16:02:38 <evrardjp> #startmeeting openstack_ansible_meeting
16:02:39 <openstack> Meeting started Tue Dec  5 16:02:38 2017 UTC and is due to finish in 60 minutes.  The chair is evrardjp. Information about MeetBot at http://wiki.debian.org/MeetBot.
16:02:40 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
16:02:42 <openstack> The meeting name has been set to 'openstack_ansible_meeting'
16:02:48 <evrardjp> #topic rollcall
16:02:56 <evrardjp> anyone here?
16:03:06 <hwoarang> o/
16:03:08 <mgariepy> i'm here :D
16:03:36 <spotz> noope not here
16:03:42 <evrardjp> I know the integrated build is borked, and I will think of a way to either revert the whole thing or go ahead. But bug triage time first:)
16:03:48 <cshen> I'm here.
16:03:56 <evrardjp> #topic pending bugs
16:04:07 <evrardjp> woot we are 5, I think we can go ahead.
16:04:11 <evrardjp> so.
16:04:14 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1736087
16:04:14 <openstack> Launchpad bug 1736087 in openstack-ansible "Run playbooks in OpenStack-Ansible" [Undecided,New]
16:04:24 <openstackgerrit> Merged openstack/openstack-ansible-os_sahara master: Remove pip_install dependency  https://review.openstack.org/525564
16:04:41 <evrardjp> incomplete?
16:04:54 <hwoarang> yeah
16:05:06 <hwoarang> the title needs some fixing too...
16:05:22 <evrardjp> yeah...
16:05:36 <evrardjp> but I can't change it until I understand :)
16:05:39 <evrardjp> next
16:05:42 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735994
16:05:42 <openstack> Launchpad bug 1735994 in openstack-ansible "OSA AIO build fails on CentOS7 stable/pike during 'TASK [pip_install : Install EPEL and yum priorities plugin]' on first run" [Undecided,New]
16:06:00 <evrardjp> mgariepy: what's your opinion on this one?
16:06:41 <evrardjp> Cannot find a valid baseurl for repo: base/7/x86_64 makes me think it's not an OSA issue, but apparently it doesn't cause issues before running OSA?
16:06:48 <mgariepy> network issue ? ,maybe the repos were down. ?
16:07:50 <mgariepy> copr ?
16:08:05 <mgariepy> this is anoying
16:08:24 <openstackgerrit> Merged openstack/openstack-ansible-os_horizon master: Remove pip_install dependency  https://review.openstack.org/525553
16:08:58 <spotz> mgariepy: Or sometimes just a bad mirror too
16:09:47 <evrardjp> I don't know which one, I hoped that with base/ and the files someone would understand better than me:)
16:09:56 <evrardjp> ok so how do we mark this?
16:10:14 <mgariepy> I think that if one repo is down it will prevent yum to work as expeected
16:10:15 <spotz> unconfirmed?
16:10:16 <evrardjp> Asking if the issue still appears?
16:10:30 <evrardjp> yeah that's true mgariepy
16:10:43 <mgariepy> since it doenst know what pkg are in the failing repo.
16:10:49 <spotz> Yeah it'll bork everything
16:11:14 <spotz> kinda like if apt-get update has an error for a GPG key it stops
16:11:32 <evrardjp> ok I'll ask if that was a transient issue, and if not, I will ask to have more details about which repo is failing.
16:12:02 <spotz> +1
16:13:09 <mgariepy> perfect.
16:13:20 <evrardjp> next
16:13:23 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735942
16:13:23 <openstack> Launchpad bug 1735942 in openstack-ansible "github" [Undecided,New] - Assigned to Amy Marrich (amy-marrich)
16:13:29 <evrardjp> invalid?
16:13:47 <spotz> I'll double check it, I think it's similar to the repo issue that it can be transient
16:14:19 <hwoarang> i dont understand this bug (and the title is again awful)
16:14:27 <evrardjp> hwoarang: agreed :)
16:14:53 <evrardjp> hwoarang: for me, the bug poster says that https://git.openstack.org/openstack/openstack-ansible  isn't reachable.
