Monday, 2016-10-31

*** thorst has quit IRC00:00
*** LiYuenan has joined #openstack-ansible00:03
*** dxiri has quit IRC00:09
*** dxiri has joined #openstack-ansible00:10
*** thorst has joined #openstack-ansible00:23
*** gouthamr has quit IRC00:25
*** dxiri has quit IRC00:25
*** thorst has quit IRC00:26
*** thorst has joined #openstack-ansible00:27
*** dxiri has joined #openstack-ansible00:29
*** thorst has quit IRC00:31
*** thorst has joined #openstack-ansible00:31
*** dxiri has quit IRC00:34
*** thorst has quit IRC00:37
*** dxiri has joined #openstack-ansible01:08
*** yangtong has joined #openstack-ansible01:16
*** yangtong has quit IRC01:26
*** thorst has joined #openstack-ansible01:37
*** thorst has quit IRC01:41
*** thorst has joined #openstack-ansible01:41
*** thorst has quit IRC01:42
*** dxiri has quit IRC01:46
*** dxiri has joined #openstack-ansible01:47
*** dxiri has quit IRC01:47
*** markvoelker has joined #openstack-ansible02:17
*** thorst has joined #openstack-ansible02:26
*** thorst has quit IRC02:27
*** thorst has joined #openstack-ansible02:31
*** thorst has quit IRC02:31
*** thorst has joined #openstack-ansible02:32
*** thorst has quit IRC02:36
*** dxiri has joined #openstack-ansible02:53
*** dxiri has quit IRC02:58
*** dxiri has joined #openstack-ansible03:01
*** dxiri has quit IRC03:10
*** alij has joined #openstack-ansible03:42
*** Jeffrey4l has joined #openstack-ansible03:44
*** gouthamr has joined #openstack-ansible04:21
*** gouthamr has quit IRC04:30
*** alij has quit IRC04:33
*** mechinn has joined #openstack-ansible04:35
*** Hosam has joined #openstack-ansible04:43
*** Hosam_ has joined #openstack-ansible04:44
*** chhavi has joined #openstack-ansible04:46
*** javeriak has joined #openstack-ansible04:47
*** Hosam has quit IRC04:47
*** alij has joined #openstack-ansible04:51
*** alij has quit IRC04:56
*** Hosam_ has quit IRC05:09
*** ggillies has quit IRC05:09
*** ggillies has joined #openstack-ansible05:11
*** Mudpuppy has quit IRC05:12
*** Mudpuppy has joined #openstack-ansible05:13
*** alij has joined #openstack-ansible05:13
*** ggillies has quit IRC05:15
*** ggillies_ has joined #openstack-ansible05:15
*** Mudpuppy has quit IRC05:17
*** alij has quit IRC05:17
*** alij has joined #openstack-ansible05:20
*** alij has quit IRC05:25
*** c-mart has joined #openstack-ansible05:27
*** mechinn has left #openstack-ansible05:31
*** ggillies_ has quit IRC05:33
*** ggillies has joined #openstack-ansible05:33
*** thorst has joined #openstack-ansible05:35
*** thorst has quit IRC05:40
*** c-mart has quit IRC05:46
*** alij has joined #openstack-ansible05:49
*** alij has quit IRC05:51
*** alij has joined #openstack-ansible05:51
*** c-mart has joined #openstack-ansible05:58
*** c-mart has quit IRC06:07
*** gfa1 has quit IRC06:07
*** gfa has joined #openstack-ansible06:08
*** alij has quit IRC06:09
*** gouthamr has joined #openstack-ansible06:10
*** gfa has quit IRC06:11
*** gfa has joined #openstack-ansible06:11
*** alij has joined #openstack-ansible06:12
*** flg has joined #openstack-ansible06:14
*** gouthamr has quit IRC06:15
*** gfa has quit IRC06:17
*** gfa has joined #openstack-ansible06:18
*** gfa has quit IRC06:20
*** gfa has joined #openstack-ansible06:21
*** alij has quit IRC06:21
*** gfa is now known as gfa_06:22
*** alij has joined #openstack-ansible06:22
*** alij has quit IRC06:22
*** alij has joined #openstack-ansible06:22
*** dxiri has joined #openstack-ansible06:25
*** gfa_ is now known as gfa06:26
*** alij has quit IRC06:26
*** alij has joined #openstack-ansible06:26
*** rgogunskiy has joined #openstack-ansible06:28
*** alij has quit IRC06:30
*** dxiri has quit IRC06:30
*** alij has joined #openstack-ansible06:31
openstackgerritPraveen N proposed openstack/openstack-ansible: typo fix Appendix H -> C  https://review.openstack.org/39172606:39
*** flg has quit IRC06:41
*** drifterza has joined #openstack-ansible06:48
*** drifterza has quit IRC06:58
*** drifterza has joined #openstack-ansible06:58
*** flg has joined #openstack-ansible07:03
*** fxpester has joined #openstack-ansible07:04
*** gouthamr has joined #openstack-ansible07:10
*** Oku_OS-away is now known as Oku_OS07:12
*** agrebennikov has joined #openstack-ansible07:14
*** gouthamr has quit IRC07:15
*** agrebennikov has quit IRC07:19
*** h5t4 has joined #openstack-ansible07:32
*** chhavi has quit IRC07:33
*** Jeffrey4l has quit IRC07:34
*** chhavi has joined #openstack-ansible07:44
*** alij_ has joined #openstack-ansible08:00
*** alij_ has quit IRC08:00
*** alij has quit IRC08:00
*** alij has joined #openstack-ansible08:01
*** gouthamr has joined #openstack-ansible08:05
*** alij has quit IRC08:08
*** Guest83239 has quit IRC08:10
*** Guest83239 has joined #openstack-ansible08:10
*** Guest83239 is now known as bsv08:10
*** gouthamr has quit IRC08:10
*** Oku_OS is now known as Oku_OS-away08:12
*** Oku_OS-away is now known as Oku_OS08:13
*** flg has quit IRC08:20
*** Oku_OS is now known as Oku_OS-away08:21
*** karimb has joined #openstack-ansible08:22
*** haad1 has joined #openstack-ansible08:23
*** alij has joined #openstack-ansible08:23
*** alij has quit IRC08:30
*** alij has joined #openstack-ansible08:30
*** alij has quit IRC08:31
*** alij has joined #openstack-ansible08:31
*** alij has quit IRC08:36
*** alij has joined #openstack-ansible08:36
*** alij has quit IRC08:41
*** karimb has quit IRC08:42
*** javeriak has quit IRC08:42
*** javeriak has joined #openstack-ansible08:43
*** javeriak has quit IRC08:47
*** Oku_OS-away is now known as Oku_OS08:48
*** karimb has joined #openstack-ansible08:54
*** flg has joined #openstack-ansible09:03
*** haad1 has quit IRC09:10
*** alij has joined #openstack-ansible09:13
*** haad1 has joined #openstack-ansible09:29
*** chhavi has quit IRC09:29
*** thorst has joined #openstack-ansible09:36
*** woodard has joined #openstack-ansible09:38
*** woodard has quit IRC09:39
*** thorst has quit IRC09:41
*** pjm6 has joined #openstack-ansible09:42
*** karimb has quit IRC09:44
*** rgogunskiy has quit IRC09:55
*** rgogunskiy has joined #openstack-ansible09:56
*** chhavi has joined #openstack-ansible09:58
pjm6Hi there10:00
*** pjm6 has quit IRC10:07
*** pjm6 has joined #openstack-ansible10:08
*** LiYuenan has quit IRC10:12
*** haad1 has quit IRC10:33
hughsaundersodyssey4me: should I push https://review.openstack.org/#/c/391241/6 to https://review.openstack.org/#/c/390480/1? (- the set-x statements)10:35
