Wednesday, 2016-09-07

*** kenhui has quit IRC00:03
*** AnarchyAo has quit IRC00:05
*** adrian_otto has quit IRC00:07
*** adrian_otto has joined #openstack-ansible00:08
*** kenhui has joined #openstack-ansible00:08
*** thorst has quit IRC00:08
*** adrian_otto has quit IRC00:09
*** thorst has joined #openstack-ansible00:09
*** thorst has quit IRC00:17
*** jcannava has quit IRC00:19
*** kenhui has quit IRC00:22
*** AnarchyAo has joined #openstack-ansible00:23
*** jamesdenton has joined #openstack-ansible00:29
*** jamesdenton has quit IRC00:43
*** gfa has joined #openstack-ansible00:43
*** Jeffrey4l has joined #openstack-ansible00:47
*** javis has quit IRC00:50
*** schwicht has quit IRC00:59
*** schwicht has joined #openstack-ansible00:59
*** jcannava has joined #openstack-ansible00:59
*** javis has joined #openstack-ansible01:12
csmart\o01:14
*** thorst has joined #openstack-ansible01:14
*** thorst has quit IRC01:16
*** thorst has joined #openstack-ansible01:16
*** eil397_ has joined #openstack-ansible01:23
*** galstrom is now known as galstrom_zzz01:24
Matiascloudnull: back01:25
*** poopcat has left #openstack-ansible01:27
*** jamesdenton has joined #openstack-ansible01:29
*** thorst has quit IRC01:32
*** eil397_ has quit IRC02:13
*** asettle has joined #openstack-ansible02:15
*** asettle has quit IRC02:20
*** thorst has joined #openstack-ansible02:24
*** thorst has quit IRC02:29
*** strobelight has quit IRC02:30
*** eil397_ has joined #openstack-ansible02:40
*** eil397_ has quit IRC02:45
*** kjw3 has quit IRC02:46
*** jperry has joined #openstack-ansible02:47
*** thorst has joined #openstack-ansible02:48
*** thorst has quit IRC02:48
*** thorst has joined #openstack-ansible02:48
cloudnullMatias: did you get the ceilometer things worked out ?02:55
cloudnullevenings / mornings csmart02:56
*** jamesdenton has quit IRC02:58
csmartcloudnull: good afternoon :-)03:15
cloudnullhows it ?03:16
*** janki has joined #openstack-ansible03:28
*** janki has quit IRC03:28
*** eil397_ has joined #openstack-ansible03:29
*** sdake_ has joined #openstack-ansible03:32
*** sdake has quit IRC03:35
*** gouthamr has quit IRC03:37
csmartcloudnull: yeah, going OK, not enough time to play with OS as I'd like, but other than that.. you?03:37
*** hblah has joined #openstack-ansible03:40
*** janki has joined #openstack-ansible03:43
*** gouthamr has joined #openstack-ansible03:45
*** markvoelker has quit IRC03:54
*** alokj has joined #openstack-ansible03:58
*** alokj is now known as Guest8051603:58
*** schwicht has quit IRC04:02
cloudnulljust messing about.04:08
cloudnullsorry was afk04:08
*** Guest80516 has quit IRC04:10
*** eil397_ has quit IRC04:11
*** dotplus has quit IRC04:13
*** gouthamr has quit IRC04:21
*** alok_ has joined #openstack-ansible04:28
*** strobelight has joined #openstack-ansible04:38
*** admin0 has joined #openstack-ansible04:39
*** strobelight has quit IRC04:42
*** thorst has quit IRC04:43
*** eil397_ has joined #openstack-ansible04:44
*** thorst has joined #openstack-ansible04:45
*** eil397_ has quit IRC04:48
*** thorst has quit IRC04:50
*** markvoelker has joined #openstack-ansible04:55
*** thorst has joined #openstack-ansible04:56
*** alok_ has quit IRC04:57
*** markvoelker has quit IRC04:59
*** thorst has quit IRC05:00
*** Jeffrey4l_ has joined #openstack-ansible05:00
*** Jeffrey4l has quit IRC05:04
csmartnps :-)05:09
csmartcloudnull: you going to barcelona?05:09
cloudnullidk yet.05:10
cloudnulli hope so :)05:10
*** openstackgerrit has quit IRC05:18
*** openstackgerrit has joined #openstack-ansible05:19
*** alokj has joined #openstack-ansible05:24
*** alokj is now known as Guest2393205:24
*** strobelight has joined #openstack-ansible05:26
*** thorst has joined #openstack-ansible05:28
*** McMurlock1 has joined #openstack-ansible05:28
*** thorst has quit IRC05:29
*** strobelight has quit IRC05:31
csmartcool05:32
*** thorst has joined #openstack-ansible05:32
csmartfingers crossed :-)05:36
*** admin0 has quit IRC05:40
*** sdake_ is now known as sdake05:46
*** Guest23932 has quit IRC05:49
*** McMurlock1 has quit IRC05:50
*** jperry has quit IRC05:54
*** jperry has joined #openstack-ansible05:58
*** AnarchyAo has quit IRC06:05
*** sdake has quit IRC06:18
*** jperry has quit IRC06:18
*** jperry has joined #openstack-ansible06:19
odyssey4mestevelle Matias the use_ssl and port setting for swift telemetry are set in the group vars and should be set to not use ssl06:25
*** thorst has quit IRC06:26
odyssey4mehttps://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/all.yml#L377-L39306:26
*** thorst has joined #openstack-ansible06:28
*** thorst has quit IRC06:28
*** neilus has joined #openstack-ansible06:31
*** pcaruana has joined #openstack-ansible06:34
openstackgerritMerged openstack/openstack-ansible: [Docs] Update security appendix  https://review.openstack.org/36627606:41
*** rgogunskiy has joined #openstack-ansible06:54
*** markvoelker has joined #openstack-ansible06:56
*** alokj has joined #openstack-ansible06:56
*** alokj is now known as Guest9275606:57
*** asettle has joined #openstack-ansible07:00
*** thorst has joined #openstack-ansible07:00
*** fxpester has joined #openstack-ansible07:00
*** admin0 has joined #openstack-ansible07:00
*** markvoelker has quit IRC07:01
openstackgerritDarren Chan proposed openstack/openstack-ansible: [docs] Minor edits to the overview chapter  https://review.openstack.org/36545407:03
*** sdake has joined #openstack-ansible07:03
*** berendt has joined #openstack-ansible07:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Skip V-38471 for CI execution  https://review.openstack.org/36653407:05
*** thorst has quit IRC07:06
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server: Adding Vagrantfile for local testing  https://review.openstack.org/36628407:09
openstackgerritDarren Chan proposed openstack/openstack-ansible: [docs] Minor edits to the overview chapter  https://review.openstack.org/36545407:10
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server: Enable HiPE compile configuration  https://review.openstack.org/36628807:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Replace 'Host Layout' with 'Service Architecture'  https://review.openstack.org/36654307:16
odyssey4medarrenc ^ FYI07:17
darrenchi odyssey4me07:17
darrencthanks, I'll take a look07:18
openstackgerritMerged openstack/openstack-ansible-os_keystone: Add tempest to keystone role tests  https://review.openstack.org/36571607:21
darrencodyssey4me: so you don't want to describe the differences between a test environment and production environment?07:22
darrencor is that information elsewhere?07:22
odyssey4medarrenc I'm working on another patch to put that information elsewhere07:22
darrencahh, gotcha :)07:23
odyssey4methe intention is to include it in the appendix which provides the example config for the example environment07:23
*** drifterza has joined #openstack-ansible07:23
odyssey4methen the install guide can refer to it, but not contain all that info which breaks the flow07:23
drifterzao/07:23
darrencok cool07:25
openstackgerritDarren Chan proposed openstack/openstack-ansible: [docs] Minor edits to the overview chapter  https://review.openstack.org/36545407:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [WIP][docs] Move all example configurations to Appendix  https://review.openstack.org/36627107:32
odyssey4medarrenc sorry - I just noticed something else for https://review.openstack.org/365454 - added a review comment07:34
darrencnp07:35
darrencServes me right stepping on everyone's toes :)07:35
*** thorst has joined #openstack-ansible07:36
*** thorst has quit IRC07:36
odyssey4medarrenc we're starting the testing of the install guide next week, so we're doing a bit of a mad rush to make it sensible and include all the missing bits of info07:37
*** strobelight has joined #openstack-ansible07:37
darrencnp, let me know if I can help in any way07:38
openstackgerritDarren Chan proposed openstack/openstack-ansible: [docs] Minor edits to the overview chapter  https://review.openstack.org/36545407:40
