| *** thorst has joined #openstack-ansible | 00:16 | |
| *** thorst_ has joined #openstack-ansible | 00:18 | |
| *** thorst_ has quit IRC | 00:19 | |
| *** thorst_ has joined #openstack-ansible | 00:20 | |
| *** thorst has quit IRC | 00:22 | |
| *** markvoelker has joined #openstack-ansible | 00:24 | |
| *** markvoelker_ has joined #openstack-ansible | 00:25 | |
| *** Qiming has quit IRC | 00:26 | |
| *** thorst_ has quit IRC | 00:29 | |
| *** markvoelker has quit IRC | 00:29 | |
| *** markvoelker_ has quit IRC | 00:30 | |
| *** krotscheck_dcm is now known as krotscheck | 00:39 | |
| *** saneax_AFK is now known as saneax | 00:54 | |
| *** furlongm has joined #openstack-ansible | 01:00 | |
| *** psilvad has joined #openstack-ansible | 01:00 | |
| *** Qiming has joined #openstack-ansible | 01:16 | |
| *** fishcried has joined #openstack-ansible | 01:22 | |
| *** fishcried has quit IRC | 01:22 | |
| *** thorst has joined #openstack-ansible | 01:26 | |
| *** iceyao has joined #openstack-ansible | 01:29 | |
| *** thorst has quit IRC | 01:34 | |
| *** wadeholler has joined #openstack-ansible | 01:38 | |
| *** jamesdenton has quit IRC | 01:40 | |
| *** eric_lopez has joined #openstack-ansible | 01:49 | |
| *** ericlopez has quit IRC | 01:52 | |
| *** iceyao has quit IRC | 01:55 | |
| *** wadeholler has quit IRC | 01:57 | |
| *** iceyao has joined #openstack-ansible | 02:02 | |
| *** jamesdenton has joined #openstack-ansible | 02:03 | |
| *** iceyao_ has joined #openstack-ansible | 02:03 | |
| *** iceyao has quit IRC | 02:06 | |
| *** jamesdenton has quit IRC | 02:21 | |
| *** thorst has joined #openstack-ansible | 02:32 | |
| *** thorst has quit IRC | 02:39 | |
| *** jamesdenton has joined #openstack-ansible | 03:17 | |
| *** weezS has joined #openstack-ansible | 03:18 | |
| *** thorst has joined #openstack-ansible | 03:36 | |
| *** thorst has quit IRC | 03:44 | |
| *** weezS has quit IRC | 04:19 | |
| *** jamesdenton has quit IRC | 04:33 | |
| *** sacharya has quit IRC | 04:34 | |
| *** thorst has joined #openstack-ansible | 04:41 | |
| *** flwang has quit IRC | 04:45 | |
| *** xavpaice has quit IRC | 04:46 | |
| *** thorst has quit IRC | 04:50 | |
| *** flwang has joined #openstack-ansible | 05:03 | |
| *** xavpaice has joined #openstack-ansible | 05:04 | |
| *** shausy has joined #openstack-ansible | 05:15 | |
| *** eric_lopez has quit IRC | 05:16 | |
| *** fawadkhaliq has joined #openstack-ansible | 05:18 | |
| *** d34dh0r53 has quit IRC | 05:27 | |
| *** FrankZhang has quit IRC | 05:27 | |
| *** eglute_s has quit IRC | 05:27 | |
| *** sigmavirus24_awa has quit IRC | 05:27 | |
| *** jwagner has quit IRC | 05:27 | |
| *** cloudnull has quit IRC | 05:27 | |
| *** bogeyon1- has quit IRC | 05:27 | |
| *** eglute has joined #openstack-ansible | 05:30 | |
| *** cloudnull has joined #openstack-ansible | 05:30 | |
| *** jwagner has joined #openstack-ansible | 05:31 | |
| *** chhavi has joined #openstack-ansible | 05:32 | |
| *** saneax is now known as saneax_AFK | 05:32 | |
| *** sacharya has joined #openstack-ansible | 05:34 | |
| *** sacharya has quit IRC | 05:39 | |
| *** thorst has joined #openstack-ansible | 05:47 | |
| *** eric_lopez has joined #openstack-ansible | 05:48 | |
| *** cloudnull has quit IRC | 05:51 | |
| *** eglute has quit IRC | 05:51 | |
| *** jwagner has quit IRC | 05:51 | |
| *** eglute has joined #openstack-ansible | 05:52 | |
| *** eglute has quit IRC | 05:52 | |
| *** eglute has joined #openstack-ansible | 05:53 | |
| *** thorst has quit IRC | 05:53 | |
| *** cloudnull has joined #openstack-ansible | 05:53 | |
| *** jwagner has joined #openstack-ansible | 05:54 | |
| *** chhavi has quit IRC | 06:12 | |
| *** chhavi has joined #openstack-ansible | 06:14 | |
| *** berendt has joined #openstack-ansible | 06:16 | |
| *** jiteka has joined #openstack-ansible | 06:16 | |
| *** fawadkhaliq has quit IRC | 06:16 | |
| *** jiteka has quit IRC | 06:21 | |
| *** chhavi has quit IRC | 06:24 | |
| *** saneax_AFK is now known as saneax | 06:31 | |
| *** chhavi has joined #openstack-ansible | 06:36 | |
| *** saneax is now known as saneax_AFK | 06:47 | |
| *** thorst has joined #openstack-ansible | 06:51 | |
| *** thorst has quit IRC | 06:59 | |
| *** sacharya has joined #openstack-ansible | 07:01 | |
| *** sacharya has quit IRC | 07:06 | |
| *** winggundamth has quit IRC | 07:06 | |
| *** winggundamth has joined #openstack-ansible | 07:08 | |
| ioni | hello guys | 07:12 |
|---|---|---|
| ioni | is there a way to configure what hosts to deploy? for example, I do not want horizon to be installed | 07:13 |
| *** charz has quit IRC | 07:23 | |
| *** mikelk has joined #openstack-ansible | 07:26 | |
| *** mikelk has quit IRC | 07:31 | |
| *** karimb has joined #openstack-ansible | 07:31 | |
| stevelle | ioni: Two answers. First if you don't run the os-horizon.yml playbook, it won't be installed. Secondly it is largely a matter of Ansible inventory. If you set your inventory up so that the horizon_all group is empty, it won't be installed anywhere. IIRC you can do that by removing /etc/openstack_deploy/env.d/horizon.yml | 07:37 |
| *** george_goh|meeti is now known as george_goh | 07:37 | |
| ioni | stevelle, thanks for your answers, i only run setup-hosts, setup-infrastrucure and setup-openstack. | 07:38 |
| stevelle | that last file specifies that the horizon_container group will be a subgroup of the os-infra_containers and thus present on all the hosts that the os-infra_containers are installed on. | 07:39 |
| stevelle | removing the file is a sledgehammer approach, but simply removing that "belongs_to" relationship with infra_containers and os-infra_containers is more surgical | 07:40 |
| stevelle | replace with belongs_to: [] for an empty list should work | 07:41 |
| stevelle | ioni: if you look at the setup-hosts / -infrastructure / -openstack playbooks you can see they are merely conveniences for the detailed playbooks. The last is where horizon is included, and you could comment it out for your run to exclude using the first method. | 07:42 |
| ioni | yes, i was thinking about to run only specific playbooks for components that I need | 07:42 |
| stevelle | if you do not modify the inventory, the horizon (and other unwanted service) containers will still be created but will be rather harmless if the playbook does not run. | 07:43 |
| stevelle | if you modify the inventory using the second answer (either surgical or with a big hammer) you can prevent the containers from being created, if you care. | 07:44 |
| ioni | alright, thanks | 07:45 |
| evrardjp | good morning everyone | 07:51 |
| *** asettle has joined #openstack-ansible | 07:55 | |
