Monday, 2021-04-26

*** pto has joined #openstack-ansible00:00
*** pto has quit IRC00:04
*** spatel has joined #openstack-ansible01:16
*** evrardjp has quit IRC02:33
*** evrardjp has joined #openstack-ansible02:33
*** miloa has joined #openstack-ansible04:18
*** miloa has quit IRC04:21
*** spatel has quit IRC05:22
*** pto has joined #openstack-ansible05:45
*** halali_ has quit IRC05:47
*** pto has quit IRC05:50
*** halali_ has joined #openstack-ansible06:03
*** luksky has joined #openstack-ansible06:09
*** pto has joined #openstack-ansible06:14
*** luksky has quit IRC06:17
*** luksky has joined #openstack-ansible06:18
*** halali_ has quit IRC06:21
*** pto has quit IRC06:23
*** pto has joined #openstack-ansible06:24
*** pto has quit IRC06:41
*** pto has joined #openstack-ansible06:44
*** pto has quit IRC06:48
*** pto has joined #openstack-ansible06:48
*** pto_ has joined #openstack-ansible06:54
*** pto has quit IRC06:58
*** SiavashSardari has joined #openstack-ansible07:05
*** andrewbonney has joined #openstack-ansible07:07
*** rpittau|afk is now known as rpittau07:12
*** pto_ has quit IRC07:18
*** shyamb has joined #openstack-ansible07:27
*** shyam89 has joined #openstack-ansible07:28
*** tosky has joined #openstack-ansible07:42
noonedeadpunkmornings07:48
*** openstack has joined #openstack-ansible07:53
*** ChanServ sets mode: +o openstack07:53
jrossermorning08:00
jrosserthe sha bump patches didn't do so well this time08:00
*** jbadiapa has joined #openstack-ansible08:02
noonedeadpunkyeah, buster seemed to fail a lot during weekends08:03
*** shyam89 has quit IRC08:05
*** shyamb has quit IRC08:05
*** openstackgerrit has quit IRC08:11
*** pto has joined #openstack-ansible08:18
*** PrinzElvis has quit IRC08:25
*** PrinzElvis has joined #openstack-ansible08:30
noonedeadpunkbtw manila seems to be "fixed" now with https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/78224408:40
noonedeadpunk(centos passed 1 test and temouted to ssh spawned instance in second)08:41
noonedeadpunk*timeouted08:41
*** openstackgerrit has joined #openstack-ansible08:43
openstackgerritMartin Kopec proposed openstack/openstack-ansible-os_tempest master: DNM testing tempestconf's os_interface option  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/78794008:43
*** shyamb has joined #openstack-ansible08:48
*** shyam89 has joined #openstack-ansible08:48
*** shyam89 has quit IRC09:03
*** shyamb has quit IRC09:03
*** shyam89 has joined #openstack-ansible09:03
*** shyamb has joined #openstack-ansible09:03
admin0morning .. after a lot of years, i am trying to to setup  osa+ceph ( integrated ceph) but ran into an issue.. its a simple setup .. config is here: https://gist.githubusercontent.com/a1git/a76970bd9cea61335530f4e751cba385/raw/811ec17837f266aedee26bdd0a255ca392b1a55f/gistfile1.txt  and  the error (getting in ceph) is here: https://gist.githubusercontent.com/a1git/4d5cfc7a99056201bb027daf96af9455/raw/eaeb4cd0bb353e0b430b612cc155c2680c3753c8/gistfil09:26
admin0e1.txt09:26
admin0till this point, i am doing ceph separate + osa separate09:26
admin0but testing ceph+osa to check how it adds rgw endpoint and configs to enable swift backend to ceph09:27
*** shyam89 has quit IRC09:39
*** shyamb has quit IRC09:39
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_trove master: Adjust service restart handlers  https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/78795009:39
noonedeadpunkhm, that looks like there's no IP's assigned inside ceph-mon container?09:42
noonedeadpunkbut br-mgmt seems like should be having an ip address according to your config09:43
noonedeadpunkbut you're missing ceph-mon I guess for br-storage in provider_networks09:44
noonedeadpunkin group_binds09:44
admin0the file i used was openstack_user_config.yml.prod-ceph.example .. you mean i need to add something extra there ?09:51
admin0i will add the bind and try09:52
jrosseradmin0: that example is just an example, i'm not sure it's tested at all09:58
*** shyam89 has joined #openstack-ansible10:27
*** shyamb has joined #openstack-ansible10:27
jrossernoonedeadpunk: just looking some more at the pki role10:28
jrosserdo you think that we will call this once at the start and all the certs get made10:28
jrosseror will each service role call it as needed10:28
noonedeadpunkI think each role should call it10:28
