Tuesday, 2016-11-29

*** hughmFLEXin has quit IRC00:01
*** javeriak has joined #openstack-ansible00:02
*** ianychoi has joined #openstack-ansible00:02
*** TxGirlGeek has quit IRC00:02
*** cathrichardson has quit IRC00:03
*** hughmFLEXin has joined #openstack-ansible00:03
*** cathrichardson has joined #openstack-ansible00:04
*** galstrom is now known as galstrom_zzz00:05
*** dffco has quit IRC00:06
*** kristian__ has joined #openstack-ansible00:11
*** kristian__ has quit IRC00:15
*** javeriak has quit IRC00:20
cloudnullTobiSan: hard to say whats going on.00:21
cloudnullhave you ifup/down the bridges ?00:21
cloudnullprior to this going sideways?00:21
cloudnullthere is a tool called lxc-veth-check which can repair the links between containers and bridges should those links be broken00:22
cloudnullif you run lxc-veth-check it should go through and verify that all containers on a given host are wired up correctly.00:23
cloudnullalso in the container check to see if the interface file is still propulated with data.00:24
cloudnullsomething like /etc/network/interfaces.d/eth1.cfg00:24
cloudnullif that file no longer exists or is bad that could be part of the problem00:24
cloudnullTobiSan: lastly check that the source or include line is in the /etc/network/interfaces file00:25
cloudnullyou should see something like source /etc/network/interfaces.d/*.cfg00:25
*** javeriak has joined #openstack-ansible00:25
*** javeriak has quit IRC00:25
*** javeriak has joined #openstack-ansible00:26
*** Mudpuppy has joined #openstack-ansible00:26
*** javeriak has quit IRC00:26
*** thorst_ has joined #openstack-ansible00:26
*** thorst_ has quit IRC00:27
*** pramod has joined #openstack-ansible00:28
*** hfu has joined #openstack-ansible00:30
*** kylek3h has joined #openstack-ansible00:31
*** weezS has joined #openstack-ansible00:32
*** haad1 has quit IRC00:32
*** dxiri has quit IRC00:34
*** weezS has quit IRC00:37
*** whiteveil has quit IRC00:38
*** cathrich_ has joined #openstack-ansible00:42
*** cathrichardson has quit IRC00:42
*** Pramod_ has joined #openstack-ansible00:42
*** pramod has quit IRC00:45
*** whiteveil has joined #openstack-ansible00:45
*** cmart has quit IRC00:53
*** Mudpuppy_ has joined #openstack-ansible00:54
*** Mudpuppy has quit IRC00:57
openstackgerritJirayut Nimsaeng proposed openstack/openstack-ansible-os_neutron: Separate VPNaaS package and configuration between Ubuntu 14.04 that is openswan and Ubuntu 16.04 that is strongswan  https://review.openstack.org/40382200:58
*** vnogin has quit IRC01:01
*** schwicht has quit IRC01:10
*** Mudpuppy_ has quit IRC01:24
*** schwicht has joined #openstack-ansible01:25
*** vnogin has joined #openstack-ansible01:25
*** askb has quit IRC01:32
*** thorst_ has joined #openstack-ansible01:35
*** thorst_ has quit IRC01:41
*** askb has joined #openstack-ansible01:44
*** askb has quit IRC01:52
*** sdake_ has joined #openstack-ansible01:55
*** sdake_ has joined #openstack-ansible01:55
*** cathrich_ has quit IRC01:56
*** sdake has quit IRC01:58
*** cathrichardson has joined #openstack-ansible01:58
*** dffco has joined #openstack-ansible01:59
*** skape_ has quit IRC02:02
*** cathrichardson has quit IRC02:03
*** schwicht has quit IRC02:07
*** vnogin has quit IRC02:10
*** whiteveil has quit IRC02:10
openstackgerritMichael Carden proposed openstack/openstack-ansible-os_designate: Update Vagrant config with Xenial  https://review.openstack.org/40397402:11
*** cathrichardson has joined #openstack-ansible02:11
*** dffco has quit IRC02:28
*** cathrichardson has quit IRC02:32
*** galstrom_zzz is now known as galstrom02:34
*** thorst_ has joined #openstack-ansible02:39
*** thorst_ has quit IRC02:40
*** thorst_ has joined #openstack-ansible02:40
*** thorst_ has quit IRC02:41
openstackgerritMichael Carden proposed openstack/openstack-ansible: Create Designate container and start services  https://review.openstack.org/40398302:43
*** oanson has joined #openstack-ansible03:07
*** thorst_ has joined #openstack-ansible03:08
*** dffco has joined #openstack-ansible03:12
*** v1k0d3n has joined #openstack-ansible03:15
*** thorst_ has quit IRC03:16
*** woodard has quit IRC03:18
*** woodard has joined #openstack-ansible03:18
*** dffco has quit IRC03:24
*** Jeffrey4l has quit IRC03:54
*** Jeffrey4l has joined #openstack-ansible03:55
*** f13o has quit IRC04:05
*** galstrom is now known as galstrom_zzz04:07
*** thorst_ has joined #openstack-ansible04:14
*** thorst_ has quit IRC04:22
*** chhavi has joined #openstack-ansible04:22
*** whiteveil has joined #openstack-ansible04:27
*** oanson has quit IRC04:30
*** whiteveil has quit IRC04:34
*** weezS has joined #openstack-ansible05:02
*** poopcat has quit IRC05:05
*** dxiri has joined #openstack-ansible05:05
*** dxiri has quit IRC05:10
*** Jack_Iv has joined #openstack-ansible05:12
*** gouthamr has joined #openstack-ansible05:12
*** kristian__ has joined #openstack-ansible05:13
*** Jack_Iv has quit IRC05:17
*** kristian__ has quit IRC05:17
*** thorst_ has joined #openstack-ansible05:20
*** thorst_ has quit IRC05:26
*** shausy has joined #openstack-ansible05:35
*** Jack_Iv has joined #openstack-ansible05:37
*** gouthamr has quit IRC05:37
*** chhavi has quit IRC05:42
*** gouthamr has joined #openstack-ansible05:47
*** hybridpollo has quit IRC05:49
*** sdake_ has quit IRC05:52
*** williamcaban has joined #openstack-ansible05:54
*** javeriak has joined #openstack-ansible05:56
*** gouthamr has quit IRC05:56
*** chhavi has joined #openstack-ansible05:56
*** javeriak has quit IRC05:57
*** javeriak has joined #openstack-ansible05:57
*** gtrxcb has joined #openstack-ansible05:58
*** Jeffrey4l has quit IRC06:12
*** Jeffrey4l has joined #openstack-ansible06:12
*** thorst_ has joined #openstack-ansible06:25
*** rgogunskiy has joined #openstack-ansible06:26
*** McMurlock1 has joined #openstack-ansible06:30
*** thorst_ has quit IRC06:32
*** oanson has joined #openstack-ansible06:41
*** kristian__ has joined #openstack-ansible06:42
*** fxpester has joined #openstack-ansible06:45
*** kristian__ has quit IRC06:52
*** h5t4 has joined #openstack-ansible07:00
*** Pramod_ has quit IRC07:02
*** chhavi has quit IRC07:03
*** chhavi has joined #openstack-ansible07:06
*** kristian__ has joined #openstack-ansible07:13
*** drifterza has joined #openstack-ansible07:20
*** pcaruana has joined #openstack-ansible07:21
*** f13o has joined #openstack-ansible07:25
*** chhavi has quit IRC07:28
*** thorst_ has joined #openstack-ansible07:28
*** javeriak has quit IRC07:32
*** Jack_Iv_ has joined #openstack-ansible07:34
*** thorst_ has quit IRC07:36
*** kristian__ has quit IRC07:38
drifterzaHello07:38
*** javeriak has joined #openstack-ansible07:39
*** kristian__ has joined #openstack-ansible07:40
*** weezS has quit IRC07:40
*** javeriak has quit IRC07:43
*** kristian__ has quit IRC07:44
*** fxpester has quit IRC07:50
*** javeriak has joined #openstack-ansible07:55
*** f13o has quit IRC08:03
*** gouthamr has joined #openstack-ansible08:03
*** fxpester has joined #openstack-ansible08:23
*** javeriak has quit IRC08:23
*** yolanda has quit IRC08:31
*** haad1 has joined #openstack-ansible08:31
*** thorst_ has joined #openstack-ansible08:34
*** thorst_ has quit IRC08:41
*** Andrew_jedi has joined #openstack-ansible08:42
Andrew_jediHello Folks, Does anyone know whether glance-replicator still works?08:42
*** yolanda has joined #openstack-ansible08:43
*** gtrxcb has quit IRC08:49
*** pmannidi has quit IRC09:00
odyssey4memongo3 that file will be on the repo server once the repo is built09:03
odyssey4meit has a fall back to an upstream URL09:03
openstackgerritMerged openstack/openstack-ansible-galera_client: Allow galera_client role to skip package installs  https://review.openstack.org/40388009:10
*** haad1 has quit IRC09:12
*** vnogin has joined #openstack-ansible09:16
*** chhavi has joined #openstack-ansible09:18
*** kristian__ has joined #openstack-ansible09:29
openstackgerritMerged openstack/openstack-ansible-galera_server: Don't install client packages via the galera_client role  https://review.openstack.org/40388109:36
odyssey4meandymccr ^ you'll notice that no trusty job ran for ^09:37
andymccrodyssey4me: for galera_server? that was already working - its only like swift/neutron where there were trusty-nv jobs that would run. i'll check if those are working now!09:38
odyssey4meandymccr ok, just verified that the integrated gate is now working right for master & stable/newton09:38
andymccrahh perfect09:38
andymccrim gonna start removing the trusty stuff at some point then09:38
odyssey4mecheck the zuul queue now for the two test jobs09:39
andymccror at least filing bugs to do that :P09:39
andymccrlooks like it's working for neutron too09:39
*** thorst_ has joined #openstack-ansible09:39
andymccrso i think that's fixed now09:39
*** hfu has quit IRC09:42
*** kristian__ has quit IRC09:44
*** kristian__ has joined #openstack-ansible09:44
*** kristian__ has quit IRC09:45
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: Install MariaDB 10.1 server  https://review.openstack.org/40112309:46
*** kristian__ has joined #openstack-ansible09:46
*** thorst_ has quit IRC09:47
evrardjpodyssey4me: do you know the rationale behind having uca optional in xenial?09:47
odyssey4meevrardjp it's optional across the board - that was intended for newton just to allow people to turn it off if they want09:47
*** kristia__ has joined #openstack-ansible09:47
evrardjp (master)09:47
odyssey4meif we think it's important to force it on, then we could switch to doing that this cycle09:48
odyssey4meit probably makes sense to force RDO for centos and UCA for ubuntu09:48
*** openstackgerrit has quit IRC09:48
evrardjpexactly09:48
evrardjpI thought it was easier to have a package: task for the requirements that setups the repo, uca in ubuntu/rdo on rh09:49
*** openstackgerrit has joined #openstack-ansible09:49
odyssey4meoh, good idea :)09:49
odyssey4mehmm, is there a package to install for ubuntu though?09:49
odyssey4meIIRC you add the keyring package, then have to execute a command09:50
evrardjpoh yes that's true09:51
evrardjpthat still works though09:51
*** Jack_Iv_ has quit IRC09:51
*** kristian__ has quit IRC09:51
odyssey4meyeah, but it doesn't consolidate it down to a single task unfortunately :/09:51
evrardjpapt: update_cache [ubuntu only], then package: item where item is different in centos[rdo]/ubuntu[uca keyring], apt_repo, then generic pkg install09:52
odyssey4meevrardjp so with regard to https://review.openstack.org/400579 the reason that the approach is taken is because the repo may or may not exist when the first few playbooks run09:53
evrardjptoo bad ubuntu needs update_cache and apt_repo09:53
evrardjpodyssey4me: agreed, but it doesn't matter?09:53
evrardjpyou still have your fallback url09:53
odyssey4mesure, but then you lose one more fallback09:54
odyssey4meright now there are two, and that task often fails09:54
odyssey4memy intent is to protect the two fallback system, but provide for using the local repo if need back09:54
odyssey4me*is possible09:54
*** yolanda has quit IRC09:55
*** electrofelix has joined #openstack-ansible09:55
evrardjpit looks like we are doing the wiring to override group_vars, which seems wrong to me. If we are at that point, maybe we should rethink the way we are doing things09:55
odyssey4meI don't understand the objection. A play can override group_vars, that's why there is a var precedence to use as a tool.09:56
odyssey4mewe already do this for upper constraints09:56
odyssey4meit implements exactly the same mechanism09:56
*** yolanda has joined #openstack-ansible09:57
evrardjpit's not because it's not technically feasible, I know it would work09:57
evrardjpit's because I don't think we should head that way09:57
odyssey4meevrardjp if your objection is the approach taken, then feel free to push a patch with an alternative approach so that it can be debated in review09:58
