Tuesday, 2017-09-19

*** oanson has quit IRC00:08
*** oanson has joined #openstack-ansible00:09
*** vnogin has quit IRC00:10
*** acormier has joined #openstack-ansible00:10
*** acormier has quit IRC00:15
*** thorst has joined #openstack-ansible00:26
*** dxiri has quit IRC00:38
*** dxiri has joined #openstack-ansible00:38
*** woodard_ has joined #openstack-ansible00:48
*** woodard has quit IRC00:48
*** acormier has joined #openstack-ansible00:49
*** germs has joined #openstack-ansible00:52
*** acormier has quit IRC00:54
*** acormier has joined #openstack-ansible00:55
*** hw_wutianwei has joined #openstack-ansible00:55
*** acormier_ has joined #openstack-ansible00:58
*** acormier has quit IRC01:01
*** germs has quit IRC01:11
*** acormier_ has quit IRC01:12
*** acormier has joined #openstack-ansible01:12
*** chhavi has joined #openstack-ansible01:15
*** huxinhui_ has joined #openstack-ansible01:19
*** germs has joined #openstack-ansible01:20
*** germs has quit IRC01:23
*** thorst has quit IRC01:27
openstackgerritLogan V proposed openstack/openstack-ansible master: Clean up the 'all' group vars  https://review.openstack.org/50480401:35
openstackgerritLogan V proposed openstack/openstack-ansible master: Add ceph-ansible v3 support  https://review.openstack.org/49047601:41
*** chyka has quit IRC01:43
*** chyka_ has joined #openstack-ansible01:43
*** acormier has quit IRC01:55
openstackgerritlidong proposed openstack/openstack-ansible-os_watcher master: Update links in CONTRIBUTING.rst  https://review.openstack.org/50498801:59
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [DNM] Inventory migrate CLI  https://review.openstack.org/50450802:01
*** chhavi has quit IRC02:03
openstackgerritlidong proposed openstack/openstack-ansible-os_glance master: Update links in CONTRIBUTING.rst  https://review.openstack.org/50499002:07
*** dave-mccowan has quit IRC02:35
-openstackstatus- NOTICE: Gerrit is being restarted to feed its insatiable memory appetite02:39
*** chyka_ has quit IRC02:40
*** poopcat has quit IRC03:06
*** poopcat has joined #openstack-ansible03:09
logan-2.4 released03:12
*** albertcard1 has joined #openstack-ansible03:14
*** poopcat has quit IRC03:14
*** thorst has joined #openstack-ansible03:28
jmccrorywow that was quick03:29
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [TEST] Update Ansible to 2.4.0.0  https://review.openstack.org/50181403:32
*** thorst has quit IRC03:33
openstackgerritLogan V proposed openstack/openstack-ansible master: Clean up the 'all' group vars  https://review.openstack.org/50480403:36
*** chhavi has joined #openstack-ansible03:37
dmsimardShit03:48
dmsimardWanted to ship an ara dot release today but with the gerrit downtime...03:48
openstackgerritzhongshengping proposed openstack/openstack-ansible master: Add missing document start "---" to yaml files  https://review.openstack.org/50500603:53
*** albertcard1 has quit IRC03:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-apt_package_pinning master: Add missing document start "---" to yaml files  https://review.openstack.org/50500703:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-ceph_client master: Add missing document start "---" to yaml files  https://review.openstack.org/50500803:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-galera_client master: Add missing document start "---" to yaml files  https://review.openstack.org/50500903:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-galera_server master: Add missing document start "---" to yaml files  https://review.openstack.org/50501003:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-haproxy_server master: Add missing document start "---" to yaml files  https://review.openstack.org/50501103:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-lxc_container_create master: Add missing document start "---" to yaml files  https://review.openstack.org/50501203:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-lxc_hosts master: Add missing document start "---" to yaml files  https://review.openstack.org/50501303:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-openstack_hosts master: Add missing document start "---" to yaml files  https://review.openstack.org/50501403:56
openstackgerritzhongshengping proposed openstack/openstack-ansible-openstack_openrc master: Add missing document start "---" to yaml files  https://review.openstack.org/50501503:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-ops master: Add missing document start "---" to yaml files  https://review.openstack.org/50501603:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_almanach master: Add missing document start "---" to yaml files  https://review.openstack.org/50501703:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_aodh master: Add missing document start "---" to yaml files  https://review.openstack.org/50501803:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_barbican master: Add missing document start "---" to yaml files  https://review.openstack.org/50501903:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_ceilometer master: Add missing document start "---" to yaml files  https://review.openstack.org/50502003:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_cinder master: Add missing document start "---" to yaml files  https://review.openstack.org/50502103:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_cloudkitty master: Add missing document start "---" to yaml files  https://review.openstack.org/50502203:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_designate master: Add missing document start "---" to yaml files  https://review.openstack.org/50502303:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_glance master: Add missing document start "---" to yaml files  https://review.openstack.org/50502403:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_gnocchi master: Add missing document start "---" to yaml files  https://review.openstack.org/50502503:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_heat master: Add missing document start "---" to yaml files  https://review.openstack.org/50502603:57
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_ironic master: Add missing document start "---" to yaml files  https://review.openstack.org/50502703:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_keystone master: Add missing document start "---" to yaml files  https://review.openstack.org/50502803:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_magnum master: Add missing document start "---" to yaml files  https://review.openstack.org/50502903:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_molteniron master: Add missing document start "---" to yaml files  https://review.openstack.org/50503003:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_monasca master: Add missing document start "---" to yaml files  https://review.openstack.org/50503103:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_monasca-agent master: Add missing document start "---" to yaml files  https://review.openstack.org/50503203:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_monasca-ui master: Add missing document start "---" to yaml files  https://review.openstack.org/50503303:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_neutron master: Add missing document start "---" to yaml files  https://review.openstack.org/50503403:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_nova master: Add missing document start "---" to yaml files  https://review.openstack.org/50503503:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_octavia master: Add missing document start "---" to yaml files  https://review.openstack.org/50503603:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_rally master: Add missing document start "---" to yaml files  https://review.openstack.org/50503703:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_sahara master: Add missing document start "---" to yaml files  https://review.openstack.org/50503803:58
