Monday, 2016-08-15

*** limao has joined #tripleo00:38
*** limao has quit IRC00:41
*** limao has joined #tripleo00:43
*** dtrainor has joined #tripleo00:46
*** greghaynes has quit IRC00:48
*** greghaynes has joined #tripleo00:49
*** dtrainor has quit IRC00:51
*** Guest80615 is now known as saneax_AFK00:55
*** dmacpher has joined #tripleo00:56
*** saneax_AFK is now known as saneax00:58
*** saneax is now known as Guest1937900:58
*** bswartz has joined #tripleo01:02
*** bswartz has quit IRC01:13
*** xuao has joined #tripleo01:19
*** bana_k has joined #tripleo01:21
*** Guest19379 is now known as saneax_AFK01:38
*** yamahata has joined #tripleo01:41
*** dmacpher is now known as dmacpher-lunch02:14
*** apetrich has joined #tripleo02:37
*** bana_k has quit IRC02:40
*** bana_k has joined #tripleo02:53
*** bana_k has quit IRC03:08
*** limao has quit IRC03:15
*** dmacpher-lunch is now known as dmacpher03:26
*** dsariel has quit IRC03:45
*** ramishra has quit IRC03:49
*** ramishra has joined #tripleo03:51
*** limao has joined #tripleo04:15
*** chlong has joined #tripleo04:21
*** limao has quit IRC04:22
openstackgerritHonza Pokorny proposed openstack/tripleo-common: Add node tagging workflow  https://review.openstack.org/33213204:26
*** bana_k has joined #tripleo04:30
*** bana_k has quit IRC04:46
*** jaosorior has joined #tripleo04:47
*** limao has joined #tripleo05:00
*** bswartz has joined #tripleo05:07
*** pabelanger has quit IRC05:14
*** rook has quit IRC05:15
*** markmc has quit IRC05:15
*** toure has quit IRC05:15
*** markmc has joined #tripleo05:15
*** wfoster has quit IRC05:15
*** pabelanger has joined #tripleo05:15
*** lucas-dinner has quit IRC05:15
*** rook has joined #tripleo05:17
*** rook is now known as Guest1403905:18
*** wfoster has joined #tripleo05:19
*** lucasagomes has joined #tripleo05:19
*** toure has joined #tripleo05:22
*** dmsimard has quit IRC05:25
*** rcernin has joined #tripleo05:25
*** dmsimard has joined #tripleo05:26
*** limao has quit IRC05:27
*** limao has joined #tripleo05:29
*** ebalduf has quit IRC05:44
*** oshvartz has quit IRC05:44
*** r-mibu has quit IRC05:46
*** r-mibu has joined #tripleo05:46
*** radeks has joined #tripleo05:50
*** leanderthal|afk is now known as leanderthal05:56
*** liverpooler has joined #tripleo05:59
*** florianf has joined #tripleo06:02
*** limao_ has joined #tripleo06:13
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: Inject undercloud's CA into python-ironic-agent image  https://review.openstack.org/35531206:15
*** limao has quit IRC06:16
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test  https://review.openstack.org/35531606:17
*** dmacpher has quit IRC06:18
*** david-lyle has joined #tripleo06:36
*** pcaruana has joined #tripleo06:36
*** david-lyle_ has quit IRC06:39
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: Inject undercloud's CA into python-ironic-agent image  https://review.openstack.org/35531206:43
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test  https://review.openstack.org/35531606:43
*** rwsu has joined #tripleo06:44
*** aufi has joined #tripleo06:44
*** shivrao has quit IRC06:52
*** xuao has quit IRC06:55
*** oshvartz has joined #tripleo06:56
*** hjensas has joined #tripleo06:58
*** hjensas has joined #tripleo06:58
*** limao_ has quit IRC07:04
*** limao has joined #tripleo07:07
*** chlong has quit IRC07:08
*** bootsha has joined #tripleo07:11
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates: DO NOT MERGE - TESTING BARBICAN  https://review.openstack.org/35326207:13
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates: Add Barbican to the overcloud - WIP  https://review.openstack.org/35245807:13
*** zoli_gone-proxy is now known as zoliXXL07:14
*** zoliXXL is now known as zoli|wfh07:15
*** hanchao has joined #tripleo07:15
zoli|wfhgood morning07:21
*** jpich has joined #tripleo07:21
*** pkovar has joined #tripleo07:21
*** ebarrera has joined #tripleo07:24
*** chlong has joined #tripleo07:25
*** ifarkas_afk is now known as ifarkas07:26
*** Guest30635 has quit IRC07:29
*** Guest30635 has joined #tripleo07:29
*** akuznetsov has joined #tripleo07:29
*** Guest30635 is now known as assassin07:29
*** yamahata has quit IRC07:36
*** ohamada has joined #tripleo07:43
*** snecklifter has joined #tripleo07:47
*** xuao has joined #tripleo07:49
Jokke_hi08:02
Jokke_anyone has idea why this  https://review.openstack.org/354047 fails with http://logs.openstack.org/28/353928/5/check/gate-puppet-manila-puppet-unit-3.6-centos-7/cbf7da9/console.html.gz#_2016-08-12_10_25_27_958013 ? :(08:02
*** paramite has joined #tripleo08:03
Jokke_wupf ... wrong change obviously https://review.openstack.org/#/c/353928/08:03
*** limao has quit IRC08:06
*** chlong has quit IRC08:07
*** saneax_AFK is now known as saneax08:07
*** saneax is now known as Guest3477308:07
*** limao has joined #tripleo08:08
*** athomas has joined #tripleo08:13
*** zoli|wfh is now known as zoli|brb08:16
jaosoriorJokke_: Might be worth asking in #puppet-openstack08:17
*** dtantsur|afk is now known as dtantsur08:18
*** Guest34773 is now known as saneax_AFK08:19
*** hewbrocca-afk is now known as hewbrocca08:23
dtantsurmorning folks! could you please review my ironic-in-tripleo patch https://review.openstack.org/341433 ? there is plenty of work ahead with iPXE support etc, so I'd really appreciate merging this08:23
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates: Populate HAProxy endpoint ports from EndpointMap  https://review.openstack.org/35536608:25
jaosoriordtantsur: you had a commit testing this in CI, right? can you pass it on?08:26
*** ccamacho has joined #tripleo08:26
dtantsurjaosorior, no longer, I'm testing it manually08:26
*** ccamacho has quit IRC08:26
*** ccamacho has joined #tripleo08:26
dtantsurit takes too much time and effort to baby-sit the CI, and it does not test anything related, except for installation itself08:26
dtantsur(i.e. it does not even call ironic API to make sure it came up)08:27
jaosoriordtantsur: sure, no worries. If you're testing it locally it's fine08:28
dtantsurI have a WIP document for those who want to try it locally: https://review.openstack.org/35401608:30
dtantsur(but it assumes the change was merged, some magic may be required for a WIP patch)08:30
*** aqkhan__ has joined #tripleo08:31
*** aqkhan_ has quit IRC08:32
*** aqkhan_ has joined #tripleo08:32
dtantsurAll this raise an interesting question. Do you folks have some plans to CI the optional services eventually?08:35
dtantsurOtherwise even if I artificially CI-test it now, it can get broken during the next refactoring, and nobody will notice08:35
*** aqkhan__ has quit IRC08:36
*** bana_k has joined #tripleo08:37
*** zoli|brb is now known as zoli|wfh08:40
*** bootsha has quit IRC08:40
d0ugalMorning!08:44
hewbroccadtantsur: well, I think the more jobs we can add the happier we will be08:44
d0ugalmore stable jobs*08:45
hewbroccabut it requires somebody adding the jobs, getting them committed experimental, making sure they don't break all the time08:45
hewbroccayes, stable jobs08:45
dtantsurI think this is our of question until we get more resources for the CI, right?08:45
hewbroccanot necessarily08:45
hewbroccawe've got a lot more capacity in the rack now08:45
hewbroccaand08:45
hewbroccawith Slagle's multi-node work, we can do more tripleo testing in the regular infra flow08:46
hewbroccaThat should mean we have more capacity for testing Inspector stuff that really requires OVB08:47
dtantsurcool, maybe I should start an ML discussion08:47
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo: Add ironic inspector as a terminated HAProxy endpoint  https://review.openstack.org/34518308:47
hewbrocca+108:47
dtantsursent08:54
*** Goneri has joined #tripleo08:55
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test  https://review.openstack.org/35537808:55
*** electrofelix has joined #tripleo08:58
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates: Populate HAProxy endpoint ports from EndpointMap  https://review.openstack.org/35536608:58
jaosoriorhewbrocca: anybody around that I can poke for CI related things?08:59
hewbroccajaosorior: adarazs or sshnaidm should be able to help09:00
hewbroccaor panda09:00
hewbroccawhat's up?09:00
jaosoriorneed to test a patch with the periodic job and I haven't managed to09:00
ccamachomorning guys!09:01
jaosoriorsshnaidm, are you around?09:02
*** bootsha has joined #tripleo09:02
ccamachojaosorior, not 100% sure but today in USA is National holidays also here in Spain, just FYI.09:04
jaosoriorI see09:05
hewbroccaccamacho: US is not off today09:05
hewbroccanext US holiday is labor day, which is the first Monday in September09:06
ccamachohewbrocca ack, ok but they were speaking last Friday about the Assumption of Mary09:07
hewbroccathat sounds more like a France holiday09:07
hewbroccadefinitely not US though09:08
ccamachooki :)09:09
*** xuao has quit IRC09:13
*** bootsha has quit IRC09:14
*** bootsha has joined #tripleo09:14
*** bootsha_ has joined #tripleo09:16
*** xuao has joined #tripleo09:17
*** bootsha__ has joined #tripleo09:18
*** bootsha has quit IRC09:20
*** bootsha_ has quit IRC09:22
*** limao has quit IRC09:22
*** limao has joined #tripleo09:24
*** limao has quit IRC09:29
*** sshnaidm has quit IRC09:29
adarazsjaosorior: period upsteam jobs or periodic RDO jobs?09:30
jaosorioradarazs: upstream09:30
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test  https://review.openstack.org/35537809:30
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: Inject undercloud's CA into python-ironic-agent image  https://review.openstack.org/35531209:30
ccamachojaosorior, when having some time mind to check this submission? https://review.openstack.org/#/c/354054/ re to the puppet-lint warning passed CI09:31
adarazsjaosorior: hrm. I don't know how to inject a change into that. I have solutions for rdo image based stuff for now. if there's something you're trying to fix in upstream head, I have a job that builds on the last unpromoted master image.09:31
adarazsjaosorior: that's built from the latest consistent delorean trunk09:31
jaosorioradarazs: well, I'm actually trying to fix something in CI09:31
jaosoriorthe commits I uploaded ^^09:32
adarazsjaosorior: oh. :/ so I dont know how to test that. if I had access to those upstream built images that upstream ci started to use, I could help.09:33
adarazshewbrocca: btw panda is on PTO for this and the next week.09:34
jaosoriorhewbrocca: you know if slagle and dprince will be online today?09:34
