| *** rlandy is now known as rlandy|out | 00:41 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-tripleo master: WIP: Generate config file for Ephemeral heat https://review.opendev.org/c/openstack/puppet-tripleo/+/857531 | 01:32 |
|---|---|---|
| opendevreview | Takashi Kajinami proposed openstack/tripleo-heat-templates master: WIP: Generate config file for Ephemeral heat https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857532 | 01:36 |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: Use local socket to check mysql status https://review.opendev.org/c/openstack/python-tripleoclient/+/857533 | 01:51 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-ansible master: Add Neutron API standalone role https://review.opendev.org/c/openstack/tripleo-ansible/+/857252 | 02:10 |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: Use local socket to check mysql status https://review.opendev.org/c/openstack/python-tripleoclient/+/857533 | 02:38 |
| opendevreview | Harald Jensås proposed openstack/openstack-virtual-baremetal master: dhcp-relay - CentOS Stream 9 https://review.opendev.org/c/openstack/openstack-virtual-baremetal/+/857537 | 02:42 |
| opendevreview | Harald Jensås proposed openstack/openstack-virtual-baremetal master: ipv6-radvd - CentOS Stream 9 https://review.opendev.org/c/openstack/openstack-virtual-baremetal/+/857538 | 02:42 |
| opendevreview | Harald Jensås proposed openstack/openstack-virtual-baremetal master: dhcpv6-relay - CentOS Stream 9 https://review.opendev.org/c/openstack/openstack-virtual-baremetal/+/857539 | 02:42 |
| lecris[m] | Why are RDO's CIs erroring out so often? https://review.rdoproject.org/zuul/build/52d461014bfc41b6b29ba1c29326579f | 04:07 |
| ramishra | lecris[m]: we face some mirror issues from time to time and this seems to be one of them | 04:10 |
| ramishra | https://logserver.rdoproject.org/36/857336/1/openstack-check/tripleo-ci-centos-9-ovb-3ctlr_1comp_1supp-featureset039/52d4610/logs/undercloud/home/zuul/install_packages.sh.log.txt.gz | 04:10 |
| lecris[m] | Guess it's just my luck that 5/5 CIs there errored out on me | 04:11 |
| lecris[m] | ramishra: Oh that issue I understand, I had it happen to me 30% on actual deployments. | 04:14 |
| lecris[m] | But time-out issues like these are the ones that baffle me: | 04:14 |
| lecris[m] | https://logserver.rdoproject.org/36/857336/1/openstack-check/tripleo-ci-centos-9-ovb-3ctlr_1comp-featureset001/a0a8795/logs/undercloud/home/zuul/overcloud_node_provision.log.txt.gz | 04:14 |
| ramishra | lecris[m]: Also, AFAIK ovb jobs are little unstable with few issues atm that we're looking into | 04:14 |
| ramishra | yeah | 04:14 |
| lecris[m] | Oh | 04:15 |
| lecris[m] | Well, anyway, going to try debug the last issue with my lab's deployment | 04:17 |
| opendevreview | Rabi Mishra proposed openstack/python-tripleoclient master: Don't do setup for tripleo-admin overcloud-ssh-user https://review.opendev.org/c/openstack/python-tripleoclient/+/857543 | 04:29 |
| opendevreview | chandan kumar proposed openstack/tripleo-quickstart-extras master: Initial playbook to compute node using standalone ansible playbook https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/843835 | 04:37 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-tripleo master: Generate config file for Ephemeral heat https://review.opendev.org/c/openstack/puppet-tripleo/+/857531 | 04:58 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-heat-templates master: Generate config file for ephemeral heat https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857532 | 05:04 |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: Use local socket to check mysql status https://review.opendev.org/c/openstack/python-tripleoclient/+/857533 | 05:08 |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: Replace hiera CLI by the generated config file https://review.opendev.org/c/openstack/python-tripleoclient/+/857552 | 05:08 |
| lecris[m] | bshephar: is ironic + tls-e been tested recently? I have the following error in my deployment related to neutron-ovn communication. Any hints on how to debug that are appreciated. | 05:08 |
| lecris[m] | https://bugs.launchpad.net/tripleo/+bug/1989535 | 05:08 |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: Replace hiera CLI by the generated config file https://review.opendev.org/c/openstack/python-tripleoclient/+/857552 | 05:08 |
| opendevreview | Luca Miccini proposed openstack/tripleo-heat-templates stable/wallaby: Remove argument to ssh-keygen for key size https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857475 | 05:33 |
| opendevreview | Yadnesh Kulkarni proposed openstack/tripleo-heat-templates stable/wallaby: Correct label for /run/libvirt https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857476 | 05:42 |
| bshephar | lecris[m]: I doubt we would have enough hardware in the opendev pool to test Ironic on the overcloud in CI tbh. | 05:50 |
| bshephar | I don't think there are any scenarios for it in CI | 05:50 |
| lecris[m] | Understandable. But any hints on what can cause `Operation not permitted` on the `ovsdb`? | 05:51 |
| *** ysandeep|out is now known as ysandeep | 05:52 | |
| lecris[m] | `Could not retrieve schema from ssl:192.168.2.79:6642: Operation not permitted` | 05:53 |
| lecris[m] | Or how to manually perform a `get_schema` request via curl to the `ovsdb`? | 05:55 |
| bshephar | Not too sure. Possibly Neutron can't validate the TLS cert being used | 05:55 |
| bshephar | Maybe exec into the ovn-dbs container and run ovn-nbctl get-ssl | 05:57 |
| lecris[m] | That would be my guess because it only occurs on tls-e, and I did change the path to the `InternalTLSCAFile` from the `/etc/ipa/ca.crt` | 05:57 |
| lecris[m] | Ok, let me try that | 05:57 |
| bshephar | I wonder if the Neutron container is mounting that cert. Might be missing from the containers trusts or something | 05:58 |
| lecris[m] | Checked that, it did mount it | 05:58 |
| opendevreview | Yadnesh Kulkarni proposed openstack/tripleo-heat-templates stable/wallaby: Correct label for /run/libvirt https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857476 | 05:58 |
| bshephar | Only with tls-e + Overcloud Ironic? Or it happens with just tls-e | 05:58 |
| lecris[m] | Dunno if the correct CA was written to the config file though | 05:59 |
| lecris[m] | bshephar: I believe it is with ironic, but going to need to run it again without to confirm. | 05:59 |
| lecris[m] | The error is on ml2 plugin, so I think it is there | 06:00 |
| bshephar | hmm, be weird if it's because of Ironic. Seems like it would be an issue all the time with tls-e. | 06:00 |
| lecris[m] | bshephar: Is there supposed to be some output to stdout? | 06:01 |
| lecris[m] | `sudo podman exec -ti ovn_cluster_north_db_server /bin/bash` This how I'm getting a bash console in | 06:02 |
| bshephar | Yeah, I guess you should get something like this: | 06:02 |
| bshephar | # ovn-nbctl get-ssl | 06:02 |
