Monday, 2023-10-09

noonedeadpunkmornings07:51
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Bump galera version to 10.11.5  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/89474007:53
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Fix user for neutron-ovn-metadata-agent  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87085707:55
jrossergood morning07:58
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Workaround ovs bug that resets hostname with add command  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/89765607:59
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add CI jobs for debian bookworm  https://review.opendev.org/c/openstack/openstack-ansible/+/89456107:59
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Update RabbitMQ to 3.12 series  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/89580408:02
noonedeadpunkreally quite weird amount of timeouts. At the same time, I see some upgrade jobs taking 2h and being far from timeouting08:06
noonedeadpunkLooks a bit like heavily loaded provider, but not sure08:06
noonedeadpunkwould be sweet to have eyes on https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/897046 - this is not really hitting default setup, only if you wanna re-use the role and have keyrings from files. As then you might not have cinder keyring in the folder which will cause role failure08:16
noonedeadpunk(when you run it against nova_compute). Ie, we have that to setup and provision cephfs keyrings08:17
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Fix example playbook linters  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89765908:25
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Add barbican_service_user section  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89756208:25
noonedeadpunkand that one is nasty as well ^08:29
opendevreviewMerged openstack/openstack-ansible-os_rally stable/xena: Include proper commit in rally_upper_constraints_url  https://review.opendev.org/c/openstack/openstack-ansible-os_rally/+/89744708:53
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-ceph_client master: Add AppArmor configuration for ceph read/write caching  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/89766109:03
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-ops master: Update distros for CI  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/88463709:39
jrosserwe have q bunch of DISK_FULL for rocky upgrade jobs on 2023.109:48
noonedeadpunksomehow that's still old ovs getting there I believe. at least according to logs. Though I couldn't reproduce that behaviour somehow....09:56
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Remove common nova playbook  https://review.opendev.org/c/openstack/openstack-ansible/+/89756810:23
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Run nova db post setup from nova playbook  https://review.opendev.org/c/openstack/openstack-ansible/+/89757010:24
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Run nova_db_post_setup from playbook directly  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89757110:24
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-ceph_client master: Add AppArmor configuration for ceph read/write caching  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/89766110:31
kleiniI am currently on 26.1.2 and I see a lot of timeouts happening on MariaDB connections. I see them in the MariaDB logs from various OpenStack service and especially Nova often loses the SSL connection during query execution. Do you have any ideas, what could causing this?10:47
noonedeadpunkWell loosing connection and loosing during query are 2 different things... While just loosing connection might be okeyish (as nova might have longer or same timeout for keeping pool), this should never happen during queries11:05
noonedeadpunkhave you checked that VIP(keepalived) is not flapping? 11:05
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Remove common nova playbook  https://review.opendev.org/c/openstack/openstack-ansible/+/89756811:15
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Run nova db post setup from nova playbook  https://review.opendev.org/c/openstack/openstack-ansible/+/89757011:15
opendevreviewMerged openstack/openstack-ansible-os_nova stable/zed: Config has changed for pci passthrough.  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89377411:17
kleininoonedeadpunk, journalctl does not have any logs for keepalived, but has some after restarting on secondary node. So, I assume keepalived and VIP are stable.11:32
opendevreviewMerged openstack/openstack-ansible-haproxy_server stable/2023.1: Add ability to have different backend port.  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/89676811:37
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-ceph_client master: Add AppArmor configuration for ceph read/write caching  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/89766111:54
noonedeadpunkkleini: and haproxy also doesn't switch master node back and forth?12:14
noonedeadpunkas haproxy can mark a backend down for example during backups12:14
kleininothing in haproxy logs regarding nodes going away12:17
opendevreviewMerged openstack/openstack-ansible-lxc_hosts master: Sync additional apt config from the host to the container base image  https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/89455612:19
noonedeadpunkthen I'm not really sure what can be going on there....12:19
opendevreviewChristian Rohmann proposed openstack/openstack-ansible-galera_server stable/yoga: Added vars to override systemd for mariabackup  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/89766512:38
opendevreviewMerged openstack/openstack-ansible-os_neutron stable/2023.1: Fix conditional for non-OVN deployments  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/89704913:15
opendevreviewMerged openstack/openstack-ansible-haproxy_server master: Apply haproxy-service-config tag on include  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/89656913:18
opendevreviewMerged openstack/openstack-ansible-haproxy_server master: Add tags to PKI include  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/89661213:24
opendevreviewMerged openstack/openstack-ansible-galera_server stable/zed: Added vars to override systemd for mariabackup  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/89640713:30
