| opendevreview | Merged openstack/openstack-ansible stable/xena: Increase manila flavor size https://review.opendev.org/c/openstack/openstack-ansible/+/846123 | 02:30 |
|---|---|---|
| *** ysandeep|out is now known as ysandeep | 05:58 | |
| gokhani | Hi, we have an issue about writing the ansible role of the custom service that we have been developed. The issue is that <service_name>_db_setup_host is localhost but it should be utility_all[0]. Why is the variable localhost? The <service_name>_db_setup_host variable doesn't find openstack_db_setup_host. Is there any advice? Thank you | 06:30 |
| gokhani | we have found the solution about the issue. the issue was that we didn't edit the os-<service-name>-install.yml file correctly. | 07:02 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_horizon master: Add support for websso http referer variable added in yoga https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/851960 | 07:33 |
| noonedeadpunk | openstack_db_setup_host is defined in playbooks folder by default, and depend on sourcee/distro install method iirc. | 07:42 |
| noonedeadpunk | you can either do some override or provide absolute path to the vars file | 07:42 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_horizon master: Add support for websso http referer variable added in yoga https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/851960 | 07:50 |
| *** ysandeep is now known as ysandeep|mtg | 07:57 | |
| *** anbanerj is now known as frenzyfriday|rover | 07:59 | |
| jrosser_ | morning | 08:00 |
| noonedeadpunk | o/ | 08:18 |
| *** ysandeep|mtg is now known as ysandeep | 08:37 | |
| mrf | Hi, Openstack freezer is not supported in ansible? | 08:46 |
| jrosser_ | is it a current project? | 08:47 |
| *** tosky_ is now known as tosky | 08:47 | |
| mrf | mmm last release for yoga | 08:52 |
| mrf | and current updates for zed | 08:52 |
| mrf | maybe documentation on website is incompleted | 08:52 |
| mrf | for the... masakari role , the ansible will be masakari_hosts: ? | 08:54 |
| jrosser_ | freezer is one of the openstack projects which has borderline unmaintained | 08:54 |
| noonedeadpunk | eventually with freezer it's interesting | 08:54 |
| jrosser_ | there seem to be some very minor commits recently https://opendev.org/openstack/freezer/commits/branch/master | 08:54 |
| noonedeadpunk | It's basically client-side thing | 08:54 |
| noonedeadpunk | and freezer-api is even not required | 08:54 |
| mrf | im going try to test designate and masakari roles | 08:55 |
| noonedeadpunk | For us it might be interesting challange to get things working jsut for client-side to be fair | 08:55 |
| noonedeadpunk | mrf: jsut keep in mind that by default masakari won't evacuate servers that do have encrypted by barbican secrets volumes | 08:56 |
| mrf | mmm i think still didnt deployed barbican | 08:57 |
| noonedeadpunk | and answering your question, for masakari it's masakari-infra_hosts and masakari-monitor_hosts. monitor_hosts are usually equal to nova_compute | 08:57 |
| noonedeadpunk | ah, sorry, you said designate :D | 08:57 |
| mrf | yes , buts lets try one by one :P | 08:58 |
| mrf | as i added new servers to my yml deployment i need to rerun again setup-everything? | 08:59 |
| mrf | and it will only change/add the new roles? | 08:59 |
| jrosser_ | no need at all to run setup-everything, that will take a looooong time | 08:59 |
| jrosser_ | you'd define the component to deploy in /etc/openstack_deploy/openstack_user_config.yml | 09:01 |
| mrf | yes i defined for gnochchi, aodh and celiometer | 09:01 |
| jrosser_ | run playbooks/lxc_containers_create.yml to create containers | 09:01 |
| jrosser_ | playbooks/haproxy-install.yml to setup the loadbalancer | 09:02 |
| jrosser_ | playbooks/os-<service>.yml to deploy the service, then re-run horizon if you want the matching dashboard | 09:02 |
