Tuesday, 2020-12-15

*** tosky has quit IRC00:10
*** rfolco has quit IRC00:19
*** rfolco has joined #openstack-ansible00:19
*** rfolco has quit IRC00:25
spotzjrosser: You hear?01:16
spotzhere even01:16
*** macz_ has quit IRC01:37
*** macz_ has joined #openstack-ansible01:38
*** maharg101 has joined #openstack-ansible01:58
*** maharg101 has quit IRC02:02
*** cshen has quit IRC02:06
*** cp- has quit IRC02:50
*** cp- has joined #openstack-ansible02:51
*** kplant has joined #openstack-ansible03:12
*** gshippey has quit IRC03:29
*** lemko3 has joined #openstack-ansible03:35
*** lemko has quit IRC03:38
*** lemko3 is now known as lemko03:38
*** maharg101 has joined #openstack-ansible03:59
*** maharg101 has quit IRC04:03
*** raukadah is now known as chandankumar04:38
*** rohit02 has joined #openstack-ansible05:11
*** brad[] has quit IRC05:20
*** shyamb has joined #openstack-ansible05:21
*** shyam89 has joined #openstack-ansible05:21
rohit02noonedeadpunk: openstackansible centos 8 ussuri deployment failed with ""Error: No matching repo to modify: PowerTools."05:21
rohit02 in setup-hosts.yml playbook05:21
rohit02@Team openstackansible centos 8 ussuri deployment failed with ""Error: No matching repo to modify: PowerTools."  in setup-hosts.yml playbook05:23
*** shyamb has quit IRC05:25
*** brad[] has joined #openstack-ansible05:26
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-ansible05:33
*** shyam89 has quit IRC05:59
*** shyamb has joined #openstack-ansible06:19
*** macz_ has quit IRC06:38
*** rohit02 has quit IRC06:38
*** shyamb has quit IRC07:05
*** shyamb has joined #openstack-ansible07:06
*** cshen has joined #openstack-ansible07:14
*** gyee has quit IRC07:21
*** spatel has joined #openstack-ansible07:33
*** spatel has quit IRC07:38
*** shyamb has quit IRC07:50
*** rohit02 has joined #openstack-ansible07:52
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible stable/ussuri: Bump SHAs for stable/ussuri  https://review.opendev.org/c/openstack/openstack-ansible/+/76686007:56
*** rpittau|afk is now known as rpittau08:06
*** maharg101 has joined #openstack-ansible08:11
*** MickyMan77 has joined #openstack-ansible08:16
*** andrewbonney has joined #openstack-ansible08:17
*** MickyMan77 has quit IRC08:21
openstackgerritDr. Jens Harbott proposed openstack/openstack-ansible master: Fix galera link in aio quickstart guide  https://review.opendev.org/c/openstack/openstack-ansible/+/76709208:22
*** shyamb has joined #openstack-ansible08:34
*** macz_ has joined #openstack-ansible08:35
*** macz_ has quit IRC08:39
jrossermorning08:39
*** tosky has joined #openstack-ansible08:41
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_octavia master: [doc] Adjust octavia docs  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/76683308:47
admin0morning08:49
admin0what is the best-practice on setting up osa+ceph as to where to install the mons ? is it a good idea to give c1/c2/c3 as mons to ceph-ansible .. or create a vm inside c1/c2/c3 for mon ?08:49
*** shyamb has quit IRC08:52
*** shyamb has joined #openstack-ansible08:53
kleiniadmin0: I use now ceph-ansible currently only in test environments and there I just install MONs along with OSDs. for production best approach would be to have three dedicated machines for MONs and hard disc monster machines providing as much hard disc as possible and OSDs on them, of course09:07
admin0osd's are there .. just wondering if people are usig controllers as mons also .. or doing 3 separate mons09:08
kleinifurthermore we put optane SSDs into OSD machines for non-collocated journal to have writes returns as fast as possible09:09
admin0and also checking if there is a potential conflict in future where osa will install package X while  (if controllers on metal are mons) ceph-ansible will override them09:10
kleinidepending how large your Ceph cluster is, MONs can have some load09:10
jrosseradmin0: my ceph deployment is totally seperate from my openstack09:10
jrosserbut you can do it however you like :)09:10
