fungi | works for me! | 00:00 |
---|---|---|
*** dingyichen has joined #openstack-infra | 00:01 | |
ianw | clarkb: hmm, i left overhead because at least one of the quota is taken by the CI host i think | 00:01 |
clarkb | ianw: the mirror is in its own project which should have its own quota | 00:02 |
clarkb | we can double check that though | 00:02 |
ianw | well, yeah, but we started out with one project that had a quota for 100 | 00:02 |
*** jbadiapa has joined #openstack-infra | 00:02 | |
clarkb | ah | 00:02 |
ianw | then split that ... but i'm not sure on what the actual resources are underneath | 00:03 |
clarkb | so with the current flavor in use by mirror node assuming ram is limiting factor the nwe can do 99 test nodes | 00:03 |
ianw | but then we made the mirror disk about 3 times the others | 00:03 |
clarkb | my understansing is that the disk and cpu are not constraints as much as memory is, but we can ask john | 00:04 |
ianw | so that was how i came out with 3 - 1 - 1 in case we wanted to start a manual node == 95 :) | 00:04 |
ianw | i wasn't sure if we had *exactly* what was in the original project/tenant provisioned, or what | 00:04 |
clarkb | ya, it is worth understanding that better. I'll write an email | 00:05 |
ianw | actually, i said i'd write one about how we split it up, and update passwords | 00:05 |
ianw | i can do that now and stop procrastinating on it | 00:05 |
clarkb | ok, did you want to ask about the quota vs hardware too? | 00:05 |
ianw | clarkb: yep, i will | 00:06 |
clarkb | sounds good, thanks | 00:06 |
clarkb | ianw: maybe point out the new grafana page showing it in use too :) | 00:06 |
*** lifeless_ has joined #openstack-infra | 00:06 | |
*** lifeless has quit IRC | 00:06 | |
*** eernst has quit IRC | 00:07 | |
ianw | yep, i just released grafana02 back into puppet, so if that's ok, i will update the pointer | 00:07 |
*** heyongli has quit IRC | 00:07 | |
ianw | it looks a little nicer | 00:07 |
*** eernst has joined #openstack-infra | 00:07 | |
*** heyongli has joined #openstack-infra | 00:07 | |
ianw | i'll clean up the system-config, but i think we should probably just use installed=>latest for grafana. it seems well packaged and very backwards compatible | 00:08 |
*** r-daneel has joined #openstack-infra | 00:08 | |
clarkb | wfm | 00:09 |
clarkb | and ya I don't recall ever needing to change things due to them updated | 00:09 |
clarkb | but maybe that is because we never updated grafana | 00:09 |
*** slaweq has joined #openstack-infra | 00:11 | |
*** slaweq has quit IRC | 00:16 | |
*** heyongli has quit IRC | 00:17 | |
*** heyongli has joined #openstack-infra | 00:17 | |
*** bobh has joined #openstack-infra | 00:22 | |
*** zzzeek has quit IRC | 00:25 | |
*** zzzeek has joined #openstack-infra | 00:27 | |
*** heyongli has quit IRC | 00:27 | |
*** heyongli has joined #openstack-infra | 00:28 | |
*** felipemonteiro has joined #openstack-infra | 00:31 | |
*** heyongli has quit IRC | 00:38 | |
*** heyongli has joined #openstack-infra | 00:38 | |
*** camunoz has quit IRC | 00:44 | |
*** rh-jelabarre has quit IRC | 00:46 | |
*** yamamoto has joined #openstack-infra | 00:46 | |
*** heyongli has quit IRC | 00:48 | |
*** heyongli has joined #openstack-infra | 00:48 | |
*** yamamoto has quit IRC | 00:52 | |
*** zhangfei has joined #openstack-infra | 00:56 | |
*** eernst has quit IRC | 00:57 | |
*** heyongli has quit IRC | 00:58 | |
*** heyongli has joined #openstack-infra | 00:58 | |
*** markmcclain has quit IRC | 01:04 | |
*** felipemonteiro has quit IRC | 01:04 | |
*** markmcclain has joined #openstack-infra | 01:06 | |
*** heyongli has quit IRC | 01:08 | |
*** heyongli has joined #openstack-infra | 01:09 | |
*** heyongli has quit IRC | 01:19 | |
*** heyongli has joined #openstack-infra | 01:19 | |
*** caphrim007 has joined #openstack-infra | 01:20 | |
*** gyee has quit IRC | 01:25 | |
*** caphrim007_ has joined #openstack-infra | 01:27 | |
*** heyongli has quit IRC | 01:29 | |
*** heyongli has joined #openstack-infra | 01:29 | |
*** dpawlik has joined #openstack-infra | 01:29 | |
*** caphrim007 has quit IRC | 01:30 | |
*** links has joined #openstack-infra | 01:33 | |
*** yamahata has quit IRC | 01:34 | |
*** dpawlik has quit IRC | 01:34 | |
*** eernst has joined #openstack-infra | 01:39 | |
*** heyongli has quit IRC | 01:39 | |
*** iyamahat_ has quit IRC | 01:39 | |
*** heyongli has joined #openstack-infra | 01:39 | |
*** r-daneel has quit IRC | 01:48 | |
*** yamamoto has joined #openstack-infra | 01:48 | |
*** heyongli has quit IRC | 01:49 | |
*** heyongli has joined #openstack-infra | 01:50 | |
*** yamamoto has quit IRC | 01:54 | |
*** iyamahat has joined #openstack-infra | 01:54 | |
*** yamahata has joined #openstack-infra | 01:56 | |
*** eernst has quit IRC | 01:57 | |
*** zhangfei has quit IRC | 01:59 | |
*** heyongli has quit IRC | 02:00 | |
*** heyongli has joined #openstack-infra | 02:00 | |
*** hemna_ has quit IRC | 02:10 | |
*** heyongli has quit IRC | 02:10 | |
*** heyongli has joined #openstack-infra | 02:10 | |
*** slaweq has joined #openstack-infra | 02:11 | |
*** zhangfei has joined #openstack-infra | 02:12 | |
*** sree has joined #openstack-infra | 02:13 | |
*** slaweq has quit IRC | 02:16 | |
*** sree has quit IRC | 02:17 | |
*** heyongli has quit IRC | 02:20 | |
*** heyongli has joined #openstack-infra | 02:21 | |
*** roman_g has quit IRC | 02:21 | |
*** bobh has quit IRC | 02:24 | |
*** lifeless_ has quit IRC | 02:26 | |
*** eernst has joined #openstack-infra | 02:29 | |
*** heyongli has quit IRC | 02:30 | |
*** heyongli has joined #openstack-infra | 02:31 | |
*** bobh has joined #openstack-infra | 02:33 | |
*** eernst has quit IRC | 02:38 | |
*** heyongli has quit IRC | 02:41 | |
*** heyongli has joined #openstack-infra | 02:41 | |
*** lifeless has joined #openstack-infra | 02:43 | |
*** sthussey has quit IRC | 02:44 | |
*** psachin has joined #openstack-infra | 02:46 | |
*** bobh has quit IRC | 02:47 | |
*** yamamoto has joined #openstack-infra | 02:50 | |
*** heyongli has quit IRC | 02:51 | |
*** heyongli has joined #openstack-infra | 02:51 | |
*** spsurya has joined #openstack-infra | 02:51 | |
*** rcernin has quit IRC | 02:52 | |
*** yamamoto has quit IRC | 02:54 | |
*** heyongli has quit IRC | 03:01 | |
*** heyongli has joined #openstack-infra | 03:01 | |
*** sree has joined #openstack-infra | 03:06 | |
*** felipemonteiro has joined #openstack-infra | 03:09 | |
*** rcernin has joined #openstack-infra | 03:09 | |
openstackgerrit | James E. Blair proposed openstack-infra/zuul master: WIP: Report to gerrit over HTTP https://review.openstack.org/577027 | 03:10 |
*** sree has quit IRC | 03:11 | |
*** slaweq has joined #openstack-infra | 03:11 | |
openstackgerrit | James E. Blair proposed openstack-infra/zuul master: WIP: Report to gerrit over HTTP https://review.openstack.org/577027 | 03:11 |
*** heyongli has quit IRC | 03:11 | |
*** heyongli has joined #openstack-infra | 03:12 | |
*** yolanda has quit IRC | 03:12 | |
*** slaweq has quit IRC | 03:16 | |
*** heyongli has quit IRC | 03:22 | |
*** heyongli has joined #openstack-infra | 03:22 | |
*** kzaitsev_pi has quit IRC | 03:28 | |
*** heyongli has quit IRC | 03:32 | |
*** heyongli has joined #openstack-infra | 03:32 | |
*** ramishra has joined #openstack-infra | 03:37 | |
*** heyongli has quit IRC | 03:42 | |
*** heyongli has joined #openstack-infra | 03:42 | |
*** lpetrut has joined #openstack-infra | 03:46 | |
*** ykarel|away has joined #openstack-infra | 03:49 | |
*** zhangfei has quit IRC | 03:50 | |
*** yamamoto has joined #openstack-infra | 03:51 | |
*** heyongli has quit IRC | 03:52 | |
*** udesale has joined #openstack-infra | 03:52 | |
*** heyongli has joined #openstack-infra | 03:53 | |
*** rcernin has quit IRC | 03:55 | |
*** yamamoto has quit IRC | 03:56 | |
openstackgerrit | James E. Blair proposed openstack-infra/zuul master: WIP: Report to gerrit over HTTP https://review.openstack.org/577027 | 03:59 |
openstackgerrit | James E. Blair proposed openstack-infra/zuul master: WIP: Support line comments in Gerrit https://review.openstack.org/577035 | 03:59 |
*** zhangfei has joined #openstack-infra | 04:02 | |
*** heyongli has quit IRC | 04:03 | |
*** heyongli has joined #openstack-infra | 04:03 | |
*** germs has quit IRC | 04:07 | |
*** lifeless has quit IRC | 04:08 | |
*** slaweq has joined #openstack-infra | 04:11 | |
*** heyongli has quit IRC | 04:13 | |
*** heyongli has joined #openstack-infra | 04:13 | |
*** rcernin has joined #openstack-infra | 04:14 | |
*** lifeless has joined #openstack-infra | 04:14 | |
*** slaweq has quit IRC | 04:15 | |
*** lifeless has quit IRC | 04:20 | |
*** lifeless has joined #openstack-infra | 04:20 | |
*** heyongli has quit IRC | 04:23 | |
*** lpetrut has quit IRC | 04:23 | |
*** heyongli has joined #openstack-infra | 04:23 | |
*** lifeless has quit IRC | 04:25 | |
*** lifeless has joined #openstack-infra | 04:26 | |
*** SpamapS has quit IRC | 04:29 | |
*** StevenK has quit IRC | 04:29 | |
*** dansmith has quit IRC | 04:29 | |
*** rm_work has quit IRC | 04:29 | |
*** zeus has quit IRC | 04:29 | |
*** bradm has quit IRC | 04:29 | |
*** dburmistrov has quit IRC | 04:29 | |
*** lpetrut has joined #openstack-infra | 04:30 | |
*** lifeless has quit IRC | 04:30 | |
*** cshastri has joined #openstack-infra | 04:30 | |
*** lifeless has joined #openstack-infra | 04:31 | |
*** cshastri_ has joined #openstack-infra | 04:33 | |
*** heyongli has quit IRC | 04:33 | |
*** heyongli has joined #openstack-infra | 04:34 | |
*** dhajare has joined #openstack-infra | 04:35 | |
*** lifeless has quit IRC | 04:36 | |
*** cshastri has quit IRC | 04:36 | |
*** cshastri_ has quit IRC | 04:36 | |
*** lifeless has joined #openstack-infra | 04:37 | |
*** cshastri has joined #openstack-infra | 04:39 | |
*** pgadiya has joined #openstack-infra | 04:40 | |
*** pgadiya has quit IRC | 04:40 | |
*** yamamoto has joined #openstack-infra | 04:41 | |
*** lifeless has quit IRC | 04:41 | |
*** lifeless has joined #openstack-infra | 04:42 | |
*** heyongli has quit IRC | 04:44 | |
*** heyongli has joined #openstack-infra | 04:44 | |
*** ykarel|away is now known as ykarel | 04:44 | |
*** lpetrut has quit IRC | 04:45 | |
*** lifeless has quit IRC | 04:47 | |
*** lifeless has joined #openstack-infra | 04:48 | |
*** lifeless has quit IRC | 04:52 | |
*** lifeless has joined #openstack-infra | 04:54 | |
*** heyongli has quit IRC | 04:54 | |
*** heyongli has joined #openstack-infra | 04:54 | |
*** lifeless has quit IRC | 04:58 | |
*** bhavik1 has joined #openstack-infra | 04:59 | |
openstackgerrit | Ian Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs https://review.openstack.org/577045 | 04:59 |