16:15:35 <evrardjp> it works for me
16:15:40 <spotz> evrardjp: That's how I read it and he could only clone when he added the .git likn
16:15:56 <evrardjp> I think he could only clone when he moved to github
16:16:01 <evrardjp> hence the title
16:16:37 <spotz> evrardjp: So maybe we just add both options but stress the openstack.org link is the real one and the github is a mirror that could be out of date
16:16:53 <evrardjp> oh I see what you mean spotz
16:17:04 <evrardjp> yeah we could change the docs
16:17:19 <evrardjp> Ok I will rename the bug to
16:17:53 <hwoarang> maybe he is behind firewall or something ;p
16:17:59 <evrardjp> In case of temporary sync issues to github, mark the source of repo to clone to git.openstack.org and github.com in the docs.
16:18:15 <evrardjp> hwoarang: maybe
16:18:31 <spotz> hwoarang: I've seen it happen, whether it's DNS or something else.No harm providing an alt in the docs
16:18:41 <hwoarang> sure
16:18:55 <spotz> I'm definitely not behind a firewall:)
16:19:20 <evrardjp> confirmed and wishlist
16:19:24 <evrardjp> ok for everyone?
16:19:43 <evrardjp> next
16:19:43 <spotz> Yeah I took like 3 docs related ones, should have some time to know them out this week
16:19:46 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735709
16:19:46 <openstack> Launchpad bug 1735709 in openstack-ansible "Grub authentication is not applied on Fedora 26 and Ubuntu 16.04 (at least)" [Undecided,New] - Assigned to Major Hayden (rackerhacker)
16:20:28 <mgariepy> maybe he have MTU ussues
16:21:46 <evrardjp> ?
16:21:52 <evrardjp> how is that related to grub?
16:22:09 <mgariepy> lagg, github stuff
16:22:55 <spotz> New feature for grub not getting applied?
16:23:16 <evrardjp> It looks serious to me
16:23:34 <evrardjp> but I cannot confirm I haven't configured grub for ages.
16:23:48 <spotz> evrardjp: I'm a grub v1 person:)
16:24:10 <hwoarang> (nit hte title should be about ansible-hardening not openstack-ansible)
16:24:15 <spotz> mhayden thought it important enough to grab it, so I'd give it at leat a medium?
16:24:42 <mhayden> trying to get more info from the reporter
16:24:57 <mhayden> seems like our current process gets it close but doesn't do a final step perhaps
16:25:09 <evrardjp> mhayden: should we leave it as new?
16:25:18 <evrardjp> this way we talk about it next week
16:25:32 <evrardjp> ok for everyone?
16:25:44 <hwoarang> ok
16:25:51 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1735644
16:25:51 <openstack> Launchpad bug 1735644 in openstack-ansible "Wrong filename of "os_horizon : Enable the neutron-fwaas-dashboard Horizon panel"" [Undecided,New]
16:25:55 <evrardjp> incomplete?
16:26:56 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1733540
16:26:56 <openstack> Launchpad bug 1733540 in openstack-ansible "Prepare the deployment host in OpenStack-Ansible" [Undecided,New] - Assigned to Amy Marrich (amy-marrich)
16:27:04 <evrardjp> let's move to next one ^
16:27:15 <evrardjp> spotz: do you deal with the gating?
16:27:25 <evrardjp> I think this bug can be marked as confirmed
16:27:30 <evrardjp> I confirm it right now :p
16:27:35 <evrardjp> I think odyssey4me worked on this
16:27:43 <spotz> evrardjp: I figured I'd hit docs up. SOmetimes we just need something 'new' to get stuff to build
16:28:13 <spotz> evrardjp: If odyssey4me is already working oon it pass it to him though
16:28:33 <evrardjp> odyssey4me: is sick, so we should deal with that right away
16:28:40 <evrardjp> marking it as confirmed and high
16:28:48 <evrardjp> critical
16:29:10 <evrardjp> ok for everyone? Gates publication are obviously wrong, so it needs quick fixing...
16:29:18 <spotz> Ok let me go hit docs up now. I took one other ping if you need me backin thise channel
16:29:43 <evrardjp> we can finish the triage first, don't worry :)
16:30:27 <evrardjp> ok next
16:30:29 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1732786
16:30:29 <openstack> Launchpad bug 1732786 in openstack-ansible "update pw-token-gen.py" [Undecided,New]
16:30:53 <spotz> might take that long for someone in docs to reply:) Chennel is quiet
16:31:05 <evrardjp> I'd say confirmed wishlist
16:31:15 <evrardjp> it's not bad but I can see the improvement there
16:31:25 <openstackgerrit> Manuel Buil proposed openstack/openstack-ansible-os_neutron master: Provide support for SFC deployments  https://review.openstack.org/510909
16:31:45 <evrardjp> ok for confirmed/wishlist everyone?
