Thursday, 2021-12-09

opendevreviewMerged openstack/kayobe master: CI: Use correct TD agent repository version  https://review.opendev.org/c/openstack/kayobe/+/82086200:37
opendevreviewDr. Jens Harbott proposed openstack/kolla-ansible master: Bump timeout for grafana startup  https://review.opendev.org/c/openstack/kolla-ansible/+/82040007:06
holtgrewe__priteau, I think I figured out the problem with the bridges. Either I'm misusing kayobe or there is a bug. Anyway, put that into writing here: https://storyboard.openstack.org/#!/story/200973307:49
*** holtgrewe__ is now known as holtgrewe07:49
holtgreweShould `kayobe overcloud inventory discover` register the controller nodes again in "etc/kayobe/inventory/overcloud" in the `[baremetal-compute]` section?07:58
holtgrewe... by the playbook code actually not, will look what's going wrong for me.08:09
holtgrewe... config problem08:22
opendevreviewPierre Riteau proposed openstack/kolla stable/ussuri: Ensure nvme-cli is present in nova-compute images  https://review.opendev.org/c/openstack/kolla/+/82117308:39
guesswhatanyone tried to use certmanager ( DNS01 ) with kolla ? ( for internal/external ) are certificates ( crt + key ) hotreloaded when files are changed? or do i need to redeploy haproxy ?08:47
opendevreviewPierre Riteau proposed openstack/kayobe stable/xena: CI: Use correct TD agent repository version  https://review.opendev.org/c/openstack/kayobe/+/82117608:56
opendevreviewPierre Riteau proposed openstack/kayobe stable/wallaby: CI: Use correct TD agent repository version  https://review.opendev.org/c/openstack/kayobe/+/82117708:57
opendevreviewPierre Riteau proposed openstack/kayobe stable/victoria: CI: Use correct TD agent repository version  https://review.opendev.org/c/openstack/kayobe/+/82117808:57
opendevreviewPierre Riteau proposed openstack/kayobe stable/ussuri: CI: Use correct TD agent repository version  https://review.opendev.org/c/openstack/kayobe/+/82117908:57
hrwmorning09:31
holtgreweI have a question regarding `kayobe baremetal compute rename` - is this something that I can call after `kayobe overcloud inventory discover`? I'm getting a "Missing value auth-url required for auth plugin password". https://paste.openstack.org/show/811568/ If I source my OpenStack admin RC file, I get "public endpoint for baremetal service not found" https://paste.openstack.org/show/811569/10:13
holtgreweOoooh, it's the kayobe-generated admin RC that I need.10:18
holtgrewemy bad10:18
holtgreweno, still the same issue10:21
holtgrewe---10:27
holtgreweI think I have a conceptual problem with understanding kayobe. I have the OpenStack controllers setup with the kayobe overcloud commands. This was done using the seed. The seed is now still running for me. For the setup of the baremetal compute hosts - is this now done by the overcloud or by the seed. My baremetal-compute nodes appear in the seed's bifrost. However, "kayobe baremetal" tries to talk to the controllers of the overcloud. Also, 10:28
holtgrewemy overcloud OS is setup without ironic. Am I missing a "switch from seed to overcloud" step?10:28
holtgrewejingvar, do you have an example in your a-universe-from-nothing for baremetal-compute hosts?10:30
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: bifrost: set IPA deploy logs dir to /var/log/kolla/ironic  https://review.opendev.org/c/openstack/kolla-ansible/+/82119410:34
guesswhatanyone tried to use certmanager ( DNS01 ) with kolla ? ( for internal/external ) are certificates ( crt + key ) hotreloaded when files are changed? or do i need to redeploy haproxy ?10:50
mgoddardguesswhat: do you mean certbot?10:52
mgoddardholtgrewe: baremetal rename will require public-openrc.sh11:04
mgoddard(or admin-*)11:04
mgoddardholtgrewe: these baremetal nodes: will users get a VM or a bare metal node?11:14
holtgrewemgoddard, thanks. I'm in a HPC setting. user == me as non-admin user in OS (I myself have subordinate users who will log into the machines later on)11:31
ignaziocassanoHello All, I'd like to know if  neutron l2gw is supported in kolla. Thanks11:32
mgoddardholtgrewe: do you need multitenancy?11:37
holtgrewemgoddard, I now get "public endpoint for baremetal service not found". I probably need `enable_ironic: "yses` in `kolla.yaml`?11:37
mgoddardholtgrewe: yes, if you want to use nova, glance etc. to provision the compute nodes11:37
holtgrewemgoddard, no multitenancy for bare metal11:38
mgoddardholtgrewe: ok. do you want to use nova, glance, neutron etc rather than using ironic directly?11:38
holtgrewemgoddard, ideally yes11:39
mgoddardok, then you're on the right path :)11:39
mgoddardjust set kolla_enable_ironic11:39
holtgreweBut `kolla_enable_ironic_ipxe: false` as that's handled by the seed host already?11:40
holtgrewemgoddard, what would be the alternative? If it's simpler I'd be happy for baremetal to be directly deployed via kayobe?11:42