| *** thorst has joined #openstack-ansible | 07:58 | |
| *** sacharya has joined #openstack-ansible | 08:02 | |
| *** thorst has quit IRC | 08:03 | |
| *** sacharya has quit IRC | 08:07 | |
| odyssey4me | o/ | 08:08 |
| *** sdake_ has quit IRC | 08:10 | |
| *** sdake has joined #openstack-ansible | 08:11 | |
| *** karimb has quit IRC | 08:11 | |
| *** karimb has joined #openstack-ansible | 08:12 | |
| stevelle | gnite :) | 08:13 |
| odyssey4me | g'night stevelle | 08:16 |
| *** karimb has quit IRC | 08:19 | |
| *** elo has quit IRC | 08:24 | |
| *** eric_lopez has quit IRC | 08:25 | |
| *** elo has joined #openstack-ansible | 08:25 | |
| *** eric_lopez has joined #openstack-ansible | 08:25 | |
| *** mikelk has joined #openstack-ansible | 08:28 | |
| *** fawadkhaliq has joined #openstack-ansible | 08:28 | |
| *** fawadkhaliq has quit IRC | 08:30 | |
| *** chhavi has quit IRC | 08:31 | |
| *** electrofelix has joined #openstack-ansible | 08:37 | |
| *** pjm6 has joined #openstack-ansible | 08:43 | |
| pjm6 | morning all | 08:43 |
| *** chhavi has joined #openstack-ansible | 08:45 | |
| *** iceyao_ has quit IRC | 08:46 | |
| *** iceyao has joined #openstack-ansible | 08:47 | |
| *** iceyao_ has joined #openstack-ansible | 08:49 | |
| *** javeriak has joined #openstack-ansible | 08:50 | |
| *** iceyao has quit IRC | 08:52 | |
| *** karimb has joined #openstack-ansible | 08:59 | |
| *** saneax_AFK is now known as saneax | 09:01 | |
| *** thorst has joined #openstack-ansible | 09:01 | |
| *** javeriak has quit IRC | 09:07 | |
| *** thorst has quit IRC | 09:09 | |
| pjm6 | odyssey4me, are you there? | 09:10 |
| *** gparaskevas has joined #openstack-ansible | 09:19 | |
| odyssey4me | pjm6 yep, I'm around - morning | 09:20 |
| pjm6 | hows going ?:D | 09:21 |
| odyssey4me | yeah, all good - catching up on the last of friday's activities, following up on some stuff I submitted then and doing a little looking around at what next to tackle | 09:22 |
| pjm6 | lot to do then :D | 09:23 |
| pjm6 | I have two questions, first I need your opinion in a decent commit subject xD | 09:25 |
| odyssey4me | lol, something that adequately summarises the change in the commit within 65 characters? | 09:26 |
| pjm6 | I have this one https://review.openstack.org/#/c/319668/ | 09:26 |
| pjm6 | but i forgot of title xD | 09:26 |
| pjm6 | I was thinking something like: "Changing of new fwaas driver location" | 09:27 |
| odyssey4me | or just 'Correct the fwaas driver name' ? | 09:27 |
| pjm6 | well its not wrong at all, it is redirected to the old package from the new one | 09:28 |
| pjm6 | but well its correcting somehow :D | 09:29 |
| pjm6 | will apply that | 09:29 |
| odyssey4me | or 'Update classpath for FWaaS driver' | 09:29 |
| pjm6 | yeah sounds good :D | 09:30 |
| pjm6 | tks | 09:30 |
| openstackgerrit | Pedro Magalhães (pjm6) proposed openstack/openstack-ansible-os_neutron: Update classpath for FWaaS driver https://review.openstack.org/319668 | 09:30 |
| pjm6 | the other one, I have a existence doubt xD | 09:30 |
| pjm6 | if I understood well, the management network is supposed to be exposed only for sysadmins or be in the public network? | 09:30 |
| odyssey4me | pjm6 the management network should be internal only - it's used by ansible to connect to the hosts/containers | 09:31 |
| pjm6 | that what i though , so in this architecture idk how I can expose | 09:31 |
| pjm6 | horizon and APIs | 09:31 |
| pjm6 | to public zone :s | 09:31 |
| odyssey4me | it's also used for any of the traffic by the backend, like RabbitMQ traffic, MySQL traffic, etc | 09:32 |
| odyssey4me | pjm6 you do that with your external_lb_address | 09:32 |
| pjm6 | sure, but for instance, i have a VLAN to external network | 09:32 |
| pjm6 | how can I define | 09:32 |
| pjm6 | that external_lb_address will go to | 09:32 |
| pjm6 | that interface | 09:32 |
| odyssey4me | the external_lb_vip_address is never bound to anything to allocated to anything in particular... it is just used for the keystone endpoint creation | 09:36 |
| odyssey4me | so if you're using haproxy then you'll notice that the Horizon listener (for example) is set to listen on *:80 & *:443, so you just need to do your own binding of the public address to the host in question... if you have multiple haproxy hosts then you need to configure the external vip as per http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-haproxy.html | 09:38 |
| odyssey4me | if you're not using haproxy and are instead using another LB, then it's all up to you to setup your binding, etc | 09:38 |
| *** saneax is now known as saneax_AFK | 09:43 | |
| pjm6 | i'm using HA proxy | 09:44 |
| pjm6 | so I could just add an VLAN to an interface | 09:44 |
| pjm6 | (besides the necessaries) that have access to external network, right? | 09:44 |
| *** javeriak has joined #openstack-ansible | 09:47 | |
| *** fawadkhaliq has joined #openstack-ansible | 09:48 | |
| *** saneax_AFK is now known as saneax | 09:50 | |
| odyssey4me | pjm6 configure the host networking on the haproxy hosts to have access to the correct vlan and have an interface on it, then ensure that the keepalived is configured to make use of the right interface | 09:51 |
| pjm6 | Thanks :) and for best practices keepalived should be another host, right? | 09:52 |
| odyssey4me | pjm6 keepalived and haproxy must share hosts because keepalived binds the vip to the host and the vip is where clients connect to and haproxy load balances | 09:54 |
| pjm6 | odyssey4me, right, but normally that services are located in the controller host, or in other? I think its better to have in a separated one, because in this way its possible to support a failure of a single controller | 09:55 |
| gparaskevas | pjm6: keepalived/haproxy can be one host wheather openstack/controller can be on other host(s) | 09:57 |
| gparaskevas | pjm6: keepalived/haproxy can be on searate hosts wheather openstack/controller can be on other host(s)**** | 09:57 |
| pjm6 | gparaskevas, thanks :) i just have to make sure that host access to the vlans of mgmt and storage? | 09:58 |
| pjm6 | or need also the vlan and vxlan | 09:58 |
| *** gparaskevas_ has joined #openstack-ansible | 09:59 | |
| gparaskevas_ | pjm6: HAProxy host will need access to the mgmt for sure | 09:59 |
| pjm6 | yeah that seems be the minimal at least :) | 10:00 |
| pjm6 | as API's call pass all over there (if i'm not mistaken) | 10:01 |
| gparaskevas_ | pjm6: yes api work on the mgmt net | 10:01 |
| pjm6 | thanks gparaskevas_, odyssey4me :) will look at it. Now I have an idea how it works | 10:01 |
| *** gparaskevas has quit IRC | 10:02 | |
