Wednesday, 2016-04-13

*** johnmilton has joined #openstack-ansible00:01
*** busterswt has quit IRC00:02
*** busterswt has joined #openstack-ansible00:05
*** sdake has joined #openstack-ansible00:06
*** ChrisBenson has quit IRC00:09
*** busterswt has quit IRC00:09
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: WIP Initial convergence testing  https://review.openstack.org/30488700:11
*** thorst_ has joined #openstack-ansible00:14
*** asettle has joined #openstack-ansible00:18
*** fawadkhaliq has quit IRC00:21
*** fawadkhaliq has joined #openstack-ansible00:21
*** sdake_ has joined #openstack-ansible00:22
*** sdake has quit IRC00:23
*** asettle has quit IRC00:24
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: WIP Initial convergence testing  https://review.openstack.org/30488700:25
*** nhadzter has quit IRC00:29
*** arif-ali has quit IRC00:43
*** arif-ali has joined #openstack-ansible00:50
*** fishcried has joined #openstack-ansible00:53
*** sdake_ has quit IRC00:58
*** darrenc is now known as darrenc_afk01:00
*** johnmilton has quit IRC01:01
*** fishcried has quit IRC01:02
*** fishcried has joined #openstack-ansible01:02
*** johnmilton has joined #openstack-ansible01:08
*** thorst_ has quit IRC01:09
*** eric_lopez has joined #openstack-ansible01:09
*** elo has joined #openstack-ansible01:09
*** eric_lopez has left #openstack-ansible01:10
*** elo has quit IRC01:11
*** elo has joined #openstack-ansible01:14
*** fishcried has quit IRC01:20
*** lihg has quit IRC01:26
*** darrenc_afk is now known as darrenc01:34
*** jthorne_ has joined #openstack-ansible01:40
*** jthorne has quit IRC01:40
*** ChrisBenson has joined #openstack-ansible01:40
*** busterswt has joined #openstack-ansible01:40
*** fawadkhaliq has quit IRC01:43
*** fawadkhaliq has joined #openstack-ansible01:44
*** thorst_ has joined #openstack-ansible01:53
*** busterswt has quit IRC01:54
*** busterswt has joined #openstack-ansible01:57
*** thorst_ has quit IRC01:57
*** busterswt has quit IRC02:08
*** busterswt has joined #openstack-ansible02:12
*** busterswt has quit IRC02:29
*** sdake has joined #openstack-ansible02:32
*** sdake has quit IRC02:32
*** sdake has joined #openstack-ansible02:32
*** nhadzter has joined #openstack-ansible02:34
*** thorst_ has joined #openstack-ansible02:34
*** busterswt has joined #openstack-ansible02:36
*** asettle has joined #openstack-ansible02:37
*** thorst_ has quit IRC02:40
*** sdake_ has joined #openstack-ansible02:42
*** busterswt has quit IRC02:43
*** sdake has quit IRC02:45
*** tomoe_ has joined #openstack-ansible02:53
*** busterswt has joined #openstack-ansible02:54
*** asettle has quit IRC02:57
*** asettle has joined #openstack-ansible02:58
*** b3rnard0_away is now known as b3rnard002:58
*** sdake_ is now known as sdkae03:05
*** shausy has joined #openstack-ansible03:12
*** shausy has quit IRC03:21
*** fawadkhaliq has quit IRC03:22
*** fawadkhaliq has joined #openstack-ansible03:23
*** fishcried has joined #openstack-ansible03:39
*** ChrisBenson has quit IRC03:39
*** ChrisBenson has joined #openstack-ansible03:39
*** severion has quit IRC03:40
*** v1k0d3n has joined #openstack-ansible03:40
*** tomoe_ has quit IRC03:44
*** b3rnard0 is now known as b3rnard0_away03:49
*** elgertam has quit IRC03:52
*** alex______ has joined #openstack-ansible03:56
alex______has anyone seen this before on latest liberty branch? repo_build is failing with greenlet dependency problem as greenlet wheel for some reason is built as:03:56
alex______lrwxrwxrwx 1 nginx www-data 77 Apr 13 04:37 greenlet-0.4.9-cp27-cp27mu-manylinux1_x86_64.whl -> /var/www/repo/pools/greenlet/greenlet-0.4.9-cp27-cp27mu-manylinux1_x86_64.whl03:57
alex______i.e. weird arch03:57
alex______this is normal x64 ubuntu 14.04 latest03:57
*** jamielennox is now known as jamielennox|away03:58
*** ChrisBenson1 has joined #openstack-ansible04:00
*** ChrisBenson has quit IRC04:00
*** jamielennox|away is now known as jamielennox04:06
*** jayc has joined #openstack-ansible04:09
*** yarkot_ has joined #openstack-ansible04:10
*** weezS has joined #openstack-ansible04:16
*** busterswt has quit IRC04:24
*** yatin has joined #openstack-ansible04:33
*** asettle has quit IRC04:37
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ironic: Update ironic.conf for swift and keystone compat  https://review.openstack.org/30171204:38
*** shausy has joined #openstack-ansible04:58
*** czunker has joined #openstack-ansible05:00
*** fawadkhaliq has quit IRC05:11
*** fawadkhaliq has joined #openstack-ansible05:11
*** javeriak has joined #openstack-ansible05:18
*** fawadkhaliq has quit IRC05:20
*** fawadkhaliq has joined #openstack-ansible05:20
*** fishcried has quit IRC05:21
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484005:32
*** chhavi has joined #openstack-ansible05:32
*** asettle has joined #openstack-ansible05:35
*** javeriak has quit IRC05:37
*** weezS has quit IRC05:46
*** javeriak has joined #openstack-ansible05:52
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484005:54
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484006:00
*** jayc has quit IRC06:08
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-galera_server: Add executable bit to run_tests.sh  https://review.openstack.org/30100706:11
*** sdkae is now known as sdake06:12
*** fishcried has joined #openstack-ansible06:12
*** sanjay__u has joined #openstack-ansible06:14
*** v1k0d3n has quit IRC06:25
*** v1k0d3n has joined #openstack-ansible06:32
*** chhavi has quit IRC06:41
*** sanjay__u has quit IRC06:48
*** mikelk has joined #openstack-ansible06:49
*** sanjay__u has joined #openstack-ansible06:49
*** chhavi has joined #openstack-ansible06:53
*** sanjayu___ has joined #openstack-ansible06:58
*** sanjay__u has quit IRC07:01
*** fawadkhaliq has quit IRC07:10
*** admin0 has joined #openstack-ansible07:11
*** asettle has quit IRC07:12
*** yatin has quit IRC07:20
*** asettle has joined #openstack-ansible07:24
*** gparaskevas has joined #openstack-ansible07:25
*** asettle has quit IRC07:32
*** neilus has joined #openstack-ansible07:34
*** sanjayu___ has quit IRC07:37
*** sanjay__u has joined #openstack-ansible07:37
*** sanjayu___ has joined #openstack-ansible07:41
*** yarkot_ has quit IRC07:42
*** sanjay__u has quit IRC07:44
*** sdake_ has joined #openstack-ansible07:46
*** Oku_OS-away is now known as Oku_OS07:46
*** sdake has quit IRC07:49
*** sdake_ is now known as sdake07:50
evrardjpgood morning everyone08:08
*** ChrisBenson1 has quit IRC08:10
*** evrardjp has quit IRC08:11
*** fishcried has quit IRC08:11
*** evrardjp has joined #openstack-ansible08:11
*** yatin has joined #openstack-ansible08:16
*** chhavi has quit IRC08:18
*** yatin has quit IRC08:20
openstackgerritMatt Thompson proposed openstack/openstack-ansible-security: Add ability to enable unattended upgrades  https://review.openstack.org/30409608:21
*** sanjayu___ has quit IRC08:21
*** yatin has joined #openstack-ansible08:22
*** keedya has quit IRC08:28
*** subscope has joined #openstack-ansible08:34
*** asettle has joined #openstack-ansible08:37
*** chhavi has joined #openstack-ansible08:40
*** javeriak has quit IRC08:41
*** asettle has quit IRC08:41
*** javeriak has joined #openstack-ansible08:46
*** javeriak has quit IRC08:53
*** RTSL has joined #openstack-ansible09:01
admin0morning all09:02
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: updated ironic playbook inclusion for tftp network  https://review.openstack.org/30365909:03
evrardjpmorning admin009:04
*** persia has quit IRC09:04
*** persia has joined #openstack-ansible09:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: updated ironic playbook inclusion for tftp network  https://review.openstack.org/30365909:08
*** nhadzter has quit IRC09:09
odyssey4memrda cloudnull andymccr o/09:10
odyssey4melol09:10
odyssey4mewhoops09:10
odyssey4megood morning all09:10
* odyssey4me goes to get coffee09:10
odyssey4mealex______ no, we haven't seen that - is that the head of the branch or a tag?09:11
odyssey4meadmin0 are you still trying to figure out how to SSL?09:11
admin0yes sir :)09:11
admin0odyssey4me:  this is the last attempt log: https://gist.github.com/a1git/cb178caea150e49e7e31ba848cd7f39e09:11
admin0on what cloudnull suggested09:11
admin0which still fails09:12
odyssey4meadmin0 are you building this fresh, or applying it as a patch to an existing environment?09:14
alex______odyssey4me it's head of liberty branch09:14
odyssey4mealex______ hmm, we last merged a patch into the liberty branch on Apr 809:15
alex______i could use system pip to install greenlet-0.4.9-cp27-cp27mu-manylinux1_x86_64.whl, but pip 7.1 complained.. didn't like package type.. i did this hack:09:16
alex______diff --git a/playbooks/roles/repo_build/tasks/repo_post_build.yml b/playbooks/roles/repo_build/tasks/repo_post_build.yml index 7dc2cce..c1d4888 100644 --- a/playbooks/roles/repo_build/tasks/repo_post_build.yml +++ b/playbooks/roles/repo_build/tasks/repo_post_build.yml @@ -63,6 +63,15 @@    tags:      - repo-create-release-links  +- name: Hack to fix up greenlet +  file: +    dest: "{{ repo_build_release_path }}/{{ repo09:16
alex______oops09:16
odyssey4mealex______ but we ran some patch tests yesterday - for example https://review.openstack.org/304456 - and it tested just fine09:16
alex______basically changed the symlink and it worked fine.09:16
odyssey4mealex______ ah, how is it that you ended up with an old version of pip?09:16
odyssey4methe new version should be forcing that to be upgraded09:16
admin0odyssey4me: its a new environment09:17
odyssey4mewas this built previously and you've updated to a newer tag?09:17
admin0completely new setup09:17
alex______odyssey4me: /tmp/openstack-venv-builder/venvs/nova/bin/pip was 7.1.. are you saying should have been 8?09:18
odyssey4mealex______ yes, most definitely09:18
odyssey4mealex______ see https://github.com/openstack/openstack-ansible/blob/master/requirements.txt#L11-L1309:18
odyssey4meor rather, for liberty, https://github.com/openstack/openstack-ansible/blob/liberty/requirements.txt#L11-L1309:19
odyssey4meif you've just updated from a previous tag, then did you go through all the steps here after you checked out the new tag? http://docs.openstack.org/developer/openstack-ansible/install-guide/app-minorupgrade.html09:19
odyssey4meif it's a fresh environment then I'd love to know how you ended up with the wrong version of pip09:20
admin0odyssey4me: that was for me or alex with a long tail :D09:20
alex______odyssey4me: hmm.. let me see if i can reproduce.. now i'm very confused. =)09:20
odyssey4meadmin0 are you aware that https://gist.github.com/a1git/cb178caea150e49e7e31ba848cd7f39e#file-gistfile1-txt-L24 sets up LBaaSv1, from which there is no migration of load balancers possible to LBaaSv2 ?09:21
admin0i will remove that line now09:21
admin0all i want is to do a fresh start with SSLs :D09:21
odyssey4meI think we did a pretty decent job of noting that in http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-network-services.html#load-balancing-service-optional09:21
odyssey4meok, admin0 at no time are you actually informing the services that they should have SSL endpoints09:22
odyssey4meyou're informing the LB that it needs to be setup for SSL, but that's it09:22
