Monday, 2016-08-29

*** gouthamr has joined #openstack-ansible00:01
*** thorst has joined #openstack-ansible00:05
*** thorst has quit IRC00:06
*** kenhui1 has quit IRC00:06
*** woodard has joined #openstack-ansible00:10
*** thorst has joined #openstack-ansible00:10
*** woodard has quit IRC00:14
*** hblah158 has joined #openstack-ansible00:15
*** thorst has quit IRC00:15
*** hblah has quit IRC00:17
*** Jeffrey4l_ has joined #openstack-ansible00:20
*** Jeffrey4l__ has quit IRC00:20
*** schwicht has quit IRC00:24
*** woodard has joined #openstack-ansible00:27
*** schwicht has joined #openstack-ansible00:27
*** woodard has quit IRC00:28
*** woodard has joined #openstack-ansible00:28
*** adrian_otto has joined #openstack-ansible00:47
*** thorst has joined #openstack-ansible00:50
*** adrian_otto has quit IRC00:50
*** thorst has quit IRC00:50
*** thorst has joined #openstack-ansible00:51
*** v1k0d3n has joined #openstack-ansible00:52
*** v1k0d3n has quit IRC00:57
*** thorst has quit IRC00:59
*** eil397_ has joined #openstack-ansible00:59
*** Mudpuppy has quit IRC01:08
*** Mudpuppy has joined #openstack-ansible01:09
*** serverascode has quit IRC01:10
*** hblah has joined #openstack-ansible01:10
*** maximov has quit IRC01:10
*** NachoDuck has quit IRC01:11
*** hblah158 has quit IRC01:12
*** maximov has joined #openstack-ansible01:23
*** kenhui has joined #openstack-ansible01:24
*** NachoDuck has joined #openstack-ansible01:24
*** sdake_ has quit IRC01:25
*** serverascode has joined #openstack-ansible01:27
*** jamielennox is now known as jamielennox|away01:30
*** sdake has joined #openstack-ansible01:30
*** thorst has joined #openstack-ansible01:32
*** thorst has quit IRC01:32
*** hblah601 has joined #openstack-ansible01:35
*** hblah has quit IRC01:36
*** thorst has joined #openstack-ansible01:37
*** abelur_ has joined #openstack-ansible01:39
*** thorst has quit IRC01:42
*** jamielennox|away is now known as jamielennox01:43
*** thorst has joined #openstack-ansible01:52
*** thorst has quit IRC01:54
*** galstrom_zzz is now known as galstrom02:19
*** hblah has joined #openstack-ansible02:23
*** adrian_otto has joined #openstack-ansible02:24
*** hblah601 has quit IRC02:25
*** kenhui has quit IRC02:25
*** adrian_otto has quit IRC02:28
*** kenhui has joined #openstack-ansible02:29
*** galstrom is now known as galstrom_zzz02:52
*** thorst has joined #openstack-ansible02:55
*** galstrom_zzz is now known as galstrom02:56
*** kenhui has quit IRC03:00
*** thorst has quit IRC03:03
*** v1k0d3n has joined #openstack-ansible03:13
*** v1k0d3n has quit IRC03:13
*** jamielennox is now known as jamielennox|away03:21
*** Mudpuppy has quit IRC03:21
*** v1k0d3n has joined #openstack-ansible03:21
*** markvoelker has joined #openstack-ansible03:27
*** markvoelker_ has joined #openstack-ansible03:29
*** galstrom is now known as galstrom_zzz03:31
*** markvoelker has quit IRC03:33
*** kenhui has joined #openstack-ansible03:35
*** kenhui has quit IRC03:35
*** adrian_otto has joined #openstack-ansible03:38
*** adrian_otto has quit IRC03:39
*** adrian_otto has joined #openstack-ansible03:46
*** adrian_otto has quit IRC03:51
*** Mudpuppy has joined #openstack-ansible03:52
*** adrian_otto has joined #openstack-ansible03:52
*** markvoelker_ has quit IRC03:53
*** markvoelker has joined #openstack-ansible03:54
*** schwicht has quit IRC03:56
*** schwicht has joined #openstack-ansible03:56
*** adrian_otto has quit IRC03:56
*** jamielennox|away is now known as jamielennox03:56
*** Mudpuppy has quit IRC03:57
*** eil397_ has quit IRC03:57
*** gouthamr has quit IRC04:01
*** thorst has joined #openstack-ansible04:01
*** thorst has quit IRC04:09
*** eil397_ has joined #openstack-ansible04:13
*** janki has joined #openstack-ansible04:35
*** omiday has quit IRC04:43
*** omiday has joined #openstack-ansible04:55
*** omiday has quit IRC04:59
*** omiday has joined #openstack-ansible04:59
*** javeriak has joined #openstack-ansible05:03
*** hblah881 has joined #openstack-ansible05:05
*** v1k0d3n has quit IRC05:05
*** thorst has joined #openstack-ansible05:07
*** hblah has quit IRC05:07
*** sdake_ has joined #openstack-ansible05:10
*** neillc has quit IRC05:12
*** sdake_ is now known as dake05:13
*** sdake has quit IRC05:13
*** dake is now known as sdake05:13
*** thorst has quit IRC05:14
*** Fenuks has joined #openstack-ansible05:14
*** javeriak has quit IRC05:24
*** sdake has quit IRC05:26
*** neillc has joined #openstack-ansible05:27
*** hblah has joined #openstack-ansible05:29
*** hblah881 has quit IRC05:32
*** shausy has joined #openstack-ansible05:34
*** markvoelker has quit IRC05:36
*** adrian_otto has joined #openstack-ansible05:56
*** eil397_ has quit IRC05:57
*** adrian_otto has quit IRC06:04
*** markvoelker has joined #openstack-ansible06:07
*** markvoelker has quit IRC06:11
*** thorst has joined #openstack-ansible06:12
*** hblah102 has joined #openstack-ansible06:16
*** hblah has quit IRC06:17
*** thorst has quit IRC06:19
*** woodard has quit IRC06:23
*** markvoelker has joined #openstack-ansible06:36
*** hblah102 has quit IRC06:39
*** hblah has joined #openstack-ansible06:40
*** markvoelker has quit IRC06:41
*** javeriak has joined #openstack-ansible06:45
*** rgogunskiy has joined #openstack-ansible06:51
*** pcaruana has joined #openstack-ansible07:00
*** drifterza has joined #openstack-ansible07:05
*** markvoelker has joined #openstack-ansible07:06
openstackgerritOpenStack Proposal Bot proposed openstack/openstack-ansible-os_trove: Updated from global requirements  https://review.openstack.org/36189607:08
*** hblah910 has joined #openstack-ansible07:08
*** hblah has quit IRC07:11
*** markvoelker has quit IRC07:12
*** thorst has joined #openstack-ansible07:17
drifterzaehlo Boys and Girls07:23
*** eil397_ has joined #openstack-ansible07:23
*** thorst has quit IRC07:24
FenuksHello. Anyone know how to enable swift3 using openstack-ansible?07:27
*** eil397_ has quit IRC07:29
*** markvoelker has joined #openstack-ansible07:36
*** markvoelker has quit IRC07:41
*** drifterza_ has joined #openstack-ansible07:59
*** karimb has joined #openstack-ansible08:01
*** drifterza has quit IRC08:02
*** drifterza__ has joined #openstack-ansible08:02
*** drifterza__ is now known as drifterza08:03
drifterzaodyssey4me: you around ?08:04
*** fxpester has quit IRC08:04
*** markvoelker has joined #openstack-ansible08:05
*** drifterza_ has quit IRC08:07
*** markvoelker has quit IRC08:10
*** javeriak has quit IRC08:16
*** javeriak has joined #openstack-ansible08:20
*** karimb has quit IRC08:21
*** hblah910 has quit IRC08:22
*** thorst has joined #openstack-ansible08:22
*** thorst has quit IRC08:29
*** markvoelker has joined #openstack-ansible08:33
*** markvoelker has quit IRC08:38
*** karimb has joined #openstack-ansible08:39
*** eil397_ has joined #openstack-ansible08:57
*** electrofelix has joined #openstack-ansible09:00
*** schwicht has quit IRC09:01
*** markvoelker has joined #openstack-ansible09:03
*** javeriak has quit IRC09:03
*** eil397_ has quit IRC09:03
*** schwicht has joined #openstack-ansible09:05
*** markvoelker has quit IRC09:07
*** javeriak has joined #openstack-ansible09:14
*** thorst has joined #openstack-ansible09:27
*** markvoelker has joined #openstack-ansible09:31
*** karimb has quit IRC09:33
*** schwicht has quit IRC09:34
*** thorst has quit IRC09:34
*** toasta has joined #openstack-ansible09:35
*** markvoelker has quit IRC09:35
ionihello09:36