*** lifeless has joined #openstack-infra | 04:59 | |
*** Guest29132 is now known as dougwig | 04:59 | |
*** dougwig is now known as Guest55662 | 05:00 | |
*** sree has joined #openstack-infra | 05:01 | |
*** dhajare has quit IRC | 05:01 | |
*** Guest55662 has quit IRC | 05:01 | |
*** dougwig_ has joined #openstack-infra | 05:02 | |
openstackgerrit | Ian Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs https://review.openstack.org/577045 | 05:02 |
ianw | clarkb: ^ if people want recognition, we could do something like add images to the description on that page too | 05:03 |
*** lifeless has quit IRC | 05:04 | |
*** heyongli has quit IRC | 05:04 | |
*** lifeless has joined #openstack-infra | 05:04 | |
*** heyongli has joined #openstack-infra | 05:04 | |
*** owalsh_ has joined #openstack-infra | 05:06 | |
*** owalsh- has joined #openstack-infra | 05:07 | |
*** owalsh| has joined #openstack-infra | 05:08 | |
*** janki has quit IRC | 05:09 | |
*** lifeless has quit IRC | 05:09 | |
*** jiapei has joined #openstack-infra | 05:09 | |
*** owalsh has quit IRC | 05:10 | |
*** felipemonteiro has quit IRC | 05:10 | |
*** lifeless has joined #openstack-infra | 05:10 | |
*** owalsh_ has quit IRC | 05:11 | |
*** slaweq has joined #openstack-infra | 05:11 | |
*** owalsh- has quit IRC | 05:12 | |
*** e0ne has joined #openstack-infra | 05:13 | |
*** e0ne has quit IRC | 05:14 | |
*** heyongli has quit IRC | 05:14 | |
*** lifeless has quit IRC | 05:14 | |
*** heyongli has joined #openstack-infra | 05:15 | |
*** dpawlik has joined #openstack-infra | 05:15 | |
*** lifeless has joined #openstack-infra | 05:15 | |
*** slaweq has quit IRC | 05:16 | |
*** kjackal has joined #openstack-infra | 05:16 | |
*** felipemonteiro has joined #openstack-infra | 05:17 | |
*** dhajare has joined #openstack-infra | 05:17 | |
*** dpawlik has quit IRC | 05:20 | |
*** ccamacho has quit IRC | 05:21 | |
*** bhavik1 has quit IRC | 05:23 | |
*** heyongli has quit IRC | 05:25 | |
*** heyongli has joined #openstack-infra | 05:25 | |
*** felipemonteiro has quit IRC | 05:26 | |
*** dansmith has joined #openstack-infra | 05:31 | |
*** links has quit IRC | 05:32 | |
*** rm_work has joined #openstack-infra | 05:32 | |
*** rm_work has quit IRC | 05:32 | |
*** rm_work has joined #openstack-infra | 05:32 | |
*** dansmith is now known as Guest88320 | 05:32 | |
*** yolanda has joined #openstack-infra | 05:34 | |
*** heyongli has quit IRC | 05:35 | |
*** heyongli has joined #openstack-infra | 05:35 | |
*** udesale_ has joined #openstack-infra | 05:36 | |
*** udesale has quit IRC | 05:37 | |
*** cshastri has quit IRC | 05:38 | |
*** psachin has quit IRC | 05:38 | |
*** owalsh has joined #openstack-infra | 05:39 | |
*** owalsh| has quit IRC | 05:42 | |
*** slaweq has joined #openstack-infra | 05:44 | |
*** heyongli has quit IRC | 05:45 | |
*** heyongli has joined #openstack-infra | 05:45 | |
*** slaweq has quit IRC | 05:48 | |
*** dhajare has quit IRC | 05:50 | |
*** heyongli has quit IRC | 05:55 | |
*** heyongli has joined #openstack-infra | 05:56 | |
*** links has joined #openstack-infra | 05:56 | |
*** alex_xu has quit IRC | 05:57 | |
*** nicolasbock has joined #openstack-infra | 06:00 | |
*** janki has joined #openstack-infra | 06:00 | |
*** cshastri has joined #openstack-infra | 06:01 | |
corvus | ianw: does that remove all the dashboards and replace them with one like http://grafana.openstack.org/dashboard/db/nodepool-rackspace-experimental ? | 06:01 |
*** dhajare has joined #openstack-infra | 06:02 | |
*** alex_xu has joined #openstack-infra | 06:03 | |
*** heyongli has quit IRC | 06:06 | |
*** heyongli has joined #openstack-infra | 06:06 | |
*** StevenK has joined #openstack-infra | 06:07 | |
corvus | ianw: can you remove the graphs you manually created on grafana02 before you change the pointer? | 06:08 |
ianw | corvus: the graph in operation is http://grafana02.openstack.org/d/MKTt6xNik/nodepool-all-providers | 06:10 |
*** psachin has joined #openstack-infra | 06:10 | |
*** slaweq has joined #openstack-infra | 06:11 | |
corvus | thx | 06:12 |
*** signed8bit has joined #openstack-infra | 06:13 | |
*** heyongli has quit IRC | 06:16 | |
*** slaweq has quit IRC | 06:16 | |
*** heyongli has joined #openstack-infra | 06:16 | |
*** lpetrut has joined #openstack-infra | 06:19 | |
*** aeng has quit IRC | 06:20 | |
*** cshastri has quit IRC | 06:23 | |
*** ykarel is now known as ykarel|afk | 06:23 | |
*** ccamacho has joined #openstack-infra | 06:24 | |
*** heyongli has quit IRC | 06:26 | |
*** rpittau_ has joined #openstack-infra | 06:26 | |
*** heyongli has joined #openstack-infra | 06:26 | |
*** cshastri has joined #openstack-infra | 06:27 | |
*** signed8bit has quit IRC | 06:27 | |
*** andreas_s has joined #openstack-infra | 06:28 | |
*** rpittau has quit IRC | 06:29 | |
*** ykarel|afk has quit IRC | 06:33 | |
*** ykarel|afk has joined #openstack-infra | 06:34 | |
*** stakeda has joined #openstack-infra | 06:34 | |
*** andreas_s has quit IRC | 06:35 | |
*** heyongli has quit IRC | 06:36 | |
*** heyongli has joined #openstack-infra | 06:37 | |
*** namnh has joined #openstack-infra | 06:37 | |
*** andreas_s_ has joined #openstack-infra | 06:39 | |
*** zhangfei has quit IRC | 06:43 | |
*** jcoufal has joined #openstack-infra | 06:45 | |
*** iranzo has joined #openstack-infra | 06:45 | |
*** tommylikehu has quit IRC | 06:45 | |
*** ykarel|afk is now known as ykarel | 06:46 | |
*** heyongli has quit IRC | 06:47 | |
*** heyongli has joined #openstack-infra | 06:47 | |
*** tommylikehu has joined #openstack-infra | 06:48 | |
*** tommylikehu has quit IRC | 06:54 | |
*** zhangfei has joined #openstack-infra | 06:56 | |
*** heyongli has quit IRC | 06:57 | |
*** heyongli has joined #openstack-infra | 06:57 | |
*** apetrich has quit IRC | 06:58 | |
*** apetrich has joined #openstack-infra | 06:58 | |
*** tommylikehu has joined #openstack-infra | 06:59 | |
*** rfolco_ has joined #openstack-infra | 06:59 | |
*** rpioso|afk has quit IRC | 06:59 | |
*** rpioso|afk has joined #openstack-infra | 07:01 | |
*** rfolco has quit IRC | 07:02 | |
*** srwilkers has quit IRC | 07:02 | |
openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard master: Support quoted project names in GET requests by name https://review.openstack.org/577081 | 07:03 |
*** Bhujay has joined #openstack-infra | 07:03 | |
*** apetrich has quit IRC | 07:06 | |
*** jtomasek has joined #openstack-infra | 07:06 | |
*** jtomasek has quit IRC | 07:06 | |
*** tommylikehu has quit IRC | 07:06 | |
*** jtomasek has joined #openstack-infra | 07:07 | |
*** heyongli has quit IRC | 07:07 | |
*** rpioso|afk has quit IRC | 07:07 | |
*** heyongli has joined #openstack-infra | 07:08 | |
*** lpetrut has quit IRC | 07:08 | |
*** rpioso|afk has joined #openstack-infra | 07:09 | |
*** lpetrut has joined #openstack-infra | 07:11 | |
*** florianf has joined #openstack-infra | 07:11 | |
*** tesseract has joined #openstack-infra | 07:11 | |
*** tommylikehu has joined #openstack-infra | 07:12 | |
*** gfidente has joined #openstack-infra | 07:13 | |
*** udesale__ has joined #openstack-infra | 07:14 | |
*** slaweq has joined #openstack-infra | 07:14 | |
*** peereb has joined #openstack-infra | 07:15 | |
*** andreas_s_ has quit IRC | 07:16 | |
*** udesale_ has quit IRC | 07:16 | |
*** srwilkers has joined #openstack-infra | 07:17 | |
*** heyongli has quit IRC | 07:17 | |
*** andreas_s_ has joined #openstack-infra | 07:17 | |
*** heyongli has joined #openstack-infra | 07:18 | |
*** rossella_s has joined #openstack-infra | 07:19 | |
*** armaan has joined #openstack-infra | 07:20 | |
*** links has quit IRC | 07:21 | |
*** links has joined #openstack-infra | 07:21 | |
*** andreas_s has joined #openstack-infra | 07:21 | |
openstackgerrit | Ian Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs https://review.openstack.org/577045 | 07:22 |
*** pcaruana has joined #openstack-infra | 07:22 | |
openstackgerrit | Ian Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs https://review.openstack.org/577045 | 07:24 |
*** amoralej|off is now known as amoralej | 07:25 | |
*** andreas_s_ has quit IRC | 07:25 | |
*** heyongli has quit IRC | 07:28 | |
*** efried has quit IRC | 07:28 | |
*** rpittau_ is now known as rpittau | 07:28 | |
*** heyongli has joined #openstack-infra | 07:28 | |
*** efried has joined #openstack-infra | 07:28 | |
*** shardy has joined #openstack-infra | 07:29 | |
flaper87 | Do we install unbound on the CI nodes automatically? I'm debugging the failure in this job: http://logs.openstack.org/33/574233/16/experimental/tripleo-ci-centos-7-scenario009-multinode-oooq/3d18495/ and I noticed the origin-node container is not starting because the port 127.0.0.1:53 (which it needs) is already in use by unbound. Looking into how tripleo sets up the node, I noticed we do install | 07:29 |
flaper87 | unbound but "disabling it" didn't seem to work | 07:29 |
flaper87 | so, my next guess is that unbound is there already in the node | 07:29 |
flaper87 | I'll keep digging but I thought I'd ask | 07:30 |
ianw | flaper87: yes, we do | 07:31 |
ianw | i think it's basically a hard requirement, we've had so many random failures *without* unbound on nodes ... that's why it's there | 07:31 |
ianw | http://git.openstack.org/cgit/openstack-infra/openstack-zuul-jobs/tree/roles/configure-unbound is the role | 07:33 |
*** tosky has joined #openstack-infra | 07:33 | |
flaper87 | ianw: mmh, jeez, this is a problem for this job, though. Would it be possible to disable it just for 1 node | 07:34 |
*** annp has joined #openstack-infra | 07:34 | |
*** heyongli has quit IRC | 07:38 | |
*** heyongli has joined #openstack-infra | 07:38 | |
*** dpawlik has joined #openstack-infra | 07:39 | |
openstackgerrit | Ian Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs https://review.openstack.org/577045 | 07:39 |
*** sshnaidm|off has quit IRC | 07:40 | |
*** e0ne has joined #openstack-infra | 07:40 | |
ianw | flaper87: umm, not really, it's baked into the base jobs. but if you disable before you start, that would work? | 07:41 |
