Tuesday, 2020-02-25

openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963900:05
*** mattw4 has quit IRC00:07
*** jamesmcarthur has joined #openstack-infra00:10
*** artom has joined #openstack-infra00:11
*** jamesmcarthur has quit IRC00:13
*** gfidente has quit IRC00:14
*** jamesmcarthur has joined #openstack-infra00:14
ianwclarkb: actually i don't know how per-project ssh keys passed me by.  i think we could run the extant script from a job, just for the POC00:16
clarkbianw: thats a good point. Then we can sort out goaccess later00:17
clarkb(that said goaccess shouldn't be that tricky)00:17
ianwi can rework what i put up00:18
*** auristor has joined #openstack-infra00:19
*** jamesmcarthur has quit IRC00:19
clarkbianw: I was thinking that we may just be fine with publishing the reports to the swift logs containers00:22
clarkbianw: then you can use zuul's build list to pull up recent builds00:23
clarkband get the logs via that mechanism. As a halfway step before we have dedicated location for them00:23
ianwyeah, i feel like that's enough history00:23
*** auristor has quit IRC00:23
ianwis it http://zuul.openstack.org/api/tenant/opendev/project-ssh-key/system-config.pub ?00:23
clarkbianw: its based on where the job is defined. So if you define and run the job out of opendev/system-config I believe that is roughly correct00:24
clarkbthough it isn't loading for me.00:24
*** icarusfactor has joined #openstack-infra00:24
* clarkb tries wget00:24
ianwi guess tenant is openstack?00:25
clarkbianw: http://zuul.opendev.org/api/tenant/openstack/project-ssh-key/opendev/system-config.pub00:26
clarkbthe openstack.org domain whitelabels the tenant so its something like api/project-ssh-key/opendev/system-config.pub but the above link should work (it works from here)00:27
*** factor has quit IRC00:27
ianwyep, cool00:27
clarkbalso maybe use https instead of http00:27
ianwi guess we just add that to root's authorized keys00:28
*** tetsuro has joined #openstack-infra00:29
clarkbya, then in your job you can do an empty nodeset and addhost from the executor00:29
clarkbin theory that should all work now00:29
clarkbthough our test job for it kind of died on the vine00:29
*** jamesmcarthur has joined #openstack-infra00:44
*** jamesmcarthur has quit IRC00:50
*** auristor has joined #openstack-infra00:54
openstackgerritIan Wienand proposed opendev/system-config master: static: add a periodic 404 checker  https://review.opendev.org/70938200:55
ianwclarkb: ^ i feel like that is way too small and easy00:56
*** smarcet has joined #openstack-infra00:59
*** auristor has quit IRC00:59
openstackgerritIan Wienand proposed opendev/system-config master: [wip] static: provide git services  https://review.opendev.org/70940301:08
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963901:08
*** jamesmcarthur has joined #openstack-infra01:14
*** nicolasbock has quit IRC01:15
*** smarcet has left #openstack-infra01:22
*** yamamoto has joined #openstack-infra01:31
*** rlandy has quit IRC01:34
*** Lucas_Gray has joined #openstack-infra01:37
*** jamesmcarthur has quit IRC01:38
*** jamesmcarthur has joined #openstack-infra01:38
openstackgerritIan Wienand proposed opendev/system-config master: [wip] static: provide git services  https://review.opendev.org/70940301:40
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963901:40
*** matt_kosut has joined #openstack-infra01:41
*** jamesmcarthur has quit IRC01:44
*** matt_kosut has quit IRC01:46
*** smarcet has joined #openstack-infra01:48
*** smarcet has left #openstack-infra01:49
openstackgerritIan Wienand proposed opendev/system-config master: static: add a periodic 404 checker  https://review.opendev.org/70938201:57
*** ijw has quit IRC01:59
openstackgerritIan Wienand proposed opendev/system-config master: [wip] static: provide git services  https://review.opendev.org/70940302:08
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963902:08
*** jamesmcarthur has joined #openstack-infra02:08
*** jamesmcarthur has quit IRC02:15
*** Lucas_Gray has quit IRC02:30
*** Lucas_Gray has joined #openstack-infra02:40
*** jamesmcarthur has joined #openstack-infra02:41
*** artom has quit IRC02:42
*** jamesmcarthur has quit IRC02:47
*** Lucas_Gray has quit IRC02:50
*** rfolco has quit IRC02:53
openstackgerritIan Wienand proposed opendev/system-config master: [wip] static: provide git services  https://review.opendev.org/70940303:11
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963903:11
*** apetrich has quit IRC03:12
*** jamesmcarthur has joined #openstack-infra03:23
*** gyee has quit IRC03:25
*** gyee has joined #openstack-infra03:27
*** psachin has joined #openstack-infra03:28
*** jamesmcarthur has quit IRC03:29
*** psachin has quit IRC03:33
*** psachin has joined #openstack-infra03:35
*** jamesmcarthur has joined #openstack-infra03:36
*** jamesmcarthur has quit IRC03:41
*** jamesmcarthur has joined #openstack-infra03:44
*** clarkb has quit IRC03:45
*** clarkb has joined #openstack-infra03:45
*** HenryG has quit IRC03:46
*** diablo_rojo__ has joined #openstack-infra03:49
*** timburke has quit IRC03:50
*** onovy has quit IRC03:51
*** smarcet_ has joined #openstack-infra03:51
*** jamesmcarthur_ has joined #openstack-infra03:51
*** bdodd has quit IRC03:52
*** jamesmcarthur has quit IRC03:52
*** diablo_rojo has quit IRC03:52
*** ikla has quit IRC03:52
*** onovy has joined #openstack-infra03:53
*** timburke has joined #openstack-infra03:53
*** bdodd has joined #openstack-infra03:54
*** lbragstad_ has joined #openstack-infra04:08
*** lbragstad has quit IRC04:10
openstackgerritMatthew Thode proposed openstack/diskimage-builder master: Allow installing glean from package  https://review.opendev.org/55786704:20
*** udesale has joined #openstack-infra04:23
*** ykarel|away is now known as ykarel04:26
*** imacdonn has quit IRC04:47
*** imacdonn has joined #openstack-infra04:47
*** lbragstad_ has quit IRC04:59
*** jamesmcarthur_ has quit IRC05:01
*** jamesmcarthur has joined #openstack-infra05:03
*** jamesmcarthur has quit IRC05:08
*** larainema has joined #openstack-infra05:18
AJaegerianw: governance.o.o looks fine - both on files and published. thanks05:20
*** matt_kosut has joined #openstack-infra05:21
*** gagehugo has quit IRC05:27
*** gagehugo has joined #openstack-infra05:27
*** jamesmcarthur has joined #openstack-infra05:32
*** evrardjp has quit IRC05:34
*** evrardjp has joined #openstack-infra05:35
*** kozhukalov has quit IRC05:38
*** tetsuro has quit IRC05:39
openstackgerritMerged zuul/zuul-helm master: Drop args from container spec  https://review.opendev.org/70942405:39
*** kozhukalov has joined #openstack-infra05:39
*** tetsuro has joined #openstack-infra05:40
*** tetsuro has quit IRC05:48
*** gyee has quit IRC05:49
*** tetsuro has joined #openstack-infra06:03
*** raukadah is now known as chandankumar06:03
openstackgerritIan Wienand proposed opendev/system-config master: [wip] static: provide git services  https://review.opendev.org/70940306:08
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963906:08
*** jamesmcarthur has quit IRC06:12
*** lmiccini has joined #openstack-infra06:12
*** strigazi has quit IRC06:16
*** strigazi has joined #openstack-infra06:18
*** kozhukalov has quit IRC06:18
*** matt_kosut has quit IRC06:20
*** matt_kosut has joined #openstack-infra06:42
*** AJaeger has quit IRC06:44
*** roman_g has quit IRC06:48
*** AJaeger has joined #openstack-infra06:51
*** dpawlik has joined #openstack-infra07:26
*** admcleod has quit IRC07:27
*** piotrowskim has joined #openstack-infra07:32
*** jamesmcarthur has joined #openstack-infra07:41
*** ykarel is now known as ykarel|lunch07:41
*** ociuhandu has joined #openstack-infra07:43
*** psachin has quit IRC07:47
*** jamesmcarthur has quit IRC07:47
*** pgaxatte has joined #openstack-infra07:47
*** slaweq_ has joined #openstack-infra07:50
openstackgerritIan Wienand proposed opendev/system-config master: [wip] static: provide git services  https://review.opendev.org/70940307:51
