Thursday, 2019-04-04

*** tbachman has joined #openstack-infra00:01
*** wolverineav has quit IRC00:01
*** wolverineav has joined #openstack-infra00:01
*** wolverineav has quit IRC00:04
*** yamamoto has quit IRC00:04
*** wolverineav has joined #openstack-infra00:05
*** wolverineav has quit IRC00:10
*** tbachman has quit IRC00:15
openstackgerritIan Wienand proposed openstack-infra/project-config master: Retire linaro-cn1  https://review.openstack.org/64977300:19
*** sshnaidm_ has quit IRC00:25
*** tbachman has joined #openstack-infra00:27
*** sshnaidm has joined #openstack-infra00:29
*** jamesmcarthur has joined #openstack-infra00:34
*** wolverineav has joined #openstack-infra00:35
*** igordc has quit IRC00:36
*** auristor has quit IRC00:47
*** auristor has joined #openstack-infra00:49
*** auristor has quit IRC00:54
*** wolverineav has quit IRC00:55
*** wolverineav has joined #openstack-infra00:56
*** auristor has joined #openstack-infra00:57
*** jamesmcarthur has quit IRC00:58
*** wolverineav has quit IRC01:00
ianwnowster / jrosser : i added bionic to our openafs builds in the infra ppa @ https://launchpad.net/~openstack-ci-core/+archive/ubuntu/openafs-arm64/ ... it's building, see what happens01:01
*** mriedem has quit IRC01:09
*** auristor has quit IRC01:11
*** auristor has joined #openstack-infra01:11
*** rh-jelabarre has quit IRC01:15
*** aaronsheffield has quit IRC01:22
*** jamesmcarthur has joined #openstack-infra01:23
*** jamesmcarthur has quit IRC01:31
*** yamamoto has joined #openstack-infra01:45
*** roman_g has quit IRC01:59
*** whoami-rajat has joined #openstack-infra02:03
*** wolverineav has joined #openstack-infra02:03
*** bhavikdbavishi has joined #openstack-infra02:06
*** wolverineav has quit IRC02:08
*** tinwood has quit IRC02:10
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [WIP] add buster tests  https://review.openstack.org/64949702:10
*** tinwood has joined #openstack-infra02:12
*** hongbin has joined #openstack-infra02:12
*** bhavikdbavishi has quit IRC02:13
*** ruffian_sheep has joined #openstack-infra02:20
ianwclarkb / gary_perkins : https://storyboard.openstack.org/#!/story/2005353#comment-120181 -- it looks like arm64ci has maybe leaked something, and thinks we're at quota but I can't actually see any servers02:21
*** mriedem has joined #openstack-infra02:23
ruffian_sheepfungi:Should I run all of the CI?If I want to upload ny driver of cinder02:23
*** markvoelker has joined #openstack-infra02:29
*** jamesmcarthur has joined #openstack-infra02:29
*** mriedem has quit IRC02:29
ianwniedbalski: maybe you can look at https://bugs.linaro.org/show_bug.cgi?id=432702:35
openstackbugs.linaro.org bug 4327 in Default "[uk cloud] Unable to boot instances in linaro london cloud" [Normal,Unconfirmed] - Assigned to gema.gomez-solano02:35
openstackgerritIan Wienand proposed openstack-infra/project-config master: Retire linaro-cn1  https://review.openstack.org/64977302:38
ianwi think that's about all i can do on arm64 atm ... https://storyboard.openstack.org/#!/story/2005353 updated02:42
*** psachin has joined #openstack-infra02:43
*** bhavikdbavishi has joined #openstack-infra02:45
*** bhavikdbavishi has quit IRC02:50
*** bhavikdbavishi has joined #openstack-infra02:54
*** jamesmcarthur has quit IRC02:57
*** rlandy|bbl is now known as rlandy02:59
*** markvoelker has quit IRC02:59
*** hwoarang has quit IRC03:01
*** hwoarang has joined #openstack-infra03:06
*** sthussey has quit IRC03:14
*** samueldmq has quit IRC03:16
*** jamesmcarthur has joined #openstack-infra03:17
*** wolverineav has joined #openstack-infra03:20
*** jamesmcarthur has quit IRC03:22
*** wolverineav has quit IRC03:25
*** rlandy has quit IRC03:47
*** hongbin has quit IRC03:52
*** jamesmcarthur has joined #openstack-infra03:54
*** markvoelker has joined #openstack-infra03:57
*** jamesmcarthur has quit IRC03:58
*** ykarel has joined #openstack-infra04:03
*** udesale has joined #openstack-infra04:09
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: config: add tenant.toDict() method and REST endpoint  https://review.openstack.org/62134404:21
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add config page  https://review.openstack.org/63366704:21
*** markvoelker has quit IRC04:29
*** jamesmcarthur has joined #openstack-infra04:30
openstackgerritTristan Cacqueray proposed openstack-infra/zuul-jobs master: configure-pypi-mirrors: add initial role  https://review.openstack.org/58116504:35
*** ramishra has joined #openstack-infra04:38
*** ricolin has joined #openstack-infra04:57
*** pcaruana has joined #openstack-infra04:58
*** adriant has quit IRC05:09
*** adriant has joined #openstack-infra05:09
openstackgerritIan Wienand proposed openstack/diskimage-builder master: debian-minimal buster support  https://review.openstack.org/64949605:10
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [WIP] add buster tests  https://review.openstack.org/64949705:10
*** e0ne has joined #openstack-infra05:12
*** e0ne has quit IRC05:18
*** ykarel is now known as ykarel|afk05:19
*** ccamacho has quit IRC05:22
*** ykarel|afk has quit IRC05:23
*** markvoelker has joined #openstack-infra05:27
*** ykarel|afk has joined #openstack-infra05:42
*** ykarel|afk is now known as ykarel05:43
*** quiquell|off is now known as quiquell05:46
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add some quoting in 'gerrit query' commands  https://review.openstack.org/64987905:49
*** armax has quit IRC05:53
*** quiquell is now known as quiquell|rover05:57
*** armax has joined #openstack-infra06:00
*** markvoelker has quit IRC06:00
*** ruffian_sheep has quit IRC06:05
*** janki has joined #openstack-infra06:13
*** kopecmartin|off is now known as kopecmartin06:14
*** slaweq has joined #openstack-infra06:21
*** quiquell|rover is now known as quiquell|brb06:23
*** dpawlik has joined #openstack-infra06:26
*** pgaxatte has joined #openstack-infra06:32
*** kjackal has joined #openstack-infra06:33
*** hwoarang has quit IRC06:39
*** hwoarang has joined #openstack-infra06:41
*** rascasoft has quit IRC06:44
*** e0ne has joined #openstack-infra06:47
*** rpittau|afk is now known as rpittau06:48
*** jamesmcarthur has quit IRC06:52
*** kjackal has quit IRC06:53
tobiashianw: do you have plans for a diskimage-builder release? I would love a release containing https://review.openstack.org/64295306:54
*** markvoelker has joined #openstack-infra06:57
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Cleanup executor specific requirements  https://review.openstack.org/64942806:58
ianwtobish: oh, i thought i did.  can do one07:01
ianwtobiash: there we go, 2.21.007:03
tobiashianw: that was quick :)07:03
tobiashianw: thank you very much!07:04
ianwfungi / zigo : so successful build & boot of buster : http://logs.openstack.org/14/649214/2/experimental/nodepool-functional-py35-debian-src/3b6cba1/controller/logs/builds/debian-buster-0000000001_log.txt.gz07:04
ianwif we want to go this path, dib fixes need to merge and release, and we need to roll out the fixed debootstrap to builders07:05
*** quiquell|brb is now known as quiquell|rover07:08
*** ccamacho has joined #openstack-infra07:11
*** ginopc has joined #openstack-infra07:13
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add support for 'oldValue' comment-added field  https://review.openstack.org/64990007:14
*** wolverineav has joined #openstack-infra07:21
*** rosmaita has quit IRC07:21
*** dims has quit IRC07:22
*** dims has joined #openstack-infra07:24
*** wolverineav has quit IRC07:25
*** rosmaita has joined #openstack-infra07:26
*** tosky has joined #openstack-infra07:26
*** rascasoft has joined #openstack-infra07:30
*** rascasoft has quit IRC07:30
*** markvoelker has quit IRC07:30
*** dims has quit IRC07:31
*** rascasoft has joined #openstack-infra07:31
*** helenafm has joined #openstack-infra07:32
*** dims has joined #openstack-infra07:34
*** jistr is now known as jistr|afk07:35
*** apetrich has joined #openstack-infra07:37
*** kjackal has joined #openstack-infra07:42
*** jpena|off is now known as jpena07:43
*** elod_off has quit IRC07:45
zigoianw: Thanks a lot !07:46
zigoianw: Where's the patch for dib? Do I need to get it into Buster?07:47
*** ykarel is now known as ykarel|lunch07:48
*** elod_off has joined #openstack-infra07:52
*** jpich has joined #openstack-infra07:53
*** spsurya has joined #openstack-infra07:55
*** gfidente has joined #openstack-infra08:02
yamamotoi have a question about zuul definition08:03
yamamotowith https://review.openstack.org/#/c/649878/9/.zuul.yaml only tap-as-a-service-tempest-plugin-ocata doesn't run08:03
yamamotoi couldn't find any obvious reasons08:03
frickleryamamoto: the "devstack" job doesn't exists in devstack for stable/ocata, so "devstack-tempest" doesn't find a parent there and cannot run08:08
yamamotoah, job definition is taken from that branch? i thought it was master08:09
*** iurygregory has joined #openstack-infra08:10
frickleryamamoto: for projects that have the same branches, like devstack, it is taken from the branch, as the job definition may change per cycle08:10
