*** jhesketh_ is now known as jhesketh | 00:02 | |
*** sunshinekitty has quit IRC | 00:16 | |
*** sunshinekitty has joined #openstack-ansible | 00:17 | |
*** jayc has joined #openstack-ansible | 00:18 | |
*** errr has joined #openstack-ansible | 00:19 | |
*** mrda has joined #openstack-ansible | 00:19 | |
*** bryan_att has joined #openstack-ansible | 00:20 | |
sunshinekitty | can anyone point me in the right direction for using a different mysql hostname/creds for the aio play? | 00:20 |
---|---|---|
*** wadeholler has joined #openstack-ansible | 00:20 | |
*** jamesdenton has quit IRC | 00:21 | |
*** wadeholler has quit IRC | 00:23 | |
*** wadeholler has joined #openstack-ansible | 00:24 | |
*** wadeholler has left #openstack-ansible | 00:24 | |
cloudnull | sunshinekitty: what are you needing? | 00:29 |
sunshinekitty | cloudnull i have a separate db cluster for the db part and want to use that, i see where to turn off the galera container creation but not where to configure to use the separate db cluster | 00:30 |
cloudnull | v1k0d3n: 4 hosts would work just fine | 00:30 |
cloudnull | at that spec I'd likely do 1 infra node and 3 compute | 00:30 |
v1k0d3n | and they only have 500GB... | 00:30 |
v1k0d3n | that ok for a test box? | 00:31 |
cloudnull | indeed. | 00:31 |
v1k0d3n | ah, awesome! | 00:31 |
cloudnull | I do a lot of testing with a single node | 00:31 |
cloudnull | built using https://github.com/cloudnull/osa-multi-node-aio/tree/master/templates | 00:31 |
v1k0d3n | i do too. aio? | 00:31 |
cloudnull | no AIO | 00:31 |
cloudnull | I use libvirt to build VMs within the node so I'm testing with ~14 nodes from a single piece of hardware. | 00:32 |
cloudnull | its not something I'd put into prod | 00:32 |
cloudnull | but works to exercise the code and ensure multi-node envs are functioning as expected. | 00:32 |
cloudnull | If you have 4 nodes to test w/ I would do a single infra and a bunch of compute. | 00:33 |
v1k0d3n | makes sense. | 00:33 |
*** alikins has quit IRC | 00:34 | |
cloudnull | that'd be a better exercise from a performance point of view | 00:34 |
v1k0d3n | another question that i just don't know the answer too | 00:34 |
stevelle | sunshinekitty: each of the lines like this https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/user_secrets.yml#L36 will get you half way there, then each of the roles has a line like this https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L93 with a default which you can override in user_variables.yml | 00:34 |
v1k0d3n | kolla uses a keepalive that can clash if you have two environments on the same broadcast domain. does OSA have the same? | 00:34 |
stevelle | sunshinekitty: the names all follow the same pattern, should be no surprises. | 00:34 |
sunshinekitty | stevelle ahah, thanks! | 00:34 |
cloudnull | sunshinekitty: stevelle beat me to it | 00:34 |
cloudnull | v1k0d3n: if you use our haproxy role yes. | 00:35 |
cloudnull | otherwise etherything else is built as multi-master. | 00:35 |
v1k0d3n | ok that's what i thought. makes sense. | 00:35 |
cloudnull | our keepalived bits only effect hap | 00:35 |
cloudnull | the galera cluster and rabbitmq cluster are direct connect | 00:36 |
cloudnull | so no keepalived magic there. | 00:36 |
stevelle | sunshinekitty: in case you have any other changes you want to make, we use the same patterns for each role to build the connection string like https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L97 | 00:36 |
v1k0d3n | can the keepalive use be changed so i can run two in the same BD? | 00:36 |
v1k0d3n | is that configurable by chance | 00:36 |
v1k0d3n | ? | 00:36 |
cloudnull | its configurable | 00:37 |
sunshinekitty | i was just looking at that, thank you | 00:37 |
v1k0d3n | i knew it. you guys are freaking rockstars | 00:37 |
cloudnull | and you can disable it. | 00:37 |
cloudnull | and its only in service if you have >1 hap node. | 00:37 |
*** johnmilton has joined #openstack-ansible | 00:38 | |
cloudnull | this is the keepalived bits we use https://github.com/evrardjp/ansible-keepalived | 00:38 |
v1k0d3n | that's awesome | 00:38 |
cloudnull | evrardjp: works with us and maintains that role. so if there's something that can be done to make it better I'm sure he'd be keen to see that go upstream | 00:39 |
v1k0d3n | cloudnull: i probably need your help too soon because i have a box i was doing dev on that suffered from a brown out, and i lost the galera cluster. i ran through the repair as you guys wrote about, and it just doesn't seem to want to get back to a good state. | 00:40 |
v1k0d3n | pretty upset about it. had some really good work going on in there! hate when that happens. | 00:40 |
cloudnull | can you bring up the first node in the cluster. | 00:41 |
cloudnull | 's/ . / ? /g' | 00:41 |
cloudnull | and then add the others in by hand ? | 00:42 |
cloudnull | I'd step aside from the playbooks, and login to the galera server node and try to bootstrap it as a cluster node. | 00:42 |
cloudnull | then restart the other nodes one at a time by hand | 00:43 |
cloudnull | If it suffered a brownout it likely has some bad state data. | 00:43 |
v1k0d3n | yeah, but i have no clue how to repair that. | 00:43 |
v1k0d3n | of all areas...let's jsut say that's not a strength of mine. | 00:44 |
v1k0d3n | and honestly...it can wait til tomorrow | 00:44 |
v1k0d3n | but i know i'm in over my head... | 00:44 |
cloudnull | you may need to login to one of the galera cluster nodes, "rm -rf /var/lib/mysql/.sst". then "/etc/init.d/mysql start --wsrep-new-cluster" | 00:45 |
cloudnull | if it starts login to the cluster using the mysql client and query "show status like '%wsrep%';" | 00:46 |
cloudnull | that should show the gcomm of a single node. | 00:46 |
cloudnull | if that looks good login to the other nodes and run "service mysql start " | 00:46 |
cloudnull | v1k0d3n: if the cluster recovers you should be good to go from there on. | 00:47 |
cloudnull | the services may be VERY unhappy but they should recover from the DB down time as soon as the DB is back online and the services cycle. | 00:48 |
v1k0d3n | so i have one good node one backup and one bad | 00:49 |
v1k0d3n | the bad one i actually went through rebuilding because i thought that's what i had to do. | 00:50 |
v1k0d3n | should've reached out first though :( | 00:50 |
cloudnull | if the node is bad, destroy it and make it again | 00:51 |
cloudnull | as long as you have 1 good one up your OK | 00:51 |
cloudnull | openstack-ansible lxc-container-destroy.yml lxc-container-create.yml --limit #HOSTNAME_OF_BAD_NODE | 00:52 |
*** Qiming has joined #openstack-ansible | 00:52 | |
cloudnull | then openstack-ansible galera-install.yml | 00:52 |
cloudnull | you could also chain it all together: openstack-ansible lxc-container-destroy.yml lxc-container-create.yml galera-install.yml --limit #HOSTNAME_OF_BAD_NODE | 00:53 |
cloudnull | brb | 00:53 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Update HAProxy for multi-OS support https://review.openstack.org/320160 | 01:00 |
cloudnull | back | 01:02 |
*** brad[] has quit IRC | 01:03 | |
*** brad[] has joined #openstack-ansible | 01:03 | |
*** spotz_ is now known as spotz_zzz | 01:04 | |
v1k0d3n | holy cow | 01:05 |
v1k0d3n | all good now | 01:05 |
v1k0d3n | wasn't even that hard | 01:05 |
v1k0d3n | awesome! | 01:05 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement 16.04 support in Keystone https://review.openstack.org/320175 | 01:09 |
cloudnull | nice ! | 01:09 |
v1k0d3n | well, maybe not all is perfect yet | 01:09 |
cloudnull | v1k0d3n: did it recover the second node in the cluster? | 01:09 |
cloudnull | you might need to do the same to all offending nodes. | 01:10 |
v1k0d3n | scheduling instances doesn't seem to quite work...just waits. | 01:10 |
cloudnull | ah. | 01:10 |
cloudnull | you may need to restart the nova scheduler services | 01:10 |
v1k0d3n | ah | 01:10 |
cloudnull | ansible -m shell -a 'service nova-scheduler restart' nova_all | 01:10 |
v1k0d3n | you told me once where all the services are listed at once.... | 01:11 |
v1k0d3n | i think you said it was in a file in /etc/openstack_deploy? | 01:11 |
cloudnull | yes they should all be there. | 01:11 |
cloudnull | if you want to do a rolling restart of nova you can do the following | 01:11 |
cloudnull | ansible nova_all -m shell -a 'for i in $(ls /etc/init | grep nova); do service ${i%".conf"*} restart; done' --forks 1 | 01:11 |
cloudnull | that will restart all of nova one at a time | 01:12 |
v1k0d3n | do i need to run that command in a specific directory? | 01:14 |
cloudnull | from the /opt/openstack-ansible/playbooks | 01:14 |
v1k0d3n | oh yeah...ok duh | 01:14 |
v1k0d3n | right | 01:14 |
cloudnull | honestly you can execute that, or any command from everythere. however in that dir we have an ansible.cfg file that makes inventory sourcing simple | 01:15 |
v1k0d3n | says there are no hosts available. | 01:16 |
v1k0d3n | man, wonder how jacked this thing became | 01:16 |
cloudnull | hum... | 01:17 |
v1k0d3n | probably on storage side? | 01:17 |
v1k0d3n | Error: No valid host was found. There are not enough hosts available | 01:17 |
cloudnull | your inventory json file at /etc/openstack_deploy/openstack_inventory.json file should have a record of all hosts ever in inventory | 01:17 |
v1k0d3n | any way to query all the host services? | 01:17 |
cloudnull | and there is a backup of the running inventory in tar format in /etc/openstack_deploy | 01:18 |
cloudnull | if you need to recover it you should be able to unarchive the tar and pick a date stamped inventory to restor from | 01:18 |
cloudnull | if you want to query the inventory you can do it two ways. | 01:18 |
cloudnull | openstack-ansible os-nova-install.yml --list-hosts | 01:19 |
cloudnull | or from the /opt/openstack-ansible directory you can execute # ./scripts/inventory-manage.py --file /etc/openstack_deploy/openstack_inventory.json --list-container | 01:20 |
cloudnull | or # ./scripts/inventory-manage.py --file /etc/openstack_deploy/openstack_inventory.json -l | 01:20 |
cloudnull | for other lists | 01:20 |
*** daneyon_ has joined #openstack-ansible | 01:23 | |
*** psilvad has joined #openstack-ansible | 01:26 | |
*** daneyon has quit IRC | 01:28 | |
*** alikins has joined #openstack-ansible | 01:46 | |
*** eric_lopez has quit IRC | 01:48 | |
*** joker_ has quit IRC | 01:48 | |
v1k0d3n | so cloudnull question... | 01:54 |
v1k0d3n | looking at the hastats page... | 01:54 |
v1k0d3n | repo_all-back, swift_proxy-back are both failed | 01:55 |
v1k0d3n | bad? | 01:55 |
v1k0d3n | nova_console-back also | 01:56 |
v1k0d3n | i can't remember | 01:59 |
cloudnull | repo_back is bad | 02:07 |
cloudnull | swift proxy back is bad too . | 02:07 |
