Tuesday, 2016-10-18

*** lamt has quit IRC00:00
sdakeif cinder runs again /run/ceph00:00
Jeffrey4lagree00:00
sdakethat could be a problem00:00
sdakedrwxrwx---. 1 ceph ceph   0 Oct 13 00:52 ceph00:00
sdake*really* need an strace of the crashing tool00:01
sdakei dont see why bootstrap would access /run in any regard00:01
*** Pavo has joined #openstack-kolla00:01
Jeffrey4li am trying to deploy this locally.00:01
sdakeJeffrey4l roger - i'll get off your back ;)00:02
*** hogepodge has quit IRC00:02
sdakeso dudes I bought the coolest thing today00:02
sdakehttp://www.apmex.com/product/102909/2016-australia-1-kilo-silver-koala-proof?utm_source=nextag&utm_medium=cpc&utm_campaign=shopping_engine00:03
*** tonanhngo has quit IRC00:03
sdakeexcept i got a scremaing deal - 650 bucks!00:03
Jeffrey4lcoin again... you love it so much. ;)00:04
openstackgerritKevin Fox proposed openstack/kolla-kubernetes: Modular gate  https://review.openstack.org/38696600:04
sdakeits more like a brick then a coin00:05
sdake1kilo = 2.2lbs00:05
sdakeJeffrey4l gotta have hobies00:05
sdake:)00:05
HyperJohnGrahampocket change ;)00:05
kfox1111well, that's an interesting question to the legal list...00:06
kfox1111"What are the options if someone active in the community decides to00:06
kfox1111continue their work outside the foundation using the same project00:06
kfox1111name?"00:06
sdakekfox1111 how would that happen00:06
kfox1111not sure.... it was just asked though.00:07
Jeffrey4llike i create a repo named Linux ;)00:07
sdakeheh :)00:07
*** jtriley has quit IRC00:07
kfox1111I'm wondering if thats more of a "what if swift decided to leave the big tent" or that sort of thing.00:07
*** hogepodge has joined #openstack-kolla00:08
kfox1111bootstrappping rabbit now...00:09
kfox1111soon...00:09
*** david-lyle has quit IRC00:09
*** janem has quit IRC00:10
Jeffrey4lno idea about it. but i guess, in some case it is illegal when the foundation register the branch.00:10
sdakekfox1111 we dont have a polciy that limits our projec tto big tent projects00:12
sdakewe use whatever makes sense00:12
*** MarMat_ has quit IRC00:12
kfox1111sure. just wondering if thats a forshadowing of a big tent project leaving.00:13
sdakee.g. we deploy mariadb, docker, etc00:13
sdakeal kinds of stuff00:13
sdakewhich is a forshadowing?00:13
kfox1111the question to the legal list.00:13
sdakeoh let me look :)00:13
sdakepopcorn00:13
Jeffrey4lhmm. swift wanna leave big tent?00:13
kfox1111look for "00:13
kfox1111[legal-discuss] Trademark for a specific OpenStack project00:13
kfox1111"00:13
kfox1111not swift specifically. just a generic question.00:13
sdakeJeffrey4l nobody knows except swift :)00:13
kfox1111I think they are none too happy about the go thing though.00:14
sdakemy understanding is projects don't have trademarks00:14
sdakebut i could be wrong00:14
kfox1111but thats total specuation on my part.00:14
sdakeno, they are not happy there is no speculation there00:14
*** tonanhngo has joined #openstack-kolla00:14
kfox1111bootstrap passed with that one patch reverted.00:14
kfox1111Jeffrey4l: the docker logs failed.00:15
sdakekfox1111 strace ;)00:15
kfox1111oh.. because of no sudo.00:15
Jeffrey4lkfox1111, failed to run or?00:15
sdakekfox1111 strace will tell us which file its looking for00:15
Jeffrey4lkfox1111, add it in next patch.00:16
kfox1111sdake: yeah. sudo's next. we know what patch it is for sure now though, and the rest of trunk seems clean.00:16
sdakekfox1111 would be nice if this is isolated to just cinder00:16
kfox1111so if there have been other ones that merged with permissions, then its not that.00:16
kfox1111sdake: seems like it is, since its just the one patch. did any other of the permissions ones merge?00:17
sdakekfox1111 a whole lot of em00:17
kfox1111so then that part is probably in the clear... just something specific in the patch it doesn't like then.00:17
kfox1111so shoudln't be too bad then.00:17
sdakethat is one possible scenario00:17
sdakeanother scenario is some other patch (in ceph for e.g) triggers cinder to implode00:18
Jeffrey4lsdake, kfox1111 reproduced this locally.00:18
Jeffrey4lgot the error message.00:18
sdakeJeffrey4l nice00:18
Jeffrey4leasy to fix.00:18
sdakeerror is what?00:18
kfox1111the tricky bit now is to get it to strace with the workflow...00:18
Jeffrey4linvalid json00:18
kfox1111oh. cool. :)00:18
*** tonanhngo has quit IRC00:18
sdakeoh duh00:18
kfox1111doh.00:18
sdakewell - json looked correct to me00:19
kfox1111that makes me sad. :(00:19
Jeffrey4lya. me too. i am checking this carefully ;)00:19
kfox1111we for sure need at least a json validator in the gate. :/00:19
*** hogepodge has quit IRC00:20
Jeffrey4lkfox1111, try to collect all logs after container exist in k8s. then it will be easy to debug.00:20
sdakekfox1111 we have one00:20
Jeffrey4lbut not for json.j2.00:20
Jeffrey4ljson.js is a jinja template file first.00:20
sdakeJeffrey4l right00:20
sdakewe should genconfig and jsonify it later00:20
sdakerather json gate after that00:21
kfox1111Jeffrey4l: https://review.openstack.org/#/c/386966/21/tests/bin/gate_capture_logs.sh00:21
*** hogepodge has joined #openstack-kolla00:21
kfox1111I've got logs up the wazoo! :)00:21
kfox1111still seems like more and more are needed. :/00:21
kfox1111each run probably collects a few hundered megs of logs now. :/00:21
Jeffrey4lwow.00:21
*** david-lyle has joined #openstack-kolla00:21
Jeffrey4lkolla ci catch: 1. docker logs   2. syslog /var/log   3. docker logs `journalctl -u docker `    4. opentack logs   /var/lib/docker/volumes/kolla_logs00:22
kfox1111this gate job was horible to debug initially. :)00:22
kfox1111yeah. I'm getting most of that now. plus a bunch more.00:22
Jeffrey4llost a quota here: "owner: "cinder:cinder",   :(00:23
kfox1111the tricky part is to do it via k8s though, as direct docker won't work so easily when I go to multinode.00:23
kfox1111so multinode should be relatively easy, since I did it with that in mind.00:23
kfox1111Jeffrey4l: doh. that looks bad.00:23
Jeffrey4lyep. now kolla doesn't enable ci in gate. ;(00:24
kfox1111we need to change that this cycle. :/00:24
Jeffrey4labsolutely.  more gates are really needed.00:25
kfox1111I'm breaking up the kolla-kubernetes gate so that we can run it many different ways more easily00:25
kfox1111was thinking we might hook tested kolla-kubernetes into the kolla gate. so stuff like this would be cought quickly.00:25
*** schwicht has joined #openstack-kolla00:26
Jeffrey4lsound cool.00:26
kfox1111shoudl be pretty easy I think. just gota flip around a couple of repos.00:26
*** sbezverk has joined #openstack-kolla00:26
kfox1111pull patch from kolla instead of kolla-kubernetes, but do all the same otherwise.00:26
Jeffrey4lit should not be that hard.00:26
kfox1111yeah.00:27
sdakeJeffrey4l http://jsonlint.com/#00:27
Jeffrey4ladd one of kolla job, which pull kolla-k8s and start the gate script.00:27
kfox1111just want to get ceph+centos+cinder working first. its almost there. but odly broken.00:27
kfox1111yeah.00:27
Jeffrey4lsdake, we should render the json file as jinja2 template, then validate it.00:27
kfox1111Jeffrey4l: +1.00:28
kfox1111Jeffrey4l: I'm doing that for all the kolla-kubernetes templates in the gate. has solved a bunch of issues.00:28
Jeffrey4lthis is probable in kolla. which try to add this.00:28
sdakei've found it00:28
sdake"owner:"00:28
*** frzn_ has joined #openstack-kolla00:28
sdakethat is wrong00:28
sdakeit should be "onwer":00:28
frzn_test00:28
frzn_hi hello00:28
*** frzn_ is now known as mtaylo2200:28
kfox1111can probablyl just run a genconfig, then walk /etc/kolla and do a test on the json files.00:28
*** mtaylo22 is now known as mtaylor22_00:29
sdakehello frz00:29
mtaylor22_morning etc.00:29
mtaylor22_:)00:29
Jeffrey4lkfox1111,  yes. it is better.00:29
sdakekfox1111 emergeny averted, this is a simple bug in the json merged00:29
sdakei'll fix now00:29
*** david-lyle has quit IRC00:29
*** ssurana has quit IRC00:30
kfox1111sdake: yup. :) thanks for letting me know to test. this would have been really anoying to let out the door. :)00:30
*** mtaylor22 has quit IRC00:30
*** mtaylor22_ is now known as mtaylor2200:30
*** david-lyle has joined #openstack-kolla00:31
sdakekfox1111 yup - that is why we also manually test00:31
* kfox1111 nods00:31
kfox1111I just got tired of manually testing. :)  though probably spent a lot more effort, at least initially on gating...00:32
kfox1111but I feel much more comfortable upgradoing my clouds if I know there's a solid gate there.00:32
openstackgerritSteven Dake proposed openstack/kolla: Fix for cinder not working with permissions changes  https://review.openstack.org/38773600:33
Jeffrey4lkfox1111, about this json validate, i will extend the exist script to support json.j2 file.00:33
kfox1111cool.00:34
*** david-lyle has quit IRC00:34
*** diogogmt has quit IRC00:34
sdakekfox1111 can you cherrypick that patch into your test case00:35
sdakeand validate it00:35
*** david-lyle has joined #openstack-kolla00:35
sdakekfox1111 right - gating has high upfront cost00:36
sdakebut long term its the only way to roll00:36
openstackgerritKevin Fox proposed openstack/kolla-kubernetes: WIP: Testing trunk...  https://review.openstack.org/38764100:36
*** haplo37_ has quit IRC00:36
Jeffrey4lsdake, hmm should be Partial-Bug: #163150300:37
openstackbug 1631503 in kolla "inconsistent UID in named volume results in inability to upgrade" [Critical,In progress] https://launchpad.net/bugs/1631503 - Assigned to Steven Dake (sdake)00:37
kfox1111sdake: done. https://review.openstack.org/#/c/387641/500:37
kfox1111watch for the ubuntu-binary-ceph job.00:37
kfox1111I've got to head out. will be back later.00:37
openstackgerritSteven Dake proposed openstack/kolla: Fix for cinder not working with permissions changes  https://review.openstack.org/38773600:38
*** haplo37_ has joined #openstack-kolla00:39
sbezverkkfox1111: how the latest version of fencing pod looking?00:40
*** yingjun has joined #openstack-kolla00:41
sdakeJeffrey4l if you could take a look at the same topics field for this bug: https://review.openstack.org/#/c/387603/100:41
sdakeJeffrey4l alot of them can be merged with one more +200:41
Jeffrey4lnp.00:42
* Jeffrey4l is reviewing all relate PS>00:42
sdakeJeffrey4l any that can't need to be fixed00:42
sdakeso that hwen our emea cr's wake up for the day they have some work to do :)00:42
openstackgerritMerged openstack/kolla: Fix sahara upgrade permission issue  https://review.openstack.org/38760000:43
sdakei also don't know if any services were missed00:43
Jeffrey4lsdake, we track this here https://etherpad.openstack.org/p/kolla-bug-163150300:43
sdakeJeffrey4l yup - however its not tracking everything and not including backports00:44
sdakeJeffrey4l i thin ka git log should be able to tell us that all he files have been changed00:44
Jeffrey4lyep. need update.00:44
sdakefind . -name \*json.j2 -exec git log {} \;00:44
sdakemight work00:44
sdakelets get whats in the queue merged first00:44
Jeffrey4lok.00:45
sdakeJeffrey4l i've got dinner in about 30mins-1hr for 20 or 30 mins00:46
Jeffrey4lroger.00:46
*** tovin07 has joined #openstack-kolla00:46
*** david-lyle has quit IRC00:47
sdakenay core reiewers out there - need a workflow on https://review.openstack.org/#/c/387736/00:47
*** david-lyle has joined #openstack-kolla00:48
*** tonanhngo has joined #openstack-kolla00:48
*** robotzzzz has joined #openstack-kolla00:48
*** robotzzzz has quit IRC00:49
*** tonanhngo has quit IRC00:49
Jeffrey4lcinder is OK with above PS ^^00:49
Jeffrey4ltested locally.00:49
*** gfidente has quit IRC00:50
*** sdake_ has joined #openstack-kolla00:51
*** sdake_ has quit IRC00:51
*** sdake_ has joined #openstack-kolla00:51
*** david-lyle has quit IRC00:51
sdake_Jeffrey4l i'd say automate the json.j2 gate check later, nd focus on getting thos reviews done ;)00:52
*** david-lyle has joined #openstack-kolla00:52
Jeffrey4lagree. im reviewing the queue now.00:52
sdake_Jeffrey4l stable/newton can be rubberstampped at this point - already passed master review00:52
*** sdake has quit IRC00:53
sdake_although clearly reading json is not optimal - so we should validate when done00:53
sdake_i stared a t that patch for hours before finding the " missing00:53
openstackgerritMerged openstack/kolla: Fix telegraf upgrade permission issue  https://review.openstack.org/38760400:53
sdake_and of course validate upgrade00:54
Jeffrey4lrender the json.j2 file by using jinja2 first ( provide different variables ), then validate the json file.00:54
sdake_ya i don twant to wait around for the gate to be automated for that work to be done00:54
sdake_that could take days00:55
sdake_especially since everyone is traveling shortly00:55
sdake_Jeffrey4l which day do you depart for barcelona?00:55
Jeffrey4l23 1:30 utc+800:56
sdake_i leave 20th00:56
sdake_at around 1600 utc00:56
*** duonghq has joined #openstack-kolla00:57
*** tonanhngo has joined #openstack-kolla00:57
*** tonanhngo has quit IRC00:58
openstackgerritMerged openstack/kolla: Fix mongodb upgrade permission issue  https://review.openstack.org/38761500:58
*** phuongnh has joined #openstack-kolla00:59
*** david-lyle has quit IRC00:59
Jeffrey4lsdake_, got. see u then ( hmm, it is OK/correct to say this ;) )01:00
openstackgerritMerged openstack/kolla: Fix magnum upgrade permission issue  https://review.openstack.org/38760301:00
sdake_huh?01:00
*** david-lyle has joined #openstack-kolla01:00
sdake_i dont ike to rubberstamp backports, but its necessary at end of release01:01
sdake_because if we find bug, we need that original backport in the repo01:01
sdake_to be consistent with stable:follows-policy01:01
sdake_as well as the fix to the backport01:01
sdake_(consider cinder as an example)01:02
Jeffrey4lroger.01:02
*** zhubingbing has joined #openstack-kolla01:03
sdake_sup zhenguo01:03
sdake_zhubingbing01:03
zhubingbinghi01:03
sdake_more zh* every day :)01:04
zhubingbingi'am here01:04
Jeffrey4llol01:04
sdake_zhubingbing - nice job on all the work related to upgrades01:04
sdake_zhubingbing did you get them all - or do more remain01:04
zhubingbing;)01:04
zhubingbingsure01:05
sdake_sure you go tthem all or sure moer remain :)01:05
*** tonanhngo has joined #openstack-kolla01:05
zhubingbingyes01:05
*** david-lyle has quit IRC01:05
sdake_yes what? :)01:05
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix wrong magnum volume path in json file  https://review.openstack.org/38774001:06
*** tonanhngo has quit IRC01:06
zhubingbingsure you go tthem all or sure moer remain :)  yes01:06
zhubingbing))01:06
*** david-lyle has joined #openstack-kolla01:06
Jeffrey4lzhubingbing, update the etherpad if your patch is merged. https://etherpad.openstack.org/p/kolla-bug-163150301:07
zhubingbingok01:07
*** rhallisey has quit IRC01:07
zhubingbingi fix it now01:07
*** david-lyle has quit IRC01:07
zhubingbingsdake I'll fix it all01:10
*** HyperJohnGraham_ has joined #openstack-kolla01:10
Jeffrey4lbrb01:10
*** david-lyle has joined #openstack-kolla01:13
*** david-lyle has quit IRC01:14
*** david-lyle has joined #openstack-kolla01:15
*** tonanhngo has joined #openstack-kolla01:15
*** hogepodge has quit IRC01:16
*** tonanhngo has quit IRC01:16
openstackgerritzhubingbing proposed openstack/kolla: Fix influxdb upgrade permission issue  https://review.openstack.org/38732501:16
Pavoso this is my current setup here at home01:16
Pavohttps://www.dropbox.com/s/r0bescg907id4l6/Screenshot%202016-10-17%2021.16.17.png?dl=001:16
Pavowhat you guys think?01:16
sdake_pavo what tool did you use to make that diagram?01:18
Pavogliffy01:18
sdake_thought so thanks01:18
Pavohttps://www.gliffy.com/go/publish/1130918701:18
*** david-lyle has quit IRC01:19
sdake_note if you are a pyaing customer you can send them a nastygram and they will enable collaboration for your account01:19
sdake_worked for me atleast ;-)01:19
Pavojust a free accoutn right now01:19
Pavothis better01:20
Pavohttps://www.gliffy.com/go/publish/1130918701:20
*** david-lyle has joined #openstack-kolla01:20
*** david-lyle has quit IRC01:21
sdake_get me the anestaphine from the medlock!01:21
Pavolol01:21
*** david-lyle has joined #openstack-kolla01:23
*** tonanhngo has joined #openstack-kolla01:23
openstackgerritzhubingbing proposed openstack/kolla: Fix murano upgrade permission issue  https://review.openstack.org/38774301:24
*** david-lyle has quit IRC01:24
*** david-lyle has joined #openstack-kolla01:25
*** pritesh has quit IRC01:27
*** david-lyle has quit IRC01:32
*** david-lyle has joined #openstack-kolla01:34
*** hogepodge has joined #openstack-kolla01:35
*** denaitre has quit IRC01:36
*** denaitre has joined #openstack-kolla01:37
*** david-lyle has quit IRC01:37
*** yee3796 has joined #openstack-kolla01:38
*** david-lyle has joined #openstack-kolla01:38
*** david-lyle has quit IRC01:38
*** yee379 has quit IRC01:39
*** NobodyCam has quit IRC01:42
*** NobodyCam has joined #openstack-kolla01:42
*** zhangyufei has joined #openstack-kolla01:43
*** david-lyle has joined #openstack-kolla01:44
*** david-lyle has quit IRC01:44
*** david-lyle has joined #openstack-kolla01:45
*** david-lyle has quit IRC01:46
*** david-lyle has joined #openstack-kolla01:46
*** david-lyle has quit IRC01:47
openstackgerritJeffrey Zhang proposed openstack/kolla: Add OS_CACERT in openrc when it is configured  https://review.openstack.org/38774401:50
Jeffrey4lkfox1111, have u ever tested swift?01:53
Jeffrey4lsdake_, re https://bugs.launchpad.net/kolla/+bug/1632811 leave a comment01:54
openstackLaunchpad bug 1632811 in kolla "Keystone token table filling up" [Critical,In progress] - Assigned to Mathias Ewald (mewald)01:54
Pavowhat are you guys using to hash passwords and stuff? MD5?01:55
Pavohopefully atleast sha25601:55
sdake_pavo - password generation occurs in tools/genpwd.py01:55
Pavoyeah but which algorithm?01:55
Jeffrey4lPavo, it is just random char01:56
sdake_https://github.com/openstack/kolla/blob/master/kolla/cmd/genpwd.py#L2501:56
Jeffrey4lthe passwords in password.yaml file is raw. no encrypt .01:56
sdake_pavo and:01:56
*** david-lyle has joined #openstack-kolla01:56
sdake_https://github.com/openstack/kolla/blob/master/kolla/cmd/genpwd.py#L7801:56
Pavothe reason I am asking is for FIPS 140-2 compliance01:57
sdake_SystemRandom is a SPRNG that is built into python01:57
Pavowhich is one of those CAT 1 requirement :(01:57
sdake_it is based upon /dev/urandom01:57
sdake_if you dont trust that type of SPRNG you can make your own secure passwords01:57
Pavotrue01:57
*** david-lyle has quit IRC01:57
sdake_as far as the ssh keys and whatnot, that is standard libssh stuff01:58
sdake_rsa 4096 - should be secure to all but the most determined individuals (i.e. government agencies)01:58
*** david-lyle has joined #openstack-kolla01:58
Pavoyeah tell me about it01:58
Pavo:P01:59
sdake_i am not sure if SystemRandom has gone through fips14001:59
sdake_same story for the Crypto library we use01:59
sdake_I would think they would have01:59
sdake_but don't know for sure01:59
sdake_if you find out, please do let me know02:00
sdake_note, you can always generate your own credentials using custom tools with more secure defaults02:00
*** david-lyle has quit IRC02:00
sdake_I'm not sure how you would make it more secure02:00
sdake_but maybe you have secret tricks ;-)02:00
*** david-lyle has joined #openstack-kolla02:01
sdake_one advantage of not using our genpwd tool is your tool would be secure according to your requirements02:01
sdake_a more secure approach would be to HMAC the SystemRandom output02:02
*** david-lyle has quit IRC02:02
sdake_i'm not sure if that would be much better02:02
sdake_the problem is SPRNG is not a S as one would like :(02:02
Pavowell we found out today that packstack uses MD5 for everything that it hashes02:02
Pavowhich can not be found in any of the source code02:02
*** david-lyle has joined #openstack-kolla02:02
sdake_pavo openstack itself may be using md5 - i am not sure02:03
*** unicell has quit IRC02:03
Pavotrue02:03
sdake_pavo but we dont use any md5 anywhere in kolla - it is insecure02:03
*** david-lyle has quit IRC02:03
Pavogood to know02:03
sdake_another option would be to use a cipher on the systemrandom data02:03
*** diogogmt has joined #openstack-kolla02:03
sdake_note the passwords.yml file (protected by filesystem permissions) can be encrypted via vault02:04
*** david-lyle has joined #openstack-kolla02:04
*** david-lyle has quit IRC02:04
sdake_i am not sure if the systemrandom code uses a chaining block cipher or not02:05
*** david-lyle has joined #openstack-kolla02:05
Pavosha256 at least is good enough02:05
*** david-lyle has quit IRC02:05
sdake_tbh, I think there are backdoors planted in all encryption stuff02:05
sdake_sha256 is secure from my POV02:05
sdake_sha256 doesn't generate random data02:05
sdake_unless combined with a cipher02:06
*** schwicht has quit IRC02:06
sdake_i am not convinced rsa is secure02:06
sdake_but if it is insecure, only a few people in teh world know how its busted02:06
sdake_and at best, it would just shorten the search space02:06
sdake_which again might be doable for a govt agency02:06
sdake_but not for an individual cracker :)02:07
*** david-lyle has joined #openstack-kolla02:07
*** mtaylor22 has quit IRC02:08
*** david-lyle has quit IRC02:08
*** mtaylor22 has joined #openstack-kolla02:09
sdake_Pavo on the plus side if there is any insecure parts of kolla - all patches must pass through 3 people's hands02:09
sdake_and we trust our core reviewers implicitly02:09
sdake_so it would take 3 people working in collusion to hide an exploit02:09
sdake_and the exploit would likely be discovered by other core reviewers02:09
sdake_pavo we also have a semi-policy of disallowing merges from 1 company by multiple poeple02:10
*** david-lyle has joined #openstack-kolla02:10
sdake_this is why openstack in general is secure02:10
sdake_not just kolla02:11
sdake_there are security vulns found of course02:11
sdake_none yet in kolla that i'm aware of02:11
*** david-lyle has quit IRC02:11
sdake_but they are more like errors rather then intentional02:11
sdake_not like when kernel.org got cracked and shit got inserted in kernel.org02:11
*** david-lyle has joined #openstack-kolla02:12
sdake_that was like a 6 week reset02:12
sdake_attacking openstack security wise woudl be very difficult - and possibly beyond government control - although there was that virus in iran ;)02:12
sdake_Pavo any other q?02:13
Pavonot sof ar02:13
Pavoso far02:13
sdake_ok - Jeffrey4l - so there are several -1s on reviews related to upgrade02:13
sdake_Jeffrey4l can we split these up and fix em up02:13
*** david-lyle has quit IRC02:14
Jeffrey4lsdake_, two are -1 both mine.02:14
Jeffrey4lhmm. three, including nova.02:15
sdake_Jeffrey4l i think nova is good to go02:15
sdake_inc007 tested it02:16
sdake_it does change the permissiosn of disk and the log  file02:16
sdake_but it seems toh ave no impact since libvirt  runs as root02:16
Jeffrey4lOK. merge it.02:17
*** david-lyle has joined #openstack-kolla02:17
*** david-lyle has quit IRC02:18
*** david-lyle has joined #openstack-kolla02:18
sdake_Jeffrey4l - ithink we merge everything we can then test from there02:19
Jeffrey4lso for ironic conductor. /tftpboot is used by pxe which runs as root, too.02:19
Jeffrey4lremove my -1 for ironic.02:19
*** david-lyle has quit IRC02:19
Jeffrey4lroger.02:19
sdake_is ironic good to go though?02:19
sdake_if /tftbpoot is owned by root shouldn't it stay so?02:19
sdake_for security reasons02:19
Jeffrey4lsdake_, ironic will add files in tftpboot folder.02:20
*** david-lyle has joined #openstack-kolla02:20
openstackgerritMerged openstack/kolla: Fix nova  upgrade permission issue  https://review.openstack.org/38670902:21