alex______does anyone know of a way to recover an orphaned cinder volume on nfs (i.e. the volume file exists on an nfs mount, but no meta data or anything on it in the db).09:22
admin0so how do I do that ?09:22
odyssey4meadmin0 do you only want the public endpoint to be SSL?09:23
admin0if applicable, all .. else only public is good enough09:23
admin0its a wildcard cert and everything if ssl will alsow rok09:23
admin0odyssey4me: the most desirable condition is to have all endpoints in SSL09:28
odyssey4meok, gimme a moment to just verify what's changed in that patch09:31
*** javeriak has joined #openstack-ansible09:32
*** yatin has quit IRC09:33
openstackgerritMerged openstack/openstack-ansible-os_barbican: Enable functional convergence testing  https://review.openstack.org/30142209:34
odyssey4meadmin0 the protocols to be used for the endpoints are all keyed from these vars: https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/hosts.yml#L97-L10009:34
odyssey4meit looks like it needs a little work to ensure that *all* endpoints actually use those vars, but many of them do09:34
admin0so for each service, i need to do this step09:34
odyssey4meadmin0 no, just add those vars to your user_variables and make the value https09:38
admin0aha09:39
admin0got it09:39
admin0:D09:39
admin0will try again09:39
admin0so this treats horizon differntly09:39
*** subscope has quit IRC09:39
*** andymccr_ has joined #openstack-ansible09:40
odyssey4meyes, all SSL termination is set to be at the load balancer09:40
odyssey4methe patch isn't complete, so some of the endpoints won't be correctly set - if you can pastebin the endpoint list once the build is complete then that'd be helpful09:40
*** fishcried has joined #openstack-ansible09:41
*** fishcried has quit IRC09:42
*** yatin has joined #openstack-ansible09:42
*** javeriak_ has joined #openstack-ansible09:45
*** dweaver` has joined #openstack-ansible09:45
*** pjm6 has joined #openstack-ansible09:47
*** jmccrory_ has joined #openstack-ansible09:47
*** javeriak has quit IRC09:47
*** RTSL has quit IRC09:47
*** jthorne_ has quit IRC09:47
*** jmccrory has quit IRC09:47
*** dalees has quit IRC09:47
*** andymccr has quit IRC09:47
*** mancdaz has quit IRC09:47
*** dweaver has quit IRC09:47
*** h1nch has quit IRC09:47
*** jthorne has joined #openstack-ansible09:48
*** jmccrory_ is now known as jmccrory09:48
*** h1nch has joined #openstack-ansible09:53
*** fishcried has joined #openstack-ansible10:00
admin0odyssey4me: for now i started with just  openstack-ansible haproxy-install.yml  — to see if haproxy listens to it properly10:01
admin0even with those settings, i see ssl only on keystone and horizon10:01
admin0and on nothing else10:01
admin0let me gist the latest config, run and what i see10:02
admin0odyssey4me: https://gist.github.com/a1git/b463c1f1ae20bc039eb31bff6c1e1a1910:03
*** fishcried has quit IRC10:04
*** pjm6 has quit IRC10:15
*** pjm6 has joined #openstack-ansible10:16
*** mancdaz has joined #openstack-ansible10:16
*** asettle has joined #openstack-ansible10:18
*** javeriak_ has quit IRC10:19
*** sdake_ has joined #openstack-ansible10:20
*** sdake has quit IRC10:22
*** asettle has quit IRC10:23
*** deadnull has joined #openstack-ansible10:25
*** sanjay__u has joined #openstack-ansible10:26
admin0odyssey4me: this openstack_service_internaluri_proto: https — those are handled by the setup openstack/keystone thing i think ..  .. but if haproxy is not even setup @ start listing to https, then endpoints will be there, but non-functional10:27
*** chhavi has quit IRC10:27
admin0and that patch was about using haproxy wtih ssl for everything10:27
*** pjm6 has quit IRC10:31
*** sanjay__u has quit IRC10:31
*** openstackstatus has quit IRC10:32
*** openstack has joined #openstack-ansible11:33
*** pjm6_ has joined #openstack-ansible11:33
*** jwitk0 has joined #openstack-ansible11:34
*** openstackgerrit has quit IRC11:35
*** pjm6 has quit IRC11:36
*** bapalm has quit IRC11:36
*** tiagogomes has quit IRC11:36
*** tiagogomes has joined #openstack-ansible11:36
*** jwitko has quit IRC11:37
yatinchhavi: i guess...it takes care of db and rabbitmq11:37
*** johnmilton has joined #openstack-ansible11:37
yatinchhavi: look at os_keystone role11:37
*** clickboom has joined #openstack-ansible11:38
hughsaundersevrardjp: reviewed11:38
javeriakhey odyssey4me; so our setup went back to the sluggish state the next morning; after working fine for a few hours; nothing was done on it meanwhile but seems like some kind of buildup happened meanwhile :(11:39
*** bapalm has joined #openstack-ansible11:41
odyssey4mechhavi yes, the implementation of the db and rabbitmq details is done as they are required for keystone to work11:42
odyssey4mechhavi also, other dependencies (such as pip, mariadb client, etc) are also installed because they're required11:42
odyssey4mejaveriak hmm, that's weird - perhaps there's some sort of memory allocation limit that's been reached?11:43
chhaviok, then i need to check if i am missing something11:43
javeriakyes that seems likely11:43
odyssey4mejaveriak I've engaged with the Performance Team and agreed that we'll setup a test plan to try to find some sensible defaults and isolate performance limits, etc - but that will only happen next cycle so it doesn't really help right now11:43
*** Oku_OS is now known as Oku_OS-away11:44
javeriakodyssey4me or some kind os queue's got filled up11:44
odyssey4mejaveriak do you perhaps have some sort of monitoring in place (or could you put something in place) to monitor memory usage, cpu usage, mariadb performance metrics and rabbitmq performance metrics?11:44
javeriakodyssey4me no i didnt setup something yet, but you're right, let me do that now11:45
javeriakive been trying to cleanup for more than a day now, and even just deleting all the stuff in openstack is taking ages11:45
odyssey4memancdaz is this failure happening in the initial build of mariadb/galera with v5.5 (not 10)?11:46
mancdazodyssey4me the non-upgrade part of the test is done with 10, and that's what I'm running11:46
mancdazso I've just commented out the upgrade play, essentially, to test this problem11:47
odyssey4meok, so this is a 10 only issue then - I thought that perhaps the issue may be related to us using the same tasks/templates for both versions and that there may be an issue with doing that11:48
odyssey4mejaveriak yeah, if we can have those monitored and see trends then that would really help to isolate the issues11:48
javeriakodyssey4me im afraid we only have two more days with it :(; not much time to look into this further11:49
*** nhadzter has quit IRC11:49
*** retreved has joined #openstack-ansible11:49
odyssey4memancdaz would this perhaps relate to the version of percona-xtrabackup we're using? isn't that what handles the sst?11:49
odyssey4methe mariadb version will be the latest, and may have an issue using that old version11:50
mancdazodyssey4me I'm currnetly testing with the latest version of xtrabackup-v2. Not convinced that's the issue but hopefully it will be11:50
*** openstackgerrit has joined #openstack-ansible11:50
odyssey4mejaveriak if you look at the logs when you're processing deletions/creations, are you seeing any disconnects/reconnects or anything else that would indicate that something's having to wait up11:51
odyssey4meit may just be that due to the tests you're running those values need to be a lot higher?11:51
*** sdake is now known as sdake_busy_webin11:51
odyssey4memancdaz ah ok, as I recall there needed to be some config changes to make that work - which is why we ended up pinning it11:52
mancdazodyssey4me do you happen to remember what they were?11:52
odyssey4merealistically I'd like us to move to using MariaDB 10.1 for master as it includes a lot of the extra packages by default... but the current issue needs to be resolved without that as it'll apply to the Liberty & Mitaka branches11:52
odyssey4memancdaz we did the pin because there wasn't time to figure that out :/11:53
mancdazha11:53
*** thorst_ has joined #openstack-ansible11:53
*** gfa is now known as gfa_11:53
*** gfa_ is now known as gfa11:53
odyssey4meI think a new breaking change version was released just before we were scheduled to release liberty, so we pinned.11:53
odyssey4meunfortunately we didn't circle back afterwards to unpin and resolve that11:54
admin0stable/mitaka failing @ TASK: [openstack-ansible-security | V-38496 - Default operating system accounts (other than root) must be locked] ***11:54
admin0-vvvv fails to show that acocun tin question11:55
*** weshay has joined #openstack-ansible11:55
odyssey4meadmin0 you can disable the hardening if you like to move it along, I suspect that issue has been resolved already - I'm working on a tool to help with the SHA bumping of roles today and the bump for the 13.0.1 release will include the fix11:55
*** mouchon has quit IRC11:56
*** neilus1 has joined #openstack-ansible11:56
admin0doing that11:56
*** sanjay__u has quit IRC11:58
*** neilus has quit IRC11:59
*** yatin has quit IRC12:00
pjm6_if I can use openstack-ansible invetory dynamic file generated, its possible to use without openstack-ansible script?12:00
hughsaunderspjm6_: you want to use openstack_inventory.json without the OSA dynamic_inventory.py script?12:02
evrardjphughsaunders thanks12:02
pjm6_hughsaunders: I think it is. I'm developing a task in ansible to deploy my custom dashboard to the current horizon_containers12:03
pjm6_but I have to use the inventory.json file12:03
odyssey4mepjm6_ it is possible to use alternative inventories if you want to - ansible expects the inventory in an ini format, or a json format - we use the ini format in the role tests - what're you actually hoping to achieve?12:04
pjm6_odyssey4me: is to use the info of the horizon containers (that are in that file) for uploading my custom dashboard and install the libs in pip12:04
pjm6_in manner fact, I don't wanna to change the inventory12:04
pjm6_only fetch the hosts info (in this case horizons host)12:05
*** pjm6_ is now known as pjm612:05
odyssey4mepjm6 ok, are you trying to copy a set of files over to the horizon hosts? and do these files need to contain some sort of info from the inventory?12:06
pjm6Yes12:07
pjm6well the only info that need is the IP12:07
pjm6for making the SSH connection12:07
odyssey4mepjm6 ok, is your code having to make an ssh connection?12:07
pjm6well i think it needs for installing the PIP requirements12:08
odyssey4methis seems like a pretty bad thing to be doing in website, FYI12:08
pjm6really ?12:08
odyssey4mepjm6 ah, no need to do that - are those requirements in pypi, or in a private repo?12:08
pjm6so what would be the best approach to copy the custom dashboard?12:08
odyssey4meand are they accessible via http/https?12:08
pjm6in a private repo12:08
pjm6Yes12:08
pjm6I put in that way (because I was seeing how you do) and seems more automatic12:09
odyssey4mealright, and is that private repo setup so that you could use pip install against it?12:09
pjm6Yes12:09
*** thorst_ has quit IRC12:09
pjm6basically what I wanna to do is12:09
*** chhavi has quit IRC12:09
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Fixing keepalived bug when 2+ backup nodes have the same priority  https://review.openstack.org/27973012:09
