Thursday, 2020-09-03

*** djhankb has quit IRC00:04
*** djhankb has joined #openstack-ansible00:05
*** renich has quit IRC00:24
*** renich has joined #openstack-ansible00:25
*** djhankb has quit IRC00:28
*** cshen has joined #openstack-ansible00:51
*** cshen has quit IRC00:58
*** NewJorg has quit IRC01:08
*** renich has quit IRC01:18
*** renich has joined #openstack-ansible01:35
*** cshen has joined #openstack-ansible02:54
*** cshen has quit IRC02:58
*** renich has quit IRC03:01
*** NewJorg has joined #openstack-ansible03:54
*** dave-mccowan has quit IRC04:09
*** evrardjp has quit IRC04:33
*** evrardjp has joined #openstack-ansible04:33
*** mwhahaha has quit IRC04:39
*** mwhahaha has joined #openstack-ansible04:40
*** cshen has joined #openstack-ansible04:54
*** cshen has quit IRC04:59
*** cshen has joined #openstack-ansible06:00
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_senlin master: added os_senlin role for deployment.  https://review.opendev.org/74936506:00
*** cshen has quit IRC06:04
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_keystone master: Define condition for "run_once" one time  https://review.opendev.org/74964906:33
noonedeadpunkjrosser: I found out that we don't use intersect for some roles, which make bad things when running with limit, so come up with this ^ Would be great if you could check it once available and give some feedback if this makes any sense at all...06:36
*** sshnaidm|afk is now known as sshnaidm06:50
*** mathlin has joined #openstack-ansible06:56
*** cshen has joined #openstack-ansible07:12
*** BlackFX has quit IRC07:13
jrossernoonedeadpunk: good morning07:17
*** BlackFX has joined #openstack-ansible07:18
noonedeadpunkmornings:)07:18
* noonedeadpunk wakes up earlier nowadays :)07:18
jrossergood patch btw i put some comments on it07:24
*** andrewbonney has joined #openstack-ansible07:28
cshenmorning07:30
noonedeadpunkyeah, good ones, I wasn't able to come up with naming tbh, so it totally sucked07:31
noonedeadpunkbut service_setup is specific common task....07:32
noonedeadpunkI was try to avoid it07:32
jrosserhmm07:35
* jrosser looks again07:35
jrosserwell i guess _first_keystone_play_host is actually what it is07:38
jrossermaybe thats unhelpful for why it's like that though07:38
*** tosky has joined #openstack-ansible07:40
ebbexhow about _keystone_host_for_service_setup07:41
ebbexor something in that direction.07:41
noonedeadpunkagain, service_setup for me is only about https://opendev.org/openstack/openstack-ansible-tests/src/branch/master/sync/tasks/service_setup.yml07:41
noonedeadpunkwhich is unfrotunate naming descision, but we have it...07:42
ebbexah, i see.07:42
jrosserok so choice is we name the flag after what the flag is07:43
jrosseror what the flag is for07:43
noonedeadpunkjrosser: and var don't contain host, but it's bool, which is even more confusing:(07:43
jrosser_keystone_is_first_play_host07:44
noonedeadpunkyeah, nice07:44
ebbexthat works.07:44
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_keystone master: Define condition for the first play host one time  https://review.opendev.org/74964907:48
noonedeadpunkebbex: once you're around, can I ask you to re-vote on https://review.opendev.org/#/c/746881/ ?07:56
*** gyee has quit IRC07:57
*** pcaruana has quit IRC08:30
*** ebbex has quit IRC08:37
*** pcaruana has joined #openstack-ansible08:42
*** ebbex has joined #openstack-ansible08:44
*** SecOpsNinja has joined #openstack-ansible09:16
*** MickyMan77 has joined #openstack-ansible09:21
*** bverschueren has quit IRC09:32
*** bverschueren has joined #openstack-ansible09:32
BlackFXI am totally at a loss with this galera issue09:52
MickyMan77Hi,09:53
MickyMan77I'm trying to deploy Openstack with the git master version on CentOS 8.2. But I get this error when I run the playbook, setup-hosts.yml.09:55
