| *** schwicht has quit IRC | 00:07 | |
| *** jamielennox is now known as jamielennox|away | 00:07 | |
| *** pjm6 has joined #openstack-ansible | 00:08 | |
| *** weezS has quit IRC | 00:10 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing https://review.openstack.org/304887 | 00:13 |
|---|---|---|
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Initial convergence testing https://review.openstack.org/304887 | 00:14 |
| *** markvoelker has joined #openstack-ansible | 00:19 | |
| *** asettle has quit IRC | 00:27 | |
| *** asettle has joined #openstack-ansible | 00:27 | |
| openstackgerrit | Merged openstack/openstack-ansible: Decrease MariaDB wait timeout https://review.openstack.org/307826 | 00:27 |
| openstackgerrit | Merged openstack/openstack-ansible: DOCS: Update aio docs for Mitaka https://review.openstack.org/308397 | 00:28 |
| openstackgerrit | Merged openstack/openstack-ansible: Docs: Add pip configuration removal to AIO re-deployment process https://review.openstack.org/308737 | 00:32 |
| *** bbmbx has quit IRC | 00:36 | |
| *** pjm6 has quit IRC | 00:36 | |
| *** itlinux has quit IRC | 00:43 | |
| *** itlinux has joined #openstack-ansible | 00:54 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update Ironic playbook inclusion for tftp network https://review.openstack.org/303659 | 00:58 |
| *** iceyao has joined #openstack-ansible | 01:01 | |
| *** schwicht has joined #openstack-ansible | 01:03 | |
| *** can8dnSix has quit IRC | 01:06 | |
| *** schwicht has quit IRC | 01:08 | |
| *** itlinux has quit IRC | 01:13 | |
| *** iceyao_ has joined #openstack-ansible | 01:14 | |
| *** iceyao__ has joined #openstack-ansible | 01:16 | |
| *** iceyao has quit IRC | 01:17 | |
| *** iceyao_ has quit IRC | 01:18 | |
| *** sdake has quit IRC | 01:20 | |
| *** itlinux has joined #openstack-ansible | 01:25 | |
| *** itlinux has quit IRC | 01:28 | |
| *** asettle has quit IRC | 01:39 | |
| *** asettle has joined #openstack-ansible | 01:39 | |
| *** jamielennox|away is now known as jamielennox | 01:44 | |
| *** schwicht has joined #openstack-ansible | 01:48 | |
| *** weshay_food has quit IRC | 02:11 | |
| *** sdake has joined #openstack-ansible | 02:16 | |
| *** sdake has quit IRC | 02:20 | |
| *** sdake has joined #openstack-ansible | 02:20 | |
| *** itlinux has joined #openstack-ansible | 02:20 | |
| *** sdake_ has joined #openstack-ansible | 02:26 | |
| *** sdake has quit IRC | 02:29 | |
| *** jamielennox is now known as jamielennox|away | 02:32 | |
| *** markvoelker has quit IRC | 02:35 | |
| *** fishcried has joined #openstack-ansible | 02:37 | |
| *** fishcried has quit IRC | 02:43 | |
| *** kiranv_ has joined #openstack-ansible | 02:48 | |
| itlinux | hello all | 02:52 |
| itlinux | I get this error can someone help out? | 02:52 |
| itlinux | http://paste.openstack.org/show/495076/ | 02:53 |
| itlinux | what could the issue here? Thanks | 02:53 |
| *** schwicht has quit IRC | 02:59 | |
| *** persia has quit IRC | 03:02 | |
| itlinux | anyone!! | 03:19 |
| itlinux | the only thing is that all of us are on the same boat here.. .. what goes around comes around I guess! | 03:21 |
| *** iceyao has joined #openstack-ansible | 03:28 | |
| cloudnull | itlinux: most folks are AFK right now and may be traveling seeing that the summit is next week | 03:29 |
| cloudnull | do you still have the error handy? | 03:29 |
| prometheanfire | cloudnull: lost backlog? | 03:29 |
| itlinux | yes I do cloudnull | 03:29 |
| cloudnull | i have the link | 03:29 |
| cloudnull | but the error is above that | 03:29 |
| prometheanfire | ah | 03:29 |
| itlinux | yes | 03:29 |
| cloudnull | also I'm assuming you're deploying an all in one? | 03:30 |
| itlinux | I thought it was related to cpus so I added them.. | 03:30 |
| itlinux | yes aio | 03:30 |
| *** iceyao__ has quit IRC | 03:31 | |
| *** persia has joined #openstack-ansible | 03:32 | |
| cloudnull | that print out is just a set of diagnostic information on just about everything we could think to look at. | 03:32 |
| itlinux | I am not sure why it fails then.. | 03:33 |
| itlinux | let me add more data to that doc.. one se | 03:33 |
| cloudnull | there should be something above that | 03:33 |
| itlinux | http://paste.openstack.org/show/495078/ | 03:35 |
| cloudnull | can you ssh to the keystone container (or any container for that matter? ) | 03:35 |
| itlinux | here is the major output | 03:35 |
| *** markvoelker has joined #openstack-ansible | 03:36 | |
| itlinux | I do not see to have docker anything | 03:36 |
| cloudnull | no docker, | 03:37 |
| cloudnull | lxc containers | 03:37 |
| itlinux | according to the docs just 3 command really to do the installation so I have an ubuntu box with all updates .. | 03:37 |
| itlinux | ok one sec | 03:37 |
| cloudnull | is it ubuntu 14.04 ? | 03:37 |
| itlinux | there is no lxc | 03:37 |
| cloudnull | do you have the output above "FATAL: all hosts have already failed -- aborting" ? | 03:38 |
| itlinux | installing lxc now.. shall see | 03:38 |
| itlinux | yes one sec | 03:38 |
| itlinux | here is one 172.29.236.100> ESTABLISH CONNECTION FOR USER: root | 03:39 |
| itlinux | <172.29.236.100> REMOTE_MODULE modprobe name=scsi_dh | 03:39 |
| itlinux | <172.29.236.100> EXEC ssh -C -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=120 172.29.236.100 /bin/sh -c 'LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python' | 03:39 |
| itlinux | failed: [aio1] => (item=scsi_dh) => {"changed": false, "failed": true, "item": "scsi_dh", "name": "scsi_dh", "params": "", "state": "present"} | 03:39 |
| itlinux | msg: modprobe: FATAL: Module scsi_dh not found in directory /lib/modules/4.4.0-21-generic | 03:39 |
| itlinux | or I can put in paste if you wnat.. | 03:39 |
| cloudnull | ah. | 03:39 |
| cloudnull | that works | 03:39 |
| itlinux | looks like modprobe: FATAL: Module scsi_dh not found in directory /lib/modules/4.4.0-21-generic | 03:40 |
| cloudnull | scsi_dh is not found when using kernel > 4.4 | 03:40 |
| itlinux | is the other error.. | 03:40 |
| cloudnull | what release are you deploying ? | 03:40 |
| itlinux | ubuntu 16 and mitaka | 03:40 |
| *** asettle has quit IRC | 03:40 | |
| *** markvoelker has quit IRC | 03:41 | |
| cloudnull | we dont support ubuntu 16.04 at this time | 03:41 |
| itlinux | ok.. I will try the 14 version thanks.. I and i will install lxc | 03:41 |
| itlinux | shall see.. thanks | 03:41 |
| itlinux | I let you know cloudnull | 03:41 |
| cloudnull | the systemd init system is incompatible in addition to package names/kernel modules have been removed / renamed | 03:42 |
| cloudnull | 1604 support is coming though | 03:42 |
| cloudnull | its just not there yet | 03:42 |
| itlinux | k | 03:42 |
| itlinux | the problem I have seen the same issue on the 14.04 | 03:42 |
| cloudnull | as for installing lxc the deployment bits will take care of that | 03:42 |
| *** asettle has joined #openstack-ansible | 03:42 | |
| cloudnull | https://github.com/openstack/openstack-ansible-openstack_hosts/commit/4fe07928889e203b15bea908711f647a74284bff | 03:42 |
| itlinux | so i wonder what it could be.. | 03:42 |
| cloudnull | that patch fixes that kernel issue | 03:42 |
| cloudnull | but its in master right now | 03:43 |
| cloudnull | i dont think the fix has been backported to mitaka | 03:43 |
| itlinux | ok | 03:43 |
| cloudnull | scsi_dh was removed in 4.4 | 03:43 |
| itlinux | so should I try this patch with the 4.4 or just go back to 14.04? | 03:44 |
| cloudnull | you can pull that in and try again | 03:44 |
| itlinux | here is the issue I had with the 14.04 let me see if I can find the paste agin... | 03:44 |
| cloudnull | if youre just kicking the tires, I'd recommend deploying ubuntu 14.04 w/ kernel 4.2 using stable/mitaka | 03:45 |
| cloudnull | if you're wanting to test our Master (newton) you can deploy ubuntu 14.04 w/ any kernel you like | 03:45 |
| cloudnull | my general workflow is to kick a 14.04 vm, install git and tmux, start tmux, clone openstack ansible and run the ./scripts/gate-check-commit.sh | 03:47 |
| cloudnull | that will deploy a full AIO w/ images and networks built for it as well as test the environment | 03:47 |
| itlinux | I have a 14.04 version shell see.. | 03:49 |
| itlinux | running that now | 03:49 |
| itlinux | let see if that works.. | 03:50 |
| itlinux | cool | 03:50 |
| itlinux | here is where it fails.. | 03:51 |
| itlinux | let me put this on paste | 03:51 |
| itlinux | http://paste.openstack.org/show/495079/ | 03:52 |
| itlinux | still failing on the same part this is ubuntu 14.04 | 03:52 |
| itlinux | the lxc-ls | 03:53 |
| itlinux | root@ubuntu:/opt/openstack-ansible# | 03:53 |
| itlinux | is empty | 03:53 |
| coolj_ | itlinux: looks like you have a syntax error | 04:01 |
| coolj_ | ERROR: Syntax Error while loading YAML script, /etc/openstack_deploy/user_conf_files.yml | 04:01 |
| itlinux | ok let me see if I can copy that there.. | 04:01 |
| coolj_ | i think it's complaining that you have something before the --- at the top | 04:02 |
| itlinux | I just removed it.. let me try again.. | 04:03 |
| *** ozialiendoze has quit IRC | 04:05 | |
| itlinux | still dies at the same place.. | 04:06 |
| itlinux | - [ XEN Server Information ] ----------------------------------------- | 04:06 |
| itlinux | ---------------------------------------------------------------------- | 04:06 |
| itlinux | No xenstore Information | 04:06 |
| itlinux | ++ info_block 'Error Info - 265' 0 | 04:06 |
| itlinux | ++ echo ---------------------------------------------------------------------- | 04:06 |
| itlinux | ---------------------------------------------------------------------- | 04:06 |
| itlinux | ++ print_info 'Error Info - 265' 0 | 04:06 |
| itlinux | ++ PROC_NAME='- [ Error Info - 265 0 ] -' | 04:06 |
| itlinux | ++ printf '\n%s%s\n' '- [ Error Info - 265 0 ] -' -------------------------------------------- | 04:06 |
| itlinux | - [ Error Info - 265 0 ] | 04:06 |
| *** ozialien has joined #openstack-ansible | 04:06 | |
| *** thorst has quit IRC | 04:08 | |
| *** thorst has joined #openstack-ansible | 04:08 | |
| *** yatin has joined #openstack-ansible | 04:09 | |
| *** ozialien has quit IRC | 04:10 | |
| *** ozialien10 has joined #openstack-ansible | 04:11 | |
| *** yatin_ has joined #openstack-ansible | 04:12 | |
| *** b3rnard0 is now known as b3rnard0_away | 04:12 | |
| *** yatin has quit IRC | 04:15 | |
| *** thorst has quit IRC | 04:16 | |
| coolj_ | itlinux: i am not familiar with deploying osa on xen and i gotta run, good luck on your adventure! | 04:17 |
| itlinux | it's on a virtualbox | 04:17 |
| itlinux | so no osa or xen.. | 04:17 |
| itlinux | :) | 04:17 |
| *** ChrisBenson has quit IRC | 04:25 | |
| *** ChrisBenson has joined #openstack-ansible | 04:25 | |
| itlinux | so after i snapshot back and run the bootstrap ansible after that I got ./scripts/gate-check-commit.sh this and it's running the installation now | 04:28 |
| itlinux | it went further than before | 04:28 |
| itlinux | I spoke too soon.. | 04:28 |
| itlinux | failed agian same place.. | 04:28 |
| *** ozialien10 has quit IRC | 04:28 | |
| *** weezS has joined #openstack-ansible | 04:31 | |
| *** jayc_ has joined #openstack-ansible | 04:36 | |
| *** markvoelker has joined #openstack-ansible | 04:37 | |
| *** asettle has quit IRC | 04:41 | |
| *** markvoelker has quit IRC | 04:42 | |
| *** asettle has joined #openstack-ansible | 04:51 | |
| *** asettle has quit IRC | 04:55 | |
| *** saneax_AFK is now known as saneax | 04:56 | |
| *** jayc_ is now known as jayc | 04:58 | |
| *** fishcried has joined #openstack-ansible | 05:00 | |
| itlinux | here is one more error | 05:02 |
| itlinux | stderr: | 05:02 |
| itlinux | File /etc/apparmor.d/lxc-openstack not found, skipping... | 05:02 |
| itlinux | file (/sys/class/net/lxcbr0/bridge/bridge_id) is absent, cannot continue | 05:02 |
| itlinux | this is on 14.04 | 05:02 |
| itlinux | TASK: [lxc_hosts | Download lxc cache(s)] | 05:02 |
| itlinux | shall see.. | 05:02 |
| *** shausy has joined #openstack-ansible | 05:06 | |
| *** hybridpollo has quit IRC | 05:08 | |
| *** wangqwsh has quit IRC | 05:10 | |
| *** chhavi_ has joined #openstack-ansible | 05:10 | |
| *** thorst has joined #openstack-ansible | 05:15 | |
| *** john51 has joined #openstack-ansible | 05:16 | |
| itlinux | yahoo! I passed that poin! | 05:16 |
| *** john51_ has quit IRC | 05:18 | |
| *** thorst has quit IRC | 05:22 | |
| *** yatin has joined #openstack-ansible | 05:22 | |
| *** admin0 has joined #openstack-ansible | 05:25 | |
| *** yatin_ has quit IRC | 05:25 | |
| *** chhavi_ has quit IRC | 05:26 | |
| *** chhavi_ has joined #openstack-ansible | 05:26 | |
| *** admin0 has quit IRC | 05:28 | |
| *** yatin has quit IRC | 05:33 | |
| *** bbmbx has joined #openstack-ansible | 05:50 | |