*** Oku_OS-away is now known as Oku_OS12:09
odyssey4mealright, then I expect that you want the pip files installed into the horizon venv12:09
pjm6Sure :)12:09
pjm6Ensure that database is installed with empty data (run only once), install pip files inside horizon venv, copy dashboard and enabled file to the horizon hosts, and then restart apache212:10
odyssey4meare the customisations for horizon built in the manner that custom modules are done? https://github.com/openstack/openstack-ansible-os_horizon/blob/master/tasks/horizon_post_install.yml#L96-L11712:10
pjm6but do you think this is a bad approach?12:10
pjm6well I read that but i'm not sure if is the same thing12:11
pjm6a module is different from a dashboard?12:11
pjm6https://github.com/openstack/horizon/tree/master/openstack_dashboard/dashboards => i created an extra folder here12:12
odyssey4meok, putting the files into a horizon venv is easy enough - put this list var into your user_variables.yml file, and add the other packages to it, then you need to give the repo server access to your private repo, let me find the correct var to set - gimme a minute12:12
odyssey4mepjm6 which release/tag/branch are you installing?12:12
*** clickboom has quit IRC12:12
pjm6thanks odyssey4me.12:13
pjm6I'm using stable/liberty12:13
odyssey4mepjm, hmm - this will be harder with liberty than it is with mitaka12:15
pjm6odyssey4me: but its hard to use another playbook (or task) in ansible12:16
odyssey4mein mitaka we allow the repo build process to make use of a list of extra indexes to find packages: https://github.com/openstack/openstack-ansible-repo_build/blob/stable/mitaka/defaults/main.yml#L55-L5712:16
pjm6that use the12:16
*** automagically has joined #openstack-ansible12:16
pjm6  hosts: horizon_all  from that file12:16
odyssey4mewe don't have that in liberty12:16
pjm6hmm nice :) i'm seeing, that is more extensible12:16
odyssey4meso yeah - as way you can do it is just to create a playbook that does whatever you need to do, then ensure that you have an ansible.cfg in the same folder as the playbook which tells ansible to make use of the dynamic inventory12:17
odyssey4meso, for instance, you can have your playbooks in /opt/my_custom_stuff/12:17
pjm6ahh now I see what i need that file :D12:17
pjm6but that would be a bad practice/choice, right?12:18
odyssey4methen you copy https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/ansible.cfg over to that folder, change the paths to be explicit, for example lookup_plugins should have the value /opt/openstack-ansible/playbooks/plugins/lookups12:18
odyssey4methe inventory should point to /opt/openstack-ansible/playbooks/inventory12:19
odyssey4methat way you can have any playbooks doing whatever you want, and they can still use the whole inventory12:19
pjm6Thanks odyssey4me :D I will try that12:19
pjm6but why that will be a bad thing? will exists another alternative?12:20
odyssey4meit's not bad practise at all - in fact this is far easier to do that trying to fork the repo to add your own things12:20
mhaydenbuenos dias12:20
pjm6I was thinking in using ansible because doing it manually accross all would be "massive"12:20
pjm6yeah odyssey4me, with this i'm trying not to break the openstack-ansible scripts12:21
pjm6and be able to add my costumizations :)12:21
pjm6hi mhayden12:21
*** automagically has quit IRC12:21
odyssey4mepjm6 great - ideally to simplify doing this in the future you can consider how the existing playbooks/roles could reduce your need for custom playbooks, then you can submit a patch to the horizon role which would work for you and others who want to do similar things12:23
odyssey4megenerally if you have to do your own things, then idea is to try and work with the community to find a solution in a future version so that once it's released you can reduce the amount of custom stuff you have to carry alone and we can all improve things together as a community12:23
pjm6yes odyssey4me :) i was thinking in that12:24
pjm6but because my ansible acknowledgement is not too much12:25
pjm6i didn't see that, but as far as I learn more and more, I would like to do that yes .D12:25
joker_I got ERROR: Inventory script https://gist.github.com/celikmustafa89/c708065bc566714336c8f60fb43e936f12:26
joker_can someone help me? thanks12:26
odyssey4mejoker_ do you perhaps have hosts in openstack_user_config which are named 'infra' or 'haproxy', or the same as any of the group names?12:28
odyssey4meotherwise it'd be best to add your openstack_user_config to the gist so that it can be inspected12:28
*** chhavi has joined #openstack-ansible12:30
*** b3rnard0_away is now known as b3rnard012:37
joker_odyssey4me: https://gist.github.com/celikmustafa89/3f50fea4690938867716a7adaaf0147412:37
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-memcached_server: Improved logging for memcached  https://review.openstack.org/30516112:38
joker_odyssey4me : https://gist.github.com/celikmustafa89/3f50fea4690938867716a7adaaf0147412:39
joker_odyssey4me I think there is no such a conflict12:40
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Improved logging for memcached  https://review.openstack.org/30516512:41
*** thorst_ has joined #openstack-ansible12:42
*** thorst_ has quit IRC12:42
admin0setup-infra failed because it could it restart haproxy .. haproxy already running .. i had to do  apt-get autoremove --purge haproxy  to get it going again ..   i normally run the haproxy playbook first before I run setup-hosts  .. so something changed here as well12:43
admin0it cound not*12:43
odyssey4mejoker_ hmm, ok - that seems to look fine - do you have an inventory json file in /etc/openstack_deploy yet?12:44
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-memcached_server: Improved logging for memcached  https://review.openstack.org/30516112:44
odyssey4mejoker_ also, is this a new environment? or is it an environment which you had setup before and have made inventory changes to?12:44
odyssey4meadmin0 interesting - the haproxy playbook is now included in the setup-infrastructure playbook, so you don't have to run it seperately12:45
odyssey4mebut it is weird that a re-run of the playbook caused a problem12:45
joker_odyssey4me it's new12:45
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Improved logging for memcached  https://review.openstack.org/30516512:45
joker_odyssey4me there is openstack_inventory.json file12:46
odyssey4mejoker_ ok, so I expect that if there is an existing fact cache or inventory then it's expendable? if so, check for the inventory json file and the fact cache and remove them12:46
admin0it was not the case with liberty .. and also,  i had to run it because it failed @ some repo stuff where it was lookign for a local repo endpoint provided by that step .. so i had that habit to run it beforehand12:46
odyssey4meit might be that you had something previously, then an edit changed something and it got muddled12:46
odyssey4meadmin0 yep, although I think we backported that inclusion into liberty recently - can't recall12:47
odyssey4mebut anyway, it's now included - the issue with the repo/packages will need looking into to isolate the issue12:47
admin0as long as it works( either way) i am fine with12:47
odyssey4methe playbook should be possible to run over and over again12:47
*** klamath has joined #openstack-ansible12:49
joker_odyssey4me : should I remove "openstack_inventory.json" ??12:49
*** klamath has quit IRC12:49
*** klamath has joined #openstack-ansible12:49
admin0oops :D12:50
admin0when you re-run the playbooks, then your containers will be re-created with new ips12:50
admin0if you do that12:50
admin0i mean brand new containers  ..12:52
admin0crashing the controllers ( if not enough ram )12:52
odyssey4mejoker_ it may be safer to move it somewhere, but yes12:52
odyssey4meand clear the fact cache too, if there is one12:52
odyssey4mejoker_ I'm assuming that you don't have any containers or anything setup yet12:53
joker_odyssey4me : ı did not run yet12:53
joker_no container nothing12:53
joker_by fact, you mean ansible_facts directory, right?12:53
joker_there is no file in that directory12:53
*** schwicht has joined #openstack-ansible12:54
javeriakodyssey4me re-running the nova plays has fixed it again, i didnt even change any config this time... this is off12:55
javeriakodd*12:55
joker_odyssey4me here is ls output under /etc/openstack_deploy directory          https://gist.github.com/celikmustafa89/9bb2834027b956edd7c5f30cd6509ecc/revisions12:55
odyssey4mejaveriak odd, did any of the services restart in the play execution?12:56
javeriaki think it has a handler to all the nova ones12:56
odyssey4mejaveriak sure, but those shouldn't fire if no configs were changed - unless we happen to have an issue with properly keeping things idempotent, which is possible12:57
odyssey4mejoker_ so clear the contents of the ansible_facts directory12:58
javeriakodyssey4me but why see this is only a large install12:58
odyssey4meand move the inventory json file out somewhere as a backup12:58
odyssey4mejoker_ another thing you can actually do is execute the dynamic inventory directory - it'll spit out a resulting json file to stdout if the config is valid12:58
joker_odyssey4me ok12:59
joker_it worked12:59
joker_thank you12:59
odyssey4meright, so I expect that the old inventory was broken in some way based on config fiddles12:59
odyssey4meyou could compare the new and old one to see where if you're keen to understand, but it seems rather academic at this point :p12:59
joker_I destroyed the old one :D13:00
*** jaypipes has quit IRC13:07
*** sdake has joined #openstack-ansible13:10
*** sdake_busy_webin has quit IRC13:12
*** elgertam has joined #openstack-ansible13:12
joker_odyssey4me because of name conflict. I gave haproxy name as haproxy at the beginning. As you said before it is related with that name conflict. thank you again ...13:12
*** sdake_ has joined #openstack-ansible13:13
odyssey4mejoker_ aha, that makes sense - we have a bug for that, but haven't yet settled on a solution I don't think13:13
*** sdake has quit IRC13:15
joker_odyssey4me : can you share the bug link?13:16
odyssey4mejoker_ sure - https://bugs.launchpad.net/openstack-ansible/+bug/151288313:17
openstackLaunchpad bug 1512883 in openstack-ansible "Host name of haproxy in openstack_user_config.yml causes recursion error" [Medium,In progress] - Assigned to Ala Raddaoui (raddaoui-ala)13:17
*** sdake_ is now known as sdake13:18
*** sdake is now known as sdake_busy13:18
*** busterswt has joined #openstack-ansible13:21
*** Mudpuppy has joined #openstack-ansible13:24
*** Bjoern_ has joined #openstack-ansible13:25
*** Bjoern_ is now known as Bjoern_zZzZzZzZ13:25
*** automagically has joined #openstack-ansible13:28
*** jthorne has quit IRC13:30
*** shausy has quit IRC13:30
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-memcached_server: Improved logging for memcached  https://review.openstack.org/30516113:30
joker_odyssey4me : I am getting this error over and over again. I guess, it upgrades pip to 8.1.1. But in the next steps, installation needs pip 7.2.1 ---- Is that normal? ----https://gist.github.com/celikmustafa89/b461461201a014f6a7fed68127d2eae113:31
*** jthorne has joined #openstack-ansible13:31
odyssey4mejoker_ no, that's not normal - looking13:31
odyssey4mejoker_ this is liberty, right?13:32
