| mnasiadka | morning | 06:21 |
|---|---|---|
| mnasiadka | hrw: https://review.opendev.org/c/openstack/kolla/+/887223 - ubuntu/aarch64 fix | 06:21 |
| hrw | +2 | 06:34 |
| frickler | mnasiadka: any idea what's up with ovn? https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_9f0/887225/1/check/kolla-ansible-ubuntu-ovn/9f03229/primary/logs/container_logs/neutron_ovn_agent.txt | 06:46 |
| frickler | guess I can ask neutron ppl if that rings a bell | 06:46 |
| mnasiadka | frickler: I think there were some changes in neutron-ovn-agent - we should have a look what is required now for using it, it seems base_mac is | 06:49 |
| mnasiadka | but maybe it's a bug | 06:52 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: ansible: bump min version to 2.14 and max to 2.15 https://review.opendev.org/c/openstack/kolla-ansible/+/887227 | 06:54 |
| frickler | https://review.opendev.org/c/openstack/neutron/+/878565 looks related and matches timing wise, will move to #-neutron | 06:56 |
| mnasiadka | thanks | 06:59 |
| *** ralonsoh_ is now known as ralonsoh | 07:11 | |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add support for LetsEncrypt-managed certs https://review.opendev.org/c/openstack/kolla-ansible/+/741340 | 07:45 |
| kevko | mnasiadka: why your patch single external frontend has public port listen port and other friends for keystone service little bit different as others ? | 07:46 |
| kevko | it looks like it is somehow mixed because keystone public has a public string in variable ..so maybe you mixed ? | 07:47 |
| kevko | confused maybe ? | 07:47 |
| kevko | mnasiadka but i like it ..it's quite simple ..and it can be very usable with letsencrypt ...because then you can fetch list of domains and ask for cert renewal | 07:48 |
| mnasiadka | I don't remember :) | 07:49 |
| mnasiadka | https://review.opendev.org/c/openstack/kolla/+/886964 - another easy backport that passed | 07:49 |
| SvenKieske | the pypi mirror issues should hopefully be gone now: https://github.com/pypi/infra/pull/143 | 07:54 |
| opendevreview | Merged openstack/kolla master: rabbitmq: Fix repo for ubuntu aarch64 https://review.opendev.org/c/openstack/kolla/+/887223 | 07:58 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/2023.1: rabbitmq: Fix repo for ubuntu aarch64 https://review.opendev.org/c/openstack/kolla/+/887177 | 08:04 |
| opendevreview | Michal Nasiadka proposed openstack/kolla stable/zed: rabbitmq: Fix repo for ubuntu aarch64 https://review.opendev.org/c/openstack/kolla/+/887178 | 08:04 |
| mnasiadka | those aarch64 NODE_FAILUREs are not helping... | 08:37 |
| mnasiadka | SvenKieske: seems it did not help, or ORD RAX pypi cache needs some manual operation like dropping the cache contents | 08:46 |
| SvenKieske | mhm, can you ping Clark on #opendev? he was very helpful yesterday and is familiar with this issue | 08:48 |
| SvenKieske | or maybe pypi has even more defunct mirrors | 08:49 |
| SvenKieske | sad that we don't have the capacity to just mirror pypi completely | 08:49 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: rabbitmq: bump version to 3.12 https://review.opendev.org/c/openstack/kolla/+/887225 | 08:56 |
| mnasiadka | SvenKieske: let's wait a couple more job runs, maybe that cache invalidates itself | 09:10 |
| mnasiadka | SvenKieske: and Clark is probably still sleeping ;-) | 09:10 |
| SvenKieske | true | 09:21 |
| SvenKieske | thinking about it, of course our internal cache will still have the wrong things cached | 09:22 |
| frickler | also not obvious whether pypi already deployed that change | 09:28 |
| opendevreview | Verification of a change to openstack/kolla stable/2023.1 failed: Use erlang-25 from copr on aarch64 https://review.opendev.org/c/openstack/kolla/+/886964 | 09:33 |
