Wednesday, 2021-05-19

*** macz_ has quit IRC00:09
*** gshippey has quit IRC00:18
*** spatel_ has joined #openstack-ansible01:49
*** spatel_ is now known as spatel01:49
*** spatel has quit IRC01:51
*** macz_ has joined #openstack-ansible02:10
*** macz_ has quit IRC02:14
*** rohit02 has joined #openstack-ansible02:40
*** klamath_atx has quit IRC02:53
*** snapdeal has joined #openstack-ansible03:10
*** rohit02 has quit IRC03:14
*** rohit02 has joined #openstack-ansible03:21
*** rohit02 has quit IRC03:24
*** rohit02 has joined #openstack-ansible03:24
*** rohit02 has quit IRC03:29
*** rohit02 has joined #openstack-ansible03:29
*** macz_ has joined #openstack-ansible03:46
*** cloudnull has joined #openstack-ansible03:47
*** macz_ has quit IRC03:51
*** pto has quit IRC04:48
*** pto has joined #openstack-ansible04:49
*** macz_ has joined #openstack-ansible05:47
*** macz_ has quit IRC05:52
*** miloa has joined #openstack-ansible06:23
*** miloa has quit IRC06:26
*** shyamb has joined #openstack-ansible06:28
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible master: Gather additional required facts to min  https://review.opendev.org/c/openstack/openstack-ansible/+/78977606:59
*** shyamb has quit IRC07:04
*** shyamb has joined #openstack-ansible07:05
*** jawad_axd has quit IRC07:07
*** jawad_axd has joined #openstack-ansible07:07
*** shyam89 has joined #openstack-ansible07:11
*** jawad_axd has quit IRC07:11
*** shyamb has quit IRC07:12
*** andrewbonney has joined #openstack-ansible07:17
*** rpittau|afk is now known as rpittau07:33
*** jawad_axd has joined #openstack-ansible07:37
*** tosky has joined #openstack-ansible07:38
*** shyam89 has quit IRC07:47
*** shyam89 has joined #openstack-ansible07:48
*** macz_ has joined #openstack-ansible07:48
*** macz_ has quit IRC07:52
*** ChanServ has quit IRC07:54
*** ChanServ has joined #openstack-ansible07:54
*** services. sets mode: +o ChanServ07:54
*** jbadiapa has joined #openstack-ansible07:57
*** shyam89 has quit IRC07:58
*** shyamb has joined #openstack-ansible08:02
noonedeadpunkdoh... linters are not happy by themselves for some reason...08:03
mantiI should be able to use cinder volumes with lvm backend to store glance images on stable victoria, right?08:04
mantiI can get cinder volumes to work e.g. with instances, and glance images work with file, but I must be missing some configuration because glance is not able to use cinder now08:06
*** shyamb has quit IRC08:07
mantiAnd the error message is not helpful, wtf initiator: "The volume driver requires the iSCSI initiator name in the connector.08:11
mantiException during message handling: cinder.exception.InvalidInput: Invalid input received: Connector doesn't have required information: initiator"08:11
noonedeadpunkmanti: um, no. you don't use cinder volumes to store glance images at all. Glance has it's own storage and cinder it's own08:15
noonedeadpunkok, linters broken because of the ansible 4.0.0 release....08:16
mantinoonedeadpunk: umm https://docs.openstack.org/cinder/latest/admin/blockstorage-volume-backed-image.html ?08:16
noonedeadpunkah, well ,that08:17
noonedeadpunkI just wouldn't call it the way you did, so got confused:)08:20
jrossermanti: maybe paste some more context for your error?08:20
jrossernot sure if we are talking about error messages in glance / cinder / somewhere else tbh08:20
mantimaybe I have misunderstanding with that, what I'm trying to do is get glance store images on the cinder-volumes-pool because there is enough storage08:21
mantihttp://paste.openstack.org/show/805471/ this error is from the controller which is also the storage host08:24
mantithat error pops up when I try to create an image from utility container or horizon08:25
*** pto has quit IRC08:26
openstackgerritMerged openstack/openstack-ansible-os_manila master: Remove references to unsupported operating systems  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/77973908:26
*** pto has joined #openstack-ansible08:27
mantiand similar error comes from the glance: http://paste.openstack.org/show/805472/08:30
*** pto has quit IRC08:31
*** shyamb has joined #openstack-ansible08:41
*** shyamb has quit IRC08:45
*** pto has joined #openstack-ansible08:49
*** mubix has quit IRC09:17
*** sakharkar has joined #openstack-ansible09:21
sakharkarnoonedeadpunk: Does Ussuri OSA also supports all enpoints on SSL (Internal endpoints)09:21
