| jrosser | good morning | 07:19 |
|---|---|---|
| noonedeadpunk | \o/ | 07:37 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_horizon master: Override pyScss version for python3.10 https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/840278 | 08:13 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: WIP - Support Ubuntu 22.04 https://review.opendev.org/c/openstack/openstack-ansible/+/839483 | 08:14 |
| jrosser | it could be time to start merging some of the glusterfs patches | 08:33 |
| jrosser | the later clean up patches to repo_server fail because they need to be dependant on 837589 | 08:34 |
| jrosser | and i didnt do that because it becomes a bit circular | 08:34 |
| opendevreview | Merged openstack/openstack-ansible master: Limit cloudkitty workers https://review.opendev.org/c/openstack/openstack-ansible/+/839989 | 09:55 |
| opendevreview | Merged openstack/openstack-ansible-lxc_container_create master: Restore focal lxc tests https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/839964 | 10:14 |
| opendevreview | Merged openstack/openstack-ansible master: Cleanup distro vars https://review.opendev.org/c/openstack/openstack-ansible/+/837845 | 10:46 |
| noonedeadpunk | I will try to do some review job today | 10:57 |
| noonedeadpunk | we also have broken octavia due to current way of how certs are generated as crypto collection doesn't support some things now | 10:59 |
| jrosser | i had some patch there | 11:14 |
| jrosser | noonedeadpunk: was it this? https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/836325 | 11:14 |
| jrosser | also i am not entirely sure what is going on with our rabbitmq version pinning https://paste.opendev.org/show/bxDFXsoDzw4QnZXKac19/ | 11:18 |
| *** dviroel|out is now known as dviroel | 11:18 | |
| noonedeadpunk | ah, yes, it was that | 11:19 |
| noonedeadpunk | But we could jsut replace with pki role hehe | 11:20 |
| noonedeadpunk | that is interesting | 11:20 |
| noonedeadpunk | I wonder if there's release we're asking for in cloudsmith though | 11:21 |
| jrosser | perhaps not, they make it kind of hard to browse the repos | 11:22 |
| noonedeadpunk | well, worth searching in https://cloudsmith.io/~rabbitmq/repos/rabbitmq-erlang/packages/ | 11:23 |
| noonedeadpunk | https://cloudsmith.io/~rabbitmq/repos/rabbitmq-erlang/packages/?q=distribution%3Aubuntu+AND+distribution%3Ajammy+erlang-base | 11:24 |
| jrosser | https://cloudsmith.io/~rabbitmq/repos/rabbitmq-erlang/packages/?q=version%3A1%3A24.2.1-1&page=6 | 11:24 |
| jrosser | oh well that makes a lot of sense | 11:24 |
| noonedeadpunk | so likely we should jsut bump rabbit version | 11:24 |
| jrosser | yes, i didnt see the search box there at all before :) | 11:25 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-rabbitmq_server master: Bump rabbitmq / erlang versions https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/840284 | 11:40 |
| jrosser | i was also thinking about what followup work there should be for glusterfs | 11:59 |
| jrosser | there are some ports bound to 0.0.0.0 which can be fixed | 11:59 |
| jrosser | but also there is a potential issue if the nginx and www-data uid / gid not matching across HA repo servers | 12:00 |
| mgariepy | morning everyone. | 12:07 |
| jrosser | good morning | 12:09 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-os_rally master: Remove PyYAML from rally installation constraints https://review.opendev.org/c/openstack/openstack-ansible-os_rally/+/840313 | 14:04 |
| jrosser | if anyone understands the root cause of this ^^^ i'd be interested | 14:05 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: WIP - Support Ubuntu 22.04 https://review.opendev.org/c/openstack/openstack-ansible/+/839483 | 14:07 |
| NeilHanlon | that reads like a pip dep solving issue jrosser | 14:35 |
| jrosser | oh it certainly does - i've not managed to pin down exactly where though, sadly the dependancy solver doesnt tell you where those conflicting constraints came from | 14:36 |
| NeilHanlon | Sigh :/ | 14:37 |
| NeilHanlon | i would laugh if it has to do with the capitalization lol | 14:38 |
| jrosser | yeah well stupid things do happen | 14:39 |
| noonedeadpunk | #startmeeting openstack_ansible_meeting | 15:00 |
| opendevmeet | Meeting started Tue May 3 15:00:52 2022 UTC and is due to finish in 60 minutes. The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| opendevmeet | The meeting name has been set to 'openstack_ansible_meeting' | 15:00 |
| noonedeadpunk | #topic rollcall | 15:01 |
| mgariepy | hey ! | 15:01 |
| noonedeadpunk | o/ | 15:01 |
| ebbex | o/ | 15:02 |
| jrosser | o/ hello | 15:05 |
| noonedeadpunk | #topic bug triage | 15:05 |
| NeilHanlon | heyo o/ | 15:06 |
| noonedeadpunk | we have some new bug reports that we likely want to triage:) | 15:06 |