16:31:50 <spotz> yeah
16:31:56 <evrardjp> ok next
16:32:02 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1732528
16:32:02 <openstack> Launchpad bug 1732528 in openstack-ansible "playbook creates duplicate configuration lines" [Undecided,New]
16:32:43 <hwoarang> hmm
16:32:51 <evrardjp> not sure to understand
16:32:58 <evrardjp> I have submitted a comment just right now
16:33:16 <evrardjp> I have definitely NO CLUE of what's going on there.
16:33:49 <spotz> duplicatioon steps needed?
16:34:01 <evrardjp> yeah I think so
16:34:20 <evrardjp> Incomplete then?
16:34:51 <evrardjp> ok next...
16:34:54 <evrardjp> #link #link https://bugs.launchpad.net/openstack-ansible/+bug/1732481
16:34:54 <openstack> Launchpad bug 1732481 in openstack-ansible "qemu config should set security driver to apparmor on ubuntu" [Undecided,New]
16:34:55 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1732481
16:36:53 <evrardjp> confirmed medium? I'd say high due to the importance, but because even the reporter isn't 100% sure this is the cause of an issue (vs a new feature), I'd limit to medium.
16:38:17 <evrardjp> guys we are not even at the third of the elements to triage...
16:38:19 <spotz> medium
16:38:34 <evrardjp> ok thanks for the confirmation!
16:38:48 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1731186
16:38:48 <openstack> Launchpad bug 1731186 in openstack-ansible "vpnaas_agent.ini wrong config" [Undecided,New]
16:38:53 <evrardjp> 20 minutes remaining!
16:39:32 <evrardjp> this is not even a path we've followed in our gates...
16:39:34 <spotz> evrardjp: I havn't played with the vpn stuff to know if he's right or wrong:(
16:39:39 <evrardjp> yeah
16:39:41 <evrardjp> same fo rme
16:39:50 <evrardjp> let's leave it open for now, because we can't triage it
16:39:57 <evrardjp> next
16:40:01 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1730998
16:40:01 <openstack> Launchpad bug 1730998 in openstack-ansible "ClamAV update fails if install forces update" [Undecided,New]
16:40:45 <evrardjp> I'd say confirm and medium, and we already have a fix, so low_hanging_fruit on top
16:40:54 <evrardjp> or confirmed and low
16:40:54 <spotz> sounds good
16:41:14 <evrardjp> I'd say low, there is no big urgency
16:41:19 <spotz> if we tag it low haning we should probably go with low
16:41:22 <evrardjp> sorry for my change of mind :)
16:41:25 <spotz> hehe
16:41:25 <evrardjp> ok
16:41:39 <spotz> So glad you can read my typos:)
16:42:04 <evrardjp> I didn't even notice there was a typo, I just read it!
16:42:06 <evrardjp> :D
16:42:08 <evrardjp> amazing!
16:42:19 <spotz> heheh, next!
16:42:22 * evrardjp has english skills +1
16:42:25 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1730722
16:42:25 <openstack> Launchpad bug 1730722 in openstack-ansible "Pike Horizon Image Create Fails" [Undecided,New]
16:43:56 <spotz> If we can't create images that's high. But I'm not seeing where it's horizon and not glance except for the fact CLI does work
16:44:38 <spotz> so unless we're doing something to the horizon local_settings.py this could be a real horizon bug?
16:45:39 <evrardjp> I don't think we have enough information. It should work.
16:47:05 <evrardjp> asked a few questions
16:47:16 <evrardjp> I'll mark it as incomplete
16:47:30 <evrardjp> next
16:47:33 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1730688
16:47:33 <openstack> Launchpad bug 1730688 in openstack-ansible "Missing document for link http://docs.openstack.org/developer/openstack-ansible/developer-docs/inventory.html " [Undecided,New] - Assigned to Amy Marrich (amy-marrich)
16:49:14 <evrardjp> looks confirmed and high
16:49:28 <spotz> I'll get the linkage fixed and we can always re-address a rewrite if needed
16:49:38 <evrardjp> ok
16:49:54 <evrardjp> next
16:49:57 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1729792
16:49:57 <openstack> Launchpad bug 1729792 in openstack-ansible "openstack ansible error when execute setup-openstack.yml" [Undecided,New]
16:51:32 <evrardjp> I'd say we should either mark this as invalid or confirmed low
16:51:44 <evrardjp> hwoarang: what do you think?
