Wednesday, 2018-03-07

*** alee__ has quit IRC00:03
openstackgerritRonelle Landy proposed openstack-infra/tripleo-ci master: DNM: Tenant clean up script  https://review.openstack.org/54975900:12
*** mburned is now known as mburned_out00:16
*** mburned_out is now known as mburned00:17
*** artom has quit IRC00:23
*** artom has joined #tripleo00:23
*** mburned is now known as mburned_out00:25
*** mburned_out is now known as mburned00:25
*** dpawar has quit IRC00:26
slaglewhere are the overcloud logs for ovb?00:27
slaglehttps://logs.rdoproject.org/15/539315/8/openstack-check/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-master/Zd898c5e99a6b429fb2e13ccefb2a7867/00:27
*** mburned is now known as mburned_out00:33
*** mburned_out is now known as mburned00:34
*** dmacpher has quit IRC00:36
*** ipsecguy has quit IRC00:39
*** agopi has joined #tripleo00:44
*** ipsecguy has joined #tripleo00:51
*** mburned is now known as mburned_out00:54
*** mburned_out is now known as mburned00:55
*** dmacpher has joined #tripleo01:01
*** lblanchard has joined #tripleo01:09
*** itlinux has joined #tripleo01:10
*** agopi has quit IRC01:10
*** mburned is now known as mburned_out01:13
*** mburned_out is now known as mburned01:14
*** agopi has joined #tripleo01:15
openstackgerritJill Rouleau proposed openstack/tripleo-common master: Check mode support for Server Deployments  https://review.openstack.org/54906601:27
*** mburned is now known as mburned_out01:38
*** mburned_out is now known as mburned01:39
*** itlinux has quit IRC01:42
*** owalsh_ has joined #tripleo01:46
*** pkovar has joined #tripleo01:48
*** pkovar has quit IRC01:49
*** owalsh has quit IRC01:49
*** jlabarre has quit IRC01:50
*** owalsh_ has quit IRC01:51
*** agopi has quit IRC01:52
*** owalsh has joined #tripleo01:52
openstackgerritRonelle Landy proposed openstack-infra/tripleo-ci master: DNM: Tenant clean up script  https://review.openstack.org/54975901:52
openstackgerritJames Slagle proposed openstack-infra/tripleo-ci master: Collect ansible_dir for undercloud containers  https://review.openstack.org/55030401:52
openstackgerritJames Slagle proposed openstack/tripleo-heat-templates master: Consume RoleData config from config download files  https://review.openstack.org/54510201:54
openstackgerritJames Slagle proposed openstack/tripleo-heat-templates master: Support SshKnownHostsDeployment with config-download  https://review.openstack.org/53931501:54
openstackgerritJames Slagle proposed openstack/tripleo-heat-templates master: Add spacing for readability  https://review.openstack.org/53938201:54
*** owalsh has quit IRC01:57
openstackgerritMerged openstack/puppet-tripleo stable/ocata: Use rabbitmq ipv6 flag  https://review.openstack.org/53373801:59
openstackgerritMerged openstack/instack-undercloud stable/newton: Zuul: Remove project name  https://review.openstack.org/54382501:59
openstackgerritMerged openstack/tripleo-common master: Adds workflow to list deployment plans  https://review.openstack.org/54615401:59
openstackgerritMerged openstack/python-tripleoclient master: Change List Plans to call workflow  https://review.openstack.org/54630501:59
openstackgerritMerged openstack/python-tripleoclient stable/queens: Update UPPER_CONSTRAINTS_FILE for stable/queens  https://review.openstack.org/53905801:59
openstackgerritMerged openstack/tripleo-heat-templates stable/queens: Add a ComputeInstanceHA role  https://review.openstack.org/55015201:59
*** owalsh has joined #tripleo02:01
openstackgerritMerged openstack/tripleo-heat-templates stable/queens: Add support for libvirt VNC TLS  https://review.openstack.org/55009302:02
openstackgerritMerged openstack/instack-undercloud stable/queens: Enable automatic migration for classic drivers to hardware types  https://review.openstack.org/54999102:02
openstackgerritMerged openstack/python-tripleoclient stable/queens: Add major update implementation  https://review.openstack.org/55002302:02
*** mburned is now known as mburned_out02:03
*** mburned_out is now known as mburned02:03
*** itlinux has joined #tripleo02:21
*** rlandy has quit IRC02:25
*** liverpooler has joined #tripleo02:29
*** mburned is now known as mburned_out02:32
*** mburned_out is now known as mburned02:32
openstackgerritMerged openstack/python-tripleoclient stable/queens: Get message from websocket instead from zaqarclient directly  https://review.openstack.org/55002402:33
*** itlinux has quit IRC02:36
*** ramishra has joined #tripleo02:41
*** cdearborn_ has quit IRC02:42
*** gvrangan has joined #tripleo02:42
*** gvrangan has quit IRC02:46
*** alee__ has joined #tripleo02:46
*** liverpooler has quit IRC02:48
*** itlinux has joined #tripleo03:04
*** itlinux has quit IRC03:07
openstackgerritMerged openstack/python-tripleoclient stable/queens: Pass the queue_name to messaging_websocket function for update  https://review.openstack.org/55001603:07
openstackgerritMerged openstack/python-tripleoclient stable/queens: Inherit UpdateCommand class from overcloud DeployCommand class  https://review.openstack.org/55002603:07
openstackgerritMerged openstack/python-tripleoclient stable/queens: Add generic methods to upload files to plan  https://review.openstack.org/55003003:07
*** ihrachys_ has quit IRC03:09
*** ihrachys_ has joined #tripleo03:09
*** wolverineav has quit IRC03:23
*** anilvenkata has quit IRC03:30
*** skramaja has joined #tripleo03:35
*** psahoo has joined #tripleo03:38
*** wolverineav has joined #tripleo03:43
*** wolverineav has quit IRC03:48
*** lblanchard has quit IRC03:49
*** mburned is now known as mburned_out03:52
*** mburned_out is now known as mburned03:52
*** fragatina has quit IRC03:53
*** ramishra has quit IRC03:55
*** ramishra has joined #tripleo03:56
openstackgerritMerged openstack/tripleo-heat-templates stable/newton: Fix Heat condition for RHEL registration yum update  https://review.openstack.org/54614403:57
*** links has joined #tripleo03:59
*** tvignaud has quit IRC04:00
*** fragatina has joined #tripleo04:14
*** mburned is now known as mburned_out04:16
*** mburned_out is now known as mburned04:16
*** fragatina has quit IRC04:18
*** ihrachys__ has joined #tripleo04:23
*** ihrachys_ has quit IRC04:25
*** links has quit IRC04:25
*** links has joined #tripleo04:27
*** fragatina has joined #tripleo04:29
*** mburned is now known as mburned_out04:31
*** mburned_out is now known as mburned04:31
*** atoth has quit IRC04:33
*** fragatina has quit IRC04:33
*** gvrangan has joined #tripleo04:34
*** fragatina has joined #tripleo04:37
*** wolverineav has joined #tripleo04:40
*** psachin has joined #tripleo04:41
*** pgadiya has joined #tripleo04:41
*** wolverineav has quit IRC04:44
*** gvrangan has quit IRC04:45
*** mburned is now known as mburned_out04:46
*** mburned_out is now known as mburned04:46
*** wolverineav has joined #tripleo04:46
*** masco has joined #tripleo04:47
*** radeks has joined #tripleo04:47
*** gvrangan has joined #tripleo04:51
*** wolverineav has quit IRC04:51
*** mburned is now known as mburned_out04:55
*** mburned_out is now known as mburned04:56
*** ihrachys__ has quit IRC04:56
openstackgerritRadoslaw Smigielski proposed openstack/instack-undercloud stable/pike: Increase size of Heat max_template_size  https://review.openstack.org/54880705:00
*** pdeore has joined #tripleo05:02
*** fragatina has quit IRC05:03
*** gvrangan has quit IRC05:05
*** fragatina has joined #tripleo05:06
*** fragatina has quit IRC05:06
*** fragatina has joined #tripleo05:10
*** udesale has joined #tripleo05:10
*** fragatin_ has joined #tripleo05:11
*** fragatina has quit IRC05:14
*** alee__ has quit IRC05:15
*** alee has joined #tripleo05:15
openstackgerritRadoslaw Smigielski proposed openstack/instack-undercloud stable/queens: Increase size of Heat max_template_size  https://review.openstack.org/55033205:16
*** jaosorior has joined #tripleo05:18
*** dpawar has joined #tripleo05:19
*** mburned is now known as mburned_out05:24
*** mburned_out is now known as mburned05:24
openstackgerritRadoslaw Smigielski proposed openstack/tripleo-heat-templates stable/queens: Increase size of Heat HeatMaxJsonBodySize  https://review.openstack.org/55033305:27
*** ratailor has joined #tripleo05:34
openstackgerritzenghui.shi proposed openstack/tripleo-heat-templates master: Set name property on the Deployment resources  https://review.openstack.org/55033405:34
*** mdnadeem has joined #tripleo05:47
*** zshi_ is now known as zshi05:49
*** ykarel has joined #tripleo05:49
*** sanjayu has quit IRC05:54
*** janki has joined #tripleo05:55
*** Goneri has quit IRC05:56
*** cshastri has joined #tripleo06:00
*** mburned is now known as mburned_out06:00
*** dmacpher_ has joined #tripleo06:03
*** dmacpher has quit IRC06:06
*** jfrancoa has joined #tripleo06:06
*** jfrancoa has quit IRC06:06
*** jfrancoa has joined #tripleo06:07
*** jfrancoa has joined #tripleo06:08
*** rcernin_ has joined #tripleo06:18
*** anilvenkata has joined #tripleo06:20
*** ykarel has quit IRC06:20
*** rcernin has quit IRC06:21
*** tvignaud has joined #tripleo06:32
openstackgerritOpenStack Proposal Bot proposed openstack/tripleo-ui master: Imported Translations from Zanata  https://review.openstack.org/55035006:35
*** waleedm has joined #tripleo06:36
*** ihrachys has joined #tripleo06:40
*** links has quit IRC06:41
*** marios has joined #tripleo06:42
*** ihrachys_ has joined #tripleo06:42
*** guits_ has joined #tripleo06:44
*** ihrachys has quit IRC06:45
*** hjensas has quit IRC06:46
*** guits_ has quit IRC06:47
*** tvignaud has quit IRC06:49
*** links has joined #tripleo06:51
*** psahoo has quit IRC06:52
*** gkadam has joined #tripleo06:58
*** dmacpher_ has quit IRC07:00
*** sai_p has quit IRC07:02
*** rcernin has joined #tripleo07:05
*** ykarel has joined #tripleo07:05
*** rcernin_ has quit IRC07:06
*** elgxl has joined #tripleo07:08
*** psahoo has joined #tripleo07:08
*** threestrands_ has joined #tripleo07:09
*** threestrands_ has quit IRC07:09
*** threestrands_ has joined #tripleo07:09
*** threestrands has quit IRC07:10
*** ykarel has quit IRC07:11
*** threestrands_ has quit IRC07:13
openstackgerritJose Luis Franco proposed openstack/tripleo-upgrade master: [DNM]: Apply workaround for P->Q upgrades.  https://review.openstack.org/54922007:15
*** dparkes has joined #tripleo07:15
openstackgerritJose Luis Franco proposed openstack/tripleo-quickstart master: Use tripleo-upgrade role for p->q job.  https://review.openstack.org/54007207:16
openstackgerritJose Luis Franco proposed openstack/tripleo-quickstart master: DNM: testing p->m on experimental queue.  https://review.openstack.org/54576207:16
*** psahoo has quit IRC07:21
*** agurenko has joined #tripleo07:26
*** HoloIRCUser3 has joined #tripleo07:32
*** psahoo has joined #tripleo07:33
*** HoloIRCUser4 has quit IRC07:34
*** jaganathan has joined #tripleo07:35
*** HoloIRCUser4 has joined #tripleo07:35
*** ykarel has joined #tripleo07:37
*** shreshtha has joined #tripleo07:38
*** HoloIRCUser3 has quit IRC07:38
jaosorioradarazs, mandre: Do we output "docker info" anywhere in CI?07:41
*** aufi has joined #tripleo07:42
*** holser__ has joined #tripleo07:44
*** ccamacho has joined #tripleo07:54
*** pcaruana has joined #tripleo07:54
*** pcaruana has quit IRC07:55
*** pcaruana has joined #tripleo07:55
*** HoloIRCUser3 has joined #tripleo07:58
*** HoloIRCUser4 has quit IRC07:58
*** olivierbourdon3- has quit IRC08:05
openstackgerritCarlos Camacho proposed openstack/python-tripleoclient stable/queens: Add Openstack Undercloud backup  https://review.openstack.org/55038008:06
*** jpena|off is now known as jpena08:07
*** ebarrera has joined #tripleo08:07
*** olivierbourdon38 has joined #tripleo08:09
jaosoriorchandankumar: could you check this out https://review.openstack.org/#/c/549837/ ?08:12
Tengujaosorior: hello :).08:13
jaosoriorTengu: hey man! how's it going?08:13
*** yprokule has joined #tripleo08:15
Tengusick -.-. didn't really like the cold in the airport ^^'08:15
Tengujaosorior: what about you?08:15
jaosoriorglad to be back home08:16
*** ffiore has joined #tripleo08:16
jaosoriorTengu: damned airports! don't feel like seeing one in a while08:16
jaosoriorit was quite problematic to get back home08:16
EmilienMdtantsur|afk: hellow08:18
openstackgerritArx Cruz proposed openstack/tripleo-quickstart-extras master: Removing barbican test from skip list  https://review.openstack.org/55038508:18
EmilienMjaosorior: can you review a few patches please? https://review.openstack.org/#/c/550272/ https://review.openstack.org/#/c/550274/ https://review.openstack.org/#/c/550285/ https://review.openstack.org/#/c/550289/ https://review.openstack.org/#/c/550290/08:20
jaosoriorartom: had this patch https://review.openstack.org/#/c/549837/1/roles/validate-tempest/vars/tempest_skip_master.yml08:20
jaosoriorI mean arxcruz08:20
*** ebarrera has quit IRC08:21
arxcruzjaosorior: sorry, i wasn't aware, can you then remove it from queens skip list also ?08:21
*** ebarrera has joined #tripleo08:21
*** jtomasek has joined #tripleo08:22
*** tesseract has joined #tripleo08:22
jaosoriorEmilienM: is an empty port allowed https://review.openstack.org/#/c/550274/1/puppet/services/neutron-api.yaml ?08:22
Tengujaosorior: it was interesting on Saturday indeed: no public transportation before 12, and according to the hotel we weren't able to get a taxi. In the end, we actually did get a taxi (driven by a really nice mad man XD).08:22
jaosoriorarxcruz: sure08:22
*** jtomasek has quit IRC08:22
EmilienMjaosorior: let me check, one sec08:23
Tengujaosorior: and the plane was delayed and changed gate multiple times. But it wasn't cancelled, that's the good point08:23
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-quickstart-extras master: Stop skipping volume encryption test  https://review.openstack.org/54983708:23
EmilienMhttp://logs.openstack.org/74/550274/1/check/tripleo-ci-centos-7-containers-multinode/6635e1f/logs/subnode-2/var/log/config-data/neutron/etc/neutron/neutron.conf.txt.gz08:24
EmilienMquota_port=08:24
*** jtomasek has joined #tripleo08:24
EmilienMindeed08:24
EmilienMmaybe I should use the default, 50008:24
jaosoriorTengu: had a similar experience, except that I had to stay in london for a night, and then had to run around the airport for hours cause neither of the two airlines involved wanted to take responsibility...08:24
jaosoriorEmilienM: I think that would be better.08:24
*** tvignaud has joined #tripleo08:24
EmilienMok08:24
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: neutron/undercloud: align configuration with instack-undercloud  https://review.openstack.org/55027408:25
openstackgerritEmilien Macchi proposed openstack/python-tripleoclient master: Manage upgrades to a containerized undercloud  https://review.openstack.org/54962408:26
Tengujaosorior: damn :/08:27
EmilienMjaosorior: also https://review.openstack.org/#/c/541493/08:27
EmilienMand https://review.openstack.org/#/c/549992/08:27
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Add KernelIpForward configuration  https://review.openstack.org/54840108:28
openstackgerritzenghui.shi proposed openstack/tripleo-heat-templates master: Set name property on the Deployment resources  https://review.openstack.org/55033408:29
*** threestrands has joined #tripleo08:32
*** threestrands has quit IRC08:32
*** threestrands has joined #tripleo08:32
*** guits_ has joined #tripleo08:33
*** psahoo has quit IRC08:33
*** shardy has joined #tripleo08:34
*** bogdando has joined #tripleo08:35
*** threestrands has quit IRC08:36
EmilienMjaosorior: thx a lot08:37
*** guits_ has quit IRC08:37
*** jaosorior_ has joined #tripleo08:37
*** jaosorior has quit IRC08:40
*** florianf has joined #tripleo08:41
*** cshastri has quit IRC08:42
*** rcernin has quit IRC08:42
*** cshastri has joined #tripleo08:43
*** guits_ has joined #tripleo08:45
*** psahoo has joined #tripleo08:49
*** athomas has joined #tripleo08:53
openstackgerritJanki Chhatbar proposed openstack/puppet-tripleo master: Create vhost_socket_dir with proper permissions  https://review.openstack.org/54796108:53
*** kopecmartin has joined #tripleo08:55
openstackgerritMichele Baldessari proposed openstack/puppet-tripleo master: WIP Fix stack update with rabbitmq containers  https://review.openstack.org/54978708:57
*** moshele has joined #tripleo08:57
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Extract local CA if it expired  https://review.openstack.org/55040308:59
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Extract local CA if it expired  https://review.openstack.org/55040308:59
