cloudnull | less angry galera is a happy galera | 00:00 |
---|---|---|
*** chas_ has quit IRC | 00:03 | |
*** yifei has joined #openstack-ansible | 00:18 | |
*** Rodrig___ has quit IRC | 00:21 | |
*** Brew has quit IRC | 00:21 | |
SamYaple | galera is just misunderstood and needs some love | 00:49 |
*** Smeared_Beard has quit IRC | 00:50 | |
*** chas_ has joined #openstack-ansible | 00:53 | |
*** jiaopengju has joined #openstack-ansible | 00:56 | |
*** chas_ has quit IRC | 00:57 | |
*** hw_wutianwei has joined #openstack-ansible | 01:01 | |
*** vnogin has quit IRC | 01:01 | |
openstackgerrit | Antony Messerli proposed openstack/openstack-ansible-ops master: Specify containers to destroy https://review.openstack.org/517380 | 01:04 |
idlemind | what's the difference between compute_hosts and compute-infra_hosts? are both needed in an environment or does compute-infra_hosts also make the host act like a hypervisor (compute)? | 01:17 |
*** Rodrigo_BR has quit IRC | 01:43 | |
*** Rodrigo_BR has joined #openstack-ansible | 01:45 | |
*** chas_ has joined #openstack-ansible | 01:47 | |
openstackgerrit | Merged openstack/openstack-ansible-os_horizon master: Update the doc link https://review.openstack.org/518467 | 01:48 |
*** Rodrigo_BR has quit IRC | 01:49 | |
*** Rodrigo_BR has joined #openstack-ansible | 01:49 | |
*** chas_ has quit IRC | 01:52 | |
*** Rodrigo_BR has quit IRC | 02:01 | |
*** Rodrigo_BR has joined #openstack-ansible | 02:03 | |
*** Rodrigo_BR has quit IRC | 02:09 | |
*** Rodrigo_BR has joined #openstack-ansible | 02:10 | |
*** Rodrigo_BR has quit IRC | 02:16 | |
logan- | idlemind: compute_intfra would host services like nova-api, nova-conductor, nova-console, etc... compute_hosts are the hypervisors running nova-compute and hosting instances | 02:17 |
*** Rodrigo_BR has joined #openstack-ansible | 02:23 | |
*** chas has joined #openstack-ansible | 02:41 | |
*** vnogin has joined #openstack-ansible | 02:42 | |
*** chas has quit IRC | 02:45 | |
*** vnogin has quit IRC | 02:47 | |
*** huxinhui_ has joined #openstack-ansible | 02:51 | |
*** pedja has quit IRC | 02:53 | |
*** mcarden has joined #openstack-ansible | 03:45 | |
*** dxiri has joined #openstack-ansible | 03:57 | |
*** Rodrigo_BR has quit IRC | 04:01 | |
*** udesale has joined #openstack-ansible | 04:04 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:04 | |
*** Rodrigo_BR has quit IRC | 04:06 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:06 | |
*** Rodrigo_BR has quit IRC | 04:11 | |
*** tyhys has quit IRC | 04:11 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:13 | |
*** Rodrigo_BR has quit IRC | 04:14 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:17 | |
*** Rodrigo_BR has quit IRC | 04:18 | |
*** dave-mccowan has quit IRC | 04:19 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:21 | |
*** Rodrigo_BR has quit IRC | 04:24 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:26 | |
*** Rodrigo_BR has quit IRC | 04:27 | |
*** chas has joined #openstack-ansible | 04:29 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:31 | |
*** jiaopengju has quit IRC | 04:31 | |
*** jiaopengju has joined #openstack-ansible | 04:33 | |
*** chas has quit IRC | 04:34 | |
*** Rodrigo_BR has quit IRC | 04:34 | |
*** nshetty has joined #openstack-ansible | 04:37 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:41 | |
*** Rodrigo_BR has quit IRC | 04:42 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:49 | |
*** Rodrigo_BR has quit IRC | 04:51 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:52 | |
*** Rodrigo_BR has quit IRC | 04:53 | |
*** Rodrigo_BR has joined #openstack-ansible | 04:54 | |
*** Rodrigo_BR has quit IRC | 04:56 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:00 | |
*** Rodrigo_BR has quit IRC | 05:01 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:02 | |
*** Rodrigo_BR has quit IRC | 05:03 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:04 | |
*** dxiri has quit IRC | 05:07 | |
*** dxiri has joined #openstack-ansible | 05:08 | |
*** hybridpolio has joined #openstack-ansible | 05:09 | |
*** hybridpollo has quit IRC | 05:10 | |
*** Rodrigo_BR has quit IRC | 05:17 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:20 | |
*** Rodrigo_BR has quit IRC | 05:21 | |
*** chas has joined #openstack-ansible | 05:23 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:24 | |
*** nshetty is now known as nshetty|afk | 05:26 | |
*** Rodrigo_BR has quit IRC | 05:27 | |
*** chas has quit IRC | 05:28 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:29 | |
*** Rodrigo_BR has quit IRC | 05:32 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:39 | |
*** Rodrigo_BR has quit IRC | 05:40 | |
*** hybridpolio has quit IRC | 05:42 | |
*** nshetty|afk is now known as nshetty | 05:44 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:46 | |
*** Rodrigo_BR has quit IRC | 05:52 | |
*** Rodrigo_BR has joined #openstack-ansible | 05:54 | |
*** Rodrigo_BR has quit IRC | 05:55 | |
*** armaan has joined #openstack-ansible | 06:02 | |
*** vnogin has joined #openstack-ansible | 06:02 | |
*** armaan has quit IRC | 06:04 | |
*** armaan has joined #openstack-ansible | 06:04 | |
*** vnogin has quit IRC | 06:07 | |
*** Rodrigo_BR has joined #openstack-ansible | 06:08 | |
*** Rodrigo_BR has quit IRC | 06:10 | |
*** Rodrigo_BR has joined #openstack-ansible | 06:11 | |
*** Rodrigo_BR has quit IRC | 06:12 | |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_tempest master: Add task to allow creation of provided roles https://review.openstack.org/518611 | 06:14 |
*** Rodrigo_BR has joined #openstack-ansible | 06:17 | |
*** Rodrigo_BR has quit IRC | 06:18 | |
*** Rodrigo_BR has joined #openstack-ansible | 06:20 | |
openstackgerrit | Guoqiang Ding proposed openstack/openstack-ansible master: Add check before download "get-pip.py" https://review.openstack.org/519545 | 06:23 |
*** Rodrigo_BR has quit IRC | 06:24 | |
*** Rodrigo_BR has joined #openstack-ansible | 06:29 | |
*** Rodrigo_BR has quit IRC | 06:30 | |
*** Rodrigo_BR has joined #openstack-ansible | 06:38 | |
*** Rodrigo_BR has quit IRC | 06:43 | |
*** Rodrigo_BR has joined #openstack-ansible | 06:47 | |
*** Rodrigo_BR has quit IRC | 06:48 | |
*** Rodrigo_BR has joined #openstack-ansible | 06:54 | |
*** Rodrigo_BR has quit IRC | 06:58 | |
*** hachi_ has joined #openstack-ansible | 07:02 | |
*** vnogin has joined #openstack-ansible | 07:02 | |
*** Rodrigo_BR has joined #openstack-ansible | 07:03 | |
*** pmannidi has quit IRC | 07:03 | |
*** hachi_ has quit IRC | 07:06 | |
*** Rodrigo_BR has quit IRC | 07:09 | |
*** vnogin has quit IRC | 07:10 | |
*** chas has joined #openstack-ansible | 07:11 | |
*** hachi_ has joined #openstack-ansible | 07:11 | |
*** Rodrigo_BR has joined #openstack-ansible | 07:12 | |
*** Oku_OS-away is now known as Oku_OS | 07:12 | |
*** threestrands has quit IRC | 07:15 | |
*** nshetty is now known as nshetty|lunch | 07:16 | |
*** chas has quit IRC | 07:16 | |
*** dxiri has quit IRC | 07:19 | |
*** dxiri has joined #openstack-ansible | 07:22 | |
*** hachi_ has quit IRC | 07:23 | |
*** Rodrigo_BR has quit IRC | 07:27 | |
*** vnogin has joined #openstack-ansible | 07:27 | |
*** Rodrigo_BR has joined #openstack-ansible | 07:32 | |
*** Rodrigo_BR has quit IRC | 07:33 | |
openstackgerrit | Merged openstack/openstack-ansible master: Install hacking first and let it pull in right linter versions https://review.openstack.org/515374 | 07:35 |
