Thursday, 2016-05-05

*** eil397 has quit IRC00:04
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_server: Reorganize test playbooks  https://review.openstack.org/31230200:06
*** fawadkhaliq has quit IRC00:09
*** schwicht has joined #openstack-ansible00:14
*** jamesdenton has joined #openstack-ansible00:16
*** raddaoui has quit IRC00:17
*** pjm6 has quit IRC00:17
*** thorst has joined #openstack-ansible00:18
*** schwicht has quit IRC00:18
*** jamesden_ has joined #openstack-ansible00:21
*** jamesden_ has quit IRC00:22
*** jamesdenton has quit IRC00:23
*** jamesdenton has joined #openstack-ansible00:25
*** jamesden_ has joined #openstack-ansible00:26
*** jamesdenton has quit IRC00:28
*** jamesden_ has quit IRC00:28
*** sacharya has joined #openstack-ansible00:34
*** thorst has quit IRC00:36
*** thorst has joined #openstack-ansible00:36
*** sacharya has quit IRC00:39
*** thorst has quit IRC00:41
*** thorst has joined #openstack-ansible00:45
*** schwicht has joined #openstack-ansible00:47
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: Doc: Notice to disable security hardening role during minor upgrades  https://review.openstack.org/31120200:57
*** kiranv has quit IRC01:08
*** ozialien10 has quit IRC01:12
*** fishcried has joined #openstack-ansible01:12
*** fishcried has quit IRC01:14
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: Doc: Notice to disable security role during major upgrades  https://review.openstack.org/31121101:15
*** mummer has quit IRC01:15
*** daneyon has joined #openstack-ansible01:19
*** sdake has joined #openstack-ansible01:22
*** daneyon_ has joined #openstack-ansible01:25
*** daneyon has quit IRC01:28
*** chandanc_ has joined #openstack-ansible01:29
*** daneyon_ has quit IRC01:36
*** joker_ has quit IRC01:42
*** jthorne_ has joined #openstack-ansible01:45
*** jthorne has quit IRC01:45
*** jthorne_ has quit IRC01:46
*** jthorne has joined #openstack-ansible01:46
*** afranc has quit IRC01:49
*** chandanc__ has joined #openstack-ansible01:56
*** chandanc_ has quit IRC01:56
*** chandanc__ has quit IRC01:57
*** thorst has quit IRC02:01
*** thorst has joined #openstack-ansible02:01
*** klamath has quit IRC02:01
*** klamath has joined #openstack-ansible02:01
*** klamath has quit IRC02:02
*** klamath has joined #openstack-ansible02:03
*** sdake_ has joined #openstack-ansible02:08
openstackgerritMichael Gugino proposed openstack/openstack-ansible: Fix dynamic_inventory.py test bug  https://review.openstack.org/31280802:08
lbragstado/ hey folks - is anyone else getting running the os_keystone role in isolation? Failed to template {{ hostvars[item]['keystone_pubkey'] | b64decode }}:02:08
lbragstadI see a fix has been proposed and backported for os_nova - https://bugs.launchpad.net/openstack-ansible/+bug/153178302:09
openstackLaunchpad bug 1531783 in openstack-ansible liberty "os_nova not using all configured compute_hosts" [High,In progress] - Assigned to Kevin Carter (kevin-carter)02:09
*** thorst has quit IRC02:09
*** sdake has quit IRC02:11
*** schwicht has quit IRC02:17
coolj_lbragstad: yeah, i have seen that - i believe it's this bug https://bugs.launchpad.net/openstack-ansible/+bug/153178302:18
openstackLaunchpad bug 1531783 in openstack-ansible liberty "os_nova not using all configured compute_hosts" [High,In progress] - Assigned to Kevin Carter (kevin-carter)02:19
coolj_oh that's the one you linked haha02:19
lbragstadcoolj_ :) i thought that looked familiar02:19
lbragstadI see the keystone bit in there - but I also see the odyssey4me patched it in os_keystone02:19
coolj_seems like whatever is causing the *_pubkey facts not to be set is deeper than just using slurp02:24
lbragstadcoolj_ actually - i'm wondering if it's the hostnames i'm using in my inventory02:25
lbragstadi do have '-' in there02:25
coolj_i have a - in my hostnames as well (I'm jcallicoat on lp btw), but it only failed for a few hosts and they all had - in the hostname...i'm thinking something in the actual key content but i don't see any strange characters02:26
lbragstadcoolj_ o/ oh hey man!02:26
*** sdake_ has quit IRC02:27
coolj_hi! :)02:27
lbragstadcoolj_ do you pass hostnames in on the command line with `-l <hostname>`02:27
lbragstadwhen you run ansible-playbook?02:27
coolj_no, it was all done through dynamic inventory and just letting the plays find their hosts that way02:28
lbragstadgothca02:28
lbragstadhuh - no way02:29
lbragstadthat was it... I was passing in the host I wanted to run against with `-l <hostname>` and it failed consistently... remove the `-l <hostname>` and run it through inventory and it works fine.02:29
coolj_huh02:31
lbragstadnot sure how common that is... but I can document it in https://bugs.launchpad.net/openstack-ansible/+bug/153178302:32
openstackLaunchpad bug 1531783 in openstack-ansible liberty "os_nova not using all configured compute_hosts" [High,In progress] - Assigned to Kevin Carter (kevin-carter)02:32
*** fawadkhaliq has joined #openstack-ansible02:32
*** sacharya has joined #openstack-ansible02:39
*** kiranv_ has joined #openstack-ansible02:54
*** thorst has joined #openstack-ansible03:07
*** schwicht has joined #openstack-ansible03:13
*** thorst has quit IRC03:15
*** schwicht has quit IRC03:18
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [WIP] DOCS: Configuration section - cleanup  https://review.openstack.org/31281503:35
*** fawadkhaliq has quit IRC03:41
*** kiranv_ has quit IRC04:13
*** thorst has joined #openstack-ansible04:13
*** kiranv_ has joined #openstack-ansible04:13
*** asettle has quit IRC04:13
*** kiranv_ is now known as QuantumShadow04:13
*** schwicht has joined #openstack-ansible04:14
*** sdake has joined #openstack-ansible04:18
*** schwicht has quit IRC04:19
*** thorst has quit IRC04:19
*** sdake has quit IRC04:47
*** sdake has joined #openstack-ansible04:47
*** chhavi has joined #openstack-ansible04:50
*** hybridpollo has quit IRC04:54
*** chhavi has quit IRC05:06
*** iceyao has joined #openstack-ansible05:09
*** chhavi has joined #openstack-ansible05:09
*** chandanc has joined #openstack-ansible05:10
*** iceyao_ has joined #openstack-ansible05:13
openstackgerritMerged openstack/openstack-ansible-lxc_hosts: Fix generation of LXC hostnames  https://review.openstack.org/31275205:14
*** iceyao has quit IRC05:16
*** thorst has joined #openstack-ansible05:18
*** fawadkhaliq has joined #openstack-ansible05:18
*** thorst has quit IRC05:25
*** javeriak has joined #openstack-ansible05:28
*** iceyao_ has quit IRC05:34
*** chhavi has quit IRC05:39
*** chhavi has joined #openstack-ansible05:43
*** iceyao has joined #openstack-ansible05:47
*** bigdogstl has joined #openstack-ansible05:51
*** chhavi has quit IRC05:54
*** chhavi has joined #openstack-ansible05:54
*** javeriak has quit IRC05:56
*** bigdogstl has quit IRC05:56
*** openstackgerrit has quit IRC06:03
*** openstackgerrit has joined #openstack-ansible06:03
*** daneyon has joined #openstack-ansible06:08
*** daneyon_ has joined #openstack-ansible06:09
*** QuantumShadow has quit IRC06:10
*** saneax_AFK is now known as saneax06:12
*** daneyon has quit IRC06:13
*** schwicht has joined #openstack-ansible06:15
*** iceyao_ has joined #openstack-ansible06:16
*** asettle has joined #openstack-ansible06:18
*** schwicht has quit IRC06:20
*** joker_ has joined #openstack-ansible06:20
*** iceyao has quit IRC06:20
*** thorst has joined #openstack-ansible06:23
*** daneyon_ has quit IRC06:24
*** daneyon has joined #openstack-ansible06:24
*** thorst has quit IRC06:30
*** sdake has quit IRC06:32
*** chandanc has quit IRC06:35
*** chandanc has joined #openstack-ansible06:36
*** daneyon has quit IRC06:37
pellaeonHi, I'm trying to set up ceilometer for my liberty installation, in the doc it says I need to install mongodb manually, but didn't say where06:39
pellaeonhttp://docs.openstack.org/developer/openstack-ansible/install-guide/configure-ceilometer.html06:39
pellaeonWhere is the recommended place where I install mongodb ?06:41
*** adib has quit IRC06:44
*** sj has quit IRC07:05
*** schwicht has joined #openstack-ansible07:18
*** chandanc has quit IRC07:19
*** sacharya has quit IRC07:20
*** schwicht has quit IRC07:23
*** tiagogomes has joined #openstack-ansible07:27
*** thorst has joined #openstack-ansible07:27
matttpellaeon: heh, good question07:28
matttpellaeon: to be honest we don't have a valid mongodb story in openstack-ansible, i think the assumption is that mongodb lives outside of openstack-ansible07:30
*** thorst has quit IRC07:35
pellaeonmattt: I see, I'll setup a separate host, thanks07:38
matttpellaeon: that's something we will need to discuss as a project, because i think we need a recommended solution for people deploying ceilometer07:39
*** asettle has quit IRC07:40
matttpellaeon: also, we need to establish what version of mongodb to use -- i did some research into mongo a few months back and everything i read discouraged using distro mongodb packages07:41
*** mikelk has joined #openstack-ansible07:41
matttpellaeon: in theory you could deploy it into your openstack-ansible environment, but you'd have to create a new environment for it in /etc/openstack_deploy/env.d07:42
matttpellaeon: either that or install it on a host itself or in an existing container07:43
matttpellaeon: in our gate AIO, we just install it on the host itself07:43
*** javeriak has joined #openstack-ansible07:43
*** fawadkhaliq has quit IRC08:06
*** sacharya has joined #openstack-ansible08:20
*** sacharya has quit IRC08:26
*** javeriak has quit IRC08:29
*** thorst has joined #openstack-ansible08:32
*** thorst has quit IRC08:40
*** jorge_munoz has joined #openstack-ansible08:49
*** chhavi has quit IRC08:56
*** electrofelix has joined #openstack-ansible08:56
*** chhavi has joined #openstack-ansible09:12
*** fauxbert has joined #openstack-ansible09:16
fauxbertHi, I was wondering if I could get some help with a problem I am encountering with os-neutron-install.yml , on the create network facts it barfs with a JSon serialization error09:17
fauxbertTypeError: KeyError('type',) is not JSON serializable09:18
andymccrfauxbert: hey! so do you have any extra logs you could show us for that?09:18
fauxbertfailed: [node05] => {"failed": true, "parsed": false} OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 22: Applying options for * debug1: auto-mux: Trying existing master debug1: mux_client_request_session: master session id: 2 Traceback (most recent call last):   File "<stdin>", line 1895, in <module>   File "<stdin>", line 1892, in main   File09:18
