Thursday, 2018-06-21

fungiworks for me!00:00
*** dingyichen has joined #openstack-infra00:01
ianwclarkb: hmm, i left overhead because at least one of the quota is taken by the CI host i think00:01
clarkbianw: the mirror is in its own project which should have its own quota00:02
clarkbwe can double check that though00:02
ianwwell, yeah, but we started out with one project that had a quota for 10000:02
*** jbadiapa has joined #openstack-infra00:02
clarkbah00:02
ianwthen split that ... but i'm not sure on what the actual resources are underneath00:03
clarkbso with the current flavor in use by mirror node assuming ram is limiting factor the nwe can do 99 test nodes00:03
ianwbut then we made the mirror disk about 3 times the others00:03
clarkbmy understansing is that the disk and cpu are not constraints as much as memory is, but we can ask john00:04
ianwso that was how i came out with 3 - 1 - 1 in case we wanted to start a manual node == 95 :)00:04
ianwi wasn't sure if we had *exactly* what was in the original project/tenant provisioned, or what00:04
clarkbya, it is worth understanding that better. I'll write an email00:05
ianwactually, i said i'd write one about how we split it up, and update passwords00:05
ianwi can do that now and stop procrastinating on it00:05
clarkbok, did you want to ask about the quota vs hardware too?00:05
ianwclarkb: yep, i will00:06
clarkbsounds good, thanks00:06
clarkbianw: maybe point out the new grafana page showing it in use too :)00:06
*** lifeless_ has joined #openstack-infra00:06
*** lifeless has quit IRC00:06
*** eernst has quit IRC00:07
ianwyep, i just released grafana02 back into puppet, so if that's ok, i will update the pointer00:07
*** heyongli has quit IRC00:07
ianwit looks a little nicer00:07
*** eernst has joined #openstack-infra00:07
*** heyongli has joined #openstack-infra00:07
ianwi'll clean up the system-config, but i think we should probably just use installed=>latest for grafana.  it seems well packaged and very backwards compatible00:08
*** r-daneel has joined #openstack-infra00:08
clarkbwfm00:09
clarkband ya I don't recall ever needing to change things due to them updated00:09
clarkbbut maybe that is because we never updated grafana00:09
*** slaweq has joined #openstack-infra00:11
*** slaweq has quit IRC00:16
*** heyongli has quit IRC00:17
*** heyongli has joined #openstack-infra00:17
*** bobh has joined #openstack-infra00:22
*** zzzeek has quit IRC00:25
*** zzzeek has joined #openstack-infra00:27
*** heyongli has quit IRC00:27
*** heyongli has joined #openstack-infra00:28
*** felipemonteiro has joined #openstack-infra00:31
*** heyongli has quit IRC00:38
*** heyongli has joined #openstack-infra00:38
*** camunoz has quit IRC00:44
*** rh-jelabarre has quit IRC00:46
*** yamamoto has joined #openstack-infra00:46
*** heyongli has quit IRC00:48
*** heyongli has joined #openstack-infra00:48
*** yamamoto has quit IRC00:52
*** zhangfei has joined #openstack-infra00:56
*** eernst has quit IRC00:57
*** heyongli has quit IRC00:58
*** heyongli has joined #openstack-infra00:58
*** markmcclain has quit IRC01:04
*** felipemonteiro has quit IRC01:04
*** markmcclain has joined #openstack-infra01:06
*** heyongli has quit IRC01:08
*** heyongli has joined #openstack-infra01:09
*** heyongli has quit IRC01:19
*** heyongli has joined #openstack-infra01:19
*** caphrim007 has joined #openstack-infra01:20
*** gyee has quit IRC01:25
*** caphrim007_ has joined #openstack-infra01:27
*** heyongli has quit IRC01:29
*** heyongli has joined #openstack-infra01:29
*** dpawlik has joined #openstack-infra01:29
*** caphrim007 has quit IRC01:30
*** links has joined #openstack-infra01:33
*** yamahata has quit IRC01:34
*** dpawlik has quit IRC01:34
*** eernst has joined #openstack-infra01:39
*** heyongli has quit IRC01:39
*** iyamahat_ has quit IRC01:39
*** heyongli has joined #openstack-infra01:39
*** r-daneel has quit IRC01:48
*** yamamoto has joined #openstack-infra01:48
*** heyongli has quit IRC01:49
*** heyongli has joined #openstack-infra01:50
*** yamamoto has quit IRC01:54
*** iyamahat has joined #openstack-infra01:54
*** yamahata has joined #openstack-infra01:56
*** eernst has quit IRC01:57
*** zhangfei has quit IRC01:59
*** heyongli has quit IRC02:00
*** heyongli has joined #openstack-infra02:00
*** hemna_ has quit IRC02:10
*** heyongli has quit IRC02:10
*** heyongli has joined #openstack-infra02:10
*** slaweq has joined #openstack-infra02:11
*** zhangfei has joined #openstack-infra02:12
*** sree has joined #openstack-infra02:13
*** slaweq has quit IRC02:16
*** sree has quit IRC02:17
*** heyongli has quit IRC02:20
*** heyongli has joined #openstack-infra02:21
*** roman_g has quit IRC02:21
*** bobh has quit IRC02:24
*** lifeless_ has quit IRC02:26
*** eernst has joined #openstack-infra02:29
*** heyongli has quit IRC02:30
*** heyongli has joined #openstack-infra02:31
*** bobh has joined #openstack-infra02:33
*** eernst has quit IRC02:38
*** heyongli has quit IRC02:41
*** heyongli has joined #openstack-infra02:41
*** lifeless has joined #openstack-infra02:43
*** sthussey has quit IRC02:44
*** psachin has joined #openstack-infra02:46
*** bobh has quit IRC02:47
*** yamamoto has joined #openstack-infra02:50
*** heyongli has quit IRC02:51
*** heyongli has joined #openstack-infra02:51
*** spsurya has joined #openstack-infra02:51
*** rcernin has quit IRC02:52
*** yamamoto has quit IRC02:54
*** heyongli has quit IRC03:01
*** heyongli has joined #openstack-infra03:01
*** sree has joined #openstack-infra03:06
*** felipemonteiro has joined #openstack-infra03:09
*** rcernin has joined #openstack-infra03:09
openstackgerritJames E. Blair proposed openstack-infra/zuul master: WIP: Report to gerrit over HTTP  https://review.openstack.org/57702703:10
*** sree has quit IRC03:11
*** slaweq has joined #openstack-infra03:11
openstackgerritJames E. Blair proposed openstack-infra/zuul master: WIP: Report to gerrit over HTTP  https://review.openstack.org/57702703:11
*** heyongli has quit IRC03:11
*** heyongli has joined #openstack-infra03:12
*** yolanda has quit IRC03:12
*** slaweq has quit IRC03:16
*** heyongli has quit IRC03:22
*** heyongli has joined #openstack-infra03:22
*** kzaitsev_pi has quit IRC03:28
*** heyongli has quit IRC03:32
*** heyongli has joined #openstack-infra03:32
*** ramishra has joined #openstack-infra03:37
*** heyongli has quit IRC03:42
*** heyongli has joined #openstack-infra03:42
*** lpetrut has joined #openstack-infra03:46
*** ykarel|away has joined #openstack-infra03:49
*** zhangfei has quit IRC03:50
*** yamamoto has joined #openstack-infra03:51
*** heyongli has quit IRC03:52
*** udesale has joined #openstack-infra03:52
*** heyongli has joined #openstack-infra03:53
*** rcernin has quit IRC03:55
*** yamamoto has quit IRC03:56
openstackgerritJames E. Blair proposed openstack-infra/zuul master: WIP: Report to gerrit over HTTP  https://review.openstack.org/57702703:59
openstackgerritJames E. Blair proposed openstack-infra/zuul master: WIP: Support line comments in Gerrit  https://review.openstack.org/57703503:59
*** zhangfei has joined #openstack-infra04:02
*** heyongli has quit IRC04:03
*** heyongli has joined #openstack-infra04:03
*** germs has quit IRC04:07
*** lifeless has quit IRC04:08
*** slaweq has joined #openstack-infra04:11
*** heyongli has quit IRC04:13
*** heyongli has joined #openstack-infra04:13
*** rcernin has joined #openstack-infra04:14
*** lifeless has joined #openstack-infra04:14
*** slaweq has quit IRC04:15
*** lifeless has quit IRC04:20
*** lifeless has joined #openstack-infra04:20
*** heyongli has quit IRC04:23
*** lpetrut has quit IRC04:23
*** heyongli has joined #openstack-infra04:23
*** lifeless has quit IRC04:25
*** lifeless has joined #openstack-infra04:26
*** SpamapS has quit IRC04:29
*** StevenK has quit IRC04:29
*** dansmith has quit IRC04:29
*** rm_work has quit IRC04:29
*** zeus has quit IRC04:29
*** bradm has quit IRC04:29
*** dburmistrov has quit IRC04:29
*** lpetrut has joined #openstack-infra04:30
*** lifeless has quit IRC04:30
*** cshastri has joined #openstack-infra04:30
*** lifeless has joined #openstack-infra04:31
*** cshastri_ has joined #openstack-infra04:33
*** heyongli has quit IRC04:33
*** heyongli has joined #openstack-infra04:34
*** dhajare has joined #openstack-infra04:35
*** lifeless has quit IRC04:36
*** cshastri has quit IRC04:36
*** cshastri_ has quit IRC04:36
*** lifeless has joined #openstack-infra04:37
*** cshastri has joined #openstack-infra04:39
*** pgadiya has joined #openstack-infra04:40
*** pgadiya has quit IRC04:40
*** yamamoto has joined #openstack-infra04:41
*** lifeless has quit IRC04:41
*** lifeless has joined #openstack-infra04:42
*** heyongli has quit IRC04:44
*** heyongli has joined #openstack-infra04:44
*** ykarel|away is now known as ykarel04:44
*** lpetrut has quit IRC04:45
*** lifeless has quit IRC04:47
*** lifeless has joined #openstack-infra04:48
*** lifeless has quit IRC04:52
*** lifeless has joined #openstack-infra04:54
*** heyongli has quit IRC04:54
*** heyongli has joined #openstack-infra04:54
*** lifeless has quit IRC04:58
*** bhavik1 has joined #openstack-infra04:59
openstackgerritIan Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs  https://review.openstack.org/57704504:59
