| opendevreview | Ke Niu proposed openstack/ansible-role-python_venv_build master: setup.cfg: Replace dashes with underscores https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/882253 | 01:13 |
|---|---|---|
| opendevreview | Merged openstack/openstack-ansible-os_ceilometer stable/zed: Ensure service is restarted on unit file changes https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/881977 | 12:18 |
| anskiy | Hey. Looks like this thing: https://opendev.org/openstack/openstack-ansible-plugins/src/branch/master/roles/service_setup/tasks/main.yml#L80, which runs on every `os-nova-install` playbook run breaks nova <-> neutron communication, as I'm getting a bunch of 401/400 on the `/servers` API with "Networking client is experiencing an unauthorized exception" message. This is baremetal deployment. | 13:28 |
| anskiy | which gets fixed by restarting nova-api-os-compute on control plane. I wonder, if LXC deployment just restarts that container on every run too. | 13:29 |
| noonedeadpunk | No, it's not restarting container | 13:32 |
| noonedeadpunk | Actually, I kind of wonder how it would break it if password is the same | 13:32 |
| noonedeadpunk | I also can't recall anything like that happening while running nova/neutron playbooks - never had to restart anything | 13:33 |
| noonedeadpunk | I wonder though if you're running master or some stable branch right now? | 13:34 |
| anskiy | it's Yoga | 13:34 |
| noonedeadpunk | As we did applied a change quite recently, that will skip service restart in some cases | 13:34 |
| noonedeadpunk | But yeah, this change is on master only | 13:34 |
| noonedeadpunk | The only guess I have, is that module misbehaves and not only reset password, but also reset user role assignments, but I kinda doubt that | 13:35 |
| noonedeadpunk | I'd need to test that out... | 13:36 |
| noonedeadpunk | but feel free to propose change to make this configurable | 13:37 |
| anskiy | I can't reproduce it in test env, so it could be something specific to my prod | 13:48 |
| noonedeadpunk | or it just needs some load or smth | 13:51 |
| noonedeadpunk | like long-running requests | 13:51 |
| mgariepy | rust all the things. https://beta.ruff.rs/docs/ | 14:47 |
| noonedeadpunk | should work great with https://github.com/RustPython/RustPython :D | 14:50 |
| spatel | Does anyone know nova config to limit only run N number of vms? | 14:57 |
| spatel | I meant Number of virtual machines per KVM host | 14:58 |
| damiandabrowski | spatel: https://docs.openstack.org/nova/latest/admin/scheduling.html#aggregatenuminstancesfilter | 15:12 |
| damiandabrowski | oh sorry, that's probably a correct link: | 15:13 |
| damiandabrowski | https://docs.openstack.org/nova/latest/admin/scheduling.html#numinstancesfilter | 15:13 |
| damiandabrowski | jrosser: any chance You are around? | 15:21 |
| damiandabrowski | this patch breaks proxy job: | 15:22 |
| damiandabrowski | https://review.opendev.org/c/openstack/openstack-ansible/+/881967 | 15:22 |
| damiandabrowski | it's because images uploaded to glance are corrupted: | 15:22 |
| damiandabrowski | https://zuul.opendev.org/t/openstack/build/e74c17e55bfe446482b8e13d46081855/log/logs/openstack/aio1_glance_container-6357cea4/glance-api.service.journal-12-25-24.log.txt?severity=0#1033 | 15:22 |
| damiandabrowski | I don't know why exactly it fails but I noticed that we don't have internal VIP(.101) in no_proxy(we only have .100). | 15:22 |
| damiandabrowski | After adding .101 to no_proxy(internal VIP) it looks ok. | 15:22 |
| damiandabrowski | I wonder if it's acceptable solution? :D | 15:22 |
| damiandabrowski | btw. I also noticed that this task is not executed anymore(and its file actually contains internal VIP in no_proxy) | 15:22 |
| damiandabrowski | https://opendev.org/openstack/openstack-ansible/src/branch/master/tests/roles/bootstrap-host/tasks/prepare_aio_config.yml#L125 | 15:22 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Do not expose admin/internal endpoint over https in AIO https://review.opendev.org/c/openstack/openstack-ansible/+/881967 | 16:01 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Add 'tls' scenario https://review.opendev.org/c/openstack/openstack-ansible/+/881968 | 16:01 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Remove user_variables_proxy.yml references https://review.opendev.org/c/openstack/openstack-ansible/+/882453 | 16:01 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Add internal_lb_vip_address to no_proxy https://review.opendev.org/c/openstack/openstack-ansible/+/882454 | 16:01 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible stable/yoga: Do not define cluster template labels https://review.opendev.org/c/openstack/openstack-ansible/+/881660 | 16:20 |
| spatel | damiandabrowski Thanks | 16:21 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Do not define cluster template labels https://review.opendev.org/c/openstack/openstack-ansible/+/881566 | 16:21 |