*** strobelight has quit IRC07:42
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [WIP][docs] Move all example configurations to Appendix  https://review.openstack.org/36627107:43
*** hblah has quit IRC07:49
*** strobelight has joined #openstack-ansible07:53
*** asettle has quit IRC07:56
*** strobelight has quit IRC07:57
*** thorst has joined #openstack-ansible08:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657008:02
*** asettle has joined #openstack-ansible08:02
*** csmart has quit IRC08:05
*** csmart has joined #openstack-ansible08:07
*** thorst_ has joined #openstack-ansible08:10
*** thorst__ has joined #openstack-ansible08:10
*** thorst has quit IRC08:12
*** thorst_ has quit IRC08:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657008:14
evrardjpgood morning everyone08:17
drifterzao/08:18
openstackgerritAndy McCrae proposed openstack/openstack-ansible-tests: Add tempest tests to test-repository  https://review.openstack.org/36624308:19
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_keystone: Add credential_setup for keystone  https://review.openstack.org/36657508:20
*** thorst__ has quit IRC08:32
*** openstackgerrit has quit IRC08:34
*** thorst has joined #openstack-ansible08:34
*** openstackgerrit has joined #openstack-ansible08:34
*** thorst has quit IRC08:35
*** thorst has joined #openstack-ansible08:46
*** thorst has quit IRC08:49
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_keystone: Add credential_setup for keystone  https://review.openstack.org/36657508:51
*** janki has quit IRC08:53
*** markvoelker has joined #openstack-ansible08:57
*** janki has joined #openstack-ansible08:57
*** jimbaker has quit IRC09:01
*** markvoelker has quit IRC09:01
odyssey4meandymccr evrardjp Please review https://review.openstack.org/366534 - infra picked up that we were pushing rather a lot of logs into the log server. That patch reduces the log volume by over 1G.09:02
evrardjpok09:03
*** jimbaker has joined #openstack-ansible09:05
*** jimbaker has quit IRC09:05
*** jimbaker has joined #openstack-ansible09:05
evrardjpodyssey4me: about this https://review.openstack.org/#/c/366299/ I think it's too late to backport these to mitaka09:12
odyssey4meevrardjp it's a small, isolated change to make it work more predictably09:13
odyssey4meso I don't see why not09:13
evrardjpI don't see how it could be isolated, we change the lib for glance upload09:13
evrardjpit deserves at least an explanation and release note09:14
odyssey4meevrardjp and that part of the lib is only used by the magnum role09:14
odyssey4mesure, maybe a release note to indicate the fix and why, which is covered in the commit message09:15
evrardjpthe module seems to be used by glance and tempest too, but I'll have a deeper look09:15
odyssey4mebut considering nothing except the magnum role uses that functionality, I'm not set on that09:15
evrardjpodyssey4me: the why isn't refering to any source09:15
odyssey4methe module, yes - but that functionality of the module is not09:15
evrardjpyup I just looked09:16
evrardjpthat's right -- I am just careful by default09:16
odyssey4mesure, rightly so09:17
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657009:18
openstackgerritMerged openstack/openstack-ansible-galera_server: Allow galera to listen on v4/v6  https://review.openstack.org/36630709:19
openstackgerritAlexandra Settle proposed openstack/openstack-ansible-os_neutron: [DOC] Fix the OVS config file in docs  https://review.openstack.org/36284809:19
evrardjpalso, I think that if we want to authorize frankenclouds with magnum newton and the rest into mitaka, we don't need everything mitaka and just magnum newton09:20
evrardjpwe could have magnum AND libs newton, rest mitaka09:20
evrardjp(for the future, in case we have a more impacting change)09:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657009:22
odyssey4meevrardjp the point is that jmccrory has published that review for Newton and has discovered the need for that change while trying to make magnum a fully tested role, magnum is part of the integrated newton deliverable and it is too late now to switch the glance module we use to shade... so there's no reason to block the change for newton09:25
odyssey4me*if* a backport is requested then that can be considered seperately09:25
odyssey4meIIRC it is not possible to use the newton plugins repo with mitaka by the way, there are too many other changes in there09:26
evrardjpI am willing to push this change forward09:26
evrardjpI agree, moving to std ansible modules could be done in O09:26
odyssey4meevrardjp if you can put in a spec or register a blueprint at least, then it can be on the agenda for the summit09:27
odyssey4meotherwise we may forget09:27
evrardjptrue09:27
*** dalees has quit IRC09:34
odyssey4meandymccr I've posed some questions in https://review.openstack.org/#/c/366575/2/tasks/keystone_credentials_setup.yml - not sure if you can answer them?09:34
drifterzaweird I see no change from patchset 3 to 4 odyssey4me ?09:35
drifterzare compress logs09:35
odyssey4medrifterza not in that one file, no - I changed another file09:35
odyssey4mebindep.txt09:35
drifterzaah dammit my gerrit view was locked to patchset 309:36
drifterzalol09:36
drifterzanvm then09:36
odyssey4measettle the first note in https://review.openstack.org/#/c/366543/1/doc/source/install-guide/overview-service-architecture.rst - OSA *has* and *model*... it is not a model, it has a mode09:38
odyssey4me*model09:38
asettleodyssey4me: ha, makes sense. Sorry, I have a very cloudy brain today. I would still remove the 'very' though. And just keep with 'has a flexible...'09:39
andymccrodyssey4me: i believe it needs to  happen on each host, although I had thought the fernet bit did too and it looks like we're limiting that to only keystone_all[0]. I believe its encrypted credentials that are stored in the directory.09:39
odyssey4measettle okie dokey :)09:39
andymccrbut i think lets get lbragstad or one of the other keystone peeps to confirm09:40
*** dalees has joined #openstack-ansible09:40
odyssey4meandymccr yeah, the fernet bit implements a cron rsync which copies the things over09:40
odyssey4meandymccr I expect we'll need to implement another one for the creds09:40
asettleodyssey4me: I won't be in  today to discuss the guide further, but we can just do pings here. I'm trying to keep up with all the reviews. mhayden went and did some security stuff overnight which was great09:40
andymccrlbragstad: i've added you to the review - if you could confirm (once you're in!) I'll adjust the implementation09:40
odyssey4meandymccr it's probably the keys for creds, so they need to be the same across all nodes09:40
andymccrodyssey4me: yeah i think so that would make sense09:41
odyssey4meandymccr there are also some tests for the fernet bits in the functional test which should probably be expanded in that patch then09:42
andymccrwill look into it!09:43
*** eil397_ has joined #openstack-ansible09:45
*** sdake has quit IRC09:47
*** eil397_ has quit IRC09:49
*** qiliang27 has quit IRC09:52
*** markvoelker has joined #openstack-ansible09:57
*** thorst has joined #openstack-ansible10:00
*** qiliang27 has joined #openstack-ansible10:00
*** jcannava has quit IRC10:01
*** markvoelker has quit IRC10:02
asettleodyssey4me: so I had an email last night from my boss, she was trying to look up the OSA guide for some OSIC people - and basically the first patch coming up was the install guide draft stuff (in google searcH) and not the new guide.10:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Replace 'Host Layout' with 'Service Architecture'  https://review.openstack.org/36654310:03
*** jperry has quit IRC10:03
asettleI know we had this problem last time too, how we able to fix this last time?10:03
*** thorst has quit IRC10:04
odyssey4measettle it is not fixed, nor will it easily be - the way the publishing works in openstack CI it leaves the old stuff there... this counts for all published content10:05
odyssey4meso it'll clear up once the fresh branch is cut, because then it'll only take existing content to the new location10:06
asettleAhhh thanks odyssey4me I just had it in my head that it was fixed.10:06
