Thursday, 2019-05-16

*** BjoernT has quit IRC00:02
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/stein: Add retry for backup get_url task  https://review.opendev.org/65868300:23
*** gyee has quit IRC00:36
openstackgerritMerged openstack/openstack-ansible-lxc_container_create stable/stein: Drop Suse 42.3 support  https://review.opendev.org/65868700:59
*** d34dh0r53 has joined #openstack-ansible01:00
openstackgerritXuan Yandong proposed openstack/ansible-config_template master: Change the author-email openstack-dev to openstack-discuss  https://review.opendev.org/65940201:19
*** partlycloudy has joined #openstack-ansible01:36
*** nicolasbock has quit IRC01:36
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/stein: Remove keystone directory on source installs  https://review.opendev.org/65837701:37
*** gshippey has quit IRC01:38
openstackgerritMerged openstack/openstack-ansible-os_barbican master: Add integrated coverage  https://review.opendev.org/65839601:47
openstackgerritMerged openstack/openstack-ansible-os_barbican master: Clarify supported SUSE versions  https://review.opendev.org/65901801:47
*** BjoernT has joined #openstack-ansible02:00
openstackgerritMerged openstack/openstack-ansible stable/stein: Add /v2 to mistral api endpoint.  https://review.opendev.org/65927602:11
*** BjoernT has quit IRC02:17
*** BjoernT has joined #openstack-ansible02:20
*** dhellmann has quit IRC02:23
*** dhellmann has joined #openstack-ansible02:23
*** BjoernT has quit IRC02:35
*** fnpanic has quit IRC02:37
*** kplant has quit IRC02:42
*** oyrogerg has joined #openstack-ansible03:06
*** joshualyle has quit IRC03:06
openstackgerritMerged openstack/openstack-ansible master: Document bootstrap host failure on leap 15  https://review.opendev.org/65922903:08
openstackgerritMerged openstack/openstack-ansible master: Bump nova pin after placement removal  https://review.opendev.org/65820803:08
openstackgerritBjoern Teipel proposed openstack/openstack-ansible-os_neutron master: Update neutron_bgp_speaker_driver  https://review.opendev.org/65942803:39
openstackgerritBjoern Teipel proposed openstack/openstack-ansible-os_neutron master: Update neutron_bgp_speaker_driver  https://review.opendev.org/65942803:41
*** radeks_ has joined #openstack-ansible03:50
*** udesale has joined #openstack-ansible03:53
*** oyrogerg has quit IRC04:12
*** oyrogerg has joined #openstack-ansible04:17
openstackgerritLogan V proposed openstack/openstack-ansible master: Fix systemd-journal-remote socket dependency  https://review.opendev.org/65943304:22
*** radeks_ has quit IRC04:40
*** oyrogerg has quit IRC04:44
*** oyrogerg has joined #openstack-ansible04:50
*** _d34dh0r53_ has joined #openstack-ansible04:55
*** jsquare has quit IRC05:06
*** jsquare has joined #openstack-ansible05:07
*** _d34dh0r53_ has quit IRC05:08
*** shyamb has joined #openstack-ansible05:08
*** cloudkiller has joined #openstack-ansible05:11
*** _d34dh0r53_ has joined #openstack-ansible05:11
*** shyamb has quit IRC05:35
*** shyamb has joined #openstack-ansible05:41
*** ivve has quit IRC05:41
*** hamzy has quit IRC05:44
*** gkadam has quit IRC05:49
*** jbadiapa has joined #openstack-ansible05:49
*** gkadam has joined #openstack-ansible05:51
*** radeks_ has joined #openstack-ansible06:03
*** radeks_ has quit IRC06:04
*** radeks_ has joined #openstack-ansible06:04
openstackgerritzhangboye proposed openstack/openstack-ansible-os_barbican master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65944406:05
*** udesale has quit IRC06:05
*** udesale has joined #openstack-ansible06:06
*** shyam89 has joined #openstack-ansible06:07
*** shyamb has quit IRC06:07
*** oyrogerg has quit IRC06:16
*** hamzy has joined #openstack-ansible06:21
*** cshen has joined #openstack-ansible06:24
openstackgerritzhangboye proposed openstack/openstack-ansible-lxc_hosts master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65944706:28
*** shyam89 has quit IRC06:29
*** pmannidi has joined #openstack-ansible06:34
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/65873106:36
*** shyamb has joined #openstack-ansible06:40
openstackgerritzhangboye proposed openstack/openstack-ansible-os_keystone master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65945006:42
*** udesale has quit IRC06:51
*** udesale has joined #openstack-ansible06:52
*** ivve has joined #openstack-ansible06:58
*** arbrandes has quit IRC07:00
*** arbrandes has joined #openstack-ansible07:01
*** udesale has quit IRC07:02
*** starborn has joined #openstack-ansible07:03
*** openstackgerrit has quit IRC07:03
*** udesale has joined #openstack-ansible07:03
*** pcaruana has joined #openstack-ansible07:13
*** L_SR has joined #openstack-ansible07:17
*** kopecmartin|off is now known as kopecmartin07:18
*** openstackgerrit has joined #openstack-ansible07:19
openstackgerritzhangboye proposed openstack/openstack-ansible-os_nova master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65946807:19
openstackgerritzhangboye proposed openstack/openstack-ansible-galera_client master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65947107:24
*** udesale has quit IRC07:36
*** itandops has quit IRC07:37
*** udesale has joined #openstack-ansible07:37
*** aedc has joined #openstack-ansible07:40
*** tosky has joined #openstack-ansible07:48
openstackgerritzhangboye proposed openstack/openstack-ansible-os_aodh master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65948107:51
*** CeeMac has joined #openstack-ansible07:52
*** gkadam has quit IRC07:55
*** shyamb has quit IRC08:01
*** fnpanic has joined #openstack-ansible08:04
fnpanicgood morning08:05
fnpanicceemac: around?08:10
fnpanicoonedeadpunk: ping08:10
