Thursday, 2015-09-03

EmilienMcrinkle: unless I'm doing wrong in the apt config, 'proposed' is broken01:05
EmilienMjamespage: fyi, keystone is broken when installing 'proposed' packages01:12
EmilienMI'm trying again, I'm probably doing something wrong01:13
EmilienMit seems ubuntu-cloud-keyring can't be found01:24
EmilienMso it sounds keystone can't be installed01:44
EmilienMjamespage: https://jenkins02.openstack.org/job/gate-puppet-openstack-integration-dsvm-trusty/38/consoleFull01:44
EmilienMcrinkle: so I rebase integ patches and tempest run well: https://jenkins01.openstack.org/job/gate-puppet-openstack-integration-dsvm-centos7/51/console01:58
EmilienMthat means, https://review.openstack.org/#/c/216831/ - https://review.openstack.org/#/c/216938 and https://review.openstack.org/#/c/217352/ can be reviewed01:59
*** richm has quit IRC03:04
*** timrc has quit IRC03:31
*** timrc has joined #openstack-sprint03:33
*** mrmartin has joined #openstack-sprint04:50
jamespageEmilienM, 2015-09-03 01:37:07.039 | WARNING: The following packages cannot be authenticated!07:09
jamespagewould indicate ubuntu-cloud-keyring is not installed07:10
jamespageyou have to install that first07:10
jamespageprior to adding the source and updating07:10
EmilienMjamespage: it is, look at the logs11:48
EmilienMjamespage: 2015-09-03 01:35:39.499 | + /usr/bin/apt-get -y install ubuntu-cloud-keyring11:48
jamespageEmilienM, hmm11:52
jamespageEmilienM, I'm not able to reproduce that - I can install OK from proposed without hitting unauthed packaged11:52
EmilienMwierd11:53
jamespageEmilienM, did you see that generally or just for keystone? if there is a signing issue, it would impact on the entire archive, not just a single package11:53
EmilienMweird11:53
EmilienMgenerally11:53
EmilienMit affects some python deps only, you see11:53
jamespageprobably the ones that come from cloud-archive, rather than the main archive11:54
jamespageas the signing key is not the same11:54
EmilienMmhh11:56
EmilienMjamespage: I'll investigate more11:56
EmilienMjamespage: if I show you /etc/apt/trustdb.gpg maybe you can see if the package is good11:58
EmilienMthe version is 2012.08.1411:59
EmilienMlooking at http://logs.openstack.org/18/219818/5/check/gate-puppet-openstack-integration-dsvm-trusty/4fd8263/logs/dpkg-l.txt.gz11:59
EmilienMbbl12:00
*** mrmartin has quit IRC12:24
*** richm has joined #openstack-sprint12:40
EmilienMgood morning :)12:59
claytonmorning :)13:09
claytonI'll be in and out today, I've got back to school stuff to ferry the kids to.  That's why I couldn't make the in person sprint originally.13:13
pabelangermorning13:13
pabelangerclayton: nice, my daughter starts today too13:14
claytonI thought we were the only place that started this late in the year :)13:14
claytonWe have open house stuff today at two different schools, school starts next Tuesday.13:15
EmilienMjamespage: so I confirm I still have an issue, see https://jenkins06.openstack.org/job/gate-puppet-openstack-integration-dsvm-trusty/47/console13:35
EmilienMjamespage: I run apt-get update, then install the keyring package, then run apt-get update and then it fails to install keystone13:35
*** vinsh has quit IRC13:45
EmilienMHunner, _ody: I would like to help with documentation to get modules approved, how can I help?14:07
EmilienMso after some investigation, it seems openstack packages on trusty-proposed/liberty are not correctly signed or something's wrong with keyring - https://jenkins01.openstack.org/job/gate-puppet-openstack-integration-dsvm-trusty/59/console14:15
pabelangerDid people get a chance to review: https://review.openstack.org/#/c/215696? And experimental job for puppet-openstack-integraiton so we could experiment with nodepool sub nodes14:17
*** mrmartin has joined #openstack-sprint14:19
*** vinsh has joined #openstack-sprint14:28
EmilienMpabelanger: youre missing +A from infra anteaya ^14:59
EmilienMI think it's safe to keep it experimental14:59
