Wednesday, 2018-11-28

*** xarses_ has quit IRC00:01
*** jamesmcarthur has joined #openstack-infra00:03
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Use the SQLAlchemy ORM  https://review.openstack.org/62042600:04
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Add artifact table  https://review.openstack.org/62042700:04
*** jaosorior has quit IRC00:05
*** jamesmcarthur has quit IRC00:07
*** diablo_rojo has joined #openstack-infra00:07
ianwclarkb: heh, yeah the comments already say "when:" as that's how i'd started writing it.  i changed when it seemed more logical with the env-var-not-defined case, but i agree now when: works better00:09
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Add artifact table  https://review.openstack.org/62042700:11
*** tosky has quit IRC00:13
*** armax has quit IRC00:13
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Capture ramdisk test run logs  https://review.openstack.org/61940000:25
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Fix unit tests for elements  https://review.openstack.org/61938700:25
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Revert "Make tripleo-buildimage-overcloud-full-centos-7 non-voting"  https://review.openstack.org/62020100:25
openstackgerritIan Wienand proposed openstack/diskimage-builder master: package-installs: provide for skip from env var  https://review.openstack.org/61911900:25
openstackgerritIan Wienand proposed openstack/diskimage-builder master: simple-init: allow for NetworkManager support  https://review.openstack.org/61912000:25
*** yamamoto has quit IRC00:34
clarkbianw: on https://review.openstack.org/#/c/619119/9..10/diskimage_builder/elements/package-installs/bin/package-installs-squash the two return Falses should still be return True's right?00:36
clarkbianw: docstring says return True if package should be installed and if var = val then we want to return True00:36
clarkbianw: I left some comments on the change directly. I think I got that right00:39
ianwhrm00:44
ianwdid i mess up the test case then?00:44
clarkbI think so00:44
ianwtest-driven development only works when the test cases are right :)00:45
openstackgerritIan Wienand proposed openstack/diskimage-builder master: package-installs: provide for skip from env var  https://review.openstack.org/61911900:49
openstackgerritIan Wienand proposed openstack/diskimage-builder master: simple-init: allow for NetworkManager support  https://review.openstack.org/61912000:49
ianwi think that's right, thanks!00:49
ianwok, the pypi volume is disappearing, slowly.  i didn't really consider it would take about as long to remove as to create00:53
*** sthussey has quit IRC00:55
ianwok, it's sped up considerably00:57
*** wolverin_ has quit IRC00:59
*** wolverineav has joined #openstack-infra01:00
*** wolverineav has quit IRC01:02
*** wolverineav has joined #openstack-infra01:02
ianw#status pypi volume removed from afs : afs01.dfw much happier -> /dev/mapper/main-vicepa  4.0T  2.1T  1.9T  53% /vicepa01:03
openstackstatusianw: unknown command01:03
ianw#status log pypi volume removed from afs : afs01.dfw much happier -> /dev/mapper/main-vicepa  4.0T  2.1T  1.9T  53% /vicepa01:04
openstackstatusianw: finished logging01:04
openstackgerritMerged openstack-infra/system-config master: Remove Fedora 27 mirroring  https://review.openstack.org/61841601:12
*** ramishra has quit IRC01:13
*** annp has joined #openstack-infra01:14
*** bawz has quit IRC01:15
*** bawz has joined #openstack-infra01:17
*** diablo_rojo has quit IRC01:24
*** bawz has quit IRC01:26
*** jamesmcarthur has joined #openstack-infra01:34
*** jamesmcarthur has quit IRC01:54
*** diablo_rojo has joined #openstack-infra02:03
openstackgerritIan Wienand proposed openstack-infra/zuul master: Rework zuul nodepool stats reporting  https://review.openstack.org/62028502:23
openstackgerritIan Wienand proposed openstack-infra/zuul master: Add a statsd check for clashing keys  https://review.openstack.org/62043602:23
*** dhineshb has quit IRC02:24
*** mrsoul has quit IRC02:25
*** xarses_ has joined #openstack-infra02:28
*** andreww has quit IRC02:31
*** ramishra has joined #openstack-infra02:35
*** hongbin has joined #openstack-infra02:36
*** bobh has joined #openstack-infra02:36
ianw#status log removed f27 directories after https://review.openstack.org/61841602:37
openstackstatusianw: finished logging02:37
*** psachin has joined #openstack-infra02:41
*** bobh has quit IRC02:41
*** bhavikdbavishi has joined #openstack-infra02:51
gmannclarkb: thanks, we are waiting on project side testing till Dec 10th.02:56
gmannfrickler: i commented on your keystone patch, it needs to be Depends-On on tempest patch instead of devstack. currently jobs are running on xenial02:57
*** rh-jelabarre has quit IRC03:03
*** bobh has joined #openstack-infra03:08
*** bobh has quit IRC03:12
*** wolverineav has quit IRC03:12
*** ramishra has quit IRC03:15
*** wolverineav has joined #openstack-infra03:17
*** jamesmcarthur has joined #openstack-infra03:17
*** wolverineav has quit IRC03:24
*** bhavikdbavishi has quit IRC03:30
*** ramishra has joined #openstack-infra03:35
*** jamesmcarthur has quit IRC03:36
*** diablo_rojo has quit IRC03:41
*** jamesmcarthur has joined #openstack-infra03:42
*** wolverineav has joined #openstack-infra03:53
*** ykarel|away has joined #openstack-infra03:55
*** jamesmcarthur has quit IRC03:55
*** wolverineav has quit IRC03:59
openstackgerritIan Wienand proposed openstack-infra/zuul master: Add a statsd check for clashing keys  https://review.openstack.org/62043604:08
*** hongbin_ has joined #openstack-infra04:23
*** hongbin has quit IRC04:24
*** hongbin has joined #openstack-infra04:37
*** hongbin_ has quit IRC04:38
*** hongbin has quit IRC04:40
*** janki has joined #openstack-infra04:48
openstackgerritIan Wienand proposed openstack-infra/zuul-jobs master: upload-logs-swift: Cleanup temporary directories  https://review.openstack.org/59234004:48
openstackgerritIan Wienand proposed openstack-infra/zuul-jobs master: upload-logs-swift: Make indexer more generic  https://review.openstack.org/59285204:48
openstackgerritIan Wienand proposed openstack-infra/zuul-jobs master: upload-logs-swift: Stub out dry run in the uploader  https://review.openstack.org/59292904:48
openstackgerritIan Wienand proposed openstack-infra/zuul-jobs master: upload-logs-swift: Create a download script  https://review.openstack.org/59234104:48
openstackgerritIan Wienand proposed openstack-infra/zuul-jobs master: upload-logs-swift: Add a unicode file  https://review.openstack.org/59285304:48
*** lpetrut has joined #openstack-infra04:51
*** udesale has joined #openstack-infra04:54
openstackgerritMerged openstack/diskimage-builder master: Capture ramdisk test run logs  https://review.openstack.org/61940004:57
*** yamamoto has joined #openstack-infra04:58
*** xarses_ has quit IRC04:59
*** pcaruana has joined #openstack-infra05:09
openstackgerritIan Wienand proposed openstack-infra/glean master: Add NetworkManager distro plugin support  https://review.openstack.org/61896405:10
openstackgerritIan Wienand proposed openstack-infra/glean master: A systemd skip for Debuntu systems  https://review.openstack.org/62042005:10
*** yboaron_ has joined #openstack-infra05:10
*** ykarel|away has quit IRC05:16
*** lpetrut has quit IRC05:28
*** ykarel|away has joined #openstack-infra05:31
*** ykarel|away is now known as ykarel05:31
*** e0ne has joined #openstack-infra05:37
ianwrax dfw mirror seeing a ton of05:38
ianwhttps://review.openstack.org/#/q/topic:bulk-log-download+(status:open+OR+status:merged)05:38
ianw"(104)Connection reset by peer: [client 2001:4800:7818:104:be76:4eff:fe04:3d22:57888] AH01102: error reading status line from remote server pypi.org:443"05:38
*** tdasilva has quit IRC05:39
*** e0ne has quit IRC05:42
*** e0ne has joined #openstack-infra05:44
*** e0ne has quit IRC05:45
*** bhavikdbavishi has joined #openstack-infra05:54
*** jamesmcarthur has joined #openstack-infra05:56
*** jamesmcarthur has quit IRC06:01
*** diablo_rojo has joined #openstack-infra06:06
openstackgerritTobias Henkel proposed openstack-infra/nodepool master: Fix test race in test_hold_expiration_higher_than_default  https://review.openstack.org/62022206:20
*** gyee has quit IRC06:20
*** ahosam has joined #openstack-infra06:29
*** jaosorior has joined #openstack-infra06:36
*** diablo_rojo has quit IRC06:40
*** hjensas has quit IRC06:40
*** dhill_ has quit IRC06:40
*** udesale has quit IRC06:43
*** udesale has joined #openstack-infra06:44
*** udesale has quit IRC06:45
*** udesale has joined #openstack-infra06:46
*** psachin has quit IRC06:47
*** dhill_ has joined #openstack-infra06:48
*** ramishra has quit IRC06:48
*** dhill_ has quit IRC06:54
*** roman_g has joined #openstack-infra06:57
*** udesale has quit IRC06:57
*** rcernin has quit IRC06:57
*** chkumar|away is now known as chkumar|ruck06:59
*** wolverineav has joined #openstack-infra07:01
*** slaweq has joined #openstack-infra07:04
*** ramishra has joined #openstack-infra07:05
*** wolverineav has quit IRC07:06
*** kjackal has joined #openstack-infra07:08
*** quiquell|off is now known as quiquell07:09
chkumar|ruckianw: Hello07:16