| jrosser_ | the setup-<blah>.yml playbooks just include a whole bunch of others | 09:02 |
| jrosser_ | and you can run them all independantly once you get familiar with what they do | 09:03 |
| mrf | lets go to try :) | 09:03 |
| jrosser_ | obviously the more complicated thing you are deploying (celiometer perhaps) might have to re-run lots of things | 09:03 |
| *** ysandeep is now known as ysandeep|lunch | 09:04 | |
| mrf | jrosser if the webpage doc will be clear as your explanation openstack will be deployed everywhere :P | 09:05 |
| mrf | thanks both jrosser and noonedeadpunk | 09:06 |
| opendevreview | Merged openstack/openstack-ansible-os_manila stable/xena: Create backends when running against manila_share https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/847993 | 09:08 |
| jrosser_ | inventory changes look good on multinode https://paste.opendev.org/show/b8K2MmFxYS02zBqvW41s/ | 09:23 |
| noonedeadpunk | awesome. I checked them also on my POC which is multinode | 09:30 |
| jrosser_ | needs some hand editing to clean up the groups, but looks ok | 09:32 |
| mrf | i dont know why in ubuntu22 after running the playbooks i lost always dns resolution... does playbooks change anything at resolv.conf? | 09:36 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/xena: Bump OpenStack-Ansible Xena https://review.opendev.org/c/openstack/openstack-ansible/+/851974 | 09:37 |
| noonedeadpunk | Um, I think you should not manage resolv.conf manually there. As systemd-resolved is in charge, so it would override it with every restart | 09:38 |
| jrosser_ | thats nothing to do with OSA though - we leave as much as possible untouched. you can have whatever networking/dns setup you prefer | 09:40 |
| mrf | mmm ok will check whats change the file | 09:40 |
| noonedeadpunk | unless that's aio setup I guess. As we could mess things up there a bit | 09:41 |
| jrosser_ | this is giving 'Xena' in our Yoga major upgrade docs, which is odd https://codesearch.opendev.org/?q=current_release_formal_name | 09:45 |
| jrosser_ | ah https://opendev.org/openstack/openstack-ansible/src/branch/master/deploy-guide/source/conf.py#L35-L36 | 09:47 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Correct series names for documentation. https://review.opendev.org/c/openstack/openstack-ansible/+/851975 | 09:50 |
| mrf | the horizon skyline theme is not yet ready for production no? | 09:59 |
| *** ysandeep|lunch is now known as ysandeep | 10:00 | |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Update upgrade instructions for Yoga release https://review.opendev.org/c/openstack/openstack-ansible/+/851977 | 10:04 |
| jrosser_ | mrf: skyline is not a horizon theme, it's a complete new implementation | 10:31 |
| jrosser_ | mrf: i have the beginnings of an OSA role to deploy skyline here https://github.com/jrosser/openstack-ansible-os_skyline | 10:33 |
| jrosser_ | but there are big bits of functionality missing from skyline for my use case like openid-connect identity federation | 10:33 |
| jrosser_ | so really it needs a contributor who has a good use case that is prepared to put in the effort to maintain the role | 10:34 |
| mrf | good | 10:38 |
| jrosser_ | i really don't have time to spend on it myself at the moment though | 10:39 |
| mrf | No problem , i think that it was a new theme with more visual and more things integrated not a new full role/project | 10:40 |
| jrosser_ | skyline is completely new, theres a backend API server component and then a full nodejs web application | 10:41 |
| jrosser_ | and slightly awkwardly it needs a whole load of tooling to compile the web application | 10:42 |
| mrf | mmm in your test env, celiometer deployment put all your cores at 100% ? | 10:51 |
| mrf | https://gyazo.com/0c623c1809604340b4a5e58924c0f5c2 | 10:52 |