odyssey4mebut blocking a functional patch just for the sake of approach with no real alternative on the table is not productive09:58
odyssey4mewith your -2 you're actually preventing anyone else from reviewing the patch09:59
odyssey4meand therefore there can be no discussion about approach09:59
evrardjpok let me do a quick commit then10:00
openstackgerritMerged openstack/openstack-ansible-os_cloudkitty: Clean up unused vars  https://review.openstack.org/40140510:00
*** Jack_Iv_ has joined #openstack-ansible10:02
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible: Use get-pip script from repo release folder  https://review.openstack.org/40412510:15
*** kristian__ has joined #openstack-ansible10:20
*** kristia__ has quit IRC10:23
openstackgerritMerged openstack/openstack-ansible-os_glance: Detach glance swift_store_auth_insecure from Keystone  https://review.openstack.org/40239310:27
*** aludwar has quit IRC10:27
*** kristian__ has quit IRC10:27
*** aludwar has joined #openstack-ansible10:28
TobiSancloudnull: i killed the service dnsmasq i have started before, then ifdown and ifup lxcbr0 and afterwards there was actually a dnsmasq process. after this the lxc-veth-check resolved all broken veths10:28
TobiSanbut unfortunately i still cant ping the containers from the host10:29
TobiSan"Destination Host Unreachable"10:30
*** kristian__ has joined #openstack-ansible10:31
TobiSanthe containers still do not have a ipv4 address but after attaching and ifdown ifup their interfaces they get one ipv410:32
*** kristia__ has joined #openstack-ansible10:34
*** kristian__ has quit IRC10:34
openstackgerritMerged openstack/openstack-ansible-os_keystone: Fix virtualenv-tools issue  https://review.openstack.org/40221210:36
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Set lifetime limits for passwords [+Docs]  https://review.openstack.org/39923210:41
*** Jack_Iv_ has quit IRC10:42
*** thorst_ has joined #openstack-ansible10:45
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Create home directories by default [+Docs]  https://review.openstack.org/39975910:45
*** kristian__ has joined #openstack-ansible10:47
*** kristia__ has quit IRC10:47
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Verify that home directories exist [+Docs]  https://review.openstack.org/39978310:48
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Check for users w/o home dirs [+Docs]  https://review.openstack.org/39974910:48
*** kristian__ has quit IRC10:49
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Create home directories by default [+Docs]  https://review.openstack.org/39975910:49
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Verify that home directories exist [+Docs]  https://review.openstack.org/39978310:49
TobiSanrestarting networking service results in an "failed to bring up br-mgmt" error10:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs]  https://review.openstack.org/39925510:50
asettleandymccr: where yo at? I can't see your head and I need you to do a thing10:51
*** thorst_ has quit IRC10:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Require auth for sudo [+Docs]  https://review.openstack.org/40380710:52
asettleandymccr: https://review.openstack.org/#/c/391486/10:52
openstackgerritMerged openstack/openstack-ansible-os_neutron: Fix virtualenv-tools issue  https://review.openstack.org/40368810:56
*** haad1 has joined #openstack-ansible10:57
*** gouthamr has quit IRC10:58
openstackgerritAndy McCrae proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o  https://review.openstack.org/40415011:03
TobiSancloudnull: i have fixed it. the issue was a second gateway declaration in the interfaces file. this caused a failing ifup on br-mgmt11:03
asettleThank you andymccr11:03
andymccrnot sure why that didnt cherrypick cleanly via the interface... but oh well11:03
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o  https://review.openstack.org/40415011:03
asettleandymccr: does what wants?11:03
asettleI've given it a +2, i'll wait until jenkins loves it11:04
andymccrshould be quick, its a docs only change!11:04
*** kristian__ has joined #openstack-ansible11:05
*** kristian__ has quit IRC11:06
*** Andrew_jedi has quit IRC11:08
odyssey4meandymccr asettle https://review.openstack.org/#/c/404150/2 needs an edit11:08
asettleodyssey4me: got it11:08
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o  https://review.openstack.org/40415011:09
asettleeGood catch11:09
odyssey4meand I'm not entirely sure that a cherry-pick is the right approach there - the conflicts may be due to edits in master which were not backported11:09
odyssey4mebut I'm not sure what that might be - you'd have to check the conflcts11:09
asettleodyssey4me: yeah, I figure we'll wait and see tbh.11:10
*** fxpester has quit IRC11:10
odyssey4meoh, you know what has changed - the advanced config stuff, for new roles in ocata11:10
odyssey4meso best to ensure that we don't port those back to newton11:11
odyssey4meandymccr asettle also, this would need to change: https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L328611:12
asettleodyssey4me: hold tight, please. Andreas and I are still working out the creation of this. We will get there :) i'm in the process of creating the index files for newton and ocata and I asked Andy to do the backport while I did this.11:12
asettleodyssey4me: if you wanna go ahead and update that to make it smoother, that would be awesome :)11:13
odyssey4mewell, right now the deploy guide job won't run with that patch - so I'm not entirely sure what the purpose would be?11:13
*** kristian__ has joined #openstack-ansible11:15
asettleodyssey4me: this is a new process, it is not appropriately documented how to do this and I am slowly figuring it out. I have -1 on the workflow so people note this is a work in progress.11:15
asettlePlease be patient.11:15
asettleI'm learning.11:15
odyssey4measettle ah ok :) I was just pointing out some of the moving parts I saw - not trying to rush anything.11:15
odyssey4meAlso, I checked the appendices and don't see any master content there, so I think we're ok.11:16
asettleAppreciated :) i've got a list in front of me that I'll hopefully be able to smooth out along the way.11:16
odyssey4meI take it that the intent is to publish the Newton guide to the docs front page?11:16
asettleodyssey4me: sure is.11:16
odyssey4mewoot!11:16
asettleMaking the index pages for the draft (ocata) and newton repos now.11:16
asettleHence why i'm just taking it slow.11:17
asettleGood to hear we're okay :)11:17
asettleThanks for checking.11:17
*** kristia__ has joined #openstack-ansible11:17
odyssey4meok cool, looking forward to it11:17
asettleMe too!11:17
asettle:D11:17
odyssey4meif you need some help from me, just ping me11:17
asettleTahnks odyssey4me I most definitely will hahaha11:17
*** kristian__ has quit IRC11:18
*** kristia__ has quit IRC11:21
*** kristian__ has joined #openstack-ansible11:22
*** kristian__ has quit IRC11:22
*** chhavi has quit IRC11:25
*** chhavi has joined #openstack-ansible11:27
*** hfu has joined #openstack-ansible11:28
*** stuartgr has joined #openstack-ansible11:29
asettleodyssey4me: https://review.openstack.org/#/c/404162/ please review, haha11:30
*** hfu has quit IRC11:30
asettleandymccr: &11:30
asettle^11:30
asettleoh ffs don't11:31
asettleit didn't save my changes11:31
odyssey4meokie dokey, I've starred it11:32
asettleCheers :)11:34
asettleAh! Yay! Jenkins was happy with the backport.11:34
odyssey4mealso yay, jenkins didn't do a functional build for that change, so the filter adjustment is working :)11:37
odyssey4meandymccr we'll need a tie breaker for https://review.openstack.org/404125 & https://review.openstack.org/40057911:39
asettleodyssey4me: the layout.yaml - why does that require updates?11:40
andymccri'll click +2/+w on both and whichever merges first wins?!11:41
andymccrasettle: cos its skipping the deploy-guide build at the moment afaik11:42
andymccrfor branches < newton11:42
asettleohhhhh11:42
asettleI need to learn to read yaml11:42
asettleRokay11:42
andymccrasettle: that file is hard to read...11:42
asettleSo what *should* it read?11:42
*** Jack_Iv_ has joined #openstack-ansible11:42
odyssey4measettle yeah, the 'newton' part needs to be removed11:42
asettleJust skip mitaka11:42
asettleON IT11:42
odyssey4meit should read ^(?!(liberty|stable/mitaka)).*$11:43
andymccrhttps://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L2525-L2526 - im guessing thats the line11:43
odyssey4methat's regex :)11:43
andymccroh wait there is the one above that too: https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L2504-L250711:44
odyssey4meoh yes, and that part too11:44
asettleOkay, I think I got that rigt11:44
asettleohhhh lame11:44
asettleHow many of these did I make11:44
andymccrjust edit line 2525 and line 2507 of the 18254 lines.11:45
asettleSo noe line 3286?11:45
asettlenot*11:45
odyssey4meI might be wrong, but I think that L2526, https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L3286 is unnecessary11:45
andymccroh 3286 as well11:45
asettleOkay cool11:46
andymccrthere seems to be duplication there though...11:46
odyssey4meyeah, I think 3284-3286 is not necessary11:46
odyssey4methat should be removed11:46
andymccrmight be best to change it for now and we can do a cleanup later?11:46
asettleSo we have11:46
asettleOn 250711:46
asettle    branch: ^(?!stable/(mitaka)).*$11:46
asettle2526 -     branch: ^(?!stable/(mitaka)).*$11:47
*** Jack_Iv_ has quit IRC11:47
odyssey4measettle I think we may need to have branch: ^(?!stable/mitaka).*$11:48
andymccryou can just do ^(?!stable/mitaka).*$ since its just one branch now11:48
odyssey4meie do not run it for the mitaka branch11:48
asettleAwwwww11:48
asettleI jut pushed it11:48
drifterzaHello Peep!11:48
drifterzaPeeps!11:48
odyssey4methen for openstack-ansible specifically we'll also need to exclude the liberty branch11:48
asettleMorning drifterza11:48
asettleodyssey4me andymccr - https://review.openstack.org/#/c/404170/11:48
odyssey4meI think perhaps L2526 should exclude stable/liberty too11:48
odyssey4meok, will comment in the review11:48
asettleodyssey4me: update away, I am so lost rn11:48
odyssey4meok, lemme update11:49
*** thorst_ has joined #openstack-ansible11:49
odyssey4meandymccr asettle updated11:51
asettleodyssey4me: cheers :)11:51
asettleOh I see waht you did! Good good :)11:52
asettleMakes sense.11:52
asettleI'm trying to base a lot of these changes off what they did for the install guide but they had someone else who had a lot more html knowledge than I do this. I haven't done HTML in years.11:52
asettleThanks for helping andymccr and odyssey4me11:52
asettleCan you guys think of anything else I'll need to do?11:52
odyssey4mefor now, I did comment on the HTML bits11:53
odyssey4meie https://review.openstack.org/40416211:53
odyssey4meI'm not sure where the published location is11:53
asettleYeah Andreas just commented as I updated :) you were right11:54
*** thorst_ has quit IRC11:57
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o  https://review.openstack.org/40415011:58
*** smatzek has joined #openstack-ansible12:00
*** hughmFLEXin has quit IRC12:03
*** hughmFLEXin has joined #openstack-ansible12:05
*** sdake has joined #openstack-ansible12:09
*** kristian__ has joined #openstack-ansible12:12
*** kristian__ has quit IRC12:14
*** kristian__ has joined #openstack-ansible12:14
*** kristia__ has joined #openstack-ansible12:15
*** hfu has joined #openstack-ansible12:17
*** hfu has quit IRC12:17
*** kristian__ has quit IRC12:19
*** kristia__ has quit IRC12:21
*** kristian__ has joined #openstack-ansible12:36
*** retreved has joined #openstack-ansible12:36
*** gouthamr has joined #openstack-ansible12:42
*** Jack_Iv_ has joined #openstack-ansible12:44
*** Matias has quit IRC12:45
*** Jack_Iv_ has quit IRC12:48
*** thorst_ has joined #openstack-ansible12:49
*** BjoernT has joined #openstack-ansible12:52
*** hfu has joined #openstack-ansible12:55
*** Matias has joined #openstack-ansible12:56
*** kristian__ has quit IRC13:00
*** johnmilton has joined #openstack-ansible13:01
*** chhavi has quit IRC13:02
mhaydenasettle: i like cookies13:07
