Tuesday, 2019-01-15

*** markvoelker has quit IRC00:06
*** jbadiapa has quit IRC00:10
*** ironfoot has joined #openstack-ansible00:12
*** ansmith has quit IRC00:17
*** macza has quit IRC00:18
*** ironfoot has quit IRC00:24
*** ironfoot has joined #openstack-ansible00:27
*** ironfoot has quit IRC00:31
*** tosky has quit IRC00:32
*** ironfoot has joined #openstack-ansible00:32
*** ansmith has joined #openstack-ansible00:59
*** strobelight has joined #openstack-ansible01:01
cloudnullevenings01:23
*** markvoelker has joined #openstack-ansible01:35
*** markvoelker has quit IRC01:40
jamesdentonhowdy01:40
jamesdentoncloudnull i see you're implementing skydive?01:49
cloudnullindeed :)01:49
cloudnullhttps://github.com/openstack/openstack-ansible-ops/tree/master/skydive01:49
jamesdentonsubscribed01:49
jamesdentonjust didn't have time to play01:49
cloudnull^ its still a little rough, though its been implemented01:49
* cloudnull currently working on improving the docs 01:50
jamesdentonright on01:50
cloudnullits cool though, works great in my home lab01:50
jamesdentoni will be trying it out this week, hopefully. full plate, so we'll see01:50
cloudnullprobably need to pick some brains on getting the default fabric generation to be right01:50
cloudnullbut works well enough01:51
* cloudnull from my laymen perspective 01:51
jamesdentonso humble01:51
jamesdentonyou have time for a quick review?01:52
*** ansmith has quit IRC01:54
*** mino_ has joined #openstack-ansible01:58
*** markvoelker has joined #openstack-ansible01:59
*** macza has joined #openstack-ansible02:06
*** markvoelker has quit IRC02:07
prometheanfirecloudnull: did you check out the rebase failures?02:09
prometheanfirefor networkd stuffs02:09
prometheanfirehttps://review.openstack.org/59259602:09
*** macza has quit IRC02:11
*** TxGirlGeek has quit IRC02:23
*** strobelight_ has joined #openstack-ansible02:37
*** strobelight is now known as Guest9727602:37
*** strobelight_ is now known as strobelight02:39
*** Guest97276 has quit IRC02:41
*** vnogin has joined #openstack-ansible02:46
*** vnogin has quit IRC02:51
partlycloudyhi folks, i still have some questions about the ceph production example at https://docs.openstack.org/openstack-ansible/rocky/user/ceph/full-deploy.html.02:51
partlycloudyin this example, if we use br-storage for ceph replication/recovery traffic, why we still need to assign ips to the br-storage on compute nodes, as per the comment suggested?02:52
* cloudnull sadly sucks at just about all things ceph 02:55
cloudnullI believe the IP requirements is to ensure the compute nodes have a route back to the storage nodes.02:56
cloudnullprometheanfire i've not02:57
cloudnulljamesdenton I do whats up ?02:58
partlycloudyin the Cookbook (4th ed), i see br-storage is used by infra/compute/storage nodes as the public network.03:01
partlycloudyhence i understand the purpose of having ips to the br-storage on compute nodes.03:03
*** strobelight has quit IRC03:07
partlycloudybut in the ceph-prod-example, it seems the br-storage is used as the cluster network (replication/recovery). so i think there is no need for the compute nodes to have ips on the br-storage. right?03:09
*** TxGirlGeek has joined #openstack-ansible03:19
*** DanyC has joined #openstack-ansible03:20
*** DanyC has quit IRC03:24
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Improve the documentation for skydive  https://review.openstack.org/63087303:24
cloudnullpartlycloudy i guess if its only used for replication then there'd be no need for it on the compute node.03:25
partlycloudycloudnull: thank you! that makes sense to me. i will see if i hit any errors with no ips on the compute's br-storage in this case.03:31
cloudnullpartlycloudy sorry i dont have a better answer for you,03:33
partlycloudythank you, cloudnull. that was really helpful. i'll try it and let you know what i find.03:39
jamesdentoncloudnull was gonna see if i could get your thoughts on https://review.openstack.org/#/q/topic:bug/1810319, as well as these two: https://review.openstack.org/#/q/owner:james.denton%2540rackspace.com+project:openstack/openstack-ansible-ops03:40
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Improve the documentation for skydive  https://review.openstack.org/63087303:41
cloudnulljamesdenton sure thing03:41
jamesdentonthank you much. no rush. i'm callin it.03:42
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Improve the documentation for skydive  https://review.openstack.org/63087303:49
cloudnullhave a good night jamesdenton03:49
jamesdentonthanks buddy03:50
*** TxGirlGeek has quit IRC03:51
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Improve the documentation for skydive  https://review.openstack.org/63087304:04
*** udesale has joined #openstack-ansible04:05
*** dave-mccowan has quit IRC04:11
*** udesale has quit IRC04:15
*** udesale has joined #openstack-ansible04:16
*** udesale has quit IRC04:26
*** radeks has joined #openstack-ansible04:33
*** markvoelker has joined #openstack-ansible05:05
*** partlycloudy has quit IRC05:10
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Improve the documentation for skydive  https://review.openstack.org/63087305:18
