Monday, 2017-05-15

*** openstack has joined #openstack-ansible07:00
*** _ioni is now known as ioni07:04
*** ioni has joined #openstack-ansible07:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Gnocchi: Update URL used to source default configs  https://review.openstack.org/46417707:12
*** finchd has quit IRC07:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: [docs] Fix Newton deploy guide link  https://review.openstack.org/46395907:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: [docs] Fix Newton deploy guide link  https://review.openstack.org/46395907:15
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: [docs] Fix Ocata deploy guide link  https://review.openstack.org/46395607:15
*** hw_wutianwei has joined #openstack-ansible07:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Ceilometer: Update URL used to source default configs  https://review.openstack.org/46417807:23
*** manheim has joined #openstack-ansible07:28
*** winggundamth has joined #openstack-ansible07:30
*** manheim has quit IRC07:32
*** thorst_afk has joined #openstack-ansible07:35
*** Disova has joined #openstack-ansible07:39
*** thorst_afk has quit IRC07:40
ArchiFleKsodyssey4me_: got your todo :p07:46
*** pcaruana has joined #openstack-ansible07:47
Disovamorning everyone07:56
*** kylek3h has joined #openstack-ansible07:57
Disovaodyssey4me_: Hi, are you arround? I want to discuss your comment on review https://review.openstack.org/#/c/463926/07:57
*** manheim has joined #openstack-ansible07:59
*** manheim has quit IRC07:59
*** manheim has joined #openstack-ansible07:59
*** kylek3h has quit IRC08:02
*** cuongnv has joined #openstack-ansible08:03
*** pbandark has joined #openstack-ansible08:11
openstackgerritAdrien Cunin proposed openstack/openstack-ansible-os_designate master: Use internalURL by default for Neutron  https://review.openstack.org/45559608:11
evrardjpmorning everyone08:15
*** faizy_ has quit IRC08:16
*** faizy_ has joined #openstack-ansible08:16
andymccr_mornin'!08:17
evrardjpI was planning to ask what's up but that's gonna be long through IRC I guess :p08:17
evrardjpDid you see @jaypipes session on nova "scheduler wars: A new hope"?08:18
andymccr_i did not - its on my watch list though08:19
evrardjpyeah08:19
evrardjpIt makes me wonder if our role structure works for placement.08:19
andymccr_how so?08:20
andymccr_i mean it'll get split out at some point but we cant really avoid that08:20
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_magnum master: Update paste, policy and rootwrap configurations 2017-05-15  https://review.openstack.org/46456408:22
evrardjpyeah, I think it's gonna be needed to make it independant and orchestrate it better if the plans are true08:22
evrardjp(use it for cinder and others)08:22
andymccr_evrardjp: yeah the plan afaik is to split it into its own project08:23
andymccr_which is annoying for deployments but yeah08:24
evrardjpok so you already know :)08:24
andymccr_yeah the thing is that means a new project name and vars etc etc.08:24
evrardjpok I need to hurry up on the skeleton role :p08:25
andymccr_yeah had some queries about that :) so would be awesome to get that working08:25
*** pjm6_ has quit IRC08:27
openstackgerritAndy McCrae proposed openstack/openstack-ansible master: Update all SHAs for Pike 2017-05-15  https://review.openstack.org/46456508:28
*** rpittau has joined #openstack-ansible08:29
evrardjpandymccr_: oh the PoC works08:36
evrardjpIt just needs refining08:36
*** thorst_afk has joined #openstack-ansible08:36
andymccr_evrardjp: is that in the docs yet?08:36
*** odyssey4me_ is now known as odyssey4me08:36
*** andymccr_ is now known as andymccr08:36
evrardjpno, not yet. I still have to refine everything.08:37
evrardjpBut we are getting closer.08:37
andymccrevrardjp: we're all about results on this team - make it happen!08:37
evrardjpI know.08:38
*** shardy has joined #openstack-ansible08:49
openstackgerritAndy McCrae proposed openstack/openstack-ansible stable/ocata: Update all SHAs for 15.1.4  https://review.openstack.org/46457008:50
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_cinder stable/ocata: Update paste, policy and rootwrap configurations 2017-05-15  https://review.openstack.org/46457108:50
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_magnum stable/ocata: Update paste, policy and rootwrap configurations 2017-05-15  https://review.openstack.org/46457208:51
evrardjpjmccrory: cloudnull could you ping me when you're available? mostly cloudnull to be honest :p08:51
*** thorst_afk has quit IRC08:55
*** pmannidi has quit IRC08:57
*** kylek3h has joined #openstack-ansible08:58
*** kylek3h has quit IRC09:02
*** armaan_ has joined #openstack-ansible09:03
*** armaan has quit IRC09:03
odyssey4meo/ all09:06
odyssey4meDisova yep, I'm here - what's up?09:06
openstackgerritAndy McCrae proposed openstack/openstack-ansible stable/newton: Update all SHAs for 14.2.4  https://review.openstack.org/46457809:08
evrardjphey odyssey4me09:09
evrardjpandymccr: for this https://review.openstack.org/#/c/464573/1/deliverables/newton/openstack-ansible.yaml could we update the sha bump? It introduces an issue for trusty on local facts for lxc_hosts because it doesn't include df227381ff3d318fcb8d7ab925f1ee66ed161ec809:16
evrardjpI'd rather bump those together09:16
evrardjpwhat's your opinion?09:16
andymccrevrardjp: you'd need to sha bump openstack-ansible first09:16
andymccre.g. a PR to sha bump lxc_hosts to df22 in openstack-ansible09:16
andymccrotherwise its not a tested combination09:17
andymccri can hold off the release if you want, but we're going to need to sha bump that in openstack-ansible first09:17
evrardjpyeah ofc09:17
evrardjpbut what do you think of this idea?09:17
andymccri dont mind the idea, but if its urgent it shoulda been done already :P09:18
evrardjpfair point.09:18
evrardjpI'm too late09:18
andymccrevrardjp: does it break trusty if we dont have that patch?09:19
evrardjpI don't remember but if it sha bumped initially it should be alright.09:20
andymccrhmm yeah that should be the case.09:20
andymccrim happy to wait on the newton release if we think its critical09:20
evrardjpwell it's for user experience09:20
evrardjplet me review the rest to see if there is something else I missed09:20
evrardjpif there is something else, I'd do both at the same time09:21
evrardjpelse it will just wait09:21
andymccryeah imo the correct thing is to include it if its a break that needs fixing (and our gate doesnt catch everything unfortunately), also its not a huge deal to change it09:21
*** lostRhino has joined #openstack-ansible09:22
evrardjp100% agreed.09:22
evrardjplet me prepare a patch real quick09:22
evrardjpthe rest seems alright09:22
andymccrevrardjp: sweet, sounds good to me09:22
Disovaodyssey4me: if you have undefined variable cinder_nfs_client the task failed while templating https://github.com/openstack/openstack-ansible-os_cinder/blob/stable/newton/tasks/cinder_post_install.yml#L7409:23
odyssey4meDisova ah, I see the bug09:24
odyssey4mesorry - I completely missed that both were using the same template09:24
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible stable/newton: Bump A-R-R to include trusty local facts fix  https://review.openstack.org/46458309:25
