*** asettle has quit IRC | 00:06 | |
*** skamithi13 has quit IRC | 00:18 | |
*** saneax is now known as saneax_AFK | 00:20 | |
*** yarkot1 has joined #openstack-ansible | 00:29 | |
*** yarkot1 has quit IRC | 00:30 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services https://review.openstack.org/277199 | 00:32 |
---|---|---|
cloudnull | admin0 thats the missing pieces that i had in a local branch now being forward ported ^ | 00:32 |
cloudnull | i've tested most, not all | 00:33 |
cloudnull | please give it a spin when you can | 00:33 |
cloudnull | or want to | 00:33 |
cloudnull | i got to go , off to homedepot | 00:33 |
mrda | homedepot is fun :) | 00:34 |
*** yarkot1 has joined #openstack-ansible | 00:34 | |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: Multi-distro framework for rabbitmq_server role https://review.openstack.org/286282 | 00:41 |
*** yarkot1 has quit IRC | 00:44 | |
*** skamithi13 has joined #openstack-ansible | 00:45 | |
*** yarkot1 has joined #openstack-ansible | 01:33 | |
*** fishcried has joined #openstack-ansible | 01:47 | |
*** fishcried has quit IRC | 01:48 | |
*** fishcried has joined #openstack-ansible | 01:50 | |
*** asettle has joined #openstack-ansible | 01:56 | |
*** thorst has quit IRC | 01:56 | |
*** thorst has joined #openstack-ansible | 01:57 | |
*** v1k0d3n has joined #openstack-ansible | 02:03 | |
*** severion has quit IRC | 02:05 | |
*** thorst has quit IRC | 02:05 | |
*** fishcried1 has joined #openstack-ansible | 02:24 | |
*** fishcried has quit IRC | 02:25 | |
*** marcoamorales has quit IRC | 02:25 | |
*** fishcried1 is now known as fishcried | 02:25 | |
*** asettle has quit IRC | 02:26 | |
*** asettle has joined #openstack-ansible | 02:33 | |
*** Mudpuppy has joined #openstack-ansible | 02:50 | |
asettle | odyssey4me and cloudnull - thanks for both your reviews on the Ironic docs. Just a note, this was not at all edited from Kevin's original content. I will get around to it, this was just a first off patch. Reviews would be appreciated again after I go through properly today :) | 02:52 |
*** b3rnard0_away is now known as b3rnard0 | 03:00 | |
*** thorst has joined #openstack-ansible | 03:03 | |
openstackgerrit | Merged openstack/openstack-ansible: Fix some typos https://review.openstack.org/305926 | 03:04 |
*** thorst has quit IRC | 03:11 | |
*** yatin has joined #openstack-ansible | 03:11 | |
*** sdake_ has quit IRC | 03:14 | |
*** sdake has joined #openstack-ansible | 03:16 | |
*** weezS has quit IRC | 03:19 | |
*** weezS has joined #openstack-ansible | 03:19 | |
*** marcoamorales has joined #openstack-ansible | 03:22 | |
*** daneyon has joined #openstack-ansible | 03:24 | |
*** yatin_ has joined #openstack-ansible | 03:24 | |
*** fishcried1 has joined #openstack-ansible | 03:24 | |
*** sdake has quit IRC | 03:27 | |
*** izaakk_ has joined #openstack-ansible | 03:27 | |
*** severion has joined #openstack-ansible | 03:28 | |
*** Mudpuppy has quit IRC | 03:28 | |
*** Mudpuppy has joined #openstack-ansible | 03:29 | |
*** mattoliverau has joined #openstack-ansible | 03:30 | |
*** v1k0d3n has quit IRC | 03:30 | |
*** stevelle_ has joined #openstack-ansible | 03:31 | |
*** weezS has quit IRC | 03:32 | |
*** yatin has quit IRC | 03:32 | |
*** fishcried has quit IRC | 03:32 | |
*** stevelle has quit IRC | 03:32 | |
*** daneyon_ has quit IRC | 03:32 | |
*** izaakk has quit IRC | 03:32 | |
*** matt6434 has quit IRC | 03:32 | |
*** bogeyon18 has quit IRC | 03:32 | |
*** spotz_zzz has quit IRC | 03:32 | |
*** fishcried1 is now known as fishcried | 03:32 | |
*** stevelle_ is now known as stevelle | 03:32 | |
*** izaakk_ is now known as izaakk | 03:32 | |
*** bogeyon18 has joined #openstack-ansible | 03:34 | |
*** sdake has joined #openstack-ansible | 03:35 | |
openstackgerrit | Merged openstack/openstack-ansible-os_swift: Expose and set a default fallocate_reserve value https://review.openstack.org/287912 | 03:36 |
*** sdake_ has joined #openstack-ansible | 03:39 | |
*** sdake has quit IRC | 03:40 | |
*** gonzalo2kx has joined #openstack-ansible | 03:48 | |
*** gonzalo2kx has quit IRC | 04:00 | |
openstackgerrit | Merged openstack/openstack-ansible: Add installation support for os_ironic https://review.openstack.org/293779 | 04:03 |
*** Mudpuppy has quit IRC | 04:03 | |
*** b3rnard0 is now known as b3rnard0_away | 04:03 | |
*** spotz_zzz has joined #openstack-ansible | 04:04 | |
*** yatin_ has quit IRC | 04:05 | |
*** thorst has joined #openstack-ansible | 04:11 | |
*** hybridpollo has quit IRC | 04:14 | |
*** thorst has quit IRC | 04:16 | |
*** ChrisBenson has joined #openstack-ansible | 04:21 | |
*** saneax_AFK is now known as saneax | 04:30 | |
*** javeriak has joined #openstack-ansible | 04:30 | |
*** yatin has joined #openstack-ansible | 04:37 | |
*** ChrisBenson has quit IRC | 04:59 | |
*** ChrisBenson has joined #openstack-ansible | 05:00 | |
*** ChrisBenson1 has joined #openstack-ansible | 05:02 | |
*** gonzalo2kx has joined #openstack-ansible | 05:03 | |
*** ChrisBenson has quit IRC | 05:04 | |
*** javeriak has quit IRC | 05:10 | |
*** shausy has joined #openstack-ansible | 05:12 | |
*** asettle has quit IRC | 05:12 | |
*** thorst has joined #openstack-ansible | 05:13 | |
*** asettle has joined #openstack-ansible | 05:13 | |
*** admin0 has joined #openstack-ansible | 05:18 | |
*** thorst has quit IRC | 05:20 | |
*** fishcried1 has joined #openstack-ansible | 05:25 | |
*** finchd has quit IRC | 05:26 | |
*** fishcried has quit IRC | 05:27 | |
*** larsks has quit IRC | 05:27 | |
*** fishcried1 is now known as fishcried | 05:27 | |
*** falanx has quit IRC | 05:28 | |
*** jlvillal has quit IRC | 05:28 | |
*** markvoelker has quit IRC | 05:28 | |
*** admin0 has quit IRC | 05:30 | |
*** jlvillal has joined #openstack-ansible | 05:34 | |
openstackgerrit | Alexandra Settle proposed openstack/openstack-ansible: DOCS WIP: Adding Ironic configuration docs to Ansible install guide https://review.openstack.org/305586 | 05:35 |
*** larsks has joined #openstack-ansible | 05:36 | |
*** markvoelker has joined #openstack-ansible | 05:36 | |
*** finchd has joined #openstack-ansible | 05:36 | |
*** Oku_OS-away has quit IRC | 05:36 | |
asettle | odyssey4me and cloudnull - questions and comments inline both in patch set 1 and 2. Patch set 3 is available. This is still a WIP with regards to the written content. Let's just try and get the technical content up and correct :) | 05:37 |
*** Oku_OS-away has joined #openstack-ansible | 05:39 | |
*** falanx has joined #openstack-ansible | 05:42 | |
*** LanceHaig has joined #openstack-ansible | 05:49 | |
*** yatin has quit IRC | 06:00 | |
*** mikelk has joined #openstack-ansible | 06:00 | |
*** yatin has joined #openstack-ansible | 06:01 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services https://review.openstack.org/277199 | 06:05 |
*** sdake_ has quit IRC | 06:07 | |
*** sdake has joined #openstack-ansible | 06:07 | |
*** thorst has joined #openstack-ansible | 06:18 | |
*** thorst has quit IRC | 06:25 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services https://review.openstack.org/277199 | 06:30 |
*** asettle has quit IRC | 06:38 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services https://review.openstack.org/277199 | 06:47 |
*** jokeric has joined #openstack-ansible | 06:53 | |
*** fishcried1 has joined #openstack-ansible | 06:57 | |
*** jlvillal has quit IRC | 06:58 | |
*** LanceHaig has quit IRC | 06:58 | |
*** LanceHaig has joined #openstack-ansible | 06:58 | |
*** daneyon has quit IRC | 07:02 | |
*** yatin has quit IRC | 07:02 | |
*** yatin has joined #openstack-ansible | 07:03 | |
*** mikelk has quit IRC | 07:04 | |
*** fishcried has quit IRC | 07:04 | |
*** fishcried1 is now known as fishcried | 07:04 | |
*** larsks has quit IRC | 07:08 | |
*** jlvillal has joined #openstack-ansible | 07:11 | |
*** jamielennox is now known as jamielennox|away | 07:11 | |
*** larsks has joined #openstack-ansible | 07:14 | |
*** mikelk has joined #openstack-ansible | 07:14 | |
*** javeriak has joined #openstack-ansible | 07:15 | |
*** markvoelker has quit IRC | 07:16 | |
*** thorst has joined #openstack-ansible | 07:23 | |
*** thorst has quit IRC | 07:30 | |
*** pcaruana has joined #openstack-ansible | 07:31 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services https://review.openstack.org/277199 | 07:48 |
mattt | cloudnull: bro seriously | 07:49 |
evrardjp | :) | 07:50 |
*** Oku_OS-away is now known as Oku_OS | 07:50 | |
evrardjp | everbody needs to eventually sleep you know cloudnull? | 07:50 |
*** admin0 has joined #openstack-ansible | 07:52 | |
*** andymccr has quit IRC | 07:52 | |
evrardjp | and good morning everyone | 07:58 |
*** asettle has joined #openstack-ansible | 08:05 | |
*** openstackgerrit has quit IRC | 08:08 | |
*** asettle has quit IRC | 08:09 | |
admin0 | good morning all | 08:10 |
*** asettle has joined #openstack-ansible | 08:11 | |
*** jamielennox|away is now known as jamielennox | 08:11 | |
*** asettle has quit IRC | 08:11 | |
*** javeriak_ has joined #openstack-ansible | 08:11 | |
evrardjp | morning admin0 | 08:11 |
admin0 | morning evrardjp | 08:11 |
*** andymccr has joined #openstack-ansible | 08:13 | |
*** javeriak has quit IRC | 08:13 | |
*** andymccr has quit IRC | 08:15 | |
*** andymccr has joined #openstack-ansible | 08:16 | |
admin0 | what shall I break today (TM) | 08:16 |
