Thursday, 2019-04-04

*** sshnaidm_ has quit IRC00:25
*** sshnaidm has joined #zuul00:29
*** jamesmcarthur has joined #zuul00:34
*** jamesmcarthur has quit IRC00:58
*** jamesmcarthur has joined #zuul01:23
*** jamesmcarthur has quit IRC01:31
*** swest has quit IRC01:41
*** swest has joined #zuul01:57
*** bhavikdbavishi has joined #zuul02:06
*** bhavikdbavishi has quit IRC02:13
*** jamesmcarthur has joined #zuul02:29
*** bhavikdbavishi has joined #zuul02:45
*** bhavikdbavishi has quit IRC02:50
*** bhavikdbavishi has joined #zuul02:54
*** jamesmcarthur has quit IRC02:57
*** rlandy|bbl is now known as rlandy02:59
*** jamesmcarthur has joined #zuul03:17
*** jamesmcarthur has quit IRC03:22
*** rlandy has quit IRC03:47
*** jamesmcarthur has joined #zuul03:54
*** jamesmcarthur has quit IRC03:58
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: config: add tenant.toDict() method and REST endpoint  https://review.openstack.org/62134404:21
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: web: add config page  https://review.openstack.org/63366704:21
*** bjackman has joined #zuul04:21
*** jamesmcarthur has joined #zuul04:30
openstackgerritTristan Cacqueray proposed openstack-infra/zuul-jobs master: configure-pypi-mirrors: add initial role  https://review.openstack.org/58116504:35
*** pcaruana has joined #zuul04:58
*** quiquell|off is now known as quiquell05:46
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add some quoting in 'gerrit query' commands  https://review.openstack.org/64987905:49
*** quiquell is now known as quiquell|rover05:57
bjackmanSo, re my issue on the Gerrit event-stream format, seems gerrit has reported the approval values on every comment-added event since v2.1305:58
bjackmanSee https://gerrit.googlesource.com/gerrit/+/71b58990e9278e0d1128c396dd382a9a7cd5c6c905:59
bjackmanmordred, If you or anyone else are running Gerrit v2.14, would be great if you could double check that the comment-added gerrit trigger filtered on approvals is working as expected06:01
bjackmani.e. in my case on v2.17 if a change got Workflow +1 but failed gate tests, every subsequent comment in gerrit re-triggers gate tests because the comment-added event includes the pre-existing Workflow +1 approval06:02
SpamapSIncluding the failure comment zuul leaves? like, does it create a never ending test loop?06:20
*** quiquell|rover is now known as quiquell|brb06:23
bjackmanSpamapS, No it doesn't go into a loop06:28
bjackmanMaybe Zuul has a filter somewhere for comments written by itself?06:28
SpamapSPossibly06:29
* SpamapS barely knows Gerrit<->Zuul so it's hard to help much :-/06:29
*** gtema has joined #zuul06:48
*** jamesmcarthur has quit IRC06:52
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Cleanup executor specific requirements  https://review.openstack.org/64942806:58
*** hashar has joined #zuul07:04
*** quiquell|brb is now known as quiquell|rover07:08
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add support for 'oldValue' comment-added field  https://review.openstack.org/64990007:14
*** themroc has joined #zuul07:30
*** jpena|off is now known as jpena07:43
*** spsurya has joined #zuul07:55
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add some quoting in 'gerrit query' commands  https://review.openstack.org/64987908:28
*** jamesmcarthur has joined #zuul08:49
*** jamesmcarthur has quit IRC08:54
*** electrofelix has joined #zuul08:58
openstackgerritSimon Westphahl proposed openstack-infra/zuul master: Add proper __repr__ to merger repo  https://review.openstack.org/64994909:05
*** shachar has quit IRC10:09
*** shachar has joined #zuul10:09
*** bhavikdbavishi has quit IRC10:22
*** bjackman has quit IRC10:42
*** bjackman has joined #zuul10:43
*** jpena is now known as jpena|lunch10:58
*** zbr has quit IRC11:14
*** bhavikdbavishi has joined #zuul11:25
*** jamesmcarthur has joined #zuul11:30
*** zbr has joined #zuul11:31
*** jamesmcarthur has quit IRC11:34
*** quiquell|rover is now known as quiquell|rover|e11:40
*** quiquell|rover|e is now known as quique|rover|eat11:40
mordredbjackman: oh - so - in our gate config for openstack, we have our gate pipeline configured to leave a -211:41
