Monday, 2016-02-29

*** sdake has joined #openstack-ansible00:00
*** admin0 has quit IRC00:00
*** skamithi13 has quit IRC00:18
*** skamithi14 has joined #openstack-ansible00:18
*** markvoelker has joined #openstack-ansible00:43
*** sdake has quit IRC00:45
*** markvoelker has quit IRC00:47
*** sdake has joined #openstack-ansible00:50
*** sdake has quit IRC01:06
*** sdake has joined #openstack-ansible01:08
*** ShannonM has quit IRC01:23
*** sdake has quit IRC01:43
*** markvoelker has joined #openstack-ansible01:44
*** markvoelker has quit IRC01:48
*** mariongarly_ has quit IRC02:09
*** mariognarly has joined #openstack-ansible02:10
*** sdake has joined #openstack-ansible02:31
*** johnmilton has quit IRC02:31
*** markvoelker has joined #openstack-ansible02:44
*** markvoelker has quit IRC02:49
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server: Adding ERLANG VM tuning parameters  https://review.openstack.org/28489903:12
*** sdake has quit IRC03:19
*** gfa is now known as gfa_03:28
*** sdake has joined #openstack-ansible03:47
*** mc_dachoppa has joined #openstack-ansible04:00
*** shausy has joined #openstack-ansible04:11
*** mc_dachoppa has left #openstack-ansible04:32
*** markvoelker has joined #openstack-ansible04:45
*** markvoelker has quit IRC04:50
*** kstepniewski has joined #openstack-ansible04:52
*** javeriak has joined #openstack-ansible05:06
*** javeriak_ has joined #openstack-ansible05:12
*** javeriak has quit IRC05:12
*** cvstealth has quit IRC05:15
*** zhangjn has quit IRC05:38
*** zhangjn has joined #openstack-ansible05:42
*** fawadkhaliq has joined #openstack-ansible05:54
*** javeriak_ has quit IRC05:58
*** Mudpuppy has quit IRC06:01
*** javeriak has joined #openstack-ansible06:15
*** weezS has joined #openstack-ansible06:17
*** rgogunskiy has joined #openstack-ansible06:24
*** phiche has joined #openstack-ansible06:33
*** phiche has quit IRC06:36
*** phiche has joined #openstack-ansible06:40
*** sdake has quit IRC06:43
*** markvoelker has joined #openstack-ansible06:46
*** zhangjn has quit IRC06:47
*** zhangjn has joined #openstack-ansible06:49
*** weezS has quit IRC06:49
*** markvoelker has quit IRC06:50
*** phiche has quit IRC06:54
*** phiche1 has joined #openstack-ansible06:54
*** cvstealth has joined #openstack-ansible06:59
*** sdake has joined #openstack-ansible06:59
*** fawadk has joined #openstack-ansible07:15
*** fawadkhaliq has quit IRC07:15
*** fawadkhaliq has joined #openstack-ansible07:15
*** sdake has quit IRC07:17
*** fawadk has quit IRC07:20
*** jiteka has joined #openstack-ansible07:25
*** phiche1 has quit IRC07:30
*** zhangjn has quit IRC07:33
*** zhangjn has joined #openstack-ansible07:39
*** pcaruana has joined #openstack-ansible07:43
*** fawadkhaliq has quit IRC07:43
*** TheIntern has quit IRC07:45
*** phiche has joined #openstack-ansible07:48
*** gus has quit IRC07:50
*** gus has joined #openstack-ansible07:52
*** zhangjn has quit IRC07:54
*** zhangjn has joined #openstack-ansible08:00
*** permalac_ has quit IRC08:00
*** permalac_ has joined #openstack-ansible08:00
*** permalac_ has quit IRC08:01
*** Mudpuppy has joined #openstack-ansible08:02
*** Mudpuppy has quit IRC08:07
*** phiche has quit IRC08:10
*** phiche has joined #openstack-ansible08:10
*** javeriak has quit IRC08:13
*** zhangjn has quit IRC08:18
*** fawadkhaliq has joined #openstack-ansible08:27
*** zhangjn has joined #openstack-ansible08:29
*** finchd has quit IRC08:29
*** fawadkhaliq has quit IRC08:38
*** admin0 has joined #openstack-ansible08:43
*** markvoelker has joined #openstack-ansible08:47
*** kstepniewski has quit IRC08:48
*** markvoelker has quit IRC08:51
*** finchd has joined #openstack-ansible08:58
*** javeriak has joined #openstack-ansible08:59
*** javeriak has quit IRC09:04
*** javeriak has joined #openstack-ansible09:07
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Adding release notes for erlang VM tuning parameters  https://review.openstack.org/28550609:10
*** finchd has quit IRC09:10
*** evrardjp has joined #openstack-ansible09:12
evrardjpgood morning09:12
evrardjpodyssey4me: are you there?09:12
evrardjpabout this: https://review.openstack.org/#/c/280233/09:13
evrardjpI wanted to test the cache_timeout and see if everything works fine or not09:13
odyssey4memorning evrardjp09:13
odyssey4meand morning everyone else!09:13
evrardjpthe behaviour is fine, if I put a really low value it will update the repos09:14
evrardjpbut the issue now is to find the correct setting09:14
*** finchd has joined #openstack-ansible09:14
evrardjpbecause I had issues with some runs running with such a low value of 6009:14
evrardjpwhen running on ovh09:14
evrardjpso my question09:14
odyssey4mewas that because of the OVH mirror changing or something?09:15
evrardjpor outdated09:15
evrardjpthe host thinks he doesn't need to do the apt-get update (because it just started), but he is already outdated09:16
evrardjpso what I thought09:16
evrardjpmaybe having some task at the gate that does a first apt-get update09:16
evrardjpand then use the cache_timeout to a larger value09:16
evrardjpI can fix that easily09:17
evrardjphowever, this task isn't really needed for something else than ovh09:17
evrardjpdo you think I should add this anyway ?09:17
odyssey4mefor gating we already have an apt-get update happening on the host in the bootstrapping phase09:17
odyssey4meah, you mean in this role?09:18
evrardjpyup09:18
*** asettle has joined #openstack-ansible09:19
evrardjpediting this role (in test/ right?)09:19
evrardjpmakeing sure the apt-get update is fine09:19
evrardjpor runs at all times09:19
evrardjpdon't change anything for the rest09:19
evrardjpOR09:19
evrardjphaving a specific task for ovh09:20
evrardjp(I don't like this)09:20
odyssey4meyeah, just add a pre-task into tests/test.yml09:20
evrardjpfine for me09:20
odyssey4menot for OVH specifically - in the role's test playbook we can just do it generally09:20
evrardjpyup, but the issue only triggered on ovh09:20
evrardjpthat's why09:20
odyssey4meit doesn't matter - doing a single apt-get update won't hurt09:21
odyssey4meit is interesting though - if we can find what the problem is then perhaps we can better guard against it09:21
odyssey4meinfra has switched the mirrors used since you added the patch in, so the problem might actually be gone by now09:22
odyssey4menow all of infra uses the same apt mirror - their own09:22
*** permalac has joined #openstack-ansible09:23
*** permalac has quit IRC09:23
*** permalac has joined #openstack-ansible09:23
evrardjpwhat do you mean?09:23
evrardjpeach infra host is using its own apt-mirror?09:23
evrardjpit makes sense but it will show disparities (correct english term?) accross infra's, I guess?09:24
*** shausy has quit IRC09:28
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-lxc_hosts: Only update apt cache if necessary  https://review.openstack.org/28023309:30
*** shausy has joined #openstack-ansible09:30
evrardjplet's see how it works on ovh09:30
evrardjpabout this: https://review.openstack.org/#/c/279730/09:37
evrardjpmy bad, forget it09:38
*** tiagogomes has joined #openstack-ansible09:45
*** woopstar has joined #openstack-ansible09:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Remove container_cidr check from cidr_networks  https://review.openstack.org/27751109:50
woopstarI've just launched a setup for the openstack-ansible and seems to be launched fine. But i was wondering, if you need DHCP on any of the networks created? I'm not able to launch cinder volumes, nor am i able to launch any instance though there is 2 compute nodes available with 128gb mem each, and 100gb disk each09:51
*** sdake has joined #openstack-ansible09:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add a function to check accuracy of user config  https://review.openstack.org/28206709:52
*** admin0 has quit IRC09:57
*** neilus has joined #openstack-ansible09:59
*** admin0 has joined #openstack-ansible10:03
*** neilus1 has joined #openstack-ansible10:05
*** sdake has quit IRC10:06
openstackgerritMatt Thompson proposed openstack/openstack-ansible-pip_install: Test version of pip being installed  https://review.openstack.org/28528410:08
*** neilus has quit IRC10:08
odyssey4mewoopstar openstack itself provides dhcp facilities inside the tenant networks - are you creating tenant networks and building instances inside those?10:18