jrosserimho having some decoupling between the two is good, you have ceph clients and rbd libraries for your openstack on the controllers, on metal for cinder potentially09:11
jrosserand you don't necessarily want to introduce too much version / co-installation coupling with your ceph server side stuff09:11
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_octavia master: [doc] Adjust octavia docs  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/76683309:19
admin0thanks jrosser kleini09:26
kleiniwill try now to extend my staging deployment with octavia. I saw https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/766833. is there anything else, that should be considered?09:41
noonedeadpunkandrewbonney: uh, zun seems to be instantly failing tempest for centos now... not failing, but timeouting, which is even more annoying...09:44
noonedeadpunkmaybe it needs more modern docker - dunno....09:44
andrewbonneynoonedeadpunk: it's definitely passed with the older version which is confusing me. I'll have to try spinning up an AIO again09:46
noonedeadpunkbut it was passing before 8.3 release ? haha09:46
jrossertrain looks broken https://zuul.opendev.org/t/openstack/build/252172c84e604d62a5313aa7317c2d56/log/job-output.txt#1312609:47
noonedeadpunkubuntu upgrade job?09:47
noonedeadpunkyeah09:47
jrosseryes09:47
jrosseri tried cloning the repo and checking out that SHA by hand and its just fine09:47
jrossercant reproduce what ansible is doing there09:47
jrosserbut we've seen this same thing may times before09:48
jrossersame on the train sha bump patch i think09:48
noonedeadpunkthe most frustarting is that centos 7 is good09:49
*** rohit02 has quit IRC09:50
noonedeadpunkI'm wondering if we should backport fix of the upgrade jobs to train09:50
jrosserthough it's a git checkout error isnt it?09:52
noonedeadpunkwell, we shouldn't to git checkout there, so :)09:52
noonedeadpunkI thin kwe're supposed to get zuul checked out versions09:52
jrosseroh i see - right09:53
noonedeadpunkI mean this one https://review.opendev.org/c/openstack/openstack-ansible/+/74636609:53
jrossergiven that is a CI only change then backporting is really OK09:53
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible stable/train: Make upgrade jobs get role relevant versions  https://review.opendev.org/c/openstack/openstack-ansible/+/76704809:54
noonedeadpunkat least let's see result...09:54
jrosserok, so what blocks us on release candidate for V right now09:55
admin0octavia by itself is not complete .. ( it only does http ) ..    babrican is also needed for https09:57
noonedeadpunkjrosser: I was waiting only for zun patch09:58
noonedeadpunkCan push a branching patch right now otherwise09:58
noonedeadpunkwas just under impression we can get it working as it seemed absolutely ready...09:59
*** rohit02 has joined #openstack-ansible10:02
andrewbonneynoonedeadpunk: I'll try pushing a patch with a newer docker version for centos just in case. If it works that'll be quicker than I can get an AIO ready10:05
noonedeadpunkworth trying in the meanwhile10:06
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: Update zun role to match current requirements  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76314110:08
openstackgerritMerged openstack/openstack-ansible master: Fix galera link in aio quickstart guide  https://review.opendev.org/c/openstack/openstack-ansible/+/76709210:18
*** rpittau is now known as rpittau|bbl10:27
*** spatel has joined #openstack-ansible10:39
*** spatel has quit IRC10:44
*** shyamb has quit IRC10:46
fricklertrying a simple aio setup fails for me with http://paste.openstack.org/show/801043/ . possibly triggered by the first playbook run having been interrupted due to network issues, this now happens on every retry. any hint how to clean this up? this is stable/ussuri head, btw.11:00
jrosserfrickler: is that failing during installing neutron?11:02
jrosserif so you can try openstack-ansible playbooks/os-neutron-install.yml -e venv_rebuild=yes11:03
jrosserthat will force it to start over on the venv build completely for neutron11:03
fricklerjrosser: yes, trying that now, thx11:04