openstackgerritSteven Dake proposed openstack/kolla: Fix nova  upgrade permission issue  https://review.openstack.org/38775302:21
*** david-lyle has quit IRC02:21
Jeffrey4li wanna to set up a test env for ironic to check.02:22
sdake_btw i added newton to our lsit of irc announcements :)02:22
sdake_Jeffrey4l wfm02:22
Jeffrey4lre announcements: what it means by that? meeting agenda?02:25
Jeffrey4lsdake_, ^^02:25
sdake_Jeffrey4l stable/newton changes notify our irc channel now Jeffrey4l02:26
*** david-lyle has joined #openstack-kolla02:26
*** dave-mccowan has quit IRC02:26
Jeffrey4lsound cool. what's kind of changes? each commit? or ? no idea about this.02:28
Jeffrey4lsdake_,02:28
sdake_every review and commit02:28
sdake_just like master and stable/mitaka /etc02:28
Jeffrey4lwow02:28
*** yuanying has quit IRC02:29
Jeffrey4lfound it. configure by project-config/gerritbot/channels.yaml right?02:30
sdake_yup02:30
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix neutron upgrade permission issue  https://review.openstack.org/38721202:32
*** haplo37 has quit IRC02:37
*** g3ek has quit IRC02:37
*** haplo37 has joined #openstack-kolla02:39
*** hogepodge has quit IRC02:40
*** g3ek has joined #openstack-kolla02:40
Jeffrey4lsdake_, https://review.openstack.org/#/c/387743/02:41
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix mistral upgrade permission issue  https://review.openstack.org/38776002:43
*** huhaoran has joined #openstack-kolla02:43
openstackgerritzhubingbing proposed openstack/kolla: Fix cinder upgrade permission issue  https://review.openstack.org/38759702:44
Pavodoes the setup_RedHat.sh script take a new bare metal install of CentOS and make it ready for kolla deployment?02:47
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix heat upgrade permission issue  https://review.openstack.org/38776102:47
openstackgerritzhubingbing proposed openstack/kolla: Fix mistral upgrade permission issue  https://review.openstack.org/38776002:48
openstackgerritMerged openstack/kolla: Fix murano upgrade permission issue  https://review.openstack.org/38774302:49
openstackgerritzhubingbing proposed openstack/kolla: Fix congress upgrade permission issue  https://review.openstack.org/38776202:50
openstackgerritSteven Dake proposed openstack/kolla: Fix influxdb upgrade permission issue  https://review.openstack.org/38776402:52
sdake_well atleast our gate is working again Jeffrey4l  :)02:54
Pavosdake_02:54
Pavodoes the setup_RedHat.sh script take a new bare metal install of CentOS and make it ready for kolla deployment?02:54
Jeffrey4lya.02:54
openstackgerritMerged openstack/kolla: Fix influxdb upgrade permission issue  https://review.openstack.org/38732502:55
Jeffrey4lPavo, no. it is using loop device for docker right now.02:55
Pavobut other than that everything else is done right?02:55
Jeffrey4lthis script is only used for ci now.02:55
Pavofor all nodes02:55
Pavoci?02:55
Jeffrey4lcorrect.02:55
Pavowhats ci02:56
Jeffrey4lPavo, gate jobs?02:56
Pavoah02:56
Pavook02:56
Pavoman there is still alot I need to learn02:56
Jeffrey4lthis script is simple and only used for ci. please do not use it especially in produce env02:57
sdake_Pavo there is a playbook tha twill setup centos02:57
sdake_pavo i think its kolla-ansible bootstrap02:57
Pavoif you had a way to go train with a few companies of your choice to get more involved with openstack, docker and a few others which companies would you pick to get training from?02:57
Pavosdake_ ok I'll look into it02:58
Pavomoney no issue on the training btw02:58
Pavowhich ones would you go to02:58
*** inc0 has joined #openstack-kolla03:00
openstackgerritMichal Jastrzebski (inc0) proposed openstack/kolla: Fix nova  upgrade permission issue  https://review.openstack.org/38775303:00
Pavosdake_ and Jeffrey4l  which ones would you get training from?03:01
Pavoremember of your choice, money no issue03:01
inc0trainings? where?:D03:01
*** ssurana has joined #openstack-kolla03:02
sdake_pavo training?03:02
sdake_OTJ03:02
Pavotraining to get you more up to date with the whole openstack stuff and docker and anything else that would be beneficial03:02
Jeffrey4l no need training :/ . learn from code ;)03:02
Pavoyes companies you could go work with, Training with Industry03:03
inc0what Jeffrey4l said, most of trainings will be outdated03:03
inc0by the time you take them;)03:03
sdake_sup inc003:03
sdake_inc0 we need some acks on reviews03:03
sdake_inc0 upgrades reviews in particular03:03
sdake_everything else is good to go03:03
Pavook what coding languages, I am thinking python, yaml and json03:03
inc0Pavo, so for kolla, start with ansible03:04
Jeffrey4lyaml and jons is not language. it is file format.03:04
inc0not really coding language03:04
Pavoisn't that yaml?03:04
Pavoah ok03:04
*** hogepodge has joined #openstack-kolla03:04
PavoI see03:04
sdake_probably lots of cats teach ansible at this point03:04
sdake_i'd start with a book03:04
PavoI think I am pretty good with ansible03:05
inc0Pavo, you going to BCN?03:05
Pavobeen playing with it for a bit now03:05
inc0Docker is super easy to understand in principle03:05
inc0if you're good at linux03:05
*** portdirect has quit IRC03:05
Pavothat what we use to apply STIGs to our stacks03:05
Pavoyeah getting better with Docker also03:05
sdake_wot is a stig03:05
PavoSecurity Technical Implementation Guides03:06
inc0sdake_, some security procedure, Pavo already linked;)03:06
Pavohttp://iase.disa.mil/stigs/Pages/index.aspx03:06
sdake_cool03:06
sdake_well i dont know anything about stigs03:06
sdake_but we do intend to go through VMT at some point in the future ;-)03:06
inc0Pavo, python won't be that much needed to running openstack03:06
sdake_VMT = vulnerability management03:06
Pavoand what is BCN inc003:06
inc0Barcelona - summit03:06
sdake_pavo airport code for barcelona03:06
Pavowhen is it?03:07
inc0next week;)03:07
sdake_next week03:07
inc0so probably a bit too late;)03:07
sdake_bjolo booked his trave lthis morning03:07
inc0however, next big meeting will be in Atlanta in Febuary03:07
Pavolol yeah WAY to late for that03:07
Pavoreally03:07
Pavothats only 2hours away from me03:07
sdake_but i think he is in EU03:07
Pavothat I will probably be at03:07
inc0if you'd want to meet us in person, make a trip:)03:07
*** portdirect_ has joined #openstack-kolla03:08
Pavowait Atlanta, GA?03:08
inc0cool, I'm not sure if it'll be free for everyone, but I'm pretty sure it will be free for commiters03:08
sdake_i'm going to be on pto for the next 4 months03:08
sdake_enjoy :)03:08
*** portdirect_ is now known as portdirect03:08
inc0so if you make commit to kolla next couple of months, that should do it03:08
sdake_people can attend ptg for free is my understanding03:08
sdake_or for 25 bucks or something03:08
Pavoinc0 you meaning Atlanta, GA right03:08
sdake_something reallly minimal03:08
sdake_without having made a commit03:09
inc0yeah03:09
inc0big city in US03:09
inc0that one03:09
Pavook cool03:09
Pavoyeah we are going to be at the Boston summit also03:09
Pavonext year03:09
inc0cool03:09
sdake_https://www.youtube.com/watch?v=cDm_ZHyYTrg03:09
inc0probably we'll meet there too03:09
Pavoand I think military get into those summits for free03:09
Pavobut not sure03:10
inc0Pavo everyone who makes commit to openstack project gets free entry03:10
openstackgerritzhubingbing proposed openstack/kolla: Fix grafana upgrade permission issue  https://review.openstack.org/38776803:10
*** huhaoran has quit IRC03:10
inc0so if mil wont get for free, no problem, we'll figure a good patchset for you to make:)03:10
Pavowell thats easy lol, have done a few code reviews for the docs03:10
inc0one step at the time, you'll commit stuff in no time03:11
*** huhaoran has joined #openstack-kolla03:11
Pavobeen working on some SELINUX stuff with docker here lately, might commit that stuff since you guys not really using SELINUX03:12
inc0if it helps with security, sure03:12
*** eaguilar has joined #openstack-kolla03:15
sdake_wish i would have seen cash live before he passed03:15
openstackgerritJeffrey Zhang proposed openstack/kolla: Ironic should be started before nova-ironic-compute  https://review.openstack.org/38777203:16
openstackgerritMerged openstack/kolla: move sys.exit out of try finally block in set_config.py file  https://review.openstack.org/38771503:16
openstackgerritMerged openstack/kolla: Fix common role upgrade permission issue  https://review.openstack.org/38771703:16
openstackgerritMerged openstack/kolla: Fix for cinder not working with permissions changes  https://review.openstack.org/38773603:17
*** ssurana has quit IRC03:18
inc0rubber-stamp all the things mwhahaha!03:18
inc0sdake_, kolla started around kilo right?03:19
*** coolsvap has quit IRC03:20
*** eaguilar has quit IRC03:20
openstackgerritzhubingbing proposed openstack/kolla: Fix grafana upgrade permission issue  https://review.openstack.org/38777403:20
openstackgerritMerged openstack/kolla: Fix wrong magnum volume path in json file  https://review.openstack.org/38774003:20
duonghqPavo: still there?03:23
Pavoyeah03:23
*** david-lyle has quit IRC03:23
jascott1sdake_ me too (cash)03:23
sdake_inc0 2 mo prior to kilo03:23
sdake_about 3 years i htink03:23
inc0https://www.youtube.com/watch?v=QfCOJLRk2D403:24
*** david-lyle has joined #openstack-kolla03:24
Jeffrey4lLaunch at Sep 17, 201403:24
Jeffrey4lJoin OpenStack Big Tent at Aug 5, 201503:24
Jeffrey4lFirst release at Liberty03:24
*** david-lyle has quit IRC03:25
inc0yeah about right03:25
sdake_no our first tag was actually juno jeffrey03:25
duonghqPavo, https://bugs.launchpad.net/kolla/+bug/162131203:25
openstackLaunchpad bug 1621312 in kolla "Remove duplicate jobs in gate setup script and bootstrap-servers" [High,Confirmed] - Assigned to Duong Ha-Quang (duonghq)03:25
sdake_GIT LOG03:25
duonghqI reported this bug about duplicate login in setup gate and boostrap action03:25
inc0I'll tell couple of words about history on summit;)03:25
*** david-lyle has joined #openstack-kolla03:26
sdake_so 2 years then03:26
sdake_Jeffrey4l sep 17 is from git log?03:27
Pavois there a real reason to use bash scripts anymore? I mean ansible can do pretty much the same thing right?03:27
openstackgerritMerged openstack/kolla: Fix cinder upgrade permission issue  https://review.openstack.org/38759703:27
Jeffrey4lsdake_, yep.03:27
inc0Pavo, we use bash inside containers03:27
Pavoah03:27
duonghqPavo: nearly totally agreed with you03:27
*** david-lyle has quit IRC03:27
inc0to limit deps03:27
sdake_as well as python03:27
Pavomakes since03:27
Jeffrey4lDate:   Wed Sep 17 08:01:48 2014 -040003:27
Jeffrey4l    Initial commit03:27
sdake_juno kilo liberty mitaka newton - so 2.5 years for me03:28
*** david-lyle has joined #openstack-kolla03:28
duonghqbut the setup gate should use bootstrap action as much as possible03:28
sdake_we had tags for all those versions03:28
sdake_Jeffrey4l we floundered  around for awhile until I got a gig at cisco and could properly lead kolla without PHBs breathing down my neck03:29
*** david-lyle has quit IRC03:29
*** david-lyle has joined #openstack-kolla03:30
sdake_and then we had to convince the community to use ansible03:30
sdake_not sure how we pulled that one off03:30
sdake_started with 4 -2s and 3 +2s03:30
inc0Sam pulled that off03:30
sdake_he didn't pull that off inc003:30
sdake_he wrote parts of the intial implementation03:31
Jeffrey4lwhat's the alternative if not ansible?03:31
sdake_but getting the core team to buy into the idea03:31
sdake_nothign of his doing03:31
inc0he did, all the pocs and initial stuff were based on yaodu03:31
sdake_inc0 obviously wasn't here for the vote on the spec ;)03:31
inc0I wasn't core then but I was here03:31
inc0I'm here since compose:)03:32
Pavoyeah we started off with icehouse03:32
*** david-lyle has quit IRC03:33
*** david-lyle has joined #openstack-kolla03:34
*** david-lyle has quit IRC03:36
sdake_if we have anyone to owe to our total and utter success03:37
sdake_it is oddesy4me03:37
Pavoso can someone explain to me your complete process from after commiting code and testing it, like what all is being used and how its get built and tore down?03:37
sdake_who convinced me to write a manifesto03:37
sdake_which our community did :)03:37
openstackgerritzhubingbing proposed openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38777903:37
sdake_pavo complictaed and not the right time to ask that quesiton03:38
sdake_happy to answer next week after summit03:38
sdake_it will take a couple hours to walk you through it03:39
Pavolol yeah I figured it would be a pretty long answer03:39
sdake_Jeffrey4l https://review.openstack.org/#/c/387779/1/ansible/roles/gnocchi/templates/gnocchi-metricd.json.j203:40
sdake_Jeffrey4l does that look correct (gnocchi:kolla)03:40
Pavoso I noticed that kolla has elaticsearch connected to openstack, what is it collecting from, all the APIs?03:40
sdake_pavo it collects all the logs that we collect - which are most of them via heka03:41
sdake_heka loads logs into es, which can be visualized with kibana03:41
Pavook03:41
Pavowe use ELK and SO for that03:42
Jeffrey4lsdake_ gnocchi-api is started by using apache, which run as root, so we need change the /var/log/kolla/gnocchi first.03:43
inc0Pavo, http://docs.openstack.org/infra/manual/developers.html03:43
sdake_Jeffrey4l are the uids correct in that patch03:43
sdake_i've never used gnocchi03:43
Pavohave you guys thought about switching apache to nginx?03:43
openstackgerritMerged openstack/kolla: Fix congress upgrade permission issue  https://review.openstack.org/38776203:43
Jeffrey4lfor ubuntu, it is not correct. ( systemd user )03:44
Pavoinc0 that is prefect03:44
Pavoty so much03:44
Jeffrey4lcentos should be fine.03:44
openstackgerritMerged openstack/kolla: Fix nova  upgrade permission issue  https://review.openstack.org/38775303:44
inc0yeah this piece of docs is well written03:44
*** eaguilar has joined #openstack-kolla03:44
sdake_pavo no - nginx is not really how people recommend to deploy keystone/horizon03:45
sdake_if that changes, i guess we could change it around03:45
Pavois there a reason03:45
inc0not sure why tho03:45
inc0it's wsgi03:45
sdake_pavo i dont know of any good reason03:45
sdake_pavo then again i dont know of any good reason to use nginx over apache03:46
Jeffrey4lwanna know why use apache rather than nginx.  ;)03:46
PavoI would think nginx would be a better web service even though its not as mature as apache03:46
Jeffrey4lbut apache is widely used in openstack.03:46
*** david-lyle has joined #openstack-kolla03:46
inc0tbh it doesn't matter that much03:46
Pavotrue03:46
*** david-lyle has quit IRC03:46
inc0load is not a problem on this layer03:46
sdake_i measured our cloud under overload at 60% cpu idle03:47
inc0control plane performance is rarely an issue03:47
sdake_120ish nodes03:47
inc0rabbitmq usually dies first03:47
PavoI just think its easier to do backend proxies with nginx than it is with apache03:47
sdake_ya that damn rabbitmq03:47
sdake_pile of crap03:47
Jeffrey4lunless you are deploy a public cloud, with lots of user.03:47
sdake_lets drink to erlang!03:47
*** huhaoran has quit IRC03:47
inc0Jeffrey4l, still, usually it's rabbitmq that dies03:48
*** huhaoran has joined #openstack-kolla03:48
inc0if you do multiregion with keystone03:48
Jeffrey4linc0, ya. it is true03:48
inc0then it starts to matter03:48
sdake_multiregion with keystone = multile rabbitmqs03:48
inc0but we're talking about multi-thousand setups03:48
sdake_keystone doesn't use rabbitmq03:48
inc0but uses apache03:48
Pavois rabbitmq the only messaging service there is?03:48
sdake_pavo there is a slew of em03:48
*** eaguilar has quit IRC03:49
*** yuanying has joined #openstack-kolla03:49
inc0rabbitmq is best in terms of amqp03:49
inc0amqp protocol is not ideal03:49
sdake_infra uses zeromq iirc03:49
sdake_blame carl for that one inc003:49
openstackgerritzhubingbing proposed openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38777903:49
Pavooh ok I understand now03:49
Pavodidn't think about amqp03:50
*** david-lyle has joined #openstack-kolla03:50
inc0if you don't care that much about few vms failing to spawn you can go zmq03:50
inc0without persistence it's way faster03:50
openstackgerritSteven Dake proposed openstack/kolla: Fix grafana upgrade permission issue  https://review.openstack.org/38777403:51
inc0zmq creates kinda mesh so it's really strange thing to run03:51
Jeffrey4lis there any other defect about zmp?03:51
*** david-lyle has quit IRC03:51
openstackgerritSteven Dake proposed openstack/kolla: Fix neutron upgrade permission issue  https://review.openstack.org/38778003:52
inc0it's not as much defective as it is different from what you know03:52
sdake_inc0 rabbitmq ca nbe setup in a mesh too03:52
*** ssurana has joined #openstack-kolla03:53
*** diogogmt has quit IRC03:53
sdake_erlang weak link with rabbitmq03:53
Jeffrey4li know it does not  havecentral broker03:53
*** david-lyle has joined #openstack-kolla03:53
sdake_why they didn't choose a proper language - fail03:53
openstackgerritMerged openstack/kolla: Fix grafana upgrade permission issue  https://review.openstack.org/38776803:54
*** david-lyle has quit IRC03:54
inc0anyway I'm going off03:54
inc0tomorrow we have big people visiting and I need to be well awake03:54
openstackgerritMerged openstack/kolla: Fix neutron upgrade permission issue  https://review.openstack.org/38721203:54
inc0have a good night guys03:54
Pavoyeah I'm gonna head to bed myself got PT @050003:54
Jeffrey4lgood night.03:54
Pavohave good one03:54
sdake_nite pavo03:54
Pavosee ya tomorrow03:54
*** inc0 has quit IRC03:54
Pavonite03:54
Jeffrey4lnite Pavo03:55
*** david-lyle has joined #openstack-kolla03:55
*** david-lyle has quit IRC03:55
sdake_how many containers are needed to be converted for upgrade03:56
sdake_are we closing in on done?03:56
openstackgerritMerged openstack/kolla: Fix influxdb upgrade permission issue  https://review.openstack.org/38776403:57
HyperJohnGraham_define done ;)03:57
*** david-lyle has joined #openstack-kolla03:57
sdake_patches merged, upgrade from 2.0.2 to 3.0.0 works on ubuntu and centos03:57
sdake_DOD ^^03:57
*** david-lyle has quit IRC03:57
openstackgerritMerged openstack/kolla: Fix heat upgrade permission issue  https://review.openstack.org/38776103:58
HyperJohnGraham_so its safe for me to try a multinode install now ?03:58
*** david-lyle has joined #openstack-kolla03:58
sdake_HyperJohnGraham_ - speaking of DOD for kolla repo not kolla-k8s repo03:59
*** david-lyle has quit IRC03:59
HyperJohnGraham_or soon03:59
HyperJohnGraham_gotcha03:59
*** david-lyle has joined #openstack-kolla04:00
*** david-lyle has quit IRC04:01
sdake_116 json filess04:01
sdake_groan04:01
*** david-lyle has joined #openstack-kolla04:01
*** david-lyle has quit IRC04:04
sdake_aodh needs work04:04
sdake_barbican needs work04:04
sdake_ceilometer needs work04:04
*** david-lyle has joined #openstack-kolla04:04
sdake_ceph-mon needs work04:05
sdake_all ceph needs work04:05
*** david-lyle has quit IRC04:05
*** huhaoran has quit IRC04:05
sdake_hmm maybe my search is wrong04:05
*** huhaoran has joined #openstack-kolla04:06
*** david-lyle has joined #openstack-kolla04:06
sdake_we have converted 57 of 116 json files04:07
sdake_STDAKE-M-26CJ:kolla sdake$ find . -name \*json.j2 -exec git grep -c permission {} \; | wc -l04:07
Jeffrey4lsdake_, check the comments in ironic https://review.openstack.org/#/c/387180/104:08
*** david-lyle has quit IRC04:08
Jeffrey4lsdake_, lots of services are added during newton. i.e, upgrade won't affect. So no need fix the json file right now. sdake_04:09
sdake_Jeffrey4l ok04:09
Jeffrey4lsdake_, check the list here https://etherpad.openstack.org/p/kolla-bug-1631503   all essential service need be fixed are almost done.04:09
sdake_Jeffrey4l nice04:09
*** david-lyle has joined #openstack-kolla04:10
*** david-lyle has quit IRC04:11
sdake_21 new projects04:11
sdake_boy we move fast04:11
*** haplo37_ has quit IRC04:11
sdake_we can fix the new projects in 3.0.104:12
*** david-lyle has joined #openstack-kolla04:12
sdake_i think once existing projects are done, we can turn to testing for the next 15 hours :)04:12
Jeffrey4lya.04:12
sdake_zhubingbing you up for that04:13
zhubingbingi am here04:13
*** david-lyle has quit IRC04:13
Jeffrey4lbtw, i want to use unified uid in O and then the permissions field can be removed.04:13
*** haplo37_ has joined #openstack-kolla04:13
zhubingbingi agree, i will go to test04:13
*** david-lyle has joined #openstack-kolla04:14
*** david-lyle has quit IRC04:15
*** david-lyle has joined #openstack-kolla04:15
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix for cinder not working with permissions changes  https://review.openstack.org/38778504:16
*** david-lyle has quit IRC04:16
*** david-lyle has joined #openstack-kolla04:17
sdake_Jeffrey4l can you ack https://review.openstack.org/#/c/387779/204:18
*** david-lyle has quit IRC04:18
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix wrong magnum volume path in json file  https://review.openstack.org/38778604:18
Jeffrey4ldone.04:18
*** david-lyle has joined #openstack-kolla04:19
openstackgerritzhubingbing proposed openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38777904:20
*** david-lyle has quit IRC04:20
sdake_zhubingbing something is wrong with this cherrypick https://review.openstack.org/#/c/387779/04:21
*** david-lyle has joined #openstack-kolla04:21
sdake_zhubingbing it says "master" as branch - so shouldn't be a cherrypick04:21
zhubingbingok04:21
zhubingbingunderstand04:22
sdake_why was it cherrypicked?04:22
Jeffrey4lsdake_, last patch : only message is changed.04:23
zhubingbingi forget change barch04:23
sdake_zhubingbing use the cherrypick button in gerrit04:23
sdake_put in stable/newton04:23
sdake_saves time04:23
Jeffrey4lzhubingbing, you handle this https://review.openstack.org/#/c/387779/ in wrong.04:23
Jeffrey4lit isn't be merged.04:24
openstackgerritzhubingbing proposed openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38778804:24
zhubingbingem-)04:24
Jeffrey4li will restore patch set 204:24
Jeffrey4lzhubingbing, check this https://review.openstack.org/#/q/If22b6cf9fa3ce9f1c18e4c9a71c637e96e7c2347,n,z04:24
zhubingbingok04:24
sdake_Jeffrey4l should there not be a recurse here: https://review.openstack.org/#/c/387788/1/ansible/roles/gnocchi/templates/gnocchi-api.json.j204:25
*** eaguilar has joined #openstack-kolla04:25
Jeffrey4lsdake_, no. api is run as root.  so just change the folder permission04:25
Jeffrey4lsome file in log folder is root, others are gnocchi.04:26
Jeffrey4lso recurse is wrong.04:27
openstackgerritMerged openstack/kolla: Fix mistral upgrade permission issue  https://review.openstack.org/38776004:27
*** ssurana has quit IRC04:29
Jeffrey4lhow to use patch 2 in gerrit?04:29
sdake_Jeffrey4l it must be cherrypciekd and re-git reviewed04:30
*** eaguilar has quit IRC04:30
sdake_i dont know of any other way to revert to an older ps04:30
*** sdake_ has quit IRC04:30
*** unicell has joined #openstack-kolla04:30
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38777904:31
Jeffrey4lok. cherrypick works.04:31
*** unicell has quit IRC04:32
*** sdake has joined #openstack-kolla04:33
sdakeJeffrey4l when was our big tent applicationa gain?04:34
sdakeyou had the date earlier04:34
*** unicell1 has joined #openstack-kolla04:35
Jeffrey4lJoin OpenStack Big Tent at Aug 5, 2015 ( this come from the approve PS ) sdake04:36
sdakeJeffrey4l thanks04:38
*** huhaoran has quit IRC04:40
*** huhaoran has joined #openstack-kolla04:40
Jeffrey4ldoes openstack have any policy ,rule or scheduler to release z stream?04:45
