Wednesday, 2018-04-18

*** fragatina has quit IRC00:07
openstackgerritJill Rouleau proposed openstack/tripleo-common master: config download support for a fixed directory  https://review.openstack.org/55057700:15
*** Goneri has quit IRC00:19
*** waleedm has quit IRC00:20
openstackgerritMerged openstack/tripleo-common stable/queens: Use new ceph/daemon tags  https://review.openstack.org/56085000:21
*** yamahata has quit IRC00:23
*** wolverin_ has quit IRC00:39
*** wolverineav has joined #tripleo00:40
openstackgerritBrent Eagles proposed openstack/tripleo-heat-templates master: Octavia amphora image handling updates  https://review.openstack.org/56208600:54
*** fzdarsky_ has joined #tripleo01:03
*** dmacpher has joined #tripleo01:04
*** yamahata has joined #tripleo01:04
*** cshastri has joined #tripleo01:05
*** dmsimard is now known as dmsimard|off01:06
*** fzdarsky|afk has quit IRC01:07
*** fzdarsky_ has quit IRC01:07
*** fzdarsky_ has joined #tripleo01:11
*** janki has joined #tripleo01:33
*** psahoo has quit IRC01:43
*** slaweq has joined #tripleo01:50
openstackgerritEmilien Macchi proposed openstack/instack-undercloud master: DNM - clone ansible-role-container-registry  https://review.openstack.org/56209001:52
*** spsurya has joined #tripleo01:54
*** wolverineav has quit IRC01:54
*** wolverineav has joined #tripleo01:54
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - Deploy Docker via Ansible and not Puppet  https://review.openstack.org/56137701:55
*** slaweq has quit IRC01:55
*** rlandy|bbl is now known as rlandy01:55
*** rlandy has quit IRC01:56
openstackgerritEmilien Macchi proposed openstack/tripleo-quickstart master: Revert "Revert "Deploy container-multinode (fs010) with a containerized undercloud""  https://review.openstack.org/56026401:57
*** lblanchard has quit IRC01:59
*** wolverineav has quit IRC01:59
*** psahoo has joined #tripleo01:59
*** psahoo has quit IRC02:00
*** psahoo has joined #tripleo02:00
openstackgerritEmilien Macchi proposed openstack-infra/tripleo-ci master: Introduce tripleo-ci-centos-7-containerized-undercloud-upgrades  https://review.openstack.org/55363302:05
EmilienMweshay: I hope you read the owl fact.02:06
*** ooolpbot has joined #tripleo02:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION02:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487002:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)02:10
*** ooolpbot has quit IRC02:10
openstackgerritBrent Eagles proposed openstack/tripleo-common master: Octavia amphora image handles updates and symlinks  https://review.openstack.org/56201902:13
*** cdearborn has quit IRC02:20
*** thrash is now known as thrash|g0ne02:25
*** dciabrin_ has quit IRC02:30
*** dciabrin_ has joined #tripleo02:30
*** dciabrin_ has quit IRC02:32
*** dciabrin_ has joined #tripleo02:32
*** artom_ has joined #tripleo02:34
*** artom_ has quit IRC02:34
*** artom_ has joined #tripleo02:35
*** artom has quit IRC02:36
*** jaganathan has quit IRC02:43
*** jaganathan has joined #tripleo02:47
*** psachin has joined #tripleo02:49
*** jchhatbar has joined #tripleo02:51
*** janki has quit IRC02:53
*** fragatina has joined #tripleo03:00
*** fragatin_ has joined #tripleo03:01
*** fragatina has quit IRC03:04
*** ooolpbot has joined #tripleo03:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION03:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487003:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)03:10
*** ooolpbot has quit IRC03:10
*** zshi has quit IRC03:18
*** zshi has joined #tripleo03:31
*** ykarel|away has joined #tripleo03:48
*** ykarel|away is now known as ykare03:48
*** ykare is now known as ykarel03:48
*** dsariel has joined #tripleo03:51
*** slaweq has joined #tripleo03:51
*** slaweq has quit IRC03:56
*** ramishra has joined #tripleo03:58
*** zshi has quit IRC04:00
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - Deploy Docker via Ansible and not Puppet  https://review.openstack.org/56137704:09
*** ooolpbot has joined #tripleo04:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION04:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487004:10
*** ooolpbot has quit IRC04:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)04:10
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - Deploy Docker via Ansible and not Puppet  https://review.openstack.org/56137704:10
*** dxiri has quit IRC04:11
*** zshi has joined #tripleo04:11
*** dxiri has joined #tripleo04:12
openstackgerritMerged openstack-infra/tripleo-ci master: Use tripleo-upgrade role in undercloud upgrades job.  https://review.openstack.org/54897404:13
*** udesale has joined #tripleo04:21
*** dsariel has quit IRC04:27
*** agurenko has joined #tripleo04:28
*** cshastri_ has joined #tripleo04:33
*** cshastri has quit IRC04:35
*** fragatin_ has quit IRC04:41
*** fragatina has joined #tripleo04:41
openstackgerritMerged openstack/puppet-tripleo master: Merge default_listen with swift_proxy_server_listen_options  https://review.openstack.org/56189804:51
*** cshastri_ has quit IRC04:52
Tenguhello there04:52
jaosorioryooo04:54
jaosoriorhow's it going?04:54
*** ratailor has joined #tripleo04:55
*** karthiks has joined #tripleo04:56
Tengufine and you?04:57
Tengujust a pity I have to work now - sun's shining, a great weather for a ride :D04:58
Tengu(and, worst, working on some awstats thing -.-'. duh.)04:58
*** jchhatbar has quit IRC04:59
jaosoriorhaha daaamn04:59
jaosoriorTengu: weather's pretty shit here right now05:00
jaosoriorso, no biggie that I'm not out haha05:00
jaosoriorhope it gets better later though, planned to go jogging05:00
* Tengu sends a bit of sunshine to Finland05:00
*** jchhatbar has joined #tripleo05:00
jaosoriorTengu: haha if it worked that way I would have soaked a bunch of extra sunshine from my hometown in Mexico05:00
TenguXD05:01
jaosoriorthey're already around 30 C over there05:01
Tenguouchhhh05:01
Tengutoo much for me05:01
*** jchhatbar has quit IRC05:01
Tengu25C is the max I can handle.05:01
Tengumore than that… well. I'm melting. for real.05:01
*** jchhatbar has joined #tripleo05:01
*** pdeore has joined #tripleo05:02
*** jchhatbar has quit IRC05:02
*** jchhatbar has joined #tripleo05:03
jaosoriorTengu: haha yeah; I'm not too keen on very hot weather either05:04
jaosoriorI mean, I did move away from that kind of thing... to come to Finland haha05:05
*** pcaruana has joined #tripleo05:05
*** yprokule has joined #tripleo05:06
*** cshastri_ has joined #tripleo05:06
*** vpickard_ has joined #tripleo05:08
*** vpickard has quit IRC05:09
*** anilvenkata has joined #tripleo05:09
*** ooolpbot has joined #tripleo05:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION05:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487005:10
*** ooolpbot has quit IRC05:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)05:10
*** cshastri has joined #tripleo05:11
*** cshastri_ has quit IRC05:13
*** agurenko has quit IRC05:17
*** pcaruana has quit IRC05:19
*** pgadiya has joined #tripleo05:24
*** bkopilov has quit IRC05:24
Tengujaosorior: :D05:29
*** udesale_ has joined #tripleo05:33
*** ykarel_ has joined #tripleo05:33
*** ykarel has quit IRC05:36
*** udesale has quit IRC05:36
*** hamzy has quit IRC05:37
*** etingof has quit IRC05:42
*** ksingh1 has joined #tripleo05:42
*** agopi has quit IRC05:43
*** agopi has joined #tripleo05:43
*** jaganathan has quit IRC05:44
*** jaganathan has joined #tripleo05:44
*** dsariel has joined #tripleo05:44
*** dparkes has quit IRC05:45
*** hjensas has quit IRC05:46
*** marios has joined #tripleo05:46
*** hamzy has joined #tripleo05:47
*** etingof has joined #tripleo05:51
openstackgerritMerged openstack/tripleo-heat-templates master: Add Ironic Networking Baremetal Templates  https://review.openstack.org/54731805:52
*** dparkes has joined #tripleo05:57
*** quiquell|off is now known as quiquell|ruck05:57
*** paramite has joined #tripleo05:58
openstackgerritMerged openstack/tripleo-heat-templates stable/newton: Change ovs user and fix permissions on ovs upgrade  https://review.openstack.org/55847106:00
*** dparkes has quit IRC06:02
openstackgerritRajesh Tailor proposed openstack/tripleo-heat-templates master: Modify libvirt port range for live-migration  https://review.openstack.org/56178406:04
*** jfrancoa has joined #tripleo06:05
*** jfrancoa has quit IRC06:05
*** etingof has quit IRC06:06
*** jfrancoa has joined #tripleo06:06
*** tzumainn has quit IRC06:06
hanishHi all, i am trying to install queens based overcloud, but some of the containers on controller in unhealthy state06:08
*** ooolpbot has joined #tripleo06:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION06:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487006:10
*** ooolpbot has quit IRC06:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)06:10
*** psachin has quit IRC06:11
*** aufi has joined #tripleo06:11
jaosoriorhanish: are the containers working?06:12
hanishjaosrior, logs inside the containers does not show any errors but containers are in unhealthy state06:13
jaosoriorhanish: OK, so that's not something to worry about; it might just be that those containers don't have "health" script06:14
jaosoriorhanish: can you list the unhealthy containers and report a bug about it?06:14
hanishsure, i currently using tripleoqueens repo and current-tripleo tag for containers06:15
*** kambiz has quit IRC06:23
*** jtomasek has joined #tripleo06:25
*** jtomasek has quit IRC06:25
*** kambiz has joined #tripleo06:26
*** jtomasek has joined #tripleo06:26
*** jchhatba_ has joined #tripleo06:30
*** jchhatbar has quit IRC06:33
*** cylopez has joined #tripleo06:36
*** cylopez has left #tripleo06:36
*** dmacpher has quit IRC06:38
*** shardy has joined #tripleo06:41
*** holser__ has joined #tripleo06:41
openstackgerritJose Luis Franco proposed openstack/tripleo-quickstart-extras master: Remove tasks from overcloud upgrade playbook.  https://review.openstack.org/56192706:42
jchhatba_HI. Can I please get some reviews for https://review.openstack.org/#/c/561445/06:44
jchhatba_mandre, marios jaosorior jfrancoa ^06:44
*** jchhatba_ is now known as janki06:44
*** links has joined #tripleo06:46
*** karts has joined #tripleo06:47
*** dparkes has joined #tripleo06:50
*** pcaruana has joined #tripleo06:50
*** karthiks has quit IRC06:51
*** avivgt has quit IRC06:56
openstackgerritNuman Siddique proposed openstack/tripleo-heat-templates master: ovn: Mount /run instead of /run/openvswitch when starting ovn-controller container  https://review.openstack.org/56194506:57
*** rcernin has quit IRC07:00
*** skramaja has joined #tripleo07:00
*** waleedm has joined #tripleo07:02
*** chem` has quit IRC07:08
openstackgerritJose Luis Franco proposed openstack/python-tripleoclient master: Correct stack in update unit tests.  https://review.openstack.org/56213107:08
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Change ovs user and fix permissions on ovs upgrade  https://review.openstack.org/55947407:09
*** ooolpbot has joined #tripleo07:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION07:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487007:10
*** ooolpbot has quit IRC07:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)07:10
*** kopecmartin has joined #tripleo07:15
*** quiquell|ruck is now known as quiquell|ruck|af07:15
*** quiquell|ruck|af is now known as quique|ruck|afk07:15
*** florianf has joined #tripleo07:16
*** jpich has joined #tripleo07:25
openstackgerritJiri Tomasek proposed openstack/tripleo-heat-templates master: Update capabilities-map  https://review.openstack.org/56213507:27
*** links has quit IRC07:29
*** tesseract has joined #tripleo07:29
*** udesale__ has joined #tripleo07:29
*** agurenko has joined #tripleo07:30
*** ykarel__ has joined #tripleo07:30
*** udesale_ has quit IRC07:32
openstackgerritSergii Golovatiuk proposed openstack/puppet-tripleo stable/queens: Merge default_listen with swift_proxy_server_listen_options  https://review.openstack.org/56213707:33
*** ykarel_ has quit IRC07:33
jaosoriorCould I get a review for this https://review.openstack.org/#/c/561937/ ?07:33
*** psachin has joined #tripleo07:34
*** ffiore has joined #tripleo07:36
*** ykarel__ is now known as ykarel|lunch07:36
openstackgerritJiri Tomasek proposed openstack/tripleo-heat-templates master: Update capabilities-map  https://review.openstack.org/56213507:37
*** amoralej|off is now known as amoralej07:38
*** shardy has quit IRC07:39
*** shardy has joined #tripleo07:39
*** agurenko has quit IRC07:40
*** agurenko has joined #tripleo07:42
*** leanderthal has joined #tripleo07:45
*** links has joined #tripleo07:46
*** jpena|off is now known as jpena07:47
*** tosky has joined #tripleo07:48
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154807:50
*** links has quit IRC07:52
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154807:52
*** fzdarsky_ is now known as fzdarsky07:55
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/newton: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154907:56
*** skarthik has joined #tripleo07:56
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/pike: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56155007:58
*** quique|ruck|afk is now known as quiquell|ruck07:58
*** ccamacho has joined #tripleo07:59
*** dparkes has quit IRC07:59
*** bogdando has joined #tripleo07:59
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/pike: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56155008:00
*** hawkn has quit IRC08:00
*** karts has quit IRC08:00
*** dparkes has joined #tripleo08:01
*** radeks has joined #tripleo08:01
*** leanderthal has quit IRC08:01
*** mdnadeem has joined #tripleo08:04
*** dparkes has quit IRC08:04
*** lucas-afk is now known as lucasagomes08:05
bogdandoPTAL  https://review.openstack.org/#/c/561965/08:06
bogdandojaosorior: ^^ please08:06
*** ksingh1 has quit IRC08:06
bogdandoand the patches in that chain08:07
*** gkadam has joined #tripleo08:07
*** waleedm has quit IRC08:08
*** skarthik is now known as karthiks08:08
*** mugsie has quit IRC08:09
*** ooolpbot has joined #tripleo08:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION08:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487008:10
*** ooolpbot has quit IRC08:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)08:10
openstackgerritBogdan Dobrelya proposed openstack/tripleo-heat-templates master: Add missing hiera interpolation calls  https://review.openstack.org/56196408:12
openstackgerritBogdan Dobrelya proposed openstack/tripleo-heat-templates master: Add validation for hiera interpolation in services  https://review.openstack.org/56193208:12
openstackgerritBogdan Dobrelya proposed openstack/tripleo-heat-templates master: Track global failures flag for YAML validations  https://review.openstack.org/56196508:12
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154808:13
*** ykarel|lunch is now known as ykarel08:13
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/newton: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154908:16
*** dparkes has joined #tripleo08:18
*** bkopilov has joined #tripleo08:19
openstackgerritJose Luis Franco proposed openstack/tripleo-heat-templates stable/queens: Disable FluentClient service for ffwd/upgrades.  https://review.openstack.org/56214208:20
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56155508:20
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/newton: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56155708:21
*** mugsie has joined #tripleo08:21
*** mugsie has quit IRC08:21
*** mugsie has joined #tripleo08:21
*** slaweq has joined #tripleo08:23
*** etingof has joined #tripleo08:23
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/newton: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154908:26
*** ksingh has joined #tripleo08:27
*** ssbarnea_ has joined #tripleo08:27
*** waleedm has joined #tripleo08:28
openstackgerritCarlos Camacho proposed openstack/tripleo-heat-templates stable/queens: Disable FluentClient service for ffwd/upgrades.  https://review.openstack.org/56214208:30
*** fmount9 has joined #tripleo08:30
openstackgerritJiri Stransky proposed openstack/tripleo-quickstart master: Fix ironic-python-agent URLs  https://review.openstack.org/56195108:32
*** udesale_ has joined #tripleo08:35
*** ksingh2 has joined #tripleo08:36
*** pdeore_ has joined #tripleo08:37
*** udesale__ has quit IRC08:38
*** ksingh has quit IRC08:38
openstackgerritJose Luis Franco proposed openstack/tripleo-heat-templates master: Add www_authenticate_uri option to replace auth_uri.  https://review.openstack.org/55883108:38
*** suuuper has joined #tripleo08:38
*** pdeore has quit IRC08:39
*** derekh has joined #tripleo08:43
openstackgerritzenghui.shi proposed openstack/tripleo-heat-templates stable/ocata: Change ovs RuntimeDirectory Mode  https://review.openstack.org/56214808:43