ionido you guys happen to know why after a migration, the disks are converted from raw to qcow2?09:36
ioniin logs i have: https://paste.xinu.at/gzM/09:37
*** karimb has joined #openstack-ansible09:39
ionithis is nova.conf https://paste.xinu.at/yw75s/09:39
*** schwicht has joined #openstack-ansible09:41
*** Mudpuppy has joined #openstack-ansible09:55
*** Mudpuppy has quit IRC09:59
*** markvoelker has joined #openstack-ansible10:00
*** markvoelker has quit IRC10:05
*** shausy has quit IRC10:08
*** shausy has joined #openstack-ansible10:08
*** eil397_ has joined #openstack-ansible10:10
*** kysse has quit IRC10:14
*** eil397_ has quit IRC10:14
*** kysse has joined #openstack-ansible10:15
*** schwicht_ has joined #openstack-ansible10:21
*** schwicht has quit IRC10:23
*** markvoelker has joined #openstack-ansible10:28
*** javeriak has quit IRC10:31
*** markvoelker has quit IRC10:32
*** javeriak has joined #openstack-ansible10:32
*** shausy has quit IRC10:37
*** shausy has joined #openstack-ansible10:38
*** _sigmavirus24 is now known as sigmavirus10:47
*** sigmavirus has joined #openstack-ansible10:47
*** javeriak has quit IRC10:49
*** karimb has quit IRC10:50
*** thorst has joined #openstack-ansible10:54
*** karimb has joined #openstack-ansible10:58
*** markvoelker has joined #openstack-ansible10:59
*** markvoelker has quit IRC11:03
*** eil397_ has joined #openstack-ansible11:06
*** schwicht_ has quit IRC11:09
*** eil397_ has quit IRC11:13
toastahello all, could it be that something broke the haproxy-snippets for repo_cache? There's only a ssl-bind-line in haproxy and all requests fail with "SSL Handshake failure". If i omit the ssl bind, the containers can happily get their packages...11:23
*** schwicht has joined #openstack-ansible11:25
*** markvoelker has joined #openstack-ansible11:28
*** javeriak has joined #openstack-ansible11:28
*** janki has quit IRC11:28
*** v1k0d3n has joined #openstack-ansible11:28
*** schwicht has quit IRC11:29
*** markvoelker has quit IRC11:32
*** v1k0d3n has quit IRC11:33
*** abelur_ has quit IRC11:36
*** schwicht has joined #openstack-ansible11:39
*** mgariepy has joined #openstack-ansible11:53
*** markvoelker has joined #openstack-ansible11:57
*** sura8257_ has joined #openstack-ansible11:57
*** sura8257_ has quit IRC11:57
*** karimb has quit IRC11:57
*** markvoelker has quit IRC12:01
*** Andrew_jedi has joined #openstack-ansible12:04
*** gouthamr has joined #openstack-ansible12:06
*** skape has joined #openstack-ansible12:08
*** matias has quit IRC12:08
skapeHi! I'm very insterested in trying openstack ansible but in my organization only allows the of CentOS. Is it possible to use it on centos in the moment for proof of concept instalation ?12:10
*** matias has joined #openstack-ansible12:12
*** wadeholler has quit IRC12:13
*** schwicht has quit IRC12:13
*** kenhui has joined #openstack-ansible12:14
*** toasta has quit IRC12:21
*** schwicht has joined #openstack-ansible12:25
*** markvoelker has joined #openstack-ansible12:26
*** Andrew_jedi_ has joined #openstack-ansible12:29
*** Andrew_jedi has quit IRC12:29
*** Andrew_jedi_ is now known as Andrew_jedi12:29
*** skape has quit IRC12:29
*** markvoelker has quit IRC12:30
*** Akiro has joined #openstack-ansible12:36
*** eil397_ has joined #openstack-ansible12:36
AkiroHello @everyone12:36
*** kenhui has quit IRC12:37
*** javeriak has quit IRC12:40
*** eil397_ has quit IRC12:41
*** v1k0d3n has joined #openstack-ansible12:42
*** javeriak has joined #openstack-ansible12:51
*** karimb has joined #openstack-ansible12:51
AkiroI have a problem deploying Openstack Ansible on a 2 nodes cluster. A lot goes right, except for Glance containers and Neutron agent container (unable to connect to them via SSH)12:53
*** markvoelker has joined #openstack-ansible12:56
*** Akiro has quit IRC12:56
mhaydengood morning!12:59
*** markvoelker has quit IRC13:00
drifterzaGood afternoon13:00
*** pcaruana has quit IRC13:02
cloudnullmornings13:02
*** sdake has joined #openstack-ansible13:03
javeriakhey guys, im trying to do a liberty deployment with SSL enabled, and it isn't working, it also keeps skipping "Distribute self signed cert and key" & "Drop user provided ssl cert and key"13:04
javeriakim trying to make it work for keystone atm, but the endpoints still list as http13:05
javeriakset the following vars in user_variables, http://paste.ubuntu.com/23107258/13:06
javeriakany idea what im missing13:06
*** markvoelker has joined #openstack-ansible13:06
*** markvoelker_ has joined #openstack-ansible13:07
cloudnulljaveriak: the playbooks/modules will not recreate the endpoints within keystoen13:09
cloudnullso you need to udpate that part manually13:09
cloudnullonce the ssl setup is complete13:10
javeriakhey cloudnull, how's it going o/13:10
cloudnullgoing very well.13:10
cloudnulllong time :)13:10
*** markvoelker_ has quit IRC13:10
cloudnullnice report from within the OSIC btw13:10
javeriakso i recreated the keystone lxc, that shouldve taken care of it13:10
*** markvoelker has quit IRC13:10
*** markvoelker_ has joined #openstack-ansible13:10
cloudnullthe endpoints are within the DB13:10
javeriakyea long time indeed, ive moved on to other projects, but come back to OSA stuff now and then :)13:11
cloudnullyou can use the "openstack" client to update the endpoints.13:11
javeriakyea thanks, I was thinking of forwarding that report to you guys, good you got it :)13:11
*** kylek3h has joined #openstack-ansible13:11
cloudnulli think others from within the channel would love to read it too.13:11
*** markvoelker has joined #openstack-ansible13:11
cloudnulli know that the OSIC board will publish it eventually13:12
cloudnullidk when that will be13:12
javeriaksure, you should share defintely; or would you like me to13:12
*** GMAzrael has joined #openstack-ansible13:12
javeriakso how do i make sure ssl was setup correctly? i can then update the endpoints13:12
*** markvoelker_ has quit IRC13:13
javeriakand updating the endpoints manually applies to all service endpoints?13:14
cloudnullI can share with everyone if it's ok with you.13:14
cloudnullor you can . eitherway works13:15
cloudnullas for the endpoints.13:15
javeriakcloudnull yes sure, share away13:15
cloudnullif you've enabled ssl within keystone, which for liberty is ssl on the apache server running keystone, you should see that the cert is there and the server is speaking ssl on the public endpoints.13:16