EmilienMand won't break anything but help you to move forward14:59
*** vinsh has quit IRC15:00
pabelangerEmilienM: Ya, just looking for comments in general. Adding it into experimental won't break anything15:10
EmilienManteaya: pabelanger also has https://review.openstack.org/#/c/219866/15:10
EmilienManteaya: maybe you could review the patch15:10
nibalizergood morning everyone15:18
*** vinsh_ has joined #openstack-sprint15:18
anteayamorning nibalizer15:19
EmilienMnibalizer: o/15:19
mfischmorning all15:32
mwhahahamorning15:33
mfischmwhahaha: I'll have some time in a bit if you want to knock out those bugs15:43
mwhahahai've got a fuel irc meeting in ~15, so might have to wait until 11 your time15:44
mfischI have a meeting then15:45
mfischtoday sucks15:45
mfischlet me ping you later15:46
mwhahahak15:46
mfischI'll see what I can look at now as time permits15:46
HunnerEmilienM: I added stuff to the module approval etherpad section15:58
EmilienMHunner: thx will look15:58
EmilienMHunner: does it means "cinder, glance, horizon, neutron" are going to be approved like they are now?16:01
HunnerYep16:01
HunnerEmilienM: All the magic is in the spreadsheet16:01
EmilienMHunner: nice16:01
EmilienMHunner: but I don't see them approved (yet) on https://forge.puppetlabs.com/openstack16:02
EmilienMmaybe I need to be patient :-)16:02
EmilienMcrinkle: ubuntu issue I had last night was on canonical side, fixed by jamespage - so now, I'm rechecking all the patches, if jenkins now pass, you'll be able to +2 again :-)16:07
HunnerEmilienM: Yeah, approval is a DB query, so I figured I get them all done at once so I don't have to bug the forge team over and over :)16:08
Hunnernibalizer: _ody: Meghan was sick all night so I'm going to probably get very little done today (on purpose)16:08
EmilienMHunner: awesome16:09
crinkleEmilienM: okay16:09
EmilienMcrinkle: good morning!16:09
crinkleEmilienM: o/16:09
nibalizerHunner: ok16:10
nibalizerHunner: you staying home or comming to puppetconf16:10
_odyHunner: I have a dentist appointment at 11 so I am probably also not getting a much done until the afternoon16:10
nibalizers/puppetconf/puppetlabs/16:10
_odynibalizer: I suspect we remote it today and show up at the office again to close out the sprint tomorrow.16:11
Hunnernibalizer: I'll be at puppetconf16:11
Hunnernibalizer: Oh, no I'm staying home to take care of meghan and kate16:12
HunnerBut yeah, in tomorrow16:12
EmilienManteaya: pabelanger updated the commit msg: https://review.openstack.org/#/c/215696/16:13
pabelangerEmilienM: ack16:14
nibalizer_ody: okay16:14
nibalizerthat works better for me anyways16:14
EmilienMpabelanger: it was not for you :P16:14
anteayaEmilienM: just wanting to hear from clarkb, yes16:15
clarkbya in general it seems ok, need to not skim and review it properly efore I vote16:15
clarkband still catching up on email this morning16:15
EmilienMrichm: do you have patches about v3 that are not reviewed? I want to help16:17
EmilienMcrinkle: I'm waiting for your feedback about doc thread, specially about my last reply16:20
anteayaclarkb: thank you16:21
EmilienMcrinkle: also I rebased integ patches so you can see tempest is running: https://review.openstack.org/#/c/217352/16:25
EmilienMjamespage: sounds better: https://jenkins02.openstack.org/job/gate-puppet-openstack-integration-dsvm-trusty/43/console16:44
EmilienMw00t16:44
jamespageEmilienM, awesome16:44
clarkbanteaya: pabelanger +216:51
anteayaclarkb: thank you16:57
pabelangerclarkb: perfect16:58
EmilienMjamespage: cinder is failing: http://logs.openstack.org/25/219825/2/check/gate-puppet-cinder-puppet-beaker-rspec-dsvm-trusty/4a038c5/console.html#_2015-09-03_16_54_44_80117:04
pabelangerokay, running for some lunch17:04
EmilienMjamespage: designate too: http://logs.openstack.org/26/219826/2/check/gate-puppet-designate-puppet-beaker-rspec-dsvm-trusty/7429f04/console.html#_2015-09-03_16_55_01_25917:04
