| *** dviroel is now known as dviroel|out | 02:53 | |
| opendevreview | James Denton proposed openstack/openstack-ansible-os_neutron master: Add Support for DPDK Bonding https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/814825 | 03:51 |
|---|---|---|
| opendevreview | James Gibson proposed openstack/openstack-ansible-os_glance master: Add support for TLS to Glance https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/821011 | 07:51 |
| opendevreview | James Gibson proposed openstack/openstack-ansible-os_glance master: Add support for TLS to Glance https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/821011 | 07:59 |
| opendevreview | James Gibson proposed openstack/ansible-role-uwsgi master: Add support for TLS to UWSGI https://review.opendev.org/c/openstack/ansible-role-uwsgi/+/820532 | 08:02 |
| opendevreview | James Gibson proposed openstack/openstack-ansible-os_glance master: Add support for TLS to Glance https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/821011 | 08:06 |
| *** ysandeep is now known as ysandeep|lunch | 08:08 | |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Use local repositories for ansible collections in CI https://review.opendev.org/c/openstack/openstack-ansible/+/821093 | 08:10 |
| *** ysandeep|lunch is now known as ysandeep | 08:38 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Add Support for DPDK Bonding https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/814825 | 08:56 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/wallaby: Fix UCA enablement for Focal https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/821084 | 09:08 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Use local repositories for ansible collections in CI https://review.opendev.org/c/openstack/openstack-ansible/+/821093 | 09:34 |
| opendevreview | Merged openstack/openstack-ansible-galera_server master: Do not verify certificate for local connects https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/820857 | 09:39 |
| jrosser | depends-on for collections seems to work with our plugins repo | 10:08 |
| jrosser | noonedeadpunk: you are probably right that an a_r_r approach (for some?) collections might be good | 10:08 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server stable/xena: Do not verify certificate for local connects https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/821181 | 10:18 |
| *** ysandeep is now known as ysandeep|afk | 10:21 | |
| noonedeadpunk | from other side mixing potatoes with bananas is probably not right.... | 10:21 |
| noonedeadpunk | it would ease life from maintenance prespective but would be harder from understanding by users what's going on and why | 10:25 |
| noonedeadpunk | and a-r-r and a-c-r are kind of user-facing things | 10:25 |
| jrosser | the plugins repo is an interesting one if it becomes a collection | 10:33 |
| jrosser | because we totally want to be using the zuul source there to validate patches | 10:33 |
| noonedeadpunk | oh, yes | 10:34 |
| jrosser | and it would be easy to accidentally always install the a-c-r version | 10:34 |
| jrosser | and if we symlink it we don't validate that ansible-galaxy can install it | 10:34 |
| jrosser | kind of messy from whichever way you look at it | 10:34 |
| noonedeadpunk | well, for a-c-r I think we can avoid defining version, but again I'm not sure what will get installed.. I guess galaxy will treat master head as version in galaxy.yml? | 10:35 |
| jrosser | my current patch uses master for openstack-ansible-plugins | 10:36 |
| jrosser | so that shows that for a developer on master branch, things are as expected | 10:36 |
| jrosser | and on stable branch we could use a tag, to make it more like other collections - that would involve modifying the release process a bit | 10:37 |
| jrosser | what would not work there is a stable branch patch to openstack-ansible-plugins, that would use the wrong code | 10:38 |
| noonedeadpunk | I think instead of tag you can also provide branch for collection? | 10:42 |
| noonedeadpunk | at least that's what doc said | 10:42 |
| noonedeadpunk | or it's more about how our zuul works? | 10:43 |
| noonedeadpunk | eventually, we can move plugins to release-independent model | 10:43 |
| noonedeadpunk | and just tag them the way we do with config_template | 10:43 |
| jrosser | I think it's more about like you say, what do users expect to find in a-c-r | 10:43 |
| jrosser | if we put a tag there, that's that's easy to understand | 10:44 |