*** admin0 has quit IRC10:29
*** admin0 has joined #openstack-ansible10:31
woopstarYeah. But i think i found the issue. It seems network related to the neutron agent. Properly the "flat" network. The network description in the install guide is pretty "grey". :(10:41
*** neilus1 has quit IRC10:43
*** sdake has joined #openstack-ansible10:43
admin0hey a;;10:43
admin0all :D10:43
admin0the installer assumes and installs everything on containers(controllers).  In real life,  operators would like to run neturon network nodes on metal with special network cards for checksum offloading, and then run mysql on special machines that have SSDs, big RAM and also on metal. So how to achieve neutron and mysql on metal?10:43
woopstarI don't think you would do that with MySQL10:44
admin0got people who aleady have a mysql dba team and due to some iso/stuff, need mysql to be in those specific hardware :(10:45
andymccryou could do that, its not tested really though, but setting "is_metal: true" in the environment for those services.10:45
woopstarI worked quite alot with Percona on the galera project. And 3 vm with 8 cores and 32 memory it runs perfectly with 3000q/sec10:45
woopstarwhich would be sufficient for Openstack I think10:46
admin0i am not saying there is a limit on how we do stuff now .. i am just saying that there is also a need ( that came up more than once) for clients requiring it done this way10:46
andymccradmin0: as an example we put nova-compute on metal: https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/env.d/nova.yml#L68-L75 and you could adjust the galera.yml file in the same location to install on_metal. (results may vary though because it hasnt been tested as a path, so it would probably have a few bugs that would need fixing)10:47
*** markvoelker has joined #openstack-ansible10:47
*** markvoelker has quit IRC10:52
odyssey4meyeah, but then you also need to set the affinity to 0 on the infra group10:53
odyssey4melemme gist an example up - this gets asked often enough10:53
*** sdake has quit IRC10:53
*** neilus has joined #openstack-ansible11:00
admin0odyssey4me: awesome11:01
odyssey4meadmin0 I think this should work: https://gist.github.com/odyssey4me/3e92f90cf6431432b8cb11:01
odyssey4meandymccr ^ your thoughts?11:02
admin0odyssey4me: so this line on galeray.yml ….     contains: - galera . is what maps to the galeray on openstack_user_config.yml11:03
*** gfa_ is now known as gfa11:03
admin0if i put contains:  - superCOOLssd  , then in user_config, it should also have  the superCOOLssd:     and the servers below that ?11:03
odyssey4meadmin0 I'm not entirely sure whether that's the best group name to use, but I think it should work11:03
odyssey4mewe really need to pick cloudnull's brain to understand how the groups all map together so that we can document it better11:04
admin0odyssey4me: http://pastebin.com/L2MRhUnD  — this is where i am confused when doing this mapping11:06
*** skamithi14 has quit IRC11:06
*** sdake has joined #openstack-ansible11:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Docs: Ensure a horizontal rule prior to the navigation links  https://review.openstack.org/28598111:10
odyssey4meadmin0 why bother trying to change the group name at all?11:10
*** xek has joined #openstack-ansible11:12
*** furlongm has quit IRC11:14
*** sdake has quit IRC11:16
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Fixing keepalived bug when 2+ backup nodes have the same priority  https://review.openstack.org/27973011:18
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Dynamic inventory: correct the inline commentary  https://review.openstack.org/28245211:18
odyssey4memattt if you could review https://review.openstack.org/#/q/status:open+topic:repeatable-build please it'd be great to get those done11:20
openstackgerritMerged openstack/openstack-ansible: Add relnote for openstack_host_systat_ rename  https://review.openstack.org/28523711:22
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Fixing keepalived bug when 2+ backup nodes have the same priority  https://review.openstack.org/27973011:24
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Information about the keepalived bug when multiple backup nodes have the same priority.  https://review.openstack.org/27966411:30
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Information about the keepalived bug when multiple backup nodes have the same priority.  https://review.openstack.org/27966411:30
admin0odyssey4me: that was just to learn how mapping works :D11:31
evrardjpodyssey4me: here are your reno notes: https://review.openstack.org/279730 and https://review.openstack.org/27966411:31
evrardjpplease tell me how to write them, maybe I was wrong about the usage of reno11:31
admin0i have this setup ..   internet => [firewall / pfsense or vyatta ] => openstack(ansible deployed, as usual) ..  now the public IPs only stay on the firewall and do a NAT internally ..  now how to put this? external_lb_vip_address  .. should this be as the external IP ( that is going to be exposed ) or keep it internal ( but API requests might not be true ) ..11:41
odyssey4meadmin0 the external_lb_address will become the public endpoint in the keystone service catalogue - so it can be a DNS name (I think) or the actual public address11:43
admin0odyssey4me: i willt ry wtih the mysql metal and this (dns name ) and see how far i go11:44
andymccrodyssey4me, admin0: i think that looks good although im not sure you can specify a host_group called "galera"? you would need to add a physical skel "galera_hosts" to the galera conf. (delayed response sorry!)11:44
odyssey4meadmin0 in previous deployments I implemented Apache reverse proxies in the DMZ for the API endpoints and did URL rewriting on the way through - but that was a design decision made in that specific case11:44
admin0andymccr:  all I want to know is .. if I have say a group called “my_crappy_hosts” and i can put them under openstack_user_config. , where in the env.d service.yml do I specify those11:44
admin0so where in galera.yml ( which line ) says it needs to go to those11:45
andymccradmin0: thats the physical_skel section, you don't see it in the galera.yml but for other services it will be there. Keystone is probably the best example of this: https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/env.d/keystone.yml11:45
andymccrso identity_hosts: in openstack_user_config.yml will be keystone hosts. keystone only11:46
odyssey4meandymccr lemme revise and try again :)11:46
admin0andymccr: this is why I want to start with c0mpletely_oDD_hosts and _containers, because this example makes me think .. so do I just update the contains: part and replace keystone with new, or also replace belongs_to . and in where .. component, or container or physical11:47
admin0so if there is a new example on how to specify a new group, and how to map services to this new group that would clarify11:47
andymccradmin0: there is an example file: https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/env.d/extra_container.yml.example11:48
odyssey4meandymccr better? https://gist.github.com/odyssey4me/3e92f90cf6431432b8cb11:50
andymccrit might not be that clear, in which case it would probably be useful to doc that a bit better :) so if you have any suggestions would be really appreciated!11:50
andymccrodyssey4me: just add "galera_containers" to the belongs_to: section of galera_container11:50
andymccri kinda think we should have that for each service if im honest, because i may way want to setup a specific service only and not a whole group (this is an example of that)11:51
andymccrand a lot of service you can't do that without editing the env files11:51
*** rgogunskiy has quit IRC11:52
odyssey4meandymccr yeah, I'm kinda thinking that we should have service specific groups, and then these aggregated groups as an optional component11:52
andymccrodyssey4me: yeah i thinkso11:52
andymccrthe optional ones are already there so thats easy11:52
andymccrand we can just add a specific host group per service too11:52
andymccrits just a bit more flexible then11:52
andymccrand wont change how things currently work11:52
odyssey4meandymccr typer typey?11:52
odyssey4meconsistency would be great11:53
andymccrhaha11:53
andymccryes yes11:53
*** javeriak has quit IRC11:53
odyssey4meandymccr better now? https://gist.github.com/odyssey4me/3e92f90cf6431432b8cb11:54
andymccrodyssey4me: that looks like the one11:54
odyssey4meI'm thinking though - if we remove https://gist.github.com/odyssey4me/3e92f90cf6431432b8cb#file-galera-yml-L12-L13 then we wouldn't have to change affinity - but then what else would break?11:54
