pfsmorigo_ | ... so I'm wondering if I run the openstack-ansible playbooks as part of my ansible | 00:00 |
---|---|---|
pfsmorigo_ | s/if I run the/if I can run the/ | 00:00 |
*** kleini_ has quit IRC | 00:57 | |
*** mmercer has quit IRC | 00:57 | |
*** gundalow has quit IRC | 00:57 | |
*** owalsh_ has joined #openstack-ansible | 01:00 | |
*** kleini_ has joined #openstack-ansible | 01:01 | |
*** mmercer has joined #openstack-ansible | 01:01 | |
*** gundalow has joined #openstack-ansible | 01:01 | |
*** gyee has quit IRC | 01:02 | |
*** fridtjof[m] has quit IRC | 01:03 | |
*** csmart has quit IRC | 01:03 | |
*** ioni has quit IRC | 01:03 | |
*** owalsh has quit IRC | 01:04 | |
*** csmart has joined #openstack-ansible | 01:10 | |
*** fridtjof[m] has joined #openstack-ansible | 01:41 | |
*** ioni has joined #openstack-ansible | 01:41 | |
*** vblando has quit IRC | 01:42 | |
elico | pfsmorigo_: I am writing my own.. it seems to me pretty hard to delve into openstack-ansbile.. | 02:02 |
*** rh-jelabarre has quit IRC | 04:32 | |
*** rh-jlabarre has joined #openstack-ansible | 04:32 | |
*** evrardjp has quit IRC | 04:33 | |
*** rh-jlabarre has quit IRC | 04:33 | |
*** evrardjp has joined #openstack-ansible | 04:33 | |
*** rh-jlabarre has joined #openstack-ansible | 04:33 | |
*** udesale has joined #openstack-ansible | 04:45 | |
*** arkan has joined #openstack-ansible | 05:54 | |
*** alvinstarr has quit IRC | 05:56 | |
*** brtknr has quit IRC | 06:17 | |
*** shyamb has joined #openstack-ansible | 06:20 | |
jrosser | pfsmorigo_: elico if you have specific questions the please just ask | 06:25 |
jrosser | it is very common to use your own playbooks (or something like foreman, or MAAS, or.....) to prepare the hosts before you use openstack-ansible | 06:25 |
jrosser | you can use whatever you like | 06:26 |
CeeMac | admin0: ping me when you get online regarding moving neutron-server to controller | 06:28 |
*** shyamb has quit IRC | 06:35 | |
*** tosky has joined #openstack-ansible | 07:39 | |
*** yolanda has quit IRC | 07:40 | |
*** shyamb has joined #openstack-ansible | 07:42 | |
janno | noonedeadpunk: i removed all container_extra_network stuff from my config, but the inventory still shows them. any idea how to get rid of that? | 07:59 |
*** shyamb has quit IRC | 07:59 | |
*** vblando has joined #openstack-ansible | 07:59 | |
noonedeadpunk | except manually drop interfaces out of /etc/openstack_deploy/openstack_inventory.json ? | 08:00 |
*** evrardjp has quit IRC | 08:06 | |
*** evrardjp has joined #openstack-ansible | 08:08 | |
admin0 | here CeeMac | 08:08 |
admin0 | i want the neutron containers to be on the controllers, but the actual l3 agents to be on compute nodes | 08:08 |
*** shyamb has joined #openstack-ansible | 08:09 | |
admin0 | pfsmorigo_, in our case its tied to a kickstart file fed by a pxe menu to select a compute, controller or a generic profile | 08:12 |
janno | noonedeadpunk: this is possible and won't break anything? :) | 08:12 |
CeeMac | hi admin0 , let me pull my notes together for you, just on a call then will send you something | 08:12 |
noonedeadpunk | janno: until it will be valid json without syntax errors :p | 08:13 |
janno | ok ^^ | 08:13 |
admin0 | CeeMac, my notes had this: https://gist.github.com/a1git/4ac94ecfadca0d66badea710786a7a0a .. confirming if that is the case | 08:13 |
admin0 | that is the neutron.yml file inside env.d | 08:13 |
noonedeadpunk | so this file is used by dynamic_inventory as a cache. So once it present, and nothing should be added to it, dynamic inventory will use cached data | 08:16 |
*** yolanda has joined #openstack-ansible | 08:17 | |
*** shyamb has quit IRC | 08:22 | |
*** shyamb has joined #openstack-ansible | 08:22 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Only create local facts folder when necessary https://review.opendev.org/743573 | 08:29 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Only create local facts folder when necessary https://review.opendev.org/743573 | 08:31 |
*** brtknr has joined #openstack-ansible | 08:47 | |
*** shyamb has quit IRC | 08:55 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/743698 | 08:57 |
CeeMac | admin0: this is what I used to move neutron-server containers to my control nodes: https://pasted.tech/pastes/d51a251e81f268bcf6c12bef837cccd2a49309b1 | 09:01 |