| bshephar | > > Private key: /etc/openvswitch/ovncert/ovnnb-privkey.pem | 06:02 |
| bshephar | > > Certificate: /etc/openvswitch/ovncert/ovnnb-cert.pem | 06:02 |
| bshephar | > > CA Certificate: /etc/openvswitch/cacert.pem | 06:02 |
| bshephar | > > Bootstrap: false | 06:02 |
| bshephar | But I don't have a ssl env to verify that with atm | 06:02 |
| lecris[m] | It's empty for me ... | 06:02 |
| bshephar | How about ovs-vsctl get open . external_ids from the host itself | 06:03 |
| bshephar | Does you ovn-remote have ssl or tcp like this: ovn-remote="tcp:172.16.2.85:6642" | 06:03 |
| lecris[m] | `ovn-remote="ssl:192.168.2.79:6642"` | 06:04 |
| lecris[m] | But also `openssl s_client` detects the certificates on that port | 06:05 |
| bshephar | Ah ok cool. So it is configured to use TLS, that's good. Rules out misconfiguration of the endpoint at least. | 06:07 |
| bshephar | What does the process look like in ps? podman exec -it ovn_cluster_north_db_server ps -auwwwx | 06:09 |
| bshephar | Should have all the certs there I think. | 06:09 |
| lecris[m] | One issue I see, it does not link to the new ca cert | 06:10 |
| bshephar | And does the ml2 config have the CA defined? https://docs.openstack.org/networking-ovn/stein/configuration/ml2_conf.html#ovn.ovn_nb_ca_cert | 06:10 |
| * lecris[m] sent a code block: https://matrix.org/_matrix/media/r0/download/matrix.org/zjLJzNPanJsvsIAJlecGjBLy | 06:10 | |
| bshephar | Looks like it's using the right CA there? --ca-cert=/etc/ipa/ca.crt | 06:11 |
| lecris[m] | I have copied to `.../ca2.crt` to fix another issue | 06:11 |
| lecris[m] | `/etc/ipa/ca.crt` is default, hopefully not hard-coded | 06:12 |
| lecris[m] | `ovn_nb_ca_cert=/etc/pki/CA/certs/ca2.crt` is the correct configuration on this one | 06:12 |
| lecris[m] | Mount looks normal ` --volume "/etc/pki/CA/certs/ca2.crt:/etc/pki/CA/certs/ca2.crt:ro",` | 06:13 |
| lecris[m] | ( from `sudo podman inspect ovn_cluster_north_db_server | jq -C '.[0].Config.CreateCommand'`) | 06:13 |
| lecris[m] | So somewhere in the configuration it uses a wrong configuration | 06:14 |
| bshephar | Ok, so just for my understanding. The /etc/ipa/ca.crt that has been mounted into the OVN containers is the wrong one, and it should instead be this ca2.crt one? | 06:15 |
| bshephar | And you defined ca2.crt as you InternalTLSCAFile in your templates | 06:15 |
| lecris[m] | Yes, but clarification the mounting part is not the problem because it mounts `ca2.crt` | 06:16 |
| bshephar | Ok, so just whatever sets the startup command / ssl config for OVN is the problem then | 06:18 |
| lecris[m] | Indeed, where is the kolla/puppet command for that? | 06:18 |
| bshephar | Seems like it should be ok: https://github.com/openstack/tripleo-heat-templates/blob/master/deployment/ovn/ovn-controller-container-puppet.yaml#L323-L332 | 06:19 |
| *** amoralej|off is now known as amoralej | 06:19 | |
| bshephar | Does the command look right in your kolla_config file? https://github.com/openstack/tripleo-heat-templates/blob/master/deployment/ovn/ovn-controller-container-puppet.yaml#L322 | 06:20 |
| lecris[m] | `"command": "bash -c $* -- eval source /etc/sysconfig/ovn_cluster; exec /usr/local/bin/start-nb-db-server ${OVN_NB_DB_OPTS}", | 06:21 |
| lecris[m] | ` | 06:21 |
| lecris[m] | Dunno it's in environment variables | 06:22 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-ansible master: New roles for apache/httpd management https://review.opendev.org/c/openstack/tripleo-ansible/+/853481 | 06:22 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-heat-templates master: Copy ssh_keys from mistral environment locally https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857554 | 06:23 |
| lecris[m] | `ovn_controller.json` yes | 06:23 |
| lecris[m] | Oh wait scratch that | 06:23 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-ansible master: New tripleo_ironic role https://review.opendev.org/c/openstack/tripleo-ansible/+/855873 | 06:23 |
| lecris[m] | It's the wrong value | 06:23 |
| lecris[m] | *Or it might be another deploy that is overriding it atm | 06:24 |
| bshephar | So, in /var/lib/kolla/config_files/ovn_controller.json it has the wrong ca cert argument? | 06:24 |
| lecris[m] | I was having a re-deployment over it, so I can't tell right now | 06:25 |
| bshephar | Ok no worries. Maybe double check after your deployment and if you can attach that to the Bug you raised? | 06:26 |
| lecris[m] | It did not restart the container so let me check the running one | 06:26 |
| lecris[m] | bshephar: Update, `ovn_controller.json` is correct | 06:28 |
| lecris[m] | My concern is with `ovn_cluster_north_db_server.json` | 06:29 |
| lecris[m] | It is using environment variables | 06:29 |
| lecris[m] | "command": "bash -c $* -- eval source /etc/sysconfig/ovn_cluster; exec /usr/bin/ovn-northd ${OVN_NORTHD_OPTS}" | 06:30 |
| lecris[m] | And north container has the wrong ca | 06:30 |
| bshephar | Ahh of course. We're not looking at ovn_controller. My mistake | 06:32 |
| opendevreview | Rabi Mishra proposed openstack/python-tripleoclient master: Look for keys in the new default work dir https://review.opendev.org/c/openstack/python-tripleoclient/+/857556 | 06:33 |
| opendevreview | chandan kumar proposed openstack/tripleo-common master: Add an Ansible execution environment to our Build https://review.opendev.org/c/openstack/tripleo-common/+/776674 | 06:33 |
| bshephar | This is the one we should be looking at sorry: https://github.com/openstack/tripleo-heat-templates/blob/master/deployment/ovn/ovn-dbs-cluster-ansible.yaml#L137 | 06:34 |
| bshephar | Ok, so whats in that /etc/sysconfig file then | 06:34 |
| lecris[m] | `ovn_cluster` has the wrong values | 06:35 |
| bshephar | Ok, that narrows it down. So that happens here: https://github.com/openstack/tripleo-ansible/blob/754155b07c8c2fd9f1577d2ad1009f51cc7a0012/tripleo_ansible/roles/tripleo_ovn_cluster/tasks/main.yml#L41-L49 | 06:36 |
| bshephar | Can you share the contents of that ovn_cluster file? | 06:37 |
| bshephar | https://github.com/openstack/tripleo-ansible/blob/754155b07c8c2fd9f1577d2ad1009f51cc7a0012/tripleo_ansible/roles/tripleo_ovn_cluster/templates/ovn_cluster.j2 | 06:37 |
| lecris[m] | https://github.com/openstack/tripleo-ansible/blob/754155b07c8c2fd9f1577d2ad1009f51cc7a0012/tripleo_ansible/roles/tripleo_ovn_cluster/defaults/main.yml#L46 | 06:37 |
| lecris[m] | This is the same as what I had to do for https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857336 | 06:38 |
| bshephar | Yeah, I think I see the problem | 06:39 |
| bshephar | I'll push a patchset in just a minute | 06:40 |
| lecris[m] | Thanks for the help on this one | 06:40 |
| bshephar | No worries. Thanks for raising attention to the issue. | 06:43 |
