| opendevreview | chandan kumar proposed openstack/openstack-ansible-os_tempest master: Move zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/828449 | 07:23 |
|---|---|---|
| opendevreview | chandan kumar proposed openstack/ansible-role-python_venv_build master: Move TripleO zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829164 | 07:33 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible stable/xena: Bump SHA for openstack_hosts to pick up centos repos fix https://review.opendev.org/c/openstack/openstack-ansible/+/829167 | 08:21 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible stable/xena: Bump SHA for openstack_hosts to pick up centos repos fix https://review.opendev.org/c/openstack/openstack-ansible/+/829168 | 08:22 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible stable/victoria: Bump SHA for openstack_hosts to pick up centos repos fix https://review.opendev.org/c/openstack/openstack-ansible/+/829169 | 08:24 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible stable/xena: Bump SHA for openstack_hosts to pick up centos repos fix https://review.opendev.org/c/openstack/openstack-ansible/+/829190 | 08:25 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible stable/wallaby: Bump SHA for openstack_hosts to pick up centos repos fix https://review.opendev.org/c/openstack/openstack-ansible/+/829191 | 08:27 |
| jrosser | morning | 08:45 |
| damiandabrowski[m] | hey! | 08:46 |
| opendevreview | chandan kumar proposed openstack/openstack-ansible-os_tempest master: Move zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/828449 | 08:59 |
| opendevreview | Merged openstack/openstack-ansible-os_horizon master: Disable barbican-ui dashboard https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/828154 | 09:12 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_horizon stable/xena: Disable barbican-ui dashboard https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/829175 | 09:50 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_horizon stable/wallaby: Disable barbican-ui dashboard https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/829176 | 09:50 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_horizon stable/victoria: Disable barbican-ui dashboard https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/829177 | 09:51 |
| opendevreview | Merged openstack/openstack-ansible-os_keystone master: Switch keystone logging to syslog https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/828469 | 10:25 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Remove secure_proxy_ssl_header logic https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/828467 | 10:28 |
| opendevreview | Merged openstack/openstack-ansible-repo_server stable/wallaby: Ensure insist=true is always set for lsyncd https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/828836 | 10:36 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Fix race-condition when libvirt starts unwillingly https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/828704 | 10:37 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Drop libvirtd_version identification https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/828702 | 10:38 |
| opendevreview | Merged openstack/openstack-ansible-repo_server stable/victoria: Ensure insist=true is always set for lsyncd https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/828837 | 10:39 |
| opendevreview | Merged openstack/openstack-ansible-os_keystone master: Use uwsgi role for keystone https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/828510 | 10:43 |
| chandankumar | jrosser: noonedeadpunk please have a look at these reviews https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829164 https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/828449 https://review.opendev.org/c/openstack/ansible-config_template/+/828295 when free thanks! | 10:44 |
| noonedeadpunk | chandankumar: why I don't see actually a defined job to be tested in https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829164 ? | 11:00 |
| noonedeadpunk | and morning everyone | 11:00 |