MickyMan77[WARNING]:  * Failed to parse /opt/openstack-ansible_21.0.0.0rc3/inventory/dynamic_inventory.py with script plugin: Inventory script (/opt/openstack-ansible_21.0.0.0rc3/inventory/dynamic_inventory.py) had an execution error: Cannot retrieve requested amount of IP addresses. Increase the container range in youropenstack_user_config.yml.[WARNING]:  *09:55
MickyMan77Failed to parse /opt/openstack-ansible_21.0.0.0rc3/inventory/dynamic_inventory.py with ini plugin: /opt/openstack-ansible_21.0.0.0rc3/inventory/dynamic_inventory.py:18:Expected key=value host variable assignment, got: argparse[WARNING]: Unable to parse /opt/openstack-ansible_21.0.0.0rc3/inventory/dynamic_inventory.py as an inventory09:55
MickyMan77source[DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set to allow bad characters in group names by default, this will change, but still be user configurable ondeprecation. This feature will be removed in version 2.10. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.[WARNING]: Invalid09:55
MickyMan77characters were found in group names but not replaced, use -vvvv to see details[WARNING]: Unable to parse /etc/openstack_deploy/inventory.ini as an inventory source[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all'09:55
MickyMan77PLAY [Install Ansible prerequisites] ***************************************************************************************************************************************************skipping: no hosts matched09:56
jrosserMickyMan77: this needs fixing the first priority "Cannot retrieve requested amount of IP addresses. Increase the container range in youropenstack_user_config.yml"10:00
MickyMan77I have 128 ip address free on the mgmt network and only 9 servers aktive, (3 compute node, 3 controller nodes and 3 Ceph nodes). Do I really need more IP address ?10:02
MickyMan77* 9 servers active10:02
*** BlackFX has quit IRC10:04
*** BlackFX has joined #openstack-ansible10:05
jrosserit means there is probably an error in openstack_user_config.yml because it is unable to allocate an IP from the range that it's been given10:13
*** omegapoint has joined #openstack-ansible10:15
jrosserMickyMan77: check the spec for the container network cidr like this https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.example#L6010:17
jrosserand also the reserved ip like this https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.example#L9310:17
omegapointhey, i'm trying to switch my OSA deployment from neutron to calico network plane. i'm using this docs page https://docs.openstack.org/openstack-ansible-os_neutron/pike/app-calico.html but there is no /etc/openstack_deploy/env.d/neutron.yml file in my setup, and the following instruction doesn't specify where to configure the hosts group10:17
omegapointi do have a network_hosts config in my openstack_user_config.yml but i'm guessing this also refers to deploying the neutron API and stuff, right? not sure how i can get rid of only the agents in this case10:21
*** MickyMan77 has quit IRC10:38
*** cshen has quit IRC11:01
*** cshen has joined #openstack-ansible11:03
*** cshen has quit IRC11:23
*** cshen has joined #openstack-ansible11:24
*** lkoranda has joined #openstack-ansible11:25
mgariepyomegapoint, which version of openstack/osa are you running ?11:30
omegapointmgariepy: pike currently11:30
mgariepythe env.d file will instruct osa to create the new container and overwrite the defaults stuff for the neutron-agent-container. you can create the file in /etc/openstack_deploy/env.d/ directory11:33
mgariepydo you use git for your /etc/openstack_deploy ?11:33
omegapointokay, so if i didn't have one in the first place i can just proceed as normal? also, i'm currently facing some issues with the LXC veth pairs, is this the right way to fix it? https://carolinafernandez.github.io/deployment/2018/03/11/Find-remove-veth-for-LXC i'm seeing "Failed to create veth pair <...>: File exists" errors, and 2 of my containers are failing to start11:34