| jrosser | damiandabrowski: i am here for a short time | 16:21 |
| spatel | damiandabrowski I thought nova.conf has simple config you can say number of vm = 10 or something | 16:22 |
| jrosser | damiandabrowski: this task i think is to make an AIO work if your vm already has a proxy config in environment https://opendev.org/openstack/openstack-ansible/src/branch/master/tests/roles/bootstrap-host/tasks/prepare_aio_config.yml#L125 | 16:22 |
| jrosser | yes the commit message explains that https://opendev.org/openstack/openstack-ansible/commit/63488139c63e0ad6578da2211ce6188ccd5bb859 | 16:23 |
| damiandabrowski | ahhh | 16:24 |
| jrosser | the scenario turns proxy stuff on here https://opendev.org/openstack/openstack-ansible/src/branch/master/tests/roles/bootstrap-host/templates/user_variables.aio.yml.j2#L305-L312 | 16:25 |
| damiandabrowski | https://review.opendev.org/c/openstack/openstack-ansible/+/882454 | 16:26 |
| damiandabrowski | what do you think about this patch? | 16:26 |
| jrosser | yes that looks good - at some point we added the extra .101 address and i expect that was just forgotton | 16:27 |
| jrosser | in the past everything was on .100 but making the metal jobs work with bind-to-mgmt changes meant the vip needed to move | 16:27 |
| damiandabrowski | ahhh okok, thanks! | 16:35 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Add internal_lb_vip_address to no_proxy https://review.opendev.org/c/openstack/openstack-ansible/+/882454 | 16:35 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Do not expose admin/internal endpoint over https in AIO https://review.opendev.org/c/openstack/openstack-ansible/+/881967 | 16:36 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Add 'tls' scenario https://review.opendev.org/c/openstack/openstack-ansible/+/881968 | 16:36 |
| damiandabrowski | i abandoned https://review.opendev.org/c/openstack/openstack-ansible/+/882453 | 16:36 |
| NeilHanlon | i have some chicken/egg problem with testing my ovn packages and looking for some advice. i need to add a repo manually in neutron (and nova) role as there is not yet a package which provides the repo files with my testing packages | 16:56 |
| spatel | NeilHanlon can you just add custom repo and version to install new ovn packages. Its all distro packages for OVN | 16:59 |
| noonedeadpunk | NeilHanlon: well, then we'd need to add tasks/variables to add repos and GPG keys | 17:03 |
| noonedeadpunk | like https://opendev.org/openstack/openstack-ansible-openstack_hosts/src/branch/master/tasks/openstack_hosts_configure_dnf.yml#L55-L93 | 17:05 |
| jrosser | there is this https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/defaults/main.yml#L64-L75 | 17:06 |
| jrosser | and i think repos pre-defined on the hosts get pulled into any containers for lxc deployments | 17:06 |
| noonedeadpunk | well, I don't think we want ovn repos to be present everywhere? | 17:08 |
| NeilHanlon | the sig-nfv repo is only enabled conditionally in the neutron/nova roles | 17:09 |
| NeilHanlon | but yeah, the hosts get the 'rdo' repos | 17:09 |
| jrosser | no and i am maybe not sure that i'm right about that too | 17:09 |
| noonedeadpunk | It's about that https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/vars/redhat.yml#L17 is not present yet for Rocky | 17:09 |
| noonedeadpunk | though repo is present | 17:09 |
| noonedeadpunk | So for rhel we can resume using the package, but for rocky create a standalone file, where define repos instead | 17:10 |
| NeilHanlon | well, it's present, but it points to the c9s repos instead of c9 (which is what has the "fixed" ovs3.1 and ovn22.12) | 17:10 |
| jrosser | can you do `-e neutron_repos=['other-thing']` | 17:11 |
| NeilHanlon | i am hoping i can just make an installable RPM that will give us the repos, but for testing would be nice to make them manually.. will probably put it in as DNM for now | 17:11 |
| NeilHanlon | yeah that would work jrosser, if i give it the right package. good idea | 17:11 |
| noonedeadpunk | huh, rdo folks told that fixed ovs should be already published... but yeah, I didn't confirm where it's published | 17:12 |
| jrosser | -e would be the same as putting the same in user_variables.yml fwiw | 17:13 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ceilometer master: Fix logic of defining polling_namespaces https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/882466 | 18:25 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ceilometer master: Fix logic of defining polling_namespaces https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/882466 | 18:26 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ceilometer master: Fix logic of defining polling_namespaces https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/882466 | 21:22 |
| opendevreview | Merged openstack/openstack-ansible-haproxy_server master: Deprecate certbot-auto https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/881578 | 21:49 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!