Thursday, 2017-11-02

*** yifei has quit IRC00:01
*** PramodJ has joined #openstack-ansible00:05
*** chyka_ has quit IRC00:07
*** markvoelker_ has quit IRC00:07
*** markvoelker has joined #openstack-ansible00:08
*** pramodrj07 has quit IRC00:08
*** yifei has joined #openstack-ansible00:11
*** markvoelker has quit IRC00:12
*** weezS has quit IRC00:13
*** markvoelker has joined #openstack-ansible00:18
*** dxiri has quit IRC00:42
*** dxiri has joined #openstack-ansible00:42
*** dave-mccowan has joined #openstack-ansible00:47
*** jiaopengju has joined #openstack-ansible00:49
*** xingchao has joined #openstack-ansible00:54
*** xingchao has quit IRC00:54
*** xingchao has joined #openstack-ansible00:58
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [DNM] Inventory migrate CLI  https://review.openstack.org/50450800:59
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [DNM] Inventory migrate CLI  https://review.openstack.org/50450801:01
*** woodard_ has joined #openstack-ansible01:03
*** woodard has quit IRC01:03
*** markvoelker has quit IRC01:03
*** markvoelker has joined #openstack-ansible01:03
*** PramodJ has quit IRC01:04
*** dxiri has quit IRC01:08
*** markvoelker has quit IRC01:08
*** hw_wutianwei has joined #openstack-ansible01:10
*** dxiri has joined #openstack-ansible01:15
*** snowman48391 has quit IRC01:18
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [DNM] Inventory migrate CLI  https://review.openstack.org/50450801:19
*** dxiri has quit IRC01:20
*** snowman4839 has joined #openstack-ansible01:20
*** woodard_ has quit IRC01:46
*** vnogin has quit IRC01:53
*** dxiri has joined #openstack-ansible01:59
*** dxiri has quit IRC01:59
*** dxiri has joined #openstack-ansible01:59
*** sxc731 has joined #openstack-ansible01:59
*** kukacz has quit IRC02:00
*** galstrom_zzz is now known as galstrom02:00
*** vnogin has joined #openstack-ansible02:01
*** kukacz has joined #openstack-ansible02:01
*** vnogin has quit IRC02:03
*** vnogin has joined #openstack-ansible02:13
*** xingchao has quit IRC02:14
*** xingchao has joined #openstack-ansible02:17
captaindaveHey all. I've installed successfully and things seem operational, but I'm getting what appear to be certificate errors in the nova-api-os-compute-container logs for nova-api-wsgi. It looks like it's unhappy about hitting the externally-facing keystone with its OSA-created self-signed cert. Interestingly, adding that cert to /etc/pki/ca-trust/source/anchors and running 'update-ca-trust extract'02:23
captaindavedoesn't seem to change things. Is this expected behavior or am I doing something wrong?02:23
*** xingchao has quit IRC02:24
captaindaveExample output: http://sprunge.us/SJDZ02:24
*** xingchao has joined #openstack-ansible02:27
*** sxc731 has quit IRC02:37
*** chhavi has joined #openstack-ansible02:37
*** galstrom is now known as galstrom_zzz02:54
*** xingchao has quit IRC02:54
*** xingchao has joined #openstack-ansible02:56
*** xingchao has quit IRC02:58
*** thorst has joined #openstack-ansible03:00
*** xingchao has joined #openstack-ansible03:03
*** dave-mccowan has quit IRC03:05
*** udesale has joined #openstack-ansible03:16
*** xingchao has quit IRC03:19
*** xingchao has joined #openstack-ansible03:20
*** xingchao has quit IRC03:22
*** threestrands has quit IRC03:29
*** xingchao has joined #openstack-ansible03:30
*** vnogin has quit IRC03:33
*** vnogin has joined #openstack-ansible03:34
*** xingchao has quit IRC03:35
*** xingchao has joined #openstack-ansible03:37
*** vnogin has quit IRC03:38
*** xingchao has quit IRC03:40
*** thorst has quit IRC04:03
*** snowman48391 has joined #openstack-ansible04:10
*** snowman4839 has quit IRC04:11
*** albertcard1 has quit IRC04:18
*** gkadam_ has joined #openstack-ansible04:21
*** gkadam_ has quit IRC04:22
*** gkadam_ has joined #openstack-ansible04:22
*** sxc731 has joined #openstack-ansible04:22
*** gkadam_ is now known as gkadam04:23
*** agrebennikov has quit IRC04:37
*** dxiri has quit IRC05:08
*** dxiri has joined #openstack-ansible05:16
*** armaan has quit IRC05:17
*** armaan has joined #openstack-ansible05:18
*** armaan has quit IRC05:23
*** armaan has joined #openstack-ansible05:24
*** armaan has quit IRC05:30
*** armaan has joined #openstack-ansible05:30
captaindaveAlso, I'm getting the following error on attempted reconfiguration of nova: http://sprunge.us/BWGd05:40
captaindaveIf I remove my inventory, it will fail but not kill the playbook.05:40
*** taseer2 is now known as Taseer05:42
captaindaveadding a static: no seems to remedy it05:43
captaindaveI take that back. Sorry.05:44
captaindaveWrong terminal.05:44
captaindave(the static part)05:44
*** jbadiapa has joined #openstack-ansible05:52
*** pcaruana has joined #openstack-ansible05:58
*** armaan has quit IRC06:28
*** armaan has joined #openstack-ansible06:29
*** armaan has quit IRC06:30
*** armaan has joined #openstack-ansible06:30
*** PaulusNL has joined #openstack-ansible06:35
*** vnogin has joined #openstack-ansible06:37
*** vnogin has quit IRC06:41
*** sxc731 has quit IRC06:56
*** vnogin has joined #openstack-ansible07:01
*** bruvik_ has joined #openstack-ansible07:02
openstackgerritHengqing Hu proposed openstack/openstack-ansible-os_neutron master: Set enable_dvr when router_distributed is enabled  https://review.openstack.org/51718707:05
*** vnogin has quit IRC07:05
*** hachi has joined #openstack-ansible07:07
*** Oku_OS-away is now known as Oku_OS07:09
*** hachi__ has joined #openstack-ansible07:11
*** fxpester has quit IRC07:11
*** hachi has quit IRC07:13
*** chhavi__ has joined #openstack-ansible07:16
*** a0x3e8 has joined #openstack-ansible07:18
a0x3e8hello. I have a problem with new a fresh install of openstack test environment using ansible. after making a local git and pip repository, install finished without any errors. all the services are up and running. but when I try to start an instance, I get the error NOT ENOUGH HOSTS. I checked block storage, nova hypervisor, and essentially anything07:22
a0x3e8. there is no error in nova log about hypervisor. how can I debug this.07:22
*** bruvik_ has quit IRC07:25
*** vnogin has joined #openstack-ansible07:31
*** huxinhui__ has joined #openstack-ansible07:32
*** bruvik_ has joined #openstack-ansible07:33
*** huxinhui__ is now known as huxinhui07:34
*** jvidal has joined #openstack-ansible07:34
*** bruvik_ has quit IRC07:38
*** vnogin has quit IRC07:38
berendtmhayden: regarding https://review.openstack.org/#/c/515634/, to you prefer to disable debsum by default? will add docs/release notes for the new parameter now07:46
hwoaranggood morning07:47
admin0\o07:47
*** sxc731 has joined #openstack-ansible07:48
*** vnogin has joined #openstack-ansible07:49
*** sxc731 has quit IRC07:53
*** sxc731 has joined #openstack-ansible07:54
*** armaan has quit IRC07:55
*** armaan has joined #openstack-ansible07:55
*** vnogin has quit IRC07:55
openstackgerritChristian Berendt proposed openstack/ansible-hardening master: Make debsums check configurable  https://review.openstack.org/51563407:56
evrardjpTaseer: https://github.com/openstack/openstack-ansible-os_congress08:00
evrardjp:)08:00
evrardjpgood morning hwoarang admin0 a0x3e808:01
openstackgerritChristian Berendt proposed openstack/ansible-hardening master: Make check of package checksums configurable  https://review.openstack.org/51563408:01
evrardjpa0x3e8: you should check in your nova scheduler I guess08:02
*** vnogin has joined #openstack-ansible08:04
a0x3e8evrardjp: I found the cause of the error. it was the neutron config file in compute node. after removing flat:eth12 from /etc/neutron/plugins/ml2/linuxbridge_agent.ini, I can deploy instances. what type should I use for the external network08:05
Taseerevrardjp: That was quick :)08:05
evrardjpTaseer: it's not official yet08:05
Taseeratleast it is progressing08:06
evrardjpa0x3e8: I don't know your network configuration, but I guess it all depends on what nic are available to your neutron agent instances :)08:06
evrardjpa0x3e8: it's all about wiring. Check if you have host overrides in your network configuration, and if they match what you need (it's inside the openstack_user_config)08:07
a0x3e8evrardjp: used exactly the test environment in openstack-ansible ocata docs.08:07
evrardjpTaseer: yes I followed that to make sure it happens!08:08
evrardjp:D08:08
openstackgerritMerged openstack/ansible-hardening master: Update to RHEL 7 STIG V1R3  https://review.openstack.org/51666008:08
*** vnogin has quit IRC08:08
evrardjpa0x3e8: please allow me to read the ocata docs then :)08:08
evrardjpI guess there are things in comments we can easily miss too08:09
a0x3e8evrardjp: the only change I've made so far is instead of using vlan on single nic, I used 3 physical ports.08:09
evrardjpa0x3e8: may I ask why not deploying pike?08:09
evrardjpa0x3e8: go on?08:09
evrardjpyou have three networks then?08:10
a0x3e8evrardjp: well, I have a really weak internet connection. I mirrored all ocata repositories. it is not so simple for me to get all repos again! :)08:11
evrardjpwe should ship you a usb key :p08:11
a0x3e8evrardjp: I have 3 networks instead of 3 vlans, yes. I use vlans in my switch!08:12
evrardjpok08:12
evrardjpa0x3e8: and you give only flat networks then?08:12
a0x3e8evrardjp: the first problem that I had for a long time was git repos fail with a weak connection.08:12
evrardjpI don't understand08:12
evrardjpthe idea of vlan network type is that you can sinply give a nic, and traffic will get tagged, which could then be handled by your switching and routing infra08:13
a0x3e8evrardjp: instead of eth0.10, I use eth0...   instead of eth0.20, I use eth1,..... and so on08:13
evrardjpbut for what part?08:13
evrardjpsorry if I don't understand your setup, hard to understand without seeing switch configuration/user configuration :D08:14
a0x3e8evrardjp: let me send it then...08:14
evrardjp:D08:15
evrardjpa0x3e8: did you read what was commented here: https://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/app-config-test.html#host-network-configuration ?08:15
evrardjpon the compute part08:15
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_tacker master: Initial OSA zuul v3 role jobs  https://review.openstack.org/51720408:15
*** shardy has joined #openstack-ansible08:16
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_swift master: Add OpenStack-Ansible metadata  https://review.openstack.org/51720608:20
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_tacker stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51630608:20
yifeiHi guys, I have encountered an ERROR while deploying rabbitmq with OSA Pike. It always failed in the task "Read rabbit cookie". The log is here: http://paste.openstack.org/show/625316/08:20
yifeiHowever when I replaced "rabbitmq_set_cookie.yml" by the code in OSA Ocata, no ERROR occurred. My operating system is 16.04.3.08:20
yifeiIs there anyone can help me with this? Thanks08:20
a0x3e8evrardjp: yes. my setup is exactly like this. but I used eth0 for eth0.10,  eth1 for eth0.20, and eth2 for eth0.3008:20
a0x3e8and user_config.yml is exactly the same.08:21
evrardjpyifei: don't need to replace. It's not an issue08:24
evrardjpyifei: the task is marked as an error, but it's immediately rescued by another task08:24
evrardjpyifei: ansible currently has no way to show "rescued" task as green. But this will be changed in ansible 2.508:25
evrardjpyifei: if you have a hard failure, that must be after that task08:25
yifeievrardjp: you mean I need to upgrade my ansible to 2.5?08:25
evrardjpyifei: ansible 2.5 doesn't exist yet08:25
evrardjpyifei: stay with what you have, and ignore the error08:26
*** pbandark has quit IRC08:26
*** vnogin has joined #openstack-ansible08:26
evrardjpas I told you, the task should get rescued and the playbook should continue08:26
evrardjpit should have no impact on you08:26
evrardjpafk08:26
yifeievrardjp: but after running setup-infrastructure.yml, it indeed marks it as failed like this: 2017-11-02 05:53:52,086 p=34344 u=root |  host3_rabbit_mq_container-b7879c1e : ok=90   changed=50   unreachable=0    failed=108:27
openstackgerritlu.li proposed openstack/openstack-ansible master: Update docs config for linters  https://review.openstack.org/51720708:27
yifeievrardjp: i unerstand that the ansible block module uses rescue08:28
yifeievrardjp: but in my env, ansible marked running setup-infrastructure.yml ad failed and the deployment stopped08:30
*** oanson has quit IRC08:30
*** vnogin has quit IRC08:30
yifeievrardjp: or is there any way to avoid this? Anyway, thanks alot08:31
*** oanson has joined #openstack-ansible08:31
*** pbandark has joined #openstack-ansible08:34
*** gkadam has quit IRC08:34
*** gkadam has joined #openstack-ansible08:35
a0x3e8evrardjp: https://thepasteb.in/p/98hRqkXL0VyUk08:37
a0x3e8evrardjp: this one is for compute node: https://thepasteb.in/p/nZhlD72v8JBiY08:38
*** ivveh- has joined #openstack-ansible08:42
*** ivveh has quit IRC08:44
andymccrgunix: what are you trying to do/where are you at currently with the swift deploy?08:44