cloudnullyou can test with curl13:16
cloudnullif thats working then update the endpoints with  the openstack client13:16
*** klamath has joined #openstack-ansible13:17
*** klamath has quit IRC13:17
*** pcaruana has joined #openstack-ansible13:17
*** klamath has joined #openstack-ansible13:18
javeriakokay let me try that, and any refs for how to update the endpoints? i see alot of longg steps in the openstack docs13:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure AIDE initializes on subsequent runs  https://review.openstack.org/36123913:19
cloudnullI think its "openstack service"13:19
javeriakalso the OSA docs don't say, but shouldn't the 'keystone_ssl: true' type vars also need to be set in the user_variables?13:19
* cloudnull not so familiar with the openstack client13:19
cloudnullI believe that will be automatically set if there's a cert13:19
* cloudnull goes to verify13:20
javeriakit generates the self-signed certs itself doesnt it? that doesnt seem to be enabled by default13:20
cloudnullyup it looks like that needs to be set true13:23
*** sdake_ has joined #openstack-ansible13:23
cloudnullin master we're doing ssl by default, self signed or user provided, but in liberty / mitaka that's an option and needs to be set.13:23
javeriakah docs need updating then...13:23
javeriakokay so just to recap, set the <service>_ssl: true, and then update endpoints manually should do it?13:24
mgariepyto update the endoint you need to use "openstack endpoint set "13:25
*** sdake has quit IRC13:25
*** BjoernT has joined #openstack-ansible13:26
*** TxGirlGeek has joined #openstack-ansible13:28
*** markvoelker has quit IRC13:30
javeriakthanks mgariepy, so cloudnull, the curl would be to the keystone public endpoint with a https, thats the LB-ip:500013:31
cloudnulljaveriak: to the keystone node .13:32
cloudnullyou should get an apache response saying that you need to use HTTPS.13:32
*** Zucan has joined #openstack-ansible13:33
*** vnogin_ has joined #openstack-ansible13:35
javeriakcloudnull no actually that isnt working, im still getting response data back for the http curl13:35
cloudnullw/ the keystone_ssl flag set?13:36
javeriakcloudnull yep, all these set: http://paste.ubuntu.com/23107258/13:36
javeriakits skipping those distribute tasks13:36
javeriakis what im concerned about13:36
cloudnullhum.13:37
cloudnullare the ssl cert paths updated too ?13:37
javeriakwhere do i check?13:38
cloudnullhttps://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/os_keystone/defaults/main.yml#L160-L16213:38
javeriakyes those are already inside the role vars13:38
javeriakso i expect they get picked up from there13:39
*** KLevenstein has joined #openstack-ansible13:39
javeriakor should i redefine them too13:39
cloudnulland these https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/os_keystone/defaults/main.yml#L171-L17313:40
javeriakno those later ones are for custom certs aren't they?13:42
*** kstev has joined #openstack-ansible13:42
javeriakso i didn't add13:42
openstackgerritMerged openstack/openstack-ansible-security: Remove extra AIDE tasks  https://review.openstack.org/36146013:43
*** sc68cal_ is now known as sc68cal13:44
*** eil397_ has joined #openstack-ansible13:48
cloudnulljaveriak: yes.13:49
cloudnullthose are for user provided cersts13:49
cloudnullif you just want the self signed then setting https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/os_keystone/defaults/main.yml#L159 should be enough13:50
*** jperry has joined #openstack-ansible13:50
cloudnullthough you could force a regen  https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/os_keystone/defaults/main.yml#L16713:50
cloudnullby using that switch on the cli13:50
drifterzathanks cloudnull for the +1 on that change13:50
*** sdake_ has quit IRC13:50
cloudnullsure thing, thanks for making the trove role ;)13:50
drifterzaBusy doing dev against it, want to get it to functional tests :)13:51
*** sdake has joined #openstack-ansible13:51
drifterzahopefully have a fully tested role by weeks end13:52
drifterzathen try get it pushed into openstack-ansible as an installable role13:52
*** eil397_ has quit IRC13:54
javeriakcloudnull yea i have both of those set, i wonder whats missing, let me dig into it13:54
drifterzaif I'm not mistaken openstack-infra makes use of trove for their backend db stuff13:54
cloudnullI believe they do , however i may be mistakem13:55
cloudnullsorry javeriak i dont have the best answer.13:55
*** pcaruana has quit IRC13:55
drifterzaI also need to do the trove plugin to horizon13:56
javeriakcloudnull now worries, this should work by default in mitaka right?13:56
cloudnullit should.13:56
javeriakokay cool. thanks, catch you later13:56
cloudnulland in newton, we did all of the ssl termination work to fully support that as the default.13:57
*** markvoelker has joined #openstack-ansible13:57
*** jamesdenton has joined #openstack-ansible13:57
javeriakyea thats what im looking for, it doesnt seem to be as straightforward in OSA liberty13:57
*** shausy has quit IRC13:58
cloudnullwe have ssl termination enabled on the osic however all of that is handled on the f513:58
javeriakwell we typically use haproxy based setups for demo's as such, so I was looking into getting that enabled13:59
*** kenhui has joined #openstack-ansible14:01
javeriakcloudnull gotta step out for a bit, let me catch you later14:01
*** javeriak has quit IRC14:01
cloudnulltake care javeriak .14:01
drifterzacloudnull any idea where odyssey4me is today?14:01
cloudnulli do not.14:01
cloudnulldrifterza: anything you need?14:01
*** markvoelker has quit IRC14:01
cloudnullis there a bank holiday today ?14:02
drifterzano, the channel is quiet today so I noticed he wasn't around.14:02
cloudnullandymccr hughsaunders mattt mancdaz ? uk bank holiday  ?14:02
cloudnullevrardjp: ^14:02
cloudnullsorry idk if there are others in the UK ?14:02
BjoernTIsn't Monday always a bank holiday in UK ;-)14:03
cloudnullha!14:03
cloudnullwell today is a UK bank holiday14:04
BjoernTWhich I would like in the US too14:04
cloudnullits the "August Bank Holiday"14:04
matttcloudnull: yes bank holiday today :)14:04
cloudnullhttp://www.halftermdates.co.uk/bholidays/august-bank-holiday.html14:04
* cloudnull shakes head14:04
BjoernTlol14:05
cloudnullthey didn't even try to name the holiday, its just a day that ended in "y" so yup, holiday.14:05
drifterzak cool14:05
cloudnullso if there are any patches that need shoved in while odyssey4me is away let me know.14:05
cloudnull:p14:05
drifterzahahah14:06
drifterzaless strict ?14:06
cloudnullno, just playing.14:07
drifterza:P14:07
*** Mudpuppy has joined #openstack-ansible14:09
*** pcaruana has joined #openstack-ansible14:09
openstackgerritMerged openstack/openstack-ansible-security: Fix numbering on V-38583  https://review.openstack.org/36124414:11
matttcloudnull: ha!14:13
