Monday, 2025-06-02

opendevreviewOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/95148404:47
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: scaling deployment with MariaDB and RabbitMQ  https://review.opendev.org/c/openstack/openstack-ansible/+/94997907:26
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: wip  https://review.opendev.org/c/openstack/openstack-ansible/+/95149708:11
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: fix minor grammar mistake  https://review.opendev.org/c/openstack/openstack-ansible/+/95149708:17
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Add apparmor rules for ironic inspector  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/95100308:38
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_networkd master: Add EL10 support to the role  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/95113708:48
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add AIO bootstrap support for EL10  https://review.opendev.org/c/openstack/openstack-ansible/+/95114008:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Remove LIBSYSTEMD_VERSION override for AIO  https://review.opendev.org/c/openstack/openstack-ansible/+/95132408:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins master: Update supported platforms for host setup  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/95114208:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_ironic master: Add apparmor rules for ironic inspector  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/95100308:51
opendevreviewMerged openstack/openstack-ansible master: docs: little update for compatibility-matrix  https://review.opendev.org/c/openstack/openstack-ansible/+/95078709:08
opendevreviewMerged openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/95148409:09
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add support for EL10  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/95131509:36
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: fix minor grammar mistake  https://review.opendev.org/c/openstack/openstack-ansible/+/95149710:16
kleinihttps://docs.openstack.org/openstack-ansible-os_keystone/2024.1/configure-keystone.html#implementing-ldap-or-active-directory-backends <- would it make sense here to mention, that keystone now requires additional configuration like https://docs.openstack.org/releasenotes/keystone/2023.2.html#upgrade-notes10:21
kleiniI am running in staging now in https://bugs.launchpad.net/keystone/+bug/207640910:21
noonedeadpunkit totally would make sense10:28
noonedeadpunkespeciually given we have a ldaps example there10:29
noonedeadpunkit's a bit confusing though, that there's no ldap section by default though10:30
noonedeadpunkah10:32
noonedeadpunkso pretty much to example we'd need to add a key tls_cacertfile: /etc/ssl/certs/ca-certificates.crt10:32
noonedeadpunkor extend keystone_pki_install_certificates with internal CA file 10:33
kleiniI can only provide a change like mentioned in the bug report, because I am unfamiliar with the whole own PKI topic.10:37
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: wip remove deprecated clients  https://review.opendev.org/c/openstack/openstack-ansible/+/95150710:38
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: remove deprecated nova and neutron CLI clients  https://review.opendev.org/c/openstack/openstack-ansible/+/95150710:59
noonedeadpunkkleini: that would be fine as well, I guess.11:11
noonedeadpunkBut I meant this variable: https://opendev.org/openstack/openstack-ansible-os_keystone/src/branch/master/defaults/main.yml#L289-L30211:12
noonedeadpunkas you see - it already does handle cert distribution for IDP, but not for LDAP11:12
noonedeadpunkso was thinking of leveraging around same logic for LDAP as well11:13
noonedeadpunkbut using ca-certificates should be enough indeed11:13
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: wip: gullabel  https://review.opendev.org/c/openstack/openstack-ansible/+/95151411:17
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: add guilabels for managing images page  https://review.opendev.org/c/openstack/openstack-ansible/+/95151411:22
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: wip:  https://review.opendev.org/c/openstack/openstack-ansible/+/95151512:01
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: minor instructions update for managing instances  https://review.opendev.org/c/openstack/openstack-ansible/+/95151512:08
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: wip: dup  https://review.opendev.org/c/openstack/openstack-ansible/+/95151812:50
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: remove duplicated phrase from sentence  https://review.opendev.org/c/openstack/openstack-ansible/+/95151812:54
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: docs: remove duplicated phrase from sentence  https://review.opendev.org/c/openstack/openstack-ansible/+/95151813:01
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-haproxy_server master: wip  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/95152113:33
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-haproxy_server master: wip  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/95152113:43
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-haproxy_server master: docs: fix small mistakes with Keepalived, Let’s Encrypt and HAProxy  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/95152113:45
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Add apparmor rules for ironic inspector  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/95100313:45
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-haproxy_server master: docs: fix small mistakes with Keepalived, Let’s Encrypt and HAProxy  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/95152113:51
