| openstackgerrit | Merged opendev/system-config master: Test etherpad with testinfra https://review.opendev.org/734880 | 00:03 |
|---|---|---|
| mordred | review-testINA104.130.159.4 | 00:13 |
| mordred | review-testINAAAA2001:4800:7818:102:be76:4eff:fe04:3a2e | 00:13 |
| mordred | I'm not going to dns that - I'm also going to snapshot it and tear it down and stuff | 00:14 |
| mordred | but it's there for now | 00:14 |
| openstackgerrit | Ian Wienand proposed opendev/bindep master: Use abstracted virtualenv_command from ensure-pip https://review.opendev.org/735267 | 00:23 |
| openstackgerrit | Ian Wienand proposed opendev/bindep master: Use abstracted virtualenv_command from ensure-pip https://review.opendev.org/735267 | 00:41 |
| openstackgerrit | Ian Wienand proposed opendev/bindep master: Add centos 8 and focal testing https://review.opendev.org/735269 | 00:42 |
| ianw | dropping "--verbose" from pip during the wheel build dropped the build log output from 500+mb bz2 compressed (2gb uncompressed) to 1.2mb compressed | 00:44 |
| *** Meiyan has joined #opendev | 00:56 | |
| mordred | ianw: WOW | 01:01 |
| *** seongsoocho has quit IRC | 01:11 | |
| *** vblando has quit IRC | 01:11 | |
| openstackgerrit | Merged openstack/diskimage-builder master: Remove virtualenv activation https://review.opendev.org/734414 | 01:17 |
| *** vblando has joined #opendev | 01:19 | |
| *** mnasiadka has quit IRC | 01:19 | |
| *** mnasiadka has joined #opendev | 01:23 | |
| *** seongsoocho has joined #opendev | 01:28 | |
| *** ravsingh has joined #opendev | 03:01 | |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: Acutally run system-config arm64 test on an arm64 node https://review.opendev.org/735281 | 04:14 |
| ianw | ^ that explains why i thought that openafs was working on arm64 xenial, when it actually wasn't on the wheel builder | 04:14 |
| ianw | but ... we have wheels! http://mirror.iad.rax.opendev.org/wheel/ ... everything except xenial arm64 (fixed by https://review.opendev.org/735055) is populated | 04:16 |
| openstackgerrit | Ian Wienand proposed opendev/bindep master: Add centos 8 and focal testing https://review.opendev.org/735269 | 04:24 |
| openstackgerrit | Ian Wienand proposed opendev/bindep master: Cull the test bindep file https://review.opendev.org/735282 | 04:24 |
| *** prometheanfire has quit IRC | 04:28 | |
| openstackgerrit | Ian Wienand proposed openstack/project-config master: Add all python versions to bindep tox testing https://review.opendev.org/735284 | 04:45 |
| *** prometheanfire has joined #opendev | 04:49 | |
| *** prometheanfire has quit IRC | 05:05 | |
| *** prometheanfire has joined #opendev | 05:15 | |
| *** sgw has quit IRC | 05:44 | |
| *** ravsingh has quit IRC | 06:02 | |
| ianw | fungi: there's a few bindep changes @ https://review.opendev.org/#/q/topic:bindep-venv+status:open that will be helpful to avoid virtualenv issues | 06:26 |
| jrosser | i'm just trying out the centos-7-plain nodes and getting node_failure, this is my change https://review.opendev.org/#/c/735288/2/zuul.d/jobs.yaml | 06:32 |
| jrosser | the ubuntu-bionic-plain ones have started running ok | 06:34 |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: AFS: add note on volume creation servers https://review.opendev.org/735061 | 06:38 |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: Add tool to export Rackspace DNS domains to bind format https://review.opendev.org/728739 | 06:49 |
| ianw | jrosser: that is embarrassing, i appear to have overlooked centos-7-plain in https://opendev.org/openstack/project-config/src/branch/master/nodepool/nodepool.yaml | 06:58 |
| ianw | if someone would like to add it, it's just copy paste from centos-8-plain but change 8 to 7 | 07:02 |
| openstackgerrit | Jonathan Rosser proposed openstack/project-config master: Add missing centos-7-plain disk images https://review.opendev.org/735301 | 07:20 |