Disovaodyssey4me: no problem :)09:25
evrardjpodyssey4me: ^ could interest you IIRC09:26
*** stuartgr has joined #openstack-ansible09:26
*** sulo_ is now known as sulo09:27
*** kysse_ is now known as kysse09:29
andymccrevrardjp: i've blocked the release of newton 14.2.309:31
andymccruntil that one goes in and we can sha-bump09:32
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_neutron master: Move static defaults to vars  https://review.openstack.org/46353009:32
evrardjpandymccr: thanks09:32
*** dementor has joined #openstack-ansible09:37
dementorexcuse me, can somebody help me how to learn ansible api to automate openstack09:38
*** dementor has quit IRC09:42
*** SerenaFeng has quit IRC09:46
*** pjm6 has joined #openstack-ansible09:47
*** Amit82 has quit IRC09:47
*** lostRhino has left #openstack-ansible09:53
*** electrofelix has joined #openstack-ansible09:53
*** kylek3h has joined #openstack-ansible09:58
*** kylek3h has quit IRC10:03
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: vars: Use lxc_net_bridge instead of hardcoded lxcbr0  https://review.openstack.org/46330010:03
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-ops master: [WIP] Option to select different branch for upgrading  https://review.openstack.org/46365910:05
evrardjpI have to go for today. See you laterz10:05
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Fix container bridge networking on SUSE  https://review.openstack.org/46330110:05
*** xingchao has joined #openstack-ansible10:11
*** thorst_afk has joined #openstack-ansible10:13
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_container_create master: Add SUSE support  https://review.openstack.org/46335910:13
*** mariusv has quit IRC10:17
*** thorst_afk has quit IRC10:18
*** shardy is now known as shardy_afk10:24
*** piliman974 has joined #openstack-ansible10:25
*** lunarlamp has joined #openstack-ansible10:26
*** cNilesh has quit IRC10:31
*** armaan has joined #openstack-ansible10:41
*** armaan_ has quit IRC10:42
*** vaishali has joined #openstack-ansible10:45
*** basilAB has joined #openstack-ansible10:45
*** kylek3h has joined #openstack-ansible10:59
*** pjm6 has left #openstack-ansible11:02
*** xingchao has quit IRC11:03
*** kylek3h has quit IRC11:04
*** pjm6 has joined #openstack-ansible11:11
*** pbandark1 has joined #openstack-ansible11:11
*** pbandark has quit IRC11:12
*** pbandark1 is now known as pbandark11:12
*** thorst_afk has joined #openstack-ansible11:14
*** thorst_afk has quit IRC11:15
*** thorst_afk has joined #openstack-ansible11:16
*** cpuga has joined #openstack-ansible11:17
*** cpuga has quit IRC11:19
*** cpuga has joined #openstack-ansible11:20
*** vnogin has joined #openstack-ansible11:22
*** lunarlamp is now known as mariusv11:32
*** Tahvok has joined #openstack-ansible11:42
TahvokHey guys!11:42
odyssey4meo/ Tahvok11:43
TahvokI'm reading through the network configuration with ansible, however I can't find anywhere whether ansible can work with openvswitch or not?11:43
odyssey4meTahvok https://docs.openstack.org/developer/openstack-ansible-os_neutron/app-openvswitch.html & http://trumant.github.io/openstack-ansible-openvswitch.html11:44
Tahvokodyssey4me: thank you so much!11:45
odyssey4meTahvok sure, no problem - the most mature deployment network subsystem is linuxbridge, so there may be some rough edges - if you find any bugs then please report them!11:46
TahvokWill do!11:46
odyssey4mealso, if it could be made easier to work with we'd love bugs for feedback11:46
*** shardy_afk is now known as shardy11:47
openstackgerritMerged openstack/openstack-ansible stable/newton: Bump A-R-R to include trusty local facts fix  https://review.openstack.org/46458311:48
*** schwicht_at_work has quit IRC11:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Update all SHAs for 14.2.4  https://review.openstack.org/46457811:52
mgariepygood morning everyone11:57
spotzhey all, be back in a bit, pony time:)11:57
*** shardy_ has joined #openstack-ansible11:59
*** cuongnv has quit IRC12:00
mhaydenbuenos dias!12:03
*** acormier has joined #openstack-ansible12:10
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: Install libselinux-python on RHEL  https://review.openstack.org/46431312:13
*** retreved has joined #openstack-ansible12:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-openstack_hosts stable/ocata: Install libselinux-python on RHEL  https://review.openstack.org/46462312:14
*** vnogin has quit IRC12:16
*** kylek3h has joined #openstack-ansible12:16
*** vnogin has joined #openstack-ansible12:18
*** kylek3h has quit IRC12:20
*** acormier has quit IRC12:24
*** chas_ has quit IRC12:32
*** chas has joined #openstack-ansible12:32
*** chas has quit IRC12:37
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-tests master: gitignore: Update file and add it to the sync list  https://review.openstack.org/46462912:41
*** askb has quit IRC12:42
*** schwicht has joined #openstack-ansible12:45
*** woodard has joined #openstack-ansible12:47
*** woodard has quit IRC12:47
odyssey4memhayden would it be appropriate to backport https://review.openstack.org/463873 / https://review.openstack.org/463760 ?12:47
*** woodard has joined #openstack-ansible12:48
*** thorst_afk has quit IRC12:49
*** cpuga has quit IRC12:51
*** cpuga has joined #openstack-ansible12:52
*** cpuga_ has joined #openstack-ansible12:53
openstackgerritMarc GariĆ©py proposed openstack/openstack-ansible-repo_server stable/ocata: Add LSYNCD_OPTIONS for CentOS  https://review.openstack.org/46463112:53
mgariepyodyssey4me, yes for the lsyncd one.12:53
odyssey4memgariepy thanks, I thought as much12:54
mhaydenodyssey4me: looking12:55
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova stable/ocata: Remove trailing slash in nginx config  https://review.openstack.org/46463212:55
odyssey4metyvm12:56
*** cpuga has quit IRC12:57
*** kylek3h has joined #openstack-ansible12:58
*** schwicht has quit IRC12:59
*** klamath has joined #openstack-ansible12:59
*** klamath has quit IRC12:59
mgariepyI had the lsyncd issue but didn't had time to look into it13:00
*** klamath has joined #openstack-ansible13:00
mgariepylogan-, are you around ?13:02
*** esberglu has joined #openstack-ansible13:04
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_container_create master: Add SUSE support  https://review.openstack.org/46335913:05
mgariepylogan-, some though for pkg deploy spec, we would loose the ability to deploy a certain tag release.(the package install would always take the latest one and not the one that it was tested with)13:05
openstackgerritMerged openstack/openstack-ansible-repo_server stable/ocata: Add LSYNCD_OPTIONS for CentOS  https://review.openstack.org/46463113:13
