Tuesday, 2021-01-12

*** yann-kaelig has quit IRC00:06
*** macz_ has quit IRC00:10
*** tosky has quit IRC00:15
*** macz_ has joined #openstack-ansible00:51
*** macz_ has quit IRC00:56
*** dwilde has quit IRC02:04
*** macz_ has joined #openstack-ansible02:04
*** dwilde has joined #openstack-ansible02:07
*** dwilde has quit IRC02:07
*** dwilde has joined #openstack-ansible02:08
*** macz_ has quit IRC02:09
*** dwilde has quit IRC02:44
*** d34dh0r53 has quit IRC03:32
*** d34dh0r53 has joined #openstack-ansible03:33
*** d34dh0r53 has quit IRC03:35
*** d34dh0r53 has joined #openstack-ansible03:35
*** d34dh0r53 has quit IRC04:19
*** d34dh0r53 has joined #openstack-ansible04:20
*** d34dh0r53 has quit IRC04:22
*** d34dh0r53 has joined #openstack-ansible04:22
*** ChiTo has joined #openstack-ansible04:54
*** d34dh0r53 has quit IRC04:59
*** d34dh0r53 has joined #openstack-ansible04:59
*** d34dh0r53 has quit IRC05:01
*** d34dh0r53 has joined #openstack-ansible05:01
*** d34dh0r53 has quit IRC05:03
*** d34dh0r53 has joined #openstack-ansible05:03
*** d34dh0r53 has quit IRC05:03
*** d34dh0r53 has joined #openstack-ansible05:04
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-ansible05:33
*** macz_ has joined #openstack-ansible06:06
*** macz_ has quit IRC06:11
*** gyee has quit IRC06:17
*** miloa has joined #openstack-ansible07:01
*** pto has joined #openstack-ansible07:05
*** pto has quit IRC07:05
*** pto has joined #openstack-ansible07:06
*** dave-mccowan has quit IRC07:30
*** rpittau|afk is now known as rpittau08:08
*** andrewbonney has joined #openstack-ansible08:17
*** tosky has joined #openstack-ansible08:22
*** openstackgerrit has joined #openstack-ansible08:32
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: Add support for kata container runtime  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76955508:32
openstackgerritAndrew Bonney proposed openstack/openstack-ansible master: Add service for zun-wsproxy console access  https://review.opendev.org/c/openstack/openstack-ansible/+/76914208:41
openstackgerritDenys Mishchenko proposed openstack/openstack-ansible-os_neutron master: Added tag neutron-policy-overrides to just update neutron policy  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/77024808:47
*** MrClayPole has joined #openstack-ansible08:47
*** maharg101 has joined #openstack-ansible09:05
*** MrClayPole has left #openstack-ansible09:05
*** MrClayPole has joined #openstack-ansible09:08
openstackgerritDenys Mishchenko proposed openstack/openstack-ansible-os_cinder master: Added tags for policy override task  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/77025109:14
*** MickyMan77 has joined #openstack-ansible09:15
noonedeadpunkprometheanfire: I have the way to return them back (keypresses) but it's not automated yet09:36
noonedeadpunkhttps://gist.github.com/noonedeadpunk/77b92077c1bd7ae365835be61c45100c09:36
noonedeadpunkthe issue with spice was that is has been very laggy on graphic environments, like windows09:37
noonedeadpunkmaybe it's not the case anymore, no idea...09:38
noonedeadpunkandrewbonney: this one should be rebased now :( https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76914309:40
andrewbonneyNo problem, I've noticed an issue in it so I've got a fix for that which will go in too09:40
noonedeadpunkoh, ok09:41
ptoI have deinfed rsyslog_client_user_defined_targets: ... ... ... and i dont see rsyslog is configured  in urssuri. Have something been changed?09:54
pto* on ubuntu 20.0409:55
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: Add configuration for zun-wsproxy service  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/76914310:29
jrossernoonedeadpunk: i have had a first look at the new pip resolver11:01
jrosserthis is one approach we could take, which seems to work at least for os_keystone http://paste.openstack.org/show/801552/11:01
jrosserfor that role it seems to be sufficient to move the git requirement into an actual requirement rather than a constraint11:03
*** rpittau has quit IRC11:06
*** rpittau has joined #openstack-ansible11:07
noonedeadpunkhm, which kind of means that we don't need to adjust python_venv_build at all?11:13
noonedeadpunkI hoped tbh that we would be able to just adjust the single role to make all of them happy, but that diff makes sense to me11:14
jrosseryeah, for the time being yes11:14
jrosserthere is probably legacy stuff in python_venv_build working around old pip bugs which we can clean up11:14
jrosseri guess we could do some hack in python_venv_build which moves anything with git+https out of the constraints and into the requirements11:16
jrosserbut thats nasty11:16
*** structz has joined #openstack-ansible11:18
openstackgerritErik Berg proposed openstack/openstack-ansible-os_neutron master: Allow overriding firewall_driver for ovs  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/76852211:25
