| openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates stable/queens: GATE CHECK for TripleO https://review.openstack.org/567224 | 00:00 |
|---|---|---|
| openstackgerrit | RedHat RDO CI proposed openstack/tripleo-quickstart-extras master: GATE CHECK for quickstart-extras https://review.openstack.org/560445 | 00:00 |
| openstackgerrit | Michael Bayer proposed openstack/tripleo-specs master: Region Support https://review.openstack.org/566448 | 00:02 |
| openstackgerrit | Michael Bayer proposed openstack/tripleo-specs master: Region Support https://review.openstack.org/566448 | 00:03 |
| *** alee_ has joined #tripleo | 00:03 | |
| *** zul has quit IRC | 00:04 | |
| *** mgkwill_ has joined #tripleo | 00:05 | |
| *** patrickeast has quit IRC | 00:05 | |
| *** mgkwill has quit IRC | 00:05 | |
| *** mgkwill_ is now known as mgkwill | 00:05 | |
| *** patrickeast has joined #tripleo | 00:05 | |
| *** alee has quit IRC | 00:06 | |
| *** afazekas has quit IRC | 00:06 | |
| *** melwitt has quit IRC | 00:06 | |
| *** mdnadeem has joined #tripleo | 00:09 | |
| *** melwitt has joined #tripleo | 00:11 | |
| *** afazekas has joined #tripleo | 00:11 | |
| *** ChanServ has quit IRC | 00:12 | |
| *** mdnadeem has quit IRC | 00:13 | |
| *** zul has joined #tripleo | 00:16 | |
| *** leitan has quit IRC | 00:18 | |
| *** leitan has joined #tripleo | 00:18 | |
| *** dciabrin_ has joined #tripleo | 00:19 | |
| *** yolanda_ has quit IRC | 00:19 | |
| *** yolanda_ has joined #tripleo | 00:20 | |
| *** rwsu has quit IRC | 00:20 | |
| *** dciabrin has quit IRC | 00:21 | |
| *** leitan has quit IRC | 00:22 | |
| *** rlandy|rover has quit IRC | 00:33 | |
| *** ChanServ has joined #tripleo | 00:33 | |
| *** barjavel.freenode.net sets mode: +o ChanServ | 00:33 | |
| *** atoth has quit IRC | 00:35 | |
| *** csmart has quit IRC | 00:38 | |
| *** wilken[m] has quit IRC | 00:38 | |
| *** melwitt is now known as Guest48153 | 00:39 | |
| *** rwsu has joined #tripleo | 00:45 | |
| *** limao has joined #tripleo | 00:46 | |
| *** leitan has joined #tripleo | 00:48 | |
| *** psahoo has joined #tripleo | 00:55 | |
| *** ayoung has quit IRC | 00:55 | |
| *** leitan has quit IRC | 00:58 | |
| *** leitan has joined #tripleo | 00:58 | |
| *** leitan has quit IRC | 01:00 | |
| *** leitan has joined #tripleo | 01:00 | |
| *** wilken[m] has joined #tripleo | 01:01 | |
| *** csmart has joined #tripleo | 01:21 | |
| *** mdnadeem has joined #tripleo | 01:23 | |
| *** gyankum has joined #tripleo | 01:29 | |
| *** dr_gogeta86 has quit IRC | 01:45 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: NeutronSriovHostConfig missing in SRIOV's env files https://review.openstack.org/570740 | 01:46 |
| *** takashi has joined #tripleo | 02:00 | |
| takashi | Hi | 02:04 |
| takashi | Can I ask a question about tripleo here? | 02:04 |
| stevebaker | takashi: yes you can! | 02:07 |
| *** bkopilov_ has quit IRC | 02:08 | |
| takashi | stevebaker: thx! :-) | 02:08 |
| takashi | I recently started testing tripleo queens, and have a question about neutron service setup | 02:09 |
| takashi | I understand that in queens, neutron services are installed as docker containers, and service settings are described files under this directory https://github.com/openstack/tripleo-heat-templates/tree/stable/pike/docker/services | 02:10 |
| stevebaker | yes | 02:10 |
| takashi | While I can find services like neutron-api(which means neutron-server), neutron-ovs-agent and so on, I can find the one which corresponds to neutron-ovs-cleanup | 02:11 |
| takashi | s/can/can't/ sorry | 02:11 |
| takashi | I know that neutron-ovs-cleanup is not a daemon service but a kind of command line tool which runs when starting or stopping node | 02:12 |
| takashi | but can't find why we don | 02:12 |
| *** psahoo has quit IRC | 02:12 | |
| takashi | we don't need the one when setting up neutron in docker containers | 02:12 |
| takashi | stevebaker: do you know its reason? | 02:14 |
| stevebaker | takashi: I'm just looking, hang on | 02:16 |
| takashi | stevebaker: thank you! | 02:17 |
| *** rajinir has joined #tripleo | 02:17 | |
| *** yamahata has quit IRC | 02:20 | |
| stevebaker | takashi: I think you've found a bug. It looks like we used to do an ovs-cleanup run via a systemd dependency to the ovs-agent service, but that is no longer happening now that docker is running the ovs-agent | 02:21 |
| openstackgerrit | Michele Baldessari proposed openstack/puppet-tripleo stable/queens: Fix up property names in case of mixed case hostnames https://review.openstack.org/571064 | 02:22 |
| *** psahoo has joined #tripleo | 02:24 | |
| stevebaker | takashi: maybe the queens start script runs it, I'm just tracking that down https://github.com/openstack/tripleo-heat-templates/blob/stable/queens/docker/services/neutron-ovs-agent.yaml#L96 | 02:24 |
| stevebaker | takashi: oh, maybe this call to neutron.cmd.destroy_patch_ports does the same thing https://github.com/openstack/tripleo-heat-templates/blob/stable/queens/docker/services/neutron-ovs-agent.yaml#L112 | 02:26 |
| *** jbcraig has joined #tripleo | 02:31 | |
| takashi | stevebaker: thank you! let me see... | 02:31 |
| stevebaker | I'll be back later | 02:32 |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-quickstart master: Revert "Revert "Deploy container-multinode (fs010) with a containerized undercloud"" https://review.openstack.org/560264 | 02:33 |
| *** leitan has quit IRC | 02:38 | |
| *** leitan has joined #tripleo | 02:39 | |
| *** psachin has joined #tripleo | 02:42 | |
| *** leitan has quit IRC | 02:43 | |
| takashi | stevebaker: I checked codes of destry pots and ovs-cleanup, they looks different to me. | 02:46 |
| takashi | In rdo packaging, destroy port service exsits as ovs cleanup also exists. see https://github.com/rdo-packages/neutron-distgit/blob/queens-rdo/openstack-neutron.spec | 02:46 |
| *** ykarel|away has joined #tripleo | 02:46 | |
| takashi | the call to destroy patch pots is introduced in thie patch https://github.com/openstack/tripleo-heat-templates/commit/5ef66764a4b055cb37c1dd4fa38130fb0b4472df | 02:47 |
| *** dbecker has quit IRC | 02:47 | |
| *** thrash is now known as thrash|g0ne | 02:47 | |
| takashi | and the bug report fixed by the patch only mentions about destroy-patch-ports https://bugs.launchpad.net/tripleo/+bug/1731924 | 02:48 |
| openstack | Launchpad bug 1731924 in tripleo "Execute destroy-patch-ports before running ovs-agent in container" [High,Fix released] - Assigned to Dan Prince (dan-prince) | 02:48 |
| takashi | I'm afraid that the work of ovs-cleanup is still missing | 02:48 |
| takashi | stevebaker: it would be great if you have some time to have a look, after coming back. thanks. | 02:49 |
| *** rlandy has joined #tripleo | 02:51 | |
| *** limao has quit IRC | 02:59 | |
| *** dbecker has joined #tripleo | 03:01 | |
| *** moshele has quit IRC | 03:04 | |
| *** gbarros has joined #tripleo | 03:07 | |
| *** janki has joined #tripleo | 03:12 | |
| openstackgerrit | zhulingjie proposed openstack/puppet-tripleo master: Replace port 35357 with 5000 https://review.openstack.org/571075 | 03:22 |
| *** bkopilov_ has joined #tripleo | 03:24 | |
| *** tzumainn has quit IRC | 03:34 | |
| *** pdeore has joined #tripleo | 03:47 | |
| *** pdeore has quit IRC | 03:47 | |
| *** pdeore has joined #tripleo | 03:47 | |
| *** udesale has joined #tripleo | 03:58 | |
| *** ykarel|away is now known as ykarel | 03:59 | |
| *** rlandy has quit IRC | 04:05 | |
| *** gbarros has quit IRC | 04:06 | |
| *** ykarel is now known as ykarel|afk | 04:07 | |
| *** links has joined #tripleo | 04:11 | |
| Tengu | hello there | 04:17 |
| openstackgerrit | Cédric Jeanneret proposed openstack/tripleo-heat-templates master: WIP - Manage public certificate with ansible https://review.openstack.org/570627 | 04:24 |
| Tengu | hmm. have to get some output -.-' | 04:25 |
| *** fragatina has quit IRC | 04:31 | |
| *** fragatina has joined #tripleo | 04:33 | |
| *** fragatina has quit IRC | 04:37 | |
| *** marios has joined #tripleo | 04:40 | |
| *** pgadiya has joined #tripleo | 04:42 | |
| *** pgadiya has quit IRC | 04:44 | |
| *** psachin has quit IRC | 04:46 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Replace hiera lookup for ceph::profile::params::fsid https://review.openstack.org/570577 | 04:50 |
| *** rakhmerov has quit IRC | 04:51 | |
| openstackgerrit | Merged openstack/puppet-tripleo master: Remove support for puppet-ceph https://review.openstack.org/570193 | 04:56 |
| *** aufi has joined #tripleo | 04:57 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Set default application for Ceph Luminous openstack_pools https://review.openstack.org/570043 | 05:00 |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/ocata: Allows Configuration of Additional of Lbaas and Neutron https://review.openstack.org/564366 | 05:00 |
| openstackgerrit | Merged openstack/puppet-tripleo stable/pike: Merge default_listen with swift_proxy_server_listen_options https://review.openstack.org/570574 | 05:00 |
| *** radeks__ has joined #tripleo | 05:09 | |
| *** dparkes has quit IRC | 05:10 | |
| *** alee_ has quit IRC | 05:11 | |
| *** limao has joined #tripleo | 05:13 | |
| *** rakhmerov has joined #tripleo | 05:16 | |
| *** yprokule has joined #tripleo | 05:18 | |
| *** fragatina has joined #tripleo | 05:18 | |
| *** alee_ has joined #tripleo | 05:18 | |
| *** ykarel|afk is now known as ykarel | 05:18 | |
| *** lifeless_ has quit IRC | 05:19 | |
| *** anilvenkata has joined #tripleo | 05:19 | |
| *** lifeless has joined #tripleo | 05:19 | |
| *** shreshtha-away has joined #tripleo | 05:20 | |
| chandankumar | When does ceph support swift healthcheck api? | 05:29 |
| *** quiquell|off is now known as quiquell | 05:33 | |
| *** limao has quit IRC | 05:35 | |
| *** agurenko has joined #tripleo | 05:41 | |
| *** aufi has quit IRC | 05:44 | |
| *** agurenko has quit IRC | 05:53 | |
| *** moshele has joined #tripleo | 05:59 | |
| *** rakhmerov has quit IRC | 05:59 | |
| *** cshastri has joined #tripleo | 06:02 | |
| *** dparkes has joined #tripleo | 06:03 | |
| *** agurenko has joined #tripleo | 06:04 | |
| *** mdnadeem_ has joined #tripleo | 06:05 | |
| *** khyr0n has joined #tripleo | 06:05 | |
| *** pdeore_ has joined #tripleo | 06:07 | |
| *** mdnadeem has quit IRC | 06:08 | |
| *** pdeore has quit IRC | 06:09 | |
| *** hjensas has quit IRC | 06:14 | |
| *** pdeore has joined #tripleo | 06:16 | |
| *** pdeore_ has quit IRC | 06:17 | |
| *** rakhmerov has joined #tripleo | 06:19 | |
| *** lifeless has quit IRC | 06:23 | |
| *** waleedm has joined #tripleo | 06:24 | |
| *** masco has joined #tripleo | 06:24 | |
| *** jtomasek has joined #tripleo | 06:25 | |
| *** lifeless has joined #tripleo | 06:25 | |
| *** dparkes has quit IRC | 06:25 | |
| *** lebauce- has joined #tripleo | 06:27 | |
| *** rajinir has quit IRC | 06:27 | |
| *** lebauce_ has quit IRC | 06:27 | |
| *** jtomasek has quit IRC | 06:28 | |
| openstackgerrit | Merged openstack/tripleo-docs master: [Docs - UC restore] Add missing command when refreshing certificates https://review.openstack.org/570997 | 06:32 |
| *** pcaruana has joined #tripleo | 06:33 | |
| *** ratailor has joined #tripleo | 06:33 | |
| *** cylopez has joined #tripleo | 06:38 | |
