16:02:38 <evrardjp> #startmeeting openstack_ansible_meeting 16:02:39 <openstack> Meeting started Tue Dec 5 16:02:38 2017 UTC and is due to finish in 60 minutes. The chair is evrardjp. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:02:40 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 16:02:42 <openstack> The meeting name has been set to 'openstack_ansible_meeting' 16:02:48 <evrardjp> #topic rollcall 16:02:56 <evrardjp> anyone here? 16:03:06 <hwoarang> o/ 16:03:08 <mgariepy> i'm here :D 16:03:36 <spotz> noope not here 16:03:42 <evrardjp> I know the integrated build is borked, and I will think of a way to either revert the whole thing or go ahead. But bug triage time first:) 16:03:48 <cshen> I'm here. 16:03:56 <evrardjp> #topic pending bugs 16:04:07 <evrardjp> woot we are 5, I think we can go ahead. 16:04:11 <evrardjp> so. 16:04:14 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1736087 16:04:14 <openstack> Launchpad bug 1736087 in openstack-ansible "Run playbooks in OpenStack-Ansible" [Undecided,New] 16:04:24 <openstackgerrit> Merged openstack/openstack-ansible-os_sahara master: Remove pip_install dependency https://review.openstack.org/525564 16:04:41 <evrardjp> incomplete? 16:04:54 <hwoarang> yeah 16:05:06 <hwoarang> the title needs some fixing too... 16:05:22 <evrardjp> yeah... 16:05:36 <evrardjp> but I can't change it until I understand :) 16:05:39 <evrardjp> next 16:05:42 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735994 16:05:42 <openstack> Launchpad bug 1735994 in openstack-ansible "OSA AIO build fails on CentOS7 stable/pike during 'TASK [pip_install : Install EPEL and yum priorities plugin]' on first run" [Undecided,New] 16:06:00 <evrardjp> mgariepy: what's your opinion on this one? 16:06:41 <evrardjp> Cannot find a valid baseurl for repo: base/7/x86_64 makes me think it's not an OSA issue, but apparently it doesn't cause issues before running OSA? 16:06:48 <mgariepy> network issue ? ,maybe the repos were down. ? 16:07:50 <mgariepy> copr ? 16:08:05 <mgariepy> this is anoying 16:08:24 <openstackgerrit> Merged openstack/openstack-ansible-os_horizon master: Remove pip_install dependency https://review.openstack.org/525553 16:08:58 <spotz> mgariepy: Or sometimes just a bad mirror too 16:09:47 <evrardjp> I don't know which one, I hoped that with base/ and the files someone would understand better than me:) 16:09:56 <evrardjp> ok so how do we mark this? 16:10:14 <mgariepy> I think that if one repo is down it will prevent yum to work as expeected 16:10:15 <spotz> unconfirmed? 16:10:16 <evrardjp> Asking if the issue still appears? 16:10:30 <evrardjp> yeah that's true mgariepy 16:10:43 <mgariepy> since it doenst know what pkg are in the failing repo. 16:10:49 <spotz> Yeah it'll bork everything 16:11:14 <spotz> kinda like if apt-get update has an error for a GPG key it stops 16:11:32 <evrardjp> ok I'll ask if that was a transient issue, and if not, I will ask to have more details about which repo is failing. 16:12:02 <spotz> +1 16:13:09 <mgariepy> perfect. 16:13:20 <evrardjp> next 16:13:23 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735942 16:13:23 <openstack> Launchpad bug 1735942 in openstack-ansible "github" [Undecided,New] - Assigned to Amy Marrich (amy-marrich) 16:13:29 <evrardjp> invalid? 16:13:47 <spotz> I'll double check it, I think it's similar to the repo issue that it can be transient 16:14:19 <hwoarang> i dont understand this bug (and the title is again awful) 16:14:27 <evrardjp> hwoarang: agreed :) 16:14:53 <evrardjp> hwoarang: for me, the bug poster says that https://git.openstack.org/openstack/openstack-ansible isn't reachable. 