| *** odyssey4me is now known as Guest7192 | 03:53 | |
| rohit02 | hi team,while upgrading from ussuri to victoria ./scripts/run-upgrade.sh scripts failing https://paste.opendev.org/show/811338/ | 04:58 |
|---|---|---|
| rohit02 | noonedeadpunk: while upgrading from ussuri to victoria ./scripts/run-upgrade.sh scripts failing https://paste.opendev.org/show/811338/ | 04:59 |
| opendevreview | Aleksandr proposed openstack/openstack-ansible-os_glance master: initial commit, Implements: blueprint protecting-plaintext-configs https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/814865 | 05:36 |
| noonedeadpunk | rohit02: can you kindly paste several previous tasks (or whole keystone runtime) to understand what was happening before this one? | 07:34 |
| noonedeadpunk | wtf, where is /etc/pki/CA/cacert.pem https://zuul.opendev.org/t/openstack/build/93c8f19940f9489eb3189f1a9fd28753/log/job-output.txt#14820 | 08:42 |
| masterpe[m] | I was looking at the release notes of OSA but what happend between 21.2.5 and 21.2.10 ? | 08:45 |
| noonedeadpunk | masterpe[m]: I beleive these were just "bugfix" releases where we can backport minor adjustments and pull in new services versions | 08:46 |
| masterpe[m] | noonedeadpunk: So I need to look into git for that? | 08:46 |
| noonedeadpunk | as eventually you might now, that we provide fixed openstack services versions and we update these versions from time to time with minor releases | 08:46 |
| noonedeadpunk | we do not reflect such changes in changelogs as we don't fetch other project renos | 08:47 |
| noonedeadpunk | well that's good question actually, since in git you will see just version bumps mostly | 08:47 |
| noonedeadpunk | like https://opendev.org/openstack/openstack-ansible/commit/c66a806ac84e6d9a3c85645fcac3d06cb578590c | 08:48 |
| noonedeadpunk | hm, actually I see a way for improvement here... | 08:49 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Fix certificates group permissions https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819767 | 08:51 |
| masterpe[m] | I asked because I hit a bug and I want to know if something like this has been fixed after 21.2.6. | 08:55 |
| noonedeadpunk | bug in one of the services or in roles? | 08:56 |
| noonedeadpunk | as in case of bug in service you should look for changelogs of the specific service | 09:04 |
| noonedeadpunk | but it's not common that bugfixes are covered with release notes tbh | 09:04 |
| masterpe[m] | I don't know yet. Till now what I know is that after a reboot of the controllers not all the vxlan, bridges and connections from the namespaces are correctly created. See https://bugs.launchpad.net/bugs/1952611 Some how it has to do with the number of tentant networks that I created. | 09:04 |
| masterpe[m] | But it is not 100% clear to me and so I also don't know where the source of the problem lies. | 09:06 |
| andrewbonney | noonedeadpunk: just caught up on irc logs, sorry been away for a few days | 09:49 |
| noonedeadpunk | andrewbonney: np! | 09:49 |
| andrewbonney | your proposal looks like the cleanest option rather than reverting the existing change, I just wonder how many roles it needs updating in and whether you feel there's enough time before X? | 09:50 |
| noonedeadpunk | well, we don't have all services with oslo_concurency, but we'd need to patch most of them. I can do this today if we decide that it's the way to go | 09:51 |
| noonedeadpunk | eventually regarding landing patches it's more about how fast we will be able to review. | 09:55 |
| andrewbonney | I've got time to do reviews so happy to help with that | 09:56 |
| noonedeadpunk | Ok, so if https://review.opendev.org/q/topic:%22systemd_run_dir%22+(status:open%20OR%20status:merged) looks reasonable I will proceed with landing patches now | 09:56 |
| andrewbonney | Looks good to me | 09:58 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ironic master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/819791 | 10:02 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/819795 | 10:06 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/819795 | 10:08 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ironic master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/819791 | 10:14 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819800 | 10:18 |
| noonedeadpunk | andrewbonney: btw, there was set of patches regarding mysql pooling that damiandabrowski[m] made - would be great if you could take a look as you did a lot of work regarding this topic | 10:26 |
| noonedeadpunk | https://review.opendev.org/q/topic:%22db-pooling%22+(status:open%20OR%20status:merged) | 10:26 |
| andrewbonney | Sure, I'll take a look later today | 10:26 |
| opendevreview | Adrien Cunin proposed openstack/openstack-ansible master: Configure HAProxy to check Horizon's login page https://review.opendev.org/c/openstack/openstack-ansible/+/819801 | 10:27 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/819802 | 10:31 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_swift master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/819805 | 10:42 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_zun master: kata: disable installation on debian bullseye https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/817714 | 11:43 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_zun master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/819810 | 11:46 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_zun master: Refactor definition of lock path https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/819810 | 11:46 |
