Wednesday, 2024-06-05

ykarelThanks ihrachys haleyb for clearing RE2 bits, i did some tests in https://review.opendev.org/c/openstack/neutron/+/920978 before getting those merged and seemed all good, but seems /me missed some cases05:55
ykarelbut the assertion in commit message looks wrong, as for negative lookahead only zuul providing support for negate: true05:57
ykarelhmm i missed the tests not involving the regex mentioned with negate: true :(06:16
ykarel^zuul.d/project.*\.yaml + negate: true in irrelevant-files will make the jobs to not run if there are changes in files except zuul.d/project.yaml06:19
ykarelso making other listed regex a noop as ^ only will exclude most of the files :)06:21
ykarelconsidering it seems it's not possible to use proposed zuul negate syntax for such use cases but need to dig06:21
slaweqykarel hi, so are we good already with this regex issue and can we merge patches or should we still hold all other approvals?07:16
slaweqelodilles_ooo hi, may I have a question about policies of the requirements in the stable versions? Is it allowed to bump version of e.g. some lib in stable branch of e.g. Neutron? We were discussing that internally yestrerday and we were a bit confused TBH so I thougth that You may clarify that for me07:21
lajoskatonaslaweq: elodilles sent me this as starting point doc: https://docs.openstack.org/project-team-guide/dependency-management.html#upper-constraints 08:02
lajoskatonaslaweq: "New requirements: In nearly all cases this is not allowed. An example where this is allowed would be: A dependency of a dependency has an issue that impacts OpenStack....."08:03
ykarelslaweq, let's hold until https://review.opendev.org/c/openstack/neutron/+/921309 merges08:11
ykarelwith ntp patch merge we have some coverage now, with ^ will have more08:12
slaweqlajoskatona ok, but what about the cases when we don't need to update upper-constraints, is that allowed? Like e.g. we did change like https://review.opendev.org/c/openstack/neutron/+/903897 which bumped ovsdbapp version in stable/2023.1 branch but it was still below upper-constraints for this lib09:47
elodillesslaweq: generally it is safer to avoid such version bumps, but if the team deems so that the bug fix is important then it can be considered. in this example, since ovsdbapp is an openstack library, so it is exactly the scenario what the doc says it is somewhat allowed12:01
opendevreviewLajos Katona proposed openstack/neutron-tempest-plugin master: Tap Mirror API and scenario tests  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/88600412:02
elodillesit really is about whether the team decides the fix is more important than the problem (if there is any) that an upgrade will bring in in a deployed env12:02
elodillesthat is what i can add to this topic with my stable maintainer hat on o:)12:03
opendevreviewLajos Katona proposed openstack/neutron-tempest-plugin master: Tap Mirror API and scenario tests  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/88600412:21
slaweqelodilles ok, thx. So I thought that it is more strictly prohibited then it really is :)12:36
slaweqthx a lot for explanation12:36
ihrachyslajoskatona the section you cite is about adding completely new requirements btw. not the same case.12:53
ihrachysthe section actually applicable from the guide is12:53
ihrachys"These should be few and far between on stable branches, mainly masking known bad versions or in extreme adding a maximum version allowable for a package. We work to remove these caps as well. Raising effective minimums is only acceptable during Phase I, and only due to security issues."12:53
ihrachys(note that this guide is about requirements repo maintenance, so not directly applies to projects; we can only try to apply similar principles)12:54
slaweqykarel haleyb hi, regarding grenade jobs not triggered on the bacport https://review.opendev.org/c/openstack/neutron/+/919516 which we discussed yesterday, I checked and everything looks ok. We just have in check queue ovs grenade jobs, ovn job is only in experimental queue13:06
slaweqand ovs jobs were not triggered in this patch because it touched only files related to the ovn which are in the irrelevant files list for the ovn-grenade job13:07
slaweqmaybe we should check if/how stable this ovn-grenade-multinode job is and maybe add it to the check queue in master branch13:08
slaweqbut this can be discussed in the next ci meeting I guess13:08
ihrachysanyone noticed that neutron commits don't seem to register in stackalytics since ~Oct 2023?13:08
ihrachysother repos do register fine (at least those I checked)13:08
ihrachysreviews also do register13:09
ihrachyshere is the link: https://www.stackalytics.io/?module=neutron-group&metric=commits see that no neutron commits but others are there - e.g. neutron-lib or tempest-plugin13:09
slaweqihrachys I see commits from June 03 in https://www.stackalytics.io/?module=neutron-group&metric=commits13:10