| *** persia has quit IRC | 06:00 | |
| *** tlbr has quit IRC | 06:05 | |
| *** tlbr has joined #openstack-ansible | 06:05 | |
| *** sdake_ is now known as sdake | 06:08 | |
| *** intr1nsic has quit IRC | 06:10 | |
| *** persia has joined #openstack-ansible | 06:11 | |
| *** intr1nsic has joined #openstack-ansible | 06:13 | |
| *** kiranv_ has quit IRC | 06:15 | |
| *** weezS has quit IRC | 06:18 | |
| itlinux | hi I see this now lxc-info --name aio1_horizon_container-8ec2db65 | 06:19 |
| itlinux | Name: aio1_horizon_container-8ec2db65 | 06:19 |
| itlinux | State: RUNNING | 06:19 |
| itlinux | PID: 29167 | 06:19 |
| itlinux | IP: 10.255.255.2 | 06:19 |
| itlinux | IP: 172.29.237.63 | 06:19 |
| itlinux | CPU use: 3.59 seconds | 06:19 |
| itlinux | BlkIO use: 12.79 MiB | 06:19 |
| itlinux | Memory use: 17.62 MiB | 06:19 |
| itlinux | KMem use: 0 bytes | 06:19 |
| itlinux | Link: 8ec2db65_eth0 | 06:19 |
| itlinux | TX bytes: 4.92 KiB | 06:19 |
| itlinux | RX bytes: 49.67 KiB | 06:19 |
| itlinux | Total bytes: 54.59 KiB | 06:19 |
| itlinux | Link: 8ec2db65_eth1 | 06:19 |
| itlinux | TX bytes: 40.15 KiB | 06:19 |
| itlinux | RX bytes: 151.52 KiB | 06:19 |
| itlinux | Total bytes: 191.67 KiB | 06:19 |
| itlinux | but the curl to either ip does not work.. | 06:19 |
| itlinux | Connection refused | 06:19 |
| itlinux | suggestions? | 06:19 |
| itlinux | thanks | 06:19 |
| *** bbmbx has quit IRC | 06:20 | |
| *** thorst has joined #openstack-ansible | 06:20 | |
| *** thorst has quit IRC | 06:27 | |
| *** javeriak has joined #openstack-ansible | 06:29 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update sources-branch-updater to handle release note copying https://review.openstack.org/309179 | 06:31 |
| *** mikelk has joined #openstack-ansible | 06:33 | |
| *** sdake has quit IRC | 06:35 | |
| *** sdake has joined #openstack-ansible | 06:42 | |
| *** itlinux has quit IRC | 06:42 | |
| *** sdake has quit IRC | 06:46 | |
| *** intr1nsic has quit IRC | 06:47 | |
| *** intr1nsic has joined #openstack-ansible | 06:49 | |
| *** yatin has joined #openstack-ansible | 06:54 | |
| *** yatin_ has joined #openstack-ansible | 06:55 | |
| *** yatin has quit IRC | 06:59 | |
| *** intr1nsic has quit IRC | 06:59 | |
| *** yatin has joined #openstack-ansible | 06:59 | |
| *** yatin_ has quit IRC | 07:00 | |
| *** sacharya has quit IRC | 07:01 | |
| *** admin0 has joined #openstack-ansible | 07:03 | |
| *** karimb has joined #openstack-ansible | 07:05 | |
| admin0 | good morning all | 07:10 |
| *** intr1nsic has joined #openstack-ansible | 07:10 | |
| *** thorst has joined #openstack-ansible | 07:24 | |
| *** Andrew_jedi has joined #openstack-ansible | 07:25 | |
| Andrew_jedi | Hello folks, keystone has v3 admin endpoint and v2 internal and public endpoint? Is this right? | 07:26 |
| -openstackstatus- NOTICE: Logs are failing to be uploaded causing jobs to be marked as UNSTABLE. We are working on repairing the log filesystem and will update when ready. Please do not recheck before then. | 07:27 | |
| *** ChanServ changes topic to "Logs are failing to be uploaded causing jobs to be marked as UNSTABLE. We are working on repairing the log filesystem and will update when ready. Please do not recheck before then." | 07:27 | |
| *** yatin has quit IRC | 07:30 | |
| *** Oku_OS-away is now known as Oku_OS | 07:31 | |
| *** thorst has quit IRC | 07:31 | |
| *** furlongm_ has joined #openstack-ansible | 07:32 | |
| *** furlongm has quit IRC | 07:33 | |
| *** admin0_ has joined #openstack-ansible | 07:38 | |
| *** admin0 has quit IRC | 07:39 | |
| *** admin0_ is now known as admin0 | 07:39 | |
| *** jayc has quit IRC | 07:42 | |
| *** Andrew_jedi has quit IRC | 07:44 | |
| evrardjp | good morning | 07:53 |
| admin0 | good morning | 07:57 |
| *** fishcried has quit IRC | 07:57 | |
| admin0 | evrardjp: i am going to try the ssl patch again .. are these settings enough? https://gist.github.com/a1git/a9a0a0c7db8f40c9302705a0f22047de | 07:58 |
| admin0 | expected output: horizon + all public endpoints behind SSL | 07:58 |
| evrardjp | I'm currently testing with and without keystone_public_endpoint: "{{ keystone_service_publicuri }}" | 07:58 |
| admin0 | ok | 07:58 |
| admin0 | then i will wait for your test results :) | 07:58 |
| *** iceyao has quit IRC | 07:58 | |
| evrardjp | I think without should be fine | 07:58 |
| evrardjp | but I had some glitches with clients | 07:59 |
| evrardjp | and I had some redirections error with | 07:59 |
| evrardjp | but I'm the only one to have that apparently | 07:59 |
| evrardjp | is your certificate a perfectly valid certificate? | 07:59 |
| admin0 | yep | 08:00 |
| admin0 | a wildcard cert that is valid for the next 2 years | 08:00 |
| evrardjp | beurk wildcard | 08:00 |
| *** iceyao has joined #openstack-ansible | 08:00 | |
| evrardjp | :p | 08:00 |
| admin0 | what is that word :D ? | 08:00 |
| evrardjp | nothing :p | 08:01 |
| *** sacharya has joined #openstack-ansible | 08:01 | |
| admin0 | say like cloud101.admin0.com .. and cloud101int.admin0.com .. where the int is mapped to a private ip and cloud is mapped to the public one | 08:01 |
| admin0 | plus with one card, you can do c101 c101int .. <insert anything in there> :D | 08:02 |
| evrardjp | I understand what it is :D | 08:02 |
| *** yatin has joined #openstack-ansible | 08:02 | |
| admin0 | :D | 08:03 |
| admin0 | yeah .. silly me | 08:03 |
| *** sacharya has quit IRC | 08:06 | |
| *** javeriak has quit IRC | 08:09 | |
| *** Andrew_jedi has joined #openstack-ansible | 08:22 | |
| *** yatin has quit IRC | 08:22 | |
| *** thorst has joined #openstack-ansible | 08:29 | |
| *** yatin has joined #openstack-ansible | 08:30 | |
| *** Andrew_jedi has quit IRC | 08:32 | |
| *** Andrew_jedi has joined #openstack-ansible | 08:33 | |
| *** thorst has quit IRC | 08:36 | |
| *** fishcried has joined #openstack-ansible | 08:39 | |
| joker_ | odyssey4me : I am getting following error on galera container. It can not install mysql, memcache and pycrypto. https://gist.github.com/celikmustafa89/b9ef6599364ef223887cebd996c8c547 | 08:46 |
| admin0 | evrardjp: done done ? | 08:46 |
| admin0 | which config should i try ? | 08:46 |
| admin0 | with or without the endpoint ? | 08:46 |
| evrardjp | it's still building | 08:46 |
| evrardjp | it takes time | 08:46 |
| admin0 | ok | 08:46 |
| evrardjp | it just finished the creation of containers right now | 08:47 |
| evrardjp | the rest should be fast | 08:47 |
| evrardjp | except the repo ofc | 08:47 |
| *** persia has quit IRC | 08:48 | |
| joker_ | odyssey4me : I installed mysql,memcache and pycrypto using easy_install by attaching the galera container. It passes the following error and but now getting this one https://gist.github.com/celikmustafa89/5c219e7a1abca1dc95e50f0dcf10fd2a . It cannot restart the mysql. Can you help me? thanx | 08:49 |
| *** fishcried has quit IRC | 08:53 | |
| *** persia has joined #openstack-ansible | 08:53 | |
| odyssey4me | Andrew_jedi nope - all endpoints are v3 in the catalog, but v2 is available in the container, it's just not advertised in the catalog | 08:53 |
| odyssey4me | joker_ the first issue you hit is the most important - working around it the way you've done doesn't help matters | 08:54 |
| odyssey4me | joker_ the http 404 errors while collecting the python packages tells me that your LB is directing requests to a dead repo server | 08:55 |
| odyssey4me | joker_ what release are you trying to install? | 08:55 |
| odyssey4me | branch/tag? | 08:55 |
| Andrew_jedi | odyssey4me: Ahhh, so this is correct? http://paste.openstack.org/show/495096/ | 08:56 |
| odyssey4me | Andrew_jedi for a new environment, no | 08:57 |
| admin0 | Andrew_jedi: this is what I get for a new one — https://gist.github.com/a1git/a56c850f9a9141c44807b666f90b2b30 | 08:57 |
| admin0 | Andrew_jedi: https://gist.githubusercontent.com/a1git/a56c850f9a9141c44807b666f90b2b30/raw/9700a77260bd0a6a1be8c59901f26b7f8dd696f8/gistfile1.txt | 08:57 |
| odyssey4me | for an upgraded environment the endpoints are not changed/edited - so it could be anything you like and you'd have to update them manually | 08:57 |
| Andrew_jedi | odyssey4me: All i did was adding 3 more compute nodes to a kilo setup | 08:57 |
| odyssey4me | Andrew_jedi do you happen to be using Kilo, or RPC? | 08:58 |
| admin0 | kilo ^^ | 08:58 |
| *** persia has quit IRC | 08:58 | |
| joker_ | odyssey4me mitaka | 08:59 |
| odyssey4me | I vaguely recall that we might have done that mix back in Kilo - but it's been a long time since I have installed Kilo (over a year now I think) | 08:59 |
| Andrew_jedi | admin0 odyssey4me : # git branch * kilo | 08:59 |
| joker_ | odyssey4me stable/mitaka | 08:59 |
| odyssey4me | joker_ ok, if you want to test Mitaka today, then the best way to achieve the right results is to checkout the head of the branch, not the 13.0.0 tag - 13.0.0 was a pre-release based on RC code, and the current head of the branch will be the 13.0.1 tag and our proper Mitaka release | 09:00 |
| odyssey4me | joker_ so if you checkout stable/mitaka you shouldn't be hitting any issues except those that are related to your locale | 09:01 |
| *** tiagogomes has joined #openstack-ansible | 09:01 | |
| odyssey4me | Andrew_jedi yeah, actually the admin endpoint being v3 makes sense for Kilo | 09:03 |
| odyssey4me | in Liberty we shifted to all v3 endpoints | 09:03 |
| odyssey4me | but Kilo was still a mix | 09:03 |
| odyssey4me | OpenStack didn't support v3 endpoints for everything in Kilo - some services broke. | 09:03 |
| Andrew_jedi | odyssey4me: Ahh, that's the case...thanks! | 09:04 |
| *** electrofelix has joined #openstack-ansible | 09:05 | |
| odyssey4me | mattt hughsaunders would you mind reviewing these doc backports? https://review.openstack.org/309224 / https://review.openstack.org/309223 | 09:05 |
| Andrew_jedi | odyssey4me: I was having a flapping agents/services issue, i thought it could be related to different endpoint versions | 09:05 |
| odyssey4me | Andrew_jedi nope, that's more likely due to time being off, or the rabbitmq cluster having a wobble | 09:06 |
| Andrew_jedi | odyssey4me: Yeah, i already investigated rabbitmq, but i haven't checked time, good point | 09:08 |
| mattt | odyssey4me: i'll review once gate jobs are operational again | 09:10 |
| odyssey4me | gate jobs are broken? | 09:10 |
| mattt | log issues which are causing jobs to be marked UNSTABLE | 09:11 |
| mattt | haven't seen an update to say it's fixed :( | 09:11 |
| *** persia has joined #openstack-ansible | 09:12 | |
| mattt | actually i can hit logs on a job now, maybe it's back | 09:12 |
| odyssey4me | mattt ah, I see the -infra backscroll... corrupt disks again :/ | 09:14 |
| odyssey4me | it's amazing how often this happens in a Cloud :p | 09:14 |
| *** yatin has quit IRC | 09:15 | |
| *** javeriak has joined #openstack-ansible | 09:22 | |
| *** xek has joined #openstack-ansible | 09:23 | |
| *** openstackstatus has quit IRC | 09:24 | |
| *** openstackstatus has joined #openstack-ansible | 09:24 | |
| *** ChanServ sets mode: +v openstackstatus | 09:24 | |
| *** furlongm_ has quit IRC | 09:28 | |
| *** furlongm has joined #openstack-ansible | 09:29 | |
| *** tiagogomes has quit IRC | 09:30 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Docs: Cleanup page to configure to docs standards https://review.openstack.org/309316 | 09:31 |
| *** thorst has joined #openstack-ansible | 09:36 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: [WIP] Use tempest for testing https://review.openstack.org/301566 | 09:39 |
| *** thorst has quit IRC | 09:42 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: [WIP] Use tempest for testing https://review.openstack.org/301566 | 09:43 |
| *** spotz_zzz is now known as spotz | 09:43 | |
| *** tiagogomes has joined #openstack-ansible | 09:43 | |
| *** karimb has quit IRC | 09:47 | |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts: Adding Vagrantfile for local developer testing https://review.openstack.org/309130 | 09:50 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Docs: Removed multiple warnings appearing on first make html https://review.openstack.org/309327 | 09:52 |
| spotz | peeks in before heading back to bed for an hour | 09:56 |
| *** zhangjn has quit IRC | 10:02 | |
| *** sacharya has joined #openstack-ansible | 10:03 | |
| *** intr1nsic has quit IRC | 10:04 | |
| *** zhangjn has joined #openstack-ansible | 10:07 | |
| *** sacharya has quit IRC | 10:07 | |
| *** pjm6 has joined #openstack-ansible | 10:09 | |
| pjm6 | mornings | 10:10 |
| *** karimb has joined #openstack-ansible | 10:15 | |
| *** krotscheck_dcm is now known as krotscheck | 10:19 | |
| *** intr1nsic has joined #openstack-ansible | 10:24 | |
| *** yatin has joined #openstack-ansible | 10:27 | |
| *** yatin has quit IRC | 10:31 | |