*** rohit02 has quit IRC11:19
*** rohit02 has joined #openstack-ansible11:19
admin0on a ceph + osa, where osa cannot ssh to ceph mons . how do i pass cinder and glance auth keys to osa ?11:25
jrosseradmin0: documentation here https://docs.openstack.org/openstack-ansible-ceph_client/latest/config-from-file.html11:28
kleiniadmin0: and for ussuri the list of ceph_mons is still required otherwise ceph_client role is not executed11:31
jrosserdidnt we patch that?11:32
kleiniyes, it is patched but not released11:32
admin0will provide the list .. just that it is not able to ssh to that11:32
kleini21.2.0 does not contain the backport11:32
*** rfolco has joined #openstack-ansible11:46
*** alvinstarr has joined #openstack-ansible11:47
*** SecOpsNinja has joined #openstack-ansible11:48
*** mgariepy has quit IRC11:59
*** shyamb has joined #openstack-ansible12:12
openstackgerritMerged openstack/openstack-ansible master: Cleanup group_vars  https://review.opendev.org/c/openstack/openstack-ansible/+/76600112:24
*** rohit02 has quit IRC12:47
*** shyamb has quit IRC12:49
fricklerjrosser: o.k., your command worked fine and the complete run finished fine after that. would it make sense to add a note about this to the quickstart guide or is there some general "known pitfalls" guide that I did not yet find?12:55
jrosserwell, i'm not sure, in some sense it is a bug12:56
jrosserthe files that it couldnt find get deleted if something bad happens during the venv build, which sounds like your network trouble may have caused12:57
jrosserideally re-running things should have worked out better than it did12:58
jrosserin a way a lot of the documentation is in the code, so heres that var i suggested https://github.com/openstack/ansible-role-python_venv_build/blob/master/defaults/main.yml#L100-L10712:58
*** cloudnull has quit IRC12:59
*** cloudnull has joined #openstack-ansible13:00
jrosserthere is a general troubleshooting guide here https://docs.openstack.org/openstack-ansible/latest/admin/troubleshooting.html13:00
*** mgariepy has joined #openstack-ansible13:07
*** macz_ has joined #openstack-ansible13:07
*** macz_ has quit IRC13:07
*** macz_ has joined #openstack-ansible13:08
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible stable/train: Make upgrade jobs get role relevant versions  https://review.opendev.org/c/openstack/openstack-ansible/+/76704813:08
noonedeadpunkandrewbonney: nah, 20.10 docker for centos fails the same way as ubuntu focal does...13:10
andrewbonneyYeah, which is odd as it has worked before with what I assume was 20.10. I'll let you know what I find in my own AIO13:10
noonedeadpunksure - sorry for pinging :)13:11
andrewbonneyNo problem13:11
admin0does barbican have anything in the horizon ui ?13:11
admin0or is it just purely api solution ?13:11
*** rpittau|bbl is now known as rpittau13:12
*** SiavashSardari has joined #openstack-ansible13:22
fricklerjrosser: thx, quite a bit of interesting stuff in that doc. but also links to ocata docs and ask.o.o. and more disfunctional links like in my earlier patch13:33
fricklerand I'll try to reproduce and create a bug report13:33
openstackgerritMerged openstack/openstack-ansible-os_octavia master: [doc] Adjust octavia docs  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/76683313:41
*** spatel has joined #openstack-ansible13:56
*** jbadiapa has joined #openstack-ansible13:58
*** spatel has quit IRC13:59
*** spatel has joined #openstack-ansible14:01
*** mensis has joined #openstack-ansible14:12
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_monasca master: dnm  https://review.opendev.org/c/openstack/openstack-ansible-os_monasca/+/76715914:16
spateljrosser: I have successfully able to PXE boot Ubuntu 20.04 using autointall :)14:16
admin0nice14:17
spatelblog is on the way...14:17
jrosserawesome, this is the yaml based one?14:21
spatelYes14:22
jrosserseems a good improvement over the previous preseed method, especially for disk partitioning14:22
spateljrosser: disk section is little complex14:22
jrosseryou can do things like say "install OS to the two smallest disks" rather than14:23
