Friday, 2014-09-26

*** jml has quit IRC00:12
*** jml has joined #tripleo00:16
*** penick has quit IRC00:18
*** morgan_remote_ has quit IRC00:20
*** andreaf has quit IRC00:26
*** andreaf has joined #tripleo00:26
openstackgerritBen Nemec proposed a change to openstack/diskimage-builder: Enable dracut deploy ramdisks  https://review.openstack.org/10527500:34
openstackgerritBen Nemec proposed a change to openstack/diskimage-builder: Refactor ramdisk element to allow alternate implementations  https://review.openstack.org/12423500:34
*** yamahata_ has joined #tripleo00:41
*** pradeep has quit IRC00:58
*** yamahata_ has quit IRC00:59
*** michchap has joined #tripleo01:02
*** killer_prince is now known as lazy_prince01:18
tchaypookay, so the good news is that it looks like the undercloud might not have been bitten by the horizon issue... it's just that mysql on the seed died at an inconvenient time and so the CREATE_COMPLETE message couldn't be logged01:22
*** panda has quit IRC01:22
*** panda has joined #tripleo01:23
*** penick has joined #tripleo01:35
*** penick_ has joined #tripleo01:37
*** penick has quit IRC01:39
*** penick_ is now known as penick01:39
*** weshay has quit IRC01:40
*** nosnos has joined #tripleo01:45
*** andreaf has quit IRC01:52
*** rhallisey has quit IRC02:10
*** morgan_remote_ has joined #tripleo02:26
*** noslzzp has quit IRC02:27
*** sdake_ has joined #tripleo02:27
*** ramishra has joined #tripleo02:39
*** yamahata_ has joined #tripleo02:40
*** penick has quit IRC02:43
*** nosnos has quit IRC02:55
*** nosnos_ has joined #tripleo02:56
*** nosnos_ has quit IRC02:57
*** nosnos has joined #tripleo02:57
*** untriaged-bot has joined #tripleo03:00
untriaged-botUntriaged bugs so far:03:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/137306303:00
uvirtbotLaunchpad bug 1373063 in tripleo "port not added to bridge after a reboot" [Undecided,In progress]03:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136925603:00
uvirtbotLaunchpad bug 1369256 in tripleo "ubuntu: hash sum mismatch when installing packages" [Undecided,New]03:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136616403:00
uvirtbotLaunchpad bug 1366164 in tripleo "Add domain roles for admin user" [Undecided,New]03:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136774203:00
uvirtbotLaunchpad bug 1367742 in tripleo "keepalived brings the VIP up in multiple places on a controller reboot" [Undecided,New]03:00
*** untriaged-bot has quit IRC03:00
*** sdake_ has quit IRC03:00
*** nosnos has quit IRC03:01
*** ramishra has quit IRC03:01
*** sdake has quit IRC03:02
*** pradeep has joined #tripleo03:05
*** sdake_ has joined #tripleo03:05
*** pcrews has quit IRC03:13
*** Yanyanhu has joined #tripleo03:18
*** ramishra has joined #tripleo03:23
*** lazy_prince is now known as killer_prince03:28
lifelesswa hey, looks like we're going to be broken by the fix to this bash thing03:33
tchaypoweeeee03:33
tchaypowe're relying on it over-parsing functions?03:33
lifelesspretty sure we export a function somewhere03:37
*** dsneddon has quit IRC03:40
*** dsneddon has joined #tripleo03:41
tchaypoGah. I was assuming the fix would just be to stop it over-parsing; not to stop the ability to export functions entirely03:41
lifelesswell03:42
lifelessfolk are examining ramifications now03:42
lifelessthere's a thread on debian about removing support entirely03:42
*** pcrews has joined #tripleo03:43
tchaypothat'll be fun.03:43
tchaypooh well, more justification for a move to python :)03:43
*** bvivek has joined #tripleo03:47
*** morazi has quit IRC03:51
*** morazi has joined #tripleo03:52
*** yuanying_ has joined #tripleo03:59
openstackgerritOpenStack Proposal Bot proposed a change to openstack/python-tuskarclient: Updated from global requirements  https://review.openstack.org/11641503:59
openstackgerritOpenStack Proposal Bot proposed a change to openstack/tuskar: Updated from global requirements  https://review.openstack.org/12267404:00
openstackgerritOpenStack Proposal Bot proposed a change to openstack/tuskar-ui: Updated from global requirements  https://review.openstack.org/12426204:00
*** yuanyin__ has joined #tripleo04:02
*** yuanying_ has quit IRC04:02
*** yuanying has quit IRC04:03
*** ramishra_ has joined #tripleo04:07
*** ramishra has quit IRC04:08
*** yamahata_ has quit IRC04:08
*** yamahata_ has joined #tripleo04:08
*** yuanyin__ has quit IRC04:10
*** Azher has joined #tripleo04:13
*** sdake has joined #tripleo04:15
*** yuanying has joined #tripleo04:15
*** nikunj2512 has joined #tripleo04:22
*** killer_prince is now known as lazy_prince04:24
*** nosnos has joined #tripleo04:28
tchaypothanks bot04:28
openstackgerritMotohiro 'Yuanying' Otsuka proposed a change to openstack/os-refresh-config: Coverage report was't created  https://review.openstack.org/12426404:31
*** akuznetsov has quit IRC04:45
*** akuznetsov has joined #tripleo04:47
*** lazy_prince is now known as killer_prince04:48
*** ci-overcloud has joined #tripleo04:49
ci-overcloud************** ci-overcloud complete status=1 ************04:49
*** ci-overcloud has quit IRC04:49
openstackgerritMotohiro 'Yuanying' Otsuka proposed a change to openstack/os-refresh-config: Coverage report was't created  https://review.openstack.org/12426404:51
*** cody-somerville has quit IRC04:54
openstackgerritIan Wienand proposed a change to openstack/diskimage-builder: Standarise tracing for scripts  https://review.openstack.org/11902305:00
*** morgan_remote_ has quit IRC05:00
*** yuanying_ has joined #tripleo05:01
*** killer_prince is now known as lazy_prince05:02
*** yuanying has quit IRC05:04
*** bvivek has quit IRC05:08
*** tzumainn has quit IRC05:11
*** pcrews has quit IRC05:23
*** sdake_ has quit IRC05:27
*** bvivek has joined #tripleo05:29
*** pcrews has joined #tripleo05:30
*** rdopieralski has joined #tripleo05:36
*** vdreamarkitex has quit IRC05:37
*** rushiagr_away is now known as rushiagr05:41
*** loki184 has joined #tripleo05:42
*** yamahata_ has quit IRC05:43
*** yamahata_ has joined #tripleo05:43
*** Yanyan has joined #tripleo05:44
*** Yanyanhu has quit IRC05:47
openstackgerritlokesh s proposed a change to openstack/tripleo-image-elements: adding local boot support for uboot arm arch  https://review.openstack.org/10672705:47
*** jprovazn has joined #tripleo05:51
*** mrunge has joined #tripleo05:58
*** PIEgg has joined #tripleo06:08
*** PIEgg has quit IRC06:08
*** juice has quit IRC06:28
*** uvirtbot has quit IRC06:28
*** devananda has quit IRC06:29
*** grauwulf has quit IRC06:29
*** fabbione has quit IRC06:29
*** fabbione has joined #tripleo06:29
*** devananda has joined #tripleo06:31
*** grauwulf has joined #tripleo06:31
*** juice has joined #tripleo06:35
*** k4n0 has joined #tripleo06:37
*** pblaho has joined #tripleo06:43
*** uvirtbot has joined #tripleo06:43
*** pcrews has quit IRC06:44
*** yuanying_ has quit IRC06:52
*** yuanying has joined #tripleo06:53
*** yuanying has quit IRC06:58
*** ramishra_ has quit IRC07:00
*** yuanying has joined #tripleo07:00
*** pensu has joined #tripleo07:03
*** pensu has quit IRC07:09
*** pensu has joined #tripleo07:12
openstackgerritMotohiro 'Yuanying' Otsuka proposed a change to openstack/os-refresh-config: Coverage report was't created  https://review.openstack.org/12426407:14
*** boris-42 has quit IRC07:15
*** grauwulf has quit IRC07:15
*** athomas has joined #tripleo07:17
*** grauwulf has joined #tripleo07:18
yuanyingStevenK: are you online?07:25