| *** sacharya has joined #openstack-ansible | 10:03 | |
| *** iceyao has joined #openstack-ansible | 10:05 | |
| *** johnmilton has quit IRC | 10:06 | |
| *** thorst has joined #openstack-ansible | 10:07 | |
| *** iceyao_ has quit IRC | 10:07 | |
| *** sacharya has quit IRC | 10:08 | |
| *** thorst has quit IRC | 10:13 | |
| *** karimb has quit IRC | 10:14 | |
| *** karimb has joined #openstack-ansible | 10:14 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_zaqar: Updating os_zaqar to use the Multi-Distro framework https://review.openstack.org/316332 | 10:23 |
| *** Zucan_ has quit IRC | 10:26 | |
| *** Zucan has joined #openstack-ansible | 10:26 | |
| *** chhavi has quit IRC | 10:27 | |
| openstackgerrit | Wade Holler proposed openstack/openstack-ansible: Add RabbitMQ mgmt UI through HAProxy https://review.openstack.org/317675 | 10:28 |
| *** iceyao has quit IRC | 10:29 | |
| *** Qiming has quit IRC | 10:30 | |
| *** smatzek has joined #openstack-ansible | 10:44 | |
| *** smatzek has quit IRC | 10:49 | |
| openstackgerrit | Wang Qing wu proposed openstack/openstack-ansible-os_nova: [WIP] Implement Nova PowerVM Virt Driver https://review.openstack.org/319022 | 10:53 |
| *** smatzek has joined #openstack-ansible | 10:53 | |
| *** sdake has quit IRC | 11:04 | |
| *** daneyon has quit IRC | 11:04 | |
| *** karimb has quit IRC | 11:06 | |
| *** karimb has joined #openstack-ansible | 11:06 | |
| *** thorst has joined #openstack-ansible | 11:11 | |
| evrardjp | mhayden: could you contact me about the osa-security role when you're there? | 11:16 |
| *** bsv has joined #openstack-ansible | 11:17 | |
| *** johnmilton has joined #openstack-ansible | 11:18 | |
| *** thorst has quit IRC | 11:18 | |
| *** johnmilton has quit IRC | 11:21 | |
| *** johnmilton has joined #openstack-ansible | 11:22 | |
| *** retreved has joined #openstack-ansible | 11:23 | |
| *** johnmilton has quit IRC | 11:30 | |
| *** wadeholler has joined #openstack-ansible | 11:38 | |
| *** johnmilton has joined #openstack-ansible | 11:46 | |
| *** thorst has joined #openstack-ansible | 11:48 | |
| *** thorst_ has joined #openstack-ansible | 11:49 | |
| *** johnmilton has quit IRC | 11:51 | |
| *** saneax is now known as saneax_AFK | 11:53 | |
| *** thorst has quit IRC | 11:53 | |
| *** tiagogomes has joined #openstack-ansible | 11:56 | |
| mhayden | morning folks | 12:00 |
| mhayden | and buenos dias to you evrardjp | 12:00 |
| bsv | mhayden: o7 | 12:03 |
| mhayden | bsv: howdy | 12:03 |
| *** johnmilton has joined #openstack-ansible | 12:04 | |
| *** sacharya has joined #openstack-ansible | 12:04 | |
| *** klamath has joined #openstack-ansible | 12:07 | |
| *** klamath has quit IRC | 12:08 | |
| *** sacharya has quit IRC | 12:08 | |
| *** klamath has joined #openstack-ansible | 12:08 | |
| *** javeriak has quit IRC | 12:13 | |
| *** johnmilton has quit IRC | 12:20 | |
| *** johnmilton has joined #openstack-ansible | 12:22 | |
| *** johnmilton has quit IRC | 12:23 | |
| *** johnmilton has joined #openstack-ansible | 12:23 | |
| *** johnmilton has quit IRC | 12:24 | |
| *** fawadkhaliq has quit IRC | 12:24 | |
| *** karimb has quit IRC | 12:24 | |
| *** kylek3h has quit IRC | 12:24 | |
| *** deadnull_ has joined #openstack-ansible | 12:25 | |
| *** johnmilton has joined #openstack-ansible | 12:25 | |
| *** johnmilton has quit IRC | 12:25 | |
| *** johnmilton has joined #openstack-ansible | 12:25 | |
| *** johnmilton has quit IRC | 12:27 | |
| *** johnmilton has joined #openstack-ansible | 12:27 | |
| *** iceyao has joined #openstack-ansible | 12:31 | |
| *** woodard has joined #openstack-ansible | 12:34 | |
| evrardjp | hey mhayden | 12:34 |
| evrardjp | quick question about this: https://github.com/openstack/openstack-ansible-security/blob/master/tasks/auditd.yml#L269 | 12:35 |
| evrardjp | (and the likes) | 12:35 |
| evrardjp | you're on this line taking the result of previous registered command | 12:35 |
| evrardjp | but /var/log/audit/ is maybe not existing, so it's gonna cause failures | 12:36 |
| evrardjp | what was the initial plan: ensuring the proper permissions if the folder exists, or ensuring the folder exists with the proper permissions? | 12:37 |
| berendt | evrardjp The auditd package is installed in https://github.com/openstack/openstack-ansible-security/blob/master/tasks/auditd.yml#L16, because of that /var/log/audit exists in line 269 as it is a part of the auditd package. If the directory was removed https://github.com/openstack/openstack-ansible-security/blob/master/tasks/auditd.yml#L122 will fail. | 12:41 |
| *** admin0 has joined #openstack-ansible | 12:41 | |
| evrardjp | not really | 12:42 |
| evrardjp | if you set the variable apply_security*, you'll skip the security role, but not its checks | 12:43 |
| evrardjp | so you'll not install auditd | 12:43 |
| evrardjp | and then you could fail because the expected input for the tasks aren't correct | 12:44 |
| *** saneax_AFK is now known as saneax | 12:45 | |
| evrardjp | my question is still valid, do we want to ensure permissions, or do we want to ensure the folder exists? | 12:46 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible: [WIP] Create ceph python library symlinks https://review.openstack.org/317901 | 12:46 |
| evrardjp | I could submit a patch to fix all these expectations issues | 12:47 |
| berendt | according to the name of the task (Audit log files must be owned by root) only the permissions should be ensured | 12:47 |
| evrardjp | that's what I'd think | 12:48 |
| evrardjp | so we should discard the task if the folder doesn't exist, so we are lacking a conditional | 12:48 |
| evrardjp | I'll fix that | 12:48 |
| berendt | does it makes sense to read the name of the log directory from the auditd.conf configuration file? | 12:49 |
| odyssey4me | berendt that's an excellent idea | 12:50 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Disable the rdisc service (if present) https://review.openstack.org/319442 | 12:50 |
| berendt | this way it is possible to change the logfile directory and to ensure that it exists | 12:50 |
| *** chhavi has joined #openstack-ansible | 12:53 | |
| evrardjp | we need more tasks for that, but yes it sounds even more elegant: If the auditd.conf exists, parse it, get the folder, ensuring it exists and ensuring it has the proper permissions | 12:54 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Search for unlabeled device files https://review.openstack.org/319448 | 12:55 |
| *** kylek3h has joined #openstack-ansible | 12:57 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_tempest: Allow tempest network overrides for public and private net https://review.openstack.org/314760 | 12:59 |