opendevreviewMerged openstack/openstack-ansible-rabbitmq_server master: Update RabbitMQ to 3.12 series  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/89580413:41
NeilHanlonis anyone looking at https://bugs.launchpad.net/openstack-ansible/+bug/2038826  yet? i can take a swing at updating that URL..13:58
noonedeadpunkit looks like they've just dropped older versions from there?14:02
noonedeadpunkI don't think anyone is on that right now14:02
noonedeadpunkah, it's in archive14:04
noonedeadpunkNeilHanlon: feel free to :)14:04
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.7.2  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767214:05
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.7.2  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767214:06
noonedeadpunkNeilHanlon: I though you will update URL to archive.apache.org/dist/zookeeper :)14:11
noonedeadpunkwhich contains everything14:11
jrosserwe need a change thats backportable ideally14:12
jrosserthen can separately update the version on master14:12
NeilHanlonyea i was going to look and see if the archive had all the versions, but didn't click it yet lol14:13
NeilHanlonwas already half through the change :P 14:13
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: change to using archive.apache.org for source downloads  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767314:15
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.7.2  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767214:19
NeilHanlonthere we g14:20
NeilHanlono14:20
NeilHanlonoh i should have stacked them, eh?14:20
jrosserit'll be merge confict for one of them if you dont14:21
noonedeadpunkNeilHanlon: eventually, I think on master we can update to 3.8.3?14:26
opendevreviewMerged openstack/openstack-ansible-os_nova master: Fix example playbook linters  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89765914:26
NeilHanlonnoonedeadpunk: i think that makes sense, yeah -- but not sure if we want that for 2023.2 or not14:26
opendevreviewMerged openstack/openstack-ansible-os_nova master: Add barbican_service_user section  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89756214:27
noonedeadpunkwe have couple of weeks to check on that, so  I think it's not too late14:28
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/2023.1: Add barbican_service_user section  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89745714:28
NeilHanlonsounds good!14:28
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.7.2  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767214:34
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.8.3  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767214:37
noonedeadpunkI wonder how flawless upgrade of zookeeper is :D14:52
jrossernoonedeadpunk: it's a bit of a nit but this isnt from UCA? https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/89765615:25
noonedeadpunkah, I forgot to edit comment15:26
noonedeadpunktrue15:26
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Workaround ovs bug that resets hostname with add command  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/89765615:26
-opendevstatus- NOTICE: The Gerrit service on review.opendev.org will be offline momentarily while we restart it for a combined runtime and platform upgrade16:32
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Use distribution_major_version for Debian and CentOS  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/89770116:47
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add CI jobs for debian bookworm  https://review.opendev.org/c/openstack/openstack-ansible/+/89456116:47
NeilHanlonnoonedeadpunk, jrosser: so.. ran into an ansible-lint problem on an unrelated file for https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/897673 -- should I fix in its own commit? 16:47
opendevreviewMerged openstack/openstack-ansible stable/xena: Use github to fetch ansible collections  https://review.opendev.org/c/openstack/openstack-ansible/+/89735616:48
NeilHanlonfeels like yes, but also feels like more backporting work :\16:48
noonedeadpunkyeah....16:48
jrosserah yes there are whole bunch of patches like that16:48
NeilHanlonit's fine.. i need more practice lol16:48
noonedeadpunkbut this example playbook doesn't need backporting16:48
noonedeadpunkit's smth we break on master by using latest ansible-lint16:48
noonedeadpunksuch rules simply didn't exist before16:49
NeilHanlonah.. i wasn't sure if we'd end up seeing it on other branches too16:49
noonedeadpunknah, only on master16:49
NeilHanlonin that case, i'll just submit it and stack the other changes on top16:49
noonedeadpunk++16:49
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: change to using archive.apache.org for source downloads  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767316:49
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.8.3  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767216:49
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: chore: fix linter for example playbook  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89770216:49
jrossernoonedeadpunk: is there a way we can improve on this? https://github.com/openstack/openstack-ansible/blob/master/scripts/get-ansible-role-requirements.yml#L10816:50
jrosserthere a quite a few jobs failed downloading of u-c16:50
jrosserand they are almost always upgrade jobs16:51
noonedeadpunkNeilHanlon: btw, it seems that checksum is wrong here https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767216:51
NeilHanlonah, thanks. i must've made a mistake when rebasing16:51
noonedeadpunkjrosser: well.... then we need to store state of all zuul repos somewhere, and check them back on upgrade before second bootstrap16:52
jrosseryes i was just looking at https://github.com/openstack/openstack-ansible/commit/c7ab46f620243d6fb0bf86e656007b512dd82bce16:53
jrosserand not really remembering what a mess there is16:53
noonedeadpunkso, after upgrade we wanna use repos prepared by zuul, while before upgrade take basically what;s in a-r-r16:54
noonedeadpunkas iirc you can't really checkout easily back if there's a depends-on or smth like that16:55
noonedeadpunkbut not sure about the last one16:55
NeilHanlonhrm - that's the checksum i am getting..16:55
noonedeadpunkwas that sha512?16:57
NeilHanlonye16:57