*** jaosorior is now known as jaosorior_brb09:38
ccamachohey dtantsur re to checking of the composable roles, Im creating some functional tests for puppet-mistral (POC) and hopefully we will be able to apply those to all other services and the we might have a job running them all, the thing is that even if you enable the service in the overcloud might not even work properly (just checking that puppet syntax it's OK), now we are trusting in people locally testing the services when push09:38
jaosorior_brbccamacho: will do when I'm back09:38
ccamachojaosorior_brb thanks!09:38
hewbroccajaosorior_brb: I'm sure that they will09:38
dtantsurccamacho, so, are you planning on a job against puppet-mistral that tests mistral in overcloud?09:39
ccamachodtantsur, Im trying from the test make some API call for each service, to ensure that DB/network/endpoints are going well09:40
ccamachodtantsur that would be the second part09:40
*** bana_k has quit IRC09:41
dtantsurso, I think we have functional tests for puppet-ironic, I'm more worried about ironic in overcloud, as its installation is way trickier than for most services09:43
openstackgerritErno Kuvaja proposed openstack/tripleo-puppet-elements: Install OpenStack Manila UI  https://review.openstack.org/35539409:44
ccamachodtantsur And for that second part Ill ask for some help as CI jobs are a little unknown for me, but your right I think in the near future we should/must have jobs checking that the services are actually working09:45
*** hanchao has quit IRC09:49
hewbroccaIdeally, those jobs would actually be part of the upstream gate09:51
hewbroccaI mean, we're not the only ones who want to test if Ironic works when deployed :)09:51
openstackgerritDougal Matthews proposed openstack/tripleo-common: Adds Deployment Action & Workflow  https://review.openstack.org/29873209:54
*** tosky has joined #tripleo09:55
d0ugaljtomasek: Have you tried the latest deployment/template processing TripleO common patches?09:56
*** athomas has quit IRC09:57
openstackgerritMichael  Henkel proposed openstack/puppet-tripleo: Added Contrail Composable Services  https://review.openstack.org/34890510:02
openstackgerritMichael  Henkel proposed openstack/puppet-tripleo: Sorted variables alphabetically  https://review.openstack.org/35540010:02
*** athomas has joined #tripleo10:02
*** xuao has quit IRC10:10
*** radeks has quit IRC10:10
*** zoli|wfh is now known as zoli|brb10:11
openstackgerritTomas Sedovic proposed openstack/tripleo-validations: Validate rogue DHCP servers  https://review.openstack.org/35397310:13
*** xuao has joined #tripleo10:14
jtomasekd0ugal: not yet10:16
jtomasekd0ugal: I'll update my setup with those and let you know10:16
openstackgerritTomas Sedovic proposed openstack/tripleo-validations: Validate rabbitmq limits  https://review.openstack.org/35397010:16
d0ugaljtomasek: http://paste.openstack.org/show/557487/10:18
d0ugaljtomasek: That's what I get.10:18
d0ugal... but since I had success before, I am not sure if I have done something wrong or if the workflow has.10:19
d0ugaljtomasek: ... nvm, it is something I am doing, just got past that.10:21
*** jaosorior_brb is now known as jaosorior10:31
*** xuao has quit IRC10:31
*** radeks has joined #tripleo10:42
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test  https://review.openstack.org/35537810:42
openstackgerritJuan Antonio Osorio Robles proposed openstack-infra/tripleo-ci: Inject undercloud's CA into python-ironic-agent image  https://review.openstack.org/35531210:42
*** pblaho has joined #tripleo10:44
*** oshvartz has quit IRC10:45
*** mbound has joined #tripleo10:47
*** etp has joined #tripleo10:47
*** birdman has joined #tripleo10:49
*** birdman has left #tripleo10:49
*** mhenkel has joined #tripleo10:49
*** mbound has quit IRC10:51
*** milan has joined #tripleo10:58
openstackgerritMichael  Henkel proposed openstack/puppet-tripleo: Added Contrail Composable Services  https://review.openstack.org/34890511:00
*** xuao has joined #tripleo11:15
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates: Populate HAProxy endpoint ports from EndpointMap  https://review.openstack.org/35536611:16
*** lucasagomes is now known as lucas-hungry11:16
*** adarazs is now known as adarazs_lunch11:20
openstackgerritMichael  Henkel proposed openstack/puppet-tripleo: Added Contrail Composable Services  https://review.openstack.org/34890511:25
*** maeca1 has joined #tripleo11:33
*** bfournie has quit IRC11:34
*** jaosorior has quit IRC11:34
*** jaosorior has joined #tripleo11:35
*** rodrigods has quit IRC11:38
*** rodrigods has joined #tripleo11:38
*** rhallisey has joined #tripleo11:38
*** rhallisey_ has joined #tripleo11:39
slaglejaosorior: hey, thanks for looking into the ssl issue11:40
slaglejaosorior: i wonder if something else has changed, b/c the nonha job is passing in the check queue11:40
slaglewhich does use ssl11:40
EmilienMgood morning!11:43
slaglemorning11:43
d0ugaljtomasek: what does the UI do with the root environment?11:45
*** dtrainor has joined #tripleo11:45
jaosoriorslagle: So, one terrible thing I just remembered11:46
jtomasekd0ugal: nothing, why?11:46
jaosoriorslagle: we haven't had real SSL coverage until I started working with certmonger11:46
d0ugaljtomasek: Just wondering why it is in the Mistral env, do you read default params from it?11:46
slaglejaosorior: b/c we were using self signed before that?11:46
jaosoriorslagle:11:47
jaosoriorno11:47
d0ugaljtomasek: Trying to figure out if I can switch it out for a different file path :)11:47
jaosoriorbecause there was a bug in the autogenerate option that didn't really enable SSL endpoints11:47
jaosoriorso it would just generate the service certificate, but generate non-tls endpoints11:47
slaglejaosorior: oh. but is that fixed now?11:47
jtomasekd0ugal: you mean why it is in 'environments' section there? http://paste.openstack.org/show/554117/11:47
jaosoriorslagle: https://review.openstack.org/#/c/333121/11:48
slaglejaosorior: i just wonder how the nonha job is passing currently11:48
d0ugaljtomasek: Yeah11:48
jaosoriorslagle: that is a GREAT question11:48
jaosoriorI have no clue why11:48
jtomasekd0ugal: because that one is enabled11:48
jtomasekd0ugal: that is a list of enabled environments11:48
d0ugaljtomasek: right, but I thought this was a special case. it is in the capabilities map?11:48
*** weshay_afk is now known as weshay11:48
jtomasekd0ugal: which means, it is a list of environments which are actualy going to get sent to heat11:48
jtomasekd0ugal: it is special in a way that it needs to be first in that list11:49
d0ugaljtomasek: and it is also needed.11:49
jtomasekd0ugal: yes11:49
d0ugaljtomasek: The issue I have, is that for heatclient to merge the env files for me, I need to merge with that one also11:49
jaosoriorslagle: I should actually backport that fix to both liberty and mitaka11:49
jtomasekd0ugal: so when user uploads the plan, he needs to identify which environment file is the root one11:49
d0ugaljtomasek: so I think for the CLI I'll need to have a different root environment that includes that one and the users additions.11:49
jtomasekd0ugal: which is done in capabilities map11:50
jaosoriorslagle: by the way, when we don't use cache; is there a reason why after copying the images to the undercloud wee remove the images from the bootstrap node?11:50
jaosoriorcause what we do after that is fetch the images from the undercloud and then add them to the cache11:50
d0ugaljtomasek: right, I guess I am breaking stuff then. Getting the CLI to work with what we have built is super hacky :(11:50
slaglejaosorior: what do you mean by bootstrap node?11:51
*** rhallisey has quit IRC11:51
jtomasekd0ugal: can't you just add custom user environments into 'environments' in mistral environment? That's how I'd expect it to work11:51
slaglejaosorior: we install the undercloud directly on the instance running the job11:51
*** mbound has joined #tripleo11:51
slagleif that's what you mean11:51
d0ugaljtomasek: It's not really that simple unfortunately11:51
d0ugaljtomasek: because environments need to add files etc. processing needs to be done with heatclient, that merges all the environments into one11:52
*** dprince has joined #tripleo11:52
d0ugaljtomasek: including the root environment11:52
jaosoriorslagle: so for instance, here we remove the ironic-python-agent images https://github.com/openstack-infra/tripleo-ci/blob/master/toci_instack.sh#L13811:52
jaosoriorslagle: and here some lines below we fetch it from the undercloud https://github.com/openstack-infra/tripleo-ci/blob/master/toci_instack.sh#L18711:53
jaosoriorslagle: Same seems to be the case for ovb11:53
jaosoriorhttps://github.com/openstack-infra/tripleo-ci/blob/master/toci_instack_ovb.sh#L10611:53
slagletoci_instack_ovb.sh is what we're using in CI11:54
jaosoriorslagle: sure, and that is the case there too11:54
slaglethat tar command is just preparing a tarball to upload to the mirror server11:54
jtomasekd0ugal: so you say you can't use the deployment workflow that is in mistral? I see why this is, because the environments can point outside... hmm this is not nice, because it breaks the CLI/GUI compat11:54
slaglejaosorior: it doesnt delete anything11:54
d0ugaljtomasek: Yeah, I don't know how to make this work. Maybe there is a magic way with heatclient I can't find.11:55
jaosoriorslagle: right right, now I got that part (got confused because of toci_instack.sh)11:55
d0ugaljtomasek: but this is the closest I've got to something that fully works for the CLI, so I'll push it up and comment on the limitations.11:55
openstackgerritDougal Matthews proposed openstack/python-tripleoclient: Migrate the deploy command to use the Mistral workflows  https://review.openstack.org/34226111:55
jtomasekd0ugal: I'd favor putting constraint on having the paths correct rather than breaking the GUI/CLI compatibility11:55
d0ugaljtomasek: Sure, that would be nice, but that isn't backward compatible...11:56
*** mbound has quit IRC11:56
jtomasekd0ugal: just to verify...11:56
d0ugaljtomasek: I suspect we can probably fix this somehow, maybe it requires a change to the merging code in heatclient - I'm not sure.11:56
jaosoriorslagle: alright, so I put up a fix https://review.openstack.org/#/c/355312/ which I'm trying to test. I copied the same commit you had for the revert you did, and put it above the fix11:57
jtomasekd0ugal: you specify --templates <templates_path> -e <environment_path>11:57
d0ugaljtomasek: Yup11:57
jtomasekd0ugal: is there a constraint that files referenced in that environment need to be included in the --templates path?11:58
jtomasekd0ugal: or not?11:58
d0ugaljtomasek: no11:58
jtomasek://11:58
jtomasektoo bad11:58
