| *** sai_p has quit IRC | 00:09 | |
| *** radeks__ has quit IRC | 00:15 | |
| *** masber has quit IRC | 00:22 | |
| openstackgerrit | melissaml proposed openstack/kolla-ansible master: fix tpyos in the documentation https://review.openstack.org/555539 | 00:26 |
|---|---|---|
| *** hamzy has joined #openstack-kolla | 00:30 | |
| *** yingjun has joined #openstack-kolla | 00:36 | |
| *** yingjun has quit IRC | 00:40 | |
| *** yingjun has joined #openstack-kolla | 00:45 | |
| *** tovin07_ has joined #openstack-kolla | 00:50 | |
| *** zhubingbing has joined #openstack-kolla | 00:55 | |
| *** yingjun has quit IRC | 01:00 | |
| *** masber has joined #openstack-kolla | 01:12 | |
| *** harlowja_ has quit IRC | 01:13 | |
| *** hongbin has joined #openstack-kolla | 01:15 | |
| *** zhaochao has joined #openstack-kolla | 01:17 | |
| masber | good afternoon, I am playing with kolla 6.0.0.0rc2 which one should I use? centos binary? source? ubuntu? | 01:23 |
| masber | I would like to deploy openstack | 01:23 |
| masber | and I found centos binary does not have all images eg fluentd so I was wondering which distro I could use? | 01:24 |
| *** zhubingbing has quit IRC | 01:25 | |
| *** caowei has joined #openstack-kolla | 01:42 | |
| *** krasmussen has quit IRC | 01:46 | |
| *** krasmussen has joined #openstack-kolla | 01:46 | |
| *** caoyuan has joined #openstack-kolla | 01:49 | |
| openstackgerrit | caoyuan proposed openstack/kolla-ansible master: Fix the novnc valid options for all.yml https://review.openstack.org/555229 | 01:51 |
| *** krasmussen has quit IRC | 01:51 | |
| *** zhurong has joined #openstack-kolla | 01:52 | |
| *** dangtrinhnt has joined #openstack-kolla | 01:56 | |
| openstackgerrit | pippo proposed openstack/kolla-ansible master: fix word in the documentation https://review.openstack.org/555596 | 02:00 |
| *** zhubingbing__ has joined #openstack-kolla | 02:01 | |
| *** caoyuan_ has joined #openstack-kolla | 02:02 | |
| Jeffrey4l | masber, centos+source is more well tested. | 02:04 |
| *** caoyuan has quit IRC | 02:04 | |
| *** zhubingbing_ has quit IRC | 02:04 | |
| *** caowei has quit IRC | 02:09 | |
| openstackgerrit | melissaml proposed openstack/kolla-ansible master: fix typos in the documentation https://review.openstack.org/555539 | 02:17 |
| *** chmarkus has quit IRC | 02:19 | |
| openstackgerrit | zenghui.shi proposed openstack/kolla-ansible master: Add ptp ansible role https://review.openstack.org/519219 | 02:22 |
| Jeffrey4l | duonghq, spsurya could you review https://review.openstack.org/555341 thanks | 02:23 |
| *** chmarkus has joined #openstack-kolla | 02:23 | |
| *** caowei has joined #openstack-kolla | 02:30 | |
| *** masber has quit IRC | 02:41 | |
| *** livelace-link has quit IRC | 02:45 | |
| *** livelace-link has joined #openstack-kolla | 02:46 | |
| *** salv-orl_ has joined #openstack-kolla | 02:47 | |
| *** livelace-link has quit IRC | 02:48 | |
| *** salv-orlando has quit IRC | 02:50 | |
| spsurya | Jeffrey4l: done | 02:55 |
| caoyuan_ | spsurya could you please help me to review this ps? https://review.openstack.org/#/c/423901/ thanks | 03:04 |
| spsurya | caoyuan_: sure | 03:11 |
| caoyuan_ | ：） | 03:13 |
| *** yingjun has joined #openstack-kolla | 03:15 | |
| *** masber has joined #openstack-kolla | 03:19 | |
| masber | Jeffrey4l, ok, I built centos source and fluentd is also missing? how people is deploying openstack using kolla-ansible 6.0.0.0rc2? | 03:24 |
| *** yingjun has quit IRC | 03:25 | |
| *** caoyuan_ has quit IRC | 03:29 | |
| *** hongbin has quit IRC | 03:47 | |
| *** itlinux has quit IRC | 03:59 | |
| masber | or can I deploy openstack using kolla-ansible 6.0.0.0rc2 without fluentd? | 04:01 |
| *** zhurong has quit IRC | 04:04 | |
| openstackgerrit | Doug Hellmann proposed openstack/kolla master: add lower-constraints job https://review.openstack.org/555628 | 04:04 |
| openstackgerrit | Doug Hellmann proposed openstack/kolla-ansible master: add lower-constraints job https://review.openstack.org/555629 | 04:04 |
| *** caoyuan has joined #openstack-kolla | 04:05 | |
| openstackgerrit | Doug Hellmann proposed openstack/kolla-kubernetes master: add lower-constraints job https://review.openstack.org/555630 | 04:05 |
| openstackgerrit | Merged openstack/kolla stable/queens: Support push kolla tag image to hub.docker.com site https://review.openstack.org/555341 | 04:18 |
| *** harlowja has joined #openstack-kolla | 04:19 | |
| *** skramaja has joined #openstack-kolla | 04:47 | |
| *** unicell has joined #openstack-kolla | 04:56 | |
| *** unicell1 has joined #openstack-kolla | 04:59 | |
| *** unicell has quit IRC | 05:01 | |
| *** harlowja has quit IRC | 05:12 | |