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963907:51
*** admcleod has joined #openstack-infra07:54
*** pkopec has joined #openstack-infra08:00
*** tosky has joined #openstack-infra08:04
*** ccamacho has joined #openstack-infra08:05
openstackgerritJan Kubovy proposed zuul/zuul master: Scheduler test app manager  https://review.opendev.org/70881208:05
*** auristor has joined #openstack-infra08:13
*** dchen has quit IRC08:16
*** yamamoto has quit IRC08:16
openstackgerritJan Kubovy proposed zuul/zuul master: Use scheduler factory consistently in tests  https://review.opendev.org/70954208:17
*** auristor has quit IRC08:17
evrardjpthanks ianw and AJaeger08:20
*** auristor has joined #openstack-infra08:20
*** yamamoto has joined #openstack-infra08:21
*** tkajinam has quit IRC08:22
*** tesseract has joined #openstack-infra08:23
openstackgerritIan Wienand proposed opendev/system-config master: static: provide git services  https://review.opendev.org/70940308:26
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963908:26
*** ykarel|lunch is now known as ykarel08:28
*** Tengu has quit IRC08:30
*** Tengu has joined #openstack-infra08:32
*** slaweq_ has quit IRC08:32
*** jpena|off is now known as jpena08:32
*** amoralej|off is now known as amoralej08:33
*** ysastri has joined #openstack-infra08:36
*** ociuhandu has quit IRC08:37
*** ociuhandu has joined #openstack-infra08:37
*** ralonsoh has joined #openstack-infra08:40
*** smarcet_ has quit IRC08:41
*** ociuhandu has quit IRC08:43
*** tkajinam has joined #openstack-infra08:43
AJaegerevrardjp: could you have a look at https://review.opendev.org/#/c/709299/ , please?08:43
*** jamesmcarthur has joined #openstack-infra08:43
evrardjpsure thing08:44
AJaegerthanks08:45
evrardjpoh I love it already08:46
evrardjptesting it locally just to make sure, but I love it! :)08:46
*** jcapitao has joined #openstack-infra08:47
*** jamesmcarthur has quit IRC08:48
*** iurygregory has joined #openstack-infra08:50
AJaeger;)08:50
*** ociuhandu has joined #openstack-infra08:52
*** gfidente has joined #openstack-infra08:52
jrossergood morning! I have a change here which does not seem to trigger a job running https://review.opendev.org/#/c/709515/08:59
*** priteau has joined #openstack-infra09:00
*** yolanda__ is now known as yolanda09:00
dpawlikHi, does someone of you maintain log server in OS?09:00
*** ociuhandu has quit IRC09:01
*** ociuhandu has joined #openstack-infra09:02
*** lucasagomes has joined #openstack-infra09:03
*** udesale has quit IRC09:07
*** ociuhandu has quit IRC09:08
*** apetrich has joined #openstack-infra09:22
openstackgerritJan Kubovy proposed zuul/zuul master: Use scheduler manager consistently in tests  https://review.opendev.org/70954209:24
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor executor_client in tests  https://review.opendev.org/70967209:24
*** jamesmcarthur has joined #openstack-infra09:29
*** ociuhandu has joined #openstack-infra09:31
AJaegerjrosser: where are the jobs configured for that repo?09:32
AJaegerjrosser: oh, found it09:33
*** jamesmcarthur has quit IRC09:33
jrosserAJaeger: if you look at the topic on that change the proposal bot made dozens of patches yesterday, and oddly that one out of all of them does not run a job09:34
AJaegerjrosser: looks like all your jobs have bindep.txt in their irrelevant files09:34
jrosserhmm09:34
*** ociuhandu_ has joined #openstack-infra09:35
AJaegerjrosser: I thought docs jobs would always run - strange...09:35
*** ociuhandu has quit IRC09:36
AJaegerjrosser: hope somebody else can help later09:36
jrosserok thanks, i think that over the weekend when zuul had an issue there was a problem with our rabbitmq_server repo - was wondering if that was co-incidence or not09:37
*** ociuhandu has joined #openstack-infra09:38
*** ociuhandu_ has quit IRC09:40
*** ociuhandu_ has joined #openstack-infra09:43
AJaegerjrosser: it might be, so let's see wait for an infra-root to dig into this...09:44
*** ociuhandu has quit IRC09:47
AJaegerjrosser: today https://review.opendev.org/#/admin/projects/?filter=rabbit returns the repo, it didn't do it over the weekend09:47
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor merge_client in tests  https://review.opendev.org/70967609:47
jrosserAJaeger: thats good - thanks for taking a look09:48
fricklerjrosser: AJaeger: I'm seeing no errors for that patch, just zuul deciding that there are no jobs to run http://paste.openstack.org/show/789964/ . you may want to test with a dummy patch09:48
AJaegerfrickler: strange, the docs job should run, there are no irrelevant files on that one. Yeah, a dummy patch might help, perhaps iwth "debug: true" added to check queue...09:51
AJaegerjrosser: let me push something quickly...09:51
AJaegerfrickler, jrosser, https://review.opendev.org/70967809:53
AJaegerfrickler: still no reports, even after adding noop ;(09:57
*** yamamoto has quit IRC09:58
AJaegerjrosser: that smells fishy, something looks broken to me. Let's investigate with the US experts if frickler has no additional ideas09:59
jrossersure, thanks for sanity checking for me - something certainly is odd there09:59
*** yamamoto has joined #openstack-infra10:09
*** mgoddard has joined #openstack-infra10:26
mgoddardHi, I'm having issues running kolla CentOS 8 deploy jobs on the stable/train branch10:27
mgoddardThe jobs all fail after ~20 seconds10:27
mgoddardhttps://zuul.opendev.org/t/openstack/build/ad9665089fb54ef99a2cad7d5ca79c3610:27
mgoddardPatch adding them is https://review.opendev.org/#/c/709536/110:28
AJaegermgoddard: "recheck" and try to follow the log file via http://zuul.opendev.org/t/openstack/status/change/709536,1 - click on one of the jobs once it's started10:38
AJaegermgoddard: I hope that gives an insight on what fails...10:39
*** ociuhandu_ has quit IRC10:42
*** priteau has quit IRC10:52
mgoddardAJaeger: good hint, that helped. Forcing ansible_python_interpreter=python2 isn't going to work on CentOS8 :)10:53
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Fix install-docker on centos-8  https://review.opendev.org/70918410:57
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Tests ensure-tox on all-platforms  https://review.opendev.org/70864211:00
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Tests bindep role on all-platforms  https://review.opendev.org/70870411:01
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Tests bindep role on all-platforms  https://review.opendev.org/70870411:02
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Tests ensure-tox on all-platforms  https://review.opendev.org/70864211:02
*** udesale has joined #openstack-infra11:17
*** yamamoto has quit IRC11:20
*** yamamoto has joined #openstack-infra11:22
*** iurygregory has quit IRC11:26
*** rcernin has quit IRC11:37
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor merge_client in tests  https://review.opendev.org/70967611:42
*** jamesdenton has quit IRC11:45
*** jamesdenton has joined #openstack-infra11:46
*** nicolasbock has joined #openstack-infra11:53
*** jcapitao is now known as jcapitao_lunch11:54
*** gagehugo has quit IRC11:56
*** rfolco has joined #openstack-infra11:58
*** jpena is now known as jpena|lunch12:01
*** amoralej is now known as amoralej|lunch12:01
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor nodepool in tests  https://review.opendev.org/70970312:07
