Wednesday, 2019-02-13

fungiyeah, with the ability to securely supply secrets directly in configuration, i don't suppose we need to bother with having sysadmins create them at this point00:01
fungiyay us!00:01
tonybNice work00:01
tonybautomating/documenting yourselves out ot (that) job :)00:01
*** wolverineav has joined #openstack-infra00:03
*** markvoelker has quit IRC00:06
*** rascasoft has joined #openstack-infra00:09
*** jamesmcarthur has joined #openstack-infra00:10
clarkbre zuul-preview, https://review.openstack.org/#/c/636238/ has plenty +2's I'll let you decide if/when the zuul-discuss discussion reaches a conclusion to approve?00:15
clarkbcorvus: er ^ was for you00:15
*** jamesmcarthur has quit IRC00:16
*** eernst has joined #openstack-infra00:16
corvusclarkb: ack thanks, will do00:17
*** david-lyle has joined #openstack-infra00:18
*** eernst_ has joined #openstack-infra00:18
*** manjeets has quit IRC00:18
*** manjeets has joined #openstack-infra00:19
clarkbas for restarting the scheduler I've apparently got to guide the kids through valentines cards as this is a required homework activity from school (who knew) so I'll probably have to do that tomorrow as I won't be bale to look at computer shortly00:19
*** tosky has quit IRC00:20
fungii still need to go obtain at least one obligatory valentines card. i suppose i'll find time to make that happen at some point tomorrow00:20
*** eernst has quit IRC00:21
*** dklyle has quit IRC00:21
fungiand pretend i don't know that i'm just propping up the greeting card industry and their money-making holiday invention schemes00:21
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: remove build and job_name filter from the buildset route  https://review.openstack.org/63650400:22
openstackgerritMerged openstack-infra/project-config master: Remove openstack/instack  https://review.openstack.org/63522100:24
openstackgerritMerged openstack-infra/project-config master: Move networking-ansible jobs to its project  https://review.openstack.org/63583600:25
*** sdake has quit IRC00:26
clarkbthe next puppet run (~20 minutes?) will apply the logging config change on zuul0100:27
*** rascasoft has quit IRC00:27
clarkbbut ya I need to go deal with cardstock00:27
fungiand then we want to perform a scheduler restart after that?00:27
clarkbfungi: yup00:27
fungijust the scheduler?00:27
clarkbthat should get us the improved logging from corvus' change as well as the logging config debug logging for github300:27
clarkbfungi: ya the scheduler is the only thing that talks to github I think00:28
clarkb(github talks to web, but that isn't where we changed logging)00:28
fungido zuul-web and/or zuul-fingergw also need restarting when the scheduler restarts?00:28
fungior are they tolerant of scheduler restarts these days?00:28
clarkbfungi: In the past zuul-web has needed it, unsure if that is still required. Pretty easy to restart it if so00:28
fungiso just do our pipeline dump, scheduler stop, scheduler start, pipeline reenqueue dance and also double-check the webui is still returning content?00:29
clarkbthat sounds right to me00:29
clarkbfungi: grepping for github_io in /etc/zuul/logging.conf should confirm it was updated as expected too00:31
fungithanks00:31
openstackgerritMerged openstack-infra/project-config master: Add new python 3 Neutron jobs to grafana dashboard  https://review.openstack.org/63635900:31
openstackgerritMerged openstack-infra/project-config master: Announce changes to governance-{sigs,website} on IRC  https://review.openstack.org/63562500:31
*** armax has joined #openstack-infra00:32
*** rascasoft has joined #openstack-infra00:41
*** eernst_ has quit IRC00:42
*** sdake has joined #openstack-infra00:46
*** openstackgerrit has quit IRC00:52
*** jamesmcarthur has joined #openstack-infra00:53
*** ekcs has joined #openstack-infra00:54
*** jamesmcarthur has quit IRC00:54
*** mriedem is now known as mriedem_away00:57
*** rascasoft has quit IRC00:57
*** mriedem_away has quit IRC01:00
*** markvoelker has joined #openstack-infra01:03
*** rascasoft has joined #openstack-infra01:03
*** jamesmcarthur has joined #openstack-infra01:04
*** gyee has quit IRC01:07
*** hwoarang has quit IRC01:09
*** gyee has joined #openstack-infra01:10
*** hwoarang has joined #openstack-infra01:13
*** sdake has quit IRC01:14
*** rascasoft has quit IRC01:16
*** sdake has joined #openstack-infra01:17
*** diablo_rojo has quit IRC01:17
*** rascasoft has joined #openstack-infra01:27
*** stakeda has joined #openstack-infra01:27
ianwwell that's service; acme.sh can now get certs via rax dns integration -> https://github.com/Neilpang/acme.sh/commit/d30b441ede3d2907c0645cf4dea78d740c2a6f0801:29
*** sdake has quit IRC01:29
*** jamesmcarthur has quit IRC01:30
*** krasmussen has quit IRC01:30
pabelangerthat is alot of sh01:32
*** sdake has joined #openstack-infra01:32
ianwpabelanger: i've seen a lot of sh in my day :)  they've made some good choices01:33
*** jamesmcarthur has joined #openstack-infra01:33
pabelanger:)01:34
ianw#status wrt per prior update, removed acme-opendev.org from openstackci user's domains in rax01:34
openstackstatusianw: unknown command01:34
fungiinfra-root: pbr freeze says we've installed corvus's logging improvements on zuul01 now, and a grep in the logging.conf indicates clarkb's github3 debug logging change is applied so i'll proceed with the pipeline dump and scheduler restart now unless there are objections01:34
ianw#status log  wrt per prior update, removed acme-opendev.org from openstackci user's domains in rax01:34
openstackstatusianw: finished logging01:35
*** rascasoft has quit IRC01:35
*** markvoelker has quit IRC01:35
ianwit does seem that it's a pretty common trope to use this CNAME thing where you point, say,  _acme-challenge.review.opendev.org -> acme-opendev.org and put the txt records in there01:38
ianwit seems like a good idea because you don't fiddle production dns, so any screwups will only affect cert renewals01:38
fungithat seems racy if you're setting more than one service at a time01:39
*** hamzy has joined #openstack-infra01:39
fungier, setting up01:39
*** sdake has quit IRC01:39
ianwfungi: AIUI, you can have multiple txt records ... it's what's done for wildcards01:40
fungithough something along those lines might make it easier to use dynamic dns updating without risking opening your primary domain up to it01:40
fungiianw: oh, you mean round-robin (not wildcards presumably)?01:41
fungiif acme supports finding at least one record with the expected challenge response then i guess that would work01:41
ianwfungi: no i mean for acme v2 wildcard support; you add two txt records01:43
fungioh, not dns wildcard records01:43
ianwno, sorry, wildcard certs01:43
fungimakes sense. they would want to verify you can create arbitrary dns names within the scope of the wildcard, yes01:44
ianwbut your point is taken .. you can't just assume put in txt record / clear txt record without taking some not of which one is yours01:44
ianws/not/note/01:44
*** rascasoft has joined #openstack-infra01:45
*** gyee has quit IRC01:47
*** armax has quit IRC01:51
*** ramishra has joined #openstack-infra01:52
*** jamesmcarthur has quit IRC01:53
*** jamesmcarthur has joined #openstack-infra01:54
ianwthe very nice thing about acme.sh is that it requires almost nothing (unlike a full virtualenv for certbot, etc).  so an ansible job on bridge could run on the host and get the token, then add it to bind (on the acme only domain, which isn't version controlled), then go back to the host to renew and there's your cert01:58
clarkboh thats an interesting point re acme dedicated zone01:59
clarkbwe could bypass code review there01:59
ianwyeah, all that would be touching it is this theoretical ansible job to add/remove txt records01:59
fungiyep, either serve it directly from the broker and delegate to it from the parent zone, or set it up as a ddns writeable sandbox zone02:00
ianwand the actual CNAME redirect on the "real" domain *is* still version controlled02:00
fungiokay, hearing no objections, i'll give the release channel a heads up and start in on the zuul scheduler restart02:01
clarkbfungi we've made boxes and are now coloring carss02:02
*** lathiat has joined #openstack-infra02:02
ianw*and* with acme.sh having rax dns support, i think we could have a pretty trivial cron job on bridge.o.o that just dumps cert files into secret storage, for distribution via normal channels02:02