*** openstackgerrit has joined #openstack-ansible | 08:18 | |
*** thorst has joined #openstack-ansible | 08:28 | |
*** thorst has quit IRC | 08:36 | |
*** jamielennox is now known as jamielennox|away | 08:43 | |
*** fishcried has quit IRC | 08:44 | |
openstackgerrit | Darren Birkett proposed openstack/openstack-ansible-galera_server: ensure mysql defaults file is sourced https://review.openstack.org/306298 | 08:49 |
*** asettle has joined #openstack-ansible | 08:49 | |
mancdaz | ^ evrardjp odyssey4me | 08:49 |
*** asettle has quit IRC | 08:50 | |
*** javeriak_ has quit IRC | 08:50 | |
*** goretoxo has joined #openstack-ansible | 08:50 | |
openstackgerrit | Darren Birkett proposed openstack/openstack-ansible-galera_server: ensure mysql defaults file is sourced https://review.openstack.org/306298 | 08:50 |
*** javeriak has joined #openstack-ansible | 08:55 | |
*** tiagogomes has joined #openstack-ansible | 09:03 | |
-openstackstatus- NOTICE: Gerrit is going to be restarted because is not processing new changes | 09:04 | |
*** fishcried has joined #openstack-ansible | 09:05 | |
*** fishcried has quit IRC | 09:07 | |
*** sdake has quit IRC | 09:10 | |
*** markvoelker has joined #openstack-ansible | 09:17 | |
-openstackstatus- NOTICE: No jobs are being processed by gerrit and zuul . We are working to solve the problem, please be aware that no changes have been sent to the queue in the last hour, so you will need to recheck jobs for that period. | 09:18 | |
*** ChanServ changes topic to "No jobs are being processed by gerrit and zuul . We are working to solve the problem, please be aware that no changes have been sent to the queue in the last hour, so you will need to recheck jobs for that period." | 09:18 | |
*** markvoelker has quit IRC | 09:22 | |
mancdaz | oh I was just about to ask why there are no jobs being processed by gerrit and zuul :) | 09:24 |
*** jokeric has quit IRC | 09:25 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: updated ironic playbook inclusion for tftp network https://review.openstack.org/303659 | 09:29 |
odyssey4me | o/ | 09:30 |
*** yatin has quit IRC | 09:32 | |
*** thorst has joined #openstack-ansible | 09:33 | |
javeriak | odyssey4me hey | 09:35 |
javeriak | we cant backport directly from master to liberty anymore right? | 09:35 |
javeriak | i should push a new patch | 09:35 |
*** neilus has quit IRC | 09:37 | |
openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: Update SSL key / cert distribution for Horizon https://review.openstack.org/306319 | 09:38 |
odyssey4me | javeriak yeah, you can't cherry-pick - so the convention is to create a new patch, but reference the source with something like 'This is a backport of <change-id>' | 09:38 |
javeriak | odyssey4me yep just did that | 09:38 |
odyssey4me | what you've done is perfectly fine | 09:39 |
javeriak | cool | 09:39 |
*** thorst has quit IRC | 09:41 | |
*** neilus has joined #openstack-ansible | 09:42 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: ensure mysql defaults file is sourced https://review.openstack.org/306298 | 09:44 |
odyssey4me | mancdaz evrardjp ^ small change to the commit message to ensure that the bug referenced is appropriately handled | 09:44 |
*** jokeric has joined #openstack-ansible | 09:45 | |
odyssey4me | mancdaz jmccrory fantastic find, thanks for taking the time to figure that one out! | 09:46 |
*** ChanServ changes topic to "Austin Design Summit Schedule: https://goo.gl/WSRblf || Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs" | 09:47 | |
-openstackstatus- NOTICE: Zuul and gerrit are working normally now. Please recheck any jobs that may have been affected by this failure. | 09:47 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Fix configuration string for haproxy https://review.openstack.org/306324 | 09:48 |
*** tiagogomes has quit IRC | 09:51 | |
admin0 | morning openstackstatus | 10:00 |
admin0 | morning odyssey4me | 10:01 |
admin0 | :D | 10:01 |
admin0 | i need a bit of help to understand what i did caused the build to fail: http://logs.openstack.org/27/303427/7/check/gate-openstack-ansible-dsvm-commit/71d3ce2/console.html | 10:04 |
openstackgerrit | Sashi Dahal proposed openstack/openstack-ansible: make hostname,network and ip-address on all examples consistent https://review.openstack.org/303427 | 10:07 |
*** czunker has joined #openstack-ansible | 10:07 | |
*** javeriak has quit IRC | 10:12 | |
*** gfa_ is now known as gfa | 10:12 | |
odyssey4me | admin0 I'm not sure if it's something you did, but this is the cause of the failure: http://logs.openstack.org/27/303427/7/check/gate-openstack-ansible-dsvm-commit/71d3ce2/console.html#_2016-04-14_20_39_53_330 | 10:13 |
admin0 | thanks .. though we opted to use aio for documentation, i think the test system is configured to see aio1 .. so i resubmitted another one marking it as aio1 .. | 10:14 |
admin0 | the error message is not very descriptive ( at least to me ) | 10:15 |
admin0 | on where/why it failed | 10:15 |
admin0 | i suspect hostname | 10:15 |
admin0 | question .. the patches that i do . is it possible for me to test it also ( like how this system is testing ) | 10:16 |
admin0 | in that way, i would be able to know that it passes tests | 10:16 |
*** pjm6 has joined #openstack-ansible | 10:18 | |
odyssey4me | hmm, the AIO is not good to use for examples because it does funky networking and is not real-world at all in the way that it does things | 10:19 |
odyssey4me | I haven't checked the patch yet though, will look later | 10:19 |
pjm6 | morning guys :D | 10:20 |
*** tiagogomes has joined #openstack-ansible | 10:23 | |
evrardjp | morning pjm6 | 10:24 |
pjm6 | evrardjp: o/ | 10:25 |
admin0 | morning | 10:27 |
odyssey4me | mattt so you did this on an Ubuntu host? and it looks like it made a change to another place in the role-requirements? | 10:29 |
mattt | odyssey4me: yeah i did it on a trusty instance | 10:29 |
mattt | odyssey4me: it just tacks on that 0.4.3 at the end for some reason | 10:29 |
mattt | when i changed the second open to 'w', it didn't do that | 10:29 |
mattt | so ?_O_? | 10:29 |
odyssey4me | it does actually edit other places, because it sorts the dicts on output - so that's intentional | 10:29 |
*** pjm6 has quit IRC | 10:29 | |
odyssey4me | oh, weird | 10:29 |
mattt | yeah the update happens, which is good, just that trailing 0.4.3 which i don't understand | 10:30 |
odyssey4me | mattt interestingly, that does not happen on my mac | 10:31 |
mattt | odyssey4me: maybe python bug? | 10:31 |
odyssey4me | ok, well no harm - I'll do a quick patch as your suggestion is *more* correct | 10:31 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Adjust ansible-role-requirements-editer file open options https://review.openstack.org/306352 | 10:34 |
odyssey4me | mattt ^ | 10:34 |
odyssey4me | if that works for you, I'll consolidate the same patch into the backport | 10:35 |
mattt | odyssey4me: testing now | 10:36 |
*** johnmilton has joined #openstack-ansible | 10:37 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone: Remove venv activation code https://review.openstack.org/287812 | 10:38 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Doc updates https://review.openstack.org/302776 | 10:39 |
*** thorst has joined #openstack-ansible | 10:39 | |
*** pjm6 has joined #openstack-ansible | 10:39 | |
*** jokeric has quit IRC | 10:42 | |
*** palendae has quit IRC | 10:44 | |
*** thorst has quit IRC | 10:45 | |
odyssey4me | mattt updated https://review.openstack.org/306016 | 10:46 |
*** jokeric has joined #openstack-ansible | 10:47 | |
mattt | odyssey4me: LGTM | 10:48 |
*** pjm6 has quit IRC | 10:48 | |
odyssey4me | thanks for validating mattt :) | 10:49 |
mattt | odyssey4me: didn't really test the other bit ... since it was trying to submit stuff w/ git review :P | 10:50 |
mattt | could be nice to add a flag that doesn't do that by default | 10:50 |
odyssey4me | oh yeah, well it works for me - and seeing as I'm the only one that uses it right now I guess that's enough ;) | 10:50 |
mattt | that's true :) | 10:50 |
mattt | but if someone accidentally runs it then it creates a bit of a mess | 10:51 |
odyssey4me | well, for it to actually work they would have to have git review configured and the right gerrit creds | 10:51 |
odyssey4me | and patches can always be abandoned | 10:51 |
odyssey4me | but yeah, I've been thinking that maybe some of these scripts should rather be put into a seperate repo | 10:52 |
*** admin0 has quit IRC | 10:52 | |
openstackgerrit | Merged openstack/openstack-ansible-security: Doc updates https://review.openstack.org/302776 | 10:52 |
*** admin0 has joined #openstack-ansible | 10:53 | |
mattt | odyssey4me: probably ok to leave for the mean time, like you say it's not the end of the world if someone generates a few reviews | 10:53 |
evrardjp | odyssey4me I think it should be in another repo yeah | 10:53 |
evrardjp | deployers don't need to see the tools not relevant to the product IMO | 10:54 |
evrardjp | but it's painful to configure new repos etc, so I guess you can leave it like that for now, because that's what we always did right? | 10:55 |
odyssey4me | for now it's fine, but perhaps in the newton timeframe we should split some of this stuff out - it's not crucial though, there's no real driving need | 10:56 |
*** palendae has joined #openstack-ansible | 10:56 | |
openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-security: Add ability to enable unattended upgrades https://review.openstack.org/304096 | 10:58 |
*** asettle has joined #openstack-ansible | 10:59 | |
*** asettle has quit IRC | 10:59 | |
*** electrofelix has joined #openstack-ansible | 11:11 | |
*** markvoelker has joined #openstack-ansible | 11:18 | |
openstackgerrit | Merged openstack/openstack-ansible-os_keystone: Remove venv activation code https://review.openstack.org/287812 | 11:18 |