*** chkumar|out is now known as chandankumar05:38
*** Bhujay has joined #openstack-ansible05:43
*** Bhujay has quit IRC05:44
*** Bhujay has joined #openstack-ansible05:45
*** Bhujay has quit IRC05:46
*** Bhujay has joined #openstack-ansible05:46
*** vnogin has joined #openstack-ansible05:46
*** markvoelker has quit IRC05:47
*** markvoelker has joined #openstack-ansible05:48
*** vnogin has quit IRC05:51
*** markvoelker has quit IRC05:59
*** udesale has joined #openstack-ansible06:05
*** udesale has quit IRC06:12
*** udesale has joined #openstack-ansible06:13
*** udesale has quit IRC06:33
*** udesale has joined #openstack-ansible06:33
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_heat master: [DNM] heat tempest tests finding  https://review.openstack.org/63069406:58
*** Bhujay has quit IRC07:01
*** Bhujay has joined #openstack-ansible07:10
*** Bhujay has quit IRC07:11
*** Bhujay has joined #openstack-ansible07:11
*** DanyC has joined #openstack-ansible07:12
*** jbadiapa has joined #openstack-ansible07:15
*** DanyC has quit IRC07:17
*** kopecmartin|off is now known as kopecmartin07:35
*** yetiszaf has joined #openstack-ansible07:35
*** hamzaachi has joined #openstack-ansible07:58
*** radeks has quit IRC08:08
*** hamzaachi has quit IRC08:18
*** hamzaachi has joined #openstack-ansible08:18
*** hamzaachi has quit IRC08:22
*** hamzaachi has joined #openstack-ansible08:22
*** ostackz has joined #openstack-ansible08:22
*** hamzaachi has quit IRC08:24
*** hamzaachi has joined #openstack-ansible08:24
*** hamzaachi has quit IRC08:26
*** hamzaachi has joined #openstack-ansible08:26
*** hamzaachi has quit IRC08:27
*** hamzaachi has joined #openstack-ansible08:28
ostackztrying minor upgrade 18.1.1 -> 18.1.2 but playbooks fail on TASK [rabbitmq_server : Apply rabbitmq policies], turns out beam.smp process is down in all rabbitmq containers.08:35
ostackzTried restarting containers - then beam.smp is up, but if rerun playbooks fails again and beam.smp down again. More details https://pastebin.com/raw/UzZXqXbG Please suggest how to solve this.08:35
*** tosky has joined #openstack-ansible08:44
chandankumarodyssey4me: Hello09:00
chandankumarodyssey4me: http://logs.openstack.org/82/627482/42/check/python-tempestconf-tempest-os-tempest/b11cbd6/ara-report/result/4d9ded1f-91ee-425c-8e9c-29dca4d723ea/09:02
chandankumarodyssey4me: I think I also need to put interface {regionname} in a new var09:03
chandankumarodyssey4me: what do you say?09:03
jenglisch[04:25] <cloudnull> partlycloudy i guess if its only used for replication then there'd be no need for it on the compute node. << the (in ceph termed) cluster network don't need access to anything but other osds09:08
*** hamzaachi_ has joined #openstack-ansible09:10
*** hamzaachi_ has quit IRC09:11
*** hamzaachi_ has joined #openstack-ansible09:13
*** hamzaachi has quit IRC09:14
jrosseri think that the setup in the ceph example should be improved09:15
jrosserbr-storage on the compute nodes is really for rbd clients of ceph09:15
jenglischjrosser: actually i think the example should be changed to be alike of partlycloudy's09:26
jrosserwell, perhaps09:27
jenglischoh, that's what you wrote09:27
jrosserbr-storage should have an ip on the storage network09:27
jrosserand i'm not really sure that the example setup should be putting ceph traffic on the mgmt network09:27
jenglischactually i proposed the change required for this, since i thought it's already the default setup to put the public network of ceph on br-storage09:28
jenglischhttps://review.openstack.org/#/c/628625/09:28
jenglischand then the example would be broken09:28
jenglischi'll extend it, and move ceph's public network to br-storage09:28
jrosseryeah, the same setup needs to cover the case where OSA deploys ceph, or an external ceph cluster is accessible via br-storage and the storage network09:29
*** pcaruana has joined #openstack-ansible09:30
*** hamzaachi_ has quit IRC09:33
*** hamzaachi_ has joined #openstack-ansible09:33
*** hamzaachi_ has quit IRC09:38
*** hamzaachi_ has joined #openstack-ansible09:38
*** jungleboyj has quit IRC09:39
*** jungleboyj has joined #openstack-ansible09:42
*** DanyC has joined #openstack-ansible09:43
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Use usr/local/share/ansible/roles for data_files  https://review.openstack.org/63091709:45
odyssey4mechandankumar if the region and endpoint aren't already parameterised, then yeah, that's probably useful to enable09:49
chandankumarodyssey4me: working on that09:50
chandankumarodyssey4me: regarding heat tempest test patch09:51
chandankumarodyssey4me: tempest logs are not getting generated09:51
*** nyloc has quit IRC09:51
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Use usr/local/share/ansible/roles for data_files  https://review.openstack.org/63091709:52
odyssey4mechandankumar I see them: http://logs.openstack.org/94/630694/3/check/openstack-ansible-deploy-aio_metal_heat-ubuntu-bionic/1f68af5/logs/openstack/aio1-utility/stestr_results.html09:53