fungihave fun!02:02
ianwfor existing hosts.  but nice to just have one tool02:02
*** jamesmcarthur has quit IRC02:05
ianwi was never really that happy with v1 of the spec.  i'm feeling a lot more confident about these ideas02:05
fungizuul looks like it's still checking gerrit repos, so giving it a minute02:05
fungibefore i reenqueue everything02:05
fungiand submitting cat jobs02:05
fungithe status page is still just saying "fetching info..." so presumably zuul-web will need a restart too02:06
fungilooks like the scheduler has reached a steady state, so reenqueuing check and gate now02:08
fungireenqueue is completed, status page is still contentless, so i'll restart zuul-web next02:11
fungithat seems to have solved it, after i deleted the stale pidfile which was preventing it from starting02:14
fungi#status log zuul scheduler restarted for debug logging enhancements02:14
openstackstatusfungi: finished logging02:15
*** jamesmcarthur has joined #openstack-infra02:16
*** wolverineav has quit IRC02:18
*** wolverineav has joined #openstack-infra02:19
*** hongbin has joined #openstack-infra02:21
*** rascasoft has quit IRC02:21
*** armax has joined #openstack-infra02:23
*** wolverineav has quit IRC02:24
*** rascasoft has joined #openstack-infra02:28
*** jamesmcarthur has quit IRC02:28
*** ekcs has quit IRC02:37
*** jamesmcarthur has joined #openstack-infra02:59
*** jamesmcarthur has quit IRC03:06
*** sdake has joined #openstack-infra03:06
*** rascasoft has quit IRC03:10
*** hwoarang has quit IRC03:19
*** hwoarang has joined #openstack-infra03:20
*** weshay has quit IRC03:21
*** rascasoft has joined #openstack-infra03:24
*** rlandy has quit IRC03:24
*** wolverineav has joined #openstack-infra03:25
*** jamesmcarthur has joined #openstack-infra03:26
*** jamesmcarthur has quit IRC03:30
*** rascasoft has quit IRC03:34
*** rascasoft has joined #openstack-infra03:39
*** eernst has joined #openstack-infra03:52
*** spsurya has joined #openstack-infra03:55
*** udesale has joined #openstack-infra03:55
*** hwoarang has quit IRC04:00
*** hwoarang has joined #openstack-infra04:03
*** ykarel|away has joined #openstack-infra04:04
*** eernst has quit IRC04:07
*** rascasoft has quit IRC04:07
*** ykarel|away is now known as ykarel04:08
*** rascasoft has joined #openstack-infra04:11
*** sdake has quit IRC04:15
*** rascasoft has quit IRC04:22
*** openstackgerrit has joined #openstack-infra04:24
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add buildsets page  https://review.openstack.org/63004104:24
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add /{tenant}/buildset/{uuid} route  https://review.openstack.org/63007804:24
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add buildset page  https://review.openstack.org/63007904:25
*** rascasoft has joined #openstack-infra04:32
*** janki has joined #openstack-infra04:32
*** rascasoft has quit IRC04:42
*** armax has quit IRC04:48
*** rascasoft has joined #openstack-infra04:49
*** hongbin has quit IRC04:55
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add /{tenant}/buildset/{uuid} route  https://review.openstack.org/63007805:08
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add buildset page  https://review.openstack.org/63007905:08
tonybI have created what I intend to be the service account for the sandbox 'bot'.  It's called openstack-bot-reviewer05:13
tonybJust incase I've done soemthing terrible I thought I'd let y'all know the name so if it shows up you know what it is and who to blame ;P05:14
tonybtomorrow I'll finish the implementation and work to getting it added to project-config05:15
*** zul has quit IRC05:26
*** rascasoft has quit IRC05:28
*** udesale has quit IRC05:36
*** rascasoft has joined #openstack-infra05:41
*** udesale has joined #openstack-infra05:42
*** udesale has quit IRC05:48
*** udesale has joined #openstack-infra05:48
*** psachin has joined #openstack-infra05:49
*** rascasoft has quit IRC05:49
*** rascasoft has joined #openstack-infra05:53
*** markvoelker has joined #openstack-infra06:00
*** markvoelker has quit IRC06:04
*** rascasoft has quit IRC06:06
openstackgerritOpenStack Proposal Bot proposed openstack-infra/project-config master: Normalize projects.yaml  https://review.openstack.org/63655106:08
*** sshnaidm is now known as sshnaidm|afk06:22
*** sdake has joined #openstack-infra06:28
*** jtomasek has joined #openstack-infra06:30
*** kjackal has joined #openstack-infra06:39
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: zuul-runner: add quick-start integration test  https://review.openstack.org/63570106:41
*** rascasoft has joined #openstack-infra06:41
*** yboaron_ has joined #openstack-infra06:42
*** wolverineav has quit IRC06:45
*** wolverineav has joined #openstack-infra06:46
*** quiquell|off is now known as quiquell|rover06:49
*** rascasoft has quit IRC06:50
*** diablo_rojo has joined #openstack-infra06:50
*** wolverineav has quit IRC06:51
*** rascasoft has joined #openstack-infra06:55
*** markvoelker has joined #openstack-infra07:00
*** apetrich has joined #openstack-infra07:06
*** sdake has quit IRC07:07
*** apetrich has quit IRC07:08
*** adriant has quit IRC07:11
*** adriant has joined #openstack-infra07:11
*** udesale has quit IRC07:12
*** kjackal has quit IRC07:18
*** wolverineav has joined #openstack-infra07:18
*** udesale has joined #openstack-infra07:19
*** wolverineav has quit IRC07:23
*** udesale has quit IRC07:24
*** udesale has joined #openstack-infra07:25
*** jamesmcarthur has joined #openstack-infra07:26
*** gfidente has joined #openstack-infra07:28
*** aojea has joined #openstack-infra07:29
*** jamesmcarthur has quit IRC07:31
*** markvoelker has quit IRC07:34
*** e0ne has joined #openstack-infra07:36
openstackgerritMerged openstack-infra/project-config master: Normalize projects.yaml  https://review.openstack.org/63655107:37
openstackgerritQuique Llorente proposed openstack-infra/zuul master: Mark as unsafe commit message at inventory  https://review.openstack.org/63393007:44
*** kopecmartin|off is now known as kopecmartin07:46
openstackgerritQuique Llorente proposed openstack-infra/zuul master: Mark as unsafe commit message at inventory  https://review.openstack.org/63393007:47
*** ccamacho has joined #openstack-infra07:48
*** slaweq has joined #openstack-infra07:49
*** kjackal has joined #openstack-infra07:51
*** rpittau has joined #openstack-infra07:57
openstackgerritIan Wienand proposed openstack-infra/infra-specs master: [wip] letsencrypt spec  https://review.openstack.org/58728308:06
*** diablo_rojo has quit IRC08:10
*** yboaron_ has quit IRC08:15
openstackgerritIan Wienand proposed openstack-infra/infra-specs master: [wip] letsencrypt spec  https://review.openstack.org/58728308:16
openstackgerritQuique Llorente proposed openstack-infra/zuul master: Mark as unsafe commit message at inventory  https://review.openstack.org/63393008:28
*** markvoelker has joined #openstack-infra08:31
*** wolverineav has joined #openstack-infra08:31
*** wolverineav has quit IRC08:35
*** ykarel is now known as ykarel|lunch08:36
*** tkajinam has quit IRC08:36
*** pgaxatte has joined #openstack-infra08:40
openstackgerritQuique Llorente proposed openstack-infra/zuul master: Mark as unsafe commit message at inventory  https://review.openstack.org/63393008:42
*** dmsimard has quit IRC08:44
*** dmsimard has joined #openstack-infra08:45
*** tosky has joined #openstack-infra08:53
*** xek has joined #openstack-infra08:54
*** jpena|off is now known as jpena08:54
*** jpich has joined #openstack-infra09:03
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Retrieve full list of jobs with details per tenant via API  https://review.openstack.org/63571409:03
*** markvoelker has quit IRC09:04
*** e0ne has quit IRC09:06
*** e0ne has joined #openstack-infra09:07
*** ociuhandu has quit IRC09:07
*** yboaron_ has joined #openstack-infra09:08
*** yamamoto has quit IRC09:10
*** yamamoto has joined #openstack-infra09:12
*** yboaron_ has quit IRC09:14
*** yboaron_ has joined #openstack-infra09:14
openstackgerritJiao Pengju proposed openstack-infra/project-config master: Update karbor to use storyboard  https://review.openstack.org/63657409:18
