Wednesday, 2019-05-29

*** ansmith has quit IRC00:15
*** ansmith has joined #openstack-ansible00:15
*** sreejithp_ has quit IRC00:16
*** hamzy has joined #openstack-ansible00:20
*** dave-mccowan has joined #openstack-ansible00:32
*** markvoelker has quit IRC00:33
*** dave-mccowan has quit IRC00:35
*** hwoarang has quit IRC00:37
*** hwoarang has joined #openstack-ansible00:37
*** hwoarang has quit IRC00:54
*** hwoarang has joined #openstack-ansible00:54
*** sreejithp has joined #openstack-ansible01:13
*** sreejithp has quit IRC01:39
*** hwoarang has quit IRC01:45
*** hwoarang has joined #openstack-ansible01:45
*** hwoarang has quit IRC01:58
*** hwoarang has joined #openstack-ansible01:59
*** BjoernT has joined #openstack-ansible02:08
*** BjoernT has quit IRC02:08
*** hwoarang has quit IRC02:18
*** hwoarang has joined #openstack-ansible02:18
*** shyamb has joined #openstack-ansible02:21
*** sreejithp has joined #openstack-ansible02:22
*** BjoernT has joined #openstack-ansible02:22
*** BjoernT_ has joined #openstack-ansible02:27
*** BjoernT has quit IRC02:29
*** markvoelker has joined #openstack-ansible02:34
*** Talion has quit IRC02:43
*** shyamb has quit IRC02:44
*** sreejithp_ has joined #openstack-ansible02:50
*** sreejithp has quit IRC02:53
*** BjoernT_ has quit IRC03:00
*** partlycloudy has joined #openstack-ansible03:05
*** markvoelker has quit IRC03:08
*** threestrands has joined #openstack-ansible03:31
*** hwoarang has quit IRC03:38
*** hwoarang has joined #openstack-ansible03:38
*** shyamb has joined #openstack-ansible03:42
*** altlogbot_2 has quit IRC03:44
*** altlogbot_1 has joined #openstack-ansible03:45
*** partlycloudy has quit IRC03:58
*** partlycloudy has joined #openstack-ansible03:59
*** markvoelker has joined #openstack-ansible04:05
*** shyam89 has joined #openstack-ansible04:07
*** shyamb has quit IRC04:08
*** bradm has joined #openstack-ansible04:32
*** csmart has quit IRC04:36
*** markvoelker has quit IRC04:37
*** raukadah is now known as chandankumar04:37
*** ivve has quit IRC04:37
*** altlogbot_1 has quit IRC04:38
*** altlogbot_1 has joined #openstack-ansible04:39
*** trident has quit IRC04:39
*** altlogbot_1 has quit IRC04:40
*** altlogbot_1 has joined #openstack-ansible04:41
*** csmart has joined #openstack-ansible04:41
*** trident has joined #openstack-ansible04:41
*** sreejithp_ has quit IRC04:49
*** shyam89 has quit IRC04:53
snadgehmm.. latest aio deployment im getting05:09
snadgeTASK [systemd_service : Create TEMP run dir] ***************************************************************************************fatal: [localhost]: FAILED! => {"msg": "'dict object' has no attribute 'interface'"}05:09
snadgeubuntu 18.04 with latest updates.. it wasn't doing it before.. but i noticed a python update slipped by05:09
snadgeand now i've snapshotted it after that update.. sigh05:09
jrossersnadge: which osa branch and ansible version?05:11
snadgemaster05:11
snadgeand 2.7.1005:11
jrosserI have also seen that on master, it feels like an ansible bug. Master is fine if you are doing dev work on osa, not so much for a real deploy05:14
*** pcaruana has joined #openstack-ansible05:15
*** shyamb has joined #openstack-ansible05:22
snadgeahh okay i can flip back to rc1 .. but i was told that was kind of crusty05:24
snadgeits only an AIO i suppose.. i'd like to deploy on stein, and im guessing its not too far from release?05:24
*** hwoarang has quit IRC05:28
*** hwoarang has joined #openstack-ansible05:28
*** markvoelker has joined #openstack-ansible05:34
*** ivve has joined #openstack-ansible05:41
jrosserMaster is the train version, not stein05:51
snadgeit is?05:51
jrosserWell it will become train in the future when the branch is created, but it is certainly not stein05:52
snadgeokay.. according to the https://releases.openstack.org/stein/05:53
snadgemost recent version is 19.0.0.0rc105:53
snadgeso there is only a beta or a release candidate version of osa for stein?05:54
jrosserCorrect05:55
jrosserDeployment projects by necessity sometimes have their release trail behind the actual Openstack service components05:56
