Thursday, 2018-07-19

*** poopcat has quit IRC00:06
*** tux_ has joined #openstack-ansible00:07
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379400:08
*** markvoelker has quit IRC00:25
*** vnogin has joined #openstack-ansible00:35
*** cshen has joined #openstack-ansible00:38
*** cshen has quit IRC00:42
*** aludwar has quit IRC00:52
*** aludwar has joined #openstack-ansible00:52
*** gregoryo has joined #openstack-ansible01:10
logan-your job needs a 'parent' cloudnull01:20
cloudnulloh good cal.01:20
logan-id suggest parent: openstack-ansible-base01:20
cloudnulldone.01:22
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379401:24
logan-post -> post-run01:25
cloudnulldone.01:25
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379401:26
logan-it queued01:26
logan-:)01:26
cloudnullwinning!01:26
logan-oh nvm01:26
cloudnullhahaha.01:26
logan-still says 'post' int he job def01:27
cloudnullah.01:28
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379401:28
cloudnulli renamed the play, not the job key01:28
cloudnullhahaha01:28
logan-haha01:29
logan-worked this time01:29
cloudnullnow we see it all break in the gate :P01:30
openstackgerritLogan V proposed openstack/openstack-ansible-ops master: [DNM] Test commit should not trigger ELK job  https://review.openstack.org/58380701:31
logan-it didnt queue the elk job for ^ so i think you're gtg01:32
cloudnullwoot!01:38
cloudnullthis will be amazing if it works :)01:39
logan-immediately after you said that it failed lol01:39
logan-1/2 way there.. the job works at least01:40
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379401:43
cloudnullits running at least and it looks like the wiring it working so all winning in my book!01:43
*** evrardjp has quit IRC01:44
openstackgerritweizj proposed openstack/ansible-hardening master: Delete the unnecessary space  https://review.openstack.org/58380801:47
*** vnogin has quit IRC01:49
*** evrardjp has joined #openstack-ansible01:49
*** tux_ has quit IRC01:54
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379401:54
*** evrardjp has quit IRC02:02
*** evrardjp has joined #openstack-ansible02:07
*** tux_ has joined #openstack-ansible02:10
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379402:23
*** markvoelker has joined #openstack-ansible02:26
*** cshen has joined #openstack-ansible02:30
*** cshen has quit IRC02:34
*** dave-mcc_ has quit IRC02:45
*** FrankZhang has quit IRC02:53
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379402:56
*** markvoelker has quit IRC03:00
*** m|y|k has joined #openstack-ansible03:03
*** m|y|k has quit IRC03:03
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379403:04
*** kstev has quit IRC03:05
*** parasitid has quit IRC03:38
*** tux_ has quit IRC03:45
*** parasitid has joined #openstack-ansible03:54
*** markvoelker has joined #openstack-ansible03:58
*** udesale has joined #openstack-ansible04:02
*** pcaruana has joined #openstack-ansible04:23
*** markvoelker has quit IRC04:31
*** pcaruana has quit IRC04:34
*** cshen has joined #openstack-ansible04:36
*** mattinator has quit IRC04:39
*** cshen has quit IRC04:41
*** prasen has joined #openstack-ansible04:51
*** cshen has joined #openstack-ansible04:56
*** cshen has quit IRC05:00
*** mpjetta has quit IRC05:03
*** vnogin has joined #openstack-ansible05:06
*** Bhujay has joined #openstack-ansible05:12
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379405:14
*** mpjetta has joined #openstack-ansible05:21
*** cshen has joined #openstack-ansible05:24
*** markvoelker has joined #openstack-ansible05:27
Taseerevrardjp: only you are between this patch getting through ! => https://review.openstack.org/#/c/571388/05:28
*** wlmbasson_ has joined #openstack-ansible05:28
*** fdegir has quit IRC05:29
*** jamespage has quit IRC05:29
*** wlmbasson has quit IRC05:29
*** aetaric has quit IRC05:29
*** wlmbasson_ is now known as wlmbasson05:29
*** xdfil_ has joined #openstack-ansible05:29
*** jamespage has joined #openstack-ansible05:29
*** cshen has quit IRC05:29
*** xdfil has quit IRC05:29
*** johnsom has quit IRC05:29
*** jamespage has quit IRC05:29
*** jamespage has joined #openstack-ansible05:29
*** fdegir has joined #openstack-ansible05:29
*** xdfil_ is now known as xdfil05:29
*** serverascode_ has joined #openstack-ansible05:30
*** johnsom has joined #openstack-ansible05:30
*** portdirect_ has joined #openstack-ansible05:30
*** serverascode has quit IRC05:30
*** portdirect has quit IRC05:30
*** portdirect_ is now known as portdirect05:30
*** gregoryo has quit IRC05:31
*** hamzy has quit IRC05:31
*** flaviosr has quit IRC05:31
*** aspiers has quit IRC05:31
*** jmccrory has quit IRC05:31
*** portdirect is now known as Guest7295205:32
*** jmccrory has joined #openstack-ansible05:35
*** hamzy has joined #openstack-ansible05:36
*** aspiers has joined #openstack-ansible05:37
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379405:44
*** gregoryo has joined #openstack-ansible05:45
*** flaviosr has joined #openstack-ansible05:45
*** threestrands has quit IRC05:49
*** markvoelker has quit IRC06:01
*** nyloc has quit IRC06:04
*** nyloc has joined #openstack-ansible06:04
*** aetaric has joined #openstack-ansible06:05
openstackgerritweizj proposed openstack/openstack-ansible master: Optimise the annotate for keepalived.yml  https://review.openstack.org/58386406:08
*** threestrands has joined #openstack-ansible06:09
*** threestrands has quit IRC06:09
*** threestrands has joined #openstack-ansible06:09
evrardjp[m]Taseer: i will review. I am not the only one to be able to review, no. :p06:11
evrardjpcloudnull: why did you re-merge the addition of pyldap ?06:15
evrardjphttps://review.openstack.org/#/c/573508/506:15
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_keystone master: Pull in ldap dependencies via ldappool  https://review.openstack.org/58386506:17
*** tomcsi_ has quit IRC06:19
*** jwitko has quit IRC06:22
*** udesale_ has joined #openstack-ansible06:23
*** udesale has quit IRC06:25
*** gkadam has joined #openstack-ansible06:26
*** tomcsi has joined #openstack-ansible06:27
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_keystone master: Pull in ldap dependencies via ldappool  https://review.openstack.org/58386506:35
evrardjpcloudnull: please vote on https://review.openstack.org/#/c/583865/06:35
*** threestrands has quit IRC06:36
*** chyka has joined #openstack-ansible06:37
*** pcaruana has joined #openstack-ansible06:37
*** gkadam has quit IRC06:38
evrardjpTaseer: I am standing between your patch and merging anymore, the quality is good enough now.06:38
evrardjp:)06:38
evrardjpI can see further improvements, but it's a "good enough" patch for me.06:38
Taseerevrardjp: Thanks !06:39
Taseerand suddenly there are other people as well !06:39
evrardjpDmitriy: No need for redefining the opensuse 15 and bionic -nv06:41
evrardjpI will remove it because it masks things06:42
evrardjpsee the template here: https://github.com/openstack/openstack-ansible-tests/blob/master/zuul.d/project-templates.yaml06:42
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_masakari master: Added required defaults, env example, Manage LB hook  https://review.openstack.org/58145906:42
*** chyka has quit IRC06:42
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_blazar master: This patch ensures that the functional tests for Blazar pass.  https://review.openstack.org/57138806:43
evrardjpDmitriy: on top of it you can see patchset 8 got a success. So I am reverting to it.06:43
evrardjpTaseer: that's the power of the community :)06:45
Taseerhaha !06:46
*** cshen has joined #openstack-ansible06:49
*** udesale__ has joined #openstack-ansible06:51
openstackgerritChristian Zunker proposed openstack/openstack-ansible master: Example setup for gnocchi with ceph and redis  https://review.openstack.org/58294606:52
*** udesale_ has quit IRC06:54
*** markvoelker has joined #openstack-ansible06:58
*** openstackgerrit has quit IRC07:04
*** poul has joined #openstack-ansible07:04
*** shardy has joined #openstack-ansible07:13
*** shardy has quit IRC07:13
*** shardy has joined #openstack-ansible07:13
*** rmart04 has joined #openstack-ansible07:14
*** admin0 has joined #openstack-ansible07:15
odyssey4meo/07:18
admin0\o07:19
admin0odyssey4me, this were 2 ways on how to specify vars as told: http://paste.openstack.org/raw/726234/ .. the 1st method is not working ..07:20
admin0do you know of a good method07:20
admin0the issue is in our full docs on ceph  https://docs.openstack.org/openstack-ansible/latest/user/ceph/full-deploy.html  , nowhere is mentioned how to specify the disks on the osd hosts and i am trying to find a good method for this07:21
odyssey4meadmin0 which series?07:21
admin017.0.907:21
admin017.0.607:21
odyssey4meOK, have you placed an inventory.ini file into /etc/openstack_deploy?07:22
admin0this is the first time i am hearning the existence of this file07:22
odyssey4meI don't think it needs anything in it.07:22
odyssey4meBut I think that's required for the host_vars/group_vars in user-space to work.07:23
odyssey4meevrardjp: ^ ?07:23
admin0so touch inventory.ini and thats it :) ?07:23
odyssey4meyes I think so07:23
admin0trying now07:23
odyssey4methere's reference to it in https://github.com/openstack/openstack-ansible/blob/stable/queens/scripts/openstack-ansible.rc#L1707:23
odyssey4mebut yeah, I don't think it's documented :/07:23
admin0hmm.. i see it created it .. inventory.ini with the line [all]07:23
odyssey4meyeah, that's fine07:24
odyssey4mewith that there, it should hopefully pick up those host vars you set07:24
odyssey4meif not, try adding the host's inventory name under [all], so in this case just add 's1' on a line under '[all]'07:26
odyssey4meif that doesn't work, perhaps better to wait for evrardjp to get in because he'll know07:28
odyssey4meunless you're in a rush, in which case the old school methods will still work: https://evrard.me/group-and-host-variables-overriding-in-openstack-ansible07:29
*** lvdombrkr has joined #openstack-ansible07:30
evrardjpwhat's the issue?07:31
evrardjpin Queens you have two choices. Go for the static inventory route or go for the dynamic inventory route.07:32
*** markvoelker has quit IRC07:32
evrardjpPlease have a look at https://docs.openstack.org/openstack-ansible/latest/reference/configuration/using-overrides.html07:33
admin0evrardjp, bigger issue is this .. i am trying to do my first ceph+osa build and i find that in all our documenation, we have zero documenation to show how the disks are mapped/passed/specified in the osd hosts07:33
evrardjpIf it's for the dynamic inventory, go check the dynamic inventory section of the docs.07:34
evrardjphttps://docs.openstack.org/openstack-ansible/latest/reference/inventory/inventory.html07:34
admin0yesterday cloudnull and logan gave me their 2 diff versions of how they are passing the disks, ending up with 3 different ways now07:34
evrardjpcontainer_vars still apply07:35
evrardjpso?07:35
odyssey4meevrardjp: he's trying to use user-space host_vars instead, which is definitely cleaner07:35
odyssey4mebut they aren't working07:35
evrardjpin Queens the host/group vars can only be used for something that's NOT already in group vars/host vars07:36
evrardjpdue to ansible behavior07:36
evrardjpfor now07:36
evrardjpif I am not mistaken :p07:37
admin0oh07:37
*** tosky has joined #openstack-ansible07:37
evrardjpoh no that was Pike07:37
evrardjpyeah queens should load the appropriate vars07:37
evrardjpin host_vars07:38
evrardjpwant me to try it ?07:38
admin0evrardjp, https://gist.github.com/a1git/af6467b1ce523d6f95c9f705ba8f131807:40
*** openstackgerrit has joined #openstack-ansible07:40
openstackgerritMerged openstack/ansible-hardening master: Fix instructions for opting in to V-72115  https://review.openstack.org/57484407:40
evrardjpworks for me https://paste.ubuntu.com/p/h8ThDprJxG/07:44
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_blazar master: This patch ensures that the functional tests for Blazar pass.  https://review.openstack.org/57138807:44
admin0evrardjp,  i will try to run it again with some extra debug07:47
openstackgerritTuan Do Anh proposed openstack/ansible-hardening master: Add release note link in README  https://review.openstack.org/58122707:47
evrardjpadmin0: run a play that shows the var, like I did07:48
evrardjphttp://paste.ubuntu.com/p/qNt98zdkmY/07:48
openstackgerritTuan Do Anh proposed openstack/openstack-ansible master: Update pypi url to new url  https://review.openstack.org/58209607:50
*** hachi has joined #openstack-ansible07:50
*** DanyC has joined #openstack-ansible07:52
admin0evrardjp, .. it shows the devices07:53
evrardjpok.07:53
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Preparing group of host is not a "change"  https://review.openstack.org/58387907:53
evrardjpso it works07:53
admin0i am going to re-run the playbook again from setup-hosts07:53
admin0maybe it fixes itself07:54
hwoaranggood morning07:54
evrardjpmaybe you have another override somewhere.07:54
evrardjpCheck everywhere.07:54
evrardjpgood morning hwoarang07:54
admin0i paste you the configs07:54
admin0i have nothing more than that07:54
evrardjpin our code / ceph-ansible code07:54
*** gregoryo has quit IRC07:56
admin0is -vvvv the best way to print expectations(from the script) vs results(what it got) from the ansible playbook run ?07:56
evrardjpnope I am not sure it will help you resolve this thing07:57
evrardjp-vv is enough to show vars, and -vvv for details.07:57
evrardjpgrep is your best friend I think.07:57
*** suggestable has joined #openstack-ansible07:57
admin0i see one extra quote in my dedicated_devices section ..07:58
evrardjpok.07:58
admin0checking/fixing07:58
admin0yes .. i can see that .. even in the pastebin config i provided .. at the end of the devices, i have one open ' ..07:59
*** mbuil has joined #openstack-ansible08:03
*** taseer1 has joined #openstack-ansible08:04
*** Taseer has quit IRC08:07
*** gkadam has joined #openstack-ansible08:11
*** gkadam is now known as gkadam-brb08:12
mnaserugh08:13
mnaserany ideas why dnsmasq would give SERVFAIL in trying to resolve anything (from containers)?08:13
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_blazar master: This patch ensures that the functional tests for Blazar pass.  https://review.openstack.org/57138808:13
evrardjpmnaser: recursive issues, or in its autoritative part?08:16
mnaserrecursive08:16
openstackgerritMerged openstack/openstack-ansible-os_masakari master: Added required defaults, env example, Manage LB hook  https://review.openstack.org/58145908:16
mnasercan't ping google or anything08:16
evrardjpmnaser: routing?08:16
mnaserlxc-dnsmasq is running though..08:16
evrardjpor nat08:16
evrardjpcheck the iptables rules?08:16
mnasernat.  iptables rules are there, the dns server is reachable08:16
mnaserits giving servfail08:16
mnaseroh wait08:16
mnaserhmm08:16
mnaserthe containers nat is failing so i guess thats why it would servfail08:17
evrardjptell me the "oh wait" thing :)08:17
evrardjpyeah.08:17
mnaserthe rules are there08:17
mnaserbut for some reason08:17
evrardjpping 8.8.8.8 doesn't work?08:17
evrardjp:p08:17
mnasernope08:17
mnasercontainer traffic egress lxcbr008:17
mnaserand then08:17
mnasernat, egress br-mgmt08:17
mnaserbut when it comes back08:17
mnaserit gets 'de-natted' but sent over br-mgmt, not lxcbr008:18
evrardjpasymetric routing?08:18
evrardjpmmm08:18
*** pmannidi has quit IRC08:18
evrardjpI can't say more than check routing and fw-ing08:18
mnaseri dont know why the system thinks 10.x is reachable via br-mgmt08:18
mnaserarp -n | grep <container-ip> => lxcbr008:18
evrardjpit's hard without knowing your infra : )08:19
evrardjpbut you found out the first part of the issue, so you can dig deeper now : )08:19
evrardjpit's the first time I hear it though.08:19
evrardjpNever got that issue myself.08:19
evrardjpand I had weird routing, I can tell you : p08:19
evrardjpso it's the traffic back?08:20
mnaserthe only thing i changed is use systemd_networkd to config the bridges, but it wasnt anything wild08:20
evrardjpcheck your hosts on the path08:20
evrardjpI haven't used that.08:20
mnaserthe problem is within that host08:20
evrardjpok08:20
mnaserthe traffic comes back fine08:20
mnaserbut instead of the host sending it over lxcbr008:21
mnaserit sends it over br-mgmt08:21
evrardjpok so it's directly the host that doesn't it back08:21
evrardjpcorrectly08:21
evrardjpok08:21
mnaserand linux refuses to accept it because it came on the wrong interface08:21