holtgrewemgoddard, I want "kayobe baremetal compute {manage,provide,rename}" to work - would that imply any one alternative or am I still on the right path?11:43
mgoddardholtgrewe: plain bifrost would be the simplest option11:44
mgoddardholtgrewe: if you just want to image some machines then that is the quickest route using ironic11:44
holtgrewebut both options would make "kayobe baremetal compute {manage,provide,rename}" work?11:45
holtgrewemgoddard, but do I need ironic-ipxe? I have both baremetal-compute and the control hosts on the same network. I probably need to deactivate this, right?11:53
mgoddardholtgrewe: plain bifrost does not include kayobe11:54
holtgrewemgoddard, OK. I'll now first try to make it run with nova cinder neutron etc.11:54
mgoddardholtgrewe: you could just run a kayobe seed, which includes bifrost and some sugar on top11:54
holtgrewemgoddard, I have a kayobe seed hypervisor with a seed running11:55
mgoddardbut that would not give you nova, glance etc11:55
mgoddardyou don't *need* to set kolla_enable_ironic_ipxe, but it is recommended over pxe11:56
mgoddardthe ipxe servers on the seed and controllers are independent11:56
holtgreweah, ok11:57
holtgreweit's iPXE vs PXE11:57
holtgreweunderstood11:57
holtgreweThen I'll go back into the machine room and see how far I get with your answers and help. Thanks a lot!11:58
ignaziocassanoHello All, I'd like to know if  neutron l2gw is supported in kolla. Thanks12:12
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: Import baremetal role from kolla-ansible  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82016812:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: CI: add initial deploy jobs  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82090712:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: some small tidy ups  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82100312:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: refactor selinux config into a separate role  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82101412:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: refactor kolla user & group creation into a separate role  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82101512:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: refactor docker-sdk installation to a separate role  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82101612:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: docker-sdk: use become_user=kolla to create virtualenv  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82101712:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: CI: add ansible-lint to linters job  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120012:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: Refactor /etc/hosts configuration into a separate role  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120112:14
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: refactor firewall config into a separate role  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120212:15
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: refactor apt cache update  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120312:15
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: baremetal: refactor docker deployment into a separate role  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120412:15
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: docker: restart docker in handler  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120512:15
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: docker: add registry CA configuration  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120612:15
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: CI: Add job to publish to galaxy on tag creation  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120712:15
mgoddardholtgrewe: FWIW, your setup is kind of similar to https://github.com/stackhpc/alaska-kayobe-config12:17
holtgrewemgoddard, thanks!12:20
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: CI: Add job to publish to galaxy on tag creation  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120712:22
mnasiadkayoctozepto: https://review.opendev.org/c/openstack/kolla-ansible/+/821194 - would be nice to get it in for sake of Kayobe jobs (that sometimes fail due to node deployment failure in Ironic)12:25
opendevreviewMerged openstack/kolla stable/xena: Ensure nvme-cli is present in nova-compute images  https://review.opendev.org/c/openstack/kolla/+/82104412:29
opendevreviewMerged openstack/kolla stable/wallaby: Ensure nvme-cli is present in nova-compute images  https://review.opendev.org/c/openstack/kolla/+/82104512:29
opendevreviewMerged openstack/kolla stable/victoria: Ensure nvme-cli is present in nova-compute images  https://review.opendev.org/c/openstack/kolla/+/82104612:29
hrwmnasiadka: +2+W12:40
mnasiadkahrw: thank you12:48
kevko\o/13:00