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_keystone master: Move keystone pip package from a constraint to a requirement  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/77027111:34
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_cinder master: Move cinder pip package from a constraint to a requirement  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/77027211:36
openstackgerritAndrew Bonney proposed openstack/openstack-ansible-os_zun master: Reduce number of processes on small systems  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/77027311:45
openstackgerritAndrew Bonney proposed openstack/openstack-ansible master: Restrict zun thread/process count for AIO deployments  https://review.opendev.org/c/openstack/openstack-ansible/+/77027411:52
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_neutron master: Move neutron pip packages from constraints to requirements  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/77027612:01
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_nova master: Move nova pip package from a constraint to a requirement  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/77027912:03
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_placement master: Move placement pip package from a constraint to a requirement  https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/77028012:05
*** structz has quit IRC12:07
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_tempest master: Move tempest pip package from a constraint to a requirement  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/77028112:09
*** yann-kaelig has joined #openstack-ansible12:09
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_horizon master: Move horizon pip packages from constraints to requirements  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/77028312:18
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: Update pip/setuptools/wheel to latest version  https://review.opendev.org/c/openstack/openstack-ansible/+/77028412:23
*** fresta has quit IRC12:30
*** fresta has joined #openstack-ansible12:30
noonedeadpunkjrosser: yep, that is nasty and I'd rather just patch every role instead12:32
jrossernoonedeadpunk: could you take a look at this patch? https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/76811712:56
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_placement master: Move placement pip package from a constraint to a requirement  https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/77028012:57
noonedeadpunkyeah, I don't like it that way...13:32
*** rfolco has joined #openstack-ansible13:41
*** yann-kaelig has quit IRC13:43
*** rh-jelabarre has quit IRC13:56
*** rh-jelabarre has joined #openstack-ansible14:03
jrossersomething is wrong with the debian-buster builds14:10
*** spatel has joined #openstack-ansible14:16
spatelmorning folks14:16
spatelnoonedeadpunk: look like we didn't release anything after RC1  - https://docs.openstack.org/releasenotes/openstack-ansible/victoria.html14:18
jrosserspatel: still trying https://review.opendev.org/c/openstack/openstack-ansible/+/770073 .......14:26
spatel+1  thanks14:27
spatelassuming its going to be RC214:28
jrosserit will be the release, we are out of time14:46
jrosserif anyone has any clue what is broken with the debian jobs it would be really helpful https://zuul.openstack.org/builds?job_name=openstack-ansible-deploy-aio_metal-debian-buster14:49
jrosseri've got a better formatted version of the problem here http://paste.openstack.org/show/801557/14:50
*** pto has quit IRC14:57
andrewbonneyjrosser: do we pull in buster-backports? Looks like there was a recent build there: https://metadata.ftp-master.debian.org/changelogs//main/q/qemu/qemu_5.2+dfsg-3~bpo10+1_changelog14:59
jrosseroh interesting14:59
jrosseryes we do https://zuul.openstack.org/build/9973f0779cf6479aa70e6dbc573eb02e/log/logs/etc/host/apt/sources.list.d/backports.list.txt15:00
*** yann-kaelig has joined #openstack-ansible15:00
jrossernot sure where Depends: libfdt1 (>= 1.6.0) is coming from though15:01
*** pcaruana has quit IRC15:03
*** yann-kaelig has quit IRC15:03
andrewbonneyThink it's in https://packages.debian.org/buster-backports/qemu-system-x8615:04
*** pcaruana has joined #openstack-ansible15:12
jrosserahha and here it is https://packages.debian.org/buster-backports/libfdt115:15
jrosserand it seems to be in the mirror https://mirror.bhs1.ovh.opendev.org/debian/pool/main/d/device-tree-compiler/15:25
andrewbonneyI'm guessing it may be a conflict with a package further down the tree that apt isn't showing15:26
jrosserlibftd1 only depends on libc15:27
mgariepywhat does depend on libftd1 ?15:28
*** d34dh0r53 has quit IRC15:51
*** macz_ has joined #openstack-ansible15:51
prometheanfirenoonedeadpunk: thanks for the link :D15:51
