Tuesday, 2020-06-23

*** cshen has joined #openstack-ansible00:12
*** cshen has quit IRC00:17
*** gyee has quit IRC01:23
*** stingrayza has quit IRC01:51
*** stingrayza has joined #openstack-ansible01:53
*** jcath has joined #openstack-ansible01:57
jcathhello, friends. is it possible to limit containers' ip address range every specific host? let's say I want host 172.16.0.1 with containers' ip range 172.16.0.10-172.16.0.3001:59
*** cshen has joined #openstack-ansible02:13
*** cshen has quit IRC02:17
*** markvoelker has joined #openstack-ansible03:06
*** markvoelker has quit IRC03:11
*** cshen has joined #openstack-ansible03:15
*** cshen has quit IRC03:19
*** jcath has quit IRC03:26
*** jcath has joined #openstack-ansible03:49
*** rh-jelabarre has quit IRC04:16
*** evrardjp has quit IRC04:33
*** evrardjp has joined #openstack-ansible04:33
*** udesale has joined #openstack-ansible04:41
*** markvoelker has joined #openstack-ansible04:44
*** markvoelker has quit IRC04:49
*** markvoelker has joined #openstack-ansible05:04
*** markvoelker has quit IRC05:09
*** cshen has joined #openstack-ansible05:15
*** cshen has quit IRC05:19
jrosserjcath: can you explain why? each host in a different L3 subnet perhaps?05:34
jcathjrosser: i have 3 hosts, as I said the situation ,both nova-api and nova-compute on the same host, it does not work, with same nova.conf. so I put nova-api in a lxc container, and retain other on metal. but for easy management, I want the container take an ip just follow the physical hosts, (i.e. hosts is 172.16.0.1,.2,.3, I want the container take 172.16.0.4)05:38
jrosserok, i'm not sure there is a way to do that05:39
jrosserthe dynamic inventory generates the container ip addresses at random from the range you give in openstack_user_config05:41
*** cshen has joined #openstack-ansible05:41
jcathyes, i understand. may I change the address after apply setup-hosts.yml? in openstack_hostnames_ips.yml05:42
jrosserthe container is already created at that point so the IP has get used in all sorts of places05:43
jrosserit might work, or you might need to unpick a bunch of stuff05:43
jrosserit is possible to define the inventory entirely manually also05:43
jrosserthough i'm not sure thats a very well trodden path05:43
jrosserjcath: https://evrard.me/custom-inventories-with-openstack-ansible/05:45
jcaththanks:)05:45
*** cshen has quit IRC05:46
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-plugins master: Remove physical_host_addrs parameter from ssh plugin  https://review.opendev.org/73722005:50
jrosserjcath: if you really want nova compute and nova api on the same host it would be better to work on a patch that creates two config files05:51
*** mgariepy has quit IRC05:52
jcathyeah, i agree. just now I ran another round for testing, I definitely set the nova-api with is_metal, but the system still generate a lxc container ... maybe I should remove  openstack_hostnames_ips.yml & openstack_inventory.json, then rerun the playbooks05:54
*** mgariepy has joined #openstack-ansible06:10
*** pcaruana has joined #openstack-ansible06:20
*** mgariepy has quit IRC06:22
*** mgariepy has joined #openstack-ansible06:24
*** rpittau|afk is now known as rpittau06:34
*** miloa has joined #openstack-ansible06:39
*** cshen has joined #openstack-ansible06:59
*** markvoelker has joined #openstack-ansible07:05
*** jbadiapa has joined #openstack-ansible07:06
*** markvoelker has quit IRC07:11
*** tosky has joined #openstack-ansible07:35
*** markvoelker has joined #openstack-ansible07:49
*** markvoelker has quit IRC07:54
*** dpaclt has joined #openstack-ansible07:56
dpacltHello All , i created a trove instance and its healthy and can telnet to it ... but the healthy status never gets completed ... Its stable/ussuri07:56
jrosserdpaclt: ussuri is still a release candidate so you are doing serious beta testing there08:08
jrosserand i think there is some network setup possibly needed to make trove work, br-dbaas and maybe a provider network08:08
