Wednesday, 2025-09-03

opendevreviewMerged openstack/ansible-role-pki stable/2025.1: Use internal _pki_ca_dirs in vars  https://review.opendev.org/c/openstack/ansible-role-pki/+/95910703:29
opendevreviewOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/95897403:49
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Make charset and collation configurables  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/95907504:52
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_magnum master: Remove jammy and rocky-9 CI jobs  https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/95069904:58
opendevreviewMerged openstack/openstack-ansible-os_octavia stable/2025.1: Add default values to environment lookups  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/95893905:44
gokhanhello noonedeadpunk, I am trying upgrade, newly added commit throw error about installed_rabbitmq is undefined. https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/95892507:11
gokhanI didn't find installed_rabbitmq fact. 07:11
noonedeadpunkhuh07:23
noonedeadpunkand you're running epoxy now?07:24
noonedeadpunkthe fact is expected to be set here: https://opendev.org/openstack/openstack-ansible-rabbitmq_server/src/branch/master/tasks/rabbitmq_upgrade_check.yml#L48-L5007:24
noonedeadpunkI see 2 includes of rabbitmq_feature_flags, and both of them are after this task from what I see07:26
noonedeadpunkso really would be interesting to see the play output in this case07:27
noonedeadpunkgokhan: ^07:28
gokhannoonedeadpunk, ahh sorry when ı work on rabbitmq, I have removed upgrade check in rabbitmq_install playbook, I added again. it worked. I am testing epoxy upgrade 07:37
noonedeadpunk++ gotcha07:48
noonedeadpunkwe should have named it with underscore to show internal nature of the variable...07:48
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Add debian trixie job definitions  https://review.opendev.org/c/openstack/openstack-ansible/+/95461614:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Use management address when available  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/95933815:44
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Use management address when available  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/95933815:44
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Use management address when available  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/95933915:48
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Use management_address instead of ansible_host for hosts files  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/95723915:49
f0o_is there a reason why https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/galera_all.yml#L59-L60 doesnt define all galera nodes as backends? Galera is multi-master-able if I recall right16:14
jrosserf0o_: https://docs.openstack.org/large-scale/journey/configure/database.html16:24
f0o_jrosser: it doesnt really go into it either, it is merely stamped off as 'This is required because OpenStack does not handle well the deadlocks when writing to different nodes in parallel.' without much as to _why_ it does not handle it.16:27
f0o_my immediate mind goes into lock propagation issues but that would imply that openstack creates locks, does queries and releases locks in distinct queries/connections rather than using statements/transactions etc16:27
f0o_just curious :)16:28
*** f0o_ is now known as f0o16:28
noonedeadpunkf0o: so while you can write to multiple, only one actually does process writes16:34
noonedeadpunkso you still better do write to the correct one16:34
noonedeadpunkit's just failovering way more smoothly then classic replication16:35
noonedeadpunkbut eventually I need get to ProxySQL implementation, which I almost made 3 or 4 years ago but accidentally wiped all the progress....16:35
f0oheh16:36
noonedeadpunkgit reset --hard in a wrong directory /o\16:36
f0oI just randomly found that while investigating some smaller nuisance of occasional `Got timeout reading communication packets`16:36
noonedeadpunkthis is likely just pooling race condition16:37
f0obut I think that's just a natural state of running mariadb through haproxy since eventually the connection will just get terminated16:37
noonedeadpunkin terms that pool timeout could be == to connection timeout16:37
noonedeadpunkor smth in line with that16:37
f0oyeah I dont think this is an actual issue, just the spark to made me look into how the galera playbook actually works - instead of just using it blindly16:38
noonedeadpunkbut ideally pool should be having slightly lower timeout, then it should be closing them normally16:38
f0ohaproxy has 5000s 😂16:38
noonedeadpunkor that16:38
noonedeadpunkbut it should not affect anything, as before doing request oslo checks for connection aliveness and re-establish it if it's wrong16:39
f0oneutron doesnt16:39
noonedeadpunk(bbut we really need proxysql)16:39
f0owe've had sporadic issues were neutron is presented with a `wsrep: node not ready` error and parts of neutron-server just stop working16:40
f0oagents dont check in, ports cant be created. but any GET operation will just work fine16:40
f0ohence, 'parts'... no clue why16:40
f0owe just trigger a systemctl restart neutron-server when we parse it in the logs and it solves it16:41
f0obut its been a while since we had this, it just popped into my head and sparked intereset16:42
f0oalso I cant spell today, being on sickleave is not doing me any good16:43
noonedeadpunkthat sounds more like rpc issues tbh16:47
noonedeadpunkrather then db... but not sure16:47
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: Fix missing security-hardening by switching to FQCN  https://review.opendev.org/c/openstack/openstack-ansible/+/95939823:21
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: Fix missing security-hardening by switching to FQCN  https://review.opendev.org/c/openstack/openstack-ansible/+/95939823:22
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: Fix missing security-hardening by switching to FQCN  https://review.opendev.org/c/openstack/openstack-ansible/+/95939823:27
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: Document deployment host security hardening  https://review.opendev.org/c/openstack/openstack-ansible/+/95940023:35
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: Document deployment host security hardening  https://review.opendev.org/c/openstack/openstack-ansible/+/95940023:45
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: [doc] Fix missing security-hardening by switching to FQCN  https://review.opendev.org/c/openstack/openstack-ansible/+/95939823:47
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible master: [doc] Document deployment host security hardening  https://review.opendev.org/c/openstack/openstack-ansible/+/95940023:47

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!