Tuesday, 2020-07-28

*** CeeMac has quit IRC00:52
*** CeeMac has joined #openstack-ansible00:55
watersjhow do you all handle your logging? multiple controller & compute nodes. lots monving parts and logs everywhere.01:09
guilhermespwatersj: we have some elk roles https://github.com/openstack/openstack-ansible-ops/tree/master/elk_metrics_6x01:20
*** elico has joined #openstack-ansible01:40
*** d34dh0r53 has joined #openstack-ansible01:55
watersjguilhermesp, ty, wondering if other people are using elk, or central journald. elk might be preferred route for me.02:14
elicowatersj: We use graylog for couple of our system nodes(not OS related)02:40
*** spatel has joined #openstack-ansible02:55
*** d34dh0r53 has quit IRC03:02
openstackgerritMerged openstack/openstack-ansible stable/ussuri: Remove package cache proxy cleanup  https://review.opendev.org/74280003:45
openstackgerritMerged openstack/openstack-ansible master: Add ubuntu focal distro jobs  https://review.opendev.org/73805403:45
openstackgerritMerged openstack/openstack-ansible master: Always use the utility host for service setup tasks  https://review.opendev.org/73385403:45
*** gyee has quit IRC04:10
*** evrardjp has quit IRC04:33
*** evrardjp has joined #openstack-ansible04:33
*** rh-jelabarre has quit IRC04:48
*** spatel has quit IRC05:01
*** udesale has joined #openstack-ansible05:27
*** arkan has joined #openstack-ansible06:08
openstackgerritJonathan Rosser proposed openstack/openstack-ansible stable/ussuri: Always use the utility host for service setup tasks  https://review.opendev.org/74346506:31
openstackgerritJonathan Rosser proposed openstack/openstack-ansible stable/ussuri: Add ubuntu focal distro jobs  https://review.opendev.org/74346606:32
*** arkan has quit IRC06:52
*** yolanda has quit IRC06:52
*** yolanda has joined #openstack-ansible06:52
*** andrewbonney has joined #openstack-ansible07:29
*** tosky has joined #openstack-ansible07:42
*** jbadiapa has joined #openstack-ansible07:42
*** namrata has joined #openstack-ansible07:50
*** namrata has quit IRC08:04
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/74316308:11
*** namrata has joined #openstack-ansible08:31
*** namrata has quit IRC08:49
arxcruzHey guys, I have a problem, I hope you can help me08:49
arxcruzI'm trying to add os_tempest in our queens jobs in tripleo08:49
arxcruzhowever, it requires openstacksdk>=0.1208:49
arxcruzwhile queens have openstacksdk-0.11.3608:49
arxcruzis there a way to override the openstacksdk on os_tempest?08:50
*** hamzaachi has joined #openstack-ansible08:51
*** namrata has joined #openstack-ansible09:19
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-os_tempest stable/ussuri: Install py3 distro packages  https://review.opendev.org/74349409:41
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible stable/ussuri: Add ubuntu focal distro jobs  https://review.opendev.org/74346609:42
*** udesale_ has joined #openstack-ansible09:58
*** udesale has quit IRC10:01
*** elico has quit IRC10:16
noonedeadpunkarxcruz: I think it got's there with constraints url. So I'd say you need an earlier tempest... Or define pip_install_upper_constraints10:20
namrataHi Folks, When is the next point release of stable/train is scheduled. Thanks!10:24
arxcruznoonedeadpunk: not tempest, openstacksdk10:33
arxcruzthe os_xyz ansible module requires at least openstacksdk>=0.12 and train have openstacksdk 0.11.3610:33
jrosserarxcruz: os_tempest is an ansible role, not an ansible module?10:34
arxcruzjrosser: os_tempest uses for example the module os_flavor or os_network10:35
arxcruzthese modules requires openstacksdk >= 0.1210:35
arxcruzjrosser: https://536f9c61966afc49eab1-3f411ee28045e7c41608c6d36a93ae2a.ssl.cf5.rackcdn.com/740662/6/check/tripleo-ci-centos-7-containers-multinode-queens/00374b9/job-output.txt10:35
arxcruz2020-07-25 18:39:48.297798 | primary | To utilize this module, the installed version of the openstacksdk library MUST be >=0.12.10:35
jrosseros_tempest is branched, so from an OSA perspective we use the queens branch of os_tempest with a queens deployment10:35