*** macz_ has joined #openstack-ansible15:52
prometheanfirenoonedeadpunk: that a ctrl+alt+delete patch?15:52
noonedeadpunkyep15:52
prometheanfirethere was a button for me to click for that15:53
*** d34dh0r53 has joined #openstack-ansible15:53
prometheanfiremy issue with it was that I had keypresses being eaten when the shift key was unpressed (meaning released)15:54
noonedeadpunkuh, nasty as well. but honstly it seems like project is more dead then alive15:55
noonedeadpunkoh, yes, it has been added with +- recent patch - awesome https://github.com/freedesktop/spice-html5/commit/56ddb3005e39a9e76670fec9676e667d44167bf315:55
noonedeadpunkI think it's a time to spawn aio?15:56
noonedeadpunkin case nobody has done already that...15:57
noonedeadpunk#startmeeting openstack_ansible_meeting16:00
openstackMeeting started Tue Jan 12 16:00:18 2021 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:00
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:00
noonedeadpunk#topic bug triage16:00
*** openstack changes topic to "bug triage (Meeting topic: openstack_ansible_meeting)"16:00
noonedeadpunkhey! have been a while since last meeting and there are a lot of new stuff in launchpad...16:00
noonedeadpunkhttps://bugs.launchpad.net/openstack-ansible/+bug/190851016:01
openstackLaunchpad bug 1908510 in openstack-ansible "Keystone federation part is not executed during play" [Undecided,New]16:01
noonedeadpunkI think jrosser you have laready covered that?16:01
noonedeadpunkoh, ok, fix is not working16:04
noonedeadpunkspecificly this part https://review.opendev.org/c/openstack/openstack-ansible/+/760431/1/playbooks/os-keystone-install.yml16:05
jrossero/ hello16:06
noonedeadpunkbut was also fixed afterwards....16:06
noonedeadpunkuh, this broken gerrit->launchpad integgration makes me mad16:07
jrosserit is fixed here i think https://review.opendev.org/c/openstack/openstack-ansible/+/76751316:07
noonedeadpunkyeah, alredy found :(16:08
noonedeadpunkok, next thing https://bugs.launchpad.net/openstack-ansible/+bug/190854416:08
openstackLaunchpad bug 1908544 in openstack-ansible "ROLE lxc_hosts: variable lxc_hosts_container_image_url has no effect" [Undecided,New]16:08
jrosseroh this is always true https://opendev.org/openstack/openstack-ansible-lxc_hosts/src/branch/master/defaults/main.yml#L20416:10
jrosserso this test does not work https://opendev.org/openstack/openstack-ansible-lxc_hosts/src/branch/master/tasks/lxc_cache_prestage.yml#L5216:11
noonedeadpunkbut it should be always false then?16:12
noonedeadpunkah, because of the default, yeah16:12
noonedeadpunkthat does not make sense actually...16:13
noonedeadpunkwe don;t need to set_fact at all I guess16:13
jrosserfor debian and redhat it's always set to something https://opendev.org/openstack/openstack-ansible-lxc_hosts/src/branch/master/vars/debian.yml#L1616:14
noonedeadpunkthat is totally broken ,confirming16:14
jrosserthe set fact is required for ubuntu i think to resolve the container name?16:15
jrosserthe later when: clauses are supposed to only make it run for ubuntu?16:15
noonedeadpunkyou mean that checksum is not defined?16:18
*** d34dh0r53 has quit IRC16:19
*** d34dh0r53 has joined #openstack-ansible16:19
noonedeadpunkI think yI could broke that when was fixing ubuntu image somehow16:19
jrossercertainly the vars are set up differently between ubuntu and the other distros16:20
noonedeadpunkanyway, it should be length test at least, not bool16:20
jrosserand we must change the default for lxc_hosts_container_image_url to be just empty16:21
noonedeadpunkyeah, agree16:21
noonedeadpunkor not - I think that will break everythin except ubuntu?16:21
jrosserthe whole thing needs overhauling i guess16:22
jrosseragain :(16:22
jrosserit might be better to define a bool in vars/<distro>.yml that says if the magic code to resolve the latest container is needed or not16:23
jrosserthe its just simpler and 'true' for ubuntu and false for everything else16:23
noonedeadpunk`_lxc_hosts_container_image_url` for ubuntu should not be defined, but I think empty string will give false16:23
noonedeadpunkwell, yes, we might go this way as well16:24
jrosserif _lxc_hosts_container_image_url | length = 0 and _lxc_hosts_container_image_resolve ....16:24
jrosseri.e only do it if there is no provided URL and the OS requires that we resolve16:24
jrosser+/- an underscore there16:25
noonedeadpunkyeah, ok, agreed16:25
noonedeadpunkhttps://bugs.launchpad.net/openstack-ansible/+bug/190870316:26
openstackLaunchpad bug 1908703 in openstack-ansible "federation domain not configured correct" [Undecided,New]16:26
noonedeadpunkI really was trying not to touch that part of the code as never used it with my own16:27
ThiagoCMCHey guys, which hosts are supposed to be under 'masakari-monitor_hosts:' ? The controllers or the compute nodes? The Pacemaker and Corosync were installed at the baremetal! Outside of the Masakari container. Is this expected?16:27