v1k0d3n | crap. rebuild ok? | 02:07 |
cloudnull | nova console not so much as you may have the spice or novnc backs up instead | 02:07 |
cloudnull | yes you can rebuild | 02:07 |
v1k0d3n | yeah console not worried about. | 02:07 |
cloudnull | openstack-ansible repo-install.yml os-swift-install.yml | 02:08 |
cloudnull | all of the plays/roles are idempotent and can be called at any time in any order. | 02:08 |
cloudnull | abviously w/ some limitations | 02:08 |
cloudnull | but its safe to rerun anything at anytime | 02:08 |
sunshinekitty | getting AnsibleError: host not found on 'haproxy_server | Create haproxy service config files' | 02:09 |
sunshinekitty | based on the inventory file it's looking for aio1... | 02:09 |
sunshinekitty | in openstack_user_config.yml haproxy_hosts is set, anyone know what i'm missing? | 02:10 |
sunshinekitty | i'm able to hit the ip that it's set to | 02:10 |
*** thorst_ has quit IRC | 02:14 | |
*** thorst_ has joined #openstack-ansible | 02:15 | |
*** Qiming has quit IRC | 02:18 | |
*** Qiming has joined #openstack-ansible | 02:19 | |
*** sacharya has joined #openstack-ansible | 02:19 | |
*** markvoelker has quit IRC | 02:21 | |
*** thorst_ has quit IRC | 02:23 | |
*** Qiming has quit IRC | 02:30 | |
*** coolj_ has quit IRC | 02:34 | |
*** coolj has joined #openstack-ansible | 02:35 | |
sunshinekitty | i can resolve the hostname and ip that's in haproxy_hosts, and can run the command ansible fails on without issues..weird | 02:43 |
*** psilvad has quit IRC | 02:45 | |
*** Qiming has joined #openstack-ansible | 02:46 | |
sunshinekitty | der, it's looking at host '[' i think, [{'msg': 'AnsibleError: host not found: [', 'failed': True}] | 02:47 |
*** coolj has quit IRC | 02:48 | |
*** coolj has joined #openstack-ansible | 02:48 | |
*** coolj has quit IRC | 02:50 | |
*** coolj has joined #openstack-ansible | 02:51 | |
*** coolj has quit IRC | 02:52 | |
sunshinekitty | seems i'm not the only one.. http://eavesdrop.openstack.org/irclogs/%23openstack-ansible/%23openstack-ansible.2016-02-26.log.html#t2016-02-26T20:12:14 | 02:52 |
*** eric_lopez has joined #openstack-ansible | 02:52 | |
*** coolj has joined #openstack-ansible | 02:53 | |
*** coolj has quit IRC | 02:55 | |
cloudnull | sunshinekitty: what release are you deploying ? | 02:55 |
sunshinekitty | 13.1.0 | 02:56 |
*** coolj has joined #openstack-ansible | 02:56 | |
*** Qiming has quit IRC | 02:56 | |
cloudnull | rerunning same problem ? | 02:57 |
cloudnull | openstack-ansible haproxy-install.yml ? | 02:57 |
cloudnull | do you by chance have the run up until that point? | 02:58 |
cloudnull | maybe something you can upload to a pastebin ? | 02:58 |
sunshinekitty | yes on re-run, not sure yet how to run just one playbook..the inventory file it outputs is json and ansible complains about yml syntax | 03:00 |
sunshinekitty | s/yml/ini | 03:01 |
*** coolj has quit IRC | 03:03 | |
*** sawblade6 has quit IRC | 03:04 | |
*** coolj has joined #openstack-ansible | 03:05 | |
*** coolj has quit IRC | 03:05 | |
*** coolj has joined #openstack-ansible | 03:06 | |
*** Qiming has joined #openstack-ansible | 03:07 | |
sunshinekitty | http://hastebin.com/ihibezebov.coffee | 03:18 |
coolj | "host not found: [" wat | 03:20 |
*** thorst_ has joined #openstack-ansible | 03:21 | |
*** markvoelker has joined #openstack-ansible | 03:22 | |
sunshinekitty | yea, i'm not too sure.. | 03:22 |
sunshinekitty | http://hastebin.com/hajikiduce.sm | 03:23 |
*** markvoelker has quit IRC | 03:27 | |
*** thorst_ has quit IRC | 03:28 | |
*** sdake_ has quit IRC | 03:29 | |
*** flwang has left #openstack-ansible | 03:30 | |
*** david-lyle_ has joined #openstack-ansible | 03:55 | |
*** david-lyle has quit IRC | 03:57 | |
*** albertcard has quit IRC | 04:03 | |
*** xcdc has joined #openstack-ansible | 04:07 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone https://review.openstack.org/320216 | 04:10 |
*** sdake has joined #openstack-ansible | 04:17 | |
*** sdake has quit IRC | 04:18 | |
*** markvoelker has joined #openstack-ansible | 04:23 | |
*** spotz_zzz is now known as spotz | 04:25 | |
*** thorst_ has joined #openstack-ansible | 04:26 | |
*** markvoelker has quit IRC | 04:28 | |
*** thorst_ has quit IRC | 04:33 | |
*** chhavi has joined #openstack-ansible | 04:46 | |
*** shausy has joined #openstack-ansible | 04:48 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone https://review.openstack.org/320216 | 04:54 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement 16.04 support in Keystone https://review.openstack.org/320175 | 04:54 |
*** eric_lopez has quit IRC | 04:57 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone https://review.openstack.org/320216 | 04:58 |
*** eric_lopez has joined #openstack-ansible | 04:59 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone https://review.openstack.org/320216 | 05:05 |
*** goldenfri has quit IRC | 05:11 | |
*** dmellado has quit IRC | 05:13 | |
*** adreznec has quit IRC | 05:15 | |
*** dmellado has joined #openstack-ansible | 05:17 | |
*** shausy has quit IRC | 05:17 | |
*** shausy has joined #openstack-ansible | 05:18 | |
*** adreznec has joined #openstack-ansible | 05:19 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone https://review.openstack.org/320216 | 05:20 |
*** sacharya_ has joined #openstack-ansible | 05:21 | |
*** sacharya has quit IRC | 05:23 | |
*** markvoelker has joined #openstack-ansible | 05:24 | |
*** sacharya has joined #openstack-ansible | 05:26 | |
*** sacharya_ has quit IRC | 05:28 | |
*** markvoelker has quit IRC | 05:29 | |
*** thorst_ has joined #openstack-ansible | 05:30 | |
*** iceyao has joined #openstack-ansible | 05:34 | |
*** Tebro_ is now known as Tebro | 05:36 | |
*** thorst_ has quit IRC | 05:38 | |
*** iceyao has quit IRC | 05:39 | |
*** iceyao has joined #openstack-ansible | 05:39 | |
*** chhavi has quit IRC | 05:41 | |
*** saneax is now known as saneax_AFK | 05:47 | |
*** chhavi has joined #openstack-ansible | 05:54 | |
*** javeriak has joined #openstack-ansible | 05:57 | |
*** saneax_AFK is now known as saneax | 05:58 | |
*** thorst_ has joined #openstack-ansible | 06:00 | |
*** shausy has quit IRC | 06:00 | |
*** jiteka has joined #openstack-ansible | 06:06 | |
*** thorst_ has quit IRC | 06:09 | |
*** sdake has joined #openstack-ansible | 06:11 | |
*** b3rnard0 has quit IRC | 06:14 | |
*** izaakk has quit IRC | 06:14 | |
*** izaakk has joined #openstack-ansible | 06:14 | |
*** xar- has quit IRC | 06:14 | |
*** NachoDuck has quit IRC | 06:14 | |
*** alextricity25 has quit IRC | 06:14 | |
*** xar- has joined #openstack-ansible | 06:15 | |
*** flaviodsr has quit IRC | 06:15 | |
*** serverascode has quit IRC | 06:15 | |
*** meteorfox has quit IRC | 06:15 | |
*** mrhillsman has quit IRC | 06:16 | |
*** b3rnard0 has joined #openstack-ansible | 06:16 | |
*** alextricity25 has joined #openstack-ansible | 06:16 | |
*** meteorfox has joined #openstack-ansible | 06:17 | |
*** homerp has quit IRC | 06:18 | |
*** flaviodsr has joined #openstack-ansible | 06:18 | |
*** stevelle has quit IRC | 06:19 | |
*** stevelle has joined #openstack-ansible | 06:19 | |
*** dolphm has quit IRC | 06:21 | |
*** maximov has quit IRC | 06:22 | |
*** b3rnard0 has quit IRC | 06:22 | |
*** rackertom has quit IRC | 06:23 | |
*** dolphm has joined #openstack-ansible | 06:23 | |
*** maximov has joined #openstack-ansible | 06:23 | |
*** h1nch has quit IRC | 06:23 | |
*** b3rnard0 has joined #openstack-ansible | 06:24 | |
*** homerp has joined #openstack-ansible | 06:24 | |
*** markvoelker has joined #openstack-ansible | 06:25 | |
*** sdake has quit IRC | 06:25 | |
*** rackertom has joined #openstack-ansible | 06:26 | |
*** hughsaunders has quit IRC | 06:26 | |
*** NachoDuck has joined #openstack-ansible | 06:28 | |
*** markvoelker has quit IRC | 06:29 | |
*** hughsaunders has joined #openstack-ansible | 06:32 | |
*** bsv has joined #openstack-ansible | 06:33 | |
*** serverascode has joined #openstack-ansible | 06:35 | |
*** sdake has joined #openstack-ansible | 06:37 | |
*** mrhillsman has joined #openstack-ansible | 06:43 | |
*** saneax is now known as saneax_AFK | 06:46 | |
*** saneax_AFK is now known as saneax | 06:46 | |
*** h1nch has joined #openstack-ansible | 06:50 | |
*** toanster has joined #openstack-ansible | 06:52 | |
*** toan has quit IRC | 06:52 | |
*** sdake has quit IRC | 06:53 | |
*** admin0 has joined #openstack-ansible | 06:54 | |
*** admin0 has quit IRC | 07:00 | |
*** saneax is now known as saneax_AFK | 07:01 | |
*** saneax_AFK is now known as saneax | 07:02 | |
*** chhavi has quit IRC | 07:03 | |
*** karimb has joined #openstack-ansible | 07:03 | |
*** saneax is now known as saneax_AFK | 07:05 | |
*** chhavi has joined #openstack-ansible | 07:05 | |
*** saneax_AFK is now known as saneax | 07:06 | |
*** thorst_ has joined #openstack-ansible | 07:06 | |
*** saneax is now known as saneax_AFK | 07:07 | |
*** saneax_AFK is now known as saneax | 07:08 | |
*** saneax is now known as saneax_AFK | 07:09 | |
*** sacharya has quit IRC | 07:13 | |
*** thorst_ has quit IRC | 07:13 | |
*** saneax_AFK is now known as saneax | 07:14 | |
*** chhavi has quit IRC | 07:14 | |
*** Brew has quit IRC | 07:23 | |
*** markvoelker has joined #openstack-ansible | 07:26 | |
*** mikelk has joined #openstack-ansible | 07:26 | |
*** chhavi has joined #openstack-ansible | 07:27 | |
*** markvoelker has quit IRC | 07:32 | |
*** karimb_ has joined #openstack-ansible | 07:33 | |
*** spotz is now known as spotz_zzz | 07:34 | |
*** karimb_ has quit IRC | 07:34 | |
*** karimb_ has joined #openstack-ansible | 07:35 | |
*** karimb_ has quit IRC | 07:36 | |
*** karimb has quit IRC | 07:36 | |
*** karimb_ has joined #openstack-ansible | 07:36 | |
*** karimb_ has quit IRC | 07:37 | |
*** karimb has joined #openstack-ansible | 07:38 | |
evrardjp | always happy to help if there is a need | 07:41 |
*** chhavi has quit IRC | 07:43 | |
evrardjp | and good morning everyone | 07:43 |
javeriak | good morning evrardjp; was waiting for someone to show up :) | 07:55 |
javeriak | do you by an chance know who i can ping for rpc maas ? hav some setup questions | 07:56 |
evrardjp | Did I win the lottery? | 07:56 |
javeriak | evrardjp haha not that i know of... | 07:56 |
evrardjp | go ahead | 07:56 |
javeriak | go ahead and ak ? | 07:56 |
javeriak | ask* | 07:56 |
*** chhavi has joined #openstack-ansible | 07:56 | |
evrardjp | you can ask me, I'll try to help | 07:57 |
evrardjp | that's what I meant | 07:57 |
evrardjp | remember to not use rpc-maas repo (except for older releases) | 07:57 |
javeriak | oh okay perfect, so i have a rackspace customer portal account, but seems like you need to have a cloud account for the rpc_maas playbooks, as i cant find what to use for the "maas_api_key" | 07:57 |