| opendevreview | Robin Klostermeyer proposed openstack/kolla-ansible master: Add ironic-prometheus-exporter https://review.opendev.org/c/openstack/kolla-ansible/+/874380 | 09:56 |
| opendevreview | Robin Klostermeyer proposed openstack/kolla master: Add ironic-prometheus-exporter https://review.opendev.org/c/openstack/kolla/+/874415 | 10:00 |
| opendevreview | Robin Klostermeyer proposed openstack/kolla master: Add ironic-prometheus-exporter https://review.opendev.org/c/openstack/kolla/+/874415 | 10:12 |
| opendevreview | Robin Klostermeyer proposed openstack/kolla-ansible master: Add ironic-prometheus-exporter https://review.opendev.org/c/openstack/kolla-ansible/+/874380 | 10:14 |
| opendevreview | Merged openstack/kolla master: mariadb: Bump to current LTS (10.11) https://review.opendev.org/c/openstack/kolla/+/882924 | 10:37 |
| opendevreview | Merged openstack/kolla stable/yoga: Update support matrix https://review.opendev.org/c/openstack/kolla/+/875341 | 10:37 |
| opendevreview | Verification of a change to openstack/kolla stable/2023.1 failed: Use erlang-25 from copr on aarch64 https://review.opendev.org/c/openstack/kolla/+/886964 | 11:00 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add support for LetsEncrypt-managed certs https://review.opendev.org/c/openstack/kolla-ansible/+/741340 | 11:27 |
| kevko | folks, how did you fix this ModuleNotFoundError: No module named 'tox.config' ? :D | 11:51 |
| frickler | ENOCONTEXT | 12:20 |
| SvenKieske | kevko: what frickler is trying to convey is that we don't have any clue what you're talking about? :D | 12:25 |
| kevko | tox -e releasenotes | 12:26 |
| kevko | tox -e py39 | 12:26 |
| kevko | etc ... | 12:26 |
| kevko | tox installed in venv | 12:27 |
| kevko | python3 -m venv /tmp/ihatetox ; . /tmp/ihatetox/bin/activate ; pip install tox ; tox -e releasenotes in cwd of some project ...for example kolla-ansible :) | 12:27 |
| hrw | kevko: 'mkvirtualenv kolla;workon kolla' | 12:31 |
| kevko | hrw: hmmmmmmm, i don't know why but i had tox executable in /usr/local/bin :D | 12:35 |
| kevko | removed and installed again from pip | 12:36 |
| kevko | btw, why we have in kolla-ansible something like this | 12:38 |
| kevko | kolla_base_distro in ['ubuntu', 'debian'] else 'vitrage-api.conf' | 12:38 |
| kevko | i know what it is for ... but now i am wondering that it is ugly :/ | 12:38 |
| kevko | shouldn't we build images which are same ... | 12:39 |
| kevko | i mean ..for example this one | 12:39 |
| kevko | {% set wsgi_conf_dir = 'apache2/conf-enabled' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd/conf.d' %} | 12:39 |
| kevko | i think better way is to build same image ... same path ...doensn't matter if rocky ubuntu debian .. | 12:40 |
| hrw | kevko: wsgi depends on how apache is handled by distro. RHEL ones do it different than Debian ones | 12:40 |
| kevko | i know | 12:40 |
| hrw | that vitrage-api.conf is probably some kind of leftover of binary images | 12:40 |
| kevko | why don't we unite it? | 12:41 |
| hrw | go for it | 12:41 |
| kevko | :D | 12:41 |
| hrw | I have to find out how to disable GIC ITS in IORT if GIC_ITS SMC call does not exists | 12:41 |
| kevko | point is that for example now i am debugging rocky/ubuntu/debian letsencrypt upstream patchset | 12:41 |
| kevko | so, i am not going to run kolla-ansible everytime | 12:42 |
| kevko | i just kill one docker container ...and run another container .. | 12:42 |
| kevko | but scripts are mounted from kolla-ansible | 12:42 |
| kevko | and kolla-ansible is rendering scripts based on kolla_base_distro | 12:42 |
| kevko | so ..i need to rewrite scripts :/ | 12:43 |