| admin0 | \o | 10:32 |
| *** Andrew_jedi has quit IRC | 10:33 | |
| *** Andrew_jedi has joined #openstack-ansible | 10:34 | |
| *** zhangjn has quit IRC | 10:36 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: [WIP] Use tempest for testing https://review.openstack.org/301566 | 10:39 |
| *** thorst has joined #openstack-ansible | 10:40 | |
| *** iceyao has quit IRC | 10:42 | |
| *** zhangjn has joined #openstack-ansible | 10:42 | |
| *** thorst has quit IRC | 10:46 | |
| *** thorst has joined #openstack-ansible | 10:46 | |
| -openstackstatus- NOTICE: Log server has been repaired and jobs are stable again. If necessary please recheck changes that have 'UNSTABLE' results. | 10:50 | |
| *** mikelk has quit IRC | 10:51 | |
| *** Andrew_jedi has quit IRC | 10:53 | |
| *** Andrew_jedi has joined #openstack-ansible | 10:57 | |
| *** johnmilton has joined #openstack-ansible | 11:00 | |
| *** jiteka has quit IRC | 11:09 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: [WIP] Use tempest for testing https://review.openstack.org/301566 | 11:15 |
| *** thorst has quit IRC | 11:21 | |
| odyssey4me | git-harry FYI https://review.openstack.org/309170 | 11:22 |
| *** thorst has joined #openstack-ansible | 11:22 | |
| git-harry | odyssey4me: does Liberty introduce any new containers? | 11:23 |
| odyssey4me | git-harry I don't think so. | 11:24 |
| odyssey4me | It's been a while since I looked though, so I can't be sure. | 11:24 |
| git-harry | odyssey4me: okay, that should be fine then. I assume that patch is to cater for Juno -> Kilo upgrades that were done prior to a similar patch being added to Kilo. | 11:25 |
| git-harry | That patch didn't work because it was run before the new containers had been created. | 11:25 |
| git-harry | Which I had to fix in https://review.openstack.org/#/c/302333/ | 11:26 |
| odyssey4me | git-harry yep, I expect so - I just wanted to make sure you were aware of it as it's an upgrade patch which hasn't been included in the testing until now | 11:29 |
| odyssey4me | and the last one that did that broke things | 11:29 |
| *** yatin has joined #openstack-ansible | 11:29 | |
| *** thorst has quit IRC | 11:30 | |
| *** yatin_ has joined #openstack-ansible | 11:31 | |
| git-harry | Okay, ta. Thankfully our Kilo to Liberty testing should pick this up if it causes a problem when we next bump the SHA. | 11:32 |
| *** yatin has quit IRC | 11:33 | |
| *** yatin_ has quit IRC | 11:37 | |
| *** markvoelker has joined #openstack-ansible | 11:42 | |
| *** Oku_OS is now known as Oku_OS-away | 11:43 | |
| odyssey4me | git-harry automated testing for the win! | 11:46 |
| *** jayc has joined #openstack-ansible | 11:46 | |
| *** thorst has joined #openstack-ansible | 11:47 | |
| openstackgerrit | Merged openstack/openstack-ansible: Remove old MariaDB repos during upgrades https://review.openstack.org/309170 | 11:47 |
| *** markvoelker has quit IRC | 11:47 | |
| *** retreved has joined #openstack-ansible | 11:49 | |
| *** javeriak has quit IRC | 11:56 | |
| *** weshay has joined #openstack-ansible | 11:57 | |
| *** jayc has quit IRC | 11:57 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_gnocchi: Initial convergence testing https://review.openstack.org/304887 | 11:58 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: Use tempest for testing https://review.openstack.org/301566 | 12:00 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: Use tempest for testing https://review.openstack.org/301566 | 12:01 |
| mattt | finally got the tempest functional test working | 12:01 |
| *** pjm6 has quit IRC | 12:05 | |
| *** flwang has quit IRC | 12:07 | |
| *** spotz is now known as spotz_zzz | 12:07 | |
| *** pjm6 has joined #openstack-ansible | 12:07 | |
| *** psilvad has joined #openstack-ansible | 12:10 | |
| *** chhavi_ has quit IRC | 12:10 | |
| *** asettle has joined #openstack-ansible | 12:12 | |
| *** asettle has quit IRC | 12:13 | |
| *** pjm6 has quit IRC | 12:16 | |
| *** pjm6 has joined #openstack-ansible | 12:18 | |
| odyssey4me | mattt w00t! | 12:19 |
| mattt | odyssey4me: was the default infra iptables rules that were tripping me up :P | 12:20 |
| odyssey4me | mattt ah yes, forgot about those | 12:20 |
| *** psilvad has quit IRC | 12:21 | |
| *** psilvad_ has joined #openstack-ansible | 12:21 | |
| *** psilvad_ is now known as psilvad | 12:21 | |
| *** chhavi_ has joined #openstack-ansible | 12:23 | |
| *** karimb has quit IRC | 12:23 | |
| *** psilvad has quit IRC | 12:26 | |
| *** karimb has joined #openstack-ansible | 12:28 | |
| *** markvoelker has joined #openstack-ansible | 12:28 | |
| mhayden | buenos dias | 12:29 |
| *** Oku_OS-away is now known as Oku_OS | 12:30 | |
| *** intr1nsic has quit IRC | 12:30 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Change keystone admin/internal insecure flags https://review.openstack.org/309155 | 12:32 |
| *** pjm6 has quit IRC | 12:33 | |
| admin0 | cloudnull: around ? | 12:35 |
| *** flwang has joined #openstack-ansible | 12:35 | |
| *** Andrew_jedi has quit IRC | 12:37 | |
| admin0 | evrardjp: odyssey4me : https://gist.github.com/a1git/f3f1c684d1c8e62b1e9575fbf69e1955 — where am I going wrong ? | 12:38 |
| evrardjp | admin0 when setting keystone_public_endpoint: "{{ keystone_service_publicuri }}" that's the issue I got yesterday | 12:40 |
| admin0 | evrardjp: i will retry with removing that variable, and then running haproxy and keystone playbooks and horuzin playbooks | 12:40 |
| evrardjp | you could | 12:41 |
| evrardjp | you'll have other issues I think | 12:41 |
| admin0 | then i will wait for a solution :D | 12:42 |
| admin0 | no idea what that solution is .. | 12:42 |
| admin0 | so its either keystone fail or horizon fail for SSL .. not setting that fails keystone .. | 12:43 |
| *** Andrew_jedi has joined #openstack-ansible | 12:43 | |
| evrardjp | the issue is mainly in the client when this variable is not set, I think | 12:44 |
| evrardjp | but I'd like to have time to focus on the issue | 12:44 |
| evrardjp | and really find what's causing this | 12:44 |
| *** mkrish004c has joined #openstack-ansible | 12:45 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: Use tempest for testing https://review.openstack.org/301566 | 12:47 |
| *** psilvad has joined #openstack-ansible | 12:47 | |
| evrardjp | admin0 don't wait | 12:47 |
| mkrish004c | Hi Guys i am trying to set ceph via OSA. I am not able to integrarte with ceilometer, is there any module for it ? ceilometer.compute.pollsters.disk libvirtError: internal error: missing storage backend for network files using rbd protocol. | 12:47 |
| evrardjp | try again without the variable and tell me what you hit | 12:47 |
| evrardjp | :D | 12:47 |
| evrardjp | cloudnull has its system working perfectly fine | 12:47 |
| evrardjp | there is something we need to reproduce | 12:48 |
| mkrish004c | ERROR ceilometer.compute.virt.inspector [-] Unable to load the hypervisor inspector: No module named config | 12:48 |
| mkrish004c | after i upgrade ceilometer client, got this above error | 12:48 |
| admin0 | evrardjp: will try:) | 12:51 |
| * admin0 is on it | 12:51 | |
| evrardjp | thanks admin0 | 12:53 |
| mhayden | mattt: would you want to backport this? https://review.openstack.org/#/c/304096/ | 12:57 |
| *** fxpester has joined #openstack-ansible | 12:58 | |
| *** busterswt has joined #openstack-ansible | 12:58 | |
| mattt | mhayden: sure | 12:58 |
| mhayden | i mashed the easy button in gerrit but it looks like there are issues merging it with mitaka | 12:58 |
| mattt | mhayden: did you test it? bjoern left some feedback in that review but i didn't quite understand it | 12:59 |
| mhayden | i haven't yet -- but i was confused by the feedback too | 12:59 |
| mattt | do you want ot validate it before we backport? | 12:59 |
| *** mkrish004c has quit IRC | 12:59 | |
| odyssey4me | mkrish004c I don't know - you may have to verify that it's even possible in general. If it is and you can find out how, then we can help you configure it to make it work. :) | 13:00 |
| *** Andrew_jedi has quit IRC | 13:00 | |
| odyssey4me | mhayden you're likely missing another patch that needs backporting first | 13:00 |
| odyssey4me | mhayden welcome to why stable branches should be stable ;) | 13:01 |
| odyssey4me | backporting is a PITA | 13:01 |
| odyssey4me | I would guess that with the security role you'll probably want to pro-actively backport absolutely everything that merges - but you'll have to figure out a backport policy that you're comfortable with. | 13:02 |
| *** Andrew_jedi has joined #openstack-ansible | 13:02 | |
| mhayden | makes sense | 13:02 |
| mhayden | i'm also trying to figure out the next goal there | 13:03 |
| mhayden | Ubuntu 16.04 support is key | 13:03 |
| *** karimb has quit IRC | 13:03 | |
| mhayden | but the RHEL 7 stig is available now, and it would be good to rebase on that (and add centos 7 support along the way) | 13:03 |
| odyssey4me | Personally I'm going for a rather general notion of backporting proactively is ok until milestone 1 - after that the backports are on request only. Once the next release is issued, the n-2 release goes into at the very least a critical patch only phase | 13:03 |
| odyssey4me | mhayden time for you to recruit some help | 13:04 |
| odyssey4me | maybe you can find someone who wants to work on the role with you and who wants to use the role for RHEL systems? | 13:04 |
| mhayden | hopefully so! | 13:05 |
| mhayden | perhaps my talk next week will bring out some folks | 13:05 |
| odyssey4me | the project in general can assist with the Ubuntu 16.04 support because we all care about that for all integrated roles - it's a key deliverable for this cycle | 13:05 |
| *** shausy has quit IRC | 13:05 | |
| odyssey4me | mhayden maybe pabelanger can rustle up a contact for us | 13:06 |
| odyssey4me | mhayden check out the bottom of https://etherpad.openstack.org/p/openstack-ansible-multi-os-support and perhaps reach out to a few folks from there | 13:07 |
| mhayden | OOOOOOOOORLY | 13:07 |
| fxpester | "Failed to connect to git.openstack.org port 443: Connection timed out" - openstack failed ? openstack-ansible can`t get apt_package_pinning | 13:07 |
| odyssey4me | mhayden I'm thinking that perhaps permalac and oneswig might be good people to bring in - the security role is nice and easy to work with so it'll be a good introductory place to work with OSA | 13:08 |
| mhayden | alrighty | 13:08 |
| mhayden | odyssey4me: i'll add that to my list --today is devoted to slides :| | 13:08 |
| odyssey4me | fxpester oh dear, give it a few mins and retry - I would guess that OpenStack-Infra's having a bad day | 13:08 |
| odyssey4me | mhayden oh yes, and ggillies_ was keen to help - as I recall he's in Aus | 13:09 |
| *** iceyao has joined #openstack-ansible | 13:10 | |
| fxpester | world is too fast novadays... within this 5 mins ansible can become some oldfashion tool, like Perl :D | 13:11 |
| *** jayc has joined #openstack-ansible | 13:12 | |
| pabelanger | odyssey4me: mhayden: when is the talk? | 13:12 |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible-os_swift: Remove XFS filesystem from the daily mlocate cron job https://review.openstack.org/308036 | 13:12 |
| mhayden | Tuesday @ 11:15 | 13:12 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_glance: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309150 | 13:13 |
| odyssey4me | mhayden a schedule link or it won't be attended :p | 13:18 |
| *** klamath has joined #openstack-ansible | 13:23 | |
| *** mkrish1712 has joined #openstack-ansible | 13:26 | |
| *** Andrew_jedi has quit IRC | 13:27 | |
| *** galstrom_zzz is now known as galstrom | 13:27 | |
| odyssey4me | mattt I see that tempest is as flaky as always :/ is that tempest run happening in serial? that would likely affect the outcome fairly dramatically - we have had to do serial for the integrated gate | 13:27 |
| mhayden | pabelanger / odyssey4me: https://www.openstack.org/summit/austin-2016/summit-schedule/events/7043 | 13:27 |
| odyssey4me | mattt I noticed a while back that devstack does integrated tests with a concurrency of 4 | 13:28 |
| *** woodard has joined #openstack-ansible | 13:32 | |
| *** woodard has quit IRC | 13:33 | |
| *** pjm6 has joined #openstack-ansible | 13:34 | |
| openstackgerrit | Merged openstack/openstack-ansible: Update sources-branch-updater to handle release note copying https://review.openstack.org/309179 | 13:36 |
| *** woodard_ has joined #openstack-ansible | 13:37 | |
| *** joker_ has quit IRC | 13:38 | |
| *** Mudpuppy has joined #openstack-ansible | 13:39 | |
| *** pjm6 has quit IRC | 13:40 | |
| fxpester | trying to setup AIO, but have not so much free space, how to reduce it ? - 80GB free disk space on the root partition | 13:40 |