*** aedc has quit IRC08:10
*** DanyC has joined #openstack-ansible08:12
*** DanyC has quit IRC08:12
*** DanyC has joined #openstack-ansible08:13
openstackgerritzhangboye proposed openstack/openstack-ansible-openstack_hosts master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65949108:19
*** DanyC has quit IRC08:19
CeeMacmorning fnpanic08:21
CeeMachows it going?08:22
*** miloa has joined #openstack-ansible08:24
miloaMorning08:24
*** starborn has quit IRC08:29
openstackgerritzhangboye proposed openstack/openstack-ansible-galera_server master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65949208:31
*** starborn has joined #openstack-ansible08:33
miloaI am using osa rocky tag: 18.1.5, install_method: distro, OS : CentOS. Is it possible to rerun setup-infrastructure.yml ? I've got an error on second run : repo_server : Gather variables for each operating system : FAILED! => {"msg": "No file was found when using with_first_found. Use the 'skip: true' option to allow this task to be skipped if no files are found"}.08:34
fnpanicceemac: food08:38
fnpanics/f/g/g08:38
fnpanicquick question08:38
fnpanicdo you still have remote for your image upload in horizon?08:38
fnpanicmiloa: hi08:39
CeeMacfnpanic, i do08:39
fnpanici guess this is on the utiltiy container08:39
*** aedc has joined #openstack-ansible08:39
miloafnpanic: hi :)08:39
fnpanicright?08:39
fnpanici have seen this message before08:40
*** DanyC has joined #openstack-ansible08:40
fnpanicceemac: i changed my cors setting and then i can use direct thanks to noonedeadpunk08:42
evrardjpthat sounds like there is a problem for fact gathering08:42
evrardjpmiloa: ^08:42
CeeMacfnpanic, nice!08:42
evrardjpare all the containers fine and reachable? Is the fact cache stale?08:43
fnpanicCeeMac: do you see a progress bar on upload or just a spinner at the submit button?08:43
CeeMacfnpanic, i can't remember tbh. I'd need to switch it back and try again.08:44
*** gkadam has joined #openstack-ansible08:45
CeeMacI'm in the middle of prepping for a prod rollout, once I've got that done I'll revisit some of these issues in my dev environment08:45
miloaevrarjp: when i run "ansible -m setup controller-002_repo_container-xxxx" I get the facts08:45
fnpanicceemac: k thanks08:47
miloaevrardjp: how can i check if the fact cache stale?08:48
CeeMacfnpanic, sure08:48
*** shyamb has joined #openstack-ansible08:55
*** hamzaachi has joined #openstack-ansible08:56
jrossermiloa: you are doing install_method=distro? it doesnt look like the repo_server should be involved in that case https://github.com/openstack/openstack-ansible/blob/stable/rocky/playbooks/setup-infrastructure.yml#L17-L1809:05
*** starborn has quit IRC09:08
*** PTO has joined #openstack-ansible09:08
*** jsquare has quit IRC09:10
*** jsquare has joined #openstack-ansible09:12
evrardjpmiloa: isn't this documented?09:14
evrardjphttps://docs.openstack.org/openstack-ansible/latest/admin/troubleshooting.html#cached-ansible-facts-issues09:16
evrardjpyou need to run a playbook to store said facts, not only ad-hoc commands09:17
jrosserhmm fatal: unable to access 'https://opendev.org/openstack/keystone/': gnutls_handshake() failed: The TLS connection was non-properly terminated09:20
jrosser^ is that a known this?09:20
jrosser*thing09:20
PTOI need some advice. I have broken my openstack pike cluster. I have added three new controller nodes following the scaling guide, and then remove the three old ones. Everything seems to work, except all instances are stuck in SCHEDULE or BUILD. How to proceed?09:26
miloajrosser: yes I amm using install_method=distro, ans in my openstack_user_config.yml I've got repo-infra_hosts section. I will comment/remove it and try again thanks.09:29
jrosserright - so as you can see in setup-infrastructure it shouldnt even be running the repo server playbooks?09:29
fnpanicPTO: hi. What does work? when you say everything seems to work?09:30
miloaevrardjp: thanks for the doc link :) I was sticked to the deployment doc and did not see it :)09:31
PTOAll services are up, openstack cli  list images, neutron agents, flavors etc. Everything seems up. The only problem is i cant launch instances or edit them09:31
*** rgogunskiy has joined #openstack-ansible09:31
evrardjpmiloa: operations docs are very nice :)09:32
evrardjpthey need some more content though :)09:32
*** sc has joined #openstack-ansible09:34
*** starborn has joined #openstack-ansible09:37
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-lxc_container_create master: Remove Xenial support and CI jobs  https://review.opendev.org/65058809:42
L_SRevrardjp: Hello! still stuck at setup_openstack.yaml.  I have noticed that when running os-keystone-install.yaml after just created the container I get the following error: https://pastebin.com/fTxd8yB7 nevertheless, running it a second time skips the aforementioned error but instead shows this: http://eavesdrop.openstack.org/irclogs/%23openstack-ansible/%23openstack-ansible.2019-05-15.log.html#t2019-05-15T16:30:52 Any idea?09:47
L_SRevrardjp: I have also checked the network configuration, which seems to be ok: https://imgur.com/huWQicd09:54
L_SRAny help is greatly appreciated, guys! Thanks in advance09:54
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/rocky: Use block/rescue for image pre-stage  https://review.opendev.org/65936010:01
*** pmannidi has quit IRC10:05
*** tosky has quit IRC10:10
*** shyamb has quit IRC10:10
*** tosky has joined #openstack-ansible10:11
noonedeadpunkmornings everyone10:20
*** shyamb has joined #openstack-ansible10:21
_jannoI have two containers failig which are missing /openstack/venvs/utility-19.1.0.dev53/bin/python10:26
_jannoone is a keystone container and the other one is a glance one10:27
*** pcaruana has quit IRC10:27
_jannoThat they are looking for /openstack/venvs/_utility_-... seems wrong for me10:28