*** dpawlik has joined #openstack-infra07:16
chkumar|ruckianw: http://logs.openstack.org/68/619968/1/gate/tripleo-ci-centos-7-scenario000-multinode-oooq-container-updates/7236dfd/job-output.txt.gz#_2018-11-28_05_50_32_99794507:16
chkumar|ruckianw: pypi mirrors are timing out07:16
chkumar|ruckianw: http://mirror.dfw.rax.openstack.org/07:16
chkumar|ruckianw: please have a look07:16
*** ramishra has quit IRC07:18
*** dpawlik has quit IRC07:20
*** ramishra has joined #openstack-infra07:21
openstackgerritMerged openstack-infra/system-config master: Retire bandersnatch mirroring  https://review.openstack.org/61832607:22
*** dpawlik has joined #openstack-infra07:24
openstackgerritTobias Henkel proposed openstack-infra/nodepool master: Fix test race in test_hold_expiration_higher_than_default  https://review.openstack.org/62022207:24
*** aojea has joined #openstack-infra07:28
openstackgerritTobias Henkel proposed openstack-infra/nodepool master: Fix test race in test_hold_expiration_higher_than_default  https://review.openstack.org/62022207:29
*** dhill_ has joined #openstack-infra07:29
openstackgerritQuique Llorente proposed openstack-infra/zuul master: Remove uneeded if statement  https://review.openstack.org/61798407:38
*** ykarel is now known as ykarel|lunch07:41
*** quiquell is now known as quiquell|brb07:43
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix stuck job caused by exception during repo update  https://review.openstack.org/59069707:50
*** udesale has joined #openstack-infra07:53
*** e0ne has joined #openstack-infra07:54
*** udesale has quit IRC07:58
*** kjackal has quit IRC08:01
*** kjackal_v2 has joined #openstack-infra08:01
*** jtomasek has joined #openstack-infra08:07
*** simon-AS559 has joined #openstack-infra08:09
*** ginopc has joined #openstack-infra08:09
*** quiquell|brb is now known as quiquell08:10
*** udesale has joined #openstack-infra08:11
*** roman_g has quit IRC08:12
*** xek_ has joined #openstack-infra08:22
openstackgerritTobias Henkel proposed openstack-infra/nodepool master: Fix test race in test_hold_expiration_higher_than_default  https://review.openstack.org/62022208:30
*** florianf|afk is now known as florianf08:30
*** ahosam has quit IRC08:31
*** ahosam has joined #openstack-infra08:31
*** ralonsoh has joined #openstack-infra08:33
*** e0ne has quit IRC08:37
*** tosky has joined #openstack-infra08:51
*** yamamoto has quit IRC08:56
*** jpena|off is now known as jpena08:57
*** rossella_s has joined #openstack-infra08:59
chkumar|rucktristanC: Hello09:01
chkumar|rucktristanC: in some of the gate jobs  http://mirror.dfw.rax.openstack.org/ is timing out on tripleo and openstack-ansible project side09:01
chkumar|rucktristanC: http://logs.openstack.org/68/619968/1/gate/tripleo-ci-centos-7-scenario000-multinode-oooq-container-updates/7236dfd/job-output.txt.gz#_2018-11-28_05_50_26_09286009:01
chkumar|rucktristanC: please have a look09:02
*** jpich has joined #openstack-infra09:02
*** yboaron_ has quit IRC09:04
*** yboaron_ has joined #openstack-infra09:04
tristanCchkumar|ruck: Hello, it seems like that mirror produce time-out, but i don't have access to it. Perhaps infra-core knows what's going on?09:06
chkumar|rucktristanC: thanks :-)09:07
*** shardy has joined #openstack-infra09:10
*** ahosam has quit IRC09:10
*** ahosam has joined #openstack-infra09:10
*** ginopc has quit IRC09:12
*** owalsh_ is now known as owalsh09:12
*** yboaron_ has quit IRC09:13
fricklerinfra-root: running "gpg-agent --daemon emacs ..." will start a gpg-agent and an emacs process, and the gpg-agent will automatically terminate when emacs does09:21
fricklerthanks go to prometheanfire for forwarding that solution to us, see http://eavesdrop.openstack.org/irclogs/%23openstack-infra/%23openstack-infra.2018-11-15.log.html#t2018-11-15T16:21:2009:23
*** yboaron_ has joined #openstack-infra09:25
*** jamesmcarthur has joined #openstack-infra09:26
*** kjackal_v2 has quit IRC09:27
*** kjackal has joined #openstack-infra09:27
*** jamesmcarthur has quit IRC09:30
*** roman_g has joined #openstack-infra09:32
*** ykarel|lunch is now known as ykarel09:39
*** yamamoto has joined #openstack-infra09:43
*** ahosam has quit IRC09:49
*** yamamoto has quit IRC10:02
*** bhavikdbavishi has quit IRC10:06
*** yamamoto has joined #openstack-infra10:07
*** tobias-urdin has quit IRC10:10
*** derekh has joined #openstack-infra10:12
*** e0ne has joined #openstack-infra10:14
*** tobias-urdin has joined #openstack-infra10:17
openstackgerritJose Luis Franco proposed openstack-infra/project-config master: Remove ansible-role-redhat-subscription from central repo  https://review.openstack.org/61797410:18
*** ahosam has joined #openstack-infra10:19
evrardjpis there anyone using the zuul-jobs role install-docker under ubuntu xenial? It seems I have trouble getting the docker service running in infra.10:21
evrardjpworks perfectly fine in xenial10:22
*** jistr is now known as jistr|mtg10:34
*** wolverineav has joined #openstack-infra10:37
*** electrofelix has joined #openstack-infra10:39
*** wolverineav has quit IRC10:42
*** ginopc has joined #openstack-infra10:43
*** ginopc has quit IRC10:43
*** ginopc has joined #openstack-infra10:44
AJaeger_evrardjp: http://codesearch.openstack.org/?q=install-docker&i=nope&files=&repos=10:53
AJaeger_evrardjp: pbrx seems to use it10:53
*** gtema has joined #openstack-infra10:53
AJaeger_evrardjp: as does zuul - and a few others. the link above should get you started to look into job config10:53
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Whitelist command processor thread in tests  https://review.openstack.org/62055910:57
*** ahosam has quit IRC10:57
openstackgerritBenoît Bayszczak proposed openstack-infra/zuul master: add fetch_vault_secrets Ansible module  https://review.openstack.org/62031111:01
evrardjpAJaeger_: interesting. pbrx seem indeed to use bionic for pbrx-build-container-images . I have just noticed that it works fine under bionic if I am using upstream docker. So I will dig deeper if I was the only one to use system packages + bionic11:04
evrardjpand of pbrx is using upstream docker : )11:04
evrardjpofc*11:04
evrardjpand zuul seem to be using xenial , that all makes sense.11:06
evrardjpIf I have time I will check on the reasons the docker daemon doesn't start. Probably a configuration thing.11:07
tobiashinfra-root: are there some mirror problems? I saw several job timeouts today where all seem to be using the same mirror: e.g.11:08
tobiashhttp://logs.openstack.org/69/619069/4/check/zuul-quick-start/6a6ecb4/job-output.txt.gz#_2018-11-28_08_04_31_64247311:08
tobiashhttp://logs.openstack.org/69/619069/4/check/zuul-quick-start/6a6ecb4/job-output.txt.gz#_2018-11-28_08_04_31_64247311:08
tobiashhttp://logs.openstack.org/22/620222/5/check/pbrx-build-container-images/572a359/job-output.txt.gz#_2018-11-28_09_16_39_98781211:08
gtemaalso openstacksdk jobs there are affected11:10
tobiashoh sorry, didn't read enough backlog11:10
fricklerinfra-root: mirror.dfw.rax fails to connect to pypi.org via IPv6. reaching other sites works, as does reaching pypi.org from other locations. so I'm assuming some IPv6 routing issue within rackspace.11:20
*** bhavikdbavishi has joined #openstack-infra11:22
fricklerinfra-root: created https://portal.rackspace.com/506635/tickets/list - waiting for feedback from rackspace now11:29
*** chason has quit IRC11:31
*** chason has joined #openstack-infra11:36
*** dave-mccowan has joined #openstack-infra11:43
*** tpsilva has joined #openstack-infra11:45
*** yamamoto has quit IRC11:57
*** jpena is now known as jpena|lunch12:02
*** bhavikdbavishi has quit IRC12:03
*** gtema has quit IRC12:05
*** e0ne has quit IRC12:09
*** yamamoto has joined #openstack-infra12:11
*** janki has quit IRC12:20
*** witek has quit IRC12:23
*** witek has joined #openstack-infra12:23
*** ahosam has joined #openstack-infra12:33
*** takamatsu has quit IRC12:37
*** takamatsu has joined #openstack-infra12:43
ttxfrickler: though we did have a network-related fail from limestone on a release job... let me see12:53
ttxhttp://logs.openstack.org/ff/ff34e6541baa539de36c80c6f0ce8d687129644d/release/release-openstack-python/0658165/job-output.txt.gz#_2018-11-28_12_30_12_09618312:53
ttxso I was wondering if it really was RAX-specific12:54
ttx(other two fails we got were from RAX though)12:54
*** beagles is now known as beagles_mtgs12:55
fricklerttx: that job tries to connect to pypi directly, not using our mirror, so it is susceptible to general pypi errors that may happen occasionally. probably not related to the other issue, I'd say12:55