*** alij has quit IRC10:39
*** alij has joined #openstack-ansible10:39
*** haad1 has joined #openstack-ansible10:41
*** alij has quit IRC10:42
*** alij has joined #openstack-ansible10:42
evrardjphello10:49
*** flg has quit IRC10:50
*** alij has quit IRC10:52
*** alij has joined #openstack-ansible10:54
drifterzahi10:57
*** alij_ has joined #openstack-ansible10:58
*** alij_ has quit IRC10:58
*** alij has quit IRC10:58
*** alij has joined #openstack-ansible10:58
evrardjphow is everyone?11:04
drifterzastill alive11:04
drifterzayou ?11:04
*** berendt has joined #openstack-ansible11:05
pjm6hi evrardjp drifterza11:10
pjm6tired, needed 1 week of vacations to recover xD11:10
evrardjpthat would be nice :p11:13
*** alij has quit IRC11:16
*** alij has joined #openstack-ansible11:17
*** chhavi has quit IRC11:20
*** berendt has quit IRC11:22
*** Mudpuppy has joined #openstack-ansible11:26
*** Mudpuppy has quit IRC11:27
*** Mudpuppy has joined #openstack-ansible11:27
*** alij has quit IRC11:28
*** gouthamr has joined #openstack-ansible11:31
*** Mudpuppy has quit IRC11:32
*** chhavi has joined #openstack-ansible11:34
openstackgerritDonovan Francesco proposed openstack/openstack-ansible-os_monasca: Refactoring Monasca role to align more with OSA.  https://review.openstack.org/37565511:34
*** retreved_ has joined #openstack-ansible11:36
*** retreved has quit IRC11:38
openstackgerritGaudenz Steinlin proposed openstack/openstack-ansible-os_ceilometer: Make ceilometer sample interval configurable  https://review.openstack.org/39179711:38
*** askb has quit IRC11:53
*** thorst has joined #openstack-ansible11:55
*** alij has joined #openstack-ansible11:56
*** fandi has joined #openstack-ansible11:58
*** berendt has joined #openstack-ansible11:59
*** alij has quit IRC12:01
*** johnmilton has joined #openstack-ansible12:03
*** berendt has quit IRC12:04
mhaydenhappy monday, folks! :)12:19
pjm6hi mhayden12:21
mgariepygood morning everyone12:21
openstackgerritSamuel Matzek proposed openstack/openstack-ansible-os_swift: Swift proxy performance fixes  https://review.openstack.org/39180912:22
*** smatzek has joined #openstack-ansible12:23
openstackgerritDonovan Francesco proposed openstack/openstack-ansible-os_monasca: Refactoring Monasca role to align more with OSA.  https://review.openstack.org/37565512:26
*** kylek3h_away has quit IRC12:27
*** berendt has joined #openstack-ansible12:29
*** admin0 has joined #openstack-ansible12:32
*** drifterza has quit IRC12:33
*** cloudcnn has joined #openstack-ansible12:38
admin0\o12:40
*** rgogunskiy has quit IRC12:42
h5t4Hi, current 'stable/mitaka' is affected by 'Dirty COW - CVE-2016-5195' I can change root files as user ubuntu. What options do I have.12:43
h5t4I used this for testing: https://raw.githubusercontent.com/dirtycow/dirtycow.github.io/master/dirtyc0w.c12:43
*** kylek3h_away has joined #openstack-ansible12:59
*** kylek3h_away has quit IRC12:59
*** flg has joined #openstack-ansible13:00
*** kylek3h_away has joined #openstack-ansible13:00
*** fguillot has joined #openstack-ansible13:00
*** cathrichardson has joined #openstack-ansible13:06
*** fandi has quit IRC13:07
*** cathrich_ has quit IRC13:07
*** klamath has joined #openstack-ansible13:13
*** klamath has quit IRC13:13
*** klamath has joined #openstack-ansible13:14
*** karimb has joined #openstack-ansible13:17
*** jmckind has joined #openstack-ansible13:19
*** schwicht has joined #openstack-ansible13:19
evrardjpcould some cores review this please https://review.openstack.org/#/c/389795/ ?13:21
evrardjpwell any review is accepted, as usual :D13:21
mgariepyhaha ;)13:21
evrardjpjust ping me if you want me to review also :p13:23
*** kylek3h_away is now known as kylek3h13:25
mgariepyevrardjp, i'm making a bit of progress on centos but still have some connectivity issues on the nova gate test ..13:27
mgariepywhen tempest starts the instance, it get stuck at networking13:27
*** gfa is now known as gfa_13:28
evrardjpmgariepy: so you updated the kernel on centos?13:28
mgariepyno13:30
*** jperry has joined #openstack-ansible13:30
mgariepythe vxlan stuff was backported by RH on the 3.10 kernel.13:30
evrardjpok13:30
*** jperry has quit IRC13:30
mgariepylast week i made the dhcp work on centos, it was a permission issue for the dnsmasq config in the container.13:31
*** jperry has joined #openstack-ansible13:31
mgariepyhopefully i'll have some time to debug this this week.13:32
*** berendt has quit IRC13:35
*** cloudcnn has quit IRC13:35
*** karimb has quit IRC13:37
*** smatzek has quit IRC13:37
openstackgerritOmer Anson proposed openstack/openstack-ansible-os_neutron: [WIP] Dragonflow  https://review.openstack.org/39152413:43
*** oanson has joined #openstack-ansible13:43
*** jheroux has joined #openstack-ansible13:44
mhaydenwith regard to the slow xenial stuff, i got access to open a bug with canonical about it via paid support contract ;)13:45
mhaydenhopefully we will hear something good soon13:46
*** dxiri has joined #openstack-ansible13:46
mhaydenbug opened to get https://bugs.launchpad.net/openstack-ansible/+bug/1637494 a closer look from canonical folks13:58
openstackLaunchpad bug 1637494 in openstack-ansible "Very slow Xenial gate jobs" [Critical,Confirmed] - Assigned to Major Hayden (rackerhacker)13:58
*** weezS has joined #openstack-ansible13:59
*** smatzek has joined #openstack-ansible14:00
*** afred312 has quit IRC14:00
*** oanson has quit IRC14:05
*** Mudpuppy has joined #openstack-ansible14:05
openstackgerritWang Qing wu proposed openstack/openstack-ansible-os_nova: Change protocol of novalink url.  https://review.openstack.org/39114814:07
*** berendt has joined #openstack-ansible14:07
*** drifterza has joined #openstack-ansible14:12
*** michaelgugino has joined #openstack-ansible14:13
*** chris_hultin|AWA is now known as chris_hultin14:14
*** TxGirlGeek has joined #openstack-ansible14:15
*** berendt has quit IRC14:18
*** spotz_zzz is now known as spotz14:20
*** hj-hpe has joined #openstack-ansible14:22
evrardjpmhayden: good news14:23
mhaydenORLY?14:23
evrardjpno I mean it's good news you're advancing... Small step is better than no step14:24
evrardjp:p14:24
*** berendt has joined #openstack-ansible14:25
*** clsacramento has joined #openstack-ansible14:25
*** karimb has joined #openstack-ansible14:31
*** jamielennox is now known as jamielennox|away14:34
*** jmckind_ has joined #openstack-ansible14:36
*** jmckind has quit IRC14:38
mhaydentrue14:39