*** agopi has quit IRC08:44
*** links has joined #tripleo08:48
openstackgerritJose Luis Franco proposed openstack/instack-undercloud master: Replace deprecated auth_uri by www_authenticate_uri.  https://review.openstack.org/55883708:48
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Standardise Workflow messaging and optionally persist messages  https://review.openstack.org/42506008:49
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Optionally run config download at the end of stack create/update  https://review.openstack.org/55422408:49
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Send a message every time we get the stack  https://review.openstack.org/56093308:49
jaosoriord0ugal: could you check this out https://review.openstack.org/#/c/561937/ ?08:49
d0ugaljaosorior: sure08:49
d0ugaljtomasek: Just updated https://review.openstack.org/#/c/560933/08:49
d0ugaljtomasek: I had a fix for it that I thought I had submitted already but my git review was waiting for me to type "yes" - oops.08:50
jtomasekd0ugal: thanks08:50
d0ugaljtomasek: there are some issues with the config download changes. I am going to see if mandre is around to help me fix that (I don't really understand what they should do)08:51
d0ugalI think mandre added those bits.08:51
jaosoriord0ugal: what issues?08:52
openstackgerritMerged openstack/tripleo-upgrade stable/queens: Update fast forward upgrade environment file location  https://review.openstack.org/56201308:52
jtomasekd0ugal: what I've been hitting with newly added config-download tasks is that in some cases, servers: <% task().result._info.select($.addresses.ctlplane.addr).flatten() %> did not work properly08:53
d0ugaljaosorior: issues in https://review.openstack.org/#/c/554224/ - that was directed to jtomasek.08:53
d0ugaljtomasek: yeah, I don't understand what that YAQL should do. but CI is contantly failing on https://review.openstack.org/#/c/554224/08:54
d0ugaljtomasek: Can you explain why we need those changes? is it something that tripleoclient is doing now?08:54
openstackgerritCarlos Goncalves proposed openstack/tripleo-heat-templates master: Containerize Neutron LBaaS service plugin  https://review.openstack.org/55501108:54
*** dr_gogeta86 has joined #tripleo08:56
*** pgadiya has joined #tripleo08:57
*** dr_gogeta86 has quit IRC08:57
*** dr_gogeta86 has joined #tripleo08:57
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates stable/queens: FFU: Use yum shell instead of ansible yum module  https://review.openstack.org/56161608:59
*** panda|rover|off is now known as panda|rover08:59
*** jtomasek has quit IRC09:07
*** mdnadeem_ has joined #tripleo09:08
*** ooolpbot has joined #tripleo09:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION09:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487009:10
*** ooolpbot has quit IRC09:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)09:10
*** mdnadeem has quit IRC09:10
openstackgerritArx Cruz proposed openstack/tripleo-quickstart-extras master: Fixing tempest containerized script  https://review.openstack.org/56215509:11
openstackgerritArx Cruz proposed openstack/tripleo-quickstart master: DNM: Run tempest containerized  https://review.openstack.org/56192009:14
*** gfidente has joined #tripleo09:19
*** gfidente has quit IRC09:19
*** gfidente has joined #tripleo09:19
*** etingof has quit IRC09:21
openstackgerritFlorian Fuchs proposed openstack/tripleo-validations master: Update ceilometerdb-size to support gnocchi and panko  https://review.openstack.org/47110809:30
*** mdnadeem_ has quit IRC09:32
*** mdnadeem has joined #tripleo09:32
*** etingof has joined #tripleo09:33
*** pdeore__ has joined #tripleo09:34
openstackgerritYurii Prokulevych proposed openstack/tripleo-upgrade stable/queens: Fix typo in inventory's output file.  https://review.openstack.org/56217009:36
*** pdeore_ has quit IRC09:36
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154809:36
*** itlinux has joined #tripleo09:40
openstackgerritBogdan Dobrelya proposed openstack-infra/tripleo-ci master: turn on container updates for containerized undercloud  https://review.openstack.org/55949209:44
*** agurenko has quit IRC09:44
*** akrivoka has joined #tripleo09:45
*** itlinux has quit IRC09:49
openstackgerritJose Luis Franco proposed openstack/tripleo-quickstart-extras master: Remove tasks from overcloud upgrade playbook.  https://review.openstack.org/56192709:52
*** itlinux has joined #tripleo10:01
*** bogdando has quit IRC10:02
*** pkovar has joined #tripleo10:03
mandred0ugal: yeah, python-tripleoclient sets up the ssh key, we need to do it in the workflow now10:03
*** bogdando has joined #tripleo10:04
*** holser__ has quit IRC10:04
*** holser__ has joined #tripleo10:05
mandred0ugal: https://github.com/openstack/python-tripleoclient/blob/master/tripleoclient/workflows/deployment.py#L114-L11710:05
mandreand https://github.com/openstack/tripleo-heat-templates/blob/master/deployed-server/scripts/enable-ssh-admin.sh#L6510:06
openstackgerritJiri Stransky proposed openstack/tripleo-common master: Only update plan on upgrade converge  https://review.openstack.org/56220510:06
mandrenot sure why this was implemented in the client, but seems to me we got a big opportunity for cleanup10:07
*** zoli is now known as zoli|lunch10:07
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates stable/queens: DO-NOT-MERGE Test new ceph-ansible builds (OSP queens)  https://review.openstack.org/56220710:10
*** ooolpbot has joined #tripleo10:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION10:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487010:10
*** ooolpbot has quit IRC10:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)10:10
*** chem has joined #tripleo10:14
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates master: Rely on client defaults for the Ceph container image to use in CI  https://review.openstack.org/56221210:17
mandred0ugal: aha! since we've moved the call to enable_ssh_admin into the config_download_deploy workflow, we should stop calling it from python-tripleoclient10:17
d0ugalmandre: yup, I can look into doing that - might need to do a bit of a dance to have it pass CI10:17
d0ugalmandre: or, maybe better, make the workflow idempotent10:18
openstackgerritOliver Walsh proposed openstack/tripleo-heat-templates master: Improve nova-ironic cellv2 discovery  https://review.openstack.org/55337610:18
*** waleedm has quit IRC10:20
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates master: DO-NOT-MERGE Test new ceph-container builds  https://review.openstack.org/56221310:20
mandred0ugal: yep idk what's causing it to fail, looks like the workflow times out, do we need to bump a value?10:20
*** jaganathan has quit IRC10:21
*** udesale__ has joined #tripleo10:21
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates stable/queens: Rely on client defaults for the Ceph container image to use in CI  https://review.openstack.org/56221410:22
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates stable/queens: DO-NOT-MERGE Test new ceph-container builds (OSP queens)  https://review.openstack.org/56221510:24
*** udesale_ has quit IRC10:24
d0ugalmandre: http://paste.openstack.org/show/719453/10:27
openstackgerritDerek Higgins proposed openstack/tripleo-heat-templates master: Add IronicInspector to the Controller roles  https://review.openstack.org/56221610:27
d0ugalmandre: That is what I am seeing10:27
*** pcaruana has quit IRC10:27
*** psahoo has quit IRC10:27
d0ugalmandre: it seems the nova.servers_list is empty?10:28
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates stable/pike: DO-NOT-MERGE Test new ceph-container builds (OSP pike)  https://review.openstack.org/56221710:29
mandred0ugal: looks like it yeah10:29
mandred0ugal: we need to update this part to filter out the servers that are not part of the stack BTW10:29
openstackgerritAttila Darazs proposed openstack/tripleo-quickstart-extras master: GATE CHECK for quickstart-extras  https://review.openstack.org/56044510:30
openstackgerritAttila Darazs proposed openstack/tripleo-heat-templates stable/queens: GATE CHECK for TripleO  https://review.openstack.org/56045210:30
d0ugalmandre: Yeah, I was wondering how we would do that :010:32
d0ugalmandre: but first I need to figure out why I am not getting any servers...10:32
mandred0ugal: I seem to remember jtomasek was seeing a similar issue when he had a stack in a broken state10:34
mandrewhat do you see with 'openstack server list'10:34
d0ugalmandre: Nothing :) also empty10:34
akrivokaflorianf: ping, do you have a moment to help me test https://review.openstack.org/#/c/559304/10:34
*** dsariel has quit IRC10:37
florianfakrivoka: sure10:39
akrivokaflorianf: so, not sure if I'm going about it right, but this is what I'm doing10:40
mandred0ugal: hmm I'm wondering if we shouldn't move enable_ssh_host out of config_download_deploy back to deploy_plan like it was before10:40
akrivokaflorianf: I applied the patch on a local checkout on the undercloud, then did python setup.py install10:40
akrivokaflorianf: then trying to run the validation via mistral like so: mistral execution-create tripleo.validations.v1.run_validation ~/input.json10:41
*** pdeore__ has quit IRC10:41
mandred0ugal: because if we run it from config_download_deploy, we're basically assuming that the nodes are visible to nova10:41
akrivokaflorianf: where input.json contains { "validation_name": "switch-vlans" }10:41
akrivokaflorianf: I'm getting a failure from mistral, but no useful error message10:41
florianfakrivoka: you need to update /usr/share/openstack-tripleo-validations/validations with the changes from the patch10:42
florianfakrivoka: AFAIK that's not going to be done by python setup.py install10:42
akrivokaflorianf: it does10:42
akrivokasetup.py install copies the files there10:43
florianfakrivoka: oh, right, it does.10:44
*** slagle has quit IRC10:44
florianfakrivoka: let me try to run it in my env10:45
akrivokaflorianf: this is the output from mistral execution: https://paste.fedoraproject.org/paste/Yx9wNWaEo50XyWFzjijZpg10:45
akrivokaflorianf: so my questions are: 1) am I going about it correctly and 2) is there a way to see the actual failure (I tried looking into mistral logs but didn't see anything of interest there either)10:46
florianfakrivoka: OK, I tried the same steps as you did and it ran successful. But the error message hints at something going wrong in the custom module or the lookup plugin. So to make debugging a little easier I would try to run it with ansible-playbook10:49
openstackgerritBrent Eagles proposed openstack/tripleo-common master: Octavia amphora image handles updates and symlinks  https://review.openstack.org/56201910:49
*** dsariel has joined #tripleo10:50
florianfakrivoka: My env isn't very fresh so it might be different to yours10:51
openstackgerrityolanda.robla proposed openstack/tripleo-heat-templates stable/ocata: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56155510:51
akrivokaflorianf: ok, now we're getting somewhere... https://paste.fedoraproject.org/paste/7yPd1ULqeW9TOcwMafAD8w10:52
openstackgerritDerek Higgins proposed openstack/tripleo-quickstart-extras master: Setup Ironic in Overcloud  https://review.openstack.org/50972810:54
florianfakrivoka: can you add debug tasks for what's happening in line 28 and 29 of the playbook?10:55
florianfakrivoka: it doesn't seem to be an error in the custom module, but rather a problem with one of the lookups10:56
d0ugalmandre: sure, I'd be fine with moving it back. It did seem a little weird to have config_download steps in the other workflow tho10:57
akrivokaflorianf: so if I try to output the results of both lookups using a debug task, that succeeds11:02
akrivokaflorianf: doing something like:   - debug:11:02
akrivoka      msg: "lookup tht: {{ lookup('tht') }}, introspection data: {{ lookup('introspection_data', auth_url=auth_url.value, password=password.value) }}"11:02
akrivokaflorianf: the output is huge11:02
florianfakrivoka: but the playbook itself still fails?11:03
akrivokaflorianf: it fails on the next task, same as before (I inserted a debug task just before the "Check that switch vlans are present" task11:04
*** Dekay has quit IRC11:04
*** rh-jelabarre has joined #tripleo11:05
akrivokaflorianf: I have a feeling that a utf encode/decode is missing somewhere... :)11:05
*** mburned`` is now known as mburned11:06
florianfakrivoka: Or it's one of the module.(exit|fail)_json calls in the module11:07
akrivokaflorianf: I can give you access to my machine if you want to debug directly?11:07
florianfakrivoka: sure!11:09
*** ooolpbot has joined #tripleo11:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION11:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487011:10
*** ooolpbot has quit IRC11:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)11:10
*** slagle has joined #tripleo11:11
openstackgerritJose Luis Franco proposed openstack/tripleo-upgrade master: Add overcloud update converge tasks.  https://review.openstack.org/56224411:13
*** zoli|lunch is now known as zoli11:14
*** zoli is now known as zoli|wfh11:14
*** zoli|wfh is now known as zoli11:14
*** bfournie has quit IRC11:16
*** udesale__ has quit IRC11:16
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Use the standard messaging in the package_update workbook  https://review.openstack.org/55459411:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Use the standard messaging in the derive_parameters workbook  https://review.openstack.org/55454811:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Use the standard messaging in the plan_management workbook  https://review.openstack.org/55459511:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Use the standard messaging in the baremetal workbook  https://review.openstack.org/55246011:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Use the standard messaging in the fernet-key-rotate workbook  https://review.openstack.org/55455211:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Optionally run config download at the end of stack create/update  https://review.openstack.org/55422411:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Send a message every time we get the stack  https://review.openstack.org/56093311:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Use the standard messaging in the networks workbook  https://review.openstack.org/55459311:17
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Verify the Swift container exists with a small utility workflow  https://review.openstack.org/52821311:17
*** lucasagomes is now known as lucas-hungry11:18
numansskramaja, Hi, can you please have a  look at this patch - https://review.openstack.org/#/c/561945/ when you get some time11:26
skramajaack numans11:26
*** dhill_ has quit IRC11:26
*** leanderthal has joined #tripleo11:31
*** ramishra has quit IRC11:32
*** nyechiel has quit IRC11:33
*** itlinux has quit IRC11:34
*** thrash|g0ne is now known as thrash11:39
*** pdeore__ has joined #tripleo11:40
*** radeks has quit IRC11:41
openstackgerritMarios Andreou proposed openstack/tripleo-common master: Remove the upgrade-non-controller.sh and disable_upgrade_deployment  https://review.openstack.org/55769411:42
*** dprince has joined #tripleo11:42
*** pkovar has quit IRC11:43
openstackgerritJiri Stransky proposed openstack/python-tripleoclient master: Add `update converge` CLI to remove no-ops  https://review.openstack.org/55853611:44
*** psahoo has joined #tripleo11:46
openstackgerritArx Cruz proposed openstack/tripleo-quickstart-extras master: Fixing tempest containerized script  https://review.openstack.org/56215511:46
ykarelstevebaker, hi11:47
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Fix the passlib deprecation warning  https://review.openstack.org/56225111:47
*** bfournie has joined #tripleo11:49
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add validation for checking baremetal boot images  https://review.openstack.org/55532511:51
*** suuuper has quit IRC11:53
*** suuuper has joined #tripleo11:54
*** pdeore__ is now known as pdeore11:54
*** ramishra has joined #tripleo11:57
*** itlinux has joined #tripleo11:58
*** atoth has joined #tripleo11:59
*** morazi has joined #tripleo11:59
*** jpena is now known as jpena|lunch12:00
jaosorior#startmeeting Tripleo Security Squad12:01
openstackMeeting started Wed Apr 18 12:01:14 2018 UTC and is due to finish in 60 minutes.  The chair is jaosorior. Information about MeetBot at http://wiki.debian.org/MeetBot.12:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.12:01
