*** k_mouza has quit IRC | 00:03 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Allocation support for project scoped RBAC https://review.opendev.org/c/openstack/ironic/+/778340 | 00:17 |
---|---|---|
openstackgerrit | Julia Kreger proposed openstack/ironic master: [doc] Add initial system-scoped text to secure-rbac https://review.opendev.org/c/openstack/ironic/+/778044 | 00:21 |
*** tosky has quit IRC | 00:26 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Remove extra/vif_port_id https://review.opendev.org/c/openstack/ironic/+/767432 | 00:27 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: WIP: Scoped RBAC testing https://review.opendev.org/c/openstack/ironic/+/778957 | 00:37 |
TheJulia | \o/ allocations seems to be working | 00:42 |
* TheJulia calls it a day | 00:42 | |
*** rloo has quit IRC | 00:58 | |
stevebaker | \o | 01:15 |
*** jamesdenton has quit IRC | 01:26 | |
*** jamesden_ has joined #openstack-ironic | 01:26 | |
openstackgerrit | Rotan proposed openstack/ironic-inspector master: [WIP]Support AEP, sst at introspection data https://review.opendev.org/c/openstack/ironic-inspector/+/768138 | 01:37 |
*** ociuhandu has joined #openstack-ironic | 01:45 | |
*** ociuhandu has quit IRC | 01:50 | |
*** rcernin has quit IRC | 02:01 | |
*** rcernin has joined #openstack-ironic | 02:05 | |
*** rcernin has quit IRC | 02:39 | |
openstackgerrit | Verification of a change to openstack/ironic failed: Allow users to configure priority for {create,delete}_configuration https://review.opendev.org/c/openstack/ironic/+/778145 | 02:39 |
*** rcernin has joined #openstack-ironic | 02:42 | |
*** rcernin has quit IRC | 02:51 | |
*** tzumainn has quit IRC | 02:54 | |
*** zzzeek has quit IRC | 02:55 | |
*** zzzeek has joined #openstack-ironic | 02:56 | |
*** rcernin has joined #openstack-ironic | 03:05 | |
*** rcernin has quit IRC | 03:12 | |
*** zzzeek has quit IRC | 03:15 | |
*** zzzeek has joined #openstack-ironic | 03:20 | |
*** rcernin has joined #openstack-ironic | 03:23 | |
*** rcernin has quit IRC | 03:24 | |
*** rcernin has joined #openstack-ironic | 03:24 | |
*** openstackgerrit has quit IRC | 03:25 | |
*** zzzeek has quit IRC | 03:48 | |
*** zzzeek has joined #openstack-ironic | 03:51 | |
*** rh-jelabarre has quit IRC | 04:10 | |
*** jamesden_ has quit IRC | 04:36 | |
*** jamesdenton has joined #openstack-ironic | 04:36 | |
*** ociuhandu has joined #openstack-ironic | 05:22 | |
*** ociuhandu has quit IRC | 05:26 | |
*** anuradha1904 has joined #openstack-ironic | 05:47 | |
*** gyee has quit IRC | 05:52 | |
*** jamesdenton has quit IRC | 06:21 | |
*** jamesden_ has joined #openstack-ironic | 06:21 | |
*** openstackgerrit has joined #openstack-ironic | 06:47 | |
openstackgerrit | Verification of a change to openstack/ironic failed: Allow users to configure priority for {create,delete}_configuration https://review.opendev.org/c/openstack/ironic/+/778145 | 06:47 |
*** ociuhandu has joined #openstack-ironic | 07:02 | |
*** ociuhandu has quit IRC | 07:06 | |
*** ociuhandu has joined #openstack-ironic | 07:08 | |
*** ociuhandu has quit IRC | 07:12 | |
*** rcernin has quit IRC | 07:40 | |
arne_wiebalck | Good morning, ironic! | 07:43 |
*** rcernin has joined #openstack-ironic | 07:47 | |
*** rcernin has quit IRC | 08:06 | |
*** ociuhandu has joined #openstack-ironic | 08:11 | |
*** ociuhandu has quit IRC | 08:11 | |
*** rcernin has joined #openstack-ironic | 08:17 | |
janders | good morning arne_wiebalck o/ | 08:27 |
*** tosky has joined #openstack-ironic | 08:33 | |
arne_wiebalck | hey janders, good morning o/ | 08:34 |
*** ociuhandu has joined #openstack-ironic | 08:38 | |
*** ociuhandu has quit IRC | 08:42 | |
*** jamesden_ has quit IRC | 08:44 | |
*** jamesdenton has joined #openstack-ironic | 08:46 | |
*** tosky_ has joined #openstack-ironic | 08:52 | |
*** tosky is now known as Guest86814 | 08:53 | |
*** tosky_ is now known as tosky | 08:53 | |
*** Guest86814 has quit IRC | 08:55 | |
*** ociuhandu has joined #openstack-ironic | 08:57 | |
*** rcernin has quit IRC | 09:01 | |
*** lucasagomes has joined #openstack-ironic | 09:06 | |
*** derekh has joined #openstack-ironic | 09:15 | |
*** rcernin has joined #openstack-ironic | 09:28 | |
*** buhman has quit IRC | 09:31 | |
*** buhman has joined #openstack-ironic | 09:31 | |
*** zzzeek has quit IRC | 09:43 | |
*** zzzeek has joined #openstack-ironic | 09:46 | |
*** rcernin has quit IRC | 09:47 | |
*** ociuhandu has quit IRC | 10:01 | |
*** ociuhandu has joined #openstack-ironic | 10:02 | |
*** rcernin has joined #openstack-ironic | 10:04 | |
*** zzzeek has quit IRC | 10:11 | |
*** ociuhandu has quit IRC | 10:11 | |
*** zzzeek has joined #openstack-ironic | 10:15 | |
*** ociuhandu has joined #openstack-ironic | 10:16 | |
*** dtantsur|afk is now known as dtantsur | 10:17 | |
dtantsur | morning ironic | 10:17 |
