Monday, 2017-07-31

*** ebarrera has quit IRC00:02
*** gbarros__ has quit IRC00:13
*** dmacpher has joined #tripleo00:16
*** limao has joined #tripleo00:34
*** mdnadeem has joined #tripleo00:42
*** gbarros has joined #tripleo00:53
*** deep-book-gk has joined #tripleo00:59
*** deep-book-gk has left #tripleo01:00
*** jkilpatr has quit IRC01:06
*** bfournie has joined #tripleo01:45
*** bfournie has quit IRC01:46
*** slagle has joined #tripleo01:49
*** bfournie has joined #tripleo01:58
*** bfournie has quit IRC01:58
*** bfournie has joined #tripleo01:59
*** snecklifter has joined #tripleo02:08
*** gbarros has quit IRC02:24
*** gbarros has joined #tripleo02:29
*** funzo has quit IRC02:39
*** gbarros has quit IRC02:43
*** snecklifter has quit IRC02:45
*** ecerquei has joined #tripleo02:46
*** ykarel has joined #tripleo02:48
*** ykarel_ has joined #tripleo02:48
*** rwsu has joined #tripleo02:57
openstackgerritzhongshengping proposed openstack/puppet-pacemaker master: Update openstackdocstheme>=1.16.0  https://review.openstack.org/48906203:03
openstackgerritzhongshengping proposed openstack/puppet-tripleo master: Update openstackdocstheme>=1.16.0  https://review.openstack.org/48906903:03
*** funzo has joined #tripleo03:05
*** ykarel_ has quit IRC03:22
*** ykarel has quit IRC03:23
*** gvrangan__ has joined #tripleo03:23
*** ramishra has joined #tripleo03:24
*** ecerquei has quit IRC03:27
*** gkadam has joined #tripleo03:32
*** gkadam has quit IRC03:33
*** gkadam has joined #tripleo03:37
*** gkadam has quit IRC03:37
*** gkadam has joined #tripleo03:38
*** gkadam has quit IRC03:39
*** gkadam has joined #tripleo03:40
*** gkadam has quit IRC03:41
*** skramaja has joined #tripleo03:42
*** gkadam has joined #tripleo03:42
*** gkadam has quit IRC03:44
*** gkadam has joined #tripleo03:44
*** udesale has joined #tripleo03:47
*** gkadam_ has joined #tripleo03:47
*** gkadam is now known as Guest3615003:47
*** gkadam_ is now known as gkadam03:47
*** jaganathan has joined #tripleo03:49
*** Guest36150 has quit IRC03:50
*** dmacpher has quit IRC03:59
openstackgerritSaravanan KR proposed openstack/tripleo-heat-templates master: Enable Dpdk after rebooting with Hugepages for OvS2.7  https://review.openstack.org/48384604:00
openstackgerritSteve Baker proposed openstack/python-tripleoclient master: Add --set argument to prepare command  https://review.openstack.org/48908304:09
*** dmacpher has joined #tripleo04:17
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Addition of Nuage as mechanism driver for ML2  https://review.openstack.org/47478804:30
*** udesale__ has joined #tripleo04:31
*** udesale has quit IRC04:33
*** udesale__ has quit IRC04:38
*** gvrangan__ has quit IRC04:38
*** funzo has quit IRC04:38
openstackgerritSteve Baker proposed openstack/tripleo-heat-templates master: docker: Add unit tests on service_name  https://review.openstack.org/44275505:01
openstackgerritSteve Baker proposed openstack/tripleo-heat-templates master: Add docker templates to configure Ironic inspector  https://review.openstack.org/45782205:01
*** dmacpher_ has joined #tripleo05:02
*** dmacpher has quit IRC05:06
*** udesale__ has joined #tripleo05:07
*** karthiks has joined #tripleo05:08
*** shreshtha has joined #tripleo05:09
*** janki has joined #tripleo05:10
*** pgadiya has joined #tripleo05:10
*** pdeore has joined #tripleo05:13
*** gvrangan__ has joined #tripleo05:15
*** jaganathan has quit IRC05:15
*** psachin has joined #tripleo05:15
*** GK1wmSU has joined #tripleo05:22
*** GK1wmSU has left #tripleo05:23
*** agurenko has joined #tripleo05:25
*** dsneddon has quit IRC05:30
*** ratailor has joined #tripleo05:32
*** cshastri has joined #tripleo05:35
*** _GK1wmSU has joined #tripleo05:36
*** _GK1wmSU has left #tripleo05:39
*** lmiccini has joined #tripleo05:43
*** rlandy has joined #tripleo05:51
openstackgerritKarthik S proposed openstack/os-net-config master: OvS 2.7 support - dpdk-devargs needs to provided for DPDK devices  https://review.openstack.org/48054005:54
*** rlandy has quit IRC05:55
*** rwsu has quit IRC05:57
*** ykarel has joined #tripleo05:58
*** rlandy has joined #tripleo05:58
openstackgerritNuman Siddique proposed openstack/tripleo-heat-templates master: Support deploying OVN as container services  https://review.openstack.org/46886005:58
openstackgerritNuman Siddique proposed openstack/tripleo-heat-templates master: DO NOT REVIEW: TESTING ONLY  https://review.openstack.org/48909705:58
openstackgerritJanki Chhatbar proposed openstack/tripleo-puppet-elements master: Adds puppet-odl module to overcloud image  https://review.openstack.org/48143306:00
*** rlandy is now known as rlandy|ci_mtgs06:00
*** jfrancoa has joined #tripleo06:03
*** rcernin has joined #tripleo06:11
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [DNM] larger LVM testing  https://review.openstack.org/48686406:12
*** pcaruana has joined #tripleo06:19
openstackgerritMartin Mágr proposed openstack/tripleo-common master: Add health checks during kolla build  https://review.openstack.org/48841906:22
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [DNM] larger LVM testing  https://review.openstack.org/48686406:23
*** funzo has joined #tripleo06:39
*** funzo has quit IRC06:44
*** jlinkes has joined #tripleo06:46
*** ramishra has quit IRC06:50
*** iranzo has joined #tripleo06:50
*** iranzo has quit IRC06:50
*** iranzo has joined #tripleo06:50
*** yprokule has joined #tripleo06:51
*** ramishra has joined #tripleo06:51
*** jaganathan has joined #tripleo06:56
*** amoralej|off is now known as amoralej06:58
*** ramishra has quit IRC06:59
*** dciabrin has joined #tripleo06:59
*** ramishra has joined #tripleo07:00
*** jaosorior has joined #tripleo07:04
*** flepied has quit IRC07:06
*** florianf has joined #tripleo07:11
*** iranzo has quit IRC07:11
*** ccamacho has quit IRC07:11
*** mcornea has joined #tripleo07:16
*** ccamacho has joined #tripleo07:18
*** ffiore has joined #tripleo07:18
*** mcornea_ has joined #tripleo07:25
*** dmacpher_ has quit IRC07:25
*** mcornea has quit IRC07:26
*** oidgar has joined #tripleo07:27
*** iranzo has joined #tripleo07:29
jaosoriordciabrin: are we already enabling that key?07:33
dciabrinjaosorior, we do use it for all the deployment that make use of pacemaker "remotes"07:34
dciabrinjaosorior, remotes discuss with the real luster over TLS. But currently, the cluster nodes communicate between each other unencrypted07:34
jaosoriordciabrin: where is that set up?07:35
jaosoriorthe "remotes" bits that is actually using TLS07:35
dciabrinjaosorior, hmmm I would say ruby code in puppet tripleo07:35
dciabrinjaosorior, oh no puppet-pacemaker07:35
*** iranzo has quit IRC07:35
jaosoriordciabrin: lets take a look at it07:36
jaosoriordciabrin: ok, so it's set up here https://github.com/openstack/puppet-pacemaker/blob/master/manifests/remote.pp#L3907:37
jaosoriordciabrin: but where is the configuration option set up? O_o07:37
*** chem has quit IRC07:39
dciabrinjaosorior, as soon as you configure composable HA for using pacemaker remotes, the cluster will create a special resource that makes the connection to the remote nodes by using this authkey07:39
jaosorioroh right07:39
*** bogdando has joined #tripleo07:39
jaosoriordciabrin: so what's missing right now is setting the PCMK_authkey_location and the port07:40
*** gkadam is now known as gkadam-afk07:40
jaosoriorbandini, dciabrin: do we call https://github.com/openstack/puppet-pacemaker/blob/master/manifests/corosync.pp from anywhere?07:40
dciabrinjaosorior, I'm not even sure, I think we just need to change the initial call that sets up the cluster. Instead of using "pcs cluster setup" we would use "pcs lcluster setup --encrypted" or something. authkeys are already always generated07:41
*** dtantsur|afk is now known as dtantsur07:41
*** suuuper has joined #tripleo07:41
dciabrinjaosorior, I think the pacemaker resource makes uses of corosync.pp internally07:41
dciabrinsorry the pacemaker service (that you're setting in the controller role)07:41
*** ykarel is now known as ykarel|lunch07:41
jaosorioris that the case? Seems to me there are two ways of generating it via puppet-pacemaker. One is calling the corosync resource, and the other calling the remote resource07:41
jaosoriordciabrin: both create the "file" puppet resource (which can be a bug)07:42
bandinithey have to do it both. because corosync.pp only creates in on the full cluster nodes. whereas the remote creates it on the remote nodes only07:42
bandinithis stuff predates the newly introduced remote support in pcs that will come with 7.407:43
bandiniat which point we can simplify this stuff a lot07:43
jaosoriordciabrin, bandini: Yep, we're using the remote resource in puppet-tripleo.07:43
*** egonzalez has joined #tripleo07:44
bandinimy gut feeling is that I would not reuse the remote authkey for the full cluster encryption. I'd add a parameter for that. We can make them the same value when importing the manifest07:44
bandinibrb07:44