javeriak | yes im using the rcbops/rpc-openstack repo | 07:58 |
javeriak | so just wanted to know, if i can make so with this customer account or is a cloud account necessary | 07:59 |
evrardjp | this is more complex, because it requires some kind of access. the best way is to contact rackspace support | 08:00 |
evrardjp | they can generate the key for you | 08:01 |
javeriak | evrardjp yea it is a bit confusing; thanks though | 08:01 |
evrardjp | the rpc docs could get a rewrite indeed | 08:01 |
evrardjp | :D | 08:01 |
javeriak | oh man they definetly do.. i mean theres like a mountain of differnt sources on the monitoring and how to set it up, but its hard to navigate and make sense of. i guess it hasnt really been structured for consumption outside of rax yet | 08:02 |
javeriak | it was a blog that i finally found that actually explained how to write a plugin and create alarms for it | 08:03 |
mattt | javeriak: to be fair there is very little consumption of rackspace monitoring outside of rackspace :P | 08:03 |
evrardjp | yeah the monitoring bits are quite FOR rackspace | 08:04 |
javeriak | matt, i seem to be doing alot of firsts here | 08:04 |
evrardjp | although I used the python scripts in my previous company to generate results for our zabbix monitoring | 08:04 |
* mattt hands javeriak a shovel | 08:04 | |
mattt | :) | 08:04 |
evrardjp | anyway, the playbooks are meant for rackspace environment | 08:04 |
javeriak | :D | 08:04 |
mattt | javeriak: let us know if you need help, we're quite familiar w/ the rpc maas stuff, but getting the credentials when you're not on cloud will require you to speak to support | 08:05 |
javeriak | evrardjp yep i know, but im trying to incorporate my custom alarms into it now | 08:05 |
javeriak | matt i've send an email, i do have credentials, but i think not the right kind, as this only shows the customer portal | 08:06 |
evrardjp | if these are openstack related generic alarms, don't hesitate to send a PR | 08:06 |
javeriak | evrardjp nope, they are generic to plumgris | 08:06 |
javeriak | plumgrid* | 08:06 |
mattt | javeriak: you will actually need a token | 08:08 |
javeriak | mattt yea it seems to want either a password or a token, but i havnt looked into where to get a token | 08:08 |
mattt | javeriak: https://github.com/rcbops/rpc-openstack/blob/master/rpcd/playbooks/roles/rpc_maas/defaults/main.yml#L16-L25 | 08:08 |
*** berendt has joined #openstack-ansible | 08:08 | |
javeriak | yea i saw that... but where to get a token... or can only support generate one for you | 08:09 |
evrardjp | support only | 08:10 |
*** karimb_ has joined #openstack-ansible | 08:11 | |
*** thorst_ has joined #openstack-ansible | 08:11 | |
*** karimb has quit IRC | 08:13 | |
*** sacharya has joined #openstack-ansible | 08:13 | |
*** berendt has quit IRC | 08:13 | |
*** sacharya has quit IRC | 08:18 | |
*** thorst_ has quit IRC | 08:18 | |
*** berendt has joined #openstack-ansible | 08:19 | |
*** asettle has joined #openstack-ansible | 08:24 | |
*** odyssey4me_ is now known as odyssey4me | 08:26 | |
*** markvoelker has joined #openstack-ansible | 08:28 | |
*** markvoelker has quit IRC | 08:32 | |
pjm6 | good morning | 08:35 |
*** javeriak has quit IRC | 08:35 | |
*** javeriak has joined #openstack-ansible | 08:35 | |
*** retreved has joined #openstack-ansible | 08:39 | |
*** retreved has quit IRC | 08:39 | |
*** saneax is now known as saneax_AFK | 08:40 | |
*** retreved has joined #openstack-ansible | 08:40 | |
*** ig0r_ has joined #openstack-ansible | 08:40 | |
*** chhavi has quit IRC | 08:45 | |
*** sguduru has joined #openstack-ansible | 08:45 | |
*** sirisha has joined #openstack-ansible | 08:47 | |
sirisha | Hi, regarding the review https://review.openstack.org/#/c/317278/, can anyone please let me know what else can be done? | 08:49 |
*** chhavi has joined #openstack-ansible | 08:49 | |
sirisha | that's an optional code, to mount drives in swift using openstack ansible | 08:50 |
*** sirisha has quit IRC | 08:54 | |
mattt | Qiming: ping | 09:00 |
*** electrofelix has joined #openstack-ansible | 09:00 | |
*** xcdc has quit IRC | 09:03 | |
*** thorst_ has joined #openstack-ansible | 09:16 | |
Qiming | hi mattt | 09:17 |
Qiming | mattt, replied to your comment on #317901 | 09:18 |
mattt | Qiming: rados.__path__ doesn't work for me, is that perhaps a python 3 thing ? | 09:19 |
Qiming | mattt, okay, then ignore my comment | 09:19 |
Qiming | the current patch looks just fine already | 09:20 |
mattt | Qiming: no worries, just wanted to make sure i wasn't doing something dumb :) | 09:20 |
*** sdake has joined #openstack-ansible | 09:20 | |
mattt | thanks for reviewing ! | 09:20 |
Qiming | my pleasure, ;) | 09:21 |
*** thorst_ has quit IRC | 09:24 | |
*** saneax_AFK is now known as saneax | 09:27 | |
*** javeriak has quit IRC | 09:33 | |
*** karimb_ has quit IRC | 09:38 | |
*** javeriak has joined #openstack-ansible | 09:45 | |
*** boogibugs has joined #openstack-ansible | 09:47 | |
*** iceyao_ has joined #openstack-ansible | 09:59 | |
*** iceyao_ has quit IRC | 10:00 | |
*** iceyao__ has joined #openstack-ansible | 10:00 | |
*** iceyao__ has quit IRC | 10:00 | |
*** iceyao_ has joined #openstack-ansible | 10:01 | |
*** sdake has quit IRC | 10:01 | |
*** iceyao__ has joined #openstack-ansible | 10:02 | |
*** iceyao_ has quit IRC | 10:02 | |
*** iceyao has quit IRC | 10:02 | |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Automatically enable neutron ha router capabilities https://review.openstack.org/313042 | 10:08 |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Automatically enable neutron ha router capabilities https://review.openstack.org/313042 | 10:09 |
*** sacharya has joined #openstack-ansible | 10:15 | |
*** johnmilton has quit IRC | 10:17 | |
*** sacharya has quit IRC | 10:19 | |
*** thorst_ has joined #openstack-ansible | 10:21 | |
*** thorst_ has quit IRC | 10:28 | |
*** markvoelker has joined #openstack-ansible | 10:29 | |
*** markvoelker has quit IRC | 10:34 | |
*** javeriak has quit IRC | 10:47 | |
*** javeriak has joined #openstack-ansible | 10:53 | |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-os_neutron: Consistency for multi-os in the includes https://review.openstack.org/320355 | 10:54 |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-rabbitmq_server: Consistency for multi-os in the includes https://review.openstack.org/320356 | 10:55 |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible-repo_server: Consistency for multi-os in the includes https://review.openstack.org/320357 | 10:56 |
*** Qiming has quit IRC | 11:06 | |
*** brad[] has quit IRC | 11:16 | |
*** sdake has joined #openstack-ansible | 11:17 | |
*** spotz_zzz is now known as spotz | 11:19 | |
*** johnmilton has joined #openstack-ansible | 11:20 | |
*** iceyao__ has quit IRC | 11:23 | |
*** brad[] has joined #openstack-ansible | 11:24 | |
*** thorst_ has joined #openstack-ansible | 11:26 | |
*** javeriak has quit IRC | 11:30 | |
*** markvoelker has joined #openstack-ansible | 11:30 | |
*** thorst_ has quit IRC | 11:31 | |
*** tlbr_ has quit IRC | 11:31 | |
*** ig0r_ has quit IRC | 11:34 | |
*** markvoelker has quit IRC | 11:35 | |
*** asettle has quit IRC | 11:39 | |
*** asettle has joined #openstack-ansible | 11:39 | |
*** thorst_ has joined #openstack-ansible | 11:43 | |
*** spotz is now known as spotz_zzz | 11:47 | |
*** sdake has quit IRC | 11:49 | |
*** brad[] has quit IRC | 11:56 | |
*** sawblade6 has joined #openstack-ansible | 11:56 | |
*** ig0r_ has joined #openstack-ansible | 11:57 | |
*** brad[] has joined #openstack-ansible | 11:57 | |
*** Qiming has joined #openstack-ansible | 11:58 | |
*** admin0 has joined #openstack-ansible | 11:58 | |
*** tlbr has joined #openstack-ansible | 12:00 | |
*** markvoelker has joined #openstack-ansible | 12:02 | |
*** woodard has joined #openstack-ansible | 12:07 | |
*** woodard has quit IRC | 12:08 | |
*** asettle has quit IRC | 12:08 | |
*** psilvad has joined #openstack-ansible | 12:08 | |
mhayden | morning | 12:08 |
*** woodard has joined #openstack-ansible | 12:08 | |
mhayden | evrardjp: interesting fix on the horizon ha router stuff -- what's the 'lxb' for on 'ml2.lxb' ? | 12:10 |
mhayden | linux bridge? | 12:10 |
*** sguduru has quit IRC | 12:10 | |
*** psilvad has quit IRC | 12:13 | |
*** afred312 has quit IRC | 12:15 | |
*** asettle has joined #openstack-ansible | 12:15 | |
*** Qiming has quit IRC | 12:15 | |
*** afred312 has joined #openstack-ansible | 12:16 | |
*** asettle has quit IRC | 12:17 | |
*** Qiming has joined #openstack-ansible | 12:17 | |
*** asettle has joined #openstack-ansible | 12:17 | |
evrardjp | yup | 12:20 |
*** afred312 has quit IRC | 12:20 | |
*** klamath has joined #openstack-ansible | 12:23 | |
*** klamath has quit IRC | 12:23 | |
*** klamath has joined #openstack-ansible | 12:24 | |
evrardjp | automagically_: could you ping me when you're there? | 12:30 |
*** afred312 has joined #openstack-ansible | 12:45 | |
*** afred312 has quit IRC | 12:46 | |
*** afred312 has joined #openstack-ansible | 12:46 | |
*** catintheroof has joined #openstack-ansible | 12:49 | |
cloudnull | mornings | 12:53 |
*** johnmilton has quit IRC | 12:54 | |
*** kylek3h has joined #openstack-ansible | 12:54 | |
*** johnmilton has joined #openstack-ansible | 12:55 | |
mhayden | have we considered setting "nova_scheduler_driver" to caching_scheduler in nova? | 12:56 |
mhayden | i'm talking to garbutt about it | 12:56 |
*** david-lyle has joined #openstack-ansible | 12:57 | |
*** woodard has quit IRC | 12:58 | |
cloudnull | mhayden: not to my knowledge | 12:59 |
cloudnull | if its better lets give it a go :) | 12:59 |
automagically_ | evrardjp: Here | 13:00 |
automagically_ | Morning | 13:00 |
*** Qiming has quit IRC | 13:01 | |
*** david-lyle_ has quit IRC | 13:01 | |
evrardjp | morning | 13:01 |
mhayden | cloudnull: i'm told it's an order of magnitude faster than filter | 13:07 |
mhayden | but you can only run one | 13:07 |
*** woodard has joined #openstack-ansible | 13:07 | |
evrardjp | so about https://review.openstack.org/#/c/319252/ and tags | 13:09 |
*** sdake has joined #openstack-ansible | 13:09 | |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Cleanup/standardize usage of tags https://review.openstack.org/319252 | 13:09 |
evrardjp | with my experience, I'd personally like to have a standard "install/config/upgrade" on top of "{component}-install/$1-config/$1-upgrade" | 13:10 |
*** woodard_ has joined #openstack-ansible | 13:10 | |
evrardjp | I don't know what you think of that | 13:11 |
evrardjp | the fact to have a generic way to target all roles with a same tags seems interesting | 13:11 |