_jannoThe glance one has a python in /openstack/venvs/glance-19.1.0.dev53/ and the keystone in /openstack/venvs/keystone-19.1.0.dev53/10:29
*** shyamb has quit IRC10:40
*** shyamb has joined #openstack-ansible10:41
noonedeadpunkfolks, what do you think regarding that? https://review.opendev.org/#/c/658679/310:43
*** luksky has joined #openstack-ansible10:52
*** shyamb has quit IRC10:55
evrardjpL_SR: I don;t know what you did, but it seems your environment is broken. Your secrets don't match the db10:56
evrardjpIs that a prod environment?10:56
evrardjpcould you just tear everything down, and start from scratch?10:56
evrardjp_janno: what do you mean?10:57
*** nicolasbock has joined #openstack-ansible10:57
evrardjp_janno: the utility container is there for convenience10:57
evrardjpit's venv too10:57
L_SRevrardjp: weird. Going to focus on that now. Thanks for taking a look10:59
evrardjpL_SR: just had a quick glance10:59
evrardjpthat's what I would do at least11:00
*** strattao has joined #openstack-ansible11:00
evrardjpnoonedeadpunk: done11:00
L_SRevrardjp: I have a running deployment using branch 19.0.0 (as in https://docs.openstack.org/project-deploy-guide/openstack-ansible/stein/deploymenthost.html). I will try deploying with it and see if I get similar errors11:01
evrardjpok11:06
*** shyamb has joined #openstack-ansible11:11
*** udesale has quit IRC11:15
openstackgerritMerged openstack/openstack-ansible-galera_server master: [redhat] Update variables to be version agnostic  https://review.opendev.org/65825311:20
*** aedc has quit IRC11:24
_jannoevrardjp: well, nevermind, I think the problem was that someone accidentally had uncommented the following line11:32
_janno#openstack_service_setup_host_python_interpreter: "/openstack/venvs/utility-{{ openstack_release }}/b│11:32
_jannoin/python"11:32
evrardjp :)11:33
evrardjpthat could explain if you're setting up a different interpreter :)11:33
_jannobut I am still wondering why there hadn't been any issues with the other containers11:34
*** pcaruana has joined #openstack-ansible11:37
L_SRevrardjp: after destroying and re-creating the keystone container, it still fails at checking the current state of the Keystone DB: https://pastebin.com/jpktA3Zm11:41
*** shyamb has quit IRC11:43
*** shyam89 has joined #openstack-ansible11:43
openstackgerritMerged openstack/openstack-ansible stable/stein: Prepare OSA release for Stein  https://review.opendev.org/65659511:57
mgariepyis the aria2c stuff for centos been merged in rocky ?11:59
mgariepyhttp://logs.openstack.org/99/659299/1/check/openstack-ansible-functional-centos-7/5417270/job-output.txt.gz#_2019-05-15_14_42_16_07702311:59
*** aedc has joined #openstack-ansible12:14
*** cshen has quit IRC12:20
*** joshualyle has joined #openstack-ansible12:24
*** cshen has joined #openstack-ansible12:28
noonedeadpunklogan-: I also was thinking about "content" but in this case we should either add task to read source file and place it as content, or force delpoyers to put raw content inside variable, which is pretty new experience. And overrides are more handy and people get used to them imo12:33
*** shyam89 has quit IRC12:35
*** shyamb has joined #openstack-ansible12:35
*** PTO has quit IRC12:36
*** shyamb has quit IRC12:42
evrardjpnoonedeadpunk: alternatively, just provide the override and template it as ini or pass the whole file ?12:44
noonedeadpunkyou mean to do template with absolute path, when it's provided?12:46
*** shyamb has joined #openstack-ansible12:47
noonedeadpunkyep, that's probably an option. don't know why, I just like overrides, as they can be passed to the needed format, and you provide them with nice-looking yaml:)12:47
*** ansmith has quit IRC12:48
noonedeadpunkso, you also suggest to replace override with source file, provided by deployer here https://review.opendev.org/#/c/658679/ ?12:49
noonedeadpunkI can probably put -W as it's not too late12:49
*** shyamb has quit IRC12:51
evrardjpwe can merge it as is12:53
evrardjpif you want to improve in a later patch you can12:53
evrardjpbut indeed I see no point of having an empty thing we override with content of the deployer :) It's not worth not merging this though12:54
evrardjpgood news is that stein thing merged12:55
evrardjpI believe we can have the first stein release then :)12:55
noonedeadpunkJust I afaik the only project we had that allowed to place user configs was ceilometer, and even it not the case now12:56
noonedeadpunkThat's great news!12:56
evrardjpyou mean upload files from deployer's userspace?12:56
evrardjpI think it's the case if you want to upload your certificates and other stuff?12:56
*** shyamb has joined #openstack-ansible12:57
noonedeadpunkoh, yeah, that's the case.12:57
evrardjp:)13:00
evrardjpI think it's fine to "just upload a file" to destination, and avoids mangling/editing files live.13:01
evrardjpYou're "only" exposed to ansible/rsync bugs, not the config_templates ones on top :D13:01
*** udesale has joined #openstack-ansible13:02
noonedeadpunkYep, probably you're right. Than there's no reason to merge this in current state.13:02
noonedeadpunkI'll better update it to upload deployer provided config file13:02
evrardjpI think the patch is not incorrect, else I would have voted negatively :)13:03
noonedeadpunk*to allow depployer to upload config13:03
evrardjpI think you can add a patch on top13:03
noonedeadpunkI'd love to get it already for stein, and then it would be harder to backport:)13:03
evrardjpoh fair :)13:03
evrardjpone vs two patches :)13:04
noonedeadpunksome features are available from queens and it's high time we added them13:04
evrardjpnoonedeadpunk: thanks for biting the bullet13:04
evrardjpnoonedeadpunk: https://review.opendev.org/#/c/659119/ If we merge this, the whole branch to use the integrated for blazar would work13:09