jaosoriorbandini: well, we need to make sure that corosync and the "remote" resource don't get called in the same node. Else we'll get puppet errors.07:44
jaosoriordciabrin: ^^07:44
bandinijaosorior: right that should never happen07:44
jaosoriorok07:44
jaosoriorthen we're good07:45
jaosoriordciabrin, bandini: Yeah, I guess we can have a different key for the cluster (non-remote) encryption. Would be cleaner.07:45
jaosoriordciabrin, dciabrin: Will that work though? Would corosync be smart enough to figure out that there are different keys there?07:46
jaosoriorbandini: ^^07:46
bandinijaosorior: I need to doublecheck, but yeah. if it is not smart enough then we will need a single key07:46
* bandini bbiab07:47
jaosoriorsure07:47
jaosoriordciabrin: got time for a quick bluejeans call07:48
jaosorior?07:48
jaosoriorCan someone approve this docs patch https://review.openstack.org/#/c/487428/ ?07:52
*** dsariel has joined #tripleo07:52
*** rwsu has joined #tripleo07:53
dtantsurjaosorior: looking07:56
dtantsur+A07:57
*** udesale has joined #tripleo07:58
jaosoriordtantsur: thanks :D07:58
dtantsurwould appreciate someone checking https://review.openstack.org/#/c/487166/ and https://review.openstack.org/#/c/487175/, both are quite easy07:58
*** milan has joined #tripleo07:58
dtantsur:)07:58
dciabrinjaosorior, yep07:58
*** flepied has joined #tripleo07:58
*** udesale__ has quit IRC08:00
openstackgerritMerged openstack/tripleo-docs master: Add documentation for fernet key rotation  https://review.openstack.org/48742808:00
*** dbecker has joined #tripleo08:09
*** derekh has joined #tripleo08:11
*** akrivoka has joined #tripleo08:11
*** snecklifter has joined #tripleo08:12
*** masco_ has joined #tripleo08:13
*** ebarrera_ has joined #tripleo08:13
*** salmankhan has joined #tripleo08:24
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Enable encryption of pacemaker traffic by default  https://review.openstack.org/48912908:24
jaosoriordciabrin: ^^08:25
jaosoriordciabrin: what's the path for corosync.conf?08:28
*** fzdarsky has joined #tripleo08:29
*** udesale__ has joined #tripleo08:31
*** udesale has quit IRC08:34
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Handle using encryption by default for pacemaker in upgrade  https://review.openstack.org/48913208:36
jaosoriordciabrin: found it ^^08:36
*** rwsu has quit IRC08:36
*** cylopez has joined #tripleo08:39
*** gkadam-afk is now known as gkadam08:40
openstackgerritHonza Pokorny proposed openstack/tripleo-ui master: Add logging documentation  https://review.openstack.org/48913408:45
*** mcornea_ has quit IRC08:48
*** mcornea has joined #tripleo08:48
jaosoriordciabrin: is there a "cluster setup" ran on the pacemaker remote nodes?08:49
dciabrinjaosorior, nope, they are handled via pacemaker resource in a later step. this is already using the authkey08:50
jaosoriorok08:50
jaosoriordciabrin: so, once you have an environment ready, we can test the patch and the upgrade :D08:50
jaosorior* puppet patch and the ugprade patch08:51
dciabrinjaosorior, woot let me find it08:51
*** nyechiel has joined #tripleo08:51
*** iranzo has joined #tripleo08:53
*** iranzo has joined #tripleo08:53
*** ckyriakidou has joined #tripleo08:53
*** mcornea_ has joined #tripleo08:54
*** mcornea has quit IRC08:55
openstackgerritArx Cruz proposed openstack/tripleo-quickstart-extras master: Enable tempest to run with whitelist  https://review.openstack.org/48525209:04
amoralejhi janki, you are working in contanierization of barbican, right?09:04
openstackgerritGabriele Cerami proposed openstack/tripleo-quickstart master: enable container periodic job  https://review.openstack.org/47574309:05
*** rwsu has joined #tripleo09:08
*** suuuper has quit IRC09:08
*** fzdarsky has quit IRC09:08
*** sri_ has joined #tripleo09:10
amoralejjanki, barbican container is failing to build, i've reported it in https://bugs.launchpad.net/tripleo/+bug/170759809:10
openstackLaunchpad bug 1707598 in tripleo "Error building barbican-api container using kolla" [Undecided,New]09:10
*** hewbrocca_afk is now known as hewbrocca09:12
*** suuuper has joined #tripleo09:12
jankiamoralej, thanks for informing. I will have a look. There is 1 more patch in progress regarding this https://review.openstack.org/#/c/481451/09:13
amoralejjanki, iiuc you are not using wsgi to run barbican-api there, right?09:14
amoralejmaybe the same could be applied to kola-ansible to remove uwsgi requirement09:15
openstackgerritGabriele Cerami proposed openstack-infra/tripleo-ci master: WIP: containers periodic test  https://review.openstack.org/47574709:16
jaosoriorjanki, amoralej: We're using httpd for the non-containerized deployment of barbican09:16
jankiamoralej, no. the patch uses image built by kolla09:16
jankiamoralej, so the error is from kolla/image building process09:17
amoralejyeah, but now we can't build the image because of uwsgi09:17
amoralejyeah09:17
*** pgadiya has quit IRC09:17
*** iranzo has quit IRC09:19
jankiamoralej, uwsgi was added by https://github.com/openstack/kolla/commit/bf62341cedabc96d2d9a1d5350f6424ddba3249f and I think that is ubuntu specific09:19
jaosoriorjanki: it seems to be ubuntu specific. Would sure appreciate if we would use httpd for that instead though. that's how we're running the TLS bits09:20
*** jtomasek has joined #tripleo09:20
*** jtomasek has quit IRC09:20
*** jtomasek has joined #tripleo09:21
jankijaosorior, would it be good to contact barbican team first? I am not contributor there.09:21
*** tosky has joined #tripleo09:21
jaosoriorjanki: I'm part of the barbican team :)09:22
amoralejjust note that kolla-ansible is using uwsgi to run it, you may need to fix that too09:22
*** chem has joined #tripleo09:23
jankijaosorior, ahh! perfect. so you suggest to replace uwsi with http? I suspect that would already be installed in system09:23
*** limao has quit IRC09:23
jankiamoralej, ack!09:23
jaosoriorjanki: that's not in the image AFAIK09:23
*** limao has joined #tripleo09:23
*** suuuper has quit IRC09:24
jaosorioramoralej, janki: Checking out the latest code. They have uwsgi for both rhel and ubuntu now. But httpd is not included in the image. So that needs to be added first09:24
amoralejyeah09:24
jankijaosorior, shouldnt httpd needed for horizon? just curios09:25
jaosoriorjanki: it is. But that's a different image :)09:25
*** suuuper has joined #tripleo09:25
jankijaosorior, ohk. so would you take these up or if needed I can help09:26
jaosoriorjanki: sure, let me submit a patch for adding httpd to the barbican image09:26
jaosoriorjanki: and thanks for doing the containerized barbican patch!09:27
*** jtomasek has quit IRC09:27
jankijaosorior, remove uwsgi in another patch?09:27
jankijaosorior, my pleasure. It would be great if you can help with reviews https://review.openstack.org/#/c/481451/09:28
jaosoriorjanki: sure will, I already commented :D09:28
*** limao has quit IRC09:28
jaosoriorjanki, amoralej https://review.openstack.org/48915009:28
*** pblaho has joined #tripleo09:29
jankijaosorior, you will be removing uwsgi or keeping that too?09:30
amoralejjaosorior, ^09:30
amoralejyou need to remove uwsgi-plugin-python, right?09:30
jaosorioramoralej: not necessarily09:30
amoralejjaosorior, then we still have an issue in RDO :)09:31
*** chem has quit IRC09:31
amoralejthat package doesn't exist in RDO09:31
jaosorioramoralej, janki: That was added by another contributor. And they might have a case or a deployment tool where they're deploying barbican with uwsgi09:31
*** chem has joined #tripleo09:31
jaosorioramoralej: what's the issue? (Sorry, I didn't know there was an issue in the first place)09:31
jaosorioramoralej: oh09:31
jaosoriorlet's remove that then09:31
amoralejhttps://bugs.launchpad.net/tripleo/+bug/170759809:31
openstackLaunchpad bug 1707598 in tripleo "Error building barbican-api container using kolla" [Undecided,New]09:31
amoralejjaosorior, kolla-ansible uses uwsgi so that needs to be fixed, i guess09:32
*** suuuper has quit IRC09:32
*** suuuper1 has joined #tripleo09:32
*** suuuper1 is now known as suuuper209:32
jaosorioramoralej: is there an actual package for uwsgi in centos/rhel?09:32
amoralejnop09:32
amoralejwe have httpd or gunicorn in RDO09:33
amoralejbut not uwsgi09:33
*** pgadiya has joined #tripleo09:33
jankiamoralej, jaosorior can we implement OS dependent package installation?09:33
jankithat way the contributor's use case is fulfilled too09:34
jaosorioramoralej, janki: Removed the package in the same patch09:34
*** cylopez has quit IRC09:35
jaosorioramoralej, janki: Not sure if that would be the right way to do it though. Maybe I should submit a patch that JUST removes uwsgi. What do you think?09:35
amoraleji think having both changes make sense, as it's moving from uwsgi to httpd09:36
jankijaosorior, anyway is good for me. just have clear release note that mentions the reason for the change.09:36
jaosoriorthat probably makes sense09:36
jaosoriorlet me add that09:37