EmilienMand horizon: http://logs.openstack.org/29/219829/2/check/gate-puppet-horizon-puppet-beaker-rspec-dsvm-trusty/793410a/console.html#_2015-09-03_16_55_18_17117:05
EmilienMprobably others... :(17:05
EmilienMonly keystone works17:05
jamespageEmilienM, I may have to give you b2 to resolve these things17:07
jamespageI've been testing this afternoon17:07
mfischmwhahaha: i'm avail in about 20m, you?17:10
mwhahahayes17:11
richmEmilienM: I don't think so - you have either already reviewed them, or we're waiting on another patch based on feedback17:13
mfischmwhahaha: okay ready?17:36
mwhahahasure17:36
mfischI want to start with vswitch17:36
mfischhttps://bugs.launchpad.net/puppet-vswitch/+bug/140348017:36
openstackLaunchpad bug 1403480 in puppet-vswitch "Catalog compilation failed sometimes" [High,Triaged]17:36
mfischthis looks like a redhat issue from what I'm seeing17:36
mfischredhat specific I mean17:36
mwhahahayup and once again has a fix elsewhere not upstreamed17:37
mwhahahaso may be trivial to fix17:38
mfischdo you have any way to test it?17:39
mfischthe fix is there17:39
mwhahahai might be able to later17:40
mwhahahai don't have a redhat env at the moment17:40
mfischmaybe the godaddy guys17:40
mfischmwhahaha: maybe someone on fuel has an env they could tyr this fix on real quick17:41
mwhahahalet me see17:41
mwhahahasince all of our stuff is ubuntu these days i might have an old env somewhere17:42
mfischmwhahaha: if you guys are ubuntu then let someone else takeit17:42
mfischI've noted it in the list17:42
mfischand I will ask some folks that use RH17:42
mfischmove on?17:42
mwhahahawe don't actually use the vswitch stuff17:42
mwhahahawe have our own thing17:42
mfischk17:43
mfischthis may be short ;)17:43
mwhahahawhich leads to some awkwardness in neutron17:43
mwhahaha:D17:43
mfischhttps://bugs.launchpad.net/puppet-vswitch/+bug/124597317:43
openstackLaunchpad bug 1245973 in puppet-vswitch "bridge down after reboot" [Undecided,Triaged]17:43
mfischI dont think thats an issue TBH17:43
mfischI've never seen it17:43
mfischbridge always comes up after reboot17:43
mfischI may just commnt to that affect and reassign17:43
mwhahahasounds good17:43
crinkleEmilienM: re docs thread, i didn't see anything i needed to respond to, my addition was just "please keep this in mind", not arguing17:44
crinkleEmilienM: re 217352 looks like it's still failing17:44
mfischmwhahaha: https://bugs.launchpad.net/puppet-ceilometer/+bug/147555117:45
openstackLaunchpad bug 1475551 in puppet-ceilometer "fail with "Could not enable openstack-ceilometer-alarm-evaluator" " [Undecided,New]17:45
mfischwe dont use ceilometer17:45
mwhahahawe can, though it might be faster to kick it back to the reporter and ask for more logs as he thought it wasn't enabled but the issue is that it couldn't be started17:46
mwhahahaso without knowing their config it's hard to know what went wrong17:46
mfischlet me read more17:46
mfischupdated bug17:47
mfischmove on?17:48
mwhahahasure17:48
mfischhttps://bugs.launchpad.net/puppet-horizon/+bug/148153817:49
openstackLaunchpad bug 1481538 in puppet-horizon "Updating webroot requires changes in _variables.scss" [Undecided,Confirmed]17:49
mfischI went over this with our horizon expert17:49
mfischI'm not sure we want to fix this17:51
mfischrather than just ask for a backport17:51
mwhahahasounds reasonable17:51
mfischthis is a legit bug though17:51
mfischwithout it on ubuntu you get no icons17:51
mwhahahabut that seems to not be a puppet bug but a horizon issue17:52
mwhahahaas indicated by the fix17:52
mfischit is17:52
mfischand it was fixed upstream17:52
mfischrecently17:52
mwhahahaso might be something to just document and leave as wont fix17:53
mfischyeah17:53
mfischlets move on17:55
mfischhttps://bugs.launchpad.net/puppet-horizon/+bug/147099317:56
openstackLaunchpad bug 1470993 in puppet-horizon "if compress_static=true failed to apply horizon puppets" [Undecided,Confirmed]17:56
mfischthis is a bug for sure17:56
mfischand also fixed in fuel17:56