| odyssey4me | fxpester hmm, our wording is a bit wrong - you ned around 60GB free space | 13:41 |
| odyssey4me | as a minimum | 13:41 |
| fxpester | I have 4Gb | 13:41 |
| odyssey4me | ah I see that we said the absolute minimum is 60gb free | 13:41 |
| fxpester | always ok with devstack | 13:42 |
| odyssey4me | fxpester heh, that's definitely not enough | 13:42 |
| odyssey4me | fxpester the AIO does a mini production like environment, including a fully HA configuration and clusters for rabbit, mariadb, keystone, etc | 13:42 |
| odyssey4me | devstack does none of that | 13:42 |
| odyssey4me | fxpester so if you can I'd advise adding a secondary disk as is covered by the AIO quickstart | 13:43 |
| mattt | odyssey4me: i assumed gate-check-commit.sh used serial by default, but perhaps that's not correct | 13:43 |
| odyssey4me | mattt run-tempest does, so gate-check-commit inherits it: https://github.com/openstack/openstack-ansible/blob/master/scripts/run-tempest.sh#L26 | 13:44 |
| odyssey4me | but you're executing the tempest script yourself, so you'll likely need to add --serial as an option to the command | 13:45 |
| fxpester | hm, yes... maybe it`s one fat component ? is it possible to disable it completely to save space ? or maybe old release like Juno can solve it ? | 13:45 |
| *** mkrish1712 has quit IRC | 13:46 | |
| odyssey4me | fxpester heh, I wouldn't even bother trying Juno - it's long EOL | 13:46 |
| odyssey4me | fxpester there are ways to cut it down - you'd have to cut the containers out so that you only use venvs, you'll have to not deploy horizon because if the same host runs keystone and horizon they will both fight for ownership of the apache config, you'll also have to ensure that the AIO's affinities are all the default of 1 instead of some being 3 - and you may wish to not deploy some of the services to also reduce | 13:48 |
| odyssey4me | space | 13:48 |
| odyssey4me | even then, not sure you'll get down to 4GB | 13:48 |
| odyssey4me | fxpester what do you actually need as a minimal setup? | 13:49 |
| fxpester | I was expecting "you can set ceilometer=OFF" and you`re fine :D | 13:49 |
| admin0 | evrardjp: ran haproxy and horizin playbooks .. no changes | 13:49 |
| admin0 | so reverting the change | 13:49 |
| evrardjp | 503? | 13:50 |
| admin0 | yes | 13:50 |
| fxpester | I trying to figure out is openstack-ansible project is sane and should I use it in production or not :) | 13:50 |
| evrardjp | admin0 this is maybe normal | 13:51 |
| odyssey4me | fxpester OSA is made for production environments first, and 4GB disks are not useful for production | 13:51 |
| odyssey4me | except perhaps for a RAMdisk :p | 13:51 |
| admin0 | well, expectation is both should work :D | 13:51 |
| admin0 | sorry normal is both must work | 13:51 |
| fxpester | odyssey4me: yes, but LAB first, and my lab is intel nuc with single ssd :( everyday problems with space | 13:52 |
| odyssey4me | fxpester add an external drive to it via USB | 13:52 |
| *** rromans has joined #openstack-ansible | 13:52 | |
| odyssey4me | fxpester you can even get a 64GB USB thumb drive and try that - although I think we make quite a few assumptions centred around a real disk being used | 13:53 |
| fxpester | odyssey4me: in background I started setup via cloud-init... it now reporting me with - serial8250: too much work for irq4 | 13:54 |
| fxpester | ubuntu14.04 | 13:54 |
| fxpester | on x86.trystack.org | 13:55 |
| odyssey4me | I've never seen that error. Maybe someone else has thoughts? | 13:55 |
| odyssey4me | many of us use cloud instances for testing on a very regular basis, and all our code tests use the same, so I don't know what's going on in your instance to cause that | 13:56 |
| odyssey4me | you may wish to rather just build a starting instance and ssh into it, then create a tmux/screen session and do the steps from the AIO quickstart | 13:57 |
| fxpester | not error... message from kernel :) all looks ok and going for 1 hour now. | 13:57 |
| odyssey4me | fxpester which release are you building? a specific tag or branch? | 13:58 |
| fxpester | I`m a git expert, so just did git checkout stable/mitaka && git checkout 13.0.0 (cause git checkout 13.0.1 failed) | 13:59 |
| fxpester | "i`m NOT a git expert" | 14:00 |
| odyssey4me | fxpester also, if you have a decent host with enough disk space around you may wish to try using https://gist.github.com/cloudnull/f71e3078f9a0018017c3 for a far better test environment that is more production-like | 14:00 |
| evrardjp | cloudnull ping? | 14:00 |
| odyssey4me | fxpester ah, we're about to tag 13.0.1 - so stable/mitaka would have been the same thing as 13.0.1 - I'm just waiting for the release request to be processed | 14:00 |
| odyssey4me | 13.0.0 is, in fact, a bit broken - it was based on pre-release OpenStack, but we had to tag it at the time... 13.0.1 is our actual Mitaka release | 14:01 |
| mhayden | odyssey4me: openstack-ansible at the red hat summit! https://rh2016.smarteventscloud.com/connect/sessionDetail.ww?SESSION_ID=75675 | 14:02 |
| odyssey4me | mhayden w00t! | 14:02 |
| fxpester | I see, thx, will know what really exploded if it will =) | 14:03 |
| *** b3rnard0_away is now known as b3rnard0 | 14:03 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:03 | |
| *** sacharya has joined #openstack-ansible | 14:04 | |
| odyssey4me | fxpester once it completes, assuming it does, you can use http://docs.openstack.org/developer/openstack-ansible/install-guide/app-minorupgrade.html to upgrade to the latest version... just use 'stable/mitaka' instead of 13.0.1 | 14:04 |
| *** pjm6 has joined #openstack-ansible | 14:05 | |
| fxpester | odyssey4me: cobbler-osa-multi-aio.sh - looks very sexy, but what is this ? it works only in Rackspace cloud ? | 14:07 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309425 | 14:07 |
| odyssey4me | fxpester it should work on any Ubuntu host with enough disk space, cpu's and memory to handle the number of VM's it builds | 14:08 |
| *** sdake has joined #openstack-ansible | 14:09 | |
| *** sacharya has quit IRC | 14:09 | |
| fxpester | odyssey4me: but no one knows how much resources it needs ? :D have you built it ? what box do you use ? | 14:10 |
| *** sdake_ has joined #openstack-ansible | 14:10 | |
| fxpester | I mean hdd and memory | 14:10 |
| odyssey4me | fxpester once cloudnull gets in he can tell you more | 14:11 |
| *** sdake has quit IRC | 14:13 | |
| Mudpuppy | fxpester: There are some host specs listed here https://github.com/cloudnull/osa-multi-node-aio | 14:15 |
| Mudpuppy | 20 cpu cores, 124GB memory 1.3TB disk | 14:15 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_magnum: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309429 | 14:16 |
| odyssey4me | fxpester Mitaka 13.0.1 has been released :) | 14:16 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_magnum: Remove unneeded with_items usage https://review.openstack.org/309430 | 14:18 |
| odyssey4me | #success OpenStack-Ansible Mitaka 13.0.1 has been released! | 14:18 |
| openstackstatus | odyssey4me: Added success to Success page | 14:18 |
| *** galstrom is now known as galstrom_zzz | 14:24 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Add docs for HAProxy ping checks https://review.openstack.org/309433 | 14:24 |
| mhayden | odyssey4me: great success | 14:25 |
| Mudpuppy | You will get cake | 14:26 |
| *** spotz_zzz is now known as spotz | 14:32 | |
| admin0 | cloudnull: ping (again) ! | 14:33 |
| *** galstrom_zzz is now known as galstrom | 14:33 | |
| admin0 | evrardjp: you and I both stuck @ the same thing ? | 14:33 |
| openstackgerrit | Merged openstack/openstack-ansible: Add missing line number report, fix coverage dep https://review.openstack.org/309205 | 14:33 |
| admin0 | or is your case different from mine | 14:33 |
| spotz | did someone say cake? | 14:34 |
| * admin0 gives a big cake to spotz | 14:34 | |
| evrardjp | I'm just reviewing cloudnull's change | 14:34 |
| evrardjp | it really is disruptive if the value is set | 14:34 |
| spotz | admin0 thanks | 14:34 |
| evrardjp | hopefully it's not set per default | 14:34 |
| admin0 | in my case, if that value is set, it works for all (except horizon) | 14:34 |
| evrardjp | so it should be part of the release note | 14:35 |
| admin0 | without that, my keystone was not working | 14:35 |
| evrardjp | when you don't set it, everything works internally, and externally it seems to work with curl | 14:35 |
| admin0 | not with SSL | 14:35 |
| openstackgerrit | Merged openstack/openstack-ansible-os_designate: Remove bind9 and add functional tests https://review.openstack.org/307189 | 14:35 |
| admin0 | not as a client | 14:35 |
| evrardjp | admin0 the summary: you shouldn't set the variable and rebootstrap everything | 14:37 |
| evrardjp | it seems to work for cloudnull and for me | 14:37 |
| admin0 | i have time and resources .. let me just do that and test :) | 14:37 |
| evrardjp | the small issue would be the client | 14:37 |
| evrardjp | openstack client seems to be a pain | 14:37 |
| admin0 | but that is what all cleints will use (majority ) as opposed to horizon | 14:38 |
| admin0 | evrardjp: you mean if i rebootstrap, horizon will be fixed, but the client will fail ? | 14:38 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_tempest: [WIP] Install tempest plugins https://review.openstack.org/309034 | 14:38 |
| evrardjp | admin0 that's what I think | 14:38 |
| mattt | ^^^ odyssey4me not sure what the best way to capture the plugins is, that way won't be picked up by repo server but means we can add a ton of plugins and the installation should be straightforward without having to explicitly install each one | 14:39 |
| admin0 | evrardjp: then i would not fix it .. €10/month client will use horizon .. €1000/month cleints will use the openstack cli client .. :) | 14:39 |
| admin0 | so better the cli works and i fix horizon manually than the other way around | 14:39 |
| evrardjp | feel free to fix it :D | 14:39 |
| odyssey4me | mattt, why not rather have the plugins be a list of dicts with all the bits needed as you added in https://review.openstack.org/#/c/309034/3/defaults/main.yml | 14:41 |
| admin0 | evrardjp: i will attempt :) | 14:41 |
| odyssey4me | but have the tempest role have an empty list by default, and have each role give it the data | 14:41 |
| *** toan has quit IRC | 14:42 | |
| *** bbmbx has joined #openstack-ansible | 14:42 | |
| odyssey4me | then perhaps the test list should also be part of that dict structure, and the tempest_gate script can be fed the regex from the calling role | 14:43 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: Use tempest for testing https://review.openstack.org/301566 | 14:43 |
| mattt | odyssey4me: yeah, that'd work ... good idea | 14:44 |
| *** phalmos has joined #openstack-ansible | 14:46 | |
| *** ChrisBenson has quit IRC | 14:46 | |
| *** ChrisBenson has joined #openstack-ansible | 14:46 | |
| *** sdake_ has quit IRC | 14:50 | |
| odyssey4me | mattt it may also be worthwhile to actually simply the enabled services in a similar way - basically expect a list and if the service 'glance' is not in the list then it's not enabled | 14:51 |
| odyssey4me | it'll cut down the number of vars and should be pretty straightforward | 14:52 |
| odyssey4me | but that's certainly not essential to your need right now | 14:52 |
| mattt | odyssey4me: yeah it is quite verbose at the moment and only going to get worse | 14:54 |
| odyssey4me | mattt yep, we might have to do an interim step which allows both the current convention and a new one to work - then we deprecate the old convention for Newton | 14:55 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_tempest: [WIP] Install tempest plugins https://review.openstack.org/309034 | 14:55 |
| mattt | odyssey4me: yeah, i think i will do a separate patch for taht | 14:55 |
| odyssey4me | yep, good thinking | 14:55 |
| *** sacharya has joined #openstack-ansible | 14:56 | |
| mattt | i also want to rewrite openstack_tempest_gate.sh | 14:56 |
| cloudnull | mornings | 14:56 |
| mattt | i hate this script :) | 14:56 |
| mattt | howdy cloudnull | 14:56 |
| cloudnull | hows it ? | 14:56 |
| spotz | odyssey4me: Thanks for the edits and getting that patch through | 14:56 |
| evrardjp | lbragstad did you got time to look at the keystone usability issue? | 14:56 |
| *** itlinux has joined #openstack-ansible | 14:57 | |
| *** pjm6 has quit IRC | 14:57 | |
| lbragstad | evrardjp I do have less meetings today so I should have a chance to get around to it | 14:57 |
| lbragstad | evrardjp do you have that link again? | 14:57 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309425 | 14:57 |
| evrardjp | lbragstad I will make a new paste :D | 14:58 |
| *** javeriak has joined #openstack-ansible | 14:58 | |
| *** pjm6 has joined #openstack-ansible | 14:58 | |