ccamachohey bogdando around? quick question, yesterday speaking with holser, he had this issue08:59
ccamacho2018-03-06 16:46:33Z [overcloud]: UPDATE_FAILED  Error in EndpointMap output endpoint_map: Invalid URL port "" for make_url called with {u'path': u'/ironic-inspector', u'host': u'', u'scheme': '', u'port': ''}08:59
ccamachoSame as me, he told me you give him some hints to fix it, mind to share them? :)08:59
*** lucas-afk is now known as lucasagomes08:59
ccamachomaybe something in the templates¿09:00
bogdandoccamacho: hi. I'm not very strong with those EndpointMap vs ServiceMap things :(09:00
ccamacho:P bogdando np its just that im hitting so many issues xD09:01
bogdandoand the issue looks new to me, I'm not aware of possible fixes09:01
EmilienMbogdando: hey, before I start the work on the ironic part of https://trello.com/c/GMYssQ9b/44-align-openstack-configs-with-tht-and-instack-undercloud - can you confirm there is no ongoing effort to align the config for ironic?09:02
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Extract local CA if it expired  https://review.openstack.org/55040309:03
*** dpawar has quit IRC09:03
jaosorior_ccamacho: did you use a custom endpointmap?09:03
*** jaosorior_ is now known as jaosorior09:03
jaosoriorccamacho: sounds like the ironic-inspector endpoint wasn't present in the endpoint map file that was used.09:04
bogdandoEmilienM: hey. nothing special but https://trello.com/c/XttIJJPn/43-fix-ironic-conductor-networks-configured-undercloud09:04
ccamachohey jaosorior_ :) how are you doing man!??! my deployment is an standard oooq deployment (pike+ha+containers)09:05
EmilienMbogdando: i've got neutron things sorted out last night, after upgrade neutron works fine09:05
jaosoriorccamacho: is there an inspector entry in the endpoint map?09:05
EmilienMI'll continue today, ironic.conf is really different, I need to align the config09:05
*** dpawar has joined #tripleo09:09
ccamachojaosorio, so like "| 5549db37d3c140dc8919f38b3124b292 | regionOne | ironic-inspector | baremetal-introspection | True    | internal  | http://192.168.24.3:5050                         |"09:09
ccamachothe URLs seem to be ok09:09
ccamachooooooo09:10
*** mrch_ has joined #tripleo09:10
*** ebarrera has quit IRC09:11
bogdandoEmilienM: ack. From my side, https://logs.rdoproject.org/56/542556/57/openstack-check/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-master/Z341f58c8b0d7472fa945abfc25cf5594/ failed on unexpected step w/o undercloud install logs provided... So nothing to debug :/ And my local env for some reason deployed w/o the provisioning/clean up networks fix included. So, even tho some progress have been made to unblock future OVB streps09:12
bogdandocoming after nodes introspection, it is still not there to have it deployed live09:12
*** salmankhan has joined #tripleo09:12
*** ebarrera has joined #tripleo09:13
bogdandoI wish I could understand that ZUUL_CHANGES magic better, and why on earth just adding depends-on doesn work so I have to explicitly specify ^openstack/tripleo-heat-templates refs/changes/00/550100/109:13
bogdandoso what's my local config for reproduce script I'm gonna try today https://pastebin.com/yauR0XD209:14
*** mrch_ has quit IRC09:15
bogdandothat's*09:15
jaosoriorccamacho: uh? is that from the overcloud?09:15
jaosoriorccamacho: the endpoints in the undercloud and the overcloud are not related.09:16
ccamachojaosorior yeahp from my overcloud09:16
ccamachoaa no sorry09:16
ccamachoUC09:16
ccamachowait09:16
jaosorioryeah09:16
jaosoriorlooked like the overcloud09:16
jaosorioralso, the endpoints from the overcloud are provisioned from a structure caled EndpointMap09:16
jaosoriorwhich you would usually get from an environment file from your t-h-t distribution09:16
*** dpawar has quit IRC09:17
*** olivierbourdon38 has quit IRC09:20
*** stendulker has joined #tripleo09:20
*** suuuper has joined #tripleo09:21
*** b00tcat has joined #tripleo09:22
*** morazi has joined #tripleo09:23
jaosoriorccamacho: can you pass the command you're using to reproduce the issue?09:24
*** owalsh has quit IRC09:24
*** owalsh has joined #tripleo09:25
*** ihrachys_ has quit IRC09:25
*** ihrachys_ has joined #tripleo09:26
*** salmankhan has quit IRC09:29
openstackgerritJose Luis Franco proposed openstack-infra/tripleo-ci master: Use tripleo-upgrade role in undercloud upgrades job.  https://review.openstack.org/54897409:29
*** paramite has joined #tripleo09:30
jaosoriorparamite: hey, is there anything missing from the barbican healthchecks? I remember you had to divide the patches.09:31
*** olivierbourdon38 has joined #tripleo09:34
ccamachojaosorior im running a "openstack overcloud upgrade prepare" and heat runs until it hits that issue, but like in many CI envs we are skipping the validations09:34
ccamachoI mean we should skip validations by default09:34
*** olivierbourdon38 has quit IRC09:35
ccamachoshould not***09:35
*** hjensas has joined #tripleo09:35
*** hjensas has quit IRC09:35
*** hjensas has joined #tripleo09:35
*** ihrachys_ has quit IRC09:36
EmilienMbogdando: sorry on my phone now09:38
paramitejaosorior, yup, we have to also get this merged: https://review.openstack.org/#/c/539190/09:38
EmilienMMake sure to use commit id in depends on09:38
EmilienMNot the Gerrit link09:38
paramitejaosorior, rdo-kolla-build-integration is passing alreadty09:38
EmilienMIt wouldn't work with RDO zuul09:39
EmilienMI sent an email about that a few weeks ago09:39
EmilienMSo make sure you use the long ID and not Gerrit url09:39
openstackgerritBernard Cafarelli proposed openstack/tripleo-docs master: Deployment instructions for Octavia  https://review.openstack.org/54183309:40
EmilienMbogdando ^09:40
bogdandoEmilienM: yeah, I do. The issue is that adding depends-on and rebasing, seems not enough to make ZUUL_CHANGES list happy09:40
paramitejaosorior, hmm, but looking at that, barbican checks are not part of the list09:41
paramitejaosorior, let me fix that09:41
bogdandoI mean: export ZUUL_CHANGES="openstack/python-tripleoclient:master:refs/changes/28/549728/1^openstack/tripleo-quickstart-extras:master:refs/changes/28/545628/18^openstack/tripleo-quickstart:master:refs/changes/56/542556/57" WIll not work for depends-on added for 542556/5709:41
bogdandoI have to add that to the tail as well09:41
bogdandothat's ... annoying09:41
bogdando...^openstack/tripleo-heat-templates:master:refs/changes/00/550100/109:41
bogdandoEmilienM: ^^09:41
bogdandoafk for a while09:42
EmilienMOh ok09:42
EmilienMSame09:42
*** derekh has joined #tripleo09:42
jaosoriorparamite: thanks09:45
jaganathand0ugal, shardy please look into https://review.openstack.org/#/c/527112/ and https://review.openstack.org/#/c/527877/09:45
*** dtantsur|afk is now known as dtantsur09:45
dtantsurEmilienM: hey, why are you still in EU time? Brno or still stuck in Dublin? :)09:46
openstackgerritMartin Mágr proposed openstack/tripleo-common master: Activate new healthchecks  https://review.openstack.org/53919009:46
paramitejaosorior, ^09:46
*** olivierbourdon38 has joined #tripleo09:47
dtantsuralso EmilienM, bogdando, I need help with https://review.openstack.org/#/c/550100/09:48
dtantsurwe cannot just set something to 'ctlplane', it gets changed to an IP address09:48
chandankumarjaganathan: lloking09:52
jaosoriorccamacho: do you have to call the upgrade prepare with any parameters?09:52
jaosoriorparamite: do you have to chmod the barbican scripts too?09:54
ccamachojaosorior yeahp, this is the full command https://paste.fedoraproject.org/paste/9NuKzZohO2PLZmlXhJM~VA09:55
shardydtantsur: Hi, yeah that's expected when the network names are used as values in the config_settings consumed by puppet, because in most other cases the ServiceNetMap names need translating to a bind IP on each network09:55
paramitejaosorior, those scripts have =x already09:55
shardydtantsur: if you need the literal string we'll have to figure out how to do that, sec looking09:56
paramite*+x09:56
dtantsurshardy: I know, yeah. we've hit it already previously. thanks!09:56
shardydtantsur: as a workaround you could probably override e.g ironic::conductor::cleaning_network via UndercloudExtraConfig, as IIRC that is not subject to the same substitution:09:59
shardyhttps://github.com/openstack/tripleo-heat-templates/blob/master/puppet/role.role.j2.yaml#L545..L55109:59
shardydtantsur: we probably need a better approach long term, but that may be enough to unblock you?09:59
dtantsuryeah, I hope so10:00
*** dpawar has joined #tripleo10:01
openstackgerritChandan Kumar proposed openstack/tripleo-heat-templates master: Added t-h-t for tempest container  https://review.openstack.org/54832510:03
*** tosky has joined #tripleo10:03
dtantsurshardy: is UndercloudExtraConfig even a thing? I cannot find its mentions anywhere10:03
shardydtantsur: it's generated by the j2 template I just linked10:03
dtantsurah, cool10:03
openstackgerritDmitry Tantsur proposed openstack/tripleo-heat-templates master: undercloud: set cleaning and provisioning networks to 'ctlplane'  https://review.openstack.org/55010010:04
dtantsurshardy: something like ^^^?10:04
shardydtantsur: can you explain how the "ctlplane" network is consumed by ironic in this case, e.g there's no neutron uuid to refer to, so what does it reference?10:04
dtantsurshardy: it resolves names to UUIDs in runtime10:05
dtantsurwhen cleaning is running10:05
shardydtantsur: Ah Ok thanks10:06
dtantsurnp10:06
shardyI was just wondering if we can wire in the uuid during the deploy instead of the name10:06
dtantsurI've been wondering about the same for some time. but we seem to have a chicken-and-egg problem here10:07
*** cmyster has joined #tripleo10:07
*** holser___ has joined #tripleo10:07
*** holser__ has quit IRC10:07
shardydtantsur: yeah I was just trying to think through the ordering10:08
* shardy needs to finish his coffee first :)10:08
shardydtantsur: the patch lgtm, I think that should work around the problem for now10:08
dtantsuryep, that's the same change we do in the undercloud now10:08
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-quickstart master: New featureset for fast forward upgrade testing.  https://review.openstack.org/52568610:11
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-quickstart master: DNM: testing ffu.  https://review.openstack.org/54667010:11
*** yurii has joined #tripleo10:14
openstackgerritMerged openstack/paunch stable/queens: Use tenacity to retry image pulls  https://review.openstack.org/55024910:18
EmilienMdtantsur: family time in france10:19
EmilienMdtantsur: ack for https://review.openstack.org/#/c/550100/ I'll look today10:20
waleedmHi guys, I've an problem with deploying with network isolation , as I can't override  OS::TripleO::Controller::Net::SoftwareConfig: ../network/config/single-nic-vlans/controller.yaml10:23
*** dpawar has quit IRC10:24
*** yurii has quit IRC10:24
*** yurii has joined #tripleo10:24
waleedmIf I change controller.yaml it will no propogate to the controler node, anyone can help with that10:24
*** lvdombrkr has joined #tripleo10:25
shardywaleedm: by default nic config changes are only applied on create of new nodes, due to the risk of pacemaker fencing nodes if the nics get bounced10:31
shardyif you've taken steps to avoid that and/or are sure the new config is safe from a fencing perspective, you can use the NetworkDeploymentActions parameter to override the default:10:31
shardyhttps://github.com/openstack/tripleo-heat-templates/blob/master/puppet/role.role.j2.yaml#L11710:31
*** yurii has quit IRC10:32
shardye.g pass NetworkDeploymentActions: ['CREATE', 'UPDATE'] in your environment file10:32
shardyin the parameter_defaults section10:32
*** ledo_ has joined #tripleo10:32
*** ledo__ has joined #tripleo10:33
*** waleedm has quit IRC10:33
*** ledo__ has quit IRC10:33
*** ledo_ has quit IRC10:33
*** waleedm has joined #tripleo10:33
*** salmankhan has joined #tripleo10:33
*** salmankhan has quit IRC10:34
*** salmankhan1 has joined #tripleo10:34
*** yurii has joined #tripleo10:34
waleedm@shardy, thanks I'll check it10:34
*** yurii has left #tripleo10:35
*** salmankhan1 has quit IRC10:36
openstackgerritMerged openstack/instack-undercloud stable/pike: Increase size of Heat max_template_size  https://review.openstack.org/54880710:39
openstackgerritMerged openstack/puppet-tripleo master: Correct Neutron RabbitMQ User Param Mapping  https://review.openstack.org/53896610:39
*** salmankhan has joined #tripleo10:45
*** mdnadeem has quit IRC10:54
*** mdnadeem has joined #tripleo10:54
openstackgerritChandan Kumar proposed openstack/tripleo-heat-templates master: Added t-h-t for tempest container  https://review.openstack.org/54832510:57
*** karthiks has quit IRC11:08
*** stendulker has quit IRC11:08
*** janki has quit IRC11:15
*** salmankhan has quit IRC11:15
jaosoriorWhat is the namespace I should be using nowadays? tripleomaster or tripleoupstream?11:17
*** mburned_out is now known as mburned11:17
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-quickstart-extras master: Do not record host identification for reproducer ssh commands.  https://review.openstack.org/55043711:19
*** udesale_ has joined #tripleo11:19
*** salmankhan has joined #tripleo11:20
*** shardy has quit IRC11:20
*** shardy has joined #tripleo11:21
*** udesale has quit IRC11:21
*** shardy has quit IRC11:21
*** udesale has joined #tripleo11:21
*** quiquell has quit IRC11:22
*** shardy has joined #tripleo11:22
openstackgerritJuan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Extract local CA if it expired  https://review.openstack.org/55040311:22
openstackgerritSergii Golovatiuk proposed openstack/tripleo-quickstart master: Refactor repo_cmd_before  https://review.openstack.org/53952511:23
*** udesale_ has quit IRC11:24
holser___weshay - can we merge https://review.openstack.org/#/c/546544/ ?11:24
*** karthiks has joined #tripleo11:24
openstackgerritEmilien Macchi proposed openstack/puppet-tripleo stable/queens: Correct Neutron RabbitMQ User Param Mapping  https://review.openstack.org/55043911:28
openstackgerritEmilien Macchi proposed openstack/puppet-tripleo stable/pike: Correct Neutron RabbitMQ User Param Mapping  https://review.openstack.org/55044011:28
*** yurii has joined #tripleo11:28
openstackgerritMartin Mágr proposed openstack/tripleo-common master: Add healthcheck script for Nova metadata  https://review.openstack.org/55044111:29
*** quiquell has joined #tripleo11:35
*** quiquell has quit IRC11:36
*** udesale has quit IRC11:36
*** cdearborn has joined #tripleo11:38
*** HoloIRCUser2 has joined #tripleo11:38
*** ratailor has quit IRC11:41
*** HoloIRCUser3 has quit IRC11:42
*** pdeore has quit IRC11:43
*** holser___ has quit IRC11:48
*** holser__ has joined #tripleo11:48
*** lucasagomes is now known as lucas-hungry11:54
*** panda|off is now known as panda12:00
*** HoloIRCUser2 has quit IRC12:02
*** HoloIRCUser2 has joined #tripleo12:03
*** jpena is now known as jpena|lunch12:03
*** yurii has quit IRC12:04
*** assassin has joined #tripleo12:05
openstackgerritMartin Mágr proposed openstack/tripleo-common master: Add healthcheck script for Nova metadata  https://review.openstack.org/55044112:06
openstackgerritPradeep Kilambi proposed openstack/instack-undercloud stable/queens: Remove ceilometer expirer from instack  https://review.openstack.org/55046112:07
lhinds#startmeeting test-ignore12:08
openstackMeeting started Wed Mar  7 12:08:23 2018 UTC and is due to finish in 60 minutes.  The chair is lhinds. Information about MeetBot at http://wiki.debian.org/MeetBot.12:08
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.12:08
*** openstack changes topic to " (Meeting topic: test-ignore)"12:08
openstackThe meeting name has been set to 'test_ignore'12:08
lhinds#endmeeting12:08
*** openstack changes topic to "Queens RC1 deadline: March 1st - CI status: Master Promotion - GREEN, Queens Promotion - GREEN, check/gate - GREEN | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest/"12:08
openstackMeeting ended Wed Mar  7 12:08:27 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)12:08
openstackMinutes:        http://eavesdrop.openstack.org/meetings/test_ignore/2018/test_ignore.2018-03-07-12.08.html12:08
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/test_ignore/2018/test_ignore.2018-03-07-12.08.txt12:08
openstackLog:            http://eavesdrop.openstack.org/meetings/test_ignore/2018/test_ignore.2018-03-07-12.08.log.html12:08