dtantsur | rpittau|afk: morning! this looks concerning: https://zuul.opendev.org/t/openstack/build/311f7a8351584aa78f0e3466fdc910eb/log/controller/logs/screen-ir-cond.txt?severity=3#1578 | 10:19 |
*** rcernin has quit IRC | 10:20 | |
* dtantsur fixes | 10:22 | |
*** ociuhandu has quit IRC | 10:25 | |
*** k_mouza has joined #openstack-ironic | 10:26 | |
openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Don't try to use attempts=None with tenacity https://review.opendev.org/c/openstack/ironic/+/779961 | 10:29 |
*** k_mouza has quit IRC | 10:31 | |
openstackgerrit | Aija Jauntēva proposed x/sushy-oem-idrac master: Update export system configuration https://review.opendev.org/c/x/sushy-oem-idrac/+/759425 | 10:40 |
janders | good morning dtantsur | 10:41 |
*** ociuhandu has joined #openstack-ironic | 10:46 | |
*** zzzeek has quit IRC | 11:03 | |
*** rcernin has joined #openstack-ironic | 11:07 | |
*** zzzeek has joined #openstack-ironic | 11:08 | |
*** cp- has quit IRC | 11:11 | |
*** k_mouza has joined #openstack-ironic | 11:11 | |
*** cp- has joined #openstack-ironic | 11:11 | |
*** jawad_axd has joined #openstack-ironic | 11:17 | |
*** k_mouza has quit IRC | 11:18 | |
*** k_mouza has joined #openstack-ironic | 11:18 | |
*** cp- has quit IRC | 11:21 | |
*** cp- has joined #openstack-ironic | 11:22 | |
*** cp- has quit IRC | 11:22 | |
*** cp- has joined #openstack-ironic | 11:23 | |
*** cp- has quit IRC | 11:24 | |
*** cp- has joined #openstack-ironic | 11:41 | |
iurygregory | good morning dtantsur janders and Ironic o/ | 11:45 |
janders | good morning iurygregory o/ | 11:46 |
*** ociuhandu has quit IRC | 11:51 | |
*** rcernin has quit IRC | 11:58 | |
*** jamesdenton has quit IRC | 12:13 | |
*** jamesdenton has joined #openstack-ironic | 12:15 | |
*** rcernin has joined #openstack-ironic | 12:23 | |
*** emmadavis has joined #openstack-ironic | 12:26 | |
*** emmadavis has quit IRC | 12:28 | |
*** emmadavis has joined #openstack-ironic | 12:28 | |
*** rcernin has quit IRC | 12:29 | |
*** rcernin has joined #openstack-ironic | 12:41 | |
*** rcernin has quit IRC | 12:46 | |
*** rcernin has joined #openstack-ironic | 12:52 | |
*** rcernin has quit IRC | 12:57 | |
*** rcernin has joined #openstack-ironic | 12:58 | |
*** openstack has joined #openstack-ironic | 13:17 | |
*** ChanServ sets mode: +o openstack | 13:17 | |
dtantsur | folks, please review https://review.opendev.org/c/openstack/ironic/+/779961 it fixes an occasional CI failure | 13:17 |
*** Qianbiao has joined #openstack-ironic | 13:17 | |
iurygregory | dtantsur, looking now | 13:27 |
iurygregory | +W since it's a simple change to unblock CI | 13:34 |
*** rh-jelabarre has joined #openstack-ironic | 13:39 | |
*** ociuhandu has joined #openstack-ironic | 13:44 | |
*** mjturek has joined #openstack-ironic | 13:47 | |
dtantsur | thx! | 13:50 |
*** cp- has quit IRC | 13:54 | |
*** cp- has joined #openstack-ironic | 13:55 | |
iurygregory | yw =) | 14:00 |
*** rloo has joined #openstack-ironic | 14:09 | |
TheJulia | good morninng | 14:15 |
*** tzumainn has joined #openstack-ironic | 14:44 | |
dtantsur | morning TheJulia | 14:46 |
*** k_mouza_ has joined #openstack-ironic | 14:50 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Allocation support for project scoped RBAC https://review.opendev.org/c/openstack/ironic/+/778340 | 14:51 |
*** k_mouza has quit IRC | 14:54 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: WIP: Scoped RBAC testing https://review.opendev.org/c/openstack/ironic/+/778957 | 14:58 |
TheJulia | I would think clouds.yaml would properly cast things... | 14:59 |
*** rcernin has joined #openstack-ironic | 14:59 | |
dtantsur | mostly. where exactly do you have a problem? | 14:59 |
*** derekh has quit IRC | 15:01 | |
*** derekh has joined #openstack-ironic | 15:01 | |
dtantsur | has anyone made multi-conductor ironic work without neutron? arne_wiebalck? | 15:02 |
*** derekh has quit IRC | 15:02 | |
dtantsur | I'm getting questions via private messages, and I cannot figure out myself | 15:02 |
dtantsur | is syncing /httpboot via e.g. NFS the only way here? | 15:03 |