| noonedeadpunk | andrewbonney: I believe that's it for services that _require_ this change for locks to work propertly | 11:47 |
| noonedeadpunk | We don't have anything else that uses conurrency I believe... Oh well, tempest... | 11:48 |
| noonedeadpunk | but there's no service behind it | 11:49 |
| noonedeadpunk | so it's basically 9 patches | 11:49 |
| andrewbonney | Ok. I'll take a look through the patches shortly | 11:49 |
| noonedeadpunk | I'm not sure about ironic though since jamesdenton reported that ironic is broken due to pki | 11:50 |
| noonedeadpunk | but that's quite another topic | 11:50 |
| rohit02 | noonedeadpunk: now we are faling at this task https://paste.opendev.org/show/811351/ | 12:00 |
| noonedeadpunk | it's not clear from it if previous ones were executed or skipped | 12:10 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/wallaby: Always upgrade ca-certificates https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/819687 | 12:18 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/victoria: Always upgrade ca-certificates https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/819688 | 12:18 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/ussuri: Always upgrade ca-certificates https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/819689 | 12:18 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add config_tempalte to colelctions https://review.opendev.org/c/openstack/openstack-ansible/+/819814 | 12:19 |
| noonedeadpunk | rohit02: oh, well, here eventually you have failure of your repo server | 12:20 |
| noonedeadpunk | so I guess you broke 1 more thing here :) | 12:21 |
| noonedeadpunk | I'd check nginx status in repo container | 12:21 |
| noonedeadpunk | or tried to re-run repo_server role | 12:21 |
| noonedeadpunk | so, sytemd thing fails because of permission denied.... | 12:34 |
| noonedeadpunk | testing that, but that is weird | 12:36 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-systemd_service master: Use slice name for lock/run by default https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/819298 | 12:39 |
| noonedeadpunk | ok, fair, should be better now | 12:43 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add config_tempalte to collections https://review.opendev.org/c/openstack/openstack-ansible/+/819814 | 12:52 |
| noonedeadpunk | sorry for the shitstorm in advance | 13:10 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-uwsgi master: Use config_template as a collection https://review.opendev.org/c/openstack/ansible-role-uwsgi/+/819820 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-systemd_networkd master: Use config_template as a collection https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/819821 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-systemd_mount master: Use config_template as a collection https://review.opendev.org/c/openstack/ansible-role-systemd_mount/+/819822 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-systemd_service master: Use config_template as a collection https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/819823 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-ceph_client master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/819824 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/819825 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_adjutant master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/819826 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/819827 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_blazar master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_blazar/+/819828 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_barbican master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_barbican/+/819829 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_cloudkitty master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_cloudkitty/+/819850 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/819851 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_aodh master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_aodh/+/819852 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_designate master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_designate/+/819853 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_glance master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/819854 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_gnocchi master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/819855 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_heat master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_heat/+/819857 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_horizon master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/819858 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ironic master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/819859 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/819860 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/819861 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_masakari master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_masakari/+/819862 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_mistral master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_mistral/+/819863 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_murano