Tuesday, 2024-02-06

noonedeadpunklooks like LXC jobs are also not happy08:21
noonedeadpunkactually with same claim of absent glance....08:22
noonedeadpunkhuh... I wonder if `groups['glance_all'] | length > 0` would be evaluated as "true" here: https://zuul.opendev.org/t/openstack/build/e556fe6df5ad4234867ed3032a69c324/log/logs/etc/host/openstack_deploy/openstack_inventory.json.txt#974-98308:25
noonedeadpunkI doubt so....08:25
noonedeadpunkwe probably should store tempest conffig as well...08:26
jrosserthat packagecloud.io repo removal thing in rabbitmq role is odd08:42
jrosserif we dont add it, then we remove it (?), things break08:42
jrosseroh wait i totally misunderstand /o\08:43
jrossernoonedeadpunk: is it the same problem with a conditional here https://opendev.org/openstack/openstack-ansible-os_tempest/src/branch/master/tasks/tempest_resources.yml#L21609:00
jrosserneeds also `tempest_service_available_glance` in the when:09:01
jrosserthat is the task that fails09:01
jrosserand then there is contradiction here https://opendev.org/openstack/openstack-ansible-os_tempest/src/branch/master/tasks/tempest_resources.yml#L241-L24209:05
jrosser`we set an empty string if it is not set above to ensure the template will parse correctly.` - except there are some mixture of conditionals on the set_fact tasks09:06
noonedeadpunkahhhhh09:14
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_tempest master: Add missed openstack_resources_image condition  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/90788609:35
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-os_nova master: Fix nova device_spec to support multiple values  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/90796909:36
noonedeadpunkugh, how I missed that all /o\09:41
noonedeadpunkfwiw, I'm also about to look at ovn drivers for vpnaas/bgp/octavia09:42
jrossercool - there is the patch from jamesdenton fixing up ovn+regular octavia too09:44
noonedeadpunkoh, I need to see it11:44
nixbuilderWhile following this guide (https://docs.openstack.org/openstack-ansible/latest/admin/scale-environment.html) I am attempting to add three compute hosts to the cloud.  I did edit the  /etc/openstack_deploy/openstack_user_config.yml per instructions... however when I ran the 'openstack-ansible setup-hosts.yml --limit localhost,compute035,compute036,compute037' II get errors saying that "Could not mat12:56
nixbuildernoring: compute035"... etc.  Is there another step I need to run?12:56
noonedeadpunknixbuilder: feels that error was trimmed13:03
noonedeadpunkCan you paste please what is specifically failing through https://paste.openstack.org/13:03
nixbuildernoonedeadpunk:  Ooops... my bad... while pasting the details I noticed what I did wrong :-)13:08
noonedeadpunkhaha13:10
noonedeadpunkok, cool then :D13:10
noonedeadpunkalways glad to help hehe13:11
dmsimard[m]noonedeadpunk: btw it turns out that the ruamel.yaml issue was more problematic than I thought it was so I'm releasing a 1.7.1 of ara including a fix sometime soon13:27
noonedeadpunkYeah, I saw your reply today in gitlab issue13:38
noonedeadpunkthough I was quite sure that ruamel bugfix release reverted some behaviour back13:39
noonedeadpunkbut potentially - they could decide to implement it again or smth...13:39
noonedeadpunkthanks for the heads-up though13:39
fricklernoonedeadpunk: may I remind you of https://review.opendev.org/c/openstack/releases/+/906577 (yoga-unmaintained)?13:47
mgariepyis it only me or ubuntu are not publishing patches for some pkg in LTS release in the main repos ?13:51
mgariepyex: https://ubuntu.com/security/notices/USN-5175-1 13:52
jrossermgariepy: looks like it is missing for focal14:18
jrosserbut ok for jammy https://ubuntu.com/security/CVE-2020-1502514:18
mgariepyit's published in ESM14:19
jrosseroh well i mean focal without ubuntu-pro14:20
mgariepyi just wonder why that is.14:20
mgariepyfocal is still supported ..14:20
mgariepyi think i'll move to debian14:21
noonedeadpunkfrickler: thanks, I totally missed it14:26
noonedeadpunk#startmeeting openstack_ansible_meeting15:00
opendevmeetMeeting started Tue Feb  6 15:00:22 2024 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:00
noonedeadpunk#topic rollcall15:00
