| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: updated information in the troubleshooting guide https://review.opendev.org/c/openstack/openstack-ansible/+/959965 | 01:19 |
|---|---|---|
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: updated information in the troubleshooting guide https://review.opendev.org/c/openstack/openstack-ansible/+/959965 | 01:21 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: updated information in the troubleshooting guide https://review.opendev.org/c/openstack/openstack-ansible/+/959965 | 01:36 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: updated information in the troubleshooting guide https://review.opendev.org/c/openstack/openstack-ansible/+/959965 | 01:37 |
| mnasiadka | NeilHanlon: seems the ceph extras package got in, but the openvswitch didn't ;-) | 05:51 |
| mnasiadka | NeilHanlon: aaand... centos-release-ceph-squid is using el9 repo definition ;-) | 06:08 |
| mnasiadka | NeilHanlon: metalink points to el9, default baseurl is broken (404 - wrong path) | 06:10 |
| mnasiadka | NeilHanlon: at least I validated I can install ceph after fixing the url, enabling epel and crb | 06:53 |
| noonedeadpunk | mnasiadka: thanks for the update :) | 07:06 |
| mnasiadka | noonedeadpunk: I decided you probably are interested in it, so I'll post it here - and put more pressure on NeilHanlon :) | 07:07 |
| noonedeadpunk | oh yes, I do | 08:42 |
| noonedeadpunk | as we also are backporting el10 support back to Epoxy | 08:43 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: [doc] Logging https://review.opendev.org/c/openstack/openstack-ansible/+/960344 | 08:47 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: updated information in the troubleshooting guide https://review.opendev.org/c/openstack/openstack-ansible/+/959965 | 09:50 |
| janno | Hello, I’m currently struggling to create a VLAN provider network where individual instances can directly reach an external service. This is the relevant excerpt from my openstack_user_config.yml: https://pastebin.com/qccGRcZL | 10:04 |
| janno | Do you have any advice on what I might be doing wrong? | 10:05 |
| janno | I already tried without "host_bind_override: bond1.1710" before. | 10:06 |
| janno | VLAN 1710 arrives on bond1. bond1 is also used for other VLANs. | 10:07 |
| kleini | You want to connect instances to this provider network, right? Not anything of OpenStacks control plane? When you add a network as shown in you paste, it is more for the control plane and not for instances. For instances just create the provider network in Neutron with an account with administrator permissions. | 10:36 |
| janno | I want to connect instances to VLAN 1710. Everything else doesn't matter. :) | 10:38 |
| kleini | Then create the provider network in Neutron. Furthermore your switches need to transport that network to the ports, where br-vlan bridge is connected to. | 10:39 |
| kleini | you can automate the creation of that provider network by using openstack resources of OSA: https://opendev.org/openstack/openstack-ansible-plugins/src/branch/master/roles/openstack_resources/defaults/main.yml#L117 | 10:41 |
| noonedeadpunk | hey | 10:49 |
| * noonedeadpunk reading back | 10:49 | |
| noonedeadpunk | janno: what bond1 interface serves for? | 10:51 |
| noonedeadpunk | do you use it for untagged traffic? | 10:51 |
| noonedeadpunk | as I'm not sure what neutron plugin you are using, but in general vlan interface would be smth which you need to give control over to neutron | 10:52 |
| noonedeadpunk | so ideally you should not have any untag usage on it | 10:52 |
| noonedeadpunk | according to what you're doing in the paste, I think this should be marked as a flat network then | 10:54 |
| janno | noonedeadpunk: No, it's not used for untagged traffic. | 10:54 |
| noonedeadpunk | ok, so you're already using it for vlan traffic? | 10:54 |
| noonedeadpunk | ok, so there are multiple ways to address this.... | 10:55 |
| noonedeadpunk | first, you can use bond1 as vlan interface, and then you can just create any vlan from "allowed" range in the neutron | 10:55 |
| noonedeadpunk | ie `openstack network create --provider-network-type vlan --provider-physical-network vlan --provider-segment 1710 dns` | 10:56 |
| noonedeadpunk | then neutron will take care of creating tagged interface and all associated overhead with that | 10:56 |
| noonedeadpunk | but it will take control over bond1 | 10:56 |
| noonedeadpunk | other option is to create interface manually, and add it to neutron as a flat network | 10:57 |
| noonedeadpunk | so if you have already bond1.1710 - you can say that it is flat network, and neutron will use the interface "as-is" | 10:57 |
| janno | noonedeadpunk: To clarify things: Usually we use geneve for the networks, but we also have some tagged VLANs on bond1 which we use independently of Openstack. And then there is VLAN 1710, which we want to associate with an OpenStack/Neutron network. | 10:58 |
| noonedeadpunk | ie --provider-network-type flat --provider-physical-network physnet-dns | 10:58 |
| noonedeadpunk | yeah, so that is why having an allowed range is useful when defining vlan networks... | 10:59 |