*** ociuhandu has joined #openstack-infra09:20
*** ociuhandu has quit IRC09:25
*** yboaron_ has quit IRC09:26
*** yboaron_ has joined #openstack-infra09:26
*** derekh has joined #openstack-infra09:29
openstackgerritNguyen Hai proposed openstack/gertty master: fix tox python3 overrides  https://review.openstack.org/57975709:32
*** luizbag has joined #openstack-infra09:33
*** ociuhandu has joined #openstack-infra09:34
*** e0ne has quit IRC09:34
*** baysao has joined #openstack-infra09:38
*** ociuhandu has quit IRC09:38
*** aojea has quit IRC09:40
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add buildsets page  https://review.openstack.org/63004109:42
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add /{tenant}/buildset/{uuid} route  https://review.openstack.org/63007809:42
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add buildset page  https://review.openstack.org/63007909:42
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Implement an OpenShift Pod provider  https://review.openstack.org/59033509:46
*** aojea has joined #openstack-infra09:47
*** ykarel|lunch is now known as ykarel09:49
*** sshnaidm|afk is now known as sshnaidm09:59
*** adrianreza has joined #openstack-infra09:59
*** markvoelker has joined #openstack-infra10:02
*** markmcd has joined #openstack-infra10:07
*** baysao has quit IRC10:11
*** ociuhandu has joined #openstack-infra10:12
*** wolverineav has joined #openstack-infra10:20
*** markmcd has left #openstack-infra10:22
*** yamamoto has quit IRC10:30
*** gfidente has quit IRC10:31
*** markvoelker has quit IRC10:34
strigaziHello infra-core, I can't unblock this https://review.openstack.org/#/c/561858/10:42
strigazioh, it just started the gate jobs10:43
*** e0ne has joined #openstack-infra10:46
*** e0ne_ has joined #openstack-infra10:50
*** gfidente has joined #openstack-infra10:51
*** e0ne has quit IRC10:52
*** wolverineav has quit IRC10:52
fricklerinfra-root: seems I cannot ssh into wiki.o.o, can someone check whether my account exists there? or is this host special somehow? someone reported login issues in #openstack and I wanted to check logs10:52
zbrfrickler: i was able to login there using ubuntu openid.10:55
jheskethfrickler: it doesn't appear that you have a user on that host10:56
jheskethfrickler: might be worth checking if bridge is managing it properly10:56
fricklerthere also seem to be no data for it on cacti, which may or may not be related10:58
*** rascasoft has quit IRC10:59
*** rascasoft has joined #openstack-infra11:01
*** ociuhandu has quit IRC11:02
*** ociuhandu has joined #openstack-infra11:03
*** yamamoto has joined #openstack-infra11:05
mordredfrickler: yeah - I concur with jhesketh - and wow, the users on that host are a real blast from the past11:07
fricklerlogging into wiki-dev01 works, so I'm assuming the wiki host is just too old11:07
cmurphyi think it's not really puppeted or we turned off puppet for it11:08
mordredI believe we have it in the disabled list because it was only ever halfway properly puppeted11:08
mordredyeah11:08
cmurphyjinx11:08
mordredmaybe we should at least run the base.yaml playbook on it11:08
mordredto keep up with root accounts11:08
cmurphywhile you're logging into things infra-root could i request this directory get cleaned out https://specs.openstack.org/openstack/keystone-specs/specs/keystone/backlog/ it has a lot of specs left over that we've since moved to other directories http://git.openstack.org/cgit/openstack/keystone-specs/tree/specs/keystone/backlog and it seems to show up in search engines and confuse our users11:11
fricklermordred: almost completely unrelated: do you plan to add the k8s nodes into cacti? might be useful to be able to watch the load on them. or would you rather do some kind of monitoring inside the pods?11:13
*** udesale has quit IRC11:13
fricklermordred: also did you make progress with the dns issues during k8s-master failure? or was the result that we just treat that as an acceptable risk?11:14
*** yamamoto has quit IRC11:14
fricklerinfra-root: (sorry for more spam) zuul01 is sending two mails per hour with errors like "ls: cannot access '/var/lib/zuul/backup/zuul.openstack.org-http_*': No such file or directory"11:16
mordredcmurphy: hrm. I can't ssh into specs.openstack.org11:20
mordredoh. yeah I can11:20
mordredI can't ssh in to it from wiki.openstack.org11:20
mordredcmurphy: the whole directory?11:21
mordredfrickler: it's a good (and hard) question re: cacti. I think it would be a good idea to - however, the way the ansible from upstream works, the firewall stuff is all managed with openstack security groups - which means our normal ansible setup for opening the correct firewall ports for the snmp doesn't apply11:23
mordredfrickler: I haven't come up with a "good" solution yet11:24
mordredfrickler: for dns failures during k8s-master failure - I think it's "acceptable risk" for now. the answer will be getting the k8s master set up properly HA, which is going to take a little more work11:24
cmurphymordred: no just the files that aren't in git11:25
mordredfrickler: as long as the k8s master doesn't STAY down things should continue working11:25
mordredcmurphy: ok. so delete the files that are not also in that git dir11:27
cmurphymordred: yes please11:27
mordredkk.11:27
fricklermordred: it looked to me like it was a basic design decision of infraly to run single master, so would you consider forking it?11:27
*** yamamoto has joined #openstack-infra11:28
mordredcmurphy: mordred@static:/srv/static/specs/keystone-specs/specs/keystone/backlog$ rm application-credentials.html json-web-token.html11:28
mordredfrickler: yeah - if they're not interested in accepting support for ha master11:29
mordredfrickler: I filed https://github.com/infraly/k8s-on-openstack/issues/47 - but he hasn't responded yet11:29
*** markvoelker has joined #openstack-infra11:30
fricklermordred: ah, I didn't see that, will add a watch ;)11:30
cmurphymordred: also centralized-policies-delivering-mechanism.html centralized-policies-fetch-cache.html drop-driver-version.html fernet-key-store.html microversions.html online-schema-migration.html policy-default.html project-tags.html unified-delegation.html11:38
mordredcmurphy: hrm. I may be looking in th wrong place11:38
mordredcmurphy: cause I don't see those files11:39
*** ccamacho has quit IRC11:39
* cmurphy tries force refresh11:39
cmurphyi see them in https://specs.openstack.org/openstack/keystone-specs/specs/keystone/backlog/11:40
*** janki has quit IRC11:40
*** janki has joined #openstack-infra11:40
mordredoh! hang on11:41
mordredcmurphy: /src/static/specs/openstack/keystone-specs - not /src/static/specs/keystone-specs11:41
mordredcmurphy: your list makes much more sense to me now11:41
cmurphyyay11:42
mordredcmurphy: check now - better?11:43
cmurphymordred: hmm not really11:45
AJaegercmurphy, mordred : Everything 2017 you should be able to delete...11:45
AJaegermordred: delete everything that has no 2019 timestamp in that directory11:45
AJaegeror delete everything and ask cmurphy to publish again ;)11:46
cmurphyheh11:46
AJaegercmurphy: just push a dummy commit and self-merge - and blame me ;)11:46
mordredk. I think I finally found the right dir11:47
mordredit was /srv/static/specs/openstack/keystone-specs/specs/keystone/backlog not /srv/static/specs/openstack/keystone-specs/specs/backlog11:47
cmurphymordred: yes! except also still need application-credentials.html and json-web-tokens.html rm'd11:48
mordreddone11:48
cmurphyyay tyty11:49
AJaegermordred: your first good deed for the day is done ;)11:49
*** wolverineav has joined #openstack-infra11:49
mordred\o/11:50
*** rpittau has quit IRC11:52
*** roman_g has joined #openstack-infra11:53
*** e0ne has joined #openstack-infra11:56
*** e0ne has quit IRC11:57
*** e0ne_ has quit IRC11:57
*** hamzy has quit IRC11:59
*** panda is now known as panda|lunch12:00
*** sdake has joined #openstack-infra12:03
*** markvoelker has quit IRC12:04
*** ginopc has joined #openstack-infra12:04
*** gfidente has quit IRC12:06
*** e0ne has joined #openstack-infra12:08
*** ccamacho has joined #openstack-infra12:09
fungifrickler: jhesketh: correct, wiki.openstack.org is a cname to wiki-upgrade-test.openstack.org and has puppet disabled because we still never found time to completely manage mediawiki and all the plugins and configuration from puppet. wiki-dev01.openstack.org _is_ puppeted, as you observed, but there are still some kinks which need to be worked out with it before we could consider using a puppeted12:12