openstackgerritMatt Thompson proposed openstack/openstack-ansible-rabbitmq_server: Stop all but one RabbitMQ node prior to upgrade  https://review.openstack.org/39186314:41
spotzmorning all14:41
*** berendt has quit IRC14:47
*** kstev has joined #openstack-ansible14:48
dxirigreetings everyone :)14:53
dxiriI have a question about the central logging server, what do I need interface wise? only the management bridge?14:53
*** chhavi has quit IRC14:54
drifterzayup14:54
drifterzaonly mgmt-bridge is necessary14:57
*** dxiri has quit IRC14:59
openstackgerritMatt Thompson proposed openstack/openstack-ansible-rabbitmq_server: Stop all but one RabbitMQ node prior to upgrade  https://review.openstack.org/39187415:00
openstackgerritDonovan Francesco proposed openstack/openstack-ansible-os_monasca: Refactoring Monasca role to align more with OSA.  - This patch is to provide monasca backend services and monasca api,log-api,events-api  - Adding the use of dictionary for service group mappings.  - Switching to use tested external roles for backend serv  https://review.openstack.org/37565515:01
*** retreved_ has quit IRC15:02
*** retreved has joined #openstack-ansible15:03
openstackgerritMatt Thompson proposed openstack/openstack-ansible-rabbitmq_server: Stop all but one RabbitMQ node prior to upgrade  https://review.openstack.org/39187415:05
*** c-mart has joined #openstack-ansible15:07
*** weezS has quit IRC15:07
*** weezS has joined #openstack-ansible15:09
*** c-mart has quit IRC15:11
*** karimb_ has joined #openstack-ansible15:13
lbragstadhi folks - would i be able to get https://review.openstack.org/#/c/326748/ restored?15:14
*** karimb has quit IRC15:14
lbragstadI've amended the patch locally and was going to push my latest changes15:14
*** oanson has joined #openstack-ansible15:16
lbragstador i can cherry pick the change and make a new review (not sure which you prefer though)15:17
*** dxiri has joined #openstack-ansible15:17
spotzevrardjp: mhayden ^^15:18
*** chhavi has joined #openstack-ansible15:19
mhaydenlbragstad: done sir15:19
lbragstadmhayden thanks!15:19
mhaydende nada, señor15:20
openstackgerritLance Bragstad proposed openstack/openstack-ansible-os_keystone: Always use memcached  https://review.openstack.org/32674815:20
* mhayden drops -215:20
* mhayden giggles15:20
spotzmhayden be nice:)15:22
mhaydenof course15:23
mhaydenout of all of the keystone developers named lance, lbragstad is my favorite15:23
stevemarmhayden: same15:23
lbragstadmhayden lol - there is a lot of us15:23
stevemartheres that other lance, hate him15:24
openstackgerritDonovan Francesco proposed openstack/openstack-ansible-os_monasca: Refactoring Monasca role to align more with OSA.  - This patch is to provide monasca backend services and monasca api,log-api,events-api  - Adding the use of dictionary for service group mappings.  - Switching to use tested external roles for backend serv  https://review.openstack.org/37565515:26
spotzmhayden stevemar - There's only one lbragstad15:27
lbragstador is there.... o.O15:27
mhaydenwait, there are more keystone lances?15:27
palendaethere's only one lbragstad...that we know of15:27
*** gfa_ is now known as gfa15:28
spotzpalendae: good point15:28
*** gfa is now known as gfa_15:28
lbragstadmuahahaha15:28
evrardjpthanks spotz... I see mhayden did the work there already, as usual !15:28
lbragstaddo the tests assert a specific role has been applied anywhere?15:28
spotzhehe evrardjp - not sure how he's that awake. I'm trying hard not to doze off but my plane got in late:(15:29
evrardjplbragstad: what do you mean?15:29
evrardjpthe inventory is listed in the role tests/ that should be enough15:29
lbragstadevrardjp i'm attempting to address stevelle's comments here https://review.openstack.org/#/c/326748/315:29
evrardjpor it isn't ?15:29
evrardjpok let me have a look at keystone role quick15:30
openstackgerritFrédéric Guillot proposed openstack/openstack-ansible-os_almanach: Make project compatible with CI infra  https://review.openstack.org/38623315:30
stevemarspotz: lbragstad: in the history of openstack, there has only been one other lance http://imgur.com/a/SrGmY15:32
evrardjplbragstad: https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/test.yml doesn't have a test-install-memcached15:32
spotzstevemar I can see that. There's finally another Amy15:33
evrardjpwe have this https://github.com/openstack/openstack-ansible-tests/blob/master/test-install-memcached.yml in our central testing tools15:33
evrardjpto make the job easy to reuse accross role15:33
evrardjproles*15:33
evrardjpmaybe that's what stevelle meant15:33
evrardjplet me grep to see if memcached is part of keystone tests somewhere else, just in case15:34
lbragstadlooks like it is15:34
lbragstadtests/ansible-role-requirements.yml:- name: memcached_server15:34
evrardjpoh it's a role dependency15:34
evrardjpyes, that fetches the role, but the role is installed in meta/main.yml15:35
lbragstadprobably because the default token backend is memcached?15:35
evrardjplet me check if meta/main.yml has a conditional first :D15:35
evrardjpyup it has, let me give you a link15:35
evrardjphttps://github.com/openstack/openstack-ansible-os_keystone/blob/master/meta/main.yml#L45-L4715:36
lbragstadevrardjp we removed the conditional here - https://review.openstack.org/#/c/326748/3/meta/main.yml15:36
evrardjpso memcached runs on keystone nodes?15:37
evrardjpthen that should be fine15:37
evrardjpwell the release note is still worth it :D15:37
lbragstadevrardjp cool!15:37
stevemarspotz: too many steves15:37
*** Jeffrey4l has joined #openstack-ansible15:38
evrardjplbragstad: well I didn't try, but it sounds reasonable to me15:38
evrardjpwe should make sure all the variables required to run the memcached role are defined in the tests, but if it's fine everything would be ready15:39
*** Jeffrey4l has quit IRC15:39
evrardjpstevemar: or not enough of the others15:39
stevemarevrardjp: o_O15:39
evrardjpI feel alone my firstname15:40
evrardjpwith*15:40
drifterzagood grief, takes longer to vagrant test than it does to gate.15:40
openstackgerritMerged openstack/openstack-ansible: Stop all but one RabbitMQ node prior to upgrade  https://review.openstack.org/39140115:40
drifterzathe utter crap15:40
evrardjpdrifterza: haha, counting the performance issues on xenial? :p15:40
spotzBut evrardjp That's why we have nics, so we can be special!15:40