*** pjm6 has joined #openstack-ansible | 11:19 | |
*** schwicht has joined #openstack-ansible | 11:21 | |
*** xek has joined #openstack-ansible | 11:22 | |
*** markvoelker has quit IRC | 11:24 | |
*** schwicht has quit IRC | 11:25 | |
*** Bofu2U has quit IRC | 11:28 | |
admin0 | odyssey4me: it was the hostname change .. now the new patch fixed it :) | 11:28 |
admin0 | thanks for helping how to figure out | 11:29 |
*** schwicht has joined #openstack-ansible | 11:31 | |
*** thorst has joined #openstack-ansible | 11:37 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-ironic: Switch defaults/tests to use master branch https://review.openstack.org/306373 | 11:39 |
*** fignew has quit IRC | 11:46 | |
*** dmsimard has quit IRC | 11:46 | |
*** dmsimard has joined #openstack-ansible | 11:47 | |
*** retreved has joined #openstack-ansible | 11:51 | |
*** openstack has quit IRC | 11:51 | |
*** openstack has joined #openstack-ansible | 11:54 | |
*** asettle has joined #openstack-ansible | 11:59 | |
*** asettle has quit IRC | 12:00 | |
*** skamithi14 has joined #openstack-ansible | 12:04 | |
*** weshay has joined #openstack-ansible | 12:05 | |
*** javeriak has joined #openstack-ansible | 12:06 | |
*** skamithi13 has quit IRC | 12:06 | |
*** pjm6 has quit IRC | 12:07 | |
*** tiagogomes has quit IRC | 12:09 | |
*** gfa is now known as gfa_ | 12:11 | |
*** gfa_ is now known as gfa | 12:12 | |
*** Oku_OS is now known as Oku_OS-away | 12:12 | |
*** woodard has joined #openstack-ansible | 12:13 | |
*** woodard has quit IRC | 12:14 | |
*** busterswt has joined #openstack-ansible | 12:15 | |
*** woodard has joined #openstack-ansible | 12:16 | |
*** markvoelker has joined #openstack-ansible | 12:16 | |
*** tiagogomes has joined #openstack-ansible | 12:16 | |
*** saneax is now known as saneax_AFK | 12:19 | |
*** schwicht has quit IRC | 12:26 | |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Adding modularity to keepalived configuration https://review.openstack.org/305971 | 12:28 |
*** busterswt has quit IRC | 12:28 | |
mhayden | morning | 12:29 |
evrardjp | morning mhayden | 12:29 |
*** javeriak_ has joined #openstack-ansible | 12:29 | |
*** tiagogomes has quit IRC | 12:30 | |
*** tiagogomes has joined #openstack-ansible | 12:30 | |
*** fignew has joined #openstack-ansible | 12:30 | |
*** javeriak has quit IRC | 12:31 | |
*** goretoxo has quit IRC | 12:31 | |
*** busterswt has joined #openstack-ansible | 12:32 | |
*** keedya has joined #openstack-ansible | 12:34 | |
*** retreved_ has joined #openstack-ansible | 12:41 | |
*** keedya has quit IRC | 12:43 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Adjust ansible-role-requirements-editor file open options https://review.openstack.org/306352 | 12:43 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Adjust ansible-role-requirements-editor file open options https://review.openstack.org/306352 | 12:45 |
*** retreved has quit IRC | 12:45 | |
*** goretoxo has joined #openstack-ansible | 12:46 | |
*** Oku_OS-away is now known as Oku_OS | 12:49 | |
*** mgoddard__ has joined #openstack-ansible | 12:51 | |
*** mgoddard_ has quit IRC | 12:54 | |
*** rohanp has joined #openstack-ansible | 12:54 | |
*** rohanp_ has joined #openstack-ansible | 12:59 | |
*** Bjoern_ has joined #openstack-ansible | 13:00 | |
*** Bjoern_ is now known as Bjoern_zZzZzZzZ | 13:00 | |
*** Bjoern_zZzZzZzZ is now known as Bjoern_ | 13:02 | |
*** automagically has joined #openstack-ansible | 13:04 | |
automagically | morning all | 13:04 |
*** admin0 has quit IRC | 13:08 | |
*** b3rnard0_away is now known as b3rnard0 | 13:13 | |
*** goretoxo has quit IRC | 13:15 | |
odyssey4me | howdy automagically - would you mind taking a peek at https://review.openstack.org/306298 ? I'd like to try and get that resolved asap | 13:17 |
odyssey4me | there's a bunch of investigation info in the referenced bug if you're curious | 13:17 |
automagically | I followed most of the discussion yesterday | 13:18 |
automagically | odyssey4me: Have a second to give me some more insight into your comments here? https://review.openstack.org/#/c/306028/ | 13:19 |
*** joker__ has quit IRC | 13:20 | |
*** sdake has joined #openstack-ansible | 13:20 | |
*** sdake_ has joined #openstack-ansible | 13:22 | |
*** sdake has quit IRC | 13:26 | |
odyssey4me | automagically I'm not sure of the best approach, but an option could be to only set pip_links if the group repo_all has more than 0 members? | 13:27 |
automagically | That results in different functionality. I have 0 members in that group, since my repo is centralized | 13:28 |
automagically | But I still have links and still want to lockdown pip | 13:28 |
odyssey4me | part of the issue is that the pip_lock_down role is included as a meta dep by almost all the roles, so even with your patch I think it might get set regardless | 13:28 |
automagically | Yep, except for galera and rabbitmq interestingly where its done at the playbook level | 13:29 |
automagically | I’m trying to build out a centralized Keystone and Horizon infra for a multi-region install | 13:29 |
odyssey4me | hmm, ok - I see that none of the galera_server deps include the lock down | 13:30 |
automagically | Exactly | 13:30 |
automagically | Nor do the rabbit ones to my knowledge | 13:30 |
odyssey4me | yep, confirmed | 13:31 |
automagically | Given my use case, I’d say that relying upon the openstack_repo var is probably the most sane path forward | 13:31 |
automagically | And it is backware compatible for all existing operators/deployers | 13:31 |
automagically | Without placing such a hard dependency on the inventory | 13:31 |
odyssey4me | hmm, ok so https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/hosts.yml#L62-L63 will always set the links - and we're ok with that | 13:32 |
odyssey4me | then you just override the repo url | 13:32 |
automagically | Exactly | 13:32 |
odyssey4me | and yeah, it needs to not rely on a repo_server being in the inventory | 13:33 |
automagically | You got it, that’s what I’m going for there | 13:33 |
odyssey4me | then actually I think that perhaps your approach is right | 13:33 |
automagically | We’ve got inventory group conditions spread all over the place. I understand why, but they can be very vague, when we already have more fine-grained vars implemented | 13:33 |
automagically | I’ll update the patch to rely upon openstack_repo_url | 13:34 |
automagically | Appreciate your time odyssey4me | 13:34 |
odyssey4me | I'm trying to think if there's a case where pip_links would be set, but the repo server would not be around | 13:34 |
automagically | Yes, that is my case | 13:34 |
automagically | well, from an inventory standpoint the repo_server isn’t around | 13:34 |
odyssey4me | yeah | 13:34 |
automagically | From an openstack_repo_url standpoint it is | 13:34 |
odyssey4me | maybe the conditional should be something like if (groups['repo_all'] | length) >= 1) or (openstack_repo_url is defined) ? | 13:35 |
odyssey4me | why was that conditional there in the first place - it's a little odd | 13:36 |
automagically | Agreed, no idea why it was there | 13:37 |
odyssey4me | it came in via https://github.com/openstack/openstack-ansible/commit/6f443d69713723810a448a9c83cdf603c07352d0 | 13:37 |
odyssey4me | we should find out from cloudnull why, because the commit doesn't explain it | 13:38 |
automagically | Because of this, we shouldn’t need to test the repo_all host group in the condition: https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/hosts.yml#L38 | 13:38 |
odyssey4me | it seems silly to perpetuate an edge case for no reason - if that's there for a situation we don't support then it gives you more freedom to change the conditional to support your specific use-case, and your commit can explain the use-case | 13:38 |
*** jthorne has joined #openstack-ansible | 13:39 | |
automagically | Ah, this gives a hint to why: https://github.com/openstack/openstack-ansible/commit/6f443d69713723810a448a9c83cdf603c07352d0#diff-5e3fc411764d3375c98601ca2203fae5L33 | 13:42 |
automagically | And Galera was never locking down pip | 13:43 |
odyssey4me | ah, it was an early IRR | 13:43 |
odyssey4me | we handle things differently in the other roles | 13:43 |
odyssey4me | does the handling method in the other roles cause trouble for your use-case? | 13:44 |
automagically | The existing method like: https://github.com/openstack/openstack-ansible-os_cinder/blob/master/meta/main.yml#L33 would work fine if applied to galera_server and rabbitmq | 13:45 |
automagically | Happy to abandon my current patch and submit those changes as an alternative | 13:45 |
odyssey4me | hmm, the trouble with that method is that there is no developer_mode for those roles | 13:46 |
*** pjm6 has joined #openstack-ansible | 13:46 | |
automagically | That’s fine, than it just becomes a simple dep with no condition | 13:47 |
automagically | Sorry, I should have been more clear with my reference | 13:47 |
odyssey4me | perhaps they should key off from whether openstack_repo_url is defined ? | 13:47 |
automagically | They could, but ultimately, that’s a side effect once you get to the role level. The only thing that really matters to the pip lockdown role is the value of pip_links | 13:49 |
automagically | Which is why I started where I did | 13:49 |
automagically | It just so happens that the default value of pip_links references openstack_repo_url | 13:49 |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Improved documentation about LVM overwrite behaviour https://review.openstack.org/306436 | 13:49 |