| *** cylopez has left #tripleo | 06:40 | |
| *** ffiore has joined #tripleo | 06:42 | |
| *** holser__ has joined #tripleo | 06:43 | |
| openstackgerrit | Merged openstack/tripleo-quickstart master: Added a troubleshooting tip to clean up ~/.quickstart https://review.openstack.org/537008 | 06:48 |
| *** hjensas has joined #tripleo | 06:56 | |
| *** hjensas has quit IRC | 06:56 | |
| *** hjensas has joined #tripleo | 06:56 | |
| *** cshastri has quit IRC | 06:57 | |
| *** ssbarnea_ has joined #tripleo | 06:58 | |
| *** agurenko has quit IRC | 07:04 | |
| openstackgerrit | mathieu bultel proposed openstack/python-tripleoclient master: Keep plan-environment only on upgrade https://review.openstack.org/564508 | 07:04 |
| *** tosky has joined #tripleo | 07:06 | |
| *** agurenko has joined #tripleo | 07:07 | |
| *** dmacpher__ has joined #tripleo | 07:09 | |
| *** ccamacho has joined #tripleo | 07:11 | |
| *** dmacpher_ has quit IRC | 07:12 | |
| *** agurenko has quit IRC | 07:13 | |
| *** jaosorior has joined #tripleo | 07:15 | |
| *** masco has quit IRC | 07:16 | |
| *** quiquell is now known as quiquell|afk | 07:18 | |
| *** zz_saneax has joined #tripleo | 07:18 | |
| *** zz_saneax is now known as saneax | 07:19 | |
| *** sshnaidm is now known as sshnaidm_pto | 07:20 | |
| *** tesseract has joined #tripleo | 07:20 | |
| *** apetrich has quit IRC | 07:21 | |
| *** cshastri has joined #tripleo | 07:22 | |
| openstackgerrit | Thomas Herve proposed openstack/tripleo-heat-templates master: Pass designate configuration to neutron https://review.openstack.org/569990 | 07:22 |
| *** apetrich has joined #tripleo | 07:23 | |
| *** florianf has joined #tripleo | 07:23 | |
| *** jtomasek has joined #tripleo | 07:25 | |
| *** rcernin has quit IRC | 07:27 | |
| *** amoralej|off is now known as amoralej | 07:27 | |
| *** aufi has joined #tripleo | 07:28 | |
| *** mdnadeem_ has quit IRC | 07:28 | |
| *** masco has joined #tripleo | 07:30 | |
| *** jtomasek has quit IRC | 07:31 | |
| *** skramaja has joined #tripleo | 07:32 | |
| *** ykarel is now known as ykarel|lunch | 07:36 | |
| *** khyr0n has quit IRC | 07:40 | |
| *** mdnadeem_ has joined #tripleo | 07:41 | |
| openstackgerrit | Sergii Golovatiuk proposed openstack/tripleo-quickstart-extras master: Add undercloud_prep_containers.log to logs https://review.openstack.org/571119 | 07:41 |
| *** khyr0n has joined #tripleo | 07:41 | |
| *** jpena|off is now known as jpena | 07:45 | |
| *** Nexus has joined #tripleo | 07:47 | |
| *** ykarel|lunch has quit IRC | 07:47 | |
| *** khyr0n has quit IRC | 07:48 | |
| openstackgerrit | Daniel Alvarez proposed openstack/puppet-tripleo master: Adding wrapper script for haproxy in OVN metadata agent https://review.openstack.org/570942 | 07:50 |
| Tengu | jaosorior: hello! I have a small issue/question: apparently, in some scenarii, there isn't an "haproxy" group :/. | 07:50 |
| Tengu | meaning my ansible will fail because it can't chgrp TLS certificate to haproxy :( | 07:51 |
| Tengu | jaosorior: once this is corrected, I guess the patchset will be good (at last) | 07:51 |
| *** anilvenkata has quit IRC | 07:51 | |
| Tengu | jaosorior: any idea? I didn't find a specific thing in the "old" bash script regarding this group.. | 07:51 |
| *** jpich has joined #tripleo | 07:53 | |
| *** anilvenkata has joined #tripleo | 07:55 | |
| openstackgerrit | Ricardo Noriega proposed openstack/tripleo-heat-templates stable/queens: NeutronSriovHostConfig missing in SRIOV's env files https://review.openstack.org/571121 | 07:58 |
| openstackgerrit | RedHat RDO CI proposed openstack/tripleo-heat-templates stable/ocata: GATE CHECK for TripleO https://review.openstack.org/564291 | 08:00 |
| rnoriega | skramaja, ^^ this is yesterday's patch cherrypick! | 08:00 |
| rnoriega | thanks | 08:01 |
| *** quiquell|afk is now known as quiquell | 08:11 | |
| jaosorior | Tengu: uhm... well, I'm honestly not sure what the issue is there. | 08:13 |
| jaosorior | Tengu: but, one fact is that we have to stop assuming that there will be a haproxy group | 08:13 |
| jaosorior | as we want to move the actual hosts to have the least packages as possible (and that group comes from the haproxy package). | 08:14 |
| jaosorior | Tengu: so, when we do an update, if it's containerized, we have to do a chown in the container | 08:14 |
| *** suuuper has joined #tripleo | 08:16 | |
| *** limao has joined #tripleo | 08:18 | |
| *** sri_ has quit IRC | 08:21 | |
| Tengu | hmm ok. | 08:21 |
| Tengu | jaosorior: I'm on a quick mtg, will check that. Maybe my ansible requires a new bunch of checks/rules in order to only do the chown on the host when we're in containers or not. | 08:23 |
| *** limao has quit IRC | 08:24 | |
| *** radek__ has joined #tripleo | 08:28 | |
| *** sri_ has joined #tripleo | 08:29 | |
| Tengu | jaosorior: so, basically, I must check in some way if there's a "haproxy" package, and based on that, I must chose where I do the "chown/chgrp", right? | 08:30 |
| jaosorior | that would be a way to d it | 08:31 |
| jaosorior | * do it | 08:31 |
| jaosorior | either way you have to chwon/chgrp, either on the host or the container | 08:31 |
| Tengu | yup. will dig a bit ansible. | 08:32 |
| Tengu | I can base my "switch" on the haproxy service status I guess. | 08:32 |
| Tengu | if not in ActiveState, chown in container, else on the host | 08:33 |
| jaosorior | Tengu: what about new baremetal deployments? at that point HAProxy won't be active either. | 08:33 |
| jaosorior | Tengu: I think you should base the decision on the existance of the haproxy group | 08:34 |
| Tengu | jaosorior: hmm. not sure this is possible with "group" resource in ansible. | 08:34 |
| Tengu | will check. | 08:34 |
| jaosorior | I see | 08:34 |
| jaosorior | do we have some sort of flag that says if we're doing a containerized deployment or not? | 08:34 |
| Tengu | no idea :/ | 08:35 |
| Tengu | that would be good and would surely simplify the thing. | 08:35 |
| jaosorior | mandre, jistr: ^^ | 08:35 |
| Tengu | jaosorior: but I think I should be able to reproduce the ci check in a confined, under control env. Just breaking down the reproducer-quickstart.sh in order to fully understand it. | 08:37 |
| Tengu | that would allow me to learn a bit more about the deploy process for that specific scenario | 08:37 |
| mandre | jaosorior: to my knowledge there is no easy way to detect if a service is deployed in container or BM, i don't think it's desirable either | 08:38 |
| Tengu | mandre: well, it actually might be a good thing, especially if we have external files with specific rights | 08:39 |
| mandre | why do you need it? | 08:39 |
| Tengu | mandre: I have to chgrp on a file in order to give read access to haproxy group - it fails in containerized deploy because haproxy isn't installed, hence no haproxy group, hence ansible fails. | 08:39 |
| jaosorior | Tengu: actually... another option is to try to set the certificate ownership, and ignore failures | 08:39 |
| Tengu | jaosorior: khof | 08:40 |
| jaosorior | Tengu: that way you'll just always try, and it won't be a big deal if ansible can do it or not | 08:40 |
| Tengu | ignoring failures is the best way to shoot in the foot | 08:40 |
| jaosorior | Tengu: well, it would be ignoring a failure for one ansible task | 08:40 |
| *** gfidente has joined #tripleo | 08:41 | |
| *** gfidente has quit IRC | 08:41 | |
| *** gfidente has joined #tripleo | 08:41 | |
| openstackgerrit | Daniel Alvarez proposed openstack/tripleo-heat-templates master: Generate and mount wrappers for haproxy in OVN metadata agent https://review.openstack.org/571130 | 08:41 |
| Tengu | jaosorior: problem: I do a copy with content + ownership. failure might be the file creation or ownership. I can't push a new resource right after the copy for the ownership, else each run will switch back to root:root and root:haproxy||fail | 08:42 |
| mandre | Tengu: hmm, I take it you're running ansible on the host... in that case you can check if there is a haproxy container and you'll do the chown using the haproxy image to get the right uid/gid | 08:42 |
| Tengu | that's ugly as hell, and not really convenient for comprehension (even with comment in the code). I dislike this kind of hack. | 08:42 |
| Tengu | mandre: nope, because it's ran before container start/creation. host_prep_tasks :) | 08:42 |
| jaosorior | mandre: there won't be a haproxy container, this is before it runs | 08:42 |
| jaosorior | mandre: and we can't run the haproxy container, cause running the container will fail without the cert | 08:43 |
| jaosorior | mandre: then we ALSO need to manage updates :D | 08:43 |
| Tengu | snake, tail, biting | 08:43 |
| *** paramite_ has joined #tripleo | 08:43 | |
| jistr | so what patch are we talking about? :) | 08:43 |
| mandre | Tengu: so you mean it's something you can fix with kolla_config? | 08:43 |
| Tengu | anyway. will find a way. Have to. And a clean way of course :) | 08:43 |
| jaosorior | jistr, mandre https://review.openstack.org/#/c/570627/ | 08:44 |
| Tengu | mandre: IF we're in a container. and even... nope. | 08:44 |
| *** lifeless_ has joined #tripleo | 08:44 | |
| *** lifeless has quit IRC | 08:44 | |
| Tengu | jistr: mandre especially https://review.openstack.org/#/c/570627/15/puppet/services/haproxy-public-tls-inject.yaml - line 86 and following | 08:45 |
| Tengu | (and yes, the no_log will be set to true later in order to ensure key isn't shown) | 08:45 |
| Tengu | but basically.... if haproxy_state is not defined or false, that means we're in a containerized deploy. | 08:47 |
| Tengu | that would probably be the best way to detect that. | 08:47 |
| Tengu | jaosorior: -^^ | 08:47 |
| *** ykarel|lunch has joined #tripleo | 08:48 | |
| mandre | Tengu: hmmm okay, so... | 08:48 |
| Tengu | interesting case isn't it? :) | 08:49 |
| mandre | you can check if there is a container named haproxy in one of the file at /var/lib/tripleo-config/ | 08:49 |
| jaosorior | mandre: at what point are those written? | 08:49 |
| jaosorior | mandre: thought we wrote that in the steps | 08:50 |
| Tengu | hmm. | 08:50 |
| mandre | then adapt your ansible code based on whether haproxy is containerized or not -- basically the path where to output the certificate and the group uid/gid | 08:50 |
| Tengu | have a quickstart deploy running. | 08:51 |
| Tengu | mandre: deployed path should be OK | 08:51 |
| Tengu | just the gid | 08:51 |
| mandre | ok, so if that's the only issue I think it's easier to fix the uid/gid with kolla_config | 08:51 |
| mandre | that file is mounted in the haproxy container, right? | 08:52 |
| jistr | jaosorior, Tengu: so i'm still wondering what's the full extent of the task we're trying to achieve. We have a few params with the base64 PEM format content, and we want to write them into files and have haproxy use that? or is it more complex than that? | 08:52 |
| jaosorior | jistr: less complex :D | 08:52 |
| Tengu | mandre: kolla is only for container, right? so if no kolla, we can't set the proper gid, hence non-container will fail to read the certificate. | 08:53 |
| jaosorior | jistr: Tengu is rewritting the public TLS script thingy into ansible. We're just trying to cover the cases cleanly. | 08:53 |
