Wednesday, 2020-08-26

spotzprometheanfire or admin0 either of you know when we released OSA on Ussuri?00:00
prometheanfirespotz: 11 days ago for https://github.com/openstack/openstack-ansible/releases/tag/21.0.000:02
*** npalladium has quit IRC00:02
spotzprometheanfire: I saw https://opendev.org/openstack/openstack-ansible/commit/b6b6f6eb751a7828192ff109e38bbd7c83556a62 but could Ussuri only have been released 3 months ago?!!! I have no sense of time:(00:03
prometheanfirethe branch date was around 3 months ago00:04
prometheanfireiirc00:04
spotzOk I'll go with the date on this and will patch if wrong00:04
prometheanfiredepends on what you call a 'release'00:05
prometheanfireI've been running it for a while, lol00:05
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible master: Update docs for Ussuri release  https://review.opendev.org/74805300:06
spotzwrong date is better then wrong release:)00:07
spotzI feel all upstreamy todau:)00:07
prometheanfireI should probably update when the nova hash is updated (for the cve)00:09
spotzyeah00:10
*** gyee has quit IRC00:26
*** spatel has quit IRC00:51
*** cshen has joined #openstack-ansible01:18
*** cshen has quit IRC01:22
openstackgerritMerged openstack/openstack-ansible stable/ussuri: Do not override tempest_test_blacklist in CI  https://review.opendev.org/74798202:01
ThiagoCMCBTW, I'm seeing that Ubuntu 20.04 isn't listed for Ussuri at the documentation... Is it also accurate?02:07
*** spatel has joined #openstack-ansible02:45
spateljrosser: noonedeadpunk when do you think this patch can get merge? - https://review.opendev.org/#/c/745696/02:45
spateleverytime i have to patch manually when i re-build my lab :(02:47
*** chenhaw has quit IRC02:51
*** chenhaw has joined #openstack-ansible02:52
*** rh-jelabarre has quit IRC03:08
*** chenhaw has quit IRC04:00
*** chenhaw has joined #openstack-ansible04:00
*** dave-mccowan has quit IRC04:07
*** spatel has quit IRC04:25
*** evrardjp has quit IRC04:33
*** evrardjp has joined #openstack-ansible04:33
*** shyamb has joined #openstack-ansible04:58
*** raukadah is now known as chandankumar05:44
*** redrobot has quit IRC05:53
*** miloa has joined #openstack-ansible06:04
jrosserThiagoCMC: spotz there are patches for updating the docs here https://review.opendev.org/746741 and https://review.opendev.org/746729 which need reviews06:38
*** shyamb has quit IRC06:48
*** rohit02 has joined #openstack-ansible06:55
jrossernoonedeadpunk: this fails consistently and i'm not really seeing why https://zuul.opendev.org/t/openstack/build/935188a821544edb9fc927702eefdf47/log/job-output.txt#1334106:58
jrosserlike the python interpreter is not pointing to the utility venv or something.....06:58
jrosserits from this https://review.opendev.org/#/c/747183/06:58
noonedeadpunkI think I know why...07:00
rohit02hey there! openstack-ansible ussuri installation failed on ubuntu 20 [focal] << http://paste.openstack.org/show/797155/>>07:01
noonedeadpunkoh, wait, it's on master:(07:01
*** d34dh0r53 has quit IRC07:01
noonedeadpunkand it fails on U from what I see (during the first run)07:03
noonedeadpunkI can recall some fix there but I believe that it has been backported...07:04
noonedeadpunkrohit02: good catch. we don't test it with ceph yet, so yeah, missed that07:05
rohit02@noonedeadpunk: when we will expect a fix  for ceph07:07
*** cshen has joined #openstack-ansible07:10
noonedeadpunkgive me several mins07:13
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-ceph_client master: Fix ceph-client deployment for Ubuntu Focal  https://review.opendev.org/74812807:15
noonedeadpunkrohit02: ^ you can try cherry-picking that patch and re-running the role07:15
noonedeadpunkI hope we will get this fixed in 21.0.107:16
*** d34dh0r53 has joined #openstack-ansible07:17
noonedeadpunkjrosser: I will try to take a deeper look at this designate thing today07:18
jrosseroh ok, cool. just looked weird and like something we already fixed07:18
jrosserbut i just don't see it :/07:19
noonedeadpunkMe neither but I believe we did as well07:22