noonedeadpunko/15:00
jrossero/ hello15:03
noonedeadpunk#topic office hours15:04
noonedeadpunkSo, I've started reviewing some patches from https://etherpad.opendev.org/p/osa-capi15:04
noonedeadpunkand most things looks jsut nice except maybe some small nits15:04
jrosseryeah, thankyou for taking a look15:05
jrosserthis needs some attention really https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/90052715:05
jrosseri am not happy with that tbh15:05
noonedeadpunkSo... Maybe with just moving all playbooks to the plugins repo will eliminate a need for such role, as then we can continue using tasks include....15:07
noonedeadpunkie local ones15:07
noonedeadpunkas they will be local to playbooks15:07
noonedeadpunkBut ofc depends on what exactly you don't like ofc15:07
jrosserperhaps though the pointt of that patch was i need to do the same thing in the ops repo collection15:07
noonedeadpunkAlso potentially I didn't get the problem you was solving good enough15:07
jrosserso adjacent to playbook is unhelpful15:07
NeilHanlono/ hi folks15:08
noonedeadpunkok, yeah. And the reason you don't like this patch is...?15:08
noonedeadpunk\o/15:08
jrosserline 172 here https://review.opendev.org/c/openstack/openstack-ansible-ops/+/901450/1215:09
jrossersorry here https://review.opendev.org/c/openstack/openstack-ansible-ops/+/901450/12/mcapi_vexxhost/playbooks/k8s_install.yml#17215:09
jrosserwhat i don't like is that the only way to make it "work" is to run it under roles:15:10
noonedeadpunkand doing that with import_role?15:10
noonedeadpunkugh15:10
noonedeadpunkok, I don't like that either then15:10
jrosserthen the vars defined in defaults/main.yml just are not visible15:10
jrosserright15:10
noonedeadpunkhow does ceph_ansible handles it?15:10
jrosserso we need some other way to do this15:10
jrosserprobably with set_fact as a guess15:11
noonedeadpunkhttps://github.com/ceph/ceph-ansible/tree/main/roles/ceph-defaults15:11
noonedeadpunkno, not really I guess15:11
jrosseroh i was thinking of https://github.com/ceph/ceph-ansible/tree/main/roles/ceph-facts/tasks15:11
noonedeadpunkBut I saw ceph-defaults being included/respected as well actually15:12
jrosserinteresting they are using import_role15:12
jrosserthe empty tasks file is maybe worth a try15:12
noonedeadpunkwe have them in roles :( https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/ceph-install.yml#L93-L9915:12
jrosseranyway - i really had some difficulty to make that work15:13
jrosserbut tbh i think that i am missing some obvious thing15:13
noonedeadpunkHm, I really don't understand how it works actually....15:14
noonedeadpunkas - should included vars in role work the same way then?15:15
noonedeadpunkie - being available outside of the role scope?15:15
noonedeadpunkyeah, that worth to have a closer look obviously15:16
jrosserright its a very good question15:16
jrosserand one that obviously is important for ceph-ansible too15:16
noonedeadpunkand potentially it depends on import vs include15:18
jrosseri will write a test after the meeting15:18
noonedeadpunkbtw tempest fix https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/907886 seems to be working now - https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/907758 is happy15:19
noonedeadpunkthere're bunch of improvments that should be done for openstack_resources role, first of which to move service_setup role under it15:20
noonedeadpunkI wonder if it's possible to do some kind of collection mapping magic to avoid patching all roles...15:20
jrosserwhy do we need to do that btw?15:20
noonedeadpunkwell.....15:21
noonedeadpunkamount of skipped tasks potentially have smth to do with that: https://opendev.org/openstack/openstack-ansible-plugins/src/branch/master/roles/openstack_resources/tasks/identity.yml#L16-L3715:21
noonedeadpunkas role is included 2 times when we'd need to iterate properly over list of domains, since in service_setup context there's only 1 domain is possible15:23
noonedeadpunkso for each domain, role is fully included for no good reason more or less15:23
noonedeadpunkjust to keep compatibility of formats....15:23
noonedeadpunkBut dunno15:23
noonedeadpunkmaybe we don't need that at all15:23
