Wednesday, 2016-03-23

*** marmat has joined #kolla00:00
*** marmat has quit IRC00:01
*** salv-orl_ has joined #kolla00:02
*** dims_ has joined #kolla00:03
*** dims has quit IRC00:04
*** salv-orlando has quit IRC00:05
*** salv-orl_ has quit IRC00:07
*** phuongnh has quit IRC00:09
openstackgerritSteven Dake proposed openstack/kolla: Add PBR generation of version information  https://review.openstack.org/29612400:12
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612500:12
sdakereno is pretty sweet00:13
*** Marga_ has quit IRC00:14
*** Marga_ has joined #kolla00:15
mlimasdake where can i find some doc about kolla achitecture, deployment strategy ?00:16
sdakemlima actually taht is next up on my plate after i finish with heat doa bug00:16
sdakemainly for the threat nalysis for we can obtaint he VMT tag00:16
sdakebut as of now there is no such document00:17
mlimaok00:17
mlimano problem00:17
mlimai have an idea00:17
mlima"add support for many network interfaces"00:18
*** achanda has quit IRC00:18
mlimabut I'm still thinking about the best way to do this00:19
*** achanda has joined #kolla00:21
mlimanot even know if this idea makes sense for you haha00:21
*** weiyu_ has joined #kolla00:22
*** aginwala has quit IRC00:28
*** unicell has joined #kolla00:31
*** aginwala has joined #kolla00:32
*** achanda has quit IRC00:40
*** alisonh has quit IRC00:43
*** sdake has quit IRC00:50
*** sdake has joined #kolla00:51
sdakedave-mccowan https://bugs.launchpad.net/kolla/+bug/156074400:56
openstackLaunchpad bug 1560744 in kolla mitaka "drop root for crontab" [Critical,Confirmed] - Assigned to Steven Dake (sdake)00:56
*** daneyon has quit IRC01:00
*** unicell has quit IRC01:00
*** alisonh has joined #kolla01:01
*** alisonh has quit IRC01:09
*** achanda has joined #kolla01:11
*** alisonh has joined #kolla01:13
*** phuongnh has joined #kolla01:14
*** aginwala has quit IRC01:16
*** aginwala has joined #kolla01:19
*** mlima has quit IRC01:20
*** daneyon has joined #kolla01:29
sdakethis needs fixing https://bugs.launchpad.net/kolla/+bug/156075101:30
openstackLaunchpad bug 1560751 in kolla mitaka "logs are not all owned by the heka user" [High,Confirmed]01:30
*** Marga_ has quit IRC01:30
*** ayoung has joined #kolla01:32
SamYaplesdake: gotta disagree with your take on that bug01:33
*** salv-orlando has joined #kolla01:35
*** daneyon has quit IRC01:35
*** daneyon has joined #kolla01:36
sdakethe problem is the logs are all 66001:36
sdakethey should be 600 and owned by heka only01:36
sdakethe only reason they are readale is the permissions heka applies to the logs is difficient01:37
SamYapleheka doesnt own them01:37
SamYaplethe only thing that is supose to match here is the group01:37
SamYapleand it does01:37
SamYaplethats the design01:37
sdakei see01:37
sdakewell the logs should definately be  640 not 66001:37
SamYapleand they should defintely group writes01:37
SamYaplenope01:37
SamYaplegroup writes are needed01:37
SamYaplegroup perms are how we address all of these01:38
sdakeisn't it heka that writes teh log files out?01:38
SamYapleno01:38
sdakewe dont want one container overwritng the logs of anotehr container in a seucrity situation01:38
SamYapleheka only writes out the logs for things it has a socket for (haproxy/keepalived)01:39
SamYaplebut the group writes are needed for the cron container01:39
SamYapletis the design we have01:39
sdakethe cron container has to go01:39
sdakecron cannot be run as nonroot01:39
SamYaplecron is not going. it is also needed01:39
SamYapleotherwise logs grow and grow and grow....01:40
sdakeit needs a replacement that can run as non root01:40
sdakei understand the need for logrotate01:40
*** dims_ has quit IRC01:40
sdakecrond will only run as root01:41
sdakeon startup it attempts seteuid (0)01:41
sdakei gues if the logs need to be 660 thats fine01:42
sdakeif heka isnt writign the logs itself01:42
SamYaplenot to worried. crond has no external interface01:42
*** salv-orlando has quit IRC01:42
SamYapleno entry point to copromise01:42
sdakecrontab -e ??01:42
sdakefiles on the filesystem?01:42
sdakeit hs plenty of external entrypoints01:42
SamYaplelike what?01:43
sdakeone attack vector of crontab is put whatevery u ike in the cro ndirectories01:43
SamYaplehow?01:43
SamYaplethat could be said for anything01:44
SamYapleor you could replace /run_command01:44
sdakethat file is owned by root01:44
SamYapleso is the cron directories01:44
sdakeyou must surely admit crontab running as nonroot would be preferable to crontab running as root01:46
*** jasonsb has joined #kolla01:46
SamYapleanything as non-root is preferable with no privs is preferable01:47
SamYaplei just think we have better things to focus on than non-security risks01:47
SamYaplelike haproxy drop root01:47
SamYaplewould love to see that done right01:47
sdakei guess we will find out with our threat analysis01:47
*** jasonsb has quit IRC01:54
*** haplo37 has joined #kolla02:03
*** vhosakot has joined #kolla02:08
*** haplo37 has quit IRC02:13
*** iceyao has joined #kolla02:24
*** iceyao has quit IRC02:25
*** iceyao has joined #kolla02:31
sdakeasalkeld you around02:33
asalkeldHi sdake02:33
sdakehey quick python question02:33
sdakei've got kolla package which has releasenotes/source/conf.py02:34
sdakei am getting error no module kolla.versions found02:34
sdakeifi instll kolla it of course works02:34
sdakebut it can't seem to find it in the python conf.py file02:34
sdakeis there some trick to make it find it?02:34
sdakenova seems to suffer from the same problem02:35
asalkeldAdd __init__.py ?02:35
sdakelet me try that02:35
sdakesame deal02:36
sdakeheat also suffers from this problem02:37
asalkeldIt's from doc/source right?02:37
sdakeits in releaenotes/*02:37
sdakereleaesnotes/source02:37
asalkeldI see, not sure ...02:37
asalkeld_sdake: has kolla been installed at this point?02:39
sdakeit is not installed02:39
sdakeif I install it, it works02:39
*** haplo37 has joined #kolla02:39
asalkeld_so if you need kolla.versions, you need kolla in the python path somewhere02:40
asalkeld_how is this run?02:40
sdake  sphinx-build -a -E -W -d releasenotes/build/doctrees -b html releasenotes/source releasenotes/build/html02:40
sdakebut i want to run it from tox02:40
asalkeld_PYTHON_PATH=...02:40
sdakewhen i run from tox it works..02:40
sdakewhen it runs from tox in the gate, it does not work..02:41
*** salv-orlando has joined #kolla02:41
asalkeld_well tox installs the kolla package right?02:41
asalkeld_well that's odd02:42
sdakeagree it is odd02:42
sdakei just added rm to the whitelist going to try thato ut02:42
sbezverksdake I tested iscsi patch on brand new master and it works. I do see some issues with swift/heka but I do not think it is related..02:42
sdakewithout those /udev bindmounts?02:43
sbezverkI must have missed your comment about udev02:44
sbezverktrying to find it to see what you meant..02:46
openstackgerritMerged openstack/kolla: Check relevant logging mechanism in the gate  https://review.openstack.org/29590902:47
*** tfukushima has joined #kolla02:47
sbezverksdake got it.. /lib/udev is required02:48
sbezverkespecially for nova02:48
* asalkeld_ bbl - going to gym02:48
sbezverknova when it starts an instance uses scsi_id binary02:48
sbezverkwhich is located there02:48
sdakewhy not use the scsi_id in the container?02:49
*** salv-orlando has quit IRC02:51
sdakegroan that is part of the systemd package02:51
sdakewhy on earth would they put that dependnecy in such a bloated package02:51
*** aginwala has quit IRC02:51
sdakesbezverk try installing systemd in the container and then running without the udev bindmount02:52
sdakebloated packaging in containers is better then bindmounts ;)02:52
sbezverksdake seriously?!?!? I would think having systemd is much worse than just use ro bindmount..02:53
sdakebindmounts are a security problem - the less we have the better02:53
sbezverk:-(02:53
sdakeand in the case of running binarie they dont deliver a immutable experience02:54
sdakesecurity is pretty much the only thing I dont negotiate on in patches :)02:54
sbezverksdake I do not know what impact will be on everything from installing systemd02:55
sdaketry it02:55
*** iceyao has quit IRC02:55
sbezverkalso where do you want me to add it? base or nova base?02:55
sdakejust install to ge tth ebinary02:55
sdakein the containers it is needed in only02:56
sdaketo pull in the iscsi_id binary02:56
sbezverkok then just for nova compute02:56
sbezverkok I will take care of it tomorrow02:57
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612503:04
*** iceyao has joined #kolla03:07
sdakehttps://bugs.launchpad.net/kolla/+bug/156077903:12
openstackLaunchpad bug 1560779 in kolla "heka elasticsearch is busted" [High,Confirmed]03:12
vhosakotwow, I need working ES+heka to write new lua parser for libvirt.. is this on Ubuntu or centos03:18
*** yuanying has quit IRC03:21
*** yuanying_ has joined #kolla03:21
*** yuanying_ has quit IRC03:24
*** yuanying has joined #kolla03:24
*** Marga_ has joined #kolla03:26
*** yuanying has quit IRC03:29
*** aginwala has joined #kolla03:29
*** Marga_ has quit IRC03:30
*** alisonh has left #kolla03:31
*** aginwala has quit IRC03:33
sdakesbezverk https://bugs.launchpad.net/kolla/+bug/156078803:37
openstackLaunchpad bug 1560788 in kolla mitaka "heka and swift are busted together" [Critical,Confirmed]03:37
sdakethis is master t-24 hours ago03:37
*** haplo37 has quit IRC03:39
*** Marga_ has joined #kolla03:39
*** Marga_ has quit IRC03:40
*** Marga_ has joined #kolla03:40
*** iceyao_ has joined #kolla03:40
sbezverksdake so heka got screwed up for last 24 hours?03:41
sbezverkI meant during last 24 hours03:41
sdakeno it was probably broken prio to that03:41
sbezverksdake it complains about syntax error, but since I am not strong in this syntax I cannot spot what exactly wrong03:43