fungideployment to replace the current production wiki12:12
*** e0ne has quit IRC12:12
*** hamzy has joined #openstack-infra12:13
*** sdake has quit IRC12:16
mordredyay fungi is up with knowledge12:18
openstackgerritHelen Walsh proposed openstack-infra/project-config master: PowerMax/ VMAX - add create permission to core group  https://review.openstack.org/63660812:19
fungiit was "puppeted" in a sense long ago, because the only manifest applied to it was our server manifest to create accounts and configure exim. i guess running our base playbook against it could accomplish something similar12:21
*** e0ne has joined #openstack-infra12:22
*** wolverineav has quit IRC12:23
*** yamamoto has quit IRC12:28
*** rpittau has joined #openstack-infra12:29
*** jpena is now known as jpena|lunch12:34
*** yamamoto has joined #openstack-infra12:36
*** udesale has joined #openstack-infra12:50
*** rlandy has joined #openstack-infra12:55
*** gfidente has joined #openstack-infra12:57
*** janki has quit IRC13:00
*** markvoelker has joined #openstack-infra13:01
*** trown|outtypewww is now known as trown13:06
*** rh-jelabarre has joined #openstack-infra13:06
quiquell|roverfungi, mordred: Is this ok for merge ? https://review.openstack.org/#/c/633930/13:06
quiquell|roverAJaeger: ^13:06
*** mriedem has joined #openstack-infra13:08
*** kjackal has quit IRC13:08
*** kjackal has joined #openstack-infra13:10
*** e0ne has quit IRC13:11
*** panda|lunch is now known as panda13:12
*** jamesmcarthur has joined #openstack-infra13:14
*** e0ne has joined #openstack-infra13:17
*** gcutrini has joined #openstack-infra13:19
*** e0ne_ has joined #openstack-infra13:20
*** wolverineav has joined #openstack-infra13:20
*** e0ne has quit IRC13:23
*** ykarel is now known as ykarel|afk13:23
*** janki has joined #openstack-infra13:28
quiquell|roverjoin #openstack-telemetry13:28
quiquell|roverdamn13:28
*** jamesmcarthur has quit IRC13:29
*** weshay has joined #openstack-infra13:31
*** gcutrini has quit IRC13:32
*** markvoelker has quit IRC13:34
*** weshay is now known as weshay|ruck13:35
*** jpena|lunch is now known as jpena13:37
*** eharney has quit IRC13:37
*** luizbag has quit IRC13:39
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Implement an OpenShift Pod provider  https://review.openstack.org/59033513:39
*** e0ne_ has quit IRC13:40
*** e0ne has joined #openstack-infra13:45
*** gcutrini has joined #openstack-infra13:50
*** jamesmcarthur has joined #openstack-infra13:50
*** e0ne_ has joined #openstack-infra13:50
*** e0ne has quit IRC13:51
*** wolverineav has quit IRC13:53
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: executor: add log_stream_port and log_stream_file settings  https://review.openstack.org/53553813:55
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: executor: add log_stream_port and log_stream_file settings  https://review.openstack.org/53553813:55
*** e0ne_ has quit IRC14:04
*** sdake has joined #openstack-infra14:07
*** sdake has quit IRC14:09
*** ykarel|afk is now known as ykarel14:11
*** sdake has joined #openstack-infra14:11
*** sdake has quit IRC14:13
*** sdake has joined #openstack-infra14:14
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Implement a Runc driver  https://review.openstack.org/53555614:15
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Implement an OpenShift Pod provider  https://review.openstack.org/59033514:17
*** rfolco has quit IRC14:18
*** eharney has joined #openstack-infra14:22
*** sdake has quit IRC14:23
*** dave-mccowan has joined #openstack-infra14:25
*** jamesmcarthur has quit IRC14:26
*** rlandy is now known as rlandy|afk14:26
*** e0ne has joined #openstack-infra14:29
*** dave-mccowan has quit IRC14:30
*** markvoelker has joined #openstack-infra14:31
*** eernst has joined #openstack-infra14:32
*** e0ne_ has joined #openstack-infra14:35
*** e0ne has quit IRC14:35
*** eernst has quit IRC14:36
*** rfolco has joined #openstack-infra14:37
*** lpetrut has joined #openstack-infra14:38
*** gcutrini has quit IRC14:40
*** e0ne_ has quit IRC14:41
*** zul has joined #openstack-infra14:43
*** yamamoto has quit IRC14:44
*** sthussey has joined #openstack-infra14:47
*** ekultails has joined #openstack-infra14:49
*** yamamoto has joined #openstack-infra14:49
*** yamamoto has quit IRC14:49
*** yamamoto has joined #openstack-infra14:50
*** yamamoto has quit IRC14:50
*** wolverineav has joined #openstack-infra14:50
*** e0ne has joined #openstack-infra14:50
*** e0ne_ has joined #openstack-infra14:55
*** jamesmcarthur has joined #openstack-infra14:55
*** e0ne has quit IRC14:55
*** gcutrini has joined #openstack-infra14:57
*** yamamoto has joined #openstack-infra15:00
*** yamamoto has quit IRC15:00
*** verdurin has quit IRC15:02
*** markvoelker has quit IRC15:04
*** verdurin has joined #openstack-infra15:05
*** gcutrini has quit IRC15:15
*** yboaron_ has quit IRC15:19
*** gcutrini has joined #openstack-infra15:19
*** gcutrini has quit IRC15:20
*** janki has quit IRC15:21
*** wolverineav has quit IRC15:23
*** smarcet has joined #openstack-infra15:25
openstackgerritJakub Libosvar proposed openstack-infra/project-config master: Remove rtd_web_hook from networking-ansible  https://review.openstack.org/63665115:26
*** rossella_s has quit IRC15:26
*** dayou has quit IRC15:29
*** luizbag has joined #openstack-infra15:32
*** armax has joined #openstack-infra15:35
*** rkukura has joined #openstack-infra15:37
openstackgerritsebastian marcet proposed openstack-infra/openstackid-resources master: Update API code to work with Presentation Moderators collection (+N)  https://review.openstack.org/63619015:45
*** ekultails has quit IRC15:46
*** ekultails has joined #openstack-infra15:47
*** quiquell|rover is now known as quiquell|off15:48
*** Adri2000 has quit IRC15:48
*** ekultails has quit IRC15:48
*** ekultails has joined #openstack-infra15:48
*** Adri2000 has joined #openstack-infra15:51
*** dayou has joined #openstack-infra15:52
*** gcutrini has joined #openstack-infra15:53
*** ociuhandu has quit IRC15:55
*** ociuhandu has joined #openstack-infra15:55
*** ykarel is now known as ykarel|away15:58
*** lpetrut has quit IRC16:00
*** markvoelker has joined #openstack-infra16:01
*** sdake has joined #openstack-infra16:05
*** ianychoi has quit IRC16:08
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: CLI: fail if trying to enqueue/dequeue a change for the wrong project  https://review.openstack.org/63666216:11
*** walshh__ has joined #openstack-infra16:14
walshh__Hi, to the to the infra-root sysadmins.  Could I be added to the new devstack-plugin-vmax-release.  Details in https://review.openstack.org/#/c/635890/16:16
walshh__Thank you in advance16:16
*** lewo has quit IRC16:16
*** lewo has joined #openstack-infra16:17
clarkbwalshh__: done16:17
clarkbyou may need to hard refresh the browser window with branches if you are wanting to create a branch there16:18
*** walshh__ has quit IRC16:20
*** wolverineav has joined #openstack-infra16:20
*** walshh__ has joined #openstack-infra16:23
*** gfidente has quit IRC16:26
*** ramishra has quit IRC16:29
*** yamamoto has joined #openstack-infra16:30
*** markvoelker has quit IRC16:34
*** diablo_rojo has joined #openstack-infra16:37
*** yamamoto has quit IRC16:38
*** smarcet has quit IRC16:42
*** sdake has quit IRC16:46
*** sdake has joined #openstack-infra16:47
*** e0ne has joined #openstack-infra16:47
*** e0ne_ has quit IRC16:48
*** jamesmcarthur has quit IRC16:51
*** wolverineav has quit IRC16:53
clarkbpabelanger: corvus: now that I've sorted out voip.ms account stuff the next item on my pbx list is to upgrade it to xenial. Do I need to prevent the new server from trying to connect to the voip.ms sip server or can they both connect for a short period of time?16:53
*** gyee has joined #openstack-infra16:55
*** gcutrini has left #openstack-infra16:56
*** gfidente has joined #openstack-infra16:56
*** ykarel|away has quit IRC16:58
*** sdake has quit IRC16:58
*** pgaxatte has quit IRC16:59
*** eernst has joined #openstack-infra17:00
*** jamesmcarthur has joined #openstack-infra17:00
*** rlandy|afk is now known as rlandy17:00
*** wolverineav has joined #openstack-infra17:01
*** eernst has quit IRC17:03
*** smarcet has joined #openstack-infra17:03
*** ekcs has joined #openstack-infra17:04
corvusclarkb: they will probably fight over the registration, and therefore it will be unpredictable which receives calls17:04