*** rh-jelabarre has joined #openstack-infra12:56
*** gtema has joined #openstack-infra12:58
*** rlandy has joined #openstack-infra13:00
*** jpena|lunch is now known as jpena13:02
*** e0ne has joined #openstack-infra13:05
*** trown|outtypewww is now known as trown13:12
*** ahosam has quit IRC13:13
*** rosmaita has joined #openstack-infra13:20
Dobroslawhello zuul magicians13:20
DobroslawI have some problem with my ingredients and are looking for logs what step stopped my job from running in `post` step13:20
DobroslawI know logs from `check` and `gate` runs are accessible from gerrit review, but what about `post` step?13:20
DobroslawSome more background: I have job that should push docker image to the registry13:21
Dobroslawhttps://github.com/openstack/monasca-common/blob/master/.zuul.yaml#L4913:21
Dobroslawand it already run some months ago http://zuul.openstack.org/builds?job_name=docker-publish-monasca-base13:21
Dobroslawbut somehow it did not run for change merged last week: https://review.openstack.org/#/c/616861/13:21
*** jistr|mtg is now known as jistr13:21
Dobroslawso I would like to see logs from zuul did it decided to not run this job last time13:21
Dobroslaw* why did it decided to not run this job last time?13:22
*** ykarel has quit IRC13:29
fricklerDobroslaw: I'm guessing the combination of "files" and "irrelevant-files" is invalid here https://github.com/openstack/monasca-common/commit/9fd9a01e748d0aa81abc634d6bd6c5c480e45c77#diff-7415f5ff7beee2cdf9ffe31e12e4c08613:29
*** takamatsu has quit IRC13:29
*** takamatsu has joined #openstack-infra13:30
fricklerDobroslaw: maybe zuul experts will know more details. corvus clarkb ^^13:30
Dobroslawfrickler: but this job was run ok13:30
Dobroslawhttps://review.openstack.org/#/c/616861/13:30
Dobroslaw`docker-build-monasca-base`13:31
Dobroslaw`docker-publish-monasca-base` is child of it13:31
fricklerDobroslaw: hmm, true. checking zuul logs now13:34
openstackgerritGhanshyam Mann proposed openstack-infra/openstack-zuul-jobs master: Remove the legacy-tempest-dsvm-nova-v20-api  https://review.openstack.org/62059813:36
fungifrickler: ttx: if we're seeing what could be pypi connectivity issues in rax-dfw and limestone, note that both are in texas so it's possible one of the local fastly cdn endpoints there is misbehaving (pypi.org uses fastly to frontend their service)13:40
*** jamesmcarthur has joined #openstack-infra13:41
*** simon-AS559 has quit IRC13:44
*** takamatsu has quit IRC13:44
*** yamamoto has quit IRC13:45
*** ykarel has joined #openstack-infra13:46
fungihuh, my ipv6 connectivity to both of those mirrors is cutting in and out13:46
fungii wonder if there's a peering problem upstream from them both13:46
fungiwhen my ssh connection to them is working, they can both reach pypi.org13:47
*** jcoufal has joined #openstack-infra13:47
fricklerDobroslaw: ah, wait, I think the issue is that what is enqueued in the post queue is the merge commit, so gerrit doesn't list any changed files for it, thus the "files" match fails there13:48
fricklerDobroslaw: the log says "Job <Job docker-publish-monasca-base branches: {MatchAny:{BranchMatcher:master}} source: openstack-infra/project-config/zuul.d/jobs.yaml@master#26> did not match files in <Branch 0x7ff7c80388d0 openstack/monasca-common refs/heads/master updated 279769276f874c0ac6c41c5d94a6e902182a7b2f..d77a54053e993d0d49d1f74e15ed76376a0c5fb7>"13:48
fungiyes, gerrit has "files" for change objects, not for commit objects13:48
*** takamatsu has joined #openstack-infra13:48
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: fix ref column value for newrev  https://review.openstack.org/62060213:49
Dobroslawhmmm13:49
Dobroslawso `files` for `check` and `gate` works differently than `post` step? I'm not sure I'm getting this13:50
fungithe "post" pipeline operates on a branch state, not a gerrit change13:51
Dobroslawfrickler: are this logs accessible somewhere online?13:51
*** dhill_ has quit IRC13:51
fricklerDobroslaw: sadly not13:51
Dobroslawok13:51
*** kgiusti has joined #openstack-infra13:51
fungiDobroslaw: not the service logs (unfortunately zuul's public build reporting is all about what it did run, not about what it didn't run)13:52
Dobroslawso in `post` state checking for files is useless if I understand correctly?13:53
Dobroslawit would be possible to filter on them if I somehow get last commit from specific branch and check for changed files13:54
*** yboaron_ has quit IRC13:54
*** janki has joined #openstack-infra13:55
Dobroslawbut then I can't use `docker-build-monasca-base` as a parrent...13:55
*** eharney has joined #openstack-infra13:56
*** sthussey has joined #openstack-infra13:56
fricklerDobroslaw: maybe create "docker-build-monasca" with parent "docker-build-monasca-base" and move the "files" stanza to that. then use the new job for check+gate13:59
Dobroslawfrickler: oh, that's good idea, will try it, thank you14:00
Dobroslawfungi:14:00
Dobroslawfungi: thank you14:00
fungiDobroslaw: filtering on files in post, if it were possible, is dangerous anyway since the post pipeline uses a supercedent pipeline manager which can skip commits if multiples merge close together in time14:05
fungibasically if a change merges zuul will start running jobs for it, and then if several more merge after that for the same project+branch zuul will drop all but whatever the last one was and hold it until jobs for the first one complete14:06
fungiit's assumed that projects will run a consistent set of jobs for all builds in post14:07
*** yamamoto has joined #openstack-infra14:07
fricklerfungi: so likely we should have zuul generate a warning in that scenario, to avoid users having to find this out the hard way like in this case?14:10
*** janki has quit IRC14:11
fungii wonder where it would warn about that14:11
fricklerin the config parsing phase, make a warning or maybe an error even when a post job has a files attribute?14:12
*** janki has joined #openstack-infra14:12
fricklercorvus: ^^ maybe you have some other idea for that14:13
*** wolverineav has joined #openstack-infra14:14
Dobroslawhmmm, but this also mean that now I will be pushing new docker image on every commit, by adding `files` I wanted to avoid that14:15
DobroslawI only want to push new images if there are changes in `docker` folder14:16
Dobroslawwe don't need to have new image for any other change in monasca-common repo14:17
*** wolverineav has quit IRC14:19
fungiDobroslaw: this sounds more like a use for the promote pipeline corvus was working on, which triggers on change-merged gerrit events so is per change and should be able to filter on files to selectively do the sort of thing you describe, i think14:23
*** mriedem has joined #openstack-infra14:23
fungiDobroslaw: or for making (pre-)releases with regularity and only publishing images for those?14:23
Dobroslawfungi: that would be fabulous14:23
*** udesale has quit IRC14:24
*** udesale has joined #openstack-infra14:25
*** jamesmcarthur has quit IRC14:29
openstackgerritMerged openstack-infra/zuul master: Use publish-zuul-python-branch-tarball job  https://review.openstack.org/61863414:29
*** dhill_ has joined #openstack-infra14:30
*** jamesmcarthur has joined #openstack-infra14:31
TheJuliaOut of curiosity, did some logs being published get lost in the last 24 hours?14:35
*** jamesmcarthur has quit IRC14:37
*** jamesmcarthur has joined #openstack-infra14:39
*** jamesmcarthur has quit IRC14:46
*** jamesmcarthur has joined #openstack-infra14:46
*** dklyle has quit IRC14:47
openstackgerritSorin Sbarnea proposed openstack-infra/project-config master: Add openstack-virtual-baremetal to openstack  https://review.openstack.org/62061314:47
openstackgerritSorin Sbarnea proposed openstack-infra/project-config master: Add openstack-virtual-baremetal to openstack  https://review.openstack.org/62061314:48
fungiTheJulia: logs of what?14:50
openstackgerritDirk Mueller proposed openstack-infra/irc-meetings master: rpm-packaging: Adjust meeting time  https://review.openstack.org/62061614:51
TheJuliafungi: ran yesterday http://logs.openstack.org/26/591826/2/check/networking-generic-switch-tempest-dsvm-dlm/82bd49a/14:51
fricklerTheJulia: looking at gerrit it ran 2 months ago14:53
TheJuliasoryr to bother you guys, clearly I'm getting pulled in too many different directions htis morning to focus on any single thing :(14:54
fungino worries!14:55
fungiseptember and november are easily confused, take it from me14:55
fricklerTheJulia: np, it's nice to have some easy questions to solve, too ;)14:55
TheJuliaI have two simillarly named patches, guess I should abandon the old one14:57
*** eernst has joined #openstack-infra15:00
fungii love when i push up a patch for a bug, then notice a similar patch listed as a conflict, and realize i'd already pushed up the same fix a year before but nobody's reviewed it15:01
*** dhill_ has quit IRC15:02
*** bobh has joined #openstack-infra15:03
*** bhavikdbavishi has joined #openstack-infra15:04
*** timrc has quit IRC15:06
smcginnisThat's funny a really sad at the same time.15:10