*** Rodrigo_BR has joined #openstack-ansible | 07:39 | |
*** Rodrigo_BR has quit IRC | 07:42 | |
*** ivveh has joined #openstack-ansible | 07:43 | |
*** mrch has joined #openstack-ansible | 07:54 | |
*** Rodrigo_BR has joined #openstack-ansible | 07:54 | |
*** chas has joined #openstack-ansible | 07:54 | |
*** Rodrigo_BR has quit IRC | 07:55 | |
*** SmearedBeard has joined #openstack-ansible | 07:57 | |
*** vnogin has quit IRC | 07:59 | |
*** hachi_ has joined #openstack-ansible | 08:00 | |
*** Rodrigo_BR has joined #openstack-ansible | 08:07 | |
*** SmearedBeard has quit IRC | 08:08 | |
*** pcaruana has joined #openstack-ansible | 08:10 | |
*** nshetty|lunch is now known as nshetty | 08:13 | |
*** Rodrigo_BR has quit IRC | 08:14 | |
*** Rodrigo_BR has joined #openstack-ansible | 08:29 | |
*** chas has quit IRC | 08:31 | |
*** vnogin has joined #openstack-ansible | 08:31 | |
*** shardy has joined #openstack-ansible | 08:31 | |
*** vnogin has quit IRC | 08:35 | |
*** Rodrigo_BR has quit IRC | 08:36 | |
armaan | gunix: I guess almost everything in life is about "Joy", see which option will give you more "Joy" and you will have your answer. | 08:44 |
*** vnogin has joined #openstack-ansible | 08:47 | |
*** pbandark has joined #openstack-ansible | 08:57 | |
*** woodard has quit IRC | 09:07 | |
*** woodard has joined #openstack-ansible | 09:08 | |
*** michelv has joined #openstack-ansible | 09:16 | |
*** markvoelker has quit IRC | 09:21 | |
michelv | Morning | 09:24 |
michelv | Anybody else has problems with the CA certificate for TASK [pip_install : Get Modern PIP] ******** | 09:24 |
openstackgerrit | Dimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Add hosts to ODL test inventory https://review.openstack.org/518964 | 09:31 |
odyssey4me | michelv typically that would happen if you're going through a proxy which is interfering with the ssl cert and you may need to disable cert verification if you're confirmed that's the case and it isn't a connectivity issue | 09:33 |
michelv | No proxy present | 09:35 |
michelv | But I'm still fighting with my data centre settings | 09:35 |
*** chas has joined #openstack-ansible | 09:36 | |
*** chas_ has joined #openstack-ansible | 09:40 | |
michelv | Do you know which network is used for that call? The management bridge? | 09:43 |
*** chas has quit IRC | 09:43 | |
*** vnogin has quit IRC | 09:46 | |
*** vnogin has joined #openstack-ansible | 09:46 | |
*** ArchiFleKs has joined #openstack-ansible | 09:46 | |
*** Rodrigo_BR has joined #openstack-ansible | 09:46 | |
*** Rodrigo_BR has quit IRC | 09:47 | |
*** SmearedBeard has joined #openstack-ansible | 09:53 | |
*** Rodrigo_BR has joined #openstack-ansible | 10:11 | |
*** Rodrigo_BR has quit IRC | 10:12 | |
*** jiaopengju has quit IRC | 10:13 | |
odyssey4me | hmm, that by default will be the container/host's default network as it's talking to the internet - so for the containers it's likely eth0 going through the natted lxcbr0 | 10:20 |
*** markvoelker has joined #openstack-ansible | 10:21 | |
*** mbuil has joined #openstack-ansible | 10:28 | |
hwoarang | hello | 10:42 |
hwoarang | do you know why "include_tasks: "misc/ntp_{{ (ansible_os_family == 'debian') | ternary('debian', 'rpm') }}.yml" returns "No include file was specified to the include" | 10:42 |
hwoarang | i am curious why this ansible magic doesn't work :) | 10:43 |
*** Rodrigo_BR has joined #openstack-ansible | 10:45 | |
*** Rodrigo_BR has quit IRC | 10:46 | |
mardim | Hello | 10:54 |
mardim | is there any good documentation which explains the differences between the ansible returned statuses ? | 10:55 |
mardim | I mean for "ok","skipped" e.t.c | 10:55 |
odyssey4me | ok = nothing changed, changed = something changed, skipped = nothing done because the condition to run the task was not met | 10:56 |
*** vnogin has quit IRC | 10:59 | |
*** vnogin has joined #openstack-ansible | 11:00 | |
*** udesale has quit IRC | 11:00 | |
mardim | odyssey4me, what is the diffrence between the skipped and no status | 11:01 |
mardim | ? | 11:01 |
mardim | this is what troubles me | 11:01 |
odyssey4me | ah, normally ansible connects to the target host before deciding to skip | 11:01 |
odyssey4me | but we've modified the connection plugin to make it decide whether to skip or not before connecting | 11:02 |
odyssey4me | so where you see no status, that's when it could figure out that there's no need to connect because the condition could be figured out without connecting | 11:02 |
mardim | odyssey4me, Really ? | 11:03 |
mardim | odyssey4me, Dodn't know that | 11:03 |
odyssey4me | yup, we did that to speed up deployments | 11:03 |
mardim | didn't* | 11:03 |
mardim | odyssey4me, Sounds really cool :) | 11:04 |
mardim | odyssey4me, So the no status is in reality skipping right ? | 11:04 |
odyssey4me | yes | 11:04 |
odyssey4me | but it shows up as a task with no result | 11:04 |
mardim | odyssey4me, Thanks for clarifying that ;) | 11:05 |
*** gouthamr has joined #openstack-ansible | 11:10 | |
gunix | is there anyone here that integrated kubernetes with osa? | 11:13 |
*** stuartgr has joined #openstack-ansible | 11:17 | |
odyssey4me | gunix that's what magnum does as I understand it - it provides an api to deploy kube on openstack | 11:19 |
odyssey4me | it facilitates it all for you as far as I know - never done it myself | 11:19 |
gunix | oh damn, that name ... "magnum" | 11:20 |
gunix | there were so many bad jokes around that name | 11:20 |
*** huxinhui_ has quit IRC | 11:31 | |
*** ivveh has quit IRC | 11:46 | |
gunix | odyssey4me: do you know anybody that is monitoring osa deployment using prometheus? | 11:56 |
*** vnogin has quit IRC | 11:59 | |
*** vnogin has joined #openstack-ansible | 12:00 | |
odyssey4me | gunix not personally, no - IIRC logan- uses zabbix and I'm not aware of any others who've shared what they're using | 12:01 |
odyssey4me | Rackspace uses its own MaaS product | 12:01 |
*** vnogin has quit IRC | 12:02 | |
*** vnogin has joined #openstack-ansible | 12:03 | |
*** vnogin has quit IRC | 12:04 | |
gunix | odyssey4me: oh yea and you use ansible to get info | 12:05 |