Jeffrey4lsdake,04:45
*** unicell has joined #openstack-kolla04:45
sdakeJeffrey4l our unofficial policy is every 45 days04:45
sdakealthough we havne't done that since 2.0.2 because of the crazyness around 3.0.0 release04:46
sdakewe can release z streams whenever we like04:46
Jeffrey4lroger.04:46
sdakei'd ask that patches go in master first for the future of follows stable policy04:46
*** unicell1 has quit IRC04:46
sdakeobviously if there is a security problem we will release a zstream immediately after fixing04:46
*** asalkeld has quit IRC04:47
Jeffrey4lgot.04:47
sdakethat said, i'd rather 3.0.0 work out of the box for all of our major features04:49
sdakeincluding the core services04:49
duonghqwhat is zstream?04:49
sdakex.y.z04:49
sdake2.0.204:49
sdake2.0.3 would be a zstream04:49
sdake2.0.4 woul dbe a new z stream04:49
sdake3.0.0 is a x stream04:49
duonghqunderstood04:49
*** yuanying has quit IRC04:54
*** zhangyufei has quit IRC04:55
sdakewe need those newton patches merged asap04:56
sdakeany other core reviewers around?04:56
sdakeegonzalez90 around?04:57
sdakemandre around?04:58
*** unicell1 has joined #openstack-kolla04:58
sdakepbourke_ around?04:58
*** unicell has quit IRC04:59
sdakeJeffrey4l if i fall asleep at keyboard take care to hound other core reviewers to review the last 6 or so patches04:59
sdakein the meantime lets begin testing05:00
*** yuanying has joined #openstack-kolla05:00
*** yuanying has quit IRC05:02
*** zhangyufei has joined #openstack-kolla05:03
*** zhangyufei has quit IRC05:04
Jeffrey4lok05:07
*** sdake_ has joined #openstack-kolla05:11
*** sdake has quit IRC05:14
openstackgerritMerged openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38777905:16
openstackgerritSteven Dake proposed openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38778805:18
openstackgerritzhubingbing proposed openstack/kolla: Fix aodh upgrade permission issue  https://review.openstack.org/38779305:26
sdake_Jeffrey4l i am deploying 2.0.2 AIO05:33
sdake_and receive following error:05:33
sdake_http://paste.fedoraproject.org/454784/68868147/ -> http://paste.fedoraproject.org/454784/6886814705:34
sdake_i am on minime-0305:34
sdake_yet it is looking for minime-0205:34
* Jeffrey4l is checking05:35
Jeffrey4lsdake_, which folder and user are u using?05:36
*** schwicht has joined #openstack-kolla05:36
*** tonanhngo has quit IRC05:37
*** tonanhngo has joined #openstack-kolla05:38
sdake_sudo kolla-ansible deploy05:42
sdake_running from ~/05:42
sdake_pip installed kolla05:42
sdake_running as user sdake05:42
Jeffrey4lgot. weird.05:42
sdake_Jeffrey4l  / was full, i am going to reboot05:44
*** skramaja has quit IRC05:51
openstackgerritzhubingbing proposed openstack/kolla: Fix barbican upgrade permission issue  https://review.openstack.org/38779705:56
*** skramaja has joined #openstack-kolla05:57
sdake_Jeffrey4l i think i had 1 vip being served by two machines06:01
mandresdake: around now06:01
mandrehello :)06:01
sdake_Jeffrey4l as i had minime-01 and minime-02 still running06:01
sdake_mandre long time no tlak06:01
*** yuanying has joined #openstack-kolla06:01
sdake_mandre need some changes acked if you ahve a moment06:01
Jeffrey4lok06:01
mandreyeah, point me to them sdake_06:02
Jeffrey4lmandre, https://review.openstack.org/#/q/topic:bug/1631503+is:open06:02
sdake_yup thats the one :)06:02
openstackgerritzhubingbing proposed openstack/kolla: Fix cloudkitty upgrade permission issue  https://review.openstack.org/38780006:03
mandrethx Jeffrey4l06:03
mandrereading the bug report to get a bit of context06:04
Jeffrey4lthanks.06:04
sdake_up that was it06:07
sdake_up/yup06:07
mandreJeffrey4l: is that the part that understands the new 'permissions' key? https://review.openstack.org/#/c/386412/1/docker/base/set_configs.py06:09
mandreor is there more to it?06:09
Jeffrey4lno more. that's it.06:10
sdake_mandre we have spent 10s of hours bikeshedding the design06:10
sdake_deadline is in about 12 hours to tag06:10
mandrecool06:10
sdake_just trust that it works ;)06:10
mandreyep, it's good, just wanted to know if I wasn't missing anything06:11
*** mnasiadka has joined #openstack-kolla06:12
mandredo we still expect the perms to be set in the extend_start.sh?06:14
Jeffrey4lmandre, we did not talked this. But i prefer to remove permissions after we implemented unified uid/gid.06:15
mnasiadkamorning06:15
*** zhangyufei has joined #openstack-kolla06:16
mnasiadkahttps://bugs.launchpad.net/kolla/+bug/1634107 - I think this bug is critical, if there are no volunteers to fix it - please assign it to me06:16
openstackLaunchpad bug 1634107 in kolla "ubuntu builds fail on ceph packages" [Undecided,Confirmed]06:16
mandreJeffrey4l: one more question :)06:16
Jeffrey4lmnasiadka, it is fixed.06:16
Jeffrey4lbut with another bug.06:17
sdake_mnasiadka i fixed that this mornign or jeffrey did06:17
Jeffrey4llet me find it.06:17
mnasiadkaok good, then mark it as duplicate06:17
mandresome commits appear to be for master, and some other to stable/newton06:17
sdake_mandre right - stable/newton should be rubber stamps06:17
sdake_if they are broken make note of it and fix in a followon patch06:17
mandreI'm surprised the ones for stable/newton are not cherry-picks06:17
sdake_so we can run in tune with follows-stable policy06:17
Jeffrey4lmnasiadka, here https://bugs.launchpad.net/kolla/+bug/163388806:18
openstackLaunchpad bug 1633888 in kolla newton "after ceph outage, ceph ubuntu totally broken" [Critical,Fix committed] - Assigned to Jeffrey Zhang (jeffrey4l)06:18
sdake_mandre they are but gerrit didn't mark them as such06:18
sdake_not sure why06:18
mandreoh, ok06:18
Jeffrey4lmandre, we use etherpad for tracking https://etherpad.openstack.org/p/kolla-bug-163150306:18
sdake_maybe because the parent patch hadn't merged yetwhen the cherrypick was done06:18
openstackgerritMerged openstack/kolla: Fix grafana upgrade permission issue  https://review.openstack.org/38777406:18
mnasiadkaJeffrey4l: let me rebuild and check06:18
mandresdake_: that makes sense06:18
*** huhaoran has quit IRC06:19
Jeffrey4lfyi bug 1634107 marked as duplication now.06:19
openstackbug 1633888 in kolla newton "duplicate for #1634107 after ceph outage, ceph ubuntu totally broken" [Critical,Fix committed] https://launchpad.net/bugs/1633888 - Assigned to Jeffrey Zhang (jeffrey4l)06:19
*** huhaoran has joined #openstack-kolla06:19
sdake_Jeffrey4l 2.0.2 works on my box - now time for upgrade ;)06:23
Jeffrey4lcool06:23
sdake_heat works as well06:23
sdake_yay :)06:23
Jeffrey4lsdake_, i think we can remove liberty and mitaka( not sure) now in https://bugs.launchpad.net/kolla/+bug/163150306:24
openstackLaunchpad bug 1631503 in kolla "inconsistent UID in named volume results in inability to upgrade" [Critical,In progress] - Assigned to Steven Dake (sdake)06:24
openstackgerritMerged openstack/kolla: Fix for cinder not working with permissions changes  https://review.openstack.org/38778506:25
sdake_Jeffrey4l have a reload06:25
openstackgerritMerged openstack/kolla: Fix wrong magnum volume path in json file  https://review.openstack.org/38778606:26
openstackgerritMartin André proposed openstack/kolla: Fix syntax error in sahara permissions  https://review.openstack.org/38780606:28
mandresdake_, Jeffrey4l: ^^06:28
mandrethis needs to be cherry-picked once it merges06:28
Jeffrey4lsdake_, hmm does rabbitmq issue on centos affect? since we upgrade rabbitmq in mitaka.06:28
Jeffrey4lmandre, got. thanks.06:29
sdake_Jeffrey4l not sure 2.0.2 works - haven' ttried 3.0.006:29
sdake_Jeffrey4l ack that real quick like pls :)06:29
Jeffrey4ldone.06:29
sdake_i'd like to lock down stable/newton now06:29
sdake_or soonish06:29
sdake_so i can get some sleep tonight :)06:29
Jeffrey4lbut need wait the gate. :/06:29
*** hogepodge has quit IRC06:30
sdake_zhubingbing - can you sue a different bug id for other services06:30
sdake_or can we just stop adding non-mitaka services06:31
sdake_Jeffrey4l just insepct with eyeballs, our gate doesn't test sahara anyway06:31
sdake_Jeffrey4l we need to do a final sanity test06:31
sdake_which is what the next 8-12 hrs are about06:31
Jeffrey4lyep.06:32
sdake_so ironic is wht remains?06:32
Jeffrey4li will  tell zhubingbing to stop push new PS for non-mitaka service in next 12 hours.06:32
sdake_oh and neutron06:32
sdake_Jeffrey4l i think we need to halt all new service reviews, or put them in a differnet bug id06:33
sdake_its really hard to keep track of whats happening06:33
sdake_mandre if you can ack https://review.openstack.org/#/c/387780/106:33
Jeffrey4lyes. how about -2 for already pushed before rc3 is tagged.06:33
mandresdake_: one moment, looking at gnocchi atm06:34
*** asalkeld has joined #openstack-kolla06:34
sdake_Jeffrey4l i think the problem there is communication of the -2ss06:34
sdake_and we areclosing out the bug06:34
sdake_non-mitaka services should really use a different bug id06:35
sdake_we have already merged some and those can't be undone06:35
sdake_but they can be categorized in a different bug id06:35
Jeffrey4lhow categorized in a different bug id?06:35
Jeffrey4lthe commit message changed not be updated too.06:36
sdake_mitaka services = bug 163150306:36
openstackbug 1631503 in kolla ocata "inconsistent UID in named volume results in inability to upgrade" [Critical,In progress] https://launchpad.net/bugs/1631503 - Assigned to Steven Dake (sdake)06:36
sdake_newton services = NEW bug06:36
sdake_new bug may not be necessary anyway if we are unifyign the uid space06:36
Jeffrey4lyes.06:37
Jeffrey4lanyway, i'll -2 w/ some explain to stop the patch to merged now.06:37
sdake_just request a different bug id06:37
sdake_and put in the etherpad notes06:37
openstackgerritMerged openstack/kolla: Fix gnocchi upgrade permission issue  https://review.openstack.org/38778806:37
Jeffrey4lok.06:38
sdake_last two patches needing reviews are:06:38
sdake_https://review.openstack.org/#/c/387180/106:38
sdake_https://review.openstack.org/#/c/387780/106:39
sdake_egonzalez90 mandre Jeffrey4l :) ^^06:40
openstackgerritMartin André proposed openstack/kolla: Fix syntax error in sahara permissions  https://review.openstack.org/38781106:42
mandrehmm, a bit too quick, I thought it was merged in master already06:44
openstackgerritMerged openstack/kolla: Fix neutron upgrade permission issue  https://review.openstack.org/38778006:44
*** sdake_ is now known as sdake06:44
*** ChanServ sets mode: +o sdake06:44
Jeffrey4lmandre, hmm. should be OK. since we won't update the master branch PS. ;)06:44
*** mtaylor22 has quit IRC06:45
mnasiadkaby the way - has anybody thought about introducing ipxe in ironic containers? tftp is lousy and unreliable in production...06:45
*** sdake changes topic to "Please TEST stable/newton until Oct 18th 23:45 UTC when rc3 will be tagged; RC3 is our final!; Please read the documentation here: http://docs.openstack.org/developer/kolla/; Kolla IRC meetngs on Wednesdays @ 16:00 UTC - see agenda @ https://goo.gl/OXB0DL - IRC channel is *LOGGED* @ http://goo.gl/3mzZ7b (old logs from #kolla http://goo.gl/VKpPzA)"06:45
Jeffrey4lmnasiadka, no i think. we can implement this in Octava.06:47
sdakeneeds an ack: https://review.openstack.org/#/c/387180/106:48
Jeffrey4lmnasiadka, is ipxe widely supported?06:48
Jeffrey4lafter it is merged. we still need backport it ^^ this is non-mitaka branch service, so it is not affect upgrade from mitaka to newton06:51
Jeffrey4lafter it is merged. we still need backport it ^^06:51
mandreJeffrey4l: regarding https://review.openstack.org/#/c/387180/1, shouldn't we set the permissions for /tftpboot for the ironic-pxe container?06:51
Jeffrey4lironic-pxe runs as root.06:52
Jeffrey4lso nothing to do in pxe container.06:52
Jeffrey4lmandre, ^06:52
*** tovin07 has quit IRC06:53
mandreJeffrey4l: I though we didn't have to do anything because /tftpboot is on a named volume and we already set the permission in ironic-conductor :)06:53
Jeffrey4lmandre, but only for bootstrap... hmm it should be a bug. these script should run all the times.06:54
mnasiadkaJeffrey4l: well, I'd like to use it - that's why I'm asking. I know there's not much work to be done :)06:54
Jeffrey4lbootstrap only run on one of node.06:55
Jeffrey4lso need: remove the KOLLA_BOOTSTRAP if condiction and run the script all the time.06:56
Jeffrey4lwe can remove bootstrap_container in ansible, too. it will be useless.06:56
Jeffrey4lOK. i am trying to remove the permissions section in ironic-conductor. ironic-pxe will change the own during bootstrap.06:59
zhubingbingping √07:00
zhubingbingping Mauricio Lima07:00
openstackgerritMerged openstack/kolla: Fix ironic upgrade permission issue  https://review.openstack.org/38718007:00
mandreJeffrey4l: it's a bit weird but I think we're good as long as we run ironic-conductor along with ironic-pxe07:00
Jeffrey4lmnasiadka, is it possible to run multi ironic-pxe and ironic-conductor? how the nodes get the correct url? loadbalance?07:00
openstackgerritSteven Dake proposed openstack/kolla: Fix ironic upgrade permission issue  https://review.openstack.org/38782207:01
Jeffrey4lhmm.. merged :/07:01
Jeffrey4lmandre, i have to say it works but not optimal.07:01
*** eaguilar has joined #openstack-kolla07:02
Jeffrey4lzhubingbing, you need ping the irc id not the real name. like you should ping Jeffrey4l rather than Jeffrey Zhang07:02
mandreJeffrey4l: it's a named volume, so every change made to /tftpboot in ironic-conductor also affect ironic-pxe07:02
Jeffrey4lyes. i known that.07:02
sdakethe idea is to get something working not something perfect ;-)07:03
mandreJeffrey4l: agreed, I would expect to have ironic-pxe set the perms07:03
Jeffrey4lOK.07:03
Jeffrey4lactually, pxe shouldn't touch the files created by ironic-conductor. that's why i put it into conductor.07:04
*** msimonin has joined #openstack-kolla07:04
*** coolsvap has joined #openstack-kolla07:04
Jeffrey4lironic backport is the last one. lol07:05
sdakecoolsvap need an ack on https://review.openstack.org/#/c/387822/107:05
* coolsvap checks07:06
*** eaguilar has quit IRC07:06
mandreare we good with the permissions patches?07:06
sdakemandre wont know until they merge and can test an upgrade07:07
*** shardy has joined #openstack-kolla07:08
mandrehey, I noticed gnocchi-api runs as root, is there a reason for it?07:08
Jeffrey4lmandre, apache run with wsgi07:08
bjolo__morning07:08
Jeffrey4lbjolo__, sup07:08
sdakesup bjolo__07:08
*** msimonin1 has joined #openstack-kolla07:09
sdakebjolo__ see topic :)07:09
sdakethis is it07:09
bjolo__got it07:09
sdakewe are about 30 mins out from all patches being merged07:09
bjolo__ok07:09
mandreJeffrey4l: ack07:09
Jeffrey4lthanks.07:09
bjolo__any particular os and install type that you want tested07:09
sdakewe are all centos dudes07:09
Jeffrey4lbjolo__, Ubuntu upgrade test ;)07:09
sdakeubuntu would be good :)07:10
bjolo__ok07:10
sdakefrom 2.0.2 to 3.0.007:10
sdakewith stable/newton as your branch07:10
bjolo__ubuntu binary 2.0.2 images from docker hub ok07:10
bjolo__or should i build my own>07:10
sdakeyup07:10
sdakeuse hub07:10
bjolo__ok07:10
*** msimonin has quit IRC07:10
sdaketake care to deploy the 2.0.2 images with ansible 1.9 and kolla 2.0.2 pip installed07:11
sdakethen remove ansible1.907:11
bjolo__hmm master branch build fails for centos?!07:11
bjolo__:Cannot open: http://repo.percona.com/release/7/RPMS/x86_64/percona-release-0.1-3.noarch.rpm.07:11
Jeffrey4lnetwork issue? i can open it.07:11
sdakebjolo__ that link works for me07:11
sdakebjolo__ git checkout stable/newton07:12
bjolo__me too but build fails07:12
bjolo__?07:12
bjolo__hmm let me ts this07:13
sdakebjolo__ mabye your out of disk07:14
bjolo__ERROR:kolla.image.build.base:The command '/bin/sh -c yum -y install http://repo.percona.com/release/7/RPMS/x86_64/percona-release-0.1-3.noarch.rpm && yum clean all' returned a non-zero code: 107:14
sdakebjolo__ do you have kolla 2.0.2 pip installed?07:14
*** matrohon has joined #openstack-kolla07:14
bjolo__plenty of disk07:15
*** schwicht has quit IRC07:15
bjolo__im building master and stable/newton on two seperate nodes07:15
sdakeok07:15
bjolo__same build script ive been using for weeks now07:15
bjolo__centos source/binary and ubuntu source/binary07:15
*** schwicht has joined #openstack-kolla07:15
sdakestable/newton builds but master does not?07:15
bjolo__checking07:16
bjolo__i have it cron to build daily07:16
*** clayton has quit IRC07:16
bjolo__need to go through the setup and logs here before concluding07:16
sdakeif you haven't built recently percona had an outage earlier today07:17
sdaketry --no-cache07:17
sdakestable/newton is building for me07:17
*** rbbratta1 has quit IRC07:17
sdakeand its ubilt for the gate most of the day ;)07:17
*** rbbratta1 has joined #openstack-kolla07:18
bjolo__./build.py --registry dockreg.mydomain.net:4000 --push --nocache --threads 64 --base centos --type source --tag $TAG07:18
sdakethreads 64 is a problem i tihnk07:18
sdaketry the default07:18
bjolo__ok no threads flag07:18
sdake--no-cache i think is the option not --nocache07:18
*** clayton has joined #openstack-kolla07:19
bjolo__  --no-cache            Do not use the Docker cache when building07:19
bjolo__  --nocache             The inverse of --cache07:19
bjolo__there is both :)07:19
sdakewow - who thought that was a good idea07:19
Jeffrey4lme.. we removed --no-cache in newton.07:20
openstackgerritMerged openstack/kolla: Fix syntax error in sahara permissions  https://review.openstack.org/38780607:20
sdakewhy did we emove --no-cache in newton?07:21
Jeffrey4lthe oslo.config add --nocache automatically. so we have two options in newtone and will be one in O.07:21
sdakechanging apis annoys people ;)07:21
Jeffrey4li explained. ;)07:21
Jeffrey4lseveral days ago.07:21
sdakeok07:21
sdakewell anyway07:21
sdakebuilding images :)07:21
bjolo__ok removed threads and will try build again07:22
sdakebjolo__ if that doesn't work let me know i've got another thing for you to try07:22
*** shardy has quit IRC07:22
Jeffrey4lat first. we have --no-cache only, after added oslo.conf, it add --nono-cache automically. so we have --cache --no-cache --nocache --nono-cache in after that.07:22
*** tonanhngo_ has joined #openstack-kolla07:22
Jeffrey4lin O we remove --no-cache and --nono-cache.07:22
sdakei see07:22
Jeffrey4lwe in O only --cache and --nocache is valid ;007:23
sdakeseems pretty trerible of oslo to do that :)07:23
Jeffrey4l;)_07:23
*** tonanhngo has quit IRC07:24
openstackgerritMerged openstack/kolla: Fix syntax error in sahara permissions  https://review.openstack.org/38781107:28
*** ssurana has joined #openstack-kolla07:29
sdakeJeffrey4l have you tried fernet as of late07:31
Jeffrey4lhmm. is the patch merged?07:32
* Jeffrey4l is finding fix.07:32
*** tonanhngo_ has quit IRC07:32
sdakeJeffrey4l was merged in rc2 pretty sure07:33
*** tonanhngo has joined #openstack-kolla07:33
*** b_bezak has joined #openstack-kolla07:33
*** tonanhngo has quit IRC07:33
Jeffrey4lyes.07:34
sdakei am building 3.0.0 images atm - to test an upgrade of basic compute kit + heat07:34
Jeffrey4lcool.07:34
Jeffrey4li am prepare my env. will test fernet later.07:34
*** ssurana has quit IRC07:34
*** b_bezak_ has joined #openstack-kolla07:37
*** b_bezak_ has quit IRC07:38
*** b_bezak has quit IRC07:40
*** hogepodge has joined #openstack-kolla07:40
openstackgerritMerged openstack/kolla: Fix ironic upgrade permission issue  https://review.openstack.org/38782207:42
openstackgerritJeffrey Zhang proposed openstack/kolla: DO_NOT_MERGE: TEST NEWTON BRANCH  https://review.openstack.org/38698107:46
sdakewe need a merge passwords tool07:47
zhubingbingpasswords tool?07:48
Jeffrey4lsdake, extend the generate_password.py file to load from etc/kolla/passwords and add it into /etc/kolla/password.py07:48
sdakesomtehing that forward migrates a password07:48
sdakeJeffrey4l ya - work for ocata ;)07:48
Jeffrey4lhow about Newton?07:49
sdakei guess if it can be done without breaking things and causing alot of chaos07:49
sdakeno password migration is a serious problem07:49
sdakei'd rather focus on testing at this point07:50
*** b_bezak has joined #openstack-kolla07:52
*** huhaoran has quit IRC07:55
*** huhaoran has joined #openstack-kolla07:56
*** haplo37_ has quit IRC07:56
sdakeok AIO upgrade from 2.0.2 to 3.0.0 going now07:56
Jeffrey4li am running tempest for deployment ;)07:58
sdakelittle late for that  Ithink ;-)07:58
*** haplo37_ has joined #openstack-kolla07:58
Jeffrey4lshould be finished in 1 hour i think..07:59
sdakeand that will give ou what kind of data?07:59
Jeffrey4lmay found new critical bug.07:59
Jeffrey4ltest result for all api test.07:59
Jeffrey4lsdake, http://paste.openstack.org/show/586123/08:00
sdakehttp://paste.fedoraproject.org/454808/67776151/ -> http://paste.fedoraproject.org/454808/6777615108:00
sdakeJeffrey4l upgrade with vm running on btrfs08:00
sdakeJeffrey4l yes i've run tempest prior08:00
Jeffrey4lbtrfs failed for sure. no workaround ;)08:01
Jeffrey4loverlayfs is ok.08:01
sdakethere is a workaround08:01
Jeffrey4lno idea about other docker storage driver.08:01
sdakei published a patch08:01
sdakeeveyrone shit on it08:01
sdakeand did some retry: 2 thing08:01
sdakeliek that is supposed to work08:01
Jeffrey4lthe container can not be removed manually even.08:01
Jeffrey4ltry this manually.08:02
Jeffrey4ldocker rm -f08:02
sdakeJeffrey4l i am doing another upgrade08:02
sdakei'd bet 1 USD it will work08:02
sdakejust as it did before08:02
Jeffrey4lhmm, ok. i'd like to bet ;)08:03
sdakeoverlayfs doesn't work because you can't build on it08:03
Jeffrey4lwe have retries in nova_libvirt container for sure now.08:03
sdakeyes but that doesn't fix the problem!08:04
sdakelook at that, upgrade works08:04
sdakeyou owe me 1 USD Jeffrey4l08:04
sdakei'll take it in the form  of a patch that fixes this problem ;-)08:04
Jeffrey4li used to use overlayfs, but it is full of bug :(08:04
*** openstackgerrit has quit IRC08:04
sdakeyes overlyafs is unacceptable08:04
sdakebtrfs is only answer08:04
*** openstackgerrit has joined #openstack-kolla08:04
sdakemy patch worked08:04
sdakeretries:2 does not work08:05
Jeffrey4lupgrade is ok now with retries:1 ?08:05
Jeffrey4lwhich patch?08:05
*** matrohon has quit IRC08:05
sdakejeffrey here is what I did08:05
sdake2.0.2->deploy08:05
sdakeinit-runonce08:05
sdakelaunch with 1 vm08:05
sdake3.0.0->upgrade08:05
sdakefails08:05
sdake(with backtrace above)08:05
sdake3.0.0->upgrade08:05
*** msimonin1 has quit IRC08:05
sdakeworks:08:05
*** msimonin has joined #openstack-kolla08:05
sdakePLAY RECAP *********************************************************************08:05
sdakelocalhost                  : ok=243  changed=48   unreachable=0    failed=008:05
sdake'08:05
Jeffrey4lwow!!08:06
sdakeyes08:06
Jeffrey4lwhy it failed for the first upgrade?08:06
Jeffrey4lretries does not work?08:06
sdakeyou can see backtrace08:06
sdakeit would appear not08:07
sdakei thought you guys tested this stuff...08:07
sdakeanyway upgrade works on centos08:07
sdakeminus this problem08:07
*** msimonin has quit IRC08:08
sdakewe need the docker module option to ignore errors08:08
sdakei think that is what i had before08:08
Jeffrey4lfrom the backtrace, retries doesn't work at all. i will try this later.08:08
sdakeit needs to be fixed now if possible08:08
Jeffrey4li own you 1 USD sdake ;)08:09
sdakeyou can use my box ifyou like08:09
Jeffrey4lcool.08:09
sdakethe upgrade procedure is a little difficult08:09
sdakei just keep the passsword.yml file in place08:09
*** msimonin has joined #openstack-kolla08:09
*** awebber has joined #openstack-kolla08:10
Jeffrey4lupgrade exist service should be OK without update the password.yml file.08:10