| *** lpetrut has joined #openstack-kolla | 05:12 | |
| *** jtriley has quit IRC | 05:22 | |
| *** gyankum has joined #openstack-kolla | 05:23 | |
| Jeffrey4l | mandre, why fluentd is missing? do you get any error related to this? | 05:24 |
| Jeffrey4l | masber, ^^ | 05:24 |
| masber | Jeffrey4l, https://bpaste.net/show/41fe94d6e424 | 05:26 |
| masber | I am using centos source | 05:26 |
| Jeffrey4l | okay. i am trying to reproduce this. | 05:27 |
| Jeffrey4l | are you sure you are using 6.0.0.0rc2? seem your fluent.log do not match the code https://github.com/openstack/kolla/blob/01c6dfef2ab9ec3056b015627767ced7f1936aff/docker/base/Dockerfile.j2 | 05:30 |
| Jeffrey4l | there is no "ulimit -n xxx" masber | 05:30 |
| masber | all my images are 6.0.0.rc2 | 05:31 |
| masber | 6.0.0.0rc2 | 05:31 |
| Jeffrey4l | this link https://github.com/openstack/kolla/blob/01c6dfef2ab9ec3056b015627767ced7f1936aff/docker/fluentd/Dockerfile.j2 | 05:31 |
| Jeffrey4l | show me you fluentd/Dockerfile.j2 file | 05:31 |
| *** mdnadeem has joined #openstack-kolla | 05:34 | |
| *** yingjun has joined #openstack-kolla | 05:34 | |
| masber | Jeffrey4l, https://bpaste.net/show/df1dc3d0a74e | 05:34 |
| *** yingjun has quit IRC | 05:34 | |
| Jeffrey4l | diff with this file https://github.com/openstack/kolla/blob/01c6dfef2ab9ec3056b015627767ced7f1936aff/docker/fluentd/Dockerfile.j2 | 05:34 |
| *** dangtrinhnt has quit IRC | 05:34 | |
| Jeffrey4l | they are different. | 05:34 |
| Jeffrey4l | you are not using 6.0.0.0rc2 | 05:35 |
| Jeffrey4l | seems you are using 5.0.0.0rc2 | 05:35 |
| masber | hum | 05:35 |
| masber | how come? | 05:36 |
| masber | this is the command I use to build /root/kolla/.tox/genconfig/bin/kolla-build --registry 192.168.20.1:5000 --push --tag 6.0.0.0rc2 --logs-dir ./kolla-logs | 05:36 |
| Jeffrey4l | run "git describe" in kolla folder masber | 05:36 |
| masber | 5.0.0-11-g5f8b7fe | 05:37 |
| masber | ok ... | 05:37 |
| Jeffrey4l | you need switch to kolla 6.0.0.0rc2 tag | 05:37 |
| masber | # git branch | 05:37 |
| masber | master | 05:37 |
| masber | stable/ocata | 05:37 |
| masber | * stable/pike | 05:37 |
| masber | hum | 05:37 |
| masber | ok | 05:38 |
| *** yingjun has joined #openstack-kolla | 05:48 | |
| *** krasmussen has joined #openstack-kolla | 05:51 | |
| *** krasmussen has quit IRC | 05:52 | |
| *** krasmussen has joined #openstack-kolla | 05:52 | |
| *** yingjun has quit IRC | 06:02 | |
| masber | Jeffrey4l, git clone only downloads rc1, I am trying using release rc2 (downloading the rc2.tar.gz file) and this is what I get when I try to create the config file https://bpaste.net/show/2cf6e5a51e49 | 06:14 |
| Jeffrey4l | masber, check your pip version "pip --version" i think you need upgrade it first `pip install -U pip` | 06:15 |
| masber | pip 9.0.2 from /usr/lib/python2.7/site-packages (python 2.7) | 06:16 |
| masber | now I have pip 9.0.3 but same issue | 06:16 |
| Jeffrey4l | try upgrade "virtualenv", pip install -U virtualenv | 06:17 |
| masber | ok for some reason /root/kolla-6.0.0.0rc2/.tox/genconfig/bin/pip install -c https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt?h=stable/queens -r/root/kolla-6.0.0.0rc2/requirements.txt -r/root/kolla-6.0.0.0rc2/test-requirements.txt doesnt work | 06:18 |
| masber | but pip install -c https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt?h=stable/queens -r/root/kolla-6.0.0.0rc2/requirements.txt -r/root/kolla-6.0.0.0rc2/test-requirements.txt works | 06:18 |
| masber | Jeffrey4l, I get same error after upgrading virtualenv, for some reason it doesn't like the pip in /root/kolla-6.0.0.0rc2/.tox/genconfig/bin/pip | 06:19 |
| masber | but system wide one (the one I upgraded) works | 06:19 |
| Jeffrey4l | after upgraded virtualenv, try "tox -egenconfig -r" | 06:20 |
| *** zhurong has joined #openstack-kolla | 06:21 | |
| masber | Jeffrey4l, I got one step further but still breaks https://bpaste.net/show/8b5025f750fc | 06:22 |
| *** lpetrut has quit IRC | 06:22 | |
| Jeffrey4l | masber, better use git clong :D | 06:22 |
| masber | hehehe | 06:22 |
| masber | ok, git clone only gives me rc1 | 06:22 |
| openstackgerrit | Merged openstack/kolla master: Add freezer-scheduler container https://review.openstack.org/548946 | 06:23 |
| masber | I don't mind trying rc1, but just to let you know | 06:23 |
| Jeffrey4l | this error is reated to pbr. you need either use git clone. or use the tar.gz file from tarball.openstack.org site. | 06:23 |
| Jeffrey4l | show me "git branch -av" | 06:23 |
| Jeffrey4l | rc2 should be there. | 06:23 |
| Jeffrey4l | or try "git fetch origin" then "git branch -av" | 06:23 |
| masber | https://bpaste.net/show/1d2988cd7d77 | 06:24 |