*** oanson has quit IRC08:45
*** oanson has joined #openstack-ansible08:46
hwoarangany cores around for a quick review of https://review.openstack.org/#/c/516544/ ? :)08:49
*** armaan has quit IRC08:49
*** armaan has joined #openstack-ansible08:50
hwoarangandymccr: i am trying your rpc-ceph repo now but i get "ERROR! Unexpected Exception, this is probably a bug: 'InventoryManager' object has no attribute 'get_group_dict'"08:51
hwoarang./run_tests.sh alone didn't work immediately for me. i need to run it as root, and also install ansible myself08:52
openstackgerritMerged openstack/openstack-ansible-os_nova stable/newton: Force the installation of qemu packages  https://review.openstack.org/51709108:52
hwoarangoh hmm08:52
hwoarangshould have used sudo run_tests.sh functional i suppose08:52
hwoarangyep that seems to restore sanity :)08:54
evrardjpyifei: do you have another issue in setup-infra ?08:56
evrardjpif not, maybe it didn't fail08:56
evrardjpcheck with echo $?08:57
yifeievrardjp: totally two issues, both with using block module, i have checked the code08:57
evrardjpyifei: were both rescued?08:58
yifeievrardjp: yes08:58
evrardjpthen you're fine08:58
yifeiboth in rabbitmq08:58
yifeiok08:58
evrardjpgo on with the other playbooks08:58
yifeithanks08:58
evrardjpre-try with the same playbook08:58
evrardjpjust in case08:58
evrardjpit should show everything alright08:58
yifeithank you08:59
a0x3e8evrardjp: ok I sent the config files for compute and infra node.08:59
a0x3e8I tried using br-vxlan as external network which does not work...09:00
evrardjpthat is not a good idea a0x3e809:01
jrossera0x3e8: this might be useful https://docs.openstack.org/ocata/networking-guide/deploy-lb-selfservice.html09:01
jrosserit is up to you to set up the external networks as you wish after having done the deploy, it's not done for you09:02
evrardjpjrosser: thanks for the link that's exactly that09:03
evrardjpjrosser: can you take it from there?09:03
evrardjpa0x3e8: check on what's in your infra neutron agent container09:04
evrardjpthe nics that are defined there09:04
evrardjpif there is a nic that's not linked to your network infra or not properly configured that's your issue with your flat or your vlan network09:05
evrardjpa0x3e8: I prefer generally flat network for external network, and vxlan or vlan for tenant networks09:06
evrardjpthat's the easiest to debug09:06
jrosserthis does keep coming up and peoples attention is focussed on the compute nodes, where actually the external networks need to land at the network nodes09:06
evrardjpyes..09:07
evrardjpWhat can we do?09:07
evrardjpWe already have network nodes, that's already explained09:07
evrardjpmaybe we should clarify this09:07
evrardjpin the docs09:07
evrardjpin the examples09:07
jrosseri think the docs might currently make you thinkn the job is done when ASO completes the deploy09:07
jrosserwhich to an extent it is09:07
evrardjpwhich part?09:07
evrardjpthe network configuration of the tenant/provider networks?09:08
openstackgerritlu.li proposed openstack/openstack-ansible-tests master: Update docs config for linters  https://review.openstack.org/51721809:08
evrardjpjrosser: I've added something in the operations guide09:08
evrardjphttps://docs.openstack.org/openstack-ansible/latest/admin/index.html09:08
evrardjpthat, for me, is good enough of a story.09:08
evrardjpbut we can discuss on how to improve the docs, I'm all ears.09:09
evrardjpOn top of that I have a few ideas of my own09:09
evrardjpjrosser: for now it's kinda bare bones: https://docs.openstack.org/openstack-ansible/latest/admin/openstack-operations/network-service.html09:09
evrardjpmaybe we can improve there...09:09
*** fxpester has joined #openstack-ansible09:10
evrardjpand we have that too: https://docs.openstack.org/openstack-ansible/latest/admin/troubleshooting.html#troubleshooting-instance-connectivity-issues09:11
*** kiennt26 has joined #openstack-ansible09:13
*** sxc731 has quit IRC09:15
*** sxc731 has joined #openstack-ansible09:15
*** jafeha has joined #openstack-ansible09:16
gunixandymccr: i was trying to creat an environment with osa-ctrl, osa-compute-1, osa-compute-2, osa-cinder and osa-swift.  the swift host didn't deploy properly (was listening only on 20 and 25 and not on any ports related to object storage)09:18
jrosserevrardjp: i think that a lot of people land here https://docs.openstack.org/project-deploy-guide/openstack-ansible/newton/app-config-test.html09:18
jrosserwell, ignore "netwton" you know what i mean09:19
evrardjpyeah09:19
jrosserand that is a bit sparse on describing the scope of what that example does09:19
evrardjpjrosser: I have an idea on how to improve that, if you're willing to step up/in (I don't know what the proper term), we can work on some patch together09:20
jrossersure, no problem09:20
jafehagood morning09:21
jrosserthe other info is all out there it just needs pointing to i think09:21
*** vnogin has joined #openstack-ansible09:22
*** armaan has quit IRC09:22
*** armaan has joined #openstack-ansible09:22
gunixis 17 now the stable?09:23
gunixand not 16 ?09:23
*** gouthamr has quit IRC09:26
*** vnogin has quit IRC09:26
evrardjp16 is pike09:26
evrardjp17 is master09:27
evrardjpif that's what you're talking about09:27
evrardjpodyssey4me: andymccr is there a reason why some repos where not removed from governance while retired? Thinking about pip_lock_down and openstack-ansible-security09:27
evrardjpfor releases maybe?09:28
*** electrofelix has joined #openstack-ansible09:30
jiaopengjuhi, whether someone is developing ansible role for karbor?09:33
andymccrgunix: can i see your conf.d settings for swift? and also does the swift run fail?09:39
andymccrevrardjp: because they are still relevant for older releases, pip_lock_down may be done now09:39
hwoarangevrardjp: i think that when you move roles to unmaintained status you will also have to blacklist them from the propose bot09:39
evrardjpandymccr: let me rephrase that, we used to have a problem with the acl in old releases09:39
hwoarangevrardjp: https://github.com/openstack/openstack-ansible-tests/blob/master/gen-projects-list.sh#L4109:39
evrardjpbut that should be fixed. But now maybe we'll have additional issues09:40
hwoarangi dont know if you moved them already just wanted to point that out since i just remembered09:40
evrardjplike the jobs maybe still check what's in governance09:40
evrardjpmaybe I should talk with releases09:40
evrardjphwoarang: done09:40
evrardjphwoarang: I just need to backport on some branches09:41
hwoaranghmm i can't seem them blacklisted09:41
hwoarangor maybe the patch is not merged yet09:41
evrardjphttps://review.openstack.org/#/c/517062/1/gen-projects-list.sh09:41
*** sxc731 has quit IRC09:42
hwoarangoh the github copy is just outdated then09:42
hwoarangok great :)09:42
hwoaranggoot catch :D09:42
andymccrwhen are you flying out evrardjp09:43
evrardjpsaturday09:44
evrardjpwhy?09:44
andymccrjust wondering! dont let the jet lag get you09:44
evrardjpI have yet to prepare the slides :)09:44
evrardjpandymccr: you have a good tip?09:44
evrardjphwoarang: told me about something IIRC09:44
andymccrhaha no you will get jet lag, its like 2 long flights in a row with a layover. i think there is nothing you can do to avoid that :P09:44
evrardjpoh no it was someone else09:45
evrardjpmelatonin09:45
andymccrahh yeah ive not tried that - some ppl swear by it09:45
*** sxc731 has joined #openstack-ansible09:45
openstackgerritMerged openstack/ansible-hardening master: rhel7stig: sshd.yml: Respect the STIG sshd configuration  https://review.openstack.org/51654409:46
*** vnogin has joined #openstack-ansible09:46
evrardjpandymccr: I don't know it seems risky to play with your body.09:47
*** chas has joined #openstack-ansible09:49
*** yifei has quit IRC09:51
*** hw_wutianwei has quit IRC09:52
openstackgerritMarkos Chandras (hwoarang) proposed openstack/ansible-hardening stable/pike: rhel7stig: sshd.yml: Respect the STIG sshd configuration  https://review.openstack.org/51723309:53
openstackgerritMarkos Chandras (hwoarang) proposed openstack/ansible-hardening stable/ocata: rhel7stig: sshd.yml: Respect the STIG sshd configuration  https://review.openstack.org/51723409:54
*** drifterza has joined #openstack-ansible09:57
drifterzaHi09:57
evrardjphey drifterza!10:02
evrardjphow are you?10:02
drifterzaI'm good thanks man, you /10:02
drifterza?10:02
odyssey4meevrardjp because they were still part of releases at the time (mitaka was still being released) and the release validation checked governance10:04
evrardjpok so we check actively governance. Let's keep them that way, we can still remove them later10:04
evrardjpdrifterza: good good :)10:04
odyssey4meevrardjp does https://review.openstack.org/#/c/516929/ need to be ported back to pike too? it seems centos is failing and might be for the same reason10:05
evrardjpI can't confirm to 100%10:05
evrardjpbut yes maybe.10:05
Adri2000hello10:06
evrardjpor you can actively recheck.10:06
evrardjp:p10:06
evrardjplet me propose it and we'll see10:06
evrardjpdarn it doesn't cleanly apply.10:06
evrardjpOk I will have a look later today.10:06
* evrardjp writes one more thing on his todo list 10:06
Adri2000has anyone already thought about an elegant way to remove the oldest venvs (in openstack/venvs) in the various hosts and containers? and like keep the N most recent ones10:07
evrardjpdoes it takes a large room?10:07
evrardjpI am pretty sure we can add some instruction to remove it using ansible ad hoc command that's just a venv anyway :p10:08
Adri2000evrardjp: each might take a few hundreds MB, so with the number of containers on some hosts, and when your deployment starts getting a bit old, yes it does take a lot of disk space :)10:09
odyssey4meevrardjp I think https://review.openstack.org/517062 might need to be ported back to all current branches, otherwise proposal bot will keep trying with those repositories.10:10
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Update os_nova role SHA for qemu package fix  https://review.openstack.org/51723810:11
Adri2000evrardjp: how would such a command look like? I found there is a fact containing the current version, so it might be easy to remove all directories but that one. not sure how to do in order to keep the most recent N versions though :/ is it even useful to do that? (can an older venv be rebuilt? in case I want to "roll back")10:11
*** jiaopengju has quit IRC10:12
SmearedBeardevrardjp on this page you posted (https://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/app-config-test.html#host-network-configuration), in the openstack_user_config.yml there are two blocks for br-vlan, one flat and with VLAN - but in the networking config, it's just attached to eth0.. are both used?10:12
evrardjpodyssey4me:  I know that part. I already have that on my list10:14
evrardjp:)10:14
evrardjpAdri2000: there is no roll back, except if you roll back your db and everything10:15
evrardjpSmearedBeard: you have to select what you need :)10:15
evrardjpAdri2000: it's up to the administrator to know what to do. He probably knows what to delete.10:15
evrardjpthen you can remove only that folder10:16
SmearedBeardevrardjp OK so that makes sense.. so if br-vlan is attached to eth0.3 then :type:vlan range 3:3' would be want I need?10:16
evrardjpSmearedBeard: nope I'd say if you just want that, you should use a flat network instead using eth0.310:17
evrardjpif eth0 is used for infra, you should probably have a separate nic10:17
SmearedBeardOK so range, is not then VLAN that interfaces used but the range Neutron can used?10:17
evrardjpSmearedBeard: yes.10:17
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-tests stable/pike: Remove new retired projects from update bot  https://review.openstack.org/51724010:18
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-tests stable/ocata: Remove new retired projects from update bot  https://review.openstack.org/51724110:18
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-tests stable/newton: Remove new retired projects from update bot  https://review.openstack.org/51724210:18
SmearedBeardright OK, I think Im getting it.. and br-vlan is used to create networks either private 'per tenant' or external, or shared networks right?10:20
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_swift stable/pike: Temporary make CentOS non voting  https://review.openstack.org/51724310:20
evrardjpyeah, basically the networks that are defined there are for neutron configuration too. You can use what's defined there for creating your networks afterwards10:21
evrardjpso external networks for example10:21
evrardjpor tenant networks10:21
evrardjpin your case you want just one vlan "content", so you should probably have a flat thing10:22
SmearedBeard'want' as far as I understand things now, might be what I actually want...10:23
SmearedBeardso br-vxlan is optional, but you could use this to separate external network, and tenant networks?10:23
SmearedBeardwhich for me, the segregration might be beneficial, rather than the number of potential networks10:26