odyssey4meI saw some discussion in #openstack-infra the other day which leads me to believe that they may be changing the mechanism, so it might get fixed at some point.10:06
odyssey4melemme have a chat with them and see whether there are options now, or in the future10:07
asettleThanks odyssey4me :)10:08
odyssey4methe potential workaround which evrardjp suggested was to remove content but leave files in place for a period, then remove them later10:09
odyssey4memaybe we could do something like that - replace the file content with a simple date marker, then periodically remove the files which have been that way for a month or so10:10
*** qiliang27 has quit IRC10:10
odyssey4mewe'd have to figure out which files they are though :/10:10
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_tempest: Ensure tempest runs independently in testing  https://review.openstack.org/36633510:13
odyssey4measettle FYI https://bugs.launchpad.net/openstack-ansible/+bug/158984210:14
openstackLaunchpad bug 1589842 in openstack-ansible "Published web content still contains old files which were deleted" [Low,Confirmed] - Assigned to Jesse Pretorius (jesse-pretorius)10:14
*** qiliang27 has joined #openstack-ansible10:18
*** jcannava has joined #openstack-ansible10:19
asettleHahaha omg odyssey4me when I read this "OSA *has* a model. It is not a model, it is a tool." I read that as "you're a tool" I was like WOW JESSE, WOW10:19
odyssey4melol10:19
odyssey4meoh dear10:19
odyssey4meconsidering the response was to highlight the sentence subject misunderstanding, that's even funnier10:20
asettleI didn't sleep much :p10:20
asettleHahahha10:20
odyssey4measettle did you see my comments in https://review.openstack.org/365454 ?10:20
openstackgerritMerged openstack/openstack-ansible: Skip V-38471 for CI execution  https://review.openstack.org/36653410:21
odyssey4measettle I was thinking that perhaps the 'requirements' page should be renamed to 'requirements and recommendations'10:21
odyssey4methen we move the 'Software requirements to the top' and rename all the other sections to 'recommendations' instead of 'requirements'10:21
odyssey4meI've noted that in the review.10:23
asettleodyssey4me: yeah I did. I was going to talk to you about it. I think that's a good course of action - at least for now. I admittedly think long term we should be looking at having a requirements section and less 'recommendations' for an installation guide, but this is a new thing and the thing with OSA (as you said yestserday) is that a lot of the layout is determined by the deployer10:24
asettleSo, yeah...10:24
odyssey4mehmm, in fact you're right there - however, the whole starting section is about orientation10:24
odyssey4meit's about providing context10:24
odyssey4meit's kinda like a 'design guide' or 'architecture guide' section I guess10:25
odyssey4mebut yes, if we had a place for it we could make the install guide all about installing10:25
odyssey4mefor now I think it best that we leave it where it is - we can discuss what to do about it some time in the future10:26
odyssey4measettle FYI - looking at the network arch now10:26
asettleAgreed.10:26
asettleGreat, let me know when you're done. Might also blend in with some of the stuff Darren just did.10:26
odyssey4meargh, this is terrible10:27
odyssey4meit's teaching people how to configure their networking on their servers... that is not appropriate10:27
odyssey4meright, rewrite incoming10:27
asettle*pats* good luck. If you need like, moral support or random cheering on.. :p10:29
*** qiliang27 has quit IRC10:46
*** thorst has joined #openstack-ansible10:48
*** thorst has quit IRC10:48
drifterzaweird, os-magnum-install.yml has 755 mode set in 14.0.0.0b310:52
drifterzashould be 644 surely10:54
*** qiliang27 has joined #openstack-ansible10:55
csmartdrifterza: probably doesn't matter, users and other have read + execute, but not write?10:55
drifterzait doesn't matter sure, its just all the other files are 644, going to do a patch just to change it, so it looks the same as the others.10:56
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_tempest: Ensure tempest runs independently in testing  https://review.openstack.org/36633510:57
csmartdrifterza: ahh, kk10:57
*** schwicht has joined #openstack-ansible10:58
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_keystone: Add credential_setup for keystone  https://review.openstack.org/36657510:59
*** qiliang27 has quit IRC11:01
openstackgerritDonovan Francesco proposed openstack/openstack-ansible: Set file mode to 644 on os-magnum-install.yml  https://review.openstack.org/36667611:02
openstackgerritsatheeshprabhakaran.v proposed openstack/openstack-ansible: MTU Settings for Neutron  https://review.openstack.org/36667711:04
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Split Network Architecture page  https://review.openstack.org/36667911:07
odyssey4measettle ^ thoughts?11:07
asettleWill review :) just having a look at the service arch one again11:07
*** qiliang27 has joined #openstack-ansible11:07
*** zerda2 has quit IRC11:09
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_keystone: Add credential_setup for keystone  https://review.openstack.org/36657511:14
*** karimb has joined #openstack-ansible11:16
asettleodyssey4me: few comments inline11:18
*** strobelight has joined #openstack-ansible11:18
*** qiliang27 has quit IRC11:19
*** qiliang27 has joined #openstack-ansible11:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657011:20
*** strobelight_ has joined #openstack-ansible11:22
*** strobelight is now known as Guest434711:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657011:22
*** strobelight_ is now known as strobelight11:23
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_tempest: Ensure tempest runs independently in testing  https://review.openstack.org/36633511:23
*** Guest4347 has quit IRC11:25
*** qiliang27 has quit IRC11:25
*** qiliang27 has joined #openstack-ansible11:27
*** qiliang27 has quit IRC11:27
*** dkehn__ has quit IRC11:29
*** dkehn_ has quit IRC11:29
*** qiliang27 has joined #openstack-ansible11:30
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Split Network Architecture page  https://review.openstack.org/36667911:31
*** schwicht has quit IRC11:33
*** qiliang27 has quit IRC11:36
*** qiliang27 has joined #openstack-ansible11:36
*** retreved has joined #openstack-ansible11:36
*** qiliang27 has quit IRC11:38
*** qiliang27 has joined #openstack-ansible11:39
*** qiliang27 has quit IRC11:39
*** dkehn__ has joined #openstack-ansible11:42
*** dkehn_ has joined #openstack-ansible11:42
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [docs] Replace 'Host Layout' with 'Service Architecture'  https://review.openstack.org/36654311:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Reduce the default fact gather subset  https://review.openstack.org/36562711:48
Matiasmorning11:51
mgariepygood morning everyone !11:51
drifterzamorning11:51
asettleodyssey4me: I have two small nits on the service arch but otherwise lgtm. I'm happy to fix those up for you?11:52
Matiasodyssey4me: https://github.com/search?q=org%3Aopenstack+swift_rabbitmq_use_ssl&type=Code11:53
Matiasstill not used anywhere, I think it is WIP?11:53
odyssey4measettle do it11:54
mhaydenmorning11:55
odyssey4meMatias yes, that's a placeholder until we figure out how to make Swift be able to do SSL - see line 38711:55
odyssey4meso it's more of a note to be clear that it's hard coded to not use SSL for swift's telemetry11:56
odyssey4methe swift telemetry middleware unfortunately does not support RPC over TLS at this time11:56
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [docs] Replace 'Host Layout' with 'Service Architecture'  https://review.openstack.org/36654311:56
mhaydenodyssey4me: looks like auditd upset infra? :)11:57
mhaydenwow, 506M syslog11:57
odyssey4memhayden heh yeah - to make matters worse, we have the log entries in syslog, user.log and then of course or rsyslog container has more copies :)11:58
mhaydengoodgosh11:58
*** markvoelker has joined #openstack-ansible11:58
mhaydenperhaps our rsyslog config needs tuning too11:58