dpaclthave created br-dbaas and a provider network too ... i think better to move to stable/train then08:30
jrosserif everything is otherwise working then you could probably stick where you are you are to debug it08:33
dpacltDb instance is also working i can telnet to it without any issues.. only hiccup is the healthy status never get completed08:34
jrosserright - so something is wrong with the trove service getting that status08:35
dpacltoh ok08:48
jrosseras far as i know trove communicates with the db instances using rabbitmq over the dbaas network08:49
jrosserbut i've never deployed trove, so i can't give you specific debug tips08:49
dpacltoh ok np ..Thanks jrosser08:57
*** owalsh has quit IRC09:08
*** janno has quit IRC09:08
*** owalsh_ has joined #openstack-ansible09:08
*** janno has joined #openstack-ansible09:10
*** sshnaidm|afk is now known as sshnaidm|ruck09:11
jrossernoonedeadpunk: i just run https://review.opendev.org/#/c/737220 in a multinode lab environment - same as the AIO it gives 2x speedup for re-running playbooks/lxc-container-create.yml09:19
noonedeadpunkwe just need to make it working then... in terms of CI stuff09:21
noonedeadpunkyeah, the way we iterate over inventory can really slow down execution...09:22
jrossertbh i am really not understanding the test case that is failing09:24
jrosserit's all to do with this https://github.com/openstack/openstack-ansible-plugins/blob/master/tests/inventory#L8-L1209:25
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-openstack_hosts master: Fix CentOS functional test  https://review.opendev.org/73733109:25
noonedeadpunkhaving group twice is really weird09:34
noonedeadpunkhowever bug referenced there has some sence, but not sure it's valid nowadays09:34
jrosserthe thing it fails on is deleting the non-existing container before creating it, i think https://zuul.opendev.org/t/openstack/build/b385be87635747b4bbfde5e72b67da7d/log/job-output.txt#295909:42
jrosserand i think it's trying to connect directly rather than with localhost09:43
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/ansible-role-systemd_networkd master: Add CentOS 8 support  https://review.opendev.org/73712209:44
*** udesale_ has joined #openstack-ansible09:46
noonedeadpunkwondering what pha var reflects... Like we don't return it or use in any way in code... But it somehow affects execution process (strategy)09:48
noonedeadpunkI mean the dropepd one from https://review.opendev.org/#/c/737220/9/strategy/linear.py09:49
*** udesale has quit IRC09:49
noonedeadpunkI guess it's used by strategy, as we're just overriding _queue_task...09:49
*** markvoelker has joined #openstack-ansible09:50
noonedeadpunkbut can't find anywhere in https://github.com/ansible/ansible/blob/v2.9.9/lib/ansible/plugins/strategy/__init__.py09:51
noonedeadpunkso the idea was to connect always by IP if I got the idea.09:55
*** markvoelker has quit IRC09:55
noonedeadpunkand we reverting back to usage of hostnames?09:57
*** jcath has quit IRC09:58
*** rohit02 has joined #openstack-ansible10:04
*** ut2k3 has joined #openstack-ansible10:07
ut2k3Hi guys. Whats the best-practice to retry "deploy-config-changes.yml" when some hosts failed on the run? There is no .retry file as well running the command again skips all stuff.10:07
ut2k3Background is: I am about to do a major upgrade.10:09
*** cshen has quit IRC10:10
*** dpaclt has quit IRC10:11
*** rpittau is now known as rpittau|bbl10:12
ut2k3Ok never mind... had too less coffee.10:15
rohit02Hi team,openstack-ansible ussuri can someone share the docs/steps to integrate external ceph10:28
*** jhesketh has quit IRC10:36
*** jhesketh has joined #openstack-ansible10:37
admin0ut2k3, u can use limits to run playbooks only for that hosts which fail10:41
ut2k3Thanks. Just a last quick question. How can I add a host to the lxc_hosts group? I found only a away to remove with inventory manage but not to add. Background is that one host that should be inside that group is missing there.10:50