*** shachar has quit IRC11:46
*** snapiri has joined #zuul11:46
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add support for 'oldValue' comment-added field  https://review.openstack.org/64990011:46
*** hashar has quit IRC11:52
*** rlandy has joined #zuul11:58
*** hashar has joined #zuul12:02
bjackmanmordred, can I see your config?12:10
mordredbjackman: https://opendev.org/zuul/project-config/src/branch/master/zuul.d/pipelines.yaml#L28-L6212:12
mordredthere's the one for the zuul tenant, which is a little cleaner12:12
*** quique|rover|eat is now known as quiquell|rover12:13
*** jamesmcarthur has joined #zuul12:18
bjackmanmordred, so as I understand the bug, I would expect every comment on a patch with Workflow +1 to trigger a re-gate12:18
bjackmanThe Verified -2 won't prevent it12:18
mordredI think it will - because a patch with verified -2 doesn't meet gerrit's approval criteria - so you shouldn't get approval payloads12:19
mordredalthough maybe that doesn't make any sense12:20
mordredbjackman: I'm still on my first coffee12:21
bjackman:D12:21
bjackmanmordred, yeah the approval fields in the event stream are irrespective of the submittability criteria12:21
mordredoh - also - there was something you asked like 2 days ago that I was going to tell you something, but then you were gone, then I was gone ... lemme see if I can find what it was12:21
*** jpena|lunch is now known as jpena12:22
mordredah! I found it: "bjackman | Or is there perhaps a way to run 'docker build' from the root of the Zuul ..."12:22
mordredbjackman: have you seen the image build jobs and/or the docs about getting them set up - we've got some really sexy docker image build jobs that do all the things you want them to do12:23
mordredbjackman: https://zuul-ci.org/docs/zuul-jobs/docker-jobs.html and https://zuul-ci.org/docs/zuul-jobs/docker-image.html12:23
bjackmanAh yeah I saw that, I was more thinking of something that I can use for a local development loop12:24
mordrednod12:24
bjackmanUnfortunately it seems like as soon as you touch any of the source files you have to totally rebuild the base docker image12:24
bjackmanWhich is not a very fun thing to do through the Great Firewall of Vietnam's bandwidth haze12:25
bjackmanSo I have settled again on taking the upstream image then pasting my modified Zuul code over the top :S12:26
bjackmanmordred, As for the trigger bug, I am starting to suspect that you are actually suffering from it but nobody ever notices. The only time you would notice would be if a patch failed gate checks and then some discussion took place in Gerrit before anyone uploaded a new patchset12:31
mordredbjackman: well that's what you get for not living in silicon valley with a fiber optic internet connection :)12:31
bjackmanmordred, of course :D12:31
mordredbjackman: that should be easy enough to verify ...12:32
bjackmanmordred, is there a sandbox repo or something?\12:32
*** jamesmcarthur has quit IRC12:32
bjackman(Or we could just do a leap of faith and Code-Review +2 Workflow +1 a known broken patch)12:32
mordredbjackman: https://review.openstack.org/#/c/649466/ failed in the gate12:33
mordredbjackman: I have just left a comment on it12:34
bjackmanAh awesome12:34
mordredbjackman: now - it's also possible that this won't show the issue you're talking about since I wasn't the one to have originally voted +A12:34
bjackmanI had a look for such a change but i guess my gerrit search-fu was lacking12:34
mordredso my comment may not have the +A vote in it12:34
mordredbut let's see12:34
bjackmanmordred, Ah yes, that is true12:34
bjackmanI think it needs to be corvus12:35
openstackgerritBrendan proposed openstack-infra/zuul master: Break stuff  https://review.openstack.org/64997612:38
openstackgerritFabien Boucher proposed openstack-infra/zuul master: A reporter for Elasticsearch with the capability to index build and buildset results in an index.  https://review.openstack.org/64492712:38
openstackgerritBrendan proposed openstack-infra/zuul master: Break stuff  https://review.openstack.org/64997612:39
bjackmanmordred, if you are brave you could try +1ing this: https://review.openstack.org/#/c/649976/112:39