jrosserjust hardwiring /dev/sda which then maybe changes letters in the future14:23
jrosserspatel: previously it was *horrible* :)14:24
spateljrosser: i found on centos it was very simple and just 4 like snippet currently its like this - http://paste.openstack.org/show/801051/14:24
spatelDo you have your user-data file. i would like to see what magic you have in it :)14:24
spatelbut i like yaml way because easy to read :)14:25
spatelDo you guys prefer netplan for latest version of ubuntu?14:27
admin0i like netplan .. though i am struggling to create ovs mappings :)14:27
kleininetplan is the first package I deinstall in Ubuntu. I prefer systemd-networkd14:29
jrosserspatel: something like this, templated out per host on the tftp server http://paste.openstack.org/show/801052/14:29
kleiniAnd the openstack-ansible-systemd-networkd role is great to configure systemd-networkd14:29
spateljrosser: thank you! this is neat!14:30
jrosserearly-commands and late-commands in our case download and execute shell scripts which do things that the installer cant14:31
spatelkleini: how to run network playbook when you are on same network?14:31
jrossersome specific sshd config and also those scripts hit some API endpoints with http so we know at what point the install has got to14:32
spateljrosser: its like PRE and POST script14:32
kleiniI configure only br-mgmt port for target machine during install and use the Ansible to deploy the other ports14:33
SiavashSardarispatel I like netplan too, specially now they added support for OVS14:33
spateljrosser: is this your local cache  uri: http://mirror.test.mist.rd.bbc.co.uk/gb.archive.ubuntu.com/ubuntu14:34
spatelSiavashSardari: do you have example snippet of netplan?14:34
jrosseryes, its http://<cache-server>/<original-url>/....14:35
spatelkleini: Got it. my kickstart file does all bridge/vlan and IP address setup so after kickstart my machine is ready to run openstack playbook14:36
SiavashSardarispatel I'm using maas for the netplan setup but maas does not support ovs for now, so I added ovs part myself. let me find my controller netplan config14:37
spatelMy compute-XXX number is my last octet of compute IP.14:37
spateljrosser: why did you hardcoded macaddress: 24:8a:07:58:07:f4 ?14:38
SiavashSardarispatel this is our controller netplan config for our lab installation http://paste.openstack.org/show/801056/14:39
jrosserspatel: that is a 'match' so that it is totally clear to the installer which interface is used for installation14:40
jrosserno guessing needed14:40
*** fanfi has quit IRC14:41
spateljrosser: make sense14:41
spatelSiavashSardari: Thank you! why do you have nameserver on both interface how does that work?14:42
spatelalso why did you create tun: interface?14:43
SiavashSardariI'm not sure if you guys are maas users or not, but I'm in the middle of setuping a new region and maas 2.9 has added some greate new features. you just need to setup machines and connectivity and start the machine. maas will take care of almost everithing after that14:44
SiavashSardari@spat14:44
SiavashSardarispatel The dns part is maas misconfiguration, we played too much with our lab setup. but it does not break anything14:45
SiavashSardariI'm using tun interface for neutron vxlan mesh14:46
spatelSiavashSardari: thank you, i heard about maas but never tried14:49
SiavashSardarimaas has it's own downsides too but if you just want BM management and using ubuntu, maas will make your life muuuuch easier14:53
admin0i am looking for netplan + ovs used on compute14:55
SiavashSardariadmin0 take a look at http://paste.openstack.org/show/801056/ I hope it can help14:56
SiavashSardariBTW make sure you have the latest version of netplan14:57
admin0SiavashSardari, the old 18.04 had this in /etc/network/interfaces -- https://gist.github.com/a1git/e731033a580dd7a20c22850df3d9c27f  .. i am trying to find an equivalent setting in netplan14:59
*** mensis has quit IRC14:59
SiavashSardariadmin0 sorry but I can't open your link due to sanctions. could you please use paste.openstack.org?15:06