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: wip: add deploy guide  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152414:01
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-rabbitmq_server master: wip  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/95103914:02
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-rabbitmq_server master: docs: updated information about dependencies  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/95103914:02
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: wip: add deploy guide  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152414:17
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152814:25
jrosserNeilHanlon: it's OK to +W things that are in the same "relation chain" in the same repo14:26
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152814:26
NeilHanlonjrosser: okay :D I couldn't quite remember14:27
jrosseryou get the zuul queue error if you +W something in a different repo14:27
NeilHanlonwhat about for https://review.opendev.org/c/openstack/openstack-ansible/+/951324/2 where the middle commit is still w/o review?14:29
NeilHanlonor, i guess it's just git...14:29
NeilHanlonso it can't really merge them another way lol14:29
NeilHanlonah and then i moved https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/951137 along without waiting for the cross-repo change to merge cause i was thinking Zuul would wait 14:30
noonedeadpunkI will recheck - not a problem at all14:34
jrosseryeah so for the one with the failed test in the middle of the relation chain, we can only recheck that and get it passing in order to merge things further up the chain14:39
jrosseri expect we will be told "youre doing it wrong" with having each repo in its own zuul queue (well, we have been already)14:40
jrosserbut tbh the job reliability multiplied by the number of times we want to merge a similar but unrelated patch across dozens of repos would make putting them all in the same queue quite bad, just in other ways14:41
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: wip  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152914:43
opendevreviewMerged openstack/ansible-hardening master: Add support for EL10  https://review.opendev.org/c/openstack/ansible-hardening/+/95129614:47
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152414:50
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: wip  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152914:52
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Fix for usage of modules via FQCN  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152914:54
noonedeadpunkjrosser: NeilHanlon - given we are having a decent progress on EL10 - do we want to go on and backport them to 2025.1 ?14:55
noonedeadpunkas I'd vote for that tbh, regardless absent CI14:55
noonedeadpunkmaybe not mentioning support for it in docs at all14:56
jrosseryes it seems ok14:56
noonedeadpunkuntil we have CI14:56
NeilHanloni'm good w/ backporting it, yeah14:56
noonedeadpunkor with HUUUUGEEEEE asterisk14:56
NeilHanlonRocky 10 is basically ready to ship, aside a Go/No-Go14:56
noonedeadpunkwe pretty much miss LXC and MariaDB repo there atm14:57
noonedeadpunkso maybe even explicitly stating that it's not supported in the docs14:57
noonedeadpunkbut all these things may sort out without any our intervention14:58
* NeilHanlon will build his lxc COPR for now14:59
noonedeadpunkNeilHanlon: would it be possible for you or David to spawn a metal all-in-one on Rocky 10 jsut to confirm it's working there as well?14:59
noonedeadpunkonce patches will land on master14:59
NeilHanlontotally15:00
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Remove tags from README  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152815:00
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152415:10
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Fix for usage of modules via FQCN  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152915:17
NeilHanlontrying to build an LXC but my git server is being crushed by AI bots15:28
NeilHanlonlove that for me15:28
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_adjutant master: Ensure that first/last host detection is deterministic  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/92460815:29
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-os_adjutant master: Add tag to enable targeting of post-install config elements only  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/91967915:31
noonedeadpunkadjutant had troubles with TLS jobs and I never was able to look into the root cause15:35
noonedeadpunkbtw for LXC we might need this: https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/95117715:36
noonedeadpunkOr well15:37
noonedeadpunkI would need to adjust that for EL10 and have a different one for EL9 and EL10?15:37
noonedeadpunkugh15:37
noonedeadpunkor we just don't need that right now...15:37
noonedeadpunkugh15:39
noonedeadpunk951177 should allow you NeilHanlon not to build lxc-templates-extra package15:42
noonedeadpunkbut I think I need to work on 843672 more to allow conditionally use copr/epel based on the distro15:43
opendevreviewMerged openstack/openstack-ansible-os_tempest master: Add EL10 support  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/95133216:22
opendevreviewMerged openstack/openstack-ansible-os_tempest master: Drop EL8 support  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/95133316:22
opendevreviewMerged openstack/openstack-ansible-rabbitmq_server master: Add EL10 support  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/95131616:25
opendevreviewMerged openstack/openstack-ansible-plugins master: Add support for EL10 to GlusterFS role  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/95131416:40