| evrardjp | berendt: could you take this? | 12:59 |
| *** alikins has quit IRC | 13:01 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Adding audit rule for SELinux policy modifications https://review.openstack.org/319438 | 13:01 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Add /etc/apparmor.d/ for auditing https://review.openstack.org/319922 | 13:04 |
| *** sigmavirus24 has joined #openstack-ansible | 13:12 | |
| *** karimb has joined #openstack-ansible | 13:21 | |
| berendt | evrardjp not at the moment | 13:26 |
| *** berendt has quit IRC | 13:27 | |
| *** Qiming has joined #openstack-ansible | 13:27 | |
| *** gravi_ has joined #openstack-ansible | 13:29 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [WIP] Check existing pip.conf in OpenStack-CI https://review.openstack.org/234768 | 13:33 |
| *** smatzek has quit IRC | 13:36 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Test designate w/ designate tempest plugins https://review.openstack.org/319941 | 13:37 |
| openstackgerrit | Merged openstack/openstack-ansible: Added option to set the role fetch mode https://review.openstack.org/314863 | 13:38 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Automatically enable neutron ha router capabilities https://review.openstack.org/313042 | 13:39 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Test designate w/ designate tempest plugins https://review.openstack.org/319941 | 13:40 |
| automagically | Morning all | 13:41 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Test designate w/ designate tempest plugins https://review.openstack.org/319941 | 13:42 |
| *** Zucan has quit IRC | 13:46 | |
| *** eric_lopez has quit IRC | 13:46 | |
| *** shausy has quit IRC | 13:48 | |
| *** karimb_ has joined #openstack-ansible | 13:49 | |
| *** karimb has quit IRC | 13:49 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Cleanup horizon vars in hosts.yml https://review.openstack.org/319948 | 13:54 |
| *** sdake has joined #openstack-ansible | 13:56 | |
| *** alikins has joined #openstack-ansible | 13:57 | |
| *** smatzek has joined #openstack-ansible | 13:57 | |
| *** alikins has quit IRC | 13:57 | |
| *** smatzek_ has joined #openstack-ansible | 13:57 | |
| *** ametts has joined #openstack-ansible | 13:58 | |
| *** alikins has joined #openstack-ansible | 13:58 | |
| *** smatzek_ has quit IRC | 13:59 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Updates all SHAs for Newton 2016-05-19 https://review.openstack.org/318931 | 13:59 |
| *** smatzek_ has joined #openstack-ansible | 14:00 | |
| *** sdake_ has joined #openstack-ansible | 14:00 | |
| odyssey4me | jmccrory thanks for doing the digging for ^ | 14:00 |
| *** sdake has quit IRC | 14:02 | |
| *** smatzek has quit IRC | 14:02 | |
| *** bsv has quit IRC | 14:03 | |
| *** sacharya has joined #openstack-ansible | 14:04 | |
| *** sacharya has quit IRC | 14:08 | |
| *** jamesdenton has joined #openstack-ansible | 14:09 | |
| *** FrankZhang has joined #openstack-ansible | 14:12 | |
| *** Mudpuppy has joined #openstack-ansible | 14:13 | |
| *** michaelgugino has joined #openstack-ansible | 14:13 | |
| *** eric_lopez has joined #openstack-ansible | 14:14 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible: Create ceph python library symlinks https://review.openstack.org/317901 | 14:18 |
| *** afred312 has joined #openstack-ansible | 14:21 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-security: Fixing the "dry-run" errors. https://review.openstack.org/319962 | 14:25 |
| *** spotz_zzz is now known as spotz | 14:25 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Update classpath for FWaaS driver https://review.openstack.org/319668 | 14:30 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Test designate w/ designate tempest plugins https://review.openstack.org/319941 | 14:34 |
| openstackgerrit | Wang Qing wu proposed openstack/openstack-ansible-os_nova: [WIP] Implement Nova PowerVM Virt Driver https://review.openstack.org/319022 | 14:36 |
| *** berendt has joined #openstack-ansible | 14:37 | |
| *** sdake_ has quit IRC | 14:38 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_glance: Remove python-cephlibs https://review.openstack.org/319970 | 14:38 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_cinder: Remove python-cephlibs https://review.openstack.org/319971 | 14:39 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_nova: Remove python-cephlibs https://review.openstack.org/319972 | 14:40 |
| *** d34dh0r53 has joined #openstack-ansible | 14:41 | |
| spotz | evrardjp: You here? | 14:43 |
| *** phalmos has joined #openstack-ansible | 14:45 | |
| *** jayc has joined #openstack-ansible | 14:47 | |
| *** weezS has joined #openstack-ansible | 14:49 | |
| evrardjp | I am | 14:50 |
| evrardjp | did I do something wrong? | 14:51 |
| evrardjp | :D | 14:51 |
| spotz | evrardjp: No question about a comment todo(user)? https://review.openstack.org/#/c/316332/13/tasks/install-apt.yml | 14:53 |
| openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible: Configure Swift dispersion tools to use Keystone v3 https://review.openstack.org/318914 | 14:53 |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_designate: [WIP] Test designate w/ designate tempest plugins https://review.openstack.org/319941 | 14:54 |
| *** deadnull_ has quit IRC | 14:54 | |
| evrardjp | yes, we used to set a practice as #TODO(name): to be informed of stuff to be done | 14:56 |
| *** markvoelker has joined #openstack-ansible | 14:56 | |
| evrardjp | I didn't see this on install-apt | 14:56 |
| evrardjp | I'm afraid to miss that later | 14:56 |
| *** gravi_ has quit IRC | 14:57 | |
| spotz | Ok I'll add it in | 14:57 |
| evrardjp | thanks | 14:57 |
| evrardjp | you can put my name if that was the name on the others | 14:57 |
| *** kstev has joined #openstack-ansible | 14:58 | |
| *** sdake has joined #openstack-ansible | 14:59 | |
| *** karimb_ has quit IRC | 15:00 | |
| openstackgerrit | Amy Marrich (spotz) proposed openstack/openstack-ansible-os_zaqar: Updating os_zaqar to use the Multi-Distro framework https://review.openstack.org/316332 | 15:04 |
| *** iceyao has quit IRC | 15:04 | |
| *** weezS has quit IRC | 15:13 | |
| *** fawadkhaliq has joined #openstack-ansible | 15:13 | |
| *** karimb has joined #openstack-ansible | 15:17 | |
| *** galstrom_zzz is now known as galstrom | 15:27 | |
| *** daneyon has joined #openstack-ansible | 15:35 | |
| *** gparaskevas_ has quit IRC | 15:35 | |
| *** dGtUCIi has joined #openstack-ansible | 15:39 | |
| *** dGtUCIi has left #openstack-ansible | 15:39 | |
