| *** yamahata has joined #tripleo | 00:07 | |
| *** itlinux has joined #tripleo | 00:07 | |
| *** jcoufal has joined #tripleo | 00:20 | |
| openstackgerrit | Merged openstack/puppet-tripleo master: Fix docker debug/mirrors JSON augeas changes https://review.openstack.org/559790 | 00:31 |
|---|---|---|
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Add endpoint map environment without TLS https://review.openstack.org/559322 | 00:32 |
| openstackgerrit | Merged openstack/python-tripleoclient master: Use no TLS environment explicitly https://review.openstack.org/559323 | 00:32 |
| *** dhill_ has quit IRC | 00:40 | |
| *** dparkes has quit IRC | 00:43 | |
| *** artom has joined #tripleo | 00:45 | |
| *** sai_p has quit IRC | 00:45 | |
| *** jcoufal has quit IRC | 00:49 | |
| *** dmacpher has joined #tripleo | 00:50 | |
| *** agopi has quit IRC | 01:01 | |
| *** fzdarsky_ has joined #tripleo | 01:04 | |
| *** fzdarsky has quit IRC | 01:08 | |
| *** psahoo has joined #tripleo | 01:09 | |
| *** fzdarsky_ has quit IRC | 01:09 | |
| *** wolverineav has quit IRC | 01:13 | |
| *** wolverin_ has joined #tripleo | 01:13 | |
| *** fragatina has quit IRC | 01:13 | |
| *** fragatina has joined #tripleo | 01:14 | |
| *** fzdarsky_ has joined #tripleo | 01:14 | |
| *** fragatin_ has joined #tripleo | 01:16 | |
| *** fragatina has quit IRC | 01:18 | |
| *** fragatin_ has quit IRC | 01:20 | |
| *** dprince has joined #tripleo | 01:28 | |
| *** wolverin_ has quit IRC | 01:32 | |
| *** wolverineav has joined #tripleo | 01:32 | |
| *** ihrachys has quit IRC | 01:33 | |
| *** ykarel|away has joined #tripleo | 01:34 | |
| *** eck` is now known as eck`gone | 01:35 | |
| *** wolverin_ has joined #tripleo | 01:35 | |
| *** wolverineav has quit IRC | 01:36 | |
| *** wolverin_ has quit IRC | 01:40 | |
| *** cshastri has joined #tripleo | 01:44 | |
| *** agopi has joined #tripleo | 01:48 | |
| *** wolverineav has joined #tripleo | 01:54 | |
| *** ykarel|away has quit IRC | 01:54 | |
| *** wolverineav has quit IRC | 01:58 | |
| *** wolverineav has joined #tripleo | 02:01 | |
| *** ramishra has joined #tripleo | 02:29 | |
| *** dprince has quit IRC | 02:33 | |
| *** ayoung has quit IRC | 02:58 | |
| *** morazi has joined #tripleo | 02:58 | |
| *** psachin has joined #tripleo | 03:01 | |
| *** chlong has joined #tripleo | 03:02 | |
| *** psachin has quit IRC | 03:09 | |
| *** dmacpher has quit IRC | 03:10 | |
| *** shreshtha has joined #tripleo | 03:19 | |
| *** shreshtha is now known as shreshtha-wfh | 03:19 | |
| *** fragatina has joined #tripleo | 03:20 | |
| *** fragatina has quit IRC | 03:22 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Use sensu-client healthcheck parameter https://review.openstack.org/545280 | 03:23 |
| *** fragatina has joined #tripleo | 03:23 | |
| *** psachin has joined #tripleo | 03:27 | |
| openstackgerrit | Nguyen Hai proposed openstack/python-tripleoclient master: Follow the new PTI for document build [Updated] https://review.openstack.org/556753 | 03:28 |
| *** udesale has joined #tripleo | 03:34 | |
| *** SlickNik has quit IRC | 03:35 | |
| *** agopi has quit IRC | 03:37 | |
| openstackgerrit | John Trowbridge proposed openstack-infra/tripleo-ci master: Add job to test overcloud updates https://review.openstack.org/559394 | 03:44 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Stop configuring nova_catalog_admin_info for cinder https://review.openstack.org/559976 | 03:48 |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/queens: Fix missing allowed network type 'flat' for ODL OVS https://review.openstack.org/560101 | 03:50 |
| openstackgerrit | Merged openstack/tripleo-common master: Don't set deployments as hostvars https://review.openstack.org/559433 | 03:50 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Add environment to enable Designate https://review.openstack.org/555006 | 03:50 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Don't use keystone admin endpoint for nova placement https://review.openstack.org/559969 | 03:50 |
| *** fragatina has quit IRC | 04:06 | |
| *** fragatina has joined #tripleo | 04:06 | |
| *** skramaja has joined #tripleo | 04:10 | |
| *** morazi has quit IRC | 04:16 | |
| openstackgerrit | wes hayutin proposed openstack-infra/tripleo-ci master: update rdo settings for new registry namespace https://review.openstack.org/560256 | 04:19 |
| *** jaosorior has joined #tripleo | 04:21 | |
| Tengu | hello there | 04:26 |
| *** udesale has quit IRC | 04:26 | |
| *** rlandy has quit IRC | 04:31 | |
| jaosorior | yooo | 04:31 |
| jaosorior | how's it going? | 04:31 |
| Tengu | tired, gone to bed a bit too late X) | 04:34 |
| Tengu | hmmm. my upgrade is failing… need to dig the error. | 04:35 |
| Tengu | duh. my bad -.- | 04:40 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Temporarily disable redirection with TLS https://review.openstack.org/560258 | 04:40 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/puppet-tripleo master: Re-enable redirection based on TLS https://review.openstack.org/560259 | 04:40 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-common master: TLS by default for the overcloud https://review.openstack.org/554926 | 04:40 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Switch public endpoints to use FQDNs by default https://review.openstack.org/559926 | 04:40 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Change default endpoint map entries to use TLS https://review.openstack.org/558424 | 04:40 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Remove empty default for SSLKey https://review.openstack.org/559279 | 04:40 |
| Tengu | didn't dropped the docker_registry file, meaning it didn't get regenerated by my script, meaning it didn't get the new ceph tag -.-'. corrected the script so that it will always generate a fresh registry. | 04:42 |
| jaosorior | dciabrin: do you want to give a try testing this out https://review.openstack.org/#/c/557653/ ? or should I merge it? | 04:45 |
| *** udesale has joined #tripleo | 04:45 | |
| *** udesale has quit IRC | 04:46 | |
| *** udesale has joined #tripleo | 04:47 | |
| openstackgerrit | Noam Angel proposed openstack/tripleo-heat-templates master: Fix NeutronCorePlugin path in baremetal-services.yaml https://review.openstack.org/560261 | 04:47 |
| openstackgerrit | Noam Angel proposed openstack/tripleo-heat-templates master: Fix NeutronCorePlugin path in baremetal-services.yaml https://review.openstack.org/560261 | 04:48 |
| *** yprokule has joined #tripleo | 05:03 | |
| *** anilvenkata has joined #tripleo | 05:11 | |
| *** chlong has quit IRC | 05:12 | |
| *** d0ugal has quit IRC | 05:16 | |
| *** pdeore has joined #tripleo | 05:19 | |
| *** marios has joined #tripleo | 05:20 | |
| *** d0ugal has joined #tripleo | 05:27 | |
| *** links has joined #tripleo | 05:28 | |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart-extras master: containerized-undercloud: don't manage stackrc https://review.openstack.org/559818 | 05:33 |
| *** anande has joined #tripleo | 05:33 | |
| *** ratailor has joined #tripleo | 05:35 | |
| EmilienM | weshay: I think we could run fs010 with containerized undercloud but just in periodic jobs, so we can keep good testing coverage | 05:40 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart master: Revert "Revert "Deploy container-multinode (fs010) with a containerized undercloud"" https://review.openstack.org/560264 | 05:40 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart master: Revert "Revert "Deploy container-multinode (fs010) with a containerized undercloud"" https://review.openstack.org/560264 | 05:40 |
| *** anande has quit IRC | 05:41 | |
| bandini | EmilienM: if I wanted to install a couple of packages (pcs and pacemaker-cli) before spec tests are run in puppet-pacemaker, how would I go about doing that? | 05:42 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/python-tripleoclient master: containerized/undercloud: disable verbosity by default https://review.openstack.org/559140 | 05:43 |
| bandini | basically in https://review.openstack.org/#/c/559919/ I added some functions and spec tests but they require a couple of packages to be installed to be able to run | 05:43 |
| jaosorior | bandini: I think you gotta add them to the bindep file | 05:43 |
| jaosorior | bindep.txt | 05:43 |
| bandini | ooh /me looks | 05:44 |
| bandini | jaosorior: sweet! lol I kep looking around rakefiles and gemfiles and whatnot ;) | 05:44 |
| bandini | *kept | 05:44 |
| *** wolverineav has quit IRC | 05:46 | |
| EmilienM | bandini: yeah bindep | 05:47 |
| bandini | thanks jaosorior EmilienM! | 05:48 |
| EmilienM | bandini: off to bed now, add me as reviewer | 05:48 |
| bandini | EmilienM: cheers, I will once CI is green ;) good night! | 05:51 |
| openstackgerrit | Michele Baldessari proposed openstack/puppet-pacemaker master: Introduce some new functions in pcmk_common https://review.openstack.org/559919 | 05:53 |
| openstackgerrit | Michele Baldessari proposed openstack/puppet-pacemaker master: Add a deep_compare option in bundles and resources https://review.openstack.org/559920 | 05:53 |
| openstackgerrit | Michele Baldessari proposed openstack/puppet-pacemaker master: Detect when a bundle or a resource needs updating https://review.openstack.org/559921 | 05:53 |
| * bandini bbiab | 05:54 | |
| *** ykarel|away has joined #tripleo | 05:56 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/python-tripleoclient master: containerized/undercloud: disable verbosity by default https://review.openstack.org/559140 | 05:56 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/python-tripleoclient master: containerized/undercloud: disable verbosity by default https://review.openstack.org/559140 | 05:58 |
| openstackgerrit | yolanda.robla proposed openstack/tripleo-heat-templates stable/newton: Change ovs user and fix permissions on ovs upgrade https://review.openstack.org/558471 | 05:59 |
| openstackgerrit | yolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Change ovs user and fix permissions on ovs upgrade https://review.openstack.org/559474 | 06:01 |
| *** rodolof has joined #tripleo | 06:01 | |
| *** jfrancoa has joined #tripleo | 06:02 | |
| *** tzumainn has quit IRC | 06:02 | |
| *** ykarel|away is now known as ykarel | 06:03 | |
| *** kopecmartin has joined #tripleo | 06:03 | |
| openstackgerrit | Merged openstack-infra/tripleo-ci master: Use same namespace tripleo{{release}} everywhere https://review.openstack.org/560133 | 06:06 |
| *** trown|outtypewww has quit IRC | 06:06 | |
| *** trown has joined #tripleo | 06:08 | |
| *** rodolof has quit IRC | 06:08 | |
| *** rodolof has joined #tripleo | 06:09 | |
| openstackgerrit | Noam Angel proposed openstack/tripleo-heat-templates master: Fix NeutronCorePlugin path in baremetal-services.yaml https://review.openstack.org/560261 | 06:12 |
| openstackgerrit | Noam Angel proposed openstack/tripleo-heat-templates master: Fix few issues with deploying with baremetal-services.yaml https://review.openstack.org/560261 | 06:14 |
| openstackgerrit | Merged openstack/python-tripleoclient master: Add missing unit tests for undercloud_deploy https://review.openstack.org/555456 | 06:15 |
| *** anande has joined #tripleo | 06:19 | |
| *** nyechiel has joined #tripleo | 06:22 | |
| *** quiquell has quit IRC | 06:23 | |
| *** agurenko has joined #tripleo | 06:24 | |
| *** quiquell has joined #tripleo | 06:24 | |
| *** anande has quit IRC | 06:28 | |
| openstackgerrit | Yurii Prokulevych proposed openstack/tripleo-upgrade master: Pass env-files and roles-data file to update/upgrade prepare cli. https://review.openstack.org/559755 | 06:28 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/tripleo-ui master: Imported Translations from Zanata https://review.openstack.org/560283 | 06:31 |
| *** dbecker has quit IRC | 06:32 | |
| *** anande has joined #tripleo | 06:33 | |
| *** radeks has joined #tripleo | 06:33 | |
| *** holser__ has joined #tripleo | 06:37 | |
| *** dsariel has joined #tripleo | 06:39 | |
| *** dsariel has quit IRC | 06:40 | |
| *** dmacpher has joined #tripleo | 06:40 | |
| *** chkumar|off is now known as chandankumar | 06:41 | |
| dciabrin | jaosorior, hey. that's ok I think you can merge it | 06:41 |
| *** dbecker has joined #tripleo | 06:44 | |
| *** slaweq has joined #tripleo | 06:47 | |
| *** cylopez has joined #tripleo | 06:49 | |
| jaosorior | dciabrin: cool cool, done; thanks! | 06:51 |
| *** janki has joined #tripleo | 06:54 | |
| openstackgerrit | Merged openstack-infra/tripleo-ci master: Add overcloud-deploy-post tag to CI deployment https://review.openstack.org/559979 | 06:56 |
| *** nyechiel_ has joined #tripleo | 06:57 | |
| *** florianf has joined #tripleo | 06:58 | |
| *** florianf has quit IRC | 06:58 | |
| *** nyechiel has quit IRC | 06:58 | |
| *** florianf has joined #tripleo | 06:58 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/queens: Added network enabled check in multiple nic role rendering file https://review.openstack.org/560064 | 06:59 |
| openstackgerrit | Merged openstack/tripleo-upgrade master: Fix a nit in the oooq transformation process. https://review.openstack.org/560080 | 06:59 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Switch public endpoints to use FQDNs by default https://review.openstack.org/559926 | 07:02 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Change default endpoint map entries to use TLS https://review.openstack.org/558424 | 07:02 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Remove empty default for SSLKey https://review.openstack.org/559279 | 07:02 |
| *** rcernin has quit IRC | 07:06 | |
| *** nyechiel_ has quit IRC | 07:07 | |
| *** nyechiel_ has joined #tripleo | 07:07 | |
| *** amoralej|off is now known as amoralej | 07:08 | |
| *** ccamacho has joined #tripleo | 07:10 | |
| *** dparkes has joined #tripleo | 07:11 | |
| *** shardy has joined #tripleo | 07:14 | |
| openstackgerrit | Yurii Prokulevych proposed openstack/tripleo-upgrade master: Pass env-files and roles-data file to update/upgrade prepare cli. https://review.openstack.org/559755 | 07:18 |
| openstackgerrit | Yurii Prokulevych proposed openstack/tripleo-upgrade stable/queens: Fix a nit in the oooq transformation process. https://review.openstack.org/560293 | 07:19 |
| *** masco has joined #tripleo | 07:22 | |
| *** tesseract has joined #tripleo | 07:28 | |
| *** ffiore has joined #tripleo | 07:30 | |
| *** ffiore has quit IRC | 07:30 | |
| *** ykarel is now known as ykarel|lunch | 07:31 | |
| *** ffiore has joined #tripleo | 07:31 | |
| *** bogdando has joined #tripleo | 07:31 | |
| openstackgerrit | Nir Magnezi proposed openstack/tripleo-heat-templates master: Containerize Neutron LBaaS service plugin https://review.openstack.org/555011 | 07:32 |
| *** dmacpher has quit IRC | 07:33 | |
| openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Expand jinja variables at one place only https://review.openstack.org/558369 | 07:44 |
| holser__ | shardy - concerning https://bugs.launchpad.net/tripleo/+bug/1762403 | 07:48 |
| openstack | Launchpad bug 1762403 in tripleo "j2 templates are not rendered during upgrade" [High,Confirmed] | 07:48 |
| shardy | holser__: Hi, I think this is a known issue | 07:48 |
| holser__ | Is it documented? | 07:48 |
| shardy | the --templates path must always match the -e path in the case where j2 rendering is involved | 07:49 |
| shardy | holser__: not sure | 07:49 |
| holser__ | shardy - the problem is if I am operator I can run whatever I want | 07:49 |
| shardy | holser__: probably there should be better validation in the client to prevent users from doing this | 07:49 |
| shardy | holser__: I understand | 07:49 |
| holser__ | 1. so framework should warn I do something wrong | 07:49 |
| shardy | holser__: if you look in tripleoclient you'll see there is some path comparison | 07:49 |
| holser__ | fail/warn | 07:49 |
| shardy | holser__: yes that's probably the bug here, insufficient validation | 07:50 |
| shardy | I'll comment on the bug | 07:50 |
| holser__ | yeah! that's what I am talking about | 07:50 |
| holser__ | shardy we are on the same page now | 07:50 |
| shardy | perhaps there's some way to support out-of-tree j2 templates but right now I know it wont work, and never has | 07:50 |
| shardy | holser__: yes | 07:51 |
| bogdando | jaosorior: hi. I'm trying to deploy TLS undercloud, reading http://git.openstack.org/cgit/openstack/tripleo-docs/tree/doc/source/install/advanced_deployment/tls_everywhere.rst . Shall I install ipa-server and prepare it manually? t-h-t and quickstart do not include those steps AFAIK... | 07:51 |
| *** dsariel has joined #tripleo | 07:51 | |
| bogdando | basically, I have haproxy deploy error, and /etc/pki/tls/private/overcloud_endpoint.pem is empty | 07:51 |
| holser__ | thanks shardy | 07:51 |
| bogdando | and heat installer logs "unable to load Private KeyЭ | 07:52 |
| bogdando | "* :) | 07:52 |
| *** pkovar has joined #tripleo | 07:52 | |
| bogdando | digging into the undercloud deploy -e command args, I can see there environments/public-tls-undercloud.yaml:, which adds to the resources registry OS::TripleO::Services::HAProxyPublicTLS, but I did not add it to UndercloudServices, shall I ?.. Docs are not very clear on that, sorry | 07:53 |
| *** jpena|off is now known as jpena | 07:55 | |
| *** tosky has joined #tripleo | 07:55 | |
| bogdando | and OS::TripleO::Services::HAProxyInternalTLS is prolly not that I need... What about OS::TripleO::Services::CertmongerUser, shall I place it into resource registry and undercloud composed services?.. | 07:55 |
| bogdando | sigh, that's really needs better examples in tht and docs | 07:56 |
| bogdando | do we have some dev notes for TLS undercloud? | 07:56 |
| bogdando | via tht | 07:57 |
| *** yprokule has quit IRC | 07:58 | |
| *** jpich has joined #tripleo | 07:58 | |
| bogdando | yeah, it seems I missed ::CertmongerUser | 08:00 |
| bogdando | still not sure for ::HAProxyInternalTLS tho | 08:00 |
| bogdando | and public one | 08:00 |
| *** yprokule has joined #tripleo | 08:01 | |
| *** arxcruz|off is now known as arxcruz|ruck | 08:04 | |
| *** gkadam has joined #tripleo | 08:06 | |
| bogdando | ok I see those are only for in-direct use http://git.openstack.org/cgit/openstack/tripleo-heat-templates/tree/puppet/services/haproxy.yaml#n101 | 08:07 |
| bogdando | so the only question is either I have to install and configure ipa-server for TLS undercloud? | 08:07 |
| jaosorior | bogdando: they do | 08:07 |
| *** nyechiel has joined #tripleo | 08:07 | |
| bogdando | ...and when may I use environments/fixed-ip-vips.yaml | 08:07 |
| bogdando | like if I have those VIPs pre-deployed/external? | 08:08 |
| *** nyechiel_ has quit IRC | 08:08 | |
| jaosorior | bogdando: so, with quickstart you could use config/general_config/deprecated/ipa.yml for the config and config/nodes/1ctlr_1comp_1supp.yml for the topology | 08:09 |
| jaosorior | bogdando: you can use environments/public-tls-undercloud.yaml if you need the public certificate to be generated by IPA | 08:09 |
| jaosorior | bogdando: most deployers will most likely have a publicly signed certificate, so the classic way of doing public TLS still apply | 08:10 |
| openstackgerrit | Merged openstack/tripleo-ui master: Imported Translations from Zanata https://review.openstack.org/560283 | 08:10 |
| bogdando | auto-generated self-signed works for me | 08:10 |
| bogdando | so I only need to include free ipa install bits for my UC, right? | 08:11 |
| *** lucas-afk is now known as lucasagomes | 08:11 | |
| bogdando | jaosorior: thanks, looking into config/general_config/deprecated/ipa.yml now | 08:11 |
| *** nyechiel_ has joined #tripleo | 08:12 | |
| *** nyechiel has quit IRC | 08:12 | |
| *** pcaruana has joined #tripleo | 08:13 | |
| *** suuuper has joined #tripleo | 08:14 | |
| *** nyechiel has joined #tripleo | 08:18 | |
| *** nyechiel_ has quit IRC | 08:18 | |
| *** salmankhan has joined #tripleo | 08:19 | |
| *** mdnadeem has joined #tripleo | 08:20 | |
| *** ykarel|lunch is now known as ykarel | 08:21 | |
| jaosorior | bogdando: did you use environments/ssl/enable-internal-tls.yaml or environments/enable-internal-tls.yaml ? | 08:22 |
| bogdando | nope, for now I want to try only public TLS | 08:23 |
| jaosorior | bogdando: ok, now I got a bit confused | 08:23 |
| jaosorior | bogdando: soo... you're trying to do public TLS with a regular undercloud or with a containerized undercloud? | 08:23 |
| *** ratailor has quit IRC | 08:24 | |
| jaosorior | bogdando: CertmongerUser should be declared by default https://github.com/openstack/tripleo-heat-templates/commit/7414edfee73b827c4b7c343ea1ee388d78848c04 | 08:25 |
| bogdando | jaosorior: containerized one | 08:26 |
| bogdando | via heat, as I noted | 08:26 |
| openstackgerrit | Steven Hardy proposed openstack/tripleo-common master: Update swift plan in UpdatePlanEnvironmentAction https://review.openstack.org/560311 | 08:26 |
| openstackgerrit | Steven Hardy proposed openstack/tripleo-common master: UpdatePlanEnvironmentAction enable overwrite or merge https://review.openstack.org/560312 | 08:26 |
| shardy | ramishra: ^^ those may help wrt the client updating the plan_environment | 08:26 |
| *** yprokule has quit IRC | 08:26 | |
| jaosorior | bogdando: ok, are you deploying it manually? (manually adding the heat environments) or are you using undercloud_config ? | 08:26 |
| *** ratailor has joined #tripleo | 08:27 | |
| *** agurenko has quit IRC | 08:27 | |
| ramishra | shardy: sure, will check them, thanks! | 08:27 |
| bogdando | yes, I'm adding that CertmongerUser and Novajoin as well, would it install ipa-server also? | 08:27 |
| jaosorior | bogdando: novajoin and ipa-server are only needed for the TLS everywhere setup | 08:27 |
| *** nyechiel_ has joined #tripleo | 08:27 | |
| bogdando | jaosorior: here is my underlcoud.conf, it uses extra tht env files | 08:27 |
| *** nyechiel has quit IRC | 08:27 | |
| *** agurenko has joined #tripleo | 08:28 | |
| jaosorior | bogdando: ok, lets check it out | 08:29 |
| bogdando | jaosorior: https://github.com/bogdando/oooq-warp/commit/af476da70adc77876675ce8dda4c8bcb75da4337 | 08:29 |
| jaosorior | bogdando: although, for just doing public TLS in the undercloud, you shouldn't need any extra t-h-t env files | 08:29 |
| bogdando | jaosorior: well, I have a special one, for AIO | 08:30 |
| bogdando | this helps to learn the deployment framework w/o overclouds overhead :) | 08:30 |
| *** anilvenkata has quit IRC | 08:30 | |
| bogdando | so I'm learning now net configs and TLS :) | 08:31 |
| jaosorior | bogdando: OK, if you JUST wanna do public TLS. You don't need novajoin there. You do need OS::TripleO::Services::CertmongerUser and you should probably use what's defined in this file https://github.com/openstack/tripleo-heat-templates/blob/master/environments/public-tls-undercloud.yaml | 08:31 |
| openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Expand jinja variables at one place only https://review.openstack.org/558369 | 08:31 |
| bogdando | got it, thanks! jaosorior | 08:31 |
| bogdando | so ipa server and novajoin is only needed for internal TLS? | 08:31 |
| jaosorior | bogdando: correct | 08:31 |
| *** paramite has joined #tripleo | 08:32 | |
| jaosorior | bogdando: with public TLS you only have one public-facing cert/key set. So we let the deployer manage that.... with internal TLS, we have a bunch of certificates per-host; so we rather use a CA to get those, and certmonger to manage the certs. | 08:33 |
| bogdando | um, wait, so I still have to create something before start a deploy of undercloud? | 08:33 |
| bogdando | like that public cert? | 08:34 |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Verify the Swift container exists with a small utility workflow https://review.openstack.org/528213 | 08:34 |
| jaosorior | bogdando: that was the overcloud. | 08:34 |
| bogdando | um, I don't have it :) | 08:34 |
| jaosorior | bogdando: for the undercloud, we assume it's one node. So we can just use certmonger's internal CA | 08:34 |
| bogdando | okay, got iy | 08:34 |
| bogdando | thanks! | 08:34 |
| jaosorior | bogdando: so you have two options: 1) inject your own cert 2) use certmonger's internal CA | 08:35 |
| jaosorior | all of this is already set up if you use generate_service_certificate in undercloud.conf | 08:35 |
| jaosorior | bogdando: https://github.com/openstack/python-tripleoclient/blob/master/tripleoclient/v1/undercloud_config.py#L728 https://github.com/openstack/python-tripleoclient/blob/master/tripleoclient/v1/undercloud_config.py#L750 | 08:36 |
| openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Reduce reproducer redudancy https://review.openstack.org/558369 | 08:36 |
| bogdando | jaosorior: yes, I use generate_service_certificate. Just missed the CertmongerUser service in the role file | 08:37 |
| *** derekh has joined #tripleo | 08:40 | |
| *** radeks has quit IRC | 08:41 | |
| *** radeks has joined #tripleo | 08:42 | |
| *** ratailor is now known as rtailor | 08:44 | |
| Tengu | jaosorior: btw, any way to tell certmonger to request certs from a freeipa? :) | 08:47 |
| Tengu | jaosorior: would that be supported at some level in tripleo, for both under and overcloud? | 08:47 |
| Tengu | jaosorior: (meaning: not only for the internal TLS ;)) | 08:48 |
| *** salmankhan has quit IRC | 08:49 | |
| *** nyechiel_ has quit IRC | 08:52 | |
| *** nyechiel_ has joined #tripleo | 08:53 | |
| jaosorior | Tengu: yes ther eis | 08:55 |
| jaosorior | * yes there is | 08:55 |
| jaosorior | for both | 08:55 |
| jaosorior | Tengu: so, if you're using novajoin already, then there's not much to add but this environment: https://github.com/openstack/tripleo-heat-templates/blob/master/environments/services/haproxy-public-tls-certmonger.yaml | 08:56 |
| jaosorior | Tengu: if you're not using novajoin, you also need to do some more steps | 08:56 |
| jaosorior | so, you can tell certmonger to use FreeIPA by seeting the CertmongerCA parameter to 'IPA' | 08:57 |
| jaosorior | uhm... and that's it. certmonger will try to contact IPA, assuming your node is enrolled and the haproxy/<fqdn> service principals exist in the IPA database | 08:58 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Mount the public TLS certificate for HAProxy on up(date|grade) on pacemaker https://review.openstack.org/557653 | 08:58 |
| Tengu | jaosorior: hmm ok. Ah, right, the novajoin thingy... will need to work on that. Maybe that would be a nice "first thing" next month for me? :) | 08:59 |
| jaosorior | Tengu: we could sure use some help there :D | 08:59 |
| Tengu | jaosorior: I'll check that. That's a small thing I really like to see working properly, even in some… exotic setups like I currently have at work (dedicated realm for IPA NOT matching the cloud domain) | 09:00 |
| rtailor | Can anyone tell, how to test tripleo-puppet-elements changes ? | 09:00 |
| *** nyechiel has joined #tripleo | 09:00 | |
| *** nyechiel_ has quit IRC | 09:01 | |
| Tengu | rtailor: puppet rspec ? | 09:01 |
| jaosorior | Tengu: thought we had fixed that realm issue (we added a config parameter to novajoin) | 09:02 |
| jaosorior | oh well | 09:02 |
| Tengu | jaosorior: hmm, there are other things. Don't remember, that was last year :D | 09:02 |
| Tengu | we'll take the time to check that later ;). | 09:03 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates stable/queens: Mount the public TLS certificate for HAProxy on up(date|grade) on pacemaker https://review.openstack.org/560322 | 09:03 |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Verify the Swift container exists with a small utility workflow https://review.openstack.org/528213 | 09:03 |
| *** b00tcat has joined #tripleo | 09:04 | |
| *** b00tcat has left #tripleo | 09:04 | |
| rtailor | Tengu, https://github.com/openstack/tripleo-puppet-elements | 09:05 |
| openstackgerrit | Carlos Camacho proposed openstack/tripleo-common master: Allow uploading big files to swift (5GB) https://review.openstack.org/559024 | 09:05 |
| Tengu | rtailor: erf… no idea then :/ | 09:06 |
| rtailor | jaosorior, Do you have any idea ^^ | 09:06 |
| Tengu | rtailor: maybe by building an image? But I think EmilienM would be the one for the answer. | 09:06 |
| rtailor | Tengu, I think, we can't do like this http://jaormx.github.io/2016/modifying-overcloud-images/ | 09:07 |
| *** pblaho has joined #tripleo | 09:08 | |
| Tengu | rtailor: hm, this is for the modification of existing image. apparently the repository you point build the images from 0 | 09:08 |
| Tengu | rtailor: and there's an instructin for the image building in the readme, but I don't think this would be a real state of the art test. | 09:09 |
| *** anande has quit IRC | 09:13 | |
| *** anande has joined #tripleo | 09:13 | |
| *** gfidente has joined #tripleo | 09:14 | |
| *** gfidente has quit IRC | 09:14 | |
| *** gfidente has joined #tripleo | 09:14 | |
| rtailor | Tengu, Thanks! let me check that. | 09:16 |
| openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Replace message OVB by multinode https://review.openstack.org/560325 | 09:19 |
| *** salmankhan has joined #tripleo | 09:19 | |
| openstackgerrit | Julie Pichon proposed openstack/python-tripleoclient master: Remove role commands deprecated in Queens https://review.openstack.org/559050 | 09:27 |
| openstackgerrit | Jose Luis Franco proposed openstack-infra/tripleo-ci master: Run playbooks with custom args https://review.openstack.org/553474 | 09:29 |
| openstackgerrit | Jose Luis Franco proposed openstack-infra/tripleo-ci master: Import gated tripleo-upgrade role. https://review.openstack.org/558210 | 09:29 |