evrardjpSmearedBeard: use vxlan and/or vlan for tenant networks10:28
evrardjpit's simple and it works10:28
evrardjpuse your flat thingy for the external network10:28
evrardjp:)10:29
evrardjpsimple10:29
evrardjpodyssey4me: I jinxed the other swift patch by saying "it will pass gates, I feel it".10:41
evrardjp:(10:41
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_swift stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51381310:42
evrardjpodyssey4me: could you therefore vote on https://review.openstack.org/#/c/513813/4 ?10:42
openstackgerritDimitrios Markou proposed openstack/openstack-ansible-os_neutron master: [WIP] Add OvS-NSH support  https://review.openstack.org/51725910:46
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Zuul: add file extension to playbook path  https://review.openstack.org/51609810:47
odyssey4meevrardjp whitespace10:49
*** mardim has joined #openstack-ansible10:50
odyssey4meevrardjp you fix or me fix ?10:50
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_swift stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51381310:54
evrardjpodyssey4me: this gerrit online editor should show whitespaces!10:55
evrardjpdone10:55
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible master: Vagrantfile: Remove openSUSE Leap 42.2  https://review.openstack.org/51726811:02
*** David_Orange has joined #openstack-ansible11:03
openstackgerritDimitrios Markou proposed openstack/openstack-ansible master: Add openvswitch_nsh group to inventory  https://review.openstack.org/51726911:03
openstackgerritDimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Add OvS-NSH support  https://review.openstack.org/51725911:05
openstackgerritDimitrios Markou proposed openstack/openstack-ansible master: Add openvswitch_nsh group to inventory  https://review.openstack.org/51726911:12
hwoarangodyssey4me: evrardjp: have you seen any other opensuse failures? i can't find any. maybe my last patch fixed it ....11:14
*** smatzek has joined #openstack-ansible11:15
gunixandymccr: i am trying to run an aio now and just not use this environment. whatever i failed. :D if you want i can boot the osa-swift-1 vm and show you conf.d. the playbook is successful.11:16
mardimhey guys I have a patch that depends to another patch but zull gives me -1 and this message 'This change depends on a change that failed to merge' do you know what is going wrong?11:17
andymccrgunix: if you can get the conf that'd be good - it should fail if it isnt successfully setup -11:17
andymccrif you re-run the swift playbook does anything happen?11:17
gunixandymccr: yea, it's successful again :)11:18
andymccrgunix: but the services arent running and you cant use the swift cli?11:18
andymccrgunix: can you give me the output of a os-swift-install.yml run?11:18
hwoarangmardim: you probably need to rebase the one that failed to merge11:18
odyssey4mehwoarang I haven't seen any - and the suse builds appear faster than the centos builds now11:18
odyssey4mehwoarang I ported those changes back to pike too11:18
mardimhwoarang, ok let me try11:19
odyssey4meand that's also helped get things moving again11:19
openstackgerritDimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Add OvS-NSH support  https://review.openstack.org/51725911:19
gunixandymccr: swift cli is on utility container. first there was a problem with swift-proxy container on ctrl. i destroyed the swift-proxy container and rebuild it, and it started to listen on 8080. but after that it "swift list" because the osa-swift-1 node failedf11:20
gunixbecause osa-swift-1 was not listening on a port ... if i remember correctly it was 600211:20
hwoarangodyssey4me: ok that's good11:20
gunixandymccr: right now i am thinking about killing this entire setup (made of 5 VMs) and just run osa-aio on one node so i have something at home ...11:20
andymccrgunix: it sounds like none of the services are starting, 6002 is the account service - so the storage services should have port 6000, 6001 and 6002 all listening11:21
gunixandymccr: i am also thinking about building ceph for prod so that means i won't use swift any more, i'll just use ceph for glance11:21
gunixandymccr: osa-swift-1 had only 22 and 25 listening :)11:21
*** David_Orange has quit IRC11:22
andymccrgunix: yeah it sounds like something is wrong with either the run or hte inventory/conf setup11:22
openstackgerritDimitrios Markou proposed openstack/openstack-ansible master: Add openvswitch_nsh group to inventory  https://review.openstack.org/51726911:22
gunixandymccr: i can show you the openstack_user_config if you want11:22
andymccrgunix: that'd be useful, hopefully we can figure it out :) it should work pretty reliably so im imagining something initial isnt setup11:22
mardimhwoarang, I think I did that but no luck https://review.openstack.org/#/c/517259/ https://review.openstack.org/#/c/517269/ those are the patches11:23
odyssey4meevrardjp I see in that newton integrated patch the functional tests did not run... I've seen this in another repo too - I'll raise it with infra11:24
*** David_Orange has joined #openstack-ansible11:24
gunixandymccr: https://bpaste.net/show/dcc397dc37fe11:24
*** armaan has quit IRC11:26
*** armaan has joined #openstack-ansible11:27
*** huxinhui has quit IRC11:31
andymccrgunix: ok a few things - firstly are the devices format/mounted at /srv/node/vdb and /srv/node/vdc (https://docs.openstack.org/openstack-ansible-os_swift/latest/configure-swift-devices.html)11:32
andymccrgunix: also a couple of those settings arent required - e.g. storage_ip on the swift_host11:33
andymccrand the limit_container_types var too11:33
andymccri would remove that11:33
andymccrgunix: the next thing i'd do is look at the logs on the hosts, if the run is succeeding but the services arent running they must have tried to start and failed11:34
andymccryou could check systemctl debug logs, and try to manually start the swift-object-server for example, or swift-account-server (which is the one that should've been listening on port 6002)11:34
openstackgerritMerged openstack/openstack-ansible-os_swift master: Add OpenStack-Ansible metadata  https://review.openstack.org/51720611:35
*** David_Orange has quit IRC11:37
gunixandymccr: the devices are mounting as they should be. if the storage_ip is critical, that must be the reason of the fail. it should be 172.29.244.4111:37
*** armaan has quit IRC11:39
*** armaan has joined #openstack-ansible11:39
andymccrgunix: so as long as that ip is on br-storage you don't need to specify storage_ip, it will figure it out for you11:40
*** PaulusNL has quit IRC11:44
gunixandymccr: yea, it's on br-storage :)11:53
spotzevrardjp: Might want to send that email to the ops list to get more ops folks at least to the forum session. Anyaways last ride before I head to the airport this afternoon. Back in a bit11:53
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tacker stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51728411:55
mhaydenmorning11:56
andymccrwell hello there mhayden11:58
mhaydenohai11:58
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tacker stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51630611:59
*** shardy is now known as shardy_lunch12:01
*** stuartgr has joined #openstack-ansible12:02
*** armaan has quit IRC12:05
gunixandymccr: if my aio runs without problem, i will just use that for tests. i got it 20GB ram, 6 cores and 115GB storage with 5gb swap12:09
andymccrgunix: sounds good. if you do want to get it working on your other deploy id recommend looking at why the services arent starting as a first step :)12:11
gunixandymccr: yea, problem was i am kind of a noob on swift and i didn't deploy it ever without OSA yet ... the other services i can troubleshoot, but not this one.12:12
evrardjp[m]it's already sent to ops...12:12
openstackgerritDimitrios Markou proposed openstack/openstack-ansible master: Add openvswitch_nsh group to inventory  https://review.openstack.org/51726912:12
evrardjp[m]or it should be at least12:13
gunixandymccr: odyssey4me: cloudnull: you guys really did most of the development for osa? you have on github like 13k lines of code together12:13
andymccrgunix: that's ok - it's not that complicated, it does have a lot of services though - but im imagining you will see why it failed in the logs :)12:13
odyssey4megunix ;)12:13
gunixandymccr: yea. how do you find ceph compared to swift, for object storage? for glance i mean, and maybe giving tokens to specific web apps for integration with app layer of the customer?12:13
andymccrgunix: ceph is pretty cool because you can use block storage too for like cinder/instance integration12:14
openstackgerritDimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Add OvS-NSH support  https://review.openstack.org/51725912:14
andymccrit works ok with glance so i dont think thats an issue12:14
gunixandymccr: my thinking exactly. if i use ceph, i get HA block&object storage !12:17
gunixandymccr: only problem is, i am a noob at ceph too. i should start my testing env for ceph12:17
andymccrgunix: gotta start somewhere :)12:17
gunixyea12:18
evrardjp[m]wow thats a different set of skills12:18
gunixevrardjp[m]: what?12:18
evrardjp[m]scaling storage systems i mean12:18
gunixevrardjp[m]: that's an interesting remark. do you have like one department for ceph and another one for core services like nova/neutron/glance/keystone? and somehow people know how to merge the two together?12:19
xdfilHello, how can I get osa to /not/ configure the IP on my vxlan bridge?12:19
evrardjp[m]it's good to have in one's skillset12:19
xdfiloh wait ip_from_q or whatever12:19
gunixxdfil: each node requires to have an IP in the VXLAN network for the service to work. it's part of how vxlan works. it encapsulates layer 2 frames within layer 3 packages12:20
xdfilThe problem I have is I am trying to do OVS12:20
xdfiland I need to put the IP on the OVS bridge internal interface12:21
xdfiland remove it from the veth12:21
xdfilat least, thats what I think I need to be doing right now....12:21
evrardjp[m]gunix in my previous company storage was indeed handled by different ppl than compute12:21
gunixi am not sure OVS is supported by osa12:21
xdfilgunix: I'm working on it12:21
Bico_Finoxdfil https://docs.openstack.org/openstack-ansible-os_neutron/latest/app-openvswitch.html12:21
xdfillol jk so many others have put effort into OVS before me12:22
gunixevrardjp[m]: all our storage is done by emc... and ... it's bad ...12:22
*** armaan has joined #openstack-ansible12:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_almanach stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51708312:22
gunixxdfil: did you go through this: https://docs.openstack.org/openstack-ansible-os_neutron/latest/app-openvswitch.html12:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_almanach master: Updated from OpenStack Ansible Tests  https://review.openstack.org/51469212:22
gunix?12:22
xdfilnumerous times12:22
xdfilI intend to fix those docs soon12:23
xdfilI found all the logic bombs12:23
Bico_FinoWhat issues are you facing xdfil ?12:23
Bico_FinoI'm trying to deploy OSA with ovs right now. :D12:23
xdfilI just need to remove the IP... I already found my answer hold on :)12:23
jafehaxdfil: i hope to finalize my first deployment with ovs today, but i expect similar issues. could you share your fixes / solutions?12:25
Bico_FinoI got some issues on setup-hosts.yml with neutron_agent containers that don't start.12:25
Bico_Finowould be cool xdfil to share your fixes.12:25
xdfiljafeha: yes for sure, as soon as I iron out the last details12:26
jafehaxdfil: cool, thank you12:26
gunixxdfil: why is ovs important for your build? which advantages do you have by using ovs?12:26
xdfilBico_Fino:  The containers wont start at all?12:26
openstackgerritMerged openstack/openstack-ansible-tests master: Update docs config for linters  https://review.openstack.org/51721812:26
evrardjp[m]jafeha xdfil, maybe worth sharing on etherpad, to list the work to be done ?12:26
Bico_Finoxdfil nope. Got some veth lxc issues12:27
jafehaevrardjp[m]: definitely12:27
xdfilBico_Fino:  sometimes that container restart / start tasks take a long long time are you sure its failing?12:27
xdfilevrardjp[m]: yeah you read my mind12:27
Bico_Finoxdfil I think I fixed it.  Container "infra1_neutron_agents_container-9fbda74e" is in "RUNNING" state12:27
jafehawe're also switching to ceph-ansible deployed ceph, so we're squashing numerous bugs in our deployment ;)12:27
evrardjp[m]great.12:28
xdfilevrardjp[m] Bico_Fino  jafeha : I just want to make sure I am doing it right before I go and derail others12:28
evrardjp[m]jafeha: that's what we are using in osa... great to hear!12:28
Bico_Finoxdfil We can share the configs12:28
xdfilhttps://etherpad.openstack.org/p/OSA-OVS-throwdown12:29
xdfilI'll post my fixes there once I verify them12:29
Bico_Finoxdfil nope. Failed.12:30
jafehaxdfil: thank you :)12:30
*** gkadam has quit IRC12:30
xdfilBico_Fino:  that's got to be some kind of missing pre-req on the LXC host12:30
Bico_Finoxdfil posted the logs there.12:31