flaper87 | ianw: yup, I guess that's what we'll do. Hacky but it's what we can do for now | 07:42 |
*** jpena|off is now known as jpena | 07:42 | |
*** links has quit IRC | 07:42 | |
*** cicisong has joined #openstack-infra | 07:45 | |
*** rcernin has quit IRC | 07:47 | |
*** heyongli has quit IRC | 07:48 | |
*** heyongli has joined #openstack-infra | 07:48 | |
*** links has joined #openstack-infra | 07:55 | |
openstackgerrit | Ian Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs https://review.openstack.org/577045 | 07:55 |
gnuoy | \o | 07:56 |
*** jpich has joined #openstack-infra | 07:56 | |
*** cicisong has quit IRC | 07:57 | |
openstackgerrit | Ian Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs https://review.openstack.org/577045 | 07:58 |
*** heyongli has quit IRC | 07:58 | |
*** heyongli has joined #openstack-infra | 07:59 | |
*** electrofelix has joined #openstack-infra | 07:59 | |
*** andreas_s_ has joined #openstack-infra | 08:01 | |
*** ykarel is now known as ykarel|lunch | 08:02 | |
*** andreas_s has quit IRC | 08:04 | |
*** heyongli has quit IRC | 08:09 | |
*** heyongli has joined #openstack-infra | 08:09 | |
*** dougsz has joined #openstack-infra | 08:10 | |
*** sshnaidm has joined #openstack-infra | 08:18 | |
*** slaweq has quit IRC | 08:18 | |
*** heyongli has quit IRC | 08:19 | |
openstackgerrit | yolanda.robla proposed openstack/diskimage-builder master: Only detach device if all partitions have been cleaned https://review.openstack.org/576876 | 08:19 |
*** heyongli has joined #openstack-infra | 08:19 | |
*** hashar has joined #openstack-infra | 08:20 | |
*** Bhujay has quit IRC | 08:23 | |
*** slaweq has joined #openstack-infra | 08:26 | |
*** alexchadin has joined #openstack-infra | 08:26 | |
*** heyongli has quit IRC | 08:29 | |
*** heyongli has joined #openstack-infra | 08:29 | |
*** apetrich has joined #openstack-infra | 08:30 | |
*** elod__ has joined #openstack-infra | 08:34 | |
*** roman_g has joined #openstack-infra | 08:36 | |
*** derekh has joined #openstack-infra | 08:36 | |
*** elod__ is now known as elod | 08:38 | |
*** kzaitsev_pi has joined #openstack-infra | 08:39 | |
*** heyongli has quit IRC | 08:39 | |
*** heyongli has joined #openstack-infra | 08:40 | |
*** sree has quit IRC | 08:45 | |
*** heyongli has quit IRC | 08:50 | |
*** heyongli has joined #openstack-infra | 08:50 | |
*** xinliang has joined #openstack-infra | 08:51 | |
*** markvoelker has quit IRC | 08:54 | |
xinliang | Hi, I met an infra mirror error "E: Method gave invalid 103 Redirect message". | 08:55 |
xinliang | Anyone knows what's wrong? | 08:56 |
corvus | xinliang: which mirror? and do you have a link to the logs? | 08:59 |
xinliang | corvus: this is the detail job log:http://logs.openstack.org/59/557659/20/experimental/kolla-build-debian-source-arm64/a0a967d/job-output.txt.gz#_2018-06-21_08_45_24_779063 | 08:59 |
xinliang | corvus: The debian mirror. | 09:00 |
*** heyongli has quit IRC | 09:00 | |
*** heyongli has joined #openstack-infra | 09:00 | |
*** e0ne has quit IRC | 09:01 | |
xinliang | ianw: Do you have time to take a look at this debian mirror error: http://logs.openstack.org/59/557659/20/experimental/kolla-build-debian-source-arm64/a0a967d/job-output.txt.gz#_2018-06-21_08_45_24_779063 | 09:02 |
corvus | are wwe sure that's the debian mirror? the line before it is a warning about debian, but i'm not sure that error is | 09:03 |
*** dingyichen has quit IRC | 09:04 | |
corvus | does it happen again if you recheck? | 09:05 |
ianw | yes odd, i've not seen that before | 09:07 |
corvus | if it is about the debian repo, it'll be for security.debian, which i don't believe we're mirroring, but maybe are proxying? | 09:10 |
*** heyongli has quit IRC | 09:10 | |
*** heyongli has joined #openstack-infra | 09:10 | |
*** Bhujay has joined #openstack-infra | 09:14 | |
xinliang | corvus: don't know with repo accessing is wrong. it might be security.deiban, as it has one error msg here: http://logs.openstack.org/59/557659/20/experimental/kolla-build-debian-source-arm64/a0a967d/job-output.txt.gz#_2018-06-21_08_45_21_325413 | 09:15 |
ianw | xinliang: it looks to me like transient errors with security.debian ... i guess we don't mirror that | 09:17 |
*** heyongli has quit IRC | 09:20 | |
*** heyongli has joined #openstack-infra | 09:21 | |
xinliang | ianw: it's strange, in my local environment, security.debian update seems ok. | 09:22 |
ianw | so we mirror ubuntu security, but not debian. but maybe we used to ... looking | 09:23 |
ianw | Remove debian-security from reprepro | 09:23 |
ianw | https://review.openstack.org/#/c/562348/ of course i reviewed it and didn't remember :) | 09:24 |
*** panda|off is now known as panda | 09:24 | |
ianw | i guess we never did that follow up | 09:25 |
ianw | xinliang: yeah, random weirdness like this is why we like our own mirrors :) | 09:25 |
*** sshnaidm is now known as sshnaidm|lnch | 09:26 | |
ianw | xinliang: if it's something like you'd to get involved with, start at http://git.openstack.org/cgit/openstack-infra/system-config/tree/modules/openstack_project/manifests/mirror_update.pp#n124 and basically copy it out for a separate security.debian.org reprepro run | 09:29 |
ianw | otherwise, i can put it in my todo list to bring it back | 09:29 |
*** ykarel|lunch is now known as ykarel | 09:29 | |
*** vivsoni has quit IRC | 09:29 | |
*** vivsoni has joined #openstack-infra | 09:30 | |
*** heyongli has quit IRC | 09:31 | |
*** heyongli has joined #openstack-infra | 09:31 | |
xinliang | ianw: please add it into your todo list. Actually, I don't understand why it is removed before, it says "This is causing checksum issues on files we download." | 09:34 |
*** rcernin has joined #openstack-infra | 09:39 | |
*** zoli is now known as zoli|lunch | 09:40 | |
openstackgerrit | Nguyen Van Trung proposed openstack/diskimage-builder master: Add iscsi-boot element for CentOS images https://review.openstack.org/542708 | 09:41 |
*** heyongli has quit IRC | 09:41 | |
*** heyongli has joined #openstack-infra | 09:41 | |
*** dtantsur|afk is now known as dtantsur | 09:41 | |
ianw | xinliang: it was causing problems with the main mirror process | 09:42 |
xinliang | ianw: anyway, i want to login and check with repo is causing error. could you help to add my key? | 09:42 |
xinliang | this is my github account: https://github.com/xin3liang | 09:44 |
xinliang | double check which repo is causing error. | 09:45 |
*** heyongli has quit IRC | 09:51 | |
*** heyongli has joined #openstack-infra | 09:51 | |
*** rcernin has quit IRC | 09:53 | |
*** e0ne has joined #openstack-infra | 09:55 | |
*** spsurya has quit IRC | 09:58 | |
*** elod has quit IRC | 09:58 | |
*** elod has joined #openstack-infra | 09:59 | |
*** heyongli has quit IRC | 10:01 | |
*** heyongli has joined #openstack-infra | 10:02 | |
ianw | xinliang: it's not held but 103.20.251.146 | 10:04 |
ianw | i notice it's not using http ... i think this is the old weird proxy somewhere issue | 10:05 |
ianw | yep, https it works | 10:05 |
openstackgerrit | Ian Wienand proposed openstack-infra/zuul-jobs master: Use https for security.debian.org https://review.openstack.org/577119 | 10:08 |
ianw | xinliang: ^ should help. probably we moved that back when we stopped mirroring (where we don't use https to the local mirror) and just missed it | 10:08 |
*** e0ne has quit IRC | 10:10 | |
*** e0ne has joined #openstack-infra | 10:12 | |
*** heyongli has quit IRC | 10:12 | |
*** heyongli has joined #openstack-infra | 10:12 | |
*** e0ne has quit IRC | 10:16 | |
xinliang | ianw: thanks, will try with that patch. | 10:18 |
*** annp has quit IRC | 10:20 | |
*** heyongli has quit IRC | 10:22 | |
*** heyongli has joined #openstack-infra | 10:22 | |
*** snapiri has joined #openstack-infra | 10:29 | |
*** heyongli has quit IRC | 10:32 | |
*** heyongli has joined #openstack-infra | 10:32 | |
*** boden has joined #openstack-infra | 10:34 | |
*** apetrich has quit IRC | 10:38 | |
*** alexchadin has quit IRC | 10:41 | |
*** heyongli has quit IRC | 10:42 | |
*** heyongli has joined #openstack-infra | 10:43 | |
*** lpetrut has quit IRC | 10:45 | |
*** dhill_ has quit IRC | 10:45 | |
*** bradm has joined #openstack-infra | 10:48 | |
*** alexchadin has joined #openstack-infra | 10:50 | |
*** namnh has quit IRC | 10:51 | |
*** derekh_ has joined #openstack-infra | 10:51 | |
ianw | xinliang: actually you know, that's wrong | 10:53 |
*** heyongli has quit IRC | 10:53 | |
*** heyongli has joined #openstack-infra | 10:53 | |
ianw | https://security.debian.org/ is a self-signed certificate i guess | 10:53 |
ianw | hrm ... | 10:53 |
*** rcernin has joined #openstack-infra | 10:54 | |
*** derekh has quit IRC | 10:54 | |
ianw | oh wow, yeah ... https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802539 | 10:55 |
openstack | Debian bug 802539 in security.debian.org "Please properly configure HTTPS in security.debian.org" [Normal,Open] | 10:55 |
*** zul has quit IRC | 10:56 | |
ianw | so basically we can't https to security :/ | 10:56 |
*** zul has joined #openstack-infra | 10:57 | |
*** zoli|lunch is now known as zoli | 10:57 | |
*** markvoelker has joined #openstack-infra | 10:59 | |
*** heyongli has quit IRC | 11:03 | |
*** heyongli has joined #openstack-infra | 11:03 | |
*** sshnaidm|lnch is now known as sshnaidm | 11:04 | |
*** yamamoto has quit IRC | 11:05 | |
*** yamamoto has joined #openstack-infra | 11:06 | |
*** Adri2000 has quit IRC | 11:06 | |
*** zhangfei has quit IRC | 11:07 | |
*** Adri2000 has joined #openstack-infra | 11:08 | |
panda | where can I find the specifications for centos-7 and legacy-centos-7 nodes ? | 11:10 |
*** yamamoto has quit IRC | 11:10 | |
*** rossella_s has quit IRC | 11:11 | |
ianw | panda: what do you mean specifications? | 11:11 |
panda | I found this project-config/nodepool/nl01.openstack.org.yaml | 11:11 |
panda | but I see only centos-7 and not legacy | 11:11 |
panda | ianw: for example the ram for the node | 11:12 |
ianw | panda: all our nodes are basically the same, 8gb ram, 8vcpu, 80gb disk, see https://docs.openstack.org/infra/system-config/contribute-cloud.html | 11:12 |
panda | ianw: I'm migrating to the new node definition and one of the tasks in my run fails to allocate memory | 11:12 |
