| *** KeithMnemonic has quit IRC | 00:30 | |
| *** cshen has joined #openstack-ansible | 00:31 | |
| *** cshen has quit IRC | 00:36 | |
| *** gary_perkins has quit IRC | 01:02 | |
| *** gary_perkins has joined #openstack-ansible | 01:04 | |
| *** markvoelker has joined #openstack-ansible | 01:38 | |
| *** markvoelker has quit IRC | 01:43 | |
| *** schwicht has quit IRC | 02:09 | |
| *** cshen has joined #openstack-ansible | 02:31 | |
| *** cshen has quit IRC | 02:35 | |
| *** rh-jlabarre has quit IRC | 03:15 | |
| *** markvoelker has joined #openstack-ansible | 03:39 | |
| *** markvoelker has quit IRC | 03:43 | |
| *** viks____ has joined #openstack-ansible | 04:25 | |
| *** evrardjp has quit IRC | 04:33 | |
| *** evrardjp has joined #openstack-ansible | 04:33 | |
| *** udesale has joined #openstack-ansible | 04:39 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Add Centos-8 support https://review.opendev.org/689629 | 04:56 |
|---|---|---|
| noonedeadpunk | btw, I think now we can wait with https://review.opendev.org/#/c/738689/ and add centos 8 with focal | 04:58 |
| *** akahat|pto is now known as akahat | 05:10 | |
| *** markvoelker has joined #openstack-ansible | 05:23 | |
| *** markvoelker has quit IRC | 05:27 | |
| *** miloa has joined #openstack-ansible | 06:49 | |
| CeeMac | morning | 06:55 |
| *** luksky has joined #openstack-ansible | 06:58 | |
| *** markvoelker has joined #openstack-ansible | 07:18 | |
| *** markvoelker has quit IRC | 07:23 | |
| *** tosky has joined #openstack-ansible | 07:26 | |
| openstackgerrit | Merged openstack/openstack-ansible master: Fix mysql binary name https://review.opendev.org/735418 | 07:26 |
| *** cshen has joined #openstack-ansible | 07:34 | |
| *** ysastri has joined #openstack-ansible | 07:35 | |
| ysastri | Hello we are planning to upgrade our Openstack-ansible cluster from Rocky to Stein. All our environments are based on ubuntu 16.04. I know for stein ubuntu 18.04 is required. While doing this OS upgrade from 16.04 to 18.04 what all things we need to keep in mind?? We are evaluating pre tasks for Stein major upgrade. Any pointers in this direction | 07:56 |
| ysastri | is much appreciated. | 07:56 |
| *** miloa has quit IRC | 08:07 | |
| *** tosky has quit IRC | 08:32 | |
| arkan | hi guys, I've done a fresh openstack installation, but I'm getting SSLError in octavia container | 09:01 |
| arkan | Jul 03 09:01:53 controller1-octavia-server-container-d8bd0abc octavia-housekeeping[12716]: 2020-07-03 09:01:53.380 12716 WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.: requests.exceptions.SSLError: HTTPSConnectionPool(host='192.168.210.67', port=9443): Max retries exceeded with url: // (Caused by SSLError(SSLError("bad handshake: Error([('rsa routines', 'RSA_padding_check_PKCS1_typ | 09:02 |
| arkan | e_1', 'invalid padding'), ('rsa routines', 'rsa_ossl_public_decrypt', 'padding check failed'), ('asn1 encoding routines', 'ASN1_item_verify', 'EVP lib'), ('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),)) | 09:02 |
| *** sshnaidm|afk is now known as sshnaidm|off | 09:15 | |
| *** markvoelker has joined #openstack-ansible | 09:19 | |
| *** tosky has joined #openstack-ansible | 09:21 | |
| *** markvoelker has quit IRC | 09:24 | |
| *** markvoelker has joined #openstack-ansible | 09:33 | |
| *** markvoelker has quit IRC | 09:38 | |
| *** cshen has quit IRC | 09:51 | |
| *** also_stingrayza has joined #openstack-ansible | 10:03 | |
| *** jbadiapa has quit IRC | 10:04 | |
| *** stingrayza has quit IRC | 10:07 | |
| *** cshen has joined #openstack-ansible | 10:23 | |
| *** jbadiapa has joined #openstack-ansible | 10:26 | |
| *** cshen has quit IRC | 10:28 | |
| openstackgerrit | Merged openstack/openstack-ansible master: Rename mysql to mariadb for registered var https://review.opendev.org/737263 | 10:37 |
| *** cshen has joined #openstack-ansible | 10:38 | |