*** lifeless has joined #openstack-infra04:59
*** Guest29132 is now known as dougwig04:59
*** dougwig is now known as Guest5566205:00
*** sree has joined #openstack-infra05:01
*** dhajare has quit IRC05:01
*** Guest55662 has quit IRC05:01
*** dougwig_ has joined #openstack-infra05:02
openstackgerritIan Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs  https://review.openstack.org/57704505:02
ianwclarkb: ^ if people want recognition, we could do something like add images to the description on that page too05:03
*** lifeless has quit IRC05:04
*** heyongli has quit IRC05:04
*** lifeless has joined #openstack-infra05:04
*** heyongli has joined #openstack-infra05:04
*** owalsh_ has joined #openstack-infra05:06
*** owalsh- has joined #openstack-infra05:07
*** owalsh| has joined #openstack-infra05:08
*** janki has quit IRC05:09
*** lifeless has quit IRC05:09
*** jiapei has joined #openstack-infra05:09
*** owalsh has quit IRC05:10
*** felipemonteiro has quit IRC05:10
*** lifeless has joined #openstack-infra05:10
*** owalsh_ has quit IRC05:11
*** slaweq has joined #openstack-infra05:11
*** owalsh- has quit IRC05:12
*** e0ne has joined #openstack-infra05:13
*** e0ne has quit IRC05:14
*** heyongli has quit IRC05:14
*** lifeless has quit IRC05:14
*** heyongli has joined #openstack-infra05:15
*** dpawlik has joined #openstack-infra05:15
*** lifeless has joined #openstack-infra05:15
*** slaweq has quit IRC05:16
*** kjackal has joined #openstack-infra05:16
*** felipemonteiro has joined #openstack-infra05:17
*** dhajare has joined #openstack-infra05:17
*** dpawlik has quit IRC05:20
*** ccamacho has quit IRC05:21
*** bhavik1 has quit IRC05:23
*** heyongli has quit IRC05:25
*** heyongli has joined #openstack-infra05:25
*** felipemonteiro has quit IRC05:26
*** dansmith has joined #openstack-infra05:31
*** links has quit IRC05:32
*** rm_work has joined #openstack-infra05:32
*** rm_work has quit IRC05:32
*** rm_work has joined #openstack-infra05:32
*** dansmith is now known as Guest8832005:32
*** yolanda has joined #openstack-infra05:34
*** heyongli has quit IRC05:35
*** heyongli has joined #openstack-infra05:35
*** udesale_ has joined #openstack-infra05:36
*** udesale has quit IRC05:37
*** cshastri has quit IRC05:38
*** psachin has quit IRC05:38
*** owalsh has joined #openstack-infra05:39
*** owalsh| has quit IRC05:42
*** slaweq has joined #openstack-infra05:44
*** heyongli has quit IRC05:45
*** heyongli has joined #openstack-infra05:45
*** slaweq has quit IRC05:48
*** dhajare has quit IRC05:50
*** heyongli has quit IRC05:55
*** heyongli has joined #openstack-infra05:56
*** links has joined #openstack-infra05:56
*** alex_xu has quit IRC05:57
*** nicolasbock has joined #openstack-infra06:00
*** janki has joined #openstack-infra06:00
*** cshastri has joined #openstack-infra06:01
corvusianw: does that remove all the dashboards and replace them with one like http://grafana.openstack.org/dashboard/db/nodepool-rackspace-experimental ?06:01
*** dhajare has joined #openstack-infra06:02
*** alex_xu has joined #openstack-infra06:03
*** heyongli has quit IRC06:06
*** heyongli has joined #openstack-infra06:06
*** StevenK has joined #openstack-infra06:07
corvusianw: can you remove the graphs you manually created on grafana02 before you change the pointer?06:08
ianwcorvus: the graph in operation is http://grafana02.openstack.org/d/MKTt6xNik/nodepool-all-providers06:10
*** psachin has joined #openstack-infra06:10
*** slaweq has joined #openstack-infra06:11
corvusthx06:12
*** signed8bit has joined #openstack-infra06:13
*** heyongli has quit IRC06:16
*** slaweq has quit IRC06:16
*** heyongli has joined #openstack-infra06:16
*** lpetrut has joined #openstack-infra06:19
*** aeng has quit IRC06:20
*** cshastri has quit IRC06:23
*** ykarel is now known as ykarel|afk06:23
*** ccamacho has joined #openstack-infra06:24
*** heyongli has quit IRC06:26
*** rpittau_ has joined #openstack-infra06:26
*** heyongli has joined #openstack-infra06:26
*** cshastri has joined #openstack-infra06:27
*** signed8bit has quit IRC06:27
*** andreas_s has joined #openstack-infra06:28
*** rpittau has quit IRC06:29
*** ykarel|afk has quit IRC06:33
*** ykarel|afk has joined #openstack-infra06:34
*** stakeda has joined #openstack-infra06:34
*** andreas_s has quit IRC06:35
*** heyongli has quit IRC06:36
*** heyongli has joined #openstack-infra06:37
*** namnh has joined #openstack-infra06:37
*** andreas_s_ has joined #openstack-infra06:39
*** zhangfei has quit IRC06:43
*** jcoufal has joined #openstack-infra06:45
*** iranzo has joined #openstack-infra06:45
*** tommylikehu has quit IRC06:45
*** ykarel|afk is now known as ykarel06:46
*** heyongli has quit IRC06:47
*** heyongli has joined #openstack-infra06:47
*** tommylikehu has joined #openstack-infra06:48
*** tommylikehu has quit IRC06:54
*** zhangfei has joined #openstack-infra06:56
*** heyongli has quit IRC06:57
*** heyongli has joined #openstack-infra06:57
*** apetrich has quit IRC06:58
*** apetrich has joined #openstack-infra06:58
*** tommylikehu has joined #openstack-infra06:59
*** rfolco_ has joined #openstack-infra06:59
*** rpioso|afk has quit IRC06:59
*** rpioso|afk has joined #openstack-infra07:01
*** rfolco has quit IRC07:02
*** srwilkers has quit IRC07:02
openstackgerritAdam Coldrick proposed openstack-infra/storyboard master: Support quoted project names in GET requests by name  https://review.openstack.org/57708107:03
*** Bhujay has joined #openstack-infra07:03
*** apetrich has quit IRC07:06
*** jtomasek has joined #openstack-infra07:06
*** jtomasek has quit IRC07:06
*** tommylikehu has quit IRC07:06
*** jtomasek has joined #openstack-infra07:07
*** heyongli has quit IRC07:07
*** rpioso|afk has quit IRC07:07
*** heyongli has joined #openstack-infra07:08
*** lpetrut has quit IRC07:08
*** rpioso|afk has joined #openstack-infra07:09
*** lpetrut has joined #openstack-infra07:11
*** florianf has joined #openstack-infra07:11
*** tesseract has joined #openstack-infra07:11
*** tommylikehu has joined #openstack-infra07:12
*** gfidente has joined #openstack-infra07:13
*** udesale__ has joined #openstack-infra07:14
*** slaweq has joined #openstack-infra07:14
*** peereb has joined #openstack-infra07:15
*** andreas_s_ has quit IRC07:16
*** udesale_ has quit IRC07:16
*** srwilkers has joined #openstack-infra07:17
*** heyongli has quit IRC07:17
*** andreas_s_ has joined #openstack-infra07:17
*** heyongli has joined #openstack-infra07:18
*** rossella_s has joined #openstack-infra07:19
*** armaan has joined #openstack-infra07:20
*** links has quit IRC07:21
*** links has joined #openstack-infra07:21
*** andreas_s has joined #openstack-infra07:21
openstackgerritIan Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs  https://review.openstack.org/57704507:22
*** pcaruana has joined #openstack-infra07:22
openstackgerritIan Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs  https://review.openstack.org/57704507:24
*** amoralej|off is now known as amoralej07:25
*** andreas_s_ has quit IRC07:25
*** heyongli has quit IRC07:28
*** efried has quit IRC07:28
*** rpittau_ is now known as rpittau07:28
*** heyongli has joined #openstack-infra07:28
*** efried has joined #openstack-infra07:28
*** shardy has joined #openstack-infra07:29
flaper87Do we install unbound on the CI nodes automatically? I'm debugging the failure in this job: http://logs.openstack.org/33/574233/16/experimental/tripleo-ci-centos-7-scenario009-multinode-oooq/3d18495/ and I noticed the origin-node container is not starting because the port 127.0.0.1:53 (which it needs) is already in use by unbound. Looking into how tripleo sets up the node, I noticed we do install07:29
flaper87unbound but "disabling it" didn't seem to work07:29
flaper87so, my next guess is that unbound is there already in the node07:29
flaper87I'll keep digging but I thought I'd ask07:30
ianwflaper87: yes, we do07:31
ianwi think it's basically a hard requirement, we've had so many random failures *without* unbound on nodes ... that's why it's there07:31
ianwhttp://git.openstack.org/cgit/openstack-infra/openstack-zuul-jobs/tree/roles/configure-unbound is the role07:33
*** tosky has joined #openstack-infra07:33
flaper87ianw: mmh, jeez, this is a problem for this job, though. Would it be possible to disable it just for 1 node07:34
*** annp has joined #openstack-infra07:34
*** heyongli has quit IRC07:38
*** heyongli has joined #openstack-infra07:38
*** dpawlik has joined #openstack-infra07:39
openstackgerritIan Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs  https://review.openstack.org/57704507:39
*** sshnaidm|off has quit IRC07:40
*** e0ne has joined #openstack-infra07:40
ianwflaper87: umm, not really, it's baked into the base jobs.  but if you disable before you start, that would work?07:41
flaper87ianw: yup, I guess that's what we'll do. Hacky but it's what we can do for now07:42
*** jpena|off is now known as jpena07:42
*** links has quit IRC07:42
*** cicisong has joined #openstack-infra07:45
*** rcernin has quit IRC07:47
*** heyongli has quit IRC07:48
*** heyongli has joined #openstack-infra07:48
*** links has joined #openstack-infra07:55
openstackgerritIan Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs  https://review.openstack.org/57704507:55