*** miloa has quit IRC07:23
*** andrewbonney has joined #openstack-ansible07:26
*** tosky has joined #openstack-ansible07:40
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-openstack_hosts master: Allow 'rp_filter' to be configured by individual deployments  https://review.opendev.org/74813207:58
*** jbadiapa has joined #openstack-ansible08:11
openstackgerritMerged openstack/openstack-ansible-os_congress stable/ussuri: Replace py2 packages with py3  https://review.opendev.org/74665908:11
*** shyamb has joined #openstack-ansible08:16
openstackgerritMerged openstack/openstack-ansible-os_congress stable/ussuri: Updated from OpenStack Ansible Tests  https://review.opendev.org/73634608:24
admin0been waiting since yesterday :) https://review.opendev.org/#/c/747586/08:26
openstackgerritAndrew Bonney proposed openstack/openstack-ansible stable/ussuri: Bump SHAs for stable/ussuri  https://review.opendev.org/74758608:30
admin0is there a quick way to get the host where the l3-agent is just from an ip/uuid ?08:30
*** tosky has quit IRC08:32
*** andrewbonney has quit IRC08:33
*** tosky has joined #openstack-ansible08:33
openstackgerritMerged openstack/openstack-ansible-haproxy_server stable/ussuri: Add haproxy_ssl_all_vips variable  https://review.opendev.org/74789108:38
*** andrewbonney has joined #openstack-ansible08:38
jrosseradmin0: you can always deploy stable/ussuri if you are desperate, the release is just a tag on the branch08:40
admin0yeah .. since focal is supported, started to upgrade some and reinstall some08:40
*** npalladium has joined #openstack-ansible08:42
npalladiumManaged to get a working production setup of OpenStack with Ironic setup. Just wanted to thank you all for answering my queries and being supportive. Especially jrosser without whom I'd have been stuck. Cheers and thanks again!08:44
jrossernpalladium: thats great! particularly for ironic is there anything you think we need to add to the documentation, i suspect we could be better there08:45
*** shyamb has quit IRC08:48
npalladiumA few things that come to mind (not just Ironic; and take them with a pinch of salt as a I'm a complete newcomer to OpenStack/similar offerings): 1. I had trouble understanding what the lb IPs were supposed to do and that they should be added to the used IPs list. 2. It wasn't immediately clear that I could turn on the Ironic UI by adding a user variable; I only found it because I was looking for it. These are the only things I can think08:59
npalladiumoff of the top of my head (I'm on cloud 9 :P). Other than that it's been a fun and illuminating experience. I will try and go through my steps to see if I can find something else; if I do I will post here or try and send a PR.08:59
npalladiumIt goes without saying that pulling off the setup would've been near impossible without OSA. I tried my hand at writing a playbook for Swift in the spirit of curiosity. Learnt a lot but couldn't pull it off. :D09:07
npalladiumTalking of Swift, it's playbook seemned to expect Ceilometer installed but ceilometer playbook is called after Swift playbook. It worked after switching the two but the reason could be something else as I didn't look too deeply. The playbook wasn't able to get the gnocchi project id either but I just disabled it as I didn't need it. (Sorry for the spam; signing off for now)09:11
*** spatel has joined #openstack-ansible09:26
*** spatel has quit IRC09:30
*** SecOpsNinja has joined #openstack-ansible09:33
SecOpsNinjahello. so regarding the error of TASK [os_glance : Perform a Glance DB sync]  "Can't locate revision identified by 'ussuri_contract01'" when upgrading to the latest version of train release, is there any sugestion how to resolv this or its better that i try to force the upgrade do ussuri release 21.0?09:40
openstackgerritMerged openstack/openstack-ansible-os_masakari stable/ussuri: Add masakari-monitors to constraints  https://review.opendev.org/74788610:00
noonedeadpunknpalladium: there was some weirdness about swift and gnocchi relation tbh, but would be great if you could give some references where things went bad so I can check this out10:01
