Monday, 2016-12-05

*** sdake has quit IRC00:08
*** woodard has quit IRC00:17
*** woodard has joined #openstack-ansible00:17
openstackgerritNeill Cox proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441900:17
*** kong_ has joined #openstack-ansible00:26
*** Jeffrey4l has quit IRC00:29
*** Jeffrey4l has joined #openstack-ansible00:30
*** galstrom is now known as galstrom_zzz00:32
openstackgerritgecong proposed openstack/openstack-ansible-os_aodh: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40664800:33
*** weezS has joined #openstack-ansible00:35
*** kylek3h is now known as kylek3h_away00:38
openstackgerritgecong proposed openstack/openstack-ansible-os_ceilometer: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665000:41
*** javeriak has quit IRC00:43
openstackgerritgecong proposed openstack/openstack-ansible-os_tempest: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665100:44
*** thorst_ has joined #openstack-ansible00:50
*** May-meimei has joined #openstack-ansible00:57
*** thorst_ has quit IRC00:58
*** hfu has joined #openstack-ansible01:00
openstackgerritgecong proposed openstack/openstack-ansible-os_rally: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665301:04
*** hfu has quit IRC01:06
openstackgerritgecong proposed openstack/openstack-ansible-rsyslog_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665501:14
*** vnogin has quit IRC01:17
openstackgerritgecong proposed openstack/openstack-ansible-galera_client: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665801:26
*** Jack_Iv has joined #openstack-ansible01:28
openstackgerritgecong proposed openstack/openstack-ansible-os_zaqar: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40666001:32
*** Jack_Iv has quit IRC01:33
*** rmelero has joined #openstack-ansible01:38
*** May-meimei has quit IRC01:40
*** rmelero has quit IRC01:44
*** rmelero has joined #openstack-ansible01:45
*** thorst_ has joined #openstack-ansible01:45
*** thorst_ has quit IRC01:47
*** williamcaban has quit IRC01:47
*** rmelero_ has joined #openstack-ansible01:47
*** rmelero_ has quit IRC01:48
*** williamcaban has joined #openstack-ansible01:48
*** rmelero has quit IRC01:48
*** rmelero_ has joined #openstack-ansible01:48
*** rmelero_ has quit IRC01:48
*** rmelero has joined #openstack-ansible01:49
*** rmelero has joined #openstack-ansible01:49
*** askb has quit IRC01:49
*** williamcaban has quit IRC01:52
*** hfu has joined #openstack-ansible02:00
*** rmelero has quit IRC02:13
*** williamcaban has joined #openstack-ansible02:18
*** Jack_Iv has joined #openstack-ansible02:37
*** sdake_ has joined #openstack-ansible02:39
*** Jack_Iv has quit IRC02:42
*** Mudpuppy has quit IRC02:44
*** Mudpuppy has joined #openstack-ansible02:44
*** hfu has quit IRC02:45
*** hfu has joined #openstack-ansible02:46
*** hfu has quit IRC02:49
*** Mudpuppy has quit IRC02:49
*** hfu has joined #openstack-ansible02:50
*** sdake_ has quit IRC02:51
*** thorst_ has joined #openstack-ansible02:52
*** severion has quit IRC02:58
*** thorst_ has quit IRC03:01
*** javeriak has joined #openstack-ansible03:09
*** thorst_ has joined #openstack-ansible03:11
*** thorst_ has quit IRC03:12
*** hfu has quit IRC03:13
*** Mudpuppy has joined #openstack-ansible03:15
*** hfu has joined #openstack-ansible03:16
*** rstarmer has quit IRC03:26
*** Jack_Iv has joined #openstack-ansible03:27
*** May-meimei has joined #openstack-ansible03:30
*** Jack_Iv has quit IRC03:31
openstackgerritUros Orozel proposed openstack/openstack-ansible-os_ironic: Fixes issues with special characters in password.  https://review.openstack.org/40668203:32
*** javeriak has quit IRC03:36
*** adrian_otto has joined #openstack-ansible03:40
*** dxiri has joined #openstack-ansible03:40
*** hfu has quit IRC03:42
*** adrian_otto has quit IRC03:43
*** dxiri has quit IRC03:44
*** hfu has joined #openstack-ansible03:44
*** dxiri has joined #openstack-ansible03:44
*** dxiri has quit IRC03:44
*** javeriak has joined #openstack-ansible03:44
*** adrian_otto has joined #openstack-ansible03:45
*** dxiri has joined #openstack-ansible03:45
*** hfu has quit IRC03:53
*** hfu has joined #openstack-ansible03:56
*** hfu has quit IRC03:58
openstackgerritUros Orozel proposed openstack/openstack-ansible-os_nova: Fixes incorrect variable used for ironic user name  https://review.openstack.org/40668903:59
*** dxiri has quit IRC04:08
*** javeriak has quit IRC04:09
*** adrian_otto has quit IRC04:11
*** thorst_ has joined #openstack-ansible04:12
*** v1k0d3n has joined #openstack-ansible04:16
*** Jack_Iv has joined #openstack-ansible04:16
*** dxiri has joined #openstack-ansible04:18
*** javeriak has joined #openstack-ansible04:19
*** Jack_Iv has quit IRC04:20
*** thorst_ has quit IRC04:21
*** adrian_otto has joined #openstack-ansible04:50
*** sdake has joined #openstack-ansible04:50
*** adrian_otto has quit IRC05:02
*** adrian_otto has joined #openstack-ansible05:04
*** rstarmer has joined #openstack-ansible05:08
*** dxiri has quit IRC05:09
*** adrian_otto has quit IRC05:12
*** dxiri has joined #openstack-ansible05:12
*** dxiri has quit IRC05:13
*** dxiri has joined #openstack-ansible05:13
*** Jack_Iv has joined #openstack-ansible05:14
*** Jack_Iv has quit IRC05:19
*** thorst_ has joined #openstack-ansible05:19
*** sdake has quit IRC05:26
*** thorst_ has quit IRC05:26
*** chhavi has joined #openstack-ansible05:28
*** janki has joined #openstack-ansible05:34
*** Jack_Iv has joined #openstack-ansible05:44
*** Jack_Iv_ has joined #openstack-ansible05:48
*** Jack_Iv has quit IRC05:49
*** Jeffrey4l has quit IRC05:51
*** Jeffrey4l has joined #openstack-ansible05:51
*** mgagne has quit IRC05:53
*** mgagne has joined #openstack-ansible05:55
*** mgagne is now known as Guest5173705:55
*** hfu has joined #openstack-ansible06:05
*** weezS has quit IRC06:08
*** hfu has quit IRC06:15
*** Mudpuppy has quit IRC06:15
*** Mudpuppy has joined #openstack-ansible06:16
*** adrian_otto has joined #openstack-ansible06:17
*** Mudpuppy has quit IRC06:20
*** adrian_otto has quit IRC06:21
*** Jeffrey4l has quit IRC06:24
*** thorst_ has joined #openstack-ansible06:25
*** hfu has joined #openstack-ansible06:31
*** thorst_ has quit IRC06:31
*** Jeffrey4l has joined #openstack-ansible06:36
*** dxiri has quit IRC06:39
*** pjm6_ has joined #openstack-ansible06:46
openstackgerritTuan Luong-Anh proposed openstack/openstack-ansible: Replaces uuid.uuid4 with uuidutils.generate_uuid()  https://review.openstack.org/40674106:47