| opendevreview | Jaganathan Palanisamy proposed openstack/tripleo-ansible master: Derive parameters clean up https://review.opendev.org/c/openstack/tripleo-ansible/+/851198 | 06:44 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-quickstart-extras master: Create a yaml with custom CI rules for Firewall https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096 | 06:45 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates stable/train: Fix tls-e CA cert declaration for OVN https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857558 | 06:47 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates stable/train: Fix tls-e CA cert declaration for OVN https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857558 | 06:48 |
| bshephar | lecris[m]: Did you want to try with: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857558/2/deployment/ovn/ovn-dbs-cluster-ansible.yaml | 06:48 |
| lecris[m] | There are 2 more of them. how about defaulting to `{{ tripleo_internal_tls_ca_file|default('/etc/ipa/ca.crt') }}` | 06:49 |
| lecris[m] | Oh, you patched thos as well | 06:49 |
| lecris[m] | Ok, let me give it a spin | 06:49 |
| bshephar | Yeah, I saved the file after I fixed the first one and typed the commit message. Then forgot to save again before reviewing. :p But patchset 2 should cover it | 06:50 |
| lecris[m] | Get back to you in 30 min | 06:52 |
| lecris[m] | Unrelated, but would this issue be the cause of horizon giving 503 or there's another issue there? | 06:54 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ci master: Add script to irrelevant files https://review.opendev.org/c/openstack/tripleo-ci/+/857560 | 06:55 |
| lecris[m] | The only other similar part that could need this patch is `tripleo_frr` but I don't know what that is | 06:55 |
| lecris[m] | https://github.com/openstack/tripleo-ansible/blob/89fb1793a8ce4159c8682303d5a4140ca1a7dd9d/tripleo_ansible/roles/tripleo_frr/defaults/main.yml#L73 | 06:56 |
| bshephar | lecris[m]: I'll take a look at that one too. It could be causing 503 issues from some components of Horizon, but I would expect Horizon itself to still work | 06:59 |
| bshephar | I'll have to take a look later, need to help get a baby ready for dinner and start the night time routine. But I'll be back later this evening | 07:00 |
| lecris[m] | 👍️ | 07:00 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-tripleo master: Generate config file for Ephemeral heat https://review.opendev.org/c/openstack/puppet-tripleo/+/857531 | 07:00 |
| shyamb | Hi | 07:01 |
| lecris[m] | Hello | 07:02 |
| shyamb | We would like to run a service on particular controller node. | 07:02 |
| shyamb | Is it possible? | 07:02 |
| shyamb | It's a heat service like any other openstack service. | 07:02 |
| lecris[m] | An additional service other than what's in Controller role? | 07:02 |
| shyamb | yes | 07:03 |
| shyamb | it's a third party service | 07:03 |
| lecris[m] | You could copy the Controller role and add it there | 07:03 |
| shyamb | If I add it in controller role, it will run on all controller nodes | 07:03 |
| shyamb | I would like to run it on a specific controller node only. I an take it's hostname as input from user | 07:04 |
| lecris[m] | Copy and rename the role of course | 07:04 |
| shyamb | Okay | 07:04 |
| shyamb | So two roles will be assigned to that controller node. Controller and Our role | 07:04 |
| shyamb | Does it work? | 07:05 |
| shyamb | Two roles to single node | 07:05 |
| lecris[m] | I don't think so. I am deploying on baremetal so in my case I edit it in `baremetal_deployment.yaml` | 07:05 |
| lecris[m] | I don't know the equivalent for quickstart and already deployed | 07:06 |
| tkajinam | shyamb, in case you run that service only in one of the controller nodes then use pacemaker | 07:07 |
| tkajinam | as is done for some services like c-vol | 07:07 |
| bshephar | shyamb: Na, can't do two roles on a node. If you just wanted a single node to run a service, you would need to create a composable role and just assign a single node to it. | 07:07 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-heat-templates master: Copy ssh_keys from mistral environment locally https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857554 | 07:08 |
| bshephar | lecris[m]: Yeah, I think that one probably needs the CA variable defined too. I'll do that tonight as well | 07:08 |
| lecris[m] | 👍️ | 07:08 |
| lecris[m] | tkajinam: It's a heat role already so might be difficult to add it in pacemaker? | 07:09 |
| lecris[m] | But shyamb you can have different flavours of Controller like 1 Controller and 1 ControllerAllNovaStandalone for example | 07:10 |
| tkajinam | lecris[m], we can add a new service which deploys that service as a pacemaker-managed service and add that to the controller node or any other customized role which replaces the controller role | 07:10 |
| lecris[m] | This would be after `overcloud deploy` is susscessful? | 07:11 |
| tkajinam | you might be able to mix up the normal controller node and your own controller node in a single cluster but in that case if the node with customized role goes down then you lose that service | 07:11 |
| tkajinam | in case you already have it deployed then use the controller role | 07:11 |
| tkajinam | it should add the additional service as long as you implement it correctly | 07:12 |
| *** jm1|ruck is now known as jm1|rover | 07:12 | |
| lecris[m] | There's no `openstack xxx` command to manipulate pacemaker like you suggest right? | 07:12 |
| opendevreview | mbu proposed openstack/validations-libs master: Test ansible-runner containerized AEE https://review.opendev.org/c/openstack/validations-libs/+/857561 | 07:12 |
| tkajinam | modify your roles_data.yaml and adds the resource template and the environment file to enable the service. then run overcloud deploy with modified template | 07:13 |
| tkajinam | * templates | 07:13 |
| opendevreview | yatin proposed openstack/tripleo-upgrade master: Honor undercloud_custom_env_files for oooq deployments https://review.opendev.org/c/openstack/tripleo-upgrade/+/853589 | 07:13 |
| shyamb | I am going through your replies. | 07:13 |
| shyamb | lecris: tkajinam: bshephar: Thank you for these ideas. | 07:15 |
| shyamb | Pacemaker approach of active-passive mode looks difficult to implement. I saw cinder-volume implementation. | 07:16 |
| lecris[m] | What service you are working on if I may ask? | 07:16 |
| shyamb | I am working on TrilioVault by Triliodata | 07:17 |
| shyamb | We have integration with RHOSP and TripleO | 07:17 |
| shyamb | https://github.com/trilioData/triliovault-cfg-scripts/tree/master/redhat-director-scripts | 07:18 |
| shyamb | lecris[m]: ^^ | 07:18 |
| lecris[m] | Sounds neat | 07:18 |
| shyamb | Pacemaker is the correct approach, but looks complicated to implement | 07:18 |
| tkajinam | if you are fine with keeping your service down in case that specific node is broken then you can add your customized controller role just for one controller. | 07:19 |
| shyamb | We are fine with it | 07:20 |