odyssey4me | yeah, inside the role pip_links is the key thing to key off from - agreed | 13:49 |
openstackgerrit | Merged openstack/openstack-ansible-galera_server: ensure mysql defaults file is sourced https://review.openstack.org/306298 | 13:50 |
odyssey4me | mancdaz ^ can you please backport https://review.openstack.org/306298 to stable/mitaka and liberty? | 13:50 |
odyssey4me | automagically ok I think it makes sense to make the change in the role and key off of pip_links, then adjust the play to remove the lock down role execution | 13:51 |
odyssey4me | that makes a little more sense, and keeps things a little more consistent | 13:51 |
odyssey4me | in fact it may make better sense to key all the role's use as meta deps based on pip_links ? | 13:52 |
*** jayc__ has joined #openstack-ansible | 13:52 | |
automagically | Or hide that logic within pip_lockdown role itself | 13:53 |
automagically | And let the roles merrily depend on it all they want, but the role is a no-op when pip_links is empty | 13:53 |
odyssey4me | yeah, I'm sort-of a fan of having pip_lock_down be a part of pip_install and the lock down and config bits only get implemented if there actually are pip_links | 13:54 |
odyssey4me | that would mean only having one role dep and it's smarter | 13:54 |
odyssey4me | and it handles all the pip things | 13:54 |
odyssey4me | which to me seems more logical | 13:54 |
*** woodard has quit IRC | 13:56 | |
*** pjm6 has quit IRC | 13:57 | |
*** ametts has joined #openstack-ansible | 13:59 | |
automagically | Cool and leads to quite a bit of simplicity | 13:59 |
automagically | And also feels much more logical | 13:59 |
automagically | It may severely complicate the developer_mode logic though, I’ll have to think through it a bit more | 14:00 |
*** javeriak_ has quit IRC | 14:01 | |
automagically | AFK for a few minutes | 14:01 |
*** javeriak has joined #openstack-ansible | 14:01 | |
*** schwicht has joined #openstack-ansible | 14:05 | |
cloudnull | morning | 14:05 |
evrardjp | morning cloudnull | 14:05 |
cloudnull | mattt evrardjp sleep is for the weak :p | 14:05 |
evrardjp | :D | 14:05 |
evrardjp | I've started to look at your haproxy change | 14:06 |
evrardjp | to enable the ssl termination | 14:06 |
cloudnull | cool | 14:06 |
evrardjp | there are some quirks right now, but I'd like to work with you | 14:06 |
evrardjp | it's really a good thing | 14:06 |
*** Mudpuppy has joined #openstack-ansible | 14:06 | |
evrardjp | I like it | 14:06 |
cloudnull | odyssey4me: what change needs explaining ? | 14:06 |
cloudnull | indeed. lets do it | 14:07 |
openstackgerrit | Darren Birkett proposed openstack/openstack-ansible: ensure mysql defaults file is sourced https://review.openstack.org/306450 | 14:11 |
*** sigmavirus24_awa is now known as sigmavirus24 | 14:12 | |
odyssey4me | cloudnull I think we managed to decipher it ;) | 14:14 |
odyssey4me | cloudnull evrardjp yeah, agreed - those changes look good on paper but I haven't had the chance to test yet | 14:14 |
cloudnull | brushed up on your cloudnullise ? | 14:14 |
odyssey4me | cloudnull yeah, I think that automagically is learning to speak cloudnull :p | 14:14 |
evrardjp | odyssey4me I got issues with testing too, that's why we could work on this | 14:15 |
evrardjp | just ending a quick doc commit | 14:15 |
cloudnull | I have it running within a 12 node lab from an api standpoint its working well. | 14:15 |
evrardjp | I guess cloudnull is already doing lots of stuff on it anyway | 14:15 |
evrardjp | cloudnull cool | 14:15 |
cloudnull | however i have to go figure out how to make tempest happy | 14:15 |
odyssey4me | cloudnull you may note my question regarding whether enabling the ssl header by default in all the roles has any side effects? | 14:16 |
evrardjp | cloudnull I saw an issue on horizon: it seems there is no bind on port 80 anymore @haproxy, so no redirect happening from 80 to 443 | 14:16 |
odyssey4me | basically if we can do away with the vars and just hard set it in the templates, if it works for ssl and non-ssl then I'd prefer that | 14:16 |
odyssey4me | it's simpler and has less logic tied to it | 14:17 |
evrardjp | I didn't test the nova console yet | 14:17 |
cloudnull | odyssey4me: thats working fine. | 14:17 |
odyssey4me | evrardjp yep, there's actually already a patch in for that | 14:17 |
cloudnull | yea i was looking for that patch | 14:17 |
cloudnull | logan-: made it | 14:17 |
evrardjp | I'll check all of this afterwards | 14:17 |
odyssey4me | evrardjp https://review.openstack.org/289492 | 14:17 |
cloudnull | i need to rebase that patch off of master instead of being dependent on my ssl patch so i can pull in those changes. | 14:17 |
odyssey4me | it's based on the ssl termination patch | 14:18 |
cloudnull | yea we should undo that | 14:18 |
cloudnull | or squash the two | 14:18 |
odyssey4me | can that patch stand alone without your patch? | 14:18 |
odyssey4me | yeah, I'm thinking just squash | 14:18 |
odyssey4me | add logan- as a co-author and squash | 14:18 |
cloudnull | right now if you go to IP:80 it just tell you to gfy | 14:19 |
cloudnull | w/ his bits it does proper redirection | 14:19 |
cloudnull | logan-: do you mind if i squash your commit into the ssl patch and add you as a co-author ? | 14:20 |
*** jayc__ has quit IRC | 14:22 | |
*** jayc_ has joined #openstack-ansible | 14:23 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: ensure mysql defaults file is sourced https://review.openstack.org/306450 | 14:24 |
*** jayc_ is now known as jayc | 14:25 | |
*** spotz_zzz is now known as spotz | 14:28 | |
*** gfa is now known as gfa_ | 14:28 | |
odyssey4me | jmccrory automagically cloudnull d34dh0r53 stevelle mattt hughsaunders andymccr there are several stable/mitaka backports in the queue, I'd appreciate some reviews: https://review.openstack.org/#/q/project:%255Eopenstack/openstack-ansible.*+status:open+branch:stable/mitaka | 14:32 |
openstackgerrit | Merged openstack/openstack-ansible: Adjust ansible-role-requirements-editor file open options https://review.openstack.org/306352 | 14:32 |
automagically | Taking a look | 14:34 |
* cloudnull looking now | 14:35 | |
*** phalmos has joined #openstack-ansible | 14:37 | |
*** gonzalo2kx has quit IRC | 14:37 | |
*** electrofelix has quit IRC | 14:43 | |
odyssey4me | cloudnull with regards to https://review.openstack.org/306328 surely it won't deploy or do anything different unless the environment includes 'ironic-infra_hosts' and the virt_type is set to 'ironic' ? | 14:44 |
cloudnull | it will not do anything different if those hosts are undefined. but that include give the impression that it works. | 14:45 |
cloudnull | im not adverse to having it there later once the docs are online | 14:45 |
cloudnull | and the network bits are worked out | 14:45 |
odyssey4me | ok, so we should rather focus on finalising master, then doing a combined backport with all the related patches included in one review? | 14:46 |
*** mgoddard has joined #openstack-ansible | 14:46 | |
odyssey4me | I think I prefer that option. | 14:46 |
*** mgoddard__ has quit IRC | 14:46 | |
*** neilus has quit IRC | 14:47 | |
cloudnull | i think its fine to pull in the intial work but omit that include | 14:47 |
cloudnull | this is similar to how we did the ceilometer inclusion | 14:48 |
cloudnull | and when there were tests we added it to the integrated build | 14:48 |
odyssey4me | ok, for now I'll hold it back as a combined backport will make more sense anyway | 14:49 |
*** Brew has joined #openstack-ansible | 14:51 | |
*** Xu_Chao has joined #openstack-ansible | 14:51 | |
*** electrofelix has joined #openstack-ansible | 14:51 | |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Added a documentation section for the cinder-horizon https://review.openstack.org/306482 | 14:52 |
cloudnull | +1 | 14:53 |
evrardjp | ^ doc specialists would probably fix my english | 14:53 |
evrardjp | ok now | 14:53 |
*** gonzalo2kx has joined #openstack-ansible | 14:53 | |
spotz | evrardjp: did I hear my role? Which is funny as I'm a linux systems engineer:) | 14:54 |
evrardjp | are you native english? that's good enough for me | 14:55 |
evrardjp | :D | 14:55 |
*** weezS has joined #openstack-ansible | 14:55 | |
spotz | evrardjp: hehe | 14:56 |
evrardjp | which proves engineers can do everything | 14:56 |
evrardjp | thanks then spotz if you take the leap :D | 14:56 |
spotz | evrardjp: Yep I've got it up. let me get a DB moving at work then I'll look | 14:57 |
evrardjp | I'm definitely not in a hurry | 14:57 |
*** pjm6 has joined #openstack-ansible | 14:58 | |
*** rohanp_ has quit IRC | 15:00 | |
*** john has joined #openstack-ansible | 15:00 | |
pjm6 | anyone used cinder with lvm? | 15:00 |
*** john is now known as h1nch | 15:00 | |
pjm6 | i'm in doubt about the "cinderAZ_1" variable ( http://docs.openstack.org/developer/openstack-ansible/mitaka/install-guide/configure-cinder.html#configuring-cinder-to-use-lvm ) | 15:01 |
pjm6 | this is the zone of the cinder or related with nova avaiability zone? | 15:01 |
evrardjp | to make your life easier you can make them equal pjm6 | 15:02 |
evrardjp | but that's another topic | 15:02 |
pjm6 | if I didn't put that var, will go the default? | 15:02 |
pjm6 | I'm trying to put openfiler (to simulate a storage) comunnicating with cinder, in this case i wanted to share an iSCSI connection from openfiler to the cinder | 15:03 |