| openstackgerrit | Jose Luis Franco proposed openstack-infra/tripleo-ci master: Use tripleo-upgrade role in undercloud upgrades job. https://review.openstack.org/548974 | 09:29 |
| *** cylopez has left #tripleo | 09:29 | |
| owalsh | rtailor, Tengu: yea, building an image is what I do to test - https://docs.openstack.org/tripleo-docs/latest/install/basic_deployment/basic_deployment_cli.html#get-images | 09:31 |
| Tengu | owalsh: ok :). too easy then :]. thanks for precision | 09:35 |
| *** akrivoka has joined #tripleo | 09:37 | |
| *** salmankhan1 has joined #tripleo | 09:37 | |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-quickstart-extras master: Added enable_tempest flag for installing tempest on undercloud https://review.openstack.org/558510 | 09:38 |
| *** salmankhan has quit IRC | 09:38 | |
| *** salmankhan1 is now known as salmankhan | 09:38 | |
| *** anilvenkata has joined #tripleo | 09:38 | |
| openstackgerrit | Chandan Kumar proposed openstack/python-tripleoclient master: Added fake tempest docker service to undercloud config https://review.openstack.org/551271 | 09:41 |
| openstackgerrit | Christian Schwede proposed openstack/tripleo-common stable/queens: Fix parameter indentation on Swift rebalance playbook https://review.openstack.org/560337 | 09:47 |
| chandankumar | sshnaidm: Hello | 09:49 |
| sshnaidm | chandankumar, hi | 09:49 |
| openstackgerrit | yolanda.robla proposed openstack/tripleo-heat-templates stable/pike: Add openvswitch/hugetlbfs user and group on update https://review.openstack.org/560338 | 09:49 |
| chandankumar | sshnaidm: https://review.openstack.org/#/c/554522/ in order to test tempest undercloud for stable branches where can i change in tht? | 09:49 |
| chandankumar | sshnaidm: will i pick any file and make random changes? | 09:49 |
| *** salmankhan has quit IRC | 09:50 | |
| chandankumar | sshnaidm: tripleo-ci-centos-7-undercloud-oooq runs on all stable branches | 09:50 |
| sshnaidm | chandankumar, yeah, I think it'll work | 09:50 |
| chandankumar | sshnaidm: white space changes? | 09:50 |
| sshnaidm | chandankumar, just add some comment to one of service yaml files | 09:51 |
| chandankumar | sshnaidm: sure | 09:51 |
| sshnaidm | chandankumar, readme, whitespace, etc could be ignored | 09:51 |
| jaosorior | mandre: are you around? | 09:52 |
| openstackgerrit | Hamdy Khader proposed openstack/tripleo-heat-templates master: Add support for NVMeOF cinder backend https://review.openstack.org/559572 | 09:54 |
| jaosorior | bandini: dude, if you have some time could you review these? https://review.openstack.org/#/q/topic:public-tls-default+status:open got it working :D | 09:55 |
| *** gfidente has quit IRC | 09:55 | |
| jaosorior | shardy, mandre: Is there a way to force a specific container to run every time? | 09:56 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/queens: [DNM] testing tempest on undercloud for queens https://review.openstack.org/560343 | 09:57 |
| *** salmankhan has joined #tripleo | 09:59 | |
| openstackgerrit | Merged openstack/diskimage-builder master: Don't only install python3-virtualenv https://review.openstack.org/559871 | 10:00 |
| shardy | jaosorior: you mean a service container to restart every update, or a bootstrap task that always runs? | 10:01 |
| rtailor | owalsh, was trying for OSP10, it didn't work. Don't know much about image building stuff. | 10:02 |
| openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart-extras master: WIP: install collectd on undercloud https://review.openstack.org/560048 | 10:02 |
| shardy | jaosorior: I think in both cases you'd wire in DeployIdentifier to the container environment, similar to how we add TRIPLEO_CONFIG_HASH | 10:02 |
| jaosorior | shardy: is there an example around? | 10:04 |
| jaosorior | shardy: thing is, I would like a bootstrap container to run every time there's an overcloud deploy | 10:05 |
| jaosorior | dciabrin: around? | 10:05 |
| dciabrin | jaosorior, yes | 10:05 |
| jaosorior | dciabrin: seems that mysql_init_bundle only gets ran once in the deployment, is that intended? | 10:05 |
| dciabrin | jaosorior, it runs everytime iiuc, but puppet-pacemaker doesn't change the resource once it's been created | 10:06 |
| openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Include extra_params option in reproducer-quickstart.sh. https://review.openstack.org/546932 | 10:06 |
| dciabrin | jaosorior, it's a regular paunch container, i don't see why it would not re-run every time :/ | 10:06 |
| jaosorior | dciabrin: I've noticed it doesn't. It only runs on the first deployment | 10:07 |
| jaosorior | dciabrin: cause the configuration doesn't change | 10:07 |
| jaosorior | dciabrin: so if the configuration of that container stays the same, paunch doesn't need to re-run it | 10:07 |
| jaosorior | dciabrin: which is why I asked shardy how do we get to run a container every deployment | 10:07 |
| dciabrin | jaosorior, oh, makes sense | 10:07 |
| jaosorior | so... the issue I'm having is that you cannot change mysql passwords :/ | 10:07 |
| jaosorior | because that container is the one that does the puppet deployment, and it only runs once | 10:08 |
| dciabrin | jaosorior, but the password is generated via docker-puppet, so the config is still changed on the host. next time you restart the pacemaker container it will be picked up | 10:09 |
| dciabrin | jaosorior, granted, currently nothing restarts pacemaker resource if config changes. | 10:09 |
| jaosorior | dciabrin: but docker-puppet is called manually, instead of using the docker_puppet_tasks section | 10:10 |
| *** skramaja has quit IRC | 10:10 | |
| dciabrin | jaosorior, the only automatic way of restarting it is to rely on the fact that minor updates restart the nodes | 10:10 |
| *** skramaja_ has joined #tripleo | 10:10 | |
| dciabrin | jaosorior, err no. we run puppet manually in docker-init-bundle, but this is different from docker-puppet, which is run during the deploy steps, before executing step1, step2... | 10:10 |
| dciabrin | jaosorior, did I get your point correctly? | 10:11 |
| jaosorior | dciabrin: https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/pacemaker/database/mysql.yaml#L243 | 10:11 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/pike: [DNM] testing tempest on undercloud for pike https://review.openstack.org/560351 | 10:11 |
| dciabrin | jaosorior, right that one doesn't (re)generate the mysql config | 10:12 |
| dciabrin | jaosorior, it only creates a resource in pacemaker | 10:12 |
| jaosorior | dciabrin: it doesn't | 10:12 |
| jaosorior | dciabrin: it runs docker_puppet_apploy.sh manually | 10:12 |
| openstackgerrit | Merged openstack/diskimage-builder master: Set the dhclient timeout to match DIB_DHCP_TIMEOUT https://review.openstack.org/559084 | 10:12 |
| dciabrin | jaosorior, which is different from https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/pacemaker/database/mysql.yaml#L120 | 10:13 |
| jaosorior | dciabrin: correct | 10:13 |
| dciabrin | that one ^^^ is executed whenever to do an overcloud deploy, so config should get regerated | 10:13 |
| jaosorior | dciabrin: right | 10:13 |
| jaosorior | that's the config | 10:13 |
| *** psahoo has quit IRC | 10:13 | |
| jaosorior | not the users and passwords | 10:13 |
| jaosorior | the config stuff works just fine | 10:13 |
| dciabrin | oh | 10:13 |
| *** skramaja_ is now known as skramaja | 10:13 | |
| jaosorior | this https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/pacemaker/database/mysql.yaml#L126 adds the users and passwords to be noops | 10:14 |
| jaosorior | so that doesn't get executed there | 10:14 |
| jaosorior | the container I pointed at does that | 10:14 |
| jaosorior | and it does so by running the script manually | 10:14 |
| jaosorior | here https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/pacemaker/database/mysql.yaml#L250 | 10:14 |
| *** nyechiel has quit IRC | 10:15 | |
| *** nyechiel_ has joined #tripleo | 10:15 | |
| dciabrin | jaosorior, ok i see. the side effect of that container is that it creates the mysql user and/or changes the password if it's (re)-executed? | 10:15 |
| jaosorior | dciabrin: correct | 10:16 |
| dciabrin | jaosorior, damned, got you.. :/ | 10:16 |
| jaosorior | dciabrin: I think the solution is to move that to use this syntax https://github.com/openstack/tripleo-heat-templates/blob/master/docker/services/keystone.yaml#L203 | 10:16 |
| shardy | sorry got distracted, by design paunch doesn't restart containers unless the json definition changes | 10:17 |
| shardy | that is why we add TRIPLEO_CONFIG_HASH when the configuration changes in the bind mounts | 10:17 |
| shardy | otherwise every update would restart every container | 10:17 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/ocata: [DNM] testing tempest on undercloud for Ocata https://review.openstack.org/560352 | 10:17 |
| dciabrin | jaosorior, hmm we can't use that, we tried during osp12 and it failed with multi-node. I don't remember the reason right now, but we moved to the manual call to puppet on purpose | 10:17 |
| shardy | as I mentioned passing some other salt like the DeployParameter timestamp could be a workaround | 10:18 |
| shardy | to force the config to change every update | 10:18 |
| *** cdearborn has joined #tripleo | 10:18 | |
| *** avivgt has joined #tripleo | 10:19 | |
| jaosorior | shardy: I don't understand what that means :( | 10:19 |
| shardy | jaosorior: what part? | 10:19 |
| jaosorior | shardy: "as I mentioned passing some other salt like the DeployParameter timestamp could be a workaround" | 10:19 |
| jaosorior | I grep that in t-h-t and don't find an occurence | 10:19 |
| *** cshastri has quit IRC | 10:19 | |
| *** jaganathan has quit IRC | 10:20 | |
| shardy | jaosorior: sorry it's DeployIdentifier | 10:20 |
| shardy | it changes every update, it's a timestamp | 10:20 |
| *** gfidente has joined #tripleo | 10:20 | |
| *** gfidente has quit IRC | 10:20 | |
| *** gfidente has joined #tripleo | 10:20 | |
| jaosorior | I see | 10:20 |
| dciabrin | jaosorior, this sounds like a bigger problem than mysql though. IIUC, the mysql user password is not part of any config file. | 10:20 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/ocata: [DNM] testing tempest on undercloud for Ocata https://review.openstack.org/560352 | 10:20 |
| jaosorior | dciabrin: I think we've got a solution | 10:21 |
| shardy | if you have some config which hasn't actually changed, but you want to fake that it always changes, you could include that timestamp in the configuration, e.g the container environment or whatever | 10:21 |
| shardy | even if the timestamp is ignored | 10:21 |
| jaosorior | shardy: right, like it's done in the nova-api.yaml | 10:21 |
| jaosorior | shardy: got it, I'll give it a try | 10:21 |
| dciabrin | jaosorior, how would we tell other container to restart if | 10:21 |
| dciabrin | woops bad cut'n'paste | 10:21 |
| dciabrin | shardy, makes sense | 10:21 |
| shardy | jaosorior: ack yeah exactly like nova-api.yaml | 10:21 |
| jaosorior | dciabrin: I'll try it out, test it out, raise a bug and put up a fix. | 10:22 |
| dciabrin | jaosorior, ok thx | 10:22 |
| dciabrin | bandini ^^^ fyi | 10:22 |
| * bandini scrolls back | 10:22 | |
| shardy | jaosorior: if the thing that's changing is the password, could you just add that to the environment? | 10:22 |
| shardy | vs doing it every update? | 10:23 |
| jaosorior | shardy: it applies for every password for every openstack service | 10:23 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/newton: [DNM] testing tempest on undercloud for Newton https://review.openstack.org/560353 | 10:23 |
| jaosorior | shardy: we can't rotate passwords currently | 10:23 |
| shardy | jaosorior: ack, but I guess we still only want to mess with users when that password changes, vs running some bootstrap task unconditionally? | 10:23 |
| shardy | I suppose the bootstrap task can do nothing when the password is unchanged | 10:23 |
| *** nyechiel has joined #tripleo | 10:24 | |
| shardy | or re-set the same password | 10:24 |
| jaosorior | shardy: that's all done here https://github.com/openstack/puppet-tripleo/blob/master/manifests/profile/base/database/mysql.pp#L163 | 10:24 |
| *** nyechiel_ has quit IRC | 10:24 | |
| shardy | but my concern is it's a pattern which could cause e.g unneccesary service restarts | 10:24 |
| shardy | jaosorior: ack, Ok maybe DeployIdentifier is enough in this case then | 10:24 |
| jaosorior | shardy: it won't restart mysql | 10:25 |
| *** rajinir has quit IRC | 10:25 | |
| *** zoli is now known as zoli|lunch | 10:29 | |
| jaosorior | shardy: I'll give that a try, thanks for the help! | 10:32 |
| bogdando | folks, when composing networks, What is relation of InternalApi* to Control(Plane)* | 10:32 |
| bogdando | thinking of all-in-one coud | 10:32 |
| bogdando | shall they merge? | 10:33 |
| bogdando | I'm trying to use a flat model, but it deploys the same IPs for haproxy frontends and backends :( | 10:33 |
| * bogdando sigh | 10:34 | |
| jaosorior | bogdando: you probably only need one network | 10:34 |
| jaosorior | bogdando: but HAProxy still needs to have separate passwords | 10:34 |
| bogdando | so I'm gonna add environments/fixed-ip-vips.yaml and override all those InternalApi/PublicVirtual/Storage*/Tenant/Control* things | 10:34 |
| jaosorior | * IPs | 10:35 |
| jaosorior | (thinking about passwords right now) | 10:35 |
| bogdando | right, I cant get that tht language to explain that to my UC tho! :) | 10:35 |
| *** nyechiel_ has joined #tripleo | 10:35 | |
| jaosorior | bogdando: IIRC, dprince had addressed that somehow... would recommend asking him | 10:35 |
| *** cdearborn has quit IRC | 10:35 | |
| shardy | bogdando: the vip is the frontend, and the backend is the bind IP for the service | 10:36 |
| bogdando | well , one network would work for me as well, thou I wanted to learn composable networks as well | 10:36 |
| shardy | so overriding the vip may be your problem | 10:36 |
| *** nyechiel has quit IRC | 10:36 | |
| bogdando | here is my messy config WIP folks | 10:36 |
| shardy | bogdando: you could use a special network_data.yaml that has only one network in it | 10:36 |
| shardy | to simplify the generated templates | 10:36 |
| *** shardy is now known as shardy_afk | 10:36 | |
| Tengu | gfidente: hello! I can confirm: the tag you gave me is OK for ceph containers on pike ! | 10:36 |
| bogdando | https://github.com/bogdando/oooq-warp/commit/98a5a1c94bf14a3a49acc00d10a8bf18662774f0 shardy_afk jaosorior | 10:37 |
| openstackgerrit | yatin proposed openstack/tripleo-heat-templates master: Set ulimit for nova-compute and cinder-volume https://review.openstack.org/560359 | 10:37 |
| *** pkovar has quit IRC | 10:38 | |
| bogdando | so I'm trying it all-composed multiple networks sitting flat way | 10:38 |
| bogdando | though would like to know more of that "you could use a special network_data.yaml that has only one network in it" option | 10:39 |