| mandre | Tengu: yeah, is that really a problem though? I though the BM services were going to be deprecated eventually | 08:54 |
| jaosorior | mandre: are they? we haven't been able to remove the puppet/services/* because folks want to re-use the baremetal services fo rthe all-in-one installer | 08:54 |
| Tengu | mandre: "eventually", yes. I'd rather avoid breaking the CI checks that are actually working because they are BM :) | 08:54 |
| *** brault has joined #tripleo | 08:55 | |
| Tengu | anyway. I'll give a try to my idea (basing the gid on the presence of haproxy service - whatever its status is) | 08:55 |
| mandre | Tengu: you can have an ansible task that set the uid/gid to 'haproxy' where you don't collect the failure status | 08:55 |
| mandre | this way, if you have haproxy on the host, fine, otherwise it's containerized and fine too | 08:55 |
| bandini | mandre: https://review.openstack.org/#/c/571064/ if you have a min | 08:55 |
| Tengu | mandre: already discussed earlier : no-go, because it might happen that each run will do root:root -> root:haproxy||fail - that's ugly as hell | 08:55 |
| *** mrunge has quit IRC | 08:56 | |
| Tengu | unless this kind of non-indepotent thing is accepted - but even so, I can't do that, because I'll have nightmares about it. | 08:56 |
| jaosorior | OpenStack itself is fuel for nightmares :D | 08:57 |
| *** ykarel|lunch is now known as ykarel | 08:57 | |
| jistr | jaosorior, Tengu: so i think we could initially stop focusing on making the host_prep_tasks common for both containerized and non-containerized. Then A) containerized host_prep_tasks would write the config files somewhere to the /var/lib/..... location where containers can take them from, and we could have a haproxy init container that would then be in charge of chowning the files. B) non-containerized case | 08:57 |
| jistr | it could be fully done by the host prep tasks perhaps | 08:57 |
| *** agurenko has joined #tripleo | 08:57 | |
| jistr | mandre: ^ | 08:57 |
| *** agurenko has quit IRC | 08:57 | |
| jistr | and if we discover there are some parts that can be pulled into some "common host prep tasks" for both containerized and non-containerized, then great, but i wouldn't start the implementation that way personally | 08:58 |
| jaosorior | jistr: the init container is nice, but it won't work for certificate updates :/ | 08:59 |
| mandre | Tengu: c'mon, it's not that dirty to ignore failures on a task we know may potentially fail, I've seen worse | 09:00 |
| mandre | jistr: I'd prefer we use kolla_config over init container | 09:01 |
| jistr | mandre: right that would be better | 09:01 |
| jaosorior | mandre: and ultimately kolla_config can do that... but not on updates. or can it? (the HAProxy container wouldn't be restarted) | 09:01 |
| jaosorior | jistr: ^^ | 09:02 |
| jistr | i think we'd just have to persuade paunch that something changed in the config data for the container, which will make it restart the container | 09:02 |
| Tengu | mandre: well... seeing "changed" for each run when we might actually do a nicer thing... 2s | 09:02 |
| mandre | jaosorior: right, for update we'll need to have ansible set the right uid/gid right away | 09:02 |
| jaosorior | Tengu, mandre: that's why that was being done in the script | 09:02 |
| jaosorior | (besides the baremetal case) | 09:03 |
| jistr | wouldn't paunch do the right thing re re-injecting fresh files and re-chowning if we just make sure that the config hash changed? I'm not sure how that's done best but it might be automatic if we just write those params (or hashes of those params, if we don't want them in full there) into hiera, which would affect the hash of the full config dir too. | 09:05 |
| jistr | but maybe that's dirtier solution than some alternatives... | 09:05 |
| Tengu | https://gist.githubusercontent.com/cjeanner/db3ad5bffa0692898a5a81346b6416a9/raw/42f6ce179ff91c914cb93bdb191944cb9b037224/default.md | 09:05 |
| jaosorior | jistr: it doesn't when HAPRoxy is managed by pacemaker. | 09:05 |
| jistr | ohhh | 09:05 |
| *** fragatina has quit IRC | 09:05 | |
| jistr | ok yea we need the tasks then | 09:06 |
| *** ykarel is now known as ykarel|away | 09:06 | |
| Tengu | :) | 09:06 |
| jaosorior | yep yep :) | 09:06 |
| *** fragatina has joined #tripleo | 09:06 | |
| jaosorior | and here's where we're stuck :D finding a nice clean way to do this | 09:06 |
| Tengu | jaosorior: check my proposed diff. or I can push it. | 09:06 |
| openstackgerrit | Yurii Prokulevych proposed openstack/tripleo-heat-templates master: Unset UpgradeRemoveUnusedPackages on converge. https://review.openstack.org/571143 | 09:06 |
| jaosorior | Tengu: set_fact: haproxy_gid_exists={{docker_state is defined and not docker_state.failed}} ?? | 09:08 |
| jaosorior | that doesn't seem related to the haproxy gid | 09:08 |
| jaosorior | also, in the baremetal case, I think docker would be installed as well | 09:08 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Add condition to ovs run during upgrade. https://review.openstack.org/553926 | 09:08 |
| Tengu | jaosorior: it checks if a service haproxy is defined - if so, this means we actually have the group | 09:08 |
| Tengu | jaosorior: base BM images have haproxy | 09:08 |
| jaosorior | Tengu: I think I'mmissing something here, that's checking docker, not haproxy | 09:09 |
| Tengu | oh | 09:09 |
| Tengu | haproxy_state | 09:09 |
| Tengu | sorry. | 09:09 |
| jaosorior | haha no biggie; I thought I was missing something | 09:09 |
| mandre | Tengu: you may want to look for a haproxy container in /var/lib/tripleo-config/docker-container-startup-config-step_1.json | 09:10 |
| jaosorior | mandre: oh right, but at what point of the deployment are those written? | 09:10 |
| skramaja | rnoriega: +2ed | 09:11 |
| jaosorior | mandre: thought those were written in the deployment steps, in which case, we don't have them available yet in host_prep_tasks. | 09:11 |
| mandre | jaosorior: IIRC they're written to the host at an early stage | 09:11 |
| * mandre needs to double check | 09:11 | |
| jaosorior | mandre: but you're right, if we can check for that, that would definitely be like a flag "are we using containers?" | 09:12 |
| *** ykarel|away has quit IRC | 09:12 | |
| Tengu | jaosorior: corrected - good catch :) https://gist.githubusercontent.com/cjeanner/db3ad5bffa0692898a5a81346b6416a9/raw/34674d297b2381851f177be8848f35c39a66937e/default.md | 09:12 |
| mandre | brb, school run | 09:12 |
| Tengu | mandre: seeing the name, I guess it's created in the prep_tasks as well. we might get a race condition. | 09:13 |
| Tengu | and that would be nasty as well :). | 09:13 |
| openstackgerrit | Merged openstack/instack-undercloud master: Update sample config https://review.openstack.org/561991 | 09:13 |
| jaosorior | Tengu: we could potentially change these tasks to run in deploy_step_tasks instead | 09:13 |
| jaosorior | we could run them in step 1 | 09:13 |
| jaosorior | but then we need to make sure that ansible runs before the containers are started | 09:14 |
| Tengu | prep_tasks seems the right place for many reasons | 09:14 |
| *** salmankhan has joined #tripleo | 09:14 | |
| openstackgerrit | Yurii Prokulevych proposed openstack/tripleo-upgrade master: Expose option to delete 'unused rpms' https://review.openstack.org/570873 | 09:16 |
| Tengu | so, will go for it. | 09:21 |
| openstackgerrit | Cédric Jeanneret proposed openstack/tripleo-heat-templates master: WIP - Manage public certificate with ansible https://review.openstack.org/570627 | 09:22 |
| *** aufi has quit IRC | 09:23 | |
| *** jtomasek has joined #tripleo | 09:24 | |
| openstackgerrit | Michele Baldessari proposed openstack/puppet-tripleo stable/queens: Lower the default stunnel log level https://review.openstack.org/571148 | 09:25 |
| *** salmankhan has quit IRC | 09:25 | |
| *** jtomasek has quit IRC | 09:25 | |
| Tengu | one thing would be soooo good with the CI: having the capability to just get one check running. | 09:25 |
| *** dr_gogeta86 has joined #tripleo | 09:25 | |
| *** dr_gogeta86 has quit IRC | 09:25 | |
| *** dr_gogeta86 has joined #tripleo | 09:25 | |
| Tengu | meaning zuul won't +1 nor -1 the review, but would just output the status of one single check.... | 09:26 |
| *** olap has joined #tripleo | 09:29 | |
| *** zoli is now known as zoli|lunch | 09:31 | |
| *** udesale_ has joined #tripleo | 09:31 | |
| *** olap has quit IRC | 09:32 | |
| *** udesale_ has quit IRC | 09:32 | |
| *** olap has joined #tripleo | 09:32 | |
| *** udesale_ has joined #tripleo | 09:32 | |
| *** udesale_ has quit IRC | 09:32 | |
| *** udesale_ has joined #tripleo | 09:33 | |
| *** udesale has quit IRC | 09:33 | |
| *** olap has quit IRC | 09:35 | |
| *** salmankhan has joined #tripleo | 09:35 | |
| *** olap has joined #tripleo | 09:35 | |
| *** olap_ has joined #tripleo | 09:36 | |
| *** olap_ has quit IRC | 09:36 | |
| openstackgerrit | Martin Mágr proposed openstack/puppet-tripleo master: Collectd QDR connection https://review.openstack.org/571152 | 09:36 |
| *** olap_ has joined #tripleo | 09:36 | |
| *** olap_ has quit IRC | 09:36 | |
| *** olap_ has joined #tripleo | 09:37 | |
| *** dtantsur|afk is now known as dtantsur | 09:38 | |
| *** olap__ has joined #tripleo | 09:38 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Remove ironic_host_manager usage https://review.openstack.org/565833 | 09:38 |
| openstackgerrit | Merged openstack/tripleo-common master: Use the standard messaging in the baremetal workbook https://review.openstack.org/552460 | 09:38 |
| openstackgerrit | Merged openstack/instack-undercloud master: Remove support for classic drivers https://review.openstack.org/567886 | 09:38 |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: Parameterized deployment hosts https://review.openstack.org/566752 | 09:38 |
| openstackgerrit | Merged openstack/tripleo-validations master: Fix documentations for pypi https://review.openstack.org/570954 | 09:38 |
| *** olap__ has quit IRC | 09:38 | |
| *** olap__ has joined #tripleo | 09:38 | |
| *** olap__ has quit IRC | 09:39 | |
| *** olap__ has joined #tripleo | 09:39 | |
| *** olap has quit IRC | 09:40 | |
| *** olap__ has quit IRC | 09:40 | |
| *** olap_ has quit IRC | 09:40 | |
| *** ubijtsa is now known as assassin | 09:42 | |
| *** salmankhan has quit IRC | 09:42 | |
| openstackgerrit | Wojciech Dec proposed openstack/tripleo-heat-templates master: Add site id parameter to cisco vts ml2 template https://review.openstack.org/571155 | 09:43 |
| openstackgerrit | Wojciech Dec proposed openstack/tripleo-heat-templates master: Add site id parameter to cisco vts ml2 template https://review.openstack.org/571155 | 09:46 |
| *** salmankhan has joined #tripleo | 09:47 | |
| openstackgerrit | Wojciech Dec proposed openstack/tripleo-heat-templates master: Add site id parameter to cisco vts ml2 template https://review.openstack.org/571155 | 10:01 |
| *** sanjayu_ has joined #tripleo | 10:01 | |
| openstackgerrit | Wojciech Dec proposed openstack/tripleo-heat-templates master: Add site id parameter to cisco vts ml2 template https://review.openstack.org/571155 | 10:01 |
| *** udesale__ has joined #tripleo | 10:02 | |
| *** udesale__ has quit IRC | 10:02 | |
| *** udesale has joined #tripleo | 10:03 | |