rromans | evrardjp: do you mind if I change the wording a little bit and upload a new patch? or would you prefer comments? | 15:03 |
pjm6 | for this, the openfiler server, must be in the same storage network (it's not necessary have the container host) right? | 15:03 |
evrardjp | rromans go ahead | 15:03 |
rromans | evrardjp: ok, thanks | 15:04 |
*** gonzalo2kx has quit IRC | 15:04 | |
evrardjp | pjm6 technically you're not forced to be on the same network, as long as your backend is reachable | 15:04 |
evrardjp | rromans I thank you! | 15:05 |
evrardjp | pjm6 but you probably want that | 15:05 |
pjm6 | but in terms of "good practice" would be in being in the same network, and then all my volumes will be stored in that storage | 15:05 |
*** javeriak has quit IRC | 15:06 | |
pjm6 | and if cinder "dies" i can reallocate volumes to a new agent and then I get rid of the SPOF | 15:06 |
evrardjp | good practice is to put your storage as close as possible to your consumption | 15:06 |
*** pcaruana has quit IRC | 15:06 | |
evrardjp | pjm6 that's not that simple | 15:06 |
evrardjp | one does not simply move a volume to a different cinder instance | 15:07 |
evrardjp | if that's what you meant | 15:07 |
pjm6 | no no, what i understood (but could be wrong) | 15:07 |
pjm6 | are imagine | 15:07 |
evrardjp | I didn't test that though | 15:07 |
pjm6 | I have two cinder agents right? | 15:07 |
pjm6 | if one of them dies, all the volumes managed by that agent "die" and all info will disappear from the openstack | 15:08 |
evrardjp | I can imagine anything, so two cinder policemen seems doable | 15:08 |
evrardjp | go on | 15:08 |
pjm6 | but if I use a storage (with LVM controller) I can change in the database | 15:08 |
pjm6 | that the cinder agent that will maange that volume will be the other policemen that aren't sleeping xD | 15:09 |
pjm6 | *that is not sleeping (or dead in this case) | 15:09 |
logan- | cloudnull: sure @ squash | 15:10 |
logan- | was afk | 15:10 |
cloudnull | cool. | 15:10 |
cloudnull | thanks logan- | 15:10 |
pjm6 | cloudnull: o/ | 15:10 |
evrardjp | pjm6 but you still have one backend storage? so how do you improve this reliability? | 15:10 |
cloudnull | o/ | 15:10 |
evrardjp | cloudnull I'll wait for the squash then | 15:11 |
*** meteorfox has quit IRC | 15:11 | |
*** Tebro has quit IRC | 15:11 | |
*** serverascode has quit IRC | 15:11 | |
*** etoews has quit IRC | 15:11 | |
pjm6 | evrardjp: backend storage could be a physical storage or openfiler in this case, right? | 15:11 |
pjm6 | btw cloudnull I tested your modifications of vpnaas and haven't lucky :\ | 15:11 |
*** sdake_ has quit IRC | 15:11 | |
*** alextricity25 has quit IRC | 15:12 | |
*** bryan_att has quit IRC | 15:12 | |
evrardjp | if you have openfiler, you plan to run cinder volume on it | 15:12 |
evrardjp | I guess | 15:12 |
evrardjp | I'm not aware of an openfiler backend | 15:12 |
*** jmccrory has quit IRC | 15:12 | |
evrardjp | for cinder volumes | 15:12 |
evrardjp | maybe nfs backend? | 15:12 |
evrardjp | <- not a cinder expert | 15:13 |
*** flwang has quit IRC | 15:13 | |
*** erikwilson has quit IRC | 15:13 | |
*** odyssey4me has quit IRC | 15:13 | |
*** kong has quit IRC | 15:13 | |
*** LiftedKilt has quit IRC | 15:13 | |
*** haasn has quit IRC | 15:13 | |
*** mhayden has quit IRC | 15:13 | |
pjm6 | evrardjp: i'm not too, but i'm thinking in use a iSCSI connector | 15:13 |
pjm6 | http://docs.openstack.org/developer/openstack-ansible/mitaka/install-guide/configure-cinder.html#configuring-cinder-to-use-lvm | 15:13 |
pjm6 | iscsi_ip_address | 15:13 |
pjm6 | LVM_iSCSI | 15:14 |
*** phalmos has quit IRC | 15:16 | |
*** pjm6_ has joined #openstack-ansible | 15:16 | |
*** bustersw_ has joined #openstack-ansible | 15:16 | |
*** mgoddard_ has joined #openstack-ansible | 15:16 | |
*** v1k0d3n has joined #openstack-ansible | 15:17 | |
*** odyssey4me has joined #openstack-ansible | 15:17 | |
*** erikmwilson has joined #openstack-ansible | 15:17 | |
*** electrofelix has quit IRC | 15:18 | |
evrardjp | pjm6 I thought that LVM_iSCSI used LVM on the cinder volume host and exports logical volumes to the nova/libvirt nodes through iscsi. | 15:18 |
evrardjp | not the opposite | 15:18 |
*** LiftedKilt has joined #openstack-ansible | 15:18 | |
*** kong has joined #openstack-ansible | 15:19 | |
evrardjp | but you could use nfs backend maybe | 15:19 |
*** schwicht_ has joined #openstack-ansible | 15:19 | |
*** sdake has joined #openstack-ansible | 15:20 | |
*** mgoddard has quit IRC | 15:20 | |
*** jayc has quit IRC | 15:20 | |
evrardjp | http://docs.openstack.org/liberty/config-reference/content/NFS-driver.html | 15:20 |
*** javeriak has joined #openstack-ansible | 15:20 | |
*** AndroUser2 has joined #openstack-ansible | 15:20 | |
*** haasn has joined #openstack-ansible | 15:21 | |
pjm6_ | yes evrardjp, i think is that | 15:21 |
pjm6_ | I was confusing :S | 15:21 |
*** rohanp has quit IRC | 15:21 | |
*** matt6434 has joined #openstack-ansible | 15:21 | |
pjm6_ | but yeah, that way of exporting from cinder to the nova/libvirt through iscsi dispends the use of storage node (after attributing) | 15:22 |
*** v1k0d3n has quit IRC | 15:22 | |
*** flwang has joined #openstack-ansible | 15:22 | |
*** v1k0d3n has joined #openstack-ansible | 15:22 | |
*** meteorfox has joined #openstack-ansible | 15:23 | |
*** etoews has joined #openstack-ansible | 15:23 | |
*** alextricity25 has joined #openstack-ansible | 15:23 | |
*** jlvillal_ has joined #openstack-ansible | 15:24 | |
*** pjm6 has quit IRC | 15:25 | |
*** schwicht has quit IRC | 15:25 | |
*** ametts has quit IRC | 15:25 | |
*** busterswt has quit IRC | 15:25 | |
*** jokeric has quit IRC | 15:25 | |
*** mikelk has quit IRC | 15:25 | |
*** jlvillal has quit IRC | 15:25 | |
*** falanx has quit IRC | 15:25 | |
*** mattoliverau has quit IRC | 15:25 | |
*** severion has quit IRC | 15:25 | |
*** grumpycatt has quit IRC | 15:25 | |
*** pabelanger has quit IRC | 15:25 | |
*** nhadzter has quit IRC | 15:25 | |
*** jlvillal_ is now known as jlvillal | 15:27 | |
*** jlvillal is now known as Guest81062 | 15:27 | |
*** mhayden has joined #openstack-ansible | 15:28 | |
*** falanx has joined #openstack-ansible | 15:29 | |
*** ametts has joined #openstack-ansible | 15:29 | |
*** jmccrory has joined #openstack-ansible | 15:30 | |
openstackgerrit | Robb Romans proposed openstack/openstack-ansible: Added horizon documentation section for the cinder https://review.openstack.org/306482 | 15:30 |
*** klamath has joined #openstack-ansible | 15:30 | |
*** pabelanger has joined #openstack-ansible | 15:30 | |
*** phalmos has joined #openstack-ansible | 15:30 | |
*** grumpycatt has joined #openstack-ansible | 15:30 | |
*** pabelanger has quit IRC | 15:30 | |
*** pabelanger has joined #openstack-ansible | 15:30 | |
*** Tebro has joined #openstack-ansible | 15:31 | |
*** nhadzter has joined #openstack-ansible | 15:31 | |
*** phalmos has quit IRC | 15:32 | |
openstackgerrit | Robb Romans proposed openstack/openstack-ansible: Added horizon documentation section for cinder https://review.openstack.org/306482 | 15:32 |
*** jayc has joined #openstack-ansible | 15:33 | |
*** Xu_Chao has quit IRC | 15:36 | |
*** evanstoner has joined #openstack-ansible | 15:37 | |
evrardjp | thanks rromans | 15:38 |
pjm6_ | well evrardjp i think i was thinking bad, that configuration will share an iscsi controller from storage node | 15:39 |
pjm6_ | (cinder) to the nova | 15:39 |
*** raddaoui has joined #openstack-ansible | 15:39 | |
rromans | evrardjp: welcome! | 15:39 |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Added horizon documentation section for cinder https://review.openstack.org/306482 | 15:40 |
*** bryan_att has joined #openstack-ansible | 15:40 | |
evrardjp | quick reedit to explain I'm not re-writing default horizon doc :D | 15:41 |
evrardjp | I think it's fine now, your text is really better | 15:41 |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Improved logging for memcached (OSA calling part) https://review.openstack.org/305165 | 15:42 |
*** phalmos has joined #openstack-ansible | 15:43 | |
*** skamithi14 has quit IRC | 15:44 | |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Improved documentation about LVM overwrite behaviour https://review.openstack.org/306436 | 15:45 |
*** skamithi13 has joined #openstack-ansible | 15:45 | |
*** shausy has quit IRC | 15:47 | |
*** sdake has quit IRC | 15:49 | |
*** javeriak has quit IRC | 15:50 | |
*** sdake has joined #openstack-ansible | 15:50 | |
*** serverascode has joined #openstack-ansible | 15:50 | |
*** git-harry has quit IRC | 15:50 | |
*** javeriak has joined #openstack-ansible | 15:54 | |
*** git-harry has joined #openstack-ansible | 15:54 | |
*** gfa_ is now known as gfa | 15:58 | |
mhayden | cloudnull: did you mention something about doing OSA on OnMetal at some point? i was just talking with antonym about that | 16:00 |
*** mgoddard__ has joined #openstack-ansible | 16:01 | |
*** git-harry has left #openstack-ansible | 16:01 | |
mhayden | i coulda sworn you had a repo somewhere | 16:01 |
palendae | mhayden: https://github.com/cloudnull/osa-multi-node-aio | 16:02 |
*** gfa is now known as gfa_ | 16:03 | |
*** gfa_ is now known as gfa | 16:03 | |
mhayden | antonym: ^^ | 16:04 |
cloudnull | palendae: +1 ^ thats it | 16:04 |
*** mgoddard_ has quit IRC | 16:04 | |
antonym | ah, interesting | 16:05 |
antonym | thanks, i'll poke around on it | 16:05 |