master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_murano/+/819864 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_magnum master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/819865 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/819866 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/819867 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819868 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_placement master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/819869 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_rally master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_rally/+/819870 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_senlin master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_senlin/+/819871 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_sahara master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_sahara/+/819872 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_swift master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/819873 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_tacker master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_tacker/+/819874 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_trove master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_trove/+/819875 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_tempest master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/819876 | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_zun master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/819877 | 13:17 |
| mgariepy | nice. | 13:17 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_ceilometer master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/819878 | 13:18 |
| noonedeadpunk | RIP zuul.... | 13:19 |
| mgariepy | yep it will be busy for a few minutes.. lol | 13:20 |
| *** sshnaidm|afk is now known as sshnaidm | 13:29 | |
| noonedeadpunk | doh and rabbit repo is broken again ( | 13:32 |
| andrewbonney | noonedeadpunk: all the lock path patches look good to me. I'll add a +2 once zuul is happier | 13:54 |
| noonedeadpunk | #startmeeting openstack_ansible_meeting | 15:03 |
| opendevmeet | Meeting started Tue Nov 30 15:03:43 2021 UTC and is due to finish in 60 minutes. The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:03 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:03 |
| opendevmeet | The meeting name has been set to 'openstack_ansible_meeting' | 15:03 |
| noonedeadpunk | #topic bug triage | 15:04 |
| jrosser | o/ hello | 15:04 |
| damiandabrowski[m] | hey! | 15:06 |
| noonedeadpunk | there's a new bug reported lately by jamesdenton | 15:07 |
| noonedeadpunk | I was able to reproduce failure https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819661 | 15:07 |
| jrosser | do we have some wierd situation in the AIO where the host is both nova_compute and ironic_compute | 15:09 |
| noonedeadpunk | I think it's aio it's not the issue | 15:09 |
| noonedeadpunk | but it is in the real deployments, when nova and ironic computes are different | 15:10 |
| noonedeadpunk | or you meant it's the reason why patch fails? | 15:10 |
| jrosser | yes | 15:10 |
| noonedeadpunk | oh, it actually can be the case | 15:10 |
| jrosser | like we disable running the PKI role | 15:10 |
| jrosser | then libvirt blows up with no cert | 15:10 |
| noonedeadpunk | I was a bit confused with https://zuul.opendev.org/t/openstack/build/93c8f19940f9489eb3189f1a9fd28753/log/job-output.txt#14820 | 15:11 |
| noonedeadpunk | as we kind of run pki role with nova... | 15:11 |
| jrosser | confused how? | 15:12 |
| noonedeadpunk | and eventually if you look into inventory it will have ironic empty | 15:12 |
| noonedeadpunk | um, that pki role included and nova certs are distributed except of the CA | 15:13 |
| noonedeadpunk | Also I reproduced in AIO and in invenotry-manage I see https://paste.opendev.org/show/811354/ | 15:14 |
| noonedeadpunk | so no ironic defined | 15:14 |
| jrosser | that is all novncproxy stuff | 15:14 |
| noonedeadpunk | ah damn | 15:14 |
| jrosser | and 14827 is the intermediate+CA chain | 15:14 |
| noonedeadpunk | indeed | 15:14 |
| jrosser | this stuff all behaves kind of strange | 15:15 |
| jrosser | some wants the CA | 15:15 |
| jrosser | some wants the CA+intermediate | 15:15 |
| jrosser | some wants the chain for the cert, some wants the chain for the CA | 15:15 |
| jrosser | totally messy | 15:15 |
| noonedeadpunk | hm... so what condition there should be to satisfy us.... | 15:16 |
| noonedeadpunk | also o hosts for ironic there https://zuul.opendev.org/t/openstack/build/93c8f19940f9489eb3189f1a9fd28753/log/logs/etc/host/openstack_deploy/openstack_inventory.json.txt | 15:16 |
| noonedeadpunk | probably it should be "'ironic_compute' not in group_names"? | 15:17 |
| jrosser | i don't really follow this | 15:18 |
| jrosser | ironic_compute is an agent? or the actual ironic bare metal nodes? | 15:18 |
| jrosser | but regardless i agree that "X not in Y" is prefereable to "not X in Y" | 15:19 |
| jamesdenton | ironic_compute, i assume, is a node running nova-compute service but not libvirt | 15:19 |
| jrosser | that sounds like a control plane thing to me | 15:20 |
| jrosser | but i never did anything with ironic | 15:20 |
| jamesdenton | the problem came from the task attempting to copy certs to nova_compute group (ok) and change ownership to libvirt group (not ok for ironic nodes that are members of nova_compute) | 15:21 |