noonedeadpunkthese are compute hosts16:27
ThiagoCMCDamn... ok16:27
noonedeadpunkI think this has been fixed with https://opendev.org/openstack/openstack-ansible-os_keystone/commit/4c9642765e632d409c6d9028aae26f4514af703316:29
noonedeadpunkuh, no, it's different probably...16:32
noonedeadpunkbut I can hardly understand what goes wrong here....16:32
ThiagoCMCI'm wondering about the releasenotes for 22.0.0.0b1, where it says: "Support is added for deploying OpenStack on Ubuntu Focal (20.04) with source based installs. Ubuntu Cloud Archive is not available for Focal at this point so it is not possible to offer distro package based installs for Focal." - But Cloud Archive is available to focal!16:32
noonedeadpunkyes but do not contain Ussuri packeges - I guess this reno is from U.16:34
ThiagoCMCHmmm... Got it16:34
*** gshippey has joined #openstack-ansible16:35
*** ChiTo has joined #openstack-ansible16:35
jrossergshippey: any ideas on https://bugs.launchpad.net/openstack-ansible/+bug/190870316:35
openstackLaunchpad bug 1908703 in openstack-ansible "federation domain not configured correct" [Undecided,New]16:36
ChiToHi openstack-ansible team, happy new year!16:36
gshippeythank you - was literally about to go look on eavesdrop!16:36
noonedeadpunknice to see you around gshippey :)16:36
jrosserthis task https://opendev.org/openstack/openstack-ansible-os_keystone/src/branch/master/tasks/keystone_federation_sp_idp_setup.yml#L12416:38
jrossertakes trusted_id_list.domain_id16:39
jrosseri think that federated_identities is dealt with completely somewhere else, so i'm really not sure what the bug is about16:40
ChiToI am trying to install Octavia for my cloud but I am hitting this issue: FAILED! => { "msg": "'dict object' has no attribute 'address'", am I missing some specific value? it is hit on the post-installation task16:40
jrosseras the data and task highlighted do not seem to be related16:40
ChiToI have tried with vlan as well as flat types and both raise the error, my deployment does not use lxc, and it is installed on bare metal (i mean the neutron components and octavia ones)16:41
jrosserChiTo: can we look at this after the meeting?16:41
noonedeadpunkpto is not around so...16:41
ChiTojrosser: Sure thing, thanks for your reply16:42
jrosseri think we should query if the task is related to the data16:42
jrosserbecasue domain can be specified in several places16:42
noonedeadpunkcan I ask that somebody from team picked this up? As I have no experience in that area at all :(16:43
jrossersure i'll see if we can try to find out whats going on there16:44
noonedeadpunkThanks16:46
noonedeadpunknext https://bugs.launchpad.net/openstack-ansible/+bug/187216916:46
openstackLaunchpad bug 1872169 in openstack-ansible "train failed deploy setup_openstack.yaml " [Undecided,New]16:46
ThiagoCMCI did something bad yesterday, where I configured the 'masakari-monitor_hosts:' with the controllers host/ip, now, even after cleaning it up the 'openstack_deploy/conf.d/masakari.yml' with just the compute nodes, the playbooks are still trying to install pacemaker/corosync at the controllers! I'm guessing that the inventory is now polluted, how to clean it up?16:46
noonedeadpunkI guess it's because `"/openstack/venvs/rally-20.1.1.dev1/bin/pip", "install", "-U", "--constraint", "/openstack/venvs/rally-20.1.1.dev1/global-constraints.txt", "--constraint", "/openstack/venvs/rally-20.1.1.dev1/constraints.txt", "--log", "/var/log/python_venv_build.log", "--find-links", "http://localhost/os-releases/20.1.1.dev1/ubuntu-18.04-x86_64", "--trusted-host", "localhost", "pip", "setuptools", "wheel"`16:46
*** sshnaidm|ruck is now known as sshnaidm|afk16:47
jrosserconnection refused to localhost:8016:48
noonedeadpunkyeah, it should not be localhost16:48
noonedeadpunkand we define it here https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/defaults/source_install.yml#L2716:48
jrosseri wonder why localhost is an inventory target, thats not right16:49
noonedeadpunkit's not a target, but it's a utility host?16:50
noonedeadpunklocalhost is there because it's default for https://opendev.org/openstack/ansible-role-python_venv_build/src/branch/master/defaults/main.yml#L7916:51
ThiagoCMCThe Senlin endpoint on Victoria is being installed under "RegionOne", it's ignoring the configured 'service_region' name. Is there a quick fix available? I tried to declare 'senlin_service_region: "{{ service_region }}"' within 'inventory/group_vars/senlin.yml' but no effect.16:54
noonedeadpunkI really don't see how this might happen even for 20.0.016:55
*** openstackgerrit has quit IRC16:55
noonedeadpunkum, you should be able to set senlin_service_region jsut in user_variables16:56
noonedeadpunkor openstack_deploy/group_vars/senlin_all.yml16:57
jrosserif someone makes internal_lb_vip_address: localhost then that would go all kinds of wrong16:57