joker_yes13:32
odyssey4mecan you include the part of the log where it ends up choosing the older pip version?13:32
*** pjm6_ has joined #openstack-ansible13:34
*** jthorne_ has joined #openstack-ansible13:34
joker_I am not there yet. I ll share it when I come that step. That was the error I got my previous ansible installation which was crushed.13:35
*** kysse_ has joined #openstack-ansible13:36
*** retreved_ has joined #openstack-ansible13:37
evrardjpthanks for the quick review... I didn't expect one so soon ;)13:37
odyssey4mejoker_ that first set should fail and the failures be ignored, it should then fall back to installing in isolated mode and get the right version from pypi13:37
odyssey4mejoker_ FYI we've cleaned that up quite substantially in Mitaka13:38
joker_Ok13:38
evrardjpmy last comment was for automagically13:39
joker_thank you very much13:39
*** keedya has joined #openstack-ansible13:39
joker_odyssey4me : ı want to ask another thing about haproxy. under the global_overrides: heading. I am confusing at internal_lb_vip_addresss and external_lb_vip_address ? what am I have to write there? here is my config file -> https://gist.github.com/celikmustafa89/3f50fea4690938867716a7adaaf0147413:40
odyssey4mejoker_ the internal address should match the haproxy host's address, unless you have more than one in which case you need to make it the keepalived vip address13:41
odyssey4mejoker_ the external address is only used for the service catalog and keystone will show it as the address used for the public endpoints13:41
odyssey4mejoker_ I'm not sure, but I think that the external address can simply be a DNS name if you want13:42
*** xar-- has joined #openstack-ansible13:43
joker_odyssey4me : I got the following error when ı run setup-hosts.yml13:43
joker_fatal: [b3lab_haproxy] => SSH Error: data could not be sent to the remote host. Make sure this host can be reached over ssh13:43
*** jthorne has quit IRC13:43
*** retreved has quit IRC13:43
*** pjm6 has quit IRC13:43
*** dmellado has quit IRC13:43
*** arbrandes1 has quit IRC13:43
*** xar- has quit IRC13:43
*** kysse has quit IRC13:43
*** admiralboom has quit IRC13:43
*** dmellado_ has joined #openstack-ansible13:43
*** mgoddard_ has joined #openstack-ansible13:45
*** clickboom has joined #openstack-ansible13:48
*** mgoddard has quit IRC13:49
*** admiralboom has joined #openstack-ansible13:50
*** arbrandes1 has joined #openstack-ansible13:50
*** sigmavirus24_awa is now known as sigmavirus2413:51
*** KLevenstein has joined #openstack-ansible13:53
admin0i am also hitting the “msg: the python mysqldb module is required”13:53
*** thorst_ has joined #openstack-ansible13:55
odyssey4meadmin0 hmm, that's with mitaka, right?13:56
admin0stable/mitaka :)13:57
odyssey4meadmin0 ah, we fixed that but I haven't updated the SHA's yet - lemme dig up that fix quickly13:57
admin0you can just tell me the tag/branch that works :D13:57
odyssey4meadmin0 https://github.com/openstack/openstack-ansible-repo_build/commit/0ce640328e484fcb442fdae66bb7edee9ce4d23213:57
*** schwicht has quit IRC13:57
odyssey4meadmin0 I'll be submitting a patch shortly which will most likely become 13.0.1 and that will include all the updates we've made since 13.0.0 to fix issues like these13:58
admin0ok13:58
admin0i will wait for that then13:58
javeriakodyssey4me seen this before: Request failed: <urlopen error [Errno -2] Name or service not known for 'Get Modern PIP using fallback URL' ?13:58
admin0play “league of legends” to kill time :D13:58
odyssey4memitaka is still a bit experimental as it's a fresh release, but that's why we've been asking for more testers :)13:58
Mudpuppyleague of ragers :)13:59
odyssey4mejoker_ have you replicated your public ssh key (/root/.ssh/id_rsa.pub) from the deployment host to all the other hosts?13:59
joker_ok14:00
*** mgoddard_ has quit IRC14:00
*** mgoddard has joined #openstack-ansible14:00
*** jayc has joined #openstack-ansible14:00
odyssey4mejoker_ if you don't do that, then the containers don't get the key and everything goes sideways14:00
admin0Mudpuppy: its to experience all human emotions:  rage, helplessness, betrayal, accomplishment, anger  — where else can you get all of that in 30 mins :D14:00
odyssey4meif the containers are already built, you'll have to destroy and rebuild them because the key gets added at build time14:00
joker_ok14:01
joker_I got it14:01
*** czunker has quit IRC14:02
*** persia has quit IRC14:02
*** itsuugo has quit IRC14:02
automagicallyI’ve been doing some testing with Mitaka lately as well FWIW14:03
*** ametts has joined #openstack-ansible14:03
odyssey4meautomagically excellent, good to know14:04
*** gfa has quit IRC14:04
*** gfa has joined #openstack-ansible14:04
odyssey4meadmin0 a way that you can progress is to change all the SHA's set in ansible-role-requirements.yml to be 'stable/mitaka' - that'll include all the most recent fixes14:04
admin0odyssey4me: is there a one-liner command that i can copy/paste :D14:05
admin0and be done with it ?14:05
odyssey4meI'm just trying to figure out how to make python's yaml.dump to output the ansible-role-requirements file in the way that I want it... I'm stuck on trying to get the dicts to be sorted in the output :/14:05
odyssey4meadmin0 gimme a sec to get that for you14:05
*** itsuugo has joined #openstack-ansible14:08
*** clickboom has quit IRC14:09
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Improved logging for memcached  https://review.openstack.org/30516514:09
*** thorst_ has quit IRC14:10
*** clickboom has joined #openstack-ansible14:11
*** gfa is now known as gfa_14:11
odyssey4meadmin0 in /opt/openstack-ansible execute this: sed 's|version: [[:alnum:]].*|version: stable/mitaka|' ansible-role-requirements.yml14:12
odyssey4meautomagically logan- your thoughts on merging https://review.openstack.org/302385 would be appreciated - liberty is stable so we'd like diverse input before simply adding a new 'feature' this late in the game - please vote and add comments in the review14:13
* automagically looking14:13
odyssey4meAnyone else who has a liberty environment running should also please add a vote14:14
odyssey4mepreferably with a comment indicating why you voted what you did14:14
admin0if you have a liberty in production already, would people feel comfortable to run this playbook .. because it locks down stuff … it might break what you have ( at least that is the feeling )14:17
admin0or to be in production, they might have already hardened some parts themselves, which this might break14:17
odyssey4meadmin0 by default it will not change anything because the hardening is disabled by default14:18
odyssey4meso basically the whole role will be skipped, unless someone enables hardening14:18
automagicallyadmin0: I provided commentary on my vote, but effectively operators running Liberty will make two choices, both to upgrade to the latest Liberty tag/release as well as to enable the role explicitly14:19
odyssey4meso a deployer would have to specifically enable this14:19
automagicallyIn both cases, I’d expect operators to use best practices and test these changes in a non-production environment prior to applying in production14:19
odyssey4me++14:19
odyssey4meok, I need some help from anyone who's better at python than I am (which is probably just about everyone) - I've built a CLI tool to do small edits of the ansible-role-requirements file which has a very well known yaml structure14:20
odyssey4meit's a list of dicts14:20
admin0yes but again, your test env will be like 10 nodes and prodiuction like 50+ with 100s of customers or 1000s of vms .. and with security hardening like these ( which appear post  deployments ) its uncomfortable because you cannot test everything that you do in production14:20
odyssey4methe trouble is that whenever I write the changed file out, the dicts are never ordered because python dicts aren't ordered14:20
odyssey4meso the dict structure order changes every time I run the tool14:21
odyssey4meI'd like to have the yaml.dump output the dicts in a sorted order.14:22
*** asettle has joined #openstack-ansible14:22
odyssey4meI'm stuck on figuring out how to do this without doing something stupid and basically writing stuff to the file without using the dumper.14:22
odyssey4meit looks like maybe I can adjust how the dumper handles the output using a constructor? I'm not sure if that makes sense though - I'd like some direction from anyone who can comprehend http://pyyaml.org/wiki/PyYAMLDocumentation#DumpingYAML better than I can14:23
odyssey4mehughsaunders jmccrory automagically ^ perhaps you guys can provide advice?14:23
*** elgertam has quit IRC14:23
odyssey4megit-harry cloudnull ^14:24
odyssey4meadmin0 if that's the case, then don't enable it :p14:24
* mhayden high fives automagically :)14:24
admin0my saying is, set it to false if it was false before, and then give the option to test and set it to true :)14:25
automagicallyadmin0: And that is how it will ship in Liberty if approved for merge14:26
odyssey4meadmin0 that's exactly what the patch does - it only turns it on for the AIO and therefore gating14:26
automagicallyodyssey4me: Taking a look at your YAML dumping problem14:26
admin0ok14:26
*** asettle has quit IRC14:27
automagicallyodyssey4me: Maybe give this a whirl: http://www.grantjenks.com/docs/sortedcontainers/sorteddict.html14:27
automagicallyOr, better yet: https://docs.python.org/2/library/collections.html#collections.OrderedDict14:28
odyssey4meautomagically so the trouble is not sorting the dict - that's easy - the trouble is that I have a yaml object with the data in it, and the dumper doesn't give me control over the output of the structures14:28
automagicallyAh, so dumping a sorted dict results in it “unsorting"14:29
odyssey4meyep14:29
odyssey4mehmm, it seems that this looks like it could do it14:30
odyssey4mehttps://sourceforge.net/p/yaml/mailman/message/23596068/14:30
odyssey4melemme give it a bash14:30
*** pjm6 has joined #openstack-ansible14:31
automagicallyYep, that looks promising14:31
*** spotz_zzz is now known as spotz14:33
*** clickboom has quit IRC14:33
*** pjm6_ has quit IRC14:33
odyssey4mehmm, on quick inspection that appears to have worked :)14:33
* odyssey4me does a happy dance14:34
admin0haha :)  [Set requirement names  >>  Set stripped global requirement names >> Set stripped local requirement names >>Set global normalized requirement names >> Set local normalized requirement names >> Set filtered requirement names ] — as a deployer i am like huh ? why not “fixing names”14:34
*** elo has quit IRC14:34
*** pjm6 has quit IRC14:35
*** elo has joined #openstack-ansible14:35
*** pjm6 has joined #openstack-ansible14:35
cloudnullmorning14:35
admin0morning14:35
cloudnullhows it ?14:36
admin0raining outside, no ssl inside14:36
admin0:D14:36
cloudnullhahaa14:36
cloudnullraining here too14:36
*** thorst_ has joined #openstack-ansible14:37
cloudnullhailing last night14:37
admin0i was enjoing the playbooks .. seeing  [Set requirement names  >>  Set stripped global requirement names >> Set stripped local requirement names >>Set global normalized requirement names >> Set local normalized requirement names >> Set filtered requirement names ]   and thinking .. why not just write “fixing names” and be done with it14:37