admin0SiavashSardari, http://paste.openstack.org/show/801058/15:07
admin0this was 18.04 way of creating a ovs bridge and also plugging a port into it15:08
SiavashSardarianyone here had a scenario with ceph-ansible which different class of osds on osd-nodes are in different order? I mean in one node sda and sdb are SSDs and in other node they are HDDs and two other disk are in the SSD class. and I need to use crush_classes too15:09
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: Update zun role to match current requirements  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76314115:09
mgariepycan i get an extra vote on this one ? https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/76650415:13
SiavashSardariadmin0 it would be something like this http://paste.openstack.org/show/801059/15:14
*** gshippey has joined #openstack-ansible15:16
spatelmgariepy: this is great!15:17
mgariepyspatel, needs haproxy 2.0 tho.15:18
spatel+1 why don't we force osa to use haproxy 2.0 (haproxy 2.0 improved performance overall multi-processing/multi-threading)15:19
mgariepyit's in focal15:20
spatelnice! i am soon going to deploy it15:21
mgariepyhehe.15:21
SiavashSardarinow that you mentioned it I rememberd long ago I added something to install haproxy 2.0 in our own repo15:22
spatelQuestion related IPv6 what subnet mask i should ask to my ISP  /48 or /64 ?15:22
SiavashSardariI'll be happy if I can help with haproxy. we are already use that in production15:23
SiavashSardarispatel if you need any help with haproxy. I'll be happy to help.15:26
spatelSiavashSardari: I am using BigIP F5 on production (haproxy we used for lab only)15:27
admin0SiavashSardari, so saying  openvswitch: {} means its a ovs bridge ?15:27
spatelbut i am deploying octavia and i may trying to dig into more to boost haproxy 2.0 performance number15:27
admin0spatel, i have seen that mostly you add /48 as a network in your side15:28
admin0like in a vlan and the dc keeps the .1 of that /4815:28
spatelso /48 from ISP and create /64 for VLAN/LAN start with .115:28
SiavashSardariadmin0 pretty much yeah. if you are interested about more details, there is more info on netplan reference website15:29
*** jbadiapa has quit IRC15:40
*** jbadiapa has joined #openstack-ansible15:41
noonedeadpunk#startmeeting openstack_ansible_meeting16:01
openstackMeeting started Tue Dec 15 16:01:20 2020 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.16:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:01
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:01
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:01
noonedeadpunk#topic office hours16:01
*** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)"16:01
noonedeadpunkwe don't have new bugs, so we can just talk about current status of things16:01
noonedeadpunkI still haven't fixed ubuntu focal bug with live migrations and new way of libvirt should be configured to listen on port...16:02
*** mgariepy has quit IRC16:02
noonedeadpunknever have time to finish what I've started despite it's really critical16:02
noonedeadpunkhope will have some cycles to finish it during this week16:03
noonedeadpunkalso I think we're super ready to branch, except zun patch, which went out of hands because of new docker release..16:03
noonedeadpunkhttps://review.opendev.org/c/openstack/openstack-ansible/+/767048 seems helped upgrade jobs for ubuntu - thay failed anyway, but later16:05
noonedeadpunkhttps://zuul.opendev.org/t/openstack/build/db7fe82903284461b938e19a243847f5/log/job-output.txt#1677216:06
noonedeadpunkand it's during second run, so I think we're good here16:07
jrossero/ hello16:09
noonedeadpunk\o/16:10
noonedeadpunkhave anything to discuss?:)16:10
jrosserlets make a release!16:10
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible stable/train: Bump SHAs for stable/train  https://review.opendev.org/c/openstack/openstack-ansible/+/76685916:11
noonedeadpunkShould we wait for https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/763141 ?16:11
