| *** mattoliverau has quit IRC | 00:00 | |
| *** bangfrog has quit IRC | 00:02 | |
| *** baker has quit IRC | 00:03 | |
| *** mgoddard has joined #openstack-ansible | 00:07 | |
| *** matt6434 has joined #openstack-ansible | 00:12 | |
| *** eil397 has quit IRC | 00:13 | |
| *** Prithiv has joined #openstack-ansible | 00:15 | |
| *** matt6434 has quit IRC | 00:17 | |
| *** eil397 has joined #openstack-ansible | 00:22 | |
| *** sdake has quit IRC | 00:25 | |
| *** matt6434 has joined #openstack-ansible | 00:25 | |
| *** matt6434 is now known as mattoliverau | 00:27 | |
| *** Prithiv has quit IRC | 00:29 | |
| *** Prithiv has joined #openstack-ansible | 00:30 | |
| *** mgoddard has quit IRC | 00:36 | |
| *** openstackstatus has quit IRC | 00:50 | |
| *** openstack has joined #openstack-ansible | 00:54 | |
| *** Prithiv has quit IRC | 01:18 | |
| *** jamielennox is now known as jamielennox|away | 01:47 | |
| *** eil397 has quit IRC | 02:17 | |
| *** jamielennox|away is now known as jamielennox | 02:50 | |
| *** baker has joined #openstack-ansible | 02:56 | |
| *** cemmason has joined #openstack-ansible | 03:30 | |
| *** alejandrito has quit IRC | 03:52 | |
| *** fawadkhaliq has joined #openstack-ansible | 03:53 | |
| *** rev_dr has quit IRC | 03:54 | |
| *** networkninja has quit IRC | 03:55 | |
| *** networkninja has joined #openstack-ansible | 04:00 | |
| *** fawadkhaliq has quit IRC | 04:00 | |
| *** bangfrog has joined #openstack-ansible | 04:02 | |
| *** tlian2 has quit IRC | 04:04 | |
| *** bangfrog has quit IRC | 04:07 | |
| *** bangfrog has joined #openstack-ansible | 04:10 | |
| *** baker has quit IRC | 04:30 | |
| *** fawadkhaliq has joined #openstack-ansible | 04:45 | |
| *** fawadkhaliq has quit IRC | 04:47 | |
| *** bangfrog has quit IRC | 04:54 | |
| *** shausy has joined #openstack-ansible | 05:06 | |
| *** persia has quit IRC | 05:06 | |
| *** persia has joined #openstack-ansible | 05:09 | |
| *** sdake has joined #openstack-ansible | 05:15 | |
| *** Mudpuppy has quit IRC | 05:24 | |
| *** fawadkhaliq has joined #openstack-ansible | 05:33 | |
| *** shausy has quit IRC | 05:44 | |
| *** shausy has joined #openstack-ansible | 05:44 | |
| *** javeriak has joined #openstack-ansible | 06:12 | |
| *** logan- has quit IRC | 06:24 | |
| *** javeriak has quit IRC | 06:25 | |
| *** javeriak has joined #openstack-ansible | 06:25 | |
| *** phiche has joined #openstack-ansible | 06:45 | |
| *** phiche1 has joined #openstack-ansible | 06:45 | |
| *** phiche2 has joined #openstack-ansible | 06:46 | |
| *** phiche2 has quit IRC | 06:48 | |
| *** phiche2 has joined #openstack-ansible | 06:48 | |
| *** phiche has quit IRC | 06:49 | |
| *** phiche has joined #openstack-ansible | 06:50 | |
| *** phiche1 has quit IRC | 06:50 | |
| *** shausy has quit IRC | 06:50 | |
| *** shausy has joined #openstack-ansible | 06:50 | |
| *** phiche2 has quit IRC | 06:53 | |
| *** networkninja has quit IRC | 07:01 | |
| *** javeriak has quit IRC | 07:02 | |
| *** javeriak has joined #openstack-ansible | 07:02 | |
| *** mpavone has joined #openstack-ansible | 07:04 | |
| *** phiche has quit IRC | 07:05 | |
| *** javeriak_ has joined #openstack-ansible | 07:06 | |
| *** javeriak has quit IRC | 07:07 | |
| *** mpavone has quit IRC | 07:15 | |
| *** phiche has joined #openstack-ansible | 07:18 | |
| *** adac has joined #openstack-ansible | 07:53 | |
| *** egonzalez has joined #openstack-ansible | 08:06 | |
| *** davidself has joined #openstack-ansible | 08:12 | |
| *** davidself has left #openstack-ansible | 08:12 | |
| adac | when re-running for example "openstack-ansible os-keystone-install.yml", only after a restart of the container the new version will be available? | 08:19 |
|---|---|---|
| *** fawadkhaliq has quit IRC | 08:32 | |
| adac | Trying to add a own certificate to keystone. I just have to set "keystone_user_ssl_cert", "keystone_user_ssl_key" and "keystone_user_ssl_ca_cert" in /etc/openstack_deploy/user_variables.yml, right? And then rebuild it with "openstack-ansible os-keystone-install.yml"? Or am I missing somehting? | 08:39 |
| *** fawadkhaliq has joined #openstack-ansible | 08:48 | |
| *** fawadkhaliq has quit IRC | 08:49 | |
| *** javeriak_ has quit IRC | 08:49 | |
| *** karimb has joined #openstack-ansible | 08:58 | |
| *** openstackstatus has quit IRC | 09:05 | |
| *** openstack has joined #openstack-ansible | 09:09 | |
| *** javeriak has joined #openstack-ansible | 09:13 | |
| *** javeriak has quit IRC | 09:18 | |
| *** javeriak has joined #openstack-ansible | 09:19 | |
| *** karimb_ has joined #openstack-ansible | 09:27 | |
| *** shausy has quit IRC | 09:28 | |
| *** shausy has joined #openstack-ansible | 09:29 | |
| *** karimb has quit IRC | 09:30 | |