*** Jeffrey4l has joined #openstack-ansible15:40
evrardjpSome people already tell me I'm special!15:41
drifterzaevrardjp, its a core i7 with 16gb ram and ssd, and still the gates are faster15:41
evrardjpwell I don't remember what is in cloud1.osic but I think there are ssds in some of the nodes15:41
*** Jeffrey4l has quit IRC15:41
lbragstadevrardjp we might need to add keystone_cache_backend_argument: url:127.0.0.1:11211 to the test variables15:42
evrardjpworth asking cloudnull15:42
evrardjpthat's what you did already right lbragstad?15:42
evrardjpoh for the central test15:42
evrardjpyup15:42
*** Jeffrey4l has joined #openstack-ansible15:42
evrardjpmaybe not the 127.0.0.1 but there is indeed something to be set there15:43
lbragstadevrardjp what do you mean by central tests?15:43
evrardjpthe role default can be set to url:127.0.0.1 'though.15:43
lbragstadwhich is what we're doing here - https://review.openstack.org/#/c/326748/3/defaults/main.yml ?15:44
evrardjpso if we enable this by default, every single role that requires keystone will now require a proper memcached configuration15:44
evrardjpif the keystone and memcached nodes are always on the same container, then it's fine15:44
evrardjpwe don't need to override this variable15:44
evrardjpelse we'd need to override it in our gate tests for every single role -- but now we have a central testing repository15:45
evrardjpso it could be done there for convenience15:45
lbragstadah15:45
cloudnullo/15:45
evrardjpalthough I'm not sure we need this, because you always plan to collocate in the gates15:45
cloudnullevrardjp: whats up?15:45
evrardjpcloudnull: nothing much, doing python3 training15:46
spotzhey cloudnull15:46
cloudnullre: <evrardjp> [15:45:59] worth asking cloudnull15:46
evrardjpI pinged you because I wanted to know what you have in cloud1.osic15:46
cloudnullo/ spotz15:46
evrardjpdo you have ssds in some nodes?15:46
cloudnullah. yes.15:46
cloudnullwe have spinning 7200RPM disks, s3500 and s3700 ssd's15:47
evrardjpdrifterza: ^ you're gonna have trouble beating cloudnull's performance!15:47
drifterzayeah damn dude15:47
evrardjpeverything is faster when /dev/null ... I meant cloudnull15:47
evrardjp:p15:47
cloudnullopenstack infra uses all three.15:47
cloudnullhttp://grafana.openstack.org/dashboard/db/nodepool-osic15:47
cloudnullwe have them sperated out by resource typ e15:48
evrardjplbragstad: will we always co-locate the memcached and the keystone?15:48
evrardjpdo you see a reason why we shouldn't ?15:48
lbragstadevrardjp i don't - but i'm willing to be persuaded15:48
cloudnullinfra uses 512 spinning disk, 256 s3500, and 256 s370015:48
evrardjplbragstad: I think for this we should first focus on os_keystone, and then work on openstack-ansible integrated gate15:49
drifterzalocal disks, or iscsi-SAN ?15:49
evrardjpfor os_keystone, it seems everything will be fine15:49
evrardjpfor other roles, because we can collocate, we won't need to override the defaults15:50
lbragstadevrardjp got it15:50
evrardjpso I guess, the only part remaining is having the proper group vars for the openstack-ansible, (because I guess we want clustering and all that jazz, and it probably requires some kind of cluster ip or something like that)15:50
drifterzaautomagically, you around dude ?15:52
lbragstadevrardjp and those we'd put here - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tests/group_vars/all_containers.yml ?15:52
drifterzacloudnull, the nodes that get ipv6 addresses run gates alot faster than the ipv4 ones15:53
cloudnullthat good to know.15:54
cloudnull:)15:54
evrardjplbragstad: just to be sure we are talking about the same thing, are we talking about the variable here: https://review.openstack.org/#/c/326748/3/defaults/main.yml?15:54
lbragstadevrardjp yeah15:54
lbragstadI believe so15:55
evrardjpok15:55
evrardjpso15:55
drifterzacloudnull,15:55
drifterzayou keen on helping on a review ?15:55
cloudnullsure.15:55
cloudnullwhat you got?15:56
drifterzaits my PR 11915:56
drifterzalol15:56
drifterzahttps://review.openstack.org/#/c/375655/15:56
evrardjplbragstad: because we collocate memcached and keystone in our gates, and we don't deploy more than one keystone container in each of our other roles, we can basically say that keystone container always connect to 127.0.0.115:56
evrardjp(to memcached)15:56
cloudnulldrifterza: nice!15:56
evrardjpso we can use the defaults everywhere15:56
cloudnullI'll give it a look now.15:56
evrardjpand we don't need any override15:56
drifterzafor some weird reason the xenial tests are failing15:57
drifterzabut trusty is passing15:57
evrardjpbut for openstack-ansible (or other consuming projects), some deployers could have more than one keystone/memcached, so we need to override this default behavior of 127.0.0.115:57
*** fxpester has quit IRC15:57
evrardjpthat should be a later comit, on the same topic15:57
*** flg has quit IRC15:58
evrardjpmaybe I'm more clear -- sorry if I'm not :/15:58
lbragstadevrardjp got it - i think that makes sense15:58
evrardjpin any case, don't hesitate to add me on the reviews. I'm always happy to help.15:59
lbragstadevrardjp if someone wants to override it - all they have to do is set keystone_cache_backend_argument to something else, right?15:59
evrardjpthat's true15:59
evrardjpbut we can make life easier for deployers16:00
evrardjpby having a smart automatic default when using multiple keystone containers16:00
evrardjpto automatically guess the proper IP to connect to16:00
lbragstadah16:00
evrardjpI'm no specialist in memcached16:00
evrardjpIt's time for me to learn I guess :d16:01
*** javeriak has joined #openstack-ansible16:01
*** hughmFLEXin has joined #openstack-ansible16:01
openstackgerritMatt Thompson proposed openstack/openstack-ansible-rabbitmq_server: [WIP] rabbitmq upgrade testing  https://review.openstack.org/39189916:05
*** c-mart has joined #openstack-ansible16:06
lbragstadevrardjp awesome - i've added you to the review16:06
openstackgerritMatt Thompson proposed openstack/openstack-ansible-rabbitmq_server: [WIP] rabbitmq upgrade testing  https://review.openstack.org/39189916:10
cloudnullI'll give it a look now. ?16:12
cloudnullsorry.16:12
cloudnullandymccr: odyssey4me: do we have a draft logo as of yet?16:12
*** c-mart has quit IRC16:12
evrardjpcloudnull: I tweeted the draft16:12
cloudnulloh.16:12
* cloudnull looking16:12