sbezverksyntax error: last token: { pos: 2703:43
*** iceyao has quit IRC03:43
sbezverkcould it be that it requires double {{}} ??03:44
openstackgerritSteven Dake proposed openstack/kolla: Add PBR generation of version information  https://review.openstack.org/29612403:45
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612503:45
sdakelet me go take a bio and have a smoke03:46
sdakeand i'll look at it03:46
sdakewhen was the last time it was working for you - prior to your rebase?03:48
sdakesbezverk ^^03:50
sbezverksdake just before rebase swift was working perfectly fine03:52
sdakegold up to 124903:52
sdakeI knew buying 100 ozes when it was at 1000 was a good idea ;-)03:52
sdakewhat file conflicted in the rebase03:52
sbezverkman you are lucky, after renovation you still have something keft to buy gold?!?03:52
sdakemy ennovation was only 16k03:53
sbezverksdake ansible/roles/common/tasks/config.yml03:53
*** coolsvap has joined #kolla03:53
sdake0a1486a2c73275009f7158c911e7bfd683e40a5803:54
sdakelet me try reverting that change03:54
sbezverkyep, that was the one.. I notced it added these swift related statements03:56
*** tfukushima has quit IRC03:57
*** jtriley has quit IRC03:57
sdakewe need a storage gate03:58
sbezverksdake who hosts servers acting as gates?03:59
sdakecloud copanies03:59
sbezverksdake I have 5108 blade server chassis with bunch of server, sitting in my lab idle ;-)04:01
*** yuanying has joined #kolla04:01
sdakehey yuanying how goes it bro04:01
sbezverkbut because it so damn noisy and eats lots of electricity I do not use it much04:02
yuanyinghi sdake what's up?04:03
sdakerelease time04:03
sdakebusy busy04:03
yuanyinghaha04:04
sdakeyou working on magnum these days?04:04
yuanyingyes, but furthermore my boss orderd me another works04:04
sdakewhy04:04
sdakebarbican dependency cluster foxtrot ?: )04:05
yuanyingfoxtrot?04:05
*** achanda has quit IRC04:06
sdakesbezverk please read https://bugs.launchpad.net/kolla/+bug/156078804:06
openstackLaunchpad bug 1560788 in kolla mitaka "heka and swift are busted together" [Critical,Confirmed]04:06
sdakefoxtrot is a polite way of swearing04:06
yuanyingdifficult to understand for me04:09
*** salv-orlando has joined #kolla04:10
*** salv-orlando has quit IRC04:14
vhosakotI need ES+heka working for the new lua parser I'm writing for libvirt.log.. sdake: can I submit the patch wihtout testing (since ES+heka is broken) in lastest Newton04:20
sdakeheka broken all over the place04:20
sdakecan you file a bug i one isn't alrady filed04:20
vhosakotsdake: https://review.openstack.org/#/c/296012/... there is already a bug  https://bugs.launchpad.net/kolla/+bug/156029804:22
openstackLaunchpad bug 1560298 in kolla mitaka "Make heka collect libvirtd.log in nova_libvirt container" [Critical,New] - Assigned to Vikram Hosakote (vhosakot)04:22
*** jasonsb has joined #kolla04:22
vhosakotwow, this lua syntax is different!04:23
sdakealready a bug for es+heka being bust?04:23
sdakei filed one an hour or so ago04:23
sdakewe need to fix the bugs before we introduce new implementations04:24
sdakeso we can test without compounding problems04:24
sdakeif you want feedback on patch set workflow to -104:24
vhosakotsdake: heka, es, kibana... all worked 100% 4 days ago04:24
vhosakotsdake: good point.. I will first -1 myself04:24
*** dave-mccowan has quit IRC04:24
sdakeya try reverting 0a1486a2c73275009f7158c911e7bfd683e40a5804:24
vhosakotsdake: ok, let me do it04:25
*** weiyu_ has quit IRC04:26
sdakecommit  f4175f04 may be promatic too04:30
vhosakotsdake: was the es container up when you saw this bug https://bugs.launchpad.net/kolla/+bug/156077904:31
openstackLaunchpad bug 1560779 in kolla "heka elasticsearch is busted" [High,Confirmed]04:31
sdakeno idea i just ran docker logs heka on it04:31
*** coolsvap has quit IRC04:31
*** coolsvap has joined #kolla04:32
vhosakotok, the others logs look good.. only es logs failed to get indexed/decoded.. 2016/03/21 20:34:06 Plugin 'elasticsearch_output' error: can't index: HTTP request failed: Post http://192.168.1.148:9200/_bulk: dial tcp 192.168.1.148:9200: no route to host..04:33
vhosakotwill look into this bug... I need this working to implement lua parser for libvirt.log04:33
sdakei am trying a ever t- will let you know in 10 mins04:37
vhosakotok04:41
*** aginwala has joined #kolla04:41
*** aginwala has quit IRC04:43
openstackgerritMerged openstack/kolla: Enable horizon domain logins  https://review.openstack.org/29605204:44
sdakevhosakot how late are you styaing up tonight04:48
vhosakotanother 30 mins may be.... I am trying to reach a stage where I can start writing the lua parser04:49
vhosakotwhy u ask ?04:49
*** aginwala has joined #kolla04:49
*** jtriley has joined #kolla04:52
*** achanda has joined #kolla04:53
*** jtriley has quit IRC04:58
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612505:00
sdakevhosakot that revert i tried didn't work on fixing elasticsearch05:04
vhosakotsdake: 0a1486a2c73275009f7158c911e7bfd683e40a58 ?05:04
sdakeone of two things happened05:04
sdakeelasticserch changed their code05:04
vhosakotthe es package you mean ?05:04
sdakeyes05:05
sdakeor there is a regressoin i nthe code base05:05
sdakereverting that patch fixes swift, so that patch is definately fucked up05:05
*** weiyu_ has joined #kolla05:08
vhosakotbut, 0a1486a2c73275009f7158c911e7bfd683e40a58 passed gate   https://review.openstack.org/#/c/294206/05:09
vhosakotsdake: ^^05:09
sdakeour gate doesn't test swift05:09
sdakeour gate doesn't test much of anything tbh05:09
vhosakotright... also gate does do "docker logs heka"05:10
sdakeit tests deploy and tests a vm boots05:10
vhosakotnot*05:10
sdakeit doesn't even deploy swift atm05:10
sdakeor cinder05:10
sdakeor heat05:10
sdakeor manila05:10
sdakeor anything but compute kit05:10
vhosakotyep, just init_runonce05:10
sdakewe need seprate gates for swift etc05:11
sdakeor we need multiple nodes and deploy storage on one node and compute on that node and controller on another05:11
sdakethere is a 8x2 gate hardware we can use05:11
vhosakotsdake: all the patch sets that touch heka in the past couple of days05:12
vhosakothttps://review.openstack.org/#/q/project:openstack/kolla+message:heka05:12
sdakethis is the part that looks prematic05:14
sdake2016/03/23 05:12:36 Pre-loading: [rabbitmq_logstreamer_input]05:14
sdake2016/03/23 05:12:36 Pre-loading: [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-auditor'}_file_output]05:14
sdake2016/03/23 05:12:36 Pre-loading: [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-reaper'}_file_output]05:14
sdake2016/03/23 05:12:36 Pre-loading: [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-replicator'}_file_output]05:14
sdake2016/03/23 05:12:36 Pre-loading: [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-server'}_file_output]05:14
sdakesrc: swift enabled: yes name: whatever is not being processes in teh pre-loading05:14
vhosakotsdake: you talking about https://review.openstack.org/#/c/294206/3/ansible/roles/common/tasks/config.yml05:16
vhosakot?05:16
sdakeyup05:16
sdakeis this correct syntax05:16
sdake    src: "heka-{{ item.src|default(item.name) }}.toml.j2"05:17
coolsvapthere is one more review https://review.openstack.org/#/c/28311805:17
coolsvaprelated to swift logging to heka05:17
sdakethat ws merged in february05:17
vhosakotI see it05:17
sdakeit is definatel ythis patch05:17
sdakei reverted it, and swift works after the revert05:17
sdakehere is what this line is suppose dto do05:19
sdake    src: "heka-{{ item.src|default(item.name) }}.toml.j2"05:19
sdakeits supposed to tak eheka and append item.src to it if its defined, if not then it supposed to append default.name05:19
sdakerather item.name05:20
sdakevhosakot do you think that line does that?05:20
vhosakotsdake: wait, to check if the syntax works, check dest folder on host for *.toml files in /etc/kolla/heka05:20
sdakei can tell the syntax is wrong vhosakot05:21
sdakewhat i want to know is what is the correct syntax05:21
sdakehere is how I know the syntax is wrong05:21
sdake  <sdake>2016/03/23 05:12:36 Pre-loading: [rabbitmq_logstreamer_input]05:21
sdake[22:14:06]  <sdake>2016/03/23 05:12:36 Pre-loading: [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-auditor'}_file_output]05:21
*** weiyu_ has quit IRC05:21
vhosakotthe or |05:21
sdakeyou see rabbitmq_logstreamer_input is pulled in correctly05:22
vhosakotah05:22
sdakepre-loading is pulling in src: swift enabled: yes name: swit-account-auditor_file_output05:22
vhosakotso, src: "heka-{{ item.src|default(item.name) }}.toml.j2"   is failing failing to get src: for swift05:24
vhosakothttps://github.com/openstack/kolla/blob/master/ansible/roles/common/templates/heka-swift.toml.j2 should be copied when swift is enabled.. if it is not happening.. it is bug05:25
elemoine_vhosakot sdake, I can't help right now but I'll be in the office in about one hour05:26
sdakesoundsgood elemoine_05:26
vhosakotelemoine_: cool :)05:26
sdakevhosakot bug in what05:26
sdakebug in ansible?05:27
sdakeor bug in the implementation05:27
vhosakotsrc: "heka-{{ item.src|default(item.name) }}.toml.j2"   not copying  https://github.com/openstack/kolla/blob/master/ansible/roles/common/templates/heka-swift.toml.j2  when swift is enabled05:27
vhosakotsdake: if you can pastebin the output of the task "Copying over heka config files" when swift is enabled, I can check05:28
sdakemoment05:29
openstackgerritAllen Gao proposed openstack/kolla-mesos: Fix the deprecated security_group_api and network_api_class  https://review.openstack.org/29045405:31
*** phuongnh has quit IRC05:34
sdakevhosakot http://paste.fedoraproject.org/344024/58711354/ -> http://paste.fedoraproject.org/344024/5871135405:36
sdakelooks busted to me05:36
vhosakotit skipped everything05:36
coolsvapi am also getting similar issue05:36