snadgeis 19.0.0.0.0 likely to be some time away?05:56
snadgei guess i can go back to a previous release like 18.1.605:56
jrosserAs I understand it there is still one major thing, moving the placement service out of nova. This is done in osa master but not yet on the stein branch05:58
*** shyamb has quit IRC06:07
*** shyamb has joined #openstack-ansible06:08
*** markvoelker has quit IRC06:08
*** cshen has joined #openstack-ansible06:23
*** shyamb has quit IRC06:35
snadgeits failing in the same place with 19.0.0.0rc106:36
snadgeim suspecting its one of these updates i installed which broke it.. because it was working before.. even on master06:36
*** shyamb has joined #openstack-ansible06:39
*** gregoryo has joined #openstack-ansible06:41
snadgei'd take a look at it myself.. it looks pretty simple this "Create TEMP run dir" rule.. but im admittedly not very knowledgeable with ansible06:42
jrossersnadge: are you starting with a fresh install each time?06:43
snadgefresh install of ubuntu yes.. i've pulled down the osa git.. then snapshotted before running the bootstrap command etc06:44
snadgebut i installed a small handful of updates.. deleted the snapshot and created a new one06:44
snadgewhich i now regret.. but the good news i guess, is that it must have been one of those few updates i installed, which is causing the problem06:44
snadgesince it was working prior to installing those updates06:44
jrosserUbuntu updates?06:45
snadgeUbuntu 18.04.2 LTS yes06:45
snadgethe updates were: Upgrade: python3-software-properties:amd64 (0.96.24.32.7, 0.96.24.32.8), python3-distupgrade:amd64 (1:18.04.32, 1:18.04.33), ubuntu-release-upgrader-core:amd64 (1:18.04.32, 1:18.04.33), software-properties-common:amd64 (0.96.24.32.7, 0.96.24.32.8)06:46
snadgeaccording to the apt history log06:46
*** hwoarang has quit IRC06:47
*** hwoarang has joined #openstack-ansible06:47
snadgenone of those seem particularly relevant though06:47
snadgethen the bootstrap pulls in a bunch more stuff.. so its possible one of those has updated06:48
jrosserThe odd thing is that this does not happen in our CI06:49
jrosserBut now two of us have the same error in local AIO06:49
snadgethe logical part of me says to turn on a crapload of debugging with ansible and see where its tripping up?06:52
jrosserYes06:53
gregoryoDebugging Ansible has always felt very doable, if clumsy. A given task will fail, and you can find (grep) it in a playbook, then try to do that manually or something.06:54
gregoryoI'm coming in late though, not sure if that's helpful.06:54
snadgeim about to bail from work.. but its easy for me to spin up 18.04 in virtualbox or something at home.. and try again06:55
snadgei'll have a look at the boostrap-aio command and see how to turn on extra debugging06:56
jrosserevrardjp: is adding openstacksdk instead of shade acceptable here for master and stein? https://review.opendev.org/#/c/660779/06:56
*** shyamb has quit IRC06:56
*** shyamb has joined #openstack-ansible06:56
*** starborn has joined #openstack-ansible06:59
jrossersnadge: there is an ANSIBLE_DEBUG env var, as well as regular -vvvv on the playbook06:59
*** oyrogerg has joined #openstack-ansible07:01
*** gregoryo has quit IRC07:03
*** markvoelker has joined #openstack-ansible07:05
*** oyrogerg has quit IRC07:06
*** tosky has joined #openstack-ansible07:11
*** shyamb has quit IRC07:12
*** shyamb has joined #openstack-ansible07:21
evrardjpgood morning07:29
evrardjpjrosser: I will have a look07:29
evrardjpas I said, I doubt this is the right thing to do, I would do it a little above07:30
evrardjputility_distro_openstack_clients_packages contains all the things to really do actions in that container07:30
evrardjpis it's for a place to delegate actions to, then I guess it makes sense to ensure standard python have the right libs, but because it's managed by the distro packages, I would not mix both basically07:32
evrardjpthen for the shade/openstacksdk, let me check for our version07:32
jrosserI am confused, do I need a distro package? Not from pip?07:32
jrosserThe ansible modules delegated to the utility container need the right libs to be in the venv07:33
