Thursday, 2024-08-01

fungirecommends is "this should be installed except in unusual circumstances"00:00
clarkbright but not always and for dnssec to work you really want this installed. it should be a proper dep imo00:00
fungiif it were, then it might conflict with unbound-anchor or something, i dunno what led to that change00:00
fungithough unbound could have certainly done a depends: (dns-root-data|unbound-anchor) in that case00:01
fungior both could provide a common virtual package name or something00:01
opendevreviewTony Breeds proposed opendev/system-config master: [base/unbound] Install dns-root-data package  https://review.opendev.org/c/opendev/system-config/+/92531100:05
opendevreviewMerged opendev/system-config master: [base/unbound] Install dns-root-data package  https://review.opendev.org/c/opendev/system-config/+/92531101:12
fungideploy for ^ failed01:28
fungitranslate01.openstack.org hit a dpkg lock collision during the base deploy job01:28
tonybWhom do I contact for OSUOSL to up the quota for opendevci project so I can test/add a new mirror server for that cloud/region ?02:14
tonybfungi: will the next prod update recover translate01?02:15
fungitonyb: Ramereth[m] but he's on pacific americas time so might be easier for you to sync up next week since it's already your friday (or am i screwing up my timezone math again?)02:18
tonybIt's still Thursday02:19
tonyb(here)02:19
fungiah, okay, so your friday morning will be his thursday afternoon. right02:19
tonybYup.02:19
fungimy fault for still being on the computer at this time of night ;)02:20
fungianyway, as to your earlier question, we rerun the base in the daily periodic pipeline so it probably enqueued about half an hour ago (2am utc)02:30
tonybfungi: cool beans.  Thanks02:31
fungiany time02:42
opendevreviewTony Breeds proposed opendev/zone-opendev.org master: Add DNS for new Vexxhost mirrors  https://review.opendev.org/c/opendev/zone-opendev.org/+/92543704:01
opendevreviewTony Breeds proposed opendev/system-config master: Add inventory entries for new Vexxhost mirrors  https://review.opendev.org/c/opendev/system-config/+/92543804:10
opendevreviewTony Breeds proposed opendev/system-config master: Add inventory entries for new Vexxhost mirrors  https://review.opendev.org/c/opendev/system-config/+/92543804:36
opendevreviewTony Breeds proposed opendev/system-config master: Add inventory entries for new Vexxhost mirrors  https://review.opendev.org/c/opendev/system-config/+/92543808:33
opendevreviewTony Breeds proposed opendev/system-config master: Add Noble nodes to system-config-run testing  https://review.opendev.org/c/opendev/system-config/+/92544708:33
tonybCan I get some reviews on: https://review.opendev.org/q/(topic:ansible-devel+OR+topic:noble-mirror)+is:open08:36
tonybI note that https://review.opendev.org/c/opendev/system-config/+/924012 is marked WIP and failing, but I'd appreciate feedback on the idea of testing ARA master in the ansible-devel job08:36
ykarelHi Depends-On on github.com Pull requests do not work/configured? was trying it in https://review.opendev.org/c/openstack/neutron/+/92544608:40
opendevreviewAttila Fazekas proposed openstack/diskimage-builder master: Not duplicate grub defaults  https://review.opendev.org/c/openstack/diskimage-builder/+/92545109:27
tonybykarel: It ... should, I can't see anything wrong with that change / the general neutron setup09:28
ykareltonyb, what does zuul logs say on why it's not triggering?09:30
tonybStill checking09:30
ykarelalso to note this depends-on had also impacted our downstream zuul as sqlalchemy/sqlalchemy was not added in downstream zuul tenant config09:44
tonybykarel: I'm not having much luck determining why zuul isn't enacting the Depends-On.09:55
tonybykarel: Like I said it all looks right to me09:56
tonybykarel: I'm still looking09:56
ykareltonyb, reading https://opendev.org/zuul/zuul/src/branch/master/doc/source/drivers/github.rst iiuc it mentions api_token needs to be defined to get Depends-On working09:57
ykarelnot sure if it's related here and if that config is set already09:58
tonybzuul is pulling master (or main) into src/guthub.com/sqlalchemy/sqlalchemy so I'm pretty sure that the github driver/connect are correctly setup10:00
ykarelyes our jobs working fine with sqlalchemy main10:00
tonybykarel: Sorry I am out of my depth here.  I can work with other infra-roots to debug this and get back to you.10:08
ykarelthx tonyb for looking, for now i have removed depends-on as it was impacting downstream zuul, but i think logs should have the required bits, patchset 1,2 and 4 had depends-on added10:10
tonybykarel: I'm sure someone more familiar with zuul will know what to look for.10:13
tonybbased on what I know it basically looks like zuul isn't doing anything to indicate that it saw the "Depends-On" at all10:14
fricklertonyb: ykarel: https://paste.opendev.org/show/bNlEBwvyoGpipnvMCQp9/ not sure though if that's an issue with our token really or with the permissions for the sqla repo. in general working with github dependencies has been flaky at best, so I'd advise to avoid it if possible10:39
