Tuesday, 2023-04-04

jrossergood morning08:00
admin1\o08:21
noonedeadpunko/08:37
noonedeadpunkso master is unblocked now I assume08:38
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-specs master: Add proposal for enabling TLS on all internal communications  https://review.opendev.org/c/openstack/openstack-ansible-specs/+/82285008:57
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-specs master: Add proposal for enabling TLS on all internal communications  https://review.opendev.org/c/openstack/openstack-ansible-specs/+/82285008:57
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-ceph_client stable/yoga: Add thrift to includepkgs from EPEL  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87939709:00
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-ceph_client stable/yoga: Add EPEL GPG key for RHEL 9  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87939809:01
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/zed: Disable CentOS LXC jobs due to the bug in systemd packaging  https://review.opendev.org/c/openstack/openstack-ansible/+/87939909:06
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Disable CentOS LXC jobs due to the bug in systemd packaging  https://review.opendev.org/c/openstack/openstack-ansible/+/87940009:07
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Disable CentOS LXC jobs due to the bug in systemd packaging  https://review.opendev.org/c/openstack/openstack-ansible/+/87940009:09
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Fix dstat run in gates  https://review.opendev.org/c/openstack/openstack-ansible/+/87935509:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Swith to tracking stable/2023.1 for upstream services  https://review.opendev.org/c/openstack/openstack-ansible/+/87823509:26
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible collection requirements to latest releases  https://review.opendev.org/c/openstack/openstack-ansible/+/87877809:27
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server master: Provide custom handler name to PKI role  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87577909:27
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add documentation on refreshing hosts file  https://review.opendev.org/c/openstack/openstack-ansible/+/87782509:28
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Split compatability matrix for legacy releases  https://review.opendev.org/c/openstack/openstack-ansible/+/87794109:30
opendevreviewMerged openstack/ansible-hardening master: Disable UsePriviledgeSeparation directive for sshd  https://review.opendev.org/c/openstack/ansible-hardening/+/87766609:34
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Split compatability matrix for legacy releases  https://review.opendev.org/c/openstack/openstack-ansible/+/87794109:53
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Split compatability matrix for legacy releases  https://review.opendev.org/c/openstack/openstack-ansible/+/87794109:58
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Do not try to install packages on each log_instance_info run  https://review.opendev.org/c/openstack/openstack-ansible/+/86637210:04
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use include instead of import for conditional tasks  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87494710:05
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Use include instead of import for conditional tasks  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87494910:05
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Use 2.0.0 release for ansible-collections-openstack  https://review.opendev.org/c/openstack/openstack-ansible/+/87309210:07
jrosserso many patches10:13
noonedeadpunkyeah, we have quite a lot of stuff to recheck/rebase....10:20
noonedeadpunknot saying about fixing stable branches...10:21
jrosserhuh we should fix this too `parsing [/etc/haproxy/haproxy.cfg:48]: 'option httpchk' : hiding headers or body at the end of the version string is deprecated. Please, consider to use 'http-check send' directive instead.`10:33
opendevreviewMerged openstack/ansible-role-systemd_mount stable/zed: Ensure systemd-udev is installed for gluster  https://review.opendev.org/c/openstack/ansible-role-systemd_mount/+/87910110:33
opendevreviewMerged openstack/openstack-ansible-openstack_hosts stable/yoga: Pin openvswitch package on RHEL to 2.17  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/87917110:39
opendevreviewMerged openstack/openstack-ansible-os_ironic master: Update IPA version for 2023.1 release of Ironic  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87753810:42
noonedeadpunkFor some reason I thought we should have patch for that...10:53
noonedeadpunkthat likely was some other deprecation10:56
jrosseri thought i had patched it too11:02
jrosserbut maybe i didnt :/11:02
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Tune settings in galera server for reduced ram in all-in-one build  https://review.opendev.org/c/openstack/openstack-ansible/+/87727811:15
noonedeadpunkthough I'm really happy we have deprecations working properly now...11:19
noonedeadpunkthe thing I don't get though - these cinder policy deprecations: https://zuul.opendev.org/t/openstack/build/39a72d1dbbb44ec4a92531f17ef9d5be/log/logs/deprecations/host/cinder-api.service.journal-10-43-33.log.txt11:21
noonedeadpunkwe don't set any policies by default....11:21