| tkajinam | and use that role for one node and the existing controller role for the others. this is likely to require scale-down of existing controllers and add add back the node with the new role when you add the service | 07:20 |
| lecris[m] | Speaking of HA. Is `ControllerStorageNfs` required to be HA? | 07:21 |
| shyamb | That is too much to ask for a production cloud. Using two roles, same falvor for a single node, is it possible? | 07:22 |
| shyamb | any hack to use two roles for single node? | 07:22 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-heat-templates master: Generate config file for ephemeral heat https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857532 | 07:22 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 07:22 |
| tkajinam | shyamb, no. we don't support such composition now | 07:22 |
| lecris[m] | Fraid not. Tripleo would have difficulty knowing which node has the role or not | 07:23 |
| shyamb | Okay. | 07:23 |
| tkajinam | there is a patch to allow reassigning roles during upgrade to master(and later we'd backport that to wallaby) but the approach can't be backported to stable/train | 07:23 |
| shyamb | In resource heat template, can we add a condition like when host_name=xz, start this container | 07:24 |
| lecris[m] | But why do you say it would be difficult for production to manage 2 roles? | 07:24 |
| tkajinam | shyamb, the current way to launch container does not allow you to run a container in a specific node | 07:25 |
| lecris[m] | You could do that in a simple ansible script | 07:25 |
| shyamb | lecris[m]: Not managing two roles, but asking them to scale down the cloud is difficult | 07:25 |
| tkajinam | well, we have a way to run some containers on one of the controller nodes but that does not work with daemonized containers | 07:25 |
| lecris[m] | Yeah, the reassingment that tkajinam would be helpful it seems | 07:26 |
| shyamb | lecris[m]: Okay. | 07:27 |
| shyamb | I can add ansible code | 07:27 |
| lecris[m] | But regardless, at least one node has to be scaled down and up again to change its role | 07:27 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 07:27 |
| shyamb | but how can we run containerized service with ansible? Do we support it in RHOSP? | 07:28 |
| tkajinam | adding ansible code which runs task only in the boostrap node sounds like an easier option | 07:28 |
| tkajinam | shyamb, you might be able to create your own step/tag and run paunch/tripleo-container-manage. Regarding your 2nd question, Red Hat do not support 3rd party integration | 07:29 |
| shyamb | tkajinam: We run our service at step5 like this https://github.com/trilioData/triliovault-cfg-scripts/blob/master/redhat-director-scripts/rhosp16.1/services/trilio-datamover-api.yaml#L284 | 07:30 |
| shyamb | as docker container | 07:30 |
| shyamb | Is it possible to add ansible code in the same block? | 07:31 |
| tkajinam | in case you want to run that service in a single controller then you need to stop using that docker_config interface and launch that container by ansible | 07:31 |
| shyamb | Any openstack service we started with ansible code? | 07:31 |
| tkajinam | by deployment_steps_task maybe | 07:32 |
| shyamb | Any example | 07:32 |
| lecris[m] | ipa | 07:32 |
| lecris[m] | https://github.com/openstack/tripleo-heat-templates/blob/master/deployment/ipa/ipaservices-baremetal-ansible.yaml | 07:32 |
| tkajinam | lecris[m], I'm afraid that does not launch containerized services ? | 07:33 |
| lecris[m] | tkajinam: Is there documentationof the different external_deploy_task, deployment_steps_task, etc.? | 07:33 |
| tkajinam | we manage all containerized services by docker_config interface now and I'm not aware of any example to launch one by ansible in current tripleo code, as far as I know | 07:34 |
| lecris[m] | Yeah no containerized, that one was just my introduction to heat-template that I was able to read :D | 07:34 |
| tkajinam | lecris[m], hmm I don't know that is documented somewhere. these are quite internal interface so we usually do not document it in detail | 07:34 |
| lecris[m] | They are not available outside tripleo? | 07:35 |
| shyamb | Okay | 07:35 |
| shyamb | Any container ansible module we by default provide on overcloud hosts? | 07:35 |
| shyamb | Overall I got idea about this one | 07:36 |
| opendevreview | Khomesh Thakre proposed openstack/tripleo-upgrade stable/train: [Train-only] Added 'Modify Realm Domains' privilege to nova hosts https://review.opendev.org/c/openstack/tripleo-upgrade/+/854096 | 07:36 |
| *** jpena|off is now known as jpena | 07:37 | |
| shyamb | Ansible podman module should be available on hosts | 07:37 |
| tkajinam | shyamb, we have the tripleo-container-manage role in tripleo-ansible. in case of stable/train we also provide the option to use the paunch plugin and that is the default | 07:38 |
| opendevreview | chandan kumar proposed openstack/tripleo-quickstart-extras master: Initial playbook to compute node using standalone ansible playbook https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/843835 | 07:38 |
| shyamb | tkajinam: Okay thank you. I will check these details. | 07:39 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-quickstart-extras master: Create a yaml with custom CI rules for Firewall https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096 | 07:40 |
| lecris[m] | tkajinam: the tripleo heat templates with `outputs.role_data` etc. are appropriate ways to write a heat template to be used on `openstack stack`? | 07:41 |
| opendevreview | Merged openstack/tripleo-docs master: Removed Derived Paramters Documentation https://review.opendev.org/c/openstack/tripleo-docs/+/856555 | 07:41 |
| tkajinam | lecris[m], sorry I didn't get what you are asking but all of our templates are heat templates and used to create/update heat stacks, which is quite equivalent to 'openstack stack' commands | 07:42 |
| lecris[m] | Like after deploying overcloud, I want to deploy another heat stack that is managed by overcloud, not undercloud | 07:43 |
| tkajinam | https://docs.openstack.org/heat/pike/template_guide/index.html | 07:44 |
| lecris[m] | I tried to go through the heat documentation but couldn't make head or tails to do something practical like install a software or do an ansible task | 07:44 |
| tkajinam | https://github.com/openstack/heat-templates | 07:44 |
| tkajinam | lecris[m], the current way to run ansible tasks is not implemented within heat | 07:45 |
| tkajinam | we generate stack data and extract configurations/tasks from stack to generate ansible playbooks and variables | 07:45 |
| lecris[m] | That's only a tripleo thing? | 07:45 |
| bshephar | The Heat service is deployed on the overcloud by default. So just export OS_CLOUD=overcloud and then you can create Heat stacks on the overcloud rather than the undercloud | 07:46 |
| lecris[m] | bshephar: using `openstack stack` or `openstack overcloud`? | 07:47 |
| tkajinam | lecris[m], heat is capabable to run some tasks. See SoftwareConfig/SoftwareDeployment but this requires a few agent processes running inside instances | 07:47 |