yamamotoi got it. thank you!08:12
*** tkajinam has quit IRC08:22
*** dtantsur|afk is now known as dtantsur08:25
*** markvoelker has joined #openstack-infra08:28
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add some quoting in 'gerrit query' commands  https://review.openstack.org/64987908:28
*** e0ne has quit IRC08:30
*** roman_g has joined #openstack-infra08:36
*** e0ne has joined #openstack-infra08:40
*** e0ne has quit IRC08:42
*** yamamoto has quit IRC08:43
*** ykarel|lunch is now known as ykarel08:45
*** jamesmcarthur has joined #openstack-infra08:49
*** e0ne has joined #openstack-infra08:50
*** yamamoto has joined #openstack-infra08:52
*** yamamoto has quit IRC08:53
*** ricolin has quit IRC08:53
*** jamesmcarthur has quit IRC08:54
*** jaosorior has quit IRC08:54
*** electrofelix has joined #openstack-infra08:58
*** yamamoto has joined #openstack-infra08:59
*** ykarel is now known as ykarel|away09:00
*** markvoelker has quit IRC09:01
openstackgerritSimon Westphahl proposed openstack-infra/zuul master: Add proper __repr__ to merger repo  https://review.openstack.org/64994909:05
*** ykarel|away has quit IRC09:05
nowsterianw: I'd taken the long term approach. ;-)09:12
*** yamamoto has quit IRC09:18
nowsterianw: looks like it built. Do you need any resources for building wheels?09:22
*** ykarel|away has joined #openstack-infra09:33
*** ykarel|away is now known as ykarel09:33
*** markmcd has joined #openstack-infra09:38
*** e0ne has quit IRC09:44
*** wolverineav has joined #openstack-infra09:45
*** wolverineav has quit IRC09:49
openstackgerritStephen Finucane proposed openstack-infra/project-config master: Retire oslosphinx  https://review.openstack.org/64907209:51
openstackgerritStephen Finucane proposed openstack-infra/project-config master: Initiate retirement of oslosphinx  https://review.openstack.org/64995409:51
*** e0ne has joined #openstack-infra09:54
*** markvoelker has joined #openstack-infra09:58
zigoFYI, clarkb's pip patch reached Buster yesterday.10:03
zigoSo, it's fixed over there.10:03
*** dtantsur is now known as dtantsur|brb10:07
*** shachar has quit IRC10:09
*** shachar has joined #openstack-infra10:09
openstackgerritMerged openstack-infra/project-config master: Add grenade-py3 job to Neutron Grafana dashboard  https://review.openstack.org/64935210:17
*** bhavikdbavishi has quit IRC10:22
*** jistr|afk is now known as jistr10:23
*** markvoelker has quit IRC10:31
*** ramishra has quit IRC10:33
*** derekh has joined #openstack-infra10:35
*** lmiccini has joined #openstack-infra10:38
*** ramishra has joined #openstack-infra10:39
*** tbachman has quit IRC10:44
*** nicolasbock has joined #openstack-infra10:45
*** yamamoto has joined #openstack-infra10:50
*** jaosorior has joined #openstack-infra10:52
*** udesale has quit IRC10:54
*** nicolasbock has quit IRC10:57
*** jpena is now known as jpena|lunch10:58
*** jaosorior has quit IRC10:59
*** zbr has quit IRC11:14
*** kjackal has quit IRC11:15
*** nicolasbock has joined #openstack-infra11:20
*** helenafm has quit IRC11:22
*** bhavikdbavishi has joined #openstack-infra11:25
*** markvoelker has joined #openstack-infra11:28
*** jamesmcarthur has joined #openstack-infra11:30
*** zbr has joined #openstack-infra11:31
*** jamesmcarthur has quit IRC11:34
*** kjackal has joined #openstack-infra11:36
*** quiquell|rover is now known as quiquell|rover|e11:40
*** quiquell|rover|e is now known as quique|rover|eat11:40
*** samueldmq has joined #openstack-infra11:40
*** ykarel has quit IRC11:45
*** shachar has quit IRC11:46
*** snapiri has joined #openstack-infra11:46
*** ykarel has joined #openstack-infra11:46
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add support for 'oldValue' comment-added field  https://review.openstack.org/64990011:46
*** e0ne has quit IRC11:50
*** rh-jelabarre has joined #openstack-infra11:54
*** dtantsur|brb is now known as dtantsur11:57
*** rlandy has joined #openstack-infra11:58
*** trown|outtypewww is now known as trown12:01
*** markvoelker has quit IRC12:02
*** tbachman has joined #openstack-infra12:05
*** ramishra_ has joined #openstack-infra12:07
*** ramishra has quit IRC12:07
*** quique|rover|eat is now known as quiquell|rover12:13
*** jamesdenton has quit IRC12:13
*** jamesmcarthur has joined #openstack-infra12:18
*** jpena|lunch is now known as jpena12:22
*** kgiusti has joined #openstack-infra12:30
*** jamesmcarthur has quit IRC12:32
*** kgiusti has quit IRC12:36
openstackgerritBrendan proposed openstack-infra/zuul master: Break stuff  https://review.openstack.org/64997612:38
openstackgerritFabien Boucher proposed openstack-infra/zuul master: A reporter for Elasticsearch with the capability to index build and buildset results in an index.  https://review.openstack.org/64492712:38
openstackgerritBrendan proposed openstack-infra/zuul master: Break stuff  https://review.openstack.org/64997612:39
mordredfungi: where are we keeping the list of project renames?12:39
*** bhavikdbavishi has quit IRC12:41
*** zul has joined #openstack-infra12:52
*** kgiusti has joined #openstack-infra12:53
zbrwhat is the trick that i would need to do to make zuul point to a specific result html file on a job instead of the default output console?12:53
*** mriedem has joined #openstack-infra12:54
fricklermordred: this one? https://ethercalc.openstack.org/opendev-transition12:55
fricklerzbr: you specify a success-url like here https://opendev.org/openstack-infra/zuul-jobs/src/branch/master/zuul.yaml#L19312:58
zbrfrickler: thanks!12:58
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631512:58
*** lseki has joined #openstack-infra13:00
*** aaronsheffield has joined #openstack-infra13:01
*** dklyle has quit IRC13:02
*** udesale has joined #openstack-infra13:05
*** quiquell|rover is now known as quiquell|off13:13
*** bhavikdbavishi has joined #openstack-infra13:14
*** e0ne has joined #openstack-infra13:22
*** Sundar has joined #openstack-infra13:25
gary_perkinsianw: Thanks for the heads-up regarding https://storyboard.openstack.org/#!/story/2005353#comment-120181 -- It's something we can fix, but we're also in the process of preparing a larger cloud in Packet's EWR1 region that will replace that little one at NRT113:26
SundarIs this the right channel to ask about PTG preparation?13:28
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631513:38
fungiSundar: likely #openstack-ptg or #openstack-foundation are good places, but it's more about finding the right people with answers to whatever question you have13:39
fungisometimes asking on the openstack-discuss mailing list may yield better results13:40
dmsimardmordred, frickler: thanks, I added the ara repos in there13:40
Sundarfungi: Thanks. Makes sense.13:41
*** wolverineav has joined #openstack-infra13:46
openstackgerritJeremy Stanley proposed openstack-infra/project-config master: Remove City Cloud LA1 region  https://review.openstack.org/64999913:48
dmsimardThe upload-git-mirror job is finally working \o/ http://zuul.openstack.org/builds?job_name=ara-upload-git-mirror13:50
*** wolverineav has quit IRC13:50
*** spsurya has quit IRC13:51
*** bhavikdbavishi has quit IRC13:51
*** altlogbot_3 has quit IRC13:55
fungi#status log deleted nova instance "mirror01.la1.citycloud.openstack.org" and cinder volume "newvolume" from citycloud-la1 as that region is being taken permanently offline13:56
openstackstatusfungi: finished logging13:57
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631513:58
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Retrieve full list of jobs with details per tenant via API  https://review.openstack.org/63571413:58
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Add new merger job to get role definitions from a repository  https://review.openstack.org/63718113:58
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Provide roles per tenant via Zuul API  https://review.openstack.org/65001213:58
*** e0ne has quit IRC13:59
*** imacdonn has quit IRC14:03
*** e0ne has joined #openstack-infra14:05
*** udesale has quit IRC14:06
*** udesale has joined #openstack-infra14:07
dmsimardinfra-root: now that upload-git-mirror works and the github org transfer script is ready, I'd like to start moving the ara github repos. Would a patch to edit the gerrit replication regex in https://opendev.org/openstack-infra/system-config/src/branch/master/modules/openstack_project/manifests/review.pp#L237-L250 be sufficient or is there something14:10
dmsimard else I could be missing ?14:10
*** udesale has quit IRC14:11
fungithat would need to coincide with a gerrit restart, unless we've recently enabled the feature to allow dynamic reloading of the replication config14:11
*** udesale has joined #openstack-infra14:11
dmsimardhttps://gerrit.googlesource.com/plugins/replication/+doc/v2.16.7/src/main/resources/Documentation/config.md#replication-configuration mentions "ssh -p 29418 localhost gerrit plugin reload replication" -- I'll read into it a bit14:13