admin0easier would be:  galera_service    , runs on    galera_servers_group ..    is_metal =true, or false ..   so on galera_servers_group  you just define ips .. if its not metal, inside containers, if metal then directly12:00
admin0this is like multi layer mapping :D12:00
admin0keystone_service  , runs on keystone_servers,      or any X servers ..   and is_metal makes it define if its direct or on containers :D12:01
admin0easier12:01
odyssey4meevrardjp are you still around? if so do you have the keepalived bug URL handy?12:01
admin0odyssey4me: :D http://pastebin.com/wBbJBq1W12:03
*** spotz_zzz is now known as spotz12:03
admin0so component belong to a container group which further belongs to a physical_skeleton group12:05
-openstackstatus- NOTICE: Infra currently has a long backlog. Please be patient and where possible avoid rechecks while it catches up.12:05
admin0  # This is a meta group of a given component type. — /me is lost12:05
admin0:D12:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Information about the keepalived bug when multiple backup nodes have the same priority.  https://review.openstack.org/27966412:06
odyssey4meevrardjp is ^ my edit there ok?12:06
*** rgogunskiy has joined #openstack-ansible12:10
*** rgogunskiy has quit IRC12:10
*** admin0 has quit IRC12:16
*** johnmilton has joined #openstack-ansible12:19
matttodyssey4me: sorry, was hacking on a ceph thing, i'll check those reviews in a moment12:26
*** admin0 has joined #openstack-ansible12:32
tiagogomescan't things like `hostvars[inventory_hostname]['container_networks']['container_address']['address'] is defined` be simplified to `container_networks']['container_address']['address'] is defined`?12:35
tiagogomesSorry: `container_networks['container_address']['address'] is defined`12:35
mattttiagogomes: not if you're referring to a host that isn't itself12:43
tiagogomesBut by writing `hostvars[inventory_hostname]`, aren't you asserting that the host where the variables are get from is itself?12:44
mattttiagogomes: ah, i see what you mean ...12:45
*** shausy has quit IRC12:45
evrardjpodyssey4me: received thanks12:48
*** markvoelker has joined #openstack-ansible12:48
evrardjpok I get the gist12:48
*** Mudpuppy has joined #openstack-ansible12:50
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-lxc_hosts: Only update apt cache if necessary  https://review.openstack.org/28023312:50
*** markvoelker has quit IRC12:53
*** pcaruana has quit IRC12:53
*** Mudpuppy has quit IRC12:55
*** spotz is now known as spotz_zzz13:00
*** Oku_OS has joined #openstack-ansible13:05
*** woodard has joined #openstack-ansible13:06
*** woodard has quit IRC13:06
*** woodard has joined #openstack-ansible13:07
*** pcaruana has joined #openstack-ansible13:08
*** evrardjp has quit IRC13:12
*** nwonknu has quit IRC13:13
*** retreved has joined #openstack-ansible13:15
*** evrardjp has joined #openstack-ansible13:16
*** nwonknu has joined #openstack-ansible13:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_server: Use slurp to collect the nova ssh keys  https://review.openstack.org/28604213:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_server: Use slurp to collect the repo_server ssh keys  https://review.openstack.org/28604213:30
*** mgariepy_ is now known as mgariepy13:31
*** mgariepy has quit IRC13:31
*** mgariepy has joined #openstack-ansible13:31
odyssey4memattt ^ that should fix the issue where the repo_server fails to pick up the host key properly13:31
*** rgogunskiy has joined #openstack-ansible13:33
*** keedya has joined #openstack-ansible13:35
*** richoid has quit IRC13:43
*** richoid has joined #openstack-ansible13:43
*** fawadkhaliq has joined #openstack-ansible13:43
*** markvoelker has joined #openstack-ansible13:47
*** rromans_afk is now known as rromans13:56
*** admin0 has quit IRC14:01
*** cemmason has joined #openstack-ansible14:08
*** admin0 has joined #openstack-ansible14:08
mhaydenhappy monday, folks14:11
andymccranybody have any ideas how we could make this more aware of changes?: https://github.com/openstack/openstack-ansible-lxc_container_create/blob/master/tasks/container_create.yml#L101-L11214:14
andymccrat the moment its just a flat command so it says its "changed" on every run - so we can't do a notify on it.14:14
andymccrbut for the case of "static_routes" we would want to restart the container so that the static_routes are in place.14:15
andymccra notify would just restart the container on every run though :(14:15
*** rgogunskiy has quit IRC14:18
*** gfa is now known as gfa_14:19
*** cemmason has quit IRC14:19
*** metral is now known as metral_zzz14:20
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Fixing keepalived bug when 2+ backup nodes have the same priority  https://review.openstack.org/27973014:21
mhaydenwas there an email summary sent out from the OSA midcycle? i was trying to figure out if i missed it14:25
*** woopstar has quit IRC14:26
*** KLevenstein has joined #openstack-ansible14:26
*** rromans has quit IRC14:28
*** rromans has joined #openstack-ansible14:28
evrardjpgood monday morning mhayden14:29
mhaydenhowdy evrardjp14:29
mhaydenoh thanks, Apsu -- your sarcasm got Edgar all worried -> https://review.openstack.org/#/c/278128/19 :P14:29
evrardjpandymccr: maybe adapthing the lxc_container module by adding a template feature? The module may become bloated of features, but that could maybe help you...14:30
evrardjpYou should ask cloudnull ;)14:30
evrardjpmhayden: I'm still laughing of the Evan's comment ;)14:31
*** sdake has joined #openstack-ansible14:35
*** rgogunskiy has joined #openstack-ansible14:35
openstackgerritAndy McCrae proposed openstack/openstack-ansible-lxc_container_create: Restart containers on network configuration change  https://review.openstack.org/28607814:37
*** pcaruana has quit IRC14:38
mhaydenevrardjp: yeah, Apsu will owe me lunch if i'm forced to add another patchset :|14:38
evrardjp:D is 20 your limit?14:40
*** sigmavirus24_awa is now known as sigmavirus2414:42
*** ametts has joined #openstack-ansible14:42
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Adding release notes for erlang VM tuning parameters  https://review.openstack.org/28550614:51
*** pcaruana has joined #openstack-ansible14:52
*** ShannonM has joined #openstack-ansible14:54
bgmccollumandymccr quick (dirty) fix would be to MD5 the file before and after the change and return accordingly if it changed. lineinfile might be an option too...14:55
andymccrbgmccollum: already done that ;)14:55
andymccrhttps://review.openstack.org/#/c/286078/14:56
andymccrfeel free to review :D14:56
bgmccollumlooking :)14:56
*** sdake has quit IRC14:58
bgmccollumandymccr how does notify behave with delegate to? do the ifup / ifdown need to be in the command?14:59
andymccrbgmccollum: unfortunately notify won't work because the "container_command" is a flat "command" so it has no concept of whether it has changed or not15:00
andymccrnotify would end up just performing the task every single run.15:00
bgmccollumoh, you have would to also have a notify task for each interface too probably...15:00
bgmccollumhrm...ok15:00
andymccrso the options are: change the module itself to allow that to work, or do what i did there (i think)15:00
andymccrcant think of another option unfortunately15:00
bgmccollumit looks good, just wanted to exhaust all other options15:01
andymccragree15:01
andymccrif there is a better way im all for it :)15:01
odyssey4meandymccr that's bloody horrible... but I can't think of a better way15:01
bgmccollumi think you can use the "changed when"15:01
odyssey4meexcept to optimise it a little - see my review15:01
bgmccollumto control when a command should trigger a change15:01
andymccrodyssey4me: you cant do that :(15:02
andymccrbecause the md5sum command fails if the file doesnt exist15:02
andymccrwhere as cat | md5sum won't fail15:02
andymccrit'll return the value for a failed cat as the md5sum which will still be viewed as a change (restarting the network as intended)15:02
odyssey4meyeah, I suppose you could stat the file contents - then compare the before and after15:02
bgmccollumandymccr maybe this? -- http://docs.ansible.com/ansible/playbooks_error_handling.html#overriding-the-changed-result15:03
andymccrbgmccollum: yeah you could, but the main problem is that its a "container_command" inside of the lxc_container task, so it becomes a bit complicated15:03
bgmccollumhmm...15:03