chandankumarodyssey4me: oh I didnot checked that directory09:53
*** DanyC has quit IRC09:54
*** DanyC has joined #openstack-ansible09:55
ostackzHi, odyssey4me, trying minor upgrade 18.1.1 -> 18.1.2 but playbooks fail on TASK [rabbitmq_server : Apply rabbitmq policies], turns out beam.smp process is down in all rabbitmq containers.09:59
ostackzTried restarting containers - then beam.smp is up, but if rerun playbooks fails again and beam.smp down again. More details https://pastebin.com/raw/UzZXqXbG Could you suggest how to solve this?10:00
odyssey4meostackz hrm, I can't recall the specific command to restart rabbitmq entirely - it's in that role I think10:00
odyssey4meotherwise just restart the containers one at a time?10:01
*** hamzaachi_ has quit IRC10:03
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest master: Use the correct heat tests  https://review.openstack.org/63069510:06
*** nyloc has joined #openstack-ansible10:15
chandankumarodyssey4me: regarding heat tempest failure, I need to put heat related tempest configuration10:17
odyssey4mechandankumar so something's missing in the tempest role to make it work?10:17
chandankumarodyssey4me: yes, adding to my list 1:110:17
odyssey4mechandankumar thanks - appreciate it10:17
chandankumarodyssey4me: tests failed as auth_url used in heat section missing10:18
odyssey4meisn't it supposed to get that from the service catalog?10:18
chandankumarodyssey4me: https://github.com/openstack/heat/blob/master/heat_integrationtests/prepare_test_env.sh#L3210:18
chandankumarodyssey4me: we need to specify that particularly otherwise it will not work10:19
chandankumarodyssey4me: I will get that working10:19
odyssey4meI see, ok - thanks.10:19
*** vnogin has joined #openstack-ansible10:22
*** udesale has quit IRC10:25
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/rocky: Remove legacy nginx config for keystone-wsgi-admin  https://review.openstack.org/62943010:27
*** aedc has joined #openstack-ansible10:28
*** chandankumar has quit IRC10:31
*** arxcruz|ruck has quit IRC10:34
*** udesale has joined #openstack-ansible10:35
*** chandan_kumar has joined #openstack-ansible10:35
*** mino_ has quit IRC10:37
*** electrofelix has joined #openstack-ansible10:48
openstackgerritkourosh vivan proposed openstack/openstack-ansible-os_keystone master: Deployment host can provide shibboleth SP key-pair  https://review.openstack.org/62032410:48
*** macza has joined #openstack-ansible10:50
*** macza has quit IRC10:54
*** udesale has quit IRC11:01
ostackzodyssey4me, regarding that minor upgrade - tried to restart and leave running only 1 rabbitmq conatainer(container count 3, but beam.smp running only in first), then rerun openstack-ansible -e rabbitmq_upgrade=true setup-infrastructure.yml. It ended like before - all rabbitmq processes are down.11:04
ostackzHere are playbook details https://pastebin.com/raw/UzZXqXbG Seems that playbooks stop rabbitmq cluster nodes but fail later because rabbitmq process is down. There is no starting task after "Ensure RabbitMQ node [0] is stopped".11:04
odyssey4meostackz beam.smp is only part of the service - not the whole thing11:04
odyssey4meostackz which tag/release is this?11:05
ostackz18.1.211:05
*** arxcruz has joined #openstack-ansible11:05
odyssey4meostackz does that have this patch in the rabbitmq role? https://review.openstack.org/#/c/625200/111:06
odyssey4menope, looks like that just missed it11:07
odyssey4mestable/rocky has it11:07
odyssey4mealthough another way around the issue is to just wipe out the rabbitmq containers and recreate them11:07
odyssey4methen you have no need to do the upgrade, because it's a fresh install11:08
ostackzodyssey4me, I just did git checkout 18.1.2 yesterday, isn't it Rocky stable?11:08
odyssey4meostackz it is, but there was a bug which was found and resolved after which is still in testing11:08
ostackzyes, I can do that, because fresh insstall did not have issues with rabbitmq11:08
odyssey4meyou can cherry-pick that patch into your rabbitmq role11:09
ostackzodyssey4me, thanks! At least I know there is issue that needs fixing in playbooks not my config. Will look for info how to cherry-pick, I'm confident there is some piece of doc for those who are not familiar with git and stuff, time to learn something new :) or recreate containers as alternative.11:15
odyssey4meostackz in that url - on the top right is a 'download' drop-down, with 'cherry-pick' as an option, and a little clipboard on the right to copy the command to clipboard11:16
odyssey4methen cd /etc/ansible/roles/rabbitmq_server; <paste command>11:16
odyssey4methat should do the trick11:16
ostackzodyssey4me, thanks a lot! will note that down11:17
*** openstackgerrit has quit IRC11:22
*** mwe1 has quit IRC11:23
*** ygk_12345 has joined #openstack-ansible11:24
ygk_12345odyssey4me: Hi, Does OSA support BIND dns for designate as backend ?11:24
odyssey4meygk_12345 it supports whatever designate supports11:27
odyssey4meygk_12345 we do not deploy the DNS service though - it is expected to already be running11:28
ygk_12345odyssey4me: i dont find that description here https://docs.openstack.org/openstack-ansible-os_designate/latest/11:28