admin0how does ip route show look on the host ?08:21
evrardjpis that a new thing though? : p linux was very friendly into its INPUT before, but not FWD08:21
evrardjpcontrary to BSD08:21
evrardjpanyway08:21
evrardjpis there any sysctl you changed?08:22
evrardjpor firewall rules?08:22
mnasernope, firewall is empty other than the rule08:22
mnaser(which doesn't seem to increment much even tho i'm running a ping)08:23
admin0mnaser, without the ip routes .. we are all just guesing08:23
mnaserip route matches exactly another host.08:23
mnaser(that works)08:23
mnaseronly difference is default route is 'proto static' in the non-working one, and doesnt have that in the working one08:23
mnaserbut i dont really think thats the issue08:24
admin0mnaser, i am a visual guy .. i need to see it written somewhere to get my head around lit .. liek container is a.b.c.d,gateay is a.b.c.1 , it lives on x.y.z host, the host has this route type08:24
mnaseradmin0: i dunno if those details would help much.  the environment works fine, it's just probably a setting that was borked somehow08:25
admin0how are we able to help you with anything on "ip route matches exactly another host that works" line :D08:25
mnaserthe other hosts work fine, so there's no misconfig.  i'm just poking brains if someone can think of a possiblity of why traffic wouldn't come back on the same bridge08:25
mnaserthat's my problem.08:26
admin0on routing, you can only control yourself ..  so you control how the packets goes out .. but you cannot control how it comes in .. for that, check the guy sending it to you08:26
admin0so instead of receiver, look into the sender08:27
admin0where the routing rules are affected that it is sending via br-mgmt and not via your common route08:27
mnaserthe packet egresses br-mgmt with the source ip of br-mgmt because it's doing NAT08:28
mnaserit then gets a response on br-mgmt (logically)08:28
admin0and then trace it back as well08:28
mnaserthat response SHOULD then go to lxcbr0 and into the container08:28
mnaserinstead the kernel is sending the packet via br-mgmt.08:28
admin0and you got tcpdumps, ip routes to show this ?08:29
mnasertcpdumps show this.08:29
mnaserarp shows the right path to go is lxcbr008:29
mnaserthere is a /24 route to go via lxcbr008:29
admin0this lxc container, is it openstack infra or openstack instance ?08:29
evrardjpmnaser: it's the only one with systemd_networkd?08:29
*** markvoelker has joined #openstack-ansible08:29
mnaserevrardjp: yeah08:30
mnaserand all i did was systemd_netdevs br-mgmt08:30
evrardjpand ansible hardening role?08:30
mnaserthe hardening role ran way before08:30
mnaseri'm kinda 'redoing' the bridges to use networkd08:30
evrardjpyeah. I would start digging in networkd part.08:31
mnaserit's def the culprit08:31
mnaserbut like08:31
mnaserall it does is just create a bridge?08:31
mnaserand attach a port?08:31
evrardjpI am expecting this to "do the right thing" and be less lenient in INPUT08:31
evrardjpmnaser: who knows if the internals of the chains haven't been altered08:31
evrardjpmnaser: I'd say go ask cloudnull he has touched this far more than us08:32
admin0is it setting up vrfs that might be affecting the routing ?08:32
mnaserit doesn't setup vrfs08:33
mnaserbut i just noticed08:33
evrardjpadmin0: VRF can mean so many things :p08:33
mnaserthe ordering of fw rules changed08:33
evrardjpmnaser: mmmm08:33
evrardjpthat might be the cause too08:33
evrardjpyou said fw was the same :p08:33
*** taseer2 has joined #openstack-ansible08:33
evrardjpor did I misread?08:33
evrardjp :)08:34
mnaserhttp://paste.openstack.org/show/726261/08:34
admin0i mean i am trying to think what affects routing ..its one normal routing, iptable sabels and with systemd-network, vrfs08:34
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/57977008:34
mnaseri was looking at the nat table evrardjp08:34
hwoarangcould i get some reviews on ^^ please because it's a bit patch and it's giving me conflicts every now and then08:34
hwoarang*big08:34
evrardjpmaybe hwoarang can help on this too mnaser , he is a networking person08:34
evrardjphwoarang: sure!08:34
evrardjpI understand the pain hwoarang08:35
hwoarangprob is i will be on jollies soon so it will rot :)08:35
evrardjphwoarang: why did you bring the 3.3 back?08:35
mnaserwell the iptables rules are matching and this is still not going08:35
* mnaser flips08:35
evrardjpdue to the stacktraces?08:35
mnasertables08:36
mnaser:(08:36
admin0hwoarang, who/what are jollies :)08:36
evrardjpadmin0: jollies days08:36
hwoarangevrardjp: 3.3 is not mine. it came from I61a7234dc4fbde1b9319874d82fe33578f490abc08:36
evrardjpyeah08:36
evrardjpthat's not good, we just pinned to 3.208:36
*** taseer1 has quit IRC08:37
TahvokHey guys from Rackspace! We're having our first conversation with Rackspace for openstack support, and currently speaking with Geoff. So you could come and say hello to us if you're near him :)08:37
odyssey4meevrardjp: no, we just pinned to 3.3 ;)08:37
evrardjpodyssey4me: we pinned to 3.2 in stable branches, right?08:37
odyssey4melol @ Tahvok - those of us at Rackspace work from home :p08:37
evrardjpTahvok: sorry I left those guys :p08:37
evrardjpTell hello to Geoff from me though :p08:38
Tahvokodyssey4me: nice :)08:38
hwoarangevrardjp: if you revert the patch then i will resolve the conflict again08:38
odyssey4meevrardjp: it's a bit of a mixed bag - but yes stable is still 3.2 as far as I know08:38
evrardjphwoarang: no we'll merge this one, and see how it goes.08:38
odyssey4methere's still one more patch to merge FYI if anyone's got a gap to review: https://review.openstack.org/#/q/topic:bug/1779534+(status:open+OR+status:merged)08:38
admin0sorry hwoarang .. i still could not get the " i will be on jollies soon so it will rot" meaning :)08:38
hwoarangadmin0: i was told that 'jollies' mean holidays in UK08:39
hwoarangso i try to blend with the local population08:39
evrardjpodyssey4me: yeah so we have a stacktracing stable and a too high version master, that's the deal?08:39
hwoarang:D08:39
admin0:)08:39
evrardjphwoarang: haha I completely understood you.08:39
odyssey4me3.3 worked fine for me and solved the problem originally intended to solve - I only went back to 3.2 on the advice of the bug reporter08:39
evrardjpBut that must be from Manchester! (even if you're not from there)08:39
evrardjpodyssey4me: ok.08:39
hwoarangno clue! but i've heard it here too08:40
odyssey4melooks like one of those 3.3 patches has been ported back, but not merged yet: https://review.openstack.org/#/q/Iaa824cc64bd0e8bdfdda4de243d80400f1529e8c08:40
evrardjphwoarang: hahah I heard it too in London, but I am not sure if it's local08:40
evrardjpmaybe andymccr can help us demystify this08:40
evrardjpor hughsaunders08:40
odyssey4meI've not personally seen a stacktrace for 3.2, so I can't really verify whether those patches hsould be ported back.08:40
hwoarangwhat's wrong with 3.3?08:40
hwoarangit is not bringing pip-10 is it?08:40
evrardjphwoarang: maybe bothing08:41
evrardjphwoarang: but that's what I thought it was.08:41
evrardjp(the pip 10)08:41
hwoarangwell we will find out08:41
evrardjpso that's why I thought we took 3.2 -- the highest with no pip 1008:41
evrardjpI can check real quick08:41
evrardjpjust a sec08:41
odyssey4mewe're telling it which version of pip to install, so it should do the right things - I don't really see the issue08:41
evrardjphwoarang: we should not be using this anyway08:41
odyssey4mewe needed a version of the script with the -d option, and 3.2/3.3 provide that08:42
evrardjphttps://bootstrap.pypa.io/3.3/get-pip.py08:42
openstackgerritMerged openstack/ansible-hardening master: Delete the unnecessary space  https://review.openstack.org/58380808:42
evrardjpline 708:42
odyssey4meand yes, we can be rid of using this hopefully soon, but we care about it for stable branches08:42
evrardjpthis can break some things like tempest.08:42
evrardjpgreat08:42
evrardjpbetween plague and cholera08:43
hwoarangok so it's pip1008:43
hwoarang:(08:43
evrardjpyeah.08:43
odyssey4mecould we at least get https://review.openstack.org/583331 in so that master is consistent08:43
evrardjpwe should move to pip10 though08:43
evrardjpin master08:43
hwoarangok08:44
odyssey4methen we need to work out if anything's broken due to this, and whether we should port it back08:44
evrardjpodyssey4me: wait for it to pass the integrated.08:44
evrardjpodyssey4me: let's not port back.08:44
evrardjplet's wait.08:44
admin0evrardjp, it failed again with verify devices have been provided step08:44
evrardjpI don't like brining pip 10 in stable branches.08:44
odyssey4meit already did: https://review.openstack.org/58334208:44
admin0for some reasons, its not taking my config08:44
admin0i will try to put it in the config directly and see if that helps08:45
odyssey4menone of the role values have any effect, because they're overridden by the integrated build group_var08:45
evrardjpodyssey4me: cloudnull has merged a series of things without 2 +2 recently.08:45
admin0anyone who has ceph+osa , can they please share their configs08:45
evrardjpok we are mixing too many conversations08:45
evrardjplet's first deal with hwoarang 's work08:46
evrardjpbecause it's a big work, and it's painful to deal when merge conflicts appear08:46
evrardjpcould we merge this?08:46
evrardjpwe can improve it later if need be08:46
evrardjpthen, for the get-pip story in master branch, hwoarang do you think we can get rid of this with distro packages nowadays?08:47
evrardjpfor the get-pip story in stable branches, we can leave it as 3.2, IMO08:47
evrardjpwe'll see how it goes.08:47
evrardjpif it doesn't play well, we'll check what we can do.08:47
evrardjpbut jumping to version 10 in stable branches will bring a lot of issues to deal with, which I don't want to deal with.08:48
hwoarangevrardjp: like how? fetch a good pip from distros?08:48
evrardjphwoarang: just use the distro pip yeah08:48
evrardjpubuntu is good -- opensuse leap 423 is good I think, right?08:49
hwoarangthe pip_install role already skips get-pip for opensuse and ubuntu i think08:49
evrardjpok08:49
evrardjplet's make sure it really does08:49
hwoarangwe check if it's >=7.X.X and then we do nothing08:49
hwoarangi think...08:49
evrardjpbecause I am not sure Dave is using centos.08:49
hwoarangin any case thank you for the +2 on the distro stuff. once i fix horizon i can enable distro jobs for the full kit, not just basekit08:50
*** viks_ has joined #openstack-ansible08:50
evrardjpodyssey4me: the stacktrace point is moot IMO.08:50
evrardjpodyssey4me: the stacktrace happened when trying to install a lower version of pip on top of a more recent version of pip. Which is not what we are trying to do, we are trying to upgrade pip to a more recent version.08:51
*** electrofelix has joined #openstack-ansible08:51
evrardjphttp://paste.openstack.org/show/726064/ clearly shows it doesn't try to install pip 9 with constraints. That's not what our usage of get-pip was meant for.08:52
evrardjpbut I haven't digged deeper08:52
evrardjphwoarang: let me check the assumption we skip things08:52
*** udesale_ has joined #openstack-ansible08:54
evrardjphwoarang: ok we are using it08:56
evrardjphwoarang: so we are skipping it in the first place to install pip/virtualenv08:56
*** udesale__ has quit IRC08:57
evrardjpbut then when the virtualenv is created, we still use it to put pip and setuptools inside the venv08:57
hwoarangah true08:57
evrardjpI am not sure why we do this08:57
evrardjpcouldn't we just copy the dist-packages pip if it's an "okay" version, and just upgrade it inside the venv with the proper constraints?08:57
evrardjpodyssey4me: ^08:58
evrardjpI am checking pip_install role now08:58
odyssey4meevrardjp: we already do that, centos is the only one that really needs to use get-pip09:00
odyssey4mein master I mean09:00
evrardjpodyssey4me: we should remove this maybe: https://github.com/openstack/openstack-ansible-pip_install/blob/master/tasks/install_source.yml#L30-L4309:01
odyssey4mefor stable branches we need to keep the status quo or risk quite a bit of destabilisation09:01
evrardjpfor pip_install role09:01
*** markvoelker has quit IRC09:01
evrardjpodyssey4me: hwoarang so my analysis is that we need to change the bootstrap ansible and the pip_install role to get rid of get-pip in ubuntu/suse09:02
odyssey4mebootstrap-ansible only uses it if pip isn't there already at the right version09:02
evrardjpodyssey4me: check what I said above.09:02
odyssey4mein a meeting, brb09:03
evrardjpodyssey4me: we should refactor those checks in the get_pip function of the scripts library09:03
evrardjpI mean we should change that script library "get_pip" function to have the checks of the version included. So all the calls would automatically be fine.09:05
*** vnogin has quit IRC09:05
evrardjpokay, newsflash for M3 -- it's not gonna be easy to do this bump. Keystone has a problem, reverting to older needs older requirements, breaking neutron. Adapting requirenemts, neutron, then breaks nova.09:07
evrardjpso I will do a series of patches, solving each of the issues independently.09:07
evrardjpso we'll have to bump slowly.09:07
evrardjpamazing job.09:07
*** FrankZhang has joined #openstack-ansible09:12
odyssey4meevrardjp: I'd like a clearer understanding of the actual problem, because I've not seen a problem with what's there now.09:13
evrardjpabout what?09:13
evrardjphttps://github.com/openstack/openstack-ansible/blob/master/scripts/bootstrap-ansible.sh#L16309:14
evrardjphttps://github.com/openstack/openstack-ansible/blob/master/scripts/scripts-library.sh#L363-L38909:14
evrardjpno conditionals for get-pip09:14
evrardjpon that thing09:14
evrardjpI will get rid of it.09:14
odyssey4meyes, but that mustn't be conditional09:16
odyssey4mewe use that to get the exact version of pip we want09:16
*** mbuil has quit IRC09:16
*** a0 has joined #openstack-ansible09:16
odyssey4methe venv is built without pip09:16
*** a0 has quit IRC09:17
*** udesale__ has joined #openstack-ansible09:17
*** a0 has joined #openstack-ansible09:19
*** udesale_ has quit IRC09:20
evrardjpodyssey4me: the venv should get the pip version we want, that's the only thing we care.09:20
odyssey4meand it does exactly that today09:20
evrardjpit does it using get-pip09:21
evrardjpit doesn't do it using "pip"09:21
*** admin0 has quit IRC09:21
*** a0 is now known as admin009:21
evrardjpso we make sure pip is installed, but then we don't care.09:21
evrardjpbecause we are using get-pip anyway09:21
evrardjpthat doesn't make sense09:21
odyssey4meevrardjp: I disagree.09:21
evrardjpwe should use get-pip for getting pip if pip is not ready .09:21
evrardjpand then use pip.09:21
evrardjpodyssey4me: tell me why you disagree09:22
evrardjpwhat's the reason to still use get-pip if you have pip09:22
odyssey4meChanging it makes it mosre complicated, and we don't need more complexity. So again, what is the problem we're trying to solve here? I've not seen it.09:22
evrardjpwe are removing our dependency over get-pip which is not to be used in production09:22
evrardjpthat is silly we don't even check if virtualenv is installed with distro packages09:24
openstackgerritMerged openstack/openstack-ansible-repo_build master: Update get-pip to version 3.3  https://review.openstack.org/58333109:24
evrardjpok we install it by default09:24
evrardjpthat reassures me.09:24
*** parasitid has quit IRC09:35
*** epalper has joined #openstack-ansible09:37
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Simplify bootstrap-ansible.sh  https://review.openstack.org/58390509:42
*** taseer2 is now known as Taseer09:42
evrardjphwoarang: what do you think of ^09:43
evrardjpodyssey4me: ^09:43
evrardjpwe'll see what gates think of this09:44
odyssey4meevrardjp: get-pip.py is what is recommended to be use by pypa, so 'it should not be used in production' is unsubstantiated09:45
*** shardy has quit IRC09:46
odyssey4meAnd again, I have not seen the definition of the problem. 'It should not be used in production' is not a problem definition.09:47
evrardjpwe have packages -- why do we bother09:48
evrardjplook at the simplicity09:49
evrardjpyou're opposing to something that's reducing tech debt09:49
odyssey4meevrardjp: perhaps you need to take a more careful look at how we got there09:49
odyssey4medoing what you're doing now is how we started09:49
evrardjpodyssey4me: long ago -- times change09:49
odyssey4mewe grew to build the virtualenv without pip because of system package issues, we also isolated the venv build due to system package problems09:49