admin0sakharkar, it depends on you if you want it to have all internal endpoints on ssl09:23
admin0i used to do it when i first started, but now i leave it to non ssl09:23
admin0it runs on an unrouted network on its own isolated vlans, so i feel pretty OK09:24
sakharkaradmin0: Thanks for the response. Just wanted to know if it is officially supported or not09:24
noonedeadpunksakharkar: I think it does. at least we have variable in place https://opendev.org/openstack/openstack-ansible/src/branch/stable/ussuri/inventory/group_vars/haproxy/haproxy.yml#L7809:24
noonedeadpunkbut it has been backported to ussuri and available from 21.1.009:26
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475109:27
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475109:28
noonedeadpunkuh, I really need to finish https://review.opendev.org/c/openstack/openstack-ansible-tests/+/784751 to pass to finish linters tests...09:29
*** mubix has joined #openstack-ansible09:34
noonedeadpunkzbr: hey! are you around? have a minute to consult about ansible-lint custom rules?09:44
*** macz_ has joined #openstack-ansible09:49
noonedeadpunkeventually more about their test...09:51
zbryep, I am09:52
noonedeadpunkEventually I'mn struggling to understand why "fail" test are not failing rules in https://review.opendev.org/c/openstack/openstack-ansible-tests/+/784751/5/ansible-lint/test/TestAPTRepositoryCacheUpdateRule.py09:53
*** macz_ has quit IRC09:54
noonedeadpunkand it's rule09:54
noonedeadpunkhttps://review.opendev.org/c/openstack/openstack-ansible-tests/+/784751/5/ansible-lint/APTRepositoryCacheUpdateRule.py09:54
noonedeadpunkit used to work with ansible-lint 4.5 but I don't see why its not for 509:55
zbryou need to check signature of matchtask, to see if something was changed.09:56
noonedeadpunkself.collection does have it registered. and I can actually reproduce this in interactive shell09:56
zbri would recommend adding this rule to the linter directly, we can make it opt-in09:56
zbrit would make maintenance easier for you09:56
zbron the other hand ansible bug is marked as fixed 2+ years ago09:57
zbrso i am not sure if this test is still needed09:58
noonedeadpunkwell, once you said this, I think we can actually drop this rule:)09:58
noonedeadpunkbut same thing happens with https://review.opendev.org/c/openstack/openstack-ansible-tests/+/784751/5/ansible-lint/NoLogPasswordsRule.py09:58
*** pto has quit IRC09:59
noonedeadpunkI mean I'm fine to push rule to the linter, but at the moment we kind of in the situation we must upgrade from 4.5 asap, since it brings in ansible 4.0.0 which breaks stuff10:00
zbri can help you move that rule into the linter10:00
noonedeadpunkand that would still require unit test?10:00
zbrjust avoid running your custom rules until we port them10:00
zbrthe password one should be easy to do, probably I can do it today.10:01
noonedeadpunkI can try to research about how to push PR for it10:02
noonedeadpunkBut atm I struggle to make failure test to actually work10:02
zbri am working on the linter today, ping me again in 1-2h, and i should be able to help10:02
noonedeadpunkok, gotcha10:02
zbrif we are lucky i can even release it10:02
noonedeadpunkThat would be super amazing10:03
noonedeadpunkcan't even express how much that would be great)10:03
noonedeadpunkand I think that https://review.opendev.org/c/openstack/openstack-ansible-tests/+/784751/5/ansible-lint/YAMLdictchecker.py is replaced with yamllint?10:04
openstackgerritMerged openstack/openstack-ansible-os_manila master: [reno] Stop publishing release notes  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/77203610:05
noonedeadpunkSo that what I get in cli... http://paste.openstack.org/show/805479/10:21
*** snapdeal has quit IRC10:27
*** pto has joined #openstack-ansible10:36
zbryes, all features already covered by yamllint were removed and replaced by yamllint10:40
*** pto has quit IRC10:45
noonedeadpunkok, I figured out that matchtask isn't actually called for some reason10:46
*** pto has joined #openstack-ansible10:58
jrossermanti: to use cinder as a backend for glance with LVM/iscsi then wherever you run glance is going to need to be able to mount the cinder volumes with iscsi10:58