mordredbjackman: nah - I think let's not do that in the zuul repo - we do have a sandbox repo we can use12:40
bjackmanOK12:40
mordredbjackman: https://opendev.org/openstack-dev/sandbox12:40
*** bhavikdbavishi has quit IRC12:41
bjackmanmordred, awesome will test there12:42
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631512:58
*** bjackman has quit IRC12:59
*** bjackman has joined #zuul13:02
bjackmanmordred, OK.. I didn't get an email, but when I load the change page at https://review.openstack.org/#/c/649980/1 I can briefly see a "Build failed" comment from Zuul, before the UI plugin kicks in and replaces it with the table view13:03
bjackmanSo I think the bug is there!13:03
bjackmanHmm actually, that is in the check pipeline13:03
*** themroc has quit IRC13:05
bjackmanAh yes now I have two emails13:05
bjackman mordred, Not sure how to find the pipeline config that's relevant to the sandbox project. But I commented again, and the check tests ran again.13:12
*** quiquell|rover is now known as quiquell|off13:13
*** bhavikdbavishi has joined #zuul13:14
mordredbjackman: https://opendev.org/openstack-infra/project-config/src/branch/master/zuul.d/pipelines.yaml#L58-L10213:18
mordredbjackman: however - yes - I do believe that is demonstrating the behavior you've been talking about13:19
*** bjackman has quit IRC13:19
mordredbjackman: the gate pipeline for openstack has a "Clean check" requiement - so if check isn't positive, if zuul wants to put it into the gate, it'll re-run check first13:19
mordredwhich is why you are seeing it run the check twice13:20
mordredso we've got it narrowed down to "if gate jobs fail and the person who approvied it leaves a follow up comment and keeps the +A vote in their followup comment, it will retrigger the gate jobs to run, but not on comments from other people"13:21
*** bjackman has joined #zuul13:37
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631513:38
*** bjackman has quit IRC13:45
*** bjackman has joined #zuul13:45
*** spsurya has quit IRC13:51
*** bhavikdbavishi has quit IRC13:51
*** altlogbot_2 has quit IRC13:54
*** bjackman has quit IRC13:56
*** bjackman has joined #zuul13:58
*** bjackman has quit IRC13:58
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631513:58
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Retrieve full list of jobs with details per tenant via API  https://review.openstack.org/63571413:58
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Add new merger job to get role definitions from a repository  https://review.openstack.org/63718113:58
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Provide roles per tenant via Zuul API  https://review.openstack.org/65001213:58
*** bjackman has joined #zuul13:58
*** bjackman has quit IRC14:02
*** bjackman has joined #zuul14:02
*** bjackman has quit IRC14:09
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Zuul CLI: allow access via REST  https://review.openstack.org/63631514:30
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Add new merger job to get role definitions from a repository  https://review.openstack.org/63718114:45
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Provide roles per tenant via Zuul API  https://review.openstack.org/65001214:45
*** hashar has quit IRC14:53
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Retrieve full list of jobs with details per tenant via API  https://review.openstack.org/63571415:01
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Add new merger job to get role definitions from a repository  https://review.openstack.org/63718115:01
openstackgerritFelix Schmidt proposed openstack-infra/zuul master: Provide roles per tenant via Zuul API  https://review.openstack.org/65001215:01
pabelangerHmm, I'm unsure why 2 master branches show up on the following zuul dashboard page: https://dashboard.zuul.ansible.com/t/ansible/project/ansible-network/windmill-config15:37
pabelangerlooks like the project config isn't merged properly15:38
clarkbpabelanger: I think they are from two different projects15:40
clarkbso its projectA/master projectB/master ?15:40
corvusthere's information missing from that page; we need to add the source context there15:41