*** askb has quit IRC | 12:05 | |
*** gouthamr has quit IRC | 12:05 | |
*** askb has joined #openstack-ansible | 12:06 | |
*** udesale has joined #openstack-ansible | 12:07 | |
*** shardy is now known as shardy_lunch | 12:09 | |
*** smatzek has joined #openstack-ansible | 12:10 | |
*** vnogin has joined #openstack-ansible | 12:13 | |
*** vnogin has quit IRC | 12:15 | |
*** vnogin has joined #openstack-ansible | 12:16 | |
*** vnogin has quit IRC | 12:17 | |
*** gouthamr has joined #openstack-ansible | 12:20 | |
*** jiaopengju has joined #openstack-ansible | 12:21 | |
*** nshetty is now known as nshetty|call | 12:22 | |
*** vnogin has joined #openstack-ansible | 12:26 | |
*** nshetty|call is now known as nshetty | 12:46 | |
*** hw_wutianwei has quit IRC | 12:47 | |
*** gouthamr has quit IRC | 12:53 | |
*** gouthamr has joined #openstack-ansible | 13:02 | |
*** hachi_ has quit IRC | 13:02 | |
gunix | guys, how does canonical juju deployment compare with osa? | 13:05 |
*** vnogin has quit IRC | 13:07 | |
odyssey4me | dunno, never used it | 13:09 |
*** dave-mccowan has joined #openstack-ansible | 13:16 | |
*** shardy_lunch is now known as shardy | 13:25 | |
*** woodard has quit IRC | 13:25 | |
*** jbadiapa_ has joined #openstack-ansible | 13:27 | |
*** jbadiapa has quit IRC | 13:27 | |
jamesdenton | hey odyssey4me - i am running "openstack-ansible os-neutron-install.yml --tags 'neutron-config'", and am noticing my hosts being processed serially through the "Install neutron services" play. Is that expected? | 13:28 |
jiaopengju | hi, I am using openstack-ansible to deploy an AIO environment, but found some errors, anyone could help me? | 13:29 |
mgariepy | morning everyone | 13:30 |
jiaopengju | fatal: [aio1_utility_container-bf8c05ea]: UNREACHABLE! => {"changed": false, "msg": "SSH Error: data could not be sent to remote host \"172.29.236.100\". Make sure this host can be reached over ssh", "unreachable": true} | 13:30 |
jiaopengju | actually, 172.29.236.100 is not the ip of aio1_utility_container-bf8c05ea | 13:31 |
jiaopengju | any ideas? | 13:31 |
jiaopengju | https://paste.ubuntu.com/25960631/ | 13:31 |
jamesdenton | that is probably the VIP for haproxy. I would expect to see that configured as a secondary address on the underlying aio1 node | 13:32 |
mgariepy | jamesdenton, https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-neutron-install.yml#L97 | 13:33 |
mgariepy | some plays run in serial. | 13:33 |
jiaopengju | jamesdenton: yes, I find this IP (172.29.236.100) in AIO node | 13:35 |
jamesdenton | mgariepy I guess that includes 'Install neutron services' in common-playbooks/neutron.yml, huh | 13:35 |
*** nshetty has quit IRC | 13:35 | |
odyssey4me | @jamesdenton yes - the serial processing is to ensure that services do not all restart at once, taking your cloud down | 13:35 |
odyssey4me | jamesdenton ie rolling restarts, instead of restart-everything-at-ince | 13:36 |
odyssey4me | *once | 13:36 |
jamesdenton | Hmmm. Right. | 13:36 |
odyssey4me | it's done in the specified order given in the rolling upgrade documentation from each service | 13:36 |
*** gouthamr has quit IRC | 13:38 | |
ccha2 | jamesdenton: did you use lxc-ls -f to get container ips ? | 13:38 |
*** armaan has quit IRC | 13:38 | |
jamesdenton | odyssey4me Looks like https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-neutron-install.yml#L89 is more my scenario, as it would match compute nodes and agent containers. But same thing applies | 13:39 |
*** armaan has joined #openstack-ansible | 13:39 | |
jamesdenton | I understand rolling restarts for the agents, but for computes.. having to process those serially might take forever, no? | 13:39 |
ccha2 | oups it was for jiaopengju | 13:39 |
jamesdenton | i've got two nodes and it's annoying :D | 13:39 |
ccha2 | who want to know the ip of aio1_utility_container | 13:39 |
jamesdenton | by agents i mean agent containers or server containers, sorry | 13:39 |
odyssey4me | @jamesdenton that's why each serial process is overridable | 13:40 |
jiaopengju | ccha2: yes, all the containers runs | 13:40 |
jamesdenton | odyssey4me care to enlighten me? :) | 13:40 |
jamesdenton | just neutron_agent_serial=0? | 13:40 |
odyssey4me | in that particular line, the default is 50% serialisation (half in one set, then the other half in another set)... if you want to change it to do everything at once, then set 'neutron_agent_serial: 100%' in user_variables.yml and it will always do them all at once | 13:41 |
*** hachi_ has joined #openstack-ansible | 13:41 | |
odyssey4me | it will still do server, then l2 agents, then other agents | 13:41 |
jamesdenton | ahh, ok. I guess my two node cluster is not helping demonstrate that | 13:41 |
jamesdenton | thank you very much for pointing that out. super helpful | 13:42 |
odyssey4me | if the services are all on the same host, then it will upgrade them all at once, then restart them in the right order | 13:42 |
odyssey4me | it won't re-do any of them though - that's why the host list is a bit weird - it prevents reprocessing the same hosts | 13:43 |
jiaopengju | ccha2: the ip of aio1_utility_container is 172.29.237.159, and it runs well. But 172.29.236.100 on AIO node may have some issues, I can not use ssh to connect it | 13:43 |
jamesdenton | @odyssey4me fair enough. thanks again! | 13:44 |
odyssey4me | sure thing | 13:44 |
ccha2 | jiaopengju: you want to connect on aio1_utility_container ? | 13:44 |
odyssey4me | it takes a bit longer, but the defaults are meant to be a 'safe' option to try to minimise control and data plane down time during inter-series or intra-series upgrades | 13:44 |
odyssey4me | or config changes for that matter | 13:44 |
jamesdenton | Is there any way to run that playbook but exclude certain tasks, such as 'Restart neutron services'? | 13:45 |
jiaopengju | ccha2: no, i am deploying an AIO environment with openstack-ansible. But in the step ‘openstack-ansible setup-infrastructure.yml’, it failed | 13:45 |
jamesdenton | that's great - i think my two node cluster was skewing that. | 13:46 |
jiaopengju | ccha2: I have consulted this document, https://docs.openstack.org/openstack-ansible/pike/contributor/quickstart-aio.html | 13:47 |
ccha2 | 172.29.236.100 is br-mgmt | 13:47 |
ccha2 | does it UP ? | 13:47 |
jamesdenton | is br-mgmt up? 'ip link show br-mgmt' | 13:47 |
jiaopengju | ccha2: yes. inet 172.29.236.100/22 brd 172.29.239.255 scope global br-mgmt | 13:48 |
jiaopengju | br-mgmt: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT qlen 1000 | 13:48 |
jiaopengju | link/ether fe:08:71:2f:1a:d4 brd ff:ff:ff:ff:ff:ff | 13:48 |
jiaopengju | Unable to negotiate with 172.29.236.100 port 22: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha2-512 | 13:49 |
ccha2 | I installed yesterday AIO got no problem | 13:49 |
ccha2 | with from git with tag 16.0.2 | 13:49 |
jiaopengju | ccha2: on ubuntu or CentOS? | 13:49 |
ccha2 | ubuntu xenial | 13:50 |
jiaopengju | ccha2: I am using CentOS, :( | 13:50 |
jiaopengju | ccha2: can you connect to 172.29.236.100 with ssh? | 13:50 |
ccha2 | yes it works | 13:51 |
ccha2 | it's same as ssh localhost | 13:51 |
ccha2 | centos did you check about firewall? | 13:53 |
jiaopengju | ccha2: thank you ccha2. may be this error ‘Unable to negotiate with 172.29.236.100 port 22: no matching MAC found. ’ cause the issue. | 13:53 |