16:15:35 <evrardjp> it works for me 16:15:40 <spotz> evrardjp: That's how I read it and he could only clone when he added the .git likn 16:15:56 <evrardjp> I think he could only clone when he moved to github 16:16:01 <evrardjp> hence the title 16:16:37 <spotz> evrardjp: So maybe we just add both options but stress the openstack.org link is the real one and the github is a mirror that could be out of date 16:16:53 <evrardjp> oh I see what you mean spotz 16:17:04 <evrardjp> yeah we could change the docs 16:17:19 <evrardjp> Ok I will rename the bug to 16:17:53 <hwoarang> maybe he is behind firewall or something ;p 16:17:59 <evrardjp> In case of temporary sync issues to github, mark the source of repo to clone to git.openstack.org and github.com in the docs. 16:18:15 <evrardjp> hwoarang: maybe 16:18:31 <spotz> hwoarang: I've seen it happen, whether it's DNS or something else.No harm providing an alt in the docs 16:18:41 <hwoarang> sure 16:18:55 <spotz> I'm definitely not behind a firewall:) 16:19:20 <evrardjp> confirmed and wishlist 16:19:24 <evrardjp> ok for everyone? 16:19:43 <evrardjp> next 16:19:43 <spotz> Yeah I took like 3 docs related ones, should have some time to know them out this week 16:19:46 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735709 16:19:46 <openstack> Launchpad bug 1735709 in openstack-ansible "Grub authentication is not applied on Fedora 26 and Ubuntu 16.04 (at least)" [Undecided,New] - Assigned to Major Hayden (rackerhacker) 16:20:28 <mgariepy> maybe he have MTU ussues 16:21:46 <evrardjp> ? 16:21:52 <evrardjp> how is that related to grub? 16:22:09 <mgariepy> lagg, github stuff 16:22:55 <spotz> New feature for grub not getting applied? 16:23:16 <evrardjp> It looks serious to me 16:23:34 <evrardjp> but I cannot confirm I haven't configured grub for ages. 16:23:48 <spotz> evrardjp: I'm a grub v1 person:) 16:24:10 <hwoarang> (nit hte title should be about ansible-hardening not openstack-ansible) 16:24:15 <spotz> mhayden thought it important enough to grab it, so I'd give it at leat a medium? 16:24:42 <mhayden> trying to get more info from the reporter 16:24:57 <mhayden> seems like our current process gets it close but doesn't do a final step perhaps 16:25:09 <evrardjp> mhayden: should we leave it as new? 16:25:18 <evrardjp> this way we talk about it next week 16:25:32 <evrardjp> ok for everyone? 16:25:44 <hwoarang> ok 16:25:51 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735644 16:25:51 <openstack> Launchpad bug 1735644 in openstack-ansible "Wrong filename of "os_horizon : Enable the neutron-fwaas-dashboard Horizon panel"" [Undecided,New] 16:25:55 <evrardjp> incomplete? 16:26:56 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1733540 16:26:56 <openstack> Launchpad bug 1733540 in openstack-ansible "Prepare the deployment host in OpenStack-Ansible" [Undecided,New] - Assigned to Amy Marrich (amy-marrich) 16:27:04 <evrardjp> let's move to next one ^ 16:27:15 <evrardjp> spotz: do you deal with the gating? 16:27:25 <evrardjp> I think this bug can be marked as confirmed 16:27:30 <evrardjp> I confirm it right now :p 16:27:35 <evrardjp> I think odyssey4me worked on this 16:27:43 <spotz> evrardjp: I figured I'd hit docs up. SOmetimes we just need something 'new' to get stuff to build 16:28:13 <spotz> evrardjp: If odyssey4me is already working oon it pass it to him though 16:28:33 <evrardjp> odyssey4me: is sick, so we should deal with that right away 16:28:40 <evrardjp> marking it as confirmed and high 16:28:48 <evrardjp> critical 16:29:10 <evrardjp> ok for everyone? Gates publication are obviously wrong, so it needs quick fixing... 16:29:18 <spotz> Ok let me go hit docs up now. I took one other ping if you need me backin thise channel 16:29:43 <evrardjp> we can finish the triage first, don't worry :) 16:30:27 <evrardjp> ok next 16:30:29 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1732786 16:30:29 <openstack> Launchpad bug 1732786 in openstack-ansible "update pw-token-gen.py" [Undecided,New] 16:30:53 <spotz> might take that long for someone in docs to reply:) Chennel is quiet 16:31:05 <evrardjp> I'd say confirmed wishlist 16:31:15 <evrardjp> it's not bad but I can see the improvement there 16:31:25 <openstackgerrit> Manuel Buil proposed openstack/openstack-ansible-os_neutron master: Provide support for SFC deployments https://review.openstack.org/510909 16:31:45 <evrardjp> ok for confirmed/wishlist everyone? 