*** pensu has quit IRC07:25
yuanyingStevenK: I fixed https://review.openstack.org/124264 to use testr. is it ok?07:26
*** pensu has joined #tripleo07:26
*** jang1 has joined #tripleo07:27
*** jistr has joined #tripleo07:28
yuanyingStevenK: and other os-*-config projects uses "python setup.py test" instead of "testr". so we should change these?07:29
StevenKyuanying: Does it work with testr ?07:35
yuanyingYes, it works.07:35
openstackgerritNicholas Randon proposed a change to openstack/tripleo-image-elements: Fix RabbitMQ element clustering start and stop  https://review.openstack.org/11552407:37
*** ramishra has joined #tripleo07:42
*** gfidente has joined #tripleo07:43
StevenKyuanying: I'm trying to remember if we are trying to converge on testr, I shall talk to others on Monday and comment on the review.07:44
*** yuanying has quit IRC07:45
*** yuanying has joined #tripleo07:46
yuanyingStevenK: Thank you.07:46
*** bvivek has quit IRC07:54
*** regebro has joined #tripleo07:55
*** jcoufal has joined #tripleo07:59
*** jtomasek has joined #tripleo08:01
*** yuanying has quit IRC08:06
*** yuanying has joined #tripleo08:06
*** yuanying has quit IRC08:11
*** Azher has quit IRC08:16
*** bvivek has joined #tripleo08:20
*** akrivoka has joined #tripleo08:24
*** lucasagomes has joined #tripleo08:28
*** jp_at_hp has joined #tripleo08:28
*** jp_at_hp has quit IRC08:29
*** jp_at_hp has joined #tripleo08:29
*** derekh has joined #tripleo08:35
*** lazy_prince has quit IRC08:37
*** killer_prince has joined #tripleo08:46
*** killer_prince is now known as lazy_prince08:46
*** jang1 has quit IRC08:50
*** ramishra has quit IRC08:57
*** akrivoka has quit IRC08:59
*** untriaged-bot has joined #tripleo09:00
untriaged-botUntriaged bugs so far:09:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/137306309:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136925609:00
uvirtbotLaunchpad bug 1373063 in tripleo "port not added to bridge after a reboot" [Undecided,In progress]09:00
untriaged-bothttps://bugs.launchpad.net/os-refresh-config/+bug/137425909:00
uvirtbotLaunchpad bug 1369256 in tripleo "ubuntu: hash sum mismatch when installing packages" [Undecided,New]09:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136616409:00
uvirtbotLaunchpad bug 1374259 in os-refresh-config "Coverage report was't created" [Undecided,In progress]09:00
uvirtbotLaunchpad bug 1366164 in tripleo "Add domain roles for admin user" [Undecided,New]09:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136774209:00
uvirtbotLaunchpad bug 1367742 in tripleo "keepalived brings the VIP up in multiple places on a controller reboot" [Undecided,New]09:00
*** untriaged-bot has quit IRC09:00
*** pblaho has quit IRC09:04
*** lazy_prince has quit IRC09:06
*** lazy_prince has joined #tripleo09:06
*** Dafna has joined #tripleo09:08
openstackgerritRadomir Dopieralski proposed a change to openstack/tuskar-ui: Remove the selector from the top bar  https://review.openstack.org/12433909:12
tchaypointeresting that we got exactly 4 successes in this ci-overcloud run too09:13
openstackgerritRadomir Dopieralski proposed a change to openstack/tuskar-ui: Remove the selector from the top bar  https://review.openstack.org/12433909:14
tchaypoafter such a long run consistently getting 5... I'm now wondering if I imagined that, or if it was just chance, or if something changed09:14
*** ramishra has joined #tripleo09:15
*** lsmola has joined #tripleo09:15
lazy_princeexit09:18
tchaypolazy_prince: ;)09:19
shadowerpbelanyi_: ping09:20
*** bvivek has quit IRC09:21
*** yamahata_ has quit IRC09:23
*** bvivek has joined #tripleo09:23
*** Yanyan has quit IRC09:24
*** gchamoul has quit IRC09:25
*** andreaf has joined #tripleo09:28
openstackgerritA change was merged to openstack/tuskar-ui: Updated from global requirements  https://review.openstack.org/12426209:28
regebroUhm, OK. so we have static heat meatadata for the undercloud. And it's queryable via os-apply-config.09:28
regebroIs it queryable some other way?09:29
*** gchamoul has joined #tripleo09:31
openstackgerritDerek Higgins proposed a change to openstack-infra/tripleo-ci: Revert "temprevert "Datepicker locale support""  https://review.openstack.org/12434209:31
regebroHm. I think we need to get the templates to then use it and stick it in a plan parameter.09:33
tchaypookay, the good news is that on that run, the *only* error that seeme dto be hit is the nova scheduler race - so perhaps all the other errors were symptoms of keystone and the mysql tiny pool09:33
tchaypolifeless: ^^^09:33
tchayporunning again with max_retries=50, let's see how tis goes09:33
openstackgerritDerek Higgins proposed a change to openstack-infra/tripleo-ci: Nothing to see here  https://review.openstack.org/11101109:37
shadowerpbelanyi_: nevermind, just added a few comments to your patch.09:37
openstackgerritGiulio Fidente proposed a change to openstack/tripleo-incubator: Improve documentation around cinder-volume-nfs usage  https://review.openstack.org/12434709:48
openstackgerritGiulio Fidente proposed a change to openstack/tripleo-incubator: Improve documentation around usage of cinder-volume-nfs  https://review.openstack.org/12434709:59
openstackgerritTomas Sedovic proposed a change to openstack/tripleo-incubator: Pass resource registry file to Heat if it exists  https://review.openstack.org/12376110:01
*** nosnos has quit IRC10:09
*** dkehn has quit IRC10:09
*** nosnos has joined #tripleo10:09
*** dkehn has joined #tripleo10:11
*** jprovazn has quit IRC10:14
openstackgerritRadomir Dopieralski proposed a change to openstack/tuskar-ui: Fix the live deployment icon  https://review.openstack.org/12435310:16
openstackgerritRadomir Dopieralski proposed a change to openstack/tuskar-ui: Fix icon on live deployment overview  https://review.openstack.org/12435310:17
openstackgerritRadomir Dopieralski proposed a change to openstack/tuskar-ui: Angularize the overview page  https://review.openstack.org/12435410:19
*** athomas has quit IRC10:21
*** athomas has joined #tripleo10:30
*** loki184 has quit IRC10:46
*** pradeep1 has joined #tripleo10:55
*** pradeep has quit IRC10:55
*** ci-overcloud has joined #tripleo11:01
ci-overcloud************** ci-overcloud complete status=1 ************11:01
*** ci-overcloud has quit IRC11:01
*** pblaho has joined #tripleo11:06
*** pblaho has quit IRC11:07
*** pblaho has joined #tripleo11:07
*** jprovazn has joined #tripleo11:08
openstackgerritLennart Regebro proposed a change to openstack/tuskar-ui: Hide the flavor selection if we don't do flavor matching  https://review.openstack.org/12436211:09
*** jistr has quit IRC11:10
*** jistr has joined #tripleo11:14
*** lucasagomes is now known as lucas-hungry11:19
*** akrivoka has joined #tripleo11:22
openstackgerritA change was merged to openstack/os-refresh-config: Updated from global requirements  https://review.openstack.org/12064511:30
*** bvivek has quit IRC11:33
*** bvivek has joined #tripleo11:33
*** akrivoka has quit IRC11:38
*** k4n0 has quit IRC11:46
openstackgerritA change was merged to openstack/python-tuskarclient: Updated from global requirements  https://review.openstack.org/11641511:49
*** akrivoka has joined #tripleo11:49
openstackgerritRadomir Dopieralski proposed a change to openstack/tuskar-ui: Angularize the overview page  https://review.openstack.org/12435411:54