automagically_ | My concern is the usage of such generic tag names makes it likely that they may bleed into other roles/plays the deployer is running that they use to build on top of/augment OSA | 13:12 |
*** BjoernT has joined #openstack-ansible | 13:12 | |
*** BjoernT is now known as Bjoern_zZzZzZzZ | 13:12 | |
automagically_ | In my experience, its also rare that I want to reconfigure several OS services at the same time, typically, I’m iterating on reconfiguring a single service | 13:13 |
evrardjp | it's a risk if the playbook started includes OSA and other stuff | 13:13 |
*** sdake has quit IRC | 13:13 | |
evrardjp | except if we give the tag with a generic prefix like osa- | 13:13 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible: Update HAProxy for multi-OS support https://review.openstack.org/320160 | 13:13 |
*** woodard has quit IRC | 13:14 | |
evrardjp | automagically_: it's by pure laziness, I'll explain another tag I like to skip, you'll understand :D | 13:14 |
evrardjp | in general, when I include apt tasks, I tag stuff with {something}apt | 13:15 |
evrardjp | doing an apt update/version check to some roles is useless for me, and just skipping the task would have been faster | 13:15 |
evrardjp | so if we have a standard (across roles) apt tag, we can skip the tag when we know that no apt tasks need to be done | 13:16 |
evrardjp | the only line to add would be a line with the generic tag name on the include (due to the include + tag behaviour) | 13:17 |
evrardjp | what do you think? | 13:17 |
cloudnull | automagically_: ++ I have the same concerns. | 13:18 |
automagically_ | Gotcha, makes sense. However, during the design summit, we specifically discussed and I believe agreed upon a goal of reducing the number of tags down considerably | 13:18 |
automagically_ | This would have the effect of our reducing the public interface our tags offer | 13:19 |
automagically_ | Is there a use case for running the ${role_name}_install tag where you’d only want to skip apt or yum operations? | 13:19 |
*** afred312 has quit IRC | 13:22 | |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-memcached_server: Removing the `verbose` variable https://review.openstack.org/318121 | 13:22 |
*** afred312 has joined #openstack-ansible | 13:23 | |
cloudnull | automagically_: We did agree that in this cycle we should reduce tags considerably. | 13:23 |
evrardjp | I see the following "pros" of standardizing these tags: ease of usage, ease of onboarding for new developers | 13:24 |
evrardjp | We should reduce tags, but not reduce functionality if possible | 13:24 |
*** Bjoern_zZzZzZzZ is now known as BjoernT | 13:24 | |
automagically_ | https://etherpad.openstack.org/p/openstack-ansible-newton-irr-cleanup | 13:24 |
evrardjp | I don't see the problem | 13:25 |
automagically_ | So, from the actions section. I think we need to document the expected set of tags that every role will implement. It appears that we agred that they would all at least implement ‘install’ and ‘configure’ | 13:26 |
automagically_ | evrardjp: Which problem? | 13:26 |
evrardjp | automagically_: there is none apparently | 13:27 |
automagically_ | Perfect! :D | 13:27 |
evrardjp | for me install/configure/upgrade is enough as a tag | 13:27 |
*** afred312 has quit IRC | 13:27 | |
evrardjp | if you are afraid of overlap, maybe using osa-install/osa-configure/osa-upgrade | 13:27 |
evrardjp | and when we use the role, we tag using the role | 13:27 |
evrardjp | like tagging every task of the keystone role with keystone | 13:27 |
evrardjp | this way we can skip osa-install for all the roles or skip keystone completely | 13:28 |
evrardjp | without ever changing the glue of the playbooks | 13:28 |
automagically_ | I like that idea | 13:29 |
evrardjp | it's not mine, it's ansible tags default behavior :p | 13:30 |
evrardjp | that's how I like to use it | 13:30 |
automagically_ | So, the keystone playbook would include the keystone role with tags: osa-install, osa-config? | 13:30 |
automagically_ | And tasks inside the keystone role would be tagged with keystone-install, keystone-config? | 13:30 |
automagically_ | Just making sure I understand | 13:30 |
evrardjp | nope that's not what I meant :p | 13:31 |
evrardjp | on the playbook we include the role | 13:32 |
evrardjp | let's say keystone playbook | 13:32 |
evrardjp | in the - role: section we can add tags: keystone | 13:32 |
evrardjp | all the tasks from the rome will be tagged with "keystone" | 13:33 |
evrardjp | role* | 13:33 |
evrardjp | then inside the role, we can keep using a standard pattern that openstack-ansible has globally defined | 13:33 |
evrardjp | like osa-install/osa-configure/osa-upgrade/osa-apt whatever | 13:33 |
evrardjp | and this way we can target what we want easily | 13:34 |
evrardjp | the other way would be to use variables to replace tags, but I find this ugly | 13:37 |
automagically_ | Hmm..I’m not opposed to that pattern. Would like to here what others think about it | 13:39 |
automagically_ | AFK for a bit | 13:39 |
*** afred312 has joined #openstack-ansible | 13:42 | |
cloudnull | automagically_: I'd not be against that pattern . | 13:42 |
cloudnull | odyssey4me: ^ ? | 13:43 |
*** ibravo has joined #openstack-ansible | 13:44 | |
*** iceyao has joined #openstack-ansible | 13:45 | |
*** ametts has joined #openstack-ansible | 13:46 | |
*** deadnull_ has joined #openstack-ansible | 13:49 | |
*** Qiming has joined #openstack-ansible | 13:55 | |
evrardjp | instead of having ppl not against, could we have ppl in favor instead ? :D | 13:56 |
*** bsv has quit IRC | 13:56 | |
*** TxGirlGeek has joined #openstack-ansible | 13:57 | |
cloudnull | im not against it . | 13:57 |
evrardjp | :D | 13:57 |
cloudnull | i like the pattern "<service>-<tag-name>" but can see value in the other too. | 13:57 |
cloudnull | so like I said, im not against it. :) | 13:58 |
evrardjp | we could have that too | 13:58 |
evrardjp | I'm not against the <service>-<tag-name> | 13:58 |
*** phalmos has joined #openstack-ansible | 13:59 | |
cloudnull | o/ phalmos | 13:59 |
evrardjp | I think we should have both at the end, because it's easier with current ansible's pattern matching | 13:59 |
*** jthorne has joined #openstack-ansible | 13:59 | |
cloudnull | jthorne: in DA house :) | 13:59 |
jthorne | uh oh | 14:00 |
cloudnull | hide your cloud, hide your instnaces. | 14:00 |
jthorne | basically | 14:00 |
*** phalmos_ has joined #openstack-ansible | 14:00 | |
cloudnull | hows it jthorne? | 14:02 |
jthorne | cloudnull: going alright. still really busy with a particular customer. trying to get them in a good spot. | 14:03 |
*** phalmos has quit IRC | 14:04 | |
jthorne | once that is wrapped up, i'm going to try and go on vacation for once | 14:04 |
*** Mudpuppy has joined #openstack-ansible | 14:05 | |
phalmos_ | cloudnull: did you ring? | 14:05 |
*** afred312 has quit IRC | 14:09 | |
*** woodard has joined #openstack-ansible | 14:12 | |
*** woodard_ has quit IRC | 14:13 | |
*** woodard has quit IRC | 14:14 | |
*** spotz_zzz is now known as spotz | 14:15 | |
*** kstev has joined #openstack-ansible | 14:18 | |
*** woodard has joined #openstack-ansible | 14:19 | |
*** jayc has quit IRC | 14:20 | |
*** jayc has joined #openstack-ansible | 14:20 | |
*** woodard_ has joined #openstack-ansible | 14:21 | |
*** woodard_ has quit IRC | 14:22 | |
*** schwicht has joined #openstack-ansible | 14:22 | |
*** woodard_ has joined #openstack-ansible | 14:22 | |
*** sacharya has joined #openstack-ansible | 14:24 | |
*** afred312_ has joined #openstack-ansible | 14:24 | |
*** sacharya has quit IRC | 14:24 | |
*** woodard has quit IRC | 14:25 | |
cloudnull | phalmos_: just saying hi is all :) | 14:26 |
phalmos_ | Well, good day to you , sir! | 14:26 |
cloudnull | good day to you too :)O | 14:26 |
cloudnull | 's/:)o/:)/g' | 14:27 |
phalmos_ | I was wondering what the '0' was for? | 14:27 |
*** pjm6 has quit IRC | 14:27 | |
phalmos_ | Looked inappropriate :) | 14:27 |
*** TxGirlGeek has quit IRC | 14:28 | |
*** logan- has quit IRC | 14:29 | |
*** logan- has joined #openstack-ansible | 14:30 | |
*** karimb has joined #openstack-ansible | 14:31 | |
cloudnull | i cant type | 14:32 |
spotz | poor cloudnull:) | 14:33 |
mhayden | could i get one more look from someone at https://review.openstack.org/320131 ? that's the security role gate blocker | 14:35 |
*** pjm6 has joined #openstack-ansible | 14:40 | |
openstackgerrit | Merged openstack/openstack-ansible-security: Fix auditd log permission bug https://review.openstack.org/320131 | 14:41 |
*** afred312_ has quit IRC | 14:42 | |
*** BjoernT has quit IRC | 14:42 | |
*** david-lyle has quit IRC | 14:42 | |
*** homerp has quit IRC | 14:42 | |
*** klamath has quit IRC | 14:42 | |
*** dolphm has quit IRC | 14:42 | |
*** coolj has quit IRC | 14:42 | |
*** Tebro has quit IRC | 14:42 | |
*** jwagner has quit IRC | 14:42 | |
* mhayden hugs cloudnull | 14:43 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix null password auth in CentOS https://review.openstack.org/318888 | 14:43 |
*** phalmos_ has quit IRC | 14:44 | |
phschwartz | mhayden: any chance you have seen this happen before | 14:44 |
phschwartz | mhayden: fatal: [logs.cloud-ci.ibmcis.com]: FAILED! => {"changed": false, "failed": true, "msg": "FAILED: System accounts are unlocked: "} | 14:44 |
* mhayden has seen and broken many many things | 14:44 | |
phschwartz | mhayden: I would expect it to give a list of the accounts but it does not | 14:44 |
mhayden | that's peculiar, phschwartz | 14:44 |
mhayden | it should print out a list of the accounts that it found | 14:45 |
*** _d34dh0r53_ is now known as d34dh0r53 | 14:45 | |
phschwartz | its ubuntu 14.04 | 14:45 |
mhayden | phschwartz: which version of openstack-ansible-security are you using? | 14:45 |
phschwartz | and yes, I figured it sould have a list due to the : | 14:45 |
phschwartz | mhayden: master as of about 2 weeks ago | 14:45 |
phschwartz | let me update it and try again | 14:46 |
mhayden | i don't know if that particular part of the role has been modified recently | 14:46 |
*** pjm6_ has joined #openstack-ansible | 14:46 | |
mhayden | phschwartz: i can try to reproduce it on a 14.04 VM | 14:47 |
Adri2000 | how do I set vars for a group of hosts (not just one host)? in this case I'd like to set neutron_provider_networks: network_mappings: to "" for all the compute hosts (because my compute hosts only have a br-vxlan bridge, and don't have a br-vlan one nor access to the flat network) | 14:48 |
evrardjp | mhayden: recently we have changed the V-38496 | 14:48 |
evrardjp | maybe worth a look | 14:48 |
*** deadnull_ is now known as _deadnull | 14:48 | |
evrardjp | you can define it in the openstack_user_config | 14:49 |
evrardjp | Adri2000: ^ | 14:49 |