xdfilBico_Fino:  I've been using OSA for a few months and I've never had that exact problem12:31
Bico_Finoxdfil the strange is that only with neutron_agent containers.12:32
openstackgerritMerged openstack/openstack-ansible master: Update docs config for linters  https://review.openstack.org/51720712:32
openstackgerritMerged openstack/openstack-ansible stable/newton: Update os_nova role SHA for qemu package fix  https://review.openstack.org/51723812:32
*** udesale has quit IRC12:33
*** Miouge has joined #openstack-ansible12:33
xdfilBico_Fino:  hmm then I would look at your openstack_user_config.yml networks12:33
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_almanach master: Updated from OpenStack Ansible Tests  https://review.openstack.org/51469212:33
xdfilmaybe you have some issue with_groups12:33
xdfildid you mess with the env.d files at all?12:34
*** smatzek has quit IRC12:34
Bico_Finoxdfil nope.12:34
Bico_Finoxdfil posted there the networks that I have configured12:35
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca master: Updated from OpenStack Ansible Tests  https://review.openstack.org/51469512:35
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca-agent master: Updated from OpenStack Ansible Tests  https://review.openstack.org/51469612:36
openstackgerritMerged openstack/openstack-ansible-lxc_hosts master: Use handlers to restart services and move dnsmasq to a unit file  https://review.openstack.org/51682212:36
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca-ui master: Updated from OpenStack Ansible Tests  https://review.openstack.org/51469712:36
*** dave-mccowan has joined #openstack-ansible12:36
Bico_Finograbbing coffee.12:36
xdfilBico_Fino:  brctl show    on your container host?12:38
*** thorst has joined #openstack-ansible12:41
*** a0x3e8 has quit IRC12:42
xdfillxc-ls -f12:43
xdfil^^ that too12:43
xdfilI think maybe you have zombie containers... idk12:43
*** wlmbasson has joined #openstack-ansible12:45
wlmbassonDoes anyone know how to use an external DHCP server with provider networks? I would like to integrate my AIO build with our existing DNS/DHCP12:46
jafehaevrardjp[m]: yeah, we're using the osa ceph-ansible integration now. we had built it on our own in earlier deployments because we were not sure how to do it exactly ;)12:46
Bico_Finoxdfil posted brctl show too12:47
xdfilBico_Fino:  the br-vxlan bridge doesn't exist12:48
xdfiland that relates to the agents containers12:49
xdfilthey are the only ones that get an interface on that bridge12:49
*** markvoelker has joined #openstack-ansible12:49
xdfiltry: lxc-system-manage system-rebuild12:49
xdfili think that's the command :)12:49
xdfilsee if it makes a br-vxlan12:50
xdfilor not wait12:50
*** markvoelker_ has joined #openstack-ansible12:50
xdfilwhat am i saying12:50
Bico_Finoxdfil inside /etc/network/interfaces br-vxlan is misconfigured. :(12:50
xdfilthe OS makes that bridge12:50
Bico_Finoxdfil yeah12:50
Bico_Finolet me fix that12:50
*** jiaopengju has joined #openstack-ansible12:53
Bico_FinoDo I need an IP on br-vxlan xdfil ?12:53
*** woodard has joined #openstack-ansible12:53
*** markvoelker has quit IRC12:53
*** smatzek has joined #openstack-ansible12:54
MiougeI can’t find documentation about how to setup OSA with Ceph RadosGW (instead of Swift). Anyone who can point me in the right direction?12:56
*** weezS has joined #openstack-ansible12:56
odyssey4mehmm, evrardjp cloudnull it would appears that the recent merges to lxc_hosts have broken the integrated build: http://logs.openstack.org/98/516098/2/check/openstack-ansible-deploy-aio-ubuntu-xenial/b1fb879/job-output.txt.gz#_2017-11-02_11_03_04_30350412:58
openstackgerritMerged openstack/openstack-ansible-os_swift stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51381312:58
*** smatzek has quit IRC12:59
evrardjpodyssey4me: yes I have seen12:59
evrardjpI still wonder how, because sha bump didn't happen12:59
evrardjpoh you mean master?13:00
evrardjpyeah13:00
evrardjpI need to fix that real quick13:00
evrardjpit's something done yesterday i think13:00
odyssey4mewell, cloudnull should be around shortly and should be able to fix it - unless you specifically need it fixed right now13:01
evrardjpfinishing  my dessert first13:01
evrardjpI'm still at food stage right now. You know me.13:01
odyssey4mehaha13:01
odyssey4mesecond breakfast13:01
evrardjpI had only one. So it's 2 lunches instead13:02
evrardjp:)13:02
*** smatzek has joined #openstack-ansible13:03
evrardjpI have no McCoy crisps anymore, that makes me really sad too.13:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tacker stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51630613:06
*** smatzek has quit IRC13:07
odyssey4meevrardjp actually I think that issue was resolved with https://review.openstack.org/51682213:08
xdfilWell, removing the IP from the neutron_agents br-vxlan seems to break other peices13:13
xdfilThe OVS "Manager" config seems to be dependant on the br-vxlan IP13:14
xdfilso if you remove it that breaks13:14
xdfilWe just need a little bit of flexibility with br-vxlan and I'm pretty sure it will work13:15
Bico_Finoxdfil running setup-hosts now13:16
evrardjpodyssey4me: let me do a quick recheck then13:18
evrardjpbut I have seen that in the past13:18
evrardjpin zuul only13:18
evrardjpwhen doing some include when with a {{ }}13:19
Bico_Finoxdfil bingo. worked!13:19
evrardjpcould someone take care of the bug triage next week?13:22
xdfil(crickets)13:22
*** smatzek has joined #openstack-ansible13:23
*** smatzek has quit IRC13:24
*** shardy_lunch is now known as shardy13:25
*** sxc731 has quit IRC13:28
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_almanach master: Updated from OpenStack Ansible Tests  https://review.openstack.org/51469213:30
*** thorst has quit IRC13:30
mhaydenevrardjp: enjoy the trip to sydney ;)13:32
mhaydenyou too, cloudnull13:32
openstackgerritMerged openstack/openstack-ansible-tests stable/ocata: Remove new retired projects from update bot  https://review.openstack.org/51724113:33
openstackgerritMerged openstack/openstack-ansible-tests stable/newton: Remove new retired projects from update bot  https://review.openstack.org/51724213:33
openstackgerritMerged openstack/openstack-ansible-tests stable/pike: Remove new retired projects from update bot  https://review.openstack.org/51724013:33
*** jwitko has joined #openstack-ansible13:33
*** lbragstad has joined #openstack-ansible13:34
odyssey4meoh mhayden don't bother rebasing those proposal bot changes on top of the zuul job changes... proposal bot will reset them anyway13:35
mhaydenodyssey4me: ah, i was starting to notice it un-doing my work :|13:35
odyssey4mewe either need to drop our patch and move the changes into the proposal bot changes, or we need to focus on getting our patches merged13:35
odyssey4meevrardjp thoughts - should we just move our job changes into that patch?13:36
mhaydeni keep scratching my head on those that don't seem to run functional tests13:36
mhaydenthe project.yaml looks reasonable13:36
odyssey4memhayden yeah, I've raised it in infra - it's been spotted in the wild, but not consistently13:37
mhaydenthanks for that13:37
odyssey4mewe have one consistent one though, so hopefully we can help debug it13:37
odyssey4meI'm going to convert my & evrardjp's patches for jobs into the proposal bot proposals where they make sense to cut some of the noise13:38
*** flaviosr has quit IRC13:38
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_almanach stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51708313:39
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_aodh stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51628513:39
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51629913:40
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_nova stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51630113:40
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_sahara stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51630413:40
*** sxc731 has joined #openstack-ansible13:40
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_swift stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51630513:40
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_tacker stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51731013:40
openstackgerritMajor Hayden proposed openstack/ansible-hardening master: [Docs] Specify STIG version in branches  https://review.openstack.org/51731113:41
evrardjpmhayden: thanks13:41
*** markvoel_ has joined #openstack-ansible13:41
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_aodh stable/ocata: Updated from OpenStack Ansible Tests  https://review.openstack.org/51474813:41
evrardjpodyssey4me: experience tell me that we should ignore proposal bot things, get our stuff merged, and be done with it13:41
*** flaviosr has joined #openstack-ansible13:42
*** markvoelker_ has quit IRC13:42
evrardjpbut fine for me too to update the proposal bot things13:42
evrardjpas long as we know what we are doing13:42
odyssey4meevrardjp yeah, let me take a closer look13:42
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_ceilometer stable/newton: Updated from OpenStack Ansible Tests  https://review.openstack.org/51625913:43
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_gnocchi stable/newton: Updated from OpenStack Ansible Tests  https://review.openstack.org/51626013:43
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_sahara stable/newton: Updated from OpenStack Ansible Tests  https://review.openstack.org/51626213:43
odyssey4meany voters for https://review.openstack.org/516306 to get that one out of the way?13:46
*** markvoel_ has quit IRC13:47
odyssey4meevrardjp you're right - the proposal bot uses the topic to find its previous patch, so if we change it then it'll just make another patch13:47
odyssey4meso better to just use our patches and get them merged13:48
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-plugins stable/newton: Make possible to use ansible 2.4  https://review.openstack.org/51731413:54
evrardjpshitballz.13:54
odyssey4mehahaha13:54
odyssey4methat's a stretch13:54
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-plugins master: Make possible to use ansible 2.4  https://review.openstack.org/51731513:54
evrardjpdarn. It's wrong.13:55
evrardjpthat is why you should always commit from your environment, not from a different host!13:55
odyssey4meor just verify your checkout before you start working on things ;)13:56
evrardjpwell I have no prompt like I do on my dev machine. Darn.13:56
evrardjpI am very sorry13:57
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-plugins master: Make possible to use ansible 2.4  https://review.openstack.org/51731513:58
*** smatzek has joined #openstack-ansible13:59
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-plugins master: Make possible to use ansible 2.4  https://review.openstack.org/51731513:59
evrardjpjmccrory: ^ this way we can continue with 2.4 without caring about the vars plugins13:59
cloudnullmornings14:00
*** smatzek_ has joined #openstack-ansible14:02
*** smatzek has quit IRC14:03
*** sudhamsd has joined #openstack-ansible14:05
openstackgerritDimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Add OvS-NSH support  https://review.openstack.org/51725914:06
*** esberglu has joined #openstack-ansible14:07
*** galstrom_zzz is now known as galstrom14:08
*** sudhamsd has quit IRC14:10
*** mardim has quit IRC14:10
odyssey4mecloudnull the functional test in https://review.openstack.org/513999 is failing - any chance you could take a look into it and update the patch to resolve it?14:10
gunixguys, regarding osa aio: how is the br-flat network connected to the internet? i found nothing in iptables and nothing on the host ... i found it has two IPs, 248.1 and 248.100, and there is not in the iface config that .1 is for connectivity, but i swear i can't see at linux level how this is connected to ens3 which is the physical device14:11
cloudnullsure thing14:11
cloudnull^ odyssey4me14:11
odyssey4methanks cloudnull - apologies for handing you ye olde issue14:11
cloudnullgunix: on the AIO none of the bridges are connected to the physical NICs. its all IPTables that makes it happen .14:12
cloudnullall of the bridges should have a bridge-port of none14:12
evrardjpcloudnull: I know you were interested by the EOL of N, nova's EOL not gonna happen before around the 20 november.14:13
*** thorst has joined #openstack-ansible14:13
evrardjpso this way we know.14:13
cloudnullcool14:13
gunixcloudnull: they do have a bridge port of none. so iptables connects the networks? because i did iptables -t nat -L and didn't find it14:13
gunixcloudnull: where there is a masquarade ALL, is that it? i'll paste config, wait14:14
*** thorst_ has joined #openstack-ansible14:14
gunixhttps://bpaste.net/show/4b120b059de114:14
cloudnullYup14:14
cloudnulland then we checksum all of the traffic too14:14
cloudnullthat way services feel like the traffic is passing through a real nic14:15