*** openstack changes topic to " (Meeting topic: Tripleo Security Squad)"12:01
openstackThe meeting name has been set to 'tripleo_security_squad'12:01
*** rfolco|off is now known as rfolco12:01
jaosoriorAlright, gonna wait for folks to join in12:01
*** leanderthal has quit IRC12:01
moguimaro/12:01
jaosoriorhey moguimar! how's it going?12:01
*** raildo has joined #tripleo12:01
moguimarfine12:01
jaosoriorlhinds-, alee, raildo: ping12:01
raildoo/12:02
jaosorior\o12:03
moguimarhttps://etherpad.openstack.org/p/tripleo-security-squad12:04
jaosoriorAlright12:05
jaosoriorthanks moguimar12:05
jaosorior#topic Storyboard migration12:05
*** openstack changes topic to "Storyboard migration (Meeting topic: Tripleo Security Squad)"12:05
jaosoriorSo, last week we agreed to try out migrating to storyboard12:05
jaosoriorfor which moguimar did us the favor of setting up a board and relevant columns for it12:06
jaosorior#link https://storyboard.openstack.org/#!/board/6512:06
moguimarthe thing is, in order to create stories and tasks, they must belong to a project12:06
moguimarand we don't have permission to create projects12:07
jaosoriorHowever, we stumbled upon the issue that in order to create a task in a story, we need to assign that task to a repo12:07
jaosoriorright12:07
moguimaropenstack-infra/tripleo-ci, openstack/tripleo-ui, openstack/tripleo-validations12:07
jaosoriorand not all TripleO deliverables are available in Storyboard12:07
jaosoriorat least not the ones that we're currently working with12:07
moguimarthese are the only tripleo-* projects so far12:07
jaosoriorright12:07
lhinds-sorry all12:08
jaosoriorSo, fungi suggested we create a provisional repository for the security squad; where we would add relevant documentation, and towards which we could assign the tasks we're tracking12:08
*** lhinds- is now known as lhinds12:08
lhindso/12:08
jaosoriorhey lhinds! glad you could make it12:08
jaosoriorAnyway12:09
moguimarsomething like openstack/tripleo-security?12:09
jaosoriorright12:09
moguimaror 'tripleo-sec'12:09
jaosoriorhowever, mwhahaha wasn't to keen on the extra repo idea, since it does incur extra overhead (this new repo)12:09
jaosoriorand it's pretty much just for administrative (storyboard) purposes12:09
jaosoriorso, I can definitely understand that point12:09
*** ooolpbot has joined #tripleo12:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION12:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487012:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)12:10
*** ooolpbot has quit IRC12:10
jaosoriorso now it seems we have two options:12:10
*** amoralej is now known as amoralej|lunch12:10
jaosorior1) try to get that extra repository12:10
jaosorior2) pospone the storyboard migration12:10
jaosorior* postpone12:10
jaosoriorWhat do you think?12:11
* mwhahaha votes postpone12:11
moguimardoes every story we have touches a single repo?12:11
jaosoriormoguimar: no, they cross repos all the time12:11
jaosoriormoguimar: however, stories can have tasks that span several repos12:12
raildoif that storyboard migration is not so urgent, we can postpone for a few weeks12:12
jaosoriorthat's not the problematic part12:12
*** rbowen has quit IRC12:12
jaosoriorthe problematic part is that we would then need ALL tripleo deliverables to be tracked by storyboard12:12
* moguimar votes extra repo12:12
moguimarthe story itself points to the repo12:13
moguimarbut I'm not sure if the tasks under a certain story can point to other repos12:13
jaosoriormoguimar: they do12:13
lhindsI am warming to a repo too, considering your last comment jaosorior12:13
moguimarwe might migrate to option two when the adoption is complete12:14
jaosoriormoguimar: try to add a story: you'll see that a story consists of a story title, the description, and below are the tasks12:14
jaosoriorthe tasks then are map to different repos12:14
jaosoriorone task per-repo12:14
moguimarbut we might get stuck if we postpone for a while and then need another repo that is not migrated yet12:14
jaosoriorkind of12:14
jaosoriormoguimar: correct12:15
jaosoriormwhahaha: is there any intention on moving all the TripleO deliverables to storyboard?12:15
*** jtomasek has joined #tripleo12:15
mwhahahaeventually that's what upstream wants12:15
openstackgerritAthlan-Guyot sofer proposed openstack/puppet-tripleo master: Prevent change in host parameter for nova/neutron/ceilometer.  https://review.openstack.org/55573212:15
mwhahahathe hope was to move squads but since it requires specific repos12:15
mwhahahai'm not sure on the timing12:15
jaosoriorright12:16
moguimaryou're right, the story isn't project dependant12:16
jaosoriorone option I see is to use tripleo-docs. Since either way we need to document the feature work, and security considerations we come up with12:17
moguimarcan a task be reassigned to another project?12:17
openstackgerritYurii Prokulevych proposed openstack/tripleo-upgrade stable/queens: Fix typo in inventory's output file.  https://review.openstack.org/56217012:18
lhindsjaosorior: we have a security section in tripleo-docs12:18
jaosoriorlhinds: right, that's what I had in mind. I'm just not entirely sure what that actually means. I wouldn't want the Security Squad to "own" tripleo-docs... so hopefully it's just that the project is tracked and we can assign tasks for that repo.12:18
jaosoriormwhahaha: any idea how that goes?12:19
*** dbecker has joined #tripleo12:19
lhindsjaosorior: ack, see what you mean12:19
mwhahahathat'd probably work as a workaround12:19
*** pcaruana has joined #tripleo12:19
mwhahahacan you move the bugs later from tripleo-docs?12:19
jaosoriorI hope so :D12:19
mwhahaha:o12:19
mwhahahawell that'd be a good workaround so we don't have to create a new repo for all the squads12:20
moguimarbut then we'll have to filter what needs to be moved12:20
mwhahahai don't think we have any docs bugs12:20
mwhahahaso anything assigned to tripleo-docs would get moved i guess12:20
moguimarbugs/tasks12:20
moguimarthen what if another squad has the same idea? "hey, lets use tripleo-docs"12:21
*** agurenko has joined #tripleo12:21
jaosoriormoguimar: hopefully they can use it as well12:21
*** rbowen has joined #tripleo12:21
jaosoriorthat's what we need to figure out haha12:21
jaosoriorSo, lets do this12:21
moguimarthen we will have to filter what is ours and what is not12:21
moguimarwhat is the cost of having our own repo?12:21
jtomasekd0ugal: yes, I belive so12:22
jaosoriormoguimar and me could poke EmilienM, and the storyboard folks for the following: 1) Is using tripleo-docs an option? 2) if it is, can other squads use it too? 3) Can we move bugs away from tripleo-docs when needed?12:22
jaosoriorWhat do you think?12:22
*** karthiks has quit IRC12:22
moguimarsounds like a plan, but I still thing this is a bigger workarround that having our own repo12:23
mwhahahamoguimar: well i don't want to create a repo for every squad12:23
jaosoriormoguimar: well, mwhahaha had some concerns on having a repo just for this. I assume mostly it's because of the overhead on having to maintain yet another repository.12:23
mwhahahabecause it's not just this squad12:23
mwhahahai'd rather either move everyone or not at all12:23
* mwhahaha would like to not move at all but that's another story12:23
moguimarthen can you create a temp repo for every squad?12:24
moguimarlike tripleo-repositoryless12:24
*** cshastri has quit IRC12:24
mwhahahai don't know how that's different than tripleo-docs12:24
moguimarso we don't invade tripleo-docs with non tripleo-docs related stuff?12:25
mwhahahabecause we won't be importating anything into tripleo-docs12:25
mwhahahawe don't have any bug classification for tripleo-docs bugs12:25
mwhahahaso we won't actually import anything associated with tripleo-docs12:25
moguimargot it12:25
moguimarlet's try it then :)12:26
*** rbrady has joined #tripleo12:26
*** rbrady has quit IRC12:26
*** rbrady has joined #tripleo12:26
*** karthiks has joined #tripleo12:26
jaosoriormoguimar, mwhahaha: Is the tripleo-docs solution a viable path in your opinion then? (after answering the questions I posted above)12:26
moguimaryep12:26
mwhahahayea12:26
jaosoriorAlright12:26
jaosorior#action moguimar and jaosorior to answer the following before proceeding with storyboard: 1) Is using tripleo-docs an option? 2) if it is, can other squads use it too? 3) Can we move bugs away from tripleo-docs when needed?12:27
jaosoriormwhahaha: thanks for joining in as well12:27
*** pchavva has joined #tripleo12:27
mwhahahagotta be up at 6am anyway ಠ_ಠ12:27
jaosoriorAnything else folks want to bring up about this topic?12:27
jaosoriormwhahaha: ouch12:28
raildonothing from my side12:28
moguimarme neither12:28
jaosorior#topic Secret Management Work update12:28
*** openstack changes topic to "Secret Management Work update (Meeting topic: Tripleo Security Squad)"12:28
*** trown|outtypewww is now known as trown12:29
jaosoriorSo, the good news is that for securing the overcloud plan (which is stored in swift); the proposed solution is quite straight forward12:29
jaosoriorSwift already supports object encryption (at rest)12:29
jaosoriorand that's already implemented in the overcloud12:29
jaosoriorSo, with a few patches alee and me managed to get object encryption for the undercloud as well12:30
jaosoriornote that this work only applies for the containerized undercloud12:30
*** rlandy has joined #tripleo12:30
raildojaosorior, that's a great work, congrats dude!12:31
jaosoriorBut if you would like to check it out, here are all the patches https://review.openstack.org/#/q/topic:secret-management+(status:open+OR+status:merged)12:31
jaosoriorNow, currently it's disabled by default; and I only proposed to enable it in one job (undercloud-containers or fs027)12:31
*** lucas-hungry is now known as lucasagomes12:31
jaosoriorHowever, I think that enabling it by default would not be too problematic (except for the basic undercloud taking more resources than before)12:32
jaosoriorSo, I'm planning to propose that in the mailing list12:32
alee+112:32
jaosoriorNow, it would take more resources because in order to get object encryption, Barbican needs to be deployed, since that's currently the only viable solution we can support12:33
jaosoriorhowever, in the future, we could exchange Barbican for Vault or something else.12:33
raildojaosorior, I suggest get that result for this job showing that the feature is working well, for like 1 month, so you can have some argument that "we're not breaking anyone"12:33
jaosoriorAnyway, the current proposal is with Barbican.12:33
jaosoriorraildo: that's a good idea12:33
jaosoriorI dig it12:33
raildo#link http://status.openstack.org/openstack-health/#/12:34
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add validation for checking baremetal boot images  https://review.openstack.org/55532512:34
raildousually you can get this stuff on this link12:34
jaosoriorSo, the mail will be sent in a month, and lets see what the rest of the community thinks12:34
jaosoriorAny questions/feedback?12:34
aleejaosorior, I'm not sure we need to wait a month to send out the email and get feedback12:35
chemowalsh: hey, so you've seen, one can get the actual set values for the the host parameter in a fact ...12:35
jaosorioralee: could be a couple of weeks after this merges12:35
raildoalee, ++ it was just an idea, that you can add this info later in the thread :)12:36
*** dsariel has quit IRC12:36
chemowalsh: but for one i think this would have never merged :) but the logic was getting complicated12:36
jaosoriorbut I do agre with raildo that we should let the test run this for a while before proposing it as a default.12:36
chemowalsh: s/but/and/12:36
openstackgerritChristian Schulze-Wiehenbrauk proposed openstack/puppet-pacemaker master: Fix missing pass-through of cluster_auth_enabled parameter  https://review.openstack.org/56226312:36
fultonjsphinx-docs!12:36
aleejaosorior, ok -- I'm ok with waiting for a little while - in the meantime lets see if there are other cases that are solved by having a barbican in the undercloud12:37
chemowalsh: next review is about to make that host parameter immutable during upgrade/update/ffu so that we don't break ourself on purpose12:37
*** quiquell|ruck is now known as quique|ruck|food12:37
aleeor more specifically a castellan implementation12:37
jaosorioralee: right, there's still a bunch of work to do12:37
jaosoriorbut I think this is a pretty nice milestone for that work :)12:38
aleeagreed :)12:38
dpeacockdeployment from current is still b0rked - http://paste.openstack.org/show/719463/12:38
jaosorior#topic Public TLS by default work update12:39
*** openstack changes topic to "Public TLS by default work update (Meeting topic: Tripleo Security Squad)"12:39
jaosoriorOn a similar note12:39
jaosoriormost of the base work for getting TLS by default has been uploaded12:39
jaosoriorif you want to review what's there, or check out what was done12:39
jaosoriorhere's the link12:39
jaosorior#link https://review.openstack.org/#/q/topic:public-tls-default+(status:open+OR+status:merged)12:39
jaosoriorfor this, jistr raised a very good point regarding that we should let folks with existing deployments keep having TLS off (if they initially deployed that way)12:40
jaosoriorSo, the next part of that work is making sure updates leave the overcloud without TLS if that was the state it was in.12:40
*** ramishra_ has joined #tripleo12:41
jaosoriorAny questions/feedback?12:41
aleejaosorior, is there a way to make that optional?12:41
jaosorioralee: what do you mean?12:42
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates stable/queens: DO-NOT-MERGE Test new ceph-container builds (OSP queens)  https://review.openstack.org/56221512:42
aleejaosorior, that is -- I can see folks saying - boy, having tls would be great - maybe I can set something any have tls enabled for me12:42
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates stable/pike: DO-NOT-MERGE Test new ceph-container builds (OSP pike)  https://review.openstack.org/56221712:42
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates master: DO-NOT-MERGE Test new ceph-container builds  https://review.openstack.org/56221312:43
aleejaosorior, or would that have to enable and then redeploy?12:43
toskyjaosorior: stupid question: https://review.openstack.org/#/c/560430/ did not add CACert to scenario003 (which contains sahara) - is it because Sahara does not implement properly all the magic?12:43
tosky(the thing that we discussed during the PTG)12:43
*** radeks has joined #tripleo12:43
jaosorioralee: well, currently there is no sure update/upgrade path12:43
jaosoriortosky: I'll answer after the meeting12:44
*** ramishra has quit IRC12:44
*** cdearborn has joined #tripleo12:44
jaosorioralee: so, definitely something to consider when implementing the update/ugprade path. It should be possible for someone to say "Enable TLS if it's not there", with means of a simple flag or something of the sort12:45
aleejaosorior, +112:45
jaosoriorplanning to sort out some of the details of that next week in Brno12:45
jaosoriorsince a bunch of the folks that work in updates/upgrades will be there12:45
jaosoriorit's a great coincidence12:45
jaosoriorAnybody else has questions or would like to bring up something about this work?12:47
jaosoriorAlso note that help is always welcome :D and there is still stuff to do on that side12:47
*** SulaimanRadwan has joined #tripleo12:47
*** apetrich_ has joined #tripleo12:48
aleeI'm curious if there are any real deployments out there that dont have tls enabled on the public side ..12:48
*** artom_ has quit IRC12:48
jaosorioralee: probably it's mostly labs and CI deployments. Not sure, to be honest.12:49
jaosorior#topic Any other business12:49
*** openstack changes topic to "Any other business (Meeting topic: Tripleo Security Squad)"12:49
jaosoriorAlright! That was all on my side. Anything anybody else wants to bring up to the meeting?12:49
lhindsquick one from me, I have started shifting through sudoer use12:50
fungion the concern earlier about how to identify stories being handled by one squad or another even if they have tasks on the same repo(s), you can use story tags which are queryable12:50
lhindsnot much to update yet12:50
*** pdeore has quit IRC12:50
*** pkovar has joined #tripleo12:50
lhinds#link ttps://etherpad.openstack.org/p/tripleo-heat-admin-security12:50
jaosoriorlhinds: well, that's a good start12:51
lhindsjust trying to get my head around what validations is doing12:51
jaosoriorlhinds: please reach out if you would like help and have ideas on how to divide that12:51
lhindsjaosorior: ack, will do. thx12:51