jrosserperhaps for that bug we need to ask to either 1) join IRC and chat or 2) attach o_u_c.yml16:58
noonedeadpunkI can't imagin somebody doing that... but....16:58
noonedeadpunk+116:58
jrosserwe should talk about pip resolver and also whatever is broken with debian right now16:59
noonedeadpunk#topic office hours16:59
*** openstack changes topic to "office hours (Meeting topic: openstack_ansible_meeting)"16:59
noonedeadpunkyeah, my fault...17:00
noonedeadpunkregarding debian - I read through, and I started deploying aio to look closer17:00
jrosserok thats cool i'd not got that far17:01
jrosserbackports repo is there by default in the CI images i think17:01
noonedeadpunkwe need it for the newer libvirt iirc17:02
jrosserright, and thats where it all starts to go wrong17:02
noonedeadpunkas otherwise nova fails17:02
noonedeadpunkwell, yes :(17:02
jrosseri expect taking the paste i made and trying to apt-install the stuff off there might get you to the same error quickly17:02
jrosserrather than run the whole AIO17:02
jrosseri looked in the infra mirror and the libfdt1 seems to be there with a new enough version17:03
noonedeadpunkuh https://opendev.org/openstack/openstack-ansible-openstack_hosts/src/branch/master/vars/debian.yml#L8917:08
noonedeadpunkeventually need to end meeting I guess and continue to check out debian17:09
noonedeadpunk#endmeeting17:09
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: http://bit.ly/osa-review-board-v3"17:09
openstackMeeting ended Tue Jan 12 17:09:25 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:09
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-01-12-16.00.html17:09
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-01-12-16.00.txt17:09
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-01-12-16.00.log.html17:09
jrosseri made a topic for the pip work https://review.opendev.org/q/topic:%22osa-new-pip%22+(status:open%20OR%20status:merged)17:10
*** d34dh0r53 has quit IRC17:10
noonedeadpunkthat is really not correct https://zuul.opendev.org/t/openstack/build/048d23bc26f84ab68c715b77e87f2aea/log/logs/etc/host/apt/sources.list.d/osbpo.list.txt17:10
jrossercompletely not right17:11
ThiagoCMCDoes Victoria supports Senlin's Horizon dashboard ui ?17:17
gshippey@noonedeadpunk o/ hello! Sorry i've been quiet, need to get back into the swing of things after the holidays17:18
*** miloa has quit IRC17:19
noonedeadpunkno worries at all!17:19
ThiagoCMCIs it ok to mix nova_compute (qemu) with zun_compute on the same host?17:20
noonedeadpunkI think no dashboard support yet17:21
ThiagoCMCOk17:21
ThiagoCMCI tried to enable Zun for the first time, with 'zun-infra_hosts:' but playbook fails: 'The group `zun_compute` is undefined.' - Wondering if I can put it at the same qemu host...?17:21
noonedeadpunkto share zun with compute you might need https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/769116 I gues17:22
noonedeadpunkjrosser: on my VM I don't see any package conflict....17:23
jrosserthats with an AIO run or with just apt-get....17:23
noonedeadpunkwith just apt-get for now17:23
noonedeadpunkoh, hm17:24
noonedeadpunkI guess I missed smth17:24
noonedeadpunkah, yes...17:25
ThiagoCMCInteresting! So, is 'openstack-ansible-os_zun/+/769116' really required to mix Zun with Nova?17:26
*** d34dh0r53 has joined #openstack-ansible17:27
*** maharg101 has quit IRC17:27
noonedeadpunkyeah, plain debian is really broken with updates repo...17:31
*** rpittau is now known as rpittau|afk17:32
noonedeadpunkbut I see the problem17:33
jrosserThiagoCMC: if you don't set the var from that patch then zun and nova will seperatly account for the CPU usage on the compute host in placement17:35
jrosserso you do double accounting17:35
ThiagoCMCAwesome, thank you for clarifying it for me!17:37
noonedeadpunkjrosser: https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/770457 that should help17:38
jrosseroh nice, yes so we allowed qemu* but not its depends-on17:39
jrossergerritbot seems to have vanished17:39
noonedeadpunkit does17:39
noonedeadpunkwell, there were no requirement for these packages to be installed before...17:40
noonedeadpunkI'm not really sure if I'm missing smth else17:40
noonedeadpunklike libpmem1 or libslirp017:41
noonedeadpunkUh, I guess I'd better create a list...17:41
noonedeadpunkeventually these are new packages that are installed during upgrade to qemu provided with backports repo17:43
*** yann-kaelig has joined #openstack-ansible17:44
ChiTojrosser: I was looking for some value for 'address' and I just noticed that the octavia_hm_hosts variable tries to get the IP address for setting the controllers and pass it to the jinja template but my concern is that I am not using lxc, but bare metal only and still getting the: "msg": "'dict object' has no attribute 'container_interface'"17:51