*** sdake has joined #openstack-ansible | 14:49 | |
Adri2000 | evrardjp: I know I can use "host_vars:" in there for a specific host | 14:50 |
phschwartz | mhayden: yeah, update didn't have a change. Let me look at what is returned by the roll | 14:50 |
Adri2000 | evrardjp: what about for a group of hosts? | 14:50 |
mhayden | phschwartz: okay, building a test vm on this end | 14:50 |
evrardjp | Adri2000: you have two ways | 14:50 |
mhayden | phschwartz: if you can add some output into a LP bug, that'd be awesome for tracking | 14:50 |
evrardjp | change the group_binds in the global_overrides | 14:50 |
phschwartz | evrardjp: what changed in v-38496 as that is the one I am hitting the issue from | 14:50 |
*** Brew has joined #openstack-ansible | 14:51 | |
phschwartz | mhayden: yeah, I will do that for you | 14:51 |
* mhayden tips his hat to phschwartz | 14:51 | |
evrardjp | Adri2000: or you could define overrides per group of hosts like this: | 14:52 |
evrardjp | (I'm trying to find this in the docs, 2 secs) | 14:54 |
*** weshay has joined #openstack-ansible | 14:55 | |
evrardjp | I don't find this in the doc | 14:55 |
Adri2000 | thank you :) | 14:55 |
Adri2000 | :( | 14:55 |
evrardjp | basically you can define container_vars: under your node | 14:55 |
evrardjp | and then you can define variables that apply to your node in your group of nodes | 14:56 |
*** TxGirlGeek has joined #openstack-ansible | 14:56 | |
evrardjp | changes are high you'd want to set the vlan though | 14:56 |
evrardjp | br-vlan and br-storage* | 14:56 |
evrardjp | but that's another topic | 14:56 |
evrardjp | phschwartz: I know it's the one :D | 14:57 |
evrardjp | we changed that for ansible2 support and few things | 14:57 |
evrardjp | it shouldn't have any impact | 14:57 |
evrardjp | but just in case I was mentioning it to mhayden | 14:57 |
*** asettle has quit IRC | 14:58 | |
*** asettle has joined #openstack-ansible | 14:58 | |
Adri2000 | evrardjp: well my real issue at first is that my compute nodes don't have br-vlan. I'm not sure if this configuration is "supported" by OSA or not... but some tests I made suggest that if I make "network_mappings" disappear in the compute hosts neutron conf, it just works (otherwise neutron complains it cannot find br-vlan/flat network) | 14:58 |
Adri2000 | that's why I was looking at overriding that on all my compute hosts | 14:59 |
evrardjp | it's not supported | 15:02 |
evrardjp | by OSA | 15:02 |
evrardjp | but it's doable | 15:02 |
Adri2000 | any reason it's not supported apart from "someone needs to do it"? | 15:02 |
evrardjp | and you can create a bridge if you want that clings to nothing too, but I find that ugly | 15:02 |
Adri2000 | yeah indeed... | 15:02 |
evrardjp | you don't have any need for vlan at all? | 15:03 |
evrardjp | or it's just on the computes? | 15:03 |
Adri2000 | not needed on the compute | 15:03 |
evrardjp | (just to make sure I understand completely) | 15:03 |
Adri2000 | only on the network nodes | 15:03 |
Adri2000 | I have br-vxlan everywhere | 15:03 |
Adri2000 | br-vlan / flat only on network nodes | 15:04 |
Adri2000 | so basically I can't do DVR with this configuration, but that's ok | 15:04 |
*** phalmos_ has joined #openstack-ansible | 15:04 | |
evrardjp | DVR is for OVS right? | 15:04 |
*** Qiming has quit IRC | 15:04 | |
Adri2000 | ah that's the reason you're right :) | 15:04 |
evrardjp | it's been a while I didn't check on dvr | 15:05 |
Adri2000 | I think you're right | 15:05 |
Adri2000 | anyway | 15:05 |
evrardjp | afk | 15:05 |
Adri2000 | my instances will only have interfaces in private network, so going through br-vxlan | 15:05 |
Adri2000 | and they'll go through the network node(s) which has br-vlan/flat and the external network | 15:06 |
Adri2000 | to reach outside/internet | 15:06 |
*** TxGirlGeek has quit IRC | 15:07 | |
*** TxGirlGeek has joined #openstack-ansible | 15:08 | |
*** TxGirlGeek has quit IRC | 15:10 | |
*** weezS has joined #openstack-ansible | 15:11 | |
mhayden | phschwartz: http://paste.openstack.org/show/498631/ | 15:12 |
mhayden | phschwartz: can you give me a little more of your output? feel free to sanitize | 15:12 |
phschwartz | mhayden: let me run it more verbose. there is no msg after the error like on yours | 15:13 |
mhayden | okay | 15:14 |
mhayden | my "testuser" has a uid of 499 and it's unlocked | 15:14 |
*** TxGirlGeek has joined #openstack-ansible | 15:16 | |
phschwartz | mhayden: http://paste.openstack.org/show/498635/ | 15:16 |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-pip_install: Adopting the common role documentation pattern https://review.openstack.org/320520 | 15:17 |
*** Junhongl_ has joined #openstack-ansible | 15:17 | |
mhayden | phschwartz: interesting... looking still | 15:18 |
mhayden | phschwartz: do you have any unlocked accounts with uid < 500? | 15:18 |
phschwartz | mhayden: whats the easiest way to tell? | 15:19 |
mhayden | phschwartz: i'll bash you something | 15:19 |
*** TxGirlGeek has quit IRC | 15:20 | |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-pip_install: Removing unnecessary usage of with_items https://review.openstack.org/320521 | 15:20 |
*** Junhongl_ has left #openstack-ansible | 15:20 | |
*** jiteka has quit IRC | 15:22 | |
*** asettle has quit IRC | 15:25 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_glance: Implement Ubuntu 16.04 support with SystemD https://review.openstack.org/320526 | 15:29 |
cloudnull | ^ If folks have some time ^ that should implement a good pattern for the OS roles w/ systemd | 15:30 |
mhayden | phschwartz: quick and dirty -> http://paste.openstack.org/show/498682/ | 15:31 |
mhayden | phschwartz: mainly looking for accounts in /etc/shadow that don't have a '!' in the 2nd field | 15:32 |
mhayden | ! = account is locked | 15:32 |
*** admin0 has quit IRC | 15:32 | |
openstack | mhayden: Error: "=" is not a valid command. | 15:32 |
mhayden | no ! = account has a password | 15:32 |
*** galstrom_zzz is now known as galstrom | 15:32 | |
mhayden | openstack: go back to sleep | 15:32 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone https://review.openstack.org/320216 | 15:32 |
cloudnull | Also https://review.openstack.org/#/c/314817/ is holding up progress on OS.* role support w/ cent7 so if folks have time to review that one also it'd be appreciated. | 15:33 |
mhayden | cloudnull: imma add it to my queue | 15:33 |
cloudnull | tyvm | 15:34 |
phschwartz | mhayden: it doesn't return anything so I am taking it no unlocked sys accounts | 15:34 |
mhayden | phschwartz: weird -- did you see any problems when you updated openstack-ansible-security to master? | 15:34 |
mhayden | i think evrardjp may have fixed this already in master | 15:34 |
phschwartz | mhayden: no | 15:35 |
mhayden | ORLY | 15:35 |
evrardjp | ? | 15:35 |
evrardjp | who pinged me? | 15:35 |
evrardjp | :D | 15:35 |
mhayden | let me remove my testuser and retry | 15:35 |
*** daneyon has joined #openstack-ansible | 15:36 | |
mhayden | phschwartz: i'll make you a debug patch | 15:38 |
*** daneyon_ has quit IRC | 15:39 | |
evrardjp | mhayden: need help? | 15:39 |
evrardjp | could you give me a link to the bug? | 15:39 |
*** klamath has joined #openstack-ansible | 15:40 | |
*** dolphm has joined #openstack-ansible | 15:40 | |
*** coolj has joined #openstack-ansible | 15:40 | |
*** Tebro has joined #openstack-ansible | 15:40 | |
*** jwagner has joined #openstack-ansible | 15:40 | |
*** Junhongl_ has joined #openstack-ansible | 15:40 | |
phschwartz | evrardjp: busy debuging nodepool, haven't had a chance to put it up in LP yet | 15:40 |
evrardjp | k | 15:41 |
*** Junhongl_ has quit IRC | 15:44 | |
*** Junhongl_ has joined #openstack-ansible | 15:44 | |
mhayden | phschwartz: https://gist.github.com/major/9fe2c3b159fb59e9a3e4101b3850f507 | 15:45 |
mhayden | try to apply that | 15:45 |
*** afred312_ has joined #openstack-ansible | 15:45 | |
*** BjoernT has joined #openstack-ansible | 15:45 | |
*** david-lyle has joined #openstack-ansible | 15:45 | |
*** homerp has joined #openstack-ansible | 15:45 | |
mhayden | that should dump out any problematic accounts | 15:45 |
*** mikelk has quit IRC | 15:46 | |
*** psilvad has joined #openstack-ansible | 15:47 | |
*** Junhongl_ has quit IRC | 15:47 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_glance: Implement CentOS 7 support in os_glance https://review.openstack.org/320542 | 15:47 |
*** Junhongl has joined #openstack-ansible | 15:48 | |
*** weezS has quit IRC | 15:49 | |
*** jmccrory_ has joined #openstack-ansible | 15:50 | |
phschwartz | mhayden: it is running now | 15:50 |
*** pjm6 has quit IRC | 15:51 | |
*** pjm6 has joined #openstack-ansible | 15:51 | |
*** pjm6 has quit IRC | 15:51 | |
*** Junhongl has quit IRC | 15:51 | |
*** pjm6 has joined #openstack-ansible | 15:52 | |
*** pjm6 has quit IRC | 15:52 | |
*** KLevenstein has joined #openstack-ansible | 15:52 | |
*** pjm6 has joined #openstack-ansible | 15:53 | |
*** phalmos has joined #openstack-ansible | 15:55 | |
phschwartz | mhayden: I don't think that will help. lol | 15:55 |
phschwartz | mhayden: http://paste.openstack.org/show/498686/ | 15:55 |
mhayden | ah! | 15:56 |
mhayden | it look like there's a single \n in there | 15:56 |
mhayden | that's peculiar | 15:56 |
*** phalmos has quit IRC | 15:57 | |
*** afred312_ has quit IRC | 15:57 | |
*** BjoernT has quit IRC | 15:57 | |
*** david-lyle has quit IRC | 15:57 | |
*** homerp has quit IRC | 15:57 | |
mhayden | evrardjp: i wonder if we ought to use something different for default() | 15:57 |
mhayden | instead of default([]) | 15:57 |
*** weshay has quit IRC | 15:58 | |
mhayden | perhaps we could use default(False) and check for that boolean? | 15:58 |
evrardjp | we should maybe check if the list isn't empty ? | 15:58 |
*** phalmos_ has quit IRC | 15:59 | |
mhayden | possibly | 15:59 |
mhayden | evrardjp: would you want to take on that one? | 16:00 |
*** weezS has joined #openstack-ansible | 16:00 | |
evrardjp | could you just tell me what's this about? | 16:00 |
evrardjp | https://review.openstack.org/#/c/319962/1/tasks/auth.yml | 16:00 |
evrardjp | this? | 16:00 |
evrardjp | I'm not sure I followed | 16:00 |
*** cloader89 has joined #openstack-ansible | 16:00 | |
evrardjp | I'll try with none | 16:01 |
mhayden | evrardjp: see phschwartz' paste up there | 16:02 |
mhayden | he ran the role and ended up with [] in v38496_violations | 16:03 |
evrardjp | k | 16:03 |
mhayden | i'm trying to see if it's something special in phschwartz' environment | 16:03 |
mhayden | because i can't reproduce it | 16:03 |
evrardjp | gate doesn't seem to have issues with the current code | 16:05 |
evrardjp | but I agree this needs more thought | 16:05 |
evrardjp | to have proper conditionals | 16:05 |
mhayden | so that check is skipped in the gate -- because the images have unlocked accounts :| | 16:06 |