evrardjpcode changes09:49
odyssey4mehttps://github.com/openstack/openstack-ansible/commit/b2be073da6d7899f860893984a5e96e30bcc3c72#diff-30c3701b5527d757251851f9253bbb3c for example09:50
*** parasitid has joined #openstack-ansible09:51
odyssey4mehttps://github.com/openstack/openstack-ansible/commit/86262ae2ff82feac37fd34227b4199d642a1424709:51
odyssey4mehttps://github.com/openstack/openstack-ansible/commit/37ce304eb4ff546e0be283951b2e36f4e007abe709:52
hwoarangevrardjp: give me some time i am working on a dozen of things right now :/09:53
odyssey4meso yes, times change and perhaps it's better now - but this code is the embodiment of many lessons learned09:53
evrardjpodyssey4me: I agree. I am checking all those commits, and you're just proving the use of a well defined venv09:53
evrardjpthis is not opposite09:54
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Simplify bootstrap-ansible.sh  https://review.openstack.org/58390509:54
odyssey4meevrardjp: give me a problem definition and I'll understand what you're trying to achieve. right now, I don't see a problem.09:54
odyssey4meAlso bear in mind that the infra images already have virtualenv and pip installed via get-pip.py and pip, so installing the package over the top of it may destabilise it.09:55
evrardjpproblem is simple: I don't want to rely on get-pip and choose between plague (3.2, with stacktraces) and cholera (3.3, embedding a different major version of pip which I don't want to downgrade)09:55
odyssey4meShow me a 3.2 stacktrace, and show me where using 3.3 does not work?09:55
evrardjpI haven't finished the problem description09:56
evrardjpIf there is an alternative we've never tried to use to reduce the external dependencies, we should use it.09:57
hwoarangthat's true. the infra images could mess things up a bit.09:57
evrardjpI am not sure why I am fighting to reduce tech debt, improving offline installs.09:57
odyssey4mewell, tell you what - I'll not stand in your way - if it works, great09:57
odyssey4meif you think this is back portable, go ahead09:58
evrardjpI don't want to change stable branches -- stable branches are working.09:58
odyssey4meI have too much else to get done, and I don't have enough head space to properly think this through.09:58
evrardjpLet's not change what's working.09:58
odyssey4meAre they working? I thought that was the entire premise of this discussion.09:58
odyssey4meIf this is for master onwards, I support it wholesale.09:58
evrardjpyes it's only master.09:59
odyssey4meBut the 3.2/3.3 problems you're describing count for all stable branches.09:59
evrardjp3.2 works for me on stable branches. Let's not change things there.09:59
*** markvoelker has joined #openstack-ansible09:59
evrardjpI just don't want to put more patches on the story 3.2/3.3/whatever on master.09:59
evrardjpstarting from now we now we can rely on distro packages -- let's make use of them.09:59
hwoarangmay i suggest to calm down a bit...09:59
odyssey4meOK, then as I've said many times before - if we can ditch get-pip from master, let's do it. I thought that CentOS was the only reason we still had it TBH.10:00
evrardjpAren't we calm?10:00
hwoarangif we are changing core stuff perhaps we need a spec to explain the situation and proposal?10:00
evrardjpodyssey4me: yes that's what I thought too :)10:00
evrardjpwe are talking about the same thing I think :p10:00
odyssey4meI guess CentOS with 7.5 probably fixed that problem.10:00
evrardjpyeah10:00
hwoarangcentos ships with a very old virtualenv i think10:00
hwoarangor very old pip10:00
evrardjphwoarang: check the comment in the patch10:00
evrardjpshowing the version from centos packages.10:01
evrardjpIt's not like there is no evidence10:01
hwoarangah ok10:01
odyssey4meAs long as the pip version supports constraints, we're good with it... although perhaps our pip.conf may have to adjust too.10:01
hwoarangsorry10:01
odyssey4meI have no idea what pip does if it doesn't recognise a config option its given.10:01
evrardjpodyssey4me: I've listed the versions, and as you can see they match what was in the code.10:01
Dmitriyevrardjp: thanks for fixing, I was trying to find this template but I even didn't know where to start search, as I'm new to zuul10:01
evrardjpDmitriy: no worries, our code is also spread out : )10:02
evrardjpthere is a good tool for that10:02
evrardjphttp://codesearch.openstack.org10:02
evrardjpodyssey4me: I think all the config options will be supported, but I will see in the gates.10:02
odyssey4meit seems that the stack trace in https://review.openstack.org/#/c/583077/ came from somewhere - was that from someone using a stable branch or not?10:03
evrardjpI am strongly looking forward to work with infra if things are messed up there.10:03
evrardjpodyssey4me: the stacktrace is,probably wrong10:03
evrardjplook at the CLI used10:03
evrardjpno pip version and constrained ask10:03
evrardjpso I suppose the stacktrace comes from the downgrade version of pip10:03
odyssey4me:/10:04
evrardjpdowngrading pip is not a good idea10:04
odyssey4meyeah, as I thought - some sort of knee-jerk fix with no evidence10:04
odyssey4meso the backports of that should be blocked then I guess10:04
evrardjpYES10:04
evrardjp:)10:04
odyssey4methe original bug reporter suggested 3.2 worked for him, so if someone else thinks otherwise there should be a bug for it10:05
evrardjpbringing 3.3 is opening a can of worms10:05
odyssey4mehttps://bugs.launchpad.net/openstack-ansible/+bug/178205110:05
openstackLaunchpad bug 1779534 in openstack-ansible "duplicate for #1782051 pip install offline fails with new version of get-pip.py" [High,Fix released] - Assigned to Jesse Pretorius (jesse-pretorius)10:05
evrardjpI don't want that on stable branches -- that was the first thing I said on the chan :)10:05
odyssey4meThis is tux_ I think. We should ask him.10:06
evrardjpyeah10:06
odyssey4me3.3 worked for him, and that's a stable branch issue.10:06
odyssey4meso this means we should port back 3.3 and be done with this10:07
evrardjpI think that's another part of the code I'd like to touch today10:07
evrardjpcompltely different issue10:07
evrardjphttps://github.com/openstack/openstack-ansible-pip_install/blob/master/tasks/install_source.yml#L30-L4310:07
evrardjpif it fails, it fallbacks to get-pip10:07
Dmitriyevrardjp: I'll add to my bookmarks:) I'm actually prety new to openstack as well, I'm in since this February, so I'll be very grateful for understanding and pointing me to some things, like this) Thanks again.10:07
evrardjpnot sure if we should do this10:07
evrardjpodyssey4me: do you know why we did this?10:07
odyssey4meevrardjp: if we're not using get-pip, then we should eliminate it everywhere10:07
evrardjp(keeping in mind we have https://github.com/openstack/openstack-ansible-pip_install/blob/master/tasks/main.yml#L39-L43 )10:08
odyssey4methe isolated fall back mode is necessary due to the locked down pip.conf10:08
evrardjpyeah the isolated fallback makes sense10:08
odyssey4mewe do that in a lot of places to be able to cater for upgrades10:08
evrardjpbut not with a different pip10:08
evrardjpyeah that's fine10:08
odyssey4meit's the same pip?10:08
odyssey4meoh, heh, I see what you mean10:08
evrardjpyeah10:08
odyssey4mefirst task uses pip_install_script.stdout and the second does not10:09
odyssey4methat's a bug10:09
evrardjpreplacing by {{ pip_install_script.stdout }}10:09
evrardjpyeah10:09
evrardjpthat's backportable.10:09
odyssey4meno, the use of pip_install_script.stdout isn't in the stable branches10:09
evrardjpahah no10:09
evrardjpthat's new10:09
evrardjpyeah10:09
evrardjpthat's the thing10:09
evrardjpokay10:09
evrardjpI will fix that10:09
evrardjpfor master10:09
odyssey4megood spot10:09
evrardjpfor stable... that's a different thing then10:09
evrardjpmaybe we should backport those patches?10:10
odyssey4mewell, maybe - maybe not10:10
odyssey4meIf we do that it'll touch a lot of things, and I'm not sure if the transition will work well.10:10
evrardjphttps://github.com/openstack/openstack-ansible-pip_install/commit/40373daf7e27ab8cef00611945acf68c3e86fe82#diff-2444ad0870f91f17ca6c2a5e96b2682310:10
odyssey4meI think it may be better to ensure that our periodics are healthy before we risk more destabilisation.10:11
evrardjpyeah that's a risk10:11
evrardjpyeah agreed.10:11
evrardjpI can propose and -W10:11
odyssey4meI mean, given that all our stable branches are now using the same distribution version as master, we could perhaps do it - but then we need a focused two weeks of changes and thorough testing10:12
odyssey4meWe could perhaps more safely just back port to Queens only, and leave the older branches alone.10:12
evrardjpodyssey4me: so I don't want to backport the getting rid of get-pip in stable branches10:12
evrardjpI just want to merely fix the downgrade issue that person sees10:12
*** chyka has joined #openstack-ansible10:13
evrardjpodyssey4me: or we can re-implement things in stable branches to ensure pip_install doesn't install things when version x is already available.10:13
evrardjpbad idea.10:13
evrardjpexcept if x is VERY WELL defined.10:14
odyssey4mebootstrap-ansible only implements get-pip if virtualenv isn't there or at the right version, and pip isn't there and at the right version10:14
odyssey4meeverything else is done by pip_install10:14
evrardjpyeah it's two different conversations :p10:14
evrardjplet's not mix them10:15
odyssey4meso yeah, if we port back changes to pip_install which make things better it'll do us some good10:15
evrardjp I will explain clearly what I meant with that10:15
*** v1a4 has joined #openstack-ansible10:17
*** chyka has quit IRC10:18
odyssey4mehmm, one thing to consider is that by using the distro packages for virtualenv we now have inconsistent pip/setuptools/wheel versions in the venv when we build it10:18
odyssey4mewe could go with it and see if problems arise, as they did in the past - or we could proactively do something now to ensure we have consistency in the venv10:18
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install master: Ensure the fallback uses the same install method  https://review.openstack.org/58391010:21
odyssey4meevrardjp looks like the chain to backport would be https://review.openstack.org/#/c/562243/7 & https://review.openstack.org/#/c/562243/ & https://review.openstack.org/#/c/570327/10:21
odyssey4meand the one you just proposed10:22
*** Bhujay has quit IRC10:22
evrardjpodyssey4me: so for the bootstrap ansible, I ensure the version by forcing an install of pip setuptools wheel with the constraints.10:22
evrardjpI think this is reasonable to have the same thing in the venvs.10:22
odyssey4meevrardjp: that's an extra task in every single role, except in master where we could do it in the common role10:22
admin0how do i print out all vars during a playbook run .. i think even if i have setup bluestore in the variables, its defaulting to filestore somewhere10:23
odyssey4meevrardjp I guess for the stable branches it'd be best to just let it be?10:24
evrardjpodyssey4me: yeah not change things for stable branches until a bug is there10:25
evrardjpI will wait10:25
evrardjpI will think about what we can backport10:25
evrardjpbut be very conservative, as you know me :p10:25
odyssey4meby that bug, do you think 3.3 is the solution? or are you thinking of an alternative10:29
evrardjp3.3 is a solution but bringing issues10:30
evrardjpbecause now you have to bump to 10 everywhere10:30
evrardjpyou'd have to*10:30
evrardjpso stable branches bump to 10. is annoying because of many things10:30
evrardjpI'd rather we bump 10. in master and see how it goes.10:31
evrardjpI think we must find another solution with what we have on stable branches, and I think those backports "could" do, as they would skip, for centos, the installation using get-pip10:31
evrardjpI have to double check though10:31
*** Bhujay has joined #openstack-ansible10:32
*** markvoelker has quit IRC10:32
evrardjpyeah it would.10:32
evrardjpassuming the user has installed python-pip10:32
evrardjpthat's a good enough workaround IMO10:33
evrardjpoh that's gonna be harder that that,great :p10:34
odyssey4meevrardjp: the bug is there10:34
odyssey4mebut yeah, perhaps https://review.openstack.org/#/c/562243/7 with https://review.openstack.org/583910 alone will actually cover this quite safely10:36
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Simplify bootstrap-ansible.sh  https://review.openstack.org/58390510:36
odyssey4mereferencing https://bugs.launchpad.net/openstack-ansible/+bug/1782051 as a related bug I think10:36
openstackLaunchpad bug 1779534 in openstack-ansible "duplicate for #1782051 pip install offline fails with new version of get-pip.py" [High,Fix released] - Assigned to Jesse Pretorius (jesse-pretorius)10:36
odyssey4meanyway, I've spent too much brain power on this today - time to get on with other things10:37
evrardjphaha sorry10:37
odyssey4meI'll switch attention to figuring out the rest of those failures for my patches later today - magnum, sahara, etc.10:38
odyssey4meFor now I need to get some other stuff done.10:39
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_neutron master: tasks: providers: Rename 'ovs' configuration file  https://review.openstack.org/58391910:42
*** tux_ has joined #openstack-ansible10:47
hwoarangevrardjp: do you understand this problem http://logs.openstack.org/70/579770/22/check/openstack-ansible-deploy-aio_basekit-opensuse-423/babc0bd/job-output.txt.gz#_2018-07-19_08_52_43_276239 ?10:48
hwoarangstarted poping up in the aio_distro_basekit job10:48
odyssey4meevrardjp: apologies for blowing a bit of a gasket earlier... not sure why that hit a nerve but it was unnecessary - happy we've come to a good conclusion after all that :p10:50
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install stable/queens: Ensure get-pip is not used when good version of pip is present  https://review.openstack.org/58392510:50
evrardjpodyssey4me: no offense taken, I know you.10:50
hwoarang'blowing a bit of a gasket' nice phrase i am going to steal it10:50
evrardjp:p10:50
odyssey4me;)10:51
*** tux_ has quit IRC10:52
evrardjphwoarang: haha I will try to remember it too10:52
evrardjphwoarang: checking10:52
evrardjphwoarang: that's bad if that's true10:53
hwoarangtell me more10:53
*** hachi has quit IRC10:53
evrardjpit means 39.2 was not found on the mirror, and that version was asked by our pins10:53
evrardjphwoarang: I am trying to bump those pins with my M3 patch10:54
evrardjpbut as you can see I was busy with other things too :)10:54
hwoaranghmm10:54
evrardjpI am taking another approach for the M3 patch right now, which is doing small steps increments.10:54
evrardjpbut I can do that bump separately too if you prefer.10:55
hwoarangso we are asking for a version that doesn't exist? when did that change?10:55
evrardjphwoarang: I've noticed in the past that 39.2 was not found on certain mirroring.10:55
evrardjpit exists10:55
hwoarangah10:55
evrardjpit just not well mirrored.10:55
hwoarangi see10:55
hwoarangok so recheck it is ;p10:55
hwoarangshould we tell infra ?10:56
evrardjprecheck -- it's often temporary10:56
hwoarangok then10:56
evrardjphttps://github.com/pypa/setuptools/tree/v39.2.0 exists :)10:56
evrardjphwoarang: please note that this failure was the reason I didn't bump it in the stable branch10:57
evrardjpweirdly10:57
*** cshen has quit IRC10:57
evrardjpit was always temporary, so if you can reproduce it 100% of the time on a certain provider, we should bug infra.10:58
hwoarangok10:58
*** prasen has quit IRC10:59
*** cshen has joined #openstack-ansible11:05
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_nova master: [DNM] - Testing openSUSE nova role  https://review.openstack.org/49576711:07
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-pip_install stable/queens: Ensure get-pip is not used when good version of pip is present  https://review.openstack.org/58392511:15
openstackgerritMerged openstack/openstack-ansible-pip_install master: Ensure the fallback uses the same install method  https://review.openstack.org/58391011:18
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: bionic: Remove python-software-properties  https://review.openstack.org/58370811:19
*** hachi has joined #openstack-ansible11:23
*** udesale__ has quit IRC11:28
odyssey4meevrardjp: did you have an old copy of pip_install perhaps? I'm curious why https://review.openstack.org/#/c/583925/1..2/tests/test.yml was needed when https://review.openstack.org/#/c/563521/1 mrged ages ago11:29