fauxbertthat's about all I get09:19
fauxbertI've ran the provider_networks yaml through a yaml validator09:19
andymccrwhich task is failing?09:19
fauxbertTASK: [Create the neutron provider networks facts] ****************************09:19
*** javeriak has joined #openstack-ansible09:20
fauxbertas far as I can tell it uses provider_networks, bind_prefix and is_metal to combine into pndata09:20
*** sacharya has joined #openstack-ansible09:22
fauxbertthis is on ubuntu 14.04.4 LTS btw09:23
*** sdake has joined #openstack-ansible09:24
*** sacharya has quit IRC09:27
*** thorst has joined #openstack-ansible09:38
andymccrsorry fauxbert looking now, i had a quick meeting to run into.09:40
fauxbertno worries09:40
andymccrok fauxbert what does your provider_networks look like in your openstack_user_config.yml ?09:44
fauxbertyou ok if I use pastebin for this?09:44
andymccryeh please do09:44
*** thorst has quit IRC09:45
fauxberthttp://pastebin.com/scfkLM3U09:46
fauxbertit parses clean through yamllint (the whole openstack_user_config.yml)09:47
andymccrtry look in your openstack_inventory.json file and go to the provider_networks bit09:57
andymccrim wondering if its the vxlan range bit, with the comma - the syntax looks fine otherwise09:58
andymccrthe inventory file is basically a mixture of the environment settings (in env.d) and the user config files (openstack_user_config.yml and any files in conf.d)09:58
andymccrit takes the 2 sets and dynamically creates the inventory based on the environment definitions. so that inventory file is technically what ansible uses.09:59
openstackgerritMatt Thompson proposed openstack/openstack-ansible-os_tempest: [WIP] Standardise tempest role  https://review.openstack.org/31076610:03
fauxbertsorry was called away for a few , I'll check now10:04
fauxberthttp://pastebin.com/k0jh2YE210:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Use slurp to collect the keystone ssh keys  https://review.openstack.org/31288210:06
fauxberti've looked at the provider_networks variable by inserting a debug statement before the create network facts task10:13
fauxbertit looks ok to me10:13
andymccryeah same.10:14
andymccri dont see anything odd about it10:14
evrardjpwill vlan 130 be used by your tenants?10:14
evrardjptry without it, it's just one vlan :p10:15
andymccri tested that10:15
andymccrit works fine10:15
*** iceyao_ has quit IRC10:15
fauxbertI'll give it a shot10:16
andymccras an aside - you can remove some of the group_binds for your br-mgmt, since you specify all_containers and hosts the other 4 are redundant because the network will be setup on all hosts and containers already10:17
evrardjpfauxbert in theory "," should work, so you either are hitting a new bug, or you have other stuff wrong10:17
fauxbertI wouldn't bet against having other stuff wrong ;)10:17
andymccrfauxbert: try it, but i did just test with a comma in a vlan list and it works fine10:18
fauxbertvlan130 is kinda critical for us, as it's the external vlan10:18
andymccrso i dont think its that10:18
evrardjpfauxbert if it's external, and you can use the admin to define once and for all I think it should work10:18
evrardjpyou define it yourself10:18
evrardjpor at least it used to work10:18
evrardjpyou should try :D10:19
fauxbertnah still same issue, even without the 130,10:20
fauxbertI am wondering if it's because I am using the stable/mitaka branch...10:20
fauxbert(though more likely that it's because I screwed up somewhere)10:21
evrardjpcould you paste your complete openstack_ file ? (maybe obfuscate the ips if it's sensitive ?)10:21
fauxbertsure10:22
fauxbertgive me 2 minutes10:22
evrardjptake your time, don't worry :D10:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Removed container_release property from environment files  https://review.openstack.org/31180210:23
odyssey4memattt can you please review https://review.openstack.org/312793 asap as it's blocking master gating10:24
fauxberthttp://pastebin.com/J6t0JVJj10:25
evrardjpfauxbert I think you can add a space in your first item in used_ips10:27
evrardjpI'll check everything just I'll give you advise when I read this10:27
fauxbertokidoki10:27
fauxbertsorry , a space before the - ?10:29
*** sdake has quit IRC10:29
fauxbertit's got 2 spaces right now, I think that's the correct indentation ?10:29
evrardjpyes, for readability10:29
odyssey4meevrardjp some final tweaks in https://review.openstack.org/#/c/311162 needed10:29
evrardjpalso br-mgmt doesn't have a type10:29
andymccrthats the issue10:29
andymccri recreated it its br-mgmt lacking a type10:30
evrardjpfauxbert next steps after that is, if you have the opportunity: scratch everything and start with a new clean base :D10:31
andymccrjust add type: "raw" and you should be good to go10:31
fauxbertwell it passed that section now :)10:32
fauxbertthank you ! (failed elsewhere but I'd do some checking myself before I bother you guys again)10:32
andymccrid probably still recommend changing up your group_binds for br-mgmt to only include hosts and all_containers10:33
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Docs: Mandatory ssh public key  https://review.openstack.org/31116210:33
fauxbertwill do10:33
andymccrglad its getting further10:33
evrardjpfauxbert yes you should do that :D10:33
*** mrhillsman has joined #openstack-ansible10:38
odyssey4memattt https://review.openstack.org/31258810:41
odyssey4megit-harry https://review.openstack.org/#/q/branch:kilo+project:%255Eopenstack/openstack-ansible.*+status:open10:41
*** thorst has joined #openstack-ansible10:41
*** deadnull_ has joined #openstack-ansible10:42
*** asettle has joined #openstack-ansible10:46
*** thorst has quit IRC10:50
*** javeriak has quit IRC10:51
*** asettle has quit IRC10:51
*** bbmbx__ has quit IRC10:54
matttodyssey4me: +2, didn't +W only because lack of cherry-pick message ... if a non-issue you can go ahead and +W11:00
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 12.0.12  https://review.openstack.org/30951111:03
*** javeriak has joined #openstack-ansible11:04
*** schwicht has joined #openstack-ansible11:11
*** johnmilton has joined #openstack-ansible11:19
*** LanceHaig has quit IRC11:20
*** LanceHaig has joined #openstack-ansible11:20
odyssey4meevrardjp mattt https://review.openstack.org/#/c/31269211:26
*** schwicht has quit IRC11:34
*** thorst has joined #openstack-ansible11:40
*** retreved has joined #openstack-ansible11:44
*** woodard has joined #openstack-ansible11:45
*** smatzek has joined #openstack-ansible11:45
*** woodard has quit IRC11:45
*** woodard has joined #openstack-ansible11:45
*** woodard has quit IRC11:47
*** woodard has joined #openstack-ansible11:47
openstackgerritMerged openstack/openstack-ansible: Remove XFS filesystem from the daily mlocate cron job  https://review.openstack.org/31046011:50
smatzekevrardjp:  Thanks for the review the ceph/uca option.  I'm new to ansible and this is my first submission to OSA.  Can you clarify what you'd like to see changed, simply change ceph_add_uca_repo to something like ceph_source ?11:50
odyssey4mesmatzek I'm kinda thinking through it at the moment. We have a few intersecting initiatives here to take care of.11:51
evrardjpok I'll wait for odyssey4me 's comment then11:51
odyssey4meOne is that we're looking at multi distro implementation - two versions of Ubuntu (Trusty and Xenial), another for CentOS7.11:52
odyssey4meanother intersecting need is to simplify how a user consumes these things11:53
smatzekodyssey4me:  I had a pull request merged in ceph-ansible yesterday adding UCA support there in a similar fashion, for what it's worth. https://github.com/ceph/ceph-ansible/pull/74711:53
*** weshay has joined #openstack-ansible11:53
odyssey4meso it seems that perhaps we could implement a dict with a key that switches the source appropriately, then have all the tasks key off that11:53
odyssey4mesomething like 'ceph_client_package_source' with the keys 'ubuntu_uca', 'ubuntu_ceph', 'ubuntu_ceph_eu' - then under those keys we have the vars for the appropriate repo, keys, packages, etc11:54
smatzekswitching the source via a single flag would be good. To be honest I didn't like the boolean nature of the flag I added.  However, users will still need to tweak other variables to target the exact ceph version or apt repo dist they need.11:54
odyssey4methen the tasks simply act on whether some of those things are defined or not11:54
*** timl0101 has joined #openstack-ansible11:56
smatzekceph-ansible can install from 4? different sources,  and they handle with a mix of flags, comments tell the user which set to enable together, not to enable multiple, and they have a sanity check task to ensure the user isn't enabling multiple.11:56
odyssey4meoh, and of course we need to make it simpler to adjust the host used for the mirror to cater for the internal use use-case... that should be changable without having to redefine the whole dict11:56
odyssey4mewow, that sounds complex11:57
odyssey4methe only issue I forsee is a situation where a deployer deploys from one source, then switches to use another source11:57
smatzekyeah, it is with settings on one flag 'upstream' or 'distro' affecting whether or not lower flags are even looked at11:57
odyssey4meto be honest we'd rather be rid of this ceph_client role - the whole ceph implementation needs a revisit but that hasn't really bubbled up as a priority11:58
odyssey4mebut I don't think that's going to happen too soon, so we must work with what's there11:59
odyssey4mesmatzek if you can work out something that works through switching a single flag, ideally implements as few new vars as possible (maybe even removes some existing vars) then that'd be great12:01
odyssey4mewe'll likely follow it on with something like https://github.com/openstack/openstack-ansible-galera_client/commit/0361308dbbf38720f9e723de92d70d8fd0e16958 which then enables multi-OS implementations too12:01
smatzekwith CentOS support this role will get much more complex with the need to support RPM installs from yum repos, and then you'll get someone coming along wanting to install from some RHEL specific repo.12:02
*** saneax is now known as saneax_AFK12:02
odyssey4meyeah, we don't have to specifically enable centos support right now - we just want to make it reasonably obvious how it can be done12:02
mhaydenmorning folks12:03