odyssey4mecloudnull yeah, took a look through the ssl enablement patch earlier and it still needs much work14:37
cloudnullthey are, in the end, all used for different purposes14:37
odyssey4mecheck the review comments :)14:38
*** thorst_ has quit IRC14:38
cloudnullwill do in a bit...14:38
*** keedya has quit IRC14:38
cloudnullstill consuming coffee14:38
hughsaundersodyssey4me: happy to help with python script, if you have a link to the script and a description of your aim..14:38
*** keedya has joined #openstack-ansible14:39
admin0odyssey4me: grep version /opt/openstack-ansible/ansible-role-requirements.yml  — gives me 29 lines of mitaka  and nothing else ..  .. but when i run the playbooks again and again, still fails at “the python mysqldb module is required”14:39
admin0i will delete all containers and retry14:40
admin0just to see if its something exsisting14:40
*** pjm6 has quit IRC14:41
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: Move inventory environment loading to function  https://review.openstack.org/29074014:42
odyssey4meadmin0 can you provide a verbose log of the playbook execution that results in that error? I'd like to see where it hits the issue14:44
javeriakguys needs some help, a rerun of playbooks is failing of 'Get Modern PIP using fallback URL' ; pip is already there on these nodes so dont knw why it wants to try and reinstall14:44
*** yarkot_ has joined #openstack-ansible14:45
cloudnullif cores have a moment to review https://review.openstack.org/#/c/304385/ -- the ceph ansible people are waiting on that to go in for their upcoming release -- not that it's our top priority but it'd be good to be neighborly if at all possible.14:45
cloudnulljaveriak: is the repo server down or being rebuilt ? if you remove /root/pip/pip.conf and itll install from upstream.14:46
cloudnulladmin0 odyssey4me looking at the ssl bits now.14:47
cloudnullim rekicking my dev lab so will be a min14:47
evrardjpI got a weird issue, I don't know if anybody got that issue already: I do openstack-ansible -e debug=False, and in my rendered template I see False, but when I put debug: False in a file named user_jph.yml with the standard openstack-ansible CLI I see true rendered14:47
automagicallyAh yes, I saw the ceph-ansible Github issue around that. Reviewing now14:47
cloudnullthanks automagically14:48
*** toddnni has quit IRC14:48
javeriakcloudnull repo servers are up, dont know why it wants to install pip everything, let me just remove the conf14:48
evrardjpthe file is well listed when I see the first line of the openstack-ansible line14:48
cloudnullansible -m shell -a 'rm /root/pip/pip.conf' $NAMEOFGROUP14:48
evrardjplike it's overwritten by something14:48
odyssey4meevrardjp user_jph is read before user_variables, so a value in user_variables is likely overriding it14:49
evrardjpI thought nothing should override the user_* variables14:49
evrardjpno way14:49
cloudnullevrardjp:  yes14:49
evrardjp:)14:49
evrardjpI meant no way I did't look at that14:49
odyssey4meevrardjp the user_* files are read in alphanumeric order14:49
cloudnullthe filenames are alpha sorted.14:49
cloudnullha. what odyssey4me said :)14:50
evrardjpdammit14:50
evrardjpthanks guys14:50
evrardjpI remember why I used user_variables_jph in the past now14:50
odyssey4methey're read in alphanumeric order by bash, then ansible merges them over the top of each other in the order it's given the files - so the last key's value wins14:50
evrardjpyeah yeah understood14:51
evrardjpI now have my user wariables14:51
*** clickboom has joined #openstack-ansible14:52
evrardjpand I feel dumb14:52
hughsaundersevrardjp: sounds a little german14:52
*** phalmos has joined #openstack-ansible14:52
odyssey4meevrardjp you're rusty, we'll forgive you14:52
mgariepyautomagically, can yoy +2 this change please :) https://review.openstack.org/#/c/304157/14:55
automagicallymgariepy: I’ll certainly review it14:55
*** toddnni has joined #openstack-ansible14:55
automagicallyor re-review in this case14:55
mgariepyhehe ;) thanks a lot.14:55
odyssey4mehaha14:56
mgariepysince the base changed will it need rebase ? or if it's applying correctly it's ok ?14:56
mgariepyparent*14:56
odyssey4memgariepy no need to rebase - it's done automatically by zuul\14:56
mgariepyok14:56
admin0automagically: on building the wheel, i see lots of lines like Skipping virtualenv, due to already being wheel  .. but we changed versions .. so i think it just does not have it14:57
odyssey4methe only time a rebase is actually required is when there's a merge conflict14:57
odyssey4meadmin0 nope, that's a normal part of the process14:57
odyssey4meif it's already built the wheel before, it doesn't need to build it again14:57
*** mgoddard_ has joined #openstack-ansible14:58
*** mgoddard has quit IRC14:58
openstackgerritMerged openstack/openstack-ansible-plugins: Update the config_template plugin  https://review.openstack.org/30438514:59
odyssey4mecloudnull we should probably backport that ^ at least to mitaka15:00
cloudnullyes15:04
*** mgoddard__ has joined #openstack-ansible15:05
*** javeriak_ has joined #openstack-ansible15:05
cloudnullhttps://review.openstack.org/#/c/305337/15:05
admin0stuck there TASK: [repo_build | Check apt last update file] ****** .not even the full lines of **** like others15:05
*** neilus1 has quit IRC15:06
*** jaypipes has joined #openstack-ansible15:06
admin0while true do ; redo ; done :D15:06
*** javeriak has quit IRC15:07
*** mgoddard_ has quit IRC15:08
*** sdake_busy has quit IRC15:08
*** sanjay__u has joined #openstack-ansible15:11
*** schwicht has joined #openstack-ansible15:13
automagicallyWould appreciate if folks interested in the dynamic inventory work session in Austin, take a look at https://etherpad.openstack.org/p/openstack-ansible-newton-dynamic-inventory and add/edit/comment15:14
*** gfa_ is now known as gfa15:14
automagically^ palendae, cloudnull, odyssey4me15:14
* cloudnull looking15:15
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-memcached_server: Improved logging for memcached  https://review.openstack.org/30516115:15
palendaeautomagically: Ah yeah, was going to do that today15:15
*** clickboom has quit IRC15:16
*** sdake has joined #openstack-ansible15:17
spotzautomagically: That's a good idea putting an etherpad out ahead of time15:18
odyssey4meevrardjp would it be sensible for us to fix the keepalived role to a SHA, and update that SHA for each stable branch tag in OSA, or should we leave it to be a tag?15:21
odyssey4mespotz yes, that would be ideal for all sessions15:21
evrardjpodyssey4me the goal of having a tag is to use ansible-galaxy15:22
spotzodyssey4me Ok I'll try to get something up today15:22
*** clickboom has joined #openstack-ansible15:22
admin0odyssey4me:  i deleted the containers, ran the playbooks again, stuck @ the same: https://gist.github.com/a1git/ed8c6622402dab8cb6042f22c037b75f15:23
evrardjpansible-galaxy website works fine with tags, and used to not work with SHAs15:23
admin0need to run .. brb15:23
*** clickboom has quit IRC15:23
odyssey4meevrardjp yeah, we're switching to using the git method if we use a SHA15:23
odyssey4meso it'll bypass the galaxy API query15:24
evrardjpif we switch everything to git there is no need to use ansible-galaxy cli at all15:24
*** admin0 has quit IRC15:24
evrardjpnor use the format they use15:24
evrardjpthey require*15:24
evrardjpjust don't expect any publicity of the work you've done inside the ansible community, or lobbying to roles you could eventually consume15:25
odyssey4meadmin0 can you provide the complete verbose output of the whole galera_install playbook15:25
cloudnullevrardjp:  i think the roles will be published to galaxy eventually15:25
odyssey4meevrardjp right now none of our roles are published in galaxy, so that's a moot point15:26
cloudnullso we should be able to get the publicity out of having the roles in the broader ansible galaxy community15:26
evrardjpcloudnull I think that's a good idea to bring more ppl contributing to them15:26
evrardjpespecially to easy independant roles15:26
*** clickboom has joined #openstack-ansible15:26
odyssey4meI'm specifically looking at whether it makes sense for us to us ea SHA for the keepalived role, or whether we should use a tag as we do now.15:26
evrardjpodyssey4me you could use keepalived sha if you prefer15:26
cloudnullwe can continue using the role as they are and using the git method however i'd caution us getting away from the galaxy requirements15:27
evrardjpif it makes your life easier15:27
evrardjpI don't personally care15:27
palendaeYeah, we should keep the galaxy requirements15:27
*** galstrom_zzz is now known as galstrom15:27
*** pjm6 has joined #openstack-ansible15:27
palendaeI do think we should talk to the Ansible team to see if we can get fallback/secondary URLs for galaxy requirements15:27
palendaeIn case galaxy breaks again15:27
palendaeOr even if it doesn't15:27
evrardjpI just think that if we move away from ansible-galaxy requiremets, we'll have work to do to come back15:27
palendae^ yep15:28
evrardjppalendae it's not really hard to write a fallback url to be honest15:28
palendaeevrardjp: No, but it has to be done in their code15:28
evrardjpindeed15:28
evrardjpthe code is really not meant for that at the beginning, but it's perfectly doable, I tried to hack it quickly15:29
evrardjpI don't have the code anymore though15:29
evrardjpanyway15:29
evrardjpup to you odyssey4me15:29
evrardjpgenerally, when ppl release something, they prefer using tag numbers instead of shas :D15:30
odyssey4meyes, we do want to publish the role at some point but that will not necessarily be for our consumption until we have them published and we decide to consume it in that way - so for now I'm just trying to determine how we keep things up to date15:30
*** weezS has joined #openstack-ansible15:30
evrardjpsome companies don't count the commit as a single piece of work15:30
odyssey4mefor the keepalived role in particular, we have no current way of regularly checking for a new tag and consuming it15:30
*** phalmos has quit IRC15:30
evrardjpme ?15:30
pjm6guys for adding a new database and user permissions, i just need to add in one of the galera gluster and it will propagate to the others, or exists something that I must be aware?15:30
odyssey4meso I'm asking whether we should just SHA bump as we do for other things, or whether it makes better sense to find the latest tag and go with that?15:30
odyssey4mepjm6 if you add it to galera, it'll replicate15:31
evrardjpif you don't put version, ansible-galaxy cli will automatically fetch the latest version15:31
pjm6Ok odyssey4me, tks :) and i just need to access galera container and add it, right?15:31
odyssey4mepjm6 just point it at the same address used for all other galera transactions15:31
evrardjplatest tagged version to be clear15:31
odyssey4mepjm6 look at the keystone playbook as a sample - it includes the creation of a db for keystone15:31
pjm6Nice :D thanks odyssey4me15:31
evrardjpor to be even more precise: latest imported tagged version15:32
odyssey4meevrardjp yep, but for repeatable builds we must fix it to something - we can't have today's OSA tag build something different today than it does tomorrow15:32
*** jayc has quit IRC15:32
evrardjpfor stable branch I'd keep a tag15:32