odyssey4me | jamesdenton hmm, if you can turn handlers off then I guess you could - because that's done in the handlers: https://github.com/openstack/openstack-ansible-os_neutron/blob/c846d75360b68ab897f4bccd8e00b63d2d55b2ae/handlers/main.yml | 13:53 |
odyssey4me | jamesdenton that's the only time the policy file changes are copied over and the db contract is done too | 13:53 |
jiaopengju | ccha2: the firewall is inactive | 13:53 |
ccha2 | jiaopengju: what about ping ? | 13:54 |
odyssey4me | the handlers would only fire if something changes though | 13:54 |
ccha2 | just ssh not working? | 13:54 |
*** esberglu has joined #openstack-ansible | 13:54 | |
jiaopengju | ccha2: ping works well | 13:54 |
jiaopengju | ccha2: yes | 13:54 |
odyssey4me | jamesdenton could you explain what you're trying to achieve? | 13:54 |
jamesdenton | In this case, I'm trying to stage a config change as part of a maintenance, but don't want to restart the service because there's some other work that has to be done prior | 13:54 |
*** gouthamr has joined #openstack-ansible | 13:54 | |
odyssey4me | ah yes | 13:54 |
ccha2 | jiaopengju: ssh from deployement server or other server ? | 13:55 |
*** aludwar has joined #openstack-ansible | 13:55 | |
ccha2 | I did on the same server | 13:55 |
jiaopengju | ccha2: I did on the same server too | 13:55 |
odyssey4me | jamesdenton we have a spec up to divide up the tasks to allow that sort of thing: https://github.com/openstack/openstack-ansible-specs/blob/master/specs/queens/deployment-stages.rst | 13:55 |
ccha2 | what about ssh localhost ? | 13:55 |
odyssey4me | unfortunately I've not had much time to get onto doing it | 13:55 |
jamesdenton | excellent. no worries. | 13:55 |
jiaopengju | ccha2: all the ips of lxc containers can be connected with ssh, except this | 13:56 |
*** vnogin has joined #openstack-ansible | 13:56 | |
odyssey4me | @jamesdenton for now I think the only way it can be done (it's not perfect, just an approximation) is to do the -install and -config tags seperately | 13:57 |
*** szaher has quit IRC | 13:58 | |
odyssey4me | it's not a properly tested path though, so YMMV | 13:58 |
*** yifei1 has joined #openstack-ansible | 13:58 | |
jamesdenton | it appears that neutron-config tags still restarts the services if there was a change | 13:58 |
jamesdenton | i can live with it | 13:59 |
*** vnogin has quit IRC | 13:59 | |
*** vnogin has joined #openstack-ansible | 14:00 | |
*** szaher has joined #openstack-ansible | 14:02 | |
*** vnogin has quit IRC | 14:05 | |
*** dmsimard|off is now known as dmsimard | 14:05 | |
idlemind | ccha2 you still there? | 14:05 |
*** vnogin has joined #openstack-ansible | 14:07 | |
*** chas has joined #openstack-ansible | 14:11 | |
*** chas_ has quit IRC | 14:14 | |
*** Oku_OS has quit IRC | 14:17 | |
openstackgerrit | Dimitrios Markou proposed openstack/openstack-ansible-os_neutron master: Add hosts to ODL test inventory https://review.openstack.org/518964 | 14:17 |
*** Oku_OS has joined #openstack-ansible | 14:22 | |
*** armaan has quit IRC | 14:23 | |
*** armaan has joined #openstack-ansible | 14:23 | |
*** hamzy_ has quit IRC | 14:24 | |
*** smatzek has quit IRC | 14:25 | |
*** vnogin has quit IRC | 14:26 | |
*** vnogin has joined #openstack-ansible | 14:27 | |
*** weezS has joined #openstack-ansible | 14:29 | |
*** jwitko_ has joined #openstack-ansible | 14:29 | |
*** vnogin has quit IRC | 14:39 | |
mbuil | Hey guys, we would like to use the redirect_http_port in haproxy.cfg so that the opendaylight uses 8282 as frontend but 8181 as backend. I was checking the haproxy.cfg template and I noticed that the service must have haproxy_ssl property defined to use redirect_http_port. Is there any reason for that? | 14:41 |
mbuil | this is what I mean --> https://github.com/openstack/openstack-ansible-haproxy_server/blob/master/templates/service.j2#L26 | 14:42 |
*** savvas has quit IRC | 14:42 | |
logan- | i don't think redirect_http_port will do what you want it to do | 14:42 |
*** vnogin has joined #openstack-ansible | 14:43 | |
*** woodard has joined #openstack-ansible | 14:43 | |
logan- | it will provide a 301 to the new port | 14:43 |
logan- | to the frontend client | 14:43 |
*** savvas has joined #openstack-ansible | 14:43 | |
*** markvoelker has quit IRC | 14:43 | |
Bico_Fino | Hi odyssey4me | 14:43 |
logan- | all you need to do is bind to a different frontend port, no need to provide a redirect I think | 14:43 |
*** markvoelker has joined #openstack-ansible | 14:43 | |
Bico_Fino | odyssey4me https://gist.github.com/bicofino/19b97b818078045b0842b22f42fe0040 | 14:43 |
Bico_Fino | finished the deploying Pike with OVS. | 14:43 |
mbuil | logan- I tried that using: haproxy_port: 8282 but this is what I get ==> https://hastebin.com/rabaruluzi.vbs | 14:44 |
mbuil | logan- 8282 ends up in both frontend and backend | 14:45 |
logan- | set haproxy_backend_port: 8181 | 14:45 |
logan- | https://github.com/openstack/openstack-ansible-haproxy_server/blob/d37a83f829d6d24d5b1f5bfd605fce9b4476b3a2/templates/service.j2#L3-L8 | 14:46 |
logan- | :) | 14:46 |
idlemind | fatal: [hc1_repo_container-98f82cb4]: FAILED! => {"changed": false, "failed": true, "msg": "AnsibleUndefinedVariable: 'local_packages' is undefined"} | 14:46 |
idlemind | ^^ in openstack-ansible-repo_build | 14:46 |
mbuil | logan- oh! I missed that one, thanks :) | 14:47 |
idlemind | TASK [repo_build : Build package requirements file] | 14:47 |
idlemind | was looking for a way to update my pkg cache for new roles outside of running setup-infrastructure.yml (which takes ~ 30 mins) | 14:48 |
*** smatzek has joined #openstack-ansible | 14:53 | |
*** smatzek has quit IRC | 14:53 | |
odyssey4me | idlemind just run repo-build - that does only the build of the repo, not the rest of the infra | 14:53 |
*** smatzek has joined #openstack-ansible | 14:53 | |
idlemind | odyssey4me thx i'll try that w/the next project i add | 14:54 |
*** vnogin has quit IRC | 14:55 | |
Bico_Fino | I'm changing Debug: true to Debug: false inside user_variables.yml, to apply it just run setup-openstack again or setup-infra? | 14:55 |
openstackgerrit | Manuel Buil proposed openstack/openstack-ansible master: Fix port config in haproxy to avoid conflict https://review.openstack.org/519661 | 14:58 |
*** vnogin has joined #openstack-ansible | 14:59 | |
*** hachi__ has joined #openstack-ansible | 15:00 | |
openstackgerrit | Dimitrios Markou proposed openstack/openstack-ansible-os_neutron master: [DO_NOT_MERGE] Add OvS-NSH support https://review.openstack.org/517259 | 15:00 |
*** galstrom_zzz is now known as galstrom | 15:00 | |
*** Brew has joined #openstack-ansible | 15:02 | |
*** hachi_ has quit IRC | 15:04 | |
*** jiaopengju has quit IRC | 15:07 | |
odyssey4me | idlemind by pkg cache do you mean the python wheels/venvs, or the apt cache? | 15:08 |