*** cshen has joined #openstack-ansible10:56
jrossernoonedeadpunk: yes you are right it is turning it to an IP with the old code http://paste.openstack.org/show/795092/11:24
jrosserthat is with my changes (top), without (bottom)11:24
jrosserthe alternative is we look more at the current code to find exactly which bit is slow11:27
noonedeadpunkjrosser: don't see much difference. and do you have `infra1` defined in /etc/hosts file?11:32
jrosserwell it's just the extra two lines of debug11:33
jrosserin this case infra1 resolves in DNS11:33
jrosserbut thats i guess quite unusual11:34
noonedeadpunkwhat bothers me, is how do we connect to physical_host? so yeah, if we don't have it in dns (which is lamost always true I guess?) and not in hosts file, won't we end up in being unable to connect...11:35
* noonedeadpunk needs to play with it...11:35
noonedeadpunkporbably ansible does resolve things even without our overrides...11:35
noonedeadpunkbtw was trying to reproduce https://34e9586208b3d2d1b836-40001c60cc2cc6a7bddcc7547f0d5486.ssl.cf2.rackcdn.com/689629/69/check/openstack-ansible-deploy-aio_distro_metal-centos-8/510e666/logs/ara-report/result/51d45044-905a-49b5-bdd1-015a247b9f35/ but I can't(((11:36
*** jawad_axd has joined #openstack-ansible11:43
*** markvoelker has joined #openstack-ansible11:52
*** markvoelker has quit IRC11:57
*** rh-jelabarre has joined #openstack-ansible12:04
*** rpittau|bbl is now known as rpittau12:14
*** cshen has quit IRC12:32
openstackgerritMerged openstack/openstack-ansible-ops master: Stop to use the __future__ module.  https://review.opendev.org/73288212:37
*** cshen has joined #openstack-ansible13:08
*** cshen has quit IRC13:13
*** cshen has joined #openstack-ansible13:18
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-openstack_hosts master: Fix CentOS functional test  https://review.opendev.org/73733113:37
*** ut2k3 has quit IRC13:45
*** ut2k3 has joined #openstack-ansible13:47
*** spatel has joined #openstack-ansible13:51
*** sshnaidm|ruck is now known as sshnaidm|afk13:51
*** markvoelker has joined #openstack-ansible13:53
*** rohit02 has quit IRC13:55
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-plugins master: Optimise linear strategy access to physical host variables  https://review.opendev.org/73754313:56
*** markvoelker has quit IRC13:57
*** spatel has quit IRC14:05
*** aedc_ has quit IRC14:10
*** ut2k3 has quit IRC14:11
*** ut2k3 has joined #openstack-ansible14:11
*** ut2k3 has quit IRC14:12
jannowhen running "openstack-ansible os-nova-install.yml" the venv always gets rebuild because requirements.txt changes between compute hosts and api containers in Train because of nova_novnc_pip_packages14:12
jannois this a known issue?14:12
*** sshnaidm|afk is now known as sshnaidm|ruck14:39
*** markvoelker has joined #openstack-ansible14:39
openstackgerritMerged openstack/openstack-ansible-memcached_server stable/stein: Reduce verbosity level when debug is true  https://review.opendev.org/73618114:41
noonedeadpunkjanno: I guess it's not...14:42
noonedeadpunkjrosser: btw, you said you used roles outside of osa. but how did you handle config_template plugin? I don't see really handy way to get it installed, which is pretty upsetting14:43
jrosserlet me look14:43
*** markvoelker has quit IRC14:44
*** jawad_axd has quit IRC14:51
jrossernoonedeadpunk: it looks like we just copied it wholesale into our repo with playbooks in14:57
jrosserwhich is sad14:57
noonedeadpunkyeah:(14:58
noonedeadpunkI'm not sure that action plugin can be shipped as collection....14:58
*** cshen has quit IRC14:59
jrosser"Collections are a distribution format for Ansible content that can include playbooks, roles, modules, and plugins" ?15:02
noonedeadpunkthen it's probably top 1 candidate to become a collection... but not sure how we will migrate... and we need CI spec at first I think15:06
*** cshen has joined #openstack-ansible15:06
*** owalsh_ is now known as owalsh15:07
noonedeadpunkyeah, you're absolutely right https://docs.ansible.com/ansible/devel/dev_guide/developing_collections.html#plugins-directory15:10