| Jeffrey4l | hrm, sorry, i means "git tag" | 06:24 |
| masber | https://bpaste.net/show/df27c43c8dcb | 06:25 |
| masber | ok so just git checkout 6.0.0.0rc2 | 06:26 |
| Jeffrey4l | 6.0.0.0rc2 is there | 06:26 |
| Jeffrey4l | yes | 06:26 |
| masber | ok | 06:26 |
| *** krasmussen has quit IRC | 06:28 | |
| *** krasmussen has joined #openstack-kolla | 06:28 | |
| *** radeks__ has joined #openstack-kolla | 06:30 | |
| *** krasmussen has quit IRC | 06:33 | |
| *** lpetrut has joined #openstack-kolla | 06:36 | |
| *** hjensas has quit IRC | 06:45 | |
| openstackgerrit | caoyuan proposed openstack/kolla-ansible master: Add freezer-scheduler role https://review.openstack.org/548449 | 06:59 |
| *** kiennt26 has quit IRC | 07:05 | |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack/kolla-ansible master: Allow disabling insecure API endpoints https://review.openstack.org/548407 | 07:07 |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack/kolla-ansible master: When preventing insecure endpoints forward more carefully https://review.openstack.org/555662 | 07:07 |
| *** egonzalez has joined #openstack-kolla | 07:12 | |
| *** murphyslawbbs has joined #openstack-kolla | 07:14 | |
| *** pcaruana has joined #openstack-kolla | 07:21 | |
| *** yingjun has joined #openstack-kolla | 07:25 | |
| *** paken has joined #openstack-kolla | 07:29 | |
| *** zhurong has quit IRC | 07:30 | |
| openstackgerrit | Merged openstack/kolla-ansible master: Glance policy copy is not using correct name https://review.openstack.org/553070 | 07:31 |
| *** gkadam has joined #openstack-kolla | 07:41 | |
| *** Tim-E has joined #openstack-kolla | 07:41 | |
| masber | so I run kolla-genpwd and then? | 07:43 |
| masber | where is the file with the passwords? | 07:43 |
| Tim-E | ./etc/kolla/passwords.yml | 07:43 |
| Tim-E | So my initial deployment of Kolla had ceph enabled in globals.yml and for some reason ceph_mon has an issue connecting to the ceph_rbd. However, when I do disable ceph in globals.yml and run a initial deployment and enabled it afterwards with another deploy, it works. Any ideas why this is ? | 07:47 |
| *** lpetrut has quit IRC | 07:56 | |
| openstackgerrit | ShangXiao proposed openstack/kolla-kubernetes master: Update the old doc links https://review.openstack.org/555690 | 07:58 |
| *** satroutr has joined #openstack-kolla | 08:05 | |
| *** murphyslawbbs has quit IRC | 08:06 | |
| *** hjensas has joined #openstack-kolla | 08:10 | |
| *** hjensas has quit IRC | 08:10 | |
| *** hjensas has joined #openstack-kolla | 08:10 | |
| *** murphyslawbbs has joined #openstack-kolla | 08:16 | |
| masber | ok... memcached is complaining "failed to set rlimit for open files. Try starting as root or requesting smaller maxconns value." | 08:27 |
| *** murphyslawbbs has quit IRC | 08:28 | |
| *** murphyslawbbs has joined #openstack-kolla | 08:33 | |
| *** gfidente has joined #openstack-kolla | 08:35 | |
| *** lgsafety has joined #openstack-kolla | 08:39 | |
| *** hamza21 has joined #openstack-kolla | 08:54 | |
| openstackgerrit | Merged openstack/kolla stable/ocata: Increase the post-timeout to 3600 seconds https://review.openstack.org/555303 | 08:55 |
| *** dougsz has joined #openstack-kolla | 08:58 | |
| *** cah_link has joined #openstack-kolla | 09:04 | |
| *** krasmussen has joined #openstack-kolla | 09:18 | |
| *** lgsafety has quit IRC | 09:22 | |
| *** ktibi has joined #openstack-kolla | 09:22 | |
| *** lgsafety has joined #openstack-kolla | 09:22 | |
| *** krasmussen has quit IRC | 09:22 | |
| *** mgoddard has joined #openstack-kolla | 09:23 | |
| *** lpetrut has joined #openstack-kolla | 09:27 | |
| *** radeks_ has joined #openstack-kolla | 09:27 | |
| *** radeks__ has quit IRC | 09:28 | |
| *** lpetrut_ has joined #openstack-kolla | 09:28 | |
| *** lpetrut has quit IRC | 09:28 | |
| *** radeks__ has joined #openstack-kolla | 09:29 | |
| *** radeks_ has quit IRC | 09:32 | |
| openstackgerrit | Merged openstack/kolla-ansible master: Remove the duplicate "become" for config-nova-fake.yml https://review.openstack.org/555114 | 09:33 |
| *** murphyslawbbs has quit IRC | 09:33 | |
| *** gkadam is now known as gkadam-afk | 09:36 | |
| *** murphyslawbbs has joined #openstack-kolla | 09:41 | |
| *** yingjun has quit IRC | 09:41 | |
| *** gkadam-afk is now known as gkadam | 09:43 | |
| *** lgsafety has quit IRC | 09:46 | |
| *** liuzz has quit IRC | 09:47 | |
| *** bmace has quit IRC | 09:54 | |
| *** bmace has joined #openstack-kolla | 09:54 | |
| openstackgerrit | Merged openstack/kolla-ansible master: Optimize reconfiguration for ironic https://review.openstack.org/423901 | 09:55 |
| *** caoyuan has quit IRC | 09:59 | |
