ayush | hi Team | 06:48 |
---|---|---|
hamidlotfi_ | mornings | 06:48 |
ayush | i have one scenario where my Infra server where ansible and playbook were hosted got corrupted, now i have built a another server on ESXI with VLAN intact and working as before | 06:49 |
ayush | so should i boostrap the ansible first and then copy the backed up directory after | 06:50 |
ayush | or do i copy the directory first and then boot strapped the ansible, Do i need to keep in mind some thing | 06:50 |
hamidlotfi_ | I think you must separate the deploy server and infra servers. | 06:53 |
ayush | deploy server is my lxc container | 06:59 |
ayush | so both are different | 06:59 |
hamidlotfi_ | No, it's not correct, you have a separate machine for deployment and all lxcs contain all basic services(like Galera, rabbit,...) and OpenStack services (nova, neutron, keystone,...) | 07:05 |
ayush | hi hamid, deployer here is just used to push the playbooks | 07:10 |
hamidlotfi_ | yes, it's right. | 07:13 |
noonedeadpunk | mornings | 07:36 |
noonedeadpunk | I don't think that order of having conf/running bootstrap matters here | 07:37 |
Melonia | Hey there | 07:37 |
noonedeadpunk | eventually you can have deploy host in lxc or whenever actually... | 07:38 |
noonedeadpunk | o/ | 07:38 |
noonedeadpunk | it just can be a chicken-egg when you need to re-setup or upgrade one of infra servers | 07:39 |
Melonia | Do you know the open source panel as a customer dashboard with accounting and billing capabilities built into it? I need it for use as a proof of concept. There are paid and enterprise versions, I'm looking for something like https://osie.io and https://fleio.com. | 07:39 |
noonedeadpunk | Melonia: in openstack there's a project named cloudkitty, that can count billing units based on the usage https://docs.openstack.org/cloudkitty/latest/ | 07:40 |
noonedeadpunk | it has also a horizon plugin | 07:41 |
noonedeadpunk | and with smth like Adjutant you might make an entry point or self-portal out of horizon as well | 07:41 |
noonedeadpunk | though it won't make invoices or anything like that | 07:42 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_placement master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/888603 | 07:44 |
Melonia | noonedeadpunk: Is it supported? CAn I enable CloudKitty through OpenStack-Ansible All-in-One? | 07:45 |
noonedeadpunk | yes, you can :) | 07:45 |
noonedeadpunk | though you also need telemetry stack, like ceilometer/gnocchi | 07:46 |
noonedeadpunk | so you'd need to supply SCENARIO=aio_telemetry_cloudkitty for All-In-One | 07:46 |
noonedeadpunk | and have slightly more RAM then 8gb :) | 07:47 |
opendevreview | Merged openstack/openstack-ansible-os_murano stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_murano/+/892197 | 07:47 |
Melonia | Great | 07:47 |
Melonia | I hope to get a yes answer for this question: do you support skyline? Can I activate it for deployment? | 07:47 |
opendevreview | Merged openstack/openstack-ansible-os_aodh stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_aodh/+/892186 | 07:48 |
noonedeadpunk | Well, not really. We do have a POC role https://opendev.org/openstack/openstack-ansible-os_skyline but it's not fully integrated yet to the deployment. So it needs some effort to get it running | 07:48 |
noonedeadpunk | We were planning to integrate it for 2023.2 release (bobcat) | 07:49 |
opendevreview | Merged openstack/openstack-ansible-os_neutron stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/892195 | 07:49 |
noonedeadpunk | which is due in couple of month | 07:49 |
opendevreview | Merged openstack/openstack-ansible-os_horizon stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/892190 | 07:49 |
noonedeadpunk | We haven't prioritised it due to feature gap with horizon, like absent oauth2 support | 07:50 |
noonedeadpunk | not saying about support of some less popular services | 07:50 |
opendevreview | Merged openstack/openstack-ansible-os_sahara stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_sahara/+/892196 | 07:50 |
Melonia | Bobcat is nearby (: | 07:51 |
Melonia | For now, I will go with this cloudkitty to see how it is | 07:51 |
opendevreview | Merged openstack/openstack-ansible-os_octavia stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/892199 | 07:51 |
noonedeadpunk | Melonia: I can't recall if horizon is default for AIO, so you might want to use SCENARIO=aio_telemetry_cloudkitty_horizon just in case... | 07:52 |
opendevreview | Merged openstack/openstack-ansible-os_ceilometer stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/892194 | 07:53 |
opendevreview | Merged openstack/openstack-ansible-os_magnum stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/892192 | 07:53 |
opendevreview | Merged openstack/openstack-ansible-os_trove stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/892189 | 07:53 |
opendevreview | Merged openstack/openstack-ansible-os_manila stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/892188 | 07:55 |
opendevreview | Merged openstack/openstack-ansible-os_zun stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/892191 | 07:56 |