*** markvoelker has joined #openstack-ansible11:30
evrardjpI had11:31
evrardjpI will rebase11:31
evrardjpwait11:31
evrardjpit's probably got pulled in11:32
jenglisch_i'd like to configure haproxy to use SNI + hostnames instead of using different ports. there seems no possiblity to easily implement this with openstack-ansible (the haproxy template has no 'options' for that). is there a reason ? is this setup a bad idea? or is it just uncommon?11:32
evrardjpin the cherry pick11:33
evrardjpjenglisch_: uncommon11:33
odyssey4mejenglisch_: I think that's something we will want to do, but we're not yet sure whether all services support that yet11:33
evrardjpyou can have your own haproxy configuration if you want. You will need to override the endpoints and all.11:33
odyssey4meit'll require all clients to support it, and all services to support it11:34
odyssey4meif you're keen on having it then we're keen to see whether it works!11:34
evrardjpodyssey4me: hasn't logan- done that or partially done it? It is an effort so it depends how nice you want to be with your customers at the end jenglisch_ :)11:35
odyssey4meit will certainly help simplify a lot of things, and be complementary to the https://github.com/openstack/openstack-ansible-specs/blob/master/specs/rocky/centralized-nginx.rst work which hasn't really happened yet11:35
openstackgerritAndy Smith proposed openstack/openstack-ansible master: [WIP] Add qdrouterd role for messaging backend deployment  https://review.openstack.org/57026111:36
jenglisch_>but we're not yet sure whether all services support that yet11:37
jenglisch_i'm currently just thinking about the public api endpoints, i'll test a few clients that i'm interested in (python openstack client, terraform, ...)11:37
jenglisch_however i think every client in 2018 should support SNI :)11:37
jenglisch_a major problem for a long time was win xp (< SP3), which does not support SNI, but thats not my target audience anyway :)11:38
admin0i think our osa-ceph does not see bluestore yet11:41
odyssey4mejenglisch_: one would think, but the openstack clients might not ;) they're dependent on the community making it happen11:42
admin0even with the variable override, it forces filestore and its syntax check11:42
odyssey4meadmin0: you'd need to validate against the pinned version of ceph-ansible what's supported11:42
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_swift master: Remove httplib  https://review.openstack.org/58393311:43
admin0did that and found out :)11:46
admin0is there a way to unpin/force it to use a higher version or master branch11:46
jenglisch_evrardjp: is overriding the full haproxy config possible with openstack-ansible-haproxy_server ? i think i'm only allowed to reconfigure single services https://github.com/openstack/openstack-ansible-haproxy_server/blob/master/defaults/main.yml#L4111:47
jenglisch_but probably thats sufficient with haproxy_acls11:47
*** shardy has joined #openstack-ansible11:50
*** admin0 has left #openstack-ansible11:52
*** admin0 has joined #openstack-ansible11:52
odyssey4meadmin0: sure, just update the ansible-role-requirements.yml in your own fork, or set the env var to use a different one when you bootstrap-ansible... but be aware that you're stepping into untested waters11:54
odyssey4meadmin0: we had ceph-ansible in master pinned for around 3 months to work out stuff that got broken due to changes in ceph-ansible because they're now using their own modules/lookups/etc11:54
jenglisch_[13:47] <jenglisch_> but probably thats sufficient with haproxy_acls << it's not, since openstack-ansible defines a service as a frontend/backend pair, while a SNI configuration would have just one frontend and multiple backends :/11:54
odyssey4meso it won't *just work*11:54
*** kstev has joined #openstack-ansible11:57
*** dave-mccowan has joined #openstack-ansible11:59
*** kstev has quit IRC12:01
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Pull in ldap dependencies via ldappool  https://review.openstack.org/58386512:02
*** markvoelker has quit IRC12:02
*** markvoelker has joined #openstack-ansible12:02
*** kstev has joined #openstack-ansible12:02
odyssey4mejenglisch_: I expect you could have both implemented - our standard ones, and a new front-end which uses all the other front ends?12:03
openstackgerritDmitriy R. proposed openstack/openstack-ansible-ceph_client master: Added possibility to specify ssh username and port for ceph mons.  https://review.openstack.org/58394312:08
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Update all SHAs for milestone 3  https://review.openstack.org/57400612:11
admin0odyssey4me, in that case, i can use the ceph role to setup ansible separately and then just specify it in osa i guess12:12
admin0not sure how though :D12:12
odyssey4meadmin0: what you can do is use ceph-ansible independently of OSA to setup the ceph-cluster as you wish, using its own ansible runtime (in a venv) and its own ansible.cfg pointing to where the roles should be found, etc12:26
odyssey4methen - once you have that, you can use OSA's ceph client integration to setup openstack to use the cluster12:26
*** ssbarnea1 has quit IRC12:36
ansmithevrardjp: hello, iiuc, I believe the pinning we observed comes from https://github.com/openstack/openstack-ansible-repo_build/blob/8cbd722ac4de268cbf6c283f9825958071b6a6bb/templates/requirements_constraints.txt.j212:36
evrardjpansmith: yes it does, but that's generated based on live requirements :)12:37
ansmithevrardjp: so version at point in time from defaults/repo_packages/openstack_services.yml will become <=12:37
evrardjpso there is something going on there12:37
evrardjpansmith: yeah those things come from py_pkgs12:37
*** ssbarnea has joined #openstack-ansible12:37
evrardjpwhich gets the info from defaults/repo... and userspace things12:37
evrardjpbut it should have resolved properly, unless there is a requirement that requires a certain version conflicting with our upper constraints12:38
evrardjpthat's the one we need to flag12:38
ansmithwon't openstack reqs be tied to the sha1 or am i missing something12:38
ansmithe.g. tied to 31-03-2018 which corresponded to oslo.messaging of 6.0.0 at that point12:39
*** v1a4 has quit IRC12:40
*** Guest72952 is now known as portdirect12:41
evrardjpansmith: in defaults/repo.... you see requirements there12:42
evrardjpthey are bumped at the same time12:42
evrardjphere the messaging from requirements is 8.0.012:42
evrardjp(iirc)12:42
evrardjpso there is something going on12:42
evrardjpI haven't got the chance to work on this -- as I am trying to bump said file, but there are LOTS of issues that have appeared.12:43
evrardjpincluding checks disabled upstream.12:43
ansmithwill try your bump to m3, just wanted to provide an update and make sure I am connecting the dots correctly12:45
-openstackstatus- NOTICE: logs.openstack.org is offline, causing POST_FAILURE results from Zuul. Cause and resolution timeframe currently unknown.12:54
*** ChanServ changes topic to "logs.openstack.org is offline, causing POST_FAILURE results from Zuul. Cause and resolution timeframe currently unknown."12:54
openstackgerritAndy Smith proposed openstack/openstack-ansible master: [WIP] Add qdrouterd role for messaging backend deployment  https://review.openstack.org/57026112:57
DmitriyHm, guys, smth strange is happening with zuul for https://review.openstack.org/#/c/583943/13:01
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Disable Volume Backup Tests  https://review.openstack.org/58395513:08
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Disable Volume Backup Tests  https://review.openstack.org/58395513:16
*** udesale has joined #openstack-ansible13:18
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Disable Volume Backup Tests  https://review.openstack.org/58395513:18
BhujayOSA haproxy self signed certificate allows us to enter a subjectAlternatename in the user var , however a magnum kube cluster dont recognize this , it gives error Post https://10.174.124.14:5000/v3/auth/tokens: x509: cannot validate certificate for 10.174.124.14 because13:22
Bhujayit doesn't contain any IP SANs13:22
Bhujaythe problem was resolved once manually a self certificate was recreated  with proper SAN attributes .13:26
evrardjpBhujay: better to use real certs.13:26
evrardjp:p13:26
odyssey4meBhujay: if you can suggest some config changes to improve the self-signed certs being generated then that'd be welcome, but yes - they're not really meant to be used in production13:27
evrardjpmaybe we should remove certificate generation, and do it upfront.13:27
evrardjpBhujay: any patch is welcomed there :p13:28
evrardjpodyssey4me: that's the opposite path of what we are currently doing, but hey, why not!13:28
evrardjpor maybe we should the way we do now13:29
BhujaySure , I  had got the clue from a post by another user he generated it from a template file to solve the SAN issue . I will  test it out and take your opinion13:29
Bhujaythe current method suffices encrypted communication  and have worked for me until i tried a kube cluster in magnum . So it is good but we can  improve it ..13:30
*** tux_ has joined #openstack-ansible13:31
*** tux__ has joined #openstack-ansible13:32
tux__folks, quick question i have install OSA with Ceph and all looking good my glance talking to shared storage etc but i found Cinder-api container doesn't have ceph.conf file and keyring13:32
tux__what could be wrong there?13:32
odyssey4metux__: why would it? only the cinder-volume service speaks to ceph IIRC13:33
tux__hmm! i thought api need to talk to ceph13:33
odyssey4menope - client -> api -> scheduler -> volume13:34
odyssey4me-> ceph13:34
tux__I am trying to create volume and its failing not showing any error13:34
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Update all SHAs for milestone 3  https://review.openstack.org/57400613:34
odyssey4metux__: did the volume service get the request? if not, check scheduler, then check api13:35
Bhujayopenstack volume service list  , is the output showing all @rbd up ?13:36
*** tux_ has quit IRC13:36
*** taseer1 has joined #openstack-ansible13:37
*** ChanServ changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://goo.gl/tTmdgs"13:37
-openstackstatus- NOTICE: logs.openstack.org is back on-line. Changes with "POST_FAILURE" job results should be rechecked.13:37
*** Taseer has quit IRC13:38
*** taseer2 has joined #openstack-ansible13:38
*** taseer1 has quit IRC13:41
evrardjpwoot recheck time !13:42
*** tux__ has quit IRC13:50
*** joabdearaujo_ has joined #openstack-ansible13:50
openstackgerritAndy Smith proposed openstack/openstack-ansible-os_cinder master: [New files - needs update] Update paste, policy and rootwrap configurations 2018-07-19  https://review.openstack.org/58396313:55
openstackgerritAndy Smith proposed openstack/openstack-ansible-os_heat master: [New files - needs update] Update paste, policy and rootwrap configurations 2018-07-19  https://review.openstack.org/58396413:55
openstackgerritAndy Smith proposed openstack/openstack-ansible-os_neutron master: Update paste, policy and rootwrap configurations 2018-07-19  https://review.openstack.org/58396613:56
odyssey4meheh, looks like mnaser didn't adjust the source branch updater to skip rootwraps14:04
ansmithmy mistake ^^^, was not intended14:06
*** joabdearaujo_ has left #openstack-ansible14:06
odyssey4meansmith: no worries, I think that's like a right of passage for this project ;)14:06
odyssey4mewe should probably have a release-tools folder and put it there14:07
odyssey4meand evrardjp should share his new magic tool14:07
evrardjpodyssey4me: release is still in the old non-magic14:09
evrardjpI haven't got the chance to work on it14:09
evrardjpbut I will need to14:09
evrardjpodyssey4me: the first step I will do is remove that git review step.14:10
evrardjpand the removal of the folder14:11
evrardjptaht's too scary14:11
evrardjp: p14:11
evrardjpbut then I will move my stuff there.14:11
evrardjpI will remove the click dependency too14:11
evrardjpas this is convenient for me, but not for other ppl.14:11
evrardjpI will just lazy import them.14:12
evrardjp:p14:12
*** FrankZhang has quit IRC14:13
odyssey4meevrardjp: as long as click is not in our requirements.txt, it's fine to have it in the tools I think14:14
odyssey4meyou'll just have to handle the error and tell them to install it14:14
odyssey4meit's only because click is not in the g-r process that we can't include it14:15
evrardjpI think those functions are self-contained, and some are refering to a lib, but the contained scripts can be called directly14:15
odyssey4meperhaps some day someone will bother to convert it to use cliff instead, but meh14:15
evrardjpso after a quick rewrite we should be freed of the dependency14:15
evrardjpbut it could still get included in a package if we need to14:16
odyssey4meja, so instead of you wasting time on it - push up the script as-is and perhaps someone else will14:16
evrardjpwell that is already pushed into my graveyard, but since the release was changed, I'd like to make sure it works fine again14:16
*** Guest1593 has joined #openstack-ansible14:16
evrardjp(we don't need that many functions)14:17
evrardjpnow a few of those are included in releases14:17
odyssey4meok, I have no context so I can't comment ;)14:17
evrardjpI sent it to the ML though : p14:17
odyssey4mewe do need tooling to do that stuff for all our branches though14:17
evrardjpwe are not tagging all the roles anymore14:17
evrardjpyeah14:17
evrardjpthat's still valid14:17
odyssey4meoh ok that - yes that's great14:18
evrardjpyeah I just want to do a quick test of what we can do in governance to see if releases break14:18
*** Guest1593 has quit IRC14:18
evrardjpand then we can be freed of the last functions14:18
evrardjpfree*14:18
evrardjpso it's a process...14:19
evrardjp:D14:19
evrardjpslowly evolving as it doesn't touch many ppl14:19
*** cshen has quit IRC14:24
*** joabdearaujo has joined #openstack-ansible14:24
Dmitriywhat do you think about https://review.openstack.org/#/c/583943/ ? It's infra role, but still...14:25
Dmitriyit doesn't resolve the question of empty ceph_mons (if we don't want to provide access to ceph monitors), as we still need auth keys, but it's step in this direction14:29
*** tux_ has joined #openstack-ansible14:32
tux_Bhujay:14:33
tux_Bhujay: "openstack volume service list" where should i run this command14:33
*** tux__ has joined #openstack-ansible14:34
tux__odyssey4me: sorry i was in meeting14:34
tux__i am back looking cinder-volume14:35
tux__If i am using Ceph storage then my volume IO will directly go to ceph why we need volume node?14:35
tux__I am confused here14:35
Bhujaytux_: from any client with admin user  or login from horizon as admin and see the system-system info-volume services14:36
Bhujayyou need volume node which has the rbd drivers and configuration to issue command to ceph mon for managing storage volumes life cycle14:37
*** tux_ has quit IRC14:38
tux__Bhujay: if i attach storage volume to instance then that IO will hit cinder volume or go to directly ceph for data read/write?14:40
*** hachi has quit IRC14:40
*** hachi has joined #openstack-ansible14:41
Bhujaycinder will create and attach the vol to instance , then from vm the intercation with ceph shd be direct as per my understanding14:41
tux__Bhujay: Ah! that make sense otherwise i have to drop my cinder plan :)14:42
tux__Bhujay: hold on let me check my cinder-volume as you said14:43
evrardjpcores, can I have some votes on https://review.openstack.org/#/c/583568/ ? It would make another patch very light.14:43
tux__I have  ostack-controller-03_cinder_api_container-a41fe37c  & ostack-controller-03_cinder_scheduler_container-9e0724ca14:43
tux__i can't see any cinder-volume container14:44
tux__am i missing something here?14:44
Bhujaythere is no containers , cinder-vol is on metal14:44
tux__why do we need cinder-metal if IO directly going to Ceph ?14:45
tux__Something is wrong here...14:45
evrardjptux__: you don't and can containerize it14:46
tux__evrardjp: can you please explain me i am totally confused, This is what i want, I have openstack and ceph cluster and i want to use cinder for boot volume so my instance boot from cinder volume14:46
tux__evrardjp: I can see only ceinder-api & cinder-scheduler container in OSA14:47
evrardjpceph production example: https://docs.openstack.org/openstack-ansible/latest/user/ceph/full-deploy.html#environment-customizations14:47
evrardjpit's all in the docs14:47