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Remove calico driver reference  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87944211:27
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Remove use_forwarded_for definition for nova-api  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87944311:32
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Remove neutron_provider_networks mapping  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87944712:00
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Remove neutron_provider_networks mapping  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87944712:03
lecris[m]Could we bring back tarball releases for https://opendev.org/openstack/ansible-collections-openstack? According to Fedora packaging guidelines https://docs.fedoraproject.org/en-US/packaging-guidelines/Ansible_collections/#_collection_source, it is preferred to use the upstream source12:58
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Fix use of haproxy_backend_ssl when haproxy_backend_ca is not defined  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87945213:01
jrosserlecris[m]: i think you probably want #openstack-ansible-sig for things to do with the ansible collection...... openstack-ansible is actaully a deployment tool13:01
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Remove nova_network_services mapping  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87944713:17
noonedeadpunkSo, https://review.opendev.org/c/openstack/openstack-ansible/+/877278/5 seems to make no difference.13:18
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Unify EPEL gpg key and repo provisioning  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87908413:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server master: Fix haproxy_service_configs format conversion  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87877113:57
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Refactor log collection from lxc containers  https://review.opendev.org/c/openstack/openstack-ansible/+/87738214:07
jrossernoonedeadpunk: ^ with that patch its all great..... except how to get gnu parallel on *!%%SSSing centos14:09
jrosserit's in EPEL so thats kind of ok14:10
jrosserbut how to configure that for the purposes of CI log collection rather than part of the deployment14:10
noonedeadpunkwe can do some tasks here? https://opendev.org/openstack/openstack-ansible/src/branch/master/zuul.d/playbooks/post.yml#L1814:11
jrosseractually yes14:11
jrosserwe can probably copy a task from openstack_hosts or something and adjust which packages are allowed14:12
noonedeadpunkyeah, should be doable.14:24
admin1i have this override since rocky .. https://gist.githubusercontent.com/a1git/a22118bee6293b94f48079ca0c0e8809/raw/c435b2028f1f41c857919b637898e2256c2c4223/gistfile1.txt   which is to map neutron agents to bare-metal and not lxc containers ( as it was in rocky ) .. and i have been keeping this forward ever since 14:31
admin1is this necessary in new ones as well ? 14:31
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Use include instead of import for conditional tasks  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87494714:33
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Use include instead of import for conditional tasks  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87494914:36
noonedeadpunkadmin1: I think this should not be needed since Wallaby14:39
jrosserhow is this supposed to work https://github.com/jhunt/hatop/blob/master/bin/hatop#L114:45
jrosseri have some not-osa stuff using our haproxy role, on jammy that doesnt work14:46
jrosser`/usr/bin/env: ‘python’: No such file or directory`14:46
opendevreviewMerged openstack/openstack-ansible master: Drop `echo` from add-compute.sh script  https://review.opendev.org/c/openstack/openstack-ansible/+/87781314:49
opendevreviewMerged openstack/openstack-ansible master: Update letsencrypt docs  https://review.opendev.org/c/openstack/openstack-ansible/+/87893914:49
noonedeadpunkI assume jammy does not have pyhton3-is-python?14:52
noonedeadpunkyeah, it doesn;t14:53
noonedeadpunkthough in case of having venv and doing activate...14:53
noonedeadpunkthis should do the trick14:53
jrosseri think python3-is-python is pretty bad idea tbh14:54
jrosserand in this case theres no venv14:54
jrosserhatop package from apt does work properly though14:55
jrosserand that has `#!/usr/bin/env python3`14:55
noonedeadpunkWell, the problem is that won't work for rhel14:57
noonedeadpunkI wish hatop was published to pypi...15:01
noonedeadpunkmaybe worth creating some really simple venv... but that would be pretty unobvious15:02
noonedeadpunk#startmeeting openstack_ansible_meeting15:03
opendevmeetMeeting started Tue Apr  4 15:03:51 2023 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:03
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:03
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:03
noonedeadpunk#topic rollcall15:03
noonedeadpunko/15:05
NeilHanlono/15:05
damiandabrowskihi!15:05
noonedeadpunk#topic office hours15:06
noonedeadpunkcurrent gate health - master seems to be fixed, but I do see intermittent issues for ceph jobs, likely related to oom.15:07
jrossero/ hello15:08
noonedeadpunkstable branches - looks okeyish except Xena I assume15:09
noonedeadpunkmainly due to rabbit15:09
mgariepyhey ! o/15:10