vhosakothmm05:37
sdakeits supposed to skip that is the point of sam's change05:39
vhosakotthe condition  "when: item.enabled | bool"  is true for each item.. why was each item skipped05:39
sdakehmm good point05:40
vhosakotcoolsvap: do you have swift and rabbit enabled ?05:40
vhosakotI'd add a debug and print item.enabled...05:40
coolsvapi have swift enabled i wanted to test the drop root for swift05:40
coolsvaplet me stop deploy and start again05:41
vhosakotshould it be      enabled: {{ enable_swift }}   without quotes  instead of    enabled: "{{ enable_swift }}"05:41
vhosakotlet me check other yml files05:41
*** salv-orlando has joined #kolla05:42
vhosakotcoolsvap: this affects copying only heka files... I think the rest of swift should be ok05:42
* coolsvap checkint05:43
coolsvapchecking*05:43
vhosakotsdake: the quotes are correct... for some reason,   when: item.enabled | bool    is false05:44
sdakevhosakot let me try05:44
sdakemoment05:44
elemoine_vhosakot sdake probably unrelated but the mariadb line has enable_rabbitmq. Sounds like a bug.05:45
sdakeelemoine_ good catch05:46
vhosakotsdake: you could to    - debug: msg="value of when is {{item.enabled }}"05:46
vhosakotelemoine_: yes, good catch...unrelated bug05:47
sdakevhosakot so your suggetion is to remove the quotes05:47
vhosakotsdake: no, the quotes are fine05:47
vhosakotsdake: do "kolla-ansible deploy -t swift -vvvv" for extra verbose output05:48
*** salv-orlando has quit IRC05:49
sdakehttp://paste.fedoraproject.org/344025/58712173/ -> http://paste.fedoraproject.org/344025/5871217305:49
vhosakotsdake: let me check... do you see heka-swift.toml  in /etc/kolla/heka  on your host ?05:50
sdake2016/03/23 05:44:34 Pre-loading: [rabbitmq_log_decoder]05:50
sdake2016/03/23 05:44:34 Pre-loading: [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-auditor'}_file_output]05:50
sdakehere does the "Pre-loading" data come from05:51
sdakethat is what is busted05:51
sdakehttp://paste.fedoraproject.org/344026/87123021/ -> http://paste.fedoraproject.org/344026/8712302105:51
sdakeanswer: no05:51
sdakecontents of one of the files: http://paste.fedoraproject.org/344027/87123481/ -> http://paste.fedoraproject.org/344027/8712348105:52
vhosakotI see05:52
sdakethe contents of the file re where the problem is05:53
vhosakotyes,   [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-auditor'}_file_output]    does not look correct...05:53
sdakedefinately not correct05:53
sdakethat is what is cuasing the problem05:53
vhosakothttps://review.openstack.org/#/c/294206/3/ansible/roles/common/tasks/config.yml is causing that05:54
*** weiyu has joined #kolla05:55
sdakei found problem05:55
sdake[{{ item }}_file_output]05:55
sdakeit should be item.something05:55
sdakerather then just item05:55
vhosakothttps://github.com/openstack/kolla/blob/master/ansible/roles/common/templates/heka-swift.toml.j2#L405:55
vhosakothuh05:55
sdakein the template file that is copied05:55
sdakeheka-swift.toml.j205:55
vhosakotyeah here05:55
vhosakothttps://github.com/openstack/kolla/blob/master/ansible/roles/common/templates/heka-swift.toml.j2#L405:55
vhosakotgreat catch05:56
sdakeyup05:56
sdakei'm not sure what it shoudl be though05:56
sdakeitem.name?05:56
vhosakotlet me check... the variable   {{ item }}  does not even exist in that file05:57
sdakeit does exist in th tfile05:58
sdaketemplate imports it05:58
sdakeansible magic ftw05:58
sdakei am trying item.name05:58
sdakewill report after deploy05:58
openstackgerritKuo-tung Kao proposed openstack/kolla: add unit tests for build script  https://review.openstack.org/29042306:01
sdakei wish i had hair like jim kirk06:01
sdakehis hair rocks06:01
vhosakothaha06:01
sdakeok well that bug is fixed06:01
vhosakotsdake: look here.... https://github.com/openstack/kolla/blob/master/ansible/roles/common/templates/heka-haproxy.toml.j2#L11   just try  [swift__file_output]06:02
sdakenah i got it06:02
sdakemoment posting patch06:02
vhosakotitem.name ?06:02
*** jasonsb has quit IRC06:06
openstackgerritSteven Dake proposed openstack/kolla: Swift busted with Heka  https://review.openstack.org/29619006:09
sdakeelastic search still broken06:12
*** achanda_ has joined #kolla06:13
vhosakotnice fix!... I will pull latest code look into ES tomorrow...06:13
*** achanda has quit IRC06:14
openstackgerritSteven Dake proposed openstack/kolla: Mariad is nto copied if enable_rabitmq is disaled  https://review.openstack.org/29619406:16
openstackgerritSteven Dake proposed openstack/kolla: Mariad is not copied if enable_rabitmq is disaled  https://review.openstack.org/29619406:17
sdakeok everyone working on swift, your now unblocked ;-)06:17
sdakeenjoy06:17
coolsvapthx sdake06:18
openstackgerritSwapnil Kulkarni (coolsvap) proposed openstack/kolla: Mariadb is not copied if enable_rabitmq is disabled  https://review.openstack.org/29619406:18
sdakei already submitted that coolsvap06:18
coolsvapminor nit in commit06:18
coolsvapmessage06:19
*** vhosakot has quit IRC06:25
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612506:25
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612506:30
sdakeok off to bed06:30
sdakeenjoy06:30
sdakeelemoine if you want to look into the eleastic search heka problem that would be fantastic :)06:30
sdakei looked and dont see the same item problem06:31
*** sdake_ has joined #kolla06:35
*** sdake has quit IRC06:36
*** ssurana has quit IRC06:40
openstackgerritSteven Dake proposed openstack/kolla: MariaDB is not copied if enable_rabitmq is disaled  https://review.openstack.org/29619406:42
coolsvapsdake_: s/disaled/disabled :)06:42
*** vhosakot has joined #kolla06:42
openstackgerritSteven Dake proposed openstack/kolla: MariaDB is not copied if enable_rabitmq is disaled  https://review.openstack.org/29619406:43
*** sdake_ has quit IRC06:44
*** sdake has joined #kolla06:44
*** vhosakot has quit IRC06:48
openstackgerritSteven Dake proposed openstack/kolla: MariaDB is not copied if enable_rabitmq is disabled  https://review.openstack.org/29619406:48
*** jtriley has joined #kolla06:53
*** salv-orlando has joined #kolla06:58
*** jtriley has quit IRC06:59
*** mdnadeem_ has joined #kolla07:07
openstackgerritMerged openstack/kolla: Changes horizon log location to kolla_logs volume  https://review.openstack.org/29556807:09
*** gfidente has joined #kolla07:10
*** vishwanathj is now known as vishwanathj_away07:12
openstackgerritMerged openstack/kolla: Added note about nested environment  https://review.openstack.org/29538907:13
openstackgerritMerged openstack/kolla: Reconfigure for haproxy  https://review.openstack.org/28824807:14
*** salv-orlando has quit IRC07:15
*** weiyu has quit IRC07:15
*** cristicalin has joined #kolla07:17
*** weiyu_ has joined #kolla07:19
*** sdake has quit IRC07:23
*** achanda_ has quit IRC07:26
*** aginwala has quit IRC07:29
openstackgerritMD NADEEM proposed openstack/kolla: Reconfigure for haproxy  https://review.openstack.org/29622907:30
*** mikelk has joined #kolla07:33
*** achanda has joined #kolla07:35
*** Serlex has joined #kolla07:49
openstackgerritBenedikt Trefzer proposed openstack/kolla: Use debian repos for debian base docker image  https://review.openstack.org/28893607:55
*** coolsvap has quit IRC07:56
*** achanda has quit IRC08:06
*** stvnoyes has quit IRC08:06
*** stvnoyes has joined #kolla08:07
*** achanda has joined #kolla08:08
*** achanda has quit IRC08:11
*** achanda has joined #kolla08:12
*** achanda has quit IRC08:12
*** achanda has joined #kolla08:13
*** achanda has quit IRC08:13
*** athomas has joined #kolla08:20
*** mbound has joined #kolla08:34
*** shardy has joined #kolla08:37
*** weiyu_ has quit IRC08:46
*** weiyu_ has joined #kolla08:46
*** jmccarthy has quit IRC08:49
*** jmccarthy has joined #kolla08:50
*** jtriley has joined #kolla08:55
*** jtriley has quit IRC09:00
*** openstackgerrit has quit IRC09:03
*** openstackgerrit has joined #kolla09:04
*** salv-orlando has joined #kolla09:06
*** achanda has joined #kolla09:14
*** achanda has quit IRC09:20
*** cristicalin has quit IRC09:33
*** dims has joined #kolla10:00
*** mikelk has quit IRC10:05
*** mikelk has joined #kolla10:05
*** pbourke has quit IRC10:14
*** pbourke has joined #kolla10:15
*** iceyao_ has quit IRC10:16
*** Jeffrey4l has joined #kolla10:49
*** weiyu_ has quit IRC10:53
*** jtriley has joined #kolla10:56
*** jtriley has quit IRC11:02
*** dims_ has joined #kolla11:05
*** dims has quit IRC11:06
elemoine_sdake what is the elasticsearch heka problem you mentioned?11:08
*** Jeffrey4l has quit IRC11:10
*** rhallisey has quit IRC11:17
*** Jeffrey4l has joined #kolla11:17
*** rhallisey has joined #kolla11:17
*** achanda has joined #kolla11:19
*** mlima has joined #kolla11:21
*** mlima_ has joined #kolla11:23
openstackgerritSerguei Bezverkhi proposed openstack/kolla: iscsi container with lvm2 support  https://review.openstack.org/29128511:23
*** achanda has quit IRC11:24
*** mlima has quit IRC11:26
*** Jeffrey4l has quit IRC11:28
*** kproskurin has joined #kolla11:29
*** Jeffrey4l has joined #kolla11:47
*** haplo37 has joined #kolla11:50
openstackgerritMerged openstack/kolla: Remove ironic images from excluded list  https://review.openstack.org/29603311:54
*** Jeffrey4l has quit IRC11:58
*** salv-orl_ has joined #kolla12:02
*** haplo37 has quit IRC12:04
*** salv-orlando has quit IRC12:04
ccesariomorning!12:10
*** dwalsh has joined #kolla12:20
*** Jeffrey4l has joined #kolla12:25
openstackgerritMerged openstack/kolla: Add PBR generation of version information  https://review.openstack.org/29612412:33
openstackgerritMerged openstack/kolla: Swift busted with Heka  https://review.openstack.org/29619012:36
*** Jeffrey4l has quit IRC12:38
*** Jeffrey4l has joined #kolla12:40
openstackgerritSam Yaple proposed openstack/kolla: Bump ansible container deploy version  https://review.openstack.org/29641212:42