noonedeadpunkAs eventually telemetry is not a requirement for swift10:01
npalladiumnoonedeadpunk: `FAILED - RETRYING: Get Gnocchi project id` is what I get and the play fails towards the end. Worked when I disabled Gnocchi so I'm assuming it's because of that. I can shared verbose logs if necessary as I've been religiously keeping track of it.10:06
noonedeadpunkI mean can you paste task name for which this failer message was shown?10:07
npalladiumGet Gnocchi project id in swift_proxy_hosts.yml10:09
noonedeadpunkSecOpsNinja: hm, on train I don't really see how you could get required to use ussuri migrations... I think this patch has added them, so until it there should be no references.. Unless alembic itself is somehow broken https://opendev.org/openstack/glance/commit/d41362517238b9ea3741c4a565e0b73a12c55b9210:09
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/ussuri: Fix run task conditionals  https://review.opendev.org/74788410:12
npalladiumAs for ceilometer, it failed at `TASK [os_swift : Add service users to the role]` with `FAILED - RETRYING: Add service users to the role` and "msg": "User ceilometer is not valid".10:18
SecOpsNinjanoonedeadpunk,  yep didn't find any errors when i did the checkout to latest tag of stable/train before doing ./scripts/bootstrap-ansible.sh but after resolving another error in openstack i will try to upgrade to ussuri.10:23
openstackgerritMerged openstack/openstack-ansible-os_gnocchi stable/train: Fix run task conditionals  https://review.opendev.org/74788510:30
SecOpsNinjanow im finding another strange behaviour: i had the wrong "host_bind_override" in my vlan networks, but i have updated today the new one and deployed openstack ansible again (it failed in previous glance taks in openstack-ansible setup-openstack.yml) but in my compute and network hosts there is still the incorrect mapping in  /openstack/venvs/neutron-20.1.0.dev235/etc/neutron/plugins/ml2/lin10:30
SecOpsNinjauxbridge_agent.ini.  when is this change applied in openstack-ansible?10:30
openstackgerritMerged openstack/openstack-ansible master: Remove tempest_test_distro_blacklist  https://review.opendev.org/74798110:33
openstackgerritamolkahat proposed openstack/openstack-ansible-os_tempest master: Added tempest ironic resources setup.  https://review.opendev.org/72070510:40
noonedeadpunknpalladium: but this task is run only when you have defined gnocchi hosts in openstack_user_config or set swift_gnocchi_enabled variable to true... https://opendev.org/openstack/openstack-ansible-os_swift/src/branch/master/tasks/swift_proxy_hosts.yml#L2611:22
noonedeadpunkso um... are you sure you don't have gnocchi depoyed?:)11:22
noonedeadpunkjrosser: have you ever reserched on the way how to prohibit ppl to use ephemeral storage?11:33
*** rh-jelabarre has joined #openstack-ansible11:50
*** npalladium has quit IRC11:51
*** Mensis89 has joined #openstack-ansible11:52
*** sshnaidm|afk is now known as sshnaidm|mtg11:56
*** rohit02 has quit IRC12:00
*** rohit02 has joined #openstack-ansible12:00
*** rohit02 has quit IRC12:04
noonedeadpunkanswering my questions, it's with https://docs.openstack.org/nova/latest/configuration/config.html#DEFAULT.max_local_block_devices12:12
*** rohit02 has joined #openstack-ansible12:16
spotznoonedeadpunk jrosser - We need to get https://review.opendev.org/#/c/748053/ merged as we were way out of date. I used the date we cut Ussuri but if anyone knows the real date let me know. We never announced on the lists12:26
jrosserthere are already two unmerged patches to fix the docs?12:26
spotzOk let's abandon mine and get the other merged12:27
noonedeadpunkyeah. I kind of wrote in ML but it was squashed with Andrew welcoming email12:27
noonedeadpunkmy bad I guess12:27
*** aedc has joined #openstack-ansible12:27
spotznoonedeadpunk: You mind if I clarify one thing?12:29
noonedeadpunksure!12:29
noonedeadpunkI mean sure go on :)12:29
*** npalladium has joined #openstack-ansible12:29
spotzAnd add the victoria stuff from mine?12:29
noonedeadpunkI think I have victoria part here https://review.opendev.org/#/c/746741/312:30