*** jthorne has joined #openstack-ansible15:03
bgmccollumheaded to the office...15:03
*** rgogunskiy has quit IRC15:05
*** Mudpuppy has joined #openstack-ansible15:15
Apsumhayden: haha. +115:16
*** permalac has quit IRC15:19
*** permalac has joined #openstack-ansible15:19
*** permalac has quit IRC15:19
*** permalac has joined #openstack-ansible15:20
*** izaakk has joined #openstack-ansible15:21
*** phalmos has joined #openstack-ansible15:24
*** rohanp has joined #openstack-ansible15:25
rohanpHi, i have a query concerning the neutron packages installation in neutron venv? Is it necessary to install any specific neutron packages to be installed on neutron venv?15:25
rohanpI was referring to some parts like this:15:25
rohanphttps://github.com/plumgrid/plumgrid-ansible/blob/master/plumgrid_playbooks/post_neutron_plumgrid.yml#L1815:25
rohanpand this15:26
rohanphttps://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/tasks/plumgrid_config.yml#L3515:26
*** admin0 has quit IRC15:26
rohanpalso the other question i had is what is the significance of making use of inventory hostname like as follows:15:27
rohanphttps://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/tasks/plumgrid_config.yml#L5115:27
lbragstadcloudnull o/ did something change with os_keystone in the last couple days? This change seems to have been reverted (https://github.com/os-cloud/openstack-ansible-os_keystone/pull/1)15:28
*** spotz_zzz is now known as spotz15:28
odyssey4merohanp all the openstack bits are installed into venvs by default, so if the neutron agent/server needs access to the library then the library should be installed into the venv as we restrict the services from the host system libraries to prevent conflicts between the venv and the host15:30
*** mgoddard__ has joined #openstack-ansible15:30
odyssey4merohanp and reference in https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/tasks/plumgrid_config.yml#L51 is to make sure that the package installed only installs on the appropriate group of servers15:31
lbragstadcloudnull yep - I think it was overridden https://github.com/os-cloud/openstack-ansible-os_keystone/commit/7d4cc4a21711328f2b7cb2e104495e5c54ae3aac#diff-29983f0df280e72c9ae0fb45414af972R2615:31
odyssey4mein this particular case, that will only be installed on the neutron-server group, not the neutron-agent group15:31
rohanp<odyssey4me> makes sense15:31
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add notes on running the upgrade script  https://review.openstack.org/28541915:32
rohanpi am in the process of providing a custom neutron plugin like plumgrid have15:32
rohanpso my question was more on lines of whether i should be specifically installing my neutron packages on neutron venv15:32
rohanpor just intsalling them as is shud be good?15:32
odyssey4merohanp if the neutron service needs access to the package, then it needs to be in the neutron venv15:33
*** mgoddard_ has quit IRC15:33
*** woopstar has joined #openstack-ansible15:34
odyssey4memhayden no, you didn't miss a summary email because I haven't written one :p15:34
mhaydenodyssey4me: ah, okay15:35
*** git-harry has left #openstack-ansible15:35
*** raddaoui has joined #openstack-ansible15:35
*** woopstar has quit IRC15:35
*** git-harry has joined #openstack-ansible15:36
rohanp<odyssey4me>: i am confused with the following approach:15:36
rohanphttps://github.com/plumgrid/plumgrid-ansible/blob/master/plumgrid_playbooks/roles/plumgrid_neutron/tasks/main.yml#L5315:36
rohanpsince neutron lxc containers exist only after OSA scripts are run15:36
rohanpcan we install neutron packages before that? i assume no; i think it qwould be possible to have neutron packages installed only after the neutron lxc onctainers are in place15:37
rohanpafter OSA scripts get run15:37
rohanpbut in the above link; those playbooks are run before OSA runs15:37
cloudnulllbragstad: yes I merged the history back into the repo. seems I missed something.15:39
odyssey4merohanp it would seem that plumgrid is install both on the host and in the venv: https://github.com/plumgrid/plumgrid-ansible/blob/master/plumgrid_playbooks/roles/plumgrid_neutron/tasks/main.yml#L6015:40
cloudnulllbragstad: you should be good now.15:41
lbragstadcloudnull awesome - I'll re-deploy and test it out15:42
*** woopstar has joined #openstack-ansible15:43
*** admin0 has joined #openstack-ansible15:43
*** woopstar has quit IRC15:44
lbragstadcloudnull fixed - our integration tests passed :)15:48
*** woopstar has joined #openstack-ansible15:52
*** woopstar has quit IRC15:53
*** javeriak has joined #openstack-ansible15:55
*** jeh has joined #openstack-ansible16:03
*** phiche has quit IRC16:03
*** pabelanger has joined #openstack-ansible16:05
pabelangerohai16:05
odyssey4mepabelanger o/16:06
pabelangergot stopped by family on way for coffee :)16:06
pabelangerokay, so IIRC you are looking to add depends-on for your ansible roles16:06
cloudnulllbragstad: sweet!16:06
pabelangerwhich is something I also want to do16:06
odyssey4mealright, pabelanger based on http://docs.openstack.org/infra/zuul/cloner.html#clone-map and https://github.com/openstack/windmill/blob/master/tools/install_roles.sh#L21-L25 can I confirm that you're pulling the roles specified in https://github.com/openstack/windmill/blob/master/tools/install_roles.sh#L30-L38 into the parent directory of the windwill role?16:07
cloudnullodyssey4me:  idk if you'd seen this https://github.com/os-cloud?utf8=%E2%9C%93&query=os_ however I've been able to save all of the history for the OS_* roles as they've been broken out. jmccrory gave me a suggestion last week and it seemed to work well enough.16:07
odyssey4mehte mapping seems to say that any repo cloned by the name 'openstack/ansible-role-(.*)' must be placed in 'playbooks/roles/windmill.\1' which equates to 'playbooks/roles/' I think?16:08
pabelangerodyssey4me: almost, they are actually getting cloned into playbooks/roles folder inside of windmill16:08
pabelangerodyssey4me: right16:08
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add upgrade config change tools  https://review.openstack.org/28556416:08
pabelangerso, in the case of a role dependency, we can't do that16:08
admin0time for me to go home, turn ON my test cluster and try the odyssey4me  solution :D for mysql on metal16:09
odyssey4mecloudnull friggin awesome! :) maybe you can redo https://github.com/odyssey4me/openstack-ansible-openstack_openrc as you missed that one ?16:09
pabelangersince we expect the current `pwd` from jenkins to be the actual role we are using16:09
pabelangerso, if we are to use clonemap, we should set the dest to ..16:09
odyssey4mecloudnull then https://review.openstack.org/284512 needs an update for your location16:09
pabelangersince we want the directory above a role16:09
lbragstadcloudnull working on tying together a gate for all this stuff :)16:09
odyssey4mepabelanger well, as long as the role is in the expected roles location, then it's all good16:10
*** admin0 has left #openstack-ansible16:10
pabelangerodyssey4me: which 2 roles are you setting up a dependency on?16:10
pabelangerodyssey4me: right, as long as ansible.cfg can find them, we are fine16:10
*** admin0 has joined #openstack-ansible16:10
odyssey4mepabelanger well, I want this facility on them all - for the main repo we use ansible.cfg, but in the independent roles we use the env var16:11
odyssey4meso let's start witht he main repo16:11
odyssey4meI need to figure out how to read https://github.com/openstack/openstack-ansible/blob/master/ansible-role-requirements.yml and use it for zuul cloner - that'll be the first challenge, but I think I can manage that16:11
pabelangeranother option, is to setup the ansible JJB to read requirements.yml as a builder, then deal with zuul-cloning the roles.  I am not a fan of this approach, as I would rather have tox do all the work16:11
*** woopstar has joined #openstack-ansible16:12
cloudnullodyssey4me:  updated https://review.openstack.org/#/c/284512/16:12
pabelangerodyssey4me: okay, that will be the easier to start with.  I've already started work on a requirements.yml parser to zuul-cloner. I should have time to day to finish it16:12
pabelangerand push it up16:12
odyssey4mepabelanger oh? that sounds interesting16:13
odyssey4mecloudnull thanks!16:13
odyssey4mepabelanger I was thinking of implementing an alternative method for pulling down roles into our ansible bootstrap process (ie give the option of using z-c along with ansible-galaxy)16:14