evrardjpin the venv?07:33
evrardjpdo we point to target node's venv?07:33
jrosseryes07:33
evrardjpwhere?07:34
evrardjpin that case it totally doesn't make sense to put that package there.07:34
evrardjpand yes, confirmed, for rocky we need shade07:34
jrosserHere https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/user_variables.yml#L3407:35
evrardjpand for stein and above openstacksdk07:35
jrosserWhy doesn’t it make sense to put the package there?07:35
evrardjpok, so assuming ppl uncomment both07:36
jrosserYes that is required07:36
jrosserhttps://github.com/openstack/openstack-ansible/blob/master/playbooks/utility-install.yml#L12407:37
*** markvoelker has quit IRC07:37
evrardjpyes07:37
evrardjpI am on that line, for rocky :)07:37
evrardjppoorly named thing, sorry, I was confused again07:38
evrardjpit would work just fine if both are defined07:38
evrardjpI would still prefer make that part of the client list07:39
*** tosky has quit IRC07:40
evrardjpI guess I should spin up a rocky to see if we really have the shade in the requirements_absolute_requirements.txt07:41
jrosserHmmm, that involves a grossly more complicated code oath07:41
jrosserPath07:41
evrardjp(I am just wanting to ensure u-c are respected for this, so I am still evaluating)07:42
*** tosky has joined #openstack-ansible07:42
*** aedc has joined #openstack-ansible07:42
*** Emine has joined #openstack-ansible07:43
evrardjp(I just found a bug in our utility install though... argh)07:43
evrardjptwo in fact07:43
evrardjpargh07:43
evrardjpok I guess it's not perfect anyway, let me revert my vote to a positive one07:44
evrardjpjrosser: ok, re-commented07:46
jrosserevrardjp: thankyou will change it07:47
jrosserevrardjp: i have one more query related to requirements, this i found quite surprising https://review.opendev.org/#/c/63846107:48
evrardjpI am waiting for the rest of the question :)07:49
jrosserok - so there is a release note to oslo recommending the use of a version of amqp that lies outside requirements versions07:50
evrardjpwell yes07:50
jrosserwhat do we (as OSA) do about that when faced with potential brokenness in deploys becasuse we stick to the older version07:50
evrardjpit's not because there is a new version of oslo you can bump this inside your project07:51
jrossersomeone asked in here about this very thing yesterday07:51
jrosserand i didnt know what the right thing to do was07:51
evrardjpthat's a good question07:51
evrardjpso the u-c ensure co-installability. This is why we are using those, it's because they are tested07:51
evrardjpstepping outside and here be dragons07:52
evrardjphowever, it could make sense for a user to manually override the oslo.messaging version07:52
evrardjpwe can probably in that case add a known issue and explain how to fix it07:52
evrardjpin the renos07:52
evrardjpit's also technically possible to bump constraints everywhere, to benefit from this07:55
evrardjpbut that's a lot of effort07:55
*** hamzaachi has joined #openstack-ansible07:56
evrardjpwhich I am not ready to take, but patches are welcomed I guess? :)07:56
*** tstrul has joined #openstack-ansible07:56
*** shyamb has quit IRC08:04
*** hamzaachi has quit IRC08:04
*** hamzaachi_ has joined #openstack-ansible08:04
*** hamzaachi_ has quit IRC08:06
*** hamzaachi_ has joined #openstack-ansible08:06
*** kopecmartin|off is now known as kopecmartin08:09
*** hamzaachi__ has joined #openstack-ansible08:11
*** hamzaachi_ has quit IRC08:11
*** hamzaachi__ has quit IRC08:16
*** hamzaachi__ has joined #openstack-ansible08:17
*** hamzaachi_ has joined #openstack-ansible08:23
*** hamzaachi__ has quit IRC08:27
openstackgerritJonathan Rosser proposed openstack/openstack-ansible stable/rocky: Utility container venv is missing python libs for ansible openstack modules  https://review.opendev.org/66181208:28
*** hamzaachi__ has joined #openstack-ansible08:28
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: Utility container venv is missing python libs for ansible openstack modules  https://review.opendev.org/66077908:30