odyssey4meI think that perhaps we should figure out a little bit more efficiency there, because that volume of logs would be quite crippling for production environments.11:58
odyssey4memhayden see http://logs.openstack.org/48/365448/1/gate/gate-openstack-ansible-openstack-ansible-aio-ubuntu-trusty/f5adf25/logs/ as an example11:59
odyssey4meon the host: http://logs.openstack.org/48/365448/1/gate/gate-openstack-ansible-openstack-ansible-aio-ubuntu-trusty/f5adf25/logs/host/11:59
mhaydenouch12:00
mhaydenat least we have these auditd rules labeled now12:00
mhaydenthat should make it easier to find the bad guys12:00
*** eil397_ has joined #openstack-ansible12:00
odyssey4methen the rsyslog container's data for the host: http://logs.openstack.org/48/365448/1/gate/gate-openstack-ansible-openstack-ansible-aio-ubuntu-trusty/f5adf25/logs/openstack/aio1_rsyslog_container-8fdfd7db/log-storage/ubuntu-trusty-rax-ord-4125858/12:00
mhaydenlet me grab one of these logs and analyze it right quick12:01
mhaydenit might be a few rules causing a ruckus12:01
odyssey4mecool12:01
odyssey4menotice that the rsyslog container's data is fine - the logs are cleanly separated12:01
odyssey4mealthough that log is 340M - which is pretty large for a 90 min deploy execution12:02
mhaydenhah, so the 273M syslog has only 1M of non-auditd data :|12:03
odyssey4memhayden it may be a good idea to make sure the security role grabs logs so that you can inspect them in job results12:03
* mhayden spelunks12:03
*** markvoelker has quit IRC12:03
odyssey4memhayden you'll need something like https://review.openstack.org/#/c/366570/6/scripts/scripts-library.sh to make that happen12:03
odyssey4mewell, something like https://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/tox.ini#L168-L169 actually - but add log compression too12:04
odyssey4melemme work up a patch for that quickly12:04
drifterzawe are in feature freeze right now, for newton right ?12:04
mhaydenokay, let me dig through these first12:04
*** eil397_ has quit IRC12:04
odyssey4medrifterza yes, no new roles can be added - and no major functionality changes12:05
mhaydendrifterza: this is the time period where we find all the bugs that my patches created ;)12:05
drifterzahaha12:05
Matiasodyssey4me: still it is complaining every second in the rabbitmq server log, but I think it is not related to ssl, access to vhost '/swifttopic = notifications' refused for user 'swift'12:06
drifterzawhat are the deliverables for osa newton then ?12:06
Matiasodyssey4me: shouldn't it be swift/topic = notifications?12:06
*** v1k0d3n has quit IRC12:07
asettleodyssey4me: happy with both those patches, thank you!12:08
*** schwicht has joined #openstack-ansible12:08
Matiasif yes, the url is wrong in proxy-server.conf.j212:08
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Collect compressed logs after functional test execution  https://review.openstack.org/36670912:09
odyssey4meMatias not sure - stevelle and automagically can help... I'm not familiar with how that all is supposed to work12:10
odyssey4measettle awesome - progress!12:10
asettle\o/12:11
*** karimb has quit IRC12:12
odyssey4measettle and boom, https://bugs.launchpad.net/openstack-ansible/+bug/1589842 is resolved :)12:12
openstackLaunchpad bug 1589842 in openstack-ansible "Published web content still contains old files which were deleted" [Low,Fix released] - Assigned to Andreas Jaeger (jaegerandi)12:12
mhaydenodyssey4me: i think i found my culprit -> https://gist.github.com/major/a365d3435c5722c25b42f2fb74ad96b312:13
asettleOh Andreas you snappy worker you12:13
odyssey4memhayden ouch, it seems that some of the labels are wrong too?12:13
mhaydenodyssey4me: might be a typo or two there12:14
mhaydeni'll fix those while i'm there12:14
odyssey4meI expct perm_modV-38558 should be perm_mod-V-3855812:14
mhaydenright12:15
*** askb has quit IRC12:15
odyssey4mebut yeah, wow - that's quite a few events :)12:15
*** schwicht has quit IRC12:17
mhaydeni'm going to disable all of the DAC auditing -- it's not terribly useful anyway12:19
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Collect compressed logs after functional test execution  https://review.openstack.org/36670912:19
mhaydenbut that will be a bunch of exceptions ;)12:19
*** schwicht has joined #openstack-ansible12:19
openstackgerritsatheeshprabhakaran.v proposed openstack/openstack-ansible: MTU Settings for neutron  https://review.openstack.org/36671412:22
*** kenhui has joined #openstack-ansible12:25
odyssey4memhayden https://review.openstack.org/366709 appears to work :)12:26
*** lovea has joined #openstack-ansible12:26
mhaydenhaha those logs should compress awesomely ;)12:26
mhaydenwhy not xz?12:26
*** Guest92756 has quit IRC12:27
odyssey4mexz needs epel on centos12:27
mhaydenballs12:27
odyssey4mewhich reminds me12:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Collect compressed logs after functional test execution  https://review.openstack.org/36670912:28
d34dh0r53mhayden: what kind?12:28
mhayden:|12:28
* mhayden wants some donut holes right now for some reason12:28
odyssey4me^ just for extra surety12:28
mhaydeni don't know if that translates well for the UK12:28
loveaI'm trying to do a clean install of 14.0.0.0b3. When executing  openstack-ansible setup-infrastructure.yml I always get the following failure on all of my Galera nodes: "msg: the field 'args' has an invalid value, which appears to include a variable that is undefined. The error was: 'lxc_container_log_path' is undefined" "The error appears to have been in '/opt/openstack-ansible/playbooks/common-tasks/os-lxc-container-setup.yml': line 93, column 3,12:29
loveabut may12:29
loveabe elsewhere in the file depending on the exact syntax problem.12:29
loveaThe offending line appears to be:12:29
lovea# TODO(odyssey4me): revisit this once the bug is fixed and released12:29
lovea- name: Lxc container restart"12:29
odyssey4melovea that is fixed in the head of master12:29
odyssey4melovea checkout the head of master instead of the tag12:30
loveaodyssey4me: Cool. I'll do that then. Many thanks12:30
*** markvoelker has joined #openstack-ansible12:32
*** lovea has quit IRC12:33
odyssey4meafk for a bit12:34
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable DAC change auditing  https://review.openstack.org/36672512:35
mhaydenodyssey4me: ^^12:36
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-repo_build: Fix centos repo-build  https://review.openstack.org/36672612:37
*** Guest92756 has joined #openstack-ansible12:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable DAC change auditing  https://review.openstack.org/36672512:38
*** woodard has joined #openstack-ansible12:39
*** woodard has quit IRC12:39
*** woodard has joined #openstack-ansible12:40
*** johnmilton has quit IRC12:42
*** kenhui has quit IRC12:44
*** johnmilton has joined #openstack-ansible12:45
*** schwicht has quit IRC12:46
*** klamath has joined #openstack-ansible12:49
*** klamath has quit IRC12:50
*** klamath has joined #openstack-ansible12:51
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: [WIP] Fix ml2 ports after an upgrade  https://review.openstack.org/36616912:53
*** janki has quit IRC12:54
*** admin0 has quit IRC12:56
*** thorst has joined #openstack-ansible12:57
*** janki has joined #openstack-ansible12:59
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: [WIP] Fix ml2 ports after an upgrade  https://review.openstack.org/36616913:00
automagicallyMorning y’all13:01
drifterzao/13:01
automagicallyo/ drifterza13:02
drifterzahow comes the monasca automagically ?13:02
automagicallyBeen working my way through it bit by bit alongside the roles here: https://github.com/hpcloud-mon/ in order to come to some conclusion about where all the bits should be deployed.13:03
automagicallyIdeally, I’d like to see the os_monasca role simply deal with the monasca bits, and we can rely on zookeeper, kafka and influxdb roles from the community13:03
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: [WIP] Fix ml2 ports after an upgrade  https://review.openstack.org/36616913:05
