality is good with everything on and then i'll go back and do that | 00:38 |
cloudnull | IE group_vars/nova_all.yml | 00:39 |
cloudnull | but that starts down a path of potential impact all over the place. | 00:39 |
cloudnull | if we can enable ssl for all the things then I say lets do that | 00:39 |
mhayden | well i figured i'd turn on ssl for everything, but allow someone to easily toggle it on for nova but off for glance | 00:40 |
mhayden | not sure why someone would want to deploy that way, but i guess it's posible ;) | 00:40 |
*** gardenshed has joined #openstack-ansible | 00:41 | |
mhayden | right now i have one big ol' variable that turns rabbitmq ssl on for every openstack service or off for all | 00:41 |
mhayden | cloudnull: you in tokyo? | 00:43 |
cloudnull | i am | 00:43 |
mhayden | how is it? | 00:44 |
cloudnull | idk i just got here :) | 00:44 |
mhayden | haha | 00:44 |
mhayden | i haven't been to asia yet | 00:44 |
mhayden | 9:44AM there, wow | 00:44 |
*** gardenshed has quit IRC | 00:48 | |
cloudnull | ok gonna run , go find some brakfast | 00:49 |
cloudnull | have a good rest of your night | 00:49 |
mhayden | enjoy | 00:51 |
Sam-I-Am | moo. | 00:54 |
Sam-I-Am | (from still sunday) | 00:54 |
*** sdake has quit IRC | 01:00 | |
*** daneyon has joined #openstack-ansible | 01:19 | |
bgmccollum | cloudnull: thanks... | 01:25 |
*** daneyon_ has joined #openstack-ansible | 01:31 | |
*** daneyon has quit IRC | 01:34 | |
*** jmckind has quit IRC | 01:44 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Enable encryption for all RabbitMQ connections https://review.openstack.org/238691 | 01:48 |
*** dolpher has joined #openstack-ansible | 02:13 | |
*** Mudpuppy has quit IRC | 02:18 | |
*** sdake has joined #openstack-ansible | 02:29 | |
*** jroll has quit IRC | 02:36 | |
*** Mudpuppy has joined #openstack-ansible | 02:37 | |
odyssey4me | evrardjp: morning, where're you at in Tokyo? | 02:44 |
*** daneyon_ has quit IRC | 02:48 | |
*** daneyon has joined #openstack-ansible | 02:48 | |
*** daneyon_ has joined #openstack-ansible | 03:00 | |
*** daneyon_ has quit IRC | 03:00 | |
*** daneyon has quit IRC | 03:04 | |
*** daneyon has joined #openstack-ansible | 03:36 | |
*** sdake has quit IRC | 03:36 | |
*** daneyon has quit IRC | 03:51 | |
*** skamithi14 has joined #openstack-ansible | 04:06 | |
*** skamithi13 has quit IRC | 04:09 | |
*** jwagner is now known as jwagner_away | 04:21 | |
*** Apsu has quit IRC | 04:32 | |
*** lbragstad has quit IRC | 04:36 | |
*** Apsu has joined #openstack-ansible | 04:52 | |
*** lbragstad has joined #openstack-ansible | 04:55 | |
cloudnull | Bgmccollum its fixed now. They needed to reindex. | 05:08 |
*** sdake has joined #openstack-ansible | 05:24 | |
bgmccollum | cloudnull: thanks for looking into it | 05:26 |
*** Mudpuppy has quit IRC | 05:37 | |
*** skamithi14 has quit IRC | 05:41 | |
*** skamithi13 has joined #openstack-ansible | 05:41 | |
*** sdake has quit IRC | 05:46 | |
*** sdake has joined #openstack-ansible | 05:47 | |
bgmccollum | cloudnull: the file shows in the directory listing, but its still giving a 403 forbidden | 05:53 |
cloudnull | I'm able to download it. | 05:54 |
cloudnull | Maybe browser cache issue ? | 05:54 |
bgmccollum | let me check... | 05:55 |
bgmccollum | nope -- https://mirror.rackspace.com/rackspaceprivatecloud/rpc-trusty-container.tgz | 05:56 |
bgmccollum | ? | 05:56 |
bgmccollum | cloudnull: you sure you going through mirror.rackspace.com? not rpc-repo? | 05:57 |
cloudnull | Strange. I'm out on mobile now. Will have to look more into that when I get back to the hotel. | 05:58 |
bgmccollum | no worries... | 05:58 |