*** cshen has quit IRC15:11
jrosserideally we could use the same stuff the openstack modules collection is using15:13
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-plugins master: Optimise linear strategy access to physical host variables  https://review.opendev.org/73754315:23
*** spatel has joined #openstack-ansible15:24
jrossernoonedeadpunk: ^ i narrowed it down to just one line of code causing the slowing down15:24
noonedeadpunkwow15:24
spatelis there an easy way to remove bulk host from aggregate host group?   openstack aggregate remove host foo comp1,comp2,comp3  something like that?15:25
jrosserthe one i've taken out returns *ALL* of the vars for every host15:25
noonedeadpunkYes, I was just looking through it and was about to ask if that's the whle problem15:25
jrosserbut still tests fail, i've just taken it off the stack of my other patches to test it in isolation15:25
noonedeadpunkyeah, no sense in getting host variables among all variables when we iterate over host...15:26
jrosserit seems to do the right thing, when i run here with -vvvv i still see it determining the IP for the physical host, so thats something at least15:27
spatelnoonedeadpunk: jrosser how are you folks? let me know if you need my help in any area for testing etc..15:29
jrossertbh having to catch up on day job for a bit15:29
jrossersolid OSA stuff for a couple of weeks but i'm behind on other stuff now15:30
spatelI am also got little busy on my job stuff but soon will get free15:31
* noonedeadpunk wondring if CI works at all for the repo15:31
noonedeadpunkspatel: we got centos8 source metal jobs passing.15:32
noonedeadpunkI'm going to investigate what's wrong with distro ones15:32
noonedeadpunkand I guess lxc is also pretty close15:32
spatelphew!!! that was big win.. because i was seeing it failing on each checkout15:32
spatelI am waiting for centOS8 to get out soon :)15:33
jrosserthe focal patch seems to refuse to merge15:33
noonedeadpunkyeah(15:33
spatelthere must be some code cleaning up we can deal with them on our way right?15:33
jrossertrouble is a lot of the cleaning up is centos-7 related, sort of residual special cases for lxc2 and stuff15:34
spatelIn August going to build new openstack cloud (100 nodes) so looking forward to deploy on centos815:34
noonedeadpunkbtw we can join it with suse cleanup stuff15:34
noonedeadpunkbut i'd first backport all and finall release U first15:35
jrosseronce we merge/backport centos-8 to ussuri we can start cleanup on master15:35
spatelIf we have stable centOS8 then i am sure people will go with CentOS8 instead using centOS715:35
jrosserwe need a release that supports both15:35
noonedeadpunk(and merge https://review.opendev.org/737543 or smth regarding the topic)15:35
jrosserotherwise upgrades are horrific15:35
spatel+115:35
jrosseryeah i was hoping this linear strategy thing will help in CI jobs15:36
jrosserbut it doesnt seem to have so bit an effect, but it's really really hard to tell15:37
noonedeadpunkkinda if you see 50% speedup in sandbox, that's pretty good result to try out15:38
noonedeadpunkas eventually in prod envs roles are really slow15:38
noonedeadpunkand this looks smth we can get profit pretty fast15:38
jrosseryeah it's absolutely needed for prod stuff15:39
jrosserpoint upgrades will get a significant boost with lots of "no change" tasks15:40
*** cshen has joined #openstack-ansible15:40
jrosseri wonder if this single thing as been so huge that it has made any other attempt we have done to optimise be hidden15:40
jrosserthis would always dominate, perhaps thats why everything else seems never to make any difference15:41
noonedeadpunkmight be. and eventually it kinda covers what mnaser has found with amount of variables15:41
jrosseri have tried putting ansibie local_tmp and remote_tmp in /dev/shm, all sorts of things to avoid disk IO15:42
jrosserbut never anything makes it go faster15:42
noonedeadpunkyeah, because we had blocker even before connection15:43