*** mathlin has joined #kolla12:44
*** Jeffrey4l has quit IRC12:47
*** mbound has quit IRC12:49
*** dave-mccowan has joined #kolla12:52
*** athomas has quit IRC13:20
*** mbound has joined #kolla13:20
*** achanda has joined #kolla13:22
*** athomas has joined #kolla13:24
sbezverkGood morning, I still see issue with heka and swift even with the latest merged fix. http://paste.openstack.org/show/491577/13:24
elemoine_sbezverk: has the patch being merged?13:25
sbezverkelemoine_ I think so13:25
elemoine_yes, it was13:26
elemoine_strange13:26
sbezverkyep, just checked the source I have13:26
sbezverkand it has fixed code13:26
*** achanda has quit IRC13:27
elemoine_sbezverk: try to docker rm -f heka13:28
elemoine_and then re-deploy13:28
sbezverkI will, but what is strange if you check the log I pasted13:29
sbezverktoml files are correctly generated, the issue happens when heka tries to load them..13:30
elemoine_this can happen if the Heka is restarted with the same (bad) config files inside the container13:30
*** absubram has joined #kolla13:32
*** absubram_ has joined #kolla13:33
sbezverkelemoine_ anyway to enable additional debug in heka to nail which one is causing it?13:35
elemoine_not sure right now13:35
elemoine_I can try to reproduce the problem13:36
sbezverkelemoine_ sdake managed to repro exactly the same issue as I am seeing now..13:37
*** absubram has quit IRC13:37
*** absubram_ is now known as absubram13:37
*** jtriley has joined #kolla13:38
*** Serlex has quit IRC13:39
elemoine_sbezverk: I am new reproducing with sdake's patch13:40
elemoine_s/new/not13:41
*** iceyao has joined #kolla13:41
sbezverkelemoine_ hmm, I did what you suggested and still the same for me..13:46
elemoine_are you sure you have the latest code?13:47
elemoine_it is strange13:47
sbezverkelemoine_ sure 100% after I saw merge for that fix I clone master13:47
elemoine_but it looks like th heka container is started with bad config files13:48
sbezverkelemoine_ what is even mode strange I have swift disabled, but still it gets installed..13:49
elemoine_what!?13:49
elemoine_is the heka container running? or did it exit because it couldn't start properly?13:50
elemoine_if it runs you could run docker exec to check the config within the container13:51
SamYaplemorning13:51
sbezverkGood morning SamYaple13:52
sbezverkelemoine_ heka container keeps restarting13:52
elemoine_I see13:52
elemoine_did you try to remove everything using ./tools/cleanup-containers?13:53
sbezverkelemoine_ clean-containers, clean-host, clean-images, reboot 2 times13:54
sbezverkelemoine_ I checked the config file and I do not see anywhere enable swift13:55
elemoine_do you have swift files in /etc/kolla/heka?13:56
elemoine_you probably have incorrect files in there13:56
elemoine_from your previous deploy with swift_enabled13:56
elemoine_and now you're not generating new files because you have swift disabled13:57
sbezverkelemoine_ that is a possibility, but if it is the case it sounds like a bug to me13:57
*** haplo37 has joined #kolla13:57
SamYaplesbezverk: which container is breaking?13:57
sbezverkif swift is disabled, everything related to it must be just ignored.13:57
sbezverkSamYaple heka13:58
elemoine_we know that we have bugs when changing the settings (the enable_ flags)13:58
SamYaplei think i fixed that, its all optional now13:58
elemoine_SamYaple: different issue here13:58
SamYapleoh13:58
sbezverkelemoine_ I am moving all swift related from /etc/kolla/config on me deploying machine  and will re-try..14:01
*** absubram has quit IRC14:02
*** kproskurin has quit IRC14:02
*** dims has joined #kolla14:04
*** dims_ has quit IRC14:04
*** achanda has joined #kolla14:05
*** achanda has quit IRC14:07
*** salv-orl_ has quit IRC14:07
openstackgerritMerged openstack/kolla: Reconfigure for haproxy  https://review.openstack.org/29622914:08
*** openstack has joined #kolla14:22
sbezverkSamYaple deployment is done on my server in less than 5 minutes :-) and the only rpm with conntrac I see is this one: libnetfilter_conntrack-1.0.4-2.el7.x86_6414:24
SamYapleok thanks14:26
rhalliseySamYaple, multinode is going well so far :)14:26
*** sdake has joined #kolla14:27
openstackgerritSam Yaple proposed openstack/kolla: Add conntrack-tools  https://review.openstack.org/29648114:27
SamYaplerhallisey: awesome!14:27
SamYapleglad to hear it14:27
sdakemorning14:27
sbezverkelemoine_ I am really puzzeled. I cleaned up everything swift related I do se during deployment it is skipped, but heka still flapping..14:27
SamYaplemorning sdake please see contrack patch above, need it to land in mitaka doo14:28
SamYapletoo*14:28
sdakewe got a whole bunch of patches neeed to land14:28
SamYapleyea but this is fairly high14:28
SamYapleits not breaking, but it will cause problems for longer rnning things14:29
*** mgoddard has quit IRC14:30
*** mgoddard has joined #kolla14:32
rhalliseymy host name was longer than 64 chars XD14:35
rhalliseyblows up rabbit14:35
SamYaplerhallisey: actually individual parts of the hostname can only be 63 chars, with the entire FQDN bing 25514:38
SamYapleerlang is just enforcing the RFS14:38
SamYapleRFC*14:38
SamYaplerhallisey: https://tools.ietf.org/html/rfc112314:39
SamYaple"string of labels each containing up to 63 8-bit octets"14:39
SamYaplethats the section you want to read14:39
*** Serlex has joined #kolla14:39
rhalliseyneat14:42
sdakefolksgive me 15 mins to wake up14:43
sdakecaffeine free diet means i'm not zero to hero in 3 minutes of slamming a pepsi14:44
*** sdake_ has joined #kolla14:48
*** inc0 has quit IRC14:48
*** sdake has quit IRC14:49
*** athomas has quit IRC14:49
*** inc0 has joined #kolla14:49
*** Serlex has quit IRC14:50
elemoine_sbezverk: what do you have in /etc/kolla/heka?14:51
*** iceyao has quit IRC14:52
sbezverkelemoine_ on the deployment host or on the target host?14:52
*** Jeffrey4l has joined #kolla14:52
*** sdake has joined #kolla14:52
elemoine_on the deployment host?14:53
*** sdake_ has quit IRC14:53
*** athomas has joined #kolla14:53
sdakenote its an even week this week, our meeting is at 16:30 UTC14:53
sbezverkelemoine_ on the deployment host /etc/kolla/heka does not exist14:54
elemoine_that's a suprise to me14:54
openstackgerritMichal Rostecki proposed openstack/kolla-mesos: [WIP] Fix OpenStack services registration  https://review.openstack.org/29125114:54
sdakesbezverk your definately running withou the patch14:56
sdakebut let me double check its actually working on my end with a fresh setup14:56
sbezverkelemoine_ it seems cleaning tools do not clean /etc/kolla directory it has all sorts of old junk14:56
sdakesbezverk the way i can tell is 2016/03/23 14:14:18 Pre-loading: [{'src': 'swift', 'enabled': u'yes', 'name': 'swift-account-auditor'}_file_output]14:56
sbezverkI will remove /etc/kolla from the target and re-deploy14:56
sdakefrom docker logs14:56
sdakekeep a copy of globals.yml14:57
sbezverksdake how is it possible if when I do git log I see your patch merged?14:58
sbezverkand the folder I use for dpeloyment is in sync with master14:58
sdakeit is possible that your heka config files are not being copied over14:58
sdaketo /etc/kolla/heka/*14:58
sdakei noticed this bheavior when debugging the patch lat night14:59
sdakethat sometimes the files are not copied14:59
sbezverksdake ok, I will remove all kolla traces on the target server and re-deloy14:59
sdakeya its pretty straightforwar to clean up14:59
sdakebut i am dobule checking on my end to make sure it sitll works14:59
sbezverksdake I would suggest to add a step in clean-host to kill /etc/kolla on the target host14:59
SamYaplewho would be interested in a kolla_kill script that just thoughtlessly removes any files kolla related?15:00
sdakeelemoine did you fix the elastic search15:00
sdakeSamYaple +315:00
sdakeor make that partof kolla-host15:01
sbezverkSamYaple that would be awsome, it will prevent problems like this one..15:02
sdakesbezverk why is ringbuild not in the repoistory15:02
sdakerather kolla-clenaup-host15:02
elemoine_sdake: what elasticsearch bug are your referring to?15:02
sdakei think our kolla-cleanup-host needs love, neesd to remove traces of ceph as well15:02
sdakeelemoine_ heka and elasticsearch are broken together15:02
sdakeits i the bug tracker, need a ink?15:02
elemoine_yes, I do, because the tests I ran today did not reveal any problem15:03
sdakei didn't get to it last night15:03
sdakemaybe broken is the wrong word15:03
sbezverksdake not sure what you are refering too?15:03
sdake"returning errors' is th e right statement15:03
sdakehttps://bugs.launchpad.net/kolla/+bug/156077915:04
openstackLaunchpad bug 1560779 in kolla "heka elasticsearch is busted" [High,Confirmed] - Assigned to Vikram Hosakote (vhosakot)15:04
sdakeelemoine_  6^15:04
sdakesbezverk here is my docker logs http://paste.fedoraproject.org/344196/45478145/ -> http://paste.fedoraproject.org/344196/4547814515:04
sdakeyou see gone are the swift things15:04
sdakeI just did a git pull --rebase15:04
*** absubram has joined #kolla15:05
elemoine_sdake: the elasticsearch problem is related to Elasticsearch not being started15:05
sdakei backed up the two yml files in /etc/kolla and rm -rf /etc/kolla15:05
elemoine_deploy elasticsearch and the error logs will go away15:05
sdakeelemoine_ is that just a warning or a critical error?15:05
sdakeso heka's files shoudlnt deploy if eleasticsearch is disabled then i suppose is the fix?15:06
elemoine_it's a warning basiccally15:06
sdakeok - i dont like warnings but we can mke it medium priority15:06
openstackgerritMichal Rostecki proposed openstack/kolla-mesos: [WIP] Fix OpenStack services registration  https://review.openstack.org/29125115:06
elemoine_sdake: we already have the code to deal with that15:06
elemoine_but if you do say : kolla-ansible -t haproxy deploy15:07
