Friday, 2022-12-02

-@gerrit:opendev.org- Michael Kelly proposed:00:33
- [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/866406
- [zuul/zuul-operator] 866407: k8s: Provide tools and checker for deploy templates https://review.opendev.org/c/zuul/zuul-operator/+/866407
@michael_kelly_anet:matrix.orgcorvus: That huge commit stack should more or less reflect what we discussed around templates vs helm chart vs required operator management00:36
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 863439: doc: Rework install doc to cover both template and helm install https://review.opendev.org/c/zuul/zuul-operator/+/86343901:35
-@gerrit:opendev.org- Michael Kelly proposed:03:29
- [zuul/zuul-operator] 863586: helm: Make CRD ClusterRole rules conditional https://review.opendev.org/c/zuul/zuul-operator/+/863586
- [zuul/zuul-operator] 863476: k8s: Enable administrator to limit the watched namespace scope https://review.opendev.org/c/zuul/zuul-operator/+/863476
- [zuul/zuul-operator] 863477: k8s: Allow use of a default image version besides latest https://review.opendev.org/c/zuul/zuul-operator/+/863477
- [zuul/zuul-operator] 863571: web: Enable custom metadata for Service resources https://review.opendev.org/c/zuul/zuul-operator/+/863571
- [zuul/zuul-operator] 861279: bug: Select scheduler pod based on instance name on update https://review.opendev.org/c/zuul/zuul-operator/+/861279
- [zuul/zuul-operator] 863572: bug: Properly parameterize zookeeper-client-tls everywhere https://review.opendev.org/c/zuul/zuul-operator/+/863572
- [zuul/zuul-operator] 866295: k8s: Remove unused ClusterRole from rbac-admin https://review.opendev.org/c/zuul/zuul-operator/+/866295
- [zuul/zuul-operator] 866296: helm: Support clusteradmin role binding https://review.opendev.org/c/zuul/zuul-operator/+/866296
- [zuul/zuul-operator] 866297: k8s: Added deploy cluster admin template https://review.opendev.org/c/zuul/zuul-operator/+/866297
- [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/866406
- [zuul/zuul-operator] 866407: k8s: Provide tools and checker for deploy templates https://review.opendev.org/c/zuul/zuul-operator/+/866407
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 863439: doc: Rework install doc to cover both template and helm install https://review.opendev.org/c/zuul/zuul-operator/+/86343903:34
-@gerrit:opendev.org- Michael Kelly proposed:03:42
- [zuul/zuul-operator] 866407: k8s: Provide tools and checker for deploy templates https://review.opendev.org/c/zuul/zuul-operator/+/866407
- [zuul/zuul-operator] 863439: doc: Rework install doc to cover both template and helm install https://review.opendev.org/c/zuul/zuul-operator/+/863439
-@gerrit:opendev.org- Michael Kelly proposed:03:50
- [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/866406
- [zuul/zuul-operator] 866407: k8s: Provide tools and checker for deploy templates https://review.opendev.org/c/zuul/zuul-operator/+/866407
- [zuul/zuul-operator] 863439: doc: Rework install doc to cover both template and helm install https://review.opendev.org/c/zuul/zuul-operator/+/863439
-@gerrit:opendev.org- Michael Kelly proposed:04:25
- [zuul/zuul-operator] 866407: k8s: Provide tools and checker for deploy templates https://review.opendev.org/c/zuul/zuul-operator/+/866407
- [zuul/zuul-operator] 863439: doc: Rework install doc to cover both template and helm install https://review.opendev.org/c/zuul/zuul-operator/+/863439
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/86640604:40
-@gerrit:opendev.org- Michael Kelly proposed:04:46
- [zuul/zuul-operator] 866407: k8s: Provide tools and checker for deploy templates https://review.opendev.org/c/zuul/zuul-operator/+/866407
- [zuul/zuul-operator] 863439: doc: Rework install doc to cover both template and helm install https://review.opendev.org/c/zuul/zuul-operator/+/863439
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/86640605:14
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/86640605:57
-@gerrit:opendev.org- Simon Westphahl proposed: [zuul/zuul] 865809: Document file-matcher behavior for refs w/o files https://review.opendev.org/c/zuul/zuul/+/86580906:26
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/86640606:28
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/86640607:20