*** schwicht has joined #openstack-ansible13:05
drifterzatrue13:05
Matiasautomagically: I have a role to install zookeper cluster inside containers, if you want13:08
Matiasthat's strange, the last time I installed gnocchi, it did come with a lot of metrics setup by default13:09
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-os_neutron: [DOC] Fix the OVS config file in docs  https://review.openstack.org/36284813:10
Matiasnow it came with no metrics predefined13:10
*** admin0 has joined #openstack-ansible13:10
automagicallyMatias: Yeah, would definitely appreciate getting a look at that role13:10
*** admin0 has quit IRC13:11
*** dragonmaster has joined #openstack-ansible13:12
*** asettle has quit IRC13:12
Matiasautomagically: https://hal9k.ifsc.usp.br/~matias/floss/zk.tgz13:13
automagicallyThx Matias13:13
*** asettle has joined #openstack-ansible13:13
Matiasnp13:13
*** admin0 has joined #openstack-ansible13:14
*** drifterza has quit IRC13:16
*** karimb has joined #openstack-ansible13:19
openstackgerritMerged openstack/openstack-ansible-os_neutron: [DOC] Fix the OVS config file in docs  https://review.openstack.org/36284813:25
*** jamesdenton has joined #openstack-ansible13:28
*** javis has quit IRC13:29
openstackgerritMerged openstack/openstack-ansible: [docs] Split Network Architecture page  https://review.openstack.org/36667913:29
openstackgerritMerged openstack/openstack-ansible: [docs] Replace 'Host Layout' with 'Service Architecture'  https://review.openstack.org/36654313:30
*** ametts has joined #openstack-ansible13:34
*** kenhui has joined #openstack-ansible13:38
*** jperry has joined #openstack-ansible13:38
lbragstadodyssey4me andymccr o/13:43
andymccrlbragstad: https://review.openstack.org/#/c/366575/ thoughts/feelings/concerns :)13:44
*** Guest92756 has quit IRC13:47
openstackgerritsatheeshprabhakaran.v proposed openstack/openstack-ansible: Updated variables for neutron jumbo frames  https://review.openstack.org/36676313:49
*** michauds has joined #openstack-ansible13:52
*** galstrom_zzz is now known as galstrom13:52
*** galstrom is now known as galstrom_zzz13:52
*** alwaysatthenoc has joined #openstack-ansible13:54
*** dragonmaster has quit IRC13:56
*** hj-hpe has joined #openstack-ansible13:57
lbragstadandymccr looks pretty solid - just a couple questions/suggestions inline https://review.openstack.org/#/c/366575/413:58
Matiasaaaah I know I wasn't crazy13:58
*** alwaysatthenoc has quit IRC13:58
Matiasby redeploying ceilometer after gnocchi is already deployed, it creates the metrics in gnocchi13:59
Matias(maybe only a ceilometer restart was needed? idk)13:59
andymccrlbragstad: nice! thanks for the review, i'll fix that up14:00
*** ddaskal has joined #openstack-ansible14:00
*** kstev has joined #openstack-ansible14:02
*** kstev has quit IRC14:03
*** janki has quit IRC14:03
*** spedione|AWAY is now known as spedione14:03
*** jmckind has joined #openstack-ansible14:03
*** ddaskal has quit IRC14:05
*** michaelgugino has joined #openstack-ansible14:07
*** eil397_ has joined #openstack-ansible14:10
*** andymccr_ has joined #openstack-ansible14:10
*** adrian_otto has joined #openstack-ansible14:11
*** ajo_ has joined #openstack-ansible14:12
*** javis has joined #openstack-ansible14:13
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_keystone: Add credential_setup for keystone  https://review.openstack.org/36657514:13
*** dkehn__ has quit IRC14:15
*** eil397_ has quit IRC14:15
*** hblah has joined #openstack-ansible14:16
*** BjoernT has joined #openstack-ansible14:16
*** karimb has quit IRC14:17
*** karimb has joined #openstack-ansible14:18
*** dmsimard is now known as dmsimard|afk14:19
vnoginhello OSA :)14:19
*** adrian_otto has quit IRC14:20
*** asettle has quit IRC14:20
*** klamath has quit IRC14:20
*** johnmilton has quit IRC14:20
*** andymccr has quit IRC14:20
*** haasn has quit IRC14:20
*** lkoranda has quit IRC14:20
*** darrenc has quit IRC14:20
*** jascott1 has joined #openstack-ansible14:21
vnoginodyssey4me, hi Jesse, does OSA support ceph deployment and it should be deployed in separate workflow and only can be enabled in OSA?14:21
vnoginand it = or it14:22
*** spotz_zzz is now known as spotz14:24
*** kstev has joined #openstack-ansible14:26
*** Mudpuppy has joined #openstack-ansible14:26
*** fxpester has quit IRC14:26
openstackgerritMerged openstack/openstack-ansible-security: Disable martian logging by default  https://review.openstack.org/36620414:26
*** haasn has joined #openstack-ansible14:27
*** andymccr_ is now known as andymccr14:28
openstackgerritMerged openstack/openstack-ansible-security: Disable martian logging by default  https://review.openstack.org/36620314:28
*** tomjosekal has quit IRC14:30
automagicallyvnogin: Take a look at https://logan.protiumit.com/2016/08/02/openstack-ansible-ceph.html14:30
cloudnullgood mornings14:32
*** adrian_otto has joined #openstack-ansible14:33
*** KLevenstein has joined #openstack-ansible14:34
*** adrian_otto has quit IRC14:36
*** klamath has joined #openstack-ansible14:39
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops: implement minimal metric collection  https://review.openstack.org/36616714:41
*** asettle has joined #openstack-ansible14:42
*** johnmilton has joined #openstack-ansible14:42
*** darrenc has joined #openstack-ansible14:42
openstackgerritMerged openstack/openstack-ansible: Set file mode to 644 on os-magnum-install.yml  https://review.openstack.org/36667614:42
*** lkoranda has joined #openstack-ansible14:45
*** adrian_otto has joined #openstack-ansible14:49
vnoginautomagically, tnx! it seems that it exactly what I need.14:50
*** adrian_otto1 has joined #openstack-ansible14:52
*** adrian_otto has quit IRC14:55
openstackgerritMerged openstack/openstack-ansible-security: Collect compressed logs after functional test execution  https://review.openstack.org/36670914:56
openstackgerritMerged openstack/openstack-ansible-security: Disable DAC change auditing  https://review.openstack.org/36672514:58
*** gouthamr has joined #openstack-ansible14:59
*** gouthamr_ has joined #openstack-ansible15:01
*** sdake has joined #openstack-ansible15:03
*** gouthamr has quit IRC15:05
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Fix ml2 ports after an upgrade  https://review.openstack.org/36616915:06
*** sdake has quit IRC15:08
evrardjpvnogin: else, openstack-ansible is ready for consuming a ceph cluster, but not by default deploying a ceph cluster15:08
evrardjplogan-: 's post is for putting the two together if not using RPC15:08
*** kjw3 has joined #openstack-ansible15:10
vnoginevrardjp, yep. tnx. btw: Do we consider adding this functionality to osa deployment? :)15:15
evrardjpthe ceph client is already integrated, but installing the ceph cluster, that's I guess in discussions... odyssey4me can tell you more about it15:16
evrardjpI personally think it would be better to have a tighter integration of ceph-ansible and OSA communities15:16
*** weezS has joined #openstack-ansible15:22
*** sdake has joined #openstack-ansible15:24
*** karimb has quit IRC15:26
*** kenhui has quit IRC15:27
*** admin0 has quit IRC15:30
*** kjw3 has quit IRC15:31
*** michaelgugino has quit IRC15:34
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable DAC change auditing  https://review.openstack.org/36682915:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable DAC change auditing  https://review.openstack.org/36682915:36
*** david-lyle_ has joined #openstack-ansible15:38
*** david-lyle_ has quit IRC15:38
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657015:39
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable DAC change auditing  https://review.openstack.org/36684015:41
*** eil397_ has joined #openstack-ansible15:41
odyssey4mevnogin evrardjp yes, personally I think there's value in consuming the ceph-ansible roles and having playbooks in our integrated repo... it would help deployers a lot and consuming ceph is a very common use case15:43
*** adrian_otto1 has quit IRC15:43
evrardjpagreed15:43