| *** sacharya has joined #openstack-ansible | 15:47 | |
| *** mikelk has quit IRC | 15:53 | |
| *** Qiming has quit IRC | 15:59 | |
| *** admin0 has quit IRC | 16:15 | |
| *** jayc has quit IRC | 16:17 | |
| *** galstrom is now known as galstrom_zzz | 16:26 | |
| *** jayc has joined #openstack-ansible | 16:31 | |
| *** raddaoui has joined #openstack-ansible | 16:32 | |
| *** karimb has quit IRC | 16:36 | |
| *** charz has joined #openstack-ansible | 16:37 | |
| *** saneax is now known as saneax_AFK | 16:40 | |
| *** karimb has joined #openstack-ansible | 16:47 | |
| *** asettle has quit IRC | 16:47 | |
| mhayden | berendt / evrardjp: did y'all get that question about audit logs solved? | 16:49 |
| mhayden | evrardjp: it looks like "when: auditd_log_dir.stat.exists | bool" should be added to that task | 16:50 |
| mhayden | stevelle: not sure i understand your last comment in https://review.openstack.org/#/c/315274/ | 16:52 |
| stevelle | mhayden: your original review was -1 looking for doc/release note. Hugh gave a -1 which odyssey4me suggests is because the release note should be removed. wat do. | 16:52 |
| mhayden | stevelle: i think the concern is that the release note in that review doesn't pertain to the patch proposed | 16:53 |
| odyssey4me | mhayden stevelle the release note included does not match the patch, it looks like it was improprly included | 16:53 |
| openstackgerrit | Dolph Mathews proposed openstack/openstack-ansible-pip_install: Allow the owner's group to differ from the ansible user ID https://review.openstack.org/320053 | 16:54 |
| stevelle | did everyone notice I listed the note as an "issue" ? | 16:55 |
| openstackgerrit | Dolph Mathews proposed openstack/openstack-ansible-pip_install: Allow the group ID to differ from the ansible user ID https://review.openstack.org/320053 | 16:55 |
| stevelle | I don't understand how the note I added doesn't pertain to the concern noted in the commit message and the comments on the review | 16:56 |
| stevelle | if it's worded in a way that folks feel is unclear I could use help understanding what is unclear about it | 16:57 |
| * mhayden tips his hat to dolphm | 16:57 | |
| mhayden | stevelle: i'll go back and re-read it once more to ensure i'm not missing the point | 16:58 |
| dolphm | mhayden: o/ | 16:58 |
| stevelle | mhayden: I'm probably not being clear enough one way or another. | 17:00 |
| mhayden | stevelle: where i got confused was that the patch talkes about the reseller admin changes, but the release note "seems" to talk about something else | 17:01 |
| mhayden | but i think i am starting to grok this issue now | 17:01 |
| mhayden | it seems like the "ceilometer can't do v3" issue is different than the subject matter of the patch itself | 17:01 |
| stevelle | I suppose I failed to state clearly at any point that ceilometer pollsters are flat out broken as configured in OSA Liberty | 17:01 |
| mhayden | does that make sense? | 17:01 |
| stevelle | they will not work at all, thus it's a "known issue" | 17:02 |
| hughsaunders | stevelle: I couldn't quite make the link between the keystone/ceilometer issues mentioned in the note and commit message and the swift reseller admin changes in the actual patch | 17:04 |
| mhayden | stevelle: do the changes in proxy-server.conf.j2 affect ceilometer, or just swift? | 17:04 |
| stevelle | mhayden: materially, they change swift in a way that is invisible to everyone but ceilometer. | 17:05 |
| mhayden | stevelle: AH! that's what i was missing | 17:05 |
| mhayden | stevelle: you might keep the "issue" you have in the release note and add a "fixes" about your patch and how it makes ceilometer happy with swift | 17:07 |
| stevelle | mhayden: it tells swift how to validate ceilometer's service account's access to data against swift ACLs, giving it a kind of omniscience | 17:08 |
| hughsaunders | stevelle: Ah, so the patch fixes on part of the problem, but the note points to additional manual work that an operator will need to do to get swift metrics in ceilometer. | 17:08 |
| stevelle | hughsaunders: you got it. also hi | 17:08 |
| pjm6 | odyssey4me, can I cherry pick commit of update class path to mitaka? | 17:09 |
| * stevelle has too much experience making sausage here, didn't know what to include | 17:09 | |
| *** michaelgugino has quit IRC | 17:09 | |
| hughsaunders | stevelle: cool, will update the review | 17:09 |
| *** admin0 has joined #openstack-ansible | 17:10 | |
| stevelle | hughsaunders and mhayden: how about for "fixes" I point out it is a partial fix and additional work is needed as noted in known issues? | 17:10 |
| hughsaunders | stevelle: I've +2d, but that sounds good | 17:10 |
| mhayden | stevelle: i'm good with that | 17:11 |
| stevelle | perfect, thanks mhayden hughsaunders odyssey4me | 17:11 |
| odyssey4me | pjm6 if it applies, then yes | 17:11 |
| pjm6 | odyssey4me, thanks :) | 17:12 |
| *** jayc has quit IRC | 17:13 | |
| *** sdake has quit IRC | 17:15 | |
| *** sdake has joined #openstack-ansible | 17:17 | |
| dolphm | should /opt ever be owned by anything but root? | 17:18 |
| *** sdake has quit IRC | 17:22 | |
| *** karimb has quit IRC | 17:24 | |
| *** jayc has joined #openstack-ansible | 17:25 | |
| *** electrofelix has quit IRC | 17:26 | |
| *** Brew has joined #openstack-ansible | 17:35 | |
| wadeholler | dolphm: not exactly what you asked but all of my "/opt"s are root:root | 17:39 |
| palendae | dolphm, not to my knowledge | 17:42 |
| wadeholler | was troubleshooting full "/ | 17:43 |
| wadeholler | and found that lsyncd_log_rotate and repo_nginx_log_rotate both contain the nginx and rsyncd entries. Is that intended ? | 17:43 |
| wadeholler | (actually lsyncd was missing on full node but I'll get there later) | 17:44 |
| *** psilvad has quit IRC | 17:48 | |
| cloudnull | wadeholler: the log rotate file should be populated with files found in "rsyslog_client_log_files" | 17:48 |
| cloudnull | and dropped here https://github.com/openstack/openstack-ansible-rsyslog_client/blob/master/templates/os_aggregate_storage.j2#L1 | 17:49 |
| cloudnull | wadeholler: and it looks like the nginx and rsyslog log files should be different as defined | 17:49 |
| cloudnull | https://github.com/openstack/openstack-ansible/blob/master/playbooks/repo-server.yml#L71 | 17:49 |
| cloudnull | and here https://github.com/openstack/openstack-ansible/blob/master/playbooks/repo-server.yml#L62 | 17:50 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-rabbitmq_server: Upgrade RabbitMQ Server to 3.6.2 https://review.openstack.org/320084 | 17:50 |
| *** psilvad has joined #openstack-ansible | 17:54 | |