*** jwitko has joined #openstack-ansible13:19
*** xingchao has joined #openstack-ansible13:20
*** cathrich_ has joined #openstack-ansible13:21
*** faizy has joined #openstack-ansible13:22
*** cathrichardson has quit IRC13:23
*** vnogin has quit IRC13:24
*** johnthetubaguy has quit IRC13:24
*** faizy_ has quit IRC13:25
*** johnthetubaguy has joined #openstack-ansible13:26
*** johnthetubaguy has quit IRC13:27
*** chas has joined #openstack-ansible13:27
*** lostRhino has joined #openstack-ansible13:28
*** vnogin has joined #openstack-ansible13:28
*** johnthetubaguy has joined #openstack-ansible13:29
*** chas has quit IRC13:29
*** chas has joined #openstack-ansible13:29
*** johnthetubaguy has quit IRC13:33
*** johnthetubaguy has joined #openstack-ansible13:34
*** xingchao has quit IRC13:35
*** xingchao has joined #openstack-ansible13:35
*** lbragstad has joined #openstack-ansible13:36
*** johnthetubaguy has quit IRC13:37
*** piliman974 has quit IRC13:37
*** gouthamr has joined #openstack-ansible13:38
*** piliman974 has joined #openstack-ansible13:39
*** xingchao has quit IRC13:40
*** xingchao has joined #openstack-ansible13:41
*** diliprenkila has joined #openstack-ansible13:44
diliprenkilaIs there any way to restart all networking agents in osad ?13:45
odyssey4mespotz rromans if you happen to be about, I have two docs patches in the queue: https://review.openstack.org/463956 & https://review.openstack.org/46395913:45
odyssey4mediliprenkila the same way you would on any server, except you can use ansible to do it across multiple servers at once13:46
odyssey4meie ansible -m shell -a "whatever command you like" <target host group name>13:46
*** johnthetubaguy has joined #openstack-ansible13:47
*** johnthetubaguy has quit IRC13:48
*** jamesdenton has joined #openstack-ansible13:49
*** LanceHaig has left #openstack-ansible13:54
cloudnullmornings14:00
cloudnullping evrardjp14:00
*** weezS has joined #openstack-ansible14:01
jrosser_odyssey4me: we seem to have a solution to no_proxy being truncated by adding deploy-time specific environment: {{ global_playbook_env_vars }} to the OSA playbooks14:02
jrosser_any comments on that before we think about making some patches?14:02
odyssey4mejrosser_ no thoughts at this time - looking forward to seeing the solution :)14:04
*** johnthetubaguy has joined #openstack-ansible14:04
jrosser_odyssey4me: ok :)14:04
*** Trident has joined #openstack-ansible14:06
*** johnthetubaguy has quit IRC14:07
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/newton: Fix haproxy-service-config tag  https://review.openstack.org/46301614:07
*** johnthetubaguy has joined #openstack-ansible14:07
*** schwicht has joined #openstack-ansible14:08
openstackgerritMerged openstack/openstack-ansible-openstack_hosts stable/ocata: Install libselinux-python on RHEL  https://review.openstack.org/46462314:08
*** johnthetubaguy has quit IRC14:08
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/ocata: Fix haproxy-service-config tag  https://review.openstack.org/46301514:08
*** acormier has joined #openstack-ansible14:09
*** johnthetubaguy has joined #openstack-ansible14:10
*** johnthetubaguy has quit IRC14:10
*** johnthetubaguy has joined #openstack-ansible14:10
*** vnogin has quit IRC14:11
*** chigang has joined #openstack-ansible14:12
*** acormier_ has joined #openstack-ansible14:13
*** acormier has quit IRC14:13
*** vnogin has joined #openstack-ansible14:15
*** johnthetubaguy has quit IRC14:17
*** johnthetubaguy has joined #openstack-ansible14:17
*** lostRhino has quit IRC14:21
odyssey4melooking for a second review for https://review.openstack.org/463014 & https://review.openstack.org/463018 (both backports) please14:28
mhaydenmight be good for our CI pipeline for nginx -> https://github.com/yandex/gixy14:32
odyssey4methat's neat :)14:33
odyssey4meI'd even say that we should do it in production deployments as a template validate step.14:34
odyssey4methat'll prevent any new change being implemented into production that introduces a security leak14:34
mhaydenoh that's a good idea14:35
mgariepyindeed that's pretty neat.14:35
spotzHey guys, I remember there was a talk in Tokyo about using AIO vs devstack that Miguel did. Do we have a setting or way to create the demo project/user?14:35
mhaydeni forgot we could specify our own template verifier14:35
mgariepywould it be a good idea to add it to osa nginx spec ?14:35
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/newton: Adding HAProxy backend options  https://review.openstack.org/46301814:36
*** lostRhino has joined #openstack-ansible14:36
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/ocata: Adding HAProxy backend options  https://review.openstack.org/46301414:37
spotzodyssey4me: reading those now14:37
spotzodyssey4me: all reviewed14:38
cloudnullmhayden: nice find!14:39
odyssey4memgariepy yeah, I think so14:39
cloudnullgixy looks good14:39
mhaydenit came from devops weekly14:39
odyssey4methanks spotz14:39
spotzodyssey4me: I think it got lost in spam but do you know if we can create a user/project in AIO while we're creating?14:39
*** thorst_afk has joined #openstack-ansible14:41
*** diliprenkila has quit IRC14:43
openstackgerritMerged openstack/openstack-ansible stable/ocata: [docs] Fix Ocata deploy guide link  https://review.openstack.org/46395614:45
*** thorst_afk has quit IRC14:46
*** marst has joined #openstack-ansible14:46
openstackgerritMerged openstack/openstack-ansible stable/newton: [docs] Fix Newton deploy guide link  https://review.openstack.org/46395914:47
*** schwicht has quit IRC14:47
*** schwicht has joined #openstack-ansible14:48
odyssey4mespotz the only thing that does that is the tempest playbook/role14:49
odyssey4meit adds a demo project and demo user with some networks14:50
*** lostRhino has quit IRC14:50
*** piliman974 has quit IRC14:51
*** lostRhino has joined #openstack-ansible14:51
spotzodyssey4me: Hrm, I can use that. I just need to tell my AIO to use it?14:54
odyssey4mespotz the AIO should do it by default14:55
odyssey4meit's part of the bootstrapped config14:55
odyssey4meuser:demo / password:demo IIRC14:55
spotzodyssey4me: hrm, it wasn't there the first time I built last night, I built a second time with the admin passwd of my choice14:55
spotzodyssey4me: Yeah not there, I'm using newton if that makes a difference14:56
openstackgerritBjoern Teipel proposed openstack/openstack-ansible master: Add memcached vip for keystone and other services  https://review.openstack.org/45817214:57
odyssey4mespotz are you using setup-{hosts,infrastructure,openstack}.yml or run-playbooks.sh to execute the playbook deployment?14:58
openstackgerritBjoern Teipel proposed openstack/openstack-ansible master: Add memcached vip for keystone and other services  https://review.openstack.org/45817214:59
spotzodyssey4me: run-playbooks.sh, the only change I made from the instructions we've got up is gir checkout stable/netwon and then changing the admin passwd14:59
*** chyka has joined #openstack-ansible15:01
*** chyka has quit IRC15:02
*** chyka has joined #openstack-ansible15:03
*** thorst_afk has joined #openstack-ansible15:03
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-os_magnum master: Enable custom keystone endpoint_type in templates  https://review.openstack.org/45535615:05
*** tobberyd_ has joined #openstack-ansible15:05
*** tobberydberg has quit IRC15:06
ArchiFleKsodyssey4me: i added the release note ^^ :)15:06
*** Oku_OS is now known as Oku_OS-away15:08
*** tobberyd_ has quit IRC15:11
odyssey4meArchiFleKs responded - sorry about the back-and-forth15:13
*** shausy has quit IRC15:14
ArchiFleKsodyssey4me: np, seems a lot simpler when you write it :)15:14
odyssey4meArchiFleKs the trick is to not get too detailed15:16