gnuoy\o07:56
*** jpich has joined #openstack-infra07:56
*** cicisong has quit IRC07:57
openstackgerritIan Wienand proposed openstack-infra/project-config master: Consolidate nodepool graphs  https://review.openstack.org/57704507:58
*** heyongli has quit IRC07:58
*** heyongli has joined #openstack-infra07:59
*** electrofelix has joined #openstack-infra07:59
*** andreas_s_ has joined #openstack-infra08:01
*** ykarel is now known as ykarel|lunch08:02
*** andreas_s has quit IRC08:04
*** heyongli has quit IRC08:09
*** heyongli has joined #openstack-infra08:09
*** dougsz has joined #openstack-infra08:10
*** sshnaidm has joined #openstack-infra08:18
*** slaweq has quit IRC08:18
*** heyongli has quit IRC08:19
openstackgerrityolanda.robla proposed openstack/diskimage-builder master: Only detach device if all partitions have been cleaned  https://review.openstack.org/57687608:19
*** heyongli has joined #openstack-infra08:19
*** hashar has joined #openstack-infra08:20
*** Bhujay has quit IRC08:23
*** slaweq has joined #openstack-infra08:26
*** alexchadin has joined #openstack-infra08:26
*** heyongli has quit IRC08:29
*** heyongli has joined #openstack-infra08:29
*** apetrich has joined #openstack-infra08:30
*** elod__ has joined #openstack-infra08:34
*** roman_g has joined #openstack-infra08:36
*** derekh has joined #openstack-infra08:36
*** elod__ is now known as elod08:38
*** kzaitsev_pi has joined #openstack-infra08:39
*** heyongli has quit IRC08:39
*** heyongli has joined #openstack-infra08:40
*** sree has quit IRC08:45
*** heyongli has quit IRC08:50
*** heyongli has joined #openstack-infra08:50
*** xinliang has joined #openstack-infra08:51
*** markvoelker has quit IRC08:54
xinliangHi, I met an infra mirror error "E: Method gave invalid 103 Redirect message".08:55
xinliangAnyone knows what's wrong?08:56
corvusxinliang: which mirror?  and do you have a link to the logs?08:59
xinliangcorvus: this is the detail job log:http://logs.openstack.org/59/557659/20/experimental/kolla-build-debian-source-arm64/a0a967d/job-output.txt.gz#_2018-06-21_08_45_24_77906308:59
xinliangcorvus: The debian mirror.09:00
*** heyongli has quit IRC09:00
*** heyongli has joined #openstack-infra09:00
*** e0ne has quit IRC09:01
xinliangianw: Do you have time to take a look at this debian mirror error: http://logs.openstack.org/59/557659/20/experimental/kolla-build-debian-source-arm64/a0a967d/job-output.txt.gz#_2018-06-21_08_45_24_77906309:02
corvusare wwe sure that's the debian mirror?  the line before it is a warning about debian, but i'm not sure that error is09:03
*** dingyichen has quit IRC09:04
corvusdoes it happen again if you recheck?09:05
ianwyes odd, i've not seen that before09:07
corvusif it is about the debian repo, it'll be for security.debian, which i don't believe we're mirroring, but maybe are proxying?09:10
*** heyongli has quit IRC09:10
*** heyongli has joined #openstack-infra09:10
*** Bhujay has joined #openstack-infra09:14
xinliangcorvus: don't know with repo accessing is wrong. it might be security.deiban, as it has one error msg here: http://logs.openstack.org/59/557659/20/experimental/kolla-build-debian-source-arm64/a0a967d/job-output.txt.gz#_2018-06-21_08_45_21_32541309:15
ianwxinliang: it looks to me like transient errors with security.debian ... i guess we don't mirror that09:17
*** heyongli has quit IRC09:20
*** heyongli has joined #openstack-infra09:21
xinliangianw: it's strange, in my local environment, security.debian  update seems ok.09:22
ianwso we mirror ubuntu security, but not debian.  but maybe we used to ... looking09:23
ianw    Remove debian-security from reprepro09:23
ianwhttps://review.openstack.org/#/c/562348/ of course i reviewed it and didn't remember :)09:24
*** panda|off is now known as panda09:24
ianwi guess we never did that follow up09:25
ianwxinliang: yeah, random weirdness like this is why we like our own mirrors :)09:25
*** sshnaidm is now known as sshnaidm|lnch09:26
ianwxinliang: if it's something like you'd to get involved with, start at http://git.openstack.org/cgit/openstack-infra/system-config/tree/modules/openstack_project/manifests/mirror_update.pp#n124 and basically copy it out for a separate security.debian.org reprepro run09:29
ianwotherwise, i can put it in my todo list to bring it back09:29
*** ykarel|lunch is now known as ykarel09:29
*** vivsoni has quit IRC09:29
*** vivsoni has joined #openstack-infra09:30
*** heyongli has quit IRC09:31
*** heyongli has joined #openstack-infra09:31
xinliangianw: please add it into your todo list. Actually, I don't understand why it is removed before, it says "This is causing checksum issues on files we download."09:34
*** rcernin has joined #openstack-infra09:39
*** zoli is now known as zoli|lunch09:40
openstackgerritNguyen Van Trung proposed openstack/diskimage-builder master: Add iscsi-boot element for CentOS images  https://review.openstack.org/54270809:41
*** heyongli has quit IRC09:41
*** heyongli has joined #openstack-infra09:41
*** dtantsur|afk is now known as dtantsur09:41
ianwxinliang: it was causing problems with the main mirror process09:42
xinliangianw: anyway, i want to login and check with repo is causing error. could you help to add my key?09:42
xinliangthis is my github account: https://github.com/xin3liang09:44
xinliangdouble check which repo is causing error.09:45
*** heyongli has quit IRC09:51
*** heyongli has joined #openstack-infra09:51
*** rcernin has quit IRC09:53
*** e0ne has joined #openstack-infra09:55
*** spsurya has quit IRC09:58
*** elod has quit IRC09:58
*** elod has joined #openstack-infra09:59
*** heyongli has quit IRC10:01
*** heyongli has joined #openstack-infra10:02
ianwxinliang: it's not held but 103.20.251.14610:04
ianwi notice it's not using http ... i think this is the old weird proxy somewhere issue10:05
ianwyep, https it works10:05
openstackgerritIan Wienand proposed openstack-infra/zuul-jobs master: Use https for security.debian.org  https://review.openstack.org/57711910:08
ianwxinliang: ^ should help.  probably we moved that back when we stopped mirroring (where we don't use https to the local mirror) and just missed it10:08
*** e0ne has quit IRC10:10
*** e0ne has joined #openstack-infra10:12
*** heyongli has quit IRC10:12
*** heyongli has joined #openstack-infra10:12
*** e0ne has quit IRC10:16
xinliangianw: thanks, will try with that patch.10:18
*** annp has quit IRC10:20
*** heyongli has quit IRC10:22
*** heyongli has joined #openstack-infra10:22
*** snapiri has joined #openstack-infra10:29
*** heyongli has quit IRC10:32
*** heyongli has joined #openstack-infra10:32
*** boden has joined #openstack-infra10:34
*** apetrich has quit IRC10:38
*** alexchadin has quit IRC10:41
*** heyongli has quit IRC10:42
*** heyongli has joined #openstack-infra10:43
*** lpetrut has quit IRC10:45
*** dhill_ has quit IRC10:45
*** bradm has joined #openstack-infra10:48
*** alexchadin has joined #openstack-infra10:50
*** namnh has quit IRC10:51
*** derekh_ has joined #openstack-infra10:51
ianwxinliang: actually you know, that's wrong10:53
*** heyongli has quit IRC10:53
*** heyongli has joined #openstack-infra10:53
ianwhttps://security.debian.org/ is a self-signed certificate i guess10:53
ianwhrm ...10:53
*** rcernin has joined #openstack-infra10:54
*** derekh has quit IRC10:54
ianwoh wow, yeah ... https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=80253910:55
openstackDebian bug 802539 in security.debian.org "Please properly configure HTTPS in security.debian.org" [Normal,Open]10:55
*** zul has quit IRC10:56
ianwso basically we can't https to security :/10:56
*** zul has joined #openstack-infra10:57
*** zoli|lunch is now known as zoli10:57
*** markvoelker has joined #openstack-infra10:59
*** heyongli has quit IRC11:03
*** heyongli has joined #openstack-infra11:03
*** sshnaidm|lnch is now known as sshnaidm11:04
*** yamamoto has quit IRC11:05
*** yamamoto has joined #openstack-infra11:06
*** Adri2000 has quit IRC11:06
*** zhangfei has quit IRC11:07
*** Adri2000 has joined #openstack-infra11:08
pandawhere can I find the specifications for centos-7 and legacy-centos-7 nodes  ?11:10
*** yamamoto has quit IRC11:10
*** rossella_s has quit IRC11:11
ianwpanda: what do you mean specifications?11:11
pandaI found this project-config/nodepool/nl01.openstack.org.yaml11:11
pandabut I see only centos-7 and not legacy11:11
pandaianw: for example the ram for the node11:12
ianwpanda: all our nodes are basically the same, 8gb ram, 8vcpu, 80gb disk, see https://docs.openstack.org/infra/system-config/contribute-cloud.html11:12
pandaianw: I'm migrating to the new node  definition and one of the tasks in my run fails to allocate memory11:12
*** heyongli has quit IRC11:13
*** heyongli has joined #openstack-infra11:13
ianwthe centos-7 v centos-7-legacy is just the names from "legacy", i.e. pre-zuulv3 jobs.  the actual nodes are the same11:13
pandaianw: ok, then the problem is elsewhere, thanks.11:17