*** matrohon has joined #openstack-kolla08:10
Jeffrey4lthe same for global.yml file.08:10
Jeffrey4lcan i destroy all the container now?08:10
*** confisurya has quit IRC08:10
sdakeJeffrey4l yup08:11
sdakeJeffrey4l to do the work i install ansible1.9 via yum, modify globals.yml to pull from docker hub, deploy 2.0.208:11
sdakethen upgrade to ansible via yum08:11
sdakemodify globals.yml to deploy 3.0.0 from docker hub08:12
*** kproskurin has joined #openstack-kolla08:12
sdakerather from my registry08:12
Jeffrey4lgot.08:12
sdakethat retries:2 can go too08:12
sdakesince that is not doing anything useful08:12
*** huhaoran has quit IRC08:12
*** huhaoran has joined #openstack-kolla08:13
sdakemy guess is a fatal ansible module call is fatal - retries are not done08:13
sdakesee line 76608:13
Jeffrey4lretries is design to handle module fatal i think.08:14
sdakewell it aint working ;-)08:14
* Jeffrey4l is running a small test for retries locally.08:15
sdakeeverything that worked in mitaka seems to work in newton08:15
openstackgerritzhubingbing proposed openstack/kolla: add panko dockerfile  https://review.openstack.org/38723208:18
Jeffrey4ltest locally works. trying re-produce in your node.08:19
sdakeJeffrey4l did you launch a vm?08:22
Jeffrey4lthe small test is a simple ansible task. not kolla. i am deploy 2.0.2 on your node.08:22
Jeffrey4l- command: aa08:23
Jeffrey4l  register: a08:23
Jeffrey4l  until: a|success08:23
Jeffrey4l  retries: 108:23
Jeffrey4l  delay: 108:23
*** confisurya has joined #openstack-kolla08:23
Jeffrey4lsdake, here is the test ^^08:23
sdakeJeffrey4l that module may behave differently then kolla-ansible08:24
sdakehttps://bugs.launchpad.net/kolla/+bug/163440108:24
openstackLaunchpad bug 1634401 in kolla ocata "upgrade from 2.0.2 to 3.0.0 with VM running on BTRFS STILL BROKEN" [Critical,Triaged] - Assigned to Jeffrey Zhang (jeffrey4l)08:24
Jeffrey4lmay be.08:25
sdakethe most frustrating part of this is I asked people if they tested it, and they claimed yes08:25
sdakeyet clearly, it wasn't tested08:25
sdakeand now, t-12 hrs to go to release and some rework required on kolla_docker module08:26
Jeffrey4lok. will fix this. i need upgrade by using -vvv parameter to get more info.08:26
sdakesure - feel free to abuse machines as you see fit :)08:27
sdakeI'd stick to AIO for now08:27
sdakei wonder when docker is giong to run out of money08:27
Jeffrey4lbtw, tempest smoke test seems fine.08:27
*** HyperJohnGraham_ has quit IRC08:28
sdakeyup kolla works well08:28
sdakeminus the upgrade part08:28
sdakeand possibly reconfigure08:28
sdakeand the 21 new services we added ;-)08:28
sdakewe need to give fernet a roll too08:28
sdakeJeffrey4l do you ahve tempest results from rc3?08:29
sdakeJeffrey4l if so, can you mail them to me plz08:29
Jeffrey4lok. will post it to you.08:29
sdakeI dont care to have all results, just end results08:29
sdake(# tests run/passed/etc)08:29
Jeffrey4li only run smoke test.08:30
Jeffrey4lit takes long time.08:30
sdakeok dont sweat it then08:30
Jeffrey4lfor full test result.08:32
sdakeJeffrey4l note i changed reproducer: https://bugs.launchpad.net/kolla/+bug/163440108:32
openstackLaunchpad bug 1634401 in kolla ocata "upgrade from 2.0.2 to 3.0.0 with VM running on BTRFS STILL BROKEN" [Critical,Triaged] - Assigned to Jeffrey Zhang (jeffrey4l)08:32
Jeffrey4lroger./08:32
*** huhaoran has quit IRC08:33
*** huhaoran has joined #openstack-kolla08:33
sdakebjolo__ ya - if yo ucould test the upgrade procedure on ubuntu it would be most appreciated :)08:34
sdakeJeffrey4l note i changed he reproucer slightly08:35
*** HyperJohnGraham_ has joined #openstack-kolla08:35
*** ChanServ sets mode: -o sdake08:36
Jeffrey4lcopy08:36
sdakeJeffrey4l note the 3.0.0 images in my registry are stable/newton images pulled about 30 or 40 mins ago08:37
Jeffrey4lok.08:37
sdakedocker is deleting the image - it just says it is unable to do so08:37
sdakeor deleting the container rather08:38
sdakeJeffrey4l here was my fix in progress: https://review.openstack.org/#/c/334644/08:43
openstackgerritLi Yingjun proposed openstack/kolla: Support Searchlight Docker container  https://review.openstack.org/37714508:43
openstackgerritLi Yingjun proposed openstack/kolla: Support searchlight ansible role  https://review.openstack.org/38786208:43
*** athomas has joined #openstack-kolla08:48
sdakenote Jeffrey4l I *tested* this solution and it worked08:49
Jeffrey4lyep. issue reproduced. try to figure out why it doesn't work.08:50
yingjunsdake, Jeffrey4l, could you take a look at these patches: https://review.openstack.org/#/c/377145/, https://review.openstack.org/#/c/387862/, if you have time:) its’ the searchlight support related patches, thank you08:50
sdakeyingjun see topic08:51
sdakeyingjun totally wrong time to ask08:51
Jeffrey4lyingjun, will review it later :008:51
yingjunsdake: oops08:52
sdakeJeffrey4l my speculation is ansible doesn't know how to handle the exception from docker08:54
sdakeJeffrey4l so it thinks something went critically wrong08:54
*** confisurya has quit IRC08:55
Jeffrey4lsdake, no. kolla_docker catch all exception and just add the traceback into msg field. so you see the traceback.08:56
sdakei see08:56
sdakeJeffrey4l where is this code?08:57
*** Liuqing has joined #openstack-kolla08:57
Jeffrey4lsdake, https://github.com/openstack/kolla/blob/master/ansible/library/kolla_docker.py#L74508:57
Jeffrey4li suspend the change=true when failed. trying to make some test.08:57
Jeffrey4lsuspend/doubt08:58
*** eaguilar has joined #openstack-kolla08:58
sdakeJeffrey4l https://github.com/openstack/kolla/blob/master/ansible/library/kolla_docker.py#L72308:58
sdakethe issue happens in start_container...08:58
sdakeexception is not caught i think08:59
sdakenah thats not right08:59
sdakei dunno - the linkage to ansible seems not working to me09:00
Jeffrey4lsdake, trackback http://paste.openstack.org/show/586138/09:00
*** eaguilar has quit IRC09:02
sdakeJeffrey4l start_contianer doesn't return true or false09:03
sdakeso how can it know if the operation was successuful or not?09:03
*** tonanhngo has joined #openstack-kolla09:03
*** openstackgerrit has quit IRC09:04
*** openstackgerrit has joined #openstack-kolla09:04
Jeffrey4lif something wrong, docker-py ( self.dc.start) will raise some exception.09:04
sdakeok, and it raises exception at line 745 in kolla_docker09:05
*** tonanhngo has quit IRC09:05
sdakein that line is result09:05
sdakein line 743 is result rather09:05
sdakein line 745 is no result09:05
sdakejust failed=True09:05
Jeffrey4lline #745 just test ansible, this script is failed.09:05
Jeffrey4ltest/tell09:06
openstackgerritLi Yingjun proposed openstack/kolla: Support Searchlight Docker container  https://review.openstack.org/37714509:06
*** rmart04 has joined #openstack-kolla09:06
sdakeJeffrey4l09:07
sdakei'm not sure what the difference is between exit_json09:07
sdakeand fail_json09:07
sdakebut I think we want fail_json09:08
sdake            module.fail_json(msg="unable to find %s. Exception message: %s" % (config_file, e))09:08
sdakefrom mysql-db module09:08
openstackgerritLi Yingjun proposed openstack/kolla: Support searchlight ansible role  https://review.openstack.org/38786209:08
Jeffrey4lit is a shortcut function09:08
*** Liuqing has quit IRC09:08
*** confisurya has joined #openstack-kolla09:09
Jeffrey4lsdake, locally test works http://paste.openstack.org/show/586142/09:09
sdakeJeffrey4l i don't see an exception being raised there09:10
Jeffrey4lwe have try catch in kolla_docker.  the msg just a long string in kolla_docker.09:10
sdakei understand09:11
sdakethe backtrace you showed me earlier09:11
sdakehttp://paste.openstack.org/show/586138/09:12
sdakelook at line 309:12
sdakethat is not 74509:12
sdakethat is 742 or so09:12
sdakethe exception isn't being caught09:12
Jeffrey4lhmm. it works even i raise a exception without any catch. in main method locally09:15
*** shardy has joined #openstack-kolla09:16
sdakewhat works09:16
sdakeretries:2?09:16
Jeffrey4lsdake, http://paste.openstack.org/show/586144/09:17
*** msimonin has quit IRC09:17
sdakeJeffrey4l there is only one divide by zero error09:18
*** duonghq has quit IRC09:18
sdakewith retries:2 shouldn't there be two divide by zero errors?09:18
Jeffrey4lretries:2 mean: try 3 times. and ansible only show the last error.09:19
sdakei think a counter in the output could validate that theory :)09:20
sdakei'd bet 1 USD that counter = 1 :)09:21
sdakecan write counter to file and increment it each run09:22
Jeffrey4lwhich counter? retries?09:22
sdakeoh nm09:23
sdakei see where it is retrying09:23
sdakewhy is it not retyring in the upgrade case?09:23
*** tonanhngo has joined #openstack-kolla09:24
Jeffrey4li do not own you anything ;)09:24
Jeffrey4lya. it is weird.09:24
*** tonanhngo has quit IRC09:25
*** kproskurin has quit IRC09:25
sdakepossibly nested try/catch?09:26
*** msimonin has joined #openstack-kolla09:26
sdakeyour 1-10 has no try/except, yet ansible is running the module.exit_json09:26
sdakei think 745 is not working as expected09:27
Jeffrey4lhmm.09:30
sdakeJeffrey4l looking at other modules, there is no try/except logic in any of them09:30
*** yingjun has quit IRC09:31
*** yingjun has joined #openstack-kolla09:31
Jeffrey4lsdake, it is the same right now. http://paste.openstack.org/show/586147/09:33
sdakebetween line 8 and 9 put a different exit_json09:34
bjolo__sdake, centos source&binary build still fails on master. does anyone else have this issue?09:34
sdakeperhaps with failed=False09:34
sdakebjolo__ no - centos source builds for me09:34
bjolo__master branch?09:34
sdakebjolo stable/newton09:34
*** gfidente has joined #openstack-kolla09:34
*** gfidente has joined #openstack-kolla09:34
sdakegit checkout stable/newton09:34
bjolo__stable/newton works for me as well09:34
bjolo__but not master09:35
sdakeoh - you mean master is busted09:35
sdakeok - well don't immediately care about master ;)09:35
sdakewill care more after 3.0.0 is tagged09:35
sdake3.0.0 is tagged from stable/newton09:35
bjolo__not me either but since it came up in my daily builds i had to dig into it09:35
sdakebjolo cool thanks for that09:36
*** eaguilar has joined #openstack-kolla09:36
*** yingjun has quit IRC09:36
*** janem has joined #openstack-kolla09:36
*** haplo37 has quit IRC09:37
sdakebjolo i'll build master while jeffrey is sorting out ansible madness09:37
sdakeand take a look here09:37
*** g3ek has quit IRC09:37
bjolo__ok deploying mitaka ubuntu binary and doing the upgrade to newton. multinode 3 controllers, 3 network, 16 compute09:38
bjolo__host os centos 709:38
sdakethat will mostly work i think09:38
Jeffrey4lbjolo__, what docker storage driver are u using?09:38
sdakemake sure to follow correct procedure09:38
*** g3ek has joined #openstack-kolla09:39
*** haplo37 has joined #openstack-kolla09:39
sdakebjolo which image fails for oyu09:39
*** eaguilar has quit IRC09:40
*** prithiv has joined #openstack-kolla09:40
*** janem has quit IRC09:41
sdakebjolo on master try tools/build.py --type source09:43
sdakebjolo master deploys master of openstack (and builds master images) - stable/newton deploys newton version of openstack (and builds newton images)09:46
*** wznoinsk_ has joined #openstack-kolla09:46
*** HyperJohnGraham_ has quit IRC09:46
*** wznoinsk has quit IRC09:47
*** wznoinsk_ is now known as wznoinsk09:47
*** tonanhngo has joined #openstack-kolla09:49
*** tonanhngo has quit IRC09:50
*** wznoinsk has quit IRC09:50
*** wznoinsk_ has joined #openstack-kolla09:50
sdakebjolo__ ^^09:50
*** wznoinsk_ is now known as wznoinsk09:51
Jeffrey4lsdake, found the root cause.09:53
sdakecool09:53
sdakehit me with it09:53
Jeffrey4lsdake, guess?09:53
sdakenested try/except?09:53
Jeffrey4lansible bug on 2.1.0.0  :(09:53
sdakeevidence?09:54
Jeffrey4lin ansible 2.1.0.0, reties: 1 means run once totally.    in 2.1.2.0 , reties:1 means run twice totally.09:54
sdakethis bug has been around since 2.0.009:54
Jeffrey4lmy locally test result.09:54
Jeffrey4lno idea  whether it is a regression bug09:54
sdakewhat is rretries set to now09:55
Jeffrey4l109:55
Jeffrey4lset it too 2 should be OK.09:55
sdakecan you set it to 2 and try an upgrade09:55
Jeffrey4lya. np.09:55
sdakeThe above example run the shell module recursively till the module’s result has “all systems go” in its stdout or the task has been retried for 5 times with a delay of 10 seconds. The default value for “retries” is 3 and “delay” is 5.09:56
sdakehttp://docs.ansible.com/ansible/playbooks_loops.html09:56
sdakethe correct interpreation of retries: 2 should be 2 attempts total09:57
sdakenote the default values09:57
openstackgerritChristian Berendt proposed openstack/kolla: Add logrotate configuration for elasticsearch  https://review.openstack.org/38763009:57
sdake2.1.2.0 looks like regression to me around retries09:57
Jeffrey4lsdake, i do not think kolla have retries: 3 in default. otherwise we won't need fix such issue.09:58
sdakeJeffrey4l right09:58
sdakeyou could be right on that part - don't knwo :)09:58
Jeffrey4llol. when adding such this issue, i am sure, retries: 1 works. :909:58
Jeffrey4l;(09:58
sdake2 or 10 retries, doesn't matter, if 1 doesn't work lets bump it up09:58
Jeffrey4lroger.09:59
sdakeretries:1 doesnt' even make any sense09:59
sdakeacccording to the documentation10:00
Jeffrey4lanyway, if :2 works, we will bump the value.10:00
sdakeya its sloppy but whatever - lets get er done :)10:01
*** pbourke_ is now known as pbourke10:05
*** berendt has joined #openstack-kolla10:09
berendtour json file validation script is totally broken10:09
*** zhubingbing has quit IRC10:09
*** zhubingbing has joined #openstack-kolla10:10
berendthttps://bugs.launchpad.net/kolla/+bug/163444710:10
openstackLaunchpad bug 1634447 in kolla "JSON validation script is broken" [Undecided,New]10:10
zhubingbingping e9010:11
zhubingbing~10:11
Jeffrey4lberendt, i got a idea to extend the exist scrip to validate the jons.j2 file. ( need render as jinja2 template first )10:12
berendtJeffrey4l should i assign the bug to you?10:12
Jeffrey4lso would u mind assign that bug me. yes.10:12
Jeffrey4lthanks :)10:13
berendtJeffrey4l i set priority to high, i think it is a no go to merge syntax issues10:13
Jeffrey4lyes. but it will not be merged into newton.10:14
berendtyes, but we should avoid it in the future10:14
Jeffrey4lagree.10:14
berendti want to change the bandit job from non-voting to voting10:17
Jeffrey4lberendt, yep. change it.10:19
berendthttps://review.openstack.org/38790910:19
Jeffrey4lberendt, remove this line too   - name: ^gate-kolla-tox-bandit-ubuntu-xenial$10:20
Jeffrey4lberendt, ^^'10:21
berendtyes of course10:21
berendtdone10:21
Jeffrey4llook good +110:22
berendtshould we also enable gate-kolla-python35-nv ?10:22
Jeffrey4lberendt, i do not think so. ansible do not support python3 now.10:23
berendtgate-kolla-python34 is already enabled10:24
berendtthis check is only relevant for our own tools10:24
Jeffrey4lhmm. OK.  we may need add unittest for ansible module, then it may cause some issue.10:25
berendtand we do not have a releasenote check10:26
Jeffrey4lre python35-nv  this non-voting comes from infra ci define, i.e. all python35-nv is non-voting.10:26
berendtah ok10:26
*** daneyon has quit IRC10:26
Jeffrey4li do not have strong opinion( right word?) on this.10:27
*** daneyon has joined #openstack-kolla10:27
berendtwe should check everything that we deliver10:27
berendtwe have to use releasenotes, we should check them10:27
Jeffrey4lsdake, good new. retries: 2 works.10:28
Jeffrey4lso i wanna bump it to 5 ;)10:28
Jeffrey4lwe have to use releasenotes, we should check them  <- what this mean?10:28
Jeffrey4land yes. we should check everything we deliver.10:29
Jeffrey4lberendt, ^^10:30
*** zhangyufei has quit IRC10:30
*** berendt has quit IRC10:31
*** berendt has joined #openstack-kolla10:35
berendtJeffrey4l looks like we have release-note-jobs, at least they are listed in zuul layouts.yml10:35
openstackgerritJeffrey Zhang proposed openstack/kolla: Bump retries in starting nova-libvirt to 5  https://review.openstack.org/38791810:36
*** rhallisey has joined #openstack-kolla10:37
*** prithiv has quit IRC10:40
Jeffrey4lyep. we need enable  releasenote release jobs berendt10:44
openstackgerritJeffrey Zhang proposed openstack/kolla: Bump retries in starting nova-libvirt to 5  https://review.openstack.org/38791810:45
openstackgerritChristian Berendt proposed openstack/kolla: Remove /var/run/docker.sock volume from telegraf container  https://review.openstack.org/38792410:46
*** phuongnh has quit IRC10:47
berendtJeffrey4l jobs are already there but only enabled when a release note was modified10:48
Jeffrey4lit need be added into check and gate field in zuul10:48
openstackgerritprameswar proposed openstack/kolla: dependencies added to build code with pip in QSG  https://review.openstack.org/38792610:49
Jeffrey4lhmm. wait.10:49
berendtJeffrey4l it is already working, i thought it is not working10:49
berendtJeffrey4l check https://review.openstack.org/#/c/369184/6 for a sample10:49
Jeffrey4lyes. it works. i thought it didn't work, too. :)10:50
Jeffrey4linteresting. only enabled when releasenote changed.10:50
*** prithiv has joined #openstack-kolla10:58
*** portdirect has quit IRC10:59
*** portdirect has joined #openstack-kolla11:00
*** awiddersheim has quit IRC11:00
*** aswadr_ has joined #openstack-kolla11:03
*** zhubingbing has quit IRC11:05
*** coolsvap has quit IRC11:06
openstackgerritMerged openstack/kolla: dependencies added to build code with pip in QSG  https://review.openstack.org/38792611:07
*** haplo37_ has quit IRC11:10
openstackgerritChristian Berendt proposed openstack/kolla: Remove inputs.filestat from telegraf configuration  https://review.openstack.org/38793511:10
*** prithiv has quit IRC11:11
*** haplo37_ has joined #openstack-kolla11:12
*** berendt has quit IRC11:15
*** mliima has joined #openstack-kolla11:16
*** shardy is now known as shardy_lunch11:19
*** ppalacios has joined #openstack-kolla11:20
openstackgerritPaul Bourke (pbourke) proposed openstack/kolla: Allow operators to use 'fallback mode' for Ceph disks  https://review.openstack.org/38449611:34
*** ayoung has quit IRC11:34
openstackgerritPaul Bourke (pbourke) proposed openstack/kolla: Allow operators to use 'fallback mode' for Ceph disks  https://review.openstack.org/38449611:37
*** tonanhngo has joined #openstack-kolla11:45
*** tonanhngo has quit IRC11:46
*** neilus has joined #openstack-kolla11:48
*** janem has joined #openstack-kolla11:50
*** neilus has quit IRC11:52
*** srwilkers has joined #openstack-kolla12:03
*** zhubingbing_ has joined #openstack-kolla12:05
*** sdake has quit IRC12:06
*** dave-mccowan has joined #openstack-kolla12:10
*** portdirect has quit IRC12:20
*** portdirect has joined #openstack-kolla12:20
*** shardy_lunch is now known as shardy12:21
*** caowei has joined #openstack-kolla12:22
*** prithiv has joined #openstack-kolla12:28
*** schwicht has quit IRC12:33
openstackgerritprameswar proposed openstack/kolla:  apt instead of apt-get to install packages  in Ubuntu  https://review.openstack.org/37947712:34
*** prithiv has quit IRC12:36
*** steve-noyes has joined #openstack-kolla12:41
*** prithiv has joined #openstack-kolla12:43
*** tonanhngo has joined #openstack-kolla12:44
*** tonanhngo has quit IRC12:44
*** rmart04 has quit IRC12:46
*** portdirect has quit IRC12:47
*** rmart04 has joined #openstack-kolla12:47
*** portdirect has joined #openstack-kolla12:48
*** hieulq_ has quit IRC12:52
*** hieulq_ has joined #openstack-kolla12:58
*** strigazi1AFK is now known as strigazi12:58
*** srwilkers has quit IRC12:58
*** srwilkers has joined #openstack-kolla12:59
*** ayoung has joined #openstack-kolla13:01
*** prithiv has quit IRC13:01
openstackgerritJeffrey Zhang proposed openstack/kolla: Bump retries in starting nova-libvirt to 5  https://review.openstack.org/38791813:05
*** eaguilar has joined #openstack-kolla13:05
*** schwicht has joined #openstack-kolla13:09
*** Marx314 has joined #openstack-kolla13:11
*** huhaoran has quit IRC13:14
*** awiddersheim has joined #openstack-kolla13:17
*** rmart04_ has joined #openstack-kolla13:18
*** rmart04 has quit IRC13:19
*** rmart04_ is now known as rmart0413:19
*** jrist has quit IRC13:22
openstackgerritMerged openstack/kolla: Adds Fluentd docker image required for kolla-kube  https://review.openstack.org/37561513:22
*** jrist has joined #openstack-kolla13:22
*** jrist has quit IRC13:24
*** sean-k-mooney has quit IRC13:27
*** prithiv has joined #openstack-kolla13:28
*** jrist has joined #openstack-kolla13:30
*** confisurya has left #openstack-kolla13:31
*** rmart04 has quit IRC13:31
*** eaguilar_ has joined #openstack-kolla13:33
*** eaguilar has quit IRC13:34
*** LamT__ has joined #openstack-kolla13:34
*** sp_ has joined #openstack-kolla13:35
*** sdake has joined #openstack-kolla13:36
openstackgerritJeffrey Zhang proposed openstack/kolla: Add missing closing brace in grafana configuration file  https://review.openstack.org/38802313:36
sdakemorning13:37
sdakehey Jeffrey4l13:37
sdakesorry - fell asleep at keyboard yet again13:37
Jeffrey4lsdake, morning.13:37
sdakewhere we at wrt relese13:37
Jeffrey4lyou need some rest ;)13:37
sdakei can rest when im dead13:37
sdakewhere we at with the release13:37
Jeffrey4l:/   code joke13:37
sdakeya - i made a joke too :)13:38
Jeffrey4lcode/cold13:38
*** schwicht has quit IRC13:38
Jeffrey4lhttps://review.openstack.org/387918  retries: 2 works i bump to 513:38
sp_sdake: Jeffrey4l:13:39
sp_this is sp_13:39
sdakeanything else found jeff?13:39
sdakebugwise13:39
sdakeJeffrey4l ^^13:39
Jeffrey4lsp_, hi13:39
sp_I am just new faulk to kolla13:39
sdakehey sp_13:39
sp_want to get some interaction you guys13:40
Jeffrey4lsdake, another bug fix for grafana  https://review.openstack.org/38802313:40
*** zhurong has joined #openstack-kolla13:40
sdakethat tells me exctly zero people tested grafana13:40
Jeffrey4lno idea  why mitaka branch broken in CI. it should be OK.  https://review.openstack.org/29918213:41
Jeffrey4lexcept me ;)13:41
Jeffrey4li tested grafana + gnocchi, which is cool ;)13:41
sdakeok wee can deal wit htat fire later13:41
sdakegrafana works then?13:41
sdakewhat about fernet?13:42
sdakewhat tests did you run Jeffrey4l13:42
sdakewant ot get a feel for where the release is at13:42
sdakes in can we tag it now13:42
Jeffrey4lhmm. not tested fernet ;(13:43
sdakeca nyou tell me what you have tested13:43
msimoninHello, I don't want to bother you with :https://bugs.launchpad.net/kolla/+bug/1617334 :)13:43
openstackLaunchpad bug 1617334 in kolla "reconfigure action fails on [neutron | Restart the neutron_openvswitch_agent container] " [Critical,Incomplete]13:43
sdakemsimonin was that you that reported that issue?13:43
msimoninyes13:44
sdakemsimonin ok - we will get into it in a min if you are available13:44
openstackgerritMerged openstack/kolla: Add missing closing brace in grafana configuration file  https://review.openstack.org/38802313:44
sdake6am here - still waking up13:44
msimoninwow I see, take your time13:44
openstackgerritSteven Dake proposed openstack/kolla: Add missing closing brace in grafana configuration file  https://review.openstack.org/38802613:44
Jeffrey4lnewton deployment on multinode. with ceilometer, gnocchi, ceph, cinder13:44
sdakepbourke this needs an ack: https://review.openstack.org/#/c/387721/13:45
sdakeor mliima13:45
sdakeor any other cores around13:45
pbourkedone13:45
Jeffrey4land grafana works with that patch.13:45
sdakeoh thats mitaka13:45
sdakenm13:45
sdakeJeffrey4l nice!13:46
sdakewtf is with the gate13:46