noonedeadpunkI just want this one to be backported to the stable/ussuri12:30
noonedeadpunkwhere Victoria bit does not have much sense12:30
spotzlooking12:31
spotzOk let's leave this one as is then12:32
spotzand get it through quick and then the backport so it'll make sense and be up to date12:33
npalladiumnoonedeadpunk: To clarify I do have gnocchi deployed. I was facing the issue I talked about. I later set the swift_gnocchi_enabled: False .12:35
noonedeadpunkOk, but at the time you execute swift role, gnocchi should be already deployed12:35
spotzOk reviewed they look good we just need to get them in12:36
noonedeadpunknpalladium: https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/setup-openstack.yml#L26-L2712:37
noonedeadpunkso that's the order....12:37
noonedeadpunkor you had gnocchi deployed, but still was facing issue?12:37
* noonedeadpunk needs to reproduce that as not totally clear....12:39
npalladiumGnocchi was deployed. os-gnocchi-install.yml was run before setting swift up.12:40
noonedeadpunkoh. I think the problem might be in missing openstacksdk or smth... can you remove no_log: true and give output? https://opendev.org/openstack/openstack-ansible-os_swift/src/branch/master/tasks/swift_proxy_hosts.yml#L2712:41
jrosserlooks like that task is missing delegation to the setup host12:42
noonedeadpunkyeah12:42
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_swift master: Delegate gnocchi retrievement task to setup host  https://review.opendev.org/74821712:50
noonedeadpunknpalladium: can you check if that solves the issue? ^12:50
npalladiumI already have it lying somewhere. I'll get back to you as soon as I can login to the server. Could you elaborate on the delegation part?12:51
*** spatel has joined #openstack-ansible12:51
*** Adri2000 has joined #openstack-ansible13:05
*** cshen has quit IRC13:12
*** dave-mccowan has joined #openstack-ansible13:17
noonedeadpunkyeah I eventually just proposed patch for that so would be awesome if you could try it one when comfortable13:33
*** cshen has joined #openstack-ansible13:49
*** sshnaidm|mtg is now known as sshnaidm13:52
Adri2000hello14:21
spatelhello14:22
admin0jrosser,  https://review.opendev.org/#/c/747586/ -- is this good to go now ?14:22
Adri2000on my OSA deployment what would be a proper way to override the version of a python dependency that is installed? namely I'd like to bump the version of the amqp module, which is a dependency of oslo.messaging... (because of known issue at https://docs.openstack.org/releasenotes/oslo.messaging/rocky.html#relnotes-8-1-3-stable-rocky)14:22
spatelnoonedeadpunk: do you think we can cherry pick and add into current stable/ussuri?  https://review.opendev.org/#/c/745696/14:23
openstackgerritamolkahat proposed openstack/openstack-ansible-os_tempest master: Added tempest ironic resources setup.  https://review.opendev.org/72070514:24
noonedeadpunkspatel: we already did? https://review.opendev.org/#/c/746006/514:24
noonedeadpunkwe just need another U release to gat this change tagged14:24
spatellast Sunday i deployed environment with stable/ussuri branch and hit this bug.. hmm14:25
spateli will give it a try again..14:26
noonedeadpunkyeah... let us know if it's still an issue14:26
spatelnoonedeadpunk: yesterday i was looking for senlin and look like OSA doesn't have that project, am i right?14:26
noonedeadpunkyep. you are right, we don't have that role yet14:27
spatelI really need that project, so what is the process to onboard one? I can totally work on that project and you guys can just provide guidance14:29
ThiagoCMCjrosser, awesome, thank you!  :-D14:38
*** cshen has quit IRC14:46
*** cshen has joined #openstack-ansible14:46
noonedeadpunkspatel: sounds good:) can this wait till next tuesday so we discuss that during our regular meeting?14:51
noonedeadpunkI can create a repo and stuff for you once we take a decision :)14:51
noonedeadpunkas I'm not sure about the way it works tbh14:51
admin0guys ..  /etc/default/lxc-net , line#11 .. https://gist.github.com/a1git/940245645dad2a3fa5e76c292f25e4ea  -- what causes ansible to put 8.8.8.8 in that line in place of config-file ?14:52