jrosserbut you would then also be possibly needing a queens-esque ansible version too10:36
arxcruzjrosser: hmmm, i think we are using master let me ask chandankumar10:37
*** chandankumar has joined #openstack-ansible10:39
chandankumararxcruz: Hello10:39
arxcruzchandankumar: hi, do we use branched os_tempest?10:39
arxcruzi think we use it from master right ?10:39
chandankumararxcruz: nope, we use it from master10:39
arxcruzchandankumar: would we consider to branch it ?10:39
*** strattao has joined #openstack-ansible10:40
chandankumararxcruz: https://opendev.org/openstack/tripleo-ci/src/branch/master/zuul.d/base.yaml#L4210:40
chandankumararxcruz: yes, we can try that, not sure how much it will break10:40
jrosseri suspect that the queens os_tempest is from very long before we (tripleo <> OSA) started collaborating and it's going to be tricky10:42
chandankumarjrosser: yes, correct10:42
chandankumarjrosser: may be we can try to run tempest using venv and see how it goes10:48
jrosserchandankumar: you can do that yes, that would be how the source install works10:49
chandankumararxcruz: can I update your patch?10:50
arxcruzchandankumar: no, let me see the results, jesse sugested something that might work10:50
chandankumararxcruz: sure10:50
jannoI am still struggling with designate. I followed https://docs.openstack.org/openstack-ansible/ussuri/reference/configuration/extra-networks.html and now every container has got the dns interface. Is this expected?11:13
jannoThis is my relevant config: http://paste.openstack.org/show/796371/11:13
jannoevery container on ctrl3 has eth20 with address 10.50.0.103.11:14
jannoThe same applies to the other two with the according ip address.11:14
*** mgariepy has quit IRC11:18
noonedeadpunkno, only designate one is supposed to have that interface.....11:39
noonedeadpunkjanno: try dropping  container_vars for dnsaas_hosts11:41
noonedeadpunkI think we've changed a bit the way inventory got generated and didn\t update docs....11:41
noonedeadpunkso just omit `Define override for containers` from docs11:42
noonedeadpunkbut not sure if inventory will be cleaned up from messy interfaces by itself...11:42
*** shyamb has joined #openstack-ansible11:45
jannook, I'll give it a try, but how do I remove all the eth20s from all the containers?11:45
jannoif I remove the container_vars, is there any other way to set a specific ip address for the designate containers?11:48
noonedeadpunkso you can either manually drop /var/lib/lxc/*/eth20.ini and drop lxc.include param from  /var/lib/lxc/*/config and restart container, or you can also probably run containers-lxc-create.yml playbook11:48
noonedeadpunkum.... not sure, maybe you can try setting container_extra_networks in group_vars for dessignate_api or smth...11:50
*** spatel has joined #openstack-ansible11:50
noonedeadpunkor maybe we need to dig why dynamic_inventory now adds interfaces to all of the containers...11:50
noonedeadpunkas likely container_vars working not as excepted now...11:51
noonedeadpunkor they are... and are applied to ctrl1 host as defined...11:52
noonedeadpunkbut yeah, supposed to be appplied only to containers inside ctrl1...11:52
noonedeadpunkjanno: eventualy setting container_extra_networks into group_vars as a variable should work fine11:53
*** spatel has quit IRC11:54
jannoalright, I'll try to figure out the right way and update the docs11:55
noonedeadpunktbh I'm about to think we have a bug in dynamic_inventory generation now... But that's can be workarounded with group_vars11:59
noonedeadpunkbut yeah, that'll be great if you can chech that12:00
noonedeadpunk*check12:00
*** evrardjp has quit IRC12:00
*** rh-jelabarre has joined #openstack-ansible12:09
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Add corosync/pacemaker installation  https://review.opendev.org/73914612:09
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Add corosync/pacemaker installation  https://review.opendev.org/73914612:09