pabelangerodyssey4me: thats the end goal for me, so we don't maintain 2 cloning sources.  However, if you want to setup what I did for tools/install_roles.sh to start, that will be the fastest way to use depends-on16:14
pabelangerya, that works too16:14
odyssey4mepabelanger ok, so if z-c can read the role requirements file - how ill it work then?16:14
odyssey4medo we simply point it at the file and it does the thing?16:14
odyssey4meso basically I don't have to define the map, or the list of repositories - I simply just need to make z-c do the clone instead of ansible-galaxy ?16:15
pabelangerodyssey4me: not directly, I'd update tools/install_roles.sh to read requirements.yml, and convert contents to clonemap.  We do that for puppet modules also16:15
odyssey4meoh I see - you're not modifying z-c, you're simply creating an interim converter?16:16
pabelangerright16:16
pabelangerhowever16:16
pabelangerwith zuulv3 and ansible dependency, we could talk to jeblair about adding some sort of mapping into zuul16:16
pabelangerthere might be a use case for it for more projects16:16
palendaepabelanger: fwiw, that'd be awesome for https://review.openstack.org/#/c/273771/16:17
*** fawadkhaliq has quit IRC16:17
odyssey4mepabelanger yeah, that'd be nice16:17
*** pcaruana has quit IRC16:17
*** admin0 has quit IRC16:17
pabelangerodyssey4me: Ya, I think we could bring that up in the future. But to get your team rolling asap, using the install_roles.sh concept I do for windmill is likely the place to start16:18
pabelangerpalendae: Ya, I've been meaning to loop into that and try it out16:18
*** stevelle_ is now known as stevelle16:18
odyssey4mepabelanger how does z-c magically know about the dependent patches?16:18
*** rromans has quit IRC16:19
pabelangerodyssey4me: so, there are ZUUL_ environment vars that are expected to be setup.  Which zuul does via jenkins16:19
pabelangerhttps://jenkins04.openstack.org/job/gate-nova-python34/5084/parameters/ for an example16:19
odyssey4mepabelanger so in my testing I have exported all the env vars set and don't see them16:20
odyssey4meI suspect that I may be missing some sort of job setting to pass the vars through to the env?16:20
pabelangerright, if you want to test it locally, then you need to export ZUUL_REF=refs/zuul/master/Zbf503151cebc448da10b600ee946d7f5 for example16:20
pabelangerthen zuul-cloner know which project changes to depend on16:20
*** rromans has joined #openstack-ansible16:21
odyssey4mepabelanger alright, let me try and work something up - then I'll ping you for a review if that's ok?16:21
pabelangerodyssey4me: WFM16:22
woopstarAre there any dashboard/gui thingys for the Telemetry service, like CloudWatch on AWS?16:22
pabelangerodyssey4me: should be a matter of search / replace of the script I use.  Then telling tox to use it.  No other changes needed in the gate16:23
woopstarI was looking a bit on Riemann.io - dunno if there is any better alternatives or something native?16:23
*** ametts has quit IRC16:24
odyssey4mepabelanger our integration gate and role gating work a little differently, but I'll adapt them appropriately - the trick is going to be to interpret the role requirements file... but perhaps I'll base it on a static list to start with16:24
*** sigmavirus24 is now known as sigmavirus24_awa16:25
pabelangerright, static easiest to start with. once you see how it all works, you'll be ready for dynamic16:25
odyssey4mepabelanger one thing I'm thinking through - does the clone map allow a repo to be cloned into a folder with a different name?16:25
*** sigmavirus24_awa is now known as sigmavirus2416:25
pabelangerodyssey4me: yes.  that is what I am doing.16:25
pabelangerodyssey4me: you'll have to read up on the docs to see how regex works16:26
odyssey4meis that what https://github.com/openstack/windmill/blob/master/tools/install_roles.sh#L23 does?16:26
pabelangerodyssey4me: yes, so I take ansible-role-zuul and zuul-clone it into playbooks/roles/windmill.zuul16:26
openstackgerritNate Potter proposed openstack/openstack-ansible: Check for AODH host before adding alarm_connection  https://review.openstack.org/28439216:27
odyssey4mepabelanger ah, I see how it maps now - the docs didn't quite get me there (I can be a bit dumb) :p16:27
*** abitha has joined #openstack-ansible16:27
odyssey4meok cool, got it16:27
pabelangerodyssey4me: I'd suggest looking in openstack/project-config too. There are some other projects doing the same16:28
*** mgoddard__ has quit IRC16:29
*** mgoddard has joined #openstack-ansible16:29
*** neilus1 has joined #openstack-ansible16:29
*** gfa_ is now known as gfa16:33
*** neilus has quit IRC16:33
*** electrofelix has joined #openstack-ansible16:36
*** keedya has quit IRC16:39
*** keedya has joined #openstack-ansible16:39
*** weezS has joined #openstack-ansible16:47
*** raddaoui has quit IRC16:52
openstackgerritMatt Thompson proposed openstack/openstack-ansible-pip_install: Test version of pip being installed  https://review.openstack.org/28528416:53
*** raddaoui has joined #openstack-ansible16:53
*** sdake has joined #openstack-ansible17:06
*** alextricity25_ is now known as alextricity2517:16
*** openstackgerrit has quit IRC17:18
*** cemmason has joined #openstack-ansible17:18
*** openstackgerrit has joined #openstack-ansible17:18
*** evrardjp has quit IRC17:19
*** sdake has quit IRC17:22
*** sdake has joined #openstack-ansible17:23
*** asettle has quit IRC17:23
*** sigmavirus24 is now known as sigmavirus24_awa17:26
*** gayathri has joined #openstack-ansible17:27
*** admin0 has joined #openstack-ansible17:30
*** woopstar has quit IRC17:32
*** electrofelix has quit IRC17:32
*** electrofelix has joined #openstack-ansible17:35
*** woopstar has joined #openstack-ansible17:35
*** abitha has quit IRC17:35
*** fawadkhaliq has joined #openstack-ansible17:36
*** woopstar has quit IRC17:37
gayathriHi17:41
gayathriI am facing an issue while installing swift service using openstack ansible17:41
gayathriplaybook ran without throwing any errors17:41
gayathriwhen i see in dashboard..its throwing error like "unable to retrieve the containers"17:42
gayathrithere was no logs also17:42
gayathriAny help is much appreciated17:43
*** weezS has quit IRC17:43
*** woopstar has joined #openstack-ansible17:45
*** admin0 has quit IRC17:46
*** admin0 has joined #openstack-ansible17:46
*** woopstar has quit IRC17:46
cloudnullgayathri: does the swift commands work ?17:46
cloudnullIE can you do a: swift list ?17:46
gayathrino..when i give that command..it shows no service17:47
cloudnulland/or create a container / add an object into the container?17:47
cloudnulllike youre getting a 503 ?17:48
gayathriyeah17:50
*** woopstar has joined #openstack-ansible17:52
*** woopstar has quit IRC17:53
*** sdake has quit IRC17:54
gayathriwhat could be the issue?17:55
*** kencjohnston has joined #openstack-ansible17:56
*** sdake has joined #openstack-ansible17:57
cloudnullthat would seem like an issue with the lb17:59
cloudnullare the rest of the services running normally.17:59
cloudnull's/./?/17:59
cloudnulldid you have an existing deployment and then add swift ?18:00
admin0time to do the mapping as odyssey4me suggested . and if does not work, disect cloudnull and get that knowledge out :D18:00
cloudnullare you running haproxy?18:00
cloudnullif so, have you rerun the haproxy play?18:00
cloudnulladmin0: whats that  ?18:01
cloudnullmapping ?18:01
*** woopstar has joined #openstack-ansible18:01
*** agireud has quit IRC18:01
admin0many people have tried to explain to me how mappings work .. like I want to run neutron servers in a new group of servers called my_awesome_network_servers and     mysql and rabbitmq in another group of servers called my_ssd_db_servers  ..18:02
admin0on metal18:02
admin0so how to map those :D18:02
cloudnullah.18:02
admin0at the end, ( after banging the heads on the wall ) everyone said .. wait for cloudnull :D18:02
admin0you are the guy :D18:02
odyssey4mecloudnull fyi between andymccr and I we came up with https://gist.github.com/odyssey4me/3e92f90cf6431432b8cb18:03
*** agireud has joined #openstack-ansible18:03
*** woopstar has quit IRC18:03
*** kencjohnston has quit IRC18:04
admin0basically the neutron nodes have special cards that do checksum offloading, so the need, and the db is because the organization has dba team and to cerify/be in complainance, they need to have the DB in specified servers18:04