*** hamzaachi_ has quit IRC08:31
*** markvoelker has joined #openstack-ansible08:34
*** hamzaachi__ has quit IRC08:51
*** hamzaachi__ has joined #openstack-ansible08:51
*** hamzaachi_ has joined #openstack-ansible08:54
*** shyamb has joined #openstack-ansible08:56
*** hamzaachi_ has quit IRC08:56
*** hamzaachi__ has quit IRC08:57
*** hamzaachi has joined #openstack-ansible08:57
*** hamzaachi_ has joined #openstack-ansible09:00
*** hamzaachi has quit IRC09:02
*** markvoelker has quit IRC09:08
*** aedc has quit IRC09:16
*** aedc has joined #openstack-ansible09:17
*** threestrands has quit IRC09:54
*** markvoelker has joined #openstack-ansible10:05
*** shyamb has quit IRC10:05
*** shyamb has joined #openstack-ansible10:05
*** electrofelix has joined #openstack-ansible10:06
noonedeadpunkmornings10:28
*** dave-mccowan has joined #openstack-ansible10:32
*** dave-mccowan has quit IRC10:37
*** markvoelker has quit IRC10:37
*** shyamb has quit IRC10:38
*** hwoarang has quit IRC10:41
*** hwoarang has joined #openstack-ansible10:42
*** hwoarang has quit IRC10:56
*** hwoarang has joined #openstack-ansible10:57
*** shyamb has joined #openstack-ansible11:03
CeeMacafternoon11:11
*** fresta has quit IRC11:18
*** kplant has joined #openstack-ansible11:18
*** fresta has joined #openstack-ansible11:20
*** aedc has quit IRC11:21
*** fresta_ has quit IRC11:21
*** mkuf_ has quit IRC11:24
*** mkuf_ has joined #openstack-ansible11:25
*** mkuf_ has quit IRC11:28
*** mkuf has joined #openstack-ansible11:28
*** cshen has quit IRC11:31
*** cshen has joined #openstack-ansible11:33
*** markvoelker has joined #openstack-ansible11:34
*** hwoarang has quit IRC11:34
openstackgerritkourosh vivan proposed openstack/openstack-ansible master: rgw keystone setup fix python interpreter  https://review.opendev.org/66100611:36
*** hwoarang has joined #openstack-ansible11:37
*** macza has joined #openstack-ansible11:38
*** redrobot has quit IRC11:39
*** macza has quit IRC11:43
*** markvoelker has quit IRC11:54
*** markvoelker has joined #openstack-ansible11:54
*** fresta has quit IRC11:56
*** fresta has joined #openstack-ansible11:56
*** aedc has joined #openstack-ansible12:04
*** ansmith has quit IRC12:05
*** redrobot has joined #openstack-ansible12:23
*** udesale has joined #openstack-ansible12:25
*** ansmith has joined #openstack-ansible12:44
*** shyamb has quit IRC12:59
openstackgerritChandan Kumar (raukadah) proposed openstack/openstack-ansible-os_tempest master: [wip][redhat] Update the list of python3 packages  https://review.opendev.org/66197913:21
chandankumarjrosser: odyssey4me I need some help on this review https://review.opendev.org/#/c/661979/1/vars/redhat.yml@30 using ternary with in a ternary13:22
*** lucashxu has joined #openstack-ansible13:24
jrosserchandankumar: if it’s not working I’d probably write a tiny local playbook with similar logic to test the behaviour13:29
chandankumarah, yes trying that13:29
*** BjoernT has joined #openstack-ansible13:34
*** BjoernT_ has joined #openstack-ansible13:39
*** BjoernT has quit IRC13:39
jrosserchandankumar why not just define _tempest_plugin_distro_packages_python2 and _tempest_plugin_distro_packages_python3 then use a single ternary to assign one of those to tempest_plugin_distro_packages13:41
jrosserand before we go too far some consideration to the package naming on suse and ubuntu is probably required13:42
*** sreejithp has joined #openstack-ansible13:43
jrosserso see if there are similar requirements so that the logic can be common13:43
*** starborn has quit IRC13:59
jrosserevrardjp: didnt we fix this? http://logs.openstack.org/79/660779/2/gate/openstack-ansible-deploy-aio_metal-opensuse-150/f6cac8a/job-output.txt.gz#_2019-05-29_11_14_53_05063513:59
openstackgerritSorin Sbarnea proposed openstack/openstack-ansible-os_tempest master: [wip][redhat] Update the list of python3 packages  https://review.opendev.org/66199414:12
*** lucashxu has quit IRC14:25
*** ivve has quit IRC14:29
*** cshen has quit IRC14:30
*** bline has joined #openstack-ansible14:32
*** hamzaachi__ has joined #openstack-ansible14:36
*** aedc has quit IRC14:37
*** hamzaachi_ has quit IRC14:38
*** chandankumar is now known as raukadah14:54
openstackgerritSorin Sbarnea proposed openstack/openstack-ansible-os_tempest master: Update the list of python3 packages  https://review.opendev.org/66199415:04