cloudnull | They must've changed something on their mirror servers. I'd say for now if you need 10.1.15 overriding to rpc-repo is the way to go. | 06:07 |
cloudnull | That said I can't fix the index from here. | 06:07 |
cloudnull | But I will when I get back to the hotel. | 06:08 |
*** shausy has joined #openstack-ansible | 06:29 | |
cloudnull | Who's all here in Tokyo? If you're around / have whatsapp ping me +14158276749 | 06:31 |
*** gardenshed has joined #openstack-ansible | 06:33 | |
*** daneyon has joined #openstack-ansible | 06:40 | |
*** gardenshed has quit IRC | 06:57 | |
*** Apsu has quit IRC | 07:20 | |
*** Apsu has joined #openstack-ansible | 07:21 | |
*** daneyon has quit IRC | 07:29 | |
*** javeriak has joined #openstack-ansible | 07:35 | |
*** javeriak has quit IRC | 07:35 | |
*** javeriak has joined #openstack-ansible | 07:35 | |
*** javeriak has quit IRC | 08:02 | |
*** javeriak has joined #openstack-ansible | 08:02 | |
*** sura8257 has joined #openstack-ansible | 08:08 | |
*** javeriak has quit IRC | 08:09 | |
*** neilus has joined #openstack-ansible | 08:11 | |
*** skamithi14 has joined #openstack-ansible | 08:19 | |
*** neilus has quit IRC | 08:20 | |
*** neilus has joined #openstack-ansible | 08:22 | |
*** skamithi13 has quit IRC | 08:24 | |
*** mpavone has joined #openstack-ansible | 08:29 | |
*** mpavone has quit IRC | 08:29 | |
*** karimb has joined #openstack-ansible | 08:33 | |
*** sura8257 has quit IRC | 08:37 | |
*** gardenshed has joined #openstack-ansible | 08:38 | |
*** neilus has quit IRC | 08:42 | |
*** neilus has joined #openstack-ansible | 08:42 | |
evrardjp | odyssey4me: I'm at shinagawa. Doing the openstack check in in a few | 08:43 |
*** tiagogomes has joined #openstack-ansible | 08:46 | |
*** tiagogomes has quit IRC | 08:48 | |
*** 64MAD52OW has joined #openstack-ansible | 08:51 | |
*** neilus has quit IRC | 09:06 | |
64MAD52OW | Morning, I just noticed that there is a liberty branch. How stable is liberty? | 09:08 |
*** 64MAD52OW is now known as tiagogomes | 09:08 | |
*** gparaskevas has joined #openstack-ansible | 09:10 | |
mattt | tiagogomes: i think that was cut on friday | 09:14 |
mattt | tiagogomes: it works obviously, but i don't know of any production deploys running it obviously | 09:14 |
tiagogomes | mattt I see, thanks :) | 09:14 |
*** sura8257 has joined #openstack-ansible | 09:16 | |
*** sura8257 has quit IRC | 09:36 | |
gparaskevas | hello ! | 09:38 |
gparaskevas | how are you? | 09:39 |
gparaskevas | mattt: i have a question, i am vulding addons for OSA and i cant understand how you inventoory works, i mean how doas rpc-openstack uses the same inventory as OSA? | 09:40 |
gparaskevas | building* | 09:40 |
*** neilus has joined #openstack-ansible | 09:50 | |
gparaskevas | tiagogomes: i have a question, i am Bulding addons for OSA(like rpc-openstack) and I cant understand how inventory works, I mean how does rpc-openstack uses the same inventory as OSA? | 09:55 |
tiagogomes | gparaskevas, Hve you seen this page: http://docs.openstack.org/developer/openstack-ansible/developer-docs/extending.html ? | 09:56 |
gparaskevas | mmm ok thats look reasonable | 09:57 |
gparaskevas | :P | 09:57 |
gparaskevas | thank a million | 09:57 |
mattt | gparaskevas: yep that's effectively what rpc-openstack does | 09:59 |
*** skamithi14 has quit IRC | 10:00 | |
*** skamithi13 has joined #openstack-ansible | 10:00 | |
gparaskevas | yes i just saw it, i must have been tired, because i looked at it on saturday as i thought that there was something an i didnt see it! anyway thanks! | 10:00 |
gparaskevas | now my playbooks will finnaly have a mother | 10:00 |