clarkbok I can give the new server bad credentials then via hiera I think17:05
openstackgerritClark Boylan proposed openstack-infra/system-config master: Prep for pbx upgrade to xenial  https://review.openstack.org/63668117:07
clarkbinfra-root ^ is next step in the pbx upgrade if you have a moment for a quick review17:07
*** ykarel|away has joined #openstack-infra17:09
*** ociuhandu_ has joined #openstack-infra17:11
*** eumel8 has joined #openstack-infra17:13
*** luizbag_ has joined #openstack-infra17:15
*** luizbag has quit IRC17:17
*** gfidente is now known as gfidente|afk17:18
*** psachin has quit IRC17:18
*** ekcs has quit IRC17:19
*** wolverineav has quit IRC17:20
*** jamesmcarthur has quit IRC17:22
*** udesale has quit IRC17:23
*** rpittau has quit IRC17:24
*** e0ne has quit IRC17:25
*** kopecmartin is now known as kopecmartin|off17:26
*** ykarel|away has quit IRC17:31
pabelangerclarkb: I agree with corvus17:31
*** markvoelker has joined #openstack-infra17:32
clarkbpabelanger: thanks. I'll just give it dummy credentials when I boot it then switch when everything is ready. That should avoid any problems17:32
*** jamesmcarthur has joined #openstack-infra17:34
*** geguileo has joined #openstack-infra17:34
*** dtantsur is now known as dtantsur|afk17:37
*** ociuhand_ has joined #openstack-infra17:39
openstackgerritMerged openstack-infra/zuul-jobs master: Rework upload-forge role to use module  https://review.openstack.org/63594117:39
*** smarcet has quit IRC17:42
*** ociuhandu has quit IRC17:42
openstackgerritClark Boylan proposed openstack-infra/system-config master: Prep for pbx upgrade to xenial  https://review.openstack.org/63668117:44
*** smarcet has joined #openstack-infra17:44
*** michaelxin has quit IRC17:45
*** ociuhand_ has quit IRC17:48
*** gfidente|afk has quit IRC17:51
*** jpich has quit IRC17:52
clarkbanother question I'm pretty sure I kno the answer to is I can create it as pbx01.opendev.org cname pbx.openstack.org to it and SIP shouldn't care right? it doesn't do vhosting or certs which would get mad about that17:54
openstackgerritMerged openstack-infra/project-config master: Rework to use new upload-forge module  https://review.openstack.org/63596517:54
*** derekh has quit IRC17:55
pabelangerclarkb: should be fine, there is a setting in sip.conf where you can actually setup external DNS if needed, but in our case, i don't think we care much17:57
pabelangerwe are only accepting incoming calls17:58
*** markvoelker has quit IRC18:04
*** bhavikdbavishi has joined #openstack-infra18:07
*** agopi has quit IRC18:09
*** jpena is now known as jpena|off18:13
openstackgerritJan Kundrát proposed openstack-infra/nodepool master: runc: Use correct interpreter for Ansible  https://review.openstack.org/63670218:16
openstackgerritJan Kundrát proposed openstack-infra/nodepool master: runc: Support IPv6  https://review.openstack.org/63670318:16
openstackgerritJan Kundrát proposed openstack-infra/nodepool master: runc: Use the hypervisor's zuul-console location  https://review.openstack.org/63670418:16
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Re-use the github PR object when fetching reviews  https://review.openstack.org/63670518:16
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Add comment about extra issues request  https://review.openstack.org/63670618:17
*** sdake has joined #openstack-infra18:19
*** e0ne has joined #openstack-infra18:22
*** ijw has joined #openstack-infra18:23
*** wolverineav has joined #openstack-infra18:23
*** betherly has joined #openstack-infra18:25
*** smarcet has quit IRC18:25
*** smarcet has joined #openstack-infra18:26
*** wolverineav has quit IRC18:27
*** quiquell|off is now known as quiquell|rover18:28
*** ociuhandu has joined #openstack-infra18:29
*** betherly has quit IRC18:29
*** wolverineav has joined #openstack-infra18:29
*** yamamoto has joined #openstack-infra18:31
*** verdurin has quit IRC18:31
*** ociuhandu has quit IRC18:33
*** trown is now known as trown|lunch18:34
*** kjackal has quit IRC18:34
*** kjackal has joined #openstack-infra18:34
*** aojea has quit IRC18:35
openstackgerritMerged openstack-infra/zone-opendev.org master: Add kubernetes nodes to DNS  https://review.openstack.org/63548518:36
*** sdake has quit IRC18:37
*** verdurin has joined #openstack-infra18:39
openstackgerritJames E. Blair proposed openstack-infra/system-config master: Correct paths in rook playbook  https://review.openstack.org/63671318:40
corvusclarkb, fungi: ^18:40
*** bhavikdbavishi has quit IRC18:42
clarkbcorvus: does the local connection preserve PWD?18:42
clarkbcorvus: wondering if we should make that a fully rooted path18:42
corvusi'll check18:42
corvusoh, it's the playbook directory, so that's wrong18:43
openstackgerritJames E. Blair proposed openstack-infra/system-config master: Correct paths in rook playbook  https://review.openstack.org/63671318:44
corvusthe only issue was they aren't called "rook-"18:44
corvusi missed that in my initial analysis18:44
clarkbya those paths look good now relative to the playbook that is running. Just not sure if playbook preservers that path on a local instantiation18:45
* clarkb assumes it will work and approves18:46
*** ijw has quit IRC18:46
*** betherly has joined #openstack-infra18:47
*** betherly has quit IRC18:47
*** agopi has joined #openstack-infra18:50
*** mriedem is now known as mriedem_away18:52
*** kjackal has quit IRC18:52
*** kjackal_v2 has joined #openstack-infra18:52
corvusclarkb: yes, i tested that18:54
clarkbhttps://review.openstack.org/#/c/636681/ passes tests now for the pbx updates if anyone has time for a quick review18:56
*** markvoelker has joined #openstack-infra19:01
*** quiquell|rover is now known as quiquell|off19:02
*** wolverineav has quit IRC19:04
*** wolverineav has joined #openstack-infra19:08
*** luizbag_ has quit IRC19:14
*** ociuhandu has joined #openstack-infra19:16
openstackgerritClark Boylan proposed openstack-infra/zuul master: Don't request PR issue data  https://review.openstack.org/63672819:18
*** ijw has joined #openstack-infra19:26
*** eernst has joined #openstack-infra19:27
*** eernst has quit IRC19:28
*** ijw has quit IRC19:28
*** ociuhandu has quit IRC19:28
*** eharney has quit IRC19:31
openstackgerritMerged openstack-infra/system-config master: Correct paths in rook playbook  https://review.openstack.org/63671319:32
openstackgerritClark Boylan proposed openstack-infra/system-config master: Disable github rate limit logging  https://review.openstack.org/63673419:33
*** markvoelker has quit IRC19:34
*** eernst has joined #openstack-infra19:42
*** eernst has quit IRC19:42
*** eernst has joined #openstack-infra19:42
*** irclogbot_1 has quit IRC19:47
*** e0ne has quit IRC19:47
*** trown|lunch is now known as trown19:52
openstackgerritClark Boylan proposed openstack-infra/zuul master: Don't request PR issue data  https://review.openstack.org/63672819:53
*** jamesmcarthur has quit IRC19:55
*** ijw has joined #openstack-infra19:57
*** irclogbot_1 has joined #openstack-infra20:00
*** ijw has quit IRC20:01
*** smarcet has joined #openstack-infra20:02
*** wolverineav has quit IRC20:03
*** panda is now known as panda|off20:04
fungicorvus: oh, spotted another domain with dkim signatures invalidated by openstack-discuss: ovh.com is also setting c=simple/simple and mailman's header reindenting runs afoul of that (same as for dell.com)20:04
openstackgerritMerged openstack-infra/project-config master: Add zuul-preview project  https://review.openstack.org/63623820:06
*** jamesmcarthur has joined #openstack-infra20:07
corvusfungi: ack.  we should probably figure out a resolution to that soon.  i think we probably have enough data now.  but i can't do so atm.20:08
openstackgerritJames E. Blair proposed openstack-infra/project-config master: Add a job to use the intermediate registry  https://review.openstack.org/63434720:09
clarkbovh seems to host their own email, maybe they are willing to divulge info on what setup they are using that causes the whitespace oddness20:10
corvusunfortunately, they are unaware that there is a problem right now, since we're accepting their messages20:11