noonedeadpunk*we have it eventually15:43
*** cshen has quit IRC15:44
*** gyee has joined #openstack-ansible15:59
*** rpittau is now known as rpittau|afk16:00
noonedeadpunk#startmeeting openstack_ansible_meeting16:00
openstackMeeting started Tue Jun 23 16:00:32 2020 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:00
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:00
noonedeadpunk#topic office hours16:00
*** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)"16:00
jrossero/ hello16:00
noonedeadpunk\o/16:00
noonedeadpunkwe had pretty huge progress last week thanks to jrosser, mgariepy and spatel :)16:01
noonedeadpunkso focal is ready (but don't want to merge) and centos8 is passing metal source scenario16:01
jrosserwe were really on a roll last week16:02
noonedeadpunkand it's really pretty close16:02
noonedeadpunkyeah16:02
noonedeadpunkbut we have train failing because of suse:(16:02
noonedeadpunknot sure if it's going to pass all in all, orwe should set it to non-voting?16:02
jrossertbh i think we have so much else to do that it should go non-voting16:03
noonedeadpunkwe eventually have lot's of stuff that ready for merging but fails on gates16:03
jrosseri've noticed a lot of failures on buster16:03
noonedeadpunkyeah, in lxc16:04
spatelnoonedeadpunk: thank you for help me out with process, always happy to help you folks :)16:04
jrosserspatel: it is really great to see patches from you!16:04
noonedeadpunkbut it feels it's something we should have fixed16:04
noonedeadpunk+216:04
noonedeadpunkalso we have copied adjutant role from elastx https://opendev.org/openstack/openstack-ansible-os_adjutant16:05
noonedeadpunkbut had really no time for it's integration16:05
noonedeadpunkand patching with all stuf we have16:05
jrosserso i think we should try to make a decision on this strategy plugin thing16:07
jrosserit still fails tests when just tested as a single line change16:07
noonedeadpunkI think we totally need to get it somehow working16:07
noonedeadpunkI mean that maybe we have broken tests at the moment16:07
jrosseri still don't really understand what the test is doing which fails16:07
jrosserdropping the paramiko fallback is also definately giving another 20% faster16:08
noonedeadpunkit didn't differ for me, but now wwe know why)16:08
noonedeadpunkbottleneck was before connection...16:09
noonedeadpunkactually we probably need to make paramiko configurable? as not sure as everyone use ssh keys16:09
noonedeadpunk737543 looks really pretty fair to me16:10
noonedeadpunkbut eventually I don't really like iteration over all invetory hosts...16:12
jrosserdoes it do that?16:13
noonedeadpunkno, it's what we have now and can get rid of with https://review.opendev.org/#/c/737220/916:13
noonedeadpunkI really can't find why we need pha16:14
noonedeadpunkand what use it...16:14
jrosseri was thinking it was like a reference16:14
jrosserso we add a thing to the object in the loop16:15
jrosserand pha is a reference to the object16:15
noonedeadpunkyou mean LINEAR.display.verbose ?16:16
noonedeadpunkI'm not sure it's smth functional at all....16:16
jrossersorry have to go16:17
jrosserteatime16:17
noonedeadpunkyeah, sure16:17
noonedeadpunklooking at https://github.com/ansible/ansible/blob/devel/lib/ansible/plugins/strategy/__init__.py#L313 I have even less understanding what and why we're doing these loops...16:23
noonedeadpunklol16:23
noonedeadpunkI guess I  know what's wrong16:23
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible-plugins/src/branch/master/strategy/linear.py#L212 this is probably supposed to be pha16:25
noonedeadpunkthan it makes sense16:25
*** dave-mccowan has joined #openstack-ansible16:27
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-plugins master: Optimise linear strategy access to physical host variables  https://review.opendev.org/73754316:28
noonedeadpunkand problem which was "resolved" with the patch introduced that looks pretty common :p https://opendev.org/openstack/openstack-ansible-plugins/commit/94c93e533f533206611ed70934b5819d7a31828916:34