ianwpanda: for reference the nodesets are defined in http://git.openstack.org/cgit/openstack-infra/openstack-zuul-jobs/tree/zuul.d/nodesets.yaml11:17
*** rcernin has quit IRC11:19
pandaianw: ah, I see, legacy-centos-7 is a nodeset that uses the centos-7 label anyway, so cento07 is the only defined node11:19
pandaianw: thanks.11:19
*** udesale__ has quit IRC11:20
*** udesale__ has joined #openstack-infra11:21
*** sree_ has joined #openstack-infra11:21
ianwyes it's from when all the jobs were auto-converted11:21
*** sree_ is now known as Guest4061611:21
*** stakeda has quit IRC11:22
*** heyongli has quit IRC11:23
*** heyongli has joined #openstack-infra11:24
*** armaan_ has joined #openstack-infra11:24
*** Guest40616 has quit IRC11:25
*** udesale__ has quit IRC11:27
*** armaan has quit IRC11:27
*** markvoelker has quit IRC11:30
*** heyongli has quit IRC11:34
*** heyongli has joined #openstack-infra11:34
*** ldnunes has joined #openstack-infra11:38
*** rcernin has joined #openstack-infra11:39
*** lpetrut has joined #openstack-infra11:40
*** heyongli has quit IRC11:44
*** rcernin has quit IRC11:44
*** heyongli has joined #openstack-infra11:44
*** lpetrut has quit IRC11:48
*** rh-jelabarre has joined #openstack-infra11:51
*** lpetrut has joined #openstack-infra11:52
*** dhill_ has joined #openstack-infra11:54
*** heyongli has quit IRC11:54
*** heyongli has joined #openstack-infra11:54
*** rosmaita has joined #openstack-infra11:55
*** sree_ has joined #openstack-infra11:56
*** sree_ is now known as Guest3078811:56
*** e0ne has joined #openstack-infra11:58
*** andreas_s_ has quit IRC12:00
*** andreas_s has joined #openstack-infra12:02
*** yamamoto has joined #openstack-infra12:04
*** heyongli has quit IRC12:04
*** heyongli has joined #openstack-infra12:05
*** trown|outtypewww is now known as trown12:05
*** amoralej is now known as amoralej|lunch12:10
*** andreas_s has quit IRC12:12
*** apetrich has joined #openstack-infra12:12
*** andreas_s has joined #openstack-infra12:13
*** rlandy has joined #openstack-infra12:14
*** heyongli has quit IRC12:15
*** heyongli has joined #openstack-infra12:15
openstackgerritMerged openstack/diskimage-builder master: Convert labels to upper case  https://review.openstack.org/57609812:20
*** Guest30788 has quit IRC12:23
*** camunoz has joined #openstack-infra12:23
*** heyongli has quit IRC12:25
*** heyongli has joined #openstack-infra12:25
*** andreas_s has quit IRC12:26
*** markvoelker has joined #openstack-infra12:26
openstackgerritAndrey Kurilin proposed openstack-infra/project-config master: Remove legacy rally jobs  https://review.openstack.org/57713912:27
*** lpetrut has quit IRC12:27
openstackgerritAndrey Kurilin proposed openstack-infra/openstack-zuul-jobs master: Remove playbooks for redundant rally legacy jobs  https://review.openstack.org/57714112:30
openstackgerritAndrey Kurilin proposed openstack-infra/project-config master: Remove legacy rally jobs  https://review.openstack.org/57713912:30
*** katkapilatova has joined #openstack-infra12:30
*** bobh has joined #openstack-infra12:32
*** kgiusti has joined #openstack-infra12:35
*** heyongli has quit IRC12:35
*** andreas_s has joined #openstack-infra12:35
*** heyongli has joined #openstack-infra12:35
*** cshastri has quit IRC12:41
*** links has quit IRC12:43
*** heyongli has quit IRC12:45
*** heyongli has joined #openstack-infra12:46
*** lpetrut has joined #openstack-infra12:47
fungiianw: debian doesn't (for the most part) use https for package downloads because it already relies on signed checksum indices for the packages it downloads and verifies those (there is somewhat recent https support added to apt and a handful of https mirrors out there now, but they're new and not the norm)12:49
*** yamamoto has quit IRC12:51
*** alexchadin has quit IRC12:51
*** bobh has quit IRC12:55
*** heyongli has quit IRC12:56
*** heyongli has joined #openstack-infra12:56
*** andreas_s has quit IRC12:57
*** andreas_s has joined #openstack-infra12:57
*** edmondsw has joined #openstack-infra12:58
*** markvoelker has quit IRC13:00
*** felipemonteiro has joined #openstack-infra13:03
*** alexchadin has joined #openstack-infra13:04
*** armaan_ has quit IRC13:06
*** heyongli has quit IRC13:06
*** heyongli has joined #openstack-infra13:06
*** armaan has joined #openstack-infra13:08
*** myoung|off is now known as myoung13:09
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: gerrit: remove suspicious change number str cast  https://review.openstack.org/57715413:11
*** heyongli has quit IRC13:16
*** heyongli has joined #openstack-infra13:16
*** signed8bit has joined #openstack-infra13:21
*** signed8bit has quit IRC13:22
*** signed8bit has joined #openstack-infra13:23
*** felipemonteiro has quit IRC13:24
*** yamamoto has joined #openstack-infra13:25
*** andreas_s has quit IRC13:26
*** heyongli has quit IRC13:26
*** andreas_s has joined #openstack-infra13:27
*** heyongli has joined #openstack-infra13:27
*** markvoelker has joined #openstack-infra13:30
*** andreas_s has quit IRC13:32
*** andreas_s has joined #openstack-infra13:33
*** yamamoto has quit IRC13:36
*** jento has quit IRC13:37
*** heyongli has quit IRC13:37
*** heyongli has joined #openstack-infra13:37
*** esarault has joined #openstack-infra13:37
clarkbyou have to install an additional paclage to add apt https support too so has a bootstrapping problem13:38
*** andreas_s has quit IRC13:38
*** andreas_s has joined #openstack-infra13:42
*** andreas_s has quit IRC13:42
*** andreas_s has joined #openstack-infra13:42
*** derekh_ is now known as derekh13:43
clarkbflaper87: we put unbound on all test nodes because some clouds do not have reliable dns by default13:43
clarkbI would be careful if bypassing this13:43
*** amoralej|lunch is now known as amoralej13:44
*** spsurya has joined #openstack-infra13:44
*** heyongli has quit IRC13:47
*** heyongli has joined #openstack-infra13:47
*** yamamoto has joined #openstack-infra13:48
*** jistr is now known as jistr|mtg13:49
*** zeus has joined #openstack-infra13:50
*** zeus is now known as Guest2199013:50
*** andreas_s has quit IRC13:51
*** niedbalski has quit IRC13:51
*** Guest21990 is now known as zeus13:52
*** zeus has joined #openstack-infra13:52
*** ccamacho1 has joined #openstack-infra13:54
*** ccamacho has quit IRC13:54
ianwfungi: yeah, i did think security.debian.org might .. but i also get how things aren't always as easy as they might seem :)13:56
*** janki has quit IRC13:56
ianwi'll try to look at reprepro for itif nobody else does first13:56
*** heyongli has quit IRC13:57
*** heyongli has joined #openstack-infra13:58
*** zhipeng has joined #openstack-infra13:58
ianwwell .au neither won nor lost, so bed for me13:59
fungiwell, particularly doing https is a challenging certificate distribution and maintenance problem when you want to have a volunteer-run pool of disparate mirrors hiding behind consistent round-robin cnames13:59
*** armaan has quit IRC14:00
*** armaan has joined #openstack-infra14:00
*** dougsz has left #openstack-infra14:01
fungiwith signed packages you can keep the encryption key in a safe location and don't need to trust your mirror network. with https you need to hand out the key (or separate keys and operate your own ca) to every mirror operator and trust their ability to keep them safe14:01
fungiand certainly before the advent of crypto-accelerating hardware and broad support for sni, the burden to the mirror operators was pretty significant too (additional cpu load, dedicated ip address...)14:03
*** heyongli has quit IRC14:07
*** heyongli has joined #openstack-infra14:08
*** r-daneel has joined #openstack-infra14:11
*** ykarel is now known as ykarel|away14:12
openstackgerrityolanda.robla proposed openstack/diskimage-builder master: WIP: Add functionality to copy modprobe files  https://review.openstack.org/57717014:12
*** links has joined #openstack-infra14:17
*** heyongli has quit IRC14:18
*** heyongli has joined #openstack-infra14:18
*** janki has joined #openstack-infra14:19
*** links has quit IRC14:23
openstackgerritTobias Henkel proposed openstack-infra/zuul master: WIP First try to solve github multi-enqueue error  https://review.openstack.org/57717314:23
openstackgerritTobias Henkel proposed openstack-infra/zuul master: WIP First try to solve github multi-enqueue error  https://review.openstack.org/57717314:24
openstackgerritsebastian marcet proposed openstack-infra/openstackid-resources master: Fixed null pointer exception on Insert track  https://review.openstack.org/57717414:25
openstackgerritTobias Henkel proposed openstack-infra/zuul master: WIP: Second try to fix github multi-enqueue issue  https://review.openstack.org/57717514:25
openstackgerritMerged openstack-infra/openstackid-resources master: Fixed null pointer exception on Insert track  https://review.openstack.org/57717414:26