opendevreview | Merged openstack/openstack-ansible-os_glance stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/892193 | 07:56 |
opendevreview | Merged openstack/openstack-ansible-os_tacker stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_tacker/+/892198 | 07:56 |
opendevreview | Merged openstack/openstack-ansible-os_gnocchi stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/892187 | 07:56 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Respect haproxy_bind_internal_lb_vip_* variables https://review.opendev.org/c/openstack/openstack-ansible/+/852243 | 07:58 |
Melonia | noonedeadpunk: then what about SCENARIO=aio_ceph that I've deployed based on it? Can I keep both ceph and cloudkitty scenarios together? | 07:58 |
noonedeadpunk | yup, sure | 07:58 |
noonedeadpunk | you can just keep adding things you need separated with underscore | 07:58 |
noonedeadpunk | the only bug we have with that - is that list of tempest tests might not be populated correctly. Though I'm not sure if that is an issue for POC deployments at all | 07:59 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: [DNM] Bump ansible-core to 2.15.2 and collections https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 08:02 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-apt_package_pinning master: Fix linters issue and metadata https://review.opendev.org/c/openstack/openstack-ansible-apt_package_pinning/+/888172 | 08:02 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core to 2.15.3 and collections https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 08:06 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core to 2.15.3 and collections https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 08:07 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core to 2.15.3 and collections https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 08:07 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_adjutant master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/888469 | 08:12 |
noonedeadpunk | seems, we have upgrade jobs broken now on master, since keystone is now properly trimming passwords, which makes them invalid again.... | 08:14 |
noonedeadpunk | so we likely need to bump keystone on master as well, or as part of https://review.opendev.org/c/openstack/openstack-ansible/+/891474/3 | 08:15 |
noonedeadpunk | Also it's kinda weird that https://review.opendev.org/c/openstack/openstack-ansible/+/886527 is not scheduled in zuul at all.... | 08:15 |
noonedeadpunk | and it's due to some of depends-on.... | 08:17 |
jrosser | so the keystone password truncation is also in 2023.1 i guess | 08:17 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core to 2.15.3 and collections https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 08:18 |
jrosser | we need that landing in keystone 2023.1 / osa sha bump on that branch? | 08:18 |
noonedeadpunk | aha, found the guilty depndency :) | 08:19 |
noonedeadpunk | jrosser: fix of password truncation has landed in 2023.1 and zed | 08:19 |
noonedeadpunk | and we've merged bump of sha in 2023.1 | 08:19 |
noonedeadpunk | but not on master | 08:19 |
noonedeadpunk | so now, password is trimmed to 72 symbols on 2023.1 but when upgrading to master it's again 52 | 08:20 |
noonedeadpunk | from what I understood from logs... | 08:20 |
noonedeadpunk | so we need to update sha on master as well | 08:20 |
jrosser | 891474 is good to go or needs updating? | 08:21 |
noonedeadpunk | I've updated https://review.opendev.org/c/openstack/openstack-ansible/+/891474/3/inventory/group_vars/keystone_all/source_git.yml#20 to contain head of keystone | 08:22 |
noonedeadpunk | so should be good to go | 08:22 |
noonedeadpunk | https://opendev.org/openstack/keystone/commit/349706a4481edbf2600448bd9edc1a70eac371b1 | 08:22 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Add ability to define a config for journald https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/892151 | 08:25 |
Melonia | Does it matter what Linux distribution to use for AIO? What distribution do you run your tests on? | 08:27 |
noonedeadpunk | debian 11/ubuntu 22.04/rocky 9/centos stream 9 are supported ones | 08:27 |
noonedeadpunk | I'd say ubuntu is mostly used in our production deployments | 08:28 |
jrosser | Melonia: there is also some documentation here https://docs.openstack.org/openstack-ansible/2023.1/admin/upgrades/compatibility-matrix.html | 08:28 |
noonedeadpunk | we also don't test ceph against EL-ish repos right now | 08:28 |
noonedeadpunk | (we likely should though) | 08:28 |
jrosser | if you're deciding for long term then also look at the lifecycles of those OS, like LTS or whatever | 08:29 |
noonedeadpunk | If you're asking my personal opinion - I would use CentOS stream for produciton right now - it tends to break in CI a lot lately. | 08:30 |
noonedeadpunk | *I would not | 08:30 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/yoga: Installing systemd-udev with NVR https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/889350 | 08:40 |
opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-systemd_mount stable/yoga: Installing systemd-udev with NVR https://review.opendev.org/c/openstack/ansible-role-systemd_mount/+/889353 | 08:40 |
Melonia | noonedeadpunk: EL? | 08:43 |
Melonia | noonedeadpunk: CentOS "stream" for production? O_o | 08:44 |
noonedeadpunk | Enterprise Linux. Red Hat Enterprise Linux :) | 08:44 |
Melonia | Ah | 08:44 |
noonedeadpunk | I skupped NOT in the original statement :D | 08:45 |
noonedeadpunk | *skipped | 08:45 |
opendevreview | Merged openstack/openstack-ansible-os_keystone stable/2023.1: Stop reffering _member_ role https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/892098 | 09:23 |
Melonia | jrosser: Thanks; I'm going with Ubuntu12, but the table has not been updated for Debian 12 | 09:24 |
Melonia | Ubuntu22.04* | 09:24 |
jrosser | Melonia: well, work is required for each new OS we choose to support | 09:24 |
jrosser | the table not being updated means that no-one has contributed support for debian 12 yet | 09:25 |
jrosser | if you are interested in using OSA + debian 12 then of course, patches are welcome :) | 09:25 |
jrosser | Melonia: also it's worth knowing that for a released branch such as 2023.1/Antelope, it would be very unusual for us to retrospectively add support for a new OS | 09:28 |
jrosser | it is much more normal that we would do work now on Debian12, which would then become a supported os for the next release | 09:29 |
opendevreview | Merged openstack/openstack-ansible-openstack_hosts master: Drop bits for unsupported OS https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/892149 | 09:31 |
Melonia | jrosser: I see. thanks for the clarification. | 09:31 |
opendevreview | Merged openstack/openstack-ansible-os_ironic stable/2023.1: Stop reffering _member_ role https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/892100 | 09:34 |
opendevreview | Merged openstack/openstack-ansible-ceph_client stable/yoga: Use correct index of previous task results https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/891107 | 09:37 |
opendevreview | Merged openstack/openstack-ansible-os_ironic stable/2023.1: Fix lack of constraints for ironic-inspector https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/891741 | 09:49 |
opendevreview | Merged openstack/openstack-ansible stable/2023.1: haproxy: fix csp issue preventing embedded serial console https://review.opendev.org/c/openstack/openstack-ansible/+/891460 | 09:50 |
opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_ironic stable/zed: Fix lack of constraints for ironic-inspector https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/892301 | 09:54 |
opendevreview | Merged openstack/openstack-ansible-ceph_client stable/yoga: Define libvirt secrets from keyring files in ceph_extra_confs https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/891109 | 10:01 |
opendevreview | Merged openstack/openstack-ansible-ceph_client stable/2023.1: Define constraints file for docs and renos https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/892185 | 10:01 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Disable upgrade jobs after switching Xena to EM https://review.opendev.org/c/openstack/openstack-ansible/+/884928 | 10:22 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Use include_role in task to avoid lack of access to vars https://review.opendev.org/c/openstack/openstack-ansible/+/889021 | 10:27 |
andrewbonney | noonedeadpunk: did the rocky disk full issue get resolved? don't want to re-check https://review.opendev.org/c/openstack/openstack-ansible/+/891452 unnecessarily | 10:34 |
noonedeadpunk | andrewbonney: I think it needs smth like https://review.opendev.org/c/openstack/openstack-ansible/+/892155 | 10:34 |
noonedeadpunk | so no, it was not | 10:34 |
andrewbonney | ok | 10:34 |
noonedeadpunk | or, alternatively, drop ovs 2.17 constraint for rockty | 10:34 |
opendevreview | Merged openstack/openstack-ansible master: Bump upstream SHAs https://review.opendev.org/c/openstack/openstack-ansible/+/891474 | 10:35 |
noonedeadpunk | https://opendev.org/openstack/openstack-ansible-openstack_hosts/src/branch/stable/zed/vars/redhat-9.yml#L101-L103 | 10:35 |
noonedeadpunk | though it's still intermittent - some jobs do pass... | 10:37 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_mistral master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_mistral/+/892290 | 10:46 |
Melonia | Err: `fatal: Remote branch stable/antelope not found in upstream origin` | 10:49 |
Melonia | I'm using the command below: | 10:49 |
Melonia | `git clone -b stable/antelope https://opendev.org/openstack/openstack-ansible /opt/openstack-ansible` | 10:49 |
Melonia | But I get that error. Previously I deployed the Zed version successfully. | 10:50 |
Melonia | Isn't there any antelope branch yet? | 10:50 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/888729 | 11:00 |
noonedeadpunk | Melonia: branch is named stable/2023.1 | 11:00 |
noonedeadpunk | As openstack has switched to numeric names | 11:01 |
noonedeadpunk | https://governance.openstack.org/tc/resolutions/20220524-release-identification-process.html | 11:01 |