*** janki is now known as janki|meeting09:37
*** cylopez has joined #tripleo09:39
jaosorioramoralej, janki|meeting: Done09:39
*** janki|meeting is now known as janki09:39
jankijaosorior, done :)09:40
jaosoriorjanki: After that patch merges, you could modify the t-h-t patch to run httpd instead of the barbican-api command, in a similar fashion that heat, keystone and cinder do09:42
jaosoriorjanki: you'll also need to include httpd-related directories to the mounted volumes09:42
*** cylopez has quit IRC09:46
*** dciabrin has quit IRC09:46
*** stendulker has joined #tripleo09:49
jankijaosorior, gotcha. will do. Thanks for letting me know :)09:51
*** cylopez has joined #tripleo09:51
*** jtomasek has joined #tripleo09:56
*** mdnadeem has quit IRC09:59
jankijaosorior, I have a question regarding barbican.10:01
*** dciabrin has joined #tripleo10:02
openstackgerritJanki Chhatbar proposed openstack/tripleo-heat-templates master: Containarise Barbican API  https://review.openstack.org/48145110:04
*** masco_ has quit IRC10:06
*** suuuper has joined #tripleo10:08
*** suuuper2 has quit IRC10:09
*** rwsu has quit IRC10:09
*** ukalifon has joined #tripleo10:13
*** ukalifon has left #tripleo10:13
*** suuuper has quit IRC10:19
*** masco_ has joined #tripleo10:19
*** ccamacho has quit IRC10:22
*** dsneddon has joined #tripleo10:23
jaosoriorjanki: ??10:23
jankijaosorior, we are using only barbican api in tripleo along with keystone? and no other barbican services?10:24
jankii dont see puppet/docker services for any other barbican services in t-h-t10:24
jaosoriorjanki: right, it's a very basic deployment with no workers. The plan for the next release is to complete that work and actually deploy the whole bundle10:25
jankijaosorior, i was actually confused if the implementation is complete. thanks for clarifying. btw, I have made changes to containarization patch. please review10:26
openstackgerritJaganathan Palanisamy proposed openstack/tripleo-common master: Derive params network config stack exists fix  https://review.openstack.org/48916810:26
*** katkapilatova has joined #tripleo10:26
openstackgerritGael Chamoulaud proposed openstack/tripleo-quickstart-extras master: Add pre-deployment negative tests for validations  https://review.openstack.org/48849510:29
*** pgadiya has quit IRC10:36
*** ccamacho has joined #tripleo10:37
*** jaosorior has quit IRC10:39
*** funzo has joined #tripleo10:41
*** Vijayendra has joined #tripleo10:41
bogdandohi folks. I plan to make an update to puppet-kesytone's apache vhost logging options, in the scope of https://review.openstack.org/#/c/488506/ (httpd containers logs). Just have some issues with running rake spec locally. Do you know of the recent changes to puppet openstack infra by chance? cross posting here as the topic channel is yet become very active today10:44
*** funzo has quit IRC10:46
*** ffiore has quit IRC10:48
*** pgadiya has joined #tripleo10:49
*** jaosorior has joined #tripleo10:50
*** ebarrera_ has quit IRC10:52
*** ebarrera_ has joined #tripleo10:52
openstackgerritGael Chamoulaud proposed openstack-infra/tripleo-ci master: Enable tripleo-validations tests  https://review.openstack.org/48108010:53
*** ansmith has quit IRC10:55
*** jkilpatr has joined #tripleo10:59
*** ykarel|lunch is now known as ykarel11:00
openstackgerritJaganathan Palanisamy proposed openstack/tripleo-common master: Derive params network config stack exists fix  https://review.openstack.org/48916811:04
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Enable encryption of pacemaker traffic by default  https://review.openstack.org/48912911:06
*** stendulker has quit IRC11:06
*** stendulker_ has joined #tripleo11:06
jaosoriordciabrin: is pacemaker running containerized yet?11:08
dciabrinjaosorior, no not yet11:09
jaosoriorok11:09
*** stendulker_ has quit IRC11:09
*** Vijayendra has quit IRC11:10
*** salmankhan has quit IRC11:10
*** jistr is now known as jistr|mtg11:12
jtomasekhonza: hi11:14
jtomasekhonza: re https://review.openstack.org/#/c/488526/211:15
jtomasekhonza: I have not pulled the patch yet, but I think it would be better to integrate 'discover_nodes' workflow in UI rather than 'discover_and_enroll_nodes'11:16
jtomasekhonza: due to the fact that IIUC the output of 'discover_nodes' can be used to populate current nodes registration form/view11:17
*** mcornea_ is now known as mcornea11:20
*** rbrady has quit IRC11:25
*** ccamacho is now known as ccamacho|lunch11:25
*** dougbtv__ is now known as dougbtv11:26
*** lmiccini has quit IRC11:27
*** morazi has quit IRC11:29
* dtantsur +1 to that11:36
dtantsuractually, I've split these two workflows with UI in mind11:37
*** jistr|mtg is now known as jistr11:39
jaosoriorjistr: got a chance to check this out https://review.openstack.org/#/c/478894/ ?11:40
*** pdeore has quit IRC11:42
*** rhallisey has joined #tripleo11:44
jtomasekdtantsur: thanks for that. In theory UI can currently use both. when using discover_and_enroll_nodes user just needs to move enroller nodes to manageable manually (which UI can trigger too) but I think that register nodes workflow does more than just move nodes form enroll to manageable, which would get skipped...11:47
jaosoriorjistr: thanks11:47
jistr:)11:47
jaosoriorbandini: could you check this out https://review.openstack.org/#/c/478894/ ?11:48
jaosoriorccamacho|lunch: ^^11:48
jaosorioror anyone that reviews puppet-tripleo code :D11:49
flaper87jistr: do you have some time to play with the ssh key stuff?11:50
jistrflaper87: haha i just started typing about it :)11:50
jistrflaper87: yea i can do that. Hopefully my undercloud is in a decent shape :D11:50
flaper87jistr: w0000h0000000!11:51
flaper87I should have one, if you want access to it11:51
flaper87it's decent enough11:51
flaper87:P11:51
*** shreshtha has quit IRC11:51
jistrflaper87: i was thinking a new composable service + host_prep_tasks maybe? Or do you think it would be better to have it as part of the mistral workflow?11:51
flaper87jistr: mmh, I'm inclined to say that we should have it as part of the mistral workflow11:54
jistrflaper87: right. Yea there's benefits and drawbacks to each. Having it in mistral means we have to repeat it in every workflow that needs it, but OTOH we don't have to introduce a "fake" service.11:56
jistri'll try going the mistral way first then. A bit out of my comfort zone but i'm eager to learn :)11:58
flaper87jistr: we can also have a small mistral workflow that is include it in the workflows that need it12:00
flaper87jistr: not repeat the task definition but just call the workflow and pass the params12:00
jistrflaper87: yea, like the copy_ssh_key is also an extracted worklow. Still we won't be able to just assume that ansible-admin is already present... but that's not a big deal.12:01
*** salmankhan has joined #tripleo12:03
*** dprince has joined #tripleo12:05
jaosoriorbandini: also, do you happen to have an ha environment where we could test this out https://review.openstack.org/#/q/topic:pacemaker-tls ?12:07
openstackgerritJiri Tomasek proposed openstack/tripleo-ui master: Update updatePlan action  https://review.openstack.org/48919612:08
bandinijaosorior: I can probably test it later this afternoon12:08
bandiniworst thing tomorrow morning12:08
* bandini adds to todo12:08
jaosoriorthat would be great :D12:08
jaosoriordciabrin: ^^12:08
bandini;)12:08
*** bfournie has quit IRC12:10
*** sbrzozow has joined #tripleo12:13
*** salmankhan has quit IRC12:18
*** udesale__ has quit IRC12:19
*** jcoufal has joined #tripleo12:21
*** slagle has quit IRC12:27
*** catintheroof has joined #tripleo12:29
*** slagle has joined #tripleo12:29
openstackgerritJanki Chhatbar proposed openstack/tripleo-heat-templates master: [WIP] PLEASE DONOT REVIEW  https://review.openstack.org/48920112:30
*** agopi has joined #tripleo12:32
*** pchavva has joined #tripleo12:33
*** ccamacho|lunch is now known as ccamacho12:34
*** masco_ has quit IRC12:35
*** morazi has joined #tripleo12:39
*** ratailor has quit IRC12:39
*** bfournie has joined #tripleo12:41
*** ansmith has joined #tripleo12:41
*** funzo has joined #tripleo12:43
*** gkadam has quit IRC12:43
karthiksdsneddon,  Can you please review https://review.openstack.org/#/c/480540/. Just corrected the typos in the comments12:44
openstackgerritJanki Chhatbar proposed openstack/tripleo-heat-templates master: [WIP] Update steps for OpenDayLight  https://review.openstack.org/48920112:46
*** gbarros has joined #tripleo12:48
*** funzo has quit IRC12:48
*** masco_ has joined #tripleo12:48
bandinijaosorior: https://review.openstack.org/#/c/481965/ if you have some time?12:52
honzajtomasek: Based on the absence of wireframes, I assumed that it was meant to be fully automatic.  Should we have both?12:53
*** tzumainn has joined #tripleo12:57
*** liverpooler has joined #tripleo12:57
jtomasekhonza: I've now checked 'discover_and_enroll_nodes' and it does register workflow... ok that should work then... I was expecting that we provide a way to overview the nodes before registering them12:57