| odyssey4me | adac the playbook should restart the service for you, so no need to restart the conatainer | 09:32 |
| *** javeriak has quit IRC | 09:32 | |
| *** openstackgerrit has quit IRC | 09:32 | |
| *** openstackgerrit has joined #openstack-ansible | 09:33 | |
| adac | odyssey4me, hmm ok thanks! It doesn't seem to have added the certificate though, following my description above | 09:34 |
| odyssey4me | adac for SSL certs, yes - put your certs & key into a place on the deployment host, then add those locations using keystone_user_ssl_* variables in /etc/openstack_deploy/user_variables.yml - that'll place the certs on the server... then you need to configure the service | 09:34 |
| *** fawadkhaliq has joined #openstack-ansible | 09:34 | |
| odyssey4me | adac are the certs DNS named? | 09:34 |
| *** javeriak has joined #openstack-ansible | 09:35 | |
| adac | odyssey4me, they are valid for a certain domain (wildcard certificate) | 09:36 |
| odyssey4me | ok, and do you want the ssl endpoint to be for the public endpoint, internal endpoint or admin endpoint... or all or some of them | 09:36 |
| adac | odyssey4me, jepp I did that and then rebuild "openstack-ansible os-keystone-install.yml | 09:36 |
| adac | odyssey4me, actually the public web interface endpoint. In the end however I want use my own certifcate all over the services | 09:37 |
| odyssey4me | adac we don't, yet, support using SSL everywhere for all endpoints... our experience is that OpenStack doesn't support that all that well either - we could change it to support them all, but you may have a bad time | 09:41 |
| odyssey4me | adac ok, i OpenStack the public/internal interfaces are on the same port - this can be worked around by using a load balancer for SSL offloading | 09:41 |
| *** shausy has quit IRC | 09:42 | |
| odyssey4me | do you want both public/internal endpoints to be SSL, or just public | 09:42 |
| *** shausy has joined #openstack-ansible | 09:42 | |
| adac | actually I think it would be enough to just have the public one be SSL | 09:44 |
| odyssey4me | adac ok, do you have a physical load balancer or are you using haproxy? | 09:47 |
| adac | odyssey4me, currently I'm using the shipped haproxy | 09:48 |
| adac | odyssey4me, the problem is that I have troubles bringing up virtual machines. Someone in here told me that it might be a problem with SSL certificates | 09:49 |
| adac | it is simply in the scheduling state forever when setting up a new instance | 09:50 |
| odyssey4me | adac well, not strictly true - there may be an issue with *Horizon* and your browser due to Horizon serving data via javascript in an insecure session | 09:50 |
| odyssey4me | adac if you refresh the page, is it still stuck? | 09:50 |
| adac | odyssey4me, yepp still stuck | 09:50 |
| *** Prithiv has joined #openstack-ansible | 09:50 | |
| odyssey4me | adac ok, how about we solve the real problem first before adding extra complexity | 09:57 |
| adac | odyssey4me, that sounds good to me :) | 09:57 |
| odyssey4me | adac have you looked into any of the logs to determine why the instance creation is stuck? | 09:57 |
| odyssey4me | this is very much an OpenStack troubleshooting process - I would suggest perhaps switching to debug logging first | 09:58 |
| odyssey4me | ie set 'debug: True' in user_variables, then - in this case - run the os-nova-install playbook as a starting point | 09:59 |
| odyssey4me | that'll reconfigure all nova services to have debug mode | 09:59 |
| adac | odyssey4me, ok thanks! | 09:59 |
| odyssey4me | adac then work through the various bits in the chain to find out where the issue lies - perhaps working backwards is a good idea | 10:00 |
| odyssey4me | ie start on the compute node, check /var/log/nova*.log for any ERROR/WARNING/TRACE messages | 10:00 |
| adac | odyssey4me, Ok I'll do that. Thanks for the hints! | 10:00 |
| odyssey4me | you may wish to delete the instance that didn't work, and do a fresh instance creation event after setting debug mode | 10:00 |
| odyssey4me | from the compute node, check the conductor service in the conductor container, then the scheduler | 10:01 |
| adac | odyssey4me, keystone constantly gives these errors. Not sure if they are related: https://gist.github.com/anonymous/a6c87ea228d85c066fe1 | 10:01 |
| odyssey4me | adac those aren't really errors, they're the haproxy checks which happen every 2 seconds | 10:02 |
| adac | odyssey4me, Ok I thought so yes | 10:02 |
| adac | Let me try your suggested approach :) | 10:02 |
| *** openstackgerrit has quit IRC | 10:02 | |
| odyssey4me | adac FYI, for later once you have a working stack, you can use this as a guide for setting up SSL on the public endpoint: https://gist.github.com/odyssey4me/bb79e9f2ae349413dae3 | 10:02 |