*** ysastri has quit IRC12:09
*** AJaeger has quit IRC12:12
*** dave-mccowan has joined #openstack-infra12:17
*** AJaeger has joined #openstack-infra12:17
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor zookeeper in tests  https://review.opendev.org/70970912:23
*** roman_g has joined #openstack-infra12:25
openstackgerritMerged zuul/zuul master: Ensure job.queued is correct after reconfig  https://review.opendev.org/70955912:28
*** ykarel is now known as ykarel|afk12:29
*** ociuhandu has joined #openstack-infra12:30
*** tkajinam has quit IRC12:30
openstackgerritJan Kubovy proposed zuul/zuul master: WIP: Store unparsed branch config in Zookeeper  https://review.opendev.org/70571612:36
jrossercould i get a hold on job openstack-ansible-deploy-aio_metal-centos-8 on https://review.opendev.org/#/c/68962912:39
*** rosmaita has quit IRC12:39
*** rosmaita has joined #openstack-infra12:41
*** smarcet has joined #openstack-infra12:42
fricklerjrosser: done12:44
jrosserthanks!12:45
openstackgerritsebastian marcet proposed opendev/system-config master: OpenStackID v3.0.0  https://review.opendev.org/70971912:46
*** ociuhandu has quit IRC12:56
*** sshnaidm is now known as sshnaidm|bbl12:59
*** ykarel|afk is now known as ykarel12:59
*** rlandy has joined #openstack-infra13:00
openstackgerritJan Kubovy proposed zuul/zuul master: Consolidate scheduler pause/exit as hibernation  https://review.opendev.org/70972313:12
*** jpena|lunch is now known as jpena13:15
*** jcapitao_lunch is now known as jcapitao13:15
*** amoralej|lunch is now known as amoralej13:17
*** jamesmcarthur has joined #openstack-infra13:27
*** rh-jelabarre has joined #openstack-infra13:33
*** nicolasbock has quit IRC13:33
*** nicolasbock has joined #openstack-infra13:34
*** jamesmcarthur has quit IRC13:35
*** nicolasbock has quit IRC13:36
*** yamamoto has quit IRC13:36
*** lbragstad_ has joined #openstack-infra13:44
openstackgerritTristan Cacqueray proposed zuul/zuul master: config: add tenant.toDict() method and REST endpoint  https://review.opendev.org/62134413:49
*** kozhukalov has joined #openstack-infra13:50
*** tkajinam has joined #openstack-infra13:53
*** yamamoto has joined #openstack-infra13:58
*** aaronsheffield has joined #openstack-infra14:00
*** priteau has joined #openstack-infra14:00
*** Lucas_Gray has joined #openstack-infra14:04
*** slaweq_ has joined #openstack-infra14:05
jrosserfrickler: my hold on https://review.opendev.org/#/c/689629 should be ready, http://jrosser.woaf.net/openstack.pub14:06
*** Goneri has joined #openstack-infra14:24
*** priteau has quit IRC14:27
openstackgerritJan Kubovy proposed zuul/zuul master: Scheduler's pause/resume functionality  https://review.opendev.org/70973514:27
*** eharney has joined #openstack-infra14:27
*** Lucas_Gray has quit IRC14:39
*** Lucas_Gray has joined #openstack-infra14:41
fungijrosser: AJaeger: the zuul scheduler seems to think there are no relevant jobs for that change... zuul.Pipeline.openstack.check: [e: 669a6e5c73fd4be78b91c21ed4a6a924] No jobs for change <Change 0x7f3026ded518 openstack/openstack-ansible-rabbitmq_server 709515,1>14:45
fungiwe'd need to turn on debug in that change to get info on every job it tried to match against and why it decided they didn't fit14:46
*** ykarel is now known as ykarel|away14:46
*** dave-mccowan has quit IRC14:47
AJaegerfungi, I added debug to https://review.opendev.org/#/c/709678/  - still no result14:53
AJaegerso, please check 709687 logs as well - and review my change.14:53
AJaegerDid Zuul forgot about the jobs after the trouble on Saturday?14:54
fungii suppose it's possible it cached a bad configuration state at some point14:54
*** jaosorior has joined #openstack-infra14:55
clarkbpabelanger points out http://paste.openstack.org/show/789969/. Why is new review dev trying to s end more than 40 emails a day?14:56
AJaegerfungi: yeah, that's what I fear...14:57
*** michael-beaver has joined #openstack-infra14:57
AJaegerany idea how to validate that?14:58
*** eharney has quit IRC14:59
clarkbbut that email issue should go away once dns is sorted. mordred fyi15:00
*** matt_kosut has quit IRC15:01
clarkbAJaeger: fungi we could try a tenant full reload15:02
fungiAJaeger: looking through the scheduler debug log entries for 709678,3 i don't see anything different. says there are no jobs for that change in the check pipeline15:02
AJaegerfungi: my change added a noop job! So, that one should be there - could you check my change, please?15:02
clarkbif the mergershave badgit data though we may need to rm the repo on all mergers and executors first15:02
fungiyeah, i guess the scheduler didn't get restarted yesterday with the other seervices15:02
fungiAJaeger: i did check that change, that's the 709678,3 i mentioned above15:03
*** eharney has joined #openstack-infra15:03
fungiit did not register the added noop job15:03
AJaegerfungi: thansk for double checking15:04
*** iurygregory has joined #openstack-infra15:05
fungiso i agree, something seems broken15:05
*** sreejithp has joined #openstack-infra15:05
fungii'm up for clarkb's suggestion, will give it a shot (i don't think it's seriously disruptive other than to pause the scheduler's queue processing)15:06
fungithe logs say it did a tenant reconfig at 2020-02-25 11:12:4015:07
fungiclarkb: i guess that's not quite the same?15:07
*** ociuhandu has joined #openstack-infra15:08
*** tkajinam has quit IRC15:08
clarkbya I think there is incremental (typical) and full15:09
fungialso i guess we don't use the rpc cli for this (or else it's missing from the zuul --help output)15:09
clarkbfull is what you get when you restart15:09
* fungi rtfms15:09
fungiahh, right, it's zuul-scheduler cli not zuul cli15:11
fungihttps://zuul-ci.org/docs/zuul/discussion/components.html#reconfiguration15:11
smarcetfungi: morning there is a new version of openstackid to deploy for production https://review.opendev.org/#/c/709719/15:12
smarcetfungi: could we re enable the puppet agent at production after that patch is approved also ? thx u :)15:12
fungi#status log triggered a zuul-scheduler full-reconfigure on zuul01 to troubleshoot lack of job matches on openstack/openstack-ansible-rabbitmq_server changes15:13
openstackstatusfungi: finished logging15:13
fungismarcet: sure, looking now15:13
AJaegerfungi, shall I recheck?15:14
smarcetfungi: thx u15:14
fungiAJaeger: just a sec, i need to see if the reconfigure completed15:15
fungi2020-02-25 15:13:42,810 DEBUG zuul.Scheduler: Processing management event <zuul.scheduler.ReconfigureEvent object at 0x7f2f8ce2ffd0>15:15
fungii guess we don't log the end of a reconfig, but it looks like it was received anyway, so go ahead and recheck since the reconfig will block queue processing until it's completed anyway15:16
corvusfungi: we log start and stop15:16
corvusfungi: grep for "Full reconfiguration"15:17
AJaegerchange is showing up in Zuul dashboard!15:18
fungiaha, thanks! 2020-02-25 15:18:18,776 DEBUG zuul.Scheduler: Reconfiguration complete15:19
AJaegerfungi: both changes show up - so, this has helped. Thanks!15:19
openstackgerritJan Kubovy proposed zuul/zuul master: Make test setup_config more pure  https://review.opendev.org/70908415:19
openstackgerritJan Kubovy proposed zuul/zuul master: Scheduler test app manager  https://review.opendev.org/70881215:19
corvusthat's the one after "Full reconfiguration complete (duration: %s seconds)"15:19
openstackgerritJan Kubovy proposed zuul/zuul master: Use scheduler manager consistently in tests  https://review.opendev.org/70954215:19
AJaegerjrosser: FYI, rabbitmy-server should be fine again15:20