cloudnulladmin0: adding is_metal: true to https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/env.d/galera.yml in the properties section should be all thats needed18:04
admin0cloudnull: i want to run mysql on only mysql servers ( no other infra servers there )18:04
cloudnullkk.18:04
admin0which is why the need to come up with a new set of hosts18:05
cloudnullhttps://gist.github.com/odyssey4me/3e92f90cf6431432b8cb#file-galera-yml that should do it.18:05
* cloudnull goes to try18:05
gayathriya rest of my services running successfuly..18:05
* admin0 prepares pizza and beer for cloudnull 18:05
* cloudnull will work for beer / pizza18:06
* admin0 won’t forget odyssey4me and andymccr as well :D 18:06
gayathriI had added swift in the existing deployment18:06
gayathrii run haproxy..y do i need to rerun haproxy again18:06
admin0cloudnull: if possible, create 2 set of servers .. new_dba_servers and new_network_servers, and then show a way for example on the new_dba_servers , run mysql on metal and rabbitmq on containers, and on neutron, run the neutron agents on metal18:08
admin0i think that would be great start and people will finally understand how this whole mapping works18:08
odyssey4meadmin0 the trouble is that you'd be adding yet another group for no reason18:09
admin0ok .. skip the neutron part :)18:10
admin0new_dba_servers where galera runs on metal, and rabbitmq runs on containers18:10
admin0??18:10
odyssey4meyou already have the db on metal18:10
odyssey4medo you want rabbitmq on the same host as the db, but with rabbitmq in a container?18:10
admin0yes18:11
odyssey4mewhat's the point - why not just have them both in containers?18:11
admin0there is nothing wrong with containers, but if client says it needs to be in metal, i can argue .. but he wins .. and I want to learn now how its done18:12
odyssey4mebut having the db on metal and rabbit on the same host in a container is rather silly IMO18:12
odyssey4meyou gain nothing and, in fact, you're losing flexibility18:12
odyssey4mewith both in containers you can replace either at any time - with one on the host and one in a container if you need to re-setup your DB server you risk affecting rabbit18:13
odyssey4mefair enough to do as a learning process - but it is a very, very silly thing to do in production18:14
admin0i have one case where someone asked that they have a dba team and their mysql needs to be in specific machines on metal .18:14
admin0and another case is where neutron needs to run on specific hardware with special network cards for checksum offloading18:14
cloudnulladmin0: so this is what i did to totally isolate the galera hosts.18:14
cloudnullhttp://cdn.pasteraw.com/7imvcoqzuz1ty6z2ybfd9g1azxcm9ff18:14
odyssey4meadmin0 sure, but then have your rabbitmq on another host18:14
cloudnullin the openstack_user_config file i added18:14
cloudnullhttp://cdn.pasteraw.com/67ohkezuoijpzp4uc6kmzlxb5mc2ins18:14
cloudnullwhich generated http://cdn.pasteraw.com/6u1uftc3n9hwziqz424rtizbg2dr3xb18:14
admin0odyssey4me: that is correct .. i asked here just for exampel to undersand how to learn18:15
admin0i am not going to have rabbit and galera in the same system18:15
*** raddaoui has quit IRC18:15
odyssey4meah ok18:15
odyssey4meadmin0 also, fyi, those db servers are going to be bored ;)18:15
admin0:)18:16
*** woopstar has joined #openstack-ansible18:16
cloudnullin that example, i change the name to db_ however galera_ would work too18:17
cloudnulli only did that because it was easy to find the inventory changes18:17
*** woopstar has quit IRC18:18
admin0cloudnull: so   under the container_skel,  put    arbitary name like belongs_to:  new_host_group_containers ..  in physical skel also put  new_host_group_containers to define it ..    and then in user_config, put hosts as  new_host_group_hosts: ??18:18
cloudnulland ansible picked up the changes as i'd expect18:18
cloudnullhttp://cdn.pasteraw.com/p0zof7s840yv91bp05vz7zj96j9jma18:18
cloudnullyes.18:19
cloudnullin the physical skel a container group must have a corresponding host group18:20
admin0got it18:20
*** woopstar has joined #openstack-ansible18:20
cloudnullso <NAME>_containers must also have <NAME>_hosts18:20
cloudnullthe seperator is _18:20
admin0and for any other containers to run here, just do belongs_to:  new_container_group   .. but not set is_metal: true18:20
admin0so if is_metal: true = on metal, else containers18:20
cloudnullyup18:20
* admin0 gives pizza and beer to cloudnull odyssey4me andymccr 18:21
admin0\o/18:21
*** neilus1 has quit IRC18:21
admin0now i get this :D18:21
cloudnullwhile the "containers" name is intended for lxc containers if is_metal=true the container becomes the physical host.18:21
*** woopstar has quit IRC18:21
* admin0 goes on to create 1000s of cool host_group_names 18:21
*** electrofelix has quit IRC18:22
cloudnullw/ the bits in env.d you can create your own archetecture it super flexable, albeit confusing18:23
admin0odyssey4me: i will try with this, and using url in the hostname instead of ip .. though I am not sure how haproxy is going to bind it18:23
*** Guest63721 is now known as mfisch18:24
logan-admin0: i use hostnames for internal/external vip18:24
logan-it works ok18:24
*** rohanp has quit IRC18:25
*** mfisch is now known as Guest200418:25
admin0ok18:25
logan-external worked pretty much out of the box. internal had a minor hangup or two but I can't remember what they were18:25
admin0my setup is internet => firewall/lb/nat => openstack .. so even the public is private and natted from the lb ..18:25
admin0but will use the hostnames and give it a try18:26
admin0haproxy is on metal, so if i use hostnames, how do I define the shared ip (for keepalive ) ?18:26
logan-you have to override the keepalive cidr, haproxy_keepalived_external_vip_cidr and haproxy_keepalived_internal_vip_cidr need to get set to actual ip/cidr18:28
*** gayathri has quit IRC18:28
*** Guest2004 is now known as mfisch18:28
*** mfisch has quit IRC18:28
*** mfisch has joined #openstack-ansible18:28
admin0i will try now :D18:30
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [WIP] Gate: Enable 'Depends-On' cross-repo dependent patching for roles  https://review.openstack.org/28619518:31
logan-if you use internal hostnames make sure all your hosts can resolve them... haproxy etc won't even start unless they can resolve whatever you set the internal/external vip names to18:31
*** abitha has joined #openstack-ansible18:31
cloudnulladmin0: word of warning, as you go to redefine your architecture make sure you keep the following groups which are referenced in the plays and roles http://cdn.pasteraw.com/nekofed86qdftw2lr56ish8fnrz54ae18:32
admin0i will just add 2 new set of physical_hosts .. won’t rename anything else18:32
cloudnullthat should be just fine. i didnt want to you run into other issues by breaking those bits so i figured i'd mention it.18:33
admin0thanks ..18:34
odyssey4mepabelanger if you can peek at https://review.openstack.org/286195 I'd appreciate it... it's very much WIP but some feedback would be good18:34
odyssey4meafk while I relocate18:34
*** cloudtrainme has joined #openstack-ansible18:37
*** woopstar has joined #openstack-ansible18:39
*** woopstar has quit IRC18:41
*** sdake has quit IRC18:43
*** jcrubio has joined #openstack-ansible18:49
*** kencjohnston has joined #openstack-ansible18:49
*** rparulek has joined #openstack-ansible18:50
rparulekHi, using OSA is there a way we can use "apt" packages install to install packages in say neutron venv rather than using pip install? is there any sample snippet that does this?18:51
rparulekthe goal here is to be able to install packages using apt utility within a venv of openstack service say neutron18:52
*** sigmavirus24_awa is now known as sigmavirus2418:53
cloudnullrparulek: everything is installed, as it pertains to openstack, via pip.18:53
cloudnullis there a specific package you need/want?18:54
cloudnullessentially there's no way to force apt to install python bits into a venv.18:54
*** ametts has joined #openstack-ansible18:54
rparulek <cloudnull>: my goal is to be able to install some custom neutron packages in form of debians on controller targets within a venv18:55
cloudnullyou could use https://github.com/blueboxgroup/giftwrap to build apt packages that deploy a venv but thats not really what youre asking for it would seem.18:55
rparuleksince neutron-server will need access to these pcakges..i will need to install these on neutron venv right?18:56
cloudnullyes.18:56