elemoine_heka will start, while es won't15:07
elemoine_and you'll have to do kolla-ansible -t elasticsearch deploy to start es15:07
elemoine_then heka will manage to conect to es and the error will go away15:08
elemoine_makes sense?15:08
sdakeelemoine_ i am deploying master15:09
sdakeand it hapepns15:09
sdakehttp://paste.fedoraproject.org/344199/74580314/ -> http://paste.fedoraproject.org/344199/7458031415:10
sdakemy globalsyml file^15:10
sdakei am doing straight up sudo ./kolla-ansible deploy15:10
sdakeelemoine_ there was some rework of heka recently15:10
sdakeand i think it got busted15:10
*** openstackstatus has joined #kolla15:11
*** ChanServ sets mode: +v openstackstatus15:11
sdakeSamYaple which bug needs attention now?15:11
*** Serlex has joined #kolla15:11
elemoine_sdake: is elasticsearch started?15:11
sdakeSamYaple i had a dc for some reason - flakey wireless15:11
sdakeso not sure which one you said needs attention15:11
SamYaplehttps://review.openstack.org/#/c/296481/15:11
sdakeelemoine_ no its nto started15:11
elemoine_sdake: if it is Heka should stop outputting these logs15:11
sdakeelemoine_ my point is it shoudln't output these logs if eleasticsearch is disabled - but i'll fix it up15:12
elemoine_sdake: probably because es is not started by default15:12
elemoine_sdake: hmm, it should be15:12
*** mgoddard has quit IRC15:14
*** mgoddard_ has joined #kolla15:14
sdakeelemoine_ i'll dig itno it15:14
sdakeafter i fix these god awful pep8 errors in autogenerated code15:14
elemoine_sdake: I just ran a straight kolla-ansible deploy and elasticsearch did start15:14
sdakeyour right elasticserach is started in my environment15:15
sdakei dont know why i thought it wasn't15:15
sdakei think i looked for "elastic_search"15:15
elemoine_so you should not see more than a few "Plugin 'elasticsearch_output' error" lines in the Heka logs15:16
sdakeSamYaple nice catch15:16
sdakeelemoine_ here is my heka log15:16
sdakehttp://paste.fedoraproject.org/344207/87462011/ -> http://paste.fedoraproject.org/344207/8746201115:16
*** mgoddard__ has joined #kolla15:17
sdakeso i think this is a startup error15:17
elemoine_if you tail the heka logs do you see more errors showing up?15:17
sdakefrom what yu describe15:17
sdakeno the errors stop once elasticsearch is fully up15:17
sdakecan't we start es first?15:18
sdakeor alternatively get heka not to compain until ater a bit15:18
sdakehere is the dela about warnings15:18
elemoine_sdake: I mentioned this problem in my ES/Heka integration commit message15:18
sdakewhen people see wanrings in log they say "hey look something broken must fix"15:18
sdakeelemoine_ ok15:18
elemoine_and I don't have a solution to the problem right now15:18
sdakeelemoine_ can it be fixed15:19
sdakedo you have any solution that would work?15:19
elemoine_but I agree we should look at fixing this15:19
elemoine_I don't know  :)15:19
sdakethe problem is again, operators see problem, must fix15:19
sdakesince es is a dep of elastic search, es should start prior to heka15:20
sdakethe problem is the ordering is wrong15:20
elemoine_does kibana work you? I'd like to check that ES does collect logs15:20
*** dwalsh has joined #kolla15:20
sdakewhat is the port again15:20
sdake5601?15:20
elemoine_sdake: I know, but Heka already belongs to the common playbook, which is executed first15:20
elemoine_sdake: yes15:20
*** mgoddard_ has quit IRC15:21
inc0sdake, can you please review patch for rabbitmq upgrade?15:21
sbezverkelemoine_ sdake the mistery is solved, by cleaning /etc/kolla on a target machine15:21
inc0you -1 it but Sam commented15:21
sdakeelemoine_ yest here are logs15:21
sdakeinc0 link and yes15:21
sdakesbezverk ya thats a problem15:21
inc0sdake, https://review.openstack.org/#/c/287969/15:21
sdakesbezverk please filea bug15:22
*** ssurana has joined #kolla15:22
sdakea cleanup and deploy should result in a working deploy15:22
*** vhosakot has joined #kolla15:22
sdakeand by cleanup, i dont rmean removing all files in e/tc/kolla15:22
sdakeinc0 i already revieweed this patch days ago15:23
sdakebut i forgot to hit the reply button15:23
inc0lol15:23
sdakei thnk15:23
sdakemy main compalint was shell-true15:23
sbezverkyes I removed completely /etc/kolla15:23
inc0sdake, but that is from inside container to inside container15:24
sdakeinc0 nevermind that isn't what happeened, i am sstill waking up ;)15:24
inc0this shell never leaves container15:24
sdakeinc0 let me read your response15:24
inc0sure15:24
sdakeinc0 ok so just ot clarify shell=true is mandatory?15:26
sdakeraed my response real quick15:27
sdakei'm not arguing debates of whether its good idea or not or secure or not15:27
sdakei just need to know if its mandatory15:27
sdakebecause of bandit15:28
inc0SamYaple, around?15:28
inc0so I tried with shell false, can't remember why I didn't do shell false;)15:28
inc0let me double check15:28
sdakeif it doesn't work with shell=false then we can roll with that15:28
sdakei'd like confirmation though and something in the review tracker15:28
sbezverksdake https://bugs.launchpad.net/kolla/+bug/156105515:29
openstackLaunchpad bug 1561055 in kolla "enhancing target host clean script" [Undecided,New]15:29
sbezverksdake can we go back for a minute to discussion about systemd15:29
SamYapleinc0: sdake yea shell false breaks it15:30
*** dwalsh has quit IRC15:30
SamYaplebecause rabbitmqctl is a wrapper of a wrapper or soemthing15:30
SamYaplein the end it calls erlang things i believe15:30
SamYaplespecfically erl15:30
SamYapleshell=True is not dangeours here since none of the commands being executred are variable15:31
vhosakotelemoine: SamYaple: could you check my reply to the comments in https://review.openstack.org/#/c/296012/1  and let me know your thoughts15:32
sdakeSamYaple not debating if its secure or not15:32
sdakei'll change my vote to +215:33
*** mgoddard has joined #kolla15:33
*** mgoddard__ has quit IRC15:33
sdakeinc0 or SamYaple can one of you take responsibility for backporting the blueprints related to rabbitmq upgrade15:34
sdakeSamYaple you touched on something above, - shell=true is only dangerous when commands are variable passsed to the operation?15:37
sdakewe will eventually need comments in our code around these bandit complaint points where we #nosec them15:38
elemoine_vhosakot: you're suggestion makes sense to me15:38
vhosakotelemoine: thanks for the feedback!15:39
vhosakotelemoine: so, I will add lua parser for libvirtd.log for both master and Mitaka as a separate effort and patch set15:40
sdakeit should be a backport15:40
vhosakotsdake: yep, backport to mitaka.. right15:41
sdakecn you expalin why you would violate the master first backport policy15:41
vhosakotand implementtation for master15:41
sdakeok i misunderstood you15:41
vhosakotno, I will first implement and test in Newton master.. then, backport the parser to mitaka :)15:41
vhosakotI won't forwardport from Mitaka to Newton :)15:42
*** akwasnie1 has joined #kolla15:42
sdakevhosakot alot o peple operate that way - to their dismay it doesn't work at all15:42
vhosakotsdake: wow, I like new dev in master and backporting nice features/fixes to old release... so, the lua parser for libvirts.log will go in master first and then I'll backport it to mitaka15:43
vhosakotsdake: so, the ES bug is not high pri as the warninigs as expected when centrol_looging is disbaled ?15:44
sdakeis common a magic role in ansible that always gets deployed first?15:44
sdakeSamYaple i don't see it in the site.yml file15:44
sdakevhosakot i tihnk we need to fix it15:44
vhosakotsdake: conditional copy in config.yml ?15:45
vhosakotI'm heads down in new parser for libvirt15:45
sdakevhosakot there is an ordering problem15:45
vhosakotsdake: ah ok15:45
sdakevhosakot ya i'm taing this bug over15:45
vhosakotcool15:45
sdakevhosakot do yo uknow if common is some special magic role - i dont see it in site.yml15:46
vhosakotyes, I see common run when ES, heka, haproxy, anything is run15:47
vhosakotcommon containers have no tag15:47
sdakevhosakot yes but do you understand where common is programaticaly defined to run15:48
sdakei want to start es prior to common15:48
sdakeor alteernaviely heka needs too be taken out of common15:48
sdakeelemoine thoughts ^15:49
vhosakotsdake: it is a dep in meta for ES15:51
vhosakotsdake: https://github.com/openstack/kolla/blob/master/ansible/roles/elasticsearch/meta/main.yml#L315:51
openstackgerritMerged openstack/kolla: MariaDB is not copied if enable_rabitmq is disabled  https://review.openstack.org/29619415:51
SamYaplesdake: common is a meta role15:54
sdakevhosakot thanks15:54
sdakeSamYaple thanks15:54
sdakei get it now15:54
vhosakotsdake: cool15:54
vhosakotok, back to lua15:55
* vhosakot is liking the emails about Heat vs Ansible :)15:56
sdakeheat solves a different problem then ansible15:56
sdakeSamYaple looking for a recommendation here15:56
sdakeSamYaple elasticsearch must start prior to heka15:56
sdakeheka is in common15:57
*** mgoddard_ has joined #kolla15:57
SamYapleit depends on what is needed then15:58
SamYapledoes it need the log directories already created?15:58
SamYapleyou can start elasticsearc hwithout the common role dep15:58
sdakelet me check o n the named volume access15:59
sdakeit does nto depend on any named volumes but eleasticserach16:00
sdakeand obviously the copying of the cifngs16:00
*** daneyon has quit IRC16:00
*** mgoddard has quit IRC16:01
SamYaplethen move it to the first thing in site.yml and remove its meta entry16:01
sdakeit may depend on database16:01
sdakei am not sure16:01
sdakei will need to look at the code16:01
akwasnie1hi guys, I see there is a problem with elasticsearch/heka?16:02
sdakebut that sounds good if i t has no other deps16:02
SamYaplewhy does elasticsaerch need to start first?16:02