fungiahh, yep15:20
fungi2020-02-25 15:18:18,771 INFO zuul.Scheduler: Full reconfiguration complete (duration: 275.961 seconds)15:20
fungiso i think that means that we did indeed have bad configuration cached from when that repo was broken15:20
jrosserAJaeger: great15:20
jrosserthanks all for taking a look at that15:20
fungior at least the full reconfig "shook something loose"15:20
corvusyay, we used full-reconfigure to recover from an inconsistent state!  that's one of those "theoretical possibilities" we keep it around for, but i'm not sure if we've really needed to do it until now.  :)15:21
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor executor_client in tests  https://review.opendev.org/70967215:22
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor merge_client in tests  https://review.opendev.org/70967615:22
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor nodepool in tests  https://review.opendev.org/70970315:22
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor zookeeper in tests  https://review.opendev.org/70970915:22
openstackgerritJan Kubovy proposed zuul/zuul master: Consolidate scheduler pause/exit as hibernation  https://review.opendev.org/70972315:22
openstackgerritJan Kubovy proposed zuul/zuul master: Scheduler's pause/resume functionality  https://review.opendev.org/70973515:22
*** smarcet has quit IRC15:22
fungicorvus: if only we knew how to reproduce that inconsistent state15:22
*** smarcet has joined #openstack-infra15:23
mordredclarkb: my brain is still waking up - what's the DNS issue?15:25
clarkbmordred: the reverse and forward records for that host don't match up so my email provider limits it to sending 40 emails a day15:25
mordredoh - weird15:26
mordredoh - wait - that's old review-dev15:26
*** irclogbot_1 has quit IRC15:27
corvusso we just need to delete that;  we're probably ready for that now?15:27
*** irclogbot_0 has joined #openstack-infra15:28
mordredyeah, I think new review-dev is happy enough - and it's not like old review-dev was super precious anyway15:28
clarkboh I see its old server because dns moved for new15:29
*** smarcet has quit IRC15:30
openstackgerritJan Kubovy proposed zuul/zuul master: WIP: Store unparsed branch config in Zookeeper  https://review.opendev.org/70571615:30
*** smarcet has joined #openstack-infra15:31
mordredinfra-root: I'm going to delete old review-dev unless someone screams15:32
clarkbmordred: if there is concern we could snapshot it first15:32
clarkbI don't think I'm too concerned15:32
mordredclarkb: I'm not too concerned either15:32
*** rfolco has quit IRC15:32
mordred#status log deleted old review-dev01.openstack.org15:35
openstackstatusmordred: finished logging15:35
*** matt_kosut has joined #openstack-infra15:36
*** gagehugo has joined #openstack-infra15:37
*** matt_kosut has quit IRC15:40
jrosseri have a held node on job openstack-ansible-deploy-aio_metal-centos-8 / https://review.opendev.org/#/c/689629 which should be ready now, here's my key http://jrosser.woaf.net/openstack.pub15:41
corvusjrosser: i can add it15:43
clarkbinfra-root docs.opendev.org and review.opendev.org's ssl certs will expire in ~29 days. docs.opendev.org is on ianw's static/files list and should be done real soon now. review.opendev.org likely needs changes to LE. I doubt I'll get to that today, but will try to have that high on my list unless someone else would like to kick the tires on our LE tooling15:44
mordredclarkb: I've already added the patches for review.opendev.org to get the LE certs15:44
clarkbmordred: oh perfect15:45
clarkbhigh on my list to review then15:45
mordredI'm pretty sure they're landed15:45
mordredone se15:45
mordredsec15:45
clarkbhrm we still have a non LE cert there according to my browser15:45
mordredhrm. nope - not landed15:45
mordredoh - yeah, still definitely have non-LE15:45
clarkbhttps://review.opendev.org/#/c/709402/1 is the docs.opendev.org change (which is already set up with LE on the new side)15:45
mordredthe patch I'm thinking about goes ahead and requests the LE cert15:45
corvusjrosser:  ssh root@162.242.237.21815:45
mordred(part of the ansible/docker work)15:46
jrossercorvus: thanks!15:46
clarkbmordred: do you think we can decouple it and land that first?15:46
clarkbmordred: then its a puppet side change to consume the cert and an ansible/docker change to consume it there15:46
mordredclarkb: https://review.opendev.org/#/c/705670/15:47
mordredclarkb: already landed - but there's no LE certs on review15:47
mordredclarkb: so, you know - not really sure what's up with that - we should investigate15:47
openstackgerritMerged opendev/system-config master: OpenStackID v3.0.0  https://review.opendev.org/70971915:47
*** ociuhandu has quit IRC15:48
mordredclarkb: but yes, idea was go ahead and get the certs, then we can consume them with puppet if we don't roll out the ansible first15:48
*** pkopec has quit IRC15:48
mordredclarkb: /var/log/acme.sh is also empty on review15:49
clarkbmordred: do you know if an acme record was created in the openstack.org domain for it? however if there is no /var/log/acme.sh content I expect that isn't the issue15:51
clarkbmordred: I've got a meeting in a few minutes but can help debug after likely15:52
mordredclarkb: I *think* I created one - but I could have done something wrong15:52
*** ijw has joined #openstack-infra15:52
mordredclarkb: cool. I'll see what I can find in the meantime15:52
fungi#status log removed openstackid01.openstack.org from emergency disable list now that 709719 has merged15:52
openstackstatusfungi: finished logging15:52
fungismarcet: ^15:52
clarkbmordred: you can also check the ansible log side to see which things it evaluated15:52
clarkbon bridge15:52
mordredclarkb: yeah- that's what I'm doing now15:53
smarcetfungi: ack thx u :)15:53
*** nicolasbock has joined #openstack-infra15:54
fungiyou're welcome15:54
mordredclarkb: hah15:54
mordredclarkb: the host is review01.openstack.org - but we have host_vars as review01.opendev.org15:55
*** jamesmcarthur has joined #openstack-infra15:55
clarkbthat would do it15:55
*** jamesmcarthur has quit IRC15:55
*** jamesmcarthur_ has joined #openstack-infra15:55
clarkbmordred: is the gerrit2/le gid thing a concern with puppet managed gerrit? I assume not as much because the puppet stuff is preexisting? and so ansible will just pick a new gid for le?15:56
clarkbeither way I suppose be specific won't hurt either15:56
mordredclarkb: yeah to both15:57
mordredclarkb: should we change the inventory hostname to review01.opendev.org? or the host_vars file name to review01.openstack.org ?15:58
mordredI think I lean towards the first15:58
mordredhrm. although the fqdn the host reports on the host is review01.openstack.org15:58
clarkbya there might be unexpected side effects with updating the inventory hostname15:59
mordredalthough the openstack server knows itself as review-dev01.opendev.org15:59
mordredwait15:59
clarkbcanonically the server is review-dev01.openstack.org15:59
mordredyeah - server name is review01.openstack.org15:59
clarkbit serves gerrit at review.opendev.org16:00
mordredyup16:00
mordredso let's keep the inventory name matching for sanity16:00
mordred"sanity"16:00
*** pkopec has joined #openstack-infra16:02
openstackgerritMonty Taylor proposed opendev/system-config master: Rename gerrit hostvars to review01.openstack.org  https://review.opendev.org/70976516:02
mordredclarkb: ^^16:02
mordredthat should get us LE certs on review16:02
*** matt_kosut has joined #openstack-infra16:03
clarkbmordred: and that change isn't going to magically start managing gerrit with ansible + docker there right? thats a groups.yaml change?16:03