| *** duonghq has quit IRC | 10:00 | |
| *** ArminderSingh has quit IRC | 10:08 | |
| *** ArminderSingh has joined #openstack-kolla | 10:13 | |
| *** tovin07_ has quit IRC | 10:18 | |
| *** krasmussen has joined #openstack-kolla | 10:19 | |
| *** krasmussen has quit IRC | 10:23 | |
| *** murphyslawbbs has quit IRC | 10:25 | |
| *** sambetts|afk is now known as sambetts | 10:32 | |
| openstackgerrit | Kevin Tibi proposed openstack/kolla master: Add designate-ui for horizon centos https://review.openstack.org/555733 | 10:41 |
| *** pbourke has quit IRC | 10:43 | |
| *** pbourke has joined #openstack-kolla | 10:43 | |
| *** caowei has quit IRC | 10:51 | |
| *** caoyuan has joined #openstack-kolla | 10:52 | |
| *** krasmussen has joined #openstack-kolla | 10:59 | |
| *** krasmussen has quit IRC | 11:00 | |
| *** krasmussen has joined #openstack-kolla | 11:00 | |
| *** caoyuan has quit IRC | 11:08 | |
| *** athomas_ has joined #openstack-kolla | 11:14 | |
| *** caoyuan has joined #openstack-kolla | 11:20 | |
| *** satroutr has quit IRC | 11:23 | |
| *** caoyuan has quit IRC | 11:25 | |
| *** pcaruana has quit IRC | 11:27 | |
| *** ansmith has quit IRC | 11:32 | |
| *** dangtrinhnt has joined #openstack-kolla | 11:37 | |
| pbourke | mgoddard: you seeing any errors in ironic around rpc versions by any chance? | 11:38 |
| mgoddard | pbourke: nothing I'm aware of. Is this recent master? Any logs you can share? | 11:39 |
| pbourke | mgoddard: Im new to ironic so maybe doing something wrong... This is a fairly vanilla deploy of master though - http://paste.openstack.org/show/709909/ | 11:40 |
| *** rhallisey has joined #openstack-kolla | 11:40 | |
| pbourke | btw this is nova_compute_ironic | 11:41 |
| pbourke | mgoddard: have you ever tried virtualbmc? | 11:43 |
| mgoddard | pbourke: ah, that makes more sense | 11:43 |
| mgoddard | pbourke: yes I sometimes use virtualbmc for testing | 11:43 |
| mgoddard | seems to work fairly well | 11:43 |
| pbourke | mgoddard: nice | 11:44 |
| pbourke | mgoddard: Im trying to get a simple demo up and going with it to help document ironic with kolla a little better | 11:44 |
| pbourke | will try pull the latest images and see if it helps this error at all | 11:44 |
| pbourke | from a high level my steps are, install virtualbmc inside nova_libvirt, create a nova instance and associate a vbmc with that libvirt instance | 11:45 |
| pbourke | Im using the default port assigned to the instance as the ironic port | 11:46 |
| pbourke | does that sound ok so far? | 11:46 |
| mgoddard | so you're using a nova virt instance as a bare metal node? | 11:47 |
| pbourke | well, that's the plan, dont know if its a good idea or not | 11:47 |
| mgoddard | on the failure, perhaps this is related: https://github.com/openstack/nova/commit/a761e57368280b6d3e931831ecd393fd5787b3ef | 11:49 |
| mgoddard | new images seems like a good plan | 11:49 |
| mgoddard | possibly worth asking in #openstack-nova if you get stuck | 11:49 |
| mgoddard | I'm not sure about using a nova virt instance as a BM - both ironic and nova will want to control the power state of the VM | 11:50 |
| pbourke | mgoddard: what do you use for baremetal with vbmc. | 11:50 |
| pbourke | ? | 11:50 |
| mgoddard | pbourke: I just use libvirt | 11:51 |
| mgoddard | as does the ironic devstack plugin | 11:51 |
| pbourke | ok good to know | 11:51 |
| pbourke | using nova may complicate things | 11:51 |
| pbourke | but I'll persist for another bit | 11:51 |
| mgoddard | https://github.com/openstack/ironic/blob/master/devstack/tools/ironic/scripts/create-node.sh | 11:51 |
| mgoddard | networking could get funky - you'll need to be able to reach TFTP on the VM's tenant network | 11:52 |
| mgoddard | and there will be two ports in neutron for the same MAC on the same network - one for nova virt, one for an instance on the bare metal node | 11:53 |
| mgoddard | https://github.com/openstack/ironic/blob/master/devstack/tools/ironic/templates/vm.xml | 11:53 |
| *** dangtrinhnt has quit IRC | 11:53 | |
| mgoddard | assume you're just going to go for flat networking? | 11:53 |
| mgoddard | i.e. no multitenancy, no plugging the bare metal node into different networks | 11:54 |
| mgoddard | it's possible via something like https://github.com/openstack/networking-generic-switch | 11:55 |
| mgoddard | but gets quite fiddly | 11:55 |
| *** satroutr has joined #openstack-kolla | 11:55 | |
| *** jaosorior has quit IRC | 11:56 | |
| *** caoyuan has joined #openstack-kolla | 11:59 | |
| *** caoyuan has quit IRC | 12:04 | |
| mgoddard | pbourke: if your work could go some way towards a bare metal job for kolla-ansible CI, that would be excellent. I'd be willing to help make that happen | 12:06 |