| opendevreview | Merged openstack/openstack-ansible-os_neutron stable/wallaby: Make calico non voting https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/828657 | 11:03 |
| damiandabrowski[m] | hey Dmitriy! | 11:08 |
| chandankumar | noonedeadpunk: weired | 11:13 |
| chandankumar | looking into that why it is not getting triggered | 11:13 |
| opendevreview | Merged openstack/openstack-ansible-os_horizon master: Move Listen definition to VHosts https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/828515 | 11:16 |
| *** dviroel|out is now known as dviroel | 11:19 | |
| opendevreview | Merged openstack/openstack-ansible master: Fix behaviour of OSA_CONFIG_DIR https://review.opendev.org/c/openstack/openstack-ansible/+/828915 | 11:20 |
| opendevreview | chandan kumar proposed openstack/ansible-role-python_venv_build master: [DNM] tripleo content provider https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829221 | 11:33 |
| opendevreview | Merged openstack/openstack-ansible master: Move infra-journal-remote logic to its role https://review.opendev.org/c/openstack/openstack-ansible/+/824734 | 11:36 |
| opendevreview | Merged openstack/openstack-ansible master: Do not run rsyslog against RabbitMQ https://review.opendev.org/c/openstack/openstack-ansible/+/826347 | 11:36 |
| opendevreview | chandan kumar proposed openstack/ansible-role-python_venv_build master: [DNM] tripleo content provider https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829221 | 12:01 |
| opendevreview | chandan kumar proposed openstack/ansible-role-python_venv_build master: Move TripleO zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829164 | 12:04 |
| opendevreview | chandan kumar proposed openstack/ansible-role-python_venv_build master: Move TripleO zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829164 | 12:16 |
| opendevreview | chandan kumar proposed openstack/ansible-role-python_venv_build master: Move TripleO zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829164 | 12:27 |
| admin1 | upgraded to 24.0.1 .. no errors .. then re-running the playbooks, i get in neutron: os_neutron : Perform a DB expand alembic.script.revision.ResolutionError: No such revision or branch 'cd9ef14ccf87' .. and in nova: os_nova : Synchronize the nova API DB schema alembic.util.exc.CommandError: Can't locate revision identified by | 12:40 |
| admin1 | 'b30f573d3377'" .. | 12:40 |
| jrosser | admin1: what release are you deploying? | 12:42 |
| admin1 | 24.0.1 | 12:43 |
| jrosser | well, it feels like you have a mistake somewhere with your repos | 12:44 |
| jrosser | because the only reference to the neutron db revision is in Yoga https://codesearch.opendev.org/?q=cd9ef14ccf87 | 12:44 |
| admin1 | git brach shows 24.0.1 . but the actual evenvs show 24.1.0.dev108 | 12:44 |
| admin1 | i am going to rm-rf /etc/ansible/roles .. git clone and checkout 24.0.1 and retry | 12:45 |
| jrosser | and similarly https://opendev.org/openstack/neutron/src/branch/master/neutron/db/migration/alembic_migrations/versions/yoga/expand/34cf8b009713_add_router_ndp_proxy_table.py#L25 | 12:46 |
| jrosser | that file does not exist for Xena branch of nova | 12:46 |
| jrosser | well deleting the ansible roles is pretty unhelpful tbh | 12:46 |
| jrosser | as the errors are coming from the actual nova/neutron code itself, nothing to do with ansible | 12:46 |
| admin1 | do i recreate all the lxc containers ? | 12:47 |
| jrosser | i have no idea what you have done :) | 12:47 |
| admin1 | true | 12:47 |
| jrosser | my hunch is that at some point you've been using master branch | 12:47 |
| admin1 | only guess is it had too many screens .. maybe accidently master | 12:47 |
| jrosser | for example the version of nova that you are going to get is defined here https://github.com/openstack/openstack-ansible/blob/stable/xena/playbooks/defaults/repo_packages/openstack_services.yml#L199-L202 | 12:49 |
| jrosser | the point that you have checked out for openstack-ansible defines the git sha of the services | 12:49 |
