| *** tkajinam has joined #puppet-openstack | 01:13 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-ironic master: Add support for audit middleware options https://review.opendev.org/c/openstack/puppet-ironic/+/789676 | 01:15 |
|---|---|---|
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-nova master: Clean up deprecated parameters of nova::compute::libvirt https://review.opendev.org/c/openstack/puppet-nova/+/789559 | 01:33 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-cinder master: Add support for MultiStrOpt https://review.opendev.org/c/openstack/puppet-cinder/+/789677 | 01:45 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-heat master: Add support for MultiStrOpt https://review.opendev.org/c/openstack/puppet-heat/+/789678 | 01:49 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent heat-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/775322 | 02:01 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent heat-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/775322 | 02:55 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent octavia-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/789701 | 02:55 |
| *** rcernin has quit IRC | 03:05 | |
| *** rcernin has joined #puppet-openstack | 03:16 | |
| *** ykarel has joined #puppet-openstack | 04:20 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent heat-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/775322 | 06:12 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent octavia-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/789701 | 06:12 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent heat-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/775322 | 06:28 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent octavia-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/789701 | 06:28 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-ironic master: Add support for audit middleware options https://review.opendev.org/c/openstack/puppet-ironic/+/789676 | 06:43 |
| *** rpittau|afk is now known as rpittau | 07:12 | |
| *** rcernin has quit IRC | 07:21 | |
| *** rcernin has joined #puppet-openstack | 07:25 | |
| *** tosky has joined #puppet-openstack | 07:30 | |
| *** jpena|off is now known as jpena | 07:57 | |
| *** rcernin has quit IRC | 07:59 | |
| *** derekh has joined #puppet-openstack | 08:00 | |
| *** amoralej|off is now known as amoralej | 08:14 | |
| *** rcernin has joined #puppet-openstack | 08:23 | |
| *** ysandeep is now known as ysandeep|lunch | 08:28 | |
| *** rcernin has quit IRC | 08:29 | |
| *** rcernin has joined #puppet-openstack | 08:38 | |
| *** rcernin has quit IRC | 08:42 | |
| *** rcernin has joined #puppet-openstack | 08:46 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent heat-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/775322 | 09:03 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-horizon master: Add support for independent octavia-dashboard configurations https://review.opendev.org/c/openstack/puppet-horizon/+/789701 | 09:03 |
| *** derekh has quit IRC | 09:05 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-nova stable/train: DNM: Test beaker job https://review.opendev.org/c/openstack/puppet-nova/+/789760 | 09:12 |
| *** dtantsur|afk is now known as dtantsur | 09:21 | |
| *** ykarel has quit IRC | 09:22 | |
| *** ykarel has joined #puppet-openstack | 09:22 | |
| *** rcernin has quit IRC | 09:30 | |
| *** derekh has joined #puppet-openstack | 09:53 | |
| *** rcernin has joined #puppet-openstack | 09:54 | |
| openstackgerrit | Tobias Urdin proposed openstack/puppet-openstack-integration stable/train: Add selinux-policy workaround to low dep in openstack-selinux https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789773 | 10:03 |
| tobias-urdin | tkajinam: ^ maybe? | 10:03 |
| *** rcernin has quit IRC | 10:05 | |
| *** ysandeep|lunch is now known as ysandeep | 10:10 | |
| openstackgerrit | Tobias Urdin proposed openstack/puppet-keystone stable/train: Check length of unique array in roles::admin https://review.opendev.org/c/openstack/puppet-keystone/+/789508 | 10:14 |
| *** tosky has quit IRC | 10:38 | |
| *** tosky has joined #puppet-openstack | 10:38 | |
| *** tosky_ has joined #puppet-openstack | 10:45 | |
| *** tosky has quit IRC | 10:47 | |
