Wednesday, 2022-11-02

*** dviroel|rover|bbl is now known as dviroel|rover00:05
*** dviroel|rover is now known as dviroel|rover|out00:38
*** dviroel|rover|out is now known as dviroel|holiday00:38
*** ysandeep|out is now known as ysandeep05:40
noonedeadpunkmornings07:45
* noonedeadpunk wainting for skyline/zookeeper repos to be created07:48
noonedeadpunkat the same time I was able to spawn zookeeper cluster in aio locally07:49
jrosserI was thinking about also needing to make clustered OVN jobs, if that’s feasible07:51
*** ysandeep is now known as ysandeep|lunch07:59
jrossernoonedeadpunk: what do you expect to happen with `openstack-ansible playbooks/os-neutron-install.yml --tags neutron-config`08:55
jrossershould it ever do things in python_venv_build?08:55
noonedeadpunknope08:55
noonedeadpunkI expect only configs to be touched. and python_venv_build I expect to be part of neutron-install08:56
noonedeadpunkAnd maybe systemd_service also part of neutron-config08:56
jrosserwhat do you make of this https://paste.opendev.org/show/bYqy8OxnUI3lKxljHrpL/08:57
noonedeadpunkthat we suck in tags testing?08:59
jrosser:)08:59
noonedeadpunkwell, uwsgi likely worth to be included, but not python_venv_build. Though I dunno how to separate these 209:00
jrosseri was surprised it goes in the python_venv_build stuff - though maybe there is unexpected behaviour there with import_role and tags09:00
noonedeadpunkyeah, I usually exclude uwsgi-install 09:01
jrosseroh wait yes its the uwsgi role09:01
noonedeadpunkit;s really confusing part as configuring uwsgi is related to neutron-config, but not installatgion of uwsgi....09:02
noonedeadpunkAnd how to split these 2 actions without explicit exclude I have close to no idea09:02
jrosseri am really confused09:03
jrosserwhy is the uwsgi install/config aparrently failing on this https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/tasks/neutron_install.yml#L7409:03
jrosserwhich is not the uwsgi install at all09:03
jrosserargh meeting time09:04
noonedeadpunkthat is very-very good question.... 09:06
jrosseri wonder if there is something subtle with import_role + vars being set for the role09:09
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-ops master: Add support for enabling ELK stack security  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/86287309:19
derekokeeffe85Morning, me again unfortunately :) have a couple of Q's around cinder here https://paste.openstack.org/show/bNV9zv7WEhB6LhVIeLTP/ if anyone has any spare time to take a look please. No rush..09:34
noonedeadpunkderekokeeffe85: so if you want to have LVM backend - cinder-volume must be placed on computes rather then infra09:36
noonedeadpunkAlso by default cinder-volume is created on metal unless you overwrite that in env.d09:36
noonedeadpunkAs we have documentation that shows such override but it's more for ceph usecase (or any other shared storage backend)09:37
derekokeeffe85noonedeadpunk, when I specified the computes it tried to create containers on the computes and failed. I've went through as much documentation as possible trying to figre it out but don't know which best applies to my situation. Would you have a link to what you'd recommend trying please?09:43
derekokeeffe85I also want it created on metal, I have popped in dedicated disks for it and created the volumes on them09:45
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-ops master: Enable cluster ID monitoring setting for beats using logstash  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/86287409:47
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-ops master: Set permissions on elastic data directories  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/86287509:47
noonedeadpunkderekokeeffe85: ensure you haven't followed this: https://docs.openstack.org/openstack-ansible/latest/user/ceph/full-deploy.html#environment-customizations :)09:47
derekokeeffe85Thank you noonedeadpunk I'll take a look now09:48
noonedeadpunkand if you did - you will need to drop this env.d file and clean out hosts from inventory file09:48
derekokeeffe85Oh ensure I HAVEN'T :) Sorry I read that worng. I followed this https://docs.openstack.org/openstack-ansible-os_cinder/latest/configure-cinder.html#configuring-cinder-to-use-lvm I just can't get my head around it unfortunately. I got excited when I saw the cinder configs were created but that didn't last long :(10:11
derekokeeffe85Without "iscsi_ip_address: "{{ cinder_storage_address }}"" that field in the config10:12
jrosserdoes lvm backed cinder really need to be on the computes?10:13
jrosserit's iscsi isnt it?10:13
noonedeadpunkmmm....10:15
noonedeadpunkI thought it is. But now I indeed not sure thinking about it more10:17
*** ysandeep|lunch is now known as ysandeep10:17
derekokeeffe85To be honest jrosser this is all experimental so as long as it's somewhere and I can get a volume created at least I'll know more when we get to a production stage. Which will probably be external anyway but for now the local would do10:18
jrosserderekokeeffe85: what do you actually what to achieve?10:18
jrosseryou can have local storage in the computes via nova, for ephemeral disks10:19
jrosseryou can also do something horribly complicated with cinder-volume on each compute and having the iscsi be local to that compute, but......10:20
jrosseror you can have some larger more singular backend behind a cinder-volume service, like lvm in a different box, or some storage appliace10:21
derekokeeffe85We have a current openstack cluster talking to a quobyte backend and it all works fine. We installed it manually about two years ago but now I've been tasked with trying to get a cluster off the ground with the OSA so it's all very new to me. So to answer your question for now I would like to cretae volumes on the local disks in the box. I will eventually have an external backend but that's not in place yet. Local storage in the computes 10:23
derekokeeffe85would be great for now, is there a link you could send to me that would help me configure such please? btw I'm sorry if I'm taking up your guys time10:23