mgariepygood morning everyone13:17
*** vnogin has quit IRC13:18
asettlemhayden: yesssss13:19
andymccrmorning mhayden the octavia repo is ready now!13:23
mhaydenandymccr: woot13:23
mhaydenit's on my list of to-do's13:23
andymccrso im working on that default base-role atm - it didnt get imported so its blank, but you could try it and give feedback if youre interested13:24
*** chhavi has joined #openstack-ansible13:30
drifterzawhere is the evrardjp13:36
evrardjphere13:36
drifterzaHow you doing man ?13:36
evrardjpback from a few days off!13:36
*** kristian__ has joined #openstack-ansible13:36
drifterzaYeah it was quiet in here damn!13:36
drifterzagood rest though ?13:37
asettleIt was quiet here13:37
asettleuhh I mean the office13:37
evrardjpasettle: like I'm the most turbulent :p13:37
asettleI am like a calm lake, evrardjp13:37
asettleSo peaceful.13:37
asettleevrardjp: you doing bug triage?13:37
drifterzaevrardjp, did you go anywhere ? or did you just chill at home.13:38
evrardjpasettle: yes, the page is ready13:39
*** Jack_Iv has quit IRC13:39
evrardjpdrifterza: enjoyed the black friday by buying useless things, and using them until I'm too tired ;D13:39
*** Jack_Iv has joined #openstack-ansible13:40
*** vnogin has joined #openstack-ansible13:40
asettleevrardjp: woah phrasing13:41
evrardjpand went to Winter Wonderland!13:41
*** kristian__ has quit IRC13:41
asettleOMG HOW WAS IT13:41
evrardjpgreat13:41
evrardjpI'll go again13:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Remove unnecessary symlinks from container cache  https://review.openstack.org/40421913:41
drifterzaWhats winter wonderland13:42
evrardjpthis time I'll be better prepared to see the ice exposition!13:42
evrardjpdrifterza: theme park winter themed in hyde park in central london13:42
evrardjpwith additional ice skating, ice things, and all this kind of things!13:42
drifterzaoooh13:42
drifterzaokay13:43
evrardjpmulled alcoholic beverages13:43
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Remove unnecessary symlinks from container cache  https://review.openstack.org/40421913:43
evrardjpfun stuff13:43
drifterzasounds like it13:43
*** fguillot has joined #openstack-ansible13:43
*** hfu has quit IRC13:45
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [DOCS] Edits to the upgrade guide  https://review.openstack.org/40364613:46
mgariepycan 2 core check those please ? https://review.openstack.org/#/c/403696/ https://review.openstack.org/#/c/403701/13:47
odyssey4melogan- so you got https://review.openstack.org/400338 tested then :) does that open up some new options for you?13:47
mgariepycan a core check those 2 i meant.13:48
mgariepycan be the same for both haha13:48
asettlehahahha mhayden13:49
asettlemgariepy:13:49
asettledangit13:49
asettlemy tab complete is terrible13:49
asettlesorry mhayden13:49
openstackgerritFlávio Ramalho proposed openstack/openstack-ansible-os_ironic: Adds support for the ironic-oneview drivers.  https://review.openstack.org/40024113:49
*** woodard has quit IRC13:50
*** woodard has joined #openstack-ansible13:50
*** kristian__ has joined #openstack-ansible13:50
*** h5t4 has quit IRC13:52
*** thorst_ has quit IRC13:54
logan-odyssey4me: it should come in handy for doing guest image builds remotely13:54
*** thorst_ has joined #openstack-ansible13:54
odyssey4melogan- yeah, my intent is to use it to prep container caches as part of the build process13:56
odyssey4merole-based caches13:56
evrardjpodyssey4me: thanks for this chroot addition. Voted13:56
odyssey4meslowly working through what we do to prep the base cache now and finding unnecessary things, hence https://review.openstack.org/40421913:56
openstackgerritMerged openstack/openstack-ansible-plugins: Add ability to execute against a remote chroot  https://review.openstack.org/40033813:57
evrardjpodyssey4me: you plan to add docs for that?13:57
odyssey4meevrardjp for the remote chroot?13:57
evrardjpyup13:57
evrardjpin the plugins repo13:58
*** jheroux has joined #openstack-ansible13:58
odyssey4menot really right now, I don't think we really have a place for that sort of thing13:58
evrardjpthat could be good to show to external ppl13:58
odyssey4mesure, maybe - I'd like to get further along with it to validate its use before exposing it13:58
*** vnogin has quit IRC13:59
*** cathrichardson has joined #openstack-ansible14:01
openstackgerritMerged openstack/openstack-ansible-os_glance: Fix virtualenv-tools issue  https://review.openstack.org/40370114:09
openstackgerritMerged openstack/openstack-ansible-os_cinder: Fix virtualenv-tools issue  https://review.openstack.org/40369614:14
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role  https://review.openstack.org/40207414:14
*** jperry has joined #openstack-ansible14:14
*** v1k0d3n has quit IRC14:15
*** v1k0d3n has joined #openstack-ansible14:15
*** Andrew_jedi has joined #openstack-ansible14:16
*** jamesdenton has joined #openstack-ansible14:17
*** fxpester has joined #openstack-ansible14:18
Andrew_jediHello folks, I have deployed OSA in Openstack vm. my objective is to make glance api publicly available so that i can test glance-replication. But when i try to use the floating ip associated with the openstack vm as the haproxy external lb ip, obviously haproxy refuses to bind. Could you please help me in figuring out how to configure the glance_api file "/etc/haproxy/conf.d" so that every...14:18
Andrew_jedi...call made FLOATING_IP:9292 can be redirected to LB_IP:9292?14:19
*** fxpester|2 has joined #openstack-ansible14:20
Andrew_jediMay be i cannot do that with haproxy?14:22
*** fxpester|3 has joined #openstack-ansible14:22
*** stevelle has quit IRC14:23
*** fxpester has quit IRC14:23
*** jamesdenton has quit IRC14:23
*** agrebennikov has joined #openstack-ansible14:24
logan-odyssey4me: while we were on the topic of that ssh plugin I finally remembered to file this wishlist bug :P https://bugs.launchpad.net/openstack-ansible/+bug/164573214:24
openstackLaunchpad bug 1645732 in openstack-ansible "Allow for ansible become in SSH plugin" [Undecided,New]14:24
*** fxpester|2 has quit IRC14:25
odyssey4melogan- ah yes, nice - hopefully someone can pick that up at some point14:25
odyssey4memaybe cloudnull will find a gap14:25
*** xavierr has joined #openstack-ansible14:27
evrardjpguys, you force me to regenerate the bug triage list14:27
andymccrAndrew_jedi: on which host is the FLOATING_IP, and which host has the LB_IP?14:28
evrardjpAndrew_jedi: you can basically use a sysctl for that14:29
*** fguillot has quit IRC14:29
evrardjpbut I think you should instead, bind to your proper ip in external ip14:29
evrardjpIf I understood you correctly14:30
*** smatzek has quit IRC14:30
*** jamesdenton has joined #openstack-ansible14:30
Andrew_jediandymccr: I have one controller where glance container is running. this controller machine has an IP "192.168.122.111" which i am using for public endpoints. And there is a floating ip which is attached to this controller machine, by LB_IP , i meant the "external_lb_vip_address".14:30
Andrew_jedievrardjp: What i want is this, FLOATING_IP:9292 --> glance_container_address:929214:32
*** fxpester has joined #openstack-ansible14:32
evrardjpwell that's something I understood14:33
mgariepyi think you only need to update your endpoint in Openstack. to the floating ip.14:33
evrardjpthe question is: is it fine for you to have the floating done by openstack in any case?14:33
*** stevelle has joined #openstack-ansible14:34
mgariepyusualy the floating ip is natted to your ip and not bindable in the vm..14:34
evrardjpin that case you can use your tenant private IP as external vip14:34
evrardjpmgariepy: well that's the other way to do it14:34
Andrew_jedievrardjp: Its a test setup where i am testing glance-replicator. The whole objective is to access the glance in this VM from another openstack setup.14:34
evrardjpyou can also make it work without force binding :p14:34
evrardjpbut I'll not talk about this right now14:35
evrardjpAndrew_jedi: what's your external_vip?14:35
Andrew_jedievrardjp: 192.168.122.11114:35
*** fxpester|3 has quit IRC14:35
mgariepyw00t os_horizon : 2016-11-29 14:35:50.842703 | [Zuul] Job complete, result: SUCCESS14:36
evrardjpso that's your ip in your tenant, not the floating one14:36
evrardjpand what's in your /etc/openstack_deploy/openstack_user_config ?14:36
Andrew_jedievrardjp: Yep, that's my private ip.14:36
Andrew_jedievrardjp: http://paste.openstack.org/show/590828/14:37
*** Jack_Iv_ has joined #openstack-ansible14:38
evrardjpinteresting14:39
evrardjpand you can't access to it?14:39
Andrew_jedievrardjp: endpoints and netstat, http://paste.openstack.org/show/590830/14:40
evrardjptechnically you don't bind on the your floating IP14:40
evrardjpso this is good to me14:40
evrardjpfrom where do you want to access that?14:40
evrardjpyou can't access from an IP in the same network?14:41
evrardjpyou want to use the floating for that and you have keystone issues?14:41
*** woodard has quit IRC14:41
evrardjpif that's the case, mgariepy suggestion would be the best, and there is probably a public endpoint change that should be done14:42
*** Jack_Iv_ has quit IRC14:42
Andrew_jedievrardjp: This is the issue, http://paste.openstack.org/show/590831/14:43
evrardjpdear cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically,14:43
evrardjpspotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, darrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397 :14:43
evrardjpthe osa bug triage will start in 1h15’. Please have a look at the bug list before starting: https://etherpad.openstack.org/p/osa-bugtriage14:43
*** chhavi has quit IRC14:43
*** cathrichardson has quit IRC14:44
Andrew_jedievrardjp: When i make an api call to 192.168.122.111:9292, it works. but when i make an api call to FLOATING_API:9292. it does not work.14:44
evrardjpAndrew_jedi: I think you're up to update your public endpoint :p14:44
evrardjpendpoints*14:44
Andrew_jedievrardjp: You mean only the glance endpoint?14:44
evrardjpall of them14:45
mgariepycan I have some reviews on this one please : https://review.openstack.org/#/c/402074/ ?14:45
evrardjpkeystone for example14:45
evrardjpmanually with the cli14:45
evrardjpit's gonna work easily that way14:45
Andrew_jediohhh, so your recommendation is to update the keystone and glance public endpoints to begin with?14:45
evrardjpyes14:46
Andrew_jediCool, let me try that14:46
evrardjplike mgariepy's suggestion14:46
evrardjpkeep the infrastructure the way it is14:46
*** cathrichardson has joined #openstack-ansible14:46
asettleThanks evrardjp14:47
andymccrmgariepy: nice!14:47
*** vnogin has joined #openstack-ansible14:48
mgariepyandymccr, it's finally taking shape ! :D14:48
andymccrmgariepy: yeah! what are we still missing support for?14:48
mgariepyhttps://etherpad.openstack.org/p/osa-ocata-centos-7-worksheet14:48
mgariepygnocchi, aodh ceilometer, then osa for bootstrap aio.14:49
andymccrahh nice14:49
mgariepyand some other small issues that needs some love. haha14:49
andymccryeah. i should file a bug for the swift logging14:49
andymccri also need to do a run of gate vote promotions for the various roles that support has been added for14:49
mgariepyat some point.14:50
mgariepynova takes a lot more time to run on centos14:50
andymccryeah i think the integrated build may be an issue (time wise)14:50
evrardjpmgariepy: could you explain why the remove Listen from Apache config ?14:52
mgariepyconflict with port.conf14:52
mgariepyevrardjp, ^^14:52
evrardjpThat's listed nowhere!14:52
evrardjp:p14:52
hughsaundersmattt: ^14:53
evrardjpbut yes it makes sense14:53
mgariepyI can add a comments in the tasks if you want.14:53