jtomasekhonza: I'll check the patch and let's continue there...12:58
honzajtomasek: k, thanks --- i'm open to suggestions, it worked quite nicely in testing12:58
*** amoralej is now known as amoralej|lunch13:00
*** myoung|afk is now known as myoung13:00
*** liverpooler has quit IRC13:02
*** rbowen has quit IRC13:02
*** rbowen has joined #tripleo13:03
*** cdearborn has joined #tripleo13:03
*** liverpooler has joined #tripleo13:03
*** liverpooler has quit IRC13:07
*** liverpooler has joined #tripleo13:07
*** agurenko has quit IRC13:14
*** eck`gone is now known as eck`13:15
*** salmankhan has joined #tripleo13:15
jaosorioramoralej|lunch: are we removing epel?13:18
openstackgerritBogdan Dobrelya proposed openstack/puppet-tripleo master: Support keystone wsgi logging to syslog  https://review.openstack.org/48921813:19
*** ffiore has joined #tripleo13:19
*** salmankhan has quit IRC13:20
*** lblanchard has joined #tripleo13:20
*** lblanchard has quit IRC13:20
*** lblanchard has joined #tripleo13:21
openstackgerritBogdan Dobrelya proposed openstack/tripleo-heat-templates master: Send keystone container httpd logs to syslog  https://review.openstack.org/48850613:22
*** toure_ is now known as toure13:23
*** rwsu has joined #tripleo13:26
*** rwsu has quit IRC13:27
*** rwsu has joined #tripleo13:27
*** gbarros has quit IRC13:27
*** agurenko has joined #tripleo13:27
*** atoth has joined #tripleo13:27
*** thrash|g0ne is now known as thrash13:28
*** jmelvin has joined #tripleo13:29
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Enable TLS for the HAProxy stats interface  https://review.openstack.org/47889413:30
*** gbarros has joined #tripleo13:32
*** morazi has quit IRC13:34
*** dsneddon has quit IRC13:35
*** salmankhan has joined #tripleo13:36
*** morazi has joined #tripleo13:36
*** gvrangan__ has quit IRC13:39
*** amoralej|lunch is now known as amoralej13:39
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-common master: Remove uwsgi-plugin-python from barbican-api image  https://review.openstack.org/48922413:39
amoralejjaosorior, we don't enable epel in rdo-ci jobs13:39
amoralejand we should disable in kolla upstream also, if posible13:39
jaosorioramoralej: I was recommended to do this instead https://review.openstack.org/48922413:39
jaosorioregonzalez: ^^13:40
amoralejwhy is that better?13:40
jaosorioramoralej: seems they're using uwsgi in kolla-ansible. They're willing to move to httpd instead, however, they'll need some time to migrate. So in the meantime, we remove it from TripleO while they migrate./13:40
openstackgerritJiri Stransky proposed openstack/tripleo-common master: Create admin user for TripleO/Ansible use  https://review.openstack.org/48922513:41
jistrflaper87: ^^ sneak peek -- i haven't tested it yet13:42
egonzalezyeah, current barbican-api command is uwsgi, removing the package will broke ansible, we need time to migrate barbican config to use httpd instead13:43
*** skramaja has quit IRC13:43
*** pdeore has joined #tripleo13:43
egonzalezwe'd like to remove epel, however we stick with it due some dependencies13:43
amoralejjaosorior, ok13:44
openstackgerritDmitry Tantsur proposed openstack/tripleo-heat-templates master: Copy scheduler configuration from service/ironic to services-docker/ironic  https://review.openstack.org/48922813:48
*** ansmith_ has joined #tripleo13:52
*** ansmith_ has quit IRC13:53
*** pgadiya has quit IRC13:56
*** ansmith_ has joined #tripleo13:57
*** marrusl has joined #tripleo13:58
*** nyechiel has quit IRC13:58
*** gcerami_ has joined #tripleo13:59
*** nyechiel has joined #tripleo14:00
*** panda has quit IRC14:01
*** gcerami_ is now known as panda14:01
*** gbarros has quit IRC14:01
*** ratailor has joined #tripleo14:02
*** limao has joined #tripleo14:03
*** gbarros has joined #tripleo14:03
openstackgerritAdriano Petrich proposed openstack/python-tripleoclient master: Remove the unused function "create_default_plan"  https://review.openstack.org/47886514:05
*** gbarros has quit IRC14:10
*** bnemec-pto is now known as bnemec14:11
openstackgerritOr Idgar proposed openstack/tripleo-common master: WIP Add Octavia post deployment steps to tripleo workflows  https://review.openstack.org/48745014:11
openstackgerritMartin Mágr proposed openstack/tripleo-common master: Add health checks during kolla build  https://review.openstack.org/48841914:12
jristakrivoka, florianf, jtomasek can we get some reviews on https://review.openstack.org/#/q/status:open+project:openstack/tripleo-ui+branch:master+topic:bp/websocket-logging14:12
jristit is important++++14:12
florianfjrist: yep14:12
jtomasekjrist: ack14:13
*** rlandy|ci_mtgs has quit IRC14:14
*** rbrady has joined #tripleo14:14
openstackgerritAna Krivokapic proposed openstack/tripleo-ui master: Add IDs to Nodes page  https://review.openstack.org/48303914:15
*** janki has quit IRC14:17
akrivokajrist: sure14:18
jristthanks akrivoka !14:18
*** agurenko has quit IRC14:20
*** rbrady has quit IRC14:21
openstackgerritMerged openstack/tripleo-heat-templates master: Add 'ovn-controller' service  https://review.openstack.org/48349214:23
derekhWhen I being up a containerized overcloud, do I need to enable something to have the health checks?14:23
derekh*bring14:23
openstackgerritJiri Stransky proposed openstack/tripleo-common master: Create admin user for TripleO/Ansible use  https://review.openstack.org/48922514:24
*** agopi|away has joined #tripleo14:24
jistrflaper87: ^ that one should work. After manually executing create_admin_user and deploy_ssh_key, i got: http://paste.openstack.org/show/617022/14:26
*** agopi has quit IRC14:26
jistrcolonwq: fyi ^14:26
openstackgerritAlan Bishop proposed openstack/tripleo-common master: Use NovaVcpuPinSet when deriving HCI parameters  https://review.openstack.org/48923914:27
openstackgerritFlorian Fuchs proposed openstack/tripleo-validations master: Add a validation that checks for available update  https://review.openstack.org/47651714:28
openstackgerritHonza Pokorny proposed openstack/tripleo-ui master: Add logging documentation  https://review.openstack.org/48913414:28
jistrdprince: welcome back!14:29
dprincejistr: hi, thanks14:29
*** ffiore has quit IRC14:30
*** cshastri has quit IRC14:30
*** coolsvap has quit IRC14:31
*** openstackgerrit has quit IRC14:33
*** openstackgerrit has joined #tripleo14:34
openstackgerritJiri Stransky proposed openstack/tripleo-heat-templates master: Convert scenario001-multinode-containers job to ceph-ansible  https://review.openstack.org/47928814:34
EmilienMjaosorior: do you need FFE for https://blueprints.launchpad.net/tripleo/+spec/tls-via-certmonger ?14:34
jaosoriorEmilienM: not for that. Actually the basic services (and a bit more than that) have already been merged. There are some missing, but they're not defaults in the deployment. And could be handled as separate bugs (or feature bugs) per service.14:35
EmilienMjaosorior: ok so closing it14:35
EmilienMjaosorior: same q for https://blueprints.launchpad.net/tripleo/+spec/tls-via-certmonger-containers14:35
EmilienMdtantsur: do you need FFE for https://blueprints.launchpad.net/tripleo/+spec/ironic-inspector-composable-service ?14:36
*** ykarel has quit IRC14:36
*** rbrady has joined #tripleo14:36
jaosoriorEmilienM: the tls-via-certmonger-containers is not done, and might need an FFE (I'm asking around about it)14:36
EmilienMjaosorior: approved14:36
dtantsurEmilienM: I don't. dprince may want me to request one though :) but given the refactoring/rewriting we're doing to ironic-inspector in Queens, I think it's a bit too early.14:37
dprincedtantsur: you mean regarding this? https://review.openstack.org/#/c/457822/14:37
EmilienMdprince: hi :-) (and welcome back!) - if you want FFE on https://blueprints.launchpad.net/tripleo/+spec/ironic-inspector-composable-service - please move it to queens-1, I would approve it14:37
EmilienMdprince: s/queens-1/pike-rc1/14:38
dtantsurdprince: yep14:38
dprincedtantsur: would be nice to have it in I think, even as tech preview14:38
dprincedtantsur: or beta, experimental14:38
EmilienMok moving it14:38
EmilienM(rc1)14:38
dtantsurI'm sure I don't have time for it in Pike, and it may break in Queens.. otherwise, whatever :)14:38
dprinceEmilienM: thanks14:38
EmilienMcool14:39
dprinceEmilienM: I had 2 patches in from of that re-containers refactoring14:39
dprinceEmilienM: would be nice to get those in too: https://review.openstack.org/#/c/442755/11, https://review.openstack.org/#/c/442716/1314:39
dprinceEmilienM: but those could come later if needed as well. Just nice to have in that they shore up the containers interfaces a bit14:39
EmilienMmichapma: moving https://blueprints.launchpad.net/tripleo/+spec/quickstart-opnfv to RC1 as it wouldn't break anything since we're working on an experimental job14:39
EmilienMdprince: ok i'll review them today14:40
michapmaEmilienM: no worries. I'll keep working on the CI job this week, but the other patches were already merged so we'regood14:41