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_searchlight master: Add missing document start "---" to yaml files  https://review.openstack.org/50503903:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_swift master: Add missing document start "---" to yaml files  https://review.openstack.org/50504003:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_tempest master: Add missing document start "---" to yaml files  https://review.openstack.org/50504103:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_trove master: Add missing document start "---" to yaml files  https://review.openstack.org/50504203:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_watcher master: Add missing document start "---" to yaml files  https://review.openstack.org/50504303:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-os_zaqar master: Add missing document start "---" to yaml files  https://review.openstack.org/50504403:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-pip_install master: Add missing document start "---" to yaml files  https://review.openstack.org/50504503:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-plugins master: Add missing document start "---" to yaml files  https://review.openstack.org/50504603:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-rabbitmq_server master: Add missing document start "---" to yaml files  https://review.openstack.org/50504703:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-repo_build master: Add missing document start "---" to yaml files  https://review.openstack.org/50504803:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-repo_server master: Add missing document start "---" to yaml files  https://review.openstack.org/50504903:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-rsyslog_client master: Add missing document start "---" to yaml files  https://review.openstack.org/50505003:59
openstackgerritzhongshengping proposed openstack/openstack-ansible-rsyslog_server master: Add missing document start "---" to yaml files  https://review.openstack.org/50505104:00
*** udesale has joined #openstack-ansible04:16
*** hybridpollo has quit IRC04:19
*** thorst has joined #openstack-ansible04:29
*** thorst has quit IRC04:34
csmartoh dear04:42
csmartthose thirty odd changes seem a little wasteful of resources, especially given they are just adding --- to two yaml files, where one is an example and the other a test.. :-S04:48
*** acormier has joined #openstack-ansible04:56
*** acormier has quit IRC05:01
*** pbandark has quit IRC05:07
*** Taseer has joined #openstack-ansible05:11
*** thorst has joined #openstack-ansible05:30
*** thorst has quit IRC05:34
*** lbragstad has quit IRC05:44
*** drifterza has joined #openstack-ansible05:46
*** drifterza has quit IRC05:54
*** drifterza has joined #openstack-ansible05:54
*** udesale has quit IRC05:59
*** udesale has joined #openstack-ansible06:00
*** jvidal has joined #openstack-ansible06:00
*** chhavi has quit IRC06:05
*** DanyC has quit IRC06:05
*** Jeffrey4l has quit IRC06:05
*** mancdaz has quit IRC06:05
*** _d34dh0r53_ has quit IRC06:05
*** chigang_ has quit IRC06:05
*** jmccrory has quit IRC06:05
*** errr_ has quit IRC06:05
*** Oku_OS-away has quit IRC06:05
*** _jreslock has quit IRC06:05
*** xar- has quit IRC06:05
*** xar- has joined #openstack-ansible06:05
*** d34dh0r53 has joined #openstack-ansible06:05
*** Jeffrey4l has joined #openstack-ansible06:05
*** chhavi has joined #openstack-ansible06:05
*** errr_ has joined #openstack-ansible06:05
*** chigang_ has joined #openstack-ansible06:06
*** DanyC has joined #openstack-ansible06:06
*** john51 has quit IRC06:07
*** john51 has joined #openstack-ansible06:07
*** armaan has joined #openstack-ansible06:07
*** exodusftw has quit IRC06:07
*** _jreslock has joined #openstack-ansible06:08
*** evrardjp[m] has quit IRC06:09
*** csmart has quit IRC06:09
*** mancdaz has joined #openstack-ansible06:10
*** jmccrory has joined #openstack-ansible06:10
*** Oku_OS-away has joined #openstack-ansible06:10
*** armaan has quit IRC06:14
*** exodusftw has joined #openstack-ansible06:14
*** Oku_OS-away is now known as Oku_OS06:15
*** armaan has joined #openstack-ansible06:17
*** thorst has joined #openstack-ansible06:31
*** thorst has quit IRC06:35
*** Taseer has quit IRC06:39
*** DanyC has quit IRC06:42
*** DanyC has joined #openstack-ansible06:42
*** chyka has joined #openstack-ansible06:44
*** DanyC has quit IRC06:47
*** chyka has quit IRC06:48
*** DanyC has joined #openstack-ansible06:50
*** DanyC has quit IRC06:54
*** mbuil has joined #openstack-ansible06:58
*** armaan has quit IRC07:00
*** csmart has joined #openstack-ansible07:15
-openstackstatus- NOTICE: Post jobs are not executed currently, do not tag any releases07:20
*** ChanServ changes topic to "Post jobs are not executed currently, do not tag any releases"07:20
*** armaan has joined #openstack-ansible07:22
*** pcaruana has joined #openstack-ansible07:22
mwe1Is it possible to integrate bcache devices into OSA deploys?07:22
mwe1AFAIK ceph-deploy always creates partitions insight the devices which will fail in case of bcache.07:24
mwe1what's the status of OSA and bcache?07:25
*** sjaved has joined #openstack-ansible07:29
sjavedhello everybody07:29
sjavediam getting the following error in openstack07:30
sjavedGetting error on nova compute node.  2017-09-19 12:12:56.423 3019 ERROR nova.compute.manager [req-c444be2f-b2d9-4c5a-8156-b04935700246 - - - - -] No compute node record for host hp-compute-03 2017-09-19 12:12:56.426 3019 ERROR nova.compute.manager [req-c444be2f-b2d9-4c5a-8156-b04935700246 - - - - -] Error updating resources for node hp-compute-03.openstack.local. 2017-09-19 12:12:56.426 3019 ERROR nova.compute.manager Trac07:30
*** thorst has joined #openstack-ansible07:32
*** vnogin has joined #openstack-ansible07:34
*** sjaved_ has joined #openstack-ansible07:35
sjaved_hello all. iam getting the following eror07:36
*** threestrands has quit IRC07:36
sjaved_Getting error on nova compute node.  2017-09-19 12:12:56.423 3019 ERROR nova.compute.manager [req-c444be2f-b2d9-4c5a-8156-b04935700246 - - - - -] No compute node record for host hp-compute-03 2017-09-19 12:12:56.426 3019 ERROR nova.compute.manager [req-c444be2f-b2d9-4c5a-8156-b04935700246 - - - - -] Error updating resources for node hp-compute-03.openstack.local. 2017-09-19 12:12:56.426 3019 ERROR nova.compute.manager Tra07:36
*** thorst has quit IRC07:36
*** arshad has joined #openstack-ansible07:39
sjaved*vnogin* Hey, how are you?07:42
*** arshad has quit IRC07:47
*** arshad_ has joined #openstack-ansible07:48
*** gokhan has quit IRC07:48
*** sjaved has quit IRC07:50
*** evrardjp[m] has joined #openstack-ansible07:50
*** vnogin has quit IRC07:51
*** DanyC has joined #openstack-ansible07:55
*** vnogin has joined #openstack-ansible07:56
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [DNM] Inventory migrate CLI  https://review.openstack.org/50450808:03
mwe1what's the status of openstack-ansible and bcache?08:03
*** shardy has joined #openstack-ansible08:04
*** pbandark has joined #openstack-ansible08:09
*** gokhan has joined #openstack-ansible08:11
gokhanevrardjp[m] ,   odyssey4me hi, I am stucked at installing galera server.  It installs galera on infra1 only. On infranode2 mysql can not be started. I examine galera errors and it dos not reach 4444 port. this is errors in log file http://paste.openstack.org/show/621394/.  I also can not see percona-xtrabackup repos on container. I didn't define the problem yet. I need your help08:17
odyssey4memwe1 OSA in terms of Ceph just uses whatever ceph-ansible supports because we use ceph-ansible for deployments08:19
*** fxpester has joined #openstack-ansible08:21
*** thorst has joined #openstack-ansible08:33
*** chyka has joined #openstack-ansible08:34
*** thorst has quit IRC08:37
*** chyka has quit IRC08:38
*** electrofelix has joined #openstack-ansible08:45
*** jafeha_ has joined #openstack-ansible08:48
*** udesale has quit IRC08:50
*** flaviosr has quit IRC08:53
*** mrch has joined #openstack-ansible08:54
*** armaan has quit IRC08:55
mwe1odyssey4me: accourding to this http://tracker.ceph.com/issues/13278 it's a workaround do format the devices manually and to use the mountpoint instead of the raw-device with ceph-deploy.08:56
*** armaan has joined #openstack-ansible08:56
mwe1do you think this will work for osa also?08:56