| jrosser | we just have to make it do the right thing in CI, which would be switch out the tag for the branch name when ci_job_repo == openstack-ansible-plugins | 10:44 |
| jrosser | I think there's something already like this in openstack-ansible-tests | 10:45 |
| noonedeadpunk | and branch != master | 10:45 |
| jrosser | I think we would have master as the tag on master branch | 10:45 |
| jrosser | just like we have master as the SHA in a-r-r for master branch | 10:45 |
| noonedeadpunk | ah, well, yes | 10:45 |
| *** dviroel|out is now known as dviroel | 10:49 | |
| noonedeadpunk | damn, if we are to change releasing model, I'd probably prefered clean repo without history and branches... | 10:50 |
| noonedeadpunk | I think we can delete them though... | 10:50 |
| noonedeadpunk | but anyway, I think we need to define how to use them before doing anything with repo releasing | 10:51 |
| jrosser | indeed | 10:51 |
| noonedeadpunk | And I think you're right that we should use tags for stable and master for master | 10:52 |
| jrosser | feels like the best end user experience | 10:52 |
| noonedeadpunk | as comparing to pip collections are not tagged with dev release | 10:52 |
| noonedeadpunk | so branch is not an option.... | 10:52 |
| noonedeadpunk | as well as sha | 10:52 |
| jrosser | we can have tags on branches though, so we can mix whatever we need really | 10:53 |
| noonedeadpunk | as it's not clear if it's diverging from tag or not | 10:53 |
| noonedeadpunk | does it make sense though? | 10:53 |
| jrosser | I wonder how I get at the zuul: variable in OSA playbooks | 10:53 |
| jrosser | this is not clear for an embedded ansible | 10:54 |
| noonedeadpunk | I think we passed it with running boostrap role | 10:54 |
| noonedeadpunk | sec | 10:54 |
| noonedeadpunk | https://opendev.org/openstack/openstack-ansible/src/branch/master/zuul.d/playbooks/pre-gate-scenario.yml#L108-L112 | 10:55 |
| *** ysandeep|afk is now known as ysandeep | 10:56 | |
| noonedeadpunk | ah ,well, it's not what we need Iguess | 10:56 |
| jrosser | I could add the whole zuul: dict to that template | 10:57 |
| jrosser | there is *tons* of useful stuff about the job in there | 10:57 |
| jrosser | or make a new file | 10:57 |
| noonedeadpunk | I think we would need to create new one and somehow explicitly pass path to it for gate-check-commit.sh | 10:58 |
| noonedeadpunk | or eventually to bootstrap-aio.sh | 10:59 |
| noonedeadpunk | looking at how zuul runs now makes me wonder if we can simplify that... | 11:00 |
| jrosser | https://zuul-ci.org/docs/zuul/reference/jobs.html#user-jobs-job-variables | 11:01 |
| jrosser | would be nice even to just include a copy of that in our logs | 11:01 |
| noonedeadpunk | I think we can write them down somewhere under ZUUL_SRC_PATH with template indeed | 11:08 |
| noonedeadpunk | and then inlcude vars file with_first_found with `skip: True` | 11:10 |
| noonedeadpunk | so when file is not there we don't fail | 11:10 |
| noonedeadpunk | but yeah, it's tricky... | 11:10 |
| jrosser | how do I template out a variable so that I get "var_name: var_value" in the output | 12:35 |
| jrosser | kind of with to_nice_yaml as well | 12:36 |
| noonedeadpunk | or with: {% for key, value in zuul_vars.items() %} {{ key }}: {{ value }} {% endfor %} ? | 12:41 |
| noonedeadpunk | but yeah, I guess to_nice_yaml does kind of the same | 12:42 |
| noonedeadpunk | (actually even better) | 12:42 |
| jrosser | I am trying setting zuul_helper_var: "{ zuul: {{ zuul }} }" | 12:43 |
| jrosser | then in the template {{ zuul_helper_var | to_nice_yaml(indent=2) }} | 12:43 |
| jrosser | when we load the vars file I'd like it still to be zuul.<blah> otherwise we end up with tons of top level variables | 12:44 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Create yaml file versions of the zuul job vars for embedded ansible and logging https://review.opendev.org/c/openstack/openstack-ansible/+/821210 | 13:12 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Create yaml file of the zuul job vars for embedded ansible and logging https://review.opendev.org/c/openstack/openstack-ansible/+/821210 | 13:14 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add nfs deployment scenario https://review.opendev.org/c/openstack/openstack-ansible/+/821096 | 13:41 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add nfs deployment scenario https://review.opendev.org/c/openstack/openstack-ansible/+/821096 | 13:41 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_glance master: Drop NFS destination mount points https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/821214 | 13:56 |