| *** shyamb has joined #openstack-ansible | 10:41 | |
| *** sshnaidm_ has joined #openstack-ansible | 10:47 | |
| *** sshnaidm|off has quit IRC | 10:48 | |
| openstackgerrit | Merged openstack/openstack-ansible master: Bump SHAs for master https://review.opendev.org/738358 | 10:53 |
| *** ysastri has quit IRC | 11:03 | |
| *** udesale_ has joined #openstack-ansible | 11:09 | |
| *** udesale has quit IRC | 11:11 | |
| *** shyamb has quit IRC | 11:41 | |
| noonedeadpunk | ysastri we have some notes here https://etherpad.openstack.org/p/osa-rocky-bionic-upgrade | 12:17 |
| noonedeadpunk | and also some doc is almost ready regarding the upgrade process https://review.opendev.org/#/c/710803/6 | 12:18 |
| *** cshen has quit IRC | 12:36 | |
| *** cshen has joined #openstack-ansible | 13:12 | |
| *** cshen has quit IRC | 13:17 | |
| *** schwicht has joined #openstack-ansible | 13:17 | |
| *** cshen has joined #openstack-ansible | 13:30 | |
| *** markvoelker has joined #openstack-ansible | 13:53 | |
| *** markvoelker has quit IRC | 13:58 | |
| *** cshen has quit IRC | 14:40 | |
| admin0 | everytime i have to run neutron playbooks, it stops and starts the service which causes a service disruption in the compute nodes .. is there a way to tell the playbooks not to restart services like the l3 agents etc | 14:49 |
| *** Goneri has joined #openstack-ansible | 14:54 | |
| *** cshen has joined #openstack-ansible | 14:55 | |
| kleini | restarted neutron agents should not cause any data plane outtage at all normally. what service disruption do you encounter? | 14:55 |
| admin0 | i see the agents stopping and restarting ( rebuilding ) the security groups again | 15:10 |
| admin0 | the platform where i see this is still on ubunt 16, rocky /18.1.8 | 15:10 |
| *** sshnaidm_ is now known as sshnaidm|off | 15:11 | |
| *** luksky has quit IRC | 15:15 | |
| *** waxfire0 has joined #openstack-ansible | 15:25 | |
| *** waxfire has quit IRC | 15:25 | |
| *** waxfire0 is now known as waxfire | 15:25 | |
| kleini | I just tested in my production system running a mix of Pike/Queens and restarting there neutron agents just makes the agent check, whether everything is still in place on the data plane, but it does not change anything. | 15:27 |
| kleini | Do you use Linux Bridge or OVS for data plane? | 15:27 |
| *** spatel has joined #openstack-ansible | 15:38 | |
| *** spatel has quit IRC | 15:41 | |
| noonedeadpunk | jrosser: don't you recall if we wrote down the way to use let's encrypt ssls into docs? | 15:47 |
| noonedeadpunk | just can't find anything here https://docs.openstack.org/openstack-ansible/ussuri/user/security/ssl-certificates.html | 15:47 |
| noonedeadpunk | btw, l3 restart can really make problems, if ha routers are not enabled | 15:48 |
| noonedeadpunk | but there's no way to say not to restart some specific service in case you adjust configs | 15:48 |
| *** luksky has joined #openstack-ansible | 15:50 | |
| arkan | Hi guys I ran ANSIBLE_ENABLE_TASK_DEBUGGER=True ansible-playbook os-octavia-install.yml | 15:51 |
| arkan | it's giving keystoneauth1.exceptions.http.Unauthorized for user service | 15:52 |
| arkan | but It works from cli and from horizon for the same credentials (user service and pass) | 15:52 |
| arkan | only I don't know why from ansible does not work | 15:52 |
| arkan | http://paste.openstack.org/show/795530/ | 15:53 |
| *** markvoelker has joined #openstack-ansible | 15:54 | |
| arkan | if I use the same credentials as shown in the playbook debugger, then it will work from openstack client cli | 15:54 |
| arkan | if you have any idea please let me know, I already spent a few hours | 15:55 |
| noonedeadpunk | can you paste task where it fails and error itself (out of stdout) | 15:57 |
| arkan | TASK [os_octavia : Create mgmt network] | 15:57 |
| noonedeadpunk | it's train? | 15:58 |
| arkan | yes | 15:58 |