mfischwe might need it upstreamed17:56
mwhahahayes17:56
mwhahahawe just fixed the packaging, so might want to spend some time to investigate if we should fix it in puppet or push it to the packagers17:57
mfischok17:58
mwhahahaoh they might have fixed it17:58
mwhahahathe acceptance test references https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/142404217:59
openstackLaunchpad bug 1424042 in horizon (Ubuntu) "openstack-dashboard-ubuntu-theme fails to install" [High,Fix released]17:59
mfischlookng17:59
mfischso fixed upstream18:01
mwhahahanot sure when tho18:01
mfischI'm confused18:02
mfischfuel marked it fixed but I dont think theres a fuel code change18:02
mwhahahawe fixed the horizon package18:02
mfischoh you guys pushed a fix to ubuntu18:02
mfischok18:02
mwhahahakinda of, we fixed our version of the package. but it looks like jamespage updated the other bug to indicate that is now fixed upstream18:03
mfisch"Ubuntu cloud archive packages still hit this issue."18:03
mwhahahaas of today18:03
mfischthis isnt really a puppet bug is it?18:03
mwhahahanot really18:04
mwhahahawe could hack around it with puppet, but it's a package issue18:04
mfischI agree18:04
mfischI think I will un-list puppet on here18:04
mfischand note18:04
mwhahahak18:05
mfischlast bug is this18:06
mfischhttps://bugs.launchpad.net/puppet-nova/+bug/147274018:06
openstackLaunchpad bug 1472740 in puppet-keystone "RFE: Ability to add parameters to db sync commands" [Undecided,In progress] - Assigned to Mike Dorman (mdorman-m)18:06
mfischI have it hear in case it needs discussion18:06
mfischhere18:07
mfischI'm guessing Mike is just going to do this18:07
mfischit does not affect me18:07
mwhahahayea it looks like he was waiting on the db_sync stuff18:07
mwhahahaso i guess it was updating the db sync items to take a configurable set of configuration file names or something18:08
mfischok18:08
mfischso nothing here to talk about18:08
mfischI think we're done mwhahaha18:09
mwhahahaok18:09
mwhahahai'll take a look at that vswitch change18:09
mwhahahait seems to make sense that it just needs a require line18:09
mwhahahai'll see if i can figure out a way to reproduce it18:09
mwhahahai figure it's an ordering of file inclusion issue18:10
mfischthanks18:22
EmilienMcrinkle: so, ubuntu is broken in b1 (proposed)18:35
EmilienMcrinkle: ack for doc, anteaya: I think we can follow-up and make sure keeping in mind what crinkle said (our README is for using modules) and our proposal about using openstack.org is for developers18:36
EmilienMcrinkle: here is what james told me in private: http://paste.openstack.org/show/qKiDGxlYodcYQ1wH407n/18:36
EmilienMso now I'm very confused about ubuntu. Now we have to wait to see if b2 is working18:37
EmilienMpabelanger: https://review.openstack.org/#/c/22022418:47
anteayaEmilienM crinkle okay great, just wanted to ensure we all were in a happy place with creating published docs18:47
anteayawill start setting up those patches for review18:47
EmilienMglance is broken on centos https://github.com/openstack/glance/commit/484ef1b40b738c87adb203bba6107ddb4b04ff6e18:53
EmilienMnew dependency is missing18:53
EmilienMcrinkle: we are wondering about the repo name for the developer doc18:55
EmilienMI was wondering about puppet-openstack-doc or puppet-openstack-documentation18:55
EmilienMany thoughts here?18:55
crinkleEmilienM: what do the other projects use?19:03
EmilienMcrinkle: their own git repo19:03
EmilienMtempest.git, neutron.git, etc19:03
EmilienMbut we don't have one repo19:03
crinkle¯\_(ツ)_/¯19:03
EmilienM:)19:03
EmilienMif no feedback, I'll go for puppet-openstack-doc19:04
EmilienManteaya: let's wait until tomorrow morning19:04
EmilienMso people can have time to read ML and give their opinion19:04
EmilienManteaya: and tomorrow morning we take decision of the repo naming.19:04
EmilienMand eventually start the work19:04
mwhahahafuel uses fuel-docs19:05
mwhahahajust as a comment on that19:05