| bogdando | the issue is that I'm not sure how to end up with network config creating br-ex and br-ctlplane | 10:39 |
| *** moshele has joined #tripleo | 10:45 | |
| bogdando | shardy_afk: and the role data https://github.com/bogdando/oooq-warp/blob/master/tht/roles/UndercloudAIOOpenshift.yaml | 10:45 |
| *** ccamacho has quit IRC | 10:46 | |
| *** ccamacho has joined #tripleo | 10:48 | |
| openstackgerrit | Mike Fedosin proposed openstack/tripleo-common master: Optimize mistral baremetal workflows https://review.openstack.org/560367 | 10:55 |
| openstackgerrit | binhong.hua proposed openstack/tripleo-puppet-elements master: Remove heat-api-cloudwatch from package install https://review.openstack.org/560368 | 10:55 |
| *** anande has quit IRC | 10:57 | |
| gfidente | Tengu hey, good :D | 10:57 |
| d0ugal | mfedosin: Nice patch! ^ | 10:58 |
| mfedosin | d0ugal: thanks :) I hope tests will pass | 10:59 |
| d0ugal | mfedosin: me too :) | 10:59 |
| d0ugal | mfedosin: it is hard to concentrate to review changes like this, but I'll try and do it today | 11:00 |
| d0ugal | or I find it hard at least | 11:00 |
| shardy_afk | bogdando: I think you'll still need the ctlplane network unless we rework the templates, but the network_data could have only e.g the InternalApi network in it | 11:04 |
| *** shardy_afk is now known as shardy | 11:04 | |
| shardy | I expect even in the all-in-one case you may want to separate external and internal traffic on different nics/vlans though | 11:04 |
| *** pkovar has joined #tripleo | 11:06 | |
| *** dprince has joined #tripleo | 11:07 | |
| *** ansmith has quit IRC | 11:11 | |
| openstackgerrit | Noam Angel proposed openstack/tripleo-heat-templates master: Fix few issues with deploying with baremetal-services.yaml https://review.openstack.org/560261 | 11:16 |
| gfidente | jistr you happen to have some time to help me figure what is wrong with the external_deploy_task for ceph? | 11:17 |
| gfidente | jistr basically it looks to me that both scenarios passed the ceph install https://review.openstack.org/#/c/546966/ | 11:18 |
| gfidente | jistr but then somehow both failed in the same way during following step 2 ansible tasks | 11:18 |
| *** abishop has joined #tripleo | 11:18 | |
| gfidente | jistr and I couldn't find a simple error pointing to the actual issue | 11:18 |
| jistr | gfidente: i happen to have negative amount of time for at least the past 2 weeks but yes i'll help :D | 11:18 |
| gfidente | jistr who can help? | 11:19 |
| jistr | gfidente: just gimme some time to kick off a test of update | 11:19 |
| gfidente | jistr ok thanks, believe me I couldn't figure *what* is failing | 11:19 |
| gfidente | jistr finding that would be a good start | 11:19 |
| gfidente | jistr++ | 11:20 |
| *** panda|off is now known as panda|lunch | 11:21 | |
| *** assassin has joined #tripleo | 11:26 | |
| mfedosin | shardy: hi! I'm reviewing your patch https://review.openstack.org/#/c/560312/1 | 11:28 |
| mfedosin | everything is fine there... | 11:28 |
| mfedosin | But the code of the action makes me cry | 11:28 |
| mfedosin | and if I had the opportunity to rewrite it from scratch ... | 11:29 |
| mfedosin | do you mind if I take your patch and finish it up to a reasonable state? | 11:29 |
| mfedosin | or I can list or shortcomings there | 11:31 |
| *** nyechiel_ has quit IRC | 11:31 | |
| ykarel | owalsh, hi | 11:31 |
| owalsh | ykarel: hi | 11:32 |
| ykarel | owalsh, i am setting ulimit for nova compute, can you look: https://review.openstack.org/#/c/560359/ | 11:32 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-quickstart-extras master: Added tempest skip list for undercloud for stable branches https://review.openstack.org/560374 | 11:32 |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Verify the Swift container exists with a small utility workflow https://review.openstack.org/528213 | 11:34 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-quickstart master: Run tempest on undercloud on fs003 https://review.openstack.org/554522 | 11:34 |
| shardy | mfedosin: yeah the code is not great, feel free to push a follow-up which rewrites it if you like | 11:35 |
| owalsh | ykarel: this is why yea https://bugs.launchpad.net/oslo.rootwrap/+bug/1760471/comments/1 | 11:35 |
| openstack | Launchpad bug 1760471 in oslo.rootwrap "oslo-rootwrap-daemon performing badly in docker containers(centos/fedora)" [Undecided,Confirmed] | 11:35 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/queens: [DNM] testing tempest on undercloud for queens https://review.openstack.org/560343 | 11:35 |
| mfedosin | shardy: thanks! | 11:35 |
| ykarel | owalsh, yes | 11:36 |
| owalsh | ykarel: and the ssh timeouts too??? | 11:36 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/pike: [DNM] testing tempest on undercloud for pike https://review.openstack.org/560351 | 11:36 |
| ykarel | owalsh, yes that was because of neutron l3 agents | 11:36 |
| *** zoli|lunch is now known as zoli | 11:36 | |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/ocata: [DNM] testing tempest on undercloud for Ocata https://review.openstack.org/560352 | 11:36 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-heat-templates stable/newton: [DNM] testing tempest on undercloud for Newton https://review.openstack.org/560353 | 11:37 |
| owalsh | ykarel: wow, didn't realise subprocess did this | 11:37 |
| ykarel | owalsh, yes subprocess with python2 has the problem, with python3 doesn't have this issue as victor said | 11:38 |
| jaosorior | shardy: could you review this backport https://review.openstack.org/#/c/560322/ ? | 11:41 |
| *** suuuper has quit IRC | 11:42 | |
| shardy | jaosorior: ack will do | 11:42 |
| *** rfolco|off is now known as rfolco|rover | 11:44 | |
| *** jpena is now known as jpena|lunch | 11:46 | |
| EmilienM | o/ | 11:48 |
| jaosorior | EmilienM: sup dude, how's it going? | 11:51 |
| *** morazi has joined #tripleo | 11:52 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Always run mysql init bundle https://review.openstack.org/560387 | 11:52 |
| jaosorior | dciabrin: that fixed the issue ^^ | 11:52 |
| EmilienM | jaosorior: tried to re-enable containerized undercloud on fs010 for pure testing and now it fails on CREATE_FAILED Resource CREATE failed: Error in EndpointMap output endpoint_map: Invalid URL port "" for make_url called with {u'host': u'', u'scheme': '', u'port': ''} - | 11:52 |
| EmilienM | http://logs.openstack.org/64/560264/2/check/tripleo-ci-centos-7-containers-multinode/0671d02/logs/undercloud/home/zuul/undercloud_install.log.txt.gz#_2018-04-11_06_18_55 | 11:52 |
| dciabrin | jaosorior, ack thx very much! | 11:54 |
| *** gkadam has quit IRC | 11:54 | |
| jaosorior | EmilienM: any idea where was that invalid call? | 11:54 |
| jaosorior | EmilienM: I can check it out after the Security Squad meeting. | 11:55 |
| EmilienM | jaosorior: nah, no worries. I just saw it, I'll investigate | 11:55 |
| openstackgerrit | Merged openstack/tripleo-quickstart-extras master: Fix switching services-docker to services https://review.openstack.org/559930 | 11:56 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Delete not-used services-docker files https://review.openstack.org/556794 | 11:56 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Removed unnecessary services from the LiquidioCompute role. https://review.openstack.org/559696 | 11:56 |
| jaosorior | EmilienM: another option is that an invalid endpoint map was given somehow as a parameter. | 11:57 |
| *** atoth has joined #tripleo | 11:58 | |
| jaosorior | shouldn't be hard to figure it out. Lets check the command that was used. | 11:58 |
| *** raildo has joined #tripleo | 11:58 | |
| *** leanderthal has joined #tripleo | 11:58 | |
| *** gkadam has joined #tripleo | 11:59 | |
| jaosorior | EmilienM: /usr/share/openstack-tripleo-heat-templates/environments/no-tls-endpoints-public-ip.yaml was used. | 11:59 |
| anilvenkata | EmilienM, shardy can you please review this https://review.openstack.org/#/c/559806/ | 12:00 |
| jaosorior | EmilienM: seems it went out of sync | 12:00 |
| anilvenkata | EmilienM, shardy it fixing a typo but important for scheduling HA routers | 12:00 |
| *** amoralej is now known as amoralej|lunch | 12:01 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Add designate to the non-TLS environment https://review.openstack.org/560396 | 12:01 |
| jaosorior | EmilienM: ^^ | 12:01 |
| *** dsariel has quit IRC | 12:01 | |
| jaosorior | alee, lhinds, moguimar, raildo, owalsh: around? | 12:01 |
| moguimar | o/ | 12:01 |
| owalsh | o/ | 12:01 |
| jaosorior | #startmeeting TripleO Security Squad | 12:02 |
| openstack | Meeting started Wed Apr 11 12:02:30 2018 UTC and is due to finish in 60 minutes. The chair is jaosorior. Information about MeetBot at http://wiki.debian.org/MeetBot. | 12:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 12:02 |
| *** openstack changes topic to " (Meeting topic: TripleO Security Squad)" | 12:02 | |
| openstack | The meeting name has been set to 'tripleo_security_squad' | 12:02 |
| jaosorior | Gonna wait a couple of minutes for more folks to log in./ | 12:02 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-quickstart master: Revert "Revert "Deploy container-multinode (fs010) with a containerized undercloud"" https://review.openstack.org/560264 | 12:03 |
| jaosorior | Alright | 12:05 |
| jaosorior | #topic Work progress update | 12:05 |
| *** openstack changes topic to "Work progress update (Meeting topic: TripleO Security Squad)" | 12:05 | |
| *** nyechiel_ has joined #tripleo | 12:05 | |
| jaosorior | Same as every week, this is just a placeholder to have folks know how the work is going for the different topics. | 12:05 |
| jaosorior | #topic Public TLS by default | 12:05 |
| *** openstack changes topic to "Public TLS by default (Meeting topic: TripleO Security Squad)" | 12:05 | |
| jaosorior | This is the one I've been the most active in. | 12:06 |
| raildo | o/ | 12:06 |
| jaosorior | I've got some working patches, and most of the stuff in the chain has already merged | 12:06 |
| jaosorior | I still need to write proper documentation about that | 12:06 |
| jaosorior | since that change does introduce some changes to our defaults (besides the fact that it uses TLS) | 12:06 |
| *** jcoufal has joined #tripleo | 12:07 | |
| jistr | gfidente: looking at the ceph issue now | 12:07 |
| jaosorior | for one, the default will be to use FQDNs instead of IPs for the public endpoints. | 12:07 |
| jaosorior | So, the user/deployer will need to add those to DNS or /etc/hosts after the deployment | 12:07 |
| jaosorior | gotta see if we can automate that though | 12:08 |
| jaosorior | at least the /etc/hosts part | 12:08 |
| jaosorior | shouldn't be too hard. | 12:08 |
| jaosorior | Again, reviews are very much welcome, and the patches are in the etherpad | 12:08 |
| jaosorior | #link https://etherpad.openstack.org/p/tripleo-security-squad | 12:08 |
| jaosorior | I've also been using the same topic for the patches | 12:08 |
| jaosorior | #link https://review.openstack.org/#/q/topic:public-tls-default+(status:open+OR+status:merged) | 12:08 |
| *** pdeore has quit IRC | 12:09 | |
| jaosorior | Any questions/feedback? | 12:09 |
| bogdando | jaosorior, shardy: can I debug network data in hiera somehow? I still keep getting the same frontend and backend IPs for haproxy config, and my admin/public VIPs seem ignored | 12:10 |
| bogdando | sorry, it's a meeting here... | 12:10 |
| jaosorior | bogdando: no worries. I can check that out after the meeting | 12:10 |
| jaosorior | #topic Secret Management for TripleO | 12:10 |
| *** openstack changes topic to "Secret Management for TripleO (Meeting topic: TripleO Security Squad)" | 12:10 | |
| *** thrash|g0ne is now known as thrash | 12:10 | |
| jaosorior | So, we started taking the first steps on this task | 12:11 |
| jaosorior | We have identified all the potentially sensitive data in this etherpad: | 12:11 |
| jaosorior | #link https://etherpad.openstack.org/p/tripleo-audit-secrets | 12:11 |
| jaosorior | so, if you are curious about what we identified and how we plan to address it, that's the place to look :) | 12:11 |
| jaosorior | upon the first stuff to cover is the undercloud's swift | 12:12 |
| jaosorior | we plan to use Swift encryption (at rest) and hopefully enable it as a default | 12:12 |
| jaosorior | there are several ways of doing that though. | 12:12 |
| *** eck`gone is now known as eck` | 12:12 | |
| *** liverpooler has joined #tripleo | 12:12 | |
| jaosorior | One is to have a pre-shared key (or encryption root secret) in the swift configuration | 12:13 |
| openstackgerrit | Marios Andreou proposed openstack/tripleo-heat-templates master: Update environment files for Q upgrade and ffwd upgrade https://review.openstack.org/559061 | 12:13 |
| jaosorior | that will then be used to encrypt the swift containers | 12:13 |
| jaosorior | The other, is to use something else (such as barbican) | 12:13 |
| jaosorior | And apparently we already have support for the former one in t-h-t; so that could be a good fit for a feature for the containerized undercloud. | 12:13 |
| openstackgerrit | Lukas Bezdicka proposed openstack/tripleo-common master: Unite default parameter_resource name https://review.openstack.org/560110 | 12:14 |
| jaosorior | of course, ideally the best would be that the default configuration wouldn't need to use barbican. We gotta see waht's best to implement | 12:14 |
| jaosorior | If folks want to join that effort, help is very appreciated. | 12:14 |
| moguimar | watching the project update of swift yesterday | 12:15 |
| moguimar | https://www.youtube.com/watch?v=rnAtnnE0sQM&feature=youtu.be | 12:15 |
| moguimar | they mentioned that swift can run stand alone | 12:15 |
| *** panda|lunch is now known as panda | 12:16 | |
| jaosorior | moguimar: yeah, that's a feature they have. Although we don't really need it as we do have a proper openstack installation on the undercloud. | 12:16 |
| moguimar | trying to get a default option aligned to that would be more popular | 12:17 |
| jaosorior | moguimar: did you have something in mind regarding the standalone feature? | 12:17 |
| moguimar | not yet | 12:17 |
| jaosorior | moguimar: so, we already deploy and use swift by default. We use it to store the overcloud deployment "plan". The plan is merely the set of rendered heat templates, parameters and options to deploy the overcloud. | 12:17 |
| jaosorior | so, the plan would contain passwords and SSL keys in the form of heat parameters that would be used to deploy the overclod. | 12:18 |
| jaosorior | *overcloud | 12:18 |
| jaosorior | moguimar: the plan would be to add the encryption option as a default for the swift deployment in the undercloud that we already do. | 12:19 |