16:31:50 <spotz> yeah 16:31:56 <evrardjp> ok next 16:32:02 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1732528 16:32:02 <openstack> Launchpad bug 1732528 in openstack-ansible "playbook creates duplicate configuration lines" [Undecided,New] 16:32:43 <hwoarang> hmm 16:32:51 <evrardjp> not sure to understand 16:32:58 <evrardjp> I have submitted a comment just right now 16:33:16 <evrardjp> I have definitely NO CLUE of what's going on there. 16:33:49 <spotz> duplicatioon steps needed? 16:34:01 <evrardjp> yeah I think so 16:34:20 <evrardjp> Incomplete then? 16:34:51 <evrardjp> ok next... 16:34:54 <evrardjp> #link #link https://bugs.launchpad.net/openstack-ansible/+bug/1732481 16:34:54 <openstack> Launchpad bug 1732481 in openstack-ansible "qemu config should set security driver to apparmor on ubuntu" [Undecided,New] 16:34:55 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1732481 16:36:53 <evrardjp> confirmed medium? I'd say high due to the importance, but because even the reporter isn't 100% sure this is the cause of an issue (vs a new feature), I'd limit to medium. 16:38:17 <evrardjp> guys we are not even at the third of the elements to triage... 16:38:19 <spotz> medium 16:38:34 <evrardjp> ok thanks for the confirmation! 16:38:48 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1731186 16:38:48 <openstack> Launchpad bug 1731186 in openstack-ansible "vpnaas_agent.ini wrong config" [Undecided,New] 16:38:53 <evrardjp> 20 minutes remaining! 16:39:32 <evrardjp> this is not even a path we've followed in our gates... 16:39:34 <spotz> evrardjp: I havn't played with the vpn stuff to know if he's right or wrong:( 16:39:39 <evrardjp> yeah 16:39:41 <evrardjp> same fo rme 16:39:50 <evrardjp> let's leave it open for now, because we can't triage it 16:39:57 <evrardjp> next 16:40:01 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1730998 16:40:01 <openstack> Launchpad bug 1730998 in openstack-ansible "ClamAV update fails if install forces update" [Undecided,New] 16:40:45 <evrardjp> I'd say confirm and medium, and we already have a fix, so low_hanging_fruit on top 16:40:54 <evrardjp> or confirmed and low 16:40:54 <spotz> sounds good 16:41:14 <evrardjp> I'd say low, there is no big urgency 16:41:19 <spotz> if we tag it low haning we should probably go with low 16:41:22 <evrardjp> sorry for my change of mind :) 16:41:25 <spotz> hehe 16:41:25 <evrardjp> ok 16:41:39 <spotz> So glad you can read my typos:) 16:42:04 <evrardjp> I didn't even notice there was a typo, I just read it! 16:42:06 <evrardjp> :D 16:42:08 <evrardjp> amazing! 16:42:19 <spotz> heheh, next! 16:42:22 * evrardjp has english skills +1 16:42:25 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1730722 16:42:25 <openstack> Launchpad bug 1730722 in openstack-ansible "Pike Horizon Image Create Fails" [Undecided,New] 16:43:56 <spotz> If we can't create images that's high. But I'm not seeing where it's horizon and not glance except for the fact CLI does work 16:44:38 <spotz> so unless we're doing something to the horizon local_settings.py this could be a real horizon bug? 16:45:39 <evrardjp> I don't think we have enough information. It should work. 16:47:05 <evrardjp> asked a few questions 16:47:16 <evrardjp> I'll mark it as incomplete 16:47:30 <evrardjp> next 16:47:33 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1730688 16:47:33 <openstack> Launchpad bug 1730688 in openstack-ansible "Missing document for link http://docs.openstack.org/developer/openstack-ansible/developer-docs/inventory.html " [Undecided,New] - Assigned to Amy Marrich (amy-marrich) 16:49:14 <evrardjp> looks confirmed and high 16:49:28 <spotz> I'll get the linkage fixed and we can always re-address a rewrite if needed 16:49:38 <evrardjp> ok 16:49:54 <evrardjp> next 16:49:57 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1729792 16:49:57 <openstack> Launchpad bug 1729792 in openstack-ansible "openstack ansible error when execute setup-openstack.yml" [Undecided,New] 16:51:32 <evrardjp> I'd say we should either mark this as invalid or confirmed low 16:51:44 <evrardjp> hwoarang: what do you think? 