Tuesday, 2025-04-29

opendevreviewOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/94829004:05
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: wip  https://review.opendev.org/c/openstack/openstack-ansible/+/94811107:24
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-ops master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/94839307:29
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-ops master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/94839307:29
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible/+/94839407:30
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible/+/94839407:31
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-rabbitmq_server master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/94841009:31
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_horizon master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/94841109:31
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-rabbitmq_server master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/94841009:32
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_horizon master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/94841109:32
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_keystone master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94841209:36
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_keystone master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94841209:36
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_cinder master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/94841309:37
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_cinder master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/94841309:38
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-plugins master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/94841409:40
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_magnum master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/94841509:40
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_magnum master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/94841509:41
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-plugins master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/94841409:41
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use standalone httpd role  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94833809:41
jpw_is there something else I need to do to inform cinder that ceph is available. I'm using an existing cluster, i've created the pools, keyrings + perms and given all of the details to user_variables.yml. yet my `openstack volume service list` only shows the '__DEFAULT__' type which obvs won't work since i'm not deploying any storage_hosts10:16
noonedeadpunkjpw_: it's pretty much up to how you define `cinder_backends` variable10:21
noonedeadpunkie example for Ceph we have: https://opendev.org/openstack/openstack-ansible/src/branch/master/etc/openstack_deploy/user_variables.yml.prod-ceph.example#L32-L4110:21
noonedeadpunkeven couple lines above that are also useful10:22
jpw_and if working correctly would I expect to see a new volume type? how about "cinder-volumes" in `openstack volume service list`?10:25
noonedeadpunkjpw_: so you need to define `storage_hosts` for cinder-volumes to spawn10:42
noonedeadpunkAlso, I think you need/want an env.d override to run cinder-volume in containers10:43
noonedeadpunklike that: https://opendev.org/openstack/openstack-ansible/src/branch/master/etc/openstack_deploy/env.d/cinder-volume.yml.container.example10:43
jpw_i have the is_metal: false directive. I'll try adding some storage_hosts in10:53
noonedeadpunkstorage_hosts do not produce ceph or anything - they're solely for cinder-volumes10:53
noonedeadpunkit's defined here: https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/env.d/cinder.yml#L38-L4310:54
noonedeadpunkfor ceph deployment it would be ceph-mon_hosts, cep[h-osd_hosts, etc10:54
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/env.d/ceph.yml#L62-L9210:54
jpw_are they still required if it's an existing cluster?10:59
jpw_an existing ceph cluster10:59
noonedeadpunknope, they are not for sure11:01
jpw_i'm going the no-ssh route so i've provided a cinder.conf some keyrings and some pool names. currently i've only got storage-infra_hosts defined. i'm trying again with storage_hosts too.11:01
noonedeadpunkonly storage_hosts to deploy cinder-volume11:01
jpw_thank you11:02
noonedeadpunkyes, right, no-ssh is the best way forward11:02
noonedeadpunkas well as managing ceph separately is a very wise choice as well11:02
jpw_its not my first cloud :D11:06
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use standalone httpd role  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94833811:06
noonedeadpunkright, you just never know knowledgebase so often just start from the beginning to be on the safe side and not overlook smth very basic11:08
noonedeadpunkjpw_: btw, fwiw, you also can configure networking with OSA today completely. If you want to11:08
jpw_im keen to give that a go11:09
noonedeadpunkie https://docs.openstack.org/openstack-ansible/latest/user/network-arch/example.html#configuring-network-interfaces11:09
jpw_i just want to get this demo out the door 11:09
jpw_i timed it yesterday i've got the whole deployment from blank devices to functioning (although not integrated, yet) ceph + openstack down to 1 hour 45 minutes11:10
noonedeadpunkit is very simplified version jsut as a showcase, actual copnfiguration might get very complex very far, especially when you want to do IP calculations and assignment and make it a very universal between different environments11:10
noonedeadpunkbut if you configure that with PXE or smth like that - you might not need that actually....11:11
noonedeadpunkkinda depends on need to change networking during runtime11:11
noonedeadpunkjpw_: also try out maxing our ANSIBLE_FORKS env var. 11:12
noonedeadpunkas default is calculated based on amount of CPUs on deploy host, with max being 1011:12
noonedeadpunkas this is what sshd would limit by default11:12