| tkajinam | lecris[m], use 'openstack overcloud' is for undercloud only. In case you create a heat stack ON overcloud then use 'openstack stack create' | 07:47 |
| bshephar | lecris[m]: openstack stack | 07:48 |
| bshephar | openstack overcloud is a tripleo thing. But openstack stack is just a generic Heat thing | 07:48 |
| lecris[m] | Hmm, so there's a missing step to just writing a heat template with stuff like `external_deployment_tasks` | 07:49 |
| tkajinam | lecris[m], external deployment tasks is just a kind of metadata from Heat's perspective | 07:49 |
| bshephar | If you want to configure software in a VM, then yeah you need a Heat template defining a SoftwareConfig and SoftwareDeployment. | 07:49 |
| tkajinam | lecris[m], we extract that resource metadata to generate ansible playbooks | 07:50 |
| tkajinam | in tripleo | 07:50 |
| tkajinam | (actually it's part of OS::Heat::Value resource so it's "data" rather than "metadata") | 07:50 |
| bshephar | I made a video demonstrating how to create some VM's in ResourceGroups, etc. Basic Heat stuff: https://www.youtube.com/watch?v=OiQXs33SpBY That's just a normal deployment of tripleo, then I used Heat to create VMs for my k8s cluster. But I didn't do any software config within the VMs there | 07:51 |
| lecris[m] | Hmm, I think I get it. The actual running of the tripleo playbook is not part of heat but of the cli command? | 07:51 |
| bshephar | Yeah, that's correct lecris[m]. We execute ansible-playbook seperately to Heat. | 07:51 |
| tkajinam | yeah | 07:52 |
| lecris[m] | Yeah one issue was that all guides showed how to create VMs, but not how to deploy the necessary software. | 07:53 |
| tkajinam | https://github.com/openstack/heat-templates/tree/master/hot/software-config | 07:53 |
| bshephar | In Queens, we used Heat to do everything. But you need to run an agent on the VM's, in our case we used os-collect-config | 07:54 |
| lecris[m] | But then I guess a proper way to do all of this is to have heat manage the VMs, but everything else have a separate playbook to configure the rest? | 07:54 |
| lecris[m] | Ok, I'll try to play around the software-config once I have the setup deployed | 07:55 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-quickstart-extras master: Create a yaml with custom CI rules for Firewall https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096 | 07:55 |
| bshephar | lecris[m]: That's how I do it yeah. But you can use os-collect-config: https://github.com/openstack/os-collect-config It's a bit more complicated than just using Heat to create the VM's and then Ansible to configure them though | 07:55 |
| tkajinam | lecris[m], using ansible playbook might be an easier approach tbh | 07:55 |
| lecris[m] | 👍️ | 07:56 |
| bshephar | I have a older video also covering how we used os-collect-config in Queens: https://www.youtube.com/watch?v=jXAZZry6PEY&t=105s But I would just stick with Ansible if I were you | 07:56 |
| lecris[m] | bshephar: Coming back to the neutron-ovn issue | 08:00 |
| lecris[m] | I have restarted the containers after a re-deployment (did not do a clean one) and `ps -auwwwx` now shows the correct CA | 08:01 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 08:01 |
| lecris[m] | but `ovn-nbctl get-ssl` is still empty | 08:01 |
| lecris[m] | Should I try a clean re-deployment or hunt down the issue in the current one | 08:02 |
| lecris[m] | Oh, but neutron_api is healthy | 08:03 |
| bshephar | lecris[m]: Na, I'm not sure about the get-ssl thing. Let's ignore that one for now. Glad to hear that patch works then. | 08:04 |
| lecris[m] | Yep, `openstack network list` passes, so now just `horizon` failing on me | 08:05 |
| lecris[m] | Maybe it's the frr related issue? | 08:05 |
| bshephar | Not sure. What errors are in the Horizon logs? | 08:08 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates master: Move host_prep_tasks to standalone tripleo_neutron https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857253 | 08:08 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates master: Fix tls-e CA cert declaration for OVN https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857583 | 08:08 |
| lecris[m] | I've just set it to clean and re-deploy so I'll see about that in 1.5 hour | 08:09 |
| lecris[m] | Btw yesterday someone asked if there is external ACME integration possible (e.g. public endpoints managed by let's encrypt) | 08:12 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates master: Fix tls-e CA cert declaration for OVN https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857586 | 08:13 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates master: Fix tls-e CA cert declaration for FRR https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857586 | 08:14 |
| bshephar | Na, no letsencrypt integration | 08:14 |
| lecris[m] | Heard there are third party plugins for certmonger | 08:15 |
| opendevreview | chandan kumar proposed openstack/tripleo-common master: [DNM] Build tripleo-ansible-ee container https://review.opendev.org/c/openstack/tripleo-common/+/850458 | 08:17 |
| bshephar | lecris[m]: I think my favorite implementation would be to send CertificateSigningRequests to cert-manager and let cert-manager deal with it. :) | 08:23 |
| lecris[m] | Hmm, wouldn't it require some apis to upload the new certificate? | 08:24 |
| lecris[m] | Would be overkill to `overcloud deploy` just for that | 08:25 |
| bshephar | Could just use the k8s api to download the certs. Store them in the config-download directory and deploy them during the deployment | 08:25 |
| lecris[m] | The issue that the person had was that the overcloud was already deployed and wanted easy way to update soon-to-expire certificate | 08:26 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 08:30 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 08:37 |
| opendevreview | Daniel Bengtsson proposed openstack/tripleo-heat-templates master: Remove the python3-openclient and add a new task. https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857469 | 08:37 |
| bshephar | lecris[m]: Yeah, that's one of the things we have spoken about. Making deployments more modular, so that updating TLS certs would be a 5 minutes job rather than a potentially multi-hour job depending on the size of the env | 08:39 |
| bshephar | Should be easy to achieve with the work we're doing for standalone-roles though. Which does exactly that, makes everything more modular and easy to execute specific things with ansible directly | 08:39 |
| lecris[m] | Looking forward to that | 08:40 |
| bshephar | https://specs.openstack.org/openstack/tripleo-specs/specs/zed/decouple-tripleo-tasks.html | 08:40 |