odyssey4meok, so fixed to a tag then - thanks15:32
pjm6btw: odyssey4me, evrardjp besides that function (def allowed) of horizon (that I talk yesterday) works for a custom policy rules, I will use the keystone role associated with a project :)15:32
openstackgerritMerged openstack/openstack-ansible-security: Fix flake8 violation in conf.py  https://review.openstack.org/30481515:36
evrardjppjm6 that's a more standard way of doing15:37
*** jayc has joined #openstack-ansible15:37
pjm6evrardjp: yes, but for the positive side, discovered an other way to do it :D15:37
evrardjpfeel free to write it on a blog and share me the url :)15:37
evrardjpand to share me* ?15:38
openstackgerritMerged openstack/openstack-ansible-specs: PowerVM Virt Driver Support  https://review.openstack.org/30294115:38
pjm6about what evrardjp? the code def allowed() ?15:38
*** yarkot_ has quit IRC15:38
evrardjppjm6 yup15:38
evrardjpthis way I don't lose it :)15:38
*** openstack has joined #openstack-ansible16:10
evrardjpnot sure to understand your question16:10
*** Xu_Chao has quit IRC16:10
pjm6source /openstack/venvs/neutron-12.0.10/bin/activate16:10
pjm6Was to use the python environment in the bash :) is that command16:11
*** sdake has quit IRC16:11
*** schwicht has joined #openstack-ansible16:13
*** sdake has joined #openstack-ansible16:15
*** wangqwsh has joined #openstack-ansible16:15
*** ChrisBenson has joined #openstack-ansible16:17
*** sdake_ has quit IRC16:17
*** automagically has quit IRC16:20
*** phalmos has quit IRC16:21
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix flake8 violation in conf.py  https://review.openstack.org/30538916:21
*** Bjoern_zZzZzZzZ has quit IRC16:21
cloudnullpjm6:  all of the executables are in the venv and can be found here : /openstack/venvs/$SERVICE-$VERSION/bin/$PROGRAM16:22
cloudnullif you dont want to source the venv16:22
cloudnullyou dont have to16:22
pjm6ohh thanks :D16:22
cloudnullyou can just run the bin16:22
pjm6cloudnull: do you have a testing machine with OSA?16:22
cloudnullIE /openstack/venvs/neutron-12.0.10/bin/neutron net-list will work just fine16:22
pjm6thanks :D that is more easy of course16:22
cloudnullyesi have a test lab16:23
pjm6can you try use the vpnaas please?16:23
pjm6I use it and found that16:23
pjm6neutron_vpnaas python module aren't being loaded to the contianer16:23
pjm6or i'm doing it wrong :(16:23
pjm6what i was trying to do is go to machine copy the git of neutron_vpnaas and the error disappear but didn't solve the problem16:24
cloudnulllet me go pull that in to this lab.16:24
pjm6well i have to run come back later16:24
cloudnullit may be a min16:24
cloudnullok16:24
*** pjm6 has quit IRC16:25
mhaydenevrardjp / pjm6: i haven't tested vpnaas quite yet16:26
evrardjpgood to know16:26
*** schwicht has quit IRC16:26
*** wangqwsh has quit IRC16:31
*** chhavi has quit IRC16:31
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update source-branch-updater to work with IRR's  https://review.openstack.org/29708316:32
odyssey4mecloudnull ^ I'd appreciate a review to ensure that I'm not missing something obvious16:32
*** admin0 has joined #openstack-ansible16:32
* cloudnull looking now16:33
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-04-13  https://review.openstack.org/30539716:35
*** thorst_ has joined #openstack-ansible16:35
*** phalmos has joined #openstack-ansible16:36
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Update paste, policy and rootwrap configurations 2016-04-13  https://review.openstack.org/30539816:36
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Update paste, policy and rootwrap configurations 2016-04-13  https://review.openstack.org/30539916:37
*** javeriak_ has quit IRC16:41
*** thorst_ has quit IRC16:44
*** schwicht has joined #openstack-ansible16:45
*** Oku_OS is now known as Oku_OS-away16:47
*** sdake has quit IRC16:49
*** admin0 has quit IRC16:49
*** chhavi has joined #openstack-ansible16:49
*** jiteka has quit IRC16:52
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: WIP Initial convergence testing  https://review.openstack.org/30488716:53
odyssey4meevrardjp did you mean to duplicate a patch? https://review.openstack.org/305165 / https://review.openstack.org/305161 ?16:55
evrardjpone is targetting osa the other the role itself16:55
evrardjpwant me to update the commit txt?16:56
odyssey4meah, silly me - never mind16:56
*** sanjay__u has quit IRC16:56
evrardjpit's not done anyway it doesn't pass the gate while it works on aio16:56
evrardjpyou have time :D16:56
*** pjm6 has joined #openstack-ansible16:58
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484016:58
odyssey4mecloudnull ^ FYI there was a bug registered ages ago to make that happen, so well done for closing a bug :)16:59
odyssey4meI just added the reference to the commit msg & topic16:59
*** clickboom has joined #openstack-ansible17:02
*** javeriak has joined #openstack-ansible17:03
*** gfa is now known as gfa_17:04
*** v1k0d3n has quit IRC17:05
*** javeriak_ has joined #openstack-ansible17:06
*** mgoddard has joined #openstack-ansible17:07
*** mgoddard__ has quit IRC17:07
*** javeriak has quit IRC17:10
*** severion has joined #openstack-ansible17:10
cloudnullthanks odyssey4me  ---17:11
cloudnullseems im having connection issues.17:11
cloudnullif miss message / dont respond please resend17:11
*** javeriak_ has quit IRC17:17
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-memcached_server: Improved logging for memcached  https://review.openstack.org/30516117:17
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Improved logging for memcached (OSA calling part)  https://review.openstack.org/30516517:19
evrardjp^ no mistake anymore between the two commits now17:20
jauyeunghi there, has anyone seen this error 'LinuxBridgeNeutronAgentRPC' object has no attribute 'state_rpc' with the linux bridge agent? thanks17:23
odyssey4mejauyeung not that I've seen17:24
*** Bjoern_ has joined #openstack-ansible17:25
jauyeungall my network:dhcp ports are showing down... thought this might be the reason17:26
jauyeungno other errors in my logs17:26
jauyeungstrange17:26
*** v1k0d3n has joined #openstack-ansible17:27
v1k0d3nhey guys...have a question17:27
v1k0d3nso i'm starting to get into the whole operational aspect of monitoring osa, and i am monitoring the nova_console container backend.17:28
v1k0d3non all the clusters i have built, this one seems to always be in a down state in haproxy web-ui.17:28
v1k0d3noh sorry...this is for nova_console_novnc, and you know what...i guess that makes sense!17:29
*** Bjoern_ has quit IRC17:29
odyssey4mealright, I'm done for today - going offline - chat tomorrow17:30
evrardjpbye!17:31
evrardjpleaving too17:31
*** javeriak has joined #openstack-ansible17:31
*** ChrisBenson has quit IRC17:32
*** ChrisBenson has joined #openstack-ansible17:32
cloudnullhave a good one17:33
pjm6cya odyssey4me17:34
*** admin0 has joined #openstack-ansible17:36
*** chhavi has quit IRC17:36
*** ChrisBenson has quit IRC17:41
*** ChrisBenson has joined #openstack-ansible17:42
spotznight odyssey4me and evrardjp17:43
*** javeriak_ has joined #openstack-ansible17:45
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488717:46
*** javeriak has quit IRC17:46
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Add option to enable from VPNaaS in Horizon  https://review.openstack.org/30542117:49
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Add option to enable from VPNaaS in Horizon  https://review.openstack.org/30542117:49
pjm6bye evrardjp17:49
*** sdake has joined #openstack-ansible17:55
*** eil397 has joined #openstack-ansible18:06
*** persia has joined #openstack-ansible18:07
*** pjm6 has quit IRC18:13
*** briancubed has joined #openstack-ansible18:13
*** alex______ has joined #openstack-ansible18:15
*** alex______ has quit IRC18:18
*** alex______ has joined #openstack-ansible18:18
*** woodard has joined #openstack-ansible18:20
alex______would this be considered a bug? if you use cinder + nfs driver, the volumes on the storage nodes end up being owned by dnsmasq:116 in our case, as that maps to libvirt-qemu:kvm on the compute nodes. should their be a libvert-qemu:kvm user/group on storage with matching uid/gid so perms are correct?18:21
*** woodard has quit IRC18:22
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_neutron: Add options to auto enable VPNaaS  https://review.openstack.org/30543218:23
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Add option to auto enable from VPNaaS in Horizon  https://review.openstack.org/30543318:24
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488718:24
cloudnullalex______:  thats something we've talked about in the past18:25
cloudnullidk if its a bug18:25
cloudnullhowever i'd like to talk about trying to come up with an scheme that will help us make sure the uid and gid are configurable for cases of shared storage18:25
cloudnulli think a little for to that effect has gone into nova via mhayden?18:26
alex______cloudnull: gotcha. yes, standardizing uid/gid would be useful.. i typo'd one of our storage nodes in the ansible config, and so only provisioned 3 out of 4 of them for cinder, but 4 out of 4 for swift. when I went to add cinder onto the missing node, the uid/gid of swift and cinder were reversed, so files were getting created as swift user on one node. =)18:29
cloudnullsounds like a great time :)18:29
* cloudnull is kidding18:29
alex______bunch of find's and chowns. =)18:30
*** woodard has joined #openstack-ansible18:31
mhaydencloudnull: oops, what did i do?18:31
cloudnullit would be good to coordinate the uid/gid for all services we support. its just not been done yet18:32
cloudnullmhayden:  didnt you work on nova uid/gid things ?18:32
cloudnullalex______: https://github.com/openstack/openstack-ansible-os_nova/blob/master/defaults/main.yml#L57-L6718:32
alex______can't imagine the upgrade script for that change. =)18:32
cloudnullyup18:33
alex______oh, interesting, thanks!18:33
cloudnulli think thats why its not been done by default18:33
cloudnullhttps://github.com/openstack/openstack-ansible-os_nova/commit/f4821e47b1cdafbb00d1949b292a40aaa687f3f118:33
cloudnullmhayden:  it is all your fault =)18:33
cloudnullj/k18:33
cloudnullalex______: its not implemented in cinder or swfit it seems18:34
*** jwitko has joined #openstack-ansible18:36
*** pjm6 has joined #openstack-ansible18:36
*** woodard has quit IRC18:36
mhaydenah, i did do those18:37
*** woodard has joined #openstack-ansible18:37
mhaydendid we find a bug?18:37
mhaydensorry, i've got a lotta windows open18:37
*** jwitk0 has quit IRC18:37
*** Tebro has quit IRC18:38
alex______no, no bug, just can add to it to have cinder / swift also have set uid's18:38
*** charz has quit IRC18:38
cloudnulljust a continuation of the shared storage convo and being able to set the UID/GID18:39
*** bapalm has quit IRC18:39
*** fignew has quit IRC18:39
*** hlkv6 has quit IRC18:39
*** marcoamorales has quit IRC18:39
cloudnullalex______: are you going to be at the summit?18:39
*** gfa_ has quit IRC18:39
*** weshay has quit IRC18:39
*** openstackgerrit has quit IRC18:39
*** sshen has quit IRC18:39
*** galstrom has quit IRC18:39
alex______sadly, no, and i missed it last year when it was in my own backdoor. =)18:40