| wadeholler | cloudnull: right. repo-server.yml seems to be the only place that we cal the rsyslog_client role like that - back to back L60 and L69. facts from first call getting drug along to second...? | 17:55 |
| cloudnull | wadeholler: what release do you have deployed ? | 17:55 |
| wadeholler | stabel/mitaka | 17:56 |
| *** albertcard has joined #openstack-ansible | 17:59 | |
| *** jayc has quit IRC | 18:03 | |
| wadeholler | cloudnull: I don't see any differences between stable/mitaka and master for playbooks/repo-server.yml or /etc/ansible/roles/rsyslog_client/tasks/rsyslog_client_post_install.yml | 18:04 |
| *** weezS has joined #openstack-ansible | 18:04 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-galera_server: Add CentOS7 support to Galera Server https://review.openstack.org/314817 | 18:04 |
| cloudnull | wadeholler: I'm not either. | 18:05 |
| cloudnull | for those options to be the same the log file path would have to be the same. | 18:05 |
| cloudnull | so maybe its a fact getting reused? | 18:05 |
| wadeholler | thats what I think | 18:05 |
| cloudnull | https://github.com/openstack/openstack-ansible-rsyslog_client/blob/master/tasks/rsyslog_client_post_install.yml#L51-L56 | 18:07 |
| cloudnull | so if its reusing a fact I'd think it'd be that one. | 18:07 |
| wadeholler | I will continue investigating, write a bug, try an develop a PR and what not. thank you for confirming it wasn't intended behavior. | 18:08 |
| cloudnull | indeed its not. | 18:08 |
| cloudnull | if you have time to take a look at that it'd be great to know whats causing it | 18:09 |
| stevelle | I read ^ in the voice of Lumbergh | 18:09 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Fixing the "dry-run" errors. https://review.openstack.org/319962 | 18:11 |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Test static route settings https://review.openstack.org/318917 | 18:13 |
| cloudnull | stevelle: I'm going to have to ask you to come in on Saturday... | 18:15 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Cleanup horizon vars in hosts.yml https://review.openstack.org/319948 | 18:15 |
| *** ig0r_ has joined #openstack-ansible | 18:16 | |
| openstackgerrit | Merged openstack/openstack-ansible: Add nova-powervm repo for initial PowerVM support https://review.openstack.org/317816 | 18:17 |
| *** jayc has joined #openstack-ansible | 18:17 | |
| openstackgerrit | Merged openstack/openstack-ansible: Updates all SHAs for Newton 2016-05-19 https://review.openstack.org/318931 | 18:18 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix null password auth in CentOS https://review.openstack.org/318888 | 18:18 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Docs: Update dev notes for Cat 3 controls https://review.openstack.org/318905 | 18:19 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Docs: Update dev notes for Cat 2 controls https://review.openstack.org/318954 | 18:19 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Docs: Update dev notes for Cat 1 controls https://review.openstack.org/319429 | 18:19 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_keystone: Use ansible-lint 2.7.0 https://review.openstack.org/318429 | 18:27 |
| *** fawadkhaliq has quit IRC | 18:28 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-rsyslog_client: Add CentOS7 support to rsyslog client https://review.openstack.org/320099 | 18:47 |
| evrardjp | mhayden: yes, I submitted a patch. Removed the other condition for ansible2 compat and moved to default([]) | 18:52 |
| *** asettle has joined #openstack-ansible | 18:52 | |
| mhayden | evrardjp: i think i already +2'd | 18:52 |
| evrardjp | sorry for the lag I just started my laptop | 18:52 |
| evrardjp | ok | 18:52 |
| evrardjp | :D | 18:52 |
| evrardjp | I just started my laptop :p | 18:53 |
| *** haasn has quit IRC | 18:55 | |
| *** asettle has quit IRC | 18:57 | |
| *** haasn has joined #openstack-ansible | 18:58 | |
| *** psilvad has quit IRC | 19:03 | |
| *** spotz is now known as spotz_zzz | 19:11 | |
| *** markvoelker has quit IRC | 19:14 | |
| *** markvoelker has joined #openstack-ansible | 19:15 | |
| mhayden | evrardjp: it's okay | 19:24 |
| *** psilvad has joined #openstack-ansible | 19:24 | |
| openstackgerrit | Dolph Mathews proposed openstack/openstack-ansible-pip_install: Do not muck with permissions on /opt https://review.openstack.org/320070 | 19:29 |
| openstackgerrit | Dolph Mathews proposed openstack/openstack-ansible-pip_install: Allow the group ID to differ from the ansible user ID https://review.openstack.org/320053 | 19:31 |
| *** jayc has quit IRC | 19:33 | |
| *** jayc has joined #openstack-ansible | 19:33 | |
| openstackgerrit | Matt Thompson proposed openstack/openstack-ansible-os_designate: Test designate w/ designate tempest plugins https://review.openstack.org/319941 | 19:37 |
| *** weezS_ has joined #openstack-ansible | 19:43 | |
| *** weezS has quit IRC | 19:43 | |
| *** weezS_ is now known as weezS | 19:43 | |
| *** weezS has quit IRC | 19:44 | |
| openstackgerrit | Merged openstack/openstack-ansible: Include reseller admin role correctly https://review.openstack.org/315274 | 19:46 |
| *** spotz_zzz is now known as spotz | 19:47 | |
| openstackgerrit | Merged openstack/openstack-ansible-pip_install: Do not muck with permissions on /opt https://review.openstack.org/320070 | 19:49 |
| *** chhavi has quit IRC | 19:55 | |
| *** ig0r_ has quit IRC | 19:59 | |
| *** BjoernT has joined #openstack-ansible | 20:00 | |
| openstackgerrit | Amy Marrich (spotz) proposed openstack/openstack-ansible-os_zaqar: Updating os_zaqar to use the Multi-Distro framework https://review.openstack.org/316332 | 20:01 |
| *** Mudpuppy has quit IRC | 20:02 | |
| *** wadeholler has quit IRC | 20:09 | |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Create ceph python library symlinks https://review.openstack.org/317901 | 20:10 |
| mhayden | evrardjp: hah, you fixed that bug and exposed one of my bugs! | 20:12 |
| mhayden | :) | 20:12 |
| evrardjp | ? | 20:12 |
| mhayden | i put 0400 when i meant 0600 :| | 20:13 |
| evrardjp | ahah! | 20:13 |
| mhayden | so ubuntu rotates out the logs and sets the old ones as 0400 | 20:13 |
| evrardjp | didn't see that | 20:13 |
| mhayden | the *active* log is 0600 | 20:13 |
| mhayden | i'll go fixy | 20:13 |
| evrardjp | thanks, sorry to have missed it | 20:14 |
| evrardjp | i focused on the essential of the commit | 20:14 |
| mhayden | evrardjp: not your fault, it's my fault! :) | 20:14 |
| *** weezS has joined #openstack-ansible | 20:16 | |
| evrardjp | it is! | 20:17 |
| evrardjp | ;) | 20:17 |
| *** sdake has joined #openstack-ansible | 20:21 | |