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Add test network config to lxc_host role  https://review.openstack.org/36214414:13
cloudnullmattt: ^ if you have a moment.14:13
cloudnullmhayden: ^14:13
*** vnogin_ has left #openstack-ansible14:13
cloudnullwe're running into IP conflicts when using the test repo14:13
cloudnullas seen here http://logs.openstack.org/12/353612/14/check/gate-openstack-ansible-os_sahara-ansible-func-ubuntu-trusty/b17c786/console.html#_2016-08-26_21_48_20_75642514:14
*** kencjohnston_ has quit IRC14:14
*** homerp_ has quit IRC14:14
*** sonus has quit IRC14:14
*** homerp_ has joined #openstack-ansible14:14
*** kencjohnston has joined #openstack-ansible14:15
*** sonus has joined #openstack-ansible14:15
cloudnulljmccrory: ^^14:15
matttcloudnull: is that kernel options bit necessary?14:16
cloudnullmaybe?14:16
cloudnullit was in a few of the other roles so i just copied it across14:16
cloudnullhttps://github.com/openstack/openstack-ansible-os_nova/blob/master/tests/test-prepare-host.yml#L9314:17
cloudnullI can pull it14:17
cloudnullits likely not needed. at least not needed like that14:17
cloudnullits a default14:18
cloudnullhttps://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/defaults/main.yml#L67-L6814:18
cloudnullso no its not needed.14:18
*** adrian_otto has joined #openstack-ansible14:18
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Add test network config to lxc_host role  https://review.openstack.org/36214414:18
cloudnullmattt: good catch14:18
matttnp, reviewed14:19
*** spotz_zzz is now known as spotz14:19
cloudnulltyvm14:19
*** cloader89 is now known as cjloader14:19
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone  https://review.openstack.org/32021614:20
*** neilus has joined #openstack-ansible14:22
cloudnullhttps://review.openstack.org/#/c/362144/ <- mhayden d34dh0r53 if you have a moment14:24
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable the opportunistic strategy  https://review.openstack.org/34948514:24
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_neutron: Update paste, policy and rootwrap configurations 2016-08-25  https://review.openstack.org/36068514:26
*** karimb has quit IRC14:27
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: [TESTING] Ansible v2.1.2.0-0.1.rc1  https://review.openstack.org/35116514:28
*** Andrew_jedi has quit IRC14:28
*** johnmilton has quit IRC14:30
mrhillsmang'morning14:34
*** kenhui has quit IRC14:34
spotzmorning14:36
*** weezS has joined #openstack-ansible14:40
*** asettle has joined #openstack-ansible14:41
*** johnmilton has joined #openstack-ansible14:41
*** michaelgugino has joined #openstack-ansible14:42
cloudnullmornings spotz mrhillsman14:42
spotzhey cloudnull14:42
*** palendae_ is now known as palendae14:43
cloudnullif folks get a chance today, https://review.openstack.org/#/c/320216/  -- it'd be great to finally land centos support for keystone14:43
cloudnullwhich will allow us to get the other roles into shape14:43
*** jwagner- is now known as jwagner14:44
*** weezS has quit IRC14:47
*** rgogunskiy has quit IRC14:49
*** Andrew_jedi has joined #openstack-ansible14:49
*** asettle has quit IRC14:55
*** spedione is now known as chris_hultin15:02
mgariepycloudnull, do you have some partial doc on deploying on centos for testing ?15:08
*** kenhui has joined #openstack-ansible15:09
chris_hultinCan anyone give me a hand with a networking issue with an all-in-one setup?15:11
mgariepychris_hultin, what's the issue ?15:11
*** kenhui1 has joined #openstack-ansible15:11
chris_hultinmgariepy: No external access from a nova instance15:12
*** Fenuks|2 has joined #openstack-ansible15:12
*** persia has quit IRC15:13
*** kenhui has quit IRC15:14
cloudnullmgariepy: for test the I just use a basic centos VM and go from there. For the roles it should just work out of the box for a full stack its likely that the process for cent isn't well thoughtout yet.15:14
*** michauds has joined #openstack-ansible15:15
*** aludwar has quit IRC15:15
*** Fenuks has quit IRC15:15
*** psilvad has joined #openstack-ansible15:15
cloudnullmgariepy: i use https://github.com/cloudnull/os-ansible-deployment/tree/master-rhel/etc/network/network-scripts for the network scripts15:15
cloudnullwhen i'm playing with the full stack15:15
cloudnullhowever recently i've only focused on individual roles.15:16
*** persia has joined #openstack-ansible15:16
cloudnullchris_hultin: is this an AIO ?15:16
chris_hultincloudnull: Yeaqh15:16
cloudnullI know we test that w/ tempest during the gate15:16
cloudnullits part of the instance provisioing.15:17
cloudnulldo you see packets leaving the br-vlan device15:17
cloudnulland are the iptables rules inplace to support htat?15:17
cloudnull*that15:17
*** markvoelker has joined #openstack-ansible15:17
*** sdake_ has joined #openstack-ansible15:18
chris_hultincloudnull: TCPDumping now15:18
*** sdake has quit IRC15:20
openstackgerritFl├ívio Ramalho proposed openstack/openstack-ansible-os_ceilometer: Support for Sahara notifications  https://review.openstack.org/36219015:20
*** aludwar has joined #openstack-ansible15:20
chris_hultincloudnull: OK, so the traffic doesn't seem to be leaving.  tcpdump -P out doesn't show anything, tcpdump -P in shows the traffic15:21
*** woodard has joined #openstack-ansible15:23
cloudnulldo you see it getting across the br-vlan device ?15:23
chris_hultincloudnull: What would the best way to verify that?15:23
*** sdake has joined #openstack-ansible15:24
cloudnullI use `tcpdump  -vnlSi $INTERFACE`15:25
*** sdake_ has quit IRC15:26
cloudnullyou should see traffic on the bridge15:26
chris_hultincloudnull: Do I need to specify the actual external interface, or the br-vlan interface?15:26
cloudnullbr-vlan15:26
cloudnullif this is an AIO there shouldn't be any interface attached to the port15:26
cloudnulland you should see the following rules https://github.com/openstack/openstack-ansible-lxc_hosts/blob/master/templates/lxc-system-manage.j2#L78-L11215:27
cloudnullas well as https://github.com/openstack/openstack-ansible/blob/master/etc/network/interfaces.d/aio_interfaces.cfg#L28-L3215:27
chris_hultincloudnull: OK, so I see the requests going from the nova instance to the ping target, but nothing coming in from the outside15:27
cloudnullprovider network or a tenant  ?15:28
chris_hultinIt's a tenant network15:28
cloudnullima go spin up an AIO and test things too15:29
cloudnullthat should work so long as you see https://github.com/openstack/openstack-ansible/blob/master/etc/network/interfaces.d/aio_interfaces.cfg#L31-L3215:29
*** adrian_otto has quit IRC15:29
*** weezS has joined #openstack-ansible15:30
chris_hultincloudnull: I'm seeing the up/down lines in the osa_interfaces.cfg file15:32
*** adrian_otto has joined #openstack-ansible15:32
*** markvoelker has quit IRC15:32
cloudnullyes. and you should see those rules in place too15:32
chris_hultinIn the iptables output?15:32
cloudnullyes15:33
cloudnullthey should be part of the nat table15:33