*** moshele has quit IRC12:11
*** janki has joined #tripleo12:13
*** moshele has joined #tripleo12:14
*** dciabrin has quit IRC12:16
openstackgerritMarios Andreou proposed openstack/python-tripleoclient master: P..Q openstack overcloud upgrade add roles and nodes params  https://review.openstack.org/55009912:16
*** bfournie1 has joined #tripleo12:18
*** ykarel_ has joined #tripleo12:18
*** dciabrin has joined #tripleo12:18
*** ykarel has quit IRC12:18
*** ykarel_ has quit IRC12:18
*** ykarel_ has joined #tripleo12:18
*** abishop_ has joined #tripleo12:18
*** bfournie has quit IRC12:18
*** vpickard_ is now known as vpickard12:19
*** myoung|ruck|off is now known as myoung|ruck12:19
*** shadower has quit IRC12:19
*** shadower has joined #tripleo12:20
*** panda is now known as panda|lunch12:20
*** abishop has quit IRC12:20
*** yolanda has quit IRC12:20
*** yolanda has joined #tripleo12:21
*** psahoo has quit IRC12:21
openstackgerritJiri Stransky proposed openstack-infra/tripleo-ci master: Add multinode-overcloud-update playbook to run list  https://review.openstack.org/54705812:22
*** dpawar has joined #tripleo12:23
*** jlabarre has joined #tripleo12:23
*** gfidente has joined #tripleo12:25
*** gfidente has quit IRC12:25
*** gfidente has joined #tripleo12:25
openstackgerritSergii Golovatiuk proposed openstack/tripleo-heat-templates stable/newton: DO NOT MERGE: Testing I7bcc18445f3263128a9bff29a057f172af143c90  https://review.openstack.org/55046312:25
holser__weshay - thank you for comment12:26
holser__I have created https://review.openstack.org/55046312:26
holser__is it enough to test patch against newton?12:26
* weshay looks12:27
*** psachin has quit IRC12:27
*** dpawar has quit IRC12:28
*** dpawar has joined #tripleo12:29
*** lblanchard has joined #tripleo12:32
*** pkovar has joined #tripleo12:37
*** udesale has joined #tripleo12:39
*** morazi has quit IRC12:40
*** ccamacho is now known as ccamacho|lunch12:47
openstackgerritBogdan Dobrelya proposed openstack/python-tripleoclient master: Prepare t-h-t for undercloud in a work dir  https://review.openstack.org/54287512:49
openstackgerritBogdan Dobrelya proposed openstack/python-tripleoclient master: Prepare t-h-t for undercloud in a work dir  https://review.openstack.org/54287512:53
*** cshastri has quit IRC12:53
bogdandofolks, what is recheck RETRY_LIMIT incantation?12:54
*** wolverineav has joined #tripleo12:54
bogdandoit makes all check to fail shortly with a fancy recheck RETRY_LIMIT?12:54
*** anilvenkata has quit IRC12:54
* bogdando looks onto https://review.openstack.org/#/c/550100/2 and confused12:55
dtantsurbogdando: it was "recheck" command with the comment "RETRY_LIMIT" :)12:55
bogdandodtantsur: hmm, but why all checks failed with that status?12:56
dtantsurbogdando: good question to ask infra..12:56
bogdandonever mind, I thing I misunderstood cause and consequence :D12:57
bogdandothink*12:57
*** moshele has quit IRC12:57
*** panda|lunch is now known as panda12:58
*** myoung|ruck is now known as myoung|ruck|mtg12:59
*** morazi has joined #tripleo12:59
*** moshele has joined #tripleo12:59
*** wolverineav has quit IRC12:59
jaosoriorlhinds: ping13:00
lhinds#startmeeting Security Squad Meeting13:00
openstackMeeting started Wed Mar  7 13:00:27 2018 UTC and is due to finish in 60 minutes.  The chair is lhinds. Information about MeetBot at http://wiki.debian.org/MeetBot.13:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.13:00
*** openstack changes topic to " (Meeting topic: Security Squad Meeting)"13:00
openstackThe meeting name has been set to 'security_squad_meeting'13:00
jaosoriorlhinds: thanks!13:00
lhindshey jaosorior .. shardy owalsh13:00
lhindslet's give it a min for others to arrive13:01
jaosoriorSo, this would be the first TripleO Security Squad meeting13:01
jaosorioryeah, that sounds like a good idea13:01
*** cshastri has joined #tripleo13:01
lhindsyay!13:01
owalshhey13:01
*** lblanchard has quit IRC13:01
jaosoriorowalsh: :D13:01
*** lucas-hungry is now known as lucasagomes13:01
lhindshey owalsh13:01
moguimarI'm here for the meeting as well o/13:02
jaosoriorowalsh, lhinds: Lets wait a little bit, since shardy had mentioned he was interested.13:02
jaosoriormoguimar: hey! nice!13:02
lhindshey moguimar , good to have you13:02
moguimarthanks lhinds13:02
lhindsok, jaosorior I guess we can kick off if ok with you13:03
jaosoriorthat's fine with me13:03
lhinds#topic agenda13:03
*** openstack changes topic to "agenda (Meeting topic: Security Squad Meeting)"13:03
lhinds#link https://etherpad.openstack.org/p/tripleo-security-squad13:03
lhinds    Topics13:03
lhinds    Group Kickoff13:03
lhinds    General organization13:03
lhinds    Work items13:03
lhinds    Any other business13:03
jaosoriorRight, so we have an etherpad which lhinds posted above. At the bottom of it we set up a small agenda for today ^^13:03
lhindsanyone need to add an agenda item, please do add to the pad13:04
lhinds#topic Group Kickoff13:04
*** openstack changes topic to "Group Kickoff (Meeting topic: Security Squad Meeting)"13:04
lhindsjaosorior: over to yourself oz13:04
jaosoriorgreat13:04
*** jpena|lunch is now known as jpena13:05
jaosoriorSo, as some of you might know, we have Squads in TripleO, which is similar to Special Interest Groups (SIGs); and it's a group of folks dedicated to working on a certain topic.13:05
jaosoriorWe decided to finally start the Security Squad, based on several tasks that have come up from different sources13:05
jaosoriorAlso, to gather a bit more attention and hopefully contributors upstream, to work on security13:06
jaosoriorAs mentioned in the etherpad, we gathered some tasks that we think should be addressed on the security side, and we'll be having meetings every week to see the progress of these13:06
jaosoriorbut folks can also use the meeting to bring up questions, or things they think should be addressed13:07
*** ukalifon has joined #tripleo13:07
jaosoriorI think that would pretty much cover the overview of the group, does that make sense to folks?13:08
moguimaryes13:08
lhindssounds good to me jaosorior , anyone want jaosorior  to clairfy anything or have any questions?13:08
owalshsounds good to me too13:08
lhindss/clairfy/clarify13:08
jaosoriorAs mentioned in the etherpad, note that this is TripleO specific, so any general OpenStack security topics should be covered in the OpenStack Security SIG; of which lhinds is the PTL.13:09
bogdandobtw, does anyone know which tiny dwarfs mutate that https://review.openstack.org/#/c/550100/1/environments/undercloud.yaml@45 into IP ??13:09
lhinds#topic General organization13:09
*** openstack changes topic to "General organization (Meeting topic: Security Squad Meeting)"13:09
lhindsdo you have anything on the topic jaosorior ? or already covered13:10
jaosoriorFor now, given that the group of people is small, I think we can track the work in the etherpad, is that fine for people? If more people get interested and start working on things, eventually we could use something else. But it seems to me that this would be a good start.13:10
lhindsjaosorior: +113:11
lhindsetherpad is fine for starters13:11
owalsh+113:11
jaosorioralright, so that was easy :D13:11
jaosoriornext13:11
moguimar+113:11
lhinds#topic Work Items13:11
*** openstack changes topic to "Work Items (Meeting topic: Security Squad Meeting)"13:11
jaosoriorlhinds and me added some topics (or proposals) to the etherpad already; which would be some main topics to cover13:12
lhindsjaosorior: we can walk through each one as a topic if you like?13:12
jaosorioryeah13:12
lhinds#topic CI Security Job13:13
*** openstack changes topic to "CI Security Job (Meeting topic: Security Squad Meeting)"13:13
*** jlabarre has quit IRC13:13
jaosoriorSo, maybe the CI Security Job is not the best one to have on top, but it's something we would ultimately want.13:13
lhindsgood point, so there is no priority to the order13:13
jaosoriorit would cover encryption everywhere (either TLS or IPSec), SELinux everywhere, among other security related features13:14
jaosoriorthe reason it's mentioned it should be RHEL based is because of SELinux13:15
*** yurii has joined #tripleo13:15
jaosoriorI brought that topic at the PTG, and folks mentioned that testing SELinux on CentOS would be quite problematic, since any issue in the policy would break us, and we can't get fixes for that as fast as we wished13:15
jaosoriorand those fixes get earlier on RHEL13:15
jaosoriorso, to test this as fast as possible (including policy fixes), we concluded that having a RHEL based job would be the best idea.13:16
jaosoriorweshay mentioned that there plans to get such a job, so it would be a matter of waiting for it to be available (and helping out if possible)13:16
jaosoriorI would also like to see yolanda's hardened images tested as part of this, but I'm not sure if it would be feasable13:17
owalshwe would need oooq support for * I assume13:17
jaosoriorSo, point being, I don't think we can work on this yet, until we get a RHEL job in RDO CI13:17
jaosoriorowalsh: correct13:17
jaosoriorany questions/feedback on this?13:18
lhindsjust an idea, if folks are interested in working or initally monitoring an item, they can mark there names (added 'interested' section to work items)13:18
lhinds*their13:18
*** rlandy has joined #tripleo13:19
jaosoriorlhinds: alright, maybe we can move to the next item13:19
lhinds#topic SELinux everywhere13:19
*** openstack changes topic to "SELinux everywhere (Meeting topic: Security Squad Meeting)"13:19
lhindsunless that was already covered above?13:20
jaosoriorI can elaborate13:20
*** pradk has quit IRC13:20
jaosoriorso13:20
jaosorioralthough we do set SELinux to enforce downstream; we don't do so for docker13:20
jaosoriorand with the current way we deploy/use containers, we can't actually enable it13:21
*** leanderthal has joined #tripleo13:21
bogdando#link https://review.openstack.org/#/c/517383/13:21
jaosoriorI added some notes here http://jaormx.github.io/2018/selinux-and-docker-notes/ regarding what needs to be done for containers in general13:21
*** jlabarre has joined #tripleo13:21
jaosoriorright, bogdando had started that job at some point13:21
jaosoriorand I think it would be great to continue it13:22
jaosoriorthe proposal is: * get SELinux to enforce for docker and disable it explicitly for all containers * Work container by container to make them work with SELinux13:22
jaosoriorand for testing I would like it to be in the RHEL job, this way we can catch policy issues early and fix them without breaking CI for too long.13:22
*** masco has quit IRC13:22
bogdandoyeah, I think that should work for dev/test cycles13:23
*** guits_ has quit IRC13:23
jaosoriorbogdando: would you get some cycles to continue working on this? I'll also dive into it13:23
*** atoth has joined #tripleo13:23
bogdandoif I have some spare time from undercloud containers effort13:24
owalshIIRC the containers that caused most problems with selinux were nova_libvirt and nova_migration_target (sshd)13:24
owalshas the services detect selinux is enabled/disabled and behaviour changes13:24
jaosoriorowalsh: would certainly use your help getting those working (if possible)13:24
owalshjaosorior: sure, no expect on selinux but I'm willing to help13:25
jaosoriorthanks13:25
*** pchavva has joined #tripleo13:25
jaosoriorany questions/feedback about the SELinux for containers proposal?13:25
*** hjensas has quit IRC13:25
owalshso it requires the CI security job?13:26
owalshor at least oooq support for local dev/testing?13:26
jaosoriorowalsh: we can start without it, but ultimately we want it tested in CI13:26
openstackgerritJiri Stransky proposed openstack/tripleo-upgrade master: New update prepare command  https://review.openstack.org/55047213:26
jaosoriorowalsh: yeah, at least oooq support would be great13:26
*** jlabarre has quit IRC13:27
jaosoriorowalsh: once we start putting patches for it, we need to add instructions on that etherpad for other folks to try it out13:27
owalshjaosorior: ack13:28
jaosorior#topic Security Hardening13:28
jaosoriorlhinds: oh, seems you gotta do it13:29
lhinds#chair jaosorior13:29
openstackCurrent chairs: jaosorior lhinds13:29
lhindstry again oz.13:29
jaosorior#topic Security Hardening13:29
*** openstack changes topic to "Security Hardening (Meeting topic: Security Squad Meeting)"13:29
lhindscoolio13:29
jaosoriorthanks!13:29
jaosoriorlhinds: can you elaborate on that one? since you started that work.13:29
openstackgerritJiri Stransky proposed openstack/tripleo-quickstart-extras master: Overcloud update CI with tripleo-upgrade role  https://review.openstack.org/54220113:30
lhindsSure, so this generally covers security changes needed that harden tripleO deployments, but are not substantial undertakings (generally) that require tracking multiple parts of a proposed change13:30
openstackgerritJiri Stransky proposed openstack-infra/tripleo-ci master: Add multinode-overcloud-update playbook to run list  https://review.openstack.org/54705813:30
lhindsso for example, a file permission, config value, insecure service that does not need running etc..13:31
owalshlhinds: so it's this the sort of stuff that comes from corporate security policies? e.g no telnet/rsh13:31
lhindsin turn a lot of them are required for security compliance stuff, such as DISA STIG etc.13:31
*** dprince has joined #tripleo13:31
lhindsowalsh: yes, very much!13:31
lhindsbut could also be something around general hardening.. aka https://bugs.launchpad.net/tripleo/+bug/166530813:32
openstackLaunchpad bug 1665308 in tripleo "Implement auth on mongodb" [High,Triaged]13:32
*** masco has joined #tripleo13:32
lhindsso something could start by being logged into security hardening, but become an individual work item if it has a large scope.13:33
lhindsas per the etherpad, there is a tag we use to track13:33
lhinds#link https://bugs.launchpad.net/tripleo/+bugs?field.tag=security-hardening13:33
lhindsI need to have a wash up of these, as a few I think can be closed now13:34
*** alee has quit IRC13:34
lhindsthat's all, unless any questions?13:34
owalshlhinds: some overlap with the realtime work e.g different kernel so I'll add my name to the list13:34
lhindsowalsh: great! sounds good13:34
owalshalso know my way around the hardened images since I basically copied what yolanda did when adding realtime images13:35
*** liverpooler has joined #tripleo13:35
lhindssome of the stuff I have done can be seen here:13:35
*** pgadiya has quit IRC13:35
lhinds#link https://docs.openstack.org/tripleo-docs/latest/install/advanced_deployment/security_hardening.html13:35
lhindsowalsh: just noted the SSH stuff needs an update in the above docs list, from your nova migration work13:35
owalshlhinds: sounds like a concrete work item :-)13:36
lhindsowalsh: thx!13:36
lhindsI think we can go onto Secrets Mgmgt jaosorior ?13:37
jaosorior#topic Secret Management for TripleO13:37
*** openstack changes topic to "Secret Management for TripleO (Meeting topic: Security Squad Meeting)"13:37
jaosoriorSo, this one is a big fish13:37
jaosoriorfor compliance, we shouldn't be storing credentials in cleartext (or at least aim to reduce them(13:38
jaosorior)13:38
jaosoriorBut the aim is to have all of the undercloud/overcloud passwords stored in safe medium (be it Barbican, Custodia, Vault, Ansible Vault... or whatever is necessary)13:39
*** moshele has quit IRC13:39
jaosoriorI think a good start for this would be to go through a deployment, identify all the sensitive data, who uses it and how is it used.13:39
jaosoriordocument that (maybe in another etherpad)13:39
jaosoriorand from there move on to come up with proposals on how to store them13:40
owalshjaosorior: is the goal to use an existing system on the cus network, or to deploy our own?13:40
lhindsjaosorior: do you think we should do that publically?13:40
jaosoriorlhinds: I think it should be, as much as possible.13:41
jaosoriorowalsh: maybe deploy our own (use Barbican on the undercloud for instance)13:41
lhindsjaosorior: cool, if anything is more nasty, we should embargo it..we can go over that when we look at doing the audit13:41
jaosoriorowalsh:  it would depend on what needs to access what.13:41
jaosoriorlhinds: definitely13:41
jaosoriorowalsh: for instance, we still use puppet/hieradata for passwords and such, so maybe in those cases we need to look for backends for hiera that store them encrypted (hiera-eyaml or heira-vault)13:42
jaosorior* hiera-vault13:42