ChiToI am sorry it is not the container_interface but the address one17:51
jrosserChiTo: here https://opendev.org/openstack/openstack-ansible-os_octavia/src/branch/master/defaults/main.yml#L34217:54
ChiTojrosser: exactly there is where I nnoticed the reference to address key17:54
ChiTomy question is, should I set then my IP address directly to my br-lbaas on the ctrl/neutron nodes?17:55
jrosseri think it is not really a question of containers or not really17:55
jrossercontainer_networks is a variable that talks about networks, it's in the inventory17:55
ChiTothis is my network part on the opesntack_user_config.yaml: http://paste.openstack.org/show/801562/17:56
ChiToand my cidr_networks refer to a lbaas: variable with a 172.28.99.0/24 net17:56
jrosserrun the dynamic inventory and see what is created ./inventory/dynamic_inventory.py | less17:56
jrossersearch through for container_networks17:56
ChiTosure, let me do it now17:57
jrosseri have a SECNARIO=aio_metal AIO here and container_networks is defined and contains what i'd expect, no entries for lbaas though because it's not got octavia deployed17:58
ChiTogot i noticed that there is no address set on my br-lbaas: http://paste.openstack.org/show/80156317:59
ChiToI have created the br-lbaas through ovs on my centos because I am using ovs for everything not linux bridges, so should I set the address first then?18:00
jrosserwell i don't know, you kind of cant have it both ways18:02
jrosserif you have assigned the address yourself then it won't be in the inventory data18:03
ChiTobut my question then is how the inventory getting the address?18:03
ChiToif I don't set it previously18:04
ChiTojrosser: instead of setting a br-mgmt then I should set on those servers the IP that will be used for the br-lbaas?18:05
jrosserfor a containerised deployment the inventory would assign addresses to eth14 in the lxc containers and those would be present for the jinja to extract18:06
ChiToand what happen in my case where I have no lxc containers?18:07
ChiTobut everythinig on metal18:07
jrosserok so i check what is happening on an lxc deployment18:09
jrosserthis is what i see in the inventory for container_networks for the octavia container http://paste.openstack.org/show/801564/18:10
jrosserand address is populated, becasue the inventory has assigned that IP automatically18:10
jrosserthis means that for a metal deployment the jinja in the octavia role defaults/main.yml is not appropriate18:11
*** d34dh0r53 has quit IRC18:13
ChiTojrosser: understood, then my lbaas network should be routed from my br-mgmt right? I have a vlan reserved physically separated for managing the lbaas18:14
jrosseryou can do it however you like18:14
ChiTojrosser: oh sorry I noticed dthe static route is created internally on the lxc and add it the veth18:15
jrosseri would create my own jinja override in user_variables.yml for octavia_hm_hosts which generates the data you want18:15
jrosserif you want to do it routed then that is fine - i think jamesdenton may have an example for that somewhere18:15
jrosserif you want a dedicated interface then thats also fine, you just have to create an expression to gather the right addresses18:16
ChiTojrosser: got it, the octavia_hm_hosts is a dict? if I have 3 nodes for octavia then it would be: ['172.28.99.10','172.28.99.11',172.28.99.12'18:17
ChiTosorry I forgot to close the bracket18:17
ChiToor it is a comma separated list?18:17
jrosseri think a string with commas18:18
jrossercodesearch is a big help here to find how it's used https://codesearch.opendev.org/?q=octavia_hm_hosts18:19
ChiTojrosser: got it, let me try to override it to set it from my linux conf, thanks for the reference18:19
ChiTojrosser: I just realized there is a group octavia-infra_hosts but then the API is installed along with the hm, workers, etc. right?18:20
ChiTocan we separate the API from the other components?18:20
ChiTolet's say an octavia_hosts and octavia-infra_hosts  groups?18:21
jrosseri'm not sure why you'd want to do that18:21
ChiToI think it is the same situation as the neutron-infra18:21
ChiTobecause I control the APIs with a separated "managing operations team" from their own load balancers18:21
jrossernot really - the actual loadblanacing is done in nova VM that get created on compute nodes18:21
ChiToI mean the haproxy's separated from the dataplane functionalities18:21
jrosserthe haproxy is never on the controller18:22
ChiToagreed, but that is why my operations team are focusing only on the API level with those nodes and the networking team on the rest of the datapath flow18:22
jrosseryou could try splitting it out into different hosts as ansible groups are defined for them all18:27
jrosserwould need a bunch of messing in env.d maybe18:27
*** yann-kaelig has quit IRC18:29
ChiTojrosser: that is true I did a mess actually trying to separate the neutron api from the other components/agents and it took me a lot of time to get it back18:29