openstackgerritMerged openstack/openstack-ansible: Cap paramiko to <2  https://review.openstack.org/31258812:04
openstackgerritMerged openstack/openstack-ansible: Cap paramiko to <2  https://review.openstack.org/31258712:05
*** saneax_AFK is now known as saneax12:08
odyssey4mesmatzek my apologies for basically asking you to rewrite your patch - I was kinda torn between approving what you've done, then rewriting it in a follow-on... but then I figured it'd be better to let you know my thinking and help work through to something better.12:10
*** psilvad has joined #openstack-ansible12:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Removing equal signs in docs  https://review.openstack.org/31258012:14
*** iceyao has joined #openstack-ansible12:16
*** psilvad has quit IRC12:18
smatzekodyssey4me: no problem.  I like the galera_client commit you pointed me at.  On the variable count concerns.  Is it a concern on the number of variables overall or a concern on the number of variables a deployer would need to normally set?  For instance, could we do ceph_source: uca|ceph|??  and depending on the source have one or two variables to set like uca_dist: mitaka and ceph_release: hammer ?12:20
smatzekwe need a way for deployers to both pick the repo source and pick what version of Ceph to pull from that source.12:20
odyssey4mesmatzek for ease of use - only one var should switch things, but then yes a deployer should optionally be able to change the ceph version and the mirror URL source (to cater for internal mirrors)12:21
smatzekodyssey4me:  yes, I think we're thinking the same thing.  With what I said earlier, we'd have defaults to pulls something like 'hammer' or 'jewel' if you're pulling from ceph.com and a default for 'mitaka', etc if you're pulling from UCA.  You'd only need to tweak that var if you wanted something other than the provided default from that repo source.12:23
odyssey4meyep, sounds good to me12:23
odyssey4memaster is focused on newton, so I'm guessing there would not be a UCA source for that though - it's come straight out of the Xenial source?12:24
odyssey4meI would guess that for Xenial the package in the distro would be used, but for trusty the package from UCA would be used?12:24
odyssey4meso the multi-os enablement helps there to deal with the differences12:24
smatzekUCA doesn't have a Newton distro up yet.  based on their web page newton will only be on Xenial.  trusty at UCA will ride out its LTS with mitaka.12:25
smatzekso a wider list of ceph binary sources for debian is really:  ceph.com, uca, or just use what's in my distro default repo- don't add one.  ceph-ansible has this option as well.12:26
*** psilvad has joined #openstack-ansible12:26
smatzekthe issue with "use my distro default" is that for Trusty this is Ceph Giant which was retired by Ceph 1 year ago, and was not an LTS release to begin with.12:27
smatzekwhich is exactly why I'm trying to add UCA support so I can get a new LTS Ceph release on top of trusty ppc64le, which I can only get from UCA :)12:28
odyssey4meyeah, if we can skip the 'just use my distro' choice then let's do so - although I think for Xenial we'll have to do that... I'll leave that choice to you for now and we can always revise later12:28
odyssey4meit may be a good idea to add some level of docs for this with the patch which describes when you would select each option as you've done in the commit message - I don't think we have docs for this yet because that paradigm was only implemented after this was introduced12:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_horizon: Enable new LBaaS panel in Horizon  https://review.openstack.org/31273312:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_horizon: Enable IPv6 support in Horizon  https://review.openstack.org/31274112:30
*** javeriak has quit IRC12:31
smatzekin the release note yml or in a separate doc?12:32
mhaydenso IPv6 is enabled in Horizon's default config (in Newton, at least)12:34
mhaydenmy gut says we should default to "on" in Newton, and leave it off (but configurable) in liberty/mitaka12:34
matttodyssey4me: the ceph-ansible mechanism for defining what to install /is/ complex12:35
odyssey4mesmatzek in /doc/source - I wouldn't worry too much about that right now... if you're commenting the defaults file well and have added a good release note then that may do well enough... with the changes we're doing in the doc strategy it may make better sense to leave the details out of the install guide and rather just make sure the role default comments are clear12:35
odyssey4memhayden yeah, that sounds fine12:36
mhaydenwoot12:37
*** pjm6 has joined #openstack-ansible12:38
pjm6good morning all12:38
matttsmatzek: we wouldn't want xenial to use the distro ceph version right ?12:41
matttthat's jewel, which isn't LTS12:42
matttoh wait, it is12:42
*** jayc_ has joined #openstack-ansible12:43
smatzekyeah, Jewel is LTS.  I haven't spun up a xenial VM to verify what it has by default.12:43
smatzekI think we probably do want a "use my distro version" option, and that option would simply not add a repo in the _preinstall.yml, but still run through the install yml.12:43
odyssey4memhayden with regards to the lbaas dashboard - what you've done only works for lbaasv2 and completely removes the ability to use the lbaasv1 dashboard - is there a way to somehow allow both?12:44
mhaydenodyssey4me: in newton, LBaaSv1 is gone from the neutron codebase12:45
mhaydenso i have to work a different fix for mitaka12:45
mhaydenin mitaka, i'll need to handle both12:45
odyssey4memhayden ah, that's fine then - so the backport would have to cater for more options12:45
mhaydenunfortunately, yes :)12:45
odyssey4meok, I'm good with that then12:45
mhaydeni'm trying to think about the best way to do that in mitaka, since there's one variable for enabling the lbaas dashboard...12:46
mhaydeni like the simplicity of just having "horizon_enable_neutron_lbaas"12:46
mhaydenbut perhaps i need horizon_enable_neutron_lbaas and horizon_enable_neutron_lbaasv2?12:46
deadnull_hmm12:47
deadnull_I am fine either way12:47
deadnull_cc mhayden odyssey4me12:47
matttsmatzek: yeah that makes sense12:47
odyssey4meyeah, I was kinda thinking that - but if horizon_enable_neutron_lbaas is the only enduring var beyond mitaka then that isn't gret12:47
odyssey4me*great12:47
mhaydenso in mitaka, if someone flips horizon_enable_neutron_lbaas to true, how should i detect which one?12:47
matttsmatzek: so we have another issue we need to work around12:47
matttsmatzek: because we've always worked off the assumption that people will be using hammer from ceph.com12:48
odyssey4meI'm sort-of thinking that perhaps the horizon role could determine whether neutron_plugin_base is defined, then can detect the version from there12:49
matttsmatzek: https://github.com/openstack/openstack-ansible-os_nova/blob/master/defaults/main.yml#L39912:49
mhaydenodyssey4me: i'm okay with that12:49
matttsmatzek: we had to build that package manually, since ceph do not bundle their python bits separately12:49
deadnull_instead of a bool, maybe specify the verison?12:49
mhaydeni'd need to be careful since someone might be running it without the neutron role perhaps12:49
*** schwicht has joined #openstack-ansible12:51
*** bapalm has joined #openstack-ansible12:54
mhaydenodyssey4me: would it be possible to remove the -2 on this one? https://review.openstack.org/#/c/310605/12:55
smatzekmattt:  Can you help me understand that?  You built your own python-cephlibs?  What is in there that is not in python-ceph that the ceph_client role installs ? https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/ceph_client/vars/main.yml#L2212:58
mhaydenodyssey4me: thanks for the deuce on the lbaas wheel!13:02
odyssey4memhayden done - tweaked a little to be clear about backports and such13:02
pjm6guys anyone know if I can use horizon test server with SSL?13:03
pjm6when I do manage*.py --runserver 0.0.0.0:443 (disabling apache2) it says that can't run with SSL13:03
smatzekmattt:  is this a case of the package install of the python code not being used, or being overwritten by the pip install of the cephlibs in the venv for services that run in containers?13:05
matttsmatzek: hah, i actually forgot for a second why this was done13:10
matttsmatzek: but yes, it's because the python venv should be self-contained and there is no way to get the python-ceph files installed into the venv13:11
*** psilvad has quit IRC13:12
*** jamesdenton has joined #openstack-ansible13:12
*** asettle has joined #openstack-ansible13:13
smatzekmattt:  that's a mess, and it really does prohibit the use of any ceph release other than the one you've built into cephlibs.  It secretly pins you to hammer if you're running any ceph client in a container.  Nova compute would pick up whatever ceph release you targetted though.13:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Switch from dict to individual variables  https://review.openstack.org/31250613:14
matttsmatzek: yep13:14
matttsmatzek: not ideal, which is why i wanted to raise it so you're aware13:14
mhaydengood catch on the commit message, odyssey4me -- i totally missed that13:15
smatzekmattt: Thanks.  This poses a problem for me since we were planning on using Jewel and have a short time frame to get it done.13:16
matttsmatzek: previously we symlinked into the venv (also terrible), but perhaps the lesser of two evils?13:17
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Removing equal signs in docs  https://review.openstack.org/31258013:17
smatzekmattt: that may be the lesser of two evils.  Also ugly, but it gives the deployer freedom to choose ceph release and distibution source13:18
matttsmatzek: let me put in a review to get that commit back in13:18
matttsmatzek: and we'll get it reviewed and see what people think13:18
smatzekmattt:  awesome, thanks13:18
matttsmatzek: np13:18
*** psilvad has joined #openstack-ansible13:19
*** BjoernT has joined #openstack-ansible13:20
*** BjoernT is now known as Bjoern_zZzZzZzZ13:20
*** sacharya has joined #openstack-ansible13:23
*** Ger-chervyak has joined #openstack-ansible13:28
*** timl0101 has quit IRC13:28
*** sacharya has quit IRC13:28
evrardjpspotz_zzz I answered on your message on this commit https://review.openstack.org/#/c/312421, but I'd be happy to have your insights before doing another patchset13:28
