Wednesday, 2017-01-11

*** chris_hultin|AWA is now known as chris_hultin00:05
*** jamielennox is now known as jamielennox|away00:07
*** d9k has quit IRC00:10
*** dogsec has quit IRC00:10
*** jamielennox|away is now known as jamielennox00:11
*** evrardjp has quit IRC00:11
*** jasondotstar has quit IRC00:11
*** d9k has joined #openstack-ansible00:12
*** zerick has quit IRC00:12
*** worstadmin has quit IRC00:12
*** markvoelker has quit IRC00:12
*** worstadmin has joined #openstack-ansible00:12
*** boxrick1 has quit IRC00:12
*** afranc has quit IRC00:12
*** markvoelker has joined #openstack-ansible00:12
*** zerick has joined #openstack-ansible00:13
*** alextricity25 has quit IRC00:13
*** Mudpuppy_ has quit IRC00:13
*** shasha_t_ has quit IRC00:13
*** boxrick1 has joined #openstack-ansible00:14
*** jroll has quit IRC00:14
*** dogsec has joined #openstack-ansible00:17
*** evrardjp has joined #openstack-ansible00:17
*** alextricity25 has joined #openstack-ansible00:17
*** afranc has joined #openstack-ansible00:18
*** jasondotstar has joined #openstack-ansible00:18
*** Mudpuppy_ has joined #openstack-ansible00:19
*** jroll has joined #openstack-ansible00:21
*** aludwar has quit IRC00:22
*** karimb has quit IRC00:23
*** thorst has joined #openstack-ansible00:25
*** sdake has quit IRC00:34
*** chris_hultin is now known as chris_hultin|AWA00:36
*** cmart has quit IRC00:37
*** cmart has joined #openstack-ansible00:41
*** thorst has quit IRC00:42
*** thorst has joined #openstack-ansible00:42
*** adrian_otto has joined #openstack-ansible00:44
*** thorst has quit IRC00:46
*** cmart has quit IRC00:59
*** agrebennikov has quit IRC00:59
*** rmelero has quit IRC01:06
*** rmelero has joined #openstack-ansible01:07
*** adrian_otto has quit IRC01:09
*** agrebennikov has joined #openstack-ansible01:11
*** rmelero has quit IRC01:11
*** thorst has joined #openstack-ansible01:11
*** diablo_rojo has quit IRC01:14
*** thorst has quit IRC01:16
*** xgerman has joined #openstack-ansible01:32
*** japestinho has joined #openstack-ansible01:36
*** jperry has joined #openstack-ansible01:39
*** diablo_rojo has joined #openstack-ansible01:42
*** markvoelker has quit IRC01:43
*** markvoelker has joined #openstack-ansible01:44
*** wcb has quit IRC01:45
*** williamcaban has joined #openstack-ansible01:46
*** v1k0d3n has quit IRC01:47
*** v1k0d3n has joined #openstack-ansible01:47
*** v1k0d3n has quit IRC01:47
*** v1k0d3n has joined #openstack-ansible01:48
*** markvoelker has quit IRC01:49
*** woodard has joined #openstack-ansible01:50
*** thotypous has quit IRC01:53
*** thotypous has joined #openstack-ansible01:58
*** v1k0d3n has quit IRC02:00
*** v1k0d3n has joined #openstack-ansible02:00
*** thorst has joined #openstack-ansible02:02
*** thorst has quit IRC02:02
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41852102:03
*** diablo_rojo has quit IRC02:06
*** sacharya has quit IRC02:07
*** jmccarthy has joined #openstack-ansible02:08
*** woodard has quit IRC02:10
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41864502:11
*** Jack_Iv has joined #openstack-ansible02:11
*** jmccarthy has quit IRC02:11
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41852102:14
*** dxiri has quit IRC02:15
*** asettle has joined #openstack-ansible02:16
*** Jack_Iv has quit IRC02:16
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41864602:16
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41852102:20
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41864802:21
*** asettle has quit IRC02:23
*** Mahe has quit IRC02:32
*** Mahe has joined #openstack-ansible02:34
*** vnogin has quit IRC02:34
*** dxiri has joined #openstack-ansible02:38
*** winggundamth has quit IRC02:47
*** dxiri has quit IRC02:51
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41864802:52
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41852103:01
*** sacharya has joined #openstack-ansible03:02
*** Mudpuppy_ has quit IRC03:03
*** sacharya has quit IRC03:07
*** winggundamth has joined #openstack-ansible03:07
*** thorst has joined #openstack-ansible03:20
*** thorst has quit IRC03:20
*** gouthamr has quit IRC03:21
*** diablo_rojo has joined #openstack-ansible03:27
*** dxiri has joined #openstack-ansible03:32
*** jperry has quit IRC03:32
*** jcannava has quit IRC03:34
*** markvoelker has joined #openstack-ansible03:36
*** jcannava has joined #openstack-ansible03:39
*** agrebennikov has quit IRC03:40
*** shasha_t_ has joined #openstack-ansible03:45
*** jrobinson is now known as jrobinson-afk03:48
*** jrobinson-afk has quit IRC03:52
*** sdake has joined #openstack-ansible03:55
*** jrobinson has joined #openstack-ansible03:55
*** jrobinson is now known as jrobinson-afk03:56
*** sdake has quit IRC04:00
*** sdake has joined #openstack-ansible04:01
openstackgerritMichael Carden proposed openstack/openstack-ansible-security: DOC Remove some repeated words  https://review.openstack.org/41866904:05
*** Jack_Iv has joined #openstack-ansible04:12
*** sacharya has joined #openstack-ansible04:15
*** Jack_Iv has quit IRC04:16
*** sdake has quit IRC04:18
*** sacharya has quit IRC04:20
*** woodard has joined #openstack-ansible04:28
*** jrobinson-afk is now known as jrobinson04:29
*** kysse has quit IRC04:35
*** kysse has joined #openstack-ansible04:36
*** dxiri has quit IRC04:37
*** poopcat has quit IRC04:59
*** ivve has joined #openstack-ansible05:06
*** sdake has joined #openstack-ansible05:07
*** rmelero has joined #openstack-ansible05:07
*** thorst has joined #openstack-ansible05:09
*** rmelero has quit IRC05:11
*** askb has quit IRC05:12
*** askb has joined #openstack-ansible05:12
*** thorst has quit IRC05:14
*** adrian_otto has joined #openstack-ansible05:42
*** Jack_V has joined #openstack-ansible05:44
*** adrian_otto has quit IRC05:46
*** adrian_otto has joined #openstack-ansible05:47
*** Jack_Iv has joined #openstack-ansible05:47
*** h5t4 has joined #openstack-ansible05:49
*** Jack_Iv has quit IRC05:49
*** diablo_rojo has quit IRC05:50
*** Jack_Iv has joined #openstack-ansible05:51
*** h5t4 has quit IRC05:53
*** adrian_otto has quit IRC05:58
*** woodard has quit IRC06:02
*** h5t4 has joined #openstack-ansible06:03
*** woodard has joined #openstack-ansible06:03
*** Jack_Iv has quit IRC06:07
*** Jack_Iv has joined #openstack-ansible06:07
*** h5t4 has quit IRC06:11
*** Jack_Iv_ has joined #openstack-ansible06:15
*** sacharya has joined #openstack-ansible06:16
*** Jack_Iv has quit IRC06:19
*** dfflanders has quit IRC06:19
*** Jack_Iv_ has quit IRC06:20
*** sacharya has quit IRC06:20
*** woodard has quit IRC06:23
*** woodard has joined #openstack-ansible06:24
*** pcaruana has joined #openstack-ansible06:25
*** woodard has quit IRC06:28
*** sdake has quit IRC06:45
*** h5t4 has joined #openstack-ansible06:54
*** hfu has joined #openstack-ansible06:56
*** rmelero has joined #openstack-ansible07:08
*** rmelero has quit IRC07:13
*** drifterza has joined #openstack-ansible07:17
*** udesale has joined #openstack-ansible07:19
*** Jack_Iv has joined #openstack-ansible07:21
*** woodard has joined #openstack-ansible07:25
*** Jack_Iv has quit IRC07:28
*** woodard has quit IRC07:30
*** hwoarang has quit IRC07:35
*** hw_wutianwei has joined #openstack-ansible07:38
*** hwoarang has joined #openstack-ansible07:43
*** Jack_V has quit IRC07:44
*** Jack_I has joined #openstack-ansible07:45
*** jrobinson has quit IRC07:46
*** winggundamth has quit IRC07:56
*** sacharya has joined #openstack-ansible08:00
*** sacharya has quit IRC08:06
*** thotypous has quit IRC08:37
*** Matias has quit IRC08:37
*** thotypous has joined #openstack-ansible08:42
*** Matias has joined #openstack-ansible08:43
*** alezzandro has joined #openstack-ansible08:44
openstackgerritMerged openstack/openstack-ansible-plugins: Implementation Neutron SR-IOV  https://review.openstack.org/41636208:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Implementation Neutron SR-IOV  https://review.openstack.org/41590908:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Implementation Neutron SR-IOV  https://review.openstack.org/41590309:00
yolandahi, i'm having a pair of issues with openstack-ansible using centos as ansible host09:07
yolandafirst one, lxc-ls is shown as invalid command, i need to install lxc-extras package09:08
yolandasecond one, usage of tracepath6, with -m flag... -m is not a valid flag on my command09:08
odyssey4meyolanda interesting09:08
odyssey4meoh hang on, that's for the diagnostic output, right?09:09
odyssey4meis the centos host only being used for the deployment host?09:09
odyssey4meie it is not running any containers or services?09:09
*** asettle has joined #openstack-ansible09:09
odyssey4meif so, then it would seem that you may be using 'run-playbooks' to execute the playbooks... which you should not be doing09:10
odyssey4methat is built for an AIO deployment and for gate testing which is assumed at this stage to be done on an AIO09:10
yolandayep, deployment host09:10
yolandathe vms are xenial09:11
yolandai'm just executing the bootstrap-ansibel script09:11
odyssey4meah, that makes sense too09:11
odyssey4meit shouldn't need to run those commands if everything goes right09:11
odyssey4mebut sure, those commands should probably have || true09:11
odyssey4meI thought they did actually09:12
yolandai just want to install the ansible scripts, and then deploy with my own inventory09:12
yolandalet me paste the complete output09:12
odyssey4mehttps://github.com/openstack/openstack-ansible/blob/master/scripts/scripts-library.sh#L186-L22009:12
odyssey4meall of them have || true so it won't cause a failure - the real failure was before that09:13
yolandahttp://paste.openstack.org/show/594512/09:13
odyssey4meit looks like https://github.com/openstack/openstack-ansible/blob/master/scripts/bootstrap-ansible.sh#L62-L66 ended with a non zero exit code?09:15
yolandalet me check09:16
odyssey4meyou can see in line 167 of your paste that it invoked the exit_fail09:16