openstackgerritMerged openstack/openstack-ansible-plugins master: Support Keystone versionless endpoints  https://review.openstack.org/46287915:18
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-os_magnum master: Enable custom keystone endpoint_type in templates  https://review.openstack.org/45535615:22
*** winggundamth has quit IRC15:24
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Add SUSE support  https://review.openstack.org/46335915:24
*** pcaruana has quit IRC15:25
*** woodard has quit IRC15:25
*** armaan has quit IRC15:26
*** armaan has joined #openstack-ansible15:26
*** xingchao has quit IRC15:27
*** xingchao has joined #openstack-ansible15:28
*** smatzek has joined #openstack-ansible15:30
*** armaan has quit IRC15:31
*** xingchao has quit IRC15:34
openstackgerritMerged openstack/monitorstack master: Removes tuple unpacking from memcache test  https://review.openstack.org/46337415:35
ArchiFleKsodyssey4me: regarding the keystone endpoints, I think the role only create them at first run but will not change them after, it means it should be documented somewhere when upgrading from ocata to pike right ?15:36
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty master: Perform an atomic policy file change  https://review.openstack.org/46109415:38
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-os_keystone master: Bootstrap Keystone with versionless endpoints  https://review.openstack.org/46288015:38
*** vnogin has quit IRC15:39
*** tobberydberg has joined #openstack-ansible15:40
*** lbragstad has quit IRC15:40
openstackgerritMerged openstack/openstack-ansible-tests master: gitignore: Update file and add it to the sync list  https://review.openstack.org/46462915:41
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Move static defaults to vars  https://review.openstack.org/46353015:44
*** tobberydberg has quit IRC15:44
spotzhey mhayden - does your security stuff lock down root for ssh in newton?15:44
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/ocata: Fix for lookup and get_url occuring in different places  https://review.openstack.org/46395815:44
mhaydenspotz: it doesn't -- that's in the docs15:44
mhaydensince it can disrupt existing deployment fairly badly15:44
odyssey4meArchiFleKs the endpoints should be updated from newton onwards I think15:44
spotzmhayden: Ok weird I can no longer ssh to the server I'm working on15:45
*** jeh has joined #openstack-ansible15:45
odyssey4meArchiFleKs https://review.openstack.org/#/q/I0ade538e20f2a926b33c1637446c2d4f650cd13d15:45
spotzmhayden: odyssey4me Recreating the server, will also look to see why the tempest role didn't run15:46
odyssey4mespotz the AIO bootstrap does I think\15:47
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/ocata: Fix for lookup and get_url occuring in different places  https://review.openstack.org/46380115:47
spotzodyssey4me: Bleh!15:47
odyssey4mespotz always setup key-based auth :)15:47
spotzodyssey4me: It's for labs, we can't do that for the students. Trying to recreate the COA experience15:48
odyssey4mespotz for newton the AIO needs this set to run tempest by default: https://github.com/openstack/openstack-ansible/blob/stable/newton/scripts/run-playbooks.sh#L13515:48
odyssey4mewe do it in the gate tests: https://github.com/openstack/openstack-ansible/blob/stable/newton/scripts/gate-check-commit.sh#L13915:49
spotzodyssey4me: really weird cause I do scripts/run-playbooks.sh15:51
odyssey4mespotz yep, but unless that env var is set beforehand run-playbooks won't run tempest15:51
spotzahh ok15:51
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/ocata: Update paste, policy and rootwrap configurations 2017-05-15  https://review.openstack.org/46457115:51
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/newton: Check that 'cinder_nfs_client' is defined  https://review.openstack.org/46392615:51
odyssey4meso if you're in a position where you want to, but perhaps not execute tests, just cd to the playbooks directory and run os-tempest-install.yml15:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cloudkitty stable/ocata: Perform an atomic policy file change  https://review.openstack.org/46467415:52
spotzodyssey4me: ahh good idea! And I need to peek at the ssh issue15:53
odyssey4mespotz you'll have to modify the host sshd_config after the AIO bootstrap15:54
*** chhavi has quit IRC15:55
*** esberglu has quit IRC15:55
openstackgerritMerged openstack/openstack-ansible-os_magnum stable/ocata: Update paste, policy and rootwrap configurations 2017-05-15  https://review.openstack.org/46457215:55
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Update paste, policy and rootwrap configurations 2017-05-15  https://review.openstack.org/46456415:55
spotzodyssey4me: Yeah I'm thinking if I script it I'll copy it away and then return it later. I also will need to grab the openrcs and put them on the host after15:55
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Add RedHat derivatives support for OSA Magnum role  https://review.openstack.org/45960615:56
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-os_magnum stable/ocata: Enable custom keystone endpoint_type in templates  https://review.openstack.org/46360215:57
odyssey4meArchiFleKs I have no idea whether any other service support versionless endpoints. If they do I'd love us to use them.15:58
ArchiFleKsok I don't really know either but it is supposed to be the way to go15:59
ArchiFleKsodyssey4me: do you now if I can sort of 'rebase' a cherry-pick from guerrit, because the original patch set has changed16:00
ArchiFleKsfor this one https://review.openstack.org/#/c/463602/16:00
openstackgerritRamon Melero proposed openstack/openstack-ansible stable/ocata: Implement http-check on haproxy services  https://review.openstack.org/46467616:01
*** markus_z has quit IRC16:02
openstackgerritMerged openstack/openstack-ansible master: Update all SHAs for Pike 2017-05-15  https://review.openstack.org/46456516:03
odyssey4meArchiFleKs oh, silly me - I see that the versionless endpoints will only be used by the bootstrap and never updated (because the bootstrap won't run if they exist)16:07
odyssey4meI guess there could be a task added to update it to cater for upgrades?16:07
*** vnogin has joined #openstack-ansible16:11
odyssey4meArchiFleKs assuming that a patch is a clean cherry-pick, the cherry pick button in gerrit will update the existing patch set16:11
*** manheim has quit IRC16:11
*** manheim has joined #openstack-ansible16:12
*** esberglu has joined #openstack-ansible16:14
*** vnogin has quit IRC16:15
*** vnogin has joined #openstack-ansible16:15
*** manheim has quit IRC16:16
*** piliman974 has joined #openstack-ansible16:16
*** esberglu has quit IRC16:18
openstackgerritLogan V proposed openstack/openstack-ansible stable/ocata: Bump unbound role tag  https://review.openstack.org/46468516:25
boxrick1cloudnull: Currently just looking at your https://github.com/openstack/openstack-ansible-plugins/blob/master/connection/ssh.py  My intent here is to make it LXC 2.0 compatible. Is there anything other than including it, setting the right variables I need to be aware of ?16:26
openstackgerritMerged openstack/openstack-ansible master: Do not use those commands when they are not exist.  https://review.openstack.org/46329416:29