*** flaviosr has joined #openstack-ansible08:58
andymccrmwe1: you'd have to test that - you're probably better off asking the ceph-ansible crew though - as odyssey4me said we just use the upstream ceph-ansible roles and playbooks for ceph, so it isn't anything we've actively written.09:00
mwe1andymccr, odyssey4me: thanks for your hints.09:01
*** udesale has joined #openstack-ansible09:03
*** udesale has quit IRC09:05
*** udesale has joined #openstack-ansible09:05
*** armaan has quit IRC09:06
*** armaan has joined #openstack-ansible09:06
*** armaan has quit IRC09:06
*** armaan has joined #openstack-ansible09:07
*** armaan has quit IRC09:07
*** armaan has joined #openstack-ansible09:07
*** udesale__ has joined #openstack-ansible09:10
*** udesale has quit IRC09:12
*** arshad_ has quit IRC09:16
*** jurre has joined #openstack-ansible09:17
jurreHi , I was looking at the ansible-hardening repo, and I wonder the reasoning behind the fact that variables are kept seperate for the 2 STIG implementations, wouldn't it make more sense to have a single parameter to enable/disbale features ?09:19
jurreexample: security_rhel7_audit_chmod: no & security_audit_DAC_chmod: no09:23
*** arshad has joined #openstack-ansible09:25
*** stuartgr has joined #openstack-ansible09:28
*** thorst has joined #openstack-ansible09:33
jafeha_hey everybody! has anyone the neutron-fwaas-dashboard deployed with osa? there seems as there have been some changes with pike splitting the dashbaoad in a separate package. has someone already implemented this new package, i haven't found any code for it yet. https://docs.openstack.org/releasenotes/neutron-fwaas-dashboard/pike.html09:38
*** thorst has quit IRC09:38
andymccrjurre: im sure mhayden would be able to talk about that a bit when he's in later09:44
andymccrjafeha_: i imagine that hasnt been done yet - would you be able to file a bug for that?09:44
jafeha_andymccr: sure. let me give it a try if i can actually implement it within my aio deployment, so i might be able to offer a patchset with the bugreport09:49
andymccrjafeha_: that would be even better! thanks for looking into it09:49
*** vnogin has quit IRC09:52
jafeha_andymccr: it might take a day or two to figure out the questions "how this this repo thing even work", but i wanted to have a look at that anyway :D09:52
andymccrjafeha_: feel free to ask, we have done some of that dashboard split out for some projects that have needed it - and in general we're really keen to help new contributors get on board09:53
jafeha_as far as i can see, lbaas is already split into a separate dashboard, i'll try implmenenting it by duplicating that portion of the code. i'll definitely ask before i'm getting crazy, thank you!09:56
TahvokIs it possible to configure ansible to tell all containers to configure default gateway of eth1 and not eth0?09:57
TahvokCurrently if a container goes out to some other server (bind9 in my case) it will go out via the bridge network, so the ip of the controller is shown, and not the container.09:59
*** sjaved_ has quit IRC10:00
*** vnogin has joined #openstack-ansible10:03
TahvokI have noticed that I can set 'gateway' in the provider_networks hash, however, I do not understand how to set it for eth0 network10:06
*** arshad has quit IRC10:06
*** thorst has joined #openstack-ansible10:18
*** thorst has quit IRC10:19
*** arshad has joined #openstack-ansible10:27
*** udesale__ has quit IRC10:32
*** udesale has joined #openstack-ansible10:32
*** Taseer has joined #openstack-ansible10:39
jafeha_andymccr: this might be a stupid question, but i'm struggeling a bit compiling all the strings for the repo_build test_vars.yml. how can i compile the original string for the remote_package_parts? the version seems to differ from the one specified in the openstack_services.yml file10:45
*** udesale has quit IRC10:54
*** udesale has joined #openstack-ansible10:55
*** armaan has quit IRC10:59
openstackgerritLogan V proposed openstack/openstack-ansible master: Clean up the 'all' group vars  https://review.openstack.org/50480411:04
*** thorst has joined #openstack-ansible11:19
*** thorst has quit IRC11:26
*** acormier has joined #openstack-ansible11:27
hwoaranggood day11:33
*** acormier has quit IRC11:37
*** acormier has joined #openstack-ansible11:37
*** huxinhui_ has quit IRC11:38
jafeha_andymccr: my testdeployment of the fwaas-dashboard seems to work, i'll open a bugreport and submit a patchset later today or tomorrow.11:41
jafeha_i might need some help with the tests. i'm not entirely sure how to get there11:41
*** acormier has quit IRC11:42
andymccrjafeha_: no problem. im not sure we test some of those dashboards, although i think teh translations team may want it integrated in the translations build11:45
jafeha_yeah, what i mean are the repo_build tests :)11:47
jafeha_anyway, i'll submit the patch, we can still improve it11:48
*** vnogin has quit IRC11:53
*** Taseer has quit IRC11:57
*** vnogin has joined #openstack-ansible12:00
*** kylek3h_ has joined #openstack-ansible12:00
*** kylek3h has quit IRC12:03
*** kylek3h_ has quit IRC12:04
*** thorst has joined #openstack-ansible12:04
*** dxiri has quit IRC12:05
*** hwoarang has quit IRC12:05
*** dxiri has joined #openstack-ansible12:05
*** arshad has quit IRC12:06
*** dxiri has quit IRC12:06
*** dxiri has joined #openstack-ansible12:06
*** hwoarang has joined #openstack-ansible12:07
mhaydenandymccr: what am i excited to talk about? :)12:09
andymccrmhayden: hardening role stuff12:10
mhaydenthis piques my interests12:10
andymccrmhayden: i thought it might12:10
*** vnogin has quit IRC12:11
*** lucasxu has joined #openstack-ansible12:15
mgariepymorning everyone12:15
*** kylek3h has joined #openstack-ansible12:25
mhaydenmorning!12:35
mhaydenjafeha_: let me know what you're thinking about12:35
jafeha_mhayden: good morning12:36
jafeha_i don't have much time left for today.12:36
*** woodard_ has quit IRC12:36
*** woodard has joined #openstack-ansible12:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible master: Revert "Install dnf on CentOS hosts"  https://review.openstack.org/50495912:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-lxc_hosts master: Revert "Add dnf to LXC container cache"  https://review.openstack.org/50496012:38
jafeha_but: i have a patchset for openstack-ansible + openstack-ansible-os_horizon. i might ask tomorrow how to commit both of them at once. (fixes https://bugs.launchpad.net/openstack-ansible/+bug/1718187)12:38
openstackLaunchpad bug 1718187 in openstack-ansible "Implement neutron-fwaas-dashboard" [Undecided,New]12:38
mhaydenodyssey4me: ^^ dnf commit messages updated12:38
mhaydenhwoarang: ^^12:39
hwoarangon it12:39
mhaydenhwoarang: gracias12:39
odyssey4melol12:39
mhaydeneven contains UTF-8 sadface12:39
odyssey4meoh dear, sabotaged12:39
hwoarangde nada12:39
* mhayden has run it up the proverbial flagpole12:39
mhaydenthey said everything was good until dmsimard showed up12:39
*** acormier has joined #openstack-ansible12:39
hwoarangodyssey4me: are you using the OSA dashboard link? i think gerrit 2.13 may have broken it but I don't know what exactly broke12:40
odyssey4mehwoarang I believe that the ,n,z needs to be removed from the end of it - just saw someone say so in infra12:40
odyssey4meI think the dashboard generator may need fixing12:41
hwoarangyeah but I couldn't see such characters in the link that the generator gives us12:41
jafeha_see you guys tomorrow. gotta go.12:41
*** acormier has quit IRC12:44
*** vnogin has joined #openstack-ansible12:45
*** dave-mccowan has joined #openstack-ansible12:46
*** vnogin has quit IRC12:50
*** dave-mcc_ has joined #openstack-ansible12:51
*** dave-mccowan has quit IRC12:51
*** esberglu has joined #openstack-ansible12:52
jurre@mhayden andymccr , told me you could explain me somthing about the ansible-hardening repo.12:53
*** acormier_ has joined #openstack-ansible12:53
jurre@mhayden: I was looking at the ansible-hardening repo, and I wonder the reasoning behind the fact that variables are kept seperate for the 2 STIG implementations, wouldn't it make more sense to have a single parameter to enable/disbale features ?12:53