corvuspabelanger: but it means that somewhere you have a project stanza that adds the 'ansible-python-jobs' template, and somewhere else you have a project stanza which adds the 'system-required' template15:41
pabelangerYah, that is correct. they are both defined in different projects15:44
pabelangerokay, that better explains it15:44
Shrewsianw: https://review.openstack.org/638533 has apparently had two +2's for over a month. :/  you ready for that to merge now?15:47
Shrewsalso, the zk auth review for nodepool (https://review.openstack.org/619155) has had my +2 for a couple of weeks. corvus, mordred, tobiash... interested in reviewing that?15:50
corvusyes!15:50
mordredShrews, corvus: https://review.openstack.org/#/c/640643/ also has 2 +2s now - shall we merge it too?15:51
Shrewsmordred: i'd like to review that one first... doing so soon15:51
*** sshnaidm_ has joined #zuul15:52
ShrewstristanC's openshift pod driver could also use a review15:53
Shrewshttps://review.openstack.org/59033515:53
*** sshnaidm has quit IRC15:54
clarkbre 638533 that is an improvement on some relatively new stats reporting so should be fairly safe to get in (we don't have to worry about people having used a stable metric name for 5 years)15:54
*** bhavikdbavishi has joined #zuul15:55
Shrewsclarkb: k. feel free to approve that then, if you wish15:55
clarkbya reviewing now to make sure I've not missed anything but can approve when done15:56
clarkbya its a slight change if you managed to find the new feature but I think this is a necessary update to reduce confusion around the metrics all being the same for the different formats15:57
clarkbconsidering it hasn't existed in that form for very long I think we can get it in now15:57
* clarkb approves15:57
*** jamesmcarthur has joined #zuul15:58
Shrewsmordred: approved15:59
Shrewsmordred: and commented about the start/stop methods16:00
*** yolanda has quit IRC16:33
*** electrofelix has quit IRC16:58
openstackgerritMerged openstack-infra/nodepool master: Remove TaskManager and just use keystoneauth  https://review.openstack.org/64064317:03
*** jpena is now known as jpena|off17:08
*** gtema has quit IRC17:14
*** bjackman has joined #zuul17:18
*** jamesmcarthur has quit IRC17:19
*** bjackman has quit IRC17:23
tobiashcorvus: I think I have an issue with an sql issue in provides/requires with postgres: http://paste.openstack.org/show/748883/17:25
tobiashcorvus: this exception bubbled up to the runhandler which effectively made zuul stop doing anything17:25
*** rlandy is now known as rlandy|ruck17:27
openstackgerritBrendan proposed openstack-infra/zuul master: gerrit: Add some quoting in 'gerrit query' commands  https://review.openstack.org/64987917:34
*** shachar has joined #zuul17:34
corvustobiash: i don't understand that error; does the table definition look correct?17:35
tobiashcorvus: I'm currently digging up the actual sql query so I can check that17:36
tobiashcorvus: but we should at least catch that exception so this doesn't block all of zuul17:36
corvustobiash: i wonder if we have pg tests for that, or are they only mysql17:37
corvusyeah17:37
*** snapiri has quit IRC17:37
corvusshould probably fail the whole buildset in that case17:37
*** spsurya has joined #zuul17:37
tobiashcorvus: the where clause on zuul_provides.name, should that be a string or a list of strings?17:38
openstackgerritMatthieu Huin proposed openstack-infra/zuul master: Proposed spec: tenant-scoped admin web API  https://review.openstack.org/56232117:40
tobiashcorvus: this is the query with a mark where I expect the error: http://paste.openstack.org/show/748887/17:40
tobiashcorvus: yeah, sql expects a string there and zuul put a tuple or list in there17:42
Shrewsi think you want to use IN there17:43
Shrewszuul_provides.name IN ('name1', 'name2')   ... or some such17:44
corvustobiash: i think i see the bug17:44
openstackgerritJames E. Blair proposed openstack-infra/zuul master: WIP: Fix SQL error when querying for tuples  https://review.openstack.org/65008617:46
corvustobiash, Shrews: ^ i think that's the bug -- my guess is we don't have a test case with two provides/requires so we're not hitting that17:46