*** akrivoka has quit IRC12:08
*** nikunj2512 has quit IRC12:09
*** vdreamarkitex has joined #tripleo12:17
*** radez_g0n3 is now known as radez12:17
*** slagle has quit IRC12:20
*** slagle has joined #tripleo12:20
openstackgerritA change was merged to openstack/tripleo-heat-templates: undercloud: use Nova compute Ironic driver  https://review.openstack.org/12275412:23
*** nosnos has quit IRC12:24
*** nosnos has joined #tripleo12:24
regebroslagle: I hope my last email clarified the issue? If not tell me. :-)12:24
*** jang1 has joined #tripleo12:27
slagleregebro: let me go read it :)12:29
*** nosnos has quit IRC12:29
slagleregebro: maybe we could write the value to the settings.py?12:32
slagleregebro: then you would have access to it from horizon no?12:32
*** jdob has joined #tripleo12:33
regebroslagle: That should work. It does feel like a horrid hack, but maybe that's OK. :-)12:33
slaglewell, it is a setting ;)12:35
slagleyou actually don't need a service to query via os-apply-config, but the problem we're going to run into is that you do have to be root12:36
openstackgerritNicholas Randon proposed a change to openstack/tripleo-image-elements: Fix RabbitMQ element clustering start and stop  https://review.openstack.org/11552412:37
*** jml has quit IRC12:37
regebroslagle: Root, and on the correct machine.12:39
*** jml has joined #tripleo12:39
slagleyou're on the correct machine12:39
slaglelsmola: can you take a look at http://git.openstack.org/cgit/openstack/tripleo-image-elements/tree/elements/heat/os-apply-config/etc/heat/heat.conf and let me know if the configuration options to setup the trusts the way tuskar-ui needs are configurable?12:40
regebroslagle:  When you set up devtest, horizon is not running on the undercloud.12:40
slaglelsmola: so that we can remove the admin password from settings.py12:40
*** lazy_prince has quit IRC12:41
regebroI don't know how common that will be in practice, but I don't think it's a good idea to break that.12:41
slagleregebro: eventually, it will be. i think we're solving for an actual deployment scenario, not a dev setup where you're running horizon locally12:41
*** lucas-hungry is now known as lucasagomes12:41
slaglefor a dev setup, we can configure anything how we need to via a script/whatever12:42
slagleregebro: but i think the settings.py approach would work for a dev setup as well?12:42
regebroslagle: Yeah, we just have a default setting, and if it's the wrong one you can change it.12:43
regebros/we/we can12:43
regebroslagle: OK, I'll look into adding this to os-apply-config12:44
lsmolaslagle: doesn't look to be configurable12:45
*** ramishra has quit IRC12:46
lsmolaslagle: but we should be able to set it through passtrough, right?12:46
lsmolaslagle: might be worth to just wait till trusts is default in heat12:48
slagleregebro: it's already set in os-apply-config, we just need to query for the value and write it to the settings.py, which we can do in the tuskar-ui element directly12:49
slagleregebro: i can do that, if you'd like12:49
slaglelsmola: heat.conf does not appear to be passthrough enable. but, probably should be12:49
lsmolaslagle: btw. the admin password is set in tuskar-ui element now12:49
slaglelsmola: right, and i want to get rid of that :)12:49
regebroslagle: Nah, I'll try, because I only understood half of what you said now, and I'd like to understand all of it.12:49
lsmolaslagle: are yo utalking about that with regebro ?12:49
slaglelsmola: no, something else, but it reminded me of the password in there12:50
lsmolaslagle: ok12:50
*** rdopieralski has quit IRC12:51
*** ramishra has joined #tripleo12:56
openstackgerritJames Slagle proposed a change to openstack/tripleo-image-elements: Passthrough enable heat.conf  https://review.openstack.org/12439312:56
*** dprince has joined #tripleo12:56
*** rhallisey has joined #tripleo13:01
*** killer_prince has joined #tripleo13:01
*** killer_prince is now known as lazy_prince13:01
regebroslagle: So when you say "tuskar-ui element" do you mean the _50_tuskar.py file, or inside the panel code, or? I'm not sure. :-)13:02
slagleregebro: it's in tripleo-image-elements repository. it's what's used to install tuskar-ui13:03
regebroslagle: Ah, forgot about that one.13:04
slagleregebro: there is a script there under os-refresh-config/post-configure.d. from that script, use the os-apply-config command to query for the value, then write it to the settings file13:04
tchaypoand now hp2 is back in a state where even with the scheduler retrying 50 times for each node it can never find a node with >0mb ram free so none of my nodes ever get built13:05
slaglelsmola: can you remind me of the config values in heat.conf?13:07
lsmolaslagle: on hangout now13:08
lsmolaslagle: deferred_auth_method=trusts13:09
lsmolaslagle: trusts_delegated_roles=_member_13:10
slaglethx13:10
lsmolaslagle: but I tested it only with trusts_delegated_roles=admin13:10
*** tzumainn has joined #tripleo13:11
*** dprince has quit IRC13:12
otoolee-Is patch https://review.openstack.org/#/c/123999/ OK to merge?  We need it to enable memcache on debian-based OSes, which in turn is used by the Swift proxy.13:13
*** yamahata_ has joined #tripleo13:19
slagleotoolee-: lgtm, approved it13:21
otoolee-slagle, Thanks.13:22
radezsdake: morning, I have the keystone container up and running but it looks like mariadb isn't running. the start command seems to reference some variables that look like they are supposted to be passed it13:22
radez*passed in, is there something that's supposed to be defined in the json passed to kubernetes?13:23
*** Kiall has quit IRC13:24
openstackgerritA change was merged to openstack/tripleo-image-elements: Fix memcache listen port setting on debian-based OSes  https://review.openstack.org/12399913:26
radezsdake: nm I just found https://github.com/jlabocki/superhappyfunshow/blob/master/docker/keystone/keystone.json... I was writing my own :)13:27
openstackgerritA change was merged to openstack/tripleo-image-elements: Add swift.proxy-memcache metadata to proxy-server.conf  https://review.openstack.org/8631213:27
*** noslzzp has joined #tripleo13:29
*** noslzzp has quit IRC13:29
*** dprince has joined #tripleo13:39
*** mestery has quit IRC13:40
*** noslzzp has joined #tripleo13:40
sdakeradez yes you need to kubecfg -c service.json start service iirc13:42
*** rushiagr is now known as rushiagr_away13:43
sdakeradez also check out my pending changeset13:43
sdakeI registered a login for our images and uploaded a bunch there13:43
sdakekollaglue/fedora-rdo-mariadb for eg13:43
radezsdake: will do. still debugging mysql :)13:44
sdakeyou need to pod and service start those two13:44
sdakewith the correct image13:44
sdakethe image that is in the json is incorrect13:44
openstackgerritJames Slagle proposed a change to openstack/tripleo-image-elements: Add network-gateway element  https://review.openstack.org/12439913:44
radezsdake: yea I updated the json to point to the image that I built13:46
radezI pushed it into a private repo on my kube master13:46
radezsdake: is pod start different then pod create?13:47
radezbrb13:47
sdakeradez not sure13:49
openstackgerritTzu-Mainn Chen proposed a change to openstack/tuskar-ui: Adding plan parameter view on service configuration tab  https://review.openstack.org/12352913:49
*** larsks has joined #tripleo13:49
radezk... saga continues :)13:49
larsksradez: sdake said you had a question...13:49
radezlarsks: yea, just got a walk up... gimme a sec13:50
sdake<radez> sdake: is pod start different then pod create?13:51