| noonedeadpunk | #link https://bugs.launchpad.net/openstack-ansible/+bug/1971179 | 15:08 |
| noonedeadpunk | jrosser any thoughtson that? As I haven't looked into CSP at all... | 15:10 |
| jrosser | well i'm not sure acutally | 15:12 |
| jrosser | we set some cors overrides here | 15:13 |
| jrosser | allow_headers: origin,content-md5,x-image-meta-checksum,x-storage-token,accept-encoding,x-auth-token,x-identity-status,x-roles,x-service-catalog,x-user-id,x-tenant-id,x-openstack-request-id | 15:13 |
| jrosser | allowed_origin: "{{ external_horizon_fqdn }}" | 15:13 |
| jrosser | it would help with some actual error there on LP to help | 15:15 |
| NeilHanlon | ^ agree | 15:15 |
| noonedeadpunk | +1 to that | 15:16 |
| jrosser | https://github.com/openstack/openstack-ansible-os_glance/blob/1d8cb0dbd9472e4bbd82a61bb569626e5b89d205/defaults/main.yml#L190 | 15:16 |
| jrosser | this suggests that they configure the external vip to be an IP rather than FQDN | 15:17 |
| NeilHanlon | i was able to replicate in my AIO | 15:18 |
| NeilHanlon | https://paste.opendev.org/show/bXO5EAH3U9G3eEeffzsd/ | 15:18 |
| NeilHanlon | indeed external vip is an IP | 15:18 |
| jrosser | and that was something like `openstack image create <blah> <blah>` ? | 15:19 |
| NeilHanlon | No, uploading via horizon | 15:20 |
| jrosser | oh yes right | 15:20 |
| noonedeadpunk | yeah, well, than I'd say it's confirmed | 15:20 |
| NeilHanlon | I'll put what I found in the LP | 15:22 |
| * jrosser wonders why it connects to the external VIP | 15:22 | |
| NeilHanlon | me too, i would've expected some horizon-layer proxy into glance, not a direct call to the api port | 15:23 |
| mgariepy | are the endpoint in keystone set to the IP ? | 15:24 |
| noonedeadpunk | Well, it depends on image upload mode | 15:24 |
| noonedeadpunk | There's a direct and legacy one | 15:24 |
| NeilHanlon | possibly. it looks like glance returns the upload_url to the client, and then that url is used to POST the image | 15:25 |
| noonedeadpunk | https://opendev.org/openstack/openstack-ansible-os_horizon/src/branch/master/defaults/main.yml#L163-L168 | 15:25 |
| NeilHanlon | a-ha :) | 15:26 |
| noonedeadpunk | let's go next | 15:27 |
| noonedeadpunk | #link https://bugs.launchpad.net/openstack-ansible/+bug/1971175 | 15:28 |
| noonedeadpunk | It kind of sounds related | 15:28 |
| noonedeadpunk | And at this point I'm not sure how previous one is valid | 15:29 |
| noonedeadpunk | Maybe we should jsut suggest setting vip to domain and that's it... | 15:30 |
| jrosser | yes - i'm not sure it will ever really work with the IP? | 15:31 |
| jrosser | well...... | 15:31 |
| jrosser | i think what i mean is that in a real deployment (not AIO) we expect the external VIP to have a certificate with the fqdn in it | 15:32 |
| jrosser | and the fqdn to be used as the external vip in openstack_user_config | 15:32 |
| jrosser | tbh there is more info needed here on this bug too | 15:33 |
| noonedeadpunk | yeah, we likely should just explain there | 15:33 |
| jrosser | i left a quick comment there asking for more info | 15:38 |
| noonedeadpunk | ok, great, thanks! | 15:38 |
| noonedeadpunk | #link https://bugs.launchpad.net/openstack-ansible/+bug/1970226 | 15:39 |
| noonedeadpunk | andrewbonney: did you have a chance to test out the patch mentioned to oslo? | 15:39 |
| jrosser | i'm not sure andrewbonney is around just now but we can certainly look at that patch | 15:40 |
| noonedeadpunk | ok, gotcha | 15:40 |
| noonedeadpunk | I will likely leave other things for next meeting as we likely need to have smth else to discuss | 15:41 |
| noonedeadpunk | #topic office hours | 15:41 |
| noonedeadpunk | I will push a patch today for EM of V | 15:43 |
| jrosser | thanks to mgariepy for looking at a bunch of older patches last week | 15:43 |
| jrosser | things are looking reasonable for ubuntu 22.04, for the basic AIO jobs | 15:47 |
| jrosser | there are a couple of small constraints things in horizon and rally which i guess are becasue they've not been tested on py3.10 before | 15:47 |
| mgariepy | so i started to fix/abandon old patches we have in gerrit last week. | 15:49 |
| noonedeadpunk | ok, that's great. bad that it can't be more then exeprimantal though | 15:49 |
| noonedeadpunk | but that's fair I believe | 15:50 |
| jrosser | that sounds reasonably, it can be supported for Zed i think | 15:50 |
| mgariepy | some patches are backport on older branches . how far should we try to fix them ? | 15:50 |
| jrosser | regarding older branches there are these patches https://review.opendev.org/c/openstack/openstack-ansible/+/838022 | 15:51 |
| jrosser | those are passing suprisingly many jobs with just some wierd error in the linters job | 15:51 |
| noonedeadpunk | uh | 15:51 |
| noonedeadpunk | should be easy to fix though | 15:52 |