| *** openstackgerrit has joined #openstack-ansible | 10:03 | |
| adac | odyssey4me, awesome, thanks! | 10:04 |
| adac | odyssey4me, may I ask what the reason is to use haproxy on the host itself instead of having a own container for a proxy server? | 10:07 |
| *** jamielennox is now known as jamielennox|away | 10:13 | |
| *** ashishb has joined #openstack-ansible | 10:20 | |
| openstackgerrit | Merged openstack/openstack-ansible-py_from_git: Updates for typos https://review.openstack.org/254937 | 10:23 |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_container_create: Updates for typos https://review.openstack.org/254947 | 10:25 |
| odyssey4me | adac primarily because no-one has done the work to move haproxy into a container :) | 10:31 |
| adac | odyssey4me, hehe :) | 10:32 |
| adac | odyssey4me, lol. rebuilding the nova services solved the problem. No more scheduling, it is running :) | 10:35 |
| odyssey4me | adac awesome, it might be that one of the services wasn't running | 10:36 |
| adac | odyssey4me, ok. Let me try a reboot of the machine, see if everything still is working/coming up | 10:37 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Implement a callback plugin for human readable ansible logs https://review.openstack.org/254800 | 10:37 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Implement a callback plugin for human readable ansible logs https://review.openstack.org/254800 | 10:38 |
| openstackgerrit | Merged openstack/openstack-ansible-pip_install: updated summary https://review.openstack.org/254936 | 10:38 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Liberty SHA's - 7 Dec 2015 https://review.openstack.org/254287 | 10:41 |
| adac | odyssey4me, how many containers should there be? :) | 10:46 |
| adac | counting 23 | 10:46 |
| adac | ok now there are 29 online | 10:48 |
| *** fawadkhaliq has quit IRC | 10:57 | |
| *** fawadkhaliq has joined #openstack-ansible | 10:57 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Liberty SHA's - 9 Dec 2015 https://review.openstack.org/254287 | 11:00 |
| *** fawadkhaliq has quit IRC | 11:03 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Fixes playbook runtime issues with ldap https://review.openstack.org/255204 | 11:14 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Do not assume galera_all hostgroup exists in galera_server role https://review.openstack.org/255205 | 11:15 |
| *** ggillies has quit IRC | 11:44 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Juno tag to 10.1.19 https://review.openstack.org/254292 | 11:52 |
| *** javeriak has quit IRC | 11:56 | |
| *** javeriak has joined #openstack-ansible | 12:01 | |
| *** phiche has quit IRC | 12:09 | |
| *** phiche has joined #openstack-ansible | 12:09 | |
| *** javeriak has quit IRC | 12:19 | |
| *** javeriak has joined #openstack-ansible | 12:24 | |
| *** ggillies has joined #openstack-ansible | 12:31 | |
| *** javeriak has quit IRC | 12:34 | |
| *** fawadkhaliq has joined #openstack-ansible | 12:38 | |
| *** alejandrito has joined #openstack-ansible | 12:40 | |
| mhayden | mornin' | 12:43 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Docs for skipping user creation w/LDAP https://review.openstack.org/255238 | 12:44 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Docs for skipping user creation w/LDAP https://review.openstack.org/255241 | 12:45 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Allow ramdisk_id, kernel_id to be null on schema https://review.openstack.org/251720 | 12:47 |
| odyssey4me | adac mhayden FYI http://lists.openstack.org/pipermail/openstack-dev/2015-December/081847.html | 12:49 |
| mhayden | ah, thanks for the heads up | 12:50 |
| odyssey4me | I encourage you to respond on the mailing list if you'd be interested in joining a mid cycle. | 12:50 |
| mhayden | i have 120 unread in the inbox :| | 12:50 |
| evrardjp | hello | 12:50 |
| adac | odyssey4me, I'm sure I could provide install guide documentation improvement suggestions, yes. However not sure If I can come physically to such a mid-cylcle sprint. | 12:56 |
| odyssey4me | adac you're welcome to add to the install guide improvement etherpad now already, we're still taking suggestions/comments | 12:57 |
| adac | odyssey4me, cool! I will add some noted there when I find issues! | 12:58 |
| *** bangfrog has joined #openstack-ansible | 13:07 | |
| *** javeriak has joined #openstack-ansible | 13:09 | |
| odyssey4me | FYI to all, a mid-cycle discussion should be had on the ML: reply to http://lists.openstack.org/pipermail/openstack-dev/2015-December/081847.html or to http://lists.openstack.org/pipermail/openstack-operators/2015-December/009154.html (whichever floats your boat) | 13:10 |
| *** bangfrog has quit IRC | 13:12 | |