clarkbor maybe even in the playbook itself (not seeing that in groups.yaml)16:03
*** pgaxatte has quit IRC16:04
mordredclarkb: it's a playbook - so no, it won't16:05
*** ociuhandu has joined #openstack-infra16:09
*** eharney has quit IRC16:12
*** diablo_rojo__ is now known as diablo_rojo16:13
*** ociuhandu has quit IRC16:24
*** eharney has joined #openstack-infra16:25
*** ociuhandu has joined #openstack-infra16:25
*** gyee has joined #openstack-infra16:27
*** rfolco has joined #openstack-infra16:27
*** jaosorior has quit IRC16:28
*** ociuhandu has quit IRC16:30
mordredfungi: have a sec for ^^ ?16:35
*** lbragstad_ is now known as lbragstad16:36
*** ociuhandu has joined #openstack-infra16:39
*** pkopec has quit IRC16:42
*** pkopec has joined #openstack-infra16:43
fungiyeah, sorry, in the middle of a meeting but i can multitask )16:44
*** mattw4 has joined #openstack-infra16:44
openstackgerritMerged zuul/zuul-jobs master: Fix cleanup of symlink fixtures  https://review.opendev.org/70930616:46
*** iurygregory has quit IRC16:48
mordredfungi: silly meetings16:52
smarcetfungi: got some erros at deployment on production16:53
smarcetfungi: Feb 25 16:46:31 openstackid01 puppet-user[18035]: (/Stage[main]/Apache::Service/Service[httpd]) Triggered 'refresh' from 1 events16:53
smarcetFeb 25 16:51:32 openstackid01 puppet-user[18035]: Command exceeded timeout16:53
smarcetFeb 25 16:51:32 openstackid01 puppet-user[18035]: (/Stage[main]/Openstackid/Exec[update-site]/returns) change from notrun to 0 failed: Command exceeded timeout16:53
smarcetfungi: not sure if we should retrigger something16:53
*** tesseract has quit IRC16:54
fungismarcet: sounds like the update-site command takes longer to run than puppet was willing to wait. how long does that usually take to complete?16:57
smarcetfungi: well not sure, its working at dev it seems16:57
fungii can manually retrigger application of the manifest against that server, though it may timeout again16:57
fungii'll give it a shot16:57
fungirunning now16:58
smarcetfungi: ok if its fail again perhaps i could trigger the deployment script manually and check where is the bottle neck16:58
smarcetfungi: ok thx u16:58
fungismarcet: yeah, it may be related to the size of the data set, or maybe the server is a slower flavor than dev, many possibilities16:59
fungii think we can also increase the execution timeout for that command if it's prone to this problem17:00
clarkbya its a setting on exec resources17:01
smarcetfungi: matter of fact openstackid.org seems slower than openstackid-dev server17:01
smarcetfungi: perhaps we could create a new server with same flavor as dev for prod ?17:02
fungismarcet: i'll look to see what the relative flavors for those are17:02
smarcetfungi: thx u17:03
*** lucasagomes has quit IRC17:03
fungismarcet: looks like it finished. does it seem to have successfully upgraded this time?17:04
smarcetits seems so17:04
smarcetchecking17:04
*** udesale has quit IRC17:04
smarcetfungi: yes sire :)17:04
smarcetfungi: thx u again17:04
fungismarcet: for the record, rackspace says openstackid01.openstack.org and openstackid-dev01.openstack.org are both booted with flavor "15 GB Performance"17:05
smarcetfungi: ack thx u17:05
zbrfungi: clarkb: can we do https://review.opendev.org/#/c/709184/ ? (had to rebase due to conflict)17:06
fungiso it's possible one is just on a busier host than the other, or may be under some production load which slows down puppet17:06
*** lbragstad_ has joined #openstack-infra17:07
*** lbragstad has quit IRC17:10
*** jamesmcarthur has joined #openstack-infra17:10
*** lbragstad_ is now known as lbragstad17:10
openstackgerritMonty Taylor proposed opendev/system-config master: Replace kubectl snap with apt repo  https://review.opendev.org/70925317:10
openstackgerritMonty Taylor proposed opendev/system-config master: Remove snap cleanup tasks  https://review.opendev.org/70929317:10
*** jamesmcarthur_ has quit IRC17:13
*** lmiccini has quit IRC17:16
openstackgerritMerged opendev/system-config master: Rename gerrit hostvars to review01.openstack.org  https://review.opendev.org/70976517:26
*** ijw has quit IRC17:34
*** chandankumar is now known as raukadah17:35
*** ociuhandu has quit IRC17:37
*** evrardjp has quit IRC17:39
*** evrardjp has joined #openstack-infra17:39
*** ijw has joined #openstack-infra17:40
openstackgerritMerged zuul/zuul-jobs master: Fix install-docker on centos-8  https://review.opendev.org/70918417:52
*** yamamoto has quit IRC17:53
*** jpena is now known as jpena|off17:55
*** matt_kosut has quit IRC17:59
*** sshnaidm|bbl is now known as sshnaidm18:04
*** igordc has joined #openstack-infra18:10
*** slaweq_ has quit IRC18:10
*** jamesmcarthur has quit IRC18:26
*** michael-beaver has quit IRC18:27
openstackgerritSean McGinnis proposed openstack/project-config master: Make update_constraints.sh aware of python_versions  https://review.opendev.org/70980918:28
openstackgerritBob Fournier proposed openstack/diskimage-builder master: Do not include efibootmgr and efivars for ppc architectures  https://review.opendev.org/70981118:29
openstackgerritSean McGinnis proposed openstack/project-config master: Make update_constraints.sh aware of python_versions  https://review.opendev.org/70980918:29
*** jcapitao has quit IRC18:29
*** Lucas_Gray has quit IRC18:31
smcginnisThat one could save the requirements team some headache for updates when new libraries are released. ^18:31
openstackgerritsebastian marcet proposed opendev/system-config master: OpenStackId v3.0.1 deployment  https://review.opendev.org/70981218:35
*** jamesmcarthur has joined #openstack-infra18:38
*** jamesmcarthur has quit IRC18:39
*** jamesmcarthur has joined #openstack-infra18:42
*** ralonsoh has quit IRC18:42
*** Lucas_Gray has joined #openstack-infra18:43
*** jamesmcarthur has quit IRC18:43
*** trident has quit IRC18:52
*** amoralej is now known as amoralej|off18:53
*** jamesmcarthur has joined #openstack-infra18:56
*** trident has joined #openstack-infra18:58
*** pkopec has quit IRC18:59
*** rosmaita has quit IRC19:00
*** slaweq_ has joined #openstack-infra19:03
*** pkopec has joined #openstack-infra19:09
*** rosmaita has joined #openstack-infra19:13
*** ijw has quit IRC19:17
*** igordc has quit IRC19:17
*** ijw has joined #openstack-infra19:18
*** slaweq_ has quit IRC19:21
openstackgerritMerged opendev/system-config master: OpenStackId v3.0.1 deployment  https://review.opendev.org/70981219:23
*** ijw has quit IRC19:24
*** sshnaidm has quit IRC19:28
*** jamesmcarthur has quit IRC19:28
*** sshnaidm has joined #openstack-infra19:28
*** jamesmcarthur has joined #openstack-infra19:32
*** apetrich has quit IRC19:37
*** slaweq_ has joined #openstack-infra19:47
*** eharney has quit IRC19:48
*** larainema has quit IRC19:48
openstackgerritMerged opendev/jeepyb master: Overhaul default welcome message for OpenDev  https://review.opendev.org/70897519:49
*** igordc has joined #openstack-infra19:49
mordredianw: if you're bored whilst waking up - two LE related investigations .,.. 1) why are we still not getting LE certs for review01.openstack.org and 2) why is review-dev unhappy19:50
mordredianw: I'm looking at review-dev atm (was looking at 1, noticed 2 and looking at it now)19:51
*** kozhukalov has quit IRC19:51
mordredianw: oh - weird. remember last week when there were no new certs with the addition of review-dev.openstack.org to the cert- so I moved the old certs out of the way so that LE would re-get them?19:52
mordrednothing has gotten new certs - so review-dev is grumpy19:52
*** smarcet has quit IRC19:52
ianw2020-02-25 06:51:00,386 p=root u=2837 | ok: [review01.openstack.org] => {19:53