*** fxpester|2 has joined #openstack-ansible14:53
evrardjpmgariepy: I'd be happy for this one. I'll mention it in my review14:53
paulfantommgariepy: also basic support for ceph_client will be quite simple and I'm working on it right now :)14:53
mgariepypaulfantom, great14:54
mgariepyI'll need ceph for prod but I prefer to have centos voting for the base first in my case and right now i'me very happy with Ubuntu for my production system.14:56
*** fxpester has quit IRC14:56
*** whiteveil has joined #openstack-ansible14:56
*** smatzek has joined #openstack-ansible14:57
mgariepypaulfantom, let us know if you need help submitting patches.14:57
paulfantomok, I'll let you know, when it will be ready :)14:58
drifterzawhat time's bug triage ?14:59
mattthughsaunders: wuzzat ?14:59
andymccrdrifterza: in like an hour14:59
mgariepypaulfantom, you can submit partial patches if you want14:59
drifterzaah okay14:59
evrardjpdrifterza: yup, 1hr14:59
andymccr16:00 UTC!15:00
mrhillsmani have an operator asking for L > M upgrades, specifically openstack_dashboard, were there any problems with python's south library seen15:00
paulfantommgariepy, yeah I know15:00
andymccrmrhillsman: we haven't seen any bugs for that afaik - and there have been quite a few people doing/testing upgrades from L->M15:00
hughsaundersmattt: small chance that ports.conf conflict could be related to hirizon issue you were lookig into?15:00
mrhillsmanthx andymccr15:01
evrardjpmrhillsman: I suppose there could be issues with specific dashboards due to the jump of version15:01
andymccrso TLDR, so far - no :) but if there are issues and they can file a bug we can try take a look!15:01
andymccror come talk to us here :)15:01
mattthughsaunders: i don't think so, i printed the ports config in debug and didn't see anything out of the ordinary15:01
evrardjpmrhillsman: the standard dashboards work fine15:01
mgariepypaulfantom, i added your name in the etherpad so nobody else pick it.15:01
mrhillsmangotcha15:01
evrardjpmrhillsman: there was a jump of version of angular15:01
mrhillsmanthx15:01
mrhillsmanah ok15:02
paulfantommgariepy, thx15:02
*** rgogunskiy has quit IRC15:04
*** spotz_zzz is now known as spotz15:04
*** TxGirlGeek has joined #openstack-ansible15:04
*** fxpester has joined #openstack-ansible15:05
*** Mudpuppy has joined #openstack-ansible15:05
mgariepyevrardjp, the safeguard isn't needed I guess it doesn't match in the apache.conf file on ubuntu and I guess it would conflict on ubuntu as well if it's there.15:05
odyssey4mehughsaunders argh https://git.launchpad.net/cirros/commit/?id=9a7c371ef329cf78f256d0a5a8f475d9c57f547715:06
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role  https://review.openstack.org/40207415:06
*** fxpester|2 has quit IRC15:07
evrardjpmgariepy: there is indeed no match15:08
mgariepyif you add Listen 80 on the apache.conf would it restard ?15:08
evrardjpmgariepy: but you're editing the security file15:09
*** Jeffrey4l has quit IRC15:09
mgariepyhmm will switch it to apache_conf15:10
mgariepy(it's the same on Centos)15:10
Andrew_jedievrardjp mgariepy : This is after changing the keystone and glance public endpoints. http://paste.openstack.org/show/590835/15:10
hughsaundersodyssey4me: has there actually been a release that contains that?15:11
skapeHi again !!    I have a problem, I had a wrong host in shared-infra_hosts in openstack_user_config.yml, I removed it but openstack-ansible still installs it , I already tried removing the content of /etc/openstack_deploy/ansible_facts/15:11
odyssey4mehughsaunders not sure - possibly, just saw it on the ML15:11
hughsaunders0.3.4 was released in 201515:11
hughsaundersI've been waiting for a release containing one of my fixes for ages15:11
odyssey4meskape you need to use the inventory-manage script to remove it from the inventory15:11
skapeodyssey4me : ok thx15:12
*** dxiri has joined #openstack-ansible15:12
*** jmckind has joined #openstack-ansible15:12
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role  https://review.openstack.org/40207415:13
mgariepyevrardjp, fixed ..15:14
evrardjpmgariepy: wait15:14
Andrew_jediandymccr: Since it is an openstack vm, do you think i will need to open port 9292 :P15:14
evrardjpomg too fast :p15:14
mgariepylol15:14
mgariepysorry..15:14
*** shausy has quit IRC15:14
*** fxpester|2 has joined #openstack-ansible15:14
evrardjpso my concern is that we shouldn't touch the file if there is nothing to do there. I'm not 100% sure how ansible lineinfile module works with line: present on an absent line, and using this line as backref15:15
evrardjpif he includes a #Listen that would force a restart of apache2 without reasons15:16
mgariepyok15:16
evrardjpat least on the first run15:16
evrardjpwhich is why I thought it could be better to do this conditionally15:17
*** fxpester|3 has joined #openstack-ansible15:17
evrardjpand also the deployer may have a Listen thing somewhere15:17
mgariepyok should I check for port 80 specifically then ?15:17
*** fxpester has quit IRC15:17
evrardjplet me have a look at the module quickly15:18
evrardjpthen I'll know15:18
*** fxpester|2 has quit IRC15:19
*** haad1 has quit IRC15:20
*** fxpester has joined #openstack-ansible15:20
*** weezS has joined #openstack-ansible15:20
*** dxiri has quit IRC15:20
*** weezS has quit IRC15:20
*** dxiri has joined #openstack-ansible15:21
evrardjpmgariepy: so the ansible module nicely behaves, surprisingly15:22
*** weezS has joined #openstack-ansible15:22
mgariepyhaha :)15:22
*** fxpester|3 has quit IRC15:22
evrardjpso maybe we should just rollback the last part of the last patchset that moved from horizon_apache_security_conf to horizon_apache_conf15:23
evrardjpI think horizon_apache_security_conf is quite correct to me15:23
evrardjpconfirmation in a few seconds15:23
oansonevrardjp, hi.15:24
oansonI don't know if you saw, but I removed the [WIP] from the dragonflow patch15:24
Andrew_jedievrardjp mgariepy: Thanks for the help guys, it was a security group rule issue. I fixed that and now i can access glance from outside :)15:24
oansonI think most issues will now be on the dragonflow end15:25
openstackgerritFlávio Ramalho proposed openstack/openstack-ansible-os_ironic: Add ldlinux.c32 to the tftp directory  https://review.openstack.org/40427315:25
mgariepyAndrew_jedi, i would be curious of having your impression on the glance-replicator15:25
whiteveilin the openstack repo, is there any way to easily isolate just things that are Ubuntu only, as I’m looking to audit the Ubuntu config changes15:26
*** jmckind_ has joined #openstack-ansible15:26
*** dxiri has quit IRC15:26
*** dxiri has joined #openstack-ansible15:26
*** jmckind has quit IRC15:27
Andrew_jedimgariepy: so far, I  had to patch the code in liberty to make cli work. Documentation is not even worth going through. I will let you if it still works.15:27
mgariepyha ok ;) haha15:28
*** michaelgugino has joined #openstack-ansible15:30
*** Jack_Iv_ has joined #openstack-ansible15:31
*** woodard has joined #openstack-ansible15:31
*** chris_hultin|AWA is now known as chris_hultin15:31
*** woodard has quit IRC15:31
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role  https://review.openstack.org/40207415:31
*** woodard has joined #openstack-ansible15:31
*** Jack_Iv_ has quit IRC15:33
evrardjpoanson: great I'll have a look and test it!15:33
oansonThanks :)15:33
evrardjpAndrew_jedi: haha I was afraid of that!15:33
evrardjpclassic15:33
*** fxpester|2 has joined #openstack-ansible15:34
evrardjpI hsould have told you15:34
evrardjp:/15:34
Andrew_jedievrardjp: :/15:34
Andrew_jedievrardjp: The  OpenStack C2C migration is way more interesting than i imagined.15:35
*** dffco has joined #openstack-ansible15:35
*** fxpester has quit IRC15:36
*** h5t4 has joined #openstack-ansible15:37
*** fxpester has joined #openstack-ansible15:38
*** fxpester|2 has quit IRC15:40
*** klamath has joined #openstack-ansible15:41
*** dxiri has quit IRC15:41
*** Andrew_jedi has quit IRC15:43
*** Jeffrey4l has joined #openstack-ansible15:44
*** woodard has quit IRC15:44
*** woodard has joined #openstack-ansible15:44
*** klamath has quit IRC15:45
*** fxpester|2 has joined #openstack-ansible15:46
*** oanson has quit IRC15:46
*** cmart has joined #openstack-ansible15:46
*** weezS_ has joined #openstack-ansible15:47
*** fguillot has joined #openstack-ansible15:47
*** fxpester|3 has joined #openstack-ansible15:48
*** fxpester has quit IRC15:48
*** weezS has quit IRC15:49
*** weezS_ is now known as weezS15:49
*** haad1 has joined #openstack-ansible15:49
*** haad1 has quit IRC15:50
*** galstrom_zzz is now known as galstrom15:51
*** fxpester|2 has quit IRC15:51
*** Jeffrey4l has quit IRC15:51
*** Jeffrey4l has joined #openstack-ansible15:51
*** adrian_otto has joined #openstack-ansible15:56
*** TxGirlGeek has quit IRC15:56
*** Jack_Iv_ has joined #openstack-ansible15:56
*** TxGirlGeek has joined #openstack-ansible15:56
*** dxiri has joined #openstack-ansible15:57
evrardjpnetsplits or it's just me?15:57
drifterzajust you15:58
asettleWIN gate jobs passed odyssey4me and andymccr - now, how are the OSA gates going? This has to go through: https://review.openstack.org/#/c/404150/ before the index file can :)15:58
asettleevrardjp: just lots of people coming/going15:58
*** Andrew_jedi has joined #openstack-ansible15:58
odyssey4measettle it's busy going through15:58
evrardjpWIN as in windows?15:59
*** javeriak has joined #openstack-ansible15:59
asettleCool, the gates were broken yesterday so just checking15:59
asettleevrardjp: you know it15:59
*** vnogin has quit IRC15:59
evrardjpmaybe you can use #success15:59
openstackgerritMerged openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o  https://review.openstack.org/40415016:00
andymccrlike magic16:01
*** Jack_Iv_ has quit IRC16:01
evrardjpwoot!16:01
asettle... wow16:02
asettlemagic16:02
evrardjpguys, it's that time of the day16:02
asettlegood job folks16:02
asettleevrardjp: YAYYY16:02
evrardjpof the week should I say16:02
evrardjpBug triage cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, dar16:02
evrardjprenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza  !!!16:02
evrardjpHere is our bug list for today https://etherpad.openstack.org/p/osa-bugtriage16:02
evrardjp(same link as every single week!)16:02
evrardjpmy browser is quite laggy16:02
odyssey4measettle lies - the gates are never broken :p16:03
asettleodyssey4me: HAAAA16:03
evrardjpso the first is16:03
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164573216:03
openstackLaunchpad bug 1645732 in openstack-ansible "Allow for ansible become in SSH plugin" [Undecided,New]16:03
*** rmelero has joined #openstack-ansible16:03
evrardjpI think we should classify this as wishlist16:03
logan-+116:03
andymccryeah16:03
evrardjpanyone wants it? it seems fun!16:04
*** spotz is now known as spotz_zzz16:04
evrardjpif not, I'll just move it as confirmed16:04
*** Jack_Iv_ has joined #openstack-ansible16:04
*** Jack_Iv_ has quit IRC16:04
logan-i tried but my python is too weak :)16:04
evrardjpok let's talk about the next one then16:05
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164572816:05
openstackLaunchpad bug 1645728 in openstack-ansible "Liberty to Liberty Upgrade: MariaDB upgrade stuck on post dpkg configure task" [Undecided,New]16:05
evrardjpL to L update!16:05
andymccrok so i think the point of this bug is to ensure it isnt happening on master or M/N16:05
*** mongo3_ has joined #openstack-ansible16:05
andymccrBjoernT put a comment in there "Since Liberty is now EOL, I'm not sure how we handle this issue which may be reappearing on future versions. That's why I opened this issue"16:05
evrardjpwhich may16:06
andymccryeah im not sure how we can reproduce that16:06
evrardjpI'm lacking resources to reproduce it myself16:06
*** vnogin has joined #openstack-ansible16:07
andymccryeah16:07
andymccri guess we push that out for next week!16:07
BjoernTI would guess the same problem is apparent during mitaka to mitaka upgrades or newer16:07