*** shyam89 has joined #openstack-ansible12:10
*** shyam89 has quit IRC12:11
*** shyam89 has joined #openstack-ansible12:12
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Deprecate os_congress role  https://review.opendev.org/74252112:12
*** shyam89 has quit IRC12:12
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible stable/train: Suppress errors when ara is not installed  https://review.opendev.org/73128912:13
*** shyamb has quit IRC12:14
*** hamzaachi has quit IRC12:24
*** mgariepy has joined #openstack-ansible12:33
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_zun master: Add centos-8 support  https://review.opendev.org/73964912:40
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-ceph_client master: Add centos8 epel GPG key  https://review.opendev.org/74352312:44
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_manila master: Add centos-8 support  https://review.opendev.org/73964612:44
*** shyamb has joined #openstack-ansible13:13
*** shyamb has quit IRC13:18
*** shyamb has joined #openstack-ansible13:20
openstackgerritMerged openstack/openstack-ansible-tests stable/ussuri: Make nodepool vars work with centos 8  https://review.opendev.org/74330513:26
openstackgerritMerged openstack/openstack-ansible-os_cinder stable/ussuri: Explicitly enable/disable active/active  https://review.opendev.org/74330313:39
*** shyam89 has joined #openstack-ansible13:39
*** d34dh0r53 has joined #openstack-ansible13:41
*** d34dh0r53 has quit IRC13:41
*** d34dh0r53 has joined #openstack-ansible13:42
*** shyamb has quit IRC13:42
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_murano stable/ussuri: Add centos-8 support  https://review.opendev.org/74353813:43
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_aodh master: Revert CentOS 8 jobs to voting  https://review.opendev.org/74354013:47
*** shyam89 has quit IRC13:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_gnocchi master: Revert CentOS 8 jobs to voting  https://review.opendev.org/74354113:47
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_ceilometer master: Revert CentOS 8 jobs to voting  https://review.opendev.org/74354313:48
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_panko master: Revert CentOS 8 jobs to voting  https://review.opendev.org/74354413:49
*** namrata has quit IRC13:51
*** namrata has joined #openstack-ansible13:52
*** spatel has joined #openstack-ansible13:52
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/ussuri: Install py3 distro packages  https://review.opendev.org/74349414:39
*** elico has joined #openstack-ansible14:49
*** elico has quit IRC14:54
openstackgerritMerged openstack/openstack-ansible stable/ussuri: Fix mysql binary name  https://review.opendev.org/74284115:08
openstackgerritMerged openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/74316315:08
*** namrata has quit IRC15:23
*** elico has joined #openstack-ansible15:24
openstackgerritMerged openstack/openstack-ansible-os_tacker stable/ussuri: Add centos-8 support  https://review.opendev.org/74330815:31
openstackgerritMerged openstack/openstack-ansible-os_blazar stable/ussuri: Add centos-8 support  https://review.opendev.org/74330915:32
*** udesale_ has quit IRC15:40
openstackgerritMerged openstack/openstack-ansible-os_sahara stable/ussuri: Add centos-8 support  https://review.opendev.org/74330715:47
openstackgerritMerged openstack/openstack-ansible-os_aodh stable/ussuri: Add centos-8 support  https://review.opendev.org/74331015:50
openstackgerritMerged openstack/openstack-ansible-os_octavia stable/ussuri: Add centos-8 support  https://review.opendev.org/74331215:55
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Only create local facts folder when necessary  https://review.opendev.org/74357316:00
openstackgerritMerged openstack/openstack-ansible-os_ceilometer stable/ussuri: Add centos-8 and ubuntu focal support  https://review.opendev.org/74331316:01
noonedeadpunk#startmeeting openstack_ansible_meeting16:01