noonedeadpunkzbr: I pushed PR https://github.com/ansible-community/ansible-lint/pull/1558 but I still have no clue why matchtask is not ever launched...10:59
jrossermanti: so i think there may be two things there, the necessary iscsi things are quite possibly not installed by our glance role, and then on top of that i don't know if it is possible to attach an iscsi volume *inside* an LXC container10:59
noonedeadpunkI'm looking at TestPackageIsNotLatestRule and it's kind of the same...11:00
*** hjohnson1 has joined #openstack-ansible11:03
*** pto has quit IRC11:03
*** pto has joined #openstack-ansible11:04
noonedeadpunkalso I'm not sure how I supposed to set label on the PR....11:06
*** pto has quit IRC11:08
zbrnoonedeadpunk: i am close to opening the PR for the no-password rule11:11
noonedeadpunkwell I already opened...11:11
noonedeadpunkBut can jsut close it11:11
zbryou moved faster, so i will review yours11:13
*** pto has joined #openstack-ansible11:18
*** pto has quit IRC11:22
*** pto has joined #openstack-ansible11:23
*** pto_ has joined #openstack-ansible11:23
*** pto has quit IRC11:27
*** pto_ has quit IRC11:27
*** pto has joined #openstack-ansible11:28
*** pto has quit IRC11:32
*** snapdeal has joined #openstack-ansible11:36
zbrnoonedeadpunk: few nits and we should be ready.11:38
openstackgerritMerged openstack/openstack-ansible-os_manila master: Use ansible_facts[] instead of fact variables  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/78064611:38
openstackgerritMerged openstack/openstack-ansible-os_manila master: setup.cfg: Replace dashes with underscores  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/79161711:38
*** ioni has joined #openstack-ansible11:39
*** pto has joined #openstack-ansible11:39
*** macz_ has joined #openstack-ansible11:50
*** macz_ has quit IRC11:54
mantijrosser: right, so, looks like I need to think this a bit more and probably move glance from container to host11:59
jrossermanti: you could try that yes, cinder certainly needs to be on the host to do the iscsi target stuff, but really i don't think we've ever had anyone try to use glance with scsi initiator before12:00
*** pto has quit IRC12:01
jrosserNFS would be easier all round really12:02
*** pto has joined #openstack-ansible12:21
mantitrue, I guess I just better get something working now and then later on play with the iscsi stuff12:21
CeeMacso, regarding iscsi in container, that s still a "no"12:22
CeeMacsomeone started working on a patch a while back, but it was abandoned12:22
CeeMacits the same for docker and k8s too sadly12:23
CeeMaci did a patch to glance in train for cinder store for glance, in theory that should be relevant for the lvm backed cinder-volumes12:23
CeeMacalso12:23
CeeMacmanti you would just need to move your glance role to a 'metal' server that has network connectivity to the iscsi target12:24
CeeMacand i'm using that in production, with iscsi/iser backed storage for glance images12:25
CeeMacmanti I can dig out the variables i used to implement it if you want?12:28
*** pto_ has joined #openstack-ansible12:28
CeeMaci deployed volume-backed-images and volume-image-cache at the same time12:29
hjohnson1Is there a document/article online that discusses Openstack Ansible is going as far as underlying OS?  Our openstack is currently built on CentOS12:29
*** pto has quit IRC12:30
hjohnson1Whoops.. hit enter too soon... I guess my question is... is Openstack Ansible going to move to CentOS Stream?12:30
mantiCeeMac:  That would be really helpful if you can dig the variables out!12:30
noonedeadpunkYes and on W we already support Stream 812:30
noonedeadpunkwe have document in WIP state atm so I can point to built in CI https://a5a1422d1baea1ebddea-0a894e3582385412e867858a97ee7e54.ssl.cf5.rackcdn.com/789376/10/check/openstack-tox-docs/f89a9d9/docs/admin/upgrades/compatability-matrix.html12:32
hjohnson1Thank you noonedeadpunk!!! That's what I was looking for!12:34
jrosserhjohnson1: note that we don't test a centos->centos stream upgrade anywhere12:36
jrosseryou'd have to figure that out in a lab setup12:36
hjohnson1jrosser: Gotcha... that's what I have here is a lab setup.12:39