andymccrahh ok16:07
BjoernTsince the issues seemed to come from the dpkg package itself16:08
*** mongo3 has quit IRC16:08
*** dxiri has quit IRC16:09
BjoernTwe may create ubuntu bugs for the mariadb package because they try  to do a mysql_install_db on a running database, of course it fails16:09
*** dxiri has joined #openstack-ansible16:09
logan-i think we already do some upgrade tests in the galera server role. wonder why it wouldn't be catching this. maybe some room for improvement there if it is something reproducible16:09
BjoernTI noticed that first form 10.0.27 to .28 which are quite new16:10
evrardjplogan-: do we do upgrade test of galera in the role yet?16:10
*** weezS has quit IRC16:10
andymccrlogan-: perhaps it is the kind of bug that only occurs on systems that have been running a while - new deploys that then get upgraded potentially dont see this16:10
logan-evrardjp: i think it might only be major version upgrade tests16:10
mgariepymaybe it depends on the traffic there is when the upgrade occurs16:11
evrardjpBjoernT: interesting bug, have you seen this in M?16:11
logan-maybe not though. at first glance I don't see the tests in the repo16:11
andymccrlogan-:  haha yeah me neither16:12
andymccri will add that to the bp16:12
evrardjplogan-: rabbit gets tested16:12
evrardjpfor upgrades16:12
evrardjpI think we could thank jmccrory for that :D16:12
evrardjpIIRC16:12
evrardjpanyway16:12
evrardjpthis needs to be confirmed, but also see if it's the scope of openstack-ansible16:12
logan-https://github.com/openstack/openstack-ansible-galera_server/commit/7bec84f67aa22a2f546bfbfa8be2d81d48ab418416:12
jmccrorythink the galera upgrade tests were removed a while back since we stayed on 10.0 for a few cycles16:12
logan-I think that is what I was thinking of :)16:12
logan-yeah16:13
evrardjpthis sounds like a packaging issue that should be filed upstream16:13
evrardjpBjoernT: could you pull the strings for that?16:13
evrardjpseems a big deal to me16:13
evrardjp:p16:13
BjoernTyeah I have access to paid ubuntu support let me check on that later16:13
*** weezS has joined #openstack-ansible16:13
evrardjpcool16:13
logan-agreed. i think the osa bug should be viewed as a testing improvement and the actual fix filed upstream16:14
*** mongo3 has joined #openstack-ansible16:14
evrardjpI'll document this discussion in our bug after the triage16:14
evrardjpthanks everyone16:14
evrardjpnext16:15
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164551216:15
openstackLaunchpad bug 1645512 in openstack-ansible "Documentation bug - network information is not visible" [Undecided,New]16:15
*** winggundamth_ has joined #openstack-ansible16:15
evrardjpconfirmed to me :p16:15
andymccryeah16:15
evrardjpasettle: your opinion on urgency?16:15
asettleYeah that should be a quick fix16:15
asettleevrardjp: should take you a grand total of 10 seconds, go low/medium because it's not great to have missing info16:15
asettleBut it's not critical16:15
evrardjpasettle: ok, I'll tag it as low-hanging-fruit then16:16
evrardjpthanks16:16
*** TxGirlGeek has quit IRC16:16
evrardjpnext16:16
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164537116:16
openstackLaunchpad bug 1645371 in openstack-ansible "Consider async jobs in security role" [Undecided,New]16:16
*** jlockwood has quit IRC16:17
evrardjpIf that could be considered as a bug, I'd call it wishlist :p16:17
*** mongo3_ has quit IRC16:17
evrardjpIf there was a "TODO" in the list I'd use that.16:17
evrardjpor TODO(mhayden) :p16:17
*** vnogin has quit IRC16:17
evrardjpeverybody agrees?16:17
mhayden:)16:17
evrardjpI'll mark it confirmed :p16:18
evrardjpand wishlist16:18
andymccrassign to mhayden - set the importance to MAJOR16:18
* mhayden cackles16:18
asettleandymccr: omg you are not coming home tonight16:18
asettlethat was terrible16:18
*** winggundamth_ has quit IRC16:18
evrardjpI think it was fine16:18
asettleevrardjp: ohhhh take his side16:18
evrardjpno, I had a major laugh on it.16:19
whiteveilhave any of you guys ever used clamav on a production server? I see it’s in the role, but just curious what everyone’s take is on it16:19
*** chhavi has joined #openstack-ansible16:19
* asettle sighs16:19
evrardjpwhiteveil: could we discuss that later after the bug triage please?16:19
whiteveilyeah of course16:19
evrardjpthanks16:19
whiteveilsorry about that16:19
evrardjpso next16:19
evrardjpit's us, we got sidetracked16:19
evrardjpanyway, next is:16:19
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164529716:19
openstackLaunchpad bug 1645297 in openstack-ansible "[DOCS] 'preflight checks' incomplete info" [Undecided,New]16:19
evrardjpasettle: Ok I thought both were touching the same file/contents and edits16:21
*** vnogin has joined #openstack-ansible16:21
asettleI am touching them, but I don't want it worked on in the same page.16:21
evrardjpwhat do you need for it?16:21
asettlepatch*16:21
evrardjpasettle: fine for me16:21
asettleThe whole section actually needs to be written. "perform preflight checks' is vague, and needs to be fleshed out appropriately.16:21
asettleIf a user is performing an upgrade, needs to be identified in full what checks they are going to perform.16:21
asettleIt'll be a full fleshing of the section, hence, new bug :)16:22
evrardjpso the issue is that it's too vague, and you want us to cover this16:22
asettleIf possible, please.16:22
asettleI have some stuff from the RPCO guides I can take.16:22
asettleBut it's not complete.16:22
jmccrorythe upgrade script used to include really basic checks to make sure the it was upgrading from the right release, i don't think it does any of that now16:22
asettleandymccr was going to help out.16:22
andymccrwait what?16:22
evrardjp:)16:22
evrardjpvoluntold16:22
asettleHe's making faces at me.16:22
asettleHe's relaly unhappy.16:22
evrardjprelaly?16:23
asettlerelaly relaly16:23
evrardjp:p16:23
asettle:p16:23
andymccri think it would be useful to have ops input on that really16:23
asettleI agree, but we still need it to be fleshed.16:23
asettleAnyway, it's triage not discussion16:23
asettleevrardjp: confirmed, and medium please16:23
evrardjpok, could we discuss that in another media?16:23
evrardjpok16:23
andymccrnext!16:23
evrardjpthanks16:23
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164456516:23
openstackLaunchpad bug 1644565 in openstack-ansible "Warning Exception in safe_eval()" [Undecided,New]16:23
evrardjpok cool we can ignore this one16:24
andymccrlooks like we can close that one16:24
evrardjpinvalid yes16:24
evrardjpnext16:24
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164454416:24
openstackLaunchpad bug 1644544 in openstack-ansible "cannot install shibboleth on CentOS7 from repository" [Undecided,New]16:24
evrardjpok I confirmed this bug at the time it was filed16:25
paulfantombasically it is resolved by ftp.gwdg.de. They had some problems with opensuse repository system, which are fixed by now. However there is no safeguard against this issue in the future.16:25
evrardjpthis was used to track it16:25
evrardjppaulfantom: exactly16:25
evrardjpbut there is no safe guard we can have IMO16:26
evrardjpshib consortium or downloads.suse should care16:26
evrardjpwe cannot mirror the whole world in openstack-infra16:26
paulfantomyes, you're right16:26
evrardjpand also it's reduced to shib users16:26
mgariepyevrardjp, just put that in the cloud.16:26
evrardjp:D16:26
evrardjpshib users have probably a link to the consortium16:26
evrardjp:p16:26
paulfantomand problem solved :D16:27
TobiSangetting "TypeError: Cannot read property 'data' of undefined" when trying to create a cirros image in horizon16:27
TobiSanany known issues on 14.0.2 with this?16:27
mgariepyanyway, for the gate check, it's now skipped, and for a prod deployment you really should mirror stuff that aren't stable and use that.16:28
*** victorhe has joined #openstack-ansible16:28
evrardjpyes, I think because we don't use that in 100% of the cases, this could be classified as won't fix16:28
andymccragree16:28
*** victorhe has quit IRC16:28
evrardjpmgariepy: I think shib isn't required anymore anyway16:28
evrardjpif not we'll have to submit a bug for that :p16:28
*** fxpester|3 has quit IRC16:28
*** victorhe has joined #openstack-ansible16:28
evrardjpI'll document this discussion in the bug16:29
evrardjpnext16:29
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164434916:29
openstackLaunchpad bug 1644349 in openstack-ansible "Add Release Note for Trusty Deprecation" [Undecided,New] - Assigned to Amy Marrich (amy-marrich)16:29
evrardjpTobiSan: we'll analyse this after the bug triage if you don't mind16:29
evrardjpConfirmed Medium16:29
*** victorhe has quit IRC16:30
evrardjpFix when convenient or schedule to fix later16:30
evrardjpfine for you?16:30
andymccryeah cool16:30
TobiSanok thanks evrardjp16:30
andymccrnext!16:30
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164399116:30
openstackLaunchpad bug 1643991 in openstack-ansible "504 Gateway Timeout when creating a port" [Undecided,New] - Assigned to Saulo Aislan (sauloaislan)16:30
*** victorhe has joined #openstack-ansible16:30
evrardjpok16:31
andymccrhmm16:31
evrardjpwe need to be more flexible with timeouts in haproxy apparently16:31
*** victorhe has quit IRC16:31
evrardjpI'd like to see this confirmed by ppl, else I just consider it's a wishlist feature16:32
andymccryeah i think the bug is to adjust timeouts or be able to so thats wishlist16:32
*** victorhe has joined #openstack-ansible16:32
*** victorhe has quit IRC16:32
andymccrim surprised nobody else has seen this - or im wondering why the ports were taking so long to create. but that is a separate issue16:32
jmccrorysounds like bug with whatever driver they were testing too16:32
evrardjpthis is why I wanted to avoid wishlist, but anyway more flexibility in haproxy was already asked by ppl16:33
evrardjpjmccrory: fair point16:33
andymccryeah that seems fine16:33
andymccrregardless we cant recreate that issue with those details, so wishlist confirmed seems fine on the basis we add more flexibility to haproxy16:33
*** dffco has quit IRC16:34
*** javeriak has quit IRC16:34
evrardjpnext16:34
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164372716:34
openstackLaunchpad bug 1643727 in openstack-ansible "Mitaka Upgrade: rfc1034_1035-cleanup.yml does not work with insecure public API" [Undecided,New]16:34
evrardjpwell I never got the issue because I used proper certificates :p16:35
andymccrare the clients really ignoring internal vs publicURL again?16:35
evrardjpwhat?16:35
andymccrthere were a whole bunch of bugs (more than once) with various clients that forced publicURL and would ignore OS_ENDPOINT_TYPE altogether16:36
*** dffco has joined #openstack-ansible16:36
andymccrbut they got fixed (and happened again, and got fixed again)16:36
evrardjpyeah but here it's not really the point16:36
evrardjpyou have terrible certificates, remember to use --insecure16:36
*** pcaruana has quit IRC16:36
evrardjpI'll leave this as new because I don't see anyone confirming it recently16:37
*** javeriak has joined #openstack-ansible16:38
evrardjpoh no I get it16:38
evrardjprfc1034_1035-cleanup.yml is using CLI16:39
evrardjpwe don't pass the --insecure flag16:39
evrardjpIIRC16:39
evrardjpthat's what it is16:39
evrardjplet me have a look one sec16:39
evrardjpyup we are using the cli of every single client16:40
*** javeriak has quit IRC16:40
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Expire cached sssd authenticators [+Docs]  https://review.openstack.org/40383316:40
evrardjpand we never pass insecure16:40
evrardjplooks valid to me16:40
evrardjpwe should ensure it's done internally16:41
evrardjpI'll have a deeper look before confirming16:41
evrardjpnext?16:41
andymccryeah that seems valid16:41
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Expire cached sssd authenticators [+Docs]  https://review.openstack.org/40383316:41