openstackgerritMerged openstack/openstack-ansible master: Adjust typesetting of disk requirements  https://review.openstack.org/46353616:29
*** vgeorga has joined #openstack-ansible16:32
vgeorgaHi when i try to create containers the process stops at "TASK [lxc_container_create : Wait for ssh to be available] *********************", pastebin: http://paste.openstack.org/show/609590/16:37
vgeorgaAny thoughts?16:38
openstackgerritMerged openstack/openstack-ansible master: Change swap creation command for CentOS  https://review.openstack.org/46377416:40
openstackgerritMerged openstack/openstack-ansible master: Updated from global requirements  https://review.openstack.org/46443716:41
openstackgerritMerged openstack/openstack-ansible master: scripts: sources-branch-update.sh: Remove double 'sed'  https://review.openstack.org/46418016:41
openstackgerritMerged openstack/openstack-ansible master: Update sources-branch-updater to cater for git sourced config  https://review.openstack.org/46416416:41
openstackgerritMerged openstack/openstack-ansible stable/newton: Add missing tempest venv tag  https://review.openstack.org/46356816:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: scripts: sources-branch-update.sh: Remove double 'sed'  https://review.openstack.org/46468816:42
vgeorgaI'm sorry is this a proposed solution for my problem? Because I didn't understand it16:44
odyssey4meboxrick1 we've been using lxc2 since newton, so it's already lxc 2.0 compatible ?16:45
*** david-lyle has quit IRC16:46
*** dklyle has joined #openstack-ansible16:46
odyssey4mevgeorga which tag or branch are you deploying with?16:46
boxrick1LXD as opposed to LXC2 I should say16:47
odyssey4meah16:47
*** chas has quit IRC16:47
vgeorganewton16:47
*** chas has joined #openstack-ansible16:48
odyssey4mevgeorga ok, what did you checkout - stable/newton or a particular tag?16:48
vgeorgastable/newton16:48
vgeorgait was some time ago16:48
vgeorgathere was a power outage16:48
vgeorgaand my containers got messed up16:49
vgeorgaso i tried to a destory and then create containers16:49
vgeorgado*16:49
vgeorgalxc-containers-destroy/create16:49
odyssey4meand you did an update of your git repo at the same time?16:49
vgeorgaim not sure16:49
odyssey4meor is your stable/newton checkout from ages ago16:50
vgeorgai performed apt-get update16:50
vgeorgathought16:50
vgeorgai think is the second16:50
vgeorgathough*16:50
odyssey4mewhat's the value of openstack_release in playbooks/inventory/group_vars/all.yml ?16:50
vgeorgaim sorry how do i extract that?16:52
*** chas has quit IRC16:52
vgeorgaopenstack_release: 14.0.816:53
vgeorgaIs the problem because of them openstack version?16:54
vgeorgathe*16:54
odyssey4meno, that's just to identify where you're at16:55
odyssey4meok, so that means that the thing is trying to ping the container from your deployment host16:55
odyssey4mecan you ping the container?16:55
vgeorgai cant because the process stacks before the containers are assigned ips16:57
vgeorgaIt just remains in the "waiting for ssh" for ever16:58
odyssey4mevgeorga if the container aren't getting IP's then it means that something is wrong in the config - if it's hanging then it's likely a routing issue and you may have to trace the packets to figur it out16:59
kylek3hvgeorga: are you using xenial?17:00
vgeorga@kylek3h yes17:00
vgeorgathe thing is that if i run the containers create a second time17:01
kylek3hif you had a power outage and the lxc containers came back up but without ips then it's probably the systemd race condition17:01
kylek3hcheck your syslog and see if dnsmasq was killed.17:01
vgeorgai see17:02
vgeorgaand if thats the case?17:02
vgeorgawhat's the solution17:02
vgeorgaBtw i already destroyed the containers17:02
kylek3hI spoke to cloudnull about it at the summit.  he sees it too.17:03
kylek3hesh17:03
kylek3hI've been using the lxc-system-manage command to rebuilt the networking after I see the race condition17:03
vgeorga#odyssey4me If i run the containers create a second time it passes the wait ssh phase and the containers setup normaly17:04
vgeorgais there a documentation somewhere for this?17:04
odyssey4mevgeorga ok, then it sounds like the script kylek3h has mentioned may have been useful to you17:04
vgeorgaYeah but the thing is that i create the containers17:05
*** vnogin has quit IRC17:05
vgeorgabut in the setup_infrastructure17:06
vgeorgai stacks to the attempt of trying to ssh the repo container17:06
vgeorgait*17:06
vgeorgaafter that the repo container loses its IP17:06
*** esberglu has joined #openstack-ansible17:06
vgeorgaand if i try to run setup_infrastructure17:07
vgeorgai get an error17:07
vgeorgadue to repo container not having an IP17:07
*** weezS has quit IRC17:08
*** chas has joined #openstack-ansible17:08
vgeorgaSo my question is what should I do now?17:09
vgeorgaI dont have much experience with opestack17:09
odyssey4meall IP's except the eth0 IP are statically defined, so perhaps you should lax-attach into one of the containers and inspect the logs to try to figure out why the interfaces aren't coming up17:09
openstackgerritNolan Brubaker proposed openstack/openstack-ansible master: Add api_container metagroup  https://review.openstack.org/46470317:09
*** vnogin has joined #openstack-ansible17:12
*** chas has quit IRC17:13
*** vnogin has quit IRC17:14
vgeorga<odyssey4me> Ok i will try that i guess17:15
vgeorgakylek3h If dnsmasq is killed how to you bring it back up?17:16
kylek3hcheck out the lxc-system-manage command17:16
kylek3hor you can cycle lxcbr0 and it'll do it.17:17
vgeorgaI'm sorry there are some terms i'm not familiar , "cycle lxcbr0"?17:18
kylek3hI was using 'lxc-system-manage system-rebuild' after a power outage17:18
kylek3hsorry...'cycle'  = ifdown then ifup17:18
vgeorgaoh ok17:19
vgeorgathnx!17:19
DimGRvgeorga are you runnin the ansible role from within the same network as the target hosts?17:23
vgeorgaIm not sure I understand the question17:27
vgeorgaIs there a way to check this?17:27
vgeorgaoh wait17:27
vgeorgaI think i got it17:28
DimGRthe role wants to ssh using the containers local ip so if you running the role from your home computer  , will always fail17:28
vgeorgawell the deployment host is in the same network as the target hosts17:28
DimGRok , ifdown lxcbr0 ; ifup lxcbr017:28
vgeorgawell i'm ssh ing to dpeloyment17:29
vgeorgaand commanding the node from home17:29
vgeorgais that what you mean from home?17:29
*** xingchao has joined #openstack-ansible17:29
*** woodard has joined #openstack-ansible17:32
*** retreved_ has joined #openstack-ansible17:34
*** retreved_ has quit IRC17:36
*** retreve__ has joined #openstack-ansible17:36
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-repo_build stable/ocata: Use package module to install distro packages  https://review.openstack.org/46240017:37
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_gnocchi stable/ocata: Use package module to install distro packages  https://review.openstack.org/46239817:37
*** retreve__ has quit IRC17:37
*** dklyle is now known as david-lyle17:37
*** retreved has quit IRC17:38
*** NostawRm has joined #openstack-ansible17:38
*** armaan has joined #openstack-ansible17:50
*** shardy is now known as shardy_afk17:59
*** acormier_ has quit IRC17:59
*** shardy_afk is now known as shardy18:00
cloudnullkylek3h: ++18:00