jaosoriorand if that's not possible to use, then we would need to write our own.13:42
jaosorioror, for config-download, stuff is stored in yaml files; so we might need to use barbican in the ansible templates, or, if it's not possible, use ansible Vault.13:43
owalshack13:44
jaosoriorSo yeah, we need to check out all the data first, and figure out what possibilities there are.13:44
owalshso a ton of work13:44
jaosorioryeah13:44
jaosoriorthat's a heavy one13:44
jaosoriorquestions/feedback?13:44
moguimarif that topic is so big, shouldn't we break it in sub topics?13:45
moguimarin etherpad I mean13:46
lhindsmoguimar: a new pad? might be a good idea once things kick off13:46
*** guits_ has joined #tripleo13:47
moguimarnot a new pad, but something more than a title and a list of goals13:48
moguimarsomething like breaking the goals in subtasks13:48
moguimarthat could be achived in 1 or 2 days or work13:49
lhindsack, so yes that would be the next evolution of the work item.13:49
moguimar+113:49
*** dpawar has quit IRC13:49
moguimargot it13:49
owalshwhile I'm interested, I doubt I'll have much bandwidth to spare for this so leaving my name off the list13:50
jaosoriorI think it would be easier once we actually start identifying the sensitive data in a typical deployment. Cause right now, yes, I have some in mind, but I cannot name all of them from the top of my head.13:50
jaosoriorso, once we actually go through the deployment and identify items, we can start coming up with action items and strategies for the different pieces13:51
owalshjaosorior: I guess you just need to pick one to prototype it13:51
lhindsso key item is the audit and collecting areas that need addressing?13:51
jaosoriorcause probably we can't do the same for mistral, swift and ansible13:51
jaosoriorlhinds: yes13:51
*** mmethot has joined #tripleo13:51
lhindsjaosorior: any ideas for a pad name?13:52
jaosoriorlhinds: the same name as the topic maybe13:52
d0ugalFWIW, there have been a couple of attempts to solve this in Mistral but they have stalled a few times. Mostly due to it being a hard problem to solve :)13:52
lhindsjaosorior: k13:52
jaosoriord0ugal: if you have some proposal and would need feedback, or would like to discuss the challenges, you could bring it up to this meeting :D13:53
*** dmacpher has joined #tripleo13:53
jaosorioror to the OpenStack Security SIG, since it's kinda general OpenStack and not TripleO specific13:53
jaosoriord0ugal: but yeah, would be glad to help13:53
*** trown|outtypewww is now known as trown13:54
d0ugalyup, sounds good. I wasn't that close to the work so I need to learn more, but I'll try and do that and then get help13:54
d0ugalThe result of the PTG discussion was that we need external help/advice :)13:54
*** kopecmartin has quit IRC13:54
honzamwhahaha: what spec of mine do you want me to move to rocky?  i only have one open, and it's already targeted to rocky afaik13:54
lhinds d0ugal what sort of help / advice is needed?13:55
lhinds(I got hit with flu, so never made it)13:55
d0ugallhinds: good question. I need to figure out what questions we need help with - but I think it was at the level of general advice13:56
*** hjensas has joined #tripleo13:56
*** hjensas has quit IRC13:56
*** hjensas has joined #tripleo13:56
d0ugalmeaning that we were unsure of the best way forward13:56
lhindsd0ugal: ack.13:57
d0ugal(sorry, very vague. I'll try and learn more)13:57
*** psahoo has joined #tripleo13:57
*** psahoo has quit IRC13:57
lhindsshall we track this within the squad so we can help stay on top and give a hand?13:57
jaosorior+113:57
lhindsThinking it might be good for the squad, as this is more around how ooo uses mistral, then core mistral concerns..?13:58
d0ugalGood question. I guess I should make sure there is a central bug/blueprint for this in Mistral and then you can keep an eye on it13:58
openstackgerritChuck Short proposed openstack/os-net-config master: Remove mox dependency  https://review.openstack.org/55047713:58
lhinds#action track mistral (audit?) and have a central bug / blueprint13:59
lhindshmm, I thought that was a meetbot command.13:59
mwhahahahonza: that's fine. I just pinged the people with open specs13:59
lhindsd0ugal: are you ok to lodge a bug / bp? even if just a skeleton intially?13:59
honzamwhahaha: gotcha, thanks13:59
d0ugallhinds: sure, I suspect we have one somewhere already. I'll dig around.14:00
lhindsd0ugal: thx!14:00
jaosoriorlhinds: should we move to the next topic?14:00
lhindsoh we are on the hour.. jaosorior threat analysis we can skip14:00
lhindsdid you want to do public tls quickly jaosorior ?14:00
jaosoriorsure14:00
jaosorior#topic Public TLS by default14:01
*** openstack changes topic to "Public TLS by default (Meeting topic: Security Squad Meeting)"14:01
jaosoriorRight, so, for Rocky I would like to have public TLS enabled by default in both the undercloud and the overcloud14:01
jaosoriorshouldn't be particularly a lot of work and it would be a nice thing to have14:01
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-upgrade master: FFU upgrade issue with the release loop var.  https://review.openstack.org/54903514:01
*** mcornea has joined #tripleo14:01
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-upgrade master: DNM: Add debug and don't fail on validation for ffu.  https://review.openstack.org/54926914:01
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-upgrade master: Fix non working repo upgrade command for ffu.  https://review.openstack.org/55047814:01
lhindssgtm14:01
jaosoriormoguimar: I see you were interested, so we can pair it up if you want, and expand on that topic. Didn't write too much about it.14:02
shardySounds good but we should try to improve the experience when using upstream builds with self-signed certs I think14:02
moguimarsure14:02
openstackgerritSergii Golovatiuk proposed openstack/tripleo-heat-templates stable/ocata: DO NOT MERGE: Testing I7bcc18445f3263128a9bff29a057f172af143c90  https://review.openstack.org/55048014:02
jaosoriorshardy: ??14:02
moguimarTLS is something I have some background14:02
shardyjaosorior: the stuff we looked at yesterday, you can't access the undercloud APIs from outside of the undercloud without copying certs etc14:02
shardywe should make that clearer, at least in docs14:03
*** psahoo has joined #tripleo14:03
*** myoung|ruck|mtg is now known as myoung|ruck14:03
*** ffiore_ has joined #tripleo14:03
jaosoriorshardy: sounds like good feedback, added it to the notes in the etherpad14:03
*** ffiore has quit IRC14:03
*** agurenko has quit IRC14:04
openstackgerritTim Rozet proposed openstack/tripleo-heat-templates stable/queens: Fixes OpenDaylight healthcheck/GUI feature  https://review.openstack.org/55048114:04
openstackgerritTim Rozet proposed openstack/tripleo-common stable/queens: Fixes OpenDaylight healthcheck  https://review.openstack.org/55048214:04
*** jlabarre has joined #tripleo14:04
*** jlabarre has quit IRC14:05
slagleEmilienM: what is supposed to install the heat packages when using undercloud containers?14:05
jaosoriorshardy: I don't think there's much we can do outside of writing docs to make that part work though. As we're not able to issue publicly trusted certs for the undercloud (we could... but it's not meant to be publicly accessible)14:05
lhindsso we are overtime now..we can cover Limit TripleO users as a first item for next meeting?14:05
jaosoriorlhinds: sounds good14:05
jaosoriorAlright folks, thanks for joining!14:06
*** jlabarre has joined #tripleo14:06
lhindsyep, great first meeting !14:06
EmilienMslagle: python-tripleoclient*14:06
lhindsoff to a really good start, thanks for the idea jaosorior14:06
lhinds#endmeeting14:06
*** openstack changes topic to "Queens RC1 deadline: March 1st - CI status: Master Promotion - GREEN, Queens Promotion - GREEN, check/gate - GREEN | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest/"14:06
openstackMeeting ended Wed Mar  7 14:06:32 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:06
openstackMinutes:        http://eavesdrop.openstack.org/meetings/security_squad_meeting/2018/security_squad_meeting.2018-03-07-13.00.html14:06
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/security_squad_meeting/2018/security_squad_meeting.2018-03-07-13.00.txt14:06
openstackLog:            http://eavesdrop.openstack.org/meetings/security_squad_meeting/2018/security_squad_meeting.2018-03-07-13.00.log.html14:06
slagleEmilienM: http://paste.openstack.org/show/693645/14:07
slagleEmilienM: i have a build from today, and it doesn't require anything heat (other than heatclient)14:07
shardyjaosorior: yeah I'm thinking very clear docs, which we can potentially point to at the end of the deploy command14:07
shardys/deploy/undercloud install/14:08
moguimarwill we also discuss minimum TLS configuration?14:09
jaosoriormoguimar: what's in your mind for the minimal config?14:10
*** ooolpbot has joined #tripleo14:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION14:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403614:10
*** ooolpbot has quit IRC14:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]14:10
moguimarlike version, TLS suites, extensions14:10
moguimarauth methods14:10
jaosoriormoguimar: we definitely need better docs for those. Right now the best we have is setting up some configuration parameters for haproxy14:11
jaosoriormoguimar: (we use HAProxy as a TLS proxy)14:11
moguimarcan you point me to those docs?14:11
jaosoriormoguimar: uhm... did I say better docs? I meant to say... docs :D14:12
jaosoriormoguimar: so these are the TLS docs http://tripleo.org/install/advanced_deployment/ssl.html14:12
jaosoriorbut there's no mention of the cipher suite we're using, nor any other option14:12
moguimarok14:13
jaosoriormoguimar: this is where it's set up https://github.com/openstack/puppet-tripleo/blob/master/manifests/haproxy.pp#L13914:13
jaosoriorEmilienM, mwhahaha can you check this out https://review.openstack.org/#/c/549837/ ?14:14
*** ccamacho|lunch is now known as ccamacho14:14
slagleEmilienM: undercloud containers only works in ci b/c quickstart installs the heat deps. it doesn't work otherwise14:14
EmilienMSure14:14
EmilienMslagle : yes because we were waiting to release queens14:14
*** rbowen has left #tripleo14:15
EmilienMslagle : in rocky we'll make deps working out of the box for users14:15
EmilienMslagle : its on my to do for this week. Thank you for the reminder14:15
jaosorioradarazs: should there be the overcloud nodes' logs here https://logs.rdoproject.org/37/549837/2/openstack-check/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-master/Z44fd5fb66c5e48deaf40c2524b9ca764/ ? I don't find them :/14:15
jaosoriormoguimar: trying to get you a sample config (how it looks like when it's deployed)14:16
adarazsjaosorior: hmmm, recently we merged something that might impact this. I will look into it14:17
EmilienMslagle : I'll add you as reviewer.14:18
EmilienMjaosorior: +214:18
adarazsjaosorior: actually looks like the overcloud nodes were unreachable during log collection...14:19
adarazshttps://logs.rdoproject.org/37/549837/2/openstack-check/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-master/Z44fd5fb66c5e48deaf40c2524b9ca764/quickstart_collect_logs.log -> overcloud-controller-0     : ok=0    changed=0    unreachable=1    failed=014:19
jaosoriormoguimar: here's how an actual configuration would look like https://logs.rdoproject.org/54/548554/2/openstack-check/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-master/Z37ae1142f03548c0abaef00607819f10/overcloud-controller-0/var/log/config-data/haproxy/etc/haproxy/14:20
jaosoriormoguimar: if you want, now that you have a deployment, we could go through it tomorrow on your machine.14:20
*** alee has joined #tripleo14:21
*** trown is now known as trown|rover14:21
*** jfrancoa has quit IRC14:27
shardyUI folks, I have a question about UI strings and translations14:27
*** jfrancoa has joined #tripleo14:28
shardysay I wanted to change the plan "Overcloud Information" header to something more generic, e.g "Deployed Plan Information" - how do I sync the translations for the existing strings?14:28
bogdandoshardy: hi! for https://review.openstack.org/#/c/526692 why ony bind_ips?14:29
bogdandoI thought it should apply for all  '::\S+: \{get_param: \[ServiceNetMap' matches14:30
moguimarjaosorior: sounds like a plan14:30
bogdandodon't we want to have hiera interpolation for all hiera params?14:30
bogdandoe.g.  ceph::profile::params::public_addr14:31
shardybogdando: It's quite possible I missed some - in some cases the ServiceNetMap lookup is used for other things, but anywhere we make use of the "magic" translation via NetIpMap should be changed14:31
bogdandook, I've alreday completed the remaining ones, just asking14:31
shardybogdando: the patch needs a rebase but review welcome :)14:31
bogdandonow I'll update the patch :)14:31
jaosoriormoguimar: oh, mind if we do that on friday?14:31
shardybogdando: ack thanks!14:31
moguimarjaosorior: ok14:31
moguimarno worries14:32
*** masco has quit IRC14:32
* mwhahaha poke jrist 14:32
*** ihrachys has joined #tripleo14:33
* jrist ow14:33
*** salmankhan1 has joined #tripleo14:33
*** salmankhan1 has quit IRC14:33
*** salmankhan has quit IRC14:33
mwhahahajrist: you going to show up to your own meeting? :D14:34
openstackgerritBogdan Dobrelya proposed openstack/tripleo-heat-templates master: Convert ServiceNetMap evals to hiera interpolation  https://review.openstack.org/52669214:35
jristyes14:35
openstackgerritDavid Moreau Simard proposed openstack/python-tripleoclient master: [WIP] Use cliff autodoc generation  https://review.openstack.org/52351014:35
openstackgerritDamien Ciabrini proposed openstack/instack-undercloud master: Mariadb online upgrade after yum update  https://review.openstack.org/54756014:36
*** links has quit IRC14:37
EmilienMslagle: to deploy the containerized undercloud, the patch is python-tripleoclient-heat-installer14:37
EmilienMslagle: and I'm working on adding this package by default in Rocky when deploying the tripleoclient14:37
openstackgerritBogdan Dobrelya proposed openstack/tripleo-quickstart master: Run ovb-ha (fs001) with a containerized undercloud  https://review.openstack.org/54255614:38
*** agopi has joined #tripleo14:39
openstackgerritBogdan Dobrelya proposed openstack/tripleo-heat-templates master: undercloud: set cleaning and provisioning networks to 'ctlplane'  https://review.openstack.org/55010014:41
bogdandodtantsur: rolled back to the rev1 and rebased on top of the Steven patch ^^14:41
*** pabelanger has left #tripleo14:41
dtantsurbogdando: nice, thanks14:42
openstackgerritBogdan Dobrelya proposed openstack/tripleo-quickstart master: Run ovb-ha (fs001) with a containerized undercloud  https://review.openstack.org/54255614:43
*** lvdombrkr has quit IRC14:45
*** yurii has quit IRC14:45
*** agopi has quit IRC14:47
*** cshastri has quit IRC14:51
dmsimardthrash|ptg: I saw that https://review.openstack.org/#/c/523510/ had not merged so I just rebased it, it would probably be a nice addition to merge it asap14:52
dmsimardEmilienM, mwhahaha ^14:52
EmilienMdmsimard: ack14:52
dmsimardhttp://logs.openstack.org/10/523510/4/check/build-openstack-sphinx-docs/84f5a24/html/ (new docs)14:52
dmsimardhttp://logs.openstack.org/13/466213/69/check/build-openstack-sphinx-docs/33b6710/html/ (old docs)14:52
*** salmankhan has joined #tripleo14:52
*** ramishra has quit IRC14:54
*** mathlin has left #tripleo14:55
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: FFU: Introduce fluentd fast-forward-upgrade tasks  https://review.openstack.org/54598614:55
*** mmethot has quit IRC14:57
*** mmethot has joined #tripleo14:57
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: FFU: add fast forward upgrade support for sensu client  https://review.openstack.org/54987914:59
toured0ugal meeting?14:59
d0ugaltoure: yes, just getting there.14:59
toureah14:59
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: ffu: Introduce Neutron fast-forward upgrade tasks  https://review.openstack.org/52154314:59
d0ugalrbrady,d0ugal,apetrich,thrash,toure,jtomasek: Workflow Squad meeting now! https://etherpad.openstack.org/p/tripleo-workflows-squad-status14:59
d0ugalSorry for the lack of ping. I'll wait 5 mins before we get started.15:00
*** HoloIRCUser2 has quit IRC15:00
openstackgerritMartin Mágr proposed openstack/tripleo-common master: Add healthcheck script for libvirtd  https://review.openstack.org/55049215:01