*** rcernin has quit IRC | 15:04 | |
*** Qianbiao has quit IRC | 15:06 | |
*** derekh has joined #openstack-ironic | 15:08 | |
*** spotz has joined #openstack-ironic | 15:10 | |
arne_wiebalck | dtantsur: we have a multi-conductor setup without neutron, but we do rely on an external PXE infra (so we do not need to sync the conductors ... if I got your question right?) | 15:10 |
dtantsur | arne_wiebalck: so you don't rely on ironic providing PXE configuration at all? | 15:11 |
arne_wiebalck | dtantsur: correct | 15:11 |
dtantsur | what's your PXE infra? is it some open-source project? | 15:12 |
arne_wiebalck | dtantsur: we had a PXE service before Ironic, and when we started we decided to use it rather than having two | 15:12 |
arne_wiebalck | dtantsur: home-grown | 15:12 |
arne_wiebalck | dtantsur: dates back many years | 15:12 |
dtantsur | I see. So, this is a clear gap in standalone functionality for us. | 15:13 |
arne_wiebalck | dtantsur: we have considered to replace it with some open-source alternative, or let Ironic do it, but for now we still use it :) | 15:13 |
arne_wiebalck | dtantsur: yes | 15:13 |
arne_wiebalck | dtantsur: if I had to do it now, I would probably simply use a shared filesystem | 15:15 |
*** k_mouza_ has quit IRC | 15:15 | |
arne_wiebalck | dtantsur: do == set it up | 15:15 |
*** k_mouza has joined #openstack-ironic | 15:15 | |
arne_wiebalck | dtantsur: if Ironic would sync somehow, even better :-D | 15:15 |
*** ociuhandu has quit IRC | 15:16 | |
*** ociuhandu has joined #openstack-ironic | 15:17 | |
* dtantsur encourages the author of the question to join IRC | 15:17 | |
dtantsur | arne_wiebalck: thanks, I've put it as a topic to the PTG etherpad | 15:17 |
arne_wiebalck | dtantsur: ++ | 15:18 |
*** ociuhandu has quit IRC | 15:22 | |
*** AndreyK has joined #openstack-ironic | 15:22 | |
openstackgerrit | Merged openstack/ironic master: Don't try to use attempts=None with tenacity https://review.opendev.org/c/openstack/ironic/+/779961 | 15:23 |
AndreyK | Hi guys. Can someone help me with my problem with ironic with multiple conductors without neutron? | 15:25 |
AndreyK | Can i do this setup? | 15:25 |
AndreyK | Actually the problem is that if i enable filter DNSmasq on my installation | 15:27 |
*** ociuhandu has joined #openstack-ironic | 15:28 | |
AndreyK | The bare metal node could not boot to the ipa image to get OS installed because of files with ignore mac options | 15:28 |
AndreyK | at /etc/dnsmasq/dhcp-hostsdir/* | 15:29 |
AndreyK | 24:6e:96:31:bd:e0,ignore | 15:29 |
AndreyK | 24:6e:96:31:bd:e2,ignore | 15:29 |
AndreyK | 24:6e:96:31:bd:e4,ignore | 15:29 |
AndreyK | 24:6e:96:31:bd:e5,ignore | 15:29 |
AndreyK | If I turn off the dnsmasq filter, then I got inconsistent configuration of (ironic-ipxe), where one node have configuration, but other nodes not | 15:30 |
AndreyK | -la /httpboot/ | 15:31 |
AndreyK | lrwxrwxrwx 1 ironic ironic 43 Mar 10 15:58 94:40:c9:72:32:b4.conf -> e8b220a2-9bf2-49f0-acca-ff8f3ffeccd6/config | 15:31 |
AndreyK | I'am talking about this thing | 15:31 |
AndreyK | each three nodes of ironic have diffeerent config | 15:31 |
AndreyK | Sorry for my english | 15:32 |
*** ociuhandu has quit IRC | 15:34 | |
dtantsur | arne_wiebalck: that's what we discussed ^^ | 15:41 |
openstackgerrit | Verification of a change to openstack/ironic failed: Allow users to configure priority for {create,delete}_configuration https://review.opendev.org/c/openstack/ironic/+/778145 | 15:45 |
*** alexmcleod_ has quit IRC | 15:46 | |
*** ociuhandu has joined #openstack-ironic | 15:48 | |
*** alexmcleod has joined #openstack-ironic | 15:50 | |
arne_wiebalck | Hey AndreyK, welcome o/ | 15:52 |
AndreyK | Hey! | 15:52 |
arne_wiebalck | AndreyK: As mentioned to dtantsur, we do run without Neutron, but we do not use the PXE configuration provided by Ironic. | 15:52 |
arne_wiebalck | AndreyK: We have our own, home-grown PXE infra. | 15:53 |
AndreyK | I see, Dmitry said me | 15:53 |
arne_wiebalck | AndreyK: That's also why I am not too familiar with how dnsmasq/inspector are supposed to populated the dhcp directories. | 15:54 |
AndreyK | What is the quick solution that we can make? We want to have something very simple and lightweight for out "undercloud" | 15:54 |
dtantsur | I suggested sharing /httpboot over NFS, does anyone have better ideas? | 15:55 |
arne_wiebalck | AndreyK: How about using a shared dir, would that be an option? | 15:55 |
