16:03:14 <noonedeadpunk> #startmeeting openstack_ansible_meeting
16:03:15 <openstack> Meeting started Tue Apr 28 16:03:14 2020 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.
16:03:16 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
16:03:18 <openstack> The meeting name has been set to 'openstack_ansible_meeting'
16:03:21 <noonedeadpunk> #topic office hours
16:03:31 <noonedeadpunk> hi everyone
16:03:58 <noonedeadpunk> so, I've created an etherpad for upcoming PTG https://etherpad.opendev.org/p/openstack-ansible-ptg
16:04:12 <noonedeadpunk> I guess we need to write down topics to discuss in it
16:05:22 <noonedeadpunk> #link https://etherpad.opendev.org/p/openstack-ansible-ptg
16:14:16 <openstackgerrit> Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-rsyslog_client master: Add handled logs to the list  https://review.opendev.org/720558
16:16:47 <openstackgerrit> Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_tempest stable/train: Make upgrade jobs voting  https://review.opendev.org/724077
16:17:42 <noonedeadpunk> so regarding current work - we're fixing train to release and rocky to drop bumps.
16:17:52 <noonedeadpunk> Patches for these are mostly placed
16:20:05 <noonedeadpunk> and will try to complete contributors ussuri user goal
16:21:00 <jrosser> o/ sorry late
16:21:42 <jrosser> news from me - i got a metal build on ubuntu focal to pass tempest locally
16:22:05 <jrosser> the biggest blocker there will be needing to use galera 10.5
16:22:49 <openstackgerrit> Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-rabbitmq_server stable/train: Install rabbitmq for ubuntu from external_repo  https://review.opendev.org/723594
16:23:17 <noonedeadpunk> jrosser: yes, I'll look into galera for sure
16:23:17 <jrosser> i also have the haproxy role support for letsencrypt completely overhauled to support H/A deployments with LE, a few fixes to my patches to finish today that that is ready for review
16:23:41 <noonedeadpunk> that is really exciting feature
16:24:11 <noonedeadpunk> I'd place it for release announcements if only we were not missed it (by bad)
16:24:42 <noonedeadpunk> * we didn't miss it
16:24:55 <jrosser> i just deployed keepalived / 2 x haproxy and a backend service with it, all outside openstack-ansible
16:25:03 <jrosser> so that role is nicely portable for use elswhere
16:25:19 <noonedeadpunk> cool!
16:25:33 <noonedeadpunk> huh, maybe we should publish our roles to galaxy?
16:25:41 <noonedeadpunk> But that's probably topic for ptg?:)
16:25:47 <jrosser> yeah :)
16:27:03 <noonedeadpunk> ok, so we still have some features for the release thanks to you:)
16:27:17 <noonedeadpunk> the bad thing that we still need centos8
16:28:02 <noonedeadpunk> jrosser: btw... maria 10.5 is in beta.... https://downloads.mariadb.org/mariadb/10.5.2/
16:28:19 <jrosser> oh oops!
16:28:22 <noonedeadpunk> So I'm not sure we will do focal before U
16:28:27 <noonedeadpunk> *for
16:29:38 <noonedeadpunk> or maybe maria will create at least 10.4 for focal...
16:29:42 <jrosser> no focal here http://mariadb.mirror.digitalpacific.com.au//mariadb-10.4.12/repo/ubuntu/pool/main/m/mariadb-10.4/
16:29:45 <noonedeadpunk> I guess they're just lagging
16:30:20 <noonedeadpunk> like they have all 19 release there
16:30:39 <noonedeadpunk> so not sure why 20.04 might be omited at the moment
16:32:53 <jrosser> it's only just released i guess
16:34:44 <noonedeadpunk> I think yes, as in default repos focal has 10.3
16:34:57 <noonedeadpunk> So I'd use 10.4 for U eventually
16:37:40 <noonedeadpunk> maaritamm: can you check https://review.opendev.org/#/c/723594/ ?
16:38:19 <noonedeadpunk> I think ebbex tested it in prod and seems it should resolve rabbit upgrade issue
16:39:33 <jrosser> noonedeadpunk: we should merge this soon https://review.opendev.org/#/c/723276/
16:40:09 <jrosser> that makes all sorts of wierd stuff happen, becasue half way through bootstrap on a py3 only system we install python2(!) then ansible starts executing with py2 for tasks against the host
16:40:38 <noonedeadpunk> oh, lol we still used py2 for bottstrap
16:40:45 <jrosser> yeah, we do
16:41:11 <noonedeadpunk> that's why we saw py2 stuff and errors on hosts
16:41:25 <noonedeadpunk> while services and ansible were in py3 venvs
16:41:28 <jrosser> it also means we need things like python-pymysql to keep being installed, or the mysql ansible modules blow up
16:41:32 <noonedeadpunk> cool, nice work
16:42:00 <noonedeadpunk> I think we install them with mysql_client?