cloudnullif you add your custom packages via git sources here https://github.com/openstack/openstack-ansible/blob/master/playbooks/defaults/repo_packages/openstack_services.yml18:56
*** jthorne_ has joined #openstack-ansible18:57
cloudnullthen add the egg name to https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/defaults/main.yml#L34318:57
*** jthorne has quit IRC18:57
cloudnullthat'll build you custom packages and install them in the neutron venv18:57
*** izaakk has quit IRC18:57
cloudnulleggname == basename18:57
cloudnullso neutron_git_repo: https://git.openstack.org/openstack/neutron-custome-package would have an eggname of "neutron_custom_package"18:58
rparulek <cloudnull>: so what you intend to convey is that to install any custom packages within neutron venv we shud use python pip packages and NOT debians in form of .deb?18:58
cloudnullyes18:59
automagicallyrparulek: A venv by nature only deals with pip packages18:59
cloudnullthey have be git sources that are python installable18:59
cloudnull^ that18:59
cloudnulli shouldve said that :)18:59
rparulek <cloudnull>: ok, makes sense19:00
*** arif-ali has quit IRC19:06
rparulek<cloudnull>: how is it occuring in case of PLumgrid for that matter? I donot see them adding any entries to files you pointed to?19:07
rparulekhttps://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/tasks/plumgrid_config.yml#L3519:07
cloudnullrparulek:  that package is defined here https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/defaults/main.yml#L35819:09
cloudnulland available on pypi19:09
cloudnullif the package you want to install is already on pypi all you need to do is add it to the list https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/defaults/main.yml#L34319:10
rparulek<cloudnull>: if i donot have it up there; then steps to follow are 1) add an entry to this file somehwre under neutron here "https://github.com/openstack/openstack-ansible/blob/master/playbooks/defaults/repo_packages/openstack_services.yml#L80" with my neutron packages19:11
rparulek2) add custom package names here https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_neutron/defaults/main.yml#L34319:12
cloudnullyup in 1) 3 lines added something like neutron_custom_thing_git_repo: https://git.openstack.org/openstack/neutron-custom-thing ... https://github.com/openstack/openstack-ansible/blob/master/playbooks/defaults/repo_packages/openstack_services.yml#L81-L8319:13
cloudnullpackage name would then tranlate to "neutron_custom_thing"19:13
alextricity25Hey all. If I set the container, tunnel, and storage cidr to be the same network range, will the dynamic inventory script create IPs that overlap? Or will it put the IPS on that range in the same queue for container, tunnel, and storage IPs?19:15
*** raddaoui has joined #openstack-ansible19:15
alextricity25In other words, is it smart enough to recognize that they are the same CIDR?19:16
cloudnullalextricity25: i've never specifically tried it however i think so19:16
cloudnulli believe each entry is its own queue19:16
cloudnullregardless of the actual cidr value19:16
alextricity25cloudnull: If that's the case, then there is a possibility of opverlapping IPs19:17
cloudnullyes19:17
alextricity25How would I go about running all network traffic over "br-mgmt"19:17
cloudnullso no br-vlan, storage, etc19:18
*** jcrubio has quit IRC19:18
alextricity25cloudnull: Exactly19:18
*** jthorne_ has quit IRC19:19
alextricity25I'm faced with a use case in which I don't have multiple interfaces, nor have the option to configure VLANs on the ToR switches19:19
cloudnullremove the additional network entries that you dont need from the openstack_user_confgi file and add the elimiated network groups to https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.aio#L2519:19
*** jthorne has joined #openstack-ansible19:19
*** neilus has joined #openstack-ansible19:20
alextricity25cloudnull: Ah okay. I see now19:20
alextricity25Thanks cloudnull :)19:20
*** neilus has quit IRC19:20
cloudnullalextricity25:  you'd have something like http://cdn.pasteraw.com/9x42ibwn3gihpjhgza4a4292am62ybc19:20
cloudnullyou may have trouble with l3 networks19:21
cloudnullbut that should work19:21
alextricity25I was thinking about keeping the eth12 inside the neutron agent container19:22
cloudnullyea youll have to play with it to make it fit your situation however it should be totally do able.19:22
alextricity25and just change that bridge to be br-mgmt19:22
*** neilus has joined #openstack-ansible19:23
*** gregfaust has joined #openstack-ansible19:25
*** ametts has quit IRC19:27
*** b3rnard0 is now known as b3rnard0_away19:28
*** javeriak_ has joined #openstack-ansible19:28
*** javeriak_ has quit IRC19:28
*** raddaoui has quit IRC19:30
*** jcrubio has joined #openstack-ansible19:31
*** javeriak has quit IRC19:32
*** gfa is now known as gfa_19:33
*** raddaoui has joined #openstack-ansible19:34
openstackgerritMerged openstack/openstack-ansible-repo_server: Removed pip requirements from the repo-server role  https://review.openstack.org/28489419:34
admin0logan-: for the vip address, adding those in /etc/hosts is enough right ?19:37
logan-should be fine as long as you add it in every host and container19:38
logan-it needs to be everywhere in the environment19:38
logan-openstack_hosts does some hosts file management, i wonder if there is a var to do custom hosts entries there19:38
admin0in hosts i can .. for containers, they get created in runtime by ansible19:39
admin0hmm.. i will setup dns then :)19:39
logan-yeah I ran into that pretty quick... i am building unbound containers which handle this stuff19:40
logan-https://github.com/Logan2211/ansible-unbound19:41
logan-along with https://github.com/Logan2211/ansible-resolvconf19:41
logan-andthen something like.. http://paste.gentoolinux.info/okidotonam.sm http://paste.gentoolinux.info/yahuzajaho.sm http://paste.gentoolinux.info/zubareyiwe.sm19:44
admin0my setup is inside a pfsense with pfsense as the gw/dns resolver .. so just adding the 2 entires are easy19:45
*** weezS has joined #openstack-ansible19:45
logan-ah ok, cool19:45
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible: Remove exception raised for container_cidr  https://review.openstack.org/27751119:48
admin0all setup done .. time to run :D19:56
*** jcrubio has left #openstack-ansible19:57
admin0to test, i have db_hosts, where haproxy and galera are on metal, memcache and rabbitmq on containers,  and then rest all like normal . and vip address as hostnames and dns setup properly with proper interace and address override for keealive19:57
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add upgrade config change tools  https://review.openstack.org/28556419:57
admin0how do i scan a file in linux for \t :D19:58
admin0nvm19:59
admin0found it19:59
bgmccollumjmccrory odyssey4me Are there still issues with the way this is implemented? -- https://review.openstack.org/#/c/279859/20:01
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible: Allow only vxlan networks to be defined.  https://review.openstack.org/27632020:03
*** cemmason1 has joined #openstack-ansible20:03
*** cemmason has quit IRC20:04
*** sdake has joined #openstack-ansible20:04
*** elopez has joined #openstack-ansible20:05
openstackgerritKevin Carter proposed openstack/openstack-ansible-plugins: Created deprecation filter  https://review.openstack.org/28625020:06
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add missing runtime information to upgrade script  https://review.openstack.org/28625120:06
admin0why does the installer downloads the same rpc-repo on different hosts ? can’t it download to the deploy server and copy locally ?20:09
admin020 hosts = 20 parallel downloads20:09
admin0suddenly this silence :D .. i asked something wrong ?20:11
cloudnulladmin0: sorry been in a different zone. what download are you seeing ?20:11
cloudnullthe container image?20:12
admin0yeah20:12
jmccrorybgmccollum thanks for clearing things up there20:12
cloudnullthat could be changed however its not something we've done yet.20:12
cloudnullthere is some work to change the lxc create command to use the download template which will do most of this for us.20:12
cloudnullbut i've seen nothing come of that just yet.20:13
admin0i will soon start to contribute .. understanding this is the first process :)20:13
*** b3rnard0_away is now known as b3rnard020:14
cloudnulladmin0:  you can change the download path.20:14
cloudnullto something you already have to make things faster20:14