*** mfisch has quit IRC06:49
*** bpetit_ has joined #openstack-ansible06:49
*** kong_ has quit IRC06:50
*** castulo has quit IRC06:50
*** mfisch has joined #openstack-ansible06:52
*** mfisch has quit IRC06:53
*** mfisch has joined #openstack-ansible06:53
*** castulo has joined #openstack-ansible06:53
*** bpetit has quit IRC06:53
*** pjm6 has quit IRC06:53
*** ioni has quit IRC06:56
*** ioni has joined #openstack-ansible06:57
*** ioni is now known as Guest8459306:57
*** Jack_Iv has joined #openstack-ansible06:59
*** Jack_Iv_ has quit IRC06:59
*** prometheanfire has quit IRC07:09
*** prometheanfire has joined #openstack-ansible07:11
*** hw_wutianwei has joined #openstack-ansible07:14
*** hw_wutianwei has quit IRC07:15
*** hw_wutianwei has joined #openstack-ansible07:15
*** oanson has joined #openstack-ansible07:16
*** Guest84593 is now known as ioni07:16
*** ioni is now known as Guest5427007:17
*** May-meimei has quit IRC07:17
*** hfu has quit IRC07:18
*** Oku_OS-away is now known as Oku_OS07:18
*** hfu has joined #openstack-ansible07:22
*** drifterza_ has joined #openstack-ansible07:25
*** Jack_Iv has quit IRC07:26
*** gtrxcb has joined #openstack-ansible07:26
*** Jack_Iv has joined #openstack-ansible07:26
*** javeriak has quit IRC07:27
*** thorst_ has joined #openstack-ansible07:30
*** drifterza_ is now known as drifterza07:30
*** Jack_Iv has quit IRC07:31
*** thorst_ has quit IRC07:36
*** Jack_Iv has joined #openstack-ansible07:44
*** rstarmer has quit IRC07:45
*** rstarmer has joined #openstack-ansible07:47
*** faizy has joined #openstack-ansible07:48
*** jamesdenton has quit IRC07:48
*** jamesdenton has joined #openstack-ansible07:50
*** May-meimei has joined #openstack-ansible07:53
*** v1k0d3n has quit IRC07:59
*** askb has joined #openstack-ansible08:00
*** drifterza has quit IRC08:01
*** drifterza has joined #openstack-ansible08:01
*** openstackgerrit has quit IRC08:03
*** drifterza_ has joined #openstack-ansible08:05
*** hybridpollo has quit IRC08:07
*** drifterza has quit IRC08:08
*** drifterza__ has joined #openstack-ansible08:11
*** drifterza_ has quit IRC08:15
*** chhavi has quit IRC08:16
*** Guest54270 is now known as ioni08:17
*** ioni is now known as Guest9281308:18
*** openstackgerrit has joined #openstack-ansible08:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_server: Remove pip_install as meta-dependency  https://review.openstack.org/40679408:23
*** hybridpollo has joined #openstack-ansible08:27
*** chhavi has joined #openstack-ansible08:27
prometheanfireodyssey4me: up early?08:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build: Remove static indexing from repo build process  https://review.openstack.org/40679808:29
odyssey4meprometheanfire not really, it's 8:29 am08:29
prometheanfirewell, nn time here08:30
prometheanfireso cya tomorrow08:30
*** kylek3h__ has joined #openstack-ansible08:31
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build: Copy get-pip script into the release folder  https://review.openstack.org/40680208:33
*** thorst_ has joined #openstack-ansible08:34
*** kylek3h_away has quit IRC08:34
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Use get-pip script from repo release folder  https://review.openstack.org/40680308:34
*** faizy_ has joined #openstack-ansible08:37
*** faizy has quit IRC08:37
*** jamielennox is now known as jamielennox|away08:40
*** faizy has joined #openstack-ansible08:41
*** thorst_ has quit IRC08:41
*** faizy_ has quit IRC08:44
*** rgogunskiy has joined #openstack-ansible08:44
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Apply pam_faillock restrictions [+Docs]  https://review.openstack.org/40554008:47
*** drifterza__ has quit IRC08:55
*** Jack_Iv_ has joined #openstack-ansible08:57
*** chhavi has quit IRC09:00
*** chhavi has joined #openstack-ansible09:01
*** karimb has joined #openstack-ansible09:02
*** h5t4 has joined #openstack-ansible09:04
openstackgerritMerged openstack/openstack-ansible-security: Apply pam_faillock restrictions [+Docs]  https://review.openstack.org/40554009:04
*** asettle has joined #openstack-ansible09:08
*** Jeffrey4l has quit IRC09:11
*** Guest92813 is now known as ioni09:18
*** ioni is now known as Guest5267809:18
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Disable accounts w/expired passwords [+Docs]  https://review.openstack.org/40630309:19
*** vnogin has joined #openstack-ansible09:19
openstackgerritMerged openstack/openstack-ansible: Update all SHAs for 13.3.10  https://review.openstack.org/40606409:23
*** Jack_Iv_ has quit IRC09:30
*** kong_ has joined #openstack-ansible09:31
*** Jack_Iv_ has joined #openstack-ansible09:31
*** May-meimei has quit IRC09:33
*** Jack_Iv_ has quit IRC09:35
*** gtrxcb has quit IRC09:36
*** Jack_Iv_ has joined #openstack-ansible09:39
*** thorst_ has joined #openstack-ansible09:39
*** Jack_Iv_ has quit IRC09:41
*** Jack_Iv_ has joined #openstack-ansible09:41
openstackgerritMerged openstack/openstack-ansible: Update all SHAs for 14.0.4  https://review.openstack.org/40604809:43
evrardjpgood morning everyone09:45
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Allow X-History-Location versioned_writes  https://review.openstack.org/40685509:45
*** thorst_ has quit IRC09:45
*** Jack_Iv_ has quit IRC09:46
*** chhavi has quit IRC09:49
*** hfu has quit IRC09:51
odyssey4meo/09:52
oansonMorning09:56
*** paulfantom has joined #openstack-ansible09:57
andymccrmorning morning!09:57
*** pmannidi has quit IRC09:59
oansonevrardjp, odyssey4me, I'd be happy if you could look at the dragonflow deployment patch ( https://review.openstack.org/#/c/391524/ )10:03
oansonI think it's becoming very mature, and I'd be happy for some comments10:03
odyssey4meoanson any idea why it's still failing the test?10:04
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441910:05
oansonI'll look into it. The dragonflow fullstack tests will continue failing for now for a few reasons: 1. qos and metadata are not being installed yet. I want to wait with that to a future patch since it's not a core requirement 2. Some fullstack tests rely on Nova being installed. These tests will have to be corrected on the dragonflow side. 3. There are bugs in dragonflow or the fullstack tests, which are geared towards devsta10:06