*** heyongli has quit IRC | 11:13 | |
*** heyongli has joined #openstack-infra | 11:13 | |
ianw | the centos-7 v centos-7-legacy is just the names from "legacy", i.e. pre-zuulv3 jobs. the actual nodes are the same | 11:13 |
panda | ianw: ok, then the problem is elsewhere, thanks. | 11:17 |
ianw | panda: for reference the nodesets are defined in http://git.openstack.org/cgit/openstack-infra/openstack-zuul-jobs/tree/zuul.d/nodesets.yaml | 11:17 |
*** rcernin has quit IRC | 11:19 | |
panda | ianw: ah, I see, legacy-centos-7 is a nodeset that uses the centos-7 label anyway, so cento07 is the only defined node | 11:19 |
panda | ianw: thanks. | 11:19 |
*** udesale__ has quit IRC | 11:20 | |
*** udesale__ has joined #openstack-infra | 11:21 | |
*** sree_ has joined #openstack-infra | 11:21 | |
ianw | yes it's from when all the jobs were auto-converted | 11:21 |
*** sree_ is now known as Guest40616 | 11:21 | |
*** stakeda has quit IRC | 11:22 | |
*** heyongli has quit IRC | 11:23 | |
*** heyongli has joined #openstack-infra | 11:24 | |
*** armaan_ has joined #openstack-infra | 11:24 | |
*** Guest40616 has quit IRC | 11:25 | |
*** udesale__ has quit IRC | 11:27 | |
*** armaan has quit IRC | 11:27 | |
*** markvoelker has quit IRC | 11:30 | |
*** heyongli has quit IRC | 11:34 | |
*** heyongli has joined #openstack-infra | 11:34 | |
*** ldnunes has joined #openstack-infra | 11:38 | |
*** rcernin has joined #openstack-infra | 11:39 | |
*** lpetrut has joined #openstack-infra | 11:40 | |
*** heyongli has quit IRC | 11:44 | |
*** rcernin has quit IRC | 11:44 | |
*** heyongli has joined #openstack-infra | 11:44 | |
*** lpetrut has quit IRC | 11:48 | |
*** rh-jelabarre has joined #openstack-infra | 11:51 | |
*** lpetrut has joined #openstack-infra | 11:52 | |
*** dhill_ has joined #openstack-infra | 11:54 | |
*** heyongli has quit IRC | 11:54 | |
*** heyongli has joined #openstack-infra | 11:54 | |
*** rosmaita has joined #openstack-infra | 11:55 | |
*** sree_ has joined #openstack-infra | 11:56 | |
*** sree_ is now known as Guest30788 | 11:56 | |
*** e0ne has joined #openstack-infra | 11:58 | |
*** andreas_s_ has quit IRC | 12:00 | |
*** andreas_s has joined #openstack-infra | 12:02 | |
*** yamamoto has joined #openstack-infra | 12:04 | |
*** heyongli has quit IRC | 12:04 | |
*** heyongli has joined #openstack-infra | 12:05 | |
*** trown|outtypewww is now known as trown | 12:05 | |
*** amoralej is now known as amoralej|lunch | 12:10 | |
*** andreas_s has quit IRC | 12:12 | |
*** apetrich has joined #openstack-infra | 12:12 | |
*** andreas_s has joined #openstack-infra | 12:13 | |
*** rlandy has joined #openstack-infra | 12:14 | |
*** heyongli has quit IRC | 12:15 | |
*** heyongli has joined #openstack-infra | 12:15 | |
openstackgerrit | Merged openstack/diskimage-builder master: Convert labels to upper case https://review.openstack.org/576098 | 12:20 |
*** Guest30788 has quit IRC | 12:23 | |
*** camunoz has joined #openstack-infra | 12:23 | |
*** heyongli has quit IRC | 12:25 | |
*** heyongli has joined #openstack-infra | 12:25 | |
*** andreas_s has quit IRC | 12:26 | |
*** markvoelker has joined #openstack-infra | 12:26 | |
openstackgerrit | Andrey Kurilin proposed openstack-infra/project-config master: Remove legacy rally jobs https://review.openstack.org/577139 | 12:27 |
*** lpetrut has quit IRC | 12:27 | |
openstackgerrit | Andrey Kurilin proposed openstack-infra/openstack-zuul-jobs master: Remove playbooks for redundant rally legacy jobs https://review.openstack.org/577141 | 12:30 |
openstackgerrit | Andrey Kurilin proposed openstack-infra/project-config master: Remove legacy rally jobs https://review.openstack.org/577139 | 12:30 |
*** katkapilatova has joined #openstack-infra | 12:30 | |
*** bobh has joined #openstack-infra | 12:32 | |
*** kgiusti has joined #openstack-infra | 12:35 | |
*** heyongli has quit IRC | 12:35 | |
*** andreas_s has joined #openstack-infra | 12:35 | |
*** heyongli has joined #openstack-infra | 12:35 | |
*** cshastri has quit IRC | 12:41 | |
*** links has quit IRC | 12:43 | |
*** heyongli has quit IRC | 12:45 | |
*** heyongli has joined #openstack-infra | 12:46 | |
*** lpetrut has joined #openstack-infra | 12:47 | |
fungi | ianw: debian doesn't (for the most part) use https for package downloads because it already relies on signed checksum indices for the packages it downloads and verifies those (there is somewhat recent https support added to apt and a handful of https mirrors out there now, but they're new and not the norm) | 12:49 |
*** yamamoto has quit IRC | 12:51 | |
*** alexchadin has quit IRC | 12:51 | |
*** bobh has quit IRC | 12:55 | |
*** heyongli has quit IRC | 12:56 | |
*** heyongli has joined #openstack-infra | 12:56 | |
*** andreas_s has quit IRC | 12:57 | |
*** andreas_s has joined #openstack-infra | 12:57 | |
*** edmondsw has joined #openstack-infra | 12:58 | |
*** markvoelker has quit IRC | 13:00 | |
*** felipemonteiro has joined #openstack-infra | 13:03 | |
*** alexchadin has joined #openstack-infra | 13:04 | |
*** armaan_ has quit IRC | 13:06 | |
*** heyongli has quit IRC | 13:06 | |
*** heyongli has joined #openstack-infra | 13:06 | |
*** armaan has joined #openstack-infra | 13:08 | |
*** myoung|off is now known as myoung | 13:09 | |
openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul master: gerrit: remove suspicious change number str cast https://review.openstack.org/577154 | 13:11 |
*** heyongli has quit IRC | 13:16 | |
*** heyongli has joined #openstack-infra | 13:16 | |
*** signed8bit has joined #openstack-infra | 13:21 | |
*** signed8bit has quit IRC | 13:22 | |
*** signed8bit has joined #openstack-infra | 13:23 | |
*** felipemonteiro has quit IRC | 13:24 | |
*** yamamoto has joined #openstack-infra | 13:25 | |
*** andreas_s has quit IRC | 13:26 | |
*** heyongli has quit IRC | 13:26 | |
*** andreas_s has joined #openstack-infra | 13:27 | |
*** heyongli has joined #openstack-infra | 13:27 | |
*** markvoelker has joined #openstack-infra | 13:30 | |
*** andreas_s has quit IRC | 13:32 | |
*** andreas_s has joined #openstack-infra | 13:33 | |
*** yamamoto has quit IRC | 13:36 | |
*** jento has quit IRC | 13:37 | |
*** heyongli has quit IRC | 13:37 | |
*** heyongli has joined #openstack-infra | 13:37 | |
*** esarault has joined #openstack-infra | 13:37 | |
clarkb | you have to install an additional paclage to add apt https support too so has a bootstrapping problem | 13:38 |
*** andreas_s has quit IRC | 13:38 | |
*** andreas_s has joined #openstack-infra | 13:42 | |
*** andreas_s has quit IRC | 13:42 | |
*** andreas_s has joined #openstack-infra | 13:42 | |
*** derekh_ is now known as derekh | 13:43 | |
clarkb | flaper87: we put unbound on all test nodes because some clouds do not have reliable dns by default | 13:43 |
clarkb | I would be careful if bypassing this | 13:43 |
*** amoralej|lunch is now known as amoralej | 13:44 | |
*** spsurya has joined #openstack-infra | 13:44 | |
*** heyongli has quit IRC | 13:47 | |
*** heyongli has joined #openstack-infra | 13:47 | |
*** yamamoto has joined #openstack-infra | 13:48 | |
*** jistr is now known as jistr|mtg | 13:49 | |
*** zeus has joined #openstack-infra | 13:50 | |
*** zeus is now known as Guest21990 | 13:50 | |
*** andreas_s has quit IRC | 13:51 | |
*** niedbalski has quit IRC | 13:51 | |
*** Guest21990 is now known as zeus | 13:52 | |
*** zeus has joined #openstack-infra | 13:52 | |
*** ccamacho1 has joined #openstack-infra | 13:54 | |
*** ccamacho has quit IRC | 13:54 | |
ianw | fungi: yeah, i did think security.debian.org might .. but i also get how things aren't always as easy as they might seem :) | 13:56 |
*** janki has quit IRC | 13:56 | |
ianw | i'll try to look at reprepro for itif nobody else does first | 13:56 |
*** heyongli has quit IRC | 13:57 | |
*** heyongli has joined #openstack-infra | 13:58 | |
*** zhipeng has joined #openstack-infra | 13:58 | |
ianw | well .au neither won nor lost, so bed for me | 13:59 |
fungi | well, particularly doing https is a challenging certificate distribution and maintenance problem when you want to have a volunteer-run pool of disparate mirrors hiding behind consistent round-robin cnames | 13:59 |
*** armaan has quit IRC | 14:00 | |
*** armaan has joined #openstack-infra | 14:00 | |
*** dougsz has left #openstack-infra | 14:01 | |
fungi | with signed packages you can keep the encryption key in a safe location and don't need to trust your mirror network. with https you need to hand out the key (or separate keys and operate your own ca) to every mirror operator and trust their ability to keep them safe | 14:01 |
fungi | and certainly before the advent of crypto-accelerating hardware and broad support for sni, the burden to the mirror operators was pretty significant too (additional cpu load, dedicated ip address...) | 14:03 |
*** heyongli has quit IRC | 14:07 | |
*** heyongli has joined #openstack-infra | 14:08 | |
*** r-daneel has joined #openstack-infra | 14:11 | |
*** ykarel is now known as ykarel|away | 14:12 | |
openstackgerrit | yolanda.robla proposed openstack/diskimage-builder master: WIP: Add functionality to copy modprobe files https://review.openstack.org/577170 | 14:12 |
*** links has joined #openstack-infra | 14:17 | |
*** heyongli has quit IRC | 14:18 | |
*** heyongli has joined #openstack-infra | 14:18 | |
*** janki has joined #openstack-infra | 14:19 | |
*** links has quit IRC | 14:23 | |
openstackgerrit | Tobias Henkel proposed openstack-infra/zuul master: WIP First try to solve github multi-enqueue error https://review.openstack.org/577173 | 14:23 |
openstackgerrit | Tobias Henkel proposed openstack-infra/zuul master: WIP First try to solve github multi-enqueue error https://review.openstack.org/577173 | 14:24 |
openstackgerrit | sebastian marcet proposed openstack-infra/openstackid-resources master: Fixed null pointer exception on Insert track https://review.openstack.org/577174 | 14:25 |
openstackgerrit | Tobias Henkel proposed openstack-infra/zuul master: WIP: Second try to fix github multi-enqueue issue https://review.openstack.org/577175 | 14:25 |
openstackgerrit | Merged openstack-infra/openstackid-resources master: Fixed null pointer exception on Insert track https://review.openstack.org/577174 | 14:26 |