| anskiy | mrf: could be that it is continuously restarting: check journactl -u ceilometer\* | 10:54 |
| mrf | mmm im getting ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile. | 10:54 |
| mrf | in the celiometer | 10:54 |
| mrf | maybe i forgot run other playbook before os-celiometer | 10:54 |
| jrosser_ | you should look in the config file for the rabbitmq connection string | 10:55 |
| mrf | maybe i should run before rabbitmq-install.yml before os-celiometer? | 10:55 |
| mrf | *re-run | 10:56 |
| jrosser_ | not really | 10:56 |
| jrosser_ | each role is responsible for setting up the message queue stuff it needs https://github.com/openstack/openstack-ansible-os_ceilometer/blob/master/tasks/main.yml#L116-L136 | 10:57 |
| jrosser_ | ^ celiometer as example | 10:57 |
| mrf | https://gyazo.com/b435673b388c746d5e480f2a60e795ce | 10:57 |
| anskiy | well, rabbitmqs CPU consumption shouldn't be that big too | 10:58 |
| mrf | i think the massive cpu usage didnt give to other containers cpu shares to process the task | 10:58 |
| jrosser_ | work through the playbook fixing things that break as you get to them | 11:09 |
| jrosser_ | if the service setup didnt work then thats before the mq setup | 11:09 |
| opendevreview | Merged openstack/openstack-ansible master: Correct series names for documentation. https://review.opendev.org/c/openstack/openstack-ansible/+/851975 | 11:13 |
| *** dviroel|afk is now known as dviroel | 11:23 | |
| kleini | I have issues with multiple Heat engine instances - two in my case. Creating stacks takes much longer if two instances are running compared to only a single instance. And the biggest problem is, that deleting stacks mostly fails and I see then the following errors in the logs: https://paste.opendev.org/show/b269kzFW9lqGPlmx5RBJ/ . I am running 23.2.2, is this maybe some known issue? Do you have hints, how to run | 12:15 |
| kleini | multiple Heat engine instances without running into these issues? | 12:15 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible stable/yoga: Correct series names for documentation. https://review.opendev.org/c/openstack/openstack-ansible/+/851882 | 12:20 |
| *** ysandeep is now known as ysandeep|afk | 12:25 | |
| *** ysandeep|afk is now known as ysandeep | 12:25 | |
| agemuend | Short question regarding os-keystone. Is it on prupose that keystone_federation_sp_shib_setup.yml is included in main.yml with tag keystone-config, but main_keystone_federation_sp_idp_setup.yml is not? | 12:30 |
| jrosser_ | agemuend: are you asking about the tag, or the task inclusion, i'm not clear | 12:34 |
| jamesdenton | mornin' all | 12:47 |
| jrosser_ | o/ hello | 12:47 |
| jamesdenton | hello hello | 12:48 |
| *** frenzyfriday|rover is now known as frenzyfriday|rover|lunch | 13:36 | |
| mrf | have you ever found this error? https://gyazo.com/87a61700e01ca297951ab66b5b709c28 | 14:16 |
| mgariepy | that seems wrong. https://github.com/openstack/openstack-ansible-os_keystone/blob/master/tasks/keystone_key_setup.yml#L22 | 14:21 |
| jrosser_ | thats the directory though - isnt it complaining about the permissions on the private key? | 14:26 |
| mgariepy | the dir should be 700 | 14:27 |
| mgariepy | do we have a scenario that we tests that in ? :/ like with 3 keystone controllers ? | 14:28 |
| *** frenzyfriday|rover|lunch is now known as frenzyfriday|rover | 14:28 | |
| jrosser_ | but the failure is due to the key permissions not the directory? | 14:29 |
| jrosser_ | i have this https://paste.opendev.org/show/bxFpM1EYJwW9rCf2PwVL/ | 14:30 |
| jrosser_ | this controls the key installation https://github.com/openstack/openstack-ansible-os_keystone/blob/master/defaults/main.yml#L658-L664 | 14:33 |
| jrosser_ | and this should install the private key with 0600 https://github.com/openstack/openstack-ansible-plugins/blob/master/roles/ssh_keypairs/vars/standalone_keypair.yml#L34-L38 | 14:33 |
