Tuesday, 2023-11-28

noonedeadpunkI'm not sure how things are passing in our CI, but we got fail right away on 27.3.0 on haproxy role due to that: https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/90199309:04
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_gnocchi master: use policy.yaml instead of policy.json due to latest change on gnocchi check the config Change-Id: If05936d25db3329b4204172f3b800ddf3417b9b7  https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/89554209:07
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_gnocchi master: use policy.yaml instead of policy.json due to latest change on gnocchi check the config  https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/89554209:08
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add variable to control queues redundancy  https://review.opendev.org/c/openstack/openstack-ansible/+/90153409:17
opendevreviewDoug Goldstein proposed openstack/openstack-ansible master: abstract bootstrap host disk partition names  https://review.opendev.org/c/openstack/openstack-ansible/+/90110609:18
jrossernoonedeadpunk: column headings are a bit off here https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_e6d/901191/1/check/openstack-tox-docs/e6ddb17/docs/admin/upgrades/compatibility-matrix.html10:53
noonedeadpunkah, true10:53
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add compatability matrix for 2023.2 (Bobcat)  https://review.opendev.org/c/openstack/openstack-ansible/+/90119110:54
noonedeadpunkI think it's about time to move things over to Legacy as well10:55
noonedeadpunkAs C8 and 18.04 is about to go along with Yoga10:55
noonedeadpunkActually... Looks like Ceph Reef is available through UCA nowadays?10:57
noonedeadpunkhttps://ubuntu.com/ceph/docs/supported-ceph-versions10:57
noonedeadpunkAs well as from community? https://docs.ceph.com/en/reef/start/os-recommendations/10:57
jrosseryes you need to get to Reef in order to do focal->jammy on your ceph cluster10:59
noonedeadpunkyeah https://download.ceph.com/debian-reef/dists/jammy/10:59
jrosserand here we have not yet considered Reef mature enough to do that11:00
jrosseri think 18.2.1 will be the first time we try it11:00
noonedeadpunkSo I was thinking what to do with note in docs regarding supported ceph versions11:01
jrosserour CI still does quincy?11:02
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add compatability matrix for 2023.2 (Bobcat)  https://review.opendev.org/c/openstack/openstack-ansible/+/90119111:02
noonedeadpunkyeah11:02
noonedeadpunkbut given that UCA has reef as well...11:02
noonedeadpunklike comment seems to be not true11:02
noonedeadpunkI'm not really sure if ceph-ansible will do reef deployment just nice either...11:04
opendevreviewMerged openstack/openstack-ansible-os_glance master: Make glance_additional_stores work nicely with multi-store  https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/90103411:20
noonedeadpunkjrosser: can you remind me if we're adding ops to a-c-r for bobcat?12:40
noonedeadpunkI think not?12:40
noonedeadpunkyeah, I'm pretty sure we're not...12:40
jrossernoonedeadpunk: we don't need to12:56
jrosseri figured out how to add one collection from a subdir in ops repo12:56
jrosserwould be good if you could carefully look at this https://review.opendev.org/c/openstack/openstack-ansible/+/90147112:57
jrosserbecasue i'm not sure it was workig originally12:57
jrosserthe string splitting in particular, why we ever did the split from the [-3....] end, rather than the start of the string12:58
opendevreviewMerged openstack/openstack-ansible-os_glance master: Fix cinder store configuration  https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/90104613:01
noonedeadpunkI think we were taking from the end, because didn't know/though about subdirs. And otherwise it was same result13:13
noonedeadpunklike the only thing, if someone somehow is going to add `#` as part of url for $reasons13:14
noonedeadpunklike auth13:15
noonedeadpunkbut we're talking here only about our CI basically...13:15
noonedeadpunkOh... So indeed I can leverage this thing for sure....13:22
jrosserif we’re going to use the ops repo for collections then we need the # in and out of CI13:30
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-ops master: Add bugfixed version of ceph_crush_rule module  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/90205813:36
noonedeadpunkyeah, but out of CI we don't need to split based on it?13:37
noonedeadpunkAs I guess the split on `#` what potentially concerned me there...13:37
noonedeadpunkAs likely ansible-galaxy does more proper urlparse then just split on #13:38
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Use ops ceph collection for MDS deployment  https://review.opendev.org/c/openstack/openstack-ansible/+/90205913:47
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Use ops ceph collection for MDS deployment  https://review.opendev.org/c/openstack/openstack-ansible/+/90205913:48
jrossernoonedeadpunk: required_projects for ops repo needed?13:55