| *** xiaolin has quit IRC | 07:44 | |
| *** xiaolin has joined #opendev | 07:46 | |
| yoctozepto | morning | 07:50 |
| yoctozepto | kolla has a problem with infra ubuntu mirrors since 2020-06-10 afternoon (UTC) - trying to install sqlite3 gets us sqlite3 : Depends: libsqlite3-0 (= 3.22.0-1ubuntu0.3) but 3.22.0-1ubuntu0.4 is to be installed - example mirror mirror.bhs1.ovh.opendev.org | 07:51 |
| yoctozepto | (ubuntu bionic) | 07:51 |
| *** hashar has joined #opendev | 07:56 | |
| *** iurygregory has joined #opendev | 07:58 | |
| *** moppy has quit IRC | 08:01 | |
| *** moppy has joined #opendev | 08:01 | |
| *** iurygregory has quit IRC | 08:02 | |
| *** tosky has joined #opendev | 08:04 | |
| frickler | yoctozepto: I saw that locally yesterday, too, seems some image got updated faster than the mirror, let me check update logs | 08:05 |
| frickler | infra-root: grafana shows ubuntu.mirror being 9 days old, sadly I'm on a different workstation currently and cannot access my ssh key, can someone else have a look, please? | 08:11 |
| yoctozepto | frickler: thanks for checking | 08:17 |
| *** tkajinam has quit IRC | 08:23 | |
| *** DSpider has joined #opendev | 08:25 | |
| openstackgerrit | Chris MacNaughton (icey) proposed openstack/diskimage-builder master: Stop bringing the test environment into the mocks https://review.opendev.org/735309 | 08:37 |
| *** xiaolin has quit IRC | 08:52 | |
| *** elod has quit IRC | 08:57 | |
| *** elod has joined #opendev | 09:03 | |
| *** priteau has joined #opendev | 09:13 | |
| *** xiaolin has joined #opendev | 09:28 | |
| *** donnyd has joined #opendev | 09:36 | |
| *** priteau has quit IRC | 09:39 | |
| *** priteau has joined #opendev | 09:41 | |
| *** xiaolin has quit IRC | 09:53 | |
| *** Meiyan has quit IRC | 09:57 | |
| *** nautics889 has joined #opendev | 10:40 | |
| *** ravsingh has joined #opendev | 11:19 | |
| yoctozepto | infra-root, frickler: any luck with that ubuntu mirror? please let me know if this is a bigger issue as we might be better off just using public ubuntu mirrors in the meantime | 11:22 |
| nautics889 | Hello, recently I've encountered an unexpected filter behavior in my OpenStack Horizon admin's dashboard. I deployed Horizon (train release), created an admin account and created two instances in two different project. After that i discovered that filter by project name at /admin/instances/ works some wrong way, it is clearly represented at this screenshot — https://prnt.sc/sygu0c . Instead of | 11:31 |
| nautics889 | dropping results that don't match filter string it just fetches all and return the whole lookup. I started debugging and discovered that actually by pressing of "filter" button it calls ``filter`` method eventually, and it defined at horizon/tables/action exactly in ``FilterAction`` class (https://opendev.org/openstack/horizon/src/branch/master/horizon/tables/actions.py#L522). As you can see it is | 11:31 |
| nautics889 | just a mock-method without filtering implementation. Does it mean that i should implement filtering on my own? | 11:31 |
| *** hashar has quit IRC | 11:45 | |
| AJaeger | nautics889: we cannot help with OpenStack install, this is the channel for developing the infrastructure OpenStack and other repos use for collaboration. Best to ask in #openstack or a more specific channel like #openstack-horizon | 12:20 |
| *** lpetrut has joined #opendev | 13:15 | |
| *** ravsingh has quit IRC | 13:29 | |
| fungi | frickler: yoctozepto: i can start looking into the ubuntu mirror problem now | 13:31 |
| fungi | Could not lock the VLDB entry for the volume 536870949. VLDB: vldb entry is already locked | 13:32 |
| yoctozepto | fungi: kafs again? | 13:33 |
| fungi | i don't think kafs is involved here at all, this is a cronjob on an ubuntu xenial instance | 13:34 |