evrardjpI don't ensure the fact blazar is _actually_ working, but at least it passes functional testing13:09
*** ianychoi has joined #openstack-ansible13:26
logan-noonedeadpunk: yeah I wouldn’t change how you did it. It’s different, but clever, and it’s13:28
logan-the only way you can pass structured data rather than a flat file ;)13:28
* logan- googles what blazar is13:29
noonedeadpunknow I really don't know what to do - either to replace this with just custom config file or leave as is. tough choice13:31
noonedeadpunkok, let it be then?..13:32
*** gkadam has quit IRC13:33
logan-If you change anything, have deploy specify content not src imo, that way the override can still be used without creating another separate config file. content can still accept a separate file with a lookup if someone is so determined.13:34
logan-But yep feel free to leave it, voted accordingly :p13:34
admin0if I have multiple cinder types, how do I set one as default ?13:34
*** sreejithp has joined #openstack-ansible13:34
logan-If it works for you it’s progress from where it was before and it won’t break anyone else :)13:34
logan-admin0: there is a cinder config var you can set in overrides to specify the default backend13:35
admin0ok .. so its from the config13:35
admin0i thought some command13:35
logan-Yea it’s config for sure13:36
logan-I don’t remember the var though and I’m on mobile13:37
evrardjplogan-: haha it's not that blazar catches my eyes, is just that I want to finish this matrix: https://docs.google.com/spreadsheets/d/1coiPHGqaIKNgCGYsNhEgzswqwp4wedm2XoBCN9WMosY/edit#gid=75207069513:37
noonedeadpunklogan-: actually, there's no point in override when you're placing the full content... but yep, I probably can move this " " content to a variable, that a deployer could provide a file with a lookup instead13:37
noonedeadpunkgreat idea13:38
*** shyamb has quit IRC13:38
evrardjpfar too complex imo: just copy the damn file :p13:38
evrardjphahaha13:38
logan-noonedeadpunk: I’ve thought about testing that glance feature for years. Have you tried it? Does it work well?13:40
noonedeadpunkI'm in progress:) I need to place a metadata to all user uploaded images, so had to use it.13:42
evrardjpfolks, how long should we wait for releasing stein? I suppose we can wait a few days (until monday for example) to see how it goes?13:45
evrardjpI think we can do it today if we want to rush it, but at this point there is no rush I think13:45
guilhermespmorning! I've been out with some headaches regarding openstack upgrades hahahah btw, did we start the migration script for placement?13:46
guilhermespi think this could be a point to consider to release stein?13:46
L_SRevrardjp: i think i'm starting to show frustration xD. I have pinpointed the problem to os-keystone-install. Even if I regenerate the secrets, or simply erase everything and retry, the setup-openstack always fails in the same Task: keystone_db_setup.yml. Where can I get Keystone logs? I see none at container's /var/log or in venv directory13:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_glance master: Add ability to place glance-image-import.conf  https://review.opendev.org/65867913:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_glance master: Add ability to place glance-image-import.conf  https://review.opendev.org/65867913:48
evrardjpL_SR: sorry you go through that. The problem is not the secret generation, is the fact that you still have a db with old secrets :)13:48
evrardjphow do you erase everything?13:49
L_SRevrardjp: lxc-container-destroy13:49
evrardjpL_SR: you can find the logs on the host13:49
evrardjpL_SR: I think out of safety we don't destroy the data? Can't remember13:49
L_SRevrardjp: it prompts the user if you want to erase container contents. Am I wrong assuming this erases the DB too?13:50
evrardjpI suppose in that case we delete it too I guess :)13:50
evrardjpL_SR: I guess it would be simpler if we had a log of the complete run since the last lxc-container-destroy13:51
L_SRevrardjp: what log could be useful?13:52
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/stein: Use the 'real' name for the LXC image  https://review.opendev.org/65877413:52
evrardjpI mean the full ansible log13:52
evrardjpat some point we need the bazooka approach :)13:52
L_SRevrardjp: ok. Will attempt a destroy again and get the complete log13:53
L_SRevrardjp: bazooka it is :)13:53
evrardjpL_SR: I think it's wise... Having all the details in one place will be good13:53
CeeMacL_SR, is keystone logging to journalctl perchance?13:53
evrardjpBy providing a deploy log, we can compare to our gates, and with the /etc/openstack_deploy (no need to share the secrets) we would have a full view13:54
L_SRevrardjp: ok13:54
L_SRCeeMac: sorry for being such a newbie: how can I check?13:54
evrardjpCeeMac: I think the problem is the db sync -- on the error log I saw it was a problem connecting to DB13:54
admin0setting up default_volume_type: in variables did nothing .. i think its config override13:54
admin0just confirming before i do13:54
evrardjpTherefore I suggested checking if the db is correct and networking/haproxy is correct.13:54
evrardjpCeeMac: if you could help L_SR that would be most welcomed :)13:55
*** mgariepy has quit IRC13:55
evrardjpI am sad ppl arrive to a frustrating experience, this is not the usual OSA experience:(13:55
L_SRevrardjp: the db sync error is bypassed by specifying login_unix_socket: /var/run/mysqld/mysqld.sock, which I believe is xenial's socket to the db13:55
evrardjpThere is no need to bypass things :)13:56
CeeMacL_SR, from within the keystone container, journalctl -xe13:56