| arkan | the network is not created | 15:58 |
| *** markvoelker has quit IRC | 15:59 | |
| arkan | and I can created manually using the above credentials (cli & horizon) | 15:59 |
| noonedeadpunk | I can think only about that interface is wrong... | 16:00 |
| noonedeadpunk | https://opendev.org/openstack/openstack-ansible-os_octavia/src/branch/stable/train/tasks/octavia_mgmt_network.yml#L42 | 16:00 |
| noonedeadpunk | what if you change that to public let's say? | 16:00 |
| arkan | if I change the task.args['auth']['username']=admin and task.args['auth']['password']=xxxxx and then redo, then it will work | 16:01 |
| noonedeadpunk | ah, and eventually you probably will need to replace value for auth_url as well | 16:01 |
| arkan | no | 16:01 |
| arkan | it will work without changing it | 16:01 |
| noonedeadpunk | yes, but with admin account | 16:01 |
| noonedeadpunk | what I was suggesting to try using internal/public endpoints with octavia one | 16:02 |
| arkan | but from cli it has the same auth_url for "service" user and it works | 16:02 |
| arkan | this is the octavia rc http://paste.openstack.org/show/795531/ | 16:04 |
| jrosser | noonedeadpunk: we did not do extra docs for letsecrypt, but we can add some | 16:04 |
| arkan | the same username "octavia" for the project "service" from cli it works, but from the ansible it does not | 16:05 |
| arkan | the internal and admin has the same url | 16:05 |
| arkan | only the my public is different | 16:06 |
| jrosser | noonedeadpunk: I wonder if this Octavia stuff is about delegating to the service setup host | 16:06 |
| jrosser | because that’s not default in train iirc? | 16:06 |
| noonedeadpunk | arkan: btw you have a bit different OS_AUTH_URL in openrc and in debug oputput. But not sure that matters... as the only difference is v3 in the end which should be ok. | 16:07 |
| noonedeadpunk | I think we delegate by default in train... | 16:08 |
| noonedeadpunk | but if connection is ok with keystone, see no reason why it should fail from there... | 16:08 |
| arkan | this is from octavia container /etc/octavia/octavia.conf http://paste.openstack.org/show/795532/ | 16:09 |
| arkan | it is using the same credentials | 16:09 |
| noonedeadpunk | hm.... | 16:10 |
| arkan | noonedeadpunk: I can add v3 and redo and see if it works or not | 16:10 |
| arkan | in the playbook debugger | 16:11 |
| noonedeadpunk | arkan: we use domain_id for domain_name field https://opendev.org/openstack/openstack-ansible-os_octavia/src/branch/stable/train/tasks/octavia_mgmt_network.yml#L34-L35 | 16:11 |
| noonedeadpunk | would be good to check if it's not the root. I can't recall at the moment if plugin at this ansible version can apply id instead of name... | 16:12 |
| arkan | noonedeadpunk: do you want me to check something? | 16:13 |
| noonedeadpunk | yeeah, can you set octavia_service_user_domain_id: Default and octavia_service_project_domain_id: Default and check theat specific part? | 16:14 |
| noonedeadpunk | or just replace these variables with "Default" in the code | 16:15 |
| noonedeadpunk | not to break rest of the things | 16:15 |
| arkan | do you want me to stop the debugger now ? | 16:15 |
| arkan | and apply the changes then rerun os-octavia-install ? | 16:15 |
| arkan | btw I did not set any thing related to octavia_service_user_domain_* in my user_variables, so I used the defaults | 16:17 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_nova stable/ussuri: Add Centos-8 support https://review.opendev.org/739259 | 16:17 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon stable/ussuri: Add Centos-8 support https://review.opendev.org/739260 | 16:17 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_heat stable/ussuri: Add Centos-8 support https://review.opendev.org/739261 | 16:17 |
| arkan | now I will make the changes that You've asked and rerun os-octavia-install | 16:17 |