slaglejaosorior: i saw. i do think we need a way though to solve this generically w/o modifying the image11:58
d0ugaljtomasek: Simple example here: https://github.com/d0ugal/tripleo-util/tree/master/testenvs/local_resource_registry11:58
d0ugaljtomasek: That is what I am testing with, see it uses the default template path and local env and resource.11:58
slaglejaosorior: otherwise, anyone who enables ssl will have to modify the image we provide the same way11:58
jaosoriorslagle: They had to do it anyway. having a self-signed certificate be trusted by the image, and by the overcloud nodes is a pretty bad security issue11:59
jaosoriorslagle: so at least they do need to re-generate the ironic-python-agent image12:00
*** saneax_AFK is now known as saneax12:01
openstackgerritDougal Matthews proposed openstack/python-tripleoclient: Migrate the deploy command to use the Mistral workflows  https://review.openstack.org/34226112:01
jtomasekd0ugal: so user can rely on the referenced files in environment being automagically uploaded too12:01
jaosoriorand actually... I'm still unsure how it's even passing the gate every once in a while. Seems to me that for some reason when it passes it uses a non-TLS endpoint that is open in the undercloud12:01
*** saneax is now known as Guest8175212:01
jaosoriorsince we're still listening on the LOCAL_IP (something I am planning to disable)12:02
d0ugaljtomasek: Yup, heatclient handle that for us.12:02
jtomasekd0ugal: what is the heatclient output when it does that?12:02
slaglejaosorior: yea, i dont even know how the job is passing12:02
*** apetrich has quit IRC12:02
slaglejaosorior: i'm setting up an env know to see if i can figure it out12:02
d0ugaljtomasek: A dict of files and one environment that is the result of all envs being merged12:02
jaosoriorslagle: how long does it take to build just that python-ironic-agent.initramfs ?12:02
slaglejaosorior: locally it takes me about 10 minutes12:03
*** rhallisey has joined #tripleo12:03
d0ugaljtomasek: See line 105 here: https://review.openstack.org/#/c/337615/14/tripleo_common/actions/templates.py12:03
jaosorior10 minutes is a bunch for CI...12:03
jtomasekd0ugal: what if CLI did this, but just with the -e environment? would the output include just the files referenced in that single environment?12:03
jaosoriorit's not terrible; but taking that into account I opted to modify the image directly instead12:03
d0ugaljtomasek: I guess I could try that.12:03
slaglejaosorior: we build it every time in CI anyway right now12:04
jaosoriorslagle: thought that was only the case for periodic jobs12:04
d0ugaljtomasek: Part of the problem is that the CLI creates environments on the fly and adds them12:04
*** ohamada has quit IRC12:04
jaosoriordon't we use the cached image?12:04
jtomasekd0ugal: if it did, you could then take that and add this to the plan and continue from there12:04
*** bala has joined #tripleo12:04
d0ugaljtomasek: so there are actually about 4 or 5 on a normal deploy with no user provided environments12:04
*** ohamada has joined #tripleo12:04
slaglejaosorior: the check-tripleo jobs arent using a cache right now afaik12:04
slaglewe didnt get it reenabled yet after moving to ovb, and a few other issues12:05
jtomasekd0ugal: I see12:05
jaosoriorI see12:05
d0ugaljtomasek: So I guess I can try removing the root environment and merging the others...12:05
d0ugaljtomasek: so many hacks :(12:05
*** apetrich has joined #tripleo12:05
jtomasekd0ugal: does that happen during the deploy command or some other?12:06
jaosoriorslagle: then the fix is actually OK according to what we have in CI. The injection of the cert only happens if we have an image already. Else we use the DIB_IPA_CERT which is used for building the image12:06
*** ohamada has quit IRC12:06
jtomasek(creation of additional environments)12:06
d0ugaljtomasek: During the deploy command.12:06
*** ohamada has joined #tripleo12:06
d0ugaljtomasek: everything is in there lol12:06
jtomasekd0ugal: in those additional environments it sets only parameter_defaults or also resources?12:07
*** bvandenh has joined #tripleo12:07
slaglejaosorior: ok, i think we can go with it for now if it passes12:07
d0ugaljtomasek: Only environments, parameter defaults isn't used anymore12:07
d0ugaljtomasek: (it creates an environment with the parameters)12:07
d0ugaljtomasek: https://github.com/openstack/python-tripleoclient/blob/master/tripleoclient/v1/overcloud_deploy.py#L333-L36212:07
jaosoriorslagle: I'm guessing people in the field use pre-built images, do they?12:07
slaglejaosorior: yes.12:08
slaglejaosorior: i havent heard any complaints about having to modify those images12:08
slaglejaosorior: which i figured i would have12:08
jaosoriorwhat the hell12:09
slagleso either no one is using undercloud ssl12:09
jtomasekd0ugal: yeah, thats what I meant: if the created environments only include parameter_defaults, then you could replace creating those environments by storing the parameter values in mistral environment parameter_defaults by using updateParameters action12:09
jtomasekwhich is how GUI does that12:09
slaglejaosorior: or we were not using ssl where we thought we were :)12:09
d0ugaljtomasek: Oh, I see - I'm not sure. I'll need to check them all.12:09
*** bfournie has joined #tripleo12:10
openstackgerritJuan Antonio Osorio Robles proposed openstack/instack-undercloud: Generate TLS endpoints if autogenerate cert is set  https://review.openstack.org/35543212:11
slaglejaosorior: i wonder if it has something to do with a change in how we're configuring ironic12:11
slaglejaosorior: that somehow has switched it to use ssl during the deploy process12:11
openstackgerritJuan Antonio Osorio Robles proposed openstack/instack-undercloud: Generate TLS endpoints if autogenerate cert is set  https://review.openstack.org/35543212:11
jtomasekd0ugal: I doubt there are environments created at this stage which would change the resource_registry configuration. It would be really hacky. I really thing that those environments just hold the parameters values (such as generated passwords and other ones that were hardcoded in the CLI logic)12:12
openstackgerritJuan Antonio Osorio Robles proposed openstack/instack-undercloud: Generate TLS endpoints if autogenerate cert is set  https://review.openstack.org/35543312:12
jaosoriorslagle: how can we know what endpoint is the initramfs image using for the undercloud?12:12
jtomasekd0ugal: which is what the mistral environment.parameter_defautls is exactly for12:12
slaglejaosorior: that actually gets passed in on the kernel boot cmdline12:12
slaglejaosorior: based on ironic config, that's what i was heading in that direction12:13
*** jayg|g0n3 is now known as jayg12:13
slagle*why12:13
d0ugaljtomasek: True, I'll make that switch and then just try merging user envs.12:14
jaosoriorslagle: is that in the ipxe configuration?12:15
jtomasekd0ugal: cool12:15
d0ugaljtomasek: Thnaks!12:15
d0ugalThanks*12:15
jtomaseknp!12:16
d0ugalTwo steps forward, one step back etc. :)12:16
slaglejaosorior: not sure. i'm trying to trace it back12:18
slagleor dtantsur can probably tell us pretty quickly :)12:18
dtantsur?12:19
slagledtantsur: where does ipa get the url for ironic api/conductor?12:19
slaglei know it's on the kernel cmdline12:19
slaglebut where does that value come from12:19
dtantsurright, it gets populated by ironic conductor12:19
dtantsurwhen it puts the (i)PXE configuration file for a given MAC to its /(http|tftp)boot12:19
slagleoh that's generated from a template somewhere right?12:20
dtantsurand it comes from an option which I need to lookup12:20
openstackgerritJuan Antonio Osorio Robles proposed openstack/diskimage-builder: Change DIB_IPA_CERT resulting file name  https://review.openstack.org/35544012:20
slagle/usr/lib/python2.7/site-packages/ironic/drivers/modules/ipxe_config.template12:20
*** ohamada has quit IRC12:20
dtantsurslagle, this is for TFTP https://github.com/openstack/ironic/blob/master/etc/ironic/ironic.conf.sample#L2583 it goes into Neutron DHCP options IIRC12:20
*** ohamada has joined #tripleo12:20
dtantsurslagle, this is for HTTP/iPXE: https://github.com/openstack/ironic/blob/master/etc/ironic/ironic.conf.sample#L94312:21
dtantsurit gets pasted in the template you've just found12:21
slagleok12:21
dtantsurwhat's the tl;dr of the problem?12:22
slagledtantsur: in our periodic promote jobs, ipa is failing to deploy due to being unable to verify the ssl cert of ironic api/conductor12:24
slagledtantsur: however, our ssl jobs in check-tripleo are passing12:24
slagleso wondering if something changed12:24
dtantsurhmm, I guess you need the internal endpoint to be passed...12:25
*** Guest81752 is now known as saneax_AFK12:25
slagleoh that might be something ^^12:25
slaglejaosorior: ^12:25
dtantsurwell, IPA started using different endpoints recently, maybe this is the problem, though I have no clue how it can relate to SSL12:25
dtantsurso either of these 212:25
slagledtantsur: ah, where is that patch?12:26
slaglesounds like it might be the root cause12:26
jaosoriorslagle: disturbingly, I think we never tested SSL for liberty and mitaka...12:26
dtantsurslagle, we've been using new API endpoints since https://github.com/openstack/ironic-python-agent/commit/09265ba4b53a186eca21e11bd6ddab2480292cb812:26
dtantsurbut it should not affect the host in any way12:26
*** ohamada has quit IRC12:26
*** sshnaidm|afk has joined #tripleo12:26
jaosoriorWe don't have a generate_service_certificate option there.12:26
*** ohamada has joined #tripleo12:26
jaosoriorwhich is what we base our SSL coverage on12:26
*** lucas-hungry is now known as lucasagomes12:27
dtantsurI'd start with looking which endpoint gets accessed by checking ironic.conf12:27
dtantsurusing HTTPS in the ramdisk has not so much sense from security standpoint12:27
jaosoriordtantsur: even if it doesn't some client will probably request it cause there exist really crazy regulations. So supporting it is a win for us anyway12:28
*** bala has quit IRC12:28
dtantsuryeah, as soon as they're fine with the fact it does not add security :)12:29
dtantsurif you use self-signed SSL, you have to inject them into the IPA imagine12:29
dtantsurs/imagine/image/12:29
jaosoriordtantsur: we do use a CA. it's local, but at least it's not as bad as using a self-signed.12:30
openstackgerritFlorian Fuchs proposed openstack/tripleo-ui: Move plan listing to use Mistral  https://review.openstack.org/34791912:30
dtantsurdoes IPA know about the local CA?12:30
jaosoriordtantsur: I pushed a commit for it to trust that cert12:30
*** xuao has quit IRC12:30
jaosoriordtantsur: do you know which option sets the endpoint? Haven't found it yet.12:31