*** phalmos has joined #openstack-ansible | 16:06 | |
*** david-lyle has joined #openstack-ansible | 16:06 | |
*** homerp has joined #openstack-ansible | 16:06 | |
evrardjp | k | 16:07 |
openstackgerrit | Wang Qing wu proposed openstack/openstack-ansible-os_nova: Implement Nova PowerVM Virt Driver https://review.openstack.org/319022 | 16:08 |
phschwartz | mhayden: whant me to swap that one to default(None) ? | 16:08 |
mhayden | phschwartz: you could try, but the next task might not handle that well | 16:09 |
mhayden | phschwartz: you can skip the task for now with --skip-task V-38496 | 16:09 |
mhayden | --skip-tasks rather | 16:09 |
phschwartz | mhayden: you mean --skip-tags=v-38496 ? | 16:10 |
evrardjp | mhayden: what do you mnean by an :unlocked: account ? | 16:12 |
mhayden | evrardjp: unlocked accounts have no ! in the second field of /etc/shadow | 16:12 |
mhayden | locked accounts have a "!" in the second field of /etc/shadow | 16:12 |
evrardjp | k | 16:13 |
*** eil397 has joined #openstack-ansible | 16:17 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix auditd log permission bug https://review.openstack.org/320560 | 16:17 |
*** sacharya has joined #openstack-ansible | 16:18 | |
v1k0d3n | cloudnull: may have a question for you... | 16:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Docs: Update dev notes for Cat 3 controls https://review.openstack.org/318905 | 16:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Docs: Update dev notes for Cat 1 controls https://review.openstack.org/319429 | 16:22 |
*** eil397 has quit IRC | 16:23 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Docs: Update dev notes for Cat 2 controls https://review.openstack.org/318954 | 16:23 |
evrardjp | mhayden: I've faked my passwd/shadow with some accounts unlocked (or not), I never hit a failure | 16:24 |
mhayden | are you using tox to test? | 16:24 |
*** ig0r_ has quit IRC | 16:24 | |
mhayden | tox is configured to skip that test | 16:24 |
mhayden | that task, rather | 16:24 |
prometheanfire | does the creation of a simlink between /var/lib/libvirt/qemu/save/ and /var/lib/nova/instances make sence as an OSA issue? | 16:24 |
prometheanfire | see https://github.com/rcbops/rpc-openstack/issues/1097 for more info | 16:24 |
evrardjp | mhayden: directly running the playbook | 16:26 |
prometheanfire | symlink, not simlink... | 16:26 |
mhayden | evrardjp: are the uid's under 500? | 16:27 |
mhayden | i usually do: useradd -u 499 testuser; passwd testuser | 16:27 |
evrardjp | there was yes | 16:28 |
evrardjp | Ok let me test | 16:28 |
evrardjp | I haven't defined a pass | 16:28 |
*** catintheroof has quit IRC | 16:28 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible: Cleanup horizon vars in hosts.yml https://review.openstack.org/319948 | 16:28 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Adding audit rule for SELinux policy modifications https://review.openstack.org/319438 | 16:29 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Add /etc/apparmor.d/ for auditing https://review.openstack.org/319922 | 16:30 |
*** asettle has joined #openstack-ansible | 16:32 | |
*** javeriak has joined #openstack-ansible | 16:32 | |
*** phalmos has quit IRC | 16:33 | |
*** phalmos has joined #openstack-ansible | 16:34 | |
*** sdake_ has joined #openstack-ansible | 16:35 | |
evrardjp | mhayden: can't reproduce the bug | 16:35 |
mhayden | the tasks say you have no unlocked accounts? | 16:36 |
evrardjp | when I have an "unlocked" account it fails, as supposed to | 16:36 |
evrardjp | when having none, it continues and doesn't fail to process the thing | 16:36 |
mhayden | i see the same thing | 16:36 |
mhayden | as you | 16:36 |
evrardjp | that's the expected behavior right? | 16:36 |
mhayden | but phschwartz is seeing something different | 16:37 |
mhayden | evrardjp: yes | 16:37 |
mhayden | phschwartz: which version of ansible are you running? | 16:37 |
*** sdake has quit IRC | 16:38 | |
*** eil397 has joined #openstack-ansible | 16:38 | |
evrardjp | could you do a debug of v38496_violations? | 16:40 |
evrardjp | phschwartz: ^ | 16:40 |
cloudnull | v1k0d3n: whats up ? | 16:42 |
evrardjp | mhayden: maybe we should replace if i.stdout|length > 0 by if i.stdout|trim|length > 0 | 16:43 |
evrardjp | just in case | 16:43 |
mhayden | evrardjp: it's worth a try | 16:43 |
evrardjp | but I'd rather have the issue | 16:43 |
evrardjp | however I have to leave for today | 16:44 |
evrardjp | so enjoy your evening, everyone! | 16:44 |
v1k0d3n | cloudnull: hey man, sorry to bother. | 16:44 |
automagically_ | later evrardjp | 16:44 |
*** karimb has quit IRC | 16:44 | |
cloudnull | no bother. | 16:44 |
v1k0d3n | i believe this is the case, but my deploy host can also be a target (or do they have to be separate)? | 16:44 |
*** karimb has joined #openstack-ansible | 16:45 | |
*** admin0 has joined #openstack-ansible | 16:46 | |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_glance: Implement CentOS 7 support in os_glance https://review.openstack.org/320542 | 16:46 |
palendae | Looking for some feedback on https://review.openstack.org/#/c/318917/2 | 16:48 |
palendae | Not sure if I should error or warn for this case (which is completely silent right now) | 16:49 |
*** karimb has quit IRC | 16:49 | |
*** asettle has quit IRC | 16:50 | |
cloudnull | v1k0d3n: they can be the same | 16:54 |
cloudnull | like if you wanted to have the deployment host be the first infra node that works just fine | 16:55 |
phschwartz | mhayden: 2.2.0 | 16:57 |
phschwartz | evrardjp: it was at the bottom of that paste | 16:57 |
*** eric_lopez has quit IRC | 16:58 | |
phschwartz | mhayden: interesting, --skip-tags didn't work. lol | 16:58 |
*** retreved has quit IRC | 17:01 | |
*** javeriak has quit IRC | 17:03 | |
*** weezS has quit IRC | 17:05 | |
*** eric_lopez has joined #openstack-ansible | 17:05 | |
*** pjm6__ has joined #openstack-ansible | 17:07 | |
*** afred312 has joined #openstack-ansible | 17:09 | |
*** pjm6_ has quit IRC | 17:10 | |
v1k0d3n | ah, ok...thought so...just wanted to make sure | 17:11 |
*** javeriak has joined #openstack-ansible | 17:11 | |
*** pjm6_ has joined #openstack-ansible | 17:11 | |
*** pjm6__ has quit IRC | 17:11 | |
cloudnull | palendae: I'd say warn | 17:11 |
*** eil397 has quit IRC | 17:11 | |
cloudnull | IMO I think it makes sense to throw a warning when there's a potential problem with a static route | 17:12 |
openstackgerrit | Merged openstack/openstack-ansible-memcached_server: Removing the `verbose` variable https://review.openstack.org/318121 | 17:22 |
*** javeriak has quit IRC | 17:25 | |
openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts: Add br_netfilter to 16.04 for support https://review.openstack.org/320139 | 17:28 |
*** javeriak has joined #openstack-ansible | 17:30 | |
*** pjm6_ has quit IRC | 17:45 | |
galstrom | quick question.. Any particular reason why staticweb is not in the swift_middleware_list by default? https://github.com/openstack/openstack-ansible-os_swift/blob/master/defaults/main.yml#L63-L81 | 17:46 |
*** dmsimard has joined #openstack-ansible | 17:46 | |
dmsimard | Hi o/ This is somewhat of a plug but last weekend I posted about a tool to help record and troubleshoot ansible playbook runs: https://dmsimard.com/2016/05/21/ara-an-idea-to-store-browse-and-troubleshoot-ansible-playbook-runs/ | 17:52 |
dmsimard | The reason I mention this here is because the primary driver behind the project is RDO (and by extension OpenStack) and I plan on moving the project under the openstack umbrella. | 17:52 |
dmsimard | I've talked to openstack-infra briefly about it back when it was still a prototype: http://lists.openstack.org/pipermail/openstack-infra/2016-May/004257.html | 17:53 |
dmsimard | If you happen to be interested at all, I'll let you know once it is in a more polished state and under the openstack namespace. | 17:54 |
galstrom | andymccr, cloudnull, hughsaunders Any particular reason why staticweb is not in the swift_middleware_list by default? https://github.com/openstack/openstack-ansible-os_swift/blob/master/defaults/main.yml#L63-L81 | 17:55 |
*** admin0 has quit IRC | 17:58 | |
jmccrory | thanks dmsimard, that looks really useful | 17:59 |
*** weezS has joined #openstack-ansible | 18:00 | |
*** KLevenstein has quit IRC | 18:02 | |
*** KLevenstein has joined #openstack-ansible | 18:03 | |
cloudnull | dmsimard: that looks cool | 18:04 |
dmsimard | We're definitely no UI/UX guys but we're doing our best, thanks for the comments :) | 18:04 |
cloudnull | galstrom: not that im aware of | 18:05 |
cloudnull | dmsimard: so its a UI for playbook runs and leverages Ansible callbacks to do analysis ? (over simplification) | 18:06 |
*** scarlisle has joined #openstack-ansible | 18:07 | |
dmsimard | cloudnull: yeah tl;dr, callback records events in a database (sqlite, mysql, etc .. sqlalchemy) and there's a CLI client and a web UI to browse that database | 18:07 |
cloudnull | dmsimard: does it support Ansible 2? | 18:07 |
dmsimard | Only Ansible 2 :) | 18:07 |
cloudnull | good to know. | 18:07 |
cloudnull | we're not there yet but looking to target 2.1 this cycle | 18:07 |
dmsimard | We're testing on 2.0.1.0 right now, 2.0.2.0 broke a lot of our stuff and I haven't got around to test 2.1 yet. | 18:07 |
cloudnull | I think we'll skip 2.0 | 18:08 |
dmsimard | We have no plans for retrofitting 1.9 fwiw, don't have interest or the resources for it and it's fairly EOL | 18:08 |
*** albertcard has joined #openstack-ansible | 18:09 | |
cloudnull | yea. | 18:10 |
cloudnull | we're on 1.9 right now. but testing 2.1 https://review.openstack.org/#/c/317224/ | 18:10 |
cloudnull | hope to move that direction soon | 18:10 |
*** sdake_ is now known as sdake | 18:11 | |
cloudnull | as is, everything we have should be 2.x compatible | 18:11 |
cloudnull | but there are some things we need to clean up to make it all happy. | 18:12 |
cloudnull | dmsimard: ARA looks awesome though . I can see folks really liking that | 18:12 |
*** david-lyle_ has joined #openstack-ansible | 18:12 | |
*** admin0 has joined #openstack-ansible | 18:12 | |
dmsimard | cloudnull: bah, to be fair, the job view in Tower is really awesome but that ties you to using Tower (licensing, not open source yet, central execution model, etc.). They've done a good job on the UI/UX. | 18:13 |
dmsimard | I hope some frontend folks can eventually give us a hand with the look and feel :) | 18:14 |
*** david-lyle has quit IRC | 18:16 | |
*** electrofelix has quit IRC | 18:16 | |
cloudnull | galstrom: looks like we need to simply add the plugin and a section for it in config | 18:17 |
cloudnull | http://docs.openstack.org/developer/swift/middleware.html#staticweb | 18:17 |