*** markvoelker has joined #openstack-ansible16:40
*** markvoelker has quit IRC16:45
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-plugins master: Optimise linear strategy access to physical host variables  https://review.opendev.org/73754316:45
noonedeadpunkmy judgement was wrong... so I still nee no impact from this cycle except logging things. In the meanwhile old code (which it replaced) was really altering behaviour16:50
noonedeadpunk#endmeeting16:51
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://bit.ly/2SAcGAn"16:51
openstackMeeting ended Tue Jun 23 16:51:33 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:51
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-06-23-16.00.html16:51
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-06-23-16.00.txt16:51
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-06-23-16.00.log.html16:51
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-plugins master: DNM  https://review.opendev.org/73758316:56
*** udesale_ has quit IRC17:05
*** spatel has quit IRC17:08
*** spatel has joined #openstack-ansible17:09
*** sshnaidm|ruck is now known as sshnaidm|afk17:24
*** mgariepy has quit IRC17:28
*** miloa has quit IRC17:31
*** mmethot has quit IRC17:36
*** cshen has joined #openstack-ansible17:41
*** mgariepy has joined #openstack-ansible17:41
*** cshen has quit IRC17:45
jrossernoonedeadpunk: i think i agree that the current code that makes an assignment to 'pha' has no side effect at all17:51
noonedeadpunkbut it's change makes tests fail:(17:52
noonedeadpunkargh17:52
noonedeadpunkjust dnm passed CI https://review.opendev.org/#/c/737583/17:52
jrosserhrrm17:52
noonedeadpunkI just don't see smth17:53
jrosseroohhhhhhhh17:53
jrosserthis line https://github.com/openstack/openstack-ansible-plugins/blob/master/strategy/linear.py#L12817:54
jrossercreates a new task var that is an empty dict17:54
noonedeadpunkoh17:54
noonedeadpunkand pha is the same object17:54
jrosserand i add a print here https://github.com/openstack/openstack-ansible-plugins/blob/master/strategy/linear.py#L21017:54
noonedeadpunkyeah17:54
*** markvoelker has joined #openstack-ansible17:54
jrosserwhich shows it then populated with {'infra1': '10.31.128.12'} in task_vars['physical_host_addrs']17:55
noonedeadpunkyeah, it's like python object symlinking lol17:55
jrosserso question is then, what on earth is the test case that fails trying to check17:56
noonedeadpunkso, if you're printing - what's the difference  between self._variable_manager.get_vars(host=ph) and  ph.get_vars() ?17:57
jrosserfirst one prints sooooooo much stuff it scrolls till i CTRL-C it17:58
jrosserlike all the vars for everything, host/group blah blah i think17:58
mgariepylol17:58
jrossersecond one is printing this http://paste.openstack.org/show/795114/17:59
noonedeadpunkjust seems we miss smth in the second case... but not sure what and if we really need it...17:59
*** markvoelker has quit IRC17:59
jrosseri guess the only was is to run the functional test locally and see whats happening17:59
jrosserbut yes i really don't know what it's doing17:59
* jrosser end of day now18:00
*** cshen has joined #openstack-ansible18:01
*** cshen has quit IRC18:06
*** mmethot has joined #openstack-ansible18:10
*** cshen has joined #openstack-ansible18:10
*** markvoelker has joined #openstack-ansible18:11
*** markvoelker has quit IRC18:15
*** markvoelker has joined #openstack-ansible18:21
*** spatel has quit IRC18:29
*** markvoelker has quit IRC18:31
*** itandops has joined #openstack-ansible18:42
*** jawad_axd has joined #openstack-ansible18:50
*** cshen has quit IRC18:57
*** ebbex has quit IRC19:00
*** ebbex has joined #openstack-ansible19:02
*** cshen has joined #openstack-ansible19:03
*** cshen has quit IRC19:08
*** spatel has joined #openstack-ansible19:10
spateljamesdenton: Hey! i have question related OVN if you around19:11