Melonia | Oh, I didn't knew. thanks | 11:08 |
art | Hi every one. I have set all my three computes as OVN_gateway. how can I remove one of them from the ovn_gateway list? | 11:14 |
art | I've removed the mentioned compute from the gw list in my openstack_user_config | 11:15 |
art | also, applied following commands: | 11:16 |
art | openstack-ansible setup-hosts.yml --limit localhost,compute02; openstack-ansible openstack-hosts-setup.yml -e openstack_hosts_group=nova_compute --tags openstack_hosts-file; sudo openstack-ansible os-neutron-install.yml --limit localhost,compute02 | 11:17 |
noonedeadpunk | art: so... removing service is slightly more weird process then it should be, especially when talking about services that run on metal | 11:18 |
noonedeadpunk | I don't think that re-running os-neutron-install.yml will result in removal of service from node | 11:18 |
art | so, it seems I should remove compute02 completely which lead to removing it from GW chassis list | 11:19 |
noonedeadpunk | Also, you'd need to remove the compute from ovn_gateway group in inventory | 11:19 |
noonedeadpunk | otherwise running the role will deploy ovn gateway again to it | 11:19 |
art | manually I should chanage the inventory? | 11:19 |
noonedeadpunk | I think that with compute, you can use `/opt/openstack-ansible/scripts/inventory-manage.py -r <compute_name>` | 11:20 |
noonedeadpunk | it will remove compute completely from the inventory, but it's safely re-added next time you will run openstack-ansible | 11:20 |
noonedeadpunk | (don't repeat same with containers until you execute `openstack-ansible lxc-containers-destroy.yml --limit <container_name>` | 11:21 |
art | got it. thanks alot | 11:21 |
noonedeadpunk | And then I think you should manually stop ovn gateway service on the compute | 11:21 |
noonedeadpunk | No idea if ovsdb should be cleaned-up in a way after that | 11:22 |
noonedeadpunk | stop , disable and probably even mask a service | 11:22 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Fix linters issues https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/892295 | 11:24 |
art | so, let me ask another question. I have installed OSA + OVN. and have set OVN_GW on my computes. None of the routers which their first chassis_gw priority is compute02, have access to the external network. Although VMs connected to these routers can ping the port on the router, but still can not fllow out of the router | 11:25 |
art | It seems all the configs on all three computes are the same. I dont know how can I find the problem | 11:26 |
art | that's why I decided to remove that compute from the list of OVN_GW s. | 11:26 |
art | do you have any idea what's going on in this scenario? | 11:26 |
art | @noonedeadpunk | 11:34 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Fix role metadata https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/892296 | 11:34 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core to 2.15.3 and collections https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 11:35 |
noonedeadpunk | art: nah, sorry, I'm quite bad in OVN, so not sure what's wrong | 11:36 |
art | that's ok. Thanks alot | 11:37 |
noonedeadpunk | my blind guess would be that you're missing some public network passed and configured on your computes, or interface is not added to OVS bridge that represents public network | 11:37 |
noonedeadpunk | there're other folks around who know more about OVN, though they're mostly around during EST daytime | 11:38 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core to 2.15.3 and collections https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 12:40 |
noonedeadpunk | this should be passing linters, finally | 12:40 |
opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-systemd_mount stable/yoga: Installing systemd-udev with NVR https://review.opendev.org/c/openstack/ansible-role-systemd_mount/+/889353 | 12:45 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/yoga: Installing systemd-udev with NVR https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/889350 | 12:45 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Add is_nest property for container_skel https://review.opendev.org/c/openstack/openstack-ansible/+/886206 | 12:46 |
opendevreview | Merged openstack/openstack-ansible stable/yoga: Restore an ability for HAProxy to bind on interal IP https://review.opendev.org/c/openstack/openstack-ansible/+/887577 | 13:07 |
