| opendevreview | OpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/c/openstack/openstack-ansible/+/958000 | 03:53 |
|---|---|---|
| opendevreview | Merged openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/c/openstack/openstack-ansible/+/958000 | 07:15 |
| opendevreview | Merged openstack/ansible-role-pki master: Add default permissions for certificate, chain, and private key installation https://review.opendev.org/c/openstack/ansible-role-pki/+/957798 | 10:57 |
| opendevreview | Merged openstack/ansible-role-pki master: Add defaults for ownership of installed files on the target https://review.opendev.org/c/openstack/ansible-role-pki/+/957848 | 11:54 |
| damiandabrowski | noonedeadpunk: I think that this *-chain.crt problem is not the only issue with octavia right now :/ | 12:29 |
| damiandabrowski | when*-chain.crt issue is fixed, octavia CI fails with: https://zuul.opendev.org/t/openstack/build/a085f8e43c1740dbb2ec659838c2df0d | 12:29 |
| damiandabrowski | it was failing with this error even before we merged https://review.opendev.org/c/openstack/ansible-role-pki/+/956576 (which introduced issue with *-chain.crt) | 12:30 |
| damiandabrowski | I think it's caused by the fact that firstly, we create octavia endpoint(openstack.osa.service_setup) and then we run octavia_resources.yml which tries to set quotas | 12:31 |
| damiandabrowski | so at the time when OSA tries to set quota for the service project, octavia endpoint is defined but octavia itself is not yet functional | 12:31 |
| damiandabrowski | so setting quotas fail | 12:31 |
| damiandabrowski | that's at least my theory, have we seen this behavior in any other service? | 12:32 |
| jrosser | maybe we had something similar with magnum, i'm not sure | 12:34 |
| damiandabrowski | openstack.cloud.quota module introduced support for load_balancer quotas quite recently, it may partially explains why it wasn't an issue before | 12:36 |
| damiandabrowski | https://opendev.org/openstack/ansible-collections-openstack/commit/57c63e7918659b4897cc39e50460aba6b40a5936#diff-ca4fad21675b7d9b029b213a9629606546fe7009 | 12:36 |
| jrosser | damiandabrowski: there is also an example in keystone i think, where ther federation cannot be configured until the service is completely available | 12:59 |
| jrosser | so there is an extra set of tasks that only execute once the whole deployment is done | 13:00 |
| jrosser | *whole keystone deployment | 13:00 |
| damiandabrowski | hmm... technically speaking, octavia_resources does not create any octavia resources :D | 13:07 |
| damiandabrowski | i just changed tasks order to create resources for octavia(quotas, networks etc.) before octavia endpoint is created and it seems to be working | 13:08 |
| noonedeadpunk | oh, yes, I saw this one | 13:28 |
| noonedeadpunk | but then on recheck I faced a different one | 13:30 |
| noonedeadpunk | I think we might actually move it to the very end instead | 13:36 |
| noonedeadpunk | if we can.... | 13:37 |
| noonedeadpunk | and probably we can't.... | 13:37 |
| mgariepy | lecacy stuff is annoying.. | 13:38 |
| noonedeadpunk | it lkely a new stuff, not legacy | 13:38 |
| mgariepy | i'm complaining about my legacy stuff haha | 13:38 |
| noonedeadpunk | ah :D | 13:38 |
| mgariepy | https://github.com/openstack/openstack-ansible/blob/unmaintained/zed/playbooks/common-playbooks/neutron.yml#L70-L72 << this doesnt work on lxb network agent in lxc containers. | 13:39 |
| noonedeadpunk | eh | 13:40 |
| noonedeadpunk | I never ran lxb inside of lxc | 13:40 |
| noonedeadpunk | so can't comment at all | 13:40 |
| mgariepy | utils.c: open_without_symlink: 1085 Too many levels of symbolic links - lib in /usr/lib/x86_64-linux-gnu/lxc/lib/modules was a symbolic link! | 13:40 |
| mgariepy | legacy.. | 13:41 |
| mgariepy | upgrading since.. kilo i think. | 13:41 |
| noonedeadpunk | I'd expecte that cgroupv2 should be involved there at point of Zed | 13:41 |
| noonedeadpunk | but not sure | 13:41 |