andymccryeah next!16:41
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164370516:41
openstackLaunchpad bug 1643705 in openstack-ansible "Mitaka: pip_install_options break repo playbook" [Undecided,New]16:41
odyssey4mehmm, not sure why you'd be setting force-reinstall16:42
odyssey4mefrom mitaka onwards that is unnecessary16:42
evrardjpodyssey4me: ok, invalid?16:43
odyssey4mewait, checking something16:43
odyssey4meBjoernT can you give some sort of rationale around using --force-reinstall ?16:43
*** javeriak has joined #openstack-ansible16:43
evrardjpodyssey4me: waiting for you :)16:45
odyssey4mehmm, ok - I really don't see this as being a good idea16:45
*** jamesdenton has quit IRC16:45
odyssey4methe pip_install_options are meant for adjusting certs validation and proxy options16:45
odyssey4meif we set a special option for this, we would have to default it to the value of pip_install_options anyway16:45
odyssey4meif someone wants to --force-reinstall then they would be better served by destroying and rebuilding the container16:46
evrardjpagreed16:46
drifterza+116:46
evrardjpseems a won't fix to me16:46
odyssey4meif we add a special option and don't default it to the value of pip_install_options, we force our deployers to know yet another var to set16:46
evrardjpI'll document this discussion in the bug, as usual.16:46
*** javeriak has quit IRC16:47
evrardjpnext16:47
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164360616:47
openstackLaunchpad bug 1643606 in openstack-ansible "os_keystone without database fails" [Undecided,New]16:47
odyssey4meyep, as it stands right now I'd say won't fix - unless a really important use-case is set out16:47
evrardjpodyssey4me: agreed16:47
skapehey guys I'm having trouble now in the task "pip install" in the galera container  I already tried pip_offline_install: true  but it didn't work what is the url that the pip installer tryes to contact16:47
evrardjpskape: could we postpone this? We are triaging bugs right now16:47
evrardjpfinishing in 13 minutes.16:47
*** dxiri_ has joined #openstack-ansible16:47
evrardjpso16:48
*** dxiri has quit IRC16:48
evrardjpnext one: https://bugs.launchpad.net/openstack-ansible/+bug/164360616:48
odyssey4meevrardjp just one more note on the previous bug - https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L16-L19 makes it clear what the purpose of the option is16:48
skapeevrardjp : sure sorry for the interruption16:48
evrardjpodyssey4me: thanks for pointing that out16:48
drifterzaseems that bug is just legacy variables ?16:50
*** jwagner_lunch is now known as jwagner16:50
*** javeriak has joined #openstack-ansible16:50
jmccrorydid it ever work?16:50
drifterzawhy would you ever not want keystone db ?16:50
odyssey4meevrardjp jmccrory that is used by RAX's capstone project16:51
odyssey4melbragstad ^16:51
*** jmckind has joined #openstack-ansible16:51
evrardjpoh16:51
*** haad1 has joined #openstack-ansible16:51
odyssey4meit's used when keystone is effectively just an API front-end with some sort of special middleware plugin to a back-end16:51
evrardjpI am pretty sure I want to know more about it, but I'm pretty sure at the same time I don't16:51
*** haad1 has quit IRC16:51
odyssey4meie no need for a DB16:51
lbragstadodyssey4me o/16:52
*** haad1 has joined #openstack-ansible16:52
odyssey4mebut yeah, I think dolphm or lbragstad would have to comment and help decide what to do about it16:52
evrardjplbragstad: seem to be here16:52
*** jmckind_ has quit IRC16:52
evrardjplbragstad: https://bugs.launchpad.net/openstack-ansible/+bug/164360616:52
openstackLaunchpad bug 1643606 in openstack-ansible "os_keystone without database fails" [Undecided,New]16:52
evrardjpshould we care?16:52
evrardjp(see also conversation above)16:52
openstackgerritMerged openstack/openstack-ansible-os_heat: Standardize tests inventory  https://review.openstack.org/40055416:52
andymccrperhaps we should document the reason for that setting properly?16:53
odyssey4meyeah, I expect that changes in newton probably broke that case16:53
odyssey4meand andymccr yes, more than likely16:53
odyssey4meunfortunately it came in a megapatch16:53
andymccralthough i have no idea so we're gonna need lbragstad and co to patch in ;P16:53
andymccr*pitch in haha16:53
*** paulfantom has quit IRC16:53
evrardjpwe still have 7 minutes, and 3 bugs16:54
drifterzago go go16:54
evrardjp6 minutes16:54
*** jamesdenton has joined #openstack-ansible16:54
lbragstadi think we used it her e- https://github.com/rackerlabs/capstone/blob/master/deploy/deploy.yml#L2016:54
evrardjpI'm moving to next one16:54
odyssey4meevrardjp maybe just note the conversaiton in the bug, discuss with lbragstad afterwards16:54
lbragstadworks for me16:55
andymccrid say confirmed and low16:55
openstackgerritAdam Reznechek proposed openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC  https://review.openstack.org/40094016:55
evrardjpok16:55
evrardjpnext16:55
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164395516:55
openstackLaunchpad bug 1643955 in openstack-ansible "Implement user-space host_vars and group_vars" [Wishlist,New] - Assigned to Nolan Brubaker (nolan-brubaker)16:55
evrardjpconfirmed?16:55
andymccryeah its wishlist, and it applies16:56
andymccrconfirmed!16:56
*** javeriak has quit IRC16:56
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/164368016:56
openstackLaunchpad bug 1643680 in openstack-ansible "Shift to using dashes instead of underscores for container names" [Wishlist,New] - Assigned to Nolan Brubaker (nolan-brubaker)16:56
*** haad1 has quit IRC16:56
drifterzapep8?16:56
odyssey4meI left those two as new for exposure16:56
openstackgerritMerged openstack/openstack-ansible-openstack_hosts: Enable openstack_hosts role without network_hosts  https://review.openstack.org/40393516:56
andymccrdidnt we just move to using underscores because of rfc issues?16:57
evrardjpno16:57
dolphmevrardjp: i can answer questions about capstone, but it'd be best if you just looked the other way16:57
evrardjpdolphm: haha16:57
openstackgerritMerged openstack/openstack-ansible-lxc_hosts: Remove unnecessary symlinks from container cache  https://review.openstack.org/40421916:57
odyssey4meandymccr nope, the container names use underscore, we just moved to changing the host names to use dashes16:57
odyssey4meso now we have host names and container names that don't match16:57
evrardjpprecisely16:57
andymccrodyssey4me: ahh ok16:57
odyssey4meandymccr in terms of looking into the future, this is going to be a problem16:58
odyssey4meand besides, it's confusing and we hold alot of unnecessary machinery16:58
dolphmevrardjp: is capstone broken by something in OSA?16:58
*** Mudpuppy_ has joined #openstack-ansible16:59
*** Mudpuppy_ has quit IRC16:59
evrardjpdolphm: let me finish this bug triage and talk about that :)16:59
andymccrtrue. i guess id like to not pass the "fun" on to the deployers like we did with the rfc upgrade16:59
odyssey4meit's plausible that we used underscores initially due to some deficiency in Ansible's early inventory - but I don't think that'll be an issue for us any more16:59
*** Mudpuppy_ has joined #openstack-ansible16:59
evrardjpI think we should be moving it higher prio16:59
evrardjpthen16:59
odyssey4meandymccr yes, my hope would be that we can do it internally in the inventory and give a long deprecation cycle16:59
evrardjpok17:00
openstackgerritAdam Reznechek proposed openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC  https://review.openstack.org/40094017:00
evrardjpthen let's leave it in wishlist instead of low17:00
andymccrit should be less impactful i hope, since hostnames and the services are all correct as it stands then.17:00
odyssey4meit's definitely a feature request, and is on palendae's radar17:00
evrardjpok17:00
evrardjpgood17:00
evrardjpnext one and last17:00
evrardjphttps://bugs.launchpad.net/openstack-ansible/+bug/163202517:00
openstackLaunchpad bug 1632025 in openstack-ansible "Liberty to Mitaka upgrade fails inside deploy-config-changes.yml" [Low,New]17:00
evrardjpif you have 1 minute!17:00
*** TxGirlGeek has joined #openstack-ansible17:01
odyssey4mewe've discussed this one a few times now17:01
evrardjpwishlist at best17:01
andymccryeah17:01
andymccrconfirmed wishlist17:01
*** adrian_otto has quit IRC17:01
evrardjpok thanks everyone!17:01
odyssey4menot sure why you'd end up migrating twice from the same source version17:01
odyssey4mebut anyway17:01
evrardjpasettle: where is your gif?17:01
evrardjpodyssey4me: agreed17:02
evrardjpok we're done for today!17:02
odyssey4meit might even be better to just put a guard in that stops the upgrade, saying that you've already done it17:02
evrardjpThanks everyone17:02
evrardjpodyssey4me: oh you're definitely going to be fancy there17:02
*** Mudpuppy has quit IRC17:02
odyssey4mebut, looking to the future, if we aim to use the same process to upgrade minor or major versions, then I'd like to see the 'liberty' suffix become a tag suffix or something like that17:03
odyssey4memaybe tag + date/time stamp17:03
odyssey4mebut anyway17:03
odyssey4metime for me to head off17:03
drifterzayeah same17:03
drifterza7pm!17:03
drifterzajeeze17:03
*** sdake_ has joined #openstack-ansible17:04
*** sdake has quit IRC17:06
evrardjpdolphm: yes capstone is borked17:06
odyssey4medolphm maybe, not sure - but basically jmccrory tested with that one setting and stuff breaks17:07
odyssey4meit should have been broken for newton though17:07
evrardjpskape: TobiSan whiteveil we can now discuss your osa issues :)17:07
odyssey4meso maybe there's more to it17:07
*** javeriak has joined #openstack-ansible17:07
evrardjpdolphm: in osa*17:07
odyssey4meanyway, I'm out - this time for real real17:07
drifterzabye bye17:07
evrardjpodyssey4me: have a good one!17:07
evrardjpsee you tomorrow!17:08
*** asettle has quit IRC17:08
drifterzak I'm also out17:08
drifterzacheers all17:08
whiteveilheya evrardjp! Sorry again for interrupting before. Anyway I was going through the ansible role and saw in the STIG clamav is in use. In the role it’s turned off by default, but I was just wondering if anyone had any opinions on it in use on production servers17:09
*** javeriak has quit IRC17:09
whiteveilI’ve never really used it before, looked into it a bit and was just a little curious since it was turned off by default17:09
openstackgerritMerged openstack/openstack-ansible-galera_client: Allow jinja conditionals in package install tasks  https://review.openstack.org/39998417:10
evrardjpwhiteveil: mhayden could help you more with that17:10
evrardjphe has experience has he wrote the security role17:10
evrardjpI think there is also doc that explains why it's turned off17:10
mhaydenhowdy whiteveil ;)17:11
evrardjpmaybe you should have a look at the doc at http://docs.openstack.org/developer/openstack-ansible-security/17:11
mhaydenwhiteveil: this should help -> http://docs.openstack.org/developer/openstack-ansible-security/rhel7/auto_controls-by-tag.html#misc-121-controls17:11
*** bandarji has joined #openstack-ansible17:12
mhaydenit's disabled by default17:12
whiteveilawesome thanks mhayden17:12
whiteveilbtw the role is amazing. I’m auditing it atm for Ubuntu and loving it so so much17:12
mhaydenalso, could someone take a look at https://review.openstack.org/399174 and apply workflow if it looks good17:12
mhaydeni have a stack behind it :)17:12
mhaydenwhiteveil: thanks! it's not just me working on it ;)17:13
mhaydenwhiteveil: i'm really really in need of testers for the RHEL 7 stig content17:13
mhayden50% of the STIG is done with quite a bunch in the review pipe ;)17:13
*** adrian_otto has joined #openstack-ansible17:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Capitalize severity  https://review.openstack.org/39723117:13
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Enable graphical login banner  https://review.openstack.org/39725617:13