| fungi | but the volume lock on the read only replica looks like the only problem. /afs/.openstack.org/mirror/ubuntu/timestamp.txt says the content updated 2020-06-12T12:40:55,821215441+00:00 so we probably have current packages in the read-write volume | 13:35 |
| fungi | most likely a vos release took so long its kerberos ticket timed out | 13:35 |
| fungi | as soon as i can confirm there's not one in progress i'll delete the stale volume lock and start one with -localauth directly on the fileserver | 13:36 |
| corvus | fungi: i thought we switched all the vos releases to run on a server and use -localauth | 13:38 |
| corvus | or is that just the ones on the new server? | 13:39 |
| *** auristor has quit IRC | 13:40 | |
| fungi | that's just the new server, so rsync-based mirroring scripts like rsync | 13:41 |
| fungi | we haven't yet done the work to port the reprepro configuration to the newer server | 13:41 |
| fungi | anyway, i've confirmed there is no current transaction in progress for that volume | 13:41 |
| fungi | and have now released the lock on the mirror.ubuntu volume | 13:42 |
| fungi | i'm holding a flock for that mirror on the mirror-update server in a root screen session so it won't try to update right now | 13:42 |
| fungi | and have vos release running with -localauth on afs01.dfw.o.o | 13:42 |
| fungi | in a root screen session there | 13:42 |
| fungi | Starting ForwardMulti from 536870950 to 536870950 on afs02.dfw.openstack.org (full release). | 13:43 |
| fungi | this may take a while | 13:43 |
| fungi | i'll keep tabs on it | 13:43 |
| fungi | #status log full release of mirror.ubuntu afs volume is underway ina root screen session on afs01.dfw.openstack.org, mirror update flock is held in a root screen session on mirror-update.openstack.org | 13:44 |
| openstackstatus | fungi: finished logging | 13:44 |
| *** ravsingh has joined #opendev | 13:45 | |
| corvus | it's probably too late to delete the nodepool images, since the report goes back to 6-10 | 13:48 |
| *** auristor has joined #opendev | 13:49 | |
| corvus | yoctozepto: it's hard to predict how long this will take to catch up, but it could take most of the day. | 13:50 |
| yoctozepto | fungi, corvus: thanks for handling :-) it's fine as long as it unblocks us for the weekend and next week | 13:52 |
| openstackgerrit | Guillaume Chauvel proposed zuul/zuul-jobs master: ensure-tox: Avoid Reinstalling tox venv if present https://review.opendev.org/735339 | 13:58 |
| openstackgerrit | Guillaume Chauvel proposed zuul/zuul-jobs master: ensure-twine: Avoid Reinstalling twine if present https://review.opendev.org/735340 | 13:58 |
| fungi | yoctozepto: out of curiosity, what's the environment in which libsqlite3-0 3.22.0-1ubuntu0.4 is being found in your failures? our most recent ubuntu-bionic image still has 3.22.0-1ubuntu0.3 because it's built using our mirrors | 14:26 |
| fungi | (we build our images using our mirrors to avoid these sorts of mismatches) | 14:27 |
| fungi | i'm curious to see one of the failed build logs | 14:28 |
| fungi | out most recent image build was https://nb01.opendev.org/ubuntu-bionic-0000107538.log | 14:29 |
| fungi | er, our most recent | 14:29 |
| yoctozepto | fungi: in-container obviously, logs in a moment | 14:30 |
| yoctozepto | fungi: example log https://653043b8f3591a90e82b-cac0169e2fba8cf45d3382fd7c816a5c.ssl.cf5.rackcdn.com/732391/1/check/kolla-build-ubuntu-binary/4aaf28b/kolla/build/000_FAILED_manila-share.log | 14:31 |
| fungi | yoctozepto: were the container images built from our mirrors? or some other package source? | 14:31 |
| *** mlavalle has joined #opendev | 14:32 | |
| yoctozepto | fungi: a different wording log: https://653043b8f3591a90e82b-cac0169e2fba8cf45d3382fd7c816a5c.ssl.cf5.rackcdn.com/732391/1/check/kolla-build-ubuntu-binary/4aaf28b/kolla/build/000_FAILED_mistral-base.log | 14:32 |