*** janki has quit IRC14:17
dmsimardQuerying gerrit shows that the replication plugin is loaded (replication v2.13.12   ENABLED  replication.jar) but I'm not sure how to tell if it supports the reload command or not14:18
dmsimardI could try on review-dev perhaps.14:19
dmsimardhmm, my user isn't privileged on review-dev14:22
fungii believe there's a config option we have to enable for gerrit to allow dynamic plugin reconfiguration14:22
*** dpawlik has quit IRC14:22
mordredyeah. and I think that config option takes a restart :)14:23
fungiplugins.allowRemoteAdmin = true14:23
dmsimardhttps://gerrit-review.googlesource.com/Documentation/config-gerrit.html#plugins.checkFrequency mentions "If set to 0, automatic plugin reloading is disabled. Administrators may force reloading with gerrit plugin reload."14:24
dmsimardallowRemoteAdmin feels like it's just for installation and enabling/disabling ?14:25
fungithat seems to say the same on our version too https://review.openstack.org/Documentation/config-gerrit.html#plugins.checkFrequency14:25
fungiyeah, allowRemoteAdmin looks like it might be specifically for loading updated plugins, not just reconfiguring them14:26
fungiat any rate, in the past we've observed that changing the replication configuration doesn't get picked up until a gerrit restart14:26
openstackgerritGary Perkins proposed openstack-infra/system-config master: Changed region of arm64ci from nrt1 to ewr1  https://review.openstack.org/65002114:27
fungibut it's worth testing again on review-dev, i suppose14:27
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631514:30
dmsimardfungi: I can do the legwork to double check the behavior but I'm unprivileged on the review-dev gerrit. Would you be able to add me to the right group ?14:31
fungisure, just a sec14:31
fungidmsimard: you're now a member of https://review-dev.openstack.org/#/admin/groups/Administrators14:33
dmsimardthanks !14:33
fungithank you for testing14:33
dmsimardwell there you go: fatal: remote plugin administration is disabled14:34
dmsimardso we probably need to enable allowRemoteAdmin first :P14:34
* dmsimard looks14:34
fungithe other thing to work out is whether changing the config gets magically noticed by gerrit after some period14:35
fungiit's possible the last time we tested it was on an older release of gerrit when plugins were still a relatively new concept14:35
dmsimardyes, that seems like it is the plugins.checkFrequency configuration14:35
fungiwhich defaults to 1 minute14:37
fungithough again the description sounds like it's about loading, unloading and updating plugins themselves not their configs14:37
fungithough maybe if it doesn't automatically reload the changed config, touching the plugin jar so it has a more recent timestamp will cause gerrit to reload the plugin which will in turn reload the config for that plugin?14:39
fungiwe see similar behavior with the javascript and the site header file14:40
clarkbre allow remote admin I didnt enable that lasttime we changed replication config (for gitea01-8) because it allows far more than config updates and needs more consideration (testing and understanding of attack surface)14:40
dmsimardclarkb: that is my understanding as well14:40
fungi(it won't automatically reload changes to the javascript files but will reload them if the site header gets a new timestamp)14:40
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Add new merger job to get role definitions from a repository  https://review.openstack.org/63718114:45
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Provide roles per tenant via Zuul API  https://review.openstack.org/65001214:45
*** e0ne has quit IRC14:46
dmsimardclarkb: do you know if there a concept of non-remote admin? :)14:50
dmsimardlike, locally instead of over ssh or something14:50
clarkbnot that I have seen other than restrting the service14:51
*** e0ne has joined #openstack-infra14:52
*** Sundar has quit IRC14:53
*** yamamoto has quit IRC14:54
*** yamamoto has joined #openstack-infra14:55
dmsimardok I think what we want is "gerrit.autoReload" -> If true, automatically reloads replication destinations and settings after replication.config file is updated, without the need to restart the replication plugin. When the reload takes place, pending replication events based on old settings are discarded. By default, false.14:55
dmsimardFrom https://gerrit.googlesource.com/plugins/replication/+doc/master/src/main/resources/Documentation/config.md#file-114:55
mordredfungi: if I want to rename an official openstack project as part of the rename, who do I need to run that through?14:56
fungimordred: likely want to at least stage a related governance change so the tc is aware14:56
dmsimardbut enabling autoReload will require a restart14:56
mordred(seems like a good time to rename shade from openstack-infra/shade to openstack/shade)14:56
jamespagemordred, clarkb, frickler: uploaded prepared for ubuntu-sru team review under https://bugs.launchpad.net/ubuntu/+source/python-pip/+bug/182284214:57
openstackLaunchpad bug 1822842 in python-pip (Ubuntu Cosmic) "pip fails to install package from source when extra-index-url returns 404" [Medium,Triaged]14:57
mordredhas never been worth the time before - and still isn't since it's largely vestigal now, but since the urls are changing anyway)14:57
fungimordred: oh, for that we might just coordinate with jroll as it's just changing the namespace14:57
* mordred hands jamespage a pie14:57
*** e0ne has quit IRC14:57
mordredfungi: cool14:57
jamespagePPA with fixes in the interim14:57
jamespagehttps://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/3690/+packages14:57
mordredjroll: hey! we should rename openstack-infra/shade to openstack/shade during the rename window14:57
dmsimardmordred: is shade still a thing ? I thought it had merged to openstacksdk14:58
fungimordred: maybe part of jroll's plan could be to renamespace any official non-infra projects which are in the openstack-infra namespace into openstack, and similarly renamespace any infra team repos out of the openstack namespace14:58
mordreddmsimard: the repo is still live for backwards compat reasons14:58
dmsimardmakes sense14:58
mordredfungi: that would make a lot of sense14:58
mordredfungi: oh - also - what zuul tenant should non-official non-openstack things in opendev use?14:59
fungii think the release team may have one of those as well14:59
clarkbdmsimard: is that setting documented on our gerrit?14:59
mordredfungi: like - let me phrase this with a specific example14:59
fungimordred: right, the openstack tc suggested something like "unknown" as the catch-all namespace, but noted that it's ultimately up to the opendev sysadmins to choose since things which aren't part of openstack aren't really their jurisdiction14:59
*** yamamoto has quit IRC15:00
mordredfungi: if I wanted to import my inaugust repos - what zuul tenant would be the right place to put them?15:00
openstackgerritGary Perkins proposed openstack-infra/system-config master: Changed region of arm64ci from nrt1 to ewr1 Also updated the URLs  https://review.openstack.org/65002115:00
mordredfungi: yeah - this is really an opendev question for us I'd imagine15:00
fungimordred: oh, in that case you can pick a new namespace. i know how you love naming things15:00
jrollmordred: see line 27 https://review.openstack.org/#/c/645601/2/resolutions/20190322-namespace-unofficial-projects.rst15:00
mordredfungi: oh - not just namespace- but which zuul tenant would gate teh patches?15:01
jrollmordred: current plan is anything in openstack-infra/dev that is staying openstack, is going to the openstack namespace15:01
mordredobviously not the openstack one15:01
mordredjroll: \o/15:01
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Retrieve full list of jobs with details per tenant via API  https://review.openstack.org/63571415:01
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Add new merger job to get role definitions from a repository  https://review.openstack.org/63718115:01
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Provide roles per tenant via Zuul API  https://review.openstack.org/65001215:01
jroll:)15:01
fungithe bigger question was what to do about all the non-openstack repos currently in the openstack namespace where nobody steps forward to pick custom namespaces for them. the tc is basically saying "you don't have to go home but you can't stay here"15:01
dmsimardclarkb: https://review.openstack.org/Documentation/config-plugins.html#replication links to the upstream docs but I'm trying on review-dev15:02
mordredfungi: I think it'll be the same question I have as for like gertty15:02
fungimordred: oh! right, i don't know the zuul tenant question15:02
fungier, rather, don't know the answer to it15:02
mordredyeah15:02
mordredI think we decided the opendev tenant was for opendev the service - not as a catchall for arbitrary unaffiliated projects15:02
clarkbthis is the why people like the idea of stackforge I think15:04
mordredyeah - but even stackforge wouldn't be right15:04
clarkbno but its 80% good enough15:04
dmsimardclarkb: autoReload works on review-dev but it requires a restart first15:05