-@gerrit:opendev.org- Michael Kelly proposed: [zuul/zuul-operator] 863586: helm: Remove unnecessary CRD access from clusterrole https://review.opendev.org/c/zuul/zuul-operator/+/86358608:05
-@gerrit:opendev.org- Michael Kelly proposed:08:07
- [zuul/zuul-operator] 863476: k8s: Enable administrator to limit the watched namespace scope https://review.opendev.org/c/zuul/zuul-operator/+/863476
- [zuul/zuul-operator] 863477: k8s: Allow use of a default image version besides latest https://review.opendev.org/c/zuul/zuul-operator/+/863477
- [zuul/zuul-operator] 863571: web: Enable custom metadata for Service resources https://review.opendev.org/c/zuul/zuul-operator/+/863571
- [zuul/zuul-operator] 861279: bug: Select scheduler pod based on instance name on update https://review.opendev.org/c/zuul/zuul-operator/+/861279
- [zuul/zuul-operator] 863572: bug: Properly parameterize zookeeper-client-tls everywhere https://review.opendev.org/c/zuul/zuul-operator/+/863572
- [zuul/zuul-operator] 866295: k8s: Remove unused ClusterRole from rbac-admin https://review.opendev.org/c/zuul/zuul-operator/+/866295
- [zuul/zuul-operator] 866296: helm: Support clusteradmin role binding https://review.opendev.org/c/zuul/zuul-operator/+/866296
- [zuul/zuul-operator] 866297: k8s: Added deploy cluster admin template https://review.opendev.org/c/zuul/zuul-operator/+/866297
- [zuul/zuul-operator] 866406: k8s: Inject rbac.yaml into operator.yaml https://review.opendev.org/c/zuul/zuul-operator/+/866406
- [zuul/zuul-operator] 866407: k8s: Provide tools and checker for deploy templates https://review.opendev.org/c/zuul/zuul-operator/+/866407
- [zuul/zuul-operator] 863439: doc: Rework install doc to cover both template and helm install https://review.opendev.org/c/zuul/zuul-operator/+/863439
-@gerrit:opendev.org- Zuul merged on behalf of Clark Boylan: [zuul/zuul] 862622: Add Python 3.11 testing https://review.opendev.org/c/zuul/zuul/+/86262208:20
@gksk:matrix.orgHi Team 12:16
I am facing the below issue while building disk image using nodepool-builder . Can any one help me to resolve this issue
2022-12-02 11:14:54.970 | + sudo bash -c 'cat << EOF >/opt/dib_tmp/dib_build.FB316Zs6/mnt/etc/apt/sources.list
2022-12-02 11:14:54.970 | deb https://mirror.dfw.rax.opendev.org/ubuntu focal main universe
2022-12-02 11:14:54.970 | EOF'
2022-12-02 11:14:54.985 | + for dist in ${DIB_UBUNTU_MIRROR_DISTS//,/ }
2022-12-02 11:14:54.985 | + sudo bash -c 'cat << EOF >>/opt/dib_tmp/dib_build.FB316Zs6/mnt/etc/apt/sources.list
2022-12-02 11:14:54.985 | deb https://mirror.dfw.rax.opendev.org/ubuntu focal-updates main universe
2022-12-02 11:14:54.986 | EOF'
2022-12-02 11:14:54.998 | + for dist in ${DIB_UBUNTU_MIRROR_DISTS//,/ }
2022-12-02 11:14:54.998 | + sudo bash -c 'cat << EOF >>/opt/dib_tmp/dib_build.FB316Zs6/mnt/etc/apt/sources.list
2022-12-02 11:14:54.998 | deb https://mirror.dfw.rax.opendev.org/ubuntu focal-security main universe
2022-12-02 11:14:54.998 | EOF'
2022-12-02 11:14:55.011 | + for dist in ${DIB_UBUNTU_MIRROR_DISTS//,/ }
2022-12-02 11:14:55.011 | + sudo bash -c 'cat << EOF >>/opt/dib_tmp/dib_build.FB316Zs6/mnt/etc/apt/sources.list
2022-12-02 11:14:55.011 | deb https://mirror.dfw.rax.opendev.org/ubuntu focal-backports main universe
2022-12-02 11:14:55.011 | EOF'
2022-12-02 11:14:55.024 | + sudo mount -t proc none /opt/dib_tmp/dib_build.FB316Zs6/mnt/proc
2022-12-02 11:14:55.038 | + sudo mount -t sysfs none /opt/dib_tmp/dib_build.FB316Zs6/mnt/sys
2022-12-02 11:14:55.052 | + trap 'sudo umount /opt/dib_tmp/dib_build.FB316Zs6/mnt/proc; sudo umount /opt/dib_tmp/dib_build.FB316Zs6/mnt/sys' EXIT
2022-12-02 11:14:55.052 | + apt_get='sudo chroot /opt/dib_tmp/dib_build.FB316Zs6/mnt /usr/bin/apt-get'
2022-12-02 11:14:55.053 | + sudo chroot /opt/dib_tmp/dib_build.FB316Zs6/mnt /usr/bin/apt-get update
2022-12-02 11:14:55.213 | Ign:1 https://mirror.dfw.rax.opendev.org/ubuntu focal InRelease
2022-12-02 11:14:55.326 | Ign:2 https://mirror.dfw.rax.opendev.org/ubuntu focal-updates InRelease
2022-12-02 11:14:55.441 | Ign:3 https://mirror.dfw.rax.opendev.org/ubuntu focal-security InRelease
2022-12-02 11:14:55.556 | Ign:4 https://mirror.dfw.rax.opendev.org/ubuntu focal-backports InRelease
2022-12-02 11:14:55.672 | Err:5 https://mirror.dfw.rax.opendev.org/ubuntu focal Release
2022-12-02 11:14:55.672 | Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 104.239.150.37 443]