opendevreview | Merged openstack/openstack-ansible master: Respect haproxy_bind_internal_lb_vip_* variables https://review.opendev.org/c/openstack/openstack-ansible/+/852243 | 13:07 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts stable/2023.1: Refactor LXC image expiration https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/892311 | 13:30 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts stable/zed: Refactor LXC image expiration https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/892312 | 13:30 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts stable/yoga: Refactor LXC image expiration https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/892313 | 13:30 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone stable/2023.1: Install libldap-common for keystone https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/892314 | 13:32 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone stable/zed: Install libldap-common for keystone https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/892315 | 13:32 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/2023.1: Rename internal variable _package_list https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/892316 | 13:32 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/2023.1: Rename internal variable _package_list https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/892316 | 13:33 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Apply rate limit for journald in AIO builds https://review.opendev.org/c/openstack/openstack-ansible/+/892155 | 13:36 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Bump upstream SHAs for Yoga https://review.opendev.org/c/openstack/openstack-ansible/+/892332 | 13:43 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Enable HTTP/2 for TLS-covered frontends https://review.opendev.org/c/openstack/openstack-ansible/+/891575 | 13:46 |
Melonia | After some hours, I get this error: https://paste.ubuntu.com/p/cWn7NPd55y/ that indicates `No package matching '{'name': 'ubuntu-cloud-keyring', 'state': 'latest'}' is available` | 13:56 |
Melonia | but as I check the OS: ubuntu-cloud-keyring is already the newest version (2021.03.26). | 13:57 |
noonedeadpunk | ah, yes, that's a bug we've jsut merged the fix for | 14:04 |
noonedeadpunk | https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/891476 | 14:05 |
noonedeadpunk | but basically you can re-run playbook manually | 14:05 |
Melonia | You mean re-running all playbooks, setup-everything.yml? | 14:21 |
Melonia | noonedeadpunk: ^ | 14:22 |
noonedeadpunk | where have you failed?:) | 14:22 |
Melonia | (I'm deploying the Zed version) | 14:22 |
noonedeadpunk | ugh, it's affecting zed as well... good to know | 14:22 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/zed: Rename internal variable _package_list https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/892318 | 14:23 |
Melonia | I remember neutron was deployed, and it was deploying Horizon | 14:23 |
opendevreview | Merged openstack/openstack-ansible-os_nova master: Allow Glance region to be set via variable https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/891515 | 14:23 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/zed: Rename internal variable _package_list https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/892318 | 14:23 |
noonedeadpunk | Melonia: then re-run either os-horizon-install.yml and down the list https://opendev.org/openstack/openstack-ansible/src/branch/stable/zed/playbooks/setup-openstack.yml#L24-L44 depending on what you need | 14:25 |
noonedeadpunk | or you can re-run setup-openstack.yml as a whole | 14:25 |
noonedeadpunk | (not setup-everything.yml though) | 14:26 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/2023.1: Allow Glance region to be set via variable https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/892319 | 14:26 |
Melonia | Then I run setup-openstack.yml | 14:26 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/zed: Allow Glance region to be set via variable https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/892320 | 14:26 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/yoga: Allow Glance region to be set via variable https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/892341 | 14:26 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Use include_role in task to avoid lack of access to vars https://review.opendev.org/c/openstack/openstack-ansible/+/889021 | 14:29 |
damiandabrowski | jrosser: can you have a look here when you have a moment? ;) you asked a question, but you probably missed my answer | 14:42 |
damiandabrowski | https://review.opendev.org/c/openstack/openstack-ansible/+/885194 | 14:42 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron stable/yoga: Drop OVN CI tests https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/892364 | 14:42 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron stable/yoga: Ensure service is restarted on unit file changes https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/882004 | 14:43 |
noonedeadpunk | #startmeeting openstack_ansible_meeting | 15:00 |
opendevmeet | Meeting started Tue Aug 22 15:00:19 2023 UTC and is due to finish in 60 minutes. The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
opendevmeet | The meeting name has been set to 'openstack_ansible_meeting' | 15:00 |
noonedeadpunk | #topic rollcall | 15:00 |
NeilHanlon | o/ hi | 15:00 |
noonedeadpunk | o/ | 15:00 |
damiandabrowski | hi! | 15:02 |
noonedeadpunk | #topic office hours | 15:04 |
noonedeadpunk | I think right now we have ourself unblocked | 15:04 |
noonedeadpunk | Except adjutant and senlin roles that are failing upgrades | 15:04 |