| -openstackstatus- NOTICE: Log server was repaired as of 10:50 UTC and jobs have been stable since. If necessary, please recheck changes that have 'UNSTABLE' results. | 14:58 | |
| *** itlinux has quit IRC | 14:59 | |
| *** Brew has joined #openstack-ansible | 14:59 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Add docs for HAProxy ping checks https://review.openstack.org/309433 | 14:59 |
| evrardjp | lbragstad http://paste.openstack.org/show/495161/ | 14:59 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts: Changed for lxc-host setup/build for multi-distro https://review.openstack.org/307856 | 15:01 |
| *** saneax is now known as saneax_AFK | 15:01 | |
| *** pjm6_ has joined #openstack-ansible | 15:02 | |
| *** pjm6 has quit IRC | 15:03 | |
| evrardjp | mhayden reviewed | 15:04 |
| evrardjp | and assigned the bug to you | 15:05 |
| *** pellaeon has joined #openstack-ansible | 15:06 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Add docs for HAProxy ping checks https://review.openstack.org/309433 | 15:06 |
| mhayden | evrardjp: thanks -- revised it a little | 15:09 |
| lbragstad | evrardjp is this the ssl everywhere patch? | 15:09 |
| evrardjp | lbragstad yes | 15:10 |
| evrardjp | https://review.openstack.org/#/c/277199/ | 15:10 |
| pellaeon | Hi, I have a openstack-ansible kilo deployment, with haproxy. I found that there are lots of connections to galera (over 400, but the mariadb's max_connections limit is set to 400), but haproxy is set to use one galera node as active and others as backup, and there are no connections limit set on haproxy, so in the end haproxy forwards all mysql connection to a single node, exceeding 400 connec | 15:10 |
| pellaeon | tions, then the node reject further connection | 15:10 |
| *** sdake has joined #openstack-ansible | 15:10 | |
| evrardjp | pellaeon 400 connections is much | 15:11 |
| evrardjp | but yes that's the intended behaviour | 15:11 |
| evrardjp | want to raise it? | 15:11 |
| pellaeon | is 400 connections normal ? I see a lot of connections to nova and neutron database | 15:12 |
| pellaeon | no, I think setting a connection limit per node on haproxy should be the better way to solve it | 15:12 |
| pellaeon | ie. connections still by default goes to a single node, but if a single node has more than 400 connections, haproxy will start forwarding new connections to other nodes | 15:13 |
| cloudnull | pellaeon: its likely that you will run into DB deadlocks if you have more than one node accepting writes . | 15:14 |
| evrardjp | the way we designed the cluster was to hit all on the same... I'm not sure about the multiple writes on multiple servers... while it's technically possible I don't know the reasons why it was done that way | 15:14 |
| evrardjp | here they are | 15:15 |
| evrardjp | cloudnull I thought this was also the purpose of galera cluster to be honest | 15:15 |
| evrardjp | but yes whatever | 15:15 |
| *** ChanServ changes topic to ":Austin Design Summit Schedule: https://goo.gl/WSRblf || Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs" | 15:15 | |
| *** iceyao has quit IRC | 15:15 | |
| cloudnull | galera will take care of most of it however it's not been very stable in my testing | 15:16 |
| pellaeon | Have other people hit this issue? I'm running a relatively small installation, 3 infra nodes, 1 compute node, about 30 VMs, it doesn't make sense that installation this small still hits connection limit | 15:17 |
| evrardjp | oh small installation it shoudn't happen | 15:18 |
| *** javeriak_ has joined #openstack-ansible | 15:18 | |
| *** weezS has joined #openstack-ansible | 15:19 | |
| *** sdake_ has joined #openstack-ansible | 15:19 | |
| *** sdake has quit IRC | 15:19 | |
| pellaeon | OK, I will investigate further regarding the issue on my installation, but in the mean time, we could discuss how this could be solved | 15:20 |
| cloudnull | it may happen, its all about the allowed connection and pool workers in each service. I'd raise the connection limits in mariadb or reduce the workers on services initiating too many connections. | 15:20 |
| cloudnull | pellaeon: options like https://github.com/openstack/openstack-ansible-os_nova/blob/master/defaults/main.yml#L69-L81 may help | 15:20 |
| evrardjp | cloudnull it's weird for a small cluster anyway | 15:21 |
| *** javeriak has quit IRC | 15:21 | |
| *** admin0 has quit IRC | 15:21 | |
| *** admin0 has joined #openstack-ansible | 15:21 | |
| cloudnull | neutron like so https://github.com/openstack/openstack-ansible-os_neutron/blob/master/defaults/main.yml#L88-L90 | 15:21 |
| evrardjp | s/cloudnull/pellaeon | 15:21 |
| lbragstad | cloudnull evrardjp this is the change you're seeing issues with - https://review.openstack.org/#/c/277199/ ? | 15:22 |
| odyssey4me | pellaeon we merged this recently and ported it all the way back to liberty: https://review.openstack.org/#/c/307231/ | 15:22 |
| odyssey4me | that may be pertinent | 15:22 |
| lbragstad | cloudnull evrardjp and by issues you mean - http://paste.openstack.org/show/495161/ | 15:22 |
| evrardjp | lbragstad yes | 15:22 |
| evrardjp | cloudnull doesn't see any issue | 15:22 |
| evrardjp | but other ppl do | 15:22 |
| odyssey4me | pellaeon you may wish to plan an upgrade to Liberty ASAP too, Kilo's going EOL in a month | 15:22 |
| cloudnull | if i set the public url endpoint. | 15:23 |
| evrardjp | cloudnull mattt just set the public url endpoint and got other issues | 15:23 |
| evrardjp | the one I got too | 15:23 |
| cloudnull | what other issues? | 15:23 |
| evrardjp | about cinder not being able to internally speak with keystone | 15:23 |
| evrardjp | during playbooks run or later | 15:24 |
| pellaeon | I see, thanks for all the hints! | 15:24 |
| * palendae shakes fists at trying to test things that rely on order with ordinary dicts | 15:24 | |
| cloudnull | i've not tested cinder externally but it is being exercised in our gate test | 15:24 |
| evrardjp | cloudnull I think the best is not to set the public url endpoint | 15:24 |
| evrardjp | because it works perfectly fine internally | 15:24 |
| *** jaypipes is now known as leakypipes | 15:24 | |
| *** ChanServ changes topic to "Austin Design Summit Schedule: https://goo.gl/WSRblf || Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs" | 15:25 | |
| mattt | cloudnull: my deploy failed, it coudln't even install cinder | 15:25 |
| evrardjp | doesn't needlessly go to public endpoint | 15:25 |
| odyssey4me | yes, ideally we don't want to have to hard set the public endpoint | 15:25 |
| cloudnull | it does. tempest tests the public endpoints when it does the dashboard scenario tests | 15:25 |
| admin0 | cloudnull: in my case, everything works except horizon .. | 15:25 |
| *** openstack has joined #openstack-ansible | 15:28 | |
| cloudnull | right. | 15:29 |
| evrardjp | true | 15:29 |
| cloudnull | my argument isnt that there is some client bug | 15:29 |
| *** pjm6 has joined #openstack-ansible | 15:29 | |
| cloudnull | my argument is that the public endpoints work as expected | 15:29 |
| evrardjp | cloudnull but you are right | 15:29 |
| odyssey4me | https://github.com/openstack/openstack-ansible-os_horizon/blob/master/defaults/main.yml#L74 | 15:29 |
| evrardjp | public endpoints work when you set this variable | 15:29 |
| evrardjp | it's internal that start to fail | 15:29 |
| evrardjp | which is not good | 15:30 |
| *** fxpester has quit IRC | 15:30 | |
| evrardjp | or admin | 15:30 |
| evrardjp | I don't remember | 15:30 |
| odyssey4me | cloudnull and my point is that the openstack public endpoints are not exercised at all in the gate | 15:30 |
| evrardjp | but let's forget this variable | 15:30 |
| evrardjp | and focus on the other obne | 15:30 |
| evrardjp | the one without setting the variable | 15:30 |
| odyssey4me | the haproxy public load balancer address is, but not the openstack endpoints... only horizon is accessed via the public address | 15:30 |
| evrardjp | (the default) | 15:30 |
| *** johnmilton has quit IRC | 15:31 | |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Check for two IP addresses assigned to same host https://review.openstack.org/308052 | 15:31 |
| *** pjm6_ has joined #openstack-ansible | 15:32 | |
| *** pjm6 has quit IRC | 15:33 | |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309425 | 15:35 |
| lbragstad | evrardjp you're seeing issues getting the service catalog when using the clients? | 15:36 |
| evrardjp | yes | 15:36 |
| lbragstad | evrardjp according to your paste, curl seems to be working fine against keystone | 15:36 |
| evrardjp | yes | 15:36 |
| evrardjp | maybe my paste isn't perfect | 15:37 |
| evrardjp | but you get the idea :D | 15:38 |
| *** ChrisBenson has quit IRC | 15:38 | |
| palendae | odyssey4me: Were you planning on getting to https://etherpad.openstack.org/p/openstack-ansible-newton-ubuntu16-04 before summit? | 15:38 |
| cloudnull | odyssey4me: http://cdn.pasteraw.com/faswq0ekv9t2lyupq248j8b7hm0uci2 | 15:38 |
| cloudnull | the public urls work fine | 15:38 |
| cloudnull | from within the env | 15:38 |
| cloudnull | and that var not set | 15:38 |
| odyssey4me | palendae yes :) | 15:38 |
| odyssey4me | feel free to add anything you like right now | 15:39 |
| cloudnull | and evrardjp mattt cinder seems to be working too | 15:39 |
| palendae | odyssey4me: Ok :) Was trying to review reading beforehand | 15:39 |
| palendae | I don't have much to add but someone was asking and reminded me | 15:39 |
| cloudnull | if you want access to my env i'd be happy to provide it | 15:39 |
| *** ChrisBenson has joined #openstack-ansible | 15:39 | |
| cloudnull | this is likely an issue with forward handling within the clients | 15:39 |
| odyssey4me | the floor is open, I've not managed to turn https://etherpad.openstack.org/p/openstack-ansible-multi-os-support into something useful to facilitate that discussion yet | 15:39 |
| palendae | odyssey4me: Yeah, I don't have many well-formed thoughts around it, just wanted to check in | 15:40 |
| evrardjp | cloudnull the issue I and matt have had on the cinder deploy is barely consistent. I managed to deploy yesterday without issue | 15:41 |
| evrardjp | with the variable set | 15:41 |
| mhayden | cloudnull: i just ran into those rabbitmq shenanigans on mitaka | 15:41 |
| mhayden | or something similar | 15:41 |
| evrardjp | cloudnull I can give you access to my environment where the variable is set if you want | 15:41 |
| cloudnull | either way. | 15:42 |
| evrardjp | let's do this | 15:42 |
| mhayden | cloudnull: how do i make it past these rabbitmq hostname shenanigans? | 15:45 |
| *** fxpester has joined #openstack-ansible | 15:45 | |
| cloudnull | do you have all of the rfc changes ? | 15:45 |
| mhayden | i doubt it :( | 15:46 |
| stevelle | palendae, re: 16.04 etherpad -- it's no longer a blank page. your turn | 15:46 |
| mhayden | cloudnull: is that in the docs or release notes? | 15:46 |
| palendae | stevelle: I was just looking for stuff to read, so I'll read :p | 15:47 |
| stevelle | palendae: just be sure to put your name in | 15:48 |
| palendae | grr etherpad forgot it again | 15:48 |
| cloudnull | mhayden: http://docs.openstack.org/releasenotes/openstack-ansible/mitaka.html#new-features | 15:48 |
| cloudnull | and http://docs.openstack.org/releasenotes/openstack-ansible/mitaka.html#upgrade-notes | 15:49 |
| odyssey4me | mhayden are you using master or mitaka? | 15:49 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_neutron: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309474 | 15:49 |
| mhayden | odyssey4me: i'm on stable/mitaka | 15:49 |
| *** ccesario has joined #openstack-ansible | 15:49 | |
| openstackgerrit | Ala Raddaoui proposed openstack/openstack-ansible: Check for IP addresses assigned to multiple hosts https://review.openstack.org/309001 | 15:49 |
| odyssey4me | mhayden ok, that includes everything needed as far as I know | 15:50 |
| mhayden | i was on 13.0.0 and going to 13.0.1 now | 15:50 |
| *** pjm6_ has quit IRC | 15:52 | |
| lbragstad | evrardjp based on your environment - it seems like the clients are making an assumption about the keystone endpoint | 15:52 |
| *** johnmilton has joined #openstack-ansible | 15:52 | |
| mhayden | cloudnull: i guess i'm confused on what action i need to take on an existing environment | 15:52 |
| mhayden | do i need to destroy those containers and start over? | 15:52 |
| evrardjp | lbragstad yes indeed | 15:52 |
| evrardjp | lbragstad would that be a behavior when they do not get appropriate info? | 15:53 |
| cloudnull | no you should not have to | 15:53 |
| cloudnull | are you upgrading from liberty to mitaka ? | 15:53 |
| lbragstad | actually - from your trace, it's in keystoneauth1 | 15:53 |
| odyssey4me | mhayden just run the minor upgrade process | 15:53 |