*** Ger-chervyak has joined #openstack-ansible13:28
odyssey4memattt can you pass by these reviews please https://review.openstack.org/312677 / https://review.openstack.org/312402 / https://review.openstack.org/312387 ?13:31
matttodyssey4me: k13:31
odyssey4memhayden does https://review.openstack.org/#/q/I713ac489998e34cf0a916a8acc5ae752e657d163,n,z need to go back into liberty as well ?13:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Switch from dict to individual variables  https://review.openstack.org/31250613:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Removing equal signs in docs  https://review.openstack.org/31258013:33
*** tiagogomes has quit IRC13:33
matttodyssey4me: on the first, do you actually need to specify origin ?13:33
odyssey4memattt it depends on the git version I think - origin is a more univeral application and that's consistent with all the other patches on that topic13:34
mhaydenodyssey4me: looking13:34
mhaydenodyssey4me: actually, liberty is okay13:34
mhaydenyeah, just verified -- liberty's lbaasv2 docs are OK13:35
*** Bjoern_zZzZzZzZ is now known as BjoernT13:35
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add release note for paramiko issue workaround  https://review.openstack.org/31295313:35
mhaydenodyssey4me: i fixed a few things mattt found in https://review.openstack.org/#/c/312506/ -- should be good to go now (hopefully)13:35
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Add release note for paramiko issue workaround  https://review.openstack.org/31295413:36
odyssey4memattt also https://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible+topic:bug/1577469 when you're done with the others13:37
cloudnullmorning13:43
andymccrmorning friend13:43
pjm6cloudnull, o/13:43
pjm6andyhky, o/13:43
pjm6* andymccr, o/13:44
*** sigmavirus24_awa is now known as sigmavirus2413:45
odyssey4memattt git-harry FYI http://docs.openstack.org/releasenotes/openstack-ansible/liberty.html#id613:45
*** jayc__ has joined #openstack-ansible13:46
*** jthorne_ has joined #openstack-ansible13:46
*** jthorne has quit IRC13:46
*** openstackgerrit has quit IRC13:47
*** openstackgerrit has joined #openstack-ansible13:48
*** jayc_ has quit IRC13:49
cloudnullhows it going on this fine day ?13:53
*** ametts has joined #openstack-ansible13:55
evrardjpI had ice cream, so I'm in a good mood. Need reviews?13:55
openstackgerritMerged openstack/openstack-ansible-os_heat: Change pip install task state to 'latest'  https://review.openstack.org/31238713:56
*** asettle has quit IRC13:57
openstackgerritMerged openstack/openstack-ansible-os_horizon: Change pip install task state to 'latest'  https://review.openstack.org/31240213:59
*** deadnull_ has quit IRC14:01
*** tiagogomes has joined #openstack-ansible14:02
*** klamath has quit IRC14:02
*** klamath has joined #openstack-ansible14:03
*** klamath has quit IRC14:03
cloudnullim just catching up on all the things14:03
cloudnullice cream sounds good though14:03
*** klamath has joined #openstack-ansible14:03
openstackgerritMerged openstack/openstack-ansible-security: Switch from dict to individual variables  https://review.openstack.org/31250614:04
mhaydeni knocked the workflow+1 off this one when i rebased -- if someone could add it back, i'd be much obliged :) https://review.openstack.org/#/c/312580/14:05
odyssey4mecloudnull can you quickly do a run through on https://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible+topic:bug/1577469 ?14:05
cloudnullodyssey4me: looking now14:06
*** michaelgugino has joined #openstack-ansible14:08
*** jthorne_ has quit IRC14:09
cloudnullanyone want to give https://review.openstack.org/#/c/277199/ another look ?14:09
*** jthorne has joined #openstack-ansible14:10
openstackgerritMerged openstack/openstack-ansible-security: Removing equal signs in docs  https://review.openstack.org/31258014:10
cloudnulli think with the SSL patch we've deterimed that it all works as intended. so it'd be good to get that in so we have reps on it14:12
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Switch from dict to individual variables  https://review.openstack.org/31298014:12
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Removing equal signs in docs  https://review.openstack.org/31298214:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Removing equal signs in docs  https://review.openstack.org/31298214:13
openstackgerritMerged openstack/openstack-ansible: Add release note for paramiko issue workaround  https://review.openstack.org/31295314:17
openstackgerritMerged openstack/openstack-ansible: Add release note for paramiko issue workaround  https://review.openstack.org/31295414:17
michaelguginomhayden: Have you been able to prevent services from starting during install during 16.04?  invoke-rc.d seems to be summarily ignored.14:17
*** jayc__ is now known as jayc14:20
mhaydenoh you've gotta be kidding me -- ubuntu is auto-starting with systemd too?14:20
* mhayden vents14:20
* mhayden googles14:22
*** Ger-chervyak has quit IRC14:22
prometheanfiregit-harry: can you make fun of odyssey4me for me14:22
prometheanfirehttps://github.com/openstack/openstack-ansible/blob/11.2.14/playbooks/inventory/group_vars/all.yml#L1714:22
prometheanfirethat makes me sad :(14:22
*** Ger-chervyak has joined #openstack-ansible14:22
mhaydenmichaelgugino: i'm asking in #systemd14:23
prometheanfiregit-harry: I'm trying to build 11.2.13 now to see if that works14:24
matttsmatzek: so reverting https://github.com/openstack/openstack-ansible-os_nova/commit/1f63049542c5c3b50fbdf31228151af40a86cd0c (with similar reverts in os_glance and os_cinder) will work for you?14:24
*** Mudpuppy has joined #openstack-ansible14:25
git-harryprometheanfire: Using 11.2.13 probably will work but I'd prefer to wait for 11.2.1514:25
odyssey4meprometheanfire will be tagging 11.2.15 today, or at least requesting the tag today14:25
*** jaypipes has joined #openstack-ansible14:25
mhaydenmichaelgugino: got linked to https://freedesktop.org/wiki/Software/systemd/Preset/14:26
odyssey4meand yes, I make mistakes and forget to edit that file from time to time :p14:26
michaelguginoI joined that chan to see the discussion, thanks.  I'll dig into that and let you know what I find.14:26
odyssey4mein that particular case I completely forgot to SHA bump :/14:26
smatzekmattt:  yes at first glance it does look like that would fix it.14:27
*** spotz_zzz is now known as spotz14:27
*** krotscheck has quit IRC14:27
prometheanfireodyssey4me: thanks :D14:28
cloudnullodyssey4me: maybe we need to roll up https://github.com/openstack/openstack-ansible/blob/master/scripts/update-revision.sh into the source banch update script14:28
prometheanfireodyssey4me: I know, I'14:28
prometheanfireodyssey4me: I know, I'm just not in the uk to poke at you for it myself :P14:29
cloudnullthat script updates the revisions and while it does almost nothing in master, mitaka, it did more in liberty and kilo14:29
evrardjpmhayden thanks for the Preset link14:29
mhaydende nada14:30
mhaydenhopefully it works14:30
cloudnullsorry kilo and juno it did more14:30
odyssey4mecloudnull I've been thinking if adding a function that automagically figures out the next version, but I haven't had the time. In this particular case I didn't bump SHA's at all... I left the task to do it until the morning, then promptly forgot14:30
mhaydeni'm spinning up a 16.04 to tinkey14:30
mhaydentinker, even14:30
odyssey4meheh, and again we use automagically's name in vain14:30
evrardjpshouldn't ansible handle this correctly mhayden ?14:31
mhaydenansible doesn't know the difference, IIRC14:31
mhaydenubuntu/debian are the only distros i know of that start daemons immediately before you can even configure them :/14:31
evrardjpyeah, that sucks14:32
*** krotscheck has joined #openstack-ansible14:33
cloudnullmichaelgugino: does writing a /usr/sbin/policy-rc.d file work to block service auto startups?14:34
michaelguginomhayden: evrardjp Ansible doesn't know what it's doing14:34
michaelguginocloudnull: no14:34
cloudnull:'(14:34
evrardjpmichaelgugino it's maybe time to improve the service module then14:34
mhaydeni'll have to lengthen my rant blog post14:34
michaelguginoMy concern though is there might be a script in the mariadb-galera-server package that is calling to /usr/bin/mysqld directly, as opposed to using systemctl et al14:34
evrardjplink mhayden ?14:34
mhaydenevrardjp: https://major.io/2014/06/26/install-debian-packages-without-starting-daemons/14:35
cloudnullI had thought deb-systemd-invoke would do the right thing.14:35
cloudnullbut then again this is stemd we're talking about14:35
* cloudnull nudges mhayden and rackertom14:36
* mhayden puts his arm around cloudnull14:36
michaelguginodeb-systemd-invoke is installed, seems to do nothing14:36
cloudnullbut then again this is ubuntu we're talking about...14:37
cloudnull:D14:37
* mhayden hands cloudnull some crayons14:37
cloudnulli love crayons14:37
mhaydenokay it's not that bad14:37
mhaydeni'll adjust my comment14:37
* mhayden hands cloudnull some colored pencils14:38
michaelguginoI started digging through the deb build scripts that mariadb has on github.  It's a mess and I can't make sense of it because I've never built a .deb (I'm a RHEL guy)14:38
*** mageshgv has joined #openstack-ansible14:38
cloudnullcolored pencils are not as cool as crayons14:38
* odyssey4me hands cloudnull some colored permanent markers14:38
odyssey4me:D14:38
cloudnullare they the smelly kind?14:38
* cloudnull walks off14:39
* mhayden sniffs14:39
michaelguginowell, presets failed for mariadb-galera-server >:O14:40
cloudnullhttps://www.youtube.com/watch?v=0N-zS92_dUw14:40
mhaydeni think it's something in dpkg land that is overriding systemd14:40
michaelguginoThey may actually work for packages that are packaged by someone other than mariadb14:40
evrardjpmichaelgugino that's sad14:40
mhaydenyeah, i just installed nginx and it started immediately :/14:42
michaelguginobah.  This is the problem with systemd.  It probably works, but nobody knows how to call their programs correctly14:43
mhaydenmichaelgugino: actually, this is ubuntu using systemd improperly14:43
mhaydenthis doesn't happen on fedora, centos, rhel, arch...14:43
michaelguginoright, the problem is with people not using it correctly, that's what I said ;)14:44
cloudnulli just did this on suse, seems to work fine too.14:44
cloudnullso its a ubuntu problem14:44
cloudnulllikely a debian problem14:45