| evrardjp | adac, for the haproxy on the host, it's really better for your health that way | 13:15 |
| adac | evrardjp, hehe fine for me ;) | 13:16 |
| evrardjp | we didn't try that recently, but it was a pain with multicast before | 13:16 |
| evrardjp | which has one of the reasons we'd prefer on the host itself | 13:16 |
| adac | evrardjp, I had a similar issuewith docker before using hipache, there was no way to run it into a container back then | 13:17 |
| adac | at least not a simple way | 13:17 |
| evrardjp | but you could have it installed on the container right now I think. With latest kernels, you don't have problems of spawning multicast interfaces in namespaces anymore (at least if I recall correctly) | 13:17 |
| adac | ok I see | 13:18 |
| evrardjp | or you could use unicast for keepalived, but it's a less elegant solution | 13:18 |
| evrardjp | haproxy itself is not really an issue, except maybe for a few sysctls | 13:19 |
| evrardjp | you should try if you have time :) I'd be interested by the results :p | 13:20 |
| adac | evrardjp, I really would need to get more familiar with ansible and lxc more in first place, then I could try it ;-) | 13:22 |
| odyssey4me | hughsaunders we're back to a running state! https://review.openstack.org/239525 | 13:25 |
| *** fawadkhaliq has quit IRC | 13:27 | |
| hughsaunders | odyssey4me: I'll wait till that review matures, cant trust any review with <100 ps | 13:27 |
| *** bangfrog has joined #openstack-ansible | 13:27 | |
| * odyssey4me shakes a fist at hughsaunders | 13:28 | |
| evrardjp | :) | 13:28 |
| evrardjp | they are close to 100ps, it's almost time for your action then hughsaunders :p | 13:29 |
| *** karimb_ has quit IRC | 13:29 | |
| hughsaunders | already actioned, just winding odyssey4me up :) | 13:29 |
| *** bryan_att has quit IRC | 13:29 | |
| evrardjp | I know I know ;) | 13:29 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Implement a callback plugin for human readable ansible logs https://review.openstack.org/254800 | 13:32 |
| odyssey4me | mhayden would you mind backporting https://review.openstack.org/254210 and https://review.openstack.org/253665 to liberty? | 13:34 |
| mhayden | odyssey4me: i think i did earlier -> https://review.openstack.org/#/c/255238/ | 13:35 |
| odyssey4me | ah, missed that - thanks | 13:35 |
| mhayden | odyssey4me: de nada ;) | 13:35 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-pip_install: Update run_tests to be more complete https://review.openstack.org/255259 | 13:39 |
| * mhayden is out for meeting time :| | 13:40 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-lxc_container_create: Update run_tests to be more complete https://review.openstack.org/255260 | 13:41 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-py_from_git: Update run_tests to be more complete https://review.openstack.org/255262 | 13:43 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Fix OpenStack-Ansible refs w/o hyphen https://review.openstack.org/255263 | 13:44 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-openstack_hosts: Update run_tests to be more complete https://review.openstack.org/255264 | 13:44 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-lxc_hosts: Update run_tests to be more complete https://review.openstack.org/255265 | 13:45 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-rsyslog_client: Update run_tests to be more complete https://review.openstack.org/255266 | 13:46 |
| *** mgoddard has joined #openstack-ansible | 13:49 | |
| *** woodard has joined #openstack-ansible | 13:49 | |
| *** KLevenstein has joined #openstack-ansible | 13:53 | |
| *** baker has joined #openstack-ansible | 13:57 | |
| *** karimb has joined #openstack-ansible | 13:58 | |
| *** javeriak_ has joined #openstack-ansible | 14:00 | |
| *** logan- has joined #openstack-ansible | 14:01 | |
| *** sdake has quit IRC | 14:02 | |
| *** javeriak has quit IRC | 14:02 | |
| *** javeriak has joined #openstack-ansible | 14:09 | |
| *** javeriak_ has quit IRC | 14:10 | |
| *** tlian has joined #openstack-ansible | 14:11 | |
| *** Bjoern_ has joined #openstack-ansible | 14:12 | |
| *** Bjoern_ is now known as Bjoern_zZzZzZzZ | 14:13 | |
| *** Bjoern_zZzZzZzZ is now known as Bjoern_ | 14:13 | |
| *** Bjoern_ is now known as Bjoern_zZzZzZzZ | 14:14 | |
| *** Bjoern_zZzZzZzZ is now known as Bjoern_ | 14:14 | |
| *** Bjoern_ is now known as Bjoern_zZzZzZzZ | 14:15 | |
| *** Bjoern_zZzZzZzZ is now known as Bjoern_ | 14:15 | |
| *** javeriak has quit IRC | 14:15 | |
| *** javeriak has joined #openstack-ansible | 14:16 | |
| *** javeriak has quit IRC | 14:19 | |
| *** bangfrog has quit IRC | 14:19 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Skip Keystone task when not using swift w keystone https://review.openstack.org/254286 | 14:22 |