oansonck deployment only at the moment10:06
*** paulfantom has quit IRC10:06
odyssey4meok, personally I'm good with letting something like this through (assuming I find nothing wrong in review), then you continuing to work on it to finalise it10:07
odyssey4meit's getting a bit large, so it'd be nice to chunk it up a little10:07
odyssey4meis there a way that you could perhaps disable some of the tests which are causing the failures?10:07
odyssey4me(adding TODO's as you go)10:07
oansonodyssey4me, yes. I can have subunit only run predefined tests of the basic functionality (e.g. l3, security groups) and re-add the rest as we go10:08
oansonre chunking it up, I am not sure how it could be done.10:09
odyssey4meoanson that'd be a good option - the ideal is to have a passing test, even if it skips some thing, then we can move the test to voting to prevent regression10:09
odyssey4methat way when you add new test functionality you can remove the appropriate skips10:09
oansonAll right. I'll do that10:09
odyssey4meit'd be good to perhaps itemise the bits you intend to do in follow-up patches in the commit msg10:09
oansonSure10:10
openstackgerritMerged openstack/openstack-ansible: Inventory refactor SystemExit uses removed  https://review.openstack.org/40045310:10
openstackgerritMerged openstack/openstack-ansible: Inventory Generation rename vars  https://review.openstack.org/40146010:10
*** electrofelix has joined #openstack-ansible10:11
oansonodyssey4me, thanks for your help!10:12
evrardjpandymccr: you're right it's only for final10:12
andymccrevrardjp: ahh ok good, saves me having to look it up again then :D10:12
*** vnogin has quit IRC10:12
evrardjpoanson: I agree with odyssey4me, it's better that way10:14
evrardjpI will have a look at the patch10:14
evrardjplike I told you at the beginning ;)10:14
*** vnogin has joined #openstack-ansible10:15
*** Mudpuppy has joined #openstack-ansible10:19
*** Guest52678 is now known as ioni10:19
odyssey4meoanson otherwise it looks good to me - I would prefer to see logan- and evrardjp's reviews for it though as they understand the mechanics of networking10:19
odyssey4mefrom a patch standpoint it looks fine - comments in review10:19
*** ioni is now known as Guest4599710:19
*** Mudpuppy has quit IRC10:24
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441910:25
*** stuartgr has joined #openstack-ansible10:30
*** Jack_Iv_ has joined #openstack-ansible10:30
*** boogibugs has quit IRC10:32
*** Jack_Iv_ has quit IRC10:35
*** chhavi has joined #openstack-ansible10:45
*** h5t4 has quit IRC10:47
*** chhavi has quit IRC10:50
*** fxpester has joined #openstack-ansible10:57
*** Jack_Iv has quit IRC10:59
*** rgogunskiy has quit IRC11:07
*** thorst_ has joined #openstack-ansible11:07
*** woodard has quit IRC11:08
*** deadnull has joined #openstack-ansible11:12
*** thorst_ has quit IRC11:12
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441911:14
*** Jack_Iv has joined #openstack-ansible11:15
*** Guest45997 is now known as ioni11:20
*** ioni is now known as Guest8898611:20
*** faizy_ has joined #openstack-ansible11:26
*** faizy has quit IRC11:30
*** hybridpollo has quit IRC11:31
*** askb has quit IRC11:37
*** Jack_Iv has quit IRC11:43
*** Jack_Iv has joined #openstack-ansible11:56
*** Jack_Iv has quit IRC12:01
*** hfu has joined #openstack-ansible12:02
*** Matias has joined #openstack-ansible12:03
*** Jack_Iv has joined #openstack-ansible12:06
*** thorst_ has joined #openstack-ansible12:10
*** Jack_Iv has quit IRC12:11
*** thorst_ has quit IRC12:16
*** karimb has quit IRC12:19
*** Guest88986 is now known as ioni12:20
*** ioni is now known as Guest9286412:21
*** sliver has quit IRC12:28
*** sliver has joined #openstack-ansible12:29
*** faizy_ has quit IRC12:30
*** boogibugs has joined #openstack-ansible12:31
*** retreved has joined #openstack-ansible12:32
*** sdake has joined #openstack-ansible12:41
*** h5t4 has joined #openstack-ansible12:45
*** h5t4 has quit IRC12:49
*** hw_wutianwei has quit IRC12:50
*** thorst_ has joined #openstack-ansible12:50
*** johnmilton has joined #openstack-ansible12:58
*** v1k0d3n has joined #openstack-ansible12:59
*** jamesdenton has quit IRC12:59
*** Jack_Iv_ has joined #openstack-ansible13:05
*** kong_ has quit IRC13:10
mhaydenbuenos dias13:10
*** Jack_Iv_ has quit IRC13:10
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova: Nova upgrade testing.  https://review.openstack.org/40017813:11
*** strattao has joined #openstack-ansible13:13
*** pjm6_ has quit IRC13:15
mgariepymorning everyone13:17
strattaogood morning13:18
andymccrmorning :)13:18
asettleo/13:19
*** Guest92864 is now known as ioni13:21
*** ioni is now known as Guest9843313:22
*** strattao_ has joined #openstack-ansible13:23
*** strattao has quit IRC13:23
*** strattao_ is now known as strattao13:23
*** janki has quit IRC13:31
*** vnogin has quit IRC13:34
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: [WIP] Add CentOS support for os_ceilometer role  https://review.openstack.org/40544413:37
*** karimb has joined #openstack-ansible13:39
*** jheroux has joined #openstack-ansible13:40
*** hfu has quit IRC13:48
*** karimb_ has joined #openstack-ansible13:49
*** karimb has quit IRC13:49
*** Jeffrey4l has joined #openstack-ansible13:50
*** karimb_ has quit IRC13:51
*** karimb has joined #openstack-ansible13:52
*** deadnull has quit IRC13:59
*** schwicht has joined #openstack-ansible14:01
*** cathrichardson_z has joined #openstack-ansible14:01
*** karimb has quit IRC14:04
*** oanson has quit IRC14:04
*** cathrich_ has joined #openstack-ansible14:05
*** cathrichardson_z has quit IRC14:06
*** vnogin has joined #openstack-ansible14:07
*** schwicht has quit IRC14:09
*** schwicht has joined #openstack-ansible14:10
*** karimb has joined #openstack-ansible14:11
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: [WIP] Add CentOS support for os_ceilometer role  https://review.openstack.org/40544414:11
*** cathrich_ is now known as cathrichardson14:11
openstackgerritMerged openstack/openstack-ansible-os_swift: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652614:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Verify password age limits [+Docs]  https://review.openstack.org/40635314:14