mordredbecause gertty and inaugust aren't "possible openstack projects but arent' official" - they're just other open source projects but happen to be small enough that their own zuul tenant maybe seems like overkill15:05
mordredbut maybe I'm stuck too much on that second thing and maybe there just should be another zuul tenant15:05
clarkbmordred: I dont think that washow we definied stackforge15:05
fungiwe didn't especially define stackforge15:06
fungiwe mostly only undefined stackforge15:06
mordredsure - I'm just sauing - if there was an opendev.org/inaugust/inaugust.com repo - why would it make any sense to go to zuul.opendev.org/t/stackforge/status to see jobs running?15:06
mordredfrom an opendev service perspective15:07
clarkbmordred: becayse for most people theyll justlook at the gerrit comment15:07
mordredI would think zuul.opendev.org/t/opendev/status or zuul.opendev.org/t/inaugust/status both make more sense from a "make opendev a nice service" POV15:07
clarkbits a level of detail that doesnt pop out to most I expect15:08
clarkbmordred: yup but we also arent gonna self provision zuul tenants yet15:08
mordredwhat do you mean by self provision?15:08
clarkbdecoupling us from the process of spinning up a new tenant15:09
clarkbit is a fair bit of work15:09
mordredwhat is it other than just lines in the zuul config file? (which have to be added for repos anyway)15:10
*** jamesdenton has joined #openstack-infra15:10
clarkbcreating basejob repos, writing basejobs that function15:10
clarkbwe are sort of half way there with the common basejob repo now15:10
mordredyah. so - I think I have an idea ...15:10
mordredyeah15:10
clarkbbut iirc all the trnants customize on top of that15:11
mordredlike - actually, the opendev/project-config repo would be perfectly fine project-config repo for most small projects15:11
mordredso instead of re-using the opendev _tenant_ - we could have smaller tenants just reuse the opendev project-config for base jobs and pipelines and whantot15:11
openstackgerritDavid Moreau Simard proposed openstack-infra/puppet-gerrit master: Add support for enabling replication configuration autoReload  https://review.openstack.org/65004915:12
openstackgerritDavid Moreau Simard proposed openstack-infra/system-config master: Enable gerrit replication.autoReload for review-dev  https://review.openstack.org/65005015:12
mordredanyway - not urgent - mostly was just thinking about it over the last week while working on slides15:12
openstackgerritDavid Moreau Simard proposed openstack-infra/system-config master: Enable gerrit replication.autoReload for review  https://review.openstack.org/65005115:14
clarkbya that may be one approach where base config bakes in a little more (like pipelines) and other tenants can ignore the bitsthey dont want. Though I know zuul wamts different check pipeline than openstack so still some details to sort out15:14
mordredtotally15:15
mordredbut yeah - it should be reasonably easy to make a generic batteries-included config repo *for opendev* that could be re-used by anyone who didn't have explicit opinions15:15
*** ramishra_ has quit IRC15:20
clarkbdmsimard: re restart first that is expected, we have to load that config into gerrit via restart then after it should work. So basically if the plugin config changes it will notice the file update and reload its config without restarting gerrit? Seems like a good option (and far safer than remote admin)15:24
*** dklyle has joined #openstack-infra15:27
*** udesale has quit IRC15:32
corvusmordred, fungi, clarkb: i think it would be fine for the opendev zuul tenant to host ci for unaffiliated projects15:33
corvus(i do believe we agreed that the opendev *namespace* should only be for opendev itself)15:33
fungiyeah, so perhaps the opendev zuul tenant is tied to the opendev namespace, the unknown namespace and whatever other namespaces want to use it?15:34
fungior does the unknown namespace continue using the openstack tenant for simplicity of migration?15:34
*** pgaxatte has quit IRC15:36
clarkbI'm guessing openstack would prefer they didn't but its probably a slower migration that the 4/19 change15:36
corvusi was imagining that we would not move projects between zuul tenants on 4/19, and that would follow on later15:36
clarkb++15:37
fungiwfm15:37
clarkbthat was my understanding too15:37
clarkbfungi: re citycloud la1 were you going to respond to daniel or maybe you did and I wasn't cc'd?15:37
fungii hadn't gotten to that mailbox yet. i responded to pierre's e-mail to infra-root though15:37
fungiand cc'd the infra-root alias on my reply15:38
clarkboh I haven't gotten to that email yet15:38
clarkbdaniel sent one to our openstack.org addresses too15:38
*** kopecmartin is now known as kopecmartin|off15:41
*** gyee has joined #openstack-infra15:43
*** e0ne has joined #openstack-infra15:46
clarkbinfra-root if I can get a second reviewer on https://review.openstack.org/#/c/647875/ I;ll watch that go in and make sure the kata lists server is happy after the puppet-4 upgrade15:47
fungiapproved, thanks!15:47
*** e0ne has quit IRC15:48
*** e0ne has joined #openstack-infra15:48
*** e0ne has quit IRC15:48
openstackgerritSean McGinnis proposed openstack-dev/hacking master: Fix python 3.6 escape char warnings in strings  https://review.openstack.org/65005615:50
*** sshnaidm_ has joined #openstack-infra15:52
*** sshnaidm has quit IRC15:54
*** efried is now known as efried_mtg15:54
*** bhavikdbavishi has joined #openstack-infra15:55
openstackgerritMerged openstack-infra/project-config master: Remove City Cloud LA1 region  https://review.openstack.org/64999915:57
clarkbfungi: ^ fyi15:58
*** jamesmcarthur has joined #openstack-infra15:58
fungithanks!15:59
clarkbhrm would anyone be offended if I removed hacking from our gerritbot list?15:59
fungifeel free, as far as i'm concerned15:59
clarkbI like to use theose bot events as reminders for things that I may want to take action on and I don't think we are actively working on hacking or even use it in our projects at this point16:00
mordredclarkb: ++16:01
*** e0ne has joined #openstack-infra16:05
clarkbdmsimard: comment on https://review.openstack.org/#/c/650050/116:06
*** ykarel is now known as ykarel|away16:07
*** diablo_rojo has joined #openstack-infra16:10
*** e0ne has quit IRC16:12
openstackgerritMerged openstack-infra/system-config master: Upgrade lists.katacontainers.io to puppet 4  https://review.openstack.org/64787516:17
*** ironfoot has joined #openstack-infra16:19
openstackgerritMerged openstack-infra/elastic-recheck master: Identify *POST* timeout failures individually  https://review.openstack.org/62557316:20
*** tbachman has quit IRC16:22
*** dpawlik has joined #openstack-infra16:25
*** tbachman has joined #openstack-infra16:25
*** ginopc has quit IRC16:30
gmannclarkb: fungi ianw frickler can you review these for stein release things-  https://review.openstack.org/#/c/647899/ and this(did recheck) https://review.openstack.org/#/c/647912/16:32
*** igordc has joined #openstack-infra16:33
*** yolanda has quit IRC16:33
*** jpich has quit IRC16:34
*** dpawlik has quit IRC16:38
*** tosky has quit IRC16:43
*** rpittau is now known as rpittau|afk16:44
openstackgerritDavid Moreau Simard proposed openstack-infra/system-config master: Enable gerrit replication.autoReload for review-dev  https://review.openstack.org/65005016:48
openstackgerritDavid Moreau Simard proposed openstack-infra/system-config master: Enable gerrit replication.autoReload for review  https://review.openstack.org/65005116:48
dmsimardclarkb: fixed, thanks16:51
*** tbachman has quit IRC16:51
clarkbgmann: see comment on https://review.openstack.org/#/c/647912/116:51
clarkbdmsimard: yup +216:51
clarkbdmsimard: maybe wip 650051 until we are happy with the review-dev results?16:52
dmsimardclarkb: that was the intent, I'll -W16:52
dmsimardI also suppose we need to babysit the patch since puppet will restart gerrit after modifying the replication config ?16:52
dmsimardwell, for 650051 that is16:53
*** kjackal has quit IRC16:53
dmsimardoh, actually, 650051 would also restart gerrit because it'll add autoReload = false :/16:53
clarkbno we don't auto restart gerrit16:53
dmsimardoh, good then16:53
gmannclarkb: yeah, i think testing ocata only is needed there. i will update the patch to remove other stable zuulv3 native jobs.16:53
gmannthanks16:53
dmsimardless trouble16:53
clarkbso these changes should be fine as long as we sequence them16:53
clarkbgmann: thank you!16:54
clarkbgmann: we may also want to add a representative legacy job back in?16:54
*** rkukura has quit IRC16:55
clarkbI think grenade is already covered but for tempest stuff we don't have good coverage there anymore16:55
clarkb(so your change ot branches should be fine)16:55
gmannfor testing coverage of other legacy jobs still present in project side ?16:56
clarkbya16:56
clarkbI'm not sure that ocata is representative of the others16:56
clarkbthought maybe it is close enough for what devstack-gate does16:56