16:52:01 <hwoarang> yep
16:52:36 <evrardjp> ok next
16:52:39 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1729661
16:52:39 <openstack> Launchpad bug 1729661 in openstack-ansible "Map instances to new Cell1 takes excessive amounts of time to run on upgraded cloud" [Undecided,New]
16:52:57 <evrardjp> logan-: 's bug
16:53:09 <evrardjp> confirmed and wishlist for now?
16:53:26 <spotz> sur
16:53:46 <evrardjp> next
16:53:49 <evrardjp> #link https://bugs.launchpad.net/openstack-ansible/+bug/1729525
16:53:49 <openstack> Launchpad bug 1729525 in openstack-ansible "Can't run bootstrap_ansible with encrypted user_secrets.yml (prompting for password) " [Undecided,New]
16:55:21 <evrardjp> the problem of --ask-vault-pass is that it will systematically ask the vault pass, even if there is no vaulted file. On top of that, that's very intrusive.
16:55:58 <evrardjp> I see a value of the encrypted passwords, if we backup.
16:56:11 <evrardjp> but I'd rather backup something unencrypted, and have encrypted backups.
16:56:21 <evrardjp> but again, that's me
16:56:33 <evrardjp> and I like the idea of using vault
16:56:36 <spotz> can we pull from barbican or something?
16:56:39 <evrardjp> ansible-vault*
16:56:43 <spotz> k
16:56:56 <evrardjp> nah that would be too tedious, no openstack is available there.
16:57:12 <evrardjp> I'd say that we should be able to take CLI arguments, and I don't understand why this wouldn't work
16:57:33 <hwoarang> so what's the question here? use --ask-vault-pass when we detect an encrypted user_secrets?
16:58:35 <logan-> no because any user_* variable file could be encrypted
16:58:39 <evrardjp> we cannot detect reliably
16:58:40 <logan-> just pass it if provided
16:58:50 <evrardjp> yeah but it says it doesn't work
16:59:16 <evrardjp> :however there's no way to pass '--ask-vault-pass' to that wrapped execution"
16:59:21 <evrardjp> "however there's no way to pass '--ask-vault-pass' to that wrapped execution" *
17:00:08 <logan-> right
17:00:49 <logan-> basically just need a way to provide args to https://github.com/openstack/openstack-ansible/blob/master/scripts/bootstrap-ansible.sh#L285-L288
17:00:56 <evrardjp> ok just tested, and it works.
17:02:10 <logan-> he could workaround it with ANSIBLE_VAULT_PASSWORD_FILE in environment but thats not always preferable to providing the password directly on terminal
17:02:41 <evrardjp> yeah
17:02:56 <evrardjp> well it works for me to do openstack-ansible <playbook> --ask-vault-pass
17:03:09 <logan-> yeah that'll work
17:03:20 <evrardjp> ok
17:03:27 <evrardjp> so I'll mark this as incomplete
17:03:35 <evrardjp> because I don't understand the issue :)
17:03:38 <logan-> it is complete
17:03:44 <evrardjp> oh
17:03:46 <evrardjp> so invalid?
17:03:48 <logan-> the github link above ^
17:04:03 <logan-> aside from envvar there is no way to pass the vault pass arg to that
17:04:22 <evrardjp> but that doesn't matter for this part
17:04:23 <logan-> we should just support ANSIBLE_PARAMETERS env like other places I guess
17:04:28 <evrardjp> does it?
17:04:34 <logan-> I think on rebootstrap it might
17:04:38 <logan-> in an existing env with vars files deployed
17:05:05 <logan-> oh i see
17:05:11 <evrardjp> but this doesn't take env vars
17:05:12 <logan-> he is running it directly without bootstrap-ansible
17:05:19 <logan-> so it is going thru the wrapper
17:05:40 <evrardjp> oh yeh I see
17:06:01 <jrosser> from my ansible.cfg vault_password_file=pull_vault_password.sh <- is that any help?
17:06:01 <logan-> i think calling it ansible-playbook directly in the venv will work like we do in bootstrap-ansible
17:06:05 <logan-> because it won't load the vars then
17:06:35 <evrardjp> logan-: yeah
17:06:44 <evrardjp> so I think it's an invalid bug here.
17:06:55 <logan-> yeah
17:07:08 <evrardjp> ok
17:07:12 <evrardjp> we are done for today
17:07:16 <evrardjp> thanks everyone!
17:07:23 <evrardjp> #endmeeting