*** pcaruana has quit IRC13:56
L_SRevrardjp: I love OSA! I have a 6 node setup in the lab, worked like a charm. But his time, with a very reduced setup, is giving me this strange problem with Keystone13:56
admin0my bad13:57
L_SRCeeMac: yes, I can see Keystone logs. Some are these: https://pastebin.com/mw7Px0fi seemed to be related to mysql connection14:00
noonedeadpunkinstantly regret about decision to change patch14:01
CeeMacL_SR, journalctl -xe | grep -i 'error\|warn'14:01
CeeMacmight narrow it down14:01
evrardjpnoonedeadpunk: :)14:01
evrardjpL_SR: sorry to insist, but have you double checked the networking/LBing?14:02
L_SRCeeMac: https://pastebin.com/eM4BV7vZ14:02
*** cshen has quit IRC14:02
CeeMacline 35, could do with page right to see the rest of the detail14:02
evrardjpand then trying to hit the LB on its internal interface with the credentials you have in secrets?14:02
*** mgariepy has joined #openstack-ansible14:03
CeeMacL_SR, nvm, second paste has it14:03
L_SRevrardjp: I will check next14:03
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_glance master: Add ability to place glance-image-import.conf  https://review.opendev.org/65867914:04
CeeMacit does look networky14:05
L_SRCeeMac: shall I remove the login_unix_socket: /var/run/mysqld/mysqld.sock from keystone_db_setup.yml?14:05
CeeMachave you checked the haproxy status to see if the backend is up?14:05
CeeMachatop -s /var/run/haproxy.stat14:05
CeeMacL_SR, I'd probably avoid ripping things out until you have a better idea of the root cause, might be a nightmare to fix them back in if need be14:06
L_SRCeeMac: haproxy has some services OPEN and DOWN14:07
CeeMaccan you paste the ones related to galera?14:08
L_SRCeeMac: these are related to galera: https://pastebin.com/wGH3HD9y14:09
CeeMacL_SR, might be worth checking the galera cluster node and cluster status14:09
CeeMacansible galera_container -m shell -a "cat /var/lib/mysql/grastate.dat" (from deployment node)14:09
CeeMacansible galera_container -m shell -a "mysql -h 127.0.0.1 -e 'show status like \"%wsrep_cluster_%\";'"14:09
CeeMacL_SR, OK, so it looks up at least from the LB point of view14:10
noonedeadpunkso I ended up with adding new task  https://review.opendev.org/658679 and not really sure if it's ok, or I really should rollback to the 3-rd patch set14:10
L_SRCeeMac: both checks on Galera yielded SUCCESS14:10
CeeMachmm14:10
CeeMacok, can you ping the LB IP from the keystone container?14:10
CeeMacthe internal VIP I mean14:11
L_SRCeeMac: galera-related checks: https://pastebin.com/CqbXNqFM14:11
noonedeadpunkchoosing options is the harderst part for me:(14:12
L_SRCeeMac: the internal vip from lb is reachable from the keystone container https://pastebin.com/DPyV8Gia14:13
L_SRCeeMac: the external too14:13
L_SRCeeMac: this is the error itself for os-keystone-instal or setup-openstack https://pastebin.com/JipDS07d14:15
*** cshen has joined #openstack-ansible14:16
L_SRCeeMac: should I lxc-container-destroy and redeploy in order to get a complete log?14:17
CeeMacL_SR, how many nodes do you have?14:19
mgariepyanyone use keystone as a SP currently to authenticate against an idp ?14:19
L_SRCeeMac: 3. 1 infra1, 1 compute1, 1 storage14:20
CeeMack14:20
*** cshen has quit IRC14:21
CeeMacnot sure if "ttyname failed: Inappropriate ioctl for device" is relevant14:22
CeeMaci seem to recall seeing that once before myself14:22
L_SRCeeMac: it keeps showing in several tasks14:22
CeeMacdo they all fail or some succeed?14:22
L_SRCeeMac: redeploying now14:22
*** cshen has joined #openstack-ansible14:22
CeeMack14:23
openstackgerritMerged openstack/openstack-ansible-os_blazar master: Add SUSE and CentOS support to blazar  https://review.opendev.org/65911914:24
*** cloudkiller is now known as blah2314:27
*** blah23 is now known as cloudnull|afk14:27
*** rgogunskiy has quit IRC14:29
*** rgogunskiy has joined #openstack-ansible14:30
*** cloudnull|afk is now known as cloudnull14:31
*** rgogunskiy has quit IRC14:31
*** starborn has quit IRC14:31
*** rgogunskiy has joined #openstack-ansible14:32
*** hamzaachi_ has joined #openstack-ansible14:33
*** hamzaachi has quit IRC14:35
*** d34dh0r53 has quit IRC14:36
*** d34dh0r53 has joined #openstack-ansible14:37
*** hamzaachi_ has quit IRC14:37
*** pcaruana has joined #openstack-ansible14:37
*** rgogunskiy has quit IRC14:39
*** rgogunskiy has joined #openstack-ansible14:40
*** d34dh0r53 is now known as Guest2890414:41
*** rgogunskiy has quit IRC14:44
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-os_neutron master: Remove name2int  https://review.opendev.org/65676114:48
*** hamzaachi_ has joined #openstack-ansible14:49
*** cshen has quit IRC15:00
*** miloa has quit IRC15:02
*** devx has quit IRC15:03
*** devx has joined #openstack-ansible15:04
*** ivve has quit IRC15:13
CeeMacany telemetry gurus in the house?15:16
*** luksky has quit IRC15:19
*** qsrmvt has joined #openstack-ansible15:20
L_SRCeeMac evrardjp: redeployment log https://www.dropbox.com/s/ou2bnogwb22joge/ansible.log?dl=015:20
qsrmvtHello. I'm having some difficulty finding the hardening role... it seems to not be on Galaxy any more? Or maybe it changed names?15:20
mgariepyhttps://github.com/openstack/ansible-hardening15:21
mgariepyqsrmvt, ^^15:21
qsrmvtYeah I know where it is on GitHub15:21
qsrmvtI would have sworn it used to be on Galaxy as well15:21
qsrmvtWell, before I go adding a submodule or somesuch... any idea how well it works against Ubuntu 18.04.2 LTS? Last I saw it was working for 16.04, but no mention past that (again, might have missed something)15:23
CeeMacqsrmvt, it ran fine against my env on 18.04.115:25
qsrmvtAwesome, thanks15:25
qsrmvtThat's what I was hoping :)15:25
L_SRCeeMac evrardjp: setup-openstack log with increased verbosity showing the failure at keystone: https://pastebin.com/yk7x94Ae15:25