cloudnull:( next one :)18:40
*** sshen has joined #openstack-ansible18:41
cloudnullmaybe we can get that convo within the working sessions https://etherpad.openstack.org/p/openstack-ansible-newton-roadmap-brainstorm?18:41
*** gfa_ has joined #openstack-ansible18:41
*** kong has quit IRC18:41
*** meteorfox has quit IRC18:41
pjm6in fresh installing mitaka (after removing liberty) for some reason in my bare metal (compute and storage node, which is the same) failed the instalation of pip requirements18:41
pjm6it seems that the repo server (port 8181) is not available18:42
pjm6<html><body><h1>503 Service Unavailable</h1>18:42
pjm6anyone had this problem?18:42
*** phiche has joined #openstack-ansible18:43
mongo2pjm6: not on this release but I did need to make sure to up nfile limits in /etc/security in some older versions.18:43
*** Tebro has joined #openstack-ansible18:44
*** bapalm has joined #openstack-ansible18:44
pjm6hmm in the repo container?18:44
*** galstrom has joined #openstack-ansible18:44
mongo2but that may not be the issue, also remember that * no longer covers root18:45
*** charz has joined #openstack-ansible18:45
pjm6the log is this: http://pastebin.com/sxycTznC18:46
pjm6in the machien with that IP (infra host)18:47
*** hlkv6 has joined #openstack-ansible18:47
pjm6same error18:47
jmccrorypjm6: have you run the haproxy-install playbook?18:47
mongo2pjm6: this was in the bare metal host, but it passes through at the time the container starts.18:47
*** automagically has joined #openstack-ansible18:48
mongo2and you have check that the container does have the port open with  netstat -tnl right?18:48
pjm6jmccrory, i was doing the setup-hosts.yml (in the docs that process comes after) but i did yet18:48
pjm6for strange in the infra host i had no containers18:48
*** michaelgugino has joined #openstack-ansible18:48
pjm6but in the host i have port 8181 open18:49
jmccroryoh, you may have an existing pip.conf from your previous install18:49
jmccrory~/.pip/pip.conf18:49
pjm6yes that could be possible jmccrory18:49
pjm612.0.1018:49
mongo2ya, no continers would cause a problem.18:49
pjm6yeah, mitaka is 13.0.0.18:49
pjm6so its better remove all18:50
*** johnmilton has quit IRC18:50
pjm6folder /root/.pip/*18:50
pjm6?18:50
jmccroryyep, it'll be recreated18:52
*** weshay has joined #openstack-ansible18:52
*** fignew has joined #openstack-ansible18:53
pjm6thanks jmccrory, mongo2  :)18:53
pjm6well it seems that had passed =)18:54
pjm6that task, tks18:54
*** deadnull has quit IRC18:54
*** openstackgerrit has joined #openstack-ansible18:55
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488718:55
briancubedLike pjm6, I'm doing a fresh install, only I'm using liberty. I'm also running into a problem with repo server when running the repo-build playbook. A log snippet is here: http://pastebin.com/JhWKw7iW.18:56
*** admin0 has quit IRC18:56
*** thorst_ has joined #openstack-ansible18:56
pjm6briancubed, are you using branch stable/liberty?18:58
pjm6i'm saying this because my previous instalation was in the branch stable/libety18:59
*** jayc has quit IRC18:59
briancubedI am using a fork created by a co-worker. I believe it's from tag 12.0.8????18:59
pjm6and had 12.0.1018:59
pjm6Yes, that why i was saying18:59
*** weezS has joined #openstack-ansible18:59
pjm6i used the branch stable/liberty18:59
*** Rodrigo_BR has joined #openstack-ansible19:00
briancubedSo, pjm6, you think I should use stable/liberty instead?19:00
pjm6in my opinion i think yes19:00
pjm6(if I understood well)19:01
*** thorst_ has quit IRC19:01
pjm6the stable/liberty is the branch that don't have nothing experimental (anyone correct me if i'm wrong)19:01
briancubedI can try stable/liberty without our integration changes. If it works, I can make the integration changes by hand and retry.19:01
*** sdake_ has joined #openstack-ansible19:01
pjm6probably that tag are using an commit that could not be working19:01
briancubedI am willing to give stable/liberty a try19:02
*** alex______ has quit IRC19:02
pjm6well I used it a two weeks ago and everything works fine =D19:03
pjm6i'm trying to use now the mitaka because i need the vpnaas19:03
*** sdake has quit IRC19:03
*** meteorfox has joined #openstack-ansible19:06
*** kong has joined #openstack-ansible19:09
*** admin0 has joined #openstack-ansible19:10
*** jayc has joined #openstack-ansible19:11
*** hybridpollo has joined #openstack-ansible19:11
*** javeriak_ has quit IRC19:14
odyssey4meanyone testing out Mitaka may wish to add this patch, as this includes the final Mitaka release of the OpenStack projects: https://review.openstack.org/30235919:16
odyssey4me13.0.0 was based on RC119:16
*** KLevenstein has quit IRC19:18
openstackgerritMerged openstack/openstack-ansible-galera_server: Add executable bit to run_tests.sh  https://review.openstack.org/30100719:20
*** thorst_ has joined #openstack-ansible19:21
*** thorst_ has quit IRC19:21
*** thorst_ has joined #openstack-ansible19:22
odyssey4mejmccrory automagically cloudnull d34dh0r53 stevelle mattt hughsaunders andymccr an quick review of https://review.openstack.org/302359 to prep for the next tag would be appreciated19:22
odyssey4meit also brings in all the fixes we identified in the RC period, so it's pretty essential19:23
cloudnullbin done did it19:23
odyssey4mecloudnull thanks, I think stevelle could use another vote on https://review.openstack.org/30432819:23
odyssey4meand https://review.openstack.org/304328 for that matter19:24
pjm6odyssey4me, for adding that patch I must change git branch to that one?19:24
stevelleodyssey4me: are you trying to topple my tower of babel?19:24
odyssey4melol, I meant https://review.openstack.org/30433619:24
odyssey4mestevelle if you wanna build the largest dep chain known to gerrit, we can leave it be if you like :p19:25
stevelle:D19:25
odyssey4mealright, I'm going offline for realsies this time19:26
stevelleI seriously doubt I would beat the glance artifacts chain :)19:26
pjm6in this lines19:31
pjm6https://github.com/openstack/openstack-ansible-rsyslog_client/blob/2246bd2beec155f55496861a82df50d0cc4418a0/tasks/rsyslog_client_install.yml#L39-L4619:31
openstackgerritMerged openstack/openstack-ansible-os_gnocchi: Enable docs task  https://review.openstack.org/30433619:31
pjm6that should be sudo mode?19:31
openstackgerritMerged openstack/openstack-ansible-os_gnocchi: Enabling bashate and pep8 lint checks  https://review.openstack.org/30432819:31
openstackgerritMerged openstack/openstack-ansible-os_gnocchi: Enable ansible lint and syntax tests  https://review.openstack.org/30434319:32
pjm6i'm asking because i'm getting error saying that its not possible to open apt of perconna19:32
pjm6but the file exists19:32
pjm6msg: Failed to lock apt for exclusive operation19:32
pjm6or because we put user as root, we have privileges as a root user?19:33
*** marcoamorales has joined #openstack-ansible19:35
openstackgerritMerged openstack/openstack-ansible: Fix configuration string for haproxy  https://review.openstack.org/30415719:38
*** Tridde has joined #openstack-ansible19:42
*** sdake_ has quit IRC19:48
*** jwitko has quit IRC19:48
*** schwicht has quit IRC19:48
*** elo has quit IRC19:48
*** tiagogomes has quit IRC19:48
*** markvoelker has quit IRC19:48
*** clsacramento has quit IRC19:48
*** mongo2 has quit IRC19:48
*** LanceHaig has quit IRC19:48
*** rromans has quit IRC19:48
*** Trident has quit IRC19:48
*** homerp has quit IRC19:48
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible: Move inventory environment loading to function  https://review.openstack.org/29074019:48
automagicallyWould appreciate it if I could get some more reviews on https://review.openstack.org/#/c/298916/ that’s been out there for awhile19:50
*** jwitk0 has joined #openstack-ansible19:50
automagicallyNothing urgent about, but I like to draw attention to stuff once it surpasses 2 weeks after initial submission19:51
*** rromans_ has joined #openstack-ansible19:54
*** schwicht_ has joined #openstack-ansible19:54
spotzlooking automagically I tend to squirrel from the channel so if I'm not on when submitted I don't always see it19:55
automagicallythx spotz19:55
*** Rodrigo_BR has quit IRC19:55
*** LanceHai- has joined #openstack-ansible19:56
*** clsacramento_ has joined #openstack-ansible19:57
*** homerp_ has joined #openstack-ansible20:02
*** sdake_ has joined #openstack-ansible20:03
*** jwitko has joined #openstack-ansible20:03
*** schwicht has joined #openstack-ansible20:03
*** elo has joined #openstack-ansible20:03
*** tiagogomes has joined #openstack-ansible20:03
*** markvoelker has joined #openstack-ansible20:03
*** clsacramento has joined #openstack-ansible20:03
*** mongo2 has joined #openstack-ansible20:03
*** LanceHaig has joined #openstack-ansible20:03
*** rromans has joined #openstack-ansible20:03
*** homerp has joined #openstack-ansible20:03
*** dmsimard1 has joined #openstack-ansible20:03
pjm6in mitaka anyone had problems in setup-hosts.yml regarding rsyslog_client20:04
*** sdake_ has quit IRC20:04
*** jwitko has quit IRC20:04
*** schwicht has quit IRC20:04
*** elo has quit IRC20:04
*** tiagogomes has quit IRC20:04
*** markvoelker has quit IRC20:04
*** clsacramento has quit IRC20:04
*** mongo2 has quit IRC20:04
*** LanceHaig has quit IRC20:04
*** rromans has quit IRC20:04
*** homerp has quit IRC20:04
pjm6in the "Update apt if needed"20:04
*** dmsimard1 is now known as dmsimard20:05
*** LanceHai- is now known as LanceHaig20:05
*** spotz has quit IRC20:05
*** spotz has joined #openstack-ansible20:08
openstackgerritMerged openstack/openstack-ansible-security: Fix flake8 violation in conf.py  https://review.openstack.org/30538920:10
*** mongo2_ has joined #openstack-ansible20:11
*** sdake_ has joined #openstack-ansible20:11
*** elo has joined #openstack-ansible20:11
*** tiagogomes has joined #openstack-ansible20:11
*** markvoelker has joined #openstack-ansible20:11
*** mongo2 has joined #openstack-ansible20:11
*** mongo2 has quit IRC20:11
briancubedhey, pjm6! Just wanted to let you know that I switched to stable/liberty and that repo-build error I couldn't figure out went away...20:12
*** eric_lopez has joined #openstack-ansible20:12
*** sdake has joined #openstack-ansible20:12
openstackgerritMerged openstack/openstack-ansible-openstack_hosts: conditionally include the scsi_dh kernel module  https://review.openstack.org/30062120:12
briancubedI have a bit of work to do to move my integration code, but that's less frustrating than chasing failures! :-)20:13
*** michaelgugino has quit IRC20:14
*** markvoelker_ has joined #openstack-ansible20:14
pjm6the same error ? :\20:14
*** tiagogomes has quit IRC20:15
*** markvoelker has quit IRC20:15
*** sdake_ has quit IRC20:16
*** elo has quit IRC20:16
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488720:18
briancubedSpoke too soon. Hit a failure on the next playbook, galera-install: http://pastebin.com/kyngtv1n20:20
pjm6so it fix the first? :D20:21
*** Nepoc has quit IRC20:21
pjm6do you have generated the user_secrets.yml?20:21
briancubedyes, using stable/liberty fixed the first error. Now I see this new one. Let me check the user-secrets.yml...20:22
openstackgerritMerged openstack/openstack-ansible-os_horizon: Update SSL key / cert distribution for Horizon  https://review.openstack.org/30411320:22