fricklerykarel: I'm also confused by your comment about downstream zuul, do you have a zuul instance that runs jobs triggered from opendev gerrit, but doesn't report back there?10:40
tonybGah!  bitten by python tracebacks not showing up in grep10:41
tonybfrickler: We (ykarel and I are both at Redhat) have an internal zuul (several actually)  I believe that comment was meant to reference them not likeing the Depends-On for config reasons, not actionable by anyone else here10:42
ykarelyes ^ right, zuul stopped triggering when it identified depends-on from unknown project(unknown as not defined in downstream zuul tenant config)10:44
ykarelfrickler, is the flaky part of github dependencies is that only apply for Gerrit? as we using zuul with github projects and there Depends-On works fine10:45
tonybfrickler: Actually that traceback isn't the same PR as the one ykarel mentioned.  10:45
tonybykarel: Nope gerrit doesn't know anything about Depends-On10:46
ykareltonyb, ack was just trying to understand the flaky part mentioned above as not seen in general with github project 10:48
tonybfrickler: Now that I know what to look for the problem is the same.10:49
ykareltonyb, i once used 11584 PR as well to check behavior with closed PRs10:50
ykarelother one was with open PR 1163910:50
tonybykarel: Ah okay10:51
ykarelcan you check if error was same even for open PR 1163910:51
tonybykarel: Yup it's the same10:52
tonybhttps://paste.opendev.org/raw/bEVvubAqJdKWMU62wSqM/10:52
ykarel:( seems need some token adjustment10:54
ykarelthx tonyb++ frickler++ for checking10:54
tonybykarel: frickler:  We can look at the token that's being used and see if it needs updating?  or if we need some buy-in from sqlalchemy10:54
ykareltonyb, yes if it's possible to update the token to include scope: public_repo11:11
fricklerchecking my logs, I updated our github token on 2024-01-20 with a lifetime of 1y, so it should still be valid. not sure about the scoping, but it would be a bit of a surprise if that issue was only showing up now11:18
tonybIt's running a 'canmerge' query.  which I kinda expect to fail.  I think the api_token we have should generally be able to pull a PR but not merge it back so I think that error is ok/expected.  I do wonder if it failing aborts the rest of the fetch process11:21
tonybI'll check after this meeting11:21
opendevreviewAttila Fazekas proposed openstack/diskimage-builder master: Not duplicate grub defaults  https://review.opendev.org/c/openstack/diskimage-builder/+/92545112:26
fungitonyb: the periodic base deploy did succeed, so the translate01.openstack.org dpkg lock error really does seem to have just been a temporary collision (probably ran at the same moment an unattended upgrade was in progress)13:00
opendevreviewJames E. Blair proposed zuul/zuul-jobs master: Remove get_md5 parameter from stat module.  https://review.opendev.org/c/zuul/zuul-jobs/+/92163714:13
opendevreviewAttila Fazekas proposed openstack/diskimage-builder master: Not duplicate grub defaults  https://review.opendev.org/c/openstack/diskimage-builder/+/92545114:24
opendevreviewMerged zuul/zuul-jobs master: Remove get_md5 parameter from stat module.  https://review.opendev.org/c/zuul/zuul-jobs/+/92163714:28
fungipython 3.13.0rc1 was tagged today16:46
fungitime to get compiling16:47
fungihttps://discuss.python.org/t/5970316:48
opendevreviewClark Boylan proposed openstack/project-config master: Rotate the wheel kerberos keytab for afs operations  https://review.opendev.org/c/openstack/project-config/+/92551116:59
opendevreviewMerged openstack/project-config master: Rotate the wheel kerberos keytab for afs operations  https://review.opendev.org/c/openstack/project-config/+/92551117:21
clarkbtonyb: I've reivewed the stack I have a concern on https://review.opendev.org/c/opendev/system-config/+/923686 in that we're crossing the streams a bit too much between production and CI and we probably want to avoid doing that. But if others have differing opinions I can probably be swayed18:42
clarkbeverything else looks fine and I think what 923686 aims to accomplish is doable we just need to be careful how we do it18:42
clarkbI think the wheel jobs that use the keytab only run in the periodic queue so we won't have results on 925511 until after those run later today/early tomorrow19:41
fungiyeah, i tend to be around at 0200z when they get enqueued, but may be asleep by the time they actually run19:43
clarkbhttps://review.opendev.org/c/opendev/base-jobs/+/924786/ and child are a stack I've got hanging around to update our base jobs for the new zuul cleanup handling. Not really urgent but a nice cleanup I think19:51
clarkbthe first change is to base-test and we can check things look good before landing the followup whih affects base19:52
fungiapproved the first one, let's see how it fares19:56