radezoh yea larsks ^13:51
larsksradez: Well...sort of, I guess.  "create" submits the pod to the scheduler, which will attempt to schedule it on a minion, at which point it will start. So "create" puts the pod in the queue in the "waiting" state, and it will start when it is successfully scheduled.13:52
larsks(and transitions from waiting -> running)13:52
radezlarsks: right, but the /start.sh script will be executed in that process right?13:53
radezmysql wasn't starting in my container, just making sure I have my head wrapped around this to debug it properly13:53
larsksThat's no longer a kubernetes question :).  When a Docker container starts, it will do whatever it's ENTRYPOINT and CMD entries tell it to do.13:53
sdakeI think I have the same problem13:53
larsksYou can always test containers by hand by using "docker run" and providing the necessary environment variables with '-e var=value' command line options.  I was giving sdake a few suggestions for debugging containers earlier.  I should just write those up, I guess.13:54
radezlarsks: ack, I think kube is doing it's thing properrly and it's a matter of figureing out the start.sh and container13:54
radezlarsks: that's a good suggestion...13:54
larsksLet me put together a quick email.13:55
sdakemariadb has an entrypo8int.sh not a start.sh13:55
sdakelarsks make suer to mail openstack-dev plz13:55
larsksSure.13:55
sdakewith [kolla] in the tags13:55
*** pradeep1 has quit IRC13:57
radezsdake: oh, ha... I didn't see that there's a mariadb container too14:04
sdakelarsks running those containers manaully gets something that boots14:04
sdakeby running manually, I mean "docker run"14:05
larskssdake: Sure. I think the answers are going to be found by inspecting the containers that didn't seem to start correctly.14:05
radezsdake so you're running the maria db and the keystone containers?14:06
sdakemy containers start in kub correctly they just dont provide keystone service14:06
radezer pods?14:06
sdakeradez yup14:06
sdakepods and services14:06
larskssdake: That sounds like "not starting correctly" to me :)14:06
radezthat's what I'm missing i think... what do you mean pods and services?14:06
sdakemaybe my test case is bust14:06
sdakethere is stuff with -5000.service14:07
sdakerun that with service start14:07
larsksradez: a "pod" is a group of linked containers (shared network namespace) that you create with "kubecfg create pods".14:07
sdakekubecfg -c file-500.json service start14:07
larsksradez: A "service" is a service discovery mechanism that sets up proxies and environment variables in containers so that your pods can discover the addresses to use for a given service.14:07
radezlarsks: right, so do I do that once for keystone and once for maria db json files or do I need to tie them toether osmehow?14:07
radezso the services are somethign that happends as a result of pods create?14:08
larsksTHe keystone pod discovers the mariadb endpoint using the environment variables provided due to the mariadb service.14:08
larsksNo, the services are created with "kubecfg create services".14:08
larsksI highly recommend walking through the kube guestbook example: https://github.com/GoogleCloudPlatform/kubernetes/tree/master/examples/guestbook14:08
larsks...before mucking about with anything else.14:09
sdakekeystone-service-5000.json14:09
sdakesee that file14:09
sdakethat is the service you need to start14:09
sdakekubecfg -c keystone-service-5000.json service start14:09
radezlarsks: I've looked though that... I guess Ineed to actually execute it14:09
sdakeservice start gets the docker containers rolling together14:09
larskssdake: I know that there were some changes to the dockerfiles since the hackathon, and I have not tested any of the images since then.  So it's entirely possible something is broken.14:10
*** yamahata_ has quit IRC14:10
sdakemy keystone public address seems to work - eg:[sdake@minime ~(keystone_admin)]$ telnet 172.24.4.234 500014:12
sdakeTrying 172.24.4.234...14:12
sdakeConnected to 172.24.4.234.14:12
sdakeEscape character is '^]'.14:12
sdakeVERSION14:12
sdake<head>14:12
sdake<title>Error response</title>14:12
larsksI would use 'curl' for testing an http service myself.14:12
larsksBut yeah, at least something is responding.14:12
sdake[sdake@minime ~(keystone_admin)]$ keystone endpoint-list14:14
sdakeAuthorization Failed: An unexpected error prevented the server from fulfilling your request. (HTTP 500)14:14
larsksLogs!14:14
larsksEnvironment variables!14:14
sdakehow do we get the logs14:15
larsksIn theory, 'docker logs' should have the stdout/stderr of the keystone process.  Also, by nsenter-ing the container, setting environment variables per /proc/pid/1/environ, and running the start.sh script manually...14:16
*** andreaf has quit IRC14:16
*** andreaf has joined #tripleo14:17
sdakewhat is the container called, keystone-master?14:17
larsksNo.  You would need to run 'docker ps' to get the name (or id) of the container.14:17
larsksThe container name is generated dynamically.14:17
shadowerhey sdake14:18
sdakehey shadower14:18
*** yamahata_ has joined #tripleo14:18
sdakelarsks that doesn't generate the keystone service logs14:18
sdakeI'll have to chang ethe container config I think to log to stdout rather then file14:19
larskssdake: So go for plan b.14:19
larskssdake: Or just nsenter and look for the logs in /var/log.14:19
*** vgnbkr has joined #tripleo14:20
vgnbkrGood Morning.  I'm working on Trove and have some questions about diskimage-builder.  Is this the place?14:21
*** jehb has joined #tripleo14:22
openstackgerritPeter Belanyi proposed a change to openstack/tripleo-heat-templates: Add converted version of block and object storage  https://review.openstack.org/12371314:22
*** regebro has quit IRC14:22
radezsdake: you can attach to the container on the node14:25
*** dprince has quit IRC14:25
radezsdake: use this script https://github.com/twiest/docker-vagrant-libvirt/blob/master/enter-container.sh14:25
sdakecool I'll give that a try14:25
*** dprince has joined #tripleo14:25
radezI jum on the node14:25
radezdocker ps to get the id14:25
radezthen pass that id ot the the script14:26
radezdropps you right in.14:26
radezI'm looking at the keystone logs on there14:26
radezsdake: i think we're at the smae place, but I've seen the logs <grin>14:26
*** andreaf has quit IRC14:26
sdakeyes but I has slides!!14:26
openstackgerritRyan Brady proposed a change to openstack/diskimage-builder: Enable RHEL Registration  https://review.openstack.org/12314514:26
*** andreaf has joined #tripleo14:27
radezhehe14:28
radezsdake: compading the start script to the keystone config it looks like mine isn't getting the service information from mariadb14:28
larsksradez: Look at the environment variables assigned to pid 1.14:28
larsksSee the email I just sent.14:29
* radez checks it out14:29
*** ramishra has quit IRC14:31
jpeelerhey kube folks, so what command is being used to register keystone with kubernetes?14:31
sdakejpeeler kubecfg14:32
jpeelerI haven't looked at the guestbook example yet, but if I'm only a few commands behind y'all then...14:32
sdakejpeeler on t he "master" node create4d with the kube template14:32
larskskubecfg -c keystone.json create  pods14:32
larsksjpeeler: ^^^14:32
sdakeyou need to create mariadb first14:32
sdakeafter you create pods, you need to create services14:32
sdakeor start them, not sure which ;-)14:32