| openstackgerrit | Merged openstack/openstack-ansible: Update Juno tag to 10.1.19 https://review.openstack.org/254292 | 14:27 |
| *** slotti has joined #openstack-ansible | 14:27 | |
| *** shausy has quit IRC | 14:28 | |
| cloudnull | morning | 14:37 |
| *** fawadkhaliq has joined #openstack-ansible | 14:43 | |
| odyssey4me | um, what? https://github.com/ansible/ansible/blob/devel/lib/ansible/constants.py#L114-L118 | 14:53 |
| cloudnull | odyssey4me: install cow say | 14:54 |
| *** javeriak has joined #openstack-ansible | 14:54 | |
| *** slotti has quit IRC | 14:56 | |
| *** cemmason has quit IRC | 14:56 | |
| *** mgoddard has quit IRC | 14:57 | |
| *** cemmason has joined #openstack-ansible | 14:57 | |
| *** Mudpuppy has joined #openstack-ansible | 15:02 | |
| *** Mudpuppy has quit IRC | 15:03 | |
| hughsaunders | odyssey4me: out of context that is a pretty random line | 15:04 |
| *** Mudpuppy has joined #openstack-ansible | 15:04 | |
| *** bryan_att has joined #openstack-ansible | 15:05 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 15:05 | |
| *** bangfrog has joined #openstack-ansible | 15:05 | |
| *** Mudpuppy has quit IRC | 15:05 | |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible-openstack_hosts: Updates for typos https://review.openstack.org/254939 | 15:06 |
| odyssey4me | cloudnull hughsaunders check out the output from this callback plugin: http://logs.openstack.org/00/254800/5/check/gate-openstack-ansible-dsvm-commit/3ef7d10/console.html#_2015-12-09_13_37_35_208 | 15:07 |
| odyssey4me | that's the task, look below it | 15:07 |
| odyssey4me | stdout/stderr are actually output in a readable format | 15:07 |
| hughsaunders | odyssey4me: +++ | 15:09 |
| odyssey4me | especially useful: http://logs.openstack.org/00/254800/5/check/gate-openstack-ansible-dsvm-commit/3ef7d10/console.html#_2015-12-09_13_37_48_080 | 15:09 |
| odyssey4me | hughsaunders so now we just need to write one that doesn't do wasteful outputs - ie skip writing out stderr if there is nothing in it | 15:11 |
| hughsaunders | odyssey4me: yeah, start end and delta should be one line also | 15:12 |
| odyssey4me | hughsaunders start/end/delta is from a different callback, I think | 15:13 |
| hughsaunders | ah | 15:13 |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible-lxc_hosts: Updates for typos https://review.openstack.org/254943 | 15:17 |
| *** javeriak has quit IRC | 15:22 | |
| *** Mudpuppy has joined #openstack-ansible | 15:22 | |
| cloudnull | odyssey4me: thats awesome! | 15:35 |
| palendae | hughsaunders: I think that one's from one mhayden added | 15:37 |
| *** javeriak has joined #openstack-ansible | 15:40 | |
| *** networkninja has joined #openstack-ansible | 15:40 | |
| hughsaunders | "Create OpenStack global requirements wheels" is failing for me during repo build, can't find aioeventlet, because its skipping both the indexes "stdout: Ignoring indexes: https://rpc-repo.rackspace.com/pools,https://pypi.python.org/simple". Why would pip skip those indexes? They are both added as trusted | 15:40 |
| odyssey4me | cloudnull ^ | 15:41 |
| odyssey4me | hughsaunders cloudnull it would seem prudent to get these through the door? https://review.openstack.org/254207 and https://review.openstack.org/254287 | 15:43 |
| *** sdake has joined #openstack-ansible | 15:55 | |
| *** ashishb has quit IRC | 16:02 | |
| stevelle | cloudnull: quick question, why is this change in the playbook instead of within the role: https://review.openstack.org/#/c/196702/ | 16:10 |
| *** sdake has quit IRC | 16:10 | |
| cloudnull | stevelle: we conditionally wanted to do that action because it will fail within a container | 16:11 |
| cloudnull | and wanted to keep the container logic out of the role | 16:11 |
| stevelle | thats about what I figured. thx cloudnull | 16:12 |
| cloudnull | than k you for reviewing it :) | 16:12 |
| openstackgerrit | Merged openstack/openstack-ansible: Convert AIO bootstrap from bash to Ansible https://review.openstack.org/239525 | 16:19 |
| *** phiche has quit IRC | 16:19 | |
| odyssey4me | mhayden ^ \o/ | 16:26 |
| *** javeriak has quit IRC | 16:27 | |
| *** javeriak has joined #openstack-ansible | 16:32 | |
| *** ysm has joined #openstack-ansible | 16:33 | |
| *** adac has quit IRC | 16:36 | |
| *** gparaskevas has joined #openstack-ansible | 16:41 | |
| *** ctina_ has joined #openstack-ansible | 16:43 | |
| cloudnull | upstream change for roles to be broken out https://review.openstack.org/#/c/255369/ | 16:45 |
| *** javeriak_ has joined #openstack-ansible | 16:45 | |
| *** networkninja has quit IRC | 16:48 | |
| *** javeriak has quit IRC | 16:48 | |