jrosserimho splitting the API away from the other parts is not so helpful18:30
jrosserwhen somehting doesnt work the answer is likley in the log of the thing thats now elsewhere18:30
jrosserit's not really datapath18:30
ChiTojrosser: I agree, at the end the oeprational practicecs are doing the same methodologies to fix a possible issue18:30
*** d34dh0r53 has joined #openstack-ansible18:31
jrosseranyway - it looks like the os_octavia role may not natively support metal deployments unless i'm missing something18:31
jrosseran override seems to be needed for the lbaas network addresses18:32
ChiTojrosser: I am running it right now and now it was set: controller_ip_port_list = 172.28.99.21:5555,172.28.99.22:5555,172.28.99.23:5555,172.28.99.24:5555,172.28.99.25:5555,172.28.99.26:555518:32
ChiToon every octavia.conf file18:32
ChiTois there a clean way to remove the venvs within /openstack for a specific service?18:35
ChiTosince I am on metal I have found is more difficult to tear it down or remove the packages/venv, unless is done manually whereis a lxc it is much more easier by only destroying the container18:36
jrosserthinking about the octavia_hm_hosts variable you should probably run up an AIO with SCENARIO=aio_metal_octavia and see how it works there18:38
jrosserbecasue we test octavia/metal deployment in CI but just for one node18:38
jrosserto recreate the venv you can use -e venv_rebuild=yes18:39
ChiTothanks for the tip18:39
jrosserbut yes one of the downsides of the metal deploy is stuff all spread on the host that you can't just delete18:39
ChiToso the SCENARIO I just pass it as a shell variable right?18:40
jrosseryes before doing ./scripts/boostrap-aio.sh18:40
jrosserit decides which components get deploys18:40
jrosseralso you said you are on centos18:40
jrosserkind of don't know what to say there tbh18:40
ChiTojrosser: exactly that is my concern, on metal the things gets worst when it comes to all the stuff spread as you mentioned18:42
ChiTojrosser: I think I need to get back to the lxc approach, which now I find it 100% architected better, ,sorry for my confusion18:43
*** ianychoi_ has quit IRC18:46
ChiToI am goinng to try the bootstrap with aio_metal_octavia on my devel env and to keep you updated to test it as well18:47
ChiTowith multiple nodes18:47
jrosserChiTo: though seriously though for Centos, if you are doing a new deployment right now, as things currently stand OSA has no answer for Centos Stream18:47
ChiTojrosser: thanks for the advise, I am mcurrently on train, and my cconcern now is with future openstack versions and centos 8.x/stream, I need to make a decision by EOY18:48
jrosserwe are completely reliant on things from EPEL, and to date theres no equivalents for Stream18:48
ChiTojrosser: Since Centos 7.X is getting its EOL until 2024, are you planning keep maintenance to the existing code at least to centos 7.x?18:49
ChiToor would you drop it eentually?18:49
jrosserChiTo: Centos-7 is already dropped in stable/victoria for OSA18:51
jrosserby some miracle we made it work for stable/ussuri but the rest of openstack i think dropped it before then18:52
ChiTojrosser: understood thanks for the news, then I thinn the good path to go is Ubuntu and Victoria right?18:52
jrosserwell all i can say is we don't have a good answer for what happens after Centos-8 EOL18:53
jrosserideally someone will step forward as a maintainer for the Centos stuff18:53
ChiTomaybe rocky linux?18:53
jrosserit's the same story, someone would have to commit to support that18:54
jrosserlike actually dive in and fix the CI every time it breaks18:54
jrosserwe've had support for other OS, Suse and so in the past and they have become too much tech debt to carry without committed maintainers18:55
ThiagoCMCHey guys, I just made something really simple but super cool! A Heat Template that deploys OSA AIO with 1 command! Check it out! https://github.com/tmartinx/svauto/blob/main/misc/os-heat-templates/osa-aio1.yaml18:55
ChiTojrosser: got it, and I assume Victoria was also dropped for CentOS 8.x on OSA right?18:56
ThiagoCMCYou launch this template and after about 1 hour, Horizon will be available at the Stack's Floating IP!18:56
jrosserChiTo: Victoria will release with Centos-8 support but the EOL for Centos-8 will come around much quicker than the EOL for Victoria, so thats a big problem18:57
ChiTounderstood, in my opinion then I would keep now with CentOS 7.x until understanding what is going to happen with CentOS stream and a possible maintenance path in the future19:00
ChiToit is very likely I have to move my cloud to Ubuntu19:00
ChiTos/migrate it19:00
*** gyee has joined #openstack-ansible19:02
*** andrewbonney has quit IRC19:07
avagihi,19:21
avagiI am fighting with the switft proxy-server starting issue19:21