TheJuliawell, it was more along the lines of people wanted refactoring work done first :\15:12
*** graphene has quit IRC15:14
*** graphene has joined #openstack-infra15:15
openstackgerritSorin Sbarnea proposed openstack-infra/puppet-pip master: Use official pypi.python.org as fallback with pip  https://review.openstack.org/62062615:15
*** dpawlik has quit IRC15:16
*** chkumar|ruck is now known as chkumar|away15:17
*** dhill_ has joined #openstack-infra15:17
*** jamesmcarthur has quit IRC15:18
*** jamesmcarthur has joined #openstack-infra15:22
openstackgerritPaul Belanger proposed openstack-infra/zuul-jobs master: Create yarn_lock_file_path variable for install-yarn  https://review.openstack.org/62062815:24
openstackgerritSorin Sbarnea proposed openstack-infra/zuul-jobs master: Use official pypi.python.org as fallback with pip  https://review.openstack.org/62063015:27
openstackgerritPaul Belanger proposed openstack-infra/project-config master: Set yarn_lock_file_path for zuul-tarball jobs  https://review.openstack.org/62063115:28
pabelangermordred: tobiash: config-core: ^ could use a review please to fix a bug with zuul tarball publish jobs15:29
*** pbourke has quit IRC15:37
*** beagles_mtgs is now known as beagles15:37
*** pbourke has joined #openstack-infra15:38
*** ykarel is now known as ykarel|away15:41
*** quiquell is now known as quiquell|off15:41
openstackgerritTobias Henkel proposed openstack-infra/zuul master: executor: harden add_host usage  https://review.openstack.org/62063515:42
*** udesale has quit IRC15:43
*** udesale has joined #openstack-infra15:43
*** panda|rover is now known as panda|pto15:45
*** ramishra has quit IRC15:46
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Use the SQLAlchemy ORM  https://review.openstack.org/62042615:53
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Add artifact table  https://review.openstack.org/62042715:53
*** armax has joined #openstack-infra15:54
corvusinfra-root: https://dnssec-analyzer.verisignlabs.com/opendev.org  is green15:54
clarkb\o/15:54
*** rlandy is now known as rlandy|brb15:55
fungiawesome!15:55
corvusi'll push up patches to create a website15:55
fungithanks!!!15:56
mordredcorvus: \o/15:56
pabelangerw00t15:57
*** eernst has quit IRC16:00
*** diablo_rojo has joined #openstack-infra16:05
ccamachohi fungi16:06
ccamachoman quick question16:06
ccamachowe might have a problem in instack-undercloud taking changes from master instead of stable/rocky16:06
fungifire16:06
ccamachowould you mind to check last comment from bnemec in https://review.openstack.org/#/c/619467/ ?16:06
openstackgerritJames E. Blair proposed openstack-infra/project-config master: Create opendev-website project  https://review.openstack.org/62064316:06
ccamachoin this case for the build-openstack-releasenotes job16:07
fungiccamacho: i'm in a meeting at the moment but can take a peek around 17:00 utc (or sooner if it ends early)16:07
ccamachosure thing man thanks!16:07
fungiccamacho: oh! you might want to ask in #openstack-release, but the releasenotes jobs all operate on the master branch regardless of which branch triggers the job16:07
fungithe reason has to do with making sure release notes are gathered from all available branches each time it's run16:07
mwhahahaccamacho: we need to drop the release no jobs from instakc-udnercloud16:08
mwhahahas/no/on16:08
mwhahahasince we nuked the master branch they will no longer function16:08
ccamachoaaa mwhahaah ack16:08
ccamachoyeahp16:08
ccamachoI see now16:08
openstackgerritJames E. Blair proposed openstack-infra/project-config master: Create opendev-website project  https://review.openstack.org/62064316:09
ccamachomwhahaha just to confirm, shoulb be on the zuul/project.yaml right?16:10
ccamachoin instack-undercloud16:10
mwhahahanot sure where those live, might still be in the .zuul.d/ in instack-undercloud16:10
mwhahahaccamacho: yea i think the release job definition is in project config16:11
openstackgerritJames E. Blair proposed openstack-infra/project-config master: Add opendev-website project to Zuul  https://review.openstack.org/62064616:11
corvusmwhahaha, ccamacho: http://git.openstack.org/cgit/openstack/instack-undercloud/tree/zuul.d/project.yaml?h=stable/rocky  has 'release-notes-jobs' template16:15
mwhahahaah i was looking in the wrong file16:15
mwhahahaccamacho: so yea just drop the releases-notes-job from the stable branches16:16
fungimakes sense. in theory a retired project which only has stable branches maintained shouldn't be adding anything to stable worthy of a release note anyway16:17
*** agopi is now known as agopi|food16:20
ccamachocorvus mwhahaha fungi ack Ill drop it here https://review.openstack.org/#/c/619467/ and then Ill push it to older branches16:24
*** dpawlik has joined #openstack-infra16:24
ccamachothanks for info!16:24
*** gyee has joined #openstack-infra16:27
jamesmcarthurclarkb: fungi: corvus: It appears that CSC finally came through with all of our requests.16:29
jamesmcarthurWould you all mind giving it a look to make sure things are working as expected?16:29
fungijamesmcarthur: we noticed! corvus is working on getting a minimal website up on that domain next16:29
fungiit all looks good to us now16:29
clarkbjamesmcarthur: corvus confirmed a few minutes ago that it looked good. Thank you for all the help with that16:29
jamesmcarthurawesome16:29
jamesmcarthurfor sure. Sorry it took so long.16:29
funginot your fault16:29
jamesmcarthurIt's nice that we all got to collectively bang our heads against the wall.16:30
*** jamesmcarthur has quit IRC16:30
*** rlandy|brb is now known as rlandy16:34
*** udesale has quit IRC16:34
*** jamesmcarthur has joined #openstack-infra16:41
*** dpawlik has quit IRC16:42
*** hamerins has joined #openstack-infra16:45
*** jamesmcarthur has quit IRC16:46
*** hamerins has quit IRC16:47
*** hamerins has joined #openstack-infra16:48
openstackgerritSorin Sbarnea proposed openstack-infra/puppet-pip master: Use official pypi.python.org as fallback with pip  https://review.openstack.org/62062616:51
*** eernst has joined #openstack-infra16:57
smcginnisAm I remembering correctly that IRC channel topics are applied or refreshed automatically out of a config file somewhere?16:59
openstackgerritSorin Sbarnea proposed openstack-infra/zuul-jobs master: Use official pypi.python.org as fallback with pip  https://review.openstack.org/62063017:00
clarkbsmcginnis: they are not. The status bot does its best to restore topics it changes, but channel ops are given the ability to /topic17:00
*** lbragstad has quit IRC17:02
*** e0ne has quit IRC17:02
fricklerclarkb: can you check whether there was a response from rackspace in the meantime for the v6 issue? I'm not at my workstation anymore. we might need to consider a different workaround if it lasts17:02
smcginnisclarkb: Any idea who has ops in #openstack-operators? Someone pointed out its topic points to the old mailing list.17:02
clarkbfrickler: ya I can take a look in a bit17:02
clarkbfinishing up a meeting17:02
*** dpawlik has joined #openstack-infra17:03
*** tdasilva has joined #openstack-infra17:03
*** pcaruana has quit IRC17:03
fricklersmcginnis: clarkb: I can take a look at the channel topic in a moment17:03
*** eernst has quit IRC17:03
clarkbsmcginnis: /msg chanserv access #openstack-operators list17:03
smcginnisThanks!17:04
*** lbragstad has joined #openstack-infra17:05
smcginnisAlso willing to take care of it if someone can make me an operator17:06
*** dpawlik has quit IRC17:07
corvussmcginnis: one of the existing channel ops can add you and that would be best; but if they've all gone awol, we can do it17:08
smcginnisYeah, looking at the list, I think it's all infra folks.17:09
clarkbfrickler: the ticket was escalated to rax engineers ~2 hours ago, but no update since17:09
*** aojea has quit IRC17:09
clarkbcloudnull: ^ not sure if that interests you. 181128-ord-0000464 is ticket number17:09
* cloudnull looking 17:10
* cloudnull reading back 17:10
fricklersmcginnis: you should be op now17:11
*** bobh has quit IRC17:13
smcginnisThanks frickler!17:14
*** gtema has quit IRC17:16
*** ssbarnea|bkp2 has quit IRC17:20
openstackgerritIan Y. Choi proposed openstack-infra/system-config master: Blackhole messages to openstack-ko-owner@l.o.o  https://review.openstack.org/62066117:24
*** hamerins has quit IRC17:28
*** hamerins has joined #openstack-infra17:29
*** ssbarnea has joined #openstack-infra17:29
hogepodgeAJaeger_: since you've been making the most contributions to the project since it launched, and there's no team to speak of yet, do you want to be promoted to core on Four Opens?17:32
*** ginopc has quit IRC17:33
openstackgerritSean McGinnis proposed openstack-infra/project-config master: Add 'Review-Priority' for Cinder repos  https://review.openstack.org/62066417:38
openstackgerritPaul Bourke (pbourke) proposed openstack-infra/bindep master: Add OracleLinux support  https://review.openstack.org/53635517:38