noonedeadpunkbecause we don't know what certs do we need, in case we want role to be reusable10:29
jrosserok, cool10:29
noonedeadpunkwell, we probably can pass dict at the beginning in the integrated repo, but I guess it makes more sense to run from roles10:29
*** shyamb has quit IRC10:29
jrosseri've currently made it generate root / intermediate from any variables named pki_authorities_*10:30
*** shyamb has joined #openstack-ansible10:30
*** shyamb has quit IRC10:31
jrosserand i can do the same for pki_certificates_* which can be in group_vars or wherever we want them10:31
*** shyamb has joined #openstack-ansible10:31
jrosseri'll try to get some prototype done quickly then we can review / iterate a bit10:31
*** shyam89 has quit IRC10:32
*** shyam89 has joined #openstack-ansible10:33
*** pto_ has joined #openstack-ansible10:34
*** pto has quit IRC10:38
*** pto_ has quit IRC10:39
noonedeadpunkok, sounds good. I still haven't reviewed your previous iteration though :( will try to fix that today10:42
*** pcaruana has quit IRC10:45
*** pcaruana has joined #openstack-ansible10:55
*** pto has joined #openstack-ansible11:01
*** pto has quit IRC11:09
*** pto has joined #openstack-ansible11:09
*** pto has quit IRC11:24
admin0noonedeadpunk, .. ceph-mons have the br-storage address IPs also .. but the error output is the same11:26
noonedeadpunkI'm wondering if just network facts are not gathered...11:29
*** pto has joined #openstack-ansible11:30
*** shyamb has quit IRC11:36
*** shyam89 has quit IRC11:36
*** shyam89 has joined #openstack-ansible11:36
*** shyamb has joined #openstack-ansible11:36
*** SiavashSardari has joined #openstack-ansible11:42
*** pto has quit IRC11:44
*** pto has joined #openstack-ansible11:50
*** pto has quit IRC11:55
*** pto has joined #openstack-ansible11:56
*** shyam89 has quit IRC12:02
*** shyamb has quit IRC12:02
*** shyamb has joined #openstack-ansible12:09
*** shyam89 has joined #openstack-ansible12:09
*** pto has quit IRC12:23
*** shyam89 has quit IRC12:28
*** shyamb has quit IRC12:28
*** shyamb has joined #openstack-ansible12:29
*** shyam89 has joined #openstack-ansible12:29
*** rh-jelabarre has joined #openstack-ansible12:36
*** rh-jelabarre has quit IRC12:37
*** rh-jelabarre has joined #openstack-ansible12:37
*** pto has joined #openstack-ansible12:40
*** shyam89 has quit IRC12:42
*** shyamb has quit IRC12:42
*** pto has quit IRC12:42
*** pto_ has joined #openstack-ansible12:42
*** shyamb has joined #openstack-ansible12:43
*** shyam89 has joined #openstack-ansible12:43
*** shyam89 has quit IRC12:44
*** shyamb has quit IRC12:44
*** spatel_ has joined #openstack-ansible12:52
*** spatel_ is now known as spatel12:52
*** lkoranda has joined #openstack-ansible13:08
*** sshnaidm|afk is now known as sshnaidm13:10
*** SiavashSardari has quit IRC13:40
*** d34dh0r53 has quit IRC13:48
*** d34dh0r53 has joined #openstack-ansible13:57
*** openstackgerrit has quit IRC14:23
*** strattao has joined #openstack-ansible14:26
*** antonym has quit IRC14:37
*** antonym has joined #openstack-ansible14:39
*** pcaruana has quit IRC14:50
*** pcaruana has joined #openstack-ansible14:50
noonedeadpunkdoes anybody recall the issue with neutron-l3-agent during upgrade which resulted in `operation not permitted`? I just reme,ber there was pretty related bug, and a fix for it in neutron itself.. .But can;t find it...14:54
*** openstackgerrit has joined #openstack-ansible15:01
openstackgerritMerged openstack/openstack-ansible master: Fix manila ceph caps  https://review.opendev.org/c/openstack/openstack-ansible/+/78759115:01
mgariepynoonedeadpunk, do you rembember which release ?15:05
noonedeadpunkI think T?15:05
*** lkoranda has quit IRC15:06
noonedeadpunkLike during S>T upgrade or smth like that...15:06
openstackgerritJonathan Rosser proposed openstack/ansible-role-pki master: WIP - create certificate authorities  https://review.opendev.org/c/openstack/ansible-role-pki/+/78740415:07
openstackgerritJonathan Rosser proposed openstack/ansible-role-pki master: WIP - Create server certificates  https://review.opendev.org/c/openstack/ansible-role-pki/+/78802115:07
*** pto has joined #openstack-ansible15:10
*** pto_ has quit IRC15:13
*** pto has quit IRC15:14
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: WIP - test PKI role  https://review.opendev.org/c/openstack/openstack-ansible/+/78803115:28