| *** smatzek_ has quit IRC | 20:22 | |
| *** weezS has quit IRC | 20:24 | |
| spotz | It's always your fault mhayden | 20:24 |
| evrardjp | spotz: you seem to know what you're talking about, I'll leave you at this :D | 20:26 |
| cloudnull | mhayden: have you done any testing with 1604 on the sec role? | 20:26 |
| mhayden | cloudnull: yeah -- gate's broken on it right now | 20:26 |
| mhayden | fixing it | 20:26 |
| *** weezS has joined #openstack-ansible | 20:26 | |
| mhayden | we need to get 16.04 and CentOS as voting gates on the security role soon | 20:26 |
| cloudnull | is it because http://cdn.pasteraw.com/prrnxqv7lz880g7kuv8040kmtefz6sd ? | 20:27 |
| mhayden | hmm, no | 20:27 |
| mhayden | that one is most likely due to the br_netfilter module rename stuff | 20:27 |
| mhayden | there's a catch for that in lxc_hosts, isn't there? | 20:27 |
| mhayden | based on a kernel version check | 20:27 |
| cloudnull | thats in the openstack_hosts role | 20:29 |
| cloudnull | https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/vars/ubuntu-14.04.yml#L27 | 20:29 |
| mhayden | i don't mess with the bridge-related sysctl stuff in the security role | 20:29 |
| hughsaunders | sigmavirus24: 'if [[ "$part" == *.yml ]];then' <-- is that testing if part matches any yaml file in the current dir? I can't find any situation where == tests for membership, but it seems to work. (from https://review.openstack.org/#/c/316290/4/scripts/run-upgrade.sh) | 20:29 |
| mhayden | but if those configurations are present, the security role will explode as it applies new stuff in sysctl.cf | 20:29 |
| cloudnull | those values are heree https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/defaults/main.yml#L54-L56 | 20:30 |
| cloudnull | seems that the openstack_hosts role needs to be tweaked for 1604 | 20:31 |
| cloudnull | looks like all of that needs to be conditionally loaded based on the kernel | 20:33 |
| sigmavirus24 | hughsaunders: why did you ping me on that? | 20:34 |
| sigmavirus24 | hughsaunders: also what line number are you pointing out? | 20:35 |
| sigmavirus24 | Oh I see | 20:35 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix auditd log permission bug https://review.openstack.org/320131 | 20:36 |
| sigmavirus24 | Honestly, I have no clue why they're attributing that to me | 20:36 |
| sigmavirus24 | I don't see it in the diff on the left side and I don't remember writing it | 20:36 |
| *** sdake has quit IRC | 20:37 | |
| mhayden | cloudnull / evrardjp: 320131 is the security role gate blocker for 16.04 :( | 20:37 |
| evrardjp | mhayden: ok will review | 20:37 |
| sigmavirus24 | I do remember there being a problem in the juno to kilo upgrades where the list of playbooks to run had upgrade vars included and that did screwy things | 20:37 |
| sigmavirus24 | I don't, however, remember writing that if statement | 20:37 |
| evrardjp | but cloudnull was right about making these default conditional | 20:37 |
| sigmavirus24 | My persontal style would have been much different too | 20:37 |
| evrardjp | it's really distro specific | 20:38 |
| mhayden | cloudnull: the failure on your ha router patch are stumping me | 20:38 |
| sigmavirus24 | hughsaunders: I bet Apsu knows that bash trick through | 20:38 |
| sigmavirus24 | *though | 20:38 |
| cloudnull | mhayden: i think those are unrelated to the harouter patch | 20:39 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Automatically enable neutron ha router capabilities https://review.openstack.org/313042 | 20:39 |
| Apsu | sigmavirus24: Eh? | 20:40 |
| hughsaunders | sigmavirus24: no worries, it just intrigued me because I looked at it and thought that wont work, but in testing it seems to.. | 20:40 |
| mhayden | cloudnull: i rebased it since its parent was fairly old | 20:40 |
| cloudnull | may help | 20:40 |
| sigmavirus24 | Apsu: if [[ "${var}" == *.yml ]] ; then | 20:40 |
| *** weezS has quit IRC | 20:40 | |
| sigmavirus24 | see the review hughsaunders pasted above | 20:40 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Cleanup horizon vars in hosts.yml https://review.openstack.org/319948 | 20:41 |
| hughsaunders | Apsu: why does that work if there are multiple files that match *.yml? I didn't think == had any magical list powers. | 20:41 |
| mhayden | cloudnull: for some reason, my follow on patch behind yours got stuck to dolphm's... i've got a case of the mondays | 20:41 |
| *** weezS has joined #openstack-ansible | 20:42 | |
| *** weezS has quit IRC | 20:42 | |
| Apsu | hughsaunders: Open the bash manpage and search for ==. The "parts" being sent aren't related to files in a directory, they're parts of a command string being sent to this dispatcher. | 20:42 |
| Apsu | hughsaunders: Thus, the * glob applies only to the string in question, on the LHS of the equality | 20:43 |
| Apsu | It's simple pattern matching of RHS against LHS in the conditional | 20:43 |
| Apsu | Also, it's inside of [[, which is probably part of the reason it works. | 20:43 |
| hughsaunders | ahh, I see, its not a fileglob at all | 20:44 |
| Apsu | [ is an actual binary, while [[ is an internal operator | 20:44 |
| cloudnull | mhayden: it happens | 20:44 |
| Apsu | So ['s args are actually commandline arguments to the [ program | 20:44 |
| Apsu | That means that * would probably be a fileglob in [ without escaping | 20:44 |
| Apsu | Reason #897235 to stop using Bourne shell syntax. | 20:45 |
| *** Brew has quit IRC | 20:45 | |
| *** johnmilton has quit IRC | 20:45 | |
| hughsaunders | Apsu: ah yes, with [, you get "too many arguments" because == only takes one on each side. | 20:46 |
| * Apsu nods | 20:46 | |
| Apsu | It's doing the substitution before the comparison | 20:46 |
| Apsu | [[ ftw | 20:46 |
| hughsaunders | Apsu: thanks :) | 20:47 |
| Apsu | np | 20:47 |
| *** sdake has joined #openstack-ansible | 20:47 | |
| Apsu | cloudnull: Ping | 20:51 |
| *** ibravo has joined #openstack-ansible | 20:51 | |
| *** weezS has joined #openstack-ansible | 20:51 | |
| *** sdake_ has joined #openstack-ansible | 20:51 | |
| palendae | hughsaunders, imo that whole run_parts ting should be nuked | 20:52 |
| mhayden | looks like https://review.openstack.org/320131 fixed the security role gate -- if anyone could give it a gander, i'd be much obliged :) | 20:52 |
| palendae | Just make a top-level playbook that does all that logic | 20:53 |
| spotz | bad grammar mhayden! | 20:53 |
| *** sdake has quit IRC | 20:54 | |
| mhayden | spotz: uh oh | 20:54 |
| mhayden | i put a preposition on the end, i know | 20:54 |
| Apsu | mhayden: You know do you | 20:55 |
| mhayden | Apsu: Fix i must | 20:56 |
