Wednesday, 2024-07-24

cardoeInterestingly I'm getting "SYS336An existing hash value is updated because some system configuration items are changed." under Maintenance -> Lifecycle Log for those boxes.02:36
cardoeI've even tried "baremetal node passthru call <node> eject_vmedia"02:48
janderscardoe hmm I can't say I understand what's happening. I would try to 1) reset iDRAC 2) InsertMedia manually and see what happens06:39
jandersif it fails, it would be curious to see if 2) results in the same error as what Ironic is getting06:39
jandershttps://paste.opendev.org/show/biJ90eL92ZfMVJfU1fcf/ example InsertMedia query  from my notes06:42
jandersin case some details come in handy06:42
rpittaugood morning ironic! o/07:29
jandershey rpittau o/07:43
rpittauhey janders :)07:43
opendevreviewMichal Nasiadka proposed openstack/bifrost master: pip: Use SETUPTOOLS_USE_STDLIB if python < 3.12  https://review.opendev.org/c/openstack/bifrost/+/92482808:55
mnasiadkaGood morning Ironic09:02
opendevreviewMichal Nasiadka proposed openstack/bifrost master: pip: Use SETUPTOOLS_USE_STDLIB if python < 3.12  https://review.opendev.org/c/openstack/bifrost/+/92482809:14
opendevreviewMahnoor Asghar proposed openstack/ironic master: Log node UUID and not entire node instance  https://review.opendev.org/c/openstack/ironic/+/92483809:53
iurygregorygood morning Ironic11:08
masgharMorning!11:31
opendevreviewMahnoor Asghar proposed openstack/ironic master: Log node UUID and not entire node instance to avoid logging its driver_info field  https://review.opendev.org/c/openstack/ironic/+/92483811:55
opendevreviewMichal Nasiadka proposed openstack/networking-generic-switch master: Cumulus NVUE support  https://review.opendev.org/c/openstack/networking-generic-switch/+/90755112:16
TheJuliaGood morning13:02
iurygregorygood morning TheJulia =)13:13
masgharo/13:51
masgharI am trying to understand the failures in https://review.opendev.org/c/openstack/ironic/+/924838, and I suspect the ironic-tempest-uefi-redfish-vmedia, ironic-tempest-uefi-redfish-https and ironic-tempest-bios-ipmi-direct-tinyipa jobs are broken? Or these are temporary failures maybe?14:48
masgharI havent been able to find a proper error in the logs 14:48
iurygregorymasghar, "openstack-cli-server: 'object store account set --property Temp-URL-Key=secretkey' is not an openstack-cli-server command. See 'openstack-cli-server --help'."14:50
iurygregorythis is the problem 14:50
masghar...interesting14:51
iurygregorymaybe we need to change our script <thinking>14:51
masgharAs in the CI job script? or dev-scripts?14:51
cidGot the same failures, may be temporary.14:51
masgharYeah I saw your patch too cid14:52
iurygregorydev-scripts is metal3/openshift 14:52
iurygregoryit's the devstack script14:52
masgharoh sorry, yes. devstack then?14:52
iurygregoryyeah =)14:53
iurygregoryI've asked in openstacksdk to see if they merged something..14:56
rpittauit doesn't look like it14:58
rpittauwe're using openstackclient 6.6.0 that was released 4 months ago14:58
rpittaupuzzled...14:58
JayFCheck devstack config. There was a recent change to enable the CLI server.. it makes me wonder if somehow we're using something not supported in that mode14:59
rpittauah!14:59
masghar(That line is 3 years old in the devstack repo, its likely not the culprit by itself)15:00
clarkbmelwitt was looking into this yesterday. I'm not sure ifa ny progress was made15:01
rpittauwell next blame is aliens :)15:01
iurygregoryyeah15:01
iurygregoryJayF, do you have a link for that?15:01
iurygregorybecause it sounds like the culprit since it says "is not an openstack-cli-server command "15:02
iurygregorymaybe we can go with : "openstack-cli-server: false"15:04
masgharperhaps, but where?15:05
iurygregoryor spend time trying to understand if is the cli-server problem or our problem XD15:05
masgharyeah xD15:05
iurygregorymasghar, basically we need to override the service in our jobs, I'm already on it if we think is the path forward 15:06
clarkbthe cli-server significantly cuts down on job runtime by reusing tokens and avoiding recurring python startup costs for openstack commands15:06