*** rpioso|afk is now known as rpioso14:26
*** signed8bit has quit IRC14:27
*** heyongli has quit IRC14:28
*** heyongli has joined #openstack-infra14:28
*** armaan has quit IRC14:37
*** armaan has joined #openstack-infra14:37
*** heyongli has quit IRC14:38
*** heyongli has joined #openstack-infra14:38
*** sree has joined #openstack-infra14:40
*** r-daneel_ has joined #openstack-infra14:43
*** sree has quit IRC14:44
*** r-daneel has quit IRC14:44
*** r-daneel_ is now known as r-daneel14:44
*** alexchadin has quit IRC14:45
*** heyongli has quit IRC14:48
*** heyongli has joined #openstack-infra14:49
*** peereb has quit IRC14:51
openstackgerrityolanda.robla proposed openstack/diskimage-builder master: WIP: Add new modprobe element  https://review.openstack.org/57717014:52
*** zhongjun__ has joined #openstack-infra14:55
*** pcaruana has quit IRC14:56
*** jento has joined #openstack-infra14:56
*** niedbalski has joined #openstack-infra14:57
* mordred is AFK for this match - biab14:58
*** Swami has joined #openstack-infra14:59
*** heyongli has quit IRC14:59
*** heyongli has joined #openstack-infra14:59
clarkbmordred you rooting for france or peru?14:59
jmorgan1eitherway, it should be an exciting match15:01
mordredclarkb: if I don't support peru, the peruvian who is in my house screaming at the TV might kill me15:01
fungisolid reasoning15:01
bodenheya fungi, as per our chat yesterday on queens branch for vmware-nsx… do you have any idea how I can address the requirements-check job failing in ocata as per results here https://review.openstack.org/#/c/576925/15:04
*** jesslampe has joined #openstack-infra15:04
bodenI doubt I’m suppose to add those projs to global reqs, but I’ve tried anyway to see what requirements team thinks as its unclear how to proceed15:05
*** apetrich has quit IRC15:05
fungiboden: i want to say this is well-trodden ground recently (maybe from one of the horizon plugins?) but i don't recall who it was or what the answer ended up being. somebody else in here might15:06
bodenfungi, OK.. I’m also bugging the requiremetns team to see if they have ideas15:06
*** zhipeng has quit IRC15:07
*** ramishra has quit IRC15:09
*** heyongli has quit IRC15:09
*** heyongli has joined #openstack-infra15:09
*** heyongli has quit IRC15:19
*** heyongli has joined #openstack-infra15:19
*** zhangfei has joined #openstack-infra15:20
*** sthussey has joined #openstack-infra15:21
*** zhangfei has quit IRC15:24
*** dhajare has quit IRC15:25
*** felipemonteiro has joined #openstack-infra15:25
*** dpawlik has quit IRC15:26
*** Bhujay has quit IRC15:29
*** heyongli has quit IRC15:29
*** heyongli has joined #openstack-infra15:30
*** Goneri has joined #openstack-infra15:30
*** kjackal has quit IRC15:30
felipemonteiroit appears as though the openstack-infra/zuul job for docs-on-readthedocs is currently broken because it's POSTing to RTD's deprecated v1 API, which responds with a 403 Forbidden and a deprecation error15:32
felipemonteiro#link http://logs.openstack.org/c1/c17f14f0583438db34ebbe5a3f1d8864cbff04dd/post/trigger-readthedocs/971cdfe/ara-report/15:32
clarkbfelipemonteiro: yes they require authentication now aiui15:33
felipemonteiroclarkb: is there a fix in flight to openstack-infra out of curiosity?15:34
felipemonteirowe figured out a workaround locally, but pushing a more general solution would be better15:35
clarkbnot that I know of. I think this is a case of not having time to address that but zuul provides all the tools for you to solve it directly (update common job in zuul-jobs to accept a secret then provide that in your job config)15:35
clarkbalso they pull updates daily or something anyways so a low priority concern15:35
*** jcoufal has quit IRC15:36
*** jistr|mtg is now known as jistr15:36
felipemonteirothanks, zuul certainly does provide the tools. will take a look at job later and see if there's a way to make the update we need locally work generically for the template15:37
clarkbfelipemonteiro: if you have questions about using zuul secrets or other zuul job and config related stuff feel free to ask15:38
clarkb(I think problems like this are a good sanity check for that tooling, we should be able to solve this without infras direct involvement, lets double check that assertion if you are willing)15:38
felipemonteironope, i used tools/encrypt_secret.py in zuul yesterday without a hitch :)15:39
*** pbourke has quit IRC15:39
*** heyongli has quit IRC15:40
*** heyongli has joined #openstack-infra15:40
*** pbourke has joined #openstack-infra15:41
*** jistr is now known as jistr|off15:47
*** ykarel|away has quit IRC15:47
*** ramishra has joined #openstack-infra15:47
*** dklyle has quit IRC15:48
*** ianychoi has joined #openstack-infra15:48
*** heyongli has quit IRC15:50
*** heyongli has joined #openstack-infra15:51
*** bnemec has quit IRC15:53
*** Guest88320 is now known as dansmith15:59
*** bnemec has joined #openstack-infra15:59
*** heyongli has quit IRC16:00
*** heyongli has joined #openstack-infra16:00
*** jpich has quit IRC16:03
*** ramishra has quit IRC16:05
*** r-daneel_ has joined #openstack-infra16:09
*** gfidente has quit IRC16:09
*** tesseract has quit IRC16:09
*** heyongli has quit IRC16:10
*** heyongli has joined #openstack-infra16:11
*** r-daneel has quit IRC16:11
*** r-daneel_ is now known as r-daneel16:11
*** gyee has joined #openstack-infra16:12
*** panda is now known as panda|off16:13
*** iranzo has quit IRC16:15
*** dklyle has joined #openstack-infra16:16
*** heyongli has quit IRC16:21
*** heyongli has joined #openstack-infra16:21
*** d0ugal has quit IRC16:23
*** trown is now known as trown|lunch16:27
*** dougwig_ is now known as dougwig16:27
*** spsurya has quit IRC16:28
*** caphrim007_ is now known as caphrim00716:28
*** amoralej is now known as amoralej|off16:29
*** e0ne has quit IRC16:30
*** yamahata has quit IRC16:30
*** heyongli has quit IRC16:31
*** heyongli has joined #openstack-infra16:31
*** zoli is now known as zoli|gone16:32
*** iyamahat has quit IRC16:36
*** arxcruz is now known as arxcruz|off16:36
*** ccamacho1 has quit IRC16:36
*** raopajay has joined #openstack-infra16:36
*** katkapilatova has quit IRC16:38
*** yamamoto has quit IRC16:38
*** armaan has quit IRC16:38
*** armaan has joined #openstack-infra16:39
*** heyongli has quit IRC16:41
*** heyongli has joined #openstack-infra16:41
*** shardy has quit IRC16:42
*** derekh has quit IRC16:45
*** yamamoto has joined #openstack-infra16:46
*** florianf is now known as florianf|afk16:51
*** yamamoto has quit IRC16:51
*** heyongli has quit IRC16:51
*** diablo_rojo has joined #openstack-infra16:52
*** heyongli has joined #openstack-infra16:52
*** dtantsur is now known as dtantsur|afk16:52
*** armaan has quit IRC16:54
*** armaan has joined #openstack-infra16:54
*** yamamoto has joined #openstack-infra16:55
*** iyamahat has joined #openstack-infra16:57
*** armaan has quit IRC16:57
*** psachin has quit IRC16:58
clarkbfungi: I'm getting organized around cert refreses https://etherpad.openstack.org/p/201806-cert-refresh question on how certs are setup for static.o.o is that one cert iwth multiple cnames or or different certs for each name?16:58
clarkbI also expected review.o.o to be in that list but we aren't getting email about it so I'm gonna manually audit the entire list of our cert checks I think16:58
*** esarault_ has joined #openstack-infra16:59
*** yamahata has joined #openstack-infra16:59
*** yamamoto has quit IRC17:00
*** esarault has quit IRC17:01
*** heyongli has quit IRC17:02
*** heyongli has joined #openstack-infra17:02
mordredwell - that didn't quite work out the way we hoped17:04
*** iyamahat_ has joined #openstack-infra17:04
fungiclarkb: i think mordred (and maybe corvus?) were suggesting that we should consider creating an infra account on rtd and then tell projects who want to use the canned job to add permissions for our account (similar to how we handle pypi uploads)17:07
fungilighter-weight for projects who want to use it at least17:07
fungithough you're right the tools for projects to solve this using their own credentials are already there17:08
*** iyamahat has quit IRC17:08
*** pjrusak has joined #openstack-infra17:08
*** zaro__ is now known as zaro17:08
*** heyongli has quit IRC17:12
*** heyongli has joined #openstack-infra17:12
*** jpena is now known as jpena|off17:12
*** Swami has quit IRC17:15
*** sileht has left #openstack-infra17:19
*** heyongli has quit IRC17:22
*** heyongli has joined #openstack-infra17:22
*** jesslampe has quit IRC17:24
mordredfungi: yah - kind of similar to how pypi publishing works17:24
*** camunoz has quit IRC17:24
mordredthere's also a 'missing' feature - which is that you can't currently use a secret defined in your repo with a job defined centrally. so we cna have a rle which does the upload - but people would basically need to make their own rtd upload job, which is a little lame17:25
*** caphrim007 has quit IRC17:25
clarkbmordred: ah I think that was the piece of info I was missing because they already have to have their own credentials anyway17:26
mordredthere are gotchas with implementing such a thing though - so we need to think about it / talk about it a bit more17:26
*** caphrim007 has joined #openstack-infra17:26
*** SumitNaiksatam has joined #openstack-infra17:26
clarkbbut if we can't use those with a central job that becomes a little painful17:26
*** camunoz has joined #openstack-infra17:26
mordredclarkb: exactly17:27