| *** gkadam_ has joined #openstack-kolla | 12:07 | |
| pbourke | mgoddard: sounds good, yeah I'll keep you updated | 12:07 |
| pbourke | appreciate the tips, pretty steep learning curve on this stuff it seems | 12:08 |
| *** gkadam has quit IRC | 12:09 | |
| mgoddard | pbourke: it's another world :) feel free to fire questions my way | 12:09 |
| mgoddard | pbourke: I started working on a script for this for kayobe: https://github.com/markgoddard/openstack-tools/blob/ironic-vm-node/ironic-fake-nodes/ironic-vm-nodes.sh | 12:10 |
| mgoddard | feel free to use what you like from it | 12:10 |
| pbourke | nice looks pretty clean | 12:11 |
| pbourke | should help! | 12:11 |
| mgoddard | I didn't quite get it working - the VM would power on but not PXE boot | 12:11 |
| pbourke | that's the point I got to, I can power on/off the VM via ironic | 12:11 |
| pbourke | which is kind of cool, but not hugely useful | 12:12 |
| mgoddard | yeah :) | 12:12 |
| mgoddard | probably need to compare the XML config with the one in ironic | 12:13 |
| *** skatsaounis has joined #openstack-kolla | 12:14 | |
| mgoddard | pbourke: which ironic-python-agent images are you using? | 12:15 |
| *** skatsaounis has quit IRC | 12:15 | |
| pbourke | tinyipa | 12:15 |
| mgoddard | ok, that should work | 12:15 |
| mgoddard | I saw some issues with coreos | 12:15 |
| *** skatsaounis has joined #openstack-kolla | 12:15 | |
| mgoddard | pbourke: there's also bifrost for another reference point: https://github.com/openstack/bifrost/tree/master/playbooks/roles/bifrost-create-vm-nodes | 12:17 |
| pbourke | good to know | 12:17 |
| pbourke | I was having a look at the devstack plugin but just so much bash to read | 12:17 |
| *** jtriley has joined #openstack-kolla | 12:18 | |
| *** zhubingbing has joined #openstack-kolla | 12:19 | |
| pbourke | ok good news is the RPC error is gone with new images | 12:21 |
| skatsaounis | Hi, I am trying to deploy kolla-kubernetes microservice heat-api-deployment on ubuntu-source-pike images. I am getting the following error from heat-api command: "Could not bind to ('0.0.0.0', 8004) after trying for 30 seconds". Any ideas? | 12:22 |
| pbourke | Jeffrey4l: ^ | 12:26 |
| mgoddard | pbourke: it's a lot of bash, but the main thing to consider is the libvirt XML config template, and the options that get passed in | 12:28 |
| mgoddard | pbourke: tcpdump is your friend for debugging the PXE issues | 12:29 |
| *** murphyslawbbs has joined #openstack-kolla | 12:29 | |
| *** pcaruana has joined #openstack-kolla | 12:30 | |
| *** jtriley has quit IRC | 12:35 | |
| *** caowei has joined #openstack-kolla | 12:42 | |
| *** edleafe is now known as figleaf | 12:46 | |
| *** hamza21 has quit IRC | 12:49 | |
| *** skatsaounis has quit IRC | 12:55 | |
| *** skatsaounis has joined #openstack-kolla | 12:55 | |
| *** goldyfruit has joined #openstack-kolla | 13:02 | |
| *** ansmith has joined #openstack-kolla | 13:03 | |
| *** caowei has quit IRC | 13:07 | |
| *** hamza21 has joined #openstack-kolla | 13:07 | |
| *** goldyfruit has quit IRC | 13:09 | |
| *** skramaja has quit IRC | 13:17 | |
| *** dklyle has quit IRC | 13:27 | |
| Tim-E | the dhcp agents shoudl only ever run on the controller nodes or dedicated network nodes right ? Never on a compute node ? | 13:29 |
| Tim-E | as far as I can see the dhcp agents are running on the controller nodes, which is fine but my virtual machines are unable to obtain a IP | 13:30 |
| SamYaple | Tim-E: your understanding is correct for the most part (though there is nothing stopping them running on compute nodes) | 13:35 |
| SamYaple | if your instance isnt getting an ip, this is where tcpdumpis your friend | 13:36 |
| SamYaple | is the dhcp request reaching the dhcp agent node? | 13:36 |
| SamYaple | is it being blocked on the return? | 13:36 |
| Tim-E | seems i may have resolved it .. | 13:39 |
| Tim-E | I have 3 controller nodes | 13:39 |
| Tim-E | and the dhcp agent was only running on one of them .. | 13:40 |
| Tim-E | not I don't have "HA" enabled | 13:40 |
| Tim-E | via the dashboard I added the dhcp agents for the other two controllers and then it worked | 13:40 |
| *** jtriley has joined #openstack-kolla | 13:41 | |
| Tim-E | i guess i should be enabling this "#enable_neutron_agent_ha: "no" in globals.yml ? | 13:41 |
| *** egonzalez has quit IRC | 13:41 | |
| *** hjensas has quit IRC | 13:46 | |
| *** Tim-E has quit IRC | 13:57 | |
| *** murphyslawbbs has quit IRC | 14:00 | |
| *** geb has quit IRC | 14:02 | |
| *** dave-mccowan has joined #openstack-kolla | 14:06 | |
| *** geb has joined #openstack-kolla | 14:06 | |
| *** erolg has joined #openstack-kolla | 14:18 | |