| mrf | re-running os-keystone alone solved the problem | 14:33 |
| mrf | maybe a race condition or something | 14:34 |
| jrosser_ | and it's fixed the permissions on the private key? | 14:34 |
| mrf | yes | 14:34 |
| jrosser_ | not sure that race conditions are a thing here | 14:34 |
| jrosser_ | mrf: how did you get that error - on a fresh deployment? re-running something? | 14:39 |
| mrf | fresh deployment | 14:39 |
| mrf | we destroyed every container with the lxc-container-destroy | 14:40 |
| mrf | and run again for add new roles like nova, celiometer aodh etc.. | 14:40 |
| jrosser_ | hmm so "fresh" not fresh :) | 14:40 |
| mrf | 95% fresh because we destroy everything :P | 14:40 |
| mrf | but as i said re-running works again without issue, now is deploying os_placement | 14:41 |
| jrosser_ | well i am interested to know how those private key permissions end up wrong | 14:41 |
| jrosser_ | because the code appears to require 0600 | 14:41 |
| agemuend | jrosser_: Sorry, missed your answer. I was wondering about the tag, or more specifically why its not called when you run only keyclone-config. Or am I confusing things? | 14:42 |
| mrf | jrosser does ansible store all logs somewhere? | 14:43 |
| mrf | or need a extra flag? | 14:43 |
| jrosser_ | there should be a log in /openstack | 14:43 |
| *** dviroel is now known as dviroel|lunch | 14:48 | |
| *** ysandeep is now known as ysandeep|out | 15:07 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server master: Allow haproxy to bind on the interface https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/852039 | 16:08 |
| *** dviroel|lunch is now known as dviroel | 16:13 | |
| mrf | Error with gnocchi, maybe not package in distro ubuntu? https://gyazo.com/567eee7cb9206e23c00603d897b7a872 | 16:17 |
| lowercase | gyazo is banned at my work, you can use paste.opendev.org | 16:20 |
| jrosser_ | mrf: thats full of connection refused so i would look at that first | 16:22 |
| jrosser_ | and also pasting text rather than graphics is more useful | 16:22 |
| mrf | oh ok | 16:22 |
| mrf | im inside container 1 sec | 16:22 |
| mrf | https://pastebin.com/UjWNZ5hA | 16:24 |
| mrf | from gnnochi container | 16:24 |
| mrf | python_venv_build.log output | 16:24 |
| lowercase | pastebin.com is banned at my work, please consider using an alternative such as paste.opendev.org | 16:25 |
| mrf | ok | 16:25 |
| mrf | lowercase -> https://paste.opendev.org/show/bIqG67KG3R6M6Rh0Z42s/ | 16:25 |
| lowercase | that log file should be atleast several hundred lines. | 16:27 |
| lowercase | could you paste the entire thing (it doesn't truncate after each run) | 16:27 |
| lowercase | so only copy from the latest run. | 16:27 |
| mrf | ok! | 16:27 |
| lowercase | 24.0 is xena, so 25 will be will be yoga.. python3.10 is really new version of python... i dont see in the patch nodes a req to move to python3.10 | 16:33 |
| lowercase | are you using ubuntu 22.04? | 16:33 |
| mrf | https://paste.opendev.org/show/b3coGkY6DtfIMfSIl08z/ | 16:33 |
| lowercase | yep you are | 16:33 |
| mrf | more logging log is enormous with a lot of " Skipping link: none of the wheel's tags" | 16:33 |
| lowercase | jrosser_: is there support for ubuntu 22.04? | 16:33 |
| mrf | yes we're ussing distro and 22.04 | 16:33 |
| jrosser_ | mrf: distro?! really? | 16:34 |
| lowercase | i love distro | 16:34 |
| jrosser_ | it will go away | 16:34 |
| mrf | :/ | 16:34 |
| mrf | distro is not more "stable"? | 16:34 |
| lowercase | he's messing with you, there is no operating system called distro | 16:35 |
| lowercase | you are using ubuntu 22.04 | 16:35 |
| mrf | yes | 16:35 |
| jrosser_ | https://docs.openstack.org/openstack-ansible/latest/admin/upgrades/compatibility-matrix.html | 16:35 |