tobiashcorvus: sounds reasonable, thanks a lot!17:46
Shrewsthat seems about right17:47
corvusi left a comment on that change pointing to the invocation17:47
corvusi'm unable to finish that change right now, so if anyone wants to continue working on it, feel free; otherwise i'll get back to it maybe this afternoon or tomorrow17:48
tobiashcorvus: thanks for the starter, I'll finish it17:49
corvustobiash: or perhaps in the mean time you may want to try that as an emergency patch :)17:49
tobiashmy emergency action was to dequeue the change and add a comment to not recheck :)17:50
corvusi think test_provides_requires_check_old_success may be a good candidate to expand the test for a second artifact17:50
*** sshnaidm_ is now known as sshnaidm|off17:50
corvustobiash: ^17:50
tobiashthanks, will do17:50
corvusok, really afk now17:50
openstackgerritDavid Shrewsbury proposed openstack-infra/nodepool master: Fix debug log message  https://review.openstack.org/65008818:05
Shrewssuper easy review ^^^18:06
openstackgerritMerged openstack-infra/nodepool master: Update dib stats  https://review.openstack.org/63853318:14
*** bhavikdbavishi has quit IRC18:22
corvusShrews: +2 on 619155, did not +3 because i'm about to go on vacation; feel free to do so of course18:35
corvusi guess you can read that 2 ways.  so... er, feel free to +3.  or feel free to go on vacation.  :)18:35
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008618:36
clarkbbut that or is an xor?18:36
corvus*absolutely*18:36
*** ChrisShort has joined #zuul18:37
tobiashcorvus: have a nice vacation :)18:38
corvusthanks!  i'm still around today and tomorrow; i just don't want to take on any ops duties that might extend past that18:38
tobiashah ok18:38
tobiashclarkb, corvus, Shrews: I added tests for 650086 so this should be ready for review18:40
*** hashar has joined #zuul18:42
openstackgerritMerged openstack-infra/nodepool master: doc: add provider driver development instructions  https://review.openstack.org/63959518:47
daniel2is there a way to make nodepool ignore SSL errors when connecting to a jenkins target?19:04
Shrewscorvus: what if i approve it, restart nodepool, and THEN IMMEDIATELY go on vacation too???19:05
Shrews:)19:05
tobiashShrews: that is a great idea :)19:06
Shrewsthe place i used to work for back when dinosaurs walked the earth had a guy that would religiously implement untested things in production every friday right before he left19:06
Shrewshe was a founder, so we couldn't say anything about it. just deal with the fallout19:07
tobiashoh, that's a bad combination19:07
Shrewshe also coded as root19:07
Shrewscorvus: nodepool's zuul-quick-start job seems to be failing a lot today19:12
Shrewshttp://logs.openstack.org/64/642964/1/gate/zuul-quick-start/31afd7b/job-output.txt.gz#_2019-04-04_18_35_46_75352719:13
pabelangerso, I am seeing something odd in my zuul scheduler debug logs, and unsure why I am seeing it.19:21
pabelangerfor example: http://paste.openstack.org/19:21
pabelangersorry19:21
pabelangerhttp://paste.openstack.org/show/748896/19:21
pabelangerI am unsure why those projects are showing up19:21
pabelangeras far as I can tell, I didn't add our github app to those repos19:22
openstackgerritMerged openstack-infra/nodepool master: Fix debug log message  https://review.openstack.org/65008819:29
mordredpabelanger: I was thinking that maybe something in a reverse search19:31
Shrewspabelanger: i'm suspected it's the "in:body" part of the query that's finding those. see: https://github.com/project-koku/korekuta/pull/57 as an example19:31
mordredpabelanger: but like, https://github.com/project-koku/korekuta/pull/5719:31
mordredShrews: jinx19:31
Shrewsi wish we had the github query logged so we could see change.uris values it's using there19:34
Shrews        pattern = ' OR '.join(change.uris)19:34
Shrews        query = '%s type:pr is:open in:body' % pattern19:34
mordredShrews: that's not a terrible idea19:36
pabelangerHmm, k, my brain isn't making the click right now.  But in https://github.com/project-koku/korekuta/pull/57 I don't see any reference to project-config19:36