yolandamm, it complains about python-2.7 and python-devel-2.7 already installed09:16
yolandaTransaction check error:09:17
yolanda  package python-2.7.5-48.el7.x86_64 is already installed09:17
yolanda  package python-devel-2.7.5-48.el7.x86_64 is already installed09:17
odyssey4meand has a non zero exit code?09:17
odyssey4meecho 4?09:17
odyssey4meargh09:18
*** fxpester has joined #openstack-ansible09:18
odyssey4meecho $?09:18
yolandayes, exit code 109:18
odyssey4meaha, that's unexpected09:19
odyssey4mewe'll have to handle that09:19
yolandai'll add a true to see if script goes further09:20
odyssey4meargh, a closed knowledgebase note: https://access.redhat.com/solutions/32160309:20
odyssey4meI'm looking for a list of known exit codes for yum09:20
yolandamm, the thing is that if that fails on the python2, is not installing the other packages09:22
yolandai'll try with an skip-broken as well...09:22
odyssey4meis it *failing* for python2?09:23
evrardjpodyssey4me: yolanda there are fixes now merging for these09:23
odyssey4meevrardjp oh?09:23
evrardjpyes, mhayden and I worked on a few ones, still a lot remaining09:23
odyssey4meevrardjp can you share a review?09:24
evrardjpbut I think not for bootstrap-ansible09:24
evrardjpso yes, maybe we should || true09:24
evrardjpbut already installed shouldn't return 1 IIRC09:24
odyssey4mewell, doing || true for the required package installs seems like a very bad idea to me09:24
yolandayep, didn't work09:24
yolandai ended removing python209:24
*** DanyC has joined #openstack-ansible09:24
evrardjp || true is a terrible idea09:25
*** DanyC has left #openstack-ansible09:25
evrardjphttps://review.openstack.org/#/c/416589/ was superseded by the whole run_tests change09:25
evrardjpbut then we still need to work on this09:25
evrardjpodyssey4me: https://review.openstack.org/#/q/topic:run-tests-cleanup09:26
andymccralthough || true is pretty much the same as -f for ln ;P09:26
odyssey4meyeah, I don't see how that relates09:26
odyssey4meandymccr not quite - one forces it to happen, the other ignores any failure and moves on09:27
evrardjpodyssey4me: at first yes, the problem we had initially was the fact that for centos we don't handle the rc of the yum install `bindep` properly09:27
evrardjpthen it ended up by fully redoing stuff09:27
evrardjpwe said we had other work to do in these topics, that's just it09:27
odyssey4meso the issue here is prior to bindep09:27
odyssey4mewe need to be sure that python and its dependencies are installed on the deployment host09:28
evrardjpisn't it the same kind of things?09:28
odyssey4meand the problem is that yum exits with the error code 1 if python is already there09:28
andymccryeah i get that bit - but its pretty much the same approach, e.g. hammer it home because we're not sure. for the link one im not opposed to that - but it still means the conditional isnt working as intended if we need it09:28
evrardjpwell that's not normal09:28
odyssey4meit seems pretty dumb to me09:28
yolandaodyssey4me, maybe try a  yum search first, to discard the existing packages?09:29
evrardjpandymccr: I agree we should write better things, but it takes probably more time vs the quick fix... let's fix the bootstrap-ansible properly then09:29
odyssey4mehmm, odd - it's showing python in the list of packages to be updated09:30
odyssey4meso why is the transaction check failing09:30
andymccrevrardjp: alternatively we get Apsu to fix it in the "proper" way :D09:30
evrardjpa name problem in the list?09:30
evrardjpandymccr: exactly :D09:30
odyssey4memaybe that error is valid09:30
odyssey4meyolanda can you do that yum install with some sort of debug?09:30
evrardjpodyssey4me: that's what I think09:30
evrardjpI think it's not because of an already installed package09:31
evrardjpI think there is another issue there09:31
evrardjpwrong package name, other things09:31
yolandalet me launch with verbose09:31
odyssey4meI'm having to use google translate to read the log properly ;)09:31
evrardjpandymccr: Apsu approach works, but will obviously take more time :p09:31
yolandaah, spanish logs :)09:32
evrardjplol09:32
evrardjpnot copying here?09:32
openstackgerritMerged openstack/openstack-ansible-os_keystone: Disable WSGIScriptReloading  https://review.openstack.org/35668809:32
yolandahttp://paste.openstack.org/show/594515/09:32
odyssey4meok, so it thinks it needs to install the package, but the transaction fails because it's already there09:33
odyssey4methis may be because of the use of python2 as a package09:33
odyssey4meand python2-devel09:33
odyssey4meif you use python and python-devel what happens?09:34
yolandamostly the same http://paste.openstack.org/show/594516/09:34
odyssey4methat's weird - why is the initial test not working out that it's installed already09:35
odyssey4methis is some sort of packaging or yum bug09:35
yolandayes, that's weird09:35
odyssey4meI guess a workaround for us would be to test if python2 is installed already, and only install those packages if it isn't09:35
yolandalet me try on another centos vm09:36
odyssey4mebut ideally this should be registered as an upstream bug09:36
yolandato see if that repeats09:36
evrardjpandymccr: do we have the etherpads for the PTG yet?09:36
odyssey4meyeah, good idea09:36
evrardjpandymccr: we should link them https://wiki.openstack.org/wiki/PTG/Pike/Etherpads09:36
andymccrevrardjp: nope, not yet, and yeah we should09:37
andymccrmaybe i'll just create a base one for now09:37
evrardjpno pressure :p09:37
evrardjpI can edit it to a dummy one if you want09:37
evrardjphttps://etherpad.openstack.org/p/osa-ptg-pike good for you?09:37
yolandano, i'm not hitting that09:41
yolandaweird09:41
odyssey4memaybe the yum db is corrupted in some way09:42
evrardjpor a package fetched maybe?09:42
*** karimb has joined #openstack-ansible09:43
yolandaon that host, i previously installed bifrost, not sure if that can be conflicting09:43
yolandabut sounds strange09:43
odyssey4mewell, it seems to be specific to the package state evaluation09:43
odyssey4meit seems to think that those packages aren't installed, but they are09:43
yolandayep09:44
andymccrevrardjp: already done that09:44
odyssey4memaybe they're partially not installed09:44
*** Jack_Iv has joined #openstack-ansible09:44
andymccri'll fill out some ideas etc later, but feel free to add09:44
yolandait may not be a general issue09:44
odyssey4meso maybe force a reinstall?09:44
odyssey4meor yeah, a refetch?09:44
*** vnogin has joined #openstack-ansible09:44
odyssey4meie do yum clean09:44
*** vnogin has quit IRC09:44
openstackgerritMerged openstack/openstack-ansible-os_heat: Bring consistency to tags  https://review.openstack.org/41843609:45
evrardjpandymccr: let's fill the etherpad with the community meeting tomorrow09:45
andymccrevrardjp: yeah agree09:46
evrardjppalendae: will probably want to add the inventory changes and external integrations, odyssey4me and I will probably want to add artifacting :p09:46
evrardjpetc.09:46
andymccri'll add the link so it'll be open for people to add things whenever they want/have ideas09:46
yolandaodyssey4me, there seem to be conflicts09:46
evrardjpyou probably want to reduce bugs and increase test coverage (+scenario)09:47
yolandapython-2.7.5-48.el7.x86_64 es uin duplicado con python-2.7.5-34.el7.x86_6409:47
odyssey4meyolanda perhaps python2 and python3 conflicts?09:47
openstackgerritMerged openstack/openstack-ansible-security: DOC Remove some repeated words  https://review.openstack.org/41866909:47
odyssey4meaha - same package, but different versions09:47
odyssey4memaybe the source repo is broken09:47
*** vnogin has joined #openstack-ansible09:49
openstackgerritMerged openstack/openstack-ansible-os_ceilometer: Bring consistency to tags  https://review.openstack.org/41840409:50
*** hfu has quit IRC09:51
*** rgogunskiy has joined #openstack-ansible09:51
yolandaodyssey4me, evrardjp ... so i removed the duplicated python2 package, and everything worked fine09:52
yolandaseems anaconda brought some older package somehow09:53
pjm6good morning all09:53
odyssey4meok great yolanda - glad you found a solution09:53
*** DanyC has joined #openstack-ansible09:55
*** DanyC has quit IRC09:55
openstackgerritMerged openstack/openstack-ansible-os_barbican: Bring consistency to tags  https://review.openstack.org/41839509:55
pjm6 i'm doing an fresh installation of OSA in ubuntu 16.0409:55
pjm6<pjm6> and I was getting this error:  http://pastebin.com/V5BEhvdY09:55
pjm6<pjm6> any clue what could be?09:55
pjm6<pjm6> its related with https protocol, but I have the same certificate installed in the haproxy and keystone09:55
yolandasorry for raising the alert :)09:56
pjm6*http://pastebin.com/3CehfpaU09:56
*** DanyC has joined #openstack-ansible09:56
*** Jack_Iv has quit IRC09:57
openstackgerritMerged openstack/openstack-ansible-os_horizon: Bring consistency to tags  https://review.openstack.org/41844609:57
*** DanyC has quit IRC09:58
*** DanyC has joined #openstack-ansible09:58
pjm6odyssey4me: you configured in a time haproxy and OSA services with https protocol, right?09:59
odyssey4meandymccr re your comment in https://review.openstack.org/#/c/418372/ - centos is voting and has been for some time, on purpose09:59
andymccrodyssey4me: on newton? i thought we only enabled them on master10:00
*** DanyC has quit IRC10:00
odyssey4meit worked here: https://review.openstack.org/#/c/398825/10:00
odyssey4meit was made voting before the release of newton10:00
odyssey4mewe could taking that out for newton, sure10:01
odyssey4mebut it used to work10:01
*** DanyC has joined #openstack-ansible10:01
andymccrid rather not if it was working - i think i saw another one that was voting when it really shoudlnt have been10:01
andymccrwhich made me think that was the same10:01
andymccrbut maybe this is just a "dont look at failing patches late at night" thing :P10:01
odyssey4meI think keystone, cinder, neutron and all infrastructure is and should be voting for newton10:01