odyssey4meygk_12345 what description?11:28
ygk_12345odyssey4me: the backend DNS softwares it supports11:28
ygk_12345odyssey4me: like BIND or powerdns etc11:28
odyssey4meygk_12345 we simply deploy the designate service - so whatever designate supports, we support11:29
odyssey4methat's something that the service supports - not us11:29
ygk_12345odyssey4me: ok i will try to deploy11:29
ygk_12345odyssey4me: ok11:29
*** mwe1 has joined #openstack-ansible11:31
ygk_12345odyssey4me: one more query11:34
ygk_12345odyssey4me: is there detailed procedure of what variables to include in user_cofig and user_variable files for designate ?11:34
*** udesale has joined #openstack-ansible11:36
odyssey4meygk_12345 for all roles, the defaults in the role are the documented override variables you can use - they are all optional11:36
ygk_12345odyssey4me: ok11:36
odyssey4meall overrides are implemented in host_vars/group_vars or user_variables (which are global)... openstack_user_config should be avoided for overrides because they persist in the inventory11:37
*** openstackgerrit has joined #openstack-ansible11:37
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Add tempest_region_name var for setting interface  https://review.openstack.org/63094211:37
chandan_kumarodyssey4me: ^^ there are two more things, domain & domain-id as well as endpoint type what to do for that?11:38
odyssey4mechandan_kumar interface and endpoint are aliases - I can't remember which one is the primary, but it'd be nice to get that consistently used11:39
chandan_kumarodyssey4me: I changed both of them then amended11:40
chandan_kumarodyssey4me: good to know that11:40
chandan_kumarupdating it11:40
odyssey4methen as I recall, the domain argument can be a name or id - and there is no domain id parameter, except for legacy... and those are upstream bugs which need fixing11:40
chandan_kumarodyssey4me: ok11:41
*** ansmith has joined #openstack-ansible11:59
*** DanyC has quit IRC12:10
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Add tempest_interface_name var for interface/endpoint_type  https://review.openstack.org/63094212:11
*** DanyC has joined #openstack-ansible12:13
*** ansmith has quit IRC12:16
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_keystone master: DNM - Testing ARA upgrades  https://review.openstack.org/53736012:26
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_tempest master: Fix tempest workspace path  https://review.openstack.org/62818212:29
*** radeks has joined #openstack-ansible12:31
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Use tempest_domain_name var for setting domain/domain-id  https://review.openstack.org/63095712:34
guilhermespodyssey4me: based on your comment, would be good then to add an AND conditional to check if the current workspace is the same workspace_path? https://review.openstack.org/#/c/628182/12:42
*** vnogin has quit IRC12:43
odyssey4meguilhermesp I would think that it needs to check if it is NOT the same as the current workspace path12:44
*** crazzy has joined #openstack-ansible12:49
openstackgerritJames Denton proposed openstack/openstack-ansible master: Make container_interface optional for provider network  https://review.openstack.org/63096412:57
*** chandan_kumar has quit IRC12:58
jamesdentonjrosser what are your thoughts on this? https://review.openstack.org/#/c/630964/. Looking to simplify provider network definitions in the age of neutron-deployed-on-bare-metal12:58
*** chandan_kumar has joined #openstack-ansible12:59
*** radeks has quit IRC13:00
* jrosser looks13:01
*** radeks has joined #openstack-ansible13:01
jrosserjamesdenton: somewhat relatedly we place neutron ml2.conf files inside the neutron server containers, thats also a bit confusing13:04
*** vnogin has joined #openstack-ansible13:04
jamesdentoni think it might actually be necessary, at least so neutron-server knows the provider labels. i could be wrong13:05
jrosserright13:06
jrosseroh yes i see on the running processes it's loaded ml2_conf.ini13:06
jamesdentonbut certainly any provider mapping wouldn't be - but i think that's in the respective agent config file13:06
*** mkuf_ has joined #openstack-ansible13:07
jamesdentonit was a mess (upstream) not all that long ago13:07
mgariepyjenglisch, odyssey4me mnaser concerning: https://review.openstack.org/#/c/629330/ rtcsync would sync every 11 minutes, not 11 seconds13:08
jenglischmgariepy: you're correct, my bad13:09
openstackgerritJames Denton proposed openstack/openstack-ansible-ops master: Add mnaio_data_disk_suffix var to support NVMe partition naming  https://review.openstack.org/63037513:09
jenglischhm13:09
mgariepyand with the option rtcfile and rtcautotrim timedatectl show N/A for rtc time.13:10
*** mkuf has quit IRC13:10
mgariepyalso i can set/read the RTC with hwclock13:10
mgariepywith rtcsync it works fine.13:10
mgariepyany objection to switch to rtcsync ?13:11
*** Guest1750 has joined #openstack-ansible13:14
*** Guest1750 is now known as maxbab13:16
jrosserjamesdenton: that looks good to make container_network optional there, all of that stuff makes me nervous that something is going to mis(use) that key somewhere unexpected13:18