gmannyeah but there might be lot of other things or new testing for each stable/ jobs.16:57
clarkbya I'm trying to balance the idea that this is legacy code we should be getting off of against breaking the jobs that haven't gotten off of it yet16:58
*** electrofelix has quit IRC16:58
clarkbgrenade is the big one and we are covered there so maybe that is good enough16:58
gmannclarkb: how about keeping the stable/latest(stable/stein in this release case) legacy job testing only.16:58
*** ccamacho has quit IRC16:58
gmannthat can be most close16:59
clarkbthat works for me if we haev those jobs16:59
*** tbachman has joined #openstack-infra16:59
gmannwe do not have :) i need to create one for devdtack-gate16:59
gmannsince pike tempest-full legacy is gone16:59
* gmann hoping to have community goal of moving legacy jobs to zuulv3 native soon17:00
*** dtantsur is now known as dtantsur|afk17:00
openstackgerritMerged openstack-infra/nodepool master: Remove TaskManager and just use keystoneauth  https://review.openstack.org/64064317:03
*** ijw has joined #openstack-infra17:07
*** jpena is now known as jpena|off17:08
*** fresta has quit IRC17:13
*** fresta has joined #openstack-infra17:13
*** gfidente has quit IRC17:16
*** derekh has quit IRC17:18
*** jamesmcarthur has quit IRC17:19
*** diablo_rojo has quit IRC17:21
*** rlandy is now known as rlandy|ruck17:27
*** imacdonn has joined #openstack-infra17:27
openstackgerritClark Boylan proposed openstack-infra/project-config master: Simplify and clean up infra gerritbot irc channel configs  https://review.openstack.org/65008317:27
clarkbok there is the gerritbot config change17:27
anteayaclarkb: that change only affects the opendev channel, yes?17:32
clarkbanteaya: and this channel17:32
anteayaah there's the rest of it17:33
anteayathanks17:34
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add some quoting in 'gerrit query' commands  https://review.openstack.org/64987917:34
*** shachar has joined #openstack-infra17:34
*** snapiri has quit IRC17:37
*** spsurya has joined #openstack-infra17:37
clarkbpuppet-4 looks happy on lists.katacontainers.io17:38
clarkbcomplains about lack of group var but that is expected since this server isn't in an ansible/hiera group17:38
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Proposed spec: tenant-scoped admin web API  https://review.openstack.org/56232117:40
*** gmann is now known as gmann_afk17:44
*** wolverineav has joined #openstack-infra17:45
*** wolverineav has quit IRC17:45
*** wolverineav has joined #openstack-infra17:45
openstackgerritJames E. Blair proposed openstack-infra/zuul master: WIP: Fix SQL error when querying for tuples  https://review.openstack.org/65008617:46
*** rkukura has joined #openstack-infra17:47
*** sshnaidm_ is now known as sshnaidm|off17:50
fungii wonder if we should artificially lower our max-servers in limestone-regionone to reduce resource contention. seeing lots of jobs failing there because of job timeouts as well as individual test timeouts17:53
*** diablo_rojo has joined #openstack-infra17:56
*** diablo_rojo_ has joined #openstack-infra17:56
*** diablo_rojo_ has quit IRC17:56
*** diablo_rojo has quit IRC17:56
*** diablo_rojo has joined #openstack-infra17:57
*** wolverineav has quit IRC18:01
*** yamamoto has joined #openstack-infra18:01
*** wolverineav has joined #openstack-infra18:02
*** wolverineav has quit IRC18:04
*** wolverineav has joined #openstack-infra18:04
openstackgerritDavid Shrewsbury proposed openstack-infra/nodepool master: Fix debug log message  https://review.openstack.org/65008818:05
*** derekh has joined #openstack-infra18:09
*** ijw has quit IRC18:09
*** derekh has quit IRC18:10
openstackgerritMerged openstack-infra/nodepool master: Update dib stats  https://review.openstack.org/63853318:14
openstackgerritKendall Nelson proposed openstack-infra/irc-meetings master: First Contact SIG update  https://review.openstack.org/64878218:19
*** bhavikdbavishi has quit IRC18:22
*** psachin has quit IRC18:28
*** owalsh has quit IRC18:34
*** owalsh_ has joined #openstack-infra18:34
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008618:36
fungiclarkb: i'm replying to daniel's e-mail now18:39
fungiwill cc ypi18:39
fungier, will cc you18:39
*** owalsh_ has quit IRC18:39
clarkbthanks18:39
*** owalsh has joined #openstack-infra18:41
*** rh-jelabarre has quit IRC18:43
*** rh-jelabarre has joined #openstack-infra18:44
*** tbachman has quit IRC18:44
openstackgerritMerged openstack-infra/nodepool master: doc: add provider driver development instructions  https://review.openstack.org/63959518:47
*** kjackal has joined #openstack-infra18:50
*** eharney has quit IRC18:55
*** eharney has joined #openstack-infra18:58
*** wolverineav has quit IRC19:02
*** wolverineav has joined #openstack-infra19:03
*** wolverineav has quit IRC19:07
*** tbachman has joined #openstack-infra19:08
*** rkukura has quit IRC19:14
*** rkukura has joined #openstack-infra19:23
*** owalsh_ has joined #openstack-infra19:25
*** owalsh has quit IRC19:25
openstackgerritMerged openstack-infra/nodepool master: Fix debug log message  https://review.openstack.org/65008819:29
*** tosky has joined #openstack-infra19:33
*** wolverineav has joined #openstack-infra19:38
*** tbachman has quit IRC19:38
*** owalsh has joined #openstack-infra19:39
*** owalsh_ has quit IRC19:40
*** wolverineav has quit IRC19:42
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Whitelist pageup and down keys in xterm  https://review.openstack.org/64969419:44
*** artom has quit IRC19:46
*** rkukura has quit IRC19:46
*** efried_mtg is now known as efried19:46
*** gmann_afk is now known as gmann19:49
*** rkukura has joined #openstack-infra19:49
*** _erlon_ has joined #openstack-infra19:56
*** wolverineav has joined #openstack-infra19:58
logan-fungi: i'll look into it. that cloud went p->q->r a few weeks ago so I wonder if there are performance impacts or a config regression or something.20:02
*** wolverineav has quit IRC20:03
fungiif nothing else, might be good to know where we might be running up against hardware resource constraints20:03
fungiand thanks as always!20:03
*** wolverineav has joined #openstack-infra20:04
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008620:05
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008620:08
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008620:08
gmannclarkb: fungi any of you can take care of lxkong request of adding in trove stable core team. bionic migration is also pending due to that. http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004543.html20:08
fungigmann: those groups are managed by stable-maint-core20:10
gmannohk.20:10
fungiheading out for a walk but should return shortly20:11
gmannmriedem: tonyb ^^20:11
mriedemgmann: i replied20:12
gmannmriedem: there are more patches stuck on trove stable/stein and bionic migration depends on those.20:14
gmannis it ok to add him as core there as per his original request ?20:15
gmannhe is trove current PTL20:15
mriedembeing PTL on master doesn't mean a person knows stable branch review policy20:17
mriedemso it probably depends on if he's already been doing stable reviews and knows the process20:17
mriedemwhat's appropriate, what's not, etc20:17
mriedemhaving said that, i don't really want to have to do the homework to find out if he is for trove which is on life support anyway it seems20:17
ianwclarkb: could you look at https://review.openstack.org/#/c/649773/ just to confirm that was your discussion (retire linaro cn1 cloud)20:19
gmannok, make sense. can you check the patches i mentioned in that ML thread which holding the bionic migration. and there are no trove active core present except him.20:19
*** jamesmcarthur has joined #openstack-infra20:21
openstackgerritMatt Riedemann proposed openstack-infra/elastic-recheck master: Add query for pymysql.err.InterfaceError bug 1823251  https://review.openstack.org/65013620:21
openstackbug 1823251 in OpenStack Compute (nova) "Spike in TestNovaMigrationsMySQL.test_walk_versions/test_innodb_tables failures since April 1 2019 on limestone-regionone" [Medium,Confirmed] https://launchpad.net/bugs/182325120:21
clarkbianw yup just finishing up lunch then can look20:22
*** tbachman has joined #openstack-infra20:22
ianwclarkb: thanks; it looks like we have some ready nodes in linaro london now, that didn't seem to be happening yesterday so i'll try the wheel build stuff again shortly20:25
*** jamesmcarthur has quit IRC20:25
*** pcaruana has quit IRC20:29
*** pcaruana has joined #openstack-infra20:30
*** dpawlik has joined #openstack-infra20:31
openstackgerritMerged openstack-infra/zuul master: Increase timeout of zuul-quick-start  https://review.openstack.org/64938420:35
*** dpawlik has quit IRC20:35
*** raissa has joined #openstack-infra20:38
*** diablo_rojo has quit IRC20:43
*** kgiusti has quit IRC20:45
clarkbianw: ya https://review.openstack.org/#/c/649773/2 is what I think we want. But we'll have to manually clear out any zk records for it?20:45
