Wednesday, 2018-04-11

*** esikachev has joined #openstack-sahara00:01
*** esikachev has quit IRC00:05
*** esikachev has joined #openstack-sahara00:10
*** esikachev has quit IRC00:15
*** esikachev has joined #openstack-sahara00:19
*** esikachev has quit IRC00:26
*** openstackgerrit has joined #openstack-sahara00:44
openstackgerritzhongshengping proposed openstack/puppet-sahara master: Update .gitignore  https://review.openstack.org/56019700:44
*** dave-mccowan has joined #openstack-sahara00:46
openstackgerritzhongshengping proposed openstack/puppet-sahara master: Update .gitignore  https://review.openstack.org/56019700:56
*** shuyingy_ has joined #openstack-sahara01:27
*** shuyingya has joined #openstack-sahara02:43
*** shuyingy_ has quit IRC02:43
*** dave-mccowan has quit IRC02:56
*** shuyingy_ has joined #openstack-sahara03:13
*** shuyingya has quit IRC03:13
*** caowei has joined #openstack-sahara03:33
*** esikachev has joined #openstack-sahara05:09
*** shuyingy_ has quit IRC05:13
*** links has joined #openstack-sahara05:29
*** esikachev has quit IRC06:25
*** rcernin has quit IRC07:06
*** tesseract has joined #openstack-sahara07:28
*** tosky has joined #openstack-sahara07:55
*** pcaruana has joined #openstack-sahara08:13
tellesnobregatosky, do you know how to create a bootable volume on UI?12:19
tellesnobregaI'm not sure if this is something that openstack does automagically when possible, but I'm using ubuntu-spark-160 image to create a volume and it created as not bootable12:21
tellesnobreganevermind12:21
tellesnobregaworked12:21
toskyI really did not know the answer12:22
toskyhow did it work?12:22
tellesnobregaI went directly to volumes, create volume and used the image as source12:23
tellesnobregafirst I went to the image and tried creating volume from ir12:23
tellesnobregait12:23
tellesnobregaand I booted an instance with it12:32
toskyI see12:33
*** dave-mccowan has joined #openstack-sahara12:35
*** links has quit IRC13:58
*** ssmith has joined #openstack-sahara14:40
*** cpusmith has joined #openstack-sahara14:42
*** ssmith has quit IRC14:46
openstackgerritcaoyuan proposed openstack/sahara master: Update auth_uri option to www_authenticate_uri  https://review.openstack.org/56047115:32
*** knylander has joined #openstack-sahara16:40
*** tesseract has quit IRC16:59
*** mgindi has joined #openstack-sahara17:26
mgindiHave some questions on how sahara engine sshs to instances for pre-configuration :)17:27
mgindianyone know who the right person for that would be?17:28
mgindiSergeyLukjanov: Hey, I see that you're the Sahara PTL, but i've also heard that you havn't been working on it for a while. Is there someone that you can refer me to that may be able to help me?18:14
ltosky[m]mgindi: the current PTL is tellesnobrega18:18
tellesnobregamgindi, how can I help you?18:18
mginditellesnobrega: Hey how's it going? I'm running sahara in a multinode openstack environment where we have 3 controllers and HA between them, for networking service we're using non-HA DVR. So the problem I'm facing is this:18:21
mginditellesnobrega: when Sahara-engine tries to SSH to instances for its preconfiguration (before the cluster is in active state) there seems to be 1/3 chance of it working, depending on if the network namespaces is on that controller that sahara-engine thats doing the work is on18:23
mginditellesnobrega: at least that's my understanding of the problem. Any comments/opinions/info on this?18:24
tellesnobregamgindi, I'm great, how about you? so, this seems like an issue that we've seen before.18:24
tellesnobregahow is the set up for sahara? do the cluster instances have public ip? or is sahara fully using private ips?18:25
tellesnobregafrom what you explained, looks like s-engine can only access instance locally to it18:27
tellesnobregadoes this seems like a possibility?18:27
mginditellesnobrega: Im doing good thank you very much :) its using fully private ips18:27
mgindiyes seems so18:27
tellesnobregaone test that you can do is, start an instance on any of the nodes (except the one where s-engine is located)18:28
tellesnobregaand try to ssh from the instance where the s-engine is located using private ip18:28
tellesnobregaif that doesn't work, then sahara won't work with your current set up, you will either have to use public ips, or setup a namespace (https://docs.openstack.org/sahara/latest/admin/advanced-configuration-guide.html) or change your routes to allow this communication to happen within your network18:30