ianw    "letsencrypt_certs": "VARIABLE IS NOT DEFINED!"19:53
ianw}19:53
clarkbdid we get the key in host vars wrong?19:53
*** Lucas_Gray has quit IRC19:53
fungithat's a very descriptive value19:53
ianwmordred: ahh,maybe there's a cache file that needs to be removed?19:53
*** smarcet has joined #openstack-infra19:55
*** jamesmcarthur has quit IRC19:56
mordredclarkb: does the key in letsencrypt_certs need to match the hostname pattern?19:57
clarkbmordred: no they are arbitrary inside the dict19:57
mordredkk.19:58
clarkbmordred: static.opendev.org is a good example since it has all the things now19:58
*** slaweq_ has quit IRC19:58
mordredyeah19:58
*** ociuhandu has joined #openstack-infra19:58
*** aaronsheffield has quit IRC20:00
fungion a gerrit note, i tried to make more progress on https://review.opendev.org/681906 after yet another user ran into a related problem, and i suspect those behaviors in our version of gerrit (how topic string encoding/decoding is handled) may differ from more recent releases20:01
fungithe user reached out to me via irc privmsg after finding the earlier iteration of that change, and noted that on gerrit 3.1.2 (what they're currently running), simply wrapping the topic in quotes seems to work out but it definitely does not with 2.1320:03
*** jamesmcarthur has joined #openstack-infra20:03
ianwmordred: so on 1) when i look at20:03
ianw2020-02-25 19:21:44,519 p=root u=32757 | TASK [letsencrypt-request-certs : Show cert list] ******************************20:03
fungiin their case it was commas in the topic breaking git-review instead of spaces20:03
clarkbfungi: could possibly test the version of gerrit and either fail with an error message or wrap with quoites20:03
ianwmordred: i don't think i'm seeing review01.openstack.org in the list.  which suggests it may not be in the letsencrypt group somehow.  was something changed there?20:04
fungiclarkb: yeah, i was leaning that direction, i don't think we currently branch behavior on gerrit versions so some care would be needed20:04
fungiianw: before earlier today we were using review01.opendev.org which did not match the ansible inventory entry for it20:05
*** jamesmcarthur has quit IRC20:08
*** pkopec has quit IRC20:10
clarkbianw: the files cleanup stack lgtm. I'll skip reviewing the haproxy changes20:10
*** ociuhandu_ has joined #openstack-infra20:11
clarkbI'm going to find lunch now. Then when I get back will try to catch up on some zuul reviews (there is an ha scheduelr spec to review)20:11
*** jamesmcarthur has joined #openstack-infra20:12
*** ociuhandu_ has quit IRC20:12
mordredianw:     - review[0-9]*.open*.org is in the group20:12
*** ociuhandu_ has joined #openstack-infra20:12
mordredianw: so one would _expect_ it to be in the group20:12
*** ociuhandu_ has quit IRC20:13
mordredianw: yeah - ansible --list-hosts letsencrypt shows it20:13
*** ociuhandu_ has joined #openstack-infra20:13
ianwfatal: [review01.openstack.org]: FAILED! => {"changed": false, "msg": "groupmod: GID '3001' already exists\n", "name": "letsencrypt"}20:14
mordredah20:14
ianwhrm, i wonder if that stopped things, and then it never registers the required variables for the renewal20:14
*** ociuhandu has quit IRC20:14
mordredk. that's likely from when we were doing it otherwise20:14
mordredlemme look real quick20:15
mordredclarkb gets a cookie for suggesting that might be an issue earlier :)20:15
mordredHAH20:15
mordredwe have a set of pre-existing groups there20:16
mordredlet me make quick patch20:16
ianwok, i think that's likely 1).  now for 2), why does LE not renew ...20:17
ianwi mean acme.sh not renew20:17
openstackgerritMonty Taylor proposed opendev/system-config master: Bump letsencrypt group id to match reality  https://review.opendev.org/70982620:17
mordredianw, clarkb: ^^ I think that should be 120:18
ianwahh i think there's stuff in /root/.acme.sh which keeps timestamps20:20
mordredianw: ah - fascinating20:22
*** ociuhandu_ has quit IRC20:23
ianwmordred: ahh, no i think the key file that drives everything is actually review-dev.opendev.org.conf, which happens to be the one file with a ".mt" extension :)20:27
*** ociuhandu has joined #openstack-infra20:27
ianwi've moved that and will watch the next ansible pulse20:28
mordredianw: cool. this is good to learn!20:30
*** eharney has joined #openstack-infra20:30
ianwi think ideally we should never have to learn this :)20:34
mordredianw: yah. but we know how well ideally works out :)20:37
*** smarcet has quit IRC20:37
*** smarcet has joined #openstack-infra20:37
*** ociuhandu has quit IRC20:40
*** ociuhandu has joined #openstack-infra20:44
ianwso in short, acme.sh updated the domain list in its config, but due to our orchestration failure, never issued the new certificate.  so then it has an updated domain list, but the old certificate; neither of which will trigger it to renew20:45
ianw(i.e. domains look unchanged, and old certificate still has plenty of time before renewal)20:45
mordredianw: super edge case20:45
*** slaweq_ has joined #openstack-infra20:47
*** ociuhandu_ has joined #openstack-infra20:50
*** matt_kosut has joined #openstack-infra20:51
*** pkopec has joined #openstack-infra20:52
*** ociuhandu has quit IRC20:53
*** rfolco has quit IRC20:54
*** matt_kosut has quit IRC20:56
*** ijw has joined #openstack-infra20:57
clarkbmordred: I've approved the LE gid change20:58
openstackgerritTobias Henkel proposed zuul/zuul master: Evaluate CODEOWNERS settings during canMerge check  https://review.opendev.org/64455720:59
openstackgerritTobias Henkel proposed zuul/zuul master: Refactor branch protection test infrastructure  https://review.opendev.org/70983420:59
openstackgerritTobias Henkel proposed zuul/zuul master: Test canMerge also with checks api  https://review.opendev.org/70983520:59
openstackgerritTobias Henkel proposed zuul/zuul master: Optimize canMerge using graphql  https://review.opendev.org/70983620:59
mordredclarkb: \o/20:59
clarkbmordred: why are https://review.opendev.org/#/c/709295/4/playbooks/zuul/gerrit/jgit.yaml and https://review.opendev.org/#/c/709295/4/playbooks/zuul/gerrit/polymer-bridges.yaml split out of the submodules.yaml?21:00
mordredclarkb: because we need one of them for 3.1 and both of them for master21:01
*** factor__ has joined #openstack-infra21:01
clarkboh I see21:01
clarkbwe apply them differently on the job side21:01
mordredclarkb: there is a first stab at a generic solution here: https://review.opendev.org/#/c/709602/21:01
mordredbut it's not working yet21:01
mordredand I haven't circled back around to debugging it yet21:02
*** jamesmcarthur has quit IRC21:03
*** icarusfactor has quit IRC21:04
*** slaweq_ has quit IRC21:04
*** ociuhandu_ has quit IRC21:08
*** ociuhandu has joined #openstack-infra21:08
*** igordc has quit IRC21:08
mordredclarkb: wow. "panic: template: repo/header:16: unexpected "}" in end"21:09
mordredclarkb: that's why the gitea job is bong21:09
openstackgerritMonty Taylor proposed opendev/system-config master: Upgrade gitea to 1.11.1  https://review.opendev.org/70580721:10
*** ociuhandu_ has joined #openstack-infra21:12
*** ociuhandu has quit IRC21:13
mordredclarkb: please to enjoy the difference between those two patches21:13
openstackgerritJeremy Stanley proposed opendev/system-config master: Correct openstackid tarball URL redirection  https://review.opendev.org/70983821:14
fungismarcet: that ^ should correct my mistake on the redirect21:14
fungiinfra-root: ^ quick brown-bag fix i've tested by hand on the server to make sure it does what we're needing21:15
clarkbfungi: huh does foo$.* parse properly?21:16