cloudnullIDK specifically where it breaks down but i've had the same issue where containers are not getting network connectivity on first boot.18:02
*** NostawRm has quit IRC18:02
*** poopcat has joined #openstack-ansible18:02
*** shardy is now known as shardy_afk18:02
openstackgerritMerged openstack/openstack-ansible-repo_build stable/ocata: Use package module to install distro packages  https://review.openstack.org/46240018:03
*** schwicht has quit IRC18:03
*** albertcard1 has joined #openstack-ansible18:06
*** poopcat has quit IRC18:09
*** cinerama has joined #openstack-ansible18:10
*** schwicht has joined #openstack-ansible18:11
*** vnogin has joined #openstack-ansible18:12
*** pbandark has quit IRC18:14
*** electrofelix has quit IRC18:15
*** piliman974 has quit IRC18:15
cloudnullboxrick1: it should be ready to go out of the box. though I think we'll need to change the lxc-attach command to "lxc exec $NAME -- /bin/bash"18:15
boxrick1I am trying to use it out of context in this case just on some other boxes.18:16
cloudnullso on static inventory ?18:17
boxrick1So this is on a None OSA host, with a dynamic inventory ( but for the sake of argument it could be static )18:17
cloudnullok.18:17
cloudnulllogan-: and I worked on getting that going a little while back .18:17
cloudnullI'm looking for my old notes on that18:18
boxrick1But it can't see the container_name / physical_hosts vars, so I think I have probably got it wrong somewhere.18:18
boxrick1It calls the plugin but then skips over it since they don't exist18:18
cloudnullbasically the ssh plugin works with the linear strategy to identify a container18:18
cloudnullhttps://github.com/openstack/openstack-ansible-plugins/blob/master/strategy/linear.py#L29-L3718:19
*** vnogin has quit IRC18:19
cloudnullhttps://github.com/openstack/openstack-ansible-plugins/blob/master/strategy/linear.py#L60-L6218:19
*** retreved has joined #openstack-ansible18:21
boxrick1Probably the magic I am missing here18:22
cloudnullso with those context's set, the plugin looks to see if the container_name != the physical_host18:22
cloudnullhttps://github.com/openstack/openstack-ansible-plugins/blob/master/connection/ssh.py#L9618:22
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/ocata: Use package module to install distro packages  https://review.openstack.org/46239818:22
cloudnulllong story short, if you add physical_host to your inventory under your containers it should do the right things18:23
boxrick1So does the strategy work the same way as a standard plugin does as far as installing?18:23
cloudnullyes.18:23
cloudnullit just adds additional context18:23
cloudnullcontainer_name and physical_host should be added to the inventory host entry and all should be right with the world.18:24
*** stuartgr has quit IRC18:25
boxrick1Success it is getting passed in properly now, cheers for that18:26
*** chigang has quit IRC18:26
*** xingchao has quit IRC18:26
cloudnullwoot! drinks all around18:26
*** retreved_ has joined #openstack-ansible18:26
*** retreved has quit IRC18:28
jrosser_cloudnull: this has worked out really neat for us becasue we can do ansible against containers hosted in a DMZ, but we'd rather not give them interfaces on the DMZ network18:28
boxrick1Well I have other broken now, but its one step closer :)18:31
*** armaan has quit IRC18:31
*** armaan has joined #openstack-ansible18:31
cloudnulljrosser_: ++ that was the hope :)18:32
cloudnullI'd like to remove the IPs where needed within the containers, or just remove ssh within them18:32
cloudnulland use the connection plugin to take care of the connectivity18:32
cloudnullboxrick1: if I can help with the new brokeness let me know18:33
boxrick1Well its probably unrelated to your stuff to be honest. It looks like permissions problems somewhere18:33
boxrick1One for tomorrow I think its getting late here now and I am hungry :) https://gist.github.com/boxrick/5ee86cb961623ae9119c3e1dec2d0adc was the error if you were interested.18:35
boxrick1Its my bad hack I think in the command18:37
*** vnogin has joined #openstack-ansible18:44
*** cathrich_ has quit IRC18:48
*** cathrichardson has joined #openstack-ansible18:49
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-os_magnum master: Enable custom keystone endpoint_type in templates  https://review.openstack.org/45535618:49
*** lostRhino has left #openstack-ansible18:55
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova master: Pass list for package install  https://review.openstack.org/45895219:00
*** albertcard1 is now known as poopcat19:02
*** hybridpollo has joined #openstack-ansible19:03
*** hybridpollo has quit IRC19:03
*** hybridpollo has joined #openstack-ansible19:05
*** manheim has joined #openstack-ansible19:06
*** NostawRm has joined #openstack-ansible19:10
*** manheim has quit IRC19:10
*** chas has joined #openstack-ansible19:14
*** chas has quit IRC19:18
*** xingchao has joined #openstack-ansible19:23
spotzcloudnull: You know off hand where I can set a keystone user_name? Looks like we added the support in mitaka but in openstack-ansible-plugins which I think we got rid of with the change to roles19:23
openstackgerritMiguel Alex Cantu (alextricity25) proposed openstack/openstack-ansible master: DO NOT MERGE - testing integrated gate w/ceilo  https://review.openstack.org/45378819:29
odyssey4mespotz you can create your own playbook to add various users if you like19:29
spotzodyssey4me: Yeah I may have to, it's like we have all the pieces just can't find them:)19:30
dmsimardWoah, that's clever, had never seen something like that "{{ nova_packages_list | selectattr('enabled') | sum(attribute='packages', start=[]) }}"19:30
* dmsimard tips fedora19:30
*** piliman974 has joined #openstack-ansible19:31
odyssey4mespotz a sample set of tasks: https://github.com/openstack/openstack-ansible-os_tempest/blob/stable/newton/tasks/tempest_resources.yml#L68-L10419:31
*** weezS has joined #openstack-ansible19:33
*** chas has joined #openstack-ansible19:34
spotzodyssey4me: https://docs.openstack.org/releasenotes/openstack-ansible/mitaka.html 13.3.3 tells me we should be able to do it, I just can't figure out where to change the passwd:)19:35
odyssey4mespotz which password are you wanting to change?19:35
spotzodyssey4me: demo19:36
odyssey4mespotz those two tasks show that the user/password are the same19:36
spotzodyssey4me: yeah19:37
*** xingchao has quit IRC19:37
spotzodyssey4me: + the project19:37
*** nollide has joined #openstack-ansible19:39
*** chas has quit IRC19:39
mpranjicmhayden: how come jenkins fails on centos7 here19:44
mpranjichttps://review.openstack.org/#/c/458952/19:44
mpranjicevening btw :)19:44
mhaydenlooking19:44
mhaydenon a call right now19:44
mpranjicnp :)19:45
mpranjictalk first, check later :)19:45
mpranjicthe same as with guns :)19:45
*** tobberydberg has joined #openstack-ansible19:46
mpranjicmhayden: 2017-05-15 19:10:31.893470 | fatal: [infra1]: FAILED! => {"changed": false, "content": "Wk9LVFJQTEdJU1lRUFpFQUlaRVg=", "encoding": "base64", "failed": true, "failed_when_result": true, "source": "/var/lib/rabbitmq/.erlang.cookie"}19:48
mpranjicfor example19:48
mpranjica lot of weird things in there19:48