tiagogomes | :) | 10:02 |
*** gardenshed has quit IRC | 10:16 | |
*** gardenshed has joined #openstack-ansible | 10:30 | |
*** javeriak has joined #openstack-ansible | 10:51 | |
tiagogomes | Hi, this happened to me on a fresh install for kilo http://paste.openstack.org/show/477368/ | 11:11 |
tiagogomes | it is the second time that this happens. Anyone has any idea? | 11:12 |
*** harlowja has quit IRC | 11:17 | |
*** dolpher has quit IRC | 11:25 | |
*** javeriak has quit IRC | 11:27 | |
*** subscope has joined #openstack-ansible | 11:47 | |
*** vdo has joined #openstack-ansible | 11:49 | |
*** javeriak has joined #openstack-ansible | 11:49 | |
*** javeriak has quit IRC | 11:53 | |
*** javeriak has joined #openstack-ansible | 11:54 | |
tiagogomes | "cannot_read_enabled_plugins_file,"/etc/rabbitmq/enabled_plugins" | 11:56 |
*** skamithi14 has joined #openstack-ansible | 11:59 | |
mattt | tiagogomes: sounds like it could be related to https://review.openstack.org/#/c/239115/ ? | 11:59 |
*** spotz_zzz is now known as spotz | 12:00 | |
tiagogomes | mattt could be :) I'll try the patch | 12:01 |
*** Mudpuppy has joined #openstack-ansible | 12:01 | |
*** skamithi13 has quit IRC | 12:01 | |
*** Guest28399 has joined #openstack-ansible | 12:15 | |
*** javeriak has quit IRC | 12:23 | |
*** spotz is now known as spotz_zzz | 12:24 | |
*** woodard has joined #openstack-ansible | 12:25 | |
*** woodard has quit IRC | 12:34 | |
*** javeriak has joined #openstack-ansible | 12:37 | |
*** woodard has joined #openstack-ansible | 12:38 | |
openstackgerrit | Merged openstack/openstack-ansible: Update Master SHA's https://review.openstack.org/239180 | 12:48 |
mhayden | happy monday, folks | 12:49 |
*** markvoelker has joined #openstack-ansible | 13:03 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Enable encryption for all RabbitMQ connections https://review.openstack.org/238691 | 13:05 |
*** legz1 has left #openstack-ansible | 13:05 | |
*** tlian has joined #openstack-ansible | 13:09 | |
*** tlian has quit IRC | 13:10 | |
*** Mudpuppy has quit IRC | 13:11 | |
openstackgerrit | Merged openstack/openstack-ansible: Update code name https://review.openstack.org/239176 | 13:12 |
*** markvoelker_ has joined #openstack-ansible | 13:14 | |
*** markvoelker has quit IRC | 13:14 | |
*** cfarquhar has quit IRC | 13:15 | |
*** cfarquhar has joined #openstack-ansible | 13:16 | |
*** cfarquhar has quit IRC | 13:16 | |
*** cfarquhar has joined #openstack-ansible | 13:16 | |
*** tlian has joined #openstack-ansible | 13:18 | |
*** harlowja has joined #openstack-ansible | 13:18 | |
*** javeriak has quit IRC | 13:25 | |
*** dolpher has joined #openstack-ansible | 13:25 | |
*** shausy has quit IRC | 13:27 | |
*** woodard has quit IRC | 13:42 | |
*** subscope has quit IRC | 13:45 | |
mattt | mhayden: so with https://review.openstack.org/#/c/233284/ | 13:50 |
mattt | mhayden: there's no need to actually ensure apparmor is being laoded? this one seems odd to me | 13:50 |
openstackgerrit | yapeng Yang proposed openstack/openstack-ansible: Add source into README.rst https://review.openstack.org/239438 | 13:51 |