| kevko | another thing is that you can have situation when you want to run some service on debian/ubuntu and some on rocky | 12:43 |
| kevko | again ... you need to comment kolla_base_distro in globals and define it in inventory for every host ... | 12:44 |
| hrw | kevko: I do not remember when last time I used kolla-ansible | 12:44 |
| kevko | :D | 12:44 |
| kevko | but you probably got it | 12:44 |
| hrw | yep | 12:44 |
| hrw | C sucks. compared to Python | 12:46 |
| kevko | well, most of the time it's just configuration paths | 12:46 |
| kevko | symlink is my friend :) | 12:47 |
| mnasiadka | hrw: rmq 3.12 seems working - https://review.opendev.org/c/openstack/kolla/+/887225 | 12:50 |
| hrw | mnasiadka: good | 12:51 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add support for LetsEncrypt-managed certs https://review.opendev.org/c/openstack/kolla-ansible/+/741340 | 12:51 |
| mnasiadka | hrw: mariadb also bumped today, so I believe we're good regarding Bookworm | 12:51 |
| hrw | mnasiadka: is there erlang 26 for bookworm? | 12:52 |
| mnasiadka | well, we always installed Ubuntu packages on Debian, right? | 12:52 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add support for LetsEncrypt-managed certs https://review.opendev.org/c/openstack/kolla-ansible/+/741340 | 12:52 |
| hrw | mnasiadka: just asking ;D | 12:52 |
| mnasiadka | bullseye uses focal, so I guess bookworm should be good with jammy? | 12:52 |
| hrw | mnasiadka: distro version is less relevant. openssl matters. | 12:53 |
| mnasiadka | hrw: Don't get me started, I love when RMQ guys create mayhem and then tell that it's OpenStack's fault | 12:53 |
| hrw | jammy was 1.1 still iirc | 12:53 |
| mnasiadka | hrw: well then RMQ team is not going to build it for you | 12:53 |
| hrw | 3> | 12:54 |
| hrw | or was it 3<== rather? | 12:55 |
| mnasiadka | I don't know and I don't want to know - tomorrow I close my laptop and forget about typing on keyboard for three weeks :) | 12:56 |
| hrw | mnasiadka: if things go right then I do similar for 2 weeks | 12:57 |
| hrw | kevko: have you though about splitting that LE patch? 180 revision beats everything I had to deal with | 13:01 |
| hrw | (in revision numbers, not size) | 13:02 |
| mnasiadka | +1 for splitting, question if that's not too much work right now :D | 13:03 |
| mnasiadka | SvenKieske, frickler: looking at the gate going green I think pypi started to get better | 13:06 |
| SvenKieske | :) | 13:09 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: CI: drop ceph jobs ulimit config for EL9 https://review.opendev.org/c/openstack/kolla-ansible/+/884488 | 13:30 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: rabbitmq: ensure Ranch ETS tables are populated before draining node https://review.opendev.org/c/openstack/kolla-ansible/+/884759 | 13:31 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add support for LetsEncrypt-managed certs https://review.opendev.org/c/openstack/kolla-ansible/+/741340 | 13:54 |
| opendevreview | Merged openstack/kolla master: base: install adduser on Debian/Ubuntu https://review.opendev.org/c/openstack/kolla/+/881948 | 14:11 |
| opendevreview | Merged openstack/kolla master: base: Debian 12 uses new APT sources file https://review.opendev.org/c/openstack/kolla/+/881950 | 14:11 |
| hrw | nice | 14:11 |
| SvenKieske | mhm, does anyone know something about the source of this? https://quay.io/repository/openstack.kolla/ubuntu-source-rabbitmq/ ? this is a 404 for me, but apparently it worked some time ago? | 14:11 |
| opendevreview | Marcin Juszkiewicz proposed openstack/kolla master: Move to Debian 12 'bookworm' https://review.opendev.org/c/openstack/kolla/+/886088 | 14:13 |
