| opendevreview | OpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/c/openstack/openstack-ansible/+/951484 | 04:47 |
|---|---|---|
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: scaling deployment with MariaDB and RabbitMQ https://review.opendev.org/c/openstack/openstack-ansible/+/949979 | 07:26 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: wip https://review.opendev.org/c/openstack/openstack-ansible/+/951497 | 08:11 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: fix minor grammar mistake https://review.opendev.org/c/openstack/openstack-ansible/+/951497 | 08:17 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Add apparmor rules for ironic inspector https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/951003 | 08:38 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-systemd_networkd master: Add EL10 support to the role https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/951137 | 08:48 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add AIO bootstrap support for EL10 https://review.opendev.org/c/openstack/openstack-ansible/+/951140 | 08:50 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Remove LIBSYSTEMD_VERSION override for AIO https://review.opendev.org/c/openstack/openstack-ansible/+/951324 | 08:50 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-plugins master: Update supported platforms for host setup https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/951142 | 08:50 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ironic master: Add apparmor rules for ironic inspector https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/951003 | 08:51 |
| opendevreview | Merged openstack/openstack-ansible master: docs: little update for compatibility-matrix https://review.opendev.org/c/openstack/openstack-ansible/+/950787 | 09:08 |
| opendevreview | Merged openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/c/openstack/openstack-ansible/+/951484 | 09:09 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Add support for EL10 https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/951315 | 09:36 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: fix minor grammar mistake https://review.opendev.org/c/openstack/openstack-ansible/+/951497 | 10:16 |
| kleini | https://docs.openstack.org/openstack-ansible-os_keystone/2024.1/configure-keystone.html#implementing-ldap-or-active-directory-backends <- would it make sense here to mention, that keystone now requires additional configuration like https://docs.openstack.org/releasenotes/keystone/2023.2.html#upgrade-notes | 10:21 |
| kleini | I am running in staging now in https://bugs.launchpad.net/keystone/+bug/2076409 | 10:21 |
| noonedeadpunk | it totally would make sense | 10:28 |
| noonedeadpunk | especiually given we have a ldaps example there | 10:29 |
| noonedeadpunk | it's a bit confusing though, that there's no ldap section by default though | 10:30 |
| noonedeadpunk | ah | 10:32 |
| noonedeadpunk | so pretty much to example we'd need to add a key tls_cacertfile: /etc/ssl/certs/ca-certificates.crt | 10:32 |
| noonedeadpunk | or extend keystone_pki_install_certificates with internal CA file | 10:33 |
| kleini | I can only provide a change like mentioned in the bug report, because I am unfamiliar with the whole own PKI topic. | 10:37 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: wip remove deprecated clients https://review.opendev.org/c/openstack/openstack-ansible/+/951507 | 10:38 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: remove deprecated nova and neutron CLI clients https://review.opendev.org/c/openstack/openstack-ansible/+/951507 | 10:59 |
| noonedeadpunk | kleini: that would be fine as well, I guess. | 11:11 |
| noonedeadpunk | But I meant this variable: https://opendev.org/openstack/openstack-ansible-os_keystone/src/branch/master/defaults/main.yml#L289-L302 | 11:12 |
| noonedeadpunk | as you see - it already does handle cert distribution for IDP, but not for LDAP | 11:12 |
| noonedeadpunk | so was thinking of leveraging around same logic for LDAP as well | 11:13 |
| noonedeadpunk | but using ca-certificates should be enough indeed | 11:13 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: wip: gullabel https://review.opendev.org/c/openstack/openstack-ansible/+/951514 | 11:17 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: add guilabels for managing images page https://review.opendev.org/c/openstack/openstack-ansible/+/951514 | 11:22 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: wip: https://review.opendev.org/c/openstack/openstack-ansible/+/951515 | 12:01 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: minor instructions update for managing instances https://review.opendev.org/c/openstack/openstack-ansible/+/951515 | 12:08 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: wip: dup https://review.opendev.org/c/openstack/openstack-ansible/+/951518 | 12:50 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: remove duplicated phrase from sentence https://review.opendev.org/c/openstack/openstack-ansible/+/951518 | 12:54 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: remove duplicated phrase from sentence https://review.opendev.org/c/openstack/openstack-ansible/+/951518 | 13:01 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-haproxy_server master: wip https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/951521 | 13:33 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-haproxy_server master: wip https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/951521 | 13:43 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-haproxy_server master: docs: fix small mistakes with Keepalived, Let’s Encrypt and HAProxy https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/951521 | 13:45 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_ironic master: Add apparmor rules for ironic inspector https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/951003 | 13:45 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-haproxy_server master: docs: fix small mistakes with Keepalived, Let’s Encrypt and HAProxy https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/951521 | 13:51 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: wip: add deploy guide https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951524 | 14:01 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-rabbitmq_server master: wip https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/951039 | 14:02 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-rabbitmq_server master: docs: updated information about dependencies https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/951039 | 14:02 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: wip: add deploy guide https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951524 | 14:17 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Remove tags from README https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951528 | 14:25 |