jrossersory container_interface13:19
jamesdentoncontainer_interface, you mean?13:19
jamesdentonl13:19
jamesdentonkk13:19
*** ygk_12345 has quit IRC13:19
jenglischas far as i understood the documentation "rtcsync" syncs the RTC every 11 minutes regardless the RTC time, a coworker of mine suggested this approach since a lot of writes to the CMOS may be bad, hence this option should just check the RTC and only adjust it if it's more than 10 seconds off13:19
jenglischhowever i don't have any source for the assumption of my coworker currently, i'm also ok with using rtcsync13:19
jenglischit's not unusual to call hwclock --synctohc on a daily basis and/or on shutdown, i don't exactly know what the linux kernel does on rtcsync every 11 minutes13:20
*** arxcruz is now known as arxcruz|ruck13:21
*** dave-mccowan has joined #openstack-ansible13:29
*** radeks has quit IRC13:29
mgariepyjenglisch, if it would work correctly and i could verify,i wouldn't mind rtcfile + autotrim13:29
mgariepybut when those are set in chrony.conf i cannot read the rtc anymore.13:29
mgariepyunless i stop chrony..13:29
jenglischwhats your usecase of reading from /dev/rtc* directly?13:31
mgariepyvalidate it's sync.13:31
jenglischtypically i'd use the system time. the rtc is just used in case of a reboot13:31
jenglischhm13:31
jenglischso it breaks your monitoring system?13:31
mgariepyhwclock or timedatectl is not able to read13:31
mgariepyhttps://paste.ubuntu.com/p/pdYQ5hgfcv/13:33
mgariepyi had some issue when rebooting nodes that the time is not set quite correcly, so i want to validarte the rtc is set ok before rebooting.13:34
*** udesale has quit IRC13:36
*** udesale has joined #openstack-ansible13:36
speedmannHi there, when trying to install octavia i get an error that libpython2.7.so.1.0 can not be found. We are running release 18.1.0. Is this a known issue with the octavia container?13:36
speedmannsorry, this error occurs when starting octavia-api uwsgi13:37
mgariepyalso syncing every 11 minutes isn't that much, and it was like this for several years on other of my system never saw any issue about it.13:38
openstackgerritMerged openstack/openstack-ansible-ops master: Improve the documentation for skydive  https://review.openstack.org/63087313:45
jrosserspeedmann: this is most likley a bug, we have been trying to reduce the number of packages globally installed into containers and have each role be more specific about which packages are needed13:55
jrosserspeedmann: quite possible that octavia needs a patch to fix that for libpython13:55
jamesdentonCouldn't help but notice OSA wasn't listed here: https://releases.openstack.org/stein/index.html. Oversight or intentional?13:56
odyssey4mehmm, mnaser that's odd13:57
odyssey4meoh, it's because we haven't done a m1 release13:57
odyssey4meevrardjp ?13:57
jamesdentonahh ok13:57
jamesdentonaren't we in m2 territory? lol13:58
odyssey4mewe were supposed to do a m1 release in october13:58
speedmannjrosser thank you, i will open a bug report for this so someone can have a close look13:58
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_tempest master: Fix tempest workspace path  https://review.openstack.org/62818213:59
*** vnogin has quit IRC14:01
ostackzodyssey4me, your patch helped, I successfully run setup-hosts.yml and setup-infrastructure.yml, but now failing on setup-openstack.yml - TASK [os_keystone : Bootstrap keystone admin and endpoint].14:04
ostackzWhat exactly it is supposed to do if I already have rocky setup? I guess bootstrapping should be skipped then?14:04
odyssey4meostackz no, it always runs - what's the failure?14:04
odyssey4mea debug log paste would be useful14:05
noonedeadpunkFolks, getting "Package '+python-neutron-vpnaas-dashboard' not found." in opensuse-423 aio_distro install. Is anyone aware about this problem?14:05
ostackzodyssey4me FAILED - RETRYING: Bootstrap keystone admin and endpoint (1 retries left).14:05
odyssey4menoonedeadpunk is that master or rocky?14:05
noonedeadpunkrocky14:05
odyssey4meostackz a paste (on a paste service) of a debug log of that task please14:05
odyssey4menoonedeadpunk check if you have https://review.openstack.org/629194 or https://review.openstack.org/629177 depending on the branch14:06
odyssey4menoonedeadpunk oh, actually - that seems like an outdated mirror - because that's the new package name14:07
noonedeadpunkodyssey4me: ah, great, patch is probably on it's way to zuul gates14:08
odyssey4menoonedeadpunk those merged yesterday14:08
noonedeadpunkhttps://review.openstack.org/#/c/630429/ still failing with this. Probably, regular update still wasn't applied?14:09
*** ansmith has joined #openstack-ansible14:10
odyssey4menoonedeadpunk I think stable/rocky will need an anrible-role-requirements update to include https://review.openstack.org/62919414:10
noonedeadpunkoh... yeah, might be the case14:10
noonedeadpunkdo we need evrardjp for this?14:11
noonedeadpunkclean forgot about ansible-role-requirements14:12