tux__Reading it14:48
tux__evrardjp: Can you confirm cinder-volume is just a middle man when using Ceph ?14:48
tux__I want my VM directly go to ceph not via Cinder-volume or any intermediate path14:49
evrardjpyou should read cinder docs for that14:49
evrardjpbut yeah.14:50
Dmitriy+14:50
devxd34dh0r53  or cjloader: have you had any issues with a multi node aio?  I keep getting an error  ERROR! Unexpected Exception, this is probably a bug: (cryptography 1.2.3 (/usr/lib/python2.7/dist-packages), Requirement.parse('cryptography>=1.5'), set(['paramiko']))14:50
evrardjpyou will go through cinder-volume14:50
evrardjpit depends on what you're trying to achieve14:50
evrardjpyou're not forced to use cinder14:50
openstackgerritweizj proposed openstack/openstack-ansible-os_zaqar master: Completed required variables for README.rst  https://review.openstack.org/58397614:50
evrardjpdo your research14:50
cjloaderdevx: I have not14:50
tux__evrardjp: all i want boot instance from cinder volume living on shared storage for HA and live migration14:50
devxcjloader I just started getting this errors yesterday afternoon14:51
tux__Let me explain what i am trying to do so you can point me to right direction..14:51
devxok i'll dig in to thanks14:51
evrardjptux__: that or you want to boot from an image that gets persisted on node, which mounts ceph?14:51
evrardjpthat's completely different14:51
evrardjpcinder you will need cinder things14:51
evrardjpincluding cinder-volume14:52
*** biffi has quit IRC14:52
cjloaderdevx: last mnaio I set up was like a month ago14:52
evrardjphey cjloader14:52
evrardjphow are things?14:52
evrardjpbeen a while :)14:53
openstackgerritweizj proposed openstack/openstack-ansible-os_trove master: Completed required variables for README.rst  https://review.openstack.org/58397814:53
devxThanks cjloader14:53
cjloaderevrardjp: been good, busy.14:53
cjloaderyou?14:54
evrardjpbusy busy indeed :)14:54
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_monasca-agent master: Change functional test to voting  https://review.openstack.org/58397914:54
tux__evrardjp: We have 20 compute node and 5 ceph cluster node, I want to use shared storage for all instance so i have live-migration option and all shared storage advantage, but i have few application they are super IO intensive which i want to run on LOCAL disk of compute node so they won't use shared storage, someone told me use cinder boot-volume so you can boot VM from cinder volume and they will be on Ce14:54
tux__ph storage and other instance which you don't want to be on ceph boot them from image so they will on LOCAL disk.14:54
cjloaderdevx: d34dh0r53 deals with mnaios alot, i'd ask him14:55
tux__evrardjp: do you think i don't need cinder for that to isolate some VM on shared storage and some of them on LOCAL compute disk?14:56
*** FrankZhang has joined #openstack-ansible14:57
openstackgerritweizj proposed openstack/openstack-ansible-os_trove master: Completed required variables for README.rst  https://review.openstack.org/58397814:57
tux__evrardjp: what solution will be better for my requirement? I am sure there must be a way14:58
*** gillesMo has joined #openstack-ansible14:58
evrardjpI am sorry I don't have time to answer those questions tux__ -- that's architecting your solution -- I don't have enough time or info to do so14:59
openstackgerritweizj proposed openstack/openstack-ansible-os_zaqar master: Add the tags into example playbook  https://review.openstack.org/58398014:59
tux__:(14:59
tux__all i want to understand does OSA can isolate config to make compute-1 to local and compute-2 to ceph ?15:00
guilhermesptux__: this is openstack level at all. You can use cells or host aggregates15:01
evrardjpguilhermesp: that's if using cinder volumes15:01
evrardjpbut yeah15:01
evrardjpelse he could probably mount ceph for some nodes on some location15:01
evrardjpand no cinder15:01
evrardjpelse...15:02
openstackgerritweizj proposed openstack/openstack-ansible-os_cloudkitty master: Completed required variables for README.rst  https://review.openstack.org/58398115:02
evrardjpprobably ignore the ceph for live migration and do standard block migrate15:02
evrardjpslower but works15:02
evrardjpI don't know the requirements :p15:02
tux__guilhermesp: if my all compute node configure to use Ceph then how do i tell compute-X to use LOCAL disk ?15:02
d34dh0r53devx: at the Drs office currently but IIRC I haven't seen that particular error. Does it happen during the deployment?15:02
tux__host aggregates doesn't support that15:02
guilhermesptux__: you define in your nova.conf if your compute node is going to use rbd driver, for exemple15:03
*** lbragstad has joined #openstack-ansible15:03
*** rmart04 has quit IRC15:03
*** vakuznet has joined #openstack-ansible15:04
tux__guilhermesp: Can i put that definition in Openstack_user_config?15:04
tux__guilhermesp: that would be my solution then15:04
openstackgerritweizj proposed openstack/openstack-ansible-os_searchlight master: Completed required variables for README.rst  https://review.openstack.org/58398315:05
*** Bhujay has quit IRC15:05
guilhermespyes tux__ this is one exemple of 3 computes of my env http://paste.openstack.org/show/726277/15:06
*** kstev has quit IRC15:07
guilhermespcompute9 and 11 launches instances with ceph backend.. compute10 uses local storage to launch instances15:07
tux__guilhermesp: oh!! so 9 using ceph and 10 using local disk :)15:07
tux__guilhermesp: you are awesome!!!!15:08
tux__guilhermesp: i don't need cinder anymore15:08
tux__guilhermesp: love that piece of codes thanks man!!15:08
tux__we should document this kind of small solution :)  i didn't find any good example like that15:09
openstackgerritzhulingjie proposed openstack/openstack-ansible-os_searchlight master: Completed required variables for README.rst  https://review.openstack.org/58398315:09
*** pcaruana has quit IRC15:12
*** taseer2 is now known as Taseer15:13
guilhermesptux__: then, after define this, I have a script that adds the compute node http://paste.openstack.org/show/726278/15:14
tux__so this script will add new compute node into cluster right?15:16
tux__guilhermesp: really cool! what else you have please shared with me... This is what i am looking for15:17
tux__guilhermesp: could you also shared some info about did you create Host aggregation and map with flavors?15:17
openstackgerritweizj proposed openstack/openstack-ansible-os_masakari master: Add the missing "#"  https://review.openstack.org/58399115:20
*** cshen has joined #openstack-ansible15:21
*** gkadam-brb is now known as gkadam15:21
*** kstev has joined #openstack-ansible15:22
vakuznetcloudnull have you seen this error http://paste.openstack.org/show/726279/ ?15:24
bgmccollumin neutron, have you always been able to attach a port to an instance, created from a network with port security disabled and doesn't have a subnet? cause i just discovered this...15:25
bgmccollumopens up fun things like VyOS instances that manage everything about the LAN side of the router...15:27
*** chyka has joined #openstack-ansible15:27
gillesMoHello ! I want to change the default domain name `openstack.local` of my hosts, and containers. My cluster is already deployed and in use. Will I break everything if I change lxc_container_domain and openstack_domain and relaunch setup-hosts.yml playbook ?15:28
openstackgerritweizj proposed openstack/openstack-ansible-os_panko master: test  https://review.openstack.org/58399315:28
*** DanyC has quit IRC15:30
*** DanyC has joined #openstack-ansible15:30
openstackgerritzhulingjie proposed openstack/openstack-ansible-os_panko master: Remove the unnecessary "="  https://review.openstack.org/58399315:31
*** poul has quit IRC15:32
openstackgerritweizj proposed openstack/openstack-ansible-os_aodh master: Remove the unnecessary =  https://review.openstack.org/58399515:35
openstackgerritweizj proposed openstack/openstack-ansible-os_tacker master: Remove the unnecessary =  https://review.openstack.org/58399615:35
openstackgerritweizj proposed openstack/openstack-ansible-os_searchlight master: Remove the unnecessary =  https://review.openstack.org/58399715:35
openstackgerritweizj proposed openstack/openstack-ansible-os_watcher master: Remove the unnecessary =  https://review.openstack.org/58399815:36
openstackgerritweizj proposed openstack/openstack-ansible-os_masakari master: Remove the unnecessary =  https://review.openstack.org/58399915:36
*** lvdombrkr has quit IRC15:36
*** vnogin has joined #openstack-ansible15:36
vakuznetodyssey4me have you seen this error http://paste.openstack.org/show/726279/15:37
tux__vakuznet: look like its relayed to get-pip.py version.. i had same issue last week15:37
vakuznetosa 17.0.6?15:38
tux__let me find ticket15:38
tux__or bug15:39
*** DanyC has quit IRC15:39
tux__get-pip.py version 3.3 you need15:39
tux__vakuznet: https://bugs.launchpad.net/bugs/177953415:39
openstackLaunchpad bug 1779534 in openstack-ansible "pip install offline fails with new version of get-pip.py" [High,Fix released] - Assigned to Jesse Pretorius (jesse-pretorius)15:39
*** DanyC has joined #openstack-ansible15:39
openstackgerritweizj proposed openstack/openstack-ansible-os_trove master: Remove the unnecessary "="  https://review.openstack.org/58400115:39
*** vnogin has quit IRC15:41
tux__put this in your user_variables and try http://paste.openstack.org/show/726280/15:41
*** DanyC has quit IRC15:44
*** rpittau_ has joined #openstack-ansible15:45
*** udesale has quit IRC15:46
*** rpittau has quit IRC15:48
*** mbuil_ has quit IRC15:48
vakuznettux__ thanks15:49
*** mbuil has joined #openstack-ansible15:50
*** hachi has quit IRC15:50
*** chyka_ has joined #openstack-ansible15:53
mbuilI need jinja2 support. Does anybody see anything wrong here: https://hastebin.com/sebigatamu.cs15:56
*** chyka has quit IRC15:57
*** Bhujay has joined #openstack-ansible15:59
*** vakuznet has quit IRC16:05
*** cshen has quit IRC16:06
*** shardy has quit IRC16:11
*** tux__ has quit IRC16:13
cloudnullafternoons !16:18
admin0hello cloudnull16:19
cloudnullqq - https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/vars/ubuntu-16.04.yml#L78 - does anyone know why we have that package being installed by default?16:19
cloudnullo/ admin0 hows it ?16:19
admin0still struggling with ceph :D16:20
evrardjpcloudnull: that reminds me something16:20
cloudnullI have a cloud where its running "linux-image-4.15.0-24-generic" and there is no "extra" package for it ?16:20
evrardjpdid you reboot?16:20
cloudnullso the deployment is essentially blocked unless I downgrade to "linux-image-extra-4.15.0-15-generic"16:20
evrardjpI mean is your system in sync with what's running ?16:20
evrardjp(the facts)16:21
cloudnullyes.16:21
cloudnullthe host is infact running 4.15.0-2416:21
cloudnullI wonder if that extra package things is needed?16:21
evrardjp4.15?16:22
evrardjpon xenial?16:22
cloudnullyes16:22
cloudnullrunning pike16:22
cloudnullhttps://github.com/openstack/openstack-ansible-openstack_hosts/blob/stable/pike/vars/ubuntu-16.04.yml#L7816:23
*** kberger has quit IRC16:23
cloudnullthe hosts were pre-kicked and handed over as-is16:23
cloudnullI could downgrade the kernel(s) however I'd rather not.16:24
evrardjpcloudnull: https://github.com/openstack/openstack-ansible-openstack_hosts/commit/48eeb134779dc51bd0d3c1374ff4090f20b1a6f616:24
*** KeithMnemonic has joined #openstack-ansible16:24
evrardjpcloudnull: could your issue be stale facts vs a system you just restarted?16:25
evrardjpelse all the packages should be in your mirror and that's a mirroring issue16:25
cloudnullnope.16:26
evrardjpexcept if you built your own kernel16:26
cloudnullthere's no extra package for that kernel16:26
cloudnullhttp://paste.openstack.org/show/726285/16:26
cloudnullmaybe that was an old issue w/ vhost_net16:26
cloudnulland not something we really need anymore?16:26
cloudnullhttp://paste.openstack.org/show/726287/16:27
cloudnullthose are all the 4.15 kernels16:27
*** coreywright has quit IRC16:27
cloudnulladmin0 did you get ceph running w/ the OSA integrated ceph?16:28
* cloudnull hasn't read much scroll back 16:28
evrardjpnot sure if it's a packaging problem or not16:28
evrardjpcloudnull: yeah I was apt searching through things16:28
evrardjpcloudnull: can you modprobe vhost_net onto these kernels?16:29
cloudnullthe other 4.15 kernels?16:29
evrardjpyour 4.15.0-2416:29
cloudnullyes thats what i have here http://paste.openstack.org/show/726285/16:30
evrardjp4.15.0-15 is fine for getting the extra16:30
evrardjpcloudnull: I think it's worth having an extra task16:30
evrardjpif linux-image-extra-{{ ansible_kernel }} exists, then add it to the list16:31
evrardjpelse ignore16:31
cloudnull++ that might be good16:31
evrardjpdoes that make sense ?16:31
evrardjpbecause some still ship16:31
evrardjpand I am not savvy into the reason they ship separated16:31
evrardjpI remember I had to add it on some of my nodes, and so it's easy to upgrade because it gets resolved16:31
evrardjpbut for someone that has latest and only deploys after the fact, that's a different story16:32
*** suggestable has quit IRC16:33
evrardjpmaybe ppl are just using virtio16:33
evrardjp: p16:33
evrardjpanyway16:34
evrardjpyeah probably worth making this optional16:34
evrardjpok I have to run16:34
evrardjpttyl16:34
cloudnullchao16:35
cloudnullhave a good one16:35
evrardjpI am getting those issues a lot nowadays16:35
evrardjphttp://logs.openstack.org/55/583955/3/check/openstack-ansible-functional-ubuntu-xenial/af69934/job-output.txt.gz#_2018-07-19_15_52_31_73276116:35
*** jwitko has joined #openstack-ansible16:35
evrardjpthat's painful.16:35
evrardjpI will be back later16:35
evrardjpI will merge the two patches for getting M3 running16:36
evrardjpI just have to go rn16:36
cloudnullcool16:36
cloudnulltake care ttys16:36
*** epalper has quit IRC16:38
cloudnullevrardjp i suspect the http://logs.openstack.org/55/583955/3/check/openstack-ansible-functional-ubuntu-xenial/af69934/job-output.txt.gz#_2018-07-19_15_52_31_732761 issue is related to the testing changes related to the use of become, setting the user, etc16:39
cloudnulllooks like it's failing to connect to localhost, which i suspect is not using connection local, etc.16:39
*** coreywright has joined #openstack-ansible16:40
*** tux_ has joined #openstack-ansible16:43
odyssey4meevrardjp: was that from the nova role test, or from another repo?16:43
odyssey4meFYI I've noticed that we have varying settings for lxc in tests, so https://review.openstack.org/583241 aims to resolve that16:45
*** vnogin has joined #openstack-ansible16:46
evrardjpodyssey4me: tempest16:46
*** suggestable has joined #openstack-ansible16:46
odyssey4meI wonder if removing the python interpreter for localhost's host_vars would help16:50
*** vnogin has quit IRC16:50
odyssey4meotherwise, perhaps that connection override isn't working and we need to change the play to separate out nova_compute from the rest16:51
odyssey4meoh, it already is - what's there worked for ironic (compute in a container), but hasn't worked when compute is on localhost16:52
*** suggestable has quit IRC16:53
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Move MQ vhost/user creation into role  https://review.openstack.org/58337816:54
odyssey4meevrardjp cloudnull thoughts on how to tackle this? I'm thinking that perhaps we just make all tests doing nova_compute must do it on localhost and eliminate this tragedy: https://github.com/openstack/openstack-ansible-tests/blob/master/test-install-nova.yml#L105-L106 ?16:58
odyssey4meunless someone has a better dea?16:58
odyssey4me*idea16:58
odyssey4meoh wait, that's a different play16:59
odyssey4methis is the part crapping out: https://github.com/openstack/openstack-ansible-tests/blob/master/test-install-nova.yml#L21-L2817:00
odyssey4meI have an idea.17:01
cloudnulli support your idea :)17:02
odyssey4meyeah, I think I'm just going to go with changing the ironic role to put compute on localhost17:07
odyssey4meand the cinder fails will need to be forced to put some services on localhost too17:07
logan-odyssey4me: idk the story behind the shift to connection: local stuff recently but in my tests i usually try to never override the connection, and i also do not override the implicit localhost, that way you can always assume your default connection is going to be ssh (same in test as prod), and your implicit localhost will be intact with connection=local. then target your playbook nova_all at something like http://paste.openstack.org/raw/7262917:07