2022-12-02 11:14:55.789 | Err:6 https://mirror.dfw.rax.opendev.org/ubuntu focal-updates Release
2022-12-02 11:14:55.789 | Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 104.239.150.37 443]
2022-12-02 11:14:55.906 | Err:7 https://mirror.dfw.rax.opendev.org/ubuntu focal-security Release
2022-12-02 11:14:55.907 | Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 104.239.150.37 443]
2022-12-02 11:14:56.025 | Err:8 https://mirror.dfw.rax.opendev.org/ubuntu focal-backports Release
2022-12-02 11:14:56.025 | Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 104.239.150.37 443]
2022-12-02 11:14:56.043 | Reading package lists...
2022-12-02 11:14:56.048 | E: The repository 'https://mirror.dfw.rax.opendev.org/ubuntu focal Release' does not have a Release file.
2022-12-02 11:14:56.048 | E: The repository 'https://mirror.dfw.rax.opendev.org/ubuntu focal-updates Release' does not have a Release file.
2022-12-02 11:14:56.048 | E: The repository 'https://mirror.dfw.rax.opendev.org/ubuntu focal-security Release' does not have a Release file.
2022-12-02 11:14:56.048 | E: The repository 'https://mirror.dfw.rax.opendev.org/ubuntu focal-backports Release' does not have a Release file.
2022-12-02 11:14:56.051 | + sudo umount /opt/dib_tmp/dib_build.FB316Zs6/mnt/proc
2022-12-02 11:14:56.081 | + sudo umount /opt/dib_tmp/dib_build.FB316Zs6/mnt/sys
2022-12-02 11:14:56.126 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:run_d:1 : trap_cleanup
2022-12-02 11:14:56.132 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:trap_cleanup:36 : exitval=100
2022-12-02 11:14:56.137 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:trap_cleanup:37 : cleanup
2022-12-02 11:14:56.143 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:cleanup:42 : unmount_image
2022-12-02 11:14:56.149 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:unmount_image:22 : sync
2022-12-02 11:14:56.179 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:unmount_image:26 : unmount_dir /opt/dib_tmp/dib_build.FB316Zs6/mnt
2022-12-02 11:14:56.185 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:414 : local dir=/opt/dib_tmp/dib_build.FB316Zs6/mnt
2022-12-02 11:14:56.190 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:415 : local real_dir
2022-12-02 11:14:56.195 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:416 : local mnts
2022-12-02 11:14:56.201 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:417 : local split_mounts
2022-12-02 11:14:56.207 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:418 : local found_mountpoint
2022-12-02 11:14:56.213 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:420 : '[' '!' -d /opt/dib_tmp/dib_build.FB316Zs6/mnt ']'
2022-12-02 11:14:56.219 | ++ /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:427 : readlink -e /opt/dib_tmp/dib_build.FB316Zs6/mnt
2022-12-02 11:14:56.226 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:427 : real_dir=/opt/dib_tmp/dib_build.FB316Zs6/mnt
2022-12-02 11:14:56.235 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:430 : IFS='|'
2022-12-02 11:14:56.238 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:430 : read -ra split_mounts
2022-12-02 11:14:56.245 | ++ /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:435 : awk '{print $2}'
2022-12-02 11:14:56.245 | ++ /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:435 : grep '^/opt/dib_tmp/dib_build.FB316Zs6/mnt/'
2022-12-02 11:14:56.246 | ++ /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:435 : sort -r
2022-12-02 11:14:56.254 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:unmount_dir:435 : mnts=
2022-12-02 11:14:56.259 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:unmount_image:27 : '[' -n '' ']'
2022-12-02 11:14:56.264 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:unmount_image:30 : '[' -n '' ']'
2022-12-02 11:14:56.269 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:cleanup:43 : /usr/bin/python3 /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/dib-block-device.py umount
2022-12-02 11:14:56.857 | DEBUG diskimage_builder.block_device.blockdevice [-] Creating BlockDevice object __init__ /usr/local/lib/python3.6/dist-packages/diskimage_builder/block_device/blockdevice.py:229