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: FFU: Introduce Aodh fast-forward-upgrade tasks  https://review.openstack.org/53930715:02
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: Add fast_forward_upgrade_tasks for ceilometer services  https://review.openstack.org/53372915:03
*** migi has quit IRC15:04
slagleEmilienM: is "openstack undercloud install --use-heat" supposed to work?15:06
mwhahahait should15:06
slagleit does not15:06
slaglethat's why i was asking15:06
mwhahahais that not what we're testing in ci?15:07
slagleNope15:07
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: ffu: Add fast-forward upgrade tasks to ovs-dpdk.  https://review.openstack.org/55049515:07
mwhahahathought we fixed that15:07
mwhahaha:(15:08
slaglewhy would we do that. ci what we document15:08
mwhahahaor test anything15:08
fultonjmwhahaha: regarding https://bugs.launchpad.net/tripleo/+bug/1754061 , who a good person to help with zaqar ?15:08
openstackLaunchpad bug 1754061 in tripleo "zaqar returns 503 causing overcloud deployment failure" [High,Triaged]15:08
*** bnemec has joined #tripleo15:08
*** rlandy has quit IRC15:09
shardyThe undercloud-containers job still tests undercloud deploy, because it pre-dates the --use-heat option I think15:09
mwhahahafultonj: therve maybe?15:09
*** rlandy has joined #tripleo15:09
openstackgerritCarlos Camacho proposed openstack/tripleo-heat-templates stable/ocata: DO NOT MERGE: Testing I7bcc18445f3263128a9bff29a057f172af143c90  https://review.openstack.org/55048015:09
bogdandoshardy: what do you mean?15:09
mwhahahashardy: yea but we had patches to add the --use-heat support in oooq15:10
shardyhttp://logs.openstack.org/72/538872/2/check/tripleo-ci-centos-7-undercloud-containers/34732e9/logs/undercloud/home/zuul/undercloud-install.sh.txt.gz15:10
*** rlandy has quit IRC15:10
*** ooolpbot has joined #tripleo15:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION15:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403615:10
*** ooolpbot has quit IRC15:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]15:10
shardybogdando: ^^15:10
*** morazi has quit IRC15:10
slagle--use-heat is entirely non-functional, b/c it does not accept -e, so you can't pass the needed container params to it15:10
bogdandothe client translates --use-heat into undercloud deploy invocation , right15:10
bogdandotight15:10
bogdandoright*15:10
mwhahahaslagle: you shouldn't be using -e with install, you use the undercloud.conf to pass additional items in15:10
bogdandoI thought that was made by intention, as install prefers config file15:10
mwhahahaslagle: it's supposed to maintain the undercloud.conf as the interface like instack-udnercloud15:11
slaglemwhahaha: how do I tell it what contaier images to use?15:11
bogdandoand should be very short on command line options15:11
mwhahahathere is a new config param15:11
shardyslagle: it's a shim to provide CLI compatibility with normal undercloud install, see that log for how to drive undercloud deploy, which does accept -e15:11
bogdandoas it is not very clear how to take a precedence or something?..15:11
mwhahahano there' s anew undercloud.conf setting to include files15:11
* mwhahaha goes and looks15:11
bogdandoand just to not repeat itself basically15:11
shardyundercloud install --use-heat just shells out and calls undercloud deploy internally anyway15:11
bogdandoso my understanding is we want expose config options for install only, and sometimes maintain them for deploy CLI derivative as well, yet as the command line opts... but not for both15:12
mwhahahaslagle: https://github.com/openstack/python-tripleoclient/blob/master/tripleoclient/v1/undercloud_config.py#L36915:12
bogdandoI may be wrong15:12
mwhahahacustom_env_files15:12
bogdandodprince: hi! ^^ any comments please?15:12
mwhahahainstall uses undercloud.conf and will generate the appropriate undercloud deploy action15:12
bogdandoyes15:12
mwhahahawe do not want to force people to pass -e15:13
bogdandoand there is no need to dup those for CLI :>15:13
fultonjtherve: have you seen zaqar return 503s like this https://bugs.launchpad.net/tripleo/+bug/1754061 ?15:13
openstackLaunchpad bug 1754061 in tripleo "zaqar returns 503 causing overcloud deployment failure" [High,Triaged]15:13
bogdandoIMO15:13
fultonjgfidente: ^15:13
mwhahaha-e -e -e -e -e is not user friendly15:13
slaglewhat about -e -e -e -e -e -e15:14
mwhahahahow many customers have accidnetly forgotten a -e15:14
bogdandoslagle ^^ CI does testing for undercloud install --use-heat15:14
mwhahahaand broken their deploy15:14
bogdandobut given the nuanced context above15:14
bogdandohm, http://logs.openstack.org/72/538872/2/check/tripleo-ci-centos-7-undercloud-containers/34732e9/logs/undercloud/home/zuul/undercloud-install.sh.txt.gz looks weird15:15
shardymwhahaha: I get your point but it's just as possible to break your deploy with one big config file (or puppet manifest, or giant collection of ansible roles)15:15
shardythere are pros/cons to each interface15:15
bogdandoI though we fixed that :D15:15
mwhahahashardy: yea but having a mile long cli command is never user friendly15:16
shardyI'm pleased we've got undercloud deploy as an option that's close to compatibility with overcloud deploy15:16
slagleok. so then --use-heat is not compatible with existing undercloud.conf's15:16
mwhahahaso we still have it, but to use undercloud install it is driven via undercloud.conf15:16
mwhahahaslagle: yes it is15:16
slagleyou have to modify an existing one15:16
mwhahahawe expose the exact same params and they are translated15:16
bogdandobasically, here it does http://logs.openstack.org/44/517444/83/check/tripleo-ci-centos-7-undercloud-containers/804e374/logs/undercloud/home/zuul/undercloud-install.sh.txt.gz15:16
mwhahahaonly if you want something more advanced15:16
*** radeks has quit IRC15:16
shardymwhahaha: yeah, but you can have a short CLI and a directory full of environment files, or one giant environment file if you want15:16
slagleno15:16
mwhahahaif it isn't completely compatible that's a bug15:16
bogdandoso I thought it keeps doing so after that patch...15:16
* bogdando sigh...15:17
mwhahahaslagle: what env file do you need15:17
*** radeks has joined #tripleo15:17
slaglemwhahaha: if you don't pass a custom env file for conatiner parameters, the install fails15:17
mwhahahaslagle: ok that's a bug then, log it15:17
bogdandoplease disregard, it doesn't . I'm really lost now :D15:17
gfidentefultonj mwhahaha yeah I think the queue is missing in zaqar, probably honza can help15:17
mwhahahagfidente: it seems to be a race condition of some sort, though not sure why we would fail a deploy because ui logging isn't available15:17
bogdandoah yes, that one http://logs.openstack.org/45/517445/68/check/tripleo-ci-centos-7-undercloud-containers/440d30e/logs/undercloud/home/zuul/undercloud-install.sh.txt.gz15:18
gfidentemwhahaha yeah the workflow exits on the 50315:18
bogdandoso, since that one it is supposed to --use-heat... things look very broken15:18
* slagle backs away quickly after lobbing grenade15:20
* mwhahaha throws it back at slagle15:20
mwhahahaTAG YOUR IT15:20
bogdandohttps://trello.com/c/WDuE111B/46-fix-undercloud-containers-job-predating-use-heat15:20
mwhahahaalso you're*15:21
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: Add fast_forward_upgrade_tasks for ceilometer services  https://review.openstack.org/53372915:21
openstackgerritBen Nemec proposed openstack/instack-undercloud master: Don't double load config  https://review.openstack.org/54806115:22
slaglemwhahaha: https://bugs.launchpad.net/tripleo/+bug/175406715:25
openstackLaunchpad bug 1754067 in tripleo "openstack undercloud install --use-heat fails when no container image parames provided" [High,Triaged]15:25
*** wolverineav has joined #tripleo15:25
openstackgerritMerged openstack/puppet-tripleo stable/pike: Ensure ip_forward set before Docker  https://review.openstack.org/55029015:25
*** cdearborn_ has joined #tripleo15:25
mwhahahai think that's part of the stuff stevebaker is working on to do the container discovery via a workflow15:25
mwhahahaas well15:25
mwhahahabut yea we should have a default or something so it doesn't have to be passed in15:26
bogdandoslagle:15:27
bogdando> --use-heat is entirely non-functional, b/c it does not accept -e, so you can't pass the needed container params to it15:27
bogdandofor the record, we do that with undercloud_custom_env_files15:27
slaglebogdando: ok, recorded :)15:27
slaglebogdando: however, the docs don't tell you to do any of that15:27
bogdandoslagle: yes, the docs a fall behind...15:27
mwhahahadocument all the things!15:28
openstackgerritHamdy Khader proposed openstack/puppet-tripleo master: Enable networking-mlnx ml2 drivers  https://review.openstack.org/55050515:28
openstackgerritRajesh Tailor proposed openstack/tripleo-common master: Add healthcheck script for nova-metadata service  https://review.openstack.org/54275415:28
*** owalsh_ has joined #tripleo15:28
*** wolverineav has quit IRC15:29
*** guits_ has quit IRC15:29
bogdandothere is a README tho, which is not so nice as tripleo docs ofc...15:29
openstackgerritSteven Hardy proposed openstack/tripleo-heat-templates master: Add deploy_status to plan-environment  https://review.openstack.org/55050615:29
openstackgerritHamdy Khader proposed openstack/puppet-tripleo master: Enable networking-mlnx ml2 drivers  https://review.openstack.org/55050515:30
honzagfidente: fultonj mwhahaha looking into the zaqar queue right now15:30
shardyslagle: interested in your opinion re ^^ - it's something jtomasek asked for last week, as the UI can no longer poll the heat stack status on page refresh to get the plan deploy status15:30
gfidentehonza++15:30
shardyslagle: if you're OK with the idea, I'll go ahead and wire in the status updates in the mistral workflows15:30
*** owalsh has quit IRC15:31
slagleshardy: i think the UI should just use the zaqar queue setup by config_download_deploy (like the client)15:31
shardymaybe we also need a plan_deploy_status_reason?15:31
shardyslagle: yes I said the same, but what if the UI is launched after a failure, and the zaqar queue is empty?15:32
shardyit's not the realtime updates that are needed in that case, it's a poll of the status, and we don't have that persisted anywhere anymore15:32
shardyas the stack status is only half the story, and the worklflow-executions don't persist forever15:33
gfidentemarios I wonder if it wouldn't have been better to stay stuck in dublin for another couple of days drinking15:33
mariosgfidente: in a call but i heard dublin and drinking so yes15:33
slagleshardy: ok, i see the need then15:33
slagleshardy: i wonder if we shouldn't just also log the realtime events to swift15:34
shardyslagle: yeah I wondered the same, particularly since zaqar is already using swift15:34
shardyI couldn't see a way to make zaqar do that, but I didn't look very closely15:34
shardymaybe we could abstract the messages and log to swift directly, then to zaqar?15:35
*** ramishra has joined #tripleo15:35
shardythat would certainly be cleaner than trying to wire in explicit status updates everywhere15:35
slagleyea, perhaps15:35
slaglewe do already have the ansible log file under /var/lib/mistral15:36
slaglewe could add the path to that in plan-environment.yaml15:36
shardyYeah that would help, but I wonder if scraping an ansible log file will be too fragile vs a definitive plan status?15:36
*** ramishra has quit IRC15:37
openstackgerritHamdy Khader proposed openstack/tripleo-heat-templates master: Add environment file for Mellanox SDN  https://review.openstack.org/55050715:37
*** b00tcat has quit IRC15:37
openstackgerritMartin Mágr proposed openstack/tripleo-common master: [WIP] Activate another set of healthchecks  https://review.openstack.org/55050815:38
*** b00tcat has joined #tripleo15:38
*** trown|rover is now known as trown|brb15:38
dprinceslagle: that would require the user to shell into the Undercloud to get it right? (/var/lib/mistral). An API or remote way of getting at it would be better15:38
bogdandomwhahaha: yeah, we even have a trello card for that! https://trello.com/c/BQ1606lD/6-documentation :D15:38
shardydprince: yea we need an API for the UI to consume15:39
slagledprince: it's already under /var/lib/mistral15:39
openstackgerritMartin Mágr proposed openstack/tripleo-common master: Add healthcheck script for libvirtd  https://review.openstack.org/55049215:39
dprincebogdando: I commented on the LP btw.15:39
dprincebogdando: https://bugs.launchpad.net/tripleo/+bug/175406715:39
* shardy wonders about ara integration via tripleo-ui15:39
openstackLaunchpad bug 1754067 in tripleo "openstack undercloud install --use-heat fails when no container image parames provided" [High,Triaged]15:39
slagleshardy: the bubbled up deploy_status is fine with me15:39
*** cdearborn has quit IRC15:40
*** guits_ has joined #tripleo15:41
openstackgerritMerged openstack/python-tripleoclient stable/queens: Add generic method for preserving plan files, use for user-environment.yaml  https://review.openstack.org/55003215:41
shardyslagle: ack, well I guess we can add that regardless of any subsequent event/task status we persist elsewhere15:41
*** skramaja has quit IRC15:41
shardyara does look interesting because it can persist task status to a database, which could presumably be used as a backend for future queries15:42
trozetgfidente, dmsimard: have you ever seen an issue with puppet-ceph where during the key import in (key.pp) the caps mon is somehow missing in the keyring file?  It happens like 1/3 times we deploy with Pike (Error EINVAL: auth import: no caps supplied).  If I run the puppet again the ceph authtool adds the caps mon to the file.15:42
openstackgerritMartin Mágr proposed openstack/tripleo-heat-templates master: Enable libvirt health check  https://review.openstack.org/55051015:42
dprincebogdando, slagle: per the comments on https://review.openstack.org/#/c/550060/ I think we also have https://review.openstack.org/#/c/550081 to satisfy the baremetal support concerns. Aside from that I can "zero" out the environments/services-docker files. Any other concerns?15:43
shardyslagle: maybe we could use the same approach but just have a callback plugin that writes task status to swift?15:44
shardymaybe I'll try that after adding the status to the workflows15:44
*** agopi has joined #tripleo15:45
*** udesale has quit IRC15:45
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates master: FFU: Introduce post FFU steps and use them for queens switch.  https://review.openstack.org/54778515:46
bogdandoslagle: hm, looking onto that 'net_config_override = net-config-override.json', seems another thing to fix in quickstart? See http://codesearch.openstack.org/?q=undercloud_resource_registry_args&i=nope&files=&repos= ? IMO, it should only generate undercloud-parameter-defaults.yaml.j2 from undercloud_resource_registry_args and undercloud_network_environment_args, when there is no network_environment_file (removed as not used!) , which in15:46
bogdandoturns then ends up in underlcoud.conf net_config_override??15:46
*** trown|brb is now known as trown|rover15:46
slagledprince: 550060 needs a realease note15:47
jtomasekslagle, shardy: so GUI needs a way to determine the status of config-download deployment at any point of time. Ideally, there would be a mistral workflow/action to determine it by looking at some data/files which exist when config-download is not run| failed | succeeded15:47
slaglebogdando: not following15:47
dprinceslagle: I can do that... I had assumed Juan's patch would cover it I guess15:48
bogdandoslagle: I took that from your bug report. Does that net_config_override in undercloud.conf works for you for undercloud containers?15:48
shardyjtomasek: ack, I think we can add that status to the plan as we discussed last week, but the remaining question is where we store the ansible task output, e.g it'd be really nice for the UI to expose playbook run information similar to how ara does it15:48
slaglebogdando: don't know yet. if not, then that would be a separate bug15:49
dmsimardtrozet: I unfortunately haven't dealt with puppet-ceph in several years, sorry :(15:49
bogdandoslagle: right. So I described the quickstartish config path15:49
trozetdmsimard: lucky you :)15:49
bogdandowe can fix that to follow net_config_override15:49
slaglebogdando: we can't break existing interfaces in undercloud.conf. it doesn't have anything to do with quickstart15:49