*** bala has joined #tripleo12:31
dtantsurjaosorior, see above, http_url in [deploy] section12:31
jaosoriordtantsur: sorry, missed that12:32
jaosoriorslagle: got a link to a failed deployment?12:32
*** pradk has joined #tripleo12:33
slaglejaosorior: we aren't getting logs for some reason12:33
slaglethats why i set it up locally12:33
slaglejaosorior: the job is getting killed since it hits the timeout12:34
jaosoriorwow12:34
jaosorioralright12:34
*** rhallisey_ has quit IRC12:34
*** thrash|wknd is now known as thrash12:34
slagledtantsur: deploy.http_url is configured via http. but ipa is still trying to use https12:36
slagledtantsur: could that be due to https://review.openstack.org/#/c/334523/ ?12:36
dtantsursuspicious... can there be a redirect to https?12:36
slaglei dont see one12:36
*** rlandy has joined #tripleo12:36
dtantsurwell, this change only affects the path, but not the host/protocol, unless I'm missing something12:36
slaglehttps://review.openstack.org/#/c/334523/ landed after our last promote fwiw12:37
openstackgerritMichael  Henkel proposed openstack/tripleo-heat-templates: add composable services for Contrail Database, Config, Analytics, Control and Webui  https://review.openstack.org/34679912:37
*** adarazs_lunch is now known as adarazs12:40
dtantsurslagle, could you please find the associated ipxe configuration in /httpboot? just to check the kernel cmdline. also does it fail on lookup or heartbeat?12:40
openstackgerritJiri Stransky proposed openstack/tripleo-heat-templates: [mitaka-only] Fix up OPM symlinks before AODH migration  https://review.openstack.org/35544612:40
slagledtantsur: yea i'll check in a few mins. i was brining up an old env to compare the 212:41
slagleonce that's done, i'll restore the broken one12:42
jaosoriorslagle, dtantsur: It shouldn't be cause be a redirect, we don't have anything for that in the haproxy configuration12:42
dtantsurweird. ok, let's see what ends up in the ipxe configuration, so that we're at least sure it happens on the IPA side12:43
slagleyep, will check12:44
*** julim has joined #tripleo12:44
*** trozet has joined #tripleo12:47
*** rbrady has joined #tripleo12:49
*** amoralej|off has quit IRC12:50
*** zoli|brb is now known as zoli|wfh12:52
*** amoralej has joined #tripleo12:53
openstackgerritEmilien Macchi proposed openstack-infra/tripleo-ci: WIP - Implement undercloud upgrade job - Mitaka -> Newton  https://review.openstack.org/34699512:53
openstackgerritEmilien Macchi proposed openstack-infra/tripleo-ci: Implement non-ovb overcloud update job - Newton -> Newton  https://review.openstack.org/35133012:56
*** tzumainn has joined #tripleo12:57
jtomasekrbrady: ping12:58
rbradyjtomasek: ack12:58
jtomasekrbrady: does updateParameters overwrite the parameter_defaults or merges/adds  to it?13:00
jtomasekrbrady: wf_env.variables['parameter_defaults'].update(self.parameters)13:00
d0ugaljtomasek: That merges/adds13:01
*** julim has quit IRC13:01
rbradyjtomasek: right now it merges13:01
*** milan has quit IRC13:01
*** zoli|wfh is now known as zoli|lunch13:03
jtomasekd0ugal, rbrady: I wonder what is better... Probably merging/adding is best approach. Problem is with cleaning the values in case when value in parameter_default becomes the same as default parameter value and therefore not needed to be included in mistral env parameter_defaults any more13:03
jtomasekrbrady: but anyway, this does not block the patch as it is not that big deal if the value remains there13:03
d0ugaljtomasek: I guess it is only an issue if the template's default is then changed for some reason13:04
*** milan has joined #tripleo13:04
*** julim has joined #tripleo13:05
*** ccamacho has quit IRC13:05
jtomasekd0ugal: yes, although at that point all parameter values in mistral environment should be probably reset as the underlining templates structure changed13:05
d0ugaljtomasek: True, there be dragons :)13:06
jtomasekd0ugal: we don't solve it automatically yet, but rbrady added an action to reset param_defaults in mistral env, so client can use that13:06
rbradyjtomasek: for now, I'm just trying to debug the call to heatclient.stacks.validate and get that working.  The larger picture of managing params between templates, previously set values and new values is a later priority13:06
*** alee has quit IRC13:08
jtomasekrbrady: ack. I have the GUI patch almost ready. I am able to filter out parameters I need and also send only the values that I actually want to get stored in mistral env.13:08
jtomasekrbrady: what error do you get? the DeployIdentifier one?13:08
rbradyjtomasek: Bad HTTP Request / malformed13:09
jtomasekrbrady: ok13:09
rbradyjtomasek: trying to search logs to see if there's an actual detail error message somewhere13:09
d0ugalIs shardy off today?13:10
*** lblanchard has joined #tripleo13:10
jtomasekrbrady: since it happens only with the param_defaults set in mistral env, problem probably is in the format of that 'environment' being passed to heatclient13:10
openstackgerritMichael  Henkel proposed openstack/tripleo-heat-templates: add composable services for Contrail Database, Config, Analytics, Control and Webui  https://review.openstack.org/34679913:11
rbradyjtomasek: ack, will compare formats13:11
EmilienMd0ugal: yes, he's on paternity leave13:11
EmilienMd0ugal: all the week at minimum.13:11
d0ugalEmilienM: k, thanks!13:11
EmilienMd0ugal: what is your question? we can also help13:12
d0ugalEmilienM: oh, it wasn't anything specific. I just wanted to chat to him about the Mistral work as he has been keeping up with it.13:13
openstackgerritMichael  Henkel proposed openstack/tripleo-heat-templates: add composable services for Contrail Database, Config, Analytics, Control and Webui  https://review.openstack.org/34679913:13
*** jcoufal has joined #tripleo13:13
openstackgerritBrad P. Crochet proposed openstack/python-tripleoclient: Throw an error/exception when interactive overcloud update fails  https://review.openstack.org/33904813:14
openstackgerritMichael  Henkel proposed openstack/puppet-tripleo: Added Contrail Composable Services  https://review.openstack.org/34890513:16
openstackgerritBrad P. Crochet proposed openstack/tripleo-heat-templates: Composable Zaqar services  https://review.openstack.org/33168213:18
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Create per-role node_names in hieradata for all nodes  https://review.openstack.org/34897313:19
openstackgerritBrad P. Crochet proposed openstack/tripleo-heat-templates: Composable Mistral services  https://review.openstack.org/32343613:21
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Create per-role node_names in hieradata for all nodes  https://review.openstack.org/34897313:21
beaglesslagle, dprince: if you get a chance https://review.openstack.org/#/c/335235/  seems like it's been stuck in a rebase spin-cycle. While it is a "bug fix" it is more or less a cleanup in terms of complexity, but might be nice to clear off the plate.13:22
*** fultonj has joined #tripleo13:22
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Create per-role node_names in hieradata for all nodes  https://review.openstack.org/34897313:22
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Create per-role node_names in hieradata for all nodes  https://review.openstack.org/34897313:23
openstackgerritBrad P. Crochet proposed openstack/tripleo-docs: Switch docs to use tripleo-build-images  https://review.openstack.org/33766913:27
openstackgerritEmilien Macchi proposed openstack/python-tripleoclient: WIP wire in jinja templating for custom roles  https://review.openstack.org/33662513:28
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Convert overcloud.yaml to support jinja2 templating  https://review.openstack.org/31567913:28
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Move AllNodesDeployments into jinja template loop  https://review.openstack.org/33726713:29
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Move AllNodesValidationDeployments into jinja template loop  https://review.openstack.org/33758713:29
bfourniebeagles: thanks!13:30
ansiwenEmilienM: do we need more beaker tests for ec2api? or is it enough?13:31
beaglesbfournie, no problem!13:31
EmilienMansiwen: looks good13:32
ansiwenEmilienM: what about the tempest runs. Do I have to prepare something for puppet-openstack-integration?13:33
bfourniedprince, EmilienM: thanks for reviewing 33523513:34
EmilienMansiwen: it would b great ye13:34
EmilienMbfournie: np13:34
*** limao has joined #tripleo13:35
*** limao_ has joined #tripleo13:37
jaosoriorslagle: the error manifests as a node registration error, right?13:40
slaglejaosorior: no13:40
*** limao has quit IRC13:40
slagleduring instance deployment13:40
jaosoriorslagle: "no valid host was found" >13:41
jaosorior?13:41
openstackgerritFlorian Fuchs proposed openstack/tripleo-common: Exclude more unneeded files from default plan  https://review.openstack.org/35547213:42
slaglejaosorior: yes13:42
slagledtantsur: in my ipxe config for the instnace, it has https: http://paste.openstack.org/show/557571/13:42
slagledtantsur: for ipa-api-url13:42
slaglewhere is it getting that value from?13:42
slaglehttps://192.0.2.2:13385 does not exist anywhere in ironic.conf13:43
*** [1]cdearborn has joined #tripleo13:43
slagleperhaps it is querying keystone for the public endpoint?13:43
*** tbonds has joined #tripleo13:43
jaosoriorslagle: that seems like the only reasonable explanation13:44
slaglelet me go look at ironic patches since the 3rd or so13:45
jaosoriorslagle, that's the case13:45
jaosoriorslagle: it tries to get the URL from the configuration and if it doesn't get it from there ir queries keystone13:45
slaglejaosorior: so we need to write something to ironic.conf?13:46
jaosoriorslagle https://github.com/openstack/ironic/blob/master/ironic/drivers/modules/deploy_utils.py#L9913:46
jaosoriorslagle: on our side, yes, on the ironic side they need to provide an option to get the internal URL instead of the public one13:47
*** zoli|lunch is now known as zoli|wfh13:47
*** limao_ has quit IRC13:47
*** limao has joined #tripleo13:47
jaosoriorslagle: checking how to set that url on the undercloud13:47
jaosoriorslagle: there is no way to set that option in puppet-ironic. We would need to set it on hieradata_override.13:48
slaglejaosorior: testing setting api_url to the http endpoing now13:51
openstackgerritDougal Matthews proposed openstack/python-tripleoclient: Migrate the deploy command to use the Mistral workflows  https://review.openstack.org/34226113:51