| noonedeadpunk | as you can set a range neutron allowed to take from | 10:59 |
| noonedeadpunk | if it's a very occasional thing, and you don;'t expect or have more vlans - you can really do that as a flat network | 10:59 |
| noonedeadpunk | and given you use it for designate, and want to connect it also to your LXC containers - probably having a flat network in this case might make total sense | 11:00 |
| noonedeadpunk | janno: am I right to assume that you don't have `neutron_provider_networks` defined anywhere in your configs? | 11:03 |
| janno | noonedeadpunk: yep, that's right. | 11:03 |
| noonedeadpunk | I don't really recall how to do that exactly correct with `provider_networks`, but I think this should work: https://paste.openstack.org/show/beyNxskNoqs7WZlUevL9/ | 11:05 |
| noonedeadpunk | then you run openstack.osa.neutron playbook, and should be able to add network to neutron | 11:05 |
| janno | Do I have to create bond1.1710 beforehand or would openstack-ansible take care of that? | 11:07 |
| noonedeadpunk | if it;'s the flat network - you'd need to have it. there's a way for openstack-ansible to create it for you, but it would need couple of more variables to have | 11:08 |
| janno | noonedeadpunk: Would you recommend moving to "provider_networks"? That would still be possible as it is a new cluster without any production load. | 11:08 |
| noonedeadpunk | janno: so I lately use `neutron_provider_networks` as it has just more clear to me personally structure, and has precedence over anything you set in `provider_networks`. | 11:09 |
| noonedeadpunk | ie: https://docs.openstack.org/openstack-ansible-os_neutron/latest/app-ovn.html#openstack-ansible-user-variables | 11:10 |
| noonedeadpunk | it is focused on neutron configuration, and will not affect anyhow container connections | 11:10 |
| noonedeadpunk | and if you opt for vlan network - then these bridges and vlans will be created and handled during playbook rolout (or by neutron a bit later) | 11:11 |
| noonedeadpunk | for falt it is expected for interface to exist - then role will create a bridge for it and add interface to that bridge | 11:11 |
| noonedeadpunk | if you want openstack-ansible to create this vlan interface for you - this can be done and some sample of network config for that could be found in https://docs.openstack.org/openstack-ansible/latest/user/network-arch/example.html#configuring-network-interfaces | 11:12 |
| noonedeadpunk | give me a sec.... | 11:14 |
| noonedeadpunk | janno: this would create an interface for you on compute nodes, if placed under /etc/openstack_deploy/group_vars/compute_hosts.yml: https://paste.openstack.org/show/bw4cSvfAup435CGa4lS0/ | 11:19 |
| noonedeadpunk | you;'d need to mention all vlans managed through netplan though if you're using it for network management | 11:20 |
| noonedeadpunk | and assuming you're running smth like Epoxy... | 11:20 |
| janno | yes, it's Epoxy. I'll give it a try in a second. | 11:23 |
| janno | Unfortunately it doesn't work, from ovs-vswitchd.log: https://pastebin.com/wKsicWzj | 12:48 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Improve mariabackup script readability https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960373 | 13:07 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Copy mariabackup script instead of templating https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960373 | 13:17 |
| noonedeadpunk | janno: so it's weird that it attempts to have a bridge with name `bond1.1710` | 13:18 |
| noonedeadpunk | as it should be br-dns or smth instead | 13:18 |
| noonedeadpunk | or well | 13:18 |
| noonedeadpunk | you're doing it as a flat network, right? | 13:18 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Improve mariabackup script readability https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960375 | 13:23 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Fix argument types for mariabackup script https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960376 | 13:35 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Improve mariabackup script readability https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960375 | 13:50 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Fix argument types for mariabackup script https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960376 | 13:51 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Fix argument types for mariabackup script https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960376 | 13:52 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Replace normpath with join for backup script https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960385 | 14:08 |
| mnasiadka | noonedeadpunk: we plan to backport this as well, but first I need to have the container images which I don't ;-) | 14:39 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Remove Popen wait() for compress scenario https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960387 | 14:42 |
| NeilHanlon | mnasiadka: hmmm... i totally checked that these worked 🤔 | 15:13 |
| NeilHanlon | I need to sleep more, apparently | 15:13 |
| NeilHanlon | will try and correct tonight | 15:13 |
| mnasiadka | NeilHanlon: see https://paste.openstack.org/show/bTIE0yjMilzWEQUJ3acO/ | 15:16 |