*** ebbex has quit IRC19:16
*** ebbex has joined #openstack-ansible19:17
*** itandops has quit IRC19:29
*** itandops has joined #openstack-ansible19:29
jamesdentonspatel I'll try19:36
spateljamesdenton: sorry i was away, now i am back.19:48
spatelJust hearing lots of buzz around OVN so trying to understand what advantage i will get over what we have currently?19:48
jamesdentondepends on what you're doing19:50
jamesdentonthe advantage, as i understand it, is deprecation of python agents in favor of built-in functionality (built-in to OVS itself). There is still a lack of parity in some cases19:50
jamesdentonML2/OVS will eventually be deprecated19:50
spateloh!19:59
spatelYou are saying ML2/LinuxBridge also eventually get deprecate?20:00
jamesdentonyes? i think that will fall out of main tree at some point, but remain a config option (separate repo)20:01
spatelReason i am asking to understand where we are going from here?  is OVN going to be a thing soon?20:01
jamesdentonOVN has been around for a few years now. Not sure where it's used in production, but i imagine it is. It's deployable with OSA, too, if you want to live on the edge.20:02
spatelso community trying to make OVN de facto deployment of openstack in coming future.20:02
jamesdentonOVN may become the default devstack driver, soon, too.20:02
jamesdentonyes, basically20:02
spatelhmm! i am just trying to convince myself to deploy OVN on my production.20:04
spatelif its very complicated then may wait until everyone start deploying20:04
jamesdentoni would wait20:04
jamesdentonare you using neutron routers?20:05
spatel+120:05
spatelNo i am not using any software router. I am using all physical network20:05
spatelBecause of performance issue.20:05
spatellast week we hot 140Gbps / 30million packet per second on our core router, i don't think neutron router can handle that rate20:06
spatels/hot/hit/20:06
*** markvoelker has joined #openstack-ansible20:25
*** markvoelker has quit IRC20:29
spateljamesdenton: i am getting this error and trying to play with policy.json  - {"message": "(rule:update_port and rule:update_port:binding:profile) is disallowed by policy"20:34
jamesdentonif you're not using L3 agent then i wouldn't push to insert OVN any time soon20:34
spatelupdate_port policy is already "update_port": "rule:admin_or_owner or rule:context_is_advsvc"20:34
spatel+120:35
jamesdentonwhat are you trying to do?20:35
spatelterraform to build sriov instances20:35
*** also_stingrayza has joined #openstack-ansible20:35
spatellook like terraform trying to touch some api of neutron which is not allowing to do20:36
spatelI am seeing this error on "queens" only20:36
jamesdentonhmm20:36
spatelI have stain which is working great20:37
jamesdentonthat is weird. same policy in both places?20:37
*** stingrayza has quit IRC20:37
spatelyes that is odd20:37
spatelcurrently i have ->  "update_port:binding:profile": "rule:admin_only"20:38
spatelthinking to change it "rule:admin_or_owner"20:38
spatelwe don't need to restart anything right after updating policy.json right?20:40
jamesdentoncan't recall20:40
spatellet me give it a try..20:40
spateljamesdenton: look like it works, not getting any error20:48
spatellet me try again and verify20:48
jamesdentonnice20:50
spatelyes not getting any error :)20:51
spatelpolicy.json doesn't need any restart.20:51
spateljamesdenton: now question is does OSA support policy.json changes?20:54
spatelI did hand edit for now.20:55
jamesdentonmight still work20:55
jamesdentonhttps://docs.openstack.org/project-deploy-guide/openstack-ansible/draft/app-advanced-config-override.html20:55
spateloh yeah21:02
spatelthanks21:02
*** spatel has quit IRC21:29
*** itandops has quit IRC21:37
*** jbadiapa has quit IRC21:38
*** markvoelker has joined #openstack-ansible22:25
*** markvoelker has quit IRC22:30
*** tosky has quit IRC22:42
*** cshen has joined #openstack-ansible22:54
*** cshen has quit IRC22:58
*** markvoelker has joined #openstack-ansible23:29
*** markvoelker has quit IRC23:34

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!