*** rpioso|afk is now known as rpioso | 14:26 | |
*** signed8bit has quit IRC | 14:27 | |
*** heyongli has quit IRC | 14:28 | |
*** heyongli has joined #openstack-infra | 14:28 | |
*** armaan has quit IRC | 14:37 | |
*** armaan has joined #openstack-infra | 14:37 | |
*** heyongli has quit IRC | 14:38 | |
*** heyongli has joined #openstack-infra | 14:38 | |
*** sree has joined #openstack-infra | 14:40 | |
*** r-daneel_ has joined #openstack-infra | 14:43 | |
*** sree has quit IRC | 14:44 | |
*** r-daneel has quit IRC | 14:44 | |
*** r-daneel_ is now known as r-daneel | 14:44 | |
*** alexchadin has quit IRC | 14:45 | |
*** heyongli has quit IRC | 14:48 | |
*** heyongli has joined #openstack-infra | 14:49 | |
*** peereb has quit IRC | 14:51 | |
openstackgerrit | yolanda.robla proposed openstack/diskimage-builder master: WIP: Add new modprobe element https://review.openstack.org/577170 | 14:52 |
*** zhongjun__ has joined #openstack-infra | 14:55 | |
*** pcaruana has quit IRC | 14:56 | |
*** jento has joined #openstack-infra | 14:56 | |
*** niedbalski has joined #openstack-infra | 14:57 | |
* mordred is AFK for this match - biab | 14:58 | |
*** Swami has joined #openstack-infra | 14:59 | |
*** heyongli has quit IRC | 14:59 | |
*** heyongli has joined #openstack-infra | 14:59 | |
clarkb | mordred you rooting for france or peru? | 14:59 |
jmorgan1 | eitherway, it should be an exciting match | 15:01 |
mordred | clarkb: if I don't support peru, the peruvian who is in my house screaming at the TV might kill me | 15:01 |
fungi | solid reasoning | 15:01 |
boden | heya fungi, as per our chat yesterday on queens branch for vmware-nsx… do you have any idea how I can address the requirements-check job failing in ocata as per results here https://review.openstack.org/#/c/576925/ | 15:04 |
*** jesslampe has joined #openstack-infra | 15:04 | |
boden | I doubt I’m suppose to add those projs to global reqs, but I’ve tried anyway to see what requirements team thinks as its unclear how to proceed | 15:05 |
*** apetrich has quit IRC | 15:05 | |
fungi | boden: i want to say this is well-trodden ground recently (maybe from one of the horizon plugins?) but i don't recall who it was or what the answer ended up being. somebody else in here might | 15:06 |
boden | fungi, OK.. I’m also bugging the requiremetns team to see if they have ideas | 15:06 |
*** zhipeng has quit IRC | 15:07 | |
*** ramishra has quit IRC | 15:09 | |
*** heyongli has quit IRC | 15:09 | |
*** heyongli has joined #openstack-infra | 15:09 | |
*** heyongli has quit IRC | 15:19 | |
*** heyongli has joined #openstack-infra | 15:19 | |
*** zhangfei has joined #openstack-infra | 15:20 | |
*** sthussey has joined #openstack-infra | 15:21 | |
*** zhangfei has quit IRC | 15:24 | |
*** dhajare has quit IRC | 15:25 | |
*** felipemonteiro has joined #openstack-infra | 15:25 | |
*** dpawlik has quit IRC | 15:26 | |
*** Bhujay has quit IRC | 15:29 | |
*** heyongli has quit IRC | 15:29 | |
*** heyongli has joined #openstack-infra | 15:30 | |
*** Goneri has joined #openstack-infra | 15:30 | |
*** kjackal has quit IRC | 15:30 | |
felipemonteiro | it appears as though the openstack-infra/zuul job for docs-on-readthedocs is currently broken because it's POSTing to RTD's deprecated v1 API, which responds with a 403 Forbidden and a deprecation error | 15:32 |
felipemonteiro | #link http://logs.openstack.org/c1/c17f14f0583438db34ebbe5a3f1d8864cbff04dd/post/trigger-readthedocs/971cdfe/ara-report/ | 15:32 |
clarkb | felipemonteiro: yes they require authentication now aiui | 15:33 |
felipemonteiro | clarkb: is there a fix in flight to openstack-infra out of curiosity? | 15:34 |
felipemonteiro | we figured out a workaround locally, but pushing a more general solution would be better | 15:35 |
clarkb | not that I know of. I think this is a case of not having time to address that but zuul provides all the tools for you to solve it directly (update common job in zuul-jobs to accept a secret then provide that in your job config) | 15:35 |
clarkb | also they pull updates daily or something anyways so a low priority concern | 15:35 |
*** jcoufal has quit IRC | 15:36 | |
*** jistr|mtg is now known as jistr | 15:36 | |
felipemonteiro | thanks, zuul certainly does provide the tools. will take a look at job later and see if there's a way to make the update we need locally work generically for the template | 15:37 |
clarkb | felipemonteiro: if you have questions about using zuul secrets or other zuul job and config related stuff feel free to ask | 15:38 |
clarkb | (I think problems like this are a good sanity check for that tooling, we should be able to solve this without infras direct involvement, lets double check that assertion if you are willing) | 15:38 |
felipemonteiro | nope, i used tools/encrypt_secret.py in zuul yesterday without a hitch :) | 15:39 |
*** pbourke has quit IRC | 15:39 | |
*** heyongli has quit IRC | 15:40 | |
*** heyongli has joined #openstack-infra | 15:40 | |
*** pbourke has joined #openstack-infra | 15:41 | |
*** jistr is now known as jistr|off | 15:47 | |
*** ykarel|away has quit IRC | 15:47 | |
*** ramishra has joined #openstack-infra | 15:47 | |
*** dklyle has quit IRC | 15:48 | |
*** ianychoi has joined #openstack-infra | 15:48 | |
*** heyongli has quit IRC | 15:50 | |
*** heyongli has joined #openstack-infra | 15:51 | |
*** bnemec has quit IRC | 15:53 | |
*** Guest88320 is now known as dansmith | 15:59 | |
*** bnemec has joined #openstack-infra | 15:59 | |
*** heyongli has quit IRC | 16:00 | |
*** heyongli has joined #openstack-infra | 16:00 | |
*** jpich has quit IRC | 16:03 | |
*** ramishra has quit IRC | 16:05 | |
*** r-daneel_ has joined #openstack-infra | 16:09 | |
*** gfidente has quit IRC | 16:09 | |
*** tesseract has quit IRC | 16:09 | |
*** heyongli has quit IRC | 16:10 | |
*** heyongli has joined #openstack-infra | 16:11 | |
*** r-daneel has quit IRC | 16:11 | |
*** r-daneel_ is now known as r-daneel | 16:11 | |
*** gyee has joined #openstack-infra | 16:12 | |
*** panda is now known as panda|off | 16:13 | |
*** iranzo has quit IRC | 16:15 | |
*** dklyle has joined #openstack-infra | 16:16 | |
*** heyongli has quit IRC | 16:21 | |
*** heyongli has joined #openstack-infra | 16:21 | |
*** d0ugal has quit IRC | 16:23 | |
*** trown is now known as trown|lunch | 16:27 | |
*** dougwig_ is now known as dougwig | 16:27 | |
*** spsurya has quit IRC | 16:28 | |
*** caphrim007_ is now known as caphrim007 | 16:28 | |
*** amoralej is now known as amoralej|off | 16:29 | |
*** e0ne has quit IRC | 16:30 | |
*** yamahata has quit IRC | 16:30 | |
*** heyongli has quit IRC | 16:31 | |
*** heyongli has joined #openstack-infra | 16:31 | |
*** zoli is now known as zoli|gone | 16:32 | |
*** iyamahat has quit IRC | 16:36 | |
*** arxcruz is now known as arxcruz|off | 16:36 | |
*** ccamacho1 has quit IRC | 16:36 | |
*** raopajay has joined #openstack-infra | 16:36 | |
*** katkapilatova has quit IRC | 16:38 | |
*** yamamoto has quit IRC | 16:38 | |
*** armaan has quit IRC | 16:38 | |
*** armaan has joined #openstack-infra | 16:39 | |
*** heyongli has quit IRC | 16:41 | |
*** heyongli has joined #openstack-infra | 16:41 | |
*** shardy has quit IRC | 16:42 | |
*** derekh has quit IRC | 16:45 | |
*** yamamoto has joined #openstack-infra | 16:46 | |
*** florianf is now known as florianf|afk | 16:51 | |
*** yamamoto has quit IRC | 16:51 | |
*** heyongli has quit IRC | 16:51 | |
*** diablo_rojo has joined #openstack-infra | 16:52 | |
*** heyongli has joined #openstack-infra | 16:52 | |
*** dtantsur is now known as dtantsur|afk | 16:52 | |
*** armaan has quit IRC | 16:54 | |
*** armaan has joined #openstack-infra | 16:54 | |
*** yamamoto has joined #openstack-infra | 16:55 | |
*** iyamahat has joined #openstack-infra | 16:57 | |
*** armaan has quit IRC | 16:57 | |
*** psachin has quit IRC | 16:58 | |
clarkb | fungi: I'm getting organized around cert refreses https://etherpad.openstack.org/p/201806-cert-refresh question on how certs are setup for static.o.o is that one cert iwth multiple cnames or or different certs for each name? | 16:58 |
clarkb | I also expected review.o.o to be in that list but we aren't getting email about it so I'm gonna manually audit the entire list of our cert checks I think | 16:58 |
*** esarault_ has joined #openstack-infra | 16:59 | |
*** yamahata has joined #openstack-infra | 16:59 | |
*** yamamoto has quit IRC | 17:00 | |
*** esarault has quit IRC | 17:01 | |
*** heyongli has quit IRC | 17:02 | |
*** heyongli has joined #openstack-infra | 17:02 | |
mordred | well - that didn't quite work out the way we hoped | 17:04 |
*** iyamahat_ has joined #openstack-infra | 17:04 | |
fungi | clarkb: i think mordred (and maybe corvus?) were suggesting that we should consider creating an infra account on rtd and then tell projects who want to use the canned job to add permissions for our account (similar to how we handle pypi uploads) | 17:07 |
fungi | lighter-weight for projects who want to use it at least | 17:07 |
fungi | though you're right the tools for projects to solve this using their own credentials are already there | 17:08 |
*** iyamahat has quit IRC | 17:08 | |
*** pjrusak has joined #openstack-infra | 17:08 | |
*** zaro__ is now known as zaro | 17:08 | |
*** heyongli has quit IRC | 17:12 | |
*** heyongli has joined #openstack-infra | 17:12 | |
*** jpena is now known as jpena|off | 17:12 | |
*** Swami has quit IRC | 17:15 | |
*** sileht has left #openstack-infra | 17:19 | |
*** heyongli has quit IRC | 17:22 | |
*** heyongli has joined #openstack-infra | 17:22 | |
*** jesslampe has quit IRC | 17:24 | |
mordred | fungi: yah - kind of similar to how pypi publishing works | 17:24 |
*** camunoz has quit IRC | 17:24 | |
mordred | there's also a 'missing' feature - which is that you can't currently use a secret defined in your repo with a job defined centrally. so we cna have a rle which does the upload - but people would basically need to make their own rtd upload job, which is a little lame | 17:25 |
*** caphrim007 has quit IRC | 17:25 | |
clarkb | mordred: ah I think that was the piece of info I was missing because they already have to have their own credentials anyway | 17:26 |
mordred | there are gotchas with implementing such a thing though - so we need to think about it / talk about it a bit more | 17:26 |