*** chlong has joined #tripleo13:51
d0ugaljtomasek: The solution was far more obvious after taking a wee break. The workflow includes the root environment, so I can just remove that from the CLI logic.13:52
jtomasekd0ugal: nice13:52
ansiwenEmilienM: so I ask ade lee for advice how to do that?13:52
jaosoriorslagle: the fix is green https://review.openstack.org/#/c/355312/4 however, the commit over it that runs the periodic job https://review.openstack.org/#/c/355378/3 got a POST_FAILURE. but it got it in the ha too, which makes no sense as the fix only applies for SSL cases13:53
slaglejaosorior: ok, well i think the right fix is to set api_url to use http13:54
EmilienMansiwen: yeah you can look what we did https://github.com/openstack/puppet-openstack-integration/commit/abd6b91e05ac6ea2c94b2e9ee00bb8ae074c3e3e13:54
slaglejaosorior: instead of trying to get deployment working over ssl13:54
slaglejaosorior: which has never worked apparently13:54
ansiwenEmilienM: oh, thanks, I was just looking for that commit!13:54
slaglejaosorior: setting api_url fixed it for me13:54
*** ayoung has joined #tripleo13:55
jaosoriorslagle: would it be possible for you to test the fix on your deployment?13:55
*** dprince has quit IRC13:55
openstackgerritRonelle Landy proposed openstack/tripleo-quickstart: Adds option to ci-script to mange image in OVB  https://review.openstack.org/35547613:55
jaosoriorslagle: we haven't covered it in CI, that's true. However, it's a case that we will support at some point. So I think it's worth it to get that working.13:56
slaglejaosorior: i just tested api_url, it works13:56
*** limao_ has joined #tripleo13:56
slaglei dont have time to test the more involved fix13:57
*** egafford has joined #tripleo13:57
*** limao_ has quit IRC13:58
*** limao_ has joined #tripleo13:58
*** limao has quit IRC13:59
*** limao_ has quit IRC13:59
slaglejaosorior: if we want to support deployment over ssl in the long term, i think we need a generic way to inject the CA so that we can use prebuilt images w/o modification13:59
*** limao has joined #tripleo13:59
slaglevia kernel cmdline params perhaps14:00
jaosoriorslagle: I honestly don't think that's possible. we can't use a CA that we inject in ALL images. That introduces a vulnerability in our deployments14:00
jaosorioruhm..14:00
openstackgerritMerged openstack/puppet-tripleo: Add ironic inspector as a terminated HAProxy endpoint  https://review.openstack.org/34518314:00
*** bootsha__ has quit IRC14:01
*** devvesa has joined #tripleo14:01
jaosoriordtantsur: is it possible to pass a file or something of the sort via kernel cmdline params?14:02
jaosoriordtantsur: we need an alternative way to get python-ironic-agent.initramfs to trust a CA14:02
slaglejaosorior: comparing my 2 environments, one using current-tripleo (working) and one using latest consistent (broken), current-tripleo uses http for ipa-api-url by default14:04
slagledtantsur: ^14:04
slagleso something changed on the ironic side in the last 2 weeks or so14:04
slagleor could be puppet-ironic even maybe14:04
slaglemy configured endpoints in keystone are the same in both envs. public uses ssl, everything else is non-ssl14:04
slagleso i think just configuring api_url to use http will at least get us back to what we had working before14:05
*** dciabrin has quit IRC14:06
*** dtrainor has quit IRC14:07
*** dtrainor has joined #tripleo14:08
*** ebalduf has joined #tripleo14:09
*** myoung|biab is now known as myoung14:09
openstackgerritEmilien Macchi proposed openstack-infra/tripleo-ci: Remove EPEL usage  https://review.openstack.org/34749914:10
slagleEmilienM: can i configure arbitrary ironic config via hieradata?14:10
EmilienMyes14:10
slaglehow14:11
EmilienMthanks to https://github.com/openstack/puppet-ironic/blob/master/manifests/config.pp14:11
EmilienM#   ironic_config:14:11
EmilienM#     DEFAULT/foo:14:11
EmilienM#       value: fooValue14:11
slagleok thanks14:11
EmilienMslagle: you'll also need to patch the .pp to include ::ironic::config14:12
d0ugaljtomasek: So, this is where I am at now: http://paste.openstack.org/show/557578/14:12
d0ugaljtomasek: user-environment.yaml just contains the bits the CLI adds and the extra environments the user adds14:12
d0ugaljtomasek: If I add support to the getparameters action for this file, does that mean it will work in the UI?14:13
*** bala has quit IRC14:13
jtomasekd0ugal: yes. If you manage to move the parameter_defaults defined in user-environment to mistral environment using updateParameters then you're set with the UI14:14
jtomasekd0ugal: oh, is that different from what you meant?:)14:14
d0ugaljtomasek: no, that is fine14:15
jtomasekd0ugal: ok14:15
openstackgerritJames Slagle proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548414:15
d0ugaljtomasek: Sorry, I am being confusing. Do I need to do anything special for the resource registry in that file?14:15
d0ugaljtomasek: or does the UI never care about the resource_registry?14:15
jtomasekd0ugal: can you paste the contents of that file?14:15
openstackgerritJames Slagle proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548414:16
d0ugaljtomasek: Yeah, just give me a few mins.14:16
openstackgerritJames Slagle proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test  https://review.openstack.org/34694914:17
ansiwenEmilienM: I will try scenario001 first, correct?14:19
EmilienMansiwen: you try to share the load14:19
EmilienMso pick a scenario where the least services run14:19
EmilienMansiwen: look https://github.com/openstack/puppet-openstack-integration#description14:20
ayoungtrown|outtypewww, larsks or any other quickstart Gurus.  I need to do a Liberty/OSP8 install with Quickstart to confirm that enableing Multiple LDAPs does not break the install.  I thought it was running this way:  ~/.quickstart/tripleo-quickstart/quickstart.sh -T -v  --config ~/.quickstart//tripleo-quickstart/config/release/liberty.yml ayoung-dell-t1700.test14:20
ayoungbut when I look at the Keystone file on the undercloud it is14:20
ayoungopenstack-keystone-9.1.1-0.20160711221844.ee74d15.el7.centos.noarch14:20
ayoungwhich looks like Mitaka, not Liberty14:20
*** fragatina has joined #tripleo14:20
ayoungWhat am I doing wrong?14:20
*** fragatina has quit IRC14:21
slagleEmilienM: jaosorior : dtantsur : trying this fix: https://review.openstack.org/#/c/355484/14:21
*** fragatina has joined #tripleo14:21
jaosoriorslagle: alright... so the only way I can think of is to give the user the option to use ironic-python-agent with or without TLS. Cause also passing parameters to the kernel cmdline params has limitations. Depending on the architecture we have up to ~4000 characters. a cert file has more than 1000 usually and passing a base64 encoded string would be more than 2000 characters already :/14:21
EmilienMslagle: ok14:22
EmilienMslagle: lgtm14:22
slaglejaosorior: darn, ok14:22
EmilienMslagle: err wait14:22
EmilienMI did a mistake when I told you how to use it, can I push over?14:22
slagleyou want to push over the yaml king???14:22
EmilienMlol14:23
slagleyea, go for it :)14:23
*** jtomasek is now known as jtomasek|biab14:23
EmilienMk thx14:23
jaosoriorslagle: So yeah, if the customer wants to use TLS for ironic-python-agent, they need to rebuild the images.14:23
ayoungjaosorior, we make SSL work with FreeIPA.  Then, if someone demands something else, we get them to nail down the requirements14:23
ayoungI'm done trying to build a house without nails14:23
slaglejaosorior: Ok. or we could document how to modify an existing image14:23
jaosoriorslagle: sure, that makes sense14:23
d0ugaljtomasek|biab: https://paste.fedoraproject.org/408805/70974147/raw/ and https://paste.fedoraproject.org/408806/14712710/14:24
jaosoriorayoung: python-ironic-agent won't work with FreeIPA either unless that image is rebuilt14:24
jaosoriorayoung: we're just struggling with that ATM14:24
d0ugaljtomasek|biab: That is the result of my test here: https://github.com/d0ugal/tripleo-util/tree/master/testenvs/local_resource_registry14:24
ayoungjaosorior, why not?  You can't install RPMs after launch?14:24
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548414:25
openstackgerritDougal Matthews proposed openstack/python-tripleoclient: Migrate the deploy command to use the Mistral workflows  https://review.openstack.org/34226114:25
mhenkelhi all. is it normal that CI didn’t kick in after 70 minutes or am I doing something wrong? https://review.openstack.org/#/c/346799/ and https://review.openstack.org/#/c/34890514:26
EmilienMayoung: trown is on PTO fyi14:26
jaosoriorayoung: I'm honestly not sure how the python-ironic-agent works. But it's supposed to be a light weight image that is used to only provision nodes https://github.com/openstack/ironic-python-agent14:26
ayoungjaosorior, right, so the order would be bring up nodes, node talks to metadata or config drive, node gets directive that says install package, in this case freeipa-client14:27
*** dprince has joined #tripleo14:27
jaosoriorayoung: Problem is, currently clients use a pre-built image for that... IMO the only way to provide TLS support for ironic-python-agent is to modify the pre-built image and add the CA cert.14:27
openstackgerritJames Slagle proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548414:27
ayoungjaosorior, the rest should be drive from the server side, with the metadata  tool that rcrit is working on with the Nova team14:27
ayoungNO CA CERT!14:27
jaosoriorayoung: not even FreeIPA's certificate?14:27
ayoungHeh14:27
ayoungjaosorior, nah, you should not need it14:28
ayoungI mean, it is not a bad thing14:28
*** akuznetsov has quit IRC14:28
ayoungjaosorior, are you trying to get Metadata fetch secured with TLS?14:28
jaosoriorayoung: no14:28
ayoungYeah, then you should not need it, IFF you enroll with IPA14:29
jaosoriorslagle, dtantsur what happens with the ironic-python-agent after ironic starts provisioning a node?14:29
slaglefairies come and sprinke pxe dust14:30
*** xuao has joined #tripleo14:30
*** pcaruana has quit IRC14:30
slaglei'm not sure what you're asking :)14:30
openstackgerritwes hayutin proposed openstack/tripleo-quickstart: align the tripleo-roles.yml playbook w/ quickstart.yml  https://review.openstack.org/35549514:30
openstackgerritDougal Matthews proposed openstack/tripleo-common: Adds parameters actions  https://review.openstack.org/29868214:31
openstackgerritDougal Matthews proposed openstack/tripleo-common: Adds Deployment Action & Workflow  https://review.openstack.org/29873214:31
openstackgerritDougal Matthews proposed openstack/tripleo-common: Adds action for template processing  https://review.openstack.org/33761514:31