*** javeriak has quit IRC | 16:08 | |
*** bustersw_ has quit IRC | 16:08 | |
*** busterswt has joined #openstack-ansible | 16:08 | |
*** jayc has quit IRC | 16:10 | |
*** serverascode has quit IRC | 16:13 | |
*** woodard has joined #openstack-ansible | 16:15 | |
*** yarkot has quit IRC | 16:15 | |
*** yarkot1 has quit IRC | 16:17 | |
*** serverascode has joined #openstack-ansible | 16:17 | |
cloudnull | cool antonym PRs welcome :) | 16:19 |
antonym | yeah, i got an aio spun up on a single node, but sounds like this might be a better way to go if i want to play around with networking | 16:20 |
cloudnull | yes | 16:20 |
cloudnull | im using OM IO to build a 14 node cloud | 16:21 |
cloudnull | w/in KVM | 16:21 |
cloudnull | its using haproxy for the LB i'd like to integrate with something like vyos however i've not done that yet | 16:21 |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-pip_install: WIP/POC - Combine pip_install and pip_lockdown roles https://review.openstack.org/306529 | 16:23 |
antonym | cool, yeah, just wanting to get up to speed on the latest and hack on it some | 16:23 |
*** bryan_att has quit IRC | 16:23 | |
cloudnull | that'll get you there. its fake cloud :) | 16:23 |
cloudnull | automagically: +1 | 16:24 |
automagically | cloudnull and odyssey4me - https://review.openstack.org/306529 came from the chat that Jesse and I were having earlier about a better solution to the problem highlighted by https://review.openstack.org/#/c/306028/ | 16:24 |
antonym | perfect | 16:24 |
*** jayc has joined #openstack-ansible | 16:24 | |
*** bryan_att has joined #openstack-ansible | 16:25 | |
odyssey4me | pjm6_ if you're using an NFS, iSCSI or Ceph back-end for cinder, then all the volume service does is inform the hypervisor of the config it needs to use - therefore the service only needs to be running when a volume is created/deleted and when it's attached/detached to an instance. | 16:28 |
pjm6_ | yes odyssey4me, that was i was thinking (if not in mistake) | 16:28 |
pjm6_ | but my doubt is, the iSCSI back-end is of the cinder service, or could be an existent iSCSI that i have, for example, the iqn of the openfiler | 16:29 |
odyssey4me | pjm6_ yes you can use an existing iSCSI storage solution if openstack has a driver for it | 16:30 |
*** skamithi13 has quit IRC | 16:30 | |
pjm6_ | hmm I see | 16:30 |
pjm6_ | here in volume drivers | 16:30 |
pjm6_ | http://docs.openstack.org/liberty/config-reference/content/section_cinder.conf.html | 16:30 |
pjm6_ | i have several storages (but as i'm using a server for testing propuses) maybe the solution is attach a iSCSI volume to the cinder host | 16:31 |
pjm6_ | and then share that LVM_iSCSI to the nova, right odyssey4me? | 16:31 |
pjm6_ | sorry if i'm confusing | 16:31 |
*** jayc_ has joined #openstack-ansible | 16:32 | |
*** jayc_ has quit IRC | 16:33 | |
*** jayc has quit IRC | 16:34 | |
*** cfarquhar has quit IRC | 16:37 | |
*** AndroUser2 has quit IRC | 16:39 | |
*** Oku_OS is now known as Oku_OS-away | 16:41 | |
odyssey4me | pjm6_ lvm-backed cinder is not meant for production at all | 16:43 |
*** cfarquhar has joined #openstack-ansible | 16:43 | |
*** cfarquhar has quit IRC | 16:43 | |
*** cfarquhar has joined #openstack-ansible | 16:43 | |
*** stevelle has quit IRC | 16:43 | |
pjm6_ | really? :O so whats used in production? | 16:43 |
odyssey4me | pjm6_ you should be looking here: http://docs.openstack.org/liberty/config-reference/content/section_volume-drivers.html | 16:43 |
odyssey4me | there's a NetApp driver, seeing as you have a filer | 16:43 |
cloudnull | if anyone has time to eval https://review.openstack.org/#/c/304840/ i'd appreciate it , it'd be good to get that rolling for newton | 16:44 |
cloudnull | also odyssey4me had you seen https://review.openstack.org/#/c/304840/15/tox.ini ? | 16:44 |
cloudnull | I added tests since the last patch set | 16:44 |
automagically | Will take another look at the virtualenv work cloudnull | 16:45 |
pjm6_ | Yes odyssey4me i see that, but i didn't know the netapp driver | 16:45 |
cloudnull | thanks automagically | 16:45 |
pjm6_ | I will see that if do | 16:45 |
*** stevelle has joined #openstack-ansible | 16:45 | |
odyssey4me | cloudnull tests for the cli tooling? heh, that's funny | 16:45 |
cloudnull | yup | 16:45 |
cloudnull | https://review.openstack.org/#/c/304840/15/scripts/openstack-ansible.sh@34 | 16:45 |
odyssey4me | I haven't had a chance yet and am behind on my objectives for the day | 16:45 |
*** tiagogomes has quit IRC | 16:46 | |
automagically | I’m behind on my objectives for the day/week/month/year, but its cloudnull :) | 16:46 |
cloudnull | thanks automagically :) | 16:46 |
automagically | And I can’t wait to move to Ansible 2+ | 16:46 |
pjm6_ | NetApp unified driver is a generic driver for multiple existing storages? | 16:46 |
pjm6_ | odyssey4me: | 16:46 |
cloudnull | so this tool came from my 2.x work | 16:47 |
automagically | Thanks to 1.9 I’m still stuck dealing with this: https://bugs.launchpad.net/openstack-ansible/+bug/1556975 | 16:47 |
openstack | Launchpad bug 1556975 in openstack-ansible "Keystone playbook fails on remote venv checksum when accessed through a proxy" [Wishlist,Confirmed] | 16:47 |
odyssey4me | pjm6_ it's a driver for NetApps, if you have a NetApp | 16:47 |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-pip_install: WIP/POC - Combine pip_install and pip_lockdown roles https://review.openstack.org/306529 | 16:47 |
cloudnull | i was testing osa w/ and switching ansible versions to ensure it works in 1.9.x | 2.1.x | 16:47 |
odyssey4me | pjm6_ if you have a NetApp, or more than one NetApp, then you setup the config as described in http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-cinder.html#configuring-cinder-to-use-a-netapp-appliance as an example... NetApp has their own documentation for the setup of the NetApp storage itself | 16:48 |
pjm6_ | yeah, thanks odyssey4me. I will see | 16:48 |
pjm6_ | in the future I will use a storage (dell equallogic) | 16:48 |
cloudnull | automagically: I wonder if thats good to go in 2.1.x(devel) | 16:49 |
pjm6_ | but for testing, as I don't have other storage for testing, was trying to use another that used iscsi | 16:49 |
odyssey4me | pjm6_ if you're not using cinder with the lvm driver, then you can switch cinder-volume to run in containers on your infra hosts and you can have multiple back-ends per cinder-volume service | 16:49 |
cloudnull | yes it seems so | 16:50 |
cloudnull | hadn't read the whole bug | 16:50 |
cloudnull | so # openstack-ansible -rtv git/devel ... | 16:50 |
*** gfa is now known as gfa_ | 16:50 | |
*** gfa_ is now known as gfa | 16:50 | |
*** tiagogomes has joined #openstack-ansible | 16:51 | |
odyssey4me | automagically hmm, so the issue for that bug doesn't pertain to rpc-repo specifically but instead your general upstream repo ? | 16:52 |
odyssey4me | ie you have a repo for multiple regions, but each region accesses it through a proxy? | 16:52 |
*** stevelle has quit IRC | 16:52 | |
*** jayc has joined #openstack-ansible | 16:52 | |
pjm6_ | odyssey4me: thanks :) will try to research more about it | 16:53 |
*** stevelle has joined #openstack-ansible | 16:53 | |
pjm6_ | odyssey4me: (sorry for the questions) imagine that I have a storage node (bare-metal) | 16:53 |
pjm6_ | and I connect the /cinder-volumes | 16:53 |
pjm6_ | to an storage via iSCSI | 16:53 |
cloudnull | automagically: http://cdn.pasteraw.com/3udz2rczsc5egcs3lex2qpvf7ugcm87 that'd at least get you out from dealing with the proxy mess. | 16:53 |
pjm6_ | its possible to use that volume in the cinder for providing volumes ?? | 16:54 |
*** rohanp has joined #openstack-ansible | 16:54 | |
odyssey4me | pjm6_ for testing you may just wish to use the NFS driver | 16:55 |
odyssey4me | set up an NFS server, then point cinder at it | 16:55 |
odyssey4me | pjm6_ yes, that's possible - but then that server is a single point of failure | 16:55 |
odyssey4me | pjm6_ the point of using networked storage and not a server is that networked storage typically can be upgraded and maintained without any down time - a server is not like that | 16:56 |
pjm6_ | yes that true | 16:57 |
pjm6_ | and then its better use the backend of a storage for better results and avoid SPOF? | 16:57 |
odyssey4me | pjm6_ yes, for production you really, really want to avoid any SPOF - and especially anything that may inhibit your ability to upgrade without causing data plane down time | 16:58 |
odyssey4me | pjm6_ so ideally you should have a shared storage back-ends for nova (instance OS/ephemeral disks), glance (images) and cinder (volumes) | 16:59 |
odyssey4me | automagically if we switch up the use of the uri module and rather use http://docs.ansible.com/ansible/get_url_module.html does it work around the problem? | 17:00 |
odyssey4me | it'll be more cumbersome, but if it solves the problem then I think we should do that until we're using Ansible 2.x | 17:01 |
*** permalac has joined #openstack-ansible | 17:01 | |
*** Guest81062 is now known as jlvillal | 17:04 | |
*** daneyon has joined #openstack-ansible | 17:05 | |
*** daneyon_ has joined #openstack-ansible | 17:06 | |
*** tiagogomes has quit IRC | 17:06 | |
*** tiagogomes has joined #openstack-ansible | 17:09 | |
*** mgoddard__ has quit IRC | 17:10 | |
*** mgoddard has joined #openstack-ansible | 17:10 | |
*** daneyon has quit IRC | 17:11 | |
pjm6_ | yes odyssey4me | 17:13 |
pjm6_ | but something that are confusing, is why there is not a generic driver for iSCSI ? | 17:13 |
pjm6_ | that would not be able to manage almost every | 17:14 |
pjm6_ | storages? | 17:14 |
odyssey4me | pjm6_ because no-one has developed one :p | 17:14 |
pjm6_ | odyssey4me: ok, fair enough xD | 17:14 |