AndreyK | Yes, but in new DC we do not want to use such technologies like smb,nfs,metro - only cloud like solutions | 15:56 |
*** rloo has quit IRC | 15:56 | |
AndreyK | That is why we like ironic | 15:56 |
*** rloo has joined #openstack-ironic | 15:56 | |
*** ociuhandu has quit IRC | 15:57 | |
TheJulia | brraaaains | 15:57 |
*** ociuhandu has joined #openstack-ironic | 15:57 | |
TheJulia | On a plus side, I think I only have one more meeting today | 15:57 |
AndreyK | the aim is to get cloud deployed with "undercloud ironic" like in trippleo but without any neutron, nova | 15:57 |
dtantsur | it's a bit of a side question, but I wonder why you even need several conductors | 15:58 |
AndreyK | TheJulia, keep calm) | 15:58 |
arne_wiebalck | dtantsur: AndreyK: are there 2 issues here, or only 1? Like, with dnsmasq the files are wrongm but without they are not synced? | 15:58 |
dtantsur | yes, and the root cause is that ironic-inspector only cares about inspection, not deploy/cleaning | 15:59 |
TheJulia | I do wonder if the pxe handling is over-engineered with the dnsmasq configuration in metal3, but somehow there doe have to be networking delineation or common management somehow | 15:59 |
dtantsur | I'm asking about several conductors because you mentioned tripleo, and it only uses 1 conductor | 15:59 |
dtantsur | several conductors are great for HA, but may be useless for one-shot operations | 16:00 |
dtantsur | (deploy the cloud and forget) | 16:00 |
AndreyK | arne_wiebalck, actually 2: 1 - inconsistent dnsmasq configuration(one L2, random nodes get leases), 2 - Is inconsistent configuration of IPXE, because of first thing | 16:00 |
arne_wiebalck | AndreyK: how many physical nodes will you manage? | 16:00 |
* arne_wiebalck is following dtantsur's lead of a simpler setup | 16:01 | |
TheJulia | inconsistent ipxe can be solved with a shared common filesystem | 16:01 |
AndreyK | dtantsur, but not in our case. We want to have about 10-15 regions with about 500 hw nodes in each | 16:01 |
TheJulia | Possibly the largest ironic deployment in the world (that I know of) actually does that | 16:01 |
AndreyK | each region should be manged by spare undercloud installation | 16:02 |
dtantsur | This calls for a potential decoupling between PXE management and node management | 16:02 |
dtantsur | AndreyK: an undercloud per region? you mean, and independent undercloud? | 16:02 |
dtantsur | s/and/an/ | 16:02 |
AndreyK | yes | 16:02 |
arne_wiebalck | AndreyK: We have single conductors managing ~500 nodes. | 16:03 |
dtantsur | so, 500 nodes per ironic? this does not require several conductors | 16:03 |
dtantsur | tripleo was tested with up to 700 | 16:03 |
AndreyK | independent at all, to have smallest failure domain as possible | 16:03 |
TheJulia | could we replace undercloud in this discussion? | 16:03 |
TheJulia | I mean use of the word specifically | 16:03 |
dtantsur | well, it's a good metaphor | 16:03 |
AndreyK | TheJulia, yes sorry | 16:03 |
TheJulia | I think it is awful | 16:03 |
TheJulia | personally | 16:03 |
dtantsur | it's because you're related to tripleo nowadays :D | 16:04 |
* dtantsur evil laughter | 16:04 | |
AndreyK | let's call it "lower ironic" | 16:04 |
TheJulia | dtantsur: uhh, been there done that all the way back at HP | 16:04 |
*** MapspaM is now known as SpamapS | 16:04 | |
dtantsur | ah, right | 16:04 |
dtantsur | but okay, a cloud management node using ironic | 16:04 |
TheJulia | o/ SpamapS | 16:04 |
SpamapS | o/ | 16:04 |
arne_wiebalck | AndreyK: if the conductor breaks, only the control plane breaks, we use 1 conductor per 500 nodes and a similar approach for our Nova cells (only a single controller) | 16:04 |
dtantsur | right. if you don't need 5-nines reliability for ironic *itself*, you can do with one controller and have much fewer problems | 16:05 |
dtantsur | while we'll think what we can do to address such cases in the future :) | 16:05 |
AndreyK | arne_wiebalck, i am always reading your posts on CERN blog | 16:05 |
dtantsur | TheJulia: FYI I've put this on the PTG etherpad | 16:05 |
* TheJulia looks | 16:06 | |
*** diurnalist has joined #openstack-ironic | 16:06 | |
arne_wiebalck | AndreyK: :) | 16:06 |
AndreyK | actually I have DC with 500 racks at 13kWt power | 16:06 |
AndreyK | i need it somehow to automate | 16:07 |
AndreyK | One approach was to use MAAS, the simplest one, but without any integrations with cloud | 16:08 |