slaweqin th activity log13:10
ihrachysfor neutron repo?13:10
slaweqyes13:11
slaweqon top of the list I see patch http://review.opendev.org/#/q/I3cae6a14044010ee16f328036278a0542a03a70113:11
ihrachysthat's not neutron repo13:11
slaweqahh, sorry13:11
slaweqit is for neutron-tempest-plugin13:11
ihrachysI'm saying other repos are fine, neutron is not13:11
slaweqso indeed there are no neutron patches there13:11
slaweqyou are right13:12
ihrachysyep; but reviews are there13:12
slaweqI think You should send email about it to the ML - hopefully some owner of stackalytics will check it13:13
ihrachysalso no "neutron" module in the list (but it's there when you select Reviews)13:13
ihrachysok will send13:13
slaweqprobably it is not there because there is no patches in current release cycle counted13:14
ihrachysafaiu Caracal and other releases is defined by cut off date, I see it defined in stackalytics tree.13:18
ihrachysemail sent; let's see if someone picks it up13:18
haleybykarel: do you need me to fix https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/921330 ? i should have marked that WIP as I did not intend for it to merge13:19
ykarelslaweq, +1 to add to add ovn-grenade check queue13:21
ykarelhaleyb, yes please13:21
haleybykarel: should i just put the negate line back? is it correct?13:22
ykarelhaleyb, nope that would not work :(13:22
ykarelfor now can just drop that files section13:23
haleybykarel: the alternative was to list all the directories in services/ which i was trying to avoid13:23
ykarelyeap /me agrees that's not easy to maintain13:23
haleybfrom a comment on the infra channel yesterday, "^zuul.d/project.*\.yaml is not the inverse of ^zuul.d/(?!(project)).*\.yaml" so it seems like we maybe just did those parts wrong and can be fixed? the externaldns one was similar13:26
haleybor is there a section for "always run if these files touched" ?13:27
ykarelcan check with infra on how to handle that negative regex with RE2 change13:40
ykarelas i am unsure if there is a way for that13:41
ykarelwith files: we can add list of files to consider for triggering jobs, but i think that would be longer list + unmanagable comparing what we already have with irrelevant-files13:43
sebaI'm looking into v6-only networks in openstack and wonder why fe80::a9fe:a9fe was chosen as metadata service address. fe80::/10 are link local addresses which won't work without zone identifier (aka %ens192 / iface) and I can't predict the iface that's going to be used. wouldn't it make sense to use something from the ULA range or otherwise make the behavior configurable?13:44
haleybseba: we chose it long ago (2020?) when we implemented it and it seems to work Ok, I can't say i've seen any issues with the zone identifier, but then maybe cloud-init is adding by default? I realize amazon finally added theirs with an fd00 prefix, and i've played with it but it didn't work exactly right. someone would have to investigate further13:57
sebayeah, with aws I can directly curl the metadata service without a zone identifier. I also wonder how this should work with cloud init without the zone identifier. In cloud init I have not found any code that would add it and I think otherwise this will just end up in a "Couldn't connect to server"14:00
sebaneutron's docs don't say much about fe80::a9fe:a9fe but novas docs mention the zone identifier here: https://docs.openstack.org/nova/latest/user/metadata.html14:01
opendevreviewFernando Royo proposed openstack/ovn-octavia-provider stable/2024.1: Don't create an OVSDB connection per API request  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/92138314:10
opendevreviewMerged openstack/neutron-fwaas master: Fix missing oslo.log options in migration tool  https://review.opendev.org/c/openstack/neutron-fwaas/+/92080314:11
opendevreviewFernando Royo proposed openstack/ovn-octavia-provider stable/2023.2: Don't create an OVSDB connection per API request  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/92138414:13
opendevreviewFernando Royo proposed openstack/ovn-octavia-provider stable/2023.1: Don't create an OVSDB connection per API request  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/92138514:14
haleybseba: there was a change to cloud-init to support this IPv6 address14:32
opendevreviewFernando Royo proposed openstack/ovn-octavia-provider stable/2023.1: Don't create an OVSDB connection per API request  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/92138514:33
opendevreviewFernando Royo proposed openstack/ovn-octavia-provider stable/2023.2: Don't create an OVSDB connection per API request  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/92138414:35
sebahaleyb, okay, I'll take another look at the cloud-init source for that14:35
haleybseba: thanks, i'd dig further just too busy today14:35
ykarelihrachys, wrt stacklytics, seems not specific to neutron, i see similar issue with other projects like cinder/glance/nova etc14:52