| yoctozepto | fungi: package source is your mirrors but the base images are straight from official ones | 14:32 |
| yoctozepto | fungi: so it's official ubuntu bionic image | 14:32 |
| yoctozepto | fungi: with repos replaced for our installs | 14:32 |
| fungi | ahh, okay, so the problem in this case is that the container base images are newer than our mirror state | 14:34 |
| fungi | unrelated to our nodepool images | 14:34 |
| fungi | corvus: ^ do rolling back images in nodepool wouldn't have helped anyway | 14:34 |
| fungi | er, so | 14:34 |
| corvus | ya | 14:34 |
| fungi | this is making more sense now | 14:35 |
| fungi | thanks for the additional detail, yoctozepto! | 14:35 |
| fungi | also explains why the problem wasn't much more widespread | 14:36 |
| *** lpetrut has quit IRC | 14:36 | |
| yoctozepto | fungi: yw :-) | 14:38 |
| *** sgw has joined #opendev | 14:38 | |
| openstackgerrit | James E. Blair proposed zuul/zuul-jobs master: Add test-build-container-image-release job https://review.opendev.org/735249 | 14:44 |
| openstackgerrit | James E. Blair proposed opendev/system-config master: WIP: add Zookeeper TLS support https://review.opendev.org/720302 | 14:48 |
| mnaser | clarkb: https://review.opendev.org/#/c/714478/ i see you put a +2 down but the rename hasn't been done (i can search for project:x/whitebox-tempest-plugin) | 14:53 |
| mnaser | i'm unsure if the rename was actually done or not? | 14:53 |
| mnaser | (i saw AJaeger dropped their -W too without much commentary so just wanted to know -- bc we have a governance change that's depnded on this for a while so yeah) | 14:54 |
| corvus | mnaser: it's scheduled for later today: http://lists.opendev.org/pipermail/service-announce/2020-June/000004.html | 14:54 |
| mnaser | i really should get on the opendev mailing lists. i'll register today | 14:54 |
| mnaser | corvus: thank you :) | 14:55 |
| corvus | np :) | 14:55 |
| corvus | mnaser: i'm guessing AJaeger removed W because of the scheduled time (very late in his tz); i'll add mine now | 14:56 |
| mnaser | corvus: ah, that makes total sense now. always a few steps ahead of us :) | 14:57 |
| * mnaser would have not thought to do that | 14:57 | |
| corvus | (just to be clear, this is a blocking -W i'm talking about :) | 14:57 |
| clarkb | I reviewed the change in preparation for today's renaming. +2'd it because I believe it is ready to go as soon as we are ready | 15:00 |
| fungi | i'm seeing if i can work out how to port our reprepro mirror setup from puppet to ansible, and then i'll double-check stuff for the rename maintenance | 15:06 |
| openstackgerrit | Merged openstack/project-config master: Deprecate Paunch https://review.opendev.org/734640 | 15:07 |
| fungi | grr, this is going to be a lot of erb to j2 loop conversions | 15:08 |
| fungi | and conditionals. not just substitutions | 15:08 |
| *** ravsingh has quit IRC | 15:09 | |
| AJaeger | corvus: thanks for adding your -W; I should have pinged here - didn't want to block it... | 15:20 |
| corvus | np | 15:21 |
| AJaeger | clarkb: regarding the interop changes: No job is dropped, I double checked. Only the sync to github is dropped. | 15:21 |
| clarkb | AJaeger: hrm I thought pypi publishing was dropped for one or two repos | 15:27 |
| AJaeger | clarkb: it was not there initially - openstack/interop has only the github sync for example | 15:31 |
| AJaeger | so, 2 out of four repos had pypi publishing - and still have it afterwards. All 4 drop the github sync | 15:31 |
| clarkb | got it | 15:32 |
| openstackgerrit | Clark Boylan proposed openstack/project-config master: Use https apt mirrors for image builds https://review.opendev.org/735362 | 15:38 |