| stevelle | sigmavirus24: trying to make sense of your review for https://review.openstack.org/#/c/238509/ and I'm not seeing it | 16:48 |
| stevelle | got a moment to talk me through? | 16:48 |
| sigmavirus24 | stevelle: I can just update it myself | 16:50 |
| sigmavirus24 | cloudnull: knows what I meant there but I guess hasn't had a chance to update it | 16:51 |
| sigmavirus24 | let me pull it and fix it up | 16:51 |
| cloudnull | sigmavirus24: its my bad... im being slow | 16:52 |
| cloudnull | upstream goverenance change https://review.openstack.org/#/c/255372/ | 16:52 |
| *** javeriak_ has quit IRC | 16:53 | |
| *** javeriak has joined #openstack-ansible | 16:54 | |
| cloudnull | sigmavirus24: if you have a chance to update that review it would be great. else I can get to it post my next meeting | 16:54 |
| sigmavirus24 | cloudnull: I got it | 16:55 |
| *** KLevenstein has quit IRC | 16:55 | |
| stevelle | thx | 16:55 |
| *** sdake has joined #openstack-ansible | 16:56 | |
| *** javeriak_ has joined #openstack-ansible | 16:56 | |
| *** javeriak has quit IRC | 16:58 | |
| odyssey4me | FYI to all, a mid-cycle discussion should be had on the ML: reply to http://lists.openstack.org/pipermail/openstack-dev/2015-December/081847.html or to http://lists.openstack.org/pipermail/openstack-operators/2015-December/009154.html (whichever floats your boat) | 16:59 |
| hughsaunders | odyssey4me: gating meeting time if you want to join | 17:00 |
| odyssey4me | mgagne mgariepy alextricity spotz_zzz bgmccollum etoews gparaskevas jmccrory mcarden mattoliverau meteorfox pabelanger serverascode wabu ^ | 17:00 |
| hughsaunders | vidyo 5489 | 17:00 |
| hughsaunders | #wrong channel | 17:00 |
| odyssey4me | hahaha | 17:01 |
| cloudnull | hahaha | 17:01 |
| *** KLevenstein has joined #openstack-ansible | 17:01 | |
| openstackgerrit | Merged openstack/openstack-ansible: Allow ramdisk_id, kernel_id to be null on schema https://review.openstack.org/251720 | 17:02 |
| *** mgoddard has joined #openstack-ansible | 17:15 | |
| *** revdr has quit IRC | 17:17 | |
| *** revdr has joined #openstack-ansible | 17:17 | |
| *** tlian has quit IRC | 17:20 | |
| *** ashishb has joined #openstack-ansible | 17:22 | |
| *** eil397 has joined #openstack-ansible | 17:30 | |
| *** mgoddard has quit IRC | 17:34 | |
| *** egonzalez has quit IRC | 17:35 | |
| *** javeriak_ has quit IRC | 17:40 | |
| *** javeriak_ has joined #openstack-ansible | 17:40 | |
| cloudnull | these commits in infra / governance are good to go now, if folks are interested please +1/-1 on https://review.openstack.org/#/c/255369/ and https://review.openstack.org/#/c/255372/ | 17:41 |
| *** networkninja has joined #openstack-ansible | 17:42 | |
| *** alextricity_r has joined #openstack-ansible | 17:44 | |
| *** karimb has quit IRC | 17:45 | |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible-openstack_hosts: Updates for typos https://review.openstack.org/254939 | 17:47 |
| alextricity_r | Hey. Does anybody know why my controller won't ping the gateway after moving my IP address from eth0 to br-mgmt? | 17:48 |
| alextricity_r | Does moving the IP over to br-mgmt change something that won't allow it to ping the gateway anymore? | 17:49 |
| alextricity_r | I've checked my default route, and I see that it's via br-mgmt | 17:49 |
| *** hassaan_ has joined #openstack-ansible | 17:50 | |
| javeriak_ | hey guys; i sometimes get a "modprobe: FATAL: Module vhost_net not found" on my compute hosts. i haven't really looked deeper into it yet but any idea whats wrong | 17:52 |
| *** bangfrog has quit IRC | 17:53 | |
| openstackgerrit | Ian Cordasco proposed openstack/openstack-ansible: Keystone domain fix https://review.openstack.org/238509 | 17:54 |
| *** bangfrog has joined #openstack-ansible | 17:54 | |
| *** Prithiv has quit IRC | 17:56 | |
| pabelanger | odyssey4me: sounds good, let me check the dates over | 17:57 |
| cloudnull | greek taco time, bbl | 17:59 |
| odyssey4me | FYI javeriak_ mid-cycle discussion should be had on the ML: reply to http://lists.openstack.org/pipermail/openstack-dev/2015-December/081847.html or to http://lists.openstack.org/pipermail/openstack-operators/2015-December/009154.html (whichever floats your boat) | 18:00 |
| javeriak_ | will do odyssey4me; and disregard my prev comment, figured out the kernel version was old | 18:01 |
| *** sdake has quit IRC | 18:08 | |
| *** bangfrog has quit IRC | 18:09 | |
| *** tlian has joined #openstack-ansible | 18:10 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Convert AIO bootstrap from bash to Ansible https://review.openstack.org/255412 | 18:16 |
| *** bangfrog has joined #openstack-ansible | 18:16 | |
| *** gparaskevas has quit IRC | 18:16 | |
| *** markvoelker has quit IRC | 18:18 | |