jrossernoonedeadpunk: ^ there is enough bits in there to (hopefully) create a CA, and cut certs for haproxy and rabbitmq15:31
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-rabbitmq_server master: DNM - Test PKI role  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/78803215:35
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: WIP - test PKI role  https://review.opendev.org/c/openstack/openstack-ansible/+/78803115:37
noonedeadpunkI expected to see more variables to pass :)15:38
jrosserright yeah, so this is interesting15:39
jrosseras you don't know how many rabbit(or anything else) there are, nor what the hostnames will be15:39
noonedeadpunkwell, you actually know when you're running role?15:44
jrosserthis is what 788032 is to test out15:45
jrosserhopefully it is going to run the role against 3 rabbit containers and generate 3 certificates15:45
jrosserbased on ansible_facts['hostname'] for each of them, but it only needs one set of templated variables to do that15:46
noonedeadpunkwhile 788031 is good, do you think we can move pki include into roles themselves? like we do with venv_build?15:46
jrosseroh i see, rather than in the playbooks15:47
noonedeadpunkbecause I think in roles we can add variables to control things, like issuer or email?15:47
noonedeadpunk(which by default will be set to smth general)15:47
jrosserafaik issuer comes from the CA15:51
jrossercurrently all of that is defined in defaults/main.yml of the pki role15:52
jrosserbut could easily be overridden in the OSA vars somewhere15:53
*** mnaser has joined #openstack-ansible15:55
*** rpittau is now known as rpittau|afk15:55
*** gyee has joined #openstack-ansible15:55
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-galera_server master: DNM - Test PKI role  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/78804116:00
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Use integrated tests for rabbitmq  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/78804316:05
jrosser^ i wonder if we should leave the aio_metal jobs on there16:07
jrosserotherwise we can break rabbit from openstack POV but still have it pass16:07
noonedeadpunkwell, we have this https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/healthcheck-infrastructure.yml#L321-L33516:09
*** nicolasbock has joined #openstack-ansible16:09
noonedeadpunkso dunno....16:09
noonedeadpunkI can add metal job just in case back16:09
jrosserbut anyway i was surprised to go looking for multinode lxc infra jobs on rabbitmq and find they are not there16:10
jrosserso good to fix this16:10
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/rabbitmq-test.py is super basic though....16:11
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Use integrated tests for rabbitmq  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/78804316:13
noonedeadpunkYeah, I also went looking at jobs and realized that I've missed covering that16:18
*** recyclehero has joined #openstack-ansible16:31
*** sshnaidm is now known as sshnaidm|afk17:12
*** andrewbonney has quit IRC17:37
openstackgerritOleksandr Yeremko proposed openstack/openstack-ansible-specs master: Author: yeremko <Alexander.Yeremko@walmart.com> Date: 2021-04-23  https://review.opendev.org/c/openstack/openstack-ansible-specs/+/78805717:37
openstackgerritMerged openstack/openstack-ansible-os_keystone master: Use common name for service project description  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/78767618:51
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Use dynamic import for conditional task imports  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/78767318:59
openstackgerritMerged openstack/ansible-role-python_venv_build master: Fix facts gathering when run with tags  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/78768018:59
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Set octavia_amp_image_owner_id by default  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/78767019:01
*** gouthamr has joined #openstack-ansible19:01
openstackgerritMerged openstack/openstack-ansible-os_trove master: Adjust service restart handlers  https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/78795019:02
*** spatel has quit IRC22:01
*** tosky has quit IRC23:01

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!