| *** udesale_ has quit IRC | 10:05 | |
| *** avivgt has joined #tripleo | 10:05 | |
| *** jaosorior has quit IRC | 10:14 | |
| *** thrash|g0ne is now known as thrash | 10:15 | |
| *** sri_ has quit IRC | 10:17 | |
| *** bkopilov_ has quit IRC | 10:18 | |
| *** psachin has joined #tripleo | 10:21 | |
| *** jaosorior has joined #tripleo | 10:31 | |
| *** lifeless_ has quit IRC | 10:32 | |
| *** psahoo has quit IRC | 10:36 | |
| *** aufi has joined #tripleo | 10:38 | |
| *** sanjayu_ has quit IRC | 10:39 | |
| *** gyankum has quit IRC | 10:41 | |
| *** ssbarnea_ has quit IRC | 10:42 | |
| d0ugal | Anyone got a moment to help me figure out why this failed? I can't spot it... http://logs.openstack.org/12/570712/2/check/tripleo-ci-centos-7-scenario003-multinode-oooq-container/0cde120/job-output.txt.gz | 10:42 |
| d0ugal | Looks like the overcloud deploy failed | 10:43 |
| d0ugal | http://logs.openstack.org/12/570712/2/check/tripleo-ci-centos-7-scenario003-multinode-oooq-container/0cde120/job-output.txt.gz#_2018-05-30_10_03_24_743844 | 10:43 |
| d0ugal | but why? | 10:43 |
| *** mrunge has joined #tripleo | 10:44 | |
| jaosorior | d0ugal: seems there was an issue with some workflow http://logs.openstack.org/12/570712/2/check/tripleo-ci-centos-7-scenario003-multinode-oooq-container/0cde120/logs/undercloud/home/zuul/overcloud_deploy.log.txt.gz#_2018-05-30_10_03_13 | 10:45 |
| *** saneax has quit IRC | 10:46 | |
| d0ugal | jaosorior: aha! | 10:47 |
| d0ugal | http://logs.openstack.org/12/570712/2/check/tripleo-ci-centos-7-scenario003-multinode-oooq-container/0cde120/logs/undercloud/var/log/mistral/engine.log.txt.gz#_2018-05-30_09_03_13_099 | 10:47 |
| jaosorior | oho | 10:48 |
| *** saneax has joined #tripleo | 10:48 | |
| *** mdnadeem_ has quit IRC | 10:51 | |
| d0ugal | I thought it was unrelated to the patch, but I think it is now very related :) | 10:51 |
| Tengu | humpf. doesn't seem to work as expected .- | 10:52 |
| d0ugal | Tengu: What doesn't? | 10:52 |
| Tengu | ah, my current patch, sorry | 10:52 |
| Tengu | d0ugal: thinking aloud. | 10:52 |
| d0ugal | :) | 10:52 |
| d0ugal | I never expect my patches to work, but that means they always work as expected... | 10:53 |
| *** sanjay__u has quit IRC | 10:54 | |
| Tengu | well, I'm trying a tricky thing, and apparently ansible isn't that happy to comply with my thoughts ;). | 10:54 |
| Tengu | nasty ansible. | 10:54 |
| Tengu | will probably need to do some ugly things in the end, and I hate doing ugly things. | 10:55 |
| *** morazi has quit IRC | 10:55 | |
| *** takashi has quit IRC | 10:57 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: DNM Testing 0 retry attempts https://review.openstack.org/567201 | 10:58 |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Set the initial attempt to 0 https://review.openstack.org/571169 | 10:58 |
| openstackgerrit | Cédric Jeanneret proposed openstack/tripleo-heat-templates master: WIP - Manage public certificate with ansible https://review.openstack.org/570627 | 10:59 |
| *** zoli|lunch is now known as zoli | 11:00 | |
| *** lifeless has joined #tripleo | 11:01 | |
| *** quiquell is now known as quiquell|lunch | 11:01 | |
| openstackgerrit | Jiri Stransky proposed openstack/tripleo-heat-templates master: [DNM] testing scenario upgrade job https://review.openstack.org/571171 | 11:02 |
| *** pradk has joined #tripleo | 11:04 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Remove the tripleo.container_images.prepare_upload action https://review.openstack.org/571172 | 11:06 |
| openstackgerrit | Alex Schultz proposed openstack/tripleo-common master: Fix heat api cfn healthcheck https://review.openstack.org/571173 | 11:06 |
| *** moguimar has joined #tripleo | 11:08 | |
| *** sri_ has joined #tripleo | 11:09 | |
| openstackgerrit | Marios Andreou proposed openstack/python-tripleoclient master: WIP Remove the --container-registry-file parameter from all clis https://review.openstack.org/570893 | 11:17 |
| *** ssbarnea_ has joined #tripleo | 11:19 | |
| *** shreshtha-away has quit IRC | 11:20 | |
| *** bfournie has quit IRC | 11:21 | |
| *** bfournie has joined #tripleo | 11:21 | |
| mwhahaha | chandankumar: any luck with the ocata undercloud tempest failures? | 11:23 |
| *** derekh has joined #tripleo | 11:25 | |
| *** pkovar has joined #tripleo | 11:26 | |
| *** bfournie has quit IRC | 11:26 | |
| *** ykarel has joined #tripleo | 11:28 | |
| *** udesale_ has joined #tripleo | 11:28 | |
| *** udesale has quit IRC | 11:31 | |
| *** udesale_ has quit IRC | 11:33 | |
| *** jpena is now known as jpena|lunch | 11:33 | |
| *** ansmith has quit IRC | 11:36 | |
| *** ykarel has quit IRC | 11:37 | |
| *** lifeless_ has joined #tripleo | 11:37 | |
| *** lifeless has quit IRC | 11:38 | |
| *** amoralej is now known as amoralej|lunch | 11:38 | |
| eric-young | If any core reviewers have a minute, my review needs a look and some workflow if good. https://review.openstack.org/#/c/563914/ | 11:40 |
| eric-young | thanks, that was quick! | 11:42 |
| openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-quickstart master: avoid ignore_errors on Check for processes owned by non-root user https://review.openstack.org/571176 | 11:50 |
| *** morazi has joined #tripleo | 11:54 | |
| *** gyankum has joined #tripleo | 11:54 | |
| *** dprince has joined #tripleo | 11:55 | |
| *** abishop has joined #tripleo | 11:56 | |
| *** rlandy has joined #tripleo | 11:56 | |
| *** raildo has joined #tripleo | 11:58 | |
| openstackgerrit | Sorin Sbarnea proposed openstack/tripleo-quickstart master: Avoid local working dir task failure on local without sudo https://review.openstack.org/571180 | 11:59 |
| jaosorior | #startmeeting TripleO Security Squad | 12:00 |
| openstack | Meeting started Wed May 30 12:00:28 2018 UTC and is due to finish in 60 minutes. The chair is jaosorior. Information about MeetBot at http://wiki.debian.org/MeetBot. | 12:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 12:00 |
| *** openstack changes topic to " (Meeting topic: TripleO Security Squad)" | 12:00 | |
| openstack | The meeting name has been set to 'tripleo_security_squad' | 12:00 |
| jaosorior | Will wait some minutes for more folks to log in | 12:00 |
| moguimar | o/ | 12:00 |
| jaosorior | hey moguimar, how's it going? | 12:00 |
| *** bfournie has joined #tripleo | 12:00 | |
| moguimar | struggling | 12:01 |
| raildo | o/ | 12:01 |
| jaosorior | moguimar: the oslo work? | 12:01 |
| openstackgerrit | Marios Andreou proposed openstack/python-tripleoclient master: WIP Remove the --container-registry-file parameter from all clis https://review.openstack.org/570893 | 12:01 |
| moguimar | that would be a good struggle | 12:01 |
| moguimar | my computer just hates me | 12:01 |
| jaosorior | :( | 12:02 |
| moguimar | today, for some reason it is forgetting about my user, at some point apps stop responding and `whoiam` doesn't knows my username | 12:02 |
| jaosorior | whaaa | 12:03 |
| *** rlandy is now known as rlandy|rover | 12:03 | |
| owalsh | o/ | 12:03 |
| moguimar | it doesn't even let me turn off or reboot the computer, as my user is unknown | 12:04 |
| jaosorior | that is quite strange :/ | 12:04 |
| jaosorior | Alright, I guess I'll start now | 12:04 |
| moguimar | thats what the guys from the SSSD team said | 12:04 |
| moguimar | sure | 12:04 |
| jaosorior | #link https://etherpad.openstack.org/p/tripleo-security-squad | 12:05 |
| jaosorior | As usual, the etherpad link is that one ^^ | 12:05 |
| jaosorior | #topic Public TLS by default work update | 12:05 |
| *** openstack changes topic to "Public TLS by default work update (Meeting topic: TripleO Security Squad)" | 12:05 | |
| jaosorior | Last week me and Tengu worked on getting public TLS by default for the overcloud | 12:06 |
| jaosorior | two main pieces are missing: | 12:06 |
| jaosorior | * tripleo-common patch with the logic to inject the certificate in the plan | 12:06 |
| jaosorior | * tripleo-heat-templates patch to make TLS the default | 12:06 |
| jaosorior | That main logic had merged at some point, but was reverted since making FQDNs the default broke Octavia (and potentially other components) | 12:07 |
| jaosorior | So, now we're looking into not using FQDNs by default, but instead rely on the IP | 12:07 |
| jaosorior | This requires us to have predictable public IPs for TripleO | 12:07 |
| jaosorior | we initially came up with https://review.openstack.org/#/c/569818/ | 12:07 |
| jaosorior | but upon more discussion with the community, we'll have to change the approach | 12:08 |
| jaosorior | so instead of doing everything in the deployment workflow in mistral | 12:08 |
| jaosorior | we'll add this code to the derive_parameters workflow | 12:08 |
| jaosorior | currently, that workflow is not ran by default, so the first step is to make it so | 12:08 |
| *** leitan has joined #tripleo | 12:09 | |
| jaosorior | jaganathan is helping out in that front. Once he gets that work done, we'll hook up the *FixedIPs parameters logic there, and subsequently the certificates as well | 12:09 |
| jaosorior | thanks jaganathan for helping out | 12:09 |
| *** panda|off is now known as panda | 12:10 | |
| jaganathan | jaosorior, welcome | 12:10 |
| jaosorior | any feedback/questions? | 12:11 |
| *** pdeore has quit IRC | 12:11 | |
| *** ratailor has quit IRC | 12:11 | |
| *** waleedm has quit IRC | 12:12 | |
| jaosorior | #topic Public TLS refactor | 12:12 |
| *** openstack changes topic to "Public TLS refactor (Meeting topic: TripleO Security Squad)" | 12:12 | |
| jaosorior | So, regarding this topic | 12:12 |
| jaosorior | public TLS in TripleO has for a long time relied on a custom resource that runs a specific script that injects the certs | 12:13 |
| jaosorior | this is kinda tricky as it's separate from the HAProxy service definition (even though that cert is only used by HAProxy) | 12:13 |
| openstackgerrit | Marios Andreou proposed openstack/tripleo-common master: WIP Remove container registry param from package_update_plan workflow https://review.openstack.org/571186 | 12:13 |
| jaosorior | and it had the limitation that we would only inject the certificate if the role had the tags 'primary' and 'controller' | 12:13 |
| jaosorior | now that we have config-download by default, we can instead just use ansible, and finally get rid of this script | 12:14 |
| jaosorior | So, Tengu started working on this, and has a WIP patch making this work | 12:14 |
| jaosorior | #link https://review.openstack.org/#/c/570627/ | 12:14 |
| jaosorior | big thanks to Tengu for taking on this work! It's great stuff and quite needed | 12:14 |
| *** eck`gone is now known as eck` | 12:15 | |
| jaosorior | so, this removes the tagging limitation, and is a cleaner implementation, since we will only get that cert where HAProxy is deployed | 12:15 |
| jaosorior | it also allows us to span HAProxy with TLS in multiple roles, so that's a nice feature too | 12:15 |
| jaosorior | So, if folks are interested in that work, please take a look at that patch | 12:15 |
| Tengu | :) | 12:16 |
| *** atoth has joined #tripleo | 12:16 | |
| *** quiquell|lunch is now known as quiquell | 12:17 | |
| jaosorior | #topic Kerberos auth for keystone update | 12:17 |