| lecris[m] | Is the plan to also export host/group vars so that the user can edit/run other ansible commands from that? | 08:41 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: Use context manager to open/close file https://review.opendev.org/c/openstack/tripleo-ansible/+/857591 | 08:41 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ci master: Add script to irrelevant files https://review.opendev.org/c/openstack/tripleo-ci/+/857560 | 08:43 |
| opendevreview | yatin proposed openstack/tripleo-quickstart master: [DNM] Test c8s wallaby with rdo-openvswitch-2.17 https://review.opendev.org/c/openstack/tripleo-quickstart/+/857171 | 08:47 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: WIP: Add limit capability https://review.opendev.org/c/openstack/tripleo-ansible/+/857593 | 08:48 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: WIP: Add limit capability https://review.opendev.org/c/openstack/tripleo-ansible/+/857593 | 08:49 |
| bshephar | We already export all of that in the config-download directory. Just removing the dependencies between each of the jobs really. Allowing them to operate on their own | 08:53 |
| bshephar | It's all exported in /home/stack/overcloud-deploy/overcloud/config-download/overcloud/ | 08:53 |
| bshephar | lecris[m]: I have a video for that too ;) https://youtu.be/XkERySC6fNQ?t=2370 | 08:54 |
| lecris[m] | :P | 08:54 |
| opendevreview | Sofer Athlan-Guyot proposed openstack/tripleo-heat-templates master: Ensure container's image get updated if their name stay the same. https://review.opendev.org/c/openstack/tripleo-heat-templates/+/850933 | 08:56 |
| lecris[m] | Was thinking of a short cli to just copy from the working `config-download`. It's just one of those QOL for newcomers | 08:56 |
| lecris[m] | I know it tooke me 10+ deployments until I figured out, oh wait this is just ansible | 08:57 |
| opendevreview | Merged openstack/tripleo-heat-templates stable/wallaby: Wallaby-only: Fix role specific FrrOvnBgpAgentDriver https://review.opendev.org/c/openstack/tripleo-heat-templates/+/855018 | 08:59 |
| bshephar | Yeah, we have it symlinked to ~/config-download to make it a little easier to find. That's the outcome of what we do with Heat. So start it up, parse the template files and spit out all of the playbooks in that directory. Along with group_vars, the inventory, etc | 08:59 |
| bshephar | After the deployment has been executed, there is a bash script there so that you can re-run just the ansible part without doing the Heat stack update again. | 09:00 |
| bshephar | That whole video explains the process. I just linked specifically to the ansible / config-download part | 09:01 |
| lecris[m] | 👍️ | 09:01 |
| lecris[m] | Oh found something that triggers my ocd: | 09:02 |
| lecris[m] | https://github.com/openstack/tripleo-ansible/blob/dbc04aad8805b8c7129cbfbeede46ac778014dcb/tripleo_ansible/roles/tripleo_metrics_qdr/defaults/main.yml#L103 | 09:02 |
| lecris[m] | https://github.com/openstack/tripleo-ansible/blob/56e724ad53a7c541431b8f783d9b3bce3c8f5d4c/tripleo_ansible/roles/tripleo_container_standalone/defaults/main.yml#L60 | 09:02 |
| lecris[m] | The name looks similar but it's not the same, so `tripleo_metrics_qdr` also needs to be upfated | 09:03 |
| lecris[m] | bshephar: Care to patch this one as well? | 09:04 |
| lecris[m] | Oh nvm | 09:05 |
| lecris[m] | It's already proper | 09:05 |
| bshephar | I should probably go through and check all of them. I'll add that to my todo list and make sure they're all ok | 09:05 |
| opendevreview | Gregory Thiemonge proposed openstack/tripleo-heat-templates master: [Octavia] Pass Octavia*LogTargets params to the ansible playbook https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857600 | 09:37 |
| opendevreview | Gregory Thiemonge proposed openstack/tripleo-ansible master: [Octavia] Don't override *_log_targets params when managed by puppet https://review.opendev.org/c/openstack/tripleo-ansible/+/857601 | 09:37 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: WIP: Add limit capability https://review.opendev.org/c/openstack/tripleo-ansible/+/857593 | 09:40 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: Add limit to container_config data https://review.opendev.org/c/openstack/tripleo-ansible/+/857593 | 09:41 |
| opendevreview | yatin proposed openstack/tripleo-quickstart master: [DNM] Test custom env with undercloud upgrade https://review.opendev.org/c/openstack/tripleo-quickstart/+/857607 | 09:58 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: Use context manager to open/close file https://review.opendev.org/c/openstack/tripleo-ansible/+/857591 | 10:04 |
| opendevreview | Daniel Bengtsson proposed openstack/tripleo-heat-templates master: Remove the python3-openclient and add a new task. https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857469 | 10:07 |
| opendevreview | Pooja Jadhav proposed openstack/tripleo-ci master: Victoria tear down : periodic jobs and other occurances https://review.opendev.org/c/openstack/tripleo-ci/+/856051 | 10:14 |
| opendevreview | chandan kumar proposed openstack/tripleo-common master: Add an Ansible execution environment to our Build https://review.opendev.org/c/openstack/tripleo-common/+/776674 | 10:15 |
| opendevreview | Pooja Jadhav proposed openstack/tripleo-ci master: Victoria tear down : build image/container jobs https://review.opendev.org/c/openstack/tripleo-ci/+/857631 | 10:39 |
| opendevreview | Manojkatari proposed openstack/tripleo-heat-templates master: new tht for Cinder NFS backend https://review.opendev.org/c/openstack/tripleo-heat-templates/+/854398 | 10:45 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates master: Fix tls-e CA cert declaration for OVN https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857583 | 10:46 |
| opendevreview | Brendan Shephard proposed openstack/tripleo-heat-templates master: Fix tls-e CA cert declaration for FRR https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857586 | 10:46 |
| opendevreview | Rabi Mishra proposed openstack/paunch stable/train: Ensure the dependent service is started in advance https://review.opendev.org/c/openstack/paunch/+/848982 | 10:55 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-quickstart-extras master: Create a yaml with custom CI rules for Firewall https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/857096 | 11:09 |
| opendevreview | Manojkatari proposed openstack/tripleo-heat-templates master: new tht for Cinder RBD backend https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857071 | 11:13 |
| opendevreview | chandan kumar proposed openstack/tripleo-quickstart-extras master: Initial playbook to compute node using standalone ansible playbook https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/843835 | 11:14 |
| chandankumar | bogdando: https://review.opendev.org/c/openstack/tripleo-ci/+/850736 is good to go, | 11:18 |
| chandankumar | thanks ! | 11:18 |
| opendevreview | chandan kumar proposed openstack/tripleo-common master: [DNM] Build tripleo-ansible-ee container https://review.opendev.org/c/openstack/tripleo-common/+/850458 | 11:21 |