| jrosser | oh yes it's that same sha for config_template which broke on other branches | 15:52 |
| jrosser | i forget that config_template does not branch | 15:53 |
| *** dviroel is now known as dviroel|lunch | 15:53 | |
| mgariepy | ho. on the rocky tests the ci does not have the passwd pkg installed.. which makes the hardening role fail. | 15:56 |
| mgariepy | should we ask opendev to add the pkg or shall we install it ourself? | 15:57 |
| mgariepy | for this one: https://review.opendev.org/c/openstack/ansible-hardening/+/835733 | 15:57 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible stable/train: Mark OSA repository as safe in git.config in CI https://review.opendev.org/c/openstack/openstack-ansible/+/838022 | 15:57 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible stable/stein: Mark OSA repository as safe in git.config in CI https://review.opendev.org/c/openstack/openstack-ansible/+/838023 | 15:59 |
| jrosser | mgariepy: we would put it here? https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/vars/redhat-8.yml#L53 | 16:00 |
| jrosser | NeilHanlon: any thoughts on that - if we should expect passwd to be present in the CI image? | 16:01 |
| mgariepy | it is in the cloud image.. | 16:03 |
| NeilHanlon | yeah that's.. weird. I guess because we are making the image from a container base. | 16:03 |
| NeilHanlon | I did a https://review.opendev.org/c/openstack/diskimage-builder/+/840352 | 16:06 |
| mgariepy | cool. | 16:06 |
| NeilHanlon | i could patch os_hosts too if it'd help clear up the tests quickly | 16:07 |
| noonedeadpunk | #endmeeting | 16:08 |
| opendevmeet | Meeting ended Tue May 3 16:08:10 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:08 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-05-03-15.00.html | 16:08 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-05-03-15.00.txt | 16:08 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2022/openstack_ansible_meeting.2022-05-03-15.00.log.html | 16:08 |
| opendevreview | Marc Gariépy proposed openstack/openstack-ansible-openstack_hosts master: Add passwd for rhel8. https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/840353 | 16:09 |
| opendevreview | Marc Gariépy proposed openstack/ansible-hardening master: Updated from OpenStack Ansible Tests https://review.opendev.org/c/openstack/ansible-hardening/+/835733 | 16:10 |
| opendevreview | Marc Gariépy proposed openstack/ansible-hardening master: Updated from OpenStack Ansible Tests https://review.opendev.org/c/openstack/ansible-hardening/+/835733 | 16:17 |
| mgariepy | lol. | 16:17 |
| opendevreview | Merged openstack/openstack-ansible-os_cloudkitty master: Updated from OpenStack Ansible Tests https://review.opendev.org/c/openstack/openstack-ansible-os_cloudkitty/+/835703 | 16:29 |
| *** dviroel|lunch is now known as dviroel | 16:56 | |
| jrosser | there is another case of `unable to create the image` posted to the ML - i wonder if it is the same person? | 17:32 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Add documentation reminder to set external VIP to FQDN for real deployments https://review.opendev.org/c/openstack/openstack-ansible/+/840360 | 17:32 |
| opendevreview | Merged openstack/openstack-ansible-os_tempest master: Improve domain support https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/836833 | 18:32 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-tests master: Do not filter setuptools from upper-constraints https://review.opendev.org/c/openstack/openstack-ansible-tests/+/783747 | 21:02 |
| NeilHanlon | jrosser: was looking more at that error you posted this morning. it appears that pyyaml doesn't have wheels for 2.10, and i didn't see it before but there is some error occurring building from src | 21:04 |
| jrosser | NeilHanlon: makes sense - when i look on my build log i see this `Found link http://172.29.236.101:8181/os-releases/24.1.0.dev182/ubuntu-22.04-x86_64/wheels/PyYAML-6.0-cp310-cp310-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl` | 21:18 |
| jrosser | which means it got the wheel from one built on the repo server | 21:19 |
| jrosser | oh well this is a thing as well https://mirror.mtl01.iweb.opendev.org/pypifiles/packages/02/25/6ba9f6bb50a3d4fbe22c1a02554dc670682a07c8701d1716d19ddea2c940/PyYAML-6.0-cp310-cp310-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl | 21:25 |
| jrosser | there is something unexpected going on here because the metal job gets the wheel from the opendev mirror on the host | 21:26 |
| jrosser | but in the lxc job it comes from the repo server | 21:26 |
| *** dviroel is now known as dviroel|out | 21:30 | |
| opendevreview | Merged openstack/openstack-ansible master: Limit mistral worker https://review.opendev.org/c/openstack/openstack-ansible/+/839988 | 22:45 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!