| *** openstack changes topic to "Kerberos auth for keystone update (Meeting topic: TripleO Security Squad)" | 12:17 | |
| jaosorior | I took shot at this work last week, by deploying keystone with an LDAP backend (FreeIPA being the LDAP server), and getting into the container and adding the needed packages/configuration | 12:18 |
| jaosorior | turns out that the keystone kerberos plugin is broken on the client side | 12:18 |
| jaosorior | reported the bug here | 12:18 |
| jaosorior | #link https://storyboard.openstack.org/#!/story/2002076 | 12:18 |
| *** pradk has quit IRC | 12:19 | |
| jaosorior | Pre-entively, I also did some patches to get the needed packages to the keystone container | 12:19 |
| jaosorior | #link https://review.openstack.org/569785 | 12:19 |
| jaosorior | #link https://review.openstack.org/570372 | 12:19 |
| jaosorior | They have merged in kolla | 12:19 |
| jaosorior | so, once we get a promotion of the containers | 12:19 |
| jaosorior | this will be easier to test out | 12:19 |
| jaosorior | hopefully we can get the bug fixed soon | 12:19 |
| jaosorior | doesn't seem to be too much work to get this working though | 12:19 |
| jaosorior | So, if anyone wants to take on this work, I can certainly guide on the needed next steps | 12:20 |
| jaosorior | any questions/feedback? | 12:20 |
| raildo | +2A for kerberos on Keystone :) | 12:21 |
| jaosorior | it'll be nice :) | 12:21 |
| raildo | that something that will benefit a bunch of services to be me independent in the authorization side | 12:21 |
| raildo | but maybe we will need some keystoneres feedback on it? | 12:22 |
| openstackgerrit | Carlos Camacho proposed openstack/instack-undercloud stable/newton: Removing packages when installing Undercloud in Newton https://review.openstack.org/570897 | 12:22 |
| raildo | anyway, I'll start review it soon :) | 12:22 |
| jaosorior | raildo: well, that's something that has already been done in keystone before. Where we would need keystoner's help is fixing https://storyboard.openstack.org/#!/story/2002076 | 12:23 |
| jaosorior | raildo: also, if you want to take a look at replicating this, let me know and I can guide you through it | 12:23 |
| raildo | jaosorior, that sounds interesting, I'll try to replicate that, we can sync about it after meeting | 12:24 |
| jaosorior | raildo: lets do that | 12:24 |
| jaosorior | #topic Any other business | 12:24 |
| *** openstack changes topic to "Any other business (Meeting topic: TripleO Security Squad)" | 12:24 | |
| jaosorior | Anything someone wants to bring up to the meeting? | 12:24 |
| Tengu | jaosorior: just digging a bit - (sorry, I'm late): https://ask.openstack.org/en/question/97078/keystone-kerberos-configuration/ might be a path using the apache kerberos mod? probably silly, but... | 12:25 |
| *** pchavva has joined #tripleo | 12:25 | |
| jaosorior | Tengu: that is indeed what I was testing out | 12:25 |
| Tengu | :] | 12:25 |
| jaosorior | Tengu: if you check the links that I posted above, the packages I added to kolla were mod_auth_gssapi (formerly mod_auth_kerb) | 12:26 |
| jaosorior | Tengu: and python-requests-kerberos | 12:26 |
| jaosorior | so yeah, ultimately httpd is what does all the heavy lifting | 12:26 |
| Tengu | yup, just saw that. my bad, should have checked before. | 12:26 |
| jaosorior | no biggie :) | 12:26 |
| *** toure|gone is now known as toure | 12:26 | |
| Tengu | also: my patch is once again in zuul, maybe it will succeed, even if I'm not happy with the solution for the gid -.-' | 12:27 |
| Tengu | anyway. | 12:27 |
| *** jpena|lunch is now known as jpena | 12:28 | |
| jaosorior | Tengu: it's the way it goes :/ | 12:28 |
| jaosorior | alright folks! | 12:28 |
| jaosorior | thanks for joining | 12:28 |
| jaosorior | #endmeeting | 12:29 |
| *** openstack changes topic to "Welcome to Rocky. CI status: GREEN as in Green Day | http://tripleo.org/ | https://docs.openstack.org/tripleo-docs/latest" | 12:29 | |
| openstack | Meeting ended Wed May 30 12:29:03 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 12:29 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-05-30-12.00.html | 12:29 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-05-30-12.00.txt | 12:29 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/tripleo_security_squad/2018/tripleo_security_squad.2018-05-30-12.00.log.html | 12:29 |
| *** udesale has joined #tripleo | 12:29 | |
| rlandy|rover | owalsh: dtantsur: hello - I am following up a ocata failure - which really could be infra related (note the non-consistent error) but I can't prove it as of yet. Pls can you review https://bugs.launchpad.net/tripleo/+bug/1774079 - do these failures look familiar as known ironic/nova issues? | 12:29 |
| openstack | Launchpad bug 1774079 in tripleo "[ocata promotion] phase1 (ci.centos) job tripleo-quickstart-promote-ocata-rdo_trunk-minimal fails introspection/deploy "No valid host found"" [Critical,Triaged] | 12:29 |
| dtantsur | rlandy|rover: "No conductor service registered which supports driver" in 90% cases means ironic-conductor crashed | 12:31 |
| * dtantsur -> lunch, brb | 12:31 | |
| *** trown|outtypewww is now known as trown | 12:31 | |
| rlandy|rover | dtantsur: k, will pick this up when you get back - about why conductor would be crashing | 12:32 |
| *** mvenesio has joined #tripleo | 12:37 | |
| *** ykarel has joined #tripleo | 12:38 | |
| *** eck` is now known as eck`gone | 12:38 | |
| *** eck`gone is now known as eck` | 12:38 | |
| *** lifeless_ has quit IRC | 12:41 | |
| *** amoralej|lunch is now known as amoralej | 12:41 | |
| owalsh | rlandy|rover, dtantsur: for the no valid hosts, looks like the profiles are not being set correctly. nodes have compute/control, deploy uses oooq_compute/oooq_control | 12:43 |
| owalsh | rlandy|rover: actaully, nope, flavor maps it from oooq_compute -> compute capabilite | 12:44 |
| rlandy|rover | owalsh: really, we don't have a consistent failure here - which makes it hard to RCA | 12:46 |
| rlandy|rover | but we have a job that does consistently fail | 12:46 |
| rlandy|rover | somehow similar pike jobs have no problem | 12:46 |
| rlandy|rover | the diff I do see is the driver - ipmi vs ipmitool | 12:47 |
| openstackgerrit | Nir Magnezi proposed openstack/tripleo-common stable/queens: Increase services project secgroup-rules quotas when deploying Octavia https://review.openstack.org/570759 | 12:47 |
| *** udesale has quit IRC | 12:47 | |
| rlandy|rover | but that works fine on OVB jobs ob RDO cloud - so I am a little lost here | 12:47 |
| *** udesale has joined #tripleo | 12:47 | |
| owalsh | rlandy|rover: looks like network errors in https://ci.centos.org/artifacts/rdo/jenkins-tripleo-quickstart-promote-ocata-rdo_trunk-minimal-352/undercloud/var/log/ironic/ironic-conductor.log.gz | 12:47 |
| openstackgerrit | John Fulton proposed openstack/tripleo-heat-templates stable/queens: Set default application for Ceph Luminous openstack_pools https://review.openstack.org/571196 | 12:49 |
| *** edmondsw has joined #tripleo | 12:50 | |
| rlandy|rover | I suppose that may explain the variability | 12:50 |
| rlandy|rover | but why only ocata? | 12:50 |
| *** Nexus has quit IRC | 12:50 | |
| rlandy|rover | arxcruz|ruck: ^^ I'm seriously considering changing the promotion criteria | 12:52 |
| rlandy|rover | we're 18 days out here | 12:53 |
| arxcruz|ruck | rlandy|rover: okay | 12:53 |
| *** mcornea has joined #tripleo | 12:55 | |
| Tengu | omg. my review hasn' crashed yet. I think I'm on the right track, jaosorior :D | 12:57 |
| jaosorior | woot woot! | 12:58 |
| openstackgerrit | Alex Schultz proposed openstack/tripleo-image-elements master: Fix readme formating issues https://review.openstack.org/570985 | 13:00 |
| *** mvenesio has quit IRC | 13:02 | |
| *** ansmith has joined #tripleo | 13:04 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Improve output when registering nodes. https://review.openstack.org/569811 | 13:04 |
| *** jcoufal has joined #tripleo | 13:05 | |
| *** olivierbourdon38 has left #tripleo | 13:07 | |
| *** tzumainn has joined #tripleo | 13:09 | |
| Tengu | \o/ some of the checks that were failing are succeeding now, jaosorior. Zull's still running, but I think it's OK now. Hopefully. | 13:09 |
| jaosorior | Tengu: alright, I'll check it out again in a bit | 13:10 |
| Tengu | :) feel free to add comments if needed, even for typo :). | 13:11 |
| *** leitan has quit IRC | 13:11 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Migrate to the new Mistral context class https://review.openstack.org/506186 | 13:11 |
| Tengu | I'll re-check the no_log thingy in order to ensure it won't output sensitive data. | 13:12 |
| jaosorior | Tengu: found an issue | 13:12 |
| Tengu | jaosorior: of course :). care to comment? | 13:13 |
| jaosorior | Tengu: i did already :D | 13:13 |
| Tengu | flash-man :D | 13:13 |
| *** ykarel_ has joined #tripleo | 13:13 | |
| Tengu | damn | 13:14 |
| Tengu | good catch | 13:14 |
| openstackgerrit | Tim Rozet proposed openstack/tripleo-heat-templates master: Add flag to enable QoS DSCP marking in ODL https://review.openstack.org/570859 | 13:14 |
| jaosorior | Tengu: the rest looks fine on a first read | 13:14 |
| Tengu | :) | 13:15 |
| Tengu | I let the run finish in order to ensure I didn't miss anything else - correction to your comment is ready, I'll push later. | 13:15 |
| *** ykarel has quit IRC | 13:16 | |
| *** lblanchard has joined #tripleo | 13:16 | |
| *** wolverineav has joined #tripleo | 13:18 | |
| *** ykarel_ is now known as ykarel | 13:21 | |
| *** cshastri has quit IRC | 13:23 | |
| *** shreshtha-away has joined #tripleo | 13:23 | |
| *** shreshtha-away has quit IRC | 13:25 | |
| *** shreshtha has joined #tripleo | 13:26 | |
| *** shreshtha has quit IRC | 13:26 | |
| *** leitan has joined #tripleo | 13:26 | |
| *** shreshtha has joined #tripleo | 13:26 | |
| *** anilvenkata has quit IRC | 13:28 | |
| Tengu | jaosorior: :] zuul caught your finding as well and wasn't happy with it. For now, this is the only failure. | 13:29 |
| Tengu | event rdo CI is 100% happy. | 13:29 |
| *** links has quit IRC | 13:29 | |
| *** links has joined #tripleo | 13:30 | |
| Tengu | jaosorior: btw, I think haproxy can take a directory as his TLS source :) | 13:32 |
| *** cshastri has joined #tripleo | 13:35 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Migrate to the new Mistral context class https://review.openstack.org/506186 | 13:38 |
| Tengu | mandre jistr small question: haproxy runs in a container, OK. but as what user? hopefully not root... ? although it has to in order to open port < 1024 I guess... | 13:38 |
| Tengu | (just checked: NOT root. yey!) | 13:40 |
| *** olap has joined #tripleo | 13:41 | |
| openstackgerrit | Dougal Matthews proposed openstack/tripleo-common master: Remove extra parenthesis from container-update.py https://review.openstack.org/571204 | 13:41 |
| *** ukalifon has quit IRC | 13:41 | |
| *** links has quit IRC | 13:44 | |
| *** bkopilov_ has joined #tripleo | 13:44 | |
| *** cshastri has quit IRC | 13:45 | |
| *** hjensas has quit IRC | 13:45 | |
| openstackgerrit | Cédric Jeanneret proposed openstack/tripleo-heat-templates master: Manage public certificate with ansible https://review.openstack.org/570627 | 13:46 |