sebahaleyb, okay thanks, I'll continue investigating 15:00
opendevreviewyatin proposed openstack/neutron master: [DNM] check lp #2067869  https://review.opendev.org/c/openstack/neutron/+/92109115:09
opendevreviewBrian Haley proposed openstack/neutron-tempest-plugin master: Fix incorrect services/externaldns line  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/92139415:32
haleybykarel: ^^ that is the hack i did :(15:33
ihrachyshaleyb is that related to the discussion yesterday about the semantics of `files` (re "only")15:35
ihrachysI mean https://review.opendev.org/c/openstack/neutron/+/921309/comment/af50743b_bf035921/15:36
haleybihrachys: yes. in addition to the revert i had thrown-out a change for testing that merged unintentionially, that corrects the invalid section15:36
haleybhad done a similar change in n-t-p as the neutron one15:37
haleybhttps://review.opendev.org/c/openstack/neutron-tempest-plugin/+/92133015:38
ihrachyshaleyb ouch ok I see me and otherwiseguy both scrolled through the change too hastily yesterday. (perhaps this throw-away should have been a child of the proper fix...)15:42
haleybihrachys: i should have marked WIP really, not really a big deal as it was just that one job.15:43
haleybthe rest was correct i believe15:43
ihrachysit was a good patch overall, (that's why we YOLOed it instead of reverts)15:43
haleybit's still unclear to me if there is a way to get the negate behavior in one line, my brain hurts just thinking about it15:44
ykarelhaleyb, ack15:45
ykarelnot something easy to maintain but should be fine15:45
ihrachysI thought about it for 15 mins while taking a shower today, again - and I think the answer is no! :)15:45
haleybha, i come up with answers in the shower and exercising as well, mind is clear, but i did not think of regex this morning :)15:47
otherwiseguyYeah, I don't see how you can do it with out having both a positive match to limit the results of the negative match.15:49
otherwiseguysomething like "- regex: ^zull.d/.* except: \/project.yaml$" or something.15:51
otherwiseguynegation and exclusion are very different things.15:53
ihrachysthere's probably some formal argument to be made using propositional tables here... but I think it's more fun to argue about it in irc for the next few hours :)15:54
haleybright, i just didn't know if there was an inverse to irrelevant-files to always trigger15:54
ihrachyswe need job.relevant-files15:55
otherwiseguyihrachys: I may have to wait for tomorrow for multi-hour arguing :D15:56
otherwiseguy+1 for relevant files. Though I'm sure there would be cases where both options for precedence could be useful.15:58
ihrachysapparently in 2022 someone posted a patch for zuul that implemented "includes" that I think semantically identical to (non-existing) "relevant-files": https://review.opendev.org/c/zuul/zuul/+/828125 it was abandoned.15:58
ykareljob.files is what used for relevant files15:58
ihrachysykarel nope. it says in the description that if used, it will trigger *only* for these files15:58
ihrachys"This indicates that the job should only run on changes where the specified files are modified"15:59
ihrachyshttps://zuul-ci.org/docs/zuul/latest/config/job.html#attr-job.files15:59
ykarelyes right when any of the files are modified from the list15:59
ykarelwhat use case for relevant-files than? seems i missing something15:59
haleybbut according to a question i just asked on openstack-infra, irrelevant-files always wins as it's evaluated after16:00
ihrachysto be able to say that "job X should be triggered when file Y is touched, regardless of irrelevant-files filters"16:00
ykarelack got it, irreevant-files overide the files:16:01
ihrachysthen we would be able to have project.yaml in .relevant-files and zuu.d/*yaml in irrelevant-files16:01
ihrachysinstead of listing every single file like we are going to do right now.16:01
ihrachysidea: we could move all irrelevant yamls into a subdir and then list this subdir as irrelevant-files...16:04
haleybone job has a different yaml it wants to ignore16:05
haleybthe other suggestion i got was using more positive matching, but someone would have to look into that16:05
otherwiseguyif irrelevant-files overrides files, then we could we can just put zuul.d/*.yaml in files, and project.yaml in irrelevant-files?16:06
otherwiseguywait never mind, backwards.16:06
otherwiseguyLong day already16:06
* otherwiseguy goes to get coffee and a snack in lieu of a nap16:07
haleybotherwiseguy: i actually think something like that would work, clark mentioned something similar in other channel - have "files" have ^.*.py$ and ^zuul.d/.*$ and just a few things would have to live in 'irrelevant-files'. i'll open a bug to track this so we can talk about it even more :)16:27
otherwiseguyI'm happy with anything that works, even if it isn't particularly pretty. Sure it'd be nice to not have to remember other files in zuul.d/, but it's not like we add those constantly.16:28