| *** tosky_ is now known as tosky | 10:49 | |
| *** rcernin has joined #puppet-openstack | 10:52 | |
| tkajinam | tobias-urdin, yeah I was thinking of the same | 10:58 |
| *** rcernin has quit IRC | 10:58 | |
| *** rcernin has joined #puppet-openstack | 11:02 | |
| *** rcernin has quit IRC | 11:06 | |
| *** rcernin has joined #puppet-openstack | 11:24 | |
| *** jpena is now known as jpena|lunch | 11:26 | |
| *** rcernin has quit IRC | 11:28 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-openstack-integration master: Disable selinux in CentOS7 beaker job https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789795 | 11:44 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-openstack-integration stable/train: Disable selinux in CentOS7 beaker job https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789816 | 11:45 |
| *** derekh has quit IRC | 11:45 | |
| *** rcernin has joined #puppet-openstack | 11:45 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-openstack-integration master: Remove leftover about removed beaker job https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789817 | 11:47 |
| tkajinam | tobias-urdin, it seems the same error is still caused even with that patch | 11:48 |
| tkajinam | tobias-urdin, ^^^ I have submitted a patch to disable selinux on centos7 beaker job. This is dirty but I believe it is a better workaround now | 11:49 |
| tkajinam | tobias-urdin, fyi, selinux-policy-3.13.1-268.el7_9.2 seems to be the latest one currently available... so updating selinux-policy has no effect, I'm afraid | 11:50 |
| *** rcernin has quit IRC | 11:55 | |
| ykarel | tkajinam, just in case you not aware, we hit similar in packstack some time back https://bugs.launchpad.net/packstack/+bug/1923005, bug have some more context | 11:58 |
| openstack | Launchpad bug 1923005 in Packstack "[Train][CentOS7] Packstack deployment fails while starting httpd with SELINUX enabled" [High,Triaged] | 11:58 |
| ykarel | likely same is hit in poi too | 11:58 |
| tkajinam | ykarel, ahh | 12:07 |
| tkajinam | ykarel, thanks for the info. yeah that looks same | 12:07 |
| tkajinam | ykarel, so IIUC recent change in openstack-selinux causes an issue in CentOS7 because CentOS7 doesn't have some rules for podman ? | 12:10 |
| tkajinam | if my understanding is correct then we'd need to branch openstack-selinux for stable releases. especially ones running on centos7 | 12:11 |
| ykarel | tkajinam, yes container-linux version is old in centos7 | 12:11 |
| ykarel | train is both c7 and c8 | 12:11 |
| ykarel | are u hitting before train too? | 12:11 |
| ykarel | before train i think it's pinned, but can recheck | 12:11 |
| tkajinam | I've not yet checked that. let me quickly try it | 12:11 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-nova stable/stein: DNM: Test beaker job https://review.opendev.org/c/openstack/puppet-nova/+/789820 | 12:12 |
| tkajinam | ^^^ let's see how this goes... | 12:12 |
| tkajinam | but if we have the same version of openstack-selinux in older branches then I guess we are likely to hit the same | 12:13 |
| tkajinam | as long as I see the issue is not reproduced in ussuri on CentOS8 but that would be because tests are executed on CentOS8 which has newer containers-selinux | 12:13 |
| *** amoralej is now known as amoralej|lunch | 12:14 | |
| *** rcernin has joined #puppet-openstack | 12:18 | |
| tkajinam | ykarel, I think you are correct about the pin. I see openstack-selinux-0.8.23-0.20200821105100.f05f4b2.el7.noarch.rpm in centos7-stein | 12:22 |
| tkajinam | which is likely to be the version without latest 3 changes | 12:22 |
| tkajinam | (and the latest 2 are causing the problem, IIUC | 12:23 |
| *** rcernin has quit IRC | 12:23 | |
| tobias-urdin | tkajinam: not sure beaker job even checks out the p-o-i change | 12:24 |
| tobias-urdin | but maybe you've pinned down the problem already? :) | 12:25 |
| ykarel | tkajinam, mainly this is the culprit https://github.com/redhat-openstack/openstack-selinux/commit/1f3ab78f0d9b5e1d76ca420873889e9c6f54faf0 | 12:26 |
| *** jpena|lunch is now known as jpena | 12:30 | |
| tobias-urdin | ykarel: is there a newer container-selinux available for centos7 we are just not updating it or it's just not there at all? | 12:32 |