*** agrebennikov has joined #openstack-ansible14:16
cloudnullfor the AIO we cant control any of the deployment locations and dont want to break networking by making assumptions that the bridges have to be connected to the gateway interface.14:16
cloudnullso we IPTables our way to success.14:16
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create stable/pike: Fix container mac generation and remove extra tasks  https://review.openstack.org/51634414:17
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_swift stable/pike: Revert "Don't run sync in upgrades"  https://review.openstack.org/51633314:17
*** vnogin has quit IRC14:17
*** thorst has quit IRC14:18
*** vnogin has joined #openstack-ansible14:18
*** vnogin has quit IRC14:19
*** vnogin has joined #openstack-ansible14:20
cloudnullodyssey4me: interesting that its only failing on trusty14:20
odyssey4mecloudnull yeah, it's probably a service not starting properly or something - I haven't had much time to look into it14:21
cloudnullI've got a test vm spun up now, hopefully  more soon.14:21
*** drifterza has quit IRC14:22
odyssey4meta14:22
*** armaan has quit IRC14:23
*** mardim has joined #openstack-ansible14:24
*** vnogin has quit IRC14:25
evrardjpcloudnull: odyssey4me thanks on that!14:26
*** andressanchez has joined #openstack-ansible14:26
*** vnogin has joined #openstack-ansible14:29
*** sxc731 has quit IRC14:31
cloudnullqq- I'd like to know if folks are open to backporting the lxc_{hosts,container_create} storage bits to pike?14:42
cloudnulllogan-: evrardjp: mgariepy: ^14:42
cloudnullidea being that we would enable the option to deploy an infra into zfs, machinectl, btrfs, etc within our stable release.14:43
*** David_Orange has joined #openstack-ansible14:43
*** jiaopengju has quit IRC14:46
*** armaan has joined #openstack-ansible14:48
mgariepyyes i would like very much to have zfs support on pike,14:48
evrardjpI'd like to abstain from this vote. I have not enough view of the risk/impact.14:50
evrardjpand on top of that it was failing yesterday on master, so let's really think about it... :)14:51
evrardjpI'd prefer waiting for next release on all branches too. Because we still have to recover.14:52
evrardjpbut after that, I'd say it's a community decision, and you have already 2 members of the community okay for it :)14:53
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts stable/pike: Combined backport for LXC container create storage options  https://review.openstack.org/51733814:53
cloudnull^ folks can vote :D14:53
*** qcrivera has joined #openstack-ansible14:54
evrardjpthat works14:58
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [TEST] Update Ansible to 2.4.2.0-0.1.beta1  https://review.openstack.org/50181414:59
openstackgerritJimmy McCrory proposed openstack/openstack-ansible master: [TEST] Update Ansible to 2.4.2.0-0.1.beta1  https://review.openstack.org/50181415:00
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_hosts stable/pike: Combined backport to fix issues and enhance efficiency  https://review.openstack.org/51734115:01
Neptu_evrardjp: hej, Ive been testing the gate deployment and i get funny certificate messages from monasca15:01
Neptu_https://pastebin.com/KtFBmV9315:02
Neptu_im not an ace on pki but i guess is because the certificates are self signed15:03
Neptu_you do not have a certbot or something to generate certificates15:04
evrardjpNeptu_: you can do whatever you want with your certificates. We'll use them.15:05
Neptu_evrardjp: im not pki expert but maybe is something to be added to the project... seems monasca python dies when the sertificates are insecure... and will be nice to have actually EFF certs so adding suport for cerbot is a +15:07
Neptu_i will look into that if i have time15:07
evrardjpsure thing15:08
evrardjpyou can use the external_lb_vip_address as a variable for that15:08
Neptu_https://www.eff.org/15:08
evrardjpthat should hold the external domain name, or at least openstack's fqdn15:08
Neptu_yep15:08
Neptu_we will see I just installed as the manual said a monasca system on a k8s cluster next to the gate openstack15:09
Neptu_trying to connect the beast15:09
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create stable/pike: Combined backport to support LXC container storage options  https://review.openstack.org/51734515:09
*** qcrivera has quit IRC15:10
openstackgerritMerged openstack/openstack-ansible-os_nova stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51659615:10
Neptu_been reading the developer document today ;)15:10
odyssey4mecloudnull can you please also port back the tests to make sure that they're exercised on pike15:11
cloudnull++15:12
Neptu_evrardjp: just for the sake of this tests is it possible to dissable keystone on https and run it as http only?15:14
*** Brew has joined #openstack-ansible15:16
*** chyka has joined #openstack-ansible15:17
mhaydenxgerman_: have you reviewed this one yet ? https://review.openstack.org/#/c/515698/15:22
*** gkadam has joined #openstack-ansible15:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_octavia stable/pike: Add zuul v3 support/jobs  https://review.openstack.org/51734815:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_almanach master: Initial OSA zuul v3 role jobs  https://review.openstack.org/51272915:30
*** hachi__ has quit IRC15:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_octavia stable/pike: Enable V2 Octavia API (Experimental)  https://review.openstack.org/51569815:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_octavia stable/pike: Updated from OpenStack Ansible Tests  https://review.openstack.org/51630215:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_octavia master: Fix for keystone_authtoken key names in octavia.conf  https://review.openstack.org/45733115:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_octavia master: add segmentation id option to octavia mgmt network creation task  https://review.openstack.org/51503515:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_octavia master: Add allocation pool for octavia mgmt subnet  https://review.openstack.org/51537815:33
mhaydentrying to see if we can get some octavia tests to vote15:33
*** KMT has joined #openstack-ansible15:37
xgerman_mhayden I guess we only have zuul in the master branch15:38
*** KMT has quit IRC15:38
odyssey4mexgerman_ nope, you should already have pike jobs too https://review.openstack.org/51659815:40
openstackgerritMerged openstack/openstack-ansible-plugins master: Make possible to use ansible 2.4  https://review.openstack.org/51731515:40
mhaydenxgerman_: i rebased those patches in the hopes of getting some zuul voting going15:41
xgerman_ok, so let’s see if that happens if not I will try to figure out what’s going on15:41
armaanfolks, anyone running Magnum with Pike here?15:41
odyssey4memhayden you should never need to rebase unless you have two patches in review that depend on each other15:42
odyssey4mezuul rebases before it tests15:42
odyssey4meevrardjp about the comment in https://review.openstack.org/517338 - this won't affect the current release unless there's a sha bump in the integrated repo15:46
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_gnocchi stable/newton: Initial OSA zuul v3 role jobs  https://review.openstack.org/51400515:46
evrardjpodyssey4me: yes indeed15:47
evrardjpso basically I am allowing myself to have more room to breathe for the next two releases15:48
odyssey4meah, I see15:48
odyssey4meokie dokey15:48
odyssey4mefair enough, given all the ruckus that's been caused by the zuul switchover15:49
evrardjpputting the head of the water15:49
evrardjpout of*15:49
*** weezS has quit IRC15:50
*** chyka_ has joined #openstack-ansible15:51
*** chyka has quit IRC15:54
*** weezS has joined #openstack-ansible15:56
mhaydenhey so horizon's newton branch is missing15:56
mhaydenis that normal?15:56
idleminddisk space recommendation for the lxc containers on a shared-infra host?15:56
robcresswellmhayden: Missing?15:56
mhaydenhttps://github.com/openstack/horizon/tree/stable/newton15:56
mhaydenunless i'm totally missing something15:56
odyssey4memhayden the github sync from git.o.o is broken15:56
robcresswellnewton-eol ?15:56
odyssey4meso use git.o.o as your reliable source15:56
robcresswellhttps://github.com/openstack/horizon/tree/newton-eol15:57
odyssey4meoh, and there's that15:57
robcresswellstable-newton is gone from everywhere15:57
robcresswellOr, it should be. idk if requirements has branched yet.15:57
mhaydenoh, i see, that caught me off guard15:57
mhaydeni see the newton-eol tag15:57
*** Smeared_Beard has joined #openstack-ansible15:58
*** shardy has quit IRC15:59
*** SmearedBeard has quit IRC16:00
robcresswellmhayden: Last I checked, it was only really nova and requirements that weren't tagged eol16:00
*** a0x3e8 has joined #openstack-ansible16:00
robcresswellI havent been following the official status though16:00
mhaydeni haven't kept up with this very well lately ;)16:00
errrif there is an ansible module with a module.log() statement how do I run my osa playbook so that the log message will show?16:01
errrI tried adding -vvv and that isnt doing the job16:01
*** Oku_OS is now known as Oku_OS-away16:06
cloudnullerrr: are you writing a custom module ?16:10
cloudnullhttps://github.com/openstack/openstack-ansible-plugins/blob/master/connection/ssh.py#L12816:10
errrno Im adding logging to ones yall made because Im getting an annoying failure and I cant figure out why16:10
cloudnullso you should be able to import display16:11
cloudnullthe v method will output information16:11
errrso the ansible folks said I need to be doing module.log()16:11
errralso as a side note i find it highly annoying standard python logging doesnt work from ansible modules. :D16:12
cloudnullit does16:12
cloudnullhttps://github.com/openstack/openstack-ansible-plugins/blob/master/filter/osa-filters.py#L9316:12
cloudnullyou just have to access the log handler16:12
errrare you sure? https://github.com/ansible/proposals/issues/3316:12
cloudnullyes16:13
cloudnullhttps://github.com/openstack/openstack-ansible-plugins/blob/master/filter/osa-filters.py#L92-L12016:13
cloudnullI'm 100% sure16:13
errrok Ill try adding that. I am doing it *slightly* different than you are in that file and its not working so let me change to what you have here16:14
odyssey4melogan- hmm, https://github.com/openstack/openstack-ansible-galera_client/commit/65350268347c58d31d2c82ccd7485f29d83f6a3a and https://github.com/openstack/openstack-ansible-galera_server/commit/0b4c0f4fd7b83659656ea76b11101ae090e5eeab appear to be causing the py_pkgs lookup to fail as it doesn't interpret the jinja16:16
evrardjprobcresswell: nova not tagged16:16
evrardjparound 20/11 iirc16:17
errractually what I was doing *was* working. I didnt think to look in the container I was looking on the deploy host. I can be such an idiot sometimes16:18
logan-odyssey4me: :(16:18
logan-odyssey4me: what if you try defining galera_client_major_version on the repo group16:19
logan-i think the repo_build resolves the jinja if the var exists16:19
logan-we have a similar situation in the nova role with barbican16:19
TahvokSo I've tried bringing up aio instance16:20
odyssey4melogan- hmm, this is because I'm using the lookup in a different way16:20
TahvokDid not make any custom confiuguration, and was using HEAD16:20
TahvokThis is what I got:16:20
Tahvokhttps://gist.github.com/Tahvok/7a7b8b3e22c636cb2f700f011bcb3cb816:20
TahvokAny suggestions?16:20
*** dave-mccowan has quit IRC16:22
odyssey4melogan- it's weird, because it is in defaults so it should be found16:23
cloudnullTahvok: HEAD from when?16:23
Tahvok2 hours ago?16:24
cloudnullcan you look to see if the lxc-container-create role has this commit16:24
cloudnullhttps://github.com/openstack/openstack-ansible-lxc_container_create/commit/82c1dfa68fcc0fac58f8df7d09b8de955c8f8bbd#diff-4f5b08a7d7f80042ede9d9fff47cc54e16:24
Tahvoktried git pulling16:24
TahvokThe only change was this file: releasenotes/source/conf.py16:24
Tahvokcloudnull: yes16:25
TahvokI have that commit16:25
cloudnulldid the rescue not run ?16:25
Tahvokwhat's rescue?16:26
cloudnullthe task Set define static mac address from an existing interface16:26
cloudnullis in a block16:26
cloudnullhttps://github.com/openstack/openstack-ansible-lxc_container_create/blob/master/tasks/lxc_container_config.yml#L51-L9216:26
cloudnullso if the first task fails the second will pick up and continue16:26
TahvokThe task after the fail was: Gather hardware addresses to be used as facts16:28
odyssey4meand boom - gnocchi/newton is working :) https://review.openstack.org/51400516:28
cloudnullnice16:28
cloudnullTahvok: you should see the task "Set unique interface mac address (when no facts exist)" run16:29
xdfilyou know it felt good when the stdout was 'boom'16:29
cloudnullif you don't then I've failed to trap something there and need to fix it16:29
*** armaan has quit IRC16:30
cloudnullTahvok: was this a new aio16:30
Tahvokcloudnull: well, it didn't16:30
Tahvokcloudnull: yes, it's a new aio16:30
*** armaan has joined #openstack-ansible16:30
cloudnullwere there multiple runs of the lxc-containerc-create playbook ?16:30