odyssey4menoonedeadpunk nope, you can just update the one SHA in a review14:12
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_nova master: [DNM] - Testing openSUSE nova role  https://review.openstack.org/49576714:14
openstackgerritDmitriy Rabotjagov (noonedeadpunk) proposed openstack/openstack-ansible stable/rocky: Updated SHA for os_horizon role  https://review.openstack.org/63098214:16
openstackgerritDmitriy Rabotjagov (noonedeadpunk) proposed openstack/openstack-ansible stable/rocky: Fixes empty metal_query  https://review.openstack.org/63042914:17
noonedeadpunkodyssey4me thanks for the help14:19
ostackzodyssey4me here is the faillog https://pastebin.com/raw/9sGPVEQu     To me 'mesg: ttyname failed: Inappropriate ioctl for device\n' seems strange, but dont know what is it about. Lacks terminal device?14:19
odyssey4meostackz that's cosmetic - don't worry about it14:19
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Add tempest_interface_name var for setting interface  https://review.openstack.org/63094214:20
odyssey4meostackz oh yeah, there's a password there so it won't output stdout/stderr... can you execute that command by hand in the container and see what it says?14:21
ostackzodyssey4me it executes with no output, like successful14:21
odyssey4meostackz ORLY? do 'echo $?' to see the return code?14:22
ostackzecho $? returns 1 though14:22
*** shyamb has joined #openstack-ansible14:22
*** Soopaman has joined #openstack-ansible14:23
ostackzodyssey4me I was guessing https and self-signed cert issue, but in task there seems to be http used only14:24
odyssey4meostackz so that's why the task is failing... but why the command is failing is anyone's guess14:25
odyssey4memaybe there's a --debug that can be used?14:25
odyssey4meFYI that command interacts directly with the DB - no certs involved14:25
openstackgerritChandan Kumar proposed openstack/openstack-ansible-os_tempest master: Use tempest_domain_name var for setting domain  https://review.openstack.org/63095714:26
chandan_kumarcloudnull: jrosser https://review.openstack.org/630917 is good to go14:26
odyssey4meguilhermesp you left a swap file in https://review.openstack.org/#/c/628182/14:27
ostackzodyssey4me with -d got something in journalctl, please see bottom of https://pastebin.com/raw/9sGPVEQu  Seems to be issue with role/domain relations14:31
odyssey4meostackz oh, that's curious - I wonder if the folks in #openstack-keystone can help understand what's going on there and how best to resolve it14:33
jrosserjamesdenton: i've not dug into it any more but this seems to be one of the only uses of container_interface http://git.openstack.org/cgit/openstack/openstack-ansible-plugins/tree/library/provider_networks#n26814:33
ostackzodyssey4me could be that I have created domains with admin roles inside and this confuses  bootstrap playbooks14:34
odyssey4meostackz it could be, but if that's the case then there may be a bug in the tool and they would want to know about that14:35
jamesdentonjrosser agreed, and only if is_metal=false14:35
jamesdentonwhich, for our default deploys is now the case14:35
jamesdentonfor the neutron agent container, anyway14:35
*** maxbab has quit IRC14:36
ostackzodyssey4me sure, will try to reach someone in openstack-keystone, thanks!14:37
jrosserjamesdenton: yes so i think it looks ok to remove14:37
jamesdentonright on, thanks14:37
jamesdentoni'll go thru and update docs to make it easier to understand its purpose14:37
openstackgerritMarc Gariépy (mgariepy) proposed openstack/ansible-hardening master: Switch to rtcsync for chrony  https://review.openstack.org/63099614:39
*** mkuf_ has quit IRC14:39
*** mkuf_ has joined #openstack-ansible14:43
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_tempest master: Fix tempest workspace path  https://review.openstack.org/62818214:43
*** Soopaman has quit IRC14:48
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Use usr/local/share/ansible/roles for data_files  https://review.openstack.org/63091714:49
*** shyamb has quit IRC14:53
jrossernoonedeadpunk: is this another one you've seen? gnocchi.cli.api: Unable to find `uwsgi'14:54
*** Bhujay has quit IRC15:02
noonedeadpunkjrosser: I guess, no.. When does it happens? As I remeber OSA dosen't use native gnocchi-api service. Instead it configures apache to serve wsgi15:04
*** mkuf_ has quit IRC15:04
noonedeadpunkso it shouldn't need uwsgi in these conditions15:04
*** mkuf has joined #openstack-ansible15:05
jrosseri'm going through logs for everything and trying to fix up errors generally15:05
jrosseri did find this https://github.com/gnocchixyz/gnocchi/issues/47815:05
noonedeadpunkI've had this error, but on my manual deployment (not via OSA), and I've catched it during Gnocchi 3->4 upgrade15:06
noonedeadpunkand yeah, it was installed with distro packages on ubuntu15:06
noonedeadpunkbut with osa you don't need gnocchi-api and, accordingly, uwsgi15:06
*** francois has quit IRC15:07
noonedeadpunkAnd I had to correct this line https://github.com/gnocchixyz/gnocchi/blob/4.2.4/gnocchi/cli/api.py#L76 as in ubuntu package it tried to use shutil method, which is available only since python 3.415:08