| odyssey4me | http://docs.openstack.org/developer/openstack-ansible/mitaka/install-guide/app-minorupgrade.html | 15:54 |
| openstackgerrit | Merged openstack/openstack-ansible: Add docs for HAProxy ping checks https://review.openstack.org/309433 | 15:54 |
| mhayden | odyssey4me: that's that i'm doing :) the setup-infrastructure playbook failed during the rabbitmq part | 15:54 |
| *** pjm6 has joined #openstack-ansible | 15:55 | |
| odyssey4me | mhayden hmm, http://docs.openstack.org/developer/openstack-ansible/13.0.1/install-guide/app-minorupgrade.html :) | 15:55 |
| *** fxpester has quit IRC | 15:55 | |
| *** fxpester has joined #openstack-ansible | 15:55 | |
| odyssey4me | it looks like the branch head docs haven't been publiched again after the tag reference changed | 15:55 |
| evrardjp | lbragstad that's what I think too | 15:56 |
| evrardjp | I don't know how to properly report this to keystone ppl | 15:56 |
| odyssey4me | mhayden can you backport https://review.openstack.org/309433 to stable/mitaka please? | 15:56 |
| openstackgerrit | Merged openstack/openstack-ansible: Docs: Split Network Services section into multiple files https://review.openstack.org/307640 | 15:56 |
| mhayden | odyssey4me: done sir | 15:56 |
| mhayden | odyssey4me: still working on that other thing | 15:57 |
| odyssey4me | ta | 15:57 |
| lbragstad | evrardjp drop into the keystone channel | 15:57 |
| evrardjp | that's what I tried yesterday :p | 15:57 |
| lbragstad | evrardjp did anyone respond? | 15:57 |
| evrardjp | I got better results with you today :p | 15:57 |
| evrardjp | cloudnull just gave me an idea | 15:58 |
| evrardjp | about header issues | 15:58 |
| evrardjp | I'll analyse this too | 15:58 |
| lbragstad | well - the tokens aren't 8K ;) | 15:58 |
| * lbragstad celebrates | 15:58 | |
| evrardjp | ? | 16:00 |
| lbragstad | evrardjp I was making a joke about PKI tokens | 16:00 |
| mhayden | odyssey4me / cloudnull: i had to do a lxc-stop, and then run lxc-containers-create.yml -- it looks like things are okay now | 16:00 |
| mhayden | or on the way to being okay | 16:00 |
| mhayden | i did that only on the rabbit containers | 16:01 |
| evrardjp | lbragstad too early for token jokes for me | 16:01 |
| cloudnull | yes the lxc-container create play need to be run which will do the RFC changes. | 16:01 |
| cloudnull | you shouldnt need to stop/start | 16:02 |
| cloudnull | the host name bits happen here https://github.com/openstack/openstack-ansible/blob/master/playbooks/lxc-containers-create.yml#L33-L55 | 16:02 |
| sigmavirus24 | evrardjp: what versions of OSA/osc/ksa are you using? | 16:05 |
| evrardjp | ksa? | 16:06 |
| evrardjp | osa master | 16:06 |
| *** sdake_ has quit IRC | 16:07 | |
| odyssey4me | ksa=keystoneauth1 | 16:07 |
| lbragstad | python-keystoneclient (2.3.1) | 16:07 |
| lbragstad | evrardjp that's the version you have on the keystone container | 16:07 |
| odyssey4me | it might be time for us to update master SHA's again | 16:07 |
| *** zhangjn has quit IRC | 16:12 | |
| *** pjm6 has quit IRC | 16:13 | |
| *** pjm6 has joined #openstack-ansible | 16:14 | |
| cloudnull | lbragstad: fixed in > versions ? | 16:15 |
| *** Oku_OS is now known as Oku_OS-away | 16:16 | |
| *** pjm6_ has joined #openstack-ansible | 16:16 | |
| *** Oku_OS-away is now known as Oku_OS | 16:17 | |
| *** Bofu2U has quit IRC | 16:17 | |
| *** elo has quit IRC | 16:18 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-04-22 https://review.openstack.org/309490 | 16:18 |
| evrardjp | python-openstackclient==2.3.0, python-keystoneclient==2.3.1,keystoneauth1==2.4.0,keystonemiddleware==4.4.0 | 16:18 |
| *** elo has joined #openstack-ansible | 16:18 | |
| *** pjm6 has quit IRC | 16:18 | |
| evrardjp | sorry for the delay | 16:18 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder: Update paste, policy and rootwrap configurations 2016-04-22 https://review.openstack.org/309492 | 16:19 |
| *** zhangjn has joined #openstack-ansible | 16:19 | |
| lbragstad | cloudnull checking - I thought we did a release recently | 16:19 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_heat: Update paste, policy and rootwrap configurations 2016-04-22 https://review.openstack.org/309493 | 16:19 |
| lbragstad | cloudnull we released 2.6.0 on april 13th | 16:20 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone: Update paste, policy and rootwrap configurations 2016-04-22 https://review.openstack.org/309494 | 16:20 |
| evrardjp | lbragstad 2.6 for keystone auth? | 16:21 |
| lbragstad | evrardjp yeah | 16:21 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Update paste, policy and rootwrap configurations 2016-04-22 https://review.openstack.org/309496 | 16:23 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Update paste, policy and rootwrap configurations 2016-04-22 https://review.openstack.org/309497 | 16:23 |
| evrardjp | that's quite a bump | 16:24 |
| evrardjp | for osa | 16:24 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update Newton SHA's 2016-04-22 https://review.openstack.org/309498 | 16:25 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Ansible 2.x - Address deprecation warning of bare variables https://review.openstack.org/309425 | 16:26 |
| lbragstad | evrardjp what's the header thing you were going to try? | 16:26 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Update Newton SHA's 2016-04-22 https://review.openstack.org/309498 | 16:26 |
| *** admin0 has joined #openstack-ansible | 16:26 | |
| evrardjp | cloudnull tried on its cloud | 16:26 |
| evrardjp | so I don't need to try | 16:26 |
| evrardjp | capturing what's happening | 16:26 |
| cloudnull | evrardjp: it looks like a hap issue | 16:27 |
| evrardjp | reverse engineering for understanding how this work | 16:27 |
| cloudnull | if you go to root@aio1-utility-container-be92fd95:~# | 16:27 |
| cloudnull | and use openrc.publi | 16:27 |
| cloudnull | you can do things | 16:27 |
| cloudnull | i've pulled back the hap config to a bare minimum | 16:27 |
| cloudnull | and it works | 16:27 |
| cloudnull | so i think hap is filtering | 16:28 |
| cloudnull | and or not passing the headers correctly | 16:28 |
| cloudnull | its about to be broken again fyi | 16:28 |
| evrardjp | what do you mean? | 16:28 |
| evrardjp | "it's about to be broken again" | 16:29 |
| evrardjp | cloudnull do you mind if we shut down the aio you're on? | 16:29 |
| cloudnull | http://cdn.pasteraw.com/1fsi4dlhrxoe56x83sda22vsvsv7zyb | 16:29 |
| evrardjp | solving two different issues of ssl at the same time is difficult | 16:29 |
| cloudnull | im using your node as my external check | 16:30 |
| cloudnull | :) | 16:30 |
| evrardjp | ok | 16:30 |
| *** jthorne has joined #openstack-ansible | 16:30 | |
| evrardjp | continue then! | 16:30 |
| evrardjp | :D | 16:30 |
| cloudnull | see the last paste | 16:30 |
| cloudnull | works | 16:30 |
| evrardjp | so we are on the last page | 16:30 |
| evrardjp | cool | 16:30 |
| *** Oku_OS is now known as Oku_OS-away | 16:30 | |
| evrardjp | did you remove the header part of the haproxy config? | 16:30 |
| evrardjp | are also edited to add verify none after ssl ? | 16:31 |
| cloudnull | if i take these lines out | 16:31 |
| cloudnull | http://cdn.pasteraw.com/a8z8g8tkjus1krrxo2n8wq2wsrdzzh2 | 16:31 |
| cloudnull | it works | 16:31 |
| cloudnull | you have the openrc.public file to verify on that server | 16:31 |
| cloudnull | confirmed remove those lines all is well | 16:33 |
| *** pjm6_ has quit IRC | 16:33 | |
| evrardjp | ok will test right away | 16:34 |
| cloudnull | seems adding the header and or forcing it to be part of the backend breaks the clients. | 16:34 |
| evrardjp | that's the line I thought could be problematic | 16:34 |
| *** pjm6 has joined #openstack-ansible | 16:34 | |
| lbragstad | cloudnull evrardjp so have we narrowed this down to hap/ | 16:34 |
| cloudnull | yup | 16:35 |
| cloudnull | it would seem so | 16:35 |
| cloudnull | sorry lbragstad | 16:35 |
| *** tlbr has quit IRC | 16:35 | |
| evrardjp | it looked like a client behavior | 16:35 |
| evrardjp | sorry | 16:35 |
| lbragstad | cloudnull not at all - just curious if there way anything that needed to be done on the keystone side | 16:35 |
| *** admin0 has quit IRC | 16:35 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable SSL termination for all services https://review.openstack.org/277199 | 16:36 |
| lbragstad | evrardjp I started looking at it and immediately went to the client libraries because that's exactly what it looked like | 16:36 |
| *** tlbr has joined #openstack-ansible | 16:36 | |
| cloudnull | evrardjp/admin0: ^ | 16:36 |
| cloudnull | going to eat. bbl | 16:37 |
| cloudnull | evrardjp: let me know if that solves the things for you | 16:37 |
| evrardjp | I'm still doing your fix one sec :p | 16:37 |
| evrardjp | I'll review afterwards | 16:38 |
| evrardjp | and then week-end! | 16:38 |
| *** pjm6 has quit IRC | 16:39 | |
| evrardjp | ok it seems to fix stuff | 16:40 |
| evrardjp | so sorry again lbragstad I'll think differently next time. But I learned a lot, so really thank you. | 16:41 |
| *** pjm6 has joined #openstack-ansible | 16:41 | |
| evrardjp | I should have checked that | 16:43 |
| *** johnmilton has quit IRC | 16:45 | |
| *** johnmilton has joined #openstack-ansible | 16:45 | |
| *** pjm6 has quit IRC | 16:45 | |
| odyssey4me | that's not how this works evrardjp - you're supposed to blame cloudnull :p | 16:49 |
| evrardjp | oh no I'll let you have this pleasure | 16:49 |
| *** pjm6 has joined #openstack-ansible | 16:50 | |
| *** winggundamth_ has joined #openstack-ansible | 16:50 | |
| evrardjp | I'm off | 16:50 |
| evrardjp | have a nice summit | 16:51 |
| *** winggundamth_ has quit IRC | 16:51 | |
| odyssey4me | have a great weekend evrardjp, and enjoy the quiet week next week | 16:51 |
| *** pjm6 has quit IRC | 16:54 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 12.0.12 https://review.openstack.org/309511 | 16:57 |
| openstackgerrit | git-harry proposed openstack/openstack-ansible: Fix MariaDB cleanup for Kilo to Liberty upgrades https://review.openstack.org/309513 | 17:01 |
| spotz | mhayden - https://etherpad.openstack.org/p/openstack-ansible-newton-role-docs | 17:02 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: removed duplicate key https://review.openstack.org/299761 | 17:04 |
| *** weezS has quit IRC | 17:04 | |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-lxc_container_create: Template /etc/environment rather than use lineinfile https://review.openstack.org/309517 | 17:06 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-lxc_container_create: Template /etc/environment rather than use lineinfile https://review.openstack.org/309517 | 17:06 |
| spotz | odyssey4me cloudnull Any reviews you specically need us to hit today? | 17:07 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 12.0.12 https://review.openstack.org/309511 | 17:08 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-lxc_container_create: Template /etc/environment rather than use lineinfile https://review.openstack.org/309517 | 17:08 |
| automagically | Apologies for the spam ^ | 17:08 |
| odyssey4me | spotz no urgency on anything - Mitaka 13.0.1 is released, and that's the final thing - so we can all relax, do summit things and on Sat I'll be joining y'all to lay waste to Austin | 17:08 |
| spotz | odyssey4me: Sweet. bring shorts you're going to be warm. We're going to try to check in early on Sunday after I go ride in the morning I think | 17:09 |
| automagically | 88 on Monday! | 17:10 |
| odyssey4me | spotz ride? horse, bicycle, or motorbike? | 17:10 |
| spotz | horse/pony | 17:10 |
| automagically | And Tuesday | 17:10 |
| odyssey4me | heh, that's awesome :) I always enjoyed riding a horse, regardless of the fact that they somehow seem to enjoy throwing me off. :p | 17:11 |
| automagically | spotz: I’ll have to talk horses with you a bit in Austin. I recently purchased 2 off the track thoroughbreds for retraining/resale as sporthorses and my partner is an eventing rider | 17:11 |
| *** rromans has quit IRC | 17:11 | |
| odyssey4me | automagically oh nice! | 17:11 |
| *** rromans has joined #openstack-ansible | 17:11 | |
| spotz | automagically: SWEET we will so talk:) I'm currently more dressage but used to do hunters and eventing | 17:11 |
| Mudpuppy | I feed carrots | 17:12 |
| *** tiagogomes has quit IRC | 17:13 | |
| odyssey4me | Mudpuppy I wasn't aware that carrots could be fed? | 17:13 |
| automagically | They don’t eat much | 17:13 |
| spotz | He rides my old AA hunter, 17.1+ hand dutch WB | 17:13 |
| automagically | But you can try | 17:13 |
| odyssey4me | lol, now that is a funny picture | 17:13 |
| spotz | I've got a 14.1 connemara | 17:13 |
| *** mattoliverau has quit IRC | 17:13 | |
| *** finchd has quit IRC | 17:13 | |
