Tuesday, 2024-01-30

clarkbjust about meeting time18:59
clarkbthe agenda for today is a bit shorter than some of the recent agendas. Maybe that means we'll be able to find $meal a bit early today19:00
clarkb#startmeeting infra19:00
opendevmeetMeeting started Tue Jan 30 19:00:10 2024 UTC and is due to finish in 60 minutes.  The chair is clarkb. Information about MeetBot at http://wiki.debian.org/MeetBot.19:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.19:00
opendevmeetThe meeting name has been set to 'infra'19:00
clarkb#link https://lists.opendev.org/archives/list/service-discuss@lists.opendev.org/thread/L6CVNQQLCEZCK3I7I7FQUC7VV2UWSBHM/ Our Agenda19:01
clarkb#topic Announcements19:01
clarkbService coordinator nominations open February 6, 2024 - February 20, 202419:01
clarkb#link https://lists.opendev.org/archives/list/service-discuss@lists.opendev.org/thread/TB2OFBIGWZEYC7L4MCYA46EXIX5T47TY/19:01
clarkbThat is one week away19:01
clarkbrouhgly19:01
clarkbOpenDev PrePTG February 14+15 at 14:00-16:00UTC and 22:00-00:00UTC both days on our meetpad service.19:02
clarkb#link https://lists.opendev.org/archives/list/service-discuss@lists.opendev.org/thread/KUZG7DPU77GC3M3MKKTSYY655JLIYV4Z/19:02
clarkband the Pre PTG is two weeks away19:02
clarkb#topic Server Upgrades19:02
clarkb#link https://review.opendev.org/c/opendev/system-config/+/905510 Upgrading meetpad service to jammy19:03
clarkbfungi: frickler maybe you have time to review those changes? Otherwise I think I may work with tonyb and proceed with things with just my reviews19:03
clarkb(which coincidentally is one of the agenda items for the pre ptg, whether or not we want to do more singe reviewer approvals)19:03
clarkb#link https://etherpad.opendev.org/p/opendev-bionic-server-upgrades19:04
clarkbthis etherpad also has notes on a wiki replacement plan. If you haven't read them that may be a good idea.19:05
* frickler makes notes to take a look, also at those reviews19:05
clarkbthanks!19:06
clarkb#topic Python container updates19:06
clarkbNothing new to mention here. I think we're pretty much stalled out on the zuul oeprator stuff. But it isn't urgent. I may just remove this from the next meeting's agenda19:07
clarkb#topic AFS quota issues19:08
clarkbsomewhere on my todo list that keeps getting overlooked is ubuntu ports cleanup. /me adds it again and maybe it will get looked at19:09
clarkb#topic Broken wheel build issues19:10
clarkbthe wheels are building and being written to afs now19:10
clarkbThe remaining problem has to do with volume selection for vos release19:10
clarkb#link https://review.opendev.org/c/openstack/project-config/+/907150 Will fix centos 8 and 9 stream19:11
clarkbIn theory that change will have fixed these problems and everything centos 8/9 stream wheel related will be happy19:11
clarkbI did notice thatwhile centos 7 was working when this first came up it is not working now19:11
clarkbI haven't had a chance to look at it19:11
clarkbone thing I noticed is that I'm not sure these wheels were ever really working properly for stream19:12
clarkbthat may put more weight into the "maybe we should just shut it down side of things"19:13
clarkbhowever if things work now then letting it continue to be happy is least effort19:13
fricklertil next time it breaks ;)19:14
clarkb#topic Keycloak upgrade struggles19:14
clarkbya exactly :)19:14
clarkbrecently fungi and I started poking at keycloak upgrades. A little while back keycloak moved from wildfly as its runtime to quarkus. When they did this they didn't really make the container image migration a simple direct one19:15
clarkbthis resulted in us getting stuck behind on a legacy set of images and now we are trying to figure out how to get onto the new quarkus stuff19:15
fungibut also some useful discoveries19:15
clarkbThe biggest issue we've run into is that the existing service uses an h2 databse but keycloak considers h2 to not be production worthy so there is no migration path for that19:16
clarkbfile paths and names and db credentials have all changed19:16