andymccrodyssey4me: this is the one that made me think that: https://review.openstack.org/#/c/418471/10:03
andymccranyway i'll look at fixing that centos gate for newton then10:04
andymccrthere are a couple that need fixing and then we can promote to voting10:04
odyssey4meandymccr ah, in that one's case the job should not even be running10:05
andymccrodyssey4me: yeah basically, not sure how that happened tbh10:05
*** DanyC has quit IRC10:05
odyssey4mehave we changed the filters recently10:05
andymccri didnt thinkso10:06
andymccrim wondering if we just havnt done a mitaka PR for cinder in a while10:06
*** karimb has quit IRC10:07
odyssey4meyeah, it seems so10:07
odyssey4mehttps://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L3165-L316810:07
odyssey4methat filter allows keystone, glance, cinder to run on any branch10:07
andymccrahh so mitaka keystone/glance would break too10:08
odyssey4meyep10:09
*** karimb has joined #openstack-ansible10:09
odyssey4mewe could generalise https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L3146-L3149 to apply to multiple roles10:09
odyssey4meshould I push up a patch for it?10:11
andymccrodyssey4me: sure if you're not busy10:12
openstackgerritMerged openstack/openstack-ansible-os_glance: Bring consistency to tags  https://review.openstack.org/41841310:13
pjm6for the one's who where seing my error I think I have found my problem10:15
pjm6i was using my certificate generated to public uri (exposed to the internet) but that's common name don't matches the internal IP address, so I need to use self signed certificates in the public /admin uri10:16
pjm6adminuri, internaluri10:16
*** udesale has quit IRC10:17
odyssey4meandymccr I think this will do the trick: https://review.openstack.org/41881810:17
openstackgerritMerged openstack/openstack-ansible-os_cinder: Bring consistency to tags  https://review.openstack.org/41840510:19
andymccrthat layout file makes puppies cry.10:23
*** DanyC has joined #openstack-ansible10:34
*** cristicalin has joined #openstack-ansible10:34
*** DanyC has quit IRC10:37
*** DanyC has joined #openstack-ansible10:37
*** Andrew_jedi has joined #openstack-ansible10:37
*** DanyC has quit IRC10:39
*** electrofelix has joined #openstack-ansible10:41
*** DanyC has joined #openstack-ansible10:42
*** karimb has quit IRC10:43
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Fix CentOS gate  https://review.openstack.org/41883310:43
Andrew_jediHello Folks, I am trying to use keystone v2 endpoints with liberty release, i configured the endpoints in user_variables.yaml but i am still getting this error: http://paste.openstack.org/show/594528/10:46
Andrew_jediCan anyone please help me in figuring out what others vars i need to set ?10:47
*** vnogin_ has joined #openstack-ansible10:47
odyssey4meAndrew_jedi Are you trying to just have v2 endpoints in the service catalogue (in additional to the v3 endpoints), or are you trying to exclusively have v2 endpoints?10:48
Andrew_jediodyssey4me: I am trying to have exclusively have v2 endpoints. Is it not possible?10:49
*** karimb has joined #openstack-ansible10:49
*** vnogin has quit IRC10:50
odyssey4meAndrew_jedi I don't think so, not without forking the code. The Ansible tasks expect to use a v3 endpoint - you'd have to modify them to work with a v2 endpoint instead.10:51
odyssey4meWhy do you need to exclusively have a v2 endpoint in the SC? You can have both.10:51
Andrew_jediodyssey4me:  Okay ... What do i have to do for setting both v2 and v3 endpoints?10:52
*** DanyC has quit IRC10:53
*** DanyC has joined #openstack-ansible10:54
*** Jack_Iv has joined #openstack-ansible10:54
*** DanyC has quit IRC10:54
odyssey4meAndrew_jedi well, the containers will already be listening with a configured v2 endpoint which you can use even if it's not in the SC10:54
odyssey4mebut if you want it in the SC you can simply register the endpoint10:55
odyssey4meopenstack endpoint create ...10:56
odyssey4mesee http://docs.openstack.org/liberty/install-guide-ubuntu/keystone-services.html10:56
*** Jack_Iv has quit IRC10:59
*** hachi has quit IRC11:00
Andrew_jediodyssey4me: Awesome, thanks. :) Let me try this.11:01
*** sacharya has joined #openstack-ansible11:02
*** DanyC has joined #openstack-ansible11:04
*** sacharya has quit IRC11:07
*** rmelero has joined #openstack-ansible11:10
*** rmelero has quit IRC11:14
*** stuartgr has joined #openstack-ansible11:14
*** karimb_ has joined #openstack-ansible11:15
*** karimb has quit IRC11:16
*** smatzek has joined #openstack-ansible11:18
*** smatzek has quit IRC11:21
*** smatzek has joined #openstack-ansible11:21
*** karimb has joined #openstack-ansible11:27
*** karimb_ has quit IRC11:27
*** hw_wutianwei has quit IRC11:37
*** cristicalin has quit IRC11:41
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Fix CentOS gate  https://review.openstack.org/41883311:42
*** askb has quit IRC11:43
ioniguys, is there somebody that can help me a bit regarding configuring cisco switch vlans in order to work with your production example? vlan 10, 20, 3011:47
ionii cannot make it work at all11:48
*** Jack_Iv has joined #openstack-ansible11:55
*** Jack_Iv has quit IRC11:59
*** DanyC has quit IRC12:01
andymccrioni: that's a bit of a tough one! i don't think we have too many cisco experts about unfortunately.12:24
openstackgerritLogan V proposed openstack/openstack-ansible: Pass correct venv paths to ceph_client  https://review.openstack.org/41889512:24
ioniandymccr, alright. i had in mind that if i do the example from production, i will be able to ping the ips, lets say on compute1 br-storage has 172.29.244.3 and compute2 br-storage has 172.29.244.412:26
ionibut i cannot ping from compute1 the ip 172.29.244.412:27
ionii think i have to do something on the switch12:27
andymccrioni: if it's setup correctly you should be able to ping from br-storage ip to br-storage ip on another host.12:27
andymccrso yeah that should be working!12:27
odyssey4meioni if those bridges and IP's are setup right and the switch is too, then it should work12:27
ionii think the switch is not12:28
odyssey4meyou need to make sure that the switch knows that the vlan you've tagged is a valid vlan tag to accept IIRC12:28
*** hachi has joined #openstack-ansible12:28
odyssey4meby default it won't12:28
ioniall the ports are marked as switchport access vlan 10012:28
ionibut i don't know how to allow more vlans on the same port12:28
odyssey4meyeah, but there is something else you have to do to register the vlan tag as valid12:28
odyssey4meI can't recall the terminology12:29
ioniwhat i found is that i need to set the port on trunk12:29
odyssey4meoh hang on12:29
ioniand allow vlan12:29
ionibut it doesn't work12:29
ionihttps://gnulnx.net/2012/01/05/linux-802-1q-vlan-trunking/12:29
odyssey4mefirst - are you tagging on the server or tagging at the switch12:29
ionilike here12:29
ionii think on the server ?12:29
ionisince i have bond0.10 and bond1.30 etc12:30
odyssey4meif you're tagging on the server then you shouldn't tag at the switch12:30
odyssey4meit needs to be a trunk port, not an access port - I think I have the terms right, maybe logan- can help out here12:30
odyssey4meyeah, what's said in https://gnulnx.net/2012/01/05/linux-802-1q-vlan-trunking/ seems right12:31
odyssey4meyou allow particular vlans12:31
odyssey4meif you set the port to an access port on a vlan, then it'll be a flat port12:31
ionithe thing is that i have set up on bond0 my public ip12:32
ioniso i'm losing internet access on the server12:32
odyssey4meyou should ideally ensure that you have an out of band NIC to use for management12:33
odyssey4meotherwise configure an interface with that IP on it that is also set on one of the vlans12:33
ioniok12:35
ionii'll try that12:35
logan-morning12:35
*** retreved has joined #openstack-ansible12:37
odyssey4meioni see http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_55_se/configuration/guide/scg_2960/swvlan.html12:38
odyssey4meyou have to also configure the vlan itself12:39
logan-what switch model ioni12:39
ionilogan-,  WS-C3750G12:39
pjm6anyone here are using SSL communications with keystone?12:40
logan-ioni: http://cdn.pasteraw.com/6o22fa0cqjc6we3vpn81vtbjvjpb38m12:40
ionilogan-, thanks man12:41
*** thorst has joined #openstack-ansible12:41
pjm6http://pastebin.com/4P7EJ34r12:41
ionilogan-, that's what i had in mind after odyssey4me said about tagging on the server12:41
pjm6i don't know why this is giving SSL error12:42
*** jperry has joined #openstack-ansible12:42
logan-yep. sounds like you've got it ioni.12:43
logan-pjm6: did you verify it is actually ssl on 35357? ie curl http://172.29.236.2:3535712:45
pjm6logan-: yes, in the pastebin I did it12:45
pjm6and it gives me a strange error12:45
pjm6unknown protocol12:45
logan-whats the output of that curl? note http not https in it.12:46
pjm6oh ok12:47
pjm61min12:47
pjm6No server is available to handle this request.12:47
pjm6yes, it seems taht this could be other probelm12:47
*** karimb has quit IRC12:47
asettlespotz_zzz: for when you're back on later, this is what we did in manuals for the CONTRIB file https://review.openstack.org/#/c/416112/12:50
asettleevrardjp ^^12:50
*** spredzy has joined #openstack-ansible12:54
*** retreved has quit IRC12:54
*** Jack_Iv has joined #openstack-ansible12:56
*** hw_wutianwei has joined #openstack-ansible12:56
*** retreved has joined #openstack-ansible12:57
pjm6logan-: do you have a clue why the service is not working? maybe problem related to HA?12:58
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_nova: [WIP] First Effort at nova-placement service addition  https://review.openstack.org/41845712:59
*** Jack_Iv has quit IRC13:00
odyssey4mepjm6 you'll have to verify that on the keystone containers13:00
odyssey4mecheck their logs13:00
odyssey4mesee if apache has even started, and if there are any error logs13:00
pjm6well thanks for the TIP13:01
pjm6indeed there are something interesting13:01