larskssdake: note that you can create services before pods. It's possible that the deployment will be "create all the services first" before starting any pods.  Maybe.14:33
radezsdake: I think my env vars arn't matching up with the vars passed in becasue I tweaked my json files to create the pods and services14:34
radezso looks like the json files can impact what the env names are14:34
larsksradez: the environmetn are set based on the service names you provide.  so if you change the service names, then yes, different env. var names.14:35
radezah that ties it together... thx14:35
jpeelerperhaps silly question, but does the image line need updating in the json?14:36
larsksjpeeler: if it does not point at a valid image, then sure.14:36
openstackgerritRyan Brady proposed a change to openstack/diskimage-builder: Enable RHEL Registration  https://review.openstack.org/12314514:37
openstackgerritRyan Brady proposed a change to openstack/diskimage-builder: Enable RHEL Registration  https://review.openstack.org/12314514:39
*** CaptTofu___ is now known as CaptTofu14:40
*** ramishra has joined #tripleo14:41
openstackgerritJon-Paul Sullivan (jp_at_hp) proposed a change to openstack/tripleo-image-elements: CORE-1775 Ensure tempest writes a full manifest  https://review.openstack.org/12442514:46
openstackgerritTomas Sedovic proposed a change to openstack/tripleo-heat-templates: Compute and controller templates without merge.py  https://review.openstack.org/12310014:47
openstackgerritJon-Paul Sullivan (jp_at_hp) proposed a change to openstack/tripleo-image-elements: Ensure tempest writes a full manifest  https://review.openstack.org/12442514:47
openstackgerritTomas Sedovic proposed a change to openstack/tripleo-incubator: Pass resource registry file to Heat if it exists  https://review.openstack.org/12376114:52
radezsdake: I've got my env vars fixed up now... and I get this in my keystone log14:52
radezOperationalError: (OperationalError) (2013, "Lost connection to MySQL server at 'reading initial communication packet', system error: 0")14:52
radezwhich looks like it's because my mariadb instance is running on  my 1st node and the service is connecting to the second node14:53
*** mestery has joined #tripleo14:55
radezlarsks: if mariadb is running on the 1st node and I connect to 3306 on the second node should the proxies handle that properly>?14:55
radezthat doesn't seem to be working... so either the proxies to take care of that or the service returned the wrogn ip?14:56
larsksradez: Yes.  On each minion there should be a kube-proxy process running on the host that is bound to that port.14:56
larsks'netstat -tln' on the host should answer the 'is kube-proxy listening' question.14:57
radezlarsks: are there logs somewhere that I could figure out why proxy on minon2 doesn't send traffic to minion114:57
radezI see the proxy listening on the port14:57
larsksradez: Hmm, not sure. Take a look at what kube-proxy is logging in the journal?  I am currently building and booting things locally, at which point I will see if I can reproduce what you're seeing...14:59
*** untriaged-bot has joined #tripleo15:01
untriaged-botUntriaged bugs so far:15:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/137306315:01
uvirtbotLaunchpad bug 1373063 in tripleo "port not added to bridge after a reboot" [Undecided,In progress]15:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136925615:01
uvirtbotLaunchpad bug 1369256 in tripleo "ubuntu: hash sum mismatch when installing packages" [Undecided,New]15:01
untriaged-bothttps://bugs.launchpad.net/os-refresh-config/+bug/137425915:01
uvirtbotLaunchpad bug 1374259 in os-refresh-config "Coverage report was't created" [Undecided,In progress]15:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136616415:01
uvirtbotLaunchpad bug 1366164 in tripleo "Add domain roles for admin user" [Undecided,New]15:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136774215:01
*** untriaged-bot has quit IRC15:01
uvirtbotLaunchpad bug 1367742 in tripleo "keepalived brings the VIP up in multiple places on a controller reboot" [Undecided,New]15:01
*** marun has joined #tripleo15:01
radezfound the kube-proxy logs.15:05
radezDial failed: dial tcp 10.251.3.10:3306: no route to host15:05
radezlooks like the connection from one of the proxies to maria is busted15:05
radezgotta run out for a bit, ttyl15:05
*** radez is now known as radez_g0n315:05
*** pcrews has joined #tripleo15:07
*** chuckC has joined #tripleo15:11
*** ChuckC_ has joined #tripleo15:12
*** jogo is now known as flashgordon15:17
*** pradeep1 has joined #tripleo15:17
slaglelsmola: this is the change we need merged to set those configs: https://review.openstack.org/#/c/124393/15:17
slaglelsmola: if you're in a +2 mood :)15:18
sdakeradez jpeeler create an account on docker.io plz15:21
openstackgerritA change was merged to openstack/tripleo-image-elements: Passthrough enable heat.conf  https://review.openstack.org/12439315:22
*** anteaya has quit IRC15:23
*** pradeep1 has quit IRC15:25
*** jprovazn has quit IRC15:25
*** mrunge has quit IRC15:32
openstackgerritPeter Belanyi proposed a change to openstack/tripleo-heat-templates: Add converted version of block and object storage  https://review.openstack.org/12371315:36
jpeelersdake: which host is the docker images supposed to be on?15:39
jpeelermy list pods output just reports "waiting"15:39
sdakejpeeler pull my happyfun repo15:39
sdakenot jlebocki's15:39
sdakeI have changes which use the globally registered dockerinc images15:40
jpeelerhrm, well which host would those images be downloaded on? it doesn't look like docker is running on the kube master15:41
*** andreaf has quit IRC15:41
*** andreaf has joined #tripleo15:42
larsksjpeeler: docker only runs on the minions.15:54
larsksjpeeler: the master schedules a pod on a minion, then the minion pulls and starts the image.15:54
jpeelerit would be neat if you could chain docker instances together, it looks like i just need to move the images to the minions then15:56
jpeelerif that doesn't work steve, i'll go the global route15:56
*** bnemec is now known as beekneemech16:00
openstackgerritRyan Brady proposed a change to openstack/diskimage-builder: Add svc-map element.  https://review.openstack.org/9677016:00
larsksjpeeler: what does "chain docker instances together" mean?16:03
jpeelerlarsks: in my mind, to pull a docker image from another docker installation16:03
larsksAh.  Yeah, docker only knows how to pull from registries. You can run a registry locally and manually feed it images from docker hub, I guess -- that would get you faster start times on your minions for new images.16:05
larsksNote that kubernetes will *always* perform a 'pull' before starting a pod, even if  the image exists locally.  After building an image locally always make sure to 'docker push'.16:05
sdakehttps://review.openstack.org/12445316:08
sdakeonce that goes through we should be g2g16:08
*** mestery has quit IRC16:12
*** chuckC has quit IRC16:18
*** cody-somerville has joined #tripleo16:21
*** ChuckC has joined #tripleo16:24
*** ChuckC_ has quit IRC16:26
*** ChuckC has quit IRC16:30
*** anteaya has joined #tripleo16:34
openstackgerritA change was merged to openstack-infra/tripleo-ci: Update virsh ssh commands to support setting the locale  https://review.openstack.org/12407216:37
derekhlucasagomes: ^ I'll deploy the change on monday morning, first thing16:38
lucasagomesderekh, w00t! alright, thanks!16:39