*** jwagner_away is now known as jwagner | 13:53 | |
*** woodard has joined #openstack-ansible | 13:56 | |
*** mgoddard has joined #openstack-ansible | 13:57 | |
*** Mudpuppy has joined #openstack-ansible | 14:01 | |
*** Mudpuppy has quit IRC | 14:02 | |
*** skamithi14 has quit IRC | 14:02 | |
*** Mudpuppy has joined #openstack-ansible | 14:02 | |
*** subscope has joined #openstack-ansible | 14:02 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 14:03 | |
*** subscope has quit IRC | 14:05 | |
*** subscope has joined #openstack-ansible | 14:05 | |
*** harlowja has quit IRC | 14:05 | |
*** skamithi13 has joined #openstack-ansible | 14:06 | |
*** skamithi14 has joined #openstack-ansible | 14:11 | |
*** skamithi13 has quit IRC | 14:15 | |
*** jroll|dupe has joined #openstack-ansible | 14:17 | |
*** markvoelker_ has quit IRC | 14:20 | |
*** markvoelker has joined #openstack-ansible | 14:20 | |
*** markvoelker has quit IRC | 14:21 | |
*** k_stev has joined #openstack-ansible | 14:24 | |
*** mgoddard has quit IRC | 14:24 | |
*** skamithi14 has quit IRC | 14:31 | |
*** skamithi13 has joined #openstack-ansible | 14:31 | |
*** neilus has quit IRC | 14:32 | |
*** javeriak has joined #openstack-ansible | 14:45 | |
*** sdake has quit IRC | 14:48 | |
mhayden | mattt: looking at that now | 14:48 |
mhayden | mattt: i guess i could check AppArmor's current enforcement mode and fail if it's not enabled | 14:49 |
logan2 | regarding the keystone issues i posted in here friday, it seems to occur when using >1 keystone containers w/ fernet tokens. when i do >1 w/ uuid tokens, the deployment failures no longer happen. same when using fernet tokens with only 1 keystone container. | 14:52 |
logan2 | i will try to debug it some more as time permits but im curious if anyone has seen similar issues w/ kilo deploys | 14:52 |
*** neilus has joined #openstack-ansible | 14:58 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-51337: Use an LSM at boot https://review.openstack.org/233284 | 15:01 |
mhayden | mattt: ^^ i think that might be more better ;) | 15:01 |
*** jimchou has joined #openstack-ansible | 15:05 | |
*** slotti has joined #openstack-ansible | 15:05 | |
*** gardensh_ has joined #openstack-ansible | 15:06 | |
*** gardenshed has quit IRC | 15:07 | |
*** woodard has quit IRC | 15:08 | |
*** javeriak_ has joined #openstack-ansible | 15:10 | |
*** javeriak has quit IRC | 15:10 | |
hughsaunders | regarding https://review.openstack.org/#/c/238962/ are we still backporting features to kilo now liberty has been cut? | 15:11 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3857{4,6,7}: Password hashing algorithms https://review.openstack.org/233071 | 15:12 |
*** javeriak has joined #openstack-ansible | 15:13 | |
mattt | mhayden: i guess your comment was confusing me: "This particular change adjusts the bootloader to ensure AppArmor is enabled in the early boot process..." | 15:13 |
mattt | mhayden: and i was trying to point out that what was being said wasn't what i was seeing | 15:13 |
mhayden | mattt: oh, i meant that the STIG suggests that change :P | 15:14 |
mhayden | bleh, i worded that horribly | 15:14 |
mhayden | mattt: so the STIG suggests setting it in the bootloader for SELinux, but that's not needed for apparmor | 15:15 |
mhayden | it's honestly not needed for selinux either | 15:15 |
*** javeriak_ has quit IRC | 15:15 | |
*** sdake has joined #openstack-ansible | 15:15 | |
mhayden | mattt: but i added tasks to verify that apparmor was loaded/running (as it should be with osad) | 15:18 |
mattt | mhayden: cool ! | 15:19 |
mhayden | so close -> https://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible-security,n,z :P | 15:20 |
*** jimchou has quit IRC | 15:23 | |
openstackgerrit | Merged openstack/openstack-ansible: Remove dir_mode from rabbit key distribution https://review.openstack.org/239115 | 15:24 |