cloudnull`iptables -vnL -t nat`15:33
*** adrian_otto has quit IRC15:35
chris_hultinOK, I do see rules that look correct15:35
cloudnullok15:36
cloudnullmhayden d34dh0r53 around?15:36
cloudnullstevelle: ++15:37
d34dh0r53i am15:37
cloudnullplease https://review.openstack.org/#/c/362144/15:37
cloudnull:)15:37
*** kenhui1 has quit IRC15:38
d34dh0r53cloudnull: donerated, looks good15:38
chris_hultincloudnull: By the way, I can ping out from the LXC containers, just not the actual Nova instances15:38
cloudnullthanks d34dh0r5315:39
*** kenhui has joined #openstack-ansible15:39
*** eil397_ has joined #openstack-ansible15:39
*** pcaruana has quit IRC15:43
*** eil397_ has quit IRC15:44
*** GMAzrael has quit IRC15:46
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Add RC source to scripts library  https://review.openstack.org/36221315:53
cloudnullmattt d34dh0r53: another one. ^15:53
*** neilus has quit IRC15:54
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_sahara: Ansible 2.1.1.0 role testing  https://review.openstack.org/35361215:54
cloudnullchris_hultin: if traffic is getting out of the containers then i'd say things are +/- working15:55
cloudnulli think its going to be a matter of figuring out where its stopping in the path15:55
*** galstrom_zzz is now known as galstrom15:58
*** eil397_ has joined #openstack-ansible15:59
*** neilus has joined #openstack-ansible16:00
*** david-lyle_ is now known as david-lyle16:01
chris_hultincloudnull: I think I see what the problem is - the traffic doesn't appear to be being NAT'd when it goes out the public interface of the server16:05
jamesdentonAnyone have a sec to verify I'm using overrides properly? OSA 13.1.316:05
jamesdentonhttp://pastebin.com/gp96zZ6b16:05
openstackgerritMerged openstack/openstack-ansible: Remove unnecessary overrides of service variables  https://review.openstack.org/36147916:10
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure AIDE initializes on subsequent runs  https://review.openstack.org/36123916:11
cloudnullchris_hultin: hum. that should be setup already by the AIO scripts.16:11
cloudnullif its not then something is being has been broken16:11
cloudnulljamesdenton: looking16:11
cloudnulljamesdenton: lgtm16:12
cloudnulloh, jamesdenton -- add spaces between the items16:12
cloudnullIE: path_mtu: 900016:12
jamesdenton:|16:12
cloudnullnot path_mtu:900016:12
jamesdentonlet's see16:13
cloudnullotherwise yaml may see that as a string16:13
cloudnullwith a collon in it16:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Exclude /run from AIDE checks  https://review.openstack.org/36224216:13
palendaelol16:13
palendaeYay edge cases!16:13
cloudnullit may not.16:13
cloudnullidk16:13
palendaeWouldn't surprise me16:13
palendaeDoes the ini override dict go at the top level of the variables file? I honestly haven't used that plugin16:14
cloudnulljamesdenton: http://cdn.pasteraw.com/h1gpqdyu507n9jv27x0i8yrg4bhvcku16:15
cloudnullit needs a space16:15
cloudnullhttp://cdn.pasteraw.com/mswevl5itwzve13sp1era9bddlw6ejl16:15
cloudnullpalendae: whats that? like for the default section ?16:16
palendaethe neutron_ml2_conf_ini_overrides dict, for example16:16
palendaeDoes that go at the top level of the user_variables.yml file, or under another dict?16:16
*** drifterza has quit IRC16:17
cloudnulljamesdenton:  http://cdn.pasteraw.com/i4robrktf0wte39omv6v2c2ehq7kfg916:18
cloudnullneutron_ml2_conf_ini_overrides that would go in the user_variables.yml file16:18
*** sdake has quit IRC16:19
jamesdentoncloudnull my hero16:20
jamesdentoncloudnull what version of OSA does this override system worth with? v11+?16:21
jamesdenton*work with16:21
cloudnull11 +16:21
cloudnullkilo and beyond16:21
palendaeIs ansible still sitting on that PR?16:21
palendaeOr did they just outright close it?16:21
*** neilus has quit IRC16:22
*** neilus has joined #openstack-ansible16:22
jamesdentonthanks, cloudnull. Spaces did the trick16:23
cloudnullcool16:23
cloudnullpalendae: i abandoned it16:23
cloudnulli gave up16:23
palendae:(16:23
cloudnullhttps://github.com/ansible/ansible/pull/1255516:24
cloudnulleven after showing that the alternitive impl was incomplete and 2x slower they still didn't care. so i abandoned it16:25
*** michaelgugino has quit IRC16:28
*** sdake has joined #openstack-ansible16:30
Andrew_jediGuys, Does anybody know how to integrate  Ceph Object Gateway with Keystone in Mitaka? I tried this http://docs.ceph.com/docs/master/radosgw/keystone/ but no cigars.16:30
Andrew_jediGetting this, Failed to establish a new connection: [Errno 111] Connection refused'16:30
cloudnullmattt: ^16:36
cloudnullAndrew_jedi: i do not, however i'm no ceph expert16:36
Andrew_jedicloudnull: It worked till Liberty by using the admin token middleware but then in mitaka admin token middleware was deprecated.16:38
cloudnullAndrew_jedi: I guess you could put the admin token middleware back ?16:38
cloudnullit should still work even though its been deprecated.16:39
*** Guest35918 is now known as mgagne16:39
cloudnulldolphm: ^16:39
cloudnulllbragstad^^16:39
*** mgagne has quit IRC16:39
*** mgagne has joined #openstack-ansible16:39
Andrew_jedicloudnull: I don't know exactly how to put it back. On Friday Jesse daid that i can use config_override but i could not figure out how to do that with admin token middleware.16:40
Andrew_jedis/dais/said16:40
palendaeI wonder if that's related at all to https://bugs.launchpad.net/openstack-ansible/+bug/1614211 ?16:40
openstackLaunchpad bug 1614211 in openstack-ansible trunk "Playbook Runs Fail in Multi-Domain Environments" [Medium,Confirmed] - Assigned to Nolan Brubaker (nolan-brubaker)16:40
palendaeI'm working with dstanek on that16:40
lbragstadcloudnull Andrew_jedi yep - admin_token middleware should still be there16:43
lbragstadbut we will be removing it once Ocata opens for development16:43
logan-Andrew_jedi: you're on jewel right? what does your rgw config look like? I've tested rgw + keystone v3 using http://cdn.pasteraw.com/h2oz18ttfrhif9o7hlx61itmgs6v9816:44
cloudnullAndrew_jedi: http://cdn.pasteraw.com/o2ela8nujqo9ghaqr9l8otfld2q9t6916:46
cloudnullthat should be all you need to put the admin token middleware back16:47
*** michaelgugino has joined #openstack-ansible16:51
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: [TESTING] Ansible Stable2.1  https://review.openstack.org/35116516:52
cloudnulltyvm jmccrory -- who wants to push the button https://review.openstack.org/#/c/320216/  -- d34dh0r53 stevelle mhayden :)16:52
cloudnullplease?16:52
*** weezS has quit IRC16:53
cloudnull:D16:53
jmccrorynice job on that, looking forward to seeing centos moving everywhere else16:53
Andrew_jedilogan-: My host ip is 172.29.236.73, http://paste.openstack.org/show/564615/16:55
Andrew_jedicloudnull: Thanks a ton :)16:56
Andrew_jedilogan-: Yes i am on Jewel.16:56
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_sahara: Ansible 2.1.1.0 role testing  https://review.openstack.org/35361216:59