| mnasiadka | (fresh rocky:10 container image) | 15:16 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Refactor compressed backup creation https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/960387 | 15:40 |
| janno | noonedeadpunk: yes, it's a flat network | 16:35 |
| opendevreview | Damian DÄ…browski proposed openstack/openstack-ansible master: Adopt new cert.san format https://review.opendev.org/c/openstack/openstack-ansible/+/948886 | 18:53 |
| opendevreview | Damian DÄ…browski proposed openstack/openstack-ansible master: Use ttl instead of not_after in pki_authorities https://review.opendev.org/c/openstack/openstack-ansible/+/948887 | 18:53 |
| opendevreview | Damian DÄ…browski proposed openstack/openstack-ansible master: Add support for hashi_vault PKI backend https://review.opendev.org/c/openstack/openstack-ansible/+/948888 | 18:53 |
| opendevreview | Damian DÄ…browski proposed openstack/openstack-ansible master: Enable openbao jobs https://review.opendev.org/c/openstack/openstack-ansible/+/948889 | 18:54 |
| opendevreview | Damian DÄ…browski proposed openstack/openstack-ansible-os_neutron master: Add hashi_vault pki backend support https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/949420 | 19:21 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Add Ansible logging and ARA integration guide https://review.opendev.org/c/openstack/openstack-ansible/+/959694 | 21:57 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: wip https://review.opendev.org/c/openstack/openstack-ansible/+/960421 | 22:10 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: wip https://review.opendev.org/c/openstack/openstack-ansible/+/960421 | 22:12 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: wip https://review.opendev.org/c/openstack/openstack-ansible/+/960421 | 22:15 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: Move deploy-guide under docs for translation https://review.opendev.org/c/openstack/openstack-ansible/+/949497 | 22:26 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: Move deploy-guide under docs for translation https://review.opendev.org/c/openstack/openstack-ansible/+/949497 | 22:26 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: Move deploy-guide under docs for translation https://review.opendev.org/c/openstack/openstack-ansible/+/949497 | 22:28 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: wip https://review.opendev.org/c/openstack/openstack-ansible/+/960421 | 22:54 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Remove deprecated run_tests/vagrantfile https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/959941 | 23:05 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: Move deploy-guide under docs for translation https://review.opendev.org/c/openstack/openstack-ansible/+/949497 | 23:08 |
| opendevreview | Merged openstack/openstack-ansible-os_rally master: Remove deprecated run_tests/vagrantfile https://review.opendev.org/c/openstack/openstack-ansible-os_rally/+/959952 | 23:08 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: updated information in the troubleshooting guide https://review.opendev.org/c/openstack/openstack-ansible/+/959965 | 23:09 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: updated information in the troubleshooting guide https://review.opendev.org/c/openstack/openstack-ansible/+/959965 | 23:10 |
| opendevreview | Merged openstack/openstack-ansible-os_mistral master: Remove deprecated run_tests/vagrantfile https://review.opendev.org/c/openstack/openstack-ansible-os_mistral/+/959934 | 23:11 |
| opendevreview | Merged openstack/openstack-ansible-os_mistral master: Remove outdate file manual-test.rc https://review.opendev.org/c/openstack/openstack-ansible-os_mistral/+/959933 | 23:11 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_octavia master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/959946 | 23:14 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_octavia master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/959946 | 23:14 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_placement master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/959948 | 23:15 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_rally master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_rally/+/959953 | 23:16 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Remove outdate file manual-test.rc https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/959940 | 23:17 |
| opendevreview | Merged openstack/openstack-ansible-os_masakari master: Remove deprecated run_tests/vagrantfile https://review.opendev.org/c/openstack/openstack-ansible-os_masakari/+/959931 | 23:18 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: wip https://review.opendev.org/c/openstack/openstack-ansible/+/960423 | 23:20 |
| opendevreview | Merged openstack/openstack-ansible-lxc_hosts master: Remove deprecated run_tests/vagrantfile https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/959585 | 23:22 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: wip https://review.opendev.org/c/openstack/openstack-ansible/+/960423 | 23:29 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!