*** gouthamr has quit IRC | 15:13 | |
*** gouthamr has joined #openstack-ansible | 15:15 | |
*** hachi__ has quit IRC | 15:17 | |
*** mrch has quit IRC | 15:19 | |
*** armaan has quit IRC | 15:24 | |
*** armaan has joined #openstack-ansible | 15:24 | |
cloudnull | mornings | 15:27 |
*** phalmos has joined #openstack-ansible | 15:32 | |
openstackgerrit | Merged openstack/openstack-ansible-repo_build stable/pike: SUSE: Reduced required distro packages https://review.openstack.org/518763 | 15:33 |
mbuil | hey guys, anybody aware of the following error in the limestone-ubuntu-xenial gate ==> "fatal: [aio1_repo_container-42479b71]: FAILED! => {"attempts": 5, "cache_update_time": 1510672772, "cache_updated": false, "changed": false, "failed": true, "msg": "'/usr/bin/apt-get -y -o \"Dpkg::Options::=--force-confdef\" -o \"Dpkg::Options::=--force-confold\" install 'git' 'lsyncd' 'nginx-extras'' failed: E: Unable to correct problems, you have held | 15:38 |
mbuil | broken packages.\n", "rc": 100," | 15:38 |
logan- | not sure, maybe a transient issue. thanks for the heads up, will keep an eye on it | 15:48 |
openstackgerrit | Merged openstack/ansible-hardening stable/pike: Always search for ssh keys https://review.openstack.org/519364 | 15:48 |
openstackgerrit | Merged openstack/ansible-hardening stable/pike: Fix filesystem permission masks https://review.openstack.org/518760 | 15:48 |
openstackgerrit | Merged openstack/ansible-hardening stable/pike: Always quote the filesystem permissions https://review.openstack.org/519363 | 15:48 |
odyssey4me | mhayden andymccr question posed in https://review.openstack.org/#/c/518013/7/defaults/main.yml which is holding the patch back | 15:49 |
andymccr | that ones for you mhayden | 15:53 |
andymccr | odyssey4me: http://rhel7stig.readthedocs.io/en/latest/medium.html#v-72247-the-system-must-not-permit-direct-logons-to-the-root-account-using-remote-access-via-ssh-rhel-07-040370 | 16:03 |
andymccr | looks like a no | 16:03 |
hwoarang | :( | 16:04 |
andymccr | its settable now though if you pass that patch ;D | 16:04 |
andymccr | hint hint | 16:04 |
odyssey4me | sooo mhayden will more than likely agree that as long as we document that we have a different default, and why it's different, it's more than likely ok - so I'm still waiting for mhayden's expert opinion | 16:06 |
odyssey4me | well, I guess we could merge it and adjust our default in group_vars and move on with it | 16:06 |
*** pedja has joined #openstack-ansible | 16:07 | |
odyssey4me | done | 16:08 |
*** Oku_OS is now known as Oku_OS-away | 16:08 | |
openstackgerrit | Merged openstack/ansible-hardening stable/pike: Fix logic error https://review.openstack.org/519485 | 16:10 |
*** galstrom is now known as galstrom_zzz | 16:11 | |
*** phalmos has quit IRC | 16:17 | |
mbuil | logan-: Same error again in limestone-ubuntu-xenial :( | 16:19 |
*** vnogin has quit IRC | 16:22 | |
*** SerenaFeng has joined #openstack-ansible | 16:22 | |
*** lihi has quit IRC | 16:22 | |
hwoarang | mbuil: but it doesn't matter. This is not a voting gate | 16:23 |
hwoarang | so just ignore it for now and wait for the Zuul report | 16:23 |
*** vnogin has joined #openstack-ansible | 16:24 | |
*** lihi has joined #openstack-ansible | 16:24 | |
mbuil | hwoarang: ok! I thought this was some sort of gate for the rest of the Zuul gates. Thanks | 16:24 |
*** SerenaFeng has quit IRC | 16:25 | |
*** phalmos has joined #openstack-ansible | 16:26 | |
*** yifei1 has quit IRC | 16:33 | |
openstackgerrit | Merged openstack/ansible-hardening master: Change PermitRootLogin to allow alternate options https://review.openstack.org/518013 | 16:34 |
openstackgerrit | Merged openstack/ansible-hardening stable/ocata: Fix logic error https://review.openstack.org/519487 | 16:34 |
*** ZiLi0n has joined #openstack-ansible | 16:36 | |
openstackgerrit | Merged openstack/ansible-hardening stable/ocata: rhel7stig: sshd.yml: Respect the STIG sshd configuration https://review.openstack.org/517234 | 16:37 |
andymccr | yeah i think we should do that | 16:38 |
ZiLi0n | Hi everyone. Yesterday I did run nova-install playbook after changing cpu_allocation_ratio and memory_allocation_ratio via nova_conf_override in user_variables.yml. I see that the values did change in nova.conf as expected, however when I try to create a VM, I still cannot overcommit... Do I need to restart OpenStack? Running Pike 16.2 | 16:38 |
*** chas has quit IRC | 16:38 | |
andymccr | ZiLi0n: if you change the conf via OSA the services should get restarted appropriately - is the instance build failing because it says the hosts dont have resources? | 16:39 |
*** germs has joined #openstack-ansible | 16:40 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible master: Use 'PermitRootLogin 'without-password'' https://review.openstack.org/519696 | 16:41 |
*** germs1 has joined #openstack-ansible | 16:43 | |
*** germs has quit IRC | 16:45 | |
*** germs1 has quit IRC | 16:46 | |
*** germs has joined #openstack-ansible | 16:46 | |
*** pcaruana has quit IRC | 16:48 | |
ZiLi0n | andymccr yes, it says no valid host found. I can double check again the logs | 16:51 |
openstackgerrit | Merged openstack/ansible-hardening stable/pike: rhel7stig: sshd.yml: Respect the STIG sshd configuration https://review.openstack.org/517233 | 16:52 |
*** phalmos_ has joined #openstack-ansible | 16:54 | |
*** vnogin has quit IRC | 16:55 | |
savvas | Hi guys, just a random question here but am I the only one who consistently seems to struggle with the repo build tasks on OA? I've been having issues with this consistently on ubuntu 16.04, trying to deploy 15.1.10, 16.0.2 and the new 17.0.0.0b1 | 16:56 |
*** phalmos has quit IRC | 16:57 | |
*** michelv has quit IRC | 17:05 | |
*** armaan has quit IRC | 17:06 | |
*** armaan has joined #openstack-ansible | 17:06 | |
*** armaan has quit IRC | 17:06 | |
idlemind | so, glance deployed with: | 17:07 |
idlemind | image_hosts: | 17:07 |
idlemind | hc1: | 17:07 |
idlemind | ip: 10.241.41.51 | 17:07 |
idlemind | nothing else set, i go into horizon and try to create an image. with file upload it get an error "[object Object]" and when i do a URL i get a 403 error | 17:07 |
SmearedBeard | savvas does it fail on the rabbitmq grep? | 17:07 |
SmearedBeard | I have the same, and seen someone else... I guess someone should raise an issue // send a fix | 17:07 |
savvas | it mostly crashes with issues on grabbing versions from the GIT repo | 17:08 |
savvas | but for example right now I am seeing a timeout on waiting for the privilege escalation prompt | 17:08 |
savvas | and I've seen a few scenarios where some files are not grabbed properly of missing as well, and it crashes when looking for those files | 17:09 |
savvas | I've tried running the repo container build outside of the setup-hosts/infrastructure and that will work but then if you try again to run setup-infrastructure it will basically crash on any of the above again | 17:10 |
savvas | tried 2 dev environments, one based on virtual box, other on bare metal | 17:10 |