*** tlbr has quit IRC | 15:30 | |
*** alop has joined #openstack-ansible | 15:44 | |
*** woodard has joined #openstack-ansible | 15:45 | |
*** mgoddard has joined #openstack-ansible | 15:46 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: [WIP] TLS for rsyslog server https://review.openstack.org/239472 | 15:47 |
*** woodard has quit IRC | 15:51 | |
*** mgoddard_ has joined #openstack-ansible | 16:00 | |
*** markvoelker has joined #openstack-ansible | 16:01 | |
*** mgoddard has quit IRC | 16:03 | |
*** markvoelker has quit IRC | 16:06 | |
*** gardensh_ has quit IRC | 16:07 | |
*** subscope has quit IRC | 16:10 | |
*** gardenshed has joined #openstack-ansible | 16:12 | |
*** vdo has quit IRC | 16:16 | |
*** jroll|dupe is now known as jroll | 16:21 | |
*** dolpher1 has joined #openstack-ansible | 16:22 | |
openstackgerrit | Merged openstack/openstack-ansible: Mysql file handles not correctly configured https://review.openstack.org/238963 | 16:22 |
*** javeriak has quit IRC | 16:22 | |
*** dolpher1 has quit IRC | 16:23 | |
*** dolpher has quit IRC | 16:24 | |
*** dolpher has joined #openstack-ansible | 16:24 | |
*** javeriak has joined #openstack-ansible | 16:26 | |
*** vdo has joined #openstack-ansible | 16:32 | |
*** woodard has joined #openstack-ansible | 16:40 | |
tiagogomes | " Add in cinder devices types" is always failing to me on a fresh deployment, when I re-run it works fine | 16:40 |
*** dolpher has quit IRC | 16:42 | |
*** gparaskevas has quit IRC | 16:42 | |
*** slotti has quit IRC | 16:43 | |
hughsaunders | tiagogomes: can you file a bug with branch/tag and appropriate details? | 16:52 |
tiagogomes | I can do that, but I don't know much details to feed the bug report | 16:53 |
hughsaunders | tiagogomes: related log excerpts would be good | 16:53 |
logan2 | tiagogomes: same here. what does the output look like for you? | 16:57 |
tiagogomes | ERROR: Service Unavailable (HTTP 503) | 16:58 |
tiagogomes | logan2 ^ | 16:58 |
tiagogomes | I grepped for errors in the log but I didn't see anything | 16:58 |
hughsaunders | tiagogomes: that'll come from haproxy probably because all the backends for a service are down | 16:59 |
logan2 | yeah it seems like 4 backends fail to add and the last one finally adds | 16:59 |
logan2 | for me | 16:59 |
tiagogomes | mmm, but there is a "Ensure cinder api ip/port are responsive" task the is run before | 16:59 |
logan2 | as if a service is restarting | 17:00 |
logan2 | however exactly, the task before is supposed to check teh api | 17:00 |
*** mgoddard_ has quit IRC | 17:03 | |
*** markvoelker has joined #openstack-ansible | 17:08 | |
*** k_stev has quit IRC | 17:11 | |
*** mgoddard has joined #openstack-ansible | 17:13 | |
*** markvoelker has quit IRC | 17:13 | |
*** karimb has quit IRC | 17:14 | |
cloudnull | tiagogomes / logan2 using haproxy ? maybe the backends are not updating fast enough which if that was the case haproxy would give you a 503. | 17:24 |
tiagogomes | cloudnull yep using ha proxy. But there is a task that is run before to ensure the the port where cinder is listening to is responsive | 17:25 |
cloudnull | ah fair point. https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_cinder/tasks/cinder_backends.yml#L16-L22 should prevent that | 17:27 |
tiagogomes | well something is not working :) | 17:28 |
cloudnull | tiagogomes: would you be using more than one haproxy node? and could the vip be flapping? However I guess it could be in a half up state w/ at least one node responding so it continues but it fails to connect to one of the other nodes in the pool? | 17:30 |
*** vdo has quit IRC | 17:31 | |
*** woodard has quit IRC | 17:31 | |
cloudnull | bgmccollum: https://mirror.rackspace.com/rackspaceprivatecloud/container_images/rpc-trusty-container.tgz seems to be working again :) | 17:31 |
tiagogomes | two ha proxies but I don't think the VIP moved | 17:31 |