xdfilHey, I am pretty sure that in order to get vxlan working with OVS a couple things need to happen and they seem fundamentaly opposed to how OSA does stuff16:30
xdfilanyone have time to discuss?16:30
Tahvokcloudnull: no, it's a first run of setup-hosts.yml playbook16:31
cloudnullok.16:31
* cloudnull trying to reproduce it16:31
Tahvokxdfil: I have an ovs working installation.16:31
TahvokWhat's the problem you're facing?16:32
xdfilwith VXLAN?16:32
Tahvokyes16:32
xdfilok let me start with this: Where is the IP address  configured for the interface that corresponds to br-vxlan in your deployment16:32
Tahvokxdfil: let me show you our configuration. Give me a couple of minutes16:33
xdfiltalking about neutron agents container16:33
xdfilI'm making the assumption it will need to be on the OVS br-tun bridge interface, and that the veth that connects to br-vxlan needs to be added to br-tun16:35
xdfilpaste it here if you like: https://etherpad.openstack.org/p/OSA-OVS-throwdown16:36
openstackgerritMerged openstack/openstack-ansible-os_swift stable/pike: Revert "Don't run sync in upgrades"  https://review.openstack.org/51633316:37
odyssey4mecloudnull ^ its probably best to sha bump the role in the integrated repo for that one?16:43
cloudnull++16:43
xdfilI curious what your thoughts are on the ODL / Repo port conflict (8181)16:43
xdfilwho moves ? lol16:44
Tahvokxdfil: https://gist.github.com/Tahvok/8d522fa308041529b8248b2dfc2e6e4c16:44
*** weezS has quit IRC16:44
TahvokInside each neutron agent container you have to run the following:16:45
xdfilTahvok: can you show me your ovs-vsctl show output?16:46
Tahvok  ovs-vsctl add-br br-provider  &&  ovs-vsctl add-port br-provider eth1216:46
TahvokAlso, the following on the compute nodes:16:46
*** lbragstad has quit IRC16:46
Tahvok  ovs-vsctl add-br br-provider  &&  ovs-vsctl add-port br-provider bond0.216:47
xdfilSo eth12 is your br-vxlan veth?16:47
Tahvokyes16:47
Tahvokwait, no16:47
Tahvokyes, it's eth1216:48
odyssey4meTahvok any chance you could update that gist with a complete set of host setup instructions and config to make it all go?16:48
xdfilTahvok:  sorry, your eth10 is vxlan and your eth12 is vlan16:49
openstackgerritAntony Messerli proposed openstack/openstack-ansible-ops master: Abort run if VMs aren't up before timeout  https://review.openstack.org/51737116:49
Tahvokodyssey4me: added instuctions to the gist16:52
xdfilTahvok:  the parts you are showing me arent the parts I'm having problems with exactly16:52
Tahvokxdfil: yes, that's because your network inside openstack will use the vxlan interface16:52
xdfilI need to see what's inside the agents container16:52
xdfiland I need to see how OVS is configured16:53
odyssey4meTahvok fantastic, thanks16:53
Tahvokxdfil: https://gist.github.com/Tahvok/a0a9be64bc11bb0209a36d9d12c9e68516:53
odyssey4meTahvok if you can keep that updated with whatever other questions arise, we can perhaps help to make that a documented config16:53
Tahvokbr-int and br-tun are created automatically16:54
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-lxc_container_create master: Correct mac generation block  https://review.openstack.org/51737216:54
cloudnullTahvok: ^16:54
jafehaTahvok: aaaaw how cool, i'll diff my setup tomorrow against yours. at least my veth conf seems not to differ that much16:54
TahvokYou only need to add br-provider and the appropriate port on it16:54
cloudnullmind testing that in your env ?16:54
jafehaTahvok: thank you!16:54
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Improve event streaming with a better Octavia verison  https://review.openstack.org/51485216:54
jafehaodyssey4me: as soon as our setup is up and running i could also assist improving the ovs conf documentation16:55
*** David_Orange has quit IRC16:55
TahvokWould be nice if ovs parts would be made automaticaly with ansible.. But I think that's too much to ask, as people will have too different configurations16:56
odyssey4mejafeha Tahvok fantastic, it'd be great to see another example appendix to show how16:56
xdfilTahvok: wow, so no "physical" ports need to be added to the br-tun16:56
*** jvidal has quit IRC16:56
xdfilI've been obsessing on that detail for months16:56
Tahvokxdfil: you don't do anything with br-tun16:56
TahvokYou only add br-provider16:56
jafehaTahvok: we've written some ansible playbooks to simply drop our ovs configuration before running osa16:57
TahvokEverything else is managed by openstack16:57
Bico_FinoYou have to add br-provider Tahvok ?16:57
TahvokBico_Fino: yes16:57
* odyssey4me really ensjoys watching the magic of a community at work together.16:57
TahvokEverything I said here, is according to the networking guide docs16:58
Bico_Fino  network_mappings: "physnet1:br-provider"16:58
Bico_Finothis ^?16:58
TahvokThis is what I used: https://docs.openstack.org/ocata/networking-guide/deploy-ovs-selfservice.html16:59
cloudnullodyssey4me: ++16:59
jafehawe've adapted our lb setup to ovs and might still have some dead code, so it is really great to see that there are others out there trying the same stuff right now.16:59
TahvokBico_Fino: yeah, I forgot16:59
jafehathis will be really useful for bugsquashing17:00
TahvokYou also need to add the following in user_variables.yml:17:00
jafehaeven though my collegue will have to take over those conversations from next week on, i'll be on vacation for a while17:00
Tahvokhttps://gist.github.com/Tahvok/5068e5ecb96417bacae224a44e2b3fb517:01
TahvokThis is needed as well ^17:01
Bico_FinoTahvok my config is almost the same, let me post on that gist17:01
odyssey4meTahvok can you rather add them all into a single gist?17:01
odyssey4meIt'll be easier to track.17:02
Tahvokodyssey4me: yeah, sec17:02
Bico_FinoI'm using neutron_plugin_type: ml2.ovs.dvr17:02
Bico_FinoI'm almost done with setup-openstack.yml17:03
Tahvokodyssey4me: updated. Please understand that this is for ocata release. We have not moved to pike yet17:03
Bico_Finooh17:03
Bico_FinoI'm deploying Pike.17:03
*** armaan has quit IRC17:03
*** armaan has joined #openstack-ansible17:03
odyssey4meTahvok if you change the title of the gist to something like 'OVS with OSA for Ocata' then it'll be more obvious17:03
Bico_FinoTahvok You are consolidating all the info into this one -> https://gist.github.com/Tahvok/5068e5ecb96417bacae224a44e2b3fb5 ?17:04
odyssey4menope, this one: https://gist.github.com/Tahvok/8d522fa308041529b8248b2dfc2e6e4c17:04
TahvokBico_Fino: I didn't see much difference with pike. Just ensure that you follow the pike guide, and check whether roles already not default to what you need: https://docs.openstack.org/neutron/latest/admin/deploy-ovs.html17:05
Bico_FinoGoing test a playbook to add the ovs interface17:06
Bico_Finobr-provider17:06
odyssey4meit'd be super-great if that interface bit could be added to the neutron role or wherever it's best suited so that it can be automated17:07
*** markvoelker_ has joined #openstack-ansible17:07
openstackgerritMerged openstack/openstack-ansible-os_tacker stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51630617:07
xdfilI can't decide if I'm happy or mad17:08
xdfilI'm both, thats possible heh17:08
Tahvokodyssey4me: on sunday, if I won't forget, I could add the selfservice and provider network configurations as well17:09
openstackgerritMerged openstack/openstack-ansible-os_nova master: Update test image for nova-lxd  https://review.openstack.org/51502017:10
Tahvokodyssey4me: the best I could do, was adding the description to the gist17:10
odyssey4meTahvok tyvm, that will help a lot of people17:11
TahvokThis is the gist: https://gist.github.com/Tahvok/8d522fa308041529b8248b2dfc2e6e4c17:11
*** markvoelker_ has quit IRC17:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova stable/pike: Update test image for nova-lxd  https://review.openstack.org/51737617:12
*** markvoelker has joined #openstack-ansible17:12
*** markvoelker has quit IRC17:13
xdfilTahvok: odyssey4me  I think the most important thing that needs to be made clear in the docs is how OVS needs to be configured. The docs until now say nothing about vxlan details on OVS. The configuration of that interface has been a mystery to me for months.17:14
xdfilEspecially when you come accross other non-osa examples where people are putting their vxlan endpoint address on the OVS brdige interface17:15
Bico_FinoYeap, you don't find much information about OVS with osa17:15
Bico_Finolinuxbridge is easier, but we got HA issues with neutron routers.17:15
odyssey4methat's due to most consumers of OSA not using it - so it takes a few consumers to figure it out, then own the changes that need to be made to the docs and code to make it simpler and better17:16
xdfilSo I for some reason was assuming that in order for OVS to do vxlan stuff the endpoint interface actually had to be on an OVS bridge. But it doesn't which makes sense because its layer-3 at that point17:16
*** vnogin has quit IRC17:16
TahvokWe worked for 2 months on the osa project to get a working osa with ovs configuration17:16
TahvokBut it was worth it17:16
odyssey4meso, thank you guys for taking what was a lab experiment back in newton, and starting to figure out how to make it work for real17:17
Bico_FinoTahvok you changed playbooks or anything else ?17:17
Tahvokodyssey4me: good to know that it was an experiment :O17:17
Bico_Fino:D17:18
*** markvoelker has joined #openstack-ansible17:18
TahvokIf we knew it was only an experiment, we wouldn't go with ovs XD17:18
TahvokBico_Fino: didn't touch anything. Only the user_variables as I provided in the gist17:18
odyssey4meit was done by automagically, who has sadly moved on to other work - he put together http://trumant.github.io/openstack-ansible-openvswitch.html and http://trumant.github.io/openstack-ansible-dvr-with-openvswitch.html17:18
TahvokYes, this are the guides we based our work on17:19
Bico_FinoTahvok thanks for the info. :)17:19
odyssey4meand the work to make that possible was put together by him and another guys from jmccrory's employer IIRC...17:20
xdfilTahvok: yes thanks17:20
openstackgerritAntony Messerli proposed openstack/openstack-ansible-ops master: Specify containers to destroy  https://review.openstack.org/51738017:20
odyssey4meso unfortunately, when they had to move on to other work the integration lost momentum and it remained something we knew possible, but that some bits were missing to close the loop17:20
Bico_FinoI think my setup-openstack.yml is almost done17:21
Bico_FinoGoing add the br-provider and make some tests17:21
Bico_Finoif it works I will put a gist with the configs17:21
TahvokWhat's setup-openstack.yml?17:21
Bico_Finothe playbook17:21
TahvokYou edit the playbook?17:21
Bico_Finono17:21
*** markvoelker_ has joined #openstack-ansible17:21
Bico_FinoI mean openstack-ansible setup-openstack.yml17:21
Bico_Finothe command. :P17:21
Tahvokcloudnull: you reverted here? https://review.openstack.org/#/c/517372/1/tasks/lxc_container_config.yml17:22
*** markvoelker has quit IRC17:23
cloudnullkinda, i combined the two tasks17:23
cloudnullit was something like 4, then 2, now 1 :D17:23
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/newton: Initial OSA zuul v3 role jobs  https://review.openstack.org/51400517:23
TahvokHope it works17:24
*** markvoelker has joined #openstack-ansible17:24
TahvokI wanted to test aio for first time today17:24
cloudnullon a new aio it seems to be ok.17:24
TahvokGuess I'll do it next week17:24
TahvokAnyway, bye for now17:24
cloudnulltake care Tahvok17:24
Bico_Finobye17:25
*** markvoelker_ has quit IRC17:26
*** markvoelker_ has joined #openstack-ansible17:28
*** mwynne has quit IRC17:28
*** markvoelker has quit IRC17:29
*** lbragstad has joined #openstack-ansible17:29
*** markvoelker_ has quit IRC17:34
*** germs has joined #openstack-ansible17:38
*** electrofelix has quit IRC17:44
*** chhavi has quit IRC17:45
*** chhavi__ has quit IRC17:46
*** weezS has joined #openstack-ansible17:49
*** bruvik_ has joined #openstack-ansible17:49
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_ceilometer stable/newton: Initial OSA zuul v3 role jobs  https://review.openstack.org/51399917:55
*** vnogin has joined #openstack-ansible17:55
*** vnogin has quit IRC17:55
odyssey4mewas that it cloudnull ? (whitespace trailing btw)17:56
cloudnullodyssey4me: evrardjp: if you're still around - https://review.openstack.org/#/c/517372 - this fixes a bug i created17:56
odyssey4meI'm thinking of pushing up a horde of patches to set the eol tag instead of the branch all over the place17:56
cloudnulli'm still testing17:56
odyssey4mecloudnull hey, that's mhayden's job17:56
cloudnullhowever I needed that to go17:56
evrardjpodyssey4me: you should wait a little that everything is using EOL17:56
evrardjpbut yes why not17:56
evrardjpodyssey4me: haha17:56
odyssey4meevrardjp it's breaking too many jobs, and not difficult to do17:57
evrardjp(on the mhayden job)17:57
cloudnullfigured i'd throw it that in place and continue beating on it17:57
odyssey4meit's also breaking some RPC jobs now17:57