NeilHanlon4f68434a55a93b88e422029a8583ebdc060e1cc2aed38cdc0170c5612be6f6209947d10b488eae671ff7279201c166d34095b0be446b930a918a24f509b159e5  apache-zookeeper-3.8.3.tar.gz16:57
noonedeadpunkas I'm getting eb1a5e79fe55fa50e36021ca8b752e40584d5e24f23985c43e9f56abfbf23c0239dce37d18f27213c9a38fcb6f68daf1a9468fc352e6ac2364faaf9b56145bdf16:57
noonedeadpunkhttps://paste.openstack.org/show/boAaxKE9VRU8EmNiam9U/16:57
* NeilHanlon slaps self in face16:58
NeilHanlon-bin :) 16:58
noonedeadpunkyeah)16:58
noonedeadpunkwas just writting that )16:58
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.8.3  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767216:59
NeilHanlonreading is hard16:59
NeilHanlonstay in school, kids16:59
noonedeadpunkI'm really not getting why https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/894740 fails on upgrade for jammy... And what 10.6 is doing there.... It's some nonsense... 17:01
noonedeadpunkand what has happened to gluster for rocky?17:01
noonedeadpunkfatal: [aio1_repo_container-cd5e9530]: FAILED! => {"changed": false, "msg": "Failed to download packages: No URLs in mirrorlist", "results": []}17:01
noonedeadpunkAh, I guess that's old good infra issue?17:02
jrosseri guess my upgrade question is really about if we really need to change this between source and target branches https://codesearch.opendev.org/?q=openstack_opendev_base_url&i=nope&literal=nope&files=&excludeFiles=&repos=17:04
jrosserlike why do we need specifically the opendev.org version on the source branch and on-disk version of all that for the target branch17:05
noonedeadpunkwell, because otherwise on-disk repos will be checkouted to N-1 version I guess?17:11
noonedeadpunkand then you don't know how to check-out them back17:12
noonedeadpunkunless do some rsync to the directory nearby as alternative path17:12
noonedeadpunkand defining it as place on disk17:12
jrosserbut those are the openstack services17:12
jrosserwhich we install with pip and a git sha17:12
noonedeadpunkdo we?17:13
noonedeadpunkI thought we override them as well for some reason17:13
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/get-ansible-role-requirements.yml#L103-L10417:13
noonedeadpunkah, or you mean they're not "broken" by installation17:14
noonedeadpunkand we don't respect depnds-on either there17:14
jrosseryeah17:15
jrosserit's why is the task you linked controlled by this when: https://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/get-ansible-role-requirements.yml#L10817:15
jrosseri don't see what that does17:15
noonedeadpunkBut I somehow was under impression that we do.... I can be really wrong here17:15
jrosserall the complexity in that block: is dealing with a-r-r17:16
noonedeadpunkyeah, then openstack_opendev_base_url should be right out of the block but still having `- "lookup('env', 'ZUUL_SRC_PATH') != ''"` condition?17:17
noonedeadpunkok, yes, I think you're right here17:18
jrosserso so i have another question :(17:19
noonedeadpunkthese are indeed not very related 2 things17:19
jrosserhere we symlink https://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/get-ansible-role-requirements.yml#L7317:19
jrosserand here we clone https://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/get-ansible-role-requirements.yml#L13217:19
jrosserand i am wtf17:19
jrosserclearly i am missing something here17:20
noonedeadpunklike why not to symlink directly to dest?17:20
jrosseroh wait17:21
noonedeadpunkAh, but we have clone_roles17:21
jrosserclone_roles excludes things that are linked17:21
noonedeadpunkSo what's in zuul is not cloned17:21
noonedeadpunkyes17:21
noonedeadpunk:)17:21
jrossermore comments needed i think17:21
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Always use on-disk openstack service git repos in CI jobs  https://review.opendev.org/c/openstack/openstack-ansible/+/89770717:29
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Always use on-disk openstack service git repos in CI jobs  https://review.opendev.org/c/openstack/openstack-ansible/+/89770717:31
NeilHanlonnoonedeadpunk: gluster for rocky comes from centos, right?17:42
NeilHanloni do know fedora has been having some issues recently.. i wonder if related17:43
noonedeadpunkah, might be from centos indeed18:12
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Use distribution_major_version for Debian and CentOS  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/89770118:18
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/zed: Add barbican_service_user section  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89772118:25
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/yoga: Add barbican_service_user section  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89772218:25
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova stable/xena: Add barbican_service_user section  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/89772318:25
noonedeadpunkI clean forgot if we've backported journalctl trimm back to 2023.1....18:27
noonedeadpunkSeems, that massive curl update is pending... https://www.phoronix.com/news/Curl-8.4-Coming18:48
noonedeadpunkMassive in terms of amount of things that needs to be updated ofc18:48
* NeilHanlon cries 18:50
NeilHanlonwho's buying us the beers18:51
NeilHanlonoof. we have a cycle between 897702 and and 897673 now.18:56
NeilHanloni.e., 897702 can't pass CI because of 897673, and the reverse is also true18:57
jrosserit's probably reasonable to squash those two together as they would both backport cleanly19:01
jrosserand the example lint fix isnt going to have any risk on a stable branch19:01
jrosseralternatively you can disable the broken CI test in one of them and propose a revert directly afterwards, but thats more work19:02
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.8.3  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767219:09
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: change to using archive.apache.org for source downloads  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767319:12
opendevreviewNeil Hanlon proposed openstack/ansible-role-zookeeper master: update zookeeper to 3.8.3  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/89767219:13
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Add AppArmor configuration for ceph read/write caching  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/89766120:55

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!