| clarkb | fungi: ^ your comment about using the mirrors to build the images led me to ^. I've based it on ianw's pip and virtualenv change to avoid conflicts, but I figure thats a good hygiene change | 15:39 |
| openstackgerrit | James E. Blair proposed zuul/zuul-jobs master: Add test-build-container-image-release job https://review.opendev.org/735249 | 15:41 |
| fungi | clarkb: good idea! | 15:44 |
| openstackgerrit | James E. Blair proposed opendev/system-config master: WIP: add Zookeeper TLS support https://review.opendev.org/720302 | 15:45 |
| corvus | fungi, clarkb, mordred: our work on the zuul testing has paid off -- ^ that change/job is now producing sufficient logs to indicate that the zk tls change is not working and why. i've made 2 corrections so far based on it. | 15:46 |
| corvus | mind you, the job still succeeds because we don't yet have a way to test that zuul "works". but we can at least check the logs for startup errors. | 15:47 |
| mordred | corvus: \o/ | 15:47 |
| clarkb | corvus: cool, I'm glad the sort of simplified zuul install is useful in some way | 15:47 |
| fungi | do we have a good example of using loop to iterate over an associative array using both the keys and values from it? | 15:47 |
| clarkb | corvus: maybe for a testing aspect we can look for data in zk itself? | 15:47 |
| clarkb | look for side effects essentially | 15:47 |
| clarkb | fungi: I think the LE roles have stuff like that | 15:48 |
| corvus | fungi: try zuul.conf.j2 | 15:48 |
| fungi | thanks | 15:48 |
| fungi | ooh, will do | 15:48 |
| corvus | especially the end -- the connections list | 15:48 |
| clarkb | oh in jinja not ansible, ya zuul is probably better than LE for that | 15:48 |
| clarkb | corvus: for example doesn't zuul create the /zuul path? | 15:48 |
| corvus | clarkb: good idea, that should let us at least check the nodepool side -- and yes, now that you mention it, i think there's a /zuul too :) | 15:49 |
| fungi | well, the j2 example will come in handy as well, i'm going to need to do some similar fancy things in erb conversion | 15:49 |
| fungi | but i was actually looking for ansible, yes | 15:49 |
| corvus | ah sorry, i saw erb->j2 earlier and got stuck on that; i see you said "loop" earlier. i read that as a concept, not a keyword. communicating is hard. | 15:50 |
| fungi | loop: "{{ query('dict', mydict) }}" | 15:51 |
| fungi | and then refer to item.key and item.value | 15:51 |
| fungi | that seems to be the gist of it anyway | 15:51 |
| mordred | I wanna say there's a with_items? | 16:16 |
| mordred | fungi: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html#iterating-over-a-dictionary | 16:16 |
| mordred | fungi: so, loop: "{{ query('dict', mydict) | dict2items }}" I suppose | 16:17 |
| mordred | fungi: oh - wait - your query() thing is alsoa way to do that? neat | 16:18 |
| fungi | apparently. at least it's how the letsencrypt roles are using it | 16:18 |
| mordred | neat | 16:19 |
| fungi | https://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/letsencrypt-create-certs/tasks/main.yaml#L22-L25 | 16:20 |
| fungi | as an example | 16:20 |
| fungi | though that one only references item.key and not item.value | 16:20 |
| fungi | this one apparently has a nested dict: https://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/master-nameserver/tasks/main.yaml#L57-L65 | 16:21 |
| fungi | though it's using the dict2items filter | 16:22 |
| *** nautics889 has quit IRC | 17:19 | |
| *** nautics889 has joined #opendev | 17:23 | |
| johnsom | Hello OpenDev folks. The Octavia team has tagged the Ocata and Pike branches as EOL here: https://review.opendev.org/719097 I think the next step is to remove the branches from git. What do I need to do to facilitate that? | 17:40 |
| fungi | johnsom: at the moment, that's a manual action taken by a stable maint or release team representative, or can also be performed by one of our gerrit admins | 17:41 |