tiagogomes | And it is the second time that the task failed to me | 17:32 |
logan2 | i have 2 haproxy but no vip failover yet so the vip is definitely not moving around in my case. | 17:35 |
*** woodard has joined #openstack-ansible | 17:36 | |
cloudnull | 503 is consistent w/ haproxy not finding an available backend but i guess it could be happening within the API node too. hum thats an odd one for sure. | 17:36 |
cloudnull | but it succeeds of the second run ? | 17:37 |
logan2 | yep, and if you have enough backends it will eventually start succeeding on the 1st run it seems | 17:37 |
*** k_stev has joined #openstack-ansible | 17:37 | |
*** gparaskevas has joined #openstack-ansible | 17:42 | |
*** gardenshed has quit IRC | 17:44 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Enable TLS reception for rsyslog server https://review.openstack.org/239472 | 17:44 |
*** karimb has joined #openstack-ansible | 17:51 | |
*** karimb has quit IRC | 17:52 | |
*** phalmos has joined #openstack-ansible | 18:18 | |
openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: [WIP] Added logging for haproxy to rsyslog https://review.openstack.org/239505 | 18:26 |
mhayden | bah, i don't think i can do the work needed for secure log transport until we have a single CA | 18:27 |
mhayden | kinda backed myself into a corner :P | 18:27 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: [WIP] Enable TLS reception for rsyslog server https://review.openstack.org/239472 | 18:27 |
misc | interesting, I do have a playbook for that, using freeipa | 18:28 |
mhayden | misc: yeah, i was possibly thinking of an initial role that might run on the deployment host to make a CA | 18:29 |
mhayden | and issue certs from there (unless a user wants to provide their own) | 18:30 |
logan2 | http://paste.gentoolinux.info/wayacutavu.py confirmed cinder-api service is running in both containers when this happens.. so the 1st two failed and then it started working after that. dont have time to debug further right now but my guess is its something to do with haproxy not seeing the cinder apis being up yet after they first start, and that health check not working for some | 18:30 |
logan2 | reason | 18:30 |
*** jimchou has joined #openstack-ansible | 18:32 | |
*** sura8257 has joined #openstack-ansible | 18:39 | |
openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: [WIP] Added logging for haproxy to rsyslog https://review.openstack.org/239505 | 18:54 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Small spelling fix in dynamic_inventory.py https://review.openstack.org/239509 | 18:54 |
cloudnull | logan2 tiagogomes: if you have time to test a patch https://review.openstack.org/239505 will give us logging for haproxy which should help in figuring out states when those cinder api calls fail | 18:55 |
*** gardenshed has joined #openstack-ansible | 18:59 | |
*** gardenshed has quit IRC | 18:59 | |
*** k_stev has quit IRC | 18:59 | |
*** gardenshed has joined #openstack-ansible | 19:00 | |
*** javeriak has quit IRC | 19:05 | |
*** k_stev has joined #openstack-ansible | 19:05 | |
*** abitha has joined #openstack-ansible | 19:06 | |
*** javeriak has joined #openstack-ansible | 19:08 | |
*** markvoelker has joined #openstack-ansible | 19:09 | |
*** markvoelker has quit IRC | 19:13 | |
openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Updated ansible version https://review.openstack.org/239516 | 19:23 |
cloudnull | misc: might you have throughts on http://lists.openstack.org/pipermail/openstack-dev/2015-October/077877.html -cc mhayden? | 19:28 |