bogdandoand quickstart still has to follow right interfaces, to do that users would normally do15:50
bogdandoso I'm asked15:50
bogdandoshall I rewrite it? it seems so. And, yes. The 2nd thing to make that working (if it's not) is fixing the client to use that net_config_override conf option right15:51
jtomasekshardy: I am not saying that putting that info into plan-environment is bad, I quite like it, although it forces us to ensure that we update it in different actions (redeploy-scale up, undeploy, etc.) ideally there would be a natural way to get the information such as heat api call with heat status15:51
*** dpawar has joined #tripleo15:52
*** dpawar has quit IRC15:52
jtomasekhaving that information in plan-environment also makes export of the plan problematic as in case we export deployed plan, the config-download status is going to be there too, and it won't be relevant when that plan is reimported15:52
jtomasekshardy: ^15:52
*** dpawar has joined #tripleo15:53
bogdandodprince: it seems it will be enough to fix bz 1549770 in upstream-first fashion, right15:53
shardyjtomasek: that sounds easily solvable but yeah15:53
jtomasekshardy, slagle: is there a way to ask ansible if there is related playbook run? or is that only supplied by ansible tower and ansible itself does not log runs in any db?15:53
slaglejtomasek: none that I know of when just using ansible15:54
shardyd0ugal: ^^ can you suggest any other way to persist the status of a workflow for later inspection, given that executions expire?15:54
shardyit'd be cool if mistral could e.g update the workflow environment, or some other place, with the status of each run of a particular workflow15:55
shardybut then we'd need a workflow which knows all the possible workflows to check for status...15:55
jtomasekI thought we're using mistral environment to store some data for config-download?15:55
*** myoung|ruck is now known as myoung|ruck|brb15:55
shardyjtomasek: that's what ara does, you configure a callback so the status is written to a sqlite db15:55
shardyso that could potentially be reused here I guess15:55
bogdandowonderful, it took less than a hour to see how world is broken for undercloud containers15:56
shardybut yeah unless you use tower there's nothing built into ansible that does this AFAIK, it's a "run once" tool15:56
slaglecan we configure mistral to not expire certain executions15:57
jtomasekd0ugal: ^15:57
shardyexecution_expiration_policy is global in the conf I think15:57
slagleb/c then we could write the execution id to plan-environment.yaml15:58
bogdandodo we have any tox experts around? this fails http://logs.openstack.org/75/542875/38/check/openstack-tox-py27/f8863fe/job-output.txt.gz#_2018-03-07_13_01_27_859047 though works for my local env...15:58
shardyand also we'd want to expire executions related to a specific plan on deleting the plan, or some way to clean up15:58
jtomasekslagle: we would not even have to do that, we can fetch executions, filter by name, get latest to get to the relevant status15:58
cschwede_chandankumar, myoung|ruck|brb re: https://bugs.launchpad.net/tripleo/+bug/1754036 - is it possible to get access to the reproducer?15:58
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]15:58
bogdandoor rather py unit test experts :S15:59
shardyah yeah tracking the id could work15:59
slaglejtomasek: that's very hacky though15:59
trown|roverdoes anyone have ceph deployment troubleshooting docs handy?15:59
jtomasekslagle: GUI is tracking all executions and storing them in memory already15:59
jtomasekwe use executions to find out validations results15:59
openstackgerritBob Fournier proposed openstack/tripleo-heat-templates master: Add check for old-style nic config files  https://review.openstack.org/55020116:00
*** mdnadeem has quit IRC16:00
jtomasekwhen I think if it it is exactly the same mechanism16:00
jtomasek(we also suffer there from expiring executions)16:00
fultonj-e is for easy16:00
*** ratailor has joined #tripleo16:03
*** morazi has joined #tripleo16:03
*** aufi has quit IRC16:05
*** morazi has quit IRC16:05
d0ugalshardy, slagle, jtomasek - mistral isn't really designed for long term storage.16:06
*** jfrancoa has quit IRC16:06
d0ugalso I guess your options are logs, swift or mistral environments16:07
shardyd0ugal: yeah just trying to find the best way around that :)16:07
*** elgxl_ has joined #tripleo16:07
d0ugalwhat problem are we trying to solve?16:08
bogdandowrt that _wait_for_heat_complete' ^^ shall I put @staticmethod or something? I'm still not sure why it passes locally...16:08
*** jfrancoa has joined #tripleo16:08
shardyd0ugal: at any time after a plan is deployed, we need to be able to check the status16:08
bogdandoor rename it to wait_for_heat_complete?16:08
openstackgerritJose Luis Franco proposed openstack/tripleo-upgrade master: Include new CLI changes for overcloud update.  https://review.openstack.org/55051716:08
shardyd0ugal: we can't rely on the heat stack status anymore, because it doesn't consider the configuration phase via ansible16:08
shardyd0ugal: so we're looking for an alternative place to persist (and then poll for) status16:08
shardyof the plan as a whole, not just the stack16:09
d0ugalshardy: right, so we don't currently store it anywhere?16:09
shardyd0ugal: No, only the workflow execution status, which isn't persistent16:09
shardyand an ansible logfile16:09
shardythat is the problem we're trying to solve :)16:09
d0ugalRight16:09
bogdandoI thought priv methods mocking works w/o special dances...16:09
d0ugalshardy: Storing it in swift with the plan itself seems most logical to me.16:09
trown|roverfultonj: I think you shared some troubleshooting doc for for tripleo ceph deployment, but I cant find it atm... do you know what I am talking about?16:10
*** ooolpbot has joined #tripleo16:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION16:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403616:10
*** ooolpbot has quit IRC16:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]16:10
*** pcaruana has quit IRC16:10
fultonjtrown|rover: http://blog.johnlikesopenstack.com/2017/09/debug-tripleo-ceph-ansible.html16:10
trown|roverfultonj: awesome that is it thanks!16:10
fultonjtrown|rover: i also updated the tripleo docs about enabling debug16:10
fultonjok, glad i can help16:11
shardyd0ugal: Ok thanks for the feedback, I'll push a patch adding status updates to the workflow & see how folks like it16:11
fultonjtrown|rover: https://docs.openstack.org/tripleo-docs/latest/install/advanced_deployment/ceph_config.html#override-ansible-run-options16:11
*** elgxl has quit IRC16:11
slagled0ugal: shardy : we could bulk upload all of /var/lib/mistral/{uuid} to the plan in swift at the conclusion of the execution16:11
shardyslagle: yeah I was wondering if we could enable ara then upload the sqlite DB it creates for later use16:12
shardyvs scraping logfiles16:13
shardybut either could work I guess16:13
*** agopi has quit IRC16:13
d0ugalSo the information we need to persist is in the ansible log files? Can we get the data in a more structured way?16:13
shardywe'd still need some easily queryable status flag though I think, vs scraping logfiles etc to just say "failed" or whatever16:13
*** agopi has joined #tripleo16:13
slagleshardy: i think you'll still want to record the final status from within the execution16:14
shardyd0ugal: yes that's what ara does, it creates a sqlite db from the ansible output via a callback, then gives you a Ux on top of it16:14
shardyd0ugal: but there's nothing baked into ansible that does it AFAIK16:14
shardyslagle: ack yeah, I'll go ahead and wire that in then & we can decide the next steps after as I think this is blocking jtomasek16:15
d0ugalshardy: oh, cool - I am not familiar with ara. I'll take a look. We could query the ara database and grab the data we want out of it? rather than just uploading a sqlite database somewhere16:15
*** chlong_ has joined #tripleo16:16
shardyd0ugal: the ara database is just an sqlite file AFAICS16:16
*** elgxl has joined #tripleo16:16
shardyhttps://github.com/openstack/ara16:17
*** myoung|ruck|brb is now known as myoung|ruck16:17
myoung|ruckcschwede_: yup! please send me your key16:18
*** elgxl has quit IRC16:19
*** elgxl has joined #tripleo16:20
*** elgxl_ has quit IRC16:20
*** elgxl has quit IRC16:21
*** elgxl has joined #tripleo16:21
openstackgerritMerged openstack/tripleo-heat-templates master: Fix default nic config file names  https://review.openstack.org/54980416:21
openstackgerritMerged openstack/tripleo-validations master: Deprecate ini formatted static-inventory  https://review.openstack.org/54902116:21
openstackgerritMerged openstack/tripleo-validations master: Improve exceptions in tripleo-ansible-inventory  https://review.openstack.org/54807416:21
openstackgerritMerged openstack/tripleo-heat-templates master: Adding a workaround for enabling steering in ConnectX-3 devices  https://review.openstack.org/54659016:21
openstackgerritMerged openstack/os-net-config master: Adding the class and mac approach as dpdk-devargs in mellanox ConnectX-3  https://review.openstack.org/53915516:21
openstackgerritMerged openstack-infra/tripleo-ci master: Get tripleo-upgrade taken into account by zuul.  https://review.openstack.org/54859216:21
*** rlandy has joined #tripleo16:23
d0ugalshardy: Do you happen to know where the sqlite file is stored?16:23
shardyd0ugal: it's configurable, so we could potentially write it per-execution like the logs16:25
shardyhttps://ara.readthedocs.io/en/latest/configuration.html#ara-dir16:26
openstackgerritMichele Baldessari proposed openstack/puppet-tripleo master: Fix stack update with rabbitmq containers  https://review.openstack.org/54978716:26
d0ugalshardy: I'm wondering if a set of Mistral actions to query it could be useful16:27
d0ugalPossibly wrapping the ara CLI would be better than the database directly.16:27
*** yurii has joined #tripleo16:29
*** waleedm has quit IRC16:31
jtomasekslagle, shardy, d0ugal: we'll definitely get to the point when we'll need general mechanism to track ansible runs status. the more we use ansible the more we'll srart hitting this type of problems, It would be good to consider using ansible tower as soon as possible rather than trying to integrate it later16:31
jtomasekwhich will be much harder16:31
shardyd0ugal: yeah, and it's GPL so probably shelling out would be safer from a licence perspective16:32
jtomasek(in case that ansible tower nicely solves the problem of course)16:32
*** yurii has quit IRC16:33
*** dparkes has quit IRC16:33
*** itlinux has joined #tripleo16:35
*** leanderthal has quit IRC16:35
openstackgerritJose Luis Franco proposed openstack/tripleo-upgrade master: WIP: New major upgrade workflow implementation.  https://review.openstack.org/54833616:36
*** yurii has joined #tripleo16:37
*** nyechiel has quit IRC16:37
*** shreshtha has quit IRC16:37
*** ykarel_ has quit IRC16:38
*** weshay is now known as weshay|PTO16:38
*** dhill__ has joined #tripleo16:38
*** dhill_ has quit IRC16:39
*** nyechiel has joined #tripleo16:40
*** olivierbourdon38 has quit IRC16:40
slaglejtomasek: it's something to consider16:40
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: Adds fast_forward_upgrade_tasks for Heat services  https://review.openstack.org/53095616:41
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: FFU: Upgrades: fix pacemaker checks  https://review.openstack.org/54778916:42
jtomasekit would also solve the validation results persistence as we'd fetch ansible runs instead of mistral executions16:42
*** marrusl has joined #tripleo16:43
*** ebarrera has quit IRC16:45
openstackgerritJose Luis Franco proposed openstack/tripleo-upgrade master: [DNM]: Apply workaround for P->Q upgrades.  https://review.openstack.org/54922016:46
*** mcornea has quit IRC16:46
bogdandohm, for some pathches --use-heat was not predated http://logs.openstack.org/34/550334/2/check/tripleo-ci-centos-7-undercloud-containers/e799242/logs/undercloud/home/zuul/undercloud-install.sh.txt.gz16:47
bogdandowhat a mess16:47
mwhahahayea i thought we had fixed that16:47
*** zshi has quit IRC16:47
mwhahahaso it seems we've pasted over the containers environment requirement in oooq16:47
mwhahahasince it's using containers_images_file and custom_env_files http://logs.openstack.org/34/550334/2/check/tripleo-ci-centos-7-undercloud-containers/e799242/logs/undercloud/home/zuul/undercloud.conf.txt.gz16:48
bogdandoI can't follow :(16:49
bogdandocould you elaborate?16:49
mwhahahaso we need to document these new params16:49
mwhahahaas they are now required16:49
mwhahahaso it should actually fail if they are not configured16:49
mwhahahathat being said, it's a deviation from the previous configuration file so old files don't just work16:50
mwhahahathat was slagle's point where if i used my undercloud.conf from instack-undercloud with --use-heat it fails16:50
bogdandoright, well, first of all I'd like to understand if we always have --use-heat for undercloud-containers job or not16:50
mwhahahawe should16:50
mwhahahaif we aren't that's a bug16:50
bogdandookay than, cuz I was lika waaaat16:50
mwhahahai had remembered the efforts to switch to it16:51
bogdandothen*)16:51
mwhahahaso what we're missing is the makigng at least the containers_images_file required16:51
mwhahahaso if it's not set, fail quick16:51
mwhahahawith a valid error message indicating you need to provide it16:51
mwhahahaalso we need to update tripleo-docs to say how you generate that file for it16:51
*** ratailor has quit IRC16:51
mwhahahawe're doing it automagically in oooq but we should document what is actually required16:51
mwhahahawe wrote the automation code prior to documenting the actual steps16:52
mwhahahawhich is backwards16:52
bogdandoyes, ack. I think the scope of https://bugs.launchpad.net/tripleo/+bug/1754067 works16:52
openstackLaunchpad bug 1754067 in tripleo "openstack undercloud install --use-heat fails when no container image parames provided" [High,Triaged]16:52
shardyjtomasek: how does the UI update the "environments" list in the plan-environment?16:52
*** sanjayu has joined #tripleo16:53
shardyAFAICS it's not possible via the UpdatePlanEnvironmentAction, that expects all keys to reference a map of key/value pairs16:53
jtomasekshardy: using updateCapabilities action (iirc the name)16:53
bogdandomwhahaha: thanks , looks clear now :)16:53
mwhahahabogdando: np16:53
* jtomasek checks16:53
shardyjtomasek: ack thanks, I was confused because UpdatePlanEnvironmentAction says in the docstring env_key can be e.g environments but that appears to be wrong16:54
openstackgerritRonelle Landy proposed openstack/tripleo-quickstart master: Test feature sets with downstream  https://review.openstack.org/53645716:54
shardymaybe we can fix it though16:54
openstackgerritRonelle Landy proposed openstack/tripleo-quickstart-extras master: Add steps to allow downstream to use featuresets  https://review.openstack.org/53645216:54
*** mcornea has joined #tripleo16:56
jtomasekshardy: btw. there is currently a bug related to UpdateCapabilitiesAction https://bugzilla.redhat.com/show_bug.cgi?id=154172116:57
openstackbugzilla.redhat.com bug 1541721 in openstack-tripleo-ui "Changes in Basic plan configuration leads to incorrect order of env files upon deployment" [Urgent,Assigned] - Assigned to jtomasek16:57
*** mburned is now known as mburned_out16:57
jtomasekshardy: we'd need to make it more robust - respect capabilities map to determine the order of environment files16:57
jtomasekI am going to update the bug with relevant info16:57
*** fragatin_ has quit IRC16:58
*** guits_ has quit IRC16:59
*** yurii has quit IRC17:00
*** agopi has quit IRC17:00
*** elgxl has quit IRC17:00
shardyjtomasek: ack - I think UpdatePlanEnvironmentAction is a better fit for status, so I'll just change the status to be a map with status/reason keys17:00
shardyor maybe update the action to handle non-map values17:00
*** zshi has joined #tripleo17:01
*** elgxl has joined #tripleo17:02
*** elgxl has quit IRC17:02
*** fragatina has joined #tripleo17:03
openstackgerritRaoul Scarazzini proposed openstack/tripleo-quickstart-extras master: Fix the pkg installation in BM undercloud  https://review.openstack.org/55053017:03
*** yprokule has quit IRC17:04
*** agopi has joined #tripleo17:04
*** agopi has quit IRC17:05
*** fragatina has quit IRC17:06
openstackgerritJose Luis Franco proposed openstack/tripleo-upgrade master: Include new CLI changes for overcloud update.  https://review.openstack.org/55051717:07