sdakeSamYaple heka ctries to connect to es and generatess a spew of 30 warnings16:02
sdakeso es is a dep of heka16:02
SamYaplei mean you can make meta roles conditional16:03
elemoine_heka can wait no problem, it's just "embarassing" to see these error messages in the heka logs16:03
SamYapleoh thats not a big issue then16:03
sdakeya this isnt' critical16:03
SamYapleok cool16:03
sdakebut i'd like it fixed for mitaka16:03
openstackgerritSwapnil Kulkarni (coolsvap) proposed openstack/kolla: MariaDB is not copied if enable_rabitmq is disabled  https://review.openstack.org/29656516:03
sdakeits medium prioritory in the tracker atm16:03
sdaketrust me from years of support experience any log message needs to be explained ;)16:03
*** mgoddard_ has quit IRC16:04
*** mgoddard has joined #kolla16:04
openstackgerritSwapnil Kulkarni (coolsvap) proposed openstack/kolla: Swift busted with Heka  https://review.openstack.org/29656616:04
elemoine_sdake: I agree with you, I'll see if I can come up with a work-around, but I don't think we should require ES to be started before Heka16:04
sdakeelemoine_ can you expand on that16:05
gmmahahi, has anyone seen a scenario where the docker containers are stuck at restarting and they dont come up..16:05
sdakegmmaha how old areyour containers16:05
gmmahais there a way i can get to some sorta logs that will tell us whats going on16:05
openstackgerritSerguei Bezverkhi proposed openstack/kolla: Add creation of new log folder for Horizon  https://review.openstack.org/29656916:05
vhosakotgmmaha: which containers.. name please16:05
gmmahasdake: probably 5 days max16:05
sdakegmmaha you can use docker logs16:05
gmmahavhosakot: keystone and horizon16:05
sdakecentos binary?16:05
vhosakotgmmaha: stale pid files.. there was a fix recetnly16:05
gmmahasdake: ubuntu binaries16:06
sdakeelemoine can you expand why reorodering isnt' viable?16:06
gmmahavhosakot: aah16:06
elemoine_sdake: enforcing containers start with Ansible is a bad idea in my opinion, think reboots for example16:06
elemoine_I mean "enforcing containers start order"16:06
sdakei dont know how well kolla works with a reboot situation16:07
sdakelast time i tested that it wasn't good16:07
elemoine_sdake: I tested it as well, and it  was not good16:07
gmmahasdake: vhosakot: they are both stuck with these errors http://paste.openstack.org/show/491615/16:07
elemoine_it's a major issue IMO16:07
sdakethe reason its not good is because of ordering16:07
vhosakotgmmaha: it is fixed in master now https://bugs.launchpad.net/kolla/+bug/155703616:07
openstackLaunchpad bug 1557036 in kolla "httpd (pid 1) already running when starting keystone or horizon container" [Critical,Fix released] - Assigned to Sam Yaple (s8m)16:07
sdakeelemoine_ agree16:07
SamYaplefor the record, i run with restart policy == never for this reason guys16:08
sdakedocker has no dependency managmeent built into its daemon16:08
vhosakotgmmaha: delete everything in /var/run/apache2/* in horizon and restart16:08
gmmahavhosakot: aaah16:08
gmmahacook16:08
gmmahacool16:08
gmmahalet me try that16:08
gmmahathanks16:08
* gmmaha makes a note to update to the latest release with the fix16:08
gmmahathanks vhosakot sdake16:08
vhosakotgmmaha: cool, let me know if it works16:08
sdakegmmaha happy to help16:08
sdakerestart=never doesn't fix the reboot problem16:09
vhosakotgmmaha: I update to master multiple times a day16:09
vhosakotgmmaha: don't lose out the fixes :)16:09
gmmahavhosakot: :)16:09
gmmahaindeed..16:09
SamYaplevhosakot: that fix should be in mitaka16:09
SamYapleit merged before branch16:09
vhosakotSamYaple: ah...16:10
gmmahavhosakot: when you say delete everything in horizin under /var/run/apache2, might i ask how do i do that? The container doesnt respond to any bash/exec commands :(16:10
gmmahasorry very novice with docker containers16:10
vhosakotSamYaple: so, should it be forwardported ? shouldn't the fix come to master as well ?16:10
vhosakotSamYaple: is forwardport a thing ? or the fix needs to be redone in master16:10
SamYaplevhosakot: its in master and mitaka16:12
vhosakotSamYaple: nice!16:12
vhosakotSamYaple: i just checked it.. cool16:12
vhosakotgmmaha: will send the commands .. 1 sec16:13
gmmahavhosakot: thanks a ton!16:13
inc0gmmaha, you shouldn't delete it in docker container16:13
inc0you should remove docker container itself16:13
inc0basically containers should be immutable, so you don't change anything inside16:13
gmmahainc0: aah ok..16:14
inc0what's the issue you're having anyway?16:14
gmmahainc0: the base machine restarted and now horizon and keystone containers are stuck inrestarting mode16:14
gmmahainc0: vhosakot just ponited me to this bug. https://bugs.launchpad.net/kolla/+bug/155703616:14
openstackLaunchpad bug 1557036 in kolla "httpd (pid 1) already running when starting keystone or horizon container" [Critical,Fix released] - Assigned to Sam Yaple (s8m)16:15
sdakethat has been fixed in our code base about 5different times16:15
sdakei dont get why it keeps oppign up16:15
SamYaplesdake: not for ubuntu16:15
inc0gmmaha, try upgrading to master16:15
vhosakotgmmaha: so, running  "docker exec horizon em -rf /var/run/apache2/*"  will delete stalepid files in horizon16:15
sdakeoh for centos only then?16:15
inc0this fix is out there16:15
vhosakotem==rm16:15
SamYaplevhosakot: not when the container is not running16:15
vhosakotSamYaple: right right.. stop it forst16:16
vhosakotfirst16:16
SamYaplevhosakot: no that doesnt work when the contaienr is stopped16:16
inc0vhosakot, opposite, it won't work16:16
SamYapleexec requires container is running16:16
inc0if container is in restarting loop, you should remove-recreate it16:16
gmmahaguess ihave to blow away the container16:16
inc0yeah, do it16:16
inc0but rebuild your contiainers to latest master16:17
gmmahainc0: sdake: vhosakot: thanks. will destroy them and get them bck again16:17
inc0so you'll do effective upgrade16:17
vhosakotI meant, exec to delete stale piu files, stop, restart... it worked for me the other day16:17
inc0and this bug is already fixed16:17
vhosakotgmmaha: yep, delete and recreate. that is the best16:17
gmmahavhosakot: thanks..16:17
inc0also you can try to run kolla-ansible upgrade :)16:17
inc0instead of full deplo16:17
gmmahainc0: sure16:17
inc0just rebuild containers prior to that16:18
vhosakotinc0: to run "kolla-ansible upgrade", we need to build the latest images first ? is this right ? how do we upgrade ?16:18
vhosakotinc0: pull master, kolla-build, kolla-ansible upgrade ... is this workflow correct ?16:18
inc0yes16:19
inc0this will upgrade running infra to latest master16:19
vhosakotall containers ?16:19
sdakevhosakot nearly all containes *16:19
vhosakotor only containers that have their Dockerfile _changed_ in master16:19
inc0vhosakot, really those which you want upgraded16:19
vhosakotinc0: ah ok, cool16:20
inc0but I'd suggest all16:20
vhosakotinc0: cool16:20
inc0since you don't want to have different base images16:20
inc0(for example different version of apt-get installed packages in base)16:20
openstackgerritMerged openstack/kolla: Add conntrack-tools  https://review.openstack.org/29648116:20
vhosakotyep, agrred... upgarde all the things16:20
inc0that's the way it should be handled16:21
vhosakotcool.. thanks for the info16:21
inc0but upgrade will only change if image differs from what is out there16:21
inc0so if you specifically want to keep container x not-upgraded, just don't build new image16:21
openstackgerritSam Yaple proposed openstack/kolla: Add conntrack-tools  https://review.openstack.org/29658716:21
inc0or use kolla-ansible upgrade -t horizon to upgrade just horizon for example16:22
inc0(which is impossible without containers \o/)16:22
sdakegroan heka is dependent on haproxy as well16:24
sdakeelemoine_ ^^16:24
sdakei think heka needs to go out of the common meta16:25
*** dwalsh has joined #kolla16:25
vhosakotinc0: cool16:26
SamYaplesdake: no16:29
SamYapleheka is a requirement16:29
SamYapleit setups the logs directories and what not16:29
vhosakotmeeting in 1 min ?16:29
SamYapleit _needs_ to be started16:29
*** jasonsb has joined #kolla16:30
sdakecircular dependendcies ftl16:30
sdakeok folks meeting time16:31
sdakeinc016:31
elemoine_heka creates the syslog unix socket that other services/containers may use16:31
sdakerhallisey jpeeler elemoine_16:31
elemoine_so it needs to be started first16:31
rhalliseysdake, already said hi16:31
*** salv-orlando has joined #kolla16:31
elemoine_if heka relies on resources created by other services then it should wait :)16:32
SamYapleim not worried about a few errors that pop up on start up right now16:32
*** jasonsb has quit IRC16:38
*** salv-orlando has quit IRC16:38
*** jasonsb has joined #kolla16:39
*** akwasnie1 has quit IRC16:39
*** vishwanathj_away is now known as vishwanathj16:39
*** akwasnie1 has joined #kolla16:40
sbezverkwhich one is meeting channel?16:40
*** mikelk has quit IRC16:41
vhosakotsbezverk: #openstack-meeting-416:42
*** salv-orlando has joined #kolla16:42
vhosakotsbezverk: /join #openstack-meeting-416:42
*** aginwala has joined #kolla16:44
*** aginwala has quit IRC16:49
*** salv-orlando has quit IRC16:54
*** achanda has joined #kolla16:58
*** Pierre_Carette has joined #kolla16:58
mlima_hello guys17:02
mlima_i have this error17:02
mlima_TASK: [common | Starting heka bootstrap container17:02
mlima_failed: [localhost] => {"changed": true, "failed": true}17:02
mlima_msg: Container exited with non-zero return code17:02
SamYaplemlima_: docker logs?17:03
mlima_ERROR:__main__:The source to copy does not exist: /var/lib/kolla/config_files/heka-haproxy.toml17:03
mlima_i set enable_haproxy: "no"17:03
*** achanda has quit IRC17:03
mlima_full log http://pastebin.com/Aaikig8b SamYaple17:04