| jrosser | NeilHanlon: it's OK to +W things that are in the same "relation chain" in the same repo | 14:26 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Remove tags from README https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951528 | 14:26 |
| NeilHanlon | jrosser: okay :D I couldn't quite remember | 14:27 |
| jrosser | you get the zuul queue error if you +W something in a different repo | 14:27 |
| NeilHanlon | what about for https://review.opendev.org/c/openstack/openstack-ansible/+/951324/2 where the middle commit is still w/o review? | 14:29 |
| NeilHanlon | or, i guess it's just git... | 14:29 |
| NeilHanlon | so it can't really merge them another way lol | 14:29 |
| NeilHanlon | ah and then i moved https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/951137 along without waiting for the cross-repo change to merge cause i was thinking Zuul would wait | 14:30 |
| noonedeadpunk | I will recheck - not a problem at all | 14:34 |
| jrosser | yeah so for the one with the failed test in the middle of the relation chain, we can only recheck that and get it passing in order to merge things further up the chain | 14:39 |
| jrosser | i expect we will be told "youre doing it wrong" with having each repo in its own zuul queue (well, we have been already) | 14:40 |
| jrosser | but tbh the job reliability multiplied by the number of times we want to merge a similar but unrelated patch across dozens of repos would make putting them all in the same queue quite bad, just in other ways | 14:41 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: wip https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951529 | 14:43 |
| opendevreview | Merged openstack/ansible-hardening master: Add support for EL10 https://review.opendev.org/c/openstack/ansible-hardening/+/951296 | 14:47 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951524 | 14:50 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: wip https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951529 | 14:52 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Fix for usage of modules via FQCN https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951529 | 14:54 |
| noonedeadpunk | jrosser: NeilHanlon - given we are having a decent progress on EL10 - do we want to go on and backport them to 2025.1 ? | 14:55 |
| noonedeadpunk | as I'd vote for that tbh, regardless absent CI | 14:55 |
| noonedeadpunk | maybe not mentioning support for it in docs at all | 14:56 |
| jrosser | yes it seems ok | 14:56 |
| noonedeadpunk | until we have CI | 14:56 |
| NeilHanlon | i'm good w/ backporting it, yeah | 14:56 |
| noonedeadpunk | or with HUUUUGEEEEE asterisk | 14:56 |
| NeilHanlon | Rocky 10 is basically ready to ship, aside a Go/No-Go | 14:56 |
| noonedeadpunk | we pretty much miss LXC and MariaDB repo there atm | 14:57 |
| noonedeadpunk | so maybe even explicitly stating that it's not supported in the docs | 14:57 |
| noonedeadpunk | but all these things may sort out without any our intervention | 14:58 |
| * NeilHanlon will build his lxc COPR for now | 14:59 | |
| noonedeadpunk | NeilHanlon: would it be possible for you or David to spawn a metal all-in-one on Rocky 10 jsut to confirm it's working there as well? | 14:59 |
| noonedeadpunk | once patches will land on master | 14:59 |
| NeilHanlon | totally | 15:00 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Remove tags from README https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951528 | 15:00 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951524 | 15:10 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Fix for usage of modules via FQCN https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951529 | 15:17 |
| NeilHanlon | trying to build an LXC but my git server is being crushed by AI bots | 15:28 |
| NeilHanlon | love that for me | 15:28 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_adjutant master: Ensure that first/last host detection is deterministic https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/924608 | 15:29 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_adjutant master: Add tag to enable targeting of post-install config elements only https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/919679 | 15:31 |
| noonedeadpunk | adjutant had troubles with TLS jobs and I never was able to look into the root cause | 15:35 |
| noonedeadpunk | btw for LXC we might need this: https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/951177 | 15:36 |
| noonedeadpunk | Or well | 15:37 |
| noonedeadpunk | I would need to adjust that for EL10 and have a different one for EL9 and EL10? | 15:37 |
| noonedeadpunk | ugh | 15:37 |
| noonedeadpunk | or we just don't need that right now... | 15:37 |
| noonedeadpunk | ugh | 15:39 |
| noonedeadpunk | 951177 should allow you NeilHanlon not to build lxc-templates-extra package | 15:42 |
| noonedeadpunk | but I think I need to work on 843672 more to allow conditionally use copr/epel based on the distro | 15:43 |
| opendevreview | Merged openstack/openstack-ansible-os_tempest master: Add EL10 support https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/951332 | 16:22 |
| opendevreview | Merged openstack/openstack-ansible-os_tempest master: Drop EL8 support https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/951333 | 16:22 |
| opendevreview | Merged openstack/openstack-ansible-rabbitmq_server master: Add EL10 support https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/951316 | 16:25 |