*** igordc has joined #openstack-infra21:16
clarkb(/.*|$) is probably how I would write it but if your version works good enough for me.21:16
smarcetfungi: thx u21:16
fungiclarkb: seems to. though i guess i could do (/.*|$) instead21:16
mordredo_O21:17
fungisure, i prefer that too in retrospect21:17
mordredoh - I guess yeah21:17
mordredend of line followed by zero of more of any character21:17
corvusmakes sense to me: end of string, followed by anything (which will never match)21:17
openstackgerritTobias Henkel proposed zuul/zuul master: Optimize canMerge using graphql  https://review.opendev.org/70983621:17
openstackgerritTobias Henkel proposed zuul/zuul master: Evaluate CODEOWNERS settings during canMerge check  https://review.opendev.org/64455721:17
mordredwould work - because there will be zero characters after eol21:17
mordredyeah21:17
openstackgerritJeremy Stanley proposed opendev/system-config master: Correct openstackid tarball URL redirection  https://review.opendev.org/70983821:17
mordredbut - I did have to run it through my internal regex engine21:17
*** igordc has quit IRC21:18
*** igordc has joined #openstack-infra21:18
*** jamesmcarthur has joined #openstack-infra21:18
fungii'd rather write it in a way which will confuse the fewest number of people (which will always be >>0 because regex)21:18
corvusi agree (/.*|$) seems more idiomatic -- but fungi's original is kinda growing on me.  i like that it lets you essentially terminate the machine early (especially if the machine is running in your head) and you don't have to confirm the alternative all the way to the end.21:18
fungithey're technically not equivalent in how $2 gets passed as a backreference, but we're not using $221:19
corvustrue21:19
*** ociuhandu_ has quit IRC21:20
corvusi've left the +3 vote; plenty of time to change our minds though21:20
fungiwhich is preferable depends on context, but here i don't think it matters either way so happy to go with consensus21:20
fungismarcet: anyway, hopefully that redirect wasn't the problem since i already updated the puppet module for the new url21:21
smarcetfungi: thx sire :)21:22
fungiyou're welcome21:24
*** pkopec has quit IRC21:25
*** igordc has quit IRC21:26
openstackgerritMerged opendev/system-config master: Bump letsencrypt group id to match reality  https://review.opendev.org/70982621:27
ianwinfra-root: mentioned in the meeting, but https://review.opendev.org/#/c/709382/ worked out pretty small as the POC for a zuul-based periodic job for 404's ... if we want to approve that i can trigger it for testing, as i'm not sure we've used this before so sure to be something up21:29
*** xek_ has quit IRC21:29
clarkbianw: I want to say we got far enough into doing that that using root was problematic, but I don't recall why21:32
clarkbianw: this precipitated my change to use a zuul user on bridge instead. Let me see if git logs can remind me why that was a problem21:32
clarkboh I remember21:32
clarkbianw: we disallow root ssh except from bridge :)21:32
ianwooohhhh doh, yeah21:32
*** bdodd has quit IRC21:34
ianwhow does zuul bounce through bridge?21:34
clarkbianw: well we never quite got that working, but the plan was to add a zuul user to bridge and then have jobs bounce through that way21:34
ianwi guess the other option is a user who can sudo with become: yes on this task21:34
clarkb(using the system-cofnig project key)21:34
clarkbso I guess we can try it that way instead. Have job addhost bridge then ansible to static from there21:35
clarkbor ya have a sudo able user on static that you can ssh with instead21:35
*** bdodd has joined #openstack-infra21:37
ianwi don't really see any advantage to going via bridge directly as root?  seems to open bridge up to more potential stuff-ups but not really be more secure?21:39
ianwmordred: cert got renewed.  http://review-dev.openstack.org didn't give any issues, which IIRC was the issue before?21:40
fungiianw: i agree with you on testinfra tests for additional legacy tarball redirects. have an example of a redirect test elsewhere? i'll go ahead and add this one to start it off21:41
*** bdodd has quit IRC21:41
ianwfungi: probably a model like https://review.opendev.org/#/c/709403/13/testinfra/test_static.py21:42
ianwfungi: (btw, review on that change welcome too :)21:43
*** mattw4 has quit IRC21:43
clarkbianw: it would be zuul -> bridge as zuul user; then as zuul user on bridge run ansible to static21:43
fungiianw: yup, on it, thanks!21:46
mordredianw: nope - it was https://review-dev.openstack.org  ... and that's still giving issues21:47
mordredianw: maybe apache graceful didn't fire?21:47
mordredianw: http://review-dev.openstack.org is fine because it just redirects straight to https://review-dev.opendev.org - but https://review-dev.openstack.org has to process the openstack.org cert before it can throw the redirect21:48
fungiianw: nice use of the macro feature in apache!21:48
corvusianw, clarkb: is a non-root user on static a possibility?21:49
clarkbcorvus: yup that was my suggsetion on the change itself21:49
ianwFeb 25 21:22:18 review-dev01 apache2[31004]: SSLCertificateKeyFile: file '/etc/letsencrypt-certs/review-dev.opendev.org/review-dev.opendev.org.key' does not exist or is empty21:49
fungiit just needs read access to the apache logs21:49
ianwcorvus: yeah, that's what i'm writing up now21:50
ianwmordred: ok, that file was renamed, i don't think we should have.  i put it back, restarted apache, and i *think* it work nows?21:52
ianwworks now even21:52
mordredianw: yes! I agree21:52
ianwsee, it's that easy :)21:53
*** ociuhandu has joined #openstack-infra21:55
*** ociuhandu has quit IRC22:00
*** ociuhandu has joined #openstack-infra22:03
openstackgerritIan Wienand proposed opendev/system-config master: static: add a periodic 404 checker  https://review.opendev.org/70938222:06
*** rfolco has joined #openstack-infra22:07
*** ociuhandu has quit IRC22:07
ianwclarkb: ^ i think that might even work22:08
*** jamesmcarthur has quit IRC22:08
clarkbianw: I've+2'd it but also left a testing suggestion22:08
*** factor__ has quit IRC22:11
mordredalso +2 with a comment - but I left it open because this feels like one of those that should get another eye or two on it22:11
*** factor has joined #openstack-infra22:12
clarkbmordred: that came up when we did this with bridge and I want to say one issue with it was applying multiple project keys. But since this is a single key we may be ok?22:12
clarkb(I ended up writing a thing to fetch the content in the multi key case iirc)22:13
mordrednod22:14
mordredianw: https://review.opendev.org/#/c/709038 should be ok to +A yeah?22:15
mordredianw: 2x+2 on that stack actually - so I think feel free to +A it when it makes sense22:16
*** mattw4 has joined #openstack-infra22:18
*** smarcet has quit IRC22:25
ianwmordred: thanks!22:26
mordredianw, fungi: https://review.opendev.org/#/c/705807/ is green now if we're in the mood to upgrade to 1.1122:26
*** dave-mccowan has joined #openstack-infra22:27
ianwmordred: hrm, i guess if we got it from the api as a string we could use the same mechanism to insert it, but maybe it's also better for us to know if it ever changed and  have to commit something?22:27
*** jamesmcarthur has joined #openstack-infra22:27
mordredianw: yeah - maybe so?22:27
mordredianw: at the very least - we might want to refactor zuul.yaml out into a role since it would be the same for any host we want to use from system-config22:28
mordredthat way we'd only have one copy of the public key22:29
ianwthat's a good point22:29
mordredcould be a followup though22:29
*** kvenkata has joined #openstack-infra22:29
fungimordred: any idea what new features in it are relying on npm?22:30