anteayaEmilienM: as you wish19:06
* anteaya fetches a pitcher from the rafters19:06
EmilienMmwhahaha: yeah or puppet-docs19:07
EmilienMbut I like want to steal 'puppet' because infra also use it19:09
mwhahahathe danger of puppet-openstack-doc(s) is that it might be thought as only docs for a puppet-openstack module, but it would go well with the puppet-openstack-specs repo out there.19:10
mwhahahanames are hard :(19:10
EmilienMwe have puppet-openstack-specs, puppet-openstack-integration19:12
EmilienMlet's use puppet-openstack-docs or something19:12
EmilienMI think nobody really cares19:13
mwhahahathat too19:13
EmilienMbut to keep the topic open to our group, I'll let people until tomorrow morning to say something else19:13
EmilienMotherwise I'll ask anteaya to use puppet-openstack-docs19:13
pabelangernibalizer: experimental job for puppet-unit running now, just waiting for a node19:13
EmilienMrichm: is this patch in staled? https://review.openstack.org/#/c/178456/ like can we abandon it?19:14
richmEmilienM: If Keystone ever fixes the bug where endpoints created with v3 cannot be viewed with v2, or if we ever switch the entire world to never use v2 and only use v3, then the review is valid19:22
EmilienMlol19:22
EmilienMfair answer19:22
richmEmilienM: so I'm not really sure what to do with it19:23
richmis there some way to mark a review Future19:24
EmilienMrichm: I'll keep it for now - Im just triaging patches19:24
EmilienMrichm: no, but -1 WORKFLOW seems good here19:24
richmah, ok19:24
EmilienMpabelanger: https://review.openstack.org/17802619:28
EmilienMany core can review https://review.openstack.org/#/c/209290/ and https://review.openstack.org/#/c/209292/ ? they are bump patches to go in Liberty, for Heat and Ironic19:31
EmilienMalso this patch to enable manila logs in beaker: https://review.openstack.org/#/c/213509/19:33
EmilienMcrinkle: see what james told me: http://paste.openstack.org/show/qKiDGxlYodcYQ1wH407n/19:38
EmilienMI replied on your comment19:40
crinkleso we should be using staging or proposed?19:40
crinklei thought long-term proposed was the preferred option19:40
*** mrmartin has quit IRC19:47
EmilienMcrinkle: I think we are in a bad period now19:53
EmilienMcrinkle: we should used 'proposed' which is today b1 which is broken19:53
EmilienMso we have 3 options19:53
EmilienM1/ wait for b2, coming tonight or this week-end and switch to 'proposed', and hope it works19:54
EmilienM2/ continue to use staging and keep reporting bugs every 2 minutes (and eventually burnout)19:54
EmilienM3/ do nothing, wait until trusty-updates/liberty (which should be the stable repo at the end)19:55
EmilienMI vote for 1/ or 3/19:55
EmilienMif we vote for 3/, I'll propose to set beaker jobs non voting for trusty so we can move forward and continue to land patches (still tested on RDO)19:55
crinkleI vote for 1, that seemed like the best option yesterday and waiting till tonight doesn't seem unreasonable to me19:56
EmilienMcrinkle: even monday20:08
EmilienMcrinkle: we are not in a hurry now20:08
EmilienMmgagne: I can't find your bug about api paste ini file provider which is useless20:14
EmilienMmgagne: if you have the URL sometimes20:14
EmilienM_ody: I dropped a comment about that on https://docs.google.com/spreadsheets/d/1Q8Db0jrv3dZQ8FbKhwpIjJRkI29Q571-FGs6VD_mVSQ/edit#gid=67753167920:16
EmilienM_ody: for heat blocker20:16
EmilienMcrinkle: I hoped during the sprint we could merge my patches on integration testing (3 patches) so we pabelanger could rebase his work to initiate multi node and I could move forward with other services without rebasing all the time - what do you think?20:51
crinkleEmilienM: I still think don't think it makes sense to merge patches for tests when the tests are failing and therefore not adding any value20:54
crinkleEmilienM: can we add depends-on patches in order to make progress?20:55
EmilienMcrinkle: they're failing on trusty only20:55