*** jamesmcarthur has quit IRC20:12
*** zaro has joined #openstack-infra20:12
fungiclarkb: the simpler solution is to probably ask the likes of ovh and dell to consider setting c=relaxed/relaxed in their dkim-signature headers so that whitespace adjustments in transit don't invalidate their signatures20:14
clarkbfungi: ya was mostly thinking if it is an issue in $smtp service then maybe we can fix it there and everyone gets the update20:15
fungipnnl's issue is likely a bigger challenge to solve, as they seem to mangle their references header in non-rfc-compliant ways, so when mailman normalizes that it renders the signature invalid20:15
clarkbbut that is definitely a straightforward easy fix20:15
*** jamesmcarthur has joined #openstack-infra20:16
*** smarcet has quit IRC20:24
*** eharney has joined #openstack-infra20:25
*** ociuhandu has joined #openstack-infra20:31
*** markvoelker has joined #openstack-infra20:31
*** wolverineav has joined #openstack-infra20:33
*** jamesmcarthur has quit IRC20:35
*** eernst has quit IRC20:35
*** wolverineav has quit IRC20:38
*** eernst has joined #openstack-infra20:41
openstackgerritClark Boylan proposed openstack-infra/zuul master: First draft PR caching by commit sha  https://review.openstack.org/63675120:50
*** rosmaita has joined #openstack-infra20:51
*** roman_g has quit IRC20:51
*** jtomasek has quit IRC21:02
*** ociuhandu has quit IRC21:04
*** mriedem_away is now known as mriedem21:04
*** wolverineav has joined #openstack-infra21:04
*** markvoelker has quit IRC21:05
*** xek has quit IRC21:07
openstackgerritIan Wienand proposed openstack-infra/system-config master: [dnm] testing...  https://review.openstack.org/63675921:11
corvusclarkb, fungi: https://review.openstack.org/634347 is ready, and should let me start testing the docker registry stuff21:12
openstackgerritClark Boylan proposed openstack-infra/zuul master: First draft PR caching by commit sha  https://review.openstack.org/63675121:12
clarkbcorvus: cool I'll take a look after lunch21:12
fungisimilarly after i get these okonomiyaki turned out21:13
openstackgerritIan Wienand proposed openstack-infra/system-config master: [dnm] testing...  https://review.openstack.org/63675921:13
openstackgerritIan Wienand proposed openstack-infra/system-config master: [dnm] testing...  https://review.openstack.org/63675921:23
*** jamesmcarthur has joined #openstack-infra21:25
*** jamesmcarthur has quit IRC21:30
*** ijw has joined #openstack-infra21:30
*** whoami-rajat has quit IRC21:32
*** memoussati has joined #openstack-infra21:36
*** wolverineav has quit IRC21:37
openstackgerritMerged openstack-infra/system-config master: Update to gitea v1.6.3  https://review.openstack.org/62994221:39
memoussatiGood evening to you all, I'm new around here and if possible have a question.21:43
ianwmemoussati: always feel free to ask away, if anyone knows the answer we'll respond :)21:45
fungimemoussati: i find it entirely possible that you have a question. it's also possible (perhaps even probable, though don't count on it) that we have an answer. best to just ask and we'll let you know21:45
openstackgerritJames E. Blair proposed openstack-infra/zuul master: WIP: alternative github sha cache  https://review.openstack.org/63676421:47
memoussatiI encountered a parsing bug in puppet-neutron when using multiple host_routes in one subnet. It was however essential that we use multiple host_routes and documentation would assume that it is possible. We wrote a fix and I was planning on making a PR. Can I assume that if I can't find a story on storyboard regarding this issue that it's not a known bug?21:48
memoussatiThanks for the kind words, ianw and fungi :)21:48
memoussatiVersion we use is stable/ocata but there were no changes to the parse function of host_routes in master (yet).21:50
*** ijw has quit IRC21:51
memoussatiAnd if you need more context, I hoped I explained the issue with the parsing correctly here: https://github.com/hostnet/puppet-neutron/pull/1 .21:51
fungimemoussati: this sounds like something you want to bring up with the maintainers of the puppet openstack project. you can find them in #puppet-openstack21:55
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Re-use the github PR object when fetching reviews  https://review.openstack.org/63670521:56
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Add comment about extra issues request  https://review.openstack.org/63670621:56
memoussatiAh thank you, fungi! I followed the Contributor Guide and it brought me here! I will ask around there!21:58
fungiyou're welcome. openstack is made up of lots (70+ at last count) of separate projects each managed by their own teams21:59
rosmaitafungi: do you know how often the jobs that publish to docs.o.o run? are they periodic or publish-on-change?22:02
*** markvoelker has joined #openstack-infra22:02
*** wolverineav has joined #openstack-infra22:03
*** trown is now known as trown|outtypewww22:06
*** wolverineav has quit IRC22:08
fungirosmaita: at least for most projects, when a change merges a docs build is enqueued into the (high priority) post pipeline which should publish within minutes thereafter22:09
fungirosmaita: you should be able to find them in the builds tab at https://zuul.openstack.org/22:10
fungiif your docs aren't updating, odds are docs builds have started failing for you22:12
rosmaitafungi: is this the right job: https://zuul.openstack.org/builds?job_name=publish-openstack-sphinx-docs22:13
rosmaitalooks like it hasn't run for cinder in a while22:14
rosmaitahttps://zuul.openstack.org/builds?job_name=publish-openstack-sphinx-docs&project=openstack%2Fcinder22:14
*** ijw has joined #openstack-infra22:16
corvusfungi, clarkb: had tasty food?  want to wash it down with https://review.openstack.org/634347 ?22:21
clarkbyup already reviewing it22:22
*** openstackgerrit has quit IRC22:22
clarkbtrying to convince myself that the order of operations between pre and post playbooks is right22:23
clarkbfor some reason my gut is telling me they are backwards, but now double checkign roles22:23
corvusclarkb: pretty sure they're right, so let me know if you need convincing :)22:23
clarkbno theyr are right22:24
clarkbwe pull in pre to grab prebuilt images from other jobs22:24
corvusexactly22:24
clarkbthen push at the end of our job to expose our image to other jobs22:24
clarkband the specifics are zuul return artifacts set by the image builds22:24
clarkbis blocking for an earlier change's images to build something still to be implemented?22:25
smcginnisrosmaita: Looks like those runs were only on stable too.22:25
corvusclarkb: nope, that's in place  (provides/requires)22:25
clarkb(we are just within a buildset for now right?)22:25
corvuswe can cross buildsets because of provides/requires22:26
clarkbah22:26
corvusit's a brave new world22:26
clarkbrosmaita: might be easier to go in the other direction. Find a change that should've updated docs and we can see what jobs ran for it22:26
smcginnisrosmaita: Ah - https://review.openstack.org/#/c/613131/22:26
smcginnisOh, didn't see what repo that was. Nevermind.22:27
rosmaitaclarkb: https://review.openstack.org/#/c/624424/22:27
clarkbcorvus: last question, for the secret https://review.openstack.org/#/c/634347/5/zuul.d/secrets.yaml say we have to move the job like I did with base-jobs where would one find the data to put into that secret? is it part of the registry config on the server?22:27
rosmaitasmcginnis: i wonder if we did something bad to .zuul.yaml in master recently22:27
rosmaitai will check history22:27
corvusclarkb: it's in ansible hostvars on bridge22:27
clarkbcorvus: thanks22:28
*** kjackal_v2 has quit IRC22:29
rosmaitasmcginnis: i don't see anything in cinder/.zuul.yaml22:30
rosmaitaalso, i think our docs venv in tox.ini isn't actually used by the gate docs tests22:31
clarkbrosmaita: that ran openstack-tox-docs which is part of the publish-openstack-docs-pti template22:31
clarkbso it ran at least half of the expected jobs22:31
clarkbthe next question is if maybe that got caught in the zuul restart that fungi did yesterday22:31
rosmaitathat could be22:31
fungialso possible, though i think i recall post being empty at the time22:32
rosmaitathe patch merged like 23 hours ago22:32
