Tuesday, 2026-08-18

opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump molecule and ansible-lint requirements  https://review.opendev.org/c/openstack/openstack-ansible/+/99533912:49
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump molecule and ansible-lint requirements  https://review.opendev.org/c/openstack/openstack-ansible/+/99533913:11
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump Ansible version to 2.21 series and collections  https://review.opendev.org/c/openstack/openstack-ansible/+/100133713:11
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump Ansible version to 2.21 series and collections  https://review.opendev.org/c/openstack/openstack-ansible/+/100133713:15
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Remove Rocky release PQC GPG key  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100134413:56
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Revert "Remove Rocky release PQC GPG key"  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100134613:57
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-pki master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/ansible-role-pki/+/100134814:09
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-ops master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/100135014:11
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/100135114:13
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-config_template master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/ansible-config_template/+/100135414:15
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-httpd master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/ansible-role-httpd/+/100135514:16
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_mount master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/ansible-role-systemd_mount/+/100135814:17
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_networkd master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/100135914:18
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_service master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/100136014:19
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-uwsgi master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/ansible-role-uwsgi/+/100136114:21
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-apt_package_pinning master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/openstack-ansible-apt_package_pinning/+/100136214:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/100136314:24
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-memcached_server master: Fix compatability with latest molecule-plugins  https://review.opendev.org/c/openstack/openstack-ansible-memcached_server/+/100136514:25
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump molecule and ansible-lint requirements  https://review.opendev.org/c/openstack/openstack-ansible/+/99533914:25
noonedeadpunk#startmeeting openstack_ansible_meeting15:00
opendevmeetMeeting started Tue Aug 18 15:00:19 2026 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:00
noonedeadpunk#topic rollcall15:00
noonedeadpunko/15:00
noonedeadpunkit's been a while since last meeting:)15:00
noonedeadpunk#topic CI status15:05
noonedeadpunkSeems that CentOS Stream 10 jobs are passing now again15:05
noonedeadpunkI'd assume that regression was in the image has been resolved and/or image has been rebuild15:05
noonedeadpunkBut there are bad news as well - Rocky 10 is failing now15:07
noonedeadpunkI digged into Rocky 10, and the issue is not present in official images, as they were last updated on may 2915:08
noonedeadpunkbut it exists only in LXC containers15:08
noonedeadpunkSo basically Rocky team have issued new PQC GPG key, which gets installed with rpm install for the lxc image15:08
noonedeadpunkansible-core 2.21 does solve the issue, as rpm_key has been refactored there15:10
noonedeadpunkand it's not backportable, as python requirement is too high for debian 12 we still had on 2027.115:10
noonedeadpunkSo I also proposed a little bit weird workaround: 15:11
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100134415:12
noonedeadpunkThere is also alternative approach, which actually might be better idea to have... Potentially....15:13
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100122315:13
jrossero/ hello15:17
noonedeadpunkthe problem with alternative approach is that we'd need to replace rpm_key in all occurances which is nasty thing to deal with15:18
noonedeadpunkand horrible dependency cycle15:18
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Remove Rocky release PQC GPG key  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100134415:19
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Revert "Remove Rocky release PQC GPG key"  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100134615:19
jrosserJust deleting the key is not so bad15:21
noonedeadpunkunless they start signing everything with it....15:21
noonedeadpunkand drop old one...15:22
noonedeadpunkbut with this issue gone - we should be able to issue rechecks. 15:22
noonedeadpunkand it's been a while since we were able to merge things15:23
noonedeadpunkEventually for master we may land https://review.opendev.org/c/openstack/openstack-ansible/+/1001337 first15:23
jrosserhopefully there are not too many big changes15:24
noonedeadpunkIt's failing now on copr - it's unrelated as there was an outage15:24
noonedeadpunkbut this should unblock CI as well15:24
noonedeadpunk#topic office hours15:24
noonedeadpunktalking about big changes15:25
noonedeadpunkI resumed working on PEP503 and updated my patch yesterday15:25
noonedeadpunk#link https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/98553115:25
noonedeadpunkwhich actually makes a change for envs with limited connectivity, as index-url is supplied explicitly15:26
noonedeadpunkor well, even that15:27
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/100117915:27
jrosserwhen you say all expected packages should be present - that means build dependancies15:27
noonedeadpunkoops, I need to update wording15:28
noonedeadpunkI meant wheels obviously15:28
jrosseroh i mean it as a question tbh15:28
noonedeadpunkor python packages15:28
jrosserlike python deps or apt packages or whatever15:28
noonedeadpunkyeah, so my thinking was that actual services, when wheels build is enabled, should be only consuming things from repo container15:28
noonedeadpunkand they don't need an external index anyway15:29
noonedeadpunkit's needed only when wheel build is disabled15:29
jrosserwhat about non-built dependencies?15:29
noonedeadpunkI think this is where https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/1001179 comes to play, and doing rewrite to the defined index in case of 40415:30
noonedeadpunkand when weels are not built, I have that, but I am on the fence about it. I was not able to come up with decent enough solution not to break anybody with it....15:31
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100122215:31
noonedeadpunkAs it's neat to have pip.conf managed obviously, but I know ppl already do have an internal ways of doing that... 15:32
noonedeadpunkBut any other thing I was trying was conflicting on one way or another...15:32
jrosserso long as the internal way can be replaced with something in OSA, it might be OK15:32
jrosserbut if stuff needs python packages before that, then it could be tricky15:33
noonedeadpunkso we run only pki role before I think15:34
noonedeadpunkwhich needs python stuff but only on deploy?15:34
noonedeadpunkand deploy is not managed with openstack_hosts in general anyway...15:35
noonedeadpunkI also made a change to repect infra pipy mirrors: https://review.opendev.org/c/openstack/openstack-ansible/+/100123115:38
noonedeadpunkbut it doesn't prove any chicken-egg situation, as we don't firewall pypi index to be unreachable15:39
noonedeadpunkmaybe we can/should do that for the proxy job?15:39
noonedeadpunkwe also do have some tiny mass-changes to do actually15:42
noonedeadpunklike changing direct format for python - we changed only for gnocchi but should be done for rest as well15:43
noonedeadpunkand then I think we might be able to drop "admin" role from services, as well as clean-up service_token_roles_required15:43
noonedeadpunkI think this option has been removed, as secure rbac considered as completed15:44
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/2026.1: Fix ceph version for Ubuntu 24.04  https://review.opendev.org/c/openstack/openstack-ansible/+/100111215:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/2026.1: Fix ceph version for Ubuntu 24.04  https://review.opendev.org/c/openstack/openstack-ansible/+/100111215:53
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/2026.1: Fix ceph version for Ubuntu 24.04  https://review.opendev.org/c/openstack/openstack-ansible/+/100111215:54
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch ceph release to Umbrella  https://review.opendev.org/c/openstack/openstack-ansible/+/100110315:55
noonedeadpunk#endmeeting15:55
opendevmeetMeeting ended Tue Aug 18 15:55:42 2026 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:55
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-08-18-15.00.html15:55
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-08-18-15.00.txt15:55
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-08-18-15.00.log.html15:55
noonedeadpunkSo I'd assume we might need https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/1001344 and https://review.opendev.org/c/openstack/openstack-ansible/+/1001103 to merge first?16:10
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Remove Rocky release PQC GPG key  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100134417:49
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Remove Rocky release PQC GPG key  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100134418:11

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!