| Tengu | being able to remove the "WIP" in the commit message is a great feeling | 13:46 |
| *** pradk has joined #tripleo | 13:53 | |
| rnoriega | hello guys! could please take a look at this? https://review.openstack.org/#/c/571121/ | 13:56 |
| rnoriega | it's just a cherry pick... the one in master is already merged | 13:56 |
| openstackgerrit | Marios Andreou proposed openstack/python-tripleoclient master: Remove --container-registry-file parameter from * upgrade clis https://review.openstack.org/570893 | 13:57 |
| *** gbarros has joined #tripleo | 13:58 | |
| openstackgerrit | Cédric Jeanneret proposed openstack/tripleo-heat-templates master: Manage public certificate with ansible https://review.openstack.org/570627 | 14:01 |
| Tengu | damned. find an error in some doc. | 14:01 |
| *** EmilienM_PTO is now known as EmilienM | 14:08 | |
| EmilienM | hi | 14:08 |
| Tengu | welcome back EmilienM | 14:08 |
| EmilienM | Tengu: thanks :) | 14:09 |
| *** nkinder_ has quit IRC | 14:10 | |
| openstackgerrit | Brent Eagles proposed openstack/tripleo-heat-templates master: Enable DVR on compute role to better support upgrading https://review.openstack.org/571210 | 14:11 |
| *** dciabrin has joined #tripleo | 14:11 | |
| *** dciabrin_ has quit IRC | 14:11 | |
| trozet | EmilienM: now you can remove your -2 on the ODL OOO CI patch :) | 14:11 |
| trozet | EmilienM: https://review.openstack.org/#/c/486905/ | 14:12 |
| EmilienM | trozet: will look | 14:12 |
| trozet | mwhahaha: can you please review https://review.openstack.org/#/c/570609/ when you have a minute | 14:13 |
| *** Guest62139 has quit IRC | 14:13 | |
| *** janki has quit IRC | 14:15 | |
| *** marios has quit IRC | 14:16 | |
| *** radek__ has quit IRC | 14:16 | |
| *** quiquell is now known as quique | 14:16 | |
| *** quique is now known as quiquell|off | 14:16 | |
| *** marios has joined #tripleo | 14:16 | |
| mwhahaha | trozet: it's in merge conflict | 14:17 |
| *** lblanchard has quit IRC | 14:17 | |
| *** flaper87 has joined #tripleo | 14:20 | |
| trozet | mwhahaha: weird ti doesnt say merge conflict | 14:24 |
| *** hjensas has joined #tripleo | 14:25 | |
| mwhahaha | trozet: i've got a giant red Cannot Merge | 14:25 |
| *** hjensas has quit IRC | 14:25 | |
| *** hjensas has joined #tripleo | 14:25 | |
| *** rajinir has joined #tripleo | 14:25 | |
| trozet | mwhahaha: i mean i am colorblind, but not seeing it | 14:25 |
| trozet | mwhahaha: i'll rebase it | 14:26 |
| *** skramaja has quit IRC | 14:29 | |
| *** moguimar has quit IRC | 14:32 | |
| *** masco has quit IRC | 14:32 | |
| myoung | mwhahaha: do you have a hot sec to chat with rlandy|rover and arxcruz|ruck? | 14:32 |
| mwhahaha | myoung: after cix meeting, gimme a few | 14:32 |
| *** rpioso|afk is now known as rpioso | 14:33 | |
| *** moguimar has joined #tripleo | 14:34 | |
| openstackgerrit | Tim Rozet proposed openstack/tripleo-heat-templates master: Add OPNFV scenario environment https://review.openstack.org/486905 | 14:35 |
| *** pblaho has quit IRC | 14:35 | |
| mwhahaha | trozet: i was talking about https://review.openstack.org/#/c/570609/ | 14:36 |
| trozet | mwhahaha: yeah me too, i dont see any cannot merge, but if i hit rebase button i see merge conflict | 14:37 |
| trozet | mwhahaha: must just be my gui is messed up | 14:37 |
| mwhahaha | is possible | 14:37 |
| myoung | mwhahaha, rlandy|rover, arxcruz|ruck we can just discuss in cix | 14:39 |
| arxcruz|ruck | myoung: indeed | 14:39 |
| *** moshele has quit IRC | 14:41 | |
| openstackgerrit | Ronelle Landy proposed openstack/tripleo-quickstart-extras master: DNM: Add doc for the libvirt reproducer https://review.openstack.org/566155 | 14:45 |
| openstackgerrit | Dougal Matthews proposed openstack/python-tripleoclient master: If there is an exception, always print the full traceback. https://review.openstack.org/523151 | 14:46 |
| d0ugal | mwhahaha: ^ I opened that patch before to try and help this problem, so we at least had more information to debug | 14:46 |
| d0ugal | Maybe I should try and continue with it | 14:46 |
| mwhahaha | d0ugal: sounds good | 14:46 |
| *** saneax has quit IRC | 14:47 | |
| mwhahaha | d0ugal: i was thinking about https://review.openstack.org/#/c/568837/ | 14:48 |
| EmilienM | chandankumar: did you have time to look at why containerized tempest fail https://review.openstack.org/#/c/560264/ ? | 14:48 |
| *** rbowen has quit IRC | 14:49 | |
| d0ugal | mwhahaha: I hadn't seen that one. Looks like it does something similar, but only in a couple of places. | 14:49 |
| openstackgerrit | James Slagle proposed openstack/tripleo-common master: Workflow and action for deployment failures https://review.openstack.org/567318 | 14:51 |
| d0ugal | rbrady,apetrich,thrash,toure,jtomasek: Workflow squad meeting in 7 mins. https://etherpad.openstack.org/p/tripleo-workflows-squad-status | 14:53 |
| *** ykarel is now known as ykarel|away | 14:53 | |
| toure | ack | 14:53 |
| *** aufi has quit IRC | 14:53 | |
| Tengu | mandre: shall we discuss your comment tomorrow? I'm not 100% sure to understand it, I'm in mtg right now and will need to leave right after it. In what TZ are you? you seems pretty near CET :) | 14:55 |
| *** vpickard is now known as vpickard_ | 14:56 | |
| *** paramite_ has quit IRC | 14:56 | |
| Tengu | see you tomorrow | 14:57 |
| mandre | Tengu: no problem at all, enjoy your evening! | 14:57 |
| mandre | we're in the same TZ i believe, GTM+2 | 14:58 |
| *** bfournie has quit IRC | 14:59 | |
| *** ykarel|away is now known as ykarel | 15:02 | |
| *** eck` is now known as eck`gone | 15:06 | |
| openstackgerrit | Harald Jensås proposed openstack/instack-undercloud stable/queens: Fix duplicate entries in /etc/sysconfig/iptables https://review.openstack.org/571222 | 15:07 |
| chandankumar | EmilienM: I tried that one with reproducer script but not able to reproduce on rdo cloud | 15:07 |
| EmilienM | chandankumar: it worked in rdo cloud? | 15:09 |
| chandankumar | EmilienM: yup | 15:11 |
| chandankumar | EmilienM: https://trello.com/c/SLuA6RMX/56-switch-fs010-multinode | 15:15 |
| EmilienM | chandankumar: ok | 15:16 |
| *** pkovar has quit IRC | 15:19 | |
| *** pkovar has joined #tripleo | 15:20 | |
| *** rfolco_ has joined #tripleo | 15:21 | |
| *** rfolco has quit IRC | 15:23 | |
| *** Guest48153 is now known as melwitt | 15:25 | |
| *** ansmith has quit IRC | 15:28 | |
| *** Nexus has joined #tripleo | 15:32 | |
| *** janki has joined #tripleo | 15:33 | |
| *** pcaruana has quit IRC | 15:33 | |
| openstackgerrit | Emilien Macchi proposed openstack/python-tripleoclient master: Mark upgrade_cleanup option as experimental https://review.openstack.org/571229 | 15:34 |
| *** udesale has quit IRC | 15:36 | |
| *** bfournie has joined #tripleo | 15:37 | |
| openstackgerrit | Emilien Macchi proposed openstack/tripleo-validations stable/queens: Fix documentations for pypi https://review.openstack.org/571231 | 15:38 |
| *** ansmith has joined #tripleo | 15:40 | |
| *** yprokule has quit IRC | 15:40 | |
| openstackgerrit | Marios Andreou proposed openstack/tripleo-docs master: Remove --container-registry-file parameter from upgrade docs https://review.openstack.org/570903 | 15:43 |
| *** udesale has joined #tripleo | 15:43 | |
| *** avivgt has quit IRC | 15:49 | |
| openstackgerrit | Merged openstack/instack master: Fix readme for package https://review.openstack.org/570981 | 15:49 |
| *** ykarel is now known as ykarel|away | 15:50 | |
| *** ansmith has quit IRC | 15:51 | |
| *** ansmith has joined #tripleo | 15:52 | |
| *** radek__ has joined #tripleo | 15:57 | |
| *** ykarel|away has quit IRC | 16:02 | |
| *** zoli is now known as zoli|gone | 16:04 | |
| *** zoli|gone is now known as zoli | 16:04 | |
| rnoriega | \o/ https://review.openstack.org/#/c/571121/ | 16:06 |
| rnoriega | :-D | 16:06 |
| *** moshele has joined #tripleo | 16:08 | |
| mwhahaha | arxcruz|ruck, rlandy|rover: can we fix the cmd2 for teh rdo-kolla-build-integration jobs, https://review.rdoproject.org/jenkins/job/rdo-kolla-build-integration/3596/console | 16:13 |
| * mwhahaha is unsure why we aren't getting the upper-constraints/global-requirements from upstream for that | 16:13 | |
| *** eck`gone is now known as eck` | 16:14 | |
| *** moshele has quit IRC | 16:14 | |
| *** saneax has joined #tripleo | 16:18 | |
| *** panda is now known as panda|off | 16:19 | |
| openstackgerrit | Marios Andreou proposed openstack/tripleo-common master: Remove container registry param from package_update_plan workflow https://review.openstack.org/571186 | 16:19 |
| openstackgerrit | James Slagle proposed openstack/python-tripleoclient master: openstack overcloud failures https://review.openstack.org/568673 | 16:22 |
| *** pcaruana has joined #tripleo | 16:23 | |
| chandankumar | mwhahaha: creating the env for the same, will take a look tonight | 16:23 |
| *** trown is now known as trown|lunch | 16:26 | |
| *** udesale has quit IRC | 16:26 | |
| *** marios has quit IRC | 16:27 | |
| *** salmankhan has quit IRC | 16:29 | |
| openstackgerrit | Tim Rozet proposed openstack/tripleo-heat-templates master: Add OPNFV scenario environment https://review.openstack.org/486905 | 16:30 |
| *** ffiore has quit IRC | 16:30 | |
| openstackgerrit | Alex Schultz proposed openstack/instack-undercloud stable/newton: Add constraints to stable/newton https://review.openstack.org/571249 | 16:35 |
| openstackgerrit | Alex Schultz proposed openstack/instack-undercloud stable/ocata: Add constraints to stable/ocata https://review.openstack.org/571250 | 16:36 |
| openstackgerrit | Alex Schultz proposed openstack/instack-undercloud stable/newton: Fix ntp configuration. https://review.openstack.org/570917 | 16:36 |
| *** eck` is now known as eck`gone | 16:37 | |
| *** khyr0n has joined #tripleo | 16:38 | |
| *** jpena is now known as jpena|off | 16:41 | |
| *** moshele has joined #tripleo | 16:47 | |
| openstackgerrit | Raoul Scarazzini proposed openstack/tripleo-ha-utils master: Fix Pacemaker NG test C inside the main task https://review.openstack.org/571254 | 16:48 |
| *** olap has quit IRC | 16:48 | |
| *** shreshtha has quit IRC | 16:48 | |
| *** rlandy|rover is now known as rlandy|rover|brb | 16:49 | |
| *** moshele has quit IRC | 16:51 | |
| *** jpena|off is now known as jpena | 16:52 | |
| alee_ | mcornea, so now that I'm back from summit -- what are we waiting on for the password change jobs? verification of the password change? can we start merging the patches (its an experimental job after al) and add the password verification afterwards? | 16:52 |
| *** gbarros has quit IRC | 16:53 | |
| openstackgerrit | Alex Schultz proposed openstack/instack-undercloud stable/newton: Add constraints to stable/newton https://review.openstack.org/571249 | 16:53 |
| mcornea | alee_: it's fine by me, let me vote on the tripleo-upgrade patch, it'll need one more core reviewer eyes | 16:53 |
| alee_ | mcornea, cool thanks | 16:55 |
| *** gbarros has joined #tripleo | 16:56 | |
| alee_ | mwhahaha, EmilienM ^^ a second pair of eyes on https://review.openstack.org/567300 perhaps? | 16:56 |
| *** pradk has quit IRC | 16:56 | |
| alee_ | I'll start rebasing the other patches too | 16:56 |
| alee_ | weshay, ^^ | 16:57 |
| *** holser__ has quit IRC | 16:57 | |