evrardjpbut andy have probably an updated one :D16:13
* cloudnull was looking on the ML16:13
evrardjphttps://twitter.com/evrardjp/status/78958281374613504016:13
evrardjpwell I guess there is probably a more official logo16:14
cloudnullnice16:14
evrardjpThere is coloring done, and probably an alternative one too16:14
evrardjpbut I didn't find it yet16:14
evrardjpso no stickers :p16:15
evrardjpandymccr didn't leak a thing :p16:15
*** h5t4 has quit IRC16:16
*** jmckind_ has quit IRC16:17
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add 'only' to clarify status  https://review.openstack.org/39190316:17
openstackgerritDonovan Francesco proposed openstack/openstack-ansible-os_monasca: Refactoring Monasca role to align more with OSA.  - This patch is to provide monasca backend services and monasca api,log-api,events-api  - Adding the use of dictionary for service group mappings.  - Switching to use tested external roles for backend serv  https://review.openstack.org/37565516:17
*** flg has joined #openstack-ansible16:18
evrardjplbragstad: I'll review tomorrow, end of day here.16:18
lbragstadevrardjp awesome - thanks again for all the help!16:18
* lbragstad hands evrardjp a glass of wine16:19
evrardjpwell I did nothing, you did all the code... I hope I'll learn how memcached works for tomorrow to help you in the group vars.16:19
* evrardjp loves wine :D16:19
sigmavirusevrardjp: what do you love to whine about? ;-(16:21
sigmavirus*;-)16:21
*** hughmFLEXin has quit IRC16:23
*** jmckind has joined #openstack-ansible16:25
*** c-mart has joined #openstack-ansible16:26
*** hughmFLEXin has joined #openstack-ansible16:26
drifterzacloudnull, its a doozie dude to review that16:26
drifterzasorry ;P16:26
dxirican someone help and tell me what's up with this?16:31
dxirihttp://paste.ubuntu.com/23407601/plain/16:31
dxirigetting it on the central logging container I am trying to setup16:31
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add RHEL-07-010270 (ssh - empty password)  https://review.openstack.org/39191016:34
*** karimb_ has quit IRC16:40
*** weezS has quit IRC16:46
*** javeriak has quit IRC16:46
dxiriif I login into the container, I do see the eth100 interface up16:47
dxiripingable and everything16:47
cloudnulllooks like it's failing to bring up eth10016:48
cloudnullis that something you've defined in the openstack_user_config?16:49
*** david-lyle has joined #openstack-ansible16:51
*** Jeffrey4l has quit IRC16:52
cloudnulldrifterza: looks like calling "http://localhost:8070" is failing on a xenial gate. I suspect that this is an issue with a service not starting, or a unit file failing to complete.16:53
cloudnullIf you have a xenial node to test on it may be worth diving into .16:54
drifterzayeah, stuggling to get vagrant and xenial to work16:54
cloudnulli've not completed the review yet; still a lot left to go.16:54
cloudnulljust figured I'd mention it16:54
*** flg has quit IRC16:56
*** weezS has joined #openstack-ansible16:57
dxiricloudnull: I see the interface is up, I use eth100 as the container interface on the br-mgmt bridge16:58
cloudnullif you log into the log1_rsyslog_container-b5d05534 container do you have eth100 up ?17:01
dxiriyes17:02
dxiriand I can ping it from anywhere17:02
cloudnullcan you execute ``/usr/local/bin/lxc-veth-wiring "log1_rsyslog_container-b5d05534" "b5d05534_eth100" "eth100" "br-mgmt"`` ?17:03
cloudnullfrom the log1 host ?17:03
dxirithis is what I get: http://paste.ubuntu.com/23407723/17:06
dxiriah...I see the problem, here are the interfaces on the host: http://paste.ubuntu.com/23407758/17:07
cloudnullah. looks like the veth was never moved into the container process space.17:09
dxiriSeems that the command is looking for a Device "a6c3a9d2" that doesn't exist17:09
dxirihow can I reset that?17:09
dxiriI have tried killing the container and re-running again17:09
dxiribut same problem17:10
*** thorst has quit IRC17:10
*** thorst has joined #openstack-ansible17:11
*** dotplus has joined #openstack-ansible17:11
dxirimaybe nuking /etc/network/interfaces.d/lxc-net-bridge.cfg on the host, reboot, then destroy the container and try again?17:12
*** thorst_ has joined #openstack-ansible17:12
cloudnullI dont think that's needed.17:12
cloudnullthe actual failure is from within the container17:12
cloudnullif looks like it's failing on LN:4417:12
cloudnullwhich is failing to bring up eth100 within the container.17:13
cloudnullcan you stop and start the container? does eth100 come up automatically ?17:13
*** thorst has quit IRC17:15
openstackgerritFrédéric Guillot proposed openstack/openstack-ansible-os_almanach: Make project compatible with CI infra  https://review.openstack.org/38623317:16
*** h5t4 has joined #openstack-ansible17:16
*** thorst_ has quit IRC17:16
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_barbican: Use global openstack service protocols by default  https://review.openstack.org/39192617:16
*** drifterza has quit IRC17:16
dxiricloudnull: just did...eth100 does come up17:17
dxiriand its pingable from anywhere on the network17:17
dxirieven ssh is up17:18
cloudnullinteresting.17:18
openstackgerritJimmy McCrory proposed openstack/openstack-ansible: [WIP] Include barbican role in integrated release  https://review.openstack.org/39121917:19
dxiriI like to say I only bring interesting problems to this chat17:21
cloudnull:)17:21
dxirithe weirdest things :P17:21
*** thorst has joined #openstack-ansible17:21
*** thorst has quit IRC17:21
dxiriI am doing this logging server cause I can't figure out yet another weird issue17:21
cloudnulldxiri: can you login to that container and run ifdown eth100 and ifup eth100 ?17:21
cloudnullis there an interface file in the container for that device17:21
*** thorst has joined #openstack-ansible17:22
cloudnullunder /etc/network/interfaces or /etc/network/interfaces.d/eth100 ?17:22
dxirilet me look17:22
dxiriha17:24
dxiricrazy17:24
dxiriifdown: interface eth100 not configured17:24
dxiriroot@log1_rsyslog_container-b5d05534:~# ifup eth10017:24
dxiriRTNETLINK answers: File exists17:24
dxiriFailed to bring up eth100.17:24
dxiriso container say: "I don't know what that is so I won't let you down it"17:25
dxiri*says17:25
cloudnullin the /etc/network/interfaces file do you have the line that sources the extra interfaces?17:26
*** thorst has quit IRC17:26
*** thorst has joined #openstack-ansible17:26
dxirihttp://paste.ubuntu.com/23407816/17:27