*** hjensas has joined #tripleo12:51
*** hjensas has quit IRC12:51
*** hjensas has joined #tripleo12:51
*** hamdyk has joined #tripleo12:51
jaosoriorlhinds: what do you need to know about validations?12:51
*** itlinux has quit IRC12:51
jaosoriorlhinds: maybe florianf, mandre or shadower can help you on that side.12:52
jaosoriorfungi: that's good to know!12:52
lhindsIt has its own account, and sudoers is ALL - so I need to find the instances of where it needs sudo.12:52
*** ratailor has quit IRC12:52
aleelhinds, dont forget barbican12:52
jaosorioralee: what do we use sudo for in barbican?12:53
alee(both on the overcloud and undercloud)12:53
lhindsalee: good point, does barbican have its own user account with a sudoers.d's file?12:53
lhindsactually alee will ping you12:53
aleesure -- jaosorior not sure offhand12:53
lhindswe are almost at the end now, so I will discuss more indepth with you12:53
florianflhinds: It runs ansible playbooks and some of the tasks have the "become" attribute which tells ansible to run the tasks as root12:54
aleelhinds, also novajoin user perhaps?12:54
lhindsflorianf: do you need "validations ALL = NOPASSWD: ALL" for that?12:55
*** apetrich_ has quit IRC12:55
lhindsmight not be a quick answer I understand, but for context, that is what we would like to limit more.12:55
*** mcornea has joined #tripleo12:56
openstackgerritMerged openstack/diskimage-builder master: Remove installed packages before pip install  https://review.openstack.org/56147912:56
*** vpickard_ is now known as vpickard12:56
lhindsfor example 'sudo su' or 'sudo rm / -fr --no-preserve-root'12:56
*** liverpooler has joined #tripleo12:57
jaosoriorAlright12:58
florianflhinds: I guess I can't think of a good way to do this. This GH issue for ansible adds a bit of context: https://github.com/ansible/ansible/issues/571212:58
lhindsthanks florianf , will take a read12:58
jaosoriorseems we're out of time12:59
jaosoriorthanks everybody for joining!12:59
jaosorior#endmeeting12:59
*** openstack changes topic to "Welcome to Rocky. CI status GREEN | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest/"12:59
openstackMeeting ended Wed Apr 18 12:59:20 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)12:59
openstackMinutes:        http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-04-18-12.01.html12:59
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-04-18-12.01.txt12:59
openstackLog:            http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-04-18-12.01.log.html12:59
moguimaro/12:59
openstackgerritJose Luis Franco proposed openstack/tripleo-upgrade master: Add overcloud update converge tasks.  https://review.openstack.org/56224412:59
florianflhinds: unfortunately many of the validations require access to config files or perform other sudo-worthy tasks...13:00
*** ssbarnea_ has quit IRC13:00
florianflhinds: the link I sent you explains some of the ansible background. But I'm happy to discuss this further if you have an idea how we could approach this.13:00
openstackgerritHamdy Khader proposed openstack/tripleo-heat-templates master: Add environment file for Mellanox SDN  https://review.openstack.org/55050713:00
toskyflorianf: I don't know the details of the operations which requires root, but maybe it could be possible to limit them with wrappers13:01
toskyflorianf: for example: a custom (python) module to access (read-only) the values from config files13:01
*** jpena|lunch is now known as jpena13:01
toskyand limit the become to those kind of tasks13:02
jaosoriortosky: thanks for bringing up secnario00313:03
jaosoriorI had just missed it, that'13:03
jaosoriorthat's it13:03
openstackgerritJuan Antonio Osorio Robles proposed openstack/tripleo-heat-templates master: Add CACerts service to scenario003  https://review.openstack.org/56227013:03
jaosoriortosky: done ^^13:03
toskyjaosorior: ah, ok, thanks13:03
toskyjaosorior: so it's independent from the magic stuff for setting up TLS CAs, right?13:03
jaosoriorright13:03
EmilienMo/13:04
toskythanks13:04
jaosoriorEmilienM: o/13:04
*** Goneri has joined #tripleo13:04
*** ssbarnea_ has joined #tripleo13:04
*** amoralej|lunch is now known as amoralej13:05
*** dhill_ has joined #tripleo13:09
moguimarjaosorior, EmilienM: 1) Is using tripleo-docs an option? 2) if it is, can other squads use it too? 3) Can we move bugs away from tripleo-docs when needed?13:09
moguimarI think EmilienM or another person on #storyboard already told me that (1) is possible13:10
*** ooolpbot has joined #tripleo13:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION13:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487013:10
*** ooolpbot has quit IRC13:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)13:10
moguimar(2) should be feasible using tags to identify the squad as mentioned by fungi13:10
jaosoriorEmilienM: right, so, in the Security squad we mentioned the issued we were talking about the other day regarding storyboard. It was discussed that mapping tasks to tripleo-docs might be an option to consider (instead of having a provisional repository for the squad to track tasks)13:12
jaosoriorEmilienM: hence the questions.13:12
fungitasks can be moved from one project (repo) to another13:13
fungiand deleted too if needed (as long as the story is left with at least one remaining task)13:14
jaosoriormoguimar, mwhahaha ^^13:14
moguimarnice13:14
moguimarany prediction on where tripleo-docs is going to be migrated?13:15
moguimarwhen*13:15
*** ksingh2 has quit IRC13:15
florianftosky: I think the basic problem is that ansible creates temp scripts for all tasks (containing whatever is needed for the task, mostly python calls) and runs them as sudo. That's what makes it so tricky to limit commands in a sudoers file.13:17
*** lblanchard has joined #tripleo13:17
*** cshastri has joined #tripleo13:18
*** dhill_ has quit IRC13:19
*** dhill_ has joined #tripleo13:19
*** zoli is now known as zoli|afk13:21
jaosoriormoguimar: no idea :/13:23
*** quique|ruck|food is now known as quiquell|ruck13:24
*** tzumainn has joined #tripleo13:29
openstackgerritAthlan-Guyot sofer proposed openstack/puppet-tripleo master: Make host param for nova/neutron/ceilometer immutable during upgrade  https://review.openstack.org/55573213:29
*** toure|biab is now known as toure13:29
openstackgerritJohn Trowbridge proposed openstack/tripleo-quickstart master: WIP Add ability to provision "dumb" VMs for fake nodepool  https://review.openstack.org/56163013:31
*** itlinux has joined #tripleo13:32
*** trown|brb has joined #tripleo13:35
*** trown has quit IRC13:35
honzaEmilienM: mandre: how can peek into the running tripleo-ui container to see the configuration files?13:39
honzadocker attach doesn't do what i want :)13:39
*** itlinux has quit IRC13:40
mandrehonza: $ docker exec -ti $CONTAINER_ID_OR_NAME /bin/bash13:40
mandreyou'll find more tips at https://docs.openstack.org/tripleo-docs/latest/install/containers_deployment/tips_tricks.html13:41
honzamandre: awesome, thanks!13:41
florianftosky, lhinds: Apparently using ansible's shell module and make that use *another* shell with sh -c might isolate calls from the shell scripts that ansible creates.13:41
florianftosky, lhinds: If you want some further stuff to read: :-)   https://gist.github.com/nanobeep/3b3d614a709086ff832a13:42
florianftosky, lhinds: still not sure if that's a viable way for validations. I'd have to review our current uses of sudo...13:43
EmilienMhonza: you can also browse /var/log/config-data/13:43
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-heat-templates stable/newton: [NEWTON ONLY] Adjust NeutronAllowL3AgentFailover to new default.  https://review.openstack.org/56085513:43
EmilienMjaosorior: migrating tripleo-docs doesn't solve the actual problem, that we want to move squad per squad without repos13:43
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228213:44
EmilienMjaosorior, fungi: I thought we could create a project in storyboard, called "tripleo-common" (not attached to openstack/tripleo-common.git) and migrate the squad per tags13:44
*** trown|brb is now known as trown13:45
EmilienMjaosorior, fungi : so migrate all bugs tagged security into this new project13:45
EmilienMdiablo_rojo_phon: ^13:45
owalshchem: ack, yea, when I pushed that I think I commented about the facts being pretty nasty :-)13:45
*** udesale__ has joined #tripleo13:45
chemowalsh: I made them nastier ... like getting credential from the provider to get the current value13:46
*** psachin has quit IRC13:46
EmilienMmwhahaha: releasing rocky-m1 this morning13:46
mwhahahak13:46
*** nyechiel has joined #tripleo13:46
chemowalsh: was nice, it offers the possibility to get the current real value13:46
owalshchem: that's evil genius territory :-)13:46
chemowalsh: yeah ... a bit too more maybe :)  ... but it's possible if we need it :)13:47
chemowalsh: the last review will prevent any change and is super simple13:47
ccamachohey EmilienM quick question about the XFS ftype, do you think a sort of validation like https://review.openstack.org/#/c/562282/ will make it prune to hit it ?13:48
*** etingof has quit IRC13:48
chemowalsh: basically -> if we're upgrading don't change it13:48
chemowalsh: but it's definitively less fun.13:49
EmilienMccamacho: a validation never hurts, but it affects very old releases, but yeah it's good13:49
openstackgerritJohn Trowbridge proposed openstack/tripleo-quickstart master: WIP Add ability to provision "dumb" VMs for fake nodepool  https://review.openstack.org/56163013:50
ccamachoEmilienM unless you by default run --skip-validations :P13:50
*** assassin has joined #tripleo13:52
*** holser__ has quit IRC13:54
*** holser__ has joined #tripleo13:54
*** itlinux has joined #tripleo13:54
dpeacockEmilienM: Have you tried a current deployment today?13:55
dpeacockEmilienM: also, good morning Sir :-)13:55
openstackgerritBogdan Dobrelya proposed openstack/python-tripleoclient master: Alter default http boot path for containerized Ironic  https://review.openstack.org/55651613:55
EmilienMdpeacock: hey, morning. Not yet.13:56
owalshchem: so during stack update it sets host to $os_service_default13:57
openstackgerritHarry Rybacki proposed openstack/tripleo-quickstart-extras master: WIP: DNM: extra node for OVB stack role  https://review.openstack.org/54236813:57
openstackgerritHarry Rybacki proposed openstack/tripleo-quickstart-extras master: Add ability  to deploy FreeIPA on OVB  https://review.openstack.org/53443513:57
dpeacockEmilienM: unless I'm mistaken, it's still broken - just a heads up13:57
openstackgerritFlorian Fuchs proposed openstack/tripleo-ui master: Improve the deployment confirmation message  https://review.openstack.org/56228713:57
dpeacockEmilienM: same docker registry error13:57
owalshchem: and nova etc... will detect the hostname13:57
EmilienMdpeacock: I managed to redeploy last night13:58
chemowalsh: os_service_default makes it not change the current value, whatever that is13:58
openstackgerritBogdan Dobrelya proposed openstack/python-tripleoclient master: Alter default http boot path for containerized Ironic  https://review.openstack.org/55651613:58
dpeacockEmilienM: I'll recheck my steps in your vagrant setup13:58
chemowalsh: which I think is what we want13:58
chemowalsh: only issue I can think of here is for deployment done in mitaka where this value wasn't explicitely set13:59
mwhahahauh oh build-openstack-sphinx-docs is broken for stable/pike on tripleo-common https://review.openstack.org/#/c/560851/13:59
honzaEmilienM: that dir doesn't exist on my undercloud13:59
chemowalsh: so we still depends on whatever neutron/nova/ceilometer think the default value is14:00
honzaah, /var/lib/config-data14:00
owalshchem: which is what python thinks it is IIRC14:00
EmilienMhonza: sorry yeah /var/lib/config-data/puppet-generated/tripleo-ui/var/www/openstack-tripleo-ui/dist/tripleo_ui_config.js14:00
owalshchem: where there be dragons I think14:00
honzaawesome, just accidentally closed the reproducer screen session :)14:01
owalshchem: https://docs.python.org/2/library/socket.html#socket.gethostname14:01
chemowalsh: yeah, that's the value of socket.gethostname14:01
chemowalsh: but then the only way to get over it (when it's unset) is to get the current real value ... as I did in the previous review14:02
chemowalsh: because gethosname, can return hostname or fqdn depending on system configuration (we can't infer it)14:03
chemowalsh: and we can't infer it because at the upgrade time we have change the system (new rhel version) which may change that value, but it's too late14:03
chemowalsh: do you want to discuss it live ?14:05
*** etingof has joined #tripleo14:07
jaosoriordo we have any test currently that's testing updates?14:08
jaosoriorquiquell|ruck, jistr, EmilienM ^^14:09
openstackgerritAthlan-Guyot sofer proposed openstack/puppet-tripleo master: Make host param for nova/neutron/ceilometer immutable during upgrade  https://review.openstack.org/55573214:09
quiquell|ruckjaosorior: Yep, featureset037 does a keystone only update14:10
*** ooolpbot has joined #tripleo14:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION14:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487014:10
*** ooolpbot has quit IRC14:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)14:10
*** anilvenkata has quit IRC14:10
*** artom has joined #tripleo14:11
itlinuxHello EmillienA: do you have a sec?14:11
quiquell|ruckjaosorior: ob update tripleo-ci-centos-7-scenario000-multinode-oooq-container-updates14:11
jistrjaosorior: minor updates yes there's job on master. Upgrades i think it's not on master t-h-t yet.14:11
jaosoriorquiquell|ruck: Is there plans to do another featureset that also tests updates but tests a more extensive service list?14:11
jaosoriorjistr: was thinking only about updates14:11
jistrcc jfrancoa ^14:11
itlinuxHello EmilienM: do you have a sec sorry spelled the name wrong!14:12
jistrjaosorior: so yes we need to have updates test with more services but i'm not sure how far we are. I haven't been looking into that myself.14:12
quiquell|ruckjaosorior: That's the plan, we are going step by step to check that ci is not broken14:12
rascaEmilienM, mwhahaha, does you guys know who can put a workflow +1 on this one https://review.openstack.org/#/c/556598/?14:12
openstackgerritMarius Cornea proposed openstack/tripleo-upgrade master: WIP: Add FFU converge step  https://review.openstack.org/56199414:12
mwhahahainfra people14:12
chemowalsh: for mitaka to newton upgrade I think we should make a documentation bug, so that the operator set this value explicitely himself ... or I go the get live value in another review14:12
fungiEmilienM: jaosorior: openstack/tripleo-common is already an existing repo, so sure we can certainly point it at storyboard now instead of launchpad if that's the one the security squad wants to set tasks for14:13
jaosoriorquiquell|ruck, jistr: where can I track the progress of that work?14:13
EmilienMrasca: you can ask pabelanger to review14:13
jaosoriorfungi: we were thinking about tripleo-docs14:13
chemowalsh: once that value is set the current patch will always make thing safe14:13
jfrancoajistr: plus also we had the problem of the tags in the updates job, right? we're updating to the same docker tag14:13
quiquell|ruckjaosorior: panda is our UA you can ask him about future plans on updates/upgrades at CI level14:13
jaosoriorfungi: it seems like a safer option since we don't have bugs on launchpad for it, as opposed to tripleo-common14:13
EmilienMfungi: my idea was more to use the name "tripleo-common" for all repos tracked in storyboard, if we could14:13
jaosoriorquiquell|ruck: great, thanks for the pointer14:14
EmilienMfungi: I don't think we want one project per repo in SB14:14
quiquell|ruckjaosorior: You have it man14:14
*** zoli|afk is now known as zoli14:14
EmilienMjaosorior: exactly, it would be great14:14
*** zoli is now known as zoli|wfh14:14
rascapabelanger, hey hi!, if you have time can you have a look on this https://review.openstack.org/#/c/556598/ ? It is the last step I need to have this fully merged14:14
pabelanger+314:14
openstackgerritHamdy Khader proposed openstack/tripleo-heat-templates master: Add environment file for Mellanox SDN  https://review.openstack.org/55050714:15
*** hjensas has quit IRC14:15
owalshchem: sorry... on another chat... catching up...14:15
*** itlinux has quit IRC14:15
jistrjfrancoa, jaosorior: right yes, we don't update images. Even that could help us verify something though. e.g. if config changes in the patch being CI'd, the containers would get at least restarted with the new config14:15
chemowalsh: I'm talking too much anyway :)14:16