noonedeadpunk | So we need to define what we wanna merge for Antelope for 27.1.0 release | 15:05 |
NeilHanlon | is my sanity available for merge? i seem to have lost it | 15:05 |
noonedeadpunk | huh? not sure what's that :( | 15:06 |
NeilHanlon | joking about me being a bit crazy lately lol | 15:06 |
noonedeadpunk | ah lol | 15:07 |
noonedeadpunk | I can totally realate to that, as pretty much things are going on right now | 15:07 |
noonedeadpunk | For 2023.1 releasing, I think the most thing we might want to wait for - is keystone patch | 15:08 |
noonedeadpunk | #link https://review.opendev.org/c/openstack/keystone/+/891521 | 15:08 |
noonedeadpunk | and then it's backport | 15:08 |
noonedeadpunk | As I guess from our side we've backported (maybe not merged on 2023.1 but at least on master) everything we wanted | 15:09 |
noonedeadpunk | For fixing adjutant we need to bump Zed SHAs, then it will fix atnelope upgrade jobs and allow to merge antelope patches | 15:12 |
damiandabrowski | yup, at least all my patches are already merged to 2023.1 which is pretty awesome | 15:12 |
noonedeadpunk | for senlin - I;m going to check why it's failing in aio. As it's db upgrade that fails in jobs | 15:13 |
noonedeadpunk | regarding db upgrade - it seems we're missing online upgrade command for placement | 15:13 |
noonedeadpunk | has started working on that https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/892159 | 15:14 |
noonedeadpunk | Then let's move to discussing current development | 15:15 |
noonedeadpunk | Ansible-core 2.15 is about to pass this time | 15:15 |
noonedeadpunk | #link https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 15:15 |
noonedeadpunk | We still need some patches to land that are fixing linters | 15:15 |
noonedeadpunk | (and I guess bringing bugs) | 15:15 |
noonedeadpunk | then as a follow-up to discussion regarding TLS performance degradation - I've pushed a patch that proposes to enable http/2 when TLS is enabled on all backends | 15:17 |
noonedeadpunk | though it also capable of enabling http/2 only when there is no TLS | 15:17 |
noonedeadpunk | #link https://review.opendev.org/q/topic:osa/h2 | 15:17 |
noonedeadpunk | I guess having HTTP/2 without TLS is quite arguable decision | 15:21 |
noonedeadpunk | Though I'm not sure we should prevent anyone from doing that | 15:21 |
noonedeadpunk | But I kinda wonder if we might want to split these variables to enable http/2 only for TLS and for non-tls | 15:22 |
noonedeadpunk | Or do that just for TLS, given that redirects and stuff are not covered anyway | 15:23 |
damiandabrowski | i was going to suggest that, as most browsers support HTTP/2 only over TLS | 15:23 |
NeilHanlon | that's a tricky one, yeah | 15:23 |
damiandabrowski | https://www.haproxy.com/documentation/hapee/latest/load-balancing/protocols/http-2/#:~:text=Most%20browsers%20support%20HTTP/2%20over%20HTTPS%20only%2C%20but%20you%20may%20find%20it%20useful%20to%20enable%20h2c%20between%20backend%20services%20(e.g.%20gRPC%20services) | 15:23 |
noonedeadpunk | I was actually thinking for consistency between behaviour for frontends and backends | 15:25 |
damiandabrowski | and backends? do they support http/2? | 15:26 |
noonedeadpunk | not openstack backends | 15:27 |
noonedeadpunk | but role is kinda used outside of openstack as well | 15:27 |
noonedeadpunk | well, ok. | 15:27 |
noonedeadpunk | then let's simplfy | 15:27 |
noonedeadpunk | we use http/2 for frontends only if TLS is enabled | 15:28 |
noonedeadpunk | for backends - we rely on `haproxy_backend_h2`? | 15:28 |
damiandabrowski | sounds good for me | 15:28 |
noonedeadpunk | ok, will update patches then | 15:29 |
damiandabrowski | or maybe we can skip haproxy_backend_h2 because it can be passed in backend args? | 15:29 |
noonedeadpunk | and maybe even limit to a single patch and default `haproxy_frontend_h2` to True? | 15:29 |
damiandabrowski | ah yes, alpn should do the job then | 15:30 |
noonedeadpunk | then we have openstack_resources role that is finally passing | 15:33 |
noonedeadpunk | https://review.opendev.org/q/topic:osa%252Fopenstack_resources | 15:33 |
noonedeadpunk | it seems, that even octavia migration is done accurately | 15:33 |
noonedeadpunk | what I don't really like about that (octavia compatibility), that new deployments will be messed up with a short rsa key and old algo... | 15:34 |
noonedeadpunk | not sure what to do about that though | 15:36 |
noonedeadpunk | don't really want to implement a variable that needs to be overriden on upgrade, but probably that's smth worth actually doing | 15:37 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Fix linters to satisfy ansible-lint 6.18 https://review.opendev.org/c/openstack/openstack-ansible/+/886527 | 15:47 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-core to 2.15.3 and ansible-lint https://review.opendev.org/c/openstack/openstack-ansible/+/892371 | 15:51 |
opendevreview | Damian DÄ…browski proposed openstack/openstack-ansible stable/2023.1: Gather facts before including common-playbooks https://review.opendev.org/c/openstack/openstack-ansible/+/889023 | 15:52 |