noonedeadpunkI was having some thought after looking through bunch of bugs lately.15:28
noonedeadpunkIf there's any will among you folks to do a bug triage/sorting day and spend it on closing/reviving bugs?15:29
noonedeadpunklike it feels that 90% of them are not valid, but there're 10% that really worth paying attention to15:29
noonedeadpunkand could be missed/still valid today (like https://bugs.launchpad.net/openstack-ansible/+bug/1896589)15:30
noonedeadpunkas it's pretty embarassing to have that bug for 4 years....15:30
noonedeadpunkI know that it's not best time investment and might be hard to justify...15:31
noonedeadpunkSo no is also a good answer15:31
noonedeadpunkLike if I'd sort bugs by update date - it's getting to 2020 after ~30-40 of them15:33
* noonedeadpunk just found another valid one15:37
jrosserwould be good to have a bug squash at some point15:37
jrossermaybe if it's just sorting out the ancient/invalid and leaving the actual ones15:38
noonedeadpunkdamiandabrowski: mgariepy wanna take part in that ^ :)15:38
noonedeadpunk*it was a question15:38
noonedeadpunkLike take couple of hours (or half of the day) for bug fighting day15:39
noonedeadpunkand close what's not relevant / triage set priority for what is valid15:39
jrosserthat would be good - otherwise we just fight all the rubbish ones and waste time15:46
mgariepyyes sure when ?15:55
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Always distribute qemu config file  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/90816015:59
noonedeadpunklet's agree on some date/time:)15:59
noonedeadpunkthe closer to end of week - the calmer days in terms of meetings/distracting factors.16:00
noonedeadpunkthat's for me at least :D16:00
noonedeadpunkI can send out a poll after the meeting actually16:00
mgariepyok 16:01
noonedeadpunkawesome16:01
noonedeadpunk#endmeeting16:01
opendevmeetMeeting ended Tue Feb  6 16:01:31 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:01
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2024/openstack_ansible_meeting.2024-02-06-15.00.html16:01
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2024/openstack_ansible_meeting.2024-02-06-15.00.txt16:01
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2024/openstack_ansible_meeting.2024-02-06-15.00.log.html16:01
nixbuilderCan someone explain what the repo_all group is for?  I am attempting to add three compute hosts and get the following errors https://paste.openstack.org/show/by3QYUERRsRQBPaGNh1J/16:30
nixbuilderThis is when running 'openstack-ansible setup-openstack.yml --limit localhost,compute35,compute36,compute37'16:32
nixbuilderHere is how pkg_repo is defined https://paste.openstack.org/show/be5poKiwk3yuonOAH6Y9/16:35
jrossernixbuilder: the compiling of python wheels is done on one of the repo_all group16:35
jrosserand you have rocky 9.3 new computes but your infra nodes are 9.216:35
jrosserso it doesnt match16:35
jrosserthat might be a good question we ask NeilHanlon if it's valid to make a distinction between minor releases of Rocky for this16:36
nixbuilderAhhh... ok.  I guess I can rebuild those new computes on Rocky 9.2 then.16:39
jrosseris that possible? i'm not particualty familiar with the RH derivatives16:39
nixbuilderjrosser: Should be possible... I hope.16:40
jrosserit might be that the minor version distinction that we make there is not valid16:41
jrosserbut i'm not sure about that really16:41
nixbuilderHmmm... perhaps when I did the 'dnf upgrade' it went from 9.2 to 9.3 by itself.... yuch.16:42
noonedeadpunkWe actually have fixed this bug16:43
nixbuildernoonedeadpunk: How??? Where???16:43
noonedeadpunkIt's ... zed? Or what you said?:)16:43
noonedeadpunkBut I believe it's patrch fixing the issue: https://opendev.org/openstack/ansible-role-python_venv_build/commit/7ca65b91379f2b6e1086e03e33e623968093bac016:44
noonedeadpunknixbuilder: but other way around would be doing `dnf update` on one of repo containers16:44
noonedeadpunkI'd expect it be updated to rocky 9.3 this way and satisfying the requirement16:45
noonedeadpunkjust important to clean facts for the container16:45
NeilHanlonnixbuilder: you.. *can* run 9.2, but you shouldn't. We don't test against it, and Rocky does not provide updates anymore for anything except 9.3 and 8.916:49