odyssey4mecores - need some reviews on https://review.openstack.org/312365 and https://review.openstack.org/312366 please14:45
michaelguginocould be.14:45
mhaydenmichaelgugino: WOW14:45
mhaydeni masked nginx, installed it, and it's running14:45
mhaydenso dpkg basically tells systemd to get lost14:45
mhaydenand does what it wants14:45
michaelguginoI tried disable *14:45
deadnullI don't like when distributions try to do things for the admin... tsk tsk14:46
michaelguginoThe problem I'm running into is that the config files for galera cluster cause the initial boot to hang, because the server is trying to join a cluster that doesn't exist and cannot connect.14:47
mhaydenso dpkg is forcefully removing the marked unit file and starting the daemon anyway14:47
* mhayden is impressed14:47
palendaemhayden: impressive14:48
*** chhavi has quit IRC14:48
mhaydensheesh14:48
michaelguginoBut, the processes also don't seem to exit correct :/, and I've got a half functioning mysql db running in the background14:48
mhaydenalso, an apt-get remove doesn't stop the service14:48
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-security: Add dependencies for paramiko 2.0  https://review.openstack.org/31300714:50
*** sdake has joined #openstack-ansible14:50
evrardjpmattt mhayden https://review.openstack.org/#/c/313007/14:51
cloudnullanyone ask in #ubuntu yet?14:52
mhaydenevrardjp: got it!14:52
evrardjpthanks14:52
cloudnullill float the question out there to see if anyone knows the internal black magic14:53
* mhayden takes a deep breath and joins #ubuntu14:54
*** gravi has joined #openstack-ansible14:54
*** iceyao has quit IRC14:54
jamesdentonSupreme Leader Ubuntu knows what is best for you, mhayden14:54
mhaydenhah14:54
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 12.0.12  https://review.openstack.org/30951114:54
palendaeShould have asked Shuttleworth while you had him in the elevator14:55
MudpuppyO.o14:55
*** jorge_munoz_ has joined #openstack-ansible14:56
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Check for two IP addresses assigned to same host  https://review.openstack.org/30805214:58
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Test and refactor argument parsing  https://review.openstack.org/31266514:58
michaelguginomystery solved mhayden14:59
*** jorge_munoz has quit IRC14:59
*** jorge_munoz_ is now known as jorge_munoz14:59
michaelguginoNo #!/bin/bash at the top of invoke-rc.d14:59
*** Brew has joined #openstack-ansible15:00
cloudnullmhayden: i think the answer is no in the ubuntu channel, as in they have no idea.15:00
*** jthorne has quit IRC15:00
*** jthorne has joined #openstack-ansible15:01
*** gravi has quit IRC15:02
mhaydencloudnull: can we just switch to centos as the default15:02
odyssey4memichaelgugino if we use the package in the ubuntu repo (instead of downloading from mariadb), does it improve the situation?15:02
cloudnullyes, if by centos you mean anything but im +215:02
*** phalmos has joined #openstack-ansible15:03
mhaydencloudnull: lolwut15:03
mhaydenmichaelgugino: ORLY?15:04
mhaydenseems dirty15:04
cloudnullodyssey4me: no the package doesn't make a difference. it seems to be changes in the way debian wraps systemd15:04
cloudnullmichaelgugino: so removing https://github.com/openstack/openstack-ansible-galera_server/blob/master/files/policy-rc.d#L1 makes it happy?15:05
cloudnullor does it need to be "bash" specific ?15:05
palendaeThat's policy-rc.d15:06
cloudnullah, yea. my mistake15:06
*** BjoernT has quit IRC15:09
*** daneyon has joined #openstack-ansible15:09
michaelguginoThe fix is echo exit 101 > /usr/sbin/policy-rc.d15:11
michaelguginoodyssey4me: still no galera compiled in in 10.0 in ubuntu's repos.15:11
odyssey4memichaelgugino yeah, but there are add-on packages right?15:11
cloudnullmichaelgugino: so we should be able to remove https://github.com/openstack/openstack-ansible-galera_server/blob/master/files/policy-rc.d#L1-L2 and make mariadb/galera happy15:12
mhaydenlooks like i found the logic in init-system-helpers15:13
cloudnullwe'd need to do the same in rabbit_server too https://github.com/openstack/openstack-ansible-rabbitmq_server/blob/master/files/policy-rc.d#L1-L215:13
mhaydenmichaelgugino: https://anonscm.debian.org/git/collab-maint/init-system-helpers.git/tree/autoscripts/postinst-systemd-start15:14
mhaydenhuge WTF on line 315:14
cloudnullmhayden: your ubuntu is making me sad15:15
mhaydenbut it looks like it's still checking for the policy file -> https://anonscm.debian.org/git/collab-maint/init-system-helpers.git/tree/script/deb-systemd-invoke15:15
mhaydencheck line 6015:15
michaelguginoright, deb-systemd-invoke is supposed to respect the file15:16
michaelguginoodyssey4me: I believe mariadb-galera-server is source patched, so I don't think there's simply an addon we can use from the repos to get the cluster to work15:16
mhaydenhmm, i got the policy-rc.d to work15:16
michaelguginome too.  I had to make it that one liner from the linked page15:17
michaelguginohttps://jpetazzo.github.io/2013/10/06/policy-rc-d-do-not-start-services-automatically/15:19
mhaydenmichaelgugino: https://gist.github.com/major/88c708684e29aaecba63dca83e2b23f015:19
*** schwicht has quit IRC15:20
mhaydenthat seems to work for me15:20
*** weezS has joined #openstack-ansible15:20
michaelguginoyeah, me too15:20
mhaydenthis still feels so silly for something that should be a default15:20
*** schwicht has joined #openstack-ansible15:20
michaelguginoI completely agree.15:21
palendaeYeah15:21
michaelguginowasted a whole afternoon on this yesterday.15:21
palendaeHasn't Debian/Ubuntu been a terrible offender of just starting services on install since inception though?15:21
michaelguginoyes, they have15:21
cloudnullso then we need to modify https://github.com/openstack/openstack-ansible-galera_server/blob/master/files/policy-rc.d#L1-L2 and https://github.com/openstack/openstack-ansible-rabbitmq_server/blob/master/files/policy-rc.d#L1-L2 to use bash instead of sh15:22
palendaeThey're just making it harder to fix with systemd I guess15:22
*** basilAB has quit IRC15:23
michaelguginocloudnull: I've already got a huge patch in the works, I'll work that in15:23
*** basilAB has joined #openstack-ansible15:23
cloudnullcool15:23
*** sacharya has joined #openstack-ansible15:24
*** mummer has joined #openstack-ansible15:24
*** sacharya has quit IRC15:29
mhaydenmichaelgugino: it actually looks like systemd masks are workig15:29
mhaydeni did a ln -s /dev/null /etc/systemd/system/apache2.service15:29
mhaydenthen installed apache215:29
mhaydenand it didn't start15:29
michaelguginovery nice.15:30
mhaydenthat could be easier15:30
michaelguginoyou should blog these approaches ;)15:30
mhaydeni guess i should15:30
openstackgerritMerged openstack/openstack-ansible-repo_server: Reorganize test playbooks  https://review.openstack.org/31230215:31
pjm6guys I have a doubt15:32
michaelguginoI'll try the service masking for mariadb-galera.  That is still dropping an init file, so I'm not sure if systemd masking will work.15:32
pjm6when we use launch an instance15:32
pjm6we have a private IP and then we can use a floating IP15:32
*** karimb has joined #openstack-ansible15:33
pjm6my question is why when we add an bridge interface in the ETH015:33
pjm6we lost connectivity of info?15:33
pjm6its because the interface eth0 now will be the br015:33
pjm6and this breaks the neutron configuration?15:33
pjm6the point is to make a openvpn server that will allow users to connect to the private network15:33
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Add dependencies for paramiko 2.0  https://review.openstack.org/31300715:34
odyssey4memhayden evrardjp ^ I added the missing bits to make it go15:34
michaelguginolet's get some quick reviews on this one:  https://review.openstack.org/#/c/312808/15:35
michaelguginofixes a bug with linters test15:35
odyssey4memichaelgugino yeah, saw that - was wondering about it because palendae has something of a similar line15:37
odyssey4memichaelgugino I think it's https://review.openstack.org/30805215:37
palendaeSounds like there's still confusion15:38
michaelguginoodyssey4me: that's already merged I thought15:38
palendaeNo, multiple host names to one IP is merged15:38
palendaeMultiple IPs to one host name is awaiting merge15:38
michaelguginohttps://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/dynamic_inventory.py#L5215:39
palendaemichaelgugino: Multiple Hosts, One IP15:39
palendaeNot one host, multiple IPs15:39
palendae2 different problems, but similar15:39
*** galstrom_zzz is now known as galstrom15:39
michaelguginoI think two ip's assigned to the same host is applicable in some cases15:39
odyssey4menot in our inventory15:40
michaelguginotrue15:40
odyssey4mewell, to be clear - not two ip's to one host in the openstack_user_config or conf.d files15:40
palendaeIn any case, those are the two scenarios; your patch is for the multiple hosts with the same IP. It's valid, but the commit message states it's for duplicate IPs15:40
michaelguginoI'm following you guys, let me check the commit msg15:41
openstackgerritMichael Gugino proposed openstack/openstack-ansible: Fix dynamic_inventory.py test bug  https://review.openstack.org/31280815:43
*** Zucan has joined #openstack-ansible15:43
michaelguginopalendae: You should implement the same fix in your test15:43
palendaeNot sure I'm following; the dictionary insert order shouldn't matter if you're looking up by the specific key15:43
michaelguginoinventory is a dictionary, it's not guaranteed which IP or hostname will show up first.15:43
palendaeRight...15:44
palendaeTests are using ordered dicts though15:44
palendaeUsing that .sort method doesn't necessarily guarantee accurate order, either15:44
palendaeIt'd do alphanumeric sort15:44
palendaeWhich may not reflect what actually got passed in to the function15:45
michaelguginowe only need to it sort for the test15:45
michaelguginohttps://review.openstack.org/#/c/311802/15:45
michaelguginoyou'll see the linter check failed there15:45
openstackgerritMerged openstack/openstack-ansible-os_horizon: Enable IPv6 support in Horizon  https://review.openstack.org/31274115:45
michaelguginoAssertionError: 'ip address:172.29.236.100 has already been assigned to host:hap, cannot assign same ip to host:aio1' != 'ip address:172.29.236.100 has already been assigned to host:aio1, cannot assign same ip to host:hap'15:45
*** jayc_ has joined #openstack-ansible15:45
palendaeOk; if it's ordering for the test, it shouldn't be in the exception itself15:45