CeeMac | if you wanted to not have dedicated network nodes, and run the agents all on the compute nodes, you could just reference your compute nodes under 'network_hosts:' in o_u_c | 09:02 |
CeeMac | oops missed a step | 09:02 |
CeeMac | one sec | 09:02 |
openstackgerrit | Chandan Kumar (raukadah) proposed openstack/openstack-ansible master: Trigger basic ironic tempest tests on os_ironic https://review.opendev.org/736507 | 09:03 |
CeeMac | admin0: this one is better: https://pasted.tech/pastes/2eafe56b95bc8c61fee4f76a12c48ca5fcc4867f | 09:04 |
openstackgerrit | Chandan Kumar (raukadah) proposed openstack/openstack-ansible-os_ironic master: [DNM] test patch https://review.opendev.org/727067 | 09:05 |
*** shyamb has joined #openstack-ansible | 09:10 | |
*** vblando has quit IRC | 10:08 | |
*** shyamb has quit IRC | 10:15 | |
admin0 | CeeMac, under that config, network-infra_hosts: will be controllers and network_hosts can be aby | 10:16 |
admin0 | any* | 10:16 |
CeeMac | yes | 10:19 |
CeeMac | I have dedicated network nodes specified as network_hosts | 10:19 |
CeeMac | but you could double up your compute nodes for instance | 10:19 |
admin0 | hmm.. bash: openstack-ansible: command not found after completing bootstrap | 10:21 |
admin0 | centos 7.7 | 10:21 |
admin0 | 7.8 | 10:21 |
CeeMac | which play? | 10:22 |
admin0 | openstack-ansible setup-infrastructure.yml --syntax-check | 10:22 |
admin0 | i meant bootstrap failed to add path to openstack-ansible command | 10:22 |
CeeMac | odd | 10:22 |
admin0 | i am rerunning bootstrap to catch any errors if i can | 10:24 |
admin0 | what is the path to openstack-ansible ? | 10:26 |
jrosser | /usr/local/bin | 10:27 |
jrosser | i find that when testing OSA in centos cloud image VM that its not on the path | 10:27 |
admin0 | path only had /sbin:/bin:/usr/sbin:/usr/bin | 10:27 |
admin0 | 10:27 | |
admin0 | i will append mine | 10:27 |
jrosser | i just usually shrugh and put it down it being centos | 10:28 |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_aodh master: Revert CentOS 8 jobs to voting https://review.opendev.org/743540 | 10:30 |
*** shyamb has joined #openstack-ansible | 10:31 | |
admin0 | is it possible to tell OSA not to run a specific v-XXX from executing from the ansible-hardening playbook ? | 10:34 |
CeeMac | there are some overrides for it iirc | 10:35 |
CeeMac | unless you want to sledgehammer it with "apply_security_hardening: false" in u_v | 10:36 |
admin0 | i only want to disable copy login warning banner and adjust ssh server config based on stig | 10:37 |
admin0 | so its just 1 yaml file .. /etc/ansible/roles/ansible-hardening/tasks/rhel7stig/sshd.yml | 10:37 |
CeeMac | do you have the V-xxx numbers handy admin0 | 10:48 |
CeeMac | you should be able to override them from those set in here: https://github.com/openstack/ansible-hardening/blob/master/defaults/main.yml | 10:49 |
CeeMac | so for login banner, I think security_enable_graphical_login_message: no | 10:49 |
CeeMac | for instance | 10:49 |
CeeMac | and there are a bunch of different ssh ones https://github.com/openstack/ansible-hardening/blob/master/defaults/main.yml#L319 | 10:50 |
admin0 | many thanks CeeMac .. i know now | 11:03 |
janno | this did the trick: http://paste.openstack.org/show/796421/ | 11:06 |
*** mgariepy has quit IRC | 11:09 | |
CeeMac | no problem | 11:11 |
*** markvoelker has joined #openstack-ansible | 11:40 | |
*** arkan has quit IRC | 11:46 | |
*** markvoelker has quit IRC | 11:47 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Deprecate os_congress role https://review.opendev.org/742521 | 11:59 |
*** elico has quit IRC | 12:09 | |
*** shyamb has quit IRC | 12:17 | |
*** udesale_ has joined #openstack-ansible | 12:19 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-ceph_client master: Add centos8 epel GPG key https://review.opendev.org/743523 | 12:19 |
*** udesale has quit IRC | 12:21 | |
*** mgariepy has joined #openstack-ansible | 12:23 | |
admin0 | in my metrics_hosts:, ansible creates a container, but does not give it an ip .. the IP is not in the inventory file either | 12:35 |
admin0 | is the ip assigned in inventory first and then asked from dhcp, or is it captured from dhcp first and then added to inventory | 12:36 |