| opendevreview | chandan kumar proposed openstack/ansible-role-python_venv_build master: Move TripleO zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829164 | 13:27 |
| opendevreview | chandan kumar proposed openstack/openstack-ansible-os_tempest master: Move zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/828449 | 13:28 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/xena: Fix race-condition when libvirt starts unwillingly https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/829253 | 13:36 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/xena: Fix race-condition when libvirt starts unwillingly https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/829253 | 13:36 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_horizon stable/xena: Move Listen definition to VHosts https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/829254 | 13:37 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_horizon stable/wallaby: Move Listen definition to VHosts https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/829255 | 13:37 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/xena: Fix behaviour of OSA_CONFIG_DIR https://review.opendev.org/c/openstack/openstack-ansible/+/829256 | 13:38 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/wallaby: Fix behaviour of OSA_CONFIG_DIR https://review.opendev.org/c/openstack/openstack-ansible/+/829257 | 13:38 |
| opendevreview | chandan kumar proposed openstack/ansible-config_template master: Move zuul jobs layout to centos9 only for master branch https://review.opendev.org/c/openstack/ansible-config_template/+/828295 | 13:38 |
| chandankumar | noonedeadpunk: the job will appear now, we updated the patch, thanks for highlighting the issue :-) | 13:43 |
| noonedeadpunk | awesome thanks! | 13:43 |
| noonedeadpunk | same was also for venv_build job iirc | 13:44 |
| noonedeadpunk | ah, you updated it as wel, nice | 13:44 |
| opendevreview | Damian Dąbrowski proposed openstack/ansible-role-python_venv_build master: Slurp constraints.txt separately for each host in a batch https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/829270 | 14:10 |
| damiandabrowski[m] | ^ nasty bug when it comes to distro upgrades, spent few hours on troubleshooting yesterday | 14:11 |
| spatel | damiandabrowski[m] share your experience :) | 14:23 |
| damiandabrowski[m] | during bionic -> focal upgrade, keystone failed to build venv on newly redeployed controller(ofc i was running it without limits to make it work) | 14:25 |
| damiandabrowski[m] | then i realized that it works fine when i limit keystone playbook only for this single focal host | 14:25 |
| damiandabrowski[m] | and then i started to read python_venv_build role and i found out the culprit :D rest of the story is described in commit msg | 14:27 |
| damiandabrowski[m] | i'm using 22.3.2 so i don't have pinned uwsgi version like here: https://opendev.org/openstack/openstack-ansible/commit/5132952618dd8659defdaff3c558fca159ba48b4 | 14:27 |
| spatel | i would love to know the upgrade process you used just to understand what is the best approach :) | 14:27 |
| damiandabrowski[m] | and in my case, uwsgi was the problem as bionic had different version in its constraints | 14:28 |
| damiandabrowski[m] | hmm, i'm just sticking to https://docs.openstack.org/openstack-ansible/latest/admin/upgrades/distribution-upgrades.html :D | 14:28 |
| noonedeadpunk | I think we can be smart and efficient here, but can't think properly today. Will review tomorrow :) | 14:35 |
| noonedeadpunk | and we have extra side-effects regarding cross-OS and constraints tbh | 14:36 |
| damiandabrowski[m] | sure, thanks! | 14:47 |
| jrosser | damiandabrowski[m]: that suggests the upgrade order was wrong? | 14:53 |
| jrosser | the new controller should not be using the repo server on the old ones, ever | 14:53 |
| jrosser | or backends were not in maint on the LB | 14:53 |
| damiandabrowski[m] | it wasn't ;) that's not the case | 14:53 |
| damiandabrowski[m] | it's only about how newly deployed node gets constraints.txt | 14:54 |
| damiandabrowski[m] | only the "local" repo server was enabled | 14:55 |