| jistr | gfidente: hmm interesting indeed, it looks like it fails in step 1 of docker-puppet.py but i'm having trouble to spot any indication of root cause in the logs | 12:19 |
| jistr | http://logs.openstack.org/66/546966/28/check/tripleo-ci-centos-7-scenario004-multinode-oooq-container/130db82/logs/undercloud/home/zuul/overcloud_deploy.log.txt.gz | 12:19 |
| jaosorior | Now, the tricky thing are updates/upgrades. | 12:20 |
| anilvenkata | EmilienM, thanks Emilien | 12:20 |
| jaosorior | The encryption docs say that only new swift containers would be encrypted. Which would require the deployer to download the plan, delete it, and upload it again. | 12:20 |
| jaosorior | But I think that's a reasonable expectation if folks need that feature. | 12:20 |
| openstackgerrit | Lukas Bezdicka proposed openstack/tripleo-common master: Unite default parameter_resource name https://review.openstack.org/560110 | 12:21 |
| jaosorior | Anyway, that's all the update from my side. There is still a bunch of research and a POC to do. | 12:21 |
| jaosorior | any questions.feedback? | 12:21 |
| jaosorior | questions/feedback | 12:21 |
| openstackgerrit | Mike Fedosin proposed openstack/tripleo-common master: UpdatePlanEnvironmentAction enable overwrite or merge https://review.openstack.org/560312 | 12:21 |
| moguimar | I got through the oslo.config docs | 12:22 |
| moguimar | now I'm watching the project updates in the openstack website to get familiarized with all the projects I heard so far in our discussions | 12:23 |
| jaosorior | moguimar: if you have questions about any project, reach out, we're always glad to help | 12:23 |
| moguimar | sure | 12:23 |
| jaosorior | Alright | 12:24 |
| jaosorior | that's all for the work updates | 12:24 |
| jaosorior | #topic Migration to Storyboard | 12:24 |
| *** openstack changes topic to "Migration to Storyboard (Meeting topic: TripleO Security Squad)" | 12:24 | |
| jaosorior | So... Kendall and EmilienM reached out recently proposing that the Security Squad try out using Storyboard | 12:25 |
| jaosorior | For anybody interested | 12:25 |
| jaosorior | here's the link | 12:25 |
| jaosorior | #link https://storyboard.openstack.org/ | 12:25 |
| jaosorior | So, we could track the work progress and user stories there, as well as bugs and other work done by the squad | 12:26 |
| *** quiquell is now known as quiquell|lunch | 12:26 | |
| EmilienM | ++ | 12:26 |
| jaosorior | which would effectively replace our etherpad which is getting quite filled up | 12:26 |
| moguimar | +1 | 12:26 |
| jaosorior | I for one, am quite keen on giving it a try | 12:26 |
| alee | jaosorior, we dont actually have any launchpad items so there is no migration | 12:26 |
| EmilienM | feel free to reach her on #storyboard, she's diablo_rojo | 12:26 |
| jaosorior | alee: exactly | 12:26 |
| moguimar | scrum feelings | 12:26 |
| alee | its just a matter of using it | 12:26 |
| raildo | I'm fine with storyboard as well :) | 12:26 |
| jaosorior | Does someone have any reservations or comments against it? | 12:27 |
| alee | and if everyone else is doing so, why not? | 12:27 |
| alee | I plan to migrate barbican to it next week | 12:27 |
| jaosorior | alee: nice! | 12:27 |
| jaosorior | alright | 12:27 |
| jaosorior | #action TripleO Security Squad will start tracking the projects we're working on in Storyboard | 12:27 |
| *** nyechiel_ has quit IRC | 12:28 | |
| jaosorior | I still need to give it a better read to know more features that it has, but it seems quite promising | 12:28 |
| alee | jaosorior, has the rest of tripleo migrated too? | 12:28 |
| jaosorior | EmilienM: ^^ | 12:28 |
| alee | does it matter? | 12:28 |
| jaosorior | alee: I don't think it matters :) | 12:28 |
| jaosorior | and I don't know if any other squad from tripleo has migrated | 12:29 |
| alee | jaosorior, fair enough -- it just may get tricky if we have references to launchpad issues | 12:29 |
| jaosorior | we do have some | 12:29 |
| jaosorior | so, we'll need to figure out how that works | 12:29 |
| alee | for work thatwe depend on that is outside of the security squad | 12:29 |
| EmilienM | only UI and validations | 12:29 |
| EmilienM | have migrated | 12:29 |
| *** rlandy has joined #tripleo | 12:30 | |
| alee | ok - so there is precedent then -- no objections from me | 12:30 |
| jaosorior | alright | 12:30 |
| jaosorior | lets migrate then! :D | 12:30 |
| EmilienM | jtomasek, jrist, honza, florianf, jpich (and others): if you have anything to share on storyboard migration so far | 12:30 |
| *** eck` is now known as eck`gone | 12:31 | |
| *** nyechiel_ has joined #tripleo | 12:33 | |
| jaosorior | well, hopefully they'll reach out when they have time. And now we know who to poke if we have some questions regarding how to link Storyboard to our existing TripleO bugs. | 12:33 |
| jaosorior | #topic Any other business | 12:35 |
| *** openstack changes topic to "Any other business (Meeting topic: TripleO Security Squad)" | 12:35 | |
| jaosorior | Does anybody have something to bring up to the group? | 12:35 |
| openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart-extras master: Install additional roles for quickstart https://review.openstack.org/558786 | 12:35 |
| honza | EmilienM: not at the moment | 12:35 |
| *** liverpooler has quit IRC | 12:37 | |
| *** liverpooler has joined #tripleo | 12:37 | |
| jaosorior | Alright folks | 12:38 |
| jaosorior | thanks for joining | 12:38 |
| jaosorior | #endmeeting | 12:38 |
| *** openstack changes topic to "Welcome to Rocky. CI status GREEN but Third Party queue is big. ಠ_ಠ recheck your patches if failed | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest/" | 12:38 | |
| openstack | Meeting ended Wed Apr 11 12:38:20 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 12:38 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-04-11-12.02.html | 12:38 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-04-11-12.02.txt | 12:38 |
| moguimar | o/ | 12:38 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-04-11-12.02.log.html | 12:38 |
| openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart-extras master: Install additional roles for quickstart https://review.openstack.org/558786 | 12:38 |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Verify the Swift container exists with a small utility workflow https://review.openstack.org/528213 | 12:39 |
| florianf | EmilienM: Haven't really used it yet. Will know more when validations are migrated! | 12:39 |
| jistr | gfidente: got it | 12:40 |
| jistr | gfidente: it's message size limit in zaqar | 12:41 |
| gfidente | ceph-ansible running with -v | 12:41 |
| jistr | that's why there's no message informing what went wrong :D | 12:41 |
| jistr | http://logs.openstack.org/66/546966/28/check/tripleo-ci-centos-7-scenario004-multinode-oooq-container/130db82/logs/undercloud/var/log/mistral/executor.log.txt.gz#_2018-04-11_02_02_14_525 | 12:41 |
| jistr | it failed the Mistral workflow which runs Ansible, but Ansible itself could have run totally fine perhaps... | 12:41 |
| *** pdeore has joined #tripleo | 12:42 | |
| jistr | just gave too big output for the Mistral/Zaqar combo to be able to crunch it | 12:44 |
| *** quiquell|lunch is now known as quiquell | 12:46 | |
| openstackgerrit | Mike Fedosin proposed openstack/tripleo-common master: Optimize mistral baremetal workflows https://review.openstack.org/560367 | 12:46 |
| *** salmankhan has quit IRC | 12:49 | |
| *** salmankhan has joined #tripleo | 12:50 | |
| *** jpena|lunch is now known as jpena | 12:50 | |
| openstackgerrit | Emilien Macchi proposed openstack/python-tripleoclient master: Manage upgrades to a containerized undercloud https://review.openstack.org/549624 | 12:52 |
| chem | jistr: hi, we should land https://review.openstack.org/#/c/559755/ the update is success \o/ and the upgrade fails after .. 3h40 which is longer than ever seen before ... and this is master . omg | 12:54 |
| *** pchavva has joined #tripleo | 12:54 | |
| openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart-extras master: Install changes in additional roles for quickstart https://review.openstack.org/558786 | 12:54 |
| *** salmankhan has quit IRC | 12:54 | |
| openstackgerrit | Athlan-Guyot sofer proposed openstack/tripleo-upgrade stable/queens: Pass env-files and roles-data file to update/upgrade prepare cli. https://review.openstack.org/560404 | 12:55 |
| chem | jistr: oups sorry, didn't see that we didn't yet land https://review.openstack.org/#/c/559746/ | 12:55 |
| *** ccamacho is now known as ccamacho|lunch | 12:57 | |
| *** ansmith has joined #tripleo | 12:57 | |
| jistr | chem: great! let's land them both then! :) | 12:57 |
| *** toure|gone is now known as toure | 12:58 | |
| chem | jistr: I still cannot read the "new log" which is a mixup of dump on one line huge ansible playbook and mistral execution | 12:59 |
| chem | jistr: (fun) | 12:59 |
| jistr | marios: please consider if you can bump +1->+2 https://review.openstack.org/#/c/559746 | 12:59 |
| jistr | marios: we got green minor update at least | 12:59 |
| *** gkadam_ has joined #tripleo | 12:59 | |
| chem | jistr: so don't know what happen during those 1h30 where the controller upgrade run ... 1h30, man, that's pretty long | 13:00 |
| chem | marios: and a failure after 3h40 in upgrade (this is master !!) | 13:00 |
| *** amoralej|lunch is now known as amoralej | 13:01 | |
| chem | jistr: marios those mistral logs ... are not friendly (user, dev, whoever) | 13:01 |
| jistr | chem: which one do you mean? (link please?) | 13:01 |
| chem | jistr: https://logs.rdoproject.org/55/559755/6/openstack-check/gate-tripleo-ci-centos-7-container-to-container-upgrades-master-nv/Z36e3f3674069460284522e7397f65ec5/undercloud/home/jenkins/overcloud_upgrade_run_Controller.log.txt.gz | 13:02 |
| chem | jistr: master upgrade | 13:02 |
| chem | on controller | 13:02 |
| *** gkadam has quit IRC | 13:02 | |
| jistr | ah yea | 13:03 |
| *** dsariel has joined #tripleo | 13:04 | |
| *** thrash is now known as thrash|brb | 13:04 | |
| *** psachin has quit IRC | 13:05 | |
| *** rtailor has quit IRC | 13:07 | |
| *** eck`gone is now known as eck` | 13:08 | |
| *** gkadam_ has quit IRC | 13:08 | |
| *** zoli is now known as zoli|afk-TPB | 13:09 | |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart-extras master: containerized-undercloud: don't manage stackrc https://review.openstack.org/559818 | 13:09 |
| openstackgerrit | Damien Ciabrini proposed openstack/tripleo-heat-templates master: Upgrade: make bundles use new container image name after upgrade https://review.openstack.org/560408 | 13:10 |
| *** jmelvin has joined #tripleo | 13:12 | |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart master: DNM - Test fs027 with --debug https://review.openstack.org/559179 | 13:12 |
| *** cshastri has joined #tripleo | 13:13 | |
| *** Goneri has joined #tripleo | 13:14 | |
| *** salmankhan has joined #tripleo | 13:16 | |
| *** chlong has joined #tripleo | 13:17 | |
| openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Reduce reproducer redudancy https://review.openstack.org/558369 | 13:18 |
| verdurin | I'm testing current quickstart.sh and the undercloud VM is hanging on startup, meaning no IP and the script fails | 13:20 |
| rasca | mwhahaha, hey, so I'm near to complete this https://review.openstack.org/#/c/555832/ just the upstream repo is missing. Now, we are actually working on this https://github.com/redhat-openstack/tripleo-quickstart-utils but it started as a fork of tripleo-quickstart-extras. Is it ok in any case? | 13:21 |
| *** radeks has quit IRC | 13:21 | |
| *** radeks has joined #tripleo | 13:22 | |
| *** dhill_ has joined #tripleo | 13:22 | |
| *** dsariel has quit IRC | 13:22 | |
| *** cdearborn has joined #tripleo | 13:22 | |
| *** mcornea has joined #tripleo | 13:23 | |
| *** cshastri has quit IRC | 13:26 | |
| jistr | we'll likely need to merge the backport too as the Depends-On waits for everything proposed, disregarding branch info https://review.openstack.org/#/c/559753/ | 13:26 |
| jistr | chem: ^ we probably shouldn't +A that one until the master lands though | 13:26 |
| *** dhill_ has quit IRC | 13:26 | |
| *** dhill_ has joined #tripleo | 13:26 | |
| *** thrash|brb is now known as thrash | 13:28 | |
| EmilienM | dprince: have you ever tried containerized undercloud when heat has convergence enabled? it's failing consistently on https://review.openstack.org/#/c/558354/ | 13:29 |
| *** etingof has quit IRC | 13:29 | |
| *** yprokule has joined #tripleo | 13:29 | |
| chandankumar | sshnaidm: https://review.openstack.org/#/c/558510/ is failing | 13:30 |
| chandankumar | http://logs.openstack.org/10/558510/6/check/tripleo-ci-centos-7-scenario007-multinode-oooq-container/e4c8f62/logs/undercloud/home/zuul/overcloud_deploy.log.txt.gz#_2018-04-11_10_53_58 | 13:30 |
| chandankumar | is it a known issue? | 13:30 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart-extras master: Remove nat/masquerading config workarounds. https://review.openstack.org/557851 | 13:30 |
| *** skramaja has quit IRC | 13:30 | |
| chandankumar | more tweaking | 13:31 |
| *** ansmith has quit IRC | 13:32 | |
| jaosorior | chandankumar: in tripleo-ci-centos-7-scenario001-multinode-oooq-container is tempest ran from a container? | 13:32 |
| *** pdeore is now known as pdeore|afk | 13:33 | |
| chandankumar | jaosorior: tripleo-ci-centos-7-undercloud-containers is only running tempest from container | 13:34 |
| chandankumar | which is fs027 | 13:34 |
| *** pblaho has quit IRC | 13:35 | |
| chandankumar | jaosorior: do we want to switch there also? | 13:35 |
| chandankumar | EmilienM: Hello | 13:35 |
| EmilienM | chandankumar: what's up? | 13:36 |
| chandankumar | EmilienM: since fs027 is running tempest from containers I am thinking to use this job against upstream tempest | 13:36 |
| jaosorior | ok | 13:36 |
| jaosorior | chandankumar: just wondering | 13:36 |
| EmilienM | chandankumar: how tempest is deployed, in a container? | 13:36 |
| EmilienM | chandankumar: if yes, it's useless to run this job in tempest because we have no mechanism to update tempest code when you submit a patch in tempest, since we deploy built containers from RDO. You would have to deploy tempest from source for that project. | 13:37 |
| *** tzumainn has joined #tripleo | 13:37 | |
| chandankumar | EmilienM: tempest and its plugin is installed there from packages | 13:37 |
| *** suuuper has joined #tripleo | 13:38 | |
| chandankumar | EmilienM: that will be doable | 13:38 |
| EmilienM | go for it then | 13:38 |
| chandankumar | EmilienM: https://github.com/openstack/tripleo-quickstart-extras/blob/master/roles/validate-tempest/defaults/main.yml#L27 | 13:38 |
| *** suuuper has quit IRC | 13:38 | |
| *** ansmith has joined #tripleo | 13:38 | |