| openstackgerrit | Michele Baldessari proposed openstack/tripleo-quickstart master: Fix up pm_addr when undercloud_local_ip is specified https://review.openstack.org/571256 | 16:57 |
| *** rpioso is now known as rpioso|eat | 16:59 | |
| *** dtantsur is now known as dtantsur|afk | 17:00 | |
| *** derekh has quit IRC | 17:01 | |
| openstackgerrit | Alex Schultz proposed openstack/instack-undercloud stable/pike: Avoid tox_install.sh for constraints support https://review.openstack.org/571257 | 17:03 |
| *** pkovar has quit IRC | 17:04 | |
| Tengu | mandre: hmm yep, due to summer time I'm also +2 :). see you tomorrow then! | 17:05 |
| openstackgerrit | Alex Schultz proposed openstack/instack-undercloud stable/ocata: Avoid tox_install.sh for constraints support https://review.openstack.org/571258 | 17:05 |
| openstackgerrit | Alex Schultz proposed openstack/instack-undercloud stable/newton: Fix ntp configuration. https://review.openstack.org/570917 | 17:06 |
| *** radek__ has quit IRC | 17:06 | |
| * mwhahaha moves world around to fix old branches | 17:06 | |
| *** amoralej is now known as amoralej|off | 17:07 | |
| *** tesseract has quit IRC | 17:10 | |
| *** yamahata has joined #tripleo | 17:11 | |
| *** vpickard_ is now known as vpickard | 17:12 | |
| mwhahaha | arxcruz|ruck, rlandy|rover|brb: rdo cloud problems? | 17:15 |
| mwhahaha | https://logs.rdoproject.org/62/570462/1/openstack-check/gate-tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset035-master/Zf7b78415d2f347cbaee8859300a389af/undercloud/home/jenkins/overcloud_image_build.log.txt.gz#_2018-05-30_17_01_06 | 17:16 |
| mwhahaha | Resolving timed out after 10523 milliseconds | 17:16 |
| arxcruz|ruck | mwhahaha: hmmm, that's new, we saw some dns problems in the promoter server, but not in other instances of rdocloud | 17:17 |
| arxcruz|ruck | opening a lp | 17:17 |
| mwhahaha | arxcruz|ruck: EmilienM said he had dns problems on a fresh vm | 17:17 |
| EmilienM | I spawned a server 5 min ago and I couldn't ping google | 17:17 |
| EmilienM | I had to change DNS config | 17:17 |
| EmilienM | (note that I rebooted the server, got old dns config and it worked, so probably transient) | 17:17 |
| *** jpena is now known as jpena|off | 17:18 | |
| arxcruz|ruck | bug created | 17:19 |
| arxcruz|ruck | https://bugs.launchpad.net/tripleo/+bug/1774236 | 17:19 |
| openstack | Launchpad bug 1774236 in tripleo "Timeout while downloading image " [High,Triaged] | 17:19 |
| arxcruz|ruck | rlandy|rover|brb: ^ | 17:19 |
| *** moshele has joined #tripleo | 17:21 | |
| *** gyankum has quit IRC | 17:23 | |
| *** ansmith has quit IRC | 17:25 | |
| *** pradk has joined #tripleo | 17:25 | |
| *** ssbarnea_ has quit IRC | 17:27 | |
| *** waleedm has joined #tripleo | 17:29 | |
| alee_ | mwhahaha, responded to your comment in https://review.openstack.org/567300 | 17:29 |
| *** ledo_ has joined #tripleo | 17:29 | |
| alee_ | mwhahaha, its more of a pain, but I can use the mistral action if thats better .. | 17:30 |
| mwhahaha | alee_: so what's the use case for this? | 17:31 |
| mwhahaha | alee_: why can't we wrap it in an existing workflow to add it to the plan | 17:31 |
| *** jpich has quit IRC | 17:31 | |
| *** moshele has quit IRC | 17:32 | |
| mwhahaha | alee_: the thing about this role is that it can't be added to the UI. where as if you create a workflow to 1) generate passwords and 2) add it to the deployment plan, then it can be used by the cli/UI | 17:32 |
| *** waleedm has quit IRC | 17:33 | |
| *** dprince has quit IRC | 17:33 | |
| mwhahaha | alee_: i'm just not sure what this action has anything to do with tripleo-upgrade | 17:34 |
| alee_ | mwhahaha, well - it has to do with making config changes | 17:34 |
| mwhahaha | alee_: which has nothing to do with tripleo-upgrade | 17:35 |
| mwhahaha | alee_: this user action of 'change all the passwords' could be done via a workflow action and a plan update. we could create a new tripleoclient action to execute this | 17:36 |
| alee_ | mwhahaha, ok I'm happy to put it somewhere else if that makes more sense. mcornea ^^ | 17:39 |
| *** trown|lunch is now known as trown | 17:39 | |
| *** ansmith has joined #tripleo | 17:41 | |
| mcornea | mwhahaha: alee_ tripleo-upgrade was the closest test repo where we trigger this kind of post deployment actions | 17:42 |
| *** moshele has joined #tripleo | 17:45 | |
| *** ssbarnea_ has joined #tripleo | 17:45 | |
| alee_ | mcornea, mwhahaha right - I did not see any actions where we end up doing a re-deploy | 17:46 |
| *** rlandy|rover|brb is now known as rlandy|rover | 17:46 | |
| openstackgerrit | mathieu bultel proposed openstack/python-tripleoclient master: Fix local path for templates outside of the plan https://review.openstack.org/571270 | 17:47 |
| rlandy|rover | looking | 17:47 |
| rlandy|rover | arxcruz|ruck: https://review.rdoproject.org/jenkins/job/rdo-kolla-build-integration/ look sok now | 17:49 |
| *** gbarros has quit IRC | 17:50 | |
| *** gbarros has joined #tripleo | 17:50 | |
| mwhahaha | mcorena, alee_: so this kind of action is a day 2 op that we can roll into a workflow and expose to end users. I think we want to have a different place for these types of day 2 operations | 17:51 |
| alee_ | mwhahaha, where do you suggest? another repo? | 17:52 |
| mcornea | mwhahaha: alee_ so should we create a new test repo for day 2 operations? | 17:52 |
| *** gvrangan has joined #tripleo | 17:53 | |
| mwhahaha | Well the password rotate should be a function we automate | 17:53 |
| rlandy|rover | arxcruz|ruck, mwhahaha: ^^ kolla build is back on its feet - we chatted yesterday with dmanchad regarding dns issues we picked up | 17:53 |
| mwhahaha | And not in a test repo | 17:53 |
| rlandy|rover | we had no resolution at that point - I picked up the LP - possibly it's our dns server that is not working as it should | 17:53 |
| alee_ | so there are two parts to the password rotate -- 1) generate a new env file with passed in/ generated passwords 2) redeploy with new env file | 17:54 |
| alee_ | where should either/both of these actions live | 17:55 |
| alee_ | the re-deploy with new env file (which may include changes other than password changes) is a general thing | 17:56 |
| *** ledo__ has joined #tripleo | 17:56 | |
| *** psachin has quit IRC | 17:57 | |
| *** rpioso|eat is now known as rpioso | 17:58 | |
| gvrangan | trozet, hi | 17:58 |
| *** dprince has joined #tripleo | 17:58 | |
| *** ledo_ has quit IRC | 18:00 | |
| openstackgerrit | James Slagle proposed openstack/tripleo-common master: Add ssh_network input https://review.openstack.org/571276 | 18:01 |
| openstackgerrit | James Slagle proposed openstack/python-tripleoclient master: Add --overcloud-ssh-network https://review.openstack.org/571277 | 18:01 |
| alee_ | mwhahaha, mcornea just a note that the cofig_change code ended up in tripleo-upgrade because the code to do things like rewrite the overcloud-deploy script to include the new env files was there. | 18:04 |
| alee_ | how is tripleo-upgrade not a day 2 type of repo? | 18:04 |
| *** mvenesio has joined #tripleo | 18:05 | |
| *** abishop has quit IRC | 18:08 | |
| mwhahaha | alee_: because it's only for upgrades | 18:09 |
| *** pcaruana has quit IRC | 18:09 | |
| mcornea | alee_: mwhahaha yes, in general terms the upgrade is a day 2 operation with many specific things(previously deploy command with specific environment files, now cli commands) and we already have some helper code to allow easy run of overcloud deploy after the initial deployment. that's why I agreed to add the config changes to tripleo-upgrade. | 18:10 |
| alee_ | mwhahaha, mcornea so we want a another repo called tripleo-config-change? | 18:10 |
| *** ansmith has quit IRC | 18:10 | |
| *** rbrady is now known as rbrady-afk | 18:10 | |
| mwhahaha | alee_: I guess i'm missing what you're trying to accomplish | 18:10 |
| *** ansmith has joined #tripleo | 18:11 | |
| mwhahaha | alee_: for me, password rotation should be a workflow and triggered via cli/ui | 18:11 |
| *** ccamacho has quit IRC | 18:11 | |
| mwhahaha | alee_: that is not something that should exist as an ansible role in some day 2 repo. the ansible role could call the cli command itself, but it would not do the password setting like you have | 18:11 |
| mwhahaha | alee_: triple-upgrade has some extra bits consumed by upstream/downstream CI tooling, but is not a day-2 operation repo | 18:12 |
| mcornea | mwhahaha: so in this case what would trigger the workflow and verify that it did what it's supposed to do? | 18:12 |
| mwhahaha | mcornea: the verification can should be in an external framework of some sort | 18:12 |
| mwhahaha | the generate new passwords, update plan, push update out should be workflow driven | 18:13 |
| *** ledo__ has quit IRC | 18:13 | |
| mwhahaha | because that is an actual day2 operation by the end user | 18:13 |
| mcornea | mwhahaha: I guess that's what alee_ is looking for - the external framework | 18:13 |
| mwhahaha | we don't have one | 18:13 |
| mwhahaha | and tripleo-upgrade isn't that | 18:13 |
| mwhahaha | what you'd propose might be something that could be in a tripleo tempest test | 18:13 |
| *** paramite_ has joined #tripleo | 18:13 | |
| *** waleedm has joined #tripleo | 18:13 | |
| *** suuuper has quit IRC | 18:15 | |
| mcornea | I'm not sure tempest is suitable for this kind of thing: we'd need something that triggers the workflow which, wait for stack update to finish, then ssh to node(s) and check conf files/inspect db | 18:15 |
| mwhahaha | mcornea: right so we need a framework that does extend system testing that the upstream currently may not provide | 18:15 |
| mwhahaha | mcornea: alee_: what you're describe is something that aligns more with extended testing that we currently do not do upstream. From an upstream standpoint, I would be interested in rolling the actions you wish to test in a consumable funciton by end users, but the actual validation of this may not be possible in the upstream at this time | 18:16 |
| *** gfidente is now known as gfidente|pto | 18:17 | |
| *** gfidente|pto is now known as gfidente|afk | 18:17 | |
| alee_ | mwhahaha, but it certainly is possible using the current scenario based jobs -- https://review.openstack.org/#/c/567897/ | 18:17 |
| mwhahaha | alee_: yes it might be possible, but at that point the validation would be in oooq | 18:17 |
| mwhahaha | alee_: we've been investigating ansible day 2 operations in a role, but it is not currently under openstack, https://github.com/samdoran/ansible-role-openstack-operations | 18:18 |
| alee_ | mwhahaha, unless we continue with the current approach and put the vaildation in tripleo-upgrade | 18:18 |
| mwhahaha | alee_: so the password validations might be something to include in tripleo-validations | 18:19 |
| mwhahaha | alee_: where we check the plan, and make sure all the passwords have been updated | 18:19 |
| mwhahaha | alee_: so the action to change the passwords is workflow/cli driven, then tripleo-validations is used to make sure the passwords are what we expect | 18:19 |
| mwhahaha | alee_: but no, tripleo-upgrade is not the correct place for any of this | 18:19 |
| openstackgerrit | James Slagle proposed openstack/python-tripleoclient master: Add --config-download-only https://review.openstack.org/571279 | 18:19 |