Shrewsmordred: pabelanger: oh it's there!  self.log.debug("Ran search issues: %s", query)19:38
Shrewspabelanger: can you extract that?19:38
Shrewsshould be shortly after the "Found PR..." message19:39
pabelangersure, 1 sec19:39
pabelangerShrews: so, I see something like: http://paste.openstack.org/show/748899/19:42
pabelangerthen a large number of dynamically created queue19:43
Shrewsi put that in github.com search box and project-koku/korekuta is the first hit19:43
Shrewsfor SOME reason19:43
Shrewsthat being: https://github.com/search?q=github.com%2Fansible%2Fproject-config%2Fpull%2F30+type%3Apr+is%3Aopen+in%3Abody19:43
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Whitelist pageup and down keys in xterm  https://review.openstack.org/64969419:44
tobiashpabelanger: ^19:44
mordredShrews: maybe it's only looking for each of the tokens individually19:44
pabelangertobiash: thanks! will review shortly19:45
Shrewsmordred: maybe, but that would be super lame19:45
Shrewsor maybe the / character is being ignored/removed for the search19:47
Shrewsso that it becomes: github.com ansible project-config pull 3019:48
corvusif so, we probably need to perform our own filter on the returned results19:48
corvus"ansible" "project" and "config" are not very distinctive :)19:49
corvustobiash: i think the config in that provides/requires test is shared by another, so the other test needs updating too; are you fixing that or do you want me to take it over again?19:55
tobiashcorvus: just noticed that and already on it19:56
corvusk19:56
corvusShrews: have a link to a quickstart failure?19:56
Shrewscorvus: posted after my mention19:56
corvusderp19:56
corvusheh, i just found that change independently :)19:56
tobiashI'll unshare the 'both-user' so we have buildsets with one and buildsets with multiple requirements19:57
corvusk19:57
corvusShrews: the line you linked isn't actually the failure -- it's an ignored error.  it looks like that job failed because it hung here: http://logs.openstack.org/64/642964/1/gate/zuul-quick-start/31afd7b/job-output.txt.gz#_2019-04-04_18_35_46_79362419:59
corvusnote the two timestamps at the top there19:59
Shrewsyeah, wasn't sure if that error was an artifact of the timeout, or the cause of it, or even expected20:00
corvusShrews: tobiash noted that the job had been taking longer (mostly because the upstream ubuntu mirrors have been having problems).  the failures i have seen previously had more output though, so i'm not sure if that case is related to what tobiash observed, or something new.20:01
corvusregardless, he proposed https://review.openstack.org/649384 to deal with it temporarily20:01
corvusand started looking at https://review.openstack.org/649448 for a more long-term solution20:01
tobiashcorvus: didn't you propose a better fix using provides/requires?20:01
tobiashah that :)20:01
Shrewsi +3'd that20:02
corvusmeanwhile, i also have some changes which restructure that job to use the buildset registry, so it shouldn't actually build images anymore20:02
corvusthey hit some merge -2s, i'll kick them20:02
corvusmordred left a cryptic message on https://review.openstack.org/649466 : "test trigger issue"20:03
corvusi'm not sure if that was an analysis of the failure or....20:03
corvusit doesn't make sense that zuul-tox-remote would fail on that change, and it looks like it's just a busy system timeout, so i'll recheck it20:04
tobiashcorvus: I had the same thought20:05
corvusthere are 2 changes after that, then we'll have the new zuul-quick-start job20:05
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008620:05
mordredcorvus: that has nothing to do with anything20:06
corvusmordred: surrealist review comments?20:06
pabelangerI kinda got side tracked by the unknown projects in scheduler logs, but I was really trying to figure out why I'm getting to following error from zuul: Unable to freeze job graph: Project ansible/project-config is not allowed to run job windmill-config-deploy best I can see, I've defined allowed-projects correctly: https://github.com/ansible-network/windmill-config/blob/master/.zuul.d/jobs.yaml#L220:07
pabelangerI am starting to wonder if it is because the job has a secret20:07