mgariepysorry not being there and doing much i'm kinda super busy with other stuff ATM.15:10
noonedeadpunkor well - we need to merge stuff to fix stable branches, but fixes are passing at least :) 15:11
noonedeadpunkmgariepy: sure, no worries. 15:11
noonedeadpunkso mainly our current issue is that we need to do plenty of reviews15:12
noonedeadpunkI haven't worked yet on action points from the PTG yet, but going to cover rabbitmq thing first and then to fix systemd services restart on unit files change15:13
damiandabrowskiis that the right time to ask for reviews here? :D I guess haproxy separated config is ready and tls-backend is also implemented for some services already(and I'm continuously adding support for new services)15:14
damiandabrowskihttps://review.opendev.org/q/topic:separated-haproxy-service-config+status:open15:14
damiandabrowskihttps://review.opendev.org/q/topic:tls-backend+status:open15:14
noonedeadpunkYeah, I've started reviewing/rechecking things today15:17
jrosserdamiandabrowski: i think actually you are needed to vote on some of the underlying patches there?15:18
noonedeadpunklike this https://review.opendev.org/c/openstack/openstack-ansible/+/87685115:18
noonedeadpunk(but it has unmerged depndency)15:19
damiandabrowskiah, i was the last commiter so I thought I don't have a right to vote :D 15:19
jrosserand also we need this https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87813115:19
jrossertbh this is really about checking the reviews several times a day15:20
noonedeadpunkyeah, I'm not sure if we have somewhere written such corner-cases regarding commiter/author. But we can't afford now to prevent both of these ppl from voting15:20
damiandabrowskiI was also confused by 878131 because technically I'm a co-author there15:21
jrossera lot of these patches are interlocked with each other and we need to work through them in turn15:21
damiandabrowskibut ok, I have no problem with reviewing them :D 15:21
noonedeadpunkmgariepy: or maybe you have couple of mins to sort these ones out ?:)15:21
mgariepyi'll dig a bit after lunch15:25
noonedeadpunkawesome15:33
noonedeadpunkI don't really have much to discuss as we had quite productive PTG, so I think we're on track15:33
damiandabrowski\o/15:34
* mgariepy is sad about missing the PTG :/15:34
noonedeadpunkyeah. we were super short on participants to be frank15:38
NeilHanloni forgot all about the operators hours :( 15:38
jrosseri ended up in a call with network vendor during that :(15:39
noonedeadpunkyeah, no worries. We eventually ended it early15:41
opendevreviewMerged openstack/openstack-ansible-galera_server master: fix indentation for condition  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/87627615:45
noonedeadpunkOh, well, out of ptg items - mariadb 10.11 seems passing now :)15:46
noonedeadpunkhttps://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/87538115:48
noonedeadpunk#endmeeting15:53
opendevmeetMeeting ended Tue Apr  4 15:53:49 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:53
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-04-04-15.03.html15:53
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-04-04-15.03.txt15:53
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-04-04-15.03.log.html15:53
jrosserargh sorry +2 the wrong patch :(16:44
opendevreviewMerged openstack/openstack-ansible-haproxy_server master: Add tasks to configure external services only  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87813117:07
noonedeadpunkI really don't see any improvements in ram consumption with or without https://review.opendev.org/c/openstack/openstack-ansible/+/877278/517:45
jrosserdamiandabrowski: do you have some DNM patch which depends-on all of this https://review.opendev.org/q/topic:tls-backend so that we can see it working all together?17:48
opendevreviewJonathan Rosser proposed openstack/openstack-ansible stable/zed: Drop `echo` from add-compute.sh script  https://review.opendev.org/c/openstack/openstack-ansible/+/87947517:48
opendevreviewJonathan Rosser proposed openstack/openstack-ansible stable/yoga: Drop `echo` from add-compute.sh script  https://review.opendev.org/c/openstack/openstack-ansible/+/87947617:48
opendevreviewJonathan Rosser proposed openstack/openstack-ansible stable/xena: Drop `echo` from add-compute.sh script  https://review.opendev.org/c/openstack/openstack-ansible/+/87947717:49
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-galera_server stable/zed: fix indentation for condition  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/87947817:49
damiandabrowskijrosser: no, i was just testing it locally, let me create one17:49
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-galera_server stable/yoga: fix indentation for condition  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/87947917:49
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-galera_server stable/xena: fix indentation for condition  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/87948017:49
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible master: [DNM] Enable openstack_backend_service_https  https://review.opendev.org/c/openstack/openstack-ansible/+/87950118:01
damiandabrowskijrosser:  ^18:02
jrosserfingers crossed!18:02
jrosserthis is ready now https://review.opendev.org/c/openstack/openstack-ansible/+/876851/918:04
jrosseroh wait no its not18:05
jrosserthis is then the blocker for moving the haproxy things forward https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87877118:05