| noonedeadpunk | probably just hardcode "Default" then at these lines | 16:18 |
| arkan | noonedeadpunk: I set the vars and now I ran os-octavia-install again | 16:20 |
| *** udesale has joined #openstack-ansible | 16:23 | |
| arkan | it will fail again | 16:24 |
| arkan | after that I will see what task.args has | 16:24 |
| arkan | http://paste.openstack.org/show/795533/ | 16:25 |
| *** udesale_ has quit IRC | 16:25 | |
| arkan | and this is the error | 16:27 |
| arkan | http://paste.openstack.org/show/795535/ | 16:27 |
| jrosser | arkan: can you please look at the topmost commit here https://github.com/openstack/octavia/commits/stable/train | 16:32 |
| arkan | ok | 16:32 |
| jrosser | and check what the SHA of the octavia service you are deployinh | 16:33 |
| jrosser | you will find that here https://github.com/openstack/openstack-ansible/blob/stable/train/playbooks/defaults/repo_packages/openstack_services.yml#L274 | 16:33 |
| jrosser | also can you tell me what "localhost" is here controller1_octavia_server_container-d8bd0abc -> localhost | 16:35 |
| jrosser | that would be your deploy host, but what is that? | 16:35 |
| arkan | localhost I saw it also, but I don't know that is this | 16:36 |
| arkan | I'm deploying from the controller node | 16:36 |
| *** jbadiapa has quit IRC | 16:37 | |
| arkan | my controller node is my deployer node | 16:37 |
| jrosser | arkan: it might be worth trying with these variables in your user_variables.yml https://github.com/openstack/openstack-ansible/blob/ed3691fd05a62cc71f05fafd7f3c5c1e7b107551/etc/openstack_deploy/user_variables.yml#L33-L34 | 16:42 |
| arkan | my openstack is using this commit commit 27884f5cfd1b5c3eb4e80cc1bc0d46b93656858a (HEAD, tag: 20.1.1) | 16:44 |
| arkan | Merge: f2a32b3df efae39ca0 | 16:44 |
| arkan | Author: Zuul <zuul@review.opendev.org> | 16:44 |
| arkan | Date: Wed May 13 02:10:38 2020 +0000 | 16:44 |
| arkan | and for octavia | 16:46 |
| arkan | commit 7cbec4b075e1af1747b7c7909b57cea2efbcf6b6 (HEAD, origin/stable/train) | 16:46 |
| arkan | Author: OpenStack Proposal Bot <openstack-infra@lists.openstack.org> | 16:46 |
| arkan | Date: Tue Mar 24 18:35:51 2020 +0000 | 16:46 |
| arkan | Updated from OpenStack Ansible Tests | 16:46 |
| arkan | Change-Id: If22140803c27cdf78480339511ae8131f5a4ffc0 | 16:46 |
| arkan | root@controller1:/etc/ansible/roles/os_octavia# git remote -v | 16:46 |
| arkan | originhttps://opendev.org/openstack/openstack-ansible-os_octavia (fetch) | 16:46 |
| arkan | originhttps://opendev.org/openstack/openstack-ansible-os_octavia (push) | 16:46 |
| arkan | I can update octavia role | 16:47 |
| arkan | and rerun it | 16:47 |
| arkan | jrosser: also related to what you've pasted | 16:47 |
| arkan | what to put there ? | 16:47 |
| arkan | #openstack_service_setup_host: "{{ groups['utility_all'][0] }}" | 16:48 |
| arkan | #openstack_service_setup_host_python_interpreter: "/openstack/venvs/utility-{{ openstack_release }}/bin/python" | 16:48 |
| arkan | first I will try to update my octavia role and rerun it | 16:49 |
| *** udesale has quit IRC | 16:49 | |
| *** spatel has joined #openstack-ansible | 16:49 | |
| spatel | jrosser: noonedeadpunk just for information i build centos8 with all current patches in my labs and all good. my build passed without any error | 16:52 |
| noonedeadpunk | cool! | 16:53 |
| arkan | the repo that is using based on the https://docs.openstack.org/project-deploy-guide/openstack-ansible/train/deploymenthost.html | 16:55 |
| arkan | that I have it https://opendev.org/openstack/openstack-ansible-os_octavia | 16:55 |
| arkan | and on the site https://opendev.org/openstack/openstack-ansible-os_octavia/src/branch/stable/train they have the same sha256 | 16:56 |
| arkan | it's the same commit | 16:56 |
| arkan | jrosser: what openstack ansible version are you using ? | 17:01 |
| *** cshen has quit IRC | 17:02 | |