| jrosser | hmm | 14:55 |
| damiandabrowski[m] | so, keystone playbook needs to be executed without limits, and it runs in serial [1, 100%] | 14:58 |
| damiandabrowski[m] | second batch is problematic as it may contain hosts with different operating systems which may need different constraints.txt | 14:59 |
| damiandabrowski[m] | but this task doesn't care about it: https://opendev.org/openstack/ansible-role-python_venv_build/src/branch/master/tasks/python_venv_install.yml#L16 | 14:59 |
| jrosser | i'm a bit confused - upper-constraints is the same regardless of OS version? | 14:59 |
| noonedeadpunk | but not regardless of osa version | 15:00 |
| noonedeadpunk | but well | 15:00 |
| jrosser | ? "second batch is problematic as it may contain hosts with different operating systems which may need different constraints.txt" | 15:00 |
| noonedeadpunk | osa version should be same during upgrrade anyway | 15:01 |
| jrosser | and also latest tag i think | 15:01 |
| noonedeadpunk | #startmeeting openstack_ansible_meeting | 15:01 |
| opendevmeet | Meeting started Tue Feb 15 15:01:26 2022 UTC and is due to finish in 60 minutes. The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:01 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:01 |
| opendevmeet | The meeting name has been set to 'openstack_ansible_meeting' | 15:01 |
| jrosser | which could be a factor here | 15:01 |
| damiandabrowski[m] | osa version was the same on all nodes - 22.3.2 | 15:01 |
| noonedeadpunk | #topic bug triage | 15:01 |
| damiandabrowski[m] | uwsgi version was the problem here as its version is not pinned in 22.3.2 ;) so bionic and focal had different uwsgi versions in constraints.txt | 15:02 |
| damiandabrowski[m] | but maybe let's leave it after the meeting | 15:02 |
| noonedeadpunk | or we can discuss on the meeting) | 15:02 |
| noonedeadpunk | as it's supposed to be bug? | 15:02 |
| damiandabrowski[m] | +1 | 15:02 |
| damiandabrowski[m] | haha, that's right | 15:02 |
| damiandabrowski[m] | i just didn't want to make a mess during Your meeting :D | 15:03 |
| jrosser | i guess i was just pointing out that the uwswgi pin had been backported down all the stable branches | 15:07 |
| noonedeadpunk | oh yes, it was | 15:09 |
| noonedeadpunk | To have that said, I wasn't digging into that yet | 15:09 |
| noonedeadpunk | So no idea about the bug yet:) | 15:10 |
| opendevreview | Merged openstack/openstack-ansible-lxc_container_create master: Allow redhat.yml to support any distribution and major release https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/829062 | 15:10 |
| noonedeadpunk | ok, then I think would be great to discuss bugs from LP | 15:10 |
| noonedeadpunk | #link https://bugs.launchpad.net/openstack-ansible/+bug/1960587 | 15:10 |
| noonedeadpunk | So jrosser, you think we should comment out and make it requirement, 127.0.1.1 record from hosts? | 15:11 |
| noonedeadpunk | As then for ubuntu hostname might become a bit messy | 15:12 |
| noonedeadpunk | or well, it can change during deployment this way) | 15:12 |
| noonedeadpunk | at least fqdn | 15:12 |
| jrosser | i think i'm slightly not following the whole thread in the bug there | 15:12 |
| noonedeadpunk | so rabbitmqctl uses 25672 port for managing rabbit. | 15:13 |
| noonedeadpunk | by default it connects as user@hostname | 15:13 |
| noonedeadpunk | and with https://opendev.org/openstack/openstack-ansible-rabbitmq_server/src/branch/stable/xena/templates/rabbitmq.config.j2#L63 we are ensuring that it listens only on management ip | 15:14 |
| noonedeadpunk | so when there's record for `127.0.1.1 hostname`, hostname resolvs to 127.0.1.1 and not to management ip | 15:14 |
| jrosser | at the simplest level i can see that on a metal host the 127.0.1.1 entry is there, and on a container it is not | 15:14 |
| jrosser | for focal | 15:14 |
| noonedeadpunk | when we drop 127.0.1.1 and we have record of `<management_ip> hostname` hostname starts resolving to the IP where 25672 listens | 15:16 |
| noonedeadpunk | or we can drop that record, then we get 0.0.0.0:25672 and rabbitmqctl has no issues connecting as well | 15:16 |