dtantsur | AndreyK: something TheJulia proposed on the above mentioned etherpad: you can statically build an environment that looks like ironic's | 16:08 |
dtantsur | so ignore whatever files ironic is generated and build your own environment that boots our ramdisk | 16:08 |
dtantsur | (especially if you don't need different ramdisks per node) | 16:09 |
dtantsur | it may be what metal3 does, I need to check | 16:09 |
TheJulia | 13kW ? | 16:10 |
TheJulia | or 1300kW? | 16:10 |
dtantsur | but yeah, you can replace your primary ipxe boot file with something like https://github.com/metal3-io/ironic-image/blob/master/config/inspector.ipxe.j2. the downside is that it will always run inspection. | 16:11 |
AndreyK | 13kW per Rack | 16:11 |
TheJulia | dtantsur: That is kind of what bifrost did and I know some people did end up using bifrost to run >1 conductors and it worked just fine until they wanted to do specific network booting | 16:11 |
TheJulia | just taking the disk image and always local booting path brings much more happiness and all the simplicy together | 16:12 |
dtantsur | TheJulia: always running inspection has its own implications, especially if discovery is enabled | 16:12 |
TheJulia | dtantsur: it can run from the same exact config | 16:12 |
dtantsur | but it can be another quick solution | 16:12 |
dtantsur | TheJulia: right, that's the problem :) | 16:12 |
TheJulia | dtantsur: we don't need to model it after what tripleo did with the separate configs and ignore rules | 16:12 |
AndreyK | In our setup we want to have 1500 nodes per region in 3 cells, so we need at least 3 conductors to manage nodes | 16:12 |
dtantsur | let's ignore the ignore rules, they're not for standalone | 16:12 |
TheJulia | AndreyK: ipmi or other protocol? | 16:13 |
AndreyK | ILO, IDRAC | 16:13 |
AndreyK | of course we would like to use another ironic setup in our cloud, to provide users with BM | 16:14 |
dtantsur | AndreyK: the two options we see right now (without addition to ironic): 1) NFS, 2) make a static PXE configuration (by hand) that says "go boot this ramdisk" using similar parameters to what ironic generates. | 16:14 |
TheJulia | okay, one of the big 500 nodes thing is due to execution of ipmitool. If you don't have to use ipmi, your much better off. | 16:14 |
AndreyK | This ironic don't know anything about lower ironic | 16:15 |
dtantsur | and no nova/neutron as well in the "upper" ironic? | 16:15 |
dtantsur | (see, over/undercloud terminology is not so bad..) | 16:15 |
* TheJulia sighs | 16:15 | |
AndreyK | dtantsur, yes | 16:15 |
AndreyK | =)) | 16:16 |
TheJulia | so how do you plan to manage networking in all of this? | 16:16 |
TheJulia | because the instant you want to separate ones, you need IPAM and dhcp management | 16:16 |
dtantsur | so you would like the users to use ironic API directly? | 16:16 |
dtantsur | (same question as Julia, essentially) | 16:17 |
AndreyK | at the lower - there should be static config with bunch of vlans, managed by cloud-init on OS side | 16:17 |
AndreyK | At the higher ironic - there will be full openstack installation, may be with contrail or cisco AIC to manage HW switches | 16:18 |
TheJulia | It seems like maybe there needs to be dhcp server integration specifically that is not neutron | 16:18 |
TheJulia | so at the higher level you'll have neutron then | 16:18 |
AndreyK | dtantsur so you would like the users to use ironic API directly? >> Keystone is the smallest thing in this setup, it works. | 16:18 |
dtantsur | AndreyK: okay, so upper ironic *with* neutron/nova? | 16:19 |
dtantsur | lower - without? | 16:19 |
AndreyK | dtantsur, yes without in lower, and with on top | 16:19 |
dtantsur | gotcha. so the upper ironic is easier. what's the scale for the lower ironic? 500 nodes per region? or 1500? | 16:20 |
AndreyK | ~1500 computes | 16:20 |
AndreyK | ok, let's say it more than 1000 | 16:21 |
TheJulia | So back when NobodyCam was building out a huge deployment on the west coast of the US, he was talking similar things, except his focus was the lower layer and a hook into dhcp directly from ironic to trigger the configuration so it could inform of *where* and then there was a discovery fallback address if memory serves. I think he told me he used hooks on the dhcp server to also try and reconcile things when | 16:21 |
TheJulia | the inventory from the factory was wrong or soemthing liek that | 16:21 |
dtantsur | my suggestions would be static configuration (#2 above) + fast-track (so that there is no reboot between inspection and deploy) | 16:21 |