opendevreviewDoug Goldstein proposed openstack/openstack-ansible master: abstract bootstrap host disk partition names  https://review.opendev.org/c/openstack/openstack-ansible/+/90110614:08
noonedeadpunkjrosser: well. if we want depends on to work?14:11
jrossersure - I guess we only know if it’s worked with a depends-on in Manila repo?14:13
noonedeadpunkyep14:14
noonedeadpunkthough I wanna see if we don't just fail with retry limits...14:14
noonedeadpunklooks like it works.. at least bootstrap passes14:16
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Add quorum queues support for service  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/89891414:17
noonedeadpunkyeah, I;'m not sure now that it works :( Or well, sample playbook seems like it does, but probably precedency work differently when module is in role tree...14:25
noonedeadpunkas while this works nicely https://paste.openstack.org/show/bAOCnLg3bQplQ87Wn4hn/ ceph-ansible seems to be using original version 14:26
noonedeadpunk`However, any roles you call in your playbook define their own collections search order; they do not inherit the calling playbook’s settings.`14:31
jrosseryeah but ceph_crush_rule is a module?14:34
jrosserand not in a collection14:34
jrosser^ the original one we want to fix14:34
noonedeadpunkyes, the original one is. I assumed that if I prioritize lookup through our collection, it will be used from collection fisst14:51
noonedeadpunkand that worked in sample playbook, but somehow not from ceph-ansible role itself, as likely role doesn't care about what you define in playbook :(14:52
noonedeadpunkso then in fact I don't really know how we can actually get unblocked :(14:54
jrosserfork :(14:57
jrosseror we lift/shift the role that calls the broken module into the ops repo14:57
jrosserand use the fqcn for the module14:57
jrosserand the role14:57
jrosserbecasue we have our own playbooks i think?14:58
noonedeadpunkyes, but it's ceph_facts that's just included from other role....15:01
noonedeadpunkso it's useless...15:01
NeilHanlonope seems like i've missed a lot the past week or so..15:01
noonedeadpunk#startmeeting openstack_ansible_meeting15:01
opendevmeetMeeting started Tue Nov 28 15:01:27 2023 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:01
noonedeadpunk#topic rollcall15:01
noonedeadpunko/15:02
noonedeadpunk#topic office hours15:10
noonedeadpunkSo, given we're really on a deadline for 2023.2, I think we should leave openstack_resources for the next cycle15:10
noonedeadpunkAnd I will propose roles branching soonish to meet the deadline15:10
noonedeadpunkI've looked briefly through outstanding patches, and things look okeyish15:11
noonedeadpunkThe most critical thing (by far) are for integrated repo15:12
noonedeadpunkbasically this: https://review.opendev.org/c/openstack/openstack-ansible/+/90120415:12
NeilHanlonI agree re: openstack_resources if we still need some time to iterate on it. would rather have it finalized more or less15:13
noonedeadpunkI also start seeing more rocky failures lately fwiw...15:13
noonedeadpunkWith things like before: `"Failed to download metadata for repo 'baseos': Yum repo downloading error: Downloading error(s): repodata/0e0e0252-80d4-47bf-bb11-1f97d7aac5b0-PRIMARY.xml.gz - Cannot download, all mirrors were already tried without success`15:14
noonedeadpunkexample: https://zuul.opendev.org/t/openstack/build/80791ccb907f47a2889e8b65c3abc36715:14
noonedeadpunkNeilHanlon: had you any luck talking to infra ppl about mirrors?15:14
NeilHanlonyea, mnasiadka started the conversation and I need to follow back up with them. it seems like it's probably OK but they need some more info around the mirror source, how to verify they're up to date, etc15:17
noonedeadpunkok, I see15:18
noonedeadpunkWe had actually couple of bugs reported on launchpad.15:19
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/204462915:19
noonedeadpunkthis one I was not able to reproduce.15:20
noonedeadpunkAlso I believe we should be having a job now that would catch invalid SHAs.15:20
noonedeadpunkANd also, as Neil rightfully stated, Rocky 8 for 2023.1 is not a good combination anyway15:20
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/203881815:21
mnasiadkaRocky 8? That's rather Yoga material ;-)15:22
noonedeadpunkI was looking through it shortly, but I'm actually not sure what we can/should do at this point15:22
noonedeadpunkmnasiadka: it exactly is!15:22
noonedeadpunkBut I was considering it only because issue was related to `git clone` basically, which should not differ much15:23
noonedeadpunkandrewbonney: do you have anyy suggestions for 2038818?15:24
andrewbonneyNot really. I couldn't see an easy option to work out which flags to switch on ahead of upgrade15:25
andrewbonneyIf we supported rolling upgrades it would be easier to avoid breaking things inadvertently, but that doesn't help with identifying the flags to switch on15:25
noonedeadpunkWell. We've enabled maintenance flag and used it couple of times.15:25
noonedeadpunkI can't say that helped....15:26