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: README cleanup and additional notes about limits  https://review.openstack.org/63100415:08
cloudnullmornings15:08
*** francois has joined #openstack-ansible15:09
francoisHello and happy new year!15:11
francoisI'm trying to understand how dns resolution should work in a rocky deployment using ubuntu 18.04 and the unbound containers15:12
francoismore specifically how it works when one of the unbound container is down15:12
jamesdentonmornin cloudnull15:12
francoiswhen one of the three controller is down, all openstack apis are super slow due to dns timeouts15:13
noonedeadpunkjrosser under gnocchi-api I meant systemctl service, but not API in it's general meaning15:13
*** tbarron has joined #openstack-ansible15:16
jamesdentonmaybe load balancing dns would help?15:20
jrosserthe default resolver timeout is 5s iirc15:24
francoisyep, linux's libc seems to use 5s by default15:26
francoisin an OSA deployment "option timeout:1 rotate" is added to resolv.conf but only one bare metal machines15:27
jrosserit quite possibly still hits that for every name resolution though, so its bad -> less bad?15:28
francoisthe LXC containers don't have this option set, probably because of systemd-resolved15:28
francoisjrosser: yes probably15:28
francoisi think that systemd-resolved actually queries all resolvers in parallel15:29
francoisbut not the way it's currently configured it seems15:29
*** TxGirlGeek has joined #openstack-ansible15:30
fnpanichi15:34
fnpanicusing all resolvers in parallel is not default as far as i know15:35
openstackgerritGuilherme  Steinmuller Pimentel proposed openstack/openstack-ansible-os_tempest master: Fix tempest workspace path  https://review.openstack.org/62818215:37
*** partlycloudy has joined #openstack-ansible15:40
francoisfnpanic: hi, with systemd-resolved? for dnsmasq, the --all-server option needs to be set15:41
fnpanicfrancois: yes with systemd-resolved15:46
jrosserthe internet seems to say that it is wrong to leave dns failover up to the client15:47
*** triceracops has joined #openstack-ansible15:50
*** radeks has joined #openstack-ansible15:57
fnpanicjrosser: ok, so you suggest adding VIP for each unbound container and failing them over?15:57
francoisjrosser: yeah, we should probably anycast the dns resolver ip but it's not currently the case :(15:57
fnpanicanycast is a bit extrem and you need the infra to implement it15:58
openstackgerritJames Denton proposed openstack/openstack-ansible master: Make container_interface optional for provider network  https://review.openstack.org/63096416:00
*** radeks has quit IRC16:04
*** errr has quit IRC16:07
*** errr has joined #openstack-ansible16:10
*** partlycloudy has quit IRC16:14
chandan_kumarodyssey4me: jrosser cloudnull https://review.openstack.org/#/c/630957/ and https://review.openstack.org/63094216:15
chandan_kumarplease have a look thanks :-)16:15
chandan_kumarodyssey4me: Do I need to keep an eye of ansible provided openstack modules in order to avoid breakage in future?16:26
chandan_kumaras we are consuming in os_tempest side16:26
openstackgerritDave Wilde (d34dh0r53) proposed openstack/openstack-ansible-os_tempest master: Enable port security  https://review.openstack.org/61771916:29
odyssey4mechandan_kumar yep, we're relying more and more on the upstream ansible modules - so any assistance with the bugs there would be very helpful.16:31
chandan_kumarodyssey4me: will add it to my list and where to start poking any pointers?16:32
*** ansmith_ has joined #openstack-ansible16:32
odyssey4mechandan_kumar bugs: https://github.com/ansible/ansible/issues?q=is%3Aopen+is%3Aissue+label%3Aopenstack16:33
odyssey4mechandan_kumar prs: https://github.com/ansible/ansible/pulls?q=is%3Aopen+is%3Apr+label%3Aopenstack16:33
* chandan_kumar adds to my list16:33
*** ansmith has quit IRC16:35
francoisfnpanic: accordding to upstream doc (https://www.freedesktop.org/software/systemd/man/systemd-resolved.service.html), it looks it does parallel queries by default16:36
francois> (Note that more than one link might have this same "best matching" search/route-only domain configured, in which case the query is sent to all of them in parallel)16:36
francoisI'll give a try with "lxc_container_enable_resolved: false" because I'm pretty sure there's some clash between unbound/resolvconf and systemd-resolved going on16:38
*** hamzy_ has quit IRC16:43
fnpanicok. let me know how it went16:50
fnpanicis ist possible to have keeplaived ping more then one address?16:52
fnpanickeepalived_ping_address:16:52
*** ansmith has joined #openstack-ansible16:54
*** ansmith_ has quit IRC16:56
francoisfnpanic: no, looking at the code only a single ip is supported16:58
chandan_kumarevrardjp: odyssey4me: suse ci is passing now a days, can we make it voting?17:02
*** udesale has quit IRC17:04
openstackgerritMerged openstack/openstack-ansible-ops master: README cleanup and additional notes about limits  https://review.openstack.org/63100417:05
*** macza has joined #openstack-ansible17:08
odyssey4mechandan_kumar we have a very small suse supporting group and will let them decide on that17:12