TheJulia | ++ | 16:22 |
AndreyK | dtantsur, i will try it | 16:22 |
TheJulia | or custom integration code which could be painful to maintain. | 16:22 |
dtantsur | pain-- | 16:22 |
dtantsur | but we as a community should figure something out, so that e.g. multi-node bifrost can become a reality | 16:23 |
TheJulia | ++ | 16:23 |
AndreyK | Sure) | 16:23 |
TheJulia | I really like some other ipam integration idea | 16:23 |
TheJulia | so we can do the signaling directly and we don't end up in complex configs and things can get somewhat load balanced | 16:23 |
AndreyK | We want to use custom integration with netbox | 16:23 |
dtantsur | then we should find some easy to use IPAM | 16:24 |
TheJulia | I was about to consider if you'd use isc's next generation dhcp server | 16:24 |
TheJulia | s/consider/ask/ | 16:24 |
TheJulia | dtantsur: I hear really good things about the isc stuff. Uses a rest api to configure the dhcp cluster | 16:24 |
dtantsur | oh, srsly? this is really nice! maybe we can even solve our inspector problems? | 16:25 |
TheJulia | that cluster an operate in a distributed fashion with the same base physical networks from what I understand | 16:25 |
dtantsur | any reference to read about it? | 16:25 |
TheJulia | discussions with nobodycam + some of the isc docs | 16:25 |
TheJulia | https://www.isc.org/kea/ | 16:26 |
AndreyK | Thank you!!! | 16:27 |
dtantsur | you're welcome. feel free to ask again, we'll be happy to help as much as we can. | 16:28 |
arne_wiebalck | kea, I think this is what our networking colleagues are looking into as well atm | 16:28 |
dtantsur | hmm, maybe we need an ironic/inspector driver for that? | 16:28 |
TheJulia | I'm starting to feel like our ptg topics now require 4 days | 16:29 |
dtantsur | same | 16:29 |
TheJulia | dtantsur: ++ | 16:29 |
TheJulia | dtantsur: added an explicit item to discuss other dhcp integrations | 16:35 |
TheJulia | since... multi-conductor standalone is one thing, but dhcp integrations is a different topic that the first feeds into | 16:35 |
TheJulia | and we should likely have an explicit higher level discussion | 16:35 |
dtantsur | agreed | 16:41 |
TheJulia | wow: https://review.opendev.org/c/openstack/ironic/+/778340 | 16:47 |
TheJulia | it completely passed all check jobs | 16:47 |
TheJulia | SHIP IT! | 16:48 |
dtantsur | \o/ | 16:49 |
dtantsur | Kea looks promising | 16:49 |
TheJulia | Yeah, we've had a few people ask about it in the past | 16:49 |
TheJulia | more than people asking about S3 instead of Swift... | 16:49 |
dtantsur | heh | 16:50 |
openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: [WIP] API to force manual cleaning without booting IPA https://review.opendev.org/c/openstack/ironic/+/769793 | 16:50 |
TheJulia | a specific API? | 16:51 |
TheJulia | ahh i see | 16:51 |
arne_wiebalck | speaking about swift ... re-inspecting a node will overwrite the object in swift with a new object, right? there is no history. | 16:51 |
TheJulia | dtantsur: I kind of like that more than the overly complex thing we were talking about a long time ago | 16:52 |
dtantsur | arne_wiebalck: correct | 16:52 |
arne_wiebalck | dtantsur: thanks | 16:52 |
TheJulia | makes it more "the operator has to know" and less to guess which is a tradeoff | 16:53 |
dtantsur | TheJulia: re clean steps? | 16:53 |
dtantsur | it's only one part of https://storyboard.openstack.org/#!/story/2008491 but maybe the most useful part | 16:54 |
TheJulia | ahh, okay | 16:54 |
* TheJulia goes back to poking devstack plugin | 16:54 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: WIP: Scoped RBAC testing https://review.opendev.org/c/openstack/ironic/+/778957 | 16:57 |
*** rcernin has joined #openstack-ironic | 17:00 | |
* dtantsur really needs to fix sushy-tools to stop losing its database | 17:00 | |
*** lucasagomes has quit IRC | 17:00 | |
openstackgerrit | Verification of a change to openstack/networking-generic-switch failed: Remove grenade jobs from old stable branches https://review.opendev.org/c/openstack/networking-generic-switch/+/773335 | 17:04 |
dtantsur | folks, does anyone know if it's even possible to write an out-of-band clean steps on the deploy interface? | 17:15 |
dtantsur | answering myself: no, only in-band | 17:16 |
*** jamesdenton has quit IRC | 17:16 | |
*** jamesdenton has joined #openstack-ironic | 17:16 | |
*** rcernin has quit IRC | 17:16 | |
arne_wiebalck | bye everyone o/ | 17:19 |
openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: [WIP] API to force manual cleaning without booting IPA https://review.opendev.org/c/openstack/ironic/+/769793 | 17:24 |
*** anuradha1904 has quit IRC | 17:25 | |
*** gyee has joined #openstack-ironic | 17:35 | |
openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: [WIP] API to force manual cleaning without booting IPA https://review.opendev.org/c/openstack/ironic/+/769793 | 17:36 |
dtantsur | this ^^ seems to work pretty well, now I need to write/fix a ton of tests | 17:38 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: WIP: Scoped RBAC testing https://review.opendev.org/c/openstack/ironic/+/778957 | 17:53 |
TheJulia | stupid human mistake in that, It *should* actually get past standing up devstack this time | 17:54 |
TheJulia | but will detonate on tempest tests | 17:54 |
TheJulia | Which is to be expected since they are going to need scope context | 17:54 |
TheJulia | anyone remember does anyone actively remember what the deal is with ussuri stable branch ci? | 17:57 |
erbarr | hi, for UEFI, how can I dib a wholedisk ubuntu image? | 18:01 |
*** derekh has quit IRC | 18:01 | |
dtantsur | erbarr: example #3 https://docs.openstack.org/ironic/latest/install/creating-images.html#disk-image-builder | 18:01 |
erbarr | dtantsur, ahhh thanks! | 18:03 |
openstackgerrit | Julia Kreger proposed openstack/ironic stable/ussuri: Stable-CI: Disable ansible testing on ussuri https://review.opendev.org/c/openstack/ironic/+/780062 | 18:29 |
TheJulia | New phrase "Least evil, most impactful" | 18:29 |
*** ociuhandu has quit IRC | 18:32 | |
*** k_mouza has quit IRC | 18:33 | |
*** k_mouza has joined #openstack-ironic | 18:37 | |
*** dtantsur is now known as dtantsur|afk | 18:39 | |
dtantsur|afk | o/ | 18:39 |
*** diurnalist has quit IRC | 18:42 | |
*** bburns_ has joined #openstack-ironic | 18:43 | |
TheJulia | goodnight | 18:43 |
*** bburns has quit IRC | 18:45 | |
*** k_mouza has quit IRC | 18:53 | |
TheJulia | lbragstad: well, good news. It works. We made it all the way through devstack in an enforced mode up until it was time to restart nova. https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_6e5/778957/11/check/ironic-inspector-tempest-secure-rbac/6e55d7b/controller/logs/screen-n-cpu.txt :( | 18:56 |
lbragstad | nice! | 18:57 |
TheJulia | An unknown error has occurred when trying to get the list of nodes from the Ironic inventory. Error: The baremetal service for 10.209.37.89:RegionOne exists but does not have any supported versions.: openstack.exceptions.NotSupported: The baremetal service for 10.209.37.89:RegionOne exists but does not have any supported versions. | 18:57 |
lbragstad | ahh - is the endpoint in the service catalog? | 18:58 |
*** diurnalist has joined #openstack-ironic | 18:59 | |
TheJulia | looks like it | 19:00 |
TheJulia | it is not loading up an override | 19:00 |
*** _gryf has joined #openstack-ironic | 19:01 | |
TheJulia | looks like nova is trying to use project scope auth of course | 19:02 |
lbragstad | and ironic is enforcing scope | 19:02 |
lbragstad | right? | 19:02 |
TheJulia | yup | 19:02 |
lbragstad | yeah - nice, that's a good sign | 19:02 |
TheJulia | indeed | 19:02 |
lbragstad | i guess we're to the point where we need to start updating those areas | 19:02 |
lbragstad | which is cool | 19:02 |
TheJulia | The nova error is super vague, but it looks like it might not even getting into the API logging at all | 19:03 |
TheJulia | the apache log says it returned a 200... | 19:05 |
TheJulia | hmm yeah, apparently returned 200s | 19:07 |
TheJulia | thats not right | 19:07 |
*** ociuhandu has joined #openstack-ironic | 19:07 | |
TheJulia | oh | 19:08 |
TheJulia | it would be an empty list | 19:08 |
TheJulia | generated 13 bytes | 19:08 |
TheJulia | yup, the empty list json response would be exactly 13 bytes | 19:09 |
TheJulia | which means work in nova to at least not freak out as horribly | 19:10 |
TheJulia | okay, that was actually before ironic's api was up because of how devstack works | 19:13 |
*** ociuhandu has quit IRC | 19:15 | |
*** ociuhandu has joined #openstack-ironic | 19:18 | |
*** jawad_axd has quit IRC | 19:18 | |
*** ociuhandu has quit IRC | 19:25 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: WIP: Scoped RBAC testing https://review.opendev.org/c/openstack/ironic/+/778957 | 19:34 |
TheJulia | lbragstad: https://review.opendev.org/c/openstack/devstack/+/780073 and ^^^ hopefuly will work together and we'll see magic | 19:35 |