*** shyamb has joined #openstack-ansible15:07
*** aedc has joined #openstack-ansible15:08
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible stable/rocky: Bump SHAs for stable/rocky  https://review.opendev.org/65996715:08
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible stable/queens: Bump SHAs for stable/queens  https://review.opendev.org/65996915:09
*** spatel has joined #openstack-ansible15:24
*** shyamb has quit IRC15:24
spatelis stein stable enough to deploy on new production cloud?15:29
*** gyee has joined #openstack-ansible15:33
*** altlogbot_1 has quit IRC15:35
*** altlogbot_0 has joined #openstack-ansible15:35
*** irclogbot_0 has quit IRC15:36
*** irclogbot_0 has joined #openstack-ansible15:36
*** macza has joined #openstack-ansible15:37
*** hamzaachi__ has quit IRC15:37
*** tstrul has quit IRC15:47
*** hamzaachi has joined #openstack-ansible15:49
*** shyamb has joined #openstack-ansible15:56
noonedeadpunkspatel: mnaser actually already migrated to stein, but I'd recommend to wait for upgrade scripts being ready for stein as weel15:59
noonedeadpunk*well15:59
spatelThis is new installation ( I am testing AIO  on CentOS 7.5 )16:00
spatelGetting some strange error :(16:00
spatelDo you suggesting i should do rocky?16:01
*** ivve has joined #openstack-ansible16:02
noonedeadpunkYOu can give stein a try:) iirc cloudnull is using stein in prod, so it's stable enough I think16:02
noonedeadpunkprobably you should use this patch https://review.opendev.org/#/c/659966/ which will eventually become the next tag16:02
* jrosser wonders about placement & stein16:03
noonedeadpunkit's not required, but yes... good point16:03
jrossermy concern with deploying stein today will be that it comes with non extracted placement, we then get that backported and theres an immediate ugly upgrade situation for early stein installs16:04
jrosserspatel: out of interest what error are you getting?16:06
spatelgive me one min i found something...16:06
spateljrosser: This is the issue - http://paste.openstack.org/show/752257/16:10
spatelI am using CentOS 7.5 distro16:10
spatelduring that command it failed with dependencies16:10
spateli believe its my repo mixing up somewhere16:11
cjloaderare you using nspawn, lxc, or no containers?16:12
jrosserquite likley, a few things broke when 7.6 came out and needed fixing up16:12
jrosserso i expect trying to do 7.5 is going to be tricky16:12
*** hwoarang has quit IRC16:13
*** hwoarang has joined #openstack-ansible16:13
spatelThis is CentOS and AIO should setup networking right?16:14
spatelCentOS doesn't like nspawn ( because in my current cloud i had lots of issue and i remove it )16:15
spatelLet me give it a try with 7.616:15
*** shyamb has quit IRC16:20
canori01Hello, I deployed gnocchi with using osa, but it didn't generate the resource types. So whenever ceilometer passes metrics to it, it fails. Did I miss a step?16:22
*** radeks__ has joined #openstack-ansible16:27
openstackgerritLogan V proposed openstack/openstack-ansible master: Load extra variables correctly in wrapper  https://review.opendev.org/66203216:31
*** Emine has quit IRC16:31
*** hwoarang has quit IRC16:32
*** hwoarang has joined #openstack-ansible16:37
*** dave-mccowan has joined #openstack-ansible16:40
prometheanfireselinux and OSA, I'm guessing no?16:43
prometheanfireiirc there are some policies for openstack, but since OSA has difrent paths and the like...16:44
*** hamzaachi has quit IRC16:46
prometheanfirealso, how strong is basic debian support, I imagine it's good because how much ubuntu 'borrows' from debian repo wise16:46
jrosserprometheanfire: afaik its pretty solid16:48
* prometheanfire may be using it, so patches if it's not16:48
* prometheanfire shrugs16:48
jrosserthere is pretty complete coverage in the zuul jobs anyway16:49
logan-No selinux. Major wrote some policies but no one maintained them so they were removed a few cycles ago16:50