*** jpich has quit IRC17:40
*** janki has quit IRC17:41
fricklerfungi: what do you think about notifying people still mailing to the old lists about the migration by direct mail? of course I don't propose this without also volunteering to perform that task17:43
fungifrickler: they get moderation queue notices from openstack-discuss already each time they send to one of the other lists17:44
fungii've been watching and this seems to already have prompted lots of people to subscribe immediately after sending to one of the old lists17:44
fricklerfungi: oh, o.k., that might be good enough, then17:45
fungiseems to be working so far17:46
fungilast night i ran a comparison of the addresses seen posting to the old mailing lists this year and the addresses subscribed to the new one. >50% of people who sent more than 10 messages to the old lists have subscribed already17:47
*** graphene has quit IRC17:48
*** trown is now known as trown|lunch17:48
*** graphene has joined #openstack-infra17:49
openstackgerritSorin Sbarnea proposed openstack-infra/project-config master: Add openstack-virtual-baremetal to openstack  https://review.openstack.org/62061317:50
mriedemi assume the apt/pypi mirrors is a known issue right now?17:50
*** florianf is now known as florianf|afk17:50
openstackgerritMerged openstack-infra/zuul master: Add allowed-labels tenant setting  https://review.openstack.org/61774017:52
*** jamesmcarthur has joined #openstack-infra17:53
clarkbmriedem: yes, rax is looking at it17:53
clarkbmriedem: aiui ipv6 is flaky. I think if it isn't fixed soon we might either disable the dfw region or disable ipv6 there?17:54
mriedemclarkb: ok just wanted to make sure it was known17:56
mriedemthanks17:56
*** jamesmcarthur has quit IRC17:58
fungiwe saw evidence of it impacting both rax-dfw and limestone-regionone so it could be a regional peering problem impacting them both17:59
fungiif it persists we may want to take those regions offline until we can confirm it's no longer happening17:59
fungi(they're both in texas)17:59
*** sshnaidm is now known as sshnaidm|afk18:01
fungimy v6 routing to them was up and down earlier today too. looks like both providers peer with hurricane electric in dallas which is how i'm reaching them18:01
*** hamerins has quit IRC18:01
fungiso that _could_ be the common point of impact18:01
*** armax has quit IRC18:01
fungibut i haven't tried running reverse traceroutes to see whether it's symmetrical18:01
*** hamerins has joined #openstack-infra18:02
fungiright now i can `wget -O /dev/null https://pypi.org/` from both mirror hosts and it successfully retrieves content over ipv6 so it's obviously not 100% of the time18:03
*** armax_ has joined #openstack-infra18:04
*** jpena is now known as jpena|off18:09
AJaeger_hogepodge: regarding four-opens - sorry, I don't plan to contribute many more changes to it. My main focus was helping you started for a good set up. But if you need another reviewer, I can help...18:09
hogepodgeAJaeger_: cool, thanks18:09
AJaeger_hogepodge: ok, will add it to my watchlist...18:11
*** shardy has quit IRC18:11
*** hamerins has quit IRC18:12
*** hamerins has joined #openstack-infra18:12
*** rtjure has joined #openstack-infra18:13
fungiinfra-root: noting that we have a buuuuunch of projects with the openstack-dev ml address in their package config files (even changing those in git doesn't change them for old releases on pypi) as well as threads on old lists which even subscribers to the new list are still likely to attempt to reply on from time to time, what do you think about configuring exim on lists.o.o to alias the old list18:16
fungiposting addresses to openstack-discuss? i've tested it manually and seems to work18:16
fungiobviously we wouldn't do that until monday when we're ready to retire the old lists18:17
AJaeger_fungi: what about an autoresponder "Use -discuss instead"?18:17
corvusfungi: no objections here; though also someone should propose changes to all the projects to change it; maybe they will beat dhellmann at stackalytics this round18:17
fungiAJaeger_: autoresponders create backscatter, these lists get hundreds of spam messages from non-subscribers in their moderation queues already18:17
AJaeger_I see18:18
fungiso an autoresponder would basically just give most of the internet a reason to blacklist messages from the server18:18
clarkbfungi: the forward would force -discuss to filter that spam? Though I expect it will get a fair amount on its own so probably not a major concern18:19
fungiit already is getting a fair amount of spam, and yes i suppose that would be a downside18:19
clarkbbased on the -infra spam seems like blocking qq.com would avoid 80% of the spam. But unsure if qq.com is used legitemetely too18:19
*** bhavikdbavishi has quit IRC18:20
corvusqq is still a real thing18:20
fungiqq.com is spoofed for most of that spam specifically *because* it's the most popular e-mail provider in mainland china18:20
clarkbah18:20
clarkbTIL18:20
fungiblocking qq.com would be the eastern equivalent of blocking gmail.com18:20
fungiwe had legitimate posts to the old mls from 6 different qq.com addresses in 201818:22
fungiso while not a ton, still not something i'd want to block18:22
*** wolverineav has joined #openstack-infra18:23
*** ralonsoh has quit IRC18:25
openstackgerritMerged openstack-infra/nodepool master: Fix test race in test_hold_expiration_higher_than_default  https://review.openstack.org/62022218:30
openstackgerritMerged openstack-infra/nodepool master: Cache node request zNodes  https://review.openstack.org/61880618:30
*** agopi|food is now known as agopi18:33
*** electrofelix has quit IRC18:45
*** wolverineav has quit IRC18:50
*** wolverineav has joined #openstack-infra18:51
fricklercorvus: clarkb: this is what I made out of the ksc functional job we discussed yesterday: https://review.openstack.org/620553 is my understanding correct that I cannot reference a playbook from devstack, but need to copy it to the local repo like I did?18:53
*** graphene has quit IRC18:55
*** graphene has joined #openstack-infra18:56
frickleris there a way for us to recover an abandoned, ownerless #openstack-* channel other than contacting freenode admins? I'd like to set "+i" on #openstack-designate so that the forward to #openstack-dns actually takes effect18:57
logan-fungi: o/ saw the note about ipv6 issues in dfw? happy to help debug if needed18:58
fungilogan-: i don't know if they're still ongoing18:58
fungilemme check18:58
*** trown|lunch is now known as trown18:59
openstackgerritMerged openstack-infra/zuul-jobs master: Create yarn_lock_file_path variable for install-yarn  https://review.openstack.org/62062818:59
*** hamerins has quit IRC19:00
pabelangerfungi: clarkb: corvus: mind a review on https://review.openstack.org/620631/ to fix zuul tarball jobs19:01
*** hamerins has joined #openstack-infra19:01
pabelangerthe jobs weren't installing yarn properly19:01
fungilogan-: http://status.openstack.org/elastic-recheck/ suggests we're still seeing signs of pip download failures... i'll see if i can spot whether they're still particular providers19:02
*** ykarel|away has quit IRC19:03
*** dklyle has joined #openstack-infra19:03
fungilogan-: looks like they're all rax-dfw in the past 6 hours, so i guess not19:04
logan-i checked the 3 pypi/pip ones (1708686, 1326813, and 1449136) ... looks like all rax-dfw19:04
logan-yeah agreed19:04
corvusfrickler: i can take care of the #openstack-designate issue; i'll let you know when it's done19:04
corvusfrickler: https://review.openstack.org/620553 looks fine unless you think that devstack-tox-functional-consumer should just be changed to drop the test-setup role. (cc mordred)19:07
*** e0ne has joined #openstack-infra19:07
*** lbragstad has quit IRC19:08
fricklercorvus: well, there's more to it in the meantime, like using devstack-minimal in order to reduce the footprint. also using the -consumer variant was wrong IMO when the job also runs against keystone patches that may break devstack setup19:10
corvusfrickler: ah ok19:11
*** lbragstad has joined #openstack-infra19:12
*** lbragstad has quit IRC19:12
*** rosmaita has left #openstack-infra19:14
*** lbragstad has joined #openstack-infra19:14
*** lbragstad has quit IRC19:14
*** e0ne has quit IRC19:15
*** lbragstad has joined #openstack-infra19:16
*** lbragstad has quit IRC19:16
*** e0ne has joined #openstack-infra19:17
*** e0ne has quit IRC19:18
openstackgerritJames E. Blair proposed openstack-infra/zuul-website master: Remove summit event notices  https://review.openstack.org/62068119:21
fungicorvus: thanks! i had that on my to do list for this week. one less thing to worry about19:22
corvusi just commented it out so it'll be easier to add back19:23
openstackgerritMerged openstack-infra/zuul master: executor: harden add_host usage  https://review.openstack.org/62063519:24