*** ramishra has quit IRC16:42
*** jistr is now known as jistr|afk16:45
*** mestery has joined #tripleo16:51
*** mestery has quit IRC16:51
*** mestery has joined #tripleo16:52
*** Dafna has quit IRC16:53
*** andreaf has quit IRC16:55
*** andreaf has joined #tripleo16:56
*** yamahata_ has quit IRC16:57
*** lucasagomes is now known as lucas-dinner17:08
*** lazy_prince has quit IRC17:08
*** saurabhs has joined #tripleo17:12
*** derekh has quit IRC17:14
*** ramishra has joined #tripleo17:14
*** athomas has quit IRC17:16
*** ChuckC has joined #tripleo17:24
*** chuckC_ has joined #tripleo17:26
*** ChuckC has quit IRC17:29
*** chuckC_ is now known as chuckC17:29
*** ChuckC_ has joined #tripleo17:30
*** ramishra has quit IRC17:34
*** pradeep1 has joined #tripleo17:36
*** pensu has quit IRC17:43
*** pradeep1 has quit IRC17:55
*** pensu has joined #tripleo17:59
*** sballe_ has joined #tripleo17:59
*** dprince has quit IRC18:01
*** bvivek has quit IRC18:06
*** morgan_remote_ has joined #tripleo18:07
*** killer_prince has joined #tripleo18:09
*** killer_prince is now known as lazy_prince18:09
*** jcoufal has quit IRC18:13
*** dprince has joined #tripleo18:13
*** jp_at_hp has quit IRC18:13
*** radez_g0n3 is now known as radez18:24
radezjpeeler: I've also launched the containters in a private docker repo that run on my master18:25
*** spzala has joined #tripleo18:26
radezsdake: have you gotten the keystone containers working? I'm about to investigate further but I think there's something not right with the overlay network. the proxy on 1 node can connect to mysql on the other node18:26
jpeelerradez: that confuses me, i was just told that docker runs only on the minions18:27
radezjpeeler: I added a private-dcoer registry to the giddyup18:28
radezyour inforamation is correct18:28
radezbut another option is to build the containers and push them to a private repo, I was able to do this successfully18:28
jpeeleri clearly am not quite understanding something here18:29
radezit just so happened I put the docker repo on my master but it could have gone anywhere18:29
radezyou can just ignore me... it's not vital to the setup18:29
EmilienMdprince: I wonder one thing stupid, but anyway. After having tripleo-puppet-elements on github/openstack, would it make sense to move puppet modules from github/stackforge to github/openstack ?18:29
jpeelerradez: i'm just trying to learn, my attempt at putting the images on the minions is not working18:29
radezjpeeler: have you looked at the logs on the minions?18:30
radezthey will tell you where they are trying to pull from and if they're able to18:30
radezthe commands on this post have been helpful to me:18:31
radezhttps://github.com/GoogleCloudPlatform/kubernetes/blob/master/docs/getting-started-guides/fedora/fedora_manual_config.md18:31
jpeelerradez: yes i see it failing:  Error: image fedora-rdo-mariadb not found18:31
radezk, so if you're addressing the image by just "fedora-rdo-mariadb" in your json then it's looking in the public repos18:31
radezand i don't think these are in the public repos at all18:32
jpeeleri thought it would by default look in the private (local) image location18:32
dprinceEmilienM: I kind of thought that was the point of stackforge was for community projects.18:32
larsksjpeeler: kubernetes always does a pull before starting a pod.  If the pull fails, I think --> you lose.18:33
radezjpeeler: nope I think it will alawys try to pull according to what larsks said walier18:33
openstackgerritTzu-Mainn Chen proposed a change to openstack/tuskar-ui: Fix for node count form  https://review.openstack.org/12448618:33
jpeelerlarsks: so does that mean public images have to be used?18:33
radezjpeeler: want me to walk you through putting a private docker repo on your masternode?18:33
dprinceEmilienM: and on that front I sort of wonder if tripleo-puppet-elements actually belong on stackforge too since they are arguably more closely aligned w/ the puppet modules.18:33
larsksjpeeler: No, you can use a private repository.18:33
larskss/repository/registry/18:33
larsksBut it has to be something that supports docker push/pull semantics.18:33
radezoh yea... me too s/repository/registry/g18:34
dprinceEmilienM: I think you'd have a "tough sell" to argue all the stackforge/puppet modules belong under /openstack18:34
radezjpeeler: actually you could just use the one I setup, it's publically accessible.18:34
jpeelerradez: sure, unless using the kllaglue/fedora-rdo-* images makes it not really worth it18:34
radezmaybe? I'm not sure18:34
larsksOur goal is ultimately to have the kolla project images built automatically in response to commits against the git repository.18:35
larsksSo that ultimately they should be current and useful in most cases.18:35
larsksabsolutely not the case right now :)18:35
radezjpeeler: try updating your image to "8.21.28.147:5000/fedora-rdo-mariadb" or to "kllaglue/fedora-rdo-mariadb" and see if it will launch18:35
openstackgerritA change was merged to openstack/diskimage-builder: Add svc-map element.  https://review.openstack.org/9677018:36
*** andreaf has quit IRC18:36
jpeelerradez: do i need to delete all the pods/services or will it recognize the updated json as an update?18:36
*** andreaf has joined #tripleo18:37
radezjpeeler: delete and recreate afaik18:37
larsksjpeeler: I suspect you need to delete the existing pods first.  You only need to delete/recreate the services if you have made changes to the the service json description.18:37
*** jistr|afk is now known as jistr18:42
*** jistr has quit IRC18:42
radezlarsks: do you think there would be a problem with haveing a vxlan tunnel between the two minion nodes when the openstack inscances running the master and minions are running on an openstack cluster using gre tunnels?18:46
larsksradez: I don't think so.  I don't even think the vxlan tunnels between minions are particularly relevant (because typical pod-to-service communication will be happening via the *host* addresses, via kube-proxy)18:47
radezlarsks: hm, ok. my proxy on the minion that's not running the pod can't connect to the pod18:48
larsksradez: I would start by breaking out tcpdump and see to which address it is actually trying to connect.18:48
larsksPresumably, on the minion actually running the pod, you can contact the service on the host?18:49
morgan_remote_lifeless tchaypo: index merged. If you use latest master of keystone I *think* the weird identity related failures should go away.18:50
radezlarsks: yes  I have a kbr0 on each minion. one is 10.251.3.0/24 and the other is 10.251.4.0/2418:52
radezthe mysql instance is running on 10.251.4.418:52
radezon the minon with the .3. address the kube-proxy logs show18:52
radez10.251.4.4:3306: no route to host18:52
radezshould the kbr0 interfaces all have the same subnet? or are they supposed to have different ones?18:53
larsksHmmm. Are these systems to which I can connect?18:53
radezlarsks: yup, gimme a pub key and I'll drop it in for you18:53
larskshttp://chunk.io/f/71bc331491a847bf9ecd8b180033091018:53
radezlarsks: I just have mariadb running now because that's what keystone was having trouble connecting to.18:53
radezsec18:53
*** marun has quit IRC18:55
radezlarsks: fedora@8.21.28.147 <-master, fedora@8.21.28.148 <- node1, fedora@8.21.28.151 <- node218:56
larsksomg, someone who provides user@hostnames that I can just paste into my terminal.18:57
larsksA breath of fresh air.18:57