*** matt_kosut has joined #openstack-infra22:30
mordredianw: also - if you think about it - maybe a comment with the key data "this is the key from https://zuul.opendev.org/api/blah/blah ..."22:30
openstackgerritMerged opendev/system-config master: Correct openstackid tarball URL redirection  https://review.opendev.org/70983822:30
mordredfungi: I believe they changed their build to build web assets using javascript toolchain22:30
fungi(what the gitea build is incorporating via npm i mean22:30
fungik22:30
mordred(kind of like what we do with zuul-web)22:30
*** jamesmcarthur has quit IRC22:32
mordredwoohoo here we go!22:34
fungithis has got me stumped...22:35
fungihttps://opendev.org/osf/openstackid/src/branch/master/.zuul.yaml#L37-L3922:35
*** matt_kosut has quit IRC22:35
fungia 3.0.2 tag was pushed (tagging the commit which added those lines in fact)22:36
fungibut that job was not run in the release pipeline22:36
fungiwhat am i overlooking?22:36
mordredfungi: was the tag signed?22:36
fungiyeah22:38
*** mattw4 has quit IRC22:38
fungii'll check the scheduler logs22:38
openstackgerritJames E. Blair proposed zuul/zuul master: Store build.error_detail in SQL  https://review.opendev.org/70985722:39
*** migawa|lunch is now known as masayukig22:39
*** michael-beaver has joined #openstack-infra22:40
*** icarusfactor has joined #openstack-infra22:41
openstackgerritMerged zuul/zuul master: Add spec for scale out scheduler  https://review.opendev.org/62147922:41
*** factor has quit IRC22:42
fungizuul.layout: [e: 76c12b5d912b4313a722933b688c9d19] No matching parents for job openstackid-release-branch and change <Tag 0x7f2e7c2fd780 osf/openstackid creates refs/tags/3.0.2 on c1ffc5f31f8bbaf78e7b3755001be75c23a6844b>22:42
fungiit's parent is legacy-publish-openstack-artifacts, i wonder if that's got a branch matcher in it22:43
fungiindeed it does, there are two versions of that job, one for old openstack stable branches (to use xenial) and one for newer branches (to use bionic)22:45
fungiso it can't run from a trigger which isn't branch-relevant22:45
* fungi sighs22:45
*** mattw4 has joined #openstack-infra22:47
fungilooks like switching the parent to publish-openstack-artifacts ought to work22:48
*** ijw has quit IRC22:48
*** factor has joined #openstack-infra22:49
*** icarusfactor has quit IRC22:49
fungiunless the job relies on anything which gets done in playbooks/legacy/pre.yaml22:51
fungioh yeah, it's still using zuul-cloner22:51
fungii wonder if we have anything equivalent to legacy-publish-openstack-artifacts which is made for tags22:52
fungiseems the answer is no22:57
mordredfungi: you have found yourself a lovely rabbit hole!22:58
funginot one i was looking for either22:58
*** tkajinam has joined #openstack-infra22:58
*** factor has quit IRC23:06
*** factor has joined #openstack-infra23:06
fungiit's relying on https://opendev.org/openstack/openstack-zuul-jobs/src/branch/master/roles/legacy-copy-jenkins-scripts/files/version-properties.sh to set $PROJECT_VER23:07
*** kaisers has quit IRC23:08
*** smarcet has joined #openstack-infra23:08
*** kaisers has joined #openstack-infra23:09
fungiseems it and gearman-plugin are the only projects using it23:09
fungii don't suppose there's a more v3-native solution than the sieve of git --rev-parse and git describe mangles going on in there?23:10
openstackgerritMerged opendev/system-config master: Upgrade gitea to 1.11.1  https://review.opendev.org/70580723:17
openstackgerritMerged opendev/system-config master: static: add a periodic 404 checker  https://review.opendev.org/70938223:17
clarkbfungi: I don't think so in the non tag case23:19
clarkbfungi: for the tag case you just use the tag value23:20
*** dchen has joined #openstack-infra23:22
*** ijw has joined #openstack-infra23:25
*** ijw has quit IRC23:26
*** ijw has joined #openstack-infra23:26
fungihttps://review.opendev.org/709864 Migrate openstackid-release-branch to Zuul v323:26
fungiclarkb: ^ see if that makes sense or if you can think of further simplifications23:27
fungiobviously the same needs to be done for other in-tree jobs in that repo23:27
fungibut since we don't have a lot of php projects, i'd like to make sure this job is working before repeating23:27
openstackgerritIan Wienand proposed opendev/system-config master: zuul-user: add role to install system-config key  https://review.opendev.org/70986523:29
clarkbfungi: you removed the sudo access cleanup. Is that handled in pre on non legacy jobs?23:31
clarkb(its not critical either way I suppose)23:31
fungii think there's a role we can add for that if it's not already23:32
* fungi checks23:32
*** Goneri has quit IRC23:32
clarkbthat looks correct to me though23:33
clarkbbasically you remove the z-c stuff and use zuul's src_dir. Then build tarball an copy it into tarballs/ with version suffix and -latest suffix and finally rsync that data out into the artifacts dir on the executor and let the parent job publish23:34
fungiclarkb: it's not done by publish-openstack-artifacts that i can tell, but other jobs are parenting directly on publish-openstack-artifacts and not bothering with revoke-sudo23:34
clarkbok revoking sudo isn't super important there. The risk is that you'll need root to produce a tarball23:34
fungiseems fairly unlikely to become an issue23:36
fungithanks for looking it over!23:36
openstackgerritMerged opendev/system-config master: Revert "Generate list of 404s for docs.o.o"  https://review.opendev.org/70903823:39
ianwinfra-root: anyone for a quick eye on https://review.opendev.org/#/c/709402/ and that will switch docs.opendev.org to the new server23:39
*** rcernin has joined #openstack-infra23:39
mordred#status log opendev.org gitea has been upgraded to 1.11.123:40
openstackstatusmordred: finished logging23:40
openstackgerritIan Wienand proposed opendev/system-config master: static: add static.openstack.org/files.openstack.org  https://review.opendev.org/70904223:45
openstackgerritIan Wienand proposed opendev/system-config master: static: provide git services  https://review.opendev.org/70940323:45
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963923:45
openstackgerritMerged opendev/zone-opendev.org master: docs.opendev.org : switch to static.opendev.org  https://review.opendev.org/70940223:47
fungiand another one down23:47
ianwthanks :)23:50
ianwi've added all the _acme-challenge domains for the git and static services; only a trivial rebase on the testinfra stuff from the 404 checker23:51
clarkbianw: you saw my note about the project dns management being in rax too?23:51
* clarkb looks to see if new votes are needed23:52
*** tosky has quit IRC23:52
ianwclarkb: for openstack/starlingx/airhship?  yep i've logged in and created those cnames just now23:53
clarkbianw: https://review.opendev.org/#/c/709403/13..14/playbooks/roles/static/tasks/main.yaml that got rebase tags in it23:53
ianwboo emerge why did you fail me23:54
openstackgerritIan Wienand proposed opendev/system-config master: static: provide git services  https://review.opendev.org/70940323:56
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963923:56
fungiis it possible to reenqueue a tag after you've merged job changes and have those job changes take effect, or does zuul freeze the configuration from the point of that tag?23:58
clarkbfungi: I think my brain just melted23:59
fungii'm still getting No matching parents for job openstackid-release-branch and change <Tag 0x7f2de2ec5780 osf/openstackid creates refs/tags/3.0.2 on c1ffc5f31f8bbaf78e7b3755001be75c23a6844b>23:59
clarkbI think it may be relative to the tag23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!