noonedeadpunkI'm super rady honestly... We were merging and rechecking all kind of stuff the whole weekends for that...16:12
noonedeadpunks/rady/ready/16:12
jrosserat some point we need RC for people to test16:12
noonedeadpunkwe can always backport though16:12
jrosserbackports can be done and especially as zun is basically broken anyway for a long time, perhaps better to move forward16:13
andrewbonneyCertainly if this build doesn't fix it I wouldn't wait any longer16:13
noonedeadpunkbut we won't be able to merge patches that will be issued right after branching (like change to .gitreview)16:13
jrosseroh becasue the role is broken anyway16:13
noonedeadpunkyeah16:14
jrosserwhat is focal/live migration bug?16:14
noonedeadpunkthe one I worked for sockets16:14
noonedeadpunklet me find it...16:14
noonedeadpunkhttps://bugs.launchpad.net/openstack-ansible/+bug/190384616:15
openstackLaunchpad bug 1903846 in openstack-ansible " libvirt fails to start because --listen parameter is not permitted with systemd activation socket " [Critical,In progress] - Assigned to Dmitriy Rabotyagov (noonedeadpunk)16:15
jrosserah yes and we had some patches to make .socket files16:15
noonedeadpunkhttps://review.opendev.org/c/openstack/ansible-role-systemd_service/+/765815 and https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/763194 should cover usecases on the systemd_service part16:15
noonedeadpunkjust need to make use os_nova this functionality...16:15
jrosserand thats some more vars in here? https://github.com/openstack/openstack-ansible-os_nova/blob/master/defaults/main.yml#L425-L43516:21
jrosseroh hmm well its libvirtd.socket16:21
jrosseri wonder if those patches let us create just the .socket and leave distro systemd unit alone16:30
noonedeadpunkwell, since I've followed your tip they should16:32
noonedeadpunkIdea was to set `systemd_overrides_only: true` for libvirtd service16:33
noonedeadpunkand we need to make small adjustments, so that it want sockets16:33
jrosserright, so that from the first patch then the socket made with the second16:33
noonedeadpunkyeah16:34
noonedeadpunkthat was the plan kind of16:34
*** jamesdenton has quit IRC16:36
*** jamesden_ has joined #openstack-ansible16:36
* jrosser another meeting16:37
noonedeadpunk#endmeeting16:38
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: http://bit.ly/osa-review-board-v3"16:38
openstackMeeting ended Tue Dec 15 16:38:00 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:38
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-12-15-16.01.html16:38
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-12-15-16.01.txt16:38
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-12-15-16.01.log.html16:38
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_glance stable/ussuri: Trigger uwsgi restart  https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/76714416:44
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_glance stable/train: Trigger uwsgi restart  https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/76714516:45
andrewbonneynoonedeadpunk: Zun looking promising this time. Just got past all the tempest tests17:02
noonedeadpunknice!17:02
noonedeadpunkawesome17:03
noonedeadpunkone of the best news for the last several weeks xD17:03
andrewbonney:)17:03
noonedeadpunkubuntu seems good as well17:04
*** mgariepy has joined #openstack-ansible17:15
*** SiavashSardari has quit IRC17:25
* jrosser votes17:37
jrossertheres probably a whole bunch of patches to the zun repo we can abandon now17:37
jrossernoonedeadpunk: could you take a look at this too? https://review.opendev.org/c/openstack/openstack-ansible/+/76645717:38
noonedeadpunkhas haproxy patch already merged?17:39
noonedeadpunk(just can't find it)17:40
jrosserdid this need a haproxy patch?17:40
jrosserthere was a different one for prometheus exporter support to haproxy iirc17:41
noonedeadpunkhm. ok17:41
jrosseri think this is all the needed ones for security.txt https://review.opendev.org/q/topic:%22security-txt%2217:41
noonedeadpunkbtw it's worthy a reno imo17:42
jrosseri can do one later/tomorrow, need to head out for a bit now17:43