larskslogged in and looking around...18:58
radezack18:58
radezlarsks: so if you try and telnet to 8.21.28.148 on 3306 and then to 8.21.28.151 on one you will connect successfully and on the other you will get diconnected18:59
radezin the proxy logs one the one that disconnects the error occurs that it can't conntact the other's ?provider network?18:59
radezer overlay network... that's what I meant...19:00
larsksOi, my connection is crappy.19:02
radezlarsks: yea I had a good connection while I was in the office, when i got home it was really slow19:02
larsksradez: brb19:06
radez*nod*19:07
*** rushiagr_away is now known as rushiagr19:11
* larsks is puzzled. There is no evidence that the system is trying to establish a vxlan connection to the other minion. Still poking.19:15
larsksOh, huh: /var/log/openvswitch/ovs-vswitchd.log: system@ovs-system: failed to add vxlan-0-4 as port: Address family not supported by protocol19:16
larsksWhy is this kernel so old?19:16
larsksThe minions still have 3.11.xx, but F20 is up to 3.16.19:16
larsksHuh.  Please hold.19:18
larsksradez: ^^^ That was it.  You were starting with an older F20 image than I have locally.19:19
larsksThe original F20 kernel does not have vxlan support.19:19
larsksI have rebooted the systems.  I expect them to work correctly when they reboot.19:19
radezlarsks: ah ha!19:20
larsksSo for example, on 10.0.03 this now works: ping 10.251.4.119:20
radezlarsks: I was wondering why I lost connectivity to the node :)19:20
*** andreaf has quit IRC19:21
larsksNow, I'm curious if kubernetes will reschedule the pods all by itself.19:21
larsksOoo, signs point to yes.19:21
larsksTotally works now.19:22
*** andreaf has joined #tripleo19:22
radezlarsks: did you have to update the kernel or did they just need a reboot19:22
radezbecause doesn't the cloudinit script do a yum update>19:22
radez?19:22
larsksThey just needed a reboot. THe user-data script does a yum upgrade at first boot.19:23
*** jp_at_hp has joined #tripleo19:23
radezack. thx for the debug larsks19:23
larsksProbably worth noting in the README.19:23
openstackgerritA change was merged to openstack/diskimage-builder: Refactor ramdisk element to allow alternate implementations  https://review.openstack.org/12423519:23
* radez fires off the keystone pods19:23
*** boris-42 has joined #tripleo19:27
larskswell, you have a running keystone service that responds to requests on '/'...19:27
*** rushiagr is now known as rushiagr_away19:29
openstackgerritpatrick-crews proposed a change to openstack-infra/tripleo-ci: Test the upgrade codepath works as well.  https://review.openstack.org/8775819:30
*** rook has joined #tripleo19:38
*** jtomasek has quit IRC19:38
radezlarsks: yup, and after setting up the pki cert I can do a token get19:39
radezsdake: ^19:39
larsksYay!19:40
*** andreaf has quit IRC19:44
*** andreaf has joined #tripleo19:45
sdakecool razez19:56
radezsdake: did you get it running to?19:56
jpeeleris it safe to say if 35357 is running that all is well? how are you testing keystone?20:05
*** julim has quit IRC20:05
slaglemorganfainberg: hi, you know keystone right? ;)20:05
morganfainbergslagle, sometimes :)20:05
slaglemorganfainberg: hehe, well i can go ask in #keystone, but figured since you were here, i'd start here first20:06
morganfainberghaha20:06
morganfainbergit's why i lurk around the openstack channels20:06
slaglemorganfainberg: any idea why there's hardcoded id as the default value for member_role_id in common/config.py?20:06
slaglethis is going to cause tripleo issues since we were explicitally creating the _member_ role, so it ends up with a auto generated id20:07
slaglethen we create the first user (admin), keystone checks for the default id, which does not exist, so it tries to create the _member_ role again, and fails with a duplicate entry20:08
slaglethis is a recent change in tripleo (os-cloud-config specifically) to precreate the _member_ role20:08
slaglei'm wondering if we should revert that20:08
morganfainbergslagle, we should be auto populating that role *if* needed20:09
morganfainbergslagle, iirc20:09
slaglehttps://review.openstack.org/#/c/117017/20:09
morganfainbergbut.. that is the first i've heard about a conflict going on20:09
slaglemorganfainberg: right, so it does auto populate, it just queries by the hardcoded id vs. the name20:09
morganfainbergah, right ok so it's because ID is supposed to be immutable20:10
morganfainbergnames *in theory* should be mutable20:10
morganfainberghonestly though roles, not sure if that is an accurate statement without checking20:10
slagleok, so basically, don't ever create the _member_ role yourself20:10
slaglelet keystone do it20:10
morganfainbergslagle, well you *can* create it, just specify the role_id in the config if you do ;)20:11
slaglehmm, yea, ok. that makes sense20:11
morganfainbergslagle, i'm not a fan of the auto-create stuff like that, but that pre-dates my days in keystone20:11
morganfainbergslagle, it *might* be work setting an id like _member_ (not sure if that works) that mirrors the name and then you don't need to worry about keystone creating something you don't create20:13
morganfainbergs/work/worth20:13
morganfainbergthough... that may not be possible with the autogen ids.20:13
slaglethen i would also have to set that value in keystone.conf though20:14
morganfainbergslagle, but it would be static in that case.20:14
slagleright20:14
morganfainbergslagle, known on both sides.  if you can specify the id. i'm not sure you can without looking20:14
slaglei think i'm just going to go the route of letting keystone create the role20:16
slaglei don't know why we need to do it in os-cloud-config tbh20:17
lifelesstchaypo: see morgan_remote_'s comment at your 045020:19
openstackgerritJames Slagle proposed a change to openstack/os-cloud-config: Do not create the _member_ role  https://review.openstack.org/12450820:23
openstackgerritJames Slagle proposed a change to openstack/os-cloud-config: Do not create the _member_ role  https://review.openstack.org/12450820:24
*** dprince has quit IRC20:26
*** jehb has quit IRC20:29
morganfainbergslagle, if it works without you creating it, i like less logic that needs to be maintained20:29
*** rwsu has quit IRC20:31
slagleme too20:32
*** jtomasek has joined #tripleo20:33
*** morganfainberg is now known as morgan20:36
*** morgan is now known as morganfainberg20:37
*** jml has quit IRC20:44
*** jml has joined #tripleo20:45
*** radez is now known as radez_g0n320:50
*** jdob has quit IRC20:51
*** jtomasek has quit IRC20:53
*** untriaged-bot has joined #tripleo21:00
untriaged-botUntriaged bugs so far:21:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/137306321:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136925621:00
uvirtbotLaunchpad bug 1373063 in tripleo "port not added to bridge after a reboot" [Undecided,In progress]21:00
untriaged-bothttps://bugs.launchpad.net/os-refresh-config/+bug/137425921:00
uvirtbotLaunchpad bug 1369256 in tripleo "ubuntu: hash sum mismatch when installing packages" [Undecided,New]21:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136616421:00
uvirtbotLaunchpad bug 1374259 in os-refresh-config "Coverage report was't created" [Undecided,In progress]21:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/136774221:00
uvirtbotLaunchpad bug 1366164 in tripleo "Add domain roles for admin user" [Undecided,New]21:00