*** jperry has quit IRC17:05
*** jperry has joined #openstack-ansible17:05
Andrew_jedicloudnull logan- Its working now. I moved the v3 config from the global section to the radosgw host section and restarted the radosgw. :)17:11
cloudnullwoot!17:12
*** appprod0 has joined #openstack-ansible17:13
*** kenhui has quit IRC17:14
*** javeriak has joined #openstack-ansible17:15
*** KLevenstein has quit IRC17:21
*** javeriak has quit IRC17:21
*** javeriak has joined #openstack-ansible17:21
mhaydencloudnull: just applied lime to coconut17:21
*** raalee has joined #openstack-ansible17:21
cloudnullmhayden: :)17:24
*** AnarchyAo has joined #openstack-ansible17:24
cloudnullso i may need a second set of eyes. https://review.openstack.org/#/c/353612/ -- is failing the gate but on EVERY test locally passes.17:26
*** kenhui has joined #openstack-ansible17:26
cloudnulli'm not sure where its going off, but it looks something to do with container networking. I just can't figure out what.17:26
cloudnull^ if anyone has time it'd be much appreciated.17:27
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Fix deprecation warning for undefined variables  https://review.openstack.org/36140717:28
*** raalee has quit IRC17:35
michaelguginocloudnull: I think there's a problem with your inventory / delegation.17:35
michaelgugino"ESTABLISH LOCAL CONNECTION FOR USER: jenkins" does not appear in other checks17:35
cloudnullI was leaning that way too but I can't pinpoint as to why.17:36
cloudnullbecause if i spin a local vm and test it passes17:36
openstackgerritMerged openstack/openstack-ansible-os_keystone: Implement CentOS 7 support in os_keystone  https://review.openstack.org/32021617:37
*** electrofelix has quit IRC17:37
openstackgerritSatheesh Kumar Ulaganathan proposed openstack/openstack-ansible-rabbitmq_server: Add collect_statistics_interval, rates_mode in rabbitmq.config template  https://review.openstack.org/36229717:38
cloudnull#success Keystone now supports CentOS717:39
openstackstatuscloudnull: Added success to Success page17:39
*** AnarchyAo has quit IRC17:42
michaelguginocloudnull: in the ci environment it looks like things are executing as the jenkins user, are you executing as a nonpriv user locally?17:44
cloudnullnope, let me give that a spin17:46
cloudnullcould be something off when using not root17:46
*** AnarchyAo has joined #openstack-ansible17:47
*** Andrew_jedi has quit IRC17:52
*** markvoelker has joined #openstack-ansible17:53
*** Fenuks|2 has quit IRC17:57
*** asettle has joined #openstack-ansible17:58
*** albertcard has joined #openstack-ansible18:01
*** adrian_otto has joined #openstack-ansible18:01
openstackgerritSatheesh Kumar Ulaganathan proposed openstack/openstack-ansible-rabbitmq_server: Add collect_statistics_interval, rates_mode in rabbitmq.config template  https://review.openstack.org/36229718:02
*** TxGirlGeek has quit IRC18:03
*** asettle has quit IRC18:03
*** KLevenstein has joined #openstack-ansible18:03
*** markvoelker has quit IRC18:09
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Updated host prep tasks  https://review.openstack.org/36230818:10
cloudnull^ i think thats most of the problem with local delegation.18:11
cloudnullI have a few more tests running as NOT root and will know more in a min or two18:12
michaelguginocloudnull: probably should add connection: local to a few other places like test-prepare-containers.yml18:15
*** Zucan has quit IRC18:20
*** TxGirlGeek has joined #openstack-ansible18:25
*** Andrew_jedi has joined #openstack-ansible18:31
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Updated host prep tasks  https://review.openstack.org/36230818:35
cloudnullrromans asettle when you're around you mind giving https://review.openstack.org/#/c/355041/ a look  ?18:44
cloudnullPS4 LGTM but i'd like someone better at english than I to give it a review.18:45
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible: Enable the opportunistic strategy  https://review.openstack.org/34948518:51
*** albertcard has quit IRC18:54
alextricity25Does OSA pin galera to a specific version in mitaka?18:55
cloudnullwe use the 10.x releaese18:57
cloudnull10.018:57
cloudnullbut not a specific version from 10.0.x18:57
alextricity25cloudnull: Thanks man!18:58
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-openstack_hosts: Updated to use the openstack-ansible-tests repo  https://review.openstack.org/36013019:02
cloudnullalextricity25: anytime19:02
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Removed yum cache update  https://review.openstack.org/36232919:09
openstackgerritMerged openstack/openstack-ansible-rabbitmq_server: Add collect_statistics_interval, rates_mode in rabbitmq.config template  https://review.openstack.org/36229719:13
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-openstack_hosts: Updated to use the openstack-ansible-tests repo  https://review.openstack.org/36013019:15
*** javeriak has quit IRC19:18
cloudnullstevelle jmccrory d34dh0r53 if you have a moment https://review.openstack.org/#/q/project:openstack/openstack-ansible-tests+status:open -- these would be helpful19:18
stevellelooking19:18
cloudnulltyvm19:19
cloudnullstevelle: https://review.openstack.org/#/c/358798/ -- the cent7 changes merged into keystone19:20
cloudnulldo you want me to rebase that ^ ?19:20
stevellecloudnull: saw that, if you have time that would be great19:20
cloudnullbeing that my change created that merge conflict I'd be happy to resolve it for you if you'd like19:20
cloudnullok.19:20
cloudnullwill do it now19:20
cloudnullwhat do folks think about grabbing all of our roles via the testing repo? right now all roles have this https://github.com/openstack/openstack-ansible-os_nova/blob/master/tests/ansible-role-requirements.yml and the file is different everywhere.19:24
cloudnullbut if it was stored/processed from the testing repo it'd be stored in 1 place.19:24
cloudnullobviously that download roles that may not be needed for a given set of tests, but  it'd also mean that all of the roles would be availble regardless of them being used.19:25
cloudnullthoughts?19:25
openstackgerritMerged openstack/openstack-ansible-tests: Updated host prep tasks  https://review.openstack.org/36230819:26
openstackgerritMerged openstack/openstack-ansible-tests: Removed yum cache update  https://review.openstack.org/36232919:26
alextricity25It looks like the mariadb version for liberty and mitaka are the same. Does that sound right?19:28
cloudnull yes.19:28
cloudnullthat should be19:28
alextricity25so why exactly are there all these steps in the upgrade script to restart the galera server? To update any openstack table schema changes?19:29
alextricity25I"m probably asking some noobish questions here.19:29
cloudnullnope. i think its just a safe guard in handling.19:30
cloudnulland maybe to limit impact when upgrading from 10.0.a to 10.0.b19:31