openstackgerritMerged openstack-infra/project-config master: Set yarn_lock_file_path for zuul-tarball jobs  https://review.openstack.org/62063119:24
fungicorvus: that's what i was thinking of doing too, so... perfect!19:25
fungias soon as the draft render posts i'll review19:25
*** dklyle has quit IRC19:27
openstackgerritMerged openstack-infra/project-config master: Create opendev-website project  https://review.openstack.org/62064319:29
pabelangercorvus: mordred: what are your thoughts about cleaning up https://github.com/openstack-infra/puppet-zuul/blob/master/manifests/web.pp#L219 once we confirm publishing jobs are working properly with yarn. I'm unsure if we have zuul use the published wheel from tarballs.o.o or we also include yarn bits on production server19:30
pabelangersorry, I should have linked git.o.o there19:31
pabelangerI've adapted to github.com faster them I hoped19:31
clarkbpabelanger: the infra deployment still uses the tarball on tarballs iirc19:32
clarkbpabelanger: we should switch to using the in sdist/whl contents as soonas that is reliable19:32
pabelangerYah, i think that will be helpful. That is one reason why we didn't see the issue sooner19:33
pabelangerI can see yarn bits now in http://logs.openstack.org/27/2728e5d4adac81b3c79c6a453676565fc10fda9d/post/publish-zuul-python-branch-tarball/2bab6ed/job-output.txt.gz19:34
pabelangerand both tarball and wheel look to have web bits too19:35
openstackgerritKendall Nelson proposed openstack-infra/irc-meetings master: Update Meeting Chairs  https://review.openstack.org/62068519:39
fungi"the tarball" isn't an sdist already then?19:41
clarkbfungi: no we produced an archive of the web bits separately aiui. The reason for this is they weren't going into the sdist, but as of a few minutes ago we now publish them as part of the sdist/whl too19:42
fungioh, so there's a job building a separate tarball of the static web content19:43
pabelangeryah, that job can go away now19:44
pabelangeronce we update puppet-zulu19:44
pabelangerpuppet-zuul*19:44
*** mrhillsman is now known as mrhillsman|lunch19:46
mordredI could go either way ...19:52
mordredbut just to toss a few thoughts into the bucket - we're currently serving the static files built in the javascript tarball directly via apache. we could also just let zuul-web serve them and pick them up through the apache proxy and just stop serving them directly as static files19:53
mordredwe weren't producing the web bits separately because they weren't in the sdist - they *were* going in to the sdist and wheel - but then we broke that and didn't notice. :)19:54
mordredbut - in all, I don't think we need the static file offloading - and serving them via zuul-web would certainly help us notice that our sdist/wheels are broken19:55
clarkbmordred: and if performance is a concern we can have apache cache them19:57
pabelangeryah, I'm mostly thinking, what is the right way for a non openstack-infra deploy to do it. Cause, I haven't actually done that part yet in my local testing. I figured it was just use the static bits in the wheel now19:57
clarkb(reality is the json status file is likely the biggest artifact and it changes often so a few tertiary things likely aren't a major concern)19:57
mordredyeah. I mean - I think we already have apache caching them based on headers19:57
mordredpabelanger: just having zuul-web serve the content is probably what most people should do until/unless there is a reason to do it otherwise - just cause it's easier19:58
mordredso yeah - I think most people should deploy it via the wheel we're publishing - and at this point I'm not sure there's a compelling reason for openstack-infra to deploy it differently19:58
*** eharney has quit IRC19:59
pabelangerk19:59
mordredclarkb, pabelanger: also, the javascript build process produces minified content in hashed filenames, so the javascript bundles can be _aggressively_ cached ... each one will literally never change20:00
mordredand when a change is pushd, it's a new hashed filename - with the tiny index.html file being updated to reference the new hashes20:00
clarkbah perfect20:00
clarkbthough what happens when someone requests the old file?20:01
clarkbthey have to hard refresh I guess20:01
*** wolverineav has quit IRC20:05
mordredwell, they should only ever request an old file if they've gotten an old copy of the index.html - that one should be served/cached differently - like with an etag or something else20:05
mordredit *mostly* should just work20:06
*** wolverineav has joined #openstack-infra20:07
fungiif they really want apache to serve those files instead, they can always just stick the paths to them on the fs into their vhost configf20:11
fungiand then the requests won't hit zuul-web at all20:11
*** eharney has joined #openstack-infra20:11
mordredindeed20:13
mordredbut we should be providing all the right headers from zuul-web so that an apache proxy will appropriately cache at the apache layer20:13
mordredwithout even needing the complexity20:13
*** wolverineav has quit IRC20:16
*** e0ne has joined #openstack-infra20:19
*** e0ne has quit IRC20:20
*** rossella_s has quit IRC20:23
*** kjackal has quit IRC20:27
openstackgerritDavid Shrewsbury proposed openstack-infra/nodepool master: Add arbitrary node metdata config option  https://review.openstack.org/62069120:27
corvusinfra-root: i'm going to hard-restart the zuul executors to pick up a security fix20:28
clarkbcorvus: ++ let me know if I can help. Though I'm currently trying to do administrivia tasks (just set up u2f multifactor auth with fastmail)20:29
*** lbragstad has joined #openstack-infra20:30
openstackgerritDavid Shrewsbury proposed openstack-infra/nodepool master: Add arbitrary node metdata config option  https://review.openstack.org/62069120:30
corvusoh i'll clean up the builds directories while they're stopped20:32
Shrewsdid we never land that patch to do it for us?  <-- corvus20:32
Shrewsor am i thinking of something else....20:32
corvusShrews: hrm, i think it did land...20:33
clarkbya I thought that was a thing20:33
corvusmaybe i should just save a list of build dirs, start them, and then check whether it worked20:33
corvusalso, maybe we should have the executor stats keep running until the process exits20:35
corvus(would be nice to see the graph wind down the number of jobs, disk usage, etc)20:35
*** mrhillsman|lunch is now known as mrhillsman20:35
clarkbI approximate that with ps -elf | grep zuul | wc -l20:35
clarkbbut ya specific info would be nice20:35
*** openstackgerrit has quit IRC20:36
pabelanger+1 to keep statsd running on stop20:36
*** e0ne has joined #openstack-infra20:40
*** armax_ has quit IRC20:41
corvusokay, they've all stopped and i saved a list of build dirs20:43
corvusand restarted20:44
*** ahosam has joined #openstack-infra20:48
clarkbfwiw u2f is becoming more common and there are cheap open source hardware tokens for u2f. I've now got it working with fastmail, google, and github20:48
*** wolverineav has joined #openstack-infra20:48
AJaeger_corvus: I fear you need to split up https://review.openstack.org/#/c/620646/ - see my comment there20:49
*** e0ne has quit IRC20:49
clarkbwith firefox too20:49
corvusAJaeger_: ah yep20:50
*** wolverineav has quit IRC21:02
*** wolverineav has joined #openstack-infra21:06
*** openstackgerrit has joined #openstack-infra21:06
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Fix deletion of stale build dirs on startup  https://review.openstack.org/62069721:06
corvusclarkb, Shrews: ^ *cough*21:06
mordredcorvus: yay!21:07
clarkbthat particular method of bug has shown up in other places21:09
clarkbseems like that is the sort of rule that maybe hacking should look for21:09
clarkbmeh21:09
openstackgerritMerged openstack-infra/zuul master: web: fix ref column value for newrev  https://review.openstack.org/62060221:14
*** eharney has quit IRC21:20
*** e0ne has joined #openstack-infra21:21
*** e0ne has quit IRC21:21
*** wolverineav has quit IRC21:22
*** wolverineav has joined #openstack-infra21:23
*** wolverineav has quit IRC21:23
*** wolverineav has joined #openstack-infra21:23
*** e0ne has joined #openstack-infra21:26
*** graphene has quit IRC21:27
*** e0ne has quit IRC21:27
openstackgerritMerged openstack-infra/zuul master: Use the SQLAlchemy ORM  https://review.openstack.org/62042621:28
ianwsorry, just catching up after a plugin-to-docking-station-oh-everythings-crashed-hrm-there's-a-new-firmware-i'll-do-that-oh-i-need-a-usb-key-find-one-oh-doesn't-work-hrm-let's-try-the-usb-port-on-other-side-oh-now-it-does-ok-now-i-can-boot-again dance21:29
ianwdid the rax ipv6 pypi issue clear up?21:29
corvusthat was one character wider than my window21:31
openstackgerritClark Boylan proposed openstack-infra/system-config master: Require sysadmin github accounts use 2fa  https://review.openstack.org/62070221:33
openstackgerritClark Boylan proposed openstack-infra/system-config master: Stop requiring separate github accounts  https://review.openstack.org/62070321:33