*** panda has quit IRC14:41
EmilienMmichapma: I only trust ci job colors ;-)14:42
EmilienMbogdando: should we move https://blueprints.launchpad.net/tripleo/+spec/containerized-services-logs to queens-1? or request for FFE for pike?14:42
EmilienMdtantsur: need FFE on https://blueprints.launchpad.net/tripleo/+spec/node-discovery-by-range ?14:43
openstackgerritFlavio Percoco proposed openstack/tripleo-heat-templates master: WIP: Deploy kubernetes using TripleO on the overcloud  https://review.openstack.org/47175914:43
flaper87jistr: u rock! ^14:43
bogdandoEmilienM: yes, let's move it to Q114:43
*** funzo has joined #tripleo14:43
dtantsurEmilienM: yep. the actual code is there, we need the UI part https://review.openstack.org/#/c/488526/14:43
dtantsuralso some docs need 2nd +214:44
openstackgerritEmilien Macchi proposed openstack/os-net-config stable/ocata: Fix --noop being ignored for dhclient execution  https://review.openstack.org/48888214:45
openstackgerritEmilien Macchi proposed openstack/os-net-config stable/newton: Fix --noop being ignored for dhclient execution  https://review.openstack.org/48888414:45
*** mcornea has quit IRC14:46
*** mcornea has joined #tripleo14:46
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Render VIPs dynamically based on network_data.yaml  https://review.openstack.org/48626014:46
EmilienMbogdando: ack14:47
EmilienMdtantsur: approved14:47
dtantsurthanks!14:47
*** funzo has quit IRC14:48
EmilienMhonza: need FFE for https://blueprints.launchpad.net/tripleo/+spec/websocket-logging ?14:49
EmilienMatoth: need FFE for https://blueprints.launchpad.net/tripleo/+spec/lbaasv2-service-integration ?14:49
honzajrist: I assume we need FFE for logging?14:50
atothEmilienM, FFE?14:50
atothEmilienM,  I'm assuming the end FE is For Exception but what is the first F?14:51
dtantsurEmilienM: https://review.openstack.org/#/c/487175/ is a missing bit of an older bp, and is at the border of a feature.. dunno how to treat it (reported a bug so far)14:51
jristhonza: we've asked heh14:51
dtantsuratoth: feature freeze exception14:51
jristhonza: or is this for m314:51
jristhonza: yes then, upstream for sure14:51
atothdtantsur, ah, thanks14:51
honzajrist: thanks, doubting myself14:51
EmilienMdtantsur: bug works14:51
atothEmilienM, How do we go about that?14:51
jristEmilienM: ffe request for https://blueprints.launchpad.net/tripleo/+spec/websocket-logging - all pieces are up for review, almost +214:52
dtantsurk thanks14:52
honzaEmilienM: yes, please for websocket-logging (patches are up, needs reviews)14:52
*** limao has quit IRC14:52
jristbeatcha14:52
EmilienMjrist: approved14:52
jristwoot14:52
EmilienMatoth: ask for it :)14:52
jristEmilienM: as you can see I was wrangling for reviews earlier14:52
atothEmilienM, and I was actually about to ask what we were going to do about that one :-)14:52
jrist:)14:52
EmilienMatoth: and give details on what needs to be done14:52
honza<yiss owl>14:52
*** psachin has quit IRC14:52
EmilienMatoth: so we evaluate if it's doable14:52
atothEmilienM, ask who? How?14:52
honzajrist: I missed your wrangling, thanks!14:53
atothEmilienM, pulling out my old tag line "I'm new to all this" :-)14:53
jristhonza: my pleasure.14:53
jristhonza: thanks for being on top of your patches!14:53
honzajrist: haha, more like near the top14:53
jrist:)14:53
*** limao has joined #tripleo14:54
EmilienMatoth: what needs to be done to consider the blueprint done? just ci tests?14:55
EmilienMdprince: +2 on https://review.openstack.org/#/c/442716/ - you're co-author, you can +1 maybe or approve if you feel really confortable with this one14:57
*** jaganathan has quit IRC14:57
dprinceEmilienM: ack, thanks14:58
atothEmilienM, the multinode ci test is not working when the lbaas stuff is included, so in a way yes just ci test work but that could easily find it's way back into the core files that were developed. Still trying to understand the flow of how all the puppet gets called and why the lbaas puppet stuff is only partially followed14:58
*** yamahata has quit IRC14:58
*** yamahata has joined #tripleo14:58
atothEmilienM, may take one of you tripleo rockstars an hour to figure out but I'm still just a rock at this stage of the game :-)14:59
EmilienMatoth: I'll try to look today15:00
atothEmilienM, beagles has been helping with it a bit earlier last week, maybe he can add some insight into the wonkiness as well15:01
atothEmilienM, to validate or give a differing opionion15:02
atothEmilienM, Still working it it though :-)15:02
*** rcernin has quit IRC15:03
*** pcaruana has quit IRC15:04
*** rwsu has quit IRC15:06
*** dprince has quit IRC15:06
EmilienMbnemec: I'm wondering what to do with https://blueprints.launchpad.net/tripleo/+spec/support-python-3515:07
EmilienMbnemec: if we consider it done or partially done at this stage15:08
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: Consolidate puppet/docker deployments with one deploy steps workflow  https://review.openstack.org/48329315:08
*** iranzo has joined #tripleo15:09
*** iranzo has quit IRC15:09
*** iranzo has joined #tripleo15:09
*** gbarros has joined #tripleo15:11
*** pdeore has quit IRC15:14
jaosoriortherve: are you around?15:16
thervejaosorior, Yep15:16
jaosoriortherve: do you have time to help me debug some heat/yaql issue I'm having?15:16
thervejaosorior, I have a few minutes :)15:16
*** limao has quit IRC15:17
thervejaosorior, What do you see?15:18
*** masco_ has quit IRC15:19
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Add missing metadata_settings from docker services  https://review.openstack.org/48925515:23
openstackgerritMerged openstack/puppet-tripleo master: Prevent haproxy to run iptables during docker-puppet configuration  https://review.openstack.org/48614115:26
bnemecEmilienM: I think we have py3 jobs running on all our Python repos at this point.15:26
openstackgerritMerged openstack/tripleo-heat-templates master: Fix creation of iptables rules for non-HA containerized HAproxy  https://review.openstack.org/47418315:26
*** mcornea has quit IRC15:27
bnemecI believe we had discussed trying to make sure we have decent unit test coverage as well, but I don't know that anyone has really looked at that.15:27
bnemecI added coverage jobs to a few of the repos, but I haven't really looked at them. :-/15:27
EmilienMbnemec: ok15:27
*** panda has joined #tripleo15:29
openstackgerritMichele Baldessari proposed openstack/python-tripleoclient master: Skip empty resource_registry sections  https://review.openstack.org/48925815:30
*** iranzo has quit IRC15:36
*** dsariel has quit IRC15:36
*** jlinkes has quit IRC15:36
*** nyechiel has quit IRC15:38
*** yprokule has quit IRC15:40
*** ratailor has quit IRC15:44
*** funzo has joined #tripleo15:53
flaper87EmilienM: jistr hey, going to be on PTO for the rest of the week. In case you need me for some of the k8s stuff15:55
EmilienMflaper87: you're always on PTO15:55
flaper87jistr: if you have spare time/brain-power and you want to hack on the k8s patch, feel free to do it15:55
jistrflaper87: alright, enjoy!15:55
flaper87EmilienM: I know, I know. I just enjoy saying it out loud :D15:56
EmilienMflaper87: how is your WIP patch going to deploy k8s?15:57
flaper87EmilienM: it's almost there. jistr just hacked a way to create an admin-user on the overcloud, which is what it was failing on last Friday15:57
EmilienMok, I see now15:57
flaper87I think we should see a full run now or at least it should fail on some k8s specific step15:57
jistri hope so15:58
*** jmelvin has quit IRC15:58
jistrsame for the ceph-ansible patch15:58
jistrCI is in progress there too15:58
openstackgerritGael Chamoulaud proposed openstack/tripleo-quickstart-extras master: Add pre-deployment negative tests for validations  https://review.openstack.org/48849515:58
flaper87jistr: http://logs.openstack.org/59/471759/51/experimental/gate-tripleo-ci-centos-7-scenario006-multinode-oooq-nv/5968d83/logs/undercloud/var/log/mistral/executor.log.txt.gz16:00
flaper87:(16:00
jistrarrrr16:01
*** egonzalez has quit IRC16:03
*** jfrancoa has quit IRC16:07
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Enable encryption of pacemaker traffic by default  https://review.openstack.org/48912916:08
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Handle using encryption by default for pacemaker in upgrade  https://review.openstack.org/48913216:11
jistrflaper87: i can see it executing here http://logs.openstack.org/59/471759/51/experimental/gate-tripleo-ci-centos-7-scenario006-multinode-oooq-nv/5968d83/logs/undercloud/var/log/mistral/engine.log.txt.gz#_2017-07-31_15_46_32_21816:12
jistrflaper87: but no actual effect on the overcloud node it seems16:12
openstackgerritHonza Pokorny proposed openstack/tripleo-common master: Add GUI logging workflows  https://review.openstack.org/46919616:13
jistrah i see16:13
jistr[expression='<% task(get_servers).result._info %>', result: []]16:13
jistrthat's not good16:13