| erolg | hi, is there anyone who use openstack bifrost? What do you think about the project? Is it mature enough for production? | 14:21 |
| *** caoyuan has joined #openstack-kolla | 14:28 | |
| *** zhaochao has quit IRC | 14:29 | |
| *** dave-mcc_ has joined #openstack-kolla | 14:29 | |
| SamYaple | erolg: yes its mature enough for production. its been around for a while too | 14:31 |
| *** murphyslawbbs has joined #openstack-kolla | 14:32 | |
| *** dave-mccowan has quit IRC | 14:32 | |
| *** caoyuan_ has joined #openstack-kolla | 14:34 | |
| *** caoyuan has quit IRC | 14:37 | |
| *** dciabrin_ has quit IRC | 14:40 | |
| *** dciabrin has joined #openstack-kolla | 14:40 | |
| *** zhubingbing has quit IRC | 14:41 | |
| sdake | erolg yes mature for production - although you will really want to do an eval on your own to see if it meets your use case | 14:43 |
| sdake | erolg technical maturity is probably an 8+ out of 10 | 14:43 |
| sdake | erolg https://en.wikipedia.org/wiki/Technology_readiness_level | 14:43 |
| dougsz | erolg: we use it in production to deploy the undercloud for Kolla as part of the Kayobe project | 14:48 |
| geb | Hi folks ! | 14:50 |
| *** zhubingbing has joined #openstack-kolla | 14:51 | |
| -openstackstatus- NOTICE: zuul.o.o has been restarted to pick up latest code base and clear memory usage. Both check / gate queues were saved, be sure to check your patches and recheck when needed. | 14:51 | |
| *** zhangfei has joined #openstack-kolla | 14:53 | |
| *** hamza21 has quit IRC | 14:54 | |
| *** david-lyle has joined #openstack-kolla | 14:57 | |
| geb | I am running an openstack all-in-one installed with kolla-ansible 5.0.1, openstack_release: "pike", kolla_base_distro: "centos", kolla_install_type: "source". Because of CVE-2018-1000115, the memcached process was used to relay DDOS. I had to firewall it manually. Is this a known bug in kolla-ansible ? Should i submit one ? | 15:00 |
| *** krasmussen has quit IRC | 15:01 | |
| geb | iptables -A INPUT -p udp -m udp --dport 11211 -i enp0s31f6 -j DROP ; iptables -A OUTPUT -p udp -m udp --sport 11211 -o enp0s31f6 -j DROP ; did the job, but if the install is vulnerable by default maybe should it be fixed ... | 15:02 |
| *** mdnadeem has quit IRC | 15:02 | |
| geb | it was a bit hard to debug, as netstat was not seeing all connections (because of context i guess), but still seeing lot of memcached trafic and high cpu usage of memcached | 15:03 |
| SamYaple | geb: i always put memcached and ceph private network on a non-routable network for this reason | 15:03 |
| geb | Understood, but if a default install is vulnerable by default and used to relay ddos, this may need to be addressed, either by fixes to change the default behaviour to a safe one, and/or by a clear documentation :) | 15:06 |
| *** cah_link has quit IRC | 15:07 | |
| *** hjensas has joined #openstack-kolla | 15:09 | |
| geb | but maybe is the problem, already/currently being addressed and i just did something wrong .. | 15:11 |
| *** zhangfei has quit IRC | 15:14 | |
| sdake | geb agree there should be a security document - we attempted this a year or so ago, but the work never finished on the full audit of kolla | 15:17 |
| sdake | geb if you want to submit a gerrit review, would be most welcome ;-) | 15:17 |
| *** itlinux has joined #openstack-kolla | 15:21 | |
| *** JamesBenson has joined #openstack-kolla | 15:22 | |
| *** jtriley has quit IRC | 15:26 | |
| geb | thanks sdake, I can at least open one, yes :) | 15:26 |
| *** jtriley has joined #openstack-kolla | 15:27 | |
| pbourke | mgoddard: in your script, does the network you're creating the libvirt VM on match your provisioning network? | 15:28 |
| *** zhubingbing has quit IRC | 15:29 | |
| *** zhubingbing has joined #openstack-kolla | 15:30 | |
| *** caoyuan_ has quit IRC | 15:31 | |
| mgoddard | pbourke: it should do, although it doesn't work :) | 15:33 |
| *** zhubingbing has quit IRC | 15:34 | |
| pbourke | mgoddard: and should the provisioning network match the provider network? i.e the network that the conductor etc. runs on | 15:34 |
| *** shardy has quit IRC | 15:35 | |
| mgoddard | pbourke: in that environment I just used a single network for everything - a linux bridge on the controller | 15:35 |
| pbourke | mgoddard: ok gotcha | 15:36 |
| mgoddard | pbourke: so I had a single bridge, and set *_interface to this in kolla. Then create a libvirt network for the bridge, and attach the VM to that | 15:38 |
| *** murphyslawbbs has quit IRC | 15:48 | |
| -openstackstatus- NOTICE: Gerrit will be temporarily unreachable as we restart it to complete the rename of some projects. | 15:49 | |