*** gkadam has quit IRC14:16
fungiEmilienM: finding a way to not track any of tripleo's repositories in storyboard except for tripelo-common would take a bit of work, and it's not how any other team is using or planning to use sb as far as i'm aware (most teams create separate projects in lp for each of their deliverables too)14:16
openstackgerritSaravanan KR proposed openstack/tripleo-heat-templates master: WIP: Support for config-download to deploy node with kenerl args  https://review.openstack.org/56076714:16
openstackgerritAlex Schultz proposed openstack/tripleo-common stable/pike: Avoid tox_install.sh for constraints support  https://review.openstack.org/56229014:17
fungithe idea of each task having the possibility to be repository-specific allows you to indicate where the work needs to happen14:17
rascapabelanger++++++14:17
openstackgerritAthlan-Guyot sofer proposed openstack/tripleo-upgrade stable/queens: WIP: Add FFU converge step  https://review.openstack.org/56229114:17
openstackgerritAlex Schultz proposed openstack/tripleo-common stable/pike: Use new ceph/daemon tags  https://review.openstack.org/56085114:17
*** lblanchard has quit IRC14:18
openstackgerritHarry Rybacki proposed openstack/tripleo-quickstart-extras master: Add ability  to deploy FreeIPA on OVB  https://review.openstack.org/53443514:18
jaosoriorjistr: so, alee and me are looking into testing out password changes.14:19
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228214:19
fungiEmilienM: if the tripleo team just want to reassign all their tasks to tripleo-common going forward and ignore the storyboard projects for their other deliverables, i suppose that's fine it's just a bit confusing (and we don't have any way for you to actively prevent people from aligning tasks with those other tripleo repos either)14:19
jaosoriorjistr: so, alee is adding the necessary stuff to tripleo-quickstart. And we could test that there.14:19
*** itlinux has joined #tripleo14:19
jaosoriorjistr: would you be the right person to poke about this?14:20
*** rpioso|afk is now known as rpioso14:20
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: Upgrades: Refactor httpd_enabled variable  https://review.openstack.org/55578114:20
openstackgerritLukas Bezdicka proposed openstack/tripleo-heat-templates master: Upgrades: Refactor playbooks to set facts  https://review.openstack.org/56229414:20
jaosoriorjistr: or would that be jfrancoa?14:20
mwhahahafungi: so can we just create a blank tripleo project and import it there? i mean that's what we do in launchpad today14:22
mwhahahafungi: there's no tripleo/ repo but all the bugs are associated as such14:22
jistrjaosorior: i'm having trouble to imagine what kind of changes to quickstart are we talking about... like whehter it's better to ping us from Upgrades/Updates or someone actually from OOOQ14:23
fungimwhahaha: the way we create projects in storyboard is to have a repository associated with it14:24
jaosoriorjistr: probably someone to oooq I guess, since it's a matter of just passing an environment variable with the new passwords14:24
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - Deploy Docker via Ansible and not Puppet  https://review.openstack.org/56137714:24
fungimwhahaha: also the point of storyboard is not to use it just like launchpad. it isn't just like launchpad. it has a different data model14:24
jistrjaosorior: ack. In case you need someone from upgrades re CI, i think we're all swamped but i think it's good to ping jfrancoa / me / chem and somebody will hopefully answer :)14:24
owalshchem: ok... are you sure that mitaka -> newton is an issue?14:25
EmilienMmwhahaha, bogdando : please look https://review.openstack.org/#/c/562003/ super quick14:25
mwhahahafungi: so i think this has been my issue with storyboard is that assumptions are being made that don't align with current use cases and then it's getting forced on us to work around it14:25
*** aufi has quit IRC14:25
chemowalsh: https://bugzilla.redhat.com/show_bug.cgi?id=1499201 .. yes :)14:25
openstackbugzilla.redhat.com bug 1499201 in rhosp-director "OSP9 -> OSP10: workloads created before upgrade are not reachable anymore after rebooting controller nodes" [Urgent,On_dev] - Assigned to sathlang14:25
mwhahahafungi: a bug in tripleo can span multiple projects14:25
mwhahahafungi: and having to manage that in the bug is not something we wish to do14:25
mwhahahafungi: if storyboard cannot do this, i don't think we want storyboard14:25
jfrancoajaosorior: I've been involved quite a lot with integrating the tripleo-role into oooq, so I'll try to help you if it's in my hands14:26
owalshchem: yea, but we are switching to $::fqdn, if we don't change it during a stack update then that should be ok14:26
owalshif socket.gethostname() returns the same in both cases14:26
jfrancoajaosorior: but as jistr mention, you can ping to any of us14:27
jaosoriorthat's good to know14:27
jaosoriorjfrancoa: thanks! We'll poke you in the near future :) still fleshing out some details14:28
aleejfrancoa, fantastic.  we're going through the code right now to try to understand how/where to add password changes14:28
chemowalsh: yeap, I think that that review will close that CI test but then we are open to any change in socket.gethostname return value14:28
jistrjfrancoa++ thanks14:28
aleejfrancoa, because the idea would be to test password changes for the services at the same time14:28
owalshchem: that's just wrapping the glibc gethostname() which just returns nodename from uname(), so it's ultimately the kernel that determines the value14:28
fungimwhahaha: if you don't want to track the individual per-repository tasks in a story you can just pick one to associate it with and ignore which actual repository it is, but doesn't _someone_ need to figure out which repositories are affected before they write the patches to fix something?14:29
mwhahahafungi: not necessarily14:29
*** mcornea has quit IRC14:29
* fungi is surprised that you don't need to know what repositories to patch when you write patches14:29
owalshchem: and it (uname -n) is still the short hostname on my deployment14:30
mwhahahayou assume the location of the issue is known at bug report time14:30
mwhahahawhich is not correct14:30
fungimwhahaha: this is the same in launchpad too. someone reports a bug against nova but it's actually a tripleo bug, then the bugtask is reassigned to the correct project14:30
chemowalsh: yeah, that's what we have been seeing in that bz, short name become fqdn14:30
*** mcornea has joined #tripleo14:30
mwhahahafungi: right but we don't split it out between tripleo-common or tripleo-heat-templates or whatever14:30
fungitasks can be moved to whatever project they actually affect if the reporter guesses incorrectly14:31
mwhahahafungi: it's a level of granularity we have gone away from in this project14:31
owalshchem: so it's really $::fqdn that I was trying to handle... it doesn't always return the fqdn IIRC14:31
fungimwhahaha: you can also just ignore which project the task is reported against if you don't care14:31
owalshchem: but with you're patch I think we can also move away from using $::fqdn14:31
fungithey're all in one common "tripleo" project group14:31
*** SulaimanRadwan has quit IRC14:31
mwhahahafungi: so can we just create the tripleo group in storyboard and stop trying to add more repos14:32
chemowalsh: oki, that means that that patch would be enough to cover us in all cases.14:32
mwhahahafungi: or does that conflict with the import14:32
fungimwhahaha: we would still have all tripleo's repos associated with the tripleo project group, but import the existing bugs to tripleo-common if you want14:32
mwhahahafungi: does that affect the git hooks14:33
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add validation for checking roles against flavors  https://review.openstack.org/56229614:33
*** dbellant has joined #tripleo14:33
fungiwhich would set the initial tasks for each of the stories the import creates to be associated with tripleo-common (which is in the tripleo project group)14:33
chemowalsh: do you mean you also want to make a review that change the default ?14:33
fungimwhahaha: not sure what git hooks you're talking about. do you mean gerrit integration?14:34
mwhahahafungi: yea for Closes-Bug equivalent14:34
owalshchem: already have https://review.openstack.org/555278, I'll just need to roll back to an earlier patchset14:34
mwhahahaStory: or whatever it is14:34
fungimwhahaha: i'm pretty sure the gerrit plugin doesn't care whether the task is aligned with the repository for the change whose commit message mentions a task or story number, but i haven't explicitly tested that scenario. i'll do that real quick14:35
chemowalsh: but with that do not touch the host parameter review that wouldn't be necessary anymore, no ?14:36
owalshchem: we need the nova host to match /etc/host though...14:36
*** dbellant has quit IRC14:37
*** dbellant has joined #tripleo14:37
owalshchem: so I think we should land that to ensure any deployment going forward is using the correct value14:37
mwhahahafungi: historically it used to care in launchpad which is why i asked14:37
fungimwhahaha: yep, we did that so we didn't anger other projects outside our community if someone mistyped a bug number14:38
*** hamdyk has quit IRC14:39
fungimwhahaha: https://storyboard-dev.openstack.org/#!/story/1760532 is a working example. i moved task 6578 from gtest-org/test to openstack/release-test and then abandoned and restored a change which mentioned that task and story and gerrit continued to update the task status and comment on the story, so should work just like you're asking14:40
owalshchem: damn... yea... we do need the nova host to be correct for live migration (ssh) to work14:41
mwhahahafungi: does owner not get updated?14:41
*** dbellant has quit IRC14:41
chemowalsh: correct meaning ?14:41
openstackgerritBogdan Dobrelya proposed openstack/tripleo-heat-templates master: Add dry-run mode for process templates  https://review.openstack.org/56229914:41
*** dbellant has joined #tripleo14:42
fungimwhahaha: talking about the task assignee? i still need to look into that. it's either something we've missed configuring for the plugin or it's slated for a new version of the plugin14:42
mwhahahayea14:42
mwhahahaok14:42
chemowalsh: the "real" fqdn ?14:42
mwhahahaso i'd rather that we just assign it all to tripleo-common and call it good14:43
shardyhonza: Hey, any progress on getting -9 for openstack-tripleo-ui-deps?14:43
shardyhonza: or is there any workaround I can use to enable dlrn rebuilding the ui packages?14:43
mwhahahafungi: if we have specific repos for teams they can use it, but in generall tripleo-common should be fine14:43
honzashardy: not yet, let me poke people again --- sorry14:44
fungimwhahaha: yeah, we can import the bugs to whichever storyboard project or projects you like, so openstack/tripleo-common is easy enough to do there14:44
shardyhonza: do you have a spec for the new deps package, e.g can I just build it locally?14:45
honzashardy: https://review.rdoproject.org/r/#/c/13364/14:46
EmilienMdpeacock: I'm trying again now14:46
honzashardy: the -deps spec is here https://github.com/rdo-common/openstack-tripleo-ui-deps/blob/rocky-rdo/openstack-tripleo-ui-deps.spec14:46
shardyhonza: I mean how can I build the deps package which that references14:46
shardyhonza: ack thanks14:46
honzashardy: it's been built in cbs if that is useful14:46
shardyhonza: Ok, I'll see if I can work out how to make that available to mock14:47
honzashardy: i think it's just a matter of syncing the rpm to the repo site14:47
honzashardy: what exactly is it blocking?14:47
dpeacockEmilienM: still broken for me14:47
shardyhonza: I need to run a pre-release UI with some patches applied14:47
owalshchem: correct == what we write in the /etc/hosts entry...14:48
owalshchem: but we write both the short hostname and fqdn, so unless $::fqdn returned something different on the initial deployment we should be ok14:48
*** dbellant_ has joined #tripleo14:50
chemowalsh: I see, so we are not insulated from any wrong change in fqdn, as we will take it into account for /etc/hosts but not in nova.conf/host conf14:50
*** dbellant_ has quit IRC14:50
chemowalsh: to recap, if deploy was done before newton, then we're ok, the short name should always work14:51
*** dbellant has quit IRC14:51
chemowalsh: (but I've seen osp9 deployment with fqdn for the agent ... so previous stuff is irrelevant ... noise014:51
chem)14:51
*** dbellant has joined #tripleo14:51
owalshchem: really? damn14:52
*** dbellant has quit IRC14:52
chemowalsh: yeah, client side I've asked for the output and had fqdn14:52
bogdandofolks, how tht j2 files rendered for overcloud deploy?14:52
*** dbellant has joined #tripleo14:52
*** dbellant has quit IRC14:53
*** dbellant has joined #tripleo14:53
bogdandoI can see the process-templates tool is only used for undercloud_deploy heat installer14:53
openstackgerritDougal Matthews proposed openstack/tripleo-common master: Fix the passlib deprecation warning  https://review.openstack.org/56225114:53
bogdandoshardy: ^^ here perchance?14:53
shardybogdando: there's a mistral action that does the same as process-templates:14:54
openstackgerritArx Cruz proposed openstack/tripleo-quickstart-extras master: Fixing tempest containerized script  https://review.openstack.org/56215514:54
shardybogdando: https://github.com/openstack/tripleo-common/blob/master/tripleo_common/actions/templates.py#L12314:55
bogdandoshardy: do you think I can use the latter tool for validations? trying to make https://review.openstack.org/#/c/561192/ aware of which files are normally rendered from j214:55
shardybogdando: can you just look for the corresponding j2.yaml file?14:56
bogdandowhat do you mean?14:56
shardyif the file exists in the plan, the file will be j2 rendered14:56
owalshchem: I *might* be able to address the nova live migration issue so that we don't care what it's set to14:57
*** abishop has joined #tripleo14:57
bogdandoI thought the end files it produces need to be verified for non matching templates vs -e paths?14:57
shardybogdando: you could strip the dirname and error (or at least warn) if someone passes a -e foo.yaml where a corresponding foo.j2.yaml exists in the plan14:57
bogdandonot the *source* j2 files those would come off14:57
d0ugalrbrady,d0ugal,apetrich,thrash,toure,jtomasek: Workflow Squad meeting in 2.5 mins. https://etherpad.openstack.org/p/tripleo-workflows-squad-status14:57
bogdandofrom14:57
shardybogdando: yes, I'm just saying you could do a path comparison to figure that out14:57
apetrichd0ugal, is that metric 2.5 minutes or 2m 50s ?14:58
*** dxiri has quit IRC14:58
shardybogdando: also when deploying the client downloads all the rendered files14:58
chemowalsh: that would be cool to insulate the migration from this mess14:58
apetrichI don't want to be 20 seconds late14:58
d0ugalapetrich: well, neither is correct now.14:58
d0ugalapetrich: so you are in trouble14:58
*** abishop has quit IRC14:58
shardyso you can look in the tmpdir for a file that matches the -e path14:58
apetrichdang14:58
d0ugalapetrich: best risk being early14:58
*** ramishra_ has quit IRC14:59
bogdandoshardy: thanks!15:00
*** rajinir has joined #tripleo15:00
shardybogdando: np, thanks for picking up the bugfix :)15:00
*** ramishra has joined #tripleo15:01
owalshchem: as it happens I was looking at it today... assuming it works...15:02
openstackgerritLukas Bezdicka proposed openstack/tripleo-common stable/queens: Add custom subclass to revert mapping  https://review.openstack.org/56230715:02
bogdandoshardy: hm, _upload_missing_files would upload any -e files passed in, right?15:04
chemowalsh: so now that I've seen python.gethostname returing sometime the fqdn and sometime the hostname I think we need to make sure the host value is set during m->newton upgrade15:05
bogdandonot sure I wouldn't create the chicken and egg problem here, relying on _download_missing_files_from_plan15:05
chemowalsh: so maybe a newton only review for that that get the current value and write them down15:05
owalshchem: I wonder if gethostname still returns the same after the upgrade to newton15:05
shardybogdando: Hmm, yeah it may be an ordering problem, probably best to s/.yaml/.j2.yaml then look at the non-rendered --templates dir?15:05
bogdandothe thing is that  https://pastebin.com/kdFV3Ztu15:06
bogdandothe mappings are one to many15:06
chemowalsh: I think that depends on the rhel version, 7.5 seems to always returns short name, but some previous rhel seems to have return the fqdn15:06
*** cgoncalves_ has quit IRC15:08
shardyAnyone know how to tell dlrn to use an additional repo for BuildRequires that mock installs?15:08
shardyI only see one baseurl option in the config15:08