logan-2/17:07
logan-http://paste.openstack.org/raw/726292/ *17:07
logan-so your "remote" host is testhost1, and your delegate_to: localhost still works exactly as it would in non-test envs17:08
odyssey4melogan-: yeah, I was trying to work through this without touching every role inventory :/17:08
*** gkadam has quit IRC17:09
odyssey4methe issue at hand here is that if we use 'remote_user: root' and 'become: yes' together, and it targets localhost - we lose all the env vars for the user17:09
odyssey4methat breaks all kinds of things17:09
odyssey4meespecially given that we're now delegating a bunch of stuff back to localhost in the roles (service setup, etc)17:09
logan-gotcha17:11
logan-why not create a host to target the play at with ansible_become=yes and leave the implicit localhost intact without become17:11
odyssey4meinitially I pulled 'become: yes' out, given that we're using 'remote_user: root', but then all sorts of things crapped out when the play targeted localhost17:11
odyssey4meI guess that's because of the implicit switch to 'connection: local'17:12
odyssey4meSo I guess we either assume localhost for some services, and adjust inventories accordingly; or we adjust inventories for those services to use an inventory_hostname other than localhost and has the address 127.0.0.117:13
*** vakuznet has joined #openstack-ansible17:13
odyssey4meI suppose the second option, as you suggest, is perhaps cleaner.17:14
*** Bhujay has quit IRC17:14
odyssey4meok, I like it - lemme sort all that out17:15
odyssey4meI'd like to get this nonsense behind me17:15
logan-:)17:15
odyssey4meoh, for the sake of interest - in retrospect this would probably have been easier to achieve in python, but I gave it a go: https://gist.github.com/odyssey4me/5b0eacf86b544dec0a8a4ef4229c277c17:17
guilhermespguys, see you can figure out with me a strange behaviour with aio using 17.0.6 that I've been facing since yesterday ( I was discussing this with logan- anyway )17:17
odyssey4meI used that playbook for the 'Move MQ tasks into the roles' patches17:17
guilhermespa fresh clean install with xenial, running setup-everythings breaks here http://paste.openstack.org/show/726294/17:18
logan-hah nice odyssey4me17:18
guilhermespthis is kinda of related I guess https://bugs.launchpad.net/openstack-ansible/+bug/177765517:18
openstackLaunchpad bug 1777655 in openstack-ansible "neutron-db-manage fails during OSA installation" [Undecided,Fix released] - Assigned to Maksim Malchuk (mmalchuk)17:18
logan-looking guilhermesp17:18
guilhermespthe solution that I found was: destroy neutron server container, recreate and then run os-neutron-install.yml17:18
guilhermespso the installation flows as expected17:18
guilhermespnot http proxy behind me anyway17:19
guilhermespno*17:19
guilhermespis not that urgent. I'm just putting myself in a position of a new osa-user17:19
logan-guilhermesp https://github.com/openstack/openstack-ansible/blob/17.0.6/playbooks/defaults/repo_packages/openstack_services.yml#L33-L3417:22
logan-the date on that tag does not contain the fix from the bug17:22
logan-because it wasn't merged until 6/1917:23
guilhermespah k, makes sense now17:23
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379417:23
logan-the latest queens sha in requirements is 96b284d498c9302a07554023bc865700e8254a9517:23
guilhermespwhat doens't makes sense is why destroying and recreating the containers makes it work17:24
guilhermespneutron container*17:24
logan-yeah without seeing the logs who knows, but you could try bumping your requirements sha forward to apply the bugfix17:24
odyssey4meguilhermesp: probably because the first attempt does some database things, then fails17:25
odyssey4methen the second may be able to recover17:25
guilhermespodyssey4me the second with the recreated neutron container?17:25
odyssey4meguilhermesp: full disclosure, I haven't looked at the bug or paste :p17:26
guilhermespodyssey4me haha17:26
guilhermespanyway, I was just curious but logan- made it clearer17:27
guilhermespmy motivation was to reproduce this bug https://bugs.launchpad.net/openstack-ansible/+bug/178237217:27
openstackLaunchpad bug 1782372 in openstack-ansible "Rally install fails on existing deployment creation" [Undecided,New]17:27
guilhermespI think I may know the fix, so do we wait until next bug triage session or does anyone who want to apply a fix can do that?17:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Connect to localhost as remote host for cinder/nova  https://review.openstack.org/58403317:30
admin0logan-, i think bluestore is not picked up .. so no matter how i specify it, it did not worked .. when you have time, can u confirm on this ?17:31
logan-admin0: osd_objectstore: bluestore in user_variables didn't work?17:31
logan-these are new osd builds right?17:32
logan-it won't change over any existing osds17:32
admin0brand new17:32
admin0it did not worked17:32
logan-any old metadata on the drives you can see with ceph-disk list?17:32
guilhermesplogan- going to have a look carefully next time https://imgur.com/a/trWup0X   :)   +1 skill acquired, thanks17:32
admin0logan-, no matter what I did , even /dev/sda /dev/sdb, it always ends up with: fatal: [s1]: FAILED! => {"changed": false, "failed": true, "msg": "please provide devices and dedicated_devices to your osd scenario"}17:33
*** epalper has joined #openstack-ansible17:34
admin0if i give dedicated_devices, it says give devices17:34
logan-admin0: that doesn't have anything to do with bluestore then17:34
logan-admin0: http://docs.ceph.com/ceph-ansible/master/osds/scenarios.html17:34
admin0there is a if condition that checkes if filestore/bluestore ..   .. so when i follow that link and give disks , it says no devices17:34
admin0data  -- tried this as well17:35
admin0data  - /dev/sda   , /dev/sdb17:35
logan-do you have the 'osd_scenario' and 'devices' vars defined17:35
admin0osd_scenario yes17:35
admin0devices are in the host_vars as yo have showed17:35
*** rmart04 has joined #openstack-ansible17:36
admin0and i did verify with debug that it sees the devices17:36
logan-hmm17:36
logan-are you using a non-collocated scenario?17:37
logan-or collocated?17:37
admin0tried all :)17:37
admin0the only thing not tried is to not use bluestore because my boss wants bluestore and nothing else17:37
admin0i am setting it up again ..17:38
logan-so collocated scenario with devices, and 'ansible s1 -m debug -a msg="{{ osd_scenario }} {{ devices }}" should show you stuff if the host_vars setting is working17:38
*** epalper has quit IRC17:39
admin0evrardjp showed me a different way to validate those17:39
admin0let me quick set it up again and then give results here17:39
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest master: Switch compute to use different inventory_hostname  https://review.openstack.org/58403717:39
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_ironic master: Remove localhost from neutron agents group  https://review.openstack.org/58403817:43
*** rmart04 has quit IRC17:43
*** rmart04 has joined #openstack-ansible17:44
admin0if i have to redo an env again, i delete the lxc-containers and the 00apt proxy .. how is the pip proxy being added ?17:44
admin0because pip fails .. i think its pointing to some proxy as well17:44
admin0nvm17:46
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest master: Switch compute to use different inventory_hostname  https://review.openstack.org/58403717:48
*** rmart04 has quit IRC17:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum master: Switch compute/storage to use different inventory_hostname  https://review.openstack.org/58404217:53
*** electrofelix has quit IRC17:54
*** mattinator has joined #openstack-ansible17:58
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_octavia master: Switch compute to use different inventory_hostname  https://review.openstack.org/58404817:58
*** gillesMo has quit IRC17:58
*** hachi has joined #openstack-ansible18:00
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_octavia master: Switch compute to use different inventory_hostname  https://review.openstack.org/58404818:00
*** poopcat has joined #openstack-ansible18:01
*** cshen has joined #openstack-ansible18:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Switch compute to use different inventory_hostname  https://review.openstack.org/58404918:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest master: Switch compute to use different inventory_hostname  https://review.openstack.org/58403718:04
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_magnum master: Switch compute/storage to use different inventory_hostname  https://review.openstack.org/58404218:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_octavia master: Switch compute to use different inventory_hostname  https://review.openstack.org/58404818:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_octavia master: Switch compute to use different inventory_hostname  https://review.openstack.org/58404818:06
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Switch compute to use different inventory_hostname  https://review.openstack.org/58404918:06
*** cshen has quit IRC18:07
*** armaan has joined #openstack-ansible18:07
*** DanyC has joined #openstack-ansible18:08
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Move MQ vhost/user creation into role  https://review.openstack.org/58338718:09
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_octavia master: Move MQ vhost/user creation into role  https://review.openstack.org/58338818:09
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder master: Switch storage to use different inventory_hostname  https://review.openstack.org/58405218:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Switch compute to use different inventory_hostname  https://review.openstack.org/58404918:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Move MQ vhost/user creation into role  https://review.openstack.org/58338718:14
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_cinder master: Move MQ vhost/user creation into role  https://review.openstack.org/58336618:15
jamesdentonQuick question. I'm updating a role to install a pip package, but the version in the repo server is older than what I need. How can I update that?18:17
*** hachi has quit IRC18:19
odyssey4mejamesdenton:  you can override the upper-constraints, then rebuild the repo... but if that package is used by other services then it will get implemented for them all and may have side-effects18:20
odyssey4mewhich package is this?18:20
odyssey4me(if I may ask)18:20
jamesdentonneutron_lib18:20
jamesdentonya know, an important one18:21
jamesdentonlol18:21
odyssey4meis this a production env, or master?18:21
jamesdentonmaster18:21
odyssey4me(a test env)18:21
odyssey4meoh ok, meh then should be fine  I guess18:21
*** DanyC has quit IRC18:21
odyssey4mealthough we've found nova/keystone/neutron have competing requirements at the moment and they each break each other apparently18:21
odyssey4mehttps://review.openstack.org/574006 has been ongoing for some time18:22
*** DanyC has joined #openstack-ansible18:22
jamesdentonok good to know18:22
odyssey4meanyway, the var to se in your user_variables to override constraints is https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L29-L3218:22
odyssey4meso you just add 'neutron_lib==x.y.z' as a list item to it18:23
odyssey4mejrosser & logan- this may interest you: https://review.openstack.org/58394318:23
*** hachi has joined #openstack-ansible18:24
odyssey4me(non-root ceph cluster key fetching)18:24
jamesdentonok perfect, thanks!18:24
logan-ah slick18:24
*** DanyC has quit IRC18:27
*** tux_ has quit IRC18:27
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379418:32
*** vnogin has joined #openstack-ansible18:34
*** vnogin has quit IRC18:38
cloudnulld34dh0r53 tux_ looks like https://review.openstack.org/#/c/583234/ is dead in the water...18:40
cloudnullits in for master, and an override can be set, but the upstream fix is blocked.18:42
*** cshen has joined #openstack-ansible18:42
d34dh0r53hmm, I can see the rationale but I think we've seen the 3.2 issues in our internal gates18:42
odyssey4mean alternative has been proposed which forgoes the need to go through a pip downgrade https://review.openstack.org/58392518:44
odyssey4meevrvjust needs to unblock it18:46
odyssey4meevrardjp:18:46
cloudnullseems like the latter has more moving parts than just setting the script version to 3.318:46
odyssey4mehey, I'm just the messenger18:46
* cloudnull not shotting the messanger18:47
admin0someone adds pip.conf  with the proxy in setup-hosts ..   i delete and it adds it back .. how to prevent that ?18:47
odyssey4memoving to 3.3 puts us into a place where we have to downgrade pip, which has its own problems - that patch will upgrade from an earlier version in place - and 3.2 will do fine on a clean install, which is the only time get-pip will get used18:47
admin0something*18:47
odyssey4meso yeah, I think it will be better in the long term18:48
odyssey4meadmin0: you can't, it does that and should do that - the config in pip.conf depends on whether the repo server is live or not though18:48
admin0but i deleted all the containers and deleted the mappings and inventory and this is the 2nd go around18:49
admin0no containers are created in this 2nd round, because it does not go pass this step18:49
odyssey4meadmin0 however, https://review.openstack.org/564422 + https://review.openstack.org/568502 + https://review.openstack.org/568637 make it better - I just haven't figured out why it fails the gate18:49
odyssey4menot sure if anyone has cycles to try and figure that out18:50
odyssey4melemme rebase those and fire up a test node to see18:50
admin0chattr +i will fail it again, so i was thinking to do while true do echo > /root/.pip/pip.conf, so that the setup-hosts goes through18:51
odyssey4meadmin0: then you'll get other breakage18:52
admin0:D18:52
odyssey4metry clearing the fact cache?18:52
admin0:( .. i always miss tis18:52
admin0this18:52
admin0removed facts cache,  removed the pip.conf .. no containers created yet .. running setup-hosts again18:53
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: Adds networking-ovn support  https://review.openstack.org/58406718:54
admin0and it came back again and fails pip18:55
admin0:(18:55
odyssey4mewhat's the failure admin0 ?18:56
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Ensure that repo checks use the right values  https://review.openstack.org/56442218:56
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Ensure that the repo servers also use the pypi cache  https://review.openstack.org/56850218:56
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Remove default pip_links value  https://review.openstack.org/56863718:56
admin0RetryError: HTTPConnectionPool(host='cloud-int.domain.com', port=8181): Max retries exceeded with url: /os-releases/17.0.6/ubuntu-16.04-x86_64/ (Caused by ResponseError('too many 503 error responses',))"], "stdout": "", "stdout_lines": []}18:56
admin0because that container is already deleted18:57
admin0so there is no 818118:57
odyssey4meyeah, that's the damned links thing18:57
openstackgerritJames Denton proposed openstack/openstack-ansible master: Adds haproxy endpoints for networking-ovn support  https://review.openstack.org/58406918:57
odyssey4meok, gimme some time to fire something up to try it18:57
cloudnullodyssey4me http://paste.openstack.org/show/726303/ - it doesn't look like it downgrades at all ?18:59
odyssey4mecloudnull: well, I don't know what to say - I agree, but don't have the energy for it19:00
odyssey4meboth ways will work, and I think evrardjp's proposal is perhaps better, but they'll both work...19:01
odyssey4meperhaps better to discuss with him when he's online again19:01
logan-we still have to rely on 3.2 working for the initial install with evrardjp's method. does the 3.2 breakage only occur during upgrades?19:01
odyssey4melogan-: good question19:02
odyssey4methe original bug reported said that 3.2 worked well for him19:02
odyssey4me3.3 was a follow up by someone else19:02
admin0odyssey4me, for now, is there anything i can delete to do this again19:03
cloudnullthe issue was 3.2 broke on cent w/ py 2.7.519:03
odyssey4meluckily for master we can ditch get-pip entirely and never deal with this nonsense again19:03
admin0repos are on setup infra, i am stuck on setup hosts19:03
cloudnullwhich tux and I spent the better part of an evening debugging19:03
