[tripleo] Switch to tripleo-container-manage by default (replacing Paunch)
Hi folks, Some work has been done to replace Paunch and use the new "podman_container" Ansible module; It's possible thanks to a role that is now documented here: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain... While some efforts are still ongoing to replace container-puppet.py (which uses Paunch to execute a podman run); the tripleo-container-manage role has reached stability and enough maturity to be the default now. I would like to give it a try and for that I have 2 patches that would need to be landed: https://review.opendev.org/#/c/700737 https://review.opendev.org/#/c/700738 The most popular question that has been asked about $topic so far is: how can I run paunch debug to print the podman commands. Answer: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain... Please raise any concern here and we'll address it. Hopefully we can make the default on time before U cycle ends. On a side note: I prepared all the backports to stable/train so the feature will be available in that branch as well. Thanks, -- Emilien Macchi
Nicely done Emilien! -- Kevin Carter IRC: Cloudnull On Wed, Jan 15, 2020 at 8:38 AM Emilien Macchi <emilien@redhat.com> wrote:
Hi folks,
Some work has been done to replace Paunch and use the new "podman_container" Ansible module; It's possible thanks to a role that is now documented here:
https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain...
While some efforts are still ongoing to replace container-puppet.py (which uses Paunch to execute a podman run); the tripleo-container-manage role has reached stability and enough maturity to be the default now. I would like to give it a try and for that I have 2 patches that would need to be landed: https://review.opendev.org/#/c/700737 https://review.opendev.org/#/c/700738
The most popular question that has been asked about $topic so far is: how can I run paunch debug to print the podman commands. Answer: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain...
Please raise any concern here and we'll address it. Hopefully we can make the default on time before U cycle ends.
On a side note: I prepared all the backports to stable/train so the feature will be available in that branch as well.
Thanks, -- Emilien Macchi
On Wed, Jan 15, 2020 at 10:31 AM Carter, Kevin <kevin@cloudnull.com> wrote:
Nicely done Emilien!
On Wed, Jan 15, 2020 at 8:38 AM Emilien Macchi <emilien@redhat.com> wrote:
[...]
The most popular question that has been asked about $topic so far is: how can I run paunch debug to print the podman commands. Answer: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain...
I just thought about it but I thought we could have a tripleo command like : $ openstack tripleo container deploy --name keystone --host overcloud-controller1 $ openstack tripleo container deploy --name keystone --host overcloud-controller1 --dry-run It would use the new Ansible-runner to execute something like: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain... Dry-run would basically run the same thing with Ansible in check mode. In overall, we would still have a CLI (in tripleoclient instead of Paunch); and most of the container logic resides in podman_container which aims to be shared outside of TripleO which has been the main goal driving this effort. What do you think? -- Emilien Macchi
On Wed, Jan 15, 2020 at 9:43 AM Emilien Macchi <emilien@redhat.com> wrote:
On Wed, Jan 15, 2020 at 10:31 AM Carter, Kevin <kevin@cloudnull.com> wrote:
Nicely done Emilien!
On Wed, Jan 15, 2020 at 8:38 AM Emilien Macchi <emilien@redhat.com> wrote:
[...]
The most popular question that has been asked about $topic so far is: how can I run paunch debug to print the podman commands. Answer: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain...
I just thought about it but I thought we could have a tripleo command like :
$ openstack tripleo container deploy --name keystone --host overcloud-controller1 $ openstack tripleo container deploy --name keystone --host overcloud-controller1 --dry-run
+1
It would use the new Ansible-runner to execute something like: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain... Dry-run would basically run the same thing with Ansible in check mode.
In overall, we would still have a CLI (in tripleoclient instead of Paunch); and most of the container logic resides in podman_container which aims to be shared outside of TripleO which has been the main goal driving this effort.
What do you think?
I like it! I think this is a very natural progression, especially now that we're using ansible-runner and have built a solid foundation of roles, filters, modules, etc.
-- Emilien Macchi
On 15.01.2020 16:42, Emilien Macchi wrote:
On Wed, Jan 15, 2020 at 10:31 AM Carter, Kevin <kevin@cloudnull.com <mailto:kevin@cloudnull.com>> wrote:
Nicely done Emilien!
On Wed, Jan 15, 2020 at 8:38 AM Emilien Macchi <emilien@redhat.com <mailto:emilien@redhat.com>> wrote:
[...]
The most popular question that has been asked about $topic so far is: how can I run paunch debug to print the podman commands. Answer: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain...
I just thought about it but I thought we could have a tripleo command like :
$ openstack tripleo container deploy --name keystone --host overcloud-controller1 $ openstack tripleo container deploy --name keystone --host overcloud-controller1 --dry-run
It would use the new Ansible-runner to execute something like: https://docs.openstack.org/tripleo-ansible/latest/roles/role-tripleo-contain... Dry-run would basically run the same thing with Ansible in check mode.
In overall, we would still have a CLI (in tripleoclient instead of Paunch); and most of the container logic resides in podman_container which aims to be shared outside of TripleO which has been the main goal driving this effort. What do you think?
Yes please, "shared outside of TripleO" is great aim to accomplish. I think a simple standalone pomdan+systemd+tripleo-container-manage might lead us much further than only Tripleo, and only OpenStack cases.
-- Emilien Macchi
-- Best regards, Bogdan Dobrelya, Irc #bogdando
participants (3)
-
Bogdan Dobrelya
-
Carter, Kevin
-
Emilien Macchi