*** wolverineav has quit IRC20:46
openstackgerritMerged openstack-infra/elastic-recheck master: Add query for pymysql.err.InterfaceError bug 1823251  https://review.openstack.org/65013620:47
openstackbug 1823251 in OpenStack Compute (nova) "Spike in TestNovaMigrationsMySQL.test_walk_versions/test_innodb_tables failures since April 1 2019 on limestone-regionone" [High,Confirmed] https://launchpad.net/bugs/182325120:47
*** wolverineav has joined #openstack-infra20:47
clarkbI'm listing things now to double check20:47
clarkbya there are a bunch of linaro-cn1 images listed but failed. My hunch is we'll have to manually clear those out20:48
clarkbI went ahead and approved the chagne and we can figure out zk cleanup as a followup20:49
*** wolverineav has quit IRC20:51
*** wolverineav has joined #openstack-infra20:51
*** spsurya has quit IRC20:54
*** sshnaidm|off has quit IRC20:55
clarkblogan-: fungi: I don't have evidence for this at all but potentially better spectre/meltdown type mitigations on newer platform? Assuming the OS upgraded as well20:57
*** slaweq has quit IRC20:58
*** sshnaidm|off has joined #openstack-infra20:58
*** mhu has quit IRC20:58
*** otherwiseguy has quit IRC20:59
*** jrist has quit IRC20:59
logan-the host is still xenial+HWE kernel. but maybe some impact from that by pulling in the rocky UCA vs pike UCA for libvirt/qemu packages. side note -- config issue addressed https://review.openstack.org/#/c/650135/. I deployed it manually so we should see all new nodes launching with writeback now. confirmed on a couple launches already.21:00
*** jrist has joined #openstack-infra21:01
*** wolverineav has quit IRC21:03
*** mhu has joined #openstack-infra21:04
*** otherwiseguy has joined #openstack-infra21:04
*** dpawlik has joined #openstack-infra21:04
*** wolverineav has joined #openstack-infra21:05
openstackgerritMerged openstack-infra/project-config master: Retire linaro-cn1  https://review.openstack.org/64977321:08
clarkblogan-: oh that writeback setting will probably make a big difference21:11
logan-yeah, i think last time I manually fixed it and forgot to push the patch :(21:11
*** kjackal has quit IRC21:12
clarkbianw https://review.openstack.org/#/c/647899/ is a semi important change for grenade if you can take a quick look today21:12
clarkbsets up testing for stein properly21:12
*** michael-beaver has joined #openstack-infra21:18
*** rlandy|ruck is now known as rlandy|ruck|brb21:21
*** slaweq has joined #openstack-infra21:25
*** bobh has joined #openstack-infra21:26
*** bobh has quit IRC21:27
*** slaweq has quit IRC21:30
fungilogan-: ooh, thanks! i agree the symptoms looks outwardly like they could be i/o bottlenecks, so writethrough would potentially have explained a lot of it21:31
openstackgerritMerged openstack-infra/zuul master: Use opendev docker jobs  https://review.openstack.org/64946621:31
*** rlandy|ruck|brb is now known as rlandy|ruck21:39
*** slaweq has joined #openstack-infra21:47
*** raissa has quit IRC21:51
*** slaweq has quit IRC21:51
*** pcaruana has quit IRC21:51
*** slaweq has joined #openstack-infra21:52
mriedemgmann: done on those trove stable changes, and rebased them into a series21:52
*** michael-beaver has left #openstack-infra21:52
clarkbmriedem: as a sanity check e-r has been happy since we made those improvements ya?21:53
gmannmriedem: nice, thanks a lot :)21:53
*** dpawlik has quit IRC21:53
mriedemclarkb: the indexes are up to date21:54
mriedemData Last Updated: Thu Apr 04 2019 16:30:02 GMT-0500 (Central Daylight Time)21:54
mriedemclarkb: i haven't seen e-r bot comment on a failed change in a long time though21:54
clarkbhrm21:55
clarkbits possible we haven't completely fixed the queue backup behavior it has there21:55
clarkbI can restart it now and see if that comes back, if it does there is a good chance it is still backing up that queue21:55
*** auristor has quit IRC21:57
*** slaweq has quit IRC21:57
*** bnemec has quit IRC22:01
*** mattw4 has joined #openstack-infra22:04
*** dpawlik has joined #openstack-infra22:05
*** rascasoft has quit IRC22:05
*** rascasoft has joined #openstack-infra22:06
ianwhrm, we have ready arm64 nodes, but https://review.openstack.org/552700 really doesn't seem to want to use one22:07
*** dpawlik has quit IRC22:09
clarkbok time to review letsencrypt changes22:12
*** auristor has joined #openstack-infra22:14
clarkbianw: every host verifying a letsencrypt cert needs the CNAME from opendev.org to acme.opendev.org? (we can't do a global domain level redirect I guess). Also did the setup of acme.opendev.org go through ansible we just don't manage the zone file for it?22:14
ianwclarkb: to your second question first; yes acme.opendev.org is an "unmanaged domain" per https://review.openstack.org/#/c/641155/ ... so if there's no zone file there, ansible will put a blank one in, otherwise it will leave it alone.  this just ensures it's always valid22:16
ianwfor "host.opendev.org" LE will be looking for _acme-challenge.host.opendev.org ; so yeah, each host needs to point that at acme.opendev.org22:17
ianwclarkb: sample records currently are -> https://git.openstack.org/cgit/openstack-infra/zone-opendev.org/tree/zones/opendev.org/zone.db#n6122:18
ianwthat was what i used to validate the cert generation22:19
clarkb--yes-I-know-dns-manual-mode-enough-go-ahead-please made me laugh a little22:19
ianwyeah, acme.sh really seems to not want you to do this22:20
ianwi imagine though it's probably been a constant source of bugs from people not quite understanding what's going on22:20
*** diablo_rojo has joined #openstack-infra22:20
ianwit is quite geared towards dns-as-a-service implementations22:20
ianwultimately, i guess our dns-as-a-service is ansible :)22:21
*** rcernin has joined #openstack-infra22:23
ianw(that said i still think it's the best tool for the job.  having no dependencies but standard unixy tools is great, ultimately all it's really doing is a few wgets and then openssl magic)22:25
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Use the buildset registry in zuul-quick-start  https://review.openstack.org/64946722:27
*** diablo_rojo has quit IRC22:28
*** diablo_rojo has joined #openstack-infra22:28
*** diablo_rojo has quit IRC22:31
*** whoami-rajat has quit IRC22:32
*** ykarel|away has quit IRC22:33
tonybgmann: I'll look at it I got side tracked and lost that item on my todo list22:34
*** igordc has quit IRC22:34
*** diablo_rojo has joined #openstack-infra22:34
*** wolverineav has quit IRC22:35
*** harlowja has quit IRC22:36
*** ykarel has joined #openstack-infra22:36
clarkbianw: ok reviewed. Looks good though I had some comments (but left a +2 as it seems to be working as is)22:39
*** mrhillsman_bbiab is now known as mrhillsman22:40
*** aaronsheffield has quit IRC22:40
ianwclarkb: thanks, will respond.  just quickly the renewal does require re-authenticating a new txt record, it's more or less like new issue22:42
clarkbianw: do we need to grep out the txt data there then?22:42
clarkb(where I left my comment asking the question)22:42
ianwclarkb: and yeah, you're right on only using one value of the tuple.  in prior changes it was referencing it, i thought maybe it may be useful in the future, i think i put in comments sort of noting that22:43
ianwclarkb: no, so we always do issue -- only if there's no cert or it needs renewal do we get the TXT record outputs.  then we do renew -- the ansible should skip doing this unless there is actually something to renew22:44
clarkbah ya I see that now only when acme_txt_required's length is > 0 do we run the renew command22:46
corvusianw: http://paste.openstack.org/show/748908/22:46
ianwcorvus: hrm, i was looking at node request 300-000263916322:47
corvusianw: you didn't say so :)22:47
ianwcorvus: oh, i dunno, i'm flying blind here just trying to figure out why this job isn't launching :)22:48
corvusianw: node 0004768871 from that request has the same error22:48
corvusunfortunately i don't know what "openstack.exceptions.SDKException: Error in creating the server" means :(22:49
ianwi think it's timeouts?22:49
clarkbcould be fallout from the sdk upgrade thing that just happened maybe?22:49
ianwthe weird thing is, before we started this, we had an active node22:50
corvusianw: it's 6 seconds after start of creation22:50
clarkbianw: last question about letsencrypt (I hope) acme.sh will only emit txt records on issue if the cert we already have does not exist or is at least 60 days old? (want to make sure I understand the mechanism that ensure we renew within 90 days)22:51
*** diablo_rojo has quit IRC22:51
ianwclarkb: yep, you run acme.sh and it looks at the cert and says "this doesn't need to be renewed"22:52
clarkbya looks like --days is the flag to set if we want to change the default of 60 days22:52
ianwclarkb: specifically in the logs it says "[Tue Apr  2 07:39:14 AEDT 2019] Skip, Next renewal time is: Fri May 31 05:26:48 UTC 2019"22:52
clarkbthen because we run this cron about 30 times a day we should catch it before 90 days are up22:52
*** diablo_rojo has joined #openstack-infra22:53
*** slaweq has joined #openstack-infra22:54
fungii'm more concerned about not noticing it's broken22:55