uvirtbotLaunchpad bug 1367742 in tripleo "keepalived brings the VIP up in multiple places on a controller reboot" [Undecided,New]21:00
*** untriaged-bot has quit IRC21:00
*** mestery has quit IRC21:14
*** mestery has joined #tripleo21:15
SpamapShttps://bugs.launchpad.net/tripleo/+bug/137462621:15
uvirtbotLaunchpad bug 1374626 in tripleo "UIDs of data-owning users might change between deployed images" [Critical,Triaged]21:15
SpamapSCheck it out.. pretty interesting problem we just found.21:15
slaglesounds like that was fun to debug21:18
slagle:)21:18
SpamapSstate is hard21:19
*** morgan_remote_ has quit IRC21:20
lifelessSpamapS: time to assert ownership?21:23
SpamapSlifeless: not sure what you mean.21:24
lifelessSpamapS: in /mnt/state21:24
SpamapSWe do, I think, have to have a single place to map UID <-> name for images.21:24
SpamapSlifeless: Oh right thats what I'm saying.21:25
SpamapSsimplest thing I think would be to backup /etc/passwd to /mnt/state so the state record keeps a copy of its own symbolic mapping... when booting into a new image and seeing that there, we need to freak out if any users are deleted or changed.21:26
slagledoes ubuntu offer static id's for users?21:26
slaglei think most of the openstack users are already assigned static id's on fedora21:26
slagle(just wondering if there already is a map)21:26
*** rhallisey has quit IRC21:27
SpamapSyes21:29
SpamapShm no21:29
SpamapSslagle: no it looks like it is unique per system21:29
SpamapSslagle: http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/utopic/cinder/utopic/view/head:/debian/cinder-common.postinst21:31
mordredSpamapS: ldap ftw? (/me hides)21:31
*** andreaf has quit IRC21:31
SpamapSmordred: I choose _YOU_ to set that up.21:31
*** andreaf has joined #tripleo21:32
slagleSpamapS: yea, actually even on fedora the static id is only used if you install via the openstack packages21:32
SpamapShttps://www.debian.org/doc/debian-policy/ch-opersys.html21:33
slaglestill, maybe it's worth using that same id when installing from source21:33
SpamapSpolicy is a bit vague on whether or not debian/ubuntu should have static uids for them21:33
mordredSpamapS: morganfainberg and ayoung tell me that freeipa is the easy way to do that ...21:33
SpamapSbut Debian only allocates 99 static UID's so it wouldn't scale to have any package have those uids21:34
SpamapSso the answer if doing packages is to pre-create the user21:34
lifelessSpamapS: so error is better than nothing21:34
lifelessSpamapS: but perhaps not that great operationally21:35
SpamapSslagle: I don't think we need the UID's to be static across all distros21:35
SpamapSlifeless: we can do a merge, I'm just... hesitant. ;)21:35
SpamapSlike if the old image has cinder == 1001, and the new one has cinder == 1002, it's not a super expensive operation to do chmod -R21:35
SpamapSfind rather21:35
SpamapSfind and chmod21:35
SpamapSbut ...21:35
SpamapScomplexity ... :-P21:35
lifelessSpamapS: well, I was thinking perhaps an assertion21:36
lifelessSpamapS: not a merge21:36
lifelesse.g.21:36
lifeless/mnt/state//var/log/ shall be root:root and only root:root21:36
SpamapSAh yeah thats what I was trying to avoid. :-P21:36
SpamapSMuch better operationally, I agree.21:36
SpamapSand actually, that's easier to maintain than a static list21:37
SpamapSmmk I'm convinced21:38
SpamapSlifeless: +1 .. realistically it would only be in the tens of assertions21:38
SpamapSGoes along nicely with register-state-path too.. can have a register-state-owner or something21:38
*** akuznetsov has quit IRC21:39
*** jml has quit IRC21:39
*** akuznetsov has joined #tripleo21:41
*** jml has joined #tripleo21:42
*** marun has joined #tripleo21:45
morganfainbergSpamapS, mordred, i saw my name and FreeIPA21:47
mordredmorganfainberg: freeipa all the things21:48
morganfainbergmordred, if only it worked on ubuntu :(21:48
SpamapSow21:49
morganfainbergI greatly dislike that debian/ubuntu doesn't let us have (easily) specified / reserved uids21:49
morganfainbergit was an issue metacloud "fixed" by using a CMS to ensure uids were al ways the same and pre-created the users before isntalling packages and "dealing" with the fallout21:50
morganfainbergbut it does suck that you get different IDs for different installs sometimes.21:51
SpamapSit only sucks when you care about UID's21:51
morganfainbergas a former sysadmin ... i want my environments to be consistent!21:51
morganfainberg;)21:51
SpamapSthe moral of the story is: don't care about UID's21:51
morganfainbergbut...21:52
SpamapSdon't21:52
SpamapSno21:52
morganfainberghaha21:52
SpamapSDON'T21:52
SpamapS:)21:52
SpamapSI recall fixing a 10-million file FTP server (when 10 million files was a lot of files) and having to fsck fully one time, and then having half the files come out with the wrong uids21:53
SpamapStar to the rescue21:53
morganfainbergi also liked having a singl samhain profile for my entire system (and truely diskless os systems)21:53
morganfainberghaha, yeah tar would help there.21:53
SpamapStar was our backup solution. :) zomg did it take forever to untar those files though21:53
SpamapSLuckily our contract for that data was 3 nines. :-P21:54
morganfainbergSpamapS, lol21:54
SpamapS"you'll get it when we godamn well feel like it"21:54
morganfainberg"9.99%" uptime right?21:54
SpamapSright21:54
*** enterprisedc has quit IRC21:57
*** enterprisedc has joined #tripleo21:59
*** tserong has quit IRC22:05
*** tserong has joined #tripleo22:07
*** andreaf has quit IRC22:19
*** andreaf has joined #tripleo22:19
gfidentewell I've deployed freeipa though, there are nice things with it like the sudoers on ldap22:20
gfidenteor the opportunity to kerberize everything22:20
gfidenteit's not just the UIDs22:20
gfidenteI know you don't *need* freeipa for that, was just sparing my 2cents22:21
*** pensu has quit IRC22:26
openstackgerritGiulio Fidente proposed a change to openstack/tripleo-incubator: Improve documentation around usage of cinder-volume-nfs  https://review.openstack.org/12434722:36
sdakeradez did you put your pki chane somewhere I can download it?22:43
openstackgerritBen Nemec proposed a change to openstack/diskimage-builder: Allow custom rootfs labels  https://review.openstack.org/12194422:44
sdakelarsks what was rade'z fix?  do you have it in a repo?22:46
*** rwsu has joined #tripleo22:47
*** pcrews has quit IRC22:54
larsksHe was booting an original, un-updated Fedora 20 image.  The kernel on that image is too old to support vxlan.  The user-data script does a yum upgrade at boot, but you need to reboot to activate the new kernel.22:56
larsksI will update the README with a note re: kernel versions after kids are asleep.22:57
sdakerunning f20 on his host you mean?22:58
sdakewhat about the stuff about pki?22:58
*** dkehn has quit IRC23:00
*** jml has quit IRC23:02
*** dkehn has joined #tripleo23:02
*** jml has joined #tripleo23:03
*** yamahata_ has joined #tripleo23:09
*** jang1 has quit IRC23:15
*** rwsu has quit IRC23:30
*** gfidente has quit IRC23:39
*** pcrews has joined #tripleo23:43
*** chuckC has quit IRC23:48
*** marun has quit IRC23:50
larsksradez is booting up kube using my Heat templates.  The instances were using the standard F20 cloud image, which is missing vxlan support because the kernel is too old.23:52
larsksI think he may have had to run the pki setup script.23:52
*** dkehn has quit IRC23:53
*** dkehn has joined #tripleo23:55
*** jeblair is now known as corvus23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!