EmilienMbut well, yeah we can continue to make progress using depends-on & rebase.. it's just non blocking to merge them since they are non voting and the code won't change since it's packaging issues20:56
EmilienMcrinkle: so you want to wait until ubuntu works?20:59
crinkleEmilienM: i don't care that much21:00
crinklewhat's the list again?21:00
EmilienMNeutron: https://review.openstack.org/21683121:01
EmilienMNova: https://review.openstack.org/21693821:01
EmilienMand Tempest run: https://review.openstack.org/21735221:01
EmilienMcrinkle: "Shouldn't we be doing this in puppet?" > we can't, this the bash commands are hacks to have floating IP21:07
mgagneEmilienM: https://bugs.launchpad.net/puppet-cinder/+bug/148235121:08
openstackLaunchpad bug 1482351 in puppet-cinder "Keystonemiddleware configs should be in main configuration file" [Low,Confirmed]21:08
EmilienMand l3 agent needs to be restarted21:08
EmilienMmgagne: you rocks21:08
EmilienM_ody, Hunner https://bugs.launchpad.net/puppet-cinder/+bug/1482351 see that bug, and the unit tests that are missing is our modules should not be a blocker IMHO21:08
EmilienMcrinkle: there is no way to run it with puppet now I guess21:09
_odyEmilienM: They aren't.  Only things in red are blockers.21:09
crinkleso i thought our tests were supposed to 1) run puppet then 2) run tempest, if there's a bunch of bash configuration in the middle that doesn't seem like our puppet works21:09
EmilienM_ody: nice, sorry for the noise21:09
EmilienMcrinkle: the bash code is an hack to make floating IP works in OpenStack Infra21:10
EmilienMI took the devstack way to fake br-ex21:10
EmilienMand being able to ping floating IP with a fake public network21:10
EmilienMI create br-ex in bash because puppet-vswitch has a bug where the bridge is created only after second run, there is a TODO about that in the code21:11
crinkleEmilienM: is this to make multinode work? or is this still for single node?21:11
EmilienMit's single node21:11
EmilienMfor multi node, we will have to do more tricks21:11
EmilienMif we want floating IPs21:11
EmilienMdevstack does the same21:11
EmilienMbecause we don't use real public network21:12
EmilienMwe fake it21:12
crinkleEmilienM: okay, could you expand the comment to explain that a little more21:12
EmilienMexcept if RAX/HP can give up public network interface :o)21:12
EmilienMcrinkle: ok sure thing21:12
clarkbEmilienM: you should just be running the devstack-gate function IMO21:13
clarkbdon't copy paste it, source it21:13
EmilienMclarkb: I did not copy/paste code21:13
EmilienMclarkb: devstack code is not doing exactly the same thing but we can think at sourcing devstack scripts later21:14
EmilienMclarkb: the thing is, it's not a function iirc21:14
clarkbit is a function21:14
clarkbnot devstack, devstack-gate21:14
EmilienMclarkb: ok, looking now21:16
clarkbyou need an overlay l2 network to be able to ping from one host to the other and vice versa21:16
clarkband tempest tests do that so kinda necessary21:16
EmilienMcrinkle: replied, let me know if it's enough ( I'm looking now to source devstack-gate )21:17
EmilienMclarkb: right21:17
EmilienMclarkb: ovs_gre_bridge ?21:19
clarkbEmilienM: yup21:19
EmilienMk21:19
clarkbEmilienM: it treats the primary node as the "switch" and every other subnode connects to the primary21:20
EmilienMclarkb: using the function saves me 2 lines of code, thanks :)21:21
crinkleEmilienM: that explanation sounds good, could you add it as a comment in the code?21:22
EmilienMcrinkle: yes. I'm also addressing clarkb suggestion21:22
crinkleEmilienM: cool21:23
clarkbEmilienM: that and you don't have to debug that stuff21:24
clarkbbecause trust me its crazy to debug21:24
clarkband the first time someone asks for ssh access to the test env to debug their own overlay setup is when I tell them to use the one that we have working :)21:26
clarkbso just skip ahead and use the one that works21:26
crinklethanks clarkb :)21:26
EmilienMyeah thanks21:31