noonedeadpunkcanori01: try running ceilometer-upgrade on your ceilometer-central container/host16:50
noonedeadpunkand make sure that gnocchi resource-type list is not empty16:51
* jrosser starts to think there are some interesting gremlins in ansible 2.8.016:51
spateljrosser: FYI - 7.6 works look like i am not seeing error in that specific step16:53
*** Weifan has joined #openstack-ansible16:54
*** hwoarang has quit IRC16:54
*** hwoarang has joined #openstack-ansible16:56
*** Weifan has quit IRC16:59
*** Weifan has joined #openstack-ansible17:09
*** priteau has joined #openstack-ansible17:11
*** jcosmao has left #openstack-ansible17:12
*** aedc has quit IRC17:13
*** hwoarang has quit IRC17:15
*** hwoarang has joined #openstack-ansible17:16
openstackgerritLogan V proposed openstack/openstack-ansible master: Move hosts file management toggle to all group vars  https://review.opendev.org/66205017:25
*** priteau has quit IRC17:33
*** luksky has joined #openstack-ansible17:41
*** kopecmartin is now known as kopecmartin|off17:47
*** tosky__ has joined #openstack-ansible17:59
*** tosky has quit IRC18:00
*** tosky__ is now known as tosky18:00
kplantjrosser: i've been thinking more about routing fips through a vrouter on 1918 space and i think i've hit a wall... how would you allocate FIPs from one cider (public) but have the router interface have an address in 1918?18:02
*** electrofelix has quit IRC18:03
kplantcidr* ugh18:03
kplanti need some cider18:03
openstackgerritSorin Sbarnea proposed openstack/openstack-ansible-os_tempest master: Update the list of python3 packages  https://review.opendev.org/66199418:03
*** priteau has joined #openstack-ansible18:03
jrosserWell isn’t it more that the computers all have a bgp speaker with an rfc1918, and so does your next hop hardware18:04
jrosserAnd bgp propagates /32 routes for the fip from the computers to the hardware router18:04
kplantyes, that part i'm sold on18:05
jrosserOk....18:05
kplantwhat i mean is, when a user of a project creates their vrouter.. it will have an interface with a 1918 address for the external network18:05
kplanthow would they also be able to allocate floating IPs on a different network?18:05
jrosserI think that’s ok for the vrouter, because it is the legitimate ip of the next hop for the fip18:06
jrosserThe host routes from the fip to the hardware router via its rfc1918 address18:07
jrosserBut I also would like to see a worked example of this :)18:07
kplantyeah i have no doubt the routing will work, i guess what i'm more unsure about is neutron trying to not do something it thinks isn't possible18:07
kplanti'm not getting beyond how you're supposed to ensure the vrouter gets an interface with 1918 space and the FIPs are not 191818:08
jrosserYes I understand what you are saying there - there was some stuff about the dvr gateway up which is probably totally relevant here18:08
jrosserUp/ip18:09
kplantyeah maybe with neutron-bgp and dvr there's some traits or additional metadata for this18:09
kplantit sounds like to me there needs to be something that says take router interface addresses from [here] and fips from [overhere]18:10
* jrosser just travelling, can’t google so much :)18:10
kplantah18:10
jrosserI’m wondering in this case if there is a concept of router interface address18:12
jrosserBecause it’s the same, on a given node for all the fip18:12
kplanti'm thinking more on the project level, so a project needs to stitch their tenant network with the provider net18:14
kplantso they need their own router with at least a pair of interfaces18:14
spatelkplant: interesting conversation..18:21
kplanti'm trying to save the IPs!18:21
kplantheh18:21
spatelwhen i was testing DVR while ago i had same issue...18:21
kplantlots of nodes with lots of projects and DVR explodes this18:21
spatelin DVR every vrouter need Public IP ( if you have 300 compute nodes then you will have 300 vrouter with 300 public ip)18:22
kplantyep18:22
kplantthat's why i'm trying to chuck them on 1918 space and route through them18:23