pjm6SSL handshake failed: HTTP spoken on HTTPS port; trying to send HTML error page13:02
*** smatzek has quit IRC13:02
pjm6maybe my ssl config variables are producing this wrong configuration deployment?13:02
*** sacharya has joined #openstack-ansible13:03
*** sacharya has quit IRC13:08
hachipjm6 once i got the same error (SSL handshake failed) because i was using the same VIP for both private and public13:08
pjm6hachi: in this case i'm using different VIP for internal/external IPs13:09
pjm6do you have an example of config file that you use?13:09
hachiok wait a sec please13:10
pjm6thanks hachi :)13:10
*** rmelero has joined #openstack-ansible13:11
hachithis for openstack_user_config.yml :13:12
*** smatzek has joined #openstack-ansible13:12
hachihttp://paste.openstack.org/show/594555/13:12
hachiand this for user_variables.yml :13:13
hachihttp://paste.openstack.org/show/594556/13:14
hachipjm6 it is simple conf :)13:14
*** rmelero has quit IRC13:16
pjm6i have to run, but i will be back, thanks hachi  :)13:17
*** jperry has quit IRC13:17
hachigood luck13:17
spredzyHello all. New here sorry if the following question has been asked already a thousand times. I was looking into os_rally to install and configure rally using my distro packages. Looking closely at the code it seems that it does not support this. Looking at a more 'core' component like os_cinder, it seems thatjust installing the distro package can't be achieved it still does stuff with pip/venv. Not13:23
spredzyknowing the philosophy behind openstack-ansible, I would like to know if its possible to use distributions packages only (and not rely neither on pip or venv)?13:23
spredzyFile I am referring to: cinder https://github.com/openstack/openstack-ansible-os_cinder/blob/master/tasks/cinder_install.yml | rally https://github.com/openstack/openstack-ansible-os_rally/blob/master/tasks/rally_install.yml13:24
*** Andrew_jedi has quit IRC13:24
*** hfu has joined #openstack-ansible13:26
evrardjpthat's not how we designed it, we rely on virtualenvs13:27
evrardjpbut dependencies are apt packages13:27
evrardjpit allows more flexibility with the code and versions IMO13:27
spredzyevrardjp: thanks for clarification.13:28
evrardjpif you're looking for something set in stone, like you would with an apt mirror, there are initiatives to do that, just in another way13:28
spredzyevrardjp: In my case I must use distribution packages for everything. I wanted to use upstream role to not reinvent the wheel.13:29
*** drifterza has quit IRC13:29
spredzyIn my case its yum, but if you're aware of alternative roles relying on distributions packages, I'd be interested in infos/url/docs of such projects13:29
evrardjpI think you're looking into RDO13:29
mhaydenmorning13:30
evrardjpspredzy: https://www.rdoproject.org/13:30
evrardjpmorning mhayden13:30
spredzyevrardjp: thanks13:31
*** karimb has joined #openstack-ansible13:32
mhaydenit's been a while since i gandered at RDO13:35
*** jheroux has joined #openstack-ansible13:37
*** sdake has joined #openstack-ansible13:39
evrardjpmhayden: let's keep it that way mhayden :D13:41
mhaydenaw, it has some good stuff in it13:41
ionilogan-, cool it kinda works but now ipmi doesn't work (its shared not dedicated) and if i reinstall that server, i cannot just configure an ip to eth013:41
*** hfu has quit IRC13:41
ionilogan-, so i have to tag to switch that port but i wonder if there is a mecanism to tag a port on switch on multiple vlans13:42
odyssey4meioni you'll need to set the port to have a default vlan13:43
odyssey4meor 'native' vlan13:43
*** sdake_ has joined #openstack-ansible13:43
odyssey4meie if the packet isn't tagged, then it should be on vlan x13:43
ioniiok13:44
ionitrying :D13:44
ionihttps://rednectar.net/2012/03/11/the-access-vlan-is-dead-long-live-the-native-vlan/13:44
ionireadying that now13:44
odyssey4mehttp://www.cisco.com/web/techdoc/dc/reference/cli/nxos/commands/l2/switchport_trunk_native_vlan.html13:44
*** Jeffrey4l_ has quit IRC13:45
ioniodyssey4me, nice :D13:45
ioniworks13:45
*** sdake has quit IRC13:46
*** ivve has quit IRC13:47
evrardjpwhen using native vlans, make sure they correspond well on the two sides of the wire, OR make sure you manipulate them properly13:50
evrardjp (just a good practice)13:50
*** Jack_Iv has joined #openstack-ansible13:54
mhaydenmy faith in xenial is not strong https://twitter.com/majorhayden/status/81918090085656166513:55
*** david-lyle has quit IRC13:56
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_keystone: Bring consistency to tags  https://review.openstack.org/41894913:57
*** david-lyle has joined #openstack-ansible13:59
*** Andrew_jedi has joined #openstack-ansible14:01
*** kylek3h has quit IRC14:03
*** Jack_Iv has quit IRC14:04
andymccrok anybody want to weigh in on why these lines would suddenly cause template failures? : https://github.com/openstack/openstack-ansible-os_swift/blob/master/templates/object-server.conf.j2#L3-L414:04
evrardjpmhayden: super sad to hear14:05
evrardjpI didn't upgrade my home server, I am afraid to do it :(14:06
*** Jack_Iv has joined #openstack-ansible14:06
andymccrmaybe its not too late to revert all trusty removal patches!14:06
evrardjpandymccr: you have an error somewhere?14:07
*** woodard has joined #openstack-ansible14:07
*** woodard has quit IRC14:07
andymccrevrardjp: yeah - although it isnt very descriptive it just gives a templating error and a stack trace14:07
andymccr2 secs14:07
*** woodard has joined #openstack-ansible14:08
*** Jack_Iv has quit IRC14:08
andymccrevrardjp: http://logs.openstack.org/33/418833/2/check/gate-openstack-ansible-os_swift-ansible-func-ubuntu-xenial/63ee0d9/console.html#_2017-01-11_11_58_33_55216014:09
andymccrive been debugging it and removing those lines makes the testing pass, so im 100% certain its due to the api_threads bit, but im not sure why it now decided it doesnt want to work14:10
evrardjpmaybe trying {% set api_threads = _api_threads if _api_threads > 0" else 1 %}14:12
evrardjpoops14:12
evrardjpsorry14:12
evrardjp{% set api_threads = _api_threads if _api_threads > "0" else "1" %}14:12
evrardjpno14:12
evrardjpthat's wrong14:13
evrardjpI'm surprised of this undefined variable: 0'14:13
evrardjpif you can run it on your machine with ANSIBLE_DEBUG=1 it's gonna help you14:14
*** jperry has joined #openstack-ansible14:14
*** klamath has joined #openstack-ansible14:14
*** jamielennox is now known as jamielennox|away14:14
*** klamath has quit IRC14:14
*** klamath has joined #openstack-ansible14:15
*** david-lyle has quit IRC14:16
*** fguillot has joined #openstack-ansible14:17
*** cathrichardson has joined #openstack-ansible14:18
evrardjpandymccr: I tried to template the set lines on my machine it worked14:19
evrardjpso they aren't wrong14:20
evrardjpthere is something else14:20
*** sdake has joined #openstack-ansible14:20
andymccrevrardjp: yeah its weird because those same lines exist on the proxy-conf and that works ok14:21
andymccrits only on the storage containers14:21
andymccrbut i can debug: var on the ansible_vcpus var listed and that works fine14:21
*** udesale has joined #openstack-ansible14:22
*** cathrich_ has joined #openstack-ansible14:22
evrardjpwell I just check14:22
*** cathrichardson has quit IRC14:23
evrardjpansible_processor_vcpus doesn't work at my place14:23
andymccrhmm14:23
evrardjpbut because it's defaulted to 2 the set works fine14:23
*** sdake_ has quit IRC14:23
evrardjpif not it would say undefined variable14:23
andymccrkinda does: http://logs.openstack.org/33/418833/2/check/gate-openstack-ansible-os_swift-ansible-func-ubuntu-xenial/63ee0d9/console.html#_2017-01-11_11_58_33_55214514:24
evrardjpI have ansible_processor_cores14:25
andymccrnot sure what would've changed though14:25
evrardjpweirdly14:25
evrardjpit works on my 14.0414:26
evrardjpso let me dig a little further, maybe the fact isn't properly fetched on my mac, but properly on 14.0414:26
evrardjpI'll try on 16.0414:26
andymccrevrardjp: yeah thanks! I'm running it through now too - hopefully will track it down, but its weird - the fact exists fine but it cant do the api_thread bit14:26
evrardjpso xenial14:27
evrardjpaccording to your log14:27
evrardjpworks fine for me14:27
evrardjplet me template that quickly14:28
*** lorid has joined #openstack-ansible14:28
loridI am having problems with Ansible establishing ssh connection within deployment to OSA nodes.14:29
loridI am able to ssh/cli to each node but within ansible playbooks it fails to connect to all nodes14:29
*** cathrich_ is now known as cathrichardson14:30
loridansible v2.2.014:30
evrardjpandymccr: maybe you have ansible_processor_vcpus = 5.5 and he can't do the division14:30
andymccrevrardjp: hmm maybe. shouldnt do though, the value is 8 according to my debug output14:31
evrardjpthat was a joke :p14:31
andymccrgoing to try just template that var and see what happens14:31
andymccrin a vm anything is possible :P14:31
evrardjphalf a cpu, it only happens on AWS14:32
evrardjp:p14:32
andymccrit makes no sense that it works in the proxy-server.conf14:32
andymccrno no, half a virtual cpu14:32
evrardjplol14:32
evrardjpyou get half cycles!14:32
andymccrlorid: if you run the ansible play with -vvv  you will get some details on the exact connection its trying to make and you should get a better idea of why its failing14:32
evrardjpanyway it's templating cleanly14:32
evrardjpon my machine14:33
andymccrsigh :P14:33
andymccrthis makes no sense14:33
evrardjpcan you run it with ANSIBLE_DEBUG=1 ?14:33
evrardjpthat would make your life easier14:33
evrardjpoh wait14:35
evrardjpI'm templating with template14:36
evrardjpyou're templating with config template14:36
evrardjpthat's an interesting issue14:37
loridhttp://paste.openstack.org/show/594562/ > output from the verbose cmd on OSA deploy14:38
logan-lorid: "/bin/sh: 1: /usr/bin/python: not found"14:38
logan-the hosts you're deploying to don't have python apparently? ansible needs that to run its modules14:39