| jrosser_ | 'distro' = you get the openstack packages from ubuntu cloud archive or wherever | 16:35 |
| jrosser_ | 'source' is you install the exact same SHA for everything that we validate in OSA CI | 16:35 |
| lowercase | yea, ubuntu 22.04 is too new and python 3.10 is too new. | 16:35 |
| jrosser_ | distro = you are completely screwed and can't patch any bugs | 16:35 |
| lowercase | downgrade to ubuntu 20.04 and try again. | 16:36 |
| jrosser_ | sorry to be blunt about it but i really wish we could totally get rid of the distro option | 16:36 |
| mrf | oh i read somewhere that the default deployment in Ubuntu 22.04 is Yoga i think so | 16:36 |
| jrosser_ | it was introduced by opensuse to showcase their packaging | 16:36 |
| mrf | time to destroy all and move to master? | 16:37 |
| mrf | :) | 16:37 |
| jrosser_ | wait | 16:37 |
| jrosser_ | it's not "master" | 16:37 |
| lowercase | mrf: and here is the opinion of someone who does this everyday. Go ubuntu 20.04 till about 20.04.02 comes out | 16:37 |
| jrosser_ | it's "install the openstack services from a completely well defined set of git SHA" | 16:37 |
| lowercase | s/20.04.02/22.04.02 | 16:37 |
| jrosser_ | it's nothing to do with 'install whatever master branch is" | 16:37 |
| lowercase | yea | 16:38 |
| mrf | install_method: distro -> to source no? | 16:40 |
| jrosser_ | basically the source install method is one of the biggest unique things with OSA | 16:40 |
| jrosser_ | it's what differentiates it from things like tripleo | 16:40 |
| jrosser_ | here we have really quite a few patches applied locally to openstack services, openstack-ansible roles and so on, kept as git repos | 16:41 |
| jrosser_ | those are then consumed and deployed from source code to the exact SHA we choose | 16:41 |
| mrf | well then tomorrow will re-deploy all :P | 16:42 |
| jrosser_ | so it is very easy to apply bugfixes, or cherry-pick things off the next release if it's critical to something you need | 16:42 |
| mrf | learning everyday more | 16:42 |
| jrosser_ | if you pick something without a tick on the compatibility matrix, we don't test it, at all | 16:42 |
| mrf | I read somewhere in ubuntu news that Yoga is the default package deployed in ubuntu 22.04 or supported by default | 16:43 |
| jrosser_ | with OSA none of that matters | 16:43 |
| mrf | then we started with ubuntu 22.04 | 16:43 |
| mrf | :/ | 16:43 |
| NeilHanlon | mrf: it's a bit of a learning curve, but if you follow through the guides it does a good job explaining how OSA approaches systems management | 16:43 |
| jrosser_ | so long as there is a python interpreter and libvirt that meets the requirements of the openstack version you want to deploy, you are good to go | 16:44 |
| mrf | going for a beer now! see u tomorrow guys thanks! | 16:44 |
| jrosser_ | see you :) | 16:45 |
| *** frenzyfriday|rover is now known as frenzyfriday|rover|afk | 16:47 | |
| * jrosser_ feels maybe too harsh on the distro installs, but this is important https://docs.openstack.org/openstack-ansible/latest/reference/architecture/manifesto.html | 16:56 | |
| jrosser_ | and also with smaller number of contributors these days it's hard to justify keeping extra stuff around | 16:57 |
| mgariepy | i never used distro install for openstack and never will. | 17:01 |
| jrosser_ | i've had local patches for so many releases now | 17:04 |
| jrosser_ | stuff that projects won't merge for stupid reasons, or cherry picks from master to stable/... | 17:04 |
| spatel | does kvm support sound config or microphone config? | 18:56 |
| spatel | one of our customer want to launch windows VM and they are doing RDP so looking for sound and mic support on RDP | 18:56 |
| *** frenzyfriday|rover|afk is now known as frenzyfriday|rover | 18:58 | |
| *** dviroel is now known as dviroel|afk | 20:34 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!