openstackgerritMerged openstack/openstack-ansible-lxc_container_create: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652914:14
openstackgerritMerged openstack/openstack-ansible-ops: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652814:14
openstackgerritMerged openstack/openstack-ansible-os_gnocchi: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652114:14
openstackgerritMerged openstack/openstack-ansible-os_horizon: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652714:14
openstackgerritMerged openstack/openstack-ansible-os_neutron: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652414:14
openstackgerritMerged openstack/openstack-ansible-rsyslog_server: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665514:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable automatic package updates [+Docs]  https://review.openstack.org/40635814:16
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40651814:16
openstackgerritMerged openstack/openstack-ansible-galera_client: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665814:16
openstackgerritMerged openstack/openstack-ansible-os_aodh: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40664814:16
openstackgerritMerged openstack/openstack-ansible-os_ceilometer: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665014:16
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652514:16
openstackgerritMerged openstack/openstack-ansible-os_glance: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40651714:16
openstackgerritMerged openstack/openstack-ansible-os_rally: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665314:16
openstackgerritMerged openstack/openstack-ansible-os_tempest: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40665114:17
openstackgerritMerged openstack/openstack-ansible-os_zaqar: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40666014:17
openstackgerritMerged openstack/openstack-ansible-security: Delete deprecated Hacking in tox.ini  https://review.openstack.org/40652214:17
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable AIDE [+Docs]  https://review.openstack.org/40563314:17
*** karimb has quit IRC14:19
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable automatic package updates [+Docs]  https://review.openstack.org/40635814:21
*** Mudpuppy has joined #openstack-ansible14:21
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set grub2 password [+Docs]  https://review.openstack.org/40560414:22
*** Guest98433 is now known as ioni14:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode to 0750 or less [+Docs]  https://review.openstack.org/40632914:23
*** ioni is now known as Guest7571414:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Extend get_users module to get groups  https://review.openstack.org/40628814:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for groups that don't exist [+Docs]  https://review.openstack.org/40628914:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for removing default accounts  https://review.openstack.org/40561514:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Verify password age limits [+Docs]  https://review.openstack.org/40635314:25
mhaydenhooray for merge conflicts14:25
*** fguillot has joined #openstack-ansible14:25
mgariepymhayden, https://review.openstack.org/#/c/406358 will that update everything or just the security updates ?14:26
*** jamesdenton has joined #openstack-ansible14:26
*** dxiri has joined #openstack-ansible14:27
*** karimb has joined #openstack-ansible14:27
*** Mudpuppy has quit IRC14:27
*** karimb has quit IRC14:31
*** woodard has joined #openstack-ansible14:31
*** karimb has joined #openstack-ansible14:33
*** woodard has quit IRC14:33
*** woodard has joined #openstack-ansible14:33
*** schwicht has quit IRC14:38
*** vnogin has quit IRC14:38
*** vnogin has joined #openstack-ansible14:39
mhaydenmgariepy: everything14:40
mhaydenmgariepy: we could change update_cmd to 'security'14:41
*** vnogin has quit IRC14:41
mhaydenor make that configurable14:42
*** vnogin has joined #openstack-ansible14:42
cloudnullmornings14:44
andymccrmorning!14:44
*** karimb has quit IRC14:45
*** whiteveil has joined #openstack-ansible14:47
*** whiteveil has left #openstack-ansible14:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix status/tag for RHEL-07-010040  https://review.openstack.org/40700314:49
*** Jeffrey4l has quit IRC14:51
*** Jeffrey4l has joined #openstack-ansible14:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for removing unnecessary accounts  https://review.openstack.org/40700414:53
*** schwicht has joined #openstack-ansible14:54
*** zz_pwnall1337 is now known as pwnall133714:55
mgariepyok mhayden14:55
*** karimb has joined #openstack-ansible14:56
*** woodard has quit IRC14:57
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: [WIP] Add CentOS support for os_ceilometer role  https://review.openstack.org/40544415:02
*** karimb has quit IRC15:04
*** Jack_Iv_ has joined #openstack-ansible15:06
*** karimb has joined #openstack-ansible15:08
openstackgerritMerged openstack/openstack-ansible-security: [Docs] Exception for removing default accounts  https://review.openstack.org/40561515:09
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632915:14
*** karimb has quit IRC15:15
*** Jack_Iv_ has quit IRC15:17
*** Jack_Iv has joined #openstack-ansible15:19
*** Guest75714 is now known as ioni15:23
*** ioni is now known as Guest2956015:24
openstackgerritKyle L. Henderson proposed openstack/openstack-ansible-galera_server: Fix galera max connections calculation  https://review.openstack.org/40651515:27
*** Mudpuppy has joined #openstack-ansible15:28
*** chris_hultin|AWA is now known as chris_hultin15:34
*** pjm6 has joined #openstack-ansible15:34
*** oanson has joined #openstack-ansible15:35
*** Jack_Iv has quit IRC15:36
openstackgerritMerged openstack/openstack-ansible-repo_build: Remove static indexing from repo build process  https://review.openstack.org/40679815:36
*** Jack_Iv has joined #openstack-ansible15:37
*** gouthamr has joined #openstack-ansible15:39
*** adrian_otto has joined #openstack-ansible15:40
*** whiteveil has joined #openstack-ansible15:43
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: [WIP] Add CentOS support for os_ceilometer role  https://review.openstack.org/40544415:43