otherwiseguy(even though I sound like a stranger to myself when I say that)16:28
haleybright, it's just that our irrelevant-files list is maybe getting unmanageable (?)16:29
otherwiseguyI don't know how zuul finds/uses the yaml files. But subdirs like ihar said would make it simple if that works for zuul.16:30
otherwiseguyhaleyb: something in neutron getting nearly unmanageable?!16:30
haleybotherwiseguy: time for rm -rf neutron ? then just add the important stuff back? :-p16:34
otherwiseguyWe could rewrite it in a real language!16:34
* otherwiseguy ducks16:34
otherwiseguybut does not duck type16:34
haleybassembly? that would be really fast16:35
otherwiseguy:D16:35
ihrachyswe need natural language. plug LLM, let it decide what to run.16:35
haleybi'll just tell my AIbot to write a new cloud network module and start my retirement16:35
otherwiseguyI think using ml2 for ovn was a mistake. We should have left it a plugin and not had to deal with this syncing dbs crap. :p16:36
haleybthe airing of grievances has started, is it early Festivus?16:38
greatgatsbyHello.  Seeing (I think) an odd issue with src/dest ports for some UDP traffic.  Running openstack yoga, we have 2 VMs on a private network, one with a floating IP. If one of the VMs tries to talk to the other over UDP, but using the floating IP, it seems the dest port on the way back is incorrect.  Apologies for the poor explanation.  Has anyone seen something like this before?17:17
opendevreviewMerged openstack/neutron-tempest-plugin master: Fix incorrect services/externaldns line  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/92139417:25
haleybgreatgatsby: have not seen that before, sorry18:20
greatgatsbyhaleyb: thanks for replying, will keep digging18:43
ihrachyshaleyb so we are still getting timeout for coverage? :)20:03
haleybihrachys: well before it was failing with Killed, but that last time it was over the 1:20 limit. as a follow-on to my temp change we can 1) add swap (ykarel's patch) and/or 2) increase timeout, assuming there isn't a hard limit in that definition20:08
haleybwe can't catch a break it seems20:09
ihrachyshaleyb you mean https://review.opendev.org/c/openstack/neutron/+/920648 ?20:12
haleybyes, that could help with Killed, after much testing it seems the coverage binary is a memory hog. since i added --concurrency 4 it runs longer so increasing timeout could help with that20:15
haleybor even revert my temp change and use swap20:15
haleybihrachys: it timed-out again of course20:43
ihrachysok. let's think it through. have you forgotten to sacrifice a black rooster to Zuul today?20:45
haleybran out over the weekend20:45
*** dasm is now known as Guest871620:46
haleybi can increase to 7200 in that patch to get us through this, short of rechecking and hoping it might be better20:46
ihrachyshaleyb what we can do is make cover non-voting until we figure it out?20:47
ihrachysat the end of the day, it's the same tests as in unit; just with cover stats collected. (that could fail when coverage drops below 82%)20:47
haleybihrachys: sure we could do that too20:47
ihrachysworst case - it goes down to 81% until we figure it out and re-enable20:48
ihrachysbut why did it start to 1h20 timeout now? I thought we had some (short) streak when it was stable, no?20:48
haleybi think it was < 1 hour for a while, but looking at other recent runs it was around 1:08, it doesn't take much to push it over from there if it hits a slow node20:50
haleybhow about this - i will update the regex patch to also make cover non-voting, but i will also change the timeout to 7200 so maybe we can get some recent numbers on how long it runs without a limit20:51
ihrachyssounds right20:53
ihrachysadd Related-bug to cover killed bug20:53
opendevreviewBrian Haley proposed openstack/neutron master: Fix regex lines in zuul.d/* files  https://review.opendev.org/c/openstack/neutron/+/92130920:55
haleybihrachys: maybe you and otherwiseguy can approve that20:55
ihrachysdone20:57
haleybthanks, i have to take off in :30 or so but will look later to see if that was happier21:01
haleybihrachys: i also have an update for the OVN router issue, but don't see the poing in pushing as no tests will run21:02
haleybs/poing/point21:02
opendevreviewMerged openstack/neutron-fwaas stable/2024.1: Remove devstack-gate requirement  https://review.opendev.org/c/openstack/neutron-fwaas/+/92074521:21
opendevreviewMerged openstack/neutron-lib master: tests: return same message for validate_[subnet*|route_cidr]  https://review.opendev.org/c/openstack/neutron-lib/+/91785521:47
ihrachyshaleyb I'd like a new neutron-lib release that is netaddr 1 compatible now (hopefully). do I proceed with release request myself or is it someone else should do? can we release async regardless of release schedule?22:26
ihrachys"Releases are requested by the PTL or release liaison for the project" ok so I guess either you haleyb or slaweq22:30

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!