| alee_ | mwhahaha, so let me see if I understand what you're suggesting .. | 18:22 |
| alee_ | in tripleo-common, we would add two new actions -- one to generate new passwords and put them in an env file, and one to perform a config-change | 18:24 |
| *** moshele has quit IRC | 18:24 | |
| alee_ | the config-change action would take a list of env files and re run the deploy script with those addtional env files appended | 18:24 |
| mwhahaha | i'm not sure we need a config-change action, as it's just a deploy with updated plan | 18:25 |
| alee_ | I see .. | 18:26 |
| mwhahaha | so i'd assume it'd be the following: 1) new workflow to generate passwords and put them into the plan, 2) new workflow to download passwords (so folks can extract them if this doesn't already exist). The cli/ui would call workflow 1) and run a deployment. This could be wrapped in single cmd line like 'openstack overcloud password-rotate' | 18:26 |
| *** waleedm has quit IRC | 18:28 | |
| mwhahaha | from a security standpoint it's likely that a customer would want to do this which is why i say it should be included in tripleo as a proper function | 18:28 |
| mwhahaha | and not some ansible bits | 18:28 |
| alee_ | ok - an then some kind of vslidation that the passwod have in fact been changed in tripleo-validations -- where we pass in a file of password changes .. | 18:29 |
| mwhahaha | the validation itself, is the trickier part on how we check the systems, but i think you could query the stack from tripleo-validations and then validate the passwords | 18:29 |
| alee_ | or maybe look at the plan | 18:29 |
| mwhahaha | you could probablyu do all the password validations from the plan as you'd have networks and endpoints, etc | 18:30 |
| alee_ | as to a job where all this comes together and is tested together -- thats TBD .. | 18:31 |
| mwhahaha | right | 18:31 |
| *** ssbarnea_ has quit IRC | 18:31 | |
| alee_ | mwhahaha, ok yeah - this is doable | 18:32 |
| alee_ | mwhahaha, the part I was missing before was redeploy == deploy with modified plan | 18:34 |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/queens: Add support of shared staging location for glance-direct https://review.openstack.org/570752 | 18:36 |
| openstackgerrit | Merged openstack/tripleo-common master: Set deployment_status from config_download_deploy https://review.openstack.org/566953 | 18:36 |
| openstackgerrit | Merged openstack/tripleo-common master: Add workflow for plan deployment status https://review.openstack.org/564315 | 18:36 |
| openstackgerrit | Merged openstack/python-tripleoclient master: overcloud plan deployment status https://review.openstack.org/564341 | 18:36 |
| mwhahaha | alee_: for example, we already do this with the fernet key rotation, https://github.com/openstack/tripleo-common/blob/master/workbooks/fernet-key-rotate.yaml | 18:38 |
| mwhahaha | alee_: where we create a workflow for some day2 operations. i think the password rotation should be done in a similar fashion | 18:39 |
| mwhahaha | alee_: the password rotation is slightly different in that it does need a full deployment rather than being able to adjust the files. but it's a similar thing where we'd want an operator to trigger some series of actions that we handle via mistral/etc | 18:39 |
| *** ayoung has joined #tripleo | 18:40 | |
| *** jcoufal_ has joined #tripleo | 18:40 | |
| *** jcoufal has quit IRC | 18:44 | |
| *** rwsu has quit IRC | 18:51 | |
| *** eck`gone is now known as eck` | 18:52 | |
| *** salmankhan has joined #tripleo | 18:53 | |
| openstackgerrit | James Slagle proposed openstack/tripleo-common master: Create config-download-latest symlink https://review.openstack.org/571281 | 18:53 |
| *** atoth has quit IRC | 18:55 | |
| openstackgerrit | James Slagle proposed openstack/tripleo-common master: Create config-download-latest symlink https://review.openstack.org/571281 | 18:56 |
| *** fragatina has quit IRC | 18:56 | |
| *** yolanda has joined #tripleo | 18:57 | |
| *** salmankhan has quit IRC | 18:57 | |
| *** moshele has joined #tripleo | 18:58 | |
| *** yolanda_ has quit IRC | 18:59 | |
| *** moshele has quit IRC | 19:05 | |
| *** janki has quit IRC | 19:08 | |
| *** moshele has joined #tripleo | 19:10 | |
| *** waleedm has joined #tripleo | 19:18 | |
| *** moshele has quit IRC | 19:19 | |
| *** abishop has joined #tripleo | 19:29 | |
| *** gfidente|afk has quit IRC | 19:31 | |
| *** lifeless has joined #tripleo | 19:31 | |
| *** ssbarnea_ has joined #tripleo | 19:33 | |
| *** wolverineav has quit IRC | 19:35 | |
| *** wolverineav has joined #tripleo | 19:35 | |
| *** wolverineav has quit IRC | 19:40 | |
| *** moshele has joined #tripleo | 19:44 | |
| openstackgerrit | James Slagle proposed openstack/python-tripleoclient master: openstack overcloud failures https://review.openstack.org/568673 | 19:45 |
| *** salmankhan has joined #tripleo | 19:46 | |
| *** moshele has quit IRC | 19:46 | |
| *** slaweq_ has joined #tripleo | 19:47 | |
| *** slaweq has quit IRC | 19:48 | |
| openstackgerrit | Alan Bishop proposed openstack/tripleo-heat-templates master: Reset Cinder RPC versions after upgrade https://review.openstack.org/571291 | 19:50 |
| *** raildo has quit IRC | 19:50 | |
| *** olap has joined #tripleo | 19:51 | |
| *** dparkes has joined #tripleo | 19:55 | |
| *** dparkes has quit IRC | 20:01 | |
| *** paramite_ has quit IRC | 20:05 | |
| openstackgerrit | Brent Eagles proposed openstack/tripleo-docs master: Deployment instructions for Octavia https://review.openstack.org/541833 | 20:06 |
| *** mvenesio has quit IRC | 20:08 | |
| *** mvenesio has joined #tripleo | 20:08 | |
| *** gvrangan has quit IRC | 20:09 | |
| *** ayoung has quit IRC | 20:11 | |
| *** mvenesio has quit IRC | 20:13 | |
| *** waleedm has quit IRC | 20:13 | |
| *** wolverineav has joined #tripleo | 20:13 | |
| *** waleedm has joined #tripleo | 20:13 | |
| *** moshele has joined #tripleo | 20:15 | |
| *** wolverin_ has joined #tripleo | 20:16 | |
| *** wolverineav has quit IRC | 20:16 | |
| *** moshele has quit IRC | 20:17 | |
| *** olap has quit IRC | 20:22 | |
| *** zshi has quit IRC | 20:24 | |
| *** zshi has joined #tripleo | 20:24 | |
| *** trown is now known as trown|outtypewww | 20:25 | |
| *** florianf has quit IRC | 20:34 | |
| *** ansmith has quit IRC | 20:35 | |
| *** morazi has quit IRC | 20:36 | |
| *** fragatina has joined #tripleo | 20:38 | |
| *** rwsu has joined #tripleo | 20:43 | |
| *** itlinux has joined #tripleo | 20:44 | |
| *** moshele has joined #tripleo | 20:48 | |
| *** radeks__ has quit IRC | 20:50 | |
| *** pchavva has quit IRC | 20:51 | |
| openstackgerrit | Bob Fournier proposed openstack/instack-undercloud master: Allow local_mtu to be set to value greater than default (1500) https://review.openstack.org/571307 | 20:52 |
| *** artom has quit IRC | 20:53 | |
| *** moshele has quit IRC | 20:56 | |
| *** waleedm has quit IRC | 20:58 | |
| *** moshele has joined #tripleo | 21:01 | |
| openstackgerrit | John Fulton proposed openstack/tripleo-quickstart master: Update featureset024 to use ceph-ansible for Pike https://review.openstack.org/570469 | 21:04 |
| openstackgerrit | mathieu bultel proposed openstack/python-tripleoclient master: Do not merged, test ci update job https://review.openstack.org/571313 | 21:08 |
| *** pradk has quit IRC | 21:08 | |
| *** bfournie has quit IRC | 21:11 | |
| openstackgerrit | John Fulton proposed openstack/tripleo-heat-templates stable/pike: WIP: Add CI/development block devices environment files https://review.openstack.org/570473 | 21:12 |
| *** ssbarnea_ has quit IRC | 21:14 | |
| *** moshele has quit IRC | 21:16 | |
| *** dprince has quit IRC | 21:24 | |
| *** lifeless has quit IRC | 21:26 | |
| *** lifeless_ has joined #tripleo | 21:26 | |
| *** salmankhan has quit IRC | 21:29 | |
| *** ansmith has joined #tripleo | 21:35 | |
| *** mcornea has quit IRC | 21:36 | |
| *** lifeless has joined #tripleo | 21:38 | |
| *** lifeless_ has quit IRC | 21:38 | |
| *** mcornea has joined #tripleo | 21:39 | |
| *** jcoufal_ has quit IRC | 21:41 | |
| *** itlinux has quit IRC | 21:43 | |
| *** abishop has quit IRC | 21:43 | |
| *** fragatina has quit IRC | 21:46 | |
| *** fragatina has joined #tripleo | 21:46 | |
| openstackgerrit | Ben Nemec proposed openstack/tripleo-quickstart master: Run Designate tempest test in scenario003 https://review.openstack.org/571321 | 21:57 |
| *** lifeless has quit IRC | 22:03 | |
| openstackgerrit | Merged openstack/tripleo-ha-utils master: Fix Pacemaker NG test C inside the main task https://review.openstack.org/571254 | 22:03 |
| *** lifeless has joined #tripleo | 22:04 | |
| openstackgerrit | Merged openstack/puppet-tripleo stable/queens: Lower the default stunnel log level https://review.openstack.org/571148 | 22:19 |
| *** rcernin has joined #tripleo | 22:22 | |
| *** rlandy|rover is now known as rlandy|rover|bbl | 22:23 | |
| *** slaweq_ has quit IRC | 22:30 | |
| *** slaweq has joined #tripleo | 22:30 | |
| *** lifeless has quit IRC | 22:33 | |
| *** slaweq has quit IRC | 22:34 | |
| *** lifeless has joined #tripleo | 22:35 | |
| *** mcornea has quit IRC | 22:41 | |
| *** wolverin_ has quit IRC | 22:45 | |
| *** wolverineav has joined #tripleo | 22:45 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/queens: Remove CephAnsiblePlaybook parameter reset from ceph-ansible env files https://review.openstack.org/570820 | 22:48 |
| openstackgerrit | Merged openstack/tripleo-heat-templates stable/queens: Disable StrictHostKeyChecking when removing keys too https://review.openstack.org/570932 | 22:48 |
| *** wolverineav has quit IRC | 22:50 | |
| *** bfournie has joined #tripleo | 22:52 | |
| *** lblanchard has joined #tripleo | 22:52 | |
| openstackgerrit | Merged openstack/tripleo-heat-templates master: gnocchi: add missing /var/lib/gnocchi https://review.openstack.org/570580 | 22:52 |
| *** edmondsw has quit IRC | 22:52 | |
| *** edmondsw has joined #tripleo | 22:53 | |
| *** edmondsw has quit IRC | 22:57 | |
| *** tosky has quit IRC | 23:04 | |
| *** thrash is now known as thrash|g0ne | 23:06 | |
| *** lblanchard has quit IRC | 23:08 | |
| *** lifeless has quit IRC | 23:11 | |
| *** pmannidi has quit IRC | 23:13 | |
| *** wolverineav has joined #tripleo | 23:18 | |
| *** lblanchard has joined #tripleo | 23:28 | |
| *** jbcraig has quit IRC | 23:29 | |
| *** vpickard is now known as vpickard_ | 23:30 | |
| *** jbcraig has joined #tripleo | 23:30 | |
| *** saneax has quit IRC | 23:33 | |
| *** sanjayu_ has joined #tripleo | 23:33 | |
| *** jbcraig has quit IRC | 23:34 | |
| openstackgerrit | James Slagle proposed openstack/python-tripleoclient master: openstack overcloud failures https://review.openstack.org/568673 | 23:36 |
| *** toure is now known as toure|gone | 23:41 | |
| *** lifeless has joined #tripleo | 23:41 | |
| openstackgerrit | Honza Pokorny proposed openstack/tripleo-common master: Don't overwrite container defaults when creating a plan https://review.openstack.org/571334 | 23:48 |
| *** rpioso is now known as rpioso|afk | 23:55 | |
| *** lifeless has quit IRC | 23:58 | |
| *** lifeless has joined #tripleo | 23:59 | |
| *** artom has joined #tripleo | 23:59 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!