*** ivveh has quit IRC12:54
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Revert "Add dnf to LXC container cache"  https://review.openstack.org/50496012:54
*** dxiri_ has joined #openstack-ansible12:56
*** acormier_ has quit IRC12:58
dmsimardmhayden: nope, definitely can't blame that on me :D13:00
*** dxiri has quit IRC13:00
mhaydenjurre: it would, but the RHEL 6 and 7 stigs vary quite a bit13:01
mhaydenso some configs for one stig don't make sense for the other13:01
mhaydenthat's now fixed in pike with the RHEL 6 STIG stuff being removed there ;)13:02
mhaydennot pike, master13:02
jurremhayden: Thanks for the info.13:06
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: [TEST] Test RPM repo improvements  https://review.openstack.org/50453413:07
openstackgerritMerged openstack/openstack-ansible-os_watcher master: Update links in CONTRIBUTING.rst  https://review.openstack.org/50498813:11
*** gouthamr has joined #openstack-ansible13:13
openstackgerritMerged openstack/openstack-ansible-os_glance master: Update links in CONTRIBUTING.rst  https://review.openstack.org/50499013:14
*** udesale has quit IRC13:17
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install master: Optimize pip_install for CentOS  https://review.openstack.org/50450913:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: [TEST] Test RPM repo improvements  https://review.openstack.org/50453413:23
*** markvoelker has joined #openstack-ansible13:30
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Updated from global requirements  https://review.openstack.org/50467113:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install master: Optimize pip_install for CentOS  https://review.openstack.org/50450913:37
mhaydeni rechecked a bunch of jobs now that the dnf stuff is removed :|13:38
odyssey4memhayden so does that mean pike is broken too?13:38
odyssey4meand ocata?13:39
mhaydenno, because we didn't actually *install* dnf in pike13:39
mhaydenonly in master13:39
odyssey4meah ok13:39
* mhayden anxiously awaits dnf 2.x for centos 713:39
mhaydenit's wicked fast13:39
*** vnogin has joined #openstack-ansible13:39
openstackgerritMerged openstack/openstack-ansible-plugins master: Updated from global requirements  https://review.openstack.org/50470013:44
*** vnogin has quit IRC13:44
*** armaan has joined #openstack-ansible13:47
openstackgerritMerged openstack/openstack-ansible-repo_server master: Updated from global requirements  https://review.openstack.org/50470313:51
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Updated from global requirements  https://review.openstack.org/50467013:52
*** armaan has quit IRC13:57
*** chyka has joined #openstack-ansible14:00
openstackgerritLogan V proposed openstack/openstack-ansible master: Clean up the 'all' group vars  https://review.openstack.org/50480414:01
logan-o/14:03
*** mrch has quit IRC14:04
*** chyka has quit IRC14:04
*** drifterza has quit IRC14:05
*** arshad has joined #openstack-ansible14:05
openstackgerritMerged openstack/openstack-ansible-repo_build master: Updated from global requirements  https://review.openstack.org/50470214:06
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_sahara stable/pike: Fix ssl  https://review.openstack.org/50528014:06
*** esberglu has quit IRC14:06
*** esberglu has joined #openstack-ansible14:07
evrardjpspotz, could you add the cleanup of the old bugs in the cycle agenda? https://docs.openstack.org/openstack-ansible/latest/contributor/contribute.html#development-cycle-checklist14:11
*** jheroux has joined #openstack-ansible14:11
*** esberglu has quit IRC14:11
*** acormier has joined #openstack-ansible14:11
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install master: Optimize pip_install for CentOS  https://review.openstack.org/50450914:13
admin0and back :) hi all \o14:15
*** vnogin has joined #openstack-ansible14:20
*** esberglu has joined #openstack-ansible14:20
openstackgerritMerged openstack/ansible-hardening master: Updated from global requirements  https://review.openstack.org/50462514:23
spotzevrardjp:  yep14:27
evrardjpthanks spotz14:27
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: Updated from global requirements  https://review.openstack.org/50470114:29
evrardjpdear cloudnull, DimGR, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, darrenc, JR14:30
evrardjpobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza, hwoarang, cshen:14:30
evrardjpthe osa bug triage will start in 1h30’. Please have a look at the bug list before starting: https://etherpad.openstack.org/p/osa-bugtriage14:30
evrardjpThank you14:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install master: Optimize pip_install for CentOS  https://review.openstack.org/50450914:32
mhaydenevrardjp: could we make a new Newton release soon?14:33
*** esberglu has quit IRC14:39
*** esberglu has joined #openstack-ansible14:40
*** esberglu has quit IRC14:41
*** esberglu has joined #openstack-ansible14:41
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible stable/pike: Fix variable def.  https://review.openstack.org/50528814:45
evrardjpmhayden: is the problem with releases solved?14:45
openstackgerritMerged openstack/openstack-ansible-os_sahara master: Fix ssl  https://review.openstack.org/50482714:46
evrardjpmhayden: we'll have to wait a little, what's the urgency? I planned to do a release next week for all the branches14:46
*** weezS has joined #openstack-ansible14:47
mhaydennext week would be fine -- mainly trying to get the Erlang fixes into a release14:47
evrardjpyou can manually bump the sha for the rabbit role into the integrated repo if you want to include it for head of the branch14:48
openstackgerritMerged openstack/openstack-ansible-os_designate master: Updated from global requirements  https://review.openstack.org/50468014:48
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible master: Fix variable def.  https://review.openstack.org/50528914:48
evrardjpthat doesn't depend on #openstack-release14:48
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible master: Fix variable def.  https://review.openstack.org/50528914:50
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible master: Fix variable def.  https://review.openstack.org/50528914:51
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible master: Fix variable def.  https://review.openstack.org/50528914:51
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Updated from global requirements  https://review.openstack.org/50280014:52
mgariepysorry for the spam.. :) i'm sure i'll get it at some point..14:52
*** jvidal has quit IRC14:53
mhaydenmgariepy: i know how that feels ;)14:56
mgariepyhaha :)14:57
*** jurre has quit IRC14:58
*** lbragstad has joined #openstack-ansible14:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible stable/newton: Update rabbitmq_server role SHA  https://review.openstack.org/50529814:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: [TEST] Test RPM repo improvements  https://review.openstack.org/50453415:02
*** chyka has joined #openstack-ansible15:04
*** chyka has quit IRC15:04
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Updated from global requirements  https://review.openstack.org/50469015:05
*** chyka has joined #openstack-ansible15:05
*** Oku_OS is now known as Oku_OS-away15:08
openstackgerritMerged openstack/openstack-ansible master: Add ceph-ansible v3 support  https://review.openstack.org/49047615:09
*** lbragstad has quit IRC15:11
*** DanyC has quit IRC15:12
mgariepycan I have a couple review here : https://review.openstack.org/#/c/505289/15:14
*** arshad_ has joined #openstack-ansible15:14
*** arshad has quit IRC15:15
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [TEST] Update Ansible to 2.4.0.0  https://review.openstack.org/50181415:20
*** tasker has left #openstack-ansible15:20
*** vakuznet has joined #openstack-ansible15:23
spotzevrardjp: I'm going to put it review cleanup in milestone 1 unless you think we've got too much going on15:25
openstackgerritLogan V proposed openstack/openstack-ansible master: Replace haproxy common task with handlers  https://review.openstack.org/50479515:25
evrardjpspotz ok15:30
*** vnogin has quit IRC15:30
openstackgerritMerged openstack/openstack-ansible-os_neutron stable/ocata: Simplify the string check for offline db migrations  https://review.openstack.org/49461415:30