| chandankumar | EmilienM: https://github.com/openstack/tripleo-quickstart-extras/blob/master/roles/validate-tempest/templates/run-tempest.sh.j2#L43 | 13:39 |
| chandankumar | I just need to flip the switch | 13:39 |
| moguimar | EmilienM: stories in the storyboard must reference a project? | 13:39 |
| chandankumar | EmilienM: I have also an AI from summit to add kolla-anisble gating against tempest | 13:39 |
| moguimar | and if so, do you know how can I create a project? | 13:39 |
| EmilienM | moguimar: I think it's a good question for #storyboard channel | 13:41 |
| moguimar | yep, just posted there | 13:44 |
| moguimar | thanks EmilienM | 13:44 |
| verdurin | Is there a way of debugging the undercloud VM, or forcing it to be rebuild in quickstart? | 13:46 |
| verdurin | rebuilt | 13:46 |
| openstackgerrit | Lukas Bezdicka proposed openstack/python-tripleoclient master: Stop persisting previous configuration on update/upgrade prepare https://review.openstack.org/559746 | 13:46 |
| openstackgerrit | Lukas Bezdicka proposed openstack/python-tripleoclient master: Add upgrade-[prepare|converge].yaml into upgrade cli https://review.openstack.org/558866 | 13:46 |
| openstackgerrit | Lukas Bezdicka proposed openstack/python-tripleoclient master: Update prepare using an environment file https://review.openstack.org/559760 | 13:46 |
| openstackgerrit | Lukas Bezdicka proposed openstack/python-tripleoclient master: WIP - ffwd-upgrade cli adds ffwd-upgrade [prepare|run|converge] https://review.openstack.org/557937 | 13:46 |
| openstackgerrit | Lukas Bezdicka proposed openstack/python-tripleoclient master: WIP - Introduce ceph upgrade command https://review.openstack.org/560423 | 13:46 |
| openstackgerrit | Chandan Kumar proposed openstack/tripleo-quickstart-extras master: Added tempest skip list for undercloud for stable branches https://review.openstack.org/560374 | 13:47 |
| chandankumar | arxcruz|ruck: ^^ after this review, I will update the skip list | 13:48 |
| *** fzdarsky_ is now known as fzdarsky | 13:48 | |
| arxcruz|ruck | chandankumar: k | 13:48 |
| mwhahaha | rasca: yea just import what you have | 13:48 |
| openstackgerrit | Marios Andreou proposed openstack/python-tripleoclient master: WIP - ffwd-upgrade cli adds ffwd-upgrade [prepare|run|converge] https://review.openstack.org/557937 | 13:48 |
| openstackgerrit | Damien Ciabrini proposed openstack/tripleo-heat-templates stable/queens: Upgrade: make bundles use new container image name after upgrade https://review.openstack.org/560426 | 13:50 |
| *** udesale has quit IRC | 13:51 | |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: Handle undercloud upgrades via host_prep_tasks https://review.openstack.org/559210 | 13:51 |
| openstackgerrit | Emilien Macchi proposed openstack/python-tripleoclient master: Manage upgrades to a containerized undercloud https://review.openstack.org/549624 | 13:52 |
| EmilienM | social, bogdando: I updated the path and explained in the commit message why we use host_prep_tasks | 13:52 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-upgrade master: Re-use undercloud upgrades tasks. https://review.openstack.org/552303 | 13:54 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-upgrade master: WIP - containerized undercloud upgrade https://review.openstack.org/553629 | 13:55 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-upgrade master: WIP - containerized undercloud upgrade https://review.openstack.org/553629 | 13:56 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-common master: TLS by default for the overcloud https://review.openstack.org/554926 | 13:56 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Switch public endpoints to use FQDNs by default https://review.openstack.org/559926 | 13:56 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Change default endpoint map entries to use TLS https://review.openstack.org/558424 | 13:56 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Remove empty default for SSLKey https://review.openstack.org/559279 | 13:56 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Add CACerts service to all scenario environment files https://review.openstack.org/560430 | 13:56 |
| dprince | EmilienM: yes, and it failed for me as well | 13:56 |
| EmilienM | dprince: interesting | 13:57 |
| dprince | EmilienM: keep in mind I started this when convergence was still not our default | 13:57 |
| EmilienM | oh ok | 13:57 |
| dprince | EmilienM: more work to be done, I think it can be fixed to work | 13:57 |
| EmilienM | I should try again in my env, because upstream CI doesn't give me logs, maybe the machine is down | 13:57 |
| EmilienM | dprince: i aligned the heat config from instack into THT, but same results | 13:58 |
| EmilienM | will dig | 13:58 |
| *** links has quit IRC | 13:58 | |
| *** etingof has joined #tripleo | 13:58 | |
| dprince | EmilienM: yeah, its been like a year since I've tried convergence with the undercloud_deploy command | 13:58 |
| EmilienM | ok | 13:59 |
| EmilienM | dprince: hey, would you mind look at https://review.openstack.org/#/c/558893/ and maybe move forward? | 13:59 |
| EmilienM | or let me know if you want to change something.. | 13:59 |
| *** udesale has joined #tripleo | 14:00 | |
| *** jistr is now known as jistr|mtg | 14:02 | |
| *** ccamacho|lunch is now known as ccamacho | 14:02 | |
| dprince | EmilienM: its good +A | 14:04 |
| EmilienM | thx! | 14:04 |
| dprince | EmilienM: np, thank you | 14:07 |
| *** pkovar has quit IRC | 14:13 | |
| openstackgerrit | Daniel Alvarez proposed openstack/tripleo-heat-templates master: Adding missing OVN Metadata service to DVR environments https://review.openstack.org/560431 | 14:13 |
| dalvarez | numans: ^ | 14:13 |
| numans | dalvarez, thanks. | 14:13 |
| dalvarez | numans: could you pls add the reviewers you feel are relevant for getting this in plz? :) | 14:14 |
| dalvarez | thanks a lot!! | 14:14 |
| numans | dalvarez, ack | 14:14 |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Standardise Workflow messaging and optionally persist messages https://review.openstack.org/425060 | 14:16 |
| *** dsariel has joined #tripleo | 14:17 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Verify the Swift container exists with a small utility workflow https://review.openstack.org/528213 | 14:18 |
| *** jobewan has joined #tripleo | 14:19 | |
| *** agopi has joined #tripleo | 14:22 | |
| *** lblanchard has joined #tripleo | 14:26 | |
| openstackgerrit | Martin Mágr proposed openstack/tripleo-common master: [WIP] Add health checks for Swift services https://review.openstack.org/559737 | 14:30 |
| *** lblanchard1 has joined #tripleo | 14:31 | |
| *** lblanchard has quit IRC | 14:31 | |
| *** lblanchard has joined #tripleo | 14:33 | |
| openstackgerrit | Attila Darazs proposed openstack/tripleo-quickstart-extras master: GATE CHECK for quickstart-extras https://review.openstack.org/560445 | 14:33 |
| *** cdearborn has quit IRC | 14:34 | |
| *** itlinux has quit IRC | 14:34 | |
| *** anilvenkata has quit IRC | 14:35 | |
| *** lblanchard1 has quit IRC | 14:36 | |
| *** thrash is now known as thrash|biab | 14:39 | |
| *** dsariel has quit IRC | 14:39 | |
| openstackgerrit | Attila Darazs proposed openstack/tripleo-heat-templates stable/queens: GATE CHECK for TripleO https://review.openstack.org/560452 | 14:42 |
| openstackgerrit | Harry Rybacki proposed openstack/tripleo-quickstart-extras master: Add ability to deploy FreeIPA on OVB https://review.openstack.org/534435 | 14:42 |
| openstackgerrit | Emilien Macchi proposed openstack/python-tripleoclient master: Use the build_service_filter from kolla_builder https://review.openstack.org/555051 | 14:42 |
| *** agurenko has quit IRC | 14:43 | |
| openstackgerrit | hanish proposed openstack/tripleo-heat-templates stable/queens: Removed unnecessary services from the LiquidioCompute role. https://review.openstack.org/560453 | 14:43 |
| openstackgerrit | Emilien Macchi proposed openstack/python-tripleoclient master: Do container image prepare during undercloud deploy https://review.openstack.org/546024 | 14:46 |
| mwhahaha | weshay, arxcruz|ruck, rfolco|rover: ok so we're still seeing ssh failures in ovb even after all the ulimit patches in master. are we still seeing those in the promotion jobs? | 14:48 |
| mwhahaha | example, https://review.rdoproject.org/jenkins/job/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset035-master/10375/ | 14:48 |
| *** cdearborn has joined #tripleo | 14:48 | |
| rfolco|rover | mwhahaha, I think its concurrency | 14:48 |
| arxcruz|ruck | mwhahaha: yes, we are seeing that, but isn't related to ulimit anymore, it's the metadata now that is taking too long to response | 14:48 |
| arxcruz|ruck | mwhahaha: https://bugs.launchpad.net/tripleo/+bug/1763009 | 14:49 |
| openstack | Launchpad bug 1763009 in tripleo "periodic-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-master failing due metadata timeout" [High,Triaged] | 14:49 |
| mwhahaha | in ovb it's only running a single test | 14:49 |
| weshay | mwhahaha, fs001 ovb in rdo cloud looks a lot better today imho | 14:49 |
| mwhahaha | so i don't think that's concurrency related? | 14:49 |
| rfolco|rover | mwhahaha, oh, not for this case, sorry. | 14:50 |
| arxcruz|ruck | mwhahaha: maybe, because both failures have the same behavior, we miss the second failure cause | 14:50 |
| arxcruz|ruck | once we fix the neutron, we are noticing the second cause of failure | 14:50 |
| arxcruz|ruck | mwhahaha: anywah, ykarel is taking a look, and dalvarez will work on it once he has some time, according him, he has a critical bug now to fix | 14:50 |
| *** cshastri has joined #tripleo | 14:50 | |
| mwhahaha | k | 14:50 |
| arxcruz|ruck | problem was, we saw the failure, it was ssh, so it's the neutron ulimit issue, we have a patch, let's wait get merged | 14:51 |
| *** rajinir has joined #tripleo | 14:51 | |
| arxcruz|ruck | with was understandable in this case | 14:51 |
| gfidente | slagle so sounds like we want to increase zaqar post size | 14:52 |
| gfidente | slagle did you pick 1048576 with some theory? | 14:52 |
| gfidente | slagle can we just double it? | 14:52 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart-extras master: Run "overcloud container image prepare" only once https://review.openstack.org/528621 | 14:54 |
| d0ugal | rbrady,d0ugal,apetrich,thrash,toure,jtomasek: Workflow Squad meeting in 10 mins https://etherpad.openstack.org/p/tripleo-workflows-squad-status (probably starting a little late) | 14:55 |
| *** moshele has quit IRC | 14:55 | |
| bogdando | bandini, dciabrin: hi. Do you know if environments/puppet-pacemaker.yaml needs to be switched to docker/services? | 14:57 |
| bogdando | given the containers-default moving in progress | 14:57 |
| slagle | gfidente: we would want to check with therve about that | 14:57 |
| bogdando | or prolly moved to environments/services-barematal othwerise? | 14:57 |
| therve | Hi | 14:58 |
| slagle | gfidente: there's code in the workflow to make sure the messages are broken up based on the max message size | 14:58 |
| slagle | i wonder if that did not work correctly | 14:58 |
| gfidente | slagle pointers? | 14:58 |
| gfidente | therve reasons to set zaqar size to 1048576 and not, say 4? | 14:59 |
| gfidente | 4M | 14:59 |
| therve | gfidente, Performance? | 14:59 |
| bandini | bogdando: let me check | 15:00 |
| slagle | gfidente: https://github.com/openstack/tripleo-common/blob/master/tripleo_common/actions/ansible.py#L370 | 15:00 |
| therve | gfidente, Why do you need to increase it? | 15:00 |
| gfidente | therve ok I am asking because we've hit an error where 1M probably is not enough | 15:00 |
| d0ugal | gfidente: https://github.com/openstack/tripleo-common/blob/master/tripleo_common/actions/ansible.py#L370-L386 | 15:00 |
| openstackgerrit | Sai Ram Peesapati proposed openstack/tripleo-heat-templates master: Parameterizing Puppet Tags https://review.openstack.org/557598 | 15:00 |
| d0ugal | oh, slagle beat me :) | 15:00 |
| slagle | gfidente: i don't think we want to increase the max size, but instead figure out why that code that breaks it up didn't work :) | 15:01 |
| d0ugal | unicode maybe? | 15:01 |
| gfidente | slagle ok I didn't know that split code existed | 15:01 |
| bandini | bogdando: I guess we can move it since (docker-ha.yaml) is what gives ha in a containerized world | 15:02 |
| bogdando | bandini: ack thanks | 15:02 |
| ykarel | mwhahaha, till now i have seen metadata issue(takes large time > 10 seconds to respond) only in multi controller cases | 15:02 |
| therve | slagle, Is it in a ansible action? | 15:03 |
| mwhahaha | ykarel: well ovb is multicontroller, so that'd make sense | 15:03 |
| ykarel | mwhahaha, yes, | 15:03 |
| slagle | therve: it's in the AnsiblePlaybookAction | 15:03 |
| therve | Right wondering where the error happened | 15:03 |
| slagle | therve: http://logs.openstack.org/66/546966/28/check/tripleo-ci-centos-7-scenario001-multinode-oooq-container/9b09915/logs/undercloud/var/log/mistral/executor.log.txt.gz | 15:04 |
| ykarel | mwhahaha, trying to reproduce multinode locally, will update if find something | 15:04 |
| slagle | i may need to add some debugging for CI to post_message so we can see what happened | 15:04 |
| *** ykarel is now known as ykarel|away | 15:05 | |
| *** dsariel has joined #tripleo | 15:07 | |
| openstackgerrit | James Slagle proposed openstack/tripleo-common master: DNM: post_message debugging https://review.openstack.org/560464 | 15:08 |
| *** vineet has joined #tripleo | 15:08 | |
| *** ratailor has joined #tripleo | 15:08 | |
| openstackgerrit | James Slagle proposed openstack/tripleo-heat-templates master: Migrate Ceph deployment to external_deploy_task https://review.openstack.org/546966 | 15:08 |
| *** gkadam has joined #tripleo | 15:09 | |
| ykarel|away | mwhahaha, please also look:- https://review.openstack.org/#/c/560359/ | 15:09 |
| *** jistr|mtg is now known as jistr | 15:10 | |
| *** ihrachys has joined #tripleo | 15:11 | |
| openstackgerrit | James Slagle proposed openstack/tripleo-common master: DNM: post_message debugging https://review.openstack.org/560464 | 15:11 |
| *** jfrancoa has quit IRC | 15:16 | |
| therve | slagle, json encoding can add quite a bit of size | 15:17 |
| therve | We should check the size on the encoding bit | 15:17 |
| therve | gfidente, slagle : http://paste.openstack.org/show/718946/ | 15:19 |
| *** paramite has quit IRC | 15:21 | |
| slagle | therve: hmm, i hadn't thought about that. yea we'll probably need to fix that | 15:22 |
| *** sai_p has joined #tripleo | 15:22 | |
| openstackgerrit | Ben Nemec proposed openstack/tripleo-heat-templates master: Deploy Designate in scenario003 https://review.openstack.org/555007 | 15:28 |
| openstackgerrit | Ben Nemec proposed openstack/tripleo-heat-templates master: Mark Designate as experimental https://review.openstack.org/560470 | 15:28 |