* slagle thinks ayoung and jaosorior are talking about different IPA's14:31
ayoungslagle, Heh14:31
ayoungslagle, I should say FreeIPA14:31
ayoungbut we had the acronym first...14:31
jaosoriorslagle: that's why I always write python-ironic-agent14:31
jaosorior*ironic-python-agent14:31
jaosoriormakes it easier to distinguish from FreeIPA14:31
ayoungpia14:31
*** awaugama has joined #tripleo14:32
jaosoriorayoung: people here call ironic-python-agent as IPA. That's why it gets quite confused if we call FreeIPA just IPA as we do in the security channels14:32
slagleEmilienM: did i fix https://review.openstack.org/#/c/355484/ ?14:33
jaosoriorIPA is quite overused14:33
ayoungjaosorior, yep.14:33
ayoungjaosorior, IdM is even worse...14:33
EmilienMslagle: you broke it14:33
jaosoriorslagle: it shouldn't need the brackets14:33
ayoungcalling it ipa-server would make theyre heads asplode14:33
EmilienMhttps://review.openstack.org/#/c/355484/3..4/elements/puppet-stack-config/puppet-stack-config.yaml.template14:33
slagleso i dont need []'s?14:33
EmilienMslagle: please revert to the previous PS14:33
EmilienMnope14:33
slagleok ok14:33
openstackgerritJames Slagle proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548414:34
EmilienMslagle: thanks to https://github.com/openstack/puppet-openstacklib/blob/master/lib/puppet/provider/openstack_config/ruby.rb#L68-L7414:34
slaglelet me just put your PS 3 back14:34
openstackgerritJames Slagle proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548414:35
openstackgerritMichael  Henkel proposed openstack/tripleo-heat-templates: add composable services for Contrail Database, Config, Analytics, Control and Webui  https://review.openstack.org/34679914:35
EmilienMslagle: is it a permanent fix or a temporary workaround?14:35
EmilienMslagle: because the right thing would be to patch puppet-ironic with the new parameter14:35
slagleEmilienM: i think it's permanent. HOwever, i'm not sure what else ironic might use conductor/api_url for14:36
EmilienMyou might want to patch puppet-ironic/manifests/conductor.pp then14:36
openstackgerritJames Slagle proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test.  https://review.openstack.org/34694914:36
*** zaneb has joined #tripleo14:36
*** radeks has quit IRC14:36
jaosoriorayoung: anyway, I don't think we can do the FreeIPA enrollment in python-ironic-agent14:37
jaosoriorfuck14:37
jaosoriorironic-python-agent14:37
ayoungjaosorior, just say ironic14:37
ayoungHeh14:37
jaosoriorayoung: they're not the same14:37
*** Ryjedo has joined #tripleo14:38
ayoungjaosorior, why not?14:38
jaosoriorayoung: ironic-python-agent is an initramfs that is used by the node on boot to communicate with ironic14:38
ayoungjaosorior, does it not do cloud-init?14:38
jaosoriorayoung: it's before cloud-init as far as I understand14:38
ayoungand you want that channel to be TLS secured, right?14:39
jaosoriorayoung: it's used for many things such as introspection and provisioning14:39
jaosoriorayoung: yes14:39
ayoungit does all that prior to communicating with the ironic head node?14:39
jaosoriorayoung: if we want to do that with FreeIPA we would need to have ALSO provisional instances that register themselves in FreeIPA, and are then discarded since the real instance will be booted after that14:40
jaosoriorunless I'm misunderstanding it14:40
awaugamaHey All.  I'm trying to deploy 3 controllers and 2 compute nodes with triple o quickstart.  I ran the quickstart.sh with a custom ha file that added a second node (- name: compute_1 flavor: compute) but still ended up with one compute node.  suggestions?14:41
jaosoriorayoung: That's why I proposed rebuilding that image and just injecting the cert. I don't think it's worth it to have the overhead of enrolling to FreeIPA every time we do introspection or boot a node14:41
ayoungjaosorior, I don't know.14:42
ayoungjaosorior, I suspect that we do not want to customize the images14:42
ayoungit is a lot of workflow to confirm those.  Once we customize, we lose the ability to track that the right images are deployed base on their hash14:42
jaosoriorwell, that's a good point14:43
*** akuznetsov has joined #tripleo14:43
ayoungjaosorior, so, we have to assume that metadata or config drive is secured at the network level, at which point it can fetch a cert14:43
ayoungensuring that network is locked down becomes a neutron or physical network issue, not crypto14:44
ayoungso for now, provision the CA cert from the ironic head node, and note that there is an assumption of network security.14:45
openstackgerritTomas Sedovic proposed openstack/tripleo-validations: Validate haproxy configuration values  https://review.openstack.org/35395314:45
openstackgerritJulie Pichon proposed openstack/tripleo-common: Add Mistral actions for boot & root device configuration  https://review.openstack.org/35417414:51
*** [1]cdearborn has quit IRC14:51
*** [1]cdearborn has joined #tripleo14:54
openstackgerritTomas Sedovic proposed openstack/tripleo-validations: Validate pacemaker status  https://review.openstack.org/35396914:56
slagledtantsur: jaosorior : ftr, this is the change that broke us: https://review.openstack.org/#/c/236982/14:57
*** dtantsur is now known as dtantsur|mtg14:57
*** devvesa has quit IRC14:58
dtantsur|mtgugh...14:58
dtantsur|mtgslagle, do you have any details on what exactly it did?14:58
slagleget_service_url defaults to teh internal endpoint type14:58
slaglein ironic.common.keystone14:58
dtantsur|mtghmm14:58
openstackgerritMerged openstack/tripleo-heat-templates: Remove NeutronEnableTunnelling from templates  https://review.openstack.org/33523514:59
dtantsur|mtgslagle, on a retro right now, will look into it afterwards (ping me if I don't)14:59
*** apetrich has quit IRC14:59
slagledtantsur|mtg: actually that looks like it should do the right thing (default to internal)15:00
*** xuao has quit IRC15:01
*** xuao has joined #tripleo15:01
jaosoriorslagle: well, now I don't know why the public url was getting there15:03
*** akuznetsov has quit IRC15:04
*** egafford has quit IRC15:04
*** mbound has joined #tripleo15:05
dprinceEmilienM: hi, regarding your comment here? https://review.openstack.org/#/c/353748/. I see that nova::network::neutron is used here http://git.openstack.org/cgit/openstack/puppet-tripleo/tree/manifests/profile/base/nova/api.pp#n5015:06
dprinceEmilienM: but do we need it?15:06
EmilienMslagle: commented on https://review.openstack.org/#/c/355484/6/elements/puppet-stack-config/puppet-stack-config.yaml.template - yourcall15:06
*** rcernin has quit IRC15:06
EmilienMdprince: yes, nova api needs those parameters15:06
dprinceEmilienM: I guess just for neutron keystone auth15:07
dprinceyeah, I'll add them there as well15:07
dprinceEmilienM: thanks15:07
EmilienMthanks!15:08
dprinceEmilienM: we could just put these into nova-base.yaml then15:08
EmilienM+115:08
slagleEmilienM: i'll fix that up after this merges if it works15:09
openstackgerritMerged openstack/tripleo-heat-templates: Convert ServiceNetMap to a nested template  https://review.openstack.org/35303215:09
shadowerhey dprince, just to let you know: mandre is away for a week but if you get to look at his mistral validation patches (https://review.openstack.org/#/c/313632/), I can update them etc.15:09
*** alhernan has joined #tripleo15:09
dprinceshadower: great, I've got it open and will comment on it15:10
shadowercool15:10
EmilienMslagle: ack15:11
*** dprince has quit IRC15:12
*** ebarrera has quit IRC15:13
*** jtomasek|biab is now known as jtomasek15:20
*** limao_ has joined #tripleo15:21
*** limao_ has quit IRC15:22
jtomasekd0ugal: I see, so I think this is fine, you don't even need to put the parameter_defaults from it into mistral environment15:23
jtomasekd0ugal: it is just another environment which user provided and enabled. Although if CLI adds some parameter_defaults to it during the process, then I'd prefer if it added those using updateParameters action15:25
d0ugaljtomasek: I think it makes sense, otherwise if you edit in the UI then it will be stored in two places.15:25
d0ugaljtomasek: Yeah, so you seen the params in the mistral env, they were all taken out of the custom env file.15:25
jtomasekd0ugal: the rule I try to follow here is that client (CLI/GUI) should only store configuration provided through it in mistal environment and not amend the templates/environments directly15:26
d0ugaljtomasek: Makes sense.15:26
jtomasekd0ugal: so ideally the new environment that user provides remains unchanged (as user provided it) and everything else is in mistral env15:27
*** limao has quit IRC15:27
d0ugaljtomasek: We can't leave it unchanged really.15:28
d0ugaljtomasek: Need to update local paths so they make sense on swift for example15:28
*** xuao has quit IRC15:31
jtomasekd0ugal:  I see, that makes sense, yeah15:35
jtomasekd0ugal: how long do you need to support this for backwards compatibility? The GUI is not going to be able to provide this functionality. I think we should move to running heat validate as part of the plan create/update workflow, so user gets notified that heat can't resolve the paths and let the user fix them15:38
d0ugaljtomasek: No idea how long...15:39
d0ugaljtomasek: I guess we can mark it as deprecated in this cycle - but not sure when it can be removed. the next?15:39
*** leanderthal is now known as leanderthal|afk15:41
openstackgerritgreghaynes proposed openstack/diskimage-builder: Add blurb about communication to docs landing page  https://review.openstack.org/35553315:42
d0ugaljtomasek: I guess we need a new CLI story before we can deprecate everything. create plan, deploy plan etc.15:44
d0ugaljtomasek: This is just the old command being powered by the new workflows.15:44
jtomasekd0ugal: yep, that's right15:44
d0ugals/everything/anything/15:44
*** weshay is now known as weshay_brb15:45
jtomasekd0ugal: is the user-environment.yaml combined of all that user provides with -e ?15:47
*** egafford has joined #tripleo15:47
*** awaugama is now known as awaugama_afk15:47
d0ugaljtomasek: Yeah, and in theory any that the CLI creates15:47
jtomasekd0ugal: ok15:48
d0ugaljtomasek: I just found out that I can store this file in the mistral env15:49
jtomasekd0ugal: this solution sounds fine to me. Only thing is that CLI should store parameter defaults in mistral env rather than creating new environment itself15:49
d0ugaljtomasek: There is a data option for environments that I hadn't understood. rbrady just explained it to me15:49
d0ugaljtomasek: Yeah, well, re-writing the CLI to not create an environment with parameters is non-trivial. So I just take the result and remove the parameters and add them to the mistral env.15:49