*** adrian_otto has joined #openstack-ansible15:44
odyssey4mevnogin we've held back largely because we needed more people who know how it works and can help maintain... and it seems that we have a few people who know their way around it now, so all we need is someone to take the lead on the work and therefore to propose a spec for it15:45
mhaydenis it possible to see the build logs from a docs job?15:45
mhaydeni'm hunting around a bit but i haven't found it15:45
odyssey4memhayden an intentional duplicate? https://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible-security+branch:stable/mitaka+topic:bug/162084915:45
mhaydenwhat the heck15:46
mhaydenokay that's weird15:46
odyssey4memhayden you only see the build failures if it fails - but the linters job also does a doc build15:46
mhaydenah, good call15:46
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable DAC change auditing  https://review.openstack.org/36684515:47
mhaydenodyssey4me: ^^ should be correct now ;)15:47
vnoginodyssey4me, evrardjp ok, got it :) tnx15:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Rename collected logs for easier CI viewing  https://review.openstack.org/36684715:57
*** hblah has quit IRC15:59
*** rgogunskiy has quit IRC15:59
*** pcaruana has quit IRC16:01
*** dragonmaster has joined #openstack-ansible16:03
*** janki has joined #openstack-ansible16:04
*** woodard has quit IRC16:05
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339616:05
*** dragonmaster has quit IRC16:08
*** dragonmaster has joined #openstack-ansible16:11
*** eil397_ has quit IRC16:11
*** rgogunskiy has joined #openstack-ansible16:12
*** rgogunskiy has quit IRC16:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Rename collected logs for easier CI viewing  https://review.openstack.org/36684716:15
*** ajo_ has quit IRC16:15
*** ajo_ has joined #openstack-ansible16:16
openstackgerritDavid Wilde proposed openstack/openstack-ansible-ops: Add test to ensure that directories are not empty  https://review.openstack.org/36685516:17
d34dh0r53cloudnull: https://review.openstack.org/36685516:17
*** thorst has quit IRC16:24
*** thorst has joined #openstack-ansible16:24
*** galstrom_zzz is now known as galstrom16:25
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Rename collected logs for easier CI viewing  https://review.openstack.org/36684716:25
evrardjpI'm off, see you tomorrow!16:28
*** dmsimard|afk is now known as dmsimard16:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Rename collected logs for easier CI viewing  https://review.openstack.org/36684716:28
openstackgerritTravis Truman (automagically) proposed openstack/openstack-ansible-rabbitmq_server: Rabbit policies now overrideable by deployers  https://review.openstack.org/36686016:32
*** thorst has quit IRC16:32
*** gus has quit IRC16:33
*** dragonmaster has quit IRC16:37
*** tomjosekal has joined #openstack-ansible16:38
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops: Add test to ensure that directories are not empty  https://review.openstack.org/36685516:40
*** woodard has joined #openstack-ansible16:40
*** sigmavirus is now known as irvirus16:40
*** irvirus is now known as sigmavirus16:40
cloudnulld34dh0r53: https://review.openstack.org/#/c/366167 -- re metrics16:40
cloudnull-cc mrhillsman ^16:40
*** gus has joined #openstack-ansible16:42
openstackgerritMerged openstack/openstack-ansible-plugins: Deserialize glance image_properties  https://review.openstack.org/36629916:44
*** dragonmaster has joined #openstack-ansible16:45
openstackgerritMerged openstack/openstack-ansible-ops: Add test to ensure that directories are not empty  https://review.openstack.org/36685516:47
*** woodard has quit IRC16:47
*** woodard has joined #openstack-ansible16:48
*** Guest92756 has joined #openstack-ansible16:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Rename collected logs for easier CI viewing  https://review.openstack.org/36684716:52
*** retreved has quit IRC16:55
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Rename collected logs for easier CI viewing  https://review.openstack.org/36684716:55
sigmavirusodyssey4me: https://review.openstack.org/#/c/335111/ and https://review.openstack.org/#/c/335113/ are unlikely to be accepted as backports to stable/mitaka, correct?16:56
*** eil397_ has joined #openstack-ansible16:56
*** daneyon has joined #openstack-ansible16:57
openstackgerritMerged openstack/openstack-ansible-repo_build: Fix centos repo-build  https://review.openstack.org/36672616:57
*** daneyon has quit IRC16:58
*** eil397 has joined #openstack-ansible17:00
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Reduce the default fact gather subset  https://review.openstack.org/36562717:04
*** dkehn_ has quit IRC17:05
odyssey4mesigmavirus if the functionality remains the same with the defaults we have in tree, and it fixes what I think is a 'bug' (ie we're doing it wrong), then with a release note I don't see why it shouldn't come in as a backport17:05
odyssey4mesigmavirus it'll likely not be a clean cherry-pick, or perhaps a re-implementation, but it should be done if those changes apply17:06
sigmavirusodyssey4me: so, to be entirely, the "bug" is just a warning that Nova's expectations of that variable have changed but Nova isn't going to break things right off17:06
odyssey4methat's my view anyway17:06
sigmavirusThat just removes the noise making the users happier17:06
sigmavirus*log noise17:06
sigmavirusI don't consider it a high priority personally and I don't think anything's broken. It's just a user annoyance17:07
sigmavirus(And likewise I now have users annoying me =P)17:07
odyssey4mesigmavirus I would think that mitaka is a reasonably safe backport, liberty can be proposed but may not go in... it all depends on what the group perceives as the risk posed.17:07
sigmavirusI don't think it's happening on liberty17:07
sigmavirusmitaka's all I care about17:07
sigmavirusI'll work on some backports17:07
odyssey4methen I suggest proposing it - let the core group make a call once they're proposed17:08
sigmavirusFair17:08
odyssey4methey appear to me to be fairly well aged, so there should be no horrible side effects that aren't known - and it's a fairly isolated set of changes17:08
odyssey4megood call on https://review.openstack.org/366860 automagically - love your work :)17:09
odyssey4meI need reviews for https://review.openstack.org/366847 please. Infra have picked up a massive increase in log volume sizes, much of which is us. We need to do our part to be good citizens. :)17:10
odyssey4meOnce that's in, I'll work on patches to apply it across the board.17:10
odyssey4me^ jmccrory automagically cloudnull d34dh0r53 stevelle mattt hughsaunders andymccr mhayden evrardjp asettle rromans17:10
odyssey4memgariepy thanks you for https://review.openstack.org/366726 :) I'll change centos to voting for it now :)17:12
odyssey4meit's good to see that someone cares about making that happen :)17:12
mgariepyodyssey4me, you are welcome17:12
mgariepyodyssey4me, politics.17:12
odyssey4memgariepy you must have seen that keystone is done, and glance is proposed - do you think you'll be able to take on the rest of the compute kit and swift over the next few months?17:13
*** admin0 has joined #openstack-ansible17:13
*** ajo_ has quit IRC17:14
*** ajo_ has joined #openstack-ansible17:14
mgariepyodyssey4me, maybe. i'll do what I can to help with that. there are still a few issues with the base tho.17:14
*** dkehn_ has joined #openstack-ansible17:18
openstackgerritIan Cordasco proposed openstack/openstack-ansible: glance_api_servers must contain a valid url with protocol  https://review.openstack.org/36687917:18
*** AnarchyAo has joined #openstack-ansible17:18
odyssey4memgariepy thank you for working through them in the time you have - I don't expect that it'll be perfect to start with, but it'd be great to have something *functional* within the next cycle - we can then work on improving the like-for-like implementation/experience17:19
odyssey4memgariepy FYI a few more moves to voting: https://review.openstack.org/36688017:20
openstackgerritIan Cordasco proposed openstack/openstack-ansible-os_nova: Nova role should not default vars outside the nova namespace  https://review.openstack.org/36688117:23