noonedeadpunkAs each time node was returning from maintenance consumers were still crashing and not always recovering15:26
noonedeadpunkSo use maintenance and "rolling" upgrades still with caution ;)15:29
noonedeadpunkI had reported one bug as well btw15:29
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/204422915:29
noonedeadpunkwhere basically, from some point in time, our connection plugin does not respect remote_user provided 15:30
noonedeadpunkbut ansible_user is being respected15:30
noonedeadpunkI didn't have to look into more details yet, but will do so15:30
jrosseri was sure there was some stuff in the tests repo to check user stuff with the connection plugin15:31
jrosserthough perhaps that was more related to become:15:31
noonedeadpunkyes, become works as well15:31
noonedeadpunkwhat doesn't work basically is `openstack-ansible -u ubuntu`15:31
noonedeadpunkit's always end up as root15:32
noonedeadpunkbut `openstack-ansible -e ansible_user=ubuntu` would work15:32
noonedeadpunkwhich was slightly /o\15:32
noonedeadpunkAs very confusing also to see correct user in ouput right before connection command, but not in the SSH itself15:34
jrosserNeilHanlon: would a rocky mirror actually help with `Failed to download metadata for repo 'baseos'`15:34
NeilHanloni think it should, yes. the 'problem' so to speak is that the default configuration for our repos uses the mirrorlist URL, which can go to, more or less, anywhere (it's Geo-based, but, will fill in). so hard coding that to anything (even our canonical dl.rockylinux.org) should mitigate some percentage of the spurious failures15:36
noonedeadpunkSo maybe we should do that then?15:37
jrosseris there an interim way we can do that in the zuul pre job?15:38
opendevreviewMerged openstack/openstack-ansible-plugins master: Add no_log to setup_roles inlcude  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/90175515:38
noonedeadpunkthere;s some preped nodepool file that we consume iirc...15:39
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins stable/2023.1: Add no_log to setup_roles inlcude  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/90206815:39
jrosserhttps://github.com/openstack/openstack-ansible/blob/master/tests/roles/bootstrap-host/tasks/prepare_aio_config.yml#L77-L9215:41
noonedeadpunk`/etc/ci/mirror_info.sh`15:41
noonedeadpunkyeah that actually works as well15:42
jrosserhere we grab it https://github.com/openstack/openstack-ansible/blob/master/tests/roles/bootstrap-host/tasks/gather_nodepool_vars.yml#L2715:42
noonedeadpunkjust found it as well15:43
noonedeadpunkSo I guess we can add some logic for rocky specifically15:43
NeilHanlonthe 'easy' thing is to just search/replace /etc/yum.repos.d/*.repo and replace `^mirrorlist` with `#mirrorlist` and `^#baseurl` with `baseurl`15:43
NeilHanlonhttps://git.resf.org/sig_cloud/images/src/branch/main/elements/rocky-minimal-yum/pre-install.d/03-yum-cleanup#L39 (a new thing I've been messing around with 👀15:44
noonedeadpunkI'm actually confused about openstack_hosts_centos_mirror_url15:45
noonedeadpunkas well as centos_mirror_url15:45
noonedeadpunkas they're actually never used today?15:45
noonedeadpunkand eventually we don't touch default mirrors provided/configured for the image15:47
NeilHanlon🤔15:47
NeilHanlonyea i don't really see it used either15:47
jrosserthat really is useless vars15:48
noonedeadpunkuca_apt_repo_url was jsut renamed to apt_repo_url15:49
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible-openstack_hosts/src/branch/master/releasenotes/notes/apt_repo-097cb34c12e60207.yaml15:49
noonedeadpunkprobably openstack_hosts_centos_mirror_url was also for RDO specifically?15:49
noonedeadpunkbut yes, that's need some love I believe...15:50
jrossershame no-one tries "difficult" installed (like limited connectivity) with RH variants15:50
NeilHanloni will poke at a zuul override for rocky using this, and stack it with a cleanup of that cruft15:50
jrosserbecasue this surfaces all sorts of corner cases15:50
NeilHanlonagreed jrosser15:50
NeilHanlonwe have also been considering releasing a package which provides an easy way to manipulate repo configs, as we often have our testing team need to perform this very operation (change mirrorlist->baseurl and modify contentdir) and it gets... boring15:51
noonedeadpunkyeah, totally understandable. but package sounds... slightly excessive?:))15:57
noonedeadpunk#endmeeting15:58
opendevmeetMeeting ended Tue Nov 28 15:58:35 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:58
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-11-28-15.01.html15:58
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-11-28-15.01.txt15:58
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-11-28-15.01.log.html15:58
NeilHanlonheh, maybe16:11
NeilHanlonthanks for running the meeting noonedeadpunk :) 16:11
NeilHanlonas always please ping me if reviews are needed. will try to keep an eye though16:11
noonedeadpunkNeilHanlon: sure thing, thank for stopping by:)16:16

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!