openstackMeeting started Tue Jul 28 16:01:21 2020 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.16:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:01
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:01
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:01
noonedeadpunk#topic office hours16:01
*** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)"16:01
noonedeadpunko\16:02
jrosserhello16:03
*** mgariepy has quit IRC16:04
noonedeadpunkHey, I'm from phone at the moment, so...16:06
noonedeadpunkI guess we've backported most of the things for centos816:06
noonedeadpunkExcept Murano (which start timeouting)16:06
noonedeadpunkAnd zun which I'm taking look at (maybe just few several things)16:07
noonedeadpunkDon't have really much things to share as was doing mostly some personal stuff:(16:08
jrossersimilar, we just need to keep on top of the backports and get everything merged16:09
noonedeadpunkBut I hope I'll be more productive and less lazy this week, and we should do final release I guess on 2 weeks? Due date was 10th of August iirc16:09
noonedeadpunkAnd I'd love to finish bind-to-mgmt thing16:10
noonedeadpunkAnd also work on ci things, to get upgrade jobs finally merged16:11
noonedeadpunk(I mean their fix)16:11
jrosseryes, been so busy i've kind of paged-out where we were up to with bind-to-mgmt16:11
noonedeadpunkI think on db from utility still16:11
noonedeadpunkAnd need to patch every role for that16:12
jrosseroh yes thats it16:14
jrosserthat does not sound like a job for U16:14
noonedeadpunkUh, it was planned a different way, but yeah...16:19
noonedeadpunkI think a have a lot of time on my hands at the moment anyway:)16:19
noonedeadpunkBTW, dmsimard (sorry for misspelling) gave great suggestion to allow users to deploy Ara with OSA16:20
noonedeadpunkTo keep track on playbook execution in better way than just logs16:21
noonedeadpunkAnd I think that's really great idea:)16:21
jrosserif you want to bash on bind-to-mgmt thats cool16:22
dmsimard\o16:22
dmsimardif you're interested there's an ansible role to deploy the API server here: https://github.com/ansible-community/ara-collection or docker images: https://hub.docker.com/r/recordsansible/ara-api16:23
dmsimardhappy to help otherwise point you in the right direction or answer questions16:24
noonedeadpunkOh, so we can even just include the role16:25
noonedeadpunkDuring ansible bootstrap or something16:25
dmsimardyou can take inspiration from the playbook used to deploy the live demo: https://github.com/ansible-community/ara-infra/blob/master/playbooks/live-demo.yaml16:26
noonedeadpunkjrosser, yeah, I was about to do that right tomorrow, but as I was not so deep in that topic I might ping you16:26
dmsimardnote that ara-web isn't required (and is neglected right now)16:27
dmsimardnoonedeadpunk: the role sets up the API server, there needs to be a part on the ansible control node where you install the ara callback and set it up to point to the api server16:27
dmsimardwhich should be easy enough, something like pip install ara; export ANSIBLE_CALLBACK_PLUGINS=$(python3 -m ara.setup.callback_plugins)16:28
dmsimardoh, and then export ARA_API_CLIENT=http and ARA_API_SERVER=http://api-server16:28
noonedeadpunkSounds neat. Does role deploy web UI as well?16:28
jrossernoonedeadpunk: sure  just ask as it's really not that far off16:28
dmsimardthe API server comes with a built-in UI, this one: https://api.demo.recordsansible.org/16:29
jrossernoonedeadpunk: i think what i was working towards in a AIO was this https://review.opendev.org/#/c/733408/16:29
dmsimardthe CLI will be bundled with the main 'ara' package16:29
dmsimardit's not released yet but it's in master16:30
noonedeadpunkOk, will try to take a look a bit later that week, and will ping you for sure:)16:30
dmsimardsure, you know where to find me16:30
noonedeadpunkYeah:)16:30
noonedeadpunkI think we should probably add a separate inventory group for Ara API and Ara web16:31
noonedeadpunkAnd by default offer to set it to deploy host? Oh, BTW, is there any possibility to restrict access?16:32