openstackgerrit | Merged openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/743698 | 12:37 |
*** markvoelker has joined #openstack-ansible | 12:48 | |
admin0 | m1_gnocchi_container-7038e889 is not even bridged to lxcbr0 | 12:52 |
*** dave-mccowan has joined #openstack-ansible | 13:28 | |
*** odyssey4me has joined #openstack-ansible | 13:29 | |
odyssey4me | hey folks, long time no see :) | 13:30 |
noonedeadpunk | \o/ | 13:30 |
*** andrewbonney has joined #openstack-ansible | 13:32 | |
odyssey4me | I wonder if it'd be possible to get some eyes on https://review.opendev.org/743573 - the fact setting bits are a little OSA-centric and that neutralises the issue we're seeing in TripleO-CI (we don't run this role as root like OSA does). | 13:32 |
noonedeadpunk | I've already voted for it:) | 13:34 |
odyssey4me | haha, always on top of things as always noonedeadpunk :) | 13:44 |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_gnocchi master: Fix run task conditionals https://review.opendev.org/739346 | 13:45 |
jrosser | o/ hey there | 13:46 |
noonedeadpunk | I saw that patch yestarday, but recalled to look through it only once you wrote :( | 13:46 |
mgariepy | here you go odyssey4me | 13:46 |
odyssey4me | boom, thanks to you both | 13:47 |
mgariepy | what's up odyssey4me ? | 13:47 |
odyssey4me | mgariepy: doing alright - doing the usual thing - chasing patches, fixing bugs, trying to figure out how to make openstack deployments simpler and easier to work with | 13:48 |
odyssey4me | :) | 13:49 |
mgariepy | cool | 13:49 |
noonedeadpunk | Sounds pretty good:) | 13:49 |
*** d34dh0r53 has joined #openstack-ansible | 13:49 | |
admin0 | is the ip assigned in inventory first and then asked from dhcp, or is it captured from dhcp first and then added to inventory ? | 14:06 |
admin0 | i have one container with missing eth0 | 14:06 |
jrosser | it doesnt work like that | 14:06 |
admin0 | :D | 14:07 |
jrosser | eth0 in the container always gets its IP from dnsmasq running on the host via DHCP | 14:07 |
jrosser | any other interfaces are allocated by the dynamic inventory and recorded in /etc/openstack_deploy/.... files | 14:08 |
*** sshnaidm is now known as sshnaidm|bbl | 14:17 | |
*** spatel has joined #openstack-ansible | 14:45 | |
*** irclogbot_0 has quit IRC | 14:52 | |
*** irclogbot_1 has joined #openstack-ansible | 14:58 | |
*** also_stingrayza has joined #openstack-ansible | 15:22 | |
*** stingrayza has quit IRC | 15:24 | |
*** also_stingrayza is now known as stingrayza | 15:24 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_gnocchi master: Flush handlers before doing db upgrade https://review.opendev.org/743783 | 15:26 |
*** spatel has quit IRC | 15:28 | |
*** mgariepy has quit IRC | 15:40 | |
*** shyamb has joined #openstack-ansible | 15:44 | |
*** shyamb has quit IRC | 15:53 | |
*** jbadiapa has quit IRC | 16:12 | |
*** markvoelker has quit IRC | 16:13 | |
*** udesale_ has quit IRC | 16:24 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [DNM] Decrease murano tempest concurrency https://review.opendev.org/743798 | 16:28 |
*** sshnaidm|bbl is now known as sshnaidm | 16:28 | |
*** gyee has joined #openstack-ansible | 16:28 | |
openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_murano master: Add centos-8 support https://review.opendev.org/739639 | 16:28 |
*** jbadiapa has joined #openstack-ansible | 16:36 | |
*** mgariepy has joined #openstack-ansible | 17:05 | |
*** sshnaidm is now known as sshnaidm|afk | 17:15 | |
*** andrewbonney has quit IRC | 18:21 | |
*** waxfire has quit IRC | 19:12 | |
*** waxfire has joined #openstack-ansible | 19:13 | |
*** cp- has quit IRC | 19:33 | |
openstackgerrit | Merged openstack/ansible-role-python_venv_build master: Only create local facts folder when necessary https://review.opendev.org/743573 | 21:02 |
*** jbadiapa has quit IRC | 21:11 | |
*** jbadiapa has joined #openstack-ansible | 21:11 | |
*** jbadiapa has quit IRC | 21:33 | |
openstackgerrit | Merged openstack/openstack-ansible stable/ussuri: Fix ceph deployment for CentOS 7 https://review.opendev.org/743314 | 21:48 |
*** yan0s has joined #openstack-ansible | 23:14 | |
*** tosky has quit IRC | 23:21 | |
yan0s | Hello is anyone familiar with osprofiler? | 23:34 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!