cloudnulleven though there shouldn't be any19:31
jmccrorycloudnull: sounds like a good idea to me. will require dependent change in tests repo for adding anything new but that would also help force people to make use of it19:31
cloudnull++19:31
cloudnullthat's my toughts.19:31
cloudnullif we force its use it'll get a lot more attention19:32
*** adrian_otto has quit IRC19:33
alextricity25Oh..this is interesting. "The ``galera_upgrade`` variable tells the ``galera_server`` role to remove the current version of MariaDB and Galera and upgrade to the 10.x series."19:34
alextricity25It sounds like we were not running 10.x on liberty environments in some point in the past19:34
openstackgerritJimmy McCrory proposed openstack/openstack-ansible: Move pip_lock_to_internal_repo to group_vars  https://review.openstack.org/34438819:36
rromanscloudnull: reviewed19:37
*** Andrew_jedi has quit IRC19:38
stevellecloudnull: I like that the roles all specify what they need, but it's really just an aesthetic judgement.19:42
cloudnulltyvm rromans19:42
rromanscloudnull: cheers19:42
*** thorst_ has joined #openstack-ansible19:46
*** sdake has quit IRC19:48
*** thorst has quit IRC19:48
*** albertcard has joined #openstack-ansible19:52
*** markvoelker has joined #openstack-ansible19:52
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Added role requirements file to the tests repo  https://review.openstack.org/36234919:55
cloudnullstevelle jmccrory ^ thats what I'm thinking.19:56
cloudnullin that way all of the roles are made available to the testing suit19:56
cloudnulland if more out of tree roles are required the specific project role should be able to pull those in with an additional requirement file.19:57
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Added role requirements file to the tests repo  https://review.openstack.org/36234919:57
cloudnull^ white space fix19:57
*** AnarchyAo has quit IRC20:01
chris_hultincloudnull: So, I think I figured out the problem with the networking issue I brought up earlier - for whatever reason, the traffic isn't being NAT'd when it is going out the public interface on the server20:03
*** TxGirlGeek has quit IRC20:03
cloudnullwe're you able to add an iptables rule to fix it?20:04
*** neillc has quit IRC20:04
cloudnull**were20:05
*** mcarden has quit IRC20:05
*** gus has quit IRC20:05
*** mattoliverau has quit IRC20:05
*** darrenc has quit IRC20:05
*** mcarden_ has quit IRC20:05
*** jhesketh has quit IRC20:05
chris_hultincloudnull: I've not done that yet - I need to look up how to actually do that.20:05
*** darrenc has joined #openstack-ansible20:07
*** markvoelker has quit IRC20:08
*** johnmilton has quit IRC20:08
cloudnullchris_hultin: http://cdn.pasteraw.com/8vircovygtk8dya36vyjwko2ase921p -- something like that should work20:09
chris_hultincloudnull: I just need to remove the current rule first.20:09
cloudnullthe MASQUERADE ?20:10
*** mcarden has joined #openstack-ansible20:11
*** mcarden_ has joined #openstack-ansible20:11
*** neillc has joined #openstack-ansible20:11
*** matt6434 has joined #openstack-ansible20:11
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-tests: Added role requirements file to the tests repo  https://review.openstack.org/36234920:12
*** jhesketh has joined #openstack-ansible20:12
*** gus has joined #openstack-ansible20:15
*** markvoelker has joined #openstack-ansible20:17
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_neutron: Open vSwitch documentation in Neutron Role  https://review.openstack.org/35504120:18
cloudnullthorst_: ^ i took wip off your patch20:18
cloudnullrromans: if you dont mind revoting.20:18
chris_hultincloudnull: Thanks, still not working though.  For whatever reason, it doesn't look like anything is hitting that rule.20:20
rromanscloudnull: done20:20
*** johnmilton has joined #openstack-ansible20:21
cloudnullthanks again rromans20:24
cloudnullchris_hultin: interesting20:24
cloudnullno packats are hitting that rule?20:24
*** johnmilton has quit IRC20:25
*** johnmilton has joined #openstack-ansible20:25
chris_hultincloudnull: Nope, https://gist.github.com/chrishultin/60d4e9c41dc37c200a77ba34dee73cfb20:25
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_keystone: Install and configure Nginx  https://review.openstack.org/35879820:28
cloudnullstevelle: ^ rebased20:29
FrankZhangcoolj hi, Jordan, is that you?20:29
FrankZhangcoolj I'm Frank, RPC dev team, are you still working on https://review.openstack.org/#/c/329231/ ?20:29
cloudnullchris_hultin:  looks like the lxc masquerade is happening https://gist.github.com/chrishultin/60d4e9c41dc37c200a77ba34dee73cfb#file-gistfile1-txt-L620:30
openstackgerritMerged openstack/openstack-ansible-os_neutron: Open vSwitch documentation in Neutron Role  https://review.openstack.org/35504120:30
cloudnulli've got to step away for a bit, back later.20:32
openstackgerritMerged openstack/openstack-ansible: Update all SHAs for 12.2.3  https://review.openstack.org/36069420:33
*** Jeffrey4l_ has quit IRC20:35
*** Jeffrey4l_ has joined #openstack-ansible20:36
*** markvoelker has quit IRC20:48
*** TxGirlGeek has joined #openstack-ansible20:52
*** sdake has joined #openstack-ansible20:52
thorst_cloudnull: we are still testing that out internally20:53
thorst_so I was leaving as WIP until we get a solid verify20:53
thorst_I planned to update a few more times actually based on what we're learning test wise.20:53
*** woodard has quit IRC20:54
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_keystone: Isolate mod_wsgi from Apache install  https://review.openstack.org/36243920:56
*** Mudpuppy_ has joined #openstack-ansible20:56
*** Mudpuppy has quit IRC21:00
*** Mudpuppy_ has quit IRC21:00
*** gouthamr has quit IRC21:02
*** abelur__ has joined #openstack-ansible21:05
*** AnarchyAo has joined #openstack-ansible21:06
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_keystone: Install and configure Nginx  https://review.openstack.org/35879821:06
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-tests: Add convergence test for test repo.  https://review.openstack.org/36050921:07
*** chris_hultin is now known as spedione|AWAY21:08
cooljFrankZhang: yeah, that's me :)21:12
FrankZhangcoolj hi, you still work on that one?21:13
*** thorst_ has quit IRC21:13
*** thorst has joined #openstack-ansible21:14
*** TxGirlGeek has quit IRC21:14
cooljFrankZhang: i'm still waiting for the stable maintenance team to merge the backport. don't know that there's anything else left to "do" on it21:17
*** thorst has quit IRC21:18
FrankZhangcoolj I just did recheck and didn't expect it passed right now. It's really interesting that failure not related to nova db things.21:19
cloudnullthorst: every commit to our neutron role is going through an OvS test. From a doc point of view the changes to the local role docs to deploy OvS were much needed/welcome.21:21
cloudnullwhile neutron gates w/ ovs its non-voting.21:21