| fungi | the next version of gerrit we're now very close to upgrading to will give us the ability to better control branch deletion permissions via acl, which should make automating that in release management tooling a lot easier/safer | 17:42 |
| fungi | (the version we're on now was the first to add an api call for it) | 17:43 |
| johnsom | fungi Ok, Sean was asking if I had requested the deletion last night, which led me here. Lol | 17:43 |
| fungi | cool, yeah i can do that if everyone's ready for it | 17:47 |
| fungi | just double-checking stuff before i accidentally delete the wrong thing ;) | 17:48 |
| johnsom | fungi I think we are ready. The eol tags are applied, so we should be good to go | 17:49 |
| johnsom | I appreciate that! | 17:49 |
| smcginnis | fungi: Unless that was recently added, release managers do not have those rights. | 17:50 |
| fungi | smcginnis: we usually temporarily added a release manager to a group with those permissions | 17:51 |
| smcginnis | Usually? I've been aware of the last 5 or so times this has come up, and it's always been a matter of asking someone here to do that step. But if there's a different way we should be handling it, let me know. | 17:52 |
| fungi | #status log deleted openstack/python-octaviaclient branch stable/pike (previously d4a5507c99430a7efb4a0ab83a47ca48937b23cf) as requested by johnsom and smcginnis | 17:52 |
| openstackstatus | fungi: finished logging | 17:52 |
| smcginnis | I could see adding a flag to our deliverables file that would still keep the branch, but tell the automation to actually perform a delete of the branch. | 17:52 |
| fungi | smcginnis: it's varied, so i meant "usually when it wasn't done by a gerrit admin" (the times where a release manager or stable branch manager has agreed to process a list of them) | 17:52 |
| smcginnis | So in other words when Tony did a lot of clean up. ;) | 17:53 |
| fungi | #status log deleted openstack/octavia branch stable/ocata (previously c2fdffc3b748f8007c72e52df257e38756923b40) as requested by johnsom and smcginnis | 17:53 |
| openstackstatus | fungi: finished logging | 17:54 |
| fungi | #status log deleted openstack/octavia branch stable/pike (previously 2976a7f0f109e17930db8a61136526ead44ea7e5) as requested by johnsom and smcginnis | 17:54 |
| openstackstatus | fungi: finished logging | 17:54 |
| fungi | johnsom: smcginnis: those were the only three branches you needed deleting, right? | 17:54 |
| fungi | (two for octavia and one for the client) | 17:55 |
| *** nautics889 has quit IRC | 17:56 | |
| johnsom | fungi Correct, thank you | 17:56 |
| fungi | you're welcome! | 17:56 |
| *** nautics889 has joined #opendev | 17:57 | |
| johnsom | fungi Do we need to do anything for them on github? Or will that sync eventually? | 18:01 |
| *** priteau has quit IRC | 18:06 | |
| fungi | johnsom: the way those mirror jobs are written at the moment, the only trigger when new changes merge to those repositories, but after the next octavia or client change lands those will hopefully clear out | 18:19 |
| johnsom | Ok, cool | 18:20 |
| *** ysandeep|away is now known as ysandeep | 18:39 | |
| openstackgerrit | Sagi Shnaidman proposed zuul/zuul-jobs master: Add jobs for testing ensure-ansible https://review.opendev.org/734584 | 18:39 |
| clarkb | ya we would add tonyb as a gerrit admin temporarily | 18:41 |
| fungi | stuffing my face real quick and then i'll double-check that we've got everything ready for the maintenance | 18:57 |
| corvus | still t-2h right? | 19:04 |
| *** ysandeep is now known as ysandeep|away | 19:06 | |
| clarkb | corvus: yup | 19:06 |
| clarkb | infra-root https://review.opendev.org/#/c/735061/2 got updated with auristor's feedback and would be a good piece of documentation to not lose if anyone else has a moment to review that | 19:17 |