| *** gyankum has quit IRC | 16:00 | |
| *** paken has quit IRC | 16:00 | |
| *** jtriley has quit IRC | 16:16 | |
| *** harlowja has joined #openstack-kolla | 16:16 | |
| *** radeks__ has quit IRC | 16:27 | |
| *** radeks__ has joined #openstack-kolla | 16:27 | |
| *** jtriley has joined #openstack-kolla | 16:29 | |
| kolla-slack | <egonzalez> geb, the udp vulnerability was fixed at least in master, not sure if was backported to stable branchs yet | 16:30 |
| *** hamza21 has joined #openstack-kolla | 16:31 | |
| pbourke | egonzalez: I think only in the gates though | 16:33 |
| pbourke | if Im thinking of the same issue | 16:33 |
| geb | gates ? | 16:33 |
| pbourke | geb: jenkins jobs that are run each time a commit is made upstream | 16:34 |
| geb | Ok. Thanks egonzalez pbourke. Once you beleive its available, i'll be happy to test, report, give you an access if usefull. Feel free to ping me :) | 16:36 |
| *** vabada has quit IRC | 16:48 | |
| *** abishop has joined #openstack-kolla | 16:49 | |
| *** david-lyle has quit IRC | 16:52 | |
| *** gkadam_ has quit IRC | 16:54 | |
| abishop | hi folks, not sure if this is a kolla or tripleo issue, but CentOS-based containers are claiming the selinux-policy-targeted RPM fails the verification check | 16:58 |
| abishop | see http://paste.openstack.org/show/710267 for details | 16:58 |
| abishop | can anyone suggest who to speak to about this? | 16:58 |
| openstackgerrit | Doug Szumski proposed openstack/kolla-ansible master: Add support for deploying ZooKeeper https://review.openstack.org/550879 | 16:59 |
| openstackgerrit | Doug Szumski proposed openstack/kolla-ansible master: Add support for deploying Kafka https://review.openstack.org/552571 | 16:59 |
| kolla-slack | <egonzalez> geb , pbourke is actually merged and backported https://review.openstack.org/#/c/550686/ | 17:02 |
| *** athomas_ has quit IRC | 17:03 | |
| *** masber has quit IRC | 17:06 | |
| *** murphyslawbbs has joined #openstack-kolla | 17:12 | |
| *** zhubingbing has joined #openstack-kolla | 17:14 | |
| *** masber has joined #openstack-kolla | 17:18 | |
| *** zhubingbing has quit IRC | 17:18 | |
| *** pcaruana has quit IRC | 17:23 | |
| *** itlinux has quit IRC | 17:27 | |
| *** ktibi has quit IRC | 17:29 | |
| *** murphyslawbbs has quit IRC | 17:32 | |
| *** masber has quit IRC | 17:37 | |
| *** mgoddard has quit IRC | 17:40 | |
| geb | egonzalez, pbourke, great, just by looking the description it looks to be the good patch. Do you know if it would be available in pip ? I am ok for testing from git if needed but the install docs in https://docs.openstack.org/kolla-ansible/latest/user/quickstart.html etc recommends installing from pip, so i beleive it will impact users until it lands in pip | 17:43 |
| geb | if it is already available (currently testing after a pip install --upgrade kolla-ansible), maybe would it be revelant to emmit an advisory or something to tell users to upgrade ..? | 17:49 |
| *** harlowja has quit IRC | 17:50 | |
| *** psidze has joined #openstack-kolla | 17:52 | |
| *** erolg has quit IRC | 17:54 | |
| *** ipsecguy has quit IRC | 17:55 | |
| *** radeks__ has quit IRC | 17:56 | |
| *** bill1 has joined #openstack-kolla | 17:58 | |
| *** david-lyle has joined #openstack-kolla | 17:59 | |
| *** ipsecguy has joined #openstack-kolla | 18:00 | |
| *** dougsz has quit IRC | 18:01 | |
| *** ipsecguy has quit IRC | 18:01 | |
| *** krasmussen has joined #openstack-kolla | 18:02 | |
| *** murphyslawbbs has joined #openstack-kolla | 18:03 | |
| *** krasmussen has quit IRC | 18:06 | |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack/kolla-ansible master: When preventing insecure endpoints be more careful https://review.openstack.org/555662 | 18:08 |
| *** ipsecguy has joined #openstack-kolla | 18:11 | |
| *** bill1 has quit IRC | 18:14 | |
| *** slagle has quit IRC | 18:15 | |
| *** sambetts is now known as sambetts|afk | 18:16 | |
| *** jtriley_ has joined #openstack-kolla | 18:19 | |
| *** jtriley has quit IRC | 18:20 | |
| *** dciabrin_ has joined #openstack-kolla | 18:26 | |
| *** murphyslawbbs has quit IRC | 18:27 | |
| *** dciabrin has quit IRC | 18:28 | |
| geb | egonzalez, pbourke, the patch is not already applyed in the last stable pip version 5.0.1. I tested with 6.0.0rc2 but the deploy was not successfull, so I cannot confirm the patch is applyed in this version. | 18:29 |
| geb | for the record, the error when trying to deploy with kolla-ansible 6.0.0rc2 from pip on a ubuntu (i did not try to add the conf var, it may only be missing in the default ones) : failed: [localhost] (item=definitions.json) => {"changed": false, "item": "definitions.json", "msg": "AnsibleUndefinedVariable: {{ rabbitmq_monitoring_password }}: 'rabbitmq_monitoring_password' is undefined"} | 18:30 |