*** e0ne has joined #openstack-infra17:30
*** trown|lunch is now known as trown17:31
*** heyongli has quit IRC17:32
*** amoralej|off is now known as amoralej17:33
*** heyongli has joined #openstack-infra17:33
clarkbfungi: ok I think I have that etherpad updated with relevant info17:34
clarkbfungi: can you double check it and I think static.o.o is the only one with multiple alt names?17:35
fungii pulled it up, will double-check in a moment17:35
fungiand yeah, static.o.o is the only one with san17:35
fungithat much i know for certain17:35
fungiall the rest i was buying single-domain certs17:35
fungithe corresponding keys and csrs should all be in the certs dir17:36
fungias should the custom openssl cnf file for the static san list17:36
fungiworth editing that one to remove any we no longer use, since the cert cost is based on number of san entries17:37
*** r-daneel_ has joined #openstack-infra17:38
clarkbfungi: do you expect us to reuse the csrs and keys for the other hosts? or generate new ones?17:38
fungii usually just reuse them because it's less work17:39
clarkbI'd only have to update the cert in hiera if doing that right?17:39
*** r-daneel has quit IRC17:40
*** r-daneel_ is now known as r-daneel17:40
clarkbI guess the chain may have changed for the new signing too17:40
fungicertainly reusing the keys not only means you don't need to generate new ones but also you don't need to update hiera with them (just the certs and maybe the chain certs)17:40
clarkbon the flip side generating new keys and csrs means something new to compromise17:40
fungisure, but if they're already compromised i doubt they couldn't get the new replacements just as easily?17:41
fungiand if you're reusing the keys then there's no point in making new csrs unless there's something in the data for the request you want to change17:41
clarkbya17:41
fungiso, like, for static you need a new csr if you remove some sans17:41
clarkblooking at statics altnames the only one we may not be using at this point is docs-draft, did we end up combining the docs-draft volume into logs volume and if we did did we stop serving docs-draft urls via zuul?17:42
*** mrtenio has joined #openstack-infra17:42
*** mrtenio_ has joined #openstack-infra17:42
fungiwe did17:42
fungialso are there still trystack domains in there?17:42
clarkbfungi: we are serving a redirect to https://www.openstack.org/software/start from that name17:42
*** heyongli has quit IRC17:43
openstackgerritLinda Marquez proposed openstack-infra/project-config master: add access bot to #openstack-mentoring  https://review.openstack.org/57724117:43
fungiyou can double-check whether any of those dns names are still synonymous with static.o.o17:43
*** heyongli has joined #openstack-infra17:43
clarkboh specifically if the server is hosting that name17:43
fungiyup17:44
clarkbdocs-draft is, and seems to redirect to docs.o.o17:44
clarkbbut trystack is not17:44
fungicheck the trystack ones and you'll see what i mean17:44
clarkbya trystack isn't static17:45
fungifor docs-draft, i'm sure that's been redirecting long enough it can go away. none of the content it pointed to is still on docs.o.o is it?17:45
fungi(and why is it not redirecting to logs.o.o?)17:45
clarkbya we only kept like a month bcklog there anyway17:46
clarkbdocs-draft redirecting to docs.o.o over http and governance.o.o over https17:46
*** mrtenio_ has left #openstack-infra17:46
*** mrtenio has left #openstack-infra17:46
clarkbI think we've just got broken apache on static.o.o for docs-draft17:47
clarkbI think we can safely remove those two names (docs-draft and trystack)17:47
clarkbfungi: the reason is we seem to have a cinder http redirect to docs.o.o but then first sorted https vhost is for governacne so we redirect docs-draft there17:49
AJaegerboden: you can add them to the blacklist for requirements repo17:49
*** r-daneel_ has joined #openstack-infra17:50
fungiclarkb: makes sense17:50
openstackgerritLinda Marquez proposed openstack-infra/system-config master: adding #openstack-mentoring to meetbot channel  https://review.openstack.org/57724317:51
*** r-daneel has quit IRC17:52
*** r-daneel_ is now known as r-daneel17:52
*** heyongli has quit IRC17:53
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: [WIP] web: add tenant-scoped autohold, enqueue  https://review.openstack.org/57690717:53
*** heyongli has joined #openstack-infra17:53
openstackgerritMerged openstack-infra/project-config master: Remove direct tagging from swift-bench ACL  https://review.openstack.org/57507117:55
openstackgerritMerged openstack-infra/project-config master: Bump packethost max servers to 100  https://review.openstack.org/57701617:55
openstackgerritMerged openstack-infra/project-config master: Remove legacy rally jobs  https://review.openstack.org/57713917:55
*** yamamoto has joined #openstack-infra17:56
clarkbfungi: should I expect that setting OPENSSL_CONF to point at the static cnf file and running gencert will work?17:58
clarkbor will the cli options conflict with the config file options?17:59
bodenAJaeger ack, will try17:59
fungiclarkb: i think i used the envvar. easy enough to test and then analyze the resulting csr18:01
openstackgerritDavid Shrewsbury proposed openstack-infra/nodepool master: Remove a done TODO in static driver  https://review.openstack.org/57724418:01
clarkbfungi: also is openstackid-resources.openstack.org a new one? I don't see it in the certs dir18:02
fungiclarkb: i believe we can consider dropping it from our tracker18:03
fungiwe don't run that server (we were going to at some point but it never materialized)18:03
clarkbgot it18:03
clarkbI will remove it from my list18:03
*** heyongli has quit IRC18:03
fungii had bought a cert for it a couple cycles back but that went unused18:03
*** heyongli has joined #openstack-infra18:03
*** yamamoto has quit IRC18:04
*** germs has joined #openstack-infra18:05
*** germs has quit IRC18:05
*** germs has joined #openstack-infra18:05
clarkbfungi: I guess we want the signing to happen all within a short window of time so that the expiration dates match up but otherwise we can do the rest of the work as able (as long as it is before june 20)18:09
clarkber 3018:09
*** germs has quit IRC18:10
*** heyongli has quit IRC18:13
*** heyongli has joined #openstack-infra18:14
*** lpetrut has quit IRC18:15
*** apetrich has joined #openstack-infra18:16
fungiyeah. i mean, having the signatures spread out over the course of a few days isn't really a problem, i just tended to do them all at once because it was less work than multiple batches18:18
clarkbfungi: I've generated a new csr for static.o.o in ~root/certs/2018-06-21, it looks ok to me based on openssl req -text output but maybe you want to double check18:18
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: [WIP] web: add tenant-scoped autohold, enqueue  https://review.openstack.org/57690718:18
clarkbfungi: ya for today I think I will get as far as getting all my csrs lined up and paying for the certs then do all the signing tomorrow18:19
*** efried is now known as efried_pto18:20
*** heyongli has quit IRC18:24
*** heyongli has joined #openstack-infra18:24
*** janki has quit IRC18:25
clarkbfungi: ianw looks like running with max-servers at 100 should be fine based on recent email from john18:26
fungiyep, and AJaeger approved the change anyway18:29
clarkbfungi: one difference with the new static csr that I notice is that static.o.o isn't listed as a dns name18:29
fungimerged at 17:5518:29
clarkbI dno't think that matters if the CN is static.o.o but I can add it as an alt name too18:30
clarkbor maybe that is difference between examining the actual cert we have now and the csr18:30
*** Goneri has quit IRC18:30
fungii think it ended up in the san for the cert even though i didn't put it in the csr18:31
*** SumitNaiksatam has quit IRC18:31
*** heyongli has quit IRC18:34
*** heyongli has joined #openstack-infra18:34
*** derekh has joined #openstack-infra18:36
*** felipemonteiro_ has joined #openstack-infra18:37
*** felipemonteiro has quit IRC18:37
openstackgerritSorin Sbarnea proposed openstack-infra/project-config master: enable python-jenkins linters gate  https://review.openstack.org/57725018:39
clarkbfungi: I'm going to ask john what is most appropriate company or companies to list on the infrastructure donors page now that we are at 100 max servers there18:41
fungithanks clarkb!18:41
*** anteaya has joined #openstack-infra18:42
fungiclarkb: on the static cert, if memory serves when i bought e.g. a "15-domain cert" that covered 15 san entries but they duplicated the cn into the san list so it counted as one of the 1518:43
clarkbfungi: got it, in this case 15 should still be plenty18:43
fungiwell, i pulled 15 out of thin air just now18:43
clarkbgotcha18:43
fungii sized it to whatever the number of domains we needed was because it was like an additional $10/domain or something after the initial 3 you get as part of the base cost18:44
*** heyongli has quit IRC18:44
fungii don't remember the exact price (and it may not even be the same now as it was a year ago, i have no idea)18:44
*** heyongli has joined #openstack-infra18:44
*** lpetrut has joined #openstack-infra18:44
clarkbfungi: also did you find a way to buy all the certs under one invoice/reciept/transaction? In the past I gave up and just did them one at a time18:44