CeeMaccouldn't get 18.0.4.2 install iso working, kept looping after network setup for some reason15:25
* CeeMac shrugs15:27
logan-question for people who have done skip level upgrades, mgariepy cloudnull jmccrory... can upgrade control plane 1 version at a time and then jump computes from ex. P->R (meaning nova-compute would never start up in Q, but all other services would15:27
mgariepywhen i did Kilo > newton one it was only a question of upgading the db anyway.15:28
mgariepybut having done it once, i would not do it again ;) it's easier to keep up to date haha :)15:29
CeeMacL_SR, are you just running the keystone playbook or running everything from scratch? I forget how far you got before this15:30
logan-mgariepy: thanks15:31
L_SRCeeMac , in this last case I'm running everything from scratch15:31
mgariepyisn't the new release of OS supposed to be able to upgrade the DB direcly from P to R >15:31
mgariepy?15:31
L_SRCeeMac evrardjp: user variables: https://pastebin.com/5jEHvhSn openstack user config: https://pastebin.com/Sz6Q8xXX15:32
logan-not sure, that would be great though15:32
mgariepyhttps://github.com/openstack/openstack-ansible-ops/tree/master/leap-upgrades15:33
mgariepyi used that back in the days.15:34
mgariepybut i had a few release to upgrade.15:34
mgariepylogan-, you probably can do a quick test from P > R upgrade, maybe some config in OSA needs to be taken from Q, not too sure about it but just for an aio it would be too long to do a quick test.15:36
CeeMacL_SR, nothing jumping out at me from your config files15:36
*** qsrmvt has left #openstack-ansible15:36
logan-yeah i'll give that a shot. even if i only have to run migrations in Q that would not be too hard15:37
*** _d34dh0r53_ is now known as d34dh0r5315:38
*** macza has joined #openstack-ansible15:39
L_SRCeeMac evrardjp: keystone journal from the container: https://pastebin.com/ZSZEkzXG15:39
CeeMacL_SR, your secrets file is populated yes? (sorry, jucst covering bases)15:40
L_SRCeeMac, sure, via ./scripts/pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml15:40
CeeMacjust checking :)15:41
L_SR:)15:41
CeeMacthought it could be auth issue rather than network issue :)15:41
L_SRI think I got the network setup just right, in fact it is the same as in my other deployment. nevertheless, the keystone journal makes me wonder if something is wrong, though15:42
CeeMacyeah, connection errors are so vague15:42
L_SRWell, must investigate more i guess15:43
CeeMacdo you have debug enabled in keystone.conf15:44
CeeMacor maybe set debug true in your user variables15:45
evrardjpCeeMac: it's weeird, the first like I see is a problem with ERROR! the playbook: setup-infrastructure.yml could not be found15:45
CeeMaci saw that15:45
CeeMacthen it runs it anyway15:45
CeeMaci presume you're running the playbook from the playbooks directory....15:45
CeeMac(obvs)15:45
evrardjpsorry it was not for CeeMac but L_SR :)15:46
CeeMacsorry also, i didn't check the sender just the message. its almost 17:00 my brain is mostly off now :)15:46
evrardjpit's almost 6pm for me, my brain is definitely off15:47
evrardjp:p15:47
CeeMachaha yeah15:47
*** rgogunskiy has joined #openstack-ansible15:47
*** rgogunskiy has quit IRC15:47
evrardjp2019-05-16 14:23:52,327 p=5942 u=root |   [WARNING]: Could not match supplied host pattern, ignoring: repo_masters15:47
evrardjp makes me wonder15:47
evrardjpthere must be a problem with inventory or something15:47
*** rgogunskiy has joined #openstack-ansible15:47
*** pcaruana has quit IRC15:47
CeeMactheres an error connecting for the requirements file as well15:48
evrardjpthat's very weird15:48
*** itandops has joined #openstack-ansible15:48
evrardjpL_SR: did you checkout the latest stable version of the code, then re-ran bootstrap-ansible ?15:48
CeeMacrepo-infra_hosts is set in o_u_c15:48
*** L_SR_2 has joined #openstack-ansible15:48
evrardjpI think the healthcheck playbooks should help here15:49
evrardjpfor debugging15:49
evrardjpL_SR: after doing the steps above, I would go to playbooks folder, and run15:50
evrardjpopenstack-ansible healthcheck-hosts.yml15:50
L_SR_2evrardjp CeeMac would do that when I get access to the deployment host again :). Thanks for your insights so far15:51
L_SR_2Won’t promise I would not bother you guys again tomorrow15:53
CeeMacevrardjp, should repo_masters show up as a group in the dynamic inventroy?15:53
evrardjpL_SR_2: I am just doing this on my part time, it's not my job currently :)15:53
evrardjpSo I am not promising I would be there too :p15:53
evrardjpCeeMac: I believe it would15:53
CeeMaci don't see it on my deployment host15:54
L_SR_2evrardjp :)15:54
evrardjpCeeMac: sorry I meant repo_all15:54
evrardjpCeeMac:  let me rephrase, repo_all should always be empty. Because the group is always defined: https://github.com/openstack/openstack-ansible/blob/96852cfcc9f4db948489d750dd116d2b0a51ceff/inventory/inventory.ini15:54
evrardjpshould always at least* be empty15:55
evrardjpin other words, always defined15:55
evrardjpnot unknown by the inventory15:55
CeeMacrepo_masters would link to a skel then ?15:55
evrardjpthe masters thing is dynamic15:55
evrardjphttps://github.com/openstack/openstack-ansible/blob/cf776e29a383fb7779858068369d3dfc4794141c/playbooks/repo-build.yml#L24-L4115:56
evrardjpCeeMac: I am a little outdated on how this works in master branch though15:56
evrardjpI suppose it's kinda the same15:56
CeeMacyou're probably more clued up than me in that respect :p15:57
*** itandops has quit IRC15:58
*** L_SR_2 has quit IRC15:58
CeeMacah, ok. so its taking the repo_all group, and dynamically populating the repo_servers_* into repo_masters15:58
evrardjpyes, no need to build on all nodes, just build on master of each distro/arch then for the rest, sync15:59