*** tenobreg has joined #openstack-sahara18:55
*** pcaruana has quit IRC18:55
*** tellesnobrega has quit IRC18:56
*** tenobreg is now known as tellesnobrega18:56
mginditellesnobrega: I already have done a similar test. setting 'use_namespaces = True' runs the proxy command when sshing to go through the qrouter namespace locally. I had to change the proxy_command so that it goes through qdhcp namespace, sine qrouter doesn't always exist18:56
tellesnobregano luck with that?18:57
mgindiit did work, but still only local namespaces18:57
mgindiis there a way we can pass over the task from one s-engine to another that would have the namespace locally?18:58
mgindii wouldn't mind trying to contributing a fix for that :)18:58
mginditellesnobrega: would that be a good idea?19:05
tellesnobregamgindi, sorry, was out19:21
tellesnobregamgindi, I don't think we have that19:23
tellesnobregaI think I understand better your scenario now, you have s-engine on each controller19:24
tellesnobregais that right?19:24
tellesnobregamgindi, I'm asking one of our devs to give some input on this as well, he is also an operator, so he has more experience than I do with real sahara deployment19:25
tellesnobregamgindi, one fix that I can think of is to set up a proxy that all s-engine use to get to the instances19:26
mginditellesnobrega: yes you're right. I have one s-engine in each controller.19:31
mginditellesnobrega: let me know if i can get in touch with the dev19:32
mgindiI thought about the proxy idea, but I don't know how the proxy would have access to all the namespaces in all the controllers. Its easy to do for one network, but can't think of a way for all networks19:33
*** jeremyfreudberg has joined #openstack-sahara19:40
jeremyfreudbergi'm not sure how much of the conversation i am missing (eavesdrop.openstack.org is sometimes behind), but i wanted to say that as an operator i have only ever run one sahara-engine process, so i don't have an issue with namespace not accessible19:42
jeremyfreudbergbut i think mgindi's use case is a very valid one which needs some attention19:43
jeremyfreudbergi need to talk to my coworker, i think we actually do have some way of replicated qdhcp namespaces across the two controllers maybe19:49
mgindijeremyfreudberg: Hey, hope ur doing well. Most production clouds will have more than one controller with HA between them, so in my view that is an important case to handle for Sahara to be used in production.19:50
mgindiLet me know if there's anything I can help/contribute with19:50
*** knylander has quit IRC19:50
jeremyfreudbergyes, i think it could be solved just at the neutron level (trying to figure out how we do it in my cloud)19:51
mgindijeremyfreudberg: dhcp_agents_per_network is the config setting -> https://docs.openstack.org/newton/networking-guide/config-dhcp-ha.html19:57
jeremyfreudbergmgindi: i have to say i'm not really a neutron expert - but in our cloud we have that config value set to 2 (because we have 2 controllers)19:59
jeremyfreudbergmgindi: oh, i found it, we have two other config changes we made as well20:00
jeremyfreudbergl3_ha should be true20:01
jeremyfreudbergallow_automatic_l3agent_failover should be true20:01
jeremyfreudberg(keep in mind, i'm just reading this from a git blame -- it might not be so relevant as i think)20:01
mgindijeremyfreudberg: hmmm.. we used DVR instead of l3 HA..20:02
mgindibut maybe increasing qdhcp will do the trick. Can i try that and get back to u?20:03
jeremyfreudbergmgindi: sure, give it a try20:03
jeremyfreudberg(we definitely don't use DVR in my cloud -- we have l3 agent mode = legacy)20:04
mgindiIf this doesn't work. would we be able to figure something out for DVR? :)20:06
jeremyfreudbergwe definitely should figure things out for DVR. i'd want sahara to work for all kinds of networking scenarios20:07
mgindiok great. I'll get back to u as soon as im done testing20:08
jeremyfreudbergmgindi, i have to sign off, but email me at <my irc nick>@gmail.com20:08
jeremyfreudbergi'm not on irc as much as i should20:08
mgindijeremyfreudberg: thanks a lot for your help! C ya20:09
*** jeremyfreudberg has quit IRC20:09
*** mordred has quit IRC20:28
*** vkmc has quit IRC20:28
*** mordred has joined #openstack-sahara20:31
*** vkmc has joined #openstack-sahara20:31
*** cpusmith has quit IRC20:51
tellesnobregamgindi, sorry I was away again20:54
tellesnobregahope jeremy was able to help20:54
tellesnobregalet me know how it goes20:54
mginditellesnobrega: thanks for your and jeremy's help. Will do21:07
*** rcernin has joined #openstack-sahara21:49
*** mgindi has quit IRC21:51
-openstackstatus- NOTICE: zuul was restarted to updated to the latest code; you may need to recheck changes uploaded or approvals added between 21:30 and 21:4522:30

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!