| noonedeadpunk | yeah, I believe that it's only metal issue | 15:17 |
| jrosser | i guess i had been on a bit of a quest to remove all binding to 0.0.0.0 everywhere | 15:17 |
| noonedeadpunk | we don't add such record to containers | 15:17 |
| jrosser | i would be wondering what that meant for the external VIP on that port for a standard layout deployment | 15:17 |
| jrosser | where infra is also LB | 15:17 |
| noonedeadpunk | But that's rabbit? It's not balanced) | 15:18 |
| noonedeadpunk | except monitoring port | 15:18 |
| jrosser | no, but it's listening on 0.0.0.0 | 15:18 |
| jrosser | VIP is belonging to the host, not haproxy exlusively? | 15:18 |
| noonedeadpunk | ah | 15:19 |
| noonedeadpunk | oh, indeed, so we expose port to the world | 15:19 |
| jrosser | yes, thats my concern | 15:19 |
| noonedeadpunk | fair. I missed that bit indeed | 15:20 |
| jrosser | there was two things for bind-to-mgmt really, all the metal port conflicts, but also exposing * on all interfaces before | 15:20 |
| jrosser | larger deploys might have seperate haproxy node, so this would not matter so much | 15:20 |
| noonedeadpunk | ok, fair | 15:21 |
| noonedeadpunk | then another issue, is that this seems to gone for master after my config refactoring | 15:22 |
| noonedeadpunk | will check that | 15:22 |
| noonedeadpunk | and yeah, then the close to only way to prohibit 127.0.1.1 in hosts if rabbit is there | 15:23 |
| noonedeadpunk | I think that's it for bugs for now | 15:24 |
| noonedeadpunk | #topic office hours | 15:24 |
| jrosser | we have exciting news for rocky linux | 15:24 |
| noonedeadpunk | oh? | 15:24 |
| noonedeadpunk | have we merged it ?:) | 15:24 |
| jrosser | lxc and metal is working | 15:24 |
| jrosser | ah not quite :) | 15:24 |
| mgariepy | hooo nice work | 15:25 |
| noonedeadpunk | indeed! | 15:25 |
| jrosser | i did some refactoring in lxc_hosts to make redhat-like things easier | 15:25 |
| jrosser | and also lxc_container_create | 15:25 |
| noonedeadpunk | I bet I vote some patches... | 15:26 |
| noonedeadpunk | And zuul jobs are still not the case? | 15:26 |
| jrosser | not yet | 15:26 |
| jrosser | we still have some hidden issues for centos | 15:26 |
| jrosser | repo config is messy, so i made this https://review.opendev.org/c/zuul/zuul-jobs/+/829028 | 15:27 |
| jrosser | and once that merges we can do this https://review.opendev.org/c/openstack/openstack-ansible/+/829111 | 15:27 |
| noonedeadpunk | oh! | 15:28 |
| jrosser | i expect that is going to break our centos jobs a bit, but thats good as it's then the same behavious as outside zuul | 15:28 |
| noonedeadpunk | so we can pass vars) | 15:28 |
| jrosser | yes i think so | 15:28 |
| jrosser | i think there is a similar refactoring we can do in the lxc roles for the debian/ubuntu vars | 15:32 |
| noonedeadpunk | yeah, likely we can indeed | 15:33 |
| jrosser | theres very little difference between them, and perhaps even some merging of debian/ubuntu/redhat as well | 15:33 |
| jrosser | once the centos repos are done properly we really need a point release | 15:34 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/xena: Allow fast SSH cipher for upgrade jobs https://review.opendev.org/c/openstack/openstack-ansible/+/829258 | 15:35 |
| noonedeadpunk | I think we need to release 24.1.0 now? | 15:36 |
| noonedeadpunk | Do we have anything we want to merge before that? | 15:36 |
| jrosser | i think that the centos upgrade jobs will go green again with these 829167 829167 829167 | 15:37 |
| jrosser | would be nice to see the upgrades working | 15:37 |
| jrosser | we should fix the repos for centos | 15:37 |
| *** dviroel is now known as dviroel|lunch | 15:37 | |
| noonedeadpunk | yep fair. Also recently backported some recently merged fixes. | 15:38 |
| jrosser | and i think that this is a hidden bug from the enabling of PowerTools in CI https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/829021 | 15:38 |
| noonedeadpunk | uh. we should use test there instead of comparison imo | 15:39 |
| noonedeadpunk | not critical to use it but then it won't occur | 15:40 |