clarkbit may have change merged at 3:08pm PST and fungi restarted things around 5:30pm iirc22:32
clarkbso if it ended up queued for a bit it is possible22:32
fungipost is high priority now i thought?22:32
fungishould have completed almost instantly after merge22:32
clarkbfungi: ya and we do supercedent so queues are shorter so likely not that22:33
fungi2.5 hours seems an awfully long time given (unless we changed it again) post is at the same priority as gate22:33
*** eandersson has quit IRC22:33
fungiand the jobs in it usually run way, waaaaaay faster too22:33
rosmaitafungi: clarkb: what do you think of what smcginnis noticed on https://zuul.openstack.org/builds?job_name=publish-openstack-sphinx-docs&project=openstack%2Fcinder22:34
fungii lean toward we've somehow configured that job not to run for changes to master22:34
rosmaitadoesn't seem to be running for master22:34
rosmaitawhat fungi said22:34
rosmaitais that something we could have done by mistake on our end?22:34
clarkbpublish-openstack-tox-docs is the job22:34
*** markvoelker has quit IRC22:34
clarkbfwiw22:34
rosmaitaok, i am looking at wrong job22:35
clarkbhttp://zuul.openstack.org/builds?project=openstack%2Fcinder&pipeline=post&branch=master&job_name=publish-openstack-tox-docs and it last ran January 2322:35
*** agopi_ has joined #openstack-infra22:35
*** gouthamr has quit IRC22:35
*** gouthamr has joined #openstack-infra22:36
*** cburgess has quit IRC22:36
clarkbother projects have run that job today22:36
clarkbso it isn't globally broken22:36
fungicorvus: yes on tasty food. this time i was tasked with making vegetarian okonomiyaki so had to step up my game with more flavorful liquids in the batter22:36
*** ijw has quit IRC22:37
corvusfungi: that sounds like mostlynomiyaki.22:37
*** agopi has quit IRC22:37
*** ijw has joined #openstack-infra22:38
smcginnisNothing has run in the cinder post pipeline since January 23. Does that seem right?22:38
smcginnishttp://zuul.openstack.org/builds?project=openstack%2Fcinder&branch=master&pipeline=post22:38
*** cburgess has joined #openstack-infra22:38
fungicorvus: too true, too true22:38
*** eernst has quit IRC22:39
fungismcginnis: unless all of cinder's core reviewers went on vacation at the same time, no that sounds fairly unright22:39
clarkbsmcginnis: considering cinder has merged code since then: no22:39
*** agopi__ has joined #openstack-infra22:40
rosmaitaclarkb: here is another doc change: https://review.openstack.org/#/c/635009/22:40
rosmaita8 days ago22:41
*** ijw has quit IRC22:42
*** agopi__ is now known as agopi22:42
*** agopi_ has quit IRC22:42
*** jamesmcarthur has joined #openstack-infra22:43
fungiso what is the name of the job we think these should be triggering? i think we can find the nak for them in the scheduler debug logs, right?22:43
smcginnisOnly thing to touch zuul.yaml in the cinder repo even close to then was renaming integrated-gate-py35 to integrated-gate-py322:44
*** eernst has joined #openstack-infra22:44
rosmaitafungi: clarkb said publish-openstack-tox-docs22:44
*** memoussati has quit IRC22:44
corvus[ping me if you need me to jump in]22:44
*** openstackgerrit has joined #openstack-infra22:44
openstackgerritMerged openstack-infra/project-config master: Add a job to use the intermediate registry  https://review.openstack.org/63434722:44
clarkbya publish-openstack-docs-pti has publish-openstack-tox-docs in its post pipeline22:45
clarkband nova et al have run that job in the last day22:45
clarkbso pretty sure it is that job not running for some reason22:45
fungicorvus: unless you just happen to know the answer, no, please keep working on what you're already working on while we dig ;)22:45
openstackgerritKendall Nelson proposed openstack-infra/storyboard master: Add documentation for private stories  https://review.openstack.org/63623522:45
corvusnope.  just didn't want to barge in, but didn't want to ignore :)22:46
clarkbrequirements limits this job to running against the master branch22:46
fungithanks!22:46
clarkbbut I can't find any other limitations of the job (granted code search only looks at master)22:46
*** eernst has quit IRC22:47
*** jamesmcarthur has quit IRC22:48
*** smarcet has joined #openstack-infra22:48
fungiit's running quite regularly for openstack/python-brick-cinderclient-ext too22:50
clarkbfungi: when not debugging ^ can you review https://review.openstack.org/#/c/636681/ so I can replace pbx server in the near future?22:50
fungiyup22:50
*** jamesmcarthur has joined #openstack-infra22:51
fungithat's the only project with "cinder" in its name which has triggered the job today though22:51
smcginnisos-brick ran on the 8th. That seems normal with the amount of activity there.22:53
smcginnispython-cinderclient ran at 01:06 today.22:53
openstackgerritJames E. Blair proposed openstack-infra/system-config master: Reduce timeouts in run_all.sh  https://review.openstack.org/63677522:54
clarkbwhat is curious is it is all cinder post jobs not just this one job22:54
fungiokay, fair, my definition of "today" was since the zuul logs were rotated at ~06:30z22:54
smcginnisRelative "today" based on location. ;)22:55
*** eernst has joined #openstack-infra22:55
corvus(^ that change about timeouts is because bridge hung for 2 hours today, so stuff that landed 3 hours ago still isn't in place)22:55
fungi"one standard logrotate day"22:55
smcginnisRelative "today" based on cron.22:56
smcginnisSo any way to figure out what happened after 2019-01-23T14:11:3322:57
*** eernst has quit IRC22:57
*** eernst has joined #openstack-infra22:57
clarkbsmcginnis: its probably going to be easier to tackle it the other direction since that was like 3 weeks ago (too many logs to go through)22:58
*** wolverineav has joined #openstack-infra22:59
clarkbeg answer the question of "why does cinder run no post jobs"22:59
*** eandersson has joined #openstack-infra22:59
fungiseeing what i can glean from scheduler debug logs for the most recent commit to merge22:59
*** eernst has quit IRC23:00
*** eernst_ has joined #openstack-infra23:00
fungiwow, been a while since my cinder clone got a ref update23:01
clarkb2019-02-12 23:09:56,759 ERROR zuul.Pipeline.openstack.post: Error freezing job graph for <QueueItem 0x7f6a25e4acf8 for <Branch 0x7f69d7e792e8 openstack/cinder refs/heads/master updated 5656aa92506090e055d0093678c5f92bda23c24e..2775a4139ee7acefe990be0dd4d64a23d52da1cd> in post>23:01
*** david-lyle has quit IRC23:02
fungiyup23:02
*** dklyle has joined #openstack-infra23:02
corvusthere should be more detail around that23:02
clarkb2019-02-12 23:09:56,762 DEBUG zuul.Pipeline.openstack.post: Invalid config for change <Branch 0x7f69d7e792e8 openstack/cinder refs/heads/master updated 5656aa92506090e055d0093678c5f92bda23c24e..2775a4139ee7acefe990be0dd4d64a23d52da1cd>23:02
clarkbcorvus: ok I'll -A to my grep23:02
fungiusing grep -A and -B to avoid loading it all in memory, yes23:03
clarkbException: Project openstack/cinder is not allowed to run job publish-loci-cinder23:04
fungii saw a bunch of those earlier when looking at debug logs too. didn't realize at the time they were preventing all jobs23:04
*** eernst_ has quit IRC23:05
fungiyou'll find them for more projects than cinder too23:05
smcginnisWould that be related to refactoring out the opendev/openstack things?23:05
clarkbsmcginnis: I don't think so. Probably more related to use of secrets23:05
*** tkajinam has joined #openstack-infra23:05
clarkbbut now I have to refresh my memory on that23:06
*** jamesmcarthur has quit IRC23:07
clarkbhttps://git.openstack.org/cgit/openstack/loci/tree/.zuul.d/cinder.yaml23:07
*** rascasoft has quit IRC23:08
fungiit's been there since their .zuul.yaml was imported23:08
fungiso presumably something about that job changed recently23:08
fungithat hasn't been touched in the cinder repo since september23:09
corvusi think it may be this: https://zuul-ci.org/docs/zuul/releasenotes.html#security-issues23:09
corvushttps://review.openstack.org/63256623:10
fungiohh23:10
smcginnisTiming is about right.23:10
*** slaweq has quit IRC23:11
fungiso the repo where that playbook/secret lives needs to set allowed-projects to include the projects using it?23:11
corvussorry about that; i thought i looked for jobs like that, but either i just imagined i did, or my search was imperfect.23:11