| *** bryan_att has quit IRC | 18:19 | |
| *** markvoelker has joined #openstack-ansible | 18:21 | |
| *** ysm has quit IRC | 18:24 | |
| *** javeriak has joined #openstack-ansible | 18:26 | |
| *** ysm has joined #openstack-ansible | 18:29 | |
| *** javeriak_ has quit IRC | 18:30 | |
| *** ashishb has quit IRC | 18:33 | |
| *** sdake has joined #openstack-ansible | 18:43 | |
| openstackgerrit | Merged openstack/openstack-ansible: Update Liberty SHA's - 9 Dec 2015 https://review.openstack.org/254287 | 18:44 |
| *** adac has joined #openstack-ansible | 18:51 | |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts: Updates for typos https://review.openstack.org/254943 | 18:54 |
| *** hassaan_ has quit IRC | 18:58 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Use fastest Linux mirrors for gate jobs https://review.openstack.org/253686 | 19:02 |
| *** mgoddard has joined #openstack-ansible | 19:03 | |
| *** fawadkhaliq has quit IRC | 19:04 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Use Ansible AIO playbook for run-aio-build.sh https://review.openstack.org/244708 | 19:07 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: [WIP] Testing parallel playbooks https://review.openstack.org/253706 | 19:08 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Updating AIO docs for Ansible playbook https://review.openstack.org/244720 | 19:29 |
| *** javeriak_ has joined #openstack-ansible | 19:30 | |
| *** javeriak_ has quit IRC | 19:32 | |
| *** javeriak has quit IRC | 19:33 | |
| cloudnull | anyone around that can make https://review.openstack.org/#/c/252100/ go ? | 19:46 |
| cloudnull | waiting on +2/+w | 19:46 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Updating AIO docs for Ansible playbook https://review.openstack.org/244720 | 19:46 |
| *** mgoddard has quit IRC | 19:47 | |
| eil397 | cloudnull: +1 | 19:52 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Updating AIO docs for Ansible playbook https://review.openstack.org/244720 | 19:54 |
| *** mgoddard has joined #openstack-ansible | 19:54 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Enable Neutron prevent_arp_spoofing by default https://review.openstack.org/252574 | 19:56 |
| *** adac has quit IRC | 19:56 | |
| cloudnull | thanks eil397 | 19:57 |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts: Updates for typos https://review.openstack.org/254939 | 20:04 |
| stevelle | cloudnull: done | 20:06 |
| *** adac has joined #openstack-ansible | 20:12 | |
| *** egonzalez has joined #openstack-ansible | 20:17 | |
| odyssey4me | heh, pabelanger is wrestling bits of -infra into ansible, one step at a time: :) | 20:32 |
| odyssey4me | ref: Paul Belanger proposed openstack-infra/project-config: Add ansible-role-(diskimage-builder|jenkins-job-builder) https://review.openstack.org/252001 | 20:32 |
| odyssey4me | :) good work, sir | 20:32 |
| pabelanger | :) | 20:32 |
| pabelanger | I really need to find a team for them! So far, they are unofficial projects | 20:32 |
| odyssey4me | so here's a thing, I wonder | 20:33 |
| odyssey4me | perhaps members of OpenStack-Ansible would be interested in helping review and maintain those roles... | 20:33 |
| *** karimb has joined #openstack-ansible | 20:34 | |
| odyssey4me | perhaps you should raise the prospect at the next meeting: https://wiki.openstack.org/wiki/Meetings/openstack-ansible | 20:34 |
| pabelanger | Ya, I was planning on bringing it up here. Either some sort of sub team, or making the Openstack Ansible team more generic to any ansible project | 20:34 |
| odyssey4me | while it's perhaps inappropriate to have it under the umbrella of OpenStack-Ansible, perhaps there are some who'd be keen to participate a bit and help out | 20:34 |
| odyssey4me | perhaps a sub-team is the right approach | 20:35 |
| pabelanger | Ya, I see some overlap with ansible obviously, but also don't expect people to go out and learn out CI stuff works | 20:35 |
| odyssey4me | it's well outside of the project's mission | 20:35 |
| pabelanger | odyssey4me: Ya, i need to see how other projects handle sub-teams | 20:35 |
| odyssey4me | me too | 20:35 |
| odyssey4me | jhesketh may be interested, being an -infra core and having a very small toe dipped in ansible :) | 20:36 |
| stevelle | seems to clearly be an infra concern, but would probably be good to grow a stable of folks to help maintain that tool set. | 20:36 |
| odyssey4me | yep, agreed stevelle | 20:36 |
| odyssey4me | it is well outside the mission, but of interest to anyone wanting to understand more about how -infra works... | 20:37 |
| pabelanger | Ya, and I don't want to have a 2nd infra team. Since I don't think that is the right approach either | 20:37 |
| odyssey4me | agreed | 20:37 |