*** alvinstarr has joined #openstack-ansible14:52
admin0in other clusters, its null .. here, osa always puts 8.8.8.8 and then lxc-dnsmasq fails saying cofig file 8.8.8.8 does not exist14:52
spatelnoonedeadpunk: sure, No rush, right now i am just playing with to see how integration goes so far. (its awesome project and provide EC2 level auto scaling for cloud)14:56
spatelnoonedeadpunk: This is cool video of power of senlin - https://www.youtube.com/watch?v=e9Mj7k-BoGU14:59
jrosserthat is a really good talk in that video, i went to that in denver15:16
admin0spatel, get on it .. i can help with the tests  ..15:17
jrosseradmin0: here is where the value you ask about comes from http://codesearch.openstack.org/?q=LXC_DHCP_CONFILE15:18
jrosseri don't know why it's 8.8.8.8 though15:18
jrosserbecasue the default seems to be an empty string http://codesearch.openstack.org/?q=lxc_net_dhcp_config15:19
spateladmin0: +1  (Totally, we are doing lots of autoscaling with AWS and missing that piece in our private cloud so this is right time to play)15:19
admin0i am waiting for ovn to land as well15:19
admin0also what happened to the octavia  documentation15:21
ThiagoCMCSenlin is AWESOME!15:21
*** gyee has joined #openstack-ansible15:26
* noonedeadpunk wathing video15:28
noonedeadpunkI'm all for adding more projects support:) Esp if we have more maintainers as well :p15:28
*** dirk has quit IRC15:29
noonedeadpunkas tbh right now I'm a bit sad about sunsetting some of them (like watcher)...15:31
noonedeadpunkbut I think the driver to sunsetting was lack of maintainers...15:31
*** cshen has quit IRC15:32
*** andrea15 has quit IRC15:34
spatelsenlin support webhooks so you can ship direct metrics from Prometheus to trigger scale up or down.15:36
*** andrea15 has joined #openstack-ansible15:38
admin0spatel, are you using openstack-ansible-ops to setup monitoring ?15:39
spatelno, i am using influx+telegraf15:40
spatelGrafana15:40
admin0an integrated monitoring osa will make it perfect15:41
admin0something that can detect a l3-agent being down and can alert/show in dashboard15:41
spatelThat would be good. I am using influx+telegraf for mysql/rabbitmq/memcache etc + each compute nodes cpu/memory/disk/network etc..15:43
spatelI would be great if openstack have some kind of inventory module, currently openstack doesn't have that feature (Ex: you can see number of compute nodes but it don't tell you which kind of hardware its, like server model, CPU arch, memory type etc..)15:45
spatelwe have 600 compute nodes and they are all kind of mix and match so sometime its hard to manage inventory outside openstack eco system15:46
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_horizon master: Add option to override horizon policies  https://review.opendev.org/74826415:47
*** cshen has joined #openstack-ansible15:48
*** rohit02 has quit IRC15:50
noonedeadpunkspatel: I think there should be ansible netbox module15:51
noonedeadpunkand you can fill in all inventory with ansible there iirc15:52
noonedeadpunkspatel: btw https://github.com/vexxhost/ansible-role-netbox15:52
ThiagoCMCNetbox can also be used as a Dynamic Inventory for Ansible, if I remember well.15:53
noonedeadpunkyep. you just need to decide what was first - chicken or egg I guess :)15:54
spatelnoonedeadpunk: hmm.. let me try out, we are using zabbix at present.15:54
noonedeadpunkzabbix is awesome imo15:55
noonedeadpunkbut not for handling inventory :)15:55
admin0what is the best way to monitor l3-agent up/down status ? are you using zabbix for it ?15:55
noonedeadpunkI yes15:55
noonedeadpunkI have kind of re-written zabbix-agent role so that it install required packages and distribute custom scripts, and it works really nicely with osa15:56
noonedeadpunkadmin0: but I think you can use prometheus for that as well15:57
noonedeadpunkhttps://github.com/openstack-exporter/openstack-exporter15:57
spatelnoonedeadpunk: that designate patch still not working for me, check this out - http://paste.openstack.org/show/797180/15:58