*** phalmos has joined #openstack-ansible15:44
openstackgerritMerged openstack/openstack-ansible-os_ironic: Fixes issues with special characters in password.  https://review.openstack.org/40668215:44
*** weezS has joined #openstack-ansible15:45
*** cmart has joined #openstack-ansible15:46
*** spotz_zzz is now known as spotz15:47
*** TobiSan has quit IRC15:47
*** TobiSan has joined #openstack-ansible15:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632915:50
*** galstrom_zzz is now known as galstrom15:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632915:51
spotzodyssey4me: you here?15:54
*** michaelgugino has joined #openstack-ansible15:55
*** Jack_Iv has quit IRC15:55
*** Jack_Iv has joined #openstack-ansible15:56
*** vnogin has quit IRC15:57
*** vnogin has joined #openstack-ansible15:57
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632916:00
*** vnogin has quit IRC16:00
*** vnogin has joined #openstack-ansible16:00
evrardjpandymccr: are you aware of ppl using swift_pypy_enabled?16:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632916:02
andymccrevrardjp: yeah had some chats with people at the summit who are using it and said it works really well - just wish i could get the damn gate job to work16:03
andymccralthough they did build pypy from source rather than existing package16:03
evrardjpoh, interesting16:04
andymccri believe it does work fine - the gate job fails because it runs out of memory16:05
*** fxpester has quit IRC16:05
andymccrand im not sure how i can cut down memory much more :(16:05
evrardjpcan we simply use more swap? (Sounds terrible, but avoids OOM)16:07
evrardjpin the gating, having a file used for swap is like 2 more commands16:07
andymccrevrardjp: i think ive done that already (could add more i guess!)16:09
*** Jack_Iv has quit IRC16:10
evrardjpMo4r memory!16:11
evrardjpthanks for the info anyway16:12
andymccrno problem - id love to see that gate pass, its close i think, it now actually starts running the tests before failing :P16:12
evrardjp:)16:13
evrardjpwe are closer to failing for real reasons16:14
spotzheheh16:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632916:15
*** vnogin has quit IRC16:15
*** vnogin has joined #openstack-ansible16:16
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_neutron: Neutron upgrade testing.  https://review.openstack.org/40018016:18
openstackgerritPraveen N proposed openstack/openstack-ansible: trivial indentation fix  https://review.openstack.org/40705416:21
*** Guest29560 is now known as ioni16:24
*** ioni is now known as Guest2496116:24
*** Jack_Iv has joined #openstack-ansible16:25
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_neutron: Neutron upgrade testing.  https://review.openstack.org/40018016:28
*** faizy_ has joined #openstack-ansible16:32
*** faizy__ has joined #openstack-ansible16:34
*** agrebennikov has joined #openstack-ansible16:35
*** faizy_ has quit IRC16:36
openstackgerritPraveen N proposed openstack/openstack-ansible: trivial indentation fix  https://review.openstack.org/40706716:44
*** Jack_Iv has quit IRC16:44
*** h5t4 has joined #openstack-ansible16:44
*** adrian_otto has quit IRC16:52
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: [WIP] Add CentOS support for os_gnocchi role  https://review.openstack.org/40707116:52
*** Jack_Iv has joined #openstack-ansible16:52
*** Jack_Iv has quit IRC16:53
*** adrian_otto has joined #openstack-ansible16:59
*** Jack_Iv has joined #openstack-ansible17:03
*** chhavi has joined #openstack-ansible17:03
*** Jack_Iv has quit IRC17:03
*** Jack_Iv has joined #openstack-ansible17:03
*** h5t4 has quit IRC17:04
*** h5t4 has joined #openstack-ansible17:06
openstackgerritJonte Watford proposed openstack/openstack-ansible-os_tempest: Updates Tempest.conf.j2  https://review.openstack.org/39927017:07
*** whiteveil has quit IRC17:09
*** asettle has quit IRC17:09
*** vnogin has quit IRC17:15
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: [WIP] Add CentOS support for os_gnocchi role  https://review.openstack.org/40707117:22
*** vnogin has joined #openstack-ansible17:23
openstackgerritMerged openstack/openstack-ansible: Link Calico log dir to /openstack/log  https://review.openstack.org/40662917:24
*** Guest24961 is now known as ioni17:25
*** adrian_otto1 has joined #openstack-ansible17:25
*** ioni is now known as Guest1980817:25
openstackgerritRahul U Nair proposed openstack/openstack-ansible-security: Trivial fix to the documentation  https://review.openstack.org/40709717:26
*** woodard has joined #openstack-ansible17:26
*** Guest51737 is now known as mgagne17:26
*** mgagne has quit IRC17:27
*** mgagne has joined #openstack-ansible17:27
*** sanfern has joined #openstack-ansible17:27
*** adrian_otto has quit IRC17:28
sanfernI am setting up multi node newton deployment, I am getting this errorr - # openstack-ansible -vvv setup-hosts.yml Variable files: "-e @/etc/openstack_deploy/user_ceilometer_overrides.yml -e @/etc/openstack_deploy/user_secrets.yml -e @/etc/openstack_deploy/user_variables.yml -e @/etc/openstack_deploy/user_zzz_disable_security_hardening.yml " Using /etc/ansible/ansible.cfg as config file ERROR! The file /opt/openstack-ansible/17:29
sanfernERROR! The file /opt/openstack-ansible/playbooks/inventory/dynamic_inventory.py is marked as executable, but failed to execute correctly. If this is not supposed to be an executable script, correct this with `chmod -x /opt/openstack-ansible/playbooks/inventory/dynamic_inventory.py`. Inventory script (/opt/openstack-ansible/playbooks/inventory/dynamic_inventory.py) had an execution error:17:30
sanfernAnyone can help me to resolve this issue ?17:30
*** vnogin has quit IRC17:37
*** Jack_Iv_ has joined #openstack-ansible17:38
*** Jack_Iv has quit IRC17:38
*** kstev has joined #openstack-ansible17:42
*** vnogin has joined #openstack-ansible17:43
*** sanfern has quit IRC17:44
*** Jack_Iv_ has quit IRC17:44
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Search for unlabeled device files [+Docs]  https://review.openstack.org/40710817:44
*** deadnull has joined #openstack-ansible17:45
*** dxiri has quit IRC17:45
*** Jack_Iv has joined #openstack-ansible17:46
*** dxiri has joined #openstack-ansible17:46
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632917:49
agrebennikovsanfern, are you using stable or master? First thing to try - just execute the script manually and see what happend17:49