dxiriyes I do17:27
cloudnullwhat all is in /etc/network/interfaces.d/ ?17:27
cloudnullmaybe something conflicting  ?17:28
dxiriI did 2 cats17:28
dxiridifferent files17:28
dxiribut its the same paste17:28
dxiristarting on line 11 its a different file17:28
cloudnullso there are two files with the same config ?17:29
cloudnullis it eth1 and eth100 ?17:29
dxiriwhat do you mean?17:30
dxirithere is no eth1 inside the container17:30
dxiriyou lost me :)17:31
dxirithe last paste has /etc/network/interfaces file and /etc/network/interfaces.d/eth100.cfg file17:32
openstackgerritFrédéric Guillot proposed openstack/openstack-ansible-os_almanach: Make project compatible with CI infra  https://review.openstack.org/38623317:35
*** h5t4 has quit IRC17:35
cloudnullare there any other files in /etc/network/interfaces.d/ ?17:35
*** h5t4 has joined #openstack-ansible17:36
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add RHEL-07-010430 and RHEL-07-010431  https://review.openstack.org/39193017:37
cloudnulldxiri: ``ls -al /etc/network/interfaces.d/*.cfg`` basically i'm looking to know if there are potentially conflicting extra interfaces there17:39
dxirithe only file inside interfaces.d is /etc/network/interfaces.d/eth100.cfg17:40
cloudnulldo you see the device eth100 from within the container?17:41
cloudnull``ip a l eth100``17:41
dxiriyes I see it17:42
dxirilike I mentioned before, up and I can ping it17:43
dxiribut funny enough, It won't let me ifdown it17:43
cloudnullhuh,17:43
cloudnullthat is strange17:43
dxiritotally17:44
cloudnullcan you delete that interface?17:44
cloudnullip link del eth10017:44
cloudnulland then ifup17:44
dxirik delete worked17:44
dxiriifup didn't17:45
dxiriCannot find device "eth100"17:45
dxiriFailed to bring up eth100.17:45
cloudnullseems like the source /etc/network/interfaces.d/*.cfg isn't loading the config17:46
cloudnullcan you run ``ip a l`` and paste the output ?17:46
cloudnullfrom within the container17:46
dxirilhttp://paste.ubuntu.com/23407868/17:47
openstackgerritFrédéric Guillot proposed openstack/openstack-ansible-os_almanach: Make project compatible with CI infra  https://review.openstack.org/38623317:47
dxirikeep in mind we just deleted eth10017:47
dxiriso it won't show up there17:47
andymccrcloudnull: logo stuff - haven't had any official word :)17:49
cloudnulldxiri: With the config inplace you should be able to ifup the interface.17:54
*** javeriak has joined #openstack-ansible17:55
cloudnullif you delete the eth100.cfg (or move it out of the interfaces.d directory) and restart the container you should see a raw interface in the container with no config17:55
cloudnulli'd be curious if the eth100 device is even being presented to the container from the host.17:56
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix stdout_lines check  https://review.openstack.org/39193417:56
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add RHEL-07-010430 and RHEL-07-010431  https://review.openstack.org/39193017:59
openstackgerritMatt Thompson proposed openstack/openstack-ansible-rabbitmq_server: [WIP] rabbitmq upgrade testing  https://review.openstack.org/39189917:59
*** asettle has joined #openstack-ansible18:00
dxiricloudnull: "i'd be curious if the eth100 device is even being presented to the container from the host." how can I check if that's the case?18:03
cloudnullmove the eth100.cfg file into the home dir then stop / start the container18:03
cloudnullwhen you login you should see eth0 and eth10018:03
cloudnulland eth100 will be a device without config18:04
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix stdout_lines check  https://review.openstack.org/39193418:06
*** h5t4 has quit IRC18:06
*** h5t4 has joined #openstack-ansible18:08
openstackgerritMichael Gugino proposed openstack/openstack-ansible-os_nova: Backport nova use ssh key distribution  https://review.openstack.org/39193618:11
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible: Clean up warnings for BaseException.message  https://review.openstack.org/39134718:11
*** hj-hpe has quit IRC18:13
openstackgerritMichael Gugino proposed openstack/openstack-ansible-os_nova: Backport nova user ssh key distribution  https://review.openstack.org/39193618:13
*** chhavi has quit IRC18:15
*** aludwar has quit IRC18:17
*** hj-hpe has joined #openstack-ansible18:20
*** jmckind has quit IRC18:21
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix stdout_lines check  https://review.openstack.org/39193418:21
*** jmckind has joined #openstack-ansible18:22
*** hj-hpe has quit IRC18:22
*** jmckind_ has joined #openstack-ansible18:25
openstackgerritFrédéric Guillot proposed openstack/openstack-ansible-os_almanach: Make project compatible with CI infra  https://review.openstack.org/38623318:27
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add RHEL-07-010430 and RHEL-07-010431  https://review.openstack.org/39193018:28
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add RHEL-07-010270 (ssh - empty password)  https://review.openstack.org/39191018:29
*** jmckind has quit IRC18:29
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Fix indentation for bullets  https://review.openstack.org/39194018:32
dxiricloudnull: again, no idea, but its working now18:38
dxiriseems like just trying the same thing multiple times is the way to fix most problems with OSA :)18:39
*** aludwar has joined #openstack-ansible18:44
*** michaelgugino has quit IRC18:45
*** asettle has quit IRC18:47
*** asettle has joined #openstack-ansible18:48
*** dxiri_ has joined #openstack-ansible18:48
*** asettle has quit IRC18:48
*** asettle has joined #openstack-ansible18:48
*** dxiri has quit IRC18:50
*** Mudpuppy_ has joined #openstack-ansible18:50
matttautomagically: hey there, you around ?18:51
*** asettle has quit IRC18:52
*** asettle has joined #openstack-ansible18:52
*** Mudpuppy has quit IRC18:54
*** Mudpuppy_ has quit IRC18:55
*** michaelgugino has joined #openstack-ansible18:57
*** karimb has joined #openstack-ansible18:57
*** spotz is now known as spotz_zzz18:57
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add RHEL-07-010270 (ssh - empty password)  https://review.openstack.org/39191019:01
*** c-mart has quit IRC19:01
openstackgerritMerged openstack/openstack-ansible-os_almanach: Make project compatible with CI infra  https://review.openstack.org/38623319:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Add 'only' to clarify status  https://review.openstack.org/39190319:02