| *** cylopez has joined #tripleo | 15:30 | |
| jistr | slagle, therve, gfidente: as the data is just logs, we probably don't need to send it all in a single chunk. We could cut it up into smaller pieces. I didn't look where such code could go though. Perhaps in the tripleo-common actions/workflows or worst case Mistral itself. Not sure if it's feasible or worth doing. Just a thought :) | 15:31 |
| d0ugal | jistr: I think that is what the code is trying to do now? | 15:31 |
| *** ratailor has quit IRC | 15:31 | |
| slagle | jistr: yea we have that part already | 15:31 |
| *** rodolof has quit IRC | 15:32 | |
| slagle | it seems it could be the subsequent json encoding that runs us over the limit still | 15:32 |
| jistr | ah i didn't read all the context above :) sorry :) | 15:32 |
| *** yamahata has quit IRC | 15:33 | |
| *** assassin has quit IRC | 15:33 | |
| *** ykarel|away has quit IRC | 15:38 | |
| *** etingof has quit IRC | 15:38 | |
| openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart-extras master: Don't merge repo changes from different branches https://review.openstack.org/560473 | 15:39 |
| bogdando | does anyone knows if puppet/services/opendaylight-ovs.yaml expects containerization? | 15:39 |
| *** thrash|biab is now known as thrash | 15:39 | |
| *** gkadam_ has joined #tripleo | 15:39 | |
| bogdando | putting FIXME around in environments tht | 15:39 |
| bogdando | for now, looking into existing codebase, I decided do not mark yet a *backend/plugin/host-config* related puppet templates as FIXME | 15:40 |
| *** gkadam has quit IRC | 15:40 | |
| bogdando | though the fact that we have neutron ml2 plugin containerized spoils the nice picture | 15:40 |
| *** zoli|afk-TPB is now known as zoli | 15:40 | |
| bogdando | so shall we expect containerized neutron-plugin-ml2-odl | 15:41 |
| bogdando | anyway, we could set those FIXMEs later... | 15:41 |
| *** cshastri has quit IRC | 15:42 | |
| *** marios has quit IRC | 15:48 | |
| *** dsariel has quit IRC | 15:48 | |
| *** dparkes has quit IRC | 15:48 | |
| *** dparkes has joined #tripleo | 15:48 | |
| *** itlinux has joined #tripleo | 15:50 | |
| *** pdeore|afk has quit IRC | 15:50 | |
| openstackgerrit | Carlos Camacho proposed openstack/tripleo-quickstart-extras master: Force json output for openstack software deployment show <deployment> https://review.openstack.org/560479 | 15:51 |
| *** ramishra has quit IRC | 15:52 | |
| *** etingof has joined #tripleo | 15:52 | |
| *** moshele has joined #tripleo | 15:53 | |
| openstackgerrit | Carlos Camacho proposed openstack/tripleo-quickstart-extras master: Force json output for openstack software deployment show <deployment> https://review.openstack.org/560479 | 15:54 |
| openstackgerrit | Attila Darazs proposed openstack/tripleo-quickstart-extras master: GATE CHECK for quickstart-extras https://review.openstack.org/472607 | 15:55 |
| *** hamzy has quit IRC | 15:55 | |
| *** salmankhan has quit IRC | 15:57 | |
| slagle | therve: since zaqar is what is doing the encoding, we can't exactly chunk that easily | 15:57 |
| *** shreshtha-wfh has quit IRC | 15:57 | |
| slagle | therve: should we just build in more fudge factor into the action size? i have it 90% of max message size right now. | 15:57 |
| slagle | could go down to something more like 50% | 15:58 |
| therve | slagle, Yeah or check encoding size | 15:59 |
| therve | Though it may be a bit sad for memory | 15:59 |
| *** salmankhan has joined #tripleo | 15:59 | |
| *** lucasagomes is now known as lucas-afk | 15:59 | |
| slagle | yea i could calculate the overhead for each message i guess | 16:00 |
| *** ykarel|away has joined #tripleo | 16:01 | |
| *** pblaho has joined #tripleo | 16:01 | |
| *** gkadam__ has joined #tripleo | 16:01 | |
| *** cylopez has quit IRC | 16:03 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: WIP Optionally run config download at the end of stack create/update https://review.openstack.org/554224 | 16:04 |
| *** gkadam_ has quit IRC | 16:04 | |
| *** yamahata has joined #tripleo | 16:04 | |
| *** gkadam has joined #tripleo | 16:04 | |
| *** fragatina has quit IRC | 16:05 | |
| *** fragatina has joined #tripleo | 16:06 | |
| therve | stdout is kept in memory, so memory is probably not a big concern :) | 16:06 |
| *** gkadam__ has quit IRC | 16:06 | |
| openstackgerrit | Jiri Stransky proposed openstack/python-tripleoclient master: Update converge CLI to remove no-ops https://review.openstack.org/558536 | 16:08 |
| openstackgerrit | Sergii Golovatiuk proposed openstack/tripleo-heat-templates master: Replace LOG.warn with LOG.warning https://review.openstack.org/558804 | 16:11 |
| *** dprince has quit IRC | 16:19 | |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-docs master: Document undercloud --verbose option https://review.openstack.org/560558 | 16:21 |
| *** florianf has quit IRC | 16:23 | |
| *** janki has quit IRC | 16:23 | |
| openstackgerrit | Bogdan Dobrelya proposed openstack/tripleo-heat-templates master: Switch remaining env files to containers defaults https://review.openstack.org/560559 | 16:24 |
| EmilienM | jaosorior: I confirm it works now: https://review.openstack.org/#/c/560264/ thanks again man | 16:25 |
| openstackgerrit | Quique Llorente proposed openstack/tripleo-quickstart-extras master: Reduce reproducer redudancy https://review.openstack.org/558369 | 16:25 |
| *** leanderthal has quit IRC | 16:28 | |
| openstackgerrit | Sagi Shnaidman proposed openstack/tripleo-quickstart-extras master: WIP: Reproduce CI multinode job with libvirt https://review.openstack.org/543429 | 16:28 |
| openstackgerrit | James Slagle proposed openstack/tripleo-common master: Allow for more overhead in zaqar message https://review.openstack.org/560464 | 16:28 |
| mfedosin | rbrady: hi! I've updated my patch with heat capabilities workflows https://review.openstack.org/#/c/559989/ | 16:29 |
| mfedosin | what do you think? | 16:29 |
| *** dparkes has quit IRC | 16:30 | |
| *** jpich has quit IRC | 16:31 | |
| bogdando | folks, there is a container-defaults remaining bits PTAL https://review.openstack.org/#/c/560559/ | 16:34 |
| bogdando | would be nice to have +1 from ansible-ceph and networking and partner integration folks... | 16:34 |
| bogdando | if it works ofc :D | 16:34 |
| *** udesale has quit IRC | 16:35 | |
| *** dprince has joined #tripleo | 16:35 | |
| jaosorior | EmilienM: nice! | 16:36 |
| *** zoli is now known as zoli|gone | 16:37 | |
| *** zoli|gone is now known as zoli | 16:37 | |
| *** ihrachys_ has joined #tripleo | 16:37 | |
| *** agopi has quit IRC | 16:37 | |
| *** ffiore has quit IRC | 16:39 | |
| *** ihrachys has quit IRC | 16:40 | |
| *** bogdando has quit IRC | 16:40 | |
| *** wolverineav has joined #tripleo | 16:40 | |
| *** ykarel|away has quit IRC | 16:43 | |
| *** dparkes has joined #tripleo | 16:46 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-tripleo master: metadata.json: prepare for 9.0.0 release (rocky-m1) https://review.openstack.org/560568 | 16:51 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-ui master: prepare for 9.0.0 release (rocky-m1) https://review.openstack.org/560569 | 16:52 |
| EmilienM | mwhahaha: ^ let's merge these ones this week in case of gate is super busy next week (which we know it'll be the case) | 16:53 |
| mwhahaha | k | 16:53 |
| *** tesseract has quit IRC | 16:59 | |
| *** gkadam has quit IRC | 16:59 | |
| *** agopi has joined #tripleo | 17:04 | |
| *** kmy has joined #tripleo | 17:09 | |
| openstackgerrit | Harald Jensås proposed openstack/tripleo-heat-templates master: Add Ironic Networking Baremetal Templates https://review.openstack.org/547318 | 17:09 |
| *** alee is now known as alee_afk | 17:12 | |
| *** mdnadeem has quit IRC | 17:13 | |
| *** salmankhan has quit IRC | 17:13 | |
| *** kopecmartin has quit IRC | 17:16 | |
| *** jpena is now known as jpena|off | 17:16 | |
| *** hamzy has joined #tripleo | 17:18 | |
| *** karthiks has quit IRC | 17:20 | |
| *** panda is now known as panda|bbl | 17:22 | |
| *** akrzos has quit IRC | 17:23 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/pike: Remove the os-net-config element config.json template https://review.openstack.org/557939 | 17:24 |
| openstackgerrit | Merged openstack/tripleo-common master: Add custom subclass to revert mapping https://review.openstack.org/556491 | 17:24 |
| openstackgerrit | Merged openstack-infra/tripleo-ci master: Add job to test overcloud updates https://review.openstack.org/559394 | 17:24 |
| *** bmurrill has quit IRC | 17:27 | |
| openstackgerrit | Merged openstack/puppet-tripleo stable/queens: ceilo:base: include ::ceilometer::dispatcher::gnocchi https://review.openstack.org/560169 | 17:28 |
| openstackgerrit | Merged openstack/python-tripleoclient master: containerized/undercloud: disable verbosity by default https://review.openstack.org/559140 | 17:28 |
| openstackgerrit | Merged openstack/python-tripleoclient master: Use six to import things from urllib https://review.openstack.org/560005 | 17:28 |
| openstackgerrit | Merged openstack/tripleo-quickstart master: Allow to clone extras if zuul cloner is not presented https://review.openstack.org/557777 | 17:28 |
| *** athomas has quit IRC | 17:29 | |
| *** wolverineav has quit IRC | 17:29 | |
| openstackgerrit | Rafael Folco proposed openstack/tripleo-quickstart-extras master: Fix dstat time penalty for failed runs https://review.openstack.org/558908 | 17:30 |
| *** wolverineav has joined #tripleo | 17:30 | |
| *** chlong has quit IRC | 17:30 | |
| *** akrzos has joined #tripleo | 17:32 | |
| *** yprokule has quit IRC | 17:33 | |
| *** wolverineav has quit IRC | 17:34 | |
| openstackgerrit | Merged openstack/tripleo-ui master: prepare for 9.0.0 release (rocky-m1) https://review.openstack.org/560569 | 17:37 |
| *** agopi has quit IRC | 17:38 | |
| *** leanderthal has joined #tripleo | 17:38 | |
| *** trown is now known as trown|lunch | 17:40 | |
| *** ihrachys__ has joined #tripleo | 17:47 | |
| *** ykarel|away has joined #tripleo | 17:49 | |
| *** ihrachys_ has quit IRC | 17:50 | |
| *** arxcruz|ruck is now known as arxcruz | 17:50 | |
| openstackgerrit | Juan Badia Payno proposed openstack/tripleo-heat-templates master: [WIP]logging: read non-containerized logs https://review.openstack.org/545841 | 17:52 |
| *** wolverineav has joined #tripleo | 17:58 | |
| openstackgerrit | Merged openstack/tripleo-quickstart-extras master: Replace message OVB by multinode https://review.openstack.org/560325 | 18:04 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Allowing Non-IP Traffic in L2 and L3 domains https://review.openstack.org/536603 | 18:05 |
| *** yprokule has joined #tripleo | 18:11 | |
| *** yprokule has quit IRC | 18:13 | |
| *** ihrachys__ has quit IRC | 18:14 | |
| *** anilvenkata has joined #tripleo | 18:15 | |
| *** ihrachys has joined #tripleo | 18:16 | |
| openstackgerrit | Ronelle Landy proposed openstack/tripleo-quickstart-extras master: add option to turn on/off non default kernel https://review.openstack.org/560100 | 18:17 |
| openstackgerrit | Ronelle Landy proposed openstack/tripleo-quickstart-extras master: DNM: Setting the kernel override option to false https://review.openstack.org/560112 | 18:18 |
| *** orange_juluis has joined #tripleo | 18:19 | |
| orange_juluis | Has anybody configured TripleO to deploy the ironic service to the overcloud with separate provisioning and cleaning networks? | 18:19 |
| *** radeks has quit IRC | 18:21 | |
| *** radeks has joined #tripleo | 18:22 | |
| *** Goneri has quit IRC | 18:22 | |
| openstackgerrit | Merged openstack/tripleo-quickstart-extras master: Revert "Remove adjust-interface-mtus script" https://review.openstack.org/559107 | 18:24 |
| *** ykarel|away has quit IRC | 18:24 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/ocata: Enable Neutron LBaaS Integration https://review.openstack.org/556741 | 18:24 |
| openstackgerrit | Merged openstack/tripleo-upgrade master: Re-use undercloud upgrades tasks. https://review.openstack.org/552303 | 18:24 |
| openstackgerrit | Merged openstack/puppet-tripleo master: metadata.json: prepare for 9.0.0 release (rocky-m1) https://review.openstack.org/560568 | 18:24 |
| *** masco has quit IRC | 18:29 | |
| hjensas | orange_juluis: I have not tried it, but it should be possible. But you have to deploy using the default, then create the cleaning and provisioning network in neutron. Then update the parameters and do a stack update. | 18:29 |
| hjensas | orange_juluis: https://github.com/openstack/tripleo-heat-templates/blob/master/puppet/services/ironic-conductor.yaml#L49-L56 | 18:31 |
| *** trown|lunch is now known as trown | 18:32 | |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: Handle undercloud upgrades via host_prep_tasks https://review.openstack.org/559210 | 18:33 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-upgrade master: WIP - containerized undercloud upgrade https://review.openstack.org/553629 | 18:35 |
| openstackgerrit | Emilien Macchi proposed openstack-infra/tripleo-ci master: WIP - Introduce tripleo-ci-centos-7-containerized-undercloud-upgrades https://review.openstack.org/553633 | 18:35 |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Migrate to the new Mistral context class https://review.openstack.org/506186 | 18:40 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart-extras master: containerized-undercloud: don't manage stackrc https://review.openstack.org/559818 | 18:40 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-heat-templates master: heat: align config with instack-undercloud https://review.openstack.org/558354 | 18:40 |
| *** agopi has joined #tripleo | 18:41 | |
| *** shreshtha has joined #tripleo | 18:55 | |
| *** pcaruana has quit IRC | 18:55 | |
| openstackgerrit | Alex Schultz proposed openstack/python-tripleoclient master: Enable cleanup by default for undercloud install https://review.openstack.org/560578 | 18:58 |
| *** moshele has quit IRC | 18:59 | |
| openstackgerrit | Alex Schultz proposed openstack/python-tripleoclient master: Enable cleanup by default for undercloud install https://review.openstack.org/560578 | 19:00 |
| *** shreshtha has quit IRC | 19:04 | |
| *** moshele has joined #tripleo | 19:16 | |
| *** akrivoka has quit IRC | 19:17 | |
| *** rpioso|afk is now known as rpioso | 19:17 | |
| *** panda|bbl is now known as panda|off | 19:19 | |
| *** Goneri has joined #tripleo | 19:24 | |
| *** holser__ has quit IRC | 19:25 | |
| *** wolverineav has quit IRC | 19:25 | |
| *** wolverineav has joined #tripleo | 19:31 | |
| *** jmelvin has quit IRC | 19:34 | |
| *** fragatina has quit IRC | 19:37 | |
| *** fragatina has joined #tripleo | 19:37 | |
| trozet | dsneddon: you around? | 19:39 |
| *** moshele has quit IRC | 19:41 | |
| *** fragatina has quit IRC | 19:42 | |
| *** gfidente has quit IRC | 19:45 | |