| openstackgerrit | Merged openstack/ansible-config_template master: Update config_template to use the builtin _get_remote_user function https://review.opendev.org/738058 | 17:03 |
| jrosser | arkan: I highlighted two commentedout lines I. the example user_config. my suggestion is that you copy them, without the comments into your user variables | 17:05 |
| *** spatel has quit IRC | 17:05 | |
| arkan | ok | 17:05 |
| jrosser | my question about sha was the sha of Octavia, not os_octavia | 17:05 |
| jrosser | read the comments in the example user config about those lines | 17:06 |
| jrosser | the utility container has an openrc in it which is all set up for the internal endpoint | 17:06 |
| jrosser | you will find it there if you look in the utility container | 17:06 |
| arkan | jrosser: yes I know that it has openrs, but I usually don't use it | 17:08 |
| arkan | now I set the vars | 17:08 |
| arkan | and re-run the os-octavia-install | 17:09 |
| arkan | jrosser: wow | 17:11 |
| arkan | it worked | 17:11 |
| arkan | those 2 magic lines | 17:11 |
| jrosser | the openrc in the utility container is set up very specifically for this | 17:12 |
| jrosser | it’s using the admin user and the internal endpoint | 17:12 |
| jrosser | so totally not like the one from horizon | 17:12 |
| arkan | yes | 17:13 |
| jrosser | you should also pay attention to the commit in octavia I linked | 17:13 |
| jrosser | that’s fixing a bug related to endpoints in octavia itself | 17:14 |
| arkan | yes, but how to pull the changes to my host ? | 17:14 |
| arkan | should I use some scripts ? or using git pull, ...etc ? | 17:15 |
| jrosser | no :) | 17:16 |
| arkan | :)) | 17:16 |
| jrosser | i linked you this https://github.com/openstack/openstack-ansible/blob/stable/train/playbooks/defaults/repo_packages/openstack_services.yml#L274 | 17:16 |
| jrosser | that is a file in the openstack-ansible repo | 17:16 |
| arkan | ok | 17:17 |
| jrosser | it says "for this release of openstack-ansible these are the SHA of all the openstack services we are going to use" | 17:17 |
| arkan | ok | 17:17 |
| jrosser | it's nothing to do with the versions of os_octavia or the ansible roles that deploy the services | 17:17 |
| jrosser | so check the sha you have | 17:17 |
| jrosser | if you have deployed tag 20.1.1 of openstack-ansible you will have a SHA of octavia which does not include that fix | 17:19 |
| arkan | hahah I was thinking about git | 17:20 |
| arkan | :))) | 17:20 |
| arkan | I found the file in my host | 17:20 |
| jrosser | well ultimately it is done with git, but as part of building the venvs | 17:20 |
| jrosser | this is how we 'pin' all of the services to a specific known state for each release | 17:21 |
| jrosser | but as you can see in that file they are all ansible variables | 17:21 |
| jrosser | so everything there can be overridden | 17:21 |
| arkan | I have this one in my host | 17:21 |
| arkan | octavia_git_install_branch: 7fa2f933a2c99e7ef0b2cb8d4cbcc1e9f9c0c79f | 17:21 |
| arkan | it's not the same | 17:21 |
| arkan | the one you gave me is octavia_git_install_branch: 09e863eb539e29c8950ddfce12d602c0e77c1b7e | 17:21 |
| jrosser | ok so now to understand how the git tags work | 17:22 |
| jrosser | every 2 weeks or so we make a point release on each of the stable branches, and i think you have used 20.1.1 | 17:22 |
| arkan | yes | 17:22 |
| jrosser | what happens at the point release is all those SHA get updated, so any bugfixes from the upstream openstack services are pulled in | 17:23 |
| arkan | great | 17:23 |
| jrosser | and there is now a 20.1.2 release of openstack-ansible which updates the SHA of the octavia service | 17:23 |
| arkan | great | 17:24 |
| arkan | so I can pull it | 17:24 |
| jrosser | you can do minor upgrade, yes | 17:24 |
| arkan | from 20.1.1 to 20.1.2 with patch 2 | 17:24 |
| arkan | and it will get updated | 17:25 |