spatelThere is a way to create service IP on DVR which doesn't need public IP on vRouter but i don't know how that work with floating IP ( you have same question )18:23
spatelI would contact James D. he is very good at DVR stuff...18:24
spatelFinally i decided not to use DVR. currently my cloud using VLAN provider18:24
kplantyou're just putting the VMs right on the provider net?18:25
openstackgerritMerged x/monitorstack master: Fix docs building  https://review.opendev.org/66163318:25
openstackgerritMerged x/monitorstack master: Update zuul jobs  https://review.opendev.org/66161418:26
spatelYes, my VMs directly attacked to my physical infrastructure and VLANs18:26
spatelattached*18:26
kplantaren't you afraid of broadcast storms?18:26
spatelI haven't seen any yet.. but you can create multiple VLANs to control broadcast18:27
spatelI have 300 compute nodes in cluster running 800 VMs and so far so good...18:27
kplanti don't trust my users that much :>18:27
spatelReason i pick VLANs because i need performance18:28
kplanta year or two ago they plopped a PA appliance on the network with a few interfaces all bridging the same domain18:28
kplantit was good night18:28
spatelNATing is not fun when comes to performance.. ( PPS rate 018:28
spatelNATing is not fun when comes to performance.. ( PPS rate )18:28
spatellol18:29
kplantyeah that's for sure, especially when it's PAT18:29
spatelYup! are application is based on UDP and need very low latency18:30
kplantvoice?18:30
spatelMy whole cloud running on SR-IOV :)18:30
spatelYes voice 90%18:30
kplantvoice is the worst18:30
kplanttiny frames18:30
spatelyup.. small packet size cause lots of overhead on CPU..18:30
kplantoh yeah... we have a bunch of circuits where we offer L2 tunnels over DOCSIS18:31
spatelAfter SR-IOV i am happy ( Now building next cloud on DPDK )18:31
kplantand the poor CMs can't deal with the <128b frames of voice18:31
kplantthey just start dropping frames18:31
spateli had same issue ( tap interface are worst when comes to PPS rate )18:32
spatelFrom 30000ft clouds looks good but only cloud operator knows what is going inside cloud :)18:33
kplantthey look great to the end user18:33
kplantthey don't have to know anything18:33
spatelWhy don't you try opencontail ?18:33
*** BjoernT_ has quit IRC18:33
kplanttungsten is on the radar18:34
kplantmy company has a great relationship with juniper18:34
spatelI would go to tungsten instead of DVR18:34
spatelhttp://www.jimmdenton.com/contrail-osa/18:35
*** priteau has quit IRC18:35
kplanti need to translate that to kolla :x18:35
spatelOSA and Kolla are pretty much same..18:36
spatelDo you like Kolla or have something historical ?18:36
kplantit's all greenfield right now18:36
kplanti'm totally leavnig behind what we have18:37
kplantso yeah, kolla-ansible is probably my personal favorite18:37
spatelyup sounds good18:37
spateldocker vs lxc18:38
kplanti don't really like docker, i feel it's kind of bloated18:39
kplantbut k-a is the only deployer i got to work on the first try18:39
kplantit's just stupid simple18:39
spatelsame here, (Love LXC) docker is good behind kubernetes18:40
dmsimardprometheanfire: fwiw RDO ships an openstack-selinux package derived from https://github.com/redhat-openstack/openstack-selinux -- packaging is https://github.com/rdo-packages/openstack-selinux-distgit18:43
kplantspatel: are you provisioning the vlans with ml2?18:52
spatelyes ml2 with linuxbridge18:53
*** BjoernT has joined #openstack-ansible18:54
openstackgerritBjoern Teipel proposed openstack/openstack-ansible-os_keystone master: Prevent autoremoval of packages on bare metal  https://review.opendev.org/66133318:59
*** BjoernT_ has joined #openstack-ansible18:59
*** BjoernT has quit IRC18:59
CeeMackplant: spatel: I've been around in circles so many times trying to work out how best to deploy. I've gone OVS with support for DVR but legacy router as default for tenants to leave my options open. My cloud is starting off small but will likely scale fast so I need a midterm plan. Tungsten is one option (we like juniper here too). OVN is another option, especially since the neutron team seems to be looking at ways19:01