*** vnogin has joined #openstack-ansible15:32
*** vnogin has quit IRC15:37
*** armaan has joined #openstack-ansible15:40
openstackgerritMerged openstack/openstack-ansible-os_cinder master: Updated from global requirements  https://review.openstack.org/50467815:46
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible master: [DOC] Update development cycle checklist  https://review.openstack.org/50530715:47
*** DanyC has joined #openstack-ansible15:57
*** dxiri has joined #openstack-ansible15:58
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Updated from global requirements  https://review.openstack.org/50468515:58
openstackgerritLogan V proposed openstack/openstack-ansible master: Clean up the 'all' group vars  https://review.openstack.org/50480415:59
evrardjpwow16:00
evrardjpbug triage time16:00
*** dxiri_ has quit IRC16:00
evrardjpBug triage cloudnull, DimGR, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, darre16:01
evrardjpnc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza, hwoarang, cshen16:01
evrardjpHere is our bug list for today https://etherpad.openstack.org/p/osa-bugtriage16:01
evrardjp#startmeeting openstack_ansible_meeting16:01
openstackMeeting started Tue Sep 19 16:01:15 2017 UTC and is due to finish in 60 minutes.  The chair is evrardjp. Information about MeetBot at http://wiki.debian.org/MeetBot.16:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:01
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:01
*** DanyC has quit IRC16:01
spotz\o/16:01
evrardjp#topic new bugs16:01
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171818816:01
openstackLaunchpad bug 1718188 in openstack-ansible "Example layer 3 routed environment configuration limits VIP to POD1" [Undecided,New]16:01
prometheanfireo/16:01
jrosser_ahha thats mine16:02
jrosser_so either ive misunderstood how the vip works, or it cant escape from the subnet infra1 is on16:03
evrardjpthe configuration doesn't match the description16:03
evrardjppod1_container: 172.29.236.0/24,   pod2_container: 172.29.237.0/2416:04
evrardjpbut https://docs.openstack.org/project-deploy-guide/openstack-ansible/pike/app-config-pod.html#network-configuration16:04
evrardjpisn't consistent16:04
openstackgerritMerged openstack/openstack-ansible-os_ironic stable/newton: Fix typo in timeout  https://review.openstack.org/50496916:04
openstackgerritMerged openstack/openstack-ansible-os_nova master: Add always tag where it's needed  https://review.openstack.org/49438616:04
evrardjplb vip address could be updated to use a /2216:04
evrardjpand description adapted16:05
jrosser_not in a l3 example like that16:05
evrardjpwhy not?16:05
logan-yeah it'll need to be in the same L3 segment16:05
jrosser_because the network l3 config only allows certain subnets to live in each pod16:06
evrardjpnot sure what you both mean here16:06
jrosser_and they dont span pods16:06
logan-the vip is limited to one pod16:06
*** DanyC has joined #openstack-ansible16:06
jrosser_so the vip cant float16:06
jrosser_yes what logan- says16:06
evrardjpok let's take a step back first16:06
evrardjpdo you agree there is a mismatch between the code and the description ?16:07
logan-i'm not sure which description. im just looking at the o_u_c config dump in that doc and the config is invalid16:08
jrosser_im on my mobile on the train so its not ideal to look in great detail16:08
logan-haproxy_hosts can only contain hosts in one pod16:08
jrosser_the floating ip os a layer2 construct i think16:09
jrosser_but the infra nodes have no l2 adjacency16:09
jrosser_that is the issue16:09
logan-we use vrrp (l2 failover) to fail the vip between hosts which will not work to fail the vip between l3 segments16:09
jrosser_agreed16:09
jrosser_i forsee sinilar problems for  eutron routers in that example too16:09
evrardjpI agree on there, but let's focus on each bug at a time?16:09
evrardjpcidr_networks:16:10
evrardjp  pod1_container: 172.29.236.0/2416:10
evrardjp  pod2_container: 172.29.237.0/2416:10
evrardjp  pod3_container: 172.29.238.0/2416:10
evrardjp  pod4_container: 172.29.239.0/2416:10
mgariepyasettle, replied to your comment.16:10
evrardjpis obviously a mismatch with the rest16:10
mgariepyin : https://review.openstack.org/#/c/50528916:10
asettlemgariepy: grazie! (I didn't want to message you here because of triage)16:10
asettle(hence the -1 to grab attention)16:11
mgariepy(sorry)16:11
evrardjpthen16:11
asettle(+2a for you, sir)16:11
logan-yeah evrardjp I see what you're saying re: the cidr_networks16:11
jrosser_i intended this bug to be about the l2 vs l3 / vrrp issue16:11
evrardjpok16:11
*** hamzy has quit IRC16:11
jrosser_i hadnt spotted anything else wrong with the config16:11
jrosser_but i didnt look in great detail16:12
jmccroryi'll take this and updated docs. you'll either still need some l2 subnet spanning across haproxy hosts, or to use an external lb16:12
evrardjpjmccrory: are you there?16:12
jmccroryupdate*16:12
jmccroryevrardjp yes, just got on train and laptop16:12
evrardjpyeah16:12
evrardjpso here we plan for external adjacency on l216:12
evrardjpor alternatively we should do a completely different section16:13
evrardjpbut then we start talking about bgp16:13
evrardjpit sounds more complex than just giving a disclaimer16:13
jrosser_my 2p is that the infra nodes dont fit the pod model16:13
jrosser_that should be limited to compute/storage16:13
evrardjpwhy?16:13
jrosser_and other thing done for l2 infra16:13
admin0isn’t it acceptable to have an l2 connectivity between different pods if you want the vips to run on any pod ?16:13
evrardjpas long as haproxy is doing alright?16:14
jrosser_no  ecause its a l3 example16:14
jrosser_anyway, could debate at length :) it doesnt work as is16:14
admin0with multi pods, you can easily add 2-3 more machines as your haproxy host and then it can see all internal pods/networks16:14
jrosser_yes16:15
admin0decoupling haproxy from controllers ( that live on a certain pod ) might be a workaround /way to go16:15
evrardjpas long as haproxy nodes would be the integration to the network, it should work, but I guess it all depends on the networks you'll use16:15
evrardjpjrosser_: I suggest you propose a patch then :p16:15
jmccroryjust an example, no networks are going to be completely identical. i'll updat the docs and we can probably move on16:16
admin0haproxy nodes are the gateways via which the api/horizon .. so if there are multi pods, you  need to ensure your haproxy hosts sees them16:16
evrardjpagreed. Modifying the docs telling the requirements for this, and update for consistency sounds great jmccrory16:16
admin0and it can be on l3 ..   just the haproxies need to be in l2 for the vip/vrrp16:16
evrardjpjrosser_ admin0 you can review the patch jmccrory will post :p16:16
jrosser_l3 agents?16:16
jrosser_ok16:16
admin0ok16:17
evrardjpmarking it as confirmed and medium because the pod deployment is not the most often read item in the docs16:17
evrardjpok everyone?16:17
jmccroryok16:17
jrosser_sure, thanks everyone16:17
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171818716:18
openstackLaunchpad bug 1718187 in openstack-ansible "Implement neutron-fwaas-dashboard" [Undecided,New]16:18
evrardjpandymccr: are you there?16:18
andymccrhello!16:18
evrardjpwasn't that work done already for translations?16:19
andymccrno we dont deploy fwaas i dont think16:19
evrardjpok16:19
andymccrbut i know jafeha_ is looking at adding a patch for this16:19
evrardjpMarking it as confirmed, thanks to the docs, and to high ?16:19
andymccrwell i guess you cant work around it so yeah maybe high16:19
evrardjpjafeha_: that would be great16:19
andymccri just said that if he runs into issues we can help guide through the process16:20
evrardjpyeah broken expectations..., maybe we should add testing into this scenario16:20
admin0isn’t network >> firewall what Fwaas is ?16:20
evrardjpinto a *16:20
admin0which is there when i do it using ansible16:20
openstackgerritMerged openstack/openstack-ansible master: Fix variable def.  https://review.openstack.org/50528916:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install master: Optimize pip_install for CentOS  https://review.openstack.org/50450916:20