16:42:42 <jrosser> i started taking some out with the focal patches https://review.opendev.org/#/c/681759/edit/vars/debian.yml
16:42:54 <jrosser> but my first attempt went very badly becasue it put py2 on
16:43:25 <jrosser> and that was confusing "wtf is there python2 on my brand new OS for?"
16:44:00 <noonedeadpunk> yeah, that's true
16:44:32 <noonedeadpunk> I think we also have a room for cleanup in roles - we might still install some py2 package dependencies.
16:45:08 <noonedeadpunk> Also - do we need to install galera seperately? Isn't it a requirement for mariadb?
16:45:45 <noonedeadpunk> at least for ubuntu distro package it is.. https://packages.ubuntu.com/focal/mariadb-server-10.3
16:46:09 <noonedeadpunk> I think it was required explicitly before 10.3
16:46:53 <openstackgerrit> Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Allow multiple methods of installing certbot  https://review.opendev.org/722421
16:46:54 <openstackgerrit> Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Add option to use distro provided certbot package  https://review.opendev.org/722422
16:46:54 <openstackgerrit> Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Install self-signed certificate before certbot has run for the first time  https://review.opendev.org/722423
16:46:55 <openstackgerrit> Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Add documentation for HA HAProxy with LetsEncrypt certificates.  https://review.opendev.org/722424
16:46:55 <openstackgerrit> Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Allow backend healthcheck interval to be overridden per service  https://review.opendev.org/724085
16:46:56 <openstackgerrit> Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Allow ansible group for self signed certificate distribution to be overidden  https://review.opendev.org/724086
16:48:12 <jrosser> oh yes we can drop that now
16:48:40 <jrosser> there is another issue with the galera_[client|server] roles.... that they both use each other as part of their tests
16:48:53 <jrosser> so it's very difficult to land any kind of patch which bumps the version
16:49:29 <noonedeadpunk> I think we should just bump client first? or this will isntantly install server?
16:49:41 <noonedeadpunk> *newer server
16:49:43 <jrosser> i think client uses server in it's test
16:50:46 <noonedeadpunk> maybe for glaera we can just sunset functional tests then? as integrated repo checks both of them eventually?
16:50:50 <jrosser> a bunch of the py2 package dependancies are needed because we still install python2 everwhere and there are needed for ansible
16:51:23 <jrosser> so if we stop installing py2 then things should improve there, but i think there might still be a gap cloud-image vs. CI there
16:51:30 <jrosser> certinaly a bionic cloud image doesnt have py2
16:51:46 <noonedeadpunk> actually upstream one do not have as well
16:52:07 <noonedeadpunk> probably CI has already dropped py2 as well...
16:52:36 <jrosser> w was having to manually install py2 locally to get bootstrap to work
16:52:39 <jrosser> i*
16:52:50 <jrosser> which is why i got fed up with doing that and fixed it :)
16:53:07 <noonedeadpunk> so, maybe we should set ansible_python_interpreter for user_variables.yml in boostrap-hosts role?
16:53:13 <jrosser> but we don't see that same thing in the gate
16:53:31 <noonedeadpunk> but set it to py3 to explicitly make ansible to use py3
16:53:50 <jrosser> maybe, but i think thats tricky, to make a universal decision there about the path to the interpreter, unless it's happy with "python3"
16:54:10 <jrosser> it would have to be a valid choice on all distros both in and out of CI
16:55:37 <jrosser> oh haha from the infra folks https://review.opendev.org/#/c/723105/3/playbooks/group_vars/all.yaml
16:55:40 <jrosser> snap
16:55:46 <noonedeadpunk> jrosser: oh, ansible 2.9.7 has merged backported rabbitmq fix
16:55:56 <jrosser> oh excellent
16:56:04 * jrosser needs to go eat
16:56:08 <jrosser> we should try to land that
16:56:12 <noonedeadpunk> lol, yes, infra knows how to do that)
16:56:22 <noonedeadpunk> yeah
16:56:40 <jrosser> you should be able to bump the version here https://review.opendev.org/#/c/681003/
16:56:42 * jrosser realy goes
16:57:08 <openstackgerrit> Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Update ansible to 2.9.7  https://review.opendev.org/681003
16:57:19 <noonedeadpunk> Yep, I saw that one:)
16:57:51 <noonedeadpunk> #endmeeting