*** dims_ has quit IRC17:05
*** dims has joined #kolla17:06
openstackgerritSam Yaple proposed openstack/kolla: Enable horizon domain logins  https://review.openstack.org/29661917:09
*** jasonsb has quit IRC17:09
SamYaplemlima_: file a bug against master17:09
mlima_ok17:10
SamYaplei know the issue. there is a partial fix here https://review.openstack.org/#/c/294206/17:10
SamYapleill get it fixed and into mitaka for you17:10
mlima_ok17:10
mlima_https://bugs.launchpad.net/kolla/+bug/1561111 SamYaple17:13
openstackLaunchpad bug 1561111 in kolla " Starting heka bootstrap container failed in deployment" [Undecided,New]17:13
*** achanda has joined #kolla17:14
*** mgoddard has quit IRC17:16
*** dwalsh has quit IRC17:16
*** mgoddard has joined #kolla17:16
openstackgerritMichal Rostecki proposed openstack/kolla-mesos: Cleanup volumes on multiple nodes  https://review.openstack.org/29111617:22
*** dougs has joined #kolla17:23
openstackgerritSerguei Bezverkhi proposed openstack/kolla: iscsi container with lvm2 support  https://review.openstack.org/29128517:24
*** gfidente has quit IRC17:24
SamYaplemlima_: thanks will get it fixed up for you!17:25
*** aginwala has joined #kolla17:26
openstackgerritMerged openstack/kolla: MariaDB is not copied if enable_rabitmq is disabled  https://review.openstack.org/29656517:27
dougsDoes anyone use Kolla with Pacemaker?17:27
dougs(For HA)17:28
SamYapledougs: we use haproxy and keepalived17:29
SamYaplethen for rabbitmq we cluster that, mariadb + galera handeles the database17:29
*** achanda has quit IRC17:29
dougsSamYaple, how do you handle fencing?17:30
sdakedougs kolla does no isolation as part of its HA system17:31
*** akwasnie1 has quit IRC17:31
dougssdake, thanks17:32
sdakedougs i've worked on ha my entiere life17:32
sdakei invented corosync for example17:32
sdakei can say that fencing isn't absolutely necessary17:32
sdakebut in the case of kolla isolation woudl be helfpul17:32
sdakewhat isolation is really needed is network isolation though, not fencing17:33
*** achanda has joined #kolla17:33
gmmahainc0: tried kolla-ansible upgrade and hitting this error.. http://paste.openstack.org/show/491619/17:33
sdakegmmaha is that master?17:34
gmmahasdake: yes sir17:34
* sdake groans17:34
sdakedare you familiar with launchpad enough to file a bug?17:34
gmmahayes i am :)17:35
* gmmaha goes to file a bug with some logs 17:35
gmmahawell, with the tiny logs17:35
sdakewould you do so17:35
sdakeand link when done17:35
gmmahaaye aye17:35
sdakeinc0 may have some suggestions for information he woudl like in the log17:35
gmmahainc0: anything else uou would like17:35
sdakei'd recommend running kolla-ansible upgrade -vvv though17:35
gmmahai can run the same ansible with much more verbose logging17:35
gmmahasdake: you are quick.. yes will do that17:36
sdakekolla-ansible takes --vvv flags17:36
*** mbound has quit IRC17:36
sdakei dont recall 1 dash or 2 ;)17:36
gmmahasdake: one dash17:36
gmmahaand i have 4 vs.. not sure if that will help..17:36
* gmmaha isnt sure of the limit on the v's17:37
sdaketry to be dettailed17:37
sdakeinclude your inventory file please17:37
gmmahasure17:37
sdakelet me try upgrade with master on my aio setup17:37
gmmahasdake: sure.. thsi is multinode if that matters.17:37
gmmahawill put it all in the logs17:37
*** unicell has joined #kolla17:38
*** mbound has joined #kolla17:38
*** akwasnie1 has joined #kolla17:39
vhosakotelemoine_: SamYaple: sdake: I have replied to the comments and uploaded new patch set... would you reconsider voting again on the review :)   https://review.openstack.org/#/c/296012/17:40
sdakegmmaha fwiw master works with aio upgrade17:40
gmmahasdake: ohhhh17:40
gmmahagetting that bug your way in the next few mins17:40
sdakegmmaha i am gong to setup my other 2 nodes today in my duaghthers room if I can find the right cabling17:40
sdakeand will be able to test multinode17:41
vhosakotjust wanted to make sure it (libvirtd.log going to /var/lok/kolla/libvirt) gets into mikata17:41
sdakenot sure on inc0's abillity to test multinode atm17:41
sdake(my gear is down because of a remodel)17:41
gmmahasdake: aah..17:41
*** achanda has quit IRC17:41
SamYaplevhosakot: thats not how cherry-picks work17:42
SamYapleif you are changing the cherry-pick its not a cherry-pick17:42
SamYapleit needs to be fixed in master first17:42
sdakecherry-picks that resolve merge conflicts are acceptable17:43
SamYapleyes thats true17:43
SamYaplein this case thats not whats happening17:43
vhosakotsure, I will revert heka-openstack.toml.j2 for libvirt in master also then17:43
sdakeSamYaple no idea what context is :)17:43
sdaketrying to finish reno before people start adding features17:44
sdakeso we can do proper tracking of features :)17:44
gmmahasdake: https://bugs.launchpad.net/kolla/+bug/156113217:44
openstackLaunchpad bug 1561132 in kolla "Kolla upgrade on multi-node with master fails" [Undecided,New]17:44
gmmahasdake: inc0: attached the multinode inventory file along with it17:45
sdakegmmaha thanks17:46
sdakeinc0 may be at lucnh atm17:46
gmmahaaah yes..17:46
gmmahawill wait him to come back on that17:46
*** salv-orlando has joined #kolla17:48
*** mbound has quit IRC17:51
*** achanda has joined #kolla17:51
*** daneyon has joined #kolla17:54
openstackgerritSerguei Bezverkhi proposed openstack/kolla: iscsi container with lvm2 support  https://review.openstack.org/29128517:55
sdakeok reno!17:58
sdakebbiaf17:58
*** salv-orl_ has joined #kolla18:01
dougssdake: Do you think that using Pacemaker + a docker agent for health checking / cloning containers would be a reasonable way to get HA with Kolla including a mechanism for isolation? Or in practice is the lack of isolation not a significant problem, in which case keepalived should be enough?18:04
*** dwalsh has joined #kolla18:04
sdakedougs having worked on corosync and pacemaker for 9 years of my life, i can say  with confidence they are total overkill for our needs18:04
sdakeas in wrong tool for the job18:04
*** salv-orlando has quit IRC18:04
openstackgerritVikram Hosakote proposed openstack/kolla: Revert libvirt change in heka-openstack.toml.j2 in master  https://review.openstack.org/29664918:05
dougssdake: thanks a lot, much appreciated18:05
dougsso you've never experienced problems with split-brain due to lack of isolation?18:06
openstackgerritAlicja Kwasniewska proposed openstack/kolla: Add kibana authentication using HAproxy  https://review.openstack.org/29665018:07
*** yuanying_ has joined #kolla18:07
openstackgerritAlicja Kwasniewska proposed openstack/kolla: Add kibana authentication using HAproxy  https://review.openstack.org/29665018:08
*** achanda has quit IRC18:09
*** yuanying has quit IRC18:09
vhosakotSamYaple: elemoine_: I have reverted the libvirt change in ansible/roles/common/templates/heka-openstack.toml.j2  in master as well.... once  https://review.openstack.org/#/c/296012/  and  https://review.openstack.org/#/c/296649/  are merged,  heka-openstack.toml.j2 will be consistent and same in both master and stable/mitaka.18:09
inc0gmmaha, back18:12
gmmahainc0: hey18:14
inc0sooo18:14
gmmaha:)18:14
inc0SamYaple, I might need your help18:14
* gmmaha likes it when smeoen starts with sooo18:14
SamYapleinc0: if this is the mariadb one i can handle it18:16
inc0SamYaple, indeed mariadb18:17
gmmahaSamYaple: inc0: thanks in advance for the help18:17
SamYapleinc0: yea im like 99% sure i know the issue18:17
SamYapleim struglling with arp and neutron ATM18:17
sdakedougs it is possible in our architecture for keepalived to place a vip on two nodes in a split brain18:22
sdakedougs that is why we need *network* isolation not machine isolation18:26
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612518:26
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612518:27
*** aginwala has quit IRC18:30
openstackgerritSteven Dake proposed openstack/kolla: Add reno support  https://review.openstack.org/29612518:33
openstackgerritSteven Dake proposed openstack/kolla: Add PBR generation of version information  https://review.openstack.org/29666218:34
*** unicell has quit IRC18:34
*** unicell has joined #kolla18:34
*** aginwala has joined #kolla18:37
*** sdake_ has joined #kolla18:41
*** akwasnie1 has quit IRC18:43
*** sdake has quit IRC18:44
*** sdake has joined #kolla18:47
*** aginwala has quit IRC18:47
*** cemason has joined #kolla18:49
*** sdake_ has quit IRC18:49
*** openstack has joined #kolla19:08
notmynameheh. just dropping in to give a patchbot overview ;-)19:08
sdakei tested it just last night19:08
SamYaplenotmyname: :D19:08
notmynamecool19:08
SamYaplesdake: im just joking around19:08
*** openstack has joined #kolla19:21
*** openstackstatus has joined #kolla19:22
*** ChanServ sets mode: +v openstackstatus19:22
sdakeSamYaple ar eyou running kolla with vlans?19:22
ccesariovhosakot, no no..... for while only experimental tests ....  based docker-py documentation  http://docker-py.readthedocs.org/en/stable/api/?highlight=hostname  https://hub.docker.com/r/cloudaku/docker-py/19:23
SamYaplesdake: of course19:23
*** serverascode_ is now known as serverascode19:23
SamYaplealso jumbo frames19:23
vhosakotccesario: got it thanks!19:23
ccesariovhosakot, remembering that  I'm not python expert :P19:24
*** DuncanT_ is now known as DuncanT19:24
*** harmw has quit IRC19:24
*** harmw has joined #kolla19:25
*** Guest69253 is now known as zeus`19:25
vhosakotwell well python is very big19:27
*** aginwala has joined #kolla19:32
*** zeus` is now known as zeus19:33
*** zeus has quit IRC19:34
*** zeus has joined #kolla19:34
*** achanda has joined #kolla19:35
sdakegetting a 503 service unavailable with horizon on master with your network patch SamYaple19:36
sdakefrom a freshly cleaned and rebooted environment19:36
SamYaplesdake: surely you recognize that horizon is unrelated to that external network option19:37
SamYapleand 503 is haproxy not apache19:37