idlemind | for the git repos doesn't it retry like 360 times or something right now? | 17:11 |
idlemind | or maybe it tries once and runs a wait task 360 times | 17:11 |
savvas | well for example the build which is running now | 17:11 |
savvas | failed on : fatal: [infra1_repo_container-322d2cb1]: FAILED! => {"failed": true, "msg": "Timeout (7s) waiting for privilege escalation prompt: "} | 17:11 |
savvas | then when I enter the repo container I see it is still grabbing all the files from GIT | 17:11 |
*** udesale has quit IRC | 17:11 | |
savvas | so I am actually waiting for that to finish now and run it again, see if that makes any difference | 17:12 |
savvas | but it crashed pretty much instantly, there was no timeout or retry of a considerable period | 17:12 |
idlemind | there is a bug against openstack-gate recently that seems to match up | 17:14 |
*** bhujay has joined #openstack-ansible | 17:21 | |
*** michelv has joined #openstack-ansible | 17:21 | |
*** chas has joined #openstack-ansible | 17:22 | |
*** chas has quit IRC | 17:23 | |
idlemind | ok, i can create images in glance via openstack cli on the utility container just not in horizon | 17:23 |
*** savvas_ has joined #openstack-ansible | 17:29 | |
*** savvas_ has quit IRC | 17:29 | |
*** savvas has quit IRC | 17:29 | |
*** savvas has joined #openstack-ansible | 17:30 | |
*** SmearedBeard has quit IRC | 17:32 | |
odyssey4me | savvas sounds like a pretty serious and very uncommon problem there | 17:33 |
odyssey4me | basically it's trying to sudo, and can't | 17:33 |
*** chyka has joined #openstack-ansible | 17:33 | |
odyssey4me | are you running the playbooks as root? | 17:33 |
savvas | yes I am | 17:34 |
odyssey4me | odd | 17:34 |
savvas | it is my first experience with openstack ansible so I figured I must be doing something horribly wrong, considering so many people use it | 17:34 |
odyssey4me | well, you'll have to figure out what's going on there - never seen that myself | 17:34 |
hwoarang | odyssey4me: i think we have seen that in the past and it basically happens on really busy hosts where it's so busy to do stuff that sudo timesout | 17:34 |
savvas | ye and it basically won't do much without the repo as it is the fundamental piece to the infrastructure lol | 17:34 |
odyssey4me | ok, so then it sounds like you're out of CPU/RAM | 17:34 |
odyssey4me | what sort of resources do you have available on the host? | 17:35 |
odyssey4me | it might be disk IO too | 17:35 |
hwoarang | https://bugs.launchpad.net/bugs/1711376 | 17:35 |
openstack | Launchpad bug 1711376 in openstack-ansible "intermittent AIO error: Timeout (7s) waiting for privilege escalation prompt" [Undecided,Fix released] - Assigned to zhongshengping (chdzsp) | 17:35 |
*** SmearedBeard has joined #openstack-ansible | 17:36 | |
savvas | mmm actually you are not wrong here @odyssey4me, I just realized that this particular container runs on 1G ram. I've had issues on 8GB containers too though, but not sure if I had that timeout error there | 17:36 |
savvas | let me fix this first and run it agin | 17:37 |
savvas | thanks | 17:37 |
*** bhujay has quit IRC | 17:39 | |
openstackgerrit | Victor Morales proposed openstack/openstack-ansible-repo_build master: Fix endif syntax for Download req task https://review.openstack.org/519707 | 17:42 |
*** armaan has joined #openstack-ansible | 18:00 | |
hwoarang | odyssey4me: logan-: do you have a sec? | 18:01 |
hwoarang | i am looking into the log collection for the integration repo and i am noticing something strange on the gates | 18:01 |
logan- | yup | 18:01 |
logan- | what's up | 18:01 |
hwoarang | http://logs.openstack.org/48/516448/8/check/openstack-ansible-deploy-aio-opensuse-423/438d392/job-output.txt.gz#_2017-11-14_17_07_58_405246 As you can see on that line the job does nothing for 10 minutes | 18:02 |
hwoarang | logan-: this is on your patchset https://review.openstack.org/#/c/516448/ | 18:02 |
hwoarang | between 16:57 and 17:07 there was no output | 18:02 |
logan- | interesting | 18:03 |
hwoarang | logan-: happens on centos7 and opensuse but not ubuntu | 18:06 |
logan- | i wonder if it is something specific with that patch or if we're seeing other patches timing out w/ similar behavior | 18:06 |
hwoarang | there are other patches too | 18:06 |
hwoarang | where the log collection happens in the run playbook. at first i thought that collecting logs takes forever but i am surprised to see it on your patch too | 18:07 |
*** mbuil has quit IRC | 18:07 | |
*** chas has joined #openstack-ansible | 18:08 | |
hwoarang | maybe we have to undo the 'exit' trap | 18:08 |
logan- | yea seems like ansible hasn't seen the exit | 18:08 |
hwoarang | before we really exit the script | 18:08 |
logan- | good idea | 18:09 |
logan- | i guess we could do that easily in exit_state and see how it goes | 18:09 |
hwoarang | yeah... not sure why that would be distro specific though... | 18:10 |
hwoarang | maybe some shell options or whatever | 18:10 |
hwoarang | do you think you could try that on your patchset? | 18:10 |
logan- | yep | 18:10 |
logan- | sec | 18:10 |
*** chas has quit IRC | 18:12 | |
hwoarang | interesting problem | 18:14 |
captaindave | join #ansible | 18:14 |
captaindave | Sorry. | 18:14 |
*** ZiLi0n has quit IRC | 18:16 | |
openstackgerrit | Logan V proposed openstack/openstack-ansible master: Fix automatic log copying in Zuul runs https://review.openstack.org/516448 | 18:16 |
logan- | yeah i see we're executing in the command module. maybe some diff with the python or bash version causes it | 18:17 |
hwoarang | lets see. thanks for editing it | 18:19 |
*** galstrom_zzz is now known as galstrom | 18:20 | |
*** SmearedBeard has quit IRC | 18:20 | |
*** pbandark has quit IRC | 18:21 | |
openstackgerrit | Merged openstack/openstack-ansible-tests stable/pike: Resolve bashate E004 error https://review.openstack.org/519285 | 18:25 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca stable/pike: Updated from OpenStack Ansible Tests https://review.openstack.org/516299 | 18:33 |
spotz | odyssey4me: cloudnull - do either of you know when stable/newton will turn into newton-eol? | 18:40 |
cloudnull | I think VERY soon. | 18:46 |
cloudnull | I believe we have some time after nova finally goes EOL | 18:47 |
cloudnull | but its not a lot | 18:47 |
*** hachi_ has joined #openstack-ansible | 18:48 | |
*** germs has quit IRC | 18:48 | |
spotz | cloudnull: Ok I started to do a doc patch during one of oour sessions but noticed the branches hadn't changed yet | 18:49 |
*** chas has joined #openstack-ansible | 18:53 | |
*** chas has quit IRC | 18:54 | |
SamYaple | logan-: can i takeover https://review.openstack.org/#/c/383462/ ? | 18:58 |
*** kelv_ has joined #openstack-ansible | 18:58 | |
logan- | sure | 19:00 |
SamYaple | logan-: had you tested that patch previously? (i know i know, it was a yearago) | 19:02 |
logan- | yep | 19:03 |
logan- | it worked at the time | 19:03 |