mpranjic2017-05-15 19:36:47.034123 | infra1                     : ok=224  changed=110  unreachable=0    failed=319:50
mpranjic2017-05-15 19:36:47.034153 | localhost                  : ok=242  changed=129  unreachable=0    failed=119:50
mpranjic2017-05-15 19:36:47.034181 | openstack1                 : ok=400  changed=200  unreachable=0    failed=019:50
*** shardy_afk has quit IRC19:55
*** chas has joined #openstack-ansible19:56
*** acormier has joined #openstack-ansible19:58
cloudnullohai mpranjic20:00
mpranjiccloudnull: ola :)20:00
cloudnullque onda20:00
*** chas has quit IRC20:00
mpranjiccloudnull: I can say only ola, sorry :)20:00
mpranjichow was openstack summit?20:01
mpranjicI was tracking some remotely20:01
cloudnullit was good !20:01
mpranjicI bet20:02
mpranjicmaybe next year :)20:02
cloudnullI love seeing everyone20:02
mpranjicyeah, that is nice, for sure20:02
cloudnullits a tun of fun and in general we get a lot done.20:02
cloudnullmpranjic:  it looks like that PR is failing on tempest for just about everything.20:02
cloudnullhttp://logs.openstack.org/52/458952/6/check/gate-openstack-ansible-os_nova-ansible-func-centos-7-nv/0ca7a1f/console.html#_2017-05-15_19_36_47_01513720:02
mpranjicI plan to attend AnsibleFest next month (at least :))20:03
mpranjichuh?20:03
mpranjiclemmesee20:03
cloudnullnice! is that one in london ?20:03
mpranjicyaps20:03
mpranjicthere is one in us too20:03
mpranjicsan francisco in september: https://www.ansible.com/ansiblefest20:04
cloudnullnice i went to one in London a year or so ago. it was a good summit20:04
*** jeh has quit IRC20:05
mgariepycloudnull, http://logs.openstack.org/52/458952/6/check/gate-openstack-ansible-os_nova-ansible-func-centos-7-nv/0ca7a1f/console.html#_2017-05-15_19_31_38_70306020:05
mgariepythis seems weird to me ? "No package matching '' found available, installed or updated"20:05
*** jeh has joined #openstack-ansible20:06
*** marst has quit IRC20:06
*** marst has joined #openstack-ansible20:07
mpranjicempty list?20:07
mpranjicthat can't be right20:08
mgariepyon that, have a nice evening everyone.20:08
mpranjicmgariepy: hey :)20:09
openstackgerritMerged openstack/openstack-ansible stable/ocata: Update all SHAs for 15.1.4  https://review.openstack.org/46457020:11
*** pbandark has joined #openstack-ansible20:14
jrosser_cloudnull: is there an assumption here that the playbook is run as root https://github.com/openstack/openstack-ansible-plugins/blob/master/connection/ssh.py#L11620:15
jrosser_becasue i get permission denied when running as a regular user and become: yes become_method: sudo20:16
mpranjicyeah, I don't think you can change user from non-privileged user20:18
openstackgerritMerged openstack/openstack-ansible stable/newton: Update all SHAs for 14.2.4  https://review.openstack.org/46457820:18
*** manheim has joined #openstack-ansible20:19
jrosser_mpranjic: well this is trying to use the ssh connection plugin outside the contex of OSA in a different project20:20
jrosser_and it sooooo nearly works :)20:21
mpranjicalmost :)20:22
mpranjichm20:23
mpranjicif method is sudo, that might even be ok as long as sudoers is set properly20:24
*** schwicht has quit IRC20:24
odyssey4mejrosser_ if you modify sudoers on the host it might work?20:24
mpranjic"su - newuser" will fail for non-privileged user, while "sudo su - newuser" would be ok if sudoers is set correctly20:24
*** finchd has joined #openstack-ansible20:28
jrosser_well i think it might be before any sudo happens20:28
jrosser_sftp> put /tmp/tmpBklW03 /proc/6130/root/root/.ansible/tmp/ansible-tmp-1494880044.12-35336349128129/command.py\n', 'remote open("/proc/6130/root/root/.ansible/tmp/ansible-tmp-1494880044.12-35336349128129/command.py"): Permission denied\r\n'20:28
jrosser_it's failed to drop the script as the destination requires sudo to write to20:29
jrosser_(or be root in the first place)20:29
*** manheim has quit IRC20:29
*** manheim has joined #openstack-ansible20:30
mpranjicwriting to /proc?20:30
jrosser_yes remember this is the OSA ssh.py connection plugin20:30
jrosser_and it's trying to drop the script to /tmp *inside* a container20:31
odyssey4mejrosser_ is that running the lxc-container_create role? or some arbitrary playbook/task?20:31
jrosser_we've lifted ssh.py into our own code, becasue it is super-cool20:32
jrosser_however thats all using unpriviledged users and become, which is why i think it fails20:33
mpranjicwhy root is not used directly here?20:33
*** woodard has quit IRC20:33
*** woodard has joined #openstack-ansible20:34
cloudnullsorry was afk20:34
*** smatzek has quit IRC20:34
*** xingchao has joined #openstack-ansible20:34
cloudnulljrosser_: yes. the playbooks at this moment assume it's being run as root or w/ sudo20:34
*** manheim has quit IRC20:35
cloudnulljrosser_: if the containers are not owned by the user running the connection plugin it may not be able to connect.20:35
cloudnullusing the lxc-attach command20:35
*** vnogin has quit IRC20:35
mpranjicthat would explain it20:35
cloudnullmgariepy: looking20:36
*** vnogin has joined #openstack-ansible20:37
cloudnullalso DM me your address. I'll send you a beer because I failed to make good on my promises :)20:37
*** chas has joined #openstack-ansible20:37
*** jamesden_ has joined #openstack-ansible20:38
*** chas has quit IRC20:42
*** jamesde__ has joined #openstack-ansible20:42
*** jamesden_ has quit IRC20:42
*** schwicht has joined #openstack-ansible20:50
*** askb has joined #openstack-ansible20:53
*** xingchao has quit IRC20:54
*** schwicht has quit IRC20:55
*** vnogin has quit IRC20:56
*** vnogin has joined #openstack-ansible20:57
*** Manheim has joined #openstack-ansible20:58
*** tobberydberg has quit IRC21:00
*** smatzek has joined #openstack-ansible21:02
*** manheim_ has joined #openstack-ansible21:02
*** retreved_ has quit IRC21:02
*** smatzek has quit IRC21:02
*** smatzek has joined #openstack-ansible21:03
*** jwitko has quit IRC21:05
*** schwicht has joined #openstack-ansible21:06
*** jamesde__ has quit IRC21:07
*** rickd has joined #openstack-ansible21:08
rickdHey, ive got a really annoying issue. So just setting up a lab (1infra, 2 compute). Ive excluded the storage bridge from openstack_user_config.yml and the interface files. But it still seems to be passed in when i run in setup_hosts.yml. Rsults in br-storage ccannot be found, and the install barfs21:08
rickdmy config is here : https://gist.github.com/felix001/f2e4dab756f4c6411c87f3bac196251721:08
*** pbandark has quit IRC21:09
*** smatzek has quit IRC21:10
odyssey4merickd which task/play did it barf at21:11
rickd@odyssey4me - TASK [lxc_container_create : Run container veth wiring script] *****************21:12
odyssey4meso that's https://github.com/openstack/openstack-ansible-lxc_container_create/blob/master/tasks/container_create.yml#L359-L375 - do you have a debug playbook output for it?21:14
rickd@odyssey4me - yep got it here 1 sec...21:14
*** vnogin has quit IRC21:17
*** vnogin has joined #openstack-ansible21:18
*** thorst_afk has quit IRC21:18
*** jamesden_ has joined #openstack-ansible21:18
*** thorst_afk has joined #openstack-ansible21:19
*** chas has joined #openstack-ansible21:19
rickdAppreciate the help21:22