agrebennikovmaybe there is an issue with env.d files17:49
*** Jack_Iv_ has joined #openstack-ansible17:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Search for unlabeled device files [+Docs]  https://review.openstack.org/40710817:52
*** vnogin has quit IRC17:55
*** Jack_Iv_ has quit IRC17:58
*** faizy_ has joined #openstack-ansible17:58
*** Jack_Iv has quit IRC17:59
*** Jack_Iv has joined #openstack-ansible18:00
*** rstarmer has quit IRC18:00
*** faizy__ has quit IRC18:01
*** Jack_Iv has quit IRC18:04
*** Jack_Iv has joined #openstack-ansible18:05
*** adrian_otto1 has quit IRC18:06
*** bgmccollum_ is now known as bgmccollum18:06
*** electrofelix has quit IRC18:07
*** adrian_otto has joined #openstack-ansible18:07
*** yolanda has quit IRC18:07
*** chhavi has quit IRC18:08
*** jlockwood has joined #openstack-ansible18:09
*** rstarmer has joined #openstack-ansible18:11
*** kstev has quit IRC18:13
*** PramodJayathirth has joined #openstack-ansible18:18
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: [DOCS] Updating inventory files  https://review.openstack.org/40544718:20
jmccrorysanfern: have you run the scripts/bootstrap-ansible.sh script? you might have ansible 1.9.x installed, more recent releases of openstack-ansible need ansible 218:23
*** Guest19808 is now known as ioni18:26
*** whiteveil has joined #openstack-ansible18:26
*** ioni is now known as Guest8921718:26
*** h5t4 has quit IRC18:27
*** vnogin has joined #openstack-ansible18:28
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: [DOCS] Updating inventory files  https://review.openstack.org/40544718:29
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Document and test group membership constraints  https://review.openstack.org/40552018:29
*** faizy_ has quit IRC18:30
*** deadnull has quit IRC18:32
*** vnogin has quit IRC18:34
*** rstarmer has quit IRC18:46
*** Mudpuppy_ has joined #openstack-ansible18:52
*** asettle has joined #openstack-ansible18:53
*** openstackstatus has joined #openstack-ansible18:53
*** ChanServ sets mode: +v openstackstatus18:53
*** Mudpuppy has quit IRC18:55
*** Mudpuppy_ has quit IRC18:56
*** poopcat has joined #openstack-ansible18:57
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: [WIP] Add CentOS support for os_gnocchi role  https://review.openstack.org/40707118:58
*** javeriak has joined #openstack-ansible18:59
*** stuartgr has quit IRC19:00
*** poopcat has quit IRC19:04
*** poopcat has joined #openstack-ansible19:04
*** Jack_Iv has quit IRC19:05
*** Jack_Iv has joined #openstack-ansible19:06
*** javeriak has quit IRC19:07
*** jamesdenton has quit IRC19:07
*** jamesdenton has joined #openstack-ansible19:09
*** javeriak has joined #openstack-ansible19:09
*** adrian_otto has quit IRC19:14
*** strattao has quit IRC19:14
openstackgerritMerged openstack/openstack-ansible-security: Trivial fix to the documentation  https://review.openstack.org/40709719:16
*** asettle__ has joined #openstack-ansible19:18
*** williamc_ has joined #openstack-ansible19:18
*** adrian_otto has joined #openstack-ansible19:19
*** strattao has joined #openstack-ansible19:20
*** cjmarti has joined #openstack-ansible19:20
*** NachoDuck_ has joined #openstack-ansible19:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exceptions for filesystem mounts  https://review.openstack.org/40715019:21
*** matt6434 has joined #openstack-ansible19:22
*** neillc_ has joined #openstack-ansible19:22
*** faizy has joined #openstack-ansible19:22
*** belliott_ has joined #openstack-ansible19:23
*** jrosser_ has joined #openstack-ansible19:23
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-lxc_hosts: LXC version to 2.0.6 on CentOS  https://review.openstack.org/40715219:23
*** adrian_otto has quit IRC19:24
*** rackertom_ has joined #openstack-ansible19:24
*** jmhale_ has joined #openstack-ansible19:26
*** odyssey4me_ has joined #openstack-ansible19:26
*** bapalm_ has joined #openstack-ansible19:26
*** Guest89217 is now known as ioni19:27
*** ioni is now known as Guest3532819:27
*** asettle has quit IRC19:28
*** agrebennikov has quit IRC19:28
*** schwicht has quit IRC19:28
*** boogibugs has quit IRC19:28
*** Matias has quit IRC19:28
*** castulo has quit IRC19:28
*** williamcaban has quit IRC19:28
*** noama has quit IRC19:28
*** bapalm has quit IRC19:28
*** NachoDuck has quit IRC19:28
*** jrosser has quit IRC19:28
*** mattoliverau has quit IRC19:28
*** neillc has quit IRC19:28
*** odyssey4me has quit IRC19:28
*** mrhillsman has quit IRC19:28
*** jroll has quit IRC19:28
*** jmhale has quit IRC19:28
*** rackertom has quit IRC19:28
*** belliott has quit IRC19:28
*** cjmarti is now known as castulo19:28
*** asettle__ is now known as asettle19:28
*** drwahl has joined #openstack-ansible19:28
drwahlis this the proper channel for some help with the os_server stuff in ansible? or should i search elsewhere?19:29
*** rackertom_ is now known as rackertom19:31
*** sdake_ has joined #openstack-ansible19:31
*** NachoDuck_ is now known as NachoDuck19:31
*** sdake has quit IRC19:31
*** yolanda has joined #openstack-ansible19:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715719:33
*** urahara has joined #openstack-ansible19:34
*** faizy has quit IRC19:34
*** urahara is now known as Guest3730219:35
*** noama has joined #openstack-ansible19:35
*** adrian_otto has joined #openstack-ansible19:35
*** jroll has joined #openstack-ansible19:35
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: Add CentOS support for os_gnocchi role  https://review.openstack.org/40707119:37
*** agrebennikov has joined #openstack-ansible19:37
*** codebauss has joined #openstack-ansible19:38
*** codebauss is now known as mrhillsman19:38
*** gouthamr has quit IRC19:38
oansonlogan-, hi, are you here?19:41
logan-hello19:42
logan-yep19:42
oansonI want to test dragonflow in AIO as well19:42
oansonCould you share how you set it up?19:42
oanson(Please)19:42
*** vnogin has joined #openstack-ansible19:43
logan-yes definitely19:43
logan-i will get the config going and send you a link19:43
oansonThanks19:44