evrardjpadmin0: the bug is still valid16:20
andymccri think adding fwaas dashboard to the translations site would be cool but im not sure what else would be needed16:20
evrardjpfair enough16:21
evrardjpin the meantime let's see what jafeha_ says16:21
evrardjpnext16:21
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171788116:21
openstackLaunchpad bug 1717881 in openstack-ansible "public api does not work if it's behind proxy with ssl termination" [Undecided,New]16:21
openstackgerritMerged openstack/openstack-ansible-os_neutron master: Update links in some docs  https://review.openstack.org/50430616:22
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible stable/pike: Fix variable def.  https://review.openstack.org/50528816:22
evrardjpwould that be linked https://bugs.launchpad.net/openstack-ansible/+bug/1713663 ?16:23
openstackLaunchpad bug 1713663 in openstack-ansible "Set enable_proxy_headers_parsing = True when HAProxy is used" [Medium,Confirmed]16:23
evrardjpAdri2000: are you there?16:23
admin0looks similar16:24
evrardjpyeah.16:24
evrardjpOk will link the bug to the other bug.16:24
*** drifterza has joined #openstack-ansible16:24
evrardjpnext is maybe a docs bug?16:26
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171750616:26
openstackLaunchpad bug 1717506 in openstack-ansible "Quick Start in openstack-ansible" [Undecided,New]16:26
asettleevrardjp: just left a comment in that one. Unless someone else is totally aware of all the things16:26
evrardjpyes I see16:26
evrardjpYeah I have an idea16:26
asettleTo me it's fairly incomplete, but if someone is able to fill in the gaps16:26
evrardjpif you cd /opt/openstack-ansible/playbooks16:27
prometheanfire:D16:27
evrardjpcp etc/openstack_deploy/conf.d/{aodh,gnocchi,ceilometer}.yml.aio  ... won't work16:27
evrardjpbecause etc/ is only in /opt/openstack-ansible16:27
evrardjpnot playbooks subfolder16:27
asettleOhhhh yeah, makes sense.16:27
asettleHow have we had that for so long? I've never had an issue with the quick start16:27
admin0we just know what to copy ( without blindly copy/paste )16:28
asettleS'pose that's probably true16:28
evrardjpyeah and the for f... sounds bad too16:28
admin0maybe better do multi lines copy/paste16:28
admin0instead of for loop16:29
evrardjpasettle: I guess admin0 is right16:29
admin0else there will be hey i am using zsh and this does not work16:29
evrardjpI'll mark it as confirmed16:29
*** drifterza has quit IRC16:29
evrardjpspotz, admin0 or asettle could you have some time to refactor that?16:29
admin0ok16:29
admin0i will16:29
evrardjpsorry, oxford comma.16:29
asettleThanks admin0 :)16:30
spotz:)16:30
evrardjpwell you all understood me, so let's continue. Thanks admin0!16:30
evrardjpnext16:31
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171732116:31
openstackLaunchpad bug 1717321 in openstack-ansible "Content-Security-Policy for services" [Undecided,New]16:31
prometheanfireyo16:31
evrardjpthat's barely readable :p16:32
prometheanfirewelcome to my thought process :P16:33
evrardjpHaha.16:33
evrardjpthat's not helpful for triaging you know :p16:33
prometheanfirebasically it is a question of if and how we want to lock down access16:33
evrardjpI don't even know if it's an issue or a feature request right now.16:34
admin0this is a good to have16:34
asettleFeature request?16:34
prometheanfiresecurity request?16:34
admin0as an operator and apis etc facing public and looking at people scanning and trying to ddos or break in, is a nice addon16:34
asettleSecurity feature request :D16:34
prometheanfirewfm16:34
prometheanfireit's a 'good practice'16:34
prometheanfireif it helps I've been running all those settings since ocata16:35
prometheanfireand newton actually16:35
evrardjpso the good practice is for all the webservers and load balancer to handle Content-Security-Policy , right?16:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Optimize openstack_hosts for CentOS  https://review.openstack.org/50443716:35
prometheanfireyes16:36
evrardjpthe next question is, could you document that? Because it only applies on valid certificates I guess16:36
prometheanfireCSP doesn't need ssl16:36
prometheanfireonly the section below 'for ssl something like the following' (and the first comment) are for ssl16:36
prometheanfireX-XSS-Protection, X-Frame-Options, X-Content-Type-Options, Content-Security-Policy do not need ssl16:37
evrardjpso maybe we should set something that sets the defaults for non ssl, and a boolean to flip when using proper certificates to add this extra security16:37
evrardjpfor the ssl parts.16:37
evrardjpso I consider this doesn't break anything, but we should definitely make the life of everyone simpler if we define this16:38
prometheanfiresgtm, how it's implimented will differ based on how we do the load balancing though16:38
*** pcaruana has quit IRC16:38
evrardjplet's mark this as confirmed and wishlist then16:38
admin0“maybe we should set something that sets the defaults for non ssl” — defaults should always be SSL :D .. even with self-signed certs16:38
prometheanfiredid we decide on not using nginx at all or what (what layer should I be adding the headers to?16:39
evrardjpadmin0: that's a different architecture case, I will not go that far for this bug. Let's focus on what's achievable.16:39
admin0right16:39
evrardjpprometheanfire: we have decided to take an exploration phase with uwsgi fast router vs nginx16:39
evrardjpon each physical node.16:39
prometheanfirewhat does that mean?16:39
evrardjpsummarized version:16:40
admin0it means write for uwsgi now and later we go for nginx :D16:40
admin0:D16:40
evrardjpwhatever we are currently supporting, won't change. So if you have horizon behind apache behind haproxy, let's keep that16:40
evrardjpsame for uwsgi apps behind nginx.16:41
evrardjpwe should still take care of that for the current state, whatever the decision in the future would be16:41
prometheanfireok, so it's probably going to differ per role16:41
evrardjpprometheanfire: do you have cycles to fix that for default nginx services for example, like placement?16:41
prometheanfireya, it SHOULD be an easy oneliner (for each header)16:42
jmccrorywishlist , add docs for best practices in upstream projects, patches for osa config whenever convenient16:42
andymccrNB we clean up nginx bits for placement and other services that had it: https://github.com/openstack/openstack-ansible-os_nova/blob/master/tasks/nova_uwsgi.yml#L35-L4116:42
prometheanfirejmccrory: ya, I had to figure out the CSP for horizon by trial and error, not fun16:42
evrardjpjmccrory: agreed.16:43
andymccrit just removes the site conf though and not nginx itself so that it wont break existing nginx hosts that are doing more than just placement for example16:43
admin0prometheanfire: how many days/weeks did it took ?16:43
prometheanfirea couple days looking at a web debug console16:43
prometheanfireby days I mean an hour a day or so16:43
prometheanfirejust annoying16:43
evrardjpok let's continue.16:44
prometheanfireone last thing16:44
jmccroryprometheanfire heh yeah bet it wasn't fun. would be good to have any project specific weirdness in their docs though16:44
evrardjpnext16:44
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171692716:44
openstackLaunchpad bug 1716927 in openstack-ansible " "Failed to update apt cache."}" [Undecided,New]16:44
*** drifterza has joined #openstack-ansible16:46
evrardjpmmm16:48
jmccroryneeds more info? maybe apt log? could be connection issue with keyserver or repo16:48
*** cshen_ has joined #openstack-ansible16:48
hwoarangyeah looks random16:49
openstackgerritAlexandra Settle proposed openstack/openstack-ansible master: [deploy-guide] Updates git clone link  https://review.openstack.org/50533316:49
evrardjpyes we need more apt log data16:49
asettleadmin0: that should be your bug fix to 1715178 btw16:49
admin0noted16:50
evrardjpMarked as incomplete.16:51
evrardjpnext16:51
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171692516:51
openstackLaunchpad bug 1716925 in openstack-ansible "No package matching 'libmariadbclient-dev' is available"}" [Undecided,New]16:51
evrardjpthat is maybe the follow up16:51