EmilienMclarkb: which example do you suggest to use for single node? br-ex?21:31
clarkbfor single node you odn't need anything special, neutron should handle it all21:31
EmilienMor br-ex is for dvr21:31
clarkbno br-ex is a general neutron thing, its the bridge where floating IPs are assignged and how they get off host to the world21:32
EmilienMI'm trying ti figure ovs_gre_bridge arguments21:32
clarkbbr-int is where all the private VM traffic flows21:32
EmilienMyeah, but in your code it's enabled if dvr is enabled21:32
EmilienMI have basic knowledge on neutron, got it21:32
clarkbEmilienM: oh right because in non dvr the primary node is the network node and is where tempest runs21:33
EmilienMk21:33
clarkbEmilienM: so if tempest and netowrk node are in the same place yo udon't need this21:33
EmilienMclarkb: I don't need this function?21:33
clarkbyou only need it if you split those two, which we do in DVR because each host is a network node iwth floating IPs attached to br-ex21:33
clarkbEmilienM: if you put tempest and network on the same host you shouldn't21:33
clarkbbecause everything gets backhauled over br-int to the network node21:34
EmilienMI don't see how you can test floating IP without it21:34
EmilienMat least it failed to me21:34
EmilienMclarkb: you still need to manage floating IP (external) network21:34
clarkbEmilienM: if tempest is on the same host as the network node all the floating IPs are on the same machine as tempest21:34
EmilienMyes21:35
EmilienMbut how do you route 200.0.0.0/24 for example21:35
clarkbEmilienM: only if those IPs are on a different machine than tempest (or whatever it is that is talking to them)21:35
clarkbEmilienM: we use 172.24.5.0/25 and all those IPs are on the same host as tempest when not using DVR21:35
clarkbEmilienM: so the route is bsaed on locally attached interfaces, linux knows to put the packets there21:35
EmilienMso I just create an external network with neutron api and that's it?21:36
clarkbEmilienM: yes, but only if tempest is on the same machine as your br-ex21:36
EmilienMclarkb: I'm running single node21:36
EmilienMall the time21:36
clarkbif br-ex is in a differnet location as in the case of DVR or in the care of splitting netowrk services apart from tempest then you need the overlay21:37
EmilienMbut you told be I did not need br-ex21:37
EmilienMforget about DVR now21:37
EmilienMwe will see later that thing :-)21:37
clarkbEmilienM: you don't need to make it, iirc neutron makes it21:37
EmilienMwow21:37
EmilienMwhy did it fail for me21:37
clarkbit definitely makes br-int21:37
EmilienMok let's try again21:37
clarkbmaybe it only makes one of the two? that would be funny21:37
EmilienMin l3 agent, you specify br-ex21:37
EmilienMfor the external bridge21:38
EmilienMso I need to set br-int?21:38
clarkbno I am just using br-int as a thing that neutron definitely creates21:38
clarkband I am pretty sure that devstack does not make br-ex either and neutron creates it21:38
EmilienMyeah but how you tell neutron l3 agent to use br-int21:38
EmilienMbecause by defeault it's using br-ex21:38
EmilienMbr-int is managed by neutron agent, right21:39
EmilienMbut l3 agent is using br-ex by default21:39
EmilienMafik21:39
clarkbby the l2 agent? its for private VM networking not related to l3 iirc21:39
clarkbyes l3 uses br-ex because thats where you get out to the world21:39
EmilienMclarkb: https://github.com/openstack/neutron/blob/master/etc/l3_agent.ini#L6721:39
clarkbyes br-ex is the correct name...21:40
clarkbI am sayin neutron makes the bridge for you21:40
clarkbyou shouldn't need to do anything special21:40
EmilienMbut I want to test l321:40
EmilienMnot private VM networking21:40
clarkbI know ...21:40
EmilienMok, let's try..21:41
clarkbso you make floating IPs on some range, say 172.24.5.0/24. Those become interfaces attached to br-ex on that machine21:41
clarkbbceause you have local interfaces for those IP addresses linux does not need any special route information, it says "I am directly attached ot that IP I will just deliver packets to it"21:41