hrwhttps://review.opendev.org/c/openstack/kolla/+/818095 - who will add +W?13:06
kevkohrw: can I ? :D 13:09
kevkohrw: it would be me first one :D 13:09
hrwkevko: you are core so why not?13:10
* kmasterson slaps gouthamr around a bit with a large trout13:14
kmastersonwhoops -_-13:14
holtgrewemgoddard, I'm sorry for being slow here. If I have both the seed and the ironic-on-controller do DHCP+PXE boot on the same physical network - would they not compete about who registers the baremetal-compute nodes?13:27
mgoddardholtgrewe: if they share provisioning networks then you can't do ironic-inspector discovery in both locations - only one can have a default iPXE config13:31
mgoddardholtgrewe: I'm not 100% sure how well it will work if you have discovery enabled in either service13:32
mgoddardholtgrewe: IIRC there may be a small delay before sending out a default PXE response, so usually a MAC specific response would win13:33
mgoddardwould need to be tested13:33
mgoddardor just disable discovery and enroll nodes via the API13:33
holtgrewemgoddard, thank you for the clarification. I was scratching my head about this. I'm trying to replace an xCAT based setup and we have much fewer networks that the OS crowd is used to. Everything LACP but I don't have dedicated in-band management work.13:33
mgoddardholtgrewe: alternatively, use separate vlans13:33
holtgreweI'll stop the seed for now.13:33
mgoddardholtgrewe: do you have multiple controllers?13:34
holtgreweWell, maybe I'm doing something stupid here, but I have a seed-hypervisor with a seed on it. I then have four controllers that also run the nova compute services and also ceph.13:34
holtgreweFor VMs that has worked well.13:35
opendevreviewMerged openstack/kolla-ansible stable/xena: Fix monasca-thresh upgrade  https://review.opendev.org/c/openstack/kolla-ansible/+/82034113:35
opendevreviewMerged openstack/kolla-ansible stable/wallaby: Fix monasca-thresh upgrade  https://review.opendev.org/c/openstack/kolla-ansible/+/82034213:35
opendevreviewMerged openstack/kolla-ansible stable/victoria: Fix monasca-thresh upgrade  https://review.opendev.org/c/openstack/kolla-ansible/+/82034313:35
opendevreviewMerged openstack/kolla-ansible stable/ussuri: Fix monasca-thresh upgrade  https://review.opendev.org/c/openstack/kolla-ansible/+/82034413:35
holtgreweI will just shutdown the seed and when deploying more controllers I will stop ironic-pxe...13:36
opendevreviewMark Goddard proposed openstack/ansible-collection-kolla master: CI: Add job to publish to galaxy on tag creation  https://review.opendev.org/c/openstack/ansible-collection-kolla/+/82120713:39
kevkohrw: done :) 13:49
opendevreviewMerged openstack/kolla-ansible master: bifrost: set IPA deploy logs dir to /var/log/kolla/ironic  https://review.opendev.org/c/openstack/kolla-ansible/+/82119413:50
opendevreviewMerged openstack/kolla-ansible master: Update dnsmasq logging  https://review.opendev.org/c/openstack/kolla-ansible/+/81324014:31
opendevreviewMerged openstack/kolla master: CentOS: do not use advanced-virtualization repo  https://review.opendev.org/c/openstack/kolla/+/81809515:31
opendevreviewMerged openstack/kolla master: horizon: add various dashboard plugins for ubuntu/binary  https://review.opendev.org/c/openstack/kolla/+/79505415:31
guesswhatGuys? Can anyone help? I have single node running ovirt and want to deploy openstack, will this architecture work ? https://ibb.co/wdYpsHp I have 20 public IPs, 4 goes to pfsense for 1:1 NAT, but I want to use rest of public static IPs for neutron external interface. Thanks16:06
holtgrewemgoddard, where do I see which network/interface the (i)pxe tftp server is deployed to?17:39
holtgrewenever mind, it's the internal api interface.18:34
holtgreweAnother question would be why my ironic_(i)pxe containers don't have the ipxe.efi file ...18:34
holtgreweThere is /tftpboot/ipxe-x86_64.efi in my image, though...18:40
opendevreviewJames Kirsch proposed openstack/kolla-ansible master: Use system scoped tokens with Keystone  https://review.opendev.org/c/openstack/kolla-ansible/+/81557718:49
kevkoanybody to advice little bit with swift ? 19:08
kevkoOne tempest test is not working right now for me ...19:08
kevkoi think it would be configuration bug in kolla ..but I am not sure19:08
opendevreviewMaksim Malchuk proposed openstack/kolla-ansible stable/xena: Update dnsmasq logging  https://review.opendev.org/c/openstack/kolla-ansible/+/82130721:05
opendevreviewMaksim Malchuk proposed openstack/kolla-ansible stable/xena: Update dnsmasq logging  https://review.opendev.org/c/openstack/kolla-ansible/+/82130721:43
*** holtgrewe is now known as Guest810222:47
*** holtgrew1 is now known as holtgrewe22:47
opendevreviewMaksim Malchuk proposed openstack/kayobe master: Allow enable SNAT service on the seed hypervisor  https://review.opendev.org/c/openstack/kayobe/+/82045023:16

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!