hwoarangyep16:52
evrardjpincomplete too then16:53
evrardjpnext16:54
evrardjp#link https://bugs.launchpad.net/openstack-ansible/+bug/171690816:54
openstackLaunchpad bug 1716908 in openstack-ansible "Unable to create new instances after upgrade." [Undecided,New]16:54
evrardjpqemu-system-{{ ansible_WHATEVER }} is not in explicit dependency16:57
evrardjphttps://github.com/openstack/openstack-ansible-os_nova/blob/master/vars/ubuntu-16.04.yml#L5316:57
evrardjpbut I don't know what apt-get install qemu installs16:57
evrardjpso maybe I am wrong there16:57
evrardjpanyone?16:58
logan-qemu -> qemu-system -> qemu-system-* is the apt dependency chain16:58
evrardjpso latest qemu should be alright16:59
evrardjpbut weirdly in his case qemu-system was 2.8 and qemu-block-extra was 2.817:00
evrardjpbut qemu-system-x86 was 2.517:00
evrardjpwe should probably add it to the explicit list then?17:01
logan-yeah so that's interesting...17:01
evrardjpI guess it's all aptitude behavior17:01
logan-qemu-system upgraded to UCA17:01
logan-the rest of the qemu-system-* deps didn't go to UCA17:01
*** gouthamr has quit IRC17:01
*** gouthamr has joined #openstack-ansible17:01
evrardjpmaybe we should give uca a higher prio17:02
evrardjpwhat happens if installing manually?17:02
logan-im testing right now, installing 'qemu' on a base system, adding uca, and then ill see what happens upgrading qemu after uca is installed17:02
*** cshen_ has quit IRC17:03
logan-gate logs should help confirm this too17:03
logan-since we pull in the apt history17:03
logan-and ara stores all of the apt stdout17:03
*** weezS has quit IRC17:04
evrardjpyeah17:04
evrardjplet's stop the bug triage for today though17:04
evrardjpwe can triage this as confirmed or not offline of the meeting17:04
evrardjpthanks everyone!17:04
prometheanfireyarp17:05
evrardjpplenty of bugs for next week then!17:05
evrardjpany last words?17:05
evrardjp:p17:05
prometheanfireevrardjp: mind taking a look at https://bugs.launchpad.net/openstack-ansible/+bug/1717321/comments/3 for my plan of action?17:05
openstackLaunchpad bug 1717321 in openstack-ansible "Content-Security-Policy for services" [Wishlist,Confirmed]17:05
evrardjp517:05
evrardjp417:05
evrardjp317:05
evrardjpyeah I will have a look17:05
prometheanfireafter meeting, thanks17:05
*** hamzy has joined #openstack-ansible17:05
evrardjp217:05
evrardjp117:05
evrardjp#endmeeting17:05
openstackMeeting ended Tue Sep 19 17:05:40 2017 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:05
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2017/openstack_ansible_meeting.2017-09-19-16.01.html17:05
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2017/openstack_ansible_meeting.2017-09-19-16.01.txt17:05
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2017/openstack_ansible_meeting.2017-09-19-16.01.log.html17:05
evrardjpprometheanfire: that sounds good. The resolver would have to be the host/container resolver though17:07
evrardjpto not add moving parts17:07
prometheanfiresure17:07
evrardjp(probably worth it to be overridable)17:08
prometheanfireI didn't know what particular IP would be used, (would be a var probably)17:08
prometheanfireif it's a var it would be17:08
odyssey4medoesn't nginx/apache use the host dns by default?17:08
odyssey4meif so, leave it as the default17:08
*** perniciouscaffei has quit IRC17:09
prometheanfirehttps://stackoverflow.com/questions/40330704/resolver-param-in-nginx explains it a little17:10
prometheanfireIf your config file has static DNS names (not generated), and you are not care about track IP changes without nginx reload, you don't need nginx's resolver. In this case all DNS names will be resolved on startup.17:11
prometheanfireso I don't think we care17:11
prometheanfireso we don't need the resolver piece17:11
prometheanfireok, lunching17:12
evrardjpgreat17:12
evrardjpthanks prometheanfire17:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Include db migration fix for next release  https://review.openstack.org/50533817:16
*** drifterza has quit IRC17:20
*** drifterza has joined #openstack-ansible17:21
*** drifterza has quit IRC17:21
*** drifterza has joined #openstack-ansible17:21
*** drifterza has quit IRC17:22
*** drifterza has joined #openstack-ansible17:22
*** drifterza has quit IRC17:22
*** drifterza has joined #openstack-ansible17:23
*** drifterza has left #openstack-ansible17:23
*** udesale has joined #openstack-ansible17:27
*** udesale has quit IRC17:31
mgariepyasettle, can you review this one also please :) https://review.openstack.org/#/c/505288/17:33
*** drifterza has joined #openstack-ansible17:34
*** drifterza1 has joined #openstack-ansible17:41
*** drifterza has quit IRC17:41
*** shardy has quit IRC17:44
jmccrorymhayden mgariepy does this look familiar? http://logs.openstack.org/14/501814/11/check/gate-openstack-ansible-openstack-ansible-ceph-centos-7-nv/08275cc/console.html#_2017-09-19_16_18_47_41485817:45
mgariepyjmccrory yep,17:45
mgariepyjmccrory, need to set the ansible_python_interpreter17:46
*** electrofelix has quit IRC17:48
*** weezS has joined #openstack-ansible17:48
jmccrorymgariepy hmm ok thanks!17:48
mgariepyjmccrory, https://github.com/openstack/openstack-ansible/blob/master/tests/get-ansible-role-requirements.yml#L12717:49
*** cshen_ has joined #openstack-ansible17:50
jmccrorylooks like it's just in a few random places like that right now, i'll try adding to haproxy playbook, but wonder if that should be a group var?17:50
mgariepyit's only needed for localhost I guess.17:51
mgariepywhen on centos17:51
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [TEST] Update Ansible to 2.4.0.0  https://review.openstack.org/50181417:52
odyssey4mejmccrory if the target is localhost, setting it as a group var doesn't work17:53
mgariepyjmccrory, maybe we should create a group var localhost with the config.17:53
odyssey4meansible ignores groups_vars/all for localhost - or did when I last tested17:53
*** perniciouscaffei has joined #openstack-ansible17:53
logan-thats a quirk with our vars plugin I think17:53
odyssey4meoh, also it ignores host_vars for localhost too ;)17:53
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: [TEST] Test RPM repo improvements  https://review.openstack.org/50453417:53
logan-yup17:53
logan-normal ansible vars loading does not, but our vars plugin never loads group/host vars for localhost right now -- it seems like you have to actually define localhost in inventory for it to be passed to teh vars plugin17:54
logan-which we could easily fix with a static inventory file17:54
odyssey4mehmm, logan- I tried that too IIRC and it didn't work - I used straight ansible 2.3 without vars plugins17:55
logan-hmm weird17:55
* odyssey4me goes looking for a gist, hoping he saved it17:55
logan-couldn't we just drop a static inventory file with "[all]\nlocalhost" in it17:56
odyssey4meI'm fairly certain I tried having localhost defined in the inventory and it didn't work either.17:56
odyssey4melocalhost and ansible_python_interpreter is treated specially17:56
logan-oh17:56
*** chhavi has quit IRC17:58
odyssey4meI might be wrong - it was a while ago. Also, Ansible may have changed behaviour between then and now.17:58
odyssey4meI remeber Ansible 2.2 working fine, but 2.3 not.17:58
logan-i might try some stuff because I want to use a host_vars/localhost.yml file for https://review.openstack.org/#/c/504612/17:59
jwitkohere is how i worked around it in my ansible repo (non-openstack repo)17:59
jwitko[local]17:59
jwitkolocalhost ansible_connection=local ansible_python_interpreter=python17:59
jwitkothats at the top of my inventory file17:59
jwitkothen i specify "hosts: local"17:59
*** aludwar1 has joined #openstack-ansible18:00
*** aludwar has quit IRC18:00
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Optimize openstack_hosts for CentOS  https://review.openstack.org/50443718:01
*** acormier has quit IRC18:05
*** drifterza1 has left #openstack-ansible18:05
*** acormier has joined #openstack-ansible18:06
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Optimize openstack_hosts for CentOS  https://review.openstack.org/50443718:06
*** cshen_ has quit IRC18:06
odyssey4mejwitko did that work for Ansible 2.3+ ?18:07