*** ysm has joined #openstack-ansible | 19:30 | |
mhayden | i'm hearing that anchor might be a possibility | 19:41 |
*** subscope has joined #openstack-ansible | 19:43 | |
*** skamithi14 has joined #openstack-ansible | 19:43 | |
*** ysm has quit IRC | 19:46 | |
*** skamithi13 has quit IRC | 19:46 | |
*** ysm has joined #openstack-ansible | 19:52 | |
*** javeriak has quit IRC | 20:03 | |
*** woodard has quit IRC | 20:07 | |
*** skamithi14 has quit IRC | 20:07 | |
*** skamithi13 has joined #openstack-ansible | 20:08 | |
misc | cloudnull: nope, i took freeipa for that because it was easy | 20:10 |
misc | there is several attempt to do that kind of stuff, and while it is easy to do with ansible thanks to the orchestration feature, it still need to deal with openssl so that's the gate to pain :) | 20:11 |
mhayden | could someone help me understand the logic here? https://github.com/openstack/openstack-ansible/blob/master/scripts/scripts-library.sh#L77 | 20:11 |
mhayden | it seems like the script looks for any available block devices other than the root disk and then sets them up for storage | 20:13 |
*** woodard has joined #openstack-ansible | 20:13 | |
*** toddnni_ has joined #openstack-ansible | 20:45 | |
*** jwagner is now known as jwagner_away | 20:45 | |
*** toddnni has quit IRC | 20:48 | |
*** toddnni_ is now known as toddnni | 20:48 | |
*** gardenshed has quit IRC | 20:52 | |
*** gardenshed has joined #openstack-ansible | 20:58 | |
*** sura8257 has quit IRC | 21:00 | |
*** subscope has quit IRC | 21:02 | |
*** subscope has joined #openstack-ansible | 21:03 | |
*** woodard has quit IRC | 21:04 | |
*** sdake has quit IRC | 21:04 | |
*** woodard has joined #openstack-ansible | 21:05 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: [WIP] First pass at AIO bootstrap in Ansible https://review.openstack.org/239525 | 21:10 |
*** gardenshed has quit IRC | 21:17 | |
*** woodard has quit IRC | 21:27 | |
*** Mudpuppy has quit IRC | 21:28 | |
*** subscope has quit IRC | 21:32 | |
*** subscope has joined #openstack-ansible | 21:32 | |
*** subscope has quit IRC | 21:39 | |
*** sura8257 has joined #openstack-ansible | 21:43 | |
*** neilus has quit IRC | 21:44 | |
*** subscope has joined #openstack-ansible | 21:44 | |
*** spotz_zzz is now known as spotz | 21:47 | |
*** spotz is now known as spotz_zzz | 21:52 | |
*** gardenshed has joined #openstack-ansible | 21:52 | |
*** gparaskevas has quit IRC | 21:58 | |
*** ysm has quit IRC | 21:58 | |
*** subscope has quit IRC | 22:01 | |
*** subscope has joined #openstack-ansible | 22:02 | |
*** subscope has quit IRC | 22:03 | |
*** subscope has joined #openstack-ansible | 22:06 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 22:07 | |
*** subscope has quit IRC | 22:08 | |
*** gardenshed has quit IRC | 22:19 | |
*** k_stev has quit IRC | 22:22 | |
*** sura8257 has quit IRC | 22:35 | |
*** jimchou has quit IRC | 22:40 | |
*** markvoelker has joined #openstack-ansible | 22:44 | |
*** markvoelker_ has joined #openstack-ansible | 22:46 | |
*** markvoelker_ has quit IRC | 22:47 | |
*** markvoelker has quit IRC | 22:49 | |
*** coolj has quit IRC | 22:49 | |
*** markvoelker has joined #openstack-ansible | 22:59 | |
*** coolj has joined #openstack-ansible | 23:10 | |
*** pabelanger has quit IRC | 23:18 | |
*** pabelanger has joined #openstack-ansible | 23:19 | |
*** markvoelker has quit IRC | 23:27 | |
*** harlowja has joined #openstack-ansible | 23:39 | |
*** andymccr has quit IRC | 23:40 | |
*** andymccr has joined #openstack-ansible | 23:41 | |
*** phalmos has quit IRC | 23:52 | |
*** alop has quit IRC | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!