SamYaple | cool. sucks you never got any feedback on it | 19:03 |
*** poopcat has joined #openstack-ansible | 19:03 | |
SamYaple | cleaning up the iptables rules in the deb and rpm files now. might get it merged | 19:03 |
logan- | are you seeing udp checksum issues related to that? iirc they stopped overriding a lot of the neutron dhcp funcs sometime after that | 19:06 |
SamYaple | logan-: if you look at the patch, they were adding in a global checksum fix | 19:07 |
SamYaple | since i dont installthat package, i was having todothat. and i didnt wantto | 19:07 |
logan- | ahh | 19:07 |
SamYaple | stumbled on your patch | 19:07 |
SamYaple | here weare | 19:07 |
*** albertcard1 has joined #openstack-ansible | 19:08 | |
*** chas has joined #openstack-ansible | 19:09 | |
*** poopcat has quit IRC | 19:09 | |
*** chas has quit IRC | 19:13 | |
*** chas has joined #openstack-ansible | 19:13 | |
*** stuartgr has left #openstack-ansible | 19:17 | |
prometheanfire | evrardjp: which sabaton album did you suggest? | 19:18 |
evrardjp[m] | any really, but the full live I've shown you was nice. don't remember it's name. | 19:20 |
prometheanfire | ya, I'm just listening to the last stand now | 19:21 |
*** michelv has quit IRC | 19:21 | |
*** dave-mccowan has quit IRC | 19:21 | |
evrardjp[m] | last stand is kinda a deception. but i still find it OK. | 19:24 |
evrardjp[m] | art of war, heroes, carolus rex are amongst my favorites | 19:25 |
idlemind | any ideas on where to start troubleshooting glance image adding in horizon? it works from the command line with the openstack cli command on the utility container. in horizon i just a generic "error" | 19:26 |
spotz | idlemind: Have you checked the logs? | 19:26 |
idlemind | spotz where would the logs from the webui show up? in the rsyslog? | 19:27 |
spotz | idlemind: which release you running? | 19:28 |
idlemind | stable/pike | 19:28 |
idlemind | ok in rsyslog i have web error logs | 19:29 |
idlemind | looking for anything relavent there | 19:29 |
prometheanfire | ya, I know I've heard ghost division before | 19:29 |
electrocucaracha | hwoarang: | 19:30 |
electrocucaracha | hwoarang: I'm going to try to reproduce the error to paste it | 19:30 |
*** Rodrigo_BR has joined #openstack-ansible | 19:30 | |
spotz | idlemind: Yeah I'd lean towards horizon vs glance as the cli worked | 19:30 |
evrardjp[m] | prometheanfire: :D that's awesome in concert :) | 19:31 |
idlemind | thx i reran the os-glance playbook and it came back clean w/the same error, i'll try horizon next just to make sure something wasn't messed up then i'll keep troubleshooting | 19:31 |
*** MikeW has joined #openstack-ansible | 19:31 | |
evrardjp[m] | OK back to bed. | 19:31 |
idlemind | is there a webview for the rsyslog or is it commandline only? | 19:31 |
prometheanfire | nn | 19:31 |
electrocucaracha | hwoarang: it's not informative at all but at least that gives an idea of what's happening. Maybe I can use the alternative that you pasted | 19:31 |
MikeW | Hey chat I'm starting my new deployment to our DC with Cisco ACI APIC stuff... anyone on here have any horror stories to share? | 19:32 |
*** SmearedBeard has joined #openstack-ansible | 19:32 | |
MikeW | I finished deployment one using real networks, and hopefully this will go the same | 19:32 |
Rodrigo_BR | I am facing the same problem on last 2 days, the horizon and api is very slow response on a new deploy... Someone Can execute this command for the time reference ? "time openstack list user" my time is 0m5.712s. | 19:38 |
SamYaple | Rodrigo_BR: real0m2.493s | 19:39 |
SamYaple | over the public ineternet too ^ | 19:39 |
Rodrigo_BR | SamYaple: thank you | 19:40 |
SamYaple | Rodrigo_BR: inside the environment real 0m1.395s | 19:40 |
Rodrigo_BR | I am spend around 10 sec to login in horizon as admin, someone have a Ideia ? | 19:42 |
prometheanfire | you think these scripts would be good to add to osa-ops? https://github.com/rcbops/rpc-integration/tree/master/rpc-ironic/scripts | 19:43 |
MikeW | Rodrigo_BR: Check your memcached and rabbitmq services and make sure they are all running. I've seen that cause issues on responsiveness | 19:44 |
SamYaple | Rodrigo_BR: tough question without more info. could you provide more info about your setup? that doesnt seem *entirely* unreasonable | 19:44 |
*** cjloader_ has joined #openstack-ansible | 19:46 | |
Rodrigo_BR | SamYaple: I have 3 controllers on virtual machines, with 24GB memory and 8 cores. no compute nodes or storages nodes, the cpu load average is 0.17 de memory has 11g available. | 19:48 |
SamYaple | the virtual machine bit might be causing the token generation to take a little bit of time to generate compared to bare metal. i would benchmark that after youve checked memcache is working (rabbitmq shouldnt be getting involved here, but just makesureeverything is healthly) | 19:50 |
SamYaple | also confirm all controllers can talkto all memcached servers | 19:50 |
Rodrigo_BR | MikeW SamYaple All containers are running, I check the processes for memcache and rabbitmq inside the containers and all are running. | 19:51 |
*** hachi_ has quit IRC | 19:52 | |
*** vnogin has joined #openstack-ansible | 19:52 | |
SamYaple | Rodrigo_BR: running isnt quite enoughhere, also check connectivity | 19:52 |
Rodrigo_BR | SamYaple: Sorry I don't know how to check connectivity, I will go search in google. | 19:55 |
SamYaple | Rodrigo_BR: a simple `echo get stats | nc <memcacheserver> 11211` | 19:57 |
SamYaple | from each controller to all memcache servers | 19:57 |
SamYaple | wejust want to make sure they can talk | 19:57 |
*** vnogin has quit IRC | 20:00 | |
*** hybridpollo has joined #openstack-ansible | 20:02 | |
Rodrigo_BR | SamYaple: responded "END" | 20:02 |
*** cshen_ has joined #openstack-ansible | 20:03 | |
SamYaple | yea thats cool | 20:03 |
SamYaple | so if all memcache servers respond that way and you test all memcached instances from all hosts, then youre good | 20:04 |
SamYaple | were just ensuring connectivity isall | 20:04 |
Rodrigo_BR | SamYaple: Yes I tested all controller against all memcache containers | 20:06 |
openstackgerrit | Matthew Thode proposed openstack/openstack-ansible-ops master: Add ironic image generation and node registration scripts https://review.openstack.org/519737 | 20:07 |
*** shardy has quit IRC | 20:07 | |
*** ccha2 has quit IRC | 20:07 | |
*** ccha2 has joined #openstack-ansible | 20:08 | |
prometheanfire | well, there you go | 20:08 |
prometheanfire | cjloader_: ^ | 20:08 |
*** hybridpollo has quit IRC | 20:09 | |
*** pcaruana has joined #openstack-ansible | 20:12 | |
cjloader_ | prometheanfire: reviewed | 20:13 |
openstackgerrit | Matthew Thode proposed openstack/openstack-ansible-ops master: Add ironic image generation and node registration scripts https://review.openstack.org/519737 | 20:15 |
*** cshen_ has quit IRC | 20:16 | |
*** armaan has quit IRC | 20:17 | |
openstackgerrit | Merged openstack/openstack-ansible-ops master: Specify containers to destroy https://review.openstack.org/517380 | 20:25 |