| opendevreview | Merged openstack/openstack-ansible-plugins master: Add support for EL10 to GlusterFS role https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/951314 | 16:40 |
| opendevreview | Merged openstack/openstack-ansible-plugins master: Update supported platforms for host setup https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/951142 | 16:40 |
| noonedeadpunk | https://review.opendev.org/c/openstack/openstack-ansible/+/951140 has passed tests recently | 16:41 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Transform GPG/Repo installed to be a list https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/951574 | 16:46 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/2025.1: Update supported platforms for host setup https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/951576 | 16:48 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/2025.1: Update supported platforms for host setup https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/951576 | 16:48 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/2025.1: Update supported platforms for host setup https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/951576 | 16:49 |
| opendevreview | Merged openstack/ansible-role-python_venv_build master: Add support for EL10 https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/951322 | 16:57 |
| opendevreview | Merged openstack/openstack-ansible-os_octavia master: Switch from wsgi script to wsgi module https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/950514 | 17:02 |
| opendevreview | Merged openstack/openstack-ansible master: Do not require full git & autoconf on EL https://review.opendev.org/c/openstack/openstack-ansible/+/951124 | 17:10 |
| NeilHanlon | noonedeadpunk: I was gonna ask you about that.. it looks like the templates package is there but it provides the like "download" template that just grabs an LXC image from the registry.. is that sufficient or do we need the extra templates | 17:26 |
| noonedeadpunk | so I removed lxc-templates-extra requirement here: https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/843672/18/vars/redhat-host.yml | 17:27 |
| noonedeadpunk | but lxc-templates is still needed | 17:28 |
| noonedeadpunk | as it provides the common one | 17:28 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Ensure Python is installed on EL10 https://review.opendev.org/c/openstack/openstack-ansible/+/951579 | 17:32 |
| noonedeadpunk | huh, we never fixed SSH keypair generation for Octavia? | 17:56 |
| noonedeadpunk | ah, we did | 17:57 |
| noonedeadpunk | https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/927728/2/defaults/main.yml | 17:58 |
| opendevreview | Merged openstack/openstack-ansible master: Add CentOS Stream 10 to molecule tests https://review.opendev.org/c/openstack/openstack-ansible/+/951132 | 18:11 |
| opendevreview | Merged openstack/openstack-ansible master: Do not enable ebtables on modern kernels https://review.opendev.org/c/openstack/openstack-ansible/+/951160 | 18:11 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Remove historical information from the index page https://review.opendev.org/c/openstack/openstack-ansible/+/951113 | 18:12 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Add release codename to formal_name https://review.opendev.org/c/openstack/openstack-ansible/+/951116 | 18:12 |
| opendevreview | Merged openstack/openstack-ansible master: Remove Rocky 9 molecule testing https://review.opendev.org/c/openstack/openstack-ansible/+/951268 | 18:12 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add trove tempest testing https://review.opendev.org/c/openstack/openstack-ansible/+/784379 | 18:22 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_trove master: Add support for generation of SSH keypairs https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/951590 | 19:06 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_trove master: Add support for generation of SSH keypairs https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/951590 | 19:07 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951524 | 19:18 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951524 | 19:29 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_adjutant master: Fix for usage of modules via FQCN https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951529 | 19:38 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible-os_adjutant master: docs: add link to OSA deployment guide for adding a role https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/951524 | 19:46 |
| NeilHanlon | noonedeadpunk: i've got lxc built for EL10 in my COPR repo (and lxcfs and python3-lxc, which we also need) so we should be good on that | 19:51 |
| NeilHanlon | https://copr.fedorainfracloud.org/coprs/neil/lxc4.0/repo/epel-10/neil-lxc4.0-epel-10.repo | 19:51 |
| mnasiadka | NeilHanlon: do you have any epel10 powers, or should I try to build mod_auth_mellon in COPR? ;-) | 20:46 |
| NeilHanlon | i don't have any special powers. I see you bumped it today per the policy :D | 20:48 |
| NeilHanlon | building in copr can't hurt, but i am a packager in fedora too so I can takeover the EPEL branches if they don't respond to your message | 20:50 |
| NeilHanlon | but that'll take 2 weeks from now, so.. | 20:50 |
| mnasiadka | sure :) | 20:52 |
| opendevreview | Merged openstack/openstack-ansible-os_barbican master: Switch from wsgi script to wsgi module https://review.opendev.org/c/openstack/openstack-ansible-os_barbican/+/950503 | 21:03 |
| opendevreview | Merged openstack/openstack-ansible-os_neutron master: Remove EL9 and Jammy jobs https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/951367 | 21:35 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts master: Add support for EL10 https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/951161 | 21:45 |
| opendevreview | Merged openstack/ansible-role-systemd_networkd master: Add EL10 support to the role https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/951137 | 22:27 |
| Baronvaile | Has anybody been seeing a URL check failer on the uper constaints check in the infrastructure playbook, but the url is avaliable; and rerunning the playbook completes successfully? Seems like a timings issue to me. | 22:43 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!