*** thorst_afk has quit IRC21:23
*** chas has quit IRC21:24
odyssey4merickd did you post a pastebin link and I missed it?21:24
rickdYep its at https://pastebin.com/RFAP4wc021:26
spotz:)21:27
*** vnogin has quit IRC21:30
*** hybridpollo has quit IRC21:33
odyssey4merickd well, the storage CIDR should probably not be in the openstack_user_config - it does appear that the IP allocation is coming from it and somehow the dynamic inventory is allocating an IP to it21:34
odyssey4meodd21:34
odyssey4medid you previously have br-storage setup in the inventory and have recently removed it?21:34
rickdyep.21:34
odyssey4meah, that would explain it21:34
odyssey4methe inventory persists some of the data, so you'll probably have to either remove the containers from the inventory using the inventory-manage tool or remove the extra networks by hand from the json21:35
odyssey4menot sure if that'll be fullly clean though - if you are able to trash and rebuild, then give that a go21:36
rickdok so rm the dirs and then do a fresh pull etc ?21:36
*** jamesden_ has quit IRC21:36
rickdon the deployment node only?21:37
odyssey4meare these physical or virtual21:37
*** schwicht has quit IRC21:38
odyssey4mefirst use lxc-containers-destroy to delete the containers from all hosts21:38
rickdall virtual21:38
odyssey4methe cleanest is to trash the vm's and rebuild21:38
odyssey4mebut at the stage you're at you could probably just wipe the containers21:38
rickdi have snapshots that fine.21:39
odyssey4methen move the /etc/openstack_deploy folder aside and create a new one21:39
odyssey4mecopy only the necessary config over21:39
odyssey4meie the conf.d, env.d, openstack_user_config, user_variables, user_secrets21:39
*** chas has joined #openstack-ansible21:40
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_hosts master: vars: suse: Install python-xml package  https://review.openstack.org/46475921:41
rickdtopman, well i just deleted /etc/openstack_deploy/openstack_inventory.json and rerun, it looks much better. If I still get issues. Ill rebuild from scratch21:42
rickdout of interest dont support you have seen and tacker playbooks around?21:43
rickds/support/supose/21:43
*** chas has quit IRC21:44
*** galstrom_zzz is now known as galstrom21:45
*** perniciouscaffei has joined #openstack-ansible21:46
*** vnogin has joined #openstack-ansible21:46
odyssey4metacker - not yet - there was interest afetr the barcelona summit, but I haven't seen anyone take up the work and share it21:46
rickdok thanks21:48
*** hybridpollo has joined #openstack-ansible21:49
*** vgeorga has quit IRC21:51
*** xingchao has joined #openstack-ansible21:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova master: Pass list for package install  https://review.openstack.org/45895221:54
*** schwicht has joined #openstack-ansible21:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security master: Remove apostrophe in task name  https://review.openstack.org/46476122:01
*** chas has joined #openstack-ansible22:01
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security master: Remove apostrophe in task name  https://review.openstack.org/46476122:02
*** oanson has quit IRC22:03
*** thorst_afk has joined #openstack-ansible22:03
*** oanson has joined #openstack-ansible22:03
*** acormier has quit IRC22:04
*** acormier has joined #openstack-ansible22:04
*** acormier has quit IRC22:05
*** chas has quit IRC22:06
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_designate master: Added release note for the template change  https://review.openstack.org/46476422:07
*** thorst_afk has quit IRC22:08
*** xingchao has quit IRC22:08
*** rickd has quit IRC22:08
openstackgerritLogan V proposed openstack/openstack-ansible stable/ocata: Bump unbound role tag  https://review.openstack.org/46468522:09
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty stable/ocata: Reduce init restart/kill times  https://review.openstack.org/46209022:11
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty master: Rename reno to avoid conflict with other repositories  https://review.openstack.org/46214522:11
*** schwicht has quit IRC22:13
*** kylek3h has quit IRC22:13
*** dixiaoli has joined #openstack-ansible22:17
*** marst has quit IRC22:17
*** perniciouscaffei has quit IRC22:19
*** nollide has quit IRC22:25
*** weezS has quit IRC22:29
*** piliman974 has quit IRC22:30
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Support no validation of internal SSL endpoints  https://review.openstack.org/46417022:41
*** galstrom is now known as galstrom_zzz22:41
*** chas has joined #openstack-ansible22:42
openstackgerritMerged openstack/openstack-ansible-os_designate master: Use internalURL by default for Neutron  https://review.openstack.org/45559622:43
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/ocata: Perform an atomic policy file change  https://review.openstack.org/46167122:44
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: Use uri module for git sourced configs  https://review.openstack.org/46417622:44
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Enable custom keystone endpoint_type in templates  https://review.openstack.org/45535622:46
*** Manheim has quit IRC22:47
*** manheim_ has quit IRC22:47
*** chas has quit IRC22:48
*** galstrom_zzz is now known as galstrom22:50
openstackgerritMerged openstack/openstack-ansible-os_nova stable/ocata: Remove trailing slash in nginx config  https://review.openstack.org/46463222:51
*** manheim has joined #openstack-ansible22:52
*** perniciouscaffei has joined #openstack-ansible22:55
*** tobberydberg has joined #openstack-ansible23:01
*** klamath has quit IRC23:02
*** chyka has quit IRC23:03
*** chyka has joined #openstack-ansible23:03
*** tobberydberg has quit IRC23:05
*** pmannidi has joined #openstack-ansible23:07
*** pmannidi has joined #openstack-ansible23:08
*** vnogin has quit IRC23:12
openstackgerritMerged openstack/openstack-ansible master: Fix cinder backends detection for nova ceph deploy  https://review.openstack.org/46278023:12
*** vnogin has joined #openstack-ansible23:14
openstackgerritMerged openstack/openstack-ansible stable/ocata: Update sources-branch-updater to cater for git sourced config  https://review.openstack.org/46416623:15
openstackgerritMerged openstack/openstack-ansible stable/ocata: scripts: sources-branch-update.sh: Remove double 'sed'  https://review.openstack.org/46468823:15
openstackgerritMerged openstack/openstack-ansible stable/ocata: Implement http-check on haproxy services  https://review.openstack.org/46467623:15
*** dixiaoli has quit IRC23:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder stable/ocata: Support no validation of internal SSL endpoints  https://review.openstack.org/46477923:25
*** schwicht has joined #openstack-ansible23:28
*** pmannidi has quit IRC23:29
*** schwicht has quit IRC23:40
*** chyka has quit IRC23:44
*** redaudit has joined #openstack-ansible23:45
*** pmannidi has joined #openstack-ansible23:47
*** galstrom is now known as galstrom_zzz23:48
*** manheim has quit IRC23:49
*** gouthamr has quit IRC23:56
openstackgerritMerged openstack/openstack-ansible-os_swift stable/ocata: Fix for lookup and get_url occuring in different places  https://review.openstack.org/46395723:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!