*** jmccrory_ has quit IRC | 18:19 | |
*** javeriak_ has joined #openstack-ansible | 18:22 | |
*** ig0r_ has joined #openstack-ansible | 18:23 | |
openstackgerrit | Merged openstack/openstack-ansible-os_keystone: Use ansible-lint 2.7.0 https://review.openstack.org/318429 | 18:24 |
*** javeriak has quit IRC | 18:24 | |
palendae | I think I was disconnected or netsplit - cloudnull would you mind leaving a comment on the warn/error CR? | 18:24 |
palendae | https://review.openstack.org/#/c/318917/2 | 18:24 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_swift: Add staticweb to the default middleware list https://review.openstack.org/320614 | 18:27 |
cloudnull | galstrom: ^ | 18:27 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_swift: Add staticweb to the default middleware list https://review.openstack.org/320614 | 18:27 |
*** admin0 has quit IRC | 18:29 | |
*** admin0 has joined #openstack-ansible | 18:29 | |
*** admin0 has quit IRC | 18:30 | |
cloudnull | palendae: done | 18:31 |
*** chhavi has quit IRC | 18:33 | |
*** Brew has quit IRC | 18:35 | |
*** Brew has joined #openstack-ansible | 18:35 | |
*** TxGirlGeek has joined #openstack-ansible | 18:37 | |
prometheanfire | d34dh0r53: cloudnull: can you triage this? https://bugs.launchpad.net/openstack-ansible/+bug/1585325 | 18:38 |
openstack | Launchpad bug 1585325 in openstack-ansible "libvirt save directory saves to the rootfs" [Undecided,New] - Assigned to Matthew Thode (prometheanfire) | 18:38 |
prometheanfire | also, kilo is dead right? as in dead dead? | 18:38 |
openstackgerrit | Kevin Carter (cloudnull) proposed openstack/openstack-ansible-os_glance: Implement Ubuntu 16.04 support with SystemD https://review.openstack.org/320526 | 18:38 |
cloudnull | prometheanfire: looking | 18:39 |
prometheanfire | thanks | 18:39 |
prometheanfire | cloudnull: we have users filling up their disks because of this | 18:40 |
*** TxGirlGeek has quit IRC | 18:40 | |
openstackgerrit | Merged openstack/openstack-ansible: Initial commit to enable mitaka>newton upgrades https://review.openstack.org/316290 | 18:41 |
prometheanfire | cloudnull: also, how is the release note generated (specifically the hash in the file name. | 18:41 |
prometheanfire | this will be my first time using reno | 18:41 |
cloudnull | triaged | 18:42 |
cloudnull | reno is generated like so | 18:42 |
cloudnull | tox -e venv -- reno new SLUGNAME | 18:43 |
prometheanfire | sgtm | 18:43 |
prometheanfire | and SLUGNAME? | 18:44 |
*** iceyao has quit IRC | 18:46 | |
cloudnull | tox -e venv -- reno new name_of_thing_being_changed_so_everyone_knows_at_a_glance | 18:49 |
*** asettle has joined #openstack-ansible | 18:51 | |
*** asettle has quit IRC | 18:51 | |
*** asettle has joined #openstack-ansible | 18:51 | |
palendae | cloudnull, Thanks. Waitress took forever to get my check | 18:54 |
palendae | prometheanfire, The hash will be added for you | 18:55 |
palendae | Also, make sure you do it at the root - reno will gladly shove it in ./releasenotes, even if that's not the 'right' place | 18:55 |
prometheanfire | nice | 18:56 |
*** admin0 has joined #openstack-ansible | 18:56 | |
*** markvoelker_ has joined #openstack-ansible | 18:57 | |
*** kstev has quit IRC | 18:58 | |
*** markvoelker has quit IRC | 18:59 | |
*** TxGirlGeek has joined #openstack-ansible | 19:00 | |
*** markvoelker has joined #openstack-ansible | 19:00 | |
mhayden | phschwartz: the role is tested against 1.9.4 at the moment | 19:01 |
*** kstev has joined #openstack-ansible | 19:01 | |
*** markvoelker_ has quit IRC | 19:02 | |
mhayden | phschwartz: ah, i do see that bug in 2.2 | 19:04 |
galstrom | cloudnull: ty.. i was just wanting to see if there was some "it is broke, or does not work" issue that yall were aware of | 19:05 |
*** pjm9 has joined #openstack-ansible | 19:06 | |
*** pjm9 has quit IRC | 19:07 | |
openstackgerrit | Matthew Thode proposed openstack/openstack-ansible-os_nova: Create symlink for libvirt save directory https://review.openstack.org/320624 | 19:07 |
prometheanfire | palendae: cloudnull ^ hopefully that follows expected convention | 19:07 |
*** saneax is now known as saneax_AFK | 19:08 | |
palendae | prometheanfire, The reno file looks good to me | 19:08 |
prometheanfire | cool | 19:08 |
openstackgerrit | Justin Shepherd proposed openstack/openstack-ansible-os_swift: Add staticweb to the default middleware list https://review.openstack.org/320614 | 19:10 |
*** mfisch has joined #openstack-ansible | 19:15 | |
*** mfisch is now known as Guest92937 | 19:16 | |
*** Guest92937 is now known as mfisch | 19:18 | |
*** mfisch has quit IRC | 19:18 | |
*** mfisch has joined #openstack-ansible | 19:18 | |
*** asettle has quit IRC | 19:20 | |
*** sdake has quit IRC | 19:21 | |
*** sdake has joined #openstack-ansible | 19:21 | |
*** javeriak has joined #openstack-ansible | 19:23 | |
*** javeriak_ has quit IRC | 19:26 | |
*** sdake has quit IRC | 19:30 | |
*** sdake has joined #openstack-ansible | 19:31 | |
*** schwicht has quit IRC | 19:34 | |
*** schwicht has joined #openstack-ansible | 19:35 | |
cloudnull | mhayden: do you see a similar bug in 2.1 ? | 19:36 |
mhayden | not sure yet | 19:36 |
mhayden | trying to fix it in 2.2 + 1.9.4 | 19:36 |
*** TxGirlGeek has quit IRC | 19:37 | |
phschwartz | mhayden: :( if not, I will have to run a temp venv with 1.9.4 | 19:37 |
*** ig0r_ has quit IRC | 19:39 | |
mhayden | cloudnull: any idea how to gate test with both? i thought about running the role two times in the gate :P | 19:41 |
cloudnull | prometheanfire: looks good. I have one nit, and one suggestion . | 19:44 |
prometheanfire | go on | 19:44 |
cloudnull | prometheanfire: in the review | 19:44 |
cloudnull | mhayden: you'd have to do a local test | 19:44 |
prometheanfire | ah, k | 19:44 |
cloudnull | mhayden: I have some tooling to test / run with multiple versions of ansible found here https://review.openstack.org/#/c/304840/ | 19:45 |
cloudnull | It's not looking like that tooling is going to go in at this point, I may spin it off into its own repo and build from there. | 19:45 |
cloudnull | but either way its something you can locally use to run multiple versions of ansible | 19:46 |
mhayden | phschwartz: did you end up making a bug for this? i'm about to propose a patch | 19:48 |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-os_keystone: Cleanup/standardize usage of tags https://review.openstack.org/319252 | 19:51 |
mhayden | oh dang, ol galstrom done edited cloudnull's commit | 19:57 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Fix unlocked account check on Ansible 2.2 https://review.openstack.org/320637 | 19:59 |
*** asettle has joined #openstack-ansible | 19:59 | |
mhayden | phschwartz: ^^ patch for your bug | 19:59 |
openstackgerrit | Travis Truman (automagically) proposed openstack/openstack-ansible-repo_server: Removing unnecessary usage of with_items https://review.openstack.org/320639 | 20:00 |
mpjetta | anyone know how the mitaka & ubuntu 16.04 support is these days ? | 20:01 |
automagically_ | mpjetta: How so? In the context of OpenStack-Ansible or the deb packages? | 20:01 |
mhayden | mpjetta: ubuntu 16.04 + OSA are coming together in the newton release | 20:02 |
mpjetta | OpenStack-Ansible, ahh ok | 20:02 |
mpjetta | thanks | 20:02 |
mhayden | de nada | 20:02 |
*** sdake_ has joined #openstack-ansible | 20:02 | |
mhayden | automagically_: we could do linux from scratch support in the O release | 20:02 |
* mhayden winks | 20:02 | |
automagically_ | Grrrr | 20:02 |
* mhayden exits stage left | 20:03 | |
palendae | Build lxd on centos/RHEL first | 20:03 |
*** javeriak_ has joined #openstack-ansible | 20:03 | |
*** javeria__ has joined #openstack-ansible | 20:04 | |
*** javeriak has quit IRC | 20:05 | |
*** sdake has quit IRC | 20:05 | |
*** ibravo has quit IRC | 20:06 | |
*** javeriak_ has quit IRC | 20:08 | |
*** javeria__ has quit IRC | 20:08 | |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Test static route settings https://review.openstack.org/318917 | 20:08 |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Add tests for the _net_address_search function https://review.openstack.org/318939 | 20:09 |
phschwartz | mhayden: sorry, been heads down with a nodepool bug, have the todo for this afternoon of creating your bug | 20:13 |
*** asettle has quit IRC | 20:14 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [WIP] Improve gate testing for security role https://review.openstack.org/320649 | 20:18 |
mhayden | phschwartz: no problem, i am waiting on the gate to test it :) | 20:18 |
*** TxGirlGeek has joined #openstack-ansible | 20:19 | |
automagically_ | cloudnull - you around? | 20:19 |
cloudnull | mhayden: idk if you have time, but the check on https://review.openstack.org/#/c/314817/just came in . | 20:19 |
cloudnull | automagically_: kinda | 20:19 |
cloudnull | hows it? | 20:19 |
automagically_ | Have a question about openstack_other.yml and openstack_services.yml | 20:20 |
mhayden | cloudnull: you tell me do things and i done runnin' | 20:20 |
* mhayden looks at d34dh0r53 | 20:20 | |
cloudnull | mhayden: https://review.openstack.org/#/c/314817 | 20:20 |
cloudnull | automagically_: shoot | 20:20 |
mhayden | cloudnull: woot! | 20:20 |
automagically_ | Specifically, I’ve built a mirror to host all of the git repos mentioned there, and wondering where a good place to override all the ${name}_git_repo would be | 20:20 |
mhayden | cloudnull: lime is in the coconut, sir | 20:20 |
cloudnull | tyvm! | 20:20 |
automagically_ | It _looks like_ the lookup plugin simply finds any YAML file under the install location of OSA if I’m reading the Python correctly | 20:21 |
galstrom | mhayden you are welcome? i had to make it right :) | 20:21 |
automagically_ | But, I’m guessing I can’t control ordering of the read, so to override, I’ll actually need to edit the files in playbooks/defaults/repo_packages | 20:21 |
cloudnull | the lookup plugin will scan the local repo under defaults, and /etc/ansible/roles | 20:21 |
palendae | We should write tests for the lookup plugin | 20:22 |
palendae | Well, all the plugins | 20:22 |
palendae | >.> | 20:22 |
automagically_ | palendae: ++++++++++++++++++++++++++ | 20:22 |
jthorne | sigmavirus24: i'm getting alerts for your AIO instance | 20:22 |
openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible-os_nova: Cleanup spice HTML5 proxy git repo before updating it https://review.openstack.org/320650 | 20:22 |
palendae | May start on harnesses for that today/tomorrow | 20:22 |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_nova: Skip unavailable hosts when distributing keys https://review.openstack.org/320651 | 20:22 |
cloudnull | the files in the repos are processed with let priority than that of the local dir | 20:22 |