| openstackgerrit | Tim Rozet proposed openstack/tripleo-common master: Fixes ODL healthcheck URI https://review.openstack.org/560598 | 19:48 |
| *** jmelvin has joined #tripleo | 19:49 | |
| openstackgerrit | Ana Krivokapic proposed openstack/tripleo-validations master: Extract 'filtered()' function into 'utils' https://review.openstack.org/560623 | 19:52 |
| *** dbecker has quit IRC | 19:54 | |
| openstackgerrit | Tim Rozet proposed openstack/tripleo-heat-templates master: Removes odl-dlux-gui feature for ODL https://review.openstack.org/560624 | 19:54 |
| dsneddon | trozet, I'm here | 20:02 |
| *** holser__ has joined #tripleo | 20:02 | |
| trozet | dsneddon: so figured out that issue from yesterday | 20:04 |
| trozet | dsneddon: I wanted to confirm with you before I go fix it upstream | 20:05 |
| trozet | dsneddon: https://jira.opnfv.org/browse/APEX-588 | 20:05 |
| *** lblanchard has quit IRC | 20:06 | |
| *** jobewan has quit IRC | 20:10 | |
| *** fragatina has joined #tripleo | 20:13 | |
| *** paramite has joined #tripleo | 20:20 | |
| *** NobodyCam_ has joined #tripleo | 20:21 | |
| *** v1k0d3n_ has joined #tripleo | 20:21 | |
| *** ansmith has quit IRC | 20:23 | |
| *** andreaf_ has joined #tripleo | 20:27 | |
| dsneddon | trozet, So was the fix there to modify the dhcp-interfaces-all.sh script? | 20:27 |
| dsneddon | trozet, We've had a lot of bugs caused by that failsafe script. | 20:28 |
| *** v1k0d3n has quit IRC | 20:28 | |
| *** andreaf has quit IRC | 20:28 | |
| *** NobodyCam has quit IRC | 20:28 | |
| *** tvignaud has quit IRC | 20:28 | |
| *** v1k0d3n_ is now known as v1k0d3n | 20:28 | |
| *** NobodyCam_ is now known as NobodyCam | 20:28 | |
| trozet | dsneddon: no, to modify the dhcp-interface@.service systemd file | 20:28 |
| trozet | dsneddon: we redeployed and it all worked after that | 20:29 |
| dsneddon | trozet, So the issue that the script stops when eno3 fails to come up? | 20:29 |
| *** tvignaud has joined #tripleo | 20:29 | |
| trozet | dsneddon: no that part is normal | 20:29 |
| *** andreaf_ is now known as andreaf | 20:29 | |
| trozet | dsneddon: linux networking will just stop when the first interface fails, thats why this dhcp-interface systemd and script exist | 20:29 |
| trozet | dsneddon: to work around that problem | 20:30 |
| trozet | dsneddon: but then the dhcp-interface@.service should fire for each interface, and it doesnt for the ctlplane interface because of | 20:30 |
| *** alee_afk is now known as alee | 20:30 | |
| trozet | ConditionPathExists=!/etc/sysconfig/network-scripts/ifcfg-%i | 20:30 |
| trozet | dsneddon: because the ifcfg file for the ctlplane interface was already written at first boot | 20:31 |
| dsneddon | trozet, If your initial os-net-config run succeeds, then you shouldn't be ending up with the DHCP service for all these interfaces. | 20:31 |
| dsneddon | trozet, The dhcp-interfaces-all.sh script runs only if os-net-config fails, I'm pretty sure. | 20:31 |
| trozet | dsneddon: yeah so what we looked at yesterday was not quite right, it had manual intervention during that boot process | 20:31 |
| trozet | dsneddon: we redeploy and let it hit the failure, os-net-config is never fired | 20:31 |
| *** mrunge has quit IRC | 20:31 | |
| *** bandini has quit IRC | 20:31 | |
| trozet | dsneddon: the dhcp-interface systemd process is started on boot, right after network.target so its before os-collect-config even runs | 20:32 |
| *** bandini has joined #tripleo | 20:33 | |
| dsneddon | trozet, Hmm. I'm not sure about that, I honestly have never audited the dhcp-interface script | 20:33 |
| trozet | dsneddon: so the process is, linux networking starts, tries to dhcp interfaces sequentially, no matter what happens there all the dhcp-interface systemd services start which will also try to dhcp each interface that hasnt done so already | 20:33 |
| *** mrunge has joined #tripleo | 20:33 | |
| trozet | dsneddon: at that point the ctlplane interface should have a dhcp ip and be able to run os-collect-config to get metadata, then fire os-net-config | 20:33 |
| *** liverpooler has quit IRC | 20:34 | |
| *** holser__ has quit IRC | 20:34 | |
| trozet | dsneddon: do you know where this systemd service comes from? dhcp-interface | 20:35 |
| *** liverpooler has joined #tripleo | 20:38 | |
| dsneddon | trozet, I just checked. It appears that the file /etc/udev/rules.d/99-dhcp-all-interfaces.rules exists in the image, and gets deleted if os-net-config succeeds (in the run-os-net-config.sh script that is part of the newer-style NIC configs). | 20:38 |
| dsneddon | trozet, I thought that Heat laid down that file, but it appears it's already part of the image. | 20:39 |
| *** paramite has quit IRC | 20:39 | |
| trozet | dsneddon: ok, it doesnt look like the systemd file belongs to any package... and googling is turning up nothing :/ | 20:39 |
| dsneddon | trozet, I'm going to poke around a qcow image | 20:41 |
| trozet | dsneddon: do you see what im saying though for why the fix works? | 20:41 |
| *** liverpooler has quit IRC | 20:42 | |
| *** raildo has quit IRC | 20:47 | |
| *** orange_juluis has quit IRC | 20:49 | |
| dsneddon | trozet, I think so, you removed the condition that checks if the file exists, and doesn't write it or run ifup if the file exists. | 20:51 |
| dsneddon | trozet, Right? | 20:51 |
| trozet | dsneddon: right | 20:51 |
| *** pchavva has quit IRC | 20:52 | |
| trozet | dsneddon: dhcp-all-interfaces.sh has that check in it already, so when taht runs if it sees icfg file, it wont overwrite it | 20:52 |
| trozet | dsneddon: but the ifup part afterwards in the systemd unit file is what we need so the interface actually starts | 20:52 |
| trozet | dsneddon: and that should be just fine to run, even if the interface is already up and the ifcfg file already exists | 20:52 |
| dsneddon | trozet, I agree. I'm just looking up the files that are included in the image so I have an idea what changes we need to make | 20:53 |
| *** rbowen has quit IRC | 20:53 | |
| *** jtomasek has quit IRC | 20:54 | |
| trozet | dsneddon: ok thanks! | 20:54 |
| *** trown is now known as trown|outtypewww | 21:01 | |
| *** sai_p has quit IRC | 21:01 | |
| dsneddon | trozet, The 99-dhcp-all-interfaces.rules file has only: 'SUBSYSTEM=="net", KERNEL!="lo", ACTION=="add", TAG+="systemd", ENV{SYSTEMD_WANTS}+="dhcp-interface@$name.service"' | 21:01 |
| trozet | dsneddon: that should be ok right? | 21:04 |
| *** slaweq has quit IRC | 21:08 | |
| *** slaweq has joined #tripleo | 21:09 | |
| *** atoth has quit IRC | 21:10 | |
| openstackgerrit | Ronelle Landy proposed openstack/tripleo-quickstart master: Revert "Allow to clone extras if zuul cloner is not presented" https://review.openstack.org/560641 | 21:12 |
| *** slaweq has quit IRC | 21:13 | |
| *** rfolco|rover is now known as rfolco|off | 21:13 | |
| openstackgerrit | Ronelle Landy proposed openstack/tripleo-quickstart-extras master: DNM: Setting the kernel override option to false https://review.openstack.org/560112 | 21:14 |
| *** abishop has quit IRC | 21:17 | |
| dsneddon | trozet, The script is in /usr/local/sbin/dhcp-all-interfaces.sh in the image | 21:17 |
| mwhahaha | jrist: you around? | 21:18 |
| trozet | dsneddon: yeah, is it part of any package? | 21:18 |
| EmilienM | mwhahaha: honza is around | 21:19 |
| honza | mwhahaha: ohai | 21:19 |
| mwhahaha | honza: what network should the UI be on? | 21:20 |
| mwhahaha | it it just the control plane network? | 21:20 |
| mwhahaha | EmilienM: I think on the undercloud the internal_api == control plane right? | 21:20 |
| mwhahaha | there really isn't a distinction | 21:20 |
| EmilienM | I need to check that | 21:21 |
| honza | yes | 21:21 |
| mwhahaha | honza: is there any reason not to always fron the UI with haproxy? | 21:21 |
| EmilienM | mwhahaha: yes | 21:21 |
| mwhahaha | s/fron/front | 21:21 |
| honza | mwhahaha: i don't understand all the implications but i don't see why we couldn't always have haproxy | 21:22 |
| mwhahaha | so i'd assume we'd want the UI fronted by HA proxy (for future HAing needs) and i'd assume we'd want it mapped to the 'public' vip | 21:22 |
| mwhahaha | but the question would be on the undercloud upgrade since those concepts don't previously exist how does that work | 21:22 |
| EmilienM | not only for HA but also for SSL termination | 21:23 |
| EmilienM | which is why we have HAproxy on the undercliud. | 21:23 |
| EmilienM | undercloud even. | 21:23 |
| mwhahaha | right | 21:23 |
| honza | this ^ | 21:23 |
| EmilienM | so ++ to have UI in HAproxy | 21:23 |
| mwhahaha | EmilienM: so i think the issue is that we have any other ip address other than the undercloud ip being used | 21:23 |
| mwhahaha | EmilienM: in instack, we only had a single ip for the ctrl plane i thought | 21:23 |
| *** alee has quit IRC | 21:24 | |
| *** morazi has quit IRC | 21:24 | |
| EmilienM | https://github.com/openstack/instack-undercloud/blob/master/elements/puppet-stack-config/puppet-stack-config.yaml.template#L832-L847 | 21:25 |
| mwhahaha | so we ahd two ips | 21:25 |
| mwhahaha | internal (ctrlplane) and external (???) | 21:25 |
| mwhahaha | https://github.com/openstack/instack-undercloud/blob/2633e98788bcf0a02ba6bf20967def902e75e95b/elements/puppet-stack-config/puppet-stack-config.yaml.template#L11-L12 | 21:26 |
| EmilienM | public? | 21:26 |
| *** alee has joined #tripleo | 21:27 | |
| *** orange_julius has joined #tripleo | 21:27 | |
| mwhahaha | https://github.com/openstack/instack-undercloud/blob/41f2694d13386a2c533ca300f109afc2fc2f0595/undercloud.conf.sample#L24 | 21:27 |
| mwhahaha | so undercloud_public_host | 21:27 |
| dsneddon | trozet, There is also this file in /usr/share/pkg-map/dhcp-all-interfaces: http://paste.openstack.org/show/718993/ | 21:27 |
| mwhahaha | EmilienM: so in this case we're not properly listening on the public host for the ui | 21:27 |
| orange_julius | Getting strange rabbitmq errors after a fairly vanilla installation of TripleO Pike... Channel error on connection <0.19515.5> (172.18.10.10:43876 -> 172.18.10.17:5672, vhost: '/', user: 'guest'), channel 1: operation basic.publish caused a channel exception not_found: "no exchange 'reply_e94d4f4c9edb4c91b98c98fc85ca6835' in vhost '/'" | 21:27 |
| dsneddon | trozet, Does that tell you anything about what package it is part of? | 21:28 |
| trozet | dsneddon: no i run rpm -qf on it and its not part of any package | 21:29 |
| EmilienM | mwhahaha: external then? | 21:30 |
| EmilienM | mwhahaha: in network/service_net_map.j2.yaml | 21:30 |
| trozet | dsneddon: ive got go for now, i'll try to find out where this is coming from tmrw | 21:30 |
| mwhahaha | EmilienM: yea | 21:30 |
| itlinux | hello all, does anyone have any suggestion on why the fencing gen does not work on 2 of my underclouds and works fine on the 3rd.. here is the output of the one not working http://paste.openstack.org/show/718994/ | 21:31 |
| EmilienM | mwhahaha: and none of the endpoints? | 21:34 |
| EmilienM | mwhahaha: I mean the tripleo::ui::endpoint_* | 21:34 |
| mwhahaha | EmilienM: the endpoints were fine | 21:34 |
| EmilienM | kk | 21:34 |
| EmilienM | it was just the binding | 21:34 |
| mwhahaha | EmilienM: it's that the bind host did not match what was being generated for the urls | 21:35 |
| EmilienM | mwhahaha: I'll give a try | 21:35 |
| EmilienM | dtrainor: ^ fyi if you want to read back | 21:35 |
| dtrainor | thx | 21:36 |
| *** ansmith has joined #tripleo | 21:37 | |
| dsneddon | trozet, Thanks for the heads-up about this issue, we can talk more later | 21:37 |
| *** jmelvin has quit IRC | 21:40 | |
| orange_julius | Sorry for the spam, figured it out | 21:43 |
| *** dprince has quit IRC | 21:44 | |
| *** rcernin has joined #tripleo | 21:49 | |
| dsneddon | trozet, dhcp-all-inerfaces is part of tripleo-diskimage-builder, but not in a package. | 21:50 |
| openstackgerrit | Steve Baker proposed openstack/tripleo-quickstart-extras master: Run "overcloud container image prepare" only once https://review.openstack.org/528621 | 21:54 |
| ihrachys | a patch of mine has -1 from RDO Third Party CI. I clicked the link to Jenkins and check console output and it doesn't indicate a specific reason for failure, or tempest output. I can't find logs or other artifacts anywhere. how do I get access to the tempest logs? | 21:58 |
| ihrachys | specifically, I am looking at https://review.rdoproject.org/jenkins/job/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-master/10122/ | 21:58 |
| *** itlinux has quit IRC | 22:03 | |
| *** itlinux has joined #tripleo | 22:06 | |
| openstackgerrit | Marius Cornea proposed openstack/tripleo-upgrade master: Add Neutron L3 agent failover check during upgrade https://review.openstack.org/559410 | 22:07 |
| sshnaidm | EmilienM, btw, collectd server is installed here: https://review.openstack.org/#/c/560048/ in case you need to test clients | 22:07 |
| *** hamzy has quit IRC | 22:07 | |
| *** itlinux has quit IRC | 22:07 | |
| *** radeks has quit IRC | 22:10 | |
| *** noslzzp has quit IRC | 22:10 | |
| *** cdearborn has quit IRC | 22:20 | |
| openstackgerrit | Derek Higgins proposed openstack/tripleo-quickstart master: Add sudo and iproute deps https://review.openstack.org/560673 | 22:22 |
| *** jcoufal has quit IRC | 22:27 | |
| openstackgerrit | Gonéri Le Bouder proposed openstack/tripleo-quickstart-extras master: tempest: gen the JUNIT out from subunit v2 file https://review.openstack.org/560676 | 22:28 |
| *** jcoufal has joined #tripleo | 22:31 | |
| -openstackstatus- NOTICE: zuul was restarted to updated to the latest code; you may need to recheck changes uploaded or approvals added between 21:30 and 21:45 | 22:31 | |
| *** jcoufal has quit IRC | 22:33 | |
| openstackgerrit | Gonéri Le Bouder proposed openstack/tripleo-quickstart-extras master: tempest: restore Mitaka support https://review.openstack.org/560678 | 22:34 |
| *** dsariel has joined #tripleo | 22:36 | |
| *** mcornea has quit IRC | 22:39 | |
| *** derekh has quit IRC | 22:40 | |
| *** d0ugal has quit IRC | 22:43 | |
| *** Goneri has quit IRC | 22:44 | |
| *** d0ugal has joined #tripleo | 22:48 | |
| *** ipsecguy has quit IRC | 23:01 | |
| *** ipsecguy has joined #tripleo | 23:02 | |
| *** dparkes has quit IRC | 23:09 | |
| *** slaweq has joined #tripleo | 23:09 | |
| *** dsariel has quit IRC | 23:09 | |
| *** slaweq has quit IRC | 23:14 | |
| *** pchavva has joined #tripleo | 23:19 | |
| EmilienM | sshnaidm: ok I'll look,thx | 23:24 |
| *** pchavva has quit IRC | 23:31 | |
| *** owalsh is now known as owalsh_afk | 23:47 | |
| *** rpioso is now known as rpioso|afk | 23:54 | |
| *** moshele has joined #tripleo | 23:54 | |
| openstackgerrit | Attila Darazs proposed openstack/tripleo-quickstart-extras master: GATE CHECK for quickstart-extras https://review.openstack.org/472607 | 23:55 |
| *** moshele has quit IRC | 23:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!