clarkbinfra-root ^ this is more of a conversation starter than anything else. I'd appreciate feedback/thoughts on both of those21:33
clarkbfwiw I've been using u2f hardware tokens with github on my account for about a year now and haven't found it to be too problematic. There are also cheap keys available with open source hardware/software (and if cost is prohibitive I think we can likely get that expensed)21:34
ianwclarkb: http://logs.openstack.org/71/618671/14/experimental/nodepool-functional-py35-redhat-src/facfefe/ ... this is rather disappointing.  using what seem to be exactly the same service dependencies as cloud init, we do not seem to get a good network bringup with glean+nm on centos21:34
openstackgerritJames E. Blair proposed openstack-infra/project-config master: Add opendev-website jobs  https://review.openstack.org/62064621:34
openstackgerritJames E. Blair proposed openstack-infra/project-config master: Add opendev-website project to Zuul  https://review.openstack.org/62070421:34
clarkbthe second thing is an item that occuured to me writing the first. I think we mostly avoided that as an issue by not using github outside of mirroring openstack, but more and more we have infra-root that do use github for day to day work related thigns21:35
corvusclarkb: oh the idea was to avoid permissions leakage, not security21:35
clarkbso we should reconsider if the rule is necessary and if so maybe enforce it21:35
clarkbcorvus: ya I think there are two different things going on there. One is security (2fa) the other is accidental push of code where you don't want it21:35
clarkbcorvus: I'm happy to start enforcing both items (I don't think we've really enforced either), but wanted to bring them up for discussion21:36
clarkbianw: that is disappointing. Maybe just go back to the after local-fs?21:36
*** armax has joined #openstack-infra21:36
ianwclarkb: yeah ... i don't think anyone really understands all this; it's a good idea that seems to have got too complex21:37
*** lbragstad has quit IRC21:37
*** lbragstad has joined #openstack-infra21:37
ianwclarkb: i'm not really sure how i got in openstack admin accounts on github, i think i was added at some point, i'd be happy to make a separate account because it really pollutes your notifications etc21:38
clarkbianw: ya I think we've just been bad at enforcing that particular rule. I don't expect anyone to object if we asked everyone to make a second account and do a switch over21:38
clarkbbut considering we hadn'y really enforced it I thought it was worht discussing if it is worth enforcing (being cautious/paranoid I'm inclined to start enforcing the rule, but someone like mordred who uses github more may have other insights, and for fungi I expect his answer is he only uses github for this purpose so already meets the criteria)21:39
ianwon the 2fa one, i presume you mean you'll flip the switch on github that requires 2fa?  i think it has one (or maybe i'm getting confused with google's admin panels)21:43
clarkbianw: reading the gentoo doc it appears that that is a org by org setting21:43
clarkbso yes would toggle it there then expect people to set it up. We can wait for a specific day if people need to sort out how they want to do 2fa first21:44
corvusi would probably seriously consider relinquishing my github privileges; i'm not sure it's worth the hassle for me21:44
ianwtotp is fine, if we want keys i've never tried getting a key into my work vm via virtualbox, i presume i'd have to install the proprietary bits to get usb tunneling21:45
clarkbianw: ya totp is prbably fine. I personally prefer u2f because it doesn't have shared secrets but in this case the benefit of totp over nothing is still worthwhile21:46
ianwcorvus: yeah, i don't think any of us *want* it?  but we can't really do 2fa with a shared account (i.e. one global admin account and password in the usual place)?21:47
clarkbianw: you could with totp actually since it is shared secret21:47
ianwmaybe could put the totp key in there somehow, but not sure how easy it is to regenerate from a token with usual apps21:47
corvusor maybe i'd get around to setting up that second account so it can have admin access and 2fa, and i never use it21:48
corvuser, actually, i did set up the other account, i just didn't switch to it21:48
ianwclarkb: heh, yeah we're thinking the same thing :)  authy has an ENTER KEY MANUALLY option21:48
corvusthis is not terrible and doesn't require more stuff in my pockets: https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp&hl=en_US21:49
clarkbcorvus: yup  Ithink something like that would be fine21:49
*** rcernin has joined #openstack-infra21:50
ianwi'm sure there's something to generate totp tokens from the command-line?  we could have it on bridge, with a shared account, and just a note on how to get the token21:50
clarkboathtool says google21:51
* clarkb checks if that is a debuntu package21:51
clarkbit is (in universe)21:51
clarkbso that could be another option, switch to shared account instead of using our individual accounts21:52
clarkbfungi: ^curious if you have opinions on that21:52
clarkbin any case I don't expect everyone to go change how they use github right this instance. Mostly wanted to discuss it and see if we thought these sort of changes would be worthwhile21:54
corvusfungi: i abandoned my zuul-website patch because of your comment -- i think we need to revert more stuff.  can you put that back on your todo list?21:57
*** rcernin has quit IRC22:03
*** jcoufal has quit IRC22:06
*** jcoufal has joined #openstack-infra22:11
*** rcernin has joined #openstack-infra22:12
*** trown is now known as trown|outtypewww22:14
mordredclarkb: oh my. so - I don't want to turn on 2fa for the github account I use for things22:16
mordredI should really set up an admin only account22:16
clarkbmordred: fwiw if you ssh (which is how I mostly use github) the number of times you have to enter a token is quite low22:16
clarkbbut ya maybe the solution here is to enforce the second account rule and then 2fa there so no one notices22:17
mordredoh - I guess I have 2fa enabled22:17
clarkbha22:17
mordredwith text messages22:17
mordredso - I guess there's at least that22:17
mordredand I guess it's not a very high burden, as I'd forgotten it was enabled22:18
corvusclarkb, pabelanger: i'm spelunking into the history of our bind mount22:18
clarkbcorvus: thanks!22:18
pabelangerkk22:18
clarkbmordred: ya I mean I've used it this way for about a year now and it isn't that bad. The worst part is setting it up and if you hardware token having that on your keychain everywhere and needing a safe place to store a backup22:19
*** xek_ has quit IRC22:19
clarkbusing ssh to talk git reoves a lot of the pain I think22:19
mordredyah. that and not really using github for a ton of things :)22:19
*** kgiusti has left #openstack-infra22:20
corvusclarkb, pabelanger: this is why it's there: https://review.openstack.org/47827422:21
clarkbhrm so we may not be able to just remove it then22:21
corvusyeah, we have 3 keys in that dir22:22
clarkbhowever we could limit it to mounting just that subset of keys?22:22
*** tpsilva has quit IRC22:22
pabelangerwe should be able to move them into secrets now I think22:22
corvuspabelanger: yes... if we haven't already22:22
clarkbah ya and that would give the added protection of requiring review before being accessed22:23
corvusi don't think we need to rotate those keys though, since it would only have been mounted for trusted playbooks22:23
pabelangerI agree with that22:23
clarkbcorvus: ++22:23
clarkbthat also likely makes this a non urgent change but something that we should add to the todo list anyway22:24
mordred++22:24
*** rh-jelabarre has quit IRC22:24
pabelangerwfm22:24
corvusinfra-root: is there a way for me to log into horizon on vexxhost?22:31
corvusi don't see likely credentials in the password file for https://secure.vexxhost.com/billing/clientarea.php22:31
corvusnor do i see any other urls22:31
clarkbcorvus: mnaser set our accounts up by giving us keystone credentials which we then reset passwords on. I'm not sure we ever got web ui credentials.22:32
clarkbcorvus: the catalog may point at a horizon url directly? /me looks22:33
mordredcorvus: you can log in to horizon with the openstack creds22:33
corvusmordred: do you know the url for that?22:34
mnasermordred: is correct. You can just use that username and psssword to login to horizon22:34
mnaserhttp://dashboard.vexxhost.net22:34
mordred https://dashboard-ca-ymq-1.vexxhost.net/22:34
mordredyeah22:34
mnaserOr that. They’re aliases22:34
clarkbhttp://secure.vexxhost.com/console/api says the catalog22:34
mnaser(Region based dashboard is silly I’ve learned :))22:34
mordredmnaser: :)22:35
corvusthanks.  i've added that to our file :)22:35
corvusnext question: is there a web ui for magnum?22:35
clarkbmnaser: fwiw the link in the catalog doesn't seem to point to what I would expect22:35