*** rpittau is now known as rpittau|afk17:46
noonedeadpunkyeah, we can do it as a follow up for sure17:51
* noonedeadpunk will head out as well17:51
*** maharg101 has quit IRC17:58
openstackgerritMerged openstack/openstack-ansible-haproxy_server master: Add haproxy_frontend_only and haproxy_raw feature.  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/76650418:07
spatelnoonedeadpunk: sorry trying to catching up but any words on Victoria release?18:08
spatelsoon i am going to deploy new cloud on ubuntu 20.04 so thought check with you.18:09
SecOpsNinjaspatel,  i have reinstalled all the rabbitmq cluster but im still having problems on vm creation. could it be a database problem?  trying to check other components logs to see if can find the cause of rthis...18:18
spateli don't think its database18:27
SecOpsNinjaso the problem should be in the comunication of nova-scheduler and nova-compute nodes18:27
spateldid you re-deploy nova-*18:27
SecOpsNinjawhere are the logs in compute nodes? the journal of nova-compute doesn show anything usefull18:27
spateljournalctl -u nova-compute -f18:28
SecOpsNinjai reconfigured nova to use the new configurations of rabbitmq but i didn't recreated them18:28
spatelyou need to run in debug to see some goodness18:28
SecOpsNinjai suposse you are talking about nova sapi and noot the nova in compute nodes18:28
SecOpsNinjayep im enabling in nova api and will try to enable debug in compute nodes18:29
mgariepyspatel, with the haproxy_raw you can add any feature you might want or needs in the service configs.18:29
SecOpsNinjalet see try again18:29
spatelwhat happening when you creating vm ? (forget about logs, are you able to spin up vm?)18:29
spatelmgariepy: for example ?18:29
SecOpsNinjait get stukk in build forever18:30
mgariepyspatel, https://www.haproxy.com/blog/four-examples-of-haproxy-rate-limiting/18:31
spatelwhen nova-scheduler not able to find something then it get stuck or rabbitMQ not happy18:31
mgariepywhatever option you need in the frontend.18:31
spatelvery interesting..18:32
spatelrate-limiting is really good feature18:34
mgariepyany feature can be added there.18:34
spatelany good tool to benchmark haproxy?18:34
mgariepyi don't know any18:35
spatelno problem will find out from google. I want to run some good load-test to certify deployment18:36
jrosserspatel: imho the backend API will be limiting *way* before you run out of steam on haproxy18:46
spateljrosser: this load-testing is for my octavia haproxy (amphora)18:47
jrosserwe got excellent use out of this https://locust.io/18:47
jrosserit's distributed so you can stand up as many locust workers as you need18:48
spatelthanks, i will add that in my list :)18:48
SecOpsNinjahumm im detecting some errors in open-iscsi.service in compute node that is trying to connected to older isscsi lvm volumes that where already deletect... let me see if i can find where is this info to delete it18:49
jrosserwe ended up hitting radosgw with over 70gbit/sec with that18:49
spatelnice!18:49
jrosserit was a L4 haproxy in tcp mode in front of 6 radosgw physical servers18:50
johnsomTsung is pretty good as well: http://tsung.erlang-projects.org18:50
spatelI heard from couple of people about Tsung18:51
admin0on a ceph backed storage , can a instance downgrade also to a lower disk flavor ?18:51
spatelThanks johnsom18:51
*** kleini has quit IRC18:52
admin0say the flavor is 4 cpu, 4gb ram, 40gb disk .. his os takes 10gb .. can he downgrade to 2 cpu, 2gb ram, 20gb disk flavor safely /18:52
jrossera downside with locust is you have to be prepared to write some python to pretend to be your clients18:52
spateladmin0: i think if you don't have room then you should be able to do that (not seeing any issue, but method is not good practically)18:54
spatelI meant if you have room then *18:54
*** gyee has joined #openstack-ansible19:00
*** kleini has joined #openstack-ansible19:10
jawad_axdHi ! Error 43, windows 10 with gpu passthrough. Added img_hide_hypervisor_id=True to image property. Is there anything I need to do to load nvidia drivers in windows instance?19:15