evrardjpodyssey4me: fine for me17:57
*** poopcat has joined #openstack-ansible17:57
odyssey4mecloudnull LGTM17:58
odyssey4menice to have brought those tasks from 4 to 117:58
cloudnullindeed17:59
evrardjpyeah17:59
cloudnullI was using blocks wrong17:59
*** albertcard1 has joined #openstack-ansible17:59
cloudnulli think we could make that better still, but another day18:00
odyssey4meagreed18:00
* odyssey4me preps up his repo changes script for an branch->eol tag bonanza18:00
*** gouthamr has joined #openstack-ansible18:00
cloudnullwoot!18:00
* cloudnull loves a good pr bonanza18:01
*** poopcat has quit IRC18:02
*** vnogin has joined #openstack-ansible18:04
*** pbandark has quit IRC18:07
*** pbandark has joined #openstack-ansible18:07
*** gkadam has quit IRC18:08
*** gkadam has joined #openstack-ansible18:09
Bico_Finohum. openstack-ansible setup-openstack.yml failed, http://paste.openstack.org/show/625375/18:10
*** pcaruana has quit IRC18:10
*** esberglu has quit IRC18:10
Bico_Finoansible_br_vxlan18:10
*** esberglu has joined #openstack-ansible18:10
cloudnullBico_Fino: if br-vxlan defined in the openstack_user_config.yml18:12
cloudnulland is that bridge available on your hosts?18:12
Bico_Finoyes, it is.18:12
Bico_Finohum18:12
*** pbandark has quit IRC18:13
Bico_FinoI had to fix it18:13
Bico_Finoafter setup-hosts18:13
Bico_Finoshould I run setup-hosts again?18:13
cloudnullI'd just run lxc-container-create again. however you might try purging the cached facts in /etc/openstack_deploy/ansible_facts18:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51739118:14
cloudnullthen rerun the failed playbook18:14
Bico_Finosounds good18:15
Bico_FinoGoing try that, thanks!18:15
cloudnulllet me know how it goes.18:15
*** esberglu has quit IRC18:15
odyssey4meevrardjp cloudnull does https://review.openstack.org/517391 look like a satisfactory template?18:15
Bico_Finosure!18:15
cloudnullodyssey4me: LGTM18:16
evrardjpodyssey4me: I think you need to change things in tests18:16
evrardjpdon't we?18:16
odyssey4meevrardjp yes, for the actual tests18:17
odyssey4meI'll do that too, but seperately18:17
odyssey4metests only affects the commonly used stuff anyway - here I'll be touching everything we have18:17
cloudnullthe tests repo in newton is pinned anyway18:17
odyssey4meyup18:17
evrardjpyeah I remember the tests repo pin18:18
evrardjpWeirdly I thought we had something in repo too18:18
evrardjpbut it doesn't seem so18:18
evrardjpso go ahead I'd say18:18
odyssey4methis will make it simple to know which upstream services are eol already ;)18:18
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51739618:19
evrardjpwell, all of them except two18:19
evrardjpnova and ...18:19
evrardjpI can't remember18:19
evrardjp(tempest being still special)18:20
evrardjpwould the second be heat?18:20
evrardjpjust a sec18:20
odyssey4meevrardjp don't bother - my script will tell us18:20
odyssey4methe reviews would come in faster if I wasn't vpn'd :/18:20
evrardjpironic18:21
evrardjpit's just opening a ML thread18:21
evrardjpnot that hard :p18:21
*** esberglu has joined #openstack-ansible18:21
odyssey4meoh...18:21
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ceilometer stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51739718:21
* odyssey4me is behind on ML thread things18:21
evrardjpso ironic should be alright apparently18:22
evrardjpwhich means they will have a EOL tag soon18:23
evrardjpso if you avoid EOL on nova and ironic you're good18:23
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Run gate playbooks in parallel  https://review.openstack.org/49774218:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_glance stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51739818:24
*** wlmbasson has quit IRC18:24
*** chyka has joined #openstack-ansible18:26
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_heat stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51739918:27
*** bruvik_ has quit IRC18:28
*** chyka_ has quit IRC18:29
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Add infra healthchecks  https://review.openstack.org/49549218:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_keystone stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51740018:30
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_sahara stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51740118:33
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_swift stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51740218:35
openstackgerritMerged openstack/openstack-ansible-os_sahara stable/newton: Updated from OpenStack Ansible Tests  https://review.openstack.org/51626218:38
*** armaan has quit IRC18:42
*** armaan has joined #openstack-ansible18:43
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51740518:44
openstackgerritMerged openstack/openstack-ansible master: Vagrantfile: Remove openSUSE Leap 42.2  https://review.openstack.org/51726818:45
odyssey4meright, that's all right now: https://review.openstack.org/#/q/topic:newton-eol-dev-mode-branch-change+(status:open+OR+status:merged)18:46
odyssey4mehmm, it seems a few got missed for some reason18:47
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_ceilometer stable/newton: Initial OSA zuul v3 role jobs  https://review.openstack.org/51399918:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51740918:55
openstackgerritAntony Messerli proposed openstack/openstack-ansible-ops master: Specify containers to destroy  https://review.openstack.org/51738018:56
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51741018:57
*** hachi has joined #openstack-ansible18:58
*** bruvik_ has joined #openstack-ansible18:58
*** stuartgr has quit IRC19:01
*** bruvik_ has quit IRC19:02
*** albertcard1 has quit IRC19:07
*** poopcat has joined #openstack-ansible19:08
*** albertcard1 has joined #openstack-ansible19:13
*** poopcat has quit IRC19:15
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_aodh stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51739619:21
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_ceilometer stable/newton: Initial OSA zuul v3 role jobs  https://review.openstack.org/51399919:23
*** vishwanathj has quit IRC19:23
Bico_Finocloudnull hum. failed for gnocchi now.19:25
Bico_FinoNo file was found when using with_first_found. Use the 'skip: true' option to allow this task to be skipped if no files are found19:28
*** smatzek_ is now known as smatzek19:30
Bico_Finostrange, I ran the playbook alone and it worked openstack-ansible os-gnocchi-install.yml19:33
*** dave-mccowan has joined #openstack-ansible19:33
*** vnogin has quit IRC19:34
*** vnogin has joined #openstack-ansible19:35
*** vnogin has quit IRC19:36
*** vnogin has joined #openstack-ansible19:37
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_horizon stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51741019:39
openstackgerritMerged openstack/openstack-ansible-os_sahara stable/pike: Initial OSA zuul v3 role jobs  https://review.openstack.org/51660019:40
*** albertcard1 is now known as poopcat19:48
*** cathrichardson has joined #openstack-ansible19:51
*** gkadam has quit IRC19:54
*** dave-mccowan has quit IRC19:56
*** vnogin has quit IRC20:00
*** hachi has quit IRC20:13
*** dave-mccowan has joined #openstack-ansible20:15
*** thorst_ has quit IRC20:17
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/newton: Change developer_mode branch to newton-eol  https://review.openstack.org/51739120:18
Smeared_Beardhey, after running OSA, I thought neutron agent on the compute host, would be in a container, but it's not.. is this expected and is there an option to have it in a container? I looking now20:18
*** pbandark has joined #openstack-ansible20:18
Smeared_Beardat the docs to see if I can find an option20:18
*** vnogin has joined #openstack-ansible20:24
*** vnogin has quit IRC20:24
*** smatzek has quit IRC20:25
*** vnogin has joined #openstack-ansible20:35
*** dave-mccowan has quit IRC20:35
*** cathrichardson has quit IRC20:36
*** mwynne has joined #openstack-ansible20:38
*** vnogin has quit IRC20:40
*** xingchao has joined #openstack-ansible20:41
*** vnogin has joined #openstack-ansible20:43
cloudnullBico_Fino: theres20:43
cloudnull**there's a lookup that checks the os20:43
cloudnullif the facts are stale it can cause that issue20:43
Bico_FinoAfter I ran it alone20:43
Bico_Finoit worked20:44
cloudnullsuccess ! :D20:44
Bico_Finobut got the same issue on utility one.20:44
Bico_FinoI ran it alone, worked it again20:44
Bico_FinoI'm using ubuntu 16.0420:44
cloudnullwhen I've ran into this issue i've purged the facts under /etc/openstack_deploy/ansible_facts20:44
cloudnullhowever it may be something worth looking into more broadly20:44
*** xingchao has quit IRC20:44
Bico_Finomaybe some race condition?20:45
Bico_FinoBecause if you run the playbook alone, it works.20:45
cloudnullcould be20:45
cloudnullI've also thought maybe its facts that are on the cusp of expiring20:45
cloudnullbut hard to tell/track down20:45
cloudnullSmeared_Beard: neutron agents are in containers on your network nodes.20:45
cloudnullhowever they're running on baremetal on compute nodes.20:46
Bico_Finorunning setup-openstack again20:46
Bico_Finolets see how that goes20:46
cloudnullthings like neutron-linuxbridge-agent needs to run along side nova compute20:46
cloudnullBico_Fino: ++20:46
cloudnullI'll be around, let me know what you find out.20:46
Bico_Finothanks.20:47
*** vnogin has quit IRC20:51
Smeared_Beardcloudnull cool, that is what I am seeing.. I guess I didn't really think about it so was unexpected when there was no container for L3 agent20:51
openstackgerritMerged openstack/openstack-ansible-ops master: add example basic resource generation scripts  https://review.openstack.org/51574320:57
*** galstrom is now known as galstrom_zzz21:10
*** jwitko_ has joined #openstack-ansible21:10
*** vnogin has joined #openstack-ansible21:11
*** jwitko has quit IRC21:14
*** vnogin has quit IRC21:16
*** jwitko_ has quit IRC21:16
idleminddoes a vagrant file exist for quickly standing up a deployment host?21:19
cloudnullwe do have a vagrant file, but ive never used it .21:21
idlemindwhere would that gem be nestled by chance?21:22
cloudnullhttps://github.com/openstack/openstack-ansible/blob/master/Vagrantfile21:23
idlemindah how'd i miss that one :)21:23
idlemindthx21:23
cloudnulla lot of the roles have a Vagrantfile too21:23
cloudnullhttps://github.com/openstack/openstack-ansible-os_nova/blob/master/Vagrantfile21:23
cloudnullwhich may be useful for testing a specific role21:23
*** vnogin has joined #openstack-ansible21:26
*** xingchao has joined #openstack-ansible21:26
*** vnogin has quit IRC21:30
*** xingchao has quit IRC21:31
*** Brew has quit IRC21:36
*** Smeared_Beard has quit IRC21:38
*** jwitko has joined #openstack-ansible21:44
*** SmearedBeard has joined #openstack-ansible21:44
Bico_Finocloudnull worked!21:45
cloudnullnice!21:45
*** vnogin has joined #openstack-ansible21:49
Bico_Finocloudnull doing the ovs stuff now21:50
*** vnogin has quit IRC21:50
*** SmearedBeard has quit IRC21:51
*** xingchao has joined #openstack-ansible22:01
cloudnullthat sounds like a BLAST!22:04
* cloudnull loves OvS22:04
jrossercloudnull: you tried anything like this? https://community.mellanox.com/docs/DOC-296422:05
cloudnullnope22:05
cloudnull1. Linux Kernel >= 4.13-rc5 -- too new for my blood22:06
cloudnull:D22:06
* cloudnull uses openSUSE tumbleweed w/ 4.13.8 for a workstation22:07
cloudnullthat draft looks cool though22:08
cloudnulljrosser: do you all run w/ mellanox gear?22:08
jrossernearly all the nic yes22:09
jrosserbut not switches22:10
*** threestrands has joined #openstack-ansible22:10
*** threestrands has quit IRC22:10
*** threestrands has joined #openstack-ansible22:10
cloudnullI've had good experiences with their connect x3-pros22:10
jrosseri am interested in the recent ovs chatter here becasue if i can make that work i can slip ASAP^2 in behind it without much difficulty22:10
jrosseri have connectx4-lx pretty much everywhere22:12
cloudnullOVS is something we're definitely compatible with.22:12
cloudnullhowever IDK what you'd have to do to make ASAP2 go22:13
jrosserthat mellanox doc is the first i've seen from them claiming sensible openstack interop22:13
cloudnullbut I can't imagine it would require much hackery once your deployment was up and running with ovs22:13
jrosserthere was always a pile of caveats up to now22:13
cloudnullbased on the doc they're just using openvswitch with the ml2 plugin22:16
*** vnogin has joined #openstack-ansible22:16
*** xingchao has quit IRC22:16
cloudnulland whitelisting, which can be added into config using config_template.22:16
jrosserit references os-vif, is that part of a normal deployment22:16
*** esberglu has quit IRC22:18
cloudnullah yes. that would have to be added in as a plugin.22:18
cloudnullhowever https://github.com/openstack/requirements/blob/master/upper-constraints.txt#L46522:18
cloudnullits part of requirements22:18
jrosserthey do cunningly give an example which is east-west traffic i note22:18