| Apsu | That's a bad situation to be in | 20:56 |
| Apsu | Or on or under or beside or before | 20:56 |
| mhayden | Gotta get around | 20:56 |
| mhayden | What am I gonna change it to? | 20:56 |
| * mhayden stops before spotz throws a chair | 20:56 | |
| Apsu | There's a good one here. Right... there. | 20:56 |
| mhayden | whoop, there it is | 20:57 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-openstack_hosts: Add br_netfilter to 16.04 for support https://review.openstack.org/320139 | 20:57 |
| spotz | mhayden fix is there, the () makes it read badly | 20:59 |
| *** ibravo has quit IRC | 20:59 | |
| *** jayc has quit IRC | 21:02 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix auditd log permission bug https://review.openstack.org/320131 | 21:02 |
| *** woodard has quit IRC | 21:02 | |
| mhayden | spotz: i think i fixed it | 21:03 |
| *** agireud has quit IRC | 21:04 | |
| spotz | much more readable mhayden | 21:04 |
| *** agireud has joined #openstack-ansible | 21:09 | |
| *** retreved has quit IRC | 21:12 | |
| *** Brew has joined #openstack-ansible | 21:12 | |
| *** jayc has joined #openstack-ansible | 21:13 | |
| *** thorst_ has quit IRC | 21:18 | |
| *** kylek3h has quit IRC | 21:22 | |
| *** jthorne has joined #openstack-ansible | 21:23 | |
| *** thorst_ has joined #openstack-ansible | 21:24 | |
| *** thorst_ has quit IRC | 21:28 | |
| *** berendt has quit IRC | 21:32 | |
| *** saneax_AFK is now known as saneax | 21:34 | |
| *** smatzek_ has joined #openstack-ansible | 21:37 | |
| *** smatzek_ has quit IRC | 21:38 | |
| *** weezS has quit IRC | 21:41 | |
| *** admin0 has quit IRC | 21:41 | |
| *** thorst_ has joined #openstack-ansible | 21:42 | |
| *** admin0 has joined #openstack-ansible | 21:42 | |
| *** sacharya has quit IRC | 21:44 | |
| *** thorst_ has quit IRC | 21:46 | |
| *** BjoernT has quit IRC | 21:58 | |
| *** klamath has quit IRC | 22:03 | |
| mrda | Morning OSA | 22:08 |
| *** phalmos has quit IRC | 22:08 | |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Update HAProxy for multi-OS support https://review.openstack.org/320160 | 22:11 |
| openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-openstack_hosts: Add br_netfilter to 16.04 for support https://review.openstack.org/320139 | 22:16 |
| *** john51 has joined #openstack-ansible | 22:44 | |
| *** jthorne has quit IRC | 22:45 | |
| *** weezS has joined #openstack-ansible | 22:45 | |
| *** darrenc_ has joined #openstack-ansible | 22:46 | |
| *** neillc_ has joined #openstack-ansible | 22:47 | |
| *** ggillies_ has joined #openstack-ansible | 22:48 | |
| *** jhesketh_ has joined #openstack-ansible | 22:49 | |
| *** chris__hultin has joined #openstack-ansible | 22:50 | |
| *** dweaver` has joined #openstack-ansible | 22:51 | |
| *** stevelle_ has joined #openstack-ansible | 22:51 | |
| *** automagically_ has joined #openstack-ansible | 22:51 | |
| *** lbragstad_ has joined #openstack-ansible | 22:51 | |
| *** dolphm_ has joined #openstack-ansible | 22:51 | |
| *** odyssey4me_ has joined #openstack-ansible | 22:51 | |
| *** itsuugo_ has joined #openstack-ansible | 22:51 | |
| *** __maurosr__ has joined #openstack-ansible | 22:51 | |
| *** tlbr_ has joined #openstack-ansible | 22:51 | |
| *** spotz_ has joined #openstack-ansible | 22:52 | |
| *** intr1nsic_ has joined #openstack-ansible | 22:52 | |
| *** _d34dh0r53_ has joined #openstack-ansible | 22:52 | |
| *** Tebro_ has joined #openstack-ansible | 22:52 | |
| *** weezS has quit IRC | 22:53 | |
| *** jayc has quit IRC | 22:53 | |
| *** Brew has quit IRC | 22:53 | |
| *** psilvad has quit IRC | 22:53 | |
| *** eglute has quit IRC | 22:53 | |
| *** d34dh0r53 has quit IRC | 22:53 | |
| *** v1k0d3n has quit IRC | 22:53 | |
| *** Tebro has quit IRC | 22:53 | |
| *** odyssey4me has quit IRC | 22:53 | |
| *** stevelle has quit IRC | 22:53 | |
| *** lbragstad has quit IRC | 22:53 | |
| *** bgmccollum has quit IRC | 22:53 | |
| *** automagically has quit IRC | 22:53 | |
| *** chris_hultin has quit IRC | 22:53 | |
| *** jhesketh has quit IRC | 22:53 | |
| *** bryan_att has quit IRC | 22:53 | |
| *** neillc has quit IRC | 22:53 | |
| *** darrenc has quit IRC | 22:53 | |
| *** intr1nsic has quit IRC | 22:53 | |
| *** ggillies has quit IRC | 22:53 | |
| *** mrda has quit IRC | 22:53 | |
| *** john51_ has quit IRC | 22:53 | |
| *** dolphm has quit IRC | 22:53 | |
| *** dweaver has quit IRC | 22:53 | |
| *** gus has quit IRC | 22:53 | |
| *** itsuugo has quit IRC | 22:53 | |
| *** tlbr has quit IRC | 22:53 | |
| *** maurosr has quit IRC | 22:53 | |
| *** spotz has quit IRC | 22:53 | |
| *** dalees has quit IRC | 22:53 | |
| *** errr has quit IRC | 22:53 | |
| *** intr1nsic_ is now known as intr1nsic | 22:53 | |
| *** itsuugo_ is now known as itsuugo | 22:53 | |
| *** dolphm_ is now known as dolphm | 22:53 | |
| *** stevelle_ is now known as stevelle | 22:53 | |
| *** __maurosr__ is now known as maurosr | 22:53 | |
| *** bgmccollum has joined #openstack-ansible | 22:54 | |
| *** eglute has joined #openstack-ansible | 22:55 | |
| *** gus has joined #openstack-ansible | 22:58 | |
| *** darrenc_ is now known as darrenc | 23:01 | |
| *** kylek3h has joined #openstack-ansible | 23:03 | |
| *** Qiming has joined #openstack-ansible | 23:05 | |
| *** ametts has quit IRC | 23:10 | |
| *** kylek3h has quit IRC | 23:11 | |
| *** admin0 has quit IRC | 23:17 | |
| *** raddaoui has quit IRC | 23:17 | |
| *** lbragstad_ is now known as lbragstad | 23:33 | |
| *** sunshinekitty has joined #openstack-ansible | 23:37 | |
| sunshinekitty | can anyone point me in the right direction for using a different mysql hostname/creds for the aio play? | 23:38 |
| *** Brew has joined #openstack-ansible | 23:38 | |
| *** dalees has joined #openstack-ansible | 23:38 | |
| *** v1k0d3n has joined #openstack-ansible | 23:38 | |
| *** sunshinekitty has quit IRC | 23:45 | |
| *** sunshinekitty has joined #openstack-ansible | 23:46 | |
| *** sunshinekitty has quit IRC | 23:49 | |
| *** sunshinekitty has joined #openstack-ansible | 23:49 | |
| *** kstev has quit IRC | 23:50 | |
| *** Qiming has quit IRC | 23:51 | |
| v1k0d3n | hey guys, have (maybe a ridiculous) question... | 23:51 |
| v1k0d3n | if i had 4 physical hosts...could i stretch the deployment to work? | 23:51 |
| *** thorst_ has joined #openstack-ansible | 23:51 | |
| v1k0d3n | reading through mitaka, it's suggesting somewhere around 6, and storage nodes with 1TB of storage...makes perfect sense. but this is just for a tiny lab demo multinode. would that be ok? | 23:52 |
| v1k0d3n | or will i fail some checks? | 23:52 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!