logan-so cloudnull even with evrardjp's patch it should still fail the initial pip install right?19:04
odyssey4meadmin0 if you checkout https://review.openstack.org/#/c/568637/ with all its deps then that should work: git fetch https://git.openstack.org/openstack/openstack-ansible refs/changes/37/568637/6 && git checkout FETCH_HEAD19:04
cloudnulland there was no upgrade/downgrade shinanigans, I had tux uninstall pip and try again19:04
cloudnulllogan- i'd say yes.19:04
logan-ok yea thats what im thinking19:04
*** tux_ has joined #openstack-ansible19:04
odyssey4mebest to review the patch then19:04
odyssey4meperhaps combining both fixes would be good, because then if pip is on the host, it'll use that pip - otherwise it'll download 3.3 and use that19:05
odyssey4me*get-pip 3.319:05
admin0done ..  running it again19:06
cloudnullwhen tux_ is around again maybe we can get more on that issue.19:07
odyssey4mecloudnull: all the patches for 3.3 from master would need porting back for 3.3 to be used: https://review.openstack.org/#/q/topic:bug/177953419:07
odyssey4methe pip_install one is useless on its own, because its values are overridden by the integrated repo19:08
admin0odyssey4me, thanks .it added the pip.conf but not that line :)19:08
odyssey4methen the repo_build patch is there for completeness and consistency mostly19:08
* cloudnull lives in a world where everything is master ATM and was trying to fix this for a user stable.19:11
tux_cloudnull: here19:11
cloudnulltux_ do you have the ability to validate https://review.openstack.org/#/c/583925/19:12
cloudnullre: that get-pip issue you were seeing the other day19:12
evrardjp[m]hey... my phone vibrated too much. it's normal 3.2 would fail on centos 7.5 as centos ships with a more recent version.19:12
cloudnullif that works in your env19:12
evrardjp[m]we just need to make sure 3.2 is not used19:13
cloudnullevrardjp[m] it works w/ 3.319:13
tux_I have all centos7.5 host and it was failing19:13
evrardjp[m]i am sure of it19:13
evrardjp[m]it would upgrade pip to 1019:13
cloudnullalso tux was running an upgrade from stable tag to stable tag19:13
evrardjp[m]that's a bad idea.19:13
evrardjp[m]yeah19:13
odyssey4meevrardjp[m]: what if pip is not on the host already19:13
cloudnullso i dont think that right19:13
evrardjp[m]not surprised19:13
odyssey4meevrardjp[m]: we execute get-pip with constraints, so it doesn't install pip1019:14
cloudnullevrardjp upgrading from stable/tag to stable/tag is not a bad idea...19:14
evrardjp[m]mmm that's fair odyssey4me19:15
logan-yea the constraints thing got fixed when pip10 was released19:15
evrardjp[m]yeah cloudnull  i don't think it would be a problem from tag to tag19:15
odyssey4meI think it might be good to implement both patches, because evrardjp's patch will make it use an existing pip if it's there19:16
logan-thats what im thinking odyssey4me19:16
logan-i agree19:16
odyssey4mebut the 3.3 patch will make it use get-pip.py 3.3 with constraints if there is no pip19:16
evrardjp[m]agreed19:16
*** tosky has quit IRC19:16
odyssey4meevrardjp[m]: if you could unblock all those patches it'd be nice :)19:16
tux_vakuznet: was also getting same issue to today he mentioned that in earlier post http://paste.openstack.org/show/726279/19:16
odyssey4me(including your own)19:16
cloudnullevrardjp[m] it was a problem for tux_ ?19:17
evrardjp[m]odyssey4me: my concern is not for pip install role19:18
evrardjp[m]assuming my patch gets in and 3.3 on pip install role happens.19:18
odyssey4meevrardjp[m]: yeah, bootstrap-ansible is where your concern lies19:18
evrardjp[m]yeah. or bumping the constraints to 10.19:18
*** armaan has quit IRC19:19
evrardjp[m]I think we should do it, eventually19:19
odyssey4meevrardjp[m]: I can fix bootstrap-ansible to sort that out, because I think your other patch to remove its use for master is good, but we need a solution for stable branches. That solution is to constrain.19:19
evrardjp[m]i just rather wait for results of the change in master.19:19
evrardjp[m]yeah19:19
evrardjp[m]lgtm19:19
evrardjp[m]will unblock all of those now that we have discussed it.19:20
odyssey4mewell, I think that patch failed - but haven't checked why... I guess I could patch master for now, then your patch can sort things out later?19:20
evrardjp[m]when I'll be back home :)19:20
odyssey4meoh, we already do constrain installing pip for bootstrap-ansible19:21
evrardjp[m]do we ?19:22
odyssey4mehttps://github.com/openstack/openstack-ansible/blob/master/scripts/scripts-library.sh#L385-L38819:22
tux_cloudnull: as soon as i get time i will try to fire up on my LAB 16.0.15 version19:22
evrardjp[m]yeah that part yes just a sec19:23
odyssey4meit's part of the function, so that happens for the host and venv19:23
evrardjp[m]yeah19:25
evrardjp[m]sounds good.19:25
evrardjp[m]missed that. it would be good enough for stable branches, assuming we do this 3.3 thing everywhere.19:26
evrardjp[m]cloudnull: can you bring the other patches in? I will review them and remove my votes.19:26
odyssey4metyvm evrardjp[m] for taking time out of your evening19:27
cloudnullsure.19:27
evrardjp[m]upgrade my votes at least. Hoping no issue and no pip10 will reach the hosts19:27
evrardjp[m]thanks19:27
evrardjp[m]i said cloudnull  but it could as well be tux__  or d34dh0r5319:28
evrardjp[m]i don't want to add more work to cloudnull  particularily ;)19:28
* cloudnull appreciates that19:29
odyssey4me:)19:29
evrardjp[m]odyssey4me: lady is giving me the looks already, I should probably do something :p19:29
odyssey4mehaha, be with your partner... sorry for the interruption19:29
odyssey4mecloudnull:  are you picking the backports of https://review.openstack.org/#/q/topic:bug/1779534+is:starred up, or shall we let tux_ do it if he wishes?19:30
tux_evrardjp[m]: what i need to do, just to make sure i am on same page.. I will build OSA with 16.0.15 soon once i finish my other duty..19:30
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379419:31
odyssey4melol, I should probably have starred by or whatever19:31
cloudnullodyssey4me im good either way?19:32
cloudnulld34dh0r53 tux_?19:32
odyssey4meit'd be https://review.openstack.org/583331 and https://review.openstack.org/583342 and https://review.openstack.org/58329819:32
odyssey4me2 I think can just be done in gerrit, one will need fixing for queens, then can be ported from gerrit for the rest19:33
tux_cloudnull:  i have setup my lab currently i am running 16.0.15 so i will try to downgrade and then upgrade to test pip, otherwise i can try 17.0.X to give it a try19:36
jrosserodyssey4me: we ran an aio today with those 3 stubborn patches starting at https://review.openstack.org/564422. it looks like it fails here the same way in the gate19:36
odyssey4mejrosser: orly? that's good news - I'm busy doing exactly that - did you figure anything out about what the cause might be?19:37
jrossernot yet - only that this is the point it bails out http://paste.openstack.org/show/726305/19:38
jrosserthats all done in jenkins/vagrant so theres nothing to go poking at after it finishes19:40
odyssey4meyep, my guess was that somehow the reverse proxy is failing19:40
odyssey4meI thought it was DNS resolution, but no - some test patches ruled that out.19:41
jrosserbut at least theres now something running regularly in a proxied environment so we'll see problems earlier19:41
odyssey4meI am very seriously toying with the idea of reverting the nginx reverse proxy to get queens back to the state of pike with regards to the repo... but I have no idea what dragons lurk due to the volume of intermingled changes that were made.19:42
jrosserthe only thing thing that stands out in that error is that all the pythion version references are to 3.x19:42
odyssey4meoh wait, that died when trying to do galera_client on the repo container itself19:42
jrosserwhich may be bogus, but looks wierd19:43
odyssey4mehere I have the repo happily building :/19:43
jrosserlet me look again19:43
odyssey4meoh no, those are standard warnings if your constraints file has py3 references... they're totally cosmetic19:43
odyssey4methe real problem there is 'No matching distribution found for MySQL-python'19:44
odyssey4mehmm, and my build is running smoothly :/19:45
odyssey4meit may have to do with what's on the host at the start... my host isn't totally clean19:45
jrosserso that looks a bit like this? http://logs.openstack.org/22/564422/8/check/openstack-ansible-deploy-aio_lxc-ubuntu-xenial/b1fb7d8/job-output.txt.gz#_2018-07-17_20_35_52_307725http://logs.openstack.org/22/564422/8/check/openstack-ansible-deploy-aio_lxc-ubuntu-xenial/b1fb7d8/job-output.txt.gz#_2018-07-17_20_35_52_30772519:45
jrosserargh19:45
jrosserhttp://logs.openstack.org/22/564422/8/check/openstack-ansible-deploy-aio_lxc-ubuntu-xenial/b1fb7d8/job-output.txt.gz#_2018-07-17_20_35_52_30772519:45
odyssey4meso check this: http://logs.openstack.org/22/564422/8/check/openstack-ansible-deploy-aio_lxc-ubuntu-xenial/b1fb7d8/logs/openstack/aio1_repo_container-c0c7b5e0/pypiserver/pypiserver.log19:46
jrosseras far as i can see my build has failed just like that one19:46
odyssey4meclearly the package query came in19:46
odyssey4meand see this: http://logs.openstack.org/22/564422/8/check/openstack-ansible-deploy-aio_lxc-ubuntu-xenial/b1fb7d8/logs/openstack/aio1_repo_container-c0c7b5e0/nginx/openstack-slushee.error.log19:47
odyssey4me'upstream server temporarily disabled while connecting to upstream' is what I've suspected as the culprit19:48
jrossererr ipv6 going on there?19:48
odyssey4meyep, that's why I tried https://review.openstack.org/#/c/571436/1 but same results19:48
odyssey4meso, given that this is all working nicely for pike - and nicely for master... perhaps the best strategy is to back out the reverse proxy thing for queens19:50
jrosserit would be nice to have an actual box to poke at this on19:50
odyssey4meyeah, the trouble is that I've tried several times and can't replicate it19:51
jrosserbecasue it might be a minor config change somewhere to clobber the v6 resolution19:51
odyssey4mehmm, maybe I should try with virtualbox19:51
odyssey4meor perhaps the MNAIO tooling19:51
jrosseri was talking with rick today and we were going to to vagrant/virtualbox next19:52
odyssey4mewell, another approach is to try using pypiserver as an extra-index (as the docs suggest) and have nginx be purely a reverse proxy for those paths19:54
odyssey4meie nginx won't have to try pypiserver first, then upstream19:55
odyssey4meperhaps the results will be more consistent19:55
odyssey4mein master none of this matters because we no longer pip install things on the host, mostly - and those we do are after the repo build19:56
jrosserif your tests are somewhere with working v6 perhaps thats why it was ok19:56
jrosseri dont have any v6 which makes it out of the internal network19:56
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: [TEST] do not use ipv6 for nginx reverse proxy  https://review.openstack.org/57143619:57
openstackgerritAndy Smith proposed openstack/openstack-ansible master: [WIP] Add qdrouterd role for messaging backend deployment  https://review.openstack.org/57026119:57
odyssey4merestored and rebased those test patches, given we don't have those logs any more - it'd be good to see them again to see if the disabling of ipv6 resolution worked19:58
jrosseri need to add some artefact gathering to my jenkins job19:59
jrosseri bet it's the same sort of trouble19:59
odyssey4mehang on a minute - jrosser aren't you overriding the pypi address?19:59
odyssey4meie https://github.com/openstack/openstack-ansible-repo_server/blob/master/templates/nginx-pypi.conf.j2#L1020:00
odyssey4meso in your case, ipv6 is not a facter, because a fail if you have that override set to your local pypi repo means that something else broke20:00
odyssey4me*factor20:01
jrossergimme a moment....20:01
odyssey4meheh, in fact if I make sure that it overridden in our tests to the infra mirror, that might just work20:02
jrosserthis is an aio, just on a box with the proxy env vars set20:02
jrosseri don't think it is trying to also use the pip mirror, but i need to double check that20:03
odyssey4mewell, that may actually be the deciding factor here20:03
odyssey4meit may actually be an ipv6 routing/resolution issue20:03
*** FrankZhang has quit IRC20:04
odyssey4me:( we set the infra mirror already: https://github.com/openstack/openstack-ansible/blob/stable/queens/tests/roles/bootstrap-host/templates/user_variables.aio.yml.j2#L19020:06
*** cshen has quit IRC20:06
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_rally stable/queens: Change rally pip package  https://review.openstack.org/58408920:09
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests stable/queens: Update get-pip to version 3.3  https://review.openstack.org/58409020:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests stable/pike: Update get-pip to version 3.3  https://review.openstack.org/58409120:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests stable/ocata: Update get-pip to version 3.3  https://review.openstack.org/58409220:12
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379420:12
evrardjpodyssey4me: do we really want a comment patch on master for https://review.openstack.org/#/c/583925/ ?20:13
odyssey4mesure, until that all changes it's important to address the status20:13
odyssey4meI can PR that comment if you like20:14
evrardjpI am fine with no comment as this is clear in the code, but ok if you like20:14
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_rally stable/queens: Change rally pip package  https://review.openstack.org/58408920:14
evrardjpwe can backport that separately if we are in a hurry20:14
evrardjpremoved the -w20:14
odyssey4meyeah, I'll do a patch to master20:14
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379420:15
guilhermespodyssey4me I saw your comment on https://review.openstack.org/#/c/584089/20:15
guilhermespI will propose there now20:15
evrardjpI forgot to ask a question earlier for tux_ and cloudnull20:16
*** cshen has joined #openstack-ansible20:16
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Pin get-pip.py to 3.2  https://review.openstack.org/58409320:16
evrardjpthe stacktracing we see20:16
evrardjpit makes sense if pip is downgraded20:17
evrardjpbut you said it happened on an tag to tag upgrade20:17
evrardjpso I am not surprised we had a gap there that should be fixed by the pip install patch20:17
evrardjpbut is there a need to bump to 3.3 ?20:17
evrardjpbecause new installs would not stacktrace with 3.220:18
evrardjpupgrades would take existing pip on the host -> everything is fine20:18
evrardjpThere is a gap in my understanding20:18
cloudnulltux_ ^ I don't remember the version you had, and the version you went to ?20:18
evrardjpwhen I meant upgrades I meant "OSA branch upgrades, whether tag per tag or major"20:18
cloudnullI believe it was pike to pike20:19
cloudnullbut i dont remember the tag numbers.20:19
evrardjpyeah so this patch in not in pike so that would explain20:19
tux_cloudnull: i was on 16.0.14 and trying to upgrade 16.0.1520:19
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Update get-pip to version 3.3  https://review.openstack.org/58409520:19
vakuznetupgrade from 17.0.5 to 17.0.6 failed for me with get-pip 3.220:19
evrardjptux_: and you had pip installed on the host, right?20:19
evrardjpvakuznet: stacktrace too?20:19
vakuznetyes20:20
evrardjpvakuznet: centos too?20:20
tux_yes i had pip 9.0.3 already20:20
vakuznethoyes20:20
evrardjpok makes all sense20:20
evrardjpso if we were to use pip on the host it would have been just fine20:20
evrardjpso there is no need to bump to 3.320:21
evrardjp3.3 could fix it20:21
vakuznet3.3 bump fixed this for me20:21
evrardjpand IS fixing it (by running newer code)20:21
evrardjpbut is not needed20:21
evrardjpper se20:21
evrardjpyeah20:21
cloudnullit didnt seem like 3.2 worked at all.20:21
evrardjpwell it worked for us for years :p20:21
evrardjpor months at least20:22
cloudnullI believe it was unpinned for the most part20:22
*** vnogin has joined #openstack-ansible20:22
evrardjpit was20:22
evrardjpbut it was effectively the 3.220:22
evrardjpthe problem is the new package that went out 18 days ago20:22
evrardjppython-virtualenv and others20:22
evrardjpthe problem is that we have pip installed on the host and try to run a very old pip from 3.220:23
vakuznetyesterday i upgraded other environment with older repo server and it worked with get-pip 3.220:23