dmsimardsure -- for ara-web this is https://web.demo.recordsansible.org/ and I can't quite recommend it yet so don't bother with it for now :p16:32
dmsimardIt makes sense to create an inventory group, sure16:32
dmsimardby default everything is opened read/write without authentication but you can turn on authentication only for writes or for both read/write, this is explained here: https://ara.readthedocs.io/en/latest/api-security.html16:33
dmsimardThere is no concept of permission granularity/RBAC/groups/etc -- either you have access or you don't16:34
noonedeadpunkI mean I'm not sure if we can/should put Ara under our haproxy and deploy it in container, or just independent web server on deploy host or in container on private ips...16:35
noonedeadpunkBut yeah, that are details:)16:36
dmsimardI don't have a strong opinion as my experience with OSA is limited16:36
dmsimardanother thing to consider is where to store the data -- by default this is in a sqlite database but the role supports mysql/postgresql as well16:37
noonedeadpunkThat's totally fine, I'm probably thinking out loud16:37
noonedeadpunkOk, I think that should be in our infra stuff then - we have a galera cluster which might work just nice for that16:38
noonedeadpunkBTW, can it work under uwsgi?16:38
dmsimardthat might lead to some chicken/egg if ansible tries to use ara before mysql is setup16:38
noonedeadpunkOh, that's good point16:39
dmsimardsurely ? would love to have support for it in the role, there's only gunicorn right now16:39
dmsimardshould be simple enough to add, the role was structured to eventually support uwsgi/mod_wsgi16:40
dmsimardI just don't know uwsgi a lot :)16:40
noonedeadpunkHm, but how ansible role does setup Ara without chicken/egg situation?16:40
noonedeadpunkI mean I think plugins are set during role execution?16:41
noonedeadpunkBut yeah, I see what you mean, that we'll setup Ara only after launching massive amount of roles16:41
noonedeadpunkSo we'd miss data for them16:42
dmsimardif ansible is setup to use ara with ANSIBLE_CALLBACK_PLUGINS but ara hasn't been installed yet, it will just skip it16:42
dmsimardi.e, nothing to load, moving on16:42
dmsimardthere might be a warning but it's not fatal and has no impact16:42
noonedeadpunkOh, I think then we're ok16:43
*** andrewbonney has quit IRC17:04
*** mgariepy has joined #openstack-ansible17:14
noonedeadpunk#endmeeting17:30
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: https://bit.ly/2SAcGAn"17:30
openstackMeeting ended Tue Jul 28 17:30:41 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:30
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-07-28-16.01.html17:30
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-07-28-16.01.txt17:30
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-07-28-16.01.log.html17:30
*** redrobot has quit IRC17:41
openstackgerritMerged openstack/openstack-ansible stable/train: Suppress errors when ara is not installed  https://review.opendev.org/73128918:12
*** jamesden_ has joined #openstack-ansible18:27
*** jamesdenton has quit IRC18:30
*** tosky has quit IRC19:25
*** fridtjof[m] has quit IRC20:05
admin0how to have nuetron on the controllers, but the actual l3 agents and router to computes ?20:06
admin0in env.d i can do container_skel:  neutron_server_container belongs to shared-infra-containers and then  neutron_agents_container: is_metal true20:08
*** fridtjof[m] has joined #openstack-ansible20:21
*** evrardjp has joined #openstack-ansible20:55
*** gyee has joined #openstack-ansible21:02
*** spatel has quit IRC21:36
*** redrobot has joined #openstack-ansible21:43
*** d34dh0r53 has quit IRC22:09
*** rh-jelabarre has quit IRC22:23
*** rh-jelabarre has joined #openstack-ansible22:24
*** pfsmorigo_ has joined #openstack-ansible23:57
pfsmorigo_hello23:58
pfsmorigo_I'm writing some ansible playbooks to do the initial steps of the setup (prepare deployment host, target hots, configure deployment...)23:59

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!