| corvus | done | 19:20 |
| corvus | it's....raining.... | 19:21 |
| corvus | that is decidedly out of season | 19:21 |
| clarkb | corvus: here too. Not completely abnormal for us though | 19:21 |
| corvus | mmm petrichor | 19:22 |
| clarkb | I have vivid memories of the summer I worked as an intern at Garmin because I didn't have a car and it was july and pouring rain | 19:23 |
| fungi | raining here too. luckily i saw the forecast and got caught up on yardwork earlier in the week. nws says to expect 6 solid days of wet | 19:26 |
| openstackgerrit | Merged opendev/system-config master: AFS: add note on volume creation servers https://review.opendev.org/735061 | 19:31 |
| fungi | so one of the implementation details for our reprepro mirroring is that we add the upstream package index signing keys to the local keyring for the user invoking reprepro... i assume we don't have anything like this i can crib from the ansible roles in system-config yet | 19:52 |
| clarkb | fungi: I don't think so | 19:54 |
| clarkb | we add things to the apt keyring but not user keyrings | 19:54 |
| fungi | this looks like it will do what we need, but is there a more official ansible stdlib option (other than using the file and command modules i guess)? https://github.com/tnt/ansible-gpg-import-module/blob/master/gpg_import.py | 19:55 |
| clarkb | fungi: https://github.com/ansible/ansible/issues/56262 I think no considering that is open | 19:56 |
| fungi | ahh | 19:57 |
| fungi | so do folks think using that third party gpg-import module is preferable to just freestylin' it ourselves? | 19:58 |
| clarkb | fungi: maybe we can make a simple freestyling module in system-config's role set | 19:58 |
| clarkb | then we don't have to bother with collections and galaxy and all of those changes | 19:58 |
| fungi | well, we may not even need a module, we could just shell out to gpg --import | 19:59 |
| fungi | basically wondering if doing it with file and command tasks is better/worse | 20:00 |
| clarkb | shelling out is probably best | 20:01 |
| clarkb | it ensures the toolchain is present and functional | 20:01 |
| fungi | cool, i can do that. it'll just be a few tasks with a loop and a list of keys anyway | 20:02 |
| fungi | (plus the files containing the key material we want imported of course) | 20:02 |
| fungi | is there a common pattern for feeding files shipped by a role into a command task without explicitly writing the file to the system somewhere first? | 20:07 |
| clarkb | you can load things like json and yaml into ansible from files as vars | 20:07 |
| clarkb | or put the content as a defaults var directly | 20:07 |
| clarkb | I guess it doesn't have to be a default either can be set as a regular var | 20:08 |
| fungi | yeah, right now we put all of the public .asc files corresponding to the archive signing keys in our repository directly, but we *could* stick them in yaml i suppose | 20:09 |
| fungi | i'm trying not to reinvent too much of the current setup, to avoid breaking so much that untangling all the problems i introduce becomes more of a challenge | 20:10 |
| fungi | this change is already upwards of 40 files modified | 20:10 |
| fungi | and a lot of control logic translated from ansible to puppet and erb to j2 | 20:11 |
| fungi | so it's absolutely going to have a lot wrong with it initially, no doubt | 20:12 |
| * fungi is beginning to see why nobody has had time to work on this yet | 20:12 | |
| clarkb | fungi: if you keep the old puppet in place and don't add the new cron jobs immediately we can probably sanity check everything looks good (even by manually running things) before doing the switch over | 20:13 |
| clarkb | that doesn't make it easier but reduces the scaryness of large changes | 20:13 |