michaelguginoI think putting it in the exception is the most obvious place15:46
*** mikelk has quit IRC15:46
odyssey4megit-harry FYI Kilo tag request is done: https://review.openstack.org/31302815:48
*** neilus has quit IRC15:48
*** jayc has quit IRC15:49
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Enable ha router support in Horizon  https://review.openstack.org/31303115:49
palendaeOh15:52
*** eil397 has joined #openstack-ansible15:52
palendaeThat needs this part of the change https://review.openstack.org/#/c/308052/14/tox.ini15:52
palendaeThat makes the dictionaries reliable15:52
*** fauxbert has quit IRC15:54
*** saneax is now known as saneax_AFK15:59
palendaemichaelgugino: Have a link to the actual Jenkins log for the failure? Gerrit's not showing it now15:59
palendaeI'd like to see what PYTHONHASHSEED it got16:00
*** jmccrory_ has joined #openstack-ansible16:00
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Enable next gneration instance launch in Horizon  https://review.openstack.org/31303716:01
michaelguginopalendae: http://logs.openstack.org/02/311802/2/gate/gate-openstack-ansible-linters/2751e60/console.html16:02
michaelguginolinters runtests: PYTHONHASHSEED='681289476'16:03
palendaeThanks16:03
michaelguginoI was reading somewhere recently that the hashseed can be the same, but if the underlying system isn't, you'll get unpredictable outcomes16:03
palendaeRight16:03
palendaeCan be16:03
odyssey4memeeting in #openstack-meeting-4 cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino,16:04
odyssey4me ametts, v1k0d3n, severion, bgmccollum, darrenc, JRobinson__, asettle16:04
palendaeBut changing that sort won't be reliable either16:04
palendaeIf the systems weren't read in alphanumerical order, that sort will be backwards16:04
palendaee.g. zhost was processed first but ahost came second, that sort will say ahost was the first one16:04
michaelguginopalendae: sort will be reliable.  That's why I created a list and sorted it16:04
michaelguginothat's what we want, for it to say that ahost was the same one16:04
michaelgugino*first one16:04
palendaeahost came second16:05
palendaeIn the processing16:05
michaelguginothere is no second in a dictionary16:05
palendaeNo, but there is in string16:05
michaelguginoas long as the user has both hostnames, they should be able to sort it out16:05
palendaeWith stated arguments16:05
*** timl0101 has joined #openstack-ansible16:05
*** tiagogomes has quit IRC16:06
michaelguginoit's the first host only in the context that it was randomly selected from the dictionary as the first host16:06
palendaeSure16:06
michaelguginoperhaps the error string should be updated as well to be more clear16:07
palendaeYeah, by doing that .sort you're making the string inaccurate16:07
palendaeIt conveys that it parsed ahost first in that scenario, when it parsed zhost16:08
palendaeYou're right in that it probably doesn't matter a ton16:08
palendaeAlso, yeah, the python hash seed can be set the same and the system will behave differently; locally my tests pass with the failing seed16:09
palendaeI'd be for correcting the error message to simply say both hosts were assigned the same IP, drop any statement of order in the text16:09
michaelguginoyeah, these kinds of bugs suck ;)16:09
palendaeThey do16:10
palendaeI'd like to replace everything internally with ordered structures16:10
palendaeBut not wholesale quite yet16:10
*** karimb has quit IRC16:10
palendaeEven just an OrderedDict16:10
michaelguginono need for ordered, we want this dynamic_inventory.py script to evolve into something else, no sense in refactoring something that will hopefully go away16:11
palendaeIt'll evolve, yes, but we'll always have some kind of ordered tests16:11
mhaydenmichaelgugino: oops, i woke up jkeating :) https://twitter.com/iamjkeating/status/72825558884974592016:11
palendaeAnd all code should go away :)16:11
NepocGreetings, could someone check their openstack-ansible liberty install if they are able to select the zh-cn language for their user and actually have it update the entire UI? Currently it only changes dates and one column name for me.. However it works fine in dev-stack16:11
palendaewe refactor anyway16:11
*** Ger-chervyak has quit IRC16:12
michaelguginolol.  I'm not familiar with that person mhayden16:12
michaelguginoRub some docker on them sounds like a plan though.16:12
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Automatically enable neutron ha router capabilities  https://review.openstack.org/31304216:13
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Enable next gneration instance launch in Horizon  https://review.openstack.org/31303716:17
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Update SHAs and config templates  https://review.openstack.org/31277416:21
mhaydenmichaelgugino: he's a former rackspace guy who works for "Bluebox, an IBM company" :)16:23
mhaydenhe's super talented with ansible16:23
michaelguginoah, cool.16:23
michaelguginoI avoid twitter.  Too much fluff16:24
mhaydenyeah, i don't tweet much16:24
* mhayden winks16:24
palendaemhayden: Ask him when Bluebox switched to Kolla16:26
mhaydenwait, they did?16:26
palendae;)16:26
palendaeIf he wants to docker everything!16:26
stevelleyeah, he says 'container' but seems to mean 'docker'16:27
palendaeDefinitely docker mentality if nothing else16:27
stevellecuz the daemon still starts immediately if you install it in an lxc container16:27
stevelle:D16:27
palendaeAll process ids must live in their own docker container!16:28
palendaeprocess id will always be 2!16:28
*** sdake_ has joined #openstack-ansible16:28
*** daneyon has quit IRC16:30
*** sdake has quit IRC16:31
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Mention of the supported locales in the documentation  https://review.openstack.org/31105816:38
*** sacharya has joined #openstack-ansible16:39
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Check for two IP addresses assigned to same host  https://review.openstack.org/30805216:40
palendaemichaelgugino: ^ uses the sort for the IP address error now16:40
*** david-lyle has joined #openstack-ansible16:42
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Enable next gneration instance launch in Horizon  https://review.openstack.org/31303716:42
NepocHello, not sure if anyone read my message but I've been talking to the openstack-horizon people and they seem to think that openstack-ansible is not running the compilemessage when building horizon.16:43
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Automatically enable neutron ha router capabilities  https://review.openstack.org/31304216:44
cloudnullhi Nepoc16:44
michaelguginopalendae: exactly what I was thinking re the log message itself16:44
NepocHi cloudnull16:45
cloudnullNepoc:  sorry im missing context, what do you mean "compilemessage"?16:45
cloudnullsorry to make you repeat16:45
NepocNo problem16:45
NepocI am currently unable to change languages in Horizon. For example if I select simplified chinese it will only change dates and a single column "e-mail" on the User page.16:46
NepocUsers list I should say16:47
palendaeI think that's part of django's translation layer https://docs.djangoproject.com/en/1.9/topics/i18n/translation/16:47
NepocYes16:47
palendaehttps://docs.djangoproject.com/en/1.9/ref/django-admin/#compilemessages16:47
palendaeWhich probably relates to evrardjp's patch at https://review.openstack.org/31105816:47
NepocAh :(16:48
palendaeBut that's a good point; any work to support future locales needs to, for example, run compilemessages16:48
NepocOkay now to figure out how to make this work16:48
evrardjppalendae I'm glad I became an oracle that can predict the future issues.16:49
NepocI have to have Chinese enabled in Horizon by the end of the week16:49
evrardjptoo bad I'm not.16:49
palendaeevrardjp: :p16:49
palendaeNepoc: Just Horizon?16:49
NepocThat would be enough16:49
evrardjpNepoc that's not a short deadline right?16:49
evrardjpincluding console?16:49
NepocNo console doesn't have to be16:49
palendaeAs a high level idea, could set a variable to take a locale identifier, if specified then run the compilemessages command16:50
evrardjpNepoc is your browser correctly set to chinese?16:50
evrardjpjust to make sure16:50
spotzok I tooks a few might have bitten off more then I can chew though:)16:50
NepocI have a computer from china I can test with16:51
*** daneyon has joined #openstack-ansible16:54
Nepocpalendae: When/Where should I run compilemessages?16:55
palendaeNepoc: That I'm not sure of. I'd assume the logic would go somewhere in these files though https://github.com/openstack/openstack-ansible-os_horizon/tree/master/tasks16:55
NepocI have tried django-admin compilemessages after it has already been installed but it complains that Settings already configured16:56
Nepocspecifically I did: export DJANGO_SETTINGS_MODULE=openstack_dashboard.settings ; cd /openstack/venvs/horizon-12.0.5 ; ./bin/django-admin compilemessages16:59
Nepocbrb16:59
*** daneyon has quit IRC17:00
*** sdake_ has quit IRC17:00
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_barbican: Use master git branches when testing  https://review.openstack.org/31305917:00
*** eil397 has left #openstack-ansible17:01
*** fignew has quit IRC17:02
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Isolate Ansible from the deployment host  https://review.openstack.org/30484017:05
*** javeriak has joined #openstack-ansible17:05
*** daneyon has joined #openstack-ansible17:05
*** daneyon_ has joined #openstack-ansible17:09
*** weezS has quit IRC17:10
evrardjpI'm off, see you another day!17:13
*** daneyon has quit IRC17:13
openstackgerritMerged openstack/openstack-ansible-os_heat: Multi-distro pattern for os_heat role  https://review.openstack.org/31174917:14
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_server: Updated role for multi-distro support  https://review.openstack.org/31306717:14
odyssey4meNepoc if you can work out how to extend the support to different locales and get patches in to make that happen, then we can revert https://review.openstack.org/311058 once it merges... for now that's there to make people aware that we don't test it in any way and we haven't tried it either.17:15
cloudnullmichaelgugino: I updated https://review.openstack.org/#/c/311058/ to remove the bind mount options.17:16
cloudnullodyssey4me: responded to your comments too17:16