corvusoh there it is: "container infra"22:35
clarkbbut maybe dashboard != horizon22:36
*** diablo_rojo has quit IRC22:36
corvusit very much looks like horizon22:36
fungihad a minor internet outage, catching back up now22:36
clarkbcorvus: http://secure.vexxhost.com/console/api is different than the url that mnaser and mordred gave, but is what the catalog returns for "dashboard"22:36
mordredclarkb: well - I mean - there isn't really a defined use for dashboard in the catalog22:37
clarkbmordred: sure, but it is there22:37
mordredindeed22:37
clarkband the url doesn't seem to give you dashboard is my point22:37
*** diablo_rojo has joined #openstack-infra22:38
mnaserclarkb: I don’t want to talk about that embarrassing catalog entry22:38
clarkbmnaser: ok :) mostly wanted to point it out if it was somethign that needed fixing22:38
mnaserIt was in a time where we experimented with our own dashbord and using keystone for endpoint discovery22:38
mnaserSpeaking of, mordred it would be interesting to have some sort of best practice document for using keystone for endpoint discovery for own services22:39
mnaserPrefix or what not to not collide with the OpenStack namespace22:39
mordredmnaser: I agree - that would be a very good document22:39
*** jcoufal has quit IRC22:41
fungiclarkb: my preference is to stop managing github and leave that to people in the community (perhaps not even infra-root folk) who care about it22:41
clarkbfungi: I agree, but also don't expect that transition to happen soon22:42
clarkband if we can set up reasonable rules for how to do that then maybe those who take over will inherit some of that?22:42
fungicorvus: sure, i'll play around with partial/complete reverting of the change which added the events banner. we can always pop that in and out i suppose until the site design changes substantially22:42
corvusfungi, clarkb: one new wrinkle is if we want to continue having zuul do things on github, we need an app configured in some org on github.22:43
corvusso even if we're not mirring, if third-party-check is going to continue to be an opendev service (i think it should be), we'll still need at least that.22:43
*** derekh has quit IRC22:43
*** derekh has joined #openstack-infra22:44
fungioh, good point22:44
fungii guess the app doesn't have it's own account22:45
*** slaweq has quit IRC22:46
clarkbcorvus ++22:46
mordred++22:46
*** ahosam has quit IRC22:51
*** trown|outtypewww has quit IRC22:54
*** slaweq has joined #openstack-infra22:54
*** trown has joined #openstack-infra22:55
*** slaweq has quit IRC22:59
*** jamesmcarthur has joined #openstack-infra22:59
*** wolverineav has quit IRC23:01
openstackgerritIan Wienand proposed openstack-infra/glean master: Add NetworkManager distro plugin support  https://review.openstack.org/61896423:01
openstackgerritIan Wienand proposed openstack-infra/glean master: A systemd skip for Debuntu systems  https://review.openstack.org/62042023:01
*** wolverineav has joined #openstack-infra23:02
*** wolverineav has quit IRC23:03
*** wolverineav has joined #openstack-infra23:03
*** jamesmcarthur has quit IRC23:04
*** auristor has quit IRC23:05
*** auristor has joined #openstack-infra23:14
ianwclarkb: ^ trying without defaultdependencies=no which i notice cloud-init only sets for debuntu23:17
ianwif anyone can tell me wtf "For example, target units will complement all configured dependencies of type Wants= or Requires= with dependencies of type After= unless DefaultDependencies=no is set in the specified units." means ... well good luck23:17
*** auristor has quit IRC23:20
clarkbianw: wants means if you start foo then start bar, but doesn't mean bar happens after foo. The after will set up that additional relationship23:25
clarkbianw: I think that defaultdependencies=no must mean we have to explicitly set the after ourselves if we want it?23:25
clarkbianw: I think that must be a noop if you set both wants and after to the same value23:26
*** auristor has joined #openstack-infra23:26
*** pbourke has quit IRC23:30
clarkbianw: do you know how you/we were tracking the rax dfw ipv6 errors? I was going to see if it is still persisting and if so start pondering work arounds23:32
clarkb(disable the cloud regions or switch to ipv4 in them)23:32
ianwclarkb: hrm, what's quite annoying is that in the logs (http://logs.openstack.org/71/618671/14/experimental/nodepool-functional-py35-redhat-src/facfefe/controller/logs/screen-nodepool-launcher.txt.gz#_Nov_28_06_15_23_694411) it really looks like glean starts first, sets things up and then networkmanager starts23:33
ianwbut that host never responds on the network23:33
*** rlandy is now known as rlandy|bbl23:33
clarkbianw: maybe nm + /e/n/i is broken on xenial?23:33
clarkbianw: have you gotten it to work at all on that platform?23:33
clarkboh nevermind its fedora23:34
clarkbthe test node is xenial23:34
ianwyeah, this is just booting the centos test node23:34
ianwclarkb: no, sorry it was late and i was just poking at some very weird failures on my jobs ... let me see23:34
ianwfrickler had something in scrollback?23:34
ianwhttps://portal.rackspace.com/506635/tickets/list23:35
clarkbianw: ya they respodned and said they were looking at it and cloudnull took a look too. That said fungi said it could be an isp issue as he was having trouble to that part of the world too?23:35
clarkbianw: I agree it seems glean runs first, then nm23:36
clarkbianw: we don't know what /etc/sysconfig/network-scripts/ifcfg-ens3 looks like though right?23:36
ianwclarkb: well, the only thing that changed between working and not work was me copying the systemd dependencies from the cloud-init service file23:37
clarkbah23:37
clarkbianw: crazy idea, maybe the file isnt synced to disk?23:38
clarkbI actually ran into this with btrfs and zuuls test suite a few months ago23:38
clarkbin the db usage tests we fork a du and it wasn't seeing data that had been "written"23:38
clarkbmaybe add an explicit sync/flush to glean23:39
ianwhrm, that was what i was thinking with https://review.openstack.org/#/c/585574/23:39
clarkbI expect the older unit file would run glean quite a bit before nm whereas now its immediately after23:39
ianwi think the close implies it's been flushed23:40
ianw(assuming it's working ...)23:40
clarkbapparently it is for python323:40
clarkbexplicitly so, but on python2 it was magically so23:40
clarkbianw: I see logs for restoring selinux so I expect that code path is exercised23:41
clarkbya I think that idea is a bad one. This should be safely flushed23:41
ianwi think pabelanger was also seeing some weirdness, perhaps with suse? that we could never pin down23:42
corvusmnaser: re magnum: clicking "Show Certificate" in horizon gives me a file with the string "undefined" as the only contents.  however 'openstack coe cluster config ...' appears to work23:42
*** wolverineav has quit IRC23:42
ianwi actually took the .qcow2 dib built in one of these ci tests, moved it into my cloud and it booted just fine23:42
clarkbianw: rereading the logs the starting glean for ens3 happens after the log output of glean.sh23:43
clarkbianw: maybe the ordering isn't as strict as implied by the linear log file23:43
*** wolverineav has joined #openstack-infra23:44
ianwyeah, i could believe that23:45
ianwclarkb: back to the ipv6 issues, the file that was filling up with bad connections was mirror02.dfw.rax.openstack.org_error.log and it looks like it's stopped23:46
*** pbourke has joined #openstack-infra23:46
clarkbianw: thank you for checking on that. In that case I won't figure out workarounds right now23:46
clarkbianw: fwiw type oneshot units mean process must exit before follow on units are started. networkmanager.service is set up to happen after glean-nm so that should all work. I'm stumped23:47
ianwthe last ipv6 error was @ 18:19:47.705761 and it's now 23:47:16 UTC 201823:47
ianwclarkb: well, it's nice to not be alone in the stumped club :)23:48
clarkbianw: what if its the multiple before listings23:51
*** wolverineav has quit IRC23:51
clarkbianw: the docs say it should be comman separated. any chance it is overridding with the second value and not appending?23:51
clarkb*comma separated23:51
clarkboh sorry space separated23:52
ianwhrm, then you'd think someone would have noticed with https://git.launchpad.net/cloud-init/tree/systemd/cloud-init-local.service.tmpl ?23:53
clarkb"This option may be specified more than once, in which case ordering dependencies for all listed names are created."23:54
clarkbok probably not that23:54
*** slaweq has joined #openstack-infra23:54
clarkbsystemd-analyze dot may be useful here?23:56
clarkbianw: is that qcow2 available somewhere?23:57
ianwclarkb: the one i have is from when f29 wouldn't boot, but it's the same symptoms23:58
ianwthe problem is it *does* boot correctly in my cloud, but never did in the gate23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!