mgariepyI also have a collegue with that in echo 'ansible_python_interpreter: "/usr/bin/python"' > inventory/host_vars/localhost18:10
mgariepypoking him about the version of ansible he is using.18:10
*** acormier has quit IRC18:10
*** arshad_ has quit IRC18:10
*** cshen_ has joined #openstack-ansible18:12
openstackgerritLogan V proposed openstack/openstack-ansible master: Clean up the 'all' group vars  https://review.openstack.org/50480418:12
mgariepyodyssey4me, he is using : ansible 2.3.2.018:12
odyssey4mealright, it's plausible that my memory is rusty :)18:13
*** aludwar1 has quit IRC18:14
*** drifterza has joined #openstack-ansible18:15
openstackgerritLogan V proposed openstack/openstack-ansible master: Move resolvconf JIT execution to common tasks  https://review.openstack.org/50461218:15
logan-trying something with host_vars ^18:15
openstackgerritLogan V proposed openstack/openstack-ansible master: Move resolvconf JIT execution to common tasks  https://review.openstack.org/50461218:18
openstackgerritMerged openstack/openstack-ansible-specs master: Blueprint for Congress integration with OSA  https://review.openstack.org/49906618:19
openstackgerritMerged openstack/openstack-ansible stable/pike: Fix variable def.  https://review.openstack.org/50528818:19
jwitkoodyssey4me, ive been using it on 2.3 latest version for a while.   i'm migrating to 2.4 today and its been working so far18:25
*** gokhan is now known as Guest19118:26
*** stuartgr has quit IRC18:26
*** cshen_ has quit IRC18:30
mgariepyasettle, how often does the doc is rebuilt ?18:34
*** mbuil has quit IRC18:35
*** pbandark has quit IRC18:36
*** cshen_ has joined #openstack-ansible18:38
odyssey4memgariepy every time a patch merges, a post job is kicked off which builds and publishes the docs18:39
odyssey4methe post jobs are low priority, so they sometimes take some time18:40
*** drifterza has quit IRC18:40
mgariepyok cool.18:40
odyssey4memgariepy you'll see them in the post queue here: http://status.openstack.org/zuul/18:40
*** drifterza has joined #openstack-ansible18:41
*** cshen_ has quit IRC18:41
*** cshen_ has joined #openstack-ansible18:42
*** acormier has joined #openstack-ansible18:45
*** acormier_ has joined #openstack-ansible18:47
*** vnogin has joined #openstack-ansible18:48
*** acormier has quit IRC18:50
*** acormier_ has quit IRC18:51
*** galstrom_zzz is now known as galstrom18:51
*** vnogin has quit IRC18:53
*** lxypto has joined #openstack-ansible18:58
*** lxypto has quit IRC18:58
*** cshen_ has quit IRC19:00
*** vnogin has joined #openstack-ansible19:01
*** hybridpollo has joined #openstack-ansible19:06
*** cshen_ has joined #openstack-ansible19:09
*** vnogin has quit IRC19:09
openstackgerritMelissa Kam proposed openstack/openstack-ansible stable/newton: Update SHA for os_ironic  https://review.openstack.org/50537619:09
*** hybridpollo has quit IRC19:13
*** luzC has left #openstack-ansible19:16
*** armaan has quit IRC19:17
*** drifterza has quit IRC19:17
openstackgerritMerged openstack/openstack-ansible-os_heat master: Updated from global requirements  https://review.openstack.org/50468219:17
*** acormier has joined #openstack-ansible19:21
*** vnogin has joined #openstack-ansible19:22
*** acormier has quit IRC19:25
*** lucasxu has quit IRC19:26
*** hybridpollo has joined #openstack-ansible19:27
openstackgerritMerged openstack/openstack-ansible-galera_server master: Updated from global requirements  https://review.openstack.org/50466819:28
*** NostawRm has quit IRC19:33
openstackgerritMerged openstack/openstack-ansible-tests master: Updated from global requirements  https://review.openstack.org/50283119:34
openstackgerritMerged openstack/openstack-ansible-os_aodh master: Updated from global requirements  https://review.openstack.org/50467619:39
openstackgerritLogan V proposed openstack/openstack-ansible master: Move resolvconf JIT execution to common tasks  https://review.openstack.org/50461219:45
*** cshen_ has quit IRC19:51
*** galstrom is now known as galstrom_zzz19:54
*** gouthamr has quit IRC20:03
*** acormier has joined #openstack-ansible20:05
*** cshen_ has joined #openstack-ansible20:06
*** acormier has quit IRC20:07
*** acormier has joined #openstack-ansible20:07
*** acormier has quit IRC20:12
*** galstrom_zzz is now known as galstrom20:13
asettlemgariepy: sorry, what was your Q about building?20:18
openstackgerritLogan V proposed openstack/openstack-ansible master: Clean up the 'all' group vars  https://review.openstack.org/50480420:18
*** perniciouscaffei has quit IRC20:19
*** perniciouscaffei has joined #openstack-ansible20:20
-openstackstatus- NOTICE: Zuul and Gerrit are being restarted to address issues discovered with the Gerrit 2.13 upgrade. review.openstack.org will be inaccessible for a few minutes while we make these changes. Currently running jobs will be restarted for you once Zuul and Gerrit are running again.20:25
*** vnogin has quit IRC20:36
*** vnogin has joined #openstack-ansible20:37
*** cshen_ has quit IRC20:43
*** cshen_ has joined #openstack-ansible20:43
*** vnogin has quit IRC20:44
*** cshen_ has quit IRC20:48
*** oneswig has joined #openstack-ansible20:50
*** armaan has joined #openstack-ansible20:58
*** DanyC has quit IRC20:59
*** esberglu has quit IRC21:00
*** esberglu has joined #openstack-ansible21:01
*** esberglu has quit IRC21:05
*** vnogin has joined #openstack-ansible21:06
*** esberglu has joined #openstack-ansible21:12
*** thorst has quit IRC21:14
*** thorst has joined #openstack-ansible21:16
*** thorst has quit IRC21:20
*** vakuznet has quit IRC21:32
*** gouthamr has joined #openstack-ansible21:34
*** jheroux has quit IRC21:35
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible master: [DOC] Update development cycle checklist  https://review.openstack.org/50530721:36
*** galstrom is now known as galstrom_zzz21:38
*** galstrom_zzz is now known as galstrom21:41
*** kylek3h has quit IRC21:54
*** esberglu has quit IRC21:57
*** acormier has joined #openstack-ansible22:09
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-pip_install master: Remove unneeded task  https://review.openstack.org/50542822:13
*** acormier has quit IRC22:14
*** oneswig has quit IRC22:16
*** galstrom is now known as galstrom_zzz22:17
*** weezS has quit IRC22:20
*** gouthamr has quit IRC22:21
*** acormier has joined #openstack-ansible22:28
*** hw_wutianwei has quit IRC22:28
*** yifei has quit IRC22:30
*** hw_wutianwei has joined #openstack-ansible22:30
*** yifei has joined #openstack-ansible22:30
-openstackstatus- NOTICE: Gerrit is being restarted to address some final issues, review.openstack.org will be inaccessible for a few minutes while we restart22:32
*** acormier has quit IRC22:32
*** dave-mcc_ has quit IRC22:33
*** acormier has joined #openstack-ansible22:37
*** acormier has quit IRC22:41
*** openstackgerrit has quit IRC22:47
*** acormier has joined #openstack-ansible22:51
*** acormier has quit IRC22:56
*** acormier has joined #openstack-ansible23:01
*** gouthamr has joined #openstack-ansible23:01
*** openstackgerrit has joined #openstack-ansible23:03
openstackgerritMerged openstack/openstack-ansible master: Revert "Install dnf on CentOS hosts"  https://review.openstack.org/50495923:03
*** jwitko has quit IRC23:04
*** acormier has quit IRC23:05
*** chyka has quit IRC23:07
*** acormier has joined #openstack-ansible23:11
*** acormier has quit IRC23:16
*** acormier has joined #openstack-ansible23:24
*** acormier has quit IRC23:30
*** ChanServ changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs"23:37
-openstackstatus- NOTICE: Gerrit is once again part of normal puppet config management. Problems with Gerrit gitweb links and Zuul post jobs have been addressed. We currently cannot create new gerrit projects (fixes in progress) and email sending is slow (being debugged).23:37
*** gouthamr has quit IRC23:40
*** acormier has joined #openstack-ansible23:47
*** threestrands has joined #openstack-ansible23:51
*** acormier has quit IRC23:52
*** chhavi has joined #openstack-ansible23:54
*** chyka has joined #openstack-ansible23:54
*** gouthamr has joined #openstack-ansible23:55
*** chhavi has quit IRC23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!