lbragstad | ok - cool | 19:35 |
lbragstad | curious to see how that pans out | 19:35 |
TheJulia | me too | 19:36 |
TheJulia | I may update it again to enable a hybrid mode out of the gate | 19:36 |
TheJulia | but maybe later | 19:36 |
TheJulia | one thing at a time is best | 19:36 |
lbragstad | agreed | 19:36 |
TheJulia | https://zuul.opendev.org/t/openstack/stream/e51e5cd298f14958b6b3c1d07fb978c9?logfile=console.log | 19:39 |
*** ociuhandu has joined #openstack-ironic | 19:40 | |
*** diurnalist has quit IRC | 19:40 | |
*** dsneddon_ has joined #openstack-ironic | 19:42 | |
*** rh-jelabarre has quit IRC | 19:47 | |
*** ociuhandu has quit IRC | 19:51 | |
*** rh-jelabarre has joined #openstack-ironic | 19:52 | |
*** diurnalist has joined #openstack-ironic | 19:57 | |
*** rcernin has joined #openstack-ironic | 20:00 | |
*** k_mouza has joined #openstack-ironic | 20:28 | |
*** k_mouza has quit IRC | 20:33 | |
TheJulia | hmm, looks like it didn't load it in :\ | 20:44 |
*** dking has joined #openstack-ironic | 20:47 | |
*** jamesdenton has quit IRC | 20:53 | |
TheJulia | lbragstad: doh, put it backwards | 20:53 |
*** jamesdenton has joined #openstack-ironic | 20:53 | |
*** k_mouza has joined #openstack-ironic | 20:54 | |
*** ociuhandu has joined #openstack-ironic | 20:56 | |
*** k_mouza has quit IRC | 20:59 | |
*** michall has joined #openstack-ironic | 21:03 | |
*** michall has left #openstack-ironic | 21:03 | |
*** rcernin has quit IRC | 21:04 | |
*** ociuhandu has quit IRC | 21:04 | |
*** rcernin has joined #openstack-ironic | 21:35 | |
TheJulia | ajya: w/r/t the configuration molds patches, it looks like they need to be rebased. Also, fwiw, regarding 768428 you only need to have a dependency on the later patch. That pulls in both automatically as it represents the history of the prior patch in the chain as well. You can't take two independent histories in the same repo and expect the CI infra to reconcile it when they are from the same repository. | 21:41 |
*** rcernin has quit IRC | 21:51 | |
*** rcernin has joined #openstack-ironic | 21:54 | |
*** bfournie has quit IRC | 21:58 | |
lbragstad | TheJulia are you doing any testing locally with devstack? | 21:59 |
TheJulia | lbragstad: no, my stack blew up on networking issues last week | 22:00 |
TheJulia | well, last friday | 22:00 |
*** rcernin has quit IRC | 22:00 | |
lbragstad | ok | 22:00 |
TheJulia | why? | 22:00 |
*** rcernin has joined #openstack-ironic | 22:00 | |
openstackgerrit | Verification of a change to openstack/ironic failed: Allow users to configure priority for {create,delete}_configuration https://review.opendev.org/c/openstack/ironic/+/778145 | 22:02 |
lbragstad | the existing devstack personas are the legacy ones | 22:03 |
lbragstad | (e.g., devstack, devstack-admin, etc.) | 22:03 |
mnaser | ok, am i REALLY unlucky or whats goin on | 22:03 |
lbragstad | i'm adding to those https://review.opendev.org/c/openstack/devstack/+/780033/3 | 22:03 |
mnaser | https://review.opendev.org/c/openstack/ironic/+/778145 | 22:03 |
mnaser | ironic-tempest-ipa-wholedisk-direct-tinyipa-multinode failed this time | 22:03 |
mnaser | :'( | 22:03 |
janders | good morning Ironic o/ | 22:08 |
iurygregory | morning janders o/ | 22:20 |
iurygregory | mnaser, I need to agree that you are unlucky =( | 22:20 |
iurygregory | did you offer a cookie to zuul? | 22:21 |
openstackgerrit | Verification of a change to openstack/ironic failed: Allow users to configure priority for {create,delete}_configuration https://review.opendev.org/c/openstack/ironic/+/778145 | 22:23 |
iurygregory | wait | 22:25 |
iurygregory | WHAT?! | 22:25 |
iurygregory | the bot is drunk? | 22:25 |
TheJulia | lbragstad: okay, for now I just care about system-admin which is already present | 22:32 |
lbragstad | yeah- that makes sense | 22:33 |
TheJulia | mnaser: looks like we've just got too many VMs for the limited number of machines we can deploy on those hosts | 22:36 |
TheJulia | I think we need to just turn off basic ops since the other jobs run on multitenancy | 22:37 |
*** ociuhandu has joined #openstack-ironic | 22:45 | |
*** ociuhandu has quit IRC | 22:51 | |
*** fdegir has quit IRC | 23:10 | |
*** fdegir has joined #openstack-ironic | 23:10 | |
*** jamesdenton has quit IRC | 23:23 | |
*** jamesdenton has joined #openstack-ironic | 23:24 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!