*** dirk has joined #openstack-ansible15:58
noonedeadpunkah....15:59
noonedeadpunkI guess I know why....15:59
noonedeadpunkthat's why we have bumps https://review.opendev.org/#/c/747586/15:59
spateldoes that means its not merge yet right?16:01
openstackgerritMerged openstack/openstack-ansible master: Adjust docs for Ussuri  https://review.opendev.org/74672916:02
openstackgerritMerged openstack/openstack-ansible master: [doc] Adjustments for Victoria release cycle  https://review.opendev.org/74674116:04
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible stable/ussuri: Adjust docs for Ussuri  https://review.opendev.org/74826816:08
noonedeadpunkspatel: change is merged, but bootstrap-ansible relies on the SHA's provided in the ansible-role-requirements.yml16:09
spateloh! so we need to bump SHA in order to fix it16:10
noonedeadpunkand that patch is exactly the bump)16:18
noonedeadpunkand we do releases on top of the bumps just in case16:18
spatelThank you, good to know16:22
npalladiumnoonedeadpunk: (and spatel) if you go for a more recent version of netbox and need redis, you might want to check out geerlingguy's redis role; the one which is there in lae's netbox role doc installs redis from source.16:46
spatelnpalladium: does openstack-ansible-ops has playbook to install netbox or i have to source is from outside?16:50
*** jbadiapa has quit IRC16:50
npalladiumspatel: I don't think it does but I'm not at all sure of this as I never gave it more than a cursory glance, I ended up using a separate role.17:01
spatelhow does netbox collect hardware inventory? does it has agent reporting to server or use snamp?17:01
noonedeadpunkspatel: nah, kind of manually, but, you have really a lot of thing as ansible facts17:08
npalladiumAt our datacentre, a staff member ended up manually entering the data from our old DCIM. If there are integrations that automate that I would be interested too.17:08
noonedeadpunkand since there's an ansible module (and netbox has an api) you can populate it from them17:08
noonedeadpunkeventually you can populate zabbix from ansible facts as well, just need to use curl instead of fancy module17:09
npalladiumnoonedeadpunk: Could you please elaborate on what exactly you wanted me to test wrt Gnocchi?17:11
*** SecOpsNinja has left #openstack-ansible17:12
noonedeadpunknpalladium: can you cd to /etc/ansible/roles/os_swift, and run there cherry-pick command from https://review.opendev.org/#/c/748217/17:18
noonedeadpunkand then try running swift role again with swift_gnocchi_enabled: true17:19
*** andrewbonney has quit IRC17:28
npalladiumnoonedeadpunk: Apparently someone's using the service and I've been asked to not run any scripts against it as of now. I will try to do it later, but not sure if I'll be able to anytime soon.17:39
noonedeadpunkok then)17:39
noonedeadpunkwill hope it fix the issue17:39
npalladiumSorry about that.17:40
*** aedc_ has joined #openstack-ansible17:42
*** cshen has quit IRC17:45
*** aedc has quit IRC17:45
*** cshen has joined #openstack-ansible18:01
noonedeadpunknp at all18:02
*** cshen has quit IRC18:05
openstackgerritMerged openstack/openstack-ansible-os_magnum master: Use the utility host for db setup tasks  https://review.opendev.org/74721118:08
*** sshnaidm is now known as sshnaidm|afk18:11
npalladiumI'll have to deploy another setup of OpenStack which will have different config; both of them will be used in prod simultaneously. Any suggestions on how I should organise the config files for the two? Or should I just use a different deployment host altogether?18:14
*** aedc_ has quit IRC18:15
noonedeadpunkYou can use the same deployment host, but put OSA config into another dir. ie /etc/openstack/cloud1 and /etc/openstack/cloud218:19
noonedeadpunkBut before running openstack-ansilbe you should set OSA_CONFIG_DIR env var, ie `export OSA_CONFIG_DIR=/etc/openstack/cloud2`18:20
npalladiumSounds good. I was hoping and something like this would be there. :) Thanks! (Sidenote I'll be able to test Gnocchi in that install).18:28
noonedeadpunkjrosser: I have a crazy idea that we need https://review.opendev.org/#/c/747586/ to get https://review.opendev.org/#/c/747183/ upgrade job passing :)18:31