| pabelanger | and right now openstack-infra tends to only run projects they are using | 20:37 |
| pabelanger | so, there is the dilemma | 20:38 |
| pabelanger | I've actually thought of bringing it up with openstack operators too | 20:38 |
| stevelle | +1 to recruiting here for that. | 20:38 |
| odyssey4me | pabelanger perhaps a good approach would be to focus on tooling for external-CI usage? | 20:38 |
| pabelanger | since this stuff is more for downstream / midstream CI | 20:38 |
| pabelanger | odyssey4me: Right, that's how I am approaching it right now. But using ansible instead of puppet :) | 20:39 |
| odyssey4me | pabelanger interestingly, that's a topic of near-term focus for hughsaunders d34dh0r53 and I | 20:39 |
| eil397 | : - ) "infrastructure for infrastructure as a service" already sounds pretty recursive. but CI for infrastructure for deployment automation of Iaas it is overhead | 20:39 |
| odyssey4me | lol | 20:40 |
| odyssey4me | overcloud for the undercloud for the overcloud? | 20:40 |
| eil397 | yes : - ) | 20:40 |
| eil397 | thousands of way to shoot your leg . in fully automated manner | 20:41 |
| pabelanger | Since I am hear, how are you guys managing selinux? Like adding new semodule policies? | 20:41 |
| pabelanger | here* | 20:42 |
| odyssey4me | pabelanger we're managing it by avoiding it at this stage ;) | 20:45 |
| pabelanger | :) | 20:45 |
| odyssey4me | pabelanger the guy to speak to (although he's out today) is mhayden | 20:45 |
| *** egonzalez has quit IRC | 20:45 | |
| openstackgerrit | Merged openstack/openstack-ansible: Update Kilo SHA's - 7 Dec 2015 https://review.openstack.org/254207 | 20:46 |
| odyssey4me | in terms of the project, we're still recruiting for a lead outside of Rackspace to be the lead for the multi-OS development effort | 20:46 |
| odyssey4me | ref: https://etherpad.openstack.org/p/openstack-ansible-multi-os-support | 20:47 |
| eil397 | am I right that there is separated role for it https://github.com/openstack/openstack-ansible-security I know only that it exists. | 20:47 |
| odyssey4me | eil397 well, that's focused on doing OS security hardening in the RHEL STIG manner on Ubuntu - for now | 20:48 |
| odyssey4me | it's on the cards to add that role as part of an integrated functional test quite soon | 20:49 |
| eil397 | odyssey4me: ok. thanks. interesting | 20:49 |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Fixes playbook runtime issues with ldap https://review.openstack.org/253658 | 20:50 |
| odyssey4me | eil397 FYI http://docs.openstack.org/developer/openstack-ansible-security/ | 20:51 |
| eil397 | odyssey4me: thanks | 20:53 |
| odyssey4me | alright, I'm out for the night - cheerio! | 20:54 |
| pabelanger | odyssey4me: sounds good | 20:54 |
| *** Bjoern__ has joined #openstack-ansible | 21:04 | |
| *** Bjoern_ has quit IRC | 21:05 | |
| *** ctina_ has quit IRC | 21:09 | |
| *** adac has quit IRC | 21:11 | |
| *** bangfrog has quit IRC | 21:12 | |
| *** meteorfox has quit IRC | 21:13 | |
| *** meteorfox has joined #openstack-ansible | 21:14 | |
| *** bangfrog has joined #openstack-ansible | 21:30 | |
| *** bryan_att has joined #openstack-ansible | 21:33 | |
| *** mgoddard has quit IRC | 21:35 | |
| *** phiche has joined #openstack-ansible | 21:46 | |
| *** phiche1 has joined #openstack-ansible | 22:02 | |
| *** phiche has quit IRC | 22:02 | |
| *** Bjoern__ is now known as Bjoern_zZzZzZzZ | 22:06 | |
| *** Bjoern_zZzZzZzZ is now known as Bjoern__ | 22:07 | |
| *** alextricity_r has quit IRC | 22:17 | |
| *** Mudpuppy has quit IRC | 22:18 | |
| *** ysm has quit IRC | 22:23 | |
| *** alejandrito has quit IRC | 22:26 | |
| *** karimb has quit IRC | 22:27 | |
| *** meteorfox has quit IRC | 22:36 | |
| *** bryan_att has quit IRC | 22:41 | |
| *** bryan_att has joined #openstack-ansible | 22:41 | |
| *** ysm has joined #openstack-ansible | 22:48 | |
| *** harlowja has quit IRC | 22:51 | |
| *** harlowja has joined #openstack-ansible | 22:51 | |
| *** sdake has quit IRC | 22:52 | |
| *** baker has quit IRC | 23:03 | |
| *** baker has joined #openstack-ansible | 23:06 | |
| *** KLevenstein has quit IRC | 23:08 | |
| *** baker has quit IRC | 23:09 | |
| *** Bjoern__ has quit IRC | 23:14 | |
| *** Bjoern__ has joined #openstack-ansible | 23:16 | |
| *** Bjoern__ has quit IRC | 23:21 | |
| *** ysm has quit IRC | 23:23 | |
| *** Bjoern_ has joined #openstack-ansible | 23:27 | |
| *** meteorfox has joined #openstack-ansible | 23:33 | |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible: Allow for multiple store backends for Glance https://review.openstack.org/255589 | 23:33 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 23:48 | |
| *** bangfrog has quit IRC | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!