| arkan | after I git pull it, should I run scripts/bootstrap-ansible.sh | 17:25 |
| arkan | ? | 17:25 |
| jrosser | there are instructions https://docs.openstack.org/openstack-ansible/train/admin/upgrades/minor-upgrades.html | 17:26 |
| jrosser | replace the tag with the one you actually need | 17:26 |
| arkan | yes | 17:26 |
| jrosser | when you get more familiar with this you can start to do things like just override the var with the octavia SHA | 17:27 |
| arkan | done | 17:27 |
| arkan | I git fetch and git checkout | 17:28 |
| arkan | root@controller1:/opt/openstack-ansible/playbooks/defaults/repo_packages# git log -1 | 17:28 |
| arkan | commit edeca57bdc71360e06e393dbb9853b4405dc62f0 (HEAD, tag: 20.1.2) | 17:28 |
| *** luksky has quit IRC | 17:29 | |
| arkan | great | 17:31 |
| arkan | jrosser: thanks a lot for your help | 17:31 |
| jrosser | no worries :) good luck! | 17:31 |
| *** cshen has joined #openstack-ansible | 17:33 | |
| jrosser | noonedeadpunk: we had a race condition with certbot fixed here https://review.opendev.org/#/c/734116/ | 17:36 |
| *** cshen has quit IRC | 17:38 | |
| noonedeadpunk | jrosser: btw have you seen a comment in https://review.opendev.org/#/c/737221/2 ? | 17:40 |
| jrosser | yes i saw it | 17:41 |
| jrosser | i have not thought about what to do | 17:42 |
| jrosser | my aim was to try to get the batch size to be larger than the number of containers in the control plane | 17:42 |
| jrosser | as i think thats slowing us down | 17:42 |
| noonedeadpunk | btw out of jobs I don't really see effect from https://review.opendev.org/#/c/737543 for some reason:( | 17:43 |
| noonedeadpunk | but didn't have time to test it against some prod | 17:44 |
| jrosser | its odd isnt it, becasue i did all that testing on a cloud vm | 17:44 |
| jrosser | *but* that was all for the second run where few tasks are changing | 17:44 |
| *** luksky has joined #openstack-ansible | 17:44 | |
| noonedeadpunk | yeah, and out of what I saw that really should speedup | 17:44 |
| jrosser | as i was really interested in reducing overhead | 17:44 |
| jrosser | oh yes i thnk it's absolutely valid but yes also i have not tried in a prod environment | 17:45 |
| jrosser | i'd be interested about what you think of the ANSIBLE_FORKS thing | 17:45 |
| noonedeadpunk | maybe we have some ram issue which doesn't allow to execute faster... | 17:45 |
| jrosser | if you watch the zuul console you can see it execute the tasks in blocks of 5 hosts | 17:45 |
| jrosser | then a little pause whilst the batch completes, then the next batch | 17:46 |
| noonedeadpunk | yeah, I saw exactly the same in prod | 17:46 |
| jrosser | and again i measure a real improvement in a local vm | 17:46 |
| noonedeadpunk | eventually maxsessions thing also bothered me. I think I need to spawn a sandbox to see if we do adjust this | 17:48 |
| jrosser | https://github.com/openstack/openstack-ansible/blob/103f3d84c353ef33f8433e43697c140fd6d2f92d/tests/bootstrap-aio.yml#L68 | 17:48 |
| noonedeadpunk | yes, but it's really only for aio | 17:49 |
| noonedeadpunk | And I'm not sure I see the best place to adjust this | 17:49 |
| noonedeadpunk | we can use hardening or openstack_hosts for that | 17:50 |
| jrosser | there is also a warning here https://github.com/openstack/openstack-ansible/blob/dbd711564a0e4751a13037e01ea198a9f7910b79/doc/source/admin/maintenance-tasks/ansible-modules.rst#L140 | 17:50 |
| jrosser | but i've never seen that myself | 17:50 |
| jrosser | unless it means that you run up against the sshd MaxSessions at that point | 17:50 |
| noonedeadpunk | eventually it's not so easy to hit that. you like need to run some command against all containers within controller host | 17:52 |
| noonedeadpunk | But not sure it's good idea to leave that flaw as is, as one day we may face it or weird things might happen with connections | 17:53 |