*** caphrim007 has joined #openstack-infra | 17:26 | |
*** SumitNaiksatam has joined #openstack-infra | 17:26 | |
clarkb | but if we can't use those with a central job that becomes a little painful | 17:26 |
*** camunoz has joined #openstack-infra | 17:26 | |
mordred | clarkb: exactly | 17:27 |
*** e0ne has joined #openstack-infra | 17:30 | |
*** trown|lunch is now known as trown | 17:31 | |
*** heyongli has quit IRC | 17:32 | |
*** amoralej|off is now known as amoralej | 17:33 | |
*** heyongli has joined #openstack-infra | 17:33 | |
clarkb | fungi: ok I think I have that etherpad updated with relevant info | 17:34 |
clarkb | fungi: can you double check it and I think static.o.o is the only one with multiple alt names? | 17:35 |
fungi | i pulled it up, will double-check in a moment | 17:35 |
fungi | and yeah, static.o.o is the only one with san | 17:35 |
fungi | that much i know for certain | 17:35 |
fungi | all the rest i was buying single-domain certs | 17:35 |
fungi | the corresponding keys and csrs should all be in the certs dir | 17:36 |
fungi | as should the custom openssl cnf file for the static san list | 17:36 |
fungi | worth editing that one to remove any we no longer use, since the cert cost is based on number of san entries | 17:37 |
*** r-daneel_ has joined #openstack-infra | 17:38 | |
clarkb | fungi: do you expect us to reuse the csrs and keys for the other hosts? or generate new ones? | 17:38 |
fungi | i usually just reuse them because it's less work | 17:39 |
clarkb | I'd only have to update the cert in hiera if doing that right? | 17:39 |
*** r-daneel has quit IRC | 17:40 | |
*** r-daneel_ is now known as r-daneel | 17:40 | |
clarkb | I guess the chain may have changed for the new signing too | 17:40 |
fungi | certainly reusing the keys not only means you don't need to generate new ones but also you don't need to update hiera with them (just the certs and maybe the chain certs) | 17:40 |
clarkb | on the flip side generating new keys and csrs means something new to compromise | 17:40 |
fungi | sure, but if they're already compromised i doubt they couldn't get the new replacements just as easily? | 17:41 |
fungi | and if you're reusing the keys then there's no point in making new csrs unless there's something in the data for the request you want to change | 17:41 |
clarkb | ya | 17:41 |
fungi | so, like, for static you need a new csr if you remove some sans | 17:41 |
clarkb | looking at statics altnames the only one we may not be using at this point is docs-draft, did we end up combining the docs-draft volume into logs volume and if we did did we stop serving docs-draft urls via zuul? | 17:42 |
*** mrtenio has joined #openstack-infra | 17:42 | |
*** mrtenio_ has joined #openstack-infra | 17:42 | |
fungi | we did | 17:42 |
fungi | also are there still trystack domains in there? | 17:42 |
clarkb | fungi: we are serving a redirect to https://www.openstack.org/software/start from that name | 17:42 |
*** heyongli has quit IRC | 17:43 | |
openstackgerrit | Linda Marquez proposed openstack-infra/project-config master: add access bot to #openstack-mentoring https://review.openstack.org/577241 | 17:43 |
fungi | you can double-check whether any of those dns names are still synonymous with static.o.o | 17:43 |
*** heyongli has joined #openstack-infra | 17:43 | |
clarkb | oh specifically if the server is hosting that name | 17:43 |
fungi | yup | 17:44 |
clarkb | docs-draft is, and seems to redirect to docs.o.o | 17:44 |
clarkb | but trystack is not | 17:44 |
fungi | check the trystack ones and you'll see what i mean | 17:44 |
clarkb | ya trystack isn't static | 17:45 |
fungi | for docs-draft, i'm sure that's been redirecting long enough it can go away. none of the content it pointed to is still on docs.o.o is it? | 17:45 |
fungi | (and why is it not redirecting to logs.o.o?) | 17:45 |
clarkb | ya we only kept like a month bcklog there anyway | 17:46 |
clarkb | docs-draft redirecting to docs.o.o over http and governance.o.o over https | 17:46 |
*** mrtenio_ has left #openstack-infra | 17:46 | |
*** mrtenio has left #openstack-infra | 17:46 | |
clarkb | I think we've just got broken apache on static.o.o for docs-draft | 17:47 |
clarkb | I think we can safely remove those two names (docs-draft and trystack) | 17:47 |
clarkb | fungi: the reason is we seem to have a cinder http redirect to docs.o.o but then first sorted https vhost is for governacne so we redirect docs-draft there | 17:49 |
AJaeger | boden: you can add them to the blacklist for requirements repo | 17:49 |
*** r-daneel_ has joined #openstack-infra | 17:50 | |
fungi | clarkb: makes sense | 17:50 |
openstackgerrit | Linda Marquez proposed openstack-infra/system-config master: adding #openstack-mentoring to meetbot channel https://review.openstack.org/577243 | 17:51 |
*** r-daneel has quit IRC | 17:52 | |
*** r-daneel_ is now known as r-daneel | 17:52 | |
*** heyongli has quit IRC | 17:53 | |
openstackgerrit | Matthieu Huin proposed openstack-infra/zuul master: [WIP] web: add tenant-scoped autohold, enqueue https://review.openstack.org/576907 | 17:53 |
*** heyongli has joined #openstack-infra | 17:53 | |
openstackgerrit | Merged openstack-infra/project-config master: Remove direct tagging from swift-bench ACL https://review.openstack.org/575071 | 17:55 |
openstackgerrit | Merged openstack-infra/project-config master: Bump packethost max servers to 100 https://review.openstack.org/577016 | 17:55 |
openstackgerrit | Merged openstack-infra/project-config master: Remove legacy rally jobs https://review.openstack.org/577139 | 17:55 |
*** yamamoto has joined #openstack-infra | 17:56 | |
clarkb | fungi: should I expect that setting OPENSSL_CONF to point at the static cnf file and running gencert will work? | 17:58 |
clarkb | or will the cli options conflict with the config file options? | 17:59 |
boden | AJaeger ack, will try | 17:59 |
fungi | clarkb: i think i used the envvar. easy enough to test and then analyze the resulting csr | 18:01 |
openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool master: Remove a done TODO in static driver https://review.openstack.org/577244 | 18:01 |
clarkb | fungi: also is openstackid-resources.openstack.org a new one? I don't see it in the certs dir | 18:02 |
fungi | clarkb: i believe we can consider dropping it from our tracker | 18:03 |
fungi | we don't run that server (we were going to at some point but it never materialized) | 18:03 |
clarkb | got it | 18:03 |
clarkb | I will remove it from my list | 18:03 |
*** heyongli has quit IRC | 18:03 | |
fungi | i had bought a cert for it a couple cycles back but that went unused | 18:03 |
*** heyongli has joined #openstack-infra | 18:03 | |
*** yamamoto has quit IRC | 18:04 | |
*** germs has joined #openstack-infra | 18:05 | |
*** germs has quit IRC | 18:05 | |
*** germs has joined #openstack-infra | 18:05 | |
clarkb | fungi: I guess we want the signing to happen all within a short window of time so that the expiration dates match up but otherwise we can do the rest of the work as able (as long as it is before june 20) | 18:09 |
clarkb | er 30 | 18:09 |
*** germs has quit IRC | 18:10 | |
*** heyongli has quit IRC | 18:13 | |
*** heyongli has joined #openstack-infra | 18:14 | |
*** lpetrut has quit IRC | 18:15 | |
*** apetrich has joined #openstack-infra | 18:16 | |
fungi | yeah. i mean, having the signatures spread out over the course of a few days isn't really a problem, i just tended to do them all at once because it was less work than multiple batches | 18:18 |
clarkb | fungi: I've generated a new csr for static.o.o in ~root/certs/2018-06-21, it looks ok to me based on openssl req -text output but maybe you want to double check | 18:18 |
openstackgerrit | Matthieu Huin proposed openstack-infra/zuul master: [WIP] web: add tenant-scoped autohold, enqueue https://review.openstack.org/576907 | 18:18 |
clarkb | fungi: ya for today I think I will get as far as getting all my csrs lined up and paying for the certs then do all the signing tomorrow | 18:19 |
*** efried is now known as efried_pto | 18:20 | |
*** heyongli has quit IRC | 18:24 | |
*** heyongli has joined #openstack-infra | 18:24 | |
*** janki has quit IRC | 18:25 | |
clarkb | fungi: ianw looks like running with max-servers at 100 should be fine based on recent email from john | 18:26 |
fungi | yep, and AJaeger approved the change anyway | 18:29 |
clarkb | fungi: one difference with the new static csr that I notice is that static.o.o isn't listed as a dns name | 18:29 |
fungi | merged at 17:55 | 18:29 |
clarkb | I dno't think that matters if the CN is static.o.o but I can add it as an alt name too | 18:30 |
clarkb | or maybe that is difference between examining the actual cert we have now and the csr | 18:30 |
*** Goneri has quit IRC | 18:30 | |
fungi | i think it ended up in the san for the cert even though i didn't put it in the csr | 18:31 |
*** SumitNaiksatam has quit IRC | 18:31 | |
*** heyongli has quit IRC | 18:34 | |
*** heyongli has joined #openstack-infra | 18:34 | |
*** derekh has joined #openstack-infra | 18:36 | |
*** felipemonteiro_ has joined #openstack-infra | 18:37 | |
*** felipemonteiro has quit IRC | 18:37 | |
openstackgerrit | Sorin Sbarnea proposed openstack-infra/project-config master: enable python-jenkins linters gate https://review.openstack.org/577250 | 18:39 |
clarkb | fungi: I'm going to ask john what is most appropriate company or companies to list on the infrastructure donors page now that we are at 100 max servers there | 18:41 |
fungi | thanks clarkb! | 18:41 |
*** anteaya has joined #openstack-infra | 18:42 | |
fungi | clarkb: on the static cert, if memory serves when i bought e.g. a "15-domain cert" that covered 15 san entries but they duplicated the cn into the san list so it counted as one of the 15 | 18:43 |
clarkb | fungi: got it, in this case 15 should still be plenty | 18:43 |
fungi | well, i pulled 15 out of thin air just now | 18:43 |
clarkb | gotcha | 18:43 |
fungi | i sized it to whatever the number of domains we needed was because it was like an additional $10/domain or something after the initial 3 you get as part of the base cost | 18:44 |
*** heyongli has quit IRC | 18:44 | |
fungi | i don't remember the exact price (and it may not even be the same now as it was a year ago, i have no idea) | 18:44 |