cloudnullthats defined here https://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/defaults/main.yml#L100-L10520:15
*** htruta has joined #openstack-ansible20:15
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Security: Check for grub.cfg first  https://review.openstack.org/28548320:15
admin0:)20:16
htrutahi guys. Is there any known ansible issue related to keystone v3 compatibility?20:16
automagically@admin0 - https://review.openstack.org/#/c/274456/20:17
bgmccollumhtruta are you referring to some of the OpenStack modules available in Ansible?20:18
automagicallyhtruta: I’ve come across this: https://review.openstack.org/#/c/274686/20:18
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add upgrade config change tools  https://review.openstack.org/28556420:18
*** phiche has joined #openstack-ansible20:19
admin0automagically:  nice . .. hopeing someone with +1 +2 it soon :D20:20
admin0but that still is when fails to download20:20
admin0still will be 20-40 parallel concurrent downloads20:20
admin0based on number of hosts deployed20:20
htrutabgmccollum: if you found some, I'm totally interested. but the focus was more ansible related, like some restriction it has come across on setting credentials and stuff like that20:20
htrutaautomagically: nice!20:21
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add missing runtime information to upgrade script  https://review.openstack.org/28625120:22
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Upgrades: Cleanup RabbitMQ / vhost  https://review.openstack.org/27265220:22
*** sdake has quit IRC20:22
htrutaour effort in keystone team is towards using v3 and keystoneauth where possible20:22
admin0where do i define the haproxy_keepalived_authentication_password ?20:22
*** fawadkhaliq has quit IRC20:22
*** neilus has quit IRC20:24
admin0never mind .. somehow its there, but not seeing it20:24
admin0where to override the dns entries received by the containers ? is it the https://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/defaults/main.yml ?20:27
logan-lxc_cache_resolvers20:28
cloudnulladmin0:  https://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/defaults/main.yml#L89-L9120:28
*** jeh has quit IRC20:31
*** raddaoui has quit IRC20:34
*** cemmason1 has quit IRC20:35
*** cemmason has joined #openstack-ansible20:35
admin0changed dns in that file, ran setup-hosts again .. i see no changed in the resolv.conf setting20:35
*** keedya has quit IRC20:35
admin0still see 10.0.3.1 and 8.8.8.8 and 8.8.4.420:35
logan-i think it will only change on new containers20:35
*** keedya has joined #openstack-ansible20:35
admin0oh20:36
*** yarkot_ has joined #openstack-ansible20:36
admin0i will delete 1 and test20:36
openstackgerritKevin Carter proposed openstack/openstack-ansible-plugins: Created deprecation filter  https://review.openstack.org/28625020:38
*** keedya has quit IRC20:38
*** yarkot_ has quit IRC20:38
*** keedya has joined #openstack-ansible20:39
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Replacing LBaaSv1 with v2 configuration  https://review.openstack.org/27544020:39
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add Ansible bootstrapping to Liberty upgrade  https://review.openstack.org/28626920:39
cloudnullodyssey4me:  http://cdn.pasteraw.com/e8ykztoax8b932uudrdl3277c2lxhup <- deprecation warning filter like we talked about at the midcycle. https://review.openstack.org/28625020:40
*** cemmason has quit IRC20:40
*** cemmason has joined #openstack-ansible20:40
admin0yep .. delted and recreated and it worked20:42
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Replacing LBaaSv1 with v2 configuration  https://review.openstack.org/27544020:42
admin0hmm.. still the first line there is 10.0.3.120:43
admin0it and 2nd is my custom dns20:43
admin0the 2nd is the one which has the dns for my vip20:43
logan-you probably dont have lxcbr0 (eth0 in the containers) disabled20:43
admin0nope .. should it be ?20:43
logan-so the container host dnsmasq is sending resolver thru that20:43
logan-10.0.3.1 will send requests up to the physical host20:44
admin0ok20:45
admin0i will fix the public mapping and dns first i guess :D20:45
admin0namecheap, 2fa, for dns ..was being lazy20:46
*** cemmason has quit IRC20:47
*** cemmason has joined #openstack-ansible20:47
openstackgerritKevin Carter proposed openstack/openstack-ansible-plugins: Created deprecation filter  https://review.openstack.org/28625021:01
cloudnullodyssey4me:  http://cdn.pasteraw.com/7hk2kcuy661c54w4mdaj1df4czl3r1f <- that should do it in a very ansible centric way.21:03
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: [WIP] Multi-distro support for rabbitmq-server role  https://review.openstack.org/28628221:07
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Replacing LBaaSv1 with v2 configuration  https://review.openstack.org/27544021:13
*** cloudtrainme has quit IRC21:19
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Replacing LBaaSv1 with v2 configuration  https://review.openstack.org/27544021:19
openstackgerritKevin Carter proposed openstack/openstack-ansible-plugins: Created deprecation filter  https://review.openstack.org/28625021:20
*** cloudtrainme has joined #openstack-ansible21:21
*** ametts has joined #openstack-ansible21:22
openstackgerritMarcos Simental proposed openstack/openstack-ansible-plugins: define login_project_name key on keystone library.  https://review.openstack.org/28628721:24
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Replacing LBaaSv1 with v2 configuration  https://review.openstack.org/27544021:25
*** johnmilton has quit IRC21:39
admin0cloudnull: it works :D21:49
*** fawadkhaliq has joined #openstack-ansible21:50
*** retreved has quit IRC21:53
*** ametts has quit IRC21:56
*** kencjohnston has quit IRC22:03
*** sdake has joined #openstack-ansible22:05
*** woodard has quit IRC22:12
*** phschwartz_ is now known as phschwartz22:14
*** sdake has quit IRC22:14
*** rohanp has joined #openstack-ansible22:18
*** sdake has joined #openstack-ansible22:18
rohanpHi, i had a question regarding using local pypi mirror for installing custom made neutron packages; how do we point OSA to use a local pypi mirror hosting custom packages to install neutron packages in neutron venv22:19
*** cloudtrainme has quit IRC22:20
*** ametts has joined #openstack-ansible22:21
automagicallyrohanp: I believe you would set repo_build_pip_extra_index22:22
*** cemmason has quit IRC22:23
*** cemmason1 has joined #openstack-ansible22:23
rohanp<automagically>: by setting this; OSA will pull packages from this link after it failed to find it using "repo_build_pip_default_index:" right?22:24
automagicallySo it appears22:24
rohanpso what i need to do is set the extra_index to my local pypi mirror22:24
rohanpmakes sense22:24
automagicallyrohanp: Hope that works out for you22:25
rohanpis this the only place where we can set this? or is there any other option available too that could be used?22:25
*** cemmason has joined #openstack-ansible22:27
*** ametts has quit IRC22:27
*** cemmason1 has quit IRC22:27
openstackgerritMerged openstack/openstack-ansible-lxc_hosts: Only update apt cache if necessary  https://review.openstack.org/28023322:31
automagicallyrohanp: I believe your other option would be to forego the OSA repo altogether, and specify your own repository using openstack_repo_url as indicated here: https://github.com/openstack/openstack-ansible/blob/master/doc/source/install-guide/configure-hostlist.rst22:31
rohanp<automagically>: Thanks for your help and pointers!22:38
automagicallyno problem, hope it helps22:38
pabelangerodyssey4me: sorry, was busy fighting the spam on wiki.o.o today. Will look later this evening22:45
*** sdake has quit IRC22:46
*** phiche has quit IRC22:58
*** KLevenstein has quit IRC22:59
*** sdake has joined #openstack-ansible23:03
*** cloudtrainme has joined #openstack-ansible23:05
*** weezS has quit IRC23:09
*** phalmos has quit IRC23:10
*** admin0 has quit IRC23:10
*** cemmason has quit IRC23:14
*** gregfaust has quit IRC23:16
*** spotz is now known as spotz_zzz23:24
openstackgerritMerged openstack/openstack-ansible: Resolve packaging problems in virtualenv(s)  https://review.openstack.org/28424723:32
*** Mudpuppy has quit IRC23:36
*** ShannonM has quit IRC23:39
*** weezS has joined #openstack-ansible23:43
*** rohanp has quit IRC23:44
*** jthorne has quit IRC23:48
*** jmckind has joined #openstack-ansible23:52

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!