| jrosser | here? https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/829021/2/defaults/main.yml#163 | 15:40 |
| noonedeadpunk | nah, here https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/829019/1/tasks/openstack_hosts_configure_dnf.yml | 15:41 |
| noonedeadpunk | `is version('8', '==') | 15:41 |
| noonedeadpunk | but yeah, might be no sense in that... comparison more lightweight likely... | 15:42 |
| jrosser | overall i think we are quite close to being able to make 24.1.0 | 15:42 |
| noonedeadpunk | but tbh I'd expected `ansible_facts['distribution_major_version']` to be int... | 15:42 |
| jrosser | just a few details | 15:42 |
| noonedeadpunk | yeah, agree. https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/829253 backport would be nice as well I believe | 15:42 |
| jrosser | `"ansible_distribution_major_version": "8"` | 15:43 |
| noonedeadpunk | I see... | 15:43 |
| jrosser | we still do have a lot of os_tempest patches from damiandabrowski[m] | 15:46 |
| jrosser | are they still blocked on there being a comment to resolve on the bottom one in the stack? | 15:47 |
| jrosser | i was wondering if it was necessary to stack them like that or if they can merge seperately to make reviewing easier | 15:47 |
| noonedeadpunk | most of them can be independant yes | 15:47 |
| noonedeadpunk | and yeah, if it wasn't updated then whole batch is blocked :( | 15:48 |
| jrosser | is there anything else we are trying to land this cycle? | 15:48 |
| damiandabrowski[m] | i'll try to find out which ones can be independent and fix it soon :/ | 15:48 |
| jrosser | ssh keys stuff is on the way | 15:49 |
| jrosser | proxysql? | 15:49 |
| noonedeadpunk | I didn't have time to finish it yet :( But yes, will try to get some time quite soon | 15:49 |
| noonedeadpunk | What about internal ssl? | 15:50 |
| noonedeadpunk | Are we ready to merge https://review.opendev.org/c/openstack/openstack-ansible-specs/+/822850 ? | 15:50 |
| jrosser | ah right yes | 15:51 |
| jrosser | one of the things james gibson is looking at is a proposal for an intermediate haproxy config | 15:52 |
| jrosser | once which supports http and https backends at the same time for use during a migration | 15:52 |
| jrosser | perhaps seeing that helps know if the spec is right | 15:53 |
| noonedeadpunk | oh, ok | 15:53 |
| damiandabrowski[m] | btw. i've implemented a simple fix for mariabackup: https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/828977 | 15:53 |
| noonedeadpunk | I hope we will also be able to replace some cert management with pki role - like keystone and octavia | 15:53 |
| noonedeadpunk | lgtm | 15:54 |
| jrosser | oh wow i didnt even look in keystone :) | 15:54 |
| noonedeadpunk | and fwiw we're really interested in make internal ssl going as eager to use it :) | 15:55 |
| jrosser | switching internal VIP to SSL is relatively OK step | 15:55 |
| jrosser | switching over the backends is much more involved | 15:55 |
| noonedeadpunk | internal VIP is running via SSL for quite some time but nasty hacks being used for backends<->haproxy encryption | 15:56 |
| noonedeadpunk | so yeah - if some help needed - let us know) | 15:57 |
| jrosser | we only have james for another couple of weeks | 15:58 |
| jrosser | so we will have the spec and a haproxy setup proposal | 15:58 |
| jrosser | though turning that into a viable in-place upgrade is the real heavy lifiting i think | 15:58 |
| jrosser | and we will need some really clear docs for this | 15:59 |
| noonedeadpunk | yeah, agree | 15:59 |
| jrosser | plus maybe a PTG topic is if we keep supporting a choice of SSL / non-SSL | 15:59 |
| noonedeadpunk | damn | 16:00 |
| noonedeadpunk | what is Z release name :D ? | 16:00 |
| noonedeadpunk | let's start populating this https://etherpad.opendev.org/p/osa-Z-ptg | 16:01 |
| damiandabrowski[m] | "OpenStack next release name is final- OpenStack Zed" | 16:01 |
| damiandabrowski[m] | found it on ml | 16:01 |
| noonedeadpunk | Lol, it's today one :) | 16:02 |
| noonedeadpunk | Since there's no public voting, stopped keeping track on the progress | 16:03 |