| openstackgerrit | Merged openstack/openstack-ansible-haproxy_server stable/ussuri: Add Centos-8 support https://review.opendev.org/739103 | 17:54 |
| *** markvoelker has joined #openstack-ansible | 17:55 | |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts stable/ussuri: Remove machinectl from LXC cache prep https://review.opendev.org/739114 | 17:55 |
| noonedeadpunk | but generally I think we need to extend number of forks from default value | 17:56 |
| openstackgerrit | Merged openstack/openstack-ansible-haproxy_server master: Ensure there is no race between haproxy and certbot for initial cert https://review.opendev.org/734116 | 17:57 |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-haproxy_server stable/ussuri: Ensure there is no race between haproxy and certbot for initial cert https://review.opendev.org/739269 | 17:57 |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts stable/ussuri: Do not install python2 or its dev package on Ubuntu Bionic hosts https://review.opendev.org/738607 | 17:58 |
| *** markvoelker has quit IRC | 18:00 | |
| openstackgerrit | Merged openstack/openstack-ansible-plugins stable/stein: Optimise linear strategy access to physical host variables https://review.opendev.org/737965 | 18:09 |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_container_create stable/ussuri: Add Centos-8 support https://review.opendev.org/739118 | 18:10 |
| *** markvoelker has joined #openstack-ansible | 18:13 | |
| *** markvoelker has quit IRC | 18:17 | |
| *** cshen has joined #openstack-ansible | 18:37 | |
| *** cshen has quit IRC | 18:42 | |
| *** markvoelker has joined #openstack-ansible | 18:43 | |
| *** cshen has joined #openstack-ansible | 18:44 | |
| *** markvoelker has quit IRC | 18:48 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_placement stable/ussuri: Add Centos-8 support https://review.opendev.org/739113 | 19:11 |
| openstackgerrit | Merged openstack/openstack-ansible-os_barbican stable/ussuri: Add Centos-8 support https://review.opendev.org/739115 | 19:11 |
| openstackgerrit | Merged openstack/ansible-role-uwsgi stable/ussuri: Add Centos-8 support https://review.opendev.org/739104 | 19:13 |
| openstackgerrit | Merged openstack/openstack-ansible-memcached_server stable/train: Reduce verbosity level when debug is true https://review.opendev.org/736180 | 19:32 |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts stable/ussuri: Fix CentOS functional test https://review.opendev.org/739121 | 20:23 |
| openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts stable/ussuri: Enable PowerTools repository for distro installs https://review.opendev.org/739117 | 20:23 |
| *** markvoelker has joined #openstack-ansible | 20:44 | |
| *** markvoelker has quit IRC | 20:48 | |
| *** markvoelker has joined #openstack-ansible | 21:09 | |
| *** cshen has quit IRC | 21:26 | |
| *** markvoelker has quit IRC | 21:48 | |
| *** cshen has joined #openstack-ansible | 22:01 | |
| *** cshen has quit IRC | 22:05 | |
| *** schwicht has quit IRC | 22:14 | |
| openstackgerrit | Merged openstack/openstack-ansible-haproxy_server stable/ussuri: Ensure there is no race between haproxy and certbot for initial cert https://review.opendev.org/739269 | 22:25 |
| openstackgerrit | Merged openstack/openstack-ansible-lxc_container_create stable/ussuri: Fix tmpfiles-setup wait handler https://review.opendev.org/739067 | 22:36 |
| openstackgerrit | Merged openstack/openstack-ansible-tests stable/ussuri: Do not set alternatives before package is present https://review.opendev.org/738309 | 22:49 |
| *** tosky has quit IRC | 22:50 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_rally stable/ussuri: Do not install development packages on the target https://review.opendev.org/738676 | 22:57 |
| *** markvoelker has joined #openstack-ansible | 23:49 | |
| *** markvoelker has quit IRC | 23:53 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!