nixbuilderNeilHanlon: So I really should update all infra and compute nodes to 9.3 then.... right?16:52
nixbuilderNeilHanlon: Also all infra and compute nodes are on bare metal16:53
NeilHanlonyep, 9.3 would be the best to test against -- we run dnf upgrade on the components (e.g., if you're using LXC), so the containers we create will be upgraded as well16:54
nixbuilderNeilHanlon: So after I upgrade the OS, how do I update the repo's on the infra nodes?16:56
jrossernixbuilder: the contents of the "repo server" is python wheels17:02
jrosserthey are built on-demand as you run throught the other playbooks17:02
opendevreviewMerged openstack/openstack-ansible-os_tempest master: Add missed openstack_resources_image condition  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/90788617:02
jrosserso theres really nothing to do, just get your repo hosts to 9.3, and try again to deploy your new computes17:02
jrossernoonedeadpunk: https://paste.opendev.org/show/bpBRwAAUELSS5YYxE7l9/17:02
jrosserthis is what i struggled to make work17:03
noonedeadpunknixbuilder: you should update only 1 repo container in fact17:04
noonedeadpunkor as bare minimum17:04
nixbuildernoonedeadpunk: OK... I will only update one infra node and then retry deploying my new compute nodes.17:06
noonedeadpunkrepo container != infra node fwiw17:06
noonedeadpunkupdating infra node won't bring container version up17:06
jrosserbare metal deployment i think17:07
jrosseralso TIL DEFAULT_GATHER_SUBSET is deprecated and the alternative, module_defaults is pretty unhelpful17:08
noonedeadpunknixbuilder: basically - `ansible -m command -a "dnf update" 'repo_all[0]'`17:08
noonedeadpunkah, ok, for bare metal then yes17:08
noonedeadpunkyeah, I'm looking at this deprecation warning for a while17:08
noonedeadpunkclueless on how to replace17:08
noonedeadpunkleaving trouble for tomorrow me :D17:09
noonedeadpunkjrosser: frankly speaking, that role does work looks like undocumented behaviour or even a bug...17:14
jrosserso i am not sure what i am missing compared to ceph_ansible?17:14
jrosserthey have a role to set defaults and it does seem to work17:15
jrosserand to make this proper it needs to be conditional too, as we have source/distro vars to choose from17:16
noonedeadpunkI'm actually thinking more towards set_facts and then do include some vars/tasks based on source/distro17:17
noonedeadpunkbut dunno17:17
noonedeadpunkok, I have smth I guess17:18
noonedeadpunkthat should do the trickyt17:19
noonedeadpunkI can hardly explain, but let be propose some DNM I guess17:20
jrosseri'm not sure if being in a collection changes the behaviour too17:20
noonedeadpunkDunno, but I think this approach will work nicely...17:20
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-plugins master: Add role for provisioning default variables for install methods  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/90817917:26
noonedeadpunkjrosser: ^17:26
jrosseroh of course :)17:27
jrossernice17:27
noonedeadpunkI dunno if it should be install_method or service_install_method though....17:28
noonedeadpunklike currently it's install_method... But then we have service_install_method in all roles?17:29
jrosseri think i was too hard trying to port the include_vars directly and completely forgot i could take the task with it too17:29
noonedeadpunkfor some reason I thought this should not work either17:29
noonedeadpunkAlso it's 1 task more...17:29
noonedeadpunkbut well. 17:29
jrosser`service_install_method` is odd indeed17:31
jrosseras if you wanted to override then surely <foo>_install_method would be the default to set17:32
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Implement support for octavia-ovn-provider driver  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/86846217:54
noonedeadpunkMy guess is that idea was to replace install_method with service_install17:54
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Implement support for octavia-ovn-provider driver  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/86846218:10
damiandabrowskinoonedeadpunk: regarding bug triage/sorting day - sure, I'm happy to help18:54

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!