SecOpsNinjafrom what im seeing in nova api logs, the scheduler selects an compute-host and  aftert nova-conductor gets the  selected compute hosts,  tries to create the block_device_mapping amnd some locks regaring acquired by "nova.context.set_target_cell.<locals>.get_or_set_cached_cell_and_set_connections"  and after tetting the locks it startes returning ERROR oslo.messaging._drivers.impl_rabbit [Er19:15
SecOpsNinjarno 113] EHOSTUNREACH. I allso locked to nova-compute service and i dont see any revelenat logs regarding this nyw vm19:15
jawad_axdspatel: yesterday was switch blocking traffic for some reason. compute was not reaching nova-api. Its fixed!19:16
admin0jawad_axd, you need to identify the "some reason" to not let it happen again19:17
*** andrewbonney has quit IRC19:17
jawad_axdActually my colleague fixed that issue, it was wrong MTU set on vlan.19:18
SecOpsNinjais there and easy what toi destroy all the openstack cluster with ansible or i need to reinstall the the machines and run openstack-ansible again?19:21
spateljawad_axd: glad to here, it must be because of vfio-pci19:21
jawad_axdspatel: You mentioned, you have done passthrough successfully, Did u try windows and try to load nvidia drivers? ery famous error 43?19:23
jawad_axd*Very famous19:23
spatelI am running standard SRIOV network instance using PIC passthrough. not fancy stuff19:23
jawad_axdOk19:26
mgariepyjawad_axd, the famous error can probably be fixed via a property.19:26
jawad_axdimg_hide_hypervisor_id=True didt fix it. What else?19:27
mgariepyhmm it was that haha19:28
mgariepyjamesden_, what gpu do you have issue with ?19:29
mgariepyoops.. jawad_axd ^^19:31
jawad_axdGeForce GTX 78019:32
mgariepywhich os ?19:42
mgariepyand which release of openstack19:42
jawad_axdI have setup stein with centos7. And I am doing passthrough with windows 10.19:43
*** maharg101 has joined #openstack-ansible19:54
mgariepyjawad_axd, have you tried with linux ?19:56
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Add ability to configure ALLOWED_HOSTS for horizon.  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/76599819:56
mgariepyjust to make sure it's not a windows 10 quirk ?19:56
jawad_axdmgariepy: No, because I need to  use it with windows for one use case.19:57
*** maharg101 has quit IRC19:59
openstackgerritMerged openstack/openstack-ansible master: Add security.txt to haproxy frontend  https://review.opendev.org/c/openstack/openstack-ansible/+/76645720:01
mgariepyyeah i can understand taht but it can git you an idea if it's a windows setting or something else to look for.20:01
jawad_axdI ll give it a shot.20:03
jawad_axdThnx20:04
mgariepythe kvm hidden was in the libvirt xml file ?20:04
jawad_axdimg_hide property  added kvm hidden true in xml file. Its there.20:06
*** cshen has quit IRC20:09
SecOpsNinjawhat could be the reason to take to long time to disable os a compute service using openstack compute service set --disable ? it returns an 504 but if i liust the service its disabled...20:09
mgariepyjawad_axd, you probably saw that already but maybe you need extra options in the libvirt file : https://passthroughpo.st/apply-error-43-workaround/20:10
*** cshen has joined #openstack-ansible20:15
*** jawad_axd has quit IRC20:59
*** jbadiapa has quit IRC21:06
ThiagoCMCHey guys! I'm curious about something that might be easy to fix... When I launch Windows Instances, it doesn't come with a virtual audio device. Is there an option to enable it?21:06
*** gshippey has quit IRC21:10
*** rfolco has quit IRC21:10
*** SecOpsNinja has left #openstack-ansible21:52
*** trident has quit IRC21:56
*** trident has joined #openstack-ansible22:00
*** spatel has quit IRC22:11
*** maharg101 has joined #openstack-ansible22:20
*** cshen has quit IRC22:33
*** maharg101 has quit IRC22:54
*** macz_ has quit IRC23:08
*** macz_ has joined #openstack-ansible23:09
*** MickyMan77 has joined #openstack-ansible23:17
*** yann-kaelig has joined #openstack-ansible23:23

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!