| automagically | A shorty | 17:13 |
| Mudpuppy | http://cdn01.cdn.justjaredjr.com/wp-content/uploads/headlines/2009/02/miley-cyrus-carrot-top.jpg | 17:14 |
| *** matt6434 has joined #openstack-ansible | 17:14 | |
| odyssey4me | oh dear | 17:14 |
| Mudpuppy | I"m horrible I know. | 17:14 |
| spotz | <- 5'2" on a good day | 17:14 |
| automagically | Everybody loves a pony! | 17:14 |
| automagically | my partner is Irish so she’ll appreciate hearing you’ve got a connemara | 17:15 |
| spotz | My last connemara was 15 which was a good height lost him to colic last summer:( | 17:15 |
| spotz | err 15 hands | 17:15 |
| spotz | automagically: There's Dover not too too far from downtown:) | 17:16 |
| automagically | Sorry to hear that. Colic is no good | 17:16 |
| spotz | automagically: No:( | 17:16 |
| spotz | His dad died last year in his 30s, I used to event him | 17:16 |
| automagically | I’ve been spending plenty of time in my local Dover | 17:16 |
| spotz | heheh | 17:17 |
| automagically | Wow, this transitioned to #horses really quick like ;) | 17:17 |
| Mudpuppy | hahah | 17:17 |
| spotz | heheh | 17:18 |
| spotz | automagically: Ok summit... You gonna try the mechanical bull? Mudpuppy won't let me something about not spending his summit in the ER:) | 17:18 |
| *** admin0 has joined #openstack-ansible | 17:18 | |
| palendae | There's a mechanical bull? | 17:18 |
| automagically | That wouldn’t end well for me | 17:18 |
| palendae | Wait of course there is | 17:18 |
| palendae | Texas | 17:19 |
| electrofelix | if anyone is on ansible 1.9 you may want to backport the ssh connection plugin from https://github.com/ansible/ansible/issues/15436 to fix a rather annoying loss of data | 17:19 |
| automagically | Its TX, there are many mechanical (and real) bulls | 17:19 |
| palendae | I guess the only question will be is: is it in the convention center? | 17:19 |
| palendae | My assumption is yes, probably the Mirantis booth | 17:19 |
| *** finchd has joined #openstack-ansible | 17:19 | |
| palendae | Their Mechastack theme in Tokyo was neat | 17:19 |
| spotz | palendae: Did you not study the Stackcity stuff?:) No it's on Rainey street | 17:19 |
| palendae | spotz: No, I did not | 17:19 |
| spotz | I'm a planner, though for summit it doesn't help without a few clones | 17:20 |
| palendae | I'm planning my sessions right now, but I've not looked up extracirrucular stuff | 17:20 |
| palendae | I did way more for Tokyo | 17:20 |
| *** keedya has quit IRC | 17:20 | |
| spotz | I think the only marriot thing I might get to is the one I'm helping with. Too far to run between | 17:21 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 11.2.15 https://review.openstack.org/309526 | 17:22 |
| *** keedya has joined #openstack-ansible | 17:22 | |
| spotz | Need to try to hit a few of the Heat sessions besides ours | 17:23 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 11.2.15 https://review.openstack.org/309526 | 17:25 |
| spotz | odyssey4me: You still ending that one? | 17:28 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 12.0.12 https://review.openstack.org/309511 | 17:28 |
| odyssey4me | electrofelix interesting - we've not seen that failure, but we've seen failures, which is why we submitted a patch which is in 2.0 which automatically retries the connection better... but yeah, we're still on 1.94 at this point | 17:31 |
| odyssey4me | spotz ending which one? | 17:31 |
| odyssey4me | And by the way, the only Connamara I know is a rather nice whiskey. :) | 17:32 |
| spotz | odyssey4me: ha they're differnt ones was looking at the title not the numbers:) | 17:32 |
| electrofelix | odyssey4me: we've seen it periodically during CI runs, I suspect that sometimes it occurs and people just don't realise it | 17:33 |
| electrofelix | retry, don't see it again and forget | 17:34 |
| odyssey4me | spotz so many branches active right now, it's a bit much | 17:36 |
| odyssey4me | electrofelix yeah, I suspect that it's masked by an automated retry we use in the gate | 17:37 |
| odyssey4me | unfortunately that retry also masks other issues I suspect | 17:37 |
| odyssey4me | but we'll be shifting to development on 2.1 pretty soon | 17:37 |
| openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-lxc_container_create: Adding Vagrantfile for local developer testing https://review.openstack.org/309532 | 17:37 |
| *** brad[] has quit IRC | 17:38 | |
| *** brad[] has joined #openstack-ansible | 17:40 | |
| odyssey4me | electrofelix are you going to propose a backport fix to 1.9 ? | 17:42 |
| *** itlinux has joined #openstack-ansible | 17:43 | |
| *** itlinux has quit IRC | 17:44 | |
| cloudnull | evrardjp: ping | 17:51 |
| cloudnull | RE: https://review.openstack.org/#/c/277199/33/playbooks/roles/haproxy_server/templates/service.j2 | 17:51 |
| *** v1k0d3n has joined #openstack-ansible | 17:52 | |
| *** falanx has quit IRC | 17:53 | |
| v1k0d3n | hey guys...is there some better/additional documentation for this project: https://github.com/openstack/openstack-ansible-os_magnum ? | 17:53 |
| cloudnull | sigmavirus24: -cc ^ | 17:53 |
| v1k0d3n | i would like to integrate this...i've been trying this: https://github.com/sigmavirus24/openstack-ansible-magnum | 17:54 |
| v1k0d3n | but ran into issues, which i explained here: https://github.com/sigmavirus24/openstack-ansible-magnum/issues/1 | 17:54 |
| cloudnull | v1k0d3n: there is this http://docs.openstack.org/developer/openstack-ansible-os_magnum/ | 17:54 |
| *** falanx has joined #openstack-ansible | 17:54 | |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_container_create: Adding Vagrantfile for local developer testing https://review.openstack.org/309532 | 17:55 |
| *** sdake has joined #openstack-ansible | 17:56 | |
| v1k0d3n | cloudnull: does this plug right into OSAD fairly easily? | 17:56 |
| sigmavirus24 | v1k0d3n: I don't think the SHA in the role has been updated at all | 17:57 |
| v1k0d3n | sigmavirus24's seem to work pretty well, i just started running into a bit of a dependency nightmare...and it seems like i can't "find" the pip package for "magnum"... | 17:57 |
| cloudnull | v1k0d3n: it should however i've not done it myself | 17:57 |
| sigmavirus24 | You will want to try to adjust the SHA of magnum you're using as global-requirements.txt shifts and OSA makes this a fragile relationship | 17:57 |
| sigmavirus24 | v1k0d3n: this role was merely a Proof of Concept | 17:57 |
| sigmavirus24 | It was imported before it was close to being mature or finished though | 17:58 |
| v1k0d3n | hmmm. that's kind of magnum in general right now though, eh? lol | 17:58 |
| *** mkrish004c has joined #openstack-ansible | 17:58 | |
| sigmavirus24 | v1k0d3n: no joke | 17:58 |
| v1k0d3n | i haven't been keeping up with magnum much lately. i guess it's mature in mitaka now? | 17:58 |
| sigmavirus24 | That's why I stopped working on it | 17:58 |
| electrofelix | odyssey4me: it's already proposed by someone that hit it and put up a fix around the same time I was digging into it | 17:58 |
| sigmavirus24 | v1k0d3n: lol you'd hope that | 17:59 |
| sigmavirus24 | but not really | 17:59 |
| v1k0d3n | yeah...dude..don't blame you on that one! ^^ (support) | 17:59 |
| v1k0d3n | yeah, that sucks. | 17:59 |
| v1k0d3n | so this whole kubernetes thing...it's a great movement, right? but really fragmented when you try to get it to work within openstack. | 17:59 |
| sigmavirus24 | v1k0d3n: they have a lot of "top priorities" right now that they're sorting out for newton and a new PTL so I doubt they're going to get very far with anything | 17:59 |
| sigmavirus24 | v1k0d3n: not even kubernetes' fault. | 17:59 |
| v1k0d3n | they seem to support all other public clouds just great...but openstack as a provider isn't documented well at all. | 18:00 |
| sigmavirus24 | v1k0d3n: you could deploy kubernetes on top of an openstack cloud now with some playbooks | 18:00 |
| v1k0d3n | i would really, really like to clear up some of the confusion for our folks here. | 18:00 |
| v1k0d3n | well, i do... | 18:00 |
| sigmavirus24 | v1k0d3n: well magnum is one way to get kubernetes on openstack within a tenant | 18:00 |
| odyssey4me | v1k0d3n sigmavirus24 hmm, that role still needs plenty of work - v1k0d3n you're welcome to inspect the other roles to see how we setup the ability for it to build and test on its own, it'd be really great if that could be done... that'll also make it work a lot more easily in an integrated test which is an eventual goal | 18:00 |
| odyssey4me | but it does need people interested in making that a reality to join up with us | 18:00 |
| mkrish004c | Hi Guys, i am installing Ceph via OSA, is there any module to integrateto ceilometer or it does automatically, cuz i am not getting any metrics of ceph. | 18:00 |
| v1k0d3n | well, i mean...count me in | 18:01 |
| sigmavirus24 | odyssey4me: if it were a priority on my end, I would have done that but I get reassigned to something new fairly frequently | 18:01 |
| v1k0d3n | i'm highly interested in making this work | 18:01 |
| v1k0d3n | the unfortunate thing is what works...is outside of openstack. | 18:01 |
| v1k0d3n | and i guess that's fine...but what the community sees....that's really fractured. | 18:01 |
| odyssey4me | mkrish004c I answered you this morning - you'll need to find out from the Ceph/Ceilometer guys if that's even a possibility. If you can find out how to do it, assuming it is possible, then we'd be happy to help you make that happen. | 18:01 |
| sigmavirus24 | metral: v1k0d3n you two should chat about deploying kubernetes on top of an openstack cloud | 18:02 |
| *** pjm6 has joined #openstack-ansible | 18:02 | |
| v1k0d3n | hahahaha metral...and here we are full circle. :) | 18:02 |
| metral | :) hey there | 18:02 |
| v1k0d3n | we've chatted. hey man...long time no talk, right? :D | 18:02 |
| metral | lol exactly | 18:03 |
| v1k0d3n | dude, laco would get a kick out of this, i swear... | 18:03 |
| v1k0d3n | lol | 18:03 |
| * sigmavirus24 should have known that metral knows everyone interested in kubernetes on top of OS already | 18:03 | |
| mkrish004c | ohh sorry odyssey4me i might have missed your reply....i ll try to get them... | 18:03 |
| sigmavirus24 | v1k0d3n: I can summon him for you | 18:03 |
| metral | @sigmavirus24 haha not quite, but close ;) | 18:03 |
| v1k0d3n | no. it's all good | 18:04 |
| *** pjm6 has quit IRC | 18:04 | |
| v1k0d3n | so metral...i'll spare you from having to read up too much. | 18:04 |
| v1k0d3n | i was talking about magnum integration with the PoC sigmavirus24 was working on.... | 18:05 |
| v1k0d3n | still trying to get a good working ingress working for 1.2 k8s. | 18:05 |
| v1k0d3n | that's where the magic is.... | 18:05 |
| v1k0d3n | but ran into issues...because, well....it's magnum and there are so many moving parts. | 18:05 |
| v1k0d3n | i thought about deploying your solution with weave, but then that gets pretty darn opinionated, and i'm trying to find something that's not very opinionated. | 18:06 |
| v1k0d3n | ^^ and there is the issue ^^ | 18:06 |
| metral | what is your overarching goal you're trying to accomplish? | 18:06 |
| cloudnull | CLOUD! | 18:07 |
| * cloudnull goes away | 18:07 | |
| v1k0d3n | lol! ^^ | 18:07 |
| v1k0d3n | vapor | 18:07 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Add docs for limiting access to services https://review.openstack.org/309541 | 18:07 |
| v1k0d3n | goal is to have a simple PoC with ingress controllers, so I can test what i need to...security, CNI vs Docker plug-in points of interest, etc. | 18:08 |
| odyssey4me | v1k0d3n but security isn't cloudy | 18:09 |
| v1k0d3n | odyssey4me: very true...but i need to prove that to people who don't RTFM. | 18:09 |
| odyssey4me | just make sure you refresh everything every few minutes in a rolling implementation, then skip the security :p | 18:09 |
| v1k0d3n | instead of saying...i want to do. | 18:09 |
| v1k0d3n | hahahahaha | 18:10 |
| v1k0d3n | your suggestion is hilarious...i mentioned that at one point. | 18:10 |
| v1k0d3n | "yes, just roll those ephemeral containers every 90 seconds...that's secure, right?" :) | 18:10 |
| odyssey4me | cloud has no manuals, we're all just a bunch of cowboys making it up as we go along | 18:10 |
| odyssey4me | pssh manuals | 18:10 |
| odyssey4me | those container guys, well now... they're like crack addicts or something | 18:11 |
| metral | ;) | 18:11 |
| v1k0d3n | it's true...we're a special kind of special. | 18:11 |
| odyssey4me | I swear I've never seen a bunch of people get so excited about a patch release of any piece of software. | 18:11 |
| odyssey4me | it's amazing | 18:12 |
| v1k0d3n | hahaha | 18:12 |
| v1k0d3n | 12FACTOR!!!! | 18:12 |
| odyssey4me | *must have my hotfix* | 18:12 |
| cloudnull | such wow! | 18:12 |