jistrit's yet another difference between split-stack vs. Nova-provisioned envs probably16:14
jistrright... because get_servers consults Nova about the overcloud servers16:15
jistrthat's never going to work with multinode CI16:15
* jistr sigh16:15
*** cylopez has quit IRC16:17
*** dsneddon has joined #tripleo16:18
*** achadha has joined #tripleo16:26
jistrEmilienM, flaper87: i'll keep looking tomorrow and will also ask dprince as i think he implemented the Mistral -> os-collect-config direct transport for software deployments, for me it's now too foreign to judge how deep in trouble we are with this. But on first sight it looks like there might be much more work needed to get this going than we thought.16:26
*** achadha has quit IRC16:26
*** achadha has joined #tripleo16:27
jistre.g. all this expects that we talk to Nova instances https://github.com/openstack/tripleo-common/blob/f099e3c65c9c6cbfaec8eb1b4a8ee78f084305f3/workbooks/deployment.yaml#L8-L10216:27
slaglewhy not "just use ansible". instead of jumping through all these hoops16:29
*** oidgar has quit IRC16:29
slaglefor multinode CI, you already know a user and ssh key, that's a prerequisite16:29
slagleto anything ever working16:29
EmilienMslagle: yeah, that's what we've discussed earlier today with flaper87 and he told me that would be the final goal (run pure ansible)16:30
EmilienMslagle: I think he just wanted to re-use what was done for ceph-ansible16:30
EmilienMslagle: but imho we could go pure ansible directly, maybe give some help to make it happen16:30
*** rbrady has quit IRC16:31
slaglewell, that's the fundamental *advantage* to split-stack/pre-provisioned nodes. that you can just ssh without having to rely on Heat's deployment mechanism16:31
slagleso i don't see working around that advantage16:31
jistrslagle: ok we'll need to create it in a way that works for both Nova and split stack16:31
jistrslagle: my initial idea was just a new composable service that would create that tripleo-admin ssh user16:31
jistrthat should work on both16:31
*** dougbtv_ has joined #tripleo16:32
*** jmelvin has joined #tripleo16:32
slagleEmilienM: i don't understand what help is needed. you already have ssh access (as sudo, if need be)16:32
*** jmelvin has quit IRC16:32
jistrhm but we'd still need to distribute the authorized key that mistral generated16:32
slagleEmilienM: you don't need to write a playbook (or anything) to eanble that16:32
* jistr looks at toci16:33
slaglejistr: that makes sense. i just wouldn't get hung up on complicating the split-stack case, due to the existing complexity around Nova/Heat16:33
*** jmelvin has joined #tripleo16:33
EmilienMslagle: yeah I know but I think flaper87 was just looking for an existing way of doing this (and maybe didn't know about the split stack)16:34
jistrslagle: right, right now i think what you suggest is probably our best way forward anyway, even if it means we'll have to differ between Nova vs. split stack16:34
*** ffiore has joined #tripleo16:36
slaglejistr: ok. otherwise you'd have to modify that tripleo-common workflow to get the deployed-server resource Id's from Heat, which would be equivalent of the nova.servers_list action16:36
slagleit's certainly do-able (may already be there in a stack output). i just don't think anyone using split-stack would want to do it that way16:37
jistrslagle: ack. I thought we'd have to somehow traverse the Heat stack tree for it. If it's in outputs than that might be a sane way forward too.16:37
slaglejistr: you could possible get it from ServerIdMap or ServerOsCollectConfigData16:39
slagleServerIdMap might end up being the id of the nested stack though16:39
*** dprince has joined #tripleo16:40
*** ramishra has quit IRC16:40
jistrslagle: can we get that before the overcloud stack is deployed? Probably not, right? I'm asking because another issue is that we need it during overcloud stack creation, not after.16:41
*** cylopez has joined #tripleo16:43
*** cylopez has quit IRC16:43
*** rbrady has joined #tripleo16:44
*** stendulker has joined #tripleo16:45
openstackgerritMerged openstack/puppet-tripleo stable/ocata: Fix selinux unit tests  https://review.openstack.org/48851416:45
*** nyechiel has joined #tripleo16:46
openstackgerritDamien Ciabrini proposed openstack/tripleo-heat-templates master: MariaDB: create clustercheck user at container bootstrap  https://review.openstack.org/48927716:47
*** jcoufal has quit IRC16:48
*** gvrangan has joined #tripleo16:49
openstackgerritDamien Ciabrini proposed openstack/puppet-tripleo master: Use clustercheck credentials to poll galera state in container  https://review.openstack.org/48927916:52
*** itlinux_ has joined #tripleo16:52
*** derekh has quit IRC16:53
itlinux_good morning all!16:55
openstackgerritRajini Karthik proposed openstack/puppet-tripleo master: Support for Dell EMC Isilon Manila Driver  https://review.openstack.org/48888916:57
slaglejistr: it'd be available at some point during overcloud stack creation. as output from one of the already created nested stacks16:59
openstackgerritRajini Karthik proposed openstack/tripleo-heat-templates master: Add support for Dell EMC Isilon Manila  backend  https://review.openstack.org/48889616:59
openstackgerritRajini Karthik proposed openstack/tripleo-heat-templates master: Add support for Dell EMC Isilon Manila  backend  https://review.openstack.org/48889617:00
slaglejistr: what you probably want to do is allow for an abstraction where the ssh creds can be specified per node into Heat17:00
*** achadha_ has joined #tripleo17:01
openstackgerritRajini Karthik proposed openstack/tripleo-heat-templates master: Add support for Dell EMC Isilon Manila  backend  https://review.openstack.org/48889617:02
slaglejistr: so for the non split-stack case, they get added to the node via a Deployment, then we know what they are. for split-stack case, we just tell Heat what they are17:02
slaglejistr: that's one option anyway17:03
*** yolanda has quit IRC17:03
*** jcoufal has joined #tripleo17:03
*** achadha has quit IRC17:04
*** achadha_ has quit IRC17:05
*** ffiore has quit IRC17:06
*** Goneri has joined #tripleo17:10
vkmchey all, I'm trying to debug why manila containers are failing to start... there is nothing relevant on 'docker logs manila_*' output... is there some other place I should be looking?17:11
dprinceEmilienM: I think we have to do these... otherwise it would be considered a regression in Pike containers https://bugs.launchpad.net/tripleo/+bug/170125417:13
openstackLaunchpad bug 1701254 in tripleo "Containerize crond" [Medium,In progress] - Assigned to Dan Prince (dan-prince)17:13
EmilienMdprince: yes, I agree17:13
dprinceEmilienM: okay, if I move it back to pike rc1?17:13
EmilienMdprince: please17:13
EmilienMdprince: my script moved it to queens-117:13
EmilienMdprince: but /me happy if folks take over and move it to pike-rc1 again17:14
*** achadha has joined #tripleo17:14
*** bogdando has quit IRC17:15
*** flepied has quit IRC17:17
openstackgerritMichele Baldessari proposed openstack/python-tripleoclient master: Skip empty resource_registry sections  https://review.openstack.org/48925817:18
*** achadha has quit IRC17:18
*** salmankhan has quit IRC17:22
*** yamahata has quit IRC17:23
*** salmankhan has joined #tripleo17:23
*** itlinux_ has quit IRC17:24
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Support deploying OVN as container services  https://review.openstack.org/46886017:26
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: [WIP] Support OVN DBs docker HA using pacemaker bundle  https://review.openstack.org/48437617:26
bandinivkmc: are those mainla containers managed/started by pacemaker or via systemd? (/var/log/pacemaker/bundles in the first case. /var/log/containers in the second case)17:28
vkmcbandini, systemd17:29
bandinivkmc: if /var/log/containers/manila* is empty then you probably want to check journalctl -u docker17:29
EmilienMnumans: just some rebases and reviews ^17:29
*** katkapilatova has left #tripleo17:30
vkmcbandini, thanks17:31
*** tosky has quit IRC17:32
saibnemec: do u know if there are any restrctions when naming a composable role? As in, can it start with a number?17:32
*** salmankhan has quit IRC17:32
bnemecsai: I'm not aware of any such restrictions.  I'm pretty sure I've seen composable roles with numbers in the name, and I don't see any reason they wouldn't work as the first character either.17:34
saibnemec: thanks!17:35
saiwq!17:35
saisorry wrong window17:35
*** salmankhan has joined #tripleo17:40
*** akrivoka has quit IRC17:43
*** amoralej is now known as amoralej|off17:44
*** hewbrocca is now known as hewbrocca_afk17:48
*** achadha has joined #tripleo17:50
*** yolanda has joined #tripleo17:55
*** tosky has joined #tripleo17:56
*** tosky has joined #tripleo17:57
*** tosky has quit IRC17:58
*** yamahata has joined #tripleo17:58
*** tosky has joined #tripleo17:59
*** yolanda has quit IRC18:00
mwhahahawhere do we keep the overcloud images that we use for CI?18:04