clarkbso basically yes you could probably disable it and your jobs would avoid the issue but then your runtimes go back up15:06
clarkbif you figure out why it isn't working and fix it then you can have the best of both worlds15:06
melwittclarkb: I didn't figure out what is wrong with it unfortunately15:06
melwittI don't think the commands are from a separate library or at least I didn't find one15:07
rpittauyeah, disabling it would be temporary anyway, but we can do it to unblock the CI15:07
clarkbmelwitt: ya the next step may be to run the cli server and give it commands like that. Maybe it is a parsing thing with the osc shell?15:07
masgharI think I am in a relevant place? https://docs.openstack.org/python-openstackclient/pike/cli/command-objects/server.html15:12
masgharaside from the ancient version15:13
rpittaumasghar: except for the very old version, yes, for openstackclient15:13
rpittaualthough the openstack-cli-server code is here https://github.com/openstack/devstack/blob/master/files/openstack-cli-server/openstack-cli-server15:13
masgharthanks ^15:14
clarkbright openstack-cli-server is a small proxy for one off command to a long running osc shell15:22
clarkbso the way to try and reproduce this would be to start an osc shell and see if `object store account set --property Temp-URL-Key=secretkey` works as a command in that shell. Then work from tehre15:22
masgharIt...should as per the Pike docs 15:23
clarkbmasghar: those are server commands not object store commands but also pike is the wrong version15:24
clarkbI don't think the link you pointed to is related to this unless I'm missing something15:24
rpittauif you look at the logs it's working fine until we call object store https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_391/924838/2/check/ironic-tempest-uefi-redfish-vmedia/39105e3/controller/logs/screen-openstack-cli-server.txt15:25
masgharI saw this: https://docs.openstack.org/python-openstackclient/pike/cli/command-objects/object-store-account.html15:25
masgharclarkb: I cant seem to find the latest docs15:25
clarkbhttps://docs.openstack.org/python-openstackclient/latest/cli/command-objects/object-store-account.html15:25
masgharclarkb: thanks rpittau: true! 15:26
clarkband yes I agree the docs indicate this command should be valid15:26
rpittauI wonder if the missing cloud name is messing with the parsing15:27
rpittauhere https://github.com/openstack/devstack/blob/d84b874ef6fff88b93e9b0eab79dea6e6868f94f/lib/swift#L84515:29
masgharmaybe, because the other commands are providing the cloud name15:29
rpittauyep, exactly15:30
rpittauclarkb, melwitt, wdyt?15:30
clarkbmaybe? dansmith got the proxy working (though I'm not sure if he was the original author) and may know if that is expected15:31
melwittrpittau: I did think that looked wrong that the --os-cloud is empty. what error that would cause, I dunno off the top of my head15:32
dansmithis this an upload of something large to swift through stdin?15:33
dansmith(by chance)15:33
clarkbdansmith: no ist just trying to set a property15:33
clarkbon the account I think15:33
melwittwhen I do that locally on a devstack it does15:33
melwitt$ openstack --os-cloud '' server list15:33
melwittMissing value auth-url required for auth plugin password15:33
dansmithokay, I have literally not seen any failures other than the image upload from stdin thing I fixed15:33
dansmithbut you can't use the proxy to connect to a different --os-cloud of course,15:33
dansmithso if that is what it's trying to do, that won't work15:34
dansmithperhaps the shim needs to not use the proxy if you try to do something with a different account?15:34
dansmithwell, I guess I shouldn't say that for sure.. from memory, that won't work15:34
clarkboh that makes sense. This is modifying a swift account directly and not using the existing keystone credetnials so ya need an opt out maybe15:34
melwittthe error from the job is  "openstack-cli-server: 'object store account set --property Temp-URL-Key=secretkey' is not an openstack-cli-server command. See 'openstack-cli-server --help'."15:35