jtomasekd0ugal: I see, ok, add TODOs then:)15:50
d0ugaljtomasek: non-trivial as it would require changes to os-cloud-config and I'm not sure what else.15:50
jtomasekok15:50
d0ugalbut yeah, a TODO makes sense.15:50
d0ugaljtomasek: I am going to move the user-environment.yaml file into the Mistral env.15:51
jtomasekok15:51
*** weshay_brb is now known as weshay15:52
jtomasekd0ugal: umm, wait...:) this is problematic... you do that, GUI won't be able to list that environment because it is a new concept.15:53
d0ugaljtomasek: well, it is an old concept :-D dprince added it in the original version15:54
*** bana_k has joined #tripleo15:54
jtomasekd0ugal: getCapabilities will then need to include this environment in the listing15:54
d0ugaljtomasek: and I just didn't know about it, I'll show you what it looks like, just a sec15:54
*** dsariel has joined #tripleo15:54
d0ugaljtomasek: https://paste.fedoraproject.org/408838/71276667/raw/15:59
d0ugaljtomasek: see the environments section.15:59
*** jpich has quit IRC16:00
jtomasekd0ugal: I see, problem really is that there is no way to list this in the list of environments in GUI16:00
*** yamahata has joined #tripleo16:01
d0ugaljtomasek: right, I could use the file approach is that is better but it seems this is what dprince had intended I do16:01
*** ifarkas is now known as ifarkas_afk16:01
*** dtantsur|mtg is now known as dtantsur16:02
dtantsurslagle, so, do our internal endpoints also use https?16:02
jtomasekd0ugal: what if we'd create empty environment in environments/user-environment.yaml which would be also included in capabilities map and CLI would update this one?16:02
*** apetrich has joined #tripleo16:02
jtomasekd0ugal: that way GUI could list that environment no problem16:03
jtomasekand everything would just work16:03
d0ugaljtomasek: Sure, I would be okay with that.16:03
jtomasekyour approach would work no problem if we had environment metadata instead of capabilities map. but it is not there for Newton16:04
d0ugaljtomasek: Right, maybe we should remove the data method - I think it might actually be broken, I got an error.16:05
mhenkelHi all, I need some advice on pep8 validation for composable services. My build fails with16:05
mhenkel2016-08-15 15:12:27.193049 | ERROR: service_name should match file name for service: ./puppet/services/contrail/contrail-analytics.yaml.16:05
mhenkel2016-08-15 15:12:27.193076 | Validating ./puppet/services/contrail/contrail-database.yaml16:05
*** egafford has quit IRC16:05
jtomasekd0ugal: I am not against:)16:05
mhenkelhowever, my service_name matches the file name:16:06
d0ugaljtomasek: lol, I am against broken code tho :-D16:06
mhenkelservice_name: contrail-database16:06
jtomasekd0ugal: haha16:06
mhenkelany idea?16:06
mhenkelactually this is the relevant error:16:06
mhenkel2016-08-15 15:12:27.193076 | Validating ./puppet/services/contrail/contrail-database.yaml16:06
mhenkel2016-08-15 15:12:27.193110 | ERROR: service_name should match file name for service: ./puppet/services/contrail/contrail-database.yaml.16:06
*** cwolferh has joined #tripleo16:09
ansiwenEmilienM: what would be a good starting point for openstack_integration::ec2api ? can I use the puppet stuff from the beaker test?16:09
*** jtomasek is now known as jtomasek|afk16:10
openstackgerritJohn Browning proposed openstack/tripleo-validations: Added check for keystone token_flush cronjob.  https://review.openstack.org/35555716:11
*** lucasagomes is now known as lucas-afk16:17
*** ebarrera has joined #tripleo16:19
*** egafford has joined #tripleo16:20
openstackgerritJohn Browning proposed openstack/tripleo-validations: Check to ensure debug is disabled on undercloud services.  https://review.openstack.org/35555916:20
jaosoriorslagle: will we then need the fix you did for the undercloud? Or will we use the proposed fix for ironic?16:23
*** dprince has joined #tripleo16:24
*** yamahata has quit IRC16:29
slaglejaosorior: whatever unblocks the promote the fastest16:29
slagleif the ironic patch lands before my i-u patch, i'll abandon it16:29
*** bana_k has quit IRC16:31
jaosoriorslagle: so, it feasble to instruct users to rebuild the ironic-python-agent image if needing to use SSL? Even went on to ask in the ironic channel and that does seem to be the expected approach from their end16:31
slaglejaosorior: yes i think so16:32
jaosoriorslagle: they are open to other solutions but that would require major changes.16:32
dtantsurslagle, I'll find someone to merge your patch after it passes the CI. thanks for spotting it!16:32
dtantsuralso not checking call arguments makes kittens sad :-/16:34
*** aufi has quit IRC16:35
hewbroccaPoor kittens!16:36
*** tosky has quit IRC16:37
* dtantsur shakes fist at keystoneclient16:39
*** florianf has quit IRC16:40
*** ohamada has quit IRC16:41
*** awaugama_afk is now known as awaugama16:43
*** pkovar has quit IRC16:49
*** lucas-afk is now known as lucasagomes16:58
*** jaosorior has quit IRC17:06
*** Goneri has quit IRC17:07
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Move Nova settings out of puppet/compute.yaml  https://review.openstack.org/35374817:09
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Mv Ceilometer settings out of puppet/compute.yaml  https://review.openstack.org/35406317:09
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Move neutron settings out of puppet/compute.yaml  https://review.openstack.org/35420117:09
*** dprince has quit IRC17:09
*** yamahata has joined #tripleo17:09
*** bana_k has joined #tripleo17:09
*** rajinir has joined #tripleo17:12
*** hewbrocca is now known as hewbrocca-afk17:15
*** ebarrera has quit IRC17:16
*** dhill_ has quit IRC17:16
*** ebarrera has joined #tripleo17:16
*** dhill_ has joined #tripleo17:17
*** zoli|wfh is now known as zoli|gone17:19
*** zoli|gone is now known as zoli_gone-proxy17:19
openstackgerritJustin Kilpatrick proposed openstack/tripleo-quickstart: Add documentation for add-on roles  https://review.openstack.org/34673317:21
sshnaidm|afkslagle, hi, could you please merge? https://review.openstack.org/#/c/352598/17:23
sshnaidm|afkslagle, and this https://review.openstack.org/#/c/353103/17:24
*** lucasagomes is now known as lucas-dinner17:25
*** ebarrera has quit IRC17:25
*** ayoung has quit IRC17:25
*** dtantsur is now known as dtantsur|afk17:26
*** [1]cdearborn has quit IRC17:30
*** dprince has joined #tripleo17:36
*** rcernin has joined #tripleo17:37
*** cdearborn has joined #tripleo17:37
*** milan has quit IRC17:39
*** ayoung has joined #tripleo17:41
*** athomas has quit IRC17:45
EmilienMansiwen: look how other services work17:47
ansiwenEmilienM: I did, but it's really not easy to understand what is necessary and what not17:48
*** cdearborn has quit IRC17:48
*** [1]cdearborn has joined #tripleo17:48
*** rkolli has joined #tripleo17:48
ansiwenEmilienM: I have a first version now17:48
ansiwenEmilienM: I will also have to change puppet-tempest, right?17:49
EmilienMansiwen: well, if you understand puppet it's not hard17:49
EmilienMyes, if tempest.conf needs a change17:49
ansiwenEmilienM: exactly, that's the problem, IF you understand puppet :-)17:49
EmilienM;)17:50
ansiwenEmilienM: how do I find out which test I have to add to TESTS in run_tests.sh?17:58
openstackgerritMichael  Henkel proposed openstack/tripleo-heat-templates: add composable services for Contrail  https://review.openstack.org/34679917:58
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: gnocchi: use new authtoken parameters  https://review.openstack.org/35558518:05
ansiwenEmilienM: I don't understand how I tell the integration test to download the ec2api tempest tests and run them.18:06
EmilienMansiwen: are they packages in RDO?18:07
EmilienMpackaged*18:07
ansiwenEmilienM: I have no idea :-(18:08
*** dsariel has quit IRC18:09
EmilienMansiwen: do you know where are rdo packages?18:09
*** sarath has joined #tripleo18:09
*** maeca1 has quit IRC18:13
*** mbound has quit IRC18:16
slaglesshnaidm|afk: i dont see where https://review.openstack.org/#/c/352598/ ever passed ovb-ha, do you?18:17
*** apetrich has quit IRC18:18
sshnaidm|afkslagle, I don't see it ever run there18:18
*** [1]cdearborn has quit IRC18:19
slagleit did run. it just never passed18:19
ansiwenEmilienM: you mean http://buildlogs.centos.org/centos/7/cloud/x86_64/rdo-trunk-master-tested/ ?18:19
*** cdearborn has joined #tripleo18:21
EmilienMansiwen: that's the CDN repo18:23
EmilienMtrunk is here: https://trunk.rdoproject.org/18:23
*** rkolli_ has joined #tripleo18:23
EmilienMso for ex18:23
EmilienMhttps://trunk.rdoproject.org/centos7-master/93/27/9327cc7f549ef7c7efe07949bb86b0570cd62bcd_282f7f4f/18:23
EmilienMI don't see a package for ec2-api-tests18:23
sshnaidm|afkslagle, http://logs.openstack.org/98/352598/1/check-tripleo/gate-tripleo-ci-centos-7-ovb-ha/f52709a/18:25
*** rkolli has quit IRC18:26
slaglesshnaidm|afk: ok, please link that into the review18:26
slagleif it's not there18:27
sshnaidm|afkslagle, I took it fom review18:27
*** electrofelix has quit IRC18:27
ansiwenEmilienM: right... so?18:27
slagleok18:27
EmilienMansiwen: if there are no tests, we can't test ec2-api except if we install it from pip, thing we don't do in our ci18:28
EmilienMso someone needs to add missing package into ec2-api18:29
sshnaidm|afkslagle, also I don't think this one is worth to recheck: https://review.openstack.org/#/c/353103/18:29
*** apetrich has joined #tripleo18:29
ansiwenEmilienM: "someone"?18:29
*** dsariel has joined #tripleo18:30
*** ayoung has quit IRC18:37
slaglesshnaidm|afk: agreed18:38
slagledprince: are you ok with https://review.openstack.org/#/c/353103/ ?18:38
slagledprince: if so, I will update the ssh keys18:38
slagleon rh{1,2}18:39
dprinceslagle: looking now18:40
openstackgerritwes hayutin proposed openstack/tripleo-quickstart: create playbook for oooq replacement of instack-virt-setup  https://review.openstack.org/35559518:40
*** rcernin has quit IRC18:42
dprinceslagle: +218:42
openstackgerritJeff Peeler proposed openstack/tripleo-common: Include environments in capabilities output  https://review.openstack.org/35559818:54
sshnaidm|afkslagle, dprince could you please review/merge this one as well? https://review.openstack.org/#/c/352566/ it's not checked in CI anyway18:56
slaglesshnaidm|afk: i can't actually add ssh keys to the bastion host for rh1. i'll ask around and find out who can18:56
sshnaidm|afkslagle, ok, thanks18:56
dprincesshnaidm|afk: +218:57
sshnaidm|afkdprince, thanks18:58
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Add tripleo-packages composable service  https://review.openstack.org/35560519:13