opendevreviewMerged openstack/openstack-ansible-plugins master: Update supported platforms for host setup  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/95114216:40
noonedeadpunkhttps://review.opendev.org/c/openstack/openstack-ansible/+/951140 has passed tests recently16:41
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Transform GPG/Repo installed to be a list  https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/95157416:46
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/2025.1: Update supported platforms for host setup  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/95157616:48
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/2025.1: Update supported platforms for host setup  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/95157616:48
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/2025.1: Update supported platforms for host setup  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/95157616:49
opendevreviewMerged openstack/ansible-role-python_venv_build master: Add support for EL10  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/95132216:57
opendevreviewMerged openstack/openstack-ansible-os_octavia master: Switch from wsgi script to wsgi module  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/95051417:02
opendevreviewMerged openstack/openstack-ansible master: Do not require full git & autoconf on EL  https://review.opendev.org/c/openstack/openstack-ansible/+/95112417:10
NeilHanlonnoonedeadpunk: I was gonna ask you about that.. it looks like the templates package is there but it provides the like "download" template that just grabs an LXC image from the registry.. is that sufficient or do we need the extra templates17:26
noonedeadpunkso I removed lxc-templates-extra requirement here: https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/843672/18/vars/redhat-host.yml17:27
noonedeadpunkbut lxc-templates is still needed17:28
noonedeadpunkas it provides the common one17:28
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Ensure Python is installed on EL10  https://review.opendev.org/c/openstack/openstack-ansible/+/95157917:32
noonedeadpunkhuh, we never fixed SSH keypair generation for Octavia?17:56
noonedeadpunkah, we did17:57
noonedeadpunkhttps://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/927728/2/defaults/main.yml17:58
opendevreviewMerged openstack/openstack-ansible master: Add CentOS Stream 10 to molecule tests  https://review.opendev.org/c/openstack/openstack-ansible/+/95113218:11
opendevreviewMerged openstack/openstack-ansible master: Do not enable ebtables on modern kernels  https://review.opendev.org/c/openstack/openstack-ansible/+/95116018:11
opendevreviewMerged openstack/openstack-ansible master: [doc] Remove historical information from the index page  https://review.opendev.org/c/openstack/openstack-ansible/+/95111318:12
opendevreviewMerged openstack/openstack-ansible master: [doc] Add release codename to formal_name  https://review.opendev.org/c/openstack/openstack-ansible/+/95111618:12
opendevreviewMerged openstack/openstack-ansible master: Remove Rocky 9 molecule testing  https://review.opendev.org/c/openstack/openstack-ansible/+/95126818:12
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add trove tempest testing  https://review.opendev.org/c/openstack/openstack-ansible/+/78437918:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_trove master: Add support for generation of SSH keypairs  https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/95159019:06
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_trove master: Add support for generation of SSH keypairs  https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/95159019:07
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152419:18
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152419:29
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Fix for usage of modules via FQCN  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152919:38
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/95152419:46
NeilHanlonnoonedeadpunk: i've got lxc built for EL10 in my COPR repo (and lxcfs and python3-lxc, which we also need) so we should be good on that19:51
NeilHanlonhttps://copr.fedorainfracloud.org/coprs/neil/lxc4.0/repo/epel-10/neil-lxc4.0-epel-10.repo19:51
mnasiadkaNeilHanlon: do you have any epel10 powers, or should I try to build mod_auth_mellon in COPR? ;-)20:46
NeilHanloni don't have any special powers. I see you bumped it today per the policy :D20:48
NeilHanlonbuilding in copr can't hurt, but i am a packager in fedora too so I can takeover the EPEL branches if they don't respond to your message20:50
NeilHanlonbut that'll take 2 weeks from now, so..20:50
mnasiadkasure :)20:52
opendevreviewMerged openstack/openstack-ansible-os_barbican master: Switch from wsgi script to wsgi module  https://review.opendev.org/c/openstack/openstack-ansible-os_barbican/+/95050321:03
opendevreviewMerged openstack/openstack-ansible-os_neutron master: Remove EL9 and Jammy jobs  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/95136721:35
opendevreviewMerged openstack/openstack-ansible-openstack_hosts master: Add support for EL10  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/95116121:45
opendevreviewMerged openstack/ansible-role-systemd_networkd master: Add EL10 support to the role  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/95113722:27
BaronvaileHas anybody been seeing a URL check failer on the uper constaints check in the infrastructure playbook, but the url is avaliable; and rerunning the playbook completes successfully? Seems like a timings issue to me.22:43

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!