cloudnullsorry https://review.openstack.org/#/c/304840/17:16
Nepocodyssey4me: Thank you for the info... hopefully I can make some magic happen.17:19
michaelguginocool.  I'll take a look at it more thoroughly.17:19
openstackgerritMerged openstack/openstack-ansible: Updates all SHAs for 12.0.12  https://review.openstack.org/30951117:20
odyssey4meNepoc I hope so. It was through many of the interactions with yourself and others that we realised that it wasn't simple, so we opted to add the doc entry to rather set expectations.17:20
cloudnullwho wants to push the button on https://review.openstack.org/#/c/277199/  ;)17:22
*** kiranv has joined #openstack-ansible17:22
openstackgerritMichael Gugino proposed openstack/openstack-ansible: Fix dynamic_inventory.py test bug  https://review.openstack.org/31280817:23
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_server: Updated role for multi-distro support  https://review.openstack.org/31306717:23
*** thorst has quit IRC17:23
*** saneax_AFK is now known as saneax17:24
*** thorst has joined #openstack-ansible17:24
*** gluytium has quit IRC17:24
michaelguginopalendae: I updated that error message just for you ;)17:25
cloudnullNepoc:  so if you run the following ``pushd /openstack/venvs/horizon-master/lib/python2.7/site-packages/horizon/; /openstack/venvs/horizon-master/bin/horizon-manage.py compilemessages; popd`` it should work ?17:25
*** jang has joined #openstack-ansible17:25
cloudnullassuming you have the locals set?17:25
cloudnullalso assuming you're on master17:26
cloudnull# /openstack/venvs/horizon-${RELEASE_VERSION}/bin/horizon-manage.py compilemessages17:26
*** thorst has quit IRC17:28
michaelguginomhayden: ln -s /dev/null /etc/systemd/system/mysql.service does not work for mariadb-galera-server, but the modified policy-rc.d method does.  This will only be an issue for debian/ubuntu based hosts anyway, RPM distros don't start things automatically (imagine that)17:30
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_barbican: Use master git branches when testing  https://review.openstack.org/31305917:32
Nepoccloudnull: I'll try it out, I'm on liberty17:35
*** Ger-chervyak has joined #openstack-ansible17:37
Nepoccloudnull: Well there is now 3 more things with translations17:39
cloudnullNepoc:  i also found https://github.com/openstack/horizon/blob/master/openstack_dashboard/settings.py#L198-L22017:40
NepocIt certainly created the .mo file17:40
cloudnullyou might need to set https://github.com/openstack/horizon/blob/master/openstack_dashboard/settings.py#L21617:40
*** Ger-chervyak has quit IRC17:40
Nepocmmm ok17:41
NepocI'll try that17:41
*** javeriak_ has joined #openstack-ansible17:44
*** javeriak has quit IRC17:46
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_server: Updated role for multi-distro support  https://review.openstack.org/31306717:47
*** fignew has joined #openstack-ansible17:47
*** jayc_ has quit IRC17:49
NepocThere we go... I guess the translation is very limited... I swear it was 100% translated in the past17:50
NepocThe Compute Overview page has the most translation done to it17:51
*** itlinux has joined #openstack-ansible17:52
cloudnullNepoc:  it seems that the compile command needs to be run in "/openstack/venvs/horizon-${RELEASE_VERSION}/lib/python2.7/site-packages/openstack_dashboard" and "/openstack/venvs/horizon-${RELEASE_VERSION}/lib/python2.7/site-packages/horizon"17:58
cloudnullwhile related they are different :\17:58
Nepocokay I'll do that too, thank you17:58
*** chandanc has joined #openstack-ansible17:59
*** electrofelix has quit IRC17:59
*** pjm6 has quit IRC18:00
*** jayc_ has joined #openstack-ansible18:03
*** thorst_ has joined #openstack-ansible18:04
*** weezS has joined #openstack-ansible18:04
NepocThere we go!18:05
NepocAfter running that and an apache restart we are in business18:05
Nepoccloudnull: Thank you for the help18:06
NepocNow just need to do that on install18:07
cloudnullsweet!18:07
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 11.2.16  https://review.openstack.org/31309118:08
odyssey4meNepoc I expect to see a patch in for that soon. :)18:09
Nepocodyssey4me: I will see what I can do, but I promise nothing! :)18:10
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for 12.0.13  https://review.openstack.org/31309418:13
NepocAnother question today for something that I'm hopefully not going to be working on for a couple weeks. Can I get openstack-ansible to install "some" lxc compute nodes?18:13
odyssey4meNepoc maybe - michaelgugino and I were talking about doing a test implementation of the nova-lxd driver and implementing that as an optional hypervisor18:14
michaelguginowe're going to be working on that very soon.18:15
NepocI would need to have say 10 KVM comptue and 2 LXC compute... would that address that scenario?18:15
michaelguginoI'll let my associate know to put it on the top of his list for next week.18:15
michaelguginoNepoc: yes, we plan on doing a mixed environment.18:15
NepocGreat :)18:16
NepocI can be your Guinea pig18:16
odyssey4meit'll be easy enough to implement the hypervisor, but to have it work in the mixed environment will possibly take a little openstack experience as it'll involve working with scheduler filters, host aggregates and such I would guess18:16
odyssey4mebut getting the bits and the right config down is a good starting point18:17
NepocThe potential downside is that I'm running 12.0.5 (not sure what the latest is at this point)18:17
michaelguginoodyssey4me: I think it should be transparent.  You just tag images with the hypervisor type, and that should be it.  It will schedule the correct hypervisors.18:17
michaelguginoof course, this is all theory on our end, at this point.  We'll have something POC soon, hopefully.18:18
odyssey4meNepoc we'll aim for inclusion in Newton only. Backporting that to Liberty will be something you'll have to take the risk on and do yourself. There are no guarantees on that working.18:18
michaelguginoWhat I was told was that mixed environments is supported in Mitaka.  I'm looking for BP to mitaka ;)18:19
odyssey4mebackport to Mitaka can be considered depending on the amount of code churn it takes and how comfortable everyone is with the implementation18:19
*** jmccrory_ has quit IRC18:19
michaelguginobut, that's not up to me.  I think it should be marked experimental, of course.18:19
openstackgerritMichael Gugino proposed openstack/openstack-ansible-galera_server: [WIP] Implement Xenial Support  https://review.openstack.org/31260218:20
*** TxGirlGeek has joined #openstack-ansible18:21
NepocFun times... So would you say I'm "crazy" if I were to try and get mixed environments to run in liberty?18:21
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-repo_server: Updated role for multi-distro support  https://review.openstack.org/31306718:23
*** retreved_ has joined #openstack-ansible18:25
cloudnullNepoc: no18:27
cloudnullyou can set the vars currently in the openstack_user_config there may be some dragons there but (in theory) it should work .18:28
odyssey4meNepoc not crazy - it's just that the project won't be actively working on supporting it natively considering that Liberty is moving into the 'security-only' fix state of the life cycle18:28
*** retreved has quit IRC18:28
odyssey4meNepoc we'd rather work on helping you get to Mitaka through an upgrade process :)18:28
*** retreved_ has quit IRC18:31
NepocYeah it's not that simple, we have product that is integrated with openstack. Unfortunately our development is a lot slower paced than openstack. We usually skip a version of openstack with our releases. I've also customized the openstack-ansible installer to install our product on it as well.18:31
*** eil397 has joined #openstack-ansible18:31
*** retreved has joined #openstack-ansible18:31
odyssey4meNepoc well, hopefully you can upstream a lot of the customisations to make that easier to do18:31
NepocUnforunately 90% can't be sent back up... useless to everyone else.18:32
*** TxGirlGeek has quit IRC18:32
NepocMy next step is to try and seperate it out as much as possible. I've leart a lot so I can remove some of the customizations18:33
odyssey4mejmccrory automagically cloudnull d34dh0r53 stevelle mattt hughsaunders andymccr a couple of reviews need some attention https://review.openstack.org/#/q/topic:py_from_git_begone+status:open18:34
NepocI think the biggest changes were to ha-proxy, I had to completely redo the templates and everything that fed into them. I needed custom certificates for each component.18:34
NepocThat might be useful to some18:35
odyssey4meanother review that needs some votes https://review.openstack.org/31300718:35
d34dh0r53anyone else getting tons of 502s on gerrit?18:37
odyssey4med34dh0r53 yep18:37
d34dh0r53cool, not just me then18:37
cloudnullNepoc: ++ that'd be useful18:39
cloudnullIMO18:39
NepocI just need to make the majority of my changes easily configurable from openstack_deploy, then it will be useful :)18:40
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_barbican: Change pip install task state to 'latest'  https://review.openstack.org/31238118:43
cloudnullNepoc: typie typie18:43
cloudnull:p18:43
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_barbican: Add .swp files to .gitignore  https://review.openstack.org/31254218:46
Nepoccloudnull: haha18:47
Nepoccloudnull: I've created mysefl a userstory to do all of this... makes my life easier too in the long run. then I'm not a bottleneck for upgrading to later releases.18:48
*** sdake has joined #openstack-ansible18:48
cloudnullawesome!18:48
NepocI'm very interested how an openstack-ansible upgrade will work on my systems.18:50
Nepocand... lunchtime18:50
* cloudnull afk for food too18:51
*** TxGirlGeek has joined #openstack-ansible18:52
*** sdake_ has joined #openstack-ansible18:55
*** sdake has quit IRC18:57
openstackgerritMerged openstack/openstack-ansible-os_horizon: Remove py_from_git role  https://review.openstack.org/31236618:57
openstackgerritMerged openstack/openstack-ansible-os_heat: Remove py_from_git role  https://review.openstack.org/31236518:58
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Forward rsyslog to containers on the log_hosts group only  https://review.openstack.org/31311719:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Automatically increment the patch ver with sources-branch-updater  https://review.openstack.org/31311819:05