*** macza_ has joined #openstack-ansible17:13
*** macza has quit IRC17:14
*** DanyC has quit IRC17:48
*** DanyC has joined #openstack-ansible17:48
*** DanyC has quit IRC17:53
*** hamzaachi has joined #openstack-ansible18:01
*** pcaruana has quit IRC18:01
*** TxGirlGeek has quit IRC18:04
*** TxGirlGeek has joined #openstack-ansible18:05
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Use tempest_domain_name var for setting domain  https://review.openstack.org/63095718:07
*** ansmith_ has joined #openstack-ansible18:26
*** ansmith has quit IRC18:29
*** hamzaachi has quit IRC18:38
*** hamzy_ has joined #openstack-ansible18:44
*** openstacking_123 has joined #openstack-ansible18:46
openstacking_123Hope everyone is welll18:51
*** ansmith_ has quit IRC18:52
openstacking_123Anyone ever run into an issue where rabbitmq can no longer find the exchange for Openstack services?18:52
openstacking_123```operation basic.publish caused a channel exception not_found: no exchange 'reply_b91e0012696d45e7a32e3265a5ab22fe' in vhost '/nova'```18:52
*** kopecmartin is now known as kopecmartin|off18:52
openstacking_123Rabbit looks healthy as far as I can tell but this issue popped up at random for me yesterday18:53
spotzopenstacking_123: I haven't run into this but can you run basic rabbit troubleshooting commands successfully?18:59
spotzAnd also check space...:)18:59
*** hamzy_ has quit IRC18:59
*** hamzy_ has joined #openstack-ansible19:00
openstacking_123Yeah they look good but I think maybe this happened https://bugs.launchpad.net/oslo.messaging/+bug/178917719:00
openstackLaunchpad bug 1789177 in oslo.messaging "RabbitMQ fails to synchronize exchanges under high load" [Undecided,Fix released] - Assigned to Oleg Bondarev (obondarev)19:00
openstacking_123We run DVR so we would be running quite a bit of rabbit connections19:00
openstacking_123going to see if we have that patch19:00
*** ansmith_ has joined #openstack-ansible19:01
*** hamzy_ has quit IRC19:13
*** hamzy_ has joined #openstack-ansible19:31
*** electrofelix has quit IRC19:46
*** vnogin has joined #openstack-ansible20:06
*** hamzy_ has quit IRC20:12
*** vnogin has quit IRC20:22
*** openstacking_123 has quit IRC20:37
*** DanyC has joined #openstack-ansible20:57
*** DanyC has quit IRC20:58
*** DanyC has joined #openstack-ansible20:59
*** DanyC_ has joined #openstack-ansible21:03
*** DanyC has quit IRC21:04
*** hamzaachi has joined #openstack-ansible21:07
*** strattao has joined #openstack-ansible21:16
strattaowhy does os_tempest create a public network associated with a project, but not a public subnet?21:20
*** hamzy_ has joined #openstack-ansible21:21
strattaojust throwin’ that question out into the void…21:24
strattaoActually, a better question is, why does os_tempest create a default public network at all? I want to test my existing public network configuration.21:24
strattaoHopefully some tempest guru can chime in… @odyssey4me seems to be the biggest contributor to that repo so maybe…21:27
strattaounless I’m just barking up the wrong tree to test my deployment…21:29
*** hamzy_ has quit IRC21:29
*** openstacking_123 has joined #openstack-ansible21:39
odyssey4mestrattao the os_tempest role has some resource setup which was originally for the purpose of our own testing (back in icehouse), not really for general use - over time that's changing, and if there's something that'd make it work better for more general use, we're happy to receive bug reports/patches21:41
odyssey4mestrattao that said, tempest is a bit obscure for our users, so we started developing 'healthcheck-*' playbooks in rocky for more readable and understandable output which may be something you prefer21:42
odyssey4mewe'd also be happy to see those grow to be more full fledged21:43
strattaoodyssey4me, as always, thank you for your response!21:50
jrosserstrattao: i think if you put in the details of your existing external network, overriding the tempest defaults then it will just use that?21:53
strattaojrosser, it’s close, but there aren’t overrides for everything os_tempest wants to create21:54
jrossercan we fix that? :)21:54
*** ansmith_ has quit IRC21:54
strattaosure! it’s just time, right? I’m still getting familiar with options for testing/benchmarking my deployment to make sure that everything is good to go. Seems like rally and tempest are my best bets. Will take a closer look at the healthcheck-* stuff.21:57
jrosseri have an ansible role somewhere for refstack too21:57
strattaoother than rally, tempest, healthcheck, what other tools should I be looking at to validate/benchmark a production deployment?21:58
jrosseri use this https://refstack.openstack.org22:00
jrosserwhich is shiny around tempest22:00
*** openstacking_123 has quit IRC22:11
*** hamzaachi has quit IRC22:12
*** strattao has quit IRC22:49
*** bgmccollum has quit IRC22:53
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Add a default retention policy for skydive indexes  https://review.openstack.org/63109923:36

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!