| *** dviroel|brb is now known as dviroel | 11:37 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-tripleo master: Generate config file for Ephemeral heat https://review.opendev.org/c/openstack/puppet-tripleo/+/857531 | 11:47 |
| *** amoralej is now known as amoralej|lunch | 11:58 | |
| opendevreview | yatin proposed openstack/tripleo-upgrade master: Honor undercloud_custom_env_files for oooq deployments https://review.opendev.org/c/openstack/tripleo-upgrade/+/853589 | 12:11 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 12:34 |
| opendevreview | Soniya Murlidhar Vyas proposed openstack/openstack-tempest-skiplist master: [WIP] Add fs03/fs20 to tempest allow list https://review.opendev.org/c/openstack/openstack-tempest-skiplist/+/857669 | 12:38 |
| opendevreview | Soniya Murlidhar Vyas proposed openstack/tripleo-quickstart master: [WIP] Run fs20/fs03 job with tempest-allow https://review.opendev.org/c/openstack/tripleo-quickstart/+/857671 | 12:45 |
| opendevreview | Soniya Murlidhar Vyas proposed openstack/openstack-tempest-skiplist master: [WIP] Add fs03/fs20/fs63 to tempest allow list https://review.opendev.org/c/openstack/openstack-tempest-skiplist/+/857669 | 12:56 |
| opendevreview | Harald Jensås proposed openstack/openstack-virtual-baremetal master: dhcp-relay - CentOS Stream 9 https://review.opendev.org/c/openstack/openstack-virtual-baremetal/+/857537 | 13:02 |
| opendevreview | Harald Jensås proposed openstack/openstack-virtual-baremetal master: ipv6-radvd - CentOS Stream 9 https://review.opendev.org/c/openstack/openstack-virtual-baremetal/+/857538 | 13:03 |
| *** jpena is now known as jpena|off | 13:03 | |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: Add limit to container_config data https://review.opendev.org/c/openstack/tripleo-ansible/+/857593 | 13:04 |
| mciecierski | hi folks, I was deploying wallaby on centos9. I faced an problem with deployment and noticed that all containers were using ubi 8. Shouldn't this be tripleowallabycentos9 https://github.com/openstack/tripleo-common/blob/stable/wallaby/container-images/container_image_prepare_defaults.yaml#L16 ? | 13:13 |
| *** ysandeep is now known as ysandeep|afk | 13:15 | |
| bshephar | mciecierski: Wallaby was a CentOS8 release | 13:16 |
| bshephar | So they all use ubi8 | 13:17 |
| bshephar | But you can use the tripleowallabycentos9 namespace for your usecase. | 13:18 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-ansible master: Use context manager to open/close file https://review.opendev.org/c/openstack/tripleo-ansible/+/857591 | 13:18 |
| mciecierski | bshephar, I thought that there was switch of the default release to centos9 in wallaby | 13:21 |
| bshephar | I don't think so. I think it was just a Red Hat thing for RHOSP17 to use RHEL9. But upstream we released on CentOS8 and afaik it was default for that cycle. | 13:22 |
| bshephar | I could be wrong though. | 13:22 |
| Tengu | wallaby started with cs8 because cs9 wasn't out back then. | 13:23 |
| Tengu | then switched to cs9. iirc we still have cs8 jobs though - but that's to be confirmed with marios and the CI folks | 13:24 |
| *** pdeore is now known as pdeore|afk | 13:25 | |
| opendevreview | Harald Jensås proposed openstack/openstack-virtual-baremetal master: dhcpv6-relay - CentOS Stream 9 https://review.opendev.org/c/openstack/openstack-virtual-baremetal/+/857539 | 13:27 |
| *** amoralej|lunch is now known as amoralej | 13:28 | |
| marios | Tengu: if the question is do we have c8 jobs answer is yes | 13:29 |
| marios | Tengu: for wallaby and train | 13:29 |
| marios | Tengu: so wallaby has both 8 and 9 jobs | 13:29 |
| Tengu | marios: 'k - so my memory wasn't corrupted. thanks for the confirmation :) | 13:29 |
| marios | np | 13:30 |
| opendevreview | Merged openstack/tripleo-ansible master: New roles for apache/httpd management https://review.opendev.org/c/openstack/tripleo-ansible/+/853481 | 13:31 |
| Tengu | woohoooo | 13:31 |
| Tengu | it's merged! goood-bye puppetlabs-apache! | 13:31 |
| Tengu | (or... well. ok. not really NOW. but... ya know... :) ) | 13:31 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 13:34 |
| Tengu | tkajinam: heya! do you want me to address your comments, or are good like that? https://review.opendev.org/c/openstack/tripleo-ansible/+/855873 | 13:35 |
| *** ysandeep|afk is now known as ysandeep | 13:41 | |
| *** ysandeep is now known as ysandeep|out | 13:43 | |
| Tengu | hjensas: heya! I don't think you've seen https://review.opendev.org/c/openstack/tripleo-ansible/+/855873 (and its subsequent usage here: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/854568) - care to have a look? | 13:45 |
| Tengu | hjensas: goal here is to configure the ironic httpd vhosts (api, pxe) via ansible instead of puppet. | 13:45 |
| mciecierski | bshephar, Tengu thank you for answer | 13:45 |
| opendevreview | Merged openstack/tripleo-ci master: Add support for tcib_extra_config https://review.opendev.org/c/openstack/tripleo-ci/+/850736 | 13:49 |
| opendevreview | Soniya Murlidhar Vyas proposed openstack/openstack-tempest-skiplist master: [WIP] Add fs03/fs20/fs63 to tempest allow list https://review.opendev.org/c/openstack/openstack-tempest-skiplist/+/857669 | 13:49 |
| opendevreview | Soniya Murlidhar Vyas proposed openstack/openstack-tempest-skiplist master: [WIP] Add fs03/fs20/fs63/fs54 to tempest allow list https://review.opendev.org/c/openstack/openstack-tempest-skiplist/+/857669 | 13:50 |
| opendevreview | Soniya Murlidhar Vyas proposed openstack/tripleo-quickstart master: [WIP] Run fs20/fs03 job with tempest-allow https://review.opendev.org/c/openstack/tripleo-quickstart/+/857671 | 13:53 |
| opendevreview | Soniya Murlidhar Vyas proposed openstack/tripleo-quickstart master: [WIP] Run fs20/fs03/fs54 job with tempest-allow https://review.opendev.org/c/openstack/tripleo-quickstart/+/857671 | 13:54 |
| opendevreview | Yadnesh Kulkarni proposed openstack/tripleo-heat-templates stable/wallaby: Correct label for /run/libvirt https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857476 | 13:56 |
| *** Guest305 is now known as dasm | 13:57 | |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-heat-templates master: wip: Get rid of boostrap_host_exec https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857714 | 13:58 |
| opendevreview | Manojkatari proposed openstack/tripleo-heat-templates master: Switch c-bak default to A/A https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857614 | 14:00 |
| tkajinam | Tengu, was waiting for the parent patch to avid multiple recheck. +2ed. some of these can be covered by a follow-up | 14:01 |
| Tengu | tkajinam: thanks! | 14:03 |
| Tengu | it's getting to places :) | 14:03 |
| opendevreview | Jiri Podivin proposed openstack/validations-libs master: Restoring logging facility and implementing default logger https://review.opendev.org/c/openstack/validations-libs/+/857198 | 14:10 |
| *** frenzyfriday is now known as frenzyfriday|lunch | 14:11 | |