*** heyongli has joined #openstack-infra | 18:44 | |
*** lpetrut has joined #openstack-infra | 18:44 | |
clarkb | fungi: also did you find a way to buy all the certs under one invoice/reciept/transaction? In the past I gave up and just did them one at a time | 18:44 |
clarkb | but that makes expense reports more painful | 18:45 |
clarkb | I probably just failed to understand their shopping cart | 18:45 |
fungi | i never had a problem with that, you just have to keep going back to the top-level menu and selecting them one at a time and it adds them to your cart | 18:45 |
clarkb | ah | 18:45 |
fungi | it _is_ a pain, and not entirely intuitive | 18:46 |
clarkb | If I have math'd right we have 7 domains plus the CN for 8 total. First three are free so I want 5 additional | 18:47 |
clarkb | its actually cheaper to buy 8 single domain certs :/ | 18:47 |
clarkb | difference is the price of a dinner so meh | 18:48 |
fungi | "free" | 18:49 |
*** dpawlik has joined #openstack-infra | 18:49 | |
fungi | yeah, their pricing model leaves something to be desired | 18:50 |
*** dpawlik has quit IRC | 18:50 | |
*** dpawlik has joined #openstack-infra | 18:50 | |
fungi | we should just ask the foundation's cdn provider for a copy of the *.openstack.org cert they've been using :/ | 18:50 |
clarkb | I'm going to take a break now and find lunch then break out the credit card after | 18:51 |
clarkb | fungi: I expect they aren't too keen to share | 18:51 |
clarkb | though I Guess we would have had to issue it | 18:51 |
ssbarnea | sorry to bother with a cosmetic issue, i am trying to switch from openstack-tox-pep8 to openstack-tox-linters for python-jenkins and I am not sure what is needed. | 18:52 |
clarkb | ssbarnea: I think you just need a linters target in tox.ini then change the job out in the zuul config | 18:52 |
clarkb | ssbarnea: you can probably even copy the pep8 target to start | 18:53 |
ssbarnea | i imagined that and a common topic in the change to make the switch be applied at the same time, right? | 18:53 |
ssbarnea | or do I need a transition period? | 18:53 |
ssbarnea | like adding linters target without removing pep8 one? | 18:53 |
clarkb | if the config is all in one place (like in your poject repo) just flip the values around | 18:54 |
clarkb | zuul will use the new config since that job doesn't need trust | 18:54 |
*** heyongli has quit IRC | 18:54 | |
*** heyongli has joined #openstack-infra | 18:55 | |
ssbarnea | see https://review.openstack.org/#/c/577250/ -- looks valid? | 18:55 |
ssbarnea | i was not able to find any place where pep8 was defined, so I suspect is part of one of the templates. | 18:55 |
clarkb | ssbarnea: I'm guessing openstack-python-jobs. The change you have will run both pep8 and linters jobs | 18:56 |
clarkb | ssbarnea: you'll need to deconstruct the template that includes pep8 and include the other jobs directly (or use a new template) to avoid that | 18:56 |
ssbarnea | i am trying to findout where are those templates defined, apparently not in project-config | 18:57 |
ssbarnea | I seen that there are lots of usages of openstack-tox-linters so I am not the first one migrating, i guess. | 18:58 |
clarkb | ssbarnea: openstack-infra/openstack-zuul-jobs/zuul.d/project-templates.yaml looks like (and it is part of openstack-python-jobs) | 18:59 |
fungi | yeah, the "pep8" job name is historical baggage and has been for a very long time | 18:59 |
*** amoralej is now known as amoralej|off | 18:59 | |
openstackgerrit | Merged openstack-infra/nodepool master: Pass zk connection to ProviderManager.start() https://review.openstack.org/574895 | 19:00 |
fungi | but as it's entwined with what people are naming their tox testenvs, it's hard to swap with a mass change | 19:00 |
openstackgerrit | Merged openstack-infra/nodepool master: Make a proper driver notification API https://review.openstack.org/574896 | 19:01 |
*** yamamoto has joined #openstack-infra | 19:01 | |
*** lpetrut has quit IRC | 19:03 | |
*** lpetrut has joined #openstack-infra | 19:04 | |
*** heyongli has quit IRC | 19:05 | |
*** heyongli has joined #openstack-infra | 19:05 | |
*** felipemonteiro__ has joined #openstack-infra | 19:05 | |
*** yamamoto has quit IRC | 19:06 | |
*** felipemonteiro_ has quit IRC | 19:09 | |
ssbarnea | fungi: does this also means that I could just keep the config inside .zuul.yaml and remove its config from project-config.git repo? | 19:10 |
openstackgerrit | Jeremy Stanley proposed openstack-infra/storyboard master: Support quoted project names in GET requests by name https://review.openstack.org/577081 | 19:10 |
*** weshay|ruck is now known as weshay_PTO | 19:12 | |
fungi | ssbarnea: yes, that would definitely be an option. you still need the system-required addition in project-config for now i think? but everything else could move to the python-jenkins repo | 19:12 |
*** heyongli has quit IRC | 19:15 | |
*** heyongli has joined #openstack-infra | 19:15 | |
fungi | clarkb: the etherpad lgtm | 19:16 |
*** kjackal has joined #openstack-infra | 19:16 | |
openstackgerrit | Merged openstack-infra/nodepool master: Pre-register static nodes https://review.openstack.org/574897 | 19:16 |
*** e0ne has quit IRC | 19:17 | |
openstackgerrit | Merged openstack-infra/nodepool master: Clarify static node name uniqueness in docs https://review.openstack.org/575159 | 19:17 |
*** derekh has quit IRC | 19:19 | |
*** SpamapS has joined #openstack-infra | 19:23 | |
*** heyongli has quit IRC | 19:25 | |
*** heyongli has joined #openstack-infra | 19:26 | |
openstackgerrit | Tobias Henkel proposed openstack-infra/zuul master: Fix race in tox-remote test_command https://review.openstack.org/577279 | 19:30 |
openstackgerrit | Tobias Henkel proposed openstack-infra/zuul master: Fix race in tox-remote test_command https://review.openstack.org/577279 | 19:32 |
*** diablo_rojo has quit IRC | 19:34 | |
*** heyongli has quit IRC | 19:35 | |
*** heyongli has joined #openstack-infra | 19:36 | |
openstackgerrit | Merged openstack-infra/nodepool master: Remove a done TODO in static driver https://review.openstack.org/577244 | 19:39 |
*** esarault has joined #openstack-infra | 19:42 | |
clarkb | fungi: and to double check you would just reuse the existing csr and key for hosts that have them? | 19:45 |
clarkb | looks like new CSRs were generated a year ago based on file timestamps | 19:46 |
*** heyongli has quit IRC | 19:46 | |
*** esarault_ has quit IRC | 19:46 | |
*** heyongli has joined #openstack-infra | 19:46 | |
openstackgerrit | Sorin Sbarnea proposed openstack-infra/project-config master: migrate python-jenkins config to repo https://review.openstack.org/577250 | 19:50 |
fungi | clarkb: yeah, the generation date on them doesn't have any bearing on the validity dates | 19:53 |
fungi | you should be able to just reuse them (except for static.o.o which has san changes from last round) | 19:54 |
clarkb | ok proceeding now with purchasing 16 single domain certs and one 8 domain cert | 19:55 |
clarkb | then tomorrow morning I'll work through the signing and updating server configs | 19:55 |
*** heyongli has quit IRC | 19:56 | |
*** heyongli has joined #openstack-infra | 19:56 | |
*** r-daneel_ has joined #openstack-infra | 19:58 | |
*** r-daneel has quit IRC | 19:59 | |
*** r-daneel_ is now known as r-daneel | 19:59 | |
clarkb | I feel like I'm deep enough into today that I'm ready to do something else like revieing topic:puppet-4 | 20:01 |
*** yamamoto has joined #openstack-infra | 20:02 | |
anteaya | clarkb, have you had any word on what the next step is for the naming process? | 20:06 |
openstackgerrit | Merged openstack-infra/zuul master: Don't use GRANT to create new MySQL users https://review.openstack.org/573641 | 20:06 |
*** heyongli has quit IRC | 20:06 | |
*** heyongli has joined #openstack-infra | 20:06 | |
clarkb | anteaya: aiui the next step is whittling the suggestions list down, I'll ping jbryce to make sure I understand that properly and see how he would approach that | 20:07 |
*** yamamoto has quit IRC | 20:07 | |
*** yolanda_ has joined #openstack-infra | 20:07 | |
openstackgerrit | Merged openstack-infra/zuul master: Make streaming test run longer than connection timeout https://review.openstack.org/572522 | 20:07 |
clarkb | cmurphy: ianw has a comment on https://review.openstack.org/#/c/570824/ that is probably worth considering | 20:08 |
*** jesslampe has joined #openstack-infra | 20:10 | |
cmurphy | clarkb: ah yeah that's a good point | 20:10 |
*** yolanda has quit IRC | 20:11 | |
*** dhill_ has quit IRC | 20:11 | |
*** anteaya has quit IRC | 20:12 | |
*** dhill_ has joined #openstack-infra | 20:15 | |
*** kgiusti has left #openstack-infra | 20:16 | |
*** heyongli has quit IRC | 20:16 | |
*** heyongli has joined #openstack-infra | 20:17 | |
openstackgerrit | Merged openstack-infra/zuul master: Fix race in tox-remote test_command https://review.openstack.org/577279 | 20:20 |
*** anteaya has joined #openstack-infra | 20:21 | |
*** ldnunes has quit IRC | 20:23 | |
anteaya | clarkb, okay thanks | 20:24 |
clarkb | cmurphy: https://review.openstack.org/#/c/576262/1 possible reason for that haproxy bind behavior there | 20:26 |
*** heyongli has quit IRC | 20:27 | |
cmurphy | clarkb: this was on ubuntu | 20:27 |
*** dpawlik has quit IRC | 20:27 | |
*** heyongli has joined #openstack-infra | 20:27 | |
clarkb | ok probably not then | 20:27 |
openstackgerrit | Doug Hellmann proposed openstack-infra/project-config master: use python3 to run launchpad commenting script https://review.openstack.org/577291 | 20:31 |
*** heyongli has quit IRC | 20:37 | |
*** r-daneel_ has joined #openstack-infra | 20:37 | |
*** heyongli has joined #openstack-infra | 20:37 | |
*** r-daneel has quit IRC | 20:37 | |
*** r-daneel_ is now known as r-daneel | 20:37 | |
cmurphy | clarkb: ianw hrm actually on 570824 template has a default value so ($template && $content) is always going to be true. could work around it by changing the default of template to undef and then if $content == undef and $template == undef set $_template = $httpd::params::template but that's a lot of ugh | 20:38 |
cmurphy | i kind of prefer to keep it the way it is, content overrides template | 20:39 |
clarkb | wfm, maybe a followup would be to have a comment explaining that content override template | 20:39 |