CeeMacok, so if it can't find that, then something basic has gone wrong?16:00
evrardjpwhat do you mean?16:00
CeeMac^ [WARNING]: Could not match supplied host pattern, ignoring: repo_masters16:01
evrardjpif it doesn't do repo build that sounds weird, on branches like Queens/Rocky :)16:01
evrardjpyes16:01
*** kopecmartin is now known as kopecmartin|off16:01
CeeMacjust checking i was understanding that correctly :)16:01
evrardjpI would totally check the inventory if things are okay16:01
CeeMacyeah16:01
evrardjpwe have a tool, inventory manage, but you can now also use ansible-inventory to check the /etc/openstack_deploy/inventory.json16:02
CeeMacL_SR, repo-infra_all would be a good one to check16:02
CeeMacoh, i didn't know about the ansible way, is that documented?16:02
CeeMaci always use the scripts/inventory-manage.py16:03
CeeMacL_SR, in lieu of the ansible-inventory way, you could use 'scripts/inventory-manage.py -G | grep repo' from /opt/openstack-ansible to validate the inventory is correct16:05
CeeMacanyway, i'm out. catch you all tomorrow :)16:07
*** hamzaachi_ has quit IRC16:07
CeeMacone last observation16:09
CeeMac2019-05-16 15:10:37,903 p=19351 u=root |  fatal: [infra1_keystone_container-041e69d2 -> 172.10.10.26]: FAILED! => {"changed": false, "msg": "unable to connect to database, check login_user and login_password are correct or /root/.my.cnf has the credentials. Exception message: (2013, \"Lost connection to MySQL server at 'reading initial communication packet', system error: 0\")"}16:09
CeeMacstill looks like authentication issue?16:09
CeeMachmm, sorry probably should have pasted that16:10
openstackgerritMerged openstack/openstack-ansible-os_designate master: Use the dynamic aio scenario  https://review.opendev.org/65843316:13
jrosserM16:14
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Use the dynamic aio scenario  https://review.opendev.org/65844316:19
*** luksky has joined #openstack-ansible16:21
openstackgerritMerged openstack/openstack-ansible-os_heat master: Use the dynamic aio scenario  https://review.opendev.org/65843516:22
*** aedc has quit IRC16:38
*** rgogunskiy has quit IRC16:47
*** rgogunskiy has joined #openstack-ansible16:48
*** KeithMnemonic has joined #openstack-ansible17:01
jrosserL_SR: the tasks that are failing, are they ones which are delegated to the deploy host?17:01
jrosser172.10.10.26 <- is that your deploy host, and separate from your 3 Openstack nodes?17:02
*** joshualyle has quit IRC17:03
*** ivve has joined #openstack-ansible17:16
*** bline has joined #openstack-ansible17:18
*** aedc has joined #openstack-ansible17:19
*** DanyC has quit IRC17:22
*** aedc has quit IRC17:28
-openstackstatus- NOTICE: Gerrit is being restarted to add gitweb links back to Gerrit. Sorry for the noise.17:35
*** electrofelix has quit IRC17:38
*** pcaruana has joined #openstack-ansible17:39
openstackgerritMerged openstack/openstack-ansible-os_barbican master: Use the dynamic aio scenario  https://review.opendev.org/65840617:41
*** Weifan has joined #openstack-ansible17:43
*** udesale has quit IRC17:46
*** DanyC has joined #openstack-ansible17:53
*** tuxjohnson has joined #openstack-ansible17:57
*** DanyC has quit IRC17:58
*** nicolasbock has quit IRC18:02
tuxjohnsonCan anyone what I may have done wrong that would cause my glance_api_servers in /etc/cinder/cinder.conf to have "http://localhost" instead of the correct "http://x.x.x.x.1:9292".  My /etc/nova/nova.conf file api_servers entry is correct.  In looking at the OSA templates, both the nova.conf and cinder.conf use "glance_service_internalurl"... so I amy trying to understand what happened to the cinder.conf file.18:07
*** CeeMac has quit IRC18:08
openstackgerritAntony Messerli proposed openstack/openstack-ansible-galera_server stable/queens: Use newer percona-release package  https://review.opendev.org/65963318:11
mgariepyodyssey4me, are you around ?18:12
openstackgerritLogan V proposed openstack/openstack-ansible-tests master: Use copy-links when collecting logs  https://review.opendev.org/65963518:13
*** joshualyle has joined #openstack-ansible18:13
mgariepyanyone have info on : https://bugs.launchpad.net/openstack-ansible/+bug/180854318:14
openstackLaunchpad bug 1808543 in openstack-ansible "Keystone Federation cannot complete SP node setup on stable/rocky" [Undecided,Confirmed] - Assigned to Jesse Pretorius (jesse-pretorius)18:14
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Use integrated repo scenario for Calico job  https://review.opendev.org/64583418:14
*** ianychoi has quit IRC18:15
*** joshualyle has quit IRC18:15
*** itandops has joined #openstack-ansible18:15
openstackgerritMerged openstack/openstack-ansible-os_gnocchi master: Use the dynamic aio scenario  https://review.opendev.org/65843418:15
*** joshualyle has joined #openstack-ansible18:22
*** cshen has joined #openstack-ansible18:39
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Use the dynamic aio scenario  https://review.opendev.org/65843118:41
*** trident has quit IRC18:51
*** trident has joined #openstack-ansible18:52
*** cshen has quit IRC18:56
*** d34dh0r53 has left #openstack-ansible19:00
*** d34dh0r53 has joined #openstack-ansible19:00
*** cshen has joined #openstack-ansible19:04
*** cshen has quit IRC19:09
*** nicolasbock has joined #openstack-ansible19:23
*** Weifan has quit IRC19:26
*** PTO has joined #openstack-ansible19:31
PTOI have added new controller nodes to my cluster, and nothing works. I think its because the nova cells tranport url for rabbit is wrong. How can I change this?19:33
PTOWhen i run nova-manage cell_v2 update_cell... i get the error The specified transport_url and/or database_connection combination already exists for another cell with uuid b58c374f-79dc-483a-bc5d-2388ec4418d7.19:35