*** jmckind_ has joined #openstack-ansible17:24
*** mrjk has quit IRC17:25
*** jmckind has quit IRC17:27
*** asettle has quit IRC17:28
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Compress all gathered logs for CI  https://review.openstack.org/36657017:29
*** gouthamr_ is now known as gouthamr17:29
*** thorst has joined #openstack-ansible17:29
openstackgerritMerged openstack/openstack-ansible-security: Rename collected logs for easier CI viewing  https://review.openstack.org/36684717:37
*** thorst has quit IRC17:38
*** mrjk has joined #openstack-ansible17:38
*** janki has quit IRC17:41
*** Guest92756 has quit IRC17:44
stevelleautomagically: nice follow through on the rabbitmq policies. I had that on my hit list too. :D17:51
*** ajo_ has quit IRC17:53
*** ajo_ has joined #openstack-ansible17:53
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Only use dedicated Project for Gnocchi w/ Swift  https://review.openstack.org/36627418:03
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Only use dedicated Project for Gnocchi w/ Swift  https://review.openstack.org/36627418:05
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_glance: Implement CentOS 7 support in os_glance  https://review.openstack.org/32054218:10
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339618:12
odyssey4meok, I'm out for today - have a great day y'all18:16
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server: Rabbit policies now overrideable by deployers  https://review.openstack.org/36686018:16
*** retreved has joined #openstack-ansible18:18
*** retreved has quit IRC18:19
*** dragonmaster has quit IRC18:19
*** retreved has joined #openstack-ansible18:19
*** dragonmaster has joined #openstack-ansible18:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339618:25
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Only use dedicated Project for Gnocchi w/ Swift  https://review.openstack.org/36627418:27
*** dragonmaster has quit IRC18:29
*** michaelgugino has joined #openstack-ansible18:30
*** dkehn_ has quit IRC18:31
*** jcannava has quit IRC18:34
openstackgerritMerged openstack/openstack-ansible-os_magnum: Update image_properties in image upload task  https://review.openstack.org/36630018:35
*** thorst has joined #openstack-ansible18:39
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Derive the OpenStack service list from the service file  https://review.openstack.org/36560118:39
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: Configure Ceilometer middleware for Gnocchi-Swift  https://review.openstack.org/36627918:40
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_swift: Filter Gnocchi traffic optionally  https://review.openstack.org/36627818:40
*** thorst has quit IRC18:43
*** dkehn has joined #openstack-ansible18:44
lbragstadandymccr fyi - https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/credential-encryption18:46
lbragstadandymccr i know you had a bunch of stuff in the pipe to address that but incase ^ that impacts your work18:47
mgariepyanyone have an idea why keepalive roles get included here : http://paste.openstack.org/show/567594/ ?18:55
palendaemgariepy, haproxy's HA setup uses keepalived18:59
palendaeevrardjp originally made that stuff19:00
mgariepyit's AIO and the when should not include this.19:00
*** sdake has quit IRC19:02
palendaeI think it's included in the AIO for gate testing purposes19:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339619:03
*** hybridpollo has joined #openstack-ansible19:04
*** javis has quit IRC19:04
mgariepyI'll ping evrardjp tomorrow about this then.19:04
*** sdake has joined #openstack-ansible19:10
mgariepyhmm, all the tasks are skipped, just not the role itself..19:11
*** jcannava has joined #openstack-ansible19:11
Matiasstevelle: perhaps ceilometer only creates the resources / metrics in gnocchi if gnocchi is already installed when it goes up, so I was thinking maybe it would be better to change the order of installation in setup-openstack.yml19:18
Matiasstevelle: do you see any problem in installing first gnocchi, then ceilometer?19:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339619:18
Matiasstevelle: another question, this time unrelated to OSA: do you know if it is possible to change the archiving policy of some metric after it was already registered by ceilometer into gnocchi? I browsed over all the documentation but couldn't find it19:19
stevelleMatias: I'm working on unwinding the Swift / Gnocchi thing right now. I'm not sure about the diagnosis of that resource create issue though. We should be sure we understand before we try to switch ordering.19:19
Matiasstevelle: ok, we can do further testing on that later19:19
stevelleMatias: I believe there is no support for dynamic resampling of existing data, but it's possible gordc put something in for that during Newton (and it would only support downsampling at best). I know it was not available in Mitaka and was talked about in sessions in the Austin summit.19:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339619:22
Matiasstevelle: thanks.. anyway in cases we can afford to destroy the historic data, we can delete the metric and create it again, and it will keep being feed by ceilometer, right?19:26
openstackgerritMichael Gugino proposed openstack/openstack-ansible-os_nova: Add config template for qemu.conf  https://review.openstack.org/36691719:28
*** schwicht has quit IRC19:28
openstackgerritMichael Gugino proposed openstack/openstack-ansible-os_nova: Add config template for qemu.conf  https://review.openstack.org/36691719:29
stevelleMatias: there is a shared gnocchi-resource cache in ceilo collector that could be contributing to any issues there, and I believe it is fairly new so you might see strange behavior.19:29
stevelleWe definitely need eyeballs trying stuff and digging in19:29
*** schwicht has joined #openstack-ansible19:30
stevelleand I just don't know the answer to that question off the top of my head19:31
Matiashehe np, I'll try it19:31
* Matias wants to eat gnocchi with gongonzola cheese19:31
*** TxGirlGeek has joined #openstack-ansible19:32
*** schwicht has quit IRC19:34
* mhayden prefers tomato sauce19:35
*** schwicht has joined #openstack-ansible19:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339619:36
openstackgerritMerged openstack/openstack-ansible-os_gnocchi: Only use dedicated Project for Gnocchi w/ Swift  https://review.openstack.org/36627419:38
*** thorst has joined #openstack-ansible19:39
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_gnocchi: Enable Gnocchi role lifecycle var for Identity  https://review.openstack.org/36693019:41
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: Gnocchi identities created before Swift playbook  https://review.openstack.org/36693119:41
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_swift: Require lookup of Gnocchi identity when needed  https://review.openstack.org/36693219:41
stevelleMatias: ^ those 3 changes should clear up the circular dependency on install.19:44
stevelletime to seek out noodles19:47
*** thorst has quit IRC19:48
Matiasstevelle: have a nice meal19:48
openstackgerritMerged openstack/openstack-ansible: Reduce the default fact gather subset  https://review.openstack.org/36562720:00
*** jperry has quit IRC20:03
*** openstackgerrit has quit IRC20:04
*** BjoernT has quit IRC20:04
*** openstackgerrit has joined #openstack-ansible20:05
*** schwicht has quit IRC20:07
*** schwicht has joined #openstack-ansible20:09
*** scarlisle has quit IRC20:09
lbragstadodyssey4me regarding https://review.openstack.org/#/c/314854/ it looks like dstanek recently did a bunch of improvements to keystone's caching solution20:14
lbragstadodyssey4me is there a non-gate process for testing this before merging?20:15
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops: implement minimal metric collection  https://review.openstack.org/36616720:16
*** schwicht has quit IRC20:18
*** schwicht has joined #openstack-ansible20:20
michaelguginocloudnull: odyssey4me looks like lxd gate checks were implemented in mitaka for os_nova.  Maybe these should only be for master and newer?  or should I cut a patch to exit0 in tox for mitaka?20:26