| noonedeadpunk | so, https://review.opendev.org/c/openstack/openstack-ansible/+/807880 seems ready | 14:15 |
| noonedeadpunk | https://review.opendev.org/q/topic:%22config_template_collection%22+(status:open) is re-checking currently | 14:15 |
| sshnaidm | noonedeadpunk, hey, config_template will be still available as python module, right? Because we build RPM from it as from python module: https://review.rdoproject.org/r/gitweb?p=openstack/ansible-config_template-distgit.git;a=blob;f=ansible-config_template.spec;h=5563019504fe6b389ab2311cf31a3d317495772e;hb=HEAD | 14:15 |
| noonedeadpunk | sshnaidm: um, well, it is now thanks to symlinking. But eventually I'd love to leave it as a collection one day | 14:17 |
| noonedeadpunk | Does it make sense to have it as rpm when it can be easily installed? | 14:17 |
| noonedeadpunk | or it's also for CI only? | 14:17 |
| sshnaidm | noonedeadpunk, it shouldn't conflict I think, we still have python modules which are collections | 14:18 |
| sshnaidm | noonedeadpunk, it's part of tripleo product and can be used as rpm only | 14:18 |
| sshnaidm | noonedeadpunk, if you don't remove setup.py etc so it's still installable, it should be fine I think | 14:18 |
| noonedeadpunk | So, you package ansible collection as rpm for the product while not using ansible for the product? | 14:19 |
| sshnaidm | noonedeadpunk, we do use ansible | 14:20 |
| sshnaidm | noonedeadpunk, but in next versions we get rid off it | 14:20 |
| sshnaidm | noonedeadpunk, for example this is both collection and python module: https://github.com/openstack/tripleo-operator-ansible/ | 14:20 |
| sshnaidm | you can either install it with pip or with ansible-galaxy, quite convinient | 14:21 |
| noonedeadpunk | yeah, ok, got it | 14:21 |
| opendevreview | James Denton proposed openstack/openstack-ansible-os_neutron master: Add Support for DPDK Bonding https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/814825 | 14:21 |
| jamesdenton | noonedeadpunk thanks for reviewing, btw | 14:22 |
| spatel | jamesdenton +1 | 14:27 |
| jamesdenton | mornin' | 14:28 |
| noonedeadpunk | thanks for patching :) | 14:28 |
| opendevreview | Merged openstack/openstack-ansible-galera_server stable/xena: Do not verify certificate for local connects https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/821181 | 15:08 |
| jrosser | huh we really do need to branch | 15:10 |
| jrosser | this zero-testing is scary :) | 15:10 |
| noonedeadpunk | well, let's do it then I guess | 15:37 |
| *** ysandeep is now known as ysandeep|out | 15:45 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/wallaby: Update penstack-hosts version https://review.opendev.org/c/openstack/openstack-ansible/+/821236 | 15:46 |
| opendevreview | Merged openstack/openstack-ansible-os_zun master: Remove testing on debian https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/820663 | 16:08 |
| opendevreview | Merged openstack/openstack-ansible-os_zun master: Remove support for Ubuntu Bionic https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/820669 | 16:08 |
| noonedeadpunk | damn it | 16:11 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_glance master: Stop managing NFS mount destinations https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/821214 | 16:14 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts stable/victoria: Fix UCA enablement for Focal https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/821085 | 16:24 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Freeze roles for stable/xena branching https://review.opendev.org/c/openstack/openstack-ansible/+/821245 | 16:59 |
| noonedeadpunk | jrosser: I hope I haven't forgot anyting ^ | 16:59 |
| jrosser | it's release candidate though isn't it | 17:00 |
| noonedeadpunk | yep | 17:01 |
| jrosser | I think I did a bit of "list all patches on master that are not in stable/blah" scripting before to sanity check things | 17:01 |
| jrosser | there was a relatively simple git thing to do that | 17:01 |
| noonedeadpunk | well the bad news are that we won't have much time for backports.... | 17:03 |