opendevreviewMerged opendev/base-jobs master: Use modern cleanup tooling in base-test  https://review.opendev.org/c/opendev/base-jobs/+/92478619:59
clarkbI think I have a change somewhere to recheck and test that20:00
clarkbhttps://review.opendev.org/c/zuul/zuul-jobs/+/680178 has been rechecked20:01
clarkbhttps://zuul.opendev.org/t/zuul/stream/759a1ac61305446c831dc2165d2631b8?logfile=console.log (I think you need to watch the live stream or look at executor debug logs to get the full log content)20:09
clarkbhttps://zuul.opendev.org/t/zuul/build/759a1ac61305446c831dc2165d2631b8/log/job-output.txt that did about what I expected it to20:10
clarkbcorvus: ^ not sure if you want to review those results, you were helpful in reviewing earlier iterations of that stack20:11
opendevreviewJames E. Blair proposed zuul/zuul-jobs master: Update test-prepare-workspace-git to use a module  https://review.opendev.org/c/zuul/zuul-jobs/+/92553921:49
opendevreviewJames E. Blair proposed zuul/zuul-jobs master: Synchronize test-prepare-workspace-git to prepare-workspace-git  https://review.opendev.org/c/zuul/zuul-jobs/+/92554021:49
tonybclarkb: Thanks for the reviews.  I'll look at better ways to accomplish the goal.  Originally I did not have install-ansible using ensure-python.  Then I thought it was better to treat roles repos like a library and re-use them more.  I see that's less true in this case due to the differences in CI vs 'long lived bastion  host'21:57
corvusclarkb: i left a comment on https://review.opendev.org/c/opendev/base-jobs/+/924786 though it was already merged.  i think it's worth doing that though.21:58
tonybLast night (for me) ykarel, reported an issue with a github depends-on not triggering in a neutron job.  (https://meetings.opendev.org/irclogs/%23opendev/%23opendev.2024-08-01.log.html#t2024-08-01T08:40:56).  I said I'd follow-up with you all as I don't understand the details of that interaction.22:08
tonybbased on: https://paste.opendev.org/show/bCcK4PxPOdgeA8vVjGag/ it looks like there may be new requirements for our token?  but it also looks like perhaps the canmerge query is "trying too hard" and perhaps it could have stopped looking for details somewhere around L11 of the paste above.22:10
tonybThoughts or pointers for how to debug (probably not in production) would be good.22:11
tonybIf this isn't OpenDev specific I'm happy to move to the zuul matrix22:11
clarkbtonyb: if there are new token requirements it wouldn't surprise me. I think hitting issues like that when github mysteriously changes was one of the things that made the kata zuul stuff difficult22:27
clarkbbut ya that error seems to imply this is the case22:27
clarkbcorvus: the first part of your comment makes sense but for the second I wanted to note we're already getting these in the archived logs22:29
clarkbI'm indifferent as to whether or not that should be a cleanup or post set of tasks22:29
tonybclarkb: any idea if those requirements are documented anywhere for us to verify?22:30
clarkbtonyb: no I don't think they are (and github chagnes them without a changelog last I remember)22:31
clarkbcorvus: I think we had these tasks in a cleanup playbook because when the disk fills things can fail in ways that are weird and cleanup ensures they always run?22:34
clarkbcorvus: so maybe we keep it as a cleanup but separate the two cleanups?22:34
tonybclarkb: Thanks I'll do some research/testing.22:39
fungitonyb: were you going to try to get in touch with Ramereth[m] before eow? or wait for next week?22:41
tonybfungi: Oh, I pinged him yesterday22:42
fungiaha, okay22:42
tonybif he doesn't reply (via IRC), I'll email him next week22:43
fungimakes sense, there's no rush on this22:43
opendevreviewTony Breeds proposed opendev/system-config master: Add Noble nodes to system-config-run testing  https://review.opendev.org/c/opendev/system-config/+/92544722:50
opendevreviewTony Breeds proposed opendev/system-config master: Add inventory entries for new Vexxhost mirrors  https://review.opendev.org/c/opendev/system-config/+/92543822:50
opendevreviewClark Boylan proposed opendev/base-jobs master: Update cleanups for base and base-minimal  https://review.opendev.org/c/opendev/base-jobs/+/92478722:58
opendevreviewClark Boylan proposed opendev/base-jobs master: More improvement to base-test cleanup and post playbooks  https://review.opendev.org/c/opendev/base-jobs/+/92554922:58
clarkbcorvus: ^ that is what I ended up with based on your comment22:58
clarkbnow just need to remember to not let base and base-test sit diverged for too long22:59
corvusclarkb: yeah, if there's something that would necessitate that, then 2 cleanups is fine.  but maybe that's not necessary now?  i think the only difference should be "runs on job abort" and we really don't need to do that for these tasks, so i like the idea of trying 925549 until we find out why we need it in cleanup23:02
clarkbcorvus: cool that should be what is in the change now23:04

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!