bogdandoshardy: am I right that for the given example, it shall search for mismatching ./network/ports/internal_api_v6.yaml et all and NOT ./network/ports/port_v6.network.j2.yaml passed in via -e?15:08
*** agurenko has quit IRC15:08
owalshchem: ok, I guess either way we need whatever it is to be written to the conf files15:09
bogdandoor should it accept the former and fail for latter?..15:09
* bogdando sigh15:09
*** cshastri has quit IRC15:09
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228215:09
shardybogdando: for -e /tmp/foo/network/ports/internal_api_v6.yaml you could match the last part of the string, and warn if you find $templates_dir/network/ports/internal_api_v6.j2.yaml15:10
*** ooolpbot has joined #tripleo15:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION15:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487015:10
*** ooolpbot has quit IRC15:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)15:10
shardybogdando: j2.yaml files aren't accepted for -e options IIRC, you get an error15:10
openstackgerritAlex Schultz proposed openstack/tripleo-common stable/ocata: Avoid tox_install.sh for constraints support  https://review.openstack.org/56230915:10
shardyso you should always get a path to the rendered file15:10
shardybut you can then check if the template exists15:10
shardyand warn if the directory path doesn't match --templates15:10
chemowalsh: ? well in mitaka there is no value written in that file, and then we don't really know what to do15:11
bogdandoshardy: my plan was just run the tool in dry run and verify all -es' paths against the produced list :)15:11
chemowalsh: for later version it's easy, it's just that mitaka->newtow that's hard15:11
bogdandolooks simple but...15:11
bogdandoat least that is the option for undercloud heat checks15:11
shardybogdando: my point is you don't need to run the tool, because you know the name of the expected template15:12
bogdandonot really :)15:12
chemowalsh: so maybe I calculate the live value and writes it to the conf during m15:12
bogdandodepends on the composable networks names for the example above15:12
owalshchem: yea, it might be hacky and evil but I think it's necessary15:12
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add validation for checking baremetal boot images  https://review.openstack.org/55532515:12
owalshchem: then https://review.openstack.org/555732 so we never change the value15:12
chemowalsh: yeap15:13
shardybogdando: the content depends on that, but do any environment filenames?15:13
chemowalsh: and at least we do the evil stuff only for newton15:13
owalshchem: and https://review.openstack.org/555278 so it's definitely correct when we initially create it15:13
chemowalsh: right15:13
chemowalsh: sounds like a plan :)15:13
bogdandoshardy: yeah, it is, see https://pastebin.com/kdFV3Ztu15:13
shardybogdando: if so then yeah I guess you're right15:13
owalshchem: and another patch so that live migration doesn't rely on the host param15:14
chemowalsh: hehe15:14
shardybogdando: those are the referenced templates, not the -e file?15:14
chemowalsh: easy15:14
chemowalsh: clear and concise :)15:14
bogdandowe never can tell that users pass via -e15:14
bogdandothus we need that check basically15:14
chemowalsh: doing the evil stuff for newton now ... I want to put that behind me asap and never think about hostname anymore15:14
bogdandoor how can we know?15:14
shardybogdando: we can see if a user passes a -e file where the path looks like it should be referencing the plan15:15
shardyit's not perfect but it should catch most user mistakes15:15
owalshchem: ack, this has been annoying me for far too long :-)15:15
bogdandoI better off run the tool ... :D15:15
shardybogdando: Ok your choice, I'm not sure I understand why though15:15
chemowalsh: for live migration, just making sure that you resolve the short name should be enough maybe ?15:15
bogdandoI think the otherwise is too fragile15:16
bogdandothe question is if we can expect the tool produces the same as the workflow...15:16
bogdandofor overcloud ofc15:16
*** yprokule has quit IRC15:17
*** ykarel has quit IRC15:17
bogdandohm, shall we switch the workflow to use the tool?15:17
*** ramishra has quit IRC15:17
weshaymwhahaha, EmilienM you guys have the build you want for ml1 right?15:17
*** quiquell|ruck is now known as quiquell|off15:17
weshaydiscussing an outtage window for rdo-cloud15:17
owalshchem: need to resolve whatever host is set to IIRC, but I think I can get it to use the IP15:18
chemowalsh: just one last comment, for ceilometer I don't think I have a nice way to get the host parameter (no agent-list command or similar)15:18
chemowalsh: so either I just ignore ceilometer altogether (I don't have currently any issue with it)15:18
mwhahahaweshay: not sure which hashes we're using, i'd assume we already have some build but not sure if promoted yet15:18
mwhahahaweshay: though tomorrow might be fine if we get promotions today15:18
chemowalsh: or I take the one I get from nova or neutron (which should be the same)15:18
*** ramishra has joined #tripleo15:19
weshayya.. so atm you guys are at b23b33707ba4f4bd0682e58be30e1d16c6232992_d032039d15:19
owalshchem: yea, was about to say that...15:20
mwhahahaweshay: would need to check the hashes from https://review.openstack.org/#/c/561655/15:21
chemowalsh: getting the nova one is the easiest as I can run the nova-manage service-list on newton (no auth, only root)15:21
chemowalsh: neutron need auth (but it's doable)15:21
chemowalsh: ceiloment ?15:21
chemowalsh: so maybe I just take one of them (nova) and assume it's the same everywhere15:22
chemowalsh: which should be true15:22
EmilienMI'm seeing new gate issue, with instack-undercloud thistime15:23
EmilienM2018-04-18 15:15:36 | 2018-04-18 15:15:36,697 INFO: /tmp/tmpvjTLiX/pre-install.d/05-rpm-epel-release: line 9: DISTRO_NAME: unbound variable15:23
*** skramaja has quit IRC15:23
EmilienMhttp://logs.openstack.org/77/561377/27/check/tripleo-ci-centos-7-containers-multinode/88803c3/logs/undercloud/home/zuul/undercloud_install.log.txt.gz#_2018-04-18_15_15_3615:23
EmilienMlooks like DIB related15:23
EmilienMyeah https://review.openstack.org/#/c/561479/15:24
EmilienMyolanda, pabelanger : can you help? you folks merged this one15:25
owalshchem: yea, assuming there is a nova service on every host...15:25
chemowalsh: ah ... crap15:25
chemowalsh: so auth it is15:25
bogdandoshardy: by env file vs template reference, do you mean only the env file would contain a resource_registry?15:25
chemowalsh: it's doable for nova as well15:26
bogdandothat was my initial implementation, didn't went well15:26
chemowalsh: that just let me with ceilometer15:26
chemowalsh: do we care about ceilometer host parameter ?15:26
EmilienMpanda|rover: you might be interested by this new gate issue ^15:27
*** tosky has quit IRC15:27
yolandaEmilienM, shall i revert it?15:28
owalshchem: may need to check with pradk but I don't think it's a major issue...15:28
EmilienMyolanda: why does it fail?15:29
chemowalsh: oki, I focus on neutron and nova for now then15:29
pabelangerit is because pip-and-virtualenv is pulling in EPEL now15:29
yolandait seems to miss DISTRO_NAME env var15:29
*** tosky has joined #tripleo15:29
EmilienMpabelanger, yolanda: why don't we run tripleo jobs in DIB?15:29
*** leanderthal has joined #tripleo15:29
owalshchem: TBH for nova it's not a major issue either AFAIK. Get orphaned services listed as down but I don't think it breaks anything15:29
pabelangerand for some reason DISTRO_NAME isn't setup in the elements15:29
EmilienMpabelanger: unless you have a quick fix, I'll revert the patch15:29
pabelangerthis is all to fix pip1015:29
chemowalsh: nope it doesn't, we just have a bunch dead agent15:29
openstackgerritArx Cruz proposed openstack/tripleo-quickstart-extras master: Fixing stackviz generation  https://review.openstack.org/56231615:30
pabelangerwell, we should roll forward here. We need to see why DISTRO_NAME isn't set15:30
chemowalsh: neutron is the real show stopper15:30
pabelangerthat would be used for all elements15:30
*** ksingh1 has joined #tripleo15:30
pabelangerbut not sure why tripleo is missing it15:30
yolandai got feedback that gate was broken anyway due to pip 1015:30
pabelangerright15:30
EmilienMnot in tripleo AFIK15:30
yolandaand that the patch should fix the issue. EmilienM , how difficult for you is to export that var?15:30
EmilienMhttp://tripleo.org/cistatus.html it's pretty green15:30
pabelangerEmilienM: because images are pinned to pip915:30
pabelangerwe can't built a new image for centos-7 in a few days15:31
*** itlinux has quit IRC15:31
chemowalsh: so ... do you think I should do the evil stuff only for neutron then ?15:31
pabelangerI am looking at logs now15:32
arxcruzEmilienM: i didn't use file module, because it takes a long time to execute recursively15:33
EmilienMcan we stop breaking things during a release week15:33
arxcruzEmilienM: https://groups.google.com/forum/#!topic/ansible-project/2O5u8GIZ5Rw15:33
pabelangerEmilienM: things are already broken, we are trying to fix pip1015:33
chemowalsh: pushing a review we discuss in there15:33
EmilienMpabelanger: they weren't broken for us until image was bumped15:33
pabelangerhttp://paste.openstack.org/raw/719487/15:33
*** mcornea has quit IRC15:34
pabelangerEmilienM: as I said, this is because we cannot build the latest centos-7 images, because of pip10, so your jobs are still all using pip915:34
EmilienMpabelanger: can we stop bumping untested images?15:34
EmilienMyeah I get it but we don't want pep10 in our image this week, we're releasing a first milestone15:34
pabelangerwe do test them, there is a large amount of testing going into it, just in this case something was missed15:34
*** mcornea_ has joined #tripleo15:34
*** mcornea_ has quit IRC15:35
EmilienMpabelanger: do we run tripleo jobs?15:35
pabelangerin the pastebin, I can see the issue, none of the elements listen will setup the DISTRO_NAME element15:35
*** mcornea_ has joined #tripleo15:35
EmilienMpabelanger: can we set it in zuul layout in tripleo-ci?15:35
pabelangerhttps://review.openstack.org/#/c/561479/1015:35
EmilienMarxcruz: ok, fine.15:35
pabelangerthat lists the jobs we ran15:36
arxcruzEmilienM: but it's up to you, i don't mind :)15:36
EmilienMpabelanger: it's missing tripleo15:36
*** bogdando has quit IRC15:36
pabelangerI see build overcloud image15:36
EmilienMpabelanger: https://review.openstack.org/#/c/561479/10/diskimage_builder/elements/pip-and-virtualenv/install.d/pip-and-virtualenv-source-install/04-install-pip so we'll have epel deployed by default?15:36
*** avivgt has joined #tripleo15:37
EmilienMpabelanger: it's not a functional testing job that makes a full deployment, I think15:37
pabelangerEmilienM: we install, then disable epel, to get python2-pip, to ensure pip10 works15:38
EmilienMpabelanger: so we need to "export DISTRO_NAME=centos7" somewhere?15:38
pabelangerEmilienM: yes, trying to see which of your elements to do that in15:39
pabelangeror why you are not using the centos element15:39
EmilienMmaybe in tripleo-puppet-elements15:39
chemowalsh: I think ceilometer shouldn't be included15:40
weshayEmilienM, chem should we consider making  tripleo-ci-centos-7-scenario000-multinode-oooq-container-updates voting?15:41
*** yamahata has quit IRC15:42
EmilienMweshay: I have no idea, I haven't taken time yet to look at this job and what's it's doing exactly, tbh15:42
weshayEmilienM, k.. I can speak to it when you free up15:42
chemweshay: EmilienM i think it doesn't yet update the container image, but all the rest is meaningful, jistr would know more15:42
*** ramishra has quit IRC15:43
weshayya.. replaces old containers w/ the same new containers.. it's a no-op in that regard but has value in keeping out breaking changes from tu and tqe15:43
pabelangerEmilienM: can you link a working jobs for containers-multinode15:43
EmilienMpabelanger: http://logs.openstack.org/94/554594/5/check/tripleo-ci-centos-7-containers-multinode/7938102/15:43
chemweshay: EmilienM so I would be in favor of it, but would like to have jistr (maybe jfrancoa) confirm15:44
*** EmilienM changes topic to "Welcome to Rocky. CI status RED (pep10 /DIB issue, in progress) | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest"15:44
weshaypanda|rover, need your assistance please15:45
*** ykarel has joined #tripleo15:45
pabelangerExcluding element pip-and-virtualenv15:45
jankishardy, hey15:45
*** dprince has quit IRC15:45
pabelangerEmilienM: I think you need to exclude epel in your DIB command15:45
panda|roverweshay: with what ?15:45
weshay05-rpm-epel-release: line 9: DISTRO_NAME: unbound variable15:46
pabelangerbecause you are not running pip-and-virtualenv from what I see15:46
weshaypanda|rover, http://zuul.openstack.org/15:46
pabelangerdoes that sound right, you manually setup excludes for DIB command?15:46
panda|roverweshay: that error is what pabelanger and EmilienM are discussing at the moment15:46
shardyjanki: Hi15:46
weshayaye15:46
weshaylooks like it15:47
pabelangerhttp://git.openstack.org/cgit/openstack/instack/tree/instack/runner.py#n16915:47
pabelangerwhere do you setup that?15:47
jankishardy, I used upload-artifact to make few puppet changes. How to reverse it now?15:47
*** holser__ has quit IRC15:47
*** holser__ has joined #tripleo15:48
pabelangerEmilienM: weshay: panda|rover: Where does instack ElementRunner get called from? you'll need to black list epel now15:48
pabelangerthat is the fix15:48
owalshchem: yea, still not sure about nova...15:49
EmilienMpabelanger: here? https://git.openstack.org/cgit/openstack/instack/tree/instack/main.py#n16815:49
jfrancoaEmilienM: chem: is the job  tripleo-ci-centos-7-scenario000-multinode-oooq-container-updates suposed to do any update/upgrade? because I can't see it anywhere...15:49
jankishardy, I want to delete a specific artifact from overcloud15:49
panda|roverI thought we blacklisted epel everywhere already15:50
pabelangerEmilienM: yes, something calls --blacklist, need to find what and add epel, since that is now a dependency of pip-and-virtualenv15:50
weshayhttp://git.openstack.org/cgit/openstack/instack/tree/instack/main.py#n170 ?15:50
weshayor 16815:50
jfrancoaEmilienM: sorry, wrong job..15:50
owalshchem: I'm thinking maybe we should just force the correct value for nova and ceilo. It should ensure we don't have any migration issues due to badly configured DNS records15:50
weshaypabelanger, is that what you are looking for?15:51
chemEmilienM: will look15:51
chemowalsh: hum ... not a bad idea15:51
shardyjanki: if it's puppet modules it may be enough to delete the directory from /etc/puppet/modules and reinstate the symlink to the original packaged module15:51
owalshchem: and15:51
shardyjanki: there's no automated way to do it, you'll have to fix that up manually or redeploy15:51
*** udesale__ has quit IRC15:52
owalshchem: oops... /me is bouncing between too many IRC conversations :-)15:52
pabelangeropenstack undercloud install where is that?15:52
jankishardy, its puppet-tripleo. redeploy undercloud you mean?15:52
EmilienMpabelanger: tripleoclient...15:52
pabelangerty15:53
shardyjanki: No, the overcloud15:53
jankishardy, What I did is - reversed the changes from puppet-modules folder and reuploaded the artifact. you think that should do the trick?15:53
shardyjanki: yes should do15:53
jistrweshay, EmilienM, chem, jfrancoa: re updates it doesn't test image change presently, but should test everything else (tqe/tu/tht). Even though it uses same images, paunch can still e.g. restart it with new config applied.15:53
jankishardy, cool. Its running now. lets see how it goes.15:54
jankishardy, thanks :)15:54
weshayjistr, ya.. I'm thinking it should gate, tq,tqe,tu15:54
weshayto start15:54
jistrre making it voting, i think that could use more thought, as there are some changes that don't really need to pass a minor update job, if we're sure that they get delivered to the user via a major upgrade, and they *do* pass a major upgrade job15:54
*** ffiore has quit IRC15:54
*** links has quit IRC15:55
jistrperhaps a minor update job should be voting on stable branch but non-voting on master15:55
weshayjistr, sure.. I'm looking for incremental changes to get us in a more defensive position w/ regards to changes in ci15:55
weshaydefensable15:55
EmilienMjistr: yes ++15:55
EmilienMlike we did in ocata, back in time where we had a voting upgrade job15:55
chemowalsh: don't have fqdn_canonical in newton :)15:57
*** agopi has joined #tripleo15:57
weshayjistr, help me understand why that is not valuable for master15:57
chemowalsh: adding it :)15:57
openstackgerritMerged openstack/tripleo-heat-templates stable/pike: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154615:57