16:52:01 <hwoarang> yep 16:52:36 <evrardjp> ok next 16:52:39 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1729661 16:52:39 <openstack> Launchpad bug 1729661 in openstack-ansible "Map instances to new Cell1 takes excessive amounts of time to run on upgraded cloud" [Undecided,New] 16:52:57 <evrardjp> logan-: 's bug 16:53:09 <evrardjp> confirmed and wishlist for now? 16:53:26 <spotz> sur 16:53:46 <evrardjp> next 16:53:49 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1729525 16:53:49 <openstack> Launchpad bug 1729525 in openstack-ansible "Can't run bootstrap_ansible with encrypted user_secrets.yml (prompting for password) " [Undecided,New] 16:55:21 <evrardjp> the problem of --ask-vault-pass is that it will systematically ask the vault pass, even if there is no vaulted file. On top of that, that's very intrusive. 16:55:58 <evrardjp> I see a value of the encrypted passwords, if we backup. 16:56:11 <evrardjp> but I'd rather backup something unencrypted, and have encrypted backups. 16:56:21 <evrardjp> but again, that's me 16:56:33 <evrardjp> and I like the idea of using vault 16:56:36 <spotz> can we pull from barbican or something? 16:56:39 <evrardjp> ansible-vault* 16:56:43 <spotz> k 16:56:56 <evrardjp> nah that would be too tedious, no openstack is available there. 16:57:12 <evrardjp> I'd say that we should be able to take CLI arguments, and I don't understand why this wouldn't work 16:57:33 <hwoarang> so what's the question here? use --ask-vault-pass when we detect an encrypted user_secrets? 16:58:35 <logan-> no because any user_* variable file could be encrypted 16:58:39 <evrardjp> we cannot detect reliably 16:58:40 <logan-> just pass it if provided 16:58:50 <evrardjp> yeah but it says it doesn't work 16:59:16 <evrardjp> :however there's no way to pass '--ask-vault-pass' to that wrapped execution" 16:59:21 <evrardjp> "however there's no way to pass '--ask-vault-pass' to that wrapped execution" * 17:00:08 <logan-> right 17:00:49 <logan-> basically just need a way to provide args to https://github.com/openstack/openstack-ansible/blob/master/scripts/bootstrap-ansible.sh#L285-L288 17:00:56 <evrardjp> ok just tested, and it works. 17:02:10 <logan-> he could workaround it with ANSIBLE_VAULT_PASSWORD_FILE in environment but thats not always preferable to providing the password directly on terminal 17:02:41 <evrardjp> yeah 17:02:56 <evrardjp> well it works for me to do openstack-ansible <playbook> --ask-vault-pass 17:03:09 <logan-> yeah that'll work 17:03:20 <evrardjp> ok 17:03:27 <evrardjp> so I'll mark this as incomplete 17:03:35 <evrardjp> because I don't understand the issue :) 17:03:38 <logan-> it is complete 17:03:44 <evrardjp> oh 17:03:46 <evrardjp> so invalid? 17:03:48 <logan-> the github link above ^ 17:04:03 <logan-> aside from envvar there is no way to pass the vault pass arg to that 17:04:22 <evrardjp> but that doesn't matter for this part 17:04:23 <logan-> we should just support ANSIBLE_PARAMETERS env like other places I guess 17:04:28 <evrardjp> does it? 17:04:34 <logan-> I think on rebootstrap it might 17:04:38 <logan-> in an existing env with vars files deployed 17:05:05 <logan-> oh i see 17:05:11 <evrardjp> but this doesn't take env vars 17:05:12 <logan-> he is running it directly without bootstrap-ansible 17:05:19 <logan-> so it is going thru the wrapper 17:05:40 <evrardjp> oh yeh I see 17:06:01 <jrosser> from my ansible.cfg vault_password_file=pull_vault_password.sh <- is that any help? 17:06:01 <logan-> i think calling it ansible-playbook directly in the venv will work like we do in bootstrap-ansible 17:06:05 <logan-> because it won't load the vars then 17:06:35 <evrardjp> logan-: yeah 17:06:44 <evrardjp> so I think it's an invalid bug here. 17:06:55 <logan-> yeah 17:07:08 <evrardjp> ok 17:07:12 <evrardjp> we are done for today 17:07:16 <evrardjp> thanks everyone! 17:07:23 <evrardjp> #endmeeting