*** TxGirlGeek has quit IRC19:05
odyssey4meprometheanfire cloudnull ^ magic now happens19:05
prometheanfirehi19:05
*** Ger-chervyak has joined #openstack-ansible19:06
*** javeriak_ has quit IRC19:09
*** hybridpollo has joined #openstack-ansible19:09
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Test and refactor argument parsing  https://review.openstack.org/31266519:09
*** smatzek has quit IRC19:15
openstackgerritMerged openstack/openstack-ansible-security: Add dependencies for paramiko 2.0  https://review.openstack.org/31300719:15
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Forward rsyslog to containers on the log_hosts group only  https://review.openstack.org/31311719:16
-openstackstatus- NOTICE: Gerrit is restarting to address performance issues related to a suspected memory leak19:20
*** Ger-chervyak has quit IRC19:20
*** Ger-chervyak has joined #openstack-ansible19:21
*** kstev has joined #openstack-ansible19:24
openstackgerritTim Laszlo proposed openstack/openstack-ansible: Use task state instead of output to create haproxy log directory  https://review.openstack.org/31312619:27
openstackgerritMichael Gugino proposed openstack/openstack-ansible-os_neutron: [WIP] Implementing neutron_openvswitch_agent  https://review.openstack.org/29876519:31
*** TxGirlGeek has joined #openstack-ansible19:39
*** smatzek has joined #openstack-ansible20:01
*** TxGirlGeek has quit IRC20:04
*** TxGirlGeek has joined #openstack-ansible20:04
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Ensure that the sources-branch-updater updates the Ironic role  https://review.openstack.org/31313920:08
*** Ger-chervyak has quit IRC20:09
*** TxGirlGeek has quit IRC20:09
odyssey4menight all - time for me to get home20:09
cloudnullhave a good one20:11
*** Ger-chervyak has joined #openstack-ansible20:12
spotznight odyssey4me20:12
*** TxGirlGeek has joined #openstack-ansible20:13
palendaeWow, not even hom?20:13
palendaeHave a good one!~20:13
*** admin0 has joined #openstack-ansible20:16
*** chandanc has quit IRC20:19
*** smatzek has quit IRC20:20
*** Zucan has quit IRC20:22
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Doc: Configuring the network refactor  https://review.openstack.org/31242120:22
*** mummer has quit IRC20:26
*** mummer has joined #openstack-ansible20:26
spotzLet me guess I'm the only one getting 503 in gerrit?20:27
cloudnullnope20:28
spotzwoot it's not just me!!!!20:28
-openstackstatus- NOTICE: Gerrit is restarting to revert incorrect changes to test result displays20:28
palendaelol20:28
*** michaelgugino has quit IRC20:29
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Skip rsyslog configuration for juno-container-cleanup.sh  https://review.openstack.org/31311720:33
*** sdake has joined #openstack-ansible20:35
*** sdake_ has quit IRC20:36
*** weezS has quit IRC20:43
openstackgerritBjoern Teipel proposed openstack/openstack-ansible: Skip rsyslog configuration for juno-container-cleanup.sh  https://review.openstack.org/31311720:45
*** TxGirlGeek has quit IRC20:45
*** thorst_ has quit IRC20:46
*** daneyon_ has quit IRC20:47
cloudnullwho wants to push the button on https://review.openstack.org/#/c/277199/ :)20:48
*** schwicht has quit IRC20:48
cloudnullandymccr automagically jmccrory mattt d34dh0r53 ?20:49
cloudnull:D20:49
jmccrorycloudnull: reading through it20:50
cloudnulljmccrory: thnx :)20:50
*** thorst_ has joined #openstack-ansible20:53
*** chandanc has joined #openstack-ansible20:55
mrdaMorning20:55
spotzhey mrda20:56
mrdao/20:56
admin0cloudnull:  he20:57
admin0hey20:57
*** thorst_ has quit IRC20:57
admin0am in vacation, but wanted to test and comment on the SSL thing .. i could not get it to work .. so was wondering if you have a working config example somewhere that i can copy/paste and try20:57
cloudnulladmin0: my test env was just default and it seemed to work.21:01
cloudnulli built out a 22 node lab to test.21:02
admin0yay !21:02
cloudnullbut if there are issues with it we should fix them :)21:02
admin0i might be overdoing on the configs maybe .. so what is the minimum i should have ?21:02
*** johnmilton has quit IRC21:04
*** fawadkhaliq has joined #openstack-ansible21:04
*** weezS has joined #openstack-ansible21:04
admin0cloudnull:  also imp .. what branch should it be tested on21:05
cloudnullmaster is where i've been testing21:05
*** saneax is now known as saneax_AFK21:05
admin0ok21:05
admin0check!21:05
admin0master branch,  horizon_user(ssl,ca,key_cert) path21:06
cloudnulli've changed nothing in config21:06
cloudnulland let it do the self signed ssl21:06
cloudnullI've also done it w/ letsencrypt now too21:06
admin0could it be different for self signed vs user_provided ?21:06
cloudnullit should not21:06
cloudnulli've not tried a user provided cert tbh so that may be where some of the issues are. im not sure.21:07
admin0if it works iwth letsencrypt, that is also fine21:07
admin0does it auto generate letsencrypt based on the hostname provided ?21:07
admin0my internal points to a local IP .. i think it cannot use letsencrypt for that21:09
*** raddaoui has joined #openstack-ansible21:09
*** psilvad has quit IRC21:11
*** thorst_ has joined #openstack-ansible21:12
*** smatzek has joined #openstack-ansible21:13
*** Ger-chervyak has quit IRC21:14
*** thorst_ has quit IRC21:17
cloudnullit does not "work" with lets encrypt21:20
admin0ok21:20
cloudnullbut i did the deployment21:20
cloudnulland then replaced the cert with lets encrypt21:20
admin0aha21:20
admin0ok21:20
cloudnullso not quite the same test21:20
admin0i don’t mind doing that also21:20
admin0is it an easy process ?21:20
admin0just change it once in haproxy right ?21:20
admin0hmm.. so use master branch,   and the only setting that goes to config is apply_security_hardening: false .. rest = nothing @ all ( except my ceph integration )21:21
cloudnullyup21:22
admin0will give it a try21:22
cloudnullthen install lets encrypt and replace the certs21:22
cloudnullworks well21:23
cloudnulluse the staging certs from lets encrypt21:23
cloudnullthen you dont have to worry about rate limits21:23
admin0i have a real wildcard cert21:23
cloudnullok21:23
cloudnullthat works too21:23
cloudnulland likley better :)21:23
admin0will give it a try21:23
admin0to see if the self-signed path helps21:23
admin0so what won’t be in SSL ?21:24
cloudnulleverything public facing will use ssl termination21:24
admin0ok21:25
*** weezS has quit IRC21:25
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Switch from dict to individual variables  https://review.openstack.org/31298021:27
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Removing equal signs in docs  https://review.openstack.org/31298221:27
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: iniital commit to enable mitaka>newton upgrades  https://review.openstack.org/31229221:29
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_horizon: Enable ha router support in Horizon  https://review.openstack.org/31303121:31
*** fawadkhaliq has quit IRC21:33
*** ametts has quit IRC21:34
*** tiagogomes has joined #openstack-ansible21:37
*** Mudpuppy has quit IRC21:41
openstackgerritDarren Birkett proposed openstack/openstack-ansible-rabbitmq_server: install rabbitmq-server in serial  https://review.openstack.org/31054221:48
*** jamesdenton has quit IRC21:49
*** sdake has quit IRC21:50
*** jang has quit IRC21:50
openstackgerritDarren Birkett proposed openstack/openstack-ansible: install rabbitmq-server in serial  https://review.openstack.org/31316821:50
admin0cloudnull: running again .. will report/update tomorrow21:50
admin0now late21:50
admin0will let it run over the night21:51
*** sdake has joined #openstack-ansible21:51
*** tiagogomes has quit IRC21:52
*** woodard has quit IRC21:56
*** sdake has quit IRC21:56
*** woodard has joined #openstack-ansible21:56
*** ametts has joined #openstack-ansible21:56
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Doc: Configuring the network on target refactor  https://review.openstack.org/29131021:58
*** kstev has left #openstack-ansible22:00
openstackgerritDarren Birkett proposed openstack/openstack-ansible-rabbitmq_server: install rabbitmq-server in serial  https://review.openstack.org/31054222:05
cloudnullthanks admin022:08
cloudnulllet me know how it goes22:08
admin0will do22:08
*** admin0 has quit IRC22:11
*** sigmavirus24 is now known as sigmavirus24_awa22:14
*** mageshgv has quit IRC22:15
*** kiranv_ has joined #openstack-ansible22:15
*** kiranv has quit IRC22:17
*** asettle has joined #openstack-ansible22:18
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Automatically increment the patch ver with sources-branch-updater  https://review.openstack.org/31311822:18
*** galstrom is now known as galstrom_zzz22:20
*** phalmos has quit IRC22:21
openstackgerritMerged openstack/openstack-ansible: Enable SSL termination for all services  https://review.openstack.org/27719922:23
*** alextricity25_ has joined #openstack-ansible22:27
cloudnullboom ,22:29
cloudnullmy work is done here.22:30
cloudnullfor today ...22:30
*** ametts has quit IRC22:35
cloudnullim off cheers22:38
coolj_later cloudnull22:38
*** daneyon has joined #openstack-ansible22:40
*** Brew has quit IRC22:40
*** thorst_ has joined #openstack-ansible22:43
*** sacharya has quit IRC22:45
*** david-lyle has quit IRC22:51
*** thorst_ has quit IRC22:52
*** david-lyle has joined #openstack-ansible22:53
*** david-lyle has quit IRC22:58
*** alextricity25_ has quit IRC23:00
openstackgerritMerged openstack/openstack-ansible: Ensure that the sources-branch-updater updates the Ironic role  https://review.openstack.org/31313923:02
*** saneax_AFK is now known as saneax23:03
*** daneyon has quit IRC23:11
*** spotz is now known as spotz_zzz23:15
*** jaypipes has quit IRC23:16
*** retreved has quit IRC23:19
*** jayc_ has quit IRC23:19
*** Tebro has quit IRC23:31
*** Tebro has joined #openstack-ansible23:31
*** krotscheck has quit IRC23:31
*** krotscheck has joined #openstack-ansible23:31
*** jayc_ has joined #openstack-ansible23:32
*** klamath has quit IRC23:38
*** jthorne has quit IRC23:42
*** sacharya has joined #openstack-ansible23:45
*** johnmilton has joined #openstack-ansible23:48
*** sacharya has quit IRC23:50
*** johnmilton has quit IRC23:52
*** eil397 has quit IRC23:56
*** mummer has quit IRC23:57
*** karimb has joined #openstack-ansible23:58
*** woodard has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!