*** mhenkel has quit IRC19:13
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Add tripleo-packages composable service  https://review.openstack.org/35560519:13
openstackgerritgreghaynes proposed openstack/diskimage-builder: Clarify OVERWRITE_OLD_IMAGE docs  https://review.openstack.org/35560719:14
openstackgerritgreghaynes proposed openstack/diskimage-builder: Clarify OVERWRITE_OLD_IMAGE docs  https://review.openstack.org/35560719:15
*** mbound has joined #tripleo19:17
*** alhernan has quit IRC19:18
*** iogg has joined #tripleo19:19
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Add tripleo-packages composable service  https://review.openstack.org/35560519:20
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: (mitaka only) enable sysctl nonlocal_bind  https://review.openstack.org/35561219:21
*** mbound has quit IRC19:22
*** radeks has joined #tripleo19:24
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Add tripleo-firewall composable service  https://review.openstack.org/35561419:25
EmilienMdprince: I was thinking how to make https://review.openstack.org/#/c/355614/ required19:27
EmilienMdprince: like, how to make firewall class included everywhere19:27
openstackgerritEmilien Macchi proposed openstack/puppet-tripleo: Defaults 'undef' to kernel_modules and sysctl_settings  https://review.openstack.org/35561519:29
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Enable sysctl nonlocal_bind  https://review.openstack.org/35505119:29
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Enable sysctl nonlocal_bind  https://review.openstack.org/35505119:30
dprinceEmilienM: it is composable like everything else19:31
dprinceEmilienM: We could add a GlobalService I guess? Gfidente had this idea a while back... but I don't think we need it yet19:31
EmilienMdprince: right, wfm. Just wanted to mention that our users will have to think about it19:31
dprinceEmilienM: right, well I did add it into the default lists for all the roles19:32
EmilienMok wfm now19:32
dprinceEmilienM: before we add any more features to overcloud.yaml I'd rather have shardy's patches in for the jinja templating I think19:32
*** Vijayendra has quit IRC19:33
EmilienMdprince: ++19:35
openstackgerritHarry Rybacki proposed openstack/tripleo-quickstart: Expand templated bash to allow for doc generation  https://review.openstack.org/34759219:35
*** ayoung has joined #tripleo19:48
*** yamahata has quit IRC19:49
*** yamahata has joined #tripleo19:49
openstackgerritMerged openstack/tripleo-heat-templates: Remove deprecated hdp plugin and add ambari  https://review.openstack.org/35259819:52
*** fragatina has quit IRC19:53
*** radeks has quit IRC19:55
*** ioggstream has joined #tripleo19:56
*** iogg has quit IRC19:56
EmilienMslagle: sounds like https://review.openstack.org/#/c/355484/ helped to pass promotion jobs19:59
EmilienMslagle: oh, nevermind, I didn't see the "POST_FAILURE" on nonha19:59
slagleEmilienM: it hit a timeout20:00
slaglebut it got past deployment, so it worked20:00
*** Goneri has joined #tripleo20:00
EmilienMmhh20:00
EmilienMnice20:00
EmilienMslagle: do you want me to patch puppet-ironic witht the option?20:00
*** awaugama has quit IRC20:03
*** liverpooler has quit IRC20:07
*** jayg is now known as jayg|g0n320:09
*** ioggstream has quit IRC20:14
*** Goneri has quit IRC20:15
Slowerdprince: you still around?20:16
dprinceSlower: yep, what is up dude20:16
slagleEmilienM: i dont think its needed20:16
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548420:16
slagleEmilienM: b/c the real fix is https://review.openstack.org/#/c/355537/20:16
EmilienMamn20:16
EmilienMdamn20:16
Slowerdprince: hey so I'm getting someplace with the containers stuff :)20:16
EmilienMslagle: ah ok20:16
dprinceSlower: nice20:16
EmilienMI'll abandon my patches then when it's merged & confirm to work20:16
Slowerdprince: but I'm noticing I seem to need mysql available for puppet to configure services20:16
dprinceSlower: yep, probably a pretty core requirement20:17
Slowerright20:17
slagleEmilienM: i still want to land the i-u patch if it's ready before the ironic patch20:17
Slowerdprince: I'm thinking I might need to add it to the firstboot20:17
dprinceSlower: need my help on that one?20:17
slagleEmilienM: i had hopes of getting the ironic patch landed today, but that does not look likely20:17
Slowerit probly needs to be up before the agent container..20:17
slagleEmilienM: so who knows when that will land20:17
dprinceSlower: really?20:17
EmilienMslagle: puppet patch can land today20:17
dprinceSlower: why so early?20:17
openstackgerritwes hayutin proposed openstack/tripleo-quickstart: fix the staging image var LOCATION var  https://review.openstack.org/35563320:18
EmilienMdprince: can you review https://review.openstack.org/#/c/355632/ please?20:18
Slowerdprince: I added mysql as a service20:18
Slowerdprince: but the configure is happening before it tries to start it.. but maybe I have the order wrong20:18
slagleEmilienM: the ironic patch has ~ 4 failed CI jobs on it. and i have no idea if they are actually related to my patch or not20:19
slaglethis must be what people feel like looking at tripleo-ci20:19
Slowerhrrm, yeah it's trying to configure keystone and failing20:19
Slowerso maybe I need to check the order..20:19
openstackgerritwes hayutin proposed openstack/tripleo-quickstart: fix the staging image var LOCATION var  https://review.openstack.org/35563320:19
EmilienMslagle: ahah20:20
EmilienMslagle: what is scaring me is that your patch is +2 +A and not passing CI20:20
Sloweror for now maybe disable keystone20:20
slagleEmilienM: i think that's how most projects do it, b/c they have real voting CI20:20
EmilienMslagle: but your patch is likely the fix we need20:20
openstackgerritJames Slagle proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test  https://review.openstack.org/34694920:21
bswartzmarios: ping20:27
Slowerdprince: so I'll keep messing with it ;)20:27
dprinceSlower: sounds good20:30
dprinceSlower: we should pare again soon20:30
dprinceSlower: or pair even20:30
dprinceSlower: maybe even pear !?20:31
dprinceEmilienM: does conductor not get it's api_url from keystone?20:32
EmilienMdprince: this patch allows to override it at needs20:32
*** ioggstream has joined #tripleo20:36
dprinceEmilienM: +2, no harm there I guess20:36
*** tobias_fiberdata has joined #tripleo20:38
*** tobias_fiberdata has quit IRC20:38
EmilienMdprince: thx20:39
*** fragatina has joined #tripleo20:41
*** fragatina has quit IRC20:42
*** fragatina has joined #tripleo20:43
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: gnocchi: use new authtoken parameters  https://review.openstack.org/35558520:44
*** sarath has quit IRC20:48
openstackgerritEmilien Macchi proposed openstack/python-tripleoclient: WIP wire in jinja templating for custom roles  https://review.openstack.org/33662520:53
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Convert overcloud.yaml to support jinja2 templating  https://review.openstack.org/31567920:54
openstackgerritEmilien Macchi proposed openstack/puppet-tripleo: Defaults empty hash to kernel_modules and sysctl_settings  https://review.openstack.org/35561520:57
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Enable sysctl nonlocal_bind  https://review.openstack.org/35505120:57
*** dprince has quit IRC20:59
openstackgerritSagi Shnaidman proposed openstack-infra/tripleo-ci: Bump tempest version to latest  https://review.openstack.org/35564121:00
openstackgerritSagi Shnaidman proposed openstack-infra/tripleo-ci: Bump tempest version to latest  https://review.openstack.org/35564121:02
openstackgerritSagi Shnaidman proposed openstack-infra/tripleo-ci: WIP: DONT MERGE TESTING  https://review.openstack.org/31643621:03
*** julim has quit IRC21:03
*** dsariel has quit IRC21:06
NobodyCamquestion is init.d/ the best place to execute a script upon boot up?21:09
NobodyCamand good afternoon Triple-o folks21:09
*** lblanchard has quit IRC21:10
*** rhallisey has quit IRC21:14
*** ioggstream has quit IRC21:20
*** apetrich has quit IRC21:29
openstackgerritAlex Schultz proposed openstack/puppet-pacemaker: Fix CI puppet-lint and type issues  https://review.openstack.org/35520221:35
openstackgerritAlex Schultz proposed openstack/puppet-pacemaker: Move other-requirements.txt to bindep.txt  https://review.openstack.org/35500121:35
*** jcoufal has quit IRC21:35
*** yamahata has quit IRC21:38
openstackgerritwes hayutin proposed openstack/tripleo-quickstart: fix the instructions that are generated by quickstart.sh  https://review.openstack.org/35565321:44
beaglesEmilienM, slagle: can I get an "amen" on a backport? https://review.openstack.org/#/c/354878/22:00
beagles(or a boo ;))22:00
*** yamahata has joined #tripleo22:01
*** onovy has quit IRC22:03
*** saneax_AFK is now known as saneax22:05
*** saneax is now known as Guest1677722:05
EmilienMbeagles: done22:06
beaglesEmilienM, merci beaucoup monsieur!22:07
* beagles is quickly exhausting his French22:07
beaglesEmilienM, did mordred or anybody from infra reach out to tell you that the fix that was breaking the ubuntu builds had landed?22:10
*** fragatin_ has joined #tripleo22:10
*** cdearborn has quit IRC22:11
*** beagles is now known as beagles_brb22:11
*** fragatina has quit IRC22:13
*** fragatin_ has quit IRC22:14
*** fragatina has joined #tripleo22:15
*** bswartz has quit IRC22:15
*** jistr has quit IRC22:18
*** jistr has joined #tripleo22:19
*** onovy has joined #tripleo22:19
*** bfournie has quit IRC22:22
*** thrash is now known as thrash|g0ne22:28
*** weshay has quit IRC22:32
*** beagles_brb is now known as beagles22:42
*** weshay has joined #tripleo22:44
*** pabelanger has quit IRC22:45
*** pabelanger has joined #tripleo22:45
*** mbound has joined #tripleo22:47
*** mbound has quit IRC22:52
*** egafford has quit IRC22:55
*** Goneri has joined #tripleo23:08
openstackgerritEmilien Macchi proposed openstack/puppet-tripleo: Defaults empty hash to kernel_modules and sysctl_settings  https://review.openstack.org/35561523:24
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Use http for Ironic deployments  https://review.openstack.org/35548423:25
EmilienMbeagles: nope23:27
EmilienMbeagles: but I figured23:27
beaglesEmilienM, ack... I didn't really expect mordred to remember me :)23:27
*** Vijayendra has joined #tripleo23:34
openstackgerritJames Slagle proposed openstack-infra/tripleo-ci: DO NOT MERGE - Periodic test.  https://review.openstack.org/34694923:40
*** myoung is now known as myoung|afk23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!