| noonedeadpunk | or just slightly different caps.... | 13:41 |
| mgariepy | meh. i will switch to ovn at some point.. | 13:42 |
| mgariepy | just need to upgrade a bit first.. | 13:42 |
| noonedeadpunk | please write notes on how you did that :) | 13:42 |
| mgariepy | only vlan involved. | 13:42 |
| noonedeadpunk | ah so no vxlans? | 13:42 |
| mgariepy | should be **easy** | 13:42 |
| mgariepy | nop. | 13:42 |
| mgariepy | only straith VLAN :D we had other requirement for this setup and it was our workaround. | 13:43 |
| noonedeadpunk | damiandabrowski: I think you're totally on spot with moving endpoints setup down the line, as we obviously need reosourced to be created before config is done | 13:45 |
| noonedeadpunk | and in many roles we have endpoint creation only after post_install | 13:46 |
| damiandabrowski | okok, working on a patch | 13:46 |
| noonedeadpunk | glance have it even after db migration | 13:46 |
| noonedeadpunk | so does neutron | 13:46 |
| opendevreview | Damian Dąbrowski proposed openstack/ansible-role-pki master: Fix creation of certs signed by selfsigned issuers https://review.opendev.org/c/openstack/ansible-role-pki/+/958661 | 14:36 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_octavia master: Create resources for octavia before creating octavia endpoints https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/958662 | 14:38 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_octavia master: Create resources for octavia before creating octavia endpoints https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/958662 | 14:39 |
| noonedeadpunk | damiandabrowski: I commented on it | 14:45 |
| noonedeadpunk | as we're having openstack.osa.service_setup unnaturaly early comapring to other roles | 14:46 |
| noonedeadpunk | but it will still solve an issue, because ordering of resources/endooints will change | 14:46 |
| damiandabrowski | hmm, i don't see any comment there | 14:50 |
| noonedeadpunk | eh | 14:51 |
| noonedeadpunk | weird | 14:51 |
| noonedeadpunk | but basically it was about moving openstack.osa.service_setup down after ansible.builtin.import_tasks: octavia_db_sync.yml as we have it there for glance, neutron, placement, etc | 14:52 |
| noonedeadpunk | instead of moving octavia_resources.yml up | 14:53 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_octavia master: Create resources for octavia before creating octavia endpoints https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/958662 | 15:09 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_octavia master: Create resources for octavia before creating octavia endpoints https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/958662 | 15:11 |
| noonedeadpunk | damiandabrowski: crap, we have chicken-egg with octavia | 16:44 |
| noonedeadpunk | which explains previous order of things | 16:44 |
| noonedeadpunk | as for octavia_resources we need an octavia user in keystone, to upload an SSH key for it | 16:45 |
| noonedeadpunk | and user is created with service_setup, which also create endpoints | 16:45 |
| noonedeadpunk | so we'll have to split smth... | 16:47 |
| noonedeadpunk | either do quota later, or endpoint creation... | 16:48 |
| jrosser | put the outliers perhaps like quota into something we do at the end, like keystone/federation | 16:54 |
| noonedeadpunk | I'm thinking that service_setup does execute faster, so probably endpoint creation might be better thing to do | 16:59 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Create resources for octavia before creating octavia endpoints https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/958662 | 17:03 |
| opendevreview | Merged openstack/openstack-ansible-tests unmaintained/zed: Remove absent jobs/projects from the project https://review.opendev.org/c/openstack/openstack-ansible-tests/+/958270 | 17:05 |
| damiandabrowski | ah right :/ | 17:17 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!