cmurphy | sure | 20:39 |
cmurphy | clarkb: https://review.openstack.org/#/c/570824/1/manifests/vhost.pp@14 | 20:42 |
*** jesslampe has quit IRC | 20:42 | |
clarkb | ah its already there. I did just approve the change too | 20:43 |
clarkb | ianw left a +2 not a -1 so I htink its ok | 20:43 |
cmurphy | cool | 20:43 |
*** heyongli has quit IRC | 20:47 | |
*** heyongli has joined #openstack-infra | 20:47 | |
*** trown is now known as trown|outtypewww | 20:48 | |
*** lpetrut has quit IRC | 20:49 | |
*** aeng has joined #openstack-infra | 20:49 | |
*** hemna_ has joined #openstack-infra | 20:50 | |
*** esarault has quit IRC | 20:52 | |
*** diablo_rojo has joined #openstack-infra | 20:56 | |
*** heyongli has quit IRC | 20:57 | |
*** heyongli has joined #openstack-infra | 20:58 | |
openstackgerrit | Merged openstack-infra/puppet-httpd master: Add content parameter to httpd::vhost https://review.openstack.org/570824 | 20:59 |
*** iyamahat__ has joined #openstack-infra | 20:59 | |
*** iyamahat_ has quit IRC | 21:02 | |
*** yamamoto has joined #openstack-infra | 21:04 | |
*** anteaya has quit IRC | 21:05 | |
*** pjrusak has quit IRC | 21:06 | |
*** heyongli has quit IRC | 21:08 | |
*** heyongli has joined #openstack-infra | 21:08 | |
*** yamamoto has quit IRC | 21:09 | |
*** felipemonteiro__ is now known as felipemonteiro | 21:11 | |
*** rosmaita has quit IRC | 21:11 | |
*** heyongli has quit IRC | 21:18 | |
*** heyongli has joined #openstack-infra | 21:18 | |
openstackgerrit | Merged openstack-infra/storyboard master: Support quoted project names in GET requests by name https://review.openstack.org/577081 | 21:24 |
*** heyongli has quit IRC | 21:28 | |
*** heyongli has joined #openstack-infra | 21:28 | |
*** myoung is now known as myoung|off | 21:30 | |
*** r-daneel has quit IRC | 21:32 | |
ianw | clarkb: yep. ipv6 is interesting. something i should learn how to set up; can't guarantee it would be transparent however :) | 21:38 |
*** heyongli has quit IRC | 21:38 | |
*** heyongli has joined #openstack-infra | 21:39 | |
ianw | it sounds like we should keep admin role in openstackci, and then drop open-infra project | 21:39 |
fungi | i concur | 21:39 |
fungi | and apparently they're not opposed to us keeping access to admin permissions (as long as we don't break it) | 21:40 |
clarkb | ianw: ++ | 21:41 |
*** d0ugal has joined #openstack-infra | 21:42 | |
ianw | fungi: heh, don't break it? have you seen my change history ... you came to the wrong place :) | 21:43 |
*** d0ugal_ has joined #openstack-infra | 21:44 | |
fungi | mine too | 21:44 |
fungi | more like "be willing to fix what you break" i guess ;) | 21:45 |
*** d0ugal has quit IRC | 21:45 | |
mordred | fungi, clarkb: I was reading scrollback and saw "you still need the system-required addition in project-config for now i think?" | 21:48 |
*** heyongli has quit IRC | 21:49 | |
*** heyongli has joined #openstack-infra | 21:49 | |
*** iyamahat__ has quit IRC | 21:49 | |
clarkb | mordred: yes, that way we can add and remove system side jobs as necessary | 21:49 |
mordred | we've landed (a while ago) the patch from tobiash adding support for wildcards - we could set a project: * template: system-required and remove the need that people do that - or project: openstack/* | 21:49 |
clarkb | oh that might be a more friendly way to do that | 21:50 |
mordred | yeah - less boilerplate is more better | 21:50 |
*** lihi has quit IRC | 21:50 | |
fungi | yes, we'd discussed for a while the ability to do implicit job additions as well, is that the implementation or was there another? | 21:51 |
*** lihi has joined #openstack-infra | 21:51 | |
fungi | in particular, it means one less initial patch for new project creation as well as simplifying the renames process | 21:52 |
mordred | yah | 21:53 |
* mordred is hacking together a patch | 21:53 | |
*** nicolasbock has quit IRC | 21:54 | |
*** eernst has joined #openstack-infra | 21:54 | |
*** boden has quit IRC | 21:55 | |
*** iyamahat__ has joined #openstack-infra | 21:55 | |
*** iyamahat_ has joined #openstack-infra | 21:56 | |
*** diablo_rojo has quit IRC | 21:57 | |
*** camunoz has quit IRC | 21:58 | |
*** iyamahat__ has quit IRC | 21:59 | |
*** heyongli has quit IRC | 21:59 | |
*** heyongli has joined #openstack-infra | 21:59 | |
*** diablo_rojo has joined #openstack-infra | 22:04 | |
openstackgerrit | Monty Taylor proposed openstack-infra/project-config master: Use wildcard to apply system-required template https://review.openstack.org/577307 | 22:05 |
mordred | fungi, clarkb: ^^ somethign like that | 22:06 |
*** yamamoto has joined #openstack-infra | 22:06 | |
mordred | +12,-1664 \o/ | 22:06 |
mordred | hrm. zuul did not like | 22:06 |
openstackgerrit | Monty Taylor proposed openstack-infra/project-config master: Use wildcard to apply system-required template https://review.openstack.org/577307 | 22:09 |
*** heyongli has quit IRC | 22:09 | |
*** heyongli has joined #openstack-infra | 22:09 | |
openstackgerrit | Monty Taylor proposed openstack-infra/project-config master: Use wildcard to apply system-required template https://review.openstack.org/577307 | 22:11 |
*** yamamoto has quit IRC | 22:11 | |
*** hashar has quit IRC | 22:12 | |
*** germs has joined #openstack-infra | 22:18 | |
*** germs has quit IRC | 22:18 | |
*** germs has joined #openstack-infra | 22:18 | |
*** felipemonteiro has quit IRC | 22:18 | |
*** heyongli has quit IRC | 22:19 | |
*** heyongli has joined #openstack-infra | 22:20 | |
openstackgerrit | Monty Taylor proposed openstack-infra/infra-manual master: WIP Remove system-required instructions for creators https://review.openstack.org/577310 | 22:23 |
mordred | fungi, AJaeger: ^^ there's a proposed patch and a half-way done update to the docs | 22:23 |
*** elod_ has quit IRC | 22:24 | |
*** edmondsw has quit IRC | 22:24 | |
*** rcernin has joined #openstack-infra | 22:26 | |
*** edmondsw has joined #openstack-infra | 22:26 | |
*** heyongli has quit IRC | 22:30 | |
*** heyongli has joined #openstack-infra | 22:30 | |
*** germs has quit IRC | 22:31 | |
*** edmondsw has quit IRC | 22:35 | |
*** edmondsw has joined #openstack-infra | 22:35 | |
*** heyongli has quit IRC | 22:40 | |
*** edmondsw has quit IRC | 22:40 | |
*** heyongli has joined #openstack-infra | 22:40 | |
openstackgerrit | Ian Wienand proposed openstack-infra/system-config master: Add debian-security mirror https://review.openstack.org/577316 | 22:45 |
ianw | fungi: ^ appreciate your eyes on that ... speaking of breaking things :) | 22:47 |
logan- | paste.o.o seems hung up | 22:47 |
*** eernst has quit IRC | 22:48 | |
fungi | ianw: i have a feeling the earlier problem is similar to how we were comingling the backports suite and needed to mirror it separately | 22:49 |
*** eernst has joined #openstack-infra | 22:49 | |
clarkb | logan-: seems to be there now but ya was slow to respond. Unfortunately my strace didn't catch it early enough to see what it was blocking on | 22:50 |
*** heyongli has quit IRC | 22:50 | |
logan- | yup works now! thanks for taking a look. | 22:50 |
fungi | i continue to suspect something blocking or timing out db queries | 22:50 |
*** heyongli has joined #openstack-infra | 22:51 | |
clarkb | journald isn't helpful either, but there is a gap in logged requests | 22:53 |
*** shaner has quit IRC | 22:54 | |
*** dhill_ has quit IRC | 22:58 | |
*** shaner has joined #openstack-infra | 22:59 | |
openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul master: gerrit: cast change and patchset numbers to str https://review.openstack.org/577154 | 23:00 |
*** heyongli has quit IRC | 23:00 | |
*** heyongli has joined #openstack-infra | 23:01 | |
openstackgerrit | Clark Boylan proposed openstack-infra/project-config master: Add fedora vexxhost flavor for Kata https://review.openstack.org/577318 | 23:05 |
clarkb | corvus: ^ you may be interested in that, I tired to outline the current plan that Kata was happy with there | 23:06 |
clarkb | basically get rough parity of platform testing via third party check and point it at their runtime repo. That repo gets PR traffic and should generate the feedback we need to make a decision of whether or not to productionize this with a new tennat | 23:07 |
*** yamamoto has joined #openstack-infra | 23:07 | |
*** rlandy has quit IRC | 23:09 | |
*** heyongli has quit IRC | 23:11 | |
*** heyongli has joined #openstack-infra | 23:11 | |
*** yamamoto has quit IRC | 23:12 | |
*** heyongli has quit IRC | 23:21 | |
*** heyongli has joined #openstack-infra | 23:21 | |
*** eernst has quit IRC | 23:23 | |
*** heyongli has quit IRC | 23:31 | |
*** heyongli has joined #openstack-infra | 23:31 | |
*** kjackal has quit IRC | 23:33 | |
*** tosky has quit IRC | 23:34 | |
*** yamamoto has joined #openstack-infra | 23:36 | |
*** heyongli has quit IRC | 23:41 | |
*** heyongli has joined #openstack-infra | 23:42 | |
*** eernst has joined #openstack-infra | 23:45 | |
*** eernst has quit IRC | 23:50 | |
ianw | fungi: was there something or other about using the /v3 endpoint for packethost? | 23:51 |
ianw | because as it is setup now we keep getting | 23:52 |
*** heyongli has quit IRC | 23:52 | |
ianw | Ignoring domain related config project_domain_name for openstackci-packethost because identity API version is 2.0 | 23:52 |
*** heyongli has joined #openstack-infra | 23:52 | |
clarkb | weird I think shade is supposed to use v3 if you provide the domain names | 23:52 |
ianw | (well, with the cloud https://review.openstack.org/#/c/577324/) | 23:52 |
clarkb | it should do api discovery on the root of the identity url then pick v3 if oyu have domain info or v2 if not | 23:52 |
clarkb | mordred: ^ | 23:52 |
mnaser | that's a weird one ^ | 23:54 |
mnaser | ianw: do you have access to the infra for the cloud? | 23:56 |
* ianw starts putting print statements into shade... | 23:56 | |
mnaser | i wonder if for discovery... it goes from https://packet.platform9.net/keystone and checks https://packet.platform9.net/ | 23:56 |
*** owalsh_ has joined #openstack-infra | 23:57 | |
ianw | mnaser: no, we are openstack admins but no access to the stuff behind it | 23:57 |
mnaser | i imagine some print statements can confirm this on the client side too | 23:57 |
*** eernst has joined #openstack-infra | 23:57 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!