sdakeyup so its likely master horizon is broken in general19:38
SamYaplesdake: it is not19:39
SamYapleworks fine19:39
SamYaplewell19:39
SamYapleim using ubuntu-source19:39
SamYapleso maybe centos19:39
sdakei am using centos source19:39
SamYapleidk19:39
sdakeit was working a few days ago19:39
sdakei have not changed my image since19:39
openstackgerritMerged openstack/kolla: Add creation of new log folder for Horizon  https://review.openstack.org/29656919:39
*** jtriley has joined #kolla19:40
*** aginwala has quit IRC19:42
sdakewhen connecting directly to the service, I receive This site can’t provide a secure connection19:42
sdake192.168.1.148 sent an invalid response.19:42
sdakeERR_SSL_PROTOCOL_ERROR19:42
mlima_sdake, kolla uses vlan or vxlan?19:43
*** dims_ has joined #kolla19:43
mlima_SamYaple ^19:43
sdakemlima_ it is configurable19:43
mlima_but the default value is vlan?19:44
*** daneyon has quit IRC19:44
*** aginwala has joined #kolla19:44
mlima_sdake ^19:45
*** daneyon has joined #kolla19:45
*** dims has quit IRC19:45
vhosakotmlima_: https://github.com/openstack/kolla/blob/master/ansible/roles/neutron/templates/ml2_conf.ini.j2#L919:45
mlima_oh, thank you vhosakot19:45
vhosakotthe default tenant network uses vxlan tagging19:46
vhosakotml2 has vlan configs19:46
mlima_ok19:46
vhosakotmlima_:   https://github.com/openstack/kolla/blob/master/ansible/roles/neutron/templates/ml2_conf.ini.j2#L18-L3419:46
SamYaplemlima_: to do vlans correctly youll need to use augment files19:46
vhosakotvxlan is configured for tenant network19:47
*** daneyon_ has joined #kolla19:47
mlima_ok guys19:47
vhosakotmlima_: change type_drivers=vlan  in  https://github.com/openstack/kolla/blob/a755aa88e4454b2b4540c7b1e48f3e6d4e963edb/ansible/roles/neutron/templates/ml2_conf.ini.j2#L8  and reconfig neutron if you want vlan19:47
sdakevhosakot nah just use an augment file19:48
sdakenon eed to chane the codebase19:48
vhosakotyep, augment is best19:48
vhosakotin /etc/kolla/config19:48
mlima_i don't want to use it now, it was just a doubt19:48
mlima_:)19:48
vhosakotalso, configure network_vlan_ranges  in https://github.com/openstack/kolla/blob/a755aa88e4454b2b4540c7b1e48f3e6d4e963edb/ansible/roles/neutron/templates/ml2_conf.ini.j2#L2219:49
vhosakotcool19:49
*** daneyon has quit IRC19:50
mlima_sdake, SamYaple, vhosakot, it makes sense to you https://blueprints.launchpad.net/kolla/+spec/add-data-network-interface ?19:50
sdakebbiaf - meeting19:51
sdakemlima_ i'll look when i return19:51
SamYaplemlima_: we already have that19:51
vhosakotlet me read it mlima_19:51
mlima_really SamYaple?19:52
SamYaplemlima_: yes19:53
SamYaplesince liberty19:53
ccesariothe storage_interface: "{{ network_interface }}"  is not for this purpose ?19:53
SamYaplehttps://github.com/openstack/kolla/blob/stable/mitaka/ansible/roles/ceph/templates/ceph.conf.j2#L519:53
SamYapleccesario: it iss19:53
SamYaplemlima_: ^ see link19:53
*** dims_ has quit IRC19:53
ccesario:)19:54
mlima_hmm19:55
*** dims has joined #kolla19:56
mlima_ok guys19:56
*** jmccarthy1 has quit IRC19:58
mlima_SamYaple, is a new ovs bridge created for storage_interface ?20:06
sdakeSamYaple ya horizon is doa with or without yoru patch so i guess it causes no harm20:07
*** jtriley has quit IRC20:07
*** shardy_ has joined #kolla20:07
SamYaplemlima_: no, storage is unrelated to neutron and ovs20:08
*** shardy has quit IRC20:08
*** jtriley has joined #kolla20:09
sbezverksdake why horizon is doa? I saw it working fine or it is some specific config?20:11
openstackgerritMerged openstack/kolla: Swift busted with Heka  https://review.openstack.org/29656620:14
*** achanda has quit IRC20:18
SamYaplesbezverk: works for me, ubuntu-source20:18
*** openstack has joined #kolla20:31
*** jtriley_ has joined #kolla20:38
*** jtriley has quit IRC20:41
*** haplo37 has quit IRC20:41
*** mlima_ has quit IRC20:47
sbezverkvhosakot did you get any doc for log parsers development?20:48
vhosakotno... just googling20:51
*** jtriley_ has quit IRC20:51
*** jtriley has joined #kolla20:54
*** shardy_ has quit IRC20:55
*** aginwala has quit IRC20:56
*** vhosakot has quit IRC21:00
*** achanda has joined #kolla21:01
*** aginwala has joined #kolla21:01
openstackgerritSerguei Bezverkhi proposed openstack/kolla: iscsi container with lvm2 support  https://review.openstack.org/29128521:01
*** aginwala has quit IRC21:01
*** aginwala has joined #kolla21:03
*** vhosakot has joined #kolla21:03
sbezverkvhosakot I see, please let me know if you find something useful21:05
vhosakotsbezverk: sure.. libvirt.log is not oslo based... so, it needs new logic to parse and display in Kibana UI21:05
vhosakotsbezverk: what log are you trying to parse ? horizon ?21:05
vhosakotSamYaple: sdake: https://review.openstack.org/#/c/296012/  and  https://review.openstack.org/#/c/296649/  both passed gate21:07
patchbotvhosakot: patch 296012 - kolla (stable/mitaka) - Make heka collect libvirtd.log in nova_libvirt con...21:07
patchbotvhosakot: patch 296649 - kolla - Revert libvirt change in heka-openstack.toml.j2 in...21:07
vhosakotah, patchbot21:07
vhosakotsbezverk: what log are you trying to parse ? horizon ?21:08
*** mlima has joined #kolla21:08
ccesarioend shift!!! .... guys... if you test the patch, please, leave me a message .... pls...21:08
ccesarioSamYaple, vhosakot  ^^21:09
vhosakotok ccesario, to test it, I need to pass the hostname flag when creating the container...21:09
ccesariovhosakot, yes...21:10
vhosakotcool21:10
ccesarioadd hostname param21:10
sdakehey cr's please review reno support here https://review.openstack.org/#/c/296125/21:10
patchbotsdake: patch 296125 - kolla - Add reno support21:10
ccesarioin the task file21:10
ccesariovhosakot, thank you (Y)21:11
vhosakotnp21:11
*** inc0 has quit IRC21:13
*** unicell has quit IRC21:15
*** unicell has joined #kolla21:15
sbezverkvhosakot horizon21:17
sbezverkfor now I took the parser used for keystone21:17
*** ccesario_ has joined #kolla21:18
sbezverkshould be more or less the same21:18
vhosakotsbezverk: ah ok21:18
*** sdake has quit IRC21:27
*** dwalsh has quit IRC21:28
*** rhallisey has quit IRC21:44
*** ccesario_ has quit IRC21:44
*** mlima has quit IRC21:44
*** achanda has quit IRC21:46
*** ccesario__ has joined #kolla21:47
*** ccesario__ has quit IRC21:53
*** ccesario__ has joined #kolla21:55
*** sdake has joined #kolla21:55
openstackgerritMerged openstack/kolla: Fix inconsistancy in globals.yml  https://review.openstack.org/29439222:08
*** alyson_ has quit IRC22:12
*** Serlex has quit IRC22:13
*** achanda has joined #kolla22:16
openstackgerritSteven Dake proposed openstack/kolla: Reduce log errors from heka  https://review.openstack.org/29681822:17
openstackgerritSteven Dake proposed openstack/kolla: Reduce log errors from heka  https://review.openstack.org/29681822:19
openstackgerritSteven Dake proposed openstack/kolla: Reduce log errors from heka  https://review.openstack.org/29681822:20
*** vhosakot has quit IRC22:21
*** vhosakot has joined #kolla22:21
*** sdake_ has joined #kolla22:29
*** sdake has quit IRC22:30
*** manjeets has joined #kolla22:38
manjeetswhile doing /tools/build.py it failed to build few images22:40
Pierre_CaretteI am using mikata/stable with -t source -b ubuntu and so far so good22:41
manjeetsPierre_Carette has mitaka stable released for kolla22:43
manjeetsi guess I am using master22:43
manjeetsI am getting this when i run tools/build.py22:44
manjeetshttp://paste.openstack.org/show/491650/22:44
sbezverkmanjeets these images are not availble if your source is binary22:44
Pierre_CaretteI used docker-build instead22:45
Pierre_Carettesorry kolla-build22:45
Pierre_Carettekolla-build -t source -b ubuntu22:45
manjeetssbezverk how do i get these working22:47
*** Jeffrey4l has quit IRC22:49
*** aginwala has quit IRC22:49
Pierre_Carettemanjeets: yes there is a stable/mitaka branch in kolla now22:49
SamYaplePierre_Carette: there is a stable mitaka branch, but it is not official yet, just fyi22:50
SamYapleit wont be until mid-to-late april, after all other projects have released22:50
sbezverkmanjeets if you switch to use "source" instead of binaries you should be able to build all images22:51
Pierre_CaretteSamYaple: it looks like the stable/liberty is missing features and I guess stable/mitaka is better than the master branch22:51
sdake_Pierre_Carette a branch is not a release artiifact - those are tags22:55
sdake_Pierre_Carette we will tag kolla when its ready for release22:55
Pierre_CaretteThanks for letting me know22:56
sdake_happy to helpt22:56
*** aginwala has joined #kolla22:56
sdake_the mai np oint of that is that there are atleast 50 bugs out standing to hit the stable/mitaka branch before we tag22:56
Pierre_Caretteanyway, I am testing stable/mitaka and I will give feedbacks as needed22:57
sdake_nice ;)22:57
sdake_we are backporting as often as we find bugs and solutions for them22:57
*** aginwala has quit IRC22:58
sdake_SamYaple this needs an ack https://review.openstack.org/#/c/296125/22:59
patchbotsdake_: patch 296125 - kolla - Add reno support22:59
*** sdake_ is now known as sdake22:59
sdakejpeeler ^^22:59
sdakeasalkeld might be round not too ^^22:59
sdakenot/now22:59
*** aginwala_ has joined #kolla23:03
*** aginwala_ has quit IRC23:05
*** aginwala has joined #kolla23:06
*** jtriley has quit IRC23:11
*** jtriley has joined #kolla23:17
*** absubram has quit IRC23:21
*** openstack has joined #kolla23:23
*** Pierre_Carette has quit IRC23:28
*** vhosakot has quit IRC23:34
*** ccesario__ has quit IRC23:41
*** aginwala has quit IRC23:47
*** aginwala has joined #kolla23:49
*** aginwala has quit IRC23:50
manjeetsis there a way to force delete all the build images ?23:55
manjeetsi tried /tools/cleanup-images which is unable to remove all23:56
*** jtriley has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!