clarkb"If a job with secrets is defined in an untrusted-project, allowed-projects is automatically set to that project only, and can not be overridden."23:11
fungi"...can not be overridden."23:12
fungiokay, so the playbook and secret need to be relocated to a trusted/config repo23:12
clarkbor into cinder23:12
fungiwhich, given it's a job which is meant to be run for lots of projects )presumably also responsible for the glance issues), not that23:13
clarkbanother option is change the trigger mechansim (run it periodically or somehow trigger loci pipelines when cinder et al merge)23:14
corvusyeah.  we have contradictory use-cases here.  in this case, loci wants to say it's okay for cinder to use this job in a post-review pipeline.  the contradictory use-case is that we want shade to be able to test against vexxhost using real creds in a trusted-check pipeline.  i can't see a way to reconcile the two (the key to all of this is that 'allowed-projects' is basically toothless in a world23:15
corvuswith depends-on)23:15
corvusthe current state of zuul is safer, but doesn't support the loci job as written.23:16
corvusi feel like moving the loci jobs to project-config is warranted considering what they do.23:16
cloudnullqq - i hope - I'm not sure what to look for, but it looks like our deployment guide docs are out of date: https://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/configure.html vs https://raw.githubusercontent.com/openstack/openstack-ansible/master/deploy-guide/source/configure.rst - so im curious if anyone can point me in the righ23:17
cloudnullt direction to figuring out why that might not be publishing ?23:17
smcginniscloudnull: Could be an issue just discovered.23:18
cloudnullorly23:18
smcginnisThough I actually wouldn't expect that with openstack-ansible.23:18
corvusi think that only the -push jobs would need to be moved.23:18
fungicloudnull: if your projects also run the loci image publish job, then perhaps23:19
corvusso just this: https://git.openstack.org/cgit/openstack/loci/tree/.zuul.d/cinder.yaml#n22  and the secret23:19
clarkbthinking out loud here could loci define an abstract push job without a secret then add a final job with secret to either project-config or cinder?23:19
cloudnullfungi i dont think we run any loci specific jobs23:19
fungihogepodge: ^ as sitting ptl for loci, i expect we want your input on moving that job23:19
clarkbbut that way the bulk of the code still lives in loci23:19
corvusclarkb: that's similar to what i was suggesting.  i don't think the abstract job gives us anything though -- since we need the push playbook and the secret both in project-config.23:20
clarkboh right the playbook has to be colocated with the secret23:20
fungicloudnull: what repository does that document live in?23:20
cloudnullopenstack/openstack-ansible23:21
fungicloudnull: i would start here http://zuul.openstack.org/builds?project=openstack%2Fopenstack-ansible&pipeline=post23:22
fungicloudnull: looks like publish-openstack-tox-docs ran for 3f9a6b3 merging to master at 20:15:33 today23:22
cloudnullmaybe we're publishing to the wrong place?23:23
fungiand thinks it completed successfullyt23:23
cloudnullcould be ?23:23
* cloudnull has never looked at any of the doc things 23:23
cloudnullshould we see the change immediately once published?23:25
cloudnullor do the live docs take a while to reflect the change?23:26
corvuscloudnull, fungi: the job fungi mentioned, publish-openstack-tox-docs, publishes here: https://docs.openstack.org/openstack-ansible/latest/23:26
fungicloudnull: within 5 minutes or so, i think (we run a frequent cron job to perform an afs release)23:26
cloudnullit looks like http://logs.openstack.org/3f/3f9a6b37256e873b55d5dbe2bd0e0bda45c05dff/post/publish-openstack-tox-docs/4f7b854/job-output.txt.gz#_2019-02-13_20_19_50_755630 did things ?23:26
fungiyeah https://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/configure.html also says "updated: 2018-10-02 09:58" at the bottom23:27
corvuscloudnull: the url you mentioned was last published by this job: http://zuul.openstack.org/build/35a7d0b895c34af38b8df5c4efc0a1b323:27
*** jamesmcarthur has joined #openstack-infra23:27
cloudnulloh so the deploy guide job is simply not running ?23:28
corvushttps://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/.root-marker23:28
corvustells you that, if you're curious23:28
*** mattw4 has joined #openstack-infra23:28
cloudnullah that's cool!23:29
* cloudnull TIL 23:29
fungicloudnull: if it was separate from the docs build for that repo, then yes october seems to be the last it ran23:29
cloudnullinteresting.23:29
* cloudnull down the rabbit hole I go 23:29
*** wolverineav has quit IRC23:30
cloudnullthanks! smcginnis fungi corvus23:30
corvushttp://zuul.openstack.org/builds?job_name=publish-deploy-guide&project=openstack%2Fopenstack-ansible23:30
*** wolverineav has joined #openstack-infra23:30
corvusit's running for branches other than master23:30
cloudnullgreatly appreciate the assistance23:30
fungicloudnull: just returning the favor, as always!!!23:30
* cloudnull wonders is this is something we missed when we updated our jobs 23:30
*** markvoelker has joined #openstack-infra23:31
*** hwoarang has quit IRC23:32
*** jamesmcarthur has quit IRC23:33
*** hwoarang has joined #openstack-infra23:33
tonybcorvus, fungi: I'll send an email to the list describeing what I got up to with the bot-reviewer yesterday.  I have a a question for infra at: https://review.openstack.org/#/c/636466/6/playbooks/bot-reviewer.yaml23:38
*** tosky has quit IRC23:39
corvustonyb: i don't see a question23:41
tonybThanks!  I don't knwo if you knwo this but you actually have to post comments not just write them23:44
tonybfixed now23:45
corvusinfra-root: i've noticed that the gitea-pxc playbook has hung twice23:45
corvus(it's also succeeded once)23:45
corvusit's hung right now, and strace says:23:45
corvusrt_sigsuspend([], 823:45
corvusoh wait, i think that was the timeout proc23:46
* clarkb reads what gitea-pxc playbook does23:47
corvusyeah, the actual ansible proc is in a select loop23:47
corvus[pid 13560] clock_gettime(CLOCK_MONOTONIC, {tv_sec=17028697, tv_nsec=273789429}) = 023:47
corvus[pid 13560] select(0, NULL, NULL, NULL, {tv_sec=0, tv_usec=1000}) = 0 (Timeout)23:47
corvusit's doing that as fast as possible23:47
corvusit's not at the same place as last time23:47
clarkbwhich playbook exactly? I see a gitea-playbook.yaml ?23:48
corvuspreviously it was at TASK [Set up gitea-db startup scripts configmap] *******************************23:48
corvusnow it's at TASK [Set up gitea-db galera replication service] ******************************23:48
*** hwoarang has quit IRC23:48
corvusclarkb: kubernetes/percona-xtradb-cluster/pxc-playbook.yaml23:48
*** jamesmcarthur has joined #openstack-infra23:49
*** hwoarang has joined #openstack-infra23:49
clarkbthat all uses the k8s ansible module23:49
clarkbI wonder if it polls for completion after applying new k8s state?23:49
clarkbhttps://github.com/ansible/ansible/blob/devel/lib/ansible/modules/clustering/k8s/k8s.py is the code23:52
clarkbwhich immediately indirects itself elsewhere /me digs up the real code23:52
corvusi'm trying to see if i can find k8s api logs23:52
*** jamesmcarthur has quit IRC23:53
clarkbansible 2.8's version of the module added a wait parameter23:54
clarkbhttps://github.com/ansible/ansible/blob/devel/lib/ansible/modules/clustering/k8s/k8s.py#L6223:54
corvusclarkb: any idea how to see the kube-apiserver logs on opendev-k8s-master.opendev.org ?23:55
*** agopi is now known as agopi|out23:55
clarkbcorvus: docker log $container name?23:55
clarkb* docker logs $container23:56
corvusthat shows some logs, but nothing useful23:56
*** jamesmcarthur has joined #openstack-infra23:56
clarkbcorvus: https://kubernetes.io/docs/tasks/debug-application-cluster/debug-cluster/#master23:56
clarkbthat has some file paths you might check23:56
*** smarcet has quit IRC23:56
corvusyeah those don't exist23:56
corvuscause journald23:57
corvusmaybe that docker log is all we get :(23:57
clarkbmaybe journalctl has the data?23:58
corvusclarkb: any suggestions there?  i tried the 2 journalctl commands i know, but i don't know what to expect from this configuration.23:58
clarkbya I'm similarly lost seems to be mostly docker daemon complaining about something23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!