*** Mr_Smurf has left #openstack-ansible12:40
*** pto_ has quit IRC12:47
toskydid anything happen between yesterday and today? The OSA job in https://review.opendev.org/c/openstack/sahara/+/791882/ was working and only the commit message was changed12:51
jrossertosky: Created wheel for ansible: filename=ansible-4.0.0-py3-none-any.whl12:52
jrosser^ that happened i think12:52
jrosseransible 4.0.012:52
toskyI guess it's blocking more than the sahara job12:57
noonedeadpunkit's blocking all linters13:07
noonedeadpunkand I'm trying to work on our linters check to make the pass13:07
toskyI see, thanks!13:08
*** gshippey has joined #openstack-ansible13:13
zbrnoonedeadpunk: do you have another rule that you need porting?13:16
noonedeadpunkzbr: I think we can just drop rest. We had 3 custom rules - yaml, password and apt cache which is not relevant now13:20
*** halali_ has joined #openstack-ansible13:24
zbri am waiting for the tests to pass, merge it and tag a new release13:24
*** dasp has quit IRC13:24
*** dasp has joined #openstack-ansible13:25
zbrfor the future you may be interested to add your repo to the eco pipeline: https://github.com/ansible-community/ansible-lint/blob/master/playbooks/eco.yml#L8-L3713:26
zbrfor example zuul-jobs is already part of the select list, but you need to be able to quickly fix bugs13:26
zbreach of these repos are tested against master of the linter, so we ensure that a change in the linter does not affect them13:27
*** macz_ has joined #openstack-ansible13:30
*** macz_ has quit IRC13:35
noonedeadpunkzbr: since we're spread across dozen repos and integrated one does not have much roles - only playbooks, not sure how much sence it makes for us. But worth considering13:40
openstackgerritDamian DÄ…browski proposed openstack/openstack-ansible-os_nova master: Dynamically compute nova_scheduler_host_subset_size value  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/79215113:46
openstackgerritDamian DÄ…browski proposed openstack/openstack-ansible-os_nova master: Dynamically compute nova_scheduler_host_subset_size value  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/79196513:52
*** tosky has quit IRC13:56
*** tosky has joined #openstack-ansible13:59
noonedeadpunkzbr: oh, you've already even tagged!14:04
* noonedeadpunk dropping local ones14:04
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475114:10
*** snapdeal has quit IRC14:12
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server master: Add debian bullseye support  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/79176914:12
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475114:13
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible/+/79215414:15
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475114:24
CeeMacmanti: sorry, was stuck in meetings, getting you that info now14:35
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475114:51
*** jawad_axd has quit IRC14:55
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475114:55
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Set manila_backends to empty dict by default  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/78735414:56
CeeMacmanti: http://paste.openstack.org/show/805492/14:58
*** rpittau is now known as rpittau|bbl15:03
openstackgerritMerged openstack/openstack-ansible-os_manila master: Add variables for rabbitmq ssl configuration  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/79172215:04
*** jawad_axd has joined #openstack-ansible15:05
*** macz_ has joined #openstack-ansible15:06
*** ioni has quit IRC15:08
mantiCeeMac: thank you!15:12
CeeMacmanti: you're welcome, hope it works out for you :)15:15
CeeMacwhich openstack release are you on btw? i didn't scroll that far back to check :)15:15
mantivictoria15:16
CeeMacok, should be fine with that config then I think15:18
CeeMaclet me know if there are issues :)15:18
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475115:18
mantiit looks like I was on right track with my configuration, except glance being on container15:18
CeeMacyeah, that caught me out for a long time too15:19
CeeMacyou'll need to re-run the glance-install playbook after updating those files :)15:19
CeeMaci'm sure you've got it covered, but thought I'd point it out anyway just in case :)15:19