mgariepyhey anything  i can help with ?18:11
jrosserthere is lots and lots to review on the dashboard18:11
mgariepyok i'll start digging in then18:11
opendevreviewMerged openstack/openstack-ansible-os_neutron stable/zed: Disable CentOS LXC jobs due to the bug in systemd packaging  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87910218:21
opendevreviewMerged openstack/openstack-ansible-os_neutron master: [doc] Add LXB scenario documentation  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87080518:35
mgariepyhow is the None for branch in https://review.opendev.org/c/openstack/openstack-ansible/+/878235 make sense? 19:02
mgariepyFor the openstack-testing stuff.19:02
opendevreviewMerged openstack/openstack-ansible master: Add documentation on refreshing hosts file  https://review.opendev.org/c/openstack/openstack-ansible/+/87782519:09
opendevreviewMerged openstack/openstack-ansible master: Remove nova-scheduler from ironic compute container_skel  https://review.opendev.org/c/openstack/openstack-ansible/+/87746719:16
opendevreviewMerged openstack/openstack-ansible-os_ironic master: Remove deprecated support for cisco ucs and cims ironic drivers.  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87760619:25
opendevreviewMerged openstack/openstack-ansible-openstack_hosts stable/zed: Add openstack_hosts_file tag  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/87918819:29
opendevreviewMerged openstack/openstack-ansible-os_ironic master: Install socat and configure ipmtool-socat console interface  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87761819:29
opendevreviewMerged openstack/openstack-ansible-os_ironic master: Rename idrac interfaces to idrac-wsman  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87762719:29
opendevreviewMerged openstack/openstack-ansible-os_ironic master: Enable raid interface implementations for ironic hardware drivers  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87762819:29
opendevreviewMerged openstack/openstack-ansible-os_ironic master: Add a no_driver ironic driver type  https://review.opendev.org/c/openstack/openstack-ansible-os_ironic/+/87762919:29
opendevreviewMerged openstack/openstack-ansible-openstack_hosts stable/yoga: Add openstack_hosts_file tag  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/87918919:31
opendevreviewMerged openstack/openstack-ansible-openstack_hosts stable/xena: Add openstack_hosts_file tag  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/87939019:31
opendevreviewMerged openstack/openstack-ansible master: Fix openstack client installs for 'distro' method  https://review.opendev.org/c/openstack/openstack-ansible/+/87811419:35
opendevreviewMerged openstack/openstack-ansible master: Convert haproxy_security_headers_csp to a multiline string  https://review.opendev.org/c/openstack/openstack-ansible/+/87808219:43
opendevreviewMerged openstack/openstack-ansible master: Split compatability matrix for legacy releases  https://review.opendev.org/c/openstack/openstack-ansible/+/87794119:43
opendevreviewMerged openstack/openstack-ansible-galera_server master: Update MariaDB GPG keys for RPM  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/87915019:52
opendevreviewMerged openstack/openstack-ansible-galera_server master: Upgrade MariaDB to 10.11  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/87538119:53
opendevreviewMerged openstack/openstack-ansible-ceph_client stable/zed: Add EPEL GPG key for RHEL 9  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87918620:04
opendevreviewMerged openstack/openstack-ansible-ceph_client stable/zed: Add thrift to includepkgs from EPEL  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87918720:21
opendevreviewMerged openstack/openstack-ansible-ceph_client stable/yoga: Add thrift to includepkgs from EPEL  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87939720:21
opendevreviewMerged openstack/openstack-ansible-ceph_client stable/yoga: Add EPEL GPG key for RHEL 9  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87939820:21
jrosserwe need this https://review.opendev.org/c/openstack/openstack-ansible/+/87939920:39
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible master: Add support for TLS backends  https://review.opendev.org/c/openstack/openstack-ansible/+/87908521:23
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible-os_horizon master: Fix horizon_enable_ssl logic  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951421:23
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible-os_horizon master: Change default value for horizon_enable_ssl  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951521:23
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible-os_horizon master: Rename horizon_enable_ssl to horizon_backend_https  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951621:23
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible-os_horizon master: Add PKI support to horizon backends  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951721:23
damiandabrowskijrosser:  how does it work for cherry picks? are we allowed to merge them with only one +2? (I think i've seen this before)21:27
jrosseryou can +2 your own backported patch21:29
jrosserthen it needs another also21:29
damiandabrowskiack, thanks for clarification21:30

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!