clarkbbut that makes expense reports more painful18:45
clarkbI probably just failed to understand their shopping cart18:45
fungii never had a problem with that, you just have to keep going back to the top-level menu and selecting them one at a time and it adds them to your cart18:45
clarkbah18:45
fungiit _is_ a pain, and not entirely intuitive18:46
clarkbIf I have math'd right we have 7 domains plus the CN for 8 total. First three are free so I want 5 additional18:47
clarkbits actually cheaper to buy 8 single domain certs :/18:47
clarkbdifference is the price of a dinner so meh18:48
fungi"free"18:49
*** dpawlik has joined #openstack-infra18:49
fungiyeah, their pricing model leaves something to be desired18:50
*** dpawlik has quit IRC18:50
*** dpawlik has joined #openstack-infra18:50
fungiwe should just ask the foundation's cdn provider for a copy of the *.openstack.org cert they've been using :/18:50
clarkbI'm going to take a break now and find lunch then break out the credit card after18:51
clarkbfungi: I expect they aren't too keen to share18:51
clarkbthough I Guess we would have had to issue it18:51
ssbarneasorry to bother with a cosmetic issue, i am trying to switch from openstack-tox-pep8 to openstack-tox-linters for python-jenkins and I am not sure what is needed.18:52
clarkbssbarnea: I think you just need a linters target in tox.ini then change the job out in the zuul config18:52
clarkbssbarnea: you can probably even copy the pep8 target to start18:53
ssbarneai imagined that and a common topic in the change to make the switch be applied at the same time, right?18:53
ssbarneaor do I need a transition period?18:53
ssbarnealike adding linters target without removing pep8 one?18:53
clarkbif the config is all in one place (like in your poject repo) just flip the values around18:54
clarkbzuul will use the new config since that job doesn't need trust18:54
*** heyongli has quit IRC18:54
*** heyongli has joined #openstack-infra18:55
ssbarneasee https://review.openstack.org/#/c/577250/ -- looks valid?18:55
ssbarneai was not able to find any place where pep8 was defined, so I suspect is part of one of the templates.18:55
clarkbssbarnea: I'm guessing openstack-python-jobs. The change you have will run both pep8 and linters jobs18:56
clarkbssbarnea: you'll need to deconstruct the template that includes pep8 and include the other jobs directly (or use a new template) to avoid that18:56
ssbarneai am trying to findout where are those templates defined, apparently not in project-config18:57
ssbarneaI seen that there are lots of usages of openstack-tox-linters so I am not the first one migrating, i guess.18:58
clarkbssbarnea: openstack-infra/openstack-zuul-jobs/zuul.d/project-templates.yaml looks like (and it is part of openstack-python-jobs)18:59
fungiyeah, the "pep8" job name is historical baggage and has been for a very long time18:59
*** amoralej is now known as amoralej|off18:59
openstackgerritMerged openstack-infra/nodepool master: Pass zk connection to ProviderManager.start()  https://review.openstack.org/57489519:00
fungibut as it's entwined with what people are naming their tox testenvs, it's hard to swap with a mass change19:00
openstackgerritMerged openstack-infra/nodepool master: Make a proper driver notification API  https://review.openstack.org/57489619:01
*** yamamoto has joined #openstack-infra19:01
*** lpetrut has quit IRC19:03
*** lpetrut has joined #openstack-infra19:04
*** heyongli has quit IRC19:05
*** heyongli has joined #openstack-infra19:05
*** felipemonteiro__ has joined #openstack-infra19:05
*** yamamoto has quit IRC19:06
*** felipemonteiro_ has quit IRC19:09
ssbarneafungi: does this also means that I could just keep the config inside .zuul.yaml and remove its config from project-config.git repo?19:10
openstackgerritJeremy Stanley proposed openstack-infra/storyboard master: Support quoted project names in GET requests by name  https://review.openstack.org/57708119:10
*** weshay|ruck is now known as weshay_PTO19:12
fungissbarnea: yes, that would definitely be an option. you still need the system-required addition in project-config for now i think? but everything else could move to the python-jenkins repo19:12
*** heyongli has quit IRC19:15
*** heyongli has joined #openstack-infra19:15
fungiclarkb: the etherpad lgtm19:16
*** kjackal has joined #openstack-infra19:16
openstackgerritMerged openstack-infra/nodepool master: Pre-register static nodes  https://review.openstack.org/57489719:16
*** e0ne has quit IRC19:17
openstackgerritMerged openstack-infra/nodepool master: Clarify static node name uniqueness in docs  https://review.openstack.org/57515919:17
*** derekh has quit IRC19:19
*** SpamapS has joined #openstack-infra19:23
*** heyongli has quit IRC19:25
*** heyongli has joined #openstack-infra19:26
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix race in tox-remote test_command  https://review.openstack.org/57727919:30
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix race in tox-remote test_command  https://review.openstack.org/57727919:32
*** diablo_rojo has quit IRC19:34
*** heyongli has quit IRC19:35
*** heyongli has joined #openstack-infra19:36
openstackgerritMerged openstack-infra/nodepool master: Remove a done TODO in static driver  https://review.openstack.org/57724419:39
*** esarault has joined #openstack-infra19:42
clarkbfungi: and to double check you would just reuse the existing csr and key for hosts that have them?19:45
clarkblooks like new CSRs were generated a year ago based on file timestamps19:46
*** heyongli has quit IRC19:46
*** esarault_ has quit IRC19:46
*** heyongli has joined #openstack-infra19:46
openstackgerritSorin Sbarnea proposed openstack-infra/project-config master: migrate python-jenkins config to repo  https://review.openstack.org/57725019:50
fungiclarkb: yeah, the generation date on them doesn't have any bearing on the validity dates19:53
fungiyou should be able to just reuse them (except for static.o.o which has san changes from last round)19:54
clarkbok proceeding now with purchasing 16 single domain certs and one 8 domain cert19:55
clarkbthen tomorrow morning I'll work through the signing and updating server configs19:55
*** heyongli has quit IRC19:56
*** heyongli has joined #openstack-infra19:56
*** r-daneel_ has joined #openstack-infra19:58
*** r-daneel has quit IRC19:59
*** r-daneel_ is now known as r-daneel19:59
clarkbI feel like I'm deep enough into today that I'm ready to do something else like revieing topic:puppet-420:01
*** yamamoto has joined #openstack-infra20:02
anteayaclarkb, have you had any word on what the next step is for the naming process?20:06
openstackgerritMerged openstack-infra/zuul master: Don't use GRANT to create new MySQL users  https://review.openstack.org/57364120:06
*** heyongli has quit IRC20:06
*** heyongli has joined #openstack-infra20:06
clarkbanteaya: aiui the next step is whittling the suggestions list down, I'll ping jbryce to make sure I understand that properly and see how he would approach that20:07
*** yamamoto has quit IRC20:07
*** yolanda_ has joined #openstack-infra20:07
openstackgerritMerged openstack-infra/zuul master: Make streaming test run longer than connection timeout  https://review.openstack.org/57252220:07
clarkbcmurphy: ianw has a comment on https://review.openstack.org/#/c/570824/ that is probably worth considering20:08
*** jesslampe has joined #openstack-infra20:10
cmurphyclarkb: ah yeah that's a good point20:10
*** yolanda has quit IRC20:11
*** dhill_ has quit IRC20:11
*** anteaya has quit IRC20:12
*** dhill_ has joined #openstack-infra20:15
*** kgiusti has left #openstack-infra20:16
*** heyongli has quit IRC20:16
*** heyongli has joined #openstack-infra20:17
openstackgerritMerged openstack-infra/zuul master: Fix race in tox-remote test_command  https://review.openstack.org/57727920:20
*** anteaya has joined #openstack-infra20:21
*** ldnunes has quit IRC20:23
anteayaclarkb, okay thanks20:24
clarkbcmurphy: https://review.openstack.org/#/c/576262/1 possible reason for that haproxy bind behavior there20:26
*** heyongli has quit IRC20:27
cmurphyclarkb: this was on ubuntu20:27
*** dpawlik has quit IRC20:27
*** heyongli has joined #openstack-infra20:27
clarkbok probably not then20:27
openstackgerritDoug Hellmann proposed openstack-infra/project-config master: use python3 to run launchpad commenting script  https://review.openstack.org/57729120:31
*** heyongli has quit IRC20:37
*** r-daneel_ has joined #openstack-infra20:37
*** heyongli has joined #openstack-infra20:37
*** r-daneel has quit IRC20:37
*** r-daneel_ is now known as r-daneel20:37
cmurphyclarkb: ianw hrm actually on 570824 template has a default value so ($template && $content) is always going to be true. could work around it by changing the default of template to undef and then if $content == undef and $template == undef set $_template = $httpd::params::template but that's a lot of ugh20:38
cmurphyi kind of prefer to keep it the way it is, content overrides template20:39