| noonedeadpunk | #endmeeting | 16:04 |
| opendevmeet | Meeting ended Tue Feb 15 16:04:23 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:04 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-02-15-15.01.html | 16:04 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-02-15-15.01.txt | 16:04 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-02-15-15.01.log.html | 16:04 |
| noonedeadpunk | we need to merge RBAC changes btw for Z for sure. | 16:13 |
| jrosser | oh yes | 16:16 |
| jrosser | do we need to get ahead of that in Y and add the service role to existing things? | 16:16 |
| noonedeadpunk | yep | 16:18 |
| noonedeadpunk | and then drop admin in Z I guess | 16:18 |
| noonedeadpunk | Sorry, for Y indeed :) | 16:19 |
| * noonedeadpunk slept for 4 hours today so has total mess in head | 16:20 | |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Create yaml file of the zuul job vars for embedded ansible and logging https://review.opendev.org/c/openstack/openstack-ansible/+/821210 | 16:28 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Create yaml file of the zuul job vars for embedded ansible and logging https://review.opendev.org/c/openstack/openstack-ansible/+/821210 | 16:28 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Create yaml file of the zuul job vars for embedded ansible https://review.opendev.org/c/openstack/openstack-ansible/+/821210 | 16:29 |
| *** dviroel|lunch is now known as dviroel | 16:52 | |
| opendevreview | Merged openstack/openstack-ansible-os_nova stable/xena: Fix race-condition when libvirt starts unwillingly https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/829253 | 17:33 |
| opendevreview | Merged openstack/openstack-ansible-os_horizon stable/victoria: Disable barbican-ui dashboard https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/829177 | 17:36 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Drop nova_glance_api_servers variable https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/828460 | 18:37 |
| opendevreview | Merged openstack/openstack-ansible stable/xena: Bump SHA for openstack_hosts to pick up centos repos fix https://review.opendev.org/c/openstack/openstack-ansible/+/829167 | 18:41 |
| opendevreview | Merged openstack/openstack-ansible-galera_server master: Use unix socket while granting access for the backup service https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/828977 | 18:44 |
| spatel | how to force reboot vm using virsh command? | 18:47 |
| admin1 | virsh destroy to just kill it | 18:47 |
| spatel | my vm got stuck and now i can't reboot and shutdown using virsh shutdown <uuid> | 18:47 |
| spatel | but we have data on that VM :( | 18:47 |
| spatel | so there is no safe or better way to force it.. that is very odd | 18:48 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-galera_server stable/xena: Use unix socket while granting access for the backup service https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/829259 | 18:48 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-galera_server stable/wallaby: Use unix socket while granting access for the backup service https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/829260 | 18:48 |
| opendevreview | Merged openstack/openstack-ansible stable/wallaby: Bump SHA for openstack_hosts to pick up centos repos fix https://review.opendev.org/c/openstack/openstack-ansible/+/829191 | 18:50 |
| spatel | admin1 i got it... | 18:54 |
| spatel | destroy not going to terminate VM but just remove vm in virsh | 18:55 |
| admin1 | its like pulling its power away | 18:55 |
| admin1 | virsh undefine will remove it | 18:55 |
| admin1 | virsh destroy will kill it | 18:55 |
| spatel | i used virsh destroy and then nova start and all good vm is back | 18:56 |
| opendevreview | Merged openstack/openstack-ansible-os_keystone master: Define X-Forwarded-Proto for keystone https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/828518 | 18:58 |
| *** dviroel is now known as dviroel|out | 21:35 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!