| SvenKieske | e.g. https://quay.io/repository/openstack.kolla/kolla-toolbox still exists.. the webinterface for quay.io is not helpful at all, it's not possible to directly reference an org apparently? | 14:13 |
| hrw | SvenKieske: we dropped "-source" from name | 14:13 |
| SvenKieske | are these images officially built from us? | 14:14 |
| hrw | iirc, yes | 14:14 |
| hrw | https://quay.io/repository/openstack.kolla/ubuntu-source-rabbitmq/ -> https://quay.io/repository/openstack.kolla/ubuntu-rabbitmq/ now | 14:14 |
| SvenKieske | ah right | 14:14 |
| SvenKieske | lol, now quay.io greets me with " Your user session has expired. Please sign in to continue. " -> I have no account; I don't want an account; I was never signed in, so my session can't expire.. | 14:15 |
| hrw | ;D | 14:25 |
| SvenKieske | I guess I tried to many permutations of invalid repo names and some IDS flagged me | 14:34 |
| opendevreview | Verification of a change to openstack/kolla stable/2023.1 failed: Use erlang-25 from copr on aarch64 https://review.opendev.org/c/openstack/kolla/+/886964 | 14:36 |
| frickler | the repo is https://quay.io/repository/openstack.kolla/rabbitmq , distros are just tags | 14:38 |
| frickler | we might want to clean up some old tags like master-ubuntu-focal | 14:41 |
| mnasiadka | I have some scripts for that, was thinking of moving that to kolla repo and maybe adding support to publish job to maintain those tags | 15:11 |
| mnasiadka | frickler: summarised CI job failures in a comment here: https://review.opendev.org/c/openstack/kolla-ansible/+/884488 | 15:30 |
| frickler | mnasiadka: ach, thx | 15:36 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: zun: Fix capsule functionality and tests https://review.opendev.org/c/openstack/kolla-ansible/+/887295 | 15:37 |
| mnasiadka | that might fix the zun failures | 15:37 |
| opendevreview | Verification of a change to openstack/kolla stable/2023.1 failed: Use erlang-25 from copr on aarch64 https://review.opendev.org/c/openstack/kolla/+/886964 | 16:29 |
| opendevreview | Merged openstack/kolla stable/zed: rabbitmq: Fix repo for ubuntu aarch64 https://review.opendev.org/c/openstack/kolla/+/887178 | 16:48 |
| opendevreview | Merged openstack/kolla stable/zed: Use erlang-25 from copr on aarch64 https://review.opendev.org/c/openstack/kolla/+/886965 | 16:48 |
| mnasiadka | frickler: https://review.opendev.org/c/openstack/kolla-ansible/+/887295 - seems it fixes zun :) | 18:01 |
| opendevreview | Verification of a change to openstack/kolla stable/2023.1 failed: Use erlang-25 from copr on aarch64 https://review.opendev.org/c/openstack/kolla/+/886964 | 18:17 |
| guesswhat[m] | kevko: ping, got the oidc integration working with keycloak | 21:38 |
| guesswhat[m] | found a bug there, this one https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/horizon/templates/local_settings.j2#L227 should be probably WEBSSO_KEYSTONE_URL = "{{ keystone_public_url }}/v3" | 21:39 |
| *** _nick is now known as yankcrime | 21:45 | |
| guesswhat[m] | otherwise redirects to apache mod_oidc wont work, see https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/keystone/templates/wsgi-keystone.conf.j2#L97 | 21:50 |
| guesswhat[m] | also skyline with oidc is working, see skyline.yaml, https://pastebin.com/raw/2ehpgCf1 , seems that it does not have concept of public and private endpoints, so keycloak_url has to be same as WEBSSO_KEYSTONE_URL for horizon | 22:02 |
| opendevreview | Robin Klostermeyer proposed openstack/kolla-ansible master: Add ironic-prometheus-exporter https://review.opendev.org/c/openstack/kolla-ansible/+/874380 | 22:36 |
| opendevreview | Michal Arbet proposed openstack/kolla master: review letsencrypt https://review.opendev.org/c/openstack/kolla/+/887347 | 23:30 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!