omegapointyes11:34
mgariepythe env.d file is just to overrides what's in https://github.com/openstack/openstack-ansible/blob/stable/pike/playbooks/inventory/env.d/neutron.yml11:36
mgariepymaybe for the lxc stuff.11:37
omegapointso my assumption is correct that if the file doesn't exist, calico should deploy just fine because the previous runs already used the default configuration?11:38
mgariepyyou should consider upgrading ;)11:38
mgariepyyou will need the file for the calico service to deploy11:38
mgariepybut if there are other neutron service deployed it wont clean them up11:40
*** NewJorg has quit IRC11:51
*** arxcruz is now known as arxcruz|ruck11:52
*** lkoranda has quit IRC12:01
*** mathlin has quit IRC12:02
*** mathlin has joined #openstack-ansible12:03
*** lkoranda has joined #openstack-ansible12:04
*** mathlin has quit IRC12:08
*** NewJorg has joined #openstack-ansible12:12
*** mathlin has joined #openstack-ansible12:13
*** mathlin has quit IRC12:17
*** cshen has quit IRC12:23
*** lkoranda has quit IRC12:30
*** lkoranda has joined #openstack-ansible12:32
*** mathlin has joined #openstack-ansible12:40
*** spatel has joined #openstack-ansible12:43
spatelnoonedeadpunk: hey12:45
spateli saw your comments on senlin_pip_packages: list12:45
spatelyou are right we can remove some of package, i pick that example from heat and install all of them to make sure it won't fail for any reason.12:46
noonedeadpunkif you will patch - can you kindly also return senlin_galera_user?:)12:47
noonedeadpunk*senlin_galera_password12:47
*** NewJorg has quit IRC12:47
noonedeadpunkI think it's left only in https://review.opendev.org/#/c/749365/5/templates/senlin.conf.j2 at the moment12:48
noonedeadpunk* senlin_container_mysql_password left12:48
*** NewJorg has joined #openstack-ansible12:49
spatelnoonedeadpunk: you want me to change senlin_container_mysql_password to senlin_galera_password ?12:51
noonedeadpunkyeah, lets use it I guess as it's more logic12:51
spatelok12:52
*** mathlin has quit IRC12:55
*** mathlin has joined #openstack-ansible12:58
spatelnoonedeadpunk: in default/main.yml - senlin_pip_packages  (these packages get install in senlin container right?)12:58
spatelnoonedeadpunk: is this looks good? - http://paste.openstack.org/show/797419/12:59
noonedeadpunkright)13:00
noonedeadpunkspatel: tbh dunno what it neds13:01
spatellet me remove more and if we will see issue we can add it13:02
noonedeadpunknot sure if both pymemcache and python-memcached needed13:02
noonedeadpunkas well as python-novaclient13:02
*** mathlin has quit IRC13:02
noonedeadpunkkeystonemiddleware is in senlin requirements itself, so might be ommited here13:03
spateli removed all python-<PROJECT>client stuff13:03
spatelrest are there13:04
*** mathlin has joined #openstack-ansible13:04
spatelnoonedeadpunk: here is the final list - http://paste.openstack.org/show/797420/13:05
spatellet me know if anything want to add/remove so i can commit13:05
*** pcaruana has quit IRC13:06
spateli kept memcached because it was on other roles (so thought it might need)13:07
openstackgerritSatish Patel proposed openstack/openstack-ansible-os_senlin master: Adjusted senlin_pip_packages: and changed senlin_container_mysql_password to senlin_galera_password  https://review.opendev.org/74936513:09
*** dave-mccowan has joined #openstack-ansible13:11
*** cshen has joined #openstack-ansible13:13
spatelnoonedeadpunk: i have noticed error on some builds "Could not find the requested service senlin-api: host"  do you know why?13:20
*** djhankb has joined #openstack-ansible13:20
spatelmay be it has no inventory group info13:20
noonedeadpunkdidn't take a look yet. saw that mostly things fail on placing config file due to galera_password thing13:21
spatellets see how it goes after last patch.13:24