| metral | if you're interested in just testing those features out and magnum is giving you issues, why not test it via one of the corekube deployments? | 18:12 |
| v1k0d3n | well, that's where i'm ultimately heading.... | 18:13 |
| metral | didn't you get one stood up the other day we chatted? | 18:13 |
| odyssey4me | All the devs continuously updating and getting excited about this new tweak and that new tweak... meanwhile back in Ops lands they're trying to figure out how to make sure that the devs never, ever touch anything in production, ever. | 18:13 |
| v1k0d3n | so the magnum stuff was a hail mary....to prove to our guys it's kind stitched together atm, and other solutions work better (now at least). | 18:13 |
| metral | ah, gotcha - makes sense | 18:13 |
| *** admin0 has quit IRC | 18:14 | |
| odyssey4me | v1k0d3n well, challenge them to find a manual that works :p | 18:14 |
| odyssey4me | like, any kind of install guide that works, at all | 18:14 |
| v1k0d3n | well, to your point odyssey4me...these are some guys around here who are "decision makers". | 18:14 |
| metral | lol | 18:14 |
| v1k0d3n | they say..."well, we're an openstack shop, so we're using magnum". | 18:14 |
| v1k0d3n | and i start getting a little worried. | 18:15 |
| *** pjm6 has joined #openstack-ansible | 18:15 | |
| *** weezS has joined #openstack-ansible | 18:15 | |
| odyssey4me | v1k0d3n well, then it's probably wise to inform them that they'd best put aside some investment capital because they're hoping to use an alpha solution | 18:15 |
| metral | agreed | 18:15 |
| metral | the openstack world != the container world | 18:16 |
| v1k0d3n | again, talk doesn't mean anything. i want to prove things. and yeah odyssey4me we're in the same place because we're doers. :) | 18:16 |
| v1k0d3n | metral: right ^^ agreed | 18:16 |
| odyssey4me | it's all well and good, but if you're wanting to make use of an immature project then you had best be ready to dedicate some devs to it | 18:16 |
| metral | this ^ | 18:16 |
| v1k0d3n | so here's how telcom's work... | 18:16 |
| v1k0d3n | *telecom | 18:17 |
| v1k0d3n | we like to build rules and processes for up and coming things... | 18:17 |
| v1k0d3n | thing is...as you all know...these are being developed daily. landscape changes. | 18:17 |
| odyssey4me | of course, there's the other question - what're they planning on using containers for? like is there an actual use-case for it or is the intention to just jump on the bandwagon because of all the market noise | 18:17 |
| v1k0d3n | security need to stay head and keep wild cowboys in check. i'm security. i just build, learn, fail...fail...fail...fail...learn...teach. | 18:18 |
| *** phiche has joined #openstack-ansible | 18:18 | |
| v1k0d3n | and even at this point, i'm having so much fun learning, i wonder if i haven't become a cowboy myself now. | 18:19 |
| *** javeriak_ has quit IRC | 18:19 | |
| v1k0d3n | metral: you mentioned you're not using ingress right now? i guess carina is coming about with swarm because it's a bit easier than the k8s model? | 18:20 |
| metral | I'm not using ingress personally but it is available in k8s v1.2 so you can in fact use it, and it works | 18:23 |
| v1k0d3n | yeah, i ran into some priv mode issues with corekube that i am working through right now. | 18:23 |
| metral | swarm vs k8s on carina isn't about difficulty, it was just a good next logical step for containers coming from just the single docker engine POV | 18:23 |
| v1k0d3n | i think it's on the docker side...but from what i read both docker 1.10 and kubenetes since 1.1 are default priv escalation mode +. | 18:24 |
| v1k0d3n | so working through it, and exploring it. | 18:24 |
| metral | yea like we chatted about the other day, so long as you have 1.10 and the flags enabled in the apiserver & kubelet to allow privileged mode, you're fine - you just have to work through the corekube "details" to make them stick. you can easily just take down the apiserver & kubelet right now, add in the flags to their respective unit files and fire them back up and it'll work | 18:25 |
| metral | but on reboots it'll use the units shipped w/ corekube by default | 18:26 |
| v1k0d3n | oh, i remember the issue i had.... | 18:26 |
| v1k0d3n | ./rebuild caught error on line 5... | 18:26 |
| v1k0d3n | i have to look. i ran into that and had to leave...didn't have time to dig in at the time. | 18:26 |
| *** pjm6_ has joined #openstack-ansible | 18:27 | |
| v1k0d3n | but i think that forking and making the mods should work well enough, as long as i keep the repos pointed correctly though, right? | 18:27 |
| metral | hmm well that line is in reference to the discovery IP address, which if your stack came up fine (public cloud nuances and all from time to time can cause weird issues here), should be working | 18:27 |
| metral | yes | 18:28 |
| metral | lots of other folks have done similar seeing how there are 38 forks of https://github.com/metral/corekube and i've gotten inquiries about similar efforts in the past | 18:28 |
| *** pjm6 has quit IRC | 18:29 | |
| *** Brew has quit IRC | 18:30 | |
| *** pjm6_ has quit IRC | 18:35 | |
| v1k0d3n | metral: so the run was fine...k8s is install...all looks pretty good. this is my error: ./redeploy.sh: line 5: /run/discovery_ip_port: No such file or directory | 18:36 |
| v1k0d3n | so file doesn't exist. | 18:37 |
| cloudnull | im out | 18:37 |
| cloudnull | talk to you all later | 18:37 |
| odyssey4me | yeah, me too | 18:37 |
| automagically | later cloudnull | 18:37 |
| automagically | later odyssey4me | 18:37 |
| odyssey4me | time for me to pack | 18:37 |
| automagically | See ya in Austin | 18:37 |
| cloudnull | cheers automagically | 18:37 |
| cloudnull | when you you all get into town ? | 18:37 |
| metral | see you all next week | 18:37 |
| automagically | Sunday afternoon | 18:37 |
| odyssey4me | cloudnull Sat for me. | 18:38 |
| cloudnull | ok, im driving up sunday in the AM | 18:38 |
| cloudnull | so maybe grab a bite | 18:38 |
| odyssey4me | cloudnull I'll ping you once I'm there and settled - we can take it from there. | 18:38 |
| automagically | ++ | 18:38 |
| cloudnull | ++ cloudnull on twitter :) | 18:39 |
| cloudnull | talk to you all soon. | 18:39 |
| *** chhavi_ has quit IRC | 18:40 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Add docs for limiting access to services https://review.openstack.org/309541 | 18:42 |
| mhayden | odyssey4me: bumped that review | 18:43 |
| *** admin0 has joined #openstack-ansible | 18:57 | |
| *** sdake_ has joined #openstack-ansible | 19:00 | |
| *** javeriak has joined #openstack-ansible | 19:02 | |
| *** sdake has quit IRC | 19:03 | |
| spotz | So for those of you coming in on Sat, if there's any interest in mudpuppy and I coming up for dinner let me know | 19:03 |
| *** admin0 has quit IRC | 19:07 | |
| *** eil397 has joined #openstack-ansible | 19:09 | |
| automagically | mhayden: You inspired this: https://review.openstack.org/#/c/309557/ as a result of your recent review | 19:14 |
| *** hybridpollo has joined #openstack-ansible | 19:14 | |
| mhayden | automagically: nicely done, sir! | 19:15 |
| spotz | watch out he's getting into security:) | 19:16 |
| automagically | My first deep dive into an OSA role was the security role actually | 19:16 |
| * mhayden starts to make tears | 19:16 | |
| mhayden | :) | 19:16 |
| automagically | I had been wanting to play around with OpenSCAP for awhile and threw this together: https://github.com/trumant/openstack-ansible-security/commit/63055a9788a02767d89732ad3fff223b4f49f248 | 19:17 |
| automagically | Was a fun reason to use two things I’d been wanting to try out for awhile during a 20% time day | 19:17 |
| mhayden | ah nice | 19:17 |
| mhayden | SCAP's XML is kinda freaky | 19:18 |
| automagically | Its XML…. | 19:18 |
| automagically | Its all freaky to me | 19:18 |
| automagically | YAML is bad enough | 19:18 |
| mhayden | i'd considered writing a YAML to SCAP XML converter | 19:18 |
| automagically | I think the GovCloud folks have one | 19:18 |
| mhayden | so people could describe tests and fixes in something more human readable | 19:18 |
| Mudpuppy | is it YAML or YML? | 19:19 |
| mhayden | https://en.wikipedia.org/wiki/YAML | 19:19 |
| *** weezS has quit IRC | 19:20 | |
| mhayden | YAML is a recursive acronym for "YAML Ain't Markup Language". Early in its development, YAML was said to mean "Yet Another Markup Language",[3] but it was then reinterpreted (backronyming the original acronym) to distinguish its purpose as data-oriented, rather than document markup. | 19:20 |
| automagically | mhayden: This - https://github.com/GovReady/easyscap | 19:20 |
| mhayden | BACKRONYMING -- impressive | 19:20 |
| mhayden | automagically: oh my, that's way better | 19:20 |
| automagically | Later all. Time for me to call it a day. Hope to see many of you in Austin | 19:29 |
| spotz | Later automagically | 19:32 |
| *** phiche has quit IRC | 19:34 | |
| eil397 | automagically: thank for link. | 19:36 |
| *** sdake_ is now known as sdake | 19:38 | |
| *** johnmilton has quit IRC | 19:48 | |
| *** jayc has quit IRC | 20:04 | |
| palendae | Mudpuppy: The extensions yaml and yml are both valid | 20:04 |
| *** abitha has joined #openstack-ansible | 20:04 | |
| *** dweaver has quit IRC | 20:08 | |
| *** phalmos has quit IRC | 20:09 | |
| *** jayc has joined #openstack-ansible | 20:17 | |
| *** mkrish004c has quit IRC | 20:22 | |
| *** falanx has quit IRC | 20:27 | |
| *** javeriak has quit IRC | 20:31 | |
| *** falanx has joined #openstack-ansible | 20:40 | |
| *** Mudpuppy has quit IRC | 20:45 | |
| *** admin0 has joined #openstack-ansible | 20:48 | |
| *** spotz is now known as spotz_zzz | 20:49 | |
| *** falanx has quit IRC | 20:50 | |
| *** retreved has quit IRC | 20:56 | |
| *** thorst has quit IRC | 21:03 | |
| *** weezS has joined #openstack-ansible | 21:05 | |
| *** thorst has joined #openstack-ansible | 21:07 | |
| *** weezS has quit IRC | 21:10 | |
| *** busterswt has quit IRC | 21:10 | |
| *** jthorne_ has joined #openstack-ansible | 21:11 | |
| *** jthorne has quit IRC | 21:11 | |
| *** jthorne_ has quit IRC | 21:12 | |
| *** thorst has quit IRC | 21:12 | |
| *** jthorne has joined #openstack-ansible | 21:13 | |
| *** psilvad has quit IRC | 21:16 | |
| *** jayc has quit IRC | 21:25 | |
| mhayden | has anyone run into issues with neutron migrations lately? https://gist.github.com/major/53da659a71b7b9ee9ed4e78d5c7cd448 | 21:27 |
| mhayden | in mitaka | 21:27 |
| *** BjoernT has joined #openstack-ansible | 21:29 | |
| mhayden | neutron seems to be functional without that expand run | 21:29 |
| *** thorst has joined #openstack-ansible | 21:30 | |
| *** thorst has quit IRC | 21:35 | |
| *** thorst has joined #openstack-ansible | 21:37 | |
| *** jayc has joined #openstack-ansible | 21:37 | |
| sigmavirus24 | mhayden: looking at the security role, do any of the kernel tasks require a restart? | 21:42 |
| *** jayc has quit IRC | 21:49 | |
| *** electrofelix has quit IRC | 21:54 | |
| *** mancdaz has quit IRC | 22:06 | |
| *** Oku_OS-away has quit IRC | 22:07 | |
| *** Oku_OS-away has joined #openstack-ansible | 22:07 | |
| *** mancdaz has joined #openstack-ansible | 22:08 | |
| cloudnull | mhayden: yes | 22:12 |
| *** psilvad has joined #openstack-ansible | 22:12 | |
| cloudnull | thats an issue with a mighration not being in the source code that had happened previously | 22:12 |
| cloudnull | normally that happens when the DB was updated to something like the head of newton and then you go to redeploy / upgrade to a later version of mitaka. | 22:13 |
| *** sdake has quit IRC | 22:17 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:23 | |
| odyssey4me | mhayden that may be because you deployed 13.0.0 (rc-based openstack) then updated to 13.0.1 | 22:25 |
| *** aludwar has quit IRC | 22:29 | |
| *** markvoelker has quit IRC | 22:39 | |
| *** sdake has joined #openstack-ansible | 22:42 | |
| *** admin0 has quit IRC | 22:55 | |
| *** markvoelker has joined #openstack-ansible | 23:09 | |
| *** woodard_ has quit IRC | 23:15 | |
| *** woodard has joined #openstack-ansible | 23:15 | |
| *** matt6434 is now known as mattoliverau | 23:19 | |
| *** psilvad has quit IRC | 23:21 | |
| *** galstrom is now known as galstrom_zzz | 23:30 | |
| *** dweaver has joined #openstack-ansible | 23:30 | |
| *** dweaver has quit IRC | 23:32 | |
| *** dweaver has joined #openstack-ansible | 23:32 | |
| *** BjoernT has quit IRC | 23:34 | |
| *** dweaver has quit IRC | 23:37 | |
| *** woodard has quit IRC | 23:43 | |
| *** eil397 has left #openstack-ansible | 23:49 | |
| *** dweaver has joined #openstack-ansible | 23:51 | |
| *** dweaver has quit IRC | 23:52 | |
| *** dweaver has joined #openstack-ansible | 23:52 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