damiandabrowski | ahhh, I missed this change: https://review.opendev.org/c/openstack/openstack-ansible/+/889023 | 15:53 |
damiandabrowski | for sure it needs to land before 27.1.0 :D | 15:53 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible collection versions https://review.opendev.org/c/openstack/openstack-ansible/+/892373 | 15:54 |
noonedeadpunk | damiandabrowski: you can't apply depends-on to another branch | 15:54 |
noonedeadpunk | or well. it will unlikely get merged like that iirc | 15:54 |
noonedeadpunk | but yes, good point that we'd need that | 15:55 |
damiandabrowski | awww thanks, i completely missed that these 2 changes are in different branches :D | 15:55 |
opendevreview | Damian DÄ…browski proposed openstack/openstack-ansible stable/2023.1: Gather facts before including common-playbooks https://review.opendev.org/c/openstack/openstack-ansible/+/889023 | 15:55 |
noonedeadpunk | so the summury of what's waiting to land for 2023.1 is here | 15:56 |
noonedeadpunk | #link https://review.opendev.org/q/parentproject:openstack/openstack-ansible+branch:%255Estable/2023.1+status:open+ | 15:56 |
noonedeadpunk | and yeah, I disk full is another good topic to cover | 15:56 |
noonedeadpunk | so this happens due to the bug in ovs itself | 15:56 |
noonedeadpunk | it has been resolved for quite a while though, but rdo has stopped building ovs 2.17 | 15:57 |
noonedeadpunk | so we either need let major upgrade of ovs to happen for stable branches | 15:57 |
noonedeadpunk | or trimm logs. | 15:57 |
noonedeadpunk | not sure what's best tbg... | 15:57 |
noonedeadpunk | trimming logs kinda make sense to me regardelss | 15:58 |
noonedeadpunk | but maybe we should also let stable branches to get latest ovs that's supplied by rdo for the branch.... | 15:58 |
noonedeadpunk | as it's probably also not best solution from security prespective to stick with old unmaintained version for too long... | 15:59 |
damiandabrowski | i'm ok with both solutions | 15:59 |
noonedeadpunk | #endmeeting | 16:01 |
opendevmeet | Meeting ended Tue Aug 22 16:01:36 2023 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:01 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-08-22-15.00.html | 16:01 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-08-22-15.00.txt | 16:01 |
opendevmeet | Log: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-08-22-15.00.log.html | 16:01 |
karen_ | Hi | 16:06 |
noonedeadpunk | o/ | 16:07 |
karen_ | Does horizon project have any plugin for registration service that let users easily create their account? | 16:07 |
frickler | karen_: you may want to look at adjutant and the accompanying dashboard | 16:09 |
noonedeadpunk | karen_: adjutant https://docs.openstack.org/adjutant/latest/ | 16:09 |
NeilHanlon | thanks for running the meeting noonedeadpunk! | 16:09 |
noonedeadpunk | thanks for participating! | 16:13 |
opendevreview | Merged openstack/openstack-ansible-os_swift stable/2023.1: Stop reffering _member_ role https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/892097 | 16:17 |
Melonia | Oh, I forget adjutant | 16:29 |
noonedeadpunk | ++ | 16:29 |
Melonia | `SCENARIO=aio_telemetry_cloudkitty_adjutant_horizon` ? | 16:29 |
Melonia | > adjutant has also a horizon plugin and with it you might make an entry point or self-portal out of horizon as well | 16:30 |
Melonia | noonedeadpunk: What do you mean by "Horizon plugin"? | 16:31 |
Melonia | karen: ^ | 16:31 |
noonedeadpunk | so adjutant consist of API service, that handles registration, database and some integrations, and also a horizon plugin, that integrates a registration button and some stuff | 16:32 |
noonedeadpunk | and it's represented by a stand-alone repo https://github.com/openstack/adjutant-ui | 16:32 |
noonedeadpunk | as horizon is highly pluggable dashboard comapring to skyline | 16:33 |
noonedeadpunk | while skyline is pretty monolythic, horizon can be easily expanded or customised by plugins | 16:33 |
noonedeadpunk | most of openstack services outside of core ones, does integrate to horizon through plugins | 16:34 |
opendevreview | Merged openstack/openstack-ansible-os_horizon stable/2023.1: Stop reffering _member_ role https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/892094 | 16:35 |
Melonia | This is what I run: `SCENARIO=aio_telemetry_cloudkitty` | 16:35 |
Melonia | Oops, this one: SCENARIO=aio_telemetry_cloudkitty_horizon | 16:36 |
noonedeadpunk | but yes, if you want to have adjutant as well - SCENARIO=aio_telemetry_cloudkitty_adjutant_horizon is a way to do that | 16:36 |
Melonia | And now, I don't see any cloudkitty stuff in the dashboard? | 16:36 |
Melonia | and, are adjutant and adjutant-ui supported through deployment? | 16:37 |
noonedeadpunk | well, they are but barely tested. | 16:37 |
noonedeadpunk | one folk uses that in production iirc | 16:38 |
Melonia | SCENARIO=aio_telemetry_cloudkitty_adjutant_horizon or SCENARIO=aio_telemetry_cloudkitty_adjutant_adjutant-ui_horizon ? | 16:38 |
noonedeadpunk | so under project menu there should appear `rating` panel | 16:38 |
noonedeadpunk | SCENARIO=aio_telemetry_cloudkitty_adjutant_horizon | 16:39 |