michaelguginohttps://review.openstack.org/#/c/366917/20:26
cloudnullmichaelgugino: /me looking now20:26
*** schwicht has quit IRC20:29
*** schwicht has joined #openstack-ansible20:29
cloudnullso ...20:30
cloudnullit would seem that we'll need to disable that within project config20:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to YAML-based docs  https://review.openstack.org/36339620:31
mhaydendesire to strangle sphinx and/or pbr is growing :)20:31
cloudnullmichaelgugino: looks like https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L11885-L1188620:32
Matiasstevelle: removing the metrics and adding them again with a different policy didn't work (they stop receiving data from ceilometer)20:32
cloudnullcurious why thats hitting mitaka20:33
* cloudnull going to ask infra20:33
*** kjw3 has joined #openstack-ansible20:34
*** thorst has joined #openstack-ansible20:35
*** BjoernT has joined #openstack-ansible20:37
cloudnullmichaelgugino: +1 on the simple exit 020:37
michaelguginok20:37
cloudnullinfra will take longer to get the change in20:37
*** schwicht has quit IRC20:38
*** askb has joined #openstack-ansible20:39
*** jmckind_ has quit IRC20:39
*** schwicht has joined #openstack-ansible20:40
*** asettle has joined #openstack-ansible20:40
*** BjoernT has quit IRC20:41
*** thorst has quit IRC20:42
*** michauds has quit IRC20:43
*** schwicht has quit IRC20:44
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to metadata-based docs  https://review.openstack.org/36339620:44
*** jcannava has quit IRC20:46
*** schwicht has joined #openstack-ansible20:49
cloudnullmichaelgugino: odyssey4me: https://review.openstack.org/#/c/366968/20:50
michaelguginolooks good.  Thanks cloudnull20:52
*** schwicht has quit IRC20:54
*** jperry has joined #openstack-ansible20:56
*** javis has joined #openstack-ansible20:58
*** schwicht has joined #openstack-ansible21:00
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Migrate to metadata-based docs  https://review.openstack.org/36339621:07
*** Mudpuppy_ has joined #openstack-ansible21:11
*** Mudpuppy has quit IRC21:14
*** ametts has quit IRC21:15
*** Mudpuppy_ has quit IRC21:16
*** johnmilton has quit IRC21:17
*** BjoernT has joined #openstack-ansible21:19
*** woodard_ has joined #openstack-ansible21:19
*** adrian_otto has quit IRC21:21
*** schwicht has quit IRC21:22
*** michaelgugino has quit IRC21:23
*** woodard has quit IRC21:23
*** woodard_ has quit IRC21:23
*** galstrom is now known as galstrom_zzz21:24
palendaemhayden, Still around?21:24
palendaeNoticed http://docs-draft.openstack.org/96/363396/15/check/gate-openstack-ansible-security-docs-ubuntu-xenial/8b24e60//doc/build/html/controls_detail.html isn't showing your STIGs built into the output. My comments on the Makefile might help understand why21:25
*** jheroux has quit IRC21:27
*** schwicht has joined #openstack-ansible21:28
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: Gnocchi identities created before Swift playbook  https://review.openstack.org/36693121:29
*** spotz is now known as spotz_zzz21:29
*** johnmilton has joined #openstack-ansible21:34
*** spotz_zzz is now known as spotz21:38
*** thorst has joined #openstack-ansible21:40
*** asettle has quit IRC21:43
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_magnum: Add basic functional tests to role  https://review.openstack.org/35515521:43
*** thorst has quit IRC21:48
*** jcannava has joined #openstack-ansible21:51
*** johnmilton has quit IRC21:51
*** jmccrory has quit IRC21:53
*** jmccrory has joined #openstack-ansible21:53
*** jmccrory has quit IRC21:55
*** adrian_otto has joined #openstack-ansible21:55
*** jmccrory has joined #openstack-ansible21:55
*** johnmilton has joined #openstack-ansible21:55
*** jmccrory has quit IRC21:57
*** jmccrory has joined #openstack-ansible21:57
*** kenhui has joined #openstack-ansible21:59
*** jperry has quit IRC22:00
*** javis has quit IRC22:01
*** retreved has quit IRC22:01
mrdaMorning OSA22:02
*** BjoernT has quit IRC22:02
csmartmrda: \o22:06
openstackgerritMerged openstack/openstack-ansible: Derive the OpenStack service list from the service file  https://review.openstack.org/36560122:07
csmartmrda: warming up in Adelaide yet?22:10
mrdahey csmart - nice to see you here :)22:10
csmartmrda: thanks, nice to be here ;-)22:10
mrdaADL was 25C yesterday, so getting to be beautiful weather22:10
mrda(although 20mm rain and 20C today)22:11
csmartnice, still 14-18ish here22:11
openstackgerritSHASHANK TAVILDAR (shasha_tavil) proposed openstack/openstack-ansible: Added the option to copy changes between stock env.d and repo env.d[M->N]  https://review.openstack.org/36620822:12
csmartoh, looks like top of 10 on Tuesday. Winter always tries to make a late comeback22:12
mrdacsmart: mcarden is going to point you at some bash scripts of mine.  I apologise in advance.22:12
csmartmrda: lol, happy to take a look :-)22:12
mcarden:)22:13
csmartmrda: are you going to BCN?22:13
*** jamesdenton has quit IRC22:13
mrdacsmart: yep, I'll be there.  And yourself?22:13
*** berendt has quit IRC22:14
csmartwell I'm hoping to, but not looking too promising (after having looked at flight pricing)22:14
csmartwe'll see.. I'd really like to go, still trying to convince myself22:15
*** jcannava has quit IRC22:15
csmart*to buy a ticket22:15
mrdacsmart: if you're on your own coin, look at ADL->DBX->BCN and return.  I know you'd have to come via ADL, but it was certainly cheaper than other options when I was looking for my own flights.22:15
mrda(that's with Emirates)22:16
mrda(that was my backup plan if I wasn't funded)22:16
csmartmrda: cool thanks for the tip, I'll take a look. Was planning to travel with mattoliverau to make the long haul flights much easier22:17
mrdacsmart: then you'd be on the same flights as me \o/22:17
csmartmrda: sweet :-)22:18
mattoliverauIt would be a party flight!22:19
*** sdake has quit IRC22:24
*** BjoernT has joined #openstack-ansible22:26
*** BjoernT has quit IRC22:26
*** spedione is now known as spedione|AWAY22:27
*** galstrom_zzz is now known as galstrom22:32
csmarthehe22:36
csmartmrda: mattoliverau who else is going, are they on the same flight? tonyb?22:37
*** spotz is now known as spotz_zzz22:37
mrdacsmart: yep, the whole band is travelling together22:37
mrda(well, for the band members who are going)22:37
csmartmrda: kk, cool22:38
*** klamath has quit IRC22:39
*** klamath has joined #openstack-ansible22:40
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_magnum: Add basic functional tests to role  https://review.openstack.org/35515522:43
*** asettle has joined #openstack-ansible22:44
*** KLevenstein has quit IRC22:45
*** thorst has joined #openstack-ansible22:48
*** asettle has quit IRC22:49
*** klamath has quit IRC22:49
*** thorst has quit IRC22:53
*** admin0 has quit IRC22:54
openstackgerritSHASHANK TAVILDAR (shasha_tavil) proposed openstack/openstack-ansible: Added the option to copy changes between stock env.d and repo env.d[M->N]  https://review.openstack.org/36620822:54
*** jcannava has joined #openstack-ansible22:54
*** weezS has quit IRC22:57
*** gouthamr has quit IRC22:58
*** tomjosekal has quit IRC23:02
*** hblah has joined #openstack-ansible23:02
*** javis has joined #openstack-ansible23:03
*** kenhui has quit IRC23:06
*** galstrom is now known as galstrom_zzz23:09
*** AnarchyAo has quit IRC23:10
*** TxGirlGeek has quit IRC23:23
openstackgerritDarren Chan proposed openstack/openstack-ansible: [docs] Minor edits to the overview chapter  https://review.openstack.org/36545423:30
*** gouthamr has joined #openstack-ansible23:34
*** gouthamr_ has joined #openstack-ansible23:34
*** gouthamr has quit IRC23:38
*** asettle has joined #openstack-ansible23:45
*** thorst has joined #openstack-ansible23:50
*** asettle has quit IRC23:51
openstackgerritDarren Chan proposed openstack/openstack-ansible: [docs] Minor edits to the overview chapter  https://review.openstack.org/36545423:53
*** thorst has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!