jankishardy, it failed. with error Failed running docker-puppet.py for nova Notice: hiera(): Cannot load backend module_data: cannot load such file -- hiera/backend/module_data_backend for nova and haproxy15:57
openstackgerritMerged openstack/tripleo-upgrade master: Fix newline stripping in upgrade template.  https://review.openstack.org/56164215:57
*** dparkes has quit IRC15:57
*** itlinux has joined #tripleo15:58
shardyjanki: I don't think that's the actual error15:58
jankishardy, how to debug this?15:59
shardyjanki: I'd look in the logs on the node for the actual puppet error, and see if openstack stack failures list --long gives it15:59
*** lblanchard has joined #tripleo16:00
openstackgerritPaul Belanger proposed openstack/instack-undercloud master: Exclude epel element for diskimage-builder  https://review.openstack.org/56232516:00
shardyjanki: and/or redeploy the overcloud without the customizations and make incremental changes from there16:00
pabelangerEmilienM: weshay: ^should be the fix16:00
pabelangermight be better to flip that logic and whitelist what you want16:00
*** dprince has joined #tripleo16:00
*** ubijtsa has joined #tripleo16:00
jankishardy, wont redeploying take the upload artifact ?16:01
jistrweshay: it is legitimate to sometimes merge a change into master which doesn't pass an update job (from merged to proposed state), as long as upgrade job passes, and update job will still passes *after* merging that change. Update job is funny in the sense that merging a patch with red update job doesn't guarantee the job will go red on everything. The merged patch becomes the new "initial state" from that16:01
jistrpoint onwards. We don't guarantee that minor updates have to work from one master to another master, and trying to do that could prevent us from landing changes where the migration is only meant to be handled during major upgrade.16:01
EmilienMpabelanger: what about json-files/rhel-7-undercloud-packages.json ?16:01
pabelangerEmilienM: likely see the same failure on rhel7, wasn't sure if  that needed updated too16:02
pabelangerI can if you want16:02
shardyjanki: yes you may want to remove it from ~/.tripleo/environments/16:02
*** assassin has quit IRC16:02
EmilienMpabelanger: I don't think we want epel on rhel7 builds when deploying openstack16:03
jistrweshay: like jaosorior's TLS-by-default change. We'd never deliver that via a minor update, so we don't really have to care whether *minor* update from old to new state works on that patch. What we need to care about is whether *major* upgrade works on that, as that's how we'll ship it to users.16:03
openstackgerritPaul Belanger proposed openstack/instack-undercloud master: Exclude epel element for diskimage-builder  https://review.openstack.org/56232516:03
pabelangerEmilienM: updated16:03
EmilienMpabelanger: thanks for your help16:04
weshayjistr, ya.. agree but that may not be able to run in a gate ever due to the time it takes16:04
openstackgerritHarry Rybacki proposed openstack-infra/tripleo-ci master: DNM: Enable verbose output from toci_quickstart  https://review.openstack.org/56232716:04
owalshchem: might have it downstream... sounds familiar...16:04
weshayjistr, I think it's some amount of protection for tq/tqe/tu where tu has *nothing* gating atm16:04
jankishardy, trying that16:05
weshayjistr, also we could build on that job w/ a keystone only major upgrade16:05
pabelangerEmilienM: I'd expect more fall out once we build a new image with pip1016:05
weshayand see what the run time is there... and if that works it could gate tq/tqe/tu and other repos as well16:05
*** jfrancoa has quit IRC16:06
*** slaweq has quit IRC16:07
*** jpich has quit IRC16:07
*** assassin has joined #tripleo16:07
openstackgerritEmilien Macchi proposed openstack/diskimage-builder master: Run tripleo-ci-centos-7-nonha-multinode-oooq as voting  https://review.openstack.org/56232816:07
EmilienMpabelanger, weshay ^16:07
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add ironic boot configuration validation  https://review.openstack.org/56233016:07
*** slaweq has joined #tripleo16:07
weshayI'm always going to vote +1/+2 to more gates :)16:08
*** owalsh is now known as owalsh_afk16:08
jistrweshay: right, it would actually make sense for tq/tqe/tu as voting. I think how we gate those is entirely different. For gating minor update on t-h-t we'd want from-to, that is make the zuul repo present only for updating, not for deploying. But for tq/tqe/tu we should checkout the tested patch at the very beginning of the job, and run the whole procedure with it. In that case it makes sense to have it16:08
jistrvoting.16:08
weshayjistr, ya.. I'm trying to deliniate the conversation from an all purpose gate to one that gates ci bugs16:09
*** ubijtsa has quit IRC16:09
weshayjistr, no gates https://review.openstack.org/#/c/561642/16:10
weshayonly linters16:10
*** ooolpbot has joined #tripleo16:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION16:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487016:10
*** ooolpbot has quit IRC16:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)16:10
jistrweshay: just one issue, we could break something in t-h-t and then voting jobs would go red on tq/tqe/tu16:10
*** sri_ has quit IRC16:10
weshayjistr, at least that would be an *all stop* for the ci/upgrades team to go fix it immediately16:10
*** leanderthal has quit IRC16:11
jistrweshay: yea right. We should never have that state in repo. Broken updates should be treated like broken deployment and fixed immediately. We'd need at least a -nv job on all-things-tripleo to spot the breakages early and/or identify what to revert.16:12
*** slaweq has quit IRC16:13
weshayok... so -nv on non-ci repos, voting on ci16:13
jistrweshay: otherwise ci/upgrades could spend all their work time chasing breakage that was introduced by $ANY_DFG16:13
openstackgerritDoug Hellmann proposed openstack/python-tripleoclient master: add lower-constraints job  https://review.openstack.org/55619516:13
jistrweshay: +1 i think that could work16:14
weshayjistr, does that sum up what you are say? <weshay> ok... so -nv on non-ci repos, voting on ci16:14
weshayk k16:14
weshayjistr, I'll get that going today16:14
jistrweshay: thanks16:14
weshaytrown, rlandy panda|rover fyi ^16:14
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228216:14
mwhahahaweshay: where's the bug for the dib stuff?16:15
mwhahahaor panda|rover -^16:15
mwhahahai think it's time to stop pulling dib from current16:15
chemowalsh: so should we backport https://review.openstack.org/#/c/555319/1 to newton as well ?16:15
mwhahahasince we don't commit to it anymore16:15
*** florianf has quit IRC16:16
trownmwhahaha: weshay panda|rover ... is the dib bug something with "unbound variable"?16:16
*** yamahata has joined #tripleo16:17
panda|rovertrown: yes16:17
mwhahahatrown: yes16:17
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228216:17
pabelangerhttps://review.openstack.org/562325/ should be the fix for unbound variable, but also agree you might want to just use the released version of DIB16:17
jankishardy, stackd delete failed Resource DELETE failed: resources.ControllerServiceChain: Resource DELETE failed: resources.ServiceChain: Stack DELETE cancelled. I think I tried to redeployed while it was still deleting. what to do now?16:17
trownugh... was trying to figure out why what I did last night does not work this morning... thought I must have missed some step16:17
trownpanda|rover: mwhahaha thanks16:17
pabelangerit would still break when a new tag happens, but you can better control that with pins16:17
*** dxiri has joined #tripleo16:18
mwhahahapabelanger: yea we should just use the normal promotion process for it now16:18
pabelangermwhahaha: +116:18
* mwhahaha wants to reference a bug16:18
trownwill https://review.openstack.org/#/c/562325/ fix multinode?16:19
weshaymwhahaha, sec, I'll open one unless panda|rover is doing it16:19
*** mcornea_ has quit IRC16:19
mwhahahatrown: yea or we can fix in oooq by not excluding diskimage-builder16:19
* mwhahaha is preparing a patch16:19
shardyjanki: delete it and wait for it to delete, then try again16:20
jankishardy, not getting deleted. the same state. 1 tried multiple times16:20
openstackgerritAlex Schultz proposed openstack/tripleo-quickstart master: Use promotion process for diskimage-builder  https://review.openstack.org/56233316:21
mwhahahatrown, panda|rover, weshay -^16:21
mwhahahalet me know the bug an i can also add it16:21
panda|roverweshay: opening now16:21
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228216:22
weshaymwhahaha, panda|rover https://bugs.launchpad.net/tripleo/+bug/176512316:22
openstackLaunchpad bug 1765123 in tripleo "dib-run-parts fails with /tmp/tmpkGJoNl/pre-install.d/05-rpm-epel-release: line 9: DISTRO_NAME: unbound variable" [Critical,Triaged]16:22
*** fmount9 has quit IRC16:22
openstackgerritAlex Schultz proposed openstack/tripleo-quickstart master: Use promotion process for diskimage-builder  https://review.openstack.org/56233316:23
panda|rover...16:23
panda|roverok duplicated mine16:24
openstackgerritJohn Trowbridge proposed openstack/tripleo-quickstart master: WIP Add ability to provision "dumb" VMs for fake nodepool  https://review.openstack.org/56163016:24
openstackgerritAlex Schultz proposed openstack/tripleo-repos master: Use promotion process for diskimage-builder  https://review.openstack.org/56233416:25
weshaygood call mwhahaha16:26
*** shardy has left #tripleo16:26
openstackgerritHarry Rybacki proposed openstack-infra/tripleo-ci master: DNM: Enable verbose output from toci_quickstart  https://review.openstack.org/56232716:27
*** suuuper has quit IRC16:29
*** kopecmartin has quit IRC16:30
*** lucasagomes is now known as lucas-afk16:35
*** karthiks has quit IRC16:35
*** panda|rover is now known as panda|rover|off16:36
EmilienMslagle: I could accidentally reproduce the issue you're fixing in https://review.openstack.org/#/c/558896/, see http://logs.openstack.org/77/561377/27/check/tripleo-ci-centos-7-undercloud-containers/cf7ad0e/logs/undercloud/home/zuul/undercloud_install.log.txt.gz#_2018-04-18_15_13_5016:39
EmilienMslagle: so, nice fix ;-)16:39
EmilienMslagle: (caused by bad cause in my experimentation: https://review.openstack.org/#/c/561377)16:40
*** hjensas has joined #tripleo16:41
*** hjensas has quit IRC16:41
*** hjensas has joined #tripleo16:41
*** anilvenkata has joined #tripleo16:44
slagleword16:50
openstackgerritwes hayutin proposed openstack/tripleo-quickstart master: WIP Add ability to provision "dumb" VMs for fake nodepool  https://review.openstack.org/56163016:54
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - Deploy Docker via Ansible and not Puppet  https://review.openstack.org/56137716:54
*** pdeore has joined #tripleo16:55
openstackgerritHarry Rybacki proposed openstack-infra/tripleo-ci master: DNM: Enable verbose output from toci_quickstart  https://review.openstack.org/56232716:57
openstackgerritMerged openstack/tripleo-heat-templates stable/pike: Add validation task in docker services [Mixed-1]  https://review.openstack.org/51662716:57
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add ironic boot configuration validation  https://review.openstack.org/56233016:59
*** derekh has quit IRC17:00
*** dbellant has quit IRC17:02
*** psahoo has quit IRC17:04
openstackgerritwes hayutin proposed openstack-infra/tripleo-ci master: add an update non-voting job to mimimal check  https://review.openstack.org/56234717:04
*** pdeore has quit IRC17:05
*** amoralej is now known as amoralej|off17:07
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add ironic boot configuration validation  https://review.openstack.org/56233017:08
openstackgerritMerged openstack/tripleo-repos master: Use promotion process for diskimage-builder  https://review.openstack.org/56233417:09
*** ooolpbot has joined #tripleo17:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION17:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487017:10
*** ooolpbot has quit IRC17:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)17:10
*** pkovar has quit IRC17:10
openstackgerritBrent Eagles proposed openstack/tripleo-quickstart master: Add fs038 for Octavia scenario testing  https://review.openstack.org/53116817:12
*** jpena is now known as jpena|off17:12
*** trown is now known as trown|lunch17:12
openstackgerritBrent Eagles proposed openstack/tripleo-heat-templates master: Add scenario010 for testing Octavia  https://review.openstack.org/51833117:14
*** thrash is now known as thrash|biab17:16
*** ykarel has quit IRC17:21
EmilienMccamacho: nice work on the validation for xfs, thanks17:23
ccamachoEmilienM np Im just hitting a lint issue, Ill fix it now17:24
*** holser__ has quit IRC17:24
ccamachothank you for the reviews17:24
*** pkovar has joined #tripleo17:26
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228217:27
ccamachodone17:27
*** raildo has quit IRC17:28
ccamachoEmilienM quick question about the release note, in mitaka we should use xfs but with ftype=017:30
ccamachoyou mean that?17:30
ccamachoand you have it to 1?17:30
*** wolverineav has joined #tripleo17:30
*** wolverineav has quit IRC17:32
*** wolverineav has joined #tripleo17:32
openstackgerritwes hayutin proposed openstack-infra/tripleo-ci master: add an update non-voting job to mimimal check  https://review.openstack.org/56234717:32
openstackgerritArx Cruz proposed openstack/tripleo-quickstart-extras master: Fixing stackviz generation  https://review.openstack.org/56231617:33
openstackgerritCarlos Camacho proposed openstack/tripleo-validations master: Validate that there should not be XFS volumes with ftype=0  https://review.openstack.org/56228217:34
*** mdnadeem has quit IRC17:35
*** marios has quit IRC17:37
openstackgerritwes hayutin proposed openstack/tripleo-heat-templates master: add tripleo update job as non-voting  https://review.openstack.org/56235317:37
*** raildo has joined #tripleo17:37
*** janki has quit IRC17:37
*** lblanchard1 has joined #tripleo17:39
*** lblanchard has quit IRC17:39
*** lblanchard has joined #tripleo17:44
*** lblanchard1 has quit IRC17:46
openstackgerritHarry Rybacki proposed openstack-infra/tripleo-ci master: DNM: Enable verbose output from toci_quickstart  https://review.openstack.org/56232717:46
*** thrash|biab is now known as thrash17:47
*** avivgt has quit IRC17:47
*** itlinux has quit IRC17:48
*** itlinux has joined #tripleo17:54
*** jcoufal has joined #tripleo17:56
*** raildo has quit IRC17:58
*** avivgt has joined #tripleo17:59
*** avivgt has quit IRC18:03
*** zoli|wfh is now known as zoli|gone18:03
*** fragatina has quit IRC18:04
*** ykarel has joined #tripleo18:04
*** radeks has quit IRC18:05
*** pkovar has quit IRC18:06
openstackgerritMerged openstack/tripleo-heat-templates stable/ocata: Configure qemu group setting as hugetlbfs for ovs-dpdk  https://review.openstack.org/56154818:07
*** raildo has joined #tripleo18:10
*** ooolpbot has joined #tripleo18:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION18:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487018:10
*** ooolpbot has quit IRC18:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)18:10
mwhahahaEmilienM: should we purge the gate18:10
mwhahahaEmilienM: cause it's all going to fail isn't it?18:10
EmilienMone sec18:10
*** ksingh1 has quit IRC18:11
*** pcaruana has quit IRC18:12
*** gfidente is now known as gfidente|afk18:12
EmilienMmwhahaha: ok doing it now18:12
mwhahahawell i didn't mean you had to do it :D18:12
mwhahahawas more of a question really18:13
*** jcoufal has quit IRC18:13
EmilienMmwhahaha: gate is cleared18:16
EmilienMI'll restore the patches once paul's patch is in gate18:16
mwhahahaks the instack patch looks about ready18:16
* mwhahaha crosses fingers it doesn't timeout18:17
EmilienMI'm approving it18:17
EmilienMoh well18:17
EmilienMwaiting a bit18:17
mwhahahait's almost done18:17
*** EmilienM changes topic to "Welcome to Rocky. CI status RED - DO NOT RECHECK / APPROVE ANYTHING (pep10 /DIB issue, in progress) | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest"18:17
dpeacockEmilienM: Looks like I've got a deployment going18:17
dpeacock(not finished yet but it's past the docker registry issue so it looks promising)18:18
EmilienMcool18:18
EmilienMyeah I could deploy today18:18
dpeacockthis is my sixth or so attempt today18:18
mwhahahapffft only six?18:19
dpeacockmwhahaha: I think that's a conservative estimate ;-)18:19
mwhahahadeploy until you cry18:19
mwhahahaor cry while you deploy18:19
mwhahahayour choice18:19
*** ykarel has quit IRC18:19
dpeacockthe latter ;-)18:19
honzaEmilienM: I think I found the problem.  We need to update the config endpoints to use SSL as well.  The proxy ones work fine as per your patch.18:27