noonedeadpunkgoing slightly above might be beneficial for LXC scenario, especially step of initial LXC creation11:13
jpw_i've gone pxe that leaves the hosts on a provisioning network and a playbook that takes a simple database of serial numbers, vlanid's to produce the the interfaces file. runtime reconfiguration hasn#t been considered yet but i'm expecting to be able to drop in any additional configs in to interfaces.d11:13
jpw_the hosts get rebooted. i run some more prep on them and hand everything off to osa11:14
noonedeadpunkwell, if you have jsut pxe as default - I'd really think about managing them with systemd_networkd role which this example uses11:14
noonedeadpunkas ifupdown I think is still very messy in terms of changes of networking during runtime...11:15
jpw_i can give it a go. i'm currently using debian i don't think i've ever tried switching to systemd-networkd before11:15
jpw_yeah it is somewhat minimal11:15
noonedeadpunkwell, with lxc you're getting systemd-networkd anyway in there iirc11:16
noonedeadpunk(or maybe that's only inside containers, cant' recall)11:16
jpw_i did see it being installed to the host too just to configure the lxc bridge11:17
noonedeadpunkyeah, ok, I think you're right11:17
noonedeadpunkit's also somehow handy on ubuntu, as netplan is using systemd-networkd as a backend anyway, and we can apply some specific overrides even to interfaces managed via netplan. But yers, ifupdown is very different11:18
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use standalone httpd role  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94833811:29
jpw_specifying storage_hosts did the trick. thanks11:34
noonedeadpunksure, no worries, ping us if anything :)12:00
jrosseri think for networking with PXE you should take some care to make sure that what you configure inside the PXEboot can then be built upon to become the host networking you want, rather than need to be replaced12:29
jrosserso if the boot interface eventually needs to be part of a bond, put in work to make the bond exist during PXEboot12:29
jrosserwe currently don't do this and have an extra reboot needed as part of initial provisioning and thats quite awkward12:30
jpw_i 100% will be revisiting that if this is selected for furthur development12:30
jpw_admittedly im not sure what's great for pxw now days. we used to use puppetlabs-razor that worked really well until it was deprecated12:31
jpw_s/pxw/pxe/12:31
jpw_ive just come up against CORS in firefox preventing image uploads. works ok in chrome.12:34
jpw_nvm i see the headers are configurable.12:36
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use standalone httpd role  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94833812:45
noonedeadpunk#startmeeting openstack_ansible_meeting15:00
opendevmeetMeeting started Tue Apr 29 15:00:14 2025 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:00
noonedeadpunk#topic rollcall15:00
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use standalone httpd role  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94833815:00
noonedeadpunko/15:01
NeilHanlono/ 15:01
NeilHanlon(triple booked this morning 🙃)15:01
noonedeadpunkwow15:02
noonedeadpunkthat's being harsh15:02
NeilHanlonyeah i am really mean to myself lol15:02
NeilHanloni forgot about a webinar training i'd signed up for a month ago hah15:02
NeilHanlonheya DavidGomez_! :D 15:03
NeilHanlonglad you could make it :) 15:03
DavidGomez_Happy to be here and hopefully help :)15:03
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use standalone httpd role  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94833815:04
noonedeadpunkhey o/15:04
jrossero/ hello15:04
noonedeadpunk#topic office hours15:04
noonedeadpunkSo I think mainly we need to sync on state of things for releasing Epoxy15:04
noonedeadpunkDeprecation of the test repo15:05
noonedeadpunkGovernance patch was merged: https://review.opendev.org/c/openstack/governance/+/94762215:05
noonedeadpunkWe have only requirements and releases patches left15:05
noonedeadpunkBut as rest are merged - there's really a good progress made15:06
noonedeadpunkthough - we were pointed to zuul errors which repo creates15:06
noonedeadpunk#link https://zuul.opendev.org/t/openstack/config-errors?project=openstack%2Fopenstack-ansible-tests&skip=0 15:06
noonedeadpunkI was gonna to check on that after the meeting15:07
noonedeadpunkHTPD role: https://review.opendev.org/q/topic:%22osa/httpd_role%2215:07
noonedeadpunkSo patch for Horizon looks good enough atm, and also keystone patch was passing as well15:07
noonedeadpunkBut I'd really love to ask someone with a sandbox and a working federation to check it as well15:08
noonedeadpunkgiven how crucial keystone is...15:08
jrosserhrrm yes interesting15:08
jrossertbh our staging env does not have federation enabled15:09
jrosserwhich is a known gap we have15:09
noonedeadpunkouch15:09
jrosserhow long do we have?15:09
noonedeadpunkwell... I have one env with federation, but I don't have an actuall access to keycloack behind it to test anything...15:10
noonedeadpunkso the due date is 2nd of June or smth like that15:10
noonedeadpunkso we technically do have a month15:10
noonedeadpunkall in all15:10
jrossermaybe i can look at it next week15:11
noonedeadpunkbut it would be really nice to get it out before the due date...15:11
noonedeadpunkthat would be highly appreciated15:11
noonedeadpunkas we have no testing around federation at all15:11
noonedeadpunkLinux Bridge Removal15:12
noonedeadpunkI did not check on Zun yet to be honest...15:12
NeilHanlonmy month will be probably pretty crazy with Rocky 9.5 and 10... 15:12
noonedeadpunkwe need 10 asap :)15:12
noonedeadpunkpretty much one of the first things I want to look at after we release Epoxy15:13
noonedeadpunkTalking about EL, I've fixed distro setup for cinder in https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/94714215:14
noonedeadpunkUnpacking images, which was used for Magnum coreos job was merged, so we're good in that regard15:15
noonedeadpunkCeph/Ubuntu Noble - I've proposed a patch: https://review.opendev.org/c/openstack/openstack-ansible/+/94825515:15