Melonia | Ah, ok | 16:39 |
noonedeadpunk | if we're talking about cloudkitty | 16:39 |
Melonia | let me check | 16:39 |
noonedeadpunk | and also there should be a confguration thing somewhere in admin | 16:39 |
Melonia | noonedeadpunk: Under "Project" I see only " API Access" | 16:41 |
noonedeadpunk | huh | 16:41 |
noonedeadpunk | I'd need to reproduce the environment to check that... | 16:41 |
Melonia | my bad; This is what i have: (uploading a picture....) | 16:42 |
Melonia | noonedeadpunk: https://i.imgur.com/jxdrq1D.png | 16:45 |
noonedeadpunk | looks like it's absent indeed | 16:45 |
noonedeadpunk | do you have a cloudkitty container present? also is it present in `openstack endpoint list` output? | 16:48 |
noonedeadpunk | I'm spawning a sandbox, but that might take an hour or so, and I'm not sure I will be around when it will finish | 16:52 |
opendevreview | Merged openstack/openstack-ansible stable/2023.1: Stop reffering _member_ role https://review.opendev.org/c/openstack/openstack-ansible/+/892096 | 16:53 |
Melonia | noonedeadpunk: no it's not in the list: https://paste.opendev.org/show/bca9An2qez6kZRKaRiUc/ | 16:55 |
noonedeadpunk | looks like telemetry is not either | 16:55 |
noonedeadpunk | so... how exactly did you ran AIO setup? | 16:56 |
Melonia | Oooops, wait a moment | 16:56 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_placement master: Add online_data_migrations for placement https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/892159 | 16:59 |
Melonia | I export the SCENARIO, but I was dropt SSH out once and I forget to export it again! | 17:03 |
Melonia | noonedeadpunk: I'm going to run this command to reinstall AIO: https://pastebin.com/xBNFJRhx | 17:04 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_placement master: Add online_data_migrations for placement https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/892159 | 17:04 |
Melonia | May you please review them? | 17:04 |
noonedeadpunk | yeah, looks good | 17:04 |
noonedeadpunk | or well. | 17:04 |
noonedeadpunk | yeah, might work. | 17:05 |
Melonia | thanks | 17:05 |
noonedeadpunk | but not guaranteed | 17:05 |
Melonia | no problem, then I will reinstall the OS | 17:05 |
noonedeadpunk | AIO is kind of not well tested when re-running it, since some networking/storage config can't be done one more time | 17:05 |
noonedeadpunk | though it's worth a shot | 17:06 |
noonedeadpunk | it's specifically bootstrap-aio.sh that might not be idempotent | 17:06 |
noonedeadpunk | but still - try that and tell us how it went :D | 17:06 |
opendevreview | Merged openstack/openstack-ansible stable/2023.1: Use include_role in task to avoid lack of access to vars https://review.opendev.org/c/openstack/openstack-ansible/+/888659 | 17:07 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_gnocchi master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/888568 | 17:31 |
opendevreview | Merged openstack/openstack-ansible-os_masakari master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_masakari/+/888598 | 17:31 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/zed: Add is_nest property for container_skel https://review.opendev.org/c/openstack/openstack-ansible/+/886316 | 17:44 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/zed: Pin version of setuptools https://review.opendev.org/c/openstack/openstack-ansible/+/887157 | 17:50 |
opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/2023.1: Rename internal variable _package_list https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/892316 | 18:56 |
opendevreview | Merged openstack/openstack-ansible-os_gnocchi master: Use proper galera port in configuration https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/890100 | 19:22 |
opendevreview | Merged openstack/openstack-ansible-os_aodh master: Use proper galera port in configuration https://review.opendev.org/c/openstack/openstack-ansible-os_aodh/+/890093 | 19:29 |
opendevreview | Merged openstack/openstack-ansible stable/yoga: Add is_nest property for container_skel https://review.opendev.org/c/openstack/openstack-ansible/+/886206 | 20:16 |
opendevreview | Bjoern Teipel proposed openstack/openstack-ansible-ops master: Fix missing cinder volume backend for ceph https://review.opendev.org/c/openstack/openstack-ansible-ops/+/892422 | 21:38 |
spotz[m] | noonedeadpunk: Did you mean to skip the PTG? | 22:19 |
opendevreview | Merged openstack/openstack-ansible-os_horizon master: Fix wrong neutron_ml2_drivers_type https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/888917 | 22:25 |
opendevreview | Merged openstack/openstack-ansible-os_ceilometer master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/888476 | 22:49 |
opendevreview | Merged openstack/openstack-ansible-os_gnocchi master: Fix linters and metadata https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/888568 | 22:58 |
opendevreview | Merged openstack/openstack-ansible stable/zed: Pin version of setuptools https://review.opendev.org/c/openstack/openstack-ansible/+/887157 | 23:25 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!