whiteveilyep odyssey4me and another guy told me yesterday, I don’t think I’ll have time this week, but I’d love to look at it maybe this weekend17:13
mhaydensweet17:14
openstackgerritMerged openstack/openstack-ansible-os_swift: Use new ansible package module to install distro packages.  https://review.openstack.org/40378617:16
*** phalmos has joined #openstack-ansible17:17
*** chhavi has quit IRC17:17
openstackgerritMerged openstack/openstack-ansible-os_neutron: Use new ansible package module to install distro packages.  https://review.openstack.org/40378517:18
*** drifterza has quit IRC17:20
*** Mudpuppy_ has quit IRC17:21
openstackgerritMerged openstack/openstack-ansible-os_neutron: Add region awareness to the neutron ha tool  https://review.openstack.org/40034117:21
*** Mudpuppy has joined #openstack-ansible17:22
Andrew_jediandymccr evrardjp : You may be happy to hear that `glance-replicator` still works. :P17:22
evrardjpwoot17:22
*** Mudpuppy has quit IRC17:23
*** Mudpuppy has joined #openstack-ansible17:23
*** hughmFLEXin has quit IRC17:24
evrardjpdolphm: should we care and fix this no db keystone? Is there a specific use case I should think of? Like RAX customers that need it?17:24
*** haad1 has joined #openstack-ansible17:24
evrardjp(capstone)17:24
*** dxiri_ has quit IRC17:25
dolphmevrardjp: capstone is only used for rackspace public cloud17:25
dolphmevrardjp: and i've asked periodically, capstone needs to keep working (although it's using mitaka today)17:25
evrardjpok so we would have to fix that17:26
evrardjpmaybe worth discussing in another channel17:27
*** cbits has joined #openstack-ansible17:31
*** weezS has quit IRC17:32
dstanekcapstone :-)17:34
*** jlockwood has joined #openstack-ansible17:34
*** dxiri has joined #openstack-ansible17:35
*** McMurlock1 has quit IRC17:38
*** dxiri has quit IRC17:39
*** dffco has quit IRC17:39
*** dxiri has joined #openstack-ansible17:39
whiteveilIs there an easy way to audit only Ubuntu rules on the role?17:41
*** javeriak has joined #openstack-ansible17:42
*** Jack_Iv has quit IRC17:43
*** markvoelker has quit IRC17:45
*** javeriak has quit IRC17:46
*** dffco has joined #openstack-ansible17:47
*** TxGirlGeek has quit IRC17:48
*** markvoelker has joined #openstack-ansible17:50
*** whiteveil has quit IRC17:50
*** TxGirlGeek has joined #openstack-ansible17:51
*** adrian_otto has quit IRC17:53
*** Jack_Iv has joined #openstack-ansible17:54
*** javeriak has joined #openstack-ansible17:56
*** paulfantom has joined #openstack-ansible17:57
*** jperry has quit IRC17:59
*** Jack_Iv has quit IRC17:59
*** jperry has joined #openstack-ansible17:59
cmartHi -- as a test, I'm using OSA to upgrade one of our old clouds from Liberty to Mitaka, then to Newton18:00
*** Jack_Iv has joined #openstack-ansible18:00
cmartI see that the instructions here http://docs.openstack.org/developer/openstack-ansible/mitaka/upgrade-guide/manual-upgrade.html#manual-upgrade have not-quite-correct playbook names. for example, instructions refer to "pip-conf-removal.yml" but I see "repo-server-pip-conf-removal.yml" instead.18:00
cmartIs this to be expected / am I following the right guide?18:01
*** asettle has joined #openstack-ansible18:01
*** TxGirlGeek has quit IRC18:02
*** paulfantom has quit IRC18:05
*** jmckind_ has joined #openstack-ansible18:06
*** kristian__ has quit IRC18:06
jmccrorycmart : 'repo-server-pip-conf-removal.yml' is only in liberty (upgrading from kilo). did you initially checkout a tag on the mitaka branch?18:07
*** jmckind has quit IRC18:07
*** TxGirlGeek has joined #openstack-ansible18:08
*** dxiri has quit IRC18:09
*** dxiri has joined #openstack-ansible18:09
cmartjmccrory, I did, it looks like I ended up on 13.2.018:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC  https://review.openstack.org/40094018:11
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Use new ansible package module to install distro packages.  https://review.openstack.org/40378218:12
cmartalthough now I'm seeing that 13.3.6 is in the code, so my git repo must be way behind..18:12
jmccrorycmart : ok, yeah, looks like that tag is out of date for the current docs18:13
cmartyep, My intention is to get the latest Mitaka tag. *goes to run some git commands*18:13
cmartyep, the local copy of the repo was just old. a `git fetch --all` brought in the latest tags18:16
*** cathrichardson has quit IRC18:17
*** cathrichardson has joined #openstack-ansible18:18
*** cathrichardson has quit IRC18:18
*** Andrew_jedi has quit IRC18:18
*** vnogin has quit IRC18:20
cmartactually, `git checkout stable/mitaka` followed by `git pull` seemed to do the trick, before running the first commands in the doc18:20
*** haad1 has quit IRC18:22
*** TxGirlGeek has quit IRC18:24
*** dxiri has quit IRC18:25
*** jmckind has joined #openstack-ansible18:25
evrardjpodyssey4me: andymccr it's technically possible under ubuntu to apt install python-pip, pip install pip, apt purge python-pip, apt autoremove and still have pip properly setup. It's another way to bootstrap if ppl are working in mirrored env18:25
evrardjpit looks clean in my env18:25
*** dxiri has joined #openstack-ansible18:25
andymccrevrardjp: i quite like that idea if you are using a mirrored env.18:26
*** jmckind_ has quit IRC18:27
evrardjpI also thought of doing something different: On the deploy node that should have internet access, push the artifact for get-pip anywhere using ansible18:27
evrardjpso you always have a good version18:27
evrardjpand you just download it once18:27
evrardjpthen re-use locally when needed18:28
*** vnogin has joined #openstack-ansible18:28
evrardjpit's uglier 'though IMO18:28
evrardjpbut that would simplify quite a bit: one var in all to fetch locally instead of from the repo18:28
evrardjpso many different approaches, maybe worth a discussion and decision18:29
evrardjplet's talk about that tomorrow18:29
*** javeriak has quit IRC18:31
*** dxiri has quit IRC18:31
*** jmckind_ has joined #openstack-ansible18:32
*** vnogin has quit IRC18:32
*** javeriak has joined #openstack-ansible18:32
*** dxiri has joined #openstack-ansible18:32
*** allanice001 has joined #openstack-ansible18:33
*** jmckind has quit IRC18:33
*** dxiri_ has joined #openstack-ansible18:36
*** dxiri has quit IRC18:36
*** dffco has quit IRC18:37
openstackgerritAndrew Solomon proposed openstack/openstack-ansible-openstack_hosts: Enable openstack_hosts role without network_hosts  https://review.openstack.org/40438018:39
*** jmckind has joined #openstack-ansible18:39
*** jmckind_ has quit IRC18:40
skapeevrardjp : thx18:41
*** Jack_Iv_ has joined #openstack-ansible18:41
*** kristian__ has joined #openstack-ansible18:42
skapehagain  guys I'm having trouble now in the task "pip install" in the galera container  I already tried pip_offline_install: true  but it didn't work what is the url that the pip installer tryes to contact18:42
skape??18:42
skapeI've connected to the container and it has internet conectivity18:42
logan-you should see the url in /etc/ansible/roles/pip_install/defaults/main.yml that it is using for the primary and fallback get-pip fetch urls18:44
*** hughmFLEXin has joined #openstack-ansible18:46
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-galera_server: Install MariaDB 10.1 server  https://review.openstack.org/40112318:46
*** hughmFLEXin has quit IRC18:47
*** hughmFLEXin has joined #openstack-ansible18:47
openstackgerritAndreas Jaeger proposed openstack/openstack-ansible: Fix deploy-guide conf.py  https://review.openstack.org/40438418:47
*** javeriak has quit IRC18:47
*** javeriak has joined #openstack-ansible18:48
*** javeriak has quit IRC18:48
*** hughmFLEXin has quit IRC18:51
*** Jack_Iv__ has joined #openstack-ansible18:52
*** cathrichardson has joined #openstack-ansible18:52
*** electrofelix has quit IRC18:55
*** Jack_Iv_ has quit IRC18:55
*** Jack_Iv has quit IRC18:56
*** Jack_Iv has joined #openstack-ansible18:57
*** Jack_Iv__ has quit IRC18:57
*** weezS has joined #openstack-ansible18:58
*** BjoernT has quit IRC18:59
skapelogan- the container can access both urls , but in the error message it's trying to access the internal_lb_ip address18:59
skapei'm running again in the moment18:59
*** jmckind_ has joined #openstack-ansible19:00
*** Jack_Iv_ has joined #openstack-ansible19:00
logan-ok. would be interested to know which tag/branch you're on. also which playbook is this occurring in?19:01
*** Jack_Iv_ has quit IRC19:01
logan-and which container is it running against?19:01
*** Jack_Iv_ has joined #openstack-ansible19:01
*** Jack_Iv_ has quit IRC19:02
*** jmckind has quit IRC19:02
*** poopcat has joined #openstack-ansible19:02
*** Jack_Iv_ has joined #openstack-ansible19:03
*** Jack_Iv__ has joined #openstack-ansible19:04
*** kristian__ has quit IRC19:04
*** Jack_I___ has joined #openstack-ansible19:05
*** Jack_Iv_ has quit IRC19:05
skapeubuntu 16.04 newtow  galera container19:06
*** poopcat has quit IRC19:06
*** jmckind has joined #openstack-ansible19:07
logan-which url is it trying to fetch from the internal lb? can you put up a log of output from openstack-ansible -vvv when you run the play on paste.openstack.org?19:08
*** Jack_Iv__ has quit IRC19:09
*** jmckind_ has quit IRC19:09
*** Jack_I___ has quit IRC19:09
logan-have you verified that there is not an override var for pip_upstream_url in your group_vars or /etc/openstack_deploy/user_*.yml files?19:09
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-galera_server: Install MariaDB 10.1 server  https://review.openstack.org/40112319:11
*** poopcat has joined #openstack-ansible19:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set lifetime limits for passwords [+Docs]  https://review.openstack.org/39923219:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure passwords hashed with SHA512 [+Docs]  https://review.openstack.org/39919719:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Create home directories by default [+Docs]  https://review.openstack.org/39975919:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Ensure libuser crypt_style is SHA512 [+Docs]  https://review.openstack.org/39919919:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Expire cached sssd authenticators [+Docs]  https://review.openstack.org/40383319:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Verify that home directories exist [+Docs]  https://review.openstack.org/39978319:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check for users w/o home dirs [+Docs]  https://review.openstack.org/39974919:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Apply password quality rules  https://review.openstack.org/39917419:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Require auth for sudo [+Docs]  https://review.openstack.org/40380719:22
mhaydenpardon the rebasing :)19:22
mgariepyhaha19:22
mgariepyi was wondering what was going on for a moment.19:22
mhaydenjmccrory: nice catch on the typos -- i think https://review.openstack.org/399174 is fixed up now19:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Apply password quality rules  https://review.openstack.org/39918619:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs]  https://review.openstack.org/39925519:23
openstackgerritMerged openstack/openstack-ansible: HAProxy extra endpoints  https://review.openstack.org/40432819:24
openstackgerritMerged openstack/openstack-ansible: Fix deploy-guide conf.py  https://review.openstack.org/40438419:24
mhaydeni plan to get the whoa going again in november -- october was too busy19:25
mhaydenplease add stuff here: https://etherpad.openstack.org/p/whoa19:25
openstackgerritNish Patwa(nishpatwa007) proposed openstack/openstack-ansible-ops: Added metric collection plugins and kapacitor scripts  https://review.openstack.org/37913819:26
*** kjw3 has joined #openstack-ansible19:26
skapelogan- http://paste.openstack.org/show/590873/19:27
*** oanson has joined #openstack-ansible19:27
skapein the galera_container19:27