PTOAll mysql endpoints are the same. How can this be fixed?19:35
*** pcaruana has quit IRC19:52
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Remove LBaaS v2 plugin  https://review.opendev.org/65965419:54
*** radeks_ has quit IRC19:58
*** joshualyle has quit IRC20:01
*** Weifan has joined #openstack-ansible20:02
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: Update ansible to 2.8.0  https://review.opendev.org/65965620:06
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-tests master: Update ansible to 2.8.0  https://review.opendev.org/65965820:08
*** PTO has quit IRC20:09
*** Weifan has quit IRC20:19
jsquareon a new install, we are facing a strange issue, /opt/container-setup.sh fails, "timeout 90 $RHT_PKG_MGR check-update" returns exit code 100 because there are packages available for update, is this normal?20:28
*** Weifan has joined #openstack-ansible20:30
*** kmadac has quit IRC20:35
openstackgerritLogan V proposed openstack/openstack-ansible master: Remove Neutron LBaaS v2 support  https://review.opendev.org/65966020:37
*** dave-mccowan has joined #openstack-ansible20:39
openstackgerritLogan V proposed openstack/openstack-ansible master: Remove Neutron LBaaS v2 support  https://review.opendev.org/65966020:39
*** tuxjohnson has quit IRC20:46
openstackgerritLogan V proposed openstack/openstack-ansible-os_zun master: Remove Neutron LBaaS from test inventory  https://review.opendev.org/65966120:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_tempest master: Remove Neutron LBaaS from test inventory  https://review.opendev.org/65966220:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_nova master: Remove Neutron LBaaS from test inventory  https://review.opendev.org/65966320:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_monasca-agent master: Remove Neutron LBaaS from monitored services  https://review.opendev.org/65966420:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_manila master: Remove Neutron LBaaS from test inventory  https://review.opendev.org/65966520:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_magnum master: Remove Neutron LBaaS from test inventory  https://review.opendev.org/65966620:49
openstackgerritLogan V proposed openstack/openstack-ansible-os_ironic master: Remove Neutron LBaaS from test inventory  https://review.opendev.org/65966720:49
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-tests master: Update ansible to 2.8.0  https://review.opendev.org/65965820:56
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-tests master: Remove use of 'private' for include_role for ansible 2.8  https://review.opendev.org/65966920:56
*** trident has quit IRC20:59
openstackgerritAntony Messerli proposed openstack/openstack-ansible-ops master: Fix test_repo directory name  https://review.opendev.org/65967020:59
*** trident has joined #openstack-ansible21:00
*** DanyC has joined #openstack-ansible21:01
*** aludwar has joined #openstack-ansible21:11
*** joshualyle has joined #openstack-ansible21:32
jrosserwierd http://logs.openstack.org/56/659656/1/check/openstack-ansible-deploy-aio_lxc-ubuntu-bionic/7a3ea9d/logs/ara-report/result/bdadc188-805c-4299-99c8-61af082c88c8/21:33
*** joshualyle has quit IRC21:36
logan-yep, i hit that downstream earlier today testing the 2.8 rc with that role21:40
logan-on a much older tag, so I was hoping if i bumped to master it would work :)21:40
logan-apparently not21:40
jrosserI tried locally downgrading to 2.7 and it still did it21:41
logan-..what21:41
logan-lol21:41
jrosseryes indeed, either my downgrade is bogus or the actual issue is in an ansible dep that’s been upgraded with 2.821:42
logan-thats odd21:42
logan-yeah21:42
logan-did jinja release today also?21:42
jrosserBut really I need to check that in a clean vm to be sure, that’s on my laptop so there could be any amount of cruft21:43
logan-nope does not appear so (re jinja)21:43
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Remove LBaaS v2 plugin  https://review.opendev.org/65965421:45
*** tosky has quit IRC21:59
openstackgerritBjoern Teipel proposed openstack/openstack-ansible-os_keystone master: Execute the keystone db setup earlier in the process  https://review.opendev.org/65967622:02
*** sreejithp has quit IRC22:06
*** hamzaachi has joined #openstack-ansible22:15
*** kplant has joined #openstack-ansible22:17
*** itandops has quit IRC22:19
*** itandops has joined #openstack-ansible22:19
*** joshualyle has joined #openstack-ansible22:23
*** joshualyle has quit IRC22:27
*** strattao has quit IRC22:29
*** itandops has quit IRC22:35
*** macza has quit IRC22:57
*** tuxjohnson has joined #openstack-ansible23:00
*** luksky has quit IRC23:04
*** DanyC has quit IRC23:21
*** hamzaachi has quit IRC23:33
logan-should we just make this ovn centos job non voting? http://logs.openstack.org/54/659654/2/check/openstack-ansible-ovn-centos-7/188fd48/logs/ara-report/result/1a778bb9-8e26-4447-8013-a678c1a0db41/23:35
logan-https://review.opendev.org/#/c/659654/ unblocks the os_neutron gate except for this job23:36
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Remove LBaaS v2 plugin  https://review.opendev.org/65965423:42
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Use integrated repo scenario for Calico job  https://review.opendev.org/64583423:43
logan-^ ovn centos 7 job non voting to unblock the neutron gate, fyi in case anyone is maintaining it23:43
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Remove LBaaS v2 plugin  https://review.opendev.org/65965423:46
openstackgerritLogan V proposed openstack/openstack-ansible-os_neutron master: Use integrated repo scenario for Calico job  https://review.opendev.org/64583423:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!