* mwhahaha tries to find the link18:04
*** dtantsur is now known as dtantsur|afk18:05
mwhahahanevermind i found it18:05
*** itlinux has joined #tripleo18:06
openstackgerritDan Sneddon proposed openstack/tripleo-heat-templates master: Render VIPs dynamically based on network_data.yaml  https://review.openstack.org/48626018:09
*** stendulker has quit IRC18:10
*** spredzy has joined #tripleo18:14
*** rbrady has quit IRC18:20
*** rbowen has quit IRC18:24
*** rwsu has joined #tripleo18:25
atothbeagles, got a second ?18:25
atothbeagles, just a quick file location question ;-)18:25
atothor EmilienM got a sec "18:28
beaglesatoth, what's up?18:28
atothbeagles, where would the puppet-tripleo files end up in the deployment tree? I'm looking for manifests/profile/base/neutron/lbaas.pp to play around with the step setting18:30
beaglesatoth, do you mean where they are in the overcloud image?18:30
atothbeagles, and I just can't seem to find it18:31
atothbeagles, or on the undercloud if that's where they live, but yes18:31
atothbeagles, by the way, loving this guestmount stuff :-)18:32
beaglesatoth, you want the one in the overcloud image - it's in /usr/share/openstack-puppet/modules18:33
beaglesatoth, or (wherever you mounted the guest image)/usr/share/openstack-puppet/modules/tripleo18:33
*** yolanda has joined #tripleo18:34
atothbeagles, ah thanks, I could see past the neutron dir there :-)18:34
*** yolanda has quit IRC18:34
*** yolanda has joined #tripleo18:34
openstackgerritMerged openstack/tripleo-repos master: Update includepkgs  https://review.openstack.org/46641718:35
*** rbrady has joined #tripleo18:35
*** rbrady has joined #tripleo18:35
atothbeagles, actually that was on the undercloud, there is no /usr/share/openstack-puppet on my overcloud image18:37
*** yolanda has quit IRC18:38
beaglesatoth, mmm18:39
*** rbowen has joined #tripleo18:39
atothbeagles, there's a usr/share/puppet/modules/ but that's empty18:40
openstackgerritNuman Siddique proposed openstack/puppet-tripleo master: Add OVN DBs bundle support for pacemaker HA  https://review.openstack.org/48437318:43
*** panda has quit IRC18:43
*** karthiks has quit IRC18:43
beaglesatoth, weird.. must have changed18:43
beaglesatoth, look at opt/stack/puppet-modules18:43
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart master: Implement scenario008 (opnfv)  https://review.openstack.org/48673118:44
beaglesoh18:44
beaglesatoth, duh18:44
*** panda has joined #tripleo18:44
beaglesatoth, if puppet modules from packages they'll be in one place, source anotehr18:44
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart master: Implement scenario008 (opnfv)  https://review.openstack.org/48673118:44
atothbeagles, fun18:45
beaglesatoth, /usr/share/openstack-puppet from packages, /opt/stack/puppet-modules if DIB_INSTALLTYPE_puppet_modules=source18:45
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart master: Implement scenario008 (opnfv)  https://review.openstack.org/48673118:45
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Add OPNFV scenario environment  https://review.openstack.org/48690518:45
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Add OPNFV scenario environment  https://review.openstack.org/48690518:45
trozetradez: hi18:46
EmilienMmichapma: ^ rebased and cleanup depends-on ;)18:46
atothbeagles,18:47
*** jcoufal has quit IRC18:47
atothbeagles, thanks, big help18:47
beaglesatoth, np18:47
*** jcoufal has joined #tripleo18:50
*** gvrangan has quit IRC18:50
openstackgerritNuman Siddique proposed openstack/tripleo-heat-templates master: DO NOT REVIEW: TESTING ONLY  https://review.openstack.org/48909718:53
michapmaEmilienM: cheers18:53
numansEmilienM, thanks for the rebases and reviews18:53
EmilienMcool18:54
*** catintheroof has quit IRC18:59
*** abishop has quit IRC18:59
*** catintheroof has joined #tripleo19:00
*** catintheroof has quit IRC19:00
*** catintheroof has joined #tripleo19:01
*** rbrady has quit IRC19:03
openstackgerritMerged openstack/os-net-config stable/newton: Fix --noop being ignored for dhclient execution  https://review.openstack.org/48888419:03
openstackgerritMerged openstack/os-net-config stable/ocata: Fix --noop being ignored for dhclient execution  https://review.openstack.org/48888219:03
*** dhill_ has quit IRC19:05
*** dhill__ has joined #tripleo19:05
openstackgerritDavid Hill proposed openstack/diskimage-builder master: Clear /etc/machine-id to avoid duplicate machine-ids  https://review.openstack.org/48901319:14
openstackgerritDavid Hill proposed openstack/diskimage-builder master: Clear /etc/machine-id to avoid duplicate machine-ids  https://review.openstack.org/48901319:20
openstackgerritDavid Hill proposed openstack/diskimage-builder master: Clear /etc/machine-id to avoid duplicate machine-ids  https://review.openstack.org/48901319:23
*** salmankhan has quit IRC19:26
openstackgerritMerged openstack/puppet-tripleo master: Enable TLS for the HAProxy stats interface  https://review.openstack.org/47889419:32
openstackgerritMerged openstack/tripleo-heat-templates master: Enable Dpdk after rebooting with Hugepages for OvS2.7  https://review.openstack.org/48384619:32
openstackgerritMerged openstack/tripleo-docs master: Document the containers prepare command  https://review.openstack.org/47595819:33
*** milan has quit IRC19:34
atothexit'19:40
*** atoth has quit IRC19:41
*** jcoufal has quit IRC19:47
*** pchavva has quit IRC19:55
pandahttps://review.openstack.org/489224 passed checks19:56
*** sbrzozow has quit IRC19:56
*** ebarrera has joined #tripleo19:57
mwhahahafun with epel19:59
pandamwhahaha: thanks.20:01
*** ebarrera_ has quit IRC20:07
*** ebarrera_ has joined #tripleo20:07
*** florianf has quit IRC20:10
*** achadha has quit IRC20:11
*** achadha has joined #tripleo20:12
*** artom_ has joined #tripleo20:17
*** artom has quit IRC20:18
*** jkilpatr has quit IRC20:28
*** liverpooler has quit IRC20:29
*** jmelvin has quit IRC20:35
openstackgerritDan Sneddon proposed openstack/tripleo-heat-templates master: Render VIPs dynamically based on network_data.yaml  https://review.openstack.org/48626020:36
*** rhallisey has left #tripleo20:39
radeztrozet: hey, sry missed ur bping earlier, what's up?20:45
trozetradez: I was wondering if you could help EmilienM and michapma get ODL into tripleo CI?  There are some patches out there: https://review.openstack.org/#/c/486731/20:46
trozetand https://review.openstack.org/#/c/486905/20:46
EmilienMtrozet: we have made really good progress20:47
EmilienMmichapma: see the failure now : http://logs.openstack.org/05/486905/7/experimental/gate-tripleo-ci-centos-7-scenario008-multinode-oooq-nv/00846a7/logs/undercloud/home/jenkins/overcloud_deploy.log.txt.gz#_2017-07-31_19_39_0420:47
EmilienMlook we even have the repo http://logs.openstack.org/05/486905/7/experimental/gate-tripleo-ci-centos-7-scenario008-multinode-oooq-nv/00846a7/logs/subnode-2/etc/yum.repos.d/opendaylight.repo.txt.gz20:48
radeztrozet: I could help a bit not if that could help, tomorrow is booked and i'm ooo wed-fri20:48
EmilienMnow we have this error: Evaluation Error: The title 'neutron_plugin_ml2' has already been used in this resource expression at /etc/puppet/modules/tripleo/manifests/firewall.pp:105:20:48
trozetEmilienM: yeah i think this is the same error michapma pointed me to last week20:49
trozetradez: maybe when you get back next week then?  I'll be ooo thurs/fri also20:49
EmilienMtrozet: do we have a patch for that?20:49
EmilienMI'm happy our CI catches it now20:50
*** ansmith_ has quit IRC20:50
*** ansmith has quit IRC20:50
radeztrozet: yea sure, I'll put it on my list to follow up with when I get back20:50
trozetEmilienM: I'm not sure what that error is about...but when I looked at the deploy command it was not including the neutron-opendaylight env file...looking again in the logs for the deploy cmd now20:51
EmilienMtrozet: https://review.openstack.org/#/c/486905/7/ci/environments/scenario008-multinode.yaml20:52
EmilienMthat's what the CI job should deploy20:52
openstackgerritRajini Karthik proposed openstack/tripleo-heat-templates master: Add support for Dell EMC VMAX ISCSI Backend  https://review.openstack.org/48939320:52
EmilienMtrozet: I think I know why20:53
trozetEmilienM: but you need the ODL env file here: http://logs.openstack.org/05/486905/7/experimental/gate-tripleo-ci-centos-7-scenario008-multinode-oooq-nv/00846a7/logs/undercloud/home/jenkins/overcloud_deploy.log.txt.gz#_2017-07-31_19_24_2620:53
EmilienMtrozet: yes, I'll fix it. Show me which file though, please20:54
trozetEmilienM: https://github.com/openstack/tripleo-heat-templates/blob/master/environments/neutron-opendaylight.yaml20:54
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Add OPNFV scenario environment  https://review.openstack.org/48690520:57
EmilienMtrozet: let's see ^ (testing with a CI env now)20:57
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Add OPNFV scenario environment  https://review.openstack.org/48690520:57