*** hughmFLEXin has quit IRC19:02
*** hughmFLEXin has joined #openstack-ansible19:03
*** h5t4 has quit IRC19:03
*** h5t4 has joined #openstack-ansible19:05
dxiri_"Failed to validate the SSL certificate for raw.githubusercontent.com:443"19:08
dxiri_the error itself says I can use validate_certs=False, but doesn't say where can I put that19:09
dxiri_is it a user variable on the user_variables.yml?19:09
*** flg has joined #openstack-ansible19:11
*** vishwanathj has joined #openstack-ansible19:12
*** c-mart has joined #openstack-ansible19:14
openstackgerritJimmy McCrory proposed openstack/openstack-ansible: [WIP] Include barbican role in integrated release  https://review.openstack.org/39121919:18
cloudnulldxiri_: you behind a proxy ?19:24
dxiri_no19:25
*** vishwanathj has quit IRC19:25
cloudnullmaybe just a transient failure to github ?19:25
*** vishwanathj has joined #openstack-ansible19:26
cloudnullnothing that we're doing would cause access to raw.githubusercontent.com:443 fail19:26
dxiri_I see what's wrong19:28
dxiri_container has no internet access :P19:28
cloudnullthat'll do it :)19:28
openstackgerritSean M. Collins proposed openstack/openstack-ansible-security: Create control-alt-delete.conf if not present  https://review.openstack.org/39195819:29
dxiri_is there an automatic way of telling all containers which dns and gateway they should use?19:30
*** messy has quit IRC19:31
*** vishwanathj has quit IRC19:31
*** vishwanathj has joined #openstack-ansible19:32
*** c-mart has quit IRC19:32
*** spotz_zzz is now known as spotz19:38
michaelguginocloudnull: was it you that has kvm + multinode aio playbook?19:41
*** dxiri_ has quit IRC19:43
michaelguginonvm see it's in ops repo19:43
*** kvcobb has quit IRC19:44
cloudnullmichaelgugino: yes.19:49
cloudnullif you have any issues with that let me know.19:49
cloudnullhappy to help19:49
michaelguginois the deployment size tunable?19:49
cloudnullalso michaelgugino did an LXD container deployment the other day. that worked really well.19:49
cloudnullmichaelgugino: it is19:50
michaelguginosweet, I definite want to give that a go sometime soon.19:50
*** johnmilton has quit IRC19:50
michaelguginodon't want images to live in /var/lib/libvirt/images19:50
cloudnullyou can change the size of the deployment using https://github.com/openstack/openstack-ansible-ops/blob/master/multi-node-aio/hosts.json19:50
cloudnullmichaelgugino: where do you want them to live?19:50
*** c-mart has joined #openstack-ansible19:51
*** Mudpuppy has joined #openstack-ansible19:51
michaelgugino  /nvmefs/images19:51
cloudnullI guess you could link /var/lib/libvirt -> /nvmefs/images19:52
cloudnullin the collection of scripts the image path is assumed.19:53
jrossercloudnull: was that multinode aio with LXD you mentioned?19:53
michaelguginoI can happily sed it19:53
cloudnullindeed.19:53
*** Mudpuppy_ has joined #openstack-ansible19:53
cloudnulljrosser: are you refering to https://twitter.com/cloudnull/status/792147262843424768 ?19:54
michaelguginois cobbler running on localhost or in another of the vms?19:54
cloudnullmichaelgugino: its running on localhost19:54
cloudnullas is hap19:54
michaelguginodoh.19:55
michaelguginomy box is xenial, I don't feel like busting a bunch of things.19:55
cloudnullyea. it will take over the box.19:55
cloudnullalso the setup is 14.04 specific right now19:56
cloudnulli've not updated it for xenial19:56
cloudnullthough I wanted to do that in the next week .19:56
jrossercloudnull: i wanted to do multinode aio on xenial/LXD19:56
jrosserusing that for tons other stuff19:56
michaelguginoyeah, I have some other stuff running on the box.  I recon I'll try a few things manually first.  I think putting everything in a vm would be a good approach.  Totally self contained, just gotta figure out the networking.19:56
*** Mudpuppy has quit IRC19:57
cloudnulljrosser: in that tweet I was building out a 44 node cloud and used ironic, lxd, and kvm all within the same env .19:57
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Adjust docs for Ocata  https://review.openstack.org/39196419:57
cloudnulljrosser: we should be able to do a xenial multi-node-aio however we'll need to remove the trusty specific bits.19:58
cloudnullwhich are mainly repos.19:58
*** vishwanathj has quit IRC19:58
cloudnullmichaelgugino: you can copy the networking out of the sh. scripts and the preseeds if you need them19:58
*** smatzek has quit IRC19:58
jrosserthrow some zfs in there too :)19:58
cloudnullthat'd be nice.19:58
cloudnullmichaelgugino: I wanted to mention that.19:59
cloudnullw/ LXD are you using a zfs or btrfs backend19:59
cloudnull?19:59
*** vishwanathj has joined #openstack-ansible19:59
michaelguginofor nova-lxd I only wrote plays to account for directory backed storage, though it is configurable for others, I did not test it.20:00
jrosserso i've started from a greenfield environment - and build everyhting prerequisite to OSA from scratch with xenial/zfs/LXD20:00
cloudnullI ran into an issue with the lxd compute where it was failing to provision a flavor w/ ephemeral storage when initalized w/ a dir storage type20:00
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Adjust docs for Ocata  https://review.openstack.org/39196420:02
cloudnullonce i re-initialized it with a loopback file it was all happy but it may be good to expose some of those options in a later relesae.20:02
cloudnulljrosser: that's awesome ! how is zfs working ?20:02
cloudnulli know prometheanfire has been using zfs on linux for some time though I've never messed with it on linux, let alone ubuntu.20:03
*** schwicht has quit IRC20:03
*** hughmFLEXin has quit IRC20:05
jrossercloudnull: imho it's awesome. starting a new lxd is < 1 second as its all COW20:05
jrosserthats on top of raidz3 / hdd20:05
*** gouthamr has quit IRC20:06
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Adjust docs for Ocata  https://review.openstack.org/39196420:09
*** hughmFLEXin has joined #openstack-ansible20:12
michaelguginojrosser, that's awesome.  Awesome tweet, kevin20:12
jrossercloudnull: i figured that a multinode aio would maybe need much less disk space on a LXD/zfs setup20:13
*** gouthamr has joined #openstack-ansible20:14
spotzmhayden: in that patch your referring to mitaka for documentation, is that right?20:16
mhaydenspotz: not sure what you're asking20:17
spotzmhayden: line 6320:17