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008620:08
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix SQL error when querying for tuples  https://review.openstack.org/65008620:08
* tobiash hates that .keep file...20:08
tobiashmordred: do you know if there's a way to tell yarn not to delete the .keep file?20:09
fungiopenstack feedback on zuul's oip confirmation was just sent to the foundation ml: http://lists.openstack.org/pipermail/foundation/2019-April/002747.html20:09
tobiashevery time I run yarn it deletes it and I accidentally add the removal of it to the next commit I do...20:10
corvuspabelanger: see paragraph 2 of https://zuul-ci.org/docs/zuul/user/config.html#attr-job.allowed-projects20:11
corvusand the big red box for the reason :)20:12
pabelangerHa, okay that is what I figured.20:12
pabelangerI can actually refactor that secret out, with the usuage of project ssh keys20:13
pabelangerusage*20:13
corvuspabelanger: i also discussed a potential change to that with logan- that might apply (where we could override that in a config project) but haven't implemented it yet20:14
pabelangerokay, cool. For now, I'll drop the secret usage and try again.20:20
*** jamesmcarthur has joined #zuul20:21
*** jamesmcarthur has quit IRC20:25
*** pcaruana has quit IRC20:29
*** pcaruana has joined #zuul20:30
pabelangertobiash: +2 works great, thanks20:33
pabelangerhttps://review.openstack.org/649694/ is anybody else would like to review for pgup / pgdn support in xterm.js20:33
openstackgerritMerged openstack-infra/zuul master: Increase timeout of zuul-quick-start  https://review.openstack.org/64938420:35
pabelangerHmm, I have a feeling out log streaming might only work if ansible_host is an IP address. Trying to confirm now.20:45
pabelangers/out/our20:46
SpamapScorvus: FYI, I moved us from a post pipeline (pushes and git hashes) to a promote pipeline (PRs close merged) last night, whith gate built images going live. It works great. Thanks for blazing that trail!20:46
corvusSpamapS: presentation time! :)20:47
mordredSpamapS: \o/20:47
pabelangermordred: am I reading http://git.zuul-ci.org/cgit/zuul/tree/zuul/ansible/base/callback/zuul_stream.py#n123 right, if ip is None, we'd raise an exception, and don't seem to use host, if able to resolve IP from it20:49
pabelangerthink that is what I am seeing currently20:50
pabelangerYah, that is the issue. Reverting back to ansible_host=<ip> fixes console streaming.20:52
pabelangerI'll try and work on a patch20:52
*** spsurya has quit IRC20:54
*** sshnaidm|off has quit IRC20:55
*** sshnaidm|off has joined #zuul20:58
*** mhu has quit IRC20:58
*** mhu has joined #zuul21:04
*** rlandy|ruck is now known as rlandy|ruck|brb21:21
daniel2I keep getting this with nodepool, cause we are using a self signed cert: SSLError: HTTPSConnectionPool(host='jenkins.*****', port=443): Max retries exceeded with url: /crumbIssuer/api/json (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))21:22
daniel2Not sure how to bypass this21:22
clarkbdaniel2: hrm when we used jenkins we used self signed certs too but it may have just worked due to old python's inability to check validity21:25
daniel2I added the cert to ubuntu's trust.21:25
daniel2But didn't help.21:25
clarkbdid you restart nodepool after that?21:25
clarkband I think you have to run a  ommand to rebuild the trust list too21:26
daniel2clarkb: did update-ca-certificates, restarted nodepool and builder, still fails.21:27
clarkbdoes openssl s_client work after that?21:28
daniel2clarkb: yeah, returns verified.21:29
mordredif you installed nodepool via pip, then the ubuntu ca update doesn't matter since it uses its own cert store21:30
clarkboh right python requests uses its own cert list21:30
mordredyeah21:30
mordredfor that I've lost track of the situation with how one might globally add one - I know that feeding a CA into the requests constructor works - but that might be too hidden to be useful21:31
openstackgerritMerged openstack-infra/zuul master: Use opendev docker jobs  https://review.openstack.org/64946621:31
daniel2I dont really want to directly modify nodepool's code.21:32
daniel2I did try it already, using verify=False to the Jenkins class21:33