2022-12-02 11:14:56.857 | DEBUG diskimage_builder.block_device.blockdevice [-] Params [{'config': '/opt/dib_tmp/dib_build.FB316Zs6/block-device/config.yaml', 'image-dir': '/opt/dib_tmp/dib_image.2ezluGqO', 'root-fs-type': 'ext4', 'root-label': None, 'mount-base': '/opt/dib_tmp/dib_build.FB316Zs6/mnt', 'build-dir': '/opt/dib_tmp/dib_build.FB316Zs6'}] __init__ /usr/local/lib/python3.6/dist-packages/diskimage_builder/block_device/blockdevice.py:232
2022-12-02 11:14:56.857 | INFO diskimage_builder.block_device.blockdevice [-] State already cleaned - no way to do anything here
2022-12-02 11:14:56.889 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:cleanup:44 : cleanup_build_dir
2022-12-02 11:14:56.894 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_build_dir:216 : timeout 10 sh -c ' while ! sudo rm -rf /opt/dib_tmp/dib_build.FB316Zs6/built; do sleep 1; done'
2022-12-02 11:14:56.913 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_build_dir:220 : sudo rm -rf /opt/dib_tmp/dib_build.FB316Zs6/mnt
2022-12-02 11:14:57.074 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_build_dir:221 : kill_chroot_processes /opt/dib_tmp/dib_build.FB316Zs6
2022-12-02 11:14:57.162 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_build_dir:222 : tmpfs_check 0
2022-12-02 11:14:57.167 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:tmpfs_check:23 : local echo_message=0
2022-12-02 11:14:57.173 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:tmpfs_check:24 : '[' 1 == 0 ']'
2022-12-02 11:14:57.178 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:tmpfs_check:24 : return 1
2022-12-02 11:14:57.183 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_build_dir:230 : rm -rf --one-file-system /opt/dib_tmp/dib_build.FB316Zs6
2022-12-02 11:14:57.200 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:cleanup:45 : cleanup_image_dir
2022-12-02 11:14:57.206 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_image_dir:234 : kill_chroot_processes /opt/dib_tmp/dib_image.2ezluGqO
2022-12-02 11:14:57.297 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_image_dir:235 : tmpfs_check 0
2022-12-02 11:14:57.302 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:tmpfs_check:23 : local echo_message=0
2022-12-02 11:14:57.307 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:tmpfs_check:24 : '[' 1 == 0 ']'
2022-12-02 11:14:57.311 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:tmpfs_check:24 : return 1
2022-12-02 11:14:57.317 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/common-functions:cleanup_image_dir:241 : rm -rf --one-file-system /opt/dib_tmp/dib_image.2ezluGqO
2022-12-02 11:14:57.330 | + /usr/local/lib/python3.6/dist-packages/diskimage_builder/lib/img-functions:trap_cleanup:38 : exit 100
Exit code: 100
@jim:acmegating.comgk saikrishna: that looks like you're trying to use opendev's mirrors, so i don't think that's a zuul problem per se.  my guess is that if you're getting a certificate error is that you're probably running behind a MITM proxy that is inserting its own (invalid) certificate.  you may need to adjust your build environment to accomodate that (either add its cert, or configure a proxy server).  i should also add that if you ask the folks in #_oftc_#opendev:matrix.org they will probably tell you that the mirrors are not really intended for external use, so you might want to switch to using ubuntu servers.14:23
@michael_kelly_anet:matrix.orgcorvus: https://review.opendev.org/c/zuul/zuul-operator/+/853696/20 16:30
@michael_kelly_anet:matrix.orgRegarding your question, how are folks expected to upgrade between versions using the operator today?  There's no details of this in the current operator documentation and I know, for example, that the template based approach currently pulls the `latest` tag of each component version, but afaict, there's nothing controlling those upgrades directly.16:31
@michael_kelly_anet:matrix.orgIn my experience, something like pod flapping can result in a broken setup because you'll get a newer version of pods that is not compatible with the other running pods :)16:35
@jim:acmegating.comMichael Kelly: replied inline16:39
@michael_kelly_anet:matrix.orgthanks17:18
@michael_kelly_anet:matrix.orgAdded a reply: tl;dr I believe nothing will happen to existing deployed clusters until some config piece changes, but tweaks will be desired.  I'm not clear how to best capture this.17:29

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!