fungithough if we continue doing the certcheck independent of that we should be covered22:55
fungistill, renewing after 30 days might make some sense22:56
clarkbfungi: ya I think checking externally via certcheck is likely our best bet there22:56
*** wolverineav has joined #openstack-infra22:56
clarkbthen its harder to break the whole thing and not notice22:56
*** slaweq has quit IRC22:58
*** tkajinam has joined #openstack-infra22:59
fungithough we do still need to move to a new enough certcheck that we can properly test through sni22:59
fungithat's how the zuul-ci.org expiration slipped past us23:00
clarkbdo we run that on status.o.o today?23:01
clarkbno cacti23:02
corvusianw: as you may have seen in #zuul -- unfortunately we seem to have hit a case where nova simply says "error" with no additional information, so the only recourse is a support request to the cloud provider i think23:02
*** rlandy|ruck is now known as rlandy23:03
fungiclarkb: yeah, the certcheck in xenial is just barely too old to do sni properly23:03
mordredefried, mriedem: ^^ if we get a server in ERROR state and there is no fault object (or no message in the fault object) - is there any other place we should be looking api-wise to try to learn why it's in ERROR state?23:03
fungi(or is the api for that "open a support ticket with your provider?")23:04
fungiclarkb: on the other hand, if we wanted a dedicated certcheck host, i bet that would be easy to containerize23:05
clarkbhttps://github.com/Matty9191/ssl-cert-check/commit/f0a7230a9672360a5e62aba4fa1641fb2918220d is that the commit we need?23:05
clarkbmaybe instead of using the distro package we should just pull that git repo down23:06
clarkbI bet I can make that change pretty quickly /me gives it a try23:06
mriedemmordred: hmm, weird, you could check the instance actions list for the server23:07
dabukalamany chance someone could have a look at this when they have a free sec? https://review.openstack.org/#/c/644679/\23:07
mriedemnova instance-action-list <server>23:07
mriedemmordred: are you admin role or not?23:07
mordredmriedem: non admin23:07
mordredmriedem: just normal cloud user23:07
fungiclarkb: it's been a while since i looked so i honestly don't recall... but the changelog (or package changelog maybe?) mentioned it i think23:07
mriedemthe instance action might show which event failed23:07
mriedemhttps://docs.openstack.org/python-novaclient/latest/cli/nova.html#nova-instance-action-list23:08
fungiclarkb: but yeah, that seems like a safe enough thing to maybe not bother sticking to the distro package on23:08
mriedemhttps://docs.openstack.org/python-novaclient/latest/cli/nova.html#nova-instance-action23:08
mordredmriedem: k - but there's no additional places to look on the server object itself without making another api call in this case, yeah?23:08
mriedemmordred: just the fault23:08
mordredkk23:08
mordredmriedem: this is in the nodepool context trying to provide additional debug logging in the cases where nodes can be boot ... so I think we want to avoid the extra calls - in this case I thnik we'll have to stick with "shrug"23:09
mordredthanks!23:09
mordreds/can be/cannot be/23:09
mriedemif you can get some logs to figure out where it failed, i can see if we have fault handling b/c anytime the server is in ERROR status there should be a fault23:09
corvusi'll try to find the action list23:10
corvusthe server has already been deleted23:12
openstackgerritClark Boylan proposed openstack-infra/puppet-ssl_cert_check master: Run ssl-cert-check out of git source  https://review.openstack.org/65016223:12
clarkbfungi: ^23:12
clarkbcorvus: mordred ianw mriedem may need to boot a server manually outside of nodepool23:13
mordredcorvus: I see a bug23:13
mordredcorvus: that is likely causing this to be hidden23:13
mordredcorvus: nevermind23:14
mordredcorvus: I was wrong- I was thinking we might be normalizing the fault away - but we shouldn't be23:14
clarkbianw 650162 may interest you as well given the slight relation to the letsencrypt work23:15
fungiclarkb: i half expect that as soon as we approve that change we'll be promptly spammed about some number of certs we didn't know are about to expire23:15
clarkbfungi: :)23:15
corvusfungi: best avoid it then!23:15
* fungi sticks his head back in the sand23:16
mordredfungi: sand is your friend23:18
*** dklyle has quit IRC23:19
fungii have a car full of the stuff if you need any23:19
clarkbbah there is a puppet syntax bug in that23:19
openstackgerritClark Boylan proposed openstack-infra/puppet-ssl_cert_check master: Run ssl-cert-check out of git source  https://review.openstack.org/65016223:20
clarkbnow there is one fewer syntax error23:20
fungialso every time i vacuum the house, it's like half of what i pick up is just loose sand23:20
clarkbfungi: sounds like you should replace your floors with grass23:20
clarkbhold the sand in place and fight erosion :)23:20
corvusall you have to do for that to happen is: nothing.23:21
fungihah23:21
clarkbinfra-root not sure if you all saw but I sent email to the infra list solicting feedback on dmarc_moderation_action handling options for a xenial listserv23:21
fungidunno, every time my yard gets inundated with salt water it seems like the grass takes a major hit. marsh reeds is what i really need23:22
corvusclarkb: what's your timetable for the list upgrade?23:23
clarkbcorvus: apparently our permanent DST bill requires california and washington also agree to switch to permanent DST, but it just passed in the state senate and is headed to the house next :)23:24
clarkbcorvus: I'd like to do it sometime this month since trusty is EOL in like 3 weeks maybe 2 at this point23:24
mordredfungi: have you tried planting coral?23:24
clarkbcorvus: looking at a calendar probably the week after the 19th23:24
clarkbcorvus: 22nd or 23rd maybe?23:24
*** _erlon_ has quit IRC23:25
fungimordred: (unfortunately?) most of my living space is too dry for coral23:25
mordredfungi: of course, then you'd just wind up with the parrot fish eating it and end up with sand anyway23:25
mordredfungi: that's probably for the best23:25
fungipermanently switching to pdt would basically be the same as just being on mst year round, right?23:26
mordredfungi: yes. but it would be called pdt23:26
fungioh, right, to maintain an independence of identity23:27
clarkbwell we might actually have to switch to mountain time because congress ahs to authorize changes to dst23:27
mordredfungi: so you could have signs on the interstate saying "leaving mountain time, entering pacific time" - but have no action needed23:27
clarkbbut states can choose their non dst timezone aiui23:27
mordredclarkb: hahahaha23:27
corvusclarkb: i think for a complete answer we need to address the question of whether we want to implement the reject-on-mailman-will-alter-message behavior.  in other words, broadly speaking, we either try to avoid dmarc issues by not altering messages and rejecting in the cases where doing so would break dmarc, or give up and wrap or munge.23:27
*** wolverineav has quit IRC23:27
corvusclarkb: most of the options on the etherpad are about avoiding altering messages, but i think if we're going to continue down that path we need to commit to rejecting when we can't23:28
corvus(because right now, we are accepting messages we know we can't deliver to some people, which is not good)23:28
mordredclarkb: and congress is not needed to approve ceasing to observe DST right? so the bill could be "stop observing DST and move to mountain"23:28
clarkbcorvus: do you think we need to couple that to the upgrade?23:28
fungiit's a sticky topic. the merits to giving up are that the software is written to do that. the software needed to do the rejecting would need someone to write it23:29
clarkbcorvus: or do you think it is safe to upgrade with a mostly status quo then address it one way or the other?23:29
clarkb(or is the shiny new button too much of a potential honey pot to have to untangle later)23:29
corvusclarkb: i think status quo upgrade is okay.  and let's just ask people not to change that right now.23:29
fungipeople do seem to rather like clicking shiny new buttons23:30
mordredcorvus: reject-on-mailman-will-alter-message would be an exim input filter I suppose?23:30
corvusclarkb: then maybe we can hash it out at ptg or something23:30
corvusmordred: yep23:30
fungimordred: yes23:30
clarkbcorvus: ok we should be able to note that in the upgrade announcement, do the upgrade then ya dig in at the ptg or later23:30
clarkbcorvus: fungi it could potentially be a mailman pipeline entry too?23:31
fungiwe would not want to bounce after accepting into the queue, as 90% of what we receive is actually spam23:31
mordredyeah23:31
corvusmordred: rough idea on implementation would be something like "write a python script that either looks for the known breakage cases, or maybe even does "import mailman" and sees what it would do to the message"23:31
*** wolverineav has joined #openstack-infra23:31
mordredcorvus: oh fun23:31