CeeMacof bringing OVN into reference architecture for distributed networking.19:01
CeeMackplant: if I didn't have a deadline I'd definitely try the RFC 1918 router IP proposal19:02
*** tuxjohnson has joined #openstack-ansible19:05
*** tuxjohnson has left #openstack-ansible19:05
spatelhttps://lists.gt.net/openstack/operators/5208119:13
spatelkplant: Do you really need Distributed solution?19:14
kplanti don't _need_ a distributed solution no19:14
kplantbut moving all of the traffic through the controllers seems like a giant waste to me19:14
spatelkplant: You can use hardware base gateway also like Cisco ASR1K19:15
spatelif you can spend money ( but again they do have limitation to handle NAT tables etc.)19:15
spatelCisco ASR1k support neutron and spin up L3 VRF on hardware19:17
kplantwe're actually using NCS55A1's for something similar on another project19:18
spatelkplant: or you can try these hardware - https://cumulusnetworks.com/networking-solutions/openstack/19:18
CeeMacI think you can do similar with Juniper MX and QFX19:19
spatelDoes NCS55A1 support neutron ?19:19
*** joshualyle has joined #openstack-ansible19:21
CeeMachttps://www.juniper.net/documentation/en_US/release-independent/junos/topics/concept/openstack-neutron-plugin-overview.html19:21
*** joshualyle has quit IRC19:25
*** joshualyle has joined #openstack-ansible19:33
*** joshualyle has quit IRC19:37
*** kplant has quit IRC19:56
*** joshualyle has joined #openstack-ansible20:04
*** joshualyle has quit IRC20:05
spatelFinally my AIO deployment completed - DISTRIB_CODENAME="Stein"20:10
*** lathap has joined #openstack-ansible20:24
*** spatel has quit IRC20:26
*** ansmith has quit IRC20:43
*** Weifan has quit IRC20:53
*** Weifan has joined #openstack-ansible20:54
*** Weifan has quit IRC20:58
*** radeks__ has quit IRC21:02
*** priteau has joined #openstack-ansible21:21
*** pcaruana has quit IRC21:23
*** priteau has quit IRC21:26
*** sreejithp has quit IRC21:28
*** hwoarang has quit IRC21:35
*** hwoarang has joined #openstack-ansible21:35
*** priteau has joined #openstack-ansible21:38
*** udesale has quit IRC21:43
*** tosky has quit IRC21:49
*** BjoernT_ is now known as BjoernT21:51
*** priteau has quit IRC21:51
*** kplant has joined #openstack-ansible22:03
*** joshualyle has joined #openstack-ansible22:06
*** joshualyle has quit IRC22:11
*** ianychoi has quit IRC22:32
*** ianychoi has joined #openstack-ansible22:33
openstackgerritAntony Messerli proposed openstack/openstack-ansible-galera_server stable/pike: Update percona-release package  https://review.opendev.org/66210722:34
*** hamzaachi has joined #openstack-ansible22:42
*** BjoernT has quit IRC22:43
openstackgerritAntony Messerli proposed openstack/openstack-ansible-tests stable/pike: Fix clone list for opendev changes  https://review.opendev.org/66210822:53
*** hwoarang has quit IRC22:53
*** hwoarang has joined #openstack-ansible22:55
*** hamzaachi has quit IRC22:56
*** hamzaachi has joined #openstack-ansible22:56
*** jonher_ has joined #openstack-ansible22:57
*** lathap has quit IRC22:57
openstackgerritMerged openstack/openstack-ansible master: Utility container venv is missing python libs for ansible openstack modules  https://review.opendev.org/66077922:59
*** jonher has quit IRC23:00
*** jonher_ is now known as jonher23:00
*** jonher has quit IRC23:00
*** Weifan has joined #openstack-ansible23:04
*** mcarden has joined #openstack-ansible23:04
*** Weifan has quit IRC23:04
*** Weifan has joined #openstack-ansible23:05
*** Weifan has quit IRC23:05
*** Weifan has joined #openstack-ansible23:05
*** macza has quit IRC23:09
*** hamzaachi has quit IRC23:10
*** hamzaachi has joined #openstack-ansible23:10
*** Weifan has quit IRC23:10
*** Weifan has joined #openstack-ansible23:11
*** Weifan has quit IRC23:12
*** Weifan has joined #openstack-ansible23:12
*** luksky has quit IRC23:13
*** hwoarang has quit IRC23:30
*** hwoarang has joined #openstack-ansible23:31
*** hwoarang has quit IRC23:40
*** hwoarang has joined #openstack-ansible23:40
*** hamzaachi has quit IRC23:48

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!