evrardjpthat's bad20:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Update get-pip to version 3.3  https://review.openstack.org/58409520:23
evrardjpvakuznet: because it had no pip installed on the node20:23
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_rally master: Change rally pip package  https://review.openstack.org/58409620:23
tux_here is the details https://bugs.launchpad.net/openstack-ansible/+bug/178205120:23
openstackLaunchpad bug 1779534 in openstack-ansible "duplicate for #1782051 pip install offline fails with new version of get-pip.py" [High,Fix released] - Assigned to Jesse Pretorius (jesse-pretorius)20:23
evrardjpso I confirm my position on the absence of need of get-pip 3.3 if the other patch to pip install go in20:23
evrardjptux_: I read the bug, and for me, I fixed it20:24
tux_evrardjp: it was failing here20:24
vakuznethow repo server can not have pip??20:24
evrardjptux_:  but you didn't try my patch, did you?20:24
tux_no i didn't :(20:24
tux_dealing with production issue :(20:24
evrardjpanyway I am fine with backporting 3.320:24
tux_I will try soon but and report back20:24
evrardjpI just way beyond the point of caring20:24
evrardjpif ppl want to backport, fine for me :)20:25
evrardjpI just think it's not a patch targetting the root cause, but the effects.20:25
odyssey4meevrardjp: both is good20:26
evrardjpodyssey4me: agreed.20:26
*** vnogin has quit IRC20:26
evrardjpthat's what we said earlier IIRC :p20:26
jrosserbtw evrardjp i had a very good day with json_query today after seeing you'd used that20:26
evrardjpjrosser: :)20:26
evrardjpjrosser: I love it20:27
jrosserit basically saved my life with all the changes to the nxos_* modules in 2.620:27
evrardjpit's been a while I've been using it, and I have a bug in OSA to make use more of it20:27
evrardjplet me find that20:27
evrardjpjrosser: if you want to tackle it: https://bugs.launchpad.net/openstack-ansible/+bug/176910020:28
openstackLaunchpad bug 1769100 in openstack-ansible "Use json_query whenever possible" [Wishlist,Confirmed]20:28
evrardjpall of these conditions are one liners20:28
evrardjpodyssey4me: you worked on the tempest issue right?20:29
evrardjpcloudnull: talking about pining of 3.2 or whatever,I prefer the situation now, I prefer it's pinned. It's safer for the future. I think we are in a place that's VERY stable, compared to what I remember from Kilo : )20:29
evrardjpgood old times :)20:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/pike: Update get-pip to version 3.3  https://review.openstack.org/58409820:30
cloudnullah the good old days20:30
odyssey4meheh, any new pypi release and all hell broke loose20:30
jrosserodyssey4me: i have an aio started off to look see if it is v6 or something else20:30
odyssey4mepip/setuptools would break stable deployments every week20:30
evrardjphahah20:31
jrosserthat will be sufficiently cooked by the morning to see whats happened20:31
cloudnullpip 2.6 for life !20:31
evrardjpcloudnull: lol20:31
evrardjpeasy_install fowever20:31
odyssey4medistro packages would overwrite pip packages (we have no venvs then)20:31
evrardjpyeah!20:31
evrardjpwe've gone a long way20:31
cloudnullah memories20:31
odyssey4meoh yeah, and ansible 1.5 or so IIRC20:31
odyssey4memight even have been 1.320:32
evrardjpnah20:32
odyssey4meyou know, its own var precedence was a thing of beauty20:32
evrardjpIt was already 1.520:32
evrardjpI am pretty sure it was 1.5 or above20:32
odyssey4medepending which way the wind blew, it decided what should be higher20:32
evrardjpbut I can be wrong ofc20:32
evrardjphahaha20:32
evrardjptrue20:32
evrardjpwell20:32
cloudnull1.3 was icehouse / havana trials20:32
tux_Good policy is don't upgrade pip until we need it.. minor OSA upgrade shouldn't touch existing pip20:32
evrardjpit was mostly 1.5/1.6/no change in precedence/1.9.2/1.9.3/1.9.5/(can't remember if there was more)/2.020:33
cloudnullhell the first crack at a lot of this was chef :P20:33
evrardjptux_: that's what I've trying to keep -- that's why get-pip 3.3 is scary to me: it's bringing (if a problem of any kind) a runtime of pip10 ... ! scary!20:34
evrardjphahaha20:34
evrardjpcloudnull: that's WAY before my time.20:34
evrardjpI didn't know what openstack was at that time.20:34
evrardjpjrosser: odyssey4me could you vote on https://review.openstack.org/#/c/583568/ ?20:35
evrardjpsame for https://review.openstack.org/#/c/575715/20:35
cloudnullhttps://github.com/cloudnull/chef-lxc-openstack20:35
cloudnullthere's a walk down memory lane :)20:35
evrardjpcloudnull: so for M3, I am bringing all my patches into the sha bump now.20:36
cloudnullwoot!20:36
tux_I have 16.0.7 running on my OLD lab i am going to upgrade to latest 16.0.x will report you then20:38
cloudnullthanks tux_20:38
cloudnullreally appreciate you running through all that again .20:38
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Update get-pip to version 3.3  https://review.openstack.org/58410120:39
odyssey4meI already voted for https://review.openstack.org/#/c/575715/ - someone else needs to20:40
jrosserevrardjp: https://review.openstack.org/#/c/575715/ <- is there a same thing for unsupported architecture, arm for example20:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Update get-pip to version 3.3  https://review.openstack.org/58409520:41
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Update all SHAs for milestone 3  https://review.openstack.org/57400620:42
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Update get-pip to version 3.3  https://review.openstack.org/58409520:42
evrardjpjrosser: isn't arm supported?20:43
evrardjpI mean not officially, but you can try, right?20:43
jrosseri have a vauge memory of there being a check for that somewhere20:44
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests stable/queens: Update get-pip to version 3.3  https://review.openstack.org/58409020:44
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-pip_install stable/ocata: Update get-pip to version 3.3  https://review.openstack.org/58410920:45
evrardjpjrosser: maybe in repo build?20:46
logan-fyi all we'll have to watch out for this a bit while adding bionic support https://review.openstack.org/#/c/583708/20:46
logan-i had a chat in infra about it yesterday http://paste.openstack.org/raw/726308/20:46
jrosserperhaps, i was only thinking that if there was a switch for unsupported distros then it might want similar unusupported arch one20:46
odyssey4mearm apparently does work, along with s380 and the other big iron I forget20:46
odyssey4mes390x I mean20:46
logan-it probably won't affect many other packages but its worth keeping an eye out for20:46
*** FrankZhang has joined #openstack-ansible20:46
odyssey4meoh of course, POWER :p20:47
evrardjpyeah :)20:47
logan-we had openstack_hosts fake passing for bionic with packages that dont exist upstream20:47
evrardjplogan-: oh shit20:47
evrardjpI will have a look20:47
odyssey4meoh wow, that's no good20:47
evrardjplogan-: on top of it, that's pretty much a big deal, isn't that the python2 thing to have the add-apt-repository cli?20:49
logan-yep20:50
*** tux_ has quit IRC20:50
logan-i think that package also makes lsb_release work too20:50
logan-iirc20:50
odyssey4meok, time for me to !computer - night folks20:56
*** DanyC has joined #openstack-ansible20:57
odyssey4meevrardjp: fyi, tempest passed with https://review.openstack.org/58403720:57
admin0can ceph-install playbook be run after setup hosts ?20:57
odyssey4mewhich depends on https://review.openstack.org/58403320:57
admin0i guess it does not share infra ?20:57
odyssey4mecores - please review the above-mentioned, and https://review.openstack.org/58367220:58
jrosserodyssey4me: i got the same repo fail20:59
odyssey4melooks like https://review.openstack.org/584052 got https://review.openstack.org/583366 passing too20:59
odyssey4meah, and magnum's passing again: https://review.openstack.org/58404220:59
*** parasitid has quit IRC20:59
*** dave-mccowan has quit IRC21:00
odyssey4mejrosser: ipv6 or not?21:00
jrosserhttp://paste.openstack.org/show/726309/21:00
jrosseroh thats only part of it, let me try that again21:01
odyssey4mehmm , looks like it tried both ipv4 and 621:01
jrosserright, yes21:01
jrosserso that says to me that the http proxy setting hasnt made it to there21:01
odyssey4meyeah, that makes sense21:01
jrosseras theres no v4 route anyway21:01
*** dave-mccowan has joined #openstack-ansible21:01
jrosserthat will be a slightly different issue to the one in the gate though21:02
*** armaan has joined #openstack-ansible21:02
odyssey4meok, will have to pick that up tomorrow - but it seems to me that trying to rev proxy pypi is a bad idea... better for us to do what we did in pike... access directly before the repo build is there, then use the repo build21:02
odyssey4mewe can still use pypiserver, but ditch the rev proxy of pypi21:03
jrosseryeah, the reverse proxy has to know about using a fwd proxy in my case21:03
odyssey4methis issue has stood too long, and master changes to sort this all out anyway21:03
odyssey4meok, I'll work up some patches tomorrow21:03
jrossercool, just shout if you want anything testing21:04
odyssey4menight all21:04
evrardjpodyssey4me: cool21:09
evrardjpodyssey4me: gn21:09
*** armaan has quit IRC21:14
*** parasitid has joined #openstack-ansible21:18
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_tempest master: Disable Volume Backup Tests  https://review.openstack.org/58395521:18
*** jwitko has quit IRC21:26
*** DanyC has quit IRC21:26
openstackgerritMerged openstack/openstack-ansible-pip_install stable/queens: Ensure get-pip is not used when good version of pip is present  https://review.openstack.org/58392521:28
evrardjpjrosser: what do you think of https://review.openstack.org/#/c/583879/ ?21:28
evrardjpThe idea is to reduce the amount of tasks that return "changed" when they do nothing.21:29
evrardjpthe less "changed" tasks on a re-run, the happier I am.21:29
evrardjpI like green more than yellow on an ansible run21:29
*** Guest34 has joined #openstack-ansible21:32
*** Guest34 is now known as mike___brennan21:32
*** kstev has quit IRC21:35
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-nspawn_container_create master: Update qgroup setup to be more explicit  https://review.openstack.org/58412221:41
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: [WIP] Add functional tests to elk_metrics_6x  https://review.openstack.org/58379421:43
jrosserevrardjp: that looks good21:44
mnasergah21:50
mnasernginx repo keeps being flakey.21:50
mnaserso right now repo_server and os_keystone both use nginx21:52
mnaseri think it's time we write a basic nginx role that they can both depend on, or maybe use one that's available already21:52
mnaserit'll clean up the bare metal story21:53
*** hamzy has quit IRC21:53
mnaserand it will also make it all unifed in one place21:53
*** hamzy has joined #openstack-ansible21:53
mnaserhttps://github.com/nginxinc/ansible-role-nginx oh this is cool21:54
cloudnullI wonder if they'll take a PR for suse 42 ?21:56
*** cshen has quit IRC21:57
evrardjpmnaser: good find.22:01
evrardjpelse IIRC jdauphant's nginx role was not too bad22:01
evrardjpbut yeah using an existing role is :thumbs_up:22:02
mnaserit already has suse support looks like cloudnull22:03
mnaseroh22:03
mnaser4222:03
mnaserthing is i think the problem with all these roles is they assume a single run will contain all the vhosts which we cant do22:04
mnaserwe'd probably want to have 2 roles22:05
mnaserone that does the install/config, and one for every 'vhost'22:05
mnaserthat way one system doesnt wipe out the other22:06
mnaserdo we have an OSA boilerplate?22:06
mnaser(for roles)22:06
logan-doesn't nginx do conf.d? maybe you could use their role without the vhosts and then template your vhosts into the conf.d and reload/restart22:08
mnaserlogan-: it does, i guess i was just trying to over-clean-up and get all the nginx stuff in teh same 'codepath'22:08
logan-https://github.com/evrardjp/osa-role-boilerplate22:09
mnaserhttps://github.com/nginxinc/ansible-role-nginx/blob/master/tasks/conf/push-config.yml22:10
mnaserit looks like this is fairly usable though22:10
mnasernon-namespaced vars make me sad.22:11
logan-yeah :/22:11
mnasergonna see if https://github.com/jdauphant/ansible-role-nginx can do the (as in doesnt override stuff)22:11
evrardjplogan-: that's 2017!22:12
mnaserok22:12
logan-evrardjp: yeah :( i couldn't find a more recent example lol22:12
mnaserhttps://github.com/jdauphant/ansible-role-nginx22:12
mnaserit looks like this might do the job because22:12
evrardjpof what?22:12
logan-mnaser was looking for a role template22:13
mnaserhttps://github.com/jdauphant/ansible-role-nginx/blob/0d9019cf89283b878f0e077f5da4d2748b7c352a/tasks/configuration.yml#L18-L2522:13
mnaserthis just gets templated22:13
mnaserhttps://github.com/jdauphant/ansible-role-nginx/blob/0d9019cf89283b878f0e077f5da4d2748b7c352a/tasks/main.yml#L21-L2322:13
evrardjpoh ok22:14
mnasererr thats an older version but22:14
mnaserhttps://github.com/jdauphant/ansible-role-nginx/blob/master/tasks/main.yml#L29-L3122:14
mnaserwe can use that to not let it remove stuff22:14
evrardjpit was to use with https://review.openstack.org/#/c/458562/22:14
evrardjpiirc22:15
evrardjpthat's long ago22:15
evrardjpI think there was one with cookie cutter but I wasn't really happy with it22:15
evrardjpand it appeared after I started with this22:16
evrardjpbut before I spent time on a refresh22:16
mnaser ok i think i might hack on os_keystone to make it use that role22:16
mnaserthat way we don't have to manage stuff anymore22:16
*** hachi has quit IRC22:17
mnaserbecause centos 7 is failing unfortunately because of this22:18
mnaseri'd love to have the distro support merge with passing centos22:18
*** cshen has joined #openstack-ansible22:23
evrardjpmnaser: you think the next move is to only have package installs for centos?22:24
evrardjpI'd not be against22:24
mnaserevrardjp: id like to have both working but honestly i'd be more motivated to maintain packages.22:24
evrardjp:D22:24
mnaserit might be a lot more work overall22:24
evrardjpyeah, the load is spread22:24
evrardjpyou think?22:24
evrardjpoh you mean to maintain both22:25
mnaserit might not be, we'll see how it goes22:25
evrardjpyeah22:25
mnasercentos integrated hasnt passed in ages but it looks like there is something small left22:25
mnaserits trying to use tgtadm even if its configured to iscsi_helper=lioadm22:25
mnaserso im wondering if something different is happening in integrated repo...22:25
mnaserlol22:26
mnaserhttp://logs.openstack.org/52/584052/1/check/openstack-ansible-functional-distro_install-centos-7/ebcccb9/logs/ara-report/result/969351a2-318a-4e3e-a699-32763f2835e8/22:27
mnaserwe're not testing much.22:27
*** cshen has quit IRC22:27
evrardjpwe just disabled cinder_backup22:28
evrardjplike devstack!22:28
evrardjpfor the rest I don't know :p22:28
mnaserok i know whats going on here22:28
evrardjpif the testing is not well done, we should rethink it22:29
evrardjpmnaser: maybe the scenario doesn't have things in the whitelist22:29
evrardjphttps://github.com/openstack/openstack-ansible-os_cinder/blob/master/tests/os_cinder-overrides.yml#L2822:29
evrardjpI've discovered recently we don't cover things properly22:30
evrardjpWe should have BOTH tempest plugins and tempest core testing whitelisted22:30
evrardjpnot sure it applies in your case22:30
openstackgerritMerged openstack/openstack-ansible master: Remove useless group var  https://review.openstack.org/58356822:31
evrardjpI'm off to bed, if you have things I need to continue, ping that to me mnaser22:32
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_cinder master: Change deprecated option iscsi_helper to target_helper  https://review.openstack.org/58415122:35
*** tux_ has joined #openstack-ansible22:36
mnaserevrardjp cloudnull logan- ^22:36
mnaseri think that migth be the last missing step to get centos to pass, i think the deprecated paramters are not being copied to default_backend properly22:36
*** tux_ has quit IRC22:40
openstackgerritMerged openstack/openstack-ansible master: Allow a bypass of operating system  https://review.openstack.org/57571522:55
*** vnogin has joined #openstack-ansible23:08
*** chyka_ has quit IRC23:12
*** tux_ has joined #openstack-ansible23:20
*** vnogin has quit IRC23:37
*** pmannidi has joined #openstack-ansible23:49
*** poopcat has quit IRC23:53
*** poopcat has joined #openstack-ansible23:54

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!