clarkbnow you may need forwarding to be neabled in your kernel/iptables but otherwise it should just work21:41
clarkbnow, what that cannot do is talk off of the one host21:42
EmilienMclarkb: right but I think you need to create the interface 172.24.5.1 as the external network gateway21:42
clarkbonly if you want to be able to reach those VMs from elsewhere21:42
clarkbwhich was my point about tempest being colocated21:42
clarkbif the only traffic is on one host you don't need anything21:42
clarkbif the traffic spans >1 host then you need the overlay or similar21:42
EmilienMok this is what I missed ^^^^21:42
EmilienMkk21:42
* EmilienM tyring21:42
* EmilienM trying*21:42
EmilienMpabelanger: am I wrong or dsvm-centos7 image have not been built for long?21:47
EmilienMI see 2015-09-03 18:02 in nodepool.o.o21:48
clarkbEmilienM: correct there is a bug with centos and puppet and systemd and iptables so the build sfail21:51
EmilienMok good to know21:51
EmilienMI was wondering why infra script were not updated21:51
clarkbEmilienM: tl;dr is we attempt to use iptables-server but systemd doesn't relaod its config to know that iptables is avalid service after the package install21:51
clarkbthen we try refreshing the iptables service and it fails whihc makes the buildfail21:51
EmilienMoops21:51
EmilienMI would be interested to know why it fails to refresh the service21:52
clarkbI am pretty sre thats a centos7 bug but I haven't had the time to make yet another account to file the bug21:52
EmilienMwith journalctl21:52
clarkbEmilienM: because the ocnfig isn't loaded.21:52
clarkbEmilienM: so the packge installs and puts the unit file in /usr/lib/systemd/system but no systemctl daemon-reload is issued21:52
EmilienMI can ping someone from RH21:52
clarkbso systemctl start iptable sfails21:52
EmilienMpabelanger: do you know someone we can escalate?21:52
EmilienMotherwise I'll ask to RDO people to help21:53
clarkbEmilienM: this is specifically on hpcloud which uses upstream images, rax doesn't have the problem but they make their own images which may include iptables already21:53
EmilienMI see21:53
EmilienMwe need to fix it upstream21:53
clarkbEmilienM: when I wa stesting if I did puppet || systemctl daemon-reload && puppet the second puppet run succeeds21:54
EmilienMthis is not really clean, yeah we should fix it21:54
EmilienMmfisch, crinkle: I'm trying to help debugging also with https://review.openstack.org/#/c/218587/ (devstack way again)22:02
EmilienMsee http://logs.openstack.org/87/218587/4/check/gate-puppet-openstack-integration-dsvm-trusty/94fa17c/logs/dstat.txt.gz22:02
pabelangerEmilienM: Ya, ianw should have looked at it22:11
pabelangerEmilienM: I hope to look at it when back to Ottawa22:11
EmilienMnibalizer: sorry, I lost the URL of openstackci dashboard you made, can you paste it again please?22:41
EmilienMfound it http://spencerkrum.com/openstack/ci/#22:45
*** jeblair has quit IRC22:59
nibalizerEmilienM: woo23:08
EmilienMpabelanger: see workaround https://review.openstack.org/#/c/217352/40/run_tests.sh,cm23:08
EmilienMnibalizer: I use it, I like it23:09
nibalizerif you actually like it we should move it to infra or somehow wrap it up in one of the infra systems23:09
nibalizerI don't like running/providing serivces external to infra23:09
EmilienMnibalizer: I think I already told you I liked it a lot and I was told a specs was in process23:10
nibalizerhrm23:10
nibalizerwell that was right after I made it23:10
nibalizerso if it still proves valuable after the initial excitement has passed then that's telling23:11
clarkbnibalizer: is that something that grafana/grafyaml can do for us?23:12
clarkb(I am unsure of grafanas capabilities)23:12
nibalizerlikely!23:12
pabelangerYa, I want to dive into it and see how it works nibalizer23:17
EmilienMsee you later folks23:21

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!