pjm6briancubed, btw: when you switch branch, did you run bootstrap-ansible script?20:23
*** automagically has quit IRC20:23
briancubedpjm6: Oops. No.20:23
pjm6I think you must do that20:23
*** jayc has quit IRC20:23
pjm6to fetch the new git repo checkouts :)20:23
briancubedokay. let me do that.20:24
*** jayc has joined #openstack-ansible20:24
mhaydeni'm deploying OSA mitaka but the deployment fails when it tries to create galera users: msg: the python mysqldb module is required20:25
briancubedFWIW, /etc/openstack_deploy/user_secrets.yml has no passwords in it. Should I have added passwords there?20:25
mhaydenbut it seems that the repo server is building mysql-python20:25
*** phiche has quit IRC20:27
*** tiagogomes has joined #openstack-ansible20:28
pjm6yes briancubed20:32
pjm6wait20:32
briancubedLooks like a step I missed in the docs: python pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml20:33
briancubedFrom here: http://docs.openstack.org/developer/openstack-ansible/liberty/install-guide/configure-creds.html?highlight=user_secrets20:34
pjm6yes i was finding that20:34
pjm6to give you20:35
briancubedMy guess is that I should run the python command, above, destroy containers, create containers, then resume... Cool?20:35
*** weshay has quit IRC20:35
pjm6that's probably our error20:35
pjm6well if you're in the20:36
pjm6openstack-playbook20:36
pjm6or infraestructure20:36
pjm6I think its better20:36
*** krotscheck is now known as krotscheck_dcm20:36
*** klamath_ has joined #openstack-ansible20:37
*** Mudpuppy_ has joined #openstack-ansible20:37
*** odyssey4me_ has joined #openstack-ansible20:38
*** jwitko has joined #openstack-ansible20:39
briancubedpjm6: Better to destroy/create containers?20:39
pjm6Yes if you can20:39
briancubedyes, I can. thank you.20:39
pjm6it will be a clean install (i'm not sure if in the step you are)20:39
pjm6had already need of the secretsw20:39
*** lykinsbd has joined #openstack-ansible20:39
pjm6at least you guarantee that are no miss steps :D20:39
briancubedI'm working through failures in running setup-infrastructure.yml20:40
briancubedso I can destroy/create containers, then restart setup_infrastrcture20:40
*** sshen_ has joined #openstack-ansible20:41
*** promethe1nfire has joined #openstack-ansible20:42
*** markvoelker has joined #openstack-ansible20:42
*** kysse_ has joined #openstack-ansible20:42
*** raginbaj- has joined #openstack-ansible20:43
*** lbragstad_ has joined #openstack-ansible20:44
*** nb1 has joined #openstack-ansible20:45
*** erikwilson has joined #openstack-ansible20:45
*** ajo_ has joined #openstack-ansible20:45
*** brad[]` has joined #openstack-ansible20:45
*** markvoelker_ has quit IRC20:47
*** jwitk0 has quit IRC20:47
*** sshen has quit IRC20:47
*** kysse has quit IRC20:47
*** admiralboom has quit IRC20:47
*** Mudpuppy has quit IRC20:47
*** klamath has quit IRC20:47
*** xek has quit IRC20:47
*** brad[] has quit IRC20:47
*** lykinsbd_ has quit IRC20:47
*** mgariepy has quit IRC20:47
*** prometheanfire has quit IRC20:47
*** ajo has quit IRC20:47
*** raginbajin has quit IRC20:47
*** odyssey4me has quit IRC20:47
*** erikmwilson has quit IRC20:47
*** lbragstad has quit IRC20:47
*** pabelanger has quit IRC20:47
*** larsks has quit IRC20:47
*** raginbaj- is now known as raginbajin20:47
*** larsks has joined #openstack-ansible20:47
pjm6destroy and then run setup-hosts (if i'm not mistaken) and then infraestructure20:47
*** promethe1nfire is now known as prometheanfire20:49
*** pabelanger has joined #openstack-ansible20:49
*** nb1 is now known as admiralboom20:50
*** mgariepy has joined #openstack-ansible20:53
briancubedpjm6: yes. I'll do that. thanks.20:54
*** pabelanger has quit IRC20:58
*** pabelanger has joined #openstack-ansible20:58
pjm6no problem, hope it works briancubed  :)20:58
mhaydeni think the repo server builds mysql-python against an older version of galera20:58
mhaydenand then the library is nowhere to be found on the galera nodes themselves20:58
mhaydeneither i found a bug or i'm an idiot20:58
*** clickboom has quit IRC21:01
mhaydenyeah, that seems to be the issue21:01
mhaydencreated a bug: https://bugs.launchpad.net/openstack-ansible/+bug/157009521:04
openstackLaunchpad bug 1570095 in openstack-ansible "mysql-python builds against old version of libmariadbclient" [Undecided,New]21:04
*** johnmilton has joined #openstack-ansible21:05
*** briancubed has quit IRC21:05
*** sdake has quit IRC21:08
*** retreved_ has quit IRC21:10
jmccrorymhayden: mitaka branch might not have included the most recent repo_build role. https://review.openstack.org/#/c/301103/ should have fixed that21:10
jmccroryhttps://bugs.launchpad.net/openstack-ansible/+bug/156512821:11
openstackLaunchpad bug 1565128 in openstack-ansible mitaka "mariadb10 libs are needed when building the repo" [Critical,Fix committed] - Assigned to Jesse Pretorius (jesse-pretorius)21:11
mhaydenjmccrory: darnit -- and i remember looking at that one!21:11
mhaydenthanks, jmccrory21:11
jmccrorysure np21:11
mhaydeni stumbled into an openstack-ansible-security bug that was already fixed too21:11
mhaydenworking with these independent roles is ... interesting21:12
mhaydennight, folks21:12
pjm6jmccrory, that was already merged in git repo (i think)21:13
pjm6jmccrory, do you have a clue why in setup-hosts i'm failing in the Update apt repo?21:13
jmccrorylater, mhayden21:13
pjm6cya mhayden21:13
jmccrorypjm6: not sure. have a paste of the error you're getting?21:14
pjm6yes, just waiting to the command ends for pasting the text21:14
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488721:16
*** asettle has joined #openstack-ansible21:17
*** phiche has joined #openstack-ansible21:19
pjm6jmccrory, here http://pastebin.com/VrXyhyG921:19
pjm6i have read that error could be because not running sudo (in ansible) but as we are the root user , shouldn't be that21:19
*** schwicht_ has quit IRC21:19
*** admin0 has quit IRC21:21
jmccroryare infra1, haproxy1, and compute1 all the same host?21:21
*** lbragstad_ is now known as lbragstad21:21
*** phiche1 has joined #openstack-ansible21:22
*** phiche has quit IRC21:23
pjm6no21:24
pjm6infra1 and haproxy1 same21:24
pjm6compute1 different21:24
jmccroryoh ok, the host name doesn't have to match the group, it'll get assigned to the right groups in the inventory. think that explains the first couple 'failed to lock apt' errors.21:26
pjm6sorry didn't understand.21:26
pjm6my config maybe is wrong?21:27
pjm6(i'm using the same as used in the liberty)21:27
jmccroryoh ok, yeah so in your openstack_user_config. the same hostname should be used consistently for each individual host21:28
pjm6hmm21:29
pjm6for example21:29
pjm6(maybe i'm wrong this)21:30
jmccrorywhen the inventory json file is generated it'll add the hosts to the correct groups based on your user_config.21:30
*** thorst_ has quit IRC21:30
pjm6http://pastebin.com/cicvhtX621:30
pjm6in this case21:30
pjm6all should be infra1 ?21:30
jmccroryyep21:31
pjm6hmm ok that could explain things21:31
pjm6thanks jmccrory :D21:31
pjm6then I should run again21:31
pjm6the same playbook setup-hosts.yml21:31
pjm6or should delete21:31
pjm6a file first?21:31
jmccroryhave you created any containers yet?21:32
*** sigmavirus24 is now known as sigmavirus24_awa21:32
pjm6i think the playbook didn't create yet21:32
pjm6at least i do21:32
pjm6lxc-ls21:32
pjm6and nothing appears in the infra121:32
*** sigmavirus24_awa is now known as sigmavirus2421:32
jmccroryoh ok, should be fine to delete openstack_inventory.json then21:33
jmccroryit'll get recreated on your next playbook run21:33
pjm6well i deleted this two  openstack_inventory.json and openstack_hostnames_ips.yml21:34
pjm6and now don't appear the log1 and haproxy121:34
pjm6:D21:34
jmccroryok cool21:34
pjm6lets see what happens thanks21:34
pjm6but this was working on liberty, so I discarted that file21:35
jmccroryhmm, apt update task might have been skipped or worked differently in liberty. i'll check21:36
*** thorst has joined #openstack-ansible21:36
pjm6well it seems that rsyslog_client 12.0.0 don't exist :\21:38
pjm6at least in the21:38
pjm6https://github.com/openstack/openstack-ansible-rsyslog_client21:38
*** Mudpuppy has joined #openstack-ansible21:39
pjm6well it seems it passes that step jmccrory :D21:40
pjm6thanks very much21:40
jmccroryah ok good. sure, no problem21:40
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484021:40
*** thorst has quit IRC21:40
*** Mudpuppy_ has quit IRC21:41
*** fignew has quit IRC21:41
pjm6hope that now could make an deployment functional and stable as liberty =D21:41
*** admiralboom has quit IRC21:41
*** clsacramento_ has quit IRC21:41
*** clsacramento has joined #openstack-ansible21:43
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484021:45
*** galstrom is now known as galstrom_zzz21:45
*** jauyeung has quit IRC21:48
*** keedya has quit IRC21:54
*** thorst has joined #openstack-ansible21:54
*** fignew has joined #openstack-ansible21:55
*** phiche1 has quit IRC21:57
*** thorst has quit IRC21:58
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484022:00
*** sigmavirus24 is now known as sigmavirus24_awa22:02
*** sdake has joined #openstack-ansible22:02
*** phalmos has quit IRC22:06
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484022:06
*** b3rnard0 is now known as b3rnard0_away22:08
*** busterswt has quit IRC22:09
*** _hanhart has quit IRC22:11
*** jayc has quit IRC22:18
*** clickboom has joined #openstack-ansible22:18
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488722:20
*** _hanhart has joined #openstack-ansible22:21
*** clickboom has quit IRC22:26
*** spotz is now known as spotz_zzz22:28
*** jayc has joined #openstack-ansible22:29
*** klamath_ has quit IRC22:30
*** nb1 has joined #openstack-ansible22:34
*** ametts has quit IRC22:39
*** jayc has quit IRC22:44
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488722:45
*** ChrisBenson has quit IRC22:48
*** ChrisBenson has joined #openstack-ansible22:48
*** sdake has quit IRC22:48
*** schwicht has joined #openstack-ansible22:52
*** weezS has quit IRC22:53
*** schwicht_ has joined #openstack-ansible22:55
*** schwicht has quit IRC22:56
*** sdake has joined #openstack-ansible23:00
*** andymccr_ is now known as andymccr23:02
*** woodard has quit IRC23:09
*** woodard has joined #openstack-ansible23:10
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing  https://review.openstack.org/30488723:17
*** ChrisBenson has quit IRC23:18
*** johnmilton has quit IRC23:18
openstackgerritMerged openstack/openstack-ansible-memcached_server: Improved logging for memcached  https://review.openstack.org/30516123:20
*** ChrisBenson has joined #openstack-ansible23:20
jwitkohey guys after a fresh install of some additional compute nodes I'm noticing live migration on those new comp nodes is failing due to the /usr/bin/kvm binary missing.  is this not installed as part of the OSA install?23:38
openstackgerritMerged openstack/openstack-ansible-os_swift: Resolve issues with swift tests  https://review.openstack.org/30435023:38
*** schwicht_ has quit IRC23:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Fix missing 'qos' in extension drivers  https://review.openstack.org/30430523:55

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!