pjm6_ | btw: between an NFS share or an Dell EqualLogic | 17:16 |
pjm6_ | what would be better? If we use a driver of a specific storage would have more advantage (i think) | 17:16 |
pjm6_ | well i have to run, back later, and thanks :) | 17:17 |
*** Mudpuppy_ has joined #openstack-ansible | 17:17 | |
odyssey4me | on consideration - iSCSI is a connection protocol, whereas the driver do more than just connect | 17:17 |
odyssey4me | they connect to the service API to do things like snapshot, create volumes, etc - iSCSI can't do those things | 17:18 |
odyssey4me | the specific storage drivers are designed to take advantage of the API's available in the storage units which do those things | 17:18 |
pjm6_ | hmm yeah that make senses | 17:19 |
pjm6_ | and do you know any operating system that had driver in cinder? As far as I saw only exists hardware | 17:19 |
*** git-harry has joined #openstack-ansible | 17:20 | |
odyssey4me | if you're using a server to simulate a storage environment, then I'd suggest using the NFS/ZFS driver | 17:20 |
pjm6_ | Ok thanks odyssey4me :) | 17:21 |
*** daneyon has joined #openstack-ansible | 17:21 | |
odyssey4me | just setup a server with an NFS export for each service, then consume those | 17:21 |
*** stevelle_ has joined #openstack-ansible | 17:21 | |
*** b3rnard0 is now known as b3rnard0_away | 17:22 | |
pjm6_ | and when moving to the storage, I will just use the default =) | 17:22 |
pjm6_ | gonna try that | 17:22 |
*** raddaoui has quit IRC | 17:22 | |
*** jmccrory has quit IRC | 17:22 | |
*** mhayden has quit IRC | 17:22 | |
odyssey4me | yeah, when going for production use the driver that most fits with the real storage back-end | 17:22 |
pjm6_ | the problem would be to validate, because without hardware i can "simulate" if my configuration is working | 17:23 |
*** v1k0d3n_ has joined #openstack-ansible | 17:24 | |
odyssey4me | pjm6_ some of the storage vendors have virtual appliances which you can use, and some have evaluation versions so that you can use them for a limited time | 17:24 |
odyssey4me | I would suggest speaking to your storage vendor to find out whether there are any options like that | 17:24 |
pjm6_ | hmmm nice :D will see | 17:25 |
*** woodard has quit IRC | 17:25 | |
pjm6_ | its Dell | 17:25 |
pjm6_ | I will contact them | 17:25 |
*** andymccr_ has joined #openstack-ansible | 17:26 | |
*** woodard has joined #openstack-ansible | 17:26 | |
*** sdake_ has joined #openstack-ansible | 17:26 | |
*** daneyon_ has quit IRC | 17:26 | |
*** permalac has quit IRC | 17:26 | |
*** stevelle has quit IRC | 17:26 | |
*** jayc has quit IRC | 17:26 | |
*** cfarquhar has quit IRC | 17:26 | |
*** bryan_att has quit IRC | 17:26 | |
*** serverascode has quit IRC | 17:26 | |
*** stevelle_ is now known as stevelle | 17:26 | |
*** phalmos_ has joined #openstack-ansible | 17:27 | |
*** phalmos has quit IRC | 17:27 | |
*** ametts has quit IRC | 17:27 | |
*** etoews has quit IRC | 17:27 | |
*** v1k0d3n has quit IRC | 17:27 | |
*** h1nch has quit IRC | 17:27 | |
*** Mudpuppy has quit IRC | 17:27 | |
*** markvoelker has quit IRC | 17:27 | |
*** openstackgerrit has quit IRC | 17:27 | |
*** andymccr has quit IRC | 17:27 | |
*** marcoamorales has quit IRC | 17:27 | |
*** sdake has quit IRC | 17:29 | |
pjm6_ | cya odyssey4me, and once again thanks very much :) | 17:29 |
*** mhayden has joined #openstack-ansible | 17:30 | |
*** pjm6_ has quit IRC | 17:30 | |
automagically | odyssey4me and I have been talking about OSA cross-project needs lately so I decided to start this: https://etherpad.openstack.org/p/openstack-ansible-cross-project | 17:30 |
automagically | Consider it a dumping ground for items that our community wants to see discussed in the weekly Cross Project meeting: https://wiki.openstack.org/wiki/Meetings/CrossProjectMeeting | 17:31 |
odyssey4me | automagically thanks for taking the initiative | 17:32 |
automagically | Eh, just making a list ;) | 17:32 |
*** Bjoern_ is now known as Bjoern_zZzZzZzZ | 17:35 | |
*** markvoelker has joined #openstack-ansible | 17:35 | |
*** jayc has joined #openstack-ansible | 17:36 | |
*** etoews has joined #openstack-ansible | 17:36 | |
*** jmccrory has joined #openstack-ansible | 17:37 | |
*** tiagogomes has quit IRC | 17:37 | |
*** yarkot has joined #openstack-ansible | 17:37 | |
*** sdake_ has quit IRC | 17:38 | |
*** cfarquhar has joined #openstack-ansible | 17:39 | |
*** cfarquhar has quit IRC | 17:39 | |
*** cfarquhar has joined #openstack-ansible | 17:39 | |
*** raddaoui has joined #openstack-ansible | 17:42 | |
*** sdake has joined #openstack-ansible | 17:43 | |
*** eil397 has joined #openstack-ansible | 17:44 | |
*** ametts has joined #openstack-ansible | 17:44 | |
*** daneyon has quit IRC | 17:44 | |
*** openstackgerrit has joined #openstack-ansible | 17:48 | |
*** Bjoern_zZzZzZzZ is now known as Bjoern_ | 17:50 | |
*** yarkot1 has joined #openstack-ansible | 17:51 | |
*** serverascode has joined #openstack-ansible | 17:54 | |
*** javeriak has joined #openstack-ansible | 17:56 | |
*** raginbajin has quit IRC | 17:57 | |
*** javeriak_ has joined #openstack-ansible | 17:59 | |
*** javeriak has quit IRC | 18:01 | |
*** jayc has quit IRC | 18:01 | |
*** bryan_att_ has joined #openstack-ansible | 18:01 | |
*** raginbajin has joined #openstack-ansible | 18:02 | |
*** bryan_att_ is now known as bryan_att | 18:04 | |
*** KLevenstein has joined #openstack-ansible | 18:05 | |
*** zhangjn has quit IRC | 18:05 | |
*** czunker has quit IRC | 18:06 | |
*** h1nch has joined #openstack-ansible | 18:08 | |
*** zhangjn has joined #openstack-ansible | 18:12 | |
openstackgerrit | Merged openstack/openstack-ansible-galera_server: Reorganize test playbooks https://review.openstack.org/303090 | 18:12 |
automagically | Woot ^ Only took ~20 rechecks | 18:16 |
openstackgerrit | Robb Romans proposed openstack/openstack-ansible: Added horizon documentation section for cinder https://review.openstack.org/306482 | 18:16 |
jmccrory | haha | 18:17 |
odyssey4me | jmccrory automagically heh, yeah - now that https://review.openstack.org/306298 is merged other patches are going in much more reliably | 18:17 |
odyssey4me | afk for a bit | 18:18 |
jmccrory | yeah it's great, empty queue for the role finally | 18:18 |
cloudnull | hahaha | 18:18 |
cloudnull | time to make moar! | 18:18 |
jmccrory | heh | 18:19 |
cloudnull | so tempest on the gate is mad with the ssl changes, 12 physical nodes get along just fine. | 18:19 |
* cloudnull may have to dig into some of the test assumptions | 18:19 | |
*** gfa is now known as gfa_ | 18:19 | |
*** marcoamorales has joined #openstack-ansible | 18:20 | |
*** zhangjn has quit IRC | 18:21 | |
openstackgerrit | Merged openstack/openstack-ansible: ensure mysql defaults file is sourced https://review.openstack.org/306450 | 18:21 |
*** asettle has joined #openstack-ansible | 18:23 | |
*** eil397 has quit IRC | 18:26 | |
automagically | jmccrory: Would appreciate your thoughts on https://review.openstack.org/#/c/306529/ if you have the time | 18:26 |
automagically | And I bet Kevin would appreciate you taking a gander at https://review.openstack.org/#/c/304840/ as well | 18:27 |
jmccrory | sure, already liking that description | 18:27 |
*** asettle has quit IRC | 18:27 | |
*** rETROpunK has quit IRC | 18:35 | |
*** basilAB has quit IRC | 18:35 | |
*** basilAB has joined #openstack-ansible | 18:36 | |
*** rETROpunK has joined #openstack-ansible | 18:37 | |
openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing https://review.openstack.org/304887 | 18:43 |
*** sdake_ has joined #openstack-ansible | 18:49 | |
*** pjm6 has joined #openstack-ansible | 18:51 | |
*** sdake has quit IRC | 18:52 | |
*** b3rnard0_away is now known as b3rnard0 | 18:53 | |
*** schwicht_ has quit IRC | 18:56 | |
*** ametts has quit IRC | 18:56 | |
stevelle | any ideas for why all requests to the service end up with 404s? https://review.openstack.org/#/c/304887/ | 18:58 |
stevelle | either apache access or gnocchi service (when mod_wsgi mode is disabled) logs the 404 so it is reaching the host. I can verify by running this by hand. | 18:59 |
*** javeriak_ has quit IRC | 19:02 | |
*** dolphm has quit IRC | 19:03 | |
stevelle | no other info in the logs except some keystone middleware warnings | 19:03 |
*** dolphm has joined #openstack-ansible | 19:03 | |
*** hybridpolio has joined #openstack-ansible | 19:07 | |
jmccrory | stevelle: get a 200 if you hit /v1/status ? | 19:08 |
jmccrory | http://gnocchi.xyz/rest.html#status | 19:09 |
stevelle | jmccrory: every url is 404 (unless I skip sending a token, which gives 401) | 19:09 |
*** sdake_ has quit IRC | 19:10 | |
odyssey4me | FYI Ubuntu Xenial experimental jobs - proposed review: https://review.openstack.org/306564 | 19:10 |
stevelle | all of / and /v1 and /v1/status and ... | 19:10 |
jmccrory | hmm strange, i'll try a local deploy in a bit | 19:10 |
odyssey4me | also FYI prposed review for higher timeout for the roles: https://review.openstack.org/306573 | 19:10 |
stevelle | jmccrory: I'm running an integrated (see ext/bootstrap.sh) now to verify that is working still but it did last I checked. | 19:11 |
*** Mudpuppy_ is now known as Mudpuppy | 19:12 | |
*** sdake has joined #openstack-ansible | 19:12 | |
*** mgoddard has quit IRC | 19:14 | |
*** keedya has joined #openstack-ansible | 19:15 | |
*** asettle has joined #openstack-ansible | 19:18 | |
jmccrory | stevelle: oh, your api-paste is missing a few things https://github.com/openstack/gnocchi/blob/master/etc/gnocchi/api-paste.ini | 19:18 |