| jamesdenton | and by ironic nodes, i mean the controller nodes running ironic services and an instance of nova-compute for ironic (not the baremetal nodes themselves) | 15:23 |
| jrosser | ahha ok | 15:23 |
| jamesdenton | the compute_driver = ironic.IronicDriver for those nodes | 15:24 |
| jamesdenton | vs compute_driver = libvirt.LibvirtDriver | 15:25 |
| jamesdenton | so, i would not expect a legit compute node to be a member of ironic_compute | 15:25 |
| jamesdenton | but a controller node running ironic could be in both ironic_compute and nova_compute | 15:26 |
| noonedeadpunk | jrosser: yep, that worked out in my sandbox) | 15:29 |
| jrosser | we're missing a depends-on for https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819767 on https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819661 ? | 15:29 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Exclude ironic_compute hosts from PKI tasks https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819661 | 15:29 |
| noonedeadpunk | jrosser: well, for some reason it passes both ways... | 15:30 |
| jrosser | :) i am sooo confused right now | 15:30 |
| jrosser | 819661 is failing to start libvirt | 15:30 |
| noonedeadpunk | and that's why https://paste.opendev.org/show/811355/ | 15:31 |
| noonedeadpunk | so things are working even without 819767 by a co-incidence I believe | 15:32 |
| noonedeadpunk | and for 819661 is was really `not` in the wrong place that makes difference | 15:33 |
| jamesdenton | oh, my bad | 15:33 |
| jamesdenton | thanks for fixing that | 15:33 |
| jrosser | feels like thats a thing the linter might spot | 15:33 |
| noonedeadpunk | it probably somehow valid? | 15:34 |
| noonedeadpunk | but jsut doing wrong thing for the usecase? I'm not sure... | 15:34 |
| jrosser | very easy to do that and also mess up with "foo and bar | ternary(....)" which totally doesnt do what you expect either | 15:34 |
| jrosser | though it's valid syntax | 15:34 |
| noonedeadpunk | As eventually play is not failing because of that | 15:34 |
| noonedeadpunk | yes, exactly | 15:34 |
| noonedeadpunk | but I agree that it would be great to write up a rule for ansible-lint to cover that | 15:35 |
| noonedeadpunk | #topic office hours | 15:35 |
| jrosser | we need to make a release :) | 15:39 |
| noonedeadpunk | yes | 15:42 |
| noonedeadpunk | exactly | 15:42 |
| noonedeadpunk | I think https://review.opendev.org/q/topic:"systemd_run_dir" is pretty critical thing to land though? | 15:43 |
| noonedeadpunk | It's also great to land patches for stable branches to make bugfix releases we haven't done in a while | 15:43 |
| jrosser | looks like a number of those are approved now | 15:44 |
| noonedeadpunk | oh, indeed | 15:47 |
| noonedeadpunk | So, should I create a branching patch now? | 15:47 |
| noonedeadpunk | and we will backport things? | 15:48 |
| noonedeadpunk | or see where systemd stuff will lead us? | 15:48 |
| jrosser | looks like there are lots of patches in flight | 15:48 |
| noonedeadpunk | eventually zun and manila seems broken | 15:48 |
| jrosser | maybe if we can push to merge those in the next 24hours, +/- rabbitmq repo | 15:49 |
| noonedeadpunk | well, except https://review.opendev.org/q/topic:%22config_template_collection%22+(status:open%20OR%20status:merged) not that much | 15:49 |
| noonedeadpunk | and what's with rabbitmq? | 15:49 |
| jrosser | you said the apt repo was broken again | 15:49 |
| noonedeadpunk | ah, that | 15:50 |
| noonedeadpunk | I thought smth with role) | 15:50 |
| jrosser | i think we also need a patch to the tests repo for the config-template collection | 15:50 |
| jrosser | still a few functional jobs hanging around | 15:51 |
| andrewbonney | zun should be generally better once these patches get through, but bullseye keeps having kernel panics. I can replicate but can't diagnose | 15:51 |
| noonedeadpunk | true, I totally missed that | 15:51 |
| noonedeadpunk | will land it | 15:51 |
| noonedeadpunk | or at least push | 15:52 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Add config_template to collections https://review.opendev.org/c/openstack/openstack-ansible-tests/+/819897 | 15:54 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_glance master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/819854 | 15:55 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_keystone master: Use config_template as a collection https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/819860 | 15:56 |
| noonedeadpunk | #endmeeting | 16:05 |
| opendevmeet | Meeting ended Tue Nov 30 16:05:00 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:05 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-11-30-15.03.html | 16:05 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-11-30-15.03.txt | 16:05 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-11-30-15.03.log.html | 16:05 |
| noonedeadpunk | sorry, was interrupted throughout the meeting | 16:05 |
| noonedeadpunk | but the idea is really to release asap.. | 16:05 |
| noonedeadpunk | we have smth like a week tops until the deadline | 16:05 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/wallaby: Always upgrade ca-certificates https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/819687 | 16:21 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/victoria: Always upgrade ca-certificates https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/819688 | 16:21 |
