| *** logan_ is now known as Guest31561 | 03:28 | |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-ops master: DNM: Test updating mcapi versions to latest https://review.opendev.org/c/openstack/openstack-ansible-ops/+/966563 | 07:44 |
|---|---|---|
| noonedeadpunk | mnasiadka: I think I had a ball rolling on openvswitch collection... hopefully, we will be granted access soon to it | 08:52 |
| mnasiadka | noonedeadpunk: seen that, thanks | 08:56 |
| noonedeadpunk | folks, another vote needed on https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/966404 to unblock infra ci jobs | 09:30 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-ops master: DNM: Test updating mcapi versions to latest https://review.opendev.org/c/openstack/openstack-ansible-ops/+/966563 | 10:52 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-ops master: DNM: Test updating mcapi versions to latest https://review.opendev.org/c/openstack/openstack-ansible-ops/+/966563 | 10:57 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-ops master: DNM: Test updating mcapi versions to latest https://review.opendev.org/c/openstack/openstack-ansible-ops/+/966563 | 11:01 |
| andrewbonney | noonedeadpunk: is CI broken in a way I should avoid adding +W to anything at the moment, or just certain jobs? | 11:40 |
| noonedeadpunk | I know that infra tls jobs are broken at least | 11:42 |
| andrewbonney | looks like that python_venv_build one might be blocked on the rabbitmq repo issue too | 11:42 |
| opendevreview | Merged openstack/openstack-ansible-os_neutron master: [doc] Add better navigation over OVN scenario https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/957438 | 11:43 |
| noonedeadpunk | doh | 11:44 |
| noonedeadpunk | indeed | 11:44 |
| noonedeadpunk | so we have circular dependency now. nice | 11:44 |
| andrewbonney | :) | 11:44 |
| noonedeadpunk | and then also upgrade jobs... | 11:46 |
| noonedeadpunk | ok, let's then merge rabbitmq one first | 11:46 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Deprecate br-vlan bridge usage https://review.opendev.org/c/openstack/openstack-ansible/+/955457 | 11:49 |
| noonedeadpunk | will propose patch to disable most of CI | 11:49 |
| opendevreview | Merged openstack/openstack-ansible-repo_server master: [doc] Add documentation around repo_server role https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/967059 | 12:00 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Fix link to supported distributions https://review.opendev.org/c/openstack/openstack-ansible/+/967076 | 12:10 |
| opendevreview | Damian Dąbrowski proposed openstack/ansible-role-pki master: Add hashi_vault backend https://review.opendev.org/c/openstack/ansible-role-pki/+/948881 | 12:29 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Add support for hashi_vault PKI backend https://review.opendev.org/c/openstack/openstack-ansible/+/948888 | 12:30 |
| opendevreview | Damian Dąbrowski proposed openstack/ansible-role-httpd master: Add hashi_vault pki backend support https://review.opendev.org/c/openstack/ansible-role-httpd/+/949430 | 12:30 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch erlang repo to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967523 | 12:55 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch erlang repo to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967523 | 13:08 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Install erlang for trixie from cloudsmith https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967689 | 13:08 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible master: DNM: Add minimal AIO files for k8s clusters https://review.opendev.org/c/openstack/openstack-ansible/+/966666 | 13:46 |
| noonedeadpunk | ok, so we need to start addressing from bottom to top rabbitmq issue | 13:54 |
| jrosser | oh goodness yes | 13:55 |
| jrosser | so start from oldest stable branch that doesnt have upgrade jobs | 13:55 |
| noonedeadpunk | I hope we dropped upgrade for 2024.1? | 13:55 |
| jrosser | well, they look n-v | 13:56 |
| noonedeadpunk | yeah... ok then... | 13:56 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server stable/2024.1: Change repository for deb to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967695 | 14:49 |
| lowercase | noonedeadpunk: hey! https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/TNLYCDBGAZEXDKMEINHNLUJX2QNZNYOM/#O2VU6EHHQLS3WIJTCMRESCWB5AIFNJ5U | 15:09 |
| lowercase | I'm hitting this issue too! | 15:09 |
| lowercase | Not with users, but with application credentials | 15:09 |
| lowercase | Did you make any progress in your research? | 15:10 |
| lowercase | https://review.opendev.org/c/openstack/keystone/+/959279 | 15:20 |
| noonedeadpunk | lowercase: this patch does work | 15:29 |
| noonedeadpunk | but it requires for users to login | 15:29 |
| noonedeadpunk | I'm actually not sure regarding application credentials... | 15:29 |
| noonedeadpunk | as application credentials should not be using this code to start with.... | 15:29 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server stable/2024.1: Change repository for deb to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967695 | 15:36 |
| lowercase | After looking through your code we're starting to believe we are not effected by this issue. All our users are auth'd by AD and local users are only service users and a manually check of the db shows they do not have the $5 $6 in the password hash | 15:45 |
| lowercase | back to the drawing board! | 15:46 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch erlang repo to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967523 | 15:51 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch erlang repo to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967523 | 15:53 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Install erlang for trixie from cloudsmith https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967689 | 15:57 |
| noonedeadpunk | ok, so these two should be unblocking master except upgrade jobs... | 15:57 |
| noonedeadpunk | lowercase: so regarding application credentials - there was another issue until caracal | 20:21 |
| noonedeadpunk | where they were not respecting role nesting | 20:22 |
| noonedeadpunk | as by defualt now member implies reader - application credentials could be missing reader privileges | 20:22 |
| noonedeadpunk | while some services require reader explicitly for some api calls | 20:22 |
| noonedeadpunk | https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967695 is passing on 2024.1 | 21:02 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server unmaintained/2023.1: Change repository for deb to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967775 | 21:06 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Install erlang for trixie from distro packages https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967689 | 21:37 |
| opendevreview | Merged openstack/openstack-ansible-rabbitmq_server stable/2024.1: Change repository for deb to deb1.rabbitmq.com https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/967695 | 22:46 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!