jrosserderekokeeffe85: have you checked out how the all-in-one works?10:26
derekokeeffe85jrosser no I didn't look into that as we wanted seperate controller & compute nodes10:26
derekokeeffe85Would that explain the nova storage option if I read the docs?10:27
jrosserthe all-in-one is a test / demo / development environment and you only need a modest VM to set one up10:27
jrosserit deploys cinder with an lvm backend out of the box10:27
derekokeeffe85Oh ok, maybe I need to take a look at that so? I do have the option of creating a LUN on a SAN at the moment as well but I wanted to get it creating locally on the controller node (or compute but not essential) before I looked into the SAN option10:32
jrosserright, well you can run cinder-volume on a controller and export as iscsi, to use cinder volumes10:33
jrosserthis is just like the config in the all-in-one10:33
derekokeeffe85Ok I'm going to take a look at the all-in-one now. Maybe I jumped in too deep to start off with10:34
derekokeeffe85Thanks for the advice10:34
jrosserderekokeeffe85: i think it's important to be very clear with terminology, nova can do ephemeral disks on local storage easily, cinder volumes are usually networked storage in some way10:47
jrosseryou need to decide which you want, they have different behaviours and pros/cons10:47
derekokeeffe85Ok sorry, so yep cinder volumes are what we have currently with Quobyte. nova with ephemeral would be fine for now as I'm just trying to get volumes creaing for now and will be redeploying again further down the line with another quobyte cluster as the backend but that will take some time10:51
derekokeeffe85Ah sorry. So the VM's I create are stored lovcally with nova but if I want to be able to create volumes I need an external storage host. It maybe time to call it a day on this haha :)10:56
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Drop CentOS 8 Stream  https://review.opendev.org/c/openstack/openstack-ansible/+/86325811:43
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Cleanup CentOS 8 Stream  https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/86325911:47
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Cleanup CentOS 8 Stream support  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/86326111:57
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Replace ifupdown with native ip-link  https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/82812012:11
*** ysandeep is now known as ysandeep|brb12:26
mgariepyjamesdenton, on pour 6641/6642 is ovsdb bound to 0.0.0.0 or to the ip ?12:44
mgariepynevermind, it's not bound to 0.0.0.012:54
*** ysandeep|brb is now known as ysandeep12:56
jamesdentonsorry, was AFK12:59
mgariepyno worries 13:01
jamesdentonre: https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/855829 -- did we consider a use case where someone actually wanted to run (or is running) OVS, especially as a look at supporting linux bridges and ovs bridges for LXC?13:01
mgariepyi just think it's kinda weird to have some setting as args and other in the DB for ovn 13:01
jamesdentonyeah, that is sorta annoying13:02
mgariepyha no i didnt think of ovs on for lxc13:04
mgariepyhmm13:05
mgariepynot sure i would want to to have ovs for lxc bridges haha13:05
jamesdentonput your biases aside :D13:06
mgariepysorry can't do that haha13:06
mgariepyovn for the lxc bridges ?13:06
mgariepy;p13:06
mgariepyi'm almost done with ssl for ovn stuff.13:07
mgariepyjust missing a small part for neutron on the compute.13:07
jamesdentonoh nice13:08
jamesdentonworking on docs, and it's just a rabbit hole13:08
mgariepyi can see why it would be.13:10
mgariepyho i'm also not 100% sure how to handle the transition from ovn tcp to ovn ssl13:16
mgariepythis will not be needed anymore also with ovn https://github.com/openstack/openstack-ansible-os_neutron/blob/master/tasks/neutron_pre_install.yml#L7413:19
jamesdentonoh, cool. just add a conditional?13:23
mgariepyyep13:26
mgariepyi guess there will be a couple places that will need it.13:26
jamesdentoni guess i would've expected the l3 agent to create that dir13:28
noonedeadpunkoh.. seems like mariadb 10.6.10 does break centos 9 upgrade15:55
*** ysandeep is now known as ysandeep|out17:08
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Install dynamic-inventory as console_script  https://review.opendev.org/c/openstack/openstack-ansible/+/86342317:24
noonedeadpunkI know we agreed to move towards inventory plugins.... But I wonder wdyt about this ^ ?17:24
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Install dynamic-inventory as console_script  https://review.opendev.org/c/openstack/openstack-ansible/+/86342317:26
noonedeadpunkI find it really handy and easing operations quite a lot17:28
noonedeadpunkI tended to use harder way, but well...17:29
spatelHiii folks 18:00
mgariepyhey spatel ! 18:02
mgariepyhow are you doing ?18:02
spatelGreat!! back from my vacation so though say Hi :) 18:02
spatelthought* 18:02
spatelHow you guys doing?  I am sure i missed lots of fun 18:04
mgariepyovn ssl is almost complete !18:06
mgariepyfun with 1000 options launcher script, some defaults not compatible with specified options and some config that needs to be in the DB !18:07
spatelwho is working on ovn ssl :)18:56
mgariepyme18:56
opendevreviewMarc Gariépy proposed openstack/openstack-ansible-os_neutron master: [WIP] add ovn ssl config  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/86240318:58
spatelmgariepy sweet!!! 19:02
opendevreviewMarc Gariépy proposed openstack/openstack-ansible-os_neutron master: [WIP] add ovn ssl config  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/86240319:03
mgariepyi'm only missing a small part with the ssl cert location.19:03
spatelI did some OVN SSL work and blog it here - https://satishdotpatel.github.io/ovn-ssl-setup-with-openstack/19:04
mgariepyyes i used it a bit :D19:06
mgariepyi learnt a few things about the certs for ovn.19:07
mgariepyyour blog covers the talks betweens differents component but when running a cluster, it also needs some configs for the cluster comms. 19:10

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!