| rlandy | ramishra: hello - can you join #rdo | 14:16 |
| owalsh | tkajinam: WDYT? https://review.opendev.org/c/openstack/tripleo-ansible/+/855975/7/tripleo_ansible/roles/tripleo_bootstrap/tasks/bootstrap.yml | 14:16 |
| opendevreview | mbu proposed openstack/validations-libs master: Add CI job for podified VF https://review.opendev.org/c/openstack/validations-libs/+/855647 | 14:27 |
| opendevreview | Merged openstack/openstack-tempest-skiplist master: Revert "Update "hard_reboot_after_vol_snap_deletion" entry" https://review.opendev.org/c/openstack/openstack-tempest-skiplist/+/856886 | 14:32 |
| ramishra | rlandy: joined:) I probably missed most of the meeting today | 14:40 |
| opendevreview | Merged openstack/tripleo-ansible master: tripleo_nova_libvirt: add for standalone roles https://review.opendev.org/c/openstack/tripleo-ansible/+/842152 | 14:46 |
| opendevreview | Merged openstack/tripleo-quickstart master: Run featureset002 job with tempest-allow https://review.opendev.org/c/openstack/tripleo-quickstart/+/839725 | 14:49 |
| *** jpena|off is now known as jpena | 14:55 | |
| opendevreview | Daniel Bengtsson proposed openstack/tripleo-heat-templates master: Remove the python3-openclient and add a new task. https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857469 | 15:10 |
| opendevreview | Lukas Bezdicka proposed openstack/tripleo-heat-templates stable/wallaby: Remove the python3-openclient and add a new task. https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857485 | 15:20 |
| *** dviroel is now known as dviroel|lunch | 15:21 | |
| *** marios is now known as marios|out | 15:28 | |
| chandankumar | slagle: hello | 15:36 |
| chandankumar | slagle: here is the logs from current testing https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_a5a/843836/28/check/tripleo-ci-centos-9-singlenode-external-compute-standalone/a5a5a7b/logs/undercloud/home/zuul/overcloud_compute.log | 15:36 |
| chandankumar | it deploys standalone first, then generate the tripleo_standalone_vars from here https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/843835/45/roles/standalone-roles/tasks/generate_tripleo_standalone_vars.yml#17 | 15:37 |
| opendevreview | Harald Jensås proposed openstack/tripleo-ansible master: num_dpdk_interface_rx_queues support net conf schema https://review.opendev.org/c/openstack/tripleo-ansible/+/857731 | 15:37 |
| chandankumar | and then run the additional compute deployment on standalone host | 15:37 |
| chandankumar | slagle: currently I am facing this issue https://review.opendev.org/c/openstack/tripleo-ansible/+/841997/18#message-84d0563f9a66a5284689992997cd83db6d495733 | 15:38 |
| chandankumar | TASK [tripleo_logrotate_crond : allow logrotate to read inside containers] ***** | 15:38 |
| chandankumar | fatal: [localhost]: FAILED! => {"changed": false, "msg": "Cannot set persistent booleans; please try as root"} | 15:38 |
| chandankumar | please have a look, when around :-) | 15:38 |
| chandankumar | Here is the testing patch https://review.opendev.org/c/openstack/tripleo-ci/+/843836/ | 15:38 |
| slagle | chandankumar: is it running with sudo, or --become? b/c we don't set become:true on the tasks that need it. instead we just assume we're root or sudo | 15:39 |
| chandankumar | slagle: https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/843835/45/roles/standalone-roles/tasks/deploy_compute_node.yml | 15:40 |
| chandankumar | neither sudo nor become:true | 15:40 |
| chandankumar | let me update the patch | 15:41 |
| chandankumar | slagle: thank you :-) | 15:41 |
| opendevreview | chandan kumar proposed openstack/tripleo-quickstart-extras master: Initial playbook to compute node using standalone ansible playbook https://review.opendev.org/c/openstack/tripleo-quickstart-extras/+/843835 | 15:44 |
| opendevreview | chandan kumar proposed openstack/tripleo-ci master: Add tripleo-external-compute-deployment-pipeline job template https://review.opendev.org/c/openstack/tripleo-ci/+/843836 | 15:52 |
| *** frenzyfriday|lunch is now known as frenzyfriday | 15:55 | |
| opendevreview | Rabi Mishra proposed openstack/paunch stable/train: Ensure the dependent service is started in advance https://review.opendev.org/c/openstack/paunch/+/848982 | 15:58 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-heat-templates master: wip: Get rid of boostrap_host_exec https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857714 | 16:08 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-common master: wip: Remove unused bootstrap_host_* scripts https://review.opendev.org/c/openstack/tripleo-common/+/857737 | 16:18 |
| opendevreview | Merged openstack/tripleo-quickstart master: Run featureset039 job with tempest-allow https://review.opendev.org/c/openstack/tripleo-quickstart/+/855497 | 16:29 |
| opendevreview | Brent Eagles proposed openstack/tripleo-heat-templates master: Designate: format listen addr properly when ipv6 https://review.opendev.org/c/openstack/tripleo-heat-templates/+/857739 | 16:37 |
| *** dviroel|lunch is now known as dviroel | 16:43 | |
| *** amoralej is now known as amoralej|off | 16:58 | |
| *** jpena is now known as jpena|off | 17:00 | |
| opendevreview | Brent Eagles proposed openstack/tripleo-ansible master: Designate: disable listening on IP version not in use https://review.opendev.org/c/openstack/tripleo-ansible/+/857747 | 17:23 |
| opendevreview | Merged openstack/tripleo-common master: Populate /var/www/cgi-bin/ironic/ with wsgi app https://review.opendev.org/c/openstack/tripleo-common/+/854459 | 17:26 |
| opendevreview | Merged openstack/tripleo-ansible master: New tripleo_ironic role https://review.opendev.org/c/openstack/tripleo-ansible/+/855873 | 17:26 |
| opendevreview | Harald Jensås proposed openstack/tripleo-ansible master: num_dpdk_interface_rx_queues support net conf schema https://review.opendev.org/c/openstack/tripleo-ansible/+/857731 | 17:49 |
| *** rlandy is now known as rlandy|mtg | 18:28 | |
| opendevreview | Merged openstack/tripleo-ansible master: Unbound: remove incorrect config of forwarding https://review.opendev.org/c/openstack/tripleo-ansible/+/853181 | 19:20 |
| *** rlandy|mtg is now known as rlandy | 19:23 | |
| opendevreview | James Slagle proposed openstack/tripleo-ansible master: Default molecule verifier to ansible for podman driver https://review.opendev.org/c/openstack/tripleo-ansible/+/857763 | 19:43 |
| *** dviroel is now known as dviroel|afk | 20:26 | |
| *** dasm is now known as dasm|off | 21:27 | |
| *** rlandy is now known as rlandy|bbl | 22:01 | |
| *** dviroel|afk is now known as dviroel | 22:12 | |
| *** dviroel is now known as dviroel|afk | 22:52 | |
| opendevreview | Oliver Walsh proposed openstack/tripleo-ansible master: Ensure the openvswitch service is enabled and deps are installed https://review.opendev.org/c/openstack/tripleo-ansible/+/855975 | 23:06 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!