clarkbwfm, maybe a followup would be to have a comment explaining that content override template20:39
cmurphysure20:39
cmurphyclarkb: https://review.openstack.org/#/c/570824/1/manifests/vhost.pp@1420:42
*** jesslampe has quit IRC20:42
clarkbah its already there. I did just approve the change too20:43
clarkbianw left a +2 not a -1 so I htink its ok20:43
cmurphycool20:43
*** heyongli has quit IRC20:47
*** heyongli has joined #openstack-infra20:47
*** trown is now known as trown|outtypewww20:48
*** lpetrut has quit IRC20:49
*** aeng has joined #openstack-infra20:49
*** hemna_ has joined #openstack-infra20:50
*** esarault has quit IRC20:52
*** diablo_rojo has joined #openstack-infra20:56
*** heyongli has quit IRC20:57
*** heyongli has joined #openstack-infra20:58
openstackgerritMerged openstack-infra/puppet-httpd master: Add content parameter to httpd::vhost  https://review.openstack.org/57082420:59
*** iyamahat__ has joined #openstack-infra20:59
*** iyamahat_ has quit IRC21:02
*** yamamoto has joined #openstack-infra21:04
*** anteaya has quit IRC21:05
*** pjrusak has quit IRC21:06
*** heyongli has quit IRC21:08
*** heyongli has joined #openstack-infra21:08
*** yamamoto has quit IRC21:09
*** felipemonteiro__ is now known as felipemonteiro21:11
*** rosmaita has quit IRC21:11
*** heyongli has quit IRC21:18
*** heyongli has joined #openstack-infra21:18
openstackgerritMerged openstack-infra/storyboard master: Support quoted project names in GET requests by name  https://review.openstack.org/57708121:24
*** heyongli has quit IRC21:28
*** heyongli has joined #openstack-infra21:28
*** myoung is now known as myoung|off21:30
*** r-daneel has quit IRC21:32
ianwclarkb: yep.  ipv6 is interesting.  something i should learn how to set up; can't guarantee it would be transparent however :)21:38
*** heyongli has quit IRC21:38
*** heyongli has joined #openstack-infra21:39
ianwit sounds like we should keep admin role in openstackci, and then drop open-infra project21:39
fungii concur21:39
fungiand apparently they're not opposed to us keeping access to admin permissions (as long as we don't break it)21:40
clarkbianw: ++21:41
*** d0ugal has joined #openstack-infra21:42
ianwfungi: heh, don't break it?  have you seen my change history ... you came to the wrong place :)21:43
*** d0ugal_ has joined #openstack-infra21:44
fungimine too21:44
fungimore like "be willing to fix what you break" i guess ;)21:45
*** d0ugal has quit IRC21:45
mordredfungi, clarkb: I was reading scrollback and saw "you still need the system-required addition in project-config for now i think?"21:48
*** heyongli has quit IRC21:49
*** heyongli has joined #openstack-infra21:49
*** iyamahat__ has quit IRC21:49
clarkbmordred: yes, that way we can add and remove system side jobs as necessary21:49
mordredwe've landed (a while ago) the patch from tobiash adding support for wildcards - we could set a project: * template: system-required and remove the need that people do that - or project: openstack/*21:49
clarkboh that might be a more friendly way to do that21:50
mordredyeah - less boilerplate is more better21:50
*** lihi has quit IRC21:50
fungiyes, we'd discussed for a while the ability to do implicit job additions as well, is that the implementation or was there another?21:51
*** lihi has joined #openstack-infra21:51
fungiin particular, it means one less initial patch for new project creation as well as simplifying the renames process21:52
mordredyah21:53
* mordred is hacking together a patch21:53
*** nicolasbock has quit IRC21:54
*** eernst has joined #openstack-infra21:54
*** boden has quit IRC21:55
*** iyamahat__ has joined #openstack-infra21:55
*** iyamahat_ has joined #openstack-infra21:56
*** diablo_rojo has quit IRC21:57
*** camunoz has quit IRC21:58
*** iyamahat__ has quit IRC21:59
*** heyongli has quit IRC21:59
*** heyongli has joined #openstack-infra21:59
*** diablo_rojo has joined #openstack-infra22:04
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Use wildcard to apply system-required template  https://review.openstack.org/57730722:05
mordredfungi, clarkb: ^^ somethign like that22:06
*** yamamoto has joined #openstack-infra22:06
mordred+12,-1664 \o/22:06
mordredhrm. zuul did not like22:06
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Use wildcard to apply system-required template  https://review.openstack.org/57730722:09
*** heyongli has quit IRC22:09
*** heyongli has joined #openstack-infra22:09
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Use wildcard to apply system-required template  https://review.openstack.org/57730722:11
*** yamamoto has quit IRC22:11
*** hashar has quit IRC22:12
*** germs has joined #openstack-infra22:18
*** germs has quit IRC22:18
*** germs has joined #openstack-infra22:18
*** felipemonteiro has quit IRC22:18
*** heyongli has quit IRC22:19
*** heyongli has joined #openstack-infra22:20
openstackgerritMonty Taylor proposed openstack-infra/infra-manual master: WIP Remove system-required instructions for creators  https://review.openstack.org/57731022:23
mordredfungi, AJaeger: ^^ there's a proposed patch and a half-way done update to the docs22:23
*** elod_ has quit IRC22:24
*** edmondsw has quit IRC22:24
*** rcernin has joined #openstack-infra22:26
*** edmondsw has joined #openstack-infra22:26
*** heyongli has quit IRC22:30
*** heyongli has joined #openstack-infra22:30
*** germs has quit IRC22:31
*** edmondsw has quit IRC22:35
*** edmondsw has joined #openstack-infra22:35
*** heyongli has quit IRC22:40
*** edmondsw has quit IRC22:40
*** heyongli has joined #openstack-infra22:40
openstackgerritIan Wienand proposed openstack-infra/system-config master: Add debian-security mirror  https://review.openstack.org/57731622:45
ianwfungi: ^ appreciate your eyes on that ... speaking of breaking things :)22:47
logan-paste.o.o seems hung up22:47
*** eernst has quit IRC22:48
fungiianw: i have a feeling the earlier problem is similar to how we were comingling the backports suite and needed to mirror it separately22:49
*** eernst has joined #openstack-infra22:49
clarkblogan-: seems to be there now but ya was slow to respond. Unfortunately my strace didn't catch it early enough to see what it was blocking on22:50
*** heyongli has quit IRC22:50
logan-yup works now! thanks for taking a look.22:50
fungii continue to suspect something blocking or timing out db queries22:50
*** heyongli has joined #openstack-infra22:51
clarkbjournald isn't helpful either, but there is a gap in logged requests22:53
*** shaner has quit IRC22:54
*** dhill_ has quit IRC22:58
*** shaner has joined #openstack-infra22:59
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: gerrit: cast change and patchset numbers to str  https://review.openstack.org/57715423:00
*** heyongli has quit IRC23:00
*** heyongli has joined #openstack-infra23:01
openstackgerritClark Boylan proposed openstack-infra/project-config master: Add fedora vexxhost flavor for Kata  https://review.openstack.org/57731823:05
clarkbcorvus: ^ you may be interested in that, I tired to outline the current plan that Kata was happy with there23:06
clarkbbasically get rough parity of platform testing via third party check and point it at their runtime repo. That repo gets PR traffic and should generate the feedback we need to make a decision of whether or not to productionize this with a new tennat23:07
*** yamamoto has joined #openstack-infra23:07
*** rlandy has quit IRC23:09
*** heyongli has quit IRC23:11
*** heyongli has joined #openstack-infra23:11
*** yamamoto has quit IRC23:12
*** heyongli has quit IRC23:21
*** heyongli has joined #openstack-infra23:21
*** eernst has quit IRC23:23
*** heyongli has quit IRC23:31
*** heyongli has joined #openstack-infra23:31
*** kjackal has quit IRC23:33
*** tosky has quit IRC23:34
*** yamamoto has joined #openstack-infra23:36
*** heyongli has quit IRC23:41
*** heyongli has joined #openstack-infra23:42
*** eernst has joined #openstack-infra23:45
*** eernst has quit IRC23:50
ianwfungi: was there something or other about using the /v3 endpoint for packethost?23:51
ianwbecause as it is setup now we keep getting23:52
*** heyongli has quit IRC23:52
ianwIgnoring domain related config project_domain_name for openstackci-packethost because identity API version is 2.023:52
*** heyongli has joined #openstack-infra23:52
clarkbweird I think shade is supposed to use v3 if you provide the domain names23:52
ianw(well, with the cloud https://review.openstack.org/#/c/577324/)23:52
clarkbit should do api discovery on the root of the identity url then pick v3 if oyu have domain info or v2 if not23:52
clarkbmordred: ^23:52
mnaserthat's a weird one ^23:54
mnaserianw: do you have access to the infra for the cloud?23:56
* ianw starts putting print statements into shade...23:56
mnaseri wonder if for discovery... it goes from https://packet.platform9.net/keystone and checks https://packet.platform9.net/23:56
*** owalsh_ has joined #openstack-infra23:57
ianwmnaser: no, we are openstack admins but no access to the stuff behind it23:57
mnaseri imagine some print statements can confirm this on the client side too23:57
*** eernst has joined #openstack-infra23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!