*** cshen_ has joined #openstack-ansible | 20:28 | |
openstackgerrit | Merged openstack/openstack-ansible master: Use 'PermitRootLogin 'without-password'' https://review.openstack.org/519696 | 20:34 |
openstackgerrit | Merged openstack/openstack-ansible-tests stable/pike: Implement retries for git clones https://review.openstack.org/519274 | 20:38 |
*** albertcard1 is now known as poopcat | 20:42 | |
openstackgerrit | Matthew Thode proposed openstack/openstack-ansible-ops master: Add ironic image generation and node registration scripts https://review.openstack.org/519737 | 20:42 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/openstack-ansible-os_monasca stable/pike: Updated from OpenStack Ansible Tests https://review.openstack.org/516299 | 20:45 |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible master: [DNM] - Testing reduced packages https://review.openstack.org/507451 | 20:45 |
*** gouthamr has quit IRC | 20:53 | |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible master: [DNM] - Testing reduced packages https://review.openstack.org/507451 | 20:59 |
*** smatzek has quit IRC | 20:59 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/openstack-ansible-os_almanach stable/pike: Updated from global requirements https://review.openstack.org/517852 | 21:01 |
*** smatzek has joined #openstack-ansible | 21:03 | |
*** armaan has joined #openstack-ansible | 21:05 | |
*** smatzek has quit IRC | 21:07 | |
*** hybridpollo has joined #openstack-ansible | 21:11 | |
*** aludwar has quit IRC | 21:14 | |
*** Neptu_ has quit IRC | 21:14 | |
*** gouthamr has joined #openstack-ansible | 21:22 | |
*** acormier has joined #openstack-ansible | 21:23 | |
*** cshen_ has quit IRC | 21:31 | |
*** vnogin has joined #openstack-ansible | 21:43 | |
*** armaan has quit IRC | 21:46 | |
*** MasterOfBugs has joined #openstack-ansible | 21:47 | |
*** acormier has quit IRC | 21:48 | |
*** acormier has joined #openstack-ansible | 21:48 | |
*** gouthamr has quit IRC | 21:49 | |
*** RandomTech has joined #openstack-ansible | 21:52 | |
RandomTech | hey, quick question, will it hurt anything if a network node has an ip for the storage bridge? | 21:53 |
*** acormier has quit IRC | 21:53 | |
RandomTech | hey cloudnull do you know? | 21:54 |
*** pramodrj07 has joined #openstack-ansible | 21:56 | |
*** smatzek has joined #openstack-ansible | 21:58 | |
*** adreznec_ has joined #openstack-ansible | 21:58 | |
cloudnull | nope wont hurt at all | 21:58 |
cloudnull | we've quite a few environments where we just provision all the bridges and IPs everywhere. | 21:59 |
RandomTech | cool that makes things easier then | 21:59 |
cloudnull | that way we can convert or add a service to a given node later in life | 21:59 |
*** adreznec has quit IRC | 21:59 | |
*** adreznec_ is now known as adreznec | 21:59 | |
RandomTech | i finally figured out why i couldnt bring m network interfaces and bridges back up correctly | 21:59 |
cloudnull | what was it ? | 22:00 |
RandomTech | in line comments :/ | 22:00 |
RandomTech | why does ubuntu hate them. it looked so pretty and helpfull | 22:00 |
*** MasterOfBugs has quit IRC | 22:00 | |
RandomTech | apparently it freaks out if you have in line comments in the middle of a device declaration | 22:00 |
*** smatzek has quit IRC | 22:02 | |
*** pcaruana has quit IRC | 22:02 | |
*** RandomTech has quit IRC | 22:05 | |
*** pcaruana has joined #openstack-ansible | 22:06 | |
*** pcaruana has quit IRC | 22:07 | |
*** threestrands has joined #openstack-ansible | 22:12 | |
*** threestrands has quit IRC | 22:12 | |
*** threestrands has joined #openstack-ansible | 22:12 | |
*** pramodrj07 has quit IRC | 22:13 | |
*** Rodrig___ has joined #openstack-ansible | 22:17 | |
*** SmearedBeard has quit IRC | 22:17 | |
*** jwitko__ has joined #openstack-ansible | 22:21 | |
*** threestrands has quit IRC | 22:21 | |
*** threestrands has joined #openstack-ansible | 22:22 | |
*** threestrands has quit IRC | 22:22 | |
*** threestrands has joined #openstack-ansible | 22:22 | |
Rodrig___ | I am using the proxmox(KVM) for virtualize my controllers nodes, but I am having a bad performance, someone know any issues about this environment ? All mencaches and rabbitmq are running and accessible. I am spend around 10 seconds to login on horizon as admin. I have not ideias ... | 22:23 |
*** jwitko_ has quit IRC | 22:24 | |
*** gouthamr has joined #openstack-ansible | 22:26 | |
*** jwitko__ has quit IRC | 22:28 | |
cloudnull | RandomTech ah I've had that issue before. | 22:34 |
cloudnull | I totally agree, inline comments are wonderful but debian interface files seem to hate them | 22:35 |
cloudnull | Rodrig___: I've not used proxmox for virt so im kinda shooting in the dark | 22:35 |
cloudnull | but are the kvm kernel modules loaded? | 22:35 |
cloudnull | also is vhost_net loaded? | 22:36 |
cloudnull | are you getting poor performance between your VMs directly (not through openstack)? | 22:36 |
cloudnull | also are you seeing any packet loss between your VMs? | 22:37 |
cloudnull | what does the load look like on the hypervisor? | 22:38 |
Rodrig___ | cloudnull:i don't see any packet loss or high latency | 22:40 |
Rodrig___ | the hypervisor have only the controller vm and don't have cpu load | 22:42 |
Rodrig___ | vhost_net is load on the controller vm | 22:43 |
*** vnogin has quit IRC | 22:46 | |
prometheanfire | cloudnull: what do you think about ironic elements being kept in osa-ops? | 22:48 |
*** vnogin has joined #openstack-ansible | 22:48 | |
prometheanfire | it's really just https://github.com/rcbops/rpc-integration/blob/master/rpc-ironic/custom-elements/eureka-element/post-install.d/99-modules for now, and only needed because some hardware is slow | 22:49 |
*** vnogin has quit IRC | 22:54 | |
*** vnogin has joined #openstack-ansible | 22:54 | |
*** jwitko_ has joined #openstack-ansible | 22:54 | |
*** vnogin has quit IRC | 22:57 | |
*** vnogin has joined #openstack-ansible | 22:59 | |
*** Rodrig___ has quit IRC | 23:01 | |
*** Rodrig___ has joined #openstack-ansible | 23:04 | |
*** chas has quit IRC | 23:08 | |
*** pmannidi has joined #openstack-ansible | 23:08 | |
*** chas has joined #openstack-ansible | 23:09 | |
*** Rodrig___ has quit IRC | 23:13 | |
*** chas has quit IRC | 23:14 | |
*** dxiri_ has joined #openstack-ansible | 23:15 | |
*** dxiri has quit IRC | 23:18 | |
*** galstrom is now known as galstrom_zzz | 23:28 | |
*** dave-mccowan has joined #openstack-ansible | 23:42 | |
DimGR | hi | 23:43 |
*** vnogin has quit IRC | 23:45 | |
*** weezS has quit IRC | 23:49 | |
*** vnogin has joined #openstack-ansible | 23:50 | |
*** gouthamr has quit IRC | 23:52 | |
*** Brew has quit IRC | 23:53 | |
*** chas has joined #openstack-ansible | 23:55 | |
*** vnogin has quit IRC | 23:55 | |
*** chas has quit IRC | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!