spatelI found i had both password set in my user_security.yml file that is why it didn't failed for me.13:24
spatelnoonedeadpunk: i am on my way to datacenter so i will see you online in 1 hour :)13:25
*** spatel has quit IRC13:25
*** Adri2000 has quit IRC13:35
*** spatel has joined #openstack-ansible13:40
*** spatel has quit IRC13:44
*** lkoranda has quit IRC13:47
*** NewJorg has quit IRC13:53
*** NewJorg has joined #openstack-ansible13:53
*** chandankumar has joined #openstack-ansible13:58
*** pcaruana has joined #openstack-ansible14:08
*** jbadiapa has joined #openstack-ansible14:37
*** pcaruana has quit IRC14:42
* jrosser makes senlin AIO....14:47
*** mathlin has quit IRC14:50
*** spatel has joined #openstack-ansible15:00
*** NewJorg has quit IRC15:08
*** NewJorg has joined #openstack-ansible15:14
*** spatel has quit IRC15:24
*** cshen has quit IRC15:27
*** cshen has joined #openstack-ansible15:31
*** spatel has joined #openstack-ansible15:50
*** gyee has joined #openstack-ansible16:05
*** omegapoint has quit IRC16:13
*** cshen has quit IRC16:14
spatelnoonedeadpunk: looks much better now after last patch - https://review.opendev.org/#/c/749365/16:17
noonedeadpunkit is16:18
noonedeadpunkjust need to fix docs and releasenotes16:19
spatelyup!16:19
noonedeadpunkI know both root causes:)16:19
spatelnice!16:19
spatelnoonedeadpunk: i have stupid question, if this repo is empty then how does zuul checking out it? https://opendev.org/openstack/openstack-ansible-os_senlin16:20
noonedeadpunkit grabs your patch16:21
spateluh..16:22
*** idlemind has joined #openstack-ansible16:37
jrosserspatel: i applied your patches and my AIO has run through with success16:43
spateljrosser: nice!16:45
spateljrosser: did you verify with "openstack cluster build info" ?16:46
*** cshen has joined #openstack-ansible16:48
jrosserspatel: doh! No BuildInfo found for None: Server Error for url: http://172.29.236.100:8778/v1/build-info, Could not find requested endpoint in Service Catalog.16:50
spatellook like you need endpoint :)16:51
jrosseri have those i think http://paste.openstack.org/show/797430/16:52
*** cshen has quit IRC16:53
spateltry curl http://172.29.236.100:877816:53
spatelif that work then must be issue at lb?16:53
*** cshen has joined #openstack-ansible16:54
jrossercurl looks reasonable http://paste.openstack.org/show/797431/16:54
spateldid you check logs i wonder if its not able to find keystone16:56
jrosseryes its keystone http://paste.openstack.org/show/797432/17:00
jrosseri have to go now17:00
spateljrosser: sure17:02
*** gregwork has quit IRC17:29
*** ThiagoCMC has quit IRC17:59
*** cshen has quit IRC18:20
*** cshen has joined #openstack-ansible18:44
*** sshnaidm is now known as sshnaidm|off18:48
*** cshen has quit IRC18:52
*** spatel has quit IRC19:20
*** andrewbonney has quit IRC19:29
*** SecOpsNinja has left #openstack-ansible19:30
*** tosky has quit IRC19:45
*** spatel has joined #openstack-ansible19:56
*** jbadiapa has quit IRC20:02
*** cshen has joined #openstack-ansible20:48
*** cshen has quit IRC20:53
*** spatel has quit IRC21:57
*** bverschueren has quit IRC22:05
*** bverschueren has joined #openstack-ansible22:06
jrossermnaser: https://opendev.org/openstack/senlin/src/branch/master/senlin/drivers/os/keystone_v3.py#L15122:24
jrosserthats going to be unfortunate for CI with a self signed cert :(22:24
mnaserjrosser: ooof why22:25
jrosseri get a slightly opaque error from keystoneauth.discover Failed to contact the endpoint at https://192.168.10.51:5000 for discovery.22:26
jrosserwhich i'm assuming is untrusted cert error22:26
*** cshen has joined #openstack-ansible22:49
*** cshen has quit IRC22:53
BlackFXIs there a way to have ansible remove all the installed containers?23:34
*** cloudnull has quit IRC23:47
*** jamesden_ has joined #openstack-ansible23:53
*** jamesdenton has quit IRC23:56

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!