avagi  STDERR: The option "xxxxxx" is not known to keystonemiddleware19:21
avagilater, when the server is receiving requests:19:21
avagi  STDERR: ERROR:oslo.messaging._drivers.impl_rabbit:Connection failed: Server unexpectedly closed connection19:21
avagienvironment: OSA 21.2.0, OS Rocky19:21
avagido you have any suggestions, how to fix this?19:21
avagithanks for your help in advance!19:21
ThiagoCMCnoonedeadpunk, the 'TASK [python_venv_build : Install python packages into the venv]' - Error: raise Exception("pkg-config binary is required to compile libvirt-python")19:22
ThiagoCMCSorry, masakari monitros at compute19:22
*** maharg101 has joined #openstack-ansible19:23
*** spatel has quit IRC19:24
ThiagoCMCI'm not sure if I apt install pkg-config or pkgconf ... Any suggestion?19:25
ThiagoCMCI'll go pkg-config lol19:27
*** maharg101 has quit IRC19:28
ThiagoCMCThe package 'libvirt-dev' is also necessary for masakari-monitors at the compute nodes...19:34
jrosserThiagoCMC: that sounds like it's trying to compile something, wouldnt that ususally be on the repo server if it's python wheels?19:35
ThiagoCMCI'm wondering about that too!19:35
ThiagoCMCBut this is what it's happening with 'stable/victoria'19:35
ThiagoCMCThe 'os-masakari-install.yml' is building things at the compute nodes.19:36
*** spatel has joined #openstack-ansible19:36
*** spatel has quit IRC19:36
ThiagoCMCI can see it at '/var/log/python_venv_build.log'19:36
*** spatel has joined #openstack-ansible19:36
ThiagoCMCThe compute node log shows: "Installing collected packages: libvirt-python, masakari-monitors", "Successfully installed libvirt-python-6.10.0 masakari-monitors-10.0.0"19:38
jrosserit should be straightforward to figure out whats happening19:39
jrosserjust compare what happens with the venv build to some other role like glance19:40
ThiagoCMCOk... It is installed now at the compute nodes! Whew19:41
ThiagoCMCBut my controllers are now polluted because I make a mistake and tried to install the masakari-monitors at the Controllers, instead of the Computes... I'm so stupid hehe - Now I don't know how to clean 'openstack_deploy/openstack_inventory.json'  :-(19:42
ThiagoCMCDone.   \o/19:52
ThiagoCMCThe Masakari playbooks are all good but, I'm seeing an error at the monitors:19:55
ThiagoCMCmasakari-hostmonitor: WARNING masakarimonitors.hostmonitor.host_handler.handle_host [-] Corosync communication using 'br-mgmt' is failed.: oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command.19:56
ThiagoCMCERROR masakarimonitors.hostmonitor.host_handler.handle_host [-] Corosync communication is failed.19:56
ThiagoCMCPacemaker cluster doesn't have quorum.19:56
ThiagoCMC:-(19:56
ThiagoCMC=P19:56
ThiagoCMCThe `crm_verify -L -V` shows: error: Resource start-up disabled since no STONITH resources have been defined - Either configure some or disable STONITH with the stonith-enabled option - Might be it...19:59
ThiagoCMCThe corosync daemon looks ok20:00
*** yann-kaelig has joined #openstack-ansible20:02
*** arxcruz has quit IRC20:14
*** openstackgerrit has joined #openstack-ansible20:47
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Add extra packages from Debian updates  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/77045720:47
spatelfolks, any idea what is this - http://paste.openstack.org/show/801568/21:11
spatelI am trying to do  "openstack-ansible os-horizon-install.yml --tags horizon-config"21:20
spatellook like tags is causing that issue.21:20
*** gshippey has quit IRC21:24
*** maharg101 has joined #openstack-ansible21:24
*** rfolco has quit IRC21:25
*** maharg101 has quit IRC21:29
*** yann-kaelig has quit IRC21:37
*** rh-jelabarre has quit IRC22:04
*** spatel has quit IRC22:35
ThiagoCMCnoonedeadpunk, I think that I found a problem with the generated corosync.conf (masakari-monitors), look: http://paste.openstack.org/show/801571/ - The same IP is repeated at ring0_addr! But I believe that it should point to the other 2 (.21 and .22) as well... Right?22:59
ThiagoCMCAha! Now I see 'corosync:   [QUORUM] Members[2]: 1 3'23:02
ThiagoCMC'masakari-hostmonitor ... Corosync communication using 'br-mgmt' is normal.' Wheee! Getting there...  :-D23:04
ThiagoCMCBut, still... 'Pacemaker cluster doesn't have quorum.'  :-/23:05
ThiagoCMCnoonedeadpunk, BTW, thank you for this: https://github.com/noonedeadpunk/ansible-pacemaker-corosync !!  lol23:06
*** arxcruz has joined #openstack-ansible23:09
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_nova master: Add extra packages from Debian updates  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/77045723:11
*** spatel has joined #openstack-ansible23:46
ThiagoCMCAha! I had to `apt install pcs -y ; pcs property set stonith-enabled=false` - Pacemaker has quorum! I also restarted the other pcs nodes as well.23:53
*** spatel has quit IRC23:54

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!