*** jfrancoa has quit IRC17:09
*** ooolpbot has joined #tripleo17:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION17:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403617:10
*** ooolpbot has quit IRC17:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]17:10
openstackgerritJiri Tomasek proposed openstack/tripleo-ui master: Fix ModalPanel in Firefox  https://review.openstack.org/55053617:10
*** gkadam has quit IRC17:11
openstackgerritMerged openstack/tripleo-quickstart-extras master: Stop skipping volume encryption test  https://review.openstack.org/54983717:16
openstackgerritMerged openstack/tripleo-heat-templates stable/ocata: Fix networking settings for ObjectStorage role pt 2  https://review.openstack.org/54172117:16
*** janki has quit IRC17:18
*** tvignaud has quit IRC17:18
slaglebogdando: net_config_override definitely doesn't work. do you want me to file a bug or are you already tracking this?17:18
bogdandoslagle: I have yet started tracking that in LP. Just put a notes17:19
bogdandoso please do17:20
*** florianf has quit IRC17:21
slaglebogdando: https://bugs.launchpad.net/tripleo/+bug/175410217:22
openstackLaunchpad bug 1754102 in tripleo "openstack undercloud install --use-heat does not honor net_config_override from undercloud.conf" [High,Triaged]17:22
*** olivierbourdon38 has joined #tripleo17:23
*** olivierbourdon38 has quit IRC17:23
*** olivierbourdon38 has joined #tripleo17:24
*** olivierbourdon38 has quit IRC17:24
*** olivierbourdon38 has joined #tripleo17:26
*** gvrangan has joined #tripleo17:26
*** chlong_ has quit IRC17:26
*** cshastri has joined #tripleo17:27
*** zoli is now known as zoli|gone17:27
*** zoli|gone is now known as zoli17:27
EmilienMdtantsur: hey17:31
*** fragatina has joined #tripleo17:31
EmilienMdtantsur: I was looking at my diff between old / new config for ironic https://www.diffchecker.com/TW7QnbI017:31
EmilienMdtantsur: and https://etherpad.openstack.org/p/XZ07CeAa4B17:32
*** yamahata has quit IRC17:32
*** olivierbourdon3- has joined #tripleo17:32
EmilienMdtantsur: I was wondering if the other options (on the left, in red), not in your etherpad could stay17:32
EmilienM(FWIW, they are here now when undercloud is deployed everywhere)17:32
*** olivierbourdon3- has quit IRC17:32
*** olivierbourdon3- has joined #tripleo17:32
*** olivierbourdon38 has quit IRC17:33
*** dpawar has quit IRC17:33
openstackgerritPradeep Kilambi proposed openstack/tripleo-heat-templates master: FFU: Introduce collectd fast-forward-upgrade tasks  https://review.openstack.org/55054417:36
*** ffiore_ has quit IRC17:37
*** agopi has joined #tripleo17:38
*** ebarrera has joined #tripleo17:39
*** myoung|ruck is now known as myoung|lunch17:40
*** salmankhan has quit IRC17:41
*** salmankhan has joined #tripleo17:42
*** jpena is now known as jpena|off17:42
*** salmankhan has quit IRC17:43
*** salmankhan has joined #tripleo17:43
*** fragatina has quit IRC17:44
openstackgerritMerged openstack/tripleo-common master: Always load rsyslog-base container  https://review.openstack.org/52152917:45
openstackgerritMerged openstack/puppet-tripleo stable/queens: Ensure ip_forward set before Docker  https://review.openstack.org/55028917:45
*** lucasagomes is now known as lucas-afk17:47
dtantsurEmilienM: hey, having dinner now, will answer in a few minutes17:50
EmilienMdtantsur: no pressure, it can wait later. Bon apétit!17:50
*** salmankhan1 has joined #tripleo17:52
*** bogdando has quit IRC17:53
*** salmankhan has quit IRC17:55
*** salmankhan1 is now known as salmankhan17:55
*** pcaruana has joined #tripleo17:57
*** ykarel_ has joined #tripleo17:58
*** gvrangan has quit IRC17:58
*** b00tcat has quit IRC17:58
*** wolverineav has joined #tripleo17:58
openstackgerritMerged openstack/tripleo-heat-templates master: Add KernelIpForward configuration  https://review.openstack.org/54840117:59
openstackgerritMerged openstack/tripleo-common stable/pike: Retry the check_default_nodes_count workflow for 2 minutes  https://review.openstack.org/53432517:59
openstackgerritMerged openstack/tripleo-heat-templates master: FFU: Add memcached fast forward upgrade tasks  https://review.openstack.org/54778817:59
*** derekh has quit IRC18:00
*** agopi has quit IRC18:00
*** SlickNik has quit IRC18:02
openstackgerritMerged openstack/instack-undercloud stable/queens: Install and enable neutron baremetal ML2 and L2 agent  https://review.openstack.org/55023418:02
openstackgerritMerged openstack/tripleo-heat-templates stable/newton: Zuul: Remove project name  https://review.openstack.org/54357518:02
*** chlong_ has joined #tripleo18:02
*** tvignaud has joined #tripleo18:02
*** fragatina has joined #tripleo18:03
openstackgerritAlex Schultz proposed openstack/python-tripleoclient master: Make container_images_file required  https://review.openstack.org/55055218:04
*** trown|rover is now known as trown|lunch18:08
*** ooolpbot has joined #tripleo18:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION18:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403618:10
*** ooolpbot has quit IRC18:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]18:10
*** cshastri has quit IRC18:10
*** marios has quit IRC18:10
openstackgerritRaoul Scarazzini proposed openstack/tripleo-quickstart-extras master: Fix the pkg installation in BM undercloud  https://review.openstack.org/55053018:12
*** agopi has joined #tripleo18:14
*** pblaho has quit IRC18:15
*** ykarel_ has quit IRC18:18
*** pchavva has quit IRC18:19
dtantsurEmilienM: I think other options are automatically generated from credentials, endpoints, etc18:21
dtantsurEmilienM: or do you have something specific in mind?18:21
openstackgerritMerged openstack/instack-undercloud stable/queens: Remove ceilometer expirer from instack  https://review.openstack.org/55046118:22
dtantsurmy etherpad is about options that change behavior, so we'll have regressions if we skip them18:22
EmilienMdtantsur: ok18:22
*** gfidente is now known as gfidente|afk18:27
*** olivierbourdon3- has quit IRC18:27
*** olivierbourdon38 has joined #tripleo18:28
*** panda is now known as panda|off18:29
*** olivierbourdon38 has quit IRC18:30
*** salmankhan has quit IRC18:30
*** olivierbourdon38 has joined #tripleo18:31
*** shardy has quit IRC18:31
*** olivierbourdon38 has quit IRC18:32
*** olivierbourdon38 has joined #tripleo18:32
*** pradk has joined #tripleo18:38
*** pradk has quit IRC18:39
*** tvignaud has quit IRC18:40
openstackgerritMerged openstack/tripleo-quickstart-extras master: Use undercloud registry for ceph in overcloud deployment  https://review.openstack.org/54921618:42
*** agopi has quit IRC18:47
*** liverpooler has quit IRC18:47
*** sai_p has joined #tripleo18:47
*** dtantsur is now known as dtantsur|afk18:48
sai_pHello everyone, can someone tell me when will be official TripleO Queens document to deploy OpenStack will be available? If it is available already, can you point me to it. Thank you18:48
*** myoung|lunch is now known as myoung|ruck18:49
*** nyechiel has quit IRC18:50
*** tesseract has quit IRC18:53
openstackgerritMichele Baldessari proposed openstack/instack-undercloud master: Mariadb online upgrade after yum update  https://review.openstack.org/54756018:56
openstackgerritAlex Schultz proposed openstack/tripleo-heat-templates stable/queens: Add KernelIpForward configuration  https://review.openstack.org/55056718:56
openstackgerritJames Slagle proposed openstack/tripleo-common master: Use ansible_hostname  https://review.openstack.org/55056818:56
openstackgerritJames Slagle proposed openstack/tripleo-heat-templates master: Consume RoleData config from config download files  https://review.openstack.org/54510218:57
openstackgerritJames Slagle proposed openstack/tripleo-heat-templates master: Support SshKnownHostsDeployment with config-download  https://review.openstack.org/53931518:57
openstackgerritJames Slagle proposed openstack/tripleo-heat-templates master: Add spacing for readability  https://review.openstack.org/53938218:57
*** dbecker has joined #tripleo18:57
*** sdake has joined #tripleo18:59
*** sdake has joined #tripleo18:59
*** pchavva has joined #tripleo19:02
*** nyechiel has joined #tripleo19:09
*** olivierbourdon38 has quit IRC19:09
*** ooolpbot has joined #tripleo19:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION19:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403619:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]19:10
*** ooolpbot has quit IRC19:10
*** trown|lunch is now known as trown|rover19:10
*** olivierbourdon38 has joined #tripleo19:10
trown|roverEmilienM: did you see Bogdan comment on https://review.rdoproject.org/r/#/c/12774/19:11
trown|roverEmilienM: are you sure job is ready to promote criteria?19:11
EmilienMtrown|rover: I think he misunderstood the job I want to promote19:11
EmilienMI'll comment19:11
trown|roverEmilienM: oh actually ya you just have typo in that patch... job you are adding in other patch is multinode19:12
EmilienMah19:13
EmilienMtrown|rover: here? https://review.rdoproject.org/r/#/c/12770/1/jobs/tripleo-upstream.yml19:13
*** olivierbourdon38 has quit IRC19:13
trown|roverEmilienM: no in the other patch https://review.rdoproject.org/r/#/c/12774/19:13
trown|roverEmilienM: the job name you add to promote criteria will not exist (even after merging 12770)19:14
trown|roverEmilienM: should be 'periodic-multinode-1ctlr-featureset027' in https://review.rdoproject.org/r/#/c/12774/19:15
EmilienMtrown|rover: ok19:15
EmilienMdo we need to hold https://review.rdoproject.org/r/#/c/12770/ from merge?19:15
EmilienMit's not a multinode job19:15
EmilienMit's a singlenode19:15
trown|roverEmilienM: 12770 looks correct to me... I actually would like to see it run a few times successfully before adding it to the promote criteria19:16
*** olivierbourdon38 has joined #tripleo19:16
EmilienMtrown|rover: ok19:17
EmilienMtrown|rover: https://review.rdoproject.org/r/#/c/12774/ updated, I hope it's good now19:17
*** olivierbourdon38 has quit IRC19:18
*** olivierbourdon38 has joined #tripleo19:19
trown|roverEmilienM: fixed one more time, but -2 for now, to see it run for a day ... I will check it tomorrow and merge if it looks ok19:19
EmilienMtrown|rover: ack19:19
EmilienMtrown|rover: thansk19:19
*** psahoo has quit IRC19:21
*** waleedm has joined #tripleo19:23
*** khyr0n has joined #tripleo19:26
openstackgerritSergii Golovatiuk proposed openstack/tripleo-heat-templates stable/newton: DO NOT MERGE: Testing I7bcc18445f3263128a9bff29a057f172af143c90  https://review.openstack.org/55057519:26
*** pkovar has quit IRC19:27
khyr0nHi guys... have a problem in a deploy that is not using ceph, even if I have configured not to use storage networks the process fail to install control and computes nodes19:28
khyr0nError: Parameter ip failed on Host[storage]: Invalid IP address ""19:28
*** olivierb_ has joined #tripleo19:29
*** holser__ has quit IRC19:29
*** dparkes has joined #tripleo19:30
*** liverpooler has joined #tripleo19:32
*** olivierbourdon38 has quit IRC19:36
*** olivierbourdon38 has joined #tripleo19:36
openstackgerritJill Rouleau proposed openstack/tripleo-common master: config download support for a fixed directory  https://review.openstack.org/55057719:37
*** olivierbourdon38 has quit IRC19:38
*** olivierbourdon38 has joined #tripleo19:39
*** olivierbourdon38 has quit IRC19:43
*** olivierbourdon38 has joined #tripleo19:43
*** suuuper has quit IRC19:44
openstackgerritMarius Cornea proposed openstack/tripleo-upgrade master: Add support for passing ansible ssh user to tripleo-ansible-inventory  https://review.openstack.org/55058419:46
openstackgerritSteve Baker proposed openstack/tripleo-docs master: Simplify container prepare instructions  https://review.openstack.org/54196219:47
*** olivierbourdon38 has quit IRC19:47
*** dbecker has quit IRC19:47
openstackgerritMarius Cornea proposed openstack/tripleo-upgrade master: Add support for passing ansible ssh user to tripleo-ansible-inventory  https://review.openstack.org/55058419:47
*** olivierbourdon38 has joined #tripleo19:48
openstackgerritJill Rouleau proposed openstack/python-tripleoclient master: Change default config download directory  https://review.openstack.org/55058519:48
*** olivierb_ has quit IRC19:51
*** olivierbourdon38 has quit IRC19:51
*** olivierbourdon38 has joined #tripleo19:51
*** dmacpher_ has joined #tripleo19:52
*** ihrachys_ has joined #tripleo19:52
*** ihrachys has quit IRC19:52
*** dmacpher has quit IRC19:52
*** radeks has quit IRC19:52
*** fragatin_ has joined #tripleo19:52
*** radeks has joined #tripleo19:52
*** olivierbourdon38 has quit IRC19:53
*** olivierbourdon38 has joined #tripleo19:53
*** fragatina has quit IRC19:54
*** khyr0n has quit IRC19:55
*** paramite has quit IRC20:00
*** chlong_ has quit IRC20:05
*** ooolpbot has joined #tripleo20:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION20:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403620:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]20:10
*** ooolpbot has quit IRC20:10
*** gfidente|afk is now known as gfidente20:15
*** ebarrera has quit IRC20:20
openstackgerritDan Prince proposed openstack/tripleo-heat-templates master: Add EnablePuppet (defaults to true)  https://review.openstack.org/55019220:20
*** pblaho has joined #tripleo20:22
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - Example of Docker service plugin  https://review.openstack.org/55059020:23
EmilienMdprince, mwhahaha : hey, ^ is really WIP but I would love your review/feedback.20:24
*** ihrachys_ has quit IRC20:24
*** jtomasek has quit IRC20:24
*** ihrachys has joined #tripleo20:24
EmilienMmwhahaha: my next step is to make the kernel parameters working per role20:24
EmilienMmwhahaha: right now we don't support it20:24
EmilienMmwhahaha: it would allow roles to have their own kernel modules and such per role20:24
*** trown|rover is now known as trown|brb20:25
dprinceEmilienM: I personally use keystone.yaml as the best simple example. IMO a real example is the best you could have20:26
dprinceEmilienM: keystone/glance are both simple services I've pointed to a lot20:26
EmilienMdprince: the idea is for the plugins for networking/storage stuffs20:27
mwhahahai think it makes sense to have a template example file20:27
dprinceEmilienM: what is networking/storage stuffs?20:27
mwhahahaso folks don't improperly pull in things we added for keystone/other service20:27
dprincemwhahaha: I think tools/yaml-validate.py will cover it. so no harm in adding an extra file20:28
mwhahahayea just something with more comments/details than we usually have20:28
dprinceEmilienM: I personally like the 'search and replaceability' of the keystone.yaml. As someone who has written many of the services it really is the most useful20:29
dprinceEmilienM: try it. take your file and see how many search and replaces it takes to get you close to a working template20:30
*** mcornea has quit IRC20:30
dprinceEmilienM: This also covers the docs nicely: http://git.openstack.org/cgit/openstack/tripleo-heat-templates/tree/docker/services/README.rst#n4520:30
*** trown|brb is now known as trown|rover20:31
EmilienMdprince: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/tree/docker/services/README.rst#n45 doesn't tell you you need to mount /lib/modules:/lib/modules:ro so containers can load kernel modules20:32
dprinceEmilienM: then add it!!! :)20:33
EmilienMI guess our problem right now is we have some people who want to build their containers (like neutron plugins) and need some examples20:33
EmilienMso I'm happy to point to keystone.yaml20:33
dprinceEmilienM: iterating on a README we have is always a possibility20:33
EmilienMbut we need to give more guidance20:33
EmilienMsure, i'm happy to add a README20:33
EmilienMor iterate on the existing one20:33
EmilienMbut I was in a call 2h ago with some folks who had no idea what they were doing20:34
dprinceEmilienM: sure. perhaps the handoff here for the containers stuff is lacking. I don't think you ever attended one of our calls for example20:34
*** mrunge has quit IRC20:36
dprinceEmilienM: which containers need lib/modules?20:36
EmilienMdprince: some networking/storage backends20:36
EmilienMcontrail, hyperscale, etc20:37
dprinceEmilienM: for *partner* containers we've added a few heat params that can be used to extend these dynamically20:37
dprinceEmilienM: CinderVolumeOptVolumes for example20:38