| *** itlinux has joined #openstack-kolla | 18:32 | |
| *** gfidente has quit IRC | 18:32 | |
| *** harlowja has joined #openstack-kolla | 18:33 | |
| *** harlowja has quit IRC | 18:38 | |
| *** murphyslawbbs has joined #openstack-kolla | 18:38 | |
| *** fungi has joined #openstack-kolla | 18:41 | |
| *** itlinux has quit IRC | 18:47 | |
| *** itlinux has joined #openstack-kolla | 18:49 | |
| *** krasmussen has joined #openstack-kolla | 18:51 | |
| *** krasmussen has quit IRC | 18:51 | |
| *** krasmussen has joined #openstack-kolla | 18:52 | |
| *** dave-mcc_ has quit IRC | 18:55 | |
| *** murphyslawbbs has quit IRC | 18:59 | |
| *** murphyslawbbs has joined #openstack-kolla | 19:00 | |
| kolla-slack | <egonzalez> geb, need to merge your old password file with the new version | 19:05 |
| *** jtriley_ has quit IRC | 19:05 | |
| *** jtriley has joined #openstack-kolla | 19:06 | |
| *** itlinux has quit IRC | 19:08 | |
| *** lpetrut_ has quit IRC | 19:08 | |
| *** murphyslawbbs has quit IRC | 19:08 | |
| *** harlowja has joined #openstack-kolla | 19:09 | |
| *** athomas has quit IRC | 19:10 | |
| *** itlinux has joined #openstack-kolla | 19:15 | |
| *** itlinux has quit IRC | 19:16 | |
| *** murphyslawbbs has joined #openstack-kolla | 19:16 | |
| *** goldyfruit has joined #openstack-kolla | 19:24 | |
| *** murphyslawbbs has quit IRC | 19:26 | |
| *** openstackgerrit has quit IRC | 19:34 | |
| *** murphyslawbbs has joined #openstack-kolla | 19:38 | |
| geb | egonzalez, pbourke, just tested: The fix isn't applyed in pip-stable: 5.0.1 nor pip-dev: 6.0.0rc2. Gtg, thanks a lot for your help anyway :) | 19:44 |
| *** lpetrut has joined #openstack-kolla | 19:53 | |
| *** ansmith has quit IRC | 20:05 | |
| *** itlinux has joined #openstack-kolla | 20:07 | |
| *** itlinux has quit IRC | 20:09 | |
| *** sai_p has joined #openstack-kolla | 20:09 | |
| *** dave-mccowan has joined #openstack-kolla | 20:19 | |
| SamYaple | for those familiar with the uid/gid issue with nova/libvirt/qemu, what are the appropriate folder permissions for user/group in /var/lib/nova? | 20:45 |
| * SamYaple is being a bit lazy | 20:45 | |
| *** dciabrin_ has quit IRC | 20:50 | |
| *** dciabrin_ has joined #openstack-kolla | 20:50 | |
| *** abishop has quit IRC | 20:52 | |
| *** unicell1 has quit IRC | 20:57 | |
| *** livelace-link has joined #openstack-kolla | 20:58 | |
| *** unicell has joined #openstack-kolla | 21:00 | |
| *** jtriley has quit IRC | 21:06 | |
| *** rhallisey has quit IRC | 21:11 | |
| *** hamza21 has quit IRC | 21:15 | |
| *** murphyslawbbs has quit IRC | 21:16 | |
| *** murphyslawbbs has joined #openstack-kolla | 21:17 | |
| *** jbadiapa has quit IRC | 21:19 | |
| *** cah_link has joined #openstack-kolla | 21:22 | |
| *** ansmith has joined #openstack-kolla | 21:25 | |
| *** goldyfruit has quit IRC | 21:26 | |
| *** cah_link has quit IRC | 21:26 | |
| *** lpetrut has quit IRC | 21:26 | |
| *** lpetrut has joined #openstack-kolla | 21:30 | |
| *** jtriley has joined #openstack-kolla | 21:47 | |
| *** radeks__ has joined #openstack-kolla | 21:51 | |
| *** JamesBenson has quit IRC | 21:54 | |
| *** dave-mccowan has quit IRC | 21:57 | |
| *** murphyslawbbs has quit IRC | 22:17 | |
| *** murphyslawbbs has joined #openstack-kolla | 22:17 | |
| *** radeks__ has quit IRC | 22:25 | |
| *** jtriley has quit IRC | 22:25 | |
| *** figleaf is now known as edleafe | 22:34 | |
| *** EmilienM has quit IRC | 22:34 | |
| *** jtriley has joined #openstack-kolla | 22:35 | |
| *** EmilienM has joined #openstack-kolla | 22:36 | |
| *** EmilienM has quit IRC | 22:36 | |
| *** EmilienM has joined #openstack-kolla | 22:36 | |
| *** slagle has joined #openstack-kolla | 22:37 | |
| *** jtriley has quit IRC | 22:40 | |
| *** david-lyle has quit IRC | 22:52 | |
| *** jtriley has joined #openstack-kolla | 23:05 | |
| *** lpetrut has quit IRC | 23:05 | |
| *** krasmussen has quit IRC | 23:08 | |
| *** krasmussen has joined #openstack-kolla | 23:09 | |
| *** jtriley has quit IRC | 23:10 | |
| *** jtriley has joined #openstack-kolla | 23:13 | |
| *** krasmussen has quit IRC | 23:13 | |
| *** murphyslawbbs has quit IRC | 23:20 | |
| *** openstackgerrit has joined #openstack-kolla | 23:32 | |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack/kolla-ansible master: When preventing insecure endpoints be more careful https://review.openstack.org/555662 | 23:32 |
| *** jtriley has quit IRC | 23:42 | |
| *** david-lyle has joined #openstack-kolla | 23:50 | |
| *** jtriley has joined #openstack-kolla | 23:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!