*** v1k0d3n__ has joined #openstack-ansible | 19:19 | |
*** Mudpuppy_ has joined #openstack-ansible | 19:19 | |
*** markvoelker_ has joined #openstack-ansible | 19:19 | |
prometheanfire | osa should probably use the new ansible | 19:21 |
prometheanfire | for sec reasons | 19:22 |
*** stevelle_ has joined #openstack-ansible | 19:22 | |
prometheanfire | 1.9.6 was released | 19:22 |
*** raddaoui_ has joined #openstack-ansible | 19:22 | |
*** asettle has quit IRC | 19:22 | |
*** serverascode has quit IRC | 19:22 | |
*** raddaoui has quit IRC | 19:22 | |
*** yarkot has quit IRC | 19:22 | |
*** stevelle has quit IRC | 19:22 | |
*** v1k0d3n_ has quit IRC | 19:22 | |
*** Mudpuppy has quit IRC | 19:22 | |
*** stevelle_ is now known as stevelle | 19:22 | |
*** markvoelker has quit IRC | 19:22 | |
*** raddaoui_ is now known as raddaoui | 19:23 | |
prometheanfire | CVE-2016-3096 | 19:23 |
*** Mudpuppy_ is now known as Mudpuppy | 19:23 | |
*** schwicht has joined #openstack-ansible | 19:24 | |
*** serverascode has joined #openstack-ansible | 19:25 | |
odyssey4me | prometheanfire I'm not sure that it matters directly to OSA, especially considering that deployers can choose their own versions easily - but thanks for the pointer. We tried updating to 1.9.5 but it was busted. | 19:27 |
prometheanfire | ah, boo | 19:27 |
prometheanfire | I thought we hard coded to 1.9.4 | 19:27 |
odyssey4me | prometheanfire all it takes is one env var to change that: https://github.com/openstack/openstack-ansible/blob/master/scripts/bootstrap-ansible.sh#L25 | 19:28 |
*** woodard has quit IRC | 19:28 | |
prometheanfire | ok | 19:28 |
*** woodard has joined #openstack-ansible | 19:29 | |
*** schwicht has quit IRC | 19:29 | |
openstackgerrit | Matthew Thode proposed openstack/openstack-ansible: update ansible version to 1.9.6 for CVE-2016-3096 https://review.openstack.org/306609 | 19:33 |
prometheanfire | odyssey4me: well, guess we can see if it works at least | 19:33 |
odyssey4me | prometheanfire ok, I'll update that patch - I was just writing a release note | 19:34 |
prometheanfire | update that patch? | 19:34 |
odyssey4me | yeah, it needs a release note too - and I'm half-way done writing one | 19:34 |
prometheanfire | ah | 19:34 |
prometheanfire | ya, haven't submitted osa code in a while :P | 19:35 |
*** mhayden has quit IRC | 19:35 | |
*** schwicht has joined #openstack-ansible | 19:36 | |
*** mhayden has joined #openstack-ansible | 19:37 | |
odyssey4me | prometheanfire do you have a mitre link for the CVE? | 19:37 |
prometheanfire | sec | 19:38 |
prometheanfire | no, not here either https://bugzilla.redhat.com/show_bug.cgi?id=1322925 | 19:38 |
openstack | bugzilla.redhat.com bug 1322925 in vulnerability "CVE-2016-3096 ansible: Code execution vulnerability in lxc_container" [High,Assigned] - Assigned to security-response-team | 19:38 |
odyssey4me | yeah, that's the only decent one I could fine | 19:39 |
odyssey4me | how annoying | 19:39 |
prometheanfire | just the placeholder | 19:39 |
*** ametts has joined #openstack-ansible | 19:42 | |
*** KLevenstein has quit IRC | 19:47 | |
*** KLevenstein has joined #openstack-ansible | 19:47 | |
prometheanfire | well, that failed quick | 19:51 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update ansible version to 1.9.6 for CVE-2016-3096 https://review.openstack.org/306609 | 19:52 |
openstackgerrit | Amy Marrich (spotz) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host https://review.openstack.org/304840 | 19:52 |
*** schwicht has quit IRC | 19:56 | |
*** cfarquhar has quit IRC | 20:03 | |
*** ChrisBenson1 has quit IRC | 20:04 | |
*** ChrisBenson has joined #openstack-ansible | 20:05 | |
*** cfarquhar has joined #openstack-ansible | 20:06 | |
*** cfarquhar has quit IRC | 20:06 | |
*** cfarquhar has joined #openstack-ansible | 20:06 | |
*** hybridpolio has quit IRC | 20:09 | |
*** evanstoner has quit IRC | 20:15 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 20:17 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 20:17 | |
*** hybridpollo has joined #openstack-ansible | 20:18 | |
*** automagically has quit IRC | 20:20 | |
*** basilAB has quit IRC | 20:22 | |
*** schwicht has joined #openstack-ansible | 20:26 | |
*** basilAB has joined #openstack-ansible | 20:29 | |
*** rohanp has quit IRC | 20:32 | |
cloudnull | we should probably rev forward however that CVE does not effect us. | 20:45 |
Bjoern_ | cloudnull: Strange I expected that the openstack/venvs directory is bind mounted to each container but it seems like it's local to each container | 20:45 |
*** johnmilton has quit IRC | 20:46 | |
cloudnull | nope no bind mount | 20:46 |
Bjoern_ | whys that ? Different packages inside the same venvs ? | 20:46 |
*** Bjoern_ is now known as BjoernT | 20:46 | |
cloudnull | could / can be | 20:46 |
cloudnull | IE plumgrid packages in a neutron linuxbridge agent container | 20:47 |
cloudnull | but not neutron server | 20:47 |
BjoernT | tok | 20:47 |
BjoernT | ok | 20:47 |
cloudnull | same is with the extra cinder volume drivers, etc | 20:47 |
cloudnull | however every venv is crated on the repo server and then downloaded to the target location | 20:48 |
cloudnull | and those extra bits get installed within the venv based on the requirements | 20:48 |
BjoernT | yeah we could have implemented all venvs have the same packages across all container types and then bind mount. But it does not matter that much | 20:48 |
cloudnull | i looked at doing it as a layer using unioning fs however there was almost no performance improvement | 20:49 |
cloudnull | and being that the /openstac/venvs dir will now have versioned venvs it gives deployers a rather simple rollback plan to a known functional state, regardless of the extra bits that may be added . | 20:51 |
cloudnull | all that assumes theres no DB migration that would impact roll back. | 20:51 |
cloudnull | but thats a larger openstack problem than our project would care to tackle alone | 20:51 |
* cloudnull my 2cents | 20:52 | |
*** Mudpuppy has quit IRC | 20:57 | |
*** ametts has quit IRC | 20:58 | |
*** admin0 has joined #openstack-ansible | 20:59 | |
*** admin0 has quit IRC | 21:10 | |
*** admin0 has joined #openstack-ansible | 21:10 | |
mhayden | spotz: https://blueprints.launchpad.net/openstack-ansible/+spec/install-guide https://review.openstack.org/#/c/241037/ | 21:10 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-ironic: Changed the swift storage URL retrieval command https://review.openstack.org/306632 | 21:14 |
cloudnull | any cores around to give that a spin? -- odyssey4me andymccr_ ? | 21:15 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Add `ironic_swift_temp_url_secret_key` the secrets https://review.openstack.org/306633 | 21:21 |
*** retreved_ has quit IRC | 21:21 | |
*** b3rnard0 is now known as b3rnard0_away | 21:25 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-ironic: Changed the swift storage URL retrieval command https://review.openstack.org/306632 | 21:28 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: updated ironic playbook inclusion for tftp network https://review.openstack.org/303659 | 21:32 |
*** KLevenstein has quit IRC | 21:37 | |
*** Brew has quit IRC | 21:39 | |
*** thorst has quit IRC | 21:43 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 21:43 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 21:43 | |
*** thorst has joined #openstack-ansible | 21:43 | |
*** thorst_ has joined #openstack-ansible | 21:46 | |
*** schwicht has quit IRC | 21:47 | |
*** thorst has quit IRC | 21:48 | |
*** spotz is now known as spotz_zzz | 21:50 | |
*** thorst_ has quit IRC | 21:50 | |
*** busterswt has quit IRC | 21:56 | |
*** eil397 has joined #openstack-ansible | 21:57 | |
*** raginbajin has quit IRC | 22:00 | |
*** thorst has joined #openstack-ansible | 22:00 | |
*** b3rnard0_away is now known as b3rnard0 | 22:02 | |
*** thorst has quit IRC | 22:05 | |
*** raginbajin has joined #openstack-ansible | 22:05 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 22:05 | |
*** thorst has joined #openstack-ansible | 22:06 | |
*** phalmos_ has quit IRC | 22:07 | |
*** thorst has quit IRC | 22:14 | |
*** weezS has quit IRC | 22:18 | |
*** falanx has quit IRC | 22:20 | |
*** weezS has joined #openstack-ansible | 22:20 | |
*** schwicht has joined #openstack-ansible | 22:22 | |
*** sonus has quit IRC | 22:22 | |
*** sonus has joined #openstack-ansible | 22:22 | |
*** odyssey4me has quit IRC | 22:22 | |
*** dalees has quit IRC | 22:23 | |
*** dalees has joined #openstack-ansible | 22:26 | |
*** odyssey4me has joined #openstack-ansible | 22:27 | |
*** falanx has joined #openstack-ansible | 22:34 | |
*** thorst has joined #openstack-ansible | 22:38 | |
*** schwicht has quit IRC | 22:41 | |
*** thorst has quit IRC | 22:47 | |
*** falanx has quit IRC | 22:50 | |
*** falanx has joined #openstack-ansible | 23:07 | |
*** falanx has quit IRC | 23:14 | |
*** pjm6 has quit IRC | 23:16 | |
*** BjoernT has quit IRC | 23:17 | |
*** admin0 has quit IRC | 23:19 | |
*** woodard has quit IRC | 23:23 | |
*** falanx has joined #openstack-ansible | 23:31 | |
*** weezS has quit IRC | 23:32 | |
*** markvoelker_ has quit IRC | 23:37 | |
*** asettle has joined #openstack-ansible | 23:41 | |
*** asettle has quit IRC | 23:43 | |
*** thorst has joined #openstack-ansible | 23:44 | |
*** busterswt has joined #openstack-ansible | 23:46 | |
*** eil397 has left #openstack-ansible | 23:46 | |
*** busterswt has quit IRC | 23:50 | |
*** thorst has quit IRC | 23:52 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!