openstackgerritLogan V proposed openstack/openstack-ansible-os_keystone: Additional fix for venv build fallback  https://review.openstack.org/41897814:39
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova: Additional fix for venv build fallback  https://review.openstack.org/41897914:39
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron: Additional fix for venv build fallback  https://review.openstack.org/41898014:39
Apsuevrardjp: andymccr: What am I fixing the proper way?14:44
evrardjpApsu: our bash scripts :p14:44
andymccrApsu: all of them!14:44
evrardjpandymccr: FYI14:44
evrardjpI added | int14:44
andymccrevrardjp: proxy-server conf uses the same 3 lines and it works fine, using config_template too. *scratches head*14:45
evrardjpand my templating now works14:45
evrardjpwith config_template14:45
Apsuhah14:45
loridThank you Logan!14:45
andymccrApsu: you can laugh when its finished14:45
openstackgerritMarc Gariépy proposed openstack/openstack-ansible: [WIP] Add CentOS support for AIO setup  https://review.openstack.org/40769014:45
evrardjpit failed on my machine14:45
andymccrevrardjp: where did you add int?14:45
evrardjpdifferent error 'though14:45
evrardjp{% set _api_threads = ansible_processor_cores|default(2)| int // 2 %}14:45
andymccrahh ok14:46
andymccrlet me try14:46
evrardjpno promises14:46
evrardjpbut I had a unicode int type mismatch14:46
odyssey4meevrardjp you may wish to do {% set _api_threads = (ansible_processor_cores | default(2)) | int // 2 %}14:46
odyssey4meto ensure precedence14:46
evrardjpodyssey4me: is right14:47
andymccryeah will try that, although still not sure why those lines work in other conf files on the same deploy...14:48
andymccrbut hey14:48
evrardjpbetter safe than sorry (my case I relied on default, which makes it work)14:48
*** hw_wutianwei has quit IRC14:48
odyssey4methe filters are evaluated from right to left, so the | int in yours is applied to the default instead of the value you expect which is a results of ansible_processor_cores | default(2)14:48
*** vdo has joined #openstack-ansible14:48
*** hw_wutianwei has joined #openstack-ansible14:48
evrardjpodyssey4me: it was a quick draft14:48
evrardjpoh andymccr don't paste it, it's still cores there, instead of vcpus14:48
evrardjpjust in case you need the vcpus :p14:49
andymccrhaha yeah i havnt pasted it14:49
andymccri was just going to add a |int14:49
andymccreasier than pasting14:49
*** sdake_ has joined #openstack-ansible14:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Remove groupby filter to avoid bug  https://review.openstack.org/41898414:51
*** cloudm2 has joined #openstack-ansible14:51
*** gouthamr has joined #openstack-ansible14:52
evrardjpmhayden: that's a painful bug14:52
*** michaelgugino has joined #openstack-ansible14:53
mhaydenyeah14:53
evrardjphopefully the selectattr is not too much bugged *coughs a lot*14:53
* mhayden watches the gate job14:53
*** Mudpuppy_ has joined #openstack-ansible14:54
pjm6hachi: i was seeing your config files but don't have the ssl config14:54
*** sdake has quit IRC14:54
mhaydenevrardjp: this workaround seems to work14:54
mhaydenand it's a bit simpler to boot14:55
*** whiteveil has joined #openstack-ansible14:55
mhaydenit made it past that part in the gate14:55
evrardjpmhayden: yes I just had issues in the past with selectattr14:56
evrardjpthat's why I said that :p14:57
mhaydencrossing fingers ;)14:57
evrardjpmy last attempt of something similar worked last year14:57
evrardjp2 months ago  :p14:57
evrardjp(in other words, crossing fingers with you, but it shouldn't be needed!)14:57
*** rgogunskiy has quit IRC14:58
mhaydenstill trying to get UBuntu 16.04 installed in my colo -- can't get OSA rolling in there until that's done14:58
pjm6anyone with SSL configuration had this error in apache: pastebin.com/S6MUKEgK ?15:01
*** Andrew_jedi has quit IRC15:01
*** alezzandro has quit IRC15:01
andymccrevrardjp: int didnt work for me:( trying to narrow it down more.15:02
*** galstrom_zzz is now known as galstrom15:02
*** hachi has quit IRC15:03
odyssey4mepjm6 that's showing that the LB is probably trying to speak http to it, but it's listening on https15:04
*** fxpester has quit IRC15:04
alextricity25andymccr: Is it normal that this has  been stuck in needs verified for a while? https://review.openstack.org/#/c/416946/15:04
*** alezzandro has joined #openstack-ansible15:04
*** sacharya has joined #openstack-ansible15:04
andymccralextricity25: yeah its the depends-on patch15:04
odyssey4mealextricity25 the dependent patch has not yet merged15:04
alextricity25ohhhh15:05
alextricity25thanks15:05
pjm6odyssey4me: yes, but I think i'm using the configuration to enable https in both, its not only this directive15:05
pjm6"haproxy_ssl: true15:05
pjm6"15:05
pjm6keystone_ssl: true15:05
pjm6 | keystone_external_ssl: false15:05
pjm6?15:05
odyssey4mepjm6 yes, but if you're configuring apache/keystone to listen on https too then the lb needs to communicate with apache/keystone on https too15:05
odyssey4meso you'll need to ensure that the lb has the cert ca for apache, and that the lb is communicating via https15:06
odyssey4meto the keystone back-end15:06
odyssey4meclient -HTTPS-> LB -HTTPS-> Keystone/apache15:06
mhaydenif anyone has a moment to review https://review.openstack.org/418984 -- it would help me get around that ugly ansible/jinja bug!15:07
odyssey4meif you want client -HTTPS-> LB -HTTP-> Keystone/apache then that's a different setup15:07
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Enable RHEL 7 STIG tasks as default  https://review.openstack.org/41844815:07
odyssey4meand is the default we have for the public endpoint15:07
pjm6odyssey4me: i'm using this: http://pastebin.com/1rjaRkX115:07
*** hachi has joined #openstack-ansible15:08
*** sacharya has quit IRC15:08
pjm6yes that second scenario is SSL termination, right? now i was trying to implement the first scenario15:08
pjm6"client -HTTPS-> LB -HTTPS-> Keystone/apache"15:08
odyssey4mepjm6 you need to give the cert details to keystone too15:08
pjm6yes I forgot to put it15:09
pjm6i had the same config (as horizon)15:09
pjm6but I just commented because i was thinking that should be an self signed certificate15:09
pjm6hmmm odyssey4me, i'm seeing that my haproxy15:09
pjm6has  "mode http"15:09
pjm6maybe should be https ?15:10
odyssey4mepjm6 so you want SSL internal and external15:10
pjm6yes15:10
odyssey4meand you want haproxy to also 'proxy' all SSL comms?15:10
pjm6what's the common scenario in prod ready?15:11
pjm6is have SSL termination only in the public interface?15:11
odyssey4mehttps internal and external with the lb doing proxy is certainly not something I know to be tested15:12
pjm6for use only https external15:12
odyssey4meproduction systems I'm aware of use ssl for the public endpoints, but not internal15:12
odyssey4meand terminate the SSL at the LB15:12
pjm6keystone_ssl: false  | keystone_external_ssl: false15:13
pjm6 ?15:13
odyssey4mekeystone_external_ssl is if ssl is terminated at the lb\15:13
*** Andrew_jedi has joined #openstack-ansible15:13
odyssey4meif you remove all your changes then all public endpoints will be ssl and terminated at the LB for newton - that's the default15:14
odyssey4meyou should then only have to provide the _user_ssl_* settings15:14
pjm6so the haproxy_ssl: true is not needed , right?15:14
odyssey4menope, that's the default15:14
odyssey4meremove keystone_ssl - that's for internal ssl usage15:14
odyssey4meremove 'keystone_external_ssl: false' because that will cause keystone to fail with ssl termination at the lb15:15
pjm6i just maintain the15:15
odyssey4meremove 'horizon_ssl: true' because that's for ssl termination at the horizon containers15:15
pjm6*_user_ssl_*15:15
pjm6as you said15:15
odyssey4me'openstack_service_publicuri_proto: https' is the default, so you can remove it15:15
odyssey4meremove 'openstack_service_adminuri_proto' and 'openstack_service_internaluri_proto' as those are for internal comms15:16
pjm6after this changes I only need to rerun setup-openstack right ?15:16
pjm6yes and they should be as http15:16
pjm6right?15:16
odyssey4meadmin/internal endpoints are not exposed to anyone except a cloud admin15:16
odyssey4mefor those last two, http is the default value15:17
pjm6I was just trying to do all ssl because  I was thinking that was done in production15:17
*** david-lyle has joined #openstack-ansible15:17
pjm6(i was using SSL termination before at the LB)15:17
odyssey4meyou will have to clear existing endpoints from the service catalog, because we won't update them15:17
*** kylek3h has joined #openstack-ansible15:17
odyssey4medoing ssl everywhere might be something that you might want to do - but as you've found it's hairy15:18
pjm6as i'm doing a new deployment from start, it's a way to clear that easily without removing the containers ?15:18
pjm6indeed, not easy task15:18
odyssey4meyes, you can just update them using the openstack CLI15:18
odyssey4meopenstack endpoint update ...15:18
*** DanyC has joined #openstack-ansible15:19
odyssey4meif it's a new deployment then perhaps just wipe the containers and database data15:19
pjm6yes, it's a new deployment15:19
*** galstrom is now known as galstrom_zzz15:19
pjm6maybe do an lxc-destroy-containers.yml15:19
andymccrevrardjp: for whatever reason, its the "set" that is failing15:19
pjm6and run setup-hosts, setup-infraestructure, setup-openstack?15:19
odyssey4mepjm6 yep15:20
pjm6thanks odyssey4me :)15:20
andymccrevrardjp: i can literally replace those lines with {% set myvar = "hello" %} and that fails the same way. but again only on storage containers and not the proxy container15:20
*** david-lyle has quit IRC15:21
*** sdake_ has quit IRC15:22
*** lucas__ has joined #openstack-ansible15:22
andymccr*head-desk*15:22