Jeffrey4lsdake, that's what i said just now.13:46
sdakewhisky tango foxtrot is letters of the day13:46
sdakeJeffrey4l oh i thought you were talking about newton not master13:46
sp_sdake:   want be like you, i also want same rhythm like to sleep on keyboard  :) :)    I have started working on this BP  https://blueprints.launchpad.net/kolla/+spec/kolla-gui13:47
Jeffrey4lit should be some ci issue.13:47
sdakeJeffrey4l ok - lets put the ci on hold for the moment13:47
openstackgerritMerged openstack/kolla: Fix stale namespace removal issue  https://review.openstack.org/38772113:48
sdakepbourke woudl yo ube kind enough to ack https://review.openstack.org/#/c/388026/113:48
*** jtriley has joined #openstack-kolla13:48
sdakesp_ nice - gui is killer feature - do you know how to do gui work?13:49
sp_sdake :   It would be finalise after Summit13:50
sdakesp_ i dont know what the hipsters use today for html5 stuff13:50
sdakeangular13:50
sdakeand there are like 10 other things13:50
sp_sdake , and Yes we need separate GUI13:51
openstackgerritMerged openstack/kolla: Add missing closing brace in grafana configuration file  https://review.openstack.org/38802613:51
sp_sdake, It would be helpful, if you will share these 10 things13:51
mliimai like html5 :)13:53
jmccarthyhttps://hackernoon.com/how-it-feels-to-learn-javascript-in-2016-d3a717dd577f#.ihkg1th6t13:53
*** schwicht has joined #openstack-kolla13:54
openstackgerritJeffrey Zhang proposed openstack/kolla: DO_NOT_MERGE: Use better URL for China  https://review.openstack.org/32906013:54
sp_sdake:  please  provide your opinion13:57
*** dwalsh has joined #openstack-kolla13:57
sdakejmccarthy lol looks pretty hip13:59
sdakesp_ make it work13:59
sdakesp_ we will provide some sort of rest api that matches our kolla-ansible api14:00
sdakebeyond that, I looked into web progrmaming in "2016" and -ETOOCOMPLICATED :)14:00
*** rmart04 has joined #openstack-kolla14:01
sdakei need a beer after drinking that article14:01
sdakeand its only 7am!14:01
openstackgerritSerguei Bezverkhi proposed openstack/kolla: Adding kubetoolbox image  https://review.openstack.org/38498814:02
sdakemsimonin will be with you in a moment - brain still warming up14:03
sdakecore reviewers - ANYONE have any problems that need to be pulled into the rc3 release before tagging14:03
msimoninsdake: ack14:03
sdakesp_ keep in mind i wrote web pages in html in 1992..14:04
jmccarthyI like the part about 'web assembly' being a thing lol14:04
sdakeusing vi14:04
-openstackstatus- NOTICE: We are away of pycparser failures in the gate and working to address the issue.14:05
sdakeok cats, mirror being worked on14:06
sdakerather the gates14:06
sdakemsimonin ok - lets look at your issue14:07
sdakemsimonin first off, you are deploying 3.0.0rc2 ?14:07
msimoninsdake:  At the time a raised the issue it was 2.02214:07
msimonin2.0.2*14:07
openstackgerritMerged openstack/kolla: Bump retries in starting nova-libvirt to 5  https://review.openstack.org/38791814:07
msimoninuntil now we are still using stable/mitaka branch14:08
sdakemsimonin ok - does this problem exist in 3.0.0 at all?14:08
sdakemsimonin fwiw the entire core reviewer team uses ovs and nobody runs into this problem14:08
msimoninsdake: to be honnest I haven't try14:08
msimonintried*14:08
sdakeok so 2.0.2 is broken14:08
sdakehow did you install it14:08
sdakefrom git, or from pip?14:09
msimoninfrom git14:09
*** huhaoran has joined #openstack-kolla14:09
sdakeok14:09
sdakeabout  6 weeks ago or so we changed the documentation14:09
sdakeso explicitly tell people not to do that14:09
msimonin:)14:09
sdakei even sent a note to the mailing list14:09
sdakemsimonin is this a production deploy you are working with or an eval?14:10
msimoninIt's not production14:10
*** huhaoran has quit IRC14:10
sdakegood14:10
msimoninWe are evaluating different topologies / configurations14:11
sdakeso we can alter it then?14:11
msimoninsure14:11
sdakewhen does the issue hapepn14:11
sdakeJeffrey4l if you dont have to turn into a pumpkin a quick check of fernet would be appreciated14:11
Jeffrey4lok. test env broken. trying fix.14:12
*** haplo37_ has quit IRC14:12
msimoninjust deploy "kolla-ansible deploy" and then launch "kolla-ansible reconfigure"14:12
msimoninthe thing is I'm using fake drivers14:13
msimoninIt's worth mentionning it14:13
msimoninexcept that there's nothing fancy about my deployment14:13
*** tonanhngo has joined #openstack-kolla14:13
sdakeoh fake drivers14:14
sdakeso fake drivers are for r&d work14:15
sdakenot for actual deployment14:15
*** haplo37_ has joined #openstack-kolla14:15
* sdake requests some anestaphine from the medlock14:15
sdakethis problem happens on reconfigure?14:15
awebberis this the right channel for the kolla-kubernetes project?14:16
sdakeawebber roger14:16
msimoninyes we are using fake driver to evaluate Openstack control plane14:16
awebbersdake awesome14:16
*** neilus has joined #openstack-kolla14:16
sbezverkawebber: yes, what is up?14:16
msimoninsdake: yes, the problem appears on reconfigure14:16
*** sdake has quit IRC14:16
awebbersbezverk i am trying to deploy a successful kolla project to kubernetes14:16
*** sdake_ has joined #openstack-kolla14:17
awebbersbezverk i am following the documentation and building the config files all from within a container14:17
sdake_msimonin so the problem occurs during reconfgiure not during deploy?14:17
awebbersbezverk it seems like when generating the config files some tasks try to call sysctl to probably setup forwarding14:17
awebbersbezverk this fails on coreos - "Read-only file system\nsysctl"14:18
sdake_awebber groan14:18
sbezverkawebber: Have you set orchestration engine to KUBERNETES, before you started generating config files?14:19
msimoninsdake_: launch is perfectly fine, reconfigure is raising this error14:19
awebbersbezverk i have commented out those task and am continuing with "successfully generated configs"14:19
sdake_msimonin what are you reconfgiuring exatly?14:19
awebbersbezverk yes14:19
awebbersbezverk its probably just a coreos issue, wouldnt show up on non read only files systems i guess14:20
awebbersbezverk im hoping i can continue :)14:20
rhalliseyawebber, I think you'll need the kolla-tools containers14:20
rhalliseyI think kfox builds configs in there14:20
msimoninsdake_: actually to reproduce this behaviour I don't need to reconfigure anything14:20
*** neilus has quit IRC14:20
rhalliseyor you can switch to centos/ubuntu14:20
sdake_msimonin  does it happen without the fake driver?14:21
sbezverkawebber: we have not tested kolla-kube in coreos14:21
msimoninI don't think so14:21
awebberrhallisey i use the following container - http://pastebin.com/raw/B1C8z3YE14:21
msimoninsdake_: I don't think so14:21
sdake_ok - hate to say we dont care14:21
msimoninsdake_: but I can try14:21
awebbersbezverk no problem, i am happy to be your tester :)14:21
sdake_msimonin but in the big scheme of the 300 bugs or so open in kolla this one isn't real high priority14:21
sdake_msimonin fake driver is cool and all but its meant for r&d14:22
msimoninsdake_: yes I can understand that :)14:22
sdake_not for full workflow usage14:22
awebbersbezverk i dev on fedora but prefer to deploy within containers on the coreos cluster14:22
sdake_msimonin if you come to me and say "libvirt doesn't work with reocnfigure"14:22
sdake_then its #1 priority14:22
sdake_or in the top tier14:22
sbezverkawebber: I get it, it is just I have never tried it, I am not sure about the end result ;-)14:23
sdake_msimonin huikang is the cat to ask - he added the cool work around fake drivers14:23
msimoninsdake_: ack14:23
sdake_my guess is it needs some reconfigure logic14:23
msimoninis he around ?14:23
sdake_cool well i'm glad we got that settled14:23
sdake_msimonin he is not - he is in us tz14:23
awebbersbezverk does the concept specifiying the network adapters for internal and external disappear with kolla-kubernetes?14:24
sbezverkawebber: no it does not especially for multinode installation14:25
sbezverkawebber: network or tunnel is used to get ip address for vxlan tunnels between compute nodes and network/controller nodes14:26
msimoninsdake_: thanks for the help, I guess I'll go find huikang14:26
sdake_msimonin i asked him in the bug log to take a look14:26
sdake_hopefully he will14:26
sbezverkawebber: if it is all in one then it does not matter much..14:26
msimoninsdake_: ack14:27
sdake_he will probably be in a few hours but i can't guarantee other peoples schedules i dont know :)14:27
msimonin:)14:27
msimoninso folks, I wish you a good release !14:27
sbezverkawebber: what about images? are you planning to use from docker hub?14:27
sdake_msimonin thanks!14:27
sdake_msimonin thanks for spending time talking with us14:27
awebbersbezverk i am re-doing my successful multi-node kolla deployment with kolla-kubernetes - i'm finding it difficult to understanding networking configuration as an overlay is now in play14:27
sdake_msimonin so we could get this off our plates (either fixed or categorized properly)14:27
awebbersbezverk i am using my own private registry as a result of kolla-build --registry --push14:28
sdake_msimonin why using fake driver?14:28
awebbersbezverk i am hoping to reuse those containers14:28
msimoninsdake_: control plane evaluation14:28
sbezverkawebber: ok, when did you built those images?14:29
sdake_msimonin cool i get the use case, but if you want a proper eval you ahve to bit the bullet nad get 3 machines (vms work with some pain) and test things out that way14:30
sdake_msimonin note we have evaled kolla at 123 nodes (3 control 20 storage 100 compute0 and things went very well14:30
sdake_msimonin there are lots of 100+ node evals either taking place or going into deployment with newton14:30
msimoninsdake_: we evaluate the control plane using 1000 computes14:30
sdake_hrm14:30
sdake_rabbitmq will probably implode there14:31
sdake_you may have to wait for multiregion for that14:31
sbezverkawebber: the reason for my question is some minor changes were committed on kolla side to make kolla images a bit more kolla-kube friendly14:31
msimoninsdake_: it's actually tolerable14:31
msimoninsdake_: huge load under rally but it handle the load14:31
msimoninsdake_: next cycle we'll go multi region14:31
sdake_would be interested to see an oprofile of your control nodes under that kind of load14:31
sdake_along with an idle time measurement14:32
msimoninsdake_: actually the scheduler was more critical14:32
sdake_msimonin any special settings needed that we are missing?14:33
sdake_pbourke can i get an all go from you on tag or do you have further work needed14:33
msimoninsdake_: https://www.openstack.org/summit/barcelona-2016/summit-schedule/global-search?t=Chasing+1000+Nodes+Scale14:34
sdake_akwasnie Jeffrey4l egonzalez90 mandre rhallisey14:35
pbourkesdake_: good from my end14:35
sdake_Jeffrey4l how well does the perf stack work14:35
sdake_anyone tested fernet recently?14:35
sdake_like in last 1 mo14:35
sdake_Jeffrey4l reconfigure works i assume?14:36
sdake_Jeffrey4l or shall i validate that14:36
Jeffrey4lperf stack?  ELK?14:36
sdake_telegraph is the perf stck14:36
sdake_grafana14:36
sdake_etc14:36
Jeffrey4lonly tested the grafana. no telegraph.14:36
sdake_if you tested grafana you tested telegraph14:37
Jeffrey4lreconfigure should be fine, at lease for core service.14:37
sdake_did it work14:37
Jeffrey4lyep.14:37
sdake_Jeffrey4l nd upgrde with a vm now works?14:37
Jeffrey4lyep.14:38
Jeffrey4ltested14:38
*** sdake_ has quit IRC14:39
*** michauds has joined #openstack-kolla14:40
awebbersbezverk i am building from the master branch14:42
awebbersbezverk so i guess i have those commits unless they were within the last week14:42
*** prithiv has quit IRC14:42
*** bmace has quit IRC14:44
*** zhubingbing_ has quit IRC14:45
*** sdake has joined #openstack-kolla14:46
*** awebber has quit IRC14:50
*** awebber has joined #openstack-kolla14:50
awebbersbezverk when secret-generator.py create is run it produces the following error - No handlers could be found for logger "root"14:51
sdakemsimonin - ok i hate to say it, but i think your use csae is going to have to wait until ocata if at all14:51
sbezverkawebber: master is good14:52
sdakemsimonin it may be that reconfigure is not a good fit for the fake driver14:52
sdakeok 2 tests we need14:52
sdakefernet14:52
*** HyperJohnGraham_ has joined #openstack-kolla14:52
sdakeenable all services and make sure they deploy14:52
sdake(not work but deploy)14:52
sdakeand upgrade and reconfigure without crater14:52
sbezverkawebber: does it create secrets? kubectl get secrets --namespace=kolla14:52
sdakeJeffrey4l can ou take one of these and i'll take theother14:52
awebbersbezverk it doesnt get that far14:53
Jeffrey4lwhich one?14:53
sdakeJeffrey4l up to you14:53
Jeffrey4lsdake, i am testing fernet.14:53
Jeffrey4lright now.14:53
awebbersbezverk i am starting to think it might be better if i run this all in kolla-toolbox....? maybe it is trying to switch to the root user from ansible user14:53
sdakeJeffrey4l ok i'll test the other part AIO14:53
Jeffrey4lcool14:53
sdakeJeffrey4l i've got meetings this morning so should get to it around 11ish14:54
awebbersbezverk kolla_kubernetes/utils.py", line 126, in merge_configs_to_dict - No handlers could be found for logger "root"14:54
Jeffrey4lroger.14:54
*** srwilkers has quit IRC14:55
sdakeok - NO BACKPORTS TO STABLE/newton14:55
sdakeunless it is a critical bug for rc3 and marked in the tracker as such14:55
sdakethanks :)14:55
Jeffrey4lhmm fernet fix need be backport.14:55
Jeffrey4lhttps://review.openstack.org/#/c/369418/14:55
sdakeJeffrey4l can you sort it out14:56
Jeffrey4lit is not included in newton.14:56
Jeffrey4lyep.14:56
awebbersbezverk fails on KollaKubernetesResources.GetJinjaDict()[nsname]14:56
sdakei am witing on gate to tag14:56
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix keystone fernet file exchange via ssh  https://review.openstack.org/38806314:56
Jeffrey4lsdake, ^^14:56
awebberawebber i have installed "full install" not "development"...14:56
sdakeJeffrey4l i assume tha twent through solid review - so I am just going to rubber stamp it14:57
sdakepbourke ^^14:57
*** bjolo has quit IRC14:57
sdakeJeffrey4l if you can test it that would be grand14:57
*** unicell has joined #openstack-kolla14:57
awebbersbezverk ..and do a “Development Install” of kolla and kolla-kubernetes. This is absolutely required - perhaps thats my issue?14:57
Jeffrey4lsdake, i am testing it and found it is not backport.14:57
Jeffrey4lwhile add the fix and test again.14:57
*** egonzalez90 has quit IRC14:57
*** unicell1 has quit IRC14:59
Jeffrey4lwhile/will14:59
sbezverkawebber: yes it is required also you need to create kolla namespace14:59
*** bjolo has joined #openstack-kolla14:59
sdakeJeffrey4l one of your recent commits merged without a backport15:01
sdakeand I can't find it15:01
Jeffrey4lhmm. did u remember what it is about?15:02
sdakeit wa this morning15:02
*** mnasiadka has quit IRC15:03
openstackgerritMerged openstack/kolla: ansible: swift: Fix swift-object-expirer restart loop  https://review.openstack.org/38672915:03
sdakeretries:5?15:03
Jeffrey4lyep.15:03
Jeffrey4li will push it.15:03
sdakeits already in master15:04
sdakebut not sure if its in stable/newton15:04
*** eaguilar_ has quit IRC15:04
Jeffrey4lit is merged in master and no backport in newton.15:04
sdakeok folks - t-7 hours to go!15:05
sdakeJeffrey4l right can you get the backportrolling15:05
openstackgerritJeffrey Zhang proposed openstack/kolla: Bump retries in starting nova-libvirt to 5  https://review.openstack.org/38806615:05
Jeffrey4lsdake, done ^^15:05
sdakepbourke rubber stamp that one plz ^^15:05
*** piaccarino has joined #openstack-kolla15:05
sdakefolks I know the gates are busted15:05
sdakeinfra is working on it15:06
sdakeuntil then lets proceed as planned15:06
sdakewhich is getting this stuff merged15:06
sdakeeverything went through ci in msater already15:06
sdakeand newton and master have not diverged all that significantly yet15:06
sdakethanks pbourke15:06
openstackgerritcaoyuan proposed openstack/kolla: Fix aodh upgrade permission issue  https://review.openstack.org/38806715:06
sdakenote - we are not backporting any more upgrade patches sunless upgrade is somehow broken15:07
sdakewe have all the mitaka services15:07
sdakecoveredi n backports already15:07
sdakecool so we know multinode ceph upgrade works15:08
openstackgerritVladislav Belogrudov proposed openstack/kolla: Murano fails to deploy - cannot check core library  https://review.openstack.org/38806815:08
sdakewe think reconfigure works - let me run that real quick15:08
msimoninsdake: It's reasonnable to wait Ocata indeed15:09
sdakemsimonin i think newton is good to go - but for that bug ocata at earliest15:09
sdakewe know TLS works15:10
sdakewe know perf monitoring stack works - for a various definition of done :)15:10
sdakehow about the other operations such as bootstrap/etc?15:11
sdakeanyone know of problems with those15:11
sdakesean-k-mooney about?15:11
*** spsingh has joined #openstack-kolla15:11
sdakereconfigure works on the core services15:11
sdakewhat about mariadb recovery Jeffrey4l ?15:12
*** MarMat has joined #openstack-kolla15:12
sdakeis that something to be covered in 3.0.1?15:12
msimoninsdake: do you have any link regarding the planned experiments for Newton ?  (100+ node evals)15:12
sdakemsimonin we ran on osic gear15:12
sdakemoment let me find review15:12
sdakepbourke did the requirements thing ever get fixed for stable/newton15:13
Jeffrey4lmy fix is merged in mitaka and newton. But it is not ideal. some edge case is not covered.15:13
sdakeJeffrey4l ok - better then what it was?15:13
msimoninsdake: I checked osic experiments using 123 nodes, but just wondering if you plan other experiment for the next cycle15:14
Jeffrey4lyep. one more case can be fixed.15:14
sdakemsimonin nah - we have to submit proposals to osic, and they have to agree15:14
sdakemsimonin the paperowrk requireements re duanting, we are working on sorting out paperwork requirements from our last experimentation on osic gear15:14
sdakemsimonin plus I dont have another osic test in me rlated to kolla ;-)15:15
openstackgerritcaoyuan proposed openstack/kolla: Remove the unnecessary blank  https://review.openstack.org/38807115:15
openstackgerritMerged openstack/kolla: Bump retries in starting nova-libvirt to 5  https://review.openstack.org/38806615:16
wznoinsksdake: hi, any chance to push the last bits of ironic/iscsid into newton ?15:17
sdakewznoinsk how many patches15:19
sdakewznoinsk and what does it touch15:19
sdakeiscisd is lready implemented15:19
wznoinsksdake: https://review.openstack.org/#/q/status:open+project:openstack/kolla+branch:stable/newton+owner:%22Waldemar+Znoinski+%253Cwaldemar.znoinski%2540intel.com%253E%2215:20
wznoinskiscsid is in kolla but for cinder, the above makes it working with ironic15:20
kfox1111morning.15:21
wznoinsksdake: and last (https://review.openstack.org/#/c/387684/) of 3 from the above is fixing last bit of ironic itself on xenial15:21
*** eaguilar has joined #openstack-kolla15:22
sbezverkkfox1111: morning15:22
*** ssurana has joined #openstack-kolla15:22
wznoinskJeffrey4l: could you have a look on those 3 pls ^ ?15:22
* Jeffrey4l is checking15:23
sdakewznoinsk make an etherpad15:23
sdakewznoinsk with your patches15:23
sdakewznoinsk get Jeffrey4l to sign off on them15:23
sdakeJeffrey4l if there is *ANY* risk to the release - -1 em for now15:23
Jeffrey4lroger.15:23
*** skramaja has quit IRC15:24
wznoinsksdake: Jeffrey4l https://etherpad.openstack.org/p/kolla-newton-ironic-iscsid15:27
Jeffrey4lsdake, wznoinsk LGTM for these three PS. i think we can merged it.15:27
Jeffrey4lPatch Set 1: Code-Review-1 Workflow-115:27
Jeffrey4lthis is non-mitaka branch service, so it is not affect upgrade from mitaka to newton.15:27
Jeffrey4l1. use different bug id.15:27
Jeffrey4l2. no need backport to newton.15:27
Jeffrey4l2. -2 until rc3 is make15:27
Jeffrey4lhttps://review.openstack.org/#/q/status:open+project:openstack/kolla+branch:stable/newton+owner:%22Waldemar+Znoinski+%253Cwaldemar.znoinski%2540intel.com%253E%2215:27
*** srwilkers has joined #openstack-kolla15:27
Jeffrey4lwznoinsk, roger. i have +2 for all of them.15:27
wznoinskthanks15:27
Jeffrey4lit should be merged into newton.15:27
wznoinskit would make me sleep better for sure :-)15:28
*** prithiv has joined #openstack-kolla15:28
sdakeJeffrey4l make sure the bugs are marked critical and in the rc3 tracker15:28
Jeffrey4lok.15:28
sdakelets make a new etherpad15:29
sdaketo track these last minute changes15:29
sdakeif anyone breaks kolla - sdake ging to be severly unhappy :)15:29
sdakewznoinsk since all your patches are merging, you get to test ugprade/reconfgiure/deploy in place ;)15:29
openstackgerritKevin Fox proposed openstack/kolla-kubernetes: WIP: Testing trunk...  https://review.openstack.org/38764115:31
wznoinsknever tried upgrade, that's from 2.0.0 to 3.0.0 when it's out?15:32
Jeffrey4lsdake, done.15:32
Jeffrey4lsdake, etherpad link?15:32
Jeffrey4lbtw, keystone fernet works.15:33
Jeffrey4lwith my patch https://review.openstack.org/388063  .15:33
Jeffrey4lbut gate bust :/15:33
*** vhosakot has joined #openstack-kolla15:33
sdakeJeffrey4l fernet works - good news!15:33
openstackgerritJeffrey Zhang proposed openstack/kolla: DO_NOT_MERGE: TEST NEWTON BRANCH  https://review.openstack.org/38698115:34
openstackgerritMerged openstack/kolla: copy iscsid logrotate config  https://review.openstack.org/38768315:34
sdakeok folks - just spoke with infra15:36
sdakethey knwo thegates are broken15:36
sdakethey are working on it15:36
sdakeit is not clear if it will be fixed by our tag time15:36
sdakeSO15:36
sdakewe need to totally lock down all further changes15:36
sdakeand any reviews should be treated with a careful eye if they are not master backports where the master gate was successful15:37
sdakeJeffrey4l can you try deploy everything15:37
sdakeJeffrey4l and see whats broken wrt upgrade/reconfigure and stick in stubs if necessary15:37
Jeffrey4lsdake, sure15:37
sdakeby stubs, I mean ---15:37
sdake-15:37
mandreok15:38
mandrecareful, stupid and totally unrelated question incoming15:38
mandreif the extend_start.sh scripts are normally run as unpriviledge users, how come they can create directories in /var/log/kolla?15:39
sdakeall kolla-ansible API commands work for me with the core services plus central logging15:39
otaviosdake: Jeffrey4l: can my backport-fixes topic to be merged in mitaka?15:39
sdakemandre they are actually run as root ;-)15:39
sdakemandre via sudo15:39
Jeffrey4lwhat's it ? otavio15:39
sdakemandre moment15:39
otavioJeffrey4l: the vagrant related fixes15:39
otavioJeffrey4l: you did review it15:39
mandresdake: ah, that might explain :)15:39
Jeffrey4lmandre, i know it.15:40
openstackgerritMerged openstack/kolla: set basic kolla structures for iscsid  https://review.openstack.org/38768515:40
openstackgerritMerged openstack/kolla: copy ldlinux.c32 to /tftpboot in ironic_pxe  https://review.openstack.org/38768415:40
sdakemandre https://github.com/openstack/kolla/blob/master/docker/base/start.sh#L1415:40
Jeffrey4l /var/log/kolla is owner by :kolla group. so every user can create folders in it. ( every user is a member of kolla group )15:40
Jeffrey4lmandre, sdake https://github.com/openstack/kolla/blob/master/docker/base/Dockerfile.j2#L28615:41
mandreJeffrey4l: what sets the group ownership of /var/log/kolla?15:41
sdakemandre actually that may not be the question you asked15:41
Jeffrey4li added that recently.15:41
mandresdake: actually, if you look at like 20, kolla_extend_start is run as normal user15:42