melwittand the command was openstack --os-cloud '' --os-region-name RegionOne --os-auth-url https://10.176.194.170/identity --os-username=swift --os-password=secretservice --os-user-domain-name=Default --os-project-name=service --os-project-domain-name=Default object store account set --property Temp-URL-Key=secretkey15:36
dansmithactually, looking at it, I think maybe I'm wrong and it can handle different accounts in a single session15:37
dansmithso "--os-cloud ''" means it's trying to null out --os-cloud yeah?15:38
melwittyeah it looks like empty string but I dunno if it's doing that on purpose15:38
masgharAccording to the devstack code, its on purpose15:38
melwittack thanks15:39
dansmithso I bet that it's getting lost and so it's calling --os-cloud=--os-region-name"15:39
masgharhttps://github.com/openstack/devstack/blob/d84b874ef6fff88b93e9b0eab79dea6e6868f94f/lib/swift#L84715:39
dansmithhowever, I definitely don't understand what that's supposed to do15:40
masgharsame15:43
rpittauok so this is interesting https://github.com/openstack/devstack/commit/f56f7a557ac4941b5204852f4173db9cf82b4dae15:43
rpittauI think that is supposed to be an override as devstack-admin is supposed to be used15:44
rpittaubut in this case it's not working?15:44
rpittaufrickler: hey I think you committed that, if you have a moment to shine some light there :)15:45
rpittaumaybe we can change that to something like ${OS_CLOUD:-""} ?15:46
frickleriiuc openstack-cli-server uses the authentication it was given when it was started, you cannot use other cloud credentials with it, I had a similar issue in my appcred patch15:53
fricklerso you'd have to call /usr/local/bin/openstack instead15:53
fricklercf. https://review.opendev.org/c/openstack/devstack/+/923944/4/lib/keystone#44715:54
rpittauoh wow so we need a bypass for that command in devstack15:54
rpittauthanks frickler 15:55
rpittaujust proposed this https://review.opendev.org/c/openstack/devstack/+/924867, if I got it right :)16:04
JayFit looks right to me16:05
JayFyou might wanna do a depends-on ironic change just for science?16:05
rpittauyep!16:05
opendevreviewRiccardo Pittau proposed openstack/ironic master: [DNM] TEST fix for swift tempurls function  https://review.opendev.org/c/openstack/ironic/+/92486816:07
dansmithfrickler: that's what I thought too, but note that it is passing those things through: https://github.com/openstack/devstack/blob/master/files/openstack-cli-server/openstack#L6916:10
rpittauthat was nice, been a while I haven't touched devstack :)16:10
rpittaugood night! o/16:10
dansmithand it's (at least trying to) set them for the new command: https://github.com/openstack/devstack/blob/master/files/openstack-cli-server/openstack-cli-server#L7216:11
masgharThanks everyone, see you tomorrow!16:42
fricklerdansmith: yes, I saw that, but it didn't work in my use case, didn't dig deeper yet18:08
dansmithack18:09
JayFJust got a demo of runbooks with cid; they are in very good shape, only one outstanding piece of feedback on the Ironic piece of the change, and one on the CLI piece of the change. Likely a good time for other reviewers to get a look.18:21
cid^ ++18:27
TheJuliacid: That sounds amazing!19:42
cidTheJulia: It does :D19:43
cidCurrently testing and also awaiting as many more eyes on it19:44
iurygregorygreat job cid o/19:50
iurygregorynext week I will probably have some time for reviews, still catching up on downstream tasks since i was on pto last week 19:50
cidtks19:51
iurygregorytime to drop today, bye everyone o/19:59
JayF\o20:01
cidI will join you. Bye people!20:07
opendevreviewJay Faulkner proposed openstack/ironic master: Support Automatic Lessee from instance metadata  https://review.opendev.org/c/openstack/ironic/+/92488722:47
JayFThat+Nova side are mostly done, need to be tested a bit in devstack, but I have a couple of open questions on that Ironic change -- even if you don't have time for a full review, if you could weigh in on those it'd be helpful :)22:52

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!