*** vnogin has quit IRC19:48
*** adrian_otto has quit IRC19:50
*** cbits has joined #openstack-ansible19:51
cbitsAnyone seen this error "fatal: [localhost]: FAILED! => {"failed": true, "msg": "the field 'args' has an invalid value, which appears to include a variable that is undefined. The error was: 'item' is undefined\n\nThe error appears to have been in '/etc/ansible/roles/pip_install/tasks/configure.yml': line 16, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to19:52
cbits be:\n\n\n- name: Create pip config directory\n  ^ here\n"}19:52
cbits" when running scripts/bootstrap-aio.sh    I looked at the bug list and did not see anything along these lines.19:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for user init file umask  https://review.openstack.org/40716419:53
*** sdake has joined #openstack-ansible19:53
*** drwahl has left #openstack-ansible19:54
*** adrian_otto has joined #openstack-ansible19:54
*** Mudpuppy has joined #openstack-ansible19:54
*** sdake_ has quit IRC19:56
*** johnmilton has quit IRC19:58
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for cron logging  https://review.openstack.org/40717019:59
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_aodh: [WIP] Add CentOS support for os_aodh role  https://review.openstack.org/40717120:01
*** v1k0d3n has quit IRC20:02
*** neillc_ is now known as neillc20:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717820:06
*** gus has quit IRC20:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715720:08
*** hybridpollo has joined #openstack-ansible20:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717820:09
*** gus has joined #openstack-ansible20:10
*** h5t4 has joined #openstack-ansible20:16
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable kdump [+Docs]  https://review.openstack.org/40718720:16
*** johnmilton has joined #openstack-ansible20:16
*** kong_ has joined #openstack-ansible20:19
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_aodh: [WIP] Add CentOS support for os_aodh role  https://review.openstack.org/40717120:20
*** jlockwood has quit IRC20:25
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: Add CentOS support for os_gnocchi role  https://review.openstack.org/40707120:25
*** strattao has quit IRC20:26
openstackgerritLogan V proposed openstack/openstack-ansible: Allow refspec in role fetcher  https://review.openstack.org/40719220:26
*** Guest35328 is now known as ioni20:28
*** Jack_Iv_ has joined #openstack-ansible20:28
*** ioni is now known as Guest6128620:28
*** adrian_otto has quit IRC20:29
*** adrian_otto has joined #openstack-ansible20:29
*** Jack_Iv has quit IRC20:30
*** dfflanders has joined #openstack-ansible20:32
*** Jack_Iv_ has quit IRC20:33
*** dxiri has quit IRC20:35
*** dxiri has joined #openstack-ansible20:35
*** adrian_otto has quit IRC20:39
*** adrian_otto has joined #openstack-ansible20:39
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-lxc_hosts: LXC version to 2.0.6 on CentOS  https://review.openstack.org/40715220:41
*** asettle has quit IRC20:41
*** oanson has quit IRC20:42
*** javeriak has quit IRC20:42
*** dxiri has quit IRC20:44
*** dxiri has joined #openstack-ansible20:44
*** dxiri has quit IRC20:45
*** dxiri has joined #openstack-ansible20:46
*** dxiri has quit IRC20:46
*** dxiri has joined #openstack-ansible20:46
*** aludwar has quit IRC20:47
*** schwicht has joined #openstack-ansible20:47
*** javeriak has joined #openstack-ansible20:49
*** Guest37302 has quit IRC20:50
*** Matias has joined #openstack-ansible20:50
*** jamesdenton has quit IRC20:52
*** rstarmer has joined #openstack-ansible20:52
*** adrian_otto has quit IRC20:53
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: Add CentOS support for os_gnocchi role  https://review.openstack.org/40707120:54
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_aodh: [WIP] Add CentOS support for os_aodh role  https://review.openstack.org/40717120:58
*** johnmilton has quit IRC21:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure separate filesystems exist [+Docs]  https://review.openstack.org/40719921:03
*** aludwar has joined #openstack-ansible21:07
mhaydenhah, just discovered that my debug message callback doesn't handle jinja properly :P21:08
mhaydenhttp://logs.openstack.org/57/407157/2/check/gate-openstack-ansible-security-ansible-func_rhel7-centos-7/9debb57/console.html#_2016-12-05_20_10_17_68411721:08
*** jamielennox|away is now known as jamielennox21:13
*** sdake has quit IRC21:22
*** Guest61286 is now known as ioni21:28
*** boogibugs has joined #openstack-ansible21:29
*** ioni is now known as Guest7417121:29
*** Jack_Iv has joined #openstack-ansible21:29
*** sdake has joined #openstack-ansible21:29
*** dxiri has quit IRC21:32
*** fguillot has quit IRC21:32
*** matt6434 is now known as mattoliverau21:34
*** Jeffrey4l has quit IRC21:35
*** pwnall1337 is now known as zz_pwnall133721:36
*** Jeffrey4l has joined #openstack-ansible21:36
*** v1k0d3n has joined #openstack-ansible21:38
openstackgerritMajor Hayden proposed openstack/openstack-ansible-plugins: Fix Jinja2 in debug msg callback  https://review.openstack.org/40721421:41
*** Jack_Iv has quit IRC21:43
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for cron logging  https://review.openstack.org/40717021:44
*** thorst_ has quit IRC21:47
*** javeriak has quit IRC21:48
*** whiteveil has quit IRC21:50
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715721:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717821:51
*** sdake_ has joined #openstack-ansible21:57
*** askb has joined #openstack-ansible22:00
*** sdake has quit IRC22:01
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable FIPS [+Docs]  https://review.openstack.org/40721822:01
*** adrian_otto has joined #openstack-ansible22:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715722:05
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717822:05
*** thorst has joined #openstack-ansible22:07
*** jlockwood has joined #openstack-ansible22:09
*** h5t4 has quit IRC22:10
*** thorst has quit IRC22:11
*** zz_pwnall1337 is now known as pwnall133722:18
lbragstadjmccrory i did a little more testing and found that haproxy starts issuing 401s around the same time the os_keystone role gets into https://github.com/openstack/openstack-ansible-os_keystone/blob/dc78dbbcd076acdafaea1feb079dea6a27c01626/tasks/keystone_service_setup.yml22:19
*** javeriak has joined #openstack-ansible22:19
jmccrorylbragstad : hmm interesting. i saw tons of non-20x last friday in my test run, about to run again now.22:20