cloudnullso we should have a wheel for it22:18
jrossernorth-south is another matter22:18
cloudnullhttps://github.com/openstack/requirements/blob/stable/ocata/upper-constraints.txt#L23122:19
cloudnullits even in ocata22:19
cloudnullso all the parts needed should be there.22:19
cloudnullhttps://docs.openstack.org/os-vif/latest/user/plugins/linux-bridge.html#supported-vif-types22:20
cloudnullit even has linux bridge support22:20
cloudnullso maybe that thing is already in service22:20
* cloudnull checking22:20
cloudnullits not used by default in pike22:21
cloudnullhowever it is built as a wheel22:21
cloudnullhttp://paste.openstack.org/show/625394/22:21
jrosserthats cool, like you say its mostly there22:22
jrosseri would love to see similar things applied in the network nodes22:22
cloudnullit looks like we could just add it as a dep22:23
jrosserbut the current nics are missing the nat parts in hardware22:23
jrossernext generation will do that but i expect the drivers will take some time to catch up22:23
cloudnulland all of the things, except the pci pass through, would be there.22:23
*** lbragstad has quit IRC22:24
cloudnullah ha!22:26
cloudnullhttp://paste.openstack.org/show/625395/22:26
cloudnullits actually used by nova directly22:26
cloudnulland installed by default22:26
spotzcloudnull when you arriving in syd?22:26
cloudnullso its there22:26
cloudnullspotz: sunday22:26
spotzcloudnull: Cool:)22:26
cloudnullspotz: you ?22:27
spotzcloudnull: I'm at the airport now, arrive 6am Sat. Doing the Upstream Institute22:27
cloudnull‎jrosser‎: so in fact, if you deployed w/ OVS, had kernel 4.13.x, and a compatible connectx nic you'd only need to map out what the pass though devices for your compute hosts and you'd be good to go22:28
cloudnullspotz: ah. cool!22:28
cloudnullwell then I'll see you in 48 hours :D22:28
jrosseryeah, and all th stuff in their doc would be done as part of prepping the compute node before deploy22:28
spotzcloudnull: Sweet:) Safe travels22:29
cloudnulljrosser: indeed.22:29
cloudnullspotz: you too.22:29
cloudnullhave fun at the upstream institute !22:29
jrosserwhile on the networking topic, have you seen networking-vpp?22:29
jrosserbecasue thats super interesting for L3 functions22:30
cloudnullnope.22:31
* cloudnull reading https://github.com/openstack/networking-vpp/blob/master/README.rst22:31
jrossercloudnull: https://www.youtube.com/watch?v=for1CLcQ9Q422:32
cloudnulllooks like they're setting expected state and communicating through etcd ?22:32
*** vnogin has quit IRC22:32
cloudnullinteresting .22:32
jrosserthey way they implement the openstack -vpp stuff wants to own everything including the compute nodes22:32
jrosseryeah so mix/match is hard22:32
jrosserbut the technology is incredible, that video is well worth a watch22:33
cloudnullah, no lxb or ovs22:34
* cloudnull watching22:34
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Correct mac generation block  https://review.openstack.org/51737222:42
*** thorst has joined #openstack-ansible22:44
*** thorst has quit IRC22:45
cloudnullopenstack-vpp looks like it just needs iommu enabled and an isolated vxlan capable nic.22:46
cloudnullif you want vxlan-gpe22:46
cloudnullelse any vlan capable nic will work22:46
cloudnulllooks cool22:46
*** thorst has joined #openstack-ansible22:49
jrosserthe potential performance is so many orders of magnitude ahead of what you can do in other software with bridges/ovs or linux routers22:51
cloudnullmy amd servers have /sys/class/iommu/ivhd0 so I may give this a try22:52
jrosserthey use etc to share mac addresses between the compute and network nodes22:52
jrosser*etcd22:52
jrosserwhich i'm not sure what to make of22:53
cloudnulletcd is a thing, it works22:53
cloudnullwe even have a role for it :D22:53
*** sxc731 has joined #openstack-ansible22:53
jrosseroh sure, but if you want networking-vpp to interoperate with linux-bridge or ovs.....22:54
cloudnullit looks like it has to be vpp or not22:54
cloudnullso mixed deployments don't seem to be possible22:54
* cloudnull just looking at the docs22:55
jrosseryes, ideally i'd like to be able to do mellanox/asap2/ovs on compute nodes and vpp on the network nodes22:55
cloudnulllooks like odl has a vpp implementation too23:02
*** thorst has quit IRC23:06
*** chyka_ has joined #openstack-ansible23:09
*** chyka has quit IRC23:12
*** chyka_ has quit IRC23:13
gunixcloudnull: are you still online?23:14
cloudnulli am23:14
gunixyou know the backup field in horizon, under volumes?23:15
* cloudnull nerding out on vpp videos23:15
gunixthat makes a snapshot of the volume on cinder and after that moves it to swift23:15
cloudnullyes?23:15
gunixdoes it still work if you deploy OSA with CEPH for block storage and object storage (also with glance configured to use ceph), but without installing swift?23:16
cloudnullI believe cinder backup needs an object store to make that go.23:16
cloudnullbut i think you could use ceph with RGW23:17
cloudnullas the swift store.23:17
cloudnullhttps://docs.openstack.org/cinder/latest/admin/blockstorage-volume-backups.html23:17
cloudnulllooks like there's an NFS store option too23:18
jrossercloudnull: practical nerding with vpp here https://wiki.fd.io/view/VPP#Use_Cases23:19
jrosserlook at the "home gateway" one23:19
gunixcloudnull: so there must be a backup driver setting within cinder23:20
gunixwait, checking23:20
gunixcloudnull: found it: https://bpaste.net/show/dd1277f3b30023:21
gunixand here is the docu: https://docs.openstack.org/mitaka/config-reference/block-storage/backup/ceph-backup-driver.html23:22
gunixthank you!23:22
cloudnullnp :D23:23
*** weezS has quit IRC23:28
gunixcloudnull: also, found this: https://bpaste.net/show/53c6959b57f123:31
cloudnullah look at that :)23:31
cloudnulllooks like we already had ceph suppot23:32
* cloudnull is an idiot23:32
*** sxc731 has quit IRC23:32
gunixcloudnull: that code is genius, cause it seems ansible knows what you are using and configure cinder to use the appropriate driver23:33
cloudnulllol23:33
cloudnullhttps://docs.openstack.org/openstack-ansible-os_cinder/latest/configure-cinder.html#using-ceph-for-cinder-backups23:33
Bico_Finocloudnull setup-openstack went fine23:33
cloudnullBico_Fino: nice!23:33
gunixBico_Fino: your first setup?23:33
Bico_Finogunix nope. I played around with Ocata release23:34
Bico_Finogunix http://bicofino.io/2017/09/05/openstack-ocata-deployment-with-openstack-ansible-and-ceph/23:34
gunixBico_Fino: in ocata i did only some manual installs. since i found out about OSA, i quit gaming. i am doing deplopys all day23:34
cloudnullgunix: https://github.com/openstack/openstack-ansible-os_cinder/blob/master/defaults/main.yml#L162-L16423:34
cloudnulllooks like you still have to set the driver from the role.23:35
cloudnulllooking to see if we have some glue that automatically defines that23:35
Bico_Finocloudnull trying to add the ovs-vsctl add-br br-provider23:35
*** agrebennikov has quit IRC23:35
Bico_Finogunix I didn't tried manual installs yet, only Kolla and openstack-ansible23:36
cloudnullgunix: you'll need to set "cinder_service_backup_driver: cinder.backup.drivers.ceph" in your user_variables.yml file and it'll go23:36
gunixBico_Fino: i like it that you have a blog. that's cool. however, my 2 cents: if you have enough experience to create blogs, try to work on the official openstack documentation and provide updates to it. it doesn't help a lot to have documentation fragmented in the community.23:36
SamYaplevroom vroom go23:36
gunixcloudnull: yea and i guess also ceph user23:37
cloudnullBico_Fino: you using ghost ?23:38
gunixBico_Fino: think about archlinux: that distro was nothing some years ago, but know they have a docu that makes it cooler than deb ubu centos and suse... a good wiki means a lot23:38
gunix*but NOW23:38
* cloudnull reads the arch wiki all the time23:38
cloudnullBico_Fino: I use ghost, i quite like it23:39
cloudnullhttps://cloudnull.io/23:39
cloudnullgunix: It's nice to blog about experiences, kinda get ideas out there.23:39
cloudnullohai SamYaple23:39
gunixcloudnull: i used to read it a lot but i switched by desktop from archlinux back to debian. i am sorry, but debian is so stable that it makes life forget PC problems exist. i also like the upgrade philosophy ( i hate the fact ubuntu and arch need to get rebooted every week)23:40
SamYapleo723:40
cloudnullhaha. I run openSUSE tumbleweed :P23:40
SamYapledo you really?23:40
* cloudnull still reads the arch wiki23:40
cloudnullSamYaple: I do23:40
* cloudnull is a crazy person23:40
SamYaplei shouldnt be suprised and yet i still am23:40
cloudnull I have it on my x123:40
cloudnullits great23:41
gunixcloudnull: i am 100% for blogging. it is cool. but if someone has good experience with something, working on the main wiki pe that software will help the community . that is my only point. arcticles could also be pasted from blog to community webite23:41
gunix*website23:41
cloudnullSamYaple: http://paste.openstack.org/show/625398/23:41
SamYaplecloudnull: i get it, i run a fork of pfsense with a custom bsd kernel to break 802.1d rfc23:41
cloudnull:P23:41
SamYaplenice23:41
cloudnullits like arch, but with testing before a package is released23:42
cloudnullso it breaks every other day, instead of every day23:42
SamYaplethats crazy talk23:42
gunixyea suse tumbleweed is really cool but it's not as cool as archlinux because archlinux has a cool name. sorry,23:42
SamYaplei run arch, this install is up to a year without issues :)23:42
SamYaplei update when i remember23:42
cloudnullgunix: you're right23:42
gunixSamYaple: on archlinux i had issues with the steam tray. it was really annoying23:43
SamYaplegunix: yea i run a super stripped down eeverything23:43
SamYaplejust switched to i3 from fluxbox a few months back23:43
SamYaplebeen on fluxbox for 10 years23:43
gunixi don't know if steam works on i3 :D23:43
gunixi am on gnome 323:44
gunixi use the desktop also for gaming and i hate dual booting windows. well, i hate windows.23:44
cloudnullgunix: I typically blog about a thing, and if i'm not being 100% insane (which takes a few days to get sorted) I'll contribute it back to the communities/products I'm blogging about.23:44
cloudnullIt's fun .23:45
cloudnullhahaha. I run KDE :)23:45
cloudnullsteam works great!23:45
gunixcloudnull: i think i have only one article ... this one: https://help.ubuntu.com/community/HALAMP23:45
cloudnullnice!23:45
gunixi was practicing this for openstack. tbh. i want to know how it works in the background23:46
gunixand while doing it i saw that docu online was horrible so i wrote that23:46
gunixi think i should write a small openstack docu for that ubuntu wiki23:47
gunixwith some general info, like what each service does, and some links for quick start, like devstack and osa aio23:48
cloudnullBico_Fino: If you are running ghost and want to have syntax highlighting on your posts https://gist.github.com/cloudnull/2e1ae0ccbd21209e89600af3f8024a4b -- I added that to the code-injection page and viola, syntax highlighting :)23:49
gunixwhat is gist?23:51
Bico_Finocloudnull I need migrate to hugo. :P23:51
cloudnullits like pastebin23:51
cloudnullBico_Fino: I just upgraded my blog to ghost 1.x23:52
cloudnullit was a pain23:52
cloudnullbut ghost-cli is nic e23:52
cloudnulland upgrades since have been simple23:52
cloudnullI used to use pelican, but it was too much work23:53
Bico_FinoI really need to upgrade it23:53
Bico_FinoI used octopress23:54
gunixyou guys have monitoring via ansible for openstack?23:54
gunixhttps://github.com/cloudnull/rpc-maas23:54
gunixsorry for stalking your github cloudnull23:54
cloudnullstalk away23:54
cloudnullI also throw things in https://github.com/os-cloud/23:54
cloudnullthe updated maas is here https://github.com/rcbops/rpc-maas23:55
cloudnullits deploys the monitors but all of that plugs into rackspace monitoring as a service23:55
gunixwhen i see your github i feel like i wasted my life23:55
cloudnullHOWEVER, i recently implemented a backend for all of the monitoring as a service checks to feed data into influxdb23:56
openstackgerritHengqing Hu proposed openstack/openstack-ansible-os_octavia stable/pike: Enable V2 Octavia API (Experimental)  https://review.openstack.org/51569823:56
cloudnullwhich can be visualized with grafana23:56
gunixso how do you monitor prod? ansible checks? or some zabbix nagios blabla?23:56
cloudnullthe checks are a good reference but if your not using rackspace monitoring as a service they23:56
cloudnull**they're not super helpful23:56
cloudnullthe checks feed all of their data back to a hosted monitoring service, kinda like newrelic23:57
gunixi was thinking about getting zabbix for monitoring23:57
gunixbut it seems you have that part also figured out23:57
cloudnullthere are a couple folks that use zabbix around here.23:58
gunixis it foss?23:58
cloudnullthere's also https://github.com/openstack/openstack-ansible-ops/tree/master/cluster_metrics23:58
cloudnullrax-maas is not foss, at least I don't think it is...23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!