openstackgerritMerged openstack/kolla: Fix keystone fernet file exchange via ssh  https://review.openstack.org/38806315:42
sdakemandre your right15:42
sdakemandre tools inside extend_start run as sudo however15:42
sdake(if needed)15:42
sdakenice - well it looks like 3.0.0 is golden from "core services" POV15:43
*** SPSINGH__ has joined #openstack-kolla15:44
mandresdake: true, but not ensuring /var/log/kolla/foo dir exists which is run as normal user, I think Jeffrey4l is right about the kolla group but I can't find where it's set15:44
sdakepbourke do you recallt he name of that hip website that produces 1 page CVs15:44
Jeffrey4lmandre, it is added in the base image https://github.com/openstack/kolla/blob/master/docker/base/Dockerfile.j2#L28615:44
pbourkesdake https://enhancv.com/15:45
sdakepbourke thanks15:45
*** piaccarino has quit IRC15:45
openstackgerritJeffrey Zhang proposed openstack/kolla: DO_NOT_MERGE: TEST NEWTON BRANCH  https://review.openstack.org/38698115:45
*** piaccarino has joined #openstack-kolla15:46
*** vhosakot has quit IRC15:46
*** vhosakot has joined #openstack-kolla15:46
*** spsingh has quit IRC15:47
Jeffrey4lotavio, i prefer not. we only backport critical issue. not feature.15:49
*** zhurong has quit IRC15:52
sdakewe also backport high features15:55
sdakebut not around release time15:55
sdakerather high bugs15:56
sdakewe never backport features15:56
*** msimonin has quit IRC15:56
Jeffrey4lsdake, high feature means?15:56
*** caowei has quit IRC15:56
sdakeJeffrey4l it was a misspeak15:57
sdakei meant high bug15:57
Jeffrey4lroger.15:57
sdake9am dude - almost awake ;)15:57
Jeffrey4l12 pm here almost sleepy ;)15:58
otavioJeffrey4l: I think vagrant is not a dev; it is there but broken15:58
Jeffrey4lotavio, you should think like this: vagrant only used by develop. and fewer develop will work on mitaka branch. so backport is almost useless ;)15:59
*** ssurana has quit IRC16:01
*** sdake_ has joined #openstack-kolla16:03
mandreawesome, thanks Jeffrey4l16:03
*** rmart04 has left #openstack-kolla16:03
Jeffrey4lnp16:03
*** sdake has quit IRC16:06
*** irtermit- is now known as irtermit16:06
*** irtermit is now known as irtermite16:06
vhosakotyes, vagrant in master does not work for me either... I deploy kolla manually using the QSG in vm16:09
-openstackstatus- NOTICE: pycparser 2.16 released to fix assertion error from today.16:11
*** b_bezak has quit IRC16:11
*** prithiv has quit IRC16:11
*** g3ek has quit IRC16:12
*** matrohon has quit IRC16:13
*** haplo37 has quit IRC16:13
*** confisurya has joined #openstack-kolla16:14
*** SPSINGH__ has quit IRC16:14
*** g3ek has joined #openstack-kolla16:15
*** haplo37 has joined #openstack-kolla16:15
Jeffrey4lvhosakot, vagrant is out of maintain for long. because i didn't see any fix patch.16:20
Jeffrey4lrecently.16:20
vhosakotJeffrey4l: yep, I reviews some patches for vagrant.. but agreed, it is not under active dev/maintenance16:21
*** awebber has quit IRC16:22
*** inc0 has joined #openstack-kolla16:23
inc0good morning16:23
Jeffrey4lmorning16:23
*** gfidente is now known as gfidente|afk16:28
mliimamorning16:29
sbezverkkfox1111: ping16:33
kfox1111sbezverk: whats up?16:34
sbezverkkfox1111: hit wierd bug in nuetron16:34
kfox1111whats it doing?16:34
sbezverkaplicable only to kube and on cluster reboot16:35
sbezverkhttps://bugs.launchpad.net/neutron/+bug/163412316:35
openstackLaunchpad bug 1634123 in neutron "neutron openvswitch agent exits if unix:/var/run/openvswitch/db.sock is not yet created" [High,New]16:35
*** manjeets has quit IRC16:35
sbezverkI also propesd fix, curious what neutron people will say16:35
*** manjeets_ is now known as manjeets16:36
kfox1111yeah. retrying is probably the best option.16:36
kfox1111although, crashing would work too. k8s would clean it up and try again.16:36
kfox1111a third option might be to just try and create the socket in the template.16:37
sbezverkkfox1111: I do not want to scare neutron with crashing option ;-)16:37
kfox1111or a forth would we to look for the socket in the template before kolla start and bailing if it doesn't exist.16:37
kfox1111hmm.. 4 might be the best option for us, for now, as it will work with mitaka/newton too.16:38
sbezverkkfox1111: I would prefer retrying as it is the simplest.16:38
kfox1111[ -f /var/run/openvswitch/db.sock ] && exit -116:38
kfox1111k8s would then retry.16:38
kfox1111a little more complicated:16:38
kfox1111while [ ! -f /var/run/openvswitch/db.sock ]; do sleep 1; done16:39
sbezverkkfox1111: I guess for newton, until retry gets merged, that could be a solution..16:40
bjolo__build errors stable/newton ubuntu binary mariadb container. anyone else getting this?16:40
kfox1111sbezverk: I still want to support mitaka for a while too.16:41
kfox1111that gives me a smooth transition to newton.16:41
bjolo__http://paste.openstack.org/show/58623916:41
kfox1111upgrade non kolla-kubernetes cloud from mitaka to mitaka k8s. then in a seperate outage, upgrade from mitaka to newton.16:41
sbezverkkfox1111: another thing, if you could check latest fencing ps would be good.. I tested it with latest changes and it works well16:41
*** ayoung has quit IRC16:42
kfox1111sbezverk: I comment on it some more on the channel yesterday.16:43
kfox1111I really think it should only ever try and shoot nodes/pods that contain rbd locks.16:43
kfox1111otherwise, noisy neighbor vm's can kill themselves and others on the same node potentially.16:44
bjolo__ubuntu source also failing16:44
kfox1111so the algorithm should be: look for potentially dead nodes. of those, look for ones that hold rbd locks. Of those:16:45
kfox1111ipmitool power off16:45
sbezverkkfox1111: I missed that part will look into it16:45
kfox1111remove rbd lock16:45
kfox1111shoot the pods on it.16:46
kfox1111that should effect the smallest amount of nodes.16:46
kfox1111really just the nodes running mariadb and rabbit.16:46
sbezverkkfox1111: before you were saying a bit different, you want to power off first, then clear locks16:46
kfox1111no. I've been consistent on the fencing. ipmi power off (fence) the node before the rbd lock is released, or else data corruption.16:47
sbezverkkfox1111: but I think shooting only nodes with locks is right approach16:47
kfox1111kk16:48
kfox1111I think some of the confusion was probably in that there are two parts to the rbd locks.16:49
kfox1111looking for locks, and unlocking the locks.16:49
kfox1111unlocking the locks must happen after the fencing of the node.16:49
kfox1111but its safe to look for locks before.16:49
kfox1111sdake_: trunk seems happy with kolla-kubernetes again. so that patch fixed it.16:52
kfox1111I'll try and keep running tests against it. if you can let me know when we're done adding patches right before release though, I can run one more to be sure.16:52
*** diogogmt has joined #openstack-kolla16:53
kfox1111bbiab16:54
*** ssurana has joined #openstack-kolla16:57
otavioJeffrey4l: I disagree. Vagrant were used here as test environment before putting it at real hw17:11
otavioJeffrey4l: so it is important to be kept running17:11
otavioJeffrey4l: also the low usage can be seen as a low risk and people would benefit from the better user experience17:11
Jeffrey4li doubt fewer people are using vargran. and vagrant is bust on master too.17:12
kfox1111I havent gotten vagrent to ever work well with kvm, and I need kvm for my openstack stuff. I'd probably use vagrent more if I coudl figure that out.17:15
Jeffrey4lkfox1111, you can try nested kvm17:16
kfox1111Jeffrey4l: yeah, in that way lies pain... :)17:16
kfox1111I've just found it easier to skip vagrent because of that... so far it hasn't been too difficult.17:17
*** unicell has quit IRC17:17
Jeffrey4lyes. dependency is less for kolla.17:17
*** confisurya has quit IRC17:18
inc0vagrant is bust because nobody cares for them17:23
inc0in opensource, you fix what you feel is broken usually17:23
otavioinc0: we used it and sent the patches17:23
inc0if somebody would want to take on fixing vagrant, we'll be happy to help and review17:24
otavioinc0:  I dont care as now we moved to newton17:24
inc0so I'm pretty sure that if we fix vagrant on master17:24
inc0it should be pretty easy to deploy newton with it too17:24
inc0even tho code itself will remain broken in tree17:25
inc0hell, we might even backport this bug to newton if it's fixed17:25
inc0not a big issue17:25
inc0vagrant is in our tree -> it's broken -> it's bug -> possible to backport17:25
inc0but we need fix first:)17:25
*** tonanhngo has quit IRC17:26
*** tonanhngo has joined #openstack-kolla17:26
otavioinc0: mitaka fixes are under review17:26
inc0otavio, it has to be fixed in master17:27
inc0and then backported to stable if anything17:27
otavioinc0: it is; the fixes I added for mitaka were backports17:27
otavioinc0: all them17:27
inc0ok17:27
inc0but you're saying that you're moving to newton right?17:27
Jeffrey4lif vagrant works in master, copy it to stable branch should works.17:29
inc0but truth is, not our highest priority17:32
*** kwazar has quit IRC17:33
*** jistr has quit IRC17:33
*** kklimonda has quit IRC17:33
*** irtermite has quit IRC17:33
*** nick-ma has quit IRC17:33
*** igordcard has quit IRC17:33
*** flaper87 has quit IRC17:33
*** DuncanT has quit IRC17:33
*** amaged__ has quit IRC17:33
*** qbjolof1 has quit IRC17:33
*** Guest66666 has quit IRC17:33
*** jgriffith has quit IRC17:33
*** esmiurium has quit IRC17:33
*** EmilienM has quit IRC17:33
*** cu5 has quit IRC17:33
*** mgkwill has quit IRC17:33
*** SaMnCo has quit IRC17:33
*** harmw has quit IRC17:33
*** nihilifer has quit IRC17:33
*** harbie has quit IRC17:33
*** dims has quit IRC17:33
*** smekel_ has quit IRC17:33
*** jroll has quit IRC17:33
*** tonyb has quit IRC17:33
*** cloudnull has quit IRC17:33
*** jgriffith_ has joined #openstack-kolla17:33
*** irtermite has joined #openstack-kolla17:33
*** dims has joined #openstack-kolla17:33
*** tonyb has joined #openstack-kolla17:33
*** igordcard has joined #openstack-kolla17:33
*** harbie has joined #openstack-kolla17:33
*** esmiurium has joined #openstack-kolla17:33
*** Guest66666 has joined #openstack-kolla17:33
*** qbjolof1 has joined #openstack-kolla17:33
*** kwazar has joined #openstack-kolla17:33
*** nihilifer has joined #openstack-kolla17:34
*** harbie has quit IRC17:34
*** harbie has joined #openstack-kolla17:34
*** cloudnull has joined #openstack-kolla17:34
*** janem has quit IRC17:34
*** cu5 has joined #openstack-kolla17:34
*** kklimonda has joined #openstack-kolla17:34
*** jistr has joined #openstack-kolla17:34
*** michauds has quit IRC17:35
*** jroll has joined #openstack-kolla17:35
*** EmilienM has joined #openstack-kolla17:36
*** steve-noyes has quit IRC17:37
*** athomas has quit IRC17:38
*** SaMnCo has joined #openstack-kolla17:38
*** nick-ma_ has joined #openstack-kolla17:40
*** haplo37_ has quit IRC17:41
Jeffrey4lfyi, ci should be unblocked now.17:41
*** DuncanT has joined #openstack-kolla17:41
*** tonanhngo has quit IRC17:42
*** mgkwill has joined #openstack-kolla17:42
*** amaged__ has joined #openstack-kolla17:43
*** haplo37_ has joined #openstack-kolla17:43
*** smekel_ has joined #openstack-kolla17:44
*** unicell has joined #openstack-kolla17:44
*** harmw has joined #openstack-kolla17:45
sbezverkJeffrey4l: ping17:46
Jeffrey4lsbezverk, pong17:46
sbezverkJeffrey4l: listen this PS needed to be rebased it had all +2 already, and has not been merged only because of depenedcy17:47
sbezverkthat is why it was cherrypicked17:47
sdake_hey peeps17:47
sbezverkalso we do not drop rott in kube17:47
*** srwilkers has quit IRC17:47
sbezverkyou do not use this image in kolla17:47
sbezverkso what is uup with USER comment???17:48
*** srwilkers has joined #openstack-kolla17:48
Jeffrey4lok.17:48
*** srwilkers has quit IRC17:48
Jeffrey4lfor the cherry-pick in commit. you are cherry pick patch set 3 into patch set 4.17:48
Jeffrey4lsbezverk,17:48
Jeffrey4lcheck the commit hash 78c981dc70e110c3d09039d14a5845cb4624639917:49
sdake_otavio - we are 6 hours from tag - not merging any non-critical issues related to the release17:49
sbezverkJeffrey4l: main.yml modification is MUST because otherwise it does not get renedered properly17:49
sdake_otavio if you really want that work done - we can backport it - but 3.0.0 is locked in unless there is some critical failure17:49
sdake_thanks kfox1111  re kolla-kubernetes17:49
sbezverkJeffrey4l: what does it change if hash do not match?17:50
*** awebber has joined #openstack-kolla17:50
sdake_Jeffrey4l any critical failures on deploy everything?17:50
otaviosdake_: it is backports from 3.0.0 onto 2.0.317:50
sdake_Jeffrey4l or did you get to that?17:51
Jeffrey4lsbezverk, still no idea why kolla ansible matter when you  add a docker fie.17:51
sdake_otavio 3.0.0 is working?17:51
otaviosdake_: it is backport, no new changes.17:51
Jeffrey4l sdake_ that? what?17:51
otaviooh my godness. Of course. All those changes ARE in 3.0.0. That's why the topic is called backport-fixes17:51
*** neilus has joined #openstack-kolla17:52
openstackgerritAndrew Widdersheim proposed openstack/kolla: Allow cinder-volume to be configured to use NFS  https://review.openstack.org/27991317:52
Jeffrey4lthe key point is: you are backporting a bunch of patch sets, some is bug fix ( without bug id, trivial fix ) , some are small nice-have feature.17:53
otaviosdake_: otherwise I would have sent them for master before asking for backport. This is how I did for the swift change as you remember17:53
otavioJeffrey4l: in my pov all are bugfixes as vagrant were not working for us before17:53
otavioJeffrey4l: but to be honest, I did it for the sake of contributing. We have our fork with those in so I dont care17:54
otavioJeffrey4l: but as end user, I would hope for vagrant to be on a working stage17:54
otavioJeffrey4l: or drop i17:54
otavioit17:54
*** neilus has quit IRC17:56
*** srwilkers has joined #openstack-kolla17:57
openstackgerritAndrew Widdersheim proposed openstack/kolla: Allow cinder-volume to be configured to use NFS  https://review.openstack.org/27991317:57
sdake_otavio ca nwe have this discussion tomorrow?17:58
sdake_otavio i hate to push you off, but we are really working on getting 3.0.0 tagged17:58
otaviosdake_: sure; no problem17:58
sdake_and today at 5pm pst is our deadline17:58
otaviosdake_: it is all fine. I just don't agree in ignoring end user17:59
otaviosdake_: as I said, my case is fine17:59
Jeffrey4li do think it break the stable branch policy. some are feature, i think.17:59
sdake_otavio lets chat more tomorrow17:59
otaviosdake_: so we talk later17:59
*** srwilkers has quit IRC17:59
sdake_i have all afternoon and most of the morning open on wed :)17:59
*** athomas has joined #openstack-kolla18:00
otavioJeffrey4l: If it does, and Vagrant is not seen as part of a key component which must be working, then drop it. In the end it seems to be non-supported18:00
*** msimonin has joined #openstack-kolla18:01
otavioJeffrey4l: point me the one you think it is a feature and we discuss18:01
otavioJeffrey4l: but focus on release now, we discuss tomorrow ;-)18:01
openstackgerritAndrew Widdersheim proposed openstack/kolla: Allow cinder-volume to be configured to use NFS  https://review.openstack.org/27991318:02
*** msimonin has quit IRC18:02
Jeffrey4lsure18:02
sdake_ok, so fernet - tested - core - tested - multinode - tested - ceph - tested - upgrades on centos - tested18:03
openstackgerritSerguei Bezverkhi proposed openstack/kolla: Adding kubetoolbox image  https://review.openstack.org/38498818:04
sdake_upgrades on ubuntu - not tested - full deploy of all services - not tested18:04
Jeffrey4ltesing:  ceilomter gnocchi aodh logging ceph grafana cinder heat tempest horizon magnum  murano    deploy + reconfigure18:04
Jeffrey4lthis almost a full deploy ^^18:04
sdake_Jeffrey4l i was thinking all the services at aonce18:04
sdake_you know congress sahara etc18:04
sdake_reconfigure of core - tested18:04
sdake_all api commands - tested18:04
sdake_where we haven't tested is ubuntu upgrades and full upgrade/reconfigure of all added services18:05
sdake_i want to make sure upgrade and reconfigure dont' crater18:05
sdake_i don't particuarly care if they work properly18:05
sdake_just that they don't fail18:05
sdake_inc0 can you test ubuntu upgrade with stable/newton?18:05
sdake_i think bjolo__ was looking at this - not sure if he finished it or not18:05
sdake_all that backport madness we went through yesterday will be wasted if upgrade in some way craters.18:07
sdake_same story with reconfgiure18:07
*** nihilifer has quit IRC18:08
Jeffrey4lyes. really wanna get test result for ubuntu18:08
Jeffrey4lupgrade18:08
sdake_https://etherpad.openstack.org/p/kolla-newton-final-testing18:09
sdake_folks - please sign up for one of these and get er done in the next 1 hour18:09
sdake_jeffreey is doing 2-418:10
sdake_my computer is in the shop - so have no way to run a vm for ubuntu18:10
sdake_TLS -tested18:10
sdake_everything is looking really good18:10
sdake_need ubuntu upgrade test18:11
Jeffrey4lJeffrey4l, 2-4?   2-3  ;)18:11
sdake_1-3 ;)18:13
sdake_i meant lines 2-4 in the etherpad18:13
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Fencing pod  https://review.openstack.org/38392218:13
sbezverkkfox1111: please check when you have time latest fencing. hopefully I captured the idea of the flow ;-)18:15
sdake_ok - if no takers on the ubuntu tests, I am going to add a release note ubuntu is completely untested with upgrades and may crater your deployment18:15
bjolo__sdake_, upgrade running now.18:15
sdake_bjolo__ on ubuntu?18:15
bjolo__should be done in a few18:15
bjolo__yes ubuntu binary18:15
Jeffrey4lsound cool18:15
bjolo__ouch failed on heat18:16
sdake_have any kind of log?18:16
Jeffrey4lbjolo__, logs?18:16
bjolo__http://paste.openstack.org/show/586252/18:17
sdake_bjolo__ did ubuntu deploy work?18:17
bjolo__on mitaka?18:17
bjolo__let me check one thing here first18:17
Jeffrey4lbjolo__, try `docker logs bootstrap_heat`18:17
openstackgerritAndrew Widdersheim proposed openstack/kolla: Remove redundant Neutron Docker volumes  https://review.openstack.org/38816418:18
sdake_bjolo__ oh nm your testing upgrades :)18:18
bjolo__oh wait, heat deploy did not work on mitaka so i disabled that18:18
bjolo__but it is enabled in my newton globals.yml.18:19
bjolo__thats probably why the failure18:19
Jeffrey4lso no database in mariadb.18:19
Jeffrey4lduring upgrade it won't create database.18:19
sdake_bjolo__ why didn't heat deploy work on mitaka18:19
bjolo__yes seems like18:20
sdake_it works for me18:20
bjolo__did not find the binary i believe18:20
bjolo__using docker hub images18:20
sdake_bjolo__  are you running hub 2.0.2 images?18:20
bjolo__yes18:20
sdake_ok, use source images pls18:20
sdake_binary in 2.0.2 is afu18:20
bjolo__ok18:20
sdake_for ubuntu18:20
Jeffrey4lsource is more stable in most case.18:21
sdake_centos binary is generally stable as well18:21
sdake_inc0 https://etherpad.openstack.org/p/kolla-newton-final-testing18:22
bjolo__heka did fail tho18:22
bjolo__http://paste.openstack.org/show/586255/18:22
bjolo__permission issue18:22
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Fencing pod  https://review.openstack.org/38392218:22
sdake_groan18:22
openstackgerritAndrew Widdersheim proposed openstack/kolla: Update globals.yml Docker registry example notes  https://review.openstack.org/38816718:22
Jeffrey4lhmm. heka read logs file, but lots file don't have correct permission right now.18:23
Jeffrey4lbjolo__, does the upgrade script done?18:23
bjolo__?18:24
Jeffrey4ldoes upgrade run successfully?18:24
sdake_Jeffrey4l no it cratered on heka18:24
Jeffrey4lno. i do not think so.18:24
Jeffrey4lbjolo__, ?18:24
bjolo__well it failed on heat right18:25
bjolo__build mitaka ubuntu source now18:25
sdake_bjolo__ enable_heat: "no"18:25
sdake_bjolo__ use ubuntu source from dockerhub18:25
Jeffrey4ltry docker restart heka bjolo__18:25
sdake_Jeffrey4l what exactly sets permissions on /var/log/kolla/haproxy?18:26
openstackgerritAndrew Widdersheim proposed openstack/kolla: Add node_custom_config example to globals.yml  https://review.openstack.org/38816918:26
Jeffrey4lwhen heka is upgraded, the logs file in /var/log/kolla are not updated. so start heka success, and heka container failed later.18:27
bjolo__restart heka did not work18:27
Jeffrey4lafter all container is updated. heka should be fine.18:27
Jeffrey4lbjolo__, check the log again?18:27
bjolo__disabled heat and running upgrade again18:27
bjolo__same error in log18:27
Jeffrey4lok. i am wrong .18:28
Jeffrey4lwhat's this file is? /var/log/kolla/haproxy/.hekad.perm_check44394971018:28
sdake_keepalive and haproxy need some json attention i think18:28
Jeffrey4lit is generated by heka in haproxy folder.18:29
sdake_Jeffrey4l its obviously a way to see if heka can write to that folder ;)18:29
Jeffrey4lbjolo__, check the file in haproxy conainer  /var/log/kolla/haproxy/.hekad.perm_check44394971018:29
bjolo__ok18:29
sdake_there is no file18:29
sdake_it couldn't be written - EPERM18:29
sdake_bjolo docker exec heka ls -ld /var/log/kolla/haproxy18:30
sdake_and same story with keepalived18:30
bjolo__[root@eselde02u33 etc]# docker exec heka -ld /var/log/kolla/haproxy18:31
bjolo__Error response from daemon: Container 281cb1fc7275430e701b57ca72ae1a370b48c460f53fe344b4fb48583a9f8d19 is restarting, wait until the container is running18:31
bjolo__stuck in restarting so ...18:31
sdake_ya18:31
Jeffrey4lbjolo__, try `ls -alh /var/lib/docker/volumes/kolla_logs/_data/haproxy/`18:31
*** neilus has joined #openstack-kolla18:31
sdake_Jeffrey4l that won't give the container uid version of that file18:32
sdake_haproxy is not writeable18:33
sdake_heka tries to write to it to make sure it can18:33
sdake_it can't18:33
sdake_and exits18:33
sdake_thats my analysis18:33
Jeffrey4lerror opening file: open /var/log/kolla/haproxy/.hekad.perm_check443949710: permission denied18:34
Jeffrey4li think he is trying to open that file.18:34
sdake_open rw+18:34
sdake_= write18:34
sdake_write on a permission denied on a new file = directory not writeable18:35
sdake_i am tagging in 5 hours18:36
mandreJeffrey4l: still around?18:36
sdake_it will be with upgrades for ubuntu working or without18:36
Jeffrey4lmandre, yep.18:36
sdake_if without - there will be a release note18:36
mandreJeffrey4l: should we backport https://github.com/openstack/kolla/commit/73a39db326107212780fb3b4555b768269fc5c3f to mitaka?18:36
sdake_i suggest if you care about ubuntu you get cracking on fixing it18:36
sdake_i would love to - all my gear is busted18:37
Jeffrey4lmandre, hmm. but no one report any log error.18:37
Jeffrey4lwhen i fixed this in master, i really saw some error message, especially for new added service.18:38
mandreJeffrey4l: well, I do :)18:38
mandreI get permission errors when testing mitaka images in my environment, and was wondering what sets the group perms for /var/log/kolla18:39
Jeffrey4lmandre, no one ;(18:39
*** aswadr_ has quit IRC18:39
*** mliima has quit IRC18:39
Jeffrey4lit may be root i think.18:39
*** mliima has joined #openstack-kolla18:40
mandreJeffrey4l: right... I'll keep digging18:40
sdake_Jeffrey4l rather then fixing with a backport and forcing people to upgrade to 2.0.3 - wouldn't it be easier to just use the permissions feature of set_config.py?18:40
Jeffrey4lno need.18:41
*** mliima_ has joined #openstack-kolla18:41
Jeffrey4lif container image has /var/log/kolla with :kolla owner, when mounting a named volume, container will change the own on named volume.18:42
sdake_what about the keepalived directory?18:42
Jeffrey4lkeepalived is create in extend_start.sh file in keepalived folder.18:43