spotzmhayden: never mind line went off the screen20:17
*** DanyC has joined #openstack-ansible20:19
openstackgerritNish Patwa(nishpatwa_) proposed openstack/openstack-ansible-ops: Added metric collection plugins and kapacitor scripts  https://review.openstack.org/37913820:22
*** schwicht has joined #openstack-ansible20:22
openstackgerritNish Patwa(nishpatwa_) proposed openstack/openstack-ansible-ops: Added metric collection plugins and kapacitor scripts  https://review.openstack.org/37913820:25
*** DanyC has left #openstack-ansible20:27
*** schwicht has quit IRC20:33
*** schwicht has joined #openstack-ansible20:39
*** dxiri has joined #openstack-ansible20:41
*** jheroux has quit IRC20:49
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Remove packages according to STIG  https://review.openstack.org/39197220:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Remove packages according to STIG  https://review.openstack.org/39197220:53
*** h5t4 has quit IRC20:53
*** messy has joined #openstack-ansible20:55
mhaydenwriting patches is harder with kids running around after eating halloween candy20:55
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Remove packages according to STIG  https://review.openstack.org/39197220:57
*** michaelgugino has quit IRC20:59
*** schwicht has quit IRC20:59
*** chris_hultin is now known as chris_hultin|AWA21:01
*** c-mart1 has joined #openstack-ansible21:05
*** c-mart has quit IRC21:05
*** jamielennox|away is now known as jamielennox21:06
*** DanyC has joined #openstack-ansible21:06
*** javeriak has quit IRC21:07
*** javeriak has joined #openstack-ansible21:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Remove packages according to STIG  https://review.openstack.org/39197221:10
*** DanyC has quit IRC21:11
*** johnmilton has joined #openstack-ansible21:12
*** v1k0d3n has joined #openstack-ansible21:12
*** javeriak has quit IRC21:13
*** vishwanathj has quit IRC21:17
*** v1k0d3n has quit IRC21:17
*** vishwanathj has joined #openstack-ansible21:18
*** openstackgerrit has quit IRC21:18
*** thorst has quit IRC21:19
*** openstackgerrit has joined #openstack-ansible21:19
*** thorst has joined #openstack-ansible21:19
*** mmarkus has joined #openstack-ansible21:19
*** mmarkus has quit IRC21:22
*** schwicht has joined #openstack-ansible21:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Remove packages according to STIG  https://review.openstack.org/39197221:23
*** thorst has quit IRC21:23
*** askb has joined #openstack-ansible21:29
*** vishwanathj has quit IRC21:29
c-mart1admin0, have you ever tried using one Ceph cluster for multiple OpenStack clouds?21:29
admin0single ceph, multiple osa deployments ?21:30
*** vishwanathj has joined #openstack-ansible21:30
cloudnullc-mart1: did you ever get the admin ssl bits worked out?21:30
c-mart1admin0, yes. cloudnull, yes.21:31
admin0c-mart1: good idea .. i am always looking around for what more i can do with osa :D21:31
admin0i will try this by tomorrow and let you know :)21:31
admin0i have a setup already runnig with osa and ceph and was deploying a new one21:32
admin0will try to point to the same ceph cluster, same pool21:32
admin0theoritically, it should work fine21:32
*** poopcat has joined #openstack-ansible21:32
c-mart1admin0 awesome. my only question is how it sets up auth. I know OSA connects to your Ceph monitor node and sets up some users. I don't know if setting up a second cloud would break existing auth for an existing cloud. looking forward to hear what you find21:33
*** flg has quit IRC21:34
admin0c-mart1: osa does nto define the usernames21:34
admin0it needs to be present in the ceph .. osa just uses it21:34
admin0you need to have a working ceph (with accounts and pools ) for osa to use it21:34
c-mart1cloudnull, it was pretty straightforward to secure the keystone admin API with HTTPS. all I had to do was override some variables. I was going to write up something on how to do it. I'd be stoked to build some docs for the OSA project, if the maintainers are open to it21:35
cloudnull++ that'd be awesome21:36
*** vishwanathj has quit IRC21:36
*** vishwanathj has joined #openstack-ansible21:37
*** kylek3h has quit IRC21:37
*** vishwanathj has quit IRC21:37
admin0c-mart1:  www.openstackfaq.com — i am finalizing the osa (core)+ newton + ssl + swift + billing + monitoring stuff :D21:38
*** vishwanathj has joined #openstack-ansible21:38
admin0documentation21:38
admin0+ceph with 3 pools for cinder ( sata, ssd and hybrid ( sata with ssd caching tier)21:41
admin0so when creating volumes, people have a choice21:41
*** johnmilton has quit IRC21:43
*** thorst has joined #openstack-ansible21:45
c-mart1by "caching tier" do you just mean SSD journal partitions for writes, or a full-blown tier a la http://docs.ceph.com/docs/jewel/rados/operations/cache-tiering/ ?21:48
*** thorst has quit IRC21:49
*** oanson has quit IRC21:56
admin0full blown one21:57
*** v1k0d3n has joined #openstack-ansible22:00
*** v1k0d3n has quit IRC22:00
*** v1k0d3n has joined #openstack-ansible22:01
*** jperry has quit IRC22:19
*** agrebennikov has joined #openstack-ansible22:21
*** agrebennikov has quit IRC22:22
*** gouthamr has quit IRC22:23
*** agrebennikov has joined #openstack-ansible22:23
*** Mudpuppy_ is now known as Mudpuppy22:25
*** agrebennikov has joined #openstack-ansible22:25
*** agrebennikov has quit IRC22:29
*** karimb has quit IRC22:31
*** f13o has joined #openstack-ansible22:32
*** thorst has joined #openstack-ansible22:37
*** karimb has joined #openstack-ansible22:41
*** jwitko has joined #openstack-ansible22:43
*** klamath has quit IRC22:52
*** haad1 has quit IRC22:59
*** yangtong has joined #openstack-ansible23:01
*** thorst has quit IRC23:03
*** thorst has joined #openstack-ansible23:04
*** spotz is now known as spotz_zzz23:07
*** yangtong has quit IRC23:09
*** asettle has quit IRC23:11
*** TxGirlGeek has quit IRC23:15
*** thorst has quit IRC23:17
*** kylek3h has joined #openstack-ansible23:22
*** clsacramento has quit IRC23:25
*** clsacramento has joined #openstack-ansible23:26
*** ianw has quit IRC23:30
*** hughmFLEXin has quit IRC23:34
*** retreved has quit IRC23:34
*** retreved has joined #openstack-ansible23:35
*** hughmFLEXin has joined #openstack-ansible23:36
*** weezS has quit IRC23:52
*** f13o has quit IRC23:53
*** ianw has joined #openstack-ansible23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!