corvusmordred: (if the cases are really simple, we could probably just write exim rules)23:31
*** wolverineav has quit IRC23:31
*** wolverineav has joined #openstack-infra23:32
fungimost of the unaddressed problems at this point are around mailman's insistence on normalizing header indents23:32
clarkbif we wrote a custom handler it should be able to go ahead of the spamdetect handler which is where we first start the munging/handling of this stuff aiui23:32
clarkbhrm though maybe not of the normalized header indents23:32
fungiand also it seems to rewrite some headers and redo the line wrapping in so doing23:33
fungiwhich gets screwy of those headers are malformed to begin with23:33
corvusclarkb: maybe -- if it's a mm filter, we'd have to be able to generate a bounce message to the sender.  if we do it in exim, we can reject at smtp time which is always preferable.  so if there's not a compelling reason to do it in mailman, exim would be preferred i think.23:33
clarkbgotcha23:33
clarkb(mostly just mentioning it at as an option as I totally got a custom handler working while testing this upgrade :) )23:34
corvusclarkb: though, perhaps it could be the last filter in the pipeline and then it could just do "does dmarc validate? if no, generate bounce to sender"23:34
clarkbgiven this discussion I'll probably use next weeks meeting to schedule the upgrade. The only reason I'm wary of doing it next week (or the big reason at least) is that corvus will be afk. If we don't think short notice is a problem and others are cool with it maybe I'll do it fridayish23:35
corvusthat might be the simplest and most reliable implementation23:35
clarkbthats a week from tomorrow23:35
fungilanguishing on my todo list is to also implement score-based spam filtering at rcpt time in exim, to handle things like the unending flood of (spoofed?) @qq.com spam to -owner aliases23:35
clarkbcorvus: that would definitely be fairly accurate. Except for things like the base64 conversion which happen even later in the mm processing23:35
clarkbbut ya that should be really accurate23:36
ianwcorvus: sorry, the moment i asked for help the electrician arrived.  long story short, the guy who put a screw through the cat6 cable is pretty lucky he didn't hit the live 240v cable next to it ...23:36
clarkbianw: careful I think stuff like that is why we insist on 110v here23:36
fungithough also i skim and discard a few hundred spam posts per day for the openstack-discuss ml alone23:36
fungiyeah, i could stick my tongue in an electrical outlet here in the states and survive only mildly shaken23:37
anteayabased on experience?23:37
fungilet's say it's speculation ;)23:38
anteayaha ha ha23:38
clarkbcorvus: to consider the other major option the downsides to wrapping/munging are rendering "issues" in clients and inability to properly use things like contact lists?23:38
* mordred agrees with fungi from related experience - other than it would be very hard to get the tongue into the US electrical outlet23:38
clarkbWhen I was debugging the base64 stuff I found mention that apple devices really hate the wrap method23:38
fungithough i can say from experience than holding both leads of a pots line when a ring pulse comes through is far worse than grabbing live home electrical wires here23:38
clarkbbecause tehy don't show you the original email23:38
anteayafungi glad I can benefit from your experience23:39
mordredyeah. home electrical shock is just annoying. it's like "dang it, why did the previous person wire this backward"23:39
*** igordc has joined #openstack-infra23:39
mordredincidentally- it feels exactly like getting a tattoo23:40
fungi(and then you remember that the previous person was also you)23:40
mordredfungi: sssh23:40
corvusmordred: maybe your tattooist should have their grounding checked?23:40
mordredcorvus: sssh23:40
*** eharney has quit IRC23:40
corvusmordred: i guess tattoo guns are 60hz solenoids?23:41
fungithat would make sense23:41
fungisimple in design23:41
mordredcorvus: yeah. it's the buzz the feels the same23:41
mordredso - getting a tattoo _basically_ feels like a continuous shock more or less. I think this is why it didn't bother me too much - and why sandy was so annoyed that it didn't bother me too much :)23:42
mordredmaybe that indicates that I've been shocked enough for it to not bother me - which might not make people believe strongly in my electrical skills23:43
fungii suppose in some parts of the world, a tattoo takes 20% longer23:43
mordredhahaha23:43
*** tosky has quit IRC23:43
clarkbthe original tappy tap tapmethods are definitely not 60 hz23:43
ianwwe got more volts, but we're only 50hz23:44
fungiyeah, those parts of the world23:44
ianwi also have great respect for power points, especially after i melted multimeter probes and learnt what a "floating voltage" means23:44
mordredianw: when I'm working on higher voltage panels, I tend to be more careful and actually disconnect things before working on it23:45
mordredianw: when I'm working on 110, I usually just shrug and make sure to use insulated tools23:45
corvusspeaking of 60 cycle hums.... https://www.youtube.com/watch?v=Lzlc0-Mx0sk23:46
corvus(we had that on reel to reel at the stew)23:46
clarkba friend and I shorted a car battery with some high guague wire thankfully so it basically just melted and some how didn't catch everything on fire (this was back in high school and now I fear electricity)23:46
mordredcorvus: ++23:47
ianwthis was me being an idiot and thinking maybe i could hot-rod a motor speed controller with an arduino or something.  sure the panel runs on 9v, but through a capacative dropper ...23:47
mordredha23:48
mordredcorvus: I don't think I ever listened to that on the r2r23:49
mordredcorvus: I'm also fairly certain it must have been there - since the likelihood new reels were gotten between me being there and you arriving is pretty low :)23:50
corvusi um... spent a lot of time with the r2r23:50
anteayaI love the song23:50
anteayasounds like soundtrack for the Hours23:51
corvusi did not know until now it was a collaboration with paul simon.  that's pretty cool.23:51
anteayait says nothing in the notes about paul simon23:51
clarkbI hda to google that reel to reel is what it sounded like23:51
anteayait is awesome23:51
clarkbat least I know what a floppy disk is right?23:52
anteayado you?23:52
mordredanteaya: ++23:52
clarkb(I actually have a 3.5" floppy usb drive because windows XP didn't have sata driver and so to avoid installing via IDE emulation I sideloaded drivers via floppy which was the only side loading medium the installer supported)23:53
clarkbit wasn't long after that I realized this windows stuff wasn't for me23:53
anteayaha ha ha23:53
clarkbyou know what didn't have problems with sata?23:53
clarkbthe linux kernel23:53
corvusclarkb: that is awesome you should keep that23:53
mordredanteaya: the lyrics are paul simon23:53
anteayathe lyrics are awesome23:54
anteayaI wouldn't have recognized his voice at all23:54
mordredcorvus: oh wow - that was recorded at the living room23:54
clarkbcorvus: ya its in a box in my office closet23:54
clarkbcorvus: I imagine in 20 years someone will have some file they have to get off of a floppy drive and I'll be their rescuer23:55
clarkbmore likely we'll dig out old copies of where in the world is carmen san diego and play it on dosbox23:55
anteayaclarkb: ha ha ha23:55
clarkbalso I already have a usb A to usb C adaptor for other reasons so should be covered on port compatibility for a while23:55
*** tjgresha has joined #openstack-infra23:56
mordredI recently got one of those as a happy accident23:56
ianwclarkb: yeah well, glass houses and stones ... in those days installing slackware via floppies and getting X11 working was not exactly user friendly :)23:56
mordredI needed a usb-c -> hdmi adaptor - and the one I got also had usb A ports - which it turns out work great for plugging in clickers23:56
clarkbianw: oh ya remember when you had to edit your x11 config by hand?23:56
clarkbmordred: I actually got mine so that I can yubikey on my phone23:57
anteayathis is a really long song23:57
mordredclarkb: hah. nice23:57
mordredanteaya: philip glass isn't going to rush things23:57
corvusi recently unearthed a box of floppies, and i sure did find a numbered set of 20+ and i think it might be slackware23:57
anteayamordred: my style of music23:57
corvusor maybe sls23:57
clarkbcorvus: should I bring the floppy drive to the summit so you can install it again?23:58
corvusyeah!  i'll bring my work laptop...23:58
clarkbha23:58
*** gyee has quit IRC23:58
mordredI think nova should add support for boot-from-floppy23:59
clarkbianw: I do have to say for all of my fiddling with linux ubuntu in the last half decade or so has been really user friendly for people that are not like us (eg working on linux as day job)23:59
openstackgerritMerged openstack-infra/zuul master: Use the buildset registry in zuul-quick-start  https://review.openstack.org/64946723:59
igordcmordred, +123:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!