Jeffrey4lfolder/container.18:43
openstackgerritAndreas Jaeger proposed openstack/kolla: Move bandit to pep8 as generic linting target  https://review.openstack.org/38817518:43
Jeffrey4lthe owner will be the same with USER in keepalived.18:43
mandreJeffrey4l: I assume the chmod is being taken care of by the heka container in mitaka, https://github.com/openstack/kolla/blob/stable/mitaka/docker/heka/heka_sudoers#L218:43
mandrehttps://github.com/openstack/kolla/blob/stable/mitaka/docker/heka/extend_start.sh#L1218:44
*** mliima has quit IRC18:44
Jeffrey4lmandre, but the reality is if i mount kolla_logs at /var/log/kolla ( which is root:root ) in container, it will be change.18:44
mandreJeffrey4l: yeah, that's the issue I'm facing, I'm not using the heka container18:45
Jeffrey4lheka container doesn't solve such issue.18:45
Jeffrey4lif it does, i will won't push that fix.18:45
openstackgerritChristian Berendt proposed openstack/kolla: Remove inputs.filestat from telegraf configuration  https://review.openstack.org/38793518:45
Jeffrey4lsdake_, my test env bust again. ;(   run reconfigure to nova.18:46
*** flaper87 has joined #openstack-kolla18:46
*** flaper87 has quit IRC18:46
*** flaper87 has joined #openstack-kolla18:46
sdake_what do you mean bust again18:47
*** pbourke has quit IRC18:47
Jeffrey4li am running 3 vms for test actually.18:47
*** pbourke has joined #openstack-kolla18:47
sdake_vms suck use my gear18:47
Jeffrey4land now here is the uptime:  02:47:42 up 18:45,  1 user,  load average: 59.81, 54.59, 42.2618:48
mandreJeffrey4l: what I mean is, in mitaka we expect the heka container to setup proper perms for /var/log/kolla directory18:48
mandreJeffrey4l: this is a wrong assumption that you fixed with your patch to master 3 weeks ago18:48
Jeffrey4lsdake_, so i will destroy all container in all your three nodes. is it OK?18:49
inc0wirehead_, sbezverk I'll add 2 or so slides at the end of our talk ok?18:49
inc0"community update"18:49
inc0and "call to arms"18:49
sdake_Jeffrey4l perfectly fine18:49
Jeffrey4lmandre, anyway. heka do not solve your issue.18:50
sdake_inc0 - upgrade on ubuntu is broken18:50
sdake_i am tagging in 5 hours18:50
sdake_whether it remains broken or not18:50
inc0how fun18:50
inc0what's wrong?18:50
sdake_inc0 need you to test and debug it18:50
mandreJeffrey4l: isn't it the lack of heka that is creating my issue?18:50
*** HyperJohnGraham_ has quit IRC18:50
sdake_inc0 nboody else here has ubuntu test beds18:50
Jeffrey4lsdake_, only one disk?  it is impossible to test ceph ;(18:50
sdake_Jeffrey4l sda is for ceph18:51
sdake_Jeffrey4l /dev/nvme* is where the os is - don't mess with that18:51
Jeffrey4lmandre, yes.18:51
Jeffrey4lsdake_, got.18:51
inc0sdake_, what's wrong with upgrade? do you have any info?18:52
Jeffrey4lmandre, even you add heka. the containers will mess the /var/log/kolla permission up.18:52
sdake_bjolo ls -alh /var/lib/docker/volumes/kolla_logs/_data/haproxy/`18:52
sdake_bjolo__ ^^18:52
mandreJeffrey4l: hmm, so how come our mitaka branch is not all busted?18:53
sdake_inc0 info i have is in scrollbck18:53
sdake_heka craters with keepalived and haproxy18:53
sdake_permission denied18:53
Jeffrey4lmandre, no idea ;( have test this carefully.18:53
bjolo__http://paste.openstack.org/show/586260/18:53
Jeffrey4lhave/haven't18:53
Jeffrey4lok. sdake_ you r correct.18:54
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Fencing pod  https://review.openstack.org/38392218:54
sdake_Jeffrey4l haproxy.log = 102 = systemd stuff18:54
Jeffrey4lwhat 120k is?18:54
sdake_notice . is 102 as well18:54
Jeffrey4lbjolo__, is haproxy running?18:54
bjolo__it was18:54
bjolo__but not anymore18:55
bjolo__destroyed and deploying mitaka again18:55
Jeffrey4lcheck the logs in haproxy container ` docker exec haproxy ls -alh /var/log/kolla/haproxy`18:55
sdake_we need json for haproxy and keepalived18:55
bjolo__ubuntu source 2.0.218:55
Jeffrey4lok..18:55
mandreJeffrey4l: gotcha, thanks for your help, I'll look into it tomorrow18:55
openstackgerritChristian Berendt proposed openstack/kolla: Use apt instead of apt-get to install packages in Ubuntu  https://review.openstack.org/37947718:55
bjolo__upgrade completed the second time with heat disabled18:55
Jeffrey4lsdake_, yes. i am wrong for haproxy. it is not run as root. it run as haproxy user.18:56
sdake_wht about keepalived - same story?18:56
* Jeffrey4l is checking.18:57
Jeffrey4lseems no.18:57
sdake_seems no means what? :)18:57
Jeffrey4lkeepalived is not the same story.18:58
sdake_vhosakot ping18:58
vhosakotsdake_: pong18:58
sdake_vhosakot do you have time now to dig into debug of keepalived and haproxy on ubuntu18:59
sdake_sincey ou run ubuntu in your test beds18:59
*** jmccarthy has quit IRC18:59
openstackgerritMerged openstack/kolla: Adding kubetoolbox image  https://review.openstack.org/38498819:00
sdake_vhosakot i am tagging 3.0.0 in 5 hours exactly19:00
vhosakotsdake_: sure, I can debug it... is there a review in queue I need to test19:00
*** tonanhngo has joined #openstack-kolla19:00
sdake_vhosakot ignore all other reviews for now19:00
sdake_this is critical critical priority19:00
*** jmccarthy has joined #openstack-kolla19:01
Jeffrey4lkeepalived's log is collected by syslog and is wrote to filesystem by heka.19:01
vhosakotJeffrey4l: ah ok19:01
Jeffrey4lso heka should change the keepalived folder's permission to heka:kolla19:01
vhosakotsdake_: Jeffrey4l what exactly should I do?  debug the issue? or , is there a a patch to test?19:01
vhosakotJeffrey4l: ah ok19:02
sdake_vhosakot first deploy 2.0.2 mitaka from docker hub19:02
sdake_then upgrade to stable/newton19:02
sdake_to do that pip install kolla19:02
sdake_kolla-ansible deploy19:02
Jeffrey4li can push a patch. then please test with it.19:02
jascott1docs question: why does this call for setting up /etc/kolla before installing and copying over /etc/kolla?19:03
jascott1http://docs.openstack.org/developer/kolla-kubernetes/host-setup.html#generate-config-file19:03
sdake_pip uninstall kolla19:03
vhosakotsdake_: should I test it in the next 5 hours before tagging 3.0.0?19:03
sdake_git clone http://github.com/openstack/kolla19:03
sdake_vhosakot this needs to be fixed before tagging19:03
sdake_the altnerative is I add a big ugly release note saying in all caps "UPGRADING ON UBUNTU WILL CRATER YOUR SYSTEM."19:04
sdake_and you can be guranteed it will be added19:04
sdake_tools/kolla-ansible upgrade (from your git repo)19:04
*** AJaeger has joined #openstack-kolla19:04
sdake_after building stable/newton images of course19:04
openstackgerritAndrew Widdersheim proposed openstack/kolla: Add node_custom_config example to globals.yml  https://review.openstack.org/38816919:05
vhosakotJeffrey4l: what is the current permission of keepalived logs (other than heka:kolla) ?19:05
sdake_vhosakot get your env setup - let Jeffrey4l work the problem for now19:05
vhosakotsdake_: ok, I will start now... need to create the VM... get the env setup.. I cleaned up 4 days ago.19:05
Jeffrey4lshould be a uid/gid number after upgrade.19:05
sdake_vhosakot shouldn't tkae more then 15 mins to deploy mitaka19:05
openstackgerritAndrew Widdersheim proposed openstack/kolla: Update globals.yml Docker registry example notes  https://review.openstack.org/38816719:05
sdake_my laptop has 8gb ram19:06
sdake_i can't do ubuntu vm testing on it19:06
*** AJaeger has left #openstack-kolla19:06
Jeffrey4lsdake_, fyi, haproxy and keepalived are the same story now. their logs are both collected by haka syslog socket19:07
sdake_so just a json fix then?19:07
Jeffrey4lyes.19:07
sdake_cool can you make it happen - perhaps bjolo__ can test19:07
Jeffrey4lworking on it.19:07
bjolo__will do19:08
sdake_bjolo__ recomend getting mitaka 2.0.2 back on your system in a clean state19:08
Jeffrey4li am curiosity why the group is kolla rather then heka.19:08
vhosakotbjolo__: you hvae ubuntu 14.04 or 16 (xenial)?19:08
bjolo__in progress already19:08
bjolo__latest19:08
bjolo__whatever that means19:08
bjolo__1404 mitaka 1604 newton19:08
bjolo__host os is centos 719:08
vhosakotbjolo__: cool.. I have same.. 14.04 for mitaka and 16.04 newton.. cool19:09
vhosakotI'll ping once my env is ready19:09
bjolo__need to ride home, back online in 1h19:09
bjolo__mitaka deploy is running in the meantime19:10
sdake_inc0 need your help here dude, your the only one with a working ubuntu system19:10
sdake_we really dont want that big all caps release note19:11
sdake_but we absolutely have to tag today19:11
sdake_inc0 you have 5 days to work on slides19:11
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix wrong log permission for services collected through syslog  https://review.openstack.org/38818219:12
piaccarinoHaving keystone-fernet deploy issue with master - http://pastebin.com/S3UbEheQ19:12
Jeffrey4lsdake_, bjolo__ vhosakot here is the fix https://review.openstack.org/38818219:13
vhosakotJeffrey4l: ah ok, the needs the right recursive permission.. cool19:13
sdake_Jeffrey4l what is the swift part about19:13
vhosakotI'll keep you guys posted... starting now19:13
piaccarinorhel7/mitaka in 3.0.0 containers19:13
Jeffrey4lsdake_, the same story with haproxy and keepalived.19:14
sdake_piaccarino how do you ahve mitaka in 3.0.0 containers19:14
sdake_master is msater of openstack19:14
Jeffrey4lit is collected through syslog, and wrote through heka. so should be ownned by heka.19:14
sdake_piaccarino if you want to use something ,try out stable/newton19:14
sdake_Jeffrey4l ack19:15
sdake_vhosakot how long does it take you to get your env setup19:16
sdake_it takes 2 hours for the patches to merge and be backported19:16
vhosakotsdake_: I am not creating the ubuntu 14 VM, then, need to deploy mitaka from scracth19:16
sdake_so really we are working against a 3pm deadline19:16
vhosakotsdake_: it is 3:16 here in east coast :)19:17
sdake_vhosakot note the instructions are changed19:17
sdake_vhosakot 2200UTC19:17
sdake_vhosakot since possibly the last time you deployed kolla19:17
vhosakotsdake_: yeah yeah.. I'm referring the least QSG19:17
vhosakots/least/latest19:17
inc0sbezverk, qq - we deploy HA on L3 agents right?19:18
inc0in kolla-k8s?19:18
inc0vrrp works well?19:18
*** daneyon_ has joined #openstack-kolla19:20
*** goldyfruit has quit IRC19:23
kfox1111inc0: doing vvrp for the control ip. but haven't played much with nuetorn ha yet.19:23
kfox1111inc0: ideally, we'd be enabling l3ha+dvr in neutron.19:24
kfox1111I'm going to attempt it at some point, but haven't gotten there yet.19:24
kfox1111we only use dvr currently on one of our production clouds.19:24
*** daneyon has quit IRC19:24
kfox1111and use pacemaker to fail over the nn.19:24
kfox1111looking at some of the summit stuff, the l3ha stuff shoudl fail over much quicker though, so we want to enable that too.19:25
inc0kk19:25
kfox1111at the time though, we only had the option of one or the other, and scalability was the more important of the two.19:25
kfox1111so we went with dvr.19:25
piaccarinosdake_ Have a need for the node_custom_config and didn't want to fork so we worked rhel7/osp9 into 3.0.0 with a little help from some rdo packages.  3.0.0.0rc1 and forward have the same fernet issue.  Going to try an all-in-one centos/newton to see if it is just me.19:28
kfox1111sdake_: inc0 hows the patch queue looking? how close to release are we?19:28
inc04.5 hrs19:29
kfox1111k.19:29
kfox1111I' just kicked off another gate run.19:29
kfox1111last one passed ok.19:29
sbezverkinc0: if you refer to keepalived then it runs on controllers19:29
sbezverkother than that I am not aware of any HA19:30
inc0well, neutron has it's own vrrp19:30
inc0l3 agents19:30
kfox1111inc0: yeah, when l3ha is configured.19:30
kfox1111we're not configuring it.19:30
inc0btw I also heard that shared /run/netns has issues with k8s..any ideas about that?19:30
sdake_kfox1111 kolla-kubernetes has already been tagged19:30
sbezverkstill waiting for fix19:30
inc0and we don't have dvr yet right?19:31
kfox1111inc0: yeah, I think that still is an issue.19:31
sdake_inc0 we fixed that19:31
kfox1111inc0: I've committed dvr support, but its not currently tested.19:31
Jeffrey4luse /run:/run:shared for all container will fix this issue.19:31
kfox1111sdake_: ok. just testing kolla-kubernetes against kolla trunk. just wana make sure the release works.19:31
sbezverkkuberentes still do not support it, we are tracking bug on kube side19:32
sbezverkbut it is going really really slow19:32
rhalliseykfox1111, ya it's already been tagged19:32
kfox1111sbezverk: I'm needing it for cvmfs for another project too. if it doesn't land soon, I'm going to have to implement it myself anyway.19:32
sbezverkkfox1111: let's learn go ;-)19:33
kfox1111rhallisey: ok. I think its kind of doa anyway, so doesn't really matter to me if we tag it or not.19:33
sbezverkunless you already know it19:33
kfox1111sbezverk: been using go since 0.9 :)19:33
kfox1111or should I say, :(19:33
rhalliseyya it doesn't matter19:33
kfox1111its better now... its wasn't so good then.19:33
sbezverkkfox1111: cannot comment on go, have not used it, but I really like the quality of kube code so far..19:34
kfox1111sbezverk: yeah. go's pretty nice in a lot of ways.19:35
kfox1111kind of an odd mix between c and python.19:35
kfox1111but less of an identiy crisis then c++.19:35
sbezverkkfox1111: when you have time please check fencing pod latest version. I think it does now what we have discussed recently..19:35
kfox1111k19:36
*** awebber has quit IRC19:36
*** mliima__ has joined #openstack-kolla19:36
*** mliima has joined #openstack-kolla19:39
*** goldyfruit has joined #openstack-kolla19:40
*** mliima_ has quit IRC19:40
*** mliima has quit IRC19:41
*** mliima__ has quit IRC19:41
sdake_bjolo__ inc0 vhosakot this is the reproducer i used: https://bugs.launchpad.net/kolla/+bug/163440119:44
openstackLaunchpad bug 1634401 in kolla newton "upgrade from 2.0.2 to 3.0.0 with VM running on BTRFS STILL BROKEN" [Critical,Fix committed] - Assigned to Jeffrey Zhang (jeffrey4l)19:44
sdake_that bug hs been fixed for centos19:44
sdake_however the reproduction steps should produce the problem jeffrey4l reported19:45
vhosakotsdake_: ah ok, I'll read the steps19:45
sdake_rather bjolo__ reported and Jeffrey4l fixed19:45
sdake_we are oging to have more problems then just thi sone19:45
sdake_need devs focused on this19:45
sdake_or we cut ubuntu from the upgrade process19:46
inc0or we cut btrfs from it19:46
inc0I'm trying upgrade with overlay19:46
sdake_inc0 - that PROBLEM HAS BEEN FIXED19:46
sdake_dude, did you not read the scrollback19:47
sdake_inc0 - bjoolo reported perm denied in heka container19:47
*** haplo37 has quit IRC19:47
sdake_that bug however contains step by step instructions to upgrade19:47
inc0ok, I have mitaka deployed now I need to get newton up, hold on19:47
sdake_make sure to pull fresh stable/newton nad rebuild19:47
sdake_over 30 patches merged last night19:47
*** g3ek has quit IRC19:47
*** dwalsh has quit IRC19:47
inc0I reset every day19:48
Jeffrey4l+ my patch ;)19:48
Jeffrey4lhttps://review.openstack.org/38818219:48
sdake_ya - run jeffrey's patch on top19:48
*** daneyon has joined #openstack-kolla19:48
kfox1111sdake_: inc0: most recent test still passing.19:48
inc0unfortunately my dev env is misbehaving lately19:48
Jeffrey4lrun this on newton branch      git fetch https://git.openstack.org/openstack/kolla refs/changes/82/388182/1 && git cherry-pick FETCH_HEAD19:49
sdake_A I O19:49
*** daneyon_ has quit IRC19:50
sdake_kfox1111 that is a good sign and works becausae you dont' use heka19:51
* kfox1111 nods19:51
*** gfidente|afk is now known as gfidente19:52
sdake_Jeffrey4l aery ou trying deploy all on my gear?19:52
Jeffrey4lsdake_, yep.19:52
sdake_cool19:52
sdake_when you get done let me know19:52
sdake_i am going to wipe one of the boxes and attempt to install ubuntu on it19:53
Jeffrey4lroger. need reboot node3.19:53
Jeffrey4lis it OK?19:53
sdake_even though that is a huge pain for me19:53
*** g3ek has joined #openstack-kolla19:53
sdake_reboot away19:53
inc0so you don't need to install ubuntu19:53
*** haplo37 has joined #openstack-kolla19:53
inc0you shouldn't19:53
inc0but you can19:53
sdake_inc0 are ou able to repair your dev env19:55
inc0testing on it as it is19:55
inc0it's fleaky but should work19:56
inc0at least for issue you mention19:56
*** awebber has joined #openstack-kolla19:56
inc0my vms are just super slow19:56
inc0for some reason19:56
inc0heka upgraded19:57
sdake_`did you follow the procedure in https://bugs.launchpad.net/kolla/+bug/163440119:58
openstackLaunchpad bug 1634401 in kolla newton "upgrade from 2.0.2 to 3.0.0 with VM running on BTRFS STILL BROKEN" [Critical,Fix committed] - Assigned to Jeffrey Zhang (jeffrey4l)19:58
inc0no because I don't run btrfs, and you mentioned different issue19:59
inc0also you linked it when I was well into testing19:59
inc0so I'll rerun it later19:59
inc0but for now upgrade is super slow for some reason19:59
*** portdirect has quit IRC20:00
inc0Jeffrey4l, serial seems to be slowing things down a lot isn't i?20:00
inc0I mean more than it should20:00
Jeffrey4lyes.20:00
Jeffrey4lit should so slowing.20:01
Jeffrey4lwhen you have 3 nodes. serial will run task one node by another.20:02
jascott1When I try to run ./tools/setup-resolv-conf.sh I get an error about the service account not being created. Grepd in both repos but cant find where that is created. Anyone know where that is?20:02
jascott1I think I must have missed a step20:04
*** portdirect has joined #openstack-kolla20:05
inc0nope it's vm issue20:06
*** dwalsh has joined #openstack-kolla20:07
*** dave-mccowan has quit IRC20:09
*** ssurana has quit IRC20:10
bjolo__back online20:13
*** confisurya has joined #openstack-kolla20:14
bjolo__hmm mitaka heat deploy failed again. but never mind that today20:15
*** ppalacios has quit IRC20:17
*** confisurya has quit IRC20:19
bjolo__Jeffrey4l, just so i got it correct. you want me to cherrypick this ps https://review.openstack.org/38818220:26
hogepodgeok, so I have my installation up and running, almost everything is happy20:26
Jeffrey4lyes.20:26
Jeffrey4lrun this on newton branch      git fetch https://git.openstack.org/openstack/kolla refs/changes/82/388182/1 && git cherry-pick FETCH_HEAD20:26
Jeffrey4lthen run upgrade.20:26
bjolo__gotcha. no time for missunderstandings :)20:26
hogepodgeI have one service that is misconfigured by default, as simplified example say [Default] service_id=name is set in the conf file20:27
hogepodgeUsing the merge conf method, I know I can add a configuration, say [Default] service_name=name20:27
hogepodgebut how can I unset the bad variable? so service_id isn't part of the configuration any more?20:27
Jeffrey4lservice_id =20:28
hogepodgethat's easy. thanks :-D20:28
hogepodgefwiw, it's a bad configuration with Magnum20:28
hogepodgehttps://ask.openstack.org/en/question/94509/magnum-commands-return-error-not-authorized/20:29
*** jheroux has joined #openstack-kolla20:32
*** eaguilar has quit IRC20:46
*** jheroux has quit IRC20:51
*** ayoung has joined #openstack-kolla20:51
*** eaguilar has joined #openstack-kolla20:53
*** msimonin has joined #openstack-kolla20:58
inc0do we look at ubuntu not possible to build issue?20:58
bjolo__Jeffrey4l, sdake_ seem like we have a winner. upgrade works for ubuntu :)20:58
Jeffrey4lwoow bjolo__20:58
Pavoevening gents20:59
inc0Jeffrey4l, reviewed20:59
Jeffrey4lthanks.21:00
bjolo__sdake_, inc0 Jeffrey4l anything else you want me to test out?21:00
Jeffrey4lneed another cr https://review.openstack.org/38818221:00
inc0sdake_, ^21:00
Jeffrey4lbjolo__, enable all kolla supported service on newton in ubuntu21:00
bjolo__ok21:01
Jeffrey4lthanks.21:01
Pavoquestion21:01
bjolo__we know that lbaas vpnaas wont work for source21:01
Jeffrey4lyes. disable them.21:01
Pavohow does provider networks with vlans work with kolla network design?21:01
*** eaguilar has quit IRC21:02
inc0Pavo, so you'll need to write config override for neutron21:02
Pavoto include vlans correct21:02
Pavoin nova.conf21:03
inc0neutrons api-paste.ini if my memory serves21:03
inc0you need to specify provider21:03
*** vhosakot has quit IRC21:06
*** awiddersheim has quit IRC21:07
sdake_hey cats sorry important meeting21:07
sdake_so i see bjolo__ has victory21:07
Jeffrey4lsdake_, i enabled almost all service on node3 and all container works except for congress.21:08
Pavocurrently with packstack we use CONFIG_NEUTRON_ML2_TENANT_NETWORK_TYPES=vlan21:08
sdake_Jeffrey4l - do we need some backports?21:08
sdake_Jeffrey4l ok - what part of congress doesn't work21:08
Jeffrey4li am running reconfiguration now.21:08
Jeffrey4lall congress containers.21:08
Jeffrey4lseem wrong configuration.21:08
sdake_ok - release note21:08
Pavoand we use CONFIG_NEUTRON_ML2_TYPE_DRIVERS=vxlan, local, flat, vlan21:09
Jeffrey4lre backport, of curse.21:09
Pavoso wouldn't those settings be in the ml2.ini21:09
sdake_Jeffrey4l your patch that got bjolo working - is it merged?21:09
Jeffrey4lsdake_,  https://review.openstack.org/388182 need +221:09
Jeffrey4l+w21:09
*** jtriley has quit IRC21:10
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix wrong log permission for services collected through syslog  https://review.openstack.org/38821721:11
dmsimardOh wow, who implemented ARA in Kolla? http://logs.openstack.org/82/388182/1/check/gate-kolla-dsvm-deploy-centos-binary-centos-7-nv/4f7a926/logs/playbook_reports/21:11
bjolo__Jeffrey4l, http://paste.openstack.org/show/586278/21:11
Jeffrey4lcool.21:12
Pavowhere in the docs can I find how to customize certain settings for the services?21:12
Jeffrey4li didn't enable neutron_qos and agent_ha and dvr.21:12
inc0Pavo, http://docs.openstack.org/developer/kolla/advanced-configuration.html#openstack-service-configuration-in-kolla21:12
sbezverkjascott1: service account get created when you install kube, afaik kolla-kubernetes is not creating it..21:13
Pavothanks inc021:13
jascott1sbezverk thanks I will check it out21:14
dmsimardJeffrey4l: Hey, thanks for https://review.openstack.org/#/c/368345/ ! Please let me know if you have any questions about ARA.21:15
*** LamT__ has quit IRC21:15
Jeffrey4ldmsimard,  thanks for the cool tool ;)21:16
*** LamT__ has joined #openstack-kolla21:16
*** wirehead_ has quit IRC21:16
*** dwalsh has quit IRC21:16
dmsimardJeffrey4l: I'm planning to attend the kolla CI work session, hopefully we can chat there :)21:17
Jeffrey4lnice.21:17
sdake_Jeffrey4l did you try  reconfigure on all services?21:17
Jeffrey4lsdake_, it is running21:17
Pavook so found the settings that needed to be customizes21:17
*** bachp has quit IRC21:17
openstackgerritMerged openstack/kolla: Fix wrong log permission for services collected through syslog  https://review.openstack.org/38818221:18
Pavoits /etc/neutron/plugins/ml2/ml2_conf.ini21:18
*** hyakuhei has quit IRC21:18
Jeffrey4lbtw, could ara can log the variable passed though -e parameter? it is hard to distinguish which playbook it is now.21:19
Jeffrey4lhttp://logs.openstack.org/82/388182/1/check/gate-kolla-dsvm-deploy-ubuntu-source-ubuntu-xenial-nv/a4714de/logs/playbook_reports/21:19
Jeffrey4ldmsimard, ^^21:19
*** hyakuhei has joined #openstack-kolla21:19
*** hyakuhei has quit IRC21:19
*** hyakuhei has joined #openstack-kolla21:19
*** hyakuhei has quit IRC21:19
*** hyakuhei has joined #openstack-kolla21:19
dmsimardJeffrey4l: -e, like --extra-vars you mean ?21:20
*** sdake has joined #openstack-kolla21:20
Pavoso if I put a custom  /etc/neutron/plugins/ml2/ml2_conf.ini inside /etc/kolla/config/neutron/plugins/ml2 and rebuild neutron images it should use that custom config correct?21:20
Jeffrey4lyes.21:20
Jeffrey4lkolla is using -e for different jobs.21:20