cloudnullat last check it looks like the tests are passing without issue so we might want to get odyssey4me to update the ovs gate to make it voting21:21
jamesdentoncloudnull quick question re: overrides when you have a sec21:22
cloudnullshoot21:23
jamesdentonIn /etc/openstack_deploy/user_variables.yml, can you limit overrides to a particular group? ie. neutron_server? Or must that be done in openstack_user_config?21:26
cloudnulljmccrory stevelle d34dh0r53 any thoughts on https://review.openstack.org/#/c/362349/21:26
*** schwicht has quit IRC21:26
jamesdentonIn the latter, we don't really differentiate between network hosts (agent vs server). We've got network_hosts. The overrides really only need to exist on neutron_server containers. What would be the best way to go about ensuring that?21:27
cloudnulljamesdenton:  for that kind of a limit would have to be in openstack_user_config21:27
cloudnullare the setting that you want to deploy host/service specific ?21:28
cloudnullIE can they simply be everywhere ?21:28
jamesdentonwell they *can* be everywhere, but in reality only the neutron_server containers need them21:28
jmccrorycloudnull : think alphabetic listing caused problems in the past, role needed its dependency listed first. etcd might need to be included too since it's needed by neutron (and so the other roles that require neutron in their tests)21:29
cloudnulljamesdenton:  you could append them to group_vars within the neutron_agent group https://github.com/openstack/openstack-ansible/blob/master/playbooks/inventory/group_vars/neutron_agent.yml21:31
cloudnulls/neutron_agent/neutron_server/21:32
cloudnulldoesn't look like a file exists for that so you'd just create it.21:32
*** sdake has quit IRC21:33
cloudnulljmccrory: you may be right. that makes generating a list based on what we have in project-config hard.21:33
jmccroryyeah...21:33
jamesdentoncloudnull oh, so just create a /opt/openstack-ansible/playbooks/inventory/group_vars/neutron_server.yml and through my overrides in there?21:34
stevellejamesdenton: that should do it21:35
openstackgerritSteve Lewis (stevelle) proposed openstack/openstack-ansible-os_keystone: Isolate mod_wsgi from Apache install  https://review.openstack.org/36243921:36
cooljcloudnull: stevelle any way to do that ^ outside of the repo so we don't have to track changes to the branch when upgrading to a new branch?21:37
cooljchanging group vars i mean21:37
jamesdentonlike extending that to say /etc/openstack_deploy/group_vars/*?21:38
jamesdenton:D21:38
cloudnullcoolj: nope21:38
cloudnulli've not found a way to reach in and inject group_vars into an ansible run21:38
cloudnullmaybe something can be done in inventory, though i don't know what21:39
cloudnulljmccrory: RE: https://review.openstack.org/#/c/362349/ sadly ansible doesn't let us specifiy multiple role requirement files.21:40
cloudnullso the extra roles, like etcd would need to be pulled in on a second run but the good news is the galaxy resolver, when using 2.x doesn't seem to die on dependencies when using the git scm21:41
cloudnulli remember that being an issue in 1.x but seems fixed in 2.21:41
jmccroryoh ok good, this should line up with roles moving to 2 anyway21:42
stevelleout of curiosity, since I'm out of touch on this, what is neutron using etcd for?21:42
jmccrorystevelle: calico https://review.openstack.org/#/c/340174/21:42
cloudnulletcd and bird21:43
openstackgerritSatheesh Kumar Ulaganathan proposed openstack/openstack-ansible-rabbitmq_server: Add collect_statistics_interval, rates_mode in rabbitmq.config template  https://review.openstack.org/36246121:43
jmccrorythink it's only required because it's mentioned in the meta file, even with a when around it https://review.openstack.org/#/c/340174/19/meta/main.yml21:44
stevellewe need to nudge the Calico team to put OSA here: http://docs.projectcalico.org/en/1.3.0/openstack.html21:45
cloudnulllogan-: ^21:49
*** klamath has quit IRC21:49
cloudnulljmccrory: So i think we can do the following to get all the roles and then the extra ones. in the neutron role we do this https://github.com/openstack/openstack-ansible-os_neutron/blob/master/tox.ini#L120-L122 which we can change to http://cdn.pasteraw.com/40aafnh45lk36t24kfbciwzby0c12s321:49
cloudnullnote the first will get everything, second will skip on anything it already has.21:50
cloudnulltests/playbooks being the location of the test role.21:51
*** dfflanders has joined #openstack-ansible21:51
*** BjoernT has quit IRC21:52
openstackgerritMerged openstack/openstack-ansible: Fix deprecation warning for undefined variables  https://review.openstack.org/36140721:58
cloudnulli gotta run, bbl21:59
*** schwicht has joined #openstack-ansible22:01
jmccrorycloudnull : ah ok, that makes sense. maybe name change on the second file eventually so it's more obvious that those are additional or role specific requirements22:05
*** schwicht has quit IRC22:07
*** kenhui has quit IRC22:07
*** jamesdenton has quit IRC22:08
*** jperry has quit IRC22:08
*** schwicht has joined #openstack-ansible22:08
*** galstrom is now known as galstrom_zzz22:09
mrdaMorning OSA22:09
spotzhey mrda22:12
mrdao/22:15
*** chrichip has joined #openstack-ansible22:18
*** michauds has quit IRC22:23
*** chrichip has quit IRC22:25
openstackgerritBjoern Teipel proposed openstack/openstack-ansible-os_swift: Support to disable/enable individual Swift services  https://review.openstack.org/36247622:27
*** KLevenstein has quit IRC22:28
openstackgerritBjoern Teipel proposed openstack/openstack-ansible-os_swift: Support to disable/enable individual Swift services  https://review.openstack.org/36247622:28
*** thorst has joined #openstack-ansible22:34
*** spotz is now known as spotz_zzz22:35
*** schwicht has quit IRC22:36
*** michaelgugino has quit IRC22:47
*** kenhui has joined #openstack-ansible22:52
*** kenhui has quit IRC22:56
*** markvoelker has joined #openstack-ansible23:02
*** matt6434 is now known as mattoliverau23:06
*** gouthamr has joined #openstack-ansible23:07
*** AnarchyAo has quit IRC23:09
cloudnullmornings mrda23:24
mrdahey cloudnull23:24
cloudnullhows it ?23:26
cloudnullany cores around that might want to allow this through https://review.openstack.org/#/c/362213/  ?23:26
openstackgerritMerged openstack/openstack-ansible-security: Ensure AIDE initializes on subsequent runs  https://review.openstack.org/36123923:30
openstackgerritMerged openstack/openstack-ansible-security: Exclude /run from AIDE checks  https://review.openstack.org/36224223:30
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-os_glance: Implement CentOS 7 support in os_glance  https://review.openstack.org/32054223:31
cloudnullstevelle: looks like  https://review.openstack.org/#/c/358798/ is happen23:50
cloudnullfor cent+nginx23:50
cloudnullor is that a missnomer?23:50
*** markvoelker has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!