*** ysandeep|out is now known as ysandeep | 05:53 | |
*** ysandeep is now known as ysandeep|afk | 10:53 | |
*** dviroel|holiday is now known as dviroel|rover | 11:19 | |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Remove mariadb-connector-c during upgrades https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/863515 | 12:00 |
---|---|---|
*** ysandeep|afk is now known as ysandeep | 12:22 | |
*** ysandeep is now known as ysandeep|out | 13:44 | |
opendevreview | Marc Gariépy proposed openstack/openstack-ansible-os_neutron master: [WIP] add ovn ssl config https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/862403 | 14:19 |
jrosser | jamesdenton: os_ironic doesnt do anything for uploading deploy ramdisk images to glance (https://docs.openstack.org/ironic/latest/install/configure-glance-images.html) - do you think we should do that? | 14:28 |
mgariepy | jrosser, can i do "and / or" in condition for pki install certs? | 14:28 |
mgariepy | like: condition: "{{ neutron_ovn_ssl }}" and "{{ neutron_needs_openvswitch }}" | 14:28 |
jrosser | jamesdenton: these are the same ones staged into the ironic-inspector here i think https://github.com/openstack/openstack-ansible-os_ironic/blob/master/defaults/main.yml#L443-L446 | 14:28 |
jrosser | mgariepy: you have have anything that evaulates with | bool i think | 14:29 |
jrosser | but do watch out for all defined strings being True when you do things like that | 14:29 |
mgariepy | ok i'll test it out then. | 14:30 |
mgariepy | for ovn ssl ovn run as root neutron run as neutron and i need to cert to be copied for both user.. | 14:30 |
jrosser | huh interesting | 14:31 |
jrosser | thats unfortunate | 14:31 |
jamesdenton | jrosser yes, we ought to consider deploying those, i think | 14:31 |
mgariepy | yep | 14:31 |
jrosser | mgariepy: if you really mean the cert then thats not secret, so permissions might be helpful there | 14:31 |
mgariepy | they need the key as well. | 14:32 |
jrosser | jamesdenton: i was also quite surprised to see that it wants the glance UUID when you enrol the node | 14:32 |
jrosser | which points to a release specific deploy image | 14:32 |
jrosser | and then you do an upgrade...... | 14:32 |
jrosser | now what?! | 14:32 |
mgariepy | so meh i'll copy for both since it would cover both metal and container. | 14:33 |
jamesdenton | yeah, the IPA in the ramdisk image does have some backwards compatibility, but if you stray too far deploys will fail | 14:33 |
jamesdenton | as you do openstack upgrades you have to be mindful to update the baremetal node properties, too, to update the ramdisk and kernel UUIDs. | 14:35 |
jamesdenton | not a well documented step, i think | 14:35 |
*** dviroel|rover is now known as dviroel|afk | 15:50 | |
*** dviroel|afk is now known as dviroel|rover | 16:56 | |
mgariepy | fun. neutron venv is deployed for not much good reason on ovn_northd container | 17:01 |
noonedeadpunk | mmm... sounds like common logic issue... as when we started ovs service when it was not needed | 17:28 |
noonedeadpunk | But I thought that we install neutron venv only on api... | 17:28 |
noonedeadpunk | hm... we don't have any conditions there... https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/tasks/neutron_install.yml#L89 | 17:30 |
noonedeadpunk | mgariepy: do we have any neutron service running in there? | 17:30 |
mgariepy | not on northd container | 17:30 |
mgariepy | it needs to be there on the compute tho | 17:31 |
noonedeadpunk | Maybe we can add `- (filtered_neutron_services + uwsgi_neutron_services) | length > 0`? | 17:31 |
mgariepy | yep i guess we could. | 17:32 |
noonedeadpunk | but what out of neutron we need on computes? ovs agent? | 17:32 |
mgariepy | https://github.com/openstack/openstack-ansible-os_neutron/blob/master/vars/main.yml#L539 | 17:33 |
mgariepy | ovn_meta | 17:33 |
noonedeadpunk | So computes are part of neutron_ovn_controller group? | 17:34 |
mgariepy | yes | 17:34 |
noonedeadpunk | oh, ok... | 17:34 |
noonedeadpunk | just controller group does not associate with computes in my head :D | 17:35 |
mgariepy | yeah.. | 17:35 |
mgariepy | well. | 17:35 |
mgariepy | on ubuntu the pkg is called ovn-hosts ) | 17:35 |
opendevreview | Marc Gariépy proposed openstack/openstack-ansible-os_neutron master: Do not install neutron venv if not needed. https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/863546 | 17:39 |
mgariepy | can only concatenate list (not "dict") to list LOL | 17:47 |
opendevreview | Marc Gariépy proposed openstack/openstack-ansible-os_neutron master: Do not install neutron venv if not needed. https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/863546 | 17:50 |
opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Refactor ironic deploy image handling. https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/863549 | 18:12 |
opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Refactor ironic deploy image handling. https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/863549 | 18:16 |
opendevreview | Marc Gariépy proposed openstack/openstack-ansible-os_neutron master: [WIP] add ovn ssl config https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/862403 | 19:47 |
opendevreview | James Denton proposed openstack/openstack-ansible master: Update container_networks address for is_metal containers https://review.opendev.org/c/openstack/openstack-ansible/+/863554 | 19:48 |
*** arxcruz|ruck is now known as arxcruz | 20:05 | |
opendevreview | Marc Gariépy proposed openstack/openstack-ansible-os_neutron master: Do not install neutron venv if not needed. https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/863546 | 20:14 |
spatel | keepalived keep throwing error - (external) received an invalid passwd! | 20:39 |
spatel | is it safe to ignore it? | 20:39 |
opendevreview | James Denton proposed openstack/openstack-ansible master: Update container_networks address for is_metal containers https://review.opendev.org/c/openstack/openstack-ansible/+/863554 | 21:40 |
*** dviroel|rover is now known as dviroel|afk | 22:29 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!