*** mcornea has joined #tripleo20:38
openstackgerritTim Rozet proposed openstack/puppet-tripleo master: Create vhost_socket_dir with proper permissions  https://review.openstack.org/54796120:38
mwhahahaso we should probably have that universally20:38
dprinceEmilienM: this can be used by any vendor to *extend* the volumes for that container20:38
dprincemwhahaha: we have it for neutron-server, cinder-volume, horizon, and heat20:39
openstackgerritDavid Peacock proposed openstack/tripleo-common master: [WIP - DO NOT MERGE] add option --gather-facts  https://review.openstack.org/54865120:39
mwhahahayea is there a reason we don't just support that in every container?20:39
dprincemwhahaha: I don't think it needs to be universal. UI doesn't like extra params....20:39
dprincemwhahaha: that was why we didn't add it20:39
dprinceI'm ++ for adding it where needed though20:40
*** d0ugal has quit IRC20:40
mwhahaharight so this isn't just for extending those containers but also for partner to write their own20:40
EmilienMso there is this nice documentation: https://docs.openstack.org/tripleo-docs/latest/install/containers_deployment/3rd_party.html20:40
mwhahahawe need to cover both in docs20:40
EmilienMI abandoned my patch for now20:41
EmilienMunless we want something like this?20:41
EmilienMI'll keep it now, but feel free to comment in the review.20:41
mwhahahawell i guess the question is where do we keep that20:41
mwhahahathere's no reason that has to live in THT20:41
mwhahahait could be in tripleo-docs20:41
dprincemwhahaha: I really like in-tree docs fwiw20:45
dprinceno harm in having it in both places I think20:45
mwhahahai meant the example file itself20:46
mwhahahawrapped in a doc20:46
mwhahahawe're inconsistent on our docs locations which doesn't help when looking for them20:46
dprincemwhahaha: the reason it should live only in t-h-t is that is the only place where we have tests20:46
mwhahahadprince: so it's more about explaining the content than anything else. so either we keep the file in THT and expland the comments in it & reference it from tripleo-docs20:47
mwhahahaor we can include it in a document itself20:47
* mwhahaha doesn't care which way we go20:47
dprincesyncing docs changes in tripleo-docs is always going to exist. but in this case I'd link to it as a pointer from the docs20:47
dprincethen our unit tests can cover it. keystone.yaml, glance-api.yaml, etc.20:47
dprincejust my preference. Inlining it into the docs has been done elsewhere. I feel like the container interfaces are still evolving a bit though20:48
*** mrunge has joined #tripleo20:48
*** dparkes has quit IRC20:49
*** d0ugal has joined #tripleo20:53
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: kernel: make ExtraKernelModules and ExtraSysctlSettingsa role-specific  https://review.openstack.org/55060120:57
EmilienMmwhahaha: this is I think going to help for the partners who want to load specific kernel modules for their roles that contain their plugin20:57
*** ihrachys has quit IRC20:57
*** zshi has quit IRC20:59
*** ihrachys has joined #tripleo20:59
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: kernel: make ExtraKernelModules and ExtraSysctlSettings role-specific  https://review.openstack.org/55060120:59
mwhahahaEmilienM: right i'm refering to how we explain these sort of example things in docs. it's the same as we should be doing with any of conceptual elements we define in THT21:00
EmilienMmwhahaha: I was talking about the patch21:01
EmilienMmwhahaha: I'm going to propose a doc patch just for the kernel thing21:01
mwhahahaEmilienM: yea i know, which falls into how do we document these things :D21:01
mwhahahai agree it'll help, just wondering if we can also expand this to cover other ways we document all the things21:02
*** ykarel has joined #tripleo21:03
*** dparkes has joined #tripleo21:05
*** ooolpbot has joined #tripleo21:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION21:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403621:10
*** ooolpbot has quit IRC21:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]21:10
mwhahahaEmilienM, dprince: https://review.openstack.org/#/c/550552/ thoughts on this one? I think it's only required until we have a solution for container prep/upload action during the deployment21:10
*** pcaruana has quit IRC21:12
EmilienMmwhahaha: it's imho a good addition now21:12
*** zshi has joined #tripleo21:12
dprincemwhahaha: works for me. fire away21:13
mwhahahak thanks21:13
dprincemwhahaha: for upstream. I don't think we want a default. I actually think it would be best to just document that users should run 'container image prepare' first21:14
dprincemwhahaha: for downstream. stevebaker has a discover workflow that could probably be adapted to suite our needs here21:14
dprincemwhahaha: it could obtain the latest 'tag' and then automatically generate the file for you21:14
mwhahahadprince: yea. it would be nice if we could take that from downstream to upstream21:14
dprincemwhahaha: discover is upstream. but I don't think there is a good upstream default21:15
*** ihrachys has quit IRC21:15
mwhahahathat's what i mean if we could figure that one out21:15
dprincemwhahaha: one thing to note is we used to have default container locations in t-h-t upstream. And we explicitly removed it because it caused problems21:15
*** ihrachys has joined #tripleo21:15
dprincemwhahaha: you can easily end up with mis-matched environments if you have defaults upstream, that don't match others for example. It can be quite confusing21:16
mwhahahayup21:16
dprinceit ended up just being best to have end users run the 'prepare' command like they needed it21:16
dprinceyou can automate 'prepare' but it would add 5-10 extra options to undercloud.conf. Given we already have a nice command to do this I would prefer just running that21:18
dprincewe can ask around too. what if?21:19
*** tosky has quit IRC21:19
*** dparkes has quit IRC21:20
openstackgerritEmilien Macchi proposed openstack/tripleo-docs master: containers: document kernel for 3rd party  https://review.openstack.org/55060821:21
EmilienMdprince, mwhahaha ^ open for feedback21:21
*** tvignaud has joined #tripleo21:22
openstackgerritEmilien Macchi proposed openstack/tripleo-docs master: containers: document kernel for 3rd party  https://review.openstack.org/55060821:26
EmilienMmwhahaha: comment addressed ^21:26
*** tosky has joined #tripleo21:27
mwhahahak21:27
dprinceEmilienM: commented. will check back in a bit. gotta run for now21:27
EmilienMdprince: saw your comment too, will address21:27
EmilienMdprince: thx, ttyl21:27
*** dprince has quit IRC21:27
openstackgerritEmilien Macchi proposed openstack/tripleo-docs master: containers: document kernel for 3rd party  https://review.openstack.org/55060821:37
*** pblaho has quit IRC21:51
openstackgerritEmilien Macchi proposed openstack/python-tripleoclient master: Generate NeutronDnsDomain on containerized undercloud  https://review.openstack.org/55061321:51
*** waleedm has quit IRC21:52
*** radeks has quit IRC21:52
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: neutron/undercloud: align configuration with instack-undercloud  https://review.openstack.org/55027421:52
EmilienMmwhahaha: ^ clouddomain stuff21:52
mwhahahak21:53
* mwhahaha wished we alphabetized the undercloud.yaml21:55
*** ykarel has quit IRC21:57
EmilienMmwhahaha: if we want to break git history :D21:58
mwhahahabetter to do it early :D21:58
EmilienMare we really early? :)21:58
stevebakermwhahaha: are you aware of my undercloud container prepare series? https://review.openstack.org/#/c/545161/21:58
stevebakermwhahaha: I'd rather move forward with that than make container_images_file mandatory21:59
mwhahahastevebaker: so maybe we need to make either manditory22:00
stevebakermwhahaha: the defaults are populated with something which meets the needs of most people, downstream already carry the patch to switch those defaults22:01
mwhahahastevebaker: yea so my goal would be to revert my patch once yours is in place22:02
stevebakerok22:02
mwhahahastevebaker: my concern is that yours doesn't work for stable versions22:02
mwhahahastevebaker: so when we cut rocky, it'll still be using master containers22:03
mwhahahawe don't really have a good way to indicate this is now 'stable' version22:03
stevebakermwhahaha: we would have to carry a patch in stable branches to switch the defaults too22:03
mwhahahastevebaker: or can we not have the version in the defaults22:04
mwhahahastevebaker: but have that be the required param22:04
stevebakermwhahaha: hmm, yeah. container_image_namespace could be mandatory and not defaulted22:05
mwhahahastevebaker: so i'd like to make my patch mandatory (so we can backport it), then we should merge the automatic stuff and then we can revert my patch22:07
EmilienMbfournie1: hey, you around?22:08
*** tvignaud has quit IRC22:08
stevebakermwhahaha: sounds like a plan22:08
bfournie1hey EmilienM22:08
EmilienMbfournie1: I'm adding ironic::drivers::agent to THT but i'm not sure to which service we need it22:08
EmilienMbfournie1: I want to configure [agent] in ironic.conf22:08
*** trown|rover is now known as trown|outtypewww22:08
EmilienMwould that be for ironic-conductor.yaml ?22:09
bfournie1EmilienM: I thought that was for baremetal agent22:09
EmilienMbfournie1: do we have it in THT?22:09
bfournie1let me ask hjensas22:09
EmilienMok22:09
*** ooolpbot has joined #tripleo22:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION22:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403622:10
*** ooolpbot has quit IRC22:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]22:10
EmilienMmwhahaha: but we don't support containerized undercloud before rocky22:10
*** openstackstatus has quit IRC22:13
*** openstack has joined #tripleo22:14
*** ChanServ sets mode: +o openstack22:14
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart-extras master: prep-containers: include containerized undercloud bits  https://review.openstack.org/54302422:14
mwhahahaEmilienM: eh i don't think it would be a bad idea to fix that one because it's a pretty bad UX.  I thought we at least had the install kinda working22:14
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart-extras master: undercloud: add missing TLS environments when preparing containers  https://review.openstack.org/54544422:15
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart-extras master: Remove adjust-interface-mtus script  https://review.openstack.org/54621622:15
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart-extras master: DO NOT REVIEW - Workarounds for containerized undercloud  https://review.openstack.org/54562822:15
EmilienMstevebaker: I know we won't use some of them ^ but I rebased so we can continue testing (it was in merge conflict)22:15
*** openstackstatus has joined #tripleo22:16
*** ChanServ sets mode: +v openstackstatus22:16
stevebakerEmilienM: ok22:16
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart-extras master: undercloud-deploy: remove heat-installer package  https://review.openstack.org/55062722:17
EmilienMbfournie1: it's here https://review.openstack.org/#/c/547318/22:19
EmilienMbfournie1: nevermind, it's something else22:21
EmilienMit's for the IPA22:21
EmilienMwhich we don't support in THT22:22
bfournie1EmilienM: k… not exactly sure if still have question?22:23
EmilienMlol22:23
EmilienMbfournie1: I guess my next question is... do you have plan to do it? if not I'll implement the service tomorrow22:24
EmilienMI need it for the containerized undercloud22:24
*** dbecker has joined #tripleo22:26
bfournie1EmilienM: the ironic::drivers::agent?22:26
bfournie1EmilienM: we don't have a plan yes, as far as i know22:27
bfournie1EmilienM: s/yes/yet/22:27
*** gfidente has quit IRC22:27
*** ihrachys_ has joined #tripleo22:28
*** ihrachys has quit IRC22:29
openstackgerritAlex Schultz proposed openstack/tripleo-docs master: Update docs for deploying Queens  https://review.openstack.org/55063022:30
*** dbecker has quit IRC22:31
EmilienMbfournie1: ok so I'll take a look this week22:33
*** tvignaud has joined #tripleo22:34
bfournie1EmilienM: thanks22:34
EmilienMbfournie1: thx for your help22:34
*** itlinux has quit IRC22:36
*** rcernin has joined #tripleo22:37
openstackgerritEmilien Macchi proposed openstack/puppet-tripleo master: ironic/api: include cors config  https://review.openstack.org/55063322:39
EmilienMbfournie1: another question22:42
*** openstackstatus has quit IRC22:42
EmilienMwhere should I configure the ilo driver?22:42
*** openstack has joined #tripleo22:43
*** ChanServ sets mode: +o openstack22:43
bfournie1EmilienM: the driver to use is set in instackenv.json, but I guess that's not your question22:43
EmilienMbfournie1: ok I was more interested on which container this params needs to be22:44
bfournie1EmilienM: k, then yes conductor22:45
EmilienMok thx22:45
*** openstackstatus has joined #tripleo22:45
*** ChanServ sets mode: +v openstackstatus22:45
*** paramite has joined #tripleo22:46
EmilienMbfournie1: is the default boot mode (bios now) is something we would override?22:46
EmilienMor setting it to "bios" all the times is good?22:46
EmilienMif we need to override it, then i'll create a param in THT22:47
EmilienMotherwise no need22:47
*** paramite has quit IRC22:52
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: ironic/undercloud: align configuration with instack-undercloud  https://review.openstack.org/55063822:56
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: undercloud: disable nova-compute disabling  https://review.openstack.org/55028522:59
*** pmannidi has joined #tripleo22:59
*** paramite has joined #tripleo23:03
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Added t-h-t for tempest container  https://review.openstack.org/54832523:03
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: Convert ServiceNetMap evals to hiera interpolation  https://review.openstack.org/52669223:08
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: undercloud: set cleaning and provisioning networks to 'ctlplane'  https://review.openstack.org/55010023:08
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart master: Run ovb-ha (fs001) with a containerized undercloud  https://review.openstack.org/54255623:08
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart master: DNM - Deploy container-multinode (fs010) with a containerized undercloud  https://review.openstack.org/54290623:08
*** ooolpbot has joined #tripleo23:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION23:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/175403623:10
*** ooolpbot has quit IRC23:10
openstackLaunchpad bug 1754036 in tripleo "fs020, tempest, image corrupted after upload to glance (checksum mismatch)" [Critical,Triaged]23:10
*** myoung|ruck is now known as myoung|off23:11
EmilienMci squad: please review https://review.openstack.org/#/c/546720/23:11
*** threestrands has joined #tripleo23:12
*** threestrands has quit IRC23:12
*** threestrands has joined #tripleo23:12
*** dhill__ has quit IRC23:14
*** nyechiel has quit IRC23:22
*** cdearborn_ has quit IRC23:23
openstackgerritMarius Cornea proposed openstack/tripleo-docs master: WIP: Add FFU docs  https://review.openstack.org/54989223:26
*** paramite has quit IRC23:28
*** alee has quit IRC23:29
*** nyechiel has joined #tripleo23:34
*** threestrands_ has joined #tripleo23:34
openstackgerritMarius Cornea proposed openstack/tripleo-docs master: WIP: Add FFU docs  https://review.openstack.org/54989223:34
*** pchavva has quit IRC23:35
*** threestrands_ has quit IRC23:35
stevebakerreproducer-quickstart.sh, where have you been all my life?23:35
*** threestrands_ has joined #tripleo23:36
EmilienMlol23:36
EmilienMyeah I said the same23:36
EmilienMstevebaker: have you tried for ovb though?23:36
*** threestrands has quit IRC23:36
stevebakerEmilienM: I just did23:36
stevebakerEmilienM: you mean for an ovb job? no23:37
EmilienMok23:37
EmilienMstevebaker: level 223:37
openstackgerritMarius Cornea proposed openstack/tripleo-docs master: WIP: Add FFU docs  https://review.openstack.org/54989223:41
*** vpickard is now known as vpickard_23:46
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - neutron: rename db when upgrading a containerized undercloud  https://review.openstack.org/54960923:47
openstackgerritAttila Darazs proposed openstack/tripleo-quickstart-extras master: GATE CHECK for quickstart-extras  https://review.openstack.org/47260723:56
*** rlandy is now known as rlandy|bbl23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!