EmilienMhonza: can you take over my patch if you have an idea?18:27
honzaEmilienM: absolutely18:27
EmilienMmwhahaha: sleep/cry driven deployment?18:27
EmilienMhonza: thx for your help btw18:27
mwhahahamostly cry, but yea18:27
honzaEmilienM: np!18:27
EmilienMpabelanger: thx the patch worked18:29
*** trown|lunch is now known as trown18:30
EmilienMdprince: mwhahaha and I were discussing about heat-installer using /var/tmp/undercloud - and potentially move /var/tmp/undercloud to somewhere else (in $HOME?) any thoughts?18:30
mwhahahait's created as root tho isn'tit?18:31
EmilienMyes18:32
EmilienMdrwxrwxrwt.  3 root root  60 Apr 18 05:49 undercloud18:32
mwhahahawat18:32
mwhahaha777?18:32
openstackgerritJohn Trowbridge proposed openstack/tripleo-quickstart master: WIP Add ability to provision "dumb" VMs for fake nodepool  https://review.openstack.org/56163018:32
EmilienMnot sure why18:32
EmilienMoh wait18:33
EmilienMI probably check after a quickstart run18:33
EmilienMotherwise the code does: os.makedirs(tmpdir, mode=0o755)18:33
EmilienMso 75518:33
*** orange_julius has joined #tripleo18:33
dprinceEmilienM: I'm not sure $HOME is right18:33
dprinceEmilienM: if it is owned by root that would be /root18:33
dprinceEmilienM: what problem does using /var/tmp/undercloud cause?18:34
orange_juliusTripleo is having a few issues... Almost all interfaces on my overcloud controllers are not coming up on a reboot..18:34
EmilienMmwhahaha: ^18:35
*** itlinux has quit IRC18:35
EmilienMdprince: I think we were worried about parity with instack (and $HOME/.instack)18:35
mwhahahai'm not sure why we're using /var/tmp/undercloud18:35
EmilienMI'm fine with /var/tmp/undercloud as long as we document it and collect it in CI and sosreport18:36
mwhahahaso rather than sayign what problems is with using it, is there a reason it can't be configurable?18:36
EmilienMIIUC this dir is supposed to be ephemeral but debugable right?18:36
dprinceEmilienM: well, we aren't going to name this instack. so as its already different I think /var/tmp seems like a better place18:36
EmilienMdprince: right I'm not in favor of naming it instack either.18:37
mwhahahait doesn't have to be instack, but the question i have is do we need it for any reason18:38
pabelangerEmilienM: great18:38
mwhahahaif so, /var/tmp wouldn't be a good place18:38
mwhahahaif it's truely something we will never need to look at (i doubt it), then /var/tmp/undercloud is fine18:38
mwhahahabut if there's a reason to ever capture it, /var/tmp/undercloud is probably not the best spot18:38
EmilienMwhy not /var/lib/heat-installer ?18:39
mwhahahathat would make more sense, but do we hit selinux related things?18:39
EmilienM(well the dir containers logs and config afik)18:39
EmilienMmwhahaha: good question18:40
*** fragatina has joined #tripleo18:40
EmilienMi'll propose a patch18:40
*** itlinux has joined #tripleo18:40
dprinceEmilienM: if the goal here is to avoid the word 'undercloud' I get it. heat-installer is fine18:42
EmilienMdprince: I think the goal is to make sure it's available if something goes wrong18:42
EmilienMand /var/tmp is too ephemeral, AFIK it's purged after a reboot.18:43
mwhahahano18:43
mwhahahaso /var/tmp isn't purged at boot (/tmp is). but it does get cleaned up i think by a cron by default18:43
* mwhahaha would have to check18:43
dprinceEmilienM: /var/tmp is a reasonable place. Are you wanting to keep it forever then?18:43
EmilienMdprince: yes, for sosreport/customers18:44
dprinceEmilienM: let it go to /var/tmp and then copy it to the users (not roots) homedir18:44
*** holser__ has joined #tripleo18:44
EmilienMdprince: why would we copy?18:44
*** mcornea has joined #tripleo18:45
dprinceEmilienM: then it won't get deleted18:45
openstackgerritBrad P. Crochet proposed openstack/tripleo-validations master: Add validation for verifying profiles  https://review.openstack.org/56235818:45
EmilienMdprince: if we put in /var/lib it's not deleted18:45
EmilienMand we don't have it twice18:45
EmilienMI kind of don't like how we copy all the things18:45
dprinceEmilienM: why not /var/log18:45
dprinceEmilienM: it is a log file right18:45
EmilienMsure, /var/log works for me, but we also have a sqlite db and a config file18:45
EmilienMby definition, /var/lib contains dynamic data libraries and files18:47
EmilienMI'll propose a patch18:47
EmilienMimho, we should even manage this dir in the RPM distgit18:48
dprinceEmilienM: the sqlite db is ephemeral. it is blown away on a re-run18:48
dprinceEmilienM: ditto for the conf, both can be deleted I think18:48
dprinceEmilienM: what I'm getting at is if it is just a log file we want to keep /var/log might be best18:49
*** Goneri has quit IRC18:50
*** tosky has quit IRC18:52
mwhahahaEmilienM: https://review.openstack.org/#/c/562325/ is in the gate if you want to restore stuff18:54
EmilienMmwhahaha: if I don't?18:54
mwhahahaEmilienM: or not, it's not like any of it was mine :D18:55
*** dparkes has joined #tripleo18:55
*** tosky has joined #tripleo18:55
EmilienMmwhahaha: done18:56
*** akrivoka has quit IRC18:57
mwhahahathough i guess we need it to completely land18:57
*** raildo has quit IRC19:05
*** artom has quit IRC19:09
*** artom has joined #tripleo19:10
*** ooolpbot has joined #tripleo19:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION19:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487019:10
*** ooolpbot has quit IRC19:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)19:10
openstackgerritEmilien Macchi proposed openstack/python-tripleoclient master: Move heat_launcher data to /var/log/heat-launcher  https://review.openstack.org/56236219:10
*** ssbarnea_ has quit IRC19:10
*** numans has quit IRC19:12
openstackgerritEmilien Macchi proposed openstack-infra/tripleo-ci master: Collect /var/log/heat-launcher  https://review.openstack.org/56200319:12
openstackgerritEmilien Macchi proposed openstack/python-tripleoclient master: Move heat_launcher data to /var/log/heat-launcher  https://review.openstack.org/56236219:12
*** numans has joined #tripleo19:13
*** pcaruana has joined #tripleo19:13
*** tesseract has quit IRC19:15
*** raildo has joined #tripleo19:17
*** pcaruana has quit IRC19:20
*** ksingh1 has joined #tripleo19:21
orange_juliusHas anybody experienced an issue with tripleo setting an interface to DHCP when it is not defined in the configuration? This is causing nodes to fail to bring up the defined interfaces / vlans on reboot19:24
slagle"TO NOT RE-CHECK OR RE-APPROVE" ... philosophy by Emilien19:24
*** assassin has quit IRC19:24
orange_juliusOur current workaround is to define the interface in controller.yaml as a noop interface basically. This isn't really sustainable19:24
EmilienMslagle: I had F at philo exam back in college19:25
EmilienMslagle: I restored everything I think, did I miss your patch?19:25
slagledon't think so. thanks!19:26
*** atoth has quit IRC19:30
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: undercloud: deploy SSH service  https://review.openstack.org/56236919:33
*** holser__ has quit IRC19:36
*** artom has quit IRC19:38
openstackgerritEmilien Macchi proposed openstack/python-tripleoclient master: heat-launcher: enable convergence  https://review.openstack.org/56237019:38
*** lblanchard has quit IRC19:39
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates master: WIP - Deploy Docker via Ansible and not Puppet  https://review.openstack.org/56137719:39
*** lblanchard has joined #tripleo19:39
*** ssbarnea_ has joined #tripleo19:47
bnemecorange_julius: Yes, that's intentional.  On initial boot we don't know which interface is the provisioning network, so we attempt DHCP on everything.19:47
bnemecWhy is listing all nics on the system in the config not sustainable?19:47
* mwhahaha bets non-heterogeneous hardware19:48
mwhahahaor is it heterogeneous19:48
mwhahahai can never remember19:48
bnemecheterogeneous aka non-homogeneous.19:48
mwhahahayes that one19:48
mwhahahaword to large19:49
bnemecNot to be confused with homogenized, aka milk. :-)19:49
mwhahahammm milk19:49
bnemecBTW, the reason I'm actually looking at this channel is to ask if there's an easy place to find an allinone role.19:49
bnemecI don't see one in tht, so I'm guessing maybe there's one in a ci repo somewhere?19:50
mwhahahayea probably in oooq19:50
mwhahahain one of the scenarios19:50
mwhahahaor featureset or whatever19:50
bnemecOh, it just occurred to me that I didn't look in the ci directory of tht.19:50
mwhahaha:o19:51
orange_juliusheterogeneous hardware correct19:51
orange_juliusWe took the route of just unplugging the cable for now19:51
mwhahahaorange_julius: well yea it would make sense not to have it have a link if it's not in use19:52
mwhahahaorange_julius: i think the recommended path is to create a role specific to the hardware so you can do the network configuration for the right set of hardware19:52
orange_juliusTrue. I was just surprised by the functionality. This was a side-adventure on the path of getting overcloud baremetal service working. We have been having issues with "No Valid Host found" errors and aren't too sure why. Its not the filters, and our custom resources are configured correctly. Is there anything else I should look at?19:54
mwhahahafor no valid host found you'd have to poke the nova scheduler or ironic logs19:55
bnemecMan, I need to set up QOS on my router so container downloads don't completely kill my internet connection.19:55
mwhahahabnemec: or get better internet19:55
mwhahahai had to switch my dns servers today cause the telco provided ones are soo overloaded it was taking 5sec for a response19:56
bnemecmwhahaha: I'll have them send the bill to you. :-P19:56
mwhahahapffft19:56
orange_juliusUnfortunately there isn't anything of use in nova-scheduler or the ironic logs really. I am redeploying the overcloud now so I could get some better info in a bit. If this isn't the right channel please let me know.. The #openstack channel seems to be pretty quiet19:56
* mwhahaha highs his 1gb fiber19:56
mwhahahaorange_julius: if it's a tripleo deployment, this is the channel. though responses may also be hard to come by depending on the question :D19:57
openstackgerritMartin Mágr proposed openstack/tripleo-heat-templates master: Default collectd to overcloud gnocchi  https://review.openstack.org/56237219:58
bnemecI'm actually not using my ISP's DNS either.  I can't remember what the problem was, but I have Google DNS hard-coded in my router.19:58
*** ooolpbot has joined #tripleo20:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION20:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487020:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)20:10
*** ooolpbot has quit IRC20:10
*** wolverin_ has joined #tripleo20:14
*** wolverineav has quit IRC20:14
thrashmwhahaha: I started using 1.1.1.1. CloudFlare I think? They're working on encrypted DNS.20:15
mwhahahayea i switched to that20:15
mwhahahamuch better now20:16
thrashmwhahaha: https://blog.cloudflare.com/announcing-1111/ :)20:16
thrashand for anyone else interested lol20:16
openstackgerritMartin Mágr proposed openstack/tripleo-heat-templates master: Default collectd to overcloud gnocchi  https://review.openstack.org/56237220:18
thrashand I just noticed they have ipv6 resolvers too \o/20:19
openstackgerritLiz Blanchard proposed openstack/tripleo-ui master: Mask Passwords and allow Copy to Clipboard  https://review.openstack.org/56203920:25
openstackgerritHarry Rybacki proposed openstack/tripleo-quickstart master: [WIP] Update default supplemental ssh key  https://review.openstack.org/54173120:28
openstackgerritJohn Fulton proposed openstack/tripleo-docs master: Ceph backfill and recovery options require config overrides  https://review.openstack.org/56237820:29
*** liverpooler has quit IRC20:31
openstackgerritJohn Fulton proposed openstack/tripleo-docs master: Ceph backfill and recovery options require config overrides  https://review.openstack.org/56237820:34
*** ssbarnea_ has quit IRC20:37
*** bfournie has quit IRC20:37
*** ssbarnea_ has joined #tripleo20:37
*** ksingh1 has quit IRC20:38
*** ksingh1 has joined #tripleo20:39
*** nyechiel has quit IRC20:42
*** liverpooler has joined #tripleo20:43
*** dmellado has quit IRC20:45
*** lblanchard has quit IRC20:46
*** gouthamr has quit IRC20:46
*** stevebaker has quit IRC20:48
*** dbecker has quit IRC20:55
openstackgerritDavid Peacock proposed openstack/python-tripleoclient master: WIP - DO NOT MERGE - Implement logging by default  https://review.openstack.org/56208220:57
*** dxiri_ has joined #tripleo21:03
*** holser__ has joined #tripleo21:06
*** dxiri has quit IRC21:07
*** slaweq has joined #tripleo21:08
*** dxiri_ has quit IRC21:09
*** dxiri has joined #tripleo21:09
*** bnemec has quit IRC21:09
*** ooolpbot has joined #tripleo21:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION21:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487021:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)21:10
*** ooolpbot has quit IRC21:10
*** bnemec has joined #tripleo21:11
*** trown is now known as trown|outtypewww21:11
*** pchavva has quit IRC21:12
*** slaweq has quit IRC21:12
*** bfournie has joined #tripleo21:13
openstackgerritMerged openstack/instack-undercloud master: Exclude epel element for diskimage-builder  https://review.openstack.org/56232521:14
*** stevebaker has joined #tripleo21:14
*** dprince has quit IRC21:14
*** dprince has joined #tripleo21:14
*** ksingh1 has quit IRC21:16
*** EmilienM changes topic to "Welcome to Rocky. CI status GREEN | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest"21:21
*** apetrich_ has joined #tripleo21:27
openstackgerritMerged openstack/tripleo-quickstart master: Use promotion process for diskimage-builder  https://review.openstack.org/56233321:28
*** morazi has quit IRC21:28
*** bdodd has joined #tripleo21:29
*** paramite has quit IRC21:33
mcorneaEmilienM: hi o/ I'm getting this error when upgrading the undercloud to queens - /tmp/tmp8qGfEw/pre-install.d/05-rpm-epel-release: line 9: DISTRO_NAME: unbound variable . Do you know where the DISTRO_NAME var should come from?21:35
openstackgerritMarius Cornea proposed openstack/tripleo-upgrade master: WIP: Add FFU converge step  https://review.openstack.org/56199421:37
*** gfidente|afk has quit IRC21:41
*** rh-jelabarre has quit IRC21:42
*** holser__ has quit IRC21:48
*** apetrich_ has quit IRC21:49
*** bdodd has quit IRC21:57
*** rfolco is now known as rfolco|off21:59
mwhahahamcornea: yes there was an issue with DIB this morning22:01
mwhahahamcornea: see https://review.openstack.org/#/c/562325/22:01
mwhahahamcornea: also https://review.openstack.org/#/c/562333/22:02
mcorneamwhahaha: tnx22:03
*** liverpooler has quit IRC22:04
*** ipsecguy has quit IRC22:05
*** ooolpbot has joined #tripleo22:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION22:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487022:10
*** ooolpbot has quit IRC22:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)22:10
*** ipsecguy has joined #tripleo22:10
*** rlandy has quit IRC22:18
*** pmannidi has joined #tripleo22:19
orange_juliusHmmm I'm having issues removing hosts from the baremetal aggregate zone... " Cannot remove host overcloud-controller-1.localdomain in aggregate 3 (HTTP 404) (Request-ID: req-d84176ce-d8da-4edf-be2d-95188193f814)"22:29
*** cdearborn has quit IRC22:29
*** rcernin has joined #tripleo22:31
*** yolanda has quit IRC22:32
*** itlinux has quit IRC22:32
stevebakermwhahaha, EmilienM: Hey, this is passing and I think it will help stabilise multinode jobs. Or at least have no negative effect https://review.openstack.org/#/c/561506/22:32
*** dprince has quit IRC22:36
*** thrash is now known as thrash|g0ne22:38
openstackgerritMerged openstack/diskimage-builder master: Revert "debootstrap: Call update-initramfs explicitly"  https://review.openstack.org/56200422:40
*** tosky has quit IRC23:02
*** slaweq has joined #tripleo23:09
*** ooolpbot has joined #tripleo23:10
ooolpbotURGENT TRIPLEO TASKS NEED ATTENTION23:10
ooolpbothttps://bugs.launchpad.net/tripleo/+bug/176487023:10
*** ooolpbot has quit IRC23:10
openstackLaunchpad bug 1764870 in tripleo "Missing tags in dockerhub, impossible to deploy a containerized undercloud" [Critical,Triaged] - Assigned to Gabriele Cerami (gcerami)23:10
*** raildo has quit IRC23:11
*** slaweq has quit IRC23:13
*** mrunge has quit IRC23:16
*** andreaf has quit IRC23:18
*** andreaf has joined #tripleo23:18
*** cschwede has quit IRC23:20
*** mrunge has joined #tripleo23:20
*** cschwede has joined #tripleo23:21
*** mrunge has quit IRC23:24
*** mrunge has joined #tripleo23:26

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!