lbragstadjmccrory ah - cool, so you were able to recreate?22:21
jmccroryyep, haven't dug into it much though but definitely saw some downtime22:21
lbragstadfwiw - everything looks green across the board during the upgrade up until that point22:21
lbragstadthen's is straight 401s22:22
*** javeriak has quit IRC22:22
jmccrorylooks like that's right after handlers are flushed, https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/main.yml#L125-L12822:22
lbragstadthis is interesting - here is a slice of the logs during the upgrade, which all look good22:23
lbragstadhttp://cdn.pasteraw.com/97tbdqpjwp3o81k4ih9tarfr0jbg5ix22:23
lbragstadyou can see the GET operations returning 200 and POST operations returning 20122:23
lbragstadand after the POST operation, there are 200s so we can assume the new tokens are being properly validated22:24
*** phalmos has quit IRC22:25
lbragstadthen the validations go from 200 to 401 - http://cdn.pasteraw.com/g9g3th1vem5rlan4dxuxn82usv87zre22:25
lbragstadwithout getting a new token... so for some reason, and old token isn't not considered valid at some point during the upgrade22:25
lbragstadthat pattern continues - but at some point there is a valid token create that returns a 201 - but 401 for the validation http://cdn.pasteraw.com/atkxdmwuzmiu2vy6mlkapr16gb2i8rt22:26
*** pwnall1337 is now known as zz_pwnall133722:28
jmccroryweird22:29
*** Guest74171 is now known as ioni22:29
*** ioni is now known as Guest7101222:30
*** chris_hultin is now known as chris_hultin|AWA22:31
jmccrorydid that happen just the one time? the next validation succeeds?22:31
*** schwicht has quit IRC22:32
lbragstadjmccrory nope - every validation seems to fail22:32
lbragstadhuh - weird...22:35
*** rstarmer has quit IRC22:35
*** rstarmer has joined #openstack-ansible22:36
lbragstadthis is logged on the keystone node within the same second as the first 401 is recorded in haproxy http://cdn.pasteraw.com/i3qiag1viryfjfer6i1kkem867ndcfl22:36
*** michaelgugino has quit IRC22:37
jmccrorylooks like it authenticated it?22:39
lbragstadit does - but " Invoking callback _user_callback for event identity invalidate_user_tokens internal for {'resource_info': u'c7afd9de0e4747859db4a9d11ad8dd90'} notify_event_callbacks /openstack/venvs/keystone-master/lib/python2.7/site-packages/keystone/notifications.py:29222:39
lbragstad"22:39
lbragstadlooks like it's hitting a callback - and that callback system could be issuing a revocation event22:39
*** Jack_Iv has joined #openstack-ansible22:40
*** rstarmer has quit IRC22:40
lbragstadit could be creating a revocation event for that specific user at that specific time (?)22:40
jmccroryah weird, are revocations time based or is there are there other conditions?22:40
lbragstadthere are other conditions, such as project, audit id, domain, issued_at times, etc...22:41
*** zz_pwnall1337 is now known as pwnall133722:41
*** retreved has quit IRC22:42
*** Jack_Iv has quit IRC22:44
*** javeriak has joined #openstack-ansible22:47
*** jheroux has quit IRC22:51
jmccrorygoing to try turning on the notifications queue, might be more info in those messages. keystone_ceilometer_enabled: true22:52
lbragstadjmccrory good idea - i'm seeing the notifications getting logged through oslo.messaging but i can't figure out whats triggering it22:53
*** schwicht has joined #openstack-ansible22:54
*** adrian_otto has quit IRC23:03
*** cbits has quit IRC23:03
*** schwicht has quit IRC23:05
*** rstarmer has joined #openstack-ansible23:06
*** spotz is now known as spotz_zzz23:06
* lbragstad mmmm - http://cdn.pasteraw.com/fxvzjd51dsohhlc8avqshjcilomr07s23:07
lbragstadit's a revocation event23:07
lbragstadsomething in the bootstrap is causing a revocation event to stored - which is persisted within the same second as the authenticaiton23:07
lbragstadand - this looks suspicious - https://github.com/openstack/keystone/blob/1c60b1539cf63bba79711e237df496dfa094b2c5/keystone/cmd/cli.py#L226-L23223:07
lbragstadbecause that is going to modify the user - https://github.com/openstack/keystone/blob/1c60b1539cf63bba79711e237df496dfa094b2c5/keystone/identity/core.py#L102123:08
*** whiteveil has joined #openstack-ansible23:09
jmccrorylbragstad : interesting. so bootstrap isn't actually idempotent as far as token validations are concerned?23:11
lbragstadwell - it should be completely idempotent from a data perspecitive (resource id, passwords, ect)23:11
lbragstadbecuase we catch all conflicts and move along23:12
lbragstadthat would make sense because I tried this on friday but i used `--step` during the upgrade23:13
lbragstadand everything worked23:13
lbragstadand maybe though the process of using `--step` i made the process cross into the threshold of a new second on authentication?23:14
jmccroryah ok so maybe just need a delay between tasks at that one point23:16
lbragstadmaybe - or even a delay in my benchmark script to that it doesn't try to reauthenticate within the same second as the persisting of the revocation event23:16
*** cmart has quit IRC23:16
jmccroryyep23:17
lbragstadjmccrory awesome - let me tinker with that and see if I can fix it23:17
lbragstadjmccrory thanks again for all your help!23:17
jmccrorysure, thanks a lot for testing this out. i'm going to rebuild a test environment i can help run your updated scripts against, should have it by tomorrow23:18
*** thorst has joined #openstack-ansible23:20
*** schwicht has joined #openstack-ansible23:21
*** thorst has quit IRC23:22
*** thorst has joined #openstack-ansible23:22
lbragstadjmccrory sweet - i'll let you know when i have another revision up23:29
*** thorst has quit IRC23:29
*** Guest71012 is now known as ioni23:30
*** rstarmer has quit IRC23:30
*** ioni is now known as Guest7652623:31
*** cbits has joined #openstack-ansible23:34
*** galstrom is now known as galstrom_zzz23:35
*** cmart has joined #openstack-ansible23:35
*** rstarmer has joined #openstack-ansible23:36
*** pramodrj07 has joined #openstack-ansible23:36
*** schwicht has quit IRC23:42
*** javeriak has quit IRC23:44
*** schwicht has joined #openstack-ansible23:44
*** cbits has quit IRC23:44
*** schwicht has quit IRC23:45
*** pmannidi has joined #openstack-ansible23:46
*** javeriak has joined #openstack-ansible23:47
*** deadnull has joined #openstack-ansible23:52

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!