| ykarel | tobias-urdin, container-selinux good version which is compatible with latest openstack-selinux not available in centos 7 base repos | 12:33 |
| openstackgerrit | Tobias Urdin proposed openstack/puppet-openstack-integration stable/train: Add selinux-policy workaround to low dep in openstack-selinux https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789773 | 12:33 |
| openstackgerrit | Tobias Urdin proposed openstack/puppet-keystone stable/train: Check length of unique array in roles::admin https://review.opendev.org/c/openstack/puppet-keystone/+/789508 | 12:34 |
| tobias-urdin | ykarel: ack | 12:35 |
| tkajinam | another option would be to pin openstack-selinux to an older version | 12:36 |
| openstackgerrit | Tobias Urdin proposed openstack/puppet-keystone stable/train: Check length of unique array in roles::admin https://review.opendev.org/c/openstack/puppet-keystone/+/789508 | 12:36 |
| tkajinam | ... ignore it. it seems that only the latest version is available | 12:36 |
| tobias-urdin | tkajinam: ack - i added dependency on your selinux disable patch to above | 12:37 |
| tkajinam | tobias-urdin, yeah I think that would be better until we have the current issue fixed in rdo side | 12:37 |
| tkajinam | tobias-urdin, thanks for updating the patch | 12:38 |
| tobias-urdin | tkajinam: ykarel thank you guys for checking everything :) | 12:39 |
| *** amoralej|lunch is now known as amoralej | 13:09 | |
| *** derekh has joined #puppet-openstack | 13:10 | |
| *** morazi has quit IRC | 13:20 | |
| *** morazi has joined #puppet-openstack | 13:20 | |
| *** dpawlik has quit IRC | 13:22 | |
| openstackgerrit | Tobias Urdin proposed openstack/puppet-neutron master: Escape hyphen in neutron_agent_sriov_numvfs regexp https://review.opendev.org/c/openstack/puppet-neutron/+/789834 | 13:45 |
| *** dpawlik5 has joined #puppet-openstack | 14:27 | |
| *** dpawlik5 is now known as dpawlik | 14:32 | |
| openstackgerrit | Ronelle Landy proposed openstack/puppet-openstack-integration master: Add fully quaified path to openstack/tempest https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789852 | 14:49 |
| openstackgerrit | Merged openstack/puppet-openstack-integration stable/train: Disable selinux in CentOS7 beaker job https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789816 | 15:03 |
| *** ysandeep is now known as ysandeep|away | 15:27 | |
| *** ykarel has quit IRC | 15:28 | |
| *** rpittau is now known as rpittau|afk | 15:52 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-openstack-integration stable/train: Fix ansible error to make selinux permissive https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789923 | 16:14 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-openstack-integration stable/train: Fix ansible error when making selinux permissive https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789923 | 16:17 |
| tkajinam | ^^ tobias-urdin mwhahaha, sorry about this :-( | 16:18 |
| mwhahaha | oops :D | 16:18 |
| *** dtantsur is now known as dtantsur|afk | 16:38 | |
| *** jpena is now known as jpena|off | 16:46 | |
| *** gfidente is now known as gfidente|afk | 16:51 | |
| *** derekh has quit IRC | 17:00 | |
| *** amoralej is now known as amoralej|off | 17:43 | |
| *** amoralej|off is now known as amoralej | 18:32 | |
| *** amoralej is now known as amoralej|off | 18:33 | |
| openstackgerrit | Merged openstack/puppet-openstack-integration stable/train: Fix ansible error when making selinux permissive https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789923 | 18:58 |
| *** tosky has quit IRC | 23:03 | |
| *** rcernin has joined #puppet-openstack | 23:04 | |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-cinder master: Fix handling of the backend_host parameter https://review.opendev.org/c/openstack/puppet-cinder/+/789087 | 23:17 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-cinder master: Deprecate the redundant cinder::backend_host parameter https://review.opendev.org/c/openstack/puppet-cinder/+/789088 | 23:23 |
| openstackgerrit | Takashi Kajinami proposed openstack/puppet-openstack-integration stable/train: Update selinux mode by root https://review.opendev.org/c/openstack/puppet-openstack-integration/+/789960 | 23:33 |
| * tkajinam sighs | 23:36 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!