noonedeadpunkwe can't unfrotunatelly set depends-on since I didn't implement it working on lower branches18:31
*** Mensis89 has quit IRC18:47
jrossernoonedeadpunk: done!18:50
*** npalladium has quit IRC19:16
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-galera_server master: Update galera to 10.5.5  https://review.opendev.org/74210519:23
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [WIP] Bind services to mgmt network addresses  https://review.opendev.org/67005119:26
*** NewJorg has quit IRC19:30
*** NewJorg has joined #openstack-ansible19:32
*** tosky has quit IRC19:38
*** cshen has joined #openstack-ansible19:40
*** cshen has quit IRC19:44
*** spatel has quit IRC20:47
*** ChiTo has joined #openstack-ansible21:05
ChiToHi openstack-ansible team, is there any possibility to tell the infrastucture playbooks to not install galera-cluster/mysql on LXC but on a metal/vm?21:06
ChiToor even other openstack control plane service or memcached or haproxy21:14
jrosserChiTo: you can deploy components to metal rather than LXC21:26
jrosserthis can be per component, or globally like here in the AIO configuration https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.aio.j2#L3821:27
jrosserI would suggest that starting by building an AIO with the environment variable SCENARIO=aio_metal is a good starting point21:28
jrossercurrently not all of the services can co-exist on the same metal host but that is something which is planned to be fixed in the future21:29
jrosserfor your specific question about making galera on metal you can do it per service with the env.d configuratiom,21:31
jrosserhttps://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/env.d/aio_metal.yml.example#L36-L3821:31
ChiTojrosser: thank you very much for your prompt response, I was plpaying with the is_metal in true for specific properties21:35
ChiTothanks for the links you provided me21:35
*** cshen has joined #openstack-ansible21:41
*** cshen has quit IRC21:45
openstackgerritMerged openstack/openstack-ansible stable/ussuri: Adjust docs for Ussuri  https://review.opendev.org/74826822:03
admin0ChiTo, is there a reason why you want them on metal ?22:10
admin0having them on containers provide you more flexibility .. plus allows you to install packages on the host OS without worring about breaking up the services22:11
ChiToadmin0: Totally agreed, I just have some dependencies on a different operational teams for databases, and they want to control those assets on an isolated galera cluster22:29
admin0in that case, you can easily move the db off the controllers to its own dedicated servers22:29
ChiTothe rest of the services I feel comfortable on LXC22:29
ChiToexactly but I wanted to manage the installation leveraging the openstack-ansible playbooks22:30
admin0ansible will still manage and operate it .. it will be in the servers provided by the db team22:31
ChiToI mean at the end my architecture for DBs is not "converged" with the rest of the controllers22:31
ChiToagreed, now with the metal feature I will still install them through ansible but put them isolated in dedicated servers22:31
admin04 years ago, i had the same stuff .. where the db team wanted operational control over mysql .. so had to install db in thier provided server .. which ansible will install, but was not a part of the openstack controllers22:32
ChiTounderstood, thanks for the feedback and clarification22:33
admin0i documented that process here: https://www.openstackfaq.com/openstack-liberty-private-cloud-howto/ and  the configs are here: https://github.com/a1git/openstack-cloud/tree/master/openstack_deploy22:33
admin0in case you want to move db and rabbit or what you want to servers managed by diff teams22:34
ChiTogot it, thanks!22:39
*** ChiTo has quit IRC22:42
*** hamzaachi has joined #openstack-ansible22:55
*** hamzaachi has quit IRC22:59
*** jamesdenton has quit IRC23:36
*** cshen has joined #openstack-ansible23:41
*** cshen has quit IRC23:45

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!