clarkbthis seems to be a clear sign we should move to a real db so that is what fungi has been doing most recently. Getting mariadb up alongside keyloack19:16
fungii did try some basic migration which made it into production briefly over the weekend before i rolled it back due to breakage19:16
clarkbya including renaming and moving files19:16
fungiit would be good for someone who has successfully used keycloak.opendev.org recently to test that it's working as expected again19:16
corvusyep wfm19:17
fungianyway, for a number of reasons, it appears that trying to "migrate" our existing data will be extremely involved (switching database format, upgrading through several keycloak releases, also we should move to latest ubuntu lts while we're at it)19:18
tonyband me19:18
fungigiven that the service is used by at most half a dozen people in a non-production-critical path right now, it will probably be less work to set it up from scratch on the latest keycloak images on new ubuntu19:18
clarkbya the end result of all this wheel spinning seems to be we should do a new deployment with that we have laerned then rebuild the currently small set of integration we have using it19:18
clarkbthen we should be in a much better position for the future and being able to upgrade things19:19
fungii've got a change underway (close to complete i think) to do that19:19
fungijust adding some more hygiene to the testing now19:19
fungilike switching to group_vars and using keycloak99 for the test node, etc19:19
fungitests so far are passing, i've been adding some safety like making sure keycloak and mariadb only listen on the loopback address19:20
fungianyway, hopefully we can have a new keycloak02.opendev.org up by the time for our pre-ptg and start talking about moving forward some more on the sso spec19:21
clarkbsounds good19:21
tonyb+119:21
fungii didn't have anything else for this topic, but maybe folks have questions19:22
corvusplan sgtm, thanks!19:22
clarkb#topic InMotion/OpenMetal Cloud RabbitMQ Problems19:23
clarkbwanted to follow up on this. frickler's hunch was correct. rabbitmq had a sad19:23
clarkbtonyb: can speak more to this than I can but initially a simple docker restart of rabbitmq containers was done to try and get rabbit to cooperate and that didn't help at all19:23
clarkbthen later a restart using kolla tooling was done and that got things working again19:24
clarkbhowever there are still a number of leaked nodes we need to clean up which likely involve deeper admin work19:24
tonybYup that one.19:24
clarkbone thing I have had to do in the past to make nodes deletable is to reset their task state if they are already in a deleting task state because nova won't retry if task state is already deleting19:24
clarkbthen there is another issue we've encountered which had to do with a mismatch in cell accounting19:25
clarkbmelwitt helped the cells issue if we need help again19:25
tonybI'll get more details and then reach out on nova/melwitt19:26
tonybin the next 24-48 hours e should have things "sorted"19:26
clarkbthanks!19:27
clarkb#topic Open Discussion19:27
clarkbThat was all I had on the agenda. A reminder to add your content and interest to the pre ptg etherpad19:27
corvus#link https://etherpad.opendev.org/p/opendev-preptg-20240219:29
clarkbsounds like that may be everything19:31
clarkba rare short meeting. THank you for your time everyone!19:31
clarkbI'll close this out in a few more minutes if nothing else pops up19:31
fungithanks clarkb!19:31
tonybThanks all!19:31
corvusthanks clarkb 19:33
clarkb#endmeeting19:35
opendevmeetMeeting ended Tue Jan 30 19:35:21 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)19:35
opendevmeetMinutes:        https://meetings.opendev.org/meetings/infra/2024/infra.2024-01-30-19.00.html19:35
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/infra/2024/infra.2024-01-30-19.00.txt19:35
opendevmeetLog:            https://meetings.opendev.org/meetings/infra/2024/infra.2024-01-30-19.00.log.html19:35

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!