| fungi | hrm, yeah i guess i could do this without file moves/deletes, and hold back the cron additions | 20:13 |
| fungi | good idea | 20:14 |
| fungi | anyway, we're at t-0:45 so shifting gears to maintenance checklist | 20:15 |
| fungi | should we go ahead and flip the big red switch to stop deployments? | 20:15 |
| fungi | (and remind me what the file is we have to touch on bridge.o.o to do that) | 20:16 |
| openstackgerrit | James E. Blair proposed opendev/system-config master: WIP: add Zookeeper TLS support https://review.opendev.org/720302 | 20:17 |
| fungi | i'm going to start recording maintenance activity for this in https://etherpad.opendev.org/p/gerrit-2020-06-12 but also moving to #opendev-meeting and will startmeeting opendev-maint in there | 20:19 |
| openstackgerrit | Merged zuul/zuul-jobs master: Add test-build-container-image-release job https://review.opendev.org/735249 | 20:28 |
| -openstackstatus- NOTICE: The Gerrit service on review.opendev.org is going offline momentarily at 21:00 UTC for project rename maintenance, but should return within a few minutes: http://lists.opendev.org/pipermail/service-announce/2020-June/000004.html | 20:55 | |
| openstackgerrit | James E. Blair proposed zuul/zuul-jobs master: Fix upload-docker-image when in release pipeline https://review.opendev.org/735393 | 20:58 |
| openstackgerrit | James E. Blair proposed opendev/system-config master: Fix rename playbook after zuul user rename https://review.opendev.org/735397 | 21:21 |
| *** paladox has quit IRC | 21:28 | |
| *** paladox has joined #opendev | 21:33 | |
| openstackgerrit | Merged openstack/project-config master: Add whitebox-tempest-plugin under QA https://review.opendev.org/714478 | 21:37 |
| openstackgerrit | Merged openstack/project-config master: Rename interop repos from openstack/ to osf/ namespace https://review.opendev.org/734669 | 21:40 |
| openstackgerrit | Merged opendev/project-config master: Record 20200612 project renames https://review.opendev.org/735211 | 21:42 |
| openstackgerrit | James E. Blair proposed opendev/system-config master: WIP: add Zookeeper TLS support https://review.opendev.org/720302 | 21:42 |
| openstackgerrit | Merged zuul/zuul-jobs master: Fix upload-docker-image when in release pipeline https://review.opendev.org/735393 | 21:56 |
| -openstackstatus- NOTICE: gerrit is being taken offline for emergency cleanup, will return to service again shortly | 21:58 | |
| *** nautics889 has quit IRC | 22:01 | |
| *** rchurch has joined #opendev | 22:31 | |
| *** mlavalle has quit IRC | 22:41 | |
| openstackgerrit | Jeremy Stanley proposed opendev/system-config master: Correct "ansbile" typos https://review.opendev.org/735400 | 22:42 |
| openstackgerrit | Monty Taylor proposed opendev/system-config master: Add utility script to disable ansible https://review.opendev.org/735401 | 22:42 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Add tests for upload-docker-image https://review.opendev.org/735402 | 22:42 |
| mordred | clarkb, fungi: ^^ | 22:42 |
| mordred | (the system-config patch from me) | 22:42 |
| openstackgerrit | Monty Taylor proposed opendev/system-config master: Add utility script to disable ansible https://review.opendev.org/735401 | 22:44 |
| -openstackstatus- NOTICE: The Gerrit service on review.opendev.org is available again | 22:47 | |
| *** tosky has quit IRC | 23:25 | |
| *** DSpider has quit IRC | 23:25 | |
| openstackgerrit | Monty Taylor proposed opendev/system-config master: Add utility script to disable ansible https://review.opendev.org/735401 | 23:34 |
| fungi | mirror.ubuntu vos release is still in progress | 23:46 |
| fungi | continuing to watch it | 23:46 |
| openstackgerrit | Merged opendev/system-config master: Correct "ansbile" typos https://review.opendev.org/735400 | 23:49 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!