*** wirehead_ has joined #openstack-kolla21:20
openstackgerritSteven Dake proposed openstack/kolla: Fix wrong log permission for services collected through syslog  https://review.openstack.org/38821721:20
Jeffrey4llike -e action=pull   and  -e action=deploy21:20
dmsimardJeffrey4l: I'd like to say yes but I need to double check if ara has access to that.21:20
*** bachp has joined #openstack-kolla21:21
Pavoinc0?21:21
dmsimardI'll go ahead and open up an issue about it so I don't forget.21:21
inc0Pavo, no need to rebuild21:21
Jeffrey4lcool. thanks.21:21
inc0deploy or reconfigure will work21:21
Pavooh21:21
Pavonice21:22
*** sdake_ has quit IRC21:22
Pavoso I take it that the docker container for neutron uses /etc/kolla/config/<< service name >>/ for persistent storage21:22
inc0it's more complicated than that21:23
*** MarMat has quit IRC21:23
inc0basicaally what happends is that container bind a directory from host21:23
inc0default being /etc/kolla21:23
Pavoroger21:23
dmsimardJeffrey4l: I think we don't do much around variables in general right now (extra vars, or from defaults) so that'd be an area for improvement. Extra vars are sort of easier because they're at the top of the variable hierarchy and are "immutable" but other variables are sort of dynamically compiled as they run (and can be different for each host). It'll require some thinking to do this right.21:24
*** MarMat has joined #openstack-kolla21:24
inc0in this directory on host configs sits21:24
inc0that kolla generates21:24
dmsimardJeffrey4l: good feedback, thanks :)21:24
inc0then when containers start it will look into it and copy contents to /etc/neutron21:24
Pavoon the host that is set in globals for that role right21:24
inc0well globals, overrides, template21:24
inc0pretty much all the stuff gets into config generation21:24
openstackgerritSteven Dake proposed openstack/kolla: Congress doesn't deploy release note  https://review.openstack.org/38822221:25
sdakeJeffrey4l inc0 ^^21:25
PavoI mean if I have set network role on computenode1 host it will use /etx/kolla/config directory on that host to put the service configs21:25
sdakenote the reason i didn't use an url is i don't know how it will render21:26
inc0sdake, do we really need to put this into release note?21:26
sdakeunclear21:26
sdakeit is only a high severity bug21:26
inc0this is exactly why we need support matrix21:27
inc0well if you want it there, it's going in. I'll ack it21:27
sdakewe need lots of things21:27
sdakei dont know tbh21:27
sdakeif it was critical then yes21:27
sdakewe probably ahve a few services busted21:28
sdakei did release note that performance monitoring stack is subject tochange without notice ;)21:28
sdakelets wit until Jeffrey4l either passes out at his keyboard or gives us the a-ok on reconfigure21:29
sdakeand then i'll tag it21:29
sdakelooks like release note was acked21:29
Jeffrey4lfyi, bjolo__ is testing all services on ubuntu21:29
sdakeso i guess we are going with it :)21:30
*** neilus has quit IRC21:30
sdakeJeffrey4l define testing all services21:30
sdakeyou mean testing that they deploy?21:30
bjolo__doing the ubuntu source build atm21:30
bjolo__sdake, yes21:31
inc0anyone seen this? http://paste.openstack.org/show/586282/21:31
*** neilus has joined #openstack-kolla21:31
inc0my compute nodes behaves like that oO21:31
sdakeinc0 i have seen that on my ucs gear that sbezverk is running in kubneretes21:31
*** neilus has quit IRC21:32
sdakeinc0 run dmesg21:32
sdakeit will give out he kerne loops21:32
*** neilus has joined #openstack-kolla21:32
inc0I cant get to vm21:32
sdakeyour vm has 24 processors?21:32
sdakeoh i guess thats 821:33
sdakebeen up far too long21:33
Pavook cool think I found all the files I need to customize21:33
inc0host its on is about that21:33
inc0fuck I need more predictible testbed21:34
sdakerun centos? :-)21:34
Jeffrey4lsdake, wait. shouldn't the releasenote be merged into newton branch?21:34
Jeffrey4ldo what i did. but on ubuntu.21:34
sdakeJeffrey4l yes it should21:34
Pavobtw sdake might see ya at cloudnativecon, asked today and was told its a good idea for us to have a few people there21:34
*** daneyon has quit IRC21:34
sdakenice21:34
*** Jeffrey4l has quit IRC21:34
*** haplo37_ has quit IRC21:34
*** Jeffrey4l has joined #openstack-kolla21:35
Pavoinc0 what days is that Atlanta conference, can you PM me all the details?21:35
*** neilus has quit IRC21:35
Pavowanna have a few people come to that also21:35
Jeffrey4lroute is rebooted at 5:30 am every day.  what i miss?21:35
Pavoeverything!!!! Jeffrey4l21:35
Pavo:P21:35
inc0Pavo, The first Project Teams Gathering (PTG) will be held in Atlanta, Feb 20-24, 2017.21:36
sdakeJeffrey4l wiating for release note to hit the repo21:36
sdakeand your last patch21:36
sdakeand an ack from you and bjolo21:36
Pavoinc0 thanks21:36
Jeffrey4lsdake, wait. shouldn't the releasenote be merged into newton branch?21:36
sdakeJeffrey4l once release note hits the repo - it needs backport21:37
Pavoand this is specifically Kolla PTG correct?21:37
sdakepavo its all ptgs21:37
sdakebut kolla willbe there21:37
inc0it's all of openstack21:37
Pavoah ok21:37
*** haplo37_ has joined #openstack-kolla21:37
sdakesome big tent projects21:37
sdakenot all21:37
inc0well ok21:37
Jeffrey4lbut is it will be remove in O if congress is OK?21:37
sdakeJeffrey4l we cn backport congress bug fixes21:37
Jeffrey4lreconfigure is done with success. wow21:38
sdaketake awhile?21:38
sdakeor surprised it worked :)21:38
Jeffrey4lyes. it works ;)21:39
Jeffrey4li also made some change ( change openstack_logging_debug from False to True )21:39
sdakeok ship it21:39
sdakeidon tthin kwe want to change that default21:40
Jeffrey4lsdake, this is not merged https://review.openstack.org/38821721:40
sdakeJeffrey4l i know - wiating on gates to merge them into repo21:40
sdakethen will cherrypick21:41
sdakethen another wait21:41
sdakethen tag21:41
Jeffrey4lthis is my patch for heka fix.21:41
Jeffrey4lit is cherry pick already.21:41
sdakeoh cool21:41
sdakeJeffrey4l i've been up about 20 hours longer then you :)21:41
sdakei'm barely functional atm21:42
Jeffrey4lreally no... i have been up around 22 hours ;)21:42
sdakei've been up since monday 5am21:42
sdakealthough i think i nodded off for a couple hours last night21:43
Jeffrey4llol21:43
sdakedeath at the keyboard21:43
Jeffrey4lneed get some sleep. night sdake21:45
sdakethanks Jeffrey4l21:45
sdakeyou rock as usual ;)21:45
sdakeprobably take some time for a couple days to recover before summit ;-)21:45
Jeffrey4lprobably not. still have company stuff  ;(21:46
sdakeok well 3.0.0 has wings21:46
Jeffrey4lanyway. 3.0.0 is released finally, stable and full of new feature ; )21:47
sdakenot released21:47
sdakewe release rc3 today21:47
sdakethen in a coupl edays the release team tags 3.0.0 from rc321:47
*** portdirect has quit IRC21:48
Jeffrey4li know. but rc3 and 3.0 are almost the same ;)21:48
sdakeshould be identical21:48
Jeffrey4lyes.21:48
inc0one more bug to fix tho21:49
sdakewhich one21:49
inc0not being able to build ubuntu is bad21:49
sdakewho can't build ubuntu21:49
Jeffrey4linc0, logs?>21:49
sdakethe gate builds it all the time21:49
Pavomeah ubuntu sucks anyways21:49
Pavo:P21:49
sdakemaster may not build21:49
sdakebut stable/newton does21:49
Jeffrey4lmaster is OK too, now.21:49
sdakepavo++21:49
inc0hmm...mariadb failed to build21:50
Pavolol21:50
Jeffrey4linc0, log log21:50
openstackgerritJeffrey Zhang proposed openstack/kolla: DO NOT MERGE: TEST MASTER BRANCH  https://review.openstack.org/32630721:50
bjolo__inc0, i had the same issue earlier today21:50
sdakebjolo__ how did you fix that btw21:50
*** portdirect has joined #openstack-kolla21:50
Jeffrey4lgo to bed. bye guys ;)21:51
Pavonight Jeffrey4l21:52
inc0http://paste.openstack.org/show/586285/21:52
inc0nite Jeffrey4l21:52
sdakeINFO:kolla.image.build.mariadb:E: There were unauthenticated packages and -y was used without --allow-unauthenticated21:53
bjolo__sdake, added --no-install-recommends to kolla/template/methods.py21:53
bjolo__ah21:53
bjolo__err21:54
inc0yeah but thats really bad for security21:54
bjolo__yes21:54
bjolo__only as a workaround21:54
bjolo__added the allow-unsigned-packages21:54
inc0and gates work because we have mirrors21:55
bjolo__or whatever that flag was21:55
bjolo__its gone now21:55
inc0I guess we need to wait till percona solves it21:55
inc0yay for repos21:55
sdakecan we special case percona21:55
inc0I don't think so21:55
sdakeinstall it first via run cmd?21:56
inc0I don't want to even21:56
sdakeand --allow-unahtenticated?21:56
inc0unless you want to put security deep into...21:56
inc0it's invitation for spoofing the packages21:56
sdakewe are already pulling from percona.com21:56
inc0for what we know someone could hack into pecrona.com21:56
inc0and setup package with rootkit in it21:57
sdakeright21:57
sdakei think correct answer here is to trust their packages as is21:57
sdakeeven though they may not be signed (is that what the problem is?)21:57
inc0it apeared today21:57
sdakeand fix in a z stream21:57
inc0I hope they'll fix it soon21:57
openstackgerritMerged openstack/kolla: Fix wrong log permission for services collected through syslog  https://review.openstack.org/38821721:58
sdakei think releasing something that is ubuntu doa is not good21:58
sdakeworse then a hack on percona and spoofed unsigned packages21:59
sdakeare we sure the packages are unsigned21:59
sdakemaye they just changed their sign key21:59
dmsimardWhat do you guys install straight from percona repos ?22:00
dmsimardDo you use xtradb or something ?22:00
dmsimardThe mariadb provided by Ubuntu or RDO is not sufficient ?22:01
sdakeyes xtradb22:01
sdakewhatever the hell that does22:01
dmsimardxtradb is the clustering bit iirc, sort of like galera22:01
sdakesomeone told me once22:01
sdakeand i forgot22:01
sdakewe already have galera22:01
dmsimardxtradb sounds like an odd, very opinionated choice :)22:02
sdakewe are not removing percona at last minute22:02
dmsimardyeah, just saying.22:02
sdakealthough i want to remove it22:02
sdakei've wanted to for a year22:02
sdakebut I dont know how22:02
openstackgerritMerged openstack/kolla: Congress doesn't deploy release note  https://review.openstack.org/38822222:03
sdakehttp://www.openstack.org/analytics22:04
sdakehttp://www.openstack.org/analytics22:04
sdakehttp://www.openstack.org/analytics22:04
sdakewoops22:04
sdakecheck that link out22:04
jascott1sbezverk im getting this error trying to run tools/setup-resolv-conf.sh22:06
jascott1service account kolla/default was not found, retry after the service account is created22:06
*** bmace has joined #openstack-kolla22:10
openstackgerritSteven Dake proposed openstack/kolla: Congress doesn't deploy release note  https://review.openstack.org/38823722:11
sdakeJeffrey4l can you ack https://review.openstack.org/#/c/388237/22:12
sdakeinc0 can you ack https://review.openstack.org/#/c/388237/22:12
sdakeanyone else around such as rhallisey?22:12
Pavohow do I ack?22:13
sdakepavo you can't22:14
Pavoopps22:15
Pavo:)22:15
Pavomybad I did a +122:16
sdakeoh you can do that if you like22:16
sdakein0 - so whats the plan on ubuntu22:17
sdakeinc022:17
sdakeno plan?22:17
sdakeinc0 maybe the keys in the bsae file are wrong?22:17
sdakeI dont know anything about ubuntu22:17
sdakeso kolla at 16% of interest level of deployments of eval22:18
sdakeof 450 operators with openstack clouds22:18
sdake= winning ! :)22:18
inc0keys got revoced22:19
inc0revoked22:19
sdakefrieghentning22:19
inc0we need to get new one22:19
sdakehow does one go about doing that22:19
rhallisey22:20
rhallisey22:20
rhallisey22:20
sdakelet pavo submit the change22:20
rhallisey22:20
sdakeoh there is rhallisey  :)22:20
rhallisey22:20
rhallisey22:20
rhalliseyyo22:20
rhalliseywo22:20
inc0it has to be backported to both newton and mitaka22:20
sdakerhallisey rubber stamp https://review.openstack.org/#/c/388237/22:20
inc0or even liberty22:20
sdakeok well lets focus on master and newton for the moment22:20
rhalliseyeasy22:21
rhalliseysdake, did they release the interest already?22:21
rhalliseylink?22:21
sdakehttp://www.openstack.org/analytics22:21
sdakewe wer eat 7% in oct ;-)22:21
sdakei can live with 100% growth in one cycle ;-)22:22
Pavothats actually pretty good compared to others22:22
inc0yeah, wait for this summit22:22
sdakeyup doubles every summit22:22
bjolo__kolla is the best ops tool out there22:23
sdakethanks bjolo__22:23
sdakeits still imperfect but pretty close :)22:23
Pavomaybe it would be possible to add the ml2 settings to globals instead of using a custom ini file22:23
bjolo__trust me, ive hacked around and tried most of them22:23
bjolo__kolla is still a little rough and missing some stuff in my view, but overall and compared to the competition it rocks22:24
sdakebjolo__ roger that22:24
*** dave-mccowan has joined #openstack-kolla22:25
sdakemissing docs for sure22:25
bjolo__im working on about 5-6 blueprints for the summit22:25
sdakedave-mccowan http://www.openstack.org/analytics22:25
bjolo__to add some operator features22:25
sdakeinc0 working on this key thing or do I need to learn ubuntu :)22:26
bjolo__ok ubuntu source deploy with all services enabled in progress22:26
inc0sdake, working on it22:27
sdakeinc0 cool thx :)22:27
openstackgerritOpenStack Proposal Bot proposed openstack/kolla: Updated from global requirements  https://review.openstack.org/38762822:30
sdakethat needs to merge as well22:32
sdakewondering when the bot would get around to our repo22:32
inc0sdake, https://review.openstack.org/38820522:33
bjolo__keystone fernet failed22:34
awebberin terms of the kolla-kubernets multi-server guide, is there any information on "continuing" the installation - deploying neutron and nova etc.?22:34
bjolo__http://paste.openstack.org/show/586291/22:34
awebberi was successfull in deploying the minimal services22:34
bjolo__sdake, ^^22:34
*** dave-mccowan has quit IRC22:34
*** msimonin has quit IRC22:35
hogepodgesdake: Have you run into this problem, where a reconfigure runs this task on non-storage nodes and fails? https://github.com/openstack/kolla/blob/master/ansible/roles/ceph/tasks/start_osds.yml#L2322:36
sdakebjolo__ no idea22:37
sdakekfox1111 - any chanceyou could naswer hogepodge 's q?22:37
sdakehogepodge i haven't seen it personally no - and hasn't been recorded22:37
sdakebjolo__ actually have an idea22:38
sdakebjolo__ when did you build images?22:38
bjolo__just now22:38
*** rhallisey has quit IRC22:39
sdakegit you git pull first?22:39
sdakegit pull --rebase that is22:40
sdakebjolo__ a change merged today that introduced some fernet magic22:41
sdakewhich may get you going22:41
kfox1111sdake: haven't played much with kolla ceph yet. just enough to get a single node cluster running in k8s using the kolla containers for testing.22:41
sdakekfox1111 yes but you understand the code22:41
kfox1111barley/sort of. :)22:42
kfox1111Once this outage is complete, I can try and look though.22:42
bjolo__just checked. only diff since my build was the "Fix wrong log permission for services collected through syslog"22:42
hogepodgeI found a workaround (I just added the node to the ceph cluster), but I'll file a bug. It's not a critical blocker for me.22:42
kfox1111hogepodge: oh, good.22:43
*** janem has joined #openstack-kolla22:43
bjolo__let me sanitize my env and try to deploy again22:43
sdakehogepodge thanks for the bug report - we have plenty of those ;)22:43
sdakebjolo__ sure you pushed the rebuild images?22:43
bjolo__yes22:43
bjolo__fresh tag for the latest build22:44
sdakebjolo__ do you have bedca5b35e8f9336182d5588d5650c1bb068270222:44
sdakein your repo22:44
sdakeand run pip show kolla22:44
bjolo__yes got it22:45
sdakebjolo__ - rather do you have 9cc3795b19e29d3400f09ec1708d0a889db4eaae22:46
sdakebjolo__ did you run git checkout stable/mitaka?22:46
sdakethat fernet patch should be righton otp22:46
bjolo__got it22:46
sdakegot what? :)22:46
sdakesorry speak with people that say got it all day long  -not sure what they got :)22:47
*** gfidente has quit IRC22:47
sdakeok guys if i stay at my keyboard any longer i am going to probably be dead soon22:47
sdakeso I am taking a two hour powernap22:47
sdakeplease try to get the stuffs merged22:48
bjolo__you want me to pip install kolla?22:48
bjolo__ive been runing from git stable/newton22:49
openstackgerritMerged openstack/kolla: Congress doesn't deploy release note  https://review.openstack.org/38823722:49
bjolo__got the commit in my build git22:49
sdakebjolo__ run pip show kolla22:51
openstackgerritMichal Jastrzebski (inc0) proposed openstack/kolla: Fix mariadb build issue  https://review.openstack.org/38824922:51
bjolo__nothing since i dont have pip installed kolla22:52
bjolo__is that what you wanted to check?22:52
openstackgerritOpenStack Proposal Bot proposed openstack/kolla: Updated from global requirements  https://review.openstack.org/38762822:52
bjolo__hold on22:53
bjolo__could be my deploy git that was behind22:53
* bjolo__ getting sleepy eyes22:53
bjolo__sdake, probably my fault. new deploy runing22:55
sdakebjolo__ i'm beat too if it makes you feel better :)22:57
bjolo__tnx :)22:57
inc0any core up? I need ack on ^22:59
openstackgerritMichal Jastrzebski (inc0) proposed openstack/kolla: Fix mariadb build issue  https://review.openstack.org/38825222:59
sdakeinc0 try calling ryan22:59
sdakeinc0 us coverage is pretty bad during this time of hour22:59
sdakewe need another core reviewer in this tz22:59
inc0and Jeffrey4l probably passed out23:00
inc0sdake, can we push tag for tomorrow?23:00
inc0unless we want unbuildable ubuntu23:00
inc0or we just break rules and ack it with one +223:00
sdakeno23:01
sdakewe cna't push tag tomorrow23:01
*** awiddersheim has joined #openstack-kolla23:01
sdakeinc0 do you have ryan's phone #23:01
sdakei've got it but my phone is out of juice23:01
inc0yeah let me call him23:01
*** eaguilar has joined #openstack-kolla23:02
bjolo__deploy has passed keystone fernet now :)23:03
sdakebjolo__ nice23:03
sdakeso old images :)23:03
bjolo__no23:03
sdakedifferent problem?23:03
bjolo__missed the latest commits in my git im doing the deploy from23:03
inc0sdake, https://review.openstack.org/#/c/388252/23:04
inc0this one is for newton23:04
inc0Ryan will ack them when he gets out of car:)23:04
sdakebjolo__ while your deploying - can you build with the first review mariadb23:04
sdakedont push just build23:05
sdakewell i gotta say that was painful :)23:05
sdakewe probably have a slew of bugs to fix for 3.0.123:05
inc0charlie foxtrot23:05
sdakebut overall everything seems to work23:05
bjolo__ok23:05
inc0good that mariadb broke today not tomorrow23:06
sdakebjolo__ make sure not to pull that last review23:06
sdakethat will blow up your repo23:06
sdakepull the othe one for master inc0 posted23:06
inc0sdake, https://review.openstack.org/#/c/388252/1 tag +W23:06
kfox1111trunk passed another test.23:09
kfox1111how far out from cutting the release?23:09
inc0very close unless sdake got heart attach23:09
sdakekfox1111 waiting for gates on one more patch23:11
sdakedid we get em all23:11
*** mtaylor22 has joined #openstack-kolla23:11
sdakebeen like 50+ patches merged since friday23:11
kfox1111wow.23:11
inc0sdake, I'm not sure how gates will behave due to mirrors23:12
bjolo__nova_compute_ironic stuck restarting.23:12
kfox1111k. let me know when the gate finishes, and I can do a quick test.23:12
bjolo__http://paste.openstack.org/show/586293/23:12
bjolo__have not really deployed ironic before so could be on my end23:12
sdakebjolo__ ironic is busted imo23:12
sdakebjolo__ just ignore it23:12
bjolo__ok23:13
sdakebjolo__ it is in various working shape23:13
sdakenot what i'd like23:13
sdakeas in "bulletproof"23:13
bjolo__haha23:13
bjolo__dont like it either23:13
bjolo__as we discussed before. a  new operator should be able to do pip install kolla, enable all services in globals, and deploy using the docker hub images23:14
inc0bjolo__, should != ever going to happen23:15
sdakebjolo__ sounds like what you want is a product ;)23:15
kfox1111bjolo__: really needs to happen.23:15
inc0what I want is to have some sort of matrix that will show which projects are well tested and we vouch for them23:15
inc0and which are not23:15
sdakebjolo if i was going to do that i would have bet all my marbles a year ago or more23:15
kfox1111well, not the "enableing everything" part.23:15
inc0there always be those which will not be tested as much23:15
kfox1111but the hub part.23:15
inc0hub will get all the images23:15
inc0thats true23:16
bjolo__we need more multinode testing23:16
inc0that's hard in gates, but true23:16
sdakewe need moar testing all over the place23:16
kfox1111bjolo__: +123:16
inc0we also need proper upgrade testing23:16
bjolo__i dont mean that every container should be configured tip top23:16
kfox1111I'm working on multinode kolla-kubernetes soon.23:16
bjolo__but it should deploy at least23:16
sdakeseems like nobrainer23:17
bjolo__probably we need to support mixing binary and source containers as well since not all distros have packages for all services23:17
* bjolo__ is writing a bp for that23:18
sdakebjolo we can't reallly do that in the build system itself23:18
sdakeit could be done in the deploy23:19
sdakebut very difficult23:19
*** dave-mccowan has joined #openstack-kolla23:19
bjolo__yes, the code for selecting what container to deploy can be overriden but it is not really practical23:19
sdakebjolo right23:20
sdakebjolo not practical23:20
sdakeok - guys - gotta get atleast a 2 hour powernap - i'll be back at 1:00 UTC :)23:20
*** g3ek has quit IRC23:20
sdakebbiaf23:20
*** sdake has quit IRC23:20
inc0bjolo__, possible today23:20
*** awebber has quit IRC23:20
kfox1111it would be nice to get the gate to the point where a user that wanted to test a certain combination of things to run the test themselves though.23:20
kfox1111I'm working on getting the minikube stuff to that point.23:20
*** haplo37 has quit IRC23:21
kfox1111so like a mitaka cloud, with a newton heat for example.23:21
inc0possible today23:21
kfox1111shoudl work fine, but you never know if you don't try.23:21
inc0in multiple ways even:)23:21
kfox1111being able to repeat the gate tests in that particular config would be awesome. :)23:21
bjolo__inc0, yes but could be better imo. (could be me being a newbie as well )23:22
mtaylor22morning23:23
inc0bjolo__, I'll be happy to show you these options...tomorrow;)23:23
bjolo__yes please23:23
bjolo__but tomorrow23:23
jascott1good morning!23:23
bjolo__is murano also busted in newton?23:23
*** denaitre has quit IRC23:24
openstackgerritBorneMace proposed openstack/kolla: Added support for a stop playbook in kolla  https://review.openstack.org/38825423:25
*** schwicht has quit IRC23:25
*** HyperJohnGraham has quit IRC23:26
*** haplo37 has joined #openstack-kolla23:26
bjolo__http://paste.openstack.org/show/586294/23:27
bjolo__inc0,23:27
*** eaguilar has quit IRC23:27
*** g3ek has joined #openstack-kolla23:29
bjolo__is that murano that cant handle my TLS certificate?23:29
*** eaguilar has joined #openstack-kolla23:30
*** diogogmt has quit IRC23:32
*** denaitre has joined #openstack-kolla23:41
*** inc0 has quit IRC23:47
openstackgerritMerged openstack/kolla: Fix mariadb build issue  https://review.openstack.org/38825223:49
*** schwicht has joined #openstack-kolla23:49
*** jtriley has joined #openstack-kolla23:54
bjolo__https://bugs.launchpad.net/kolla/+bug/163469523:55
openstackLaunchpad bug 1634695 in kolla "murano deploy fails when TLS is enabled" [Undecided,New]23:55
bjolo__kfox1111, too many bugs caused by inter container dependencies23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!