*** sdake has joined #openstack-ansible15:23
*** marst has joined #openstack-ansible15:23
*** DanyC has left #openstack-ansible15:25
*** sacharya has joined #openstack-ansible15:25
*** h5t4 has quit IRC15:26
mgariepymhayden, are you around ?15:27
mhaydenmgariepy: here! :)15:27
mgariepyhttps://github.com/openstack/openstack-ansible-security/blob/master/tasks/rhel6stig/rpm.yml#L7015:27
*** spotz_zzz is now known as spotz15:27
mgariepyhow about checking gpgcheck=1 for enabled repos ?15:27
*** markvoelker has quit IRC15:28
mgariepyI have rdo-testing that is not enabled but the check fails because of gpgcheck=015:28
*** markvoelker has joined #openstack-ansible15:29
*** chris_hultin|AWA is now known as chris_hultin15:29
*** chris_hultin is now known as chris_hultin|AWA15:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Enable RHEL 7 STIG tasks as default  https://review.openstack.org/41844815:30
*** whiteveil has quit IRC15:32
*** Andrew_jedi has quit IRC15:33
evrardjpmgariepy: i had the same issue so i agree15:33
mgariepyor we could ignore this particular repo file ?15:34
mhaydenmgariepy: yeah, that check could be better15:34
mhaydeni thought about whipping up a quick module to handle that15:34
*** markvoelker has quit IRC15:35
mhaydensince those repo files look a lot like inifiles15:35
*** udesale has quit IRC15:36
*** weezS has joined #openstack-ansible15:36
openstackgerritLogan V proposed openstack/openstack-ansible: ceph-ansible integration  https://review.openstack.org/40940715:36
openstackgerritPedro Magalhães (pjm6) proposed openstack/openstack-ansible: Install python2 in Ubuntu 16.04 or CentOS 7  https://review.openstack.org/41900115:37
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_magnum: Bring consistency to tags  https://review.openstack.org/41900215:38
evrardjpandymccr: so it's a templating issue, but I don't get it15:38
evrardjpwe are templating locally (action plugin) and then remote copying15:39
evrardjpso it is the same templating engine15:39
evrardjpI think15:39
evrardjpor is my understanding of ansible wrong?15:40
*** Jeffrey4l has joined #openstack-ansible15:40
*** galstrom_zzz is now known as galstrom15:41
*** galstrom is now known as galstrom_zzz15:41
andymccrevrardjp: well either way - it should do it in the same way as it does the proxy container (they are just containers and teh task itself is exactly the same)15:42
andymccrso im pretty stumped.15:42
*** lucas__ has quit IRC15:42
odyssey4meis the version of jinja installed consistent? andymccr evrardjp15:43
evrardjpor python version15:43
odyssey4me++15:43
evrardjpmaybe worth dumping version numbers and all variables15:44
andymccrchecking15:44
openstackgerritPedro Magalhães (pjm6) proposed openstack/openstack-ansible: Install python2 in Ubuntu 16.04 or CentOS 7  https://review.openstack.org/41900115:45
*** TxGirlGeek has joined #openstack-ansible15:45
*** DanyC has joined #openstack-ansible15:45
andymccrjinja2 and python are the same on the 2 containers15:46
*** DanyC has quit IRC15:46
*** DanyC has joined #openstack-ansible15:46
andymccrbut if its templated locally15:46
andymccrthat shouldnt matter...15:46
odyssey4meon the host?15:46
odyssey4meif it's templated locally then its on the host where this gets executed15:47
andymccrodyssey4me: yeah agreed but its an aio for testing, so its the same host for all the containers then15:47
odyssey4meis it the same template task failing on one container but not another?15:47
andymccrodyssey4me: yeh15:47
andymccrwell15:47
andymccrnot the SAME task15:47
andymccrbut the SAME template block exists in mulitple templates15:47
andymccrit fails on all storage hosts (e.g. object/account/container+replicator confs and succeeds on proxy-server.conf)15:47
evrardjpwhich is the node15:48
evrardjpinstead of container15:48
evrardjpor is it?15:48
mhaydencloudnull: could you give me a gander on https://review.openstack.org/418984 if you have a moment? :)15:48
cloudnullindeed15:48
odyssey4meandymccr you're seeing this on a multi-node build, but not on an AIO?15:49
mhaydenthanks, cloudnull ;)15:49
*** chris_hultin|AWA is now known as chris_hultin15:49
andymccrodyssey4me: its just the gate for swift - and its unrelated to a code change15:50
*** DanyC has quit IRC15:51
odyssey4meandymccr can you gather facts and check the differences in vars used between those containers?15:52
odyssey4mehave you been able to replicate the issue locally?15:52
odyssey4meI assume it's showing up in the gate15:52
openstackgerritDarren Wardlow proposed openstack/openstack-ansible-os_nova: Add nova-lxd storage-pool option for ZFS storage backend  https://review.openstack.org/41797715:53
*** diablo_rojo has joined #openstack-ansible15:53
andymccrodyssey4me: yeah i can - thats how ive narrowed it down to being the "set" inside the template15:56
*** dxiri has joined #openstack-ansible15:56
andymccrodyssey4me: yeah i'll try gather vars and im going to try see if i can run the template task thats failing on the storage hosts against the proxy host.15:56
odyssey4meyeah, good plan15:56
odyssey4mevery odd15:56
andymccrits been a while since ive had one of these :P15:57
*** whiteveil has joined #openstack-ansible15:57
*** markvoelker has joined #openstack-ansible15:57
openstackgerritMerged openstack/openstack-ansible-security: Remove groupby filter to avoid bug  https://review.openstack.org/41898415:59
*** adrian_otto has joined #openstack-ansible16:00
*** lucas__ has joined #openstack-ansible16:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable RHEL 7 STIG tasks as default [+Docs]  https://review.openstack.org/41844816:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible: [WIP] Test RHEL 7 STIG integration  https://review.openstack.org/41140616:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible: [WIP] Test RHEL 7 STIG integration  https://review.openstack.org/41140616:04
mhaydenmgariepy: can you open a bug on that gpgcheck issue?16:05
*** spredzy has left #openstack-ansible16:06
*** cmart has joined #openstack-ansible16:06
*** weezS_ has joined #openstack-ansible16:07
*** weezS has quit IRC16:08
*** weezS_ is now known as weezS16:08
*** h5t4 has joined #openstack-ansible16:08
*** phalmos has joined #openstack-ansible16:08
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: [Docs] fix typo in error message  https://review.openstack.org/41901716:09
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Fix typo in error message  https://review.openstack.org/41901716:09
*** phalmos has quit IRC16:10
*** rmelero has joined #openstack-ansible16:11
*** Jack_V has joined #openstack-ansible16:12
mgariepymhayden, ok I will.16:14
*** jjediny has joined #openstack-ansible16:15
*** Jack_I has quit IRC16:15
*** Jack_I has joined #openstack-ansible16:24
*** cmart has quit IRC16:25
*** Jack_V has quit IRC16:25
*** cmart has joined #openstack-ansible16:27
*** vnogin_ has quit IRC16:27
openstackgerritMerged openstack/openstack-ansible-os_neutron: Additional fix for venv build fallback  https://review.openstack.org/41898016:27
openstackgerritMerged openstack/openstack-ansible-os_nova: Additional fix for venv build fallback  https://review.openstack.org/41897916:28
mhaydenmgariepy: gracias! :)16:29
*** TxGirlGeek has quit IRC16:29
*** DP2109 has joined #openstack-ansible16:30
*** galstrom_zzz is now known as galstrom16:31
*** weezS has quit IRC16:33
*** lucas__ has quit IRC16:33
*** DP2109 has quit IRC16:34
jjedinyNot sure if this would be of interest but given openstack-ansible-security is based on the RHEL 6 STIG... I used it as an example to show how STIG content can be mapped with NIST 800-53 Controls which are commonly used by Federal Agencies in their System Security Plans (not sure if this would be of interest/utility but sharing as an FYI) - https://gist.github.com/JJediny/afe3e7dc2c6a19eb61f5f35d1e0ee4e2   (youd need t16:34
jjedinyo download or scroll right to see mappings)16:34
*** weezS has joined #openstack-ansible16:38
*** lucas__ has joined #openstack-ansible16:44
*** lucas__ has quit IRC16:45
*** winggundamth has joined #openstack-ansible16:47
*** alezzandro has quit IRC16:47
*** aludwar has joined #openstack-ansible16:48
*** hw_wutianwei has quit IRC17:02
*** cloudm2 has quit IRC17:03
mhaydenjjediny: howdy!17:07
mhaydenjjediny: that's quite handy -- i'm still trying to figure out a way to improve reporting from the role17:08
mhaydenthis kind of thing would be helpful17:08
mgariepymhayden, https://bugs.launchpad.net/openstack-ansible/+bug/165571417:08
openstackLaunchpad bug 1655714 in openstack-ansible "V-38462 - Package management tool must verify authenticity of packages" [Undecided,New]17:08
mhaydenmgariepy: thanks!17:08
*** dmsimard is now known as dmsimard|afk17:08
* mhayden is afk for a short while17:08
*** woodard has quit IRC17:12
*** pcaruana has quit IRC17:12
andymccrwe should pin the version of jinja2 we use.17:16
palendaeandymccr: Does Ansible pin it?17:16
palendaeThey shouldn't but I figured I'd ask17:17
andymccrpalendae: i dont believe so, since i have 2.9.3 which was only released like yesterday i think17:17
* palendae looks17:17
andymccroh the 8th17:17
andymccr2.9.4 was yesterday17:17
palendaeNope https://github.com/ansible/ansible/blob/devel/setup.py#L2317:17
palendaeAnd no requirements.txt17:17
andymccri think there is a bug in jinja2 which has caused me a headache today17:18
palendae:(17:18
andymccrgonna try revert jinja2 version to see if that fixes, otherwise work around and file a bug!17:18
logan-wow they have been busy this week https://github.com/pallets/jinja/releases17:18
andymccrlogan-: yeah17:19
palendaeHrm17:19
andymccrbut i think we should pin it because otherwise we risk running into these random issues17:19
palendaeThat seems like a lot of "oh shi!" releases that have bugs17:19
andymccrpalendae: haha yeah indeed17:19
palendaehttps://pypi.python.org/pypi/ansible no 2.2.1 or 2.1.4 yet :(17:19
palendaehttps://github.com/ansible/ansible/releases17:19