| jrosser | no indeed | 17:03 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Freeze roles for Xena RC1 https://review.opendev.org/c/openstack/openstack-ansible/+/821245 | 17:03 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/wallaby: Update openstack-hosts version https://review.opendev.org/c/openstack/openstack-ansible/+/821236 | 17:06 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Create yaml file of the zuul job vars for embedded ansible and logging https://review.opendev.org/c/openstack/openstack-ansible/+/821210 | 17:11 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Freeze roles for Xena RC1 https://review.opendev.org/c/openstack/openstack-ansible/+/821245 | 17:19 |
| opendevreview | Merged openstack/openstack-ansible-os_neutron master: Database connection pooling improvements https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/820223 | 17:19 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron stable/xena: Database connection pooling improvements https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/821251 | 17:20 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/victoria: Update openstack-hosts version https://review.opendev.org/c/openstack/openstack-ansible/+/821248 | 17:23 |
| noonedeadpunk | interestingly hat took 3h for NFS job to complete https://zuul.opendev.org/t/openstack/build/3e0aa8cad3b44379bdd90645eec0ae17/logs | 17:40 |
| noonedeadpunk | maybe just slow node.... | 17:42 |
| noonedeadpunk | like nova distro packages install took 5 mins | 17:43 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Create yaml file of the zuul job vars for embedded ansible and logging https://review.opendev.org/c/openstack/openstack-ansible/+/821210 | 17:46 |
| jrosser | that feels like very slow IO | 17:46 |
| noonedeadpunk | I wonder how nfs presence for glance could affect that | 17:50 |
| noonedeadpunk | tons of `Unknown version. Returning version choices.` in glance logs | 17:53 |
| noonedeadpunk | well once in 10 seconds sounds like haproxy | 17:54 |
| noonedeadpunk | I think we can land https://review.opendev.org/q/topic:%22config_template_collection%22+(status:open) now | 17:55 |
| *** sshnaidm is now known as sshnaidm|afk | 19:05 | |
| jrosser | noonedeadpunk: would the nfs job version thing be nfsv3 vs. nfsv4 stuff? | 19:22 |
| jrosser | also one comment on here https://review.opendev.org/c/openstack/ansible-role-pki/+/821023 | 19:26 |
| admin1 | anyone faced this before "fatal: unable to access 'https://opendev.org/openstack/openstack-ansible/': GnuTLS recv error (-9): Error decoding the received TLS packet." ? | 20:29 |
| opendevreview | James Denton proposed openstack/openstack-ansible-os_neutron master: Add Support for DPDK Bonding https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/814825 | 20:32 |
| jrosser | admin1: you don’t give an context :/ but I am guessing you are missing the updated Root CA for LetsEncrypt? | 20:55 |
| admin1 | sorry .. it was on a git pull | 21:02 |
| admin1 | i am updating the system and applying latest os patchs | 21:02 |
| admin1 | is ussuri -> wallaby upgrade possible . skipping victoria | 21:06 |
| *** dviroel is now known as dviroel|out | 21:13 | |
| jrosser | you will need the latest ca certificates for anything you connect to that uses a LetsEncrypt certificate | 21:18 |
| admin1 | i am getting an error on setup-infra on haproxy playbook .. log here: https://paste.opendev.org/show/811588/ | 21:41 |
| admin1 | i am going to re-run the haproxy playbook to see if it fixes it | 21:41 |
| admin1 | should i cp my actual certs to the filenames it wants to see ? | 21:42 |
| admin1 | if i already provided the cert, it still wants to do its own certs .. | 21:43 |
| admin1 | so strange .. 1st run = no cert in all .. 2nd try = created in 1st controller . failed on 2nd ... no cert on 2nd and 3rd .. then i run again, 1st passed, created on 2nd failed on 3rd .. on another run, it created on 3rd and finally moved ahead | 21:44 |
| admin1 | during upgrade, i am getting: "galera_server : Fail if galera_cluster_name doesnt match provided value" | 21:56 |
| jrosser | you need to update the ca-certificates package | 22:02 |
| jrosser | these are global root CA | 22:02 |
| jrosser | https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ | 22:02 |
| jrosser | this is nothing to do with server certificates for openstack | 22:03 |
| jrosser | as for the error in your paste, that looks like it is to do with the new way certificates are handled in wallaby | 22:05 |
| jrosser | it's late here though so I can't look at that now | 22:06 |
| admin1 | thanks .. i will fix the galera thing manually | 22:15 |
| jamesdenton | admin1 double check to see galera is actually running in all locations | 22:46 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!