| spatel | Always upgrade ca-certificates finally :) | 16:39 |
| spatel | noonedeadpunk i am running this playbook with tags but look like not touching any task - openstack-ansible rabbitmq-install.yml --tags rabbitmq-config | 16:40 |
| spatel | i thought task should get execute if they are part of tag | 16:40 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Fix certificates group permissions https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/819767 | 16:44 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_zun master: kata: disable installation on debian bullseye https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/817714 | 17:08 |
| noonedeadpunk | spatel: oh, well | 17:21 |
| noonedeadpunk | let me see | 17:21 |
| noonedeadpunk | yeah, it's broken | 17:22 |
| spatel | :O | 17:22 |
| noonedeadpunk | let me patch that | 17:23 |
| spatel | perfect! | 17:23 |
| opendevreview | Merged openstack/openstack-ansible stable/wallaby: Include openstack_services for murano role https://review.opendev.org/c/openstack/openstack-ansible/+/818736 | 17:29 |
| spatel | noonedeadpunk https://opendev.org/openstack/openstack-ansible-rabbitmq_server/src/branch/master/defaults/main.yml#L265 | 18:00 |
| spatel | to disable HA should i be using rabbitmq_openstack_policies: [] ? | 18:01 |
| noonedeadpunk | sorry get a bit distracted by internal stuff... | 18:02 |
| spatel | no worry | 18:04 |
| spatel | i want to disable HA completely or lets say just for nova components in that case what override i should be using? | 18:05 |
| spatel | I believe if you don't set any policy on vhost then default is non-HA | 18:05 |
| noonedeadpunk | spatel: yes, you can leave ploicy just empty for non-ha | 18:13 |
| spatel | This one right? - rabbitmq_openstack_policies: [] | 18:13 |
| noonedeadpunk | spatel: I'd suggest changing that instead rabbitmq_openstack_policies | 18:15 |
| noonedeadpunk | * https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/all/oslo-messaging.yml#L22 | 18:15 |
| noonedeadpunk | sorry not rabbitmq_openstack_policies but ^ | 18:16 |
| spatel | rabbitmq_policies: [] this one? | 18:17 |
| noonedeadpunk | spatel: do you think it's worth to set `oslomsg_rpc_policies: []` while leaving `oslomsg_notify_policies: "{{ rabbitmq_policies }}"`? | 18:17 |
| noonedeadpunk | yeah, you can just use rabbitmq_policies | 18:17 |
| spatel | i tried this - rabbitmq_policies: [] and now running rabbitmq playbook but no impact | 18:18 |
| noonedeadpunk | as notify is queues used by ceilometer usually for biling purposes | 18:18 |
| noonedeadpunk | I think you'd need to run all roles as policy is applied for each vhost independently | 18:18 |
| spatel | let me run neutron playbook | 18:18 |
| noonedeadpunk | you can run with tag common-mq | 18:18 |
| spatel | ok | 18:19 |
| spatel | running it... | 18:19 |
| spatel | no impact i can still see /neutron policy running in HA | 18:20 |
| noonedeadpunk | hm... | 18:33 |
| noonedeadpunk | so basically providing empty policy does not remove it.... | 18:33 |
| noonedeadpunk | so feels like you need to have some policy that will override it or dunno... | 18:35 |
| noonedeadpunk | because this is not executed when policy is empty https://opendev.org/openstack/openstack-ansible-os_neutron/src/branch/master/tasks/mq_setup.yml#L36-L43 | 18:35 |
| spatel | sorry i was in meeting.. now i am back | 18:38 |
| spatel | let me see what i can do or may be patch rabbitmq if it has bug | 18:39 |
| noonedeadpunk | so we eventually apply policy if any is provided. if not -do nothing. | 18:49 |
| noonedeadpunk | mb smth like that will work.. https://paste.opendev.org/show/811356/ | 18:51 |
| spatel | let me try | 18:52 |
| spatel | why rabbitmq_policies: ? | 18:56 |
| noonedeadpunk | you can use oslomsg_rpc_policies as well | 18:56 |
| spatel | https://paste.opendev.org/show/811357/ | 18:57 |
| spatel | when i use your sample code in user_variables.yml | 18:57 |
| noonedeadpunk | mmm | 18:58 |
| noonedeadpunk | doh... | 18:59 |
| noonedeadpunk | we don't have "state" here damn it | 19:00 |
| spatel | why don't we match negative in pattern '^!(.*)' | 19:01 |
| spatel | so it will exempt everything | 19:01 |
| noonedeadpunk | because you need to remove already applied policy now | 19:01 |
| spatel | or we an write new task to say non-HA which will remove HA completely, i meant remove all policies | 19:01 |
| spatel | hmm | 19:02 |
| spatel | let me remove existing policy and try.. i thought it should override it | 19:02 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Fix tags usage https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/819914 | 19:04 |
| spatel | still getting same error could not parse JSON or key=value" | 19:04 |
| spatel | let me debug and see what i can do to remove HA safe and pretty way | 19:04 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Allow to provide policy state https://review.opendev.org/c/openstack/openstack-ansible-tests/+/819915 | 19:07 |
| noonedeadpunk | spatel: ^ | 19:07 |
| spatel | oh! let me try that patch | 19:08 |
| noonedeadpunk | well, you will need to manually apply it to mq_setup.yml | 19:08 |
| noonedeadpunk | it's jsut synced from tests repo to all others | 19:08 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Allow to provide policy state https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/819917 | 19:10 |
| noonedeadpunk | sorry need to run away now | 19:11 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!