*** dprince has quit IRC20:58
trozetEmilienM: that error looks like neutron_plugin_ml2 was handed multiple times to https://github.com/openstack/puppet-tripleo/blob/master/manifests/firewall.pp#L10520:58
trozetEmilienM: i've never seen that before20:58
EmilienMtrozet: did you test tripleo master before?20:59
trozetEmilienM: not for about month20:59
*** jtomasek has quit IRC21:00
EmilienMtrozet: ouch21:00
openstackgerritDan Prince proposed openstack/tripleo-heat-templates master: Drop step_config as top level docker requirement  https://review.openstack.org/44271621:01
openstackgerritDan Prince proposed openstack/tripleo-heat-templates master: docker: Add unit tests on service_name  https://review.openstack.org/44275521:01
openstackgerritDan Prince proposed openstack/tripleo-heat-templates master: Add docker templates to configure Ironic inspector  https://review.openstack.org/45782221:01
trozetEmilienM: where are the overcloud logs?21:01
trozetEmilienM: like the hieradata for each overcloud node21:01
EmilienMtrozet: not in ci logs I think21:02
trozetEmilienM: wanted to see if there are duplicate service_names21:04
trozetEmilienM: the odl one has it's own name puppet/services/neutron-plugin-ml2-odl.yaml:      service_name: neutron_plugin_ml2_odl21:04
trozetEmilienM: not sure how there are duplicates happening...but itzikb tested master today and it deployed for him with ODL21:05
*** agopi|lunch has joined #tripleo21:06
*** jmelvin has joined #tripleo21:07
*** noslzzp has quit IRC21:08
*** lblanchard has quit IRC21:08
*** agopi|away has quit IRC21:09
*** noslzzp has joined #tripleo21:10
*** agopi has joined #tripleo21:13
*** agopi|lunch has quit IRC21:15
*** catintheroof has quit IRC21:17
*** agopi has quit IRC21:18
stevebakerEmilienM: hey, do you know if anyone is looking into the broken gate-tripleo-buildimage-overcloud-full-centos-7 ?21:26
EmilienMstevebaker: not afik21:26
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: Add support for update_tasks  https://review.openstack.org/48610421:26
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: WIP: Adds pacemaker update_tasks for Pike minor update workflow  https://review.openstack.org/48656721:26
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: Add RoleConfig output  https://review.openstack.org/48573121:26
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: Move deploy-steps-playbook to deploy-steps-tasks  https://review.openstack.org/48568621:26
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: Consolidate puppet/docker deployments with one deploy steps workflow  https://review.openstack.org/48329321:26
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: Default docker_puppet_debug to false  https://review.openstack.org/48610321:26
*** morazi has quit IRC21:27
*** Goneri has quit IRC21:27
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: WIP: Adds pacemaker update_tasks for Pike minor update workflow  https://review.openstack.org/48656721:27
*** jkilpatr has joined #tripleo21:34
*** yolanda has joined #tripleo21:34
*** noslzzp has quit IRC21:35
*** yolanda has quit IRC21:41
*** agopi has joined #tripleo21:41
openstackgerritDan Prince proposed openstack/tripleo-heat-templates master: Fix keystone, cinder, heat-api cron containers  https://review.openstack.org/48941922:01
openstackgerritBen Nemec proposed openstack/tripleo-docs master: Stop services only on upgrade to Ocata or later  https://review.openstack.org/48942022:02
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: WIP: Adds pacemaker update_tasks for Pike minor update workflow  https://review.openstack.org/48656722:05
*** itlinux has quit IRC22:05
*** bfournie has quit IRC22:06
*** cdearborn has quit IRC22:09
*** jmelvin has quit IRC22:11
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: WIP: Adds pacemaker update_tasks for Pike minor update workflow  https://review.openstack.org/48656722:11
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: WIP: Adds pacemaker update_tasks for Pike minor update workflow  https://review.openstack.org/48656722:17
openstackgerritSteve Baker proposed openstack/diskimage-builder master: Revert "Use SELinuxfs to check selinux status"  https://review.openstack.org/48942322:22
stevebakerianw: hey, could you take a look at ^^ and https://bugs.launchpad.net/diskimage-builder/+bug/1707788 ?22:22
openstackLaunchpad bug 1707788 in tripleo "gate-tripleo-buildimage-overcloud-full-centos-7 is broken on missing semanage" [Critical,Triaged] - Assigned to Steve Baker (steve-stevebaker)22:22
*** nyechiel has quit IRC22:23
*** ebarrera has quit IRC22:25
*** ebarrera_ has quit IRC22:25
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: WIP: Adds pacemaker update_tasks for Pike minor update workflow  https://review.openstack.org/48656722:30
*** noslzzp has joined #tripleo22:31
EmilienMstevebaker: the patch from amoralej is a fix to build images with quickstart22:37
EmilienMstevebaker: commented22:37
openstackgerritRajini Karthik proposed openstack/tripleo-heat-templates master: Add support for Dell EMC VMAX ISCSI Backend  https://review.openstack.org/48939322:38
openstackgerritMerged openstack/tripleo-docs master: Document node auto-enrollment  https://review.openstack.org/47751422:38
openstackgerritMerged openstack/tripleo-docs master: Document node auto-discovery via scanning a BMC range  https://review.openstack.org/47690922:39
stevebakerEmilienM: hmm, which amoralej|off change?22:40
*** dhill__ is now known as dhill_22:40
openstackgerritRajini Karthik proposed openstack/tripleo-heat-templates master: Add support for Dell EMC VMAX ISCSI Backend  https://review.openstack.org/48939322:41
EmilienMstevebaker: the one you're reverting :D22:42
*** panda has quit IRC22:43
stevebakerEmilienM: oh right. I don't think semanage is installed at all. Before there was a test for semange first, now it is called on all selinux enabled environments22:44
*** panda has joined #tripleo22:44
stevebakerEmilienM: so I could replace the revert with a fix to install policycoreutils-python22:45
*** myoung is now known as myoung|afk22:53
*** cnf has left #tripleo23:02
openstackgerritDan Sneddon proposed openstack/tripleo-heat-templates master: Render VIPs dynamically based on network_data.yaml  https://review.openstack.org/48626023:03
dsneddonEmilienM, If you are there, I have a patch close to merging that implements https://bugs.launchpad.net/tripleo/+bug/166710423:04
openstackLaunchpad bug 1667104 in tripleo "[RFE] Support Templated Creation of VIPs on Controller Role" [Low,In progress] - Assigned to Dan Sneddon (dsneddon)23:04
dsneddonhttps://review.openstack.org/#/c/48626023:04
*** thrash is now known as thrash|g0ne23:13
*** ckyriakidou has quit IRC23:17
ianwstevebaker: is semanage maybe not the right tool to enable the setfiles_mac_t?  maybe there's something else?23:20
stevebakerianw: there could be23:21
*** https_GK1wmSU has joined #tripleo23:22
*** https_GK1wmSU has left #tripleo23:22
*** catintheroof has joined #tripleo23:24
stevebakerianw: or we can just install it and be done with it. I bet its on base rhel but not centos23:24
*** noslzzp has quit IRC23:25
stevebakerianw: wait, cleanup runs in the host?23:27
ianwstevebaker: yes, this is running *outside* the chroot23:28
stevebakersorry, right23:28
ianwwhat changed recently was that f26, thing broke trying to "setfiles" inside the chroot23:29
ianwbecause the host kernel didn't have the right selinux policies23:29
ianwso now the intent is to check if we're in a selinux environment, and if so, grant ourselves permissions to set non-kernel approved roles, then run the setfiles in the chroot23:30
dtrainorare we having issues with https://buildlogs.centos.org again?  I found an old bug https://bugs.launchpad.net/puppet-ceph/+bug/1702964 that sounds a lot like what I'm running in to23:30
openstackLaunchpad bug 1702964 in puppet-swift "latest puppet expects catalog to contain resources to for requires and subscribes" [Medium,In progress] - Assigned to zhongshengping (chdzsp)23:30
stevebakerianw: using semanage seems to be the only documented way to add something to a permissive domain, but maybe you could just write out the policy module manually http://danwalsh.livejournal.com/24537.html23:34
ianwstevebaker: ok, so the reason it's in yum-minimal is just because of -> https://review.openstack.org/#/c/371834/ .  so probably just installing it in a common location is sensible, because clearly this is not the only thing that fails without it23:39
stevebakerianw: yep, no semanage or sepolicy23:40
*** catintheroof has quit IRC23:43
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Move selinux packages to redhat-common  https://review.openstack.org/48943423:53
ianwstevebaker: ^ so ... with that the built image should have semanage inside it, and thus should be able to then create further images?23:54
*** tosky has quit IRC23:56
*** achadha_ has joined #tripleo23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!