logan-ahh I see. the galera container is trying to fetch the constraints from the repo however it is failing to reach the repo server "Failed to establish a new connection: [Errno 113] No route to host'"19:28
logan-it seems the galera container does not have a route to reach your internal_lb_address19:28
mgariepyis haproxy running ?19:29
skapeI cann't ping it19:30
*** TxGirlGeek has joined #openstack-ansible19:31
*** dxiri_ has quit IRC19:31
*** fguillot has quit IRC19:33
*** fguillot has joined #openstack-ansible19:34
openstackgerritOmer Anson proposed openstack/openstack-ansible-os_neutron: Dragonflow  https://review.openstack.org/39152419:34
skapethe service is running19:34
*** dxiri_ has joined #openstack-ansible19:35
logan-on your galera container, what does `ip addr list`, `ip route list` output look like19:35
mhaydenodyssey4me: fixed up jmccrory's findings in https://review.openstack.org/#/c/399174/19:37
*** kristian__ has joined #openstack-ansible19:37
* mhayden tips his hat to jmccrory19:37
*** cathrichardson has quit IRC19:38
*** kristian__ has quit IRC19:41
*** kristian__ has joined #openstack-ansible19:42
openstackgerritOmer Anson proposed openstack/openstack-ansible-os_neutron: Dragonflow  https://review.openstack.org/39152419:49
skapethe galera container has an ip on the net it seems like a problem wiht the repo container  , but before I tried without pip install offline I had the same problem19:51
skapeok the problem is in haproxy , in the repo container the requested url is  accessible requirements_absolute_requirements.txt19:58
*** stuartgr has quit IRC19:59
*** johnmilton has quit IRC20:02
*** galstrom is now known as galstrom_zzz20:08
raddaouiHey palendae, thanks for all the improvements and changes you did for the inventory, I was able to use the library for other purposes :)20:08
*** allanice001 has quit IRC20:09
*** galstrom_zzz is now known as galstrom20:09
*** cathrichardson has joined #openstack-ansible20:09
*** hybridpollo has joined #openstack-ansible20:10
*** haad1 has joined #openstack-ansible20:13
*** Jack_Iv__ has joined #openstack-ansible20:14
mrdaMorning OSA20:17
*** Jack_Iv__ has quit IRC20:17
*** Jack_Iv_ has joined #openstack-ansible20:18
*** Jack_Iv has quit IRC20:20
*** Jack_Iv_ has quit IRC20:21
*** Jack_Iv has joined #openstack-ansible20:21
*** Jack_Iv_ has joined #openstack-ansible20:22
*** Jack_Iv_ has quit IRC20:23
mhaydenohai mrda20:24
mrdamhayden: o/20:25
*** Jack_Iv has quit IRC20:26
*** Jack_Iv has joined #openstack-ansible20:26
*** Jack_Iv has quit IRC20:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set auditd failure flag [+Docs]  https://review.openstack.org/40441320:30
*** vnogin has joined #openstack-ansible20:35
*** Jack_Iv has joined #openstack-ansible20:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for MFA/smartcards  https://review.openstack.org/40441520:38
TobiSanevrardjp:  im here now. you too?20:40
*** allanice001 has joined #openstack-ansible20:41
openstackgerritMerged openstack/openstack-ansible: Add command to create consolidated AIO config  https://review.openstack.org/39230020:42
*** Cole has joined #openstack-ansible20:43
*** oanson has quit IRC20:43
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for SELinux user confinement  https://review.openstack.org/40441720:45
*** allanice001 has quit IRC20:46
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable usb-storage module [+Docs]  https://review.openstack.org/40441820:53
*** vnogin has quit IRC20:54
mhaydenif any cores have a moment to review https://review.openstack.org/399174 , i'd be much obliged20:54
*** Jack_Iv has quit IRC20:54
*** Jack_Iv has joined #openstack-ansible20:55
*** Cole has quit IRC20:56
*** vnogin has joined #openstack-ansible20:57
*** cmart has quit IRC20:57
*** cmart has joined #openstack-ansible20:58
*** oneswig has joined #openstack-ansible20:59
*** Jack_Iv has quit IRC20:59
*** h5t4 has quit IRC21:00
*** adrian_otto has joined #openstack-ansible21:00
*** kristian__ has quit IRC21:00
*** dxiri has joined #openstack-ansible21:01
*** kristian__ has joined #openstack-ansible21:01
openstackgerritNeill Cox proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role.  https://review.openstack.org/40441921:01
*** poopcat has quit IRC21:01
*** dxiri_ has quit IRC21:01
*** kball has joined #openstack-ansible21:02
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable autofs [+Docs]  https://review.openstack.org/40442021:03
*** Mudpuppy_ has joined #openstack-ansible21:03
*** TxGirlGeek has quit IRC21:05
*** TxGirlGeek has joined #openstack-ansible21:05
*** kball has quit IRC21:06
*** adrian_otto1 has joined #openstack-ansible21:06
*** Mudpuppy has quit IRC21:06
*** adrian_otto has quit IRC21:07
*** fguillot has quit IRC21:07
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [Docs] Exceptions for disk encryption  https://review.openstack.org/40442121:08
*** dxiri_ has joined #openstack-ansible21:08
*** dxiri has quit IRC21:09
*** Mudpuppy_ has quit IRC21:09
*** gouthamr has quit IRC21:11
*** bandarji has left #openstack-ansible21:12
*** poopcat has joined #openstack-ansible21:16
*** hughmFLEXin has joined #openstack-ansible21:16
*** sdake_ has quit IRC21:17
*** poopcat has quit IRC21:18
*** spotz_zzz is now known as spotz21:19
*** TxGirlGeek has quit IRC21:19
*** TxGirlGeek has joined #openstack-ansible21:20
*** poopcat has joined #openstack-ansible21:20
*** TxGirlGeek has quit IRC21:22
*** hughmFLEXin has quit IRC21:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable SELinux/AppArmor [+Docs]  https://review.openstack.org/40442521:27
*** poopcat has quit IRC21:28
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable autofs [+Docs]  https://review.openstack.org/40442021:28
*** smatzek has quit IRC21:29
*** sdake has joined #openstack-ansible21:32
*** adrian_otto1 has quit IRC21:32
*** vnogin has quit IRC21:33
*** adrian_otto has joined #openstack-ansible21:33
*** cbits has quit IRC21:33
*** Jeffrey4l has quit IRC21:35
*** kjw3 has quit IRC21:36
*** sdake_ has joined #openstack-ansible21:38
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable autofs [+Docs]  https://review.openstack.org/40442021:39
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Disable ctrl-alt-del key sequence [+Docs]  https://review.openstack.org/40442921:39
*** poopcat has joined #openstack-ansible21:40
*** sdake has quit IRC21:41
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable SELinux/AppArmor [+Docs]  https://review.openstack.org/40442521:42
*** vnogin has joined #openstack-ansible21:45
*** Jeffrey4l has joined #openstack-ansible21:47
*** sdake has joined #openstack-ansible21:47
*** sdake_ has quit IRC21:51
*** wholler has joined #openstack-ansible21:56
*** askb has joined #openstack-ansible21:57
*** TxGirlGeek has joined #openstack-ansible21:57
*** wholler has left #openstack-ansible21:58
*** mando has joined #openstack-ansible21:59
*** oneswig has quit IRC22:01
*** smatzek has joined #openstack-ansible22:02
*** mando has left #openstack-ansible22:02
*** wadeholler has joined #openstack-ansible22:03
*** smatzek has quit IRC22:06
*** chris_hultin is now known as chris_hultin|AWA22:06
*** sliver has quit IRC22:07
*** TxGirlGeek has quit IRC22:09
*** woodard_ has joined #openstack-ansible22:11
*** woodard has quit IRC22:14
*** vvro has quit IRC22:15
*** woodard_ has quit IRC22:15
*** jamesdenton has quit IRC22:15
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set auditd failure flag [+Docs]  https://review.openstack.org/40441322:20
*** Mudpuppy has joined #openstack-ansible22:21
*** TxGirlGeek has joined #openstack-ansible22:23
*** TxGirlGeek has quit IRC22:25
*** Mudpuppy_ has joined #openstack-ansible22:27
*** chas has joined #openstack-ansible22:30
*** Mudpuppy has quit IRC22:31
*** adrian_otto has quit IRC22:31
*** chas has quit IRC22:34
*** retreved has quit IRC22:34
*** retreved has joined #openstack-ansible22:35
*** weezS has quit IRC22:36
*** jmckind has quit IRC22:37
*** TxGirlGeek has joined #openstack-ansible22:39
*** jheroux has quit IRC22:45
*** vnogin has quit IRC22:46
*** vnogin has joined #openstack-ansible22:47
*** Pramod_ has joined #openstack-ansible22:48
Pramod_Hi All. I am working on OSIC 66 node cluster from Rackspace. I am following the below document for deploying using ansible22:49
Pramod_https://github.com/osic/ref-impl/blob/master/documents/osa-refimpl-deploy.md22:50
Pramod_My requirement is a little different from the one which is specified in the about URL. I need 1 controller node/Network and reaming as computre nodes22:50
Pramod_I am facing this error22:51
Pramod_TASK: [haproxy_server | Create haproxy service config files] ****************** fatal: [infra01] => {'msg': 'AnsibleError: host not found: [', 'failed': True} fatal: [infra01] => {'msg': 'One or more items failed.', 'failed': True, 'changed': False, 'results': [{'msg': 'AnsibleError: host not found: [', 'failed': True}]}  FATAL: all hosts have already failed -- aborting22:51
*** sliver has joined #openstack-ansible22:51
Pramod_I copied the contents to ilo.csv and input.csv from osic-prep container and ran the bootstrap and even made sure that static.inventory is updated. The openstack-ansible setup-infrastructure.yml fails. and the openstack-ansible setup-openstack.yml is failing too! I would like to know if i need to update it anywhere?22:51
Pramod_can anyone guide me to resolve this error?22:52
*** thorst_ has quit IRC22:53
*** chris_hultin|AWA is now known as chris_hultin22:53
*** karimb has joined #openstack-ansible22:54
*** vnogin has quit IRC22:58
*** michaelgugino has quit IRC22:59
*** vnogin has joined #openstack-ansible23:00
*** chris_hultin is now known as chris_hultin|AWA23:03
*** haad1 has quit IRC23:03
*** asettle has quit IRC23:08
*** chris_hultin|AWA is now known as chris_hultin23:16
*** galstrom is now known as galstrom_zzz23:17
*** jperry has quit IRC23:17
*** phalmos has quit IRC23:23
*** cathrichardson has quit IRC23:26
*** cathrichardson has joined #openstack-ansible23:27
*** TxGirlGeek has quit IRC23:28
*** vnogin has quit IRC23:28
*** cathrichardson has quit IRC23:29
raddaouiHey Pramod_23:32
raddaouiso how did you configured your networks in the servers23:32
*** chris_hultin is now known as chris_hultin|AWA23:34
raddaouiI think you either didn't configure your network properly in the hosts23:34
raddaouiyou should change this file first  /opt/osic-ref-impl/playbooks/vars/vlan_network_mapping.yml23:34
raddaouiand then rerun the create-network-interfaces.yml playbook23:35
*** pmannidi has joined #openstack-ansible23:35
*** rmelero has quit IRC23:36
raddaouior probably you didn't list the right ips in the openstack_user_config.yml file23:36
openstackgerritJimmy McCrory proposed openstack/openstack-ansible-galera_server: Install MariaDB development library package  https://review.openstack.org/40447523:37
*** dxiri_ has quit IRC23:38
*** vnogin has joined #openstack-ansible23:39
*** agrebennikov has quit IRC23:40
*** vnogin has quit IRC23:41
*** thorst_ has joined #openstack-ansible23:42
*** bsv has quit IRC23:42
Pramod_Hi Raddaoui23:42
*** bsv has joined #openstack-ansible23:43
Pramod_I did change the network. Let me verify once an dget back23:43
*** vnogin has joined #openstack-ansible23:43
*** bsv is now known as Guest723823:43
*** thorst_ has quit IRC23:46
*** Guest7238 has quit IRC23:48
*** bsv_ has joined #openstack-ansible23:50
*** bsv_ has quit IRC23:55
*** Mudpuppy_ has quit IRC23:55
*** spotz is now known as spotz_zzz23:55
*** thorst_ has joined #openstack-ansible23:56
*** Mudpuppy has joined #openstack-ansible23:56
*** bsv_ has joined #openstack-ansible23:56
*** Mudpuppy has quit IRC23:56
*** Jack_Iv has joined #openstack-ansible23:57
*** Mudpuppy has joined #openstack-ansible23:57
*** thorst_ has quit IRC23:58
*** spotz_zzz is now known as spotz23:59
*** dxiri has joined #openstack-ansible23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!