automagically_ | Ah… | 20:22 |
sigmavirus24 | jthorne: lol, I have no clue why either. It's not just you | 20:22 |
cloudnull | so if you override something in the main osa repo it will stick | 20:22 |
cloudnull | even if redefined elsewhere. | 20:23 |
jthorne | sigmavirus24: are you using a shared internal public cloud account? | 20:23 |
automagically_ | cloudnull: Thanks muchly. I’ll give that a shot. | 20:23 |
palendae | automagically_, So part of the problem for some of those plugins - I don't want to fully re-test all of the openstack client stuff in the Ansible modules we have | 20:23 |
palendae | Just wanna make sure it marshalls stuff correctly | 20:23 |
automagically_ | palendae: Makes sense | 20:23 |
palendae | config_template and the lookups need more love IMO | 20:23 |
sigmavirus24 | jthorne: that I am | 20:23 |
automagically_ | Agreed 100% palendae | 20:23 |
jthorne | that's gotta be why | 20:23 |
palendae | And should probably be in Ansible proper, with tests there | 20:23 |
sigmavirus24 | jthorne: right, I'm looking for a way to just have it notify me | 20:24 |
*** asettle has joined #openstack-ansible | 20:28 | |
*** asettle has quit IRC | 20:28 | |
openstackgerrit | Merged openstack/openstack-ansible-galera_server: Add CentOS7 support to Galera Server https://review.openstack.org/314817 | 20:30 |
openstackgerrit | Bjoern Teipel proposed openstack/openstack-ansible: Migrate keystone v2 images to v3 during Liberty upgrade https://review.openstack.org/317070 | 20:31 |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Add tests for the _net_address_search function https://review.openstack.org/318939 | 20:31 |
*** KLevenstein has quit IRC | 20:34 | |
*** KLevenstein has joined #openstack-ansible | 20:35 | |
mhayden | wait, i heard we're filing complaints against sigmavirus24 here | 20:36 |
sigmavirus24 | mhayden: in #openstack-meeting too | 20:36 |
sigmavirus24 | The TC was highlighting me for no reason | 20:36 |
*** weezS has quit IRC | 20:37 | |
sigmavirus24 | Someone thought I brought a topic up when I didn't | 20:37 |
spotz | :( | 20:37 |
palendae | Can we file bugs against a person with the TC? | 20:37 |
mhayden | sigmavirus24: i'll take a can of paint to the water tower to defend your honor | 20:37 |
mhayden | palendae: nice | 20:37 |
sigmavirus24 | mhayden: O_o | 20:37 |
sigmavirus24 | mhayden: what does that even mean? | 20:37 |
mhayden | sigmavirus24: if you were from the south, you'd know | 20:38 |
mhayden | :) | 20:38 |
Mudpuppy | http://nusouthplayaz.com/wp-content/plugins/rss-poster/cache/8c64f_blades1.jpg | 20:38 |
sigmavirus24 | Thank god I'm not mhayden | 20:38 |
sigmavirus24 | At least I had naps in kindergarden | 20:38 |
mhayden | sigmavirus24: indeed | 20:38 |
*** Zucan has joined #openstack-ansible | 20:39 | |
spotz | heheh | 20:39 |
*** johnmilton has quit IRC | 20:45 | |
palendae | So I was thinking about adding more helpful messages to the dynamic_inventory.py and detecting common errors like poor indentation/missing semicolons | 20:48 |
palendae | The thought was Ansible does this, so why can't we? Turns out, they wrote their own YAML constructors/loaders/dumpers https://github.com/ansible/ansible/blob/devel/lib/ansible/parsing/yaml/constructor.py | 20:49 |
*** phalmos_ has joined #openstack-ansible | 20:49 | |
palendae | =\ | 20:49 |
*** phalmos has quit IRC | 20:53 | |
*** TxGirlGeek has quit IRC | 20:55 | |
*** weezS has joined #openstack-ansible | 20:56 | |
*** KLevenstein has quit IRC | 20:57 | |
*** KLevenstein has joined #openstack-ansible | 20:58 | |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Test static route settings https://review.openstack.org/318917 | 20:58 |
*** asettle has joined #openstack-ansible | 21:00 | |
*** Mudpuppy has quit IRC | 21:02 | |
cloader89 | For some reason the new agreement for code review is saying server error, when I try to submit on gerritt | 21:03 |
cloader89 | any thoughts? | 21:03 |
*** TxGirlGeek has joined #openstack-ansible | 21:05 | |
mcarden | I remember being cusght out by that when I started too. Now, what caused it.....? (welcome cloader89) | 21:05 |
mcarden | It's something about geting your Launchpad account set up first because it talks to the Foundation in the background... or something. | 21:06 |
spotz | cloader89: so it's the gerrit website giving the error? | 21:06 |
*** phalmos_ has quit IRC | 21:06 | |
*** schwicht has quit IRC | 21:06 | |
palendae | Yeah, you need launchpad first | 21:07 |
palendae | I don't know that that's the exact cause of that particular problem | 21:07 |
mcarden | I recall you need to do ALL of this precisely and in order, for it to work: http://docs.openstack.org/infra/manual/developers.html#account-setup | 21:07 |
*** phalmos has joined #openstack-ansible | 21:07 | |
mcarden | I think I skipped something and got that 'Server Error' at the time. | 21:08 |
*** TxGirlGeek has quit IRC | 21:09 | |
*** psilvad has quit IRC | 21:10 | |
*** cloudtrainme has joined #openstack-ansible | 21:11 | |
*** smatzek has joined #openstack-ansible | 21:12 | |
*** schwicht has joined #openstack-ansible | 21:21 | |
*** weezS has quit IRC | 21:22 | |
cloader89 | I signed up as a community member, not founder, but its fixed now. thanks | 21:27 |
openstackgerrit | Matthew Thode proposed openstack/openstack-ansible-os_nova: Create symlink for libvirt save directory https://review.openstack.org/320624 | 21:30 |
cloudnull | welcome cloader89 | 21:31 |
cloudnull | prometheanfire: https://review.openstack.org/#/c/320624/ <-- does that only partially close the bug ? | 21:32 |
cloudnull | is there any follow up needed beyond that to address it for the Master branch ? | 21:33 |
cloudnull | sigmavirus24: ping | 21:33 |
cloudnull | do you know the name of the new-ish container management project , !Magnum ? | 21:33 |
cloudnull | prometheanfire: ^ | 21:34 |
*** sdake has joined #openstack-ansible | 21:34 | |
cloudnull | we were talking about it the other day i just cant remember the name of it | 21:34 |
*** ametts has quit IRC | 21:35 | |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Test static route settings https://review.openstack.org/318917 | 21:35 |
*** johnmilton has joined #openstack-ansible | 21:35 | |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Add tests for the _net_address_search function https://review.openstack.org/318939 | 21:36 |
mcarden | cloudnull: Is it Higgins you're after? | 21:36 |
cloudnull | thats the one | 21:36 |
cloudnull | thanks you | 21:36 |
cloudnull | **thank | 21:37 |
sigmavirus24 | cloudnull: higgins | 21:37 |
mcarden | NP - apparently named after Magnum PI's offsider | 21:37 |
sigmavirus24 | cloudnull: that's just the common api on top of the COEs that magnum would provide | 21:37 |
*** thorst_ has quit IRC | 21:37 | |
cloudnull | oh. | 21:38 |
*** thorst_ has joined #openstack-ansible | 21:38 | |
cloudnull | was thinking that the problem was going to get fixed. | 21:38 |
* cloudnull remembers he's working in OpenStack | 21:38 | |
*** sdake_ has quit IRC | 21:38 | |
*** johnmilton has quit IRC | 21:40 | |
*** KLevenstein has quit IRC | 21:40 | |
*** cloudtrainme has quit IRC | 21:41 | |
*** KLevenstein has joined #openstack-ansible | 21:42 | |
palendae | Couple reviews up at https://review.openstack.org/#/q/topic:+inventory-tests that got some love today. Would appreciate feedback when people get the time | 21:42 |
*** thorst_ has quit IRC | 21:43 | |
*** thorst_ has joined #openstack-ansible | 21:44 | |
*** KLevenstein has quit IRC | 21:45 | |
palendae | Also https://review.openstack.org/#/c/283149/; wish I could apply multiple topics | 21:47 |
*** thorst_ has quit IRC | 21:48 | |
palendae | And now I'm going to go for a walk and call it a night. Have a good one everybody | 21:49 |
*** thorst_ has joined #openstack-ansible | 21:50 | |
mrda | Morning OSA | 21:50 |
cloudnull | morning mrda | 21:51 |
mrda | o/ | 21:53 |
*** thorst_ has quit IRC | 21:54 | |
openstackgerrit | Dolph Mathews proposed openstack/openstack-ansible-os_keystone: Grammar: requires -> required https://review.openstack.org/320682 | 21:54 |
spotz | hey mrda | 21:54 |
spotz | that was a hard review to do dolphm:) | 21:55 |
*** TxGirlGeek has joined #openstack-ansible | 21:59 | |
prometheanfire | cloudnull: I say partial because it's targeting multiple branches | 21:59 |
*** schwicht has quit IRC | 21:59 | |
dolphm | spotz: it was driving be crazy | 22:00 |
spotz | heheh | 22:00 |
mcarden | Me too, but I resisted. Thanks for not resisting dolphm. :) | 22:00 |
*** cloader89 has quit IRC | 22:01 | |
*** jayc has quit IRC | 22:01 | |
*** schwicht has joined #openstack-ansible | 22:05 | |
*** TxGirlGeek has quit IRC | 22:06 | |
*** asettle has quit IRC | 22:08 | |
*** darrenc is now known as darrenc_afk | 22:09 | |
*** sdake has quit IRC | 22:09 | |
*** schwicht has quit IRC | 22:09 | |
*** thorst_ has joined #openstack-ansible | 22:15 | |
*** darrenc_afk is now known as darrenc | 22:16 | |
*** jamesdenton has joined #openstack-ansible | 22:17 | |
*** sdake has joined #openstack-ansible | 22:19 | |
*** galstrom is now known as galstrom_zzz | 22:19 | |
*** thorst_ has quit IRC | 22:19 | |
*** schwicht has joined #openstack-ansible | 22:24 | |
*** spotz is now known as spotz_zzz | 22:26 | |
*** woodard_ has quit IRC | 22:51 | |
*** woodard has joined #openstack-ansible | 22:52 | |
*** Zucan has quit IRC | 22:56 | |
stevelle | lets just agree to not backport that | 22:56 |
mhayden | so i just updated to 12.0.12 in liberty, but i have no 'nova_pubkey' set for my hosts | 22:57 |
mhayden | what's the proper way to set that? | 22:58 |
*** openstackgerrit has quit IRC | 23:03 | |
*** openstackgerrit has joined #openstack-ansible | 23:03 | |
*** Brew has quit IRC | 23:05 | |
mhayden | ah, i think i need to clear facts | 23:08 |
mhayden | :/ | 23:08 |
*** Zucan has joined #openstack-ansible | 23:09 | |
*** markvoelker has quit IRC | 23:11 | |
*** david-lyle_ is now known as david-lyle | 23:12 | |
openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Add tests for the _net_address_search function https://review.openstack.org/318939 | 23:19 |
*** admin0 has quit IRC | 23:30 | |
*** admin0 has joined #openstack-ansible | 23:30 | |
*** admin0 has quit IRC | 23:33 | |
*** jamesdenton has quit IRC | 23:33 | |
*** admin0 has joined #openstack-ansible | 23:34 | |
*** admin0 has quit IRC | 23:34 | |
*** Qiming has joined #openstack-ansible | 23:37 | |
*** thorst_ has joined #openstack-ansible | 23:45 | |
*** kstev has quit IRC | 23:46 | |
*** thorst__ has joined #openstack-ansible | 23:47 | |
*** thorst_ has quit IRC | 23:52 | |
*** sdake has quit IRC | 23:55 | |
*** thorst__ is now known as thorst_ | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!