noonedeadpunkwe actually were already having smth like that around antelope I believe15:15
noonedeadpunkI got a comment in one of bug reports, that it would be good to better document it15:16
noonedeadpunkBut I am really not sure where and how15:16
noonedeadpunkSo if anybody has an idea of better documentation - that will be very nice15:16
jrosserevery so often we do get a super fast test node15:17
noonedeadpunkyeah, like ~30min is o_O15:17
NeilHanlonthats weird ... 15:18
noonedeadpunkit makes me sometimes worried if everything there is even executed :D15:18
noonedeadpunkbut these are AMD machines from what I've learned15:19
noonedeadpunkI think one last thing, which might worth looking into - is fixing Manila CI. As iirc Ceph does have some in-tree replacement for ganesha, which is pretty much mgr module15:20
noonedeadpunkwanna look into that and see if/how to implement that instead of installing ganesha separately15:21
NeilHanlonmakes sense..15:22
NeilHanlonbtw I did want to introduce DavidGomez_ -- he's a coworker of mine who was interested in getting involved and helping with (among other things) Rocky 1015:23
noonedeadpunknice, that is always very welcome :)15:23
noonedeadpunknow we can bother him as well with our stupid questions?:)15:24
DavidGomez_Hi all o/ what Neil said will help where I can and ask away I say15:25
noonedeadpunk\o/15:25
noonedeadpunkthese are great news15:26
noonedeadpunkOn other thing -  I think we need to step in and help fixing upgrade jobs for Swift role: https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/94699015:27
noonedeadpunkit's cuurrently failing only on Rocky upgrade jobs15:27
noonedeadpunkI'm not sure if I will be able to check this week, but probably next week...15:27
noonedeadpunkI pretty much wonder what's the difference in there making rocky fail and specifically on upgrade...15:28
noonedeadpunksmth with SSHD and ssh certificates for sure...15:29
noonedeadpunkanyway15:29
noonedeadpunkthat was pretty much all from my side15:29
NeilHanlonnothing more from me 15:29
noonedeadpunkit would be really nice if we could come up with role branching patch by end of next week...15:31
noonedeadpunkbut as of today - quite some things to land still15:31
noonedeadpunknot too much, but some15:31
noonedeadpunkif that's it, I'd love to conclude the meeting then :)15:35
NeilHanlonSounds good! 15:36
noonedeadpunk#endmeeting15:37
opendevmeetMeeting ended Tue Apr 29 15:37:16 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:37
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2025/openstack_ansible_meeting.2025-04-29-15.00.html15:37
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2025/openstack_ansible_meeting.2025-04-29-15.00.txt15:37
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2025/openstack_ansible_meeting.2025-04-29-15.00.log.html15:37
* noonedeadpunk just learned about https://opendev.org/openstack/ansible-plugin-container-connection17:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Switch Manila jobs to Noble  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/94847418:43
drarveseGreetings all, I've been lurking and following things that jpw_ was doing yesterday. I'm in a similar situation struggling to get a new OVN installation setup.19:02
drarveseHere's a paste: https://paste.openstack.org/show/bCdE99YVzsWIbsxz1gHx/ -- does this look OK?19:02
drarveseIt sounds like br-vlan isn't needed on the host and OSA will add the physical interface to the br-vlan bridge within OVN. Is that correct?19:03
noonedeadpunkdrarvese: hey20:13
noonedeadpunkyes, that is correct20:13
noonedeadpunkthis bridge does not need to be created as it will be an OVS bridge created by the role20:14
drarveseOK, that's good to know20:16
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: wip  https://review.opendev.org/c/openstack/openstack-ansible/+/94811120:17
noonedeadpunkdrarvese: I think you can also check some configuration from our CI jobs to see the resulting config20:20
noonedeadpunkie https://60667c112fa084ed347c-8bf91e93364f14a67a943838d2417a14.ssl.cf5.rackcdn.com/openstack/2f96f4d5eb934882a7a182f9aeccab8a/logs/etc/host/openstack_deploy/20:20
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch to using mariadb.org infra cache  https://review.opendev.org/c/openstack/openstack-ansible/+/93403820:26
drarveseEverything installs correctly but creating an instance times out trying to allocate the network. I can see the port get created and attached to bridge but it eventually times out20:29
drarveseThis is a VLAN network FWIW. I'm unable to ping the gateway from within the network namespace that gets spawned20:32
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: docs: update openstackdocstheme to 3.5.0  https://review.opendev.org/c/openstack/openstack-ansible/+/94811121:08
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_horizon master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/94841122:22
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_trove master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/94837222:44
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_keystone master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/94841222:48
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-plugins master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/94841422:49
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_magnum master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/94841522:49
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-rabbitmq_server master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/94841022:49
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_cinder master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/94841322:50
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-ops master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/94839322:50
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible/+/94839422:51
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_horizon master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/94841122:53

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!