mantioh, I've had plenty of practise with that already ;)15:20
CeeMachaha i bet :D15:20
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible/+/79215415:21
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible/+/79215415:22
*** dave-mccowan has quit IRC15:38
*** Fridtjof has joined #openstack-ansible15:38
*** hjohnson1 has left #openstack-ansible15:39
*** jawad_axd has quit IRC15:41
*** ioni has joined #openstack-ansible15:42
openstackgerritDmitriy Rabotyagov proposed openstack/ansible-hardening master: Use pipefail for shell module  https://review.opendev.org/c/openstack/ansible-hardening/+/79219916:05
*** juanoterocas has joined #openstack-ansible16:17
*** juanoterocas has left #openstack-ansible16:19
*** Daemoen is now known as Guest2888616:26
*** Guest28886 has left #openstack-ansible16:31
*** mmercer has quit IRC16:35
*** rohit02 has quit IRC16:43
*** rpittau|bbl is now known as rpittau16:45
noonedeadpunkzbr: I think there's a bug in the expression btw https://github.com/ansible-community/ansible-lint/blob/master/src/ansiblelint/rules/VariableHasSpacesRule.py#L2317:04
noonedeadpunkas `var-spacing` triggers on https://opendev.org/openstack/openstack-ansible-tests/src/branch/master/test-prepare-host.yml#L131-L14617:04
noonedeadpunkI suspect because of `{'NetDev': {'Name': 'dummy-' + interface, 'Kind': 'dummy'}}`17:05
*** gyee has joined #openstack-ansible17:12
openstackgerritDmitriy Rabotyagov proposed openstack/ansible-hardening master: Use pipefail for shell module  https://review.opendev.org/c/openstack/ansible-hardening/+/79219917:15
noonedeadpunkhttp://paste.openstack.org/show/805495/17:26
noonedeadpunkoh, it's specifically because of https://opendev.org/openstack/openstack-ansible-tests/src/branch/master/test-prepare-host.yml#L14217:28
noonedeadpunkI think it's easier to just workaround that...17:33
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475117:33
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475117:34
*** rpittau is now known as rpittau|afk17:37
*** waxfire has joined #openstack-ansible17:41
*** waxfire has left #openstack-ansible17:42
noonedeadpunkjrosser: have you ever seen https://github.com/konstruktoid/ansible-role-hardening ?17:57
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475118:03
*** andrewbonney has quit IRC18:05
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475118:08
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-lint and ansible version  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/78475118:26
*** jbadiapa has quit IRC18:30
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible/+/79215418:31
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible/+/79215418:32
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-lint version  https://review.opendev.org/c/openstack/openstack-ansible/+/79215418:32
*** pabelanger has joined #openstack-ansible18:37
*** pabelanger has left #openstack-ansible18:37
*** ioni has quit IRC18:37
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_sahara master: Fix linting  https://review.opendev.org/c/openstack/openstack-ansible-os_sahara/+/79224118:42
jrossernoonedeadpunk: that looks super-maintained compat18:42
jrossercompared to the role we use18:42
noonedeadpunkyeah18:42
noonedeadpunkI haven't looked much into tbh...18:43
jrosserwould need to adjust some i guess, like messing with iptables will end badly on compute/network nodes18:43
openstackgerritDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Fix linters  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/79224218:45
noonedeadpunkBut yeah, I'm a bit cautios of just switching to it...18:45
noonedeadpunkAnd jsut stealing missing parts sounds not cool either...18:45
noonedeadpunkAnother concern is that we might need more compatability between OS18:46
noonedeadpunkBut eventually might worth talking to repo owner?18:46
*** gshippey has quit IRC18:48
noonedeadpunkthe main concerning thing is that nothing is conditional there18:51
*** mathlin has quit IRC19:07
*** evrardjp has joined #openstack-ansible19:24
*** evrardjp has quit IRC19:25
*** evrardjp has joined #openstack-ansible19:27
*** zul has quit IRC20:09
*** MrClayPole_ has joined #openstack-ansible20:15

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!