daniel2But it didn't work.21:33
clarkbREQUESTS_CA_BUNDLE is the env var to set to an alternate path21:34
clarkbcan you try running nodepool with that set to the system store /etc/ssl/certs/ca-certificate21:34
clarkber ends with .crt suffix iirc21:35
daniel2clarkb: it was just /etc/ssl/certs, but that worked, thanks!21:36
clarkbyay21:37
*** rlandy|ruck|brb is now known as rlandy|ruck21:39
*** pcaruana has quit IRC21:51
*** hashar has quit IRC22:16
openstackgerritJames E. Blair proposed openstack-infra/zuul master: Use the buildset registry in zuul-quick-start  https://review.openstack.org/64946722:27
corvusShrews, mordred, tobiash: ^ there's the rebase of that due to the just-merged timeout increase; i removed the timeout increase, since the job no longer builds images22:28
ianwcorvus: are you around to help debug why the arm64 node isn't getting assigned for https://review.openstack.org/552700 right now?22:35
corvusianw: sure i can take a look22:37
ianwwe had an active xenail arm64 node, i even logged into it, so trying to figure out why it didn't take that22:38
*** mrhillsman_bbiab is now known as mrhillsman22:40
corvusmordred, Shrews: that's failing with: openstack.exceptions.SDKException: Error in creating the server22:53
corvusmordred, Shrews: full traceback: http://paste.openstack.org/show/748911/22:53
corvus(but of course, the installed version is different; that launcher was started on march 04)22:53
corvusmordred, Shrews: is it possible for openstacksdk to provide any more information in that case?22:54
corvusianw: ^22:54
mordredlooking22:54
corvusmaybe that's just sdk passing back what it got from nova... but it's unclear22:55
mordredyeah, this is what is happening. there are two possibilities22:55
mordredone is that we get ERROR back from nova, and also a json body with {'status': {'fault': 'some message'}}22:56
mordredif we get that, we include some message22:56
mordredthe error message will say "Error in creating the server. Compute service reports fault: {reason}"22:57
corvus(based on line numbers, i think we must be running 0.23.0)22:57
corvusmordred: so it looks like the other case -- server['status'] == ERROR but with no 'fault'22:58
mordredyeah22:58
mordredin that case, to the best of my current knowledge, there is nowhere else to look for information22:58
corvusmordred: any idea where this code moved to in master?22:58
corvusoh, maybe _compute.py?22:59
mordredyes. openstack/cloud/_compute.py22:59
mordredyeah22:59
mordredshould be the same code22:59
corvusmordred: remote:   https://review.openstack.org/650161 Expand on a brief error message23:01
mordredcorvus: ++23:01
corvusmordred: feel free to take that or leave it; that would have just assured me that we really did hit the case where the remote server said "nope go away"23:01
mordredcorvus: yeah - it's a fair thing to double check (sadly) given that there are at least a billion different places errors can come from - I'd also probably start debugging by looking to see if that was a masked exception :)23:02
*** rlandy|ruck is now known as rlandy23:03
corvusmordred: there are masked exceptions?23:03
corvusmordred: oh, or were you just saying you agree with my concern which lead to asking about the error23:03
mordredcorvus: no. but that doesn't mean I wouldn't check first to make sure there weren't23:03
mordredyeah23:04
corvusgotcha.  ++23:04
corvus(and, ftr, from what i can see of having just looked at that code, that's not the case here)23:04
mordredyeah. I'd be more concerned if it were an API call - because there are a gajillion different ways error messages come back from API calls23:05
mordredbut in this case the API is working and we have the server object - it's just an unhappy object23:05
ianwcorvus / modred: ok thanks, i'll update https://storyboard.openstack.org/#!/story/2005353 and already ahve a ticket open with linaro about it ... it looks like gema fell into the unregistered channel so i'll try to reach out23:40
openstackgerritMerged openstack-infra/zuul master: Use the buildset registry in zuul-quick-start  https://review.openstack.org/64946723:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!