*** MasterOfBugs has quit IRC17:20
*** pramodrj07 has joined #openstack-ansible17:20
*** karimb has quit IRC17:20
andymccrif jinja2 is installed as a req of ansible, can we pre-empt that by installing it beforehand - we dont explicitly install it17:21
*** sdake_ has joined #openstack-ansible17:22
palendaeandymccr: Yeah, but if they don't pin a version, us pinning should be fine, too17:22
palendaePip will sort it out17:22
andymccryeah true.17:22
palendaeThe ansible setup.py call just says "jinja2", so any version should work17:22
andymccrtesting quickly with 2.8.0 jinja2 to make sure im not just assuming this is the issue17:22
andymccrhaha oh i see mhayden got stung by new version too17:23
andymccrhttps://github.com/pallets/jinja/issues/656 oh wow.17:24
andymccryeah 2.8.0 works17:24
andymccrmaybe we just pin that17:24
palendae👍17:24
*** sdake has quit IRC17:25
*** pramodrj07 has quit IRC17:25
*** asettle has quit IRC17:26
palendaeandymccr: Looks like major is chasing down at least one of the bugs in ansible/jinja integration, but could take a bit for that to see a release17:29
evrardjpI think we have lots of issues pending, and I think it's a good idea to relatively pin more the whole ansible thing17:34
*** weezS has quit IRC17:36
stevellesounds like a pin is justified here17:37
palendaeYeah; I'd like to see jinja/ansible get fixed, but no need to sit around and wait17:38
palendaePin and grab an updated version when it's fixed17:38
*** Jack_Iv has joined #openstack-ansible17:41
*** Jack_Iv has quit IRC17:41
*** woodard has joined #openstack-ansible17:48
*** ethanoatetint has joined #openstack-ansible17:53
*** Jack_Iv has joined #openstack-ansible17:53
*** MasterOfBugs has joined #openstack-ansible17:55
*** Jack_Iv has quit IRC17:55
*** whiteveil has quit IRC17:55
*** whiteveil has joined #openstack-ansible17:57
*** woodard has quit IRC17:57
*** woodard has joined #openstack-ansible17:58
odyssey4mepalendae andymccr evrardjp stevelle we already pin using upper constraints, and major has a patch in to lower the upper constraint17:59
andymccrfor jinja2?17:59
odyssey4meyep17:59
*** whiteveil has quit IRC17:59
palendaeWell there we go18:00
palendaeMore indirection than I like, but I won't win that fight18:00
odyssey4mehttps://github.com/openstack/requirements/blob/master/upper-constraints.txt#L718:00
andymccrahh i see requirements bumped it18:00
odyssey4mehttps://github.com/openstack/openstack-ansible/blob/master/scripts/bootstrap-ansible.sh#L3018:01
odyssey4meso our pin is based on our current SHA's18:01
odyssey4meand we pin all the way back to mitaka, FYI https://github.com/openstack/openstack-ansible/blob/stable/mitaka/scripts/bootstrap-ansible.sh#L3118:02
andymccryeah i guess the issue is the requirements bump didnt run into any of the issues we saw with the bump18:02
*** retreved has quit IRC18:03
odyssey4meyep, of course - the upper constraints update doesn't test anything, it just tests co-installability18:03
odyssey4meits gate tests run various openstack things, but those won't touch what we touch18:03
odyssey4mewe could possibly ask to add our integrated build as a test to g-r updates18:03
odyssey4meI think the only deployment tooling project tested is puppet at this time18:04
odyssey4methat said, would any of our tests have caught it?18:04
*** galstrom is now known as galstrom_zzz18:04
andymccrodyssey4me: yeah i think the integrated build would - it builds swift so that would've failed18:04
andymccrso do the upper constraints only move on master because once its released its pretty much capped?18:05
andymccrthat is ok then - since its master we can still address these issues18:05
odyssey4mehttps://review.openstack.org/#/c/417932/ looks like out last successful integrated build that actually did a functional test18:06
andymccrhmm18:06
andymccri wonder what version of jinja got installed there18:06
andymccrlet me check18:06
andymccrahh yeah it was still pinned a 2.8 there18:06
andymccrso that worked18:06
*** retreved has joined #openstack-ansible18:07
andymccrour gate is pretty reliable i think?18:07
andymccrperhaps we should consider getting it added18:07
odyssey4mehmm, our current integrated build requirement is http://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt?id=a26b979cbaf013eb91649c7ce682bb61f2e84e1d18:08
andymccr(or rather at least talking about it)18:08
odyssey4mewhich is jinja 2.818:08
andymccrahh ok so integrated would work until upper-constraints gets changed18:08
odyssey4meuntil we bump sha's18:08
andymccryeah18:08
odyssey4melemme check role tests18:08
andymccrthe bug is really random18:09
andymccrso i think it might not impact many other roles18:09
andymccrbut then mhayden ran into a diff bug so who knows18:09
palendaeandymccr: Did you run into the for-loop value reset bug?18:09
odyssey4meyep, no sha fix - so that would break as soon as u-c updates: https://github.com/openstack/openstack-ansible-os_swift/blob/master/tox.ini#L1018:09
odyssey4methat is how all our role tests work18:09
andymccrpalendae: haha no - that is crazy though18:10
andymccrpalendae: the bug i ran into is that you can't seem to do a "set" and an "include" in the same template - it just bombs18:10
andymccrbut i need to diagnose the bug a bit better18:10
andymccrand simplify it so i can file it as a cleaner bug18:10
palendaeandymccr: Gotcha. Seems to indicate to me a lot has changed in Jinja2's internals18:10
palendaeYeah18:10
*** galstrom_zzz is now known as galstrom18:10
odyssey4mesee the proposed cap here https://review.openstack.org/#/c/418494/18:12
*** phalmos has joined #openstack-ansible18:12
*** adrian_otto has quit IRC18:13
andymccralextricity25: that pr is going through now. so should merge in an hour or so18:14
alextricity25awesome! Thanks andymccr18:14
loridfinally got the OSA deployment to work - logged into Horizon dashboard and there aren't any flavors listed to create new instances -18:14
odyssey4melorid there won't be in a blank install - that's standard for openstack18:14
loridmulti node deployment / 3 infras-1 storage-1compute-1haproxy18:15
odyssey4meopenstack no longer has default flavors18:15
*** adrian_otto has joined #openstack-ansible18:15
loridcan you plz provide a good url for the next mgmt phase of this deployment/create flavors, networks, etc.18:15
loridthank you for the response odyssey!18:15
*** david-lyle has joined #openstack-ansible18:15
*** david-lyle has quit IRC18:16
odyssey4melorid it's entirely up to you and your use case18:16
openstackgerritJimmy McCrory proposed openstack/openstack-ansible: [TEST] Update Ansible to v2.2.1.0-0.3.rc3  https://review.openstack.org/39987518:16
*** david-lyle has joined #openstack-ansible18:16
odyssey4meif you want a demo account and some test flavors, then execute the os-tempest-install.yml playbook18:16
odyssey4meotherwise there are tons of blog posts and documents around that cover first steps using openstack18:17
loridok - thank you so much18:17
odyssey4melorid what you could perhaps do is register a bug with some suggestions to add to our documentation18:19
odyssey4meideally we'd want to point to other documentation in openstack that helps with next steps, so if you find some then please add it to the bug18:20
odyssey4mewe can then add some suggestions to the deploy guide after the verification bits18:20
*** Dezieg has joined #openstack-ansible18:22
*** lucas__ has joined #openstack-ansible18:23
Dezieghi everyone.. :)18:24
Deziegevrardjp: thanks for the previous clues for AIO, now i got it working:D18:25
*** adrian_otto has quit IRC18:25
openstackgerritMerged openstack/openstack-ansible-os_keystone: Additional fix for venv build fallback  https://review.openstack.org/41897818:26
mhaydenandymccr / palendae: just got back -- did you find something else wrong in jinjaland?18:27
andymccrmhayden: yeah18:29
*** rromans has quit IRC18:29
*** ianychoi has quit IRC18:30
andymccrswift gates are failing because jinja2 2.9.3 bombs if you have an "include" and a "set" in the same template - atleast thats what it looks like (works fine in 2.8)18:30
*** admin0_ has left #openstack-ansible18:30
*** TxGirlGeek has joined #openstack-ansible18:32
openstackgerritPedro Magalhães (pjm6) proposed openstack/openstack-ansible: Install python2 in Ubuntu 16.04 or CentOS 7  https://review.openstack.org/41900118:38
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-specs: Outline a pluggable inventory backend system  https://review.openstack.org/41034218:39
*** electrofelix has quit IRC18:39
mhaydenandymccr: wonderful18:43
*** ethanoatetint has quit IRC18:44
*** rromans has joined #openstack-ansible18:48
openstackgerritMerged openstack/openstack-ansible: Pass correct venv paths to ceph_client  https://review.openstack.org/41889518:49
*** whiteveil has joined #openstack-ansible18:50
*** stuartgr has quit IRC18:52
*** dxiri has quit IRC18:53
openstackgerritMerged openstack/openstack-ansible-tests: Prevent repeated get-pip.py fetches in role tests  https://review.openstack.org/41785618:54
mgariepysorry for the spam.18:59
*** pramodrj07 has joined #openstack-ansible18:59
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_aodh: Add which in CentOS package list  https://review.openstack.org/41908918:59
*** dxiri has joined #openstack-ansible18:59
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: Add which in CentOS package list  https://review.openstack.org/41909119:00
odyssey4mepalendae stevelle would https://review.openstack.org/#/c/418076/ allow a resulting package for just the inventory, or for anything?19:01
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_cinder: Add which in CentOS package list  https://review.openstack.org/41909319:01
mgariepyhmm my git review is somewhat slow..19:02
stevellemgariepy: it does feel slow today19:02
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_glance: Add which in CentOS package list  https://review.openstack.org/41909419:02
palendaeodyssey4me: Right now, that code's only inventory. But it creates a package called openstack_ansible from which you could import anything19:02
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_gnocchi: Add which in CentOS package list  https://review.openstack.org/41909519:03
palendaeAssuming we put yaml validation in19:03
palendaefrom openstack_ansible.validators import yaml_validator (for example)19:03
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_heat: Add which in CentOS package list  https://review.openstack.org/41909619:03
palendaeAnd then the dynamic_inventory.py script would `from openstack_ansble.generate import main`19:04
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_horizon: Add which in CentOS package list  https://review.openstack.org/41909719:04
openstackgerritPedro Magalhães (pjm6) proposed openstack/openstack-ansible: Install python2 in Ubuntu 16.04 or CentOS 7  https://review.openstack.org/41900119:04
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_keystone: Add which in CentOS package list  https://review.openstack.org/41909819:05
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_neutron: Add which in CentOS package list  https://review.openstack.org/41910119:05
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_nova: Add which in CentOS package list  https://review.openstack.org/41910219:06
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_swift: Add which in CentOS package list  https://review.openstack.org/41910419:07
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_tempest: Add which in CentOS package list  https://review.openstack.org/41910519:07
*** poopcat has joined #openstack-ansible19:19
*** Jack_Iv has joined #openstack-ansible19:26
*** Jack_Iv has quit IRC19:27
openstackgerritSean M. Collins proposed openstack/openstack-ansible: [WIP] Work on starting the upgrade job  https://review.openstack.org/41852119:35
sc68calodyssey4me: thanks for the review on https://review.openstack.org/#/c/418521/19:36
sc68calodyssey4me: i'll respin a patch to address your comments in a bit19:36
*** fguillot has quit IRC19:43
openstackgerritMerged openstack/openstack-ansible: Update all SHAs for 14.0.6  https://review.openstack.org/41694619:46
*** cmart has quit IRC20:01
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-os_nova: Fixes incorrect variable used for ironic user name  https://review.openstack.org/40668920:01
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-specs: Propose a roadmap for replacing IP management code  https://review.openstack.org/41911620:03
*** sdake_ is now known as sdake20:07
*** whiteveil has quit IRC20:17
*** cmart has joined #openstack-ansible20:17
*** lucas__ has quit IRC20:25
*** lucas__ has joined #openstack-ansible20:28
*** asettle has joined #openstack-ansible20:29
*** lucas__ has quit IRC20:31
*** asettle has quit IRC20:33
*** asettle has joined #openstack-ansible20:33
*** zz_pwnall1337 is now known as pwnall133720:34
*** vnogin has joined #openstack-ansible20:34
*** sdake has quit IRC20:35
*** lucas__ has joined #openstack-ansible20:37
*** sdake has joined #openstack-ansible20:37
*** asettle has quit IRC20:38
*** askb has joined #openstack-ansible20:39
*** sdake has quit IRC20:41
*** adrian_otto has joined #openstack-ansible20:42
*** sdake has joined #openstack-ansible20:49
*** dmsimard|afk is now known as dmsimard21:00
mrdaMorning OSA21:01
cloudnullo/ mrda21:01
*** jamielennox|away is now known as jamielennox21:01
mrdao/21:02
spotzhey mrda21:04
mrdao/21:04
*** adrian_otto has quit IRC21:11
*** adrian_otto has joined #openstack-ansible21:12
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_aodh: Ensure 0755 default mode on new directories  https://review.openstack.org/41913421:13
*** smatzek has quit IRC21:13
openstackgerritNolan Brubaker proposed openstack/openstack-ansible-specs: Outline a pluggable inventory backend system  https://review.openstack.org/41034221:14
*** h5t4 has quit IRC21:14
*** Jack_Iv has joined #openstack-ansible21:15
*** h5t4 has joined #openstack-ansible21:16
*** winggundamth has quit IRC21:19
*** asettle has joined #openstack-ansible21:21
*** lucas__ is now known as lucasxu21:24
*** jmckind has joined #openstack-ansible21:25
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_designate: Ensure 0755 default mode on new directories  https://review.openstack.org/41914221:27
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_gnocchi: Ensure 0755 default mode on new directories  https://review.openstack.org/41914321:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_swift: Ensure 0755 default mode on new directories  https://review.openstack.org/41914521:32
*** Jeffrey4l_ has joined #openstack-ansible21:34
*** asettle has quit IRC21:34
*** Jeffrey4l has quit IRC21:35
*** whiteveil has joined #openstack-ansible21:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_ironic: Ensure 0755 default mode on new directories  https://review.openstack.org/41914621:38
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_magnum: Ensure 0755 default mode on new directories  https://review.openstack.org/41914721:40
*** DanyC has joined #openstack-ansible21:42
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_trove: Ensure 0755 default mode on new directories  https://review.openstack.org/41914821:42
*** Jack_Iv has quit IRC21:44
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_sahara: Ensure 0755 default mode on new directories  https://review.openstack.org/41914921:44
*** retreved has quit IRC21:46
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_tempest: Ensure 0755 default mode on new directories  https://review.openstack.org/41915121:47
*** DanyC has quit IRC21:48
*** DanyC has joined #openstack-ansible21:49
*** lucasxu has quit IRC21:52
*** lorid has quit IRC21:52
*** lucas__ has joined #openstack-ansible21:54
*** thorst has quit IRC21:54
*** schwicht has joined #openstack-ansible21:55
openstackgerritMajor Hayden proposed openstack/openstack-ansible-lxc_hosts: Add 'which' package to cached LXC image  https://review.openstack.org/41915621:57
mhaydenmgariepy: ^^ added which in the cached image, too21:57
*** thorst has joined #openstack-ansible21:57
*** DanyC has left #openstack-ansible21:58
*** Mudpuppy_ has quit IRC22:01
*** thorst has quit IRC22:02
*** sdake has quit IRC22:03
*** sdake has joined #openstack-ansible22:04
*** karimb has joined #openstack-ansible22:05
pjm6mhayden: you installed OSA in Ubuntu 16.04?22:11
*** DanyC has joined #openstack-ansible22:14
mhaydenjust trying to get Ubuntu 16.04 installed for now :|22:15
pjm6had problems with that?22:16
pjm6this new ubuntu server seems something weird22:16
*** sdake has quit IRC22:16
rmeleroisn't there an .msi installer for that? xD22:16
pjm6idk why but it seems that I restart the controller node, but my containers don't get IP :\22:17
pjm6rmelero: that was way better22:17
rmeleroNext -> Next -> Next -> Cloud Ready22:17
*** lucas__ has quit IRC22:18
*** DanyC has left #openstack-ansible22:21
openstackgerritMajor Hayden proposed openstack/openstack-ansible-lxc_hosts: Add common Red Hat packages to LXC image cache  https://review.openstack.org/41917522:24
*** woodard has quit IRC22:26
*** michaelgugino has quit IRC22:27
openstackgerritMajor Hayden proposed openstack/openstack-ansible-lxc_hosts: Add common Ubuntu packages to LXC image cache  https://review.openstack.org/41917922:28
*** markvoelker has quit IRC22:29
*** Jack_I has quit IRC22:32
*** markvoelker has joined #openstack-ansible22:32
*** markvoelker has quit IRC22:34
*** markvoelker has joined #openstack-ansible22:34
mhaydenpjm6: i'm getting reports from other folks that 16.04's quality is questionable22:36
mhaydeni thought it was just me22:36
pjm6mhayden: I think it's not you22:36
pjm6mhayden: besides your findings (about python2.7 poor performance)22:36
pjm6it seems to me that LXC containers networking its not so good22:37
pjm6first I thinking that container problem was related to my upgrade (14.04 -> 16.04)22:37
pjm6but after a restart I had the same behaviour :s22:37
*** jheroux has quit IRC22:38
*** markvoelker_ has joined #openstack-ansible22:39
*** markvoelker has quit IRC22:39
*** kberger has joined #openstack-ansible22:41
*** phalmos has quit IRC22:43
mhaydenwell i'll be in that boat soon i guess22:43
*** marst has quit IRC22:44
pjm6I though that you already moved to it22:45
pjm6the other folks that you were talking about, are running osa?22:45
*** jmckind has quit IRC22:46
mhaydenthey're running ubuntu 16.04 with other things22:46
mhaydeni plan to get OSA running on it22:46
pjm6ahh, ok22:47
pjm6yes i'm trying to but or i'm just doing wrong config (never configured with redundancy) or idk22:47
pjm6well this is strange, for some reason, my controller02 the containers get ip after reboot22:52
pjm6only the first and third not22:53
pjm6same kernel and version22:53
*** jmckind has joined #openstack-ansible22:53
pjm6and installed/configured same way22:53
*** chris_hultin is now known as chris_hultin|AWA22:59
*** cmart has quit IRC23:01
*** jmckind has quit IRC23:03
*** jperry has quit IRC23:10
*** cmart has joined #openstack-ansible23:15
*** sdake has joined #openstack-ansible23:20
*** adrian_otto has quit IRC23:25
*** Mudpuppy_ has joined #openstack-ansible23:26
*** galstrom is now known as galstrom_zzz23:30
*** sdake_ has joined #openstack-ansible23:30
*** sdake has quit IRC23:31
*** markvoelker_ has quit IRC23:32
*** adrian_otto has joined #openstack-ansible23:32
*** schwicht_at_work has joined #openstack-ansible23:33
*** klamath has quit IRC23:35
*** schwicht has quit IRC23:36
*** sdake has joined #openstack-ansible23:37
*** sdake_ has quit IRC23:38
*** markvoelker has joined #openstack-ansible23:40
*** schwicht_at_work has quit IRC23:41
*** thorst_ has joined #openstack-ansible23:48
